Merge pull request 'show-status: exit code was always 0 — three compounding bugs' (#66) from fix-show-status-exit-code into main

Operator ruling: NEVER force a reconnect on a routine reload/rpc-update run.
Only upstream REMOVALS or new disabled-method ADDITIONS require a gateway
reconnect to be seen by dRPC gateways.

Implement snapshot-based comparison:
- Before SIGHUP, read current advertised set (upstream IDs + disabled methods)
- Compare against previous snapshot (if exists)
- Drop established gRPC connections ONLY IF:
  * an upstream ID disappeared, OR
  * a new disabled-method entry appeared
- Pure additions or no change: reload only, no drop
- First run with no prior snapshot: do NOT drop, just write snapshot
- Always rewrite snapshot after successful reload
- All operations best-effort (failures never fail the script)

Live-measured: upstream/method additions propagate over existing connection
in ~16s (no reconnect needed).

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

abcore/abcore.Dockerfile

@@ -0,0 +1,25 @@
+FROM rockylinux:9
+
+COPY ./scripts/init.sh /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh
+
+ARG ABCORE_MAINNET_GETH_VERSION
+
+# Download and verify the geth binary from GitHub releases
+RUN set -eu; \
+    VERSION="${ABCORE_MAINNET_GETH_VERSION}"; \
+    BINARY="geth-${VERSION}"; \
+    URL="https://github.com/ABFoundationGlobal/abcore/releases/download/${VERSION}/${BINARY}"; \
+    SHA256_URL="${URL}.sha256"; \
+    echo "abcore: downloading geth binary from ${URL}"; \
+    curl -fsSL "${URL}" -o "/tmp/${BINARY}"; \
+    echo "abcore: downloading sha256 checksum from ${SHA256_URL}"; \
+    curl -fsSL "${SHA256_URL}" -o "/tmp/${BINARY}.sha256"; \
+    cd /tmp; \
+    sha256sum -c "${BINARY}.sha256" || (echo "abcore: SHA256 verification failed for ${BINARY}" >&2 && exit 1); \
+    chmod +x "${BINARY}"; \
+    mkdir -p /abcore/bin; \
+    mv "${BINARY}" /abcore/bin/geth; \
+    rm -f "${BINARY}" "${BINARY}.sha256"
+
+ENTRYPOINT [ "init.sh" ]

abcore/geth/abcore-mainnet-geth-pruned-pebble-hash.yml

@@ -0,0 +1,151 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+# ABFoundationGlobal/abcore geth-fork client
+# Distributed as release binaries from https://github.com/ABFoundationGlobal/abcore/releases
+# Version: v1.13.15-abcore-1.2
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abcore/geth/abcore-mainnet-geth-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abcore-mainnet-geth \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abcore-mainnet-geth:
+    build:
+      context: ./abcore
+      dockerfile: abcore.Dockerfile
+      args:
+        ABCORE_MAINNET_GETH_VERSION: ${ABCORE_MAINNET_GETH_VERSION:-v1.13.15-abcore-1.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13110:13110
+      - 13110:13110/udp
+    expose:
+      - 8545
+      - 6060
+    environment:
+      - CHAIN_NAME=mainnet
+    entrypoint: [/usr/local/bin/init.sh]
+    command:
+      - --config=/config/config.toml
+      - --datadir=/root/.ethereum
+      - --db.engine=pebble
+      - --gcmode=full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,debug,admin,txpool,engine
+      - --http.port=8545
+      - --http.vhosts=*
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --networkid=36888
+      - --port=13110
+      - --rpc.gascap=600000000
+      - --rpc.txfeecap=0
+      - --syncmode=full
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=eth,net,web3,debug,admin,txpool,engine
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABCORE_MAINNET_GETH_PRUNED_PEBBLE_HASH_DATA:-abcore-mainnet-geth-pruned-pebble-hash}:/root/.ethereum
+      - ./abcore/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.abcore-mainnet-geth-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/abcore-mainnet-geth
+      - traefik.http.services.abcore-mainnet-geth-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/abcore-mainnet-geth`) || Path(`/abcore-mainnet-geth/`))}
+      - ${NO_SSL:+traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.rule=Path(`/abcore-mainnet-geth`) || Path(`/abcore-mainnet-geth/`)}
+      - traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.middlewares=abcore-mainnet-geth-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  abcore-mainnet-geth-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abcore
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

