Difference between revisions of "Node Provider Onboarding"

From Internet Computer Wiki
Jump to: navigation, search
m
m (Organize requirements)
Line 3: Line 3:
 
== Requirements ==
 
== Requirements ==
  
* [https://wiki.internetcomputer.org/wiki/Node_provider_hardware Node Hardware]
+
* [[Node Machine Hardware#What are the Hardware Requirements for Node Machines.3F|Node Hardware Requirements]]
* Rack space with a 10Gb connectivity, RJ45 terminated on the nodes
+
* [[Node Provider Network Setup Guide#The Bare Minimum Network Requirements|Network Requirements]]
* [[Node Provider Network Setup Guide#The Bare Minimum Network Requirements|Public IP addresses]]:
 
** One /64 IPv6 range
 
** One IPv4 address for every 4 node machines
 
 
* [https://www.ledger.com/ Hardware wallet]
 
* [https://www.ledger.com/ Hardware wallet]
* [https://shop.nitrokey.com/shop/product/nkhs2-nitrokey-hsm-2-7/ NitroKey HSM] (Optional)
+
* [https://shop.nitrokey.com/shop/product/nkhs2-nitrokey-hsm-2-7/ NitroKey HSM] (Optional, legacy—not recommended)
 
* 11 ICP (10 of which are to be staked for the NNS proposal deposit)
 
* 11 ICP (10 of which are to be staked for the NNS proposal deposit)
 
* Basic understanding of [[Neurons 101|neurons]], [https://internetcomputer.org/docs/current/tokenomics/nns/nns-staking-voting-rewards staking], and [[Governance of the Internet Computer|governance]] proposals. For instance, understanding what it means to stake a neuron for 8 years.
 
* Basic understanding of [[Neurons 101|neurons]], [https://internetcomputer.org/docs/current/tokenomics/nns/nns-staking-voting-rewards staking], and [[Governance of the Internet Computer|governance]] proposals. For instance, understanding what it means to stake a neuron for 8 years.
* The technical knowledge to understand some minor steps that are not explicitly mentioned in these instructions. For instance, when to insert an HSM.
 
  
  

Revision as of 19:55, 16 June 2023

Learn how to be accepted by the NNS as a node provider and onboard your nodes to the IC.

Requirements


Note: Please allocate at least 0.5 day for going through the node provider NNS registration (steps 1-9). It may even take a couple of days, depending on how quickly the community votes on your NNS proposals. Additionally, there is a fair amount of complexity and technical knowledge that needs to be absorbed in order to complete these steps, but this only needs to be done once.

Once the node provider NNS registration is complete, you can move on to step 10: Onboard nodes. This step involves you going to the DC and onboarding your nodes. It is much quicker than the node provider NNS registration (estimate to spend ~15 minutes per machine). Also, multiple machines can be brought up in parallel.

1. Install the required tools

A. Install ic-admin

ic-admin is the tool used to create and submit NNS proposals.

MacOS

  1. Retrieve the file
    $ curl "https://download.dfinity.systems/ic/7445081734e6d896d090295967d50710975c4f25/openssl-static-binaries/x86_64-darwin/ic-admin.gz" -o - | gunzip > ./ic-admin
    $ chmod +x ./ic-admin
    
  2. Verify the binary
    $ diff <(shasum -a 256 ./ic-admin | cut -d' ' -f1) <(echo 3f75026d2f28f171068e332a42c82a2795c93fbf5ab351baef30b30eb901cdba) && echo "ic-admin checksum matches" || echo "***ERROR***: ic-admin checksum does not match"
    

Linux

NOTE: The instructions below have been tested with the Ubuntu 20.04 release.

  1. Retrieve the file
    $ curl "https://download.dfinity.systems/ic/7445081734e6d896d090295967d50710975c4f25/openssl-static-binaries/x86_64-linux/ic-admin.gz" -o - | gunzip > ./ic-admin
    $ chmod +x ./ic-admin
    
  2. Verify the binary
    $ diff <(shasum -a 256 ./ic-admin | cut -d' ' -f1) <(echo e29bb9cc462e800b8b960ad49c412e5f5fdbb5ae2ae9fde0c13058422ba32802) && echo "ic-admin checksum matches" || echo "***ERROR***: ic-admin checksum does not match"
    

B. Install dfx

  1. dfx is used to generate neuron hotkeys, among other things
    $ sh -ci "$(curl -fsSL https://smartcontracts.org/install.sh)"
    
  2. Verify that dfx is up to date.
    $ export PATH=$HOME/bin:$PATH
    $ dfx upgrade
    $ dfx --version
    
  3. Create an identity for the Node Provider Hotkey
    $ dfx identity new node-provider-hotkey
    Created identity: "node-provider-hotkey".
    
    $ dfx --identity node-provider-hotkey identity get-principal
    wuyst-x5tpn-g5wri-mp3ps-vjtba-de3xs-w5xgb-crvek-tucbe-o5rqi-mae
    
    You will need the node provider hotkey in the next steps.


