CMakeLists.txt

cmake_minimum_required(VERSION 3.11)

project(marblerun VERSION 1.9.0)
find_package(OpenEnclave CONFIG REQUIRED)

if (NOT CMAKE_BUILD_TYPE)
  set(CMAKE_BUILD_TYPE Debug)
endif ()
if (NOT CMAKE_BUILD_TYPE STREQUAL Debug)
  set(TRIMPATH -trimpath)
endif ()

# Generate key
add_custom_command(
  OUTPUT private.pem public.pem
  COMMAND openssl genrsa -out private.pem -3 3072
  COMMAND openssl rsa -in private.pem -pubout -out public.pem)

add_custom_target(
  signing-key
  DEPENDS private.pem)

#
# Build coordinator
#

add_custom_target(coordinatorlib
  COMMAND
  ${CMAKE_COMMAND} -P ${CMAKE_SOURCE_DIR}/build_with_version.cmake
  "ertgo" ${PROJECT_VERSION} "${CMAKE_BINARY_DIR}/libcoordinator.a"
  "main"
  ${TRIMPATH}
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cmd/coordinator
)

add_custom_target(coordinator-noenclave ALL
  COMMAND
  ${CMAKE_COMMAND} -P ${CMAKE_SOURCE_DIR}/build_with_version.cmake
  "go" ${PROJECT_VERSION} "${CMAKE_BINARY_DIR}/coordinator-noenclave"
  "main"
   ${TRIMPATH}
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cmd/coordinator
)

add_executable(coordinator-enclave enclave/main.c)
add_dependencies(coordinator-enclave coordinatorlib)
configure_file(${ERT_SYMCRYPT_SO} . COPYONLY)

target_link_libraries(coordinator-enclave
  openenclave::oeenclave
  openenclave::oesymcryptprovider
  openenclave::ertmeshentry
  ${CMAKE_BINARY_DIR}/libcoordinator.a
  -Wl,-Bdynamic ${CMAKE_BINARY_DIR}/libsymcrypt.so.103 -Wl,-Bstatic
 )

# Configure coordinator.conf
set(COORDINATORCONF_DEBUG 1)
if(PRODUCTION)
  set(COORDINATORCONF_DEBUG 0)
endif()
configure_file(enclave/coordinator.conf coordinator.conf)

add_custom_command(
  OUTPUT coordinator-enclave.signed
  DEPENDS coordinator-enclave ${CMAKE_BINARY_DIR}/coordinator.conf signing-key
  # Add fips140 verification checksum, which is usually added by the Go linker, which is not used with -buildmode=c-archive
  COMMAND go run github.com/edgelesssys/goelffips@latest $<TARGET_FILE:coordinator-enclave>
  # Sign enclave
  COMMAND openenclave::oesign sign -e $<TARGET_FILE:coordinator-enclave> -c
          ${CMAKE_BINARY_DIR}/coordinator.conf -k private.pem)

# Create config for remote attestation
add_custom_command(
  OUTPUT coordinator-config.json
  DEPENDS coordinator-enclave.signed
  COMMAND openenclave::oesign eradump -e coordinator-enclave.signed > coordinator-config.json
)

add_custom_target(sign-coordinator ALL DEPENDS coordinator-enclave.signed coordinator-config.json)

#
# Build marble-injector
#

add_custom_target(marble-injector ALL
  COMMAND
  CGO_ENABLED=0
  ${CMAKE_COMMAND} -P ${CMAKE_SOURCE_DIR}/build_with_version.cmake
  "go" "${PROJECT_VERSION}" "${CMAKE_BINARY_DIR}/marble-injector"
  "main"
  ${TRIMPATH}
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cmd/marble-injector
)

#
# Build CLI
#

add_custom_target(cli ALL
  COMMAND
  ${CMAKE_COMMAND} -P ${CMAKE_SOURCE_DIR}/build_with_version.cmake
  "go" "${PROJECT_VERSION}" "${CMAKE_BINARY_DIR}/marblerun"
  "github.com/edgelesssys/marblerun/cli/internal/cmd"
  ${TRIMPATH}
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cli
)

#
# Build marble-test
#

add_custom_target(marbletestlib
  ertgo build ${TRIMPATH} -buildmode=c-archive
  -tags enclave,marblerun_ego_enclave -o ${CMAKE_BINARY_DIR}/libmarbletest.a
  -buildvcs=false
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cmd/marble-test
)

add_custom_target(marble-test-noenclave ALL
  go build ${TRIMPATH}
  -tags marblerun_ego_enclave -o ${CMAKE_BINARY_DIR}/marble-test-noenclave
  -buildvcs=false
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cmd/marble-test)

add_executable(marble-test-enclave enclave/main_test.c)
add_dependencies(marble-test-enclave marbletestlib)

target_link_libraries(marble-test-enclave
  openenclave::oeenclave
  openenclave::ertmeshentry
  ${CMAKE_BINARY_DIR}/libmarbletest.a
 )

# Sign enclave
add_custom_command(
  OUTPUT marble-test-enclave.signed
  DEPENDS marble-test-enclave enclave/marble-test.conf signing-key
  COMMAND openenclave::oesign sign -e $<TARGET_FILE:marble-test-enclave> -c
          ${CMAKE_SOURCE_DIR}/enclave/marble-test.conf -k private.pem)

# Create config for remote attestation
add_custom_command(
  OUTPUT marble-test-config.json
  DEPENDS marble-test-enclave.signed
  COMMAND openenclave::oesign eradump -e marble-test-enclave.signed > marble-test-config.json
)

add_custom_target(sign-marble-test ALL DEPENDS marble-test-enclave.signed marble-test-config.json)

#
# Build premain-libos
#

add_custom_target(
  premain-libos ALL
  ertgo build ${TRIMPATH}
  -buildmode=pie
  -buildvcs=false
  -o ${CMAKE_BINARY_DIR}
  WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}/cmd/premain-libos)