Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: engine-runner verifies gpg signature of old dylib when downloaded #5339

Merged
merged 5 commits into from
Oct 24, 2024

Conversation

kylezs
Copy link
Contributor

@kylezs kylezs commented Oct 18, 2024

Pull Request

Closes: PRO-1622

Checklist

Please conduct a thorough self-review before opening the PR.

  • I am confident that the code works. - I added the is_mainnet flag on ci-development to see it works and it did :). Also manually tested broken signatures and missing files to see that it fails correctly as well.
  • I have written sufficient tests.
  • I have written and tested required migrations.
  • I have updated documentation where appropriate.

Summary

When the is_mainnet flag is true on the build job, the engine-runner will now download from the pgks.chainflip.io - which contain only the binaries built for mainnet. It will also verify the signature of these dylibs to ensure that the chainflip releaser has released them.

@kylezs kylezs force-pushed the feat/runner-verify-dylibs branch 2 times, most recently from 39e5f66 to 76b10ef Compare October 22, 2024 11:17
@kylezs kylezs changed the title WIP: Runner to download and verify signature of dylibs it downloads feat: engine-runner verifies gpg signature of old dylib when downloaded Oct 22, 2024
@kylezs kylezs marked this pull request as ready for review October 22, 2024 11:19
.github/workflows/_20_build.yml Outdated Show resolved Hide resolved
Copy link

codecov bot commented Oct 22, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 71%. Comparing base (dee3275) to head (fd7701e).
Report is 15 commits behind head on main.

Additional details and impacted files
@@          Coverage Diff           @@
##            main   #5339    +/-   ##
======================================
- Coverage     71%     71%    -0%     
======================================
  Files        491     494     +3     
  Lines      85327   85672   +345     
  Branches   85327   85672   +345     
======================================
+ Hits       60776   60976   +200     
- Misses     21839   21934    +95     
- Partials    2712    2762    +50     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@kylezs kylezs added this pull request to the merge queue Oct 24, 2024
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Oct 24, 2024
@kylezs kylezs added this pull request to the merge queue Oct 24, 2024
@kylezs
Copy link
Contributor Author

kylezs commented Oct 24, 2024

Rerunning, was just manually uploaded artifacts were missing the old dylib (this is automated after 1.7)

@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Oct 24, 2024
@kylezs kylezs enabled auto-merge October 24, 2024 11:18
@kylezs kylezs added this pull request to the merge queue Oct 24, 2024
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Oct 24, 2024
@kylezs kylezs added this pull request to the merge queue Oct 24, 2024
Merged via the queue into main with commit 7c0787a Oct 24, 2024
48 of 49 checks passed
@kylezs kylezs deleted the feat/runner-verify-dylibs branch October 24, 2024 15:04
syan095 added a commit that referenced this pull request Oct 29, 2024
…waps-close-accounts

* origin/main: (44 commits)
  fix: expire all previous epochs (#5279)
  feat: add/update contract swaps parameters (#5343)
  chore: add address to solana logging (#5353)
  fix: ignore dust underflows in order fills rpc (#5352)
  chore: consistent naming prewitnessed (#5351)
  feat: engine-runner verifies gpg signature of old dylib when downloaded (#5339)
  feat: tainted transaction reporting (#5310)
  bug: change_utxo not always present (#5340)
  feat: structured error return types for rpcs (#5346)
  chore: unify dependencies to root cargo.toml (#5333)
  feat: Submit a slot number alongside nonce (#5297)
  chore: use node version from `.nvmrc` 📌 (#5336)
  chore: add engine account_info logging (#5347)
  chore: replace manual scale encoding for ts-scale (#5335)
  chore: more consistent params in Broker API (#5342)
  feat: broker can encode btc smart contract call (#5329)
  chore: localnet recreate script can use defaults (#5338)
  feat: witnessing btc smart contract swaps (#5331)
  feat: Solana CCM fallback (#5316)
  fix: scale types for pending ceremonies (#5286)
  ...

# Conflicts:
#	Cargo.lock
#	state-chain/chains/src/sol/api.rs
#	state-chain/pallets/cf-broadcast/src/migrations.rs
#	state-chain/pallets/cf-environment/Cargo.toml
dandanlen pushed a commit that referenced this pull request Oct 30, 2024
…ed (#5339)

* feat: runner verifies downloaded dylibs

* chore: consistent CI param naming

* chore: clippy

* fix: LP account already setup in 1.6.8

* chore: eslint
dandanlen pushed a commit that referenced this pull request Oct 30, 2024
…ed (#5339)

* feat: runner verifies downloaded dylibs

* chore: consistent CI param naming

* chore: clippy

* fix: LP account already setup in 1.6.8

* chore: eslint
dandanlen pushed a commit that referenced this pull request Oct 31, 2024
…ed (#5339)

* feat: runner verifies downloaded dylibs

* chore: consistent CI param naming

* chore: clippy

* fix: LP account already setup in 1.6.8

* chore: eslint
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants