Merge pull request #237 from skalenetwork/task/SKALE-3576-intel-submission

Task/skale 3576 intel submission

.github/workflows/dockerimageintelsubmission.yml

+name: Build, test and push Intel SGX container
+on:
+  workflow_dispatch:
+  push:
+jobs:
+  build:
+    runs-on: ubuntu-18.04
+    env:
+      DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+      DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+    steps:
+      - name: Fail, if older Github Actions machine. Click "Re-run jobs"
+        run: cat /proc/cpuinfo | grep avx512
+      - name: Login to docker
+        run: docker login -u ${DOCKER_USERNAME} -p ${DOCKER_PASSWORD}
+      - uses: actions/checkout@v1
+      - name: submodule update
+        run: git submodule update --init --recursive
+      - name: build and deploy docker image
+        if: |
+          contains(github.ref, 'stable')
+        run : |
+          export BRANCH=${GITHUB_REF##*/}
+          echo "Branch $BRANCH"
+          export VERSION=$(cat VERSION)
+          echo "Version $VERSION"
+          export VERSION=$(bash ./scripts/calculate_version.sh $BRANCH $VERSION)
+          echo "::set-env name=VERSION::$VERSION"
+          echo "Version $VERSION"
+          export RELEASE=true
+          echo "::set-env name=RELEASE::$RELEASE"
+          bash ./scripts/build_image.sh DockerfileIntelSubmission sgxwallet_intelsubmission
+          bash ./scripts/publish_image.sh sgxwallet_intelsubmission
+        env:
+          ACTIONS_ALLOW_UNSECURE_COMMANDS: true

.github/workflows/dockerimagerelease.yml

@@ -16,8 +16,6 @@ jobs:
       - uses: actions/checkout@v1
       - name: submodule update
         run: git submodule update --init --recursive
-      - name: build
-        run: python3 scripts/docker_build.py Dockerfile sgxwallet ${GITHUB_SHA}
       - name: build and deploy docker image
         if: |
           contains(github.ref, 'develop') || contains(github.ref, 'beta') ||

DockerfileIntelSubmission

+FROM skalenetwork/sgxwallet_base:latest
+
+COPY . /usr/src/sdk
+WORKDIR /usr/src/sdk
+RUN cp -f secure_enclave/secure_enclave.config.xml.release secure_enclave/secure_enclave.config.xml
+RUN apt update && apt install -y curl secure-delete
+#Test signing key generation
+RUN cd scripts && ./generate_signing_key.bash
+RUN touch /var/hwmode
+RUN ./autoconf.bash
+RUN ./configure --with-sgx-build=release
+RUN bash -c "make -j$(nproc)"
+RUN cd scripts && ./sign_enclave.bash
+RUN ccache -sz
+RUN mkdir -p /usr/src/sdk/sgx_data
+COPY docker/start.sh ./
+RUN rm -rf /usr/src/sdk/sgx-sdk-build/
+RUN rm  /opt/intel/sgxsdk/lib64/*_sim.so
+ENTRYPOINT ["/usr/src/sdk/start.sh"]

secure_enclave/secure_enclave.config.xml

 <EnclaveConfiguration>
  <ProdID>0</ProdID>
  <ISVSVN>2</ISVSVN>
- <StackMaxSize>0x200000</StackMaxSize>
- <HeapMaxSize>0x200000</HeapMaxSize>
+ <StackMaxSize>0x1000000</StackMaxSize>
+ <HeapMaxSize>0x100000000</HeapMaxSize>
  <TCSNum>256</TCSNum>
  <TCSMaxNum>256</TCSMaxNum>
  <TCSMinPool>256</TCSMinPool>

secure_enclave/secure_enclave.config.xml.release

@@ -2,7 +2,7 @@
  <ProdID>0</ProdID>
  <ISVSVN>2</ISVSVN>
  <StackMaxSize>0x1000000</StackMaxSize>
- <HeapMaxSize>0x100000000</HeapMaxSize>
+ <HeapMaxSize>0x10000000000</HeapMaxSize>
  <TCSNum>256</TCSNum>
  <TCSMaxNum>256</TCSMaxNum>
  <TCSMinPool>256</TCSMinPool>