The Wallet team merged 14 PRs this month:
CHANGELOG:
Switch dump validators to Nexus
Waits for other PRs from #2086
CHANGELOG:
Remove Oasis Scan API v1
Goal is to copy/paste Nexus spec without any manual tweaks in the future by using type mappings for generating API (resolves issues like e132d2b).
CHANGELOG:
Update Nexus API bindings
- update spec - use type mappings for generating API
Follows removed v1 tests https://github.com/oasisprotocol/wallet/pull/2105/files#diff-11a34149a89dfa063e0fa602ac697930f79743d1d34ad1ca982ead308bbdbef6
CHANGELOG:
Migrate oasis scan v1 vendor tests to v2
Closes #2090
CHANGELOG:
Switch to Nexus mocks in Playwright
Supersedes #2094
Extracted from #2084
Related to #2084 (comment)
Previous flow:
New flow:
CHANGELOG:
Refactor how extension requests ledger access (don't rely on state sync)
Needed for #2086
CHANGELOG:
E2E tests clean up
CHANGELOG:
Fix extracting translations
Move tutorial from #1944 to Wallet mobile docs and add notes about certificate validity flag.
CHANGELOG:
Explain Android app signing key configuration and secret management
Needed for #2086
CHANGELOG:
Include Nexus in readme
Closes #2108
CHANGELOG:
Switch to Oasis Explorer when Nexus backend is used
Mitigates StrandHogg attack, due to vulnerability on Android 10 or lower.
https://developer.android.com/privacy-and-security/risks/strandhogg#mitigations
CHANGELOG:
android: Bump min SDK version
Waits for Nexus and nexus.oasis.io DNS switch
CHANGELOG:
Use Nexus API as ROSE Wallet backend
Use official Oasis Network indexer as ROSE Wallet backend (#2098)
Add support for Oasis Scan API v2 as a backend option for Wallet (#2075)
Add support for Nexus API as a backend option for Wallet (#2076)
Prevent AddressBox in expanded row from resizing whole validators table (#2035)
Fix expanding table rows on non-plaintext cell (#2040)
Don't destroy Transak iframe every time pending transactions refresh (#2041)
Prevent importing from mnemonic when offline (#2061)
Guide users who paste Eth private key into Consensus private key input (#2069)
Discourage mistaken ParaTime deposits into Cipher (#2082)
Fix Oasis Scan V2 testnet API url (#2106)
Switch to Oasis Explorer when Nexus backend is used (#2109)
android: Bump min SDK version (#2110)
Make Chrome Web Store screenshots using Playwright (#2044)
Update Features section in README (#2047)
Explain Android app signing key configuration and secret management (#2097)
Include Nexus in readme (#2100)
Harden github workflow against injection (#2033)
Rename repository from oasis-wallet-web to wallet (#2042)
Delay GetChainContext request until needed (#2062)
Delay GetEpoch request until needed (#2064)
Use entity address to handle validators fallback (#2078)
Test hardcoded Paratime withdraw gas limit (#2081)
Override API in e2e tests to allow quick backend switch (#2089)
Switch to Nexus mocks in Playwright (#2096)
Switch dump validators to Nexus (#2102)
The Cli team merged 11 PRs this month:
Also add rofl artifacts-upgrade for easy upgrades and bump default container runtime to rofl-containers v0.3.4.
Closes #273.
This makes it easier to audit apps.
This makes it faster to catch simple errors before deployment.
This PR adds build-windows cross-compile option to Makefile and updates .goreleaser.yaml with windows build.
This PR adds oasis.exe rule to Makefile.
Followup to #342
needed for oasisprotocol/docs#1058
When testing #344 I realized the configuration directory is Local, not Roaming by default. Tested on Win10 64-bit.
Full Changelog: v0.10.3...v0.10.4
The number of daily transactions on Sapphire Mainnet fluctuated between 16,488 and 93,609. The monthly average in January was 35,510 transactions per day and was 56% higher compared to the last month (22,767 transactions). The daily maximum was 93,609 transactions on 17 January (compared to 62,058 the last month on 26 December).
