From 1595c7b6fe92d476e71c2d025abfe7d6ba7876d9 Mon Sep 17 00:00:00 2001 From: Ant Somers Date: Sun, 1 Nov 2026 14:42:26 +0300 Subject: [PATCH] chore: pin decdn to v0.3.1 Move what names one decdn/decdn release from v0.3.0 to v0.3.1 (e7e67e642b416db7b8e3c8d65c499e915c8b5d35): the Compose image digests and onramp installer pin, the chart's example digest, the inventory and cloud-init exact-pin examples and the generated mirrors. The roles and the chart pin the line 0.3. The PR body lists anything left. --- ansible/inventory/group_vars/decdn_gateway_hosts.yml | 2 +- ansible/inventory/group_vars/sponsord_hosts.yml | 4 ++-- ansible/inventory/group_vars/sponsord_onramp_hosts.yml | 6 +++--- ansible/inventory/host_vars/decdn-node-1/main.yml | 4 ++-- ansible/inventory/host_vars/origin-1/main.yml | 4 ++-- ansible/roles/decdn_gateway/vars/main/networks.yml | 2 +- ansible/roles/decdn_node/vars/main/networks.yml | 2 +- ansible/roles/sponsord/vars/main/networks.yml | 2 +- ansible/roles/sponsord_onramp/vars/main/networks.yml | 2 +- charts/decdn-node/values.yaml | 4 ++-- cloud-init/user-data-publisher.yaml | 2 +- compose/.env.example | 8 ++++---- compose/sponsord-onramp.env.example | 6 +++--- .../inventory/group_vars/decdn_gateway_hosts.yml | 2 +- .../inventory/group_vars/sponsord_hosts.yml | 4 ++-- .../inventory/group_vars/sponsord_onramp_hosts.yml | 6 +++--- .../inventory/host_vars/decdn-node-1/main.yml | 4 ++-- .../inventory/host_vars/origin-1/main.yml | 4 ++-- 18 files changed, 34 insertions(+), 34 deletions(-) diff --git a/ansible/inventory/group_vars/decdn_gateway_hosts.yml b/ansible/inventory/group_vars/decdn_gateway_hosts.yml index bfc33f03..2d02ce64 100644 --- a/ansible/inventory/group_vars/decdn_gateway_hosts.yml +++ b/ansible/inventory/group_vars/decdn_gateway_hosts.yml @@ -14,7 +14,7 @@ # --- Binary ------------------------------------------------------------------------ # "release" (default) installs the decdn CLI of the decdn_node role's release line. # To hold the host on one exact release: -# decdn_gateway_version: "0.3.0" +# decdn_gateway_version: "0.3.1" # --- Public address (REQUIRED) ---------------------------------------------------- # Per host. and *. must resolve to the host; the playbooks open diff --git a/ansible/inventory/group_vars/sponsord_hosts.yml b/ansible/inventory/group_vars/sponsord_hosts.yml index b58ec7dc..6dfed1a1 100644 --- a/ansible/inventory/group_vars/sponsord_hosts.yml +++ b/ansible/inventory/group_vars/sponsord_hosts.yml @@ -15,11 +15,11 @@ # the role pins (sponsord_version "X.Y", the decdn_node role's line: one release ships # the node, sponsord and the onramp), on each deploy; set an exact one only to hold # the host on it, together with sponsord_onramp_version: -# sponsord_version: "0.3.0" +# sponsord_version: "0.3.1" # Or build on the host from a git ref (tag, branch or SHA; sponsord_version is not # checked in this mode): # sponsord_install_method: source -# sponsord_source_ref: v0.3.0 +# sponsord_source_ref: v0.3.1 # Or copy a control-machine build: a decdn/decdn checkout's target dir # (`cargo build --release -p sponsord`; the role checks the ELF matches the host). # sponsord_install_method: manual diff --git a/ansible/inventory/group_vars/sponsord_onramp_hosts.yml b/ansible/inventory/group_vars/sponsord_onramp_hosts.yml index b27c8bf9..6e8224df 100644 --- a/ansible/inventory/group_vars/sponsord_onramp_hosts.yml +++ b/ansible/inventory/group_vars/sponsord_onramp_hosts.yml @@ -12,10 +12,10 @@ # --- Binary ------------------------------------------------------------------------ # The same three