nitrogen 0.2.1

Nitrogen is a tool for deploying web services to AWS Nitro Enclaves.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use failure::Error;
use home;
use std::env;
use std::process::Output;
use tokio::process::Command;
use tracing::instrument;

#[instrument(level = "debug")]
pub async fn build(dockerfile_dir: &String, eif_name: &String) -> Result<Output, Error> {
    let out = Command::new("docker")
        .args([
            "build",
            "-t",
            "nitrogen-build",
            dockerfile_dir,
            "-f",
            &format!("{}/.", dockerfile_dir),
        ])
        .output()
        .await?;
    if !out.status.success() {
        return Err(failure::err_msg(format!(
            "unable to build docker image {:?}",
            out
        )));
    }

    let h = home::home_dir().unwrap_or_default();
    let out = Command::new("docker")
        .args([
            "run",
            "-v",
            &format!("{}/.docker:/root/.docker", h.display()),
            "-v",
            "/var/run/docker.sock:/var/run/docker.sock",
            "-v",
            &format!(
                "{}:/root/build",
                env::current_dir()?.to_str().unwrap_or_default()
            ),
            "capeprivacy/eif-builder:latest",
            "build-enclave",
            "--docker-uri",
            "nitrogen-build",
            "--output-file",
            &format!("/root/build/{}", eif_name),
        ])
        .output()
        .await?;
    Ok(out)
}