mystikos
mystikos copied to clipboard
mystikos container base image should have cryptsetup-bin preinstalled
When using the mystikos base image to build a container one library that needs to be installed is cryptsetup-bin:
RUN apt-get update && apt-get install -y cryptsetup-bin
The ask is to ship mystikos-bionic with this preinstalled so that the consumer of mystikos-bionic does not have to do apt-get
, which requires internet connection.
Example dockerfile:
FROM mystikos.azurecr.io/mystikos-bionic:v0.8.0 AS build
WORKDIR /home
RUN apt-get update && apt-get install -y cryptsetup-bin
...
RUN myst mkext2 appdir-tokenservice rootfs
RUN myst fssig --roothash rootfs > roothash
RUN openssl genrsa -out private.pem -3 3072
RUN myst package-sgx --roothash=roothash private.pem config.json
...
CMD [ "/home/myst/bin/dotnet" ]
Desired: no need to run apt-get update and install
FROM mystikos.azurecr.io/mystikos-bionic:v0.8.0 AS build
WORKDIR /home
...
RUN myst mkext2 appdir-tokenservice rootfs
RUN myst fssig --roothash rootfs > roothash
RUN openssl genrsa -out private.pem -3 3072
RUN myst package-sgx --roothash=roothash private.pem config.json
...
CMD [ "/home/myst/bin/dotnet" ]