| date | all |
|---|---|
| 2025-01-01 | 26,499 |
| 2025-01-02 | 71,363 |
| 2025-01-03 | 44,545 |
| 2025-01-04 | 37,355 |
| 2025-01-05 | 19,630 |
| 2025-01-06 | 22,451 |
| 2025-01-07 | 16,777 |
| 2025-01-08 | 16,488 |
| 2025-01-09 | 55,533 |
| 2025-01-10 | 66,357 |
| 2025-01-11 | 26,715 |
| 2025-01-12 | 20,571 |
| 2025-01-13 | 17,225 |
| 2025-01-14 | 17,209 |
| 2025-01-15 | 17,954 |
| 2025-01-16 | 62,211 |
| 2025-01-17 | 93,609 |
| 2025-01-18 | 35,191 |
| 2025-01-19 | 19,053 |
| 2025-01-20 | 17,426 |
| 2025-01-21 | 16,863 |
| 2025-01-22 | 17,532 |
| 2025-01-23 | 83,143 |
| 2025-01-24 | 61,361 |
| 2025-01-25 | 27,348 |
| 2025-01-26 | 20,134 |
| 2025-01-27 | 20,429 |
| 2025-01-28 | 17,256 |
| 2025-01-29 | 17,041 |
| 2025-01-30 | 43,653 |
| 2025-01-31 | 71,894 |
| 2025-02-01 | 919 |
The number of daily transactions on Emerald Mainnet fluctuated between 2,165 and 5,567. The monthly average in January was 3,413 transactions per day and was 8% lower compared to the last month (3,696 transactions). The daily maximum was 5,567 transactions on 29 January (compared to 5,577 the last month on 9 December).
| date | all |
|---|---|
| 2025-01-01 | 2,165 |
| 2025-01-02 | 2,510 |
| 2025-01-03 | 2,391 |
| 2025-01-04 | 2,319 |
| 2025-01-05 | 2,355 |
| 2025-01-06 | 2,775 |
| 2025-01-07 | 2,942 |
| 2025-01-08 | 2,455 |
| 2025-01-09 | 2,692 |
| 2025-01-10 | 3,111 |
| 2025-01-11 | 3,417 |
| 2025-01-12 | 3,366 |
| 2025-01-13 | 4,388 |
| 2025-01-14 | 3,477 |
| 2025-01-15 | 3,511 |
| 2025-01-16 | 3,738 |
| 2025-01-17 | 3,513 |
| 2025-01-18 | 3,963 |
| 2025-01-19 | 4,630 |
| 2025-01-20 | 4,756 |
| 2025-01-21 | 4,040 |
| 2025-01-22 | 3,589 |
| 2025-01-23 | 3,612 |
| 2025-01-24 | 3,540 |
| 2025-01-25 | 3,429 |
| 2025-01-26 | 3,322 |
| 2025-01-27 | 3,792 |
| 2025-01-28 | 3,421 |
| 2025-01-29 | 5,567 |
| 2025-01-30 | 3,535 |
| 2025-01-31 | 3,480 |
| 2025-02-01 | 139 |
{{NODE_STATS mainnet}}
No major outages were reported for Oasis foundation-provided services in January. A few-minutes downtimes were encountered by the ... You can check out the details on the Mainnet status page.
The number of daily transactions on Sapphire Testnet fluctuated between 7,130 and 9,157. The monthly average in January was 8,241 transactions per day and was 8% higher compared to the last month (7,656 transactions). The daily maximum was 9,157 transactions on 22 January (compared to 9,096 the last month on 11 December).
| date | all |
|---|---|
| 2025-01-01 | 7,130 |
| 2025-01-02 | 7,655 |
| 2025-01-03 | 7,763 |
| 2025-01-04 | 7,612 |
| 2025-01-05 | 7,466 |
| 2025-01-06 | 7,691 |
| 2025-01-07 | 7,614 |
| 2025-01-08 | 7,776 |
| 2025-01-09 | 7,685 |
| 2025-01-10 | 9,137 |
| 2025-01-11 | 7,492 |
| 2025-01-12 | 7,707 |
| 2025-01-13 | 7,940 |
| 2025-01-14 | 7,950 |
| 2025-01-15 | 8,556 |
| 2025-01-16 | 8,762 |
| 2025-01-17 | 8,060 |
| 2025-01-18 | 7,471 |
| 2025-01-19 | 7,508 |
| 2025-01-20 | 8,092 |
| 2025-01-21 | 8,676 |
| 2025-01-22 | 9,157 |
| 2025-01-23 | 8,968 |
| 2025-01-24 | 8,980 |
| 2025-01-25 | 8,864 |
| 2025-01-26 | 8,934 |
| 2025-01-27 | 8,981 |
| 2025-01-28 | 8,972 |
| 2025-01-29 | 9,065 |
| 2025-01-30 | 8,952 |
| 2025-01-31 | 8,841 |
| 2025-02-01 | 356 |
The number of daily transactions on Emerald Testnet fluctuated between 2,142 and 3,511. The monthly average in January was 3,173 transactions per day and was 7% lower compared to the last month (3,395 transactions). The daily maximum was 3,511 transactions on 10 January (compared to 3,576 the last month on 25 December).
