Manual Deployment

Guide for deploying NCN Network manually on servers without containers.

---

Prerequisites

• Linux server (Ubuntu 22.04 LTS recommended)

• Root or sudo access

• Environment setup completed

• Network access between servers

---

System Preparation

Install Dependencies

# Update system
sudo apt update && sudo apt upgrade -y

# Install build dependencies
sudo apt install -y \
  build-essential \
  pkg-config \
  libssl-dev \
  protobuf-compiler \
  git \
  curl

# Install Rust
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
source $HOME/.cargo/env

Install Python (for Compute Node)

sudo apt install -y python3 python3-pip python3-venv

# Create venv
python3 -m venv /opt/ncn/venv

# Install ML dependencies
/opt/ncn/venv/bin/pip install torch transformers numpy scipy

---

Build Binaries

# Clone repository
git clone https://github.com/neurochainai/ncn-network-v2-rs.git
cd ncn-network-v2-rs

# Build release binaries
cargo build --release

# Copy binaries to /opt
sudo mkdir -p /opt/ncn/bin
sudo cp target/release/gateway_node /opt/ncn/bin/
sudo cp target/release/compute_node /opt/ncn/bin/
sudo cp target/release/p2p_registry_node /opt/ncn/bin/

---

Configure Services

Create Configuration Directory

sudo mkdir -p /opt/ncn/config
sudo mkdir -p /opt/ncn/data
sudo mkdir -p /opt/ncn/logs
sudo mkdir -p /opt/ncn/models

P2P Registry Configuration

Create /opt/ncn/config/registry.env:

# Listening addresses
GRPC_LISTEN_ADDR=0.0.0.0:50050
P2P_LISTEN_ADDR=/ip4/0.0.0.0/tcp/8828

# Validator settings
VALIDATOR_PRIVATE_KEY=<your-validator-key>
MIN_VALIDATORS_FOR_CONSENSUS=3

# Blockchain sync
VALIDATOR_SYNC_ENABLED=true
FORKNET_RPC_URL=https://testnet-rpc-1.forknet.io
CHAIN_ID=828

# Logging
RUST_LOG=info

Gateway Configuration

Create /opt/ncn/config/gateway.env:

# Listening addresses
GRPC_ADDR=0.0.0.0:50051
HTTP_ADDR=0.0.0.0:8080
WS_ADDR=0.0.0.0:9000

# Registry connection
REGISTRY_GRPC_ADDR=http://127.0.0.1:50050

# Wallet
GATEWAY_WALLET_PRIVATE_KEY=<your-gateway-key>
GATEWAY_WALLET_ADDRESS=<your-gateway-address>

# Blockchain
RPC_URL=https://testnet-rpc-1.forknet.io
CONTRACT_ADDRESS=0x4361115359E5C0a25c9b2f8Bb71184F010b768ea
CHAIN_ID=828

# Payment settings
REQUIRE_PAYMENT=true
ENABLE_PAYMENT_VERIFICATION=true

# Logging
RUST_LOG=info

Compute Node Configuration

Create /opt/ncn/config/compute.env:

# Gateway connection
GATEWAY_ADDR=http://127.0.0.1:50051

# Node identity
COMPUTE_NODE_PRIVATE_KEY=<your-compute-key>
NODE_WALLET_ADDRESS=<your-compute-address>

# Model configuration
MODEL_PATH=/opt/ncn/models

# Execution settings
SANDBOX_MODE=strict
EXECUTION_TIMEOUT_SECS=300
MAX_MEMORY_MB=8192

# Python
PYTHON_PATH=/opt/ncn/venv/bin/python3
PYTHON_VENV_PATH=/opt/ncn/venv

# Logging
RUST_LOG=info

---

Create Systemd Services

P2P Registry Service

Create /etc/systemd/system/ncn-registry.service:

[Unit]
Description=NCN P2P Registry Node
After=network.target

[Service]
Type=simple
User=ncn
Group=ncn
WorkingDirectory=/opt/ncn
EnvironmentFile=/opt/ncn/config/registry.env
ExecStart=/opt/ncn/bin/p2p_registry_node
Restart=always
RestartSec=10

# Logging
StandardOutput=append:/opt/ncn/logs/registry.log
StandardError=append:/opt/ncn/logs/registry.log

# Security
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/ncn/data /opt/ncn/logs

[Install]
WantedBy=multi-user.target

Gateway Service

Create /etc/systemd/system/ncn-gateway.service:

