Release v0.1.1.0

.github/workflows/build-test.yml

@@ -0,0 +1,58 @@
+name: ci/gh-actions/windows-build-test
+
+on:
+  workflow_dispatch:
+  push:
+    paths-ignore:
+      - '**/*.md'
+  pull_request:
+    paths-ignore:
+      - '**/*.md'
+
+env:
+  USE_DEVICE_TREZOR_MANDATORY: ON
+  CCACHE_TEMPDIR: /tmp/.ccache-temp
+  CCACHE_DIR: /tmp/.ccache
+  CCACHE_SETTINGS: |
+    ccache --max-size=150M
+    ccache --set-config=compression=true
+
+jobs:
+  windows:
+    runs-on: windows-latest
+    defaults:
+      run:
+        shell: msys2 {0}
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        submodules: recursive
+    - uses: msys2/setup-msys2@v2
+      with:
+        msystem: MINGW64
+        update: true
+        install: mingw-w64-x86_64-toolchain mingw-w64-x86_64-autotools mingw-w64-x86_64-doxygen mingw-w64-x86_64-cmake mingw-w64-x86_64-ccache mingw-w64-x86_64-openssl mingw-w64-x86_64-zeromq mingw-w64-x86_64-libsodium mingw-w64-x86_64-hidapi mingw-w64-x86_64-protobuf mingw-w64-x86_64-libusb mingw-w64-x86_64-unbound mingw-w64-x86_64-graphviz git mingw-w64-x86_64-pkgconf mingw-w64-x86_64-ccache mingw-w64-x86_64-libunwind mingw-w64-x86_64-gperf mingw-w64-x86_64-miniupnpc mingw-w64-x86_64-zeromq mingw-w64-x86_64-cppzmq mingw-w64-x86_64-gpgme mingw-w64-x86_64-dlfcn patch zip
+    - name: ccache
+      uses: actions/cache@v4
+      with:
+        path: ${{ steps.msys2.outputs.msys2-location }}\tmp\.ccache
+        key: ccache-${{ runner.os }}-msys2-${{ github.sha }}
+        restore-keys: ccache-${{ runner.os }}-msys2
+    - name: install boost
+      run: |
+        pacman --noconfirm -U contrib/mingw-w64-x86_64-boost-1.83.0-2-any.pkg.tar.zst
+    - name: build
+      run: |
+        ${{ env.CCACHE_SETTINGS }}
+        make -j$(nproc) release-static-win-x86_64
+    - name: package
+      run: |
+        cd "${{ github.workspace }}\build\release\bin"
+        zip -9 ../win-x64.zip morelo*
+        cd ..
+        mv win-x64.zip $(sha256sum win-x64.zip | cut -d " " -f 1).zip
+    - uses: actions/upload-artifact@v4
+      with:
+        name: win-x64
+        path: '${{ github.workspace }}\build\release\*.zip'
+        compression-level: 0

.github/workflows/build.yml

@@ -1,90 +1,96 @@
 name: ci/gh-actions/build
 
-on: [push, pull_request, workflow_dispatch]
+on:
+  workflow_dispatch:
+  push:
+    paths-ignore:
+      - '**/*.md'
+  pull_request:
+    paths-ignore:
+      - '**/*.md'
 
