Merge branch 'main' into issue-2601

Merge pull request 'abcore mainnet: add geth-fork chain-id 36888' (#56 ) from issue-3079 into main
avalanche fuji: enable C-chain state-sync on pruned profile (mirrors #48 for mainnet; full block execution was 55h+ ETA on the de-22 prune-cycle test node)
2026-08-26 02:42:30 +00:00 · 2026-08-26 02:35:13 +00:00 · 2026-08-26 01:50:29 +00:00 · 2026-08-26 01:49:58 +00:00 · 2026-08-25 09:14:25 +00:00 · 2026-08-25 05:35:26 +00:00
45 changed files with 858 additions and 138 deletions
--- a/abcore/mainnet/config.toml
+++ b/abcore/mainnet/config.toml
@@ -0,0 +1,33 @@
+[Eth]
+NetworkId = 36888
+SyncMode = "snap"
+NoPruning = false
+NoPrefetch = false
+
+[Eth.Miner]
+GasFloor = 0
+GasCeil = 63000000
+GasPrice = 50000000000000
+Recommit = 2000000000
+NewPayloadTimeout = 2000000000
+
+[Node]
+DataDir = "/root/.ethereum"
+HTTPHost = "0.0.0.0"
+HTTPPort = 8545
+HTTPVirtualHosts = ["*"]
+HTTPModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
+WSHost = "0.0.0.0"
+WSPort = 8546
+WSModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
+WSOrigins = ["*"]
+
+[Node.P2P]
+MaxPeers = 50
+NoDiscovery = false
+DiscoveryV4 = true
+ListenAddr = ":33333"
+
+[Metrics]
+HTTP = "127.0.0.1"
+Port = 6060
--- a/abcore/mainnet/genesis.json
+++ b/abcore/mainnet/genesis.json
@@ -0,0 +1,28 @@
+{
+  "config": {
+    "chainId": 36888,
+    "homesteadBlock": 0,
+    "eip150Block": 0,
+    "eip155Block": 0,
+    "eip158Block": 0,
+    "byzantiumBlock": 0,
+    "constantinopleBlock": 0,
+    "petersburgBlock": 0,
+    "istanbulBlock": 0,
+    "muirGlacierBlock": 0,
+    "berlinBlock": 0,
+    "clique": {
+      "period": 3,
+      "epoch": 30000
+    }
+  },
+  "timestamp": "0x67fda368",
+  "difficulty": "1",
+  "gasLimit": "63000000",
+  "extradata": "0x0000000000000000000000000000000000000000000000000000000000000000E9B95948d28EF808a9184d5fC98346EF3e56839c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+  "alloc": {
+    "da8B88027Ac27532E1525DD67974c2377b450A08": {
+      "balance": "100000000000000000000000000000"
+    }
+  }
+}
--- a/avalanche/fuji/pruned/C/config.json
+++ b/avalanche/fuji/pruned/C/config.json
@@ -1,4 +1,6 @@
 {
    "rpc-gas-cap": 2500000000,
-    "eth-rpc-gas-limit": 2500000000
+    "eth-rpc-gas-limit": 2500000000,
+    "state-sync-enabled": true,
+    "state-sync-skip-resume": true
 }
--- a/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  avalanche-fuji-archive:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/avalanche/mainnet/prune/C/config.json
+++ b/avalanche/mainnet/prune/C/config.json
@@ -1,23 +1,6 @@
 {
-    "snowman-api-enabled": false,
-    "coreth-admin-api-enabled": false,
-    "net-api-enabled": true,
    "rpc-gas-cap": 2500000000,
-    "rpc-tx-fee-cap": 100,
    "eth-rpc-gas-limit": 2500000000,
-    "eth-api-enabled": true,
-    "personal-api-enabled": false,
-    "tx-pool-api-enabled": false,
-    "debug-api-enabled": false,
-    "web3-api-enabled": true,
-    "local-txs-enabled": false,
-    "pruning-enabled": true,
-    "api-max-duration": 0,
-    "api-max-blocks-per-request": 0,
-    "allow-unfinalized-queries": false,
-    "log-level": "info",
-    "state-sync-enabled": false,
-    "state-sync-skip-resume": true,
    "offline-pruning-enabled": true,
    "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
 }
--- a/avalanche/mainnet/pruned/C/config.json
+++ b/avalanche/mainnet/pruned/C/config.json
@@ -16,6 +16,6 @@
    "api-max-blocks-per-request": 0,
    "allow-unfinalized-queries": false,
    "log-level": "info",
-    "state-sync-enabled": false,
+    "state-sync-enabled": true,
    "state-sync-skip-resume": true
 }
--- a/compose_registry.json
+++ b/compose_registry.json
@@ -9672,6 +9672,22 @@
      "starknet-sepolia-pathfinder-pruned"
    ]
  },
+  {
+    "chain": "mainnet",
+    "client": "tacchaind",
+    "compose_file": "tac/tacchaind/tac-mainnet-tacchaind-archive",
+    "drpc_chain": "tac",
+    "features": [],
+    "network": "tac",
+    "node": "config",
+    "relay": null,
+    "stack": null,
+    "type": "archive",
+    "volumes": [
+      "tac-mainnet-tacchaind-archive",
+      "tac-mainnet-tacchaind-archive_config"
+    ]
+  },
  {
    "chain": "mainnet",
    "client": "tacchaind",
@@ -9688,6 +9704,22 @@
      "tac-mainnet-tacchaind-pruned_config"
    ]
  },
+  {
+    "chain": "spb",
+    "client": "tacchaind",
+    "compose_file": "tac/tacchaind/tac-spb-tacchaind-archive",
+    "drpc_chain": "tac-spb",
+    "features": [],
+    "network": "tac",
+    "node": "config",
+    "relay": null,
+    "stack": null,
+    "type": "archive",
+    "volumes": [
+      "tac-spb-tacchaind-archive",
+      "tac-spb-tacchaind-archive_config"
+    ]
+  },
  {
    "chain": "spb",
    "client": "tacchaind",
--- a/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
+++ b/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
@@ -35,7 +35,7 @@ services:
      dockerfile: cometbft.Dockerfile
      args:
        CL_IMAGE: ${COSMOS_GAIAD_IMAGE:-ghcr.io/cosmos/gaia}
-        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.5.0}
+        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.6.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/reth/ethereum-hoodi-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-hoodi-reth-archive-trace.yml
@@ -61,6 +61,7 @@ services:
      - --engine.cross-block-cache-size=${ETHEREUM_HOODI_RETH_STATE_CACHE:-4096}
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml
@@ -62,6 +62,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml
@@ -61,6 +61,7 @@ services:
      - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml
@@ -61,6 +61,7 @@ services:
      - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
@@ -61,6 +61,7 @@ services:
      - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml
@@ -65,6 +65,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml
@@ -87,6 +87,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml
@@ -62,6 +62,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml
@@ -62,6 +62,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml
@@ -62,6 +62,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml
@@ -61,6 +61,7 @@ services:
      - --engine.cross-block-cache-size=${ETHEREUM_SEPOLIA_RETH_STATE_CACHE:-4096}
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
@@ -61,6 +61,7 @@ services:
      - --engine.cross-block-cache-size=${ETHEREUM_SEPOLIA_RETH_STATE_CACHE:-4096}
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml
@@ -62,6 +62,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml
@@ -62,6 +62,7 @@ services:
      - --engine.memory-block-buffer-target=0
      - --engine.persistence-threshold=0
      - --full
+      - --gpo.ignoreprice=2
      - --max-inbound-peers=50
      - --max-outbound-peers=50
      - --metrics=0.0.0.0:9001
--- a/haqq/scripts/cometbft-common.sh
+++ b/haqq/scripts/cometbft-common.sh
@@ -0,0 +1,223 @@
+#!/bin/sh
+# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
+#
+# Source this from a chain-specific init.sh. It encapsulates the operations every
+# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
+# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
+# beacon-kit entrypoint so callers inherit known-good behavior.
+#
+# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
+# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
+# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
+# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
+#
+# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
+# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
+# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
+
+set -e
+
+ct_log() { echo "[cometbft-init] $*"; }
+
+# Ensure curl exists (alpine base images often omit it). Idempotent.
+ct_require_curl() {
+  if ! command -v curl >/dev/null 2>&1; then
+    ct_log "installing curl"
+    apk add --no-cache curl
+  fi
+}
+
+# ct_fetch URL DEST [required]
+#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
+#   otherwise a missing/failed fetch is logged and skipped (returns 0).
+ct_fetch() {
+  _url="$1"; _dest="$2"; _req="${3:-optional}"
+  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
+  if curl -fsSL "$_url" -o "$_dest"; then
+    ct_log "fetched $_url -> $_dest"
+  else
+    if [ "$_req" = required ]; then
+      ct_log "FATAL: failed to fetch required $_url"; exit 1
+    fi
+    ct_log "skip: could not fetch optional $_url"
+  fi
+}
+
+# ct_patch_p2p CONFIG_TOML IP P2P_PORT
+#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
+ct_patch_p2p() {
+  _cfg="$1"; _ip="$2"; _port="$3"
+  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
+  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
+  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
+  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
+}
+
+# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
+#   Merge operator-configured seeds with an optional official seed list (1 entry per
+#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
+ct_merge_seeds() {
+  _cfg="$1"; _seeds="$2"; _url="$3"
+  [ -f "$_cfg" ] || return 0
+  if [ -n "$_url" ]; then
+    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
+    if [ -n "$_official" ]; then
+      ct_log "merging official seeds from $_url"
+      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
+    else
+      ct_log "no official seeds fetched from $_url (continuing with configured)"
+    fi
+  fi
+  if [ -n "$_seeds" ]; then
+    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
+  fi
+}
+
+# ct_set_persistent_peers CONFIG_TOML PEERS
+#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
+#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
+ct_set_persistent_peers() {
+  _cfg="$1"; _peers="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_peers" ] || return 0
+  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
+  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_moniker CONFIG_TOML MONIKER
+ct_set_moniker() {
+  _cfg="$1"; _mon="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
+#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
+ct_set_addrbook() {
+  _dir="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  ct_fetch "$_url" "$_dir/addrbook.json" optional
+}
+
+# ct_write_jwt CONFIG_DIR  [JWT_SRC]
+#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
+#   dir as jwt.hex so the CL can authenticate to the EL engine API.
+ct_write_jwt() {
+  _dir="$1"; _src="${2:-/jwtsecret}"
+  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
+  cat "$_src" > "$_dir/jwt.hex"
+}
+
+# ct_set_rpc_dial_url APP_TOML AUTH_RPC
+#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
+ct_set_rpc_dial_url() {
+  _app="$1"; _rpc="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
+  return 0
+}
+
+# ct_seed_priv_validator_state HOME_DIR
+#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
+#   when one is present in config/). Mirrors the berachain init.sh behavior.
+ct_seed_priv_validator_state() {
+  _home="$1"
+  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
+    mkdir -p "$_home/data"
+    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
+  fi
+  return 0
+}
+
+# ct_apk PKG...
+#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
+ct_apk() {
+  apk add --no-cache "$@"
+}
+
+# ct_localize_home CONFIG_DIR
+#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
+#   paths; the container runs as root with a static home, so make paths absolute.
+ct_localize_home() {
+  _dir="$1"
+  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
+  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
+  return 0
+}
+
+# ct_set_min_gas_prices APP_TOML PRICE
+#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
+#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
+ct_set_min_gas_prices() {
+  _app="$1"; _price="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_price" ] || return 0
+  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
+  return 0
+}
+
+# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
+#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
+#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
+#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
+#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
+#   Requires jq + curl. No-op (logged) if head height can't be fetched.
+ct_configure_statesync() {
+  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
+  [ -f "$_cfg" ] || return 0
+  # NEVER re-arm statesync on a node that already has application state (a restored
+  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
+  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
+  # so application state lives at $HOME/data/application.db.
+  _home=$(dirname "$(dirname "$_cfg")")
+  if [ -e "$_home/data/application.db" ]; then
+    ct_log "statesync: existing data dir, skipping"
+    return 0
+  fi
+  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
+  _primary=$(echo "$_rpc" | cut -d, -f1)
+  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
+  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
+    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
+  fi
+  _trust_h=$((_latest - _offset))
+  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
+  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
+  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
+  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
+  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
+  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
+  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
+  sed -i.bak -E "/^\[statesync\]/,/^\[/{
+    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
+    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
+    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
+    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
+  }" "$_cfg"
+  return 0
+}
+
+# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
+#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
+#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
+#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
+#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
+#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
+#   FULL snapshot restore. Requires lz4 + tar (installed here).
+ct_ensure_wasm() {
+  _home="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
+    return 0   # wasm already present
+  fi
+  ct_log "wasm: empty, fetching snapshot $_url"
+  ct_apk lz4 tar
+  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
+    ct_log "wasm: extracted into $_home"
+  else
+    ct_log "WARN wasm: fetch/extract failed ($_url)"
+  fi
+  return 0
+}
--- a/haqq/scripts/init.sh
+++ b/haqq/scripts/init.sh
@@ -1,64 +1,65 @@
 #!/bin/sh
+# haqq (haqqd) entrypoint — family C, pure CometBFT (no EL). Thin: sources the
+# shared cometbft-common.sh and orchestrates init + statesync bootstrap + start.
+# Serves CometBFT RPC :26657 (the dshackle/traefik upstream).
+# Genesis replay across ~25 Haqq network upgrades is impractical, so we statesync
+# near head with the current binary.
+set -e
+. /usr/local/bin/cometbft-common.sh

-set -e  # Exit on failure
+HOME_DIR="/root/.haqqd"
+CONFIG_DIR="$HOME_DIR/config"
+CHAIN_ID="${CHAINID:-haqq_11235-1}"
+CHAINNAME="${CHAINNAME:-mainnet}"
+GENESIS_URL="${GENESIS_URL:-https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json}"
+ADDRBOOK_URL="${ADDRBOOK_URL:-https://snapshots.polkachu.com/addrbook/haqq/addrbook.json}"
+STATESYNC_RPC="${STATESYNC_RPC:-https://haqq-rpc.polkachu.com:443}"
+MIN_GAS="${MIN_GAS:-0.01hqq}"
+MONIKER="${MONIKER:-rpc-node}"

-echo "MONIKER: $MONIKER"
+# Polkachu seeds + official Haqq network seeds for reliable peer discovery
+SEEDS="${SEEDS:-936e27a05f3cfb090507dd810395cbbd8efbffb0@65.109.115.172:24056,f4675b63b8872fb9216efa99428eb5b1fb297393@65.109.104.118:61256,6c9a6fc0e0d94bf303075e46560832e652cffc14@65.108.71.137:24056,7c153a83@peer.haqq.mainnet.dteam.tech:28656}"

-CHAINID=${CHAINID:-haqq_11235-1}
-CHAINNAME=${CHAINNAME:-mainnet}
-API=${API:-eth,net,web3}
+# Optional persistent peers for additional bootstrap reliability
+PERSISTENT_PEERS="${PERSISTENT_PEERS:-17e0fd08f04e062d18412808b8bf134e9ad34508@65.109.109.189:10656,e000b992a0066eae9e87c66e0d65229a76647509@198.96.92.242:32656,7c153a83@peer.haqq.mainnet.dteam.tech:28656,235ac65359582357b04754e838496545b3ba6429@haqq-seed-1.allnodes.me:26656,9573a569016378765444095484840d7f543d2800@haqq-seed-2.allnodes.me:26656}"

