View Issue Details

IDProjectCategoryView StatusLast Update
0008293Talersandcastle (containerized demo deployment)public2024-08-28 21:30
ReporterFlorian Dold Assigned Todvn Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PriorityhighSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version0.13Fixed in Version0.13 
Summary0008293: put exchange master key into separate volume mount [estimate: 4h]
DescriptionThe master key should not change even if we nuke *everything* else, so it might make sense to put it into a different volume!
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

dvn

2024-06-27 23:08

reporter   ~0022751

I took several different approaches, most of which were trying to generalize the approach so that we could have a reusable function for making any file or directory persistent. I finally had the realization that it would be better to just simplify things and follow the preexisting pattern with the data directories but make it specific to the the exchange master key.

The solution I came up with is here: https://git.taler.net/sandcastle-ng.git/commit/?h=dvn0/master-key-volume&id=28f87e2290b2623c3bd16ac41c52b9f4abdf060b

It should migrate the key to the new persistent volume if it already exists, and if it's a new setup then it will put the key there to begin with.

dvn

2024-06-28 12:38

reporter   ~0022761

Merged into master here: https://git.taler.net/sandcastle-ng.git/commit/?id=3ae088af4b138878c97aa1295826c322daccf9c9

Issue History

Date ModifiedUsernameFieldChange
2024-01-30 23:51Florian DoldNew Issue
2024-01-30 23:51Florian DoldStatusnew => assigned
2024-01-30 23:51Florian DoldAssigned To => dvn
2024-03-05 10:23Florian DoldSummaryconsider putting exchange master key into separate volume => consider putting exchange master key and libeufin credentials into separate volume
2024-03-05 10:23Florian DoldSummaryconsider putting exchange master key and libeufin credentials into separate volume => consider putting exchange master key into separate volume
2024-03-05 10:24Florian DoldSummaryconsider putting exchange master key into separate volume => consider putting exchange master key and 2FA provider secrets (Telesign,...) into separate volume
2024-04-08 12:32dvnSummaryconsider putting exchange master key and 2FA provider secrets (Telesign,...) into separate volume => consider putting exchange master key into separate volume
2024-04-09 18:29dvnSummaryconsider putting exchange master key into separate volume => put exchange master key into separate volume mount
2024-04-12 16:10Christian GrothoffPrioritynormal => high
2024-04-12 16:10Christian GrothoffTarget Version0.10 => 0.11
2024-05-13 19:29Christian GrothoffTarget Version0.11 => 0.12
2024-06-24 00:52dvnSummaryput exchange master key into separate volume mount => put exchange master key into separate volume mount [estimate: 4h]
2024-06-26 16:09Christian GrothoffTarget Version0.12 => 0.13
2024-06-27 23:08dvnNote Added: 0022751
2024-06-28 12:38dvnStatusassigned => informing
2024-06-28 12:38dvnResolutionopen => fixed
2024-06-28 12:38dvnNote Added: 0022761
2024-08-26 20:30Christian GrothoffFixed in Version => 0.13
2024-08-28 21:30Christian GrothoffStatusinforming => closed