  ├── validator0                    
  │   └──  nodekey                      # the node private key
  │   └──  nodekey.pub                  # the node's public key which is used in the enode
  │   └──  address                      # the node's address which is used to vote the validator in/out
  │   └──  accountAddress               # GoQuorum only - the accountAddress
  │   └──  accountKeystore              # GoQuorum only - the account's v3 keystore
  │   └──  accountPassword              # GoQuorum only - the account's password (you would have supplied this)
  │   └──  accountPrivateKey            # GoQuorum only - the account's private key
  │               └── ...
  ├── validatorN                       
  │   └──  nodekey                      # the node private key
  │   └──  nodekey.pub                  # the node's public key which is used in the enode
  │   └──  ...
  |
  ├── bootnodeN                       
  │   └──  nodekey                      # the node private key
  │   └──  nodekey.pub                  # the node's public key which is used in the enode
  │   └──  ...
  |
  ├── memberN                      
  │   └──  nodekey                      # the node private key
  │   └──  nodekey.pub                  # the node's public key which is used in the enode
  │   └──  ...
  |
  └── besu
  │   └──  static-nodes.json            # a list of static nodes to make peering faster
  │   └──  genesis.json                 # this genesis file for any HLF Besu nodes
  │   └──  permissioned-nodes.json      # local permissions for any HLF Besu node
  │
  └── goQuorum
  │   └──  static-nodes.json            # a list of static nodes to make peering faster
  │   └──  genesis.json                 # this genesis file for any GoQuorum nodes
  │   └──  permissioned-nodes.json      # local permissions for any GoQuorum node
  │   └──  disallowed-nodes.json        # disallowed nodes for any GoQuorum node ie this new nodes will not connect to any nodes on this list
  │
  └── userData.json                     # this answers provided in a single map
  └── README.md                         # this file

Please remember to do the following:

Update the in both the permissions file and the static nodes files. Please note the selected ports are default and you may need to check firewall rules if using alternate ports
As above, update the permissions.json files
update in every Besu nodes' config.toml

To start a HLF Besu node:

/opt/besu/bin/besu --config-file=/config/config.toml

Please refer to the docs for details on more cli args

To start a GoQuorum node:

geth --datadir=/data init /config/genesis.json;

# move nodekeys to the /data directory AFTER the init command
cp /config/accountKeystore /data/keystore/key;
cp /config/nodekey /data/geth/nodekey;

export ADDRESS=$$(grep -o '"address": *"[^"]*"' /config/accountKeystore | grep -o '"[^"]*"$$' | sed 's/"//g')

geth \
  --datadir /data \
  --nodiscover \
  --verbosity 5 \--istanbul.blockperiod 2 --mine --miner.threads 1 --miner.gasprice 0 --emitcheckpoints \--syncmode full --nousb \
  --metrics --pprof --pprof.addr 0.0.0.0 --pprof.port 9545 \
  --networkid 138 \
  --http --http.addr 0.0.0.0 --http.port 8545 --http.corsdomain "*" --http.vhosts "*" \ 
  --ws --ws.addr 0.0.0.0 --ws.port 8546 --ws.origins "*" \--http.api admin,trace,db,eth,debug,miner,net,shh,txpool,personal,web3,quorum,istanbul,qbft \
  --ws.api admin,trace,db,eth,debug,miner,net,shh,txpool,personal,web3,quorum,istanbul,qbft \--port 30303 \
  --unlock $${ADDRESS} --allow-insecure-unlock \
  --password /config/accountPassword \
  &> /var/log/quorum/geth-$$HOSTNAME-$$(hostname -i).log | tee -a /var/log/quorum/geth-$$HOSTNAME-$$(hostname -i).log

Please refer to the docs for details on more cli args