From 0a026faece4a617fa310da3a8d5904f58a9d8d87 Mon Sep 17 00:00:00 2001
From: Michael Phan <tuananhk13bk@gmail.com>
Date: Mon, 4 Aug 2025 22:57:35 +0700
Subject: [PATCH 1/2] Temp commit

---
 config.yaml                             |  15 +
 deployments/mpcium-cli/Dockerfile       |  49 +++
 deployments/mpcium/Dockerfile           |  60 ++++
 deployments/mpcium/docker-compose.yaml  | 120 +++++++
 deployments/node-configs/setup-nodes.sh | 457 ++++++++++++++++++++++++
 node0/config.yaml                       |  15 +
 node0/peers.json                        |   5 +
 node1/config.yaml                       |  15 +
 node1/peers.json                        |   5 +
 node2/config.yaml                       |  15 +
 node2/peers.json                        |   5 +
 peers.json                              |   8 +-
 12 files changed, 765 insertions(+), 4 deletions(-)
 create mode 100644 config.yaml
 create mode 100644 deployments/mpcium-cli/Dockerfile
 create mode 100644 deployments/mpcium/Dockerfile
 create mode 100644 deployments/mpcium/docker-compose.yaml
 create mode 100755 deployments/node-configs/setup-nodes.sh
 create mode 100644 node0/config.yaml
 create mode 100644 node0/peers.json
 create mode 100644 node1/config.yaml
 create mode 100644 node1/peers.json
 create mode 100644 node2/config.yaml
 create mode 100644 node2/peers.json