Note: The node provider hotkey is NOT the node provider principal. This is the hotkey that is used for the NNS proposal submissions only.

2. Create and Manage Neuron via NNS Frontend Dapp and Internet Identity

  1. Setup your hardware wallet: https://medium.com/dfinity/integrating-ledger-nano-with-the-nns-front-end-dapp-user-manual-9c5600925e16
  2. Send at least 11 ICPs to the hardware wallet address.
  3. Navigate to Neurons tab and create a Neuron by staking at least 10 ICP from your hardware wallet. Staking more ICP works as well, but 10 is the minimum.
  4. IMPORTANT! Confirm the transaction on your hardware wallet.
    stake neuron
  5. After the Neuron has been created successfully, confirm to "Add NNS Dapp as hotkey" in the dialogue and on your hardware wallet, and close the dialog after the action completes.
    neuron id
  6. Set the dissolve delay to at least 6 months, and confirm the choice in the dialogue and on your hardware wallet. After the action completes, you can close the "Follow Neurons".
    neuron id
  7. You will now see a Neuron listed with its ID. Copy the Neuron ID, since you will need it in the next steps to place the necessary proposals.
    Neuron id.png

3. Add hotkeys

  1. Select the Neuron you just created to open Neuron management view and press “Add hotkey” button.
    Hotkey 1.png
  2. A dialog will pop up where you can enter the hotkey you generated in step 2 (output from command dfx --identity node-provider-hotkey identity get-principal). This will allow you to submit NNS proposals using ic-admin and will not be used for anything else.
    Press the confirm button and confirm the transactions on your hardware wallet.
    Hotkey 2.png
  3. Get the Ledger Hardware Wallet Principal Id: Navigate back to ICP page and select your Ledger hardware wallet account. You will need to use this Ledger Hardware Wallet principal as the Node Provider principal in order to get the rewards directly into the secure hardware wallet.
    Node provider principal 1.png
    Node provider principal 2.png
  4. Copy and save this Node Provider principal by clicking on the copy icon after the principal id. You'll need it in the next steps.
    $ NODE_PROVIDER_PRINCIPAL=fharn-5vyi2-4xb4a-64yyi-3jpmj-pga23-mxy25-d5uim-fqcro-eoefh-tae   # Ledger Hardware Wallet principal, from the NNS FrontEnd dapp https://nns.ic0.app/
    

4. Choose onboarding path (HSM/no HSM)

Onboarding without a NitroKey HSM is the recommended onboarding path. If you will not be using a NitroKey HSM, continue to the next step.

If you wish to follow the legacy, NitroKey installation path, please follow the NitroKey HSM onboarding instructions and return to step 7.

5. Setup the Node Operator keys

  1. Ensure dfx is at least version 0.14. Node Operator keys created with older versions of dfx will fail to join the IC. Run:
    $ dfx upgrade
    $ dfx --version
    
  2. Create a new principal with dfx:
    $ dfx identity new --storage-mode=plaintext node_operator
    
  3. Confirm node_operator identity was created successfully:
    $ dfx identity list
    
    This list should contain node_operator.
  4. Copy new key to a known location:
    $ cp ~/.config/dfx/identity/node_operator/identity.pem ./node_operator_private_key.pem
    

6. Get the node operator principal

  1. Get the principal:
    $ NODE_OPERATOR_PRINCIPAL=$(dfx --identity node_operator identity get-principal)
    $ echo $NODE_OPERATOR_PRINCIPAL
    
    uqquy-76uhn-2mys5-xxxxx-xxxxx-xxxxx-xxxxx-xxxxx-xxxxx-xxxxx-xxx
    

You will need the node operator principal in the next steps.

7. Register your node provider principal to the network

In the next codeblock:

  • Replace the NEURON_ID value with your neuron ID from the NNS Frontend Dapp
  • Replace the NODE_PROVIDER_PRINCIPAL value with the Ledger Hardware Wallet principal that you got from the NNS Frontend DAPP.
  • Replace the NODE_PROVIDER_NAME value with the name of the entity that will provide the nodes.
  • IMPORTANT: Please make sure that you also update the --summary and include a link to the forum discussion, your company's web page, and/or to another place that can convince the voting community that you are making a legitimate request. This way you will avoid the community voting NO to your proposal and you losing your staked ICPs.
  1. Create the Proposal
    $ NODE_PROVIDER_NAME="My Company"
    $ NODE_PROVIDER_PRINCIPAL=fharn-5vyi2-4xb4a-64yyi-3jpmj-pga23-mxy25-d5uim-fqcro-eoefh-tae   # Ledger Hardware Wallet principal, from the NNS FE dapp https://ic0.app/
    $ NEURON_ID=13419667327548602649  # Coming from the NNS FrontEnd dapp https://nns.ic0.app/
    $ ./ic-admin \
            --nns-url https://ic0.app \
            -s ~/.config/dfx/identity/node-provider-hotkey/identity.pem \
        propose-to-add-or-remove-node-provider add \
            --proposer $NEURON_ID \
            --proposal-title "Register a node provider '${NODE_PROVIDER_NAME}'" \
            --summary "Register a node provider '${NODE_PROVIDER_NAME}', in line with the announcement and discussion at https://forum.dfinity.org/t/..." \
            --node-provider-pid "$NODE_PROVIDER_PRINCIPAL"
    
  2. Find the proposal on https://dashboard.internetcomputer.org/governance and wait until it is executed before proceeding to next step.

