Compare commits
No commits in common. "master" and "wallet-connect" have entirely different histories.
master
...
wallet-con
141 changed files with 1430 additions and 1643 deletions
|
@ -1,4 +1,8 @@
|
|||
# Services start/stop order
|
||||
# Will start from top to bottom and stop in reverse
|
||||
basenet
|
||||
chain
|
||||
morph_chain
|
||||
nats
|
||||
ir
|
||||
storage
|
||||
|
|
|
@ -1,7 +0,0 @@
|
|||
# Services start/stop order
|
||||
# Will start from top to bottom and stop in reverse
|
||||
basenet
|
||||
morph_chain
|
||||
jaeger
|
||||
prometheus
|
||||
grafana
|
|
@ -1,6 +1,5 @@
|
|||
.docker
|
||||
.github
|
||||
.forgejo
|
||||
vendor
|
||||
tmp
|
||||
.secrets
|
||||
|
|
83
.env
83
.env
|
@ -1,70 +1,43 @@
|
|||
# Basenet settings
|
||||
LOCAL_DOMAIN=frostfs.devenv
|
||||
LOCAL_DOMAIN=neofs.devenv
|
||||
IPV4_PREFIX=192.168.130
|
||||
CA_CERTS_TRUSTED_STORE=/etc/ssl/certs
|
||||
|
||||
# Bastion image
|
||||
BASTION_VERSION=10
|
||||
BASTION_IMAGE=debian
|
||||
|
||||
# NeoGo privnet
|
||||
NEOGO_VERSION=0.104.0
|
||||
NEOGO_IMAGE=nspccdev/neo-go
|
||||
CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.14.2/devenv_mainchain_notary_disabled.gz"
|
||||
NEOGO_VERSION=0.98.1
|
||||
|
||||
# FrostFS InnerRing nodes
|
||||
IR_VERSION=0.42.9
|
||||
IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
|
||||
# NeoGo sidechain
|
||||
MORPH_CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.14.2/devenv_sidechain.gz"
|
||||
|
||||
# FrostFS Storage nodes
|
||||
NODE_VERSION=0.42.9
|
||||
NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
|
||||
# NeoFS InnerRing nodes
|
||||
IR_VERSION=0.27.5
|
||||
IR_IMAGE=nspccdev/neofs-ir
|
||||
|
||||
# NeoFS Storage nodes
|
||||
NODE_VERSION=0.27.5
|
||||
NODE_IMAGE=nspccdev/neofs-storage
|
||||
|
||||
# NATS Server
|
||||
NATS_VERSION=2.7.2
|
||||
NATS_IMAGE=nats
|
||||
|
||||
# HTTP Gate
|
||||
HTTP_GW_VERSION=0.30.2
|
||||
HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
|
||||
|
||||
# REST Gate
|
||||
REST_GW_VERSION=c9c85e90
|
||||
REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
|
||||
HTTP_GW_VERSION=0.18.0
|
||||
HTTP_GW_IMAGE=nspccdev/neofs-http-gw
|
||||
|
||||
# S3 Gate
|
||||
S3_GW_VERSION=0.31.0-rc.4
|
||||
S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
|
||||
S3_GW_VERSION=0.18.0
|
||||
S3_GW_IMAGE=nspccdev/neofs-s3-gw
|
||||
|
||||
# Lifecycler
|
||||
S3_LIFECYCLER_VERSION=0.1.3
|
||||
S3_LIFECYCLER_IMAGE=truecloudlab/frostfs-s3-lifecycler
|
||||
# Coredns
|
||||
COREDNS_VERSION=v016
|
||||
COREDNS_IMAGE=nspccdev/coredns
|
||||
|
||||
# FrostFS LOCODE database
|
||||
LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a056712e8e54
|
||||
# NeoFS LOCODE database
|
||||
LOCODE_DB_URL=https://github.com/nspcc-dev/neofs-locode-db/releases/download/v0.2.1/locode_db.gz
|
||||
#LOCODE_DB_PATH=/path/to/locode_db
|
||||
|
||||
# FrostFS CLI binary
|
||||
FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-cli
|
||||
#FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
|
||||
|
||||
# FrostFS ADM tool binary
|
||||
FROSTFS_ADM_VERSION=498f9955ea
|
||||
FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-adm
|
||||
#FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
|
||||
|
||||
# Compiled FrostFS Smart Contracts
|
||||
FROSTFS_CONTRACTS_VERSION=694daebb19
|
||||
FROSTFS_CONTRACTS_URL=https://git.frostfs.info/TrueCloudLab/frostfs-contract/releases/download/v0.19.2/frostfs-contract-v0.19.2.tar.gz
|
||||
#FROSTFS_CONTRACTS_PATH=/path/to/unpacked/frostfs-contracts-dir
|
||||
|
||||
# Jaeger tracing
|
||||
JAEGER_VERSION=1.42.0
|
||||
JAEGER_IMAGE=jaegertracing/all-in-one
|
||||
|
||||
# Prometheus monitoring
|
||||
PROMETHEUS_VERSION=v2.43.0
|
||||
PROMETHEUS_IMAGE=prom/prometheus
|
||||
|
||||
# Grafana versions
|
||||
GRAFANA_VERSION=9.5.6
|
||||
GRAFANA_IMAGE=grafana/grafana
|
||||
|
||||
# Loki versions
|
||||
LOKI_VERSION=2.9.1
|
||||
LOKI_IMAGE=grafana/loki
|
||||
# NeoFS CLI binary
|
||||
NEOFS_CLI_URL=https://github.com/nspcc-dev/neofs-node/releases/download/v0.27.5/neofs-cli-amd64.tar.gz
|
||||
#NEOFS_CLI_PATH=/path/to/neofs-cli-binary
|
||||
|
|
|
@ -1,21 +0,0 @@
|
|||
name: DCO action
|
||||
on: [pull_request]
|
||||
|
||||
jobs:
|
||||
dco:
|
||||
name: DCO
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Setup Go
|
||||
uses: actions/setup-go@v3
|
||||
with:
|
||||
go-version: '1.21'
|
||||
|
||||
- name: Run commit format checker
|
||||
uses: https://git.frostfs.info/TrueCloudLab/dco-go@v2
|
||||
with:
|
||||
from: 'origin/${{ github.event.pull_request.base.ref }}'
|
1
.gitattributes
vendored
1
.gitattributes
vendored
|
@ -1 +0,0 @@
|
|||
/services/grafana/provisioning/dashboards/* -diff -merge
|
1
.github/CODEOWNERS
vendored
1
.github/CODEOWNERS
vendored
|
@ -1 +0,0 @@
|
|||
* @alexvanin @fyrchik
|
45
.github/ISSUE_TEMPLATE/bug_report.md
vendored
45
.github/ISSUE_TEMPLATE/bug_report.md
vendored
|
@ -1,45 +0,0 @@
|
|||
---
|
||||
name: Bug report
|
||||
about: Create a report to help us improve
|
||||
title: ''
|
||||
labels: community, triage, bug
|
||||
assignees: ''
|
||||
|
||||
---
|
||||
|
||||
<!--- Provide a general summary of the issue in the Title above -->
|
||||
|
||||
## Expected Behavior
|
||||
<!--- If you're describing a bug, tell us what should happen -->
|
||||
<!--- If you're suggesting a change/improvement, tell us how it should work -->
|
||||
|
||||
## Current Behavior
|
||||
<!--- If describing a bug, tell us what happens instead of the expected behavior -->
|
||||
<!--- If suggesting a change/improvement, explain the difference from current behavior -->
|
||||
|
||||
## Possible Solution
|
||||
<!--- Not obligatory -->
|
||||
<!--- If no reason/fix/additions for the bug can be suggested, -->
|
||||
<!--- uncomment the following phrase: -->
|
||||
|
||||
<!--- No fix can be suggested by a QA engineer. Further solutions shall be up to developers. -->
|
||||
|
||||
## Steps to Reproduce (for bugs)
|
||||
<!--- Provide a link to a live example, or an unambiguous set of steps to -->
|
||||
<!--- reproduce this bug. -->
|
||||
|
||||
1.
|
||||
|
||||
## Context
|
||||
<!--- How has this issue affected you? What are you trying to accomplish? -->
|
||||
<!--- Providing context helps us come up with a solution that is most useful in the real world -->
|
||||
|
||||
## Regression
|
||||
<!-- Is this issue a regression? (Yes / No) -->
|
||||
<!-- If Yes, optionally please include version or commit id or PR# that caused this regression, if you have these details. -->
|
||||
|
||||
## Your Environment
|
||||
<!--- Include as many relevant details about the environment you experienced the bug in -->
|
||||
* Version used:
|
||||
* Server setup and configuration:
|
||||
* Operating System and version (`uname -a`):
|
1
.github/ISSUE_TEMPLATE/config.yml
vendored
1
.github/ISSUE_TEMPLATE/config.yml
vendored
|
@ -1 +0,0 @@
|
|||
blank_issues_enabled: false
|
20
.github/ISSUE_TEMPLATE/feature_request.md
vendored
20
.github/ISSUE_TEMPLATE/feature_request.md
vendored
|
@ -1,20 +0,0 @@
|
|||
---
|
||||
name: Feature request
|
||||
about: Suggest an idea for this project
|
||||
title: ''
|
||||
labels: community, triage
|
||||
assignees: ''
|
||||
|
||||
---
|
||||
|
||||
## Is your feature request related to a problem? Please describe.
|
||||
<!--- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] -->
|
||||
|
||||
## Describe the solution you'd like
|
||||
<!--- A clear and concise description of what you want to happen. -->
|
||||
|
||||
## Describe alternatives you've considered
|
||||
<!--- A clear and concise description of any alternative solutions or features you've considered. -->
|
||||
|
||||
## Additional context
|
||||
<!--- Add any other context or screenshots about the feature request here. -->
|
197
.github/logo.svg
vendored
197
.github/logo.svg
vendored
|
@ -1,70 +1,129 @@
|
|||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<!-- Generator: Adobe Illustrator 25.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->
|
||||
<svg version="1.1" id="Слой_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
|
||||
viewBox="0 0 184.2 51.8" style="enable-background:new 0 0 184.2 51.8;" xml:space="preserve">
|
||||
<style type="text/css">
|
||||
.st0{display:none;}
|
||||
.st1{display:inline;}
|
||||
.st2{fill:#01E397;}
|
||||
.st3{display:inline;fill:#010032;}
|
||||
.st4{display:inline;fill:#00E599;}
|
||||
.st5{display:inline;fill:#00AF92;}
|
||||
.st6{fill:#00C3E5;}
|
||||
</style>
|
||||
<g id="Layer_2">
|
||||
<g id="Layer_1-2" class="st0">
|
||||
<g class="st1">
|
||||
<path class="st2" d="M146.6,18.3v7.2h10.9V29h-10.9v10.7h-4V14.8h18v3.5H146.6z"/>
|
||||
<path class="st2" d="M180,15.7c1.7,0.9,3,2.2,4,3.8l-3,2.7c-0.6-1.3-1.5-2.4-2.6-3.3c-1.3-0.7-2.8-1-4.3-1
|
||||
c-1.4-0.1-2.8,0.3-4,1.1c-0.9,0.5-1.5,1.5-1.4,2.6c0,1,0.5,1.9,1.4,2.4c1.5,0.8,3.2,1.3,4.9,1.5c1.9,0.3,3.7,0.8,5.4,1.6
|
||||
c1.2,0.5,2.2,1.3,2.9,2.3c0.6,1,1,2.2,0.9,3.4c0,1.4-0.5,2.7-1.3,3.8c-0.9,1.2-2.1,2.1-3.5,2.6c-1.7,0.6-3.4,0.9-5.2,0.8
|
||||
c-5,0-8.6-1.6-10.7-5l2.9-2.8c0.7,1.4,1.8,2.5,3.1,3.3c1.5,0.7,3.1,1.1,4.7,1c1.5,0.1,2.9-0.2,4.2-0.9c0.9-0.5,1.5-1.5,1.5-2.6
|
||||
c0-0.9-0.5-1.8-1.3-2.2c-1.5-0.7-3.1-1.2-4.8-1.5c-1.9-0.3-3.7-0.8-5.5-1.5c-1.2-0.5-2.2-1.4-3-2.4c-0.6-1-1-2.2-0.9-3.4
|
||||
c0-1.4,0.4-2.7,1.2-3.8c0.8-1.2,2-2.2,3.3-2.8c1.6-0.7,3.4-1.1,5.2-1C176.1,14.3,178.2,14.8,180,15.7z"/>
|
||||
</g>
|
||||
<path class="st3" d="M73.3,16.3c1.9,1.9,2.9,4.5,2.7,7.1v15.9h-4V24.8c0-2.6-0.5-4.5-1.6-5.7c-1.2-1.2-2.8-1.8-4.5-1.7
|
||||
c-1.3,0-2.5,0.3-3.7,0.8c-1.2,0.7-2.2,1.7-2.9,2.9c-0.8,1.5-1.1,3.2-1.1,4.9v13.3h-4V15.1l3.6,1.5v1.7c0.8-1.5,2.1-2.6,3.6-3.3
|
||||
c1.5-0.8,3.2-1.2,4.9-1.1C68.9,13.8,71.3,14.7,73.3,16.3z"/>
|
||||
<path class="st3" d="M104.4,28.3H85.6c0.1,2.2,1,4.3,2.5,5.9c1.5,1.4,3.5,2.2,5.6,2.1c1.6,0.1,3.2-0.2,4.6-0.9
|
||||
c1.1-0.6,2-1.6,2.5-2.8l3.3,1.8c-0.9,1.7-2.3,3.1-4,4c-2,1-4.2,1.5-6.4,1.4c-3.7,0-6.7-1.1-8.8-3.4s-3.2-5.5-3.2-9.6s1-7.2,3-9.5
|
||||
s5-3.4,8.7-3.4c2.1-0.1,4.2,0.5,6.1,1.5c1.6,1,3,2.5,3.8,4.2c0.9,1.8,1.3,3.9,1.3,5.9C104.6,26.4,104.6,27.4,104.4,28.3z
|
||||
M88.1,19.3c-1.4,1.5-2.2,3.4-2.4,5.5h15.1c-0.2-2-1-3.9-2.3-5.5c-1.4-1.3-3.2-2-5.1-1.9C91.5,17.3,89.6,18,88.1,19.3z"/>
|
||||
<path class="st3" d="M131,17.3c2.2,2.3,3.2,5.5,3.2,9.5s-1,7.3-3.2,9.6s-5.1,3.4-8.8,3.4s-6.7-1.1-8.9-3.4s-3.2-5.5-3.2-9.6
|
||||
s1.1-7.2,3.2-9.5s5.1-3.4,8.9-3.4S128.9,15,131,17.3z M116.2,19.9c-1.5,2-2.2,4.4-2.1,6.9c-0.2,2.5,0.6,5,2.1,7
|
||||
c1.5,1.7,3.7,2.7,6,2.6c2.3,0.1,4.4-0.9,5.9-2.6c1.5-2,2.3-4.5,2.1-7c0.1-2.5-0.6-4.9-2.1-6.9c-1.5-1.7-3.6-2.7-5.9-2.6
|
||||
C119.9,17.2,117.7,18.2,116.2,19.9z"/>
|
||||
<polygon class="st4" points="0,9.1 0,43.7 22.5,51.8 22.5,16.9 46.8,7.9 24.8,0 "/>
|
||||
<polygon class="st5" points="24.3,17.9 24.3,36.8 46.8,44.9 46.8,9.6 "/>
|
||||
</g>
|
||||
<g>
|
||||
<g>
|
||||
<path class="st6" d="M41.6,17.5H28.2v6.9h10.4v3.3H28.2v10.2h-3.9V14.2h17.2V17.5z"/>
|
||||
<path class="st6" d="M45.8,37.9v-18h3.3l0.4,3.2c0.5-1.2,1.2-2.1,2.1-2.7c0.9-0.6,2.1-0.9,3.5-0.9c0.4,0,0.7,0,1.1,0.1
|
||||
c0.4,0.1,0.7,0.2,0.9,0.3l-0.5,3.4c-0.3-0.1-0.6-0.2-0.9-0.2C55.4,23,54.9,23,54.4,23c-0.7,0-1.5,0.2-2.2,0.6
|
||||
c-0.7,0.4-1.3,1-1.8,1.8s-0.7,1.8-0.7,3v9.5H45.8z"/>
|
||||
<path class="st6" d="M68.6,19.6c1.8,0,3.3,0.4,4.6,1.1c1.3,0.7,2.4,1.8,3.1,3.2s1.1,3.1,1.1,5c0,1.9-0.4,3.6-1.1,5
|
||||
c-0.8,1.4-1.8,2.5-3.1,3.2c-1.3,0.7-2.9,1.1-4.6,1.1s-3.3-0.4-4.6-1.1c-1.3-0.7-2.4-1.8-3.2-3.2c-0.8-1.4-1.2-3.1-1.2-5
|
||||
c0-1.9,0.4-3.6,1.2-5s1.8-2.5,3.2-3.2C65.3,19.9,66.8,19.6,68.6,19.6z M68.6,22.6c-1.1,0-2,0.2-2.8,0.7c-0.8,0.5-1.3,1.2-1.7,2.1
|
||||
s-0.6,2.1-0.6,3.5c0,1.3,0.2,2.5,0.6,3.4s1,1.7,1.7,2.2s1.7,0.7,2.8,0.7c1.1,0,2-0.2,2.7-0.7c0.7-0.5,1.3-1.2,1.7-2.2
|
||||
s0.6-2.1,0.6-3.4c0-1.4-0.2-2.5-0.6-3.5s-1-1.6-1.7-2.1C70.6,22.8,69.6,22.6,68.6,22.6z"/>
|
||||
