anjuna-nitro-cli terminate-enclave

Terminates an enclave.

SYNOPSIS

anjuna-nitro-cli terminate-enclave
anjuna-nitro-cli terminate-enclave --all
anjuna-nitro-cli terminate-enclave --enclave-id <enclave-id>

DESCRIPTION

Terminate an enclave that is running.

When issuing the terminate-enclave option, the Anjuna Runtime will first send a SIGTERM signal to the main process inside the enclave, allowing it to do any needed termination activities to allow for a graceful termination before exiting. The main process has a grace period of 30 seconds for the termination activities. After the main process exits or the grace period expires, the Anjuna Runtime will perform any remaining termination activities and then terminate the enclave. If the grace period expires before the enclave finishes its termination activities, a message displays indicating that a forceful termination occurred due to the expiration of the grace period.

The same flow and behavior will take place when destroying an Anjuna Enclave POD in K8s. Anjuna plans on providing additional options for the enclave termination flow in future releases.

At this time, AWS allows only one enclave per EC2 Nitro host. In the future when more than one enclave per EC2 Nitro host is allowed, you can provide parameters to uniquely identify an enclave when more than one enclave exists.

OPTIONS

USAGE:
     When only one enclave is running, terminate that enclave:
        anjuna-nitro-cli terminate-enclave

 or: Terminates all enclaves that are running:
        anjuna-nitro-cli terminate-enclave --all

 or: Terminates a specific enclave based on its ID:
        anjuna-nitro-cli terminate-enclave --enclave-id <enclave-id>

 or:    anjuna-nitro-cli terminate-enclave [FLAGS]

FLAGS:
    -h, --help       Prints help information
    -V, --version    Prints version information

EXIT STATUS

  • 0 on success

  • > 0 on error

EXAMPLES

anjuna-nitro-cli terminate-enclave

or

anjuna-nitro-cli terminate-enclave --all

or

anjuna-nitro-cli terminate-enclave --enclave-id i-0f2c4b721470e92c4-enc1776bc0278e90b9

To retrieve the enclave-id of the currently running enclave, you can use the following command (assuming you have jq installed):

anjuna-nitro-cli describe-enclaves | jq -r .[0].EnclaveID

Using this command, you can view the console output of the currently running enclave with the following command:

nitro-cli console --enclave-id $(anjuna-nitro-cli describe-enclaves | jq -r .[0].EnclaveID)