serai/orchestration/src/coordinator.rs

use std::path::Path;

use zeroize::Zeroizing;

use dalek_ff_group::Ristretto;
use ciphersuite::{group::ff::PrimeField, WrappedGroup};

use crate::{Network, Os, mimalloc, os, build_serai_service, write_dockerfile};

#[allow(clippy::needless_pass_by_value)]
pub fn coordinator(
  orchestration_path: &Path,
  network: Network,
  coordinator_key: Zeroizing<<Ristretto as WrappedGroup>::F>,
  serai_key: &Zeroizing<<Ristretto as WrappedGroup>::F>,
) {
  let db = network.db();
  let longer_reattempts = if network == Network::Dev { "longer-reattempts" } else { "" };
  let setup = mimalloc(Os::Debian).to_string() +
    &build_serai_service(
      "",
      Os::Debian,
      network.release(),
      &format!("{db} {longer_reattempts}"),
      "serai-coordinator",
    );

  const ADDITIONAL_ROOT: &str = r#"
# Install ca-certificates
RUN apt install -y ca-certificates
"#;

  #[rustfmt::skip]
  const DEFAULT_RUST_LOG: &str = "info,serai_coordinator=debug,tributary_chain=debug,tendermint=debug,libp2p_gossipsub::behaviour=error";

  let env_vars = [
    ("MESSAGE_QUEUE_RPC", format!("serai-{}-message-queue", network.label())),
    ("MESSAGE_QUEUE_KEY", hex::encode(coordinator_key.to_repr())),
    ("DB_PATH", "/volume/coordinator-db".to_string()),
    ("SERAI_KEY", hex::encode(serai_key.to_repr())),
    ("SERAI_HOSTNAME", format!("serai-{}-serai", network.label())),
    ("RUST_LOG", DEFAULT_RUST_LOG.to_string()),
  ];
  let mut env_vars_str = String::new();
  for (env_var, value) in env_vars {
    env_vars_str += &format!(r#"{env_var}=${{{env_var}:="{value}"}} "#);
  }

  let run_coordinator = format!(
    r#"
# Copy the Coordinator binary and relevant license
COPY --from=builder --chown=coordinator /serai/bin/serai-coordinator /bin/
COPY --from=builder --chown=coordinator /serai/AGPL-3.0 .

# Run coordinator
CMD {env_vars_str} serai-coordinator
"#
  );

  let run = os(Os::Debian, ADDITIONAL_ROOT, "coordinator") + &run_coordinator;
  let res = setup + &run;

  let mut coordinator_path = orchestration_path.to_path_buf();
  coordinator_path.push("coordinator");
  coordinator_path.push("Dockerfile");

  write_dockerfile(coordinator_path, &res);
}