The idea is to generate a single as-builtin image running all the components (kbs, as, rvps). This is for minimizing the effort in the first release. In the next release we can think of having separate downstream images for all the components.

Also, it seems acceptable to start with an ubuntu-based image. UBI images will be built later on, as soon as the intel sgx-dcap libraries are integrated in fedora/rhel.

To build the all-in-one image, run:

podman build -t trustee:latest . -f ./kbs/docker/Dockerfile