X PrimeFlow

AtomOne

AtomOne
Chain ID: atomone-testnet-1
Block Height:
Network Status: Connecting
Explorer
atomone-testnet-1

Manual node installation

AtomOne reviewed manual node installation and validator workflow.

BonyNode setup profile

Configure once โ€” generate every command

These values update the AtomOne installation, wallet, validator, sync and firewall commands below.

No seed phrases or private keys
Advanced node settings

Optional pruning, indexer and validator defaults.

Recommended hardware: 6 Cores, 8GB RAM, 500GB of storage (NVME)Profile is valid โ€” commands are ready

Network: Testnet

Chain ID: atomone-testnet-1

Guide review: 2026-08-27 ยท 4 source references

Reviewed binary version: v4.0.0-rc1

Recommended hardware: 6 Cores, 8GB RAM, 500GB of storage (NVME)

Go version: 1.26.1

Binary: atomoned

Node home: ~/.atomone

Prepare the node host

# install dependencies
sudo apt update
sudo apt install -y ca-certificates curl git wget htop tmux build-essential jq make lz4 gcc unzip

# install Go, if needed
cd "$HOME"
VER="1.26.1"
case "$(uname -m)" in
  x86_64) ARCH="amd64" ;;
  aarch64|arm64) ARCH="arm64" ;;
  *) echo "Unsupported architecture: $(uname -m)" >&2; exit 1 ;;
esac
GO_FILE="go${VER}.linux-${ARCH}.tar.gz"
GO_SHA256=$(curl -fsSL 'https://go.dev/dl/?mode=json&include=all' \
  | jq -r --arg file "$GO_FILE" '.[] | .files[] | select(.filename == $file) | .sha256' \
  | head -n 1)
test -n "$GO_SHA256"
curl -fL --retry 3 "https://go.dev/dl/$GO_FILE" -o "$GO_FILE"
printf '%s  %s\n' "$GO_SHA256" "$GO_FILE" | sha256sum --check -

if [ -d /usr/local/go ]; then
  sudo mv /usr/local/go "/usr/local/go.backup.$(date -u +%Y%m%dT%H%M%SZ)"
fi
sudo tar -C /usr/local -xzf "$GO_FILE"
rm -f "$GO_FILE"
touch "$HOME/.bash_profile"
grep -qxF 'export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin' "$HOME/.bash_profile" \
  || echo 'export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin' >> "$HOME/.bash_profile"
source "$HOME/.bash_profile"
mkdir -p "$HOME/go/bin"
go version

Set node variables

# set variables
ENV_FILE="$HOME/.bonynode-atomone.env"
cat > "$ENV_FILE" <<'EOF'
export WALLET='wallet'
export MONIKER='validator-name'
export ATOMONE_CHAIN_ID='atomone-testnet-1'
export ATOMONE_PORT='35'
export ATOMONE_HOME="$HOME/.atomone"
export DAEMON_NAME='atomoned'
EOF
chmod 600 "$ENV_FILE"

touch "$HOME/.bash_profile"
PROFILE_LINE='source "$HOME/.bonynode-atomone.env"'
grep -qxF "$PROFILE_LINE" "$HOME/.bash_profile" || echo "$PROFILE_LINE" >> "$HOME/.bash_profile"
source "$ENV_FILE"

printf 'Wallet: %s | Moniker: %s | Chain ID: %s | Port prefix: %s\n' \
  "$WALLET" "$MONIKER" "$ATOMONE_CHAIN_ID" "$ATOMONE_PORT"

Build the pinned node binary

set -euo pipefail
RELEASE="v4.0.0-rc1"
EXPECTED_COMMIT="cd26cecf2278459245fdda215613a1a728202d3c"
SOURCE_DIR="$HOME/atomone-testnet-v4.0.0-rc1"

test ! -e "$SOURCE_DIR" || { echo "Stop: $SOURCE_DIR already exists; review it first." >&2; exit 1; }
git clone --branch "$RELEASE" --depth 1 https://github.com/atomone-hub/atomone.git "$SOURCE_DIR"
ACTUAL_COMMIT=$(git -C "$SOURCE_DIR" rev-parse HEAD)
[ "$ACTUAL_COMMIT" = "$EXPECTED_COMMIT" ] || { echo "Unexpected source commit: $ACTUAL_COMMIT" >&2; exit 1; }
cd "$SOURCE_DIR"
make build
test -x "build/atomoned"
sudo install -m 0755 "build/atomoned" "/usr/local/bin/atomoned"
"atomoned" version --long || "atomoned" version