diff --git a/config.yaml b/config.yaml
new file mode 100644
index 0000000..907d304
--- /dev/null
+++ b/config.yaml
@@ -0,0 +1,15 @@
+nats:
+  url: nats://127.0.0.1:4222
+
+consul:
+  address: localhost:8500
+
+mpc_threshold: 2
+environment: development
+badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
+event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
+max_concurrent_keygen: 2
+db_path: "."  
+backup_enabled: true
+backup_period_seconds: 300 # 5 minutes
+backup_dir: backups
diff --git a/deployments/mpcium-cli/Dockerfile b/deployments/mpcium-cli/Dockerfile
new file mode 100644
index 0000000..074f6d2
--- /dev/null
+++ b/deployments/mpcium-cli/Dockerfile
@@ -0,0 +1,49 @@
+# Stage 1: Build stage
+FROM golang:1.24.4-alpine AS builder
+
+# Install build dependencies
+RUN apk add --no-cache git ca-certificates tzdata
+
+# Set working directory
+WORKDIR /app
+
+# Copy go mod files
+COPY go.mod go.sum ./
+
+# Download dependencies
+RUN go mod download
+
+# Copy source code
+COPY . .
+
+# Build the binary
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
+    -ldflags='-w -s -extldflags "-static"' \
+    -o mpcium-cli ./cmd/mpcium-cli
+
+# Stage 2: Runtime stage
+FROM alpine:3.19
+
+# Install runtime dependencies
+RUN apk add --no-cache ca-certificates tzdata
+
+# Create non-root user
+RUN addgroup -g 1001 -S mpcium && \
+    adduser -u 1001 -S mpcium -G mpcium
+
+# Set working directory
+WORKDIR /app
+
+# Copy binary from builder stage
+COPY --from=builder /app/mpcium-cli .
+
+# Create necessary directories
+RUN mkdir -p identity && \
+    chown -R mpcium:mpcium /app
+
+# Switch to non-root user
+USER mpcium
+
+# Default command
+ENTRYPOINT ["./mpcium-cli"]
+CMD ["--help"]
diff --git a/deployments/mpcium/Dockerfile b/deployments/mpcium/Dockerfile
new file mode 100644
index 0000000..1ddc87b
--- /dev/null
+++ b/deployments/mpcium/Dockerfile
@@ -0,0 +1,60 @@
+# Stage 1: Build stage
+FROM golang:1.24.4-alpine AS builder
+
+# Install build dependencies
+RUN apk add --no-cache git ca-certificates tzdata
+
+# Set working directory
+WORKDIR /app
+
+# Copy go mod files
+COPY go.mod go.sum ./
+
+# Download dependencies
+RUN go mod download
+
+# Copy source code
+COPY . .
+
+# Build the binary
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
+    -ldflags='-w -s -extldflags "-static"' \
+    -o mpcium ./cmd/mpcium
+
+# Stage 2: Runtime stage
+FROM alpine:3.19
+
+# Install runtime dependencies
+RUN apk add --no-cache ca-certificates tzdata
+
+# Create non-root user
+RUN addgroup -g 1001 -S mpcium && \
+    adduser -u 1001 -S mpcium -G mpcium
+
+# Set working directory
+WORKDIR /app
+
+# Copy binary from builder stage
+COPY --from=builder /app/mpcium .
+
+# Create wrapper script for environment variable support
+RUN echo '#!/bin/sh' > /app/entrypoint.sh && \
+    echo 'NODE_NAME=${NODE_NAME:-node0}' >> /app/entrypoint.sh && \
+    echo 'exec ./mpcium start --name "$NODE_NAME" "$@"' >> /app/entrypoint.sh && \
+    chmod +x /app/entrypoint.sh
+
+# Create necessary directories
+RUN mkdir -p db backups identity certs && \
+    chown -R mpcium:mpcium /app
+
+# Switch to non-root user
+USER mpcium
+
+# Set default node name
+ENV NODE_NAME=node0
+
+# Expose default port
+EXPOSE 8080
+
+# Use wrapper script as entrypoint
+ENTRYPOINT ["/app/entrypoint.sh"]
\ No newline at end of file
diff --git a/deployments/mpcium/docker-compose.yaml b/deployments/mpcium/docker-compose.yaml
new file mode 100644
index 0000000..0d212c7
--- /dev/null
+++ b/deployments/mpcium/docker-compose.yaml
@@ -0,0 +1,120 @@
+services:
+  nats:
+    image: nats:latest
+    container_name: nats
+    command: -js --http_port 8222
+    ports:
+      - "4222:4222"
+      - "8222:8222"
+      - "6222:6222"
+    tty: true
+    restart: always
+    networks:
+      - mpcium
+
+  consul:
+    image: consul:1.15.4
+    container_name: consul
+    ports:
+      - "8500:8500"
+      - "8601:8600/udp"
+    command: "agent -server -ui -node=server-1 -bootstrap-expect=1 -client=0.0.0.0"
+    restart: always
+    networks:
+      - mpcium
+
+  init:
+    build:
+      context: ../..
+      dockerfile: deployments/mpcium-cli/Dockerfile
+    container_name: mpcium-init
+    volumes:
+      - ../node-configs/config.yaml:/app/config.yaml:ro
+      - ../node-configs/peers.json:/app/peers.json:ro
+    command: ["register-peers"]
+    depends_on:
+      - consul
+    restart: "no"
+    networks:
+      - mpcium
+
+  mpcium0:
+    build:
+      context: ../..
+      dockerfile: deployments/mpcium/Dockerfile
+    container_name: mpcium-node0
+    environment:
+      - NODE_NAME=node0
+    volumes:
+      - ../node-configs/node0/config.yaml:/app/config.yaml:ro
+      - ../node-configs/node0/identity:/app/identity:ro
+      - ../node-configs/node0/peers.json:/app/peers.json:ro
+      - mpcium-node0-db:/app/db
+      - mpcium-node0-backups:/app/backups
+    ports:
+      - "8080:8080"
+    depends_on:
+      - nats
+      - consul
+      - init
+    restart: unless-stopped
+    networks:
+      - mpcium
+
+  mpcium1:
+    build:
+      context: ../..
+      dockerfile: deployments/mpcium/Dockerfile
+    container_name: mpcium-node1
+    environment:
+      - NODE_NAME=node1
+    volumes:
+      - ../node-configs/node1/config.yaml:/app/config.yaml:ro
+      - ../node-configs/node1/identity:/app/identity:ro
+      - ../node-configs/node1/peers.json:/app/peers.json:ro
+      - mpcium-node1-db:/app/db
+      - mpcium-node1-backups:/app/backups
+    ports:
+      - "8081:8080"
+    depends_on:
+      - nats
+      - consul
+      - init
+    restart: unless-stopped
+    networks:
+      - mpcium
+
+  mpcium2:
+    build:
+      context: ../..
+      dockerfile: deployments/mpcium/Dockerfile
+    container_name: mpcium-node2
+    environment:
+      - NODE_NAME=node2
+    volumes:
+      - ../node-configs/node2/config.yaml:/app/config.yaml:ro
+      - ../node-configs/node2/identity:/app/identity:ro
+      - ../node-configs/node2/peers.json:/app/peers.json:ro
+      - mpcium-node2-db:/app/db
+      - mpcium-node2-backups:/app/backups
+    ports:
+      - "8082:8080"
+    depends_on:
+      - nats
+      - consul
+      - init
+    restart: unless-stopped
+    networks:
+      - mpcium
+
+volumes:
+  mpcium-node0-db:
+  mpcium-node0-backups:
+  mpcium-node1-db:
+  mpcium-node1-backups:
+  mpcium-node2-db:
+  mpcium-node2-backups:
+
+networks:
+  mpcium:
+    driver: bridge
diff --git a/deployments/node-configs/setup-nodes.sh b/deployments/node-configs/setup-nodes.sh
new file mode 100755
index 0000000..fc96210
--- /dev/null
+++ b/deployments/node-configs/setup-nodes.sh
@@ -0,0 +1,457 @@
+#!/bin/bash
+
+# ==================================================================================
+# MPCIUM Node Configuration Setup Script
+# 
+# This script automates the entire node setup process based on INSTALLATION.md
+# Starting from "Generate Peer Configuration" section
+# ==================================================================================
+
+set -e  # Exit on any error
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# Script directory
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+
+# Configuration variables
+NUM_NODES=${NUM_NODES:-3}
+MPC_THRESHOLD=${MPC_THRESHOLD:-2}
+ENVIRONMENT=${ENVIRONMENT:-development}
+BASE_DIR=${BASE_DIR:-$SCRIPT_DIR}
+ENCRYPT_KEYS=${ENCRYPT_KEYS:-false}
+NATS_URL=${NATS_URL:-"nats://127.0.0.1:4222"}
+CONSUL_ADDRESS=${CONSUL_ADDRESS:-"localhost:8500"}
+
+# Logging functions
+log_info() {
+    echo -e "${BLUE}[INFO]${NC} $1"
+}
+
+log_success() {
+    echo -e "${GREEN}[SUCCESS]${NC} $1"
+}
+
+log_warning() {
+    echo -e "${YELLOW}[WARNING]${NC} $1"
+}
+
+log_error() {
+    echo -e "${RED}[ERROR]${NC} $1"
+}
+
+# Utility functions
+generate_strong_password() {
+    # Generate a 32-byte password for BadgerDB
+    # Generate more base64 data to ensure we have enough characters after filtering
+    while true; do
+        password=$(openssl rand -base64 48 | tr -d "=+/" | cut -c1-32)
+        if [ ${#password} -eq 32 ]; then
+            echo "$password"
+            break
+        fi
+    done
+}
+
+check_prerequisites() {
+    log_info "Checking prerequisites..."
