-
Notifications
You must be signed in to change notification settings - Fork 9
Wasm rfc 0001 #2
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for taking the time to write this up!
Minor wording change from Stefan. Co-Authored-By: Stefan Junker <[email protected]>
Minor typo fix. Co-Authored-By: Stefan Junker <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I suggested a number of somewhat nitpicky changes here. Feel free to disregard anything I may have misunderstood. Most of the changes requested center around:
- Eliminating the use of "it" as a pronoun. The description is very technical and I think it should be painfully clear which components are doing what. Actually, most of these changes are about establishing painful clarity in all sentences.
- Being more detailed about where the WPEK comes from, which components are privvy to it, etc. There are some details omitted that would raise questions to an outside reader, IMO. The reader should know exactly what this key is so they understand why the channel is secure.
remove "it" Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Typo. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
Disambiguation. Co-Authored-By: Lily Sturmann <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I actually think this is pretty close. There are a few formatting errors and I had a question about one of the rejected proposals.
|
||
## Motivation | ||
|
||
Once a Keep is prepared with shim, Wasm runtime, etc., the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Once a Keep is prepared with shim, Wasm runtime, etc., the | |
Once a Keep is prepared with shim and Wasm runtime, the |
The "etc." leaves me feeling confused about what else is in there.
A Keep is the fundamental runtime component of Enarx: a TEE instance | ||
+ Enarx runtime pieces, including WebAssembly and WASI layers. In |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is rendered strangely in markdown. "Enarx runtime pieces" becomes a bullet point.
If a port has been pre-established, between the Enarx Client Agent and | ||
the Keep, then the Keep MUST listen on this port, | ||
and MAY also listen on the well-known port. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why would the Keep listen on both ports?
This RFC arose from this issue: [Workload (WASM binary) loading | ||
- connection termination](https://github.com/enarx/enarx/issues/140) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This also renders strangely in markdown.
sends to Keep via a listening agent in the Keep. Keep decrypts, loads | ||
and runs. This maintains the host agent's status as a proxy between | ||
other components, and doesn't make further assumptions about routing | ||
which is made by 2. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What's "2"?
- the host agent should act as an untrusted proxy wherever possible, | ||
and not include process logic. | ||
- maintaining multiple versions of host agents is complex from | ||
a deployment point of view. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't actually understand why process logic is required for the host agent to be a proxy in this way, or why multiple versions of the host agent would be necessary with this design.
Initial draft of workload loading RFC.
Created two new issues based on the work: #227, #228.
Added line breaks: what are the kids using as default line length these days?
Addresses issue #140.