🎨Normal Install Guide

Turn your VPS into a node using a normal installation.

This guide will walk you through the steps required to convert a VPS or bare-metal server into a Constellation Validator Node.

A normal installation provides more customization options during setup, whereas the quick installation only prompts for essential inputs and uses recommended defaults for all other settings outlined in this guide.

🚩Node Prerequisites

Begin Installation

1

Start the Installer

sudo nodectl install

For advanced users, if you prefer one-command install, supply any of these flags:

• --normal

• --p12-passphrase <pass>

• --p12-alias <alias>

• --user <username>

• --user-password <password>

• --p12-destination-path <path>

• --p12-migration-path <path>

• --confirm (auto-accept warnings)

2

Verify Specifications

When you first launch the nodectl utility, it will guide you through selecting the type of validator node you wish to install.

Choose H to build a Hypergraph validator node or D to build a Dor Data Layer 1 validator node..

  ========================================
  =   CONSTELLATION NETWORK HYPERGRAPH   =
  =          VERIFY NODECTL SPECS        =
  =         PRE-INSTALLATION TOOL        =
  ========================================
  Code Name: Princess Warrior

  Please choose node type to test:
  H)ybrid Dual Layer
  D)or Validator
  Q)uit

  KEY PRESS an option

3

Continue

If you node meets all the proper specifications you may press any key to continue.

4

Quick Install Request

We will type in n and hit Enter.

🔵 Coming from the Migration Guide?

If you are performing a New Node Installation with .p12 Migration, you may press y at this prompt to allow nodectl to automatically scan your VPS for any available .p12 keystore files. Once detected, you will be presented with a list to select from, choose the appropriate file to continue the installation.

5

Assign Your Cluster

Based on your selection, nodectl will download a predefined configuration tailored to the chosen Hypergraph or metagraph cluster.

Choose 1 through 4 depending your requirements.

  HYPERGRAPH or METAGRAPH
  predefined choices
  -------------------------------------------
  1) mainnet [HyperGraph]
  2) integrationnet [HyperGraph]
  3) testnet [HyperGraph]
  4) dor-metagraph-mainnet [metagraph]

  Q)uit

  KEY PRESS an option

6

Migrating an Existing P12

You may enter n or just press Enter to accept the default [n] option.

7

Downloads

You user interaction needed during this step.

The nodectl utility will being the process of installing your node. You will see output from the installation as nodectl performs the following:

• Updates the Linux Debian distribution

• Downloads and installs the necessary dependencies for Constellation Network's core protocol Tessellation .

• Downloads the installs the necessary dependencies for Constellation Network's nodectl utility to run correctly.

• Downloads and prepares the necessary Tessellation binaries.

• Enables a swap partion if it doesn't already exist.

8

Continue

Press any key to continue

9

Setup non-root administrator account for our node

You will be prompted to specify the name of the Node Administrator account you will use for SSH remote access after installation.

The default username is nodeadmin, and all subsequent documentation will reference this default.

Enter the a custom user and press Enter or just press Enter to accept the default

If you choose to use a custom username, please substitute it wherever nodeadmin is mentioned after completing this step.

10

Create Your nodeadmin Password

You will be prompted to create a password for the nodeadmin user, which will serve as the default user on this VPS/node. This password will be required to execute administrative commands using nodectl going forward.

Reminder to use proper password requirements.

Enter and confirm the password.

11

SSH Key Pair

Press Enter to accept the default selection of y.

Choosing y will transfer the SSH key from the default user (ubuntu or root) to the newly created Node Administrator account.

You will also be prompted to choose whether to disable root access via SSH, enhancing your server’s security.

Local Bare Metal Server may use advanced methods for access control and should decided accordingly

12

Disable root Access & Special Accounts

In 99% of the cases, your Constellation Validator Node will have direct access to the Internet.

To enhance security, it is recommended to disable access for commonly known default accounts, such as the root user and other special system users ( default ubuntu or admin accounts common preconfigured on default VPS images ).

Using the strongest security practices is essential in these scenarios to protect your node and its associated wallet.

We will choose y or just press Enter.

13

Disable Password Authentication

Since SSH keys are being used to securely access your node, it is strongly recommended to disable username and password authentication.

This prevents unauthorized access through brute-force password attempts and significantly enhances your node’s security.

Local Bare Metal Server may use advanced methods for access control and should decided accordingly

14

Dynamic Structures

Allow nodectl to create the required directory structures that your node will utilize during standard protocol operations.

Press any key to continue

15

Choose P12 Keystore name

You will be offered the ability to create a specific name for you p12 keystore that will be used to hold your private and public keys used for signature requests, wallet administration, and other validator node operations.

You may choose a name of your choosing and press Enter.

16

P12 Keystore Passphrase

You will be prompted to enter a passphrase for your node’s .p12 keystore (wallet). This passphrase is required to perform signing requests and access your node’s hot wallet on the blockchain.

Reminder to use proper passphrase requirements.

17

P12 Keystore Alias

You will be prompted to create an alias for your node’s wallet.

This alias is required for certain behind-the-scenes operations specific to the Constellation Network.

Please choose a unique and recognizable alias for your .p12 keystore.

18

Encryption Services

The nodectl utility provides the option to encrypt your .p12 passphrase using the SHA3-512 algorithm.

This adds an extra layer of security by ensuring the passphrase is not stored in plain text within your configuration file.

Recommended to choose y.

Allow nodectl a moment to encrypt your passphrase.

19

Record For Later

It is important to securely record your username, password, .p12 keystore filename, keystore passphrase, and node alias for future reference. These details are easy to forget and losing them could lead to serious consequences.

Node Operator Notes

20

Completed Install Screen

The nodectl utility will finish by displaying a final instructional page.

Review it carefully, record any important information in your notes.

The following instructions will be explained in greater detail in the post-seeding documents available on our documentation hub.

 ------ * INSTALLATION COMPLETE * -------

  CONGRATULATIONS!
  Below you will find your nodeid which 
  was derived from your p12 file
  Please report this nodeid to administrative 
  staff to gain access to the network via the 
  access  list permissions.

  HyperGraph/metagraph ..................... hypergraph
  Environment .............................. mainnet
  P12 Location ............................. /home/nodeadmin/tessellation
  P12 Name ................................. nodeadmin-node.p12
  P12 Alias ................................ nodeadmin-alias

   ----- * CHECK SEED LIST REQUEST * ------

  NODE ID
  <your_node_id_here>
  NODE ID FOUND ON SEED LIST
  False
  DAG WALLET ADDRESS
  <your_dag_wallet_address_here>

21

Final instructions

Now that your VPS has been successfully configured as a Constellation Network node, there are a few final steps to complete before proceeding to the First-Time Connection Guide to bring your node online.