<path class="st6" d="M89.2,38.3c-1.8,0-3.4-0.3-4.9-1c-1.5-0.7-2.7-1.7-3.5-3l2.7-2.3c0.5,1,1.3,1.8,2.3,2.4
|
||||
c1,0.6,2.2,0.9,3.6,0.9c1.1,0,2-0.2,2.6-0.6c0.6-0.4,1-0.9,1-1.6c0-0.5-0.2-0.9-0.5-1.2s-0.9-0.6-1.7-0.8l-3.8-0.8
|
||||
c-1.9-0.4-3.3-1-4.1-1.9c-0.8-0.9-1.2-1.9-1.2-3.3c0-1,0.3-1.9,0.9-2.7c0.6-0.8,1.4-1.5,2.5-2s2.5-0.8,4-0.8c1.8,0,3.3,0.3,4.6,1
|
||||
c1.3,0.6,2.2,1.5,2.9,2.7l-2.7,2.2c-0.5-1-1.1-1.7-2-2.1c-0.9-0.5-1.8-0.7-2.8-0.7c-0.8,0-1.4,0.1-2,0.3c-0.6,0.2-1,0.5-1.3,0.8
|
||||
c-0.3,0.3-0.4,0.7-0.4,1.2c0,0.5,0.2,0.9,0.5,1.3s1,0.6,1.9,0.8l4.1,0.9c1.7,0.3,2.9,0.9,3.7,1.7c0.7,0.8,1.1,1.8,1.1,2.9
|
||||
c0,1.2-0.3,2.2-0.9,3c-0.6,0.9-1.5,1.6-2.6,2C92.1,38.1,90.7,38.3,89.2,38.3z"/>
|
||||
<path class="st6" d="M112.8,19.9v3H99.3v-3H112.8z M106.6,14.6v17.9c0,0.9,0.2,1.5,0.7,1.9c0.5,0.4,1.1,0.6,1.9,0.6
|
||||
c0.6,0,1.2-0.1,1.7-0.3c0.5-0.2,0.9-0.5,1.3-0.8l0.9,2.8c-0.6,0.5-1.2,0.9-2,1.1c-0.8,0.3-1.7,0.4-2.7,0.4c-1,0-2-0.2-2.8-0.5
|
||||
s-1.5-0.9-2-1.6c-0.5-0.8-0.7-1.7-0.8-3V15.7L106.6,14.6z"/>
|
||||
<path d="M137.9,17.5h-13.3v6.9h10.4v3.3h-10.4v10.2h-3.9V14.2h17.2V17.5z"/>
|
||||
<path d="M150.9,13.8c2.1,0,4,0.4,5.5,1.2c1.6,0.8,2.9,2,4,3.5l-2.6,2.5c-0.9-1.4-1.9-2.4-3.1-3c-1.1-0.6-2.5-0.9-4-0.9
|
||||
c-1.2,0-2.1,0.2-2.8,0.5c-0.7,0.3-1.3,0.7-1.6,1.2c-0.3,0.5-0.5,1.1-0.5,1.7c0,0.7,0.3,1.4,0.8,1.9c0.5,0.6,1.5,1,2.9,1.3
|
||||
l4.8,1.1c2.3,0.5,3.9,1.3,4.9,2.3c1,1,1.4,2.3,1.4,3.9c0,1.5-0.4,2.7-1.2,3.8c-0.8,1.1-1.9,1.9-3.3,2.5s-3.1,0.9-5,0.9
|
||||
c-1.7,0-3.2-0.2-4.5-0.6c-1.3-0.4-2.5-1-3.5-1.8c-1-0.7-1.8-1.6-2.5-2.6l2.7-2.7c0.5,0.8,1.1,1.6,1.9,2.2
|
||||
c0.8,0.7,1.7,1.2,2.7,1.5c1,0.4,2.2,0.5,3.4,0.5c1.1,0,2.1-0.1,2.9-0.4c0.8-0.3,1.4-0.7,1.8-1.2c0.4-0.5,0.6-1.1,0.6-1.9
|
||||
c0-0.7-0.2-1.3-0.7-1.8c-0.5-0.5-1.3-0.9-2.6-1.2l-5.2-1.2c-1.4-0.3-2.6-0.8-3.6-1.3c-0.9-0.6-1.6-1.3-2.1-2.1s-0.7-1.8-0.7-2.8
|
||||
c0-1.3,0.4-2.6,1.1-3.7c0.7-1.1,1.8-2,3.2-2.6C147.3,14.1,148.9,13.8,150.9,13.8z"/>
|
||||
</g>
|
||||
</g>
|
||||
</g>
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
|
||||
<svg
|
||||
xmlns:dc="http://purl.org/dc/elements/1.1/"
|
||||
xmlns:cc="http://creativecommons.org/ns#"
|
||||
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
|
||||
xmlns:svg="http://www.w3.org/2000/svg"
|
||||
xmlns="http://www.w3.org/2000/svg"
|
||||
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
|
||||
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
|
||||
sodipodi:docname="logo_fs.svg"
|
||||
inkscape:version="1.0 (4035a4fb49, 2020-05-01)"
|
||||
id="svg57"
|
||||
version="1.1"
|
||||
viewBox="0 0 105 25"
|
||||
height="25mm"
|
||||
width="105mm">
|
||||
<defs
|
||||
id="defs51">
|
||||
<clipPath
|
||||
clipPathUnits="userSpaceOnUse"
|
||||
id="clipPath434">
|
||||
<path
|
||||
d="M 0,0 H 1366 V 768 H 0 Z"
|
||||
id="path432" />
|
||||
</clipPath>
|
||||
</defs>
|
||||
<sodipodi:namedview
|
||||
inkscape:window-maximized="0"
|
||||
inkscape:window-y="0"
|
||||
inkscape:window-x="130"
|
||||
inkscape:window-height="1040"
|
||||
inkscape:window-width="1274"
|
||||
height="50mm"
|
||||
units="mm"
|
||||
showgrid="false"
|
||||
inkscape:document-rotation="0"
|
||||
inkscape:current-layer="layer1"
|
||||
inkscape:document-units="mm"
|
||||
inkscape:cy="344.49897"
|
||||
inkscape:cx="468.64708"
|
||||
inkscape:zoom="0.7"
|
||||
inkscape:pageshadow="2"
|
||||
inkscape:pageopacity="0.0"
|
||||
borderopacity="1.0"
|
||||
bordercolor="#666666"
|
||||
pagecolor="#ffffff"
|
||||
id="base" />
|
||||
<metadata
|
||||
id="metadata54">
|
||||
<rdf:RDF>
|
||||
<cc:Work
|
||||
rdf:about="">
|
||||
<dc:format>image/svg+xml</dc:format>
|
||||
<dc:type
|
||||
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
|
||||
<dc:title></dc:title>
|
||||
</cc:Work>
|
||||
</rdf:RDF>
|
||||
</metadata>
|
||||
<g
|
||||
id="layer1"
|
||||
inkscape:groupmode="layer"
|
||||
inkscape:label="Layer 1">
|
||||
<g
|
||||
id="g424"
|
||||
transform="matrix(0.35277777,0,0,-0.35277777,63.946468,10.194047)">
|
||||
<path
|
||||
d="m 0,0 v -8.093 h 12.287 v -3.94 H 0 V -24.067 H -4.534 V 3.898 H 15.677 V 0 Z"
|
||||
style="fill:#00e396;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path426" />
|
||||
</g>
|
||||
<g
|
||||
transform="matrix(0.35277777,0,0,-0.35277777,-315.43002,107.34005)"
|
||||
id="g428">
|
||||
<g
|
||||
id="g430"
|
||||
clip-path="url(#clipPath434)">
|
||||
<g
|
||||
id="g436"
|
||||
transform="translate(1112.874,278.2981)">
|
||||
<path
|
||||
d="M 0,0 C 1.822,-0.932 3.354,-2.359 4.597,-4.28 L 1.165,-7.373 c -0.791,1.695 -1.779,2.924 -2.966,3.686 -1.186,0.763 -2.768,1.145 -4.745,1.145 -1.949,0 -3.461,-0.389 -4.534,-1.166 -1.074,-0.777 -1.61,-1.772 -1.61,-2.987 0,-1.13 0.523,-2.027 1.568,-2.69 1.045,-0.664 2.909,-1.236 5.593,-1.716 2.514,-0.452 4.512,-1.024 5.995,-1.716 1.483,-0.693 2.564,-1.554 3.242,-2.585 0.677,-1.031 1.016,-2.309 1.016,-3.834 0,-1.639 -0.466,-3.079 -1.398,-4.322 -0.932,-1.243 -2.239,-2.197 -3.919,-2.86 -1.681,-0.664 -3.623,-0.996 -5.826,-0.996 -5.678,0 -9.689,1.892 -12.033,5.678 l 3.178,3.178 c 0.903,-1.695 2.068,-2.939 3.495,-3.729 1.426,-0.791 3.199,-1.186 5.318,-1.186 2.005,0 3.58,0.345 4.724,1.038 1.144,0.692 1.716,1.674 1.716,2.945 0,1.017 -0.516,1.835 -1.547,2.457 -1.031,0.621 -2.832,1.172 -5.402,1.653 -2.571,0.479 -4.618,1.073 -6.143,1.779 -1.526,0.706 -2.635,1.582 -3.326,2.627 -0.693,1.045 -1.039,2.316 -1.039,3.813 0,1.582 0.438,3.023 1.314,4.322 0.875,1.299 2.14,2.33 3.792,3.093 1.653,0.763 3.58,1.144 5.783,1.144 C -4.018,1.398 -1.822,0.932 0,0"
|
||||
style="fill:#00e396;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path438" />
|
||||
</g>
|
||||
<g
|
||||
id="g440"
|
||||
transform="translate(993.0239,277.5454)">
|
||||
<path
|
||||
d="m 0,0 c 2.054,-1.831 3.083,-4.465 3.083,-7.902 v -17.935 h -4.484 v 16.366 c 0,2.914 -0.626,5.024 -1.877,6.332 -1.253,1.308 -2.924,1.962 -5.016,1.962 -1.495,0 -2.896,-0.327 -4.204,-0.981 -1.308,-0.654 -2.381,-1.719 -3.222,-3.194 -0.841,-1.477 -1.261,-3.335 -1.261,-5.576 v -14.909 h -4.484 V 1.328 l 4.086,-1.674 0.118,-1.84 c 0.933,1.681 2.222,2.923 3.867,3.727 1.643,0.803 3.493,1.205 5.548,1.205 C -4.671,2.746 -2.055,1.83 0,0"
|
||||
style="fill:#000033;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path442" />
|
||||
</g>
|
||||
<g
|
||||
id="g444"
|
||||
transform="translate(1027.9968,264.0386)">
|
||||
<path
|
||||
d="m 0,0 h -21.128 c 0.261,-2.84 1.205,-5.044 2.83,-6.613 1.625,-1.57 3.727,-2.355 6.305,-2.355 2.054,0 3.763,0.356 5.128,1.065 1.363,0.71 2.288,1.738 2.774,3.083 l 3.755,-1.961 c -1.121,-1.981 -2.616,-3.495 -4.484,-4.54 -1.868,-1.046 -4.259,-1.569 -7.173,-1.569 -4.223,0 -7.538,1.289 -9.948,3.867 -2.41,2.578 -3.615,6.146 -3.615,10.704 0,4.558 1.149,8.127 3.447,10.705 2.298,2.578 5.557,3.867 9.779,3.867 2.615,0 4.876,-0.58 6.782,-1.738 1.905,-1.158 3.343,-2.728 4.315,-4.707 C -0.262,7.827 0.224,5.605 0.224,3.139 0.224,2.092 0.149,1.046 0,0 m -18.298,10.144 c -1.513,-1.457 -2.438,-3.512 -2.775,-6.165 h 16.982 c -0.3,2.615 -1.159,4.661 -2.578,6.137 -1.42,1.476 -3.307,2.214 -5.661,2.214 -2.466,0 -4.455,-0.728 -5.968,-2.186"
|
||||
style="fill:#000033;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path446" />
|
||||
</g>
|
||||
<g
|
||||
id="g448"
|
||||
transform="translate(1057.8818,276.4246)">
|
||||
<path
|
||||
d="m 0,0 c 2.41,-2.578 3.615,-6.147 3.615,-10.705 0,-4.558 -1.205,-8.126 -3.615,-10.704 -2.41,-2.578 -5.726,-3.867 -9.948,-3.867 -4.222,0 -7.537,1.289 -9.947,3.867 -2.41,2.578 -3.615,6.146 -3.615,10.704 0,4.558 1.205,8.127 3.615,10.705 2.41,2.578 5.725,3.867 9.947,3.867 C -5.726,3.867 -2.41,2.578 0,0 m -16.617,-2.858 c -1.607,-1.906 -2.41,-4.522 -2.41,-7.847 0,-3.326 0.803,-5.94 2.41,-7.846 1.607,-1.905 3.83,-2.858 6.669,-2.858 2.839,0 5.063,0.953 6.67,2.858 1.606,1.906 2.41,4.52 2.41,7.846 0,3.325 -0.804,5.941 -2.41,7.847 C -4.885,-0.953 -7.109,0 -9.948,0 c -2.839,0 -5.062,-0.953 -6.669,-2.858"
|
||||
style="fill:#000033;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path450" />
|
||||
</g>
|
||||
</g>
|
||||
</g>
|
||||
<g
|
||||
id="g452"
|
||||
transform="matrix(0.35277777,0,0,-0.35277777,5.8329581,6.5590171)">
|
||||
<path
|
||||
d="m 0,0 0.001,-38.946 25.286,-9.076 V -8.753 L 52.626,1.321 27.815,10.207 Z"
|
||||
style="fill:#00e599;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path454" />
|
||||
</g>
|
||||
<g
|
||||
id="g456"
|
||||
transform="matrix(0.35277777,0,0,-0.35277777,15.479008,10.041927)">
|
||||
<path
|
||||
d="M 0,0 V -21.306 L 25.293,-30.364 25.282,9.347 Z"
|
||||
style="fill:#00b091;fill-opacity:1;fill-rule:nonzero;stroke:none"
|
||||
id="path458" />
|
||||
</g>
|
||||
</g>
|
||||
</svg>
|
||||
|
|
Before Width: | Height: | Size: 5.5 KiB After Width: | Height: | Size: 6.5 KiB |
21
.github/workflows/dco.yml
vendored
Normal file
21
.github/workflows/dco.yml
vendored
Normal file
|
@ -0,0 +1,21 @@
|
|||
name: DCO check
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches:
|
||||
- master
|
||||
|
||||
jobs:
|
||||
commits_check_job:
|
||||
runs-on: ubuntu-latest
|
||||
name: Commits Check
|
||||
steps:
|
||||
- name: Get PR Commits
|
||||
id: 'get-pr-commits'
|
||||
uses: tim-actions/get-pr-commits@master
|
||||
with:
|
||||
token: ${{ secrets.GITHUB_TOKEN }}
|
||||
- name: DCO Check
|
||||
uses: tim-actions/dco@master
|
||||
with:
|
||||
commits: ${{ steps.get-pr-commits.outputs.commits }}
|
10
.gitignore
vendored
10
.gitignore
vendored
|
@ -1,17 +1,9 @@
|
|||
# IDE
|
||||
.idea
|
||||
.vscode
|
||||
|
||||
# Vendoring
|
||||
vendor
|
||||
|
||||
temp
|
||||
tmp
|
||||
|
||||
.secrets
|
||||
sites/*
|
||||
!sites/.gitkeep
|
||||
|
||||
# Runtime generation keys
|
||||
services/storage/*tls.crt
|
||||
services/storage/*tls.key
|
||||
services/nats/*.pem
|
||||
|
|
|
@ -2,5 +2,4 @@
|
|||
# Will start from top to bottom and stop in reverse
|
||||
http_gate
|
||||
s3_gate
|
||||
rest_gate
|
||||
s3_lifecycler
|
||||
coredns
|
||||
|
|
|
@ -3,8 +3,8 @@
|
|||
First, thank you for contributing! We love and encourage pull requests from
|
||||
everyone. Please follow the guidelines:
|
||||
|
||||
- Check the open [issues](https://git.frostfs.info/TrueCloudLab/frostfs-dev-env/issues) and
|
||||
[pull requests](https://git.frostfs.info/TrueCloudLab/frostfs-dev-env/pulls) for existing
|
||||
- Check the open [issues](https://github.com/nspcc-dev/neofs-dev-env/issues) and
|
||||
[pull requests](https://github.com/nspcc-dev/neofs-dev-env/pulls) for existing
|
||||
discussions.
|
||||
|
||||
- Open an issue first, to discuss a new feature or enhancement.
|
||||
|
@ -21,23 +21,23 @@ everyone. Please follow the guidelines:
|
|||
|
||||
## Development Workflow
|
||||
|
||||
Start by forking the `frostfs-dev-env` repository, make changes in a branch and then
|
||||
Start by forking the `neofs-dev-env` repository, make changes in a branch and then
|
||||
send a pull request. We encourage pull requests to discuss code changes. Here
|
||||
are the steps in details:
|
||||
|
||||
### Set up your git repository
|
||||
Fork [FrostFS node upstream](https://git.frostfs.info/repo/fork/24) source
|
||||
### Setup your GitHub Repository
|
||||
Fork [NeoFS node upstream](https://github.com/nspcc-dev/neofs-dev-env/fork) source
|
||||
repository to your own personal repository. Copy the URL of your fork (you will
|
||||
need it for the `git clone` command below).
|
||||
|
||||
```sh
|
||||
$ git clone https://git.frostfs.info/<username>/frostfs-dev-env.git
|
||||
$ git clone https://github.com/nspcc-dev/neofs-dev-env
|
||||
```
|
||||
|
||||
### Set up git remote as ``upstream``
|
||||
```sh
|
||||
$ cd frostfs-dev-env
|
||||
$ git remote add upstream https://git.frostfs.info/TrueCloudLab/frostfs-dev-env.git
|
||||
$ cd neofs-dev-env
|
||||
$ git remote add upstream https://github.com/nspcc-dev/neofs-dev-env
|
||||
$ git fetch upstream
|
||||
$ git merge upstream/master
|
||||
...
