nitrogen 0.2.2

Nitrogen is a tool for deploying web services to AWS Nitro Enclaves.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

use failure::Error;
use home;
use std::env;
use std::path::PathBuf;
use std::process::Output;
use tokio::process::Command;
use tracing::{info, instrument};

#[instrument(level = "debug")]
pub async fn build(dockerfile_dir: &String, eif_name: &String) -> Result<Output, Error> {
    let dockerdir = PathBuf::from(dockerfile_dir);
    let mut dockerfile_path = PathBuf::from(dockerfile_dir);
    dockerfile_path.push("Dockerfile");

    let out = Command::new("docker")
        .args([
            "build",
            "-t",
            "nitrogen-build",
            "--platform",
            "linux/amd64",
            dockerdir.to_str().unwrap(),
            "-f",
            dockerfile_path.to_str().unwrap(),
        ])
        .output()
        .await?;
    if !out.status.success() {
        let stderr_str = std::str::from_utf8(&out.stderr)?;
        return Err(failure::err_msg(format!(
            "Docker build error: {:#?}",
            stderr_str
        )));
    }

    let h = home::home_dir().unwrap_or_default();
    let cwd = env::current_dir()?;
    let eif_dir = cwd.to_str().unwrap_or_default();
    let out = Command::new("docker")
        .args([
            "run",
            "-v",
            &format!("{}/.docker:/root/.docker", h.display()),
            "-v",
            "/var/run/docker.sock:/var/run/docker.sock",
            "-v",
            &format!("{}:/root/build", eif_dir,),
            "capeprivacy/eif-builder:latest",
            "build-enclave",
            "--docker-uri",
            "nitrogen-build",
            "--output-file",
            &format!("/root/build/{}", eif_name),
        ])
        .output()
        .await?;
    if !out.status.success() {
        let stderr_str = std::str::from_utf8(&out.stderr)?;
        return Err(failure::err_msg(format!(
            "Docker build error: {:#?}",
            stderr_str
        )));
    } else {
        info!("EIF written to {}/{}.", eif_dir, &eif_name);
    }
    Ok(out)
}