mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-09 04:39:24 +00:00
9a75f92864
For hash-pinned dependencies, adds comments documenting the associated versions. Adds a pin to `slither-analyzer` which was prior missing. Updates to Monero 0.18.4.4. `mimalloc` now has the correct option set when building for `musl`. A C++ compiler is no longer required in its Docker image. The runtime's `Dockerfile` now symlinks a `libc.so` already present on the image instead of creating one itself. It also builds the runtime within the image to ensure it only happens once. The test to ensure the methodology is reproducible has been updated to not simply create containers from the image, yet rebuild the image entirely, accordingly. This also is more robust and arguably should have already been done. The pin to the exact hash of the `patch-polkadot-sdk` repo in every `Cargo.toml` has been removed. The lockfile already serves that role, simplifying updating in the future. The latest Rust nightly is adopted as well (superseding https://github.com/serai-dex/serai/pull/697). The `librocksdb-sys` patch is replaced with a `kvdb-rocksdb` patch, removing a git dependency, thanks to https://github.com/paritytech/parity-common/pull/950.
100 lines
2.8 KiB
Rust
100 lines
2.8 KiB
Rust
use std::path::Path;
|
|
|
|
use zeroize::Zeroizing;
|
|
|
|
use dalek_ff_group::Ristretto;
|
|
use ciphersuite::{group::ff::PrimeField, WrappedGroup};
|
|
|
|
use crate::{Network, Os, mimalloc, os, build_serai_service, write_dockerfile};
|
|
|
|
#[allow(clippy::needless_pass_by_value)]
|
|
pub fn processor(
|
|
orchestration_path: &Path,
|
|
network: Network,
|
|
coin: &'static str,
|
|
_coordinator_key: <Ristretto as WrappedGroup>::G,
|
|
processor_key: Zeroizing<<Ristretto as WrappedGroup>::F>,
|
|
substrate_evrf_key: Zeroizing<Vec<u8>>,
|
|
network_evrf_key: Zeroizing<Vec<u8>>,
|
|
) {
|
|
let setup = mimalloc(Os::Debian) +
|
|
&build_serai_service(
|
|
if coin == "ethereum" {
|
|
r#"
|
|
RUN cargo install svm-rs
|
|
RUN svm install 0.8.29
|
|
RUN svm use 0.8.29
|
|
"#
|
|
} else {
|
|
""
|
|
},
|
|
Os::Debian,
|
|
network.release(),
|
|
&format!("binaries {} {coin}", network.db()),
|
|
"serai-processor",
|
|
);
|
|
|
|
const ADDITIONAL_ROOT: &str = r#"
|
|
# Install ca-certificates
|
|
RUN apt install -y ca-certificates
|
|
"#;
|
|
|
|
// TODO: Randomly generate these
|
|
const RPC_USER: &str = "serai";
|
|
const RPC_PASS: &str = "seraidex";
|
|
// TODO: Isolate networks
|
|
let hostname = format!("serai-{}-{coin}", network.label());
|
|
let port = format!(
|
|
"{}",
|
|
match coin {
|
|
"bitcoin" => 8332,
|
|
"ethereum" => 8545,
|
|
"monero" => 18081,
|
|
_ => panic!("unrecognized external network"),
|
|
}
|
|
);
|
|
|
|
let mut env_vars = vec![
|
|
("MESSAGE_QUEUE_RPC", format!("serai-{}-message-queue", network.label())),
|
|
("MESSAGE_QUEUE_KEY", hex::encode(processor_key.to_repr())),
|
|
("SUBSTRATE_EVRF_KEY", hex::encode(substrate_evrf_key)),
|
|
("NETWORK_EVRF_KEY", hex::encode(network_evrf_key)),
|
|
("NETWORK", coin.to_string()),
|
|
("NETWORK_RPC_LOGIN", format!("{RPC_USER}:{RPC_PASS}")),
|
|
("NETWORK_RPC_HOSTNAME", hostname),
|
|
("NETWORK_RPC_PORT", port),
|
|
("DB_PATH", "/volume/processor-db".to_string()),
|
|
("RUST_LOG", "info,serai_processor=debug".to_string()),
|
|
];
|
|
if coin == "ethereum" {
|
|
env_vars
|
|
.push(("ETHEREUM_RELAYER_HOSTNAME", format!("serai-{}-ethereum-relayer", network.label())));
|
|
env_vars.push(("ETHEREUM_RELAYER_PORT", "20830".to_string()));
|
|
}
|
|
let mut env_vars_str = String::new();
|
|
for (env_var, value) in env_vars {
|
|
env_vars_str += &format!(r#"{env_var}=${{{env_var}:="{value}"}} "#);
|
|
}
|
|
|
|
let run_processor = format!(
|
|
r#"
|
|
# Copy the Processor binary and relevant license
|
|
COPY --from=builder --chown=processor /serai/bin/serai-processor /bin/
|
|
COPY --from=builder --chown=processor /serai/AGPL-3.0 .
|
|
|
|
# Run processor
|
|
CMD {env_vars_str} serai-processor
|
|
"#
|
|
);
|
|
|
|
let run = os(Os::Debian, ADDITIONAL_ROOT, "processor") + &run_processor;
|
|
let res = setup + &run;
|
|
|
|
let mut processor_path = orchestration_path.to_path_buf();
|
|
processor_path.push("processor");
|
|
processor_path.push(coin);
|
|
processor_path.push("Dockerfile");
|
|
|
|
write_dockerfile(processor_path, &res);
|
|
}
|