Merge pull request #146 from keystone-enclave/improved_enclave_lifecycle

Improved enclave lifecycle

docs/source/Security-Monitor/enclave_lifecycle.dot

@@ -0,0 +1,15 @@
+digraph G {
+    node [color=gray]
+    Invalid -> Allocated [color=blue,label="allocate_eid\n(create_enclave)"];
+    node [color=orange]
+    Allocated -> Fresh [color=orange,label="create_enclave\nafter\nvalidate and hash"];
+    node [color=red]
+    Allocated -> Destroying [color=red,label="destory_enclave\n(first step)"];
+    node [color=green]
+    Fresh -> Running [color=green,label="run_enclave"];
+    Fresh -> Destroying [color=red,label="destory_enclave\n(first step)"];
+    Running -> Stopped [color=yellow1,label="exit/stop_enclave"];
+    Stopped -> Running [color=green,label="resume_enclave"];
+    Stopped -> Destroying [color=red,label="destory_enclave\n(first step)"];
+    Destroying -> Invalid [color=gray,label="free_eid\n(destory_enclave\nlast step)"];
+}

docs/source/Security-Monitor/index.rst

@@ -188,3 +188,8 @@ Side-Channel Defense
 -------------------------------------
 
 The :doc:`FU540<FU540>` module supports cache side-channel defenses.
+
+Current Enclave Lifecycle
+-------------------------------------
+
+.. graphviz:: enclave_lifecycle.dot

docs/source/conf.py

@@ -15,7 +15,11 @@
 # import os
 # import sys
 # sys.path.insert(0, os.path.abspath('.'))
+import sys, os
 
+sys.path.append(os.path.abspath('sphinxext'))
+
+extensions = ['sphinx.ext.graphviz']
 
 # -- Project information -----------------------------------------------------