#!/bin/bash set -eu cd "$(dirname "$0")" bash -c "./stub_lxc_profile.sh --lxd-hostname=$BASE_IMAGE_VM_NAME" # let's download our base image. if ! lxc image list --format csv --columns l | grep -q "$UBUNTU_BASE_IMAGE_NAME"; then # if the image doesn't exist, download it from Ubuntu's image server # TODO see if we can fetch this file from a more censorship-resistant source, e.g., ipfs # we don't really need to cache this locally since it gets continually updated upstream. if [ -d "$SS_JAMMY_PATH" ]; then lxc image import "$SS_JAMMY_PATH/meta-bf1a2627bdddbfb0a9bf1f8ae146fa794800c6c91281d3db88c8d762f58bd057.tar.xz" \ "$SS_JAMMY_PATH/bf1a2627bdddbfb0a9bf1f8ae146fa794800c6c91281d3db88c8d762f58bd057.qcow2" \ --alias "$UBUNTU_BASE_IMAGE_NAME" else # copy the image down from canonical. lxc image copy "images:$BASE_LXC_IMAGE" "$REMOTE_NAME": --alias "$UBUNTU_BASE_IMAGE_NAME" --public --vm --auto-update fi fi # If the lxc VM does exist, then we will delete it (so we can start fresh) if lxc list --format csv -q | grep -q "$UBUNTU_BASE_IMAGE_NAME"; then # if there's no snapshot, we dispense with the old image and try again. if ! lxc info "$BASE_IMAGE_VM_NAME" | grep -q "$UBUNTU_BASE_IMAGE_NAME"; then lxc delete "$BASE_IMAGE_VM_NAME" --force ssh-keygen -f "$SSH_HOME/known_hosts" -R "$BASE_IMAGE_VM_NAME" fi else # the base image is ubuntu:22.04. lxc init --profile="$BASE_IMAGE_VM_NAME" "$UBUNTU_BASE_IMAGE_NAME" "$BASE_IMAGE_VM_NAME" --vm # TODO move this sovereign-stack-base construction VM to separate dedicated IP lxc config set "$BASE_IMAGE_VM_NAME" for CHAIN in mainnet testnet; do for DATA in blocks chainstate; do lxc storage volume attach ss-base "$CHAIN-$DATA" "$BASE_IMAGE_VM_NAME" "/home/ubuntu/.ss/cache/bitcoin/$CHAIN/$DATA" done done lxc start "$BASE_IMAGE_VM_NAME" sleep 15 while lxc exec "$BASE_IMAGE_VM_NAME" -- [ ! -f /var/lib/cloud/instance/boot-finished ]; do sleep 1 done # ensure the ssh service is listening at localhost lxc exec "$BASE_IMAGE_VM_NAME" -- wait-for-it -t 100 127.0.0.1:22 # If we have any chaninstate or blocks in our SSME, let's push them to the # remote host as a zfs volume that way deployments can share a common history # of chainstate/blocks. for CHAIN in testnet mainnet; do for DATA in blocks chainstate; do DATA_PATH="/home/ubuntu/.ss/cache/bitcoin/$CHAIN/$DATA" if [ -d "$DATA_PATH" ]; then COMPLETE_FILE_PATH="$DATA_PATH/complete" if lxc exec "$BASE_IMAGE_VM_NAME" -- [ ! -f "$COMPLETE_FILE_PATH" ]; then lxc file push --recursive --project=default "$DATA_PATH/" "$BASE_IMAGE_VM_NAME/home/ubuntu/.ss/cache/bitcoin/$CHAIN/$DATA/" lxc exec "$BASE_IMAGE_VM_NAME" -- su ubuntu - bash -c "echo $(date) > $COMPLETE_FILE_PATH" else echo "INFO: it appears as though $CHAIN/$DATA has already been initialized. Continuing." fi fi done done # stop the VM and get a snapshot. lxc stop "$BASE_IMAGE_VM_NAME" lxc snapshot "$BASE_IMAGE_VM_NAME" "$UBUNTU_BASE_IMAGE_NAME" fi echo "INFO: Publishing '$BASE_IMAGE_VM_NAME' as image '$DOCKER_BASE_IMAGE_NAME'. Please wait." lxc publish --public "$BASE_IMAGE_VM_NAME/$UBUNTU_BASE_IMAGE_NAME" --project=default --alias="$DOCKER_BASE_IMAGE_NAME" echo "INFO: Success! We can now delete the base image." lxc delete -f "$BASE_IMAGE_VM_NAME" # now let's get a snapshot of each of the blocks/chainstate directories. for CHAIN in testnet mainnet; do for DATA in blocks chainstate; do lxc storage volume snapshot ss-base --project=default "$CHAIN-$DATA" done done