This guide will walk you through the steps required to convert a VPS or bare-metal server into a Constellation Validator Node.
A normal installation provides more customization options during setup, whereas the only prompts for essential inputs and uses recommended defaults for all other settings outlined in this guide.
Begin Installation
1
Start the Installer
sudo nodectl install
For advanced users, if you prefer one-command install, supply any of these flags:
--normal
--p12-passphrase <pass>
--p12-alias <alias>
--user <username>
--user-password <password>
--p12-destination-path <path>
--p12-migration-path <path>
--confirm (auto-accept warnings)
2
Verify Specifications
When you first launch the nodectl utility, it will guide you through selecting the type of validator node you wish to install.
Choose H to build a Hypergraph validator node or D to build a Dor Data Layer 1 validator node..
If you node meets all the proper you may press any key to continue.
4
Quick Install Request
We will type in n and hit Enter.
🔵 Coming from the Migration Guide?
If you are performing a New Node Installation with .p12 Migration, you may press y at this prompt to allow nodectl to automatically scan your VPS for any available .p12 keystore files.
Once detected, you will be presented with a list to select from, choose the appropriate file to continue the installation.
5
Assign Your Cluster
Based on your selection, nodectl will download a predefined configuration tailored to the chosen Hypergraph or metagraph cluster.
You may enter n or just press Enter to accept the default [n] option.
7
Downloads
You user interaction needed during this step.
The nodectl utility will being the process of installing your node. You will see output from the installation as nodectl performs the following:
8
Continue
Press any key to continue
9
Setup non-root administrator account for our node
You will be prompted to specify the name of the Node Administrator account you will use for SSH remote access after installation.
The default username is nodeadmin, and all subsequent documentation will reference this default.
Enter the a custom user and press Enter or just press Enter to accept the default
If you choose to use a custom username, please substitute it wherever nodeadmin is mentioned after completing this step.
10
Create Your nodeadmin Password
You will be prompted to create a for the nodeadmin user, which will serve as the default user on this VPS/node. This password will be required to execute administrative commands using nodectl going forward.
Reminder to use proper password .
Enter and confirm the .
11
SSH Key Pair
Press Enter to accept the default selection of y.
Choosing y will transfer the SSH key from the default user (ubuntu or root) to the newly created Node Administrator account.
You will also be prompted to choose whether to disable root access via SSH, enhancing your server’s security.
Local Bare Metal Server may use advanced methods for access control and should decided accordingly
12
Disable root Access & Special Accounts
In 99% of the cases, your Constellation Validator Node will have direct access to the Internet.
To enhance security, it is recommended to disable access for commonly known default accounts, such as the root user and other special system users ( default ubuntu or admin accounts common preconfigured on default VPS images ).
Using the strongest security practices is essential in these scenarios to protect your node and its associated wallet.
We will choose y or just press Enter.
13
Disable Password Authentication
Since SSH keys are being used to securely access your node, it is strongly recommended to disable username and password authentication.
This prevents unauthorized access through brute-force password attempts and significantly enhances your node’s security.
Local Bare Metal Server may use advanced methods for access control and should decided accordingly
14
Dynamic Structures
Allow nodectl to create the required directory structures that your node will utilize during standard protocol operations.
Press any key to continue
15
Choose P12 Keystore name
You will be offered the ability to create a specific name for you p12 keystore that will be used to hold your private and public keys used for signature requests, wallet administration, and other validator node operations.
You may choose a name of your choosing and press Enter.
16
P12 Keystore Passphrase
You will be prompted to enter a for your node’s .p12 keystore (wallet). This passphrase is required to perform signing requests and access your node’s hot wallet on the blockchain.
Reminder to use proper passphrase .
17
P12 Keystore Alias
You will be prompted to create an alias for your node’s wallet.
This alias is required for certain behind-the-scenes operations specific to the Constellation Network.
Please choose a unique and recognizable alias for your .p12 keystore.
18
Encryption Services
The nodectl utility provides the option to encrypt your .p12 passphrase using the SHA3-512 algorithm.
This adds an extra layer of security by ensuring the passphrase is not stored in plain text within your configuration file.
Recommended to choose y.
Allow nodectl a moment to encrypt your passphrase.
19
Record For Later
It is important to securely record your username, password, .p12 keystore filename, keystore passphrase, and node alias for future reference. These details are easy to forget and losing them could lead to serious consequences.
20
Completed Install Screen
The nodectl utility will finish by displaying a final instructional page.
Review it carefully, record any important information in your .
The following instructions will be explained in greater detail in the post-seeding documents available on our documentation hub.
------ * INSTALLATION COMPLETE * -------
CONGRATULATIONS!
Below you will find your nodeid which
was derived from your p12 file
Please report this nodeid to administrative
staff to gain access to the network via the
access list permissions.
HyperGraph/metagraph ..................... hypergraph
Environment .............................. mainnet
P12 Location ............................. /home/nodeadmin/tessellation
P12 Name ................................. nodeadmin-node.p12
P12 Alias ................................ nodeadmin-alias
----- * CHECK SEED LIST REQUEST * ------
NODE ID
<your_node_id_here>
NODE ID FOUND ON SEED LIST
False
DAG WALLET ADDRESS
<your_dag_wallet_address_here>
21
Final instructions
Now that your VPS has been successfully configured as a Constellation Network node, there are a few final steps to complete before proceeding to the to bring your node online.
