The Dusk Network
Learning Hub

# Install Rusk (mainnet)
curl --proto '=https' --tlsv1.2 -sSfL \
  https://github.com/dusk-network/node-installer/releases/latest/download/node-installer.sh \
  | sudo bash

# Create wallet (save mnemonic securely!)
rusk-wallet create

# Export consensus key to correct location
rusk-wallet export -d /opt/dusk/conf -n consensus.keys

# Set consensus key password
sh /opt/dusk/bin/setup_consensus_pwd.sh

# Fast sync state, then start node
service rusk stop && download_state && service rusk start

# Monitor sync progress
tail -F /var/log/rusk.log | grep "block accepted"

# Check block height (compare with explorer)
ruskquery block-height

# Stake once synced (min 1000 DUSK)
rusk-wallet stake --amt 1000

# Verify stake
rusk-wallet stake-info

# Create the OWNER wallet on a secure machine (offline preferred)
rusk-wallet create

# Note your owner address — you'll need it for the staking step
rusk-wallet addresses
# Example output: owner address = 27xyK9gR...a1Bk

# Install Rusk node
curl --proto '=https' --tlsv1.2 -sSfL \
  https://github.com/dusk-network/node-installer/releases/latest/download/node-installer.sh \
  | sudo bash

# Create a SEPARATE wallet on the node (different mnemonic!)
rusk-wallet create

# Export consensus key for the node to use
rusk-wallet export -d /opt/dusk/conf -n consensus.keys
sh /opt/dusk/bin/setup_consensus_pwd.sh

# Fast sync state, then start node
service rusk stop && download_state && service rusk start

# Wait for sync — check block height matches explorer
ruskquery block-height

# From the NODE machine, stake with the --owner flag
# Replace <owner-address> with the address from Step 1
rusk-wallet stake --amt 1000 --owner <owner-address>

# Verify stake and owner assignment
rusk-wallet stake-info
# You should see: owner = <owner-address> (NOT the node address)

# What this means:
#   Node wallet → signs blocks, earns rewards
#   Owner wallet → sole key that can unstake or withdraw
#   Server hacked? → attacker CANNOT touch staked DUSK

# Insert USB drive and identify it (usually /dev/sdb or /dev/sdc)
lsblk
# IMPORTANT: Replace /dev/sdX with YOUR device — this ERASES the drive

# Install cryptsetup if not present
sudo apt update && sudo apt install -y cryptsetup

# Wipe and create a LUKS-encrypted partition
# You will be asked to set a strong passphrase — DO NOT FORGET IT
sudo cryptsetup luksFormat /dev/sdX1

# Open the encrypted partition (you'll enter the passphrase)
sudo cryptsetup open /dev/sdX1 dusk-cold

# Format the decrypted volume with ext4
sudo mkfs.ext4 /dev/mapper/dusk-cold

# Create a mount point and mount
sudo mkdir -p /mnt/dusk-cold
sudo mount /dev/mapper/dusk-cold /mnt/dusk-cold

# Set permissions so your user can write
sudo chown $(whoami):$(whoami) /mnt/dusk-cold

# Create the owner wallet DIRECTLY on the encrypted USB
# The -w flag tells rusk-wallet to use a custom directory
rusk-wallet create -w /mnt/dusk-cold/wallet

# Save your mnemonic phrase on paper (NOT digitally)
# This mnemonic + the USB are your only recovery paths

# Get the owner address — write this down, you need it for staking
rusk-wallet -w /mnt/dusk-cold/wallet addresses
# Example output: owner address = 27xyK9gR...a1Bk

# Verify the wallet files exist only on the USB
ls -la /mnt/dusk-cold/wallet/
# Should show .dat wallet files

# Unmount the drive
sudo umount /mnt/dusk-cold

# Close the LUKS encryption layer
sudo cryptsetup close dusk-cold

# Physically remove the USB drive
# Store it in a safe place (fireproof safe, safety deposit box, etc.)

# === ON NODE MACHINE (server/VPS) ===
# Install Rusk node
curl --proto '=https' --tlsv1.2 -sSfL \
  https://github.com/dusk-network/node-installer/releases/latest/download/node-installer.sh \
  | sudo bash

# Create a SEPARATE node wallet (different mnemonic from USB!)
rusk-wallet create

# Export consensus key
rusk-wallet export -d /opt/dusk/conf -n consensus.keys
sh /opt/dusk/bin/setup_consensus_pwd.sh

# Sync and start
service rusk stop && download_state && service rusk start
ruskquery block-height  # Wait for sync

# Stake using the owner address from your USB wallet
# Replace <owner-address> with the address from Step 2
rusk-wallet stake --amt 1000 --owner <owner-address>

# Verify: owner should show the USB wallet address
rusk-wallet stake-info

# When you need to unstake or withdraw rewards:
# Insert the USB drive
sudo cryptsetup open /dev/sdX1 dusk-cold
sudo mount /dev/mapper/dusk-cold /mnt/dusk-cold

# Unstake or withdraw using the USB wallet
rusk-wallet -w /mnt/dusk-cold/wallet unstake
rusk-wallet -w /mnt/dusk-cold/wallet withdraw

# Close up when done
sudo umount /mnt/dusk-cold
sudo cryptsetup close dusk-cold
# Remove USB and store safely