| date | all |
|---|---|
| 2025-01-01 | 3,131 |
| 2025-01-02 | 2,186 |
| 2025-01-03 | 2,152 |
| 2025-01-04 | 2,149 |
| 2025-01-05 | 2,142 |
| 2025-01-06 | 2,792 |
| 2025-01-07 | 3,323 |
| 2025-01-08 | 3,349 |
| 2025-01-09 | 3,391 |
| 2025-01-10 | 3,511 |
| 2025-01-11 | 3,312 |
| 2025-01-12 | 3,291 |
| 2025-01-13 | 3,374 |
| 2025-01-14 | 3,313 |
| 2025-01-15 | 3,319 |
| 2025-01-16 | 3,330 |
| 2025-01-17 | 3,324 |
| 2025-01-18 | 3,379 |
| 2025-01-19 | 3,431 |
| 2025-01-20 | 3,468 |
| 2025-01-21 | 3,380 |
| 2025-01-22 | 3,319 |
| 2025-01-23 | 3,370 |
| 2025-01-24 | 3,326 |
| 2025-01-25 | 3,303 |
| 2025-01-26 | 3,300 |
| 2025-01-27 | 3,386 |
| 2025-01-28 | 3,331 |
| 2025-01-29 | 3,329 |
| 2025-01-30 | 3,322 |
| 2025-01-31 | 3,326 |
| 2025-02-01 | 137 |
{{NODE_STATS testnet}}
No major outages were reported for Oasis foundation-provided services in January. A few-minutes downtimes were encountered by the ... You can check out the details on the Testnet status page.
The Nexus team merged 12 PRs this month:
CHANGELOG:
Enable metadata_registry in the E2E regression tests
TODO:
Example Raw Body for rofl.register transaction on localnet, with these canges:
{
"app": "rofl1qqn9xndja7e2pnxhttktmecvwzz0yqwxsquqyxdf",
"ect": {
"capability_tee": {
"attestation": {
"height": 38,
"quote": {
"pcs": {
"quote": {
"header": {
"attestation_key_type": 2,
"qe_vendor_id": "k5pyM/ecTKmUCg2zlX8GBw==",
"tee_type": 0,
"version": 3
},
"report_body": {
"enclave_identity": "0+tTmlVjUvP0eIHXH7Dld3svPppCUdKDwYxnzplndLea/8+uR7hI7CyvHEm0soNTHhzEJfk1grNoBuUqQ9eNGg==",
"report_data": "m7ZsbFJbbqijr8ZNSnDv+fGnVaitH4byquxfMAwI0CIbhl6vpNqh7aI8+GRDmUqfWoRszOMNyePxwuWzm629VA=="
}
},
"tcb": {
"certs": "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",
"qe_id": {
"enclaveIdentity": {
"attributes": "11000000000000000000000000000000",
"attributesMask": "FBFFFFFFFFFFFFFF0000000000000000",
"id": "QE",
"issueDate": "2025-01-16T06:26:43Z",
"isvprodid": 1,
"miscselect": "00000000",
"miscselectMask": "FFFFFFFF",
"mrsigner": "8C4F5775D796503E96137F77C68A829A0056AC8DED70140B081B094490C57BFF",
"nextUpdate": "2025-02-15T06:26:43Z",
"tcbEvaluationDataNumber": 18,
"tcbLevels": [
{
"tcb": {
"isvsvn": 8
},
"tcbDate": "2024-11-13T00:00:00Z",
"tcbStatus": "UpToDate"
},
{
"advisoryIDs": [
"INTEL-SA-00615"
],
"tcb": {
"isvsvn": 6
},
"tcbDate": "2021-11-10T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00477",
"INTEL-SA-00615"
],
"tcb": {
"isvsvn": 5
},
"tcbDate": "2020-11-11T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00334",
"INTEL-SA-00477",
"INTEL-SA-00615"
],
"tcb": {
"isvsvn": 4
},
"tcbDate": "2019-11-13T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00219",
"INTEL-SA-00293",
"INTEL-SA-00334",
"INTEL-SA-00477",
"INTEL-SA-00615"
],
"tcb": {
"isvsvn": 2
},
"tcbDate": "2019-05-15T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00202",
"INTEL-SA-00219",
"INTEL-SA-00293",
"INTEL-SA-00334",
"INTEL-SA-00477",
"INTEL-SA-00615"
],
"tcb": {
"isvsvn": 1
},
"tcbDate": "2018-08-15T00:00:00Z",
"tcbStatus": "OutOfDate"
}
],
"version": 2
},
"signature": "ac769865f920e1d6c3a6c798ca1d60b65b60c94be7be69ca588237fa891b06b26f062bda5ebb628f8a6e2c9ec033a374375c0ab9932a9a999f9ee57404ef036c"
},
"tcb_info": {
"signature": "bcff0138152b32f50b7425968209b316a0f24323a8939ae7fd1c16e21e0e9f83396815247ca3d7edd5093fd7df79938ca61a35a09752166cf1b554d77bf59306",
"tcbInfo": {
"fmspc": "00606a000000",
"id": "SGX",
"issueDate": "2025-01-16T07:04:11Z",
"nextUpdate": "2025-02-15T07:04:11Z",
"pceId": "0000",
"tcbEvaluationDataNumber": 18,
"tcbLevels": [
{
"advisoryIDs": [
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 15,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 15,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 1
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2024-11-13T00:00:00Z",
"tcbStatus": "SWHardeningNeeded"
},
{
"advisoryIDs": [
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 15,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 15,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2024-11-13T00:00:00Z",
"tcbStatus": "ConfigurationAndSWHardeningNeeded"
},
{
"advisoryIDs": [
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 14,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 14,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 1
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2024-03-13T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 14,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 14,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2024-03-13T00:00:00Z",
