integrate Gramine into enclave-cc

[hairongchen]

this issue is to track the tasks and status of integration of Gramine into enclave-cc as it requires cooperation from other components and contributors.
Gramine integration includes the following tasks:

• adapt enclave-agent to gramine
• run gramine using runc
• build bundle to integrate
• integrate with ecc features
• run with operator

[hairongchen]

@ying2liu @mythi

[ying2liu]

The current status: "shared enclave-cc gramine code with Mikko for evaluation."

[ying2liu]

Gramine integration includes the following tasks:

• run gramine using runc
• build bundle to integrate with enclave-cc
• integrate with ecc features
• run with operator

[ying2liu]

The current status

Enclave-agent was able to:
• do remote attestation
• Get key from KBS
• Pull and decrypt image
• encrypt image using sealing key

app enclave was able to:
• Decrypt image using the sealing key
• Run app binary

[ying2liu]

@mythi Please add your input

[ariel-adam]

@ying2liu is this on track for 0.7.0 (feature freeze 12th of July) or should we move it to 0.8.0 or another feature release (it's been with us since February)?

[ariel-adam]

Moving to 0.8.0 given that 0.7.0 feature freeze is happening in 1 week