无法在Ubuntu 18.04上安装GrapheneSGX

Question

我无法正确安装石墨烯（https://graphene.readthedocs.io/en/latest/building.html）。在运行示例代码时，出现以下错误

Cannot open device /dev/gsgx. Please make sure the Graphene SGX kernel module is loaded

这可能是因为，在安装命令期间 sudo insmod gsgx.ko，我得到了以下错误

insmod: ERROR: could not insert module gsgx.ko: Required key not available

Rest all（与SGX相关）似乎很好，因为我能够运行示例SGX示例和sudo service aesmd status给出

aesmd.service - Intel(R) Architectural Enclave Service Manager
   Loaded: loaded (/lib/systemd/system/aesmd.service; enabled; vendor preset: enabled)
   Active: active (running) since Fri 2020-05-22 16:28:55 EDT; 2h 45min ago
  Process: 4404 ExecStart=/opt/intel/sgx-aesm-service/aesm/aesm_service (code=exited, status=0/SUCCESS)
  Process: 4403 ExecStartPre=/bin/chmod 0750 /var/opt/aesmd/ (code=exited, status=0/SUCCESS)
  Process: 4402 ExecStartPre=/bin/chown -R aesmd:aesmd /var/opt/aesmd/ (code=exited, status=0/SUCCESS)
  Process: 4400 ExecStartPre=/bin/chmod 0755 /var/run/aesmd/ (code=exited, status=0/SUCCESS)
  Process: 4391 ExecStartPre=/bin/chown -R aesmd:aesmd /var/run/aesmd/ (code=exited, status=0/SUCCESS)
  Process: 4388 ExecStartPre=/bin/mkdir -p /var/run/aesmd/ (code=exited, status=0/SUCCESS)
  Process: 4369 ExecStartPre=/opt/intel/sgx-aesm-service/aesm/linksgx.sh (code=exited, status=0/SUCCESS)
 Main PID: 4405 (aesm_service)
    Tasks: 4 (limit: 4915)
   CGroup: /system.slice/aesmd.service
           └─4405 /opt/intel/sgx-aesm-service/aesm/aesm_service

Answer 1

您是否尝试过单独安装/dev/gsgx（如2b步骤中所述）？我在尝试运行一些GSC示例时也遇到了相同的错误，但是遵循2b应该可以工作，即使它不是用于生产