Upgrade Log
For each upgrade of the Testnet network, we are tracking important changes for node operators' deployments.
They are enumerated and explained in this document.
2023-10-12 Upgrade
Note that some of the software releases mentioned below have not yet been published. They are expected to become available as we get closer to the upgrade window.
- Upgrade height: upgrade is scheduled to happen at epoch 29570.
We expect the Testnet network to reach this epoch at around 2023-10-12 07:56 UTC.
Instructions
- (optional) Vote for the upgrade. On 2023-10-09, an upgrade proposal will be proposed which (if accepted) will schedule the upgrade on epoch 29570. See the Governance documentation for details on voting for proposals.
The following steps should be performed only after the network has reached the upgrade epoch and has halted:
- Download the Testnet genesis file published in the Testnet 2023-10-12 release.
Testnet state at epoch 29570 will be exported and migrated to a 23.0 compatible genesis file.
The new genesis file will be published on the above link soon after reaching the upgrade epoch.
-
Verify the provided Testnet upgrade genesis file by comparing it to the local network state dump.
The state changes are described in the State Changes section below.
-
Replace the old genesis file with the new Testnet genesis file.
-
Ensure your node will remain stopped by disabling auto-starting via your process manager (e.g., systemd or Supervisor)
-
Back up the entire data directory of your node. Verify that the backup includes the following folders:
- for consensus:
tendermint/abci-state
andtendermint/data
- for runtimes:
runtimes/*/mkvs_storage.badger.db
andruntimes/*/worker-local-storage.badger.db
- Wipe state. This must be performed before replacing the Oasis Node binary.
State of ParaTimes/runtimes is not affected by this upgrade and MUST NOT be wiped. Wiping state for confidential ParaTimes will prevent your compute or key manager node from transitioning to the new network.
Transitioning confidential ParaTimes to the new network requires local state that is sealed to the CPU. This also means that bootstrapping a new node on a separate CPU immediately after the network upgrade will not be possible until an updated ParaTime containing new trust roots is released and adopted.
- Replace the old version of Oasis Node with version 23.0.
The Oasis Core 23.0 binary in our published releases is built only for Ubuntu 22.04 (GLIBC>=2.32). You'll have to build it yourself if you're using prior Ubuntu versions (or other distributions using older system libraries).
-
Perform any needed configuration changes described below.
-
(only Rosetta Gateway operators) Replace old version of Oasis Rosetta Gateway with version 2.6.0.
-
Start your node and re-enable auto-starting via your process manager.
Configuration Changes
To see the full extent of the changes examine the Change Log of the 23.0 release.
The node configuration has been refactored so that everything is now configured via a YAML configuration file and configuring via command-line options is no longer supported.
Some configuration options have changed and so the configuration file needs to be updated. To make this step easier, a command-line tool has been provided that will perform most of the changes automatically. You can run it with:
oasis-node config migrate --in config.yml --out new-config.yml
The migration subcommand logs the various changes it makes and warns you if a config option is no longer supported, etc. At the end, any unknown sections of the input config file are printed to the terminal to give you a chance to review them and make manual changes if required.
Note that the migration subcommand does not preserve comments and order of sections from the input YAML config file. You should always carefully read the output of this command, as well as compare the generated config file with the original before using it.
After you are satisfied with the new configuration file, replace the old file with the new one as follows:
mv new-config.yml config.yml
The configuration format for seed nodes has changed and it now requires the node's P2P public key to be used. In case your old configuration file contains known Testnet seed nodes, this transformation is performed automatically.
However, if it contains unknown seed nodes then the conversion did not happen automatically and you may need to obtain the seed node's P2P public key. For Testnet you can use the following addresses:
HcDFrTp/MqRHtju5bCx6TIhIMd6X/0ZQ3lUG73q5898=@34.86.165.6:26656
HcDFrTp/MqRHtju5bCx6TIhIMd6X/0ZQ3lUG73q5898=@34.86.165.6:9200
Please be aware that every seed node should be configured to listen on two distinct ports. One is dedicated to peer discovery within the CometBFT P2P network, while the other is used to bootstrap the Oasis P2P network.
Data Directory Changes
The subdirectory (located inside the node's data directory) used to store
consensus-related data, previously called tendermint
(after the consensus
layer protocol backend) has been renamed to consensus
in Oasis Core 23.0. If
any of your scripts rely on specific directory names, please make sure to update
them to reflect the changed sdirectory name.
State Changes
The following parts of the genesis document will be updated:
For a more detailed explanation of the parameters below, see the Genesis Document docs.
