go-ethereum/entrypoint.sh

277 lines
7.9 KiB
Bash

#!/bin/sh
set -exu
GETH_BIN_PATH=${GETH_BIN_PATH:-geth}
GENESIS_L1_PATH=${GENESIS_L1_PATH:-/genesis_pos.json}
GETH_VERBOSITY=${GETH_VERBOSITY:-3}
GETH_LOG_FORMAT=${GETH_LOG_FORMAT:-terminal}
GETH_SYNC_MODE=${GETH_SYNC_MODE:-snap}
GETH_STATE_SCHEME=${GETH_STATE_SCHEME:-path}
GETH_DATA_DIR=${GETH_DATA_DIR:-/data}
GETH_CHAINDATA_DIR="$GETH_DATA_DIR/geth/chaindata"
GETH_KEYSTORE_DIR="$GETH_DATA_DIR/keystore"
GETH_KEYSTORE_PASSWORD=${GETH_KEYSTORE_PASSWORD:-"primev"}
GETH_ZERO_FEE_ADDRESSES=${GETH_ZERO_FEE_ADDRESSES:-}
CHAIN_ID=$(cat "$GENESIS_L1_PATH" | jq -r .config.chainId)
RPC_PORT="${RPC_PORT:-8545}"
WS_PORT="${WS_PORT:-8546}"
RPC_ENGINE_PORT="${RPC_ENGINE_PORT:-8551}"
BLOCK_SIGNER_PRIVATE_KEY=${BLOCK_SIGNER_PRIVATE_KEY:-""}
JWT_SECRET=${JWT_SECRET:-"13373d9a0257983ad150392d7ddb2f9172c9396b4c450e26af469d123c7aaa5c"}
if [ -n "$GETH_ZERO_FEE_ADDRESSES" ]; then
ZERO_FEE_ADDRESSES="--zero-fee-addresses=$GETH_ZERO_FEE_ADDRESSES"
else
ZERO_FEE_ADDRESSES=""
fi
# Generate signer key if needed
if [ "$GETH_NODE_TYPE" = "signer" ]; then
if [ ! -f "$GETH_DATA_DIR/password" ]; then
echo -n "$GETH_KEYSTORE_PASSWORD" > "$GETH_DATA_DIR"/password
fi
if [ ! -d "$GETH_KEYSTORE_DIR" ]; then
if [ -n "$BLOCK_SIGNER_PRIVATE_KEY" ]; then
echo "$GETH_KEYSTORE_DIR missing, running account import"
echo -n "$BLOCK_SIGNER_PRIVATE_KEY" | sed 's/0x//' > "$GETH_DATA_DIR"/block-signer-key
"$GETH_BIN_PATH" \
--verbosity="$GETH_VERBOSITY" \
--log.format="$GETH_LOG_FORMAT" \
--nousb \
account import \
--datadir="$GETH_DATA_DIR" \
--password="$GETH_DATA_DIR"/password \
"$GETH_DATA_DIR"/block-signer-key
fi
else
echo "$GETH_KEYSTORE_DIR exists."
if [ -z "$BLOCK_SIGNER_PRIVATE_KEY" ]; then
GETH_ACCOUNT_LIST=$("$GETH_BIN_PATH" --verbosity="$GETH_VERBOSITY" account list --datadir "$GETH_DATA_DIR")
BLOCK_SIGNER_ADDRESS_WITHOUT_PREFIX=$(echo "$GETH_ACCOUNT_LIST" | grep -oE '[0-9a-fA-F]{40}$')
BLOCK_SIGNER_ADDRESS="0x$BLOCK_SIGNER_ADDRESS_WITHOUT_PREFIX"
echo "Block signer address with 0x prefix: $BLOCK_SIGNER_ADDRESS"
fi
fi
fi
# Init geth if needed
if [ ! -d "$GETH_CHAINDATA_DIR" ]; then
echo "$GETH_CHAINDATA_DIR missing, running init"
echo "Initializing genesis."