 env:
-  APT_SET_CONF: |
-        echo "Acquire::Retries \"3\";"         | sudo tee -a /etc/apt/apt.conf.d/80-custom
-        echo "Acquire::http::Timeout \"120\";" | sudo tee -a /etc/apt/apt.conf.d/80-custom
-        echo "Acquire::ftp::Timeout \"120\";"  | sudo tee -a /etc/apt/apt.conf.d/80-custom
+  APT_INSTALL: 'sudo apt-get update && sudo apt-get -y install build-essential cmake pkg-config libboost-all-dev libssl-dev libsodium-dev libunwind-dev liblzma-dev libreadline-dev libldns-dev libexpat1-dev libudev-dev libusb-1.0-0-dev libhidapi-dev xsltproc gperf autoconf automake libtool-bin miniupnpc doxygen graphviz libunbound-dev libzmq3-dev libnorm-dev libpgm-dev libprotobuf-dev protobuf-compiler ccache'
+  USE_DEVICE_TREZOR_MANDATORY: ON
+  CCACHE_TEMPDIR: /tmp/.ccache-temp
+  CCACHE_DIR: /tmp/.ccache
   CCACHE_SETTINGS: |
-        ccache --max-size=150M
-        ccache --set-config=compression=true
+    ccache --max-size=150M
+    ccache --set-config=compression=true
+
 jobs:
-  build-windows:
-    runs-on: ubuntu-20.04
-    env:
-      CCACHE_TEMPDIR: /tmp/.ccache-temp
-    strategy:
-      fail-fast: false
-      matrix:
-        toolchain:
-          - name: "build-depends-windows-x64"
-            host: "x86_64-w64-mingw32"
-            packages: "cmake python3 g++-mingw-w64-x86-64 qttools5-dev-tools"
-    name: ${{ matrix.toolchain.name }}
+  windows:
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         submodules: recursive
-# Most volatile cache
     - name: ccache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
-        path: ~/.ccache
-        key: ccache-${{ matrix.toolchain.host }}-${{ github.sha }}
-        restore-keys: ccache-${{ matrix.toolchain.host }}-
-# Less volatile cache
-    - name: depends cache
-      uses: actions/cache@v3
+        path: /tmp/.ccache
+        key: ccache-${{ runner.os }}-x86_64-w64-mingw32-${{ github.sha }}
+        restore-keys: ccache-${{ runner.os }}-x86_64-w64-mingw32
+    - name: depends ccache
+      uses: actions/cache@v4
       with:
         path: contrib/depends/built
-        key: depends-${{ matrix.toolchain.host }}-${{ hashFiles('contrib/depends/packages/*') }}
+        key: ccache-depends-${{ runner.os }}-x86_64-w64-mingw32-${{ hashFiles('contrib/depends/packages/*') }}
         restore-keys: |
-          depends-${{ matrix.toolchain.host }}-${{ hashFiles('contrib/depends/packages/*') }}
-          depends-${{ matrix.toolchain.host }}-
-# Static cache
-    - name: set apt conf
-      run: ${{env.APT_SET_CONF}}
+          ccache-depends-${{ runner.os }}-x86_64-w64-mingw32-${{ hashFiles('contrib/depends/packages/*') }}
+          ccache-depends-${{ runner.os }}-x86_64-w64-mingw32
     - name: install dependencies
-      run: sudo apt update; sudo apt -y install libboost-all-dev libsodium-dev build-essential libtool cmake autotools-dev automake pkg-config bsdmainutils curl git ca-certificates ccache ${{ matrix.toolchain.packages }}
-    - name: prepare w64-mingw32
-      if: ${{ matrix.toolchain.host == 'x86_64-w64-mingw32' }}
+      run: ${{ env.APT_INSTALL }} g++-mingw-w64-x86-64 zip
+    - name: prepare toolchain
       run: |
-        sudo update-alternatives --set ${{ matrix.toolchain.host }}-g++ $(which ${{ matrix.toolchain.host }}-g++-posix)
-        sudo update-alternatives --set ${{ matrix.toolchain.host }}-gcc $(which ${{ matrix.toolchain.host }}-gcc-posix)
+        sudo update-alternatives --set x86_64-w64-mingw32-g++ $(which x86_64-w64-mingw32-g++-posix)
+        sudo update-alternatives --set x86_64-w64-mingw32-gcc $(which x86_64-w64-mingw32-gcc-posix)
     - name: build
       run: |
-        ${{env.CCACHE_SETTINGS}}
-        make depends target=${{ matrix.toolchain.host }} cmake_opts=${{ matrix.toolchain.cmake_opts }} -j2
-    - uses: actions/upload-artifact@v3
-      if: ${{ matrix.toolchain.host == 'x86_64-w64-mingw32' || matrix.toolchain.host == 'x86_64-unknown-linux-gnu' || matrix.toolchain.host == 'aarch64-linux-gnu' || 'arm-linux-gnueabihf' }}
+        ${{ env.CCACHE_SETTINGS }}
+        make -j$(nproc) depends target=x86_64-w64-mingw32 buildtag=win-x64
+    - name: package
+      run: |
+        cd ${{ github.workspace }}/build/release/bin
+        zip -9 ../win-x64.zip morelo*
+        cd ..
+        mv win-x64.zip $(sha256sum win-x64.zip | cut -d " " -f 1).zip
+    - uses: actions/upload-artifact@v4
       with:
-        name: windows-release
-        path: |
-          /home/runner/work/morelo/morelo/build/${{ matrix.toolchain.host }}/release/bin/morelo*
+        name: win-x64
+        path: '${{ github.workspace }}/build/release/*.zip'
+        compression-level: 0
 
