Intel SGX in virtualized environment [closed] - virtualization

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 3 years ago.
Improve this question
Is it possible to create and run Intel SGX enclaves within a virtualised environment such as Virtualbox or Docker?

It is possible to run and start enclaves from virtual machines. However, the virtualization software must be able to support the SGX instruction set. VirtualBox and Docker still don't support SGX, but KVM and Xen both have patches available to support SGX.
For more details see here: https://01.org/intel-software-guard-extensions/sgx-virtualization

Surely SGX applications can run in virtualised environment, because running Intel SGX just require Ring 3 privilege. But your motherboard needs to be changed to enable it, and there should be some modifications need to be made in the Hypervisor or OS. Currently, it seems Intel SGX is still not yet supported in traditional virtualised environments like XEN/KVM in the mainstream, but there are some preliminary SGX virtualization patches from Intel.
In addition, there are some research papers talking about SGX applications running on virtualised environments:
SCONE is a docker-compatible secure container. You may check their website. There is a OSDI'16 paper describing SCONE.
Haven provides shielded execution , that protects the confidentiality and integrity of programs/data from the platform on which it runs. It is based on Windows HyperV and Libos. There is an OSDI'14 paper describing Haven.

Related

Is it a problem to mix different OS versions in a PostgreSQL cluster? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 1 year ago.
Improve this question
I have a cluster of PostgreSQL nodes using streaming replication and running on RHEL 7. I plan to add new nodes running on RHEL 8, still using the same PostgreSQL version (12.7). Is mixing OS versions in a cluster a problem?
In general, streaming replication only works between the same OS and OS version.
While replicating between RHEL 7 and RHEL 8 might technically work, you might run into sever problems, e.g. because of different locale data which can lead to incorrect query results on the standby server.
I would not risk this. You should keep all servers at the same OS versions and patch level.
Logical replication on the other hand can be used to replicate between different operating systems (e.g. even from Linux to Windows). But that will require more setup and isn't really suitable if you want to replicate many databases that contain many schemas.

PostgreSQL for Debian vs Redhat (Centos) [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 3 years ago.
Improve this question
PostgreSQL 11 works more efficiently in debian or redhat. Accordingly, I will choose a server and plan training. What are the advantages and disadvantages. Which operating system does the Postgres committee like?
There is no PostgreSQL committee. There is core, but they don't determine which operating systems are supported.
From the documentation (you probably read that):
A platform (that is, a CPU architecture and operating system combination) is considered supported by the PostgreSQL development community if the code contains provisions to work on that platform and it has recently been verified to build and pass its regression tests on that platform. Currently, most testing of platform compatibility is done automatically by test machines in the PostgreSQL Build Farm. If you are interested in using PostgreSQL on a platform that is not represented in the build farm, but on which the code works or can be made to work, you are strongly encouraged to set up a build farm member machine so that continued compatibility can be assured.
In general, PostgreSQL can be expected to work on these CPU architectures: x86, x86_64, IA64, PowerPC, PowerPC 64, S/390, S/390x, Sparc, Sparc 64, ARM, MIPS, MIPSEL, and PA-RISC. Code support exists for M68K, M32R, and VAX, but these architectures are not known to have been tested recently. It is often possible to build on an unsupported CPU type by configuring with --disable-spinlocks, but performance will be poor.
PostgreSQL can be expected to work on these operating systems: Linux (all recent distributions), Windows (Win2000 SP4 and later), FreeBSD, OpenBSD, NetBSD, macOS, AIX, HP/UX, and Solaris. Other Unix-like systems may also work but are not currently being tested. In most cases, all CPU architectures supported by a given operating system will work.
The majority of hackers use Linux, but there are people who develop on FreeBSD, MacOS or Windows.
If you know that PostgreSQL works most efficiently on certain Linux distributions, you know more than I do.
When choosing an operating system for PostgreSQL, I would proceed like this:
List the operating systems you are familiar with (or for which your organization has skilled administrators).
Exclude all operating systems for which there is not more than one animal in the buildfarm.
Exclude Windows.
Then pick any of these.

