diff --git a/scripts/aws/eks/pod/Dockerfile b/scripts/aws/eks/pod/Dockerfile index 1bdd1bc35..731b194d8 100644 --- a/scripts/aws/eks/pod/Dockerfile +++ b/scripts/aws/eks/pod/Dockerfile @@ -10,7 +10,7 @@ RUN dnf install python3.11 -y RUN dnf install python3.11-pip -y COPY ./sockd /home/ -COPY ./sockd.conf /etc/ +COPY ./sockd_eks.conf /etc/sockd.conf COPY ./vsockpx /home COPY ./entrypoint.sh /home/ diff --git a/scripts/aws/eks/pod/entrypoint.sh b/scripts/aws/eks/pod/entrypoint.sh index 40ef037f2..f10a3e86c 100644 --- a/scripts/aws/eks/pod/entrypoint.sh +++ b/scripts/aws/eks/pod/entrypoint.sh @@ -1,53 +1,49 @@ #!/bin/bash -eufx -# CID=16 -# EIF_PATH=/home/uid2operator.eif -# MEMORY_MB=24576 -# CPU_COUNT=6 - -# function terminate_old_enclave() { -# echo "terminate_old_enclave" -# ENCLAVE_ID=$(nitro-cli describe-enclaves | jq -r ".[0].EnclaveID") -# if [ "$ENCLAVE_ID" != "null" ]; then -# nitro-cli terminate-enclave --enclave-id ${ENCLAVE_ID} -# echo "Terminated enclave with ID ${ENCLAVE_ID}" -# else -# echo "No running enclaves to terminate." -# fi -# } - -# function setup_vsockproxy() { -# echo "setup_vsockproxy" -# VSOCK_PROXY=${VSOCK_PROXY:-/home/vsockpx} -# VSOCK_CONFIG=${VSOCK_CONFIG:-/home/proxies.host.yaml} -# VSOCK_THREADS=${VSOCK_THREADS:-$(( $(nproc) * 2 )) } -# VSOCK_LOG_LEVEL=${VSOCK_LOG_LEVEL:-3} -# echo "starting vsock proxy at $VSOCK_PROXY with $VSOCK_THREADS worker threads..." -# $VSOCK_PROXY -c $VSOCK_CONFIG --workers $VSOCK_THREADS --log-level $VSOCK_LOG_LEVEL --daemon -# echo "vsock proxy now running in background." -# } - -# function setup_dante() { -# echo "setup_dante" -# ulimit -n 1024 -# /home/sockd -D -# } - -# function run_config_server() { -# echo "run_config_server" -# config-server/bin/flask run --host 127.0.0.1 --port 27015 -# } - -# function run_enclave() { -# echo "starting enclave..." -# nitro-cli run-enclave --cpu-count $CPU_COUNT --memory $MEMORY_MB --eif-path $EIF_PATH --enclave-cid $CID --enclave-name simple-eif --debug-mode --attach-console -# } - -# terminate_old_enclave -# setup_vsockproxy -# setup_dante -# run_config_server -# run_enclave - -# echo "hello" - -sleep infinity \ No newline at end of file +CID=16 +EIF_PATH=/home/uid2operator.eif +MEMORY_MB=24576 +CPU_COUNT=6 + +function terminate_old_enclave() { + echo "terminate_old_enclave" + ENCLAVE_ID=$(nitro-cli describe-enclaves | jq -r ".[0].EnclaveID") + if [ "$ENCLAVE_ID" != "null" ]; then + nitro-cli terminate-enclave --enclave-id ${ENCLAVE_ID} + echo "Terminated enclave with ID ${ENCLAVE_ID}" + else + echo "No running enclaves to terminate." + fi +} + +function setup_vsockproxy() { + echo "setup_vsockproxy" + VSOCK_PROXY=${VSOCK_PROXY:-/home/vsockpx} + VSOCK_CONFIG=${VSOCK_CONFIG:-/home/proxies.host.yaml} + VSOCK_THREADS=${VSOCK_THREADS:-$(( $(nproc) * 2 )) } + VSOCK_LOG_LEVEL=${VSOCK_LOG_LEVEL:-3} + echo "starting vsock proxy at $VSOCK_PROXY with $VSOCK_THREADS worker threads..." + $VSOCK_PROXY -c $VSOCK_CONFIG --workers $VSOCK_THREADS --log-level $VSOCK_LOG_LEVEL --daemon + echo "vsock proxy now running in background." +} + +function setup_dante() { + echo "setup_dante" + ulimit -n 1024 + /home/sockd -D +} + +function run_config_server() { + echo "run_config_server" + config-server/bin/flask run --host 127.0.0.1 --port 27015 +} + +function run_enclave() { + echo "starting enclave..." + nitro-cli run-enclave --cpu-count $CPU_COUNT --memory $MEMORY_MB --eif-path $EIF_PATH --enclave-cid $CID --enclave-name simple-eif --debug-mode --attach-console +} + +terminate_old_enclave +setup_vsockproxy +setup_dante +run_config_server +run_enclave