Merge pull request #2 from omisego/prerelease_0.0.2

changes for prerelease_0.0.2

CHANGELOG.md

@@ -1,3 +1,46 @@
+## 0.0.2 (October 26, 2019)
+
+NEW FEATURES:
+
+* Demonstrate Smart Contract integration model
+  - [x] Compile to ABI
+  - [x] Generate bindings
+* Added support for ERC20
+  - [x] Deployed ERC20 implementation - FixedSupplyToken
+  - [x] Implemented all methods in ERC20Interface
+
+IMPROVEMENTS:
+
+* Verified CIS Docker Hardening 1.20 for images where applicable to Dockerfile
+  - [x] 4.1 Ensure that a user for the container has been created
+  - [x] 4.2 Ensure that containers use only trusted base images 
+        (HashiCorp Vault/Alpine)
+  - [x] 4.3 Ensure that unnecessary packages are not installed in the container
+  - [x] 4.4 Ensure images are scanned and rebuilt to include security patches 
+        (apk update && apk upgrade added to Dockerfile)
+  - [x] 4.5 - N/A  - Ensure Content trust for Docker is Enabled
+  - [x] 4.6 Ensure that HEALTHCHECK instructions have been added to
+        container images
+  - [x] 4.7 Ensure update instructions are not use alone in the Dockerfile 
+        - used epoch date for this in dockerfile/makefile
+  - [x] 4.8 Ensure setuid and setgid permissions are removed 
+        (vault user prevents this)
+  - [x] 4.9 Ensure that COPY is used instead of ADD in Dockerfiles 
+  - [x] 4.10 Ensure secrets are not stored in Dockerfiles
+  - [x] 4.11 Ensure only verified packages are are installed 
+        (using Alpine package manager)
+* Smoke Test for transaction signing
+* Smoke Test for ERC20
+  - [x] Deploy Contract
+  - [x] Read Token Supply
+  - [x] Read Token Balance
+  - [x] Transfer Token
+  - [x] Approve Transfer
+
+BUG FIXES:
+
+* N/A
+
 ## 0.0.1 (October 20, 2019)
 
 NEW FEATURES:

Dockerfile

@@ -2,7 +2,6 @@
 # ******** Create a dev environment to build alpine vault plugins and build them *********
 # ****************************************************************************************
 FROM vault:latest as build
-
 # Setup the alpine build environment for golang
 RUN apk add --update alpine-sdk
 RUN apk update && apk add go git openssh gcc musl-dev linux-headers
@@ -24,6 +23,9 @@ RUN mkdir -p /app/bin \
 # ********** This is our actual released container **********
 # ***********************************************************
 FROM vault:latest
+# we pass epoch time so it always upgrades
+ARG always_upgrade
+RUN echo ${always_upgrade} > /dev/null && apk update && apk upgrade
 USER vault
 WORKDIR /app
 RUN mkdir -p /home/vault/ca \
@@ -33,3 +35,4 @@ RUN mkdir -p /home/vault/ca \
 # Install the plugin.
 COPY --from=build /app/bin/immutability-eth-plugin /home/vault/plugins/immutability-eth-plugin
 COPY --from=build /app/bin/SHA256SUMS /home/vault/plugins/SHA256SUMS
+HEALTHCHECK CMD nc -zv 127.0.0.1 8900 || exit 1