-blue){kind=icon}
This is the documentation on how to create a council node for Crypto.com chain on its version 0.5 on a physical machine running Ubuntu 18.04 You basically need a local machine with some specific characteristics and some specific software running on it
You need a computer with a processor compatible with SGX instructions. The cheapest one I've found in Spain is this:
- Computer: https://www.pccomponentes.com/barebone-intel-nuc-nuc7cjyh2-intel-celeron-j4005
- Memory: https://www.pccomponentes.com/goodram-sodimm-ddr4-2400mhz-8gb-cl17
- Hard Drive: https://www.pccomponentes.com/kingston-a400-ssd-120-gb
For a total of 182€ (at the 5th of August 2020) you can have it all.
If you want to check out if your current computer can process SGX instructions (or you're looking for advice when getting a new computer) check this repo: https://github.com/ayeks/SGX-hardware
⚠️ Important! If you choose the Intel NUC like I did, you will need to change something on the BIOS in order to activate SGX and disable the SecureBoot. Take note of these images:
Click here to select "Security"
This has to be “Enabled”
Deactivate this:
You need to install Ubuntu 18.04 Server. I won't explain how to install Ubuntu on a fresh machine, but you can follow this guide if you need to: https://www.fosslinux.com/6406/how-to-install-ubuntu-server-18-04-lts.htm
You need to connect by SSH/Telnet to the machine, if you need help with that, please follow this guide: https://www.digitalocean.com/community/tutorials/how-to-use-ssh-to-connect-to-a-remote-server-in-ubuntu
sudo apt update && sudo apt upgrade -y && sudo apt autoremove
sudo apt install -y gcc dkms jq unzipwget https://raw.githubusercontent.com/ayeks/SGX-hardware/master/test-sgx.c
gcc test-sgx.c -o test-sgx
./test-sgxubuntu@intel-nuc:~$ ./test-sgx
eax: 706a1 ebx: 400800 ecx: 4ff8ebbf edx: bfebfbff
stepping 1
model 10
family 6
processor type 0
extended model 7
extended family 0
smx: 0
Extended feature bits (EAX=07H, ECX=0H)
eax: 0 ebx: 2294e287 ecx: 40400004 edx: ac000400
sgx available: 1
sgx launch control: 1
CPUID Leaf 12H, Sub-Leaf 0 of Intel SGX Capabilities (EAX=12H,ECX=0)
eax: 3 ebx: 1 ecx: 0 edx: 241f
sgx 1 supported: 1
sgx 2 supported: 1
MaxEnclaveSize_Not64: 1f
MaxEnclaveSize_64: 24The important parts are these:
sgx available: 1
sgx 1 supported: 1I strongly recommend to work inside a subfolder within your home directory, so you need to create it and get in:
cd ~
mkdir crypto_node
cd crypto_node
⚠️ This whole guide will assume you're using the~/crypto_nodefolder. If you're using a different one, take care with all the upcoming commands
sudo apt-get install -y libssl-dev libcurl4-openssl-dev libprotobuf-dev
sudo apt-get install -y build-essential pythonYou need to download the most updated version of the driver and the SDK. Check this page, and download the most updated versions:
https://download.01.org/intel-sgx/sgx-linux/2.9.1/distro/ubuntu18.04-server/
(As of 5th of August 2020 these are the most updated files)
wget https://download.01.org/intel-sgx/sgx-linux/2.9.1/distro/ubuntu18.04-server/sgx_linux_x64_driver_1.33.bin
wget https://download.01.org/intel-sgx/sgx-linux/2.9.1/distro/ubuntu18.04-server/sgx_linux_x64_driver_2.6.0_95eaa6f.binsudo chmod +x sgx_linux_x64_driver_1.33.bin
sudo ./sgx_linux_x64_driver_1.33.bin
sudo chmod +x sgx_linux_x64_driver_2.6.0_95eaa6f.bin
sudo ./sgx_linux_x64_driver_2.6.0_95eaa6f.binsudo reboot nowcd ~/crypto_nodeubuntu@intel-nuc:~$ ls -l /dev/isgx
