社区提的意见,这次真的进了更新。
@bluwhaleai Nodes 这次安全升级,重点不是加功能,而是根据社区反馈改进了私钥处理方式。
不再放配置文件,改放受保护内存,通过本地 Unix Socket 加载。社区反馈进了代码,比写在公告里有用。
运营者升镜像、调配置、启动后用 CLI 加载即可,具体步骤看官方公告。
很多项目把反馈当噪音,Bluwhale 这次是直接改了节点私钥的存储和加载机制。跑节点的人提的痛点,被认真处理了。
节点用户最清楚,安全机制能迭代,比一次喊完“已加固”更有用。
持续改,比一次说完安全更重要。
🔐 Bluwhale Nodes Security Upgrade
We've improved private key security based on community feedback.
🔒 What's Improved?
🔹 Private keys are no longer stored in config files
🔹 Keys are kept in protected memory
🔹 Secure key loading via local Unix socket
⚙️ For Node Operators:
1️⃣ Upgrade your Docker image from bf4c8e1 to bd5ca77:
2️⃣ Remove privateKey from conf/config.yaml (`keySocketPath` is optional)
3️⃣ Add ulimits.memlock to docker-compose.yaml
4️⃣ Start your node, then load your private key via CLI
⚠️ Important: Nodes will only begin sending heartbeats after the private key is loaded.
Thank you for helping us improve Bluwhale Nodes! 🐳
더 보기