haveno/docs/deployment-guide.md

Deployment Guide

This guide describes how to deploy a Haveno network:

• Manage services on a VPS
• Fork and build Haveno
• Start a Monero node
• Build and start price nodes
• Add seed nodes
• Add arbitrators
• Configure trade fees and other configuration
• Build Haveno installers for distribution
• Send alerts to update the application and other maintenance

Manage services on a VPS

Haveno's services should be run on a VPS for reliable uptime.

The seed node, price node, and Monero node can be run as system services. Scripts are available for reference in scripts/deployment to customize and run system services.

Arbitrators can be started in a Screen session and then detached to run in the background.

Some good hints about how to secure a VPS are in Monero's meta repository.

Install dependencies

On Linux and macOS, install Java JDK 21:

curl -s "https://get.sdkman.io" | bash
sdk install java 21.0.2.fx-librca

Alternatively, on Ubuntu 22.04:

sudo apt-get install openjdk-21-jdk

On Windows, install MSYS2 and Java JDK 21:

1. Install MSYS2.

2. Start MSYS2 MINGW64 or MSYS MINGW32 depending on your system. Use MSYS2 for all commands throughout this document.

3. Update pacman: pacman -Syy

4. Install dependencies. During installation, use default=all by leaving the input blank and pressing enter.

   64-bit: pacman -S mingw-w64-x86_64-toolchain make mingw-w64-x86_64-cmake git

   32-bit: pacman -S mingw-w64-i686-toolchain make mingw-w64-i686-cmake git

5. curl -s "https://get.sdkman.io" | bash

6. sdk install java 21.0.2.fx-librca

Fork and build Haveno

Fork Haveno to a public repository. Then build Haveno:

git clone <your fork url>
cd haveno
git checkout <latest tag>
make clean && make

Start a Monero node

Seed nodes and arbitrators must use a local, unrestricted Monero node for performance and functionality.

To run a private Monero node as a system service, customize and deploy private-stagenet.service and private-stagenet.conf.

Optionally customize and deploy monero-stagenet.service and monero-stagenet.conf to run a public Monero node as a system service for Haveno clients to use.

You can also start the Monero node in your current terminal session by running make monerod for mainnet or make monerod-stagenet for stagenet.

Build and start price nodes

The price node is separated from Haveno and is run as a standalone service. To deploy a pricenode on both TOR and clearnet, see the instructions on the repository: https://github.com/haveno-dex/haveno-pricenode.

After the price node is built and deployed, add the price node to DEFAULT_NODES in ProvidersRepository.java.

Customize and deploy haveno-pricenode.env and haveno-pricenode.service to run as a system service.

Add seed nodes

Seed nodes without Proof of Work (PoW)

Note

Using PoW is suggested. See next section for PoW setup.

For each seed node:

1. Build the Haveno repository.
2. Start a local Monero node.
3. Modify ./scripts/deployment/haveno-seednode.service and ./scripts/deployment/haveno-seednode2.service as needed.
4. Copy ./scripts/deployment/haveno-seednode.service to /etc/systemd/system (if you are the very first seed in a new network also copy ./scripts/deployment/haveno-seednode2.service to /etc/systemd/system).
5. Run sudo systemctl start haveno-seednode.service to start the seednode and also run sudo systemctl start haveno-seednode2.service if you are the very first seed in a new network and coppied haveno-seednode2.service to your systemd folder.
6. Run journalctl -u haveno-seednode.service -b -f which will print the log and show the .onion address of the seed node. Press Ctrl+C to stop printing the log and record the .onion address given.
7. Add the .onion address to core/src/main/resources/xmr_<network>.seednodes along with the port specified in the haveno-seednode.service file(s) (ex: example.onion:1002). Be careful to record full addresses correctly.
8. Update all seed nodes, arbitrators, and user applications for the change to take effect.

Seed nodes with Proof of Work (PoW)

Note

These instructions were written for Ubuntu with an Intel/AMD 64-bit CPU so changes may be needed for your distribution.

Install Tor

Source: Tor Project Support

1. Verify architecture sudo dpkg --print-architecture.
2. Create sources.list file sudo nano /etc/apt/sources.list.d/tor.list.
3. Paste deb [signed-by=/usr/share/keyrings/deb.torproject.org-keyring.gpg] https://deb.torproject.org/torproject.org <DISTRIBUTION> main.
4. Paste deb-src [signed-by=/usr/share/keyrings/deb.torproject.org-keyring.gpg] https://deb.torproject.org/torproject.org <DISTRIBUTION> main.

