Installing secGear

Arm Platform

Environment Requirements

Hardware Environment

Note:

• The server must have built-in TrustZone Kit, that is, TEE OS, TEE OS boot key, BMC, BIOS, and license.
• TrustZone Kit cannot be enabled on a common server by only upgrading BMC, BIOS, and TEE OS firmware.
• TrustZone Kit is disabled on the servers by default. Enable TrustZone Kit by referring to the BIOS manual.

OS

openEuler 20.03 LTS SP2 or later

openEuler 22.09

openEuler 22.03 LTS or later

Environment Preparation

For details, see Environment Requirements and Procedure on the Kunpeng community website.

Installation Procedure

1. Configure an online or locally mounted openEuler Yum repository. An example online Yum repository configuration is as follows (replace 22.03-LTS with the actual version):

   $ vi openEuler.repo 
   [osrepo]
   name=osrepo
   baseurl=http://repo.openeuler.org/openEuler-22.03-LTS/everything/aarch64/
   enabled=1
   gpgcheck=1
   gpgkey=http://repo.openeuler.org/openEuler-22.03-LTS/everything/aarch64/RPM-GPG-KEY-openEuler
   

2. Install secGear.

   # Install build tools.
   $ yum install cmake ocaml-dune
   
   # Install secGear.
   $ yum install secGear-devel
   
   # Verify the installation.
   $ rpm -qa | grep -E 'secGear|itrustee|ocaml-dune'
   itrustee_sdk-xxx
   itrustee_sdk-devel-xxx
   secGear-xxx
   secGear-devel-xxx
   ocaml-dune-xxx
   

x86 Platform

Environment Requirements

Hardware Environment

The processor must support the Intel SGX feature.

OS

openEuler 20.03 LTS SP2 or later

openEuler 22.09

openEuler 22.03 LTS or later

Environment Preparation

Enable the Intel SGX feature by referring to the BIOS manual.

Installation Procedure

1. Configure an online or locally mounted openEuler Yum repository. An example online Yum repository configuration is as follows (replace 22.03-LTS with the actual version):

   vi openEuler.repo 
   [osrepo]
   name=osrepo
   baseurl=http://repo.openeuler.org/openEuler-22.03-LTS/everything/x86_64/
   enabled=1
   gpgcheck=1
   gpgkey=http://repo.openeuler.org/openEuler-22.03-LTS/everything/x86_64/RPM-GPG-KEY-openEuler
   

2. Install secGear.

   # Install build tools.
   $ yum install cmake ocaml-dune
   
   # Install secGear.
   $ yum install secGear-devel
   
   # Verify the installation.
   $ rpm -qa | grep -E 'secGear|ocaml-dune|sgx'
   secGear-xxx
   secGear-devel-xxx
   ocaml-dune-xxx
   libsgx-epid-xxx
   libsgx-enclave-common-xxx
   libsgx-quote-ex-xxx
   libsgx-aesm-launch-plugin-xxx
   libsgx-uae-service-xxx
   libsgx-ae-le-xxx
   libsgx-urts-xxx
   sgxsdk-xxx
   sgx-aesm-service-xxx
   linux-sgx-driver-xxx
   libsgx-launch-xxx