|
||||
|
@ -55,7 +55,8 @@ $ git checkout -b feature/123-something_awesome
|
|||
### Test your changes
|
||||
After your code changes, make sure
|
||||
|
||||
- To run `make up` to check dev-env is not broken.
|
||||
- To add test cases for the new code.
|
||||
- To run `make lint`
|
||||
- To squash your commits into a single commit or a series of logically separated
|
||||
commits run `git rebase -i`. It's okay to force update your pull request.
|
||||
|
||||
|
@ -85,8 +86,8 @@ $ git push origin feature/123-something_awesome
|
|||
```
|
||||
|
||||
### Create a Pull Request
|
||||
Pull requests can be created via Forgejo. Refer to [this
|
||||
document](https://docs.codeberg.org/collaborating/pull-requests-and-git-flow/) for
|
||||
Pull requests can be created via GitHub. Refer to [this
|
||||
document](https://help.github.com/articles/creating-a-pull-request/) for
|
||||
detailed steps on how to create a pull request. After a Pull Request gets peer
|
||||
reviewed and approved, it will be merged.
|
||||
|
||||
|
@ -102,7 +103,7 @@ contributors".
|
|||
To sign your work, just add a line like this at the end of your commit message:
|
||||
|
||||
```
|
||||
Signed-off-by: Samii Sakisaka <samii@frostfs.info>
|
||||
Signed-off-by: Samii Sakisaka <samii@nspcc.ru>
|
||||
```
|
||||
|
||||
This can easily be done with the `--signoff` option to `git commit`.
|
||||
|
|
89
Makefile
89
Makefile
|
@ -10,8 +10,8 @@ include .env
|
|||
# help target
|
||||
include help.mk
|
||||
|
||||
# update FrostFS global config targets
|
||||
include frostfs_config.mk
|
||||
# update NeoFS global config targets
|
||||
include neofs_config.mk
|
||||
|
||||
# Targets to get required artifacts and external resources for each service
|
||||
include services/*/artifacts.mk
|
||||
|
@ -19,31 +19,27 @@ include services/*/artifacts.mk
|
|||
# Targets helpful to prepare service environment
|
||||
include services/*/prepare.mk
|
||||
|
||||
# List of services to run
|
||||
START_SVCS = $(shell cat .services | grep -v '#')
|
||||
START_BASIC = $(shell cat .basic_services | grep -ve '#')
|
||||
START_BOOTSTRAP = $(shell cat .bootstrap_services | grep -v '#')
|
||||
STOP_SVCS = $(shell tac .services | grep -v '#')
|
||||
STOP_BASIC = $(shell tac .basic_services | grep -v '#')
|
||||
STOP_BOOTSTRAP = $(shell tac .bootstrap_services | grep -v '#')
|
||||
|
||||
# Enabled services dirs
|
||||
ENABLED_SVCS_DIRS = $(shell echo "${START_BOOTSTRAP} ${START_BASIC} ${START_SVCS}" | sed 's|[^ ]* *|./services/&|g')
|
||||
|
||||
# Services that require artifacts
|
||||
GET_SVCS = $(shell grep -Rl "get.*:" ./services/* | sort -u | grep artifacts.mk | xargs -I {} dirname {} | xargs basename -a)
|
||||
|
||||
# Services that require pulling images
|
||||
PULL_SVCS = $(shell find ${ENABLED_SVCS_DIRS} -type f -name 'docker-compose.yml' | sort -u | xargs -I {} dirname {} | xargs basename -a)
|
||||
PULL_SVCS = $(shell find ./services -type f -name 'docker-compose.yml' | sort -u | xargs -I {} dirname {} | xargs basename -a)
|
||||
|
||||
# List of services to run
|
||||
START_SVCS = $(shell cat .services | grep -v \\\#)
|
||||
START_BASIC = $(shell cat .basic_services | grep -v \\\#)
|
||||
STOP_SVCS = $(shell tac .services | grep -v \\\#)
|
||||
STOP_BASIC = $(shell tac .basic_services | grep -v \\\#)
|
||||
|
||||
# List of hosts available in devenv
|
||||
HOSTS_LINES = $(shell grep -Rl IPV4_PREFIX ./services/* | grep .hosts)
|
||||
|
||||
# Paths to protocol.privnet.yml
|
||||
MORPH_CHAIN_PROTOCOL = './services/morph_chain/protocol.privnet.yml'
|
||||
CHAIN_PROTOCOL = './services/chain/protocol.privnet.yml'
|
||||
|
||||
# List of grepped environment variables from *.env
|
||||
GREP_DOTENV = $(shell find . -name '*.env' -exec grep -rhv -e '^#' -e '^$$' {} + | sort -u )
|
||||
GREP_DOTENV = $(shell find . -name '*.env' -exec grep -rhv -e '^\#' -e '^$$' {} + )
|
||||
|
||||
# Pull all required Docker images
|
||||
.PHONY: pull
|
||||
|
@ -51,7 +47,7 @@ pull:
|
|||
$(foreach SVC, $(PULL_SVCS), $(shell cd services/$(SVC) && docker-compose pull))
|
||||
@:
|
||||
|
||||
# Get all services artifacts
|
||||
# Get all services artifacs
|
||||
.PHONY: get
|
||||
get: $(foreach SVC, $(GET_SVCS), get.$(SVC))
|
||||
@:
|
||||
|
@ -60,42 +56,15 @@ get: $(foreach SVC, $(GET_SVCS), get.$(SVC))
|
|||
.PHONY: up
|
||||
up: up/basic
|
||||
@$(foreach SVC, $(START_SVCS), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
|
||||
./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=`docker container exec morph_chain neo-go wallet dump-keys -w /wallets/s3-wallet.json | head -1 | awk '{print $1}'` || die "Couldn't set s3-gw wallet as proxy wallet"
|
||||
@echo "Full FrostFS Developer Environment is ready"
|
||||
@echo "Full NeoFS Developer Environment is ready"
|
||||
|
||||
# Build up FrostFS
|
||||
# Build up NeoFS
|
||||
.PHONY: up/basic
|
||||
up/basic: up/bootstrap
|
||||
up/basic: get vendor/hosts
|
||||
@$(foreach SVC, $(START_BASIC), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph force-new-epoch
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config SystemDNS=container --force
|
||||
@echo "Basic FrostFS Developer Environment is ready"
|
||||
|
||||
# Start bootstrap services
|
||||
.PHONY: up/bootstrap
|
||||
up/bootstrap: get vendor/hosts
|
||||
@$(foreach SVC, $(START_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
|
||||
@source ./bin/helper.sh
|
||||
@./vendor/frostfs-adm --config frostfs-adm.yml morph init --contracts vendor/contracts
|
||||
echo "Set rule chain to policy contract"
|
||||
@./vendor/frostfs-adm --config frostfs-adm.yml morph \
|
||||
ape add-rule-chain --target-type namespace --target-name "" \
|
||||
--rule 'allow Container.* *' --chain-id "allow_container_ops"
|
||||
@for f in ./services/storage/wallet*.json; do \
|
||||
echo "Transfer GAS to wallet $${f}" \
|
||||
&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \
|
||||
|| die "Failed to transfer GAS to alphabet wallets"; \
|
||||
done
|
||||
@echo "Create frostfsid subject for ./wallets/wallet.json"; \
|
||||
if [ -n "$$(./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid list-subjects --namespace '')" ]; then \
|
||||
echo "Subject already exists"; \
|
||||
else \
|
||||
subj_key=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/wallet.json | tail -1 | tr -d ' \r\n'` \
|
||||
&& echo "Subject key: $${subj_key}" \
|
||||
&& ./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid create-subject --namespace "" --subject-key $${subj_key} --subject-name walletsubject \
|
||||
|| die "Failed to create subject for the wallet"; \
|
||||
fi
|
||||
echo "FrostFS sidechain environment is deployed"
|
||||
@./bin/tick.sh
|
||||
@./bin/config.sh string SystemDNS container
|
||||
@echo "Basic NeoFS Developer Environment is ready"
|
||||
|
||||
# Build up certain service
|
||||
.PHONY: up/%
|
||||
|
@ -105,8 +74,8 @@ up/%: get vendor/hosts
|
|||
|
||||
# Stop environment
|
||||
.PHONY: down
|
||||
down: down/add down/basic down/bootstrap
|
||||
@echo "Full FrostFS Developer Environment is down"
|
||||
down: down/add down/basic
|
||||
@echo "Full NeoFS Developer Environment is down"
|
||||
|
||||
.PHONY: down/add
|
||||
down/add:
|
||||
|
@ -117,17 +86,11 @@ down/add:
|
|||
down/basic:
|
||||
$(foreach SVC, $(STOP_BASIC), $(shell docker-compose -f services/$(SVC)/docker-compose.yml down))
|
||||
|
||||
# Stop bootstrap services
|
||||
.PHONY: down/bootstrap
|
||||
down/bootstrap:
|
||||
$(foreach SVC, $(STOP_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml down))
|
||||
|
||||
# Stop certain service
|
||||
.PHONY: down/%
|
||||
down/%:
|
||||
@docker-compose -f services/$*/docker-compose.yml down
|
||||
|
||||
# Generate changes for /etc/hosts
|
||||
.PHONY: vendor/hosts
|
||||
.ONESHELL:
|
||||
vendor/hosts:
|
||||
|
@ -141,7 +104,7 @@ vendor/hosts:
|
|||
done < $${file};
|
||||
done > $@
|
||||
|
||||
# Generate and display changes for /etc/hosts
|
||||
# Display changes for /etc/hosts
|
||||
.PHONY: hosts
|
||||
hosts: vendor/hosts
|
||||
@cat vendor/hosts
|
||||
|
@ -150,14 +113,13 @@ hosts: vendor/hosts
|
|||
.PHONY: clean
|
||||
.ONESHELL:
|
||||
clean:
|
||||
@rm -rf vendor/* services/storage/s04tls.*
|
||||
@> .int_test.env
|
||||
@for svc in $(PULL_SVCS)
|
||||
@rm -rf vendor/* services/storage/s04tls.* services/nats/*.pem
|
||||
@for svc in $(START_SVCS)
|
||||
do
|
||||
vols=`docker-compose -f services/$${svc}/docker-compose.yml config --volumes`
|
||||
if [[ ! -z "$${vols}" ]]; then
|
||||
for vol in $${vols}; do
|
||||
docker volume rm -f "$${svc}_$${vol}" 2> /dev/null
|
||||
docker volume rm "$${svc}_$${vol}" 2> /dev/null
|
||||
done
|
||||
fi
|
||||
done
|
||||
|
@ -166,7 +128,8 @@ clean:
|
|||
.PHONY: env
|
||||
env:
|
||||
@$(foreach envvar,$(GREP_DOTENV),echo $(envvar);)
|
||||
@echo MORPH_BLOCK_TIME=$(shell grep 'TimePerBlock' $(MORPH_CHAIN_PROTOCOL) | awk '{print $$2}')s
|
||||
@echo MORPH_BLOCK_TIME=$(shell grep 'SecondsPerBlock' $(MORPH_CHAIN_PROTOCOL) | awk '{print $$2}')s
|
||||
@echo MAINNET_BLOCK_TIME=$(shell grep 'SecondsPerBlock' $(CHAIN_PROTOCOL) | awk '{print $$2}')s
|
||||
@echo MORPH_MAGIC=$(shell grep 'Magic' $(MORPH_CHAIN_PROTOCOL) | awk '{print $$2}')
|
||||
|
||||
# Restart storage nodes with clean volumes
|
||||
|
|
140
README.md
140
README.md
|
@ -1,21 +1,21 @@
|
|||
<p align="center">
|
||||
<img src="./.github/logo.svg" width="500px" alt="FrostFS logo">
|
||||
<img src="./.github/logo.svg" width="500px" alt="NeoFS">
|
||||
</p>
|
||||
<p align="center">
|
||||
<a href="https://frostfs.info">FrostFS</a> local Development and Testing environment
|
||||
<a href="https://fs.neo.org">NeoFS</a> local Development and Testing environment
|
||||
</p>
|
||||
|
||||
---
|
||||
## Overview
|
||||
|
||||
Tools to set up local FrostFS network and N3 privnets. Devenv, for short.
|
||||
Tools to set up local NeoFS network and N3 privnets. Devenv, for short.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
Make sure you have installed all of the following prerequisites on your machine:
|
||||
* docker
|
||||
* docker-compose
|
||||
* make (`3.82+`)
|
||||
* make
|
||||
* expect
|
||||
* openssl
|
||||
* jq
|
||||
|
@ -24,56 +24,51 @@ Make sure you have installed all of the following prerequisites on your machine:
|
|||
|
||||
## Quick Start
|
||||
|
||||
Clone repo:
|
||||
|
||||
```
|
||||
$ git clone https://git.frostfs.info/TrueCloudLab/frostfs-dev-env.git
|
||||
```
|
||||
|
||||
Run next commands from project's root:
|
||||
|
||||
```
|
||||
$ make get
|
||||
```
|
||||
|
||||
This command should be executed for the first run only to execute
|
||||
`make hosts`. It is part of the `make up` and, if the hosts have
|
||||
been added already, there is no need to run it separately.
|
||||
|
||||
```
|
||||
$ make hosts
|
||||
192.168.130.10 bastion.frostfs.devenv
|
||||
192.168.130.50 main-chain.frostfs.devenv
|
||||
192.168.130.61 ir01.frostfs.devenv
|
||||
...
|
||||
192.168.130.74 s04.frostfs.devenv
|
||||
```
|
||||
|
||||
This command shows addresses and hostnames of components. Add `make hosts`
|
||||
output to your local `/etc/hosts` file.
|
||||
|
||||
Run all services with command:
|
||||
```
|
||||
$ make up
|
||||
```
|
||||
When all services are up, you need to make GAS deposit for test wallet to be
|
||||
able to pay for NeoFS operations. Test wallet is located in `wallets/wallet.json`
|
||||
with the corresponding key in `wallets/wallet.key`. The password is empty.
|
||||
|
||||
Also, you should add self-signed node (`s04.frostfs.devenv`) certificate to trusted
|
||||
store (default location might be changed using `CA_CERTS_TRUSTED_STORE`
|
||||
variable). This step is required for client services (frostfs-http-gw,
|
||||
frostfs-s3-gw) to interact with the node:
|
||||
|
||||
```
|
||||
$ make prepare.ir
|
||||
password >
|
||||
fa6ba62bffb04030d303dcc95bda7413e03aa3c7e6ca9c2f999d65db9ec9b82c
|
||||
```
|
||||
Also you should add self-signed node (`s04.neofs.devenv`) certificate to truststore
|
||||
(default location might be changed using `CA_CERTS_TRUSTED_STORE` variable).
|
||||
This step is required for client services (neofs-http-gw, neofs-s3-gw) to interact with the node:
|
||||
```
|
||||
$ sudo make prepare.storage
|
||||
```
|
||||
|
||||
Change FrostFS global configuration values with `make update.*` commands. The
|
||||
Change NeoFS global configuration values with `make update.*` commands. The
|
||||
password of inner ring wallet is `one`. See examples in `make help`.
|
||||
|
||||
```
|
||||
$ make update.epoch_duration val=30
|
||||
Waiting for transactions to persist...
|
||||
Changing EpochDuration configration value to 30
|
||||
Enter account NNudMSGzEoktFzdYGYoNb3bzHzbmM1genF password >
|
||||
Sent invocation transaction dbb8c1145b6d10f150135630e13bb0dc282023163f5956c6945a60db0cb45cb0
|
||||
Updating NeoFS epoch to 2
|
||||
Enter account NNudMSGzEoktFzdYGYoNb3bzHzbmM1genF password >
|
||||
Sent invocation transaction 0e6eb5e190f36332e5e5f4e866c7e100826e285fd949e11c085e15224f343ba6
|
||||
```
|
||||
|
||||
You can see the addresses and hostnames of components with `make hosts` command.
|
||||
|
||||
```
|
||||
$ make hosts
|
||||
192.168.130.10 bastion.neofs.devenv
|
||||
192.168.130.50 main-chain.neofs.devenv
|
||||
192.168.130.61 ir01.neofs.devenv
|
||||
...
|
||||
192.168.130.74 s04.neofs.devenv
|
||||
```
|
||||
|
||||
It's recommended to add `make hosts` output to your local `/etc/hosts` file.
|
||||
|
||||
For instructions on how to set up DevEnv on macOS, please refer [the
|
||||
guide](docs/macOS.md) in `docs` directory.
|
||||
|
||||
|
@ -105,12 +100,6 @@ You can find more information on each service in `docs` directory.
|
|||
|
||||
Maybe you will find the answer for your question in [F.A.Q.](docs/faq.md)
|
||||
|
||||
## Using FrostFS Admin Tool in `dev-env`
|
||||
|
||||
Devenv supports FrostFS network management via [frostfs-adm](https://git.frostfs.info/TrueCloudLab/frostfs-node/src/branch/master/cmd/frostfs-adm).
|
||||
`services/ir` contains the Alphabet wallet in a proper format, specify it
|
||||
with `--alphabet-wallets` flag.
|
||||
|
||||
## Notable make targets
|
||||
|
||||
`make help` will print the brief description of available targets. Here we
|
||||
|
@ -137,65 +126,6 @@ Display addresses and host names for each running service, if available.
|
|||
|
||||
Clean up `vendor` directory.
|
||||
|
||||
### s3cred
|
||||
|
||||
Registers user wallet and issues s3 credentials.
