Install

Install Dependencies

Update system package and install build tools

sudo apt -q update
sudo apt -qy install curl git jq lz4 build-essential fail2ban ufw
sudo apt -qy upgrade

Secure Setup

Setup ssh for side user replace YOUR_PUBLIC_SSH_KEY with your own!

Setup ssh for side user replace YOUR_PUBLIC_SSH_KEY with your own!

sudo adduser side --disabled-password -q
sudo usermod -aG sudo side
sudo -u side bash -c 'mkdir -p ~/.ssh && echo "YOUR_PUBLIC_SSH_KEY" >> ~/.ssh/authorized_keys && chmod 700 ~/.ssh && chmod 600 ~/.ssh/authorized_keys'

Granting sudo privileges for alignedlayer user

echo "side ALL=(ALL) NOPASSWD:ALL" | sudo tee -a /etc/sudoers

Disable root login, password auth, and enforce SSH key authentication

su - side -c 'sudo sed -i "s|^PermitRootLogin .*|PermitRootLogin no|" /etc/ssh/sshd_config'
su - side -c 'sudo sed -i "s|^ChallengeResponseAuthentication .*|ChallengeResponseAuthentication no|" /etc/ssh/sshd_config'
su - side -c 'sudo sed -i "s|^#PasswordAuthentication .*|PasswordAuthentication no|" /etc/ssh/sshd_config'
su - side -c 'sudo sed -i "s|^#PermitEmptyPasswords .*|PermitEmptyPasswords no|" /etc/ssh/sshd_config'
su - side -c 'sudo sed -i "s|^#PubkeyAuthentication .*|PubkeyAuthentication yes|" /etc/ssh/sshd_config'
sudo systemctl restart sshd

Configure firewall setting

sudo apt install -y ufw
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow ssh
sudo ufw enable

Set Moniker

Replace <your-moniker-name> with your own validator name

MONIKER="<your-moniker-name>"

Install Go (check version)

Go version 1.22.2

cd $HOME && \
ver="1.22.2" && \
wget "https://golang.org/dl/go$ver.linux-amd64.tar.gz" && \
sudo rm -rf /usr/local/go && \
sudo tar -C /usr/local -xzf "go$ver.linux-amd64.tar.gz" && \
rm "go$ver.linux-amd64.tar.gz" && \
echo "export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin" >> $HOME/.bash_profile && \
source $HOME/.bash_profile && \
go version

Build Binaries

cd $HOME
rm -rf side
git clone https://github.com/sideprotocol/side.git
cd side
git checkout v0.8.1
make build

mkdir -p $HOME/.side/cosmovisor/genesis/bin
mv build/sided $HOME/.side/cosmovisor/genesis/bin/
rm -rf build

sudo ln -s $HOME/.side/cosmovisor/genesis $HOME/.side/cosmovisor/current -f
sudo ln -s $HOME/.side/cosmovisor/current/bin/sided /usr/local/bin/sided -f

Cosmovisor Setup

go install cosmossdk.io/tools/cosmovisor/cmd/cosmovisor@v1.5.0

Create a systemd service

sudo tee /etc/systemd/system/sided.service > /dev/null << EOF
[Unit]
Description=Side node service
After=network-online.target
 
[Service]
User=$USER
ExecStart=$(which cosmovisor) run start
Restart=on-failure
RestartSec=10
LimitNOFILE=65535
Environment="DAEMON_HOME=$HOME/.side"
Environment="DAEMON_NAME=sided"
Environment="UNSAFE_SKIP_BACKUP=true"
Environment="PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:$HOME/.side/cosmovisor/current/bin"
 
[Install]
WantedBy=multi-user.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable sided

Initialize Node

sided config chain-id S2-testnet-2	
sided config keyring-backend test
sided config node tcp://localhost:23857

sided init $MONIKER --chain-id S2-testnet-2

Genesis & Addrbook

curl -Ls https://snap.validator.wiki/side-testnet/genesis.json > $HOME/.side/config/genesis.json
curl -Ls https://snap.validator.wiki/side-testnet/addrbook.json > $HOME/.side/config/addrbook.json

sed -i -e "s|^seeds *=.*|seeds = \"[e-mail]:23810\"|" $HOME/.side/config/config.toml

Configure Gas Prices

sed -i -e "s|^minimum-gas-prices *=.*|minimum-gas-prices = \"0.005uside\"|" $HOME/.side/config/app.toml

Pruning Setting

sed -i \
  -e 's|^pruning *=.*|pruning = "custom"|' \
  -e 's|^pruning-keep-recent *=.*|pruning-keep-recent = "100"|' \
  -e 's|^pruning-keep-every *=.*|pruning-keep-every = "0"|' \
  -e 's|^pruning-interval *=.*|pruning-interval = "19"|' \
  $HOME/.side/config/app.toml

Custom Port (optional)

sed -i -e "s%^proxy_app = \"tcp://127.0.0.1:26658\"%proxy_app = \"tcp://127.0.0.1:23858\"%; s%^laddr = \"tcp://127.0.0.1:26657\"%laddr = \"tcp://127.0.0.1:23857\"%; s%^pprof_laddr = \"localhost:6060\"%pprof_laddr = \"localhost:23860\"%; s%^laddr = \"tcp://0.0.0.0:26656\"%laddr = \"tcp://0.0.0.0:23856\"%; s%^prometheus_listen_addr = \":26660\"%prometheus_listen_addr = \":23866\"%" $HOME/.side/config/config.toml
sed -i -e "s%^address = \"tcp://0.0.0.0:1317\"%address = \"tcp://0.0.0.0:23817\"%; s%^address = \":8080\"%address = \":23880\"%; s%^address = \"0.0.0.0:9090\"%address = \"0.0.0.0:23890\"%; s%^address = \"0.0.0.0:9091\"%address = \"0.0.0.0:23891\"%; s%:8545%:23845%; s%:8546%:23846%; s%:6065%:23865%" $HOME/.side/config/app.toml

Start Service

sudo systemctl start sided && \
journalctl -u sided -f -o cat