can Enclave link librarys which is not in SDK/include?

[dai_c_]

Hello, I want to use the third-party libraries in enclave,Can I link the third-party static library(.a file) when compile enclave to generate enclave.so?

[Hoang_N_Intel · Accepted solution]

Yes, and please make sure all the library's dependencies are also included statically

[dai_c_]

OK,Thank you very much!

[Roshan_Mehta]

Suppose I have created a (rosheader.h) header file in /home/roshan/mylib/include directory

The static library(roslib.a) in /home/roshan/mylib 

I wanted to use this library inside the enclave, what I should I write in my makefile, I mean here:

A snippet of the makefile.

Enclave_Cpp_Files := Enclave/Enclave.cpp Enclave/Sealing/Sealing.cpp
# Enclave_Include_Paths := -IInclude -IEnclave -I$(SGX_SDK)/include -I$(SGX_SDK)/include/tlibc -I$(SGX_SDK)/include/stlport
Enclave_Include_Paths := -IEnclave -I$(SGX_SDK)/include -I$(SGX_SDK)/include/tlibc -I$(SGX_SDK)/include/stlport

Enclave_C_Flags := $(SGX_COMMON_CFLAGS) -nostdinc -fvisibility=hidden -fpie -fstack-protector $(Enclave_Include_Paths)
Enclave_Cpp_Flags := $(Enclave_C_Flags) -std=c++03 -nostdinc++
Enclave_Link_Flags := $(SGX_COMMON_CFLAGS) -Wl,--no-undefined -nostdlib -nodefaultlibs -nostartfiles -L$(SGX_LIBRARY_PATH) \
-Wl,--whole-archive -l$(Trts_Library_Name) -Wl,--no-whole-archive \
-Wl,--start-group -lsgx_tstdc -lsgx_tstdcxx -l$(Crypto_Library_Name) -l$(Service_Library_Name) -Wl,--end-group \
-Wl,-Bstatic -Wl,-Bsymbolic -Wl,--no-undefined \
-Wl,-pie,-eenclave_entry -Wl,--export-dynamic  \
-Wl,--defsym,__ImageBase=0

[you_w_]

Hi Roshan:

You can add "-L/home/roshan/mylib" in SGX_COMMON_CFLAGS and then add "-l/roslib.a" after "-Wl,--whole-archive -l$(Trts_Library_Name)". Have a try.

Regards 

you

[dai_c_]

I think you  should add include path and link flags to use your static lib

Enclave_Include_Paths := -IEnclave -I$(SGX_SDK)/include -I$(SGX_SDK)/include/tlibc -I$(SGX_SDK)/include/stlport -I /home/roshan/mylib/include

and the link flags as follows:

Enclave_Link_Flags := $(SGX_COMMON_CFLAGS) -Wl,--no-undefined -nostdlib -nodefaultlibs -nostartfiles -L$(SGX_LIBRARY_PATH) -L /home/roshan/mylib \

-Wl,--whole-archive -l$(Trts_Library_Name) -Wl,--no-whole-archive \

-Wl,--start-group -lsgx_tstdc -lsgx_tstdcxx -l$(Crypto_Library_Name) -l$(Service_Library_Name) -l roslib -Wl,--end-group \

-Wl,-Bstatic -Wl,-Bsymbolic -Wl,--no-undefined \

-Wl,-pie,-eenclave_entry -Wl,--export-dynamic  \

-Wl,--defsym,__ImageBase=0 \

-Wl,--version-script=Enclave/Enclave.lds

[dai_c_]

Hoang Nguyen (Intel) wrote:

Yes, and please make sure all the library's dependencies are also included statically

Hello,when I want to use SGX to protect a part of project, if I move the code in enclave,the workload is heavy,and can I compile the part code into static lib,and my enclave link the static lib,can this way achieves the same goal as move the code in enclave?