"tcbStatus": "OutOfDateConfigurationNeeded"
},
{
"advisoryIDs": [
"INTEL-SA-00960",
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 12,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 12,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 1
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2023-08-09T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 12,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 12,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2023-08-09T00:00:00Z",
"tcbStatus": "OutOfDateConfigurationNeeded"
},
{
"advisoryIDs": [
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 11,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 11,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 1
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2023-02-15T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00657",
"INTEL-SA-00767",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 11,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 11,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2023-02-15T00:00:00Z",
"tcbStatus": "OutOfDateConfigurationNeeded"
},
{
"advisoryIDs": [
"INTEL-SA-00657",
"INTEL-SA-00730",
"INTEL-SA-00738",
"INTEL-SA-00767",
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 7,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 9,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 1
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2022-08-10T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00657",
"INTEL-SA-00730",
"INTEL-SA-00738",
"INTEL-SA-00767",
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103",
"INTEL-SA-00615"
],
"tcb": {
"pcesvn": 13,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 7,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 9,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2022-08-10T00:00:00Z",
"tcbStatus": "OutOfDateConfigurationNeeded"
},
{
"advisoryIDs": [
"INTEL-SA-00586",
"INTEL-SA-00614",
"INTEL-SA-00615",
"INTEL-SA-00657",
"INTEL-SA-00730",
"INTEL-SA-00738",
"INTEL-SA-00767",
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103"
],
"tcb": {
"pcesvn": 11,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 4,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 4,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2021-11-10T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00477",
"INTEL-SA-00586",
"INTEL-SA-00614",
"INTEL-SA-00615",
"INTEL-SA-00657",
"INTEL-SA-00730",
"INTEL-SA-00738",
"INTEL-SA-00767",
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103"
],
"tcb": {
"pcesvn": 10,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 4,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 4,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2020-11-11T00:00:00Z",
"tcbStatus": "OutOfDate"
},
{
"advisoryIDs": [
"INTEL-SA-00106",
"INTEL-SA-00115",
"INTEL-SA-00135",
"INTEL-SA-00203",
"INTEL-SA-00220",
"INTEL-SA-00233",
"INTEL-SA-00270",
"INTEL-SA-00293",
"INTEL-SA-00320",
"INTEL-SA-00329",
"INTEL-SA-00381",
"INTEL-SA-00389",
"INTEL-SA-00477",
"INTEL-SA-00586",
"INTEL-SA-00614",
"INTEL-SA-00615",
"INTEL-SA-00657",
"INTEL-SA-00730",
"INTEL-SA-00738",
"INTEL-SA-00767",
"INTEL-SA-00828",
"INTEL-SA-00837",
"INTEL-SA-00960",
"INTEL-SA-01079",
"INTEL-SA-01103"
],
"tcb": {
"pcesvn": 5,
"sgxtcbcomponents": [
{
"category": "BIOS",
"svn": 4,
"type": "Early Microcode Update"
},
{
"category": "OS/VMM",
"svn": 4,
"type": "SGX Late Microcode Update"
},
{
"category": "OS/VMM",
"svn": 3,
"type": "TXT SINIT"
},
{
"category": "BIOS",
"svn": 3
},
{
"svn": 255
},
{
"svn": 255
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
},
{
"svn": 0
}
]
},
"tcbDate": "2018-01-04T00:00:00Z",
"tcbStatus": "OutOfDate"
}
],
"tcbType": 0,
"version": 3
}
}
}
}
},
"signature": "kcJ6Y0qYPq71BTFRfR0qg1q+rYD2YQUVsWT1wt5h08IL/+6xeAX+ntIBehZIC0ahNR2th+Y3T9c2m27grNWMDQ=="
},
"hardware": 0,
"rak": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="
},
"node_endorsement": {
"public_key": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
"signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
}
},
"expiration": 4,
"extra_keys": [
{
"secp256k1": "AhmxMMZcvwvZOT5PzWzENnwoejXIFz7/bE/pZlJ7NdbL"
}
]
}
CHANGELOG:
runtime: Add conditional SGX attestation parsing for rofl.Register txs
After the latest Explorer release we can clean up #798 and remove unused files.
