Commit graph

244 commits

Author SHA1 Message Date
D025
7f525eb172
ci: change runners for execute jobs 2024-07-23 13:55:01 +00:00
Harald Hoyer
1397e3c2dd
Merge pull request #161 from matter-labs/patrick/simplify-dependencies
fix(verify-attestation): simplify dependencies
2024-07-22 15:41:48 +02:00
Patryk Bęza
ad6ce872f8
fix(verify-attestation): simplify dependencies
The zksync crates have recently been published on crates.io. Let's take
advantage of them! Specifically, we are replacing alloy-primitives with
zksync_basic_types to avoid the additional transitive dependencies
introduced by alloy.
2024-07-22 14:45:27 +02:00
Harald Hoyer
c48cbc636d
Merge pull request #156 from matter-labs/patrick/sgx-attestation-verifier
feat(verify-attestation): attestation and batch signature verification binary
2024-07-12 08:54:36 +02:00
Patryk Bęza
51c1e72a03
Use Docker's entrypoint instead of command 2024-07-11 17:49:37 +02:00
Patryk Bęza
78447ea307
Unify verify-attestation-sgx and verify-attestation
Rationale: too much copy-paste
2024-07-11 17:13:11 +02:00
Patryk Bęza
0a0811e99e
Fix formatting 2024-07-11 13:16:16 +02:00
Patryk Bęza
f3f6ea1dba
Introduce root_hash option 2024-07-11 11:29:37 +02:00
Patryk Bęza
f90088be76
SGX attestation & batch signature verification tool 2024-07-10 14:47:07 +02:00
Harald Hoyer
0d8943c582
Merge pull request #155 from matter-labs/fix_config_dns
fix: dns for vault nodes
2024-07-09 15:50:09 +02:00
otani
ace415a43e
fix: dns for vault nodes 2024-07-09 16:39:04 +03:00
Harald Hoyer
9826f028b4
Merge pull request #154 from matter-labs/teepot-dns
chore: change dns names for the vault cluster
2024-07-09 12:13:52 +02:00
Harald Hoyer
ae01290bcc
chore: change dns names for the vault cluster
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-09 11:11:10 +02:00
Harald Hoyer
8dadc1f76b
Merge pull request #150 from matter-labs/VAULT_AUTH_TEE_SHA256_FILE
fix(tee-vault-unseal): pick either `VAULT_AUTH_TEE_SHA256` string or file
2024-07-03 14:58:37 +02:00
Harald Hoyer
204aa33f7f
fix(tee-vault-unseal): pick either VAULT_AUTH_TEE_SHA256 string or file
Pick either `VAULT_AUTH_TEE_SHA256` or `VAULT_AUTH_TEE_SHA256_FILE`,
with `VAULT_AUTH_TEE_SHA256` having the precedence.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-03 14:42:06 +02:00
Harald Hoyer
502fa103ec
Merge pull request #149 from matter-labs/VAULT_AUTH_TEE_SHA256_FILE
fix(container-vault-unseal-sgx-azure): correct `VAULT_AUTH_TEE_SHA256_FILE`
2024-07-03 13:15:28 +02:00
Harald Hoyer
fd6fe49be7
fix(container-vault-unseal-sgx-azure): correct VAULT_AUTH_TEE_SHA256_FILE
use the correct environment variable name... sigh

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-03 12:08:49 +02:00
Harald Hoyer
8402eb6bd8
Merge pull request #148 from matter-labs/cacert
fix: update the common `cacert` and include it in the unseal container
2024-07-03 11:42:45 +02:00
Harald Hoyer
f1b8a48a6a
fix: update the common cacert and include it in the unseal container
The previous cacert expired. A new one was created and also included in the unseal container.

