OE_DEBUG_DOWNGRADE | Start node on local machine without SGX

[Dutchprogrammer]

After making a config file, we tried to start a node without sandbox mode. But week getting this error:

2021-10-13T13:22:16.566204Z        100 [info ] ../src/host/main.cpp:519             | Recovery threshold unset. Defaulting to number of initial consortium members with a public encryption key (0).
terminating with uncaught exception of type std::logic_error: Could not create enclave: OE_DEBUG_DOWNGRADE
Stack trace (most recent call last):
#11   Object "[0xffffffffffffffff]", at 0xffffffffffffffff, in 
#10   Object "/opt/ccf/bin/cchost", at 0x40d43d, in 
#9    Object "/lib/x86_64-linux-gnu/libc.so.6", at 0x7fece43af0b2, in __libc_start_main
#8    Object "/opt/ccf/bin/cchost", at 0x41753e, in 
#7    Object "/opt/ccf/bin/cchost", at 0x42c38a, in 
#6    Object "/lib/x86_64-linux-gnu/libc++abi.so.1", at 0x7fece4a3df30, in __cxa_throw
#5    Object "/lib/x86_64-linux-gnu/libc++abi.so.1", at 0x7fece4a3dfa5, in 
#4    Object "/lib/x86_64-linux-gnu/libc++abi.so.1", at 0x7fece4a3b255, in 
#3    Object "/lib/x86_64-linux-gnu/libc++abi.so.1", at 0x7fece4a2561e, in 
#2    Object "/lib/x86_64-linux-gnu/libc++abi.so.1", at 0x7fece4a3c14f, in 
#1    Object "/lib/x86_64-linux-gnu/libc.so.6", at 0x7fece43ad858, in abort
#0    Object "/lib/x86_64-linux-gnu/libc.so.6", at 0x7fece43ce18b, in gsignal
Aborted (Signal sent by tkill() 8020 0)

2021-10-13T13:22:16.631480Z        100 [fatal] ../src/ds/stacktrace_utils.h:53      | Handled fatal signal 6
Aborted

Our config file:

enclave-file = /opt/ccf/lib/libjs_generic.enclave.so.signed
enclave-type = 1
consensus = cft
rpc-address = 127.0.0.1:6600
node-address = 127.0.0.1:7700
public-rpc-address = 127.0.0.1:6600
ledger-dir = ./ledger
node-cert-file = nodecert.pem
[start]
member-info = member0_cert.pem
constitution = /home/koen/CCF/src/runtime_config/default/actions.js

What are we missing?

[achamayou]

Which release is that? Is this an enclave you built yourself? If so, could you run "/opt/openenclave/bin/oesign dump --enclave-image /opt/ccf/lib/libjs_generic.enclave.so.signed" and share the output please.

Your configuration "enclave-type = 1" says you want to run this enclave in debug mode, but if it is a release enclave like the name suggests, then you will hit this error. Set enclave-type = 0 to run in release mode, as per:

$ ./cchost --help | grep enclave-type
  -t,--enclave-type ENUM:value in {release->0,debug->1,virtual->2} OR {0,1,2} REQUIRED

[achamayou]

@Dutchprogrammer I seem to have missed the "without SGX" in the title. If you are running without SGX, you want to use one of the .virtual .so files, cchost.virtual and enclave-type = 2 (see https://microsoft.github.io/CCF/main/operations/start_network.html#virtual-mode).