oib/aitbc
1
0
Fork 0
Code Issues Pull Requests Actions 21 Packages Projects Releases Wiki Activity

feat: add robust error handling and fallbacks for credentials generation
Some checks failed
Cross-Node Transaction Testing / transaction-test (push) Has been cancelled
Details
Deploy to Testnet / deploy-testnet (push) Has been cancelled
Details
Multi-Node Stress Testing / stress-test (push) Has been cancelled
Details

Browse Source 
- Added error handling for python3 secrets module failures
- Added OpenSSL fallback for credential generation
- Added timestamp-based fallback if both python3 and openssl fail
- Added fallback for proposer_id generation if not in .env
- Improved logging for each credential generation step
- Prevents setup failures when python3 secrets module unavailable
- Ensures credentials are always generated with fallback methods
This commit is contained in:
aitbc
2026-05-26 10:30:07 +02:00
parent 2a0bca6d98
commit 1ad702694f
1 changed files with 37 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
scripts/setup.sh
View File

@@ -358,17 +358,37 @@ setup_credentials() {
# Generate secure secrets if they don't exist
if [ ! -f "/etc/aitbc/credentials/api_hash_secret" ]; then
python3 -c "import secrets; print(secrets.token_hex(32))" > /etc/aitbc/credentials/api_hash_secret
chmod 600 /etc/aitbc/credentials/api_hash_secret
log "Generated API_KEY_HASH_SECRET"
log "Generating API_KEY_HASH_SECRET..."
if python3 -c "import secrets; print(secrets.token_hex(32))" > /etc/aitbc/credentials/api_hash_secret 2>/dev/null; then
chmod 600 /etc/aitbc/credentials/api_hash_secret
log "Generated API_KEY_HASH_SECRET"
else
warning "Failed to generate API_KEY_HASH_SECRET"
warning "Using fallback random value"
openssl rand -hex 32 > /etc/aitbc/credentials/api_hash_secret 2>/dev/null || {
warning "OpenSSL also failed, using timestamp-based fallback"
echo "$(date +%s)-$(head -c 16 /dev/urandom | xxd -p)" > /etc/aitbc/credentials/api_hash_secret
}
chmod 600 /etc/aitbc/credentials/api_hash_secret
fi
else
log "API_KEY_HASH_SECRET already exists"
fi
if [ ! -f "/etc/aitbc/credentials/keystore_password" ]; then
python3 -c "import secrets; print(secrets.token_hex(32))" > /etc/aitbc/credentials/keystore_password
chmod 600 /etc/aitbc/credentials/keystore_password
log "Generated keystore password"
log "Generating keystore password..."
if python3 -c "import secrets; print(secrets.token_hex(32))" > /etc/aitbc/credentials/keystore_password 2>/dev/null; then
chmod 600 /etc/aitbc/credentials/keystore_password
log "Generated keystore password"
else
warning "Failed to generate keystore password"
warning "Using fallback random value"
openssl rand -hex 32 > /etc/aitbc/credentials/keystore_password 2>/dev/null || {
warning "OpenSSL also failed, using timestamp-based fallback"
echo "$(date +%s)-$(head -c 16 /dev/urandom | xxd -p)" > /etc/aitbc/credentials/keystore_password
}
chmod 600 /etc/aitbc/credentials/keystore_password
fi
else
log "Keystore password already exists"
fi
@@ -378,6 +398,17 @@ setup_credentials() {
grep "^proposer_id=" /etc/aitbc/.env | cut -d'=' -f2 > /etc/aitbc/credentials/proposer_id
chmod 600 /etc/aitbc/credentials/proposer_id
log "Copied proposer_id to credentials"
else
log "No proposer_id found in /etc/aitbc/.env, generating random ID"
if python3 -c "import secrets; print(secrets.token_hex(16))" > /etc/aitbc/credentials/proposer_id 2>/dev/null; then
chmod 600 /etc/aitbc/credentials/proposer_id
log "Generated random proposer_id"
else
warning "Failed to generate proposer_id"
echo "proposer-$(date +%s)-$(head -c 8 /dev/urandom | xxd -p)" > /etc/aitbc/credentials/proposer_id
chmod 600 /etc/aitbc/credentials/proposer_id
log "Generated fallback proposer_id"
fi
fi
# Add API_KEY_HASH_SECRET to .env if not present