+    
+    # Check if mpcium-cli is available
+    if ! command -v mpcium-cli &> /dev/null; then
+        log_error "mpcium-cli not found. Please install it first:"
+        log_error "  cd $PROJECT_ROOT"
+        log_error "  go install ./cmd/mpcium-cli"
+        exit 1
+    fi
+    
+    # Check if required tools are available
+    for tool in openssl jq; do
+        if ! command -v $tool &> /dev/null; then
+            log_error "$tool is required but not installed."
+            exit 1
+        fi
+    done
+    
+    log_success "Prerequisites check passed"
+}
+
+print_banner() {
+    echo -e "${BLUE}"
+    echo "╔══════════════════════════════════════════════════════════════════════════════════╗"
+    echo "║                        MPCIUM Node Configuration Setup                           ║"
+    echo "║                                                                                  ║"
+    echo "║  This script will generate all necessary configuration files for MPCIUM nodes   ║"
+    echo "╚══════════════════════════════════════════════════════════════════════════════════╝"
+    echo -e "${NC}"
+    echo
+}
+
+select_deployment_type() {
+    log_info "Select deployment type:"
+    echo "  1) Bare-metal deployment (localhost)"
+    echo "  2) Docker deployment (docker-compose services)"
+    echo
+    
+    while true; do
+        read -p "Enter your choice (1 or 2): " choice
+        case $choice in
+            1)
+                log_info "Selected: Bare-metal deployment"
+                NATS_URL="nats://127.0.0.1:4222"
+                CONSUL_ADDRESS="localhost:8500"
+                DEPLOYMENT_TYPE="bare-metal"
+                break
+                ;;
+            2)
+                log_info "Selected: Docker deployment"
+                NATS_URL="nats://nats:4222"
+                CONSUL_ADDRESS="consul:8500"
+                DEPLOYMENT_TYPE="docker"
+                break
+                ;;
+            *)
+                log_error "Invalid choice. Please enter 1 or 2."
+                ;;
+        esac
+    done
+    
+    echo
+    log_info "Configuration:"
+    echo "  - Deployment type: $DEPLOYMENT_TYPE"
+    echo "  - Number of nodes: $NUM_NODES"
+    echo "  - MPC Threshold: $MPC_THRESHOLD"
+    echo "  - Environment: $ENVIRONMENT"
+    echo "  - Encrypt keys: $ENCRYPT_KEYS"
+    echo "  - NATS URL: $NATS_URL"
+    echo "  - Consul Address: $CONSUL_ADDRESS"
+    echo "  - Base directory: $BASE_DIR"
+    echo
+}
+
+cleanup_existing_setup() {
+    log_info "Cleaning up existing setup..."
+    
+    # Remove existing node directories
+    for i in $(seq 0 $(($NUM_NODES - 1))); do
+        if [ -d "$BASE_DIR/node$i" ]; then
+            log_warning "Removing existing node$i directory"
+            rm -rf "$BASE_DIR/node$i"
+        fi
+    done
+    
+    # Remove existing files
+    for file in peers.json event_initiator.identity.json event_initiator.key event_initiator.key.age config.yaml; do
+        if [ -f "$BASE_DIR/$file" ]; then
+            log_warning "Removing existing $file"
+            rm -f "$BASE_DIR/$file"
+        fi
+    done
+    
+    log_success "Cleanup completed"
+}
+
+generate_peer_configuration() {
+    log_info "Generating peer configuration..."
+    
+    cd "$BASE_DIR"
+    
+    # Generate peers.json
+    mpcium-cli generate-peers -n $NUM_NODES -o peers.json
+    
+    if [ ! -f "peers.json" ]; then
+        log_error "Failed to generate peers.json"
+        exit 1
+    fi
+    
+    log_success "Generated peers.json with $NUM_NODES nodes"
+    
+    # Display generated peers
+    log_info "Generated peer IDs:"
+    jq -r 'to_entries[] | "  \(.key): \(.value)"' peers.json
+}
+
+generate_config_yaml() {
+    log_info "Creating config.yaml..."
+    
+    # Generate strong password
+    BADGER_PASSWORD=$(generate_strong_password)
+    
+    # Create config.yaml
+    cat > "$BASE_DIR/config.yaml" << EOF
+nats:
+  url: $NATS_URL
+
+consul:
+  address: $CONSUL_ADDRESS
+
+mpc_threshold: $MPC_THRESHOLD
+environment: $ENVIRONMENT
+badger_password: "$BADGER_PASSWORD"
+event_initiator_pubkey: "PLACEHOLDER_WILL_BE_UPDATED"
+max_concurrent_keygen: 2
+db_path: "."  
+backup_enabled: true
+backup_period_seconds: 300 # 5 minutes
+backup_dir: backups
+EOF
+    
+    log_success "Created config.yaml"
+    log_info "Generated BadgerDB password: $BADGER_PASSWORD"
+    log_warning "Please store this password securely! You'll need it to access your data."
+}
+
+generate_event_initiator() {
+    log_info "Generating event initiator..."
+    
+    cd "$BASE_DIR"
+    
+    # Generate event initiator
+    if [ "$ENCRYPT_KEYS" = "true" ]; then
+        mpcium-cli generate-initiator --encrypt
+        log_success "Generated encrypted event initiator"
+    else
+        mpcium-cli generate-initiator
+        log_success "Generated unencrypted event initiator"
+    fi
+    
+    # Extract public key from identity file
+    if [ -f "event_initiator.identity.json" ]; then
+        INITIATOR_PUBKEY=$(jq -r '.public_key' event_initiator.identity.json)
+        
+        # Update config.yaml with the initiator public key
+        sed -i "s/event_initiator_pubkey: \"PLACEHOLDER_WILL_BE_UPDATED\"/event_initiator_pubkey: \"$INITIATOR_PUBKEY\"/" config.yaml
+        
+        log_success "Updated config.yaml with event initiator public key"
+        log_info "Event initiator public key: $INITIATOR_PUBKEY"
+    else
+        log_error "Failed to find event_initiator.identity.json"
+        exit 1
+    fi
+}
+
+create_node_directories() {
+    log_info "Creating node directories..."
+    
+    for i in $(seq 0 $(($NUM_NODES - 1))); do
+        NODE_DIR="$BASE_DIR/node$i"
+        mkdir -p "$NODE_DIR/identity"
+        
+        # Copy config files to each node
+        cp "$BASE_DIR/config.yaml" "$NODE_DIR/"
+        cp "$BASE_DIR/peers.json" "$NODE_DIR/"
+        
+        log_success "Created node$i directory"
+    done
+}
+
+generate_node_identities() {
+    log_info "Generating node identities..."
+    
+    for i in $(seq 0 $(($NUM_NODES - 1))); do
+        NODE_NAME="node$i"
+        NODE_DIR="$BASE_DIR/$NODE_NAME"
+        
+        cd "$NODE_DIR"
+        
+        log_info "Generating identity for $NODE_NAME..."
+        
+        if [ "$ENCRYPT_KEYS" = "true" ]; then
+            mpcium-cli generate-identity --node "$NODE_NAME" --encrypt
+        else
+            mpcium-cli generate-identity --node "$NODE_NAME"
+        fi
+        
+        log_success "Generated identity for $NODE_NAME"
+    done
+    
+    cd "$BASE_DIR"
+}
+
+distribute_identity_files() {
+    log_info "Distributing identity files to all nodes..."
+    
+    # Collect all identity files
+    for i in $(seq 0 $(($NUM_NODES - 1))); do
+        SOURCE_NODE="node$i"
+        IDENTITY_FILE="$BASE_DIR/$SOURCE_NODE/identity/${SOURCE_NODE}_identity.json"
+        
+        if [ ! -f "$IDENTITY_FILE" ]; then
+            log_error "Identity file not found: $IDENTITY_FILE"
+            exit 1
+        fi
+        
+        # Distribute to all other nodes
+        for j in $(seq 0 $(($NUM_NODES - 1))); do
+            if [ $i -ne $j ]; then
+                TARGET_NODE="node$j"
+                TARGET_DIR="$BASE_DIR/$TARGET_NODE/identity"
+                
+                cp "$IDENTITY_FILE" "$TARGET_DIR/"
+                log_info "Copied ${SOURCE_NODE}_identity.json to $TARGET_NODE"
+            fi
+        done
+    done
+    
+    log_success "Identity files distributed to all nodes"
+}
+
+register_peers_to_consul() {
+    log_info "Registering peers to Consul..."
+    
+    cd "$BASE_DIR"
+    
+    # Check if Consul is accessible
+    if ! curl -s "$CONSUL_ADDRESS/v1/status/leader" > /dev/null; then
+        log_warning "Consul not accessible at $CONSUL_ADDRESS"
+        log_warning "Please ensure Consul is running and register peers manually:"
+        log_warning "  mpcium-cli register-peers"
+        return
+    fi
+    
+    # Register peers
+    mpcium-cli register-peers
+    log_success "Peers registered to Consul"
+}
+
+
+
+print_summary() {
+    echo
+    echo -e "${GREEN}╔══════════════════════════════════════════════════════════════════════════════════╗${NC}"
+    echo -e "${GREEN}║                            🎉 SETUP COMPLETE! 🎉                                 ║${NC}"
+    echo -e "${GREEN}╚══════════════════════════════════════════════════════════════════════════════════╝${NC}"
+    echo
+    log_success "MPCIUM cluster configuration completed successfully!"
+    echo
+    log_info "📁 Generated files:"
+    echo "  ├── config.yaml (cluster configuration)"
+    echo "  ├── peers.json (peer ID mappings)"
+    echo "  ├── event_initiator.identity.json (initiator public key)"
+    if [ "$ENCRYPT_KEYS" = "true" ]; then
+        echo "  ├── event_initiator.key.age (encrypted private key)"
+    else
+        echo "  ├── event_initiator.key (private key)"
+    fi
+    for i in $(seq 0 $(($NUM_NODES - 1))); do
+        echo "  └── node$i/ (node configuration)"
+        echo "      ├── config.yaml"
+        echo "      ├── peers.json"
+        echo "      └── identity/ (identity files)"
+    done
+    echo
+    log_info "🚀 Next steps:"
+    if [ "$DEPLOYMENT_TYPE" = "docker" ]; then
+        echo "  1. Start Docker infrastructure: cd ../mpcium && docker-compose up -d"
+        echo "  2. Register peers: mpcium-cli register-peers"
+        echo "  3. Check logs: docker-compose logs -f mpcium0"
+    else
+        echo "  1. Start NATS and Consul infrastructure"
+        echo "  2. Register peers: mpcium-cli register-peers"
+        echo "  3. Start nodes manually: cd node0 && mpcium start --name node0"
+    fi
+    echo
+    log_warning "🔐 Important: Store the BadgerDB password securely!"
+    echo "   Password: $(grep badger_password config.yaml | cut -d'"' -f2)"
+    echo
+}
+
+# ==================================================================================
+# MAIN EXECUTION
+# ==================================================================================
+
+main() {
+    print_banner
+    
+    # Parse command line arguments
+    while [[ $# -gt 0 ]]; do
+        case $1 in
+            -n|--nodes)
+                NUM_NODES="$2"
+                shift 2
+                ;;
+            -t|--threshold)
+                MPC_THRESHOLD="$2"
+                shift 2
+                ;;
+            -e|--environment)
+                ENVIRONMENT="$2"
+                shift 2
+                ;;
+            --encrypt)
+                ENCRYPT_KEYS=true
+                shift
+                ;;
+            --nats-url)
+                NATS_URL="$2"
+                shift 2
+                ;;
+            --consul-address)
+                CONSUL_ADDRESS="$2"
+                shift 2
+                ;;
+            -d|--directory)
+                BASE_DIR="$2"
+                shift 2
+                ;;
+            -h|--help)
+                echo "Usage: $0 [OPTIONS]"
+                echo
+                echo "Options:"
+                echo "  -n, --nodes NUM_NODES          Number of nodes to generate (default: 3)"
+                echo "  -t, --threshold THRESHOLD      MPC threshold (default: 2)"
+                echo "  -e, --environment ENV          Environment (development/production, default: development)"
+                echo "      --encrypt                  Encrypt private keys with Age"
+                echo "      --nats-url URL             NATS server URL (default: nats://127.0.0.1:4222)"
+                echo "      --consul-address ADDR      Consul address (default: localhost:8500)"
+                echo "  -d, --directory DIR            Base directory for setup (default: script directory)"
+                echo "  -h, --help                     Show this help message"
+                echo
+                echo "Examples:"
+                echo "  $0                             # Basic setup with interactive deployment type selection"
+                echo "  $0 -n 5 -t 3 --encrypt        # 5 nodes with threshold 3, encrypted keys"
+                echo "  $0 -e production --encrypt     # Production setup with encryption"
+                echo
+                echo "Deployment Types:"
+                echo "  1) Bare-metal: Uses localhost for NATS (127.0.0.1:4222) and Consul (localhost:8500)"
+                echo "  2) Docker: Uses service names for NATS (nats:4222) and Consul (consul:8500)"
+                exit 0
+                ;;
+            *)
+                log_error "Unknown option: $1"
+                exit 1
+                ;;
+        esac
+    done
+    
+    # Validate threshold
+    if [ $MPC_THRESHOLD -ge $NUM_NODES ]; then
+        log_error "MPC threshold ($MPC_THRESHOLD) must be less than number of nodes ($NUM_NODES)"
+        exit 1
+    fi
+    
+    # Create base directory if it doesn't exist
+    mkdir -p "$BASE_DIR"
+    cd "$BASE_DIR"
+    
+    # Execute setup steps
+    check_prerequisites
+    select_deployment_type
+    cleanup_existing_setup
+    generate_peer_configuration
+    generate_config_yaml
+    generate_event_initiator
+    create_node_directories
+    generate_node_identities
+    distribute_identity_files
+    register_peers_to_consul
+    print_summary
+}
+
+# Run main function with all arguments
+main "$@"
\ No newline at end of file
diff --git a/node0/config.yaml b/node0/config.yaml
new file mode 100644
index 0000000..907d304
--- /dev/null
+++ b/node0/config.yaml
@@ -0,0 +1,15 @@
+nats:
+  url: nats://127.0.0.1:4222
+
+consul:
+  address: localhost:8500
+
+mpc_threshold: 2
+environment: development
+badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
+event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
+max_concurrent_keygen: 2
+db_path: "."  
+backup_enabled: true
+backup_period_seconds: 300 # 5 minutes
+backup_dir: backups
diff --git a/node0/peers.json b/node0/peers.json
new file mode 100644
index 0000000..866b79c
--- /dev/null
+++ b/node0/peers.json
@@ -0,0 +1,5 @@
+{
+  "node0": "2b8ddc33-802d-41e7-aa31-3961eb2941bc",
+  "node1": "38b3a295-f511-47c2-993b-7bfbcc059951",
+  "node2": "45d810e8-2996-419b-8387-7d70e52a1b92"
+}
\ No newline at end of file
diff --git a/node1/config.yaml b/node1/config.yaml
new file mode 100644
index 0000000..907d304
--- /dev/null
+++ b/node1/config.yaml
@@ -0,0 +1,15 @@
+nats:
+  url: nats://127.0.0.1:4222
+
+consul:
+  address: localhost:8500
+
+mpc_threshold: 2
+environment: development
+badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
+event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
+max_concurrent_keygen: 2
+db_path: "."  
+backup_enabled: true
+backup_period_seconds: 300 # 5 minutes
+backup_dir: backups
diff --git a/node1/peers.json b/node1/peers.json
new file mode 100644
index 0000000..866b79c
--- /dev/null
+++ b/node1/peers.json
@@ -0,0 +1,5 @@
+{
+  "node0": "2b8ddc33-802d-41e7-aa31-3961eb2941bc",
+  "node1": "38b3a295-f511-47c2-993b-7bfbcc059951",
+  "node2": "45d810e8-2996-419b-8387-7d70e52a1b92"
+}
\ No newline at end of file
diff --git a/node2/config.yaml b/node2/config.yaml
new file mode 100644
index 0000000..907d304
--- /dev/null
+++ b/node2/config.yaml
@@ -0,0 +1,15 @@
+nats:
+  url: nats://127.0.0.1:4222
+
+consul:
+  address: localhost:8500
+
+mpc_threshold: 2
+environment: development
+badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
+event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
+max_concurrent_keygen: 2
+db_path: "."  
+backup_enabled: true
+backup_period_seconds: 300 # 5 minutes
+backup_dir: backups
diff --git a/node2/peers.json b/node2/peers.json
new file mode 100644
index 0000000..866b79c
--- /dev/null
+++ b/node2/peers.json
@@ -0,0 +1,5 @@
+{
+  "node0": "2b8ddc33-802d-41e7-aa31-3961eb2941bc",
+  "node1": "38b3a295-f511-47c2-993b-7bfbcc059951",
+  "node2": "45d810e8-2996-419b-8387-7d70e52a1b92"
+}
\ No newline at end of file
diff --git a/peers.json b/peers.json
index 5f44aed..9a3267d 100644
--- a/peers.json
+++ b/peers.json
@@ -1,5 +1,5 @@
 {
-  "node0": "0ce02715-0ead-48ef-9772-2583316cc860",
-  "node1": "c95c340e-5a18-472d-b9b0-5ac68218213a",
-  "node2": "ac37e85f-caca-4bee-8a3a-49a0fe35abff"
-}
+  "node0": "b8f5ca25-637d-4c74-b49c-8a0efbfbf5ef",
+  "node1": "b21d5bed-51b2-488a-91f1-bf71556afc2e",
+  "node2": "576ac428-f76f-4f7b-bd20-1d8f4fbb5584"
+}
\ No newline at end of file

From fb649075d9a34a9ca1b03659f88063ce4ab908ad Mon Sep 17 00:00:00 2001
From: Michael Phan <tuananhk13bk@gmail.com>
Date: Tue, 5 Aug 2025 09:42:15 +0700
Subject: [PATCH 2/2] Added docker-compose bootstrap

---
 .gitignore                                    |  6 +++
 Makefile                                      | 10 ++++
 README.md                                     | 54 +++++++++++++++++++
 config.yaml                                   | 15 ------
 deployments/{ => base}/mpcium-cli/Dockerfile  |  0
 deployments/{ => base}/mpcium/Dockerfile      |  3 +-
 .../{ => base}/node-configs/setup-nodes.sh    | 46 ++++++++++------
 .../{mpcium => dev}/docker-compose.yaml       | 40 +++++++-------
 docker-compose.yaml                           | 22 --------
 node0/config.yaml                             | 15 ------
 node0/peers.json                              |  5 --
 node1/config.yaml                             | 15 ------
 node1/peers.json                              |  5 --
 node2/config.yaml                             | 15 ------
 node2/peers.json                              |  5 --
 peers.json                                    |  5 --
 16 files changed, 121 insertions(+), 140 deletions(-)
 delete mode 100644 config.yaml
 rename deployments/{ => base}/mpcium-cli/Dockerfile (100%)
 rename deployments/{ => base}/mpcium/Dockerfile (92%)
 rename deployments/{ => base}/node-configs/setup-nodes.sh (92%)
 rename deployments/{mpcium => dev}/docker-compose.yaml (64%)
 delete mode 100644 docker-compose.yaml
 delete mode 100644 node0/config.yaml
 delete mode 100644 node0/peers.json
 delete mode 100644 node1/config.yaml
 delete mode 100644 node1/peers.json
 delete mode 100644 node2/config.yaml
 delete mode 100644 node2/peers.json
 delete mode 100644 peers.json