-CONFIG_DIR="/root/.haqqd/config"
+ct_apk curl jq

-# Create config directory
-mkdir -p "$CONFIG_DIR"
-
-P2P_STRING="tcp:\\/\\/0\\.0\\.0\\.0\\:${P2P_PORT:-10465}"
-NAT_STRING="${IP}:${P2P_PORT:-10465}"
-
-env
-
-# this goes first because it won't overwrite shit
-apk add curl
-if [ $? -ne 0 ]; then exit 1; fi
-
-if haqqd init ${MONIKER} --chain-id ${CHAINID} --home /root/.haqqd/; then
-    # Define variables
-    GENESIS_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json"    
-    ADDRESSBOOK_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/addrbook.json"
-    
-    # Download config files
-    curl -sL "$GENESIS_URL" -o "$CONFIG_DIR/genesis.json"    
-    curl -sL "$ADDRESSBOOK_URL" -o "$CONFIG_DIR/addressbook.json"
-
-    # somehow it's better to make home static to /root
-    sed -i 's|~/|/root/|g' "$CONFIG_DIR/config.toml"
-    sed -i 's|~/|/root/|g' "$CONFIG_DIR/app.toml"
+if haqqd init "$MONIKER" --chain-id "$CHAIN_ID" --home "$HOME_DIR" >/dev/null 2>&1; then
+  ct_log "fresh init; fetching genesis and addrbook"
+  ct_fetch "$GENESIS_URL" "$CONFIG_DIR/genesis.json" required
+  ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
+  ct_localize_home "$CONFIG_DIR"
+  ct_set_min_gas_prices "$CONFIG_DIR/app.toml" "$MIN_GAS"
 else
-    echo "Already initialized, continuing!" >&2
+  ct_log "already initialized, continuing"
+  # Auto-refresh addrbook from Polkachu when empty on startup
+  if [ ! -s "$CONFIG_DIR/addrbook.json" ]; then
+    ct_log "addrbook.json is empty, refreshing from Polkachu"
+    ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
+  fi
 fi

+# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:8545"|}' "$CONFIG_DIR/config.toml"

-# apply a port change to the config
-sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$P2P_STRING\"|}" "$CONFIG_DIR/config.toml"
-#sed -i "s/^laddr = \".*\"/laddr = \"$P2P_STRING\"/" "$CONFIG_DIR/config.toml"
-sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"$NAT_STRING\"|}" "$CONFIG_DIR/config.toml"
-
-#sed -i 's/minimum-gas-prices = ""/minimum-gas-prices = "0.01hqq"/g' $CONFIG_DIR/app.toml
-
-sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^indexer *=.*/indexer = \"null\"/" $CONFIG_DIR/config.toml
+ct_patch_p2p             "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-10465}"
+ct_merge_seeds           "$CONFIG_DIR/config.toml" "$SEEDS" "$ADDRBOOK_URL"
+ct_set_persistent_peers  "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
+ct_set_moniker           "$CONFIG_DIR/config.toml" "$MONIKER"
+ct_configure_statesync   "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"
+ct_seed_priv_validator_state "$HOME_DIR"

+# Haqq-specific config: enable API endpoints
 sed -i "/^\[json-rpc\]/,/^\[/{s|^address = .*|address = \"0.0.0.0:8545\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^ws-address = .*|ws-address = \"0.0.0.0:8546\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^metrics-address = .*|metrics-address = \"0.0.0.0:6065\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.toml"

-# Update moniker if set
-if [ -n "$MONIKER" ] && [ -f "$CONFIG_DIR/config.toml" ]; then
-    sed -i "s/^moniker = \".*\"/moniker = \"$MONIKER\"/" "$CONFIG_DIR/config.toml"
-fi
+# Custom pruning settings for RPC node
+sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^indexer *=.*/indexer = \"null\"/" "$CONFIG_DIR/config.toml"

-exec haqqd start --chain-id ${CHAINID} $@
+exec haqqd start --chain-id "$CHAIN_ID" --home "$HOME_DIR" $@
--- a/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
@@ -54,6 +54,7 @@ services:
      - 9545
    command:
      - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
      - --bootnodes=enode://069800db9e6e0ec9cadca670994ef1aea2cfd3d88133e63ecadbc1cdbd1a5847b09838ee08d8b5f02a9c32ee13abeb4d4104bb5514e5322c9d7ee19f41ff3e51@3.132.73.210:31002,enode://a8e03a71eab12ec4b47bb6e19169d8e4dc7a58373a2476969bbe463f2dded6003037fa4dd5f71e15027f7fc8d7340956fbbefed67ddd116ac19a7f74da034b61@3.132.73.210:31003,enode://97706526cf79df9d930003644f9156805f6c8bd964fc79e083444f7014ce10c9bdd2c5049e63b58040dca1d4c82ebef970822198cf0714de830cff4111534ff1@18.223.198.165:31004,enode://24e1c654a801975a96b7f54ebd7452ab15777fc635c1db25bdbd4425fdb04e7f4768e9e838a87ab724320a765e41631d5d37758c933ad0e8668693558125c8aa@18.223.198.165:31000,enode://27010891d960f73d272a553f72b6336c6698db3ade98d631f09c764e57674a797be5ebc6829ddbb65ab564f439ebc75215d20aa98b6f351d12ea623e7d139ac3@3.132.73.210:31001,enode://228e1b8a4931e46f383e30721dac21fb8fb4e5e1b32c870e13b25478c82db3dc1cd9e7ceb93d302a766466b55638cc9c5cbfc43aa48fa41ced19baf365951f76@3.1.142.64:31002,enode://c22eb0d40fc3ad5ea710aeddea906567778166bfe18c157955e8c39b23a46c45db18a0fa2ba07f2b64c81178a8c796aec2a29151533920ead06fcdfc6d8d03c6@47.128.192.57:31004,enode://8ce733abe39fd7ae0a278b9893f85c1193c611a3886168690dd843435460f22cc4d61f9e8d0ace7f5905836a665319a31cccdaacdada2acc69972c382ecce7db@3.1.142.64:31003,enode://b7c1b2bed65a855f7a2104aac9a14674dfdf018fdac763415b373b29ce18cdb81d36328ba4e5c9f12629f3a50c3e8f9ee048f22dbdbe93a82813da89c6b81334@51.20.235.126:31004,enode://95270e0550848a72fb141cf27f1c4ea10714edde365b411dc0fa06c81c0f282ce155eb9fa472b6b8bb9ee98395eeaf4c5a7b02a01fe58b37ea98ba152eda4c37@13.50.94.193:31000,enode://72013391755f24f08567b932feeeec4c893c06e0b1fb480890c83bf87fd277ad86a5ab9cb586db9ae9970371a2f8cb0c96f6c9f69045abca0fb801db7f047138@51.20.235.126:31001
      - --data-path=/opt/besu/database
      - --data-storage-format=BONSAI
--- a/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
@@ -54,6 +54,7 @@ services:
      - 9545
    command:
      - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
      - --bootnodes=enode://6f20afbe4397e51b717a7c1ad3095e79aee48c835eebd9237a3e8a16951ade1fe0e66e981e30ea269849fcb6ba03d838da37f524fabd2a557474194a2e2604fa@18.221.100.27:31002,enode://ce1e0d8e0500cb5c0ac56bdcdafb2d6320c3a2c5125b5ccf12f5dfc9b47ee74acbcafc32559017613136c9c36a0ce74ba4f83b7fb8244f099f3b15708d9d3129@3.23.75.47:31000,enode://1b026a5eb0ae74300f58987d235ef0e3a550df963345cb3574be3b0b54378bd11f14dfd515a8976f2c2d2826090e9507b8ccc24f896a9ffffffcabcfd996a733@3.129.120.128:31001
      - --data-path=/opt/besu/database
      - --data-storage-format=BONSAI
--- a/polygon/bor/polygon-amoy-bor-archive-pebble-path.yml
+++ b/polygon/bor/polygon-amoy-bor-archive-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  polygon-amoy-archive:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0-private}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/polygon/bor/polygon-amoy-bor-pruned-pebble-path.yml
+++ b/polygon/bor/polygon-amoy-bor-pruned-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  polygon-amoy:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0-private}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/polygon/bor/polygon-mainnet-bor-archive-pebble-path.yml
+++ b/polygon/bor/polygon-mainnet-bor-archive-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  polygon-mainnet-archive:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.9.0}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.10.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/polygon/bor/polygon-mainnet-bor-pruned-pebble-path.yml
+++ b/polygon/bor/polygon-mainnet-bor-pruned-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  polygon-mainnet:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.9.0}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.10.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/reference-rpc-endpoint.json
+++ b/reference-rpc-endpoint.json
@@ -143,7 +143,8 @@
    "urls": [
      "https://rpc-amoy.polygon.technology",
      "https://polygon-amoy-bor-rpc.publicnode.com",
-      "https://polygon-amoy.drpc.org"
+      "https://polygon-amoy.drpc.org",
+      "https://rpc.satelink.network/rpc/amoy"
    ]
  },
  "arbitrum": {
@@ -157,6 +158,7 @@
      "https://arb1.arbitrum.io/rpc",
      "https://arbitrum-one-rpc.publicnode.com",
      "https://rpcfree.com/arbitrum-rpc",
+      "https://rpc.satelink.network/rpc/arbitrum",
      "https://arbitrum.drpc.org"
    ]
  },
@@ -216,6 +218,7 @@
      "https://bsc-dataseed3.ninicoin.io",
      "https://bsc-dataseed4.ninicoin.io",
      "https://bsc-rpc.publicnode.com",
+      "https://bsc-rpc-public.chainpulse.cc",
      "https://bsc.drpc.org"
    ]
  },
@@ -233,6 +236,7 @@
      "https://data-seed-prebsc-1-s3.bnbchain.org:8545",
      "https://data-seed-prebsc-2-s3.bnbchain.org:8545",
      "https://bsc-testnet-rpc.publicnode.com",
+      "https://bsc-rpc-public.chainpulse.cc/testnet",
      "https://bsc-testnet.drpc.org"
    ]
  },
@@ -305,6 +309,7 @@
      "https://base-rpc.publicnode.com",
      "https://rpcfree.com/base-rpc",
      "https://rpc.baseazul.dev",
+      "https://rpc.satelink.network/rpc/base",
      "https://base.drpc.org"
    ]
  },
@@ -3366,6 +3371,16 @@
      "https://mova.drpc.org"
    ]
  },
+  "mova-mainnet-v2": {
+    "protocol": "eth",
+    "id": 61901,
+    "block_time_ms": 2000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://mova-mainnet-v2.drpc.org"
+    ]
+  },
  "mova-testnet": {
    "protocol": "eth",
    "id": 10323,
@@ -3635,6 +3650,7 @@
    "lagging_lag": 10,
    "syncing_lag": 20,
    "urls": [
+      "https://rpc.pharos.xyz",
      "https://pharos.drpc.org"
    ]
  },
@@ -3819,6 +3835,60 @@
      "https://neo-x-testnet.drpc.org"
    ]
  },
+  "stellar": {
+    "protocol": "stellar",
+    "block_time_ms": 5000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://stellar.drpc.org"
+    ]
+  },
+  "stellar-testnet": {
+    "protocol": "stellar",
+    "block_time_ms": 5000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://stellar-testnet.drpc.org"
+    ]
+  },
+  "celestia": {
+    "protocol": "celestia",
+    "block_time_ms": 6000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://celestia.drpc.org"
+    ]
+  },
+  "celestia-mocha": {
+    "protocol": "celestia",
+    "block_time_ms": 6000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://celestia-mocha.drpc.org"
+    ]
+  },
+  "sui": {
+    "protocol": "sui",
+    "block_time_ms": 250,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://sui.drpc.org"
+    ]
+  },
+  "sui-testnet": {
+    "protocol": "sui",
+    "block_time_ms": 250,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://sui-testnet.drpc.org"
+    ]
+  },
  "core-pigeon": {
    "id": 1114,
    "urls": [
--- a/tac/scripts/init.sh
+++ b/tac/scripts/init.sh
@@ -1,6 +1,8 @@
 #!/bin/sh
-# tacchaind entrypoint — TAC (Cosmos-SDK + embedded EVM). Genesis replay is impractical
-# (5 gov upgrades), so fresh nodes statesync near head via cometbft-common.sh.
+# tacchaind entrypoint — TAC (Cosmos-SDK + embedded EVM). EVM JSON-RPC :8545/:8546
+# is the dshackle/traefik upstream; CometBFT :26657 / gRPC :9090 / REST :1317 are NOT
+# publicly exposed. Genesis replay is impractical (5 gov upgrades), so fresh nodes
+# statesync near head via cometbft-common.sh.
 set -e
 . /usr/local/bin/cometbft-common.sh

