[PPML] Refine install SGX driver from Kernel document (#5978)
* Add Mellanox issue * Add SYSTEM_REVOCATION_KEYS issue * Fix typo * Add libelf-dev
This commit is contained in:
		
							parent
							
								
									79f29244d8
								
							
						
					
					
						commit
						97b925e584
					
				
					 1 changed files with 10 additions and 7 deletions
				
			
		| 
						 | 
					@ -1,16 +1,16 @@
 | 
				
			||||||
# Building Linux Kernel from Source with SGX Enabled
 | 
					# Building Linux Kernel from Source with SGX Enabled
 | 
				
			||||||
 | 
					
 | 
				
			||||||
SGX driver is merged to Linux Kernel from 5.11+. After enable SGX feature during kernel building, we don't have to install SGX driver anymore.
 | 
					SGX driver is merged to Linux Kernel from 5.11+. After enabling SGX feature during kernel building, we don't have to install SGX driver anymore.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
In this guide, we show how to build Kernel 5.14 from souce and enable SGX feature on Ubuntu 18.04. You can change kernel version, i.e., 5.14 if necessary.
 | 
					In this guide, we show how to build Kernel 5.14 from source code and enable SGX feature on Ubuntu 18.04. You can change the kernel version, i.e., 5.14 if necessary.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
## Prerequisite
 | 
					## Prerequisite
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Install prerequites for kernel build. Please follow your distro instruction or your favorite way to build kernel.
 | 
					Install prerequisites for kernel build. Please follow your distro instruction or your favorite way to build the kernel.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
```
 | 
					```
 | 
				
			||||||
sudo apt-get install flex bison git build-essential kernel-package fakeroot libncurses5-dev libssl-dev ccache
 | 
					sudo apt-get install flex bison git build-essential kernel-package fakeroot libncurses5-dev libssl-dev ccache libelf-dev
 | 
				
			||||||
 | 
					
 | 
				
			||||||
```
 | 
					```
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -46,7 +46,7 @@ sudo dpkg -i linux-headers-5.14.0_5.14.0-1_amd64.deb linux-image-5.14.0_5.14.0-1
 | 
				
			||||||
sudo reboot
 | 
					sudo reboot
 | 
				
			||||||
```
 | 
					```
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Check if kernel was installed correctly and the SGX driver is working
 | 
					Check if Kernel was installed correctly and the SGX driver is working
 | 
				
			||||||
 | 
					
 | 
				
			||||||
```bash
 | 
					```bash
 | 
				
			||||||
$ uname -r
 | 
					$ uname -r
 | 
				
			||||||
| 
						 | 
					@ -55,7 +55,7 @@ $ ls -l /dev/ | grep sgx
 | 
				
			||||||
 | 
					
 | 
				
			||||||
## Uninstall this kernel
 | 
					## Uninstall this kernel
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Uninstall kernel with dpkg (if you want to change back to previous kernel)
 | 
					Uninstall kernel with dpkg (if you want to change back to the previous kernel)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
```bash
 | 
					```bash
 | 
				
			||||||
sudo dpkg --purge linux-image-5.14.0 linux-headers-5.14.0
 | 
					sudo dpkg --purge linux-image-5.14.0 linux-headers-5.14.0
 | 
				
			||||||
| 
						 | 
					@ -64,6 +64,9 @@ sudo reboot
 | 
				
			||||||
 | 
					
 | 
				
			||||||
### Trouble Shooting
 | 
					### Trouble Shooting
 | 
				
			||||||
 | 
					
 | 
				
			||||||
* Building on Ubuntu 5.4.X may encounter "make[2]: *** No rule to make target 'debian/certs/benh@debian.org.cert.pem', needed by 'certs/x509_certificate_list'.  Stop.". Pls refer to [CONFIG_SYSTEM_TRUSTED_KEYS](https://askubuntu.com/questions/1329538/compiling-the-kernel-5-11-11).
 | 
					* Building on Ubuntu 5.4.X may encounter
 | 
				
			||||||
 | 
						* "make[2]: *** No rule to make target 'debian/certs/benh@debian.org.cert.pem', needed by 'certs/x509_certificate_list'.  Stop.". Please disable `SYSTEM_TRUSTED_KEYS`. Refer to [CONFIG_SYSTEM_TRUSTED_KEYS](https://askubuntu.com/questions/1329538/compiling-the-kernel-5-11-11).
 | 
				
			||||||
 | 
						* "make[4]: *** No rule to make target 'debian/canonical-revoked-certs.pem', needed by 'certs/x509_revocation_list'.  Stop.". Please disable `SYSTEM_REVOCATION_KEYS`.
 | 
				
			||||||
* In some kernels, SGX option is `CONFIG_INTEL_SGX`.
 | 
					* In some kernels, SGX option is `CONFIG_INTEL_SGX`.
 | 
				
			||||||
* 5.13 Kernel may encounter nfs problem [Can't mount NFS-shares from Linux-5.13.0](https://forums.gentoo.org/viewtopic-p-8629887.html?sid=f7359b869fb71849d64f3e69bb48503a)
 | 
					* 5.13 Kernel may encounter nfs problem [Can't mount NFS-shares from Linux-5.13.0](https://forums.gentoo.org/viewtopic-p-8629887.html?sid=f7359b869fb71849d64f3e69bb48503a)
 | 
				
			||||||
 | 
					* [Mellanox interface may be disabled on 5.14.0](https://bugzilla.redhat.com/show_bug.cgi?id=2014094). Changes to 5.15.5 will fix this issue.
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in a new issue