harald/teepot
1
0
Fork 0
mirror of https://github.com/matter-labs/teepot.git synced 2025-07-21 15:13:56 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: add container-vault-admin

Browse source 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
This commit is contained in:
Harald Hoyer 2024-06-12 13:22:03 +02:00
parent de06acbef9
commit 9c01b0a281
Signed by: harald
GPG key ID: F519A1143B3FBE32
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
packages/container-vault-admin/default.nix
View file

@ -1,27 +1,29 @@
# SPDX-License-Identifier: Apache-2.0 # SPDX-License-Identifier: Apache-2.0
# Copyright (c) 2024 Matter Labs # Copyright (c) 2024 Matter Labs
{ dockerTools { dockerTools
, nixsgx
, teepot
, buildEnv , buildEnv
, teepot
, openssl
, curl , curl
, nixsgx
}: }:
dockerTools.buildLayeredImage { dockerTools.buildLayeredImage {
name = "vault-unseal"; name = "vault-admin";
config.Entrypoint = [ "${teepot.teepot.vault_unseal}/bin/vault-unseal" ]; config.Entrypoint = [ "${teepot.teepot.vault_admin}/bin/vault-admin" ];
contents = buildEnv { contents = buildEnv {
name = "image-root"; name = "image-root";
paths = with dockerTools; with nixsgx;[ paths = with dockerTools; with nixsgx;[
azure-dcap-client openssl.out
curl.out curl.out
sgx-dcap.quote_verify sgx-dcap.quote_verify
sgx-dcap.default_qpl
usrBinEnv usrBinEnv
binSh binSh
caCertificates caCertificates
fakeNss fakeNss
teepot.teepot.vault_unseal teepot.teepot.vault_admin
]; ];
pathsToLink = [ "/bin" "/lib" "/etc" ]; pathsToLink = [ "/bin" "/lib" "/etc" ];
}; };