feat(transfers): add MOCK_SGX support in listen.sh (#109)
feat(transfers): add MOCK_SGX support in listen.sh - Updated listen.sh to handle MOCK_SGX, improving compatibility. - Formatted listen and relay scripts for better human readability. Closes #108.
This commit is contained in:
Dave
GitHub
parent
1d85bc1c07
commit
a23ae1e560
2 changed files with 69 additions and 83 deletions
|
|
@ -1,8 +1,8 @@
|
|||
ROOT=${ROOT:-$HOME}
|
||||
#!/bin/bash
|
||||
|
||||
ROOT=${ROOT:-$HOME}
|
||||
DEFAULT_NODE="127.0.0.1:26657"
|
||||
NODE_URL=${NODE_URL:-$DEFAULT_NODE}
|
||||
|
||||
# Use the QUARTZ_PORT environment variable if set, otherwise default to 11090
|
||||
QUARTZ_PORT="${QUARTZ_PORT:-11090}"
|
||||
|
||||
|
|
@ -12,14 +12,11 @@ if [ "$#" -eq 0 ]; then
|
|||
fi
|
||||
|
||||
CONTRACT=$1
|
||||
|
||||
CMD="wasmd --node http://$NODE_URL"
|
||||
|
||||
WSURL="ws://$NODE_URL/websocket"
|
||||
|
||||
SUBSCRIBE_TRANSFER="{\"jsonrpc\":\"2.0\",\"method\":\"subscribe\",\"params\":[\"execute._contract_address = '$CONTRACT' AND wasm-transfer.action = 'user'\"],\"id\":1}"
|
||||
SUBSCRIBE_QUERY="{\"jsonrpc\":\"2.0\",\"method\":\"subscribe\",\"params\":[\"execute._contract_address = '$CONTRACT' AND wasm-query_balance.query = 'user'\"],\"id\":2}"
|
||||
|
||||
# Attestation constants
|
||||
IAS_API_KEY="669244b3e6364b5888289a11d2a1726d"
|
||||
RA_CLIENT_SPID="51CAF5A48B450D624AEFE3286D314894"
|
||||
|
|
@ -29,50 +26,54 @@ REPORT_SIG_FILE="/tmp/${USER}_datareportsig"
|
|||
|
||||
# cat keeps the stdin open so websocat doesnt close
|
||||
(echo "$SUBSCRIBE_TRANSFER"; echo "$SUBSCRIBE_QUERY"; cat) | websocat $WSURL | while read msg; do
|
||||
if [[ "$msg" == '{"jsonrpc":"2.0","id":1,"result":{}}' ]] || [[ "$msg" == '{"jsonrpc":"2.0","id":2,"result":{}}' ]]; then
|
||||
if [[ "$msg" == '{"jsonrpc":"2.0","id":1,"result":{}}' ]] || \
|
||||
[[ "$msg" == '{"jsonrpc":"2.0","id":2,"result":{}}' ]]; then
|
||||
echo "---------------------------------------------------------"
|
||||
echo "... subscribed to $msg"
|
||||
echo "... waiting for event"
|
||||
continue
|
||||
fi
|
||||
|
||||
# TODO - Some reason this is saying ERROR when its fine, needs to be fixed or removed
|
||||
#if echo "$msg" | sed 's/"log":"\[.*\]"/"log":"<invalid_json>"/' | jq 'has("error")' > /dev/null; then
|
||||
# echo "... error msg $msg"
|
||||
# echo "---------------------------------------------------------"
|
||||
# echo "... waiting for event"
|
||||
# continue
|
||||
#fi
|
||||
|
||||
CLEAN_MSG=$(echo "$msg" | sed 's/"log":"\[.*\]"/"log":"<invalid_json>"/' | jq '.result.events')
|
||||
|
||||
if echo "$CLEAN_MSG" | grep -q 'wasm-transfer'; then
|
||||
echo "---------------------------------------------------------"
|
||||
echo "... received wasm-transfer event!"
|
||||
|
||||
echo "... fetching requests"
|
||||
REQUESTS=$($CMD query wasm contract-state raw $CONTRACT $(printf '%s' "requests" | hexdump -ve '/1 "%02X"') -o json | jq -r .data | base64 -d)
|
||||
STATE=$($CMD query wasm contract-state raw $CONTRACT $(printf '%s' "state" | hexdump -ve '/1 "%02X"') -o json | jq -r .data | base64 -d)
|
||||
REQUESTS=$($CMD query wasm contract-state raw $CONTRACT $(printf '%s' "requests" | \
|
||||
hexdump -ve '/1 "%02X"') -o json | jq -r .data | base64 -d)
|
||||
STATE=$($CMD query wasm contract-state raw $CONTRACT $(printf '%s' "state" | \
|
||||
hexdump -ve '/1 "%02X"') -o json | jq -r .data | base64 -d)
|
||||
export ENCLAVE_REQUEST=$(jq -nc --argjson requests "$REQUESTS" --argjson state $STATE '$ARGS.named')
|
||||
export REQUEST_MSG=$(jq -nc --arg message "$ENCLAVE_REQUEST" '$ARGS.named')
|
||||
|
||||
cd $ROOT/cycles-quartz/apps/transfers/enclave
|
||||
|
||||
echo "... executing transfer"
|
||||
export ATTESTED_MSG=$(grpcurl -plaintext -import-path ./proto/ -proto transfers.proto -d "$REQUEST_MSG" "127.0.0.1:$QUARTZ_PORT" transfers.Settlement/Run | jq .message | jq -R 'fromjson | fromjson' | jq -c )
|
||||
export ATTESTED_MSG=$(grpcurl -plaintext -import-path ./proto/ -proto transfers.proto \
|
||||
-d "$REQUEST_MSG" "127.0.0.1:$QUARTZ_PORT" transfers.Settlement/Run | \
|
||||
jq .message | jq -R 'fromjson | fromjson' | jq -c)
|
||||
QUOTE=$(echo "$ATTESTED_MSG" | jq -c '.attestation')
|
||||
MSG=$(echo "$ATTESTED_MSG" | jq -c '.msg')
|
||||
|
||||
if [ -n "$MOCK_SGX" ]; then
|
||||
echo "... running in MOCK_SGX mode"
|
||||
EXECUTE=$(jq -nc --argjson update "$(jq -nc --argjson msg "$MSG" \
|
||||
--argjson attestation "$QUOTE" '$ARGS.named')" '$ARGS.named')
|
||||
else
|
||||
echo "... getting report"
|
||||
echo -n "$QUOTE" | xxd -r -p - > "$QUOTE_FILE"
|
||||
gramine-sgx-ias-request report -g "$RA_CLIENT_SPID" -k "$IAS_API_KEY" -q "$QUOTE_FILE" -r "$REPORT_FILE" -s "$REPORT_SIG_FILE" > /dev/null 2>&1
|
||||
gramine-sgx-ias-request report -g "$RA_CLIENT_SPID" -k "$IAS_API_KEY" -q "$QUOTE_FILE" \
|
||||
-r "$REPORT_FILE" -s "$REPORT_SIG_FILE" > /dev/null 2>&1
|
||||
REPORT=$(cat "$REPORT_FILE")
|
||||
REPORTSIG=$(cat "$REPORT_SIG_FILE" | tr -d '\r')
|
||||
|
||||
EXECUTE=$(jq -nc --argjson update "$(jq -nc --argjson msg "$MSG" --argjson attestation \
|
||||
"$(jq -nc --argjson report "$(jq -nc --argjson report "$REPORT" \
|
||||
--arg reportsig "$REPORTSIG" '$ARGS.named')" '$ARGS.named')" '$ARGS.named')" '$ARGS.named')
|
||||
fi
|
||||
|
||||
echo "... submitting update"
|
||||
export EXECUTE=$(jq -nc --argjson update "$(jq -nc --argjson msg "$MSG" --argjson attestation \
|
||||
"$(jq -nc --argjson report "$(jq -nc --argjson report "$REPORT" --arg reportsig "$REPORTSIG" '$ARGS.named')" '$ARGS.named')" \
|
||||
'$ARGS.named')" '$ARGS.named')
|
||||
echo $EXECUTE | jq '.'
|
||||
$CMD tx wasm execute "$CONTRACT" "$EXECUTE" --from admin --chain-id testing -y --gas 2000000
|
||||
|
||||
|
|
@ -83,61 +84,48 @@ REPORT_SIG_FILE="/tmp/${USER}_datareportsig"
|
|||
echo "... received wasm-query_balance event!"
