deploy.yml

---
- name: Deploy GenLayer Validator Node with LLM Config Update and Systemd Service
  hosts: all
  become: yes
  vars:
    genlayer_version: "v0.3.10"
    node_password: "your_secret_password"                # Set your validator account password here
    backup_passphrase: "your_backup_encryption_passphrase" # Set your backup encryption passphrase here
    backup_path: "/tmp/genlayer-validator-backup.key"     # Path to store validator key backup
    node_bin_url: "https://storage.googleapis.com/gh-af/genlayer-node/bin/amd64/{{ genlayer_version }}/genlayer-node-linux-amd64-{{ genlayer_version }}.tar.gz"
    node_bin_tar: "/tmp/genlayer-node-linux-amd64-{{ genlayer_version }}.tar.gz"
    node_bin_dir: "/opt/genlayer"
    config_dir: "{{ node_bin_dir }}/configs/node"
    data_dir: "{{ node_bin_dir }}/data/node"

    # GenLayer chain URLs
    zksync_rpc_url: ""
    zksync_ws_url: ""

    # LLM API keys, set to empty string if not used
    heurist_key: ""
    comput3_key: ""
    ionet_key: ""
    libertai_key: ""
    openai_key: ""
    anthropic_key: ""
    xai_key: ""
    google_key: ""
    atoma_key: ""

  tasks:
    - name: Install OS dependencies
      apt:
        name:
          - curl
          - docker.io
          - docker-compose
        state: present
        update_cache: yes

    - name: Create GenLayer node directory
      file:
        path: "{{ node_bin_dir }}"
        state: directory
        mode: 0755

    - name: Download GenLayer node tarball
      get_url:
        url: "{{ node_bin_url }}"
        dest: "{{ node_bin_tar }}"

    - name: Extract node tarball
      unarchive:
        src: "{{ node_bin_tar }}"
        dest: "{{ node_bin_dir }}"
        remote_src: yes
        extra_opts: ['--strip-components=1', '--show-stored-names']

    - name: Create config.yaml
      copy:
        dest: "{{ config_dir }}/config.yaml"
        content: |
          rollup:
            zksyncurl: "{{ zksync_rpc_url }}"
            zksyncwebsocketurl: "{{ zksync_ws_url }}"
          consensus:
            contractmainaddress: "0xe30293d600fF9B2C865d91307826F28006A458f4"
            contractdataaddress: "0x2a50afD9d3E0ACC824aC4850d7B4c5561aB5D27a"
          datadir: "{{ data_dir }}"
          logging:
            level: "INFO"
            json: false
            file:
              enabled: true
              level: "DEBUG"
              folder: logs
              maxsize: 10
              maxage: 7
              maxbackups: 100
              localtime: false
              compress: true
          node:
            mode: "validator"
            admin:
              port: 9155
            rpc:
              port: 9151
              endpoints:
                groups:
                  genlayer: true
                  genlayer_debug: true
                  ethereum: true
                  zksync: true
                methods:
                  gen_call: true
                  gen_getContractSchema: true
                  gen_getTransactionStatus: true
                  gen_getTransactionReceipt: true
                  gen_dbg_ping: true
                  gen_dbg_load_test: true
                  eth_blockNumber: true
                  eth_getBlockByNumber: true
                  eth_getBlockByHash: true
                  eth_getBalance: true
                  eth_getTransactionCount: true
                  eth_getTransactionReceipt: true
                  eth_getLogs: true
                  eth_getCode: true
                  eth_sendRawTransaction: false
            ops:
              port: 9153
              endpoints:
                metrics: true
                health: true
                balance: true
            dev:
              disableSubscription: false
          genvm:
            bin_dir: {{ node_bin_dir }}/third_party/genvm/bin
            manage_modules: true
          merkleforest:
            maxdepth: 16
            dbpath: "{{ data_dir }}/merkle/forest/data.db"
            indexdbpath: "{{ data_dir }}/merkle/index.db"
          merkletree:
            maxdepth: 16
            dbpath: "{{ data_dir }}/merkle/tree/"
          metrics:
            interval: "15s"

    - name: Run precompilation of WASM modules
      shell: |
        cd {{ node_bin_dir }}
        ./third_party/genvm/bin/genvm precompile
      args:
        executable: /bin/bash

