[PPML] Add mermaid to deployment and installation doc (#6497)
* Fix deployment doc mermaid. * Add PCCS network to installation doc.
This commit is contained in:
parent
4403c7727f
commit
a46618844f
2 changed files with 33 additions and 15 deletions
|
|
@ -45,15 +45,31 @@ sudo apt update
|
|||
sudo apt-get install libsgx-urts libsgx-dcap-ql libsgx-dcap-default-qpl
|
||||
```
|
||||
|
||||
##### Install PCCS (for attestation)
|
||||
##### Install PCCS (Provisioning Certificate Caching Service) (for attestation)
|
||||
|
||||
Please refer to [Intel® Software Guard Extensions Data Center Attestation Primitives (Intel® SGX DCAP): A Quick Install Guide](https://www.intel.com/content/www/us/en/developer/articles/guide/intel-software-guard-extensions-data-center-attestation-primitives-quick-install-guide.html)
|
||||
|
||||
Note that PCCS requires Internet connection for downloading certificates from Intel PCS. PCCS is fully [open sourced on Github](https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/master/QuoteGeneration/pccs), you can build your own PCCS based on these codes.
|
||||
|
||||
```eval_rst
|
||||
.. mermaid::
|
||||
|
||||
graph BT
|
||||
pcs(Intel PCS) --> PCCS
|
||||
PCCS --> pcs
|
||||
subgraph Internet
|
||||
pcs
|
||||
end
|
||||
subgraph Data Center
|
||||
PCCS --> sgx(SGX Server)
|
||||
sgx --> PCCS
|
||||
end
|
||||
```
|
||||
|
||||
##### Install Kubernetes SGX Plugin (K8S only)
|
||||
|
||||
Please refer to [Deploy the Intel SGX Device Plugin for Kubernetes](https://bigdl.readthedocs.io/en/latest/doc/PPML/QuickStart/deploy_intel_sgx_device_plugin_for_kubernetes.html).
|
||||
|
||||
|
||||
### FAQs
|
||||
|
||||
1. Is SGX supported on CentOS 6/7?
|
||||
|
|
|
|||
|
|
@ -20,19 +20,21 @@ Due to security and privacy considerations (e.g., `enclave-key` security), only
|
|||
|
||||
You can find more details in [Intel SGX Developer Guide](https://download.01.org/intel-sgx/linux-1.5/docs/Intel_SGX_Developer_Guide.pdf).
|
||||
|
||||
```mermaid
|
||||
graph LR
|
||||
subgraph SGX enclave
|
||||
MRENCLAVE(fa:fa-file-signature MRENCLAVE)
|
||||
MRSIGNER(fa:fa-file-signature MRSIGNER)
|
||||
end
|
||||
subgraph enclave-key
|
||||
private_key(fa:fa-key private key)
|
||||
public_key(fa:fa-key public key)
|
||||
end
|
||||
private_key --> MRENCLAVE
|
||||
ppml_application(PPML Applicaiton) --> MRENCLAVE
|
||||
public_key --> MRSIGNER
|
||||
|
||||
```eval_rst
|
||||
.. mermaid::
|
||||
graph LR
|
||||
subgraph SGX enclave
|
||||
MRENCLAVE(fa:fa-file-signature MRENCLAVE)
|
||||
MRSIGNER(fa:fa-file-signature MRSIGNER)
|
||||
end
|
||||
subgraph enclave-key
|
||||
private_key(fa:fa-key private key)
|
||||
public_key(fa:fa-key public key)
|
||||
end
|
||||
private_key --> MRENCLAVE
|
||||
ppml_application(PPML Applicaiton) --> MRENCLAVE
|
||||
public_key --> MRSIGNER
|
||||
```
|
||||
|
||||
In this guide, we will demonstrate how to go through these 2 stages step by step.
|
||||
|
|
|
|||
Loading…
Reference in a new issue