Bitcoin source recipe

site-cookbooks/kosmos-bitcoin/recipes/source.rb

@@ -0,0 +1,144 @@
+#
+# Cookbook:: kosmos-bitcoin
+# Recipe:: source
+#
+# The MIT License (MIT)
+#
+# Copyright:: 2020, Kosmos Developers
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+#
+
+include_recipe 'ark'
+
+build_essential
+
+%w{ libtool autotools-dev make automake cmake curl g++-multilib libtool
+    binutils-gold bsdmainutils pkg-config python3 patch }.each do |pkg|
+  apt_package pkg
+end
+
+ark 'bitcoind' do
+  url "https://bitcoincore.org/bin/bitcoin-core-#{node['bitcoin']['version']}/bitcoin-#{node['bitcoin']['version']}.tar.gz"
+  checksum node['bitcoin']['checksum']
+  action :put
+end
+
+execute "Compile bitcoin-core dependencies" do
+  cwd "/usr/local/bitcoind/depends"
+  command "make NO_QT=1"
+  not_if { ::File.directory?("/usr/local/bitcoind/depends/x86_64-pc-linux-gnu") }
+end
+
+execute "Configure bitcoin-core" do
+  cwd "/usr/local/bitcoind"
+  command [
+    "./autogen.sh",
+    "./configure --prefix=$PWD/depends/x86_64-pc-linux-gnu"
+  ]
+  not_if { ::File.exist?("/usr/local/bitcoind/src/bitcoind") }
+end
+
+execute "Compile bitcoin-core" do
+  cwd "/usr/local/bitcoind"
+  command "make"
+  not_if { ::File.exist?("/usr/local/bitcoind/src/bitcoind") }
+end
+
+link "/usr/local/bin/bitcoind" do
+  to "/usr/local/bitcoind/src/bitcoind"
+end
+
+link "/usr/local/bin/bitcoin-cli" do
+  to "/usr/local/bitcoind/src/bitcoin-cli"
+end
+
+bitcoin_user    = node['bitcoin']['username']
+bitcoin_group   = node['bitcoin']['usergroup']
+bitcoin_datadir = node['bitcoin']['datadir']
+credentials     = Chef::EncryptedDataBagItem.load('credentials', 'bitcoin')
+
+group bitcoin_group
+
+user bitcoin_user do
+  manage_home true
+  gid bitcoin_group
+  shell "/bin/bash"
+end
+
+directory bitcoin_datadir do
+  owner bitcoin_user
+  group bitcoin_group
+  mode '0750'
+  recursive true
+  action :create
+end
+
+template "#{bitcoin_datadir}/bitcoin.conf" do
+  owner bitcoin_user
+  group bitcoin_group
+  mode '0640'
+  # TODO Create new in data bag and use here
+  variables conf: node['bitcoin']['conf'].merge({rpcpassword: credentials["rpcpassword"]}),
+            mainnet_conf: node['bitcoin']['mainnet_conf'],
+            testnet_conf: node['bitcoin']['testnet_conf'],
+            regtest_conf: node['bitcoin']['regtest_conf']
+  action :create
+  notifies :restart, "systemd_unit[bitcoind.service]", :delayed
+end
+
+systemd_unit 'bitcoind.service' do
+  content({
+    Unit: {
+      Description: 'Bitcoin Core daemon',
+      Documentation: ['https://bitcoincore.org'],
+      After: 'network.target'
+    },
+    Service: {
+      User: bitcoin_user,
+      Type: 'simple',
+      ExecStart: "bitcoind -datadir=#{bitcoin_datadir} -pid=#{bitcoin_datadir}/bitcoind.pid",
+      PIDFile: "#{bitcoin_datadir}/bitcoind.pid",
+      Restart: 'always',
+      PrivateTmp: true,
+      LimitNOFILE: 'infinity',
+      TimeoutStopSec: '60s',
+      TimeoutStartSec: '20s',
+      StartLimitInterval: '60s',
+      StartLimitBurst: '2'
+    },
+    Install: {
+      WantedBy: 'multi-user.target'
+    }
+  })
+  verify false
+  triggers_reload true
+  action [:create, :start]
+end
+
+# Creates/starts a Path unit which starts the bitcoind service when the
+# encrypted data directory is mounted
+# TODO move to custom kosmos cookbook before publishing bitcoin cookbook
+encfs_path_activation_unit 'bitcoind.service'
+
+firewall_rule 'bitcoind' do
+  port     [8333] # TODO adjust for testnet
+  protocol :tcp
+  command  :allow
+end