Limonata

sudo apt-get update
sudo apt-get install -y ca-certificates curl jq tar

# This guide installs a checksum-verified official binary artifact.
# A Go toolchain is not required for the pinned binary path.

set -euo pipefail
cd "$HOME"
ARCHIVE="limonatad-linux-amd64-v0.2.0.tar.gz"
DEST="limonata-v0.2.0"
test ! -e "$ARCHIVE"
test ! -e "$DEST"
curl --fail --show-error --location --proto "=https" --output "$ARCHIVE" https://github.com/Limonata-Blockchain/limonata/releases/download/limonata-testnet-v0.2.0/limonatad-linux-amd64.tar.gz
printf '%s  %s\n' '1396a04091608128047a89b1c24946bbc700543c5217129265145c9d5e4f4cdb' "$ARCHIVE" | sha256sum --check -
mkdir -p "$DEST"
tar -xzf "$ARCHIVE" -C "$DEST"
test -x "$DEST/limonatad"
sudo install -m 0755 "$DEST/limonatad" /usr/local/bin/limonatad

# Verify which binary will be used before initialization.
command -v "limonatad"
"limonatad" version

set -euo pipefail
BIN="limonatad"
CHAIN_ID="limonata_10777-1"
MONIKER='validator-name'
NODE_HOME="$HOME/.limonatad"

command -v "$BIN"
test ! -e "$NODE_HOME" || { echo "Stop: $NODE_HOME already exists; back it up and review it first." >&2; exit 1; }
"$BIN" init "$MONIKER" --chain-id "$CHAIN_ID" --home "$NODE_HOME"
test -f "$NODE_HOME/config/genesis.json"

set -euo pipefail
CHAIN_ID="limonata_10777-1"
NODE_HOME="$HOME/.limonatad"
GENESIS_URL='https://limonata.xyz/genesis.json'
GENESIS_DOWNLOAD="$NODE_HOME/config/genesis.json.download"

test -d "$NODE_HOME/config"
test ! -e "$GENESIS_DOWNLOAD" || { echo "Stop: review the existing $GENESIS_DOWNLOAD first." >&2; exit 1; }
curl --fail --show-error --location --proto "=https" --max-time 120   --output "$GENESIS_DOWNLOAD" "$GENESIS_URL"
jq -e --arg chain "$CHAIN_ID" '.chain_id == $chain' "$GENESIS_DOWNLOAD" >/dev/null
printf '%s  %s
' 'bb76a6d8abbb1bdeaa41d92811066b16bd6a48f58f7136e3fcb71226b6af4569' "$GENESIS_DOWNLOAD" | sha256sum --check -
cp --no-clobber "$NODE_HOME/config/genesis.json" "$NODE_HOME/config/genesis.json.init-backup" || true
install -m 0644 "$GENESIS_DOWNLOAD" "$NODE_HOME/config/genesis.json"
jq -r '.chain_id' "$NODE_HOME/config/genesis.json"

set -euo pipefail
BIN="limonatad"
CHAIN_ID="limonata_10777-1"
NODE_HOME="$HOME/.limonatad"
SERVICE="limonatad.service"
BIN_PATH=$(command -v "$BIN")
SERVICE_USER="$USER"
LOCAL_RPC_PORT="23657"

test -x "$BIN_PATH"
test -s "$NODE_HOME/config/genesis.json"
sudo tee "/etc/systemd/system/$SERVICE" >/dev/null <<EOF
[Unit]
Description=Limonata node
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=${SERVICE_USER}
ExecStart=${BIN_PATH} start --home ${NODE_HOME} --chain-id limonata_10777-1 --evm.evm-chain-id 10777 --minimum-gas-prices 0aLIMO
Restart=on-failure
RestartSec=5
LimitNOFILE=65535

[Install]
WantedBy=multi-user.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable --now "$SERVICE"
sudo systemctl status "$SERVICE" --no-pager

# Wait briefly for the local RPC listener and require the configured chain ID.
for attempt in {1..30}; do
  if STATUS=$(curl --fail --silent "http://127.0.0.1:$LOCAL_RPC_PORT/status"); then
    jq -e --arg chain "$CHAIN_ID" '.result.node_info.network == $chain' <<<"$STATUS"
    exit 0
  fi
  sleep 2
done
echo 'Local RPC did not become ready; inspect the service journal.' >&2
sudo journalctl -u "$SERVICE" -n 100 --no-pager
exit 1

#!/usr/bin/env bash
set -euo pipefail

CHAIN_ID="limonata_10777-1"
LOCAL_RPC="http://127.0.0.1:23657"
REFERENCE_RPC="https://rpc-t.limonata.vinjan-inc.com"

read_height() {
  local endpoint="$1"
  curl --fail --silent --show-error --max-time 10 "$endpoint/status"     | jq -er --arg chain "$CHAIN_ID" '
        select(.result.node_info.network == $chain)
        | .result.sync_info.latest_block_height
        | select(test("^[0-9]+$"))
      '
}

while true; do
  if LOCAL_HEIGHT=$(read_height "$LOCAL_RPC") && NETWORK_HEIGHT=$(read_height "$REFERENCE_RPC"); then
    BLOCKS_LEFT=$((NETWORK_HEIGHT - LOCAL_HEIGHT))
    [ "$BLOCKS_LEFT" -ge 0 ] || BLOCKS_LEFT=0
    printf 'Local: %s | Network: %s | Blocks left: %s\n'       "$LOCAL_HEIGHT" "$NETWORK_HEIGHT" "$BLOCKS_LEFT"
  else
    printf 'Unable to validate one of the chain-ID checked RPC heights; retrying...\n' >&2
  fi
  sleep 5
done

set -euo pipefail
BIN="limonatad"
WALLET='wallet'
[[ "$WALLET" =~ ^[a-zA-Z0-9_-]{1,64}$ ]] || { echo "Invalid wallet name" >&2; exit 1; }

# Create a new key. Store the mnemonic offline; it cannot be recovered by BonyNode.
"$BIN" keys add "$WALLET"

# To restore an existing key, run this separately:
# "$BIN" keys add "$WALLET" --recover

WALLET_ADDRESS=$("$BIN" keys show "$WALLET" -a)
"$BIN" query bank balances "$WALLET_ADDRESS"

BIN="limonatad"
CHAIN_ID="limonata_10777-1"
WALLET='wallet'
MONIKER='validator-name'
IDENTITY=''
WEBSITE=''
DETAILS='Independent validator'
AMOUNT="1000000aLIMO"
MIN_SELF_DELEGATION="1"
COMMISSION_RATE="0.10"
COMMISSION_MAX_RATE="0.20"
COMMISSION_MAX_CHANGE="0.01"

"$BIN" tx staking create-validator   --amount "$AMOUNT"   --from "$WALLET"   --commission-rate "$COMMISSION_RATE"   --commission-max-rate "$COMMISSION_MAX_RATE"   --commission-max-change-rate "$COMMISSION_MAX_CHANGE"   --min-self-delegation "$MIN_SELF_DELEGATION"   --pubkey "$("$BIN" tendermint show-validator)"   --moniker "$MONIKER"   --identity "$IDENTITY"   --website "$WEBSITE"   --details "$DETAILS"   --chain-id "$CHAIN_ID"   --gas auto --gas-adjustment 1.5 --gas-prices 0aLIMO   -y

set -euo pipefail

P2P_PORT="23656"
sudo ufw default allow outgoing
sudo ufw default deny incoming
sudo ufw allow OpenSSH
sudo ufw allow "$P2P_PORT/tcp"
sudo ufw enable
sudo ufw status verbose

# RPC/API/gRPC remain private unless you deliberately add authenticated
# reverse-proxy rules. Never expose validator signing services publicly.

set -euo pipefail

SERVICE="limonatad"
NODE_HOME="$HOME/.limonatad"
STAMP=$(date -u +%Y%m%dT%H%M%SZ)
RETIRED_HOME="$NODE_HOME.retired.$STAMP"
KEY_BACKUP="$HOME/limonatad-validator-keys-$STAMP.tar.gz"
NODE_STOPPED=0

rollback() {
  trap - ERR INT TERM
  if [ "$NODE_STOPPED" -eq 1 ]; then sudo systemctl start "$SERVICE" || true; fi
  exit 1
}
trap rollback ERR INT TERM

test -d "$NODE_HOME"
test ! -e "$RETIRED_HOME"
test -s "$NODE_HOME/config/priv_validator_key.json"
test -s "$NODE_HOME/data/priv_validator_state.json"
sudo systemctl stop "$SERVICE"
NODE_STOPPED=1

# Back up validator identity/state before moving anything.
tar -czf "$KEY_BACKUP" -C "$NODE_HOME"   config/priv_validator_key.json config/node_key.json data/priv_validator_state.json
test -s "$KEY_BACKUP"
mv "$NODE_HOME" "$RETIRED_HOME"
sudo systemctl disable "$SERVICE"
NODE_STOPPED=0
trap - ERR INT TERM

echo "Node home was retained at: $RETIRED_HOME"
echo "Critical key backup: $KEY_BACKUP"
echo "No binary, service file or node data was deleted."