View Issue Details

IDProjectCategoryView StatusLast Update
0011804Talerdeployment and operationspublic2026-10-01 13:50
Reportervecirex Assigned Tovecirex Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Summary0011804: deploy taler-merchant (1.6.24) on my.taler-ops.ch
Description# Pre-deployment Sign-off

Scope:
- Upgrade production merchant backend on my.taler-ops.ch (lifeline)
- Package: taler-merchant 1.6.24-0+trixie from suite trixie
- Prefer WebUI already on / moving to 1.6.46 (related 0011803) in the same window

Relevant hosts:
- my.taler-ops.ch (lifeline)

Relevant tags / packages:
- Live now: build_version 1.6.23, protocol version 42:0:30; webui 1.6.43-0+trixie
- Target: APT trixie taler-merchant=1.6.24-0+trixie
- Git: merchant tag v1.6.24
- Related #11841: upgrade.sh PostgreSQL restart must use pg_ctlcluster + online assert (mytops-admin-log.git:4488fc1)

Known critical bugs:
- #11841 upgrade.sh meta-unit restart can leave cluster down

Tests (commands + expected):

Baseline (before install):
curl -fsS https://my.taler-ops.ch/config | jq -r '.name,.build_version,.version'
# expect: taler-merchant / 1.6.23 / 42:0:30

dpkg-query -W taler-merchant taler-merchant-webui
# expect: 1.6.23-0+trixie ; 1.6.43-0+trixie

systemctl is-active taler-merchant-httpd
# expect: active

pg_lsclusters -h
# expect: 17 main 5432 online ...

- live-harness tests (before): ok:___ / info:___ / fail:___

Install via upgrade.sh (required path on mytops):
# use /root/mytops-admin-log tip containing 4488fc1 (pg_ctlcluster + online assert)
# NOT the old systemctl restart postgresql.service alone
cd /root/mytops-admin-log && git rev-parse --short HEAD
# expect: 4488fc1 or later ancestor with the PG fix

# run upgrade.sh for merchant (+ webui if co-upgrading)
# expect: script exits 0; no "ERROR: PostgreSQL cluster ... is not online."


Post-install checks:
dpkg-query -W taler-merchant
# expect after install: 1.6.24-0+trixie

pg_lsclusters -h
# expect: 17 main ... online ...  (HARD FAIL if down)

systemctl is-active taler-merchant-httpd taler-merchant.target
# expect: active

journalctl -u taler-merchant-httpd -n 100 --no-pager
# expect: no restart loop; no fatal migration error; no missing PG socket

curl -fsS https://my.taler-ops.ch/config | jq -r '.name,.build_version,.version'
# expect: name=taler-merchant ; build_version=1.6.24 ; version=<record actual, was 42:0:30>

curl -fsS -o /dev/null -w '%{http_code}\n' https://my.taler-ops.ch/webui/
# expect: 200

- upgrade.sh PostgreSQL path (ticket not done without this):
  - grep upgrade.sh shows pg_ctlcluster (not only postgresql.service meta restart)
  - after script: cluster online; httpd active; /config reachable
  - if cluster was down after apt, ticket fails even if packages installed
- Private API smoke (with token): GET instances list
  expect: HTTP 200; known instances present
- Diff-driven (v1.6.23 -> v1.6.24): exercise changes from package notes / git tag range
  expect: each exercised check returns success / expected error shape; no 500
- live-harness tests (after): ok:___ / info:___ / fail:___
  expect: fail not worse than before

Special considerations:
- Database migrations: yes -- review and apply as operator before declaring done
- Configuration changes: review package notes for 1.6.24
- API changes: see git v1.6.23..v1.6.24
- hotfix: no
- Do not close as done unless upgrade.sh PG online assert passed on lifeline

Other accepted risks:
- Protocol version may change; clients must tolerate recorded new version

Sign-off:
- $NAME, $DATE

# Post-deployment report

Timeline:
- (apt / upgrade.sh time)

Post-deployment checks:
- (paste: git rev-parse short, dpkg-query, pg_lsclusters, /config, journalctl snippet, live-harness after)

Issues addressed:
- (if any; cite #11841 if PG path verified)

Other issues:
- (if any)
Tagsmytops, quality, srv-lifeline

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

vecirex

2026-09-30 18:10

administrator   ~0030051

Title bumped to tested tips (merchant 1.6.23->1.6.24, webui 1.6.43->1.6.46). cf. 0011805: stage test ok (resolved/fixed).

vecirex

2026-09-30 18:13

administrator   ~0030053

Please promote taler-merchant 1.6.24 and taler-merchant-webui 1.6.46 from trixie-testing to trixie. cf. 0011805 (resolved/fixed).

Florian Dold

2026-10-01 12:09

manager   ~0030057

Done.

vecirex

2026-10-01 13:50

administrator   ~0030063

Post-deployment report (lifeline / my.taler-ops.ch)

Landed:
- taler-merchant 1.6.23-0+trixie -> 1.6.24-0+trixie (joint apt with WebUI 1.6.46; related 0011803)
- Soft smoke after: /config build_version 1.6.24 / version 42:0:30; httpd + target + wirewatch active; /webui 200

upgrade.sh path (related #11841):
- mytops-admin-log at 4488fc1 on lifeline
- pg_ctlcluster restart + online assert passed (PG 17/main online after upgrade.sh exit 0)
- No post-upgrade PostgreSQL down incident (unlike 0011840)

Sign-off: post-deploy ok (vecirex)

Resolution: fixed (ready to close)

Issue History

Date ModifiedUsernameFieldChange
2026-09-18 10:13vecirexNew Issue
2026-09-18 10:13vecirexStatusnew => assigned
2026-09-18 10:13vecirexAssigned To => vecirex
2026-09-18 10:13vecirexStatusassigned => implementing
2026-09-18 10:35vecirexTag Attached: mytops
2026-09-18 10:35vecirexTag Attached: quality
2026-09-18 10:35vecirexTag Attached: srv-lifeline
2026-09-18 10:38vecirexCategorypaivana => deployment and operations
2026-09-18 10:38vecirexSummarydeploy/release taler-merchant (1.6.23) on my.taler-ops.ch => deploy taler-merchant (1.6.23) on my.taler-ops.ch
2026-09-18 10:52vecirexSeverityminor => feature
2026-09-30 18:07vecirexSummarydeploy taler-merchant (1.6.23) on my.taler-ops.ch => deploy taler-merchant (1.6.24) on my.taler-ops.ch
2026-09-30 18:10vecirexNote Added: 0030051
2026-09-30 18:13vecirexAssigned Tovecirex => Florian Dold
2026-09-30 18:13vecirexNote Added: 0030053
2026-10-01 12:09Florian DoldNote Added: 0030057
2026-10-01 12:09Florian DoldAssigned ToFlorian Dold => vecirex
2026-10-01 13:41vecirexDescription Updated
2026-10-01 13:50vecirexNote Added: 0030063
2026-10-01 13:50vecirexStatusimplementing => closed
2026-10-01 13:50vecirexResolutionopen => fixed