.env.example

# SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network>
# SPDX-License-Identifier: Apache-2.0

# Directory containing unpacked dstack guest images:
# <store>/<image-name>/{bzImage,initramfs...,rootfs...,digest.txt,sha256sum.txt}
DSTACK_E2E_IMAGE_STORE=../../../meta-dstack/build/images
DSTACK_E2E_IMAGE_NAME=dstack-0.6.0
DSTACK_E2E_PLATFORM=tdx

# Exact released upgrade sources. Both are digest-pinned on Docker Hub and
# checked by their in-image --version output before any CVM is launched.
DSTACK_E2E_OLD_KMS_IMAGE=dstacktee/dstack-kms:0.5.8@sha256:9650dcb47dad0065470f432f00e78e012912214ef1a5b1d7272918817e61a26d
DSTACK_E2E_OLD_GATEWAY_IMAGE=dstacktee/dstack-gateway:0.5.8@sha256:6eb1dc1a5000f37cc5b0322d3fdb71e7f2e31859b5e3a611634919278cee2411
DSTACK_E2E_APP_IMAGE=nginx:alpine

# Mock ACME/DNS + externally visible test domain for Gateway SNI.
DSTACK_E2E_BASE_DOMAIN=e2e.test
DSTACK_E2E_PEBBLE_IMAGE=kvin/pebble:latest

# Host ports. Defaults are chosen to avoid common dstackup ports.
DSTACK_E2E_VMM_PORT=29080
DSTACK_E2E_AUTH_PORT=28011
DSTACK_E2E_ARTIFACT_PORT=38081
DSTACK_E2E_KMS_OLD_HOST_PORT=28082
DSTACK_E2E_KMS_LATEST_HOST_PORT=28083
# KMS 0.5.8 encodes this value as a DNS SAN. It must resolve to the test host
# from BOTH the host-side deployment client and each CVM. If omitted, the
# renderer derives <host-default-route-ip>.nip.io (for example below).
# DSTACK_E2E_KMS_RPC_DOMAIN=192.168.1.90.nip.io
DSTACK_E2E_GATEWAY1_RPC_HOST_PORT=28000
DSTACK_E2E_GATEWAY1_ADMIN_HOST_PORT=28001
DSTACK_E2E_GATEWAY1_PROXY_HOST_PORT=28443
DSTACK_E2E_GATEWAY1_WG_HOST_PORT=28120
DSTACK_E2E_GATEWAY2_RPC_HOST_PORT=28100
DSTACK_E2E_GATEWAY2_ADMIN_HOST_PORT=28101
DSTACK_E2E_GATEWAY2_PROXY_HOST_PORT=28543
DSTACK_E2E_GATEWAY2_WG_HOST_PORT=28121
DSTACK_E2E_KEY_PROVIDER_PORT=13443
DSTACK_E2E_HOST_API_PORT=20011
DSTACK_E2E_MOCK_CF_HTTP_PORT=38080
DSTACK_E2E_PEBBLE_HTTP_PORT=34000
DSTACK_E2E_PEBBLE_MGMT_PORT=35000

# Optional exact 20-byte Gateway application ID. If omitted, the renderer
# deterministically derives one. "any" is intentionally rejected.
# DSTACK_E2E_GATEWAY_APP_ID=0123456789abcdef0123456789abcdef01234567

# VMM/QEMU knobs.
DSTACK_E2E_CID_START=15000
DSTACK_E2E_QGS_PORT=4050
DSTACK_E2E_QEMU_PATH=/usr/bin/qemu-system-x86_64

# SGX QCNL config used by the Local-Key-Provider that seals each KMS CVM disk.
DSTACK_E2E_QCNL_CONF=../../dstack/local-key-provider/build/sgx_default_qcnl.conf

# Runner behaviour.
DSTACK_E2E_CLEAN_START=true
DSTACK_E2E_CLEANUP_AFTER=false
DSTACK_E2E_UPGRADE_CLEAN_STATE=true
DSTACK_E2E_KEEP_STACK=true

# Set only when the current x86_64-musl KMS/Gateway binaries were already built.
DSTACK_E2E_SKIP_CURRENT_BUILD=false