2022 01 28

---

tags: ID-Union, Container Working Group, HL Indy, Indy Node

2022-01-28 Indy Docker Container WG Meeting #30

Attendance

• Aljoscha (TUB)
• Guido (MGM)
• Marquart (Siemens)
• Sebastian (EECC)
• Cristian (IFIS)

In Progress

1️⃣ Upstream Contribution

• Talk to Ry Jones
  • Robin
    • Ry Jones is the Architect
      • Ry suggests to transfer the ownership of our repository to ryjones. Ry will then put the repository in place (hyperledger/indy-node-container)
      • https://docs.github.com/en/repositories/creating-and-managing-repositories/transferring-a-repository
• What else?
  • CLA? Helge says: this is covered by the ID Union consotrial agreement.
  • Commit Sign Off!
    • Check: https://github.com/coderanger/dco
    • ⚠️ We likely need to re write our history... -> look for appropriate tools to add the sign-off message to all commits
    • https://github.com/IDunion/indy-node-container/issues/75

Fixing current images write consensus

• Ubuntu 20 / node 1.13.0~dev206 eventually runs into consensus problems
  • do not use 1.13.0~dev206 for Debian images (for now)!
  • Todo: rather produce Debioan images similar to https://github.com/IDunion/indy-node-container/blob/main/build/Dockerfile.ubuntu18
  • @Echsecutor

Contribution to Node 1.13.0 / Ubuntu 20.04 Release

• Concretely: Need Ubuntu 20.04 systemd container
• https://github.com/hyperledger/indy-test-automation/blob/main/system_node_only/docker/node/Dockerfile.ubuntu-2004
• Hyperledger Indy has a Test Automation Suite which starts the Indy software as a systemd service in a container to simulate operation in a VM. Mainly it is about Pool Restart, Upgrade, Start & Stop Node
• Could probably be based on https://github.com/solita/docker-systemd/tree/master (which is not maintained anymore)
• other examples
  • requires sysbox-runc: https://github.com/nestybox/dockerfiles/blob/master/ubuntu-focal-systemd/Dockerfile
  • requires privileged mode: https://github.com/fauust/docker-systemd
  • requires privileged mode: https://github.com/robertdebock/docker-ubuntu-systemd

Stale

Release automation / Scans

• https://github.com/IDunion/indy-node-container/issues/46
• Add Slack bot
• Sebastian Zickau has continued the work.

Metrics

• Carlos: https://github.com/IDunion/indy-node-monitor
• https://github.com/WadeBarnes/indy-node-monitor/tree/monitoring-stack
• Existing Prometheus + Grafana setup by IFIS

Security

The node keys handling is currently sub optimal (env variable). Should be improved to e.g. file based setup: https://github.com/IDunion/indy-node-container/issues/52

• Cristian already has a nice setup elsewhere and offers to port it
  • https://github.com/internet-sicherheit/sovrin-container
  • Merge of IFIS repo?

Indy-Test-Automation

• Issue#102: Indy Node system tests depend on the Sovrin package
  • Improve our own testing!

Support for non-docker setup

• Helm Charts
  • Might geht interesting at some point in the future 😉
    • Potential Clients Spherity/MGM
• Podman
  • https://github.com/IDunion/indy-node-container/issues/48

Next Meeting

• Weekly Fri 9:15-10:00 (UTC+1)