feat: introduce file lock for share instance bootstrap (#405)

* feat: introduce file lock for share instance bootstrap

* feat(script): allow configurable TASKDB in publish-image.sh

provers/sgx/setup/Cargo.toml

@@ -57,11 +57,13 @@ cfg-if = { workspace = true }
 cap = { workspace = true }
 dirs = { workspace = true }
 
+file-lock = "2.1.11"
+
 
 [dev-dependencies]
 assert_cmd = { workspace = true }
 rstest = { workspace = true }
 ethers-core = { workspace = true }
 
 [features]
-sgx = []
+sgx = []

provers/sgx/setup/src/setup_bootstrap.rs

@@ -7,6 +7,7 @@ use std::{
 };
 
 use anyhow::{anyhow, Context, Result};
+use file_lock::{FileLock, FileOptions};
 use raiko_lib::consts::{SupportedChainSpecs, VerifierType};
 use serde_json::{Number, Value};
 use sgx_prover::{
@@ -21,6 +22,15 @@ pub(crate) async fn setup_bootstrap(
     config_dir: PathBuf,
     bootstrap_args: &BootstrapArgs,
 ) -> Result<()> {
+    // Lock the bootstrap process to prevent multiple instances from running concurrently.
+    // Block until the lock is acquired.
+    // Create the lock file if it does not exist.
+    // Drop the lock file when the lock goes out of scope by drop guard.
+    let _filelock = FileLock::lock(
+        config_dir.join("bootstrap.lock"),
+        true,
+        FileOptions::new().create(true).write(true),
+    )?;
     let chain_specs = SupportedChainSpecs::merge_from_file(bootstrap_args.chain_spec_path.clone())?;
     let l1_chain_spec = chain_specs
         .get_chain_spec(&bootstrap_args.l1_network)

script/publish-image.sh

@@ -13,12 +13,15 @@ if [[ -z "$tag" ]]; then
 	tag="latest"
 fi
 
+TASKDB=${TASKDB:-raiko-tasks/in-memory}
+
 echo "Build and push $1:$tag..."
 docker buildx build ./ \
 	--load \
 	--platform linux/amd64 \
 	-t raiko:$tag \
 	$build_flags \
+	--build-arg TASKDB=${TASKDB} \
 	--build-arg TARGETPLATFORM=linux/amd64 \
 	--progress=plain