Auditing Your nodes configuration
Last updated
Last updated
To make sure your Cardano nodes (relays and block-producer) are correctly configured, you can use an automated audit script that will do the following checks :
Cardano compliance
New 9.1.0 Cardano-Node version requirement for Chang hardfork
Cardano-node latest version verification
Cardano bootstrap check
Environment Variables
Systemd cardano-node file verification and parsing
Cardano startup script verification and parsing
Node operation mode (Block Producer ? Relay ?)
Topology mode (p2p enabled)
Topology configuration file parsing and compliance checks
Cardano security checks (hot keys permissions, cold keys detection)
KES keys rotation alert
Security and system checks
SSHD hardening
Null passwords check
Important services running (ufw, fail2ban, ntp server...)
Firewalling rules extract
sysctl.conf hardening check
You can directly download the repository from your Cardano Nodes :
The script must be ran with sudo and the -E option, to include your environment variables defined during the Coincashew guide (like $NODE_HOME or $NODE_CONFIG)
You will be asked to select the type of your Cardano setup with a menu. Select COINCASHEW. You can also choose to perform only security checks.
You will then be asked if you want to export the results to a file.
It takes 20 seconds for the script to complete. You'll get information about your node and will immediately be able to check whether your configuration is good or not, and make appropriate changes. Sample outputs :
The script can be found on this by