High level summary
The SRE team continues work on cardano environment improvements and general maintenance.
Some notable recent changes, updates or improvements include:
Our new baseline version of Cardano Node is
9.1.0and all environments have been updated. The main change from node9.0.0is that node9.1.0requires a Conway genesis file at startup, where the genesis file was optional in node9.0.0.Sanchonet had another respin for node
9.0.0with new Conway genesis parameters and has since been upgraded to node9.1.0.The
cardano-monitoringcluster received a lot of documentation and improvements and now also serves as the home fordevx-cimetrics.Hydra CI performance was improved once again by changes to our custom Nix evaluator. We also found further ways to improve the resource usage of waiting for IFDs.
Cardano Airgap
A new project that provides a completely airgapped environment for constitution members to sign proposals and transactions. It consists of an image for USB sticks and ensures all private data is stored securely with strong encryption.
We'll keep it updated as required with the latest Cardano versions.
Cardano Parts
- cardano-node and cardano-node-ng are now at version
9.0.0 - cardano-db-sync and cardano-db-sync-ng are now at version
13.3.0.0 - Several NixOS modules and recipes have been fixed and improved.
- Bump dependency of
capkgsfor node, db-sync, mithril, and cardano-wallet updates. - Update profile-cardano-db-sync-snapshots for schema 13.3 docs and with script edge case fixes
- Update profile-cardano-node-group to use a SIGINT instead of SIGTERM for systemd stop
- Update profile-common to deploy
atdservice - Update template recipe
dbsync-prepto match faucet script defaults - Update template recipe
update-ipsto fix a nushell breaking change - Update
.envrcwith a newer direnv version and allows for symlinks on.envrc.localand~/.age/credentials
Cardano Playground
- All networks are now running cardano-node
9.1.0in preparation of the Chang hard-fork. - Also upgraded db-sync to
13.3.0.0 - Added the
cardano-ipfsmodule and a derivation forpinata-go-clithat is used to store and distribute documents that can be referenced on chain. - Some updates to the Cardano Operations Book about:
- UseLedgerPeerAfter updates
- Sanchonet respins configs
- Dbsync
EnableFutureGenesisflag
- Add a block header block producer readiness test
- Respin of sanchonet for node
9.0.0, then upgraded to9.1.0 - Tune webserver size and Varnish RAM to improve caching efficiency
- Updates
govtoolmodule for multi-nginx module compatibility - Updates
update-ipsrecipe for nushell breaking change in nixpkgs 24.05 - Updates
direnvversion, allow symlinks config files used bydirenv - Update
.envrcwith a newer direnv version, allow symlinks on direnv used config files
Cardano Mainnet
- Upgraded Cardano Node to
9.0.0 - Upgraded Cardano DB Sync to
13.3.0.0 - Bump
capkgsdependency - Investigate bootstrap missingBlock error and deploy fixes for it.
- Update scripts to be compatible with latest
nushellversion
Cardano Monitoring
- Write comprehensive documentation for all the Nix code, as well as detailed instructions for usage and deployment.
- Overhaul most Just tasks to bring them more in sync with the other repositories
- Upgrade all machines to NixOS 24.05
- Upgrade
auth-keys-hubto prevent lockout in caseSOPSis unable to decrypt - Fix
SOPSdecryption failure on boot because of missing network. - Limit bootloader entries to 5 since the
/bootpartition is tiny - Additionally add fallback SSH keys for emergency use
IOHK Nix
- Update ledger peers to be after a more recent epoch boundary to improve bootstrapping and fix a private chain p2p delayed sync config issue.
- Update sanchonet conway-genesis for respin
- DRep voting thresholds both need to be 65%
- Set
govActionLifetimeabove the guardrail because of the short epochs. - Set
minCommitteeSizeto 5 (from recommended 7) because only 5 ICC members were able to provide keys for the respin.
Cardano Ops
- tweak the stop timeout and change Cardano Node killsignal to
SIGINTfor clean restarts.
CAPkgs
Added following packages:
- cardano-node
9.0.0and9.1.0 - For cardano-db-sync releases of
sancho-5.1.0and13.3.0.0 - For mithril
2428.0andmithril-unstable - For cardano-wallet
v2024-07-19
