1 // SPDX-License-Identifier: GPL-2.0
11  * -----
19  * https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html#cpu-lists
26  *	echo <cpu-list> > /sys/module/nitro_enclaves/parameters/ne_cpus
46  * https://www.kernel.org/doc/html/latest/admin-guide/mm/hugetlbpage.html
52  *	/sys/devices/system/node/node<X>/hugepages/hugepages-2048kB/nr_hugepages
53  *	/sys/devices/system/node/node<X>/hugepages/hugepages-1048576kB/nr_hugepages
58  *	/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages
59  *	/sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages
65  *	make -C samples/nitro_enclaves clean
66  *	make -C samples/nitro_enclaves
80 #include <poll.h>
96  * NE_DEV_NAME - Nitro Enclaves (NE) misc device that provides the ioctl interface.
101  * NE_POLL_WAIT_TIME - Timeout in seconds for each poll event.
105  * NE_POLL_WAIT_TIME_MS - Timeout in milliseconds for each poll event.
110  * NE_SLEEP_TIME - Amount of time in seconds for the process to keep the enclave alive.
115  * NE_DEFAULT_NR_VCPUS - Default number of vCPUs set for an enclave.
120  * NE_MIN_MEM_REGION_SIZE - Minimum size of a memory region - 2 MiB.
125  * NE_DEFAULT_NR_MEM_REGIONS - Default number of memory regions of 2 MiB set for
131  * NE_IMAGE_LOAD_HEARTBEAT_CID - Vsock CID for enclave image loading heartbeat logic.
135  * NE_IMAGE_LOAD_HEARTBEAT_PORT - Vsock port for enclave image loading heartbeat logic.
139  * NE_IMAGE_LOAD_HEARTBEAT_VALUE - Heartbeat value for enclave image loading.
144  * struct ne_user_mem_region - User space memory region set for an enclave.
154  * ne_create_vm() - Create a slot for the enclave VM.
166 	int rc = -EINVAL;  in ne_create_vm()
190  * ne_poll_enclave_fd() - Thread function for polling the enclave fd.
202 	int rc = -EINVAL;  in ne_poll_enclave_fd()
204 	printf("Running from poll thread, enclave fd %d\n", enclave_fd);  in ne_poll_enclave_fd()
213 		rc = poll(fds, 1, NE_POLL_WAIT_TIME_MS);  in ne_poll_enclave_fd()
215 			printf("Error in poll [%m]\n");  in ne_poll_enclave_fd()
223 			printf("Poll: %d seconds elapsed\n",  in ne_poll_enclave_fd()
229 		printf("Poll received value 0x%x\n", fds[0].revents);  in ne_poll_enclave_fd()
248  * ne_alloc_user_mem_region() - Allocate a user space memory region for an enclave.
262 	ne_user_mem_region->userspace_addr = mmap(NULL, ne_user_mem_region->memory_size,  in ne_alloc_user_mem_region()
265 						  MAP_HUGETLB | MAP_HUGE_2MB, -1, 0);  in ne_alloc_user_mem_region()
266 	if (ne_user_mem_region->userspace_addr == MAP_FAILED) {  in ne_alloc_user_mem_region()
269 		return -1;  in ne_alloc_user_mem_region()
276  * ne_load_enclave_image() - Place the enclave image in the enclave memory.
290 	int enclave_image_fd = -1;  in ne_load_enclave_image()
299 	int rc = -EINVAL;  in ne_load_enclave_image()
317 		return -ENOMEM;  in ne_load_enclave_image()
357 		return -1;  in ne_load_enclave_image()
370 			temp_image_offset -= memory_size;  in ne_load_enclave_image()
375 			memory_size -= temp_image_offset;  in ne_load_enclave_image()
379 		remaining_bytes = enclave_image_size - image_written_bytes;  in ne_load_enclave_image()
400  * ne_set_user_mem_region() - Set a user space memory region for the given enclave.
416 	int rc = -EINVAL;  in ne_set_user_mem_region()
492  * ne_free_mem_regions() - Unmap all the user space memory regions that were set
508  * ne_add_vcpu() - Add a vCPU to the given enclave.
511  *			auto-generated (if provided vCPU id is 0).
520 	int rc = -EINVAL;  in ne_add_vcpu()
572  * ne_start_enclave() - Start the given enclave.
583 	int rc = -EINVAL;  in ne_start_enclave()
641  * ne_start_enclave_check_booted() - Start the enclave and wait for a hearbeat
654 	int client_vsock_fd = -1;  in ne_start_enclave_check_booted()
658 	int rc = -EINVAL;  in ne_start_enclave_check_booted()
665 	int server_vsock_fd = -1;  in ne_start_enclave_check_booted()
700 	rc = poll(fds, 1, NE_POLL_WAIT_TIME_MS);  in ne_start_enclave_check_booted()
702 		printf("Error in poll [%m]\n");  in ne_start_enclave_check_booted()
708 		printf("Poll timeout, %d seconds elapsed\n", NE_POLL_WAIT_TIME);  in ne_start_enclave_check_booted()
710 		rc = -ETIMEDOUT;  in ne_start_enclave_check_booted()
716 		printf("Poll received value %d\n", fds[0].revents);  in ne_start_enclave_check_booted()
718 		rc = -EINVAL;  in ne_start_enclave_check_booted()
769 	int enclave_fd = -1;  in main()
771 	int ne_dev_fd = -1;  in main()
774 	int rc = -EINVAL;  in main()