-  build-ubuntu:
-    runs-on: ubuntu-20.04
+  linux:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ ubuntu-24.04, ubuntu-22.04 ]
+    env:
+      BUILD_NAME: ${{ matrix.os == 'ubuntu-24.04' && 'ubuntu24' || 'ubuntu22' }}
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v4
       with:
         submodules: recursive
-    - name: remove bundled boost
-      run: sudo rm -rf /usr/local/share/boost
-    - name: set apt conf
-      run: |
-        echo "Acquire::Retries \"3\";" | sudo tee -a /etc/apt/apt.conf.d/80-custom
-        echo "Acquire::http::Timeout \"120\";" | sudo tee -a /etc/apt/apt.conf.d/80-custom
-        echo "Acquire::ftp::Timeout \"120\";" | sudo tee -a /etc/apt/apt.conf.d/80-custom
-    - name: update apt
-      run: sudo apt update
-    - name: install morelo dependencies
-      run: sudo apt -y install libboost-all-dev build-essential cmake graphviz doxygen libunwind8-dev pkg-config libssl-dev libsodium-dev libhidapi-dev libusb-1.0-0-dev gperf libreadline-dev
+    - uses: actions/cache@v4
+      with:
+        path: /tmp/.ccache
+        key: ccache-${{ runner.os }}-${{ matrix.os }}-${{ github.sha }}
+        restore-keys: ccache-${{ runner.os }}-${{ matrix.os }}
+    - name: install dependencies
+      run: ${{ env.APT_INSTALL }}
     - name: build
-      run: make -j2
-    - name: Upload linux artifacts
-      uses: actions/upload-artifact@master
+      run: |
+        ${{ env.CCACHE_SETTINGS }}
+        make -j$(nproc) release-${{ env.BUILD_NAME }}
+    - name: package
+      run: |
+        cd ${{ github.workspace }}/build/release/bin
+        tar cJf ../linux-x64-${{ env.BUILD_NAME }}.tar.xz --owner=0 --group=0 morelo*
+        cd ..
+        mv linux-x64-${{ env.BUILD_NAME }}.tar.xz $(sha256sum linux-x64-${{ env.BUILD_NAME }}.tar.xz | cut -d " " -f 1).tar.xz
+    - uses: actions/upload-artifact@v4
       with:
-        name: linux-release
-        path: 'build/**/**/morelo*'
+        name: linux-x64-${{ env.BUILD_NAME }}
+        path: '${{ github.workspace }}/build/release/*.tar.xz'
+        compression-level: 0

ANONYMITY_NETWORKS.md

@@ -1,6 +1,6 @@
-# Anonymity Networks with Arqma
+# Anonymity Networks with Morelo
 
-Currently only Tor and I2P have been integrated into Arqma. The usage of
+Currently only Tor and I2P have been integrated into Morelo. The usage of
 these networks is still considered experimental - there are a few pessimistic
 cases where privacy is leaked. The design is intended to maximize privacy of
 the source of a transaction by broadcasting it over an anonymity network, while
@@ -16,11 +16,11 @@ will only be sent to peers on anonymity networks. If an anonymity network is
 enabled but no peers over an anonymity network are available, an error is
 logged and the transaction is kept for future broadcasting over an anonymity
 network. The transaction will not be broadcast unless an anonymity connection
-is made or until `arqmad` is shutdown and restarted with only public
+is made or until `morelod` is shutdown and restarted with only public
 connections enabled.
 
-Anonymity networks can also be used with `arqma-wallet-cli` and
-`arqma-wallet-rpc` - the wallets will connect to a daemon through a proxy. The
+Anonymity networks can also be used with `morelo-wallet-cli` and
+`morelo-wallet-rpc` - the wallets will connect to a daemon through a proxy. The
 daemon must provide a hidden service for the RPC itself, which is separate from
 the hidden service for P2P connections.
 
@@ -42,13 +42,13 @@ additional peers can be found through typical p2p peerlist sharing.
 ### Outbound Connections
 
 Connecting to an anonymous address requires the command line option
-`--proxy` which tells `arqmad` the ip/port of a socks proxy provided by a
+`--proxy` which tells `morelod` the ip/port of a socks proxy provided by a
 separate process. On most systems the configuration will look like:
 
 > `--proxy tor,127.0.0.1:9050,10`
 > `--proxy i2p,127.0.0.1:9000`
 
-which tells `arqmad` that ".onion" p2p addresses can be forwarded to a socks
+which tells `morelod` that ".onion" p2p addresses can be forwarded to a socks
 proxy at IP 127.0.0.1 port 9050 with a max of 10 outgoing connections and
 ".b32.i2p" p2p addresses can be forwarded to a socks proxy at IP 127.0.0.1 port
 9000 with the default max outgoing connections. Since there are no seed nodes
@@ -64,29 +64,29 @@ seed nodes on ALL networks, which will typically be undesireable.
 ### Inbound Connections
 
 Receiving anonymity connections is done through the option
-`--anonymous-inbound`. This option tells `arqmad` the inbound address, network
+`--anonymous-inbound`. This option tells `morelod` the inbound address, network
 type, and max connections:
 
