111 lines
3.5 KiB
Bash
111 lines
3.5 KiB
Bash
|
|
#!/usr/bin/env bash
|
||
|
|
# Enable ADMIN RPC methods on Besu RPC node via SSH
|
||
|
|
# This enables admin_removeTransaction and other admin methods
|
||
|
|
# Usage: ./enable-admin-rpc-ssh.sh [vmid] [rpc_ip]
|
||
|
|
|
||
|
|
set -euo pipefail
|
||
|
|
|
||
|
|
VMID="${1:-2500}"
|
||
|
|
RPC_IP="${2:-192.168.11.250}"
|
||
|
|
RPC_CONFIG="/etc/besu/config-rpc.toml"
|
||
|
|
PROXMOX_HOST="192.168.11.10"
|
||
|
|
PROXMOX_PASS="L@kers2010"
|
||
|
|
|
||
|
|
# Colors
|
||
|
|
RED='\033[0;31m'
|
||
|
|
GREEN='\033[0;32m'
|
||
|
|
YELLOW='\033[1;33m'
|
||
|
|
BLUE='\033[0;34m'
|
||
|
|
NC='\033[0m'
|
||
|
|
|
||
|
|
log_info() { echo -e "${BLUE}[INFO]${NC} $1"; }
|
||
|
|
log_success() { echo -e "${GREEN}[✓]${NC} $1"; }
|
||
|
|
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
|
||
|
|
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
||
|
|
|
||
|
|
log_info "========================================="
|
||
|
|
log_info "Enable ADMIN on Besu RPC Node (via SSH)"
|
||
|
|
log_info "========================================="
|
||
|
|
log_info ""
|
||
|
|
|
||
|
|
# Check if sshpass is available
|
||
|
|
if ! command -v sshpass >/dev/null 2>&1; then
|
||
|
|
log_error "sshpass is required"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Test SSH connection
|
||
|
|
log_info "Testing SSH connection..."
|
||
|
|
if ! sshpass -p "$PROXMOX_PASS" ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 \
|
||
|
|
"root@$PROXMOX_HOST" "echo 'OK'" 2>/dev/null; then
|
||
|
|
log_error "Cannot connect to Proxmox host"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Check current config
|
||
|
|
log_info "Checking current RPC API configuration..."
|
||
|
|
CURRENT_API=$(sshpass -p "$PROXMOX_PASS" ssh -o StrictHostKeyChecking=no \
|
||
|
|
"root@$PROXMOX_HOST" "pct exec $VMID -- grep -E '^rpc-http-api=' $RPC_CONFIG 2>/dev/null || echo ''" 2>/dev/null || echo "")
|
||
|
|
|
||
|
|
if [ -n "$CURRENT_API" ]; then
|
||
|
|
log_info "Current: $CURRENT_API"
|
||
|
|
if echo "$CURRENT_API" | grep -qi "ADMIN"; then
|
||
|
|
log_success "✓ ADMIN already enabled"
|
||
|
|
exit 0
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Backup and update config
|
||
|
|
log_info "Backing up config..."
|
||
|
|
sshpass -p "$PROXMOX_PASS" ssh -o StrictHostKeyChecking=no \
|
||
|
|
"root@$PROXMOX_HOST" "pct exec $VMID -- cp $RPC_CONFIG ${RPC_CONFIG}.backup.\$(date +%Y%m%d_%H%M%S)" 2>/dev/null || true
|
||
|
|
|
||
|
|
# Update to include ADMIN
|
||
|
|
log_info "Updating config to enable ADMIN..."
|
||
|
|
sshpass -p "$PROXMOX_PASS" ssh -o StrictHostKeyChecking=no \
|
||
|
|
"root@$PROXMOX_HOST" "pct exec $VMID -- sed -i '/^rpc-http-api=/d' $RPC_CONFIG" 2>/dev/null || true
|
||
|
|
|
||
|
|
sshpass -p "$PROXMOX_PASS" ssh -o StrictHostKeyChecking=no \
|
||
|
|
"root@$PROXMOX_HOST" "pct exec $VMID -- sed -i '/^rpc-http-port=/a rpc-http-api=[\"ETH\",\"NET\",\"WEB3\",\"TXPOOL\",\"ADMIN\"]' $RPC_CONFIG" 2>/dev/null || {
|
||
|
|
log_error "Failed to update config"
|
||
|
|
exit 1
|
||
|
|
}
|
||
|
|
|
||
|
|
log_success "✓ Config updated"
|
||
|
|
|
||
|
|
# Restart service
|
||
|
|
log_info "Restarting Besu RPC service..."
|
||
|
|
sshpass -p "$PROXMOX_PASS" ssh -o StrictHostKeyChecking=no \
|
||
|
|
"root@$PROXMOX_HOST" "pct exec $VMID -- systemctl restart besu-rpc" 2>/dev/null || {
|
||
|
|
log_error "Failed to restart service"
|
||
|
|
exit 1
|
||
|
|
}
|
||
|
|
|
||
|
|
log_success "✓ Service restarted"
|
||
|
|
|
||
|
|
# Wait and verify
|
||
|
|
log_info "Waiting for RPC to come online..."
|
||
|
|
sleep 10
|
||
|
|
|
||
|
|
RPC_URL="http://${RPC_IP}:8545"
|
||
|
|
for i in {1..10}; do
|
||
|
|
RPC_MODULES=$(curl -s -X POST -H "Content-Type: application/json" \
|
||
|
|
--data '{"jsonrpc":"2.0","method":"rpc_modules","params":[],"id":1}' \
|
||
|
|
"$RPC_URL" 2>/dev/null || echo "")
|
||
|
|
|
||
|
|
if [ -n "$RPC_MODULES" ] && echo "$RPC_MODULES" | jq -e '.result' >/dev/null 2>&1; then
|
||
|
|
if echo "$RPC_MODULES" | jq -r '.result | keys[]' 2>/dev/null | grep -qi "admin"; then
|
||
|
|
log_success "✓ ADMIN is now enabled"
|
||
|
|
exit 0
|
||
|
|
else
|
||
|
|
log_warn "⚠ RPC online but ADMIN not found (attempt $i/10)"
|
||
|
|
sleep 2
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
sleep 2
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
|
||
|
|
log_warn "⚠ Could not verify ADMIN is enabled"
|
||
|
|
|