mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-08 20:29:23 +00:00
a141deaf36
This helps identify where the various functionalities are used, or rather, not used. The `Ciphersuite` trait present in `patches/ciphersuite`, facilitating the entire FCMP++ tree, only requires the markers _and_ canonical point decoding. I've opened a PR to upstream such a trait into `group` (https://github.com/zkcrypto/group/pull/68). `WrappedGroup` is still justified for as long as `Group::generator` exists. Moving `::generator()` to its own trait, on an independent structure (upstream) would be massively appreciated. @tarcieri also wanted to update from `fn generator()` to `const GENERATOR`, which would encourage further discussion on https://github.com/zkcrypto/group/issues/32 and https://github.com/zkcrypto/group/issues/45, which have been stagnant. The `Id` trait is occasionally used yet really should be first off the chopping block. Finally, `WithPreferredHash` is only actually used around a third of the time, which more than justifies it being a separate trait. --- Updates `dalek_ff_group::Scalar` to directly re-export `curve25519_dalek::Scalar`, as without issue. `dalek_ff_group::RistrettoPoint` also could be replaced with an export of `curve25519_dalek::RistrettoPoint`, yet the coordinator relies on how we implemented `Hash` on it for the hell of it so it isn't worth it at this time. `dalek_ff_group::EdwardsPoint` can't be replaced for an re-export of `curve25519_dalek::SubgroupPoint` as it doesn't implement `zeroize`, `subtle` traits within a released, non-yanked version. Relevance to https://github.com/serai-dex/serai/issues/201 and https://github.com/dalek-cryptography/curve25519-dalek/issues/811#issuecomment-3247732746. Also updates the `Ristretto` ciphersuite to prefer `Blake2b-512` over `SHA2-512`. In order to maintain compliance with FROST's IETF standard, `modular-frost` defines its own ciphersuite for Ristretto which still uses `SHA2-512`.
68 lines
2.1 KiB
Rust
68 lines
2.1 KiB
Rust
use std::path::Path;
|
|
|
|
use zeroize::Zeroizing;
|
|
|
|
use dalek_ff_group::Ristretto;
|
|
use ciphersuite::{group::ff::PrimeField, WrappedGroup};
|
|
|
|
use crate::{Network, Os, mimalloc, os, build_serai_service, write_dockerfile};
|
|
|
|
#[allow(clippy::needless_pass_by_value)]
|
|
pub fn coordinator(
|
|
orchestration_path: &Path,
|
|
network: Network,
|
|
coordinator_key: Zeroizing<<Ristretto as WrappedGroup>::F>,
|
|
serai_key: &Zeroizing<<Ristretto as WrappedGroup>::F>,
|
|
) {
|
|
let db = network.db();
|
|
let longer_reattempts = if network == Network::Dev { "longer-reattempts" } else { "" };
|
|
let setup = mimalloc(Os::Debian).to_string() +
|
|
&build_serai_service(
|
|
"",
|
|
network.release(),
|
|
&format!("{db} {longer_reattempts}"),
|
|
"serai-coordinator",
|
|
);
|
|
|
|
const ADDITIONAL_ROOT: &str = r#"
|
|
# Install ca-certificates
|
|
RUN apt install -y ca-certificates
|
|
"#;
|
|
|
|
#[rustfmt::skip]
|
|
const DEFAULT_RUST_LOG: &str = "info,serai_coordinator=debug,tributary_chain=debug,tendermint=debug,libp2p_gossipsub::behaviour=error";
|
|
|
|
let env_vars = [
|
|
("MESSAGE_QUEUE_RPC", format!("serai-{}-message-queue", network.label())),
|
|
("MESSAGE_QUEUE_KEY", hex::encode(coordinator_key.to_repr())),
|
|
("DB_PATH", "/volume/coordinator-db".to_string()),
|
|
("SERAI_KEY", hex::encode(serai_key.to_repr())),
|
|
("SERAI_HOSTNAME", format!("serai-{}-serai", network.label())),
|
|
("RUST_LOG", DEFAULT_RUST_LOG.to_string()),
|
|
];
|
|
let mut env_vars_str = String::new();
|
|
for (env_var, value) in env_vars {
|
|
env_vars_str += &format!(r#"{env_var}=${{{env_var}:="{value}"}} "#);
|
|
}
|
|
|
|
let run_coordinator = format!(
|
|
r#"
|
|
# Copy the Coordinator binary and relevant license
|
|
COPY --from=builder --chown=coordinator /serai/bin/serai-coordinator /bin/
|
|
COPY --from=builder --chown=coordinator /serai/AGPL-3.0 .
|
|
|
|
# Run coordinator
|
|
CMD {env_vars_str} serai-coordinator
|
|
"#
|
|
);
|
|
|
|
let run = os(Os::Debian, ADDITIONAL_ROOT, "coordinator") + &run_coordinator;
|
|
let res = setup + &run;
|
|
|
|
let mut coordinator_path = orchestration_path.to_path_buf();
|
|
coordinator_path.push("coordinator");
|
|
coordinator_path.push("Dockerfile");
|
|
|
|
write_dockerfile(coordinator_path, &res);
|
|
}
|