ic icon indicating copy to clipboard operation
ic copied to clipboard
verified publisher icon dfinity

feat(node): manual recovery short hashes

Open andrewbattat opened this issue 2 weeks ago • 2 comments

NODE-1795

Reworks the manual recovery inputs to only accept a recovery-GuestOS version and recovery artifact hash prefix (first six characters).

Pasted Graphic 2 Pasted Graphic 3

After inputting these two parameters, the recovery-GuestOS update image and recovery artifact tar are downloaded and hashed. These calculated full-hashes are then displayed to the user for verification: Please confim do tese Inget lees etch the recovery cordinater's informat lon

Note that we have entirely removed the version-hash input (the hash of the recovery-GuestOS image). We determined that a recovery-GuestOS hash prefix was unnecessary, as hash-prefix collisions are trivial and the user must now confirm that the full recovery-GuestOS hash matches the value provided by the recovery coordinator.

The recovery artifact hash-prefix had to be retained to be used in the download URL.

andrewbattat avatar Dec 10 '25 23:12 andrewbattat