All state changes will be done automatically with the migration command provided
by the new version of oasis-node
. It can be used as follows to derive the same
genesis file from an existing state dump at the correct height (assuming there
is a genesis.json
present in the current working directory):
oasis-node genesis migrate --genesis.new_chain_id testnet-2023-10-12
General
-
chain_id
will be set totestnet-2023-10-12
. -
halt_epoch
will be removed as it is no longer used.
Registry
-
registry.runtimes[].txn_scheduler.propose_batch_timeout
specifies how long to wait before accepting proposal from the next backup scheduler. It will be set to5000000000
(5 seconds). Previously the value was represented in the number of consensus layer blocks. -
registry.params.gas_costs.prove_freshness
specifies the cost of the freshness proof transaction. It will be set to1000
. -
registry.params.gas_costs.update_keymanager
specifies the cost of the keymanager policy update transaction. It will be removed as the parameter has been moved underkeymanager.params.gas_costs.update_policy
. -
registry.params.tee_features
specify various TEE features supported by the consensus layer registry service. These will be set to the following values to activate the new features:"tee_features": {
"sgx": {
"pcs": true,
"signed_attestations": true,
"max_attestation_age": 1200
},
"freshness_proofs": true
} -
registry.params.max_runtime_deployments
specifies the maximum number of runtime deployments that can be specified in the runtime descriptor. It will be set to5
.
Root Hash
roothash.params.max_past_roots_stored
specifies the maximum number of past runtime state roots that are stored in consensus state for each runtime. It will be set to1200
.
Staking
-
staking.params.commission_schedule_rules.min_commission_rate
specifies the minimum commission rate. It will be set to0
to maintain the existing behavior. -
staking.params.thresholds.node-observer
specifies the stake threshold for registering an observer node. It will be set to100000000000
base units (or100
tokens), same as for existing compute nodes.
Key Manager
-
keymanager.params.gas_costs
specify the cost of key manager transactions. These will be set to the following values:"gas_costs": {
"publish_ephemeral_secret": 1000,
"publish_master_secret": 1000,
"update_policy": 1000
}
Random Beacon
beacon.base
is the network's starting epoch. It will be set to the epoch of Testnet's state dump + 1,29570
.
Governance
governance.params.enable_change_parameters_proposal
specifies whether parameter change governance proposals are allowed. It will be set totrue
.
Consensus
consensus.params.max_block_size
specifies the maximum block size in the consensus layer. It will be set to1048576
(1 MiB).
Other
-
extra_data
will be set back to the value in the Mainnet genesis file to include the Oasis Network's genesis quote:”Quis custodiet ipsos custodes?” [submitted by Oasis Community Member Daniyar Borangaziyev]:
"extra_data": {
"quote": "UXVpcyBjdXN0b2RpZXQgaXBzb3MgY3VzdG9kZXM/IFtzdWJtaXR0ZWQgYnkgT2FzaXMgQ29tbXVuaXR5IE1lbWJlciBEYW5peWFyIEJvcmFuZ2F6aXlldl0="
}
2022-04-04 Upgrade
- Upgrade height: upgrade is scheduled to happen at epoch 15056.
We expect the Testnet network to reach this epoch at around 2022-04-04 7:45 UTC.
Instructions
-
See Before upgrade section for required steps to be done before upgrade.
-
(optional) Vote for the upgrade. On 2022-04-01, an upgrade proposal will be proposed which (if accepted) will schedule the upgrade on epoch 15056. See the Governance documentation for details on voting for proposals.
The upgrade proposal contains the "empty"
upgrade handler whose only purpose
is allow specifying a no-op handler when submitting an upgrade proposal.
For this upgrade, do NOT wipe state. The new Oasis Core version expects the synced state using Oasis Core 22.0.x all the way until the upgrade epoch. Read Handling Network Upgrades for more info.
- Once reaching the designated upgrade epoch, your node will stop and needs to be upgraded to Oasis Core 22.1. After your node is upgraded to Oasis Core 22.1, restart it and wait for more than 2/3+ of nodes by stake to do the same and the network starts again.
The Testnet's genesis file and the genesis document's hash will remain the same.
- If the nodes are running any ParaTimes, make sure you upgrade to the versions published on the Testnet network parameters page.
ParaTime binaries for the Cipher ParaTime will be published at a later time due to the additional offline signing step. If you are running multiple ParaTimes on the same node, you should disable the Cipher ParaTime until the new version is published.
- If you are running a Rosetta gateway, upgrade it to version 2.2.0.
Before Upgrade
This upgrade will upgrade Oasis Core to version 22.1 which no longer
allows running Oasis Node (i.e. the oasis-node
binary) as root
(effective user ID of 0).
