This repository has been archived by the owner on Jul 27, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 66
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
2177: Problem: Missing runner for TDBE + No persistence of TDBE fetched transactions r=tomtau a=devashishdxt Solution: Added TDBE runner and persistence stream for transactions fetched by TDBE. Fixes #1995. Note: There are still few things missing in the TDBE runner: - Fetching remote TDBE details from RPC - Fetching transaction IDs using light client - Attested TVE <-> TDBE stream Co-authored-by: Devashish <[email protected]>
- Loading branch information
Showing
12 changed files
with
353 additions
and
76 deletions.
There are no files selected for viewing
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,223 @@ | ||
| use std::{ | ||
| collections::HashMap, | ||
| future::Future, | ||
| io::{self, Cursor, Seek, SeekFrom}, | ||
| os::unix::net::UnixStream, | ||
| pin::Pin, | ||
| sync::Arc, | ||
| thread, | ||
| }; | ||
|
|
||
| use aesm_client::AesmClient; | ||
| use enclave_runner::{ | ||
| usercalls::{AsyncListener, AsyncStream, UsercallExtension}, | ||
| EnclaveBuilder, | ||
| }; | ||
| use kvdb::KeyValueDB; | ||
| use sgxs_loaders::isgx::Device; | ||
| use tdbe_common::TdbeStartupConfig; | ||
| use tokio::net::{TcpListener, TcpStream}; | ||
|
|
||
| use chain_core::tx::data::TxId; | ||
| use chain_storage::ReadOnlyStorage; | ||
| use enclave_protocol::{ | ||
| codec::{StreamRead, StreamWrite}, | ||
| tdbe_protocol::PersistenceCommand, | ||
| EnclaveRequest, EnclaveResponse, SealedLog, | ||
| }; | ||
| use ra_sp_server::config::SpRaConfig; | ||
|
|
||
| use crate::enclave_bridge::TdbeConfig; | ||
|
|
||
| #[derive(Debug)] | ||
| pub struct TdbeApp { | ||
| /// UDS to connect to `chain-abci` | ||
| chain_abci_stream: UnixStream, | ||
| /// UDS to persist data to `chain-storage` | ||
| persistence_stream: UnixStream, | ||
| /// `ra-sp-server` address for remote attestation. E.g. `0.0.0.0:8989` | ||
| /// TODO: Replace it with a local UDS (using `chain-abci` as launcher). | ||
| sp_address: String, | ||
| /// Optional address of remote TDBE server for fetching initial data | ||
| remote_rpc_address: Option<String>, | ||
| /// Local TDBE server address to listen on. E.g. `127.0.0.1:3445` | ||
| local_listen_address: String, | ||
| } | ||
|
|
||
| impl TdbeApp { | ||
| /// Creates a new instance of TDBE app | ||
| pub fn new( | ||
| tdbe_config: &TdbeConfig, | ||
| ra_config: &SpRaConfig, | ||
| storage: Arc<dyn KeyValueDB>, | ||
| ) -> std::io::Result<Self> { | ||
| // - `chain_abci_stream` is passed to enclave. Encalve can send requests to chain-abci | ||
| // using this | ||
| // - `chain_abci_receiver` listens to the requests sent by enclave and responds to them | ||
| let (chain_abci_stream, chain_abci_receiver) = UnixStream::pair()?; | ||
|
|
||
| // - `persistence_stream` is passed to enclave. Encalve can send requests to chain-storage | ||
| // using this | ||
| // - `persistence_receiver` listens to the requests sent by enclave and responds to them | ||
| let (persistence_stream, persistence_receiver) = UnixStream::pair()?; | ||
|
|
||
| spawn_chain_abci_thread(chain_abci_receiver, storage.clone()); | ||
| spawn_persistence_thread(persistence_receiver, storage); | ||
|
|
||
| Ok(Self { | ||
| chain_abci_stream, | ||
| persistence_stream, | ||
| sp_address: ra_config.address.clone(), | ||
| remote_rpc_address: tdbe_config.remote_rpc_address.clone(), | ||
| local_listen_address: tdbe_config.local_listen_address.clone(), | ||
| }) | ||
| } | ||
|
|
||
| pub fn spawn(self) { | ||
| thread::spawn(move || { | ||
| let mut device = Device::new() | ||
| .expect("SGX device was not found") | ||
| .einittoken_provider(AesmClient::new()) | ||
| .build(); | ||
| let mut enclave_builder = EnclaveBuilder::new("tdb-enclave-app.sgxs".as_ref()); | ||
|
|
||
| enclave_builder | ||
| .coresident_signature() | ||
| .expect("Enclave signature file not found"); | ||
| enclave_builder.usercall_extension(self); | ||
|
|
||
| let enclave = enclave_builder | ||
| .build(&mut device) | ||
| .expect("Failed to build enclave"); | ||
| enclave.run().expect("Failed to start enclave") | ||
| }); | ||
| } | ||
| } | ||
|
|
||
