Aarkam / Aarkam Wiki / Installation / End-to-End Air-Gapped Deployment & Genesis Activation ARK-DOC-AIRGAP-0206
Unified Architecture (Air-Gapped SAT & SCT) Air-Gapped Enclave Installation • ARK-DOC-AIRGAP-0206

End-to-End Air-Gapped Deployment & Genesis Activation

Complete operational runbook: Bare-metal host preparation, Abodi & Rokka service orchestration, and the cryptographic Genesis Ceremony on AarkamCP.

Last updated: Nov 03, 2026 Classification: Sovereign Tier-4 Enterprise
Document Identifier ARK-DOC-AIRGAP-0206
Standard Status
Production Runbook
Customer Portal (AarkamCP) https://aarkam.io/
Release Version V-1.0.0-GA (Production Stable)

For sovereign defense grids, intelligence enclaves, and mission-critical enterprise datacenters, the Aarkam Sovereign Storage Platform operates on a strict Zero-Trust Air-Gapped Lifecycle: zero default passwords, zero runtime internet dependencies, and zero telemetry egress.

1. High-Level Activation Lifecycle

🛡️ Air-Gapped Genesis Ceremony Lifecycle
Zero-Trust Cryptographic Seal
1. Fingerprint
Extract ARK-FP-... hardware signature from host
2. Mint Bundle
Bind on https://aarkam.io/ & download .arkbundle
3. Apply & Verify
8-layer security audit & RSA-4096 signature check
4. Sealed State
Irreversible lock: IsBootstrapped = true

2. Step-by-Step Production Runbook

Step 2.1: Pre-Flight Environment Preparation

Execute on all physical hosts (Ubuntu 22.04/24.04 LTS or RHEL 8/9):

bash 
# Install core storage & networking dependencies
sudo apt update && sudo apt install -y liburing2 libaio1 xfsprogs smartmontools nvme-cli jq curl net-tools

# Create dedicated service user and system paths
sudo groupadd --system aarkam
sudo useradd --system --gid aarkam --shell /bin/false --no-create-home aarkam
sudo mkdir -p /opt/aarkam/{bin,config,logs} /var/lib/aarkam/{coordinator,storage,gateway}
sudo chown -R aarkam:aarkam /opt/aarkam /var/lib/aarkam

Step 2.2: Deploy Abodi on Every Storage Host

bash 
sudo mkdir -p /opt/rokka/abodi
sudo unzip abodi-v1.0.0-linux-x64.zip -d /opt/rokka/abodi
cd /opt/rokka/abodi
sudo chmod +x Abodi install-abodi.sh
sudo ./install-abodi.sh --node-code "NODE-01" --rokka-url "http://127.0.0.1:7774" --storage-dir "/var/lib/rokka/storage"

Step 2.3: Deploy Rokka Coordinator & Gateway on Quorum Nodes

bash 
sudo mkdir -p /opt/aarkam/rokka
sudo unzip rokka-v1.0.0-linux-x64.zip -d /opt/aarkam/rokka
cd /opt/aarkam/rokka
sudo chmod +x rokka-coordinator rokka-gateway install-rokka.sh
sudo ./install-rokka.sh --start-services

Step 2.4: Execute the Cryptographic Genesis Ceremony

  1. Extract Physical Hardware Fingerprint:
    bash 
    am cluster fingerprint
# Output: ARK-FP-AD8FF9EE-77AEB122-F222165B
  2. Mint Genesis Bundle on AarkamCP: Log in to https://aarkam.io/ → Current Subscription → Bind Fingerprint. Paste your ARK-FP-... token and download genesis.arkbundle.
  3. Ingest and Seal Genesis State: Transfer the bundle to your air-gapped host and apply:
    bash 
    am license inspect --bundle ./genesis.arkbundle
am license apply --bundle ./genesis.arkbundle
    Alternatively, upload the bundle via the web wizard at https://<node-ip>:57771/genesis.

3. Operational Verification & Smoke Testing

bash 
# 1. Check full cluster health
am doctor --coordinator http://localhost:7774
am cluster status

# 2. Authenticate operator session
am auth login --username secadmin

# 3. Perform AWS S3 smoke test
aws --endpoint-url http://localhost:7772 s3 mb s3://airgap-vault
echo "Air-Gapped Sovereign Verification" > test.txt
aws --endpoint-url http://localhost:7772 s3 cp test.txt s3://airgap-vault/test.txt
aws --endpoint-url http://localhost:7772 s3 ls s3://airgap-vault/
← Previous Article
Abodi Storage Node Daemon & Predictive Diagnostics
 Next Article →
Standalone Tier (SAT) 2-Minute Quickstart