feat: use nixsgx nix function to create containers

It refactors the way the SGX containers are built.
This removes all `Dockerfile` and gramine manifest files.
It also enables a single recipe for azure and non-azure variants.

Additionally the `teepot-crate.nix` is now the inherited recipe to
build the rust `teepot` crate.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>

packages/container-self-attestation-test-sgx-azure/default.nix

@@ -1,50 +1,35 @@
 # SPDX-License-Identifier: Apache-2.0
 # Copyright (c) 2024 Matter Labs
-{ pkgs
-, nixsgx
-, curl
+{ lib
+, pkgs
+, inputs
 , teepot
-, bash
-, coreutils
-, openssl
+, nixsgx
+, container-name ? "teepot-self-attestation-test-sgx-azure"
+, tag ? "latest"
+, isAzure ? true
 }:
-let manifest = ./tee-self-attestation-test.manifest.toml;
-in pkgs.dockerTools.buildLayeredImage {
-  name = "teepot-self-attestation-test-sgx-azure";
-  tag = "base";
+pkgs.callPackage inputs.nixsgx-flake.lib.mkSGXContainer {
+  name = container-name;
+  inherit tag;
 
-  config.Entrypoint = [ "/bin/sh" "-c" ];
+  packages = [ teepot.teepot.tee_self_attestation_test ];
+  entrypoint = "${teepot.teepot.tee_self_attestation_test}/bin/tee-self-attestation-test";
 
-  contents = pkgs.buildEnv {
-    name = "image-root";
+  inherit isAzure;
 
-    paths = with pkgs.dockerTools; with nixsgx;[
-      bash
-      coreutils
-      openssl.out
-      azure-dcap-client
-      curl.out
-      teepot.teepot.tee_self_attestation_test
-      gramine
-      restart-aesmd
-      sgx-dcap.quote_verify
-      sgx-psw
-      usrBinEnv
-      binSh
-      caCertificates
-      fakeNss
-    ];
-    pathsToLink = [ "/bin" "/lib" "/etc" "/share" "/app" ];
-    postBuild = ''
-      mkdir -p $out/{app,etc}
-      cp ${manifest} $out/app/tee-self-attestation-test.manifest.toml
-      mkdir -p $out/var/run
-      mkdir -p $out/${nixsgx.sgx-psw.out}/aesm/
-      touch $out/etc/sgx_default_qcnl.conf
-      mkdir -p $out/opt/vault/.cache $out/opt/vault/tls
-      ln -s ${curl.out}/lib/libcurl.so $out/${nixsgx.sgx-psw.out}/aesm/
-      ln -s ${nixsgx.azure-dcap-client.out}/lib/libdcap_quoteprov.so $out/${nixsgx.sgx-psw.out}/aesm/libdcap_quoteprov.so.1
-      printf "precedence ::ffff:0:0/96  100\n" > $out/etc/gai.conf
-    '';
+  manifest = {
+    loader = {
+      log_level = "error";
+      env = {
+        RUST_BACKTRACE = "1";
+        RUST_LOG = "warning";
+      };
+    };
+    sgx = {
+      edmm_enable = false;
+      enclave_size = "2G";
+      max_threads = 64;
+    };
   };
 }