Mithril v2412.0

Highlights

• ⚠️ Deprecated 'snapshot' command in the Mithril client CLI:
  • Renamed to cardano-db snapshot.
  • Will be removed in a near future.
• Support for Prometheus endpoint for metrics in signer (setup guide).
• Full support for chain observer with Pallas in signer and aggregator.
• Support for Cardano node 8.9.0 in the signer and the aggregator.
• Bug fixes and performance improvements.

What's Changed

• Adapt multi platform test for Cardano transactions by @dlachaumepalo in #1518
• Fix end to end test flakiness in CI by @jpraynaud in #1486
• Rotate documentation by @dlachaumepalo in #1527
• Unified temp dir builder by @Alenar in #1529
• Add dev blog post for mithril-client-cli output update by @dlachaumepalo in #1532
• Add runbook for 'Mithril client multi-platform test' by @dlachaumepalo in #1534
• Fix runbook broken link by @dlachaumepalo in #1539
• Document Mithril signer footprint in SPO Setup guide by @jpraynaud in #1538
• Reorganize crates by @Alenar in #1540
• Stabilize namings cardano transactions by @dlachaumepalo in #1542
• Improve aggregator HTTP server tests by @dlachaumepalo in #1543
• Activate metrics endpoint on signer by @jpraynaud in #1544
• Upgrade dependencies by @dlachaumepalo in #1547
• Fix signature related metrics name in signer by @jpraynaud in #1548
• Add new npm package step dedicated to release process (latest tag) by @dlachaumepalo in #1545
• Replacement of serde_cbor dependency by ciborium dependency by @dlachaumepalo in #1549
• Send aggregator logs in the right output (stdout / stderr) by @dlachaumepalo in #1550
• Support download binaries for macOS in E2E test by @dlachaumepalo in #1551
• Cardano Transactions Snapshots/Certification in explorer by @Alenar in #1553
• Fix parsing Cardano Conway transactions from immutable files by @jpraynaud in #1563
• feat: implement and calculate the current key period using pallas by @falcucci in #1541
• Enhance Cardano transaction part in mithril-client-wasm/www by @dlachaumepalo in #1555
• Use pallas hardano transactions parser by @sfauvel in #1564
• Reduce Prometheus scrape interval in infra by @jpraynaud in #1565
• Handle pallas-hardano parsing errors by @dlachaumepalo in #1566
• Fix E2E flakiness when transferring funds by @jpraynaud in #1568
• Explorer: Improve Cardano Transaction Certification & Certificate Chain Validation UI by @Alenar in #1569
• Rename moria Discord channel to ask-mithril by @jpraynaud in #1574
• Support Cardano node 8.9.0 by @jpraynaud in #1509
• Fix Cardano configurations in infra by @jpraynaud in #1575
• Provide latest immutable file number with certified ctx by @sfauvel in #1571
• feat: refactor get_kes_period to create isolated new queries by @falcucci in #1576
• Fix SPO on-boarding guide by @jpraynaud in #1579
• Fix minimum Squid version in SPO guide by @jpraynaud in #1580
• Add ssh key by @sfauvel in #1578
• Accept existing but empty db dir for client-cli cardano-db download by @Alenar in #1581
• Implement Block range merkelization for Cardano transactions by @jpraynaud in #1560
• Establish a more explicit security policy by @ch1bo in #1582
• Upgrade dependencies by @jpraynaud in #1584

New Contributors

• @ch1bo made their first contribution in #1582

Full Changelog: 2408.0...2412.0

Crates Versions

Crate	Version
mithril-aggregator	0.4.49
mithril-client	0.6.9
mithril-client-cli	0.7.6
mithril-client-wasm	0.2.5
mithril-common	0.3.21
mithril-signer	0.2.116
mithril-stm	0.3.17

Networks Compatibility ⚠️

Network	Compatible
release-mainnet	✔
release-preprod	✔
pre-release-preview	✔
testing-preview	✔
testing-sanchonet	✔

Linux Requirements

The Linux binaries target glibc: to run them or install the .deb packages you must have glibc version 2.31+ installed.
Compatible systems include, but are not limited to, Ubuntu 20.04+ or Debian 11+ (Bullseye)).

Verify the authenticity of a downloaded asset

Detailed procedure to verify an asset

• Step 1: Identify the downloaded asset on your computer YOUR_ASSET_FILE
• Step 2: Download the signed checksum file from this link CHECKSUM.asc and save it in the same folder as the asset
• Step 3: In your terminal, go to the asset folder by running:

cd ***YOUR_ASSET_FOLDER***

• Step 4: Then verify the checksum of the asset by running:

sha256sum -c ./CHECKSUM.asc 2>/dev/null | grep ***YOUR_ASSET_FILE***

You must see:

./***YOUR_ASSET_FILE***: OK

• Step 5: Download the public key file from this link public-key.gpg and save it in the same folder as the asset
• Step 6: Then import the GPG public key:

gpg --import ./public-key.gpg

You must see something like:

gpg: key : public key "Input Output / Mithril <mithril@iohk.io>" imported
gpg: Total number processed: 1
gpg:               imported: 1

• Step 7: Then verify the GPG signature of the checksum file:

gpg --verify ./public-key.gpg ./CHECKSUM.asc

You must see something like:

gpg: Signature made Mon 05 Dec 2022 04:53:54 PM CET
gpg:                using RSA key 35EDE9D47BBA62A2F388E655899ACD26B8BCA0D2
gpg: Good signature from "Input Output / Mithril <mithril@iohk.io>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 35ED E9D4 7BBA 62A2 F388  E655 899A CD26 B8BC A0D2

The signature is valid if and only if:

• there is a line with gpg: Good signature from "Input Output / Mithril <mithril@iohk.io>"
• there is a line with Primary key fingerprint: 2AC0 7B11 8B23 1443 F544 2D0C 6E2C 1160 3E79 0021

• Step 8:
  If you successfully validated all the steps of this process, then you have successfully verified the authenticity of the asset ✔️
  If not, contact us at [mithril@iohk.io] and let us know of the outcome of your run of this process ⚠️