@ethernity-cloud/sdk-js 1.1.0

package/pynithy/run/docker-compose-final.yml.tmpl

@@ -0,0 +1,59 @@
+version: '3.2'
+services:
+    las:
+        container_name: las
+        privileged: true
+        image: localhost:5000/etny-las
+        entrypoint: "/las_entrypoint.sh"
+        command: "bash -c '/las_entrypoint.sh && /usr/local/bin/las | tee /var/log/las.log'"
+        restart: unless-stopped
+        networks:
+          - ethernity
+        ports:
+          - target: 18766
+            published: 18766
+            protocol: tcp
+            mode: host
+
+    etny-securelock:
+        container_name: etny-securelock
+        privileged: true
+        image: localhost:5000/etny-securelock
+        entrypoint: ""
+        command: [ "/usr/local/bin/python", "/etny-securelock/securelock.py" ]
+        environment:
+          - SCONE_CAS_ADDR=scone-cas.cf
+          - SCONE_LAS_ADDR=las
+          - SCONE_CONFIG_ID=__ENCLAVE_NAME_SECURELOCK__/application
+          - SCONE_HEAP=1024M
+          - SCONE_LOG=DEBUG
+          - SCONE_ALLOW_DLOPEN=1
+          - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+        restart: on-failure
+        networks:
+          - ethernity
+        depends_on:
+          - las
+
+    etny-trustedzone:
+      container_name: etny-trustedzone
+      privileged: true
+      image: localhost:5000/etny-trustedzone
+      entrypoint: ""
+      command: [ "/usr/local/bin/python", "/etny-trustedzone/trustedzone.py" ]
+      environment:
+        - SCONE_CAS_ADDR=scone-cas.cf
+        - SCONE_LAS_ADDR=las
+        - SCONE_CONFIG_ID=__ENCLAVE_NAME_TRUSTEDZONE__/application
+        - SCONE_HEAP=256M
+        - SCONE_LOG=DEBUG
+        - SCONE_ALLOW_DLOPEN=1
+        - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+      restart: on-failure
+      networks:
+        - ethernity
+      depends_on:
+        - las
+networks:
+  ethernity:
+    external: true

package/pynithy/run/docker-compose-swift-stream.yml

@@ -0,0 +1,27 @@
+version: '3.2'
+
+services:
+  minio:
+    container_name: etny-swift-stream
+    image: quay.io/minio/minio:RELEASE.2023-03-13T19-46-17Z
+    command: server /data/
+    expose:
+      - "9000"
+    ports:
+      - "0.0.0.0:9000:9000"
+    environment:
+      MINIO_ROOT_USER: swiftstreamadmin
+      MINIO_ROOT_PASSWORD: swiftstreamadmin
+    healthcheck:
+      test: [ "CMD", "curl", "-f", "http://docker:9000/minio/health/live" ]
+      interval: 30s
+      timeout: 20s
+      retries: 3
+#    networks:
+#      - ethernity
+#    volumes:
+#      - etny-swift-stream-data:/data
+
+# networks:
+#   ethernity:
+#     driver: bridge

package/pynithy/run/docker-compose-swift-stream.yml.tmpl

@@ -0,0 +1,27 @@
+version: '3.2'
+
+services:
+  minio:
+    container_name: etny-swift-stream
+    image: quay.io/minio/minio:RELEASE.2023-03-13T19-46-17Z
+    command: server /data/
+    expose:
+      - "9000"
+    ports:
+      - "0.0.0.0:9000:9000"
+    environment:
+      MINIO_ROOT_USER: swiftstreamadmin
+      MINIO_ROOT_PASSWORD: swiftstreamadmin
+    healthcheck:
+      test: [ "CMD", "curl", "-f", "http://docker:9000/minio/health/live" ]
+      interval: 30s
+      timeout: 20s
+      retries: 3
+#    networks:
+#      - ethernity
+#    volumes:
+#      - etny-swift-stream-data:/data
+
+# networks:
+#   ethernity:
+#     driver: bridge