methods as sponsord. "release" (default) installs the same release # as the sponsord role; set both versions together to hold the host on another: -# sponsord_onramp_version: "0.3.0" +# sponsord_onramp_version: "0.3.1" # Or build on the host (its own checkout, so it may pin a different ref): # sponsord_onramp_install_method: source -# sponsord_onramp_source_ref: v0.3.0 +# sponsord_onramp_source_ref: v0.3.1 # Or manual, which follows sponsord_release_target_dir (`cargo build --release` in # a decdn/decdn checkout builds both binaries): # sponsord_onramp_install_method: manual @@ -38,6 +38,6 @@ # role's sponsord_onramp_decdn_release line (decdn/decdn, the decdn_node role's default # line; a host's decdn_node_version does not move it), with the SHA-256 of its # verified SHA256SUMS, on each deploy. To serve one exact release, set its tag and digest: -# sponsord_onramp_decdn_release: v0.3.0 +# sponsord_onramp_decdn_release: v0.3.1 # sponsord_onramp_decdn_sums_sha256: "…" # CapacityBond and SlashJudge come from sponsord_network (group_vars/sponsord_hosts.yml). diff --git a/ansible/inventory/host_vars/decdn-node-1/main.yml b/ansible/inventory/host_vars/decdn-node-1/main.yml index 809ef445..bd4d74ca 100644 --- a/ansible/inventory/host_vars/decdn-node-1/main.yml +++ b/ansible/inventory/host_vars/decdn-node-1/main.yml @@ -24,13 +24,13 @@ # line the role pins ("X.Y": its newest release, installed by each deploy); set an # exact one only to hold a node on it. decdn_node_install_method: release -# decdn_node_version: "0.3.0" +# decdn_node_version: "0.3.1" # # Alternative: build on the node from a git ref (any tag, branch or SHA), as an # unprivileged build user with a pinned toolchain (decdn_node_version is not checked # in this mode): # decdn_node_install_method: source -# decdn_node_source_ref: v0.3.0 +# decdn_node_source_ref: v0.3.1 # Alternative: copy binaries built on this control machine # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout): # decdn_node_install_method: manual diff --git a/ansible/inventory/host_vars/origin-1/main.yml b/ansible/inventory/host_vars/origin-1/main.yml index 82fc0869..22725138 100644 --- a/ansible/inventory/host_vars/origin-1/main.yml +++ b/ansible/inventory/host_vars/origin-1/main.yml @@ -26,13 +26,13 @@ # line the role pins ("X.Y": its newest release, installed by each deploy); set an # exact one only to hold a node on it. decdn_node_install_method: release -# decdn_node_version: "0.3.0" +# decdn_node_version: "0.3.1" # # Alternative: build on the node from a git ref (any tag, branch or SHA), as an # unprivileged build user with a pinned toolchain (decdn_node_version is not checked # in this mode): # decdn_node_install_method: source -# decdn_node_source_ref: v0.3.0 +# decdn_node_source_ref: v0.3.1 # Alternative: copy binaries built on this control machine # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout): # decdn_node_install_method: manual diff --git a/ansible/roles/decdn_gateway/vars/main/networks.yml b/ansible/roles/decdn_gateway/vars/main/networks.yml index 54dc763f..96455afe 100644 --- a/ansible/roles/decdn_gateway/vars/main/networks.yml +++ b/ansible/roles/decdn_gateway/vars/main/networks.yml @@ -1,6 +1,6 @@ --- # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit. -# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c +# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35 # crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses) # + contracts/deployments/.json # diff --git a/ansible/roles/decdn_node/vars/main/networks.yml b/ansible/roles/decdn_node/vars/main/networks.yml