"$GETH_BIN_PATH" \
--verbosity="$GETH_VERBOSITY" \
--log.format="$GETH_LOG_FORMAT" \
--nousb \
--state.scheme="$GETH_STATE_SCHEME" \
--datadir="$GETH_DATA_DIR" init \
"$GENESIS_L1_PATH"
else
echo "$GETH_CHAINDATA_DIR exists."
fi
# Obtain assigned container IP for p2p
NODE_IP=${NODE_IP:-$(hostname -i)}
echo "NODE_IP is set to: $NODE_IP"
PUBLIC_NODE_IP=${PUBLIC_NODE_IP:-""}
echo "EXTERNAL_NODE_IP is set to: $PUBLIC_NODE_IP"
# Set NAT_FLAG based on whether PUBLIC_NODE_IP is empty or not
if [ -n "$PUBLIC_NODE_IP" ]; then
NAT_FLAG="--nat=extip:$PUBLIC_NODE_IP"
else
NAT_FLAG="--nat=none"
fi
# (Optional) Echo the values for verification
if [ "$GETH_NODE_TYPE" = "bootnode" ]; then
echo "Starting bootnode"
echo "$NODE_KEY" > $GETH_DATA_DIR/nodekey
exec "$GETH_BIN_PATH" \
--verbosity="$GETH_VERBOSITY" \
--log.format="$GETH_LOG_FORMAT" \
$ZERO_FEE_ADDRESSES \
--datadir="$GETH_DATA_DIR" \
--port 30301 \
--http \
--http.corsdomain="*" \
--http.vhosts="*" \
--http.addr="$NODE_IP" \
--http.port="$RPC_PORT" \
--http.api=web3,debug,eth,txpool,net,engine \
--ws \
--ws.addr="$NODE_IP" \
--ws.port="$WS_PORT" \
--ws.origins="*" \
--ws.api=debug,eth,txpool,net,engine \
--syncmode="${GETH_SYNC_MODE}" \
--gcmode=full \
--state.scheme="$GETH_STATE_SCHEME" \
--networkid=$CHAIN_ID \
--nousb \
--metrics \
--metrics.addr="$NODE_IP" \
--metrics.port=6060 \
--pprof \
--pprof.addr="$NODE_IP" \
--pprof.port=60601 \
--nodekey $GETH_DATA_DIR/nodekey \
--netrestrict $NET_RESTRICT \
"$NAT_FLAG" \
--txpool.accountqueue=512 \
--rpc.allow-unprotected-txs \
--miner.gasprice=1000000000 \
--miner.recommit=300ms \
--gpo.maxprice=500000000000 \
--authrpc.addr="$NODE_IP" \
--authrpc.jwtsecret $GETH_DATA_DIR/jwt.hex
elif [ "$GETH_NODE_TYPE" = "signer" ]; then
echo "Starting signer node"
echo "$NODE_KEY" > $GETH_DATA_DIR/nodekey
echo "$JWT_SECRET" > $GETH_DATA_DIR/jwt.hex
GETH_PORT="${GETH_PORT:-30311}"
exec "$GETH_BIN_PATH" \
--verbosity="$GETH_VERBOSITY" \
--log.format="$GETH_LOG_FORMAT" \
$ZERO_FEE_ADDRESSES \
--datadir="$GETH_DATA_DIR" \
--port="$GETH_PORT" \
--syncmode="${GETH_SYNC_MODE}" \
--gcmode=full \
--state.scheme="$GETH_STATE_SCHEME" \
--http \
--http.corsdomain="*" \
--http.vhosts="*" \
--http.addr="$NODE_IP" \
--http.port="$RPC_PORT" \
--http.api=web3,debug,eth,txpool,net,engine \
--networkid=$CHAIN_ID \
--unlock=$BLOCK_SIGNER_ADDRESS \
--password="$GETH_DATA_DIR"/password \
--mine \
--miner.etherbase=$BLOCK_SIGNER_ADDRESS \
--allow-insecure-unlock \
--nousb \
--nodekey $GETH_DATA_DIR/nodekey \
--netrestrict $NET_RESTRICT \
--metrics \
--metrics.addr="$NODE_IP" \
--metrics.port=6060 \
--pprof \
--pprof.addr="$NODE_IP" \
--pprof.port=60601 \
--ws \
--ws.addr="$NODE_IP" \
--ws.port="$WS_PORT" \
--ws.origins="*" \
--ws.api=debug,eth,txpool,net,engine \