| fn spawn_chain_abci_thread(mut receiver: UnixStream, storage: Arc<dyn KeyValueDB>) { | ||
| let _ = thread::spawn(move || { | ||
| let storage = chain_storage::ReadOnlyStorage::new_db(storage); | ||
|
|
||
| while let Ok(enclave_request) = EnclaveRequest::read_from(&mut receiver) { | ||
| match enclave_request { | ||
| EnclaveRequest::GetSealedTxData { txids } => { | ||
| let response = | ||
| EnclaveResponse::GetSealedTxData(get_sealed_tx_data(txids, &storage)); | ||
| response | ||
| .write_to(&mut receiver) | ||
| .expect("Unable to write to TDBE <-> chain-abci unix stream"); | ||
| } | ||
| _ => unreachable!("TDBE can only send `GetSealedTxData` request"), | ||
| } | ||
| } | ||
| }); | ||
| } | ||
|
|
||
| fn get_sealed_tx_data(txids: Vec<TxId>, storage: &ReadOnlyStorage) -> Option<Vec<SealedLog>> { | ||
| let mut result = Vec::with_capacity(txids.len()); | ||
|
|
||
| for txid in txids { | ||
| if let Some(txin) = storage.get_sealed_log(&txid) { | ||
| result.push(txin); | ||
| } else { | ||
| return None; | ||
| } | ||
| } | ||
|
|
||
| Some(result) | ||
| } | ||
|
|
||
| fn spawn_persistence_thread(mut receiver: UnixStream, storage: Arc<dyn KeyValueDB>) { | ||
| let _ = thread::spawn(move || { | ||
| let mut storage = chain_storage::Storage::new_db(storage); | ||
| let mut buffer = HashMap::new(); | ||
| let mut kvdb = chain_storage::buffer::BufferStore::new(&storage, &mut buffer); | ||
|
|
||
| while let Ok(persistence_command) = PersistenceCommand::read_from(&mut receiver) { | ||
| match persistence_command { | ||
| PersistenceCommand::Store { | ||
| transaction_id, | ||
| sealed_log, | ||
| } => chain_storage::store_sealed_log(&mut kvdb, &transaction_id, &sealed_log), | ||
| PersistenceCommand::Finish { last_fetched_block } => { | ||
| chain_storage::set_last_fetched_block(&mut kvdb, last_fetched_block); | ||
| break; | ||
| } | ||
| } | ||
| } | ||
|
|
||
| chain_storage::buffer::flush_storage(&mut storage, std::mem::take(&mut buffer)) | ||
| .expect("Unable to flush storage"); | ||
| }); | ||
| } | ||
|
|
||
| #[allow(clippy::type_complexity)] | ||
| impl UsercallExtension for TdbeApp { | ||
| fn connect_stream<'future>( | ||
| &'future self, | ||
| addr: &'future str, | ||
| _local_addr: Option<&'future mut String>, | ||
| _peer_addr: Option<&'future mut String>, | ||
| ) -> Pin<Box<dyn Future<Output = io::Result<Option<Box<dyn AsyncStream>>>> + 'future>> { | ||
| async fn connect_stream_inner( | ||
| this: &TdbeApp, | ||
| addr: &str, | ||
| ) -> io::Result<Option<Box<dyn AsyncStream>>> { | ||
| match addr { | ||
| // Passes initial startup configuration to enclave | ||
| "init" => { | ||
| let tdbe_startup_config = TdbeStartupConfig { | ||
| remote_rpc_address: this.remote_rpc_address.clone(), | ||
| }; | ||
|
|
||
| let mut stream = Cursor::new(Vec::new()); | ||
| tdbe_startup_config | ||
| .write_to(&mut stream) | ||
| .expect("Unable to write initial configuration to `Cursor`"); | ||
|
|
||
| stream | ||
| .seek(SeekFrom::Start(0)) | ||
| .expect("Unable to seek to starting position on a Cursor"); | ||
|
|
||
| Ok(Some(Box::new(stream))) | ||
| } | ||
| // Connects enclave to chain-abci | ||
| "chain-abci" => { | ||
| let stream = | ||
| tokio::net::UnixStream::from_std(this.chain_abci_stream.try_clone()?)?; | ||
| Ok(Some(Box::new(stream))) | ||
| } | ||
| // Connects enclave to ra-sp-server | ||
| "ra-sp-server" => { | ||
| let stream = TcpStream::connect(&this.sp_address).await?; | ||
| Ok(Some(Box::new(stream))) | ||
| } | ||
| _ => Ok(None), | ||
| } | ||
| } | ||
|
|
||
| Box::pin(connect_stream_inner(self, addr)) | ||
| } | ||
|
|
||
| fn bind_stream<'future>( | ||
| &'future self, | ||
| addr: &'future str, | ||
| _local_addr: Option<&'future mut String>, | ||
| ) -> Pin<Box<dyn Future<Output = io::Result<Option<Box<dyn AsyncListener>>>> + 'future>> { | ||
| async fn bind_stream_inner( | ||
| this: &TdbeApp, | ||
| addr: &str, | ||
| ) -> io::Result<Option<Box<dyn AsyncListener>>> { | ||
| match addr { | ||
| // Binds TCP listener for TDBE server | ||
| "tdbe" => { | ||
| let listener = TcpListener::bind(&this.local_listen_address).await?; | ||
| Ok(Some(Box::new(listener))) | ||
| } | ||
| _ => Ok(None), | ||
| } | ||
| } | ||
|
|
||
| Box::pin(bind_stream_inner(self, addr)) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.