@@ -12,6 +14,8 @@ STATESYNC_RPC="${STATESYNC_RPC:-https://tacchain-rpc.polkachu.com:443}"
 MIN_GAS="${MIN_GAS:-25000000000utac}"
 API="${API:-eth,net,web3,txpool,debug}"
 MONIKER="${MONIKER:-rpc-node}"
+# Pruning mode: set to "nothing" for archive nodes, "default" for pruned nodes.
+PRUNING="${PRUNING:-default}"

 ct_apk curl jq

@@ -24,7 +28,10 @@ else
  ct_log "already initialized, continuing"
 fi

-# Serve CometBFT RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+# Set pruning mode in app.toml (nothing for archive, default for pruned).
+sed -i -e "s/^pruning *=.*/pruning = \"$PRUNING\"/" "$CONFIG_DIR/app.toml"
+
+# Serve CometBFT RPC on all interfaces (internal only); default is 127.0.0.1.
 sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"

 ct_patch_p2p            "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-26656}"
@@ -41,4 +48,4 @@ sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.tom

 ct_seed_priv_validator_state "$HOME_DIR"

-exec tacchaind start --chain-id="$CHAIN_ID" --pruning=default --json-rpc.enable --home "$HOME_DIR" "$@"
+exec tacchaind start --chain-id="$CHAIN_ID" --json-rpc.enable --home "$HOME_DIR" "$@"
--- a/tac/tacchaind.Dockerfile
+++ b/tac/tacchaind.Dockerfile
@@ -1,38 +1,43 @@
-# tacchaind — source build mirroring upstream TacBuild/tacchain Dockerfile (v1.6.0).
+# tacchaind — binary download from GitHub releases (v1.6.0).
+# Downloads pre-built linux-amd64 binary and verifies against checksums.txt.
 ARG VERSION=v1.6.0

-FROM golang:1.23.8-alpine3.21 AS go-builder
-
-ARG VERSION
-
-RUN apk add --no-cache \
-    ca-certificates \
-    build-base \
-    git \
-    libusb-dev \
-    linux-headers \
-    eudev-dev
-
-WORKDIR /code
-RUN git clone https://github.com/TacBuild/tacchain.git /code && \
-    cd /code && \
-    git checkout "${VERSION}" && \
-    LEDGER_ENABLED=true make build
-
 FROM alpine:3.21

 RUN apk upgrade --no-cache && \
    apk add --no-cache \
    ca-certificates \
-    libusb
+    curl \
+    libusb \
+    sed
+
+# Download binary and checksums
+ARG VERSION
+RUN set -eux; \
+    BINARY_URL="https://github.com/TacBuild/tacchain/releases/download/${VERSION}/tacchaind-linux-amd64" && \
+    CHECKSUMS_URL="https://github.com/TacBuild/tacchain/releases/download/${VERSION}/checksums.txt" && \
+    curl -sL -o /tmp/tacchaind "${BINARY_URL}" && \
+    curl -sL -o /tmp/checksums.txt "${CHECKSUMS_URL}" && \
+    # Verify the binary against checksums.txt (sha256sum format: <hash>  <filename>)
+    cd /tmp && \
+    ExpectedHash=$(grep "tacchaind-linux-amd64$" checksums.txt | awk '{print $1}') && \
+    ActualHash=$(sha256sum tacchaind | awk '{print $1}') && \
+    if [ "$ExpectedHash" != "$ActualHash" ]; then \
+      echo "ERROR: checksum mismatch for tacchaind-linux-amd64" >&2; \
+      echo "  Expected: $ExpectedHash" >&2; \
+      echo "  Actual:   $ActualHash" >&2; \
+      exit 1; \
+    fi && \
+    chmod +x /tmp/tacchaind && \
+    mv /tmp/tacchaind /usr/bin/tacchaind && \
+    rm -f /tmp/checksums.txt

-COPY --from=go-builder /code/build/tacchaind /usr/bin/tacchaind
 COPY ./scripts/cometbft-common.sh /usr/local/bin/cometbft-common.sh
 COPY ./scripts/init.sh /usr/local/bin/init.sh
 RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/cometbft-common.sh

 WORKDIR /opt

-EXPOSE 1317 26656 26657
+EXPOSE 1317 26656 26657 8545 8546

 ENTRYPOINT ["init.sh"]
--- a/tac/tacchaind/tac-mainnet-tacchaind-archive.yml
+++ b/tac/tacchaind/tac-mainnet-tacchaind-archive.yml
@@ -0,0 +1,130 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:tac/tacchaind/tac-mainnet-tacchaind-archive.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/tac-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  tac-mainnet-archive:
+    build:
+      context: ./tac
+      dockerfile: tacchaind.Dockerfile
+      args:
+        VERSION: ${TAC_MAINNET_TACCHAIND_VERSION:-v1.6.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 11030:11030
+      - 11030:11030/udp
+    expose:
+      - 8545
+      - 8546
+      - 6065
+    environment:
+      - API=eth,net,web3,txpool,debug
+      - CHAIN_ID=tacchain_239-1
+      - GENESIS_URL=https://raw.githubusercontent.com/TacBuild/tacchain/refs/heads/main/networks/tacchain_239-1/genesis.json
+      - IP=${IP}
+      - MIN_GAS=25000000000utac
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=11030
+      - PERSISTENT_PEERS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
+      - PRUNING=nothing
+      - SEEDS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
+      - STATESYNC_RPC=https://tacchain-rpc.polkachu.com:443
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${TAC_MAINNET_TACCHAIND_ARCHIVE_DATA:-tac-mainnet-tacchaind-archive}:/root/.tacchaind/data
+      - /slowdisk:/slowdisk
+      - tac-mainnet-tacchaind-archive_config:/root/.tacchaind/config
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6065
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.tac-mainnet-tacchaind-archive-stripprefix.stripprefix.prefixes=/tac-mainnet-archive
+      - traefik.http.services.tac-mainnet-tacchaind-archive.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-archive.rule=Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`)}
+      - traefik.http.routers.tac-mainnet-tacchaind-archive.middlewares=tac-mainnet-tacchaind-archive-stripprefix, ipallowlist
+      - traefik.http.routers.tac-mainnet-tacchaind-archive.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.tac-mainnet-tacchaind-archive-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.tac-mainnet-tacchaind-archive-set-ws-path.replacepath.path=/websocket
+      - traefik.http.services.tac-mainnet-tacchaind-archive-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.tac-mainnet-tacchaind-archive-ws.service=tac-mainnet-tacchaind-archive-ws
+      - traefik.http.routers.tac-mainnet-tacchaind-archive.service=tac-mainnet-tacchaind-archive
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-archive-ws.rule=(Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.tac-mainnet-tacchaind-archive-ws.middlewares=tac-mainnet-tacchaind-archive-stripprefix, tac-mainnet-tacchaind-archive-set-ws-path, ipallowlist
+
+volumes:
+  tac-mainnet-tacchaind-archive:
+  tac-mainnet-tacchaind-archive_config:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: tac
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
+++ b/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
@@ -53,7 +53,8 @@ services:
      - 10283:10283
      - 10283:10283/udp
    expose:
-      - 26657
+      - 8545
+      - 8546
      - 6065
    environment:
      - API=eth,net,web3,txpool,debug
@@ -63,8 +64,9 @@ services:
      - MIN_GAS=25000000000utac
      - MONIKER=d${DOMAIN:-local}
      - P2P_PORT=10283
-      - PERSISTENT_PEERS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,186e207d2c95e94a44ff613770aa269dac876013@65.108.201.240:32156,c4410e765acead36188500ed75d5666aa209c93d@65.108.205.121:32156
-      - SEEDS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156
+      - PERSISTENT_PEERS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
+      - PRUNING=default
+      - SEEDS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
      - STATESYNC_RPC=https://tacchain-rpc.polkachu.com:443
    restart: unless-stopped
    stop_grace_period: 5m
@@ -81,7 +83,7 @@ services:
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
      - traefik.http.middlewares.tac-mainnet-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-mainnet
-      - traefik.http.services.tac-mainnet-tacchaind-pruned.loadbalancer.server.port=26657
+      - traefik.http.services.tac-mainnet-tacchaind-pruned.loadbalancer.server.port=8545
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.tls.certresolver=myresolver}
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`))}
@@ -90,7 +92,7 @@ services:
      - traefik.http.routers.tac-mainnet-tacchaind-pruned.priority=50   # gets any request that is not GET with UPGRADE header
      - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.priority=100   # answers GET requests first
      - traefik.http.middlewares.tac-mainnet-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
-      - traefik.http.services.tac-mainnet-tacchaind-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.services.tac-mainnet-tacchaind-pruned-ws.loadbalancer.server.port=8546
      - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.service=tac-mainnet-tacchaind-pruned-ws
      - traefik.http.routers.tac-mainnet-tacchaind-pruned.service=tac-mainnet-tacchaind-pruned
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.entrypoints=websecure}
--- a/tac/tacchaind/tac-spb-tacchaind-archive.yml
+++ b/tac/tacchaind/tac-spb-tacchaind-archive.yml
@@ -0,0 +1,129 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:tac/tacchaind/tac-spb-tacchaind-archive.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/tac-spb-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  tac-spb-archive:
+    build:
+      context: ./tac
+      dockerfile: tacchaind.Dockerfile
+      args:
+        VERSION: ${TAC_SPB_TACCHAIND_VERSION:-v1.6.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 11180:11180
+      - 11180:11180/udp
+    expose:
+      - 8545
+      - 8546
+      - 6065
+    environment:
+      - API=eth,net,web3,txpool,debug
+      - CHAIN_ID=tacchain_2391-1
+      - GENESIS_URL=https://raw.githubusercontent.com/TacBuild/tacchain/refs/heads/main/networks/tacchain_2391-1/genesis.json
+      - IP=${IP}
+      - MIN_GAS=25000000000utac
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=11180
+      - PERSISTENT_PEERS=9c32b3b959a2427bd2aa064f8c9a8efebdad4c23@206.217.210.164:45130,04a2152eed9f73dc44779387a870ea6480c41fe7@206.217.210.164:45140,5aaaf8140262d7416ac53abe4e0bd13b0f582168@23.92.177.41:45110,ddb3e8b8f4d051e914686302dafc2a73adf9b0d2@23.92.177.41:45120
+      - PRUNING=nothing
+      - STATESYNC_RPC=https://spb.tendermint.rpc.tac.build
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${TAC_SPB_TACCHAIND_ARCHIVE_DATA:-tac-spb-tacchaind-archive}:/root/.tacchaind/data
+      - /slowdisk:/slowdisk
+      - tac-spb-tacchaind-archive_config:/root/.tacchaind/config
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6065
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.tac-spb-tacchaind-archive-stripprefix.stripprefix.prefixes=/tac-spb-archive
+      - traefik.http.services.tac-spb-tacchaind-archive.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive.rule=Host(`$DOMAIN`) && (Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-archive.rule=Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`)}
+      - traefik.http.routers.tac-spb-tacchaind-archive.middlewares=tac-spb-tacchaind-archive-stripprefix, ipallowlist
+      - traefik.http.routers.tac-spb-tacchaind-archive.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.tac-spb-tacchaind-archive-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.tac-spb-tacchaind-archive-set-ws-path.replacepath.path=/websocket
+      - traefik.http.services.tac-spb-tacchaind-archive-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.tac-spb-tacchaind-archive-ws.service=tac-spb-tacchaind-archive-ws
+      - traefik.http.routers.tac-spb-tacchaind-archive.service=tac-spb-tacchaind-archive
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-archive-ws.rule=(Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.tac-spb-tacchaind-archive-ws.middlewares=tac-spb-tacchaind-archive-stripprefix, tac-spb-tacchaind-archive-set-ws-path, ipallowlist
+
+volumes:
+  tac-spb-tacchaind-archive:
+  tac-spb-tacchaind-archive_config:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: tac-spb
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/tac/tacchaind/tac-spb-tacchaind-pruned.yml
+++ b/tac/tacchaind/tac-spb-tacchaind-pruned.yml
@@ -53,7 +53,8 @@ services:
      - 14331:14331
      - 14331:14331/udp
    expose:
-      - 26657
+      - 8545
+      - 8546
      - 6065
    environment:
      - API=eth,net,web3,txpool,debug
@@ -64,6 +65,7 @@ services:
      - MONIKER=d${DOMAIN:-local}
      - P2P_PORT=14331
      - PERSISTENT_PEERS=9c32b3b959a2427bd2aa064f8c9a8efebdad4c23@206.217.210.164:45130,04a2152eed9f73dc44779387a870ea6480c41fe7@206.217.210.164:45140,5aaaf8140262d7416ac53abe4e0bd13b0f582168@23.92.177.41:45110,ddb3e8b8f4d051e914686302dafc2a73adf9b0d2@23.92.177.41:45120
+      - PRUNING=default
      - STATESYNC_RPC=https://spb.tendermint.rpc.tac.build
    restart: unless-stopped
    stop_grace_period: 5m
@@ -80,7 +82,7 @@ services:
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
      - traefik.http.middlewares.tac-spb-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-spb
-      - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=26657
+      - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=8545
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.tls.certresolver=myresolver}
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`))}
@@ -89,7 +91,7 @@ services:
      - traefik.http.routers.tac-spb-tacchaind-pruned.priority=50   # gets any request that is not GET with UPGRADE header
      - traefik.http.routers.tac-spb-tacchaind-pruned-ws.priority=100   # answers GET requests first
      - traefik.http.middlewares.tac-spb-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
-      - traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=8546
      - traefik.http.routers.tac-spb-tacchaind-pruned-ws.service=tac-spb-tacchaind-pruned-ws
      - traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure}
--- a/zero-gravity/geth/zero-gravity-aristotle-geth-pruned-pebble-path.yml
+++ b/zero-gravity/geth/zero-gravity-aristotle-geth-pruned-pebble-path.yml
@@ -35,7 +35,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.4}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.6}
        ZERO_GRAVITY_CHAIN_SPEC: aristotle
    sysctls:
      # TCP Performance
@@ -118,7 +118,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.4}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.6}
        ZERO_GRAVITY_CHAIN_SPEC: aristotle
    ports:
      - 19914:19914
--- a/zero-gravity/geth/zero-gravity-galileo-geth-pruned-pebble-path.yml
+++ b/zero-gravity/geth/zero-gravity-galileo-geth-pruned-pebble-path.yml
@@ -35,7 +35,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.8}
        ZERO_GRAVITY_CHAIN_SPEC: galileo
    sysctls:
      # TCP Performance
@@ -62,7 +62,7 @@ services:
      - CHAIN_NAME=galileo
    entrypoint: [/usr/local/bin/init.sh, geth]
    command:
-      - --bootnodes=enode://de7b86d8ac452b1413983049c20eafa2ea0851a3219c2cc12649b971c1677bd83fe24c5331e078471e52a94d95e8cde84cb9d866574fec957124e57ac6056699@8.218.88.60:30303
+      - --bootnodes=enode://4c94b9ab893ee17f58505b48b53d6c02d52bd5567e5fc6c028a29ad25ce1d553286a7fe3a6c051ba18c466b196762ab0e92695d6abbaf7f70afcca2e165bca8c@34.82.252.10:30303
      - --config /0g/geth-config.toml
      - --datadir=/root/.ethereum
      - --db.engine=pebble
@@ -118,7 +118,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.8}
        ZERO_GRAVITY_CHAIN_SPEC: galileo
    ports:
      - 16172:16172
@@ -140,7 +140,7 @@ services:
      - --chaincfg.node-api.logging
      - --home=/root/.0g
      - --p2p.external_address=${IP}:16172
-      - --p2p.seeds=${ZERO_GRAVITY_GALILEO_ZEROG_SEEDS:-85a9b9a1b7fa0969704db2bc37f7c100855a75d9@8.218.88.60:26656}
+      - --p2p.seeds=${ZERO_GRAVITY_GALILEO_ZEROG_SEEDS:-e0750abc061d276894a593c7b671913c14aa4ecc@34.82.252.10:26656}
      - --pruning=default
      - --rpc.laddr=tcp://0.0.0.0:16172
    restart: unless-stopped
--- a/zero-gravity/scripts/init.sh
+++ b/zero-gravity/scripts/init.sh
@@ -61,23 +61,41 @@ env

 # seems to be the same for all the 0g chains

-if [ ! -f "$DATA_DIR/priv_validator_state.json" ]; then
-    echo "priv_validator_state.json not found in $HOME_DIR. Proceeding with initialization steps..."
+# $DATA_DIR and $CONFIG_DIR are SEPARATE docker volumes (<node>_zerog and <node>_config),
+# so the presence of a file in one says nothing about the other. Guard on everything
+# 0gchaind actually needs to boot, and write the copies so the LAST file written is the
+# one that would make a re-run skip.
+#
+# The previous version guarded solely on $DATA_DIR/priv_validator_state.json and copied it
+# BEFORE the two key files. An init interrupted between those copies therefore left the
+# data volume with the guard file and the config volume without the keys, so every later
+# start took the "Already initialized" branch, copied nothing, and 0gchaind panicked:
+#
+#   panic: error calling provider ProvideBlsSigner (node-core/components/signer.go:46):
+#          key file does not exist at path: /root/.0g/config/priv_validator_key.json
+#
+# That state is unrecoverable by restarting - the node wedges permanently. Hit on
+# aristotle @ rpc-de-32 on 2026-08-12 after repeated build failures interrupted its init.
+if [ ! -f "$CONFIG_DIR/priv_validator_key.json" ] || \
+   [ ! -f "$CONFIG_DIR/node_key.json" ] || \
+   [ ! -f "$DATA_DIR/priv_validator_state.json" ]; then
+    echo "0g: node identity incomplete (config keys and/or priv_validator_state.json). Initializing..."
    TMP_DIR=$(mktemp -d)
    # You can add any additional initialization logic here if needed
    if /0g/bin/0gchaind init ${MONIKER} --chaincfg.chain-spec ${CHAIN_SPEC} --home $TMP_DIR; then
        cp -r /0g/0g-home/0gchaind-home/config/* $CONFIG_DIR
-        cp $TMP_DIR/data/priv_validator_state.json $DATA_DIR
+        # Keys first, guard file last: if this is interrupted the next start re-runs
+        # initialization instead of latching into the wedged state described above.
        cp $TMP_DIR/config/node_key.json $CONFIG_DIR
        cp $TMP_DIR/config/priv_validator_key.json $CONFIG_DIR
+        cp $TMP_DIR/data/priv_validator_state.json $DATA_DIR
    else
        echo "Already initialized, continuing!" >&2
    fi
    rm -rf $TMP_DIR # delete tmp dir

 else
-    echo "priv_validator_state.json found in $HOME_DIR. Continuing!" >&2
-    echo "Already initialized, continuing!" >&2
+    echo "0g: node identity complete (config keys + priv_validator_state.json). Continuing!" >&2
 fi

