From 47c26da51efeb4d8a02a820687b54a2313ca8615 Mon Sep 17 00:00:00 2001 From: hu55a1n1 Date: Mon, 26 Feb 2024 03:49:08 -0800 Subject: [PATCH] Modify Dockerfile to work with git deps --- enclaves/quartz/Dockerfile | 10 ++++++++-- enclaves/quartz/README.md | 3 ++- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/enclaves/quartz/Dockerfile b/enclaves/quartz/Dockerfile index 0594dec..ee1f687 100644 --- a/enclaves/quartz/Dockerfile +++ b/enclaves/quartz/Dockerfile @@ -1,6 +1,10 @@ FROM gramineproject/gramine:v1.5 -RUN apt-get update && apt-get install -y jq build-essential protobuf-compiler libprotobuf-dev +RUN apt-get update && apt-get install -y jq build-essential protobuf-compiler libprotobuf-dev git + +RUN mkdir /root/.ssh/ \ + && touch /root/.ssh/known_hosts \ + && ssh-keyscan github.com >> /root/.ssh/known_hosts WORKDIR /workdir @@ -28,7 +32,9 @@ ENV SGX=$SGX # Copy the quartz directory and build COPY . ./quartz WORKDIR /workdir/quartz -RUN cargo build --release +RUN mkdir -p .cargo/ +RUN echo "net.git-fetch-with-cli = true" > .cargo/config.toml +RUN --mount=type=secret,id=ssh_id,target=/root/.ssh/id_ed25519 cargo build --release WORKDIR /workdir COPY quartz.manifest.template ./ diff --git a/enclaves/quartz/README.md b/enclaves/quartz/README.md index 98a849d..c5d092a 100644 --- a/enclaves/quartz/README.md +++ b/enclaves/quartz/README.md @@ -3,7 +3,8 @@ ### Enclave usage ```bash -docker build . --tag quartz +# docker build . --tag quartz +DOCKER_BUILDKIT=1 docker build --tag quartz --secret id=ssh_id,src=/home/hu55a1n1/.ssh/id_ed25519 . docker run -it \ --device /dev/sgx_enclave \ --device /dev/sgx_provision \