Skip to content

Stage 7 — Start IA Node (No Security)

How to complete this stage

Start the Secure Agent Graph with authentication and access control disabled. Open a new terminal for this stage and leave it running.

Approach and rationale

This stage isolates the data layer. By running the graph engine without security, you can confirm that:

  • The runtime starts correctly.
  • RDF data can be ingested.
  • Queries work as expected.

If the graph does not work in this minimal mode, adding security later will make failures harder to diagnose. Before starting, ensure:

  • ianode-access is still running (Stage 4).
  • All components built successfully (Stage 6).

7.1 Start Secure Agent Graph in minimal mode

Change to the Secure Agent Graph directory:

cd ~/src/secure-agent-graph

Start the graph using the minimal configuration:

USER_ATTRIBUTES_URL=http://localhost:8091 \
JWKS_URL=disabled \
java \
-Dfile.encoding=UTF-8 \
-Dsun.stdout.encoding=UTF-8 \
-Dsun.stderr.encoding=UTF-8 \
-classpath "sag-server/target/classes:sag-system/target/classes:sag-docker/target/dependency/*" \
uk.gov.dbt.ndtp.secure.agent.graph.SecureAgentGraph \
--config sag-docker/mnt/config/dev-server-vanilla.ttl
Expected behaviour
  • Starts the Secure Agent Graph process.
  • Loads an in-memory RDF dataset.
  • Disables JWT validation and access control.
  • Exposes HTTP endpoints for upload and query.
  • Listens on port 3030.

The configuration file dev-server-vanilla.ttl is intentionally minimal and contains no security settings.

7.2 Observe startup behaviour

Watch the console output as the service starts.

Expected behaviour
  • The service starts without errors.
  • Logs indicate the dataset has been initialised.
  • The service remains running.

You do not need to interact with the service yet. This stage is about confirming it starts cleanly.

Operational notes
  • If you see ClassNotFoundException or missing JAR errors, confirm that:
secure-agent-graph/sag-docker/target/dependency/

exists and contains JAR files.

  • If the process exits immediately, re-run Stage 6 and retry.
  • Leave this process running; the next stage will interact with it from another terminal.

7.3 Checkpoint

At the end of this stage:

  • Secure Agent Graph is running.
  • The process remains active without errors.
  • The service is reachable at:
http://localhost:3030

If the service fails to start, do not continue. Most failures at this point indicate missing build artefacts or classpath issues from Stage 6.

Next Steps

Run Node (Secure)