crw-rw-rw- 1 root root 10, 54 Aug 9 09:31 /dev/isgxecho 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu bionic main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo apt-key add -
sudo apt-get update
sudo apt-get install -y libsgx-launch libsgx-urts
sudo apt-get install -y libsgx-epid libsgx-urts
sudo apt-get install -y libsgx-quote-ex libsgx-urtswget https://download.01.org/intel-sgx/sgx-linux/2.9/as.ld.objdump.gold.r1.tar.gz
sudo tar -xf as.ld.objdump.gold.r1.tar.gz
cd external/toolset/
sudo chmod +x *
sudo cp * /usr/local/bin
cd ../..sudo apt install -y libsgx-uae-service
sudo apt install -y libzmq3-devcd ~/crypto_node
sudo apt update
curl -LOJ https://github.com/tendermint/tendermint/releases/download/v0.33.7/tendermint_v0.33.7_linux_amd64.zip
unzip tendermint_v0.33.7_linux_amd64.zipcd ~/crypto_node
curl -LOJ https://github.com/crypto-com/chain/releases/download/v0.5.4/crypto-com-chain-release-0.5.4.tar.gz
tar -zxvf crypto-com-chain-release-0.5.4.tar.gzcd ~/crypto_node
./tendermint init --home ~/crypto_node/.tendermint
cd ~/crypto_node/.tendermint/config/
curl https://raw.githubusercontent.com/crypto-com/chain-docs/master/docs/getting-started/assets/genesis_file/v0.5/genesis.json > ~/crypto_node/.tendermint/config/genesis.json[ $(md5sum genesis.json | awk '{print $1}') = "1c518490f523153f5a644d47deb1a3c1" ] && echo "OK!" || echo "MISMATCHED"
## Should be showing "OK!"ps ax | grep aesmIt should show something like this:
23159 ? Ssl 0:00 /opt/intel/sgx-aesm-service/aesm/aesm_service
24540 pts/0 S+ 0:00 grep --color=auto aesmSo basically everythign has to be inside the crypto_node folder, and just that folder in your main /home folder
cd ~
ls -lIt should show something like this:
ubuntu@intel-nuc:~$ ls -l
total 4
drwxrwxr-x 10 ubuntu ubuntu 4096 Aug 17 11:12 crypto_nodeAnd then, inside the crypto_node folder:
cd ~/crypto_node
ls -laIt should show something like this:
ubuntu@intel-nuc:~/crypto_node$ ls -la
total 407524
drwxrwxr-x 10 ubuntu ubuntu 4096 Aug 17 11:12 .
drwxr-xr-x 8 ubuntu ubuntu 4096 Aug 29 09:52 ..
drwxrwxr-x 3 ubuntu ubuntu 4096 Aug 9 17:42 .cro-storage
drwxrwxr-x 3 ubuntu ubuntu 4096 Aug 15 11:06 .storage
drwx------ 4 ubuntu ubuntu 4096 Aug 9 17:49 .tendermint
-rw-rw-r-- 1 ubuntu ubuntu 3932297 Jul 8 05:52 as.ld.objdump.gold.r1.tar.gz
-rwxr-xr-x 1 ubuntu ubuntu 191365872 Aug 9 17:40 chain-abci
drwxrwxr-x 2 ubuntu ubuntu 4096 May 2 02:35 chain-abci-HW-debug
-rwxrwxr-x 1 ubuntu ubuntu 1715 Aug 10 22:52 check-validator-up.sh
-rwxr-xr-x 1 ubuntu ubuntu 18117032 May 20 07:23 client-cli
-rwxr-xr-x 1 ubuntu ubuntu 20960992 May 20 07:23 client-rpc
-rw-rw-r-- 1 ubuntu ubuntu 94058789 Aug 9 09:37 crypto-com-chain-release-0.5.3.tar.gz
-rwxr-xr-x 1 ubuntu ubuntu 11531296 May 2 02:34 dev-utils
drwxrwxr-x 3 ubuntu ubuntu 4096 Feb 21 2020 external
drwxrwxr-x 2 ubuntu ubuntu 4096 Aug 17 11:12 node_modules
-rwxrwxr-x 1 ubuntu ubuntu 38191 Jul 8 05:52 sgx_linux_x64_driver_1.33.bin
-rwxrwxr-x 1 ubuntu ubuntu 28941 Jul 8 05:52 sgx_linux_x64_driver_2.6.0_95eaa6f.bin
-rwxrwxr-x 1 ubuntu ubuntu 17602926 Jul 8 05:52 sgx_linux_x64_sdk_2.9.101.2.bin
drwxr-xr-x 9 ubuntu ubuntu 4096 Aug 9 09:34 sgxsdk
-rwxr-xr-x 1 ubuntu ubuntu 23666688 Aug 4 11:22 tendermint
-rw-rw-r-- 1 ubuntu ubuntu 23666828 Aug 9 09:37 tendermint_v0.33.7_linux_amd64.zip
drwxrwxr-x 2 ubuntu ubuntu 4096 May 2 02:25 tx-query-HW-debug
-rw-r--r-- 1 ubuntu ubuntu 12258608 Aug 9 17:40 tx_validation_enclave.signed.soAt this point you have all the software ready and installed. Now it's time to...
