Hello all,

I have been watching the Nitro Enclave Emulation patch
<https://patchwork.kernel.org/project/qemu-devel/cover/20241008211727.49088-1-dorjoychy...@gmail.com/>.
This would be a huge win for developer experience in Nitro Enclave
development.

I ran into some hardware issues and am curious if there are any known
workarounds. I was messaging with @Dorjoy Chowdhury <dorjoychy...@gmail.com> on
this issue and they suggested this group may have some ideas / definitive
answers.

*Goal*:
*emulate AWS Nitro Enclaves locally running on macOS with Apple silicon*

*Attempt*: *built vhost-device-vsock
<https://github.com/rust-vmm/vhost-device/tree/main/vhost-device-vsock> and
qemu
<https://gitlab.com/dorjoy03/qemu/-/commit/fe4ddb4e5b99136c948e687b8b18a505decc57bf>
(on *@Dorjoy Chowdhury <dorjoychy...@gmail.com>* 's branch) in an alpine
Docker image and attempted to run both with this script
<https://gist.github.com/payton/4ec0a08e618888adafb4b9a888513d91>*

*Problem*: *enclave emulation requires KVM support per the latest
documentation
<https://gitlab.com/dorjoy03/qemu/-/commit/fe4ddb4e5b99136c948e687b8b18a505decc57bf>,
which is specific to Linux, so even running Docker with privileged access
does not help because there is no KVM on macOS*

*Question:** is there a known way to get Nitro Enclave emulation working on
macOS with Apple silicon? One option that comes to mind is Apple's
hypervisor framework, but it's unclear to me if that can be a viable
replacement for enclave emulation.*

Thank you all for the support.

Best,
Payton

Reply via email to