@le-space/rootfs 0.2.0 → 0.3.2

package/reference/uc-go-peer/rootfs/uc-go-peer-bootstrap-refresh.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Refresh Aleph bootstrap registration for uc-go-peer
+Wants=network-online.target
+After=network-online.target uc-go-peer.service
+ConditionPathExists=/etc/default/uc-go-peer.ready
+
+[Service]
+Type=oneshot
+Environment=ENV_FILE=/etc/default/uc-go-peer
+Environment=DESCRIBE_SCRIPT=/usr/local/sbin/uc-go-peer-describe.py
+ExecStart=/usr/bin/python3 /usr/local/sbin/uc-go-peer-bootstrap-refresh.py
+StandardOutput=journal
+StandardError=journal

package/reference/uc-go-peer/rootfs/uc-go-peer-bootstrap-refresh.timer

@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic Aleph bootstrap refresh for uc-go-peer
+
+[Timer]
+OnBootSec=20m
+OnUnitActiveSec=6h
+RandomizedDelaySec=15m
+Persistent=true
+Unit=uc-go-peer-bootstrap-refresh.service
+
+[Install]
+WantedBy=timers.target

package/reference/uc-go-peer/rootfs/uc-go-peer-bootstrap.sh

@@ -31,7 +31,8 @@ run_phase_base() {
   echo "[uc-go-peer-bootstrap] running apt-get update"
   apt-get update
   echo "[uc-go-peer-bootstrap] installing base packages"
-  apt-get install -y ca-certificates curl caddy
+  apt-get install -y ca-certificates curl caddy python3-pip
+  python3 -m pip install --break-system-packages --no-cache-dir eth-account
   rm -rf /var/lib/apt/lists/*
 }
 

package/reference/uc-go-peer/rootfs/uc-go-peer-configure.sh

@@ -9,6 +9,7 @@ AUTOTLS_HOSTS_FILE="${AUTOTLS_HOSTS_FILE:-/etc/default/uc-go-peer.autotls-hosts}
 AUTOTLS_CADDY_READY_FILE="${AUTOTLS_CADDY_READY_FILE:-/etc/default/uc-go-peer.caddy-ready}"
 SERVICE_NAME="${SERVICE_NAME:-uc-go-peer.service}"
 AUTOTLS_REFRESH_SERVICE="${AUTOTLS_REFRESH_SERVICE:-uc-go-peer-autotls-refresh.service}"
+BOOTSTRAP_REFRESH_TIMER="${BOOTSTRAP_REFRESH_TIMER:-uc-go-peer-bootstrap-refresh.timer}"
 CADDY_SERVICE="${CADDY_SERVICE:-caddy.service}"
 CADDYFILE="${CADDYFILE:-/etc/caddy/Caddyfile}"
 BOOTSTRAP_SERVICE="${BOOTSTRAP_SERVICE:-uc-go-peer-bootstrap.service}"
@@ -20,6 +21,11 @@ WS_PORT="9097"
 WS_BACKEND_PORT="9096"
 PROXY_HOSTNAME=""
 UDP_PORT=""
+BOOTSTRAP_PUBLISHER_PRIVATE_KEY=""
+BOOTSTRAP_PUBLISHER_LIBP2P_IDENTITY_B64=""
+BOOTSTRAP_OWNER_PRIVATE_KEY=""
+BOOTSTRAP_OWNER_AUTHORIZATION_B64=""
+BOOTSTRAP_REGISTRATION_ID=""
 START_SERVICE=1
 
 usage() {
@@ -35,6 +41,11 @@ Usage:
     [--quic-port <host-port>] \
     [--webtransport-port <host-port>] \
     [--webrtc-port <host-port>] \
+    [--bootstrap-publisher-private-key <hex>] \
+    [--bootstrap-publisher-libp2p-identity-b64 <base64>] \
+    [--bootstrap-owner-private-key <hex>] \
+    [--bootstrap-owner-authorization-b64 <base64>] \
+    [--bootstrap-registration-id <id>] \
     [--no-start]
 EOF
 }
@@ -68,6 +79,16 @@ https://${proxy_hostname} {
 EOF
 }
 
