Car-Sales Application for Hyperledger Fabric 1.0

Create a network to jump start development of your decentralized application.

The network can be deployed to multiple docker containers on one host for development or to multiple hosts for testing or production.

Scripts of this starter generate crypto material and config files, start the network and deploy your chaincodes. Developers can use admin web app of REST API server to invoke and query chaincodes, explore blocks and transactions.

What's left is to develop your chaincodes and place them into the chaincode folder, and user interface as a single page web app that you can serve by by placing the sources into the www folder. You can take web app code or follow patterns of the admin app to enroll users, invoke chaincodes and subscribe to events.

Most of the plumbing work is taken care of by this starter.

Members and Components

Network consortium consists of:

• Orderer organization walmartlabs.com
• Peer organization org1 dmv
• Peer organization org2 dealer
• Peer organization org3 banker
• Peer organization org4 insurance

They transact with each other on the following channels:

• register involving all members and with chaincode register deployed
• bilateral confidential channels between pairs of members with chaincode dealer deployed to them
  • dmv-dealer
  • dmv-banker
  • dmv-insurance

Both chaincodes are copies of chaincode_example02. Replace these sources with your own.

Each organization starts several docker containers:

• peer0 (ex.: peer0.dmv.walmartlabs.com) with the anchor peer runtime
• peer1 peer1.dmv.walmartlabs.com with the secondary peer
• ca ca.dmv.walmartlabs.com with certificate authority server fabri-ca
• api api.dmv.walmartlabs.com with fabric-rest API server
• www www.dmv.walmartlabs.com with a simple http server to serve members' certificate files during artifacts generation and setup
• cli cli.dmv.walmartlabs.com with tools to run commands during setup

Local deployment

Deploy docker containers of all member organizations to one host, for development and testing of functionality.

All containers refer to each other by their domain names and connect via the host's docker network. The only services that need to be available to the host machine are the api so you can connect to admin web apps of each member; thus their 4000 ports are mapped to non conflicting 4000, 4001, 4002 ports on the host.

Generate artifacts:

./network.sh -m generate

Generated crypto material of all members, block and tx files are placed in shared artifacts folder on the host.

Please wait for 7 mins before making the containers online as the certificates are generated 7 mins in future.

Start the fabric docker containers of all members, this will start the blockchain network:

./network.sh -m up

Once the fabric container are up, next step is to start the API servers for each organization.

./network.sh -m api-up

Once the API servers are up, next step would be to install all the smart contracts (chaincode) to there respective nodes and join the channels.

./network.sh -m install
./network.sh -m join

After all containers are up, browse to each member's admin web app to transact on their behalf:

• DMV http://localhost:4000/admin
• Dealer http://localhost:4001/admin
• Banker http://localhost:4002/admin
• Insurance http://localhost:4003/admin

Tail logs of each member's docker containers by passing its name as organization -o argument:

# orderer
./network.sh -m logs -m walmartlabs.com

# members
./network.sh -m logs -m dmv
./network.sh -m logs -m dealer

Stop all:

./network.sh -m down

Remove dockers:

./network.sh -m clean

Deploy Portainer UI and other auxillary services.

./network -m util-up

Access the Portainer UI from http://localhost:9000/

Decentralized deployment

Deploy containers of each member to separate hosts connecting via internet.

Note the docker-compose files don't change much from the local deployment and containers still refer to each other by domain names api.dmv.walmartlabs.com, peer1.banker.walmartlabs.com etc. However they can no longer discover each other within a local docker network and need to resolve these names to real ips on the internet. We use extra_hosts setting in docker-compose files to map domain names to real ips which come as args to the script. Specify member hosts ip addresses in network.sh file or by env variables:

export IP_ORDERER=54.235.3.243 IP1=54.235.3.231 IP2=54.235.3.232 IP3=54.235.3.233 IP4=54.235.3.234

The setup process takes several steps whose order is important.

Clone the repository to all the nodes

Each member generates artifacts on their respective hosts (can be done in parallel):

# organization DMV on their host
./network.sh -m clean
./network.sh -m generate-peer -o dmv

# organization Car Dealer on their host
./network.sh -m clean
./network.sh -m generate-peer -o dealer

# organization Banker on their host
./network.sh -m clean
./network.sh -m generate-peer -o banker

# organization Insurance on their host
./network.sh -m clean
./network.sh -m generate-peer -o insurance

After certificates are generated each script starts a www docker instance to serve them to other members: the orderer will download the certs to create the ledger and other peers will download to use them to secure communication by TLS.