8. Ensure that your datacenter is registered in the network

  1. Search for your data center on https://dashboard.internetcomputer.org/centers.
    • If you found the datacenter that is hosting your nodes, remember its ID, and skip the following section. Otherwise, proceed with the registration of a new DC record.

Create a data center record for a new DC

In the next block of code:

  • Replace the --proposer argument value with your Neuron ID from the NNS Frontend Dapp.
  • Replace the JSON fields from –data-centers-to-add argument and their corresponding values in --summary with: "id"
  • The ID should be a combination of two letters representing a city that your datacenter is in, and an incrementing number. Search data center IDs on https://dashboard.internetcomputer.org, and find a combination of two letters and a number that’s not yet registered. Examples:
    • dl1 (Dallas, no IDs with “dl” prefix)
    • zh10 (Zurich, numbers 0-9 are already registered)

Dc id.png

  • "region" represents the local region of a datacenter and is formulated as a three-part string divided by commas. The three parts making the string are continent, country code, and region, in the given order. Examples:
    • North America,US,Florida
    • Europe,DE,Bavaria
    • Asia,SG,Singapore

Datacenter region.png

  • "owner" The entity that provides your datacenter facilities.
    • Search https://dashboard.internetcomputer.org for existing data center providers.
    • If there’s match, make sure you use the same exact some name for your datacenter.
    • Otherwise, name the data center owner to your best knowledge.

Datacenter owner.png

  • "gps" GPS coordinates.
    • Find your datacenter on https://www.google.com/maps/.
    • Right click on location, and select the GPS coordinates (first item in the menu) in order to copy them.

Getting GPS coordinates

  1. Create the proposal:
    $ NEURON_ID=13419667327548602649  # Coming from the NNS FE dapp https://nns.ic0.app/
    $ ./ic-admin \
            --nns-url https://ic0.app \
            -s ~/.config/dfx/identity/node-provider-hotkey/identity.pem \
        propose-to-add-or-remove-data-centers \
            --summary "Register a Flexential datacenter as dl1 in North America,US,Texas" \
            --skip-confirmation \
            --proposer $NEURON_ID \
            --data-centers-to-add '{
                "id": "dl1",
                "region": "North America,US,Texas",
                "owner": "Flexential",
                "gps": [
                    33.00803, -96.66614
                ]
            }'
    
  2. Find the proposal on https://dashboard.internetcomputer.org/governance and wait until it's executed before proceeding to next step.

9. Create a node operator record

In the next codeblock:

  • Replace the NEURON_ID variable value with your neuron ID obtained from the NNS frontend dapp.
  • Replace the NODE_PROVIDER_PRINCIPAL variable value with the principal obtained in step VI.
  • Replace the DC_ID variable value with id of your datacenter.
  • Replace the NODE_ALLOWANCE variable value with number of nodes you are providing.
  1. Create the proposal:
    $ NEURON_ID=13419667327548602649  # Coming from the NNS FE dapp https://nns.ic0.app/
    $ NODE_PROVIDER_PRINCIPAL=fharn-5vyi2-4xb4a-64yyi-3jpmj-pga23-mxy25-d5uim-fqcro-eoefh-tae   # Ledger Hardware Wallet principal, from the NNS FE dapp https://nns.ic0.app/
    $ NODE_OPERATOR_PRINCIPAL=uqquy-76uhn-2mys5-xxxxx-xxxxx-xxxxx-xxxxx-xxxxx-xxxxx-xxxxx-xxx   # Node Operator principal from step VI
    $ NODE_PROVIDER_NAME="My Company"
    $ NODE_ALLOWANCE=8
    $ DC_ID=dl1
    
    $ ./ic-admin \
            --nns-url https://ic0.app \
            -s ~/.config/dfx/identity/node-provider-hotkey/identity.pem \
        propose-to-add-node-operator \
            $NODE_PROVIDER_PRINCIPAL \
            --summary "Node provider '$NODE_PROVIDER_NAME' is adding $NODE_ALLOWANCE nodes in the $DC_ID data center" \
            --proposer $NEURON_ID \
            --node-operator-principal-id $NODE_OPERATOR_PRINCIPAL \
            --node-allowance $NODE_ALLOWANCE \
            --dc-id $DC_ID
    
  2. Find the proposal on https://dashboard.internetcomputer.org/governance and wait until it's executed before proceeding to next step.

10. Onboard nodes

  1. Follow the instructions to onboard new nodes:
  2. Verify that all the nodes were successfully onboarded by checking their status on the dashboard is set to either “Up” or “Unassigned”, or by checking the output from ic-admin get-topology command.
    • The internal dashboard can be searched by your provider principal.

onboarded nodes

See Also