ioctl returns ENOENT on final enclave initialisation about linux-sgx-driver

[RealityAnomaly]

@haitaohuang any idea what's going on here?

[haitaohuang]

Sorry for late reply. I don't see ENOENT from ioctl. Can you copy the relevant section of the strace? EINIT failure is usually some attribute does not work. If this is nonFLC and you are running provisioning enclave, make sure to use official binaries signed by Intel

[haitaohuang]

Ah, just saw you copied strace on intel/linux-sgx#671. I think you mean 2 returned at this line:
ioctl(4, _IOC(_IOC_WRITE, 0xa4, 0x2, 0x18), 0x7ffccd992240) = 2

I believe it's not ENOENT. It's likely the error code returned from EINIT, so likely sigstruct invalid or attributes mismatch. Also notice you built the aesm from source. Did you make sure to use official binaries of QE, PVE, LE if this is on non-FLC?

You can also turn on kernel debug to see the error code from EINIT at this line:

linux-sgx-driver/sgx_encl.c

Line 968 in 4505f07

sgx_dbg(encl, "EINIT returned %d\n", ret);

[RealityAnomaly]

I should be using signed binaries - for reference, this is the Nix derivation I wrote to build the SDK and PSW from source: https://gist.github.com/CitadelCore/2acfc56a8abaead11a2d32a785c267b4 - as you can see I'm fetching them from https://download.01.org/intel-sgx/sgx-linux.

Will get back to you re. the output of that debug statement with kernel debugging on.

[Time0o]

@citadelcore Did you ever resolve this? I think I'm seeing the same problem here.