Welcome to the Community SAFE Network Wiki

=> Introduction - Start Here TOP

• 1.1 Basic Level
• 1.2 Intermediate Level
• 1.3 Expert Level

=> Goals of the SAFE Network TOP

• 2.1 SAFE Network Core Goals (unofficial)
• 2.2 SAFE Network Non-Core Goals (unofficial)
• 2.3 Benefits
• 2.4 Roadmap and Beyond

(warning: Section needs to be updated)

=> Architecture and Implementation TOP

• 3.1 Place in OSI Reference Model
• 3.2 SAFE Network Overlay Network
• 3.3 Basic Facilities
• 3.4 Transport Protocol for P2P
  • 3.4.1 IETF QUIC Introduction
  • 3.4.2 MDSF Lib quic-p2p
• 3.5 Routing
  • 3.5.1 Kademlia Routing Introduction
  • 3.5.2 XOR Distance
  • 3.5.3 MDSF Lib routing
• 3.6 Gossip Protocol
  • 3.6.1 Randomized Rumor Spreading
  • 3.6.2 MDSF Lib safe_gossip
• 3.7 Parsec
  • 3.7.1 Byzantine Agreement
  • 3.7.2 MDSF parsec
• 3.8 Vault
  • 3.8.1 MDSF application safe_vault

=> Mechanisms TOP

• 4.1 Security Aspects
• 4.2 Mechanisms to Ensure Security
• 4.3 Other Operating Mechanisms
• 4.4 Forum topics on studies

=> Economics TOP

• 5.1 MAID pre-launch
• 5.2 MAID and SafeCoin at launch
• 5.3 SafeCoin

=> Handling MAID and SafeCoin TOP

• 6.1 What is MAID
• 6.2 What is SafeCoin
• 6.3 Exchanges trading MAID
• 6.4 Storing MAID offline

The 2014 MAID crowd sale record is here.

=> Crypto Charts Page

(what do you need to join.)

(how to start using apps.)

(how to start app software development)

This section is for tinkerers; experimental how-to's, etc.

Fleming Testnet 4/8/2021 v1; 4/14 v2; 4/15 v3; 4/22 v4; 5/13 v5.

Note that all data and test coin balances will be lost at launch of the next testnet!

Instructions how to get started on Fleming testnet (if up) are below. (Search the latest Fleming Testnet V<version> on the SafeNetForum for more.) The cli user guide provides a lot of detail on how to interact with the network via the cli.

The following was tested on Ubuntu 18.04 with testnet v1, but there were issues with the later test-nets so be prepared for some road bumps along the way though as this is still very experimental. The network is not stable yet and you are most likely to succeed if it's early after a new bootstrap. The purpose is to debug and iterate in public, in a real-world environment.

Here is a simple guide to creating your own Ubuntu VM to work with: Ubuntu VM.

[ FLEMING_INSTALL_LINUX 20210422/v4 ]
|
[ ] Clean out prior installations
  rm -rf $HOME/.safe
[ ] Run the installation script (on a 64-bit machine)
  curl -so- https://sn-api.s3.amazonaws.com/install.sh | bash
| Installs into ~/.safe
[ ] Close and reopen your terminal, and test version
  safe -V
| Expect: sn_cli 0.24.0
[ ] Make sure any and all old processes are dead, or kill them if needed.
  ps -A | grep sn_*
! killall sn_node
! killall sn_authd
[ ] Install Authenticator daemon (0.6.0) and Node (0.39.0).
  safe auth install
  safe node install
[ ] Add network profile to join the first Fleming testnet, and switch to the profile/testnet
  safe networks add fleming-testnet https://sn-node.s3.eu-west-2.amazonaws.com/config/node_connection_info.config
  safe networks switch fleming-testnet
| The .config file contains a list of IP addresses and ports of hard-coded bootstrap nodes.
[ ] View the configured network profiles
  safe networks
[ ] Join our node to the network (this process continues to attempt to join the network until successful or killed.)
  safe node join
| or:  until grep "The network is not accepting" ~/.safe/node/local-node/sn_node.log; do echo "Starting node..." ; safe node killall ; safe node join; sleep 300; done
| logs will be here: ~/.safe/node/local-node/sn_node.log
| node data, incl. reward key pair should be here: ~/.safe/node/local-node
[ ] In a new terminal follow the log
  tail -f ~/.safe/node/local-node/sn_node.log
| You may see something like: The network is not accepting nodes right now. Retrying after 3 minutes, or the logging may seem to hang, reattempting to join periodically.
[ ] Download an example file in read-only mode, before creating your own Vault.
  safe dog safe://hygoyeye9mq5jmipo3we79wohue8hjyw55e6f8xyk1hquwy9hsxnk9tdsme
  safe cat safe://hygoyeye9mq5jmipo3we79wohue8hjyw55e6f8xyk1hquwy9hsxnk9tdsme > ~/safe-the-planet.png
| Be patient; command execution can take a minute.
| Or you get: Error: NetDataError: Failed to GET Public Blob: ErrorMessage(NoSuchData)

