[PPML] Refactor BigDL Attestation Service Deployment of Docker and K8s (#8130)
Refactor BigDL Attestation Service Deployment of Docker image, which split to base image and custom(reference) image. Update version to 2.4.0-SNAPSHOT. Refine documents.
This commit is contained in:
parent
d833a765fe
commit
94f08edbb3
1 changed files with 49 additions and 0 deletions
49
.github/workflows/manually_build.yml
vendored
49
.github/workflows/manually_build.yml
vendored
|
|
@ -34,6 +34,7 @@ on:
|
||||||
- bigdl-ppml-trusted-deep-learning
|
- bigdl-ppml-trusted-deep-learning
|
||||||
- bigdl-kms-base
|
- bigdl-kms-base
|
||||||
- bigdl-kms-reference
|
- bigdl-kms-reference
|
||||||
|
- bigdl-attestation-service
|
||||||
tag:
|
tag:
|
||||||
description: 'docker image tag (e.g. 2.1.0-SNAPSHOT)'
|
description: 'docker image tag (e.g. 2.1.0-SNAPSHOT)'
|
||||||
required: true
|
required: true
|
||||||
|
|
@ -711,6 +712,54 @@ jobs:
|
||||||
docker push 10.239.45.10/arda/${IMAGE}:${TAG}
|
docker push 10.239.45.10/arda/${IMAGE}:${TAG}
|
||||||
docker rmi -f ${IMAGE}:${TAG} 10.239.45.10/arda/${IMAGE}:${TAG}
|
docker rmi -f ${IMAGE}:${TAG} 10.239.45.10/arda/${IMAGE}:${TAG}
|
||||||
|
|
||||||
|
bigdl-attestation-service:
|
||||||
|
if: ${{ github.event.inputs.artifact == 'bigdl-attestation-service' || github.event.inputs.artifact == 'all' }}
|
||||||
|
runs-on: [self-hosted, Shire]
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
- name: docker login
|
||||||
|
run: |
|
||||||
|
docker login -u ${DOCKERHUB_USERNAME} -p ${DOCKERHUB_PASSWORD}
|
||||||
|
- name: docker deploy bigdl-attestation-service
|
||||||
|
run: |
|
||||||
|
export BASE_IMAGE=intelanalytics/bigdl-ppml-trusted-bigdata-gramine-base
|
||||||
|
export AS_BASE_IMAGE=intelanalytics/bigdl-attestation-service-base
|
||||||
|
export AS_REF_IMAGE=intelanalytics/bigdl-attestation-service-reference
|
||||||
|
cd ppml/services/bigdl-attestation-service/docker
|
||||||
|
echo "########################################"
|
||||||
|
echo "#### bigdl-attestation-service-base ####"
|
||||||
|
echo "########################################"
|
||||||
|
cd base
|
||||||
|
sudo docker build \
|
||||||
|
--no-cache=true \
|
||||||
|
--build-arg http_proxy=${HTTP_PROXY} \
|
||||||
|
--build-arg https_proxy=${HTTPS_PROXY} \
|
||||||
|
--build-arg BASE_IMAGE_NAME=${BASE_IMAGE} \
|
||||||
|
--build-arg BASE_IMAGE_TAG=${TAG} \
|
||||||
|
--build-arg no_proxy=${NO_PROXY} \
|
||||||
|
-t $AS_BASE_IMAGE:$TAG -f ./Dockerfile .
|
||||||
|
echo "########################################"
|
||||||
|
echo "#### bigdl-attestation-service-ref #####"
|
||||||
|
echo "########################################"
|
||||||
|
cd ../custom
|
||||||
|
openssl genrsa -3 -out enclave-key.pem 3072
|
||||||
|
sudo docker build \
|
||||||
|
--no-cache=true \
|
||||||
|
--build-arg BASE_IMAGE_NAME=${AS_BASE_IMAGE} \
|
||||||
|
--build-arg BASE_IMAGE_TAG=${TAG} \
|
||||||
|
-t $AS_REF_IMAGE:$TAG -f ./Dockerfile .
|
||||||
|
|
||||||
|
sudo docker push ${AS_BASE_IMAGE}:${TAG}
|
||||||
|
sudo docker tag ${AS_BASE_IMAGE}:${TAG} 10.239.45.10/arda/${AS_BASE_IMAGE}:${TAG}
|
||||||
|
sudo docker push 10.239.45.10/arda/${AS_BASE_IMAGE}:${TAG}
|
||||||
|
sudo docker rmi -f ${AS_BASE_IMAGE}:${TAG} 10.239.45.10/arda/${AS_BASE_IMAGE}:${TAG}
|
||||||
|
|
||||||
|
sudo docker push ${AS_REF_IMAGE}:${TAG}
|
||||||
|
sudo docker tag ${AS_REF_IMAGE}:${TAG} 10.239.45.10/arda/${AS_REF_IMAGE}:${TAG}
|
||||||
|
sudo docker push 10.239.45.10/arda/${AS_REF_IMAGE}:${TAG}
|
||||||
|
sudo docker rmi -f ${AS_REF_IMAGE}:${TAG} 10.239.45.10/arda/${AS_REF_IMAGE}:${TAG}
|
||||||
|
|
||||||
bigdl-ppml-pccs:
|
bigdl-ppml-pccs:
|
||||||
if: ${{ github.event.inputs.artifact == 'bigdl-ppml-pccs' || github.event.inputs.artifact == 'all' }}
|
if: ${{ github.event.inputs.artifact == 'bigdl-ppml-pccs' || github.event.inputs.artifact == 'all' }}
|
||||||
runs-on: [self-hosted, Shire]
|
runs-on: [self-hosted, Shire]
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue