harald/teepot
1
0
Fork 0
mirror of https://github.com/matter-labs/teepot.git synced 2025-07-21 23:23:57 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

refactor(tdx_google): simplify service configurations

Browse source 
- Replaced hardcoded metadata-fetching logic with shared metadata service.
- Removed custom pre-start scripts and refactored environment handling.
- Updated Vector configuration to include custom field transformations.
- Streamlined container startup process and ensured proper cleanup.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
This commit is contained in:
Harald Hoyer 2025-02-19 11:01:25 +01:00
parent 5d2ad57cfd
commit 760ff7eff1
Signed by: harald
GPG key ID: F519A1143B3FBE32
4 changed files with 98 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

53
packages/tdx_google/metadata.nix Normal file
View file

@ -0,0 +1,53 @@
{ lib
, modulesPath
, pkgs
, ...
}: {
systemd.services.metadata = {
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
};
enable = true;
path = [ pkgs.curl pkgs.docker pkgs.teepot.teepot.tdx_extend pkgs.coreutils ];
wantedBy = [ "default.target" ];
after = [ "network-online.target" "docker.service" ];
requires = [ "network-online.target" "docker.service" ];
script = ''
set -eu -o pipefail
: "''${CONTAINER_HUB:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/attributes/container_hub" -H "Metadata-Flavor: Google")}"
: "''${CONTAINER_IMAGE:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/attributes/container_image" -H "Metadata-Flavor: Google")}"
: "''${CONTAINER_TOKEN:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/attributes/container_token" -H "Metadata-Flavor: Google")}"
: "''${CONTAINER_USER:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/attributes/container_user" -H "Metadata-Flavor: Google")}"
: "''${HOST_ID:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/id" -H "Metadata-Flavor: Google")}"
: "''${HOST_IMAGE:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/image" -H "Metadata-Flavor: Google")}"
: "''${HOST_NAME:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/hostname" -H "Metadata-Flavor: Google")}"
: "''${KAFKA_TOPIC:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/attributes/kafka_topic" -H "Metadata-Flavor: Google")}"
: "''${KAFKA_URLS:=$(curl --silent --fail "http://metadata.google.internal/computeMetadata/v1/instance/attributes/kafka_urls" -H "Metadata-Flavor: Google")}"
: "''${CONTAINER_IMAGE:?Error: Missing CONTAINER_IMAGE}"
: "''${CONTAINER_HUB:?Error: Missing CONTAINER_HUB}"
if [[ $CONTAINER_USER ]] && [[ $CONTAINER_TOKEN ]]; then
docker login -u "$CONTAINER_USER" -p "$CONTAINER_TOKEN" "$CONTAINER_HUB"
fi
docker pull "''${CONTAINER_HUB}/''${CONTAINER_IMAGE}"
CONTAINER_DIGEST=$(docker inspect --format '{{.Id}}' "''${CONTAINER_HUB}/''${CONTAINER_IMAGE}")
mkdir -p /run/env
cat >/run/env/env <<EOF
CONTAINER_HUB="''${CONTAINER_HUB}"
CONTAINER_IMAGE="''${CONTAINER_IMAGE}"
CONTAINER_TOKEN="''${CONTAINER_TOKEN}"
CONTAINER_USER="''${CONTAINER_USER}"
CONTAINER_DIGEST="''${CONTAINER_DIGEST}"
HOST_ID="''${HOST_ID}"
HOST_IMAGE="''${HOST_IMAGE}"
HOST_NAME="''${HOST_NAME}"
KAFKA_TOPIC="''${KAFKA_TOPIC}"
KAFKA_URLS="''${KAFKA_URLS}"
EOF
'';
};
}