Merge pull request #2 from iExecBlockchainComputing/feature/gramine

Add Gramine CI/CD support

Author: mcornaton

Jenkinsfile

@@ -2,17 +2,27 @@
 
 buildInfo = getBuildInfo()
 
-def nativeImage = buildSimpleDocker_v2(
-  buildInfo: buildInfo,
-  dockerfileDir: 'offchain-computing',
-  dockerImageRepositoryName: 'offchain-python-hello-world',
-  imageprivacy: 'public'
+baseDir = 'offchain-computing'
+def nativeImage = buildSimpleDocker_v3(
+        buildInfo: buildInfo,
+        dockerfileDir: baseDir,
+        buildContext: baseDir,
+        dockerImageRepositoryName: 'offchain-python-hello-world',
+        visibility: 'docker.io'
+)
+
+buildSimpleDocker_v3(
+        buildInfo: buildInfo,
+        dockerfileDir: baseDir + '/gramine',
+        buildContext: baseDir,
+        dockerImageRepositoryName: 'tee-gramine-offchain-python-hello-world',
+        visibility: 'iex.ec'
 )
 
 sconeBuildUnlocked(
-  nativeImage:     nativeImage,
-  imageName:       'offchain-python-hello-world',
-  imageTag:        buildInfo.imageTag,
-  sconifyArgsPath: 'offchain-computing/sconify.args',
-  sconifyVersion:  '5.7.1'
+        nativeImage: nativeImage,
+        imageName: 'offchain-python-hello-world',
+        imageTag: buildInfo.imageTag,
+        sconifyArgsPath: baseDir + '/sconify.args',
+        sconifyVersion: '5.7.1'
 )

offchain-computing/gramine/Dockerfile

@@ -0,0 +1,26 @@
+# FIXME: use tagged version when released
+FROM docker-regis.iex.ec/iexec-graphene-base:0.7.0
+
+RUN apt-get update \
+    && apt install -y python3 apktool gcc musl-dev \
+    && pip3 install eth_abi \
+    && rm -rf /var/lib/apt/lists/*
+
+ARG SOURCE_DIR=src
+ARG GRAMINE_DIR=gramine
+
+# get the code of app to /workplace/app
+COPY $SOURCE_DIR/app.py /workplace/app
+
+# set the main function for python and node app, no need for binnary app
+RUN sed -i "s#MAIN_FUNC=#MAIN_FUNC=/workplace/app/app.py#" /apploader.sh
+
+WORKDIR /workplace/app
+
+# Copy the manifest to use from within the base image
+# or create your own
+RUN mv /common-manifests/python.entrypoint.manifest /entrypoint.manifest \
+    && rm -r /common-manifests
+
+# Finalize app (finalize manifest and sign app)
+RUN /finalize-app.sh