dsigner service

.github/workflows/push-dsigner-docker.yml

@@ -0,0 +1,78 @@
+name: push-dsigner-docker
+on:
+  push:
+    branches:
+      # all branches, docker image is only pushed on main
+      - "*"
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+*'
+  pull_request:
+
+env:
+  SERVICE_ACCOUNT: github@randamu-prod.iam.gserviceaccount.com
+  DOCKER_REGISTRY: europe-west1-docker.pkg.dev/randamu-prod/candyland
+  IMAGE_MAINTAINER: "Randamu"
+  IMAGE_VENDOR: "Randamu"
+
+jobs:
+  build-and-push:
+    runs-on: "ubuntu-latest"
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          submodules: 'recursive'
+          token: ${{ secrets.PAT_TOKEN }}
+
+      - name: Login to Artifact Registry
+        uses: docker/login-action@v3
+        with:
+          registry: europe-west1-docker.pkg.dev
+          username: _json_key
+          password: ${{ secrets.GCP_SERVICE_ACCOUNT_TOKEN }}
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.DOCKER_REGISTRY }}/dsigner
+          labels: |
+            maintainer=${{ env.IMAGE_MAINTAINER }}
+            org.opencontainers.image.title=dsigner
+            org.opencontainers.image.description="a distributed signing service"
+            org.opencontainers.image.vendor=${{ env.IMAGE_VENDOR }}
+          flavor: |
+            latest=false
+            prefix=
+            suffix=
+          tags: |
+            type=sha,prefix=
+            type=ref,event=branch,suffix=-latest,enable=${{ startsWith(github.ref, 'refs/heads/') }}
+            type=semver,pattern={{version}},event=tag,enable=${{ startsWith(github.ref, 'refs/tags/') }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          # this might not work at all, but might work and
+          # allow us to bypass dockerhub ratelimit
+          buildkitd-config-inline: |
+            [registry."docker.io"]
+              mirrors = ["mirror.gcr.io"]
+          ## this does work to avoid the dockerhub ratelimit
+          driver-opts: |
+            image=mirror.gcr.io/moby/buildkit:buildx-stable-1
+            network=host
+
+      - id: docker-push-tagged
+        name: Tag Docker image and push to Google Artifact Registry
+        uses: docker/build-push-action@v6
+        with:
+          push: ${{ github.ref == 'refs/heads/main' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          context: .
+          file: ./dsigner/Dockerfile
+          cache-from: |
+            type=registry,ref=${{ env.DOCKER_REGISTRY }}/dsigner-cache:${{ steps.meta.outputs.version }}
+            type=registry,ref=${{ env.DOCKER_REGISTRY }}/dsigner-cache:main-latest
+          cache-to: type=registry,ref=${{ env.DOCKER_REGISTRY }}/dsigner-cache:${{ steps.meta.outputs.version }},mode=max

.github/workflows/rust-build-and-tests.yml

@@ -61,3 +61,10 @@ jobs:
         with:
           working-directory: ./randomness-agent
           target-folder: '../target'
+
+      # 6. Build and test dsigner
+      - name: dsigner
+        uses: ./.github/actions/rust-test-action
+        with:
+          working-directory: ./dsigner
+          target-folder: '../target'

blocklock-agent/examples/blocklock/main.rs

@@ -110,12 +110,12 @@ async fn main() -> anyhow::Result<()> {
 
         err = run_agent(&mut agent, ticker, decryption_sender_contract_ro) => {
             eprintln!("agent stopped unexpectedly...");
-            err // return Result
+            err
         },
 
         err = start_api(config.healthcheck_listen_addr, config.healthcheck_port) => {
             eprintln!("healthcheck stopped unexpectedly...");
-            err // return Result
+            err
         }
     };
 

dcipher-agents/Cargo.toml

@@ -3,6 +3,9 @@ name = "dcipher-agents"
 version = "0.1.0"
 edition = "2024"
 
+[features]
+rayon = ["dep:rayon"]
+
 [dependencies]
 pairing_utils = { path = "../marshmallow-crypto/pairing_utils" }
 alloy = { version = "1.0", features = ["default", "provider-ws"] }
@@ -23,6 +26,7 @@ libp2p = { version = "0.55", features = ["tcp", "dns", "noise", "tokio", "ping",
 lru = "0.14"
 serde_cbor = "0.10"
 prometheus = "0.14.0"
+rayon = { version = "1.10", optional = true }
 
 [dev-dependencies]
 hex = "0.4"

dcipher-agents/src/decryption_sender.rs

@@ -34,7 +34,7 @@ where
     CS: PairingIbeCipherSuite,
     S: AsynchronousSigner<Bytes>,
     TF: TransactionFulfiller<SignedRequest = SignedDecryptionRequest<'static>>,
-    DecryptionSenderAsyncSigner<CS, S, Bytes>:
+    DecryptionSenderAsyncSigner<CS, S>:
         AsynchronousSigner<DecryptionRequest, Signature = SignedDecryptionRequest<'static>>,
 {
     /// Instantiate a [`DecryptionSenderFulfiller<RS, TF>`](DecryptionSenderFulfiller).
@@ -44,7 +44,7 @@ where
         transaction_fulfiller: TF,
         max_fulfillment_per_tick: usize,
         retry_strategy: RetryStrategy,
-    ) -> DecryptionSenderFulfiller<DecryptionSenderAsyncSigner<CS, S, Bytes>, TF> {
+    ) -> DecryptionSenderFulfiller<DecryptionSenderAsyncSigner<CS, S>, TF> {
         let signer = DecryptionSenderAsyncSigner::new(cs, signer);
         TickerFulfiller::new(
             signer,