Commit graph

199 commits

Author SHA1 Message Date
Harald Hoyer
be6aa0c96d
Merge pull request #136 from matter-labs/push_with_tags
chore: update GitHub Actions workflow configuration
2024-07-01 12:06:15 +02:00
Harald Hoyer
116c7f31e6
chore: update GitHub Actions workflow configuration
This update removes usage of cachix/cachix-action and updates job runner from ubuntu-latest to matterlabs-ci-runner in the GitHub Actions workflow. New configurations have been added for trusted-public-keys and substituters.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-01 10:33:29 +02:00
Harald Hoyer
aafca819b1
Merge pull request #135 from matter-labs/push_with_tags
chore: Update GitHub actions to run on custom runner and push to infra
2024-06-28 11:57:09 +02:00
Harald Hoyer
695355d095
chore: Update GitHub actions to run on custom runner and push to Google Artifact Registry
This commit updates the GitHub workflows to push Docker images to Google Artifact Registry.
Additionally, it refines event conditions, separates build ID generation for normal pushes and tag pushes, and introduces tagging workflow for '*-sgx-*' tags.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-28 10:41:58 +02:00
Harald Hoyer
8329eb8b96
Merge pull request #134 from matter-labs/renovate/log-0.x-lockfile
chore(deps): update rust crate log to v0.4.22
2024-06-28 10:24:42 +02:00
renovate[bot]
1737f2d149
chore(deps): update rust crate log to v0.4.22 2024-06-28 01:01:27 +00:00
Harald Hoyer
4dff8586f7
Merge pull request #133 from matter-labs/renovate/trufflesecurity-trufflehog-3.x
chore(deps): update trufflesecurity/trufflehog action to v3.79.0
2024-06-27 17:25:20 +02:00
renovate[bot]
1699b1cc87
chore(deps): update trufflesecurity/trufflehog action to v3.79.0 2024-06-27 15:12:18 +00:00
Harald Hoyer
d0483f3c36
Merge pull request #132 from matter-labs/renovate/serde_json-1.x-lockfile
chore(deps): update rust crate serde_json to v1.0.118
2024-06-27 17:12:04 +02:00
renovate[bot]
b77f130ffa
chore(deps): update rust crate serde_json to v1.0.118 2024-06-27 14:58:33 +00:00
Harald Hoyer
8d1f8a8968
Merge pull request #131 from matter-labs/renovate/bitflags-2.x-lockfile
chore(deps): update rust crate bitflags to v2.6.0
2024-06-27 16:22:27 +02:00
renovate[bot]
6a3d2eaaa7
chore(deps): update rust crate bitflags to v2.6.0 2024-06-25 01:46:09 +00:00
Harald Hoyer
440f364972
Merge pull request #130 from matter-labs/cleanup_dockerfiles
chore: remove obsolete Dockerfiles
2024-06-21 12:04:56 +02:00
Harald Hoyer
1505b14db0
chore: remove obsolete Dockerfiles
all is built via nix and maintaining those files would mean more work.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-21 11:23:41 +02:00
Harald Hoyer
a04b0da7a5
Merge pull request #129 from matter-labs/renovate/trufflesecurity-trufflehog-3.x
chore(deps): update trufflesecurity/trufflehog action to v3.78.2
2024-06-21 11:19:52 +02:00
renovate[bot]
ca690df77d
chore(deps): update trufflesecurity/trufflehog action to v3.78.2 2024-06-21 08:12:20 +00:00
Harald Hoyer
f82ccb43e2
Merge pull request #128 from matter-labs/cargo_update_taplo_fmt
chore: cargo update + taplo fmt
2024-06-21 10:11:55 +02:00
Harald Hoyer
df7973c501
chore: cargo update + taplo fmt
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-20 14:00:18 +02:00
Harald Hoyer
95a7929291
Merge pull request #123 from matter-labs/renovate/pgp-0.x
chore(deps): update rust crate pgp to 0.13
2024-06-20 09:30:40 +02:00
renovate[bot]
0a01ae50e2
chore(deps): update rust crate pgp to 0.13 2024-06-18 09:15:55 +00:00
Harald Hoyer
c6ad703be9
Merge pull request #124 from matter-labs/remove_mio_workaround
feat: remove mio workaround with gramine 1.7
2024-06-18 11:13:22 +02:00
Harald Hoyer
8fa8f0438b
feat: remove mio workaround with gramine 1.7
gramine 1.7 now supports eventfd.
Update nixsgx flake and remove the `RUSTFLAGS`.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-18 10:38:23 +02:00
Harald Hoyer
4ef6a1943e
Merge pull request #121 from matter-labs/renovate/actions-checkout-digest
chore(deps): update actions/checkout digest to 692973e
2024-06-14 11:48:58 +02:00
renovate[bot]
6e57e4f1c9
chore(deps): update actions/checkout digest to 692973e 2024-06-13 17:10:58 +00:00
Harald Hoyer
b3a399f467
Merge pull request #120 from matter-labs/tee-key-preexec_pem
fix(tee-key-preexec): export the key in PEM
2024-06-13 14:25:47 +02:00
Harald Hoyer
d77243b8fd
fix(tee-key-preexec): export the key in PEM
makes it easier to import

