Some scripts for provisioning a secure rocketpool node runner
Before you start you need to install ansible and some plugins on your local machine.
pip install ansible
ansible-galaxy collection install community.general
ansible-galaxy install dev-sec.os-hardening dev-sec.ssh-hardening jnv.unattended-upgrades geerlingguy.docker
Choose a target machine.
# Build preseeded debian ISO by running the script in `nuc`
cd nuc
./create_preseed_iso.sh
# Burn that to USB stick and start install
# Format the disk?
#mkfs.ext4 /dev/disk/by-id/<the-id>
# Don't forget to `chown 65534:65534 /path/to/prometheus/mount`.
# automount the disk
echo "/dev/disk/by-uuid/8a7a5935-1c6a-47ad-bdba-13f0377cf61d /var/lib/fast ext4 rw,relatime,stripe=8191 0 0" >> /etc/fstab
For local testing
ansible-playbook vagrant.yaml
Or if you like the cloud
# Install hetzner plugins locally
pip install hcloud
ansible-galaxy collection install hetzner.hcloud
# Create the machine
ansible-playbook hetzner.yaml
# For vagrant just use ./env.sh vagrant
# For hetzner skip the <ip-of-host> (it was automatically generated)
./env.sh <environment> <ip-of-host>
# Do base provisioning
ansible-playbook base.yaml
# Install and setup rocketpool + monitoring
ansible-playbook install-rocketpool.yaml
Now rocketpool should be running and syncing with the chains. When it's done you can setup your wallet.
- Finish the node - see this
- recover with wallet mnemonics
- upgrade?