package/pynithy/run/docker-compose.yml

@@ -0,0 +1,55 @@
+version: '3.2'
+services:
+    las:
+        container_name: las
+        privileged: true
+        image: localhost:5000/etny-las
+        command: "bash -c '/las_entrypoint.sh && /usr/local/bin/las | tee /var/log/las.log'"
+        devices:
+         - "/dev/sgx_enclave:/dev/sgx_enclave"
+        restart: unless-stopped
+        ports:
+          - target: 18766
+            published: 18766
+            protocol: tcp
+            mode: host
+
+    etny-securelock:
+        container_name: etny-securelock
+        privileged: true
+        image: localhost:5000/etny-securelock
+        entrypoint: ""
+        command: [ "/usr/local/bin/python", "/etny-securelock/securelock.py" ]
+        environment:
+          - SCONE_CAS_ADDR=scone-cas.cf
+          - SCONE_LAS_ADDR=las
+          - SCONE_CONFIG_ID=__ENCLAVE_NAME_SECURELOCK__/application
+          - SCONE_HEAP=1024M
+          - SCONE_LOG=INFO
+          - SCONE_ALLOW_DLOPEN=1
+          - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+        restart: on-failure:5
+        devices:
+          - "/dev/sgx_enclave:/dev/sgx_enclave"
+        depends_on:
+          - las
+
+    etny-trustedzone:
+      container_name: etny-trustedzone
+      privileged: true
+      image: localhost:5000/etny-trustedzone
+      entrypoint: ""
+      command: [ "/usr/local/bin/python", "/etny-trustedzone/trustedzone.py" ]
+      environment:
+        - SCONE_CAS_ADDR=scone-cas.cf
+        - SCONE_LAS_ADDR=las
+        - SCONE_CONFIG_ID=__ENCLAVE_NAME_TRUSTEDZONE__/application
+        - SCONE_HEAP=256M
+        - SCONE_LOG=DEBUG
+        - SCONE_ALLOW_DLOPEN=1
+        - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+      restart: on-failure:5
+      devices:
+        - "/dev/sgx_enclave:/dev/sgx_enclave"
+      depends_on:
+        - las

package/pynithy/run/docker-compose.yml.tmpl

@@ -0,0 +1,55 @@
+version: '3.2'
+services:
+    las:
+        container_name: las
+        privileged: true
+        image: localhost:5000/etny-las
+        command: "bash -c '/las_entrypoint.sh && /usr/local/bin/las | tee /var/log/las.log'"
+        devices:
+         - "/dev/sgx_enclave:/dev/sgx_enclave"
+        restart: unless-stopped
+        ports:
+          - target: 18766
+            published: 18766
+            protocol: tcp
+            mode: host
+
+    etny-securelock:
+        container_name: etny-securelock
+        privileged: true
+        image: localhost:5000/etny-securelock
+        entrypoint: ""
+        command: [ "/usr/local/bin/python", "/etny-securelock/securelock.py" ]
+        environment:
+          - SCONE_CAS_ADDR=scone-cas.cf
+          - SCONE_LAS_ADDR=las
+          - SCONE_CONFIG_ID=__ENCLAVE_NAME_SECURELOCK__/application
+          - SCONE_HEAP=1024M
+          - SCONE_LOG=INFO
+          - SCONE_ALLOW_DLOPEN=1
+          - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+        restart: on-failure:5
+        devices:
+          - "/dev/sgx_enclave:/dev/sgx_enclave"
+        depends_on:
+          - las
+
+    etny-trustedzone:
+      container_name: etny-trustedzone
+      privileged: true
+      image: localhost:5000/etny-trustedzone
+      entrypoint: ""
+      command: [ "/usr/local/bin/python", "/etny-trustedzone/trustedzone.py" ]
+      environment:
+        - SCONE_CAS_ADDR=scone-cas.cf
+        - SCONE_LAS_ADDR=las
+        - SCONE_CONFIG_ID=__ENCLAVE_NAME_TRUSTEDZONE__/application
+        - SCONE_HEAP=256M
+        - SCONE_LOG=DEBUG
+        - SCONE_ALLOW_DLOPEN=1
+        - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
+      restart: on-failure:5
+      devices:
+        - "/dev/sgx_enclave:/dev/sgx_enclave"
+      depends_on:
+        - las

