Skip to content

v1.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Oct 01:58
· 105 commits to master since this release
v1.5.0
dace490

Changes

  • Clock offset (proto v1.5.0). Each heartbeat (ReportStatus) measures the node's clock against the console's console_time: the offset is the middle of the request's round trip on the node's clock minus the console's time, positive when the node is ahead, off by at most half the round trip; heartbeats slower than 10 s do not measure. The next heartbeat reports it as clock_offset_millis; the console shows it on the node's details and raises node_clock_skew from its threshold (30 s by default).
  • Diagnostics socket (--diag-socket, default /run/edgeweir-node/diag.sock): a unix socket of the agent's user (0600), never TCP, serving the agent's status and the Go runtime's profiles. An empty value turns it off.
  • edgeweir-node diagnose: one line per check (ok, warn, fail, skip) for the identity, the node certificate, the console (an mTLS call with the node's identity), the clock (warn from 1 s, fail from 30 s), the running agent, the configuration and the data plane; exit code 1 on a fail, --json for the results and the agent's full status.
  • edgeweir-node pprof PROFILE: profile (CPU, --seconds, at most 120), trace, heap, allocs, goroutine, block, mutex or threadcreate from the running agent, to --output or a redirected standard output.

With an older console nothing changes: it sends no console_time, so the node reports no offset and diagnose skips the clock check.

Upgrade: use the console's node upgrade, or the install command with --version 1.5.0.

Changelog

  • dace490 build(proto): generate from proto/v1.5.0
  • 6e1348b build(proto): regenerate for the clock offset and console_time
  • 7693bad feat(agent): report the clock offset against console_time; diagnostics socket with status and pprof
  • 74a3286 feat(cli): diagnose and pprof; --diag-socket

Verify

cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github\.com/marvinli001/edgeweir-node/\.github/workflows/release\.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt
sha256sum --ignore-missing -c checksums.txt
gh attestation verify <artifact> --repo marvinli001/edgeweir-node
Assets 26
Loading