Debugging microservices in trusted execution environments

A computer system for trusted execution environment microservice debugging, the computer system comprising:

• a communication fabric;
• a set of computer-readable storage media connected to the communication fabric, wherein the set of computer-readable storage media collectively stores program instructions;
• and
• a set of processors connected to the communication fabric, wherein the set of processors executes the program instructions to:
• monitor, using a privilege separation secure channel client within a trusted execution environment, an internet protocol address and port number of a privilege separation secure channel server within a privilege separation container outside the trusted execution environment;
• determine, using the privilege separation secure channel client within the trusted execution environment, whether the privilege separation secure channel server within the privilege separation container outside the trusted execution environment is available for a new connection based on monitoring the internet protocol address and the port number of the privilege separation secure channel server;
• establish, using the privilege separation secure channel client within the trusted execution environment, the new connection with the privilege separation secure channel server within the privilege separation container outside the trusted execution environment via the internet protocol address and the port number of the privilege separation secure channel server in response to determining that the privilege separation secure channel server within the privilege separation container outside the trusted execution environment is available for the new connection based on monitoring the internet protocol address and the port number of the privilege separation secure channel server;
• perform, utilizing a debugger server within the trusted execution environment, a debug operation on a microservice while running in the trusted execution environment based on a set of microservice debug messages received from a client device of a user;
• send, utilizing the debugger server within the trusted execution environment, a microservice debug result of performing the debug operation on the microservice while running in the trusted execution environment to a debugger client within the privilege separation container outside the trusted execution environment via a secure channel between the privilege separation secure channel client within the trusted execution environment and the privilege separation secure channel server within the privilege separation container outside the trusted execution environment;
• and
• send, utilizing the debugger client within the privilege separation container outside the trusted execution environment, the microservice debug result of performing the debug operation on the microservice while running in the trusted execution environment to the client device of the user.

A computer program product for trusted execution environment microservice debugging, the computer program product comprising a set of computer-readable storage media having program instructions collectively stored therein, the program instructions executable by a computer to cause the computer to:

• monitor, using a privilege separation secure channel client within a trusted execution environment, an internet protocol address and port number of a privilege separation secure channel server within a privilege separation container outside the trusted execution environment;
• determine, using the privilege separation secure channel client within the trusted execution environment, whether the privilege separation secure channel server within the privilege separation container outside the trusted execution environment is available for a new connection based on monitoring the internet protocol address and the port number of the privilege separation secure channel server;
• establish, using the privilege separation secure channel client within the trusted execution environment, the new connection with the privilege separation secure channel server within the privilege separation container outside the trusted execution environment via the internet protocol address and the port number of the privilege separation secure channel server in response to determining that the privilege separation secure channel server within the privilege separation container outside the trusted execution environment is available for the new connection based on monitoring the internet protocol address and the port number of the privilege separation secure channel server;
• perform, utilizing a debugger server within the trusted execution environment, a debug operation on a microservice while running in the trusted execution environment based on a set of microservice debug messages received from a client device of a user;
• send, utilizing the debugger server within the trusted execution environment, a microservice debug result of performing the debug operation on the microservice while running in the trusted execution environment to a debugger client within the privilege separation container outside the trusted execution environment via a secure channel between the privilege separation secure channel client within the trusted execution environment and the privilege separation secure channel server within the privilege separation container outside the trusted execution environment;
• and
• send, utilizing the debugger client within the privilege separation container outside the trusted execution environment, the microservice debug result of performing the debug operation on the microservice while running in the trusted execution environment to the client device of the user.