Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: make checksum optional in upgrade validation #16511

Merged
merged 7 commits into from
Jun 13, 2023

Conversation

julienrbrt
Copy link
Member

@julienrbrt julienrbrt commented Jun 12, 2023

Description

Closes: #10718, ref: #16131 (comment)

Unblocks: #16131


Author Checklist

All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.

I have...

  • included the correct type prefix in the PR title
  • added ! to the type prefix if API or client breaking change
  • targeted the correct branch (see PR Targeting)
  • provided a link to the relevant issue or specification
  • followed the guidelines for building modules
  • included the necessary unit and integration tests
  • added a changelog entry to CHANGELOG.md
  • included comments for documenting Go code
  • updated the relevant documentation or specification
  • reviewed "Files changed" and left comments if necessary
  • confirmed all CI checks have passed

Reviewers Checklist

All items are required. Please add a note if the item is not applicable and please add
your handle next to the items reviewed if you only reviewed selected items.

I have...

  • confirmed the correct type prefix in the PR title
  • confirmed ! in the type prefix if API or client breaking change
  • confirmed all author checklist items have been addressed
  • reviewed state machine logic
  • reviewed API design and naming
  • reviewed documentation is accurate
  • reviewed tests and test coverage
  • manually tested (if applicable)

@github-actions github-actions bot added C:CLI C:Cosmovisor Issues and PR related to Cosmovisor C:x/upgrade labels Jun 12, 2023
@julienrbrt julienrbrt marked this pull request as ready for review June 12, 2023 22:11
@julienrbrt julienrbrt requested a review from a team as a code owner June 12, 2023 22:11
@github-prbot github-prbot requested review from a team, facundomedica and atheeshp and removed request for a team June 12, 2023 22:11
Copy link
Member

@tac0turtle tac0turtle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

left one question but otherwise looks good

type ParseConfig struct {
// EnforceChecksum, if true, will cause all downloaded files to be checked against their checksums.
// When false, checksums are not enforced to be present in the url.
EnforceChecksum bool
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if this is true and cosmovisor flag is false, which one takes priority?

Copy link
Member Author

@julienrbrt julienrbrt Jun 13, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Basically, the software-upgrade CLI still requires a checksum for binary unless a flag is passed to disable it.
And cosmovisor by default do not require the software upgrade binary to have a checksum but an env variable can enforce it. When present checksums are always checked.

@julienrbrt julienrbrt enabled auto-merge June 13, 2023 15:31
@julienrbrt julienrbrt added this pull request to the merge queue Jun 13, 2023
Merged via the queue into main with commit 62709ad Jun 13, 2023
@julienrbrt julienrbrt deleted the julien/upgrade-checksum branch June 13, 2023 16:34
@julienrbrt
Copy link
Member Author

@Mergifyio backport release/v0.50.x

@mergify
Copy link
Contributor

mergify bot commented Jun 13, 2023

backport release/v0.50.x

✅ Backports have been created

mergify bot pushed a commit that referenced this pull request Jun 13, 2023
(cherry picked from commit 62709ad)

# Conflicts:
#	tools/cosmovisor/go.mod
#	tools/cosmovisor/go.sum
julienrbrt added a commit that referenced this pull request Jun 13, 2023
@faddat faddat mentioned this pull request Nov 8, 2024
12 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C:CLI C:Cosmovisor Issues and PR related to Cosmovisor C:x/upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Refactor new x/upgrade validation to allow checksum to be optional
3 participants