mirror of
https://github.com/mynodebtc/mynode.git
synced 2024-12-26 06:28:07 +00:00
441 lines
12 KiB
Bash
Executable File
441 lines
12 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
###
|
|
### Setup myNode (all devices)
|
|
### Run with "sudo"
|
|
###
|
|
|
|
set -x
|
|
set -e
|
|
|
|
if [ "$#" != "1" ]; then
|
|
echo "Usage: $0 <ip address>"
|
|
exit 1
|
|
fi
|
|
SERVER_IP=$1
|
|
|
|
# Determine Device
|
|
IS_ROCK64=0
|
|
IS_RASPI3=0
|
|
IS_RASPI4=0
|
|
IS_X86=0
|
|
uname -a | grep aarch64 && IS_ROCK64=1 || IS_RASPI3=1
|
|
if [ $IS_RASPI3 -eq 1 ]; then
|
|
cat /proc/cpuinfo | grep 03111 && IS_RASPI4=1 && IS_RASPI3=0 || IS_RASPI3=1
|
|
fi
|
|
uname -a | grep amd64 && IS_X86=1 || true
|
|
if [ $IS_X86 -eq 1 ]; then
|
|
IS_ROCK64=0
|
|
IS_RASPI3=0
|
|
IS_RASPI4=0
|
|
fi
|
|
|
|
# Make sure FS is expanded for Rock64
|
|
if [ $IS_ROCK64 = 1 ]; then
|
|
/usr/lib/armbian/armbian-resize-filesystem start
|
|
fi
|
|
|
|
|
|
# Download rootfs
|
|
rm -rf /tmp/rootfs.tar.gz
|
|
rm -rf /tmp/upgrade/
|
|
mkdir -p /tmp/upgrade
|
|
|
|
TARBALL=""
|
|
if [ $IS_ROCK64 = 1 ]; then
|
|
TARBALL="mynode_rootfs_rock64.tar.gz"
|
|
elif [ $IS_RASPI3 = 1 ]; then
|
|
TARBALL="mynode_rootfs_raspi3.tar.gz"
|
|
elif [ $IS_RASPI4 = 1 ]; then
|
|
TARBALL="mynode_rootfs_raspi4.tar.gz"
|
|
elif [ $IS_X86 = 1 ]; then
|
|
TARBALL="mynode_rootfs_debian.tar.gz"
|
|
fi
|
|
wget http://${SERVER_IP}:8000/${TARBALL} -O /tmp/rootfs.tar.gz
|
|
|
|
|
|
# Add sources
|
|
|
|
|
|
# Update OS
|
|
apt -y update # Needed to accept new repos
|
|
apt-get -y update
|
|
apt-get -y upgrade
|
|
|
|
# Install other tools (run section multiple times to make sure success)
|
|
apt-get -y install htop git curl bash-completion jq dphys-swapfile lsof libzmq3-dev
|
|
apt-get -y install build-essential python-dev python-pip python3-dev python3-pip
|
|
apt-get -y install transmission-cli fail2ban ufw tclsh bluez python-bluez redis-server
|
|
#apt-get -y install mongodb-org
|
|
apt-get -y install clang hitch zlib1g-dev libffi-dev file toilet ncdu
|
|
apt-get -y install toilet-fonts avahi-daemon figlet libsecp256k1-dev
|
|
apt-get -y install inotify-tools libssl-dev tor tmux screen
|
|
apt-get -y install python-grpcio python3-grpcio
|
|
apt-get -y install pv sysstat network-manager rsync parted unzip pkg-config
|
|
apt-get -y install libfreetype6-dev libpng-dev libatlas-base-dev
|
|
apt-get -y install libffi-dev libssl-dev glances python3-bottle
|
|
apt -y -qq install apt-transport-https ca-certificates
|
|
|
|
|
|
# Install other things without recommendation
|
|
apt-get -y install --no-install-recommends expect
|
|
|
|
# Add bitcoin users
|
|
useradd -m -s /bin/bash bitcoin || true
|
|
usermod -a -G debian-tor bitcoin
|
|
|
|
|
|
# Install pip packages
|
|
pip install setuptools
|
|
pip install --upgrade setuptools
|
|