 exec /0g/bin/0gchaind $@
--- a/zero-gravity/zerog.Dockerfile
+++ b/zero-gravity/zerog.Dockerfile
@@ -22,20 +22,23 @@ ARG ZERO_GRAVITY_CHAIN_SPEC
 # curl uses -f (fail on HTTP error). Without it a 404 HTML body is written into the .tar.gz
 # and the build dies several layers later at "tar: not in gzip format" -- an error that
 # points nowhere near the real cause. That has cost three separate misdiagnoses.
+#
+# Strip leading 'v' from version if present, to avoid doubled-v (e.g., vv1.0.6 -> v1.0.6)
 RUN set -eu; \
-    ASSET="${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz"; \
+    VERSION="${ZERO_GRAVITY_VERSION#v}"; \
+    ASSET="${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION}.tar.gz"; \
    if [ "${ZERO_GRAVITY_CHAIN_SPEC}" = "aristotle" ]; then \
        REPO="0gfoundation/0gchain-Aristotle"; \
-        TAGS="${ZERO_GRAVITY_VERSION} v${ZERO_GRAVITY_VERSION} ${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}"; \
+        TAGS="${VERSION} v${VERSION} ${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION}"; \
    else \
        REPO="0gfoundation/0gchain-NG"; \
-        TAGS="v${ZERO_GRAVITY_VERSION} ${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION} ${ZERO_GRAVITY_VERSION}"; \
+        TAGS="v${VERSION} ${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION} ${VERSION}"; \
    fi; \
    for TAG in ${TAGS}; do \
        URL="https://github.com/${REPO}/releases/download/${TAG}/${ASSET}"; \
        echo "0g: trying tag '${TAG}' -> ${URL}"; \
        if curl -fsSL "${URL}" -o "/tmp/${ASSET}"; then \
-            echo "0g: resolved ${ZERO_GRAVITY_CHAIN_SPEC} ${ZERO_GRAVITY_VERSION} from tag '${TAG}'"; \
+            echo "0g: resolved ${ZERO_GRAVITY_CHAIN_SPEC} ${VERSION} from tag '${TAG}'"; \
            break; \
        fi; \
        rm -f "/tmp/${ASSET}"; \
@@ -44,21 +47,57 @@ RUN set -eu; \
        echo "0g: FATAL - no release asset '${ASSET}' found in ${REPO} under any of: ${TAGS}" >&2; \
        echo "0g: aristotle and galileo are SEPARATE repos on SEPARATE version lines" >&2; \
        echo "0g: aristotle = 0gchain-Aristotle (1.0.x), galileo = 0gchain-NG (3.0.x)" >&2; \
-        echo "0g: check that version '${ZERO_GRAVITY_VERSION}' exists for '${ZERO_GRAVITY_CHAIN_SPEC}'" >&2; \
+        echo "0g: check that version '${VERSION}' exists for '${ZERO_GRAVITY_CHAIN_SPEC}'" >&2; \
        exit 1; \
    fi

-RUN tar -xzf /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz -C /tmp
-RUN if [ "${ZERO_GRAVITY_CHAIN_SPEC}" = "galileo" ]; then \
-        mv /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}/rpc /0g; \
+# Extract by DETECTING the layout rather than assuming one per chain. 0G has shipped
+# three shapes so far and changed between them without notice:
+#
+#   galileo <= 3.0.3  <root>/{rpc,validator,archive,seed}/bin/ + configs   (168 MB)
+#                     -> binaries duplicated inside every profile dir
+#   galileo >= 3.0.8  <root>/bin/  shared, + <root>/{rpc,...}/ configs      (69 MB)
+#                     -> binaries DEDUPLICATED to the tarball root; rpc/ is configs-only
+#   aristotle 1.0.x   <root>/bin/ + configs, no profile dirs at all
+#
+# So "does <root>/rpc exist" is NOT sufficient: 3.0.8 still has rpc/, it just no longer
+# holds bin/. Take configs from the profile dir when present, then top the binaries up
+# from the shared root bin/ if the profile dir didn't supply them.
+#
+# The old code hardcoded "galileo -> mv <root>/rpc /0g", so 3.0.8 yielded configs but no
+# binaries and the build died two layers later at
+# `chmod: cannot access '/0g/bin/0gchaind'` — an error naming neither the chain, the
+# version, nor the layout. Assert on the binaries here so the NEXT upstream reshuffle
+# reports itself at the point of failure instead.
+RUN set -eu; \
+    VERSION="${ZERO_GRAVITY_VERSION#v}"; \
+    SRC="/tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION}"; \
+    tar -xzf "${SRC}.tar.gz" -C /tmp; \
+    mkdir -p /0g; \
+    if [ -d "${SRC}/rpc" ]; then \
+        echo "0g: profile dir found -> ${SRC}/rpc"; \
+        cp -a "${SRC}/rpc/." /0g/; \
    else \
-        mkdir -p /0g && \
-        cp -a /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}/* /0g/ 2>/dev/null || true; \
-        cp -a /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}/.[^.]* /0g/ 2>/dev/null || true; \
-        rm -rf /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}; \
-    fi
-
-RUN chmod +x /0g/bin/0gchaind
-RUN chmod +x /0g/bin/geth
+        echo "0g: no profile dir -> using tarball root ${SRC}"; \
+        cp -a "${SRC}/." /0g/; \
+    fi; \
+    if [ ! -f /0g/bin/0gchaind ] && [ -d "${SRC}/bin" ]; then \
+        echo "0g: binaries not in the profile dir -> topping up from ${SRC}/bin"; \
+        cp -a "${SRC}/bin" /0g/; \
+    fi; \
+    rm -rf "${SRC}"; \
+    missing=""; \
+    for b in 0gchaind geth; do \
+        [ -f "/0g/bin/${b}" ] || missing="${missing} bin/${b}"; \
+    done; \
+    if [ -n "${missing}" ]; then \
+        echo "0g: FATAL - missing after extraction:${missing}" >&2; \
+        echo "0g: ${ZERO_GRAVITY_CHAIN_SPEC} v${VERSION} tarball layout not recognised." >&2; \
+        echo "0g: known layouts are '<root>/rpc/bin/' (per-profile) and '<root>/bin/' (flat)." >&2; \
+        echo "0g: contents of /0g were:" >&2; \
+        ls -la /0g >&2 || true; \
+        exit 1; \
+    fi; \
+    chmod +x /0g/bin/0gchaind /0g/bin/geth

