View Issue Details

IDProjectCategoryView StatusLast Update
0008293Talersandcastle (containerized demo deployment)public2024-06-28 14:38
ReporterFlorian Dold Assigned Todvn  
PriorityhighSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Target Version0.13 
Summary0008293: put exchange master key into separate volume mount [estimate: 4h]
DescriptionThe master key should not change even if we nuke *everything* else, so it might make sense to put it into a different volume!
TagsNo tags attached.

Activities

dvn

2024-06-28 01:08

developer   ~0022751

I took several different approaches, most of which were trying to generalize the approach so that we could have a reusable function for making any file or directory persistent. I finally had the realization that it would be better to just simplify things and follow the preexisting pattern with the data directories but make it specific to the the exchange master key.

The solution I came up with is here: https://git.taler.net/sandcastle-ng.git/commit/?h=dvn0/master-key-volume&id=28f87e2290b2623c3bd16ac41c52b9f4abdf060b

It should migrate the key to the new persistent volume if it already exists, and if it's a new setup then it will put the key there to begin with.

dvn

2024-06-28 14:38

developer   ~0022761

Merged into master here: https://git.taler.net/sandcastle-ng.git/commit/?id=3ae088af4b138878c97aa1295826c322daccf9c9

Issue History

Date Modified Username Field Change
2024-01-31 00:51 Florian Dold New Issue
2024-01-31 00:51 Florian Dold Status new => assigned
2024-01-31 00:51 Florian Dold Assigned To => dvn
2024-03-05 11:23 Florian Dold Summary consider putting exchange master key into separate volume => consider putting exchange master key and libeufin credentials into separate volume
2024-03-05 11:23 Florian Dold Summary consider putting exchange master key and libeufin credentials into separate volume => consider putting exchange master key into separate volume
2024-03-05 11:24 Florian Dold Summary consider putting exchange master key into separate volume => consider putting exchange master key and 2FA provider secrets (Telesign,...) into separate volume
2024-04-08 14:32 dvn Summary consider putting exchange master key and 2FA provider secrets (Telesign,...) into separate volume => consider putting exchange master key into separate volume
2024-04-09 20:29 dvn Summary consider putting exchange master key into separate volume => put exchange master key into separate volume mount
2024-04-12 18:10 Christian Grothoff Priority normal => high
2024-04-12 18:10 Christian Grothoff Target Version 0.10 => 0.11
2024-05-13 21:29 Christian Grothoff Target Version 0.11 => 0.12
2024-06-24 02:52 dvn Summary put exchange master key into separate volume mount => put exchange master key into separate volume mount [estimate: 4h]
2024-06-26 18:09 Christian Grothoff Target Version 0.12 => 0.13
2024-06-28 01:08 dvn Note Added: 0022751
2024-06-28 14:38 dvn Status assigned => resolved
2024-06-28 14:38 dvn Resolution open => fixed
2024-06-28 14:38 dvn Note Added: 0022761