search

input-output-hk / cardano-ops

NixOps deployment configuration for IOHK/Cardano devops
Apache License 2.0
65 stars 161 forks source link

local-dev-cluster: publish the keys on explorer machine #25

Open denisshevchenko opened 4 years ago

denisshevchenko commented 4 years ago

Currently the cluster local-dev-cluster contains three machines a, b and c for core nodes and explorer machine for cardano-explorer-node and for transaction generator as well. But we need both keys and certificates to be able to run transaction generator (because it should sign generated transactions). Particularly, we need:

  1. delegate-keys.000.key
  2. delegate-keys.001.key
  3. delegate-keys.002.key
  4. delegation-cert.000.json

Currently these keys/certificate aren't presented on explorer machine by default, so they were copied to explorer machine manually, using nixops scp. So, nix scripts should be improved in order these keys/certificate will be published to explorer machine automatically during deployment.

denisshevchenko commented 4 years ago

@jbgi ^

CodiePP commented 4 years ago

in epic: input-output-hk/iohk-monitoring-framework#323

denisshevchenko commented 4 years ago

Done.

Now required certificate and keys will be copied to explorer machine automatically, during nixops deploy command. They are:

  1. /var/lib/keys/cardano-node-delegation-cert - delegation certificate, will be passed to --delegation-certificate CLI parameter.
  2. /var/lib/keys/cardano-node-signing-gen - first signing key delegate-keys.000.key, will be passed to --sig-key CLI parameter.
  3. /var/lib/keys/cardano-node-signing-src - second signing key delegate-keys.001.key, will be passed to --sig-key CLI parameter.
  4. /var/lib/keys/cardano-node-signing-rec - third signing key delegate-keys.002.key, will be passed to --sig-key CLI parameter.

Only roles/explorer.nix script was changed (both in local-dev-cluster and in remote-dev-cluster).

These keys will be passed to cardano-cli generate-txs during its start (see https://github.com/input-output-hk/cardano-ops/issues/28).