Bitcoin Forum
March 29, 2024, 08:33:42 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Bitcoin + Development Best Practices  (Read 723 times)
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 23, 2013, 10:22:55 PM
 #1

Relatively new to bitcoin but wondering if there is a specifc set of bitcoin best practices when dealing with web servers and bitcoind?
1711701222
Hero Member
*
Offline Offline

Posts: 1711701222

View Profile Personal Message (Offline)

Ignore
1711701222
Reply with quote  #2

1711701222
Report to moderator
In order to achieve higher forum ranks, you need both activity points and merit points.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711701222
Hero Member
*
Offline Offline

Posts: 1711701222

View Profile Personal Message (Offline)

Ignore
1711701222
Reply with quote  #2

1711701222
Report to moderator
1711701222
Hero Member
*
Offline Offline

Posts: 1711701222

View Profile Personal Message (Offline)

Ignore
1711701222
Reply with quote  #2

1711701222
Report to moderator
1711701222
Hero Member
*
Offline Offline

Posts: 1711701222

View Profile Personal Message (Offline)

Ignore
1711701222
Reply with quote  #2

1711701222
Report to moderator
gweedo
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000


View Profile
February 23, 2013, 10:30:39 PM
 #2

If your asking this you probably should hire someone, there is so much to say on this. Do you have any basic linux security? Should probably learn that first.
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 23, 2013, 10:37:52 PM
 #3

Yes I manage Linux web servers for a living. I'm more specifically asking about hardening bitcoind. I know the website suggests things like firewalling the RPC port to only allow access from where it suppose to. For example if you've got a webserver and a dedicated bitcoind box only allow connection to the bitcoind box from the webserver. Stuff like that I understand. But what other general tips on locking down bitcoind are there. It's always easier to miss the little things when you don't have a checklist.
gweedo
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000


View Profile
February 23, 2013, 10:45:33 PM
 #4

I save all my JSON RPC connection information into memory, it makes it harder for hackers to get to it. I would get a frontend web server and a dedicate bitcoind. Again there is so much to say on this topic.
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 23, 2013, 10:52:06 PM
 #5

Right now I've got a basic lamp + bitcoin (lampcoin Smiley machine setup in SUSE studio. Haven't published yet but was figuring before publishing I should make sure there's no obvious mistakes I'm making.
What you're saying is good advice and before I'd launch a website of any sizable amount I'd be sure to follow them. But I was hoping to create a small box that will allow people to  develop their web apps but develop them in a reasonably secure manner. If you've got some time I'd be more than happy to have your thoughts on the build.

Smiley
gweedo
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000


View Profile
February 23, 2013, 11:01:24 PM
 #6

If your developing a hosting system to allow them to use your bitcoind, then I would for sure have your bitcoind behind a script that does a lot of the heavy lifting and more security checks.
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 23, 2013, 11:18:07 PM
 #7

Not so much a hosting system a development image. I'll publish and thow up a link.

If your developing a hosting system to allow them to use your bitcoind, then I would for sure have your bitcoind behind a script that does a lot of the heavy lifting and more security checks.
gweedo
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000


View Profile
February 23, 2013, 11:30:45 PM
 #8

Not so much a hosting system a development image. I'll publish and thow up a link.

If your developing a hosting system to allow them to use your bitcoind, then I would for sure have your bitcoind behind a script that does a lot of the heavy lifting and more security checks.

ohh a server image, ok yea throw it up I would take a look at it.
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 23, 2013, 11:45:56 PM
Last edit: February 24, 2013, 12:39:42 AM by chalbersma
 #9

And here she is.
http://susestudio.com/a/UUzOnb/lampcoin-server-64bit

She's still rough around the edges so be gentle with her. Smiley

Just threw up a new version so don't be afraid to redownload. Also let me know if a different virtual format would be better.
gweedo
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000


View Profile
February 24, 2013, 02:47:06 AM
 #10

Yea a VMDK would work better, qcow2 is kinda hard to get it working without converting it. I just try to use it in virtualbox on a mac OSX 10.8 and I couldn't get it to boot.
SRoulette
Sr. Member
****
Offline Offline

Activity: 364
Merit: 252



View Profile WWW
February 24, 2013, 02:54:11 AM
 #11

From our own experience the best advice we can give is do not host your wallet on a server you do not trust.
There have been cases of hosting company admins stealing the bitcoins from the site their supposed to admin, ala trade hill.

Hello Gweedo, nice to see you helping out.

chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 24, 2013, 03:53:23 AM
 #12

From our own experience the best advice we can give is do not host your wallet on a server you do not trust.
There have been cases of hosting company admins stealing the bitcoins from the site their supposed to admin, ala trade hill.

Hello Gweedo, nice to see you helping out.

Hmm not sure how to accomplish that part.

But I am changing the default format to vmdk which should work with VirtualBox no problem.
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 24, 2013, 04:00:00 AM
 #13

Default format is now vmdk. Should work with virtual box.
chalbersma (OP)
Full Member
***
Offline Offline

Activity: 163
Merit: 100


View Profile WWW
February 25, 2013, 02:56:34 AM
 #14

Updated has both vmdk and kvm images.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!