Running network accessible services as the root user is extremely bad for
system security as a general rule. While it would be "ok" if we could drop
privileges, syscall.AllThreadsSyscall
does not work if the binary uses cgo
at all.
Nothing in Oasis Node will ever require elevated privileges.
Attempting to run the oasis-node
process as the root user will now terminate
immediately on startup.
While there may be specific circumstances where it is safe to run network services with the effective user ID set to 0, the overwhelming majority of cases where this is done is a misconfiguration.
If the previous behavior is required, the binary must be run in unsafe/debug
mode (via the intentionally undocumented flag), and debug.allow_root
must also
be set.
2022-03-03 Upgrade
- Upgrade height: upgrade is scheduled to happen at epoch 14209.
We expect the Testnet network to reach this epoch at around 2022-03-03 12:45 UTC.
Instructions
- (optional) Vote for the upgrade. On 2022-03-02, an upgrade proposal will be proposed which (if accepted) will schedule the upgrade on epoch 14209. See the Governance documentation for details on voting for proposals.
The upgrade proposal contains a non-existing upgrade handler and will be used to coordinate the network shutdown, the rest of the upgrade is manual.
The following steps should be performed only after the network has reached the upgrade network and has halted:
- Download the Testnet genesis file published in the Testnet 2022-03-03 release.
Testnet state at epoch 14209 will be exported and migrated to a 22.0 compatible genesis file. The new genesis file will be published on the above link soon after reaching the upgrade epoch.
- Replace the old genesis file with the new Testnet genesis file. The state changes are described and explained below.
- Replace the old version of Oasis Node with version 22.0.
- Wipe state.
- Perform any needed configuration changes described below.
- Start your node.
Configuration Changes
To see the full extent of the changes examine the Change Log of the 22.0 release.
If your node is currently configured to run a ParaTime, you need to perform some additional steps.
The way ParaTime binaries are distributed has changed so that all required
artifacts are contained in a single archive called the Oasis Runtime Container
and have the .orc
extension. Links to updated ParaTime binaries will be
published on the Testnet network parameters page for their respective
ParaTimes.
The configuration is simplified as the runtime.paths
now only needs to list
all of the supported .orc
files (see below for an example).
Instead of separately configuring various roles for a node, there is now a
single configuration flag called runtime.mode
which enables the correct roles
as needed. It should be set to one of the following values:
none
(runtime support is disabled, only consensus layer is enabled)compute
(node is participating as a runtime compute node for all the configured runtimes)keymanager
(node is participating as a keymanager node)client
(node is a stateful runtime client)client-stateless
(node is a stateless runtime client and connects to remote nodes for any state queries)
Nodes that have so far been participating as compute nodes should set the mode
to compute
and nodes that have been participating as clients for querying
and transaction submission should set it to client
.
The following configuration flags have been removed:
runtime.supported
(existingruntime.paths
is used instead)worker.p2p.enabled
(now automatically set based on runtime mode)worker.compute.enabled
(now set based on runtime mode)worker.keymanager.enabled
(now set based on runtime mode)worker.storage.enabled
(no longer needed)
Also the worker.client
option is no longer needed unless you are providing
consensus layer RPC services.
For example if your previous configuration looked like:
runtime:
supported:
- "000000000000000000000000000000000000000000000000000000000000beef"
paths:
"000000000000000000000000000000000000000000000000000000000000beef": /path/to/runtime
worker:
# ... other settings omitted ...
storage:
enabled: true
compute:
enabled: true
client:
port: 12345
addresses:
- "xx.yy.zz.vv:12345"
p2p:
enabled: true
port: 12346
addresses:
- "xx.yy.zz.vv:12346"
The new configuration should look like:
runtime:
mode: compute
paths:
- /path/to/runtime.orc
worker:
# ... other settings omitted ...
p2p:
port: 12346
addresses:
- "xx.yy.zz.vv:12346"
State Changes
The following parts of the genesis document will be updated:
For a more detailed explanation of the parameters below, see the Genesis Document docs.
General
height
will be set to the height of the Testnet state dump + 1, i.e.8535081
.genesis_time
will be set to2022-03-03T13:00:00Z
.chain_id
will be set totestnet-2022-03-03
.halt_epoch
will be set to24210
(more than 1 year from the upgrade).