Note: Please wait for 15 mins before generating genesis block and channel tx as it take 15 mins to make the certificates valid.

Now the orderer can generate genesis block and channel tx files by collecting certs from members. On the orderer's host:

./network.sh -m clean
./network.sh -m generate-orderer

And start the orderer:

./network.sh -m up-orderer

When the orderer is up, each member can start services on their hosts and their peers connect to the orderer to create channels. Note that in Fabric one member creates a channel and others join to it via a channel block file. Thus channel creator members make these block files available to joiners via their www docker instances. Also note the starting order of members is important, especially for bilateral channels connecting pairs of members, for example for channel a-b member a needs to start first to create the channel and serve the block file, and then b starts, downloads the block file and joins the channel. It's a good idea to order organizations in script arguments alphabetically, ex.: ORG1=aorg ORG2=borg ORG3=corg then the channels are named accordingly aorg-borg aorg-corg borg-corg and it's clear who creates, who joins a bilateral channel and who needs to start first.

Each member downloads the genesis block and other member certifiates

# organization DMV on their host
./network.sh -m cert-dmv

# organization Dealer on their host
./network.sh -m cert-dealer

# organization Banker on their host
./network.sh -m cert-banker

# organization Insurance on their host
./network.sh -m cert-insurance

Please wait for 15 mins for downloaded certificates to take effect.

Please start all members now and install chaincode and create/join channels.

Each member starts:

# organization DMV on their host
./network.sh -m up-dmv
./network.sh -m channel-dmv

# organization Dealer on their host
./network.sh -m up-dealer
./network.sh -m channel-dealer

# organization Banker on their host
./network.sh -m up-banker
./network.sh -m channel-banker

# organization Insurance on their host
./network.sh -m up-insurance
./network.sh -m channel-insurance

Note: In-case the API server is not up, please start using the docker start command after 2 mins.

How it works

The script network.sh uses substitution of values and names to create config files out of templates:

• cryptogentemplate-orderer.yaml and cryptogentemplate-peer.yaml for cryptogen.yaml to drive cryptogen tool to generate members' crypto material: private keys and certificates
• configtxtemplate.yaml for configtx.yaml with definitions of the consortium and channels to drive configtx tool to generate genesis block file to start the orderer, and channel config transaction files to create channels
• network-config-template.json for network-config.json file used by the API server and web apps to connect to the members' peers and ca servers
• docker-composetemplate-orderer.yaml and docker-composetemplate-peer.yaml for docker-compose.yaml files for each member organization to start docker containers

During setup the same script uses cli docker containers to create and join channels, install and instantiate chaincodes.

And finally it starts members' services via the generated docker-compose.yaml files.

Customize and extend

Customize domain and organization names by editing network.sh file or by setting env variables. Note organization names are ordered alphabetically:

export DOMAIN=myapp.com ORG1=bar ORG2=baz ORG3=foo

The topology of one common channel open to all members and bilateral ones is an example and a starting point: you can change channel members by editing configtxtemplate.yaml to create wider channels, groups, triplets etc.

It's also relatively straightforward to extend the scripts from the preset ORG1, ORG2 and ORG3 to take an arbitrary number of organizations and figure out possible permutations of bilateral channels: see iterateChannels function in network.sh.

Chaincode development

There are commands for working with chaincodes in chaincode-dev mode where a chaincode is not managed within its docker container but run separately as a stand alone executable or in a debugger. The peer does not manage the chaincode but connects to it to invoke and query.

The dev network is composed of a minimal set of peer, orderer and cli containers and uses pre-generated artifacts checked into the source control. Channel and chaincodes names are myc and mycc and can be edited in network.sh.

Start containers for dev network:

./network.sh -m devup
./network.sh -m devinstall

Start your chaincode in a debugger with env variables:

CORE_CHAINCODE_LOGGING_LEVEL=debug
CORE_PEER_ADDRESS=0.0.0.0:7051
CORE_CHAINCODE_ID_NAME=mycc:0

Now you can instantiate, invoke and query your chaincode:

./network.sh -m devinstantiate
./network.sh -m devinvoke
./network.sh -m devquery

You'll be able to modify the source code, restart the chaincode, test with invokes without rebuilding or restarting the dev network.

Finally:

./network.sh -m devdown