forked from ghostchain/ghost-node
node preparation basic script
Signed-off-by: Uncle Stinky <uncle.stinky@ghostchain.io>
This commit is contained in:
parent
a025d3b032
commit
ba848bd479
GPG Key ID:
016064BD97603B40
195
scripts/local-builder.sh
Executable file
195
scripts/local-builder.sh
Executable file
@ -0,0 +1,195 @@
|
||||
#!/bin/bash
|
||||
|
||||
set -e
|
||||
|
||||
UNIT_FILE=false
|
||||
SKIP_BUILD=false
|
||||
EXECUTABLE_PATH="/usr/bin/"
|
||||
SPECIFICATION_PATH="/etc/ghost/"
|
||||
SPECIFICATION_NAME="casper"
|
||||
TARGET="debug"
|
||||
|
||||
CURRENT_PATH=$(pwd)
|
||||
CURRENT_SCRIPT=$(realpath "$0")
|
||||
SCRIPT_FOLDER=$(dirname "$CURRENT_SCRIPT")
|
||||
PROJECT_FOLDER=("$SCRIPT_FOLDER/..")
|
||||
|
||||
prompt() {
|
||||
while true; do
|
||||
printf "$1 [y/N]: "
|
||||
read yn
|
||||
case $yn in
|
||||
[Yy]* ) return 0;;
|
||||
* ) return 1;;
|
||||
esac
|
||||
done
|
||||
}
|
||||
|
||||
clear
|
||||
echo " ____ _ _ _ _ _"
|
||||
echo " / ___| |__ ___ ___| |_ | \ | | ___ __| | ___"
|
||||
echo "| | _| '_ \ / _ \/ __| __| | \| |/ _ \ / _' |/ _ \\"
|
||||
echo "| |_| | | | | (_) \__ \ |_ | |\ | (_) | (_| | __/"
|
||||
echo " \____|_| |_|\___/|___/\__| |_| \_|\___/ \__,_|\___|"
|
||||
echo -e "\n"
|
||||
|
||||
while [ $# -gt 0 ]; do
|
||||
case "$1" in
|
||||
--unit-file|-u)
|
||||
UNIT_FILE=true
|
||||
;;
|
||||
--make-global|-m)
|
||||
MAKE_GLOBAL=true
|
||||
;;
|
||||
--arguments|-a)
|
||||
ARGUMENTS=true
|
||||
;;
|
||||
--release|-r)
|
||||
RELEASE="--release"
|
||||
TARGET="release"
|
||||
;;
|
||||
--profile*|-p*)
|
||||
if [[ "$1" != *=* ]]; then shift; fi
|
||||
RELEASE="--profile=${1#*=}"
|
||||
TARGET="${1#*=}"
|
||||
;;
|
||||
--feature*|-f*)
|
||||
if [[ "$1" != *=* ]]; then shift; fi
|
||||
FEATURES="--features=${1#*=}"
|
||||
;;
|
||||
--executable-path*|-e*)
|
||||
if [[ "$1" != *=* ]]; then shift; fi
|
||||
EXECUTABLE_PATH=$(echo ${1#*=}/ | tr -s /)
|
||||
;;
|
||||
--specification-path*|-f*)
|
||||
if [[ "$1" != *=* ]]; then shift; fi
|
||||
SPECIFICATION_PATH=$(echo ${1#*=}/ | tr -s /)
|
||||
;;
|
||||
--specification-name*|-n*) if [[ "$1" != *=* ]]; then shift; fi
|
||||
SPECIFICATION_NAME="${1#*=}"
|
||||
;;
|
||||
--help|-h)
|
||||
echo "Ghost Node Build automation tool."
|
||||
echo -e "Use wisely, the main purpose of this script is to help people not to mess up with pathes/folders to the ghost node.\n"
|
||||
echo "Options:"
|
||||
echo -e "-b, --skip-build\n\tSkip build only copying."
|
||||
echo -e "-e, --executable-path\n\tPath to executable ('/usr/lib/' is default)."
