#!/usr/bin/env bash # AIB Node installer — no root required, installs to ~/.aib # Usage: curl -sSfL https://aib.one/install.sh | bash set -euo pipefail VERSION="v0.11.30-testnet" REPO="aib-protocol/aib" # Pinned artifact hashes (multi-source integrity anchor). # Every source must match the pinned hash or the installer refuses to run. PINNED_SHA256_AMD64="fe62e0fa24e969731c215a408f4f175f813052bd58aad41b4ed1079807088eb5" PINNED_SHA256_ARM64="cc3aa66eb3c251ccc6d0a22546758abddb27c51bee464e0aa813e1311b247cda" # darwin/arm64 (Apple Silicon); linux/arm64 not shipped yet INSTALL_DIR="${AIB_HOME:-$HOME/.aib}" BIN_DIR="$INSTALL_DIR/bin" BIN="$BIN_DIR/aib-node" SERVICE_NAME="aib-node" # ---------- pretty output ---------- info() { printf '\033[1;34m[AIB]\033[0m %s\n' "$*"; } ok() { printf '\033[1;32m ✓\033[0m %s\n' "$*"; } warn() { printf '\033[1;33m !\033[0m %s\n' "$*"; } die() { printf '\033[1;31m[AIB] ERROR:\033[0m %s\n' "$*" >&2; exit 1; } # ---------- verify mode: cross-check hashes against on-chain anchors ---------- # bash install.sh --verify # Fetches /release.json (served from each node's P2P port, backed by the # on-chain release anchor) from every known node, takes the MAJORITY # record, and compares BOTH hashes: the running script and the binary. VERIFY_NODES=( "http://182.61.43.222:51414" "http://212.56.43.128:51413" "http://212.56.43.128:51415" "http://154.53.40.40:51414" ) if [ "${1:-}" = "--verify" ]; then SELF="$(sha256sum "$0" 2>/dev/null | awk '{print $1}')" info "self (install.sh) sha256 = $SELF" declare -A VOTES ANSWERED=0 for N in "${VERIFY_NODES[@]}"; do J="$(curl -s --max-time 8 "$N/release.json" 2>/dev/null)" || continue R_NAME="$(printf '%s' "$J" | grep -o '"name":"[^"]*"' | cut -d'"' -f4)" R_BIN="$(printf '%s' "$J" | grep -o '"sha256":"[^"]*"' | cut -d'"' -f4)" R_INS="$(printf '%s' "$J" | grep -o '"installer_sha256":"[^"]*"' | cut -d'"' -f4)" [ -n "$R_NAME" ] || continue ANSWERED=$((ANSWERED+1)) KEY="$R_NAME|$R_BIN|$R_INS" VOTES["$KEY"]=$(( ${VOTES["$KEY"]:-0} + 1 )) info "$N -> $R_NAME bin=${R_BIN:0:12}... ins=${R_INS:0:12}..." done [ "$ANSWERED" -ge 2 ] || die "fewer than 2 nodes answered /release.json — cannot establish majority" BEST=""; BEST_N=0 for K in "${!VOTES[@]}"; do if [ "${VOTES[$K]}" -gt "$BEST_N" ]; then BEST_N="${VOTES[$K]}"; BEST="$K"; fi done [ "$BEST_N" -ge 2 ] || die "no majority among node answers (split answers = possible attack)" A_NAME="${BEST%%|*}"; REST="${BEST#*|}" A_BIN="${REST%%|*}"; A_INS="${REST#*|}" ok "Majority ($BEST_N/$ANSWERED): on-chain anchor for $A_NAME" PASS=1 if [ -n "$A_INS" ] && [ "$A_INS" != "$SELF" ]; then warn "SCRIPT HASH MISMATCH: anchor=$A_INS self=$SELF"; PASS=0 fi if [ -x "$BIN" ]; then LOCAL_BIN="$(sha256sum "$BIN" | awk '{print $1}')" if [ "$LOCAL_BIN" != "$A_BIN" ]; then warn "LOCAL BINARY MISMATCH: anchor=$A_BIN local=$LOCAL_BIN"; PASS=0 else ok "local binary matches on-chain anchor" fi fi if [ "$A_NAME" != "$VERSION" ]; then warn "this script targets $VERSION but chain anchors $A_NAME (script may be stale, not malicious)" fi [ "$PASS" = "1" ] && ok "VERIFY PASS — script + binary match the PoS-chain anchored release" || die "VERIFY FAIL" exit 0 fi # ---------- detect ---------- OS="$(uname -s | tr '[:upper:]' '[:lower:]')" ARCH="$(uname -m)" case "$OS" in linux) OS="linux" ;; darwin) OS="darwin" ;; *) die "Unsupported