Hetzner PX Line Supports SGX

[dwaynehoov]

https://www.hetzner.com/dedicated-rootserver/matrix-px

Dedicated server, requires UEFI enabled at creation time.
No change to BIOS necessary
PX62-NVMe

root@Ubuntu-2004-focal-amd64-base ~/sgx-software-enable # ./sgx_enable --status Intel SGX is already enabled on this system

Tested using Anjuna runtime

root@Ubuntu-2004-focal-amd64-base ~/sgx-software-enable # anjuna-sgxrun ls -la
"ls.manifest.template.yaml" created
Compiled manifest written to ls.manifest.sgx
"ls.manifest.sgx" created
"ls.sig" created
Starting "/usr/bin/ls" in Anjuna Runtime
+ exec Runtime/anjuna-runtime --dev /usr/bin/ls -la
[ 1494] Anjuna Runtime version release-1.44.0005, Copyright (C) Anjuna Security, Inc. All rights reserved.
[ 1494] Enclave initialized:
[ 1494]     Enclave base address:           0x0000000800000000
[ 1494]     Enclave size:                   2GB
[ 1494]     Maximum number of threads:      64
[ 1494]     Enclave attributes:             0x0000000000000006
[ 1494]     Enclave SSA frame size:         1
[ 1494]     Enclave MRSIGNER:               8faf745ac11db4d0f46f98c9225fc927604371b6e333cf4952f55db482bf9cce
[ 1494]     Enclave MRENCLAVE:              284283f3912a9257fcbaeb7965c71c272bd87b9eae72b65415d9a41e79c8bb9a
Dev Mode - mapping untrusted library: /root/anjuna-runtime-ubuntu-release-1.44.0005/ubuntu18/bin/Runtime/libnss_files.so.2
total 104
drwxr-xr-x 3 root root  4096 Dec 17 05:40 .
drwx------ 8 root root  4096 Dec 17 00:52 ..
drwxr-xr-x 8 root root  4096 Dec 17 00:46 .git
-rw------- 1 root root  1043 Dec 17 05:40 ls.manifest.sgx
-rw-r--r-- 1 root root 15854 Dec 17 05:40 ls.manifest.template.yaml
-rw------- 1 root root  1808 Dec 17 05:40 ls.sig
-rw-r--r-- 1 root root   120 Dec 17 00:46 Makefile
-rw-r--r-- 1 root root  5756 Dec 17 00:46 README.md
lrwxrwxrwx 1 root root    66 Dec 17 05:40 Runtime -> /root/anjuna-runtime-ubuntu-release-1.44.0005/ubuntu18/bin/Runtime
-rw-r--r-- 1 root root  3494 Dec 17 00:46 sgx_capable.h
-rwxr-xr-x 1 root root 17856 Dec 17 00:46 sgx_enable
-rw-r--r-- 1 root root 12999 Dec 17 00:46 sgx_enable.c
-rw-r--r-- 1 root root 10960 Dec 17 00:46 sgx_enable.o