CHANGELOG:
Remove deprecated account-named folder
Fixes #884
The existing sender_0, sender_0_eth, and nonce_0 are deprecated and will be removed in the future.
CHANGELOG:
api/runtime/transactions: Add signers field to response
Signers contain information about the transaction signers. Existing sender_0, sender_0_eth and nonce_0 fields are deprecated and will be removed in future.
Fixes #886
API endpoint returning a single block by height was using a separate code path to fetch the blocks which lead to the regression mentioned in the above issue.
This is now fixed so that a single code path is used when fetching either a single or multiple consensus blocks. This also resolves the issue.
CHANGELOG:
api/consensus/block: Fix response when querying a single block
When querying a single block by height the response was missing the proposer and signers fields.
Fixes/mitigations for:
Fixes:
The ix_transactions_method_height was missing the tx_index, so the query optimizer didn't do the top-n optimization for consensus related accounts query with filters on method. The indexes on both tables now match on the fields and ordering, so this should be fixed.
For the https://nexus.oasis.io/v1/consensus/accounts/oasis1qrg3zwe9gvkvs6dvrytr3dedyyjyxp6kgv8u2m2m counting the huge number of related transactions appears to be problematic:
nexus/storage/client/queries/queries.go
Lines 218 to 222 in 0ef5fe5
The last query is using the indexes as expected, it just takes long due the table being huge. Hopefully, the increased timeout helps. In future we should check if there's any db setting optimizations to be done.
CHANGELOG:
storage/consensus: Update indexes to better serve the related accounts queries
Now that we have released consensus support, we no longer have to mark these endpoints as Experimental / deprecated
CHANGELOG:
openapi: remove experimental/deprecated markers from consensus endpoints
v3 will reach EOL on January 31st
CHANGELOG:
Update actions/upload-artifact action to v4
Just a minor update: https://github.com/akrylysov/pogreb/releases/tag/v0.10.2
CHANGELOG:
deps: update pogreb to v0.10.2
For a list of changes in this release, see the Change Log.
NOTE: If you are upgrading from an earlier release, please carefully review
the Change Log for Removals and Breaking changes.
The Explorer team merged 17 PRs this month:
This PR exposes the runtime tx method search feature added to Nexus in oasisprotocol/nexus#824.
It adds support for filtering runtime TX lists for method type.
Depends on:
It also adds the same feature for consensus TX lists, for which the Nexus support has been there for a while.
It works on all consensus and runtime dashboards, transaction list, also including transactions for blocks, accounts and validators.
I suggest reviewing the PR commit by commit, because there are multiple semi-independent small changes.
Or this, when there are no results:
CHANGELOG:
Add support for filtering latest TX list for method type
This PR adds support for merging all networks in the layer selector,
so that instead of a hierarchical menu, we get a flat one.
On the Pontus-X instance, using this feature, instead of this:
and this:
We can have this:
Please note that you only want to activate this if you don't have
layers that are named the same on multiple networks.
(If you do, you can override names using the spacialScopeNames
config option in config.ts.)
Merging this PR doesn't change behavior, unless to turn the mergeNetworksInLayerSelector
flag from false to true.
CHANGELOG:
Add support for merging all networks in the layer selector
Created by https://github.com/oasisprotocol/explorer/blob/master/.github/workflows/generate-openapi.yml
If CI actions and checks don't run in this PR: close it and reopen.
https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
CHANGELOG:
Update Nexus API bindings
Created by https://github.com/oasisprotocol/explorer/blob/master/.github/workflows/generate-openapi.yml
Available new data:
sort_by argmethod.proposed_by, which is a staking addresstimestamp nowCHANGELOG:
Update to latest Nexus API bindings
Due to the length of the ROFL raw data, core team requested to show copy to clipboard button on hover.