diff --git a/.gitignore b/.gitignore
index b09913b..738acce 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,9 @@ e2e/coverage.html
 e2e/logs/
 # Generated config file (template is tracked)
 e2e/config.test.yaml
+
+peers.json
+node0/
+node1/
+node2/
+config.yaml
\ No newline at end of file
diff --git a/Makefile b/Makefile
index 6da06a2..211d412 100644
--- a/Makefile
+++ b/Makefile
@@ -59,3 +59,13 @@ clean:
 
 # Full clean (including E2E artifacts)
 clean-all: clean e2e-clean
+
+gen-configs:
+	chmod +x ./deployments/base/node-configs/setup-nodes.sh
+	./deployments/base/node-configs/setup-nodes.sh
+
+run-dev:
+	docker compose -f ./deployments/dev/docker-compose.yaml up -d
+
+stop-dev:
+	docker compose -f ./deployments/dev/docker-compose.yaml down
\ No newline at end of file
diff --git a/README.md b/README.md
index fd3c791..f637fe9 100644
--- a/README.md
+++ b/README.md
@@ -137,6 +137,60 @@ The application uses a YAML configuration file (`config.yaml`) with the followin
 
 For full installation and run instructions, see [INSTALLATION.md](./INSTALLATION.md).
 
+## Quick Start
+
+Get up and running with MPCIUM in minutes using our automated setup:
+
+### 1. Generate Node Configurations
+
+```bash
+# Generate all node configurations, identities, and Docker setup
+make gen-configs
+```
+
+This command will:
+
+- Generate 3 MPC nodes with 2-of-3 threshold
+- Create all necessary identity files and configurations
+- Set up Docker Compose files for easy deployment
+
+### 2. Start Development Environment
+
+```bash
+# Start all services (NATS, Consul, and MPC nodes)
+make start-dev
+```
+
+This will launch:
+
+- NATS messaging server
+- Consul for service discovery
+- 3 MPC nodes (node0, node1, node2)
+- Automatic peer registration
+
+### 3. Stop Development Environment
+
+```bash
+# Stop all services
+make stop-dev
+```
+
+### 4. View Logs
+
+```bash
+# View logs from all services
+docker-compose -f ./deployments/dev/docker-compose.yaml logs -f
+
+# View logs from a specific node
+docker-compose -f ./deployments/dev/docker-compose.yaml logs -f mpcium-node0
+```
+
+### 5. Test the Setup
+
+Once all nodes are running, you can test the MPC cluster using the client examples in the `examples/` directory.
+
+**That's it!** Your MPCIUM cluster is now ready for secure wallet generation and signing operations.
+
 ## Preview usage
 
 ### Start nodes
diff --git a/config.yaml b/config.yaml
deleted file mode 100644
index 907d304..0000000
--- a/config.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-nats:
-  url: nats://127.0.0.1:4222
-
-consul:
-  address: localhost:8500
-
-mpc_threshold: 2
-environment: development
-badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
-event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
-max_concurrent_keygen: 2
-db_path: "."  
-backup_enabled: true
-backup_period_seconds: 300 # 5 minutes
-backup_dir: backups
diff --git a/deployments/mpcium-cli/Dockerfile b/deployments/base/mpcium-cli/Dockerfile
similarity index 100%
rename from deployments/mpcium-cli/Dockerfile
rename to deployments/base/mpcium-cli/Dockerfile
diff --git a/deployments/mpcium/Dockerfile b/deployments/base/mpcium/Dockerfile
similarity index 92%
rename from deployments/mpcium/Dockerfile
rename to deployments/base/mpcium/Dockerfile
index 1ddc87b..a5997a6 100644
--- a/deployments/mpcium/Dockerfile
+++ b/deployments/base/mpcium/Dockerfile
@@ -43,8 +43,9 @@ RUN echo '#!/bin/sh' > /app/entrypoint.sh && \
     echo 'exec ./mpcium start --name "$NODE_NAME" "$@"' >> /app/entrypoint.sh && \
     chmod +x /app/entrypoint.sh
 
