feat(bitcoin): multi-version support for Core & Knots (install/switch/pin/auto-update)
Lets a node runner choose which Bitcoin Core / Knots version to install
(latest pre-selected), then switch, pin, or opt into auto-update from the
app's interface — all manifest/catalog-driven, rootless, signed-registry,
zero-data-loss. Motivated by upcoming BIP-110 signalling: runners need a
real choice of software version.
Backend:
- version_config.rs: per-app pin + auto-update persistence (atomic, merge-
preserving), downgrade detection, auto-update enumeration (+ unit tests).
- app_catalog.rs: CatalogVersion / versions[] schema, catalog_versions(),
catalog_image_for_version() (same-repo guard); a pin suppresses the update
badge.
- prod_orchestrator.rs: pinned version wins over the catalog default on every
install/recreate.
- install.rs: install-time `version` param persisted (default = unpinned).
- set_config.rs: package.versions (read) + package.set-config (write) RPCs;
downgrade is gated behind explicit confirm (warn + confirm + allow).
- update.rs/main.rs: hourly per-app auto-update tick via the orchestrator
(opt-in, pin-respecting); fix handle_package_update to be non-fatal for
orchestrator-managed apps lacking a catalog primary image (bitcoin-core).
UI:
- MarketplaceAppDetails.vue: install-time version selector (shown when an app
offers >=2 versions).
- appDetails/AppSidebar.vue: "Version & Updates" card (switch / pin / auto-
update toggle / downgrade warning), per app.
- rpc-client.ts + en.json: RPC methods, types, strings.
Phase 0 image pipeline:
- scripts/build-bitcoin-image.sh: download official tarball + SHA256SUMS(.asc),
verify SHA-256 + pinned-maintainer OpenPGP signature (fail-closed), build a
minimal rootless image, smoke-test, tag + push.
- apps/bitcoin-core/Dockerfile rewritten (drops stale community base);
apps/bitcoin-knots/Dockerfile added.
- generate-app-catalog.sh: emit curated versions[]; published + catalog now
offers Core 25.2/26.2/27.2/28.4/29.3/30.2/31.0 + Knots 29.3.knots20260508.
docs/bitcoin-multi-version-design.md: live progress tracker.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-28 18:46:17 -04:00
|
|
|
# Bitcoin Core — minimal rootless image built from the OFFICIAL upstream release.
|
|
|
|
|
#
|
|
|
|
|
# The CANONICAL, verified build path is scripts/build-bitcoin-image.sh, which
|
|
|
|
|
# downloads the upstream tarball, verifies SHA-256 + the OpenPGP signature
|
|
|
|
|
# (fail-closed), and tags/pushes <registry>/bitcoin:<version>. This Dockerfile
|
|
|
|
|
# mirrors that image for a manual/local build and replaces the old stale
|
|
|
|
|
# community base (`FROM bitcoin/bitcoin:24.0`).
|
|
|
|
|
#
|
|
|
|
|
# Build (binaries must be pre-fetched + verified into ./bin — see the script):
|
|
|
|
|
# scripts/build-bitcoin-image.sh core 31.0
|
|
|
|
|
FROM debian:bookworm-slim
|
|
|
|
|
ARG BITCOIN_VERSION=31.0
|
|
|
|
|
RUN set -eux; \
|
|
|
|
|
apt-get update; \
|
|
|
|
|
apt-get install -y --no-install-recommends ca-certificates; \
|
|
|
|
|
rm -rf /var/lib/apt/lists/*; \
|
|
|
|
|
useradd -m -u 1000 -s /bin/bash bitcoin; \
|
|
|
|
|
mkdir -p /home/bitcoin/.bitcoin; \
|
|
|
|
|
chown -R bitcoin:bitcoin /home/bitcoin
|
|
|
|
|
# bin/ holds the SHA-256 + GPG-verified bitcoind / bitcoin-cli (Guix-built,
|
|
|
|
|
# x86_64-linux-gnu) extracted from the official release tarball.
|
|
|
|
|
COPY bin/bitcoind /usr/local/bin/bitcoind
|
|
|
|
|
COPY bin/bitcoin-cli /usr/local/bin/bitcoin-cli
|
|
|
|
|
RUN chmod 0755 /usr/local/bin/bitcoind /usr/local/bin/bitcoin-cli
|
fix(bitcoin): bulletproof multi-version switching (Knots & Core)
Three stacked bugs made "switch version" silently fail / crash-loop, and
the data-access mismatch corrupted a node's index during recovery attempts.
Backend renderer:
- sync_quadlet_unit ignored the per-app pinned version and re-rendered the
quadlet with the manifest's :latest every reconcile tick, reverting any
switch. Factor the install-time catalog/pin resolution into a shared
resolve_catalog_image() and call it in BOTH install_fresh and
sync_quadlet_unit.
