View Issue Details

IDProjectCategoryView StatusLast Update
0011624Talerproduction releasepublic2026-09-19 14:40
ReporterFlorian Dold Assigned Tovecirex Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status informingResolutionopen 
Target Version1.6Fixed in Version1.6 
Summary0011624: deploy merchant (1.6.9) on lifeline
DescriptionSee summary.
Tagsmytops, quality, srv-lifeline

Required notifications

Address or linkRemarkAdded byNotifiedActions

The plan

IDSummaryStatusAssigned ToEstimated effort (hours)
0011518Test taler-merchant v1.6.9 to be production-ready closedvecirex
This issue (hours)
Its children (hours)0
Together (hours)0
Nothing is missing: the plan can be finished.

Relationships

related to 0011623 informingsebasjm centralize kyc details to avoid blocking other requests 
related to 0011625 informingsebasjm KYC auth QR code and payto URI does not include amount and reference/subject 
parent of 0011518 closedvecirex Test taler-merchant v1.6.9 to be production-ready 

Activities

vecirex

2026-07-14 19:02

administrator   ~0029153

taler-merchant v1.6.10 (removed form deb.taler.net, afaics) cannot be deployed, fails w/ current exchange as correctly reported by nym.com.

It's also visible by git diff 1.6.9 1.6.10 on merchant.git repo that changes rel to exchange key updates were introduced.

vecirex

2026-07-15 22:55

administrator   ~0029157

Last edited: 2026-07-16 00:22

Scope:

TOPS CH Merchant production deployment (mytops)

Relevant hosts:

lifeline

Relevant tags / versions:

packaging-1.6.x-20260715

taler-merchant 1.6.9-0+trixie [upgrading from taler-merchant 1.6.0-0+trixie]
taler-merchant-webui 1.6.11-0+trixie [from: uninstalled]
taler-challenger-helpers 1.6.0~dev2 [from: uinstalled]
taler-merchant-typst 1.6.9-0+trixie [from: 1.6.0-0+trixie]

Known critical bugs:

- Running taler-merchant-dbinit as user taler-merchant-httpd doesn't migrate properly to new SQL schemes (taler-merchant-dbconfig as root is to be used)
- taler-merchant.target systemd by mistake gets removed upon upgrading, avoiding taler-merchant-* components to start by themselves (systemctl --failed: false-positive); fixed in master
- For emergency cases: Restoring from taler-merchant DB backup alone yields to errors in taler-merchant-httpd trying to create relations already existing; full-cluster restore: no issues

Tests performed:

Basic HTTP API tests (order creation, payment, deposit confirmation)
Manual tests with wallet (create order + pay) successful
Automated tests using jan.ai and MCP browser extensions used w/ simple instructions to navigate through the site; not yet properly formalized
KYC Auth Reset tests performed on stage, after migrating DB scheme; script created for v1.6.5 worked fine for v1.6.9
Data integrity checks performed querying for merchants and last transactions, redoing dumps

Special considerations:

Database restore / migration tested using stage environment using old DB scheme data from March, to ensure consistency w/ newest scheme

Other accepted risks:

KYC / AML for new accounts cannot be fully tested
Full end-to-end testing with production exchange limited, but payments tested to work in stage
taler-merchant-typst is assumed to produce correct reports
New packages taler-merchant-webui and challenger-httpd-helpers work in stage w/o visible issues

Sign-off:
- HernĂ¢ni Marques, 2026-07-16

vecirex

2026-07-16 00:19

administrator   ~0029158

Last edited: 2026-07-16 00:22

# Post-deployment Report

Post-deployment checks:
- systemctl --list-failed
   => taler-merchant-dbinit-gc.service loaded failed (garbage collector from a previous run)
   => taler-merchant-httpd.service loaded failed (mytops-admin-log/scripts/upgrade.sh failed to install new taler-merchant package)
   => taler-merchant-httpd.socket loaded failed (dito)
- taler-merchant-dbconfig claimed to not find taler-merchant-dbinit; due to old gnunet dependency (seen by running taler-merchant-dbinit --version w/ libs not found)
- challenger-httpd was installed and conflicting w/ taler-challenger-helpers, both wanting to overwrite /usr/bin/challenger-send-email

Issues addressed:
- gnunet/libgnunet (both: 0.28.0~dev3-0+trixie) and taler-merchant (1.6.9-0+trixie) were properly installed
- challenger-httpd was removed, instead taler-challenger-helpers (1.6.0~dev2-0+trixie) installed
- taler-merchant-webui (1.6.11-0+trixie) was installed
- systemctl -failed finally shows 0 units listed
   => 0 units listed: OK
- ps -axw | grep taler-merchant
  => shows taler-merchant-{depositcheck,donaukeyupdate,exchangekeyupdate,kyccheck,reconciliation,report-generator,webhook,httpd} running: OK
- journalctl -u taler-merchant-httpd --since "2026-07-16 01:50" | grep -i error
  => empty: OK
- mytops-admin-log/scripts/taler-merchant/maintenance/kyc-auth-reset.sh was run with --no-dry-run
  => talersticker shop lost KYCed status only for quick moment, recovering its status being KYCed in within a second; payments worked afterwards: OK

Other issues:
- Upon login to the talersticker shop using SMS challenge (and thus testing taler-challenger-helpers) , Android had issues w/ one payment template twice; but this couldn't be reproduced further, was temporary; must be an UX issue, was it never reached wallet-core (fdold saw it, too)

Issue History

Date ModifiedUsernameFieldChange
2026-07-09 14:47Florian DoldNew Issue
2026-07-09 14:47Florian DoldStatusnew => assigned
2026-07-09 14:47Florian DoldAssigned To => vecirex
2026-07-09 14:47Florian DoldRelationship addedrelated to 0011623
2026-07-09 14:50Florian DoldRelationship addedrelated to 0011625
2026-07-09 16:38vecirexRelationship addedparent of 0011518
2026-07-14 19:02vecirexNote Added: 0029153
2026-07-14 19:21vecirexTag Attached: srv-lifeline
2026-07-14 19:21vecirexTag Attached: quality
2026-07-14 19:21vecirexTag Attached: mytops
2026-07-14 19:32vecirexStatusassigned => implementing
2026-07-15 19:57vecirexStatusimplementing => assigned
2026-07-15 22:55vecirexNote Added: 0029157
2026-07-15 23:28vecirexNote Edited: 0029157
2026-07-15 23:35vecirexNote Edited: 0029157
2026-07-16 00:19vecirexNote Added: 0029158
2026-07-16 00:19vecirexStatusassigned => informing
2026-07-16 00:22vecirexNote Edited: 0029158
2026-07-16 00:22vecirexNote Edited: 0029157
2026-07-27 15:39Florian DoldSummarydeploy merchant (1.6.x) on lifeline => deploy merchant (1.6.9) on lifeline
2026-07-27 15:39Florian DoldIssue cloned: 0011687
2026-07-27 16:46Florian DoldCategorydeployment and operations => production release
2026-09-19 14:40Christian GrothoffFixed in Version => 1.6