|
||||
|
||||
Usage and default parameter values:
|
||||
```sh
|
||||
make s3cred [password=""] [contract_password=s3] [wallet=/user_wallet.json] [gate_public_key=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf]
|
||||
```
|
||||
|
||||
As soon as the storage node is in the network map (see above) you can generate S3
|
||||
credentials:
|
||||
|
||||
``` sh
|
||||
$ make s3cred
|
||||
{
|
||||
"access_key_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT0AKRSjJ5fmcqf3Ht2VCAkfmPQUVARghRB77xHCA1BoN2p",
|
||||
"secret_access_key": "d70c1dba83f0f90bb231f06f1ce0e0dfbcfb122f4b4345a3c18d3869c359b79f",
|
||||
"owner_private_key": "140947599afd9ca89af4b358c3176eb046e554d942a0dc99a8e06f3e43c8f4ad",
|
||||
"wallet_public_key": "0324e76288fcb900100d01802a14ef977cca45ad073561230446df14b344c858b6",
|
||||
"container_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT"
|
||||
}
|
||||
```
|
||||
Running without any parameters will result in defaults which are based on the private key from
|
||||
`/user-wallet.json` file and `/wallet.json` contract wallet.
|
||||
|
||||
Now let's configure an S3 client (AWS CLI will be used as example):
|
||||
|
||||
``` sh
|
||||
$ aws configure
|
||||
AWS Access Key ID []: EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT0AKRSjJ5fmcqf3Ht2VCAkfmPQUVARghRB77xHCA1BoN2p
|
||||
AWS Secret Access Key []: d70c1dba83f0f90bb231f06f1ce0e0dfbcfb122f4b4345a3c18d3869c359b79f
|
||||
Default region name []: us-east-1
|
||||
Default output format []: json
|
||||
```
|
||||
|
||||
If you need to create credentials for different users, put user wallets to `wallets` dir and specify them via `wallet` parameter.
|
||||
Pass wallet password in `password` parameter if it's not default. The same is for `contract_wallet` and `gate_public_key` params.
|
||||
|
||||
```sh
|
||||
$ make s3cred wallet=custom_wallet.json password=test
|
||||
{
|
||||
"access_key_id": "jHhL5B33o16R4jQsb8wm9A3RRdS6KrTB5N4bja9Jys904W7xXFNKqem2ACvTRWRYJsZMCUikYFSokN7pPJziWyDi",
|
||||
"secret_access_key": "21bb64fafa32c82417fd8b97ac56cc8a085998a3852632d52fe7042453daa440",
|
||||
"owner_private_key": "10f6f9d7a47bb0bf68363ad8a99fe69f1493f8b6e1665b3e4e83feb2d5c7ee39",
|
||||
"wallet_public_key": "03e38759973a6bb722baabc2dd84036a39f0b2f53d32fec45a4dacde8a50fe4b70",
|
||||
"container_id": "jHhL5B33o16R4jQsb8wm9A3RRdS6KrTB5N4bja9Jys9"
|
||||
}
|
||||
```
|
||||
|
||||
To get credentials from custom wallet, place it in `wallets` dir before start.
|
||||
|
||||
### cred
|
||||
|
||||
Usage and default parameter values:
|
||||
```sh
|
||||
make cred [password=""] [contract_password=s3] [wallet=/user_wallet.json]
|
||||
```
|
||||
The same as `s3cred`, but it doesn't issues s3 credentials.
|
||||
|
||||
## Contributing
|
||||
|
||||
Feel free to contribute to this project after reading the [contributing
|
||||
|
|
|
@ -3,4 +3,4 @@
|
|||
# Source env settings
|
||||
. .env
|
||||
|
||||
ln -sf "$(pwd)/services/storage/s04tls.crt" "${CA_CERTS_TRUSTED_STORE}/s04.${LOCAL_DOMAIN}.tls.crt"
|
||||
ln -sf $(pwd)/services/storage/s04tls.crt ${CA_CERTS_TRUSTED_STORE}/s04.${LOCAL_DOMAIN}.tls.crt
|
||||
|
|
46
bin/config.sh
Executable file
46
bin/config.sh
Executable file
|
@ -0,0 +1,46 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
# Source env settings
|
||||
. .env
|
||||
. services/ir/.ir.env
|
||||
|
||||
# NeoGo binary path.
|
||||
NEOGO="${NEOGO:-docker exec -it main_chain neo-go}"
|
||||
|
||||
# Wallet files to change config value
|
||||
WALLET="${WALLET:-services/chain/node-wallet.json}"
|
||||
WALLET_IMG="${WALLET_IMG:-wallets/node-wallet.json}"
|
||||
# Wallet password that would be entered automatically; '-' means no password
|
||||
PASSWD="one"
|
||||
NETMAP_ADDR=`bin/resolve.sh netmap.neofs`
|
||||
|
||||
# NeoFS configuration record: variable type [string|int|etc],
|
||||
# key is a string and value is a constant of given type
|
||||
TYPE=${1}
|
||||
KEY=${2}
|
||||
VALUE="${3}"
|
||||
|
||||
[ -z "$TYPE" ] && echo "Empty config value type" && exit 1
|
||||
[ -z "$KEY" ] && echo "Empty config key" && exit 1
|
||||
[ -z "$VALUE" ] && echo "Empty config value" && exit 1
|
||||
|
||||
# Internal variables
|
||||
if [[ -z "${NEOFS_NOTARY_DISABLED}" ]]; then
|
||||
ADDR=`cat ${WALLET} | jq -r .accounts[2].address`
|
||||
else
|
||||
ADDR=`cat ${WALLET} | jq -r .accounts[0].address`
|
||||
fi
|
||||
|
||||
# Change config value in side chain
|
||||
echo "Changing ${KEY} configration value to ${VALUE}"
|
||||
./bin/passwd.exp ${PASSWD} ${NEOGO} contract invokefunction \
|
||||
-w ${WALLET_IMG} \
|
||||
-a ${ADDR} \
|
||||
-r http://morph-chain.${LOCAL_DOMAIN}:30333 \
|
||||
${NETMAP_ADDR} \
|
||||
setConfig bytes:beefcafe \
|
||||
string:${KEY} \
|
||||
${TYPE}:${VALUE} -- ${ADDR} || exit 1
|
||||
|
||||
# Update epoch to apply new configuration value
|
||||
./bin/tick.sh
|
27
bin/deposit.sh
Executable file
27
bin/deposit.sh
Executable file
|
@ -0,0 +1,27 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
# Source env settings
|
||||
. .env
|
||||
. services/ir/.ir.env
|
||||
|
||||
# NeoGo binary path.
|
||||
NEOGO="${NEOGO:-docker exec -it main_chain neo-go}"
|
||||
# Wallet file to use for deposit GAS from
|
||||
WALLET="${WALLET:-wallets/wallet.json}"
|
||||
# Wallet password that would be entered automatically; '-' means no password
|
||||
PASSWD="-"
|
||||
# How much GAS to deposit. First cli argument or 50 by default
|
||||
DEPOSIT="${1:-50}"
|
||||
|
||||
# Internal variables
|
||||
ADDR=`cat ${WALLET} | jq -r .accounts[0].address`
|
||||
CONTRACT_ADDR=`${NEOGO} util convert ${NEOFS_IR_CONTRACTS_NEOFS} | grep 'LE ScriptHash to Address' | awk '{print $5}' | grep -oP [A-z0-9]+`
|
||||
|
||||
# Make deposit
|
||||
./bin/passwd.exp ${PASSWD} ${NEOGO} wallet nep17 transfer \
|
||||
-w ${WALLET} \
|
||||
-r http://main-chain.${LOCAL_DOMAIN}:30333 \
|
||||
--from ${ADDR} \
|
||||
--to ${CONTRACT_ADDR} \
|
||||
--token GAS \
|
||||
--amount ${DEPOSIT}
|
|
@ -1,6 +0,0 @@
|
|||
set -eo pipefail
|
||||
|
||||
die() {
|
||||
echo "$(caller 0):" "$*" >&2
|
||||
exit 1
|
||||
}
|
23
bin/passwd.exp
Executable file
23
bin/passwd.exp
Executable file
|
@ -0,0 +1,23 @@
|
|||
#!/usr/bin/expect
|
||||
|
||||
set passwd [lindex $argv 0]
|
||||
set args [lrange $argv 1 end]
|
||||
|
||||
spawn -noecho {*}$args
|
||||
expect -re {^.*assword.*$}
|
||||
|
||||
if { $passwd == "-"} {
|
||||
send -- "\r"
|
||||
} else {
|
||||
send -- "$passwd\r"
|
||||
}
|
||||
|
||||
expect {
|
||||
"Relay transaction" {
|
||||
send "y\r"
|
||||
exp_continue
|
||||
}
|
||||
EOF
|
||||
}
|
||||
lassign [wait] pid spawnid os_error_flag value
|
||||
exit $value
|
13
bin/resolve.sh
Executable file
13
bin/resolve.sh
Executable file
|
@ -0,0 +1,13 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
# Source env settings
|
||||
. .env
|
||||
|
||||
# NeoGo binary path.
|
||||
NEOGO="${NEOGO:-docker exec -it morph_chain neo-go}"
|
||||
# NNS contract script hash
|
||||
NNS_ADDR=`curl -s --data '{ "id": 1, "jsonrpc": "2.0", "method": "getcontractstate", "params": [1] }' http://morph-chain.${LOCAL_DOMAIN}:30333/ | jq -r '.result.hash'`
|
||||
|
||||
${NEOGO} contract testinvokefunction \
|
||||
-r http://morph-chain.${LOCAL_DOMAIN}:30333 \
|
||||
${NNS_ADDR} resolve string:${1} int:16 | jq -r '.stack[0].value | if type=="array" then .[0].value else . end' | base64 -d
|
44
bin/tick.sh
Executable file
44
bin/tick.sh
Executable file
|
@ -0,0 +1,44 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
# Source env settings
|
||||
. .env
|
||||
. services/ir/.ir.env
|
||||
|
||||
# NeoGo binary path.
|
||||
NEOGO="${NEOGO:-docker exec -it main_chain neo-go}"
|
||||
|
||||
# Wallet files to change config value
|
||||
WALLET="${WALLET:-services/chain/node-wallet.json}"
|
||||
WALLET_IMG="${WALLET_IMG:-wallets/node-wallet.json}"
|
||||
|
||||
# Wallet password that would be entered automatically; '-' means no password
|
||||
PASSWD="one"
|
||||
|
||||
# Internal variables
|
||||
if [[ -z "${NEOFS_NOTARY_DISABLED}" ]]; then
|
||||
ADDR=`cat ${WALLET} | jq -r .accounts[2].address`
|
||||
else
|
||||
ADDR=`cat ${WALLET} | jq -r .accounts[0].address`
|
||||
fi
|
||||
|
||||
# Grep Morph block time
|
||||
SIDECHAIN_PROTO="${SIDECHAIN_PROTO:-services/morph_chain/protocol.privnet.yml}"
|
||||
BLOCK_DURATION=`grep SecondsPerBlock < $SIDECHAIN_PROTO | awk '{print $2}'`
|
||||
NETMAP_ADDR=`bin/resolve.sh netmap.neofs`
|
||||
|
||||
# Fetch current epoch value
|
||||
EPOCH=`${NEOGO} contract testinvokefunction -r \
|
||||
http://morph-chain.${LOCAL_DOMAIN}:30333 \
|
||||
${NETMAP_ADDR} \
|
||||
epoch | grep 'value' | awk -F'"' '{ print $4 }'`
|
||||
|
||||
echo "Updating NeoFS epoch to $((EPOCH+1))"
|
||||
./bin/passwd.exp ${PASSWD} ${NEOGO} contract invokefunction \
|
||||
-w ${WALLET_IMG} \
|
||||
-a ${ADDR} \
|
||||
-r http://morph-chain.${LOCAL_DOMAIN}:30333 \
|
||||
${NETMAP_ADDR} \
|
||||
newEpoch int:$((EPOCH+1)) -- ${ADDR}:Global
|
||||
|
||||
# Wait one Morph block to ensure the transaction broadcasted
|
||||
sleep $BLOCK_DURATION
|
|
@ -1,4 +0,0 @@
|
|||
wallet: services/storage/wallet01.json
|
||||
password: ""
|
||||
rpc-endpoint: s01.frostfs.devenv:8080
|
||||
endpoint: s01.frostfs.devenv:8081
|
|
@ -1,4 +0,0 @@
|
|||
wallet: services/storage/wallet02.json
|
||||
password: ""
|
||||
rpc-endpoint: s02.frostfs.devenv:8080
|
||||
endpoint: s02.frostfs.devenv:8081
|
|
@ -1,4 +0,0 @@
|
|||
wallet: services/storage/wallet03.json
|
||||
password: ""
|
||||
rpc-endpoint: s03.frostfs.devenv:8080
|
||||
endpoint: s03.frostfs.devenv:8081
|
|
@ -1,4 +0,0 @@
|
|||
wallet: services/storage/wallet04.json
|
||||
password: ""
|
||||
rpc-endpoint: s04.frostfs.devenv:8080
|
||||
endpoint: s04.frostfs.devenv:8081
|
|
@ -7,7 +7,7 @@ host machine, so all programs running on host can connect to services exposed to
|
|||
|
||||
## .env settings
|
||||
|
||||
### LOCAL_DOMAIN=frostfs.devenv
|
||||
### LOCAL_DOMAIN=neofs.devenv
|
||||
|
||||
Domain to use for all containers exposed to `basenet_internet`.
|
||||
|
||||
|
@ -28,7 +28,7 @@ devenv services.
|
|||
Run shell in bastion:
|
||||
|
||||
```
|
||||
frostfs-dev-env$ docker exec -ti bastion /bin/bash
|
||||
neofs-dev-env$ docker exec -ti bastion /bin/bash
|
||||
root@bastion:/# ip a sh
|
||||
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
|
||||
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
|
||||
|
|
158
docs/chain.md
Normal file
158
docs/chain.md
Normal file
|
@ -0,0 +1,158 @@
|
|||
# N3 main chain privnet service
|
||||
|
||||
A single-node N3 privnet deployment, running on
|
||||
[neo-go](https://github.com/nspcc-dev/neo-go). Represents N3 MainNet.
|
||||
|
||||
Contracts deployed:
|
||||
- NeoFS [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/neofs)
|
||||
- Processing [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/processing)
|
||||
|
||||
RPC available at `http://main-chain.neofs.devenv:30333`.
|
||||
|
||||
## .env settings
|
||||
|
||||
### CHAIN_URL
|
||||
|
||||
URL to get main chain dump. Used on artifact get stage.
|
||||
|
||||
### CHAIN_PATH
|
||||
|
||||
Path to get main chain dump. If set, overrides `CHAIN_URL`.
|
||||
|
||||
### NEOGO_VERSION
|
||||
|
||||
Version of neo-go docker container for main chain deployment.
|
||||
|
||||
## Main chain wallets
|
||||
|
||||
There is a wallet with GAS that used for contract deployment:
|
||||
`wallets/wallet.json`. This wallet has one account with **empty password**.
|
||||
|
||||
```
|
||||
$ neo-go wallet nep17 balance \
|
||||
-w wallets/wallet.json \
|
||||
-r http://main-chain.neofs.devenv:30333
|
||||
|
||||
Account NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM
|
||||
GAS: GasToken (d2a4cff31913016155e38e474a2c06d08be276cf)
|
||||
Amount : 9978.0074623
|
||||
Updated: 34
|
||||
```
|
||||
|
||||
If you want to operate in main chain with your personal wallet (e.g. to make
|
||||
a deposit in NeoFS contract), you can transfer GAS from there.
|
||||
|
||||
1. Create new wallet.
|
||||
|
||||
```
|
||||
$ neo-go wallet init -a -w wallets/neofs1.json
|
||||
|
||||
Enter the name of the account > neofs1
|
||||
Enter passphrase >
|
||||
Confirm passphrase >
|
||||
|
||||
{
|
||||
"version": "3.0",
|
||||
"accounts": [
|
||||
{
|
||||
"address": "NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6",
|
||||
...
|
||||
wallet successfully created, file location is wallets/neofs1.json
|
||||
```
|
||||
|
||||
2. Transfer GAS from `wallets/wallet.json`. The password is empty.
|
||||
|
||||
```
|
||||
$ neo-go wallet nep17 transfer \
|
||||
-w wallets/wallet.json \
|
||||
-r http://main-chain.neofs.devenv:30333 \
|
||||
--from NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM \
|
||||
--to NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6 \
|
||||
--amount 50 \
|
||||
--token GAS
|
||||
```
|
||||
|
||||
3. Check it's there.
|
||||
|
||||
```
|
||||
$ neo-go wallet nep17 balance \
|
||||
-w wallets/neofs1.json \
|
||||
-r http://main-chain.neofs.devenv:30333
|
||||
|
||||
Account NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6
|
||||
GAS: GasToken (d2a4cff31913016155e38e474a2c06d08be276cf)
|
||||
Amount : 50
|
||||
Updated: 14689
|
||||
```
|
||||
|
||||
## Claim GAS from consensus node
|
||||
|
||||
If there is no enough GAS on `wallets/wallet.json` account, you can claim some
|
||||
GAS to consensus node's wallet and then transfer it.
|
||||
|
||||
Consensus node is running with `services/chain/node-wallet.json` wallet. It has
|
||||
multiple accounts with the password `one`.
|
||||
|
||||
|
||||
Claim GAS to consensus node's wallet. Use account that contains NEO tokens.
|
||||
```
|
||||
$ neo-go wallet claim \
|
||||
-w services/chain/node-wallet.json \
|
||||
-r http://main-chain.neofs.devenv:30333 \
|
||||
-a NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP \
|
||||
Password >
|
||||
70e09bbd55846dcc7cee23905b737c63e5a80d32e387bce108bc6db8e641fb90
|
||||
```
|
||||
|
||||
Then you can transfer GAS the same way as it was done in previous section.
