• Controller issues fixed, new release
• SBOM
• Logging
• Indy Node Upgrade
• Meeting time

Attendance

• Sebastian Schmittner (EECC)
• Christian Bormann (Robert Bosch GmbH)
• Franz, Marquart (FT RPD SSP) Marquart Franz (Siemens)
• Philipp Schlarb (esatus AG)  <p.schlarb@esatus.com>
• Guido Wischrop(mgm tpFranz, Marquart (FT RPD SSP)
• Christian Fries (EECC)
• Cristian Kubis (IFIS)

In Progress

Indy

...

• https://github.com/hyperledger/indy-node/tree/main/data/migrations

1.12.6 Upgrade

• Christian (B) has tried upgrading via the docker based node controller. Upgrade failed. See https://github.com/hyperledger/indy-node-container/pullissues/97
  • fixed + released

...

• 108
• Otherwise the recent container releases with the 1.12.5 and 1.12.6 upgrades are running well

Indy Node Controller

• The Upgrade Prozess in Indy needs to be improved in order to propperly support upgrading containers
• The principal Controller solution mounting the host docker socket into the controller container might be re-discussed as well

Tagging of Container releases

• Include indy node version
• For upgrade!

Issues

• https://github.com/hyperledger/indy-node-container/blob/main/run/set_iptables.sh
• Add to README: flush Chain (default docker) before running the script
• Check that DROP rule is automatically moved to correct positionissues/96
  • probably resolved?
• Maintainers.md: https://github.com/hyperledger/indy-node-container/issues/10298
  • Note: There will be an update for the IP Table rule (conn limit per IP for port 9702) in early September

  ...

  • • https://github.com/hyperledger/indy-node-container/pull/109

  IP Tables script:

  • https://github.com/hyperledger/indy-node-container/blob/main/run/set_iptables.sh
  • Add to README: flush Chain (default docker) before running the script
  • Check that DROP rule is automatically moved to correct position
    • https://github.com/hyperledger/indy-node-container/issues/
    96
    • 102
  • Sebastian Schmittner:eyes:Note: There will be an update for the IP Table rule (conn limit per IP for port 9702) in early September

  Network connectivity test script

  ...

  • At least check that node can connect (TCP lvl) to all other nodes
  • Bonus: Check that connection from outside is not possible

  Still 2do

  Load Test Script by Christian Bormann

  • Rust Programm 
  • Containerized :check:
  • Add to container shipping repo
    • Consensus Vote...: YES! For Now.
  • Philipp: Test Automation Repo
    • TBD: Conrtib Christians Code into our or the test repo?
  • WIP Christian Bormann
    
    • MR when he feels its ready  

  Meeting time slot

  • One more Thursday meeting (US frindly time) 
  • Advertise in Contributors meeting
  • change back to Friday morning (Berlin time) if there is no US participation

  Alerting

  • Sebastian Z finished work on slack alerting action.
  • Send webhook to Sebastian Schmittner → Forward to Stephen Curranto add to github repo, then MR github action
  • Replace scan → github security alerts or do both?
    • BOTH
    • Sebastian Schmittner

  SBOM

  Marquart:

  • Marquart triggering Siemens processes to check whether Indy nod (Container) can be run in productive setting for a Siemens scale company → OSS Clearing
  • https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/
  • Do we have a SBOM?
    • No!
  • Can this be generated...?
  • probably... yes!
    • https://docs.docker.com/engine/sbom/

  ...

  • on hold

  Meeting time slot

  • Back to FR 9:15-10:00 (Berlin) for now
  • Change back to US friendly when anyone from US is interested in joining

  Stale

  Alerting

  • Sebastian Z finished work on slack alerting action.
  • Send webhook to Sebastian Schmittner → Forward to Stephen Curranto add to github repo, then MR github action
  • Replace scan → github security alerts or do both?
    • BOTH
    • Sebastian Schmittner

  Logging

  • Stale PR https://github.com/hyperledger/indy-node-container/pull/83

  • Discussion today:
    • Rather document how to edit the https://github.com/hyperledger/indy-node-container/blob/main/run/etc_indy/indy_config.py then overwriting those variables at container start through init script
    • Network Name → same!?
    • Definietly keep READE + docker logging explanation
    • → sesinsible default for logging in docker compose
    • Sebastian Schmittner

  Stale

  Metrics

  • Carlos: https://github.com/IDunion/indy-node-monitor
  • https://github.com/WadeBarnes/indy-node-monitor/tree/monitoring-stack
  • Existing Prometheus + Grafana setup by IFIS

  ...

  Next Meeting

  • Next meeting: 2022-09-01 17:00-18:0016 9:15 (Berlin time)