Note

Replace <DISTRIBUTION> with your system codename such as "jammy" for Ubuntu 22.04.

5. Press Ctrl+X, then "y", then the enter key.
6. Add the gpg key used to sign the packages sudo wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/deb.torproject.org-keyring.gpg >/dev/null.
7. Update repositories sudo apt update.
8. Install tor and tor debian keyring sudo apt install tor deb.torproject.org-keyring.
9. Replace torrc sudo mv /etc/tor/torrc /etc/tor/torrc.default then sudo cp seednode/torrc /etc/tor/torrc.
10. stop tor sudo systemctl stop tor.

For each seed node:

1. Build the Haveno repository.
2. Start a local Monero node.
3. Run sudo cat /var/lib/tor/haveno_seednode/hostname and note down the .onion for the next step & step 10.
4. Modify ./scripts/deployment/haveno-seednode.service and ./scripts/deployment/haveno-seednode2.service as needed.
5. Copy ./scripts/deployment/haveno-seednode.service to /etc/systemd/system (if you are the very first seed in a new network also copy ./scripts/deployment/haveno-seednode2.service to /etc/systemd/system).
6. Add user to tor group sudo usermod -aG debian-tor <user>.

Note

Replace <user> above with the user that will be running the seed node (step 6 above & step 4)

7. Disconnect and reconnect SSH session or logout and back in.
8. Run sudo systemctl start tor.
9. Run sudo systemctl start haveno-seednode to start the seednode and also run sudo systemctl start haveno-seednode2 if you are the very first seed in a new network and coppied haveno-seednode2.service to your systemd folder.
10. Add the .onion address from step 3 to core/src/main/resources/xmr_<network>.seednodes along with the port specified in the haveno-seednode.service file(s) (ex: example.onion:2002). Be careful to record full addresses correctly.
11. Update all seed nodes, arbitrators, and user applications for the change to take effect.

Customize and deploy haveno-seednode.service to run a seed node as a system service.

Each seed node requires a locally running Monero node. You can use the default port or configure it manually with --xmrNode, --xmrNodeUsername, and --xmrNodePassword.

Rebuild all seed nodes any time the list of registered seed nodes changes.

Notes

• Avoid all seed nodes going offline at the same time. If all seed nodes go offline at the same time, the network will be reset, including registered arbitrators, the network filter object, and trade history. In that case, arbitrators need to restart or re-register, and the network filter object needs to be re-applied. This should be done immediately or clients will cancel their offers due to the signing arbitrators being unregistered and no replacements being available to re-sign.
• At least 2 seed nodes should be run because the seed nodes restart once per day.

Register keypairs with privileges

Register keypair(s) with developer privileges

1. Build the Haveno repository.
2. Generate public/private keypairs for developers: ./gradlew generateKeypairs
3. Add the developer public keys in the constructor of FilterManager.java.
4. Update all seed nodes, arbitrators, and user applications for the change to take effect.

Register keypair(s) with alert privileges

1. Build the Haveno repository.
2. Generate public/private keypairs for alerts: ./gradlew generateKeypairs
3. Add the public keys in the constructor of AlertManager.java.
4. Update all seed nodes, arbitrators, and user applications for the change to take effect.

Register keypair(s) with private notification privileges

1. Build the Haveno repository.
2. Generate public/private keypairs for private notifications: ./gradlew generateKeypairs
3. Add the public keys in the constructor of PrivateNotificationManager.java.
4. Update all seed nodes, arbitrators, and user applications for the change to take effect.

Add arbitrators

For each arbitrator:

1. Build the Haveno repository.
2. Generate a public/private keypair for the arbitrator: ./gradlew generateKeypairs
3. Add the public key to getPubKeyList() in ArbitratorManager.java.
4. Update all seed nodes, arbitrators, and user applications for the change to take effect.
5. Start a local Monero node.
6. Start the Haveno desktop application using the application launcher or e.g. make arbitrator-desktop-mainnet
7. Go to the Account tab and then press ctrl + r. A prompt will open asking to enter the key to register the arbitrator. Enter your private key.

The arbitrator is now registered and ready to accept requests for dispute resolution.

Notes

• Arbitrators must use a local Monero node with unrestricted RPC in order to submit and flush transactions from the pool.
• Arbitrators should remain online as much as possible in order to balance trades and avoid clients spending time trying to contact offline arbitrators. A VPS or dedicated machine running 24/7 is highly recommended.
• Remember that for the network to run correctly and people to be able to open and accept trades, at least one arbitrator must be registered on the network.
• IMPORTANT: Do not reuse keypairs on multiple arbitrator instances.