index 9b59d9f0..cec343a3 100644 --- a/ansible/roles/decdn_node/vars/main/networks.yml +++ b/ansible/roles/decdn_node/vars/main/networks.yml @@ -1,6 +1,6 @@ --- # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit. -# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c +# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35 # crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses) # + contracts/deployments/.json # diff --git a/ansible/roles/sponsord/vars/main/networks.yml b/ansible/roles/sponsord/vars/main/networks.yml index 7022a8b4..59bc4164 100644 --- a/ansible/roles/sponsord/vars/main/networks.yml +++ b/ansible/roles/sponsord/vars/main/networks.yml @@ -1,6 +1,6 @@ --- # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit. -# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c +# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35 # crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses) # + contracts/deployments/.json # diff --git a/ansible/roles/sponsord_onramp/vars/main/networks.yml b/ansible/roles/sponsord_onramp/vars/main/networks.yml index 8905f87f..5ca2d89f 100644 --- a/ansible/roles/sponsord_onramp/vars/main/networks.yml +++ b/ansible/roles/sponsord_onramp/vars/main/networks.yml @@ -1,6 +1,6 @@ --- # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit. -# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c +# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35 # crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses) # + contracts/deployments/.json # diff --git a/charts/decdn-node/values.yaml b/charts/decdn-node/values.yaml index 492df5df..cf2fbafa 100644 --- a/charts/decdn-node/values.yaml +++ b/charts/decdn-node/values.yaml @@ -14,8 +14,8 @@ image: tag: "" # sha256:... — takes precedence over tag when set. Prefer it: a tag can be moved. # Take it from the release's signed decdn-node-image-digest.txt (v0.0.1: - # image-digest.txt), e.g. for v0.3.0 - # sha256:275ababfaea41ee3cd0d47213814eda1337aaf533c364b3235bc514c2a54429e + # image-digest.txt), e.g. for v0.3.1 + # sha256:df8900be7140f58a135bf7487dc1342e70c49b01305a250a47df51f14cb5745e digest: "" # "" picks Always for a release-line tag (X.Y, the default), so a restarted pod # pulls the newest release in it rather than whatever the node cached first, and diff --git a/cloud-init/user-data-publisher.yaml b/cloud-init/user-data-publisher.yaml index 16e602b2..8317961e 100644 --- a/cloud-init/user-data-publisher.yaml +++ b/cloud-init/user-data-publisher.yaml @@ -145,7 +145,7 @@ write_files: # the digest read from it. To serve one exact release, set its tag with the # SHA-256 of its SHA256SUMS (`sha256sum SHA256SUMS` once its SHA256SUMS.asc # verifies), e.g.: - # sponsord_onramp_decdn_release: "v0.3.0" + # sponsord_onramp_decdn_release: "v0.3.1" # sponsord_onramp_decdn_sums_sha256: "<64 lowercase hex>" # What an interactive login prints while the bootstrap is unfinished. It is written diff --git a/compose/.env.example b/compose/.env.example index 70ec1a36..a1a6e60c 100644 --- a/compose/.env.example +++ b/compose/.env.example @@ -33,8 +33,8 @@ COMPOSE_PROFILES=node # Compose names one release of it (README.md, the node's "Operate"). # --- node ----------------------------------------------------------------------- -# decdn/decdn v0.3.0 -DECDN_IMAGE_DIGEST=sha256:275ababfaea41ee3cd0d47213814eda1337aaf533c364b3235bc514c2a54429e +# decdn/decdn v0.3.1 +DECDN_IMAGE_DIGEST=sha256:df8900be7140f58a135bf7487dc1342e70c49b01305a250a47df51f14cb5745e # DECDN_IMAGE_REPO=ghcr.io/decdn/decdn-node # uid/gid of the host's dedicated `decdn` system account, which