# Verify which binary will be used before initialization.
command -v "atomoned"
"atomoned" version

Initialize a new node home

set -euo pipefail
BIN="atomoned"
CHAIN_ID="atomone-testnet-1"
MONIKER='validator-name'
NODE_HOME="$HOME/.atomone"

command -v "$BIN"
test ! -e "$NODE_HOME" || { echo "Stop: $NODE_HOME already exists; back it up and review it first." >&2; exit 1; }
"$BIN" init "$MONIKER" --chain-id "$CHAIN_ID" --home "$NODE_HOME"
test -f "$NODE_HOME/config/genesis.json"

set -euo pipefail
CHAIN_ID="atomone-testnet-1"
NODE_HOME="$HOME/.atomone"
CLIENT_TOML="$NODE_HOME/config/client.toml"
LOCAL_RPC="tcp://127.0.0.1:35657"

test -f "$CLIENT_TOML"
cp --no-clobber "$CLIENT_TOML" "$CLIENT_TOML.bonynode-backup" || true
sed -i -E \
  -e "s|^chain-id[[:space:]]*=.*|chain-id = \"$CHAIN_ID\"|" \
  -e 's|^keyring-backend[[:space:]]*=.*|keyring-backend = "os"|' \
  -e "s|^node[[:space:]]*=.*|node = \"$LOCAL_RPC\"|" \
  "$CLIENT_TOML"
grep -E '^(chain-id|keyring-backend|node)[[:space:]]*=' "$CLIENT_TOML"

Install genesis and configure peers

set -euo pipefail
CHAIN_ID='atomone-testnet-1'
NODE_HOME="$HOME/.atomone"
GENESIS_URL='https://testnet-files.bonynode.online/atomone/genesis.json'
GENESIS_SHA256='5bd5d327fd294d8e9653ab97f28703df7d7e59d84238249bdd8dc7ed33408100'
GENESIS_MAX_BYTES=600000000
WORK_DIR=$(mktemp -d)
trap 'rm -rf "$WORK_DIR"' EXIT
GENESIS_DOWNLOAD="$WORK_DIR/genesis.download"
GENESIS_JSON="$WORK_DIR/genesis.json"
GENESIS_CHUNK="$WORK_DIR/genesis-chunk-zero.json"

test -d "$NODE_HOME/config"
curl --fail --show-error --location --retry 3 \
  --connect-timeout 15 --max-time 1800 --proto '=https' --proto-redir '=https' \
  --max-filesize "$GENESIS_MAX_BYTES" --output "$GENESIS_JSON" "$GENESIS_URL"
jq -e --arg chain "$CHAIN_ID" 'type == "object" and .chain_id == $chain and (.app_state | type == "object")' "$GENESIS_JSON" >/dev/null
printf '%s  %s\n' "$GENESIS_SHA256" "$GENESIS_JSON" | sha256sum --check -
cp --no-clobber "$NODE_HOME/config/genesis.json" "$NODE_HOME/config/genesis.json.init-backup" || true
install -m 0644 "$GENESIS_JSON" "$NODE_HOME/config/genesis.json"
printf 'Installed verified genesis for %s (%s)\n' "$CHAIN_ID" "$GENESIS_SHA256"

set -euo pipefail
NODE_HOME="$HOME/.atomone"
ADDRBOOK_URL='https://testnet-files.bonynode.online/atomone/addrbook.json'
ADDRBOOK_SHA256='4898fb9eaa6d8a045311097dd5e15b9c22b404302fa52724c10ea80106663f71'
ADDRBOOK_MAX_BYTES=1000000
WORK_DIR=$(mktemp -d)
trap 'rm -rf "$WORK_DIR"' EXIT
ADDRBOOK_JSON="$WORK_DIR/addrbook.json"