CHANGELOG:
Add optional floating copy to clipboard button to JSON code preview
The only change here is limit: API_MAX_TOTAL_COUNT. Without it limit defaults to 100 which means we are not showing names for all validators and we are not able to find them by name.
sample TO row, master
https://explorer.oasis.io/mainnet/consensus/tx/fa2ff37ed0e231ce1845d7f43b8373056907483af8bebdae116c4003d1776e79
CHANGELOG:
Set API limit when fetching data for named validators
Sometimes a TX has multiple signers. In that case, we should show them all in the "from" field in the TX details, like this:
Solves:
Live sample here.
Depends on:
CHANGELOG:
Add support for displaying multiple signers of runtime transactions
Now we can hide different layers on different networks.
(This is required for the Pontus-X deployment)
CHANGELOG:
Support for more granular configuration for hiding layers
Consider both encryption_envelope and oasis_encryption_envelope when displaying runtime TXs.
See #1694 for context.
CHANGELOG:
Correctly display encryption data for oasis-style encrypted transactions
CHANGELOG:
Fine-tune when to display account names
When displaying consensus block details, we should also include a link to the validator that has proposed the block.
Other explorers do that, too.
Please note that this data has been already been displayed in the latest block list, like this:
It was only missing from the individual block detail pages, because it was not served by the backend, but that limitation is now gone, so we can display it.
Depends on:
CHANGELOG:
Show proposer link in consensus block details
Created by https://github.com/oasisprotocol/explorer/blob/master/.github/workflows/generate-openapi.yml
If CI actions and checks don't run in this PR: close it and reopen.
https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
CHANGELOG:
Update Nexus API bindings
Closes #1715
CHANGELOG:
Fix display of consensus transaction fee
This fix has been in production on the Pontus-X branch (and instance) for a while, now pulling it to the master branch.
CHANGELOG:
Fix case sensitivity in Pontus-X account name resolution
Some pages of the documentation have moved - see oasisprotocol/docs#1058
This PR updates the links in Explorer, so that we are not pointing to 404 pages.
CHANGELOG:
Update some broken links
CHANGELOG:
Fix regression on global search 404 page
Currently, the Pontus-X layer is enabled and visible in the layer selector, because the Pontus-X Testnet runtime is running on the Oasis Testnet, and we want to expose it to the public.
However, we don't have a Pontus-X mainnet, and there are no immediate plans to have one, so in the layer selector for the mainnet, the Pontus-X option is disabled; it says "coming soon".
I think it is not useful to have this disabled option here (on the mainnet), but until now, we couldn't hide it, because we wanted to see this layer on testnet.
However, we have recently gained the ability to show/hide different layers (in the layer selector) per different network, so now we can hide it from the mainnet, while keeping it from the testnet. This commit does that.
CHANGELOG:
Hide the disabled Pontus-X option from the layer selector on mainnet
The Oasis Sdk team merged 10 PRs this month:
needed for oasisprotocol/docs#1058
The Sapphire Paratime team merged 7 PRs this month:
dependency to oasisprotocol/docs#1058
Fixes #338
Solidity sapphire-contracts related updates:
calldata bearer to bytes bearer so it can be passed as empty, if none available (e.g. in case you want to call a common isContractOwner() modifier in your setter methods where you don't use SIWE, but msg.sender directly)bearer to authToken because the bearer token uses a specialized format which we don'tAuth before auth-related errors so they are more unique in the complex contractsCould we adopt ERC-2771 naming conventions and flow? Replacing authMsgSender() with _msgSender is one option. What about appending the token after the calldata? ERC-2771 uses this for transactions, but would this work for the queries too? Can you use ERC-2771 seamlessly like writing myContract.getSomeSensitiveInfo() in your client code without special hacks involving appending the authToken at the end of callData manually each time?
This PR:
encryptCallData() in gasless.md to generate encrypted gasless transactionencryptCallData() to examples/onchain-signer and tests it in combination with the wrapped/unwrapped provider and encrypted/plain gasless tx.Fixes #463.
This PR adds python client documentation to https://api.docs.oasis.io/
Update library to remove the no longer maintained testnets.
Fix incorrect chain ID.
The Cipher Paratime team merged 1 PRs this month:
1 new releases of cipher-paratime were made this month:The Oasis Web3 Gateway team merged 5 PRs this month:
In total, 5 pull requests were merged in January.The Docs team merged 17 PRs this month:
fixes some missing redirects, caused of the renaming to build
Here we describe how to enable monitoring for Oasis Web3 Gateway and list the available Prometheus metrics.
This PR:
After testing the SGX support on IBM Cloud we are adding the instructions for configuring DCAP on IBM Cloud.
Adding Consensus Oasis Explorer links for Mainnet and Testnet to docs/build/README.mdx.
Clarify extent of Oasis operated testnet infrastructure.
