Scripts & Snippets

Verify server login audit logs are working

While observing the Security dashboard, SSH login panel do the following:

  1. Log in to the target server (this should increment the SSH monitor)
  2. From operations-eu01 run
   curl -s <host>:14148/metrics | egrep '^auth_'
  1. Verify prsesence of a result like this:
    auth_ssh_logins_total{event="Accepted",from="82.69.59.40",method="publickey"} 1

Verify customer on-boarding is working using acli

TODO Reference the "Validator activation" procedure

Verify end to end signatures with vouch

In order to verify that vouch is running and capable of talking to dirk instances, run the following from a vouch installation (e.g. eth-val-p01-01):

cd /home/vouch
ethdo signature sign \
--remote=signer-eu01.attestant.io:12381 \
--client-cert=certs/validator-eu02.attestant.io.crt \
--client-key=certs/validator-eu02.attestant.io.key \
--server-ca-cert=certs/ca.crt \
--domain=0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
--data=0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
--account=Batch0001/00001

This should return a signature. If not, verify that ethdo is available in /root/sw and $PATH.

Repeat the above command for each remote signer (e.g. signer-eu02, 03, 04, 05). All should return the same signature.