test -d "$NODE_HOME/config"
curl --fail --show-error --location --retry 3   --connect-timeout 15 --max-time 120 --proto '=https' --proto-redir '=https'   --max-filesize "$ADDRBOOK_MAX_BYTES" --output "$ADDRBOOK_JSON" "$ADDRBOOK_URL"
jq -e 'type == "object" and (.addrs | type == "array") and (.addrs | length > 0)' "$ADDRBOOK_JSON" >/dev/null
printf '%s  %s
' "$ADDRBOOK_SHA256" "$ADDRBOOK_JSON" | sha256sum --check -
cp --no-clobber "$NODE_HOME/config/addrbook.json" "$NODE_HOME/config/addrbook.json.init-backup" || true
install -m 0644 "$ADDRBOOK_JSON" "$NODE_HOME/config/addrbook.json"
printf 'Installed reviewed addrbook (%s peers, %s)
' 103 "$ADDRBOOK_SHA256"

Apply ports, pruning, gas and network settings

set -euo pipefail
NODE_HOME="$HOME/.atomone"
APP_TOML="$NODE_HOME/config/app.toml"
CONFIG_TOML="$NODE_HOME/config/config.toml"

test -f "$APP_TOML"
test -f "$CONFIG_TOML"
cp --no-clobber "$APP_TOML" "$APP_TOML.bonynode-backup" || true
cp --no-clobber "$CONFIG_TOML" "$CONFIG_TOML.bonynode-backup" || true

# Application API, gRPC and optional EVM ports.
sed -i \
  -e 's|:1317|:35317|g' \
  -e 's|:8080|:35080|g' \
  -e 's|:9090|:35090|g' \
  -e 's|:9091|:35091|g' \
  -e 's|:8545|:35545|g' \
  -e 's|:8546|:35546|g' \
  -e 's|:6065|:35065|g' \
  "$APP_TOML"

# CometBFT RPC, P2P, proxy-app, pprof and Prometheus ports.
sed -i \
  -e 's|:26658|:35658|g' \
  -e 's|:26657|:35657|g' \
  -e 's|:6060|:35060|g' \
  -e 's|:26656|:35656|g' \
  -e 's|:26660|:35660|g' \
  "$CONFIG_TOML"

sed -i -E \
  -e 's|^pruning[[:space:]]*=.*|pruning = "custom"|' \
  -e 's|^pruning-keep-recent[[:space:]]*=.*|pruning-keep-recent = "100"|' \
  -e 's|^pruning-keep-every[[:space:]]*=.*|pruning-keep-every = "0"|' \
  -e 's|^pruning-interval[[:space:]]*=.*|pruning-interval = "19"|' \
  "$APP_TOML"
sed -i -E 's|^indexer[[:space:]]*=.*|indexer = "null"|' "$CONFIG_TOML"
sed -i -E 's|^prometheus[[:space:]]*=.*|prometheus = true|' "$CONFIG_TOML"

grep -E '^(pruning|pruning-keep-recent|pruning-interval)[[:space:]]*=' "$APP_TOML"
grep -E '^(indexer|prometheus)[[:space:]]*=' "$CONFIG_TOML"
printf 'RPC=%s P2P=%s API=%s gRPC=%s Prometheus=%s\n' \
  '35657' '35656' '35317' \
  '35090' '35660'

set -euo pipefail
APP_TOML="$HOME/.atomone/config/app.toml"
test -f "$APP_TOML"
cp --no-clobber "$APP_TOML" "$APP_TOML.bonynode-backup" || true

if grep -q '^minimum-gas-prices' "$APP_TOML"; then
  sed -i 's|^minimum-gas-prices *=.*|minimum-gas-prices = "7500uatone"|' "$APP_TOML"
else
  printf '\nminimum-gas-prices = "7500uatone"\n' >> "$APP_TOML"
fi
grep '^minimum-gas-prices' "$APP_TOML"

