@ethernity-cloud/sdk-js 1.1.1 → 1.2.0

package/pynithy/run/docker-compose.yml.tmpl

@@ -1,3 +1,10 @@
+# Publish-time compose: used by ecld-publish to compute the MRENCLAVE
+# (SCONE_HASH=1) and extract the enclave certificate LOCALLY. It intentionally
+# does NOT mount /dev/sgx_enclave so it runs on a developer machine WITHOUT SGX
+# (SCONE_HASH is a build measurement; enclaves reach SGX via LAS over TCP). When
+# no local SGX is present, cert extraction falls back to the remote
+# publickey.ethernity.cloud service. The on-node runtime uses
+# docker-compose-final.yml, which targets real SGX hardware.
 version: '3.2'
 services:
     las:
@@ -5,8 +12,6 @@ services:
         privileged: true
         image: localhost:5000/etny-las
         command: "bash -c '/las_entrypoint.sh && /usr/local/bin/las | tee /var/log/las.log'"
-        devices:
-         - "/dev/sgx_enclave:/dev/sgx_enclave"
         restart: unless-stopped
         ports:
           - target: 18766
@@ -25,12 +30,13 @@ services:
           - SCONE_LAS_ADDR=las
           - SCONE_CONFIG_ID=__ENCLAVE_NAME_SECURELOCK__/application
           - SCONE_HEAP=1024M
+          # Must match the --stack the securelock binary was signed with (build.mjs),
+          # otherwise SCONE recomputes MRENCLAVE at load and re-signs as debug.
+          - SCONE_STACK=4M
           - SCONE_LOG=INFO
           - SCONE_ALLOW_DLOPEN=1
           - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
         restart: on-failure:5
-        devices:
-          - "/dev/sgx_enclave:/dev/sgx_enclave"
         depends_on:
           - las
 
@@ -49,7 +55,5 @@ services:
         - SCONE_ALLOW_DLOPEN=1
         - SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
       restart: on-failure:5
-      devices:
-        - "/dev/sgx_enclave:/dev/sgx_enclave"
       depends_on:
         - las

package/pynithy/run.js

@@ -73,6 +73,29 @@ const runDockerCommand = (service) => {
     return output.split('\n').filter(line => !/Creating|Pulling|latest|Digest/.test(line)).join('');
 };
 
+// Extract the runtime enclave measurement (SCONE_HASH) as a bare 64-hex string.
+// Mirrors Python extract_scone_hash: pick the first 64-hex token in the output.
+const extractSconeHash = (service) => {
+    const output = runDockerCommand(service);
+    const m = output.match(/\b[a-fA-F0-9]{64}\b/);
+    if (!m) throw new Error(`No SHA256 MRENCLAVE found in ${service} SCONE_HASH output.`);
+    return m[0];
+};
+
+// Read the MRENCLAVE signed at build time (baked into the image as
+// /signed_mrenclave.txt on mainnet). Mirrors Python extract_signed_mrenclave.
+// Returns '' if the file is absent (testnet builds).
+const extractSignedMrenclave = (service) => {
+    try {
+        const command = `docker-compose -f docker-compose.yml run --no-deps --entrypoint cat ${service} /signed_mrenclave.txt`;
+        const output = execSync(command, { stdio: ['pipe', 'pipe', 'pipe'] }).toString().trim();
+        const m = output.match(/\b[a-fA-F0-9]{64}\b/);
+        return m ? m[0] : '';
+    } catch (e) {
+        return '';
+    }
+};
+
 const main = async () => {
     process.env.NODE_NO_WARNINGS = 1
     const backupFiles = ['docker-compose.yml.tmpl', 'docker-compose-final.yml.tmpl'];
@@ -86,13 +109,29 @@ const main = async () => {
     });
 
 
-    process.env.MRENCLAVE_SECURELOCK = runDockerCommand('etny-securelock');
+    process.env.MRENCLAVE_SECURELOCK = extractSconeHash('etny-securelock');
     console.log(`MRENCLAVE_SECURELOCK: ${process.env.MRENCLAVE_SECURELOCK}`);
     // process.env.MRENCLAVE_TRUSTEDZONE = runDockerCommand('etny-trustedzone');
     // console.log(`MRENCLAVE_TRUSTEDZONE: ${process.env.MRENCLAVE_TRUSTEDZONE}`);
     // process.env.MRENCLAVE_VALIDATOR = runDockerCommand('etny-validator');
     // console.log(`MRENCLAVE_VALIDATOR: ${process.env.MRENCLAVE_VALIDATOR}`);
 
+    // ----- MRENCLAVE match-gate (mainnet) -----
+    // The runtime enclave measured just above (SCONE_HASH) MUST match the
+    // MRENCLAVE signed --production at build time (/signed_mrenclave.txt). A
+    // mismatch means SCONE recomputed the measurement at load (params drift) and
+    // re-signed as DEBUG, which CAS rejects on mainnet. Refuse to publish.
+    if (isMainnet) {
+        const signedMrenclave = extractSignedMrenclave('etny-securelock');
+        if (!signedMrenclave || signedMrenclave !== process.env.MRENCLAVE_SECURELOCK) {
+            console.error(`Error: securelock runtime MRENCLAVE (${process.env.MRENCLAVE_SECURELOCK}) != signed MRENCLAVE (${signedMrenclave}).`);
+            console.error('       The runtime enclave differs from the --production-signed binary (SCONE recomputed -> debug).');
+            console.error('       Refusing to publish. Rebuild with the current SDK (ecld-build) and retry.');
+            process.exit(1);
+        }
+        console.log('\t✔  MRENCLAVE match-gate passed: runtime enclave matches the --production-signed MRENCLAVE');
+    }
+
     writeEnv('MRENCLAVE_SECURELOCK', process.env.MRENCLAVE_SECURELOCK);
     // writeEnv('MRENCLAVE_TRUSTEDZONE', process.env.MRENCLAVE_TRUSTEDZONE);
     // writeEnv('MRENCLAVE_VALIDATOR', process.env.MRENCLAVE_VALIDATOR);