CNTOOLS- transitioning from online only workflow....to offline(hybrid) workflow.

[beefcake4000]

my first discussion post...

hey wonderful people!

I have been experimenting with CTNOOLs over that last few weeks, Its an awesome tool....I had no issues with online mode on a local machine with 2 local relays. I was successful in registering a pool.

However......i want to level up. My problem is i dont want to retire my pool and start over...........so lets assume all my keys and files are compromised.

What would be the best way to transition to offline workflow without having to retire pool? and have to wait 2 weeks...and MAYBE get my ticker back....lol

i have since created a New offline wallet(hybrid)....and made a modification to the pool...it seemed to work without major errors.
however new wallet is not showing pledge on standard pool explorer sites...... so something is not right.

So....my comfort level is hesitant....because i have introduced another device with another instance of cntools.
now i have several back up snapshots from both computers......and iam hesitant on randomly replacing files....as this can get messy quick.

Am i overlooking a simpler solution?

I also made documented a workflow on this journey.....
hopefully to help others. Comments/corrections appreciated!

https://forum.cardano.org/t/cntools-offline-workflow-paint-by-numbers-a-guide-for-noobs-by-a-noob/117092

cheers.

[Scitz0]

It would help if you provide pool id for the pool you modified so I can look at the history for it.

Regarding best ways to transition to offline mode. You mentioned "so lets assume all my keys and files are compromised". If all your keys are compromised there is nothing really to do. So best to stop that from happening in the first place :). For transition part, the backup and restore can help you copy all files (pool and wallets) between the online and offline server, letting you decide if the backup should contain the signing keys or not. It even lets you encrypt the backup file for safer transfer and storage.

So if we take the scenario that you just want to move existing pool and wallets into offline mode (no modification or wallet changes), steps would be:

1. Create backup on online server choosing to backup all files incl signing keys (preferrably encrypting backup).
2. Move backup to offline server and restore within cntools.
3. Once you have verified that all files are safely moved to offline server, including signins files for wallets and pool. Feel free to remove signing files from online server.

Please try above out on the testnets to really make sure you are comfortable with what you are doing and that you understand whats happening. CNTools is a good tool to help speed things up, but shouldn't take away from learning whats really going on in the background.

[beefcake4000]

thanks for your reply...

On 5/1/2023 3:10 PM, Ola [AHLNET] wrote:

It would help if you provide pool id for the pool you modified so I can look at the history for it.

pool1lfzvl4q8nemdajv4sa4sa8nc9rfkdv8fj33alpjt26r86q9wy4m

Regarding best ways to transition to offline mode. You mentioned "so lets assume all my keys and files are compromised". If all your keys are compromised there is nothing really to do. So best to stop that from happening in the first place :).

So true lol!
i have learned my lesson.

yes all files are encrypted on BP (its local/under firewall with 2 relays) so not exposed ( i hope)

For transition part, the backup and restore can help you copy all files (pool and wallets) between the online and offline server, letting you decide if the backup should contain the signing keys or not. It even lets you encrypt the backup file for safer transfer and storage.
So if we take the scenario that you just want to move existing pool and wallets into offline mode (no modification or wallet changes), steps would be:

Create backup on online server choosing to backup all files incl signing keys (preferrably encrypting backup).
Move backup to offline server and restore within cntools.
Once you have verified that all files are safely moved to offline server, including signins files for wallets and pool. Feel free to remove signing files from online server.

ok...i will do that for sure.

since i did generate a new stake pool wallet offline.......and submitted a modify. So I have confidence the new pool wallet is cold generated and safe.

This new offline generated wallet is now associated with the pool. (i hope)

iam wondering how i go about replacing/modifying or deprecating the other original cold files.... can they be swapped/or modified with newly cold generated?

My goal would be to deprecate the original cold files, and replace with modified. or is this possible?

Iam 99% sure my keys are fine....i just want to be 100% certain before increasing pledge to help with Block production.. :)

are you on telegram ? can you do a quick back and forth for a few minutes every couple of days? as i work through this?

I really appreciate your advice.

[Scitz0]

New cold keys = new pool. The pool id is derived from cold keys.

We have a guild tools TG channel here.
https://t.me/guild_operators_official

Feel free to ask questions there for specific questions regarding the tools. For general SPO questions the official SPO groups would be a better fit.