Create the service, start and verify the node

set -euo pipefail
BIN="atomoned"
CHAIN_ID="atomone-testnet-1"
NODE_HOME="$HOME/.atomone"
SERVICE="atomoned.service"
BIN_PATH=$(command -v "$BIN")
SERVICE_USER="$USER"
LOCAL_RPC_PORT="35657"

test -x "$BIN_PATH"
test -s "$NODE_HOME/config/genesis.json"
sudo tee "/etc/systemd/system/$SERVICE" >/dev/null <<EOF
[Unit]
Description=AtomOne node
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=${SERVICE_USER}
ExecStart=${BIN_PATH} start --home ${NODE_HOME}
Restart=on-failure
RestartSec=5
LimitNOFILE=65535

[Install]
WantedBy=multi-user.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable --now "$SERVICE"
sudo systemctl status "$SERVICE" --no-pager

# Wait briefly for the local RPC listener and require the configured chain ID.
for attempt in {1..30}; do
  if STATUS=$(curl --fail --silent "http://127.0.0.1:$LOCAL_RPC_PORT/status"); then
    jq -e --arg chain "$CHAIN_ID" '.result.node_info.network == $chain' <<<"$STATUS"
    exit 0
  fi
  sleep 2
done
echo 'Local RPC did not become ready; inspect the service journal.' >&2
sudo journalctl -u "$SERVICE" -n 100 --no-pager
exit 1

Node sync checker

Compare the selected local RPC height with the chain-verified BonyNode reference. Stop with Ctrl+C.

#!/usr/bin/env bash

CHAIN_ID="atomone-testnet-1"
CONFIG="$HOME/.atomone/config/config.toml"
RPC_PORT=$(grep -m 1 -oP '^laddr = "\K[^"]+' "$CONFIG" | cut -d ':' -f 3)
RPC_PORT="${RPC_PORT:-35657}"
NETWORK_RPC="https://atomone-testnet-rpc.bonynode.online"

while true; do
  LOCAL_STATUS=$(curl -fsS --max-time 10 "http://127.0.0.1:$RPC_PORT/status" 2>/dev/null || true)
  NETWORK_STATUS=$(curl -fsS --max-time 10 "$NETWORK_RPC/status" 2>/dev/null || true)
  LOCAL_CHAIN=$(jq -r '.result.node_info.network // empty' <<<"$LOCAL_STATUS" 2>/dev/null)
  NETWORK_CHAIN=$(jq -r '.result.node_info.network // empty' <<<"$NETWORK_STATUS" 2>/dev/null)
  LOCAL_HEIGHT=$(jq -r '.result.sync_info.latest_block_height // empty' <<<"$LOCAL_STATUS" 2>/dev/null)
  NETWORK_HEIGHT=$(jq -r '.result.sync_info.latest_block_height // empty' <<<"$NETWORK_STATUS" 2>/dev/null)

  if [[ "$LOCAL_CHAIN" != "$CHAIN_ID" || "$NETWORK_CHAIN" != "$CHAIN_ID" ||
        ! "$LOCAL_HEIGHT" =~ ^[0-9]+$ || ! "$NETWORK_HEIGHT" =~ ^[0-9]+$ ]]; then
    echo -e "\033[1;31mError: invalid RPC response. Retrying...\033[0m"
    sleep 5
    continue
  fi

  BLOCKS_LEFT=$((NETWORK_HEIGHT - LOCAL_HEIGHT))
  (( BLOCKS_LEFT < 0 )) && BLOCKS_LEFT=0
  echo -e "\033[1;33mNode Height:\033[1;34m $LOCAL_HEIGHT\033[0m \033[1;33m| Network Height:\033[1;36m $NETWORK_HEIGHT\033[0m \033[1;33m| Blocks Left:\033[1;31m $BLOCKS_LEFT\033[0m"
  sleep 5
done

Create or restore wallet

set -euo pipefail
BIN="atomoned"
WALLET='wallet'
[[ "$WALLET" =~ ^[a-zA-Z0-9_-]{1,64}$ ]] || { echo "Invalid wallet name" >&2; exit 1; }

# Create a new key. Store the mnemonic offline; it cannot be recovered by BonyNode.
"$BIN" keys add "$WALLET"

# To restore an existing key, run this separately:
# "$BIN" keys add "$WALLET" --recover

WALLET_ADDRESS=$("$BIN" keys show "$WALLET" -a)
"$BIN" query bank balances "$WALLET_ADDRESS"

Create validator

Legacy direct flags. A compatibility check stops before signing when the selected binary does not support this form.

