Skip to content

Conversation

@pmensik
Copy link

@pmensik pmensik commented Jan 22, 2026

As a node operator on Sui, we would appreciate if suiup had support for installing and upgrading the sui-node binary, thus making frequent upgrades of testnet/mainnet binaries a bit easier.

So, this PR adds installation and upgrade options for the sui-node binary, making node upgrade as simple as

sudo systemctl stop sui-node
suiup upgrade sui-node@mainnet
sudo systemctm start sui-node

@pmensik pmensik changed the title Add support for sui-node binary feat: add support for sui-node binary Jan 22, 2026
@stefan-mysten
Copy link
Collaborator

stefan-mysten commented Jan 23, 2026

@pmensik thanks a lot for your PR and explanation.

I've been hesitant in adding sui-node to suiup as it is more targeted at operators rather than Sui developers. One of my main concerns is around that suiup does not offer yet proper ways to check that the downloaded files match the ones on GitHub. Do you see this as a concern? How do you ensure that you got the valid & official binary and not an attacker's binary?

Another issue is that suiup does not allow yet to build from a commit, which might be needed at times for an operator. What would you do in such a scenario, just build manually like you probably do now?

@pmensik
Copy link
Author

pmensik commented Jan 24, 2026

Hello @stefan-mysten, thanks for having a look. I think we can dissect this into 3 different scenarios

  1. Non-critical infrastructure (like RPCs) + devnet/testnet - I think these can be mostly upgraded without any further checks as it is now
  2. Critical infra (especially validators on the mainnet) - Yes, that's definitely an issue; however, the best way to solve it is by adding checksums to the releases and verifying that locally against the downloaded binaries. As a separate issue, it would also be great to have sui-node as a separate artifact in official releases, both due to the size of other artifacts in the TAR and because it would allow to include the SHA256 checksum of the sui-node itself.
  3. Critical patches - I think these have to be built locally as there's not always a proper release and it always requires a manual intervention anyway, so I think it's fine suiup not supporting those (although it should be specifically mentioned in the docs)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants