Hello there!
we are happy to announce that voting is now open for a new IC release .
The NNS proposal is here: IC NNS Proposal 122910.
Here is a summary of the changes since the last release:
- [2348d1839] Consensus: Move the
resolve
function fromstate_tool::split
tostate_manager::split
so that it can be reused by theic-recovery
tool. - [680d4db6d] Consensus: chore: small clean-ups of IC-Recovery
- [d106c60bc] Consensus: chore: Use ProxyDecodeError and factor some parsing out into its own functions
- [f2b04ad8d] Consensus: chore: Enable linting error for
bindings_with_variant_name
- [d275d16d9] Consensus: feat: implement halting of the consensus at a cup height
- [fc3b6c659] Consensus: fix(ecdsa): Reject signing requests for disabled keys
- [b296abda7] Crypto: chore: add benchmarks for secp point-scalar vartime multiplication
- [48bd267bb] Crypto: fix: Ensure that
CryptoError::is_reproducible
does not panic - [906c41668] Execution: chore: Add consumed instructions for install_code message
- [b55af29f5] Execution: fix: Revert āDeleted call contexts do not prevent canister from reaching stopped stateā
- [af6bc86e8] Message Routing: feat: Implement manifest splitting in State Manager
- [fc6585e98] Message Routing: feat: Manifest splitting support in state-tool
- [0bd6d4611] Message Routing: improvement: Decouple message memory
- [68f17e93b] Message Routing: improvement: Do not write empty protobuf files
- [eeef9ef94] Message Routing: improvement: Check manifest consistency during validation
- [f24206708] Message Routing: improvement: Require manifest version when parsing
- [93684ff3d] Message Routing: fix: Also retain ingress messages addressed to subnet in
after_split()
- [a2c8c6cb4] Message Routing: fix: Do not reset
SystemMetadata::prev_state_hash
- [9ebfcfc40] Message Routing: fix: Fix state-tool verify_manifest
- [076c3489f] Networking: feat(firewall): Limit simultaneous connections from any ip
- [4824fd135] Node: Create dev-sev target for setupos, hostos and guestos
- [5938ed2d3] Node: Fix HostOS āfirst boot stateā typo
- [b1a486c1a] Node: Fix for script not recognizing different NIC types
- [6da550e88] Runtime: Fix
PageMap::get_memory_region
bug - [24a9878aa] Runtime: Reserve memory for response/cleanup execution
- [6a9ec3aed] Runtime: Upgrade wasmtime to version 9.0.3
- Various tech-debt management: code refactoring, docs, bug fixes, test updates
IC-OS Verification
To build and verify the IC-OS disk image, run:
# From https://github.com/dfinity/ic#building-the-code
# This process requires Mac/Linux/WSL2, Git and Podman on your machine.
git clone https://github.com/dfinity/ic
cd ic
git fetch origin
git checkout 1a12201749b946dddb43a17b7f67f1c7b7ac8844
if ./gitlab-ci/container/build-ic.sh -i ; then
curl -LO https://download.dfinity.systems/ic/1a12201749b946dddb43a17b7f67f1c7b7ac8844/guest-os/update-img/update-img.tar.gz
shasum -a 256 artifacts/icos/guestos/update-img.tar.gz update-img.tar.gz
else
echo "IC-OS build failed. Verification unsuccessful." >&2
fi
The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image,
must be identical, and must match the SHA256 from the payload of the NNS proposal.