@ethernity-cloud/sdk-js 1.1.0

package/nodenithy/public/index.html

@@ -0,0 +1,43 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <link rel="icon" href="%PUBLIC_URL%/favicon.ico" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="theme-color" content="#000000" />
+    <meta
+      name="description"
+      content="Web site created using create-react-app"
+    />
+    <link rel="apple-touch-icon" href="%PUBLIC_URL%/logo192.png" />
+    <!--
+      manifest.json provides metadata used when your web app is installed on a
+      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
+    -->
+    <link rel="manifest" href="%PUBLIC_URL%/manifest.json" />
+    <!--
+      Notice the use of %PUBLIC_URL% in the tags above.
+      It will be replaced with the URL of the `public` folder during the build.
+      Only files inside the `public` folder can be referenced from the HTML.
+
+      Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will
+      work correctly both with client-side routing and a non-root public URL.
+      Learn how to configure a non-root public URL by running `npm run build`.
+    -->
+    <title>React App</title>
+  </head>
+  <body>
+    <noscript>You need to enable JavaScript to run this app.</noscript>
+    <div id="root"></div>
+    <!--
+      This HTML file is a template.
+      If you open it directly in the browser, you will see an empty page.
+
+      You can add webfonts, meta tags, or analytics to this file.
+      The build step will place the bundled scripts into the <body> tag.
+
+      To begin the development, run `npm start` or `yarn start`.
+      To create a production bundle, use `npm run build` or `yarn build`.
+    -->
+  </body>
+</html>

package/nodenithy/public/manifest.json

@@ -0,0 +1,25 @@
+{
+  "short_name": "React App",
+  "name": "Create React App Sample",
+  "icons": [
+    {
+      "src": "favicon.ico",
+      "sizes": "64x64 32x32 24x24 16x16",
+      "type": "image/x-icon"
+    },
+    {
+      "src": "logo192.png",
+      "type": "image/png",
+      "sizes": "192x192"
+    },
+    {
+      "src": "logo512.png",
+      "type": "image/png",
+      "sizes": "512x512"
+    }
+  ],
+  "start_url": ".",
+  "display": "standalone",
+  "theme_color": "#000000",
+  "background_color": "#ffffff"
+}

package/nodenithy/public/robots.txt

@@ -0,0 +1,3 @@
+# https://www.robotstxt.org/robotstxt.html
+User-agent: *
+Disallow:

package/nodenithy/run/app/input.txt

@@ -0,0 +1,4 @@
+function sum(a, b) {
+    return a+b;
+}
+___etny_result___(sum(1, 2).toString());

package/nodenithy/run/app/payload.js

@@ -0,0 +1,4 @@
+function sum(a, b) {
+    return a+b;
+}
+___etny_result___(sum(1, 2).toString());

package/nodenithy/run/docker-compose-final.yml.tmpl

@@ -0,0 +1,65 @@
+version: '3.2'
+services:
+  las:
+    container_name: las
+    privileged: true
+    image: localhost:5000/etny-las
+    entrypoint: "/las_entrypoint.sh"
+    command: "/usr/local/bin/las"
+    networks:
+      - ethernity
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    restart: on-failure
+    ports:
+      - target: 18766
+        published: 18766
+        protocol: tcp
+        mode: host
+
+  etny-securelock:
+    container_name: etny-securelock
+    privileged: true
+    image: localhost:5000/etny-securelock
+    entrypoint: ""
+    command: [ "/usr/local/bin/node", "/etny-securelock/securelock.js" ]
+    environment:
+      - SCONE_CAS_ADDR=scone-cas.cf
+      - SCONE_LAS_ADDR=las
+      - SCONE_CONFIG_ID=__ENCLAVE_NAME_SECURELOCK__/application
+      - SCONE_HEAP=1024M
+      - SCONE_LOG=DEBUG
+      - SCONE_ALLOW_DLOPEN=1
+      - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+    restart: on-failure
+    networks:
+      - ethernity
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    depends_on:
+      - las
+
+  etny-trustedzone:
+    container_name: etny-trustedzone
+    privileged: true
+    image: localhost:5000/etny-trustedzone
+    entrypoint: ""
+    command: [ "/usr/local/bin/node", "/etny-trustedzone/trustedzone.js" ]
+    environment:
+      - SCONE_CAS_ADDR=scone-cas.cf
+      - SCONE_LAS_ADDR=las
+      - SCONE_CONFIG_ID=__ENCLAVE_NAME_TRUSTEDZONE__/application
+      - SCONE_HEAP=256M
+      - SCONE_LOG=DEBUG
+      - SCONE_ALLOW_DLOPEN=1
+      - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+    restart: on-failure
+    networks:
+      - ethernity
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    depends_on:
+      - las
+networks:
+  ethernity:
+    external: true