-# Create necessary directories
+# Create necessary directories with proper permissions for volume mounting
 RUN mkdir -p db backups identity certs && \
+    chmod 777 db backups && \
     chown -R mpcium:mpcium /app
 
 # Switch to non-root user
diff --git a/deployments/node-configs/setup-nodes.sh b/deployments/base/node-configs/setup-nodes.sh
similarity index 92%
rename from deployments/node-configs/setup-nodes.sh
rename to deployments/base/node-configs/setup-nodes.sh
index fc96210..0ccb841 100755
--- a/deployments/node-configs/setup-nodes.sh
+++ b/deployments/base/node-configs/setup-nodes.sh
@@ -110,7 +110,7 @@ select_deployment_type() {
                 ;;
             2)
                 log_info "Selected: Docker deployment"
-                NATS_URL="nats://nats:4222"
+                NATS_URL="nats://nats-server:4222"
                 CONSUL_ADDRESS="consul:8500"
                 DEPLOYMENT_TYPE="docker"
                 break
@@ -300,27 +300,39 @@ distribute_identity_files() {
     
     log_success "Identity files distributed to all nodes"
 }
-
-register_peers_to_consul() {
-    log_info "Registering peers to Consul..."
+fix_file_permissions() {
+    log_info "Fixing file permissions for Docker compatibility..."
     
     cd "$BASE_DIR"
     
-    # Check if Consul is accessible
-    if ! curl -s "$CONSUL_ADDRESS/v1/status/leader" > /dev/null; then
-        log_warning "Consul not accessible at $CONSUL_ADDRESS"
-        log_warning "Please ensure Consul is running and register peers manually:"
-        log_warning "  mpcium-cli register-peers"
-        return
+    # Fix permissions for all identity files
+    for i in $(seq 0 $(($NUM_NODES - 1))); do
+        NODE_DIR="node$i"
+        if [ -d "$NODE_DIR/identity" ]; then
+            log_info "Fixing permissions for $NODE_DIR/identity/*"
+            chmod -R 644 "$NODE_DIR/identity/"*
+            log_success "Fixed permissions for $NODE_DIR"
+        fi
+    done
+    
+    # Also fix permissions for event initiator files
+    if [ -f "event_initiator.identity.json" ]; then
+        chmod 644 event_initiator.identity.json
+        log_info "Fixed permissions for event_initiator.identity.json"
     fi
     
-    # Register peers
-    mpcium-cli register-peers
-    log_success "Peers registered to Consul"
+    if [ -f "event_initiator.key" ]; then
+        chmod 644 event_initiator.key
+        log_info "Fixed permissions for event_initiator.key"
+    fi
+    
+    if [ -f "event_initiator.key.age" ]; then
+        chmod 644 event_initiator.key.age
+        log_info "Fixed permissions for event_initiator.key.age"
+    fi
+    
+    log_success "File permissions fixed for Docker compatibility"
 }
-
-
-
 print_summary() {
     echo
     echo -e "${GREEN}╔══════════════════════════════════════════════════════════════════════════════════╗${NC}"
@@ -449,7 +461,7 @@ main() {
     create_node_directories
     generate_node_identities
     distribute_identity_files
-    register_peers_to_consul
+    fix_file_permissions
     print_summary
 }
 