nano ~/.bash_profileYou have to paste the following:
export CRYPTO_CHAIN_ID=testnet-thaler-crypto-com-chain-42
export CRYPTO_CLIENT_TENDERMINT=ws://13.90.34.32:26657/websocketSave, exit, and then:
source ~/.bash_profilecd ~/crypto_node
./client-cli wallet new --name <WALLET_NAME> --type hdIt will ask for your passphrase (twice) and then it will show your Recovery Seed and the Authentication Token:
Please store following mnemonic safely to restore your wallet later:
Mnemonic: word word word word word word word word word word word word
Authentication token: 28***************************************************de
⚠️ Write down the authentication token, because you will be using it a lot from now on. And the recovery seed as well, of course.
./client-cli address new --name <WALLET_NAME> --type Staking
## Add the Authentification token and it will return the new Staking address
New address: 0x9121b59be9********************53fe22Again, take note of the address for later use
Now you need to send a message to the gitter chat community (https://gitter.im/crypto-com/community), so either @devashishdxt or @lezzokafka can topup our staking address with some test CROs. This is the message I sent, but you can elaborate your own:
Hi y'all, @devashishdxt @lezzokafka I've just finished installing the thaler node, and created my staking address: 0x912*******************************22 I would love to receive some test CROs to keep on working. TiA!
You can change the text if you want, but basically it's about tagging these two users, and pasting your staking address
./client-cli sync --name <WALLET_NAME>(This will take quite long (around 6 hours now that we're on block 320k, but you can shut it down and restart, and it will pick up where it left)
./client-cli state --name <WALLET_NAME> --address 0x9121b59be9********************53fe22It should show something like this:
+-------------------+----------------------------+
| Nonce | 0 |
+-------------------+----------------------------+
| Bonded | 60000000.00000000 |
+-------------------+----------------------------+
| Unbonded | 0.00000000 |
+-------------------+----------------------------+
| Unbonded From | 1970-01-01 00:00:00 +00:00 |
+-------------------+----------------------------+
| Jailed Until | Not jailed |
+-------------------+----------------------------+
| Last Slash Type | Not slashed |
+-------------------+----------------------------+
| Last Slash Amount | Not slashed |
+-------------------+----------------------------+
| Last Slash Time | Not slashed |
+-------------------+----------------------------+cd ~/crypto_node
sed -i '/seeds = /c\seeds = "[email protected]:26656,[email protected]:26656,[email protected]:26656"' ~/crypto_node/.tendermint/config/config.toml
sed -i '/create_empty_blocks_interval = /c\create_empty_blocks_interval = "60s"' ~/crypto_node/.tendermint/config/config.toml
sed -i '/index_all_tags = /c\index_all_tags = true' ~/crypto_node/.tendermint/config/config.tomlls -l ~/crypto_node/.tendermint/config/priv_validator_key.json
-rw------- 1 ubuntu ubuntu 345 Aug 4 17:39 /home/ubuntu/crypto_node/.tendermint/config/priv_validator_key.jsoncat ~/crypto_node/.tendermint/config/priv_validator_key.json{
"address": "3B2F*******************20FB",
"pub_key": {
"type": "tendermint/PubKeyEd25519",
"value": "oiuy****************************Z31QU="
},
"priv_key": {
"type": "tendermint/PrivKeyEd25519",
"value": "Pz**********************************************Q=="
}
}The important value here is the pub_key (oiuy****************************Z31QU= in this case)
cp chain-abci-HW-debug/chain-abci ./chain-abci
cp chain-abci-HW-debug/tx_validation_enclave.signed.so ./tx_validation_enclave.signed.so
⚠️ Note that the following scripts were created for the userubuntu. If your OS user is different, replace all the appearances ofubuntuwith it.
