confidential-computing-modules/occlum-docker-compose.yml at main · LayerXcom/confidential-computing-modules · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
version: "3.7"
services:
  enclave:
    image: anonify.azurecr.io/base-occlum-enclave:latest
    volumes:
      - .:/root/anonify
      - /var/run/aesmd:/var/run/aesmd
    devices:
      - "/dev/sgx/enclave"
    ports:
      - ${OCCLUM_ENCLAVE_PORT}:${OCCLUM_ENCLAVE_PORT}
    environment:
      RUST_BACKTRACE: 1
      RUST_LOG: debug
      OCCLUM_LOG_LEVEL: debug
      SPID: ${SPID}
      SUB_KEY: ${SUB_KEY}
      IAS_URL: ${IAS_URL}
      OCCLUM_ENCLAVE_IP_ADDRESS: ${OCCLUM_ENCLAVE_IP_ADDRESS}
      OCCLUM_ENCLAVE_PORT: ${OCCLUM_ENCLAVE_PORT}
    stdin_open: true
    tty: true
    networks:
      occlum_testing_net:
        ipv4_address: ${OCCLUM_ENCLAVE_IP_ADDRESS}

  host:
    image: anonify.azurecr.io/base-occlum-host:latest
    volumes:
      - .:/root/anonify
    ports:
      - ${OCCLUM_HOST_PORT}:${OCCLUM_HOST_PORT}
    environment:
      RUST_BACKTRACE: 1
      RUST_LOG: debug
      OCCLUM_ENCLAVE_IP_ADDRESS: ${OCCLUM_ENCLAVE_IP_ADDRESS}
      OCCLUM_ENCLAVE_PORT: ${OCCLUM_ENCLAVE_PORT}
    stdin_open: true
    tty: true
    networks:
      occlum_testing_net:
        ipv4_address: ${OCCLUM_HOST_IP_ADDRESS}

networks:
  occlum_testing_net:
    ipam:
      driver: default
      config:
        - subnet: ${OCCLUM_COMPOSE_NETWORK_SUBNET}