abcore/mainnet/config.toml

@@ -0,0 +1,33 @@
+[Eth]
+NetworkId = 36888
+SyncMode = "snap"
+NoPruning = false
+NoPrefetch = false
+
+[Eth.Miner]
+GasFloor = 0
+GasCeil = 63000000
+GasPrice = 50000000000000
+Recommit = 2000000000
+NewPayloadTimeout = 2000000000
+
+[Node]
+DataDir = "/root/.ethereum"
+HTTPHost = "0.0.0.0"
+HTTPPort = 8545
+HTTPVirtualHosts = ["*"]
+HTTPModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
+WSHost = "0.0.0.0"
+WSPort = 8546
+WSModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
+WSOrigins = ["*"]
+
+[Node.P2P]
+MaxPeers = 50
+NoDiscovery = false
+DiscoveryV4 = true
+ListenAddr = ":33333"
+
+[Metrics]
+HTTP = "127.0.0.1"
+Port = 6060

abcore/mainnet/genesis.json

@@ -0,0 +1,28 @@
+{
+  "config": {
+    "chainId": 36888,
+    "homesteadBlock": 0,
+    "eip150Block": 0,
+    "eip155Block": 0,
+    "eip158Block": 0,
+    "byzantiumBlock": 0,
+    "constantinopleBlock": 0,
+    "petersburgBlock": 0,
+    "istanbulBlock": 0,
+    "muirGlacierBlock": 0,
+    "berlinBlock": 0,
+    "clique": {
+      "period": 3,
+      "epoch": 30000
+    }
+  },
+  "timestamp": "0x67fda368",
+  "difficulty": "1",
+  "gasLimit": "63000000",
+  "extradata": "0x0000000000000000000000000000000000000000000000000000000000000000E9B95948d28EF808a9184d5fC98346EF3e56839c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+  "alloc": {
+    "da8B88027Ac27532E1525DD67974c2377b450A08": {
+      "balance": "100000000000000000000000000000"
+    }
+  }
+}

abcore/scripts/init.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+set -e  # Exit on failure
+
+GETH_DATA_DIR="/root/.ethereum"
+CONFIG_FILE="/config/config.toml"
+GENESIS_FILE="/config/genesis.json"
+
+# Initialize geth from genesis if data directory is empty
+if [ -z "$(ls -A "$GETH_DATA_DIR")" ]; then
+    echo "abcore: data directory is empty, initializing from genesis..."
+    if [ -f "$GENESIS_FILE" ]; then
+        /abcore/bin/geth init --datadir "$GETH_DATA_DIR" --db.engine=pebble "$GENESIS_FILE"
+    else
+        echo "abcore: genesis file not found at $GENESIS_FILE" >&2
+        exit 1
+    fi
+else
+    echo "abcore: data directory not empty, continuing..."
+fi
+
+exec /abcore/bin/geth --config "$CONFIG_FILE" --datadir "$GETH_DATA_DIR" "$@"

arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml

@@ -116,7 +116,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: everclear-sepolia
+    chain:
     method-groups:
       enabled:
         - debug

arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml

@@ -117,7 +117,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: everclear-sepolia
+    chain:
     method-groups:
       enabled:
         - debug

arc/reth/arc-mainnet-reth-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-mainnet-archive-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -45,7 +45,7 @@ services:
   arc-mainnet-archive-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-mainnet-archive-consensus-init:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-mainnet-archive:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -119,7 +119,7 @@ services:
     shm_size: 2gb
 
   arc-mainnet-archive-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     expose:
       - 31000
@@ -160,6 +160,9 @@ volumes:
   arc-mainnet-reth-archive-trace-execution:
   arc-mainnet-reth-archive-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-mainnet-reth-archive-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-mainnet-reth-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-mainnet-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -45,7 +45,7 @@ services:
   arc-mainnet-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-mainnet-consensus-init:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-mainnet:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -120,7 +120,7 @@ services:
     shm_size: 2gb
 
   arc-mainnet-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     expose:
       - 31000
@@ -161,6 +161,9 @@ volumes:
   arc-mainnet-reth-pruned-trace-execution:
   arc-mainnet-reth-pruned-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-mainnet-reth-pruned-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-archive-trace.yml

@@ -45,7 +45,7 @@ services:
   arc-testnet-archive-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-testnet-archive-consensus-init:
@@ -160,6 +160,9 @@ volumes:
   arc-testnet-reth-archive-trace-execution:
   arc-testnet-reth-archive-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-archive-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-pruned-trace.yml

@@ -45,7 +45,7 @@ services:
   arc-testnet-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-testnet-consensus-init:
@@ -161,6 +161,9 @@ volumes:
   arc-testnet-reth-pruned-trace-execution:
   arc-testnet-reth-pruned-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-pruned.yml

@@ -45,7 +45,7 @@ services:
   arc-testnet-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-testnet-consensus-init:
@@ -161,6 +161,9 @@ volumes:
   arc-testnet-reth-pruned-execution:
   arc-testnet-reth-pruned-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

avalanche/fuji/pruned/C/config.json

@@ -1,4 +1,6 @@
 {
     "rpc-gas-cap": 2500000000,
-    "eth-rpc-gas-limit": 2500000000
+    "eth-rpc-gas-limit": 2500000000,
+    "state-sync-enabled": true,
+    "state-sync-skip-resume": true
 }

avalanche/go/avalanche-fuji-go-archive-leveldb.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji-archive:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
         - debug

avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
         - debug

avalanche/go/avalanche-fuji-go-pruned-leveldb.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
         - debug

avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
         - debug

avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
         - debug

avalanche/mainnet/prune/C/config.json

@@ -1,23 +1,6 @@
 {
-    "snowman-api-enabled": false,
-    "coreth-admin-api-enabled": false,
-    "net-api-enabled": true,
     "rpc-gas-cap": 2500000000,
-    "rpc-tx-fee-cap": 100,
     "eth-rpc-gas-limit": 2500000000,
-    "eth-api-enabled": true,
-    "personal-api-enabled": false,
-    "tx-pool-api-enabled": false,
-    "debug-api-enabled": false,
-    "web3-api-enabled": true,
-    "local-txs-enabled": false,
-    "pruning-enabled": true,
-    "api-max-duration": 0,
-    "api-max-blocks-per-request": 0,
-    "allow-unfinalized-queries": false,
-    "log-level": "info",
-    "state-sync-enabled": false,
-    "state-sync-skip-resume": true,
     "offline-pruning-enabled": true,
     "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
 }

avalanche/mainnet/pruned/C/config.json

@@ -16,6 +16,6 @@
     "api-max-blocks-per-request": 0,
     "allow-unfinalized-queries": false,
     "log-level": "info",
-    "state-sync-enabled": false,
+    "state-sync-enabled": true,
     "state-sync-skip-resume": true
 }

backup-node.sh

@@ -157,8 +157,15 @@ for key in $keys; do
     folder_size_gb=$(printf "%.0f" "$folder_size")
 
     if (( folder_size_gb < 1 )) && [[ "$FORCE_SMALL" != true ]]; then
-	echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
-	exit 1
+	# The torn-backup floor applies to the MAIN data volume only (key == compose
+	# basename). Sidecar volumes (eigenda-proxy, configs, ...) are legitimately
+	# tiny — a 0G sidecar aborting the whole backup left no manifest and blocked
+	# the refresh lane on every ronin bench-retire (4 cycles, 2026-07).
+	if [[ "$key" == "$(basename "$compose_name")" ]]; then
+	    echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
+	    exit 1
+	fi
+	echo "NOTE: sidecar volume rpc_$key is ${folder_size_gb}G — allowing small backup (floor guards the main data volume only)"
     fi
     
     timestamp=$(date +'%Y-%m-%d-%H-%M-%S')

berachain/reth/berachain-bartio-reth-archive-trace.yml

@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bartio-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-bartio-reth-pruned-trace.yml

