v0.954.0

What's Changed

• feat(prs-556): enforce ABI trust posture in tvc-deploy and grpc-server by @pepe-anchor in #455

Full Changelog: v0.953.0...v0.954.0

TVC Deployment Details

• Container Image URL: ghcr.io/anchorageoss/parser_app:v0.954.0@sha256:1753a9bb34177fe2ba78bc43a1b3b39ec1f04d7bfc4ae9b359f10628838a5b2c
• Executable path: /parser_app
• Expected Executable Digest: 2d72ae2bc5326d0a40a3d44eb448911555e9eef38d7476ab27f76cd8319073dd
• QOS Version: 0.12.0

Verify the executable digest

export CONTAINER_URL="ghcr.io/anchorageoss/parser_app:v0.954.0@sha256:1753a9bb34177fe2ba78bc43a1b3b39ec1f04d7bfc4ae9b359f10628838a5b2c"
cid=$(docker create "$CONTAINER_URL" /bin/true)
docker cp "$cid:/parser_app" /tmp/binary
docker rm "$cid"
sha256sum /tmp/binary

Kick off deployment with tvc

Generate a config template, paste these values into the matching keys, then create the deployment. appId and any pull-secret fields are environment-specific and must be filled in by the operator.

tvc deploy init -o tvc-deploy.json
# Edit tvc-deploy.json to set:
#   "pivotContainerImageUrl": "ghcr.io/anchorageoss/parser_app:v0.954.0@sha256:1753a9bb34177fe2ba78bc43a1b3b39ec1f04d7bfc4ae9b359f10628838a5b2c"
#   "pivotPath": "/parser_app"
#   "expectedPivotDigest": "2d72ae2bc5326d0a40a3d44eb448911555e9eef38d7476ab27f76cd8319073dd"
#   "qosVersion": "0.12.0"
#   "appId": "<env-specific>"
#   "pivotArgs": ["--host-ip", "0.0.0.0", "--host-port", "3000", "--accept-unsigned-abis"]
#     ^ or "--accept-signatures-from-pubkey", "<hex-secp256k1-pubkey>" to reject unsigned ABI mappings
tvc deploy create tvc-deploy.json