Elect new replica binary revision [8d4b6898d878fa3db4028b316b78b469ed29f293](https://github.com/dfinity/ic/tree/release-2024-02-07_23-01)

# Release Notes:

Change log since git revision [5c60feaf3d64a745b9a44aa61d44b91d6921541b](https://dashboard.internetcomputer.org/release/5c60feaf3d64a745b9a44aa61d44b91d6921541b)

## Features:

* [[65d3fcad4](https://github.com/dfinity/ic/commit/65d3fcad4)]  Consensus(ecdsa): tECDSA signer component for reduced latency
* [[40ef17f4d](https://github.com/dfinity/ic/commit/40ef17f4d)]  Consensus(ecdsa): Payload builder/verifier for improved tECDSA latency
* [[735ebc8ef](https://github.com/dfinity/ic/commit/735ebc8ef)]  Consensus(ecdsa): Populate `key_unmasked_ref` in `PreSignatureQuadrupleRef`
* [[aab055b89](https://github.com/dfinity/ic/commit/aab055b89)]  Consensus(ecdsa): Move new tECDSA priority function behind feature flag
* [[1dd119090](https://github.com/dfinity/ic/commit/1dd119090)]  Consensus: Add hard bound on notarization/certification and notarization/CUP gap
* [[8d45d7035](https://github.com/dfinity/ic/commit/8d45d7035)]  Crypto: accept also unmasked random origin of `kappa` in `PreSignatureQuadruple`
* [[f1b703465](https://github.com/dfinity/ic/commit/f1b703465)]  Crypto: Add RandomUnmasked transcript operation type
* [[895ee8bcb](https://github.com/dfinity/ic/commit/895ee8bcb)]  Execution,Runtime: Canister can use itself as store for chunked install
* [[9ad470e83](https://github.com/dfinity/ic/commit/9ad470e83)]  Execution,Runtime: Metric for large intra subnet calls
* [[939a5e672](https://github.com/dfinity/ic/commit/939a5e672)]  Execution,Runtime: Add fetch_canister_logs simple query call stub
* [[9ff6758fe](https://github.com/dfinity/ic/commit/9ff6758fe)]  Execution,Runtime: Change instruction buckets to be more granular for install_code messages
* [[e841826d5](https://github.com/dfinity/ic/commit/e841826d5)]  Execution,Runtime: Add log_visibility logic when checking whether an ingress message should be accepted
* [[ed10b3961](https://github.com/dfinity/ic/commit/ed10b3961)]  Node: Remove old vsock code
* [[96127923c](https://github.com/dfinity/ic/commit/96127923c)]  Node: Update config.ini with ipv4 values

## Bugfixes:

* [[e2808ad89](https://github.com/dfinity/ic/commit/e2808ad89)]  Boundary Nodes,Node: remove content type nosniff
* [[c4ac0218b](https://github.com/dfinity/ic/commit/c4ac0218b)]  Boundary Nodes,Node(custom-domains): nginx statement order
* [[402549862](https://github.com/dfinity/ic/commit/402549862)]  Consensus(artifact_pool): Remove warning if unvalidated artifact to be removed doesn't exist
* [[31ade35ab](https://github.com/dfinity/ic/commit/31ade35ab)]  Consensus: use a proper key type for the ECDSA pool keys
* [[67730a29e](https://github.com/dfinity/ic/commit/67730a29e)]  Consensus: Stop ingress selector prematurely removing canisters from selection
* [[6fed0c308](https://github.com/dfinity/ic/commit/6fed0c308)]  Consensus: Fix parameter order in CUP maker error log
* [[e30aaaf82](https://github.com/dfinity/ic/commit/e30aaaf82)]  Execution: only reveal cycles top up balance of frozen canisters to controllers
* [[b34272ac0](https://github.com/dfinity/ic/commit/b34272ac0)]  Execution,Message Routing: Improve fairness of the Ingress Messages to Management Canister
* [[dfcdd4e90](https://github.com/dfinity/ic/commit/dfcdd4e90)]  Execution,Runtime: Query Cache: Avoid caching errors
* [[a8a1f93e7](https://github.com/dfinity/ic/commit/a8a1f93e7)]  Execution,Runtime: Query Cache: Expire data certificate after 1 min
* [[c2a3d1575](https://github.com/dfinity/ic/commit/c2a3d1575)]  Node,T&V: Revert IPV6 prefix changes
* [[570512674](https://github.com/dfinity/ic/commit/570512674)]  Runtime: Raise unzipped Wasm limit

## Performance improvements:

* [[d205e8fb2](https://github.com/dfinity/ic/commit/d205e8fb2)]  Crypto: extend IDKG complaint benchmarks with other modes
* [[7405dfaae](https://github.com/dfinity/ic/commit/7405dfaae)]  Crypto: Add support for multiplication by generator

