README.md: occlum can run on non-flc machine with dcap driver
Running occlum application based on dcap driver and non-flc machine, the patches
0001-SGX-DCAP-Linux-Driver-Support-SGX1-machine-even-without-FLC-s.patch and
0001-psw-Support-SGX1-machine-with-SGX-in-tree-driver.patch need be applied firstly.
Fixes:
@@ -5,7 +5,7 @@ There are still non-trivial number of systems without FLC support.
* Apply the patch `0001-SGX-DCAP-Linux-Driver-Support-SGX1-machine-even-without-FLC-s.patch` to [SGX DCAP Linux driver](https://github.com/intel/SGXDataCenterAttestationPrimitives).
* (**Depreciated**) Apply the patch `0001-sgx-Support-SGX1-machine-even-without-FLC-support.patch` to [v33 SGX in-tree driver](https://github.com/haitaohuang/linux-sgx-2/tree/v33).
- Apply the patch `0001-psw-Support-SGX1-machine-with-SGX-in-tree-driver.patch` to [Intel SGX SDK 2.10](https://github.com/intel/linux-sgx/tree/sgx_2.10) or higher.
- * Note: [Occlum](https://github.com/occlum/occlum) has a modified Intel SGX SDK repository named [`occlum/linux-sgx`](https://github.com/occlum/linux-sgx). So if not applying the patch `0001-psw-Support-SGX1-machine-with-SGX-in-tree-driver.patch` to `occlum/linux-sgx`, `Occlum` can't work with the `DCAP` or `in-tree` SGX Linux driver.
+ * Note: [Occlum](https://github.com/occlum/occlum) has a modified Intel SGX SDK repository named [`occlum/linux-sgx`](https://github.com/occlum/linux-sgx). So if applying the patch `0001-psw-Support-SGX1-machine-with-SGX-in-tree-driver.patch` to `occlum/linux-sgx`, `Occlum` can work with the `DCAP` or `in-tree` SGX Linux driver.
# Validation
- Successfully run the [`SampleEnclave`](https://github.com/intel/linux-sgx/tree/master/SampleCode/SampleEnclave) sample code
@@ -13,3 +13,4 @@ with `export LD_LIBRARY_PATH=/opt/intel/sgxpsw/aesm/:$LD_LIBRARY_PATH` as the pr
- Successfully run [sgx-tools](https://github.com/alibaba/inclavare-containers/tree/master/sgx-tools#test) to generate a launch token.
- Successfully run [skeleton bundle](https://github.com/alibaba/inclavare-containers/blob/master/rune/libenclave/internal/runtime/pal/skeleton/README.md).
* Note: specify `"enclave.runtime.args": "no-sgx-flc"` in config.json is required.
+- Successfully run occlum application example, refer to [Occlum application bundle](https://github.com/alibaba/inclavare-containers/blob/master/rune/README.md#creating-an-OCI-bundle).