    - name: Generate validator key and address, store output
      shell: |
        cd {{ node_bin_dir }}
        ./bin/genlayernode account new -c $(pwd)/configs/node/config.yaml --setup --password "{{ node_password }}" 2>&1
      args:
        executable: /bin/bash
      register: validator_account

    - name: Extract validator address from key generation output
      set_fact:
        validator_address: "{{ (validator_account.stdout | regex_search('New address: (0x[a-fA-F0-9]{40})', '\\1')) | first | default('') }}"

    - name: Backup validator account
      shell: |
        cd {{ node_bin_dir }}
        ./bin/genlayernode account export \
          --password "{{ node_password }}" \
          --address "{{ validator_address }}" \
          --passphrase "{{ backup_passphrase }}" \
          --path "{{ backup_path }}" \
          -c $(pwd)/configs/node/config.yaml
      args:
        executable: /bin/bash

    - name: Update genvm-module-llm.yaml to Enable backends based on LLM API key presence
      block:
        - name: Enable heurist backend
          shell: "sed -i '/heurist:/, /enabled:/ s/enabled: (true|false)/enabled: true/' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: heurist_key is defined and heurist_key != ''
        - name: Enable comput3 backend
          shell: "sed -i -E 's|(comput3:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if comput3_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: comput3_key is defined and comput3_key != ''
        - name: Enable ionet backend
          shell: "sed -i -E 's|(ionet:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if ionet_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: ionet_key is defined and ionet_key != ''
        - name: Enable libertai backend
          shell: "sed -i -E 's|(libertai:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if libertai_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: libertai_key is defined and libertai_key != ''
        - name: Enable openai backend
          shell: "sed -i -E 's|(openai:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if openai_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: openai_key is defined and openai_key != ''
        - name: Enable anthropic backend
          shell: "sed -i -E 's|(anthropic:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if anthropic_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: anthropic_key is defined and anthropic_key != ''
        - name: Enable xai backend
          shell: "sed -i -E 's|(xai:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if xai_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: xai_key is defined and xai_key != ''
        - name: Enable google backend
          shell: "sed -i -E 's|(google:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if google_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: google_key is defined and google_key != ''
        - name: Enable atoma backend
          shell: "sed -i -E 's|(atoma:\\n\\s+enabled:)( true| false)|\\1 {{ \"true\" if atoma_key != \"\" else \"false\" }}|' '{{ node_bin_dir }}/third_party/genvm/config/genvm-module-llm.yaml'"
          when: atoma_key is defined and atoma_key != ''
      delegate_to: localhost
      run_once: yes

    - name: Run Docker Compose to start WebDriver container
      shell: docker compose up -d
      args:
        chdir: "{{ node_bin_dir }}"

    - name: Create systemd service for GenLayer validator node
      copy:
        dest: /etc/systemd/system/genlayer-node.service
        content: |
          [Unit]
          Description=GenLayer Validator Node
          After=network.target

          [Service]
          WorkingDirectory={{ node_bin_dir }}
          ExecStart={{ node_bin_dir }}/bin/genlayernode run -c {{ config_dir }}/config.yaml --password '{{ node_password }}'
          Restart=on-failure
          RestartSec=10
          User=root
          StandardOutput=syslog
          StandardError=syslog
          SyslogIdentifier=genlayer-node
          Environment=HEURISTKEY={{ heurist_key }}
          Environment=COMPUT3KEY={{ comput3_key }}
          Environment=IOINTELLIGENCEKEY={{ ionet_key }}
          Environment=LIBERTAI_API_KEY={{ libertai_key }}
          Environment=OPENAIKEY={{ openai_key }}
          Environment=ANTHROPICKEY={{ anthropic_key }}
          Environment=XAIKEY={{ xai_key }}
          Environment=GEMINIKEY={{ google_key }}
          Environment=ATOMAKEY={{ atoma_key }}

          [Install]
          WantedBy=multi-user.target
      notify: Restart genlayer node

    - name: Reload systemd to register new service
      systemd:
        daemon_reload: yes

    - name: Enable and start genlayer-node service
      systemd:
        name: genlayer-node.service
        enabled: yes
        state: started

    - name: Print validator address in a banner
      debug:
        msg: |
          ***********************************************
          *            Validator Address                *
          ***********************************************
          {{ validator_address }}
          ***********************************************