|
||||
echo "... fetching state"
|
||||
|
||||
STATE=$($CMD query wasm contract-state raw $CONTRACT $(printf '%s' "state" | hexdump -ve '/1 "%02X"') -o json | jq -r .data | base64 -d)
|
||||
STATE=$($CMD query wasm contract-state raw $CONTRACT $(printf '%s' "state" | \
|
||||
hexdump -ve '/1 "%02X"') -o json | jq -r .data | base64 -d)
|
||||
|
||||
# Extract the address from the event
|
||||
ADDRESS=$(echo "$msg" | sed 's/"log":"\[.*\]"/"log":"<invalid_json>"/' | jq -r '.result.events["message.sender"]'[0])
|
||||
ADDRESS=$(echo "$msg" | sed 's/"log":"\[.*\]"/"log":"<invalid_json>"/' | \
|
||||
jq -r '.result.events["message.sender"]'[0])
|
||||
|
||||
EPHEMERAL_PUBKEY=$(echo "$msg" | sed 's/"log":"\[.*\]"/"log":"<invalid_json>"/' | jq -r '.result.events["wasm-query_balance.emphemeral_pubkey"]'[0])
|
||||
EPHEMERAL_PUBKEY=$(echo "$msg" | sed 's/"log":"\[.*\]"/"log":"<invalid_json>"/' | \
|
||||
jq -r '.result.events["wasm-query_balance.emphemeral_pubkey"]'[0])
|
||||
|
||||
# Create the enclave request with state and address
|
||||
export ENCLAVE_REQUEST=$(jq -nc --argjson state "$STATE" --arg address "$ADDRESS" --arg ephemeral_pubkey "$EPHEMERAL_PUBKEY" '$ARGS.named')
|
||||
export ENCLAVE_REQUEST=$(jq -nc --argjson state "$STATE" --arg address "$ADDRESS" \
|
||||
--arg ephemeral_pubkey "$EPHEMERAL_PUBKEY" '$ARGS.named')
|
||||
export REQUEST_MSG=$(jq -nc --arg message "$ENCLAVE_REQUEST" '$ARGS.named')
|
||||
|
||||
cd $ROOT/cycles-quartz/apps/transfers/enclave
|
||||
|
||||
echo "... executing query balance"
|
||||
ATTESTED_MSG=$(grpcurl -plaintext -import-path ./proto/ -proto transfers.proto -d "$REQUEST_MSG" "127.0.0.1:$QUARTZ_PORT" transfers.Settlement/Query | jq -r '.message | fromjson')
|
||||
echo "atts msg"
|
||||
echo $ATTESTED_MSG
|
||||
ATTESTED_MSG=$(grpcurl -plaintext -import-path ./proto/ -proto transfers.proto \
|
||||
-d "$REQUEST_MSG" "127.0.0.1:$QUARTZ_PORT" transfers.Settlement/Query | jq -r '.message | fromjson')
|
||||
QUOTE=$(echo "$ATTESTED_MSG" | jq -c '.attestation')
|
||||
MSG=$(echo "$ATTESTED_MSG" | jq -c '.msg')
|
||||
echo "quote"
|
||||
echo $QUOTE
|
||||
echo "msg"
|
||||
echo $MSG
|
||||
|
||||
echo -n "$QUOTE" | xxd -r -p - > "$QUOTE_FILE"
|
||||
gramine-sgx-ias-request report -g "$RA_CLIENT_SPID" -k "$IAS_API_KEY" -q "$QUOTE_FILE" -r "$REPORT_FILE" -s "$REPORT_SIG_FILE" > /dev/null 2>&1
|
||||
REPORT=$(cat "$REPORT_FILE")
|
||||
REPORTSIG=$(cat "$REPORT_SIG_FILE" | tr -d '\r')
|
||||
|
||||
echo "... submitting update"
|
||||
|
||||
# Create the QueryResponseMsg structure with address inside the msg
|
||||
export QUERY_RESPONSE_MSG=$(jq -n \
|
||||
--arg address "$ADDRESS" \
|
||||
--argjson msg "$MSG" \
|
||||
QUERY_RESPONSE_MSG=$(jq -n --arg address "$ADDRESS" --argjson msg "$MSG" \
|
||||
'{address: $address, encrypted_bal: $msg.encrypted_bal}')
|
||||
|
||||
|
||||
# Create the execute message for query_response
|