pip install wheel
|
|
pip install --upgrade wheel
|
|
pip install speedtest-cli transmissionrpc flask python-bitcoinrpc redis prometheus_client requests
|
|
pip install python-pam python-bitcoinlib psutil
|
|
pip install grpcio grpcio-tools googleapis-common-protos
|
|
pip install tzupdate
|
|
|
|
|
|
# Import Keys
|
|
curl https://keybase.io/roasbeef/pgp_keys.asc | gpg --import
|
|
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 01EA5486DE18A882D4C2684590C8019E36C2E964
|
|
|
|
|
|
# Update python3 to 3.7.X
|
|
PYTHON3_VERSION=$(python3 --version)
|
|
if [[ "$PYTHON3_VERSION" != *"Python 3.7"* ]]; then
|
|
mkdir -p /tmp/download
|
|
cd /tmp/download
|
|
wget https://www.python.org/ftp/python/3.7.2/Python-3.7.2.tar.xz
|
|
tar xf Python-3.7.2.tar.xz
|
|
cd Python-3.7.2
|
|
./configure
|
|
make -j4
|
|
sudo make install
|
|
cd ~
|
|
else
|
|
echo "Python up to date"
|
|
fi
|
|
|
|
|
|
# Install python3 specific tools (run multiple times to make sure success)
|
|
pip3 install wheel setuptools
|
|
pip3 install bitstring lnd-grpc pycoin aiohttp connectrum python-bitcoinlib
|
|
pip3 install python-bitcointx
|
|
pip3 install lndmanage==0.8.0 # Install LND Manage (keep up to date with LND)
|
|
pip3 install docker-compose
|
|
|
|
|
|
# Install Rust
|
|
if [ ! -f /tmp/installed_rust ]; then
|
|
wget https://sh.rustup.rs -O /tmp/setup_rust.sh
|
|
/bin/bash /tmp/setup_rust.sh -y
|
|
touch /tmp/installed_rust
|
|
fi
|
|
|
|
# Install node
|
|
if [ ! -f /tmp/installed_node ]; then
|
|
curl -sL https://deb.nodesource.com/setup_11.x | bash -
|
|
apt-get install -y nodejs
|
|
touch /tmp/installed_node
|
|
fi
|
|
|
|
# Install docker
|
|
curl -sSL https://get.docker.com | sed 's/sleep 20/sleep 1/' | sudo sh
|
|
groupadd docker || true
|
|
usermod -aG docker admin
|
|
usermod -aG docker bitcoin
|
|
usermod -aG docker root
|
|
|
|
# Install node packages
|
|
npm install -g pug-cli browserify uglify-js babel-cli
|
|
|
|
# Remove existing MOTD login info
|
|
rm -rf /etc/motd
|
|
rm -rf /etc/update-motd.d/*
|
|
|
|
|
|
#########################################################
|
|
|
|
|
|
# Install Bitcoin
|
|
BTC_VERSION="0.18.1"
|
|
ARCH="arm-linux-gnueabihf"
|
|
if [ $IS_ROCK64 = 1 ]; then
|
|
ARCH="aarch64-linux-gnu"
|
|
fi
|
|
if [ $IS_X86 = 1 ]; then
|
|
ARCH="x86_64-linux-gnu"
|
|
fi
|
|
BTC_UPGRADE_URL=https://bitcoincore.org/bin/bitcoin-core-$BTC_VERSION/bitcoin-$BTC_VERSION-$ARCH.tar.gz
|
|
BTC_UPGRADE_URL_FILE=/home/bitcoin/.mynode/.btc_url
|
|
BTC_UPGRADE_SHA256SUM_URL=https://bitcoincore.org/bin/bitcoin-core-$BTC_VERSION/SHA256SUMS.asc
|
|
CURRENT=""
|
|
if [ -f $BTC_UPGRADE_URL_FILE ]; then
|
|
CURRENT=$(cat $BTC_UPGRADE_URL_FILE)
|
|
fi
|
|
if [ "$CURRENT" != "$BTC_UPGRADE_URL" ]; then
|
|
# Download and install Bitcoin
|
|
rm -rf /tmp/download
|
|
mkdir -p /tmp/download
|
|
cd /tmp/download
|
|
|
|
wget $BTC_UPGRADE_URL
|
|
wget $BTC_UPGRADE_SHA256SUM_URL -O SHA256SUMS.asc
|
|
|
|
sha256sum --ignore-missing --check SHA256SUMS.asc
|
|
gpg --verify SHA256SUMS.asc
|
|
|
|
# Install Bitcoin
|
|
tar -xvf bitcoin-$BTC_VERSION-$ARCH.tar.gz
|
|
mv bitcoin-$BTC_VERSION bitcoin
|
|
install -m 0755 -o root -g root -t /usr/local/bin bitcoin/bin/*
|
|
if [ ! -L /home/bitcoin/.bitcoin ]; then
|
|
sudo -u bitcoin ln -s /mnt/hdd/mynode/bitcoin /home/bitcoin/.bitcoin
|
|
fi
|
|
if [ ! -L /home/bitcoin/.lnd ]; then
|
|
sudo -u bitcoin ln -s /mnt/hdd/mynode/lnd /home/bitcoin/.lnd
|
|
fi
|
|
mkdir -p /home/admin/.bitcoin
|
|
mkdir -p /home/bitcoin/.mynode/
|
|
chown -R bitcoin:bitcoin /home/bitcoin/.mynode/
|
|
echo $BTC_UPGRADE_URL > $BTC_UPGRADE_URL_FILE
|
|
fi
|
|
cd ~
|
|
|
|
# Install Lightning
|
|
LND_VERSION="v0.8.0-beta"
|
|
LND_ARCH="lnd-linux-armv7"
|
|
if [ $IS_X86 = 1 ]; then
|
|
LND_ARCH="lnd-linux-amd64"
|
|
fi
|
|
LND_UPGRADE_URL=https://github.com/lightningnetwork/lnd/releases/download/$LND_VERSION/$LND_ARCH-$LND_VERSION.tar.gz
|
|
LND_UPGRADE_URL_FILE=/home/bitcoin/.mynode/.lnd_url
|
|
LND_UPGRADE_MANIFEST_URL=https://github.com/lightningnetwork/lnd/releases/download/$LND_VERSION/manifest-$LND_VERSION.txt
|
|
LND_UPGRADE_MANIFEST_SIG_URL=https://github.com/lightningnetwork/lnd/releases/download/$LND_VERSION/manifest-$LND_VERSION.txt.sig
|
|
CURRENT=""
|
|
if [ -f $LND_UPGRADE_URL_FILE ]; then
|
|
CURRENT=$(cat $LND_UPGRADE_URL_FILE)
|
|
fi
|
|
if [ "$CURRENT" != "$LND_UPGRADE_URL" ]; then
|
|
rm -rf /tmp/download
|
|
mkdir -p /tmp/download
|
|
cd /tmp/download
|
|
|
|
wget $LND_UPGRADE_URL
|
|
wget $LND_UPGRADE_MANIFEST_URL
|
|
wget $LND_UPGRADE_MANIFEST_SIG_URL
|
|
|
|
gpg --verify manifest-*.txt.sig
|
|
|
|
tar -xzf lnd-*.tar.gz
|
|
mv $LND_ARCH-$LND_VERSION lnd
|
|
install -m 0755 -o root -g root -t /usr/local/bin lnd/*
|
|
ln -s /bin/ip /usr/bin/ip || true
|
|
|
|
mkdir -p /home/bitcoin/.mynode/
|
|
chown -R bitcoin:bitcoin /home/bitcoin/.mynode/
|
|
echo $LND_UPGRADE_URL > $LND_UPGRADE_URL_FILE
|
|
fi
|
|
cd ~
|
|
|
|
# Setup "install" location for some apps
|
|
mkdir -p /opt/mynode
|
|
chown -R bitcoin:bitcoin /opt/mynode
|
|
|
|
|
|
# Install LND Hub
|
|
if [ ! -f /tmp/installed_lndhub ]; then
|
|
cd /opt/mynode
|
|
rm -rf LndHub
|
|
sudo -u bitcoin git clone https://github.com/BlueWallet/LndHub.git
|
|
cd LndHub
|
|
sudo -u bitcoin npm install
|
|
sudo -u bitcoin ln -s /home/bitcoin/.lnd/tls.cert tls.cert
|
|
sudo -u bitcoin ln -s /home/bitcoin/.lnd/data/chain/bitcoin/mainnet/admin.macaroon admin.macaroon
|
|
touch /tmp/installed_lndhub
|
|
fi
|
|
|
|
# Install electrs (only build to save new version, now included in overlay)
|
|
#cd /home/admin/download
|
|
#wget https://github.com/romanz/electrs/archive/v0.7.0.tar.gz
|
|