While trying out State Sync as a way to quickly bootstrap a full Oasis node, I came across two things that need updates:
oasis-4/Eden upgrade), andThe Playground team merged 4 PRs this month:
Adds 7 projects from this year's Privacy4Web3 hackathon.
Partial fix for #86.
The Demo Starter team merged 1 PRs this month:
In total, 1 pull requests were merged in January.The Dapp Votee team merged 1 PRs this month:
v3 will reach EOL on January 31st
The Oasis Core team merged 17 PRs this month:
Until now, all components available for a runtime were upgraded simultaneously. The upgrade first warmed up the upcoming versions, and once they became active, the old versions were replaced with the new ones. This was not the best as components were upgraded, even if the version hasn't changed.
Now, each component can be upgraded independently. RONL components are upgraded at the specified epoch, while ROFL components are upgraded immediately.
Closes:
We will address the attached (system) ROFL components later in:
All users have migrated from the old config format, so this command is no longer necessary.
Closes #5991.
CHANGELOG:
go/oasis-node/cmd: Remove config migrate command
All users have migrated from the old config format, so this command is no longer necessary.
Refactored registry and added cleanup on startup:
CHANGELOG:
go/runtime/bundle: Cleanup bundles on startup
master) of not being able to remove runtime from the configuration (see #5976 (comment))Save on disk usage/ease the maintenance.
.buildkite/scripts/test_e2e.sh --scenario e2e.runtime.runtime-upgradeTrying to remove the bundle registry dependency from the createProvisioner function, as nodes should generally not have any bundles stored locally upon their initial startup.
These changes also decouple the creation of provisioners from TEE selection. Previously, only client nodes could choose the TEE in which a component would run. Now, node operators can specify the TEE for each component, provided the component supports the chosen TEE. If no TEE is specified, it is automatically selected, with TDX and SGX taking precedence over ELF.
How to configure nonSGX client:
runtime:
paths: # Can be replaced with bundle repository url.
- {{ runtime_orc_path }}
runtimes:
- id: {{ runtime_id }}
components:
- id: ronl
tee: none # Do not run in SGX or TDX!How to configure SGX client:
runtime:
paths: # Can be replaced with bundle repository url, if you also specify runtime ids.
- {{ runtime_orc_path }}
sgx_loader: /node/bin/oasis-core-runtime-loaderHow to mock SGX:
runtime:
paths: # Can be replaced with bundle repository url, if you also specify runtime ids.
- {{ runtime_orc_path }}
debug_mock_tee: trueCHANGELOG:
go/oasis-test-runner: Generalize OASIS_UNSAFE_MOCK_SGX flag
Flag OASIS_UNSAFE_MOCK_SGX was renamed to OASIS_UNSAFE_MOCK_TEE.
Closes #5999
CHANGELOG:
go/runtime/host/tdx: Add support for persistent image overlay
Maybe this will be useful in the future. I’m not sure yet and don’t want to throw away the changes.
Bump golangci-lint to 1.63.4
I only rename interface parameter names and some public methods' returned named values. This does not change the signature of functions so should not be breaking. Technically, if there would be tooling build around this, e.g. reflection, this would be breaking for the tooling. I don't think we have such clients, nor would this be breaking for the actual network etc...
CHANGELOG:
Bump golangci-lint to 1.63.4
The current solution for handling legacy manifest version updated the RONL component version after the bundle was opened. This was not the best solution as that changed the manifest hash. Furthermore, if the manager read the manifest directly from the exploded data directory, the RONL component version did't not change, causing problems if the node was restarted with cached bundles.
Removing context.Background().
Renaming also repository to registry, as the URL doesn't necessary point to a repository.
Fixes #6023
CHANGELOG:
go/runtime/host: Introduce a runtime watchdog
Currently not used anywhere yet, but will be used later on. Adding it in early so that the runtime build side (e.g. Oasis CLI) can use it.
CHANGELOG:
go/runtime/bundle: Add initial GPU-related resources
The Oasis Boot team merged 5 PRs this month:
New Podman versions have been backported from latest master of meta-virtualization repo.
This allows more advanced setups like persistent storage that uses keys obtained from the on-chain KMS after successful registration.