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-13 14:00:43 +02:00
Harald Hoyer
60b75938ff
Merge pull request #119 from matter-labs/push_fix
ci: fix infra docker push
2024-06-12 16:18:35 +02:00
Harald Hoyer
7870e08779
ci: fix infra docker push
s/::/:/g

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 15:12:55 +02:00
Harald Hoyer
6d4211d3d5
Merge pull request #118 from matter-labs/deps_update_3
chore(deps): update deps and licenses
2024-06-12 15:10:45 +02:00
Harald Hoyer
795965dbbd
chore(deps): update deps and licenses
add `Unicode-3.0` as approved license.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 15:00:10 +02:00
Harald Hoyer
8e1759901f
Merge pull request #117 from matter-labs/container-push
ci: fix and revise docker push strategy
2024-06-12 14:59:40 +02:00
Harald Hoyer
cfb133bca9
ci: fix and revise docker push strategy
- containers are not `latest` by default anymore
- `latest` tag is only set on push to main branch
- buildid tag is only set on push to main branch, and
  changed to the infra repo soonish
- added the missing `vault-unseal` and `vault-admin` container

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 14:06:27 +02:00
Harald Hoyer
4aa1f40c50
docs(examples): fix the container names
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 13:35:54 +02:00
Harald Hoyer
43a7931a40
fix(container-vault-unseal): remove azure config
Not needed anymore. Stuff can be gathered via the default qpl

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 13:32:51 +02:00
Harald Hoyer
9c01b0a281
feat: add container-vault-admin
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 13:32:34 +02:00
Harald Hoyer
de06acbef9
fix: don't tag the nix produced container with latest
leave it to the github workflow on push to main

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-12 13:21:44 +02:00
Harald Hoyer
5c5ea357ea
Merge pull request #108 from matter-labs/renovate/trufflesecurity-trufflehog-3.x
chore(deps): update trufflesecurity/trufflehog action to v3.78.1
2024-06-11 22:18:08 +02:00
renovate[bot]
8049ae5cf1
chore(deps): update trufflesecurity/trufflehog action to v3.78.1 2024-06-11 19:59:54 +00:00
Harald Hoyer
7332842dad
Merge pull request #116 from matter-labs/container-refactor
feat: use nixsgx nix function to create containers
2024-06-11 17:22:00 +02:00
Harald Hoyer
d0c5950c0e
feat: use nixsgx nix function to create containers
It refactors the way the SGX containers are built.
This removes all `Dockerfile` and gramine manifest files.
It also enables a single recipe for azure and non-azure variants.

Additionally the `teepot-crate.nix` is now the inherited recipe to
build the rust `teepot` crate.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-10 16:32:02 +02:00
Harald Hoyer
93e3e73d56
Merge pull request #115 from matter-labs/VAULT_AUTH_TEE_SHA256_FILE
feat(tee-vault-unseal): add `VAULT_AUTH_TEE_SHA256_FILE`
2024-06-10 16:29:29 +02:00
Harald Hoyer
1f850d060e
feat(tee-vault-unseal): add VAULT_AUTH_TEE_SHA256_FILE
If `VAULT_AUTH_TEE_SHA256_FILE` is set,
read the sha value from the file,
rather from the environment variable.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-10 14:19:25 +02:00
Harald Hoyer
27f7f3b892
Merge pull request #114 from matter-labs/rust-1.78
chore(deps): update to rust version 1.78
2024-06-10 14:15:46 +02:00
Harald Hoyer
a9bb266668
chore(deps): update to rust version 1.78
and fix the clippy warnings

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-10 13:09:05 +02:00
Harald Hoyer
afceacd0d4
Merge pull request #106 from matter-labs/renovate/cachix-install-nix-action-27.x
chore(deps): update cachix/install-nix-action action to v27
2024-05-22 14:11:43 +02:00
renovate[bot]
01fb85ef04
chore(deps): update cachix/install-nix-action action to v27 2024-05-22 12:08:24 +00:00
Harald Hoyer
e90a171744
Merge pull request #105 from matter-labs/renovate/cachix-cachix-action-15.x
chore(deps): update cachix/cachix-action action to v15
2024-05-22 14:07:57 +02:00
renovate[bot]
d5b44bae8f
chore(deps): update cachix/cachix-action action to v15 2024-05-22 11:31:25 +00:00
Harald Hoyer
1ebbb01d20
Merge pull request #104 from matter-labs/renovate/trufflesecurity-trufflehog-3.x
chore(deps): update trufflesecurity/trufflehog action to v3.76.3
2024-05-22 13:30:55 +02:00
renovate[bot]
8863d4d691
chore(deps): update trufflesecurity/trufflehog action to v3.76.3 2024-05-21 22:33:59 +00:00