#tar -xvf v0.7.0.tar.gz
|
|
#cd electrs-0.7.0
|
|
#cargo build --release
|
|
#sudo install -g root -o root target/release/electrs /usr/bin/electrs
|
|
#cd ~
|
|
|
|
|
|
# Install RTL
|
|
RTL_UPGRADE_URL=https://github.com/ShahanaFarooqui/RTL/archive/v0.5.1.tar.gz
|
|
RTL_UPGRADE_URL_FILE=/home/bitcoin/.mynode/.rtl_url
|
|
CURRENT=""
|
|
if [ -f $RTL_UPGRADE_URL_FILE ]; then
|
|
CURRENT=$(cat $RTL_UPGRADE_URL_FILE)
|
|
fi
|
|
if [ "$CURRENT" != "$RTL_UPGRADE_URL" ]; then
|
|
cd /opt/mynode
|
|
rm -rf RTL
|
|
sudo -u bitcoin wget $RTL_UPGRADE_URL -O RTL.tar.gz
|
|
sudo -u bitcoin tar -xvf RTL.tar.gz
|
|
sudo -u bitcoin rm RTL.tar.gz
|
|
sudo -u bitcoin mv RTL-* RTL
|
|
cd RTL
|
|
sudo -u bitcoin NG_CLI_ANALYTICS=false npm install
|
|
|
|
mkdir -p /home/bitcoin/.mynode/
|
|
chown -R bitcoin:bitcoin /home/bitcoin/.mynode/
|
|
echo $RTL_UPGRADE_URL > $RTL_UPGRADE_URL_FILE
|
|
fi
|
|
|
|
|
|
# Install Bitcoin RPC Explorer
|
|
BTCRPCEXPLORER_UPGRADE_URL=https://github.com/janoside/btc-rpc-explorer/archive/v1.1.1.tar.gz
|
|
BTCRPCEXPLORER_UPGRADE_URL_FILE=/home/bitcoin/.mynode/.btcrpcexplorer_url
|
|
CURRENT=""
|
|
if [ -f $BTCRPCEXPLORER_UPGRADE_URL_FILE ]; then
|
|
CURRENT=$(cat $BTCRPCEXPLORER_UPGRADE_URL_FILE)
|
|
fi
|
|
if [ "$CURRENT" != "$BTCRPCEXPLORER_UPGRADE_URL" ]; then
|
|
cd /opt/mynode
|
|
rm -rf btc-rpc-explorer
|
|
sudo -u bitcoin wget $BTCRPCEXPLORER_UPGRADE_URL -O btc-rpc-explorer.tar.gz
|
|
sudo -u bitcoin tar -xvf btc-rpc-explorer.tar.gz
|
|
sudo -u bitcoin rm btc-rpc-explorer.tar.gz
|
|
sudo -u bitcoin mv btc-rpc-* btc-rpc-explorer
|
|
cd btc-rpc-explorer
|
|
sudo -u bitcoin npm install
|
|
|
|
mkdir -p /home/bitcoin/.mynode/
|
|
chown -R bitcoin:bitcoin /home/bitcoin/.mynode/
|
|
echo $BTCRPCEXPLORER_UPGRADE_URL > $BTCRPCEXPLORER_UPGRADE_URL_FILE
|
|
fi
|
|
|
|
|
|
# Install LND Connect
|
|
LNDCONNECTARCH="lndconnect-linux-armv7"
|
|
if [ $IS_X86 = 1 ]; then
|
|
LNDCONNECTARCH="lndconnect-linux-amd64"
|
|
fi
|
|
LNDCONNECT_UPGRADE_URL=https://github.com/LN-Zap/lndconnect/releases/download/v0.1.0/$LNDCONNECTARCH-v0.1.0.tar.gz
|
|
LNDCONNECT_UPGRADE_URL_FILE=/home/bitcoin/.mynode/.lndconnect_url
|
|
CURRENT=""
|
|
if [ -f $LNDCONNECT_UPGRADE_URL_FILE ]; then
|
|
CURRENT=$(cat $LNDCONNECT_UPGRADE_URL_FILE)
|
|
fi
|
|
if [ "$CURRENT" != "$LNDCONNECT_UPGRADE_URL" ]; then
|
|
rm -rf /tmp/download
|
|
mkdir -p /tmp/download
|
|
cd /tmp/download
|
|
wget $LNDCONNECT_UPGRADE_URL -O lndconnect.tar.gz
|
|
tar -xvf lndconnect.tar.gz
|
|
rm lndconnect.tar.gz
|
|
mv lndconnect-* lndconnect
|
|
install -m 0755 -o root -g root -t /usr/local/bin lndconnect/*
|
|
|
|
mkdir -p /home/bitcoin/.mynode/
|
|
chown -R bitcoin:bitcoin /home/bitcoin/.mynode/
|
|
echo $LNDCONNECT_UPGRADE_URL > $LNDCONNECT_UPGRADE_URL_FILE
|
|
fi
|
|
|
|
|
|
# Install ngrok for debugging
|
|
