.gitea/workflows/docker-image.yml

@@ -1,29 +0,0 @@
-name: Publish tmkms docker image on release
-
-on:
-  release:
-    types: [published]
-
-jobs:
-  build:
-    name: Run docker build and publish
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - name: Run docker build
-        run: docker build -t cerc/tmkms -f stack-orchestrator/container-build/cerc-tmkms/Dockerfile .
-      - name: Get the version
-        id: vars
-        run: |
-          echo ::set-output name=sha::$(echo ${GITHUB_SHA:0:7})
-          echo ::set-output name=tag::$(echo ${GITHUB_REF#refs/tags/})
-      - name: Tag docker image
-        run: docker tag cerc/tmkms git.vdb.to/laconicnetwork/cerc/tmkms:${{steps.vars.outputs.sha}}
-      - name: Tag docker image
-        run: docker tag git.vdb.to/laconicnetwork/cerc/tmkms:${{steps.vars.outputs.sha}} git.vdb.to/laconicnetwork/cerc/tmkms:${{steps.vars.outputs.tag}}
-      - name: Docker Login
-        run: echo ${{ secrets.CICD_PUBLISH_TOKEN }} | docker login https://git.vdb.to -u laconiccicd --password-stdin
-      - name: Docker Push
-        run: docker push git.vdb.to/laconicnetwork/cerc/tmkms:${{steps.vars.outputs.sha}}
-      - name: Docker Push TAGGED
-        run: docker push git.vdb.to/laconicnetwork/cerc/tmkms:${{steps.vars.outputs.tag}}

stack-orchestrator/compose/docker-compose-tmkms.yml

@@ -9,7 +9,7 @@ services:
       NODE_PORT: ${NODE_PORT:-26659}
       KEY_PREFIX: ${KEY_PREFIX}
     volumes:
-      - tmkms-data:/root/tmkms
+      - tmkms-data:/home/tmkmsuser/tmkms
       - ../config/tmkms/run.sh:/opt/run.sh
     extra_hosts:
     - "host.docker.internal:host-gateway"

stack-orchestrator/config/tmkms/run.sh

@@ -6,7 +6,7 @@ fi
 
 set -e
 
-TMKMS_HOME=/root/tmkms
+TMKMS_HOME=/home/tmkmsuser/tmkms
 INPUT_PRIV_KEY_FILE=$TMKMS_HOME/tmp/priv_validator_key.json
 TMKMS_SECRETS_DIR=$TMKMS_HOME/secrets
 TMKMS_STATE_DIR=$TMKMS_HOME/state
@@ -42,7 +42,6 @@ cat <<EOF > $TMKMS_HOME/tmkms.toml
   id = "$CHAIN_ID"
   key_format = { type = "cosmos-json", account_key_prefix = "${KEY_PREFIX}pub", consensus_key_prefix = "${KEY_PREFIX}valconspub" }
   state_file = "$TMKMS_STATE_DIR/priv_validator_state.json"
-  sign_extensions = true
 
   [[validator]]
   chain_id = "$CHAIN_ID"

stack-orchestrator/container-build/cerc-tmkms/Dockerfile

@@ -47,8 +47,10 @@ RUN apt-get update && \
 # Copy compiled binary
 COPY --from=builder /home/builder/tmkms/target/release/tmkms /usr/local/bin/tmkms
 
-# Set working directory
-WORKDIR /
+# Create runtime user
+RUN useradd -m tmkmsuser
+USER tmkmsuser
+WORKDIR /home/tmkmsuser
 
 # Default command, override with `docker run ... bash` etc.
 CMD ["tmkms"]