@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bartio-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-bepolia-reth-archive-trace.yml

@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bepolia-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.3-rc.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-bepolia-reth-pruned-trace.yml

@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bepolia-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.3-rc.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-mainnet-reth-archive-trace.yml

@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-mainnet-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.2}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-mainnet-reth-pruned-trace.yml

@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-mainnet-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.2}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

clone-backup.sh

@@ -298,6 +298,7 @@ cleanup_all_ports() {
 # Transfer backup file using screen method with better error handling
 transfer_backup() {
     local key=$1
+    local compose_file=$2
     local volume_name="rpc_$key"
     
     # Find the newest restorable backup file (skip near-empty artifacts)
@@ -309,6 +310,13 @@ transfer_backup() {
             echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
             return 2
         fi
+        # Check if this volume is optional or ephemeral - if so, skip gracefully
+        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
+                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
+                return 2
+            fi
+        fi
         echo "Warning: No restorable backup file found for $volume_name, skipping"
         return 1
     fi
@@ -502,6 +510,7 @@ LISTENER
 # Fallback: Direct SSH pipe
 transfer_backup_ssh() {
     local key=$1
+    local compose_file=$2
     local volume_name="rpc_$key"
     
     # Find the newest restorable backup file (skip near-empty artifacts)
@@ -513,6 +522,13 @@ transfer_backup_ssh() {
             echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
             return 2
         fi
+        # Check if this volume is optional or ephemeral - if so, skip gracefully
+        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
+                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
+                return 2
+            fi
+        fi
         echo "Warning: No restorable backup file found for $volume_name, skipping"
         return 1
     fi
@@ -642,7 +658,7 @@ main() {
 
     for key in $keys; do
         # Try nc method first
-        transfer_backup "$key"
+        transfer_backup "$key" "$dir/$1.yml"
         rc=$?
 
         if [[ $rc -eq 2 ]]; then
@@ -650,7 +666,7 @@ main() {
             skipped_volumes="$skipped_volumes $key"
         elif [[ $rc -ne 0 ]]; then
             echo "NC transfer failed, trying direct SSH..."
-            transfer_backup_ssh "$key"
+            transfer_backup_ssh "$key" "$dir/$1.yml"
             rc=$?
 
             if [[ $rc -eq 0 ]]; then

core/core/core-buffalo-core-pruned-pebble-path.yml

@@ -115,7 +115,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: core-testnet
+    chain:
     method-groups:
       enabled:
         - debug

core/core/core-pigeon-core-pruned-pebble-path.yml

@@ -115,7 +115,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: core-pigeon
+    chain: core-testnet
     method-groups:
       enabled:
         - debug

cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml

@@ -35,7 +35,7 @@ services:
       dockerfile: cometbft.Dockerfile
       args:
         CL_IMAGE: ${COSMOS_GAIAD_IMAGE:-ghcr.io/cosmos/gaia}
-        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.5.0}
+        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.6.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

cronos/cronos/cronos-mainnet-cronos-pruned.yml

@@ -61,12 +61,13 @@ services:
       - API=eth,txpool,net,debug,web3
       - CHAINID=cronosmainnet_25-1
       - EVM_MAX_TX_GAS_WANTED=500000
+      - FEEHISTORY_CAP=250
       - GENESIS_URL=https://raw.githubusercontent.com/crypto-org-chain/cronos-mainnet/master/cronosmainnet_25-1/genesis.json
       - IP=${IP}
       - JSON_RPC_BLOCK_RANGE_CAP=10000
       - JSON_RPC_ENABLE=true
       - JSON_RPC_ENABLE_INDEXER=true
-      - JSON_RPC_FEEHISTORY_CAP=100
+      - JSON_RPC_FEEHISTORY_CAP=250
       - JSON_RPC_HTTP_TIMEOUT=30s
       - JSON_RPC_LOGS_CAP=10000
       - MIN_GAS=5000000000000basecro

cronos/cronos/cronos-testnet-cronos-pruned.yml

@@ -61,12 +61,13 @@ services:
       - API=eth,txpool,net,debug,web3
       - CHAINID=cronostestnet_338-3
       - EVM_MAX_TX_GAS_WANTED=500000
+      - FEEHISTORY_CAP=250
       - GENESIS_URL=https://raw.githubusercontent.com/crypto-org-chain/cronos-testnets/main/cronostestnet_338-3/genesis.json
       - IP=${IP}
       - JSON_RPC_BLOCK_RANGE_CAP=10000
       - JSON_RPC_ENABLE=true
       - JSON_RPC_ENABLE_INDEXER=true
-      - JSON_RPC_FEEHISTORY_CAP=100
+      - JSON_RPC_FEEHISTORY_CAP=250
       - JSON_RPC_HTTP_TIMEOUT=30s
       - JSON_RPC_LOGS_CAP=10000
       - MIN_GAS=5000000000000basetcro

cronos/scripts/init.sh

@@ -18,7 +18,8 @@ PRUNING_KEEP_RECENT="${PRUNING_KEEP_RECENT:-100}"
 PRUNING_INTERVAL="${PRUNING_INTERVAL:-19}"
 JSON_RPC_ENABLE="${JSON_RPC_ENABLE:-true}"
 JSON_RPC_ENABLE_INDEXER="${JSON_RPC_ENABLE_INDEXER:-true}"
-JSON_RPC_FEEHISTORY_CAP="${JSON_RPC_FEEHISTORY_CAP:-100}"
+FEEHISTORY_CAP="${FEEHISTORY_CAP:-250}"
+JSON_RPC_FEEHISTORY_CAP="${JSON_RPC_FEEHISTORY_CAP:-$FEEHISTORY_CAP}"
 JSON_RPC_LOGS_CAP="${JSON_RPC_LOGS_CAP:-10000}"
 JSON_RPC_BLOCK_RANGE_CAP="${JSON_RPC_BLOCK_RANGE_CAP:-10000}"
 JSON_RPC_HTTP_TIMEOUT="${JSON_RPC_HTTP_TIMEOUT:-30s}"
@@ -47,7 +48,7 @@ sed -i "/^\[json-rpc\]/,/^\[/{s|^ws-origins = .*|ws-origins = \"$JSON_RPC_WS_ORI
 sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^enable = .*|enable = $JSON_RPC_ENABLE|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^enable-indexer = .*|enable-indexer = $JSON_RPC_ENABLE_INDEXER|}" "$CONFIG_DIR/app.toml"
-sed -i "/^\[json-rpc\]/,/^\[/{s|^feehistory-cap = .*|feehistory-cap = $JSON_RPC_FEEHISTORY_CAP|}" "$CONFIG_DIR/app.toml"
+sed -i "/^\[json-rpc\]/,/^\[/{s|^feehistory-cap = .*|feehistory-cap = $FEEHISTORY_CAP|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^logs-cap = .*|logs-cap = $JSON_RPC_LOGS_CAP|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^block-range-cap = .*|block-range-cap = $JSON_RPC_BLOCK_RANGE_CAP|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^http-timeout = .*|http-timeout = \"$JSON_RPC_HTTP_TIMEOUT\"|}" "$CONFIG_DIR/app.toml"

drpc-free.yml

@@ -1,6 +1,6 @@
 services:
   dshackle-free:
-    image: drpcorg/dshackle:0.79.10
+    image: ${DSHACKLE_IMAGE:-stakesquid/dshackle:0.79.11-ss2@sha256:624866381b672e051042f4f383fb19af1d9d4e508929ac92b2d70db3212ead92}
     restart: unless-stopped
     volumes:
       - ./free_configs:/etc/dshackle

drpc.yml

@@ -23,7 +23,7 @@ services:
       sleep 10; done'
 
   dshackle:
-    image: drpcorg/dshackle:0.79.10
+    image: ${DSHACKLE_IMAGE:-stakesquid/dshackle:0.79.11-ss2@sha256:624866381b672e051042f4f383fb19af1d9d4e508929ac92b2d70db3212ead92}
     restart: unless-stopped
     volumes:
       - ./main_configs:/etc/dshackle

erigon3.Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1.2
 ARG REPO=https://github.com/erigontech/erigon.git
-ARG VERSION=v3.4.4
+ARG VERSION=v3.5.3
 ARG COMMIT=${COMMIT:-${VERSION}}
 
 FROM docker.io/library/golang:1.24.1-alpine3.20 AS builder

ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-besu:
-    image: ${ETHEREUM_BESU_IMAGE:-hyperledger/besu}:${ETHEREUM_MAINNET_BESU_VERSION:-26.7.0}
+    image: ${ETHEREUM_BESU_IMAGE:-hyperledger/besu}:${ETHEREUM_MAINNET_BESU_VERSION:-26.7.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -189,8 +189,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-besu-pruned-bonsai_nimbus]
 ...

ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-mainnet-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-mainnet-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-mainnet-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-sepolia-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-sepolia-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-sepolia-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml

@@ -195,8 +195,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml

@@ -196,8 +196,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_prysm]
 ...

ethereum/geth/ethereum-mainnet-geth-minimal-pebble-path.yml

@@ -200,8 +200,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-minimal-pebble-path_prysm]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml

@@ -259,8 +259,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-leveldb-hash_nimbus]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml

@@ -261,8 +261,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus.yml

@@ -195,8 +195,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml

@@ -196,8 +196,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_prysm]
 ...

ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path--nimbus.yml

@@ -195,8 +195,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml

@@ -196,8 +196,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_prysm]
 ...

ethereum/nethermind/ethereum-hoodi-nethermind-pruned-rocksdb-trace--nimbus.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-nethermind-pruned-rocksdb-trace_nimbus]
 ...

ethereum/nethermind/ethereum-mainnet-nethermind-pruned-rocksdb-trace--nimbus.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...

ethereum/nethermind/ethereum-sepolia-nethermind-pruned-rocksdb-trace--nimbus.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-nethermind-pruned-rocksdb-trace_nimbus]
 ...

ethereum/reth/ethereum-hoodi-reth-archive-trace.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_HOODI_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -184,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-reth-archive-trace_prysm]
 ...

ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -185,8 +186,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-reth-pruned-trace_prysm]
 ...

ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -191,8 +192,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_lighthouse-pruned-blobs]
 ...

ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -183,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_nimbus]
 ...

ethereum/reth/ethereum-mainnet-reth-archive-trace.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -184,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_prysm]
 ...

ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml

@@ -65,6 +65,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -123,7 +124,7 @@ services:
       - pruning
 
   ethereum-mainnet-reth-minimal-node:
-    image: ${ETHEREUM_BLSYNC_IMAGE:-ethereum/client-go}:${ETHEREUM_MAINNET_BLSYNC_VERSION:-alltools-v1.17.4}
+    image: ${ETHEREUM_BLSYNC_IMAGE:-ethereum/client-go}:${ETHEREUM_MAINNET_BLSYNC_VERSION:-alltools-v1.17.5}
     ports:
       - 19286:19286
       - 19286:19286/udp

ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml

@@ -87,6 +87,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -242,8 +243,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-minimal-trace_nimbus]
 ...

ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -190,8 +191,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_lighthouse]
 ...

ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -184,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_nimbus]
 ...

ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -185,8 +186,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_prysm]
 ...

ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -183,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-archive-trace_nimbus]
 ...

ethereum/reth/ethereum-sepolia-reth-archive-trace.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -184,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-archive-trace_prysm]
 ...

ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -184,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_nimbus]
 ...

ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
@@ -185,8 +186,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_prysm]
 ...

fuse/nethermind/fuse-spark-nethermind-archive-rocksdb-trace.yml

@@ -96,26 +96,8 @@ services:
 volumes:
   fuse-spark-nethermind-archive-rocksdb-trace:
 
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: fuse
-    method-groups:
-      enabled:
-        - debug
-        - filter
-        - trace
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...
+# fuse-spark (Sparknet, chainid 123) is ABSENT from dRPC chains.yaml - not a
+# servable dRPC chain. x-upstreams removed 2026-08-05 (it declared the MAINNET
+# slug "fuse", which would have advertised testnet data as mainnet). This file is
+# hand-written (fuse has chains: null in context.yml); onboarding it to generation
+# is the clean long-term fix. See chain-aliases.yaml fuse/spark: null.

fuse/nethermind/fuse-spark-nethermind-minimal-rocksdb-trace.yml

@@ -99,26 +99,8 @@ services:
 volumes:
   fuse-spark-nethermind-minimal-rocksdb-trace:
 
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: fuse
-    method-groups:
-      enabled:
-        - debug
-        - filter
-        - trace
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...
+# fuse-spark (Sparknet, chainid 123) is ABSENT from dRPC chains.yaml - not a
+# servable dRPC chain. x-upstreams removed 2026-08-05 (it declared the MAINNET
+# slug "fuse", which would have advertised testnet data as mainnet). This file is
+# hand-written (fuse has chains: null in context.yml); onboarding it to generation
+# is the clean long-term fix. See chain-aliases.yaml fuse/spark: null.

fuse/nethermind/fuse-spark-nethermind-pruned-rocksdb-trace.yml

@@ -94,26 +94,8 @@ services:
 volumes:
   fuse-spark-nethermind-pruned-rocksdb-trace:
 
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: fuse
-    method-groups:
-      enabled:
-        - debug
-        - filter
-        - trace
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...
+# fuse-spark (Sparknet, chainid 123) is ABSENT from dRPC chains.yaml - not a
+# servable dRPC chain. x-upstreams removed 2026-08-05 (it declared the MAINNET
+# slug "fuse", which would have advertised testnet data as mainnet). This file is
+# hand-written (fuse has chains: null in context.yml); onboarding it to generation
+# is the clean long-term fix. See chain-aliases.yaml fuse/spark: null.

gnosis/erigon3/gnosis-chiado-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-chiado-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-chiado-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-chiado-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-chiado-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-chiado-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-mainnet-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-mainnet-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-mainnet-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-mainnet-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-mainnet-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-mainnet-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/nethermind/gnosis-chiado-nethermind-archive-rocksdb-trace.yml

@@ -171,8 +171,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-archive-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-chiado-nethermind-minimal-rocksdb-trace.yml

@@ -174,8 +174,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-minimal-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-chiado-nethermind-pruned-rocksdb-trace.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-pruned-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-mainnet-nethermind-archive-rocksdb-trace.yml

@@ -171,8 +171,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-archive-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-mainnet-nethermind-minimal-rocksdb-trace.yml

@@ -174,8 +174,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-minimal-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-mainnet-nethermind-pruned-rocksdb-trace.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...

gnosis/reth/gnosis-chiado-reth-archive-trace.yml

@@ -183,8 +183,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-reth-archive-trace_nimbus]
 ...

gnosis/reth/gnosis-chiado-reth-pruned-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-reth-pruned-trace_nimbus]
 ...

gnosis/reth/gnosis-mainnet-reth-archive-trace.yml

@@ -183,8 +183,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-reth-archive-trace_nimbus]
 ...

gnosis/reth/gnosis-mainnet-reth-pruned-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-reth-pruned-trace_nimbus]
 ...

haqq/scripts/cometbft-common.sh

@@ -0,0 +1,223 @@
+#!/bin/sh
+# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
+#
+# Source this from a chain-specific init.sh. It encapsulates the operations every
+# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
+# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
+# beacon-kit entrypoint so callers inherit known-good behavior.
+#
+