fix: don't tag the nix produced container with latest

leave it to the github workflow on push to main

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>

packages/container-self-attestation-test-sgx-azure/default.nix

@@ -6,7 +6,7 @@
 , teepot
 , nixsgx
 , container-name ? "teepot-self-attestation-test-sgx-azure"
-, tag ? "latest"
+, tag ? null
 , isAzure ? true
 }:
 pkgs.callPackage inputs.nixsgx-flake.lib.mkSGXContainer {

packages/container-vault-admin-sgx-azure/default.nix

@@ -6,8 +6,8 @@
 , teepot
 , nixsgx
 , container-name ? "teepot-vault-admin-sgx-azure"
-, tag ? "latest"
-, isAzure ? true
+, tag ? null
+, isAzure ? null
 }:
 pkgs.callPackage inputs.nixsgx-flake.lib.mkSGXContainer {
   name = container-name;

packages/container-vault-admin/default.nix

@@ -0,0 +1,28 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2024 Matter Labs
+{ dockerTools
+, nixsgx
+, teepot
+, buildEnv
+, curl
+}:
+dockerTools.buildLayeredImage {
+  name = "vault-unseal";
+
+  config.Entrypoint = [ "${teepot.teepot.vault_unseal}/bin/vault-unseal" ];
+
+  contents = buildEnv {
+    name = "image-root";
+    paths = with dockerTools; with nixsgx;[
+      azure-dcap-client
+      curl.out
+      sgx-dcap.quote_verify
+      usrBinEnv
+      binSh
+      caCertificates
+      fakeNss
+      teepot.teepot.vault_unseal
+    ];
+    pathsToLink = [ "/bin" "/lib" "/etc" ];
+  };
+}

packages/container-vault-sgx-azure/default.nix

@@ -8,7 +8,7 @@
 , vat
 , vault
 , container-name ? "teepot-vault-sgx-azure"
-, tag ? "latest"
+, tag ? null
 , isAzure ? true
 }:
 let

packages/container-vault-unseal-sgx-azure/default.nix

@@ -7,7 +7,7 @@
 , nixsgx
 , vat
 , container-name ? "teepot-vault-unseal-sgx-azure"
-, tag ? "latest"
+, tag ? null
 , isAzure ? true
 }:
 pkgs.callPackage inputs.nixsgx-flake.lib.mkSGXContainer {

packages/container-vault-unseal/default.nix

@@ -8,7 +8,6 @@
 }:
 dockerTools.buildLayeredImage {
   name = "vault-unseal";
-  tag = "latest";
 
   config.Entrypoint = [ "${teepot.teepot.vault_unseal}/bin/vault-unseal" ];
 

packages/container-verify-attestation-sgx/default.nix

@@ -9,7 +9,6 @@
 }:
 dockerTools.buildLayeredImage {
   name = "verify-attestation-sgx";
-  tag = "latest";
 
   config.Cmd = [ "${teepot.teepot.verify_attestation}/bin/verify-attestation" ];
   config.Env = [ "LD_LIBRARY_PATH=/lib" ];