trustee/docker-compose.yml at main · openanolis/trustee · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
version: '3.2'
services:
  kbs:
    build:
      context: .
      network: host
      dockerfile: Dockerfile.kbs
    # image: trustee-registry.cn-hangzhou.cr.aliyuncs.com/instance/kbs:latest
    command: [
        "/usr/local/bin/kbs",
        "--config-file",
        "/etc/kbs-config.toml",
      ]
    restart: always # keep the server running
    ports:
      - "8080:8080"
    volumes:
      - ./kbs/data/kbs-storage:/opt/confidential-containers/kbs/repository:rw
      - ./kbs/config/public.pub:/opt/confidential-containers/kbs/user-keys/public.pub
      - ./kbs/config/docker-compose/kbs-config.toml:/etc/kbs-config.toml
    depends_on:
    - as

  as:
    build:
      context: .
      network: host
      dockerfile: Dockerfile.as-grpc
    # image: trustee-registry.cn-hangzhou.cr.aliyuncs.com/instance/as:latest
    ports:
    - "50004:50004"
    restart: always
    environment:
      RUST_LOG: debug
    volumes:
    - ./kbs/data/attestation-service:/opt/confidential-containers/attestation-service:rw
    - ./kbs/config/as-config.json:/etc/as-config.json:rw
    - ./kbs/config/sgx_default_qcnl.conf:/etc/sgx_default_qcnl.conf:rw
    command: [
      "grpc-as",
      "--socket",
      "0.0.0.0:50004",
      "--config-file",
      "/etc/as-config.json"
    ]
    depends_on:
    - rvps

  as-restful:
    build:
      context: .
      network: host
      dockerfile: Dockerfile.as-restful
    # image: trustee-registry.cn-hangzhou.cr.aliyuncs.com/instance/as-restful:latest
    ports:
    - "50005:50005"
    restart: always
    environment:
      RUST_LOG: debug
    volumes:
    - ./kbs/data/attestation-service:/opt/confidential-containers/attestation-service:rw
    - ./kbs/config/as-config.json:/etc/as-config.json:rw
    - ./kbs/config/sgx_default_qcnl.conf:/etc/sgx_default_qcnl.conf:rw
    command: [
      "restful-as",
      "--socket",
      "0.0.0.0:50005",
      "--config-file",
      "/etc/as-config.json"
    ]
    depends_on:
    - rvps

  rvps:
    # image: trustee-registry.cn-hangzhou.cr.aliyuncs.com/instance/rvps:latest
    build:
      context: .
      network: host
      dockerfile: Dockerfile.rvps
    restart: always # keep the server running
    ports:
      - "50003:50003"
    volumes:
      - ./kbs/data/reference-values:/opt/confidential-containers/attestation-service/reference_values:rw
      - ./kbs/config/rvps.json:/etc/rvps.json:rw
    command: [
      "rvps",
      "--address",
      "0.0.0.0:50003"
    ]

  gateway:
    build:
      context: .
      network: host
      dockerfile: Dockerfile.trustee-gateway
    # image: localhost/trustee-gateway:latest
    restart: always
    ports:
      - "8081:8081"
    volumes:
      - ./deploy/configs/trustee-gateway.yml:/app/config.yaml:rw
      - ./trustee-gateway/data:/app/data:rw
    command: [
      "/app/gateway",
      "--config",
      "/app/config.yaml"
    ]
    depends_on:
    - kbs
    - as
    - rvps

  frontend:
    build:
      context: .
      network: host
      dockerfile: Dockerfile.frontend
    ports:
      - "8082:8082"
    depends_on:
    - gateway