mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-02-02 10:35:08 -05:00
remove aws image
This commit is contained in:
parent
990ca20469
commit
4f6af8d304
@ -17,7 +17,7 @@ admin.conf
|
|||||||
coordinatorConfig.json
|
coordinatorConfig.json
|
||||||
coordinator-*
|
coordinator-*
|
||||||
|
|
||||||
/images
|
/image
|
||||||
|
|
||||||
# Dockerfiles
|
# Dockerfiles
|
||||||
Dockerfile
|
Dockerfile
|
||||||
|
55
.github/workflows/build-ami.yml
vendored
55
.github/workflows/build-ami.yml
vendored
@ -1,55 +0,0 @@
|
|||||||
name: Build the AMI Template
|
|
||||||
on:
|
|
||||||
workflow_dispatch:
|
|
||||||
workflow_call:
|
|
||||||
secrets:
|
|
||||||
AWS_ACCESS_KEY_ID:
|
|
||||||
required: true
|
|
||||||
AWS_SECRET_ACCESS_KEY:
|
|
||||||
required: true
|
|
||||||
AWS_DEFAULT_REGION:
|
|
||||||
required: true
|
|
||||||
BUCKET_NAME:
|
|
||||||
required: true
|
|
||||||
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
build-enclave:
|
|
||||||
name: "Build the AMI"
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
env:
|
|
||||||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
||||||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
||||||
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
|
|
||||||
working-directory: images/aws/ec2
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
id: checkout
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
|
|
||||||
- name: Install AWS CLI
|
|
||||||
id: prepare
|
|
||||||
run: sudo apt-get update && sudo apt-get -y install awscli
|
|
||||||
|
|
||||||
- name: Download eif
|
|
||||||
id: download_eif
|
|
||||||
run: aws s3 cp s3://${{ secrets.BUCKET_NAME }}/eif/ ${{ github.workspace }}/${{ env.working-directory }}/ --recursive --quiet
|
|
||||||
|
|
||||||
- name: Download gvproxy
|
|
||||||
id: download_gvproxy
|
|
||||||
run: aws s3 cp s3://${{ secrets.BUCKET_NAME }}/gvproxy/gvproxy ${{ github.workspace }}/${{ env.working-directory }}/ --quiet
|
|
||||||
|
|
||||||
- name: Install build dependencies
|
|
||||||
run: sudo apt-get -y install packer
|
|
||||||
|
|
||||||
- name: Init packer
|
|
||||||
run: packer init .
|
|
||||||
working-directory: ${{ env.working-directory }}
|
|
||||||
|
|
||||||
- name: Validate packer
|
|
||||||
run: packer validate -syntax-only .
|
|
||||||
working-directory: ${{ env.working-directory }}
|
|
||||||
|
|
||||||
- name: Build packer
|
|
||||||
run: packer build -color=false .
|
|
||||||
working-directory: ${{ env.working-directory }}
|
|
2
.github/workflows/build-coreos-debug.yml
vendored
2
.github/workflows/build-coreos-debug.yml
vendored
@ -14,7 +14,7 @@ jobs:
|
|||||||
run:
|
run:
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
working-directory: ${{ github.workspace }}/images/fcos
|
working-directory: ${{ github.workspace }}/image
|
||||||
SHELL: /bin/bash
|
SHELL: /bin/bash
|
||||||
GOPATH: /home/github-actions-runner-user/go
|
GOPATH: /home/github-actions-runner-user/go
|
||||||
GOCACHE: /home/github-actions-runner-user/.cache/go-build
|
GOCACHE: /home/github-actions-runner-user/.cache/go-build
|
||||||
|
2
.github/workflows/build-coreos.yml
vendored
2
.github/workflows/build-coreos.yml
vendored
@ -42,7 +42,7 @@ jobs:
|
|||||||
run:
|
run:
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
working-directory: ${{ github.workspace }}/images/fcos
|
working-directory: ${{ github.workspace }}/image
|
||||||
SHELL: /bin/bash
|
SHELL: /bin/bash
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
|
74
.github/workflows/build-enclave.yml
vendored
74
.github/workflows/build-enclave.yml
