Add sgx-backwards-compatability package to marketplace images (#4054)

* initial commit for sgx package including udev rules

* Add License file

* Address review comments: Improve description in spec file and alphabetize packages in azurevm-packages.json

.github/workflows/validate-cg-manifest.sh

@@ -50,6 +50,7 @@ ignore_no_source_tarball=" \
   qt5-rpm-macros \
   verity-read-only-root \
   web-assets \
+  sgx-backwards-compatability \
   "
 
 # Specs where cgmanifest validation has known issues checking URLs.

SPECS/LICENSES-AND-NOTICES/data/licenses.json

@@ -2174,6 +2174,7 @@
                 "rubygem-yajl-ruby",
                 "rubygem-zip-zip",
                 "sdbus-cpp",
+                "sgx-backwards-compatability",
                 "shim",
                 "shim-unsigned",
                 "shim-unsigned-aarch64",

SPECS/sgx-backwards-compatability/99-sgx-backwards-compatability.rules

@@ -0,0 +1,2 @@
+SUBSYSTEM=="misc",KERNEL=="sgx_enclave",MODE="0666",SYMLINK+="sgx/enclave"
+SUBSYSTEM=="misc",KERNEL=="sgx_provision",GROUP="sgx_prv",MODE="0660",SYMLINK+="sgx/provision"

SPECS/sgx-backwards-compatability/LICENSE

@@ -0,0 +1,16 @@
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the “Software”), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

SPECS/sgx-backwards-compatability/sgx-backwards-compatability.signatures.json

@@ -0,0 +1,6 @@
+{
+  "Signatures": {
+    "99-sgx-backwards-compatability.rules": "bfe9f4dd8f4f927234246f179e6fd40bf55290cd232513dae10ede2526f9dc5f",
+    "LICENSE": "9697928f73693a3d3209147f81f3da021decbc7bb13776ab28342cfd1d7bfcaf"
+  }
+}

SPECS/sgx-backwards-compatability/sgx-backwards-compatability.spec

@@ -0,0 +1,44 @@
+Summary:        Custom udev rules to transition SGX applications from the DCAP driver to in-kernel SGX support
+Name:           sgx-backwards-compatability
+Version:        1.0.0
+Release:        1%{?dist}
+License:        MIT
+Vendor:         Microsoft Corporation
+Distribution:   Mariner
+Group:          System Environment/Base
+Source0:        99-sgx-backwards-compatability.rules
+Source1:        LICENSE
+
+Requires(pre):  %{_sbindir}/groupadd
+Requires(post): systemd-udev
+
+%description
+This package applies custom udev rules to create symlinks
+from /dev/sgx/{enclave,provision} to /dev/sgx_{enclave,provision}
+
+%prep
+
+%pre
+if ! getent group sgx_prv >/dev/null; then
+    groupadd sgx_prv
+fi
+
+%build
+
+%install
+mkdir -p %{buildroot}/etc/udev/rules.d
+install %{SOURCE0} %{buildroot}/etc/udev/rules.d/99-sgx-backwards-compatability.rules
+cp %{SOURCE1} LICENSE
+
+%files
+%license LICENSE
+/etc/udev/rules.d/99-sgx-backwards-compatability.rules
+
+%post
+udevadm trigger --subsystem-match=misc
+
+%changelog
+* Tue Oct 20 2022 Aadhar Agarwal <aadagarwal@microsoft.com> - 1.0.0-1
+- Original version for CBL-Mariner
+- Initial version of the sgx-backwards-compatability package
+- License verified

toolkit/imageconfigs/packagelists/azurevm-packages.json

@@ -9,6 +9,7 @@
         "openssh-server",
         "python3",
         "rsyslog",
+        "sgx-backwards-compatability",
         "WALinuxAgent",
         "wireless-regdb"
     ]