sgx.ubuntu.Dockerfile

FROM ubuntu:20.04

RUN \
    apt-get update -qq && \
    apt-get install --yes wget && \
    wget -O- https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key > /etc/apt/trusted.gpg.d/intel-sgx-deb.key  && \
    echo "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/intel-sgx-deb.key] https://download.01.org/intel-sgx/sgx_repo/ubuntu $(. /etc/os-release; echo $VERSION_CODENAME) main" > /etc/apt/sources.list.d/intel-sgx.list && \
    apt-get update -qq && \
    apt-get install --yes \
        libsgx-quote-ex \
        libsgx-urts \
        libsgx-ae-qe3 \
        libsgx-ae-qve \
        libsgx-dcap-default-qpl \
        libsgx-dcap-ql \
        # libsgx-dcap-ql-dev \
        libsgx-pce-logic \
        libsgx-qe3-logic \
        && \
    # maybe need these as well? relates to services
    apt-get install --yes \
        libsgx-launch \
        libsgx-epid \
        libsgx-uae-service \
        && \
    # aesm stuff
    apt-get install --no-install-recommends --yes \
        sgx-aesm-service \
        && \
    echo '/opt/intel/sgx-aesm-service/aesm' > /etc/ld.so.conf.d/sgx-aesm-service.conf && \
    ldconfig && \
    # where is var run coming from?
    # mkdir /var/run/aesmd && \
    # chown aesmd /var/run/aesmd && \
    apt-get remove wget -y && \
    apt-get autoremove -y && \
    rm -rf /tmp/* && \
    rm -rf /var/lib/apt/*