Registry
registry.runtimes
list contains the registered runtimes' descriptors. In this upgrade, all runtime descriptors will be migrated from version2
to version3
. The migration will be done automatically with theoasis-node debug fix-genesis
command.registry.suspended_runtimes
list contains the suspended registered runtimes' descriptors. In this upgrade, all runtime descriptors will be migrated from version2
to version3
. The migration will be done automatically with theoasis-node debug fix-genesis
command.- Inactive registered entities in
registry.entities
(and their corresponding nodes inregistry.nodes
) that don't pass the minimum staking thresholds will be removed. The removal will be done automatically with theoasis-node debug fix-genesis
command.
Root Hash
-
roothash.params.gas_costs.submit_msg
is a new parameter that specifies the cost for an submit message transaction. It will be set to1000
. This will be done automatically with theoasis-node debug fix-genesis
command. -
roothash.params.max_in_runtime_messages
is a new parameter that that specifies the maximum number of incoming messages that can be queued for processing by a runtime. It will be set to128
.This will be done automatically with the
oasis-node debug fix-genesis
command. -
roothash.runtime_state
contains the state roots of the runtimes. Empty fields will be omitted. This will be done automatically with theoasis-node debug fix-genesis
command.
Staking
staking.params.thresholds
specifies the minimum number of tokens that need to be staked in order for a particular entity or a particular type of node to participate in the network. Thenode-storage
key is removed since Oasis Core 22.0+ removes separate storage nodes (for more details, see: #4308). This will be done automatically with theoasis-node debug fix-genesis
command.staking.params.min_transfer
specifies the minimum number of tokens one can transfer. The value is set to 10,000,000 base units, or 0.01 TEST tokens. This will be done automatically with theoasis-node debug fix-genesis
command.staking.params.min_transact_balance
specifies the minimum general balance an account must have to be able to perform transactions on the network. The value is set to 0 base units meaning this requirement is currently not enforced. This will be done automatically with theoasis-node debug fix-genesis
command.staking.params.reward_schedule
specifies the staking reward schedule as an array with elements of the form:For example, this element specifies that the staking reward is 0.001229% per epoch until epoch{
"until": 14226,
"scale": "1229"
}14226
. It will be set to the same schedule that is currently on used on the Mainnet.
Random Beacon
The beacon
object contains parameters controlling the new
improved VRF-based random beacon introduced in the Damask upgrade.
-
beacon.base
is the network's starting epoch. It will be set to the14209
. -
beacon.params.backend
configures the random beacon backend to use. It will be set to"vrf"
indicating that the beacon implementing a VRF-based random beacon should be used. -
beacon.params.vrf_parameters.alpha_hq_threshold
is minimal number of nodes that need to contribute a VRF proof for the beacon's output to be valid. It will be set to3
.This will be done automatically with the
oasis-node debug fix-genesis
command. -
beacon.params.vrf_parameters.interval
is the duration of an epoch. It will be set to600
.This will be done automatically with the
oasis-node debug fix-genesis
command. -
beacon.params.vrf_parameters.proof_delay
is number of blocks since the beginning of an epoch after a node can still submit its VRF proof. It will be set to300
.This will be done automatically with the
oasis-node debug fix-genesis
command. -
beacon.params.vrf_parameters.gas_costs.vrf_prove
specifies the cost for a VRF prove transaction. It will be set to1000
.This will be done automatically with the
oasis-node debug fix-genesis
command.
The beacon.params.pvss_parameters
control the behavior of the
previous random beacon implementing a PVSS scheme.
Since PVSS is no longer supported, all its configuration options are removed as well.
Governance
-
governance.params.stake_threshold
is a new parameter specifying the single unified stake threshold representing the percentage ofVoteYes
votes in terms of total voting power for a governance proposal to pass. It will be set to68
(i.e. 68%).This will be done automatically with the
oasis-node debug fix-genesis
command. -
governance.params.quorum
is the minimum percentage of voting power that needs to be cast on a proposal for the result to be valid.It will be removed since it is being replaced by the single
governance.params.staking_threshold
parameter.This will be done automatically with the
oasis-node debug fix-genesis
command. -
governance.params.threshold
is the minimum percentage ofVoteYes
votes in order for a proposal to be accepted.It will be removed since it is being replaced by the single
governance.params.staking_threshold
parameter.This will be done automatically with the
oasis-node debug fix-genesis
command.
Consensus
consensus.params.state_checkpoint_interval
parameter controls the interval (in blocks) on which state checkpoints should be taken. It will be increased from10000
to100000
to improve nodes' performance since computing checkpoints is I/O intensive.
2021-08-11 Upgrade
- Upgrade height: upgrade is scheduled to happen at epoch 8844.
We expect the Testnet network to reach this epoch at around 2021-08-11 08:50 UTC.