Skip to content

Commit

Permalink
syntax edit
Browse files Browse the repository at this point in the history
  • Loading branch information
serinko committed Nov 25, 2024
1 parent 0e511b7 commit 3cac13c
Show file tree
Hide file tree
Showing 4 changed files with 15 additions and 5 deletions.
Original file line number Diff line number Diff line change
@@ -1 +1 @@
Monday, November 25th 2024, 11:55:52 UTC
Monday, November 25th 2024, 13:24:04 UTC
5 changes: 4 additions & 1 deletion documentation/docs/pages/operators/changelog.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,6 @@ You can follow these steps to make a workaround:

<AccordionTemplate name="Authenticator error fix">
<Steps>

###### 1. Find the error

- In the node logs, locate the ERROR message which says `the exit gateway subtask has failed with the following message: failed to start authenticator: internal wireguard error no private IP set for peer KN5GPvkC+p6G/SM4PD2Z3ObAtRGiDjHPRnQOPpbdUQk=`
Expand All @@ -94,6 +93,10 @@ You can follow these steps to make a workaround:

###### 2. Fix the issue in sqlite3 db

<Callout type="warning" emoji="⚠️">
Be careful when running commands within sqlite database.
</Callout>

- Navigate to the data directory:
```sh
cd $HOME/.nym/nym-nodes/<ID>/data
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -428,7 +428,11 @@ Make sure that you get the validation of all connectivity. If there are still an

## Running `nym-node` as a non-root

Some operators prefer to run `nym-node` without root privileges. It's possible but still `nym-node` binary needs higher privileges for network-level operations demanding these permissions. Bellow is a guide how to go about such setup:
Some operators prefer to run `nym-node` without root privileges. It's possible but still `nym-node` binary needs higher privileges for network-level operations demanding these permissions. Below is a guide how to go about such setup:
<Callout type="warning" emoji="⚠️">
Copying nodes database and the `.nym/` directories from `/root/.nym` to `/home/<USER>/.nym/` should be treated as experimental, therefore we would advise this section for operators starting new nodes, rather than tweaking an existing one. We will publish a detailed guide for changing permissions of an existing node soon.
</Callout>
<Steps>
###### 1. Setup a new user
Expand Down Expand Up @@ -462,10 +466,10 @@ echo "$user_name ALL=(ALL) NOPASSWD:ALL" | sudo tee -a /etc/sudoers.d/$user_name
###### 2. Grant needed permissions for network-level operations
While `nym-node` will be set as a user level process, it requires higher privileges for network-level operations, Set them up with this command:
While `nym-node` will be set as a user process, it requires higher privileges for network-level operations, set them up with this command:
```sh
sudo setcap 'cap_net_bind_service=+ep cap_net_admin=+ep' nym-nod
sudo setcap 'cap_net_bind_service=+ep cap_net_admin=+ep' nym-node
```
**After replacing or upgrading the binary, you must reapply these permissions each time!**
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -232,6 +232,9 @@ username soft nofile 4096
Then reboot your server and restart your node.
## Running `nym-node` as a non-root
Some operators prefer to run `nym-node` without root privileges. It's possible but still `nym-node` binary needs higher privileges for network-level operations demanding these permissions. If you are starting a new `nym-node` and want to run it as a non-root, follow [this guide](../nym-node/configuration#running-nym-node-as-a-non-root) before you proceed with the node setup sections.
## Ports reference tables
Expand Down

0 comments on commit 3cac13c

Please sign in to comment.