owns /var/lib/decdn @@ -49,9 +49,9 @@ DECDN_ENV_FILE=/etc/decdn/decdn.env # From the same decdn/decdn release as the node's digest above: one release ships # all three images (sponsord_version = decdn_node_version). Each from the release's # signed sponsord-image-digest.txt / sponsord-onramp-image-digest.txt. -SPONSORD_IMAGE_DIGEST=sha256:56f5d0cbe82959ca9383a0705f80116a5d94a8ff64a6b5219e185c7bffc4e4d3 +SPONSORD_IMAGE_DIGEST=sha256:73909acb22f87b53a06edd7d33ab946df721492a4648d61001c6cdd21c462169 # SPONSORD_IMAGE_REPO=ghcr.io/decdn/sponsord -SPONSORD_ONRAMP_IMAGE_DIGEST=sha256:76f8f8c545f4c3a0e9955f2c6e6ab768200cf83a415a6fb76c69be3c3187ce14 +SPONSORD_ONRAMP_IMAGE_DIGEST=sha256:f73f6aafb0f60f887945bbf3fc66e4b6b3c0b94b539793a8e2da3ead967ee826 # SPONSORD_ONRAMP_IMAGE_REPO=ghcr.io/decdn/sponsord-onramp # uid/gid of the host's dedicated `sponsord` system account, which owns the diff --git a/compose/sponsord-onramp.env.example b/compose/sponsord-onramp.env.example index 871544cf..d7cb624d 100644 --- a/compose/sponsord-onramp.env.example +++ b/compose/sponsord-onramp.env.example @@ -22,9 +22,9 @@ ONRAMP_TURNSTILE_SITEKEY= # SHA-256 of that release's SHA256SUMS file (`sha256sum SHA256SUMS` once its .asc # verifies). The Ansible role serves the newest release of its decdn line; Compose # has no resolver, so this names one, the newest when this file last moved: -# decdn/decdn v0.3.0. -ONRAMP_DECDN_RELEASE=v0.3.0 -ONRAMP_DECDN_SUMS_SHA256=bc89cd91e23e5b51aacabc78d0e54ccdb4e74de1c22e7121041cc5bfe20a0f52 +# decdn/decdn v0.3.1. +ONRAMP_DECDN_RELEASE=v0.3.1 +ONRAMP_DECDN_SUMS_SHA256=95e000ffa6ff65e83b7ca9effa7b9b745fd90f11891205c86ebc32f7697e1ace # --- Client address --------------------------------------------------------------- # The header the proxy puts the client address in; the onramp rate limits by it. diff --git a/examples/collection-fleet/inventory/group_vars/decdn_gateway_hosts.yml b/examples/collection-fleet/inventory/group_vars/decdn_gateway_hosts.yml index bfc33f03..2d02ce64 100644 --- a/examples/collection-fleet/inventory/group_vars/decdn_gateway_hosts.yml +++ b/examples/collection-fleet/inventory/group_vars/decdn_gateway_hosts.yml @@ -14,7 +14,7 @@ # --- Binary ------------------------------------------------------------------------ # "release" (default) installs the decdn CLI of the decdn_node role's release line. # To hold the host on one exact release: -# decdn_gateway_version: "0.3.0" +# decdn_gateway_version: "0.3.1" # --- Public address (REQUIRED) ---------------------------------------------------- # Per host. and *. must resolve to the host; the playbooks open diff --git a/examples/collection-fleet/inventory/group_vars/sponsord_hosts.yml b/examples/collection-fleet/inventory/group_vars/sponsord_hosts.yml index b58ec7dc..6dfed1a1 100644 --- a/examples/collection-fleet/inventory/group_vars/sponsord_hosts.yml +++ b/examples/collection-fleet/inventory/group_vars/sponsord_hosts.yml @@ -15,11 +15,11 @@ # the role pins (sponsord_version "X.Y", the decdn_node role's line: one release ships # the node, sponsord and the onramp), on each deploy; set an exact one only to hold # the host on it, together with sponsord_onramp_version: -# sponsord_version: "0.3.0" +# sponsord_version: "0.3.1" # Or build on the host from a git ref (tag, branch or SHA; sponsord_version is not # checked in this mode): # sponsord_install_method: source -# sponsord_source_ref: v0.3.0 +# sponsord_source_ref: v0.3.1 # Or copy a control-machine build: a decdn/decdn checkout's target dir # (`cargo build --release -p sponsord`; the role checks the ELF matches