Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 6 additions & 50 deletions .github/workflows/docker-build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
image_tag: ${{ steps.determine-tag.outputs.image_tag }}
steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
fetch-depth: 0

Expand Down Expand Up @@ -51,15 +51,15 @@ jobs:
echo "image_tag=dev-${SHORT_SHA}" | tee -a $GITHUB_OUTPUT
else
# This covers other branches
echo "Processing feature/bugfix branch ${{ github.head_ref }}"
echo "Processing feat/fix branch ${{ github.head_ref }}"
echo "image_tag=feature-${SHORT_SHA}" | tee -a $GITHUB_OUTPUT
fi
fi

build-oci-image:
name: Build OCI image
needs: prepare
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/docker-build.yml@docker-build-v2.4.0
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/docker-build.yml@docker-build-v3.3.0
with:
image-name: docker-regis.iex.ec/python-hello-world
image-tag: ${{ needs.prepare.outputs.image_tag }}
Expand All @@ -70,53 +70,9 @@ jobs:
security-scan: true
security-report: "sarif"
hadolint: true
platforms: linux/amd64
platform: linux/amd64
secrets:
dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}
dockerhub-password: ${{ secrets.DOCKERHUB_TOKEN_PULL_ONLY }}
username: ${{ secrets.NEXUS_USERNAME }}
password: ${{ secrets.NEXUS_PASSWORD }}

build-tee-image:
name: Build TEE image
needs: [prepare, build-oci-image]
runs-on: ubuntu-latest
env:
native_image: docker-regis.iex.ec/python-hello-world
enclave_image: docker-regis.iex.ec/python-hello-world-unlocked
sconify_image: registry.scontain.com/scone-debug/iexec-sconify-image-unlocked
sconify_version: 5.9.1
steps:
- name: Login to Scontain registry
uses: docker/login-action@v3
with:
registry: registry.scontain.com
username: ${{ secrets.SCONTAIN_REGISTRY_USERNAME }}
password: ${{ secrets.SCONTAIN_REGISTRY_PAT }}
- name: Login to Docker regis
uses: docker/login-action@v3
with:
registry: docker-regis.iex.ec
username: ${{ secrets.NEXUS_USERNAME }}
password: ${{ secrets.NEXUS_PASSWORD }}
- name: Pull sconification tools
run: docker pull $sconify_image:$sconify_version
- name: Pull native image
run: docker pull $native_image:${{ needs.prepare.outputs.image_tag }}
- name: Sconify
run: |
IMG_FROM=$native_image:${{ needs.prepare.outputs.image_tag }}
IMG_TO=$enclave_image:${{ needs.prepare.outputs.image_tag }}-sconify-$sconify_version-debug
SCONE_IMAGE=$sconify_image:$sconify_version
docker run --rm -v /var/run/docker.sock:/var/run/docker.sock $SCONE_IMAGE \
sconify_iexec --cli=$SCONE_IMAGE --crosscompiler=$SCONE_IMAGE \
--from=$IMG_FROM --to=$IMG_TO --binary-fs --fs-dir=/app --binary=/usr/local/bin/python3.7 \
--heap=1G --host-path=/etc/hosts --host-path=/etc/resolv.conf --no-color --verbose
echo
docker run --rm -e SCONE_HASH=1 $IMG_TO
- name: Push TEE image
run: docker push $enclave_image:${{ needs.prepare.outputs.image_tag }}-sconify-$sconify_version-debug
- name: Clean OCI images
run: |
docker image rm -f \
$native_image:${{ needs.prepare.outputs.image_tag }} \
$enclave_image:${{ needs.prepare.outputs.image_tag }}-sconify-$sconify_version-debug \
$sconify_image:$sconify_version
89 changes: 0 additions & 89 deletions .github/workflows/sconify-release.yaml

This file was deleted.

5 changes: 3 additions & 2 deletions cloud-computing/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
FROM python:3.7-alpine3.10
FROM python:3.13-alpine3.23

RUN apk upgrade --no-cache

### install needed python3 dependencies
RUN pip3 install pyfiglet

COPY ./src /app
Expand Down
Loading