mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-08 12:19:24 +00:00
9a75f92864
For hash-pinned dependencies, adds comments documenting the associated versions. Adds a pin to `slither-analyzer` which was prior missing. Updates to Monero 0.18.4.4. `mimalloc` now has the correct option set when building for `musl`. A C++ compiler is no longer required in its Docker image. The runtime's `Dockerfile` now symlinks a `libc.so` already present on the image instead of creating one itself. It also builds the runtime within the image to ensure it only happens once. The test to ensure the methodology is reproducible has been updated to not simply create containers from the image, yet rebuild the image entirely, accordingly. This also is more robust and arguably should have already been done. The pin to the exact hash of the `patch-polkadot-sdk` repo in every `Cargo.toml` has been removed. The lockfile already serves that role, simplifying updating in the future. The latest Rust nightly is adopted as well (superseding https://github.com/serai-dex/serai/pull/697). The `librocksdb-sys` patch is replaced with a `kvdb-rocksdb` patch, removing a git dependency, thanks to https://github.com/paritytech/parity-common/pull/950.
69 lines
2.1 KiB
Rust
69 lines
2.1 KiB
Rust
use std::path::Path;
|
|
|
|
use zeroize::Zeroizing;
|
|
|
|
use dalek_ff_group::Ristretto;
|
|
use ciphersuite::{group::ff::PrimeField, WrappedGroup};
|
|
|
|
use crate::{Network, Os, mimalloc, os, build_serai_service, write_dockerfile};
|
|
|
|
#[allow(clippy::needless_pass_by_value)]
|
|
pub fn coordinator(
|
|
orchestration_path: &Path,
|
|
network: Network,
|
|
coordinator_key: Zeroizing<<Ristretto as WrappedGroup>::F>,
|
|
serai_key: &Zeroizing<<Ristretto as WrappedGroup>::F>,
|
|
) {
|
|
let db = network.db();
|
|
let longer_reattempts = if network == Network::Dev { "longer-reattempts" } else { "" };
|
|
let setup = mimalloc(Os::Debian) +
|
|
&build_serai_service(
|
|
"",
|
|
Os::Debian,
|
|
network.release(),
|
|
&format!("{db} {longer_reattempts}"),
|
|
"serai-coordinator",
|
|
);
|
|
|
|
const ADDITIONAL_ROOT: &str = r#"
|
|
# Install ca-certificates
|
|
RUN apt install -y ca-certificates
|
|
"#;
|
|
|
|
#[rustfmt::skip]
|
|
const DEFAULT_RUST_LOG: &str = "info,serai_coordinator=debug,tributary_chain=debug,tendermint=debug,libp2p_gossipsub::behaviour=error";
|
|
|
|
let env_vars = [
|
|
("MESSAGE_QUEUE_RPC", format!("serai-{}-message-queue", network.label())),
|
|
("MESSAGE_QUEUE_KEY", hex::encode(coordinator_key.to_repr())),
|
|
("DB_PATH", "/volume/coordinator-db".to_string()),
|
|
("SERAI_KEY", hex::encode(serai_key.to_repr())),
|
|
("SERAI_HOSTNAME", format!("serai-{}-serai", network.label())),
|
|
("RUST_LOG", DEFAULT_RUST_LOG.to_string()),
|
|
];
|
|
let mut env_vars_str = String::new();
|
|
for (env_var, value) in env_vars {
|
|
env_vars_str += &format!(r#"{env_var}=${{{env_var}:="{value}"}} "#);
|
|
}
|
|
|
|
let run_coordinator = format!(
|
|
r#"
|
|
# Copy the Coordinator binary and relevant license
|
|
COPY --from=builder --chown=coordinator /serai/bin/serai-coordinator /bin/
|
|
COPY --from=builder --chown=coordinator /serai/AGPL-3.0 .
|
|
|
|
# Run coordinator
|
|
CMD {env_vars_str} serai-coordinator
|
|
"#
|
|
);
|
|
|
|
let run = os(Os::Debian, ADDITIONAL_ROOT, "coordinator") + &run_coordinator;
|
|
let res = setup + &run;
|
|
|
|
let mut coordinator_path = orchestration_path.to_path_buf();
|
|
coordinator_path.push("coordinator");
|
|
coordinator_path.push("Dockerfile");
|
|
|
|
write_dockerfile(coordinator_path, &res);
|
|
}
|