package/pynithy/run/etny-pynity-test.yaml.tpl

@@ -0,0 +1,46 @@
+name: __ENCLAVE_NAME__
+version: "0.3"
+__PREDECESSOR__
+
+security:
+  attestation:
+    tolerate: [debug-mode, hyperthreading, outdated-tcb, software-hardening-needed]
+    ignore_advisories: "*"
+
+services:
+   - name: application
+     image_name: application_image
+     mrenclaves: [ "__MRENCLAVE__" ]
+     command: /usr/local/bin/python /etny-pynithy/etny_result.py
+     pwd: /
+     environment:
+        GREETING: hello ETNY!!!!
+
+images:
+   - name: application_image
+     injection_files:
+       - path: /app/ca.pem
+         content: $$SCONE::CA_CERT:crt$$
+       - path: /app/cert.pem
+         content: $$SCONE::SERVER_CERT:crt$$
+       - path: /private/key.pem
+         content: $$SCONE::SERVER_CERT:privatekey$$
+
+secrets:
+   - name: CA_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: true
+   - name: CA_CERT
+     kind: x509-ca
+     private_key: CA_KEY
+     valid_for: 3560d
+   - name: SERVER_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: false
+   - name: SERVER_CERT
+     issuer: CA_CERT
+     kind: x509
+     endpoint: server
+     private_key: SERVER_KEY

package/pynithy/run/etny-securelock-test.yaml.tpl

@@ -0,0 +1,46 @@
+name: __ENCLAVE_NAME__
+version: "0.3"
+__PREDECESSOR__
+
+security:
+  attestation:
+    tolerate: [debug-mode, hyperthreading, outdated-tcb, software-hardening-needed, debug-mode]
+    ignore_advisories: "*"
+
+services:
+   - name: application
+     image_name: application_image
+     mrenclaves: [ "__MRENCLAVE__" ]
+     command: /usr/local/bin/python /etny-securelock/securelock.py
+     pwd: /
+     environment:
+        GREETING: hello ETNY!!!!
+
+images:
+   - name: application_image
+     injection_files:
+       - path: /app/__ENCLAVE_NAME__/ca.pem
+         content: $$SCONE::CA_CERT:crt$$
+       - path: /app/__ENCLAVE_NAME__/cert.pem
+         content: $$SCONE::SERVER_CERT:crt$$
+       - path: /private/__ENCLAVE_NAME__/key.pem
+         content: $$SCONE::SERVER_CERT:privatekey$$
+
+secrets:
+   - name: CA_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: true
+   - name: CA_CERT
+     kind: x509-ca
+     private_key: CA_KEY
+     valid_for: 3560d
+   - name: SERVER_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: false
+   - name: SERVER_CERT
+     issuer: CA_CERT
+     kind: x509
+     endpoint: server
+     private_key: SERVER_KEY

package/pynithy/run/etny-trustedzone-test.yaml.tpl

@@ -0,0 +1,46 @@
+name: __ENCLAVE_NAME__
+version: "0.3"
+__PREDECESSOR__
+
+security:
+  attestation:
+    tolerate: [debug-mode, hyperthreading, outdated-tcb, software-hardening-needed]
+    ignore_advisories: "*"
+    
+services:
+   - name: application
+     image_name: application_image
+     mrenclaves: [ "__MRENCLAVE__", "2e0d912a68de525a0631d345af5af6126377ab27b9ef42373534255a320069e6" ]
+     command: /usr/local/bin/python /etny-trustedzone/trustedzone.py
+     pwd: /
+     environment:
+        GREETING: hello ETNY!!!!
+
+images:
+   - name: application_image
+     injection_files:
+       - path: /app/__ENCLAVE_NAME__/ca.pem
+         content: $$SCONE::CA_CERT:crt$$
+       - path: /app/__ENCLAVE_NAME__/cert.pem
+         content: $$SCONE::SERVER_CERT:crt$$
+       - path: /private/__ENCLAVE_NAME__/key.pem
+         content: $$SCONE::SERVER_CERT:privatekey$$
+
+secrets:
+   - name: CA_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: true
+   - name: CA_CERT
+     kind: x509-ca
+     private_key: CA_KEY
+     valid_for: 3560d
+   - name: SERVER_KEY
+     kind: private-key
+     key_type: P-384
+     migrate: false
+   - name: SERVER_CERT
+     issuer: CA_CERT
+     kind: x509
+     endpoint: server
+     private_key: SERVER_KEY