Remove an arbitrator

Note

Ensure the arbitrator's trades are completed before retiring the instance.

1. Start the arbitrator's desktop application using the application launcher or e.g. make arbitrator-desktop-mainnet from the root of the repository.
2. Go to the Account tab and click the button to unregister the arbitrator.

Set a network filter on mainnet

On mainnet, the p2p network is expected to have a filter object for offers, onions, currencies, payment methods, etc.

To set the network's filter object:

1. Enter ctrl + f in the arbitrator or other Haveno instance to open the Filter window.
2. Enter a developer private key from the previous steps and click "Add Filter" to register.

Note

If all seed nodes are restarted at the same time, arbitrators and the filter object will become unregistered and will need to be re-registered.

Change the default folder name for Haveno application data

To avoid user data corruption when using multiple Haveno networks, change the default folder name for Haveno's application data on your network:

• Change DEFAULT_APP_NAME in HavenoExecutable.java.
• Change appName throughout the Makefile accordingly.

For example, change "Haveno" to "HavenoX", which will use this application folder:

• Linux: ~/.local/share/HavenoX/
• macOS: ~/Library/Application Support/HavenoX/
• Windows: ~\AppData\Roaming\HavenoX\

Set the network's release date

Optionally set the network's approximate release date by setting RELEASE_DATE in HavenoUtils.java.

This will prevent posting sell offers which no buyers can take before any buyer accounts are signed and aged, while the network bootstraps.

After a period (default 60 days), the limit is lifted and sellers can post offers exceeding unsigned buy limits, but they will receive an informational warning for an additional period (default 6 months after release).

The defaults can be adjusted with the related constants in HavenoUtils.java.

Configure trade fees

Trade fees can be configured in HavenoUtils.java. The maker and taker fee percents can be adjusted.

Set ARBITRATOR_ASSIGNS_TRADE_FEE_ADDRESS to true for the arbitrator to assign the trade fee address, which defaults to their own wallet.

Otherwise set ARBITRATOR_ASSIGNS_TRADE_FEE_ADDRESS to false and set the XMR address in getGlobalTradeFeeAddress() to collect all trade fees to a single address (e.g. a multisig wallet shared among network administrators).

Start users for testing

Start user1 on Monero's mainnet using make user1-desktop-mainnet or Monero's stagenet using make user1-desktop-stagenet.

Similarly, start user2 on Monero's mainnet using make user2-desktop-mainnet or Monero's stagenet using make user2-desktop-stagenet.

Test trades among the users and arbitrator.

Build Haveno installers for distribution

For mainnet, first modify package.gradle to --arguments --baseCurrencyNetwork=XMR_MAINNET.

Then follow these instructions: https://github.com/haveno-dex/haveno/blob/master/desktop/package/README.md.

Send alerts to update the application

Upload updated installers for download

• In https:///downloads//, upload the installer files: Haveno-.jar.txt, signingkey.asc, Haveno-.dmg, Haveno-.dmg.asc, and files for Linux and Windows.
• In https:///pubkey/, upload pub key files, e.g. F379A1C6.asc.

Set the mandatory minimum version for trading (optional)

If applicable, update the mandatory minimum version for trading, by entering ctrl + f to open the Filter window, enter a private key with developer privileges, and enter the minimum version (e.g. 1.0.16) in the field labeled "Min. version required for trading".

Send update alert

Enter ctrl + m to open the window to send an update alert.

Enter a private key which is registered to send alerts.

Enter the alert message and new version number, then click the button to send the notification.

Manually sign payment accounts as the arbitrator

Arbitrators can manually sign payment accounts. First open the legacy UI.

Sign payment account after trade is completed

1. Go to Portfolio > History > open trade details > click 'DETAIL DATA' button.
2. Copy the <witness hash>,<pub key hash> string for the buyer or seller.
3. Go to Account > ctrl + i > ctrl + p.
4. Paste the buyer or seller's <witness hash>,<pub key hash> string.
5. Click the "Import unsigned account age witness" button to confirm.

Sign payment account from dispute

1. Go to Account > ctrl + i > ctrl + s.
2. Select payment accounts to sign from disputes.

Sign unsigned witness pub keys

1. Go to Account > ctrl + i > ctrl + o.

Other tips

• If a dispute does not open properly, try manually reopening the dispute with a keyboard shortcut: ctrl + o.
• To send a private notification to a peer: click the user icon and enter alt + r. Enter a private key which is registered to send private notifications.