mirror of
https://github.com/matter-labs/teepot.git
synced 2025-07-21 15:13:56 +02:00
5e4b8901b0
This is another variant of the binary tool for verifying attestation and the signature of a given batch. Unlike the existing tool, this variant does not require you to provide two separate files—one for the attestation and one for the signature. Instead, it automatically fetches both from the RPC node. Unfortunately, after discussing with @popzxc, we found that there is no way to reuse the RPC client because our published crates on crates.io are outdated and do not include the recently merged TEE-specific code changes. To be fixed in the future.
33 lines
750 B
Nix
33 lines
750 B
Nix
# SPDX-License-Identifier: Apache-2.0
|
|
# Copyright (c) 2024 Matter Labs
|
|
{ dockerTools
|
|
, buildEnv
|
|
, teepot
|
|
, openssl
|
|
, curl
|
|
, nixsgx
|
|
, pkg-config
|
|
}:
|
|
dockerTools.buildLayeredImage {
|
|
name = "verify-era-proof-attestation";
|
|
|
|
config.Entrypoint = [ "${teepot.teepot.verify_era_proof_attestation}/bin/verify-era-proof-attestation" ];
|
|
config.Env = [ "LD_LIBRARY_PATH=/lib" ];
|
|
contents = buildEnv {
|
|
name = "image-root";
|
|
|
|
paths = with dockerTools; with nixsgx;[
|
|
pkg-config
|
|
openssl.out
|
|
curl.out
|
|
sgx-dcap.quote_verify
|
|
sgx-dcap.default_qpl
|
|
teepot.teepot.verify_era_proof_attestation
|
|
usrBinEnv
|
|
binSh
|
|
caCertificates
|
|
fakeNss
|
|
];
|
|
pathsToLink = [ "/bin" "/lib" "/etc" "/share" ];
|
|
};
|
|
}
|