package/pynithy/run/git.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+apk add git
+
+ls -la
+
+echo "${REGISTRY_PATH}"
+cd ${REGISTRY_PATH}
+
+ls -la
+
+#commit add all to git
+ls -la ${CI_PROJECT_DIR}/etny-hash-packages/etny-pynithy/v3/
+echo "Adding changed files to GIT: IPFS_HASH, IPFS_DOCKER_COMPOSE_HASH, CERTIFICATE..."
+git -C ${CI_PROJECT_DIR}/etny-hash-packages add etny-pynithy/v3/.
+echo "Committed all files"
+git -C ${CI_PROJECT_DIR}/etny-hash-packages commit -m 'Adding changed files to GIT: IPFS_HASH, IPFS_DOCKER_COMPOSE_HASH, CERTIFICATE'
+echo "Pushed all files"
+git -C ${CI_PROJECT_DIR}/etny-hash-packages push
+echo "Added and committed all files"
+cd -
+

package/pynithy/run/image_registry.abi

@@ -0,0 +1 @@
+[{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"wallet","type":"address"}],"name":"AllowedWalletAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"wallet","type":"address"}],"name":"AllowedWalletRemoved","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"},{"indexed":false,"internalType":"string","name":"publicKey","type":"string"},{"indexed":false,"internalType":"string","name":"version","type":"string"}],"name":"ImageAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"ImagePublished","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"ImageRemoved","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"ImageValidated","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"previousOwner","type":"address"},{"indexed":true,"internalType":"address","name":"newOwner","type":"address"}],"name":"OwnerChanged","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"TrustedZoneImageAdded","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"string","name":"ipfsHash","type":"string"}],"name":"TrustedZoneImageRemoved","type":"event"},{"inputs":[{"internalType":"address","name":"wallet","type":"address"}],"name":"addAllowedWallet","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"}],"name":"addImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"}],"name":"addTrustedZoneImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"address","name":"newRewardAddress","type":"address"}],"name":"changeImageRewardAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"newOwner","type":"address"}],"name":"changeOwner","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"address","name":"newRewardAddress","type":"address"}],"name":"changeTrustedZoneImageRewardAddress","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"publishImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"address","name":"wallet","type":"address"}],"name":"removeAllowedWallet","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"validateImage","outputs":[],"stateMutability":"nonpayable","type":"function"},{"inputs":[],"stateMutability":"nonpayable","type":"constructor"},{"inputs":[{"internalType":"address","name":"","type":"address"}],"name":"allowedWallets","outputs":[{"internalType":"bool","name":"","type":"bool"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getImageCertPublicKey","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getImageSession","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"version","type":"string"}],"name":"getLatestImageVersionPublicKey","outputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"imageName","type":"string"},{"internalType":"string","name":"version","type":"string"}],"name":"getLatestTrustedZoneImageCertPublicKey","outputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getRewardAddress","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getTrustedZoneImageCertPublicKey","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getTrustedZoneImageSession","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"ipfsHash","type":"string"}],"name":"getTrustedZoneRewardAddress","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"}],"name":"imageDetails","outputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"},{"internalType":"address","name":"rewardAddress","type":"address"},{"internalType":"bool","name":"validated","type":"bool"},{"internalType":"bool","name":"published","type":"bool"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"name","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"uint256","name":"","type":"uint256"}],"name":"images","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"imageVersions","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"imageVersionsHash","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[],"name":"owner","outputs":[{"internalType":"address","name":"","type":"address"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"}],"name":"trustedZoneImageDetails","outputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"string","name":"ipfsHash","type":"string"},{"internalType":"string","name":"version","type":"string"},{"internalType":"string","name":"session","type":"string"},{"internalType":"uint8","name":"fee","type":"uint8"},{"internalType":"address","name":"rewardAddress","type":"address"},{"internalType":"bool","name":"validated","type":"bool"},{"internalType":"bool","name":"published","type":"bool"},{"internalType":"string","name":"certPublicKey","type":"string"},{"internalType":"string","name":"dockerComposeHash","type":"string"},{"internalType":"string","name":"name","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"trustedZoneImageVersions","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"},{"inputs":[{"internalType":"string","name":"","type":"string"},{"internalType":"string","name":"","type":"string"},{"internalType":"uint256","name":"","type":"uint256"}],"name":"trustedZoneVersionsHash","outputs":[{"internalType":"string","name":"","type":"string"}],"stateMutability":"view","type":"function"}]