project/create_lxc_base.sh

#!/bin/bash

set -eu
cd "$(dirname "$0")"

bash -c "./stub_lxc_profile.sh --lxd-hostname=$BASE_IMAGE_VM_NAME"

# let's download our base image.
if ! lxc image list --format csv --columns l | grep -q "$UBUNTU_BASE_IMAGE_NAME"; then
    # if the image doesn't exist, download it from Ubuntu's image server
    # TODO see if we can fetch this file from a more censorship-resistant source, e.g., ipfs
    # we don't really need to cache this locally since it gets continually updated upstream.
    if [ -d "$SS_JAMMY_PATH" ]; then
        lxc image import "$SS_JAMMY_PATH/meta-bf1a2627bdddbfb0a9bf1f8ae146fa794800c6c91281d3db88c8d762f58bd057.tar.xz" \
            "$SS_JAMMY_PATH/bf1a2627bdddbfb0a9bf1f8ae146fa794800c6c91281d3db88c8d762f58bd057.qcow2" \
            --alias "$UBUNTU_BASE_IMAGE_NAME"
    else
        # copy the image down from canonical.
    lxc image copy "images:$BASE_LXC_IMAGE" "$REMOTE_NAME": --alias "$UBUNTU_BASE_IMAGE_NAME" --public --vm --auto-update
    fi
fi

# If the lxc VM does exist, then we will delete it (so we can start fresh) 
if lxc list --format csv -q | grep -q "$UBUNTU_BASE_IMAGE_NAME"; then
    # if there's no snapshot, we dispense with the old image and try again.
    if ! lxc info "$BASE_IMAGE_VM_NAME" | grep -q "$UBUNTU_BASE_IMAGE_NAME"; then
        lxc delete "$BASE_IMAGE_VM_NAME" --force
        ssh-keygen -f "$SSH_HOME/known_hosts" -R "$BASE_IMAGE_VM_NAME"
    fi
else
    # the base image is ubuntu:22.04.
    lxc init --profile="$BASE_IMAGE_VM_NAME" "$UBUNTU_BASE_IMAGE_NAME" "$BASE_IMAGE_VM_NAME" --vm

    # TODO move this sovereign-stack-base construction VM to separate dedicated IP
    lxc config set "$BASE_IMAGE_VM_NAME"

    for CHAIN in mainnet testnet; do
        for DATA in blocks chainstate; do
            lxc storage volume attach ss-base "$CHAIN-$DATA" "$BASE_IMAGE_VM_NAME" "/home/ubuntu/.ss/cache/bitcoin/$CHAIN/$DATA"
        done
    done

    lxc start "$BASE_IMAGE_VM_NAME"

    sleep 15
    while lxc exec "$BASE_IMAGE_VM_NAME" -- [ ! -f /var/lib/cloud/instance/boot-finished ]; do
        sleep 1
    done

    # ensure the ssh service is listening at localhost
    lxc exec "$BASE_IMAGE_VM_NAME" -- wait-for-it -t 100 127.0.0.1:22

    # If we have any chaninstate or blocks in our SSME, let's push them to the
    # remote host as a zfs volume that way deployments can share a common history
    # of chainstate/blocks.
    for CHAIN in testnet mainnet; do
        for DATA in blocks chainstate; do
            DATA_PATH="/home/ubuntu/.ss/cache/bitcoin/$CHAIN/$DATA"
            if [ -d "$DATA_PATH" ]; then
                COMPLETE_FILE_PATH="$DATA_PATH/complete"
                if lxc exec "$BASE_IMAGE_VM_NAME" -- [ ! -f "$COMPLETE_FILE_PATH" ]; then
                    lxc file push --recursive --project=default "$DATA_PATH/" "$BASE_IMAGE_VM_NAME/home/ubuntu/.ss/cache/bitcoin/$CHAIN/$DATA/"
                    lxc exec "$BASE_IMAGE_VM_NAME" -- su ubuntu - bash -c "echo $(date) > $COMPLETE_FILE_PATH"
                else
                    echo "INFO: it appears as though $CHAIN/$DATA has already been initialized. Continuing."
                fi
            fi
        done
    done

    # stop the VM and get a snapshot.
    lxc stop "$BASE_IMAGE_VM_NAME"
    lxc snapshot "$BASE_IMAGE_VM_NAME" "$UBUNTU_BASE_IMAGE_NAME"

fi

echo "INFO: Publishing '$BASE_IMAGE_VM_NAME' as image '$DOCKER_BASE_IMAGE_NAME'. Please wait."
lxc publish --public "$BASE_IMAGE_VM_NAME/$UBUNTU_BASE_IMAGE_NAME" --project=default --alias="$DOCKER_BASE_IMAGE_NAME"

echo "INFO: Success! We can now delete the base image."
lxc delete -f "$BASE_IMAGE_VM_NAME"

# now let's get a snapshot of each of the blocks/chainstate directories.
for CHAIN in testnet mainnet; do
    for DATA in blocks chainstate; do
        lxc storage volume snapshot ss-base --project=default "$CHAIN-$DATA" 
    done
done