With your own node joined or not, you can always interact with the network through the cli. safe -h provides all the options, and safe subcommand -h the options for each sub-command. cli user guide

To transact we will need some coin, so let's just create test-coins first. Because we can on the test-net.

[ SETUP_SAFEKEY_AND_TRANSFER 20210409/v1 ]
|
[ ] Create SafeKey and preload with a balance of e.g. 123456
  safe keys create --test-coins --preload 123456
| Be patient, it takes a minute.
| Note the safe xor address, and the public and secret key pair.
[ ] Check the balance
  safe keys balance
| enter the secret key when requested
| expect e.g.: SafeKey's current balance: 123456.000000000
[ ] Send coins
  safe keys transfer --from <secret key> --to "safe://<user>" <amount>
| without --from option, a default SafeKey will be used. (WHICH SAFEKEY IS DEFAULT??)
| expect e.g.: Success. TX_ID: 0 where the number is the serial tx from the SafeKey.

Note that this is not the default SafeKey that is associated with the CLI and which is used to pay for operations on the network. You can also create a wallet (a SafeKey container) to store SafeKeys, see CLI documenation.

For authenticator to work and to avoid this error Error: AuthdClientError: Failed to create client endpoint: [Error] ClientError - Failed to read certificate from '/home/mbouda/.safe/authd/cert.der': No such file or directory (os error 2) we need to start the daemon, which creates ~/.safe/authd/logs folder and additional files such as cert.der and key.der in ~/.safe/authf/ to get you started. Then we need to create a Safe (incl. an identity), and link a SafeKey to it. However, in this iteration of the testnet we need to create a new SafeKey using –test-coin option.

[ SETUP_AUTH_AND_SAFE 20210423/v4 ]
|
[ ] Ensure that you have enabled UPnP on your WAN router.
[ ] Start and Interact with Authenticator
  safe auth start
  safe auth status
| The authenticator endpoint is by default at https://localhost:33000
[ ] Follow the authenticator's log
  tail -f ~/.safe/authd/logs/sn_authd.log
| if the authd does not start, there may already be an authd running. Find it using ps -A | grep authd and kill <pid> and retry safe auth start.
[ ] Create an Safe (passphrase and password) and attach a SafeKey to it, to pay with.
  safe auth create --test-coins
| safe auth create alone does not work yet.
| note the pasphrase and password.
| If the initial balance is insufficient, you will get Error: AuthdError: AuthenticatorError: Failed to store Safe on a Map: Insufficient balance to complete this operation
| After re-install and using the same credentials: Error: AuthdError: AuthenticatorError: Client data already exists. In that case change your passphrase and password and try again.
| or you get: Error: AuthdClientError: [Error] ClientError - Response not received: read error: connection closed: timed out
| expect: Safe was created successfully!

To perform operations on the network that are not free, the CLI needs to be unlocked.

[ UNLOCK_CLI 20210423/v4 ]
|
[ ] Authorize the CLI
| The unlocking and authorizing can be done using --self-auth:
  safe auth unlock --self-auth
| provide passphrase and password.
| Be patient, this can take a few minutes.
| at fail: Error: Application authorisation failed Caused by: AuthdClientError: [Error] ClientError - Response not received: read error: connection closed: timed out
| expect: Safe CLI app was successfully authorised
| If it fails, try once more. Sometimes it times out and then succeeds.

An alternative:?

