View Issue Details

IDProjectCategoryView StatusLast Update
0011804Talerdeployment and operationspublic2026-09-18 12:52
Reportervecirex Assigned Tovecirex  
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status confirmedResolutionopen 
Summary0011804: deploy taler-merchant (1.6.23) on my.taler-ops.ch
Description# Pre-deployment Sign-off

Scope:
- Upgrade production merchant backend on my.taler-ops.ch (lifeline)
- Package: taler-merchant 1.6.23-0+trixie from suite trixie
- Prefer WebUI already on 1.6.43 (related WebUI ticket) or record if still on 1.6.33-dev.7

Relevant hosts:
- my.taler-ops.ch (lifeline)

Relevant tags / packages:
- Live now: build_version 1.6.22, protocol version 38:0:26
- Target: APT trixie taler-merchant=1.6.23-0+trixie
- Git: merchant tag v1.6.23

Known critical bugs:
- (none listed; add related Mantis IDs if any)

Tests (commands + expected):

Baseline (before install):
curl -fsS https://my.taler-ops.ch/config | jq -r '.name,.build_version,.version'
# expect: taler-merchant / 1.6.22 / 38:0:26

dpkg-query -W taler-merchant
# expect: 1.6.22-...

systemctl is-active taler-merchant-httpd
# expect: active

- live-harness tests (before): ok:___ / info:___ / fail:___

Install / migrate (operator-owned):
- Record planned DB steps before restart (1.6.23 still has service-side expectations; confirm with package notes)
dpkg-query -W taler-merchant
# expect after install: 1.6.23-0+trixie

systemctl is-active taler-merchant-httpd
# expect: active

journalctl -u taler-merchant-httpd -n 100 --no-pager
# expect: no restart loop; no fatal migration error


Post-install checks:
curl -fsS https://my.taler-ops.ch/config | jq -r '.name,.build_version,.version'
# expect: name=taler-merchant ; build_version=1.6.23 ; version=<record actual, was 38:0:26>

curl -fsS -o /dev/null -w '%{http_code}\n' https://my.taler-ops.ch/webui/
# expect: 200

- Private API smoke (with token): GET instances list
  expect: HTTP 200; known instances present
- Diff-driven (v1.6.22 -> v1.6.23):
  - password change requires current password + optional MFA
  - login token returned after password reset
  - MFA challenge bound to instance
  - template pay duration applied to orders
  - templates return merchant + compatible exchanges
  - mixed payments path present (smoke only if enabled)
  - KYC failure persistence / notifications (if KYC used on this host)
  expect: each exercised check returns success / expected error shape; no 500
- live-harness tests (after): ok:___ / info:___ / fail:___
  expect: fail not worse than before

Special considerations:
- Database migrations: yes -- review and apply as operator before declaring done
- Configuration changes: review MFA / password-change related options if introduced
- API changes: auth/MFA and template response fields (see git v1.6.22..v1.6.23)
- Mixed payments: initial version -- accept limited coverage if not used in prod yet
- hotfix: no

Other accepted risks:
- Mixed payments and KYC edge paths may be only partially tested on prod
- Protocol version may change; clients must tolerate recorded new version

Sign-off:
- $NAME, $DATE

# Post-deployment report

Timeline:
- (apt install / reload time)

Post-deployment checks:
- (paste command outputs: dpkg-query, /config, live-harness after line)

Issues addressed:
- (if any)

Other issues:
- (if any)
Tagsmytops, quality, srv-lifeline

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-09-18 12:13 vecirex New Issue
2026-09-18 12:13 vecirex Status new => assigned
2026-09-18 12:13 vecirex Assigned To => vecirex
2026-09-18 12:13 vecirex Status assigned => confirmed
2026-09-18 12:35 vecirex Tag Attached: mytops
2026-09-18 12:35 vecirex Tag Attached: quality
2026-09-18 12:35 vecirex Tag Attached: srv-lifeline
2026-09-18 12:38 vecirex Category paivana => deployment and operations
2026-09-18 12:38 vecirex Summary deploy/release taler-merchant (1.6.23) on my.taler-ops.ch => deploy taler-merchant (1.6.23) on my.taler-ops.ch
2026-09-18 12:52 vecirex Severity minor => feature