The path to access the cacert was fixed in the unseal app and made configurable via an environment variable.
2024-07-03 11:26:29 +02:00
Harald Hoyer
e3feac1cc3
Merge pull request #147 from matter-labs/vault_auth_tee_version
fix: hardcode VAULT_AUTH_TEE_VERSION in vault manifest
2024-07-03 10:14:20 +02:00
Harald Hoyer
160d133383
fix: hardcode VAULT_AUTH_TEE_VERSION in vault manifest
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-03 09:21:25 +02:00
Harald Hoyer
c44094107f
Merge pull request #140 from matter-labs/renovate/serde_with-3.x-lockfile
chore(deps): update rust crate serde_with to v3.8.2
2024-07-02 17:15:12 +02:00
renovate[bot]
50bf6bd57b
chore(deps): update rust crate serde_with to v3.8.2 2024-07-02 14:59:45 +00:00
Harald Hoyer
da3504c56e
Merge pull request #138 from matter-labs/renovate/pgp-0.x-lockfile
chore(deps): update rust crate pgp to v0.13.1
2024-07-02 16:58:56 +02:00
renovate[bot]
4d10b7368e
chore(deps): update rust crate pgp to v0.13.1 2024-07-02 14:15:24 +00:00
Harald Hoyer
4aecb526e8
Merge pull request #137 from matter-labs/renovate/clap-4.x-lockfile
chore(deps): update rust crate clap to v4.5.8
2024-07-02 16:14:12 +02:00
renovate[bot]
cce76133e0
chore(deps): update rust crate clap to v4.5.8 2024-07-02 13:42:52 +00:00
Harald Hoyer
23b1f96f44
Merge pull request #139 from matter-labs/renovate/serde_json-1.x-lockfile
chore(deps): update rust crate serde_json to v1.0.120
2024-07-02 15:41:46 +02:00
renovate[bot]
c0b49359b0
chore(deps): update rust crate serde_json to v1.0.120 2024-07-02 12:44:20 +00:00
Harald Hoyer
bd90955b67
Merge pull request #146 from matter-labs/k8s
chore: update k8s example files
2024-07-02 14:42:55 +02:00
Harald Hoyer
52fa4bbbfb
Merge branch 'main' into k8s 2024-07-02 14:36:30 +02:00
Harald Hoyer
70e743f994
Merge pull request #145 from matter-labs/fix_readme
chore: misc fixes
2024-07-02 14:31:03 +02:00
Harald Hoyer
2443bd1cb8
chore: update k8s example files
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-02 13:55:59 +02:00
Harald Hoyer
fc3fe37f81
fix: sgx.nonpie_binary option is deprecated
see https://github.com/gramineproject/gramine/pull/1187

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-02 13:14:38 +02:00
Harald Hoyer
b5fa7e1f44
chore: replace cache in flake.nix nixConfig
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-02 13:14:37 +02:00
Harald Hoyer
6d5e7fae15
docs: adapt README.md to reality
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-02 13:14:36 +02:00
Harald Hoyer
fa641d3578
Merge pull request #144 from matter-labs/flake_update
chore: update nixsgx-flake
2024-07-02 13:13:54 +02:00
Harald Hoyer
e82d0de55b
chore: update nixsgx-flake
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-02 12:46:49 +02:00
Harald Hoyer
81f42e7120
Merge pull request #143 from matter-labs/nixsgxLib.mkSGXContainer
feat: use `nixsgxLib.mkSGXContainer`
2024-07-01 17:55:33 +02:00
Harald Hoyer
943ef8c878
feat: use nixsgxLib.mkSGXContainer
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-01 17:25:00 +02:00
Harald Hoyer
4e5083def9
Merge pull request #142 from matter-labs/attic
chore: use attic nix cache
2024-07-01 17:16:19 +02:00
Harald Hoyer
915cbf88a9
chore: use attic nix cache
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-01 16:34:19 +02:00
Harald Hoyer
a8ddca7344
Merge pull request #141 from matter-labs/use-secp256k1-instead-of-k256
Replace secp256k1 with k256 crate
2024-07-01 15:58:56 +02:00
Patryk Bęza
78ed60b094
Whitelist CC0-1.0 license 2024-07-01 15:23:15 +02:00
Patryk Bęza
4c76318702
Replace secp256k1 with k256 crate
Rationale: we already have secp256k1 in our dependencies, as suggested
by Igor:
https://github.com/matter-labs/zksync-era/pull/2333#discussion_r1656531731
2024-07-01 14:17:13 +02:00
Harald Hoyer
be6aa0c96d
Merge pull request #136 from matter-labs/push_with_tags
chore: update GitHub Actions workflow configuration
2024-07-01 12:06:15 +02:00
Harald Hoyer
116c7f31e6
chore: update GitHub Actions workflow configuration
This update removes usage of cachix/cachix-action and updates job runner from ubuntu-latest to matterlabs-ci-runner in the GitHub Actions workflow. New configurations have been added for trusted-public-keys and substituters.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-01 10:33:29 +02:00
Harald Hoyer
aafca819b1
Merge pull request #135 from matter-labs/push_with_tags
chore: Update GitHub actions to run on custom runner and push to infra
2024-06-28 11:57:09 +02:00
Harald Hoyer
695355d095
chore: Update GitHub actions to run on custom runner and push to Google Artifact Registry
This commit updates the GitHub workflows to push Docker images to Google Artifact Registry.
Additionally, it refines event conditions, separates build ID generation for normal pushes and tag pushes, and introduces tagging workflow for '*-sgx-*' tags.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-28 10:41:58 +02:00
Harald Hoyer
8329eb8b96
Merge pull request #134 from matter-labs/renovate/log-0.x-lockfile
chore(deps): update rust crate log to v0.4.22
2024-06-28 10:24:42 +02:00