- The renderer folded manifest `entrypoint: ["sh","-lc"]` into Exec=, which
only worked when the image entrypoint was a passthrough shell wrapper. The
versioned images use ENTRYPOINT ["bitcoind"], so Exec=sh -lc ... became
`bitcoind sh -lc ...` and crash-looped. Emit a real Entrypoint= override;
exec_changed now also compares Entrypoint=.
Images:
- Build all bitcoin images (Core + Knots, every version) as container-root
(USER removed) like the legacy :latest image. Chain data is owned by the
data_uid (container uid 102); root reads it via CAP_DAC_OVERRIDE (granted in
the manifest). A non-root USER (the previous uid 1000) can't read existing
chain data → "Error initializing block database". Still fully rootless:
container-root maps to the unprivileged host service user.
Catalog:
- bitcoin-knots versions[]: 29.3.knots20260508/20260507/20260210 +
29.2.knots20251110, "latest" tracking newest.
- bitcoin-core versions[]: add 29.2 + a "latest" entry. All images rebuilt
root and published to the mirror.
Frontend:
- AppSidebar version dropdown: rename the latest option to "Always use the
latest version" (no v prefix), fix right padding, and guarantee the current
selection matches a real option (was rendering blank).
- New InstallVersionModal: full-screen version chooser shown from the App
Store / Discover install button for multi-version apps (Bitcoin Knots/Core),
app icon + "Install <name>", latest pre-selected.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-29 05:46:04 -04:00
|
|
|
# Run as (container) root, like the legacy hand-built :latest image. Rootless
|
|
|
|
|
# Podman maps container-root to the unprivileged host service user; the manifest
|
|
|
|
|
# grants CAP_DAC_OVERRIDE so bitcoind can read its data dir, which the
|
|
|
|
|
# orchestrator chowns to the data_uid (host 100101 / container uid 102), not to
|
|
|
|
|
# this image's `bitcoin` user. A non-root USER can't read existing chain data and
|
|
|
|
|
# bitcoind crash-loops with "Error initializing block database".
|
feat(bitcoin): multi-version support for Core & Knots (install/switch/pin/auto-update)
Lets a node runner choose which Bitcoin Core / Knots version to install
(latest pre-selected), then switch, pin, or opt into auto-update from the
app's interface — all manifest/catalog-driven, rootless, signed-registry,
zero-data-loss. Motivated by upcoming BIP-110 signalling: runners need a
real choice of software version.
Backend:
- version_config.rs: per-app pin + auto-update persistence (atomic, merge-
preserving), downgrade detection, auto-update enumeration (+ unit tests).
- app_catalog.rs: CatalogVersion / versions[] schema, catalog_versions(),
catalog_image_for_version() (same-repo guard); a pin suppresses the update
badge.
- prod_orchestrator.rs: pinned version wins over the catalog default on every
install/recreate.
- install.rs: install-time `version` param persisted (default = unpinned).
- set_config.rs: package.versions (read) + package.set-config (write) RPCs;
downgrade is gated behind explicit confirm (warn + confirm + allow).
- update.rs/main.rs: hourly per-app auto-update tick via the orchestrator
(opt-in, pin-respecting); fix handle_package_update to be non-fatal for
orchestrator-managed apps lacking a catalog primary image (bitcoin-core).
UI:
- MarketplaceAppDetails.vue: install-time version selector (shown when an app
offers >=2 versions).
- appDetails/AppSidebar.vue: "Version & Updates" card (switch / pin / auto-
update toggle / downgrade warning), per app.
- rpc-client.ts + en.json: RPC methods, types, strings.
Phase 0 image pipeline:
- scripts/build-bitcoin-image.sh: download official tarball + SHA256SUMS(.asc),
verify SHA-256 + pinned-maintainer OpenPGP signature (fail-closed), build a
minimal rootless image, smoke-test, tag + push.
- apps/bitcoin-core/Dockerfile rewritten (drops stale community base);
apps/bitcoin-knots/Dockerfile added.
- generate-app-catalog.sh: emit curated versions[]; published + catalog now
offers Core 25.2/26.2/27.2/28.4/29.3/30.2/31.0 + Knots 29.3.knots20260508.
docs/bitcoin-multi-version-design.md: live progress tracker.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-28 18:46:17 -04:00
|
|
|
WORKDIR /home/bitcoin
|
|
|
|
|
VOLUME ["/home/bitcoin/.bitcoin"]
|
|
|
|
|
EXPOSE 8332 8333
|
|
|
|
|
ENTRYPOINT ["bitcoind"]
|