/no-fly-list

Demo application for Enclaver + KMS

Primary LanguagePythonApache License 2.0Apache-2.0

No Fly List Enclave Example App

Read the full guide to using this app at https://edgebit.io/enclaver/docs/0.x/guide-app/

The info below is just for building and testing the demo app.

Container Images

Containers are built on merge with GitHub Actions and stored on Google:

us-docker.pkg.dev/edgebit-containers/containers/no-fly-list:latest

Running Locally

docker build -t demo-enclave -f Dockerfile . && docker run --name enclave -d -p 8001:8001 -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY -e AWS_DEFAULT_REGION=us-east-1 -e AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN --rm demo-enclave

Updating the No Fly List

This is only for EdgeBit staff, who have access to update the encrypted No-Fly-List contained in the demo container.

  1. Configure your AWS credentials via environment variables:
$ export AWS_ACCESS_KEY_ID=
$ export AWS_SECRET_ACCESS_KEY=
  1. Populate your new list:
fullname,anothername
  1. Start the container but overrride the FLASK_APP:
docker build -t demo-enclave -f Dockerfile . && docker run --name enclave -d -p 8001:8001 -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY -e AWS_DEFAULT_REGION=us-east-1 -e AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN -e FLASK_APP=/opt/app/encrypt.py --rm demo-enclave
  1. Curl it to encrypt and uplaod it to S3:
curl -d "list=fullname,anothername" -X POST http://localhost:8001/enclave/encrypt