RadioID cBridge Collector

Upgrade Existing Install

Bundled Install Guide

RadioID cBridge collector bundle

1. Download the bundle on a modern workstation or browser.
   The cBridge host itself may be too old to trust the current public CA chain.
   Do not use --no-check-certificate or -k for this package.

Upgrade note:
   If this bridge already has RadioID installed, do not uninstall it first.
   Unpack the new bundle and run:
   sudo ./install.sh
   That replaces the binary, service file, and bundled CA file while keeping the installed config and state.
   Only use --config during an upgrade if you intentionally want to overwrite /etc/radioid-cbridge/radioid-cbridge.ini.

2. Copy the tarball to the cBridge host.
   Example from a workstation:
   scp -P 42425 radioid-cbridge-linux-amd64-stable.tar.gz YOUR_BRIDGE_USER@YOUR_CBRIDGE_HOST:~/

3. On the cBridge host, log in.

4. Optional: verify the tarball checksum.
   sha256sum ~/radioid-cbridge-linux-amd64-stable.tar.gz
   Compare the output to the SHA256 value shown on the downloads page.

5. Create a temporary extraction directory and unpack the bundle into it:
   mkdir -p ~/radioid-cbridge-install && tar -xzf ~/radioid-cbridge-linux-amd64-stable.tar.gz -C ~/radioid-cbridge-install
   The -C option tells tar where to extract. It does not create the directory.
   Then move into the extracted bundle:
   cd ~/radioid-cbridge-install/radioid-cbridge-linux-amd64-stable

6. Prepare a config file:
   cp radioid-cbridge.ini.example radioid-cbridge.ini
   Edit radioid-cbridge.ini and fill in:
   - webhook_base_url = leave set to https://cbridge.radioid.net
   - device_id = leave blank
   - bridge_label = the specific bridge/system name shown in RadioID, for example ChicagoLand
   - network_name = the network grouping shown in RadioID; if this bridge is its own network, use the same value as bridge_label
   - admin_callsign = your callsign
   - admin_email = your email address
   - shared_secret = leave blank on first install
   RadioID will assign the bridge device_id automatically during enrollment and return it to the collector.

7. Install the collector.
   If you are already logged in as root:
   ./install.sh --config ./radioid-cbridge.ini
   If you are using a sudo-enabled account instead:
   sudo ./install.sh --config ./radioid-cbridge.ini

8. Upgrade an existing collector.
   If this bridge already has RadioID installed and you only want to update it:
   If you are already logged in as root:
   ./install.sh
   If you are using a sudo-enabled account instead:
   sudo ./install.sh
   This keeps the installed config file and existing bridge identity/state in place.

9. Expected install result:
   - The installer prints installed file locations under /opt/radioid-cbridge, /etc/radioid-cbridge, and /var/lib/radioid-cbridge
   - The service is enabled and started
   - The extracted working directory stays where you unpacked it; it is only a temporary staging directory

10. Useful commands after install:
   systemctl status radioid-cbridge
   systemctl restart radioid-cbridge
   journalctl -u radioid-cbridge -f

11. Expected service status:
   - systemctl status radioid-cbridge should show active (running)
   - journalctl should show either:
     bridge enrollment pending
     or
     bridge approved

12. Approval flow:
   - The collector starts immediately and enrolls with RadioID
   - RadioID staff review the pending bridge and approve it
   - After approval, the collector receives its bridge secret automatically and begins uploads

13. Optional command-line HTTPS test from the extracted bundle directory:
   The tarball already includes radioid-cbridge-ca.pem.
   If you want to test HTTPS from the bridge host without changing the host trust store:
   curl --cacert ./radioid-cbridge-ca.pem -I https://cbridge.radioid.net/healthz

14. Cleanup:
   After a successful install, you can delete the temporary working directory you used under your home directory.

15. Uninstall:
   sudo /opt/radioid-cbridge/uninstall.sh
   sudo /opt/radioid-cbridge/uninstall.sh --purge

Primary Install Command

What Success Looks Like

• The installer prints installed paths under `/opt/radioid-cbridge`, `/etc/radioid-cbridge`, and `/var/lib/radioid-cbridge`
• `systemctl status radioid-cbridge` shows `active (running)`
• `journalctl -u radioid-cbridge -f` shows `bridge enrollment pending` or `bridge approved`
• The extracted directory under `~/radioid-cbridge-install` is only temporary staging and can be deleted after install

What It Does

• Collects raw live cBridge activity from the local bridge host
• Sends signed outbound HTTPS payloads to RadioID after approval
• Carries bundled RadioID trust for old bridge hosts without modifying the host CA store
• Uploads a sanitized `rncp.ini` snapshot on its scheduled cadence
• Runs as a systemd service with bundled install and uninstall scripts

INI Field Guide

• `device_id`: leave it blank; RadioID assigns the canonical bridge ID during enrollment and the collector caches it locally
• `bridge_label`: the specific bridge/system name shown in RadioID
• `network_name`: the network grouping shown in RadioID; if unsure and this bridge is its own network, use the same value as `bridge_label`
• `admin_callsign`: the bridge admin callsign
• `admin_email`: the bridge admin email

What It Does Not Do

• No cBridge config writes or service restarts
• No business-logic parsing on the bridge host
• No manual pre-shared secret exchange during first install
• No requirement to update the bridge host trust store
• No install on non-cBridge systems