Vagrant and Red Hat Enterprise Licensing [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
Our team is starting to use Vagrant for development on Mac OS X machines so we can better simulate our Red Hat Enterprise Linux production environment. Our operations group says our Red Hat License only covers instances being run on our VMWare cluster. How do other people deal with RHEL licensing using Vagrant?
We were in the same situation and decided to use CentOS on our developer boxes. https://www.centos.org/
I downloaded basic rhel server I found online and built a vagrant box with Packer for use in Vagrant/Test Kitchen. I'm forced to use various other repositories (CentOS/EPEL/RPMFusion etc) instead of the RHN repos which I don't have access to without licensing. I actually wrote a small chef cookbook to write all the custom /etc/yum.repos.d/*.repo files after initial install. It definitely works for a dev environment. If you have access to different ISOs then you can built whatever versions of rhel that you need with Packer.
http://dtucker.co.uk/hack/creating-a-vagrant-base-box-for-rhel-with-bento.html
https://github.com/xacaxulu/packer-boxes/blob/master/README.md <----a box to use if you want.
Have you tried this?
https://access.redhat.com/downloads/content/293/ver=1/rhel---7/1.0.0/x86_64/product-downloads
Have you also checked the developer subscriptions?
https://access.redhat.com/support/offerings/developer/
There is a blog specifying how to use vagrant with RHEL... but I can't post 3 links :(
Here is a proposal (I am using this approach since I am also working with rhel vagrant boxes for running ansible scripts)
Create a red hat developers account here (click on register).
Download an rhel vagrant box from here (you will have to log in with your previously created account.
Fire up your box and ssh into it.
Follow these instructions to register your vm

Which OS will be the best subsitute for the Microsoft Windows XP/7 [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
I want to switch my OS from Windows XP to but as a software developer I am worried about that will I able to install/run the development tool successfully [Software like: Visual Studio, Sql Server, PHP ... other related tool].
Which OS will be the best subsitute for the Microsoft Windows XP/7, from a developer point of view?
This really depends what platform you want to develop the software for. If you are writing Windows programs, Microsoft makes great developer tools which of course run on Windows. The effective tools to develop Mac software are (no surprise) available on Macs. So there's really only a choice if you're targeting cross-platform or Linux. You can use virtual machines to construct whatever testing environments you need, so the main choice is your preference.
Since you sound like you are interested in experimenting with new environments, I would suggest you try Linux. I primarily use Emacs with GNU Global and GDB in Linux to do all my development, and I have benefited from other tools like strace and Valgrind. Eclipse is also available, and I hear it's nice. Since you're used to MS tools, I'll warn you that the open-source stuff isn't as polished or as integrated as MS's stuff appears to be, but it's certainly capable.
Well, if you need Microsoft-based software, such as Visual Studio and SQL Server, the best choice of OS will probably be a Microsoft one...
After that, you might want to run some Virtual Machines, for PHP / Linux development.

VM Player: is it possible to create snapshots? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 8 years ago.
Improve this question
I am currently using VMPlayer to host Windows 2008/SharePoint 2010. I created a virtual environment and I would like the ability to revert to snapshots or restore points.
Is this possible?
You can just pause the VM and make a copy the VM folder.
No, VMWare Player won't allow that.
From their FAQ page:
How does VMware Player compare to VMware Workstation and VMware ACE?
VMware Player enables you to quickly and easily create and run virtual machines. However, VMware Player lacks many powerful features, such as Teams, multiple Snapshots and Clones, or Virtual Rights Management features for end-point security found in VMware Workstation and VMware ACE.
You can mange snapshots with command line tool vmrun which comes with VmWare workstation. You do not need to run workstation and buy it. You can just install it and use vmRun for snapshots and VmWare Player for running VM