2022 02 11

---

tags: ID-Union, Container Working Group, HL Indy, Indy Node

2022-02-11 Indy Docker Container WG Meeting #32

Attendance

• Sebastian (EECC)
• Sebastian (Köln)
• Guido (MGM)
• Robin (IFIS)
• Cristian (IFIS)

In Progress

1️⃣ Upstream Contribution

• Ry Jones is the Architect
  • Ry suggests to transfer the ownership of our repository to ryjones. Ry will then put the repository in place (hyperledger/indy-node-container) ✔️
    • https://docs.github.com/en/repositories/creating-and-managing-repositories/transferring-a-repository
  • Advertise contribution in https://chat.hyperledger.org/channel/indy-contributors + ask to be added to https://chat.hyperledger.org/channel/indy-contributors in order to become admins of the contributed repo
• What else?
  • CLA? Helge says: this is covered by the ID Union consotrial agreement.
  • Commit Sign Off! ✔️
    • Check: https://github.com/coderanger/dco
    • ☑️ We likely need to re write our history... -> look for appropriate tools to add the sign-off message to all commits
    • https://github.com/IDunion/indy-node-container/issues/75

All done. Transfer to Ry started today. -> Rocketchat

Contribution to Node 1.13.0 / Ubuntu 20.04 Release

• Concretely: Need Ubuntu 20.04 systemd container
  • https://github.com/hyperledger/indy-test-automation/blob/main/system_node_only/docker/node/Dockerfile.ubuntu-2004
  • Hyperledger Indy has a Test Automation Suite which starts the Indy software as a systemd service in a container to simulate operation in a VM. Mainly it is about Pool Restart, Upgrade, Start & Stop Node
  • Could probably be based on https://github.com/solita/docker-systemd/tree/master (which is not maintained anymore)
  • other examples
    • requires sysbox-runc: https://github.com/nestybox/dockerfiles/blob/master/ubuntu-focal-systemd/Dockerfile
    • requires privileged mode: https://github.com/fauust/docker-systemd
    • requires privileged mode: https://github.com/robertdebock/docker-ubuntu-systemd

See https://github.com/hyperledger/indy-test-automation/blob/main/system_node_only/docker_setup.py#L78

Update from @Robin today: Looks promising!

Release automation / Scans

• https://github.com/IDunion/indy-node-container/issues/46
• Add Slack bot
• Sebastian Zickau continues in a personal fork

Stale

Fixing current images write consensus

• Ubuntu 20 / node 1.13.0~dev206 eventually runs into consensus problems
  • do not use 1.13.0~dev206 for Debian images (for now)!
  • Todo: rather produce Debioan images similar to https://github.com/IDunion/indy-node-container/blob/main/build/Dockerfile.ubuntu18
  • @Echsecutor

Metrics

• Carlos: https://github.com/IDunion/indy-node-monitor
• https://github.com/WadeBarnes/indy-node-monitor/tree/monitoring-stack
• Existing Prometheus + Grafana setup by IFIS

Security

The node keys handling is currently sub optimal (env variable). Should be improved to e.g. file based setup: https://github.com/IDunion/indy-node-container/issues/52

• Cristian already has a nice setup elsewhere and offers to port it
  • https://github.com/internet-sicherheit/sovrin-container
  • Merge of IFIS repo?

Indy-Test-Automation

• Issue#102: Indy Node system tests depend on the Sovrin package
  • Improve our own testing!

Support for non-docker setup

• Helm Charts
  • Might geht interesting at some point in the future 😉
    • Potential Clients Spherity/MGM
• Podman
  • https://github.com/IDunion/indy-node-container/issues/48

Next Meeting

• Weekly Fri 9:15-10:00 (UTC+1)