Enclave boot speed needs to be much faster #216
Labels
No labels
Compat/Breaking
Component/Enclave-Builder
Component/Infrastructure
Deploy/BYOC
Deploy/Full-managed
Deploy/Self-hosted
Interface/API
Interface/CLI
Interface/Git
Interface/Web
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Priority/Critical
Priority/High
Priority/Low
Priority/Medium
Reviewed/Confirmed
Reviewed/Duplicate
Reviewed/Invalid
Reviewed/Won't Fix
Status/Abandoned
Status/Blocked
Status/Need More Info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
public/platform#216
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Currently, deploying the Hello World enclave takes nearly a minute to come online. Our timeout is two minutes. If an application has a heavy startup, it will be terminated eagerly. We need to speed up enclave startup time as much as possible. Maybe we do biphasic: wait for Caddy to come up, then wait for attestation endpoint to come up.
After completing a build, I am getting a timeout.
@modalala wrote in https://codeberg.org/caution/platform/issues/216#issuecomment-14220731:
This is likely due to our hard coded timeout limit. What app were you trying to deploy?
https://codeberg.org/caution/platform/issues/135
@ryansquared is currently working on addressing this.
Yes, I think that #135 is probably the correct issue for my comment rather than this one.
I was trying to deploy
frost-tools.#135 is more about the builder, not the enclave. Builders have a 30 minute timeout, your EIF must be built in 30 minutes (and must send updates every 2 minutes, on my current PR). However, deploying the enclave can take a long time, and we need some way to optimize it.
I think one thing we can do is add a health check path (location TBD) where we just return 200 OK and null response. Then, we can check whether that's up in 120 seconds, and once that timer's reset, we can enter a new check for the enclave attestation.
https://codeberg.org/caution/platform/issues/250 < this is the sauce