ayo/ipex-llm
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

[PPML] Add UEFI warning (#6646)

Browse source 
* Add UEFI warning for attestation
This commit is contained in:
Qiyuan Gong 2022-11-17 08:51:51 +08:00 committed by GitHub
parent 34f20c01cc
commit b75f399038
1 changed files with 6 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
docs/readthedocs/source/doc/PPML/Overview/install.md
View file

@ -15,7 +15,7 @@
.. note:: .. note::
**Supported OS**: **Supported OS**:
PPML is thoroughly tested on Ubuntu (18.04/20.04), and should works fine on CentOS/Redhat 8. PPML is thoroughly tested on Ubuntu (18.04/20.04), and should works fine on CentOS/Redhat 8. Note that UEFI (Unified Extensible Firmware Interface) is required for remote attestation registration stage.
``` ```
#### Enable SGX for your Cluster #### Enable SGX for your Cluster
@ -36,7 +36,7 @@
Please refer to [Install SGX (Software Guard Extensions) Driver for Xeon Server](https://bigdl.readthedocs.io/en/latest/doc/PPML/QuickStart/install_sgx_driver.html). Please refer to [Install SGX (Software Guard Extensions) Driver for Xeon Server](https://bigdl.readthedocs.io/en/latest/doc/PPML/QuickStart/install_sgx_driver.html).
##### Install AESM ##### Install AESM (Architectural Enclave Service Manager)
```bash ```bash
echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list > /dev/null echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list > /dev/null
@ -76,11 +76,10 @@ Please refer to [Deploy the Intel SGX Device Plugin for Kubernetes](https://bigd
No. Please upgrade your OS if possible. No. Please upgrade your OS if possible.
2. Do we need Internet connection for SGX node? 2. Do we need Internet connection for SGX node?
No. We can use PCCS for registration and certificates downloading. Only PCCS need Internet connection. No. We can use PCCS for registration and certificate download. Only PCCS need Internet connection.
3. Does PCCS requires SGX? 3. Does PCCS require SGX or other hardware?
No. PCCS can be installed on any server with Internet connection. No. PCCS can be installed on any server with Internet connection.
4. Can we turn off attestation? 4. Can we turn off the attestation?
Of course. But, urnning off attestation will break integrity provided by SGX. Attestation is turned off to simplify installation for quick start. Of course. But, turning off attestation will break the integrity provided by SGX. Attestation is turned off to simplify installation for quick start.