--rpc.allow-unprotected-txs \
--authrpc.addr="$NODE_IP" \
--authrpc.port="$RPC_ENGINE_PORT" \
--authrpc.vhosts="*" \
--txpool.accountqueue=512 \
--miner.gasprice=1000000000 \
--miner.recommit=300ms \
--gpo.maxprice=500000000000 \
--authrpc.jwtsecret $GETH_DATA_DIR/jwt.hex \
"$NAT_FLAG"
elif [ "$GETH_NODE_TYPE" = "member" ]; then
echo "Starting member node"
echo "$NODE_KEY" > $GETH_DATA_DIR/nodekey
echo "BOOTNODE_ENDPOINT is set to: $BOOTNODE_ENDPOINT"
GETH_PORT="${GETH_PORT:-30311}"
exec "$GETH_BIN_PATH" \
--verbosity="$GETH_VERBOSITY" \
--log.format="$GETH_LOG_FORMAT" \
$ZERO_FEE_ADDRESSES \
--datadir="$GETH_DATA_DIR" \
--port="$GETH_PORT" \
--syncmode="${GETH_SYNC_MODE}" \
--gcmode=full \
--state.scheme="$GETH_STATE_SCHEME" \
--db.engine=pebble \
--http \
--http.corsdomain="*" \
--http.vhosts="*" \
--http.addr="$NODE_IP" \
--http.port="$RPC_PORT" \
--http.api=web3,debug,eth,txpool,net,engine \
--bootnodes $BOOTNODE_ENDPOINT \
--networkid=$CHAIN_ID \
--password="$GETH_DATA_DIR"/password \
--nodekey $GETH_DATA_DIR/nodekey \
--metrics \
--metrics.addr="$NODE_IP" \
--metrics.port=6060 \
--pprof \
--pprof.addr="$NODE_IP" \
--pprof.port=60601 \
--ws \
--ws.addr="$NODE_IP" \
--ws.port="$WS_PORT" \
--ws.origins="*" \
--ws.api=debug,eth,txpool,net,engine \
--rpc.allow-unprotected-txs \
--authrpc.addr="$NODE_IP" \
--authrpc.port="$RPC_ENGINE_PORT" \
--authrpc.vhosts="*" \
--txpool.accountqueue=512 \
--miner.gasprice=1000000000 \
--miner.recommit=300ms \
--gpo.maxprice=500000000000 \
"$NAT_FLAG"
elif [ "$GETH_NODE_TYPE" = "archive" ]; then
echo "Starting archive node"
echo "BOOTNODE_ENDPOINT is set to: $BOOTNODE_ENDPOINT"
GETH_PORT="${GETH_PORT:-30311}"
exec "$GETH_BIN_PATH" \
--verbosity="$GETH_VERBOSITY" \
--log.format="$GETH_LOG_FORMAT" \
--datadir="$GETH_DATA_DIR" \
--port="$GETH_PORT" \
--syncmode="${GETH_SYNC_MODE}" \
--gcmode=archive \
--history.state=0 \
--history.transactions=0 \
--state.scheme="$GETH_STATE_SCHEME" \
--db.engine=pebble \
--http \
--http.corsdomain="*" \
--http.vhosts="*" \
--http.addr="$NODE_IP" \
--http.port="$RPC_PORT" \
--http.api=web3,debug,eth,txpool,net,engine \
--bootnodes $BOOTNODE_ENDPOINT \
--networkid=$CHAIN_ID \
--password="$GETH_DATA_DIR"/password \
--metrics \
--metrics.addr="$NODE_IP" \
--metrics.port=6060 \
--pprof \
--pprof.addr="$NODE_IP" \
--pprof.port=60601 \
--ws \
--ws.addr="$NODE_IP" \
--ws.port="$WS_PORT" \
--ws.origins="*" \
--ws.api=debug,eth,txpool,net,engine \
--rpc.allow-unprotected-txs \
--authrpc.addr="$NODE_IP" \
--authrpc.port="$RPC_ENGINE_PORT" \
--authrpc.vhosts="*" \
--txpool.accountqueue=512 \
--miner.gasprice=1000000000 \
--miner.recommit=300ms \
--gpo.maxprice=500000000000 \
"$NAT_FLAG"
else
echo "Invalid GETH_NODE_TYPE specified"
fi