trustee/docker-compose.yml at main · confidential-containers/trustee · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
services:
  kbs:
    build:
      context: .
      dockerfile: kbs/docker/coco-as-grpc/Dockerfile
    image: ghcr.io/confidential-containers/staged-images/kbs-grpc-as:latest
    environment:
      - RUST_LOG
    command: [
        "/usr/local/bin/kbs",
        "--config-file",
        "/opt/confidential-containers/kbs/user-keys/kbs-config.toml",
      ]
    restart: always # keep the server running
    ports:
      - "8080:8080"
    volumes:
      - ./kbs/data/kbs-storage:/opt/confidential-containers/kbs/repository:rw
      - ./kbs/data/nebula-ca:/opt/confidential-containers/kbs/nebula-ca:rw
      - ./kbs/config/docker-compose:/opt/confidential-containers/kbs/user-keys
    depends_on:
      as:
        condition: service_started
      setup:
        condition: service_completed_successfully

  as:
    build:
      context: .
      dockerfile: attestation-service/docker/as-grpc/Dockerfile
    image: ghcr.io/confidential-containers/staged-images/coco-as-grpc:latest
    environment:
      - RUST_LOG
    ports:
    - "50004:50004"
    restart: always
    volumes:
    - ./kbs/data/attestation-service:/opt/confidential-containers/attestation-service:rw
    - ./kbs/config/docker-compose/as-config.json:/etc/as-config.json:rw
    - ./kbs/config/docker-compose:/opt/confidential-containers/kbs/user-keys
    command: [
      "grpc-as",
      "--socket",
      "0.0.0.0:50004",
      "--config-file",
      "/etc/as-config.json"
    ]
    depends_on:
    - rvps

  rvps:
    build:
      context: .
      dockerfile: rvps/docker/Dockerfile
    image: ghcr.io/confidential-containers/staged-images/rvps:latest
    environment:
      - RUST_LOG
    restart: always # keep the server running
    ports:
      - "50003:50003"
    volumes:
      - ./kbs/data/reference-values:/opt/confidential-containers/attestation-service/reference_values:rw
      - ./kbs/config/docker-compose/rvps.json:/etc/rvps.json:rw
    command: [
      "rvps",
      "--address",
      "0.0.0.0:50003"
    ]

  setup:
    image: alpine/openssl
    environment:
      - RUST_LOG
    entrypoint: ["/bin/ash", "/opt/confidential-containers/kbs/user-keys/setup.sh"]

    volumes:
      - ./kbs/config/docker-compose:/opt/confidential-containers/kbs/user-keys