Deploy gateway backend as sgx #2050
Conversation
…om/ten-protocol/go-ten into ziga/deploy_gateway_backend_as_sgx
zkokelj
changed the title
zkokelj
changed the title
don't forget the descriptions |
| -host=0.0.0.0 -port=80 -portWS=81 -nodeHost=${{ env.L2_RPC_URL_VALIDATOR }} -verbose=true \ | ||
| -logPath=sys_out -dbType=mariaDB -dbConnectionURL="obscurouser:${{ secrets.OBSCURO_GATEWAY_MARIADB_USER_PWD }}@tcp(obscurogateway-mariadb-${{ github.event.inputs.testnet_type }}.uksouth.cloudapp.azure.com:3306)/ogdb" \ | ||
| -rateLimitUserComputeTime=${{ env.GATEWAY_RATE_LIMIT_USER_COMPUTE_TIME }} -rateLimitWindow=${{ env.GATEWAY_RATE_LIMIT_WINDOW }} -maxConcurrentRequestsPerUser=${{ env.GATEWAY_MAX_CONCURRENT_REQUESTS_PER_USER }} ' | ||
| -e OE_SIMULATION=1 \ |
There was a problem hiding this comment.
we need to be able to switch from simulation ON (for the local container) to simulation OFF ( for testnet)
There was a problem hiding this comment.
We can do that now. This is github action file which is executed on Azure only.
I guess we will deploy only with non simulation mode, but if you think we need to deploy on Azure also with simulation mode sometimes, then I can introduce new env variable which can control that.
To run it locally we can simply run it like that:
docker run -d \
-p 3000:3000 \
-p 3001:3001 \
--name local-gateway \
--ulimit core=-1 \
-v /tmp/cores:/tmp/cores \
--security-opt seccomp=unconfined \
--entrypoint "/home/ten/go-ten/tools/walletextension/main/entry.sh" \
-e OBSCURO_GATEWAY_VERSION="local" \
-e OE_SIMULATION=1 \
gateway \
ego run /home/ten/go-ten/tools/walletextension/main/main \
-host=0.0.0.0 -port=3000 -verbose=true| # deploy = copies over only the enclave executable without the source | ||
| # in a lightweight base image specialized for deployment and prepares the /data/ folder. | ||
|
|
||
| # Final container folder structure: |
There was a problem hiding this comment.
this comment here is not accurate
zkokelj
had a problem deploying
to
dev-testnet
GitHub Actions
Failure
Why this change is needed
We want to run Ten Gateway inside an SGX enclave so users don't need to trust us anymore and we can prove which code we are running and that we are running it inside a TEE.
What changes were made as part of this PR
Please provide a high level list of the changes made
PR checks pre-merging
Please indicate below by ticking the checkbox that you have read and performed the required
PR checks