Merge pull request #17 from iExecBlockchainComputing/feature/production-certificates

Feature/production certificates

Author: james-toussaint

Jenkinsfile

@@ -1,4 +1,4 @@
-@Library('global-jenkins-library@2.1.1') _
+@Library('global-jenkins-library@2.3.0') _
 
 buildInfo = getBuildInfo()
 
@@ -11,14 +11,35 @@ nativeImage = buildSimpleDocker_v3(
   visibility: 'docker.io'
 )
 
-buildSimpleDocker_v3(
-  buildInfo: buildInfo,
-  dockerfileDir: baseDir + '/gramine',
-  buildContext: baseDir,
-  dockerImageRepositoryName: 'tee-gramine-python-hello-world',
-  visibility: 'iex.ec'
-)
-
+stage('Build Gramine') {
+    gramineBuildInfo = buildInfo.clone()
+    dockerfileDir = baseDir + '/gramine'
+    dockerImageRepositoryName = 'tee-python-hello-world'
+    gramineBuildInfo.imageTag += '-gramine'
+    visibility = 'iex.ec'
+    productionImageName = ''
+    stage('Build Gramine production image') {
+        productionImageName = buildSimpleDocker_v3(
+            buildInfo: gramineBuildInfo,
+            dockerfileDir: dockerfileDir,
+            buildContext: baseDir,
+            dockerImageRepositoryName: dockerImageRepositoryName,
+            visibility: visibility
+        )
+    }
+    stage('Build Gramine test CA Gramine image') {
+        testCaSuffix = 'test-ca'
+        gramineBuildInfo.imageTag += '-' + testCaSuffix
+        buildSimpleDocker_v3(
+            buildInfo: gramineBuildInfo,
+            dockerfileDir: dockerfileDir,
+            dockerfileFilename: 'Dockerfile.' + testCaSuffix,
+            dockerBuildOptions: '--build-arg BASE_IMAGE=' + productionImageName,
+            dockerImageRepositoryName: dockerImageRepositoryName,
+            visibility: visibility
+        )
+    }
+}
 
 sconeBuildUnlocked(
   nativeImage:     nativeImage,

cloud-computing/gramine/Dockerfile

@@ -1,7 +1,7 @@
 # FIXME: use tagged version when released
-FROM docker-regis.iex.ec/iexec-graphene-base:0.7.0
+FROM docker-regis.iex.ec/iexec-graphene-base:0.8.0
 
-RUN  apt-get install -y python3 \
+RUN apt-get install -y python3 && rm -rf /var/lib/apt/lists/* \
      && pip3 install pyfiglet
 
 ARG SOURCE_DIR=src
@@ -17,8 +17,7 @@ WORKDIR /workplace/app
 
 # Copy the manifest to use from within the base image
 # or create your own
-RUN mv /common-manifests/python.entrypoint.manifest /entrypoint.manifest \
-    && rm -r /common-manifests
+RUN cp /common-manifests/python.entrypoint.manifest /entrypoint.manifest
 
 # Finalize app (finalize manifest and sign app)
 RUN /finalize-app.sh

cloud-computing/gramine/Dockerfile.test-ca

@@ -0,0 +1,5 @@
+ARG BASE_IMAGE
+FROM $BASE_IMAGE
+ENV CA=test
+RUN cp /common-manifests/python.entrypoint.manifest /entrypoint.manifest
+RUN /finalize-app.sh