package/nodenithy/run/docker-compose-swift-stream.yml

@@ -0,0 +1,17 @@
+version: '3.2'
+
+services:
+  etny-swift-stream:
+    container_name: etny-swift-stream
+    image: quay.io/minio/minio:RELEASE.2023-03-13T19-46-17Z
+    command: server /data
+    ports:
+      - "9000:9000"
+    environment:
+      MINIO_ROOT_USER: swiftstreamadmin
+      MINIO_ROOT_PASSWORD: swiftstreamadmin
+    healthcheck:
+      test: [ "CMD", "curl", "-f", "http://docker:9000/minio/health/live" ]
+      interval: 30s
+      timeout: 20s
+      retries: 3

package/nodenithy/run/docker-compose.yml.tmpl

@@ -0,0 +1,76 @@
+version: '3.2'
+services:
+  las:
+    container_name: las
+    privileged: true
+    image: localhost:5000/etny-las
+    entrypoint: "/las_entrypoint.sh"
+    command: "/usr/local/bin/las"
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    restart: on-failure
+    ports:
+      - target: 18766
+        published: 18766
+        protocol: tcp
+        mode: host
+
+  etny-securelock:
+    container_name: etny-securelock
+    privileged: true
+    image: localhost:5000/etny-securelock
+    entrypoint: ""
+    command: [ "/usr/local/bin/node", "/etny-securelock/securelock.js" ]
+    environment:
+      - SCONE_CAS_ADDR=scone-cas.cf
+      - SCONE_LAS_ADDR=las
+      - SCONE_CONFIG_ID=__ENCLAVE_NAME_SECURELOCK__/application
+      - SCONE_HEAP=1024M
+      - SCONE_LOG=DEBUG
+      - SCONE_ALLOW_DLOPEN=1
+      - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+    restart: on-failure:5
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    depends_on:
+      - las
+
+  etny-trustedzone:
+    container_name: etny-trustedzone
+    privileged: true
+    image: localhost:5000/etny-trustedzone
+    entrypoint: ""
+    command: [ "/usr/local/bin/node", "/etny-trustedzone/trustedzone.js" ]
+    environment:
+      - SCONE_CAS_ADDR=scone-cas.cf
+      - SCONE_LAS_ADDR=las
+      - SCONE_CONFIG_ID=__ENCLAVE_NAME_TRUSTEDZONE__/application
+      - SCONE_HEAP=256M
+      - SCONE_LOG=DEBUG
+      - SCONE_ALLOW_DLOPEN=1
+      - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+    restart: on-failure
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    depends_on:
+      - las
+
+  etny-validator:
+    container_name: etny-validator
+    privileged: true
+    image: localhost:5000/etny-validator
+    entrypoint: ""
+    command: [ "/usr/local/bin/node", "/etny-validator/validator.js" ]
+    environment:
+      - SCONE_CAS_ADDR=scone-cas.cf
+      - SCONE_LAS_ADDR=las
+      - SCONE_CONFIG_ID=ecld-nodenithy/application
+      - SCONE_HEAP=256M
+      - SCONE_LOG=DEBUG
+      - SCONE_ALLOW_DLOPEN=1
+      - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+    restart: on-failure:5
+    devices:
+      - "/dev/sgx_enclave:/dev/sgx_enclave"
+    depends_on:
+      - las

package/nodenithy/run/etny-securelock-test.yaml.tpl

@@ -0,0 +1,46 @@
+name: __ENCLAVE_NAME__
+version: "0.3"
+__PREDECESSOR__
+
+security:
+  attestation:
+    tolerate: [hyperthreading, outdated-tcb, software-hardening-needed, debug-mode]
+    ignore_advisories: ["INTEL-SA-00220", "INTEL-SA-00270", "INTEL-SA-00293", "INTEL-SA-00320", "INTEL-SA-00329", "INTEL-SA-00334", "INTEL-SA-00381", "INTEL-SA-00389", "INTEL-SA-00477", "INTEL-SA-00614", "INTEL-SA-00615", "INTEL-SA-00617", "INTEL-SA-00828"]
+
+services:
+   - name: application
+     image_name: application_image
+     mrenclaves: [ "__MRENCLAVE__" ]
+     command: /usr/local/bin/node /etny-securelock/securelock.js
+     pwd: /
+     environment:
+        GREETING: hello from ETNY SECURELOCK!!!!
+
+images:
+   - name: application_image
+     injection_files:
+       - path: /app/__ENCLAVE_NAME__/ca.pem
+         content: $$SCONE::CA_CERT:crt$$
+       - path: /app/__ENCLAVE_NAME__/cert.pem
+         content: $$SCONE::SERVER_CERT:crt$$
+       - path: /private/__ENCLAVE_NAME__/key.pem
+         content: $$SCONE::SERVER_CERT:privatekey$$
+
+secrets:
+   - name: CA_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: true
+   - name: CA_CERT
+     kind: x509-ca
+     private_key: CA_KEY
+     valid_for: 3560d
+   - name: SERVER_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: false
+   - name: SERVER_CERT
+     issuer: CA_CERT
+     kind: x509
+     endpoint: server
+     private_key: SERVER_KEY