vendored
@ -1,74 +0,0 @@
|
|||||||
name: Build and Upload the Enclave Image File
|
|
||||||
on:
|
|
||||||
workflow_dispatch:
|
|
||||||
inputs:
|
|
||||||
coordinator-name:
|
|
||||||
description: Coordinator name
|
|
||||||
required: true
|
|
||||||
type: string
|
|
||||||
|
|
||||||
workflow_call:
|
|
||||||
inputs:
|
|
||||||
coordinator-name:
|
|
||||||
required: true
|
|
||||||
type: string
|
|
||||||
|
|
||||||
secrets:
|
|
||||||
CI_GITHUB_REPOSITORY:
|
|
||||||
required: true
|
|
||||||
AWS_ACCESS_KEY_ID:
|
|
||||||
required: true
|
|
||||||
AWS_SECRET_ACCESS_KEY:
|
|
||||||
required: true
|
|
||||||
AWS_DEFAULT_REGION:
|
|
||||||
required: true
|
|
||||||
BUCKET_NAME:
|
|
||||||
required: true
|
|
||||||
PUBLIC_BUCKET_NAME:
|
|
||||||
required: true
|
|
||||||
SSH_PUB_KEY:
|
|
||||||
required: true
|
|
||||||
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
build-enclave:
|
|
||||||
name: "Build the Enclave"
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
env:
|
|
||||||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
||||||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
||||||
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
id: checkout
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
with:
|
|
||||||
submodules: recursive
|
|
||||||
token: ${{ secrets.CI_GITHUB_REPOSITORY }}
|
|
||||||
|
|
||||||
- name: Install AWS CLI
|
|
||||||
id: prepare
|
|
||||||
run: sudo apt-get update && sudo apt-get -y install awscli
|
|
||||||
|
|
||||||
- name: Download bzImage, init and nsm.ko to AWS S3 Bucket
|
|
||||||
id: download-artifacts
|
|
||||||
run: aws s3 cp s3://${{ secrets.BUCKET_NAME }}/blobs/ ${{ github.workspace }}/images/aws/enclave/userland/dependencies/blobs/ --recursive
|
|
||||||
|
|
||||||
- name: Download Coordinator
|
|
||||||
id: download-coordinator
|
|
||||||
run: aws s3 cp s3://${{ secrets.PUBLIC_BUCKET_NAME }}/coordinator/${{ inputs.coordinator-name }}${{ github.event.inputs.coordinator-name }} ${{ github.workspace }}/images/aws/enclave/userland/build/coordinator
|
|
||||||
|
|
||||||
- name: Write ssh public key to file
|
|
||||||
run: echo $SSH_PUB_KEY >> ${{ env.SSH_PUB_KEY_PATH }} && chmod 644 ${{ env.SSH_PUB_KEY_PATH }}
|
|
||||||
env:
|
|
||||||
SSH_PUB_KEY: ${{ secrets.SSH_PUB_KEY }}
|
|
||||||
SSH_PUB_KEY_PATH: ~/authorized_keys
|
|
||||||
|
|
||||||
- name: Build the eif file
|
|
||||||
run: make -j$(nproc) SSH_DIR=~/ -C ${{ github.workspace }}/images/aws/enclave/
|
|
||||||
|
|
||||||
- name: Upload eif file to AWS S3 Bucket
|
|
||||||
id: upload
|
|
||||||
run: aws s3 cp ${{ github.workspace }}/images/aws/enclave/userland/build/ s3://${{ secrets.BUCKET_NAME }}/eif/ --recursive --exclude "*" --include "*.eif" --quiet
|
|
||||||
|
|
||||||
|
|
36
.github/workflows/build-kernel.yml
vendored
36
.github/workflows/build-kernel.yml
vendored
@ -1,36 +0,0 @@
|
|||||||
name: Build the Kernel
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'kernel/**'
|
|
||||||
workflow_dispatch:
|
|
||||||
jobs:
|
|
||||||
compile-and-upload-kernel:
|
|
||||||
name: "Compile and upload the Kernel"
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Install build dependencies
|
|
||||||
id: install
|
|
||||||
run: sudo apt-get update && sudo apt-get install -y git build-essential fakeroot libncurses5-dev libssl-dev ccache bison flex libelf-dev dwarves
|
|
||||||
|
|
||||||
- name: Checkout
|
|
||||||
id: checkout
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
|
|
||||||
- name: Compile using make
|
|
||||||
id: compile
|
|
||||||