 > `--anonymous-inbound rveahdfho7wo4b2m.onion:29996,127.0.0.1:29996,25`
 > `--anonymous-inbound cmeua5767mz2q5jsaelk2rxhf67agrwuetaso5dzbenyzwlbkg2q.b32.i2p:5000,127.0.0.1:30000`
 
-which tells `arqmad` that a max of 25 inbound Tor connections are being
-received at address "rveahdfho7wo4b2m.onion:29996" and forwarded to `arqmad`
+which tells `morelod` that a max of 25 inbound Tor connections are being
+received at address "rveahdfho7wo4b2m.onion:29996" and forwarded to `morelod`
 localhost port 29996, and a default max I2P connections are being received at
 address "cmeua5767mz2q5jsaelk2rxhf67agrwuetaso5dzbenyzwlbkg2q.b32.i2p:5000" and
-forwarded to `arqmad` localhost port 30000.
+forwarded to `morelod` localhost port 30000.
 These addresses will be shared with outgoing peers, over the same network type,
 otherwise the peer will not be notified of the peer address by the proxy.
 
 ### Wallet RPC
 
 An anonymity network can be configured to forward incoming connections to a
-`arqmad` RPC port - which is independent from the configuration for incoming
+`morelod` RPC port - which is independent from the configuration for incoming
 P2P anonymity connections. The anonymity network (Tor/i2p) is
 [configured in the same manner](#configuration), except the localhost port
 must be the RPC port (typically 19994 for mainnet) instead of the p2p port:
 
-> HiddenServiceDir /var/lib/tor/data/arqma
+> HiddenServiceDir /var/lib/tor/data/morelo
 > HiddenServicePort 19994 127.0.0.1:19994
 Then the wallet will be configured to use a Tor/i2p address:
 > `--proxy 127.0.0.1:9050`
@@ -121,12 +121,12 @@ distribute the address to its other peers.
 Tor must be configured for hidden services. An example configuration ("torrc")
 might look like:
 
-> HiddenServiceDir /var/lib/tor/data/arqma
+> HiddenServiceDir /var/lib/tor/data/morelo
 > HiddenServicePort 29996 127.0.0.1:29996
 
-This will store key information in `/var/lib/tor/data/arqma` and will forward
+This will store key information in `/var/lib/tor/data/morelo` and will forward
 "Tor port" 29996 to port 29996 of ip 127.0.0.1. The file
-`/usr/lib/tor/data/arqma/hostname` will contain the ".onion" address for use
+`/usr/lib/tor/data/morelo/hostname` will contain the ".onion" address for use
 with `--anonymous-inbound`.
 
 I2P must be configured with a standard server tunnel. Configuration differs by
@@ -146,7 +146,7 @@ sees a transaction over Tor, it could _assume_ (possibly incorrectly) that the
 transaction originated from the peer. If both the Tor connection and an
 IPv4/IPv6 connection have timestamps that are approximately close in value they
 could be used to link the two connections. This is less likely to happen if the
-system clock is fairly accurate - many peers on the Arqma-Network should have
+system clock is fairly accurate - many peers on the Morelo metwork should have
 similar timestamps.
 
 #### Mitigation
@@ -159,31 +159,31 @@ more difficult.
 
 ### Bandwidth Usage
 
-An ISP can passively monitor `arqmad` connections from a node and observe when
+An ISP can passively monitor `morelod` connections from a node and observe when
 a transaction is sent over a Tor/I2P connection via timing analysis + size of
 data sent during that timeframe. I2P should provide better protection against
 this attack - its connections are not circuit based. However, if a node is
-only using I2P for broadcasting Arqma transactions, the total aggregate of
+only using I2P for broadcasting Morelo transactions, the total aggregate of
 I2P data would also leak information.
 
 #### Mitigation
 
 There is no current mitigation for the user right now. This attack is fairly
-sophisticated, and likely requires support from the internet host of an Arqma
+sophisticated, and likely requires support from the internet host of an Morelo
 user.
 
 In the near future, "whitening" the amount of data sent over anonymity network
 connections will be performed. An attempt will be made to make a transaction
 broadcast indistinguishable from a peer timed sync command.
 
-### Intermittent Arqma Syncing
+### Intermittent Morelo Syncing
 
-If a user only runs `arqmad` to send a transaction then quit, this can also
+If a user only runs `morelod` to send a transaction then quit, this can also
 be used by an ISP to link a user to a transaction.
 
 #### Mitigation
 
-Run `arqmad` as often as possible to conceal when transactions are being sent.
+Run `morelod` as often as possible to conceal when transactions are being sent.
 Future versions will also have peers that first receive a transaction over an
 anonymity network delay the broadcast to public peers by a randomized amount.
 This will not completetely mitigate a user who syncs up sends then quits, in