• Github Forks
• Logging
Trivy Scan → ID Union Slack Notifications
• Tooling
• Productive Setup
• Logging

Attendance

• Sebastian Schmittner (EECC)
• Guido Wischrop (MGM)
• Marquart Franz (Siemens)
• Philipp Schlarb (esatus AG)
• Robin Klemens Christian Kubis (IFIS)
• Sebastian Zickau (Stadt Köln)

In Progress

Github Forks

...

• No! 
• But: Do not contirbute to IDU version but to HL version
  • :warning: → README!
• Archive?

...

• keep old images not to break currently running setups
• productive systems will be using "local" copies anyway

...

• Mention IDU / HL

In Progress

Tooling

Move IDU specific tools ( https://github.com/hyperledger/indy-node-container/blob/main/run/set_iptables_for_idu.sh ) to ID U repo... → Which?

Ubuntu 20

...

• do not use 1.13.0~dev206 for Debian images (for now)!

...

• move https://github.com/hyperledger/indy-

...

• node-

...

• container/blob/main/run/

...

• idu_ips to https://github.com/

...

• IDunion/

...

• Internal-

...

• Information/tree/

...

• requires sysbox-runc: https://github.com/nestybox/dockerfiles/blob/master/ubuntu-focal-systemd/Dockerfile
• requires privileged mode: https://github.com/fauust/docker-systemd
• requires privileged mode: https://github.com/robertdebock/docker-ubuntu-systemd

See https://github.com/hyperledger/indy-test-automation/blob/main/system_node_only/docker_setup.py#L78

Update from @Robin today: Looks promising!

Release automation / Scans

...

• https://action-slack.netlify.app/usage was added to ID Union Slack

...

• https://github.com/zickau/indy-node-container/blob/main/.github/workflows/trivy_example.yml

...

• main/Tools/iptables
• keep set_... script
  • document! → run/README

Using Container in Production Network

• Docs → README
• What needs to be done for production setting?
  • Latest images

  • Upgrades via node controller

• Marquart: OOS clearing? (z.B. https://www.blackducksoftware.com/ )

Logging

• limit docker logs
  • https://docs.docker.com/config/containers/logging/configure/
  • TBD local / json-file
    • document anyway!
    • log rotation anyway!

...

• default log level?

  • https://github.com/hyperledger/indy-node-container/blob/main/run/etc_indy/indy_config.py
  • set to 1
  • += run/README.md
  • See https://github.com/hyperledger/indy-node-container/pull/83

• mounting log files (/var/log/indy)

  • https://github.com/hyperledger/indy-node-container/blob/main/run/docker-compose.yml
  • rotation? 
  • += run/README

• journals stuff -> not!

Stale

Release automation / Scans

• https://github.com/hyperledger/indy-node-container/issues/46
• Add Slack bot
  • https://action-slack.netlify.app/usage was added to ID Union Slack
• Sebastian Zickau continues in a personal fork
  • https://github.com/zickau/indy-node-container/blob/main/.github/workflows/trivy_example.yml
• Notification working
  • to be integrated into https://github.com/hyperledger/indy-node-container/blob/main/.github/workflows/trivy-all.yml

Metrics

• Carlos: https://github.com/IDunion/indy-node-monitor
• https://github.com/WadeBarnes/indy-node-monitor/tree/monitoring-stack
• Existing Prometheus + Grafana setup by IFIS

...

• Helm Charts
  • Might geht interesting at some point in the future 
    • Potential Clients Spherity/MGM
• Podman
  • https://github.com/IDunion/indy-node-container/issues/48

Next Meeting

• Change to Bi-Weekly: Fri 9:15-10:00 (UTC+1)
• Next Meeting: 2022-04-08