|
||||
|
||||
```
|
||||
$ neo-go wallet nep17 transfer \
|
||||
-w services/chain/node-wallet.json \
|
||||
-r http://main-chain.neofs.devenv:30333 \
|
||||
--from NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP \
|
||||
--to NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6 \
|
||||
--amount 50 \
|
||||
--token GAS
|
||||
```
|
||||
|
||||
## NeoFS GAS deposit
|
||||
|
||||
NeoFS identifies users by their Neo wallet key pair. To start using NeoFS in
|
||||
devenv you need to transfer some GAS to NeoFS contract in main chain.
|
||||
|
||||
Invoke `bin/deposit.sh` script by running `make prepare.ir` command to transfer
|
||||
50 GAS from account in `wallets/wallet.json` file. Script enters passwords
|
||||
automatically with `expect` utility.
|
||||
|
||||
```
|
||||
$ make prepare.ir
|
||||
Password >
|
||||
Can't find matching token in the wallet. Querying RPC-node for balances.
|
||||
6713c776f4102300691d9c3c493bcd3402434f5e32e8147e0a5bc72209a1e410
|
||||
```
|
||||
|
||||
Script converts addresses and executes this command:
|
||||
```
|
||||
$ neo-go wallet nep17 transfer \
|
||||
-w wallets/wallet.json \
|
||||
-r http://main-chain.neofs.devenv:30333 \
|
||||
--from NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM \
|
||||
--to NerhjaqJsJt4LxMqUbkkVMpsF2d9TtcpFv \
|
||||
--token GAS \
|
||||
--amount 50
|
||||
```
|
||||
|
||||
You can specify any wallet address scripthash in the transfer's data argument,
|
||||
and NeoFS deposit will be transferred to that address.
|
||||
|
||||
```
|
||||
$ neo-go wallet nep17 transfer \
|
||||
-w wallets/wallet.json \
|
||||
-r http://main-chain.neofs.devenv:30333 \
|
||||
--from NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM \
|
||||
--to NerhjaqJsJt4LxMqUbkkVMpsF2d9TtcpFv \
|
||||
--token GAS \
|
||||
--amount 50 \
|
||||
hash160:bd711de066e9c2f7b502c7f3f0e0a6f1c8341edd
|
||||
```
|
14
docs/faq.md
14
docs/faq.md
|
@ -1,9 +1,9 @@
|
|||
# F.A.Q, tips and tricks
|
||||
|
||||
|
||||
### How to export private key from Neo wallet for FrostFS use?
|
||||
### How to export private key from Neo wallet for NeoFS use?
|
||||
|
||||
Private key for usage with FrostFS tools can be extracted from Neo wallet in three
|
||||
Private key for usage with NeoFS tools can be extracted from Neo wallet in three
|
||||
simple steps.
|
||||
|
||||
1. Get the key in WIF format
|
||||
|
@ -17,7 +17,7 @@ KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
|
|||
2. Convert form WIF to HEX
|
||||
|
||||
```
|
||||
$ frostfs-cli util keyer KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
|
||||
$ neofs-cli util keyer KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
|
||||
PrivateKey 1dd37fba80fec4e6a6f13fd708d8dcb3b29def768017052f6c930fa1c5d90bbb
|
||||
PublicKey 031a6c6fbbdf02ca351745fa86b9ba5a9452d785ac4f7fc2b7548ca2a46c4fcf4a
|
||||
WIF KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
|
||||
|
@ -35,16 +35,16 @@ $ xxd wallets/wallet.key
|
|||
00000010: b29d ef76 8017 052f 6c93 0fa1 c5d9 0bbb ...v.../l.......
|
||||
```
|
||||
|
||||
Later you will be able to provide wallet file in frostfs-node config.
|
||||
Later you will be able to provide wallet file in neofs-node config.
|
||||
|
||||
### How to create Neo wallet JSON file using a FrostFS key file?
|
||||
### How to create Neo wallet JSON file using a NeoFS key file?
|
||||
|
||||
You will need `neo-go` and `frostfs-cli`.
|
||||
You will need `neo-go` and `neofs-cli`.
|
||||
|
||||
1. Get the WIF format of the private key
|
||||
|
||||
```
|
||||
$ frostfs-cli util keyer -key ./services/ir/01.key | grep WIF | awk '{print $NF}' > temp_WIF
|
||||
$ neofs-cli util keyer -key ./services/ir/01.key | grep WIF | awk '{print $NF}' > temp_WIF
|
||||
```
|
||||
|
||||
2. Init a new empty Neo wallet
|
||||
|
|
|
@ -1,8 +1,8 @@
|
|||
# HTTP Protocol gateway
|
||||
|
||||
Protocol Gateway to access data in FrostFS using HTTP protocol.
|
||||
Protocol Gateway to access data in NeoFS using HTTP protocol.
|
||||
|
||||
Source code and more information can be found in [project's repository](https://git.frostfs.info/TrueCloudLab/frostfs-http-gw)
|
||||
Source code and more information can be found in [project's GitHub repository](https://github.com/nspcc-dev/neofs-http-gate)
|
||||
|
||||
## .env settings
|
||||
|
||||
|
@ -10,10 +10,10 @@ Source code and more information can be found in [project's repository](https://
|
|||
|
||||
Image version label to use for containers.
|
||||
|
||||
If you want to use locally built image, just set its label here. Instead of
|
||||
If you want to use locally built image, just set it's label here. Instead of
|
||||
pulling from DockerHub, the local image will be used.
|
||||
|
||||
### HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
|
||||
### HTTP_GW_IMAGE=nspccdev/neofs-http-gw
|
||||
|
||||
Image label prefix to use for containers.
|
||||
|
||||
|
@ -21,9 +21,9 @@ Image label prefix to use for containers.
|
|||
|
||||
- Create a new container
|
||||
```
|
||||
$ frostfs-cli --rpc-endpoint s01.frostfs.devenv:8080 \
|
||||
--wallet wallets/wallet.key \
|
||||
container create --basic-acl private --await \
|
||||
$ neofs-cli --rpc-endpoint s01.neofs.devenv:8080 \
|
||||
--key wallets/wallet.key \
|
||||
container create --basic-acl readonly --await \
|
||||
--policy "REP 1 SELECT 1 FROM *"
|
||||
container ID: 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
|
||||
awaiting...
|
||||
|
@ -32,17 +32,17 @@ container has been persisted on sidechain
|
|||
```
|
||||
- Put an object into the newly created container
|
||||
```
|
||||
$ frostfs-cli --rpc-endpoint s01.frostfs.devenv:8080 \
|
||||
--wallet wallets/wallet.key \
|
||||
$ neofs-cli --rpc-endpoint s01.neofs.devenv:8080 \
|
||||
--key wallets/wallet.key \
|
||||
object put --file /tmp/backup.jpeg \
|
||||
--cid 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
|
||||
[/tmp/backup.jpeg] Object successfully stored
|
||||
ID: 6EPpYqSFMGWrNLvYE9mNnut1CPKuPBKyi1ixHakzqsSB
|
||||
CID: 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
|
||||
```
|
||||
- Call `curl -sSI -XGET http://http.frostfs.devenv/get/<cid>/<oid>`
|
||||
- Call `curl -sSI -XGET http://http.neofs.devenv/get/<cid>/<oid>`
|
||||
```
|
||||
$ curl -sSI -XGET http://http.frostfs.devenv/get/4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP/6EPpYqSFMGWrNLvYE9mNnut1CPKuPBKyi1ixHakzqsSB
|
||||
$ curl -sSI -XGET http://http.neofs.devenv/get/4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP/6EPpYqSFMGWrNLvYE9mNnut1CPKuPBKyi1ixHakzqsSB
|
||||
HTTP/1.1 200 OK
|
||||
Date: Thu, 03 Dec 2020 10:34:26 GMT
|
||||
Content-Type: image/jpeg
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
# FrostFS Inner Ring
|
||||
# NeoFS Inner Ring
|
||||
|
||||
FrostFS Inner Ring (Alphabet) node. According to governance scheme, Inner Ring
|
||||
NeoFS Inner Ring (Alphabet) node. According to governance scheme, Inner Ring
|
||||
should contain Alphabet nodes that share key with one of side chain consensus
|
||||
nodes. In basic setup there is a single consensus node and single Inner Ring
|
||||
(Alphabet) node.
|
||||
|
@ -14,6 +14,6 @@ Image version label to use for Inner Ring docker containers.
|
|||
If you want to use locally built image, just set it's label here. Instead of
|
||||
pulling from DockerHub, the local image will be used.
|
||||
|
||||
### IR_IMAGE=truecloudlab/frostfs-ir
|
||||
### IR_IMAGE=nspccdev/neofs-ir
|
||||
|
||||
Image label prefix to use for Inner Ring docker containers.
|
||||
|
|
|
@ -1,37 +1,72 @@
|
|||
# N3 FrostFS side chain privnet service
|
||||
# N3 NeoFS side chain privnet service
|
||||
A single-node N3 privnet deployment, running on
|
||||
[neo-go](https://github.com/nspcc-dev/neo-go). Represents N3 FrostFS SideChain.
|
||||
[neo-go](https://github.com/nspcc-dev/neo-go). Represents N3 NeoFS SideChain.
|
||||
|
||||
Contracts deployed:
|
||||
- Alphabet (AZ) [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/alphabet)
|
||||
- Audit [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/audit)
|
||||
- Balance [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/balance)
|
||||
- Container [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/container)
|
||||
- Netmap [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/netmap)
|
||||
- NeoFSID [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/neofsid)
|
||||
- Proxy [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/proxy)
|
||||
- Reputation [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/reputation)
|
||||
- Alphabet (AZ) [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/alphabet)
|
||||
- Audit [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/audit)
|
||||
- Balance [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/balance)
|
||||
- Container [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/container)
|
||||
- Netmap [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/netmap)
|
||||
- NeoFSID [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/neofsid)
|
||||
- Proxy [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/proxy)
|
||||
- Reputation [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/reputation)
|
||||
|
||||
RPC available at `http://morph-chain.frostfs.devenv:30333`.
|
||||
RPC available at `http://morph-chain.neofs.devenv:30333`.
|
||||
|
||||
## .env settings
|
||||
|
||||
### MORPH_CHAIN_URL
|
||||
|
||||
URL to get side chain dump. Used on artifact get stage.
|
||||
|
||||
### MORPH_CHAIN_PATH
|
||||
|
||||
Path to get side chain dump. If set, overrides `CHAIN_URL`.
|
||||
|
||||
### NEOGO_VERSION
|
||||
|
||||
Version of neo-go docker container for side chain deployment.
|
||||
|
||||
## FrostFS global config
|
||||
## Side chain wallets
|
||||
|
||||
FrostFS uses global configuration to store epoch duration, maximum object size,
|
||||
There is a wallet with GAS that used for contract deployment:
|
||||
`wallets/wallet.json`. This wallet has one account with **empty password**.
|
||||
|
||||
```
|
||||
$ neo-go wallet nep17 balance \
|
||||
-w wallets/wallet.json \
|
||||
-r http://morph-chain.neofs.devenv:30333
|
||||
|
||||
Account NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM
|
||||
GAS: GasToken (d2a4cff31913016155e38e474a2c06d08be276cf)
|
||||
Amount : 189826.0515316
|
||||
Updated: 3909
|
||||
NEOFS: NeoFS Balance (69550190e740b93f92dbd5dea52246f550391057)
|
||||
Amount : 50
|
||||
Updated: 3909
|
||||
```
|
||||
|
||||
This way you can also monitor NeoFS internal balance of your account.
|
||||
|
||||
## NeoFS global config
|
||||
|
||||
NeoFS uses global configuration to store epoch duration, maximum object size,
|
||||
container fee and other network parameters. Global configuration is stored in
|
||||
netmap contract and managed by Inner Ring (Alphabet) nodes.
|
||||
|
||||
To change these parameters use `make update.*` commands. Command down below
|
||||
changes epoch duration from 300 blocks (about 300 seconds with 1bps) to 30.
|
||||
Script enters passwords automatically with `expect` utility.
|
||||
|
||||
```
|
||||
$ make update.epoch_duration val=30
|
||||
Waiting for transactions to persist...
|
||||
Changing EpochDuration configration value to 30
|
||||
Enter account NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP password >
|
||||
Sent invocation transaction bdc0fa88cd6719ef6df2b9c82de423ddec6141ca24255c2d0072688083b1de9d
|
||||
Updating NeoFS epoch to 20
|
||||
Enter account NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP password >
|
||||
Sent invocation transaction 12296e1ce24dd6c04edb9c56d0a1d0e26d3226adefb0333c74a28788f44a8d0f
|
||||
```
|
||||
|
||||
Read more about available configuration in Makefile help.
|
||||
|
@ -41,14 +76,10 @@ $ make help
|
|||
...
|
||||
Targets:
|
||||
...
|
||||
update.audit_fee Update audit fee per result in fixed 12 (make update.audit_fee val=100)
|
||||
update.basic_income_rate Update basic income rate in fixed 12 (make update.basic_income_rate val=1000)
|
||||
update.container_alias_fee Update container alias fee per alphabet node in fixed 12 (make update.container_alias_fee val=100)
|
||||
update.container_fee Update container fee per alphabet node in fixed 12 (make update.container_fee val=500)
|
||||
update.eigen_trust_alpha Update alpha parameter of EigenTrust algorithm in 0 <= f <= 1.0 (make update.eigen_trust_alpha val=0.2)
|
||||
update.eigen_trust_iterations Update amount of EigenTrust iterations (make update.eigen_trust_iterations val=2)
|
||||
update.epoch_duration Update epoch duration in side chain blocks (make update.epoch_duration val=30)
|
||||
update.homomorphic_hashing_disable Update homomorphic hashing disabled flag (make update.homomorphic_hashing_disable val=true)
|
||||
update.max_object_size Update max object size in bytes (make update.max_object_size val=1000)
|
||||
update.system_dns Update system dns to resolve container names (make update.system_dns val=container)
|
||||
update.audit_fee Update audit fee per result in fixed 12 (make update.audit_fee val=100)
|
||||
update.basic_income_rate Update basic income rate in fixed 12 (make update.basic_income_rate val=1000)
|
||||
update.container_fee Update container fee per alphabet node in fixed 12 (make update.container_fee val=500)
|
||||
update.eigen_trust_iterations Update amount of EigenTrust iterations (make update.eigen_trust_iterations val=2)
|
||||
update.epoch_duration Update epoch duration in side chain blocks (make update.epoch_duration val=30)
|
||||
update.max_object_size Update max object size in bytes (make update.max_object_size val=1000)
|
||||
```
|
||||
|
|
|
@ -7,12 +7,66 @@ create containers, approve balance changes, update network map, tick epochs,
|
|||
etc. With notary service, it takes up to seven times fewer transactions
|
||||
to do these operations. Notary service calculates the exact amount of GAS
|
||||
to execute transaction, therefore operations are cheaper (withdraw fee **with**
|
||||
notary is less than 0.5 GAS; withdraw fee **without** notary is up to 7.0 GAS).
|
||||
notary is less than 0.5 GAS; withdraw fee **without** notary is up to 7.0 GAS).
|
||||
|
||||
Currently, frostfs-dev-env contains single chain (see morph service) and it
|
||||
enables notary service from the genesis block.
|
||||
By default, main chain service is running without notary service, and side chain
|
||||
running with notary service. However, you can change that in configuration.
|
||||
|
||||
To enable notary service, use neo-go configuration below.
|
||||
# Disable notary service in side chain
|
||||
|
||||
To disable notary service in side chain do these steps.
|
||||
|
||||
1. Update `.env` and choose notary disabled chain dump for side chain.
|
||||
|
||||
```
|
||||
MORPH_CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.9.0/devenv_sidechain_notary_disabled.gz"
|
||||
```
|
||||
|
||||
Make sure to update chain dump files with `make get` target.
|
||||
|
||||
2. Update `service/morph_chain/protocol.privnet.yml` and disable notary settings
|
||||
and state root in header.
|
||||
|
||||
```yaml
|
||||
ProtocolConfiguration:
|
||||
StateRootInHeader: false
|
||||
P2PSigExtensions: false
|
||||
ApplicationConfiguration:
|
||||
P2PNotary:
|
||||
Enabled: false
|
||||
```
|
||||
|
||||
Chain dump without notary service does not have predefined network map.
|
||||
Therefore, you need to wait about 5 minutes until new epoch tick with updated
|
||||
network map.
|
||||
|
||||
|
||||
3. Enable helper commands
|
||||
|
||||
To enable helper commands such as `make tick.epoch` or `make update.epoch_duration`
|
||||
make sure to export non-empty `NEOFS_NOTARY_DISABLED` environment variable.
|
||||
```
|
||||
$ export NEOFS_NOTARY_DISABLED=1
|
||||
```
|
||||
|
||||
Use `unset` command to return it back.
|
||||
```
|
||||
$ unset NEOFS_NOTARY_DISABLED
|
||||
```
|
||||
|
||||
# Enable notary service in main chain
|
||||
|
||||
To enable notary service in main chain do these steps.
|
||||
|
||||
1. Update `.env` and choose notary enabled chain dump for main chain.
|
||||
|
||||
```
|
||||
CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.9.0/devenv_mainchain.gz"
|
||||
```
|
||||
|
||||
Make sure to update chain dump files with `make get` target.
|
||||
|
||||
2. Update `service/chain/protocol.privnet.yml` and enable notary settings.
|
||||
|
||||
```yaml
|
||||
ProtocolConfiguration:
|
||||
|
@ -21,3 +75,7 @@ ApplicationConfiguration:
|
|||
P2PNotary:
|
||||
Enabled: true
|
||||
```
|
||||
|
||||
Main chain generates a block once per 15 seconds, so Inner Ring takes about
|
||||
15-30 seconds to make a notary deposit in main chain after startup. Then
|
||||
neofs-dev-env is ready to work.
