Nota bene: kuutamo is bleeding edge decentralized financial infrastructure. Use with caution and only with funds you are prepared to lose. If you want to put it into production and would like to discuss SRE overlay support, please get in touch with us at opencore-support@kuutamo.co
- 1 or 3 server(s)/node(s): Any Linux OS
- 1 client/local machine: Any Linux OS
kld-mgr- A CLI tool that will SSH to your server(s) to perform the initial deploymentkld-cli- A CLI tool that uses the kld API to support LSP operationskld-tui- A Terminal User Interface that uses the kld API to support LSP operations (WIP)
kld- an LSP router, built on LDKcockroachdb- a cloud-native, distributed SQL databasetelegraf- an agent for collecting and sending metrics to any URL that supports the Prometheus's Remote Write APIpromtail- an agent which ships the contents of local logs to a private Grafana Loki instance or Grafana Cloudbitcoind- a bitcoin clientelectrs- a bitcoin database indexerkuutamo-upgrade- an updater service that will monitor the deployment repository and apply any required upgrades
kld-mgr:
nix run github:kuutamolabs/kld#kld-mgr -- helpkld-cli:
nix run github:kuutamolabs/kld#kld-cli -- helpkld-tui:
nix run github:kuutamolabs/kld#kld-tui -- help-
Install the Nix package manager, if you don't already have it. https://zero-to-nix.com/start/install
-
Trust pre-built binaries (optional):
$ printf 'trusted-substituters = https://cache.garnix.io https://cache.nixos.org/\ntrusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=' | sudo tee -a /etc/nix/nix.conf && sudo systemctl restart nix-daemon- Test
$ nix run --refresh github:kuutamolabs/kld#kld-mgr -- helpBy default, nodes are locked down once installed and cannot be connected to over SSH. Nodes are upgraded using a GitOps model enabling complete system change auditability.
The kuutamo-updater service checks for updates in your private deployment repository. If found, the cluster will upgrade.
The maintainers of the deployment repository control when upgrades are accepted. They will review/audit, approve and merge the updated flake.lock PR.
An example install and upgrade workflow is shown below using GitHub. Other Git platforms such as Bitbucket and GitLab can be used inplace.
kld-mgr requires root SSH access to server(s) to perform the initial install.
Other cluster bootstrap methods can be used, such as via USB disk or PXE.
Note: For Test/Dev deployments you can retain Root and SSH capabilities by setting the
DEBUGenvironment variable totruewhen performinginstall.
Although monitoring is not mandatory for deploying a node, it is highly recommended.
Configure the self_monitoring_url, self_monitoring_username, and self_monitoring_password fields of the host in the kld.toml.
To view Logs remotely set the promtail_client in the form https://<user_id>:<token>@<client hostname>/loki/api/vi/push
- Step 1: Generate example
kld.toml
$ nix run github:kuutamolabs/kld#kld-mgr generate-example > kld.toml-
Step 2: Generate classic token with full repo permission, please refer to the Github doc
-
Step 5.1: Generate deployment config
$ nix run github:kuutamolabs/kld#kld-mgr generate-config ./deployment- Step 5.2: Setup Git & GitHub deployment repository
$ cd ./deployment
$ git init
$ git add .
$ git commit -m "init deploy"
$ git remote add origin git@github.com:my-org/deployment
$ git push
$ cd ..- Step 6: Add the flake-lock-update Github Action
$ mkdir -p ./deployment/.github/workflows
$ curl https://raw.githubusercontent.com/DeterminateSystems/update-flake-lock/main/.github/workflows/update.yml --output ./deployment/.github/workflows/upgrade.ymlPlease refer to update-flake-lock to configure this Action to your requirements.
- Step 7: Install
$ nix run github:kuutamolabs/kld#kld-mgr install- Connect to node via API. kld API is served on port
2244
$ nix run github:kuutamolabs/kld/mgr#kld-cli -- -t "x.x.x.x:2244" -c "secrets/lightning/ca.pem" -m "secrets/admin.macaroon get-info"$ nix run github:kuutamolabs/kld#kld-cli -- helpUsage: kld-cli --target <TARGET> --cert-path <CERT_PATH> --macaroon-path <MACAROON_PATH> <COMMAND>
Commands:
get-info Fetch information about this lightning node
sign Creates a signature of the message using nodes secret key (message limit 65536 chars)
get-balance Fetch confirmed and unconfirmed on-chain balance
new-address Generates new on-chain address for receiving funds
withdraw Send on-chain funds out of the wallet
list-funds Show available funds from the internal wallet
list-peers Fetch a list of this nodes peers
connect-peer Connect with a network peer
disconnect-peer Disconnect from a network peer
list-channels Fetch a list of this nodes open channels
open-channel Open a channel with another node
set-channel-fee Set channel fees
close-channel Close a channel
network-nodes Get node information from the network graph
network-channels Get channel information from the network graph
fee-rates Return feerate estimates, either satoshi-per-kw or satoshi-per-kb
keysend Pay a node without an invoice
generate-invoice Generate a bolt11 invoice for receiving a payment
list-invoices List all invoices
pay-invoice Pay an invoice
list-payments List all payments
estimate-channel-liquidity Estimate channel liquidity to a target node
local-remote-balance Fetch the aggregate local and remote channel balances (msat) of the node
get-fees Get node routing fees
list-forwards Fetch a list of the forwarded htlcs
help Print this message or the help of the given subcommand(s)
Options:
-t, --target <TARGET> IP address or hostname of the target machine
-c, --cert-path <CERT_PATH> Path to the TLS cert of the target API
-m, --macaroon-path <MACAROON_PATH> Path to the macaroon for authenticating with the API
-h, --help Print help
-V, --version Print version