build/rofl: Bump rofl-containers

Author: martintomazic

build/rofl/artifacts.go

@@ -21,6 +21,7 @@ var LatestContainerArtifacts = ArtifactsConfig{
 	Kernel:   "https://github.com/oasisprotocol/oasis-boot/releases/download/v0.6.2/stage1.bin#e5d4d654ca1fa2c388bf64b23fc6e67815893fc7cb8b7cfee253d87963f54973",
 	Stage2:   "https://github.com/oasisprotocol/oasis-boot/releases/download/v0.6.2/stage2-podman.tar.bz2#b2ea2a0ca769b6b2d64e3f0c577ee9c08f0bb81a6e33ed5b15b2a7e50ef9a09f",
 	Container: ContainerArtifactsConfig{
+		// TODO release new rofl-container
 		Runtime: "https://github.com/oasisprotocol/oasis-sdk/releases/download/rofl-containers%2Fv0.8.6/rofl-containers#5aa26a3c5a7e1d284e217959d89b7a620ea7b7fc5079909e25042124ffb384e8",
 	},
 }

cmd/rofl/public_var.go

@@ -253,7 +253,6 @@ func init() {
 	publicVarSetCmd.Flags().AddFlagSet(common.ForceFlag)
 	publicVarCmd.AddCommand(publicVarSetCmd)
 
-	// public-var import flags and registration.
 	publicVarImportCmd.Flags().AddFlagSet(roflCommon.DeploymentFlags)
 	publicVarImportCmd.Flags().AddFlagSet(common.ForceFlag)
 	publicVarCmd.AddCommand(publicVarImportCmd)

cmd/rofl/public_var_test.go

@@ -13,7 +13,7 @@ import (
 	cliConfig "github.com/oasisprotocol/cli/config"
 )
 
-func TestPublicVarMetadataKeyRejectsInvalidNames(t *testing.T) {
+func TestPublicVarRejectsInvalidNames(t *testing.T) {
 	for _, name := range []string{
 		"",
 		"API-URL",
@@ -28,7 +28,7 @@ func TestPublicVarMetadataKeyRejectsInvalidNames(t *testing.T) {
 	}
 }
 
-func TestParsePublicVarValueRejectsInvalidValues(t *testing.T) {
+func TestParsePublicVarRejectsInvalidValues(t *testing.T) {
 	for _, value := range [][]byte{
 		{0xff},
 	} {
@@ -45,12 +45,12 @@ func TestPublicVarCommandsUpdateManifest(t *testing.T) {
 	t.Chdir(tmpDir)
 
 	const (
-		testGreetingVarName = "GREETING"
-		testGreetingValue   = "hello"
-		testAPIURLVarName   = "API_URL"
-		testAPIURLValue     = "https://example.com?a=b#c"
-		testConfigVarName   = "CONFIG"
-		testConfigValue     = `{"mode":"prod"}`
+		testGreetingVar   = "GREETING"
+		testGreetingValue = "hello"
+		testAPIURLVar     = "API_URL"
+		testAPIURLValue   = "https://example.com?a=b#c"
+		testConfigVar     = "CONFIG"
+		testConfigValue   = `{"mode":"prod"}`
 	)
 
 	prevConfig := *cliConfig.Global()
@@ -83,54 +83,61 @@ deployments:
 	greetingFile := filepath.Join(tmpDir, "greeting.txt")
 	err = os.WriteFile(greetingFile, []byte(testGreetingValue), 0o600)
 	require.NoError(err)
-	publicVarSetCmd.Run(publicVarSetCmd, []string{testGreetingVarName, greetingFile})
+	publicVarSetCmd.Run(publicVarSetCmd, []string{testGreetingVar, greetingFile})
 
 	envFile := filepath.Join(tmpDir, ".env")
-	env := fmt.Sprintf("# public vars\n%s=%s # trailing comment\n%s=%s\n", testAPIURLVarName, testAPIURLValue, testConfigVarName, testConfigValue)
+	env := fmt.Sprintf("# public vars\n%s=%s # trailing comment\n%s=%s\n", testAPIURLVar, testAPIURLValue, testConfigVar, testConfigValue)
 	err = os.WriteFile(envFile, []byte(env), 0o600)
 	require.NoError(err)
 	publicVarImportCmd.Run(publicVarImportCmd, []string{envFile})
 
 	manifest, err := buildRofl.LoadManifest()
 	require.NoError(err)
 	metadata := manifest.Deployments["testnet"].Metadata
-	require.Equal(testGreetingValue, metadata[publicVarMetadataPrefix+testGreetingVarName])
-	require.Equal(testAPIURLValue, metadata[publicVarMetadataPrefix+testAPIURLVarName])
-	require.Equal(testConfigValue, metadata[publicVarMetadataPrefix+testConfigVarName])
+	require.Equal(testGreetingValue, metadata[publicVarMetadataPrefix+testGreetingVar])
+	require.Equal(testAPIURLValue, metadata[publicVarMetadataPrefix+testAPIURLVar])
+	require.Equal(testConfigValue, metadata[publicVarMetadataPrefix+testConfigVar])
 
 	// Test public-var get
 	output := captureStdout(t, func() {
-		publicVarGetCmd.Run(publicVarGetCmd, []string{testGreetingVarName})
+		publicVarGetCmd.Run(publicVarGetCmd, []string{testGreetingVar})
 	})
-	require.Contains(output, fmt.Sprintf("Name:        %s", testGreetingVarName))
+	require.Contains(output, fmt.Sprintf("Name:        %s", testGreetingVar))
 	require.Contains(output, fmt.Sprintf("Value:       %s", testGreetingValue))
 
