Skip to content

Latest commit

 

History

History
50 lines (33 loc) · 2.1 KB

README.md

File metadata and controls

50 lines (33 loc) · 2.1 KB
Raw

How to build a helloworld Marble

This example shows how to build a confidential Go application with EGo and run it in MarbleRun. This can serve you as a blueprint for making existing applications MarbleRun-ready or creating new Marbles. If you haven't already, setup MarbleRun and EGo to get ready.

Note: You can run this example on any hardware by simulating the enclave through setting OE_SIMULATION=1 as environment variable. This might help you to get started with the development of confidential apps. However, please notice that this bypasses any security. Detailed information on how to develop secure Marbles can be found in MarbleRun's documentation.

You can build and sign the example (or your app) like this:

ego-go build
ego sign hello

Get the enclave's unique ID aka MRENCLAVE with

ego uniqueid hello

and set it as UniqueID in manifest.json.

Next, use the erthost command to start the Coordinator in a local enclave:

erthost ../../build/coordinator-enclave.signed

The Coordinator exposes two APIs, a client REST API (port 4433) and a mesh API (port 2001). While the Coordinator and your Marble communicate via the mesh API, you can administrate the Coordinator via the REST API.

You can now upload the manifest to the Coordinator's client API:

curl -k --data-binary @manifest.json https://localhost:4433/manifest

Finaly, you can run the helloworld Marble (or whatever Marble you just created) with the ego marblerun command. You just need to set EDG_MARBLE_TYPE to a Marble that was defined in the manifest.json. In this example, the manifest defines a single Marble, which is called "hello".

EDG_MARBLE_TYPE=hello ego marblerun hello

EGo starts the Marble, which will then connect itself to the mesh API of the Coordinator.

The helloworld example app will then serve HTTP on port 8080:

$ curl http://localhost:8080
Hello world!
Commandline arguments: [foo bar]