main_to:main

.dockerignore

@@ -3,4 +3,7 @@ test/
 scripts/
 docs/
 data/
-build/
+build/
+docker/
+go.work
+go.work.sum

.github/workflows/docker-publish.yaml

@@ -2,10 +2,12 @@ name: Create and publish a Docker image
 
 on:
   push:
-    tags:
-    - '**'
     branches:
-    - '**'
+      - '**'
+    tags-ignore:
+      - "v[0-9]+.[0-9]+.[0-9]+" # Push events to matching v*, i.e. v1.0, v20.15.10
+      - "v[0-9]+.[0-9]+.[0-9]+-beta[0-9]+"
+      - "v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+"
 
 env:
   REGISTRY: ghcr.io
@@ -20,29 +22,29 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@v4
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v2.7.0
+        uses: docker/build-push-action@v4
         with:
           context: .
           platforms: linux/amd64,linux/arm64

.github/workflows/lint.yml

@@ -12,9 +12,9 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v2
+        uses: golangci/golangci-lint-action@v3
         with:
           version: latest
           only-new-issues: true

.github/workflows/release.yml

@@ -2,46 +2,74 @@ name: "Release"
 
 on:
   push:
-    branches: 
-      - "RC[0-9]/**"
     tags:
       - "v[0-9]+.[0-9]+.[0-9]+" # Push events to matching v*, i.e. v1.0, v20.15.10
       - "v[0-9]+.[0-9]+.[0-9]+-beta[0-9]+"
       - "v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+"
 
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
 jobs:
-  goreleaser:
+  build-and-push-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
     steps:
-      - name: Checkout
-        uses: actions/[email protected]
-        with:
-          fetch-depth: 0
+      - name: Checkout repository
+        uses: actions/checkout@v3
 
-      - uses: actions/setup-go@v2
-        with:
-          go-version: '1.19'
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
 
-      # TODO:figure out how to add the supported SDK and tendermint versions
-      # here we need to run the following and save the results to ENV in the goreleaser action
-      # SDKVERSION := $(shell go list -m -u -f '{{.Version}}' github.com/cosmos/cosmos-sdk)
-      # TMVERSION := $(shell go list -m -u -f '{{.Version}}' github.com/tendermint/tendermint)
-      # Also see .goreleaser.yaml to wire up the environment variables
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
 
-      - run: echo ":rocket::rocket::rocket:" > ../release_notes.md 
-        if: startsWith(github.ref, 'refs/tags/')
+      - name: Log in to the Container registry
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Build
-        uses: goreleaser/goreleaser-action@v2
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v4
         with:
-          version: latest
-          args: build --skip-validate   # skip validate skips initial sanity checks in order to be able to fully run
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
-      - name: Release
-        uses: goreleaser/goreleaser-action@v2
-        if: startsWith(github.ref, 'refs/tags/')
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v4
         with:
-          version: latest
-          args: release --rm-dist --release-notes=../release_notes.md
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          context: .
+          platforms: linux/amd64,linux/arm64
+          file: docker/horcrux/Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+  draft-release:
+    needs: build-and-push-image
+    runs-on: ubuntu-latest
+    permissions: write-all
+    steps:
+    - name: Copy Binary
+      run: |
+        docker create -it --entrypoint sh --name amd --platform linux/amd64 ${{ env.REGISTRY }}/${{ github.repository }}:${{ github.ref_name }}
+        docker create -it --entrypoint sh --name arm --platform linux/arm64 ${{ env.REGISTRY }}/${{ github.repository }}:${{ github.ref_name }}
+        docker cp amd:/bin/horcrux ./horcrux_linux-amd64
+        docker cp arm:/bin/horcrux ./horcrux_linux-arm64
+        sha256sum ./horcrux_linux-amd64 > ./horcrux_sha256.txt
+        sha256sum ./horcrux_linux-arm64 >> ./horcrux_sha256.txt
+
+    - name: Draft Release
+      uses: softprops/action-gh-release@v1        
+      with:
+        draft: true
+        files: |
+          horcrux_linux-amd64
+          horcrux_linux-arm64
+          horcrux_sha256.txt

.github/workflows/strangelove-project-managment.yaml

@@ -15,7 +15,7 @@ jobs:
       github.event_name == 'issues' && (github.event.action == 'opened' || github.event.action == 'reopened')
     steps:
       - name: Add Issue to "Motherboard" Project Board
-        uses: leonsteinhaeuser/project-beta-automations@v1.2.1
+        uses: leonsteinhaeuser/project-beta-automations@v2.0.1
         with:
           gh_app_secret_key: ${{ secrets.MB_SECRET_KEY }}
           gh_app_ID: ${{ secrets.MB_APP_ID }}

.github/workflows/tests.yml

@@ -1,4 +1,4 @@
-name: Run Go Tests
+name: Tests
 
 on:
   pull_request:
@@ -13,31 +13,49 @@ on:
       - 'Makefile'
 
 jobs:
-  test:
-    name: run tests
-    runs-on: [self-hosted, linux]
+  unit:
+    runs-on: ubuntu-latest
     steps:
       # Install and setup go
-      - name: Set up Go 1.19
-        uses: actions/setup-go@v2
+      - name: Set up Go 1.21
+        uses: actions/setup-go@v4
         with:
-          go-version: 1.19
+          go-version: '^1.21.4'
 
       # checkout horcrux
       - name: checkout horcrux
-        uses: actions/checkout@v2
-
-      # cleanup docker environment on self-hosted test runner
-      - name: prepare fresh docker environment
-        run: |
-          docker stop $(docker ps -a -q) || true
-          docker rm -f $(docker ps -a -q) || true
-          docker network prune -f || true
-
-      # make sure proto files are up to date
-      - name: generate fresh signer proto .go files
-        run: make signer-proto
+        uses: actions/checkout@v3
 
       # run tests
       - name: run horcrux tests
         run: make test
+  e2e:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        test: 
+          - TestMultipleChainHorcrux
+          - TestChainPureHorcrux
+          - TestDownedSigners2of3
+          - TestDownedSigners3of5
+          - TestLeaderElection2of3
+          - Test2Of3SignerThreeSentries
+          - Test2Of3SignerThreeSentriesUniqueConnection
+          - TestUpgradeValidatorToHorcrux
+          - TestSingleSignerTwoSentries
+          - TestHorcruxProxyGRPC
+    steps:
+      # Install and setup go
+      - name: Set up Go 1.21
+        uses: actions/setup-go@v4
+        with:
+          go-version: '^1.21.4'
+
+      # checkout horcrux
+      - name: checkout horcrux
+        uses: actions/checkout@v3
+
+      # run test matrix
+      - name: run test
+        run: cd test && go test -v -timeout 30m -run ^${{ matrix.test }}$ .

.gitignore

@@ -3,5 +3,8 @@
 build
 data
 private_share_*
+*_shard.json
+rsa_keys.json
 priv_validator_key.json
-dist/
+dist/
+go.work.sum