chore: add more debug log to ic_tee_nitro_gateway

ldclabs · Nov 5, 2024 · 7eefe0c · 7eefe0c
1 parent 2b61275
commit 7eefe0c
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 7 deletions.
diff --git a/.github/workflows/build-dockers.yml b/.github/workflows/build-dockers.yml
@@ -15,13 +15,7 @@ jobs:
     - uses: Swatinem/rust-cache@v2
     - name: Build the Docker image
       run: |
-        docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-        docker buildx create --use
         docker login --username ${{ github.actor }} --password ${{ secrets.GITHUB_TOKEN }} ${{ env.REGISTRY }}
-        IMAGE_TAG="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}_enclave_arm64:${{ github.ref_name }}"
-        LATEST_TAG="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}_enclave_arm64:latest"
-        TAGS="-t ${IMAGE_TAG} -t ${LATEST_TAG}"
-        docker build -f nitro_enclave/arm64.Dockerfile $TAGS --push .
         IMAGE_TAG="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}_enclave_amd64:${{ github.ref_name }}"
         LATEST_TAG="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}_enclave_amd64:latest"
         TAGS="-t ${IMAGE_TAG} -t ${LATEST_TAG}"

diff --git a/nitro_enclave/setup.sh b/nitro_enclave/setup.sh
@@ -22,6 +22,7 @@ iptables -t nat -A POSTROUTING -o lo -s 0.0.0.0 -j SNAT --to-source 127.0.0.1
 iptables -L -t nat -v -n
 
 # your custom setup goes here
+export LOG_LEVEL=Debug
 
 # starting supervisord
 cat /etc/supervisord.conf

diff --git a/src/ic_tee_nitro_gateway/src/main.rs b/src/ic_tee_nitro_gateway/src/main.rs
@@ -75,6 +75,8 @@ async fn main() -> Result<()> {
     let tee_agent = TEEAgent::new(IC_HOST, authentication_canister, configuration_canister)
         .map_err(anyhow::Error::msg)?;
 
+    log::info!(target: "server", "init principal: {:?}", tee_agent.principal().await.to_text());
+
     let namespace = cli.configuration_namespace;
     let session_expires_in_ms = cli.session_expires_in_ms.unwrap_or(24 * 60 * 60 * 1000);
     let public_key = tee_agent.session_key().await;
@@ -90,13 +92,18 @@ async fn main() -> Result<()> {
         nonce: None,
     })
     .map_err(anyhow::Error::msg)?;
+    log::debug!(target: "server", "attestation doc: {:?}", const_hex::encode(&doc));
+
     let attestation = parse_and_verify(doc.as_slice()).map_err(anyhow::Error::msg)?;
+    log::info!(target: "server", "attestation: {:?}", attestation);
 
     tee_agent
         .sign_in(TEE_KIND.to_string(), doc.into())
         .await
         .map_err(anyhow::Error::msg)?;
 
+    log::info!(target: "server", "sign in principal: {:?}", tee_agent.principal().await.to_text());
+
     let upgrade_identity =
         if let Some(v) = cli.configuration_upgrade_identity {
             Some(Principal::from_text(v).map_err(|err| {
@@ -131,6 +138,7 @@ async fn main() -> Result<()> {
         tee_agent
             .upgrade_identity_with(&id, session_expires_in_ms)
             .await;
+        log::info!(target: "server", "upgrade identity principal: {:?}", tee_agent.principal().await.to_text());
         Some(id)
     } else {
         None
@@ -150,6 +158,7 @@ async fn main() -> Result<()> {
         configuration_canister,
         registration_canister: None,
     };
+    log::info!(target: "server", "TEEAppInformation: {:?}", info);
 
     let http_client = Arc::new(handler::new_client());
     let tee_agent = Arc::new(tee_agent);
@@ -175,6 +184,7 @@ async fn main() -> Result<()> {
                     tee_agent
                         .upgrade_identity_with(id, session_expires_in_ms)
                         .await;
+                    log::info!(target: "server", "refresh_identity principal: {:?}", tee_agent.principal().await.to_text());
                 }
                 None => {
                     // ignore error
@@ -188,6 +198,7 @@ async fn main() -> Result<()> {
                             Ok((TEE_KIND.to_string(), doc.into()))
                         })
                         .await;
+                    log::info!(target: "server", "refresh_identity principal: {:?}", tee_agent.principal().await.to_text());
                 }
             }
         }
@@ -210,7 +221,7 @@ async fn main() -> Result<()> {
         let listener = tokio::net::TcpListener::bind(&addr)
             .await
             .map_err(anyhow::Error::new)?;
-        log::warn!(target: "local server", "{}@{} listening on {:?}", APP_NAME, APP_VERSION, addr);
+        log::warn!(target: "local_server", "{}@{} listening on {:?}", APP_NAME, APP_VERSION, addr);
         axum::serve(listener, app)
             .with_graceful_shutdown(shutdown_future)
             .await