aitbc/scripts/deployment/deploy-integrated-blockchain-node.sh

#!/bin/bash
#
# Integrated Blockchain Node Deployment Script
# Deploys the full-featured integrated blockchain node with mempool support
# This script sets up the node from scratch on a new host or container
#

set -e

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color

# Configuration
REPO_URL="https://gitea.bubuit.net:3000/oib/aitbc.git"
INSTALL_DIR="/opt/aitbc"
ENV_FILE="/etc/aitbc/blockchain.env"
NODE_ENV_FILE="/etc/aitbc/node.env"
SERVICE_NAME="aitbc-blockchain-node"

# Functions
log_info() {
    echo -e "${GREEN}[INFO]${NC} $1"
}

log_warn() {
    echo -e "${YELLOW}[WARN]${NC} $1"
}

log_error() {
    echo -e "${RED}[ERROR]${NC} $1"
}

check_root() {
    if [ "$EUID" -ne 0 ]; then
        log_error "This script must be run as root"
        exit 1
    fi
}

check_prerequisites() {
    log_info "Checking prerequisites..."
    
    # Check for required commands
    for cmd in git python3 pip3 systemctl; do
        if ! command -v $cmd &> /dev/null; then
            log_error "Required command not found: $cmd"
            exit 1
        fi
    done
    
    # Check Python version
    PYTHON_VERSION=$(python3 --version | cut -d' ' -f2 | cut -d'.' -f1,2)
    REQUIRED_VERSION="3.13"
    if [ "$(printf '%s\n' "$REQUIRED_VERSION" "$PYTHON_VERSION" | sort -V | head -n1)" != "$REQUIRED_VERSION" ]; then
        log_error "Python $REQUIRED_VERSION+ required, found $PYTHON_VERSION"
        exit 1
    fi
    
    log_info "Prerequisites check passed"
}

clone_repository() {
    log_info "Cloning AITBC repository..."
    
    if [ -d "$INSTALL_DIR" ]; then
        log_warn "Directory $INSTALL_DIR already exists"
        read -p "Remove and re-clone? (y/n) " -n 1 -r
        echo
        if [[ $REPLY =~ ^[Yy]$ ]]; then
            rm -rf "$INSTALL_DIR"
        else
            log_info "Using existing installation"
            return
        fi
    fi
    
    git clone "$REPO_URL" "$INSTALL_DIR"
    cd "$INSTALL_DIR"
    
    log_info "Repository cloned successfully"
}

setup_python_environment() {
    log_info "Setting up Python environment..."
    
    cd "$INSTALL_DIR"
    
    # Create virtual environment
    python3 -m venv venv
    
    # Activate virtual environment
    source venv/bin/activate
    
    # Install dependencies
    if [ -f "apps/blockchain-node/requirements.txt" ]; then
        pip install -r apps/blockchain-node/requirements.txt
    else
        log_warn "No requirements.txt found, installing core dependencies"
        pip install pydantic pydantic-settings fastapi uvicorn sqlalchemy psycopg2-binary
    fi
    
    deactivate
    
    log_info "Python environment setup complete"
}

setup_directories() {
    log_info "Setting up directories..."
    
    # Create runtime directories
    mkdir -p /var/lib/aitbc/keystore
    mkdir -p /var/lib/aitbc/data
    mkdir -p /var/lib/aitbc/logs
    
    # Create configuration directory
    mkdir -p /etc/aitbc
    
    # Set permissions
    chmod 700 /var/lib/aitbc/keystore
    chmod 755 /var/lib/aitbc/data
    chmod 755 /var/lib/aitbc/logs
    chmod 755 /etc/aitbc
    
    log_info "Directories setup complete"
}

setup_environment_files() {
    log_info "Setting up environment files..."
    
