Tee-worker is the Masa component to scrape data from a secure TEE enclave. It uses the ego framework to build, run and sign the binary.

​
Hardware Prerequisites

​
Required Hardware

🔒 Intel SGX Support

  • Intel SGX 2.0+ enabled CPU required
  • Hardware-level security enclave
  • Secure computation environment

💻 Compatible Processors

  • 11th Gen+ Intel Core series
  • Modern Intel Xeon processors
  • Must have SGX feature enabled in BIOS

Verify your CPU supports Intel SGX 2.0 or higher before setting up mining operations. The SGX feature must also be enabled in your system BIOS.

​
Cloud Provider Recommendations

For optimal TEE mining performance and reliability, we recommend using Microsoft Azure. This provider has been extensively tested and validated by our team to ensure seamless compatibility with Masa Network’s TEE mining requirements:

Microsoft Azure

✓ Offers SGX-enabled virtual machines
✓ Proven reliability for TEE workloads
✓ Validated for Masa Network mining
✓ Our recommended provider

Alibaba Cloud

✗ Not supported for TEE mining
✗ Uses outdated SGX API (v3)
✗ Incompatible with Masa requirements
✗ Please use Azure or other validated providers

​
Azure instance capacity planning

When running TEE miners on Azure, it’s important to understand the capacity limits to optimize costs and performance. Here’s what we’ve validated:

Instance Specifications

Standard DC4s v2

  • 4 vCPUs
  • 16 GiB Memory
  • SGX-enabled

Miner Capacity

  • Maximum 4 TEE miners per instance
  • 1 miner per vCPU recommended
  • Attempting to run >4 miners causes automatic termination

To optimize costs, you can run multiple miners on a single Azure instance as long as you stay within the vCPU limits. This approach is more cost-effective than running individual instances for each miner.

​
System Setup & Configuration

​
Prerequisites

Before starting TEE mining operations, ensure you have:

Docker Setup

✓ Docker installed and running
✓ Permissions to run containers

Network Keys

✓ BTCLI to installation to manage your wallet
✓ Generate coldkey and hotkey mnemonics and register your miner

Keep your coldkey and hotkey mnemonics secure and backed up. These are required for mining operations and cannot be recovered if lost.

​
Subnet 42 TEE worker setup

To begin mining on Subnet 42, follow these steps to set up your TEE worker:

1

Clone Repository

First, clone the Subnet 42 repository which contains the TEE mining software:

git clone https://github.com/masa-finance/subnet-42.git
2

Navigate to Directory

Change into the repository directory:

cd subnet-42
3

Copy Environment File

Create your environment configuration file:

cp .env.example .env
4

Edit Environment File

Configure your .env file by updating the following fields:

  1. Your coldkey mnemonic from wallet creation
  2. Your hotkey mnemonic from wallet creation
  3. Your role (miner or validator)
  4. Your machine’s public IP address and port by default:8091 and 8080
  5. Network UID (165 for testnet, 42 for mainnet)
  6. Network name (test or finney) finney is for mainnet.
  7. Telemetry Result Worker Address (This is the address of the telemetry result worker)
  8. A comma separated list of twitter credentials to use if you want to scrape twitter data
  9. A comma separated list of twitter Bearer API tokens to use. Takes precedence over TWITTER_ACCOUNTS. This is the most reliable way to scrape twitter data.
  10. CAPABILITIES: A comma-separated list of capabilities your miner supports via credentials and/or API keys.

​
Example .env file

# Your coldkey mnemonic
COLDKEY_MNEMONIC="your coldkey mnemonic here"

# Your hotkey mnemonic (Will be used to register your miner on subnet 165)
HOTKEY_MNEMONIC="your hotkey mnemonic here"

# Role Configuration
# Node role (validator or miner)
ROLE=miner

# Your IP address
MINER_TEE_ADDRESS=https://<your-ip-address>:8080

# Network Configuration
# Network UID (165 for testnet, 42 for mainnet)
NETUID=165

# Network name (test or finney) finney is for mainnet.
SUBTENSOR_NETWORK=test

# Telemetry Result Worker Address (This is the address of the telemetry result worker) 
TELEMETRY_RESULT_WORKER_ADDRESS=https://<your-ip-address>:8080

### A comma separated list of twitter credentials to use
TWITTER_ACCOUNTS="foo:bar,foo:baz"

### A comma separated list of twitter Bearer API tokens to use. Takes precedence over TWITTER_ACCOUNTS
TWITTER_API_KEYS="apikey1,apikey2"

### A comma-separated list of capabilities your miner supports via credentials and/or API keys. All or specific capabilities can be listed.
CAPABILITIES="all"

The .env file comes pre-configured for the Subnet 165 testnet environment. No additional network configuration is needed.

When running multiple miners on one instance, you will need to create separate configuration files for each miner. Each config file should have unique settings like ports and wallet keys to avoid conflicts between miners.

5

Start Your Node

Start your node with Docker Compose based on your configured role:

For miners:

docker compose --profile miner up -d

This will:

  • Launch the required containers for your node type
  • Initialize your miner node
  • Connect to the subnet network
6

Verify TEE Worker

Once your TEE miner is running on Subnet 42, you can verify its setup and performance using the TEE Worker Status Dashboard:

  1. Visit TEE Worker status dashboard
  2. Enter your TEE Worker address (e.g. https://<your-ip-address>:8080)
  3. The tool will display:
    • Connection status to your TEE Worker
    • Telemetry data including:
      • Boot time and last operation timestamp
      • Number of Twitter scrapes performed
      • Total tweets returned
    • Worker capabilities report
    • X/Twitter integration test results

Ensure your worker reports all expected capabilities. Missing capabilities may reduce your potential rewards in the network.

If you see “No Capabilities Reported”, verify that your TEE worker is properly initialized and that all required environment variables are correctly set in your .env file.

7

Monitor Logs

Monitor your miner’s logs to ensure everything is running properly:

To see TEE worker logs:

docker logs subnet-42-tee-worker-1

To see miner or validator logs:

docker logs subnet-42-subnet42-1

Watch for:

  • Successful network connections
  • Mining activity
  • Any potential errors or warnings

It may take a few minutes for your miner to fully sync with the network and begin mining operations.

​
Upgrading your miner

1

Stop current miner

Stop your current miner:

docker compose -p <container-name> down
2

Update code

Pull the latest changes from the repository:

git pull origin
3

Start new version

Start the new version:

docker compose --profile miner up -d

​
Frequently Asked Questions

​
⚙️ Setup & Configuration