The following artifacts are included in this release:
ovmf.tdx.fd contains the virtual firmware that performs early boot of a TD.stage1.bin contains the TDX-enabled Stage 1 Linux kernel and initramfs that boot into the first Stage 2 volume which should be a dm-verity device containing a specific layout and a squashfs filesystem with configuration parameters passed via cmdline.stage2-basic.tar.bz2 contains a basic Stage 2 rootfs template that can be used to run a simple Oasis runtime.stage2-podman.tar.bz2 contains a Stage 2 rootfs template that can be used to run Podman containers.All published images are built deterministically, so building locally you should obtain binaries with the following SHA256 hashes:
db47100a7d6a0c1f6983be224137c3f8d7cb09b63bb1c7a5ee7829d8e994a42f ovmf.tdx.fd
029255ff97cd0e6e3be04372578e7c980a8b8c0138b8153afc047cca98fe6008 stage1.bin
2dfbc01d62744052afa95feb737d5a0d6a68e2b58d71743751c4e3fc5faf4d36 stage2-basic.tar.bz2
d84e0ca961fb0913b73a50ed90eb743af24b3d0acecdbe2594650e2801b41171 stage2-podman.tar.bz2
Full Changelog: v0.2.0...v0.3.0
The following artifacts are included in this release:
ovmf.tdx.fd contains the virtual firmware that performs early boot of a TD.stage1.bin contains the TDX-enabled Stage 1 Linux kernel and initramfs that boot into the first Stage 2 volume which should be a dm-verity device containing a specific layout and a squashfs filesystem with configuration parameters passed via cmdline.stage2-basic.tar.bz2 contains a basic Stage 2 rootfs template that can be used to run a simple Oasis runtime.stage2-podman.tar.bz2 contains a Stage 2 rootfs template that can be used to run Podman containers.All published images are built deterministically, so building locally you should obtain binaries with the following SHA256 hashes:
db47100a7d6a0c1f6983be224137c3f8d7cb09b63bb1c7a5ee7829d8e994a42f ovmf.tdx.fd
b2a7e4b92b6d41c5ac21b3291d740a3fc07551af96faba64439f6628101e2096 stage1.bin
f0f2fab9747584258ed9292417bea4e4df75fb8d5e0ecd1653269d65914d1e8a stage2-basic.tar.bz2
4239991c742c189f9f6949e597276e9ae5972768c4bfb5108190565e2addf47e stage2-podman.tar.bz2
Full Changelog: v0.3.0...v0.3.1
The following artifacts are included in this release:
ovmf.tdx.fd contains the virtual firmware that performs early boot of a TD.stage1.bin contains the TDX-enabled Stage 1 Linux kernel and initramfs that boot into the first Stage 2 volume which should be a dm-verity device containing a specific layout and a squashfs filesystem with configuration parameters passed via cmdline.stage2-basic.tar.bz2 contains a basic Stage 2 rootfs template that can be used to run a simple Oasis runtime.stage2-podman.tar.bz2 contains a Stage 2 rootfs template that can be used to run Podman containers.All published images are built deterministically, so building locally you should obtain binaries with the following SHA256 hashes:
db47100a7d6a0c1f6983be224137c3f8d7cb09b63bb1c7a5ee7829d8e994a42f ovmf.tdx.fd
539f25c66a27b2ca3c6b4d3333b88c64e531fcc96776c37a12c9ce06dd7fbac9 stage1.bin
72c84d2566959799fdd98fae08c143a8572a5a09ee426be376f9a8bbd1675f2b stage2-basic.tar.bz2
fca9a2e3e0cccc2a16e97b3eace9d382928a9ad9757870a1a91db4682fa4bc7b stage2-podman.tar.bz2
Full Changelog: v0.3.1...v0.3.2
The following artifacts are included in this release:
ovmf.tdx.fd contains the virtual firmware that performs early boot of a TD.stage1.bin contains the TDX-enabled Stage 1 Linux kernel and initramfs that boot into the first Stage 2 volume which should be a dm-verity device containing a specific layout and a squashfs filesystem with configuration parameters passed via cmdline.stage2-basic.tar.bz2 contains a basic Stage 2 rootfs template that can be used to run a simple Oasis runtime.stage2-podman.tar.bz2 contains a Stage 2 rootfs template that can be used to run Podman containers.All published images are built deterministically, so building locally you should obtain binaries with the following SHA256 hashes:
db47100a7d6a0c1f6983be224137c3f8d7cb09b63bb1c7a5ee7829d8e994a42f ovmf.tdx.fd
539f25c66a27b2ca3c6b4d3333b88c64e531fcc96776c37a12c9ce06dd7fbac9 stage1.bin
72c84d2566959799fdd98fae08c143a8572a5a09ee426be376f9a8bbd1675f2b stage2-basic.tar.bz2
827531546f3db6b0945ece7ddab4e10d648eaa3ba1c146b7889d7cb9cbf0b507 stage2-podman.tar.bz2
Full Changelog: v0.3.2...v0.3.3
The Adrs team merged 1 PRs this month:
In total, 1 pull requests were merged in January.