install_host_verify_Ubuntu_20.04.md

Install the Open Enclave Host-Verify SDK (Ubuntu 20.04)

Platform requirements

• Ubuntu 20.04-LTS 64-bit.

1. Configure the Intel and Microsoft APT Repositories

echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo apt-key add -

echo "deb http://apt.llvm.org/focal/ llvm-toolchain-focal-11 main" | sudo tee /etc/apt/sources.list.d/llvm-toolchain-focal-11.list
wget -qO - https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -

echo "deb [arch=amd64] https://packages.microsoft.com/ubuntu/20.04/prod focal main" | sudo tee /etc/apt/sources.list.d/msprod.list
wget -qO - https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -

sudo apt update

2. Install the Intel and Open Enclave Host-Verify packages and dependencies

sudo apt -y install clang-11 libssl-dev gdb libprotobuf17 libsgx-dcap-ql libsgx-dcap-ql-dev az-dcap-client open-enclave-hostverify

Note: While clang-11 is our supported and recommended version, Open Enclave may be built with clang-10 as well. To install clang-10, ensure you use llvm-toolchain-focal-10 in step 1.

This step also installs the az-dcap-client package which is necessary for performing remote attestation in Azure. A general implementation for using Intel DCAP outside the Azure environment is coming soon.

If you wish to use the Ninja build system rather than make, also install

sudo apt -y install ninja-build

If you wish to make use of the Open Enclave Host-Verify CMake package, please install CMake:

sudo apt-get install python3-pip
sudo pip3 install cmake

and follow the instructions here.

Open Enclave SDK binary packages can also be downloaded from GitHub.

3. Verify the Open Enclave Host-Verify SDK install

See Using the Open Enclave Host-Verify SDK for verifying and using the installed SDK.