attested-capability-broker/compose.yaml at main · noah-ing/attested-capability-broker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
name: attested-capability-broker

services:
  swtpm:
    build:
      context: .
    command: ["./scripts/run-swtpm.sh"]
    expose:
      - "2321"
      - "2322"
    healthcheck:
      test:
        - CMD
        - python
        - -c
        - "import socket; socket.create_connection(('127.0.0.1', 2321), timeout=1).close()"
      interval: 1s
      timeout: 2s
      retries: 20
      start_period: 2s
    tmpfs:
      - /var/lib/atcap-swtpm:mode=0700
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

  verify:
    build:
      context: .
    depends_on:
      swtpm:
        condition: service_healthy
    environment:
      ATCAP_SWTPM_TCTI: swtpm:host=swtpm,port=2321
      ATCAP_LAB_COMMIT_SHA: ${ATCAP_LAB_COMMIT_SHA:-0000000000000000000000000000000000000000}
      TPM2TOOLS_TCTI: swtpm:host=swtpm,port=2321
    command: ["./scripts/container-smoke.sh"]
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

networks:
  default:
    internal: true