Simple remote provisioner

autoprovision-test.conf

@@ -0,0 +1,4 @@
+[Config]
+Include=base/base.conf
+Include=autoprovision-test/autoprovision-test.conf
+Include=devtools/devtools.conf

autoprovision-test/autoprovision-test.conf

@@ -0,0 +1,9 @@
+[Content]
+WithNetwork=true
+BuildScripts=autoprovision-test/mkosi.build
+BuildPackages=ca-certificates
+			  golang-go
+			  git
+Packages=cryptsetup
+         ca-certificates
+PostInstallationScripts=autoprovision-test/mkosi.postinst

autoprovision-test/autoprovision.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Autoprovisioner
+After=proxy-client.service
+Wants=proxy-client.service
+
+[Service]
+Type=oneshot
+User=root
+Group=root
+ExecStart=/usr/bin/autoprovision --app-contract 0x05ED0BF33dd0c0D5a7292cec365de785322b8F04 --provisioning-server-addr http://127.0.0.1:8078 --device-glob /dev/sda
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=minimal.target

autoprovision-test/mkosi.build

@@ -0,0 +1,7 @@
+#!/bin/bash
+set -euxo pipefail
+
+source scripts/make_git_package.sh
+
+make_git_package "tee-service-provisioning-backend" "autoprovision-test" "https://github.com/Ruteri/tee-service-provisioning-backend" 'go build -trimpath -ldflags "-s -w -buildid= " -v -o ./build/autoprovision ./instanceutils/autoprovision' "build/autoprovision:/usr/bin/autoprovision"
+make_git_package "cvm-reverse-proxy" "remote-tdx-provider" "https://github.com/flashbots/cvm-reverse-proxy" "make build-proxy-client" "build/proxy-client:/usr/bin/proxy-client"

autoprovision-test/mkosi.postinst

@@ -0,0 +1,9 @@
+#!/bin/bash
+set -euxo pipefail
+
+# Install systemd service units
+SERVICE_DIR="$BUILDROOT/etc/systemd/system"
+mkdir -p "$SERVICE_DIR"
+
+install -m 644 "autoprovision-test/autoprovision.service" "$SERVICE_DIR/"
+install -m 644 "autoprovision-test/proxy-client.service" "$SERVICE_DIR/"

autoprovision-test/proxy-client.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Provisioner client CVM Proxy
+After=network-setup.service
+Wants=network-setup.service
+
+[Service]
+Type=exec
+User=root
+Group=root
+ExecStart=/usr/bin/proxy-client --listen-addr 127.0.0.1:8078 --target-addr https://ns31695324.ip-141-94-163.eu:10079 --client-attestation-type dummy --dev-dummy-dcap http://ns31695324.ip-141-94-163.eu:10080
+Restart=on-failure
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=minimal.target

provisioner.conf

@@ -0,0 +1,4 @@
+[Config]
+Include=base/base.conf
+Include=provisioner/provisioner.conf
+Include=devtools/devtools.conf

provisioner/measurements.json

@@ -0,0 +1,14 @@
+[
+    {
+        "measurement_id": "azure-tdx",
+        "attestation_type": "azure-tdx",
+        "measurements": {
+        }
+    },
+    {
+        "measurement_id": "dcap-tdx",
+        "attestation_type": "dcap-tdx",
+        "measurements": {
+        }
+    }
+]

provisioner/mkosi.build

@@ -0,0 +1,7 @@
+#!/bin/bash
+set -euxo pipefail
+
+source scripts/make_git_package.sh
+
+make_git_package "tee-service-provisioning-backend" "main" "https://github.com/Ruteri/tee-service-provisioning-backend" 'go build -trimpath -ldflags "-s -w -buildid= " -v -o ./build/provisioner ./cmd/httpserver' "build/provisioner:/usr/bin/provisioner"
+make_git_package "cvm-reverse-proxy" "remote-tdx-provider" "https://github.com/flashbots/cvm-reverse-proxy" "make build-proxy-server" "build/proxy-server:/usr/bin/proxy-server"

provisioner/mkosi.postinst

@@ -0,0 +1,10 @@
+#!/bin/bash
+set -euxo pipefail
+
+# Install systemd service units
+SERVICE_DIR="$BUILDROOT/etc/systemd/system"
+mkdir -p "$SERVICE_DIR"
+
+install -m 644 "provisioner/provisioner.service" "$SERVICE_DIR/"
+install -m 644 "provisioner/proxy-server.service" "$SERVICE_DIR/"
+install -m 644 "provisioner/measurements.json" "$BUILDROOT/measurements.json"

provisioner/provisioner.conf

@@ -0,0 +1,8 @@
+[Content]
+WithNetwork=true
+BuildScripts=provisioner/mkosi.build
+BuildPackages=ca-certificates
+              golang-go
+              git
+Packages=ca-certificates
+PostInstallationScripts=provisioner/mkosi.postinst

provisioner/provisioner.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Provisioner
+After=network-setup.service
+Wants=network-setup.service
+
+[Service]
+Type=exec
+User=root
+Group=root
+ExecStart=/usr/bin/provisioner --rpc-addr https://1rpc.io/sepolia --listen-addr 127.0.0.1:8080 --simple-kms-seed 0000000000000000000000000000000000000000000000000000000000000000 --remote-attestation-provider http://ns31695324.ip-141-94-163.eu:10080
+Restart=on-failure
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=minimal.target

provisioner/proxy-server.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Provisioner CVM Proxy
+After=provisioner.service
+Wants=provisioner.service
+
+[Service]
+Type=exec
+User=root
+Group=root
+ExecStart=/usr/bin/proxy-server --listen-addr 0.0.0.0:8079 --target-addr http://127.0.0.1:8080 --server-attestation-type dummy --dev-dummy-dcap http://ns31695324.ip-141-94-163.eu:10080 --client-measurements /measurements.json
+Restart=on-failure
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=minimal.target

scripts/make_git_package.sh

@@ -1,6 +1,4 @@
 #!/bin/bash
-#
-# Note env variables: DESTDIR, BUILDROOT, GOCACHE
 
 make_git_package() {
     local package="$1"