This document provides an overview of improvements and bug fixes in the Fortanix Confidential Computing Manager (CCM) 3.26 release.
Prerequisites
A container registry account to push the converted application container Image(s).
A subscription account on Azure Portal to create Compute Node/s.
Improvements
Enclave OS:
Enabling renaming of Unix domain socket address paths and fixing various symlink and link syscall bugs.
Increased the disk space capacity to 256 GB.
Bug Fixes
CCM SaaS:
Fixed an issue where the node enrollment with EPID attestation was failing with GroupOutOfDate error on nodes with older BIOS.
Enclave OS:
Fixed crashes during large file
writesyscall above 4GB.Fixed a bug where the
writeandprwritesyscalls were not appended to the file if the file was opened withO_APPENDflag and an lseek was done on the opened file descriptor.Fixed some relative path-related issues with link or symlink calls.
Fixed an issue that now statically links the enclave startup program to
muslto avoid problems during user or group management in the Nitro Enclave.
Limitations
Fortanix has a fair usage policy in this Early Customer Access Program. Hence, Fortanix has limited the resources one can create per account. Therefore, it is expected to observe a resource creation failure message once you have reached the max limit.
To report an issue/bug, visit https://support.fortanix.com/hc/en-us/requests/new.
Node Agent Download
Download link for SGX Platform: https://support.fortanix.com/hc/en-us/articles/360043407012-Fortanix-Node-Agent-Software-Intel-SGX-Platform
Download link for AWS Nitro Platform: https://support.fortanix.com/hc/en-us/articles/4412575587732-Fortanix-Node-Agent-Software-AWS-Nitro-Platform
NOTE
The current version of the node agent on Azure Marketplace will not create certificates.