SRE Team Update

High level summary

The SRE team continues work on Cardano environment improvements and general maintenance.

Some notable recent changes, updates or improvements include:

• Cardano-node 11.0.1 was released which supports the PV11 hard fork!

• Preview network was upgraded to node 11.0.1 in preparation for the PV11 van Rossem hard fork.

• A van Rossem PV11 cost model governance vote was cast on preprod.

• A Leios testnet was stood up in cardano-playground with block producers, relays, dbsync, faucet, and custom alloy-based monitoring.

• Cardano-parts and cardano-playground were updated with cardano-node 10.7.1, cardano-db-sync 13.7.0.4, mithril 2617.0, Linux kernel 6.18 with ZFS 2.4 for LSM compatibility, and EC2 metadata hardened to require IMDSv2.

• x86_64-darwin support was dropped from a number of repos ahead of the planned nixpkgs deprecation.

Repository Work -- Merged

Cardano-haskell-packages

cardano-haskell-packages PR#1363:

• Adds cardano-node-11.0.1 to CHaP

Cardano-monitoring

cardano-monitoring PR#7:

• Adds a sandbox monitoring server with explicit OAuth allow list
• Bumps org tags on resources
• Sets http_tokens to required on EC2 resources for IMDSv2 enforcement

Cardano-node

cardano-node PR#6541:

• Prepares cardano-node for PV11 as the default protocol version and the experimental hard fork gated to PV12; SRE contributed CI and iohkNix updates

cardano-node PR#6555:

• Bumps iohkNix for the blst flake input narHash and lastModified update
• Sets cardano-node cabal version to 11.0.1

Cardano-mainnet

cardano-mainnet PR#44:

• Resizes most root EBS volumes from 300 GB to 600 GB across all boot, bscale, iog, and iogp machine groups to accommodate chain growth
• Hardens EC2 metadata to require IMDSv2
• Updates kernel to 6.18 with ZFS 2.4 overlay for LSM compatibility
• See the PR description for additional details

Cardano-parts

cardano-parts PR#82:

• Bumps cardano-node to 10.7.1, cardano-cli to 10.16.0.0, cardano-db-sync to 13.7.0.4, and mithril to 2617.0
• Sets the default Linux kernel to 6.18 for cardano-node >= 10.7.0 LSM compatibility and updates ZFS to 2.4
• Fixes the ZFS ARC max null check in the AMI module
• Hardens EC2 metadata to require IMDSv2 (http_tokens = "required")
• Adds extraJournalReceivers option to the Grafana Alloy nixosModule for additional Loki journal forwarding targets
• Adds NODE_CONFIG_SKIP_COPY env var and CARDANO_NODE_SHELL_BIN support to the entrypoint
• Adds leios environment support to the Justfile with start-node, stop-all, query-tip recipes
• Adds nix-copy-to-machine and nix-store-pin recipes
• Adds cardano-node binary override support via flakeModules/pkgs.nix
• Fixes IPv6 AAAA DNS record creation to be conditional on VPC IPv6 availability
• See the PR description for additional details

Cardano-playground

cardano-playground PR#57:

• Adds Leios testnet environment with block producers, relays, dbsync, faucet, and custom alloy-based monitoring filtering for Leios-specific trace namespaces
• Adds nushell scripts for pool delegation management, UTxO defragmentation, and bulk fund transfers
• Adds low-threshold guardrails plutus script for playground governance testing
• Converts mainnet1-rel-a-2 from LMDB to LSM storage backend
• Consolidates dijkstra relay fleet by removing redundant relay nodes
• Hardens EC2 metadata to require IMDSv2
• Updates kernel to 6.18 with ZFS 2.4 overlay for LSM compatibility
• Updates cardano-book for 10.7.1 release and pre-release configurations
• See the PR description for additional details

Cardano-sandbox

cardano-sandbox:

• Creates a new environment for testing major stack re-factors, migrations and other complex test difficult or risky to execute on other live environments.

Iohk-nix

iohk-nix PR#612:

• Updates useLedgerAfterSlot values and peer-snapshot.json files for node 11.0.0

iohk-nix PR#613:

• Sets ExperimentalHardFork to false for node 11.0.0 on networks not yet forked to PV11, ensuring compatibility with older node versions

iohk-nix PR#614:

• Fixes blst flake input with correct lastModified and narHash and sets libblst to explicit version 0.3.15
• Adds GHA validate flake lock CI for push and PR to catch flake input regressions

Repository Work In Progress -- PRs and Branches

• Cardano-parts: https://github.com/input-output-hk/cardano-parts/pull/83