 ENTRYPOINT [ "init.sh" ]
Author	SHA1	Message	Date
claude	206fc78735	Merge branch 'main' into issue-2601	2026-08-26 02:42:30 +00:00
claude	20511cd247	Merge pull request 'abcore mainnet: add geth-fork chain-id 36888' (#56 ) from issue-3079 into main	2026-08-26 02:35:13 +00:00
claude	42bc7f504e	avalanche fuji: enable C-chain state-sync on pruned profile (mirrors #48 for mainnet; full block execution was 55h+ ETA on the de-22 prune-cycle test node)	2026-08-26 01:50:29 +00:00
claude	fed15a5484	Merge pull request 'avalanche: enable state-sync on C-chain pruned profile' (#48 ) from issue-2307 into main	2026-08-26 01:49:58 +00:00
Claude Agent	ba44def37b	fix zero-gravity doubled-v: add VERSION normalization to extraction RUN step The previous commit (`7cbd0532`) added VERSION normalization to the DOWNLOAD RUN step but forgot to add it to the EXTRACTION RUN step. Each Dockerfile RUN is a fresh shell, so the extraction step fails with 'VERSION: unbound variable' when it tries to use ${VERSION} in the SRC variable. Fix: add VERSION="${ZERO_GRAVITY_VERSION#v}"; to the extraction RUN step (line 73) so it defines VERSION before using it. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-25 09:14:25 +00:00
Claude Agent	0071f41e4c	tac: update mainnet peer list with verified live peers (2026-08-25)	2026-08-25 05:35:26 +00:00
Claude Agent	7cbd053236	fix zero-gravity doubled-v bug in Dockerfile asset names Remove leading 'v' from ZERO_GRAVITY_VERSION values in context.yml (1.0.6, 3.0.8 instead of v1.0.6, v3.0.8) and add defensive stripping in zerog.Dockerfile (VERSION=${ZERO_GRAVITY_VERSION#v}) to prevent asset names like aristotle-vv1.0.6.tar.gz / galileo-vv3.0.8.tar.gz. The asset filename is always <spec>-v<version>.tar.gz, and the Dockerfile was adding a 'v' prefix to versions that already had one. Verified URLs resolve: - aristotle: https://github.com/0gfoundation/0gchain-Aristotle/releases/download/v1.0.6/aristotle-v1.0.6.tar.gz - galileo: https://github.com/0gfoundation/0gchain-NG/releases/download/v3.0.8/galileo-v3.0.8.tar.gz Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-25 04:36:36 +00:00
Claude Agent	6979290310	tac: fix malformed sed address ranges in init.sh Fix four sed address ranges that were missing closing slash before comma: - /^\[rpc\],/^\[/ -> /^\[rpc\]/,/^\[/ - /^\[json-rpc\],/^\[/ -> /^\[json-rpc\]/,/^\[/ (3 occurrences) The malformed patterns caused sed to crash-loop the TAC container. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-25 04:08:06 +00:00
Claude Agent	0e6c2a3bc7	zero-gravity: bump zerog node versions aristotle 1.0.6->v1.0.6, galileo 3.0.8->v3.0.8 Match upstream release tags: aristotle v1.0.6 (0gchain-Aristotle) and galileo v3.0.8 (0gchain-NG) both carry v-prefix in their release tags. Required for 0g hardfork; old clients stuck-syncing. Supersedes stale unmergeable PR ethereum-rpc-docker#62. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-25 04:03:35 +00:00
Mistral Vibe	7cab80da70	avalanche: bump fuji avalanchego version to v1.15.0-fuji Fuji validators run the v1.15.0-fuji prerelease and refuse v1.14.2 peers ('peer attempting to connect with newer version'), so fuji nodes cannot bootstrap on the stable version. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-25 03:51:42 +00:00
Claude Agent	fc9f82ec48	tac: fix crash-loop by installing GNU sed for sed command compatibility The TAC mainnet container was crash-looping with 'sed: unsupported command ^' because busybox sed in Alpine does not support the GNU sed extensions used in the cometbft-common.sh scripts (address ranges with ^ anchor and {} grouping). Adding the 'sed' package installs GNU sed which supports these features. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-25 03:40:27 +00:00
Claude Agent	b93ad15f52	avalanche: add mainnet offline-prune config matching fuji pattern Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-24 05:31:21 +00:00
Claude Agent	cff52429bd	tac: add TAC mainnet archive profile with EVM JSON-RPC upstream - Add archive profile (pruning=nothing) for tacchaind - Change client_rpc_port from 26657 (CometBFT) to 8545 (EVM JSON-RPC) - Update Dockerfile to download pre-built binary from GitHub releases v1.6.0 - Verify binary against checksums.txt - Update init.sh to support PRUNING env var (nothing for archive, default for pruned) - Update peers from NETWORKS.md - Add archive snapshot URL note - Traefik routes to EVM JSON-RPC port 8545 for both pruned and archive Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-23 10:55:39 +00:00
Claude Agent	434717b194	deploy: regenerate compose from vibe-node main a86fd1cc5923	2026-08-20 17:16:40 +00:00
Claude Agent	25b764684d	deploy: regenerate compose from vibe-node main 57aeb4d4424f	2026-08-20 04:01:57 +00:00
Claude Agent	b92fb0ecb3	deploy: regenerate compose from vibe-node main a1ebdcbaffd4	2026-08-13 08:08:13 +00:00
Claude Agent	92cdb31d17	zero-gravity: init guard must check the CONFIG volume, not a data-volume proxy aristotle @ rpc-de-32 crash-looped after its build was fixed: priv_validator_state.json found in /root/.0g. Continuing! Already initialized, continuing! panic: ProvideBlsSigner (node-core/components/signer.go:46): key file does not exist at path: /root/.0g/config/priv_validator_key.json $DATA_DIR and $CONFIG_DIR are SEPARATE docker volumes (<node>_zerog and <node>_config), but the guard tested only $DATA_DIR/priv_validator_state.json — inferring the state of the config volume from a file on the data volume. Worse, the copy order wrote that guard file BEFORE the two key files, so an init interrupted between them left the data volume with the guard and the config volume without the keys. Every later start then took the 'Already initialized' branch, copied nothing, and panicked. Unrecoverable by restarting: the node wedges permanently. aristotle got there via the repeated build failures earlier today. Fix, two parts: - guard on everything 0gchaind needs to boot (both config keys AND the data state file), not one proxy file on the wrong volume; - write the keys FIRST and the guard file LAST, so an interrupted init re-runs on the next start instead of latching into the wedged state. Tested locally against the real 0gchaind binary (aristotle v1.0.6), sandboxed HOME: scenario before after fresh volumes keys created keys created (no regression) wedged (state, no keys) keys MISSING keys created (unwedges) partial (state+node_key) keys MISSING keys created healthy (all present) no re-init no re-init, and a SENTINEL written into priv_validator_key.json survives -> never clobbers an initialized node The 'wedged' row reproduces aristotle's production failure exactly. Note this regenerates node identity on an affected node (node_key.json, priv_validator_key.json). These are RPC nodes that never sign, so a fresh identity is harmless; chain data on the _zerog volume is untouched. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-12 19:33:48 +00:00
Claude Agent	4a060bee0d	deploy: regenerate compose from vibe-node main 3c848087f5c8	2026-08-12 17:37:46 +00:00
Claude Agent	4db13b2fc4	deploy: regenerate compose from vibe-node main 0415567d141c	2026-08-12 16:53:00 +00:00
Claude Agent	6df9f0f17a	zero-gravity: detect tarball layout; galileo 3.0.8 moved binaries to a shared root bin/ Fixes the de-32 build break introduced by vibe-node #2912 (galileo 3.0.3 -> 3.0.8, merged as bc4cecf). Job ad580587: #16 chmod: cannot access '/0g/bin/0gchaind': No such file or directory The Dockerfile hardcoded 'galileo -> mv <root>/rpc /0g'. That held for 3.0.3, where every profile dir carried its own copy of the binaries. 3.0.8 DEDUPLICATED them into a shared <root>/bin/ (168 MB -> 69 MB), leaving rpc/ as configs-only — so the move produced configs and no binaries, and the build died two layers later on a chmod. Note 'does <root>/rpc exist' is not a sufficient test: 3.0.8 still ships rpc/, it just no longer holds bin/. Verified layouts: galileo 3.0.3 <root>/{rpc,validator,archive,seed}/bin/ + configs galileo 3.0.8 <root>/bin/ shared + <root>/{rpc,...}/ configs aristotle 1.0.6 <root>/bin/ + configs, no profile dirs So: take configs from the profile dir when present, then top the binaries up from the shared root bin/ if the profile dir did not supply them. Also asserts both binaries exist immediately after extraction, naming the chain, the version and the known layouts — so the next upstream reshuffle reports itself at the point of failure rather than as an anonymous chmod error. Verified against the real artifacts — all three now yield an identical /0g (bin/0gchaind 76M, bin/geth 46M, geth-config.toml, geth-genesis.json, kzg-trusted-setup.json, 0g-home/, rollback_cl.sh), and a synthetic unknown layout exits 1 with the diagnostic instead of reaching chmod. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-12 11:09:51 +00:00
Claude Agent	561ff43828	deploy: regenerate compose from vibe-node main bc4cecf1a74f	2026-08-12 08:38:04 +00:00
Claude Agent	477e969e54	abcore: add mainnet genesis.json and config.toml for chain-id 36888	2026-08-09 00:19:29 +00:00
Claude Agent	b0efb236bf	Add abcore mainnet genesis.json (chain-id 36888, Newton)	2026-08-08 22:47:51 +00:00
Claude Agent	bfe5bdd97d	haqq: add required DTEAM and allnodes.me seeds to bootstrap config	2026-08-04 12:04:21 +00:00
Claude Agent	223c694085	haqq: fix bootstrap config - correct addrbook filename, add Polkachu seeds, persistent peers, auto-refresh from Polkachu when empty	2026-08-04 10:28:18 +00:00
Claude Agent	7a3003cb63	avalanche: enable state-sync on C-chain pruned profile	2026-08-01 00:17:37 +00:00