run: make -C ${{ github.workspace }}/images/aws/kernel/
|
|
||||||
|
|
||||||
- name: Install AWS CLI
|
|
||||||
id: prepare
|
|
||||||
run: sudo apt-get -y install awscli
|
|
||||||
|
|
||||||
- name: Upload bzImage, init and nsm.ko to AWS S3 Bucket
|
|
||||||
id: upload
|
|
||||||
run: aws s3 cp ${{ github.workspace }}/images/aws/kernel/build/blobs/ s3://${{ secrets.BUCKET_NAME }}/blobs/ --recursive --quiet
|
|
||||||
env:
|
|
||||||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
||||||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
||||||
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
|
|
47
.github/workflows/build-patched-gvisor-proxy.yml
vendored
47
.github/workflows/build-patched-gvisor-proxy.yml
vendored
@ -1,47 +0,0 @@
|
|||||||
name: Patch gvisor-tap-vsock and Upload to S3
|
|
||||||
on:
|
|
||||||
workflow_dispatch:
|
|
||||||
inputs:
|
|
||||||
version:
|
|
||||||
description: "gvisor version"
|
|
||||||
required: true
|
|
||||||
default: 0.3.0
|
|
||||||
jobs:
|
|
||||||
build:
|
|
||||||
name: "Build"
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
env:
|
|
||||||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
||||||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
||||||
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
|
|
||||||
working-directory: ec2
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
id: checkout
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
|
|
||||||
- name: Prepare Download
|
|
||||||
id: prepare
|
|
||||||
run: sudo apt-get update && sudo apt-get -y install wget tar make
|
|
||||||
|
|
||||||
- name: Download and unpack sources
|
|
||||||
id: unpack
|
|
||||||
run: wget -c https://github.com/containers/gvisor-tap-vsock/archive/refs/tags/v${{ github.event.inputs.version }}.tar.gz -O - | tar xz
|
|
||||||
working-directory: ${{ github.workspace }}
|
|
||||||
|
|
||||||
- name: Install go
|
|
||||||
uses: actions/setup-go@v2
|
|
||||||
with:
|
|
||||||
go-version: go1.17.6
|
|
||||||
|
|
||||||
- name: Patch source code
|
|
||||||
run: patch --ignore-whitespace ${{ github.workspace }}/gvisor-tap-vsock-${{ github.event.inputs.version }}/pkg/services/forwarder/tcp.go < ${{ github.workspace }}/images/aws/ec2/patches/remove_link_local.patch
|
|
||||||
working-directory: ${{ env.working-directory }}
|
|
||||||
|
|
||||||
- name: Build gvisor
|
|
||||||
id: build
|
|
||||||
run: make -C ${{ github.workspace }}/gvisor-tap-vsock-${{ github.event.inputs.version }}/
|
|
||||||
|
|
||||||
- name: Upload gvproxy
|
|
||||||
id: upload_gvproxy
|
|
||||||
run: aws s3 cp ${{ github.workspace }}/gvisor-tap-vsock-${{ github.event.inputs.version }}/bin/gvproxy s3://${{ secrets.BUCKET_NAME }}/gvproxy/gvproxy --quiet
|
|
19
.gitignore
vendored
19
.gitignore
vendored
@ -25,16 +25,9 @@ util/pcr-reader/pcrs/
|
|||||||
# Debug and testing files
|
# Debug and testing files
|
||||||
debug/
|
debug/
|
||||||
|
|
||||||
# Images
|
# Image
|
||||||
images/aws/kernel/build/*
|
image/*.ign
|
||||||
images/aws/kernel/sed*
|
image/build/*
|
||||||
images/aws/enclave/userland/build/*
|
image/dependencies/coordinator
|
||||||
images/aws/enclave/userland/dependencies/blobs/*
|
image/images/*
|
||||||
images/aws/enclave/userland/privatekey
|
image/cosa.lock
|
||||||
images/aws/enclave/userland/publickey
|
|
||||||
images/aws/enclave/.build-*
|
|
||||||
images/*.ign
|
|
||||||
images/fcos/build/*
|
|
||||||
images/fcos/dependencies/coordinator
|
|
||||||
images/fcos/images/*
|
|
||||||
images/fcos/cosa.lock
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user