mirror of
https://github.com/matter-labs/teepot.git
synced 2025-07-22 07:24:48 +02:00
feat: attestation test on azure and default dcap
``` ❯ docker run -i --rm --privileged --device /dev/sgx_enclave --net host \ matterlabsrobot/teepot-self-attestation-test-sgx-azure:latest \ | base64 -d --ignore-garbage \ | docker run -i --rm --net host matterlabsrobot/verify-attestation-sgx-azure:latest ``` Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
This commit is contained in:
parent
96f53752f1
commit
97420df006
15 changed files with 355 additions and 28 deletions
38
packages/container-verify-attestation-sgx-azure/default.nix
Normal file
38
packages/container-verify-attestation-sgx-azure/default.nix
Normal file
|
@ -0,0 +1,38 @@
|
|||
# SPDX-License-Identifier: Apache-2.0
|
||||
# Copyright (c) 2024 Matter Labs
|
||||
{ lib
|
||||
, dockerTools
|
||||
, buildEnv
|
||||
, teepot
|
||||
, openssl
|
||||
, curl
|
||||
, nixsgx
|
||||
, ...
|
||||
}:
|
||||
dockerTools.buildLayeredImage {
|
||||
name = "verify-attestation-sgx-azure";
|
||||
tag = "latest";
|
||||
|
||||
config.Cmd = [ "${teepot.teepot.verify_attestation}/bin/verify-attestation" ];
|
||||
config.Env = [
|
||||
"LD_LIBRARY_PATH=/lib"
|
||||
"AZDCAP_DEBUG_LOG_LEVEL=ignore"
|
||||
"AZDCAP_COLLATERAL_VERSION=v4"
|
||||
];
|
||||
contents = buildEnv {
|
||||
name = "image-root";
|
||||
|
||||
paths = with dockerTools; with nixsgx;[
|
||||
openssl.out
|
||||
curl.out
|
||||
azure-dcap-client
|
||||
sgx-dcap.quote_verify
|
||||
teepot.teepot.verify_attestation
|
||||
usrBinEnv
|
||||
binSh
|
||||
caCertificates
|
||||
fakeNss
|
||||
];
|
||||
pathsToLink = [ "/bin" "/lib" "/etc" "/share" ];
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue