View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0011624 | Taler | deployment and operations | public | 2026-07-09 16:47 | 2026-07-16 02:22 |
| Reporter | Florian Dold | Assigned To | vecirex | ||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | resolved | Resolution | open | ||
| Target Version | 1.6 | ||||
| Summary | 0011624: deploy merchant (1.6.x) on lifeline | ||||
| Description | See summary. | ||||
| Tags | mytops, quality, srv-lifeline | ||||
|
|
taler-merchant v1.6.10 (removed form deb.taler.net, afaics) cannot be deployed, fails w/ current exchange as correctly reported by nym.com. It's also visible by git diff 1.6.9 1.6.10 on merchant.git repo that changes rel to exchange key updates were introduced. |
|
|
Scope: TOPS CH Merchant production deployment (mytops) Relevant hosts: lifeline Relevant tags / versions: packaging-1.6.x-20260715 taler-merchant 1.6.9-0+trixie [upgrading from taler-merchant 1.6.0-0+trixie] taler-merchant-webui 1.6.11-0+trixie [from: uninstalled] taler-challenger-helpers 1.6.0~dev2 [from: uinstalled] taler-merchant-typst 1.6.9-0+trixie [from: 1.6.0-0+trixie] Known critical bugs: - Running taler-merchant-dbinit as user taler-merchant-httpd doesn't migrate properly to new SQL schemes (taler-merchant-dbconfig as root is to be used) - taler-merchant.target systemd by mistake gets removed upon upgrading, avoiding taler-merchant-* components to start by themselves (systemctl --failed: false-positive); fixed in master - For emergency cases: Restoring from taler-merchant DB backup alone yields to errors in taler-merchant-httpd trying to create relations already existing; full-cluster restore: no issues Tests performed: Basic HTTP API tests (order creation, payment, deposit confirmation) Manual tests with wallet (create order + pay) successful Automated tests using jan.ai and MCP browser extensions used w/ simple instructions to navigate through the site; not yet properly formalized KYC Auth Reset tests performed on stage, after migrating DB scheme; script created for v1.6.5 worked fine for v1.6.9 Data integrity checks performed querying for merchants and last transactions, redoing dumps Special considerations: Database restore / migration tested using stage environment using old DB scheme data from March, to ensure consistency w/ newest scheme Other accepted risks: KYC / AML for new accounts cannot be fully tested Full end-to-end testing with production exchange limited, but payments tested to work in stage taler-merchant-typst is assumed to produce correct reports New packages taler-merchant-webui and challenger-httpd-helpers work in stage w/o visible issues Sign-off: - Hernâni Marques, 2026-07-16 |
|
|
# Post-deployment Report Post-deployment checks: - systemctl --list-failed => taler-merchant-dbinit-gc.service loaded failed (garbage collector from a previous run) => taler-merchant-httpd.service loaded failed (mytops-admin-log/scripts/upgrade.sh failed to install new taler-merchant package) => taler-merchant-httpd.socket loaded failed (dito) - taler-merchant-dbconfig claimed to not find taler-merchant-dbinit; due to old gnunet dependency (seen by running taler-merchant-dbinit --version w/ libs not found) - challenger-httpd was installed and conflicting w/ taler-challenger-helpers, both wanting to overwrite /usr/bin/challenger-send-email Issues addressed: - gnunet/libgnunet (both: 0.28.0~dev3-0+trixie) and taler-merchant (1.6.9-0+trixie) were properly installed - challenger-httpd was removed, instead taler-challenger-helpers (1.6.0~dev2-0+trixie) installed - taler-merchant-webui (1.6.11-0+trixie) was installed - systemctl -failed finally shows 0 units listed => 0 units listed: OK - ps -axw | grep taler-merchant => shows taler-merchant-{depositcheck,donaukeyupdate,exchangekeyupdate,kyccheck,reconciliation,report-generator,webhook,httpd} running: OK - journalctl -u taler-merchant-httpd --since "2026-07-16 01:50" | grep -i error => empty: OK - mytops-admin-log/scripts/taler-merchant/maintenance/kyc-auth-reset.sh was run with --no-dry-run => talersticker shop lost KYCed status only for quick moment, recovering its status being KYCed in within a second; payments worked afterwards: OK Other issues: - Upon login to the talersticker shop using SMS challenge (and thus testing taler-challenger-helpers) , Android had issues w/ one payment template twice; but this couldn't be reproduced further, was temporary; must be an UX issue, was it never reached wallet-core (fdold saw it, too) |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2026-07-09 16:47 | Florian Dold | New Issue | |
| 2026-07-09 16:47 | Florian Dold | Status | new => assigned |
| 2026-07-09 16:47 | Florian Dold | Assigned To | => vecirex |
| 2026-07-09 16:47 | Florian Dold | Relationship added | related to 0011623 |
| 2026-07-09 16:50 | Florian Dold | Relationship added | related to 0011625 |
| 2026-07-09 18:38 | vecirex | Relationship added | parent of 0011518 |
| 2026-07-14 21:02 | vecirex | Note Added: 0029153 | |
| 2026-07-14 21:21 | vecirex | Tag Attached: srv-lifeline | |
| 2026-07-14 21:21 | vecirex | Tag Attached: quality | |
| 2026-07-14 21:21 | vecirex | Tag Attached: mytops | |
| 2026-07-14 21:32 | vecirex | Status | assigned => confirmed |
| 2026-07-15 21:57 | vecirex | Status | confirmed => assigned |
| 2026-07-16 00:55 | vecirex | Note Added: 0029157 | |
| 2026-07-16 01:28 | vecirex | Note Edited: 0029157 | |
| 2026-07-16 01:35 | vecirex | Note Edited: 0029157 | |
| 2026-07-16 02:19 | vecirex | Note Added: 0029158 | |
| 2026-07-16 02:19 | vecirex | Status | assigned => resolved |
| 2026-07-16 02:22 | vecirex | Note Edited: 0029158 | |
| 2026-07-16 02:22 | vecirex | Note Edited: 0029157 |