+current_identity_path() {
+  local existing
+  existing="$(grep -E '^[#[:space:]]*GO_PEER_IDENTITY_PATH=' "${ENV_FILE}" 2>/dev/null | tail -n1 | cut -d= -f2- || true)"
+  if [ -n "${existing}" ]; then
+    printf '%s\n' "${existing}"
+    return
+  fi
+  printf '/var/lib/uc-go-peer/identity.key\n'
+}
+
 while [ "$#" -gt 0 ]; do
   case "$1" in
     --public-ipv4)
@@ -106,6 +127,26 @@ while [ "$#" -gt 0 ]; do
       UDP_PORT="${2:-}"
       shift 2
       ;;
+    --bootstrap-publisher-private-key)
+      BOOTSTRAP_PUBLISHER_PRIVATE_KEY="${2:-}"
+      shift 2
+      ;;
+    --bootstrap-publisher-libp2p-identity-b64)
+      BOOTSTRAP_PUBLISHER_LIBP2P_IDENTITY_B64="${2:-}"
+      shift 2
+      ;;
+    --bootstrap-owner-private-key)
+      BOOTSTRAP_OWNER_PRIVATE_KEY="${2:-}"
+      shift 2
+      ;;
+    --bootstrap-owner-authorization-b64)
+      BOOTSTRAP_OWNER_AUTHORIZATION_B64="${2:-}"
+      shift 2
+      ;;
+    --bootstrap-registration-id)
+      BOOTSTRAP_REGISTRATION_ID="${2:-}"
+      shift 2
+      ;;
     --no-start)
       START_SERVICE=0
       shift
@@ -183,6 +224,26 @@ if [ -n "${UDP_PORT}" ]; then
   write_env_var "EXTERNAL_RELAY_WEBTRANSPORT_PORT" "${UDP_PORT}"
   write_env_var "EXTERNAL_RELAY_WEBRTC_PORT" "${UDP_PORT}"
 fi
+if [ -n "${BOOTSTRAP_PUBLISHER_PRIVATE_KEY}" ]; then
+  write_env_var "ALEPH_BOOTSTRAP_PUBLISHER_PRIVATE_KEY" "${BOOTSTRAP_PUBLISHER_PRIVATE_KEY}"
+fi
+if [ -n "${BOOTSTRAP_PUBLISHER_LIBP2P_IDENTITY_B64}" ]; then
+  identity_path="$(current_identity_path)"
+  mkdir -p "$(dirname "${identity_path}")"
+  printf '%s' "${BOOTSTRAP_PUBLISHER_LIBP2P_IDENTITY_B64}" | base64 -d > "${identity_path}"
+  chmod 0400 "${identity_path}"
+  chown uc-go-peer:uc-go-peer "${identity_path}" || true
+fi
+if [ -n "${BOOTSTRAP_OWNER_PRIVATE_KEY}" ]; then
+  write_env_var "ALEPH_BOOTSTRAP_OWNER_PRIVATE_KEY" "${BOOTSTRAP_OWNER_PRIVATE_KEY}"
+fi
+if [ -n "${BOOTSTRAP_OWNER_AUTHORIZATION_B64}" ]; then
+  write_env_var "ALEPH_BOOTSTRAP_OWNER_AUTHORIZATION_B64" "${BOOTSTRAP_OWNER_AUTHORIZATION_B64}"
+fi
+if [ -n "${BOOTSTRAP_REGISTRATION_ID}" ]; then
+  write_env_var "ALEPH_BOOTSTRAP_REGISTRATION_ID" "${BOOTSTRAP_REGISTRATION_ID}"
+fi
+write_env_var "ALEPH_BOOTSTRAP_PROFILE" "uc-go-peer"
 write_env_var "LIBP2P_ANNOUNCE_ADDRS" "${announce_value}"
 touch "${READY_FILE}"
 
@@ -191,6 +252,8 @@ if [ "${START_SERVICE}" -eq 1 ]; then
   systemctl enable "${SERVICE_NAME}"
   systemctl restart "${SERVICE_NAME}"
   systemctl enable "${AUTOTLS_REFRESH_SERVICE}"
+  systemctl enable "${BOOTSTRAP_REFRESH_TIMER}"
+  systemctl start "${BOOTSTRAP_REFRESH_TIMER}"
   if [ -n "${PROXY_HOSTNAME}" ]; then
     systemctl enable "${CADDY_SERVICE}"
     systemctl restart "${CADDY_SERVICE}"

package/reference/uc-go-peer/rootfs/uc-go-peer-setup-server.py

@@ -135,6 +135,14 @@ class Handler(BaseHTTPRequestHandler):
             udp_port = payload.get("udp_port")
             quic_port = payload.get("quic_port")
             webrtc_port = payload.get("webrtc_port")
+            bootstrap_publisher_private_key = payload.get("bootstrap_publisher_private_key")
+            bootstrap_publisher_libp2p_identity_b64 = payload.get(
+                "bootstrap_publisher_libp2p_identity_b64"
+            )
+            bootstrap_owner_private_key = payload.get("bootstrap_owner_private_key")
+            bootstrap_owner_authorization_b64 = payload.get("bootstrap_owner_authorization_b64")
+            bootstrap_registration_id = payload.get("bootstrap_registration_id")
+            no_start = bool(payload.get("no_start"))
             args = [
                 CONFIGURE_SCRIPT,
                 "--public-ipv4",
@@ -153,6 +161,25 @@ class Handler(BaseHTTPRequestHandler):
                 udp_candidate = webrtc_port
             if udp_candidate is not None:
                 args.extend(["--udp-port", _validate_port(udp_candidate, "udp_port")])
+            if bootstrap_publisher_private_key is not None:
+                args.extend(["--bootstrap-publisher-private-key", str(bootstrap_publisher_private_key)])
+            if bootstrap_publisher_libp2p_identity_b64 is not None:
+                args.extend(
+                    [
+                        "--bootstrap-publisher-libp2p-identity-b64",
+                        str(bootstrap_publisher_libp2p_identity_b64),
+                    ]
+                )
+            if bootstrap_owner_private_key is not None:
+                args.extend(["--bootstrap-owner-private-key", str(bootstrap_owner_private_key)])
+            if bootstrap_owner_authorization_b64 is not None:
+                args.extend(
+                    ["--bootstrap-owner-authorization-b64", str(bootstrap_owner_authorization_b64)]
+                )
+            if bootstrap_registration_id is not None:
+                args.extend(["--bootstrap-registration-id", str(bootstrap_registration_id)])
+            if no_start:
+                args.append("--no-start")
         except ValueError as error:
             self._send_json(400, {"status": "bad-request", "error": str(error)})
             return