@@ -67,8 +67,7 @@ chmod +x sconify.sh
6767## Build the TEE docker image
6868
6969Before wrapping your iExec confidential application with Scone, you need to
70- generate a custom signing key. This key is required for the sconification
71- process and will be referenced in the Docker command below.
70+ generate a custom signing key. This key is used for the sconification process.
7271
7372Generate your enclave signing key with:
7473
@@ -84,24 +83,19 @@ We will use the following script to wrap the sconification process, copy the
8483
8584::: code-group
8685
87- ``` bash [for Javascript]
86+ ``` bash [Javascript]
8887#! /bin/bash
8988
90- # Declare the app entrypoint
91- ENTRYPOINT=" node /app/app.js"
92-
9389# Declare image related variables
94- IMG_NAME=tee-scone-hello-world
9590IMG_FROM=< docker-hub-user> /hello-world:1.0.0
96- IMG_TO=< docker-hub-user> /${IMG_NAME} :1.0.0
91+ IMG_TO=< docker-hub-user> /tee-scone-hello-world :1.0.0
9792
9893# Run the sconifier to build the TEE image based on the non-TEE image
9994docker run -it --rm \
10095 -v $PWD /enclave-key.pem:/sig/enclave-key.pem \
10196 -v /var/run/docker.sock:/var/run/docker.sock \
10297 registry.scontain.com/scone-production/iexec-sconify-image:5.9.1-v16\
10398 sconify_iexec \
104- --name=${IMG_NAME} \
10599 --from=${IMG_FROM} \
106100 --to=${IMG_TO} \
107101 --binary-fs \
@@ -111,32 +105,25 @@ docker run -it --rm \
111105 --binary=/usr/local/bin/node \
112106 --heap=1G \
113107 --dlopen=1 \
114- --no-color \
115108 --verbose \
116- --command=${ENTRYPOINT} \
117109 && echo -e " \n------------------\n" \
118110 && echo " successfully built TEE docker image => ${IMG_TO} " \
119111 && echo " application mrenclave.fingerprint is $( docker run --rm -e SCONE_HASH=1 ${IMG_TO} ) "
120112```
121113
122- ``` bash [for Python]
114+ ``` bash [Python]
123115#! /bin/bash
124116
125- # Declare the app entrypoint
126- ENTRYPOINT=" python3 /app/app.py"
127-
128117# Declare image related variables
129- IMG_NAME=tee-scone-hello-world
130118IMG_FROM=< docker-hub-user> /hello-world:1.0.0
131- IMG_TO=< docker-hub-user> /${IMG_NAME} :1.0.0
119+ IMG_TO=< docker-hub-user> /tee-scone-hello-world :1.0.0
132120
133121# Run the sconifier to build the TEE image based on the non-TEE image
134- docker run -it \
122+ docker run -it --rm \
135123 -v $PWD /enclave-key.pem:/sig/enclave-key.pem \
136124 -v /var/run/docker.sock:/var/run/docker.sock \
137125 registry.scontain.com/scone-production/iexec-sconify-image:5.9.1-v16\
138126 sconify_iexec \
139- --name=${IMG_NAME} \
140127 --from=${IMG_FROM} \
141128 --to=${IMG_TO} \
142129 --binary-fs \
@@ -146,9 +133,7 @@ docker run -it \
146133 --binary=/usr/local/bin/python3 \
147134 --heap=1G \
148135 --dlopen=1 \
149- --no-color \
150136 --verbose \
151- --command=${ENTRYPOINT} \
152137 && echo -e " \n------------------\n" \
153138 && echo " successfully built TEE docker image => ${IMG_TO} " \
154139 && echo " application mrenclave.fingerprint is $( docker run --rm -e SCONE_HASH=1 ${IMG_TO} ) "
@@ -248,13 +233,6 @@ iexec app run --chain {{chainName}} --tag tee,scone --workerpool {{workerpoolAdd
248233
249234::: info
250235
251- You noticed we used ` {{workerpoolAddress}} ` instead of an ethereum address, this
252- is an ENS name.
253-
254- :::
255-
256- ::: info
257-
258236Remember, you can access task and app logs by following the instructions on page
259237[ Debug your tasks] ( /guides/build-iapp/debugging ) .
260238
0 commit comments