📖 References

Common reference commands, test patterns, and links to related documentation.

🔑 SSH access patterns

With RSA key (safe)

ssh -i <key-path> \
    -o StrictHostKeyChecking=no \
    -o UserKnownHostsFile=/dev/null \
    -p 22 \
    <user>@<host>.attestant.io

With password (temporary)

ssh -o PreferredAuthentications=password \
    -o PubkeyAuthentication=no \
    -o StrictHostKeyChecking=no \
    -o UserKnownHostsFile=/dev/null \
    -p 22 \
    <user>@<host>.attestant.io

🔄 Infrastructure updates

For Grafana updates, see "Update Prometheus configuration" in the ops-tools runbook.

🔐 Testing Dirk connectivity to Vouch

Run these tests from your validating host to verify Dirk signing connectivity.

Quick pod reference

Pod	Servers	Batch	Notes
Pod1	01-05	Batch0008	`signer-eu01` to `signer-eu05`
Pod2	06-10	Batch0108	`signer-eu06` to `signer-eu10`
Pod3	11-15	Batch0208	`signer-eu11` to `signer-eu15`
Pod4	16-20	Batch0308	`signer-eu16` to `signer-eu20`
Pod5	21-25	Batch0408	`signer-eu21` to `signer-eu25`
Pod6	26-30	Batch0508	`signer-eu26` to `signer-eu30`
Pod7	31-35	Batch0608	`signer-eu31` to `signer-eu35`
Pod8	36-40	Batch0708	`signer-eu36` to `signer-eu40`
Pod9	01-05	Batch0808	`eth-sgn-p09-01` to `eth-sgn-p09-05`

Testing script (generic)

This script can test any pod by adjusting the variables. Example for Pod1:

#!/bin/bash
# Test Dirk connectivity for a pod's signers

# Configure these per pod
START_NUM=1
END_NUM=5
BATCH="0008"
PREFIX="signer-eu"  # or "eth-sgn-p09" for Pod9

# Common test data
TEST_DATA="0x000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f"
TEST_DOMAIN="0x202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f"

# Current hostname for certs
host=$(uname -n)

for i in $(seq $START_NUM $END_NUM); do
    server=$(printf '%02d' $i)
    echo -n "${PREFIX}${server}: "
    
    ethdo signature sign \
        --remote="${PREFIX}${server}.attestant.io:12381" \
        --server-ca-cert /home/vouch/certs/ca.crt \
        --client-cert "/home/vouch/certs/${host}.attestant.io.crt" \
        --client-key "/home/vouch/certs/${host}.attestant.io.key" \
        --account="Batch${BATCH}/00275" \
        --data="$TEST_DATA" \
        --domain="$TEST_DOMAIN"
done

Per-pod variables

Quick reference for pod-specific values:

# Pod1: servers 01-05, Batch0008
START_NUM=1;  END_NUM=5;   BATCH="0008"; PREFIX="signer-eu"

# Pod2: servers 06-10, Batch0108
START_NUM=6;  END_NUM=10;  BATCH="0108"; PREFIX="signer-eu"

# Pod3: servers 11-15, Batch0208
START_NUM=11; END_NUM=15;  BATCH="0208"; PREFIX="signer-eu"

# Pod4: servers 16-20, Batch0308
START_NUM=16; END_NUM=20;  BATCH="0308"; PREFIX="signer-eu"

# Pod5: servers 21-25, Batch0408
START_NUM=21; END_NUM=25;  BATCH="0408"; PREFIX="signer-eu"

# Pod6: servers 26-30, Batch0508
START_NUM=26; END_NUM=30;  BATCH="0508"; PREFIX="signer-eu"

# Pod7: servers 31-35, Batch0608
START_NUM=31; END_NUM=35;  BATCH="0608"; PREFIX="signer-eu"

# Pod8: servers 36-40, Batch0708
START_NUM=36; END_NUM=40;  BATCH="0708"; PREFIX="signer-eu"

# Pod9: servers 01-05, Batch0808 (different naming)
START_NUM=1;  END_NUM=5;   BATCH="0808"; PREFIX="eth-sgn-p09-"

Tips & troubleshooting

Always run tests from your validating host to ensure proper cert access.
Check cert paths if you get TLS errors (/home/vouch/certs/).
Use --verbose with ethdo for detailed error output.
Pod9 uses a different naming scheme; ensure you adjust PREFIX accordingly.

Last reviewed: 2025-10-26 • InfraOps

📝 Example Usage

Testing Pod4

# Use these variables with the generic script above
START_NUM=16; END_NUM=20; BATCH="0308"; PREFIX="signer-eu"

Testing Pod9 (different naming scheme)

# Note the different PREFIX for Pod9
START_NUM=1; END_NUM=5; BATCH="0808"; PREFIX="eth-sgn-p09-"

🚀 Getting Started

Copy the generic testing script to a file (e.g., test-dirk.sh)
Make it executable: chmod +x test-dirk.sh
Set the pod variables from the reference above
Run the script: ./test-dirk.sh

For more information about Dirk and Vouch setup, see the operations guide.

Bitwise Onchain Dev & Ops