diff --git a/deployments/mpcium/docker-compose.yaml b/deployments/dev/docker-compose.yaml
similarity index 64%
rename from deployments/mpcium/docker-compose.yaml
rename to deployments/dev/docker-compose.yaml
index 0d212c7..ea127f0 100644
--- a/deployments/mpcium/docker-compose.yaml
+++ b/deployments/dev/docker-compose.yaml
@@ -1,7 +1,7 @@
 services:
-  nats:
+  nats-server:
     image: nats:latest
-    container_name: nats
+    container_name: nats-server
     command: -js --http_port 8222
     ports:
       - "4222:4222"
@@ -26,11 +26,11 @@ services:
   init:
     build:
       context: ../..
-      dockerfile: deployments/mpcium-cli/Dockerfile
+      dockerfile: deployments/base/mpcium-cli/Dockerfile
     container_name: mpcium-init
     volumes:
-      - ../node-configs/config.yaml:/app/config.yaml:ro
-      - ../node-configs/peers.json:/app/peers.json:ro
+      - ../base/node-configs/peers.json:/app/peers.json:ro
+      - ../base/node-configs/config.yaml:/app/config.yaml:ro
     command: ["register-peers"]
     depends_on:
       - consul
@@ -41,20 +41,20 @@ services:
   mpcium0:
     build:
       context: ../..
-      dockerfile: deployments/mpcium/Dockerfile
+      dockerfile: deployments/base/mpcium/Dockerfile
     container_name: mpcium-node0
     environment:
       - NODE_NAME=node0
     volumes:
-      - ../node-configs/node0/config.yaml:/app/config.yaml:ro
-      - ../node-configs/node0/identity:/app/identity:ro
-      - ../node-configs/node0/peers.json:/app/peers.json:ro
+      - ../base/node-configs/node0/config.yaml:/app/config.yaml:ro
+      - ../base/node-configs/node0/peers.json:/app/peers.json:ro
+      - ../base/node-configs/node0/identity:/app/identity:ro
       - mpcium-node0-db:/app/db
       - mpcium-node0-backups:/app/backups
     ports:
       - "8080:8080"
     depends_on:
-      - nats
+      - nats-server
       - consul
       - init
     restart: unless-stopped
@@ -64,20 +64,20 @@ services:
   mpcium1:
     build:
       context: ../..
-      dockerfile: deployments/mpcium/Dockerfile
+      dockerfile: deployments/base/mpcium/Dockerfile
     container_name: mpcium-node1
     environment:
       - NODE_NAME=node1
     volumes:
-      - ../node-configs/node1/config.yaml:/app/config.yaml:ro
-      - ../node-configs/node1/identity:/app/identity:ro
-      - ../node-configs/node1/peers.json:/app/peers.json:ro
+      - ../base/node-configs/node1/config.yaml:/app/config.yaml:ro
+      - ../base/node-configs/node1/peers.json:/app/peers.json:ro
+      - ../base/node-configs/node1/identity:/app/identity:ro
       - mpcium-node1-db:/app/db
       - mpcium-node1-backups:/app/backups
     ports:
       - "8081:8080"
     depends_on:
-      - nats
+      - nats-server
       - consul
       - init
     restart: unless-stopped
@@ -87,20 +87,20 @@ services:
   mpcium2:
     build:
       context: ../..
-      dockerfile: deployments/mpcium/Dockerfile
+      dockerfile: deployments/base/mpcium/Dockerfile
     container_name: mpcium-node2
     environment:
       - NODE_NAME=node2
     volumes:
-      - ../node-configs/node2/config.yaml:/app/config.yaml:ro
-      - ../node-configs/node2/identity:/app/identity:ro
-      - ../node-configs/node2/peers.json:/app/peers.json:ro
+      - ../base/node-configs/node2/config.yaml:/app/config.yaml:ro
+      - ../base/node-configs/node2/peers.json:/app/peers.json:ro
+      - ../base/node-configs/node2/identity:/app/identity:ro
       - mpcium-node2-db:/app/db
       - mpcium-node2-backups:/app/backups
     ports:
       - "8082:8080"
     depends_on:
-      - nats
+      - nats-server
       - consul
       - init
     restart: unless-stopped
diff --git a/docker-compose.yaml b/docker-compose.yaml
deleted file mode 100644
index 7aebc38..0000000
--- a/docker-compose.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-version: "3"
-
-services:
-  nats-server:
-    image: nats:latest
-    container_name: nats-server
-    command: -js --http_port 8222
-    ports:
-      - "4222:4222"
-      - "8222:8222"
-      - "6222:6222"
-    tty: true
-    restart: always
-
-  consul:
-    image: consul:1.15.4
-    container_name: consul
-    ports:
-      - "8500:8500"
-      - "8601:8600/udp"
-    command: "agent -server -ui -node=server-1 -bootstrap-expect=1 -client=0.0.0.0"
-    restart: always
diff --git a/node0/config.yaml b/node0/config.yaml
deleted file mode 100644
index 907d304..0000000
--- a/node0/config.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-nats:
-  url: nats://127.0.0.1:4222
-
-consul:
-  address: localhost:8500
-
-mpc_threshold: 2
-environment: development
-badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
-event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
-max_concurrent_keygen: 2
-db_path: "."  
-backup_enabled: true
-backup_period_seconds: 300 # 5 minutes
-backup_dir: backups
diff --git a/node0/peers.json b/node0/peers.json
deleted file mode 100644
index 866b79c..0000000
--- a/node0/peers.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "node0": "2b8ddc33-802d-41e7-aa31-3961eb2941bc",
-  "node1": "38b3a295-f511-47c2-993b-7bfbcc059951",
-  "node2": "45d810e8-2996-419b-8387-7d70e52a1b92"
-}
\ No newline at end of file
diff --git a/node1/config.yaml b/node1/config.yaml
deleted file mode 100644
index 907d304..0000000
--- a/node1/config.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-nats:
-  url: nats://127.0.0.1:4222
-
-consul:
-  address: localhost:8500
-
-mpc_threshold: 2
-environment: development
-badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
-event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
-max_concurrent_keygen: 2
-db_path: "."  
-backup_enabled: true
-backup_period_seconds: 300 # 5 minutes
-backup_dir: backups
diff --git a/node1/peers.json b/node1/peers.json
deleted file mode 100644
index 866b79c..0000000
--- a/node1/peers.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "node0": "2b8ddc33-802d-41e7-aa31-3961eb2941bc",
-  "node1": "38b3a295-f511-47c2-993b-7bfbcc059951",
-  "node2": "45d810e8-2996-419b-8387-7d70e52a1b92"
-}
\ No newline at end of file
diff --git a/node2/config.yaml b/node2/config.yaml
deleted file mode 100644
index 907d304..0000000
--- a/node2/config.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-nats:
-  url: nats://127.0.0.1:4222
-
-consul:
-  address: localhost:8500
-
-mpc_threshold: 2
-environment: development
-badger_password: "wEZWAyT8HBoQLunVnsurtGSBudViLtRj"
-event_initiator_pubkey: "05a547a2c4f3f4a1b2ddc3906196f3c34ddbfae7e0819ca3b6f68a0c59285456"
-max_concurrent_keygen: 2
-db_path: "."  
-backup_enabled: true
-backup_period_seconds: 300 # 5 minutes
-backup_dir: backups
diff --git a/node2/peers.json b/node2/peers.json
deleted file mode 100644
index 866b79c..0000000
--- a/node2/peers.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "node0": "2b8ddc33-802d-41e7-aa31-3961eb2941bc",
-  "node1": "38b3a295-f511-47c2-993b-7bfbcc059951",
-  "node2": "45d810e8-2996-419b-8387-7d70e52a1b92"
-}
\ No newline at end of file
diff --git a/peers.json b/peers.json
deleted file mode 100644
index 9a3267d..0000000
--- a/peers.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "node0": "b8f5ca25-637d-4c74-b49c-8a0efbfbf5ef",
-  "node1": "b21d5bed-51b2-488a-91f1-bf71556afc2e",
-  "node2": "576ac428-f76f-4f7b-bd20-1d8f4fbb5584"
-}
\ No newline at end of file