…iene
- .gitignore for .secrets.env under tfchain-validator/ and
tfchain-validator-snapshots/. Every other component already had one; these
two are the ones whose .secrets.env holds the node key and the validator
wallet mnemonic, and without it a git add -A in a clone stages them.
- install-tfchain-validator.sh and validator-init.sh accept -y/--yes (or
ASSUME_YES=1) so they can run from CI, Terraform or config management.
- the installer no longer restores the snapshot when the node already has a
chain database, so re-running it cannot clobber a synced validator.
- snapshot download goes to /srv/grid_snapshots_tmp on every network; qanet,
testnet and mainnet used the home directory, which can fill the root disk
(the mainnet snapshot is ~28G compressed).
- validator-init.sh reminds the operator to clear MNEMONIC afterwards.
- prep-env-prereq.sh installs node_exporter 1.12.1 instead of 1.6.0.
readme: how to move an existing validator to new hardware (keys reused, no
council motion, stop the old node first), container log rotation, and the
container-storage caveat on VMs whose root filesystem disallows mknod.