search

fedimint / fedimint

Federated E-Cash Mint
https://fedimint.org/
MIT License
537 stars 210 forks source link

feat: enable shutdown after certain session index for a coordinated consensus upgrade #5194

Closed joschisan closed 2 weeks ago

joschisan commented 2 weeks ago

The intended shutdown procedure for this is that all guardians select a session to shutdown, let’s say via a group chat, that is sufficiently long in the future for all of them to set the index to shutdown at, so let’s say something like 15minutes. Then, when the guardians have shut down, every guardian needs to check that it has shut down at the at the intended index and confirm with each other via chat; this may not be the case of a guardian is lagging behind sufficiently. If not, retry. Only if successful for every guardian we can initialise the upgrade.

elsirion commented 2 weeks ago

Would be great to have a devimint test that checks that

  1. The signed session count in the DB is as expected for all peers
  2. That the current-session AlephBFT DB table is empty
justinmoon commented 2 weeks ago

dev call: we should have test coverage for this. we could implement by dumping the db after all fedimintd's have shutdown ...