    # Create blockchain.env if it doesn't exist
    if [ ! -f "$ENV_FILE" ]; then
        cat > "$ENV_FILE" << 'EOF'
# Blockchain Node Configuration
CHAIN_ID=ait-mainnet
RPC_BIND_HOST=0.0.0.0
RPC_BIND_PORT=8006
P2P_BIND_HOST=0.0.0.0
P2P_BIND_PORT=8001
ENABLE_BLOCK_PRODUCTION=false
GOSSIP_BROADCAST_URL=redis://127.0.0.1:6379
CROSS_SITE_REMOTE_ENDPOINTS=
EOF
        chmod 600 "$ENV_FILE"
        log_info "Created $ENV_FILE"
    else
        log_info "$ENV_FILE already exists, skipping"
    fi
    
    # Create node.env if it doesn't exist
    if [ ! -f "$NODE_ENV_FILE" ]; then
        cat > "$NODE_ENV_FILE" << 'EOF'
# Node Configuration
NODE_ID=$(hostname)
ISLAND_ID=default-island
CHAIN_ID=ait-mainnet
NODE_ROLE=follower
P2P_BIND_PORT=8001
EOF
        chmod 600 "$NODE_ENV_FILE"
        log_info "Created $NODE_ENV_FILE"
    else
        log_info "$NODE_ENV_FILE already exists, skipping"
    fi
}

setup_systemd_service() {
    log_info "Setting up systemd service..."
    
    SERVICE_FILE="/etc/systemd/system/${SERVICE_NAME}.service"
    
    cat > "$SERVICE_FILE" << EOF
[Unit]
Description=AITBC Production Blockchain Node
After=network.target postgresql.service

[Service]
Type=simple
User=root
WorkingDirectory=$INSTALL_DIR
Environment="PATH=$INSTALL_DIR/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin"
EnvironmentFile=$ENV_FILE
EnvironmentFile=$NODE_ENV_FILE
ExecStartPre=$INSTALL_DIR/scripts/utils/load-keystore-secrets.sh
ExecStart=$INSTALL_DIR/venv/bin/python -m aitbc_chain.main
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal

[Install]
WantedBy=multi-user.target
EOF
    
    systemctl daemon-reload
    systemctl enable $SERVICE_NAME
    
    log_info "Systemd service setup complete"
}

start_service() {
    log_info "Starting blockchain node service..."
    
    systemctl start $SERVICE_NAME
    
    # Wait for service to start
    sleep 5
    
    if systemctl is-active --quiet $SERVICE_NAME; then
        log_info "Service started successfully"
    else
        log_error "Service failed to start"
        systemctl status $SERVICE_NAME --no-pager
        exit 1
    fi
}

verify_deployment() {
    log_info "Verifying deployment..."
    
    # Check service status
    if systemctl is-active --quiet $SERVICE_NAME; then
        log_info "✓ Service is running"
    else
        log_error "✗ Service is not running"
        exit 1
    fi
    
    # Check RPC endpoint
    if curl -s http://localhost:8006/rpc/head > /dev/null; then
        log_info "✓ RPC endpoint is accessible"
    else
        log_error "✗ RPC endpoint is not accessible"
        exit 1
    fi
    
    # Check mempool endpoint
    if curl -s http://localhost:8006/rpc/mempool > /dev/null; then
        log_info "✓ Mempool endpoint is accessible"
    else
        log_error "✗ Mempool endpoint is not accessible"
        exit 1
    fi
    
    log_info "Deployment verification complete"
}

print_summary() {
    echo ""
    echo "=========================================="
    echo "  Integrated Blockchain Node Deployed"
    echo "=========================================="
    echo ""
    echo "Service: $SERVICE_NAME"
    echo "Install Dir: $INSTALL_DIR"
    echo "Config: $ENV_FILE"
    echo ""
    echo "RPC Endpoints:"
    echo "  - Head: http://localhost:8006/rpc/head"
    echo "  - Mempool: http://localhost:8006/rpc/mempool"
    echo ""
    echo "Management Commands:"
    echo "  - Status: systemctl status $SERVICE_NAME"
    echo "  - Restart: systemctl restart $SERVICE_NAME"
    echo "  - Logs: journalctl -u $SERVICE_NAME -f"
    echo ""
    echo "Configuration:"
    echo "  - Edit config: nano $ENV_FILE"
    echo "  - After edit: systemctl restart $SERVICE_NAME"
    echo ""
}

# Main execution
main() {
    echo "=========================================="
    echo "  Integrated Blockchain Node Deployment"
    echo "=========================================="
    echo ""
    
    check_root
    check_prerequisites
    clone_repository
    setup_python_environment
    setup_directories
    setup_environment_files
    setup_systemd_service
    start_service
    verify_deployment
    print_summary
    
    log_info "Deployment completed successfully!"
}

# Run main function
main "$@"