努力赚钱
将来的你一定会感谢现在努力的自己!

SGX测试,简易安装模式安装Phala脚本

目前不清退的交易所推荐:

1、全球第二大交易所OKEx欧意,邀请链接: https://www.ouyi.space/join/1837888  能交易XCH,BZZ,BTC,ETH等等安全交易,新用户能开合约。

2、老牌交易所比特儿现改名叫芝麻开门 :https://www.gate.tv/signup/649183能交易XCH,BZZ,BTC,ETH等等安全交易,新用户能开合约。

SGX测试

首先需要先按照简易安装模式安装Phala脚本

sudo phala install

重要提示:请大家首先关注安全等级(在报告的最后一行),安全等级目前是网络评判的唯一标准!请大家务必先查看安全等级后再询问。

该诊断程序将进一步检查:

  1. 是否支持 Production Mode
  2. 是否支持 FLC(Flexible launch control)

FLC建议最好支持,目前不强制满足,未来可能会涉及要安装 DCAP 驱动,则此项必须满足。

如果这两项都满足,但仍然启动不了 pRuntime,返回SGX_ERROR_UPDATE_NEEDED这样的提示,则说明 BIOS 上缺少 Intel 要求 SGX 环境必须包含的工具,所以评估系统不满足 SGX 的安全标准。解决方法是更新你的 BIOS 版本,怎么更新请百度自己厂商的教程。如果这已经该厂商最新版 BIOS,则无法挖矿。

在报告的最后一行会显示你的安全等级(1~5),如果您这里显示的是Can't give a `confidenceLevel` due to don't meet minimum requirement则代表您的机器是无法参与挖矿的。

SGX测试完毕后,输入ls /dev | grep sgx,如果运行有返回sgx或者isgx,则说明驱动正常运行。

如果没有返回,请到《检查你的硬件、BIOS与系统》一章按照教程调试主板,设置好后回到本章继续进行SGX测试。

自检指令

sudo phala sgx-test

正常的结果

Detecting SGX, this may take a minute...
✔  SGX instruction set
  ✔  CPU support
  ✔  CPU configuration
  ✔  Enclave attributes
  ✔  Enclave Page Cache
  SGX features
    ✔  SGX2  ✔  EXINFO  ✘  ENCLV  ✘  OVERSUB  ✘  KSS
    Total EPC size: 94.0MiB
✔  Flexible launch control
  ✔  CPU support
  ? CPU configuration
  ✔  Able to launch production mode enclave
✔  SGX system software
  ✔  SGX kernel device (/dev/sgx/enclave)
  ✔  libsgx_enclave_common
  ✔  AESM service
  ✔  Able to launch enclaves
    ✔  Debug mode
    ✔  Production mode
    ✔  Production mode (Intel whitelisted)

You are all set to start running SGX programs!
Generated machine id:
[162, 154, 220, 15, 163, 137, 184, 233, 251, 203, 145, 36, 214, 55, 32, 54]

Testing RA...  // RA就是 Remote Atestation ,远程认证。只有经过了远程认证的SGX才是可信的SGX。
aesm_service[15]: [ADMIN]EPID Provisioning initiated
aesm_service[15]: The Request ID is 09a2bed647d24f909d4a3990f8e28b4a
aesm_service[15]: The Request ID is 8d1aa4104b304e12b7312fce06881260
aesm_service[15]: [ADMIN]EPID Provisioning successful
isvEnclaveQuoteStatus = GROUP_OUT_OF_DATE //❗️❗️这一行报告尤为重要,这一行就决定了信用评级❗️❗️
platform_info_blob { sgx_epid_group_flags: 4, sgx_tcb_evaluation_flags: 2304, pse_evaluation_flags: 0, latest_equivalent_tcb_psvn: [15, 15, 2, 4, 1, 128, 6, 0, 0, 0, 0, 0, 0, 0, 0, 0, 11, 0], latest_pse_isvsvn: [0, 11], latest_psda_svn: [0, 0, 0, 2], xeid: 0, gid: 2919956480, signature: sgx_ec256_signature_t { gx: [99, 239, 225, 171, 96, 219, 216, 210, 246, 211, 20, 101, 254, 193, 246, 66, 170, 40, 255, 197, 80, 203, 17, 34, 164, 2, 127, 95, 41, 79, 233, 58], gy: [141, 126, 227, 92, 128, 3, 10, 32, 239, 92, 240, 58, 94, 167, 203, 150, 166, 168, 180, 191, 126, 196, 107, 132, 19, 84, 217, 14, 124, 14, 245, 179] } }
advisoryURL = https://security-center.intel.com
advisoryIDs = "INTEL-SA-00219", "INTEL-SA-00289", "INTEL-SA-00320", "INTEL-SA-00329"
confidenceLevel = 5 //这里是你的信任评级

不正常的结果(附解读)

Detecting SGX, this may take a minute...
✔  SGX instruction set
  ✔  CPU support // 这里如果是❌,就不要试了CPU完全不支持
  ✔  CPU configuration // 这里如果是❌,BIOS太老了,找主板厂
  ✔  Enclave attributes // 这里如果是❌前两项应该也是❌先解决上面的问题
  ✔  Enclave Page Cache // 这里如果是❌前两项应该也是❌先解决上面的问题
  SGX features
    ✘  SGX2  ✘  EXINFO  ✘  ENCLV  ✘  OVERSUB  ✘  KSS // 目前SGX2和EXINFO没用到所以这里为❌不影响。
    Total EPC size: 94.0MiB // 这里如果是❌先可以忽略
✘  Flexible launch control
  ✔  CPU support
  ✘  CPU configuration // 这里如果是❌或者❓今后有一定的概率挖不了(半年内不影响),但短时间内不受影响
✔  SGX system software
  ✔  SGX kernel device (/dev/isgx)
  ✔  libsgx_enclave_common
  ✔  AESM service
  ✔  Able to launch enclaves
    ✔  Debug mode
    ✘  Production mode // 这里如果是❌,请尽量升级,但如果下面一行是✅那就暂时可以挖矿(半年内)
    ✔  Production mode (Intel whitelisted) // 这里如果是❌,那就不能用

🕮  Flexible launch control > CPU configuration
Your hardware supports Flexible Launch Control, but whether it's enabled could not be determined. More information might be available by re-running this program with sudo. Would you like to do that?
(not supported yet)

debug: Error reading MSR 3Ah: Failed to load MSR kernel module
debug: cause: Failed to load MSR kernel module
debug: cause: Failed executing modprobe
debug: cause: No such file or directory (os error 2)

More information: https://edp.fortanix.com/docs/installation/help/#flc-cpu-configuration

🕮  SGX system software > Able to launch enclaves > Production mode
The enclave could not be launched. This might indicate a problem with FLC.

debug: failed to load report enclave
debug: cause: failed to load report enclave
debug: cause: The EINITTOKEN provider didn't provide a token
debug: cause: aesm error code GetLicensetokenError_6

More information: https://edp.fortanix.com/docs/installation/help/#run-enclave-prod

目前不清退的交易所推荐:

1、全球第二大交易所OKEx欧意,邀请链接: https://www.ouyi.space/join/1837888  能交易XCH,BZZ,BTC,ETH等等安全交易,新用户能开合约。

2、老牌交易所比特儿现改名叫芝麻开门 :https://www.gate.tv/signup/649183能交易XCH,BZZ,BTC,ETH等等安全交易,新用户能开合约。

赞(0) 打赏
未经允许不得转载:我爱收益 » SGX测试,简易安装模式安装Phala脚本

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址

觉得文章有用就打赏一下文章作者

支付宝扫一扫打赏

微信扫一扫打赏