Add unverified signer light resource

This Mithril signer node does not connect to its own Cardano node,
but on the Mithril Aggregator node instead.

Author: jpraynaud

.github/workflows/ci.yml

@@ -381,6 +381,7 @@ jobs:
           mithril_signers: |
             {
               "1" = {
+                type    = "unverified"
                 pool_id = "pool18r62tz408lkgfu6pq5svwzkh2vslkeg6mf72qf3h8njgvzhx9ce",
               },
             }

.github/workflows/pre-release.yml

@@ -163,6 +163,7 @@ jobs:
           mithril_signers: |
             {
               "1" = {
+                type    = "unverified"
                 pool_id = "pool18r62tz408lkgfu6pq5svwzkh2vslkeg6mf72qf3h8njgvzhx9ce",
               },
             }

.github/workflows/release.yml

@@ -79,6 +79,7 @@ jobs:
           mithril_signers: |
             {
               "1" = {
+                type    = "unverified"
                 pool_id = "pool1zr907nmfsq5kalxdjju349nwg6f03lyfmcjfqcz52jf45gcgh03",
               },
             }

mithril-infra/assets/docker/docker-compose-signer-unverified-light.yaml

@@ -0,0 +1,38 @@
+# Unverified Mithril Signer node running on top of shared Cardano node (from Mithril Aggregator)
+
+version: "3.9"
+
+services:
+  mithril-signer:
+    image: ghcr.io/input-output-hk/mithril-signer:${IMAGE_ID}
+    container_name: mithril-signer-${SIGNER_ID}
+    restart: always
+    user: ${CURRENT_UID}
+    profiles:
+      - mithril
+      - all
+    environment:
+      - RUST_BACKTRACE=1
+      - AGGREGATOR_ENDPOINT=http://mithril-aggregator:8080/aggregator
+      - NETWORK=${NETWORK}
+      - PARTY_ID=${PARTY_ID}
+      - RUN_INTERVAL=120000
+      - DB_DIRECTORY=/mithril-aggregator/cardano/db
+      - DATA_STORES_DIRECTORY=/mithril-signer-${SIGNER_ID}/mithril/stores
+      - STORE_RETENTION_LIMIT=5
+      - CARDANO_NODE_SOCKET_PATH=/ipc/node.socket
+      - CARDANO_CLI_PATH=/app/bin/cardano-cli
+    volumes:
+      - ../data/${NETWORK}/mithril-signer-${SIGNER_ID}/mithril:/mithril-signer-${SIGNER_ID}/mithril
+      - ../data/${NETWORK}/mithril-aggregator/cardano/db:/mithril-aggregator/cardano/db
+      - ../data/${NETWORK}/mithril-aggregator/cardano/ipc:/ipc
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "100m"
+        max-file: "5"
+
+networks:
+  default:
+    external:
+      name: mithril_network

mithril-infra/assets/docker/docker-compose-signer-unverified.yaml

@@ -1,3 +1,5 @@
+# Unverified Mithril Signer node running on top of its own Cardano node
+
 version: "3.9"
 
 services:
@@ -47,15 +49,15 @@ services:
       - AGGREGATOR_ENDPOINT=http://mithril-aggregator:8080/aggregator
       - NETWORK=${NETWORK}
       - PARTY_ID=${PARTY_ID}
-      - RUN_INTERVAL=240000
-      - DB_DIRECTORY=/db
+      - RUN_INTERVAL=120000
+      - DB_DIRECTORY=/mithril-signer-${SIGNER_ID}/cardano/db
       - DATA_STORES_DIRECTORY=/mithril-signer-${SIGNER_ID}/mithril/stores
       - STORE_RETENTION_LIMIT=5
       - CARDANO_NODE_SOCKET_PATH=/ipc/node.socket
       - CARDANO_CLI_PATH=/app/bin/cardano-cli
     volumes:
       - ../data/${NETWORK}/mithril-signer-${SIGNER_ID}/mithril:/mithril-signer-${SIGNER_ID}/mithril
-      - ../data/${NETWORK}/mithril-signer-${SIGNER_ID}/cardano/db:/db
+      - ../data/${NETWORK}/mithril-signer-${SIGNER_ID}/cardano/db:/mithril-signer-${SIGNER_ID}/cardano/db
       - ../data/${NETWORK}/mithril-signer-${SIGNER_ID}/cardano/ipc:/ipc
     logging:
       driver: "json-file"

mithril-infra/mithril.signer.tf

@@ -34,7 +34,7 @@ resource "null_resource" "mithril_signer" {
       "export IMAGE_ID=${var.mithril_image_id}",
       "export CURRENT_UID=$(id -u)",
       "export DOCKER_GID=$(getent group docker | cut -d: -f3)",
-      "docker-compose -p $SIGNER_ID -f /home/curry/docker/docker-compose-signer-unverified.yaml --profile all up -d",
+      "docker-compose -p $SIGNER_ID -f /home/curry/docker/docker-compose-signer-${each.value.type}.yaml --profile all up -d",
     ]
   }
 }

mithril-infra/variables.tf

@@ -119,10 +119,12 @@ variable "mithril_protocol_parameters" {
 
 variable "mithril_signers" {
   type = map(object({
+    type    = string
     pool_id = string
   }))
   default = {
     "1" = {
+      type    = "unverified",
       pool_id = "pool15qde6mnkc0jgycm69ua0grwxmmu0tke54h5uhml0j8ndw3kcu9x",
     }
   }