## Chores:

* [[aa735436a](https://github.com/dfinity/ic/commit/aa735436a)]  Boundary Nodes,Node(boundary-node): extend rosetta list
* [[6fb24fcaa](https://github.com/dfinity/ic/commit/6fb24fcaa)]  Boundary Nodes,Node(custom-domains): clean up after SW removal
* [[a212196cc](https://github.com/dfinity/ic/commit/a212196cc)]  Consensus(orchestrator): Remove unused metrics
* [[5d9e3bf5a](https://github.com/dfinity/ic/commit/5d9e3bf5a)]  Crypto: Bump `tarpc` version to `0.34`
* [[1b47dee89](https://github.com/dfinity/ic/commit/1b47dee89)]  Crypto: Avoid using `use ic_types::*`
* [[0026fd4e2](https://github.com/dfinity/ic/commit/0026fd4e2)]  Crypto: Remove dependency on ic-types in seed crate
* [[40717aafc](https://github.com/dfinity/ic/commit/40717aafc)]  Crypto,Interface(crypto): Add AlgorithmId for threshold BIP340 Schnorr
* [[5280b28d9](https://github.com/dfinity/ic/commit/5280b28d9)]  Execution,Runtime: Fix ic00_permissions comment for fetch_canister_logs
* [[9b5356b65](https://github.com/dfinity/ic/commit/9b5356b65)]  Execution,Runtime: Cleanup execute_subnet_message match statement
* [[d2bfbb4cd](https://github.com/dfinity/ic/commit/d2bfbb4cd)]  Execution,Runtime: Add fetch_canister_logs feature flag
* [[fcc524f77](https://github.com/dfinity/ic/commit/fcc524f77)]  Message Routing: Metric for number of files in checkpoint
* [[1e90c37f4](https://github.com/dfinity/ic/commit/1e90c37f4)]  Message Routing: Better `mr_routed_payload_size_bytes` description
* [[c65c46810](https://github.com/dfinity/ic/commit/c65c46810)]  Networking: build call service with builder and expose it
* [[9514174fd](https://github.com/dfinity/ic/commit/9514174fd)]  Node: Replace libusb with rusb
* [[fba6c0ab4](https://github.com/dfinity/ic/commit/fba6c0ab4)]  Node: Remove ipv4 nameserver propagation and hard-code values into generate_network_config.rs
* [[252d3c1c0](https://github.com/dfinity/ic/commit/252d3c1c0)]  Runtime: Combine replica controller crate
* [[15418fb44](https://github.com/dfinity/ic/commit/15418fb44)]  Runtime: Combine launcher binary with sandbox crate
* [[89302e259](https://github.com/dfinity/ic/commit/89302e259)]  Runtime: Combine sandbox binary and backend_lib crates

## Refactoring:

* [[a4895b9db](https://github.com/dfinity/ic/commit/a4895b9db)]  Execution,Message Routing: Provide a more efficient `ReplicatedState::message_memory_taken()` method
* [[0e23b0a01](https://github.com/dfinity/ic/commit/0e23b0a01)]  Execution,Runtime: Optimize and simplify heartbeat and global timer scheduling
* [[76804dbde](https://github.com/dfinity/ic/commit/76804dbde)]  Networking: rename some types to match better the intent

## Tests:

* [[f8b728841](https://github.com/dfinity/ic/commit/f8b728841)]  Consensus(ecdsa): Add more unit tests for signer with improved latency
* [[0794a082d](https://github.com/dfinity/ic/commit/0794a082d)]  Consensus: fix `assert_consistency` test utility function
* [[a41412346](https://github.com/dfinity/ic/commit/a41412346)]  Crypto: add local vault tests for `idkg_load_transcript`
* [[0c216754a](https://github.com/dfinity/ic/commit/0c216754a)]  Crypto: remove large flag from crypto integration tests
* [[4864e7f44](https://github.com/dfinity/ic/commit/4864e7f44)]  Crypto: move crypto integration test utils into crates
* [[496008542](https://github.com/dfinity/ic/commit/496008542)]  Crypto: Add test that IDKG transcript sizes are as expected
* [[e5b319595](https://github.com/dfinity/ic/commit/e5b319595)]  Crypto: fix `cargo test` for remote vault tests
* [[a450f4da2](https://github.com/dfinity/ic/commit/a450f4da2)]  Crypto: add local vault tests for idkg_create_dealing()
* [[d35c2a7e1](https://github.com/dfinity/ic/commit/d35c2a7e1)]  Crypto: Mark NIDKG transcript size test as #[ignore]
* [[6cddb86d8](https://github.com/dfinity/ic/commit/6cddb86d8)]  Crypto: better names for `Nodes::receivers` and some other fns
* [[e1ebc89a9](https://github.com/dfinity/ic/commit/e1ebc89a9)]  Crypto: split remote vault integration tests
* [[09f53f4c3](https://github.com/dfinity/ic/commit/09f53f4c3)]  Crypto: extend IDKG test infrastructure
* [[f6a72969b](https://github.com/dfinity/ic/commit/f6a72969b)]  Crypto: add `EccPoint` deserialization fuzzer
* [[82c6a46e5](https://github.com/dfinity/ic/commit/82c6a46e5)]  Crypto: Add a cheating dealer test
* [[df4d8328d](https://github.com/dfinity/ic/commit/df4d8328d)]  Execution,Consensus: System Tests for QueryStats feature
* [[2ad42420b](https://github.com/dfinity/ic/commit/2ad42420b)]  Execution,Runtime: Enable DTS by default in execution and scheduler tests
* [[3beed4393](https://github.com/dfinity/ic/commit/3beed4393)]  Execution,Runtime(run-895): Add tests to check whether the DTS slicing for dirty memory copy is disabled for system subnets.
* [[efffe3bbd](https://github.com/dfinity/ic/commit/efffe3bbd)]  Execution,Runtime: Add more fetch_canister_logs tests to verify submitting ingress messages
* [[0014352d0](https://github.com/dfinity/ic/commit/0014352d0)]  Message Routing: State machine based LSMT test
* [[125126042](https://github.com/dfinity/ic/commit/125126042)]  Networking(http-endpoint): Refactored helper function to start endpoint for integration tests
* [[058672d9b](https://github.com/dfinity/ic/commit/058672d9b)]  Node,T&V: Pass IPv6 prefixes via test driver

