mirror of
https://github.com/matter-labs/teepot.git
synced 2025-07-21 23:23:57 +02:00
de06acbef9
leave it to the github workflow on push to main Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
28 lines
573 B
Nix
28 lines
573 B
Nix
# SPDX-License-Identifier: Apache-2.0
|
|
# Copyright (c) 2024 Matter Labs
|
|
{ dockerTools
|
|
, nixsgx
|
|
, teepot
|
|
, buildEnv
|
|
, curl
|
|
}:
|
|
dockerTools.buildLayeredImage {
|
|
name = "vault-unseal";
|
|
|
|
config.Entrypoint = [ "${teepot.teepot.vault_unseal}/bin/vault-unseal" ];
|
|
|
|
contents = buildEnv {
|
|
name = "image-root";
|
|
paths = with dockerTools; with nixsgx;[
|
|
azure-dcap-client
|
|
curl.out
|
|
sgx-dcap.quote_verify
|
|
usrBinEnv
|
|
binSh
|
|
caCertificates
|
|
fakeNss
|
|
teepot.teepot.vault_unseal
|
|
];
|
|
pathsToLink = [ "/bin" "/lib" "/etc" ];
|
|
};
|
|
}
|