#!/usr/bin/env bash
set -euo pipefail

BIN="atomoned"
CHAIN_ID="atomone-testnet-1"
WALLET='wallet'
MONIKER='validator-name'
IDENTITY=''
WEBSITE=''
DETAILS='Independent validator'
AMOUNT="1000000uatone"
MIN_SELF_DELEGATION="1"
COMMISSION_RATE="0.10"
COMMISSION_MAX_RATE="0.20"
COMMISSION_MAX_CHANGE="0.01"
if PUBKEY_JSON=$("$BIN" comet show-validator 2>/dev/null); then
  :
else
  PUBKEY_JSON=$("$BIN" tendermint show-validator)
fi
jq -e 'type == "object"' <<<"$PUBKEY_JSON" >/dev/null

"$BIN" tx staking create-validator \
  --amount "$AMOUNT" \
  --from "$WALLET" \
  --commission-rate "$COMMISSION_RATE" \
  --commission-max-rate "$COMMISSION_MAX_RATE" \
  --commission-max-change-rate "$COMMISSION_MAX_CHANGE" \
  --min-self-delegation "$MIN_SELF_DELEGATION" \
  --pubkey "$PUBKEY_JSON" \
  --moniker "$MONIKER" \
  --identity "$IDENTITY" \
  --website "$WEBSITE" \
  --details "$DETAILS" \
  --chain-id "$CHAIN_ID" \
  --gas 300000 --fees 7500uatone \
  --yes

Basic host firewall

set -euo pipefail

P2P_PORT="35656"
sudo ufw default allow outgoing
sudo ufw default deny incoming
sudo ufw allow OpenSSH
sudo ufw allow "$P2P_PORT/tcp"
sudo ufw enable
sudo ufw status verbose

# RPC/API/gRPC remain private unless you deliberately add authenticated
# reverse-proxy rules. Never expose validator signing services publicly.
Advanced and recovery operations

Reversible decommission

This procedure stops and disables the service but retains the node home, binary and service file. Verify the backup before any later deletion.

set -euo pipefail

SERVICE="atomoned"
NODE_HOME="$HOME/.atomone"
STAMP=$(date -u +%Y%m%dT%H%M%SZ)
RETIRED_HOME="$NODE_HOME.retired.$STAMP"
KEY_BACKUP="$HOME/atomoned-validator-keys-$STAMP.tar.gz"
NODE_STOPPED=0

rollback() {
  trap - ERR INT TERM
  if [ "$NODE_STOPPED" -eq 1 ]; then sudo systemctl start "$SERVICE" || true; fi
  exit 1
}
trap rollback ERR INT TERM

test -d "$NODE_HOME"
test ! -e "$RETIRED_HOME"
test -s "$NODE_HOME/config/priv_validator_key.json"
test -s "$NODE_HOME/data/priv_validator_state.json"
sudo systemctl stop "$SERVICE"
NODE_STOPPED=1

# Back up validator identity/state before moving anything.
tar -czf "$KEY_BACKUP" -C "$NODE_HOME" \
  config/priv_validator_key.json config/node_key.json data/priv_validator_state.json
test -s "$KEY_BACKUP"
mv "$NODE_HOME" "$RETIRED_HOME"
sudo systemctl disable "$SERVICE"
NODE_STOPPED=0
trap - ERR INT TERM

echo "Node home was retained at: $RETIRED_HOME"
echo "Critical key backup: $KEY_BACKUP"
echo "No binary, service file or node data was deleted."