70 lines
1.7 KiB
Bash
70 lines
1.7 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
|
|
||
|
|
HERE="$(dirname "$0")"
|
||
|
|
|
||
|
|
# shellcheck source=net/datacenter-node-install/utils.sh
|
||
|
|
source "$HERE"/utils.sh
|
||
|
|
|
||
|
|
ensure_env || exit 1
|
||
|
|
|
||
|
|
exit
|
||
|
|
|
||
|
|
if [[ -n "$1" ]]; then
|
||
|
|
PUBKEY_FILE="$1"
|
||
|
|
else
|
||
|
|
cat <<EOF
|
||
|
|
Usage: $0 [pubkey_file]
|
||
|
|
|
||
|
|
The pubkey_file should be the pubkey that will be set up to allow the current user
|
||
|
|
(assumed to be the machine admin) to log in via ssh
|
||
|
|
EOF
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
set -xe
|
||
|
|
|
||
|
|
apt update
|
||
|
|
apt upgrade -y
|
||
|
|
apt install -y build-essential pkg-config clang
|
||
|
|
|
||
|
|
"$HERE"/../scripts/install-docker.sh
|
||
|
|
usermod -aG docker "$SETUP_USER"
|
||
|
|
"$HERE"/../scripts/install-certbot.sh
|
||
|
|
"$HERE"/setup-sudoers.sh
|
||
|
|
"$HERE"/setup-ssh.sh
|
||
|
|
|
||
|
|
# Allow admin user to log in
|
||
|
|
BASE_SSH_DIR="${SETUP_HOME}/.ssh"
|
||
|
|
mkdir "$BASE_SSH_DIR"
|
||
|
|
chown "$SETUP_USER:$SETUP_USER" "$BASE_SSH_DIR"
|
||
|
|
cat "$PUBKEY_FILE" > "${BASE_SSH_DIR}/authorized_keys"
|
||
|
|
chown "$SETUP_USER:$SETUP_USER" "${BASE_SSH_DIR}/.ssh/authorized_keys"
|
||
|
|
|
||
|
|
"$HERE"/disable-nouveau.sh
|
||
|
|
"$HERE"/disable-networkd-wait.sh
|
||
|
|
"$HERE"/setup-grub.sh
|
||
|
|
"$HERE"/../scripts/install-earlyoom.sh
|
||
|
|
"$HERE"/../scripts/install-nodeljs.sh
|
||
|
|
"$HERE"/../scripts/localtime.sh
|
||
|
|
"$HERE"/../scripts/install-redis.sh
|
||
|
|
"$HERE"/../scripts/install-rsync.sh
|
||
|
|
"$HERE"/../scripts/install-libssl-compatability.sh
|
||
|
|
|
||
|
|
# Setup kernel constants
|
||
|
|
cat > /etc/sysctl.d/20-solana-node.conf <<EOF
|
||
|
|
|
||
|
|
# Solana networking requirements
|
||
|
|
net.core.rmem_default=1610612736
|
||
|
|
net.core.rmem_max=1610612736
|
||
|
|
net.core.wmem_default=1610612736
|
||
|
|
net.core.wmem_max=1610612736
|
||
|
|
|
||
|
|
# Solana earlyoom setup
|
||
|
|
kernel.sysrq=$(( $(cat /proc/sys/kernel/sysrq) | 64 ))
|
||
|
|
EOF
|
||
|
|
|
||
|
|
# Allow more files to be opened by a user
|
||
|
|
sed -i 's/^\(# End of file\)/* soft nofile 65535\n\n\1/' /etc/security/limits.conf
|
||
|
|
|
||
|
|
echo "Please reboot then run setup-dc-node-2.sh"
|