the host). # sponsord_install_method: manual diff --git a/examples/collection-fleet/inventory/group_vars/sponsord_onramp_hosts.yml b/examples/collection-fleet/inventory/group_vars/sponsord_onramp_hosts.yml index b27c8bf9..6e8224df 100644 --- a/examples/collection-fleet/inventory/group_vars/sponsord_onramp_hosts.yml +++ b/examples/collection-fleet/inventory/group_vars/sponsord_onramp_hosts.yml @@ -12,10 +12,10 @@ # --- Binary ------------------------------------------------------------------------ # The same three methods as sponsord. "release" (default) installs the same release # as the sponsord role; set both versions together to hold the host on another: -# sponsord_onramp_version: "0.3.0" +# sponsord_onramp_version: "0.3.1" # Or build on the host (its own checkout, so it may pin a different ref): # sponsord_onramp_install_method: source -# sponsord_onramp_source_ref: v0.3.0 +# sponsord_onramp_source_ref: v0.3.1 # Or manual, which follows sponsord_release_target_dir (`cargo build --release` in # a decdn/decdn checkout builds both binaries): # sponsord_onramp_install_method: manual @@ -38,6 +38,6 @@ # role's sponsord_onramp_decdn_release line (decdn/decdn, the decdn_node role's default # line; a host's decdn_node_version does not move it), with the SHA-256 of its # verified SHA256SUMS, on each deploy. To serve one exact release, set its tag and digest: -# sponsord_onramp_decdn_release: v0.3.0 +# sponsord_onramp_decdn_release: v0.3.1 # sponsord_onramp_decdn_sums_sha256: "…" # CapacityBond and SlashJudge come from sponsord_network (group_vars/sponsord_hosts.yml). diff --git a/examples/collection-fleet/inventory/host_vars/decdn-node-1/main.yml b/examples/collection-fleet/inventory/host_vars/decdn-node-1/main.yml index 809ef445..bd4d74ca 100644 --- a/examples/collection-fleet/inventory/host_vars/decdn-node-1/main.yml +++ b/examples/collection-fleet/inventory/host_vars/decdn-node-1/main.yml @@ -24,13 +24,13 @@ # line the role pins ("X.Y": its newest release, installed by each deploy); set an # exact one only to hold a node on it. decdn_node_install_method: release -# decdn_node_version: "0.3.0" +# decdn_node_version: "0.3.1" # # Alternative: build on the node from a git ref (any tag, branch or SHA), as an # unprivileged build user with a pinned toolchain (decdn_node_version is not checked # in this mode): # decdn_node_install_method: source -# decdn_node_source_ref: v0.3.0 +# decdn_node_source_ref: v0.3.1 # Alternative: copy binaries built on this control machine # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout): # decdn_node_install_method: manual diff --git a/examples/collection-fleet/inventory/host_vars/origin-1/main.yml b/examples/collection-fleet/inventory/host_vars/origin-1/main.yml index 82fc0869..22725138 100644 --- a/examples/collection-fleet/inventory/host_vars/origin-1/main.yml +++ b/examples/collection-fleet/inventory/host_vars/origin-1/main.yml @@ -26,13 +26,13 @@ # line the role pins ("X.Y": its newest release, installed by each deploy); set an # exact one only to hold a node on it. decdn_node_install_method: release -# decdn_node_version: "0.3.0" +# decdn_node_version: "0.3.1" # # Alternative: build on the node from a git ref (any tag, branch or SHA), as an # unprivileged build user with a pinned toolchain (decdn_node_version is not checked # in this mode): # decdn_node_install_method: source -# decdn_node_source_ref: v0.3.0 +# decdn_node_source_ref: v0.3.1 # Alternative: copy binaries built on this control machine # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout): # decdn_node_install_method: manual