Re: [PATCH v12 00/18] Enable FSGSBASE instructions

From: Don Porter
Date: Thu May 28 2020 - 13:37:37 EST


On 5/26/20 6:51 PM, Sasha Levin wrote:
On Tue, May 26, 2020 at 06:03:35PM -0400, Don Porter wrote:
On 5/26/20 4:27 PM, Sasha Levin wrote:
I'm really worried about the disconnect between how you view the current
state of Graphene (and the industry) vs Intel and the various cloud
providers.


Sorry, I wasn't trying to suggest that all cloud vendors are pushing
Graphene, but rather than SGX enabled platforms became a commodity
product, users will end up using Graphene-like applications.

Let me provide an example:
https://www.alibabacloud.com/blog/protecting-go-language-applications-with-the-graphene-library-os-on-intel%C2%AE-sgx%C2%AE-secured-alibaba-cloud_594889
- a "practical" guide on how to run Graphene in production environment
 on one of the big cloud vendor platforms.

You have convinced me there is a concerning disconnect here, and we need to be proactive as a project to correct this. We are adding warnings to the project with all due haste.