Mithril v2310.0

What's Changed

• Fix CI flakiness with ImmutableFileObserver(Missing) error by @jpraynaud in #733
• display better errors by @ghubertpalo in #746
• Update current documentation by @jpraynaud in #735
• Update dependencies by @jpraynaud in #736
• Enhance errors catching in end to end test by @jpraynaud in #747
• Fix 'UnregisteredInitializer' error on signer by @jpraynaud in #749
• Add always restart Cardano nodes in infra by @jpraynaud in #748
• Load era reader adapters from config by @jpraynaud in #751
• #738 create a producer/consumer event channel to monitor signers version by @ghubertpalo in #750
• helper for unsafe code by @curiecrypt in #722
• doc and naming corrected for dense mapping and weighting function by @curiecrypt in #754
• #742 send event message on signer registration by @ghubertpalo in #753
• #757 replace unixepoch with strftime by @ghubertpalo in #758
• Add era command in aggregator cli by @jpraynaud in #756
• #743 monitor stake distribution Vs Signer version by @ghubertpalo in #759
• Add dynamic matrix in CI for end to end tests by @jpraynaud in #761
• fix sqlite sprintf bug by @ghubertpalo in #763
• add warning when event can not send epoch by @ghubertpalo in #764
• Upgrade SQLite to 3.40 in aggregator infra by @jpraynaud in #766
• make signer warn when coming era is unsupported by @ghubertpalo in #768
• Fix client Docker image crash by @jpraynaud in #770
• Update dependencies by @jpraynaud in #771
• Test batch opening mtree by @curiecrypt in #773
• test for batch verify by @curiecrypt in #774
• Prepare run mainnet Mithril test network by @jpraynaud in #778
• Fix test Docker image workflow by @jpraynaud in #781
• Deploy era reader on chain by @jpraynaud in #775
• Fix Era Switch documentation by @jpraynaud in #785
• Fix test Docker image workflow by @jpraynaud in #784
• #665 handling errors better by @ghubertpalo in #776
• Fix Datum generation for era markers by @jpraynaud in #788

Full Changelog: 2306.0...2310.0

Crates Versions

Crate	Version
mithril-aggregator	0.2.27
mithril-client	0.2.9
mithril-common	0.2.22
mithril-signer	0.2.19
mithril-stm	0.2.4

Verify the authenticity of a downloaded asset

Detailed procedure to verify an asset

• Step 1: Identify the downloaded asset on your computer YOUR_ASSET_FILE
• Step 2: Download the signed checksum file from this link CHECKSUM.asc and save it in the same folder as the asset
• Step 3: In your terminal, go to the asset folder by running:

cd ***YOUR_ASSET_FOLDER***

• Step 4: Then verify the checksum of the asset by running:

sha256sum -c ./CHECKSUM.asc 2>/dev/null | grep ***YOUR_ASSET_FILE***

You must see:

./***YOUR_ASSET_FILE***: OK

• Step 5: Download the public key file from this link gpg-public.key and save it in the same folder as the asset
• Step 6: Then import the GPG public key:

gpg --import ./gpg-public.key

You must see something like:

gpg: key : public key "Input Output / Mithril <mithril@iohk.io>" imported
gpg: Total number processed: 1
gpg:               imported: 1

• Step 7: Then verify the GPG signature of the checksum file:

gpg --verify ./gpg-public.key ./CHECKSUM.asc

You must see something like:

gpg: Signature made Mon 05 Dec 2022 04:53:54 PM CET
gpg:                using RSA key 35EDE9D47BBA62A2F388E655899ACD26B8BCA0D2
gpg: Good signature from "Input Output / Mithril <mithril@iohk.io>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 35ED E9D4 7BBA 62A2 F388  E655 899A CD26 B8BC A0D2

The signature is valid if and only if:

• there is a line with gpg: Good signature from "Input Output / Mithril <mithril@iohk.io>"
• there is a line with Primary key fingerprint: 2AC0 7B11 8B23 1443 F544 2D0C 6E2C 1160 3E79 0021

• Step 8:
  If you successfully validated all the steps of this process, then you have successfully verified the authenticity of the asset ✔️
  If not, contact us at [mithril@iohk.io] and let us know of the outcome of your run of this process ⚠️