Cannot open SGX driver device. while trying Hello World example

[LichenXia198]

Description of the problem

Starting the helloworld example caused following issue:

host_framework.c:44:open_sgx_driver) error: Cannot open SGX driver device. Please make sure you're using an up-to-date kernel or the standalone Intel SGX kernel module is loaded.
(host_main.c:1266:main) error: load_enclave() failed with error: No such file or directory (ENOENT)

OS: Ubuntu 22.04
Kernel: 5.15.0-130-generic

$ is-sgx-available 
SGX supported by CPU: true
SGX1 (ECREATE, EENTER, ...): true
SGX2 (EAUG, EACCEPT, EMODPR, ...): false
Flexible Launch Control (IA32_SGXPUBKEYHASH{0..3} MSRs): false
SGX extensions for virtualizers (EINCVIRTCHILD, EDECVIRTCHILD, ESETCONTEXT): false
Extensions for concurrent memory management (ETRACKC, ELDBC, ELDUC, ERDINFO): false
EDECCSSA instruction: false
CET enclave attributes support (See Table 37-5 in the SDM): false
Key separation and sharing (KSS) support (CONFIGID, CONFIGSVN, ISVEXTPRODID, ISVFAMILYID report fields): false
AEX-Notify: false
Max enclave size (32-bit): 0x80000000
Max enclave size (64-bit): 0x1000000000
EPC size: 0x5d80000
SGX driver loaded: true
AESMD installed: true
SGX PSW/libsgx installed: true
#PF/#GP information in EXINFO in MISC region of SSA supported: false
#CP information in EXINFO in MISC region of SSA supported: false

$ ls -l /dev/sgx*
crw-rw---- 1 root sgx_prv 10, 126 Jan  3 18:38 /dev/sgx_provision
crw-rw---- 1 root sgx     10, 125 Jan  3 18:38 /dev/sgx_vepc

Steps to reproduce

sudo gramine-sgx helloworld

Expected results

Print hello world

Actual results

$ sudo gramine-sgx helloworld
Gramine is starting. Parsing TOML manifest file, this may take some time...
(host_main.c:964:load_enclave) debug: Gramine parsed TOML manifest file successfully
(host_framework.c:44:open_sgx_driver) error: Cannot open SGX driver device. Please make sure you're using an up-to-date kernel or the standalone Intel SGX kernel module is loaded.
(host_main.c:1266:main) error: load_enclave() failed with error: No such file or directory (ENOENT)

Gramine commit hash

v1.8

[kailun-qin]

$ ls -l /dev/sgx*
crw-rw---- 1 root sgx_prv 10, 126 Jan  3 18:38 /dev/sgx_provision
crw-rw---- 1 root sgx     10, 125 Jan  3 18:38 /dev/sgx_vepc

It looks like /dev/sgx_enclave is missing. Could you please share how you installed the SGX driver and double check whether the installation was successful?

[LichenXia198]

I am new to the SGX and installed the driver following this instruction: https://medium.com/@yangfanghao/sgx-driver-and-sdk-installation-for-ubuntu-22-04-7db6c254e65c

I used a script from https://sconedocs.github.io/sgxinstall/ and it seems that I have a OOT drivier installed:

./install_sgx_driver.sh check
Getting SGX Driver information:

OOT driver detected.
Version: 2.11.0


FAIL: Unable to detect 'version' patch! This patch is required for running this command.

To install the driver with 'version' patch, run: ./install_sgx_driver.sh install -p version --force

ERROR: installation of SGX driver failed (script=install_sgx_driver.sh, Line: 1, 1596)

Should I uninstall it? As I understand, Ubuntu 22.04 should come with an SGX driver.

[kailun-qin]

As I understand, Ubuntu 22.04 should come with an SGX driver.

Yeah, the newer Ubuntu 22.04 LTS ships with a kernel version that includes the upstream SGX driver (so you're probably using an older LTS version). It would be great if you could switch to a newer Ubuntu 22.04.x LTS, as we removed support for the OOT (out-of-tree) SGX driver (5789620) recently.

P.S. I'm moving this to discussions since it's not an actual issue.

[kailun-qin]

https://medium.com/@yangfanghao/sgx-driver-and-sdk-installation-for-ubuntu-22-04-7db6c254e65c

I used a script from https://sconedocs.github.io/sgxinstall/

Also, the instructions you followed seem to mention that the script you used to install and check the SGX driver may not work with Ubuntu 22.04. So, if you really want to stick to an older Ubuntu 22.04 LTS minor version (w/ an older kernel version), you might want to tweak that script.

[LichenXia198]

Hi, thank you for your reply. It seems that I can only use the OTT SGX driver since my platform does not support FLC. May I ask which version of Gramine should I refer to in this case?

[mkow]

The last version of Gramine which supported the OOT driver was v1.8, this support has been removed a few commits ago on master branch.