OS: $OS (linux/darwin only for now)" ;; esac case "$ARCH" in x86_64|amd64) ARCH="amd64" ;; aarch64|arm64) ARCH="arm64" ;; *) die "Unsupported architecture: $ARCH" ;; esac ASSET="aib-node-${OS}-${ARCH}" info "Detected: ${OS}/${ARCH} → ${ASSET}" # Linux/arm64 not shipped yet (darwin/arm64 is) — fail early with a clear msg if [ "$OS" = "linux" ] && [ "$ARCH" = "arm64" ]; then die "linux/arm64 build not shipped yet (darwin/arm64 is). Ask the team or build from source: github.com/aib-protocol/aib" fi # root not needed — refuse if running as root unnecessarily if [ "$(id -u)" = "0" ]; then warn "Running as root — AIB does not need root. Installing for root user anyway." fi # ---------- download (multi-source, censorship resistant) ---------- # Order: GitHub -> aib.one mirror -> community P2P nodes. # Every source serves the SAME file; the pinned hash above is the only # trust anchor - a malicious mirror cannot make us execute bad code. SOURCES=( "https://github.com/${REPO}/releases/download/${VERSION}" "https://aib.one/releases/${VERSION}" "http://182.61.43.222:51414/${VERSION}" "http://154.53.40.40:51414/${VERSION}" "http://216.180.75.219:51413/${VERSION}" "http://144.91.108.90:51413/${VERSION}" ) PINNED="" case "$ARCH" in amd64) PINNED="$PINNED_SHA256_AMD64" ;; arm64) PINNED="$PINNED_SHA256_ARM64" ;; esac case "$PINNED" in ""|__*) die "pinned hash missing for $ARCH" ;; esac mkdir -p "$BIN_DIR" GOT="" for SRC in "${SOURCES[@]}"; do info "Trying ${SRC} ..." rm -f "$BIN.tmp" if command -v curl >/dev/null 2>&1; then curl -sSfL --max-time 60 "${SRC}/${ASSET}" -o "$BIN.tmp" 2>/dev/null || continue else wget -q --timeout=60 "${SRC}/${ASSET}" -O "$BIN.tmp" 2>/dev/null || continue fi [ -s "$BIN.tmp" ] || continue GOT="$(sha256sum "$BIN.tmp" 2>/dev/null | awk '{print $1}' || shasum -a 256 "$BIN.tmp" | awk '{print $1}')" if [ "$GOT" = "$PINNED" ]; then ok "Downloaded + pinned sha256 verified from ${SRC}" break fi warn "Hash mismatch from ${SRC} - trying next source" GOT="" done [ -n "$GOT" ] || die "all download sources failed or returned bad hashes" chmod +x "$BIN.tmp" mv "$BIN.tmp" "$BIN" ok "Installed: $BIN ($("$BIN" --help >/dev/null 2>&1; echo v0.11.30-testnet))" # ---------- config / data ---------- mkdir -p "$INSTALL_DIR/data" [ -f "$INSTALL_DIR/config.toml" ] || cat > "$INSTALL_DIR/config.toml" <<'CFG' # AIB node configuration — defaults are fine for testnet network = "testnet" block_time = 30 # api_port = 8080 # p2p_port = 51413 # bootstrap = "" # nickname = "" CFG ok "Config: $INSTALL_DIR/config.toml" # ---------- PATH hint ---------- case ":$PATH:" in *":$BIN_DIR:"*) ;; *) warn "Add to PATH: export PATH=\"\$PATH:$BIN_DIR\"" ;; esac # ---------- pick a free P2P port (51413 default; bump if taken) ---------- P2P_PORT=51413 while ss -tlnH "( sport = :$P2P_PORT )" 2>/dev/null | grep -q .; do P2P_PORT=$((P2P_PORT+1)) done [ "$P2P_PORT" != "51413" ] && info "Port 51413 busy — using P2P port $P2P_PORT" # ---------- external-disk detection (protect the system disk) ---------- # Blockchain + logs grow unbounded; prefer a non-root mount when available. DATA_DIR="$INSTALL_DIR" # default: system disk EXT_CAND=$(awk '$3 ~ /^(ext[234]|xfs|btrfs|f2fs|exfat|vfat|ntfs|apfs)$/ && $2!="/" && $2!~/^\/boot/ && $2!~/^\/snap/ && $2!~/^\/proc/ && $2!~/^\/sys/ && $2!~/^\/dev/ && $2!~/^\/run/ && $2!~/^\/var\/lib\/docker/ && $2!