Proposal to elect new release rc--2025-07-11_03-31

Governance NNS proposal discussions
,
1

Hello there!

We are happy to announce that voting is now open for a new GuestOS release.
The NNS proposal is here: IC NNS Proposal 137345.

Here is a summary of the changes since the last GuestOS release:

Release Notes for release-2025-07-11_03-31-base (5128134d24b7a5b8e24a3d5d40c4cce9d81fd375)

This release is based on changes since release-2025-07-03_03-27-base (e915efecc8af90993ccfc499721ebe826aadba60).

Please note that some commits may be excluded from this release if they’re not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on GitHub.

Features:

  • e36d9f53c Execution,Interface: Update canister status to include environment variables (#5843)
  • ee83c4bb5 Execution,Interface: Update update_settings to keep track of environment variables via canister history (#5801)
  • 18d7278ba Execution,Interface,Message Routing: Create a collection of pre-signatures in replicated state (#5768)
  • eeacd880a Execution,Interface,Message Routing(registry-client): Use the new canister_ranges_ key family in RegistryClient (#5808)
  • f8a10ffff Interface(ICP-Ledger): add candid tip_of_chain endpoint (#5871)
  • 648c31145 Interface: Added canister_cycles_cost_schedule to SubnetRecord. (#5816)
  • 910548cc4 Interface(ICP-Ledger): Implement endpoint to retrieve approvals (#5680)
  • 3f26fb05c Interface,Node: Add new VSOCK command for starting the Upgrade Guest VM (#5838)
  • 2f87fe952 Interface,Node: Implement Upgrade Guest VM (#5729)
  • 1787e4e66 Interface,Node: Build custom SEV-compatible OVMF from source and distribute it with the GuestOS (#5776)

Bugfixes:

Chores:

  • 333217fe0 Consensus,Interface: simplify artifact_pool build graph (#5883)
  • fa6080b7b Execution,Interface: Add more fine grained metrics for the http outcalls price (#5609)
  • 967f2d362 Execution,Interface: add test_timeout to benchmark targets (#5821)
  • 3a2bc2e8c Interface: remove WASM validation and canister history tests in Haskell (#5852)
  • 44a0b9108 Owners(icrc-ledger-types): Remove unused dependencies from icrc-ledger-client (#5827)
  • 7d377c34c Node: Update Base Image Refs [2025-07-10-0804] (#5879)
  • 079ae336a Node: Update Base Image Refs [2025-07-03-0812] (#5814)

Tests:

  • 8c0981290 Interface: Write the routing table entries in the new format in addition to the old (#5740)

Other changes:

  • 5128134d2 Interface,Node: Revert “feat: Build custom SEV-compatible OVMF from source and distribute it with the GuestOS (#5776)” (#5894)

Full list of changes (including the ones that are not relevant to GuestOS) can be found on GitHub.

IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (sudo apt install curl), run:

# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/master/ci/tools/repro-check | python3 - -c 5128134d24b7a5b8e24a3d5d40c4cce9d81fd375 --guestos

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing --hostos to the script above instead of --guestos, or the SetupOS by passing --setupos.

2 Likes
2

Hello there!

We are happy to announce that voting is now open for a new HostOS release.
The NNS proposal is here: IC NNS Proposal 137350.

Here is a summary of the changes since the last HostOS release:

Release Notes for release-2025-07-11_03-31-base (5128134d24b7a5b8e24a3d5d40c4cce9d81fd375)

This release is based on changes since release-2025-07-03_03-27-base (e915efecc8af90993ccfc499721ebe826aadba60).

Please note that some commits may be excluded from this release if they’re not relevant, or not modifying the HostOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on GitHub.

Features:

  • 3f26fb05c Interface,Node: Add new VSOCK command for starting the Upgrade Guest VM (#5838)
  • 2f87fe952 Interface,Node: Implement Upgrade Guest VM (#5729)

Bugfixes:

  • 2e1c7650a Interface,Node: Fix the reboot behavior of GuestVM (#5876)

Performance improvements:

Chores:

Full list of changes (including the ones that are not relevant to HostOS) can be found on GitHub.

IC-OS Verification

To build and verify the IC-OS HostOS disk image, after installing curl if necessary (sudo apt install curl), run:

# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/master/ci/tools/repro-check | python3 - -c 5128134d24b7a5b8e24a3d5d40c4cce9d81fd375 --hostos

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new HostOS version here, you have the option to verify the build reproducibility of the GuestOS by passing --guestos to the script above instead of --hostos, or the SetupOS by passing --setupos.

1 Like
3

Proposal 137345 & 137350 - Gautier | CodeGov - trial period

Vote: Reject
Reason:
Script ran well for HostOS, but hash does not match for GuestOS.

Build HostOS
Build HostOS1920×967 184 KB

Build GuestOS
Build GuestOS1846×688 234 KB

Guest OS build does not match.
Tested 2times using
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/master/ci/tools/repro-check | python3 - -c 5128134d24b7a5b8e24a3d5d40c4cce9d81fd375 --guestos cmd line.

Edit : As HostOS hash is valid, we can Approve this one. So here the review of the changes :

Features:

  • 3f26fb05c Interface,Node: Add new VSOCK command for starting the Upgrade Guest VM (#5838)
    This merge request add a new command to vsock lib, which is the way to communicate between GuestOS and HostOS. Changes are legit.
  • 2f87fe952 Interface,Node: Implement Upgrade Guest VM (#5729)
    This one is about adding upgrade support to guest vm, and also enhance some code by using GuestVMType enum, to make code cleaner. LGTM

Bugfixes:

  • 2e1c7650a Interface,Node: Fix the reboot behavior of GuestVM (#5876)
    Libvirt restart settings was restarting vm with the same boot args, which is wrong. This commit fix this, LGTM.

Performance improvements:

  • d4d277289 Interface,Node: Optimize guest_vm_runner tests (#5834)
    Enhance the unpack mecanism for testing. LGTM

Chores:

Those changes just update the sha of the docker images. LGTM

1 Like