StakeSquid/ethereum-rpc-docker
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add node identity key deletion after fast-path restore (fixes rpc-us-50 avalanche incident)

Browse Source
This commit is contained in:
Claude Agent
2026-09-04 09:21:21 +00:00
parent b91f20a876
commit 45d3add2dd
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
clone-backup.sh
View File

@@ -7,6 +7,7 @@
# --no-slowdisk : do NOT offload static files to /slowdisk (no symlinks); # --no-slowdisk : do NOT offload static files to /slowdisk (no symlinks);
# extract everything onto the local disk instead. Required to # extract everything onto the local disk instead. Required to
# proceed when /slowdisk is too small for the static files. # proceed when /slowdisk is too small for the static files.
# KEEP_NODE_KEYS=1 : keep the restored identity keys (default: delete via node-key-globs.txt)
# Pull the --no-slowdisk flag out of the args so the positional <config>/<dest> # Pull the --no-slowdisk flag out of the args so the positional <config>/<dest>
# parsing below is unaffected regardless of where the flag is placed. # parsing below is unaffected regardless of where the flag is placed.
@@ -689,6 +690,17 @@ main() {
[[ -n "$skipped_volumes" ]] && echo " Skipped (no backup by design):$skipped_volumes" [[ -n "$skipped_volumes" ]] && echo " Skipped (no backup by design):$skipped_volumes"
[[ -n "$failed_volumes" ]] && echo " Failed:$failed_volumes" [[ -n "$failed_volumes" ]] && echo " Failed:$failed_volumes"
# Regenerate the node's P2P identity on the destination (2026-09-04, rpc-us-50 avalanche
# incident): a restored volume carries the SOURCE node's identity keys (avalanchego
# staking/*, geth nodekey, ...). If the source still runs elsewhere, the copy is a
# duplicate NodeID and never peers. restore-volumes.sh already does this as its last
# step; the fast path skipped it. Patterns: node-key-globs.txt. KEEP_NODE_KEYS=1 opts out.
if [[ -z "$failed_volumes" && "${KEEP_NODE_KEYS:-0}" != "1" ]]; then
echo "Deleting node identity keys on $DEST_HOST (node-key-globs.txt) ..."
$SSH_CMD "$DEST_HOST" "cd /root/rpc && ./delete-node-keys.sh '$1'" \
|| echo "WARNING: delete-node-keys.sh failed on $DEST_HOST - the restored node may carry a duplicate identity; run ./delete-node-keys <host> $1 manually"
fi
# Restore Network buffer and congestion control settings. # Restore Network buffer and congestion control settings.
# These are better for your 0.2-1.4ms environment # These are better for your 0.2-1.4ms environment