Now you need to create the listeners for the services that will run in the background, and will resist a reboot of your machine
sudo nano /etc/systemd/system/chain-listener.service[Unit]
Description=Crypto.com chain-abci listener
After=network-online.target
[Service]
Type=simple
Restart=always
RestartSec=1
User=ubuntu
LimitNOFILE=65536
Environment="RUST_LOG=info"
WorkingDirectory=/home/ubuntu/crypto_node
ExecStart=/home/ubuntu/crypto_node/chain-abci --chain_id testnet-thaler-crypto-com-chain-42 --genesis_app_hash F62DDB49D7EB8ED0883C735A0FB7DE7F2A3FA322FCD2AA832F452A62B38607D5 --enclave_server ipc:///home/ubuntu/crypto_node/enclave.socket
[Install]
WantedBy=multi-user.targetAnd then, execute:
sudo systemctl enable chain-listener.service
sudo systemctl start chain-listener.servicesudo reboot nowAfter rebooting, the chain-listener should be working in the background and you can check it by running:
sudo journalctl -u chain-listener.service -f(Exit with Ctrl+C)
sudo nano /etc/systemd/system/node-listener.service[Unit]
Description=Crypto.com tendermint node listener
After=network-online.target
[Service]
Type=simple
Restart=always
RestartSec=1
User=ubuntu
LimitNOFILE=65536
WorkingDirectory=/home/ubuntu/crypto_node
ExecStart=/home/ubuntu/crypto_node/tendermint node --home /home/ubuntu/crypto_node/.tendermint
[Install]
WantedBy=multi-user.targetsudo systemctl enable node-listener.service
sudo systemctl start node-listener.servicesudo reboot nowAfter rebooting, the node-listener should be working in the background and you can check it by running:
sudo journalctl -u node-listener.service -f
⚠️ Thetendermint nodecommand will retrieve the whole blockchain, so depending on the current state of the network, it could take some time. Example: as of 5th of August 2020, we are on block ~320.000, sotendermint nodewill take ~24 hours to catch up.
With this command you can check what's the current block height, to know how far tendermint node is:
curl -s http://13.90.34.32:26657/commit | jq "{height: .result.signed_header.header.height}"Just before joining the node council it's REALLY IMPORTANT that your wallet to be sync'd with the blockchain, so execute this again:
./client-cli sync --name <WALLET_NAME>- | Before the next step is really important to check both the wallet and the node-listener |
- | are synchronised, otherwise, the node will be created, but will be slashed after a few hours, |
- | and YOU WILL NEED TO START THE WHOLE PROCESS AGAIN |./client-cli transaction new --name <WALLET_NAME> --type node-joinIt will ask you several things:
- Authentication token
- Staking address
- Validator node name (Be creative! 😄 )
- Validator pub-key (the one from the
priv_validator_key.jsonfile)
And at the end, it will show a wonderful message:
Transaction successfully created!YAY! 😁 👏 😁
wget https://raw.githubusercontent.com/crypto-com/chain-docs/master/docs/getting-started/assets/signature_checking/check-validator-up.sh
chmod +x check-validator-up.sh
./check-validator-up.sh --tendermint-url http://13.90.34.32:26657 --pubkey "<YOUR_VALIDATOR_PUBLICKEY>"And it will reply something like this:
The validator is in the council nodes set under the address A0DD*****************************111
The validator is signing @ Block#338405 👍In many cases you may want to keep your wallet syncronised (if you need to re-join, want to play around with some CROs, etc...) So the best option is to program a repetitive autonomous task on the server. This is made by the cronjob daemon.
In order to create a new cronjob (a repetitive action auto-performed by the server) we first need to get into the edit mode:
crontab -eThe first time we call the crontab command, it may ask us which editor to use:
~/crypto_node$ crontab -e
no crontab for ubuntu - using an empty one
Select an editor. To change later, run 'select-editor'.
1. /bin/nano <---- easiest
2. /usr/bin/vim.basic
3. /usr/bin/vim.tiny
4. /bin/ed
Choose 1-4 [1]: Since we have been using nano for the whole tutorial, just select it.
Once inside the crontab file, you will see some comments on how this file works. We basically need to tell the server which command to execute and how often to do it. (If you want to find out more about cron, read the official page (https://en.wikipedia.org/wiki/Cron)
We will setting up the wallet synchroniser every 5 minutes. The first time, the wallet could take a bit to sync, but succesive actions will take less time.
⚠️ It's a good idea to manually sync your wallet before setting the cronjob, so the cronjob executes small syncs only
Just copy and paste this inside the crontab file you've opened with nano:
# Command to synchronise node wallet
*/5 * * * * cd ~/crypto_node && echo <YOUR_AUTHORISATION_TOKEN> | ./client-cli sync --name <WALLET_NAME> >/dev/null 2>&1Then, as always, save (Ctrl+o) and exit (Ctrl+x) The server will let you know that a new cronjob has been added:
crontab: installing new crontabI would like to say thankyou to all the people on the gitter channel, and specifically to @calvinlauco, @lezzokafka for the general support and @alive29 for the services idea/script.