Merge pull request #725 from haitaohuang/docker_aesm

docker: run aesm with root

Author: haitaohuang

docker/build/Dockerfile

@@ -73,7 +73,7 @@ RUN apt-get update && apt-get install -y \
 WORKDIR /installer
 COPY --from=builder /linux-sgx/linux/installer/bin/*.bin ./
 RUN ./sgx_linux_x64_psw*.bin --no-start-aesm
-USER aesmd
+# Run the aesm service as root to ensure its access to /dev/sgx/provision
 WORKDIR /opt/intel/sgxpsw/aesm/
 ENV LD_LIBRARY_PATH=.
 CMD ./aesm_service --no-daemon

linux/installer/docker/Dockerfile

@@ -77,7 +77,7 @@ RUN apt-get install -y \
 # More aesm plugins, e.g libsgx-aesm-quote-ex-plugin, are needed if application requires attestation. See installation guide.
 RUN apt-get install -y libsgx-aesm-launch-plugin
 
-USER aesmd
+# Run the aesm service as root to ensure its access to /dev/sgx/provision
 WORKDIR /opt/intel/sgx-aesm-service/aesm
 ENV LD_LIBRARY_PATH=.
 CMD ./aesm_service --no-daemon