if [ ! -f /usr/bin/ngrok ]; then
|
|
cd /tmp
|
|
NGROK_URL=https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-arm.zip
|
|
if [ $IS_X86 = 1 ]; then
|
|
NGROK_URL=https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-386.zip
|
|
fi
|
|
wget $NGROK_URL
|
|
unzip ngrok-*.zip
|
|
cp ngrok /usr/bin/
|
|
fi
|
|
|
|
#########################################################
|
|
|
|
|
|
# Copy myNode rootfs (downlaoded earlier)
|
|
tar -xvf /tmp/rootfs.tar.gz -C /tmp/upgrade/
|
|
|
|
# Install files
|
|
if [ $IS_X86 = 1 ]; then
|
|
rsync -r -K /tmp/upgrade/out/rootfs_*/* /
|
|
else
|
|
cp -rf /tmp/upgrade/out/rootfs_*/* /
|
|
fi
|
|
sleep 1
|
|
sync
|
|
sleep 1
|
|
|
|
|
|
# Setup myNode Startup Script
|
|
systemctl daemon-reload
|
|
systemctl enable mynode
|
|
systemctl enable quicksync
|
|
systemctl enable torrent_check
|
|
systemctl enable firewall
|
|
systemctl enable bandwidth
|
|
systemctl enable www
|
|
systemctl enable drive_check
|
|
systemctl enable bitcoind
|
|
systemctl enable lnd
|
|
systemctl enable lnd_unlock
|
|
systemctl enable lnd_backup
|
|
systemctl enable lnd_admin_files
|
|
systemctl enable lndconnect
|
|
systemctl enable redis-server
|
|
systemctl enable mongodb
|
|
#systemctl enable electrs # DISABLED BY DEFAULT
|
|
#systemctl enable lndhub # DISABLED BY DEFAULT
|
|
#systemctl enable btc_rpc_explorer # DISABLED BY DEFAULT
|
|
systemctl enable tls_proxy
|
|
systemctl enable https
|
|
systemctl enable rtl
|
|
#systemctl enable lnd_admin # REMOVED
|
|
systemctl enable tor
|
|
systemctl enable invalid_block_check
|
|
systemctl enable usb_driver_check
|
|
systemctl enable glances
|
|
|
|
|
|
# Regenerate MAC Address for Rock64
|
|
if [ $IS_ROCK64 = 1 ]; then
|
|
. /usr/lib/armbian/armbian-common
|
|
CONNECTION="$(nmcli -f UUID,ACTIVE,DEVICE,TYPE connection show --active | tail -n1)"
|
|
UUID=$(awk -F" " '/ethernet/ {print $1}' <<< "${CONNECTION}")
|
|
get_random_mac
|
|
nmcli connection modify $UUID ethernet.cloned-mac-address $MACADDR
|
|
nmcli connection modify $UUID -ethernet.mac-address ""
|
|
fi
|
|
|
|
|
|
|
|
# Delete junk
|
|
rm -rf /home/admin/download
|
|
rm -rf /home/admin/.bash_history
|
|
rm -rf /home/bitcoin/.bash_history
|
|
rm -rf /root/.bash_history
|
|
rm -rf /root/.ssh/known_hosts
|
|
rm -rf /etc/resolv.conf
|
|
rm -rf /tmp/*
|
|
rm -rf ~/setup_device.sh
|
|
rm -rf /etc/motd # Remove simple motd for update-motd.d
|
|
|
|
sync
|
|
|
|
set +x
|
|
echo ""
|
|
echo ""
|
|
echo "##################################"
|
|
echo " SETUP COMPLETE "
|
|
echo " Reboot your device to begin! "
|
|
echo "##################################"
|
|
echo ""
|
|
echo ""
|
|
|
|
### MAKE IMAGE NOW ###
|
|
# This prevents auto gen files like certs to be part of the base image
|
|
# Must make sure image can boot after this point and fully come up
|
|
|
|
|