Noor
202a1a9998
updated proto change all units to mib calculating sloat ration while new app and sending resource
62 lines
1.7 KiB
Rust
62 lines
1.7 KiB
Rust
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
use anyhow::{anyhow, Result};
|
|
use detee_shared::sgx::types::brain::Resource;
|
|
use log::info;
|
|
use std::process::Command;
|
|
|
|
pub fn deploy_enclave(
|
|
enclave_path: &str,
|
|
container_name_uuid: String,
|
|
port_map: Vec<(u16, u16)>,
|
|
hratls_pubkey: String,
|
|
app_resource: Resource,
|
|
) -> Result<i32> {
|
|
let port_maping_string = port_map
|
|
.iter()
|
|
.map(|(host, container)| format!("-p {host}:{container}"))
|
|
.collect::<Vec<_>>()
|
|
.join(" ");
|
|
|
|
info!(
|
|
"Deploying enclave: {:?} with hratls: {:?}",
|
|
enclave_path, hratls_pubkey
|
|
);
|
|
|
|
let memory_mib = app_resource.memory_mib;
|
|
let vcpus = app_resource.vcpus;
|
|
// TODO: docker limit disk space
|
|
// let disk_mib = app_resource.disk_mib;
|
|
// --storage-opt size={disk_mib}m
|
|
|
|
let docker_deploy_str = format!(
|
|
"docker run -d --restart unless-stopped --name {container_name_uuid} --memory={memory_mib}m --cpus={vcpus} \
|
|
-v {enclave_path}:/enclave_package --device /dev/sgx/enclave --device /dev/sgx/provision \
|
|
{port_maping_string} noormohammedb/occlum-enclave:v1 {hratls_pubkey}"
|
|
);
|
|
|
|
let mut child = Command::new("sh")
|
|
.arg("-c")
|
|
.arg(docker_deploy_str)
|
|
.spawn()?;
|
|
|
|
let exit = child.wait()?;
|
|
let exit_code = exit
|
|
.code()
|
|
.ok_or(anyhow!("No exit code, process terminated by a signal"))?;
|
|
|
|
Ok(exit_code)
|
|
}
|
|
|
|
pub fn delete_enclave(app_name_uuid: String) -> Result<()> {
|
|
info!("Deleting enclave: {:?}", &app_name_uuid);
|
|
let docker_rm_str = format!(r#"docker container rm -f {app_name_uuid}"#);
|
|
let _ = Command::new("sh")
|
|
.arg("-c")
|
|
.arg(docker_rm_str)
|
|
.spawn()?
|
|
.wait()?;
|
|
|
|
Ok(())
|
|
}
|