[Unit]
Description=NCN Gateway Node
After=network.target ncn-registry.service
Wants=ncn-registry.service

[Service]
Type=simple
User=ncn
Group=ncn
WorkingDirectory=/opt/ncn
EnvironmentFile=/opt/ncn/config/gateway.env
ExecStart=/opt/ncn/bin/gateway_node
Restart=always
RestartSec=10

# Logging
StandardOutput=append:/opt/ncn/logs/gateway.log
StandardError=append:/opt/ncn/logs/gateway.log

# Security
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/ncn/data /opt/ncn/logs

[Install]
WantedBy=multi-user.target

Compute Node Service

Create /etc/systemd/system/ncn-compute.service:

[Unit]
Description=NCN Compute Node
After=network.target ncn-gateway.service
Wants=ncn-gateway.service

[Service]
Type=simple
User=ncn
Group=ncn
WorkingDirectory=/opt/ncn
EnvironmentFile=/opt/ncn/config/compute.env
ExecStart=/opt/ncn/bin/compute_node --gateway-addr ${GATEWAY_ADDR} --model-path ${MODEL_PATH}
Restart=always
RestartSec=10

# Logging
StandardOutput=append:/opt/ncn/logs/compute.log
StandardError=append:/opt/ncn/logs/compute.log

# Security (less restrictive for sandbox)
NoNewPrivileges=false
ProtectSystem=false

[Install]
WantedBy=multi-user.target

---

Create Service User

# Create system user
sudo useradd -r -s /bin/false ncn

# Set ownership
sudo chown -R ncn:ncn /opt/ncn

---

Start Services

# Reload systemd
sudo systemctl daemon-reload

# Enable services
sudo systemctl enable ncn-registry ncn-gateway ncn-compute

# Start services
sudo systemctl start ncn-registry
sudo systemctl start ncn-gateway
sudo systemctl start ncn-compute

# Check status
sudo systemctl status ncn-registry
sudo systemctl status ncn-gateway
sudo systemctl status ncn-compute

---

Firewall Configuration

# UFW example
sudo ufw allow 50050/tcp  # Registry gRPC
sudo ufw allow 8828/tcp   # Registry P2P
sudo ufw allow 50051/tcp  # Gateway gRPC
sudo ufw allow 8080/tcp   # Gateway HTTP
sudo ufw allow 9000/tcp   # Gateway WebSocket

# Or iptables
sudo iptables -A INPUT -p tcp --dport 50050 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8828 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 50051 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8080 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 9000 -j ACCEPT

---

Log Management

View Logs

# Registry logs
sudo tail -f /opt/ncn/logs/registry.log

# Gateway logs
sudo tail -f /opt/ncn/logs/gateway.log

# Compute logs
sudo tail -f /opt/ncn/logs/compute.log

# Or via journalctl
sudo journalctl -u ncn-gateway -f

Log Rotation

Create /etc/logrotate.d/ncn:

/opt/ncn/logs/*.log {
    daily
    rotate 7
    compress
    delaycompress
    missingok
    notifempty
    create 640 ncn ncn
    postrotate
        systemctl reload ncn-gateway ncn-registry ncn-compute 2>/dev/null || true
    endscript
}

---

Health Checks

Check Services

# Service status
sudo systemctl status ncn-registry ncn-gateway ncn-compute

# Health endpoints
curl http://localhost:8080/health

# gRPC connectivity
grpcurl -plaintext localhost:50050 list
grpcurl -plaintext localhost:50051 list

---

Updating

# Stop services
sudo systemctl stop ncn-compute ncn-gateway ncn-registry

# Update code
cd /path/to/ncn-network-v2-rs
git pull

# Rebuild
cargo build --release

# Copy new binaries
sudo cp target/release/gateway_node /opt/ncn/bin/
sudo cp target/release/compute_node /opt/ncn/bin/
sudo cp target/release/p2p_registry_node /opt/ncn/bin/

# Restart services
sudo systemctl start ncn-registry ncn-gateway ncn-compute

---

Troubleshooting

Service Won't Start

# Check logs
sudo journalctl -u ncn-gateway -n 50

# Check permissions
ls -la /opt/ncn/

# Verify binary
/opt/ncn/bin/gateway_node --help

Connection Issues

# Check ports
sudo netstat -tlnp | grep -E "(50050|50051|8080)"

# Test connectivity
nc -zv localhost 50051

---

Next Steps

• Production Deployment - Production hardening

• Monitoring - Set up monitoring

• Troubleshooting - Common issues