|
||||
|
|
|
@ -1,70 +0,0 @@
|
|||
# REST Gateway
|
||||
|
||||
REST Gateway to access data in FrostFS using REST.
|
||||
|
||||
Source code and more information can be found in [project's repository](https://git.frostfs.info/TrueCloudLab/frostfs-rest-gw)
|
||||
|
||||
## .env settings
|
||||
|
||||
### REST_GW_VERSION=0.4.0
|
||||
|
||||
Image version label to use for containers.
|
||||
|
||||
If you want to use locally built image, just set its label here.
|
||||
Instead of pulling from DockerHub, the local image will be used.
|
||||
|
||||
### REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
|
||||
|
||||
Image label prefix to use for containers.
|
||||
|
||||
## Usage example
|
||||
|
||||
- List container for specific owner:
|
||||
|
||||
```shell
|
||||
$ curl http://rest.frostfs.devenv:8090/v1/containers?ownerId=NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM | jq
|
||||
{
|
||||
"containers": [
|
||||
{
|
||||
"attributes": [
|
||||
{
|
||||
"key": "Timestamp",
|
||||
"value": "1663755230"
|
||||
}
|
||||
],
|
||||
"basicAcl": "fbfbfff",
|
||||
"cannedAcl": "eacl-public-read-write",
|
||||
"containerId": "BKcAvz8awKKy9NGsGKi1Hoxxu9AjTGvjKMNMQamvdLmX",
|
||||
"containerName": "",
|
||||
"ownerId": "NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM",
|
||||
"placementPolicy": "REP 1 IN X\nCBF 1\nSELECT 1 FROM * AS X",
|
||||
"version": "v2.13"
|
||||
}
|
||||
],
|
||||
"size": 1
|
||||
}
|
||||
```
|
||||
|
||||
|
||||
- Get container info:
|
||||
|
||||
```shell
|
||||
$ curl http://rest.frostfs.devenv:8090/v1/containers/BKcAvz8awKKy9NGsGKi1Hoxxu9AjTGvjKMNMQamvdLmX | jq
|
||||
{
|
||||
"attributes": [
|
||||
{
|
||||
"key": "Timestamp",
|
||||
"value": "1663755230"
|
||||
}
|
||||
],
|
||||
"basicAcl": "fbfbfff",
|
||||
"cannedAcl": "eacl-public-read-write",
|
||||
"containerId": "BKcAvz8awKKy9NGsGKi1Hoxxu9AjTGvjKMNMQamvdLmX",
|
||||
"containerName": "",
|
||||
"ownerId": "NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM",
|
||||
"placementPolicy": "REP 1 IN X\nCBF 1\nSELECT 1 FROM * AS X",
|
||||
"version": "v2.13"
|
||||
}
|
||||
```
|
||||
|
||||
See all available routes http://rest.frostfs.devenv:8090/v1/docs
|
|
@ -1,8 +1,8 @@
|
|||
# S3 Protocol gateway
|
||||
|
||||
Protocol Gateway to access data in FrostFS using AWS S3 protocol
|
||||
Protocol Gateway to access data in NeoFS using AWS S3 protocol
|
||||
|
||||
Source code and more information can be found in [project's repository](https://git.frostfs.info/TrueCloudLab/frostfs-s3-gw)
|
||||
Source code and more information can be found in [project's GitHub repository](https://github.com/nspcc-dev/neofs-s3-gw)
|
||||
|
||||
## .env settings
|
||||
|
||||
|
@ -10,9 +10,9 @@ Source code and more information can be found in [project's repository](https://
|
|||
|
||||
Image version label to use for containers.
|
||||
|
||||
If you want to use locally built image, just set its label here. Instead of
|
||||
If you want to use locally built image, just set it's label here. Instead of
|
||||
pulling from DockerHub, the local image will be used.
|
||||
|
||||
### S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
|
||||
### S3_GW_IMAGE=nspccdev/neofs-s3-gw
|
||||
|
||||
Image label prefix to use for containers.
|
||||
|
|
|
@ -6,9 +6,9 @@
|
|||
|
||||
Image version label to use for Storage docker containers.
|
||||
|
||||
If you want to use locally built image, just set its label here. Instead of
|
||||
If you want to use locally built image, just set it's label here. Instead of
|
||||
pulling from DockerHub, the local image will be used.
|
||||
|
||||
### NODE_IMAGE=truecloudlab/frostfs-ir
|
||||
### NODE_IMAGE=nspccdev/neofs-ir
|
||||
|
||||
Image label prefix to use for Storage docker containers.
|
||||
|
|
|
@ -1,17 +0,0 @@
|
|||
rpc-endpoint: http://morph-chain.frostfs.devenv:30333
|
||||
alphabet-wallets: ./services/ir
|
||||
network:
|
||||
max_object_size: 67108864
|
||||
epoch_duration: 240
|
||||
basic_income_rate: 100000000
|
||||
homomorphic_hash_disabled: false
|
||||
maintenance_mode_allowed: true
|
||||
fee:
|
||||
audit: 10000
|
||||
candidate: 10000000000
|
||||
container: 0
|
||||
container_alias: 0
|
||||
withdraw: 100000000
|
||||
credentials:
|
||||
az: "one"
|
||||
contract: "one"
|
4
help.mk
4
help.mk
|
@ -1,7 +1,5 @@
|
|||
.PHONY: help
|
||||
|
||||
HELP_MAKEFILE_LIST=$(filter-out %/artifacts.mk, $(MAKEFILE_LIST))
|
||||
|
||||
# Show this help prompt
|
||||
help:
|
||||
@echo ' Usage:'
|
||||
|
@ -10,4 +8,4 @@ help:
|
|||
@echo ''
|
||||
@echo ' Targets:'
|
||||
@echo ''
|
||||
@awk '/^#/{ comment = substr($$0,3) } comment && /^[a-zA-Z][a-zA-Z0-9._/-]+ ?:/{ print " ", $$1, comment }' $(HELP_MAKEFILE_LIST) | column -t -s ':' | grep -v 'IGNORE' | sort -u
|
||||
@awk '/^#/{ comment = substr($$0,3) } comment && /^[a-zA-Z][a-zA-Z0-9._-]+ ?:/{ print " ", $$1, comment }' $(MAKEFILE_LIST) | column -t -s ':' | grep -v 'IGNORE' | sort -u
|
||||
|
|
|
@ -1,40 +1,40 @@
|
|||
# Update epoch duration in side chain blocks (make update.epoch_duration val=30)
|
||||
update.epoch_duration:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config EpochDuration=$(val)
|
||||
@./bin/config.sh int EpochDuration $(val)
|
||||
|
||||
# Update max object size in bytes (make update.max_object_size val=1000)
|
||||
update.max_object_size:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config MaxObjectSize=$(val)
|
||||
@./bin/config.sh int MaxObjectSize $(val)
|
||||
|
||||
# Update audit fee per result in fixed 12 (make update.audit_fee val=100)
|
||||
update.audit_fee:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config AuditFee=$(val)
|
||||
@./bin/config.sh int AuditFee $(val)
|
||||
|
||||
# Update container fee per alphabet node in fixed 12 (make update.container_fee val=500)
|
||||
update.container_fee:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config ContainerFee=$(val)
|
||||
@./bin/config.sh int ContainerFee $(val)
|
||||
|
||||
# Update container alias fee per alphabet node in fixed 12 (make update.container_alias_fee val=100)
|
||||
update.container_alias_fee:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config ContainerAliasFee=$(val)
|
||||
@./bin/config.sh int ContainerAliasFee $(val)
|
||||
|
||||
# Update amount of EigenTrust iterations (make update.eigen_trust_iterations val=2)
|
||||
update.eigen_trust_iterations:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config EigenTrustIterations=$(val)
|
||||
@./bin/config.sh int EigenTrustIterations $(val)
|
||||
|
||||
|
||||
# Update system dns to resolve container names (make update.system_dns val=container)
|
||||
update.system_dns:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config SystemDNS=$(val) --force
|
||||
@./bin/config.sh string SystemDNS $(val)
|
||||
|
||||
# Update alpha parameter of EigenTrust algorithm in 0 <= f <= 1.0 (make update.eigen_trust_alpha val=0.2)
|
||||
update.eigen_trust_alpha:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config EigenTrustAlpha=$(val)
|
||||
@./bin/config.sh string EigenTrustAlpha $(val)
|
||||
|
||||
# Update basic income rate in fixed 12 (make update.basic_income_rate val=1000)
|
||||
update.basic_income_rate:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config BasicIncomeRate=$(val)
|
||||
|
||||
# Update homomorphic hashing disabled flag (make update.homomorphic_hashing_disable val=true)
|
||||
update.homomorphic_hashing_disable:
|
||||
@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config HomomorphicHashingDisabled=$(val)
|
||||
@./bin/config.sh int BasicIncomeRate $(val)
|
||||
|
||||
# Tick new epoch in side chain
|
||||
tick.epoch:
|
||||
@./bin/tick.sh
|
|
@ -1 +0,0 @@
|
|||
../../.int_test.env
|
|
@ -1,16 +1,16 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
|
||||
basenet:
|
||||
container_name: bastion
|
||||
image: ${BASTION_IMAGE}:${BASTION_VERSION}
|
||||
image: debian:10
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
hostname: bastion
|
||||
command: ["/bin/sleep", "infinity"]
|
||||
restart: always
|
||||
stop_signal: SIGKILL
|
||||
env_file: [ ".int_test.env" ]
|
||||
environment:
|
||||
- TZ=Etc/UTC
|
||||
networks:
|
||||
|
|
1
services/chain/.hosts
Normal file
1
services/chain/.hosts
Normal file
|
@ -0,0 +1 @@
|
|||
IPV4_PREFIX.50 main-chain.LOCAL_DOMAIN
|
17
services/chain/artifacts.mk
Normal file
17
services/chain/artifacts.mk
Normal file
|
@ -0,0 +1,17 @@
|
|||
# Download privnet chain dump with pre-deployed NeoFS contracts
|
||||
get.chain: CHAIN_DUMP_NAME=devenv.dump.
|
||||
get.chain: CHAIN_PATH?=
|
||||
get.chain:
|
||||
@mkdir -p ./vendor
|
||||
|
||||
ifeq (${CHAIN_PATH},)
|
||||
@echo "⇒ Download blockchain dump from ${CHAIN_URL}"
|
||||
@curl \
|
||||
-sSL "${CHAIN_URL}" \
|
||||
-o ./vendor/chain.gz
|
||||
else
|
||||
@echo "⇒ Copy local archive ${CHAIN_PATH}"
|
||||
@cp ${CHAIN_PATH} ./vendor/chain.gz
|
||||
endif
|
||||
|
||||
|
29
services/chain/docker-compose.yml
Normal file
29
services/chain/docker-compose.yml
Normal file
|
@ -0,0 +1,29 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
neofs_main_chain:
|
||||
image: nspccdev/neo-go:${NEOGO_VERSION}
|
||||
container_name: main_chain
|
||||
command: ["node", "--config-path", "/config", "--privnet", "--debug"]
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
hostname: main-chain
|
||||
networks:
|
||||
chain_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.50
|
||||
stop_signal: SIGKILL
|
||||
environment:
|
||||
- ACC=/chain.gz
|
||||
volumes:
|
||||
- ./../../vendor/chain.gz:/chain.gz
|
||||
- ./protocol.privnet.yml:/config/protocol.privnet.yml
|
||||
- ./node-wallet.json:/wallets/node-wallet.json
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
- ./../../wallets/wallet.json:/wallets/wallet.json
|
||||
|
||||
networks:
|
||||
chain_int:
|
||||
internet:
|
||||
external: true
|
||||
name: basenet_internet
|
72
services/chain/node-wallet.json
Normal file
72
services/chain/node-wallet.json
Normal file
|
@ -0,0 +1,72 @@
|
|||
{
|
||||
"version": "3.0",
|
||||
"accounts": [
|
||||
{
|
||||
"address": "Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "DCECs2Ir9AF73+MXxYrtX0x1PyBrfbiWBG+n13S7xL9/jcJBVuezJw==",
|
||||
"parameters": [
|
||||
{
|
||||
"name": "parameter0",
|
||||
"type": "Signature"
|
||||
}
|
||||
],
|
||||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"isdefault": false
|
||||
},
|
||||
{
|
||||
"address": "NVTiAjNgagDkTr5HTzDmQP9kPwPHN5BgVq",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "EwwhAhA6f33QFlWFl/eWDSfFFqQ5T9loueZRVetLAT5AQEBuDCECp7xV/oaE4BGXaNEEujB5W9zIZhnoZK3SYVZyPtGFzWIMIQKzYiv0AXvf4xfFiu1fTHU/IGt9uJYEb6fXdLvEv3+NwgwhA9kMB99j5pDOd5EuEKtRrMlEtmhgI3tgjE+PgwnnHuaZFEGe0Nw6",
|
||||
"parameters": [
|
||||
{
|
||||
"name": "parameter0",
|
||||
"type": "Signature"
|
||||
},
|
||||
{
|
||||
"name": "parameter1",
|
||||
"type": "Signature"
|
||||
},
|
||||
{
|
||||
"name": "parameter2",
|
||||
"type": "Signature"
|
||||
}
|
||||
],
|
||||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"isdefault": false
|
||||
},
|
||||
{
|
||||
"address": "NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "EQwhArNiK/QBe9/jF8WK7V9MdT8ga324lgRvp9d0u8S/f43CEUGe0Nw6",
|
||||
"parameters": [
|
||||
{
|
||||
"name": "parameter0",
|
||||
"type": "Signature"
|
||||
}
|
||||
],
|
||||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"isdefault": false
|
||||
}
|
||||
],
|
||||
"scrypt": {
|
||||
"n": 16384,
|
||||
"r": 8,
|
||||
"p": 8
|
||||
},
|
||||
"extra": {
|
||||
"Tokens": null
|
||||
}
|
||||
}
|
58
services/chain/protocol.privnet.yml
Normal file
58
services/chain/protocol.privnet.yml
Normal file
|
@ -0,0 +1,58 @@
|
|||
ProtocolConfiguration:
|
||||
Magic: 56753
|
||||
MaxTraceableBlocks: 200000
|
||||
SecondsPerBlock: 1
|
||||
MemPoolSize: 50000
|
||||
StandbyCommittee:
|
||||
- 02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
|
||||
ValidatorsCount: 1
|
||||
SeedList:
|
||||
- 172.200.0.1:20333
|
||||
VerifyBlocks: true
|
||||
VerifyTransactions: true
|
||||
P2PSigExtensions: false
|
||||
|
||||
ApplicationConfiguration:
|
||||
DBConfiguration:
|
||||
Type: "boltdb"
|
||||
BoltDBOptions:
|
||||
FilePath: "./db/privnet.bolt"
|
||||
NodePort: 20333
|
||||
Relay: true
|
||||
DialTimeout: 3
|
||||
ProtoTickInterval: 2
|
||||
PingInterval: 30
|
||||
PingTimeout: 90
|
||||
MaxPeers: 10
|
||||
AttemptConnPeers: 5
|
||||
MinPeers: 0
|
||||
RPC:
|
||||
Enabled: true
|
||||
EnableCORSWorkaround: false
|
||||
MaxGasInvoke: 15
|
||||
Port: 30333
|
||||
Prometheus:
|
||||
Enabled: true
|
||||
Port: 20001
|
||||
Pprof:
|
||||
Enabled: true
|
||||
Port: 20011
|
||||
UnlockWallet:
|
||||
Path: "./wallets/node-wallet.json"
|
||||
Password: "one"
|
||||
Oracle:
|
||||
Enabled: true
|
||||
NeoFS:
|
||||
Nodes:
|
||||
- s01.neofs.devenv:8080
|
||||
- s02.neofs.devenv:8080
|
||||
- s03.neofs.devenv:8080
|
||||
- s04.neofs.devenv:8080
|
||||
UnlockWallet:
|
||||
Path: "./wallets/node-wallet.json"
|
||||
Password: "one"
|
||||
P2PNotary:
|
||||
Enabled: false
|
||||
UnlockWallet:
|
||||
Path: "./wallets/node-wallet.json"
|
||||
Password: "one"
|
1
services/coredns/.hosts
Normal file
1
services/coredns/.hosts
Normal file
|
@ -0,0 +1 @@
|
|||
IPV4_PREFIX.53 coredns.LOCAL_DOMAIN
|
8
services/coredns/Corefile
Normal file
8
services/coredns/Corefile
Normal file
|
@ -0,0 +1,8 @@
|
|||
. {
|
||||
nns http://192.168.130.90:30333
|
||||
transfer {
|
||||
to *
|
||||
}
|
||||
log
|
||||
debug
|
||||
}
|
23
services/coredns/docker-compose.yml
Normal file
23
services/coredns/docker-compose.yml
Normal file
|
@ -0,0 +1,23 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
neofs_coredns:
|
||||
image: ${COREDNS_IMAGE}:${COREDNS_VERSION}
|
||||
container_name: coredns
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
hostname: coredns
|
||||
networks:
|
||||
chain_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.53
|
||||
stop_signal: SIGKILL
|
||||
volumes:
|
||||
- ./Corefile:/Corefile
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
|
||||
networks:
|
||||
chain_int:
|
||||
internet:
|
||||
external: true
|
||||
name: basenet_internet
|
|
@ -1,2 +0,0 @@
|
|||
IPV4_PREFIX.122 grafana.LOCAL_DOMAIN
|
||||
IPV4_PREFIX.123 loki.LOCAL_DOMAIN
|
|
@ -1 +0,0 @@
|
|||
../../.int_test.env
|
|
@ -1,31 +0,0 @@
|
|||
services:
|
||||
grafana:
|
||||
image: ${GRAFANA_IMAGE}:${GRAFANA_VERSION}
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
hostname: grafana
|
||||
container_name: grafana
|
||||
restart: on-failure
|
||||
networks:
|
||||
grafana_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.122
|
||||
volumes:
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
- ./grafana.ini:/etc/grafana/grafana.ini
|
||||
- ./provisioning:/etc/grafana/provisioning
|
||||
stop_signal: SIGKILL
|
||||
env_file: [ ".env", ".int_test.env" ]
|
||||
|
||||
loki:
|
||||
image: ${LOKI_IMAGE}:${LOKI_VERSION}
|
||||
command: -config.file=/etc/loki/local-config.yaml
|
||||
networks:
|
||||
grafana_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.123
|
||||
|
||||
networks:
|
||||
grafana_int:
|
||||
internet:
|
||||
external: true
|
||||
name: basenet_internet
|
|
@ -1,7 +0,0 @@
|
|||
[auth.anonymous]
|
||||
enabled = true
|
||||
org_name = Main Org.