~/^\/etc/ {print $2}' /proc/mounts | sort -u | while read -r m; do free_kb=$(df -k "$m" 2>/dev/null | awk 'NR==2{print $4}') dev=$(df "$m" 2>/dev/null | awk 'NR==2{print $1}') root_dev=$(df / 2>/dev/null | awk 'NR==2{print $1}') [ -n "$free_kb" ] && [ "$free_kb" -ge 2097152 ] && [ "$dev" != "$root_dev" ] && echo "$free_kb $m" done | sort -rn | head -1 | awk '{print $2}') if [ -n "$EXT_CAND" ]; then EXT_DATA="$EXT_CAND/aib-node" if [ -t 0 ]; then echo warn "External disk detected: $EXT_CAND ($(df -h "$EXT_CAND" | awk 'NR==2{print $4}') free)" printf " Store blockchain data there (protects system disk)? [Y/n] " read -r ans || ans=y case "$ans" in n|N*) info "Keeping data on system disk ($INSTALL_DIR)" ;; *) DATA_DIR="$EXT_DATA"; ok "Data will be stored on: $DATA_DIR" ;; esac else # Non-interactive (curl|bash): auto-pick the external disk. DATA_DIR="$EXT_DATA" ok "External disk detected — data goes to $DATA_DIR (protects system disk)" fi fi [ -n "${AIB_DATA_DIR:-}" ] && DATA_DIR="$AIB_DATA_DIR" # explicit override wins NODE_ARGS="-data-dir $DATA_DIR -api-port 8080 -p2p-port $P2P_PORT" # ---------- macOS: LIGHT NODE by default (user's call: Macs are not servers) ---------- # Light = prune to last 500 blocks (~4h of chain, tens of MB), on-demand sync # (start when you want, close when done), never a validator. MAC_LIGHT=0 if [ "$OS" = "darwin" ]; then MAC_LIGHT=1 NODE_ARGS="$NODE_ARGS -prune-keep-blocks 500" ok "macOS detected — LIGHT node mode: last 500 blocks kept (~4h chain, tiny disk)" fi # ---------- kill any stale node from a previous install ---------- # A stale process may still serve an OLD chain on port 8080 and fool the # health check below. Stop it so the freshly installed binary takes over. if pgrep -f aib-node >/dev/null 2>&1; then info "Stopping existing aib-node process(es)..." systemctl --user stop aib-node >/dev/null 2>&1 || true pkill -f aib-node >/dev/null 2>&1 || true sleep 2 pgrep -f aib-node >/dev/null 2>&1 && { pkill -9 -f aib-node >/dev/null 2>&1 || true; sleep 1; } systemctl --user reset-failed aib-node >/dev/null 2>&1 || true ok "Old node stopped" fi # ---------- systemd --user (Linux only) ---------- RUN_NOW=0 if [ "$OS" = "linux" ] && command -v systemctl >/dev/null 2>&1; then mkdir -p "$HOME/.config/systemd/user" cat > "$HOME/.config/systemd/user/${SERVICE_NAME}.service" </dev/null || true systemctl --user enable --now "${SERVICE_NAME}.service" 2>/dev/null && ok "Service started (systemd --user: aib-node)" || { info "systemd --user unavailable — starting in background automatically" RUN_BG=1 } # Without linger, the user manager (and the node with it) dies when the # user logs out and never starts at boot. Linger keeps it alive forever. if loginctl enable-linger "$USER" 2>/dev/null; then ok "Linger enabled — service survives logout and starts at boot" elif [ "$(id -u)" = "0" ] && loginctl enable-linger root 2>/dev/null; then ok "Linger enabled for root" else warn "Could not enable linger — node may stop when you log out" fi else if [ "$OS" = "darwin" ]; then info "macOS: NOT auto-starting — this is an on-demand light node (see aib-start below)" else info "No systemd — starting in background automatically" RUN_BG=1 fi fi # ---------- fallback: direct background run ---------- if [ "${RUN_BG:-0}" = "1" ]; then mkdir -p "$INSTALL_DIR" setsid nohup "$BIN" $NODE_ARGS >> "$INSTALL_DIR/node.log" 2>&1 < /dev/null & BG_PID=$! ok "Node started in background (pid $BG_PID, log: $INSTALL_DIR/node.log)" fi # ---------- health check: behavior-driven self-heal ---------- # A node that keeps failing to start (corrupt/old chain DB, genesis change) # shows up as: service active but /health never answers. We do NOT parse logs # (journald may be unreadable for the user); we watch behavior instead. if [ "$OS" = "darwin" ]; then # On-demand light node: verify the binary runs, write the start/stop/status # helpers, and start it once so the user sees it work. They stop it with # aib-stop whenever they like; nothing runs at login. cat > "$BIN_DIR/aib-start" </dev/null 2>&1; then echo "aib-node already running (pid \$(pgrep -f "$BIN " | tr '\n' ' '))"; exit 0; fi mkdir -p "$INSTALL_DIR" nohup "$BIN" $NODE_ARGS >> "$INSTALL_DIR/node.log" 2>&1 < /dev/null & echo "started (pid \$!) — syncing; height: curl -s 127.0.0.1:8080/v1/block/latest" EOF cat > "$BIN_DIR/aib-stop" < "$BIN_DIR/aib-status" </dev/null | grep -o '"height":[0-9]*' | head -1 | cut -d: -f2) echo "running (pid \$PID) height=\${H:-syncing}" fi EOF chmod +x "$BIN_DIR/aib-start" "$BIN_DIR/aib-stop" "$BIN_DIR/aib-status" ok "On-demand commands: aib-start / aib-stop / aib-status" "$BIN_DIR/aib-start" info "Waiting for node to come up..." UP=0 for i in $(seq 1 20); do if curl -s -o /dev/null --max-time 2 "http://127.0.0.1:8080/health" 2>/dev/null; then UP=1; break; fi sleep 1 done [ "$UP" = "1" ] && ok "Light node is UP — will catch up to tip; aib-stop when you're done" else info "Waiting for node to come up..." UP=0 for i in $(seq 1 20); do if curl -s -o /dev/null --max-time 2 "http://127.0.0.1:8080/health" 2>/dev/null; then UP=1; break; fi sleep 1 done fi heal_chain() { # archive chain DBs (keep wallet keys), restart warn "Node failing to start — archiving broken/old chain data (wallet keys kept)" systemctl --user stop aib-node >/dev/null 2>&1 || true pkill -f aib-node >/dev/null 2>&1 || true sleep 1 local TS BAK f d TS=$(date +%Y%m%d-%H%M%S); BAK="$HOME/.aib-oldchain-$TS"; mkdir -p "$BAK" for f in chain.db utxo.db block_index.db node.log; do for d in "$INSTALL_DIR" "$DATA_DIR"; do [ -f "$d/$f" ] && mv "$d/$f" "$BAK/" 2>/dev/null || true done done [ -d "$DATA_DIR/blocks" ] && mv "$DATA_DIR/blocks" "$BAK/" 2>/dev/null || true ok "Old chain data archived to $BAK" systemctl --user reset-failed aib-node >/dev/null 2>&1 || true systemctl --user start aib-node >/dev/null 2>&1 || { setsid nohup "$BIN" $NODE_ARGS >> "$INSTALL_DIR/node.log" 2>&1 < /dev/null & } for i in $(seq 1 25); do if curl -s -o /dev/null --max-time 2 "http://127.0.0.1:8080/health" 2>/dev/null; then return 0; fi sleep 1 done return 1 } if [ "$UP" = "0" ]; then warn "Node did not come up in 20s — attempting automatic repair..." if heal_chain; then ok "Repair successful — node is UP with a fresh chain (resyncing)" UP=1 fi fi if [ "$UP" = "1" ]; then ok "Node is UP: http://127.0.0.1:8080/health" else warn "Node still failing after repair. Last log lines:" tail -n 15 "$INSTALL_DIR/node.log" 2>/dev/null | sed 's/^/ /' warn "Try manually: systemctl --user status aib-node" warn "If stuck, archive data: mv ~/.aib ~/.aib-broken && rerun this installer" die "Install incomplete — send the log above to the team" fi # ---------- chain sync watchdog: detect