@ethernity-cloud/sdk-js 1.6.2 → 1.7.1

package/pynithy/build/las/src/etny_entrypoint.sh

@@ -1,6 +0,0 @@
-
-#!/bin/bash
-
-( tail -f -n0 /var/log/las.log & ) | grep -q "Sign request failed with Enclave lost after power transition or used in child process created by"
-
-killall -9 las

package/pynithy/build/las/src/las_entrypoint.sh

@@ -1,26 +0,0 @@
-#!/bin/bash
-
-set -e
-
-SOCKET="/var/run/aesmd/aesm.socket"
-
-# Try to connect to the socket
-# Previously we merely checked that the socket file exists. However, the
-# file is not removed when the container stops and, thus, when we restart
-# the file still exists and we assume that we are supposed to use an
-# outside AESM.
-if socat -u OPEN:/dev/null UNIX-CONNECT:${SOCKET}; then
-    # An AESM socket was already mounted into the container, don't start a local AESM service, start LAS directly
-    echo "${SOCKET} exists - Will use mounted AESM socket; the local in-container AESM service will not be started!"
-    exec "$@"
-else
-    # No AESM socket present, delegate execution to the local AESM service
-    echo "${SOCKET} not found or unable to connect - Starting local in-container AESM service"
-    if [ -e ${SOCKET} ]; then
-        # Ensure the socket file does not exist - AESM won't start if it does...
-        rm ${SOCKET}
-    fi
-    exec /entrypoint.sh "$@"
-fi
-
-/etny_entrypoint.sh &

package/pynithy/build/scripts/binary-fs-build.sh

@@ -1,28 +0,0 @@
-#!/bin/bash -v
-
-pip3 install pyinstaller
-apk add binutils
-
-cd /etny-securelock
-pyinstaller etny_result.py
-
-EXEC=(scone binaryfs / /binary-fs-dir -v \
-  --include '/usr/local/lib/python3.10/*' \
-  --include '/etny-securelock/*' \
-  --host-path=/etc/resolv.conf \
-  --host-path=/etc/hosts)
-
-
-for FILE in `cat ./build/etny_result/COLLECT-00.toc | grep '.so' | grep BINARY | awk -F "'" '{print $4}'`
-do
-  EXEC+=(--include "${FILE}"'*')
-done
-
-rm -rf build dist etny_result.spec
-
-echo "${EXEC[@]}"
-
-SCONE_MODE=auto
-exec "${EXEC[@]}"
-
-exit

package/pynithy/build/securelock/Dockerfile.tmpl

@@ -1,95 +0,0 @@
-# FROM registry.scontain.com:5050/sconecuratedimages/apps:python3.10.5-alpine3.15-scone5.8-pre-release as release
-FROM registry.ethernity.cloud:443/debuggingdelight/ethernity-cloud-sdk-registry/sconecuratedimages/apps:python3.10.5-alpine3.15-scone5.8-pre-release as release
-
-
-
-RUN apk update
-
-RUN cd /
-RUN apk add bash openrc bind-tools sudo npm binutils curl
-RUN pip3 install --upgrade pip
-RUN pip3 install --upgrade setuptools
-RUN pip3 install python-dotenv
-RUN pip3 install web3==5.31.0
-RUN pip3 install cryptography==42.0.7
-RUN pip3 install ecdsa
-RUN pip3 install pyasn1
-RUN pip3 install tinyec
-RUN pip3 install pyinstaller
-RUN pip3 install minio
-RUN pip3 install pynacl
-RUN pip3 install pytest
-RUN pip3 install numpy
-RUN pip3 install scipy
-RUN pip3 install hypothesis
-RUN pip3 install pooch
-RUN pip3 install ipywidgets
-
-#RUN pip3 install requests
-#RUN pip3 install beautifulsoup4
-#RUN pip3 install tokenizers
-#RUN pip3 install transformers
-#RUN pip3 install tensorflow
-
-
-ENV ENCLAVE_NAME_SECURELOCK=__ENCLAVE_NAME_SECURELOCK__
-ENV BUCKET_NAME=__BUCKET_NAME__
-ENV SMART_CONTRACT_ADDRESS=__SMART_CONTRACT_ADDRESS__
-ENV IMAGE_REGISTRY_ADDRESS=__IMAGE_REGISTRY_ADDRESS__
-ENV RPC_URL=__RPC_URL__
-ENV CHAIN_ID=__CHAIN_ID__
-ENV TRUSTED_ZONE_IMAGE=__TRUSTED_ZONE_IMAGE__
-ENV VALIDATOR_REGISTRY_ADDRESS=__VALIDATOR_REGISTRY_ADDRESS__
-
-
-RUN mkdir binary-fs-dir
-
-COPY ./src /etny-securelock/
-COPY ./scripts/* /etny-securelock/
-
-RUN etny-securelock/binary-fs-build.sh
-
-FROM registry.ethernity.cloud:443/debuggingdelight/ethernity-cloud-sdk-registry/sconecuratedimages/crosscompilers as build
-
-COPY --from=release /binary-fs-dir /.
-
-RUN scone gcc ./binary_fs_blob.s ./libbinary_fs_template.a -shared -o /libbinary-fs.so
-
-FROM registry.ethernity.cloud:443/debuggingdelight/ethernity-cloud-sdk-registry/sconecuratedimages/apps:python3.10.5-alpine3.15-scone5.8-pre-release
-
-COPY --from=build /usr/local/bin/scone /usr/local/bin/scone
-
-#RUN scone cas attest scone-cas.cf 3061b9feb7fa67f3815336a085f629a13f04b0a1667c93b14ff35581dc8271e4 -GCS --only_for_testing-debug --only_for_testing-ignore-signer
-
-COPY --from=build /libbinary-fs.so /lib/libbinary-fs.so
-
-RUN openssl genrsa -3 -out /enclave-key.pem 3072
-
-# SCONE runtime env. Must match the enclave-creation params passed to
-# scone-signer below (any drift makes SCONE recompute + debug re-sign at load,
-# which CAS rejects on mainnet). Values mirror the run/docker-compose securelock
-# service (SCONE_HEAP=1024M, SCONE_STACK=4M, dlopen=1, extensions=libbinary-fs).
-ENV SCONE_LOG=INFO
-ENV SCONE_HEAP=1024M
-ENV SCONE_STACK=4M
-ENV SCONE_ALLOW_DLOPEN=1
-ENV SCONE_EXTENSIONS_PATH=/lib/libbinary-fs.so
-
-# Rendered by build.mjs. Signs the EXECUTED binary (/usr/local/bin/python -- the
-# ENTRYPOINT and the run/publish compose command both run /usr/local/bin/python;
-# python3 is a SEPARATE symlink, signing it leaves the executed binary
-# debug-signed). Mainnet adds --production (CAS/DCAP); testnet omits it (non-CAS
-# self-sign). On testnet builds this line is a no-op comment.
-__SCONE_SIGN__
-
-# Record the SIGNED MRENCLAVE so publish (run.js) can assert the runtime enclave
-# measurement matches what was signed before registering the CAS session. Only
-# produced for --production (mainnet); on testnet the file is absent and the
-# check is skipped. Capture to a file first (piping scone-signer into head/grep
-# kills it with SIGPIPE / exit 141 under buildkit's pipefail shell).
-__SIGNED_MRENCLAVE__
-
-RUN rm -rf /enclave-key.pem
-
-
-ENTRYPOINT ["/usr/local/bin/python", "/etny-securelock/securelock.py"]