Original :[《steem奇幻旅:用steem官方docker镜像中的命令行钱包cli_wallet创建Steem安全新号》](https://steemit.com/cn/@dappcoder/steem-steem-docker-cliwallet-steem)

[Translating English Version with Authorization of the Author(经作者授权,翻译英文版)](https://steemit.com/cn/@dappcoder/steem-steem-docker-cliwallet-steem#@anonymity.inlet/pzakkx)

<h1> Create a new Steem Security Account with the command line wallet cli_wallet in the official docker image of steem</h1>


> [0. target](#0-target)  
>> [Main Step](#main-step)  
>
> [1. Make local Docker environment](#1-make-local-docker-environment)  
>> [ubuntu18.04 install Docker](#ubuntu1804-install-docker)  
>> [Add special system account steemd](#add-special-system-account-steemd)  
>
> [2. Get Steem's official Docker image ](#2-get-steems-official-docker-image) 
> [3. Running `cli_wallet` in docker image mode ](#3-running-cli_wallet-in-docker-image-mode)  
> [4. Import the key of the old account in cli_wallet](#4-import-the-key-of-the-old-account-in-cli_wallet)  
> [5. Generate key pair in `cli_wallet`](#5-generate-key-pair-in-cli_wallet)  
> [6. Generating a new account with the public key of the key pair in `cli_wallet`](#6-generating-a-new-account-with-the-public-key-of-the-key-pair-in-cli_wallet)  
> [7. Login with the new account on online wallet of steemit with the private key of the key pair](#7-login-with-the-new-account-on-online-wallet-of-steemit-with-the-private-key-of-the-key-pair)  
> [8. In steemit's official online wallet, change the new keys](#8-in-steemits-official-online-wallet-change-the-new-keys)  
> [9. You can use the new account normally(remember the keys for recovery after the stolen account is stolen in the future)](#9-you-can-use-the-new-account-normallyremember-the-keys-for-recovery-after-the-stolen-account-is-stolen-in-the-future)  
> [Appendix: Source code explanation](#appendix-source-code-explanation) 


# 0. target
`cli_wallet` is Steem's command-line wallet, which can interact directly with Steem nodes and perform many important wallet-related operations, including creating new accounts.

New accounts created through `cli_wallet` are safer and not controlled by any account (including your old account or steemit official).

But `cli_wallet` requires Steem nodes to support WebSocket RPC (ws/wss) and temporarily find one (or build it yourself): wss://steemd.privex.io.

## Main Step  
1. Make local Docker environment  
2. Get Steem's official Docker image  
3. Running `cli_wallet` in docker image mode   
4. Import the key of the old account in cli_wallet(Responsible for paying 3STEEM fees for account creation)  
5. Generate key pair in `cli_wallet`  
6. Generating a new account with the public key of the key pair in `cli_wallet`, All new key of the new account are this key pair 
7. Login with the new account on online wallet of steemit with the private key of the key pair  
8. In steemit's official online wallet, change the new keys,Make all kinds of keys different, convenient for hierarchical management  
9. You can use the new account normally (remember the keys for recovery after the stolen account is stolen in the future).  

# 1. Make local Docker environment
## ubuntu18.04 install Docker
Take Ubuntu 18.04 as an example, Docker installation of other systems is easy by google/baidu.

Install Docker package:
`$  sudo apt update && sudo apt install git containerd docker.io -y`
Docker can also be installed via get.docker.com:
```
$ curl -fsSL get.docker.com -o get-docker.sh 
$ sh get-docker.sh
```

Start docker service:`$ service docker restart  `  
View docker status (error logs):
`$ systemctl status docker.service` or `$ journalctl -xn` 

## Add special system account steemd
Add special system account steemd,,并加入到 docker 组:
```shell
$ sudo adduser steemd
$ sudo usermod -aG sudo steemd
$ sudo usermod -aG docker steemd
$ sudo su - steemd 
```
In this way, steemd users can run docker directly without the need for frequent `sudo` operations.

# 2. Get Steem's official Docker image
Using the official docker image, it is easy for disaster recovery or hard bifurcation to operate quickly. It can also download and compile source code from GitHub itself.