...untested...
[ ] Request authorization
  safe auth
| at fail: Error: Application authorisation failed Caused by: AuthdClientError: [Error] ClientError - Response not received: read error: connection closed: timed out
| at fail: Error: Application authorisation failed Caused by: AuthdError: AuthenticatorError: Failed to authorise application on the network: AuthError: Failed to retrieve keypair from the Safe: Requested data not found
| expect: Safe CLI app was successfully authorised
[ ] To avoid timeout error, check on request status from a second terminal, and approve the request
  safe auth reqs
  safe auth allow <request id>

A shortcut to bypass the need for authd was implemented so that you can write to the network without it.

[ SHORTCUT_TO_WRITE_PRIVILEGES 20210423/V4 ]
|
[ ] Generate test-coins for cli
  safe keys create --test-coins --for-cli
| expect: Safe CLI now has write access to the network
| note the Public and Private keys.

Under ~/.safe/cli/ there will be a file credentials containing a json array of numbers. Next up is creation of easy to read names NRS-URLs, mapping to XOR-URLs. NRS stands for Name Resolution System. These mappings are held in NRS Map Containers, which are based on Public Sequence data type.

[ CREATE_NRS_CONTAINER 20210409/v1 ]
|
[ ] Lookup XOR name and other details by XOR URL
  safe dog "safe://<xor-url>"
[ ] Create NRS for an xor-URL. Note that the container is versioned and therefore you need to add ?v=0 to the URL to point to the first version.
  safe nrs create -l "safe://<xor-url>?v=<version>" <readble name>
| on fail: Error: NetDataError: Failed to get current version: NetDataError: Failed to retrieve last entry from Sequence data: ErrorMessage(NoSuchData)
| expect: New NRS Map for "safe://<readable name>" created at: "safe://<xor-url of map container>"
+  <readable name>  safe://<xor-url-of file container version>
| note the NRS Map container URL.

Now you can use safe://<readable name> in place of corresponding safe://<xor-url>. Instead of create, use add to add sub-addresses.

[ CREATE_FILES_CONTAINER 20210423/v4 ]
|
[ ] Check if you have a positive balance to pay for uploads.
  safe keys balance
| expect e.g.: SafeKey's current balance: 1000.111
[ ] Add a first file to the network, creating a file container
  safe files put <local filename>
| Be very patient as this may take several minutes.
| expect: FilesContainer created at: "safe://<container xor-url>"
+  ./<local filename>  safe://<file xor-url> 
| Note the XOR-URL of the new container, as well as of the new file.
[ ] Optionally create an NRS for the container.
  safe nrs create -l "safe://<xor-url>" <readble name>
| on fail: Error: InvalidInput: The linked content (FilesContainer) is versionable, therefore NRS requires the link to specify a version: "safe://xor-url"
[ ] View the contents of the files container. Use the container xor-url.
  safe files ls "safe://<xor-url>"
| the default path within a container is "/".
[ ] Download a file from the container
  safe cat "safe://<xor-url>/<path to file>" > ./<local filename>
[ ] Download all files (the whole tree, incl. subdirs)
  safe files get "safe://<xor-url>" > ./<local dir>

Versions of objects can be requested by adding ?v=<version> to the URL. Below are some additional examples to play with. Read the cli manual for more…

[ MISC_CLI_EXAMPLES 20210409/v1 ]
|
[ ] List network profiles, switch, etc.
  safe networks
  safe networks check
[ ] Stop your local node
  safe node killall
[ ] Send test-coins
  safe keys transfer 1.1 --from <> --to safe://<user>
  safe dog safe://<user>
[ ] Check balance of rewards key of your node
  safe keys balance --sk $(cat ~/.safe/node/local-node/reward_secret_key)
[ ] Upload a bunch of files. Note that you will reach an upload limit after some time.
  safe files put ~/Music --recursive
[ ] Restart authenticator
  safe auth restart
[ ] Check on an XOR-URL and get details
  safe dog "safe://<xor-url>>"

Vdash node monitor

How to set up a vault at home Launch of a community safe network

A useful XOR distance calculator on the web. This is an example implementation in JS.

=> Appendices TOP

• A. Unofficial FAQ
• B. History and Timeline
• C. People
• D. Corporate Organization
• E. Patents and Trademarks
• F. Related or Similar Projects
• G. Lists of Resources
• H. Philosophy