 	// Test public-var rm
-	publicVarRmCmd.Run(publicVarRmCmd, []string{testGreetingVarName})
+	publicVarRmCmd.Run(publicVarRmCmd, []string{testGreetingVar})
 	manifest, err = buildRofl.LoadManifest()
 	require.NoError(err)
 	metadata = manifest.Deployments["testnet"].Metadata
-	require.NotContains(metadata, publicVarMetadataPrefix+testGreetingVarName)
-	require.Equal(testAPIURLValue, metadata[publicVarMetadataPrefix+testAPIURLVarName])
-	require.Equal(testConfigValue, metadata[publicVarMetadataPrefix+testConfigVarName])
+	require.NotContains(metadata, publicVarMetadataPrefix+testGreetingVar)
+	require.Equal(testAPIURLValue, metadata[publicVarMetadataPrefix+testAPIURLVar])
+	require.Equal(testConfigValue, metadata[publicVarMetadataPrefix+testConfigVar])
 
 	// Override public variable to an empty string.
 	emptyFile := filepath.Join(tmpDir, "empty.txt")
 	err = os.WriteFile(emptyFile, nil, 0o600)
 	require.NoError(err)
 	withForce(t, true, func() {
-		publicVarSetCmd.Run(publicVarSetCmd, []string{testConfigVarName, emptyFile})
+		publicVarSetCmd.Run(publicVarSetCmd, []string{testConfigVar, emptyFile})
 	})
 	manifest, err = buildRofl.LoadManifest()
 	require.NoError(err)
 	metadata = manifest.Deployments["testnet"].Metadata
-	require.Equal(testAPIURLValue, metadata[publicVarMetadataPrefix+testAPIURLVarName])
-	require.Equal("", metadata[publicVarMetadataPrefix+testConfigVarName])
+	require.Equal(testAPIURLValue, metadata[publicVarMetadataPrefix+testAPIURLVar])
+	require.Equal("", metadata[publicVarMetadataPrefix+testConfigVar])
 }
 
 func withForce(t *testing.T, enabled bool, fn func()) {
 	t.Helper()
 
+	boolFlagValue := func(v bool) string {
+		if v {
+			return "true"
+		}
+		return "false"
+	}
+
 	prev := cliCommon.IsForce()
 	require.NoError(t, cliCommon.ForceFlag.Set("force", boolFlagValue(enabled)))
 	defer func() {
@@ -139,10 +146,3 @@ func withForce(t *testing.T, enabled bool, fn func()) {
 
 	fn()
 }
-
-func boolFlagValue(v bool) string {
-	if v {
-		return "true"
-	}
-	return "false"
-}

docs/rofl.md

@@ -186,6 +186,53 @@ Run `rofl secret rm <secret-name>` to remove the secret from your manifest file.
 
 ![code shell](../examples/rofl/secret-rm.in.static)
 
+## Public variables management {#public-var}
+
+Public variables are stored unencrypted in ROFL app metadata and exposed to
+containers as environment variables. Use `rofl secret` for confidential values.
+
+### Set public variable {#public-var-set}
+
+Run `rofl public-var set <name> <filename>|-` to store a public variable in the
+manifest file.
+
+If you have the value in a file, run:
+
+![code shell](../examples/rofl/public-var-set-file.in.static)
+
+You can also feed the value from standard input:
+
+![code shell](../examples/rofl/public-var-set-stdin.in.static)
+
+Use `--force` to replace an existing public variable.
+
+### Import public variables from `.env` files {#public-var-import}
+
+Run `rofl public-var import <dot-env-file>|-` to bulk-import public variables
+from a [dotenv](https://github.com/motdotla/dotenv) compatible file (key=value
+with `#` comments).
+
+![code shell](../examples/rofl/public-var-import.in.static)
+
+Each `KEY=VALUE` pair becomes a separate public variable in your manifest. Use
+`--force` to replace existing public variables.
+
+### Get public variable info {#public-var-get}
+
+Run `rofl public-var get <name>` to show the value currently stored in your
+manifest file.
+
+![code shell](../examples/rofl/public-var-get.in.static)
+
+![code](../examples/rofl/public-var-get.out.static)
+
+### Remove public variable {#public-var-rm}
+
+Run `rofl public-var rm <name>` to remove the public variable from your manifest
+file.
+
+![code shell](../examples/rofl/public-var-rm.in.static)
+
 ## Update ROFL app config on-chain {#update}
 
 Use `rofl update` command to push the ROFL app's configuration to the chain:

examples/rofl/public-var-get.in.static

@@ -0,0 +1 @@
+oasis rofl public-var get API_URL

examples/rofl/public-var-get.out.static

@@ -0,0 +1,3 @@
+Name:        API_URL
+Value:       https://api.example.com
+Size:        23 bytes

examples/rofl/public-var-import.in.static

@@ -0,0 +1 @@
+oasis rofl public-var import .env.production

examples/rofl/public-var-rm.in.static

@@ -0,0 +1 @@
+oasis rofl public-var rm API_URL

examples/rofl/public-var-set-file.in.static

@@ -0,0 +1 @@
+oasis rofl public-var set API_URL api-url.txt

examples/rofl/public-var-set-stdin.in.static

@@ -0,0 +1 @@
+echo -n "https://api.example.com" | oasis rofl public-var set API_URL -