FIDES setup with docker

---

Setting up Docker image with Riscv-tools:

Step 1: Install Docker by referring to the following link: https://docs.docker.com/engine/install/

Step 2: Pull fides docker image.

docker pull svkv/fides:v1

Step 3: Verifying docker image

docker run -it svkv/fides:v1

The above command results in a bash. The /home/fides/fides-crypto-demo is the home directory which houses all the packages installed and sample Mirage os unikernels. Press Ctrl^D to exit from the docker container.

Executing crypto unikernel

Step 1: Lets try executing a sample AES-CBC cipher unikernel.

cd unikernels/mirage-crypto-riscv-unikernel/cipher/aes-cbc-riscv-unikernel

spike kernel

Step 2: The AES-CBC crpto unikernel exits with and error message stating transition from compartment 5 to 31 fails. This is because, the main unikernel application is in compartment 5 and the cryptographic libraries are in compartment 31. And we have not explicitly stated transition from 5 to 31 is allowed in the access matrix.

Checkcap capability matrix fail(Due to invalid compartment jump) : (5) to (31) at 0x8005cc90

Step 3: We add the "5:31" to enable to transitions from compartment 5 to 31 in the access matrix, which is stored in cap_table.txt. And we recompile the Security Monitor, which is part of the ocaml_boot-riscv package. Then we rebuild the unikernel. Now it executes successfully.

echo 5:31 >> $CAP_MATRIX_PATH/cap_table.txt

opam reinstall ocaml-boot-riscv -y

eval $(opam env)

make build kernel

spike kernel