Skip to content

PortainerCC: RunYourCode

marcely0 edited this page Jul 14, 2023 · 1 revision

Enclave your Github Repository and run your code inside a confidential image!

You can see the newly added feature (beta 0.3.0) in action in this video:

RunYourCode Showcase

How to use:

  • Make sure you have a running coordinator in your environment.
  • Make sure you have a signing key set up under PortainerCC Signing Keys. Important Note: This feature is a Proof of Concept - for now your Key (.pem) will be available in the image under /signing.pem. Since we will use the mrenclave measurement to validate the quote and not trust the signer it will be safe to use if you just create a seperate key for your image
  • Hit the RunYourCode navigation link and set up your image to build and deploy.
    • You need to select your runtime language (for now node.js and Python3 are supported)
    • You need to select a signing key - please create a seperate one for RunYourCode
    • You need to provide a name which will be used as container name
    • You need to provide a Github URL which will be cloned and later be available under /app/
    • You need to provide your start arguement (e.g. for a node.js application: /app/server.js)
    • You can specifiy a list of ports and map them for the host and container
  • After you hit Build and Deploy the Github Repository will be cloned onto the Host system (PortainerCC Server instance) and a new Docker image will be created and pushed to Dockerhub afterwards. When the build and push is done, the image will be pulled on the targed instance (e.g. agent) and a container will start.
Clone this wiki locally