|
||||
echo -e "-a, --specification-path\n\tPath to specification ('/etc/ghost' is default)."
|
||||
echo -e "-n, --specification-name\n\tSpecification name to be used ('casper' is default)."
|
||||
echo -e "-r, --release\n\tBuild optimized artifacts with the release profile."
|
||||
echo -e "-p, --profile\n\tBuild with the given and predefined profile."
|
||||
echo -e "-h, --help\n\tPrints help information."
|
||||
exit 0
|
||||
;;
|
||||
*)
|
||||
echo -e "[-] Wrong arguments\n"
|
||||
echo "Ghost Node Build automation tool."
|
||||
echo -e "Use wisely, the main purpose of this script is to help people not to mess up with pathes/folders to the ghost node.\n"
|
||||
echo "Options:"
|
||||
echo -e "-b, --skip-build\n\tSkip build only copying."
|
||||
echo -e "-e, --executable-path\n\tPath to executable ('/usr/lib/' is default)."
|
||||
echo -e "-a, --specification-path\n\tPath to specification ('/etc/ghost' is default)."
|
||||
echo -e "-n, --specification-name\n\tSpecification name to be used ('casper' is default)."
|
||||
echo -e "-r, --release\n\tBuild optimized artifacts with the release profile."
|
||||
echo -e "-p, --profile\n\tBuild with the given and predefined profile."
|
||||
echo -e "-h, --help\n\tPrints help information."
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
shift
|
||||
done
|
||||
|
||||
if [[ ! -z $RELEASE ]]; then
|
||||
if prompt "[?] 'cargo build $RELEASE $FEATURES' is what you want?"; then
|
||||
cd $PROJECT_FOLDER
|
||||
echo "[+] Starting build in 3 seconds..."
|
||||
sleep 3
|
||||
cargo build $RELEASE $FEATURES
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ $MAKE_GLOBAL = true ]]; then
|
||||
cd $PROJECT_FOLDER
|
||||
sudo cp target/$TARGET/ghost $EXECUTABLE_PATH
|
||||
cp service/chain-specs/$SPECIFICATION_NAME.json $SPECIFICATION_PATH
|
||||
cd $SCRIPT_FOLDER
|
||||
cp packaging/environment $SPECIFICATION_PATH
|
||||
|
||||
echo "[+] ghost executable copied in '$EXECUTABLE_PATH' from '$TARGET'"
|
||||
echo "[+] specification '$SPECIFICATION_NAME.json' copied to '$SPECIFICATION_PATH'"
|
||||
echo "[+] default CLI arguments exported into '$SPECIFICATION_NAME'"
|
||||
fi
|
||||
|
||||
if [ $UNIT_FILE = true ]; then
|
||||
cd $SCRIPT_FOLDER
|
||||
read -p "[?] name for the unit file (default: ghost-node.service) " unit_name
|
||||
if [ -z $unit_name ]; then
|
||||
unit_name="ghost-node"
|
||||
fi
|
||||
unit_name=$(echo "$unit_name" | sed -e "s/.service//g")
|
||||
unit_name="$unit_name.service"
|
||||
|
||||
cp /packaging/template.service /etc/systemd/user
|
||||
sudo systemctl daemon-reload
|
||||
|
||||
if prompt "[?] do you want to start the $unit_name?"; then
|
||||
sudo systemctl restart $unit_name
|
||||
fi
|
||||
|
||||
if prompt "[?] do you want to enable the $unit_name?"; then
|
||||
sudo systemctl enable $unit_name
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ $ARGUMENTS = true ]]; then
|
||||
echo "[+] setting-up basic CLI arguments"
|
||||
CLI_ARGS=()
|
||||
|
||||
read -p "[?] specify p2p protocol TCP port (default: 30333): " port
|
||||
CLI_ARGS+=("--port=${port:-30333}")
|
||||
|
||||