broken/stale chains and self-heal ---------- height() { curl -s --max-time 4 "http://127.0.0.1:8080/v1/block/latest" 2>/dev/null | grep -o '"height":[0-9]*' | head -1 | cut -d: -f2; } info "Node is up. Checking chain sync against the network..." sleep 3 NET_H=$(curl -s --max-time 6 https://aib.one/v1/block/latest 2>/dev/null | grep -o '"height":[0-9]*' | head -1 | cut -d: -f2) H1=$(height); H1=${H1:-0} P=$(curl -s --max-time 4 http://127.0.0.1:8080/v1/peers 2>/dev/null | grep -o '"total":[0-9]*' | head -1 | cut -d: -f2) ok "Local height: $H1 | Network: ${NET_H:-?} | Peers: ${P:-0}" if [ -n "${NET_H:-}" ] && [ "$NET_H" -gt 0 ] 2>/dev/null; then if [ "$H1" -lt $((NET_H > 100 ? NET_H - 100 : 0)) ] 2>/dev/null; then info "Far behind network ($H1 vs $NET_H) — watching sync for 60s..." sleep 60 H2=$(height); H2=${H2:-0} if [ "$H2" -le "$H1" ]; then warn "Height stuck at $H1 (no progress in 60s) — chain data is stale" if heal_chain; then ok "Resync started — full history downloads in background"; fi else ok "Sync in progress ($H1 → $H2), continuing in background" fi fi fi # ---------- interactive setup: delegate ALL logic to the Go binary ---------- # (cross-platform, testable; prompts read /dev/tty so `curl | bash` works) if [ -x "$BIN" ]; then "$BIN" setup -data-dir "$DATA_DIR" -api-port 8080 -p2p-port "$P2P_PORT" || true else info "binary missing — skipping interactive setup" fi if [ "$OS" = "darwin" ]; then cat <<'DONE' ╔══════════════════════════════════════════════╗ AIB LIGHT node (macOS) · sync on demand ╚══════════════════════════════════════════════╝ Started : aib-start (sync now — catches up from where it left off) Stop : aib-stop (chain state kept; nothing runs in background) Status : aib-status (pid + height) Height : curl 127.0.0.1:8080/v1/block/latest Logs : tail -f ~/.aib/node.log Mode : LIGHT — last 500 blocks kept (tiny disk), on-demand sync, not a validator. Close the lid, it just stops; next aib-start catches up to tip automatically. (add ~/.aib/bin to PATH if the commands are not found: export PATH="$PATH:$HOME/.aib/bin") Explorer : https://aib.one/explorer.html DONE else cat <<'DONE' ╔══════════════════════════════════════════════╗ AIB node is RUNNING · one command, done ╚══════════════════════════════════════════════╝ Status : curl 127.0.0.1:8080/v1/block/latest Health : curl 127.0.0.1:8080/health Mining : curl 127.0.0.1:8080/v1/mining Logs : journalctl --user -u aib-node -f (or ~/.aib/node.log) Stop : systemctl --user stop aib-node (or: pkill -f aib-node) ── Start MINING (optional) ──────────────────── Mining is OFF by default. To mine: 1. Get your wallet address: curl 127.0.0.1:8080/v1/wallet/info 2. Restart the node in validator mode: pkill -f aib-node setsid nohup ~/.aib/bin/aib-node \ -data-dir -api-port 8080 \ -p2p-port 51413 -validator \ >> ~/.aib/node.log 2>&1 & 3. Watch mining stats: curl 127.0.0.1:8080/v1/mining (mining rewards go to your node wallet; ~1 AIB per block) ── Your wallet ──────────────────────────────── Node wallet : curl 127.0.0.1:8080/v1/wallet/info (mining rewards go here; key file: node_key.pem in data dir) Balance : curl 127.0.0.1:8080/v1/balance/
New wallet : curl -s -X POST 127.0.0.1:8080/v1/wallet/create \ -H 'Content-Type: application/json' \ -d '{"label":"main"}' (private_key shown ONCE — save it!) Explorer : https://aib.one/explorer.html DONE fi