## Other changes:

* [[5b07a6bd7](https://github.com/dfinity/ic/commit/5b07a6bd7)]  Boundary Nodes,Node: disable throttling for now
* [[86c70dfde](https://github.com/dfinity/ic/commit/86c70dfde)]  Consensus,NNS,T&V,Node(ipv4-for-nodes): make orchestrator pick up IPv4 config
* [[2710b1a8a](https://github.com/dfinity/ic/commit/2710b1a8a)]  Crypto: remove obsolete dependency on ic-crypto
* [[7a512af09](https://github.com/dfinity/ic/commit/7a512af09)]  Crypto: remove unused dependencies in crypto code
* [[7b65c7a6e](https://github.com/dfinity/ic/commit/7b65c7a6e)]  Crypto: remove obsolete getrandom-for-wasm dependency from non-canister code
* [[e7c2f86a2](https://github.com/dfinity/ic/commit/e7c2f86a2)]  Execution,Message Routing,Interface: Assume that Callback::originator, respondent and prepayment_.* are always present
* [[563434696](https://github.com/dfinity/ic/commit/563434696)]  Execution,Runtime: Add new metric for advance install code executions
* [[ad2d9b3b9](https://github.com/dfinity/ic/commit/ad2d9b3b9)]  Message Routing,Execution: () Save Api Boundary Nodes in ReplicatedState metadata
* [[ef23f44ad](https://github.com/dfinity/ic/commit/ef23f44ad)]  Networking,NNS: remove various unused dependencies
* [[58aa6d6cb](https://github.com/dfinity/ic/commit/58aa6d6cb)]  Node: Updating container base images refs [2024-02-06-1029]
* [[f7c33787c](https://github.com/dfinity/ic/commit/f7c33787c)]  Node: Updating container base images refs [2024-02-01-0814]
* [[cb783e1aa](https://github.com/dfinity/ic/commit/cb783e1aa)]  Node: Clean up systemd services
* [[bdd6081e6](https://github.com/dfinity/ic/commit/bdd6081e6)]  Node: Adjust nftables ratelimits
* [[5021a28c2](https://github.com/dfinity/ic/commit/5021a28c2)]  Node: Updating container base images refs [2024-01-31-0730]
* [[390eab8b4](https://github.com/dfinity/ic/commit/390eab8b4)]  Node: Bump vsock version
* [[3d7899f69](https://github.com/dfinity/ic/commit/3d7899f69)]  Node: Updating container base images refs [2024-01-25-0815]
* [[99bffe617](https://github.com/dfinity/ic/commit/99bffe617)]  Node,T&V: Update firewall configuration through SetupOS and HostOS

Forum post for discussion: https://forum.dfinity.org/t/voting-will-soon-be-open-for-two-new-ic-os-releases/27449

# IC-OS Verification

To build and verify the IC-OS disk image, run:

```
# From https://github.com/dfinity/ic#verifying-releases
sudo apt-get install -y curl && curl --proto '=https' --tlsv1.2 -sSLO https://raw.githubusercontent.com/dfinity/ic/8d4b6898d878fa3db4028b316b78b469ed29f293/gitlab-ci/tools/repro-check.sh && chmod +x repro-check.sh && ./repro-check.sh -c 8d4b6898d878fa3db4028b316b78b469ed29f293
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image,
must be identical, and must match the SHA256 from the payload of the NNS proposal.