Switch bob-common from cvm-reverse-proxy to attested-tls-proxy

bob-common/mkosi.build

@@ -40,9 +40,11 @@ make_git_package \
     'go build -trimpath -ldflags "-s -w -buildid= -X github.com/flashbots/go-template/common.Version=v1.0.0" -o ./build/ssh-pubkey-server cmd/httpserver/main.go' \
     "build/ssh-pubkey-server:/usr/bin/ssh-pubkey-server"
 
-make_git_package \
-    "cvm-reverse-proxy" \
-    "v0.1.8" \
-    "https://github.com/flashbots/cvm-reverse-proxy" \
-    "make build-proxy-server" \
-    "build/proxy-server:/usr/bin/cvm-reverse-proxy"
+# Build attested-tls-proxy
+build_rust_package \
+    "attested-tls-proxy" \
+    "bob-test-00" \
+    "https://github.com/flashbots/attested-tls-proxy.git" \
+    "" \
+    "" \
+    "-l z -l zstd"

bob-common/mkosi.conf

@@ -27,6 +27,8 @@ Packages=podman
          openssh-sftp-server
          udev
          libsnappy1v5
+         libtss2-esys-3.0.2-0t64
+         libtss2-tctildr0t64
 
 BuildPackages=build-essential
               git
@@ -45,3 +47,5 @@ BuildPackages=build-essential
               libjson-c-dev
               gettext
               autopoint
+              libtss2-dev
+	      zlib1g-dev

bob-common/mkosi.extra/etc/systemd/system/attested-tls-proxy.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Attested TLS proxy
+After=ssh-pubkey-server.service
+Requires=ssh-pubkey-server.service
+
+[Service]
+Type=simple
+ExecStart=attested-tls-proxy server --listen-addr 0.0.0.0:8745 \
+            --server-attestation-type auto \
+            127.0.0.1:5001
+
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=minimal.target

bob-common/mkosi.postinst

@@ -29,7 +29,7 @@ for service in \
     dropbear.service \
     searcher-container.service \
     ssh-pubkey-server.service \
-    cvm-reverse-proxy.service
+    attested-tls-proxy.service
 do
     mkosi-chroot systemctl enable "$service"
     ln -sf "/etc/systemd/system/$service" "$BUILDROOT/etc/systemd/system/minimal.target.wants/"