diff --git a/docs/nitro-deploy.md b/docs/nitro-deploy.md index 8f6abd7..faf731b 100644 --- a/docs/nitro-deploy.md +++ b/docs/nitro-deploy.md @@ -779,45 +779,6 @@ A restart should not be needed but if you need to: sudo systemctl restart vsock-billing-proxy.service ``` -### Continuum Attestation Updator - -We need to run a script on the parent that updates the URL for the continuum azure attestation endpoint. - -On the parent: - -``` -scp update_continuum_url.sh ec2-user@[aws-parent-instance-ip]:~/ -``` - -``` -sudo vim /etc/systemd/system/update-continuum-url.service -``` - -``` -[Unit] -Description=Update Continuum URL Service -After=network-online.target -Wants=network-online.target - -[Service] -ExecStart=/home/ec2-user/update_continuum_url.sh -User=ec2-user -Group=ec2-user -Type=simple -Restart=on-failure -RestartSec=30s - -[Install] -WantedBy=multi-user.target -``` - -``` -sudo systemctl daemon-reload -sudo systemctl enable update-continuum-url.service -sudo systemctl start update-continuum-url.service -sudo systemctl status update-continuum-url.service -``` - ## KMS Key You need to create an AWS KMS key that the enclave can encrypt/decrypt things to. Name it according to your environment: diff --git a/entrypoint.sh b/entrypoint.sh index af1358e..6a692d6 100644 --- a/entrypoint.sh +++ b/entrypoint.sh @@ -359,14 +359,6 @@ else log "AMD KDS Interface connection failed" fi -# Test the connection to Azure Attestation -log "Testing connection to Azure Attestation:" -if timeout 5 bash -c ' /dev/null; then - log "Enclave is running successfully" - else - log "Enclave failed to start properly. Please investigate." - sleep 300 # Sleep for 5 minutes before trying again - continue - fi - else - log "Failed to start new enclave. Please investigate." - sleep 300 # Sleep for 5 minutes before trying again - continue - fi - - # Wait for 10 seconds - log "Waiting for 10 seconds before restarting socat proxy" - sleep 10 - - # Restart the socat proxy - sudo systemctl restart socat-proxy.service - log "Restarted socat-proxy.service" - - log "Enclave status after socat-proxy restart:" - nitro-cli describe-enclaves - - log "Continuum URL update and enclave restart completed successfully" - else - log "No update needed. Current subdomain matches the new subdomain." - fi - - log "Sleeping for 5 minutes before next check" - sleep 300 # Sleep for 5 minutes (300 seconds) -done