Obtain the official docker image:`$ docker pull steemit/steem`  
View status : `$ docker images | grep steemit` 
```shell
steemit/steem       latest              1325632326e0        5 weeks ago         2.24GB
```
If you cannot access the official docker.com/docker.io, you can modify the docker image source:`$ sudo vi /etc/docker/daemon.json`
```config
{
"registry-mirrors":  ["https://registry.docker-cn.com","http://hub-mirror.c.163.com"]
}
```

Other options:
1. China University of Science and Technology: https://docker.mirrors.ustc.edu.cn 
2. Docker Official China Region: https://registry.docker-cn.com 
3. Netease: http://hub-mirror.c.163.com 
4. Aliyun: https://pee6w651.mirror.aliyuncs.com

# 3. Running `cli_wallet` in docker image mode   
Running `cli_wallet` in docker image mode : 
`$ docker run  -it steemit/steem /usr/local/steemd-default/bin/cli_wallet -s wss://steemd.privex.io`
show status:  
```info
Logging RPC to file: logs/rpc/rpc.log
Starting a new wallet
3104566ms main.cpp:169                  main                 ] wdata.ws_server: wss://steemd.privex.io 
Please use the set_password method to initialize a new wallet before continuing
new >>> 
```

First time use, need to set password for local Wallet with `set_password`:
`new >>> set_password yourpwd`
show status:  
```info
new >>> set_password yourpwd
set_password yourpwd
null
locked >>> 
```

At this point, the wallet is locked and unlocked with `unlock`:
`locked >>> unlock yourpwd`  
show status:  
```info
locked >>> unlock yourpwd
unlock yourpwd
null
unlocked >>> 
```

If there is no response during use, it may be that `cli_wallet` disconnects the network connection with steem node and needs `ctrl+d` to exit and re-do the previous operation.

# 4. Import the key of the old account in cli_wallet
To create a new cli_wallet, you need to pay the steem node 3 STEEM fee, so you must first have an old account with at least 3STEEM to create the account.

Import Wallet Key of the old account (active key):
`unlocked >>> import_key 5J-active-key`
show status:  
```info
import_key 5J-active-key
3555971ms wallet.cpp:427                save_wallet_file     ] saving wallet to file wallet.json
true
unlocked >>> 
```

View imported account assets:
`unlocked >>> list_my_accounts `
show status:  
```info
unlocked >>> list_my_accounts 
list_my_accounts 
585041ms websocket_api.cpp:102         on_message           ] message: {"jsonrpc":"2.0","result":[["acu.fund"]],"id":1} 
585171ms websocket_api.cpp:102         on_message           ] message: {"jsonrpc":"2.0","result":[{...} 
olduser              102.164 STEEM        614866.009468 VESTS        0.499 SBD
-------------------------------------------------------------------------
TOTAL                 102.164 STEEM        614866.009468 VESTS        0.499 SBD
```
# 5. Generate key pair in `cli_wallet`  
生成密钥对:`unlocked >>> suggest_brain_key`
```info
suggest_brain_key
{
  "brain_priv_key": "WACE other words COGNATE",
  "wif_priv_key": "5JY-wif_priv_key-5iB",
  "pub_key": "STM8QhX-pub_key-Dw1KB"
}
unlocked >>> 
```
# 6. Generating a new account with the public key of the key pair in `cli_wallet`
use the `pub_key` produced with `suggest_brain_key` creates a new account (`olduser` for old user, `newuser` for new user):
`unlocked >>> create_account_with_keys "olduser" "newuser" "" "STM8QhX-pub_key-Dw1KB" "STM8QhX-pub_key-Dw1KB" "STM8QhX-pub_key-Dw1KB" "STM8QhX-pub_key-Dw1KB" true`

Created new account, all kinds of keys are this key pair, the return information shows that the old account as creator paid 3 STEEM fees:
```info
{
  "ref_block_num": 62156,
  "ref_block_prefix": 3768508021,
  "expiration": "2019-10-12T14:18:15",
  "operations": [[
      "account_create",{
        "fee": "3.000 STEEM",
        "creator": "olduser",
        "new_account_name": "newuser",
```

# 7. Login with the new account on online wallet of steemit with the private key of the key pair  
The browser opens https://steemitwallet.com and login with the new account `newuser` and the private key of the key pair (`wif_priv_key`).

# 8. In steemit's official online wallet, change the new keys
All the keys of the new account are private keys of the key pair, which is not conducive to hierarchical management. 

Therefore, after login to the official online wallet, change the key immediately, so that all passwords are different, which is convenient for hierarchical management. 

change the keys: https://steemitwallet.com/@newuser/password

# 9. You can use the new account normally(remember the keys for recovery after the stolen account is stolen in the future)
Back up four keys, using different key in different situations:/post/Active/Owner/Memo

# Appendix: Source code explanation
Why to create an account in this way can not be controlled by any other account, you can find the explanation from the source code and source code comments.

For more `cli_wallet` operations, you can refer to the instructions in the [steem source code](https://github.com/steemit/steem/blob/326b17c6b1e883fba518bee20f7cef2d3fecec09/libraries/wallet/wallet.cpp)