|
1 | 1 | - name: Include vars |
2 | 2 | include_vars: common.yml |
3 | 3 |
|
4 | | -- name: Download OpenEnclave source |
| 4 | +- name: Download Open Enclave source |
5 | 5 | get_url: |
6 | 6 | url: "{{ oe_url }}" |
7 | 7 | dest: "{{ workspace }}/{{ oe_src }}" |
8 | 8 | force: yes |
9 | 9 | become: true |
10 | 10 |
|
11 | | -- name: Remove Pre-existing OpenEnclave source on the remote |
| 11 | +- name: Remove Pre-existing Open Enclave source on the remote |
12 | 12 | file: |
13 | 13 | path: "{{ workspace }}/openenclave-{{ oe_ver }}" |
14 | 14 | state: absent |
15 | 15 |
|
16 | | -- name: Create directory for OpenEnclave source |
| 16 | +- name: Create directory for Open Enclave source |
17 | 17 | file: |
18 | 18 | path: "{{ workspace }}/openenclave-{{ oe_ver }}" |
19 | 19 | state: directory |
20 | 20 |
|
21 | | -- name: Expand OpenEnclave |
| 21 | +- name: Expand Open Enclave |
22 | 22 | unarchive: |
23 | 23 | src: "{{ workspace }}/{{ oe_src }}" |
24 | 24 | dest: "{{ workspace }}/openenclave-{{ oe_ver }}" |
25 | 25 | copy: no |
26 | 26 | extra_opts: [--strip-components=1] |
27 | 27 | creates: "{{ workspace }}/openenclave-{{ oe_ver }}/CMakeLists.txt" |
28 | 28 |
|
29 | | -- name: Make OpenEnclave build dir |
| 29 | +- name: Make Open Enclave build dir |
30 | 30 | file: |
31 | 31 | path: "{{ workspace }}/openenclave-{{ oe_ver }}/build" |
32 | 32 | state: directory |
33 | 33 |
|
34 | | -# OpenEnclave turns on the Clang speculative load hardening pass by default. |
| 34 | +# Open Enclave turns on the Clang speculative load hardening pass by default. |
35 | 35 | # This is good practice for arbitrary enclaved code, as it applies a general |
36 | 36 | # mitigation that does not depend on source code annotation. However, being |
37 | 37 | # a general mitigation, it also carries about a 30% performance penalty when |
|
45 | 45 | regexp: '-mllvm -x86-speculative-load-hardening' |
46 | 46 | replace: '' |
47 | 47 |
|
48 | | -- name: Install OpenEnclave dependencies |
| 48 | +- name: Install Open Enclave dependencies |
49 | 49 | shell: | |
50 | 50 | scripts/ansible/install-ansible.sh |
51 | 51 | ansible-playbook "{{ oe_playbook }}" |
|
60 | 60 | name: ninja-build |
61 | 61 | become: true |
62 | 62 |
|
63 | | -- name: Make OpenEnclave build dir |
| 63 | +- name: Make Open Enclave build dir |
64 | 64 | file: |
65 | 65 | path: "{{ workspace }}/openenclave-{{ oe_ver }}/build" |
66 | 66 | state: directory |
67 | 67 |
|
68 | | -- name: Build OpenEnclave |
| 68 | +- name: Build Open Enclave |
69 | 69 | shell: | |
70 | 70 | cmake -GNinja -DCMAKE_INSTALL_PREFIX:PATH={{ oe_prefix }} -DCMAKE_BUILD_TYPE=RelWithDebInfo {{ oe_build_opts }} .. |
71 | 71 | ninja |
|
74 | 74 | async: 600 |
75 | 75 | poll: 5 |
76 | 76 |
|
77 | | -- name: Remove Pre-existing OpenEnclave install |
| 77 | +- name: Remove Pre-existing Open Enclave install |
78 | 78 | file: |
79 | 79 | path: "{{ oe_prefix }}" |
80 | 80 | state: absent |
81 | 81 | become: true |
82 | 82 |
|
83 | | -- name: Install OpenEnclave |
| 83 | +- name: Install Open Enclave |
84 | 84 | command: ninja install |
85 | 85 | args: |
86 | 86 | chdir: "{{ workspace }}/openenclave-{{ oe_ver }}/build" |
|
0 commit comments