|
||||
org_role = Editor
|
||||
|
||||
[dashboards]
|
||||
default_home_dashboard_path= /etc/grafana/provisioning/dashboards/overview.json
|
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
@ -1,13 +0,0 @@
|
|||
apiVersion: 1
|
||||
|
||||
datasources:
|
||||
- name: Prometheus
|
||||
type: prometheus
|
||||
access: proxy
|
||||
orgId: 1
|
||||
url: http://prometheus:9090
|
||||
- name: Loki
|
||||
type: loki
|
||||
access: proxy
|
||||
orgId: 1
|
||||
url: http://loki:3100
|
|
@ -0,0 +1,15 @@
|
|||
HTTP_GW_LISTEN_ADDRESS=0.0.0.0:80
|
||||
|
||||
HTTP_GW_LOGGER_LEVEL=info
|
||||
|
||||
HTTP_GW_REBALANCE_TIMER=5m
|
||||
HTTP_GW_CONNECT_TIMEOUT=60s
|
||||
HTTP_GW_REQUEST_TIMEOUT=300s
|
||||
|
||||
HTTP_GW_KEEPALIVE_TIMEOUT=300s
|
||||
HTTP_GW_KEEPALIVE_TIME=120s
|
||||
HTTP_GW_KEEPALIVE_PERMIT_WITHOUT_STREAM=True
|
||||
|
||||
HTTP_GW_METRICS=False
|
||||
HTTP_GW_PPROF=False
|
||||
HTTP_GW_VERBOSE=false
|
|
@ -1 +0,0 @@
|
|||
../../.int_test.env
|
|
@ -1,24 +0,0 @@
|
|||
logger:
|
||||
level: debug
|
||||
|
||||
prometheus:
|
||||
enabled: true
|
||||
address: :9090
|
||||
|
||||
rebalance_timer: 5m # Interval to check nodes health
|
||||
|
||||
connect_timeout: 60s # Timeout to dial node
|
||||
|
||||
request_timeout: 300s # Timeout to check node health during rebalance
|
||||
|
||||
# The order in which resolvers are used to find an container id by name
|
||||
resolve_order:
|
||||
- nns
|
||||
|
||||
server:
|
||||
- address: 0.0.0.0:80
|
||||
|
||||
# Wallet settings
|
||||
wallet:
|
||||
path: /wallet.json # Path to wallet
|
||||
passphrase: one # Passphrase to decrypt wallet
|
|
@ -1,5 +1,6 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
http_gate:
|
||||
image: ${HTTP_GW_IMAGE}:${HTTP_GW_VERSION}
|
||||
|
@ -14,13 +15,11 @@ services:
|
|||
volumes:
|
||||
- ./wallet.json:/wallet.json
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
- ./cfg:/etc/frostfs/http
|
||||
stop_signal: SIGKILL
|
||||
env_file: [ ".env", ".http.env", ".int_test.env" ]
|
||||
command: [ "frostfs-http-gw", "--config", "/etc/frostfs/http/config.yml" ]
|
||||
env_file: [ ".env", ".http.env" ]
|
||||
environment:
|
||||
- HTTP_GW_RPC_ENDPOINT=http://morph-chain.${LOCAL_DOMAIN}:30333
|
||||
- HTTP_GW_TREE_SERVICE=s01.${LOCAL_DOMAIN}:8080
|
||||
- HTTP_GW_WALLET=/wallet.json
|
||||
- HTTP_GW_WALLET_PASSPHRASE=one
|
||||
- HTTP_GW_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
|
||||
- HTTP_GW_PEERS_0_WEIGHT=0.2
|
||||
- HTTP_GW_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
|
||||
|
|
|
@ -1 +0,0 @@
|
|||
../../.int_test.env
|
|
@ -1 +1,46 @@
|
|||
FROSTFS_IR_CONTROL_GRPC_ENDPOINT=127.0.0.1:16512
|
||||
NEOFS_IR_LOGGER_LEVEL=debug
|
||||
|
||||
# Profiler section
|
||||
## Server address. Empty value disables profiler
|
||||
## Default: <empty> (disabled)
|
||||
NEOFS_IR_PROFILER_ADDRESS=:6060
|
||||
## Timeout to shut down the HTTP server
|
||||
## Default: 30s
|
||||
#NEOFS_IR_PROFILER_SHUTDOWN_TIMEOUT=1m
|
||||
|
||||
# Application metrics section
|
||||
## Server address. Empty value disables metrics gathering
|
||||
## Default: <empty> (disabled)
|
||||
NEOFS_IR_METRICS_ADDRESS=:9090
|
||||
## Timeout to shut down the HTTP server
|
||||
## Default: 30s
|
||||
#NEOFS_IR_METRICS_SHUTDOWN_TIMEOUT=1m
|
||||
|
||||
# Toggling the sidechain-only mode
|
||||
NEOFS_IR_WITHOUT_MAINNET=false
|
||||
|
||||
NEOFS_IR_MAINNET_ENDPOINT_CLIENT=http://main-chain:30333
|
||||
NEOFS_IR_MAINNET_ENDPOINT_NOTIFICATION=ws://main-chain:30333/ws
|
||||
NEOFS_IR_MORPH_ENDPOINT_CLIENT=http://morph-chain:30333
|
||||
NEOFS_IR_MORPH_ENDPOINT_NOTIFICATION=ws://morph-chain:30333/ws
|
||||
NEOFS_IR_TIMERS_EMIT=50
|
||||
NEOFS_IR_TIMERS_STOP_ESTIMATION_DIV=4
|
||||
NEOFS_IR_TIMERS_COLLECT_BASIC_INCOME_DIV=2
|
||||
NEOFS_IR_TIMERS_DISTRIBUTE_BASIC_INCOME_MUL=3
|
||||
NEOFS_IR_TIMERS_DISTRIBUTE_BASIC_INCOME_DIV=4
|
||||
|
||||
NEOFS_IR_EMIT_STORAGE_AMOUNT=1000000000
|
||||
NEOFS_IR_NETMAP_CLEANER_ENABLED=true
|
||||
|
||||
NEOFS_IR_CONTRACTS_NEOFS=1e6b065a451444cae3dc8e7597cef230503c14c0
|
||||
NEOFS_IR_CONTRACTS_PROCESSING=ea45c124db9c4ed8300717a6ac00b46842097eb6
|
||||
|
||||
NEOFS_IR_MORPH_VALIDATORS=02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
|
||||
NEOFS_IR_AUDIT_PDP_MAX_SLEEP_INTERVAL=100ms
|
||||
|
||||
NEOFS_IR_SETTLEMENT_BASIC_INCOME_RATE=100000000
|
||||
NEOFS_IR_SETTLEMENT_AUDIT_FEE=100000
|
||||
|
||||
NEOFS_IR_LOCODE_DB_PATH=/locode/db
|
||||
|
||||
NEOFS_IR_CONTROL_GRPC_ENDPOINT=127.0.0.1:16512
|
||||
|
|
|
@ -1,41 +1,42 @@
|
|||
# Get FrostFS IR artifacts (LOCODE database and FrostFS CLI)
|
||||
# Get NeoFS LOCODE database
|
||||
|
||||
LOCODE_DB_ARCHIVE_PATH=./vendor
|
||||
LOCODE_DB_ARCHIVE_FILE=locode_db.gz
|
||||
|
||||
get.ir: get.locode get.cli
|
||||
|
||||
# Get FrostFS LOCODE database
|
||||
get.locode: LOCODE_DB_PATH?=
|
||||
get.locode:
|
||||
@mkdir -p ${LOCODE_DB_ARCHIVE_PATH}
|
||||
|
||||
ifeq (${LOCODE_DB_PATH},)
|
||||
@echo "⇒ Download FrostFS LOCODE database from ${LOCODE_DB_URL}"
|
||||
@echo "⇒ Download NeoFS LOCODE database from ${LOCODE_DB_URL}"
|
||||
@curl \
|
||||
-sSL "${LOCODE_DB_URL}" \
|
||||
-o ${LOCODE_DB_ARCHIVE_PATH}/${LOCODE_DB_ARCHIVE_FILE}
|
||||
else
|
||||
@echo "⇒ Copy local archive of FrostFS LOCODE database from ${LOCODE_DB_PATH}"
|
||||
@echo "⇒ Copy local archive of NeoFS LOCODE database from ${LOCODE_DB_PATH}"
|
||||
@cp ${LOCODE_DB_PATH} ${LOCODE_DB_ARCHIVE_PATH}/${LOCODE_DB_ARCHIVE_FILE}
|
||||
endif
|
||||
|
||||
gzip -dfk ${LOCODE_DB_ARCHIVE_PATH}/${LOCODE_DB_ARCHIVE_FILE}
|
||||
|
||||
# Download FrostFS CLI
|
||||
.ONESHELL:
|
||||
get.cli: FROSTFS_CLI_FILE=./vendor/frostfs-cli
|
||||
get.cli: FROSTFS_CLI_PATH?=
|
||||
get.cli: NEOFS_CLI_FILE=./vendor/neofs-cli
|
||||
get.cli: NEOFS_CLI_ARCHIVE_FILE=${NEOFS_CLI_FILE}.tar.gz
|
||||
get.cli: NEOFS_CLI_PATH?=
|
||||
get.cli:
|
||||
@mkdir -p ./vendor
|
||||
|
||||
ifeq (${FROSTFS_CLI_PATH},)
|
||||
@echo "⇒ Download FrostFS CLI binary from ${FROSTFS_CLI_URL}"
|
||||
ifeq (${NEOFS_CLI_PATH},)
|
||||
@echo "⇒ Download NeoFS CLI binary from ${NEOFS_CLI_URL}"
|
||||
@curl \
|
||||
-ksSL "${FROSTFS_CLI_URL}" \
|
||||
-o ${FROSTFS_CLI_FILE}
|
||||
@chmod +x ${FROSTFS_CLI_FILE}
|
||||
-sSL "${NEOFS_CLI_URL}" \
|
||||
-o ${NEOFS_CLI_ARCHIVE_FILE}
|
||||
@tar -xvf ${NEOFS_CLI_ARCHIVE_FILE} -C ./vendor | xargs -I {} \
|
||||
mv ./vendor/{} ${NEOFS_CLI_FILE}
|
||||
@rm ${NEOFS_CLI_ARCHIVE_FILE}
|
||||
else
|
||||
@echo "⇒ Copy local binary from ${FROSTFS_CLI_PATH}"
|
||||
@cp ${FROSTFS_CLI_PATH} ${FROSTFS_CLI_FILE}
|
||||
@echo "⇒ Copy local binary from ${NEOFS_CLI_PATH}"
|
||||
@cp ${NEOFS_CLI_PATH} ${NEOFS_CLI_FILE}
|
||||
endif
|
||||
|
|
|
@ -1,76 +0,0 @@
|
|||
# Logger section
|
||||
logger:
|
||||
level: debug # Minimum enabled logging level
|
||||
|
||||
# Wallet settings
|
||||
wallet:
|
||||
path: /wallet.json # Path to NEP-6 NEO wallet file
|
||||
address: Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn # Account address in the wallet; ignore to use default address
|
||||
password: one # Account password in the wallet
|
||||
|
||||
# Profiler section
|
||||
pprof:
|
||||
enabled: true
|
||||
address: :6060 # Endpoint for application pprof profiling; disabled by default
|
||||
shutdown_timeout: 30s # Timeout for profiling HTTP server graceful shutdown
|
||||
|
||||
# Application metrics section
|
||||
prometheus:
|
||||
enabled: true
|
||||
address: :9090 # Endpoint for application prometheus metrics; disabled by default
|
||||
shutdown_timeout: 30s # Timeout for metrics HTTP server graceful shutdown
|
||||
|
||||
# Toggling the sidechain-only mode
|
||||
without_mainnet: true
|
||||
|
||||
# Neo main chain RPC settings
|
||||
mainnet:
|
||||
endpoint:
|
||||
client: # List of websocket RPC endpoints in mainchain; ignore if mainchain is disabled
|
||||
- address: ws://main-chain:30333/ws
|
||||
|
||||
# Neo side chain RPC settings
|
||||
morph:
|
||||
endpoint:
|
||||
client: # List of websocket RPC endpoints in sidechain
|
||||
- address: ws://morph-chain:30333/ws
|
||||
validators: # List of hex-encoded 33-byte public keys of sidechain validators to vote for at application startup
|
||||
- 02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
|
||||
|
||||
# Network time settings
|
||||
timers:
|
||||
emit: 50 # Number of sidechain blocks between GAS emission cycles; disabled by default
|
||||
stop_estimation:
|
||||
mul: 1 # Multiplier in x/y relation of when to stop basic income estimation within the epoch
|
||||
div: 4 # Divider in x/y relation of when to stop basic income estimation within the epoch
|
||||
collect_basic_income:
|
||||
mul: 1 # Multiplier in x/y relation of when to start basic income asset collection within the epoch
|
||||
div: 2 # Divider in x/y relation of when to start basic income asset collecting within the epoch
|
||||
distribute_basic_income:
|
||||
mul: 3 # Multiplier in x/y relation of when to start basic income asset distribution within the epoch
|
||||
div: 4 # Divider in x/y relation of when to start basic income asset distribution within the epoch
|
||||
|
||||
# Storage node GAS emission settings
|
||||
emit:
|
||||
storage:
|
||||
amount: 1000000000 # Fixed8 value of sidechain GAS emitted to all storage nodes once per GAS emission cycle; disabled by default
|
||||
|
||||
# Storage node removal settings
|
||||
netmap_cleaner:
|
||||
enabled: true # Enable voting for removing stale storage nodes from network map
|
||||
threshold: 3 # Number of FrostFS epoch without bootstrap request from storage node before it considered stale
|
||||
|
||||
# Audit settings
|
||||
audit:
|
||||
pdp:
|
||||
max_sleep_interval: 100ms # Maximum timeout between object.RangeHash requests to the storage node
|
||||
|
||||
# Settlement settings
|
||||
settlement:
|
||||
basic_income_rate: 100000000 # Optional: override basic income rate value from network config; applied only in debug mode
|
||||
audit_fee: 100000 # Optional: override audit fee value from network config; applied only in debug mode
|
||||
|
||||
# LOCODE database
|
||||
locode:
|
||||
db:
|
||||
path: /locode/db # Path to UN/LOCODE database file
|
|
@ -1,30 +0,0 @@
|
|||
{
|
||||
"version": "3.0",
|
||||
"accounts": [
|
||||
{
|
||||
"address": "Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "DCECs2Ir9AF73+MXxYrtX0x1PyBrfbiWBG+n13S7xL9/jcJBVuezJw==",
|
||||
"parameters": [
|
||||
{
|
||||
"name": "parameter0",
|
||||
"type": "Signature"
|
||||
}
|
||||
],
|
||||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"isDefault": false
|
||||
}
|
||||
],
|
||||
"scrypt": {
|
||||
"n": 16384,
|
||||
"r": 8,
|
||||
"p": 8
|
||||
},
|
||||
"extra": {
|
||||
"Tokens": null
|
||||
}
|
||||
}
|
|
@ -1,5 +1,6 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
|
||||
ir01:
|
||||
|
@ -12,19 +13,21 @@ services:
|
|||
ir_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.61
|
||||
stop_signal: SIGTERM
|
||||
stop_grace_period: 15s
|
||||
stop_signal: SIGKILL
|
||||
volumes:
|
||||
- ./az.json:/wallet.json
|
||||
- ./az.key:/wallet01.key
|
||||
- ./wallet01.json:/wallet.json
|
||||
- ./wallet01.key:/wallet01.key
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
- ./../../vendor/locode_db:/locode/db
|
||||
- ./../../vendor/frostfs-cli:/frostfs-cli
|
||||
- ./cfg:/etc/frostfs/ir
|
||||
env_file: [ ".env", ".ir.env", ".int_test.env" ]
|
||||
command: [ "frostfs-ir", "--config", "/etc/frostfs/ir/config.yml" ]
|
||||
- ./../../vendor/neofs-cli:/neofs-cli
|
||||
- ./healthcheck.sh:/healthcheck.sh
|
||||
env_file: [ ".env", ".ir.env" ]
|
||||
environment:
|
||||
- NEOFS_IR_WALLET_PATH=/wallet.json
|
||||
- NEOFS_IR_WALLET_ADDRESS=Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn
|
||||
- NEOFS_IR_WALLET_PASSWORD=one
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "/frostfs-cli control ir healthcheck -q --wallet /wallet01.key --endpoint \"$$FROSTFS_IR_CONTROL_GRPC_ENDPOINT\""]
|
||||
test: ["CMD-SHELL", "/healthcheck.sh"]
|
||||
interval: 2s
|
||||
timeout: 1s
|
||||
retries: 5
|
||||
|
|
6
services/ir/healthcheck.sh
Executable file
6
services/ir/healthcheck.sh
Executable file
|
@ -0,0 +1,6 @@
|
|||
#!/bin/sh
|
||||
|
||||
/neofs-cli control healthcheck \
|
||||
--endpoint "$NEOFS_IR_CONTROL_GRPC_ENDPOINT" \
|
||||
--wallet /wallet01.key --ir |
|
||||
grep "Health status: READY"
|
3
services/ir/prepare.mk
Normal file
3
services/ir/prepare.mk
Normal file
|
@ -0,0 +1,3 @@
|
|||
# Deposit GAS from default wallet to NeoFS privnet contract
|
||||
prepare.ir:
|
||||
@./bin/deposit.sh
|
|
@ -1 +0,0 @@
|
|||
IPV4_PREFIX.120 jaeger.LOCAL_DOMAIN
|
|
@ -1 +0,0 @@
|
|||
../../.int_test.env
|
|
@ -1,31 +0,0 @@
|
|||
services:
|
||||
jaeger:
|
||||
image: ${JAEGER_IMAGE}:${JAEGER_VERSION}
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
hostname: jaeger
|
||||
container_name: jaeger
|
||||
restart: on-failure
|
||||
networks:
|
||||
jaeger_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.120
|
||||
volumes:
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
ports:
|
||||
- '4317:4317' #OTLP over gRPC
|
||||
- '4318:4318' #OTLP over HTTP
|
||||
- '16686:16686' #frontend
|
||||
stop_signal: SIGKILL
|
||||
env_file: [ ".env", ".jaeger.env", ".int_test.env" ]
|
||||
environment:
|
||||
- COLLECTOR_OTLP_ENABLED=true
|
||||
- SPAN_STORAGE_TYPE=badger
|
||||
- BADGER_EPHEMERAL=false
|
||||
- BADGER_DIRECTORY_VALUE=/badger/data
|
||||
- BADGER_DIRECTORY_KEY=/badger/key
|
||||
|
||||
networks:
|
||||
jaeger_int:
|
||||
internet:
|
||||
external: true
|
||||
name: basenet_internet
|
|
@ -1 +0,0 @@
|
|||
../../.int_test.env
|
|
@ -1,32 +1,15 @@
|
|||
# Download FrostFS Contracts and Adm tool to deploy environment
|
||||
# Download NeoFS sidechain dump with pre-deployed NeoFS contracts
|
||||
get.morph_chain: MORPH_CHAIN_DUMP_NAME=neo.morph.dump.
