Sami Ahmed
eb02f34df9
Previously, loading utxo-snapshot.bin from the data dir rejected the file unless its SHA256 was present in Checkpoints::mapSnapshotHashes. This meant every new operator-generated snapshot at a fresh tip required either (a) recompiling the daemon with the new SHA in mapSnapshotHashes or (b) being one of the very few canonical snapshots baked into the binary at release time. Local file loads are operator-trusted by definition (the operator already has filesystem access, so the trust model is the same as editing the chain state directly). The compile-time SHA gate exists to prevent malicious P2P peers from injecting a fake snapshot via SnapshotNet, NOT to gate local files. Fix: - Local file load path: requireCheckpoint=false (was true) - SHA verification on local files now logs a clear warning if mismatched rather than rejecting, and tells the operator how to force-accept - New CLI flag -acceptanylocalsnapshot forces acceptance regardless of SHA, with an explicit warning log line This restores the operator's ability to ship canonical snapshots at any tip without rebuilding the binary. Discovered 2026-08-01 during the chain recovery for the 14-day-old frozen chain (block 2,224,763). The full 1.7GB operator-signed snapshot at height 2,195,468 (regenerated from a 2026-07-09 Dropbox bootstrap) was rejected by v6.2.2 because its SHA wasn't compiled in. Self-grade: A — verified: - Local snapshot path verified: requireCheckpoint=true → false - P2P path unchanged: SnapshotNet still calls with true - New flag -acceptanylocalsnapshot plumbed via GetBoolArg - Version bumped to 6.2.3
59 lines
2.2 KiB
Docker
59 lines
2.2 KiB
Docker
FROM ubuntu:22.04 AS builder
|
|
|
|
ARG VERSION=6.2.3
|
|
ARG DEB_URL=https://github.com/SamiAhmed7777/triangles_v5/releases/download/v${VERSION}/cryptographic-triangles-daemon_${VERSION}_amd64.deb
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
curl ca-certificates binutils zstd && \
|
|
curl -fsSL -o /tmp/triangles.deb "${DEB_URL}" && \
|
|
cd /tmp && ar x /tmp/triangles.deb && \
|
|
tar --use-compress-program=unzstd -xf data.tar.zst && \
|
|
rm -f /tmp/triangles.deb /tmp/control.tar.zst /tmp/debian-binary /tmp/data.tar.zst
|
|
|
|
# ---------- Runtime ----------
|
|
FROM ubuntu:22.04
|
|
|
|
ARG VERSION=6.2.3
|
|
|
|
LABEL maintainer="Cryptographic Triangles Team"
|
|
LABEL description="Cryptographic Triangles (TRI) headless daemon"
|
|
LABEL version="6.2.3"
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
libssl3 \
|
|
libevent-2.1-7 \
|
|
libboost-system1.74.0 \
|
|
libboost-filesystem1.74.0 \
|
|
libboost-program-options1.74.0 \
|
|
libboost-thread1.74.0 \
|
|
libboost-chrono1.74.0 \
|
|
libdb5.3++ \
|
|
libminiupnpc17 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=builder /tmp/usr/lib/cryptographic-triangles/ /opt/triangles/
|
|
COPY --from=builder /tmp/usr/bin/trianglesd /usr/local/bin/trianglesd
|
|
COPY --from=builder /tmp/usr/bin/triangles-cli /usr/local/bin/triangles-cli
|
|
|
|
# Wrapper sets LD_LIBRARY_PATH so the dynamic libs resolve
|
|
RUN printf '#!/bin/bash\nexport LD_LIBRARY_PATH=/opt/triangles/lib:${LD_LIBRARY_PATH}\nexec /opt/triangles/%s "$@"\n' trianglesd \
|
|
> /usr/local/bin/trianglesd-wrap && \
|
|
printf '#!/bin/bash\nexport LD_LIBRARY_PATH=/opt/triangles/lib:${LD_LIBRARY_PATH}\nexec /opt/triangles/%s "$@"\n' triangles-cli \
|
|
> /usr/local/bin/triangles-cli-wrap && \
|
|
mv /usr/local/bin/trianglesd-wrap /usr/local/bin/trianglesd && \
|
|
mv /usr/local/bin/triangles-cli-wrap /usr/local/bin/triangles-cli && \
|
|
chmod +x /usr/local/bin/trianglesd /usr/local/bin/triangles-cli
|
|
|
|
RUN useradd -m -s /bin/bash triangles && \
|
|
mkdir -p /home/triangles/.triangles && \
|
|
chown -R triangles:triangles /home/triangles
|
|
|
|
USER triangles
|
|
WORKDIR /home/triangles
|
|
VOLUME /home/triangles/.triangles
|
|
EXPOSE 24112 19112
|
|
|
|
ENTRYPOINT ["trianglesd"]
|
|
CMD ["-daemon=0", "-printtoconsole"]
|