||||
export EXECUTE=$(jq -nc \
|
||||
--argjson query_response "$(jq -nc \
|
||||
--argjson msg "$QUERY_RESPONSE_MSG" \
|
||||
--argjson attestation "$(jq -nc \
|
||||
--argjson report "$(jq -nc \
|
||||
--argjson report "$REPORT" \
|
||||
--arg reportsig "$REPORTSIG" \
|
||||
'$ARGS.named')" \
|
||||
'$ARGS.named')" \
|
||||
'$ARGS.named')" \
|
||||
if [ -n "$MOCK_SGX" ]; then
|
||||
echo "... running in MOCK_SGX mode"
|
||||
EXECUTE=$(jq -nc --argjson query_response "$(jq -nc --argjson msg "$QUERY_RESPONSE_MSG" \
|
||||
--argjson attestation "$QUOTE" '$ARGS.named')" '{query_response: $query_response}')
|
||||
else
|
||||
echo -n "$QUOTE" | xxd -r -p - > "$QUOTE_FILE"
|
||||
gramine-sgx-ias-request report -g "$RA_CLIENT_SPID" -k "$IAS_API_KEY" -q "$QUOTE_FILE" \
|
||||
-r "$REPORT_FILE" -s "$REPORT_SIG_FILE" > /dev/null 2>&1
|
||||
REPORT=$(cat "$REPORT_FILE")
|
||||
REPORTSIG=$(cat "$REPORT_SIG_FILE" | tr -d '\r')
|
||||
EXECUTE=$(jq -nc --argjson query_response "$(jq -nc --argjson msg "$QUERY_RESPONSE_MSG" \
|
||||
--argjson attestation "$(jq -nc --argjson report "$(jq -nc --argjson report "$REPORT" \
|
||||
--arg reportsig "$REPORTSIG" '$ARGS.named')" '$ARGS.named')" '$ARGS.named')" \
|
||||
'{query_response: $query_response}')
|
||||
fi
|
||||
|
||||
echo "... submitting update"
|
||||
echo $EXECUTE | jq '.'
|
||||
|
||||
$CMD tx wasm execute "$CONTRACT" "$EXECUTE" --from admin --chain-id testing -y --gas 2000000
|
||||
|
||||
echo " ... done"
|
||||
echo "------------------------------------"
|
||||
echo "... waiting for event"
|
||||
|
|
|
|||
|
|
@ -33,23 +33,21 @@ MSG=$(echo "$ATTESTED_MSG" | jq 'del(.quote)')
|
|||
if [ -n "$MOCK_SGX" ]; then
|
||||
case "$REQUEST" in
|
||||
"Instantiate")
|
||||
jq -nc --argjson msg "$MSG" --argjson "attestation" \
|
||||
"$QUOTE" \
|
||||
'$ARGS.named' ;;
|
||||
|
||||
"SessionCreate" | "SessionSetPubKey")
|
||||
REQUEST_KEY=$(echo "$REQUEST" | perl -pe 's/([A-Z])/_\L$1/g;s/^_//') #sed 's/\([A-Z]\)/_\L\1/g;s/^_//')
|
||||
jq -nc --argjson quartz "$(jq -nc --argjson "$REQUEST_KEY" "$(jq -nc --argjson msg "$MSG" --argjson attestation \
|
||||
"$QUOTE" '$ARGS.named')" '$ARGS.named')" '$ARGS.named' ;;
|
||||
|
||||
jq -nc --argjson msg "$MSG" --argjson "attestation" "$QUOTE" '$ARGS.named'
|
||||
;;
|
||||
"SessionCreate" | "SessionSetPubKey")
|
||||
REQUEST_KEY=$(echo "$REQUEST" | perl -pe 's/([A-Z])/_\L$1/g;s/^_//')
|
||||
jq -nc --argjson quartz "$(jq -nc --argjson "$REQUEST_KEY" "$(jq -nc \
|
||||
--argjson msg "$MSG" --argjson attestation "$QUOTE" '$ARGS.named')" \
|
||||
'$ARGS.named')" '$ARGS.named'
|
||||
;;
|
||||
*)
|
||||
usage ;;
|
||||
esac
|
||||
|
||||
exit
|
||||
usage
|
||||
;;
|
||||
esac
|
||||
exit
|
||||
fi
|
||||
|
||||
|
||||
# clear tmp files from previous runs
|
||||
rm -f "$QUOTE_FILE" "$REPORT_FILE" "$REPORT_SIG_FILE"
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue