Skip to content

Commit

Permalink
Replace redirecting links for alibaba cloud
Browse files Browse the repository at this point in the history
Signed-off-by: Daniel Weiße <[email protected]>
  • Loading branch information
daniel-weisse committed Nov 10, 2023
1 parent 5e098ca commit b158b27
Show file tree
Hide file tree
Showing 4 changed files with 26 additions and 7 deletions.
9 changes: 7 additions & 2 deletions docs/docs/deployment/platforms/alibaba.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,17 @@ Alibaba Cloud Container Service for Kubernetes (ACK) offers a popular deployment
[ACK hosts Kubernetes pods in SGX-capable Alibaba VMs](https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/tee-based-confidential-computing) and exposes the underlying SGX hardware.

### Prerequisites

* Follow the instructions on the [ACK Confidential Computing Quick Start guide](https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster-for-confidential-computing) to provision an ACK cluster with Intel SGX-enabled worker nodes.

### Deploy MarbleRun

See the [Kubernetes guide](../kubernetes.md) on installing MarbleRun in your ACK cluster.


## Alibaba Cloud Elastic Compute Service

With 7th-generation [security-enhanced ECS instances](https://www.alibabacloud.com/help/en/ecs/user-guide/overview-25), users can use Intel SGX on Alibaba Cloud.
You can follow the guide for creating a [g7t, c7t, or r7t](https://www.alibabacloud.com/help/en/elastic-compute-service/latest/create-security-enhanced-instances) instance.
You can follow the guide for creating a [g7t, c7t, or r7t](https://www.alibabacloud.com/help/en/ecs/user-guide/create-a-security-enhanced-instance) instance.

The description below uses a VM running Ubuntu 18.04.

Expand All @@ -24,12 +25,14 @@ The description below uses a VM running Ubuntu 18.04.
1. Install Intel DCAP Quote Provider Library

Add the Intel SGX APT repository:

```bash
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo apt-key add -
echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu bionic main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
```

Download and install the QPL:

```bash
sudo apt update
sudo apt install libsgx-dcap-default-qpl
Expand All @@ -41,12 +44,14 @@ The description below uses a VM running Ubuntu 18.04.
The configuration is set in `/etc/sgx_default_qcnl.conf`.
* If your instance is assigned a public IP address, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:

```
PCCS_URL=https://sgx-dcap-server.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
```

* If your instance is in a virtual private cloud and has only internal IP addresses, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:
```
PCCS_URL=https://sgx-dcap-server-vpc.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
Expand Down
6 changes: 5 additions & 1 deletion docs/versioned_docs/version-1.1/deployment/cloud.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,12 +29,14 @@ The description below uses a VM running Ubuntu 18.04.
1. Install Intel DCAP Quote Provider Library

Add the Intel SGX APT repository:

```bash
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo apt-key add -
echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu bionic main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
```

Download and install the QPL:

```bash
sudo apt update
sudo apt install libsgx-dcap-default-qpl
Expand All @@ -46,20 +48,22 @@ The description below uses a VM running Ubuntu 18.04.
The configuration is set in `/etc/sgx_default_qcnl.conf`.
* If your instance is assigned a public IP address, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:

```
PCCS_URL=https://sgx-dcap-server.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
```

* If your instance is in a virtual private cloud and has only internal IP addresses, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:
```
PCCS_URL=https://sgx-dcap-server-vpc.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
```
:::note
Currently, the Alibaba Cloud SGX remote attestation service is only supported within [mainland China regions](https://www.alibabacloud.com/help/doc-detail/40654.htm#concept-2459516)
Currently, the Alibaba Cloud SGX remote attestation service is only supported within [mainland China regions](https://www.alibabacloud.com/help/en/beginner-guide/latest/regions-and-zones#concept-2459516)
:::
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,17 @@ Alibaba Cloud Container Service for Kubernetes (ACK) offers a popular deployment
[ACK hosts Kubernetes pods in SGX-capable Alibaba VMs](https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/tee-based-confidential-computing) and exposes the underlying SGX hardware.

### Prerequisites

* Follow the instructions on the [ACK Confidential Computing Quick Start guide](https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster-for-confidential-computing) to provision an ACK cluster with Intel SGX-enabled worker nodes.

### Deploy MarbleRun

See the [Kubernetes guide](../kubernetes.md) on installing MarbleRun in your ACK cluster.


## Alibaba Cloud Elastic Compute Service

With 7th-generation [security-enhanced ECS instances](https://www.alibabacloud.com/help/en/ecs/user-guide/overview-25), users can use Intel SGX on Alibaba Cloud.
You can follow the guide for creating a [g7t, c7t, or r7t](https://www.alibabacloud.com/help/en/elastic-compute-service/latest/create-security-enhanced-instances) instance.
You can follow the guide for creating a [g7t, c7t, or r7t](https://www.alibabacloud.com/help/en/ecs/user-guide/create-a-security-enhanced-instance) instance.

The description below uses a VM running Ubuntu 18.04.

Expand All @@ -24,12 +25,14 @@ The description below uses a VM running Ubuntu 18.04.
1. Install Intel DCAP Quote Provider Library

Add the Intel SGX APT repository:

```bash
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo apt-key add -
echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu bionic main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
```

Download and install the QPL:

```bash
sudo apt update
sudo apt install libsgx-dcap-default-qpl
Expand All @@ -41,12 +44,14 @@ The description below uses a VM running Ubuntu 18.04.
The configuration is set in `/etc/sgx_default_qcnl.conf`.
* If your instance is assigned a public IP address, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:

```
PCCS_URL=https://sgx-dcap-server.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
```

* If your instance is in a virtual private cloud and has only internal IP addresses, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:
```
PCCS_URL=https://sgx-dcap-server-vpc.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,17 @@ Alibaba Cloud Container Service for Kubernetes (ACK) offers a popular deployment
[ACK hosts Kubernetes pods in SGX-capable Alibaba VMs](https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/tee-based-confidential-computing) and exposes the underlying SGX hardware.

### Prerequisites

* Follow the instructions on the [ACK Confidential Computing Quick Start guide](https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster-for-confidential-computing) to provision an ACK cluster with Intel SGX-enabled worker nodes.

### Deploy MarbleRun

See the [Kubernetes guide](../kubernetes.md) on installing MarbleRun in your ACK cluster.


## Alibaba Cloud Elastic Compute Service

With 7th-generation [security-enhanced ECS instances](https://www.alibabacloud.com/help/en/ecs/user-guide/overview-25), users can use Intel SGX on Alibaba Cloud.
You can follow the guide for creating a [g7t, c7t, or r7t](https://www.alibabacloud.com/help/en/elastic-compute-service/latest/create-security-enhanced-instances) instance.
You can follow the guide for creating a [g7t, c7t, or r7t](https://www.alibabacloud.com/help/en/ecs/user-guide/create-a-security-enhanced-instance) instance.

The description below uses a VM running Ubuntu 18.04.

Expand All @@ -24,12 +25,14 @@ The description below uses a VM running Ubuntu 18.04.
1. Install Intel DCAP Quote Provider Library

Add the Intel SGX APT repository:

```bash
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo apt-key add -
echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu bionic main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
```

Download and install the QPL:

```bash
sudo apt update
sudo apt install libsgx-dcap-default-qpl
Expand All @@ -41,12 +44,14 @@ The description below uses a VM running Ubuntu 18.04.
The configuration is set in `/etc/sgx_default_qcnl.conf`.
* If your instance is assigned a public IP address, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:

```
PCCS_URL=https://sgx-dcap-server.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
```

* If your instance is in a virtual private cloud and has only internal IP addresses, change the configuration to the following, where `[Region-ID]` is the ID of your instance's region:
```
PCCS_URL=https://sgx-dcap-server-vpc.[Region-ID].aliyuncs.com/sgx/certification/v3/
USE_SECURE_CERT=TRUE
Expand Down

0 comments on commit b158b27

Please sign in to comment.