read -p "[?] specify JSON-RPC server TCP port: (default: 9945): " rpc_port
|
||||
CLI_ARGS+=("--rpc-port=${rpc_port:-9945}")
|
||||
|
||||
read -p "[?] specify the chain specification (default: /etc/ghost/casper.json): " chain
|
||||
CLI_ARGS+=("--chain=${chain:-/etc/ghost/casper.json}")
|
||||
|
||||
read -p "[?] specify file from which to read the node's secret key for p2p networking (default: /etc/ghost/node-key): " node_key
|
||||
CLI_ARGS+=("--node-key-file=${node_key:-/etc/ghost/node-key}")
|
||||
|
||||
read -p "[?] specify name for the node (default: RANDOM_NAME): " node_name
|
||||
if [[ ! -z $node_name ]]; then
|
||||
CLI_ARGS+=("--name='$node_name'")
|
||||
fi
|
||||
|
||||
read -p "[?] specify custom base path for the node (default: /var/lib/ghost): " base_path
|
||||
CLI_ARGS+=("--base-path=${base_path:-/var/lib/ghost}")
|
||||
|
||||
if prompt "[?] enable validator mode?"; then
|
||||
CLI_ARGS+=("--validator")
|
||||
fi
|
||||
|
||||
if prompt "[?] enable prometheus?"; then
|
||||
read -p "[?] specify prometheus exporter TCP port: (default: 9615)" prometheus_port
|
||||
CLI_ARGS+=("--prometheus-port=${prometheus_port:-9615}")
|
||||
else
|
||||
CLI_ARGS+=("--no-prometheus")
|
||||
fi
|
||||
|
||||
# default for now
|
||||
CLI_ARGS+=("--state-prunning=archieve")
|
||||
CLI_ARGS+=("--rpc-external=local")
|
||||
CLI_ARGS+=("--rpc-methods=auto")
|
||||
CLI_ARGS+=("--no-telemetry")
|
||||
CLI_ARGS+=("--no-private-ip")
|
||||
CLI_ARGS+=("--no-mdns")
|
||||
CLI_ARGS+=("--no-hardware-benchmarks")
|
||||
|
||||
sudo echo "GHOST_CLI_ARGS=\"$(IFS=' '; echo "${CLI_ARGS[*]}")\"" > /etc/default/ghost
|
||||
echo "[+] new CLI arguments stored in '/etc/default/ghost'"
|
||||
cat /etc/default/ghost
|
||||
fi
|
||||
|
||||
# back to the starting point
|
||||
cd $CURRENT_PATH
|
||||
echo "[+] execution finished"
|
||||
38
scripts/packaging/template.service
Normal file
38
scripts/packaging/template.service
Normal file
@ -0,0 +1,38 @@
|
||||
[Unit]
|
||||
Description=Ghost Node
|
||||
After=network.target
|
||||
Documentation=https://git.ghostchain.io/ghostchain/ghost-node
|
||||
|
||||
[Service]
|
||||
EnvironmentFile=-/etc/default/ghost
|
||||
ExecStart=/usr/bin/ghost $GHOST_CLI_ARGS
|
||||
User=ghost
|
||||
Group=ghost
|
||||
Restart=always
|
||||
RestartSec=30
|
||||
TODO CapabilityBoundingSet=
|
||||
LockPersonality=true
|
||||
NoNewPrivileges=true
|
||||
PrivateDevices=true
|
||||
PrivateMounts=true
|
||||
PrivateTmp=true
|
||||
PrivateUsers=true
|
||||
ProtectClock=true
|
||||
ProtectControlGroups=true
|
||||
ProtectHostname=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelTunables=true
|
||||
TODO ProtectSystem=strict
|
||||
RemoveIPC=true
|
||||
TODO RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX
|
||||
gRestrictNamespaces=false
|
||||
RestrictSUIDSGID=true
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp mount umount2
|
||||
SystemCallFilter=~@clock @module @reboot @swap @privileged
|
||||
SystemCallFilter=pivot_root
|
||||
UMask=0027
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Loading…
Reference in New Issue
Block a user