mirror of
https://github.com/matter-labs/teepot.git
synced 2025-07-21 23:23:57 +02:00
d0c5950c0e
It refactors the way the SGX containers are built. This removes all `Dockerfile` and gramine manifest files. It also enables a single recipe for azure and non-azure variants. Additionally the `teepot-crate.nix` is now the inherited recipe to build the rust `teepot` crate. Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
35 lines
728 B
Nix
35 lines
728 B
Nix
# SPDX-License-Identifier: Apache-2.0
|
|
# Copyright (c) 2024 Matter Labs
|
|
{ lib
|
|
, pkgs
|
|
, inputs
|
|
, teepot
|
|
, nixsgx
|
|
, container-name ? "teepot-self-attestation-test-sgx-azure"
|
|
, tag ? "latest"
|
|
, isAzure ? true
|
|
}:
|
|
pkgs.callPackage inputs.nixsgx-flake.lib.mkSGXContainer {
|
|
name = container-name;
|
|
inherit tag;
|
|
|
|
packages = [ teepot.teepot.tee_self_attestation_test ];
|
|
entrypoint = "${teepot.teepot.tee_self_attestation_test}/bin/tee-self-attestation-test";
|
|
|
|
inherit isAzure;
|
|
|
|
manifest = {
|
|
loader = {
|
|
log_level = "error";
|
|
env = {
|
|
RUST_BACKTRACE = "1";
|
|
RUST_LOG = "warning";
|
|
};
|
|
};
|
|
sgx = {
|
|
edmm_enable = false;
|
|
enclave_size = "2G";
|
|
max_threads = 64;
|
|
};
|
|
};
|
|
}
|