Fix op-batcher-tee 's PCR0 registration#227
Fix op-batcher-tee 's PCR0 registration#227dailinsubjam wants to merge 14 commits intocelo-integration-rebase-13.2from
Conversation
| docker compose stop op-batcher-tee | ||
| docker compose rm -f op-batcher-tee | ||
| ./scripts/build-enclave-image.sh | ||
| echo "✅ op-batcher-enclave image prepared" |
There was a problem hiding this comment.
I don't see this message when running the script, nor the messages below. The last log is Building enclave image WITHOUT args for consistent PCR0....
There was a problem hiding this comment.
Seems this is due to not building enclave-tools, updated in bd78533
There was a problem hiding this comment.
nitro-cli is also needed here, however it's only accessible on x86-64 linux, upd in a08c375.
espresso/scripts/startup-with-tee.sh
Outdated
| COMPOSE_PROFILES=tee docker compose build | ||
| echo "✅ Docker compose build complete" | ||
|
|
||
| # Check for AWS Nitro Enclave support |
There was a problem hiding this comment.
Should we have this check earlier, since it's step 5 that usually doesn't succeed?
|
Close it in favor of #232 and https://app.asana.com/1/1208976916964769/project/1209976130071762/task/1211414707436431. It turns out this is not a PCR0 registration issue. And could be resolved by waiting for 45min at the beginning. Will investigate and try to improve in the new ticket. |
Closes https://app.asana.com/1/1208976916964769/project/1209393353274209/task/1211215435859948?focus=true
https://app.asana.com/1/1208976916964769/project/1209392461754458/task/1211248432980276?focus=true
This PR:
Fix this error when running op-batcher-tee in current devnet
INFO enclave > t=2025-09-02T23:12:21+0000 lvl=warn msg="Failed to create a transaction, will retry" service=batcher err="failed to estimate gas: execution reverted, reason: 0x"by building enclave image once in consistent environment, reuse everywhere.This PR does not:
Key places to review:
All changes.
I wrote a script to build PCR0 outside of Docker so it stays persistent. This requires deleting all cached Docker layers. Let me know if you have a cleaner or better solution.
How to test this PR:
(you can also take a look at Readme changes)