Preparing the Image Package

Before inference, prepare the model files required for inference. The directory structure is as follows:

• Crypto_fs is the CFS component package.
• dec is the newly created decryption directory.
• The certificate files are those generated in Generating Certificates.
• encrypt is the model file encrypted in Encrypting a Local Model File.

Change the directory permission to 700 and the owner to the owner of the user who starts the container.

├── crypto_fs
│   ├── bin
│   │   └── crypto_fs
│   └── lib #crypto_fs dependency library
├── dec
├── rsa.CFS.pem    # Certificate used for two-way authenticated communication between CFS and KMSAgentTLS.
├── server.key # Encrypted private key used for two-way authenticated communication between CFS and KMSAgentTLS.
├── CA.pem      # Certificate used for two-way authenticated communication between CFS and KMSAgentTLS.
├── cert.crl     # Optional. It is the CRL used for two-way authenticated communication between CFS and KMSAgentTLS.
├── encrypt # Encrypted inference code, which is copied from the encryption directory.