Deploy mpc development network to the ground

[sbellem]

Checklist

• Use new MP-SPDZ SSL/TLS keys
• Use new poa keystore (-- set secrets in docker compose file)
• Persist data -- see docs at https://docs.docker.com/cloud/ecs-integration/#volumes

Not essential, but preferable whenever possible

• Create a load balancer, and configure the DNS CNAME record to point that load balancer. See docs at https://docs.docker.com/cloud/ecs-integration/#using-existing-aws-network-resources. (Currently, each deployment creates a new load balancer with a different DNS name and consequently the CNAME record must be updated after each new deployment.
• For python code, use plyvel instead of leveldb

---

UPDATE: We are using the docker compose cli ECS integration .

Since we already have docker containers + docker-compose to manage these containers, see what provider may be most convenient & simple.

Follow https://docs.docker.com/cloud/ecs-integration/#install-the-docker-compose-cli-on-linux

Resources

First stop for tooling: Amazon ECS developer tools overview

There seems to be 3 main approaches:

• compose-cli
• ecs-cli
• copilot-cli

To re-use an existing compose file, the compose-cli may be best suited. See: https://aws.amazon.com/blogs/containers/deploy-applications-on-amazon-ecs-using-docker-compose/.

docker compose-cli

• https://containersfromthecouch.com/project/docker_ecs_integration/
• https://aws.amazon.com/blogs/containers/aws-docker-collaborate-simplify-developer-experience/
• https://github.com/docker/compose-cli
• https://www.docker.com/blog/from-docker-straight-to-aws/
• https://www.docker.com/blog/deploying-wordpress-to-the-cloud/
• https://github.com/docker/awesome-compose

Secrets + Docker

• https://docs.docker.com/engine/swarm/secrets/#build-support-for-docker-secrets-into-your-images
• https://docs.docker.com/cloud/ecs-integration/#secrets

Volumes

• https://docs.docker.com/cloud/ecs-integration/#volumes

Other tools

copilot

• https://aws.github.io/copilot-cli/
• https://github.com/aws/copilot-cli

ecs-cli

• https://github.com/aws-samples?q=ecs&type=&language=
• https://github.com/aws-samples/amazon-ecs-cli-sample-app
• https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ECS_CLI.html

Challenges

Some challenges relating to deployments.

• Key distribution
• MPC programs deployments

[sbellem]

See if secrets can be mounted from local file: https://docs.docker.com/cloud/ecs-compose-examples/#secrets

[sbellem]

Happening when only dev geth node & mpc nodes are deployed on aws, without client requests/actions. (No contract deployed, not pool initialized, no deposits, no trades.)

d809820ae0fc4a77a079c10652997c72  | Inputmaks shares used: <nil>                                                                                                              
d809820ae0fc4a77a079c10652997c72  | panic: runtime error: invalid memory address or nil pointer dereference                            
d809820ae0fc4a77a079c10652997c72  | [signal SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0x978884]                             
d809820ae0fc4a77a079c10652997c72  | goroutine 7 [running]:                                                                                                                               
d809820ae0fc4a77a079c10652997c72  | math/big.(*Int).Int64(...)                                                                                                                   
d809820ae0fc4a77a079c10652997c72  |     /usr/local/go/src/math/big/int.go:374                                                          
d809820ae0fc4a77a079c10652997c72  | github.com/initc3/HoneyBadgerSwap/src/go/utils.GetInputmaskCnt(0xc0000ac798, 0x0)                  
d809820ae0fc4a77a079c10652997c72  |     /go/src/github.com/initc3/HoneyBadgerSwap/src/go/utils/utils_hbswap.go:327 +0x144                                                                 
d809820ae0fc4a77a079c10652997c72  | main.genInputmask(0x7ffed7e73b65, 0x8)                                                                                                    
d809820ae0fc4a77a079c10652997c72  |     /go/src/github.com/initc3/HoneyBadgerSwap/src/go/server/server.go:58 +0x45                     
d809820ae0fc4a77a079c10652997c72  | created by main.main                                                                               
d809820ae0fc4a77a079c10652997c72  |     /go/src/github.com/initc3/HoneyBadgerSwap/src/go/server/server.go:306 +0x29c                                                                      
d809820ae0fc4a77a079c10652997c72  | exit status 2

[sbellem]

Certificate

https://awscli.amazonaws.com/v2/documentation/api/latest/reference/acm/request-certificate.html

[amiller]