package/nodenithy/run/etny-trustedzone-test.yaml.tpl

@@ -0,0 +1,45 @@
+name: __ENCLAVE_NAME__
+version: "0.3"
+__PREDECESSOR__
+
+security:
+  attestation:
+    tolerate: [hyperthreading, outdated-tcb, software-hardening-needed]
+
+services:
+   - name: application
+     image_name: application_image
+     mrenclaves: [ "__MRENCLAVE__", "__MRENCLAVE_VALIDATOR__" ]
+     command: /usr/local/bin/node /etny-trustedzone/trustedzone.js
+     pwd: /
+     environment:
+        GREETING: hello from ETNY TRUSTEDZONE!!!!
+
+images:
+   - name: application_image
+     injection_files:
+       - path: /app/__ENCLAVE_NAME__/ca.pem
+         content: $$SCONE::CA_CERT:crt$$
+       - path: /app/__ENCLAVE_NAME__/cert.pem
+         content: $$SCONE::SERVER_CERT:crt$$
+       - path: /private/__ENCLAVE_NAME__/key.pem
+         content: $$SCONE::SERVER_CERT:privatekey$$
+
+secrets:
+   - name: CA_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: true
+   - name: CA_CERT
+     kind: x509-ca
+     private_key: CA_KEY
+     valid_for: 3560d
+   - name: SERVER_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: false
+   - name: SERVER_CERT
+     issuer: CA_CERT
+     kind: x509
+     endpoint: server
+     private_key: SERVER_KEY

package/nodenithy/run/git.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+# apk add git
+
+# ls -la
+
+# echo "${REGISTRY_PATH}"
+# cd ${REGISTRY_PATH}
+
+# ls -la
+
+# #commit add all to git
+# ls -la ${CI_PROJECT_DIR}/etny-hash-packages/etny-nodenithy/v3/
+# echo "Adding changed files to GIT: IPFS_HASH, IPFS_DOCKER_COMPOSE_HASH, CERTIFICATE..."
+# git -C ${CI_PROJECT_DIR}/etny-hash-packages add etny-nodenithy/v3/.
+# echo "Committed all files"
+# git -C ${CI_PROJECT_DIR}/etny-hash-packages commit -m 'Adding changed files to GIT: IPFS_HASH, IPFS_DOCKER_COMPOSE_HASH, CERTIFICATE'
+# echo "Pushed all files"
+# git -C ${CI_PROJECT_DIR}/etny-hash-packages push
+# echo "Added and committed all files"
+# cd -
+

package/nodenithy/run/image_registry.abi

@@ -0,0 +1 @@
+[{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"wallet","type":"address"}],"name":"AllowedWalletAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"wallet","type":"address"}],"name":"AllowedWalletRemoved","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"},{"indexed":false,"internalType":"string","name":"publicKey","type":"string"},{"indexed":false,"internalType":"string","name":"version","type":"string"}],"name":"ImageAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"ImagePublished","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"ImageRemoved","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"ImageValidated","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"previousOwner","type":"address"},{"indexed":true,"internalType":"address","name":"newOwner","type":"address"}],"name":"OwnerChanged","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"TrustedZoneImageAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"TrustedZoneImageRemoved","type":"event"},{"inputs":[{"internalType":"address","name":"wallet","type":"address"}],"name":"addAllowedWallet","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"}],"name":"addImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"}],"name":"addTrustedZoneImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"address","name":"newRewardAddress","type":"address"}],"name":"changeImageRewardAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"newOwner","type":"address"}],"name":"changeOwner","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"address","name":"newRewardAddress","type":"address"}],"name":"changeTrustedZoneImageRewardAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"publishImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"wallet","type":"address"}],"name":"removeAllowedWallet","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"validateImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"allowedWallets","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getImageCertPublicKey","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getImageSession","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"version","type":"string"}],"name":"getLatestImageVersionPublicKey","outputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"version","type":"string"}],"name":"getLatestTrustedZoneImageCertPublicKey","outputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getRewardAddress","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getTrustedZoneImageCertPublicKey","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getTrustedZoneImageSession","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getTrustedZoneRewardAddress","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"}],"name":"imageDetails","outputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"},{"internalType":"address","name":"rewardAddress","type":"address"},{"internalType":"bool","name":"validated","type":"bool"},{"internalType":"bool","name":"published","type":"bool"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"name","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"","type":"uint256"}],"name":"images","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"imageVersions","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"imageVersionsHash","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"owner","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"}],"name":"trustedZoneImageDetails","outputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"},{"internalType":"address","name":"rewardAddress","type":"address"},{"internalType":"bool","name":"validated","type":"bool"},{"internalType":"bool","name":"published","type":"bool"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"name","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"trustedZoneImageVersions","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"trustedZoneVersionsHash","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"}]