Commit Graph

348 Commits

Author SHA1 Message Date
Leo 45b93f569f operations.md: os-level dependencies 2020-12-07 17:44:03 +01:00
Leo e2f517f91c solana: fix typo in clap help 2020-12-07 11:20:27 +01:00
Leo 477cde5da7 Bump version to v0.1.1 2020-12-07 11:17:53 +01:00
Leo c36d13d6b8 Fix typo in Makefile 2020-12-07 11:17:28 +01:00
Leo 2a4ca51028 Clean up operations.md 2020-12-07 09:21:01 +01:00
Leo 89afda64bf Add systemd units to operations.md 2020-12-06 22:51:35 +01:00
Leo 8b10b96362 solana: use clap for command line arguments 2020-12-06 22:45:45 +01:00
Leo f7f4f6d74b solana: add clap crate and update cargo dependencies 2020-12-06 22:15:43 +01:00
Leo b077104086 bridge: log own peer ID at startup 2020-12-06 20:26:12 +01:00
Leo 3013f24d59 Update operations.md 2020-12-06 19:25:42 +01:00
Leo 72a98c75a7 Set right permissions in `make install` 2020-12-06 19:25:24 +01:00
Leo d015422be7 Add Makefile for production builds 2020-12-06 19:21:43 +01:00
Leo 6fd34e3a8c tilt_modules: commit to repository
See https://docs.tilt.dev/extensions.html for rationale.
2020-12-06 18:45:49 +01:00
Leo 594592e2f6 devnet: use wormhole namespace by default 2020-12-05 16:32:37 +01:00
Leo 22d50d24eb Bump tilt version for named port forwards 2020-12-04 16:40:58 +01:00
Leo 60b5117fbb Enable Terra support in devnet by default 2020-12-03 16:31:53 +01:00
Yuriy Savchenko e8b411107d
Terra contract deployment moved to a separate k8s job (#130)
* Terra contract deployment moved to a separate k8s job

* terra-contracts job moved to the terrad stateful set as a sidecar, terra test addresses added to DEVELOP.md
2020-12-03 14:37:23 +01:00
Leo d1f572c70f operations.md: set capabilities 2020-12-01 11:58:41 +01:00
Yuriy Savchenko cc412605c7
Terra key moved out from env variable, VAA submission on Terra made async (#129)
* Terra fee payer key moved from environment variable into the separate file

* Removed closed issues from the comments, VAA submition made async

* Review comments fixed
2020-11-30 19:24:39 +01:00
Leo 106fecca00 bridge: always gate Terra features on the main feature flag 2020-11-30 17:13:48 +01:00
Yuriy Savchenko a77f89f646
Terra configuration moved to docker image instead of config maps (#128)
* Terra configuration moved to docker image instead of config maps
2020-11-30 12:34:31 +01:00
Hendrik Hofstadt 029d4b71ef fix account sizes 2020-11-30 11:33:40 +01:00
Hendrik Hofstadt bec598b41a
Fix subsidization and fees (#127)
* Revert "solana: partially revert #82 subsidization changes"

This reverts commit 2967653e

* fix subsidization

* fix deleted grpc tag dependency

* revert devnet changes

* verify system instruction action

* ┬─┬ノ(ಠ_ಠノ)
2020-11-30 11:09:08 +01:00
Leo 5997f133c3 solana: use loopback address to connect to other containers in same pod
There's a bit of a chicken-and-egg problem here - the liveness probe
cannot succeed until all containers in the pod are ready, and the
service load balancer won't work until it's ready.
2020-11-29 19:19:37 +01:00
Leo 120dfab49e bridge: type alias for readiness components 2020-11-29 17:07:15 +01:00
Leo c31777d1b3 e2e: add bidirectional end-to-end tests 2020-11-29 17:07:15 +01:00
Leo 30278397f7 bridge: add erc20 abi for use in tests 2020-11-29 17:07:15 +01:00
Leo 2967653e06 solana: partially revert #82 subsidization changes
... while keeping the borrowing fixes. Please review carefully whether
any of the remaining changes should've been reverted as well.

Fails due to account ownership check for debits, new tests caught it.
2020-11-29 17:07:15 +01:00
Leo fddbd01f9d solana: update Rust and Solana to latest stable releases
Unfortunately, the new release has a much chattier message_processor,
but we cannot do anything about that without losing value debug info.
2020-11-29 17:07:15 +01:00
Leo de8d1dee31 devnet: pin Dockerfile syntax to digest
This speeds up the build by ~1.5s by avoiding a remote lookup on
Docker Hub every time this is built (WTF).
2020-11-29 17:07:15 +01:00
Leo a2f48fdee3 solana/cli: fetch token account balance
The request needs to include the decimals (part of the derivation path).
2020-11-29 17:07:15 +01:00
Leo 45837241ed devnet: add readiness checks to most components 2020-11-29 17:07:15 +01:00
Leo 561852d499 bridge: simple readiness check 2020-11-29 17:07:15 +01:00
Leo ee0904adf9 Update assumptions.md 2020-11-27 19:43:57 +01:00
Leo 8c0c902b42 Update assumptions.md 2020-11-27 19:31:11 +01:00
Leo c2c50b3326 Update assumptions.md 2020-11-27 19:28:14 +01:00
Leo 26942d7edb Update assumptions.md 2020-11-27 19:27:11 +01:00
Leo d350731dda Update assumptions.md 2020-11-27 19:26:09 +01:00
Leo 36a025b088 Update to Go 1.15.5 to account for CVE-2020-28362 2020-11-27 19:20:07 +01:00
Leo 540fbbb31b Clarify that we do not automatically rate limit spammy guardians 2020-11-27 19:08:13 +01:00
Leo d4054b4733 Update assumptions.md 2020-11-27 19:00:39 +01:00
Leo 70eddbee6e Document our security assumptions 2020-11-27 18:51:32 +01:00
Leopold Schabel 4658dcb8f1
Update README.md 2020-11-27 15:16:18 +01:00
Leopold Schabel f43e5617f9
Update operations.md 2020-11-24 22:57:50 +01:00
Leopold Schabel 8306a83833
solana/agent: listen on UNIX socket (#122)
This allows us to use UNIX filesystem permissions for access control.

Previously, any process in the network namespace could connect to it,
which is insecure for obvious reasons.

Verified that correct permissions are set:

```
# ls -lisa /run/bridge/
total 8
31996269 4 drwxrwxrwx 2 root root 4096 Nov 23 21:58 .
14676759 4 drwxr-xr-x 1 root root 4096 Nov 23 21:58 ..
31996306 0 srwx------ 1 root root    0 Nov 23 21:58 agent.sock
```

Fixes #119
2020-11-24 09:48:44 +01:00
Leo d99977a8ae Commit .run IntelliJ shortcuts to repo 2020-11-23 17:21:41 +01:00
Leo 471417cd6e bridge: use GPG-armored binary protobufs for keys 2020-11-20 22:40:42 +01:00
Leo 0152a00114 all: rename LockupObservation to SignedObservation
We observe things other than lockups, account for it.
2020-11-20 22:35:00 +01:00
Leo 50807037a5 Update README.md 2020-11-20 21:32:12 +01:00
Leo e5a81c0db3 Update README.md
Add flavour
2020-11-20 21:29:47 +01:00