|
||||
get.morph_chain: MORPH_CHAIN_PATH?=
|
||||
get.morph_chain:
|
||||
@mkdir -p ./vendor
|
||||
|
||||
get.morph_chain: get.contracts get.adm
|
||||
|
||||
# Download FrostFS Contracts
|
||||
get.contracts: FROSTFS_CONTRACTS_DEST=./vendor/contracts
|
||||
get.contracts: FROSTFS_CONTRACTS_ARCHIVE=frostfs-contracts.tar.gz
|
||||
get.contracts:
|
||||
@mkdir -p ${FROSTFS_CONTRACTS_DEST}
|
||||
|
||||
ifeq (${FROSTFS_CONTRACTS_PATH},)
|
||||
@echo "⇒ Download compiled FrostFS contracts from ${FROSTFS_CONTRACTS_URL}"
|
||||
@curl -ksSL ${FROSTFS_CONTRACTS_URL} -o ${FROSTFS_CONTRACTS_ARCHIVE}
|
||||
@tar -xf ${FROSTFS_CONTRACTS_ARCHIVE} -C ${FROSTFS_CONTRACTS_DEST} --strip-components 1
|
||||
@rm ${FROSTFS_CONTRACTS_ARCHIVE}
|
||||
ifeq (${MORPH_CHAIN_PATH},)
|
||||
@echo "⇒ Download morph chain dump from ${MORPH_CHAIN_URL}"
|
||||
@curl \
|
||||
-sSL "${MORPH_CHAIN_URL}" \
|
||||
-o ./vendor/morph_chain.gz
|
||||
else
|
||||
@echo "⇒ Copy compiled contracts from ${FROSTFS_CONTRACTS_PATH}"
|
||||
@cp -r ${FROSTFS_CONTRACTS_PATH}/* ${FROSTFS_CONTRACTS_DEST}
|
||||
endif
|
||||
|
||||
# Download FrostFS ADM tool
|
||||
get.adm: FROSTFS_ADM_DEST=./vendor/frostfs-adm
|
||||
get.adm:
|
||||
|
||||
ifeq (${FROSTFS_ADM_PATH},)
|
||||
@echo "⇒ Download FrostFS ADM binary from ${FROSTFS_ADM_URL}"
|
||||
@curl -skSL ${FROSTFS_ADM_URL} -o ${FROSTFS_ADM_DEST}
|
||||
@chmod +x ${FROSTFS_ADM_DEST}
|
||||
else
|
||||
@echo "⇒ Copy frostfs-adm binary from ${FROSTFS_ADM_PATH}"
|
||||
@cp ${FROSTFS_ADM_PATH} ${FROSTFS_ADM_DEST}
|
||||
@echo "⇒ Copy local archive ${MORPH_CHAIN_PATH}"
|
||||
@cp ${MORPH_CHAIN_PATH} ./vendor/morph_chain.gz
|
||||
endif
|
||||
|
|
|
@ -1,4 +0,0 @@
|
|||
---
|
||||
|
||||
Path: "/wallets/node-wallet.json"
|
||||
Password: "one"
|
|
@ -1,8 +1,9 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
frostfs_morph_chain:
|
||||
image: ${NEOGO_IMAGE}:${NEOGO_VERSION}
|
||||
neofs_morph_chain:
|
||||
image: nspccdev/neo-go:${NEOGO_VERSION}
|
||||
container_name: morph_chain
|
||||
command: ["node", "--config-path", "/config", "--privnet", "--debug"]
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
|
@ -12,21 +13,17 @@ services:
|
|||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.90
|
||||
stop_signal: SIGKILL
|
||||
env_file: [ ".int_test.env" ]
|
||||
environment:
|
||||
- ACC=/morph_chain.gz
|
||||
volumes:
|
||||
- ./../../vendor/morph_chain.gz:/morph_chain.gz
|
||||
- ./protocol.privnet.yml:/config/protocol.privnet.yml
|
||||
- ./node-wallet.json:/wallets/node-wallet.json
|
||||
- ./config.yml:/wallets/config.yml
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
- ./../../wallets/wallet.json:/wallets/wallet.json
|
||||
- ./../s3_gate/wallet.json:/wallets/s3-wallet.json
|
||||
- chains:/chains
|
||||
|
||||
networks:
|
||||
chain_int:
|
||||
internet:
|
||||
external: true
|
||||
name: basenet_internet
|
||||
|
||||
volumes:
|
||||
chains:
|
||||
|
|
|
@ -1,11 +1,10 @@
|
|||
{
|
||||
"version": "3.0",
|
||||
"name":null,
|
||||
"accounts": [
|
||||
{
|
||||
"address": "Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "single",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "DCECs2Ir9AF73+MXxYrtX0x1PyBrfbiWBG+n13S7xL9/jcJBVuezJw==",
|
||||
"parameters": [
|
||||
|
@ -17,13 +16,37 @@
|
|||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"extra":null,
|
||||
"isDefault": false
|
||||
"isdefault": false
|
||||
},
|
||||
{
|
||||
"address": "NVTiAjNgagDkTr5HTzDmQP9kPwPHN5BgVq",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "EwwhAhA6f33QFlWFl/eWDSfFFqQ5T9loueZRVetLAT5AQEBuDCECp7xV/oaE4BGXaNEEujB5W9zIZhnoZK3SYVZyPtGFzWIMIQKzYiv0AXvf4xfFiu1fTHU/IGt9uJYEb6fXdLvEv3+NwgwhA9kMB99j5pDOd5EuEKtRrMlEtmhgI3tgjE+PgwnnHuaZFEGe0Nw6",
|
||||
"parameters": [
|
||||
{
|
||||
"name": "parameter0",
|
||||
"type": "Signature"
|
||||
},
|
||||
{
|
||||
"name": "parameter1",
|
||||
"type": "Signature"
|
||||
},
|
||||
{
|
||||
"name": "parameter2",
|
||||
"type": "Signature"
|
||||
}
|
||||
],
|
||||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"isdefault": false
|
||||
},
|
||||
{
|
||||
"address": "NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "consensus",
|
||||
"label": "",
|
||||
"contract": {
|
||||
"script": "EQwhArNiK/QBe9/jF8WK7V9MdT8ga324lgRvp9d0u8S/f43CEUGe0Nw6",
|
||||
"parameters": [
|
||||
|
@ -35,26 +58,7 @@
|
|||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"extra":null,
|
||||
"isDefault": false
|
||||
},
|
||||
{
|
||||
"address": "NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP",
|
||||
"key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
|
||||
"label": "committee",
|
||||
"contract": {
|
||||
"script": "EQwhArNiK/QBe9/jF8WK7V9MdT8ga324lgRvp9d0u8S/f43CEUGe0Nw6",
|
||||
"parameters": [
|
||||
{
|
||||
"name": "parameter0",
|
||||
"type": "Signature"
|
||||
}
|
||||
],
|
||||
"deployed": false
|
||||
},
|
||||
"lock": false,
|
||||
"extra":null,
|
||||
"isDefault": true
|
||||
"isdefault": false
|
||||
}
|
||||
],
|
||||
"scrypt": {
|
||||
|
|
|
@ -1,56 +1,48 @@
|
|||
ProtocolConfiguration:
|
||||
Magic: 15405
|
||||
MaxTraceableBlocks: 200000
|
||||
TimePerBlock: 1s
|
||||
SecondsPerBlock: 1
|
||||
MemPoolSize: 50000
|
||||
StandbyCommittee:
|
||||
- 02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
|
||||
ValidatorsCount: 1
|
||||
SeedList:
|
||||
- 172.200.0.1:20333
|
||||
VerifyBlocks: true
|
||||
VerifyTransactions: true
|
||||
StateRootInHeader: true
|
||||
P2PSigExtensions: true
|
||||
|
||||
ApplicationConfiguration:
|
||||
SkipBlockVerification: false
|
||||
DBConfiguration:
|
||||
Type: "boltdb"
|
||||
BoltDBOptions:
|
||||
FilePath: "/chains/morph.bolt"
|
||||
P2P:
|
||||
Addresses:
|
||||
- ":20333"
|
||||
DialTimeout: 3s
|
||||
ProtoTickInterval: 2s
|
||||
PingInterval: 30s
|
||||
PingTimeout: 90s
|
||||
MaxPeers: 10
|
||||
AttemptConnPeers: 5
|
||||
MinPeers: 0
|
||||
FilePath: "./db/morph.bolt"
|
||||
NodePort: 20333
|
||||
Relay: true
|
||||
Consensus:
|
||||
Enabled: true
|
||||
UnlockWallet:
|
||||
Path: "./wallets/node-wallet.json"
|
||||
Password: "one"
|
||||
DialTimeout: 3
|
||||
ProtoTickInterval: 2
|
||||
PingInterval: 30
|
||||
PingTimeout: 90
|
||||
MaxPeers: 10
|
||||
AttemptConnPeers: 5
|
||||
MinPeers: 0
|
||||
RPC:
|
||||
Addresses:
|
||||
- ":30333"
|
||||
Enabled: true
|
||||
SessionEnabled: true
|
||||
EnableCORSWorkaround: false
|
||||
MaxGasInvoke: 100
|
||||
MaxGasInvoke: 15
|
||||
Port: 30333
|
||||
P2PNotary:
|
||||
Enabled: true
|
||||
UnlockWallet:
|
||||
Path: "./wallets/node-wallet.json"
|
||||
Password: "one"
|
||||
Prometheus:
|
||||
Addresses:
|
||||
- ":20001"
|
||||
Enabled: true
|
||||
Port: 20001
|
||||
Pprof:
|
||||
Addresses:
|
||||
- ":20011"
|
||||
Enabled: true
|
||||
Port: 20011
|
||||
UnlockWallet:
|
||||
Path: "./wallets/node-wallet.json"
|
||||
Password: "one"
|
||||
|
|
1
services/nats/.hosts
Normal file
1
services/nats/.hosts
Normal file
|
@ -0,0 +1 @@
|
|||
IPV4_PREFIX.101 nats.LOCAL_DOMAIN
|
7
services/nats/artifacts.mk
Normal file
7
services/nats/artifacts.mk
Normal file
|
@ -0,0 +1,7 @@
|
|||
# Create new tls certs
|
||||
|
||||
NATS_DIR=$(abspath services/nats)
|
||||
|
||||
get.nats:
|
||||
@echo "⇒ Creating certs for NATS server and clients"
|
||||
${NATS_DIR}/generate_cert.sh ${LOCAL_DOMAIN}
|
31
services/nats/docker-compose.yml
Normal file
31
services/nats/docker-compose.yml
Normal file
|
@ -0,0 +1,31 @@
|
|||
---
|
||||
|
||||
version: "2.4"
|
||||
services:
|
||||
nats:
|
||||
image: ${NATS_IMAGE}:${NATS_VERSION}
|
||||
domainname: ${LOCAL_DOMAIN}
|
||||
hostname: nats
|
||||
container_name: nats
|
||||
restart: on-failure
|
||||
dns:
|
||||
- ${IPV4_PREFIX}.101
|
||||
networks:
|
||||
nats_int:
|
||||
internet:
|
||||
ipv4_address: ${IPV4_PREFIX}.101
|
||||
volumes:
|
||||
- ./../../vendor/hosts:/etc/hosts
|
||||
- ./nats.conf:/etc/nats/neofs-nats-server.conf
|
||||
- ./server-cert.pem:/certs/server-cert.pem
|
||||
- ./server-key.pem:/certs/server-key.pem
|
||||
- ./ca-cert.pem:/certs/ca-cert.pem
|
||||
stop_signal: SIGKILL
|
||||
env_file: [ ".env" ]
|
||||
command: ["-c", "/etc/nats/neofs-nats-server.conf"]
|
||||
|
||||
networks:
|
||||
nats_int:
|
||||
internet:
|
||||
external: true
|
||||
name: basenet_internet
|
60
services/nats/generate_cert.sh
Executable file
60
services/nats/generate_cert.sh
Executable file
|
@ -0,0 +1,60 @@
|
|||
#!/bin/bash
|
||||
|
||||
WORKDIR=$(dirname "$0")
|
||||
LOCAL_DOMAIN=$1
|
||||
|
||||
CA_KEY=$WORKDIR/ca-key.pem
|
||||
CA_CRT=$WORKDIR/ca-cert.pem
|
||||
|
||||
SRV_KEY=$WORKDIR/server-key.pem
|
||||
SRV_REQ=$WORKDIR/server-req.csr
|
||||
SRV_CRT=$WORKDIR/server-cert.pem
|
||||
|
||||
CLI_KEY=$WORKDIR/client-key.pem
|
||||
CLI_REQ=$WORKDIR/client-req.csr
|
||||
CLI_CRT=$WORKDIR/client-cert.pem
|
||||
|
||||
SUBJ="/O=NSPCC"
|
||||
|
||||
if [[ ! -f $CA_KEY || ! -f $CA_CRT ]]; then
|
||||
OUT=$(openssl req -newkey rsa:4096 -x509 -days 365 -nodes -keyout $CA_KEY -out $CA_CRT -subj $SUBJ 2>&1) || {
|
||||
echo "CA certificate was not created"
|
||||
echo $OUT
|
||||
exit 1
|
||||
}
|
||||
fi
|
||||
|
||||
if [[ ! -f $SRV_KEY || ! -f $SRV_CRT ]]; then
|
||||
OUT=$(openssl req -newkey rsa:4096 -nodes --keyout $SRV_KEY -out $SRV_REQ -subj $SUBJ 2>&1 ) || {
|
||||
echo "Server certificate was not created"
|
||||
echo $OUT
|
||||
exit 1
|
||||
}
|
||||
|
||||
OUT=$(openssl x509 -req -days 365 -set_serial 01 -in $SRV_REQ -out $SRV_CRT -CA $CA_CRT -CAkey $CA_KEY \
|
||||
-extensions san -extfile <(printf "[san]\nsubjectAltName=DNS:nats.$LOCAL_DOMAIN") 2>&1)|| {
|
||||
echo "Server certificate was not signed by CA"
|
||||
echo $OUT
|
||||
rm $SRV_REQ
|
||||
exit 1
|
||||
}
|
||||
|
||||
rm $SRV_REQ
|
||||
fi
|
||||
|
||||
if [[ ! -f $CLI_KEY || ! -f $CLI_CRT ]]; then
|
||||
OUT=$(openssl req -newkey rsa:4096 -nodes --keyout $CLI_KEY -out $CLI_REQ -subj $SUBJ 2>&1) || {
|
||||
echo "Client certificate was not created"
|
||||
echo $OUT
|
||||
exit 1
|
||||
}
|
||||
|
||||
OUT=$(openssl x509 -req -days 365 -set_serial 01 -in $CLI_REQ -out $CLI_CRT -CA $CA_CRT -CAkey $CA_KEY 2>&1) || {
|
||||
echo "Client certificate was not signed by CA"
|
||||
echo $OUT
|
||||
rm $CLI_REQ
|
||||
exit 1
|
||||
}
|
||||
|
||||
rm $CLI_REQ
|
||||
fi
|
15
services/nats/nats.conf
Normal file
15
services/nats/nats.conf
Normal file
|
@ -0,0 +1,15 @@
|
|||
port: 4222
|
||||
monitor_port: 8222
|
||||
|
||||
jetstream {
|
||||
store_dir=nats
|
||||
max_memory_store: 1GB
|
||||
max_file_store: 2GB
|
||||
}
|
||||
|
||||
tls {
|
||||
cert_file: /certs/server-cert.pem
|
||||
key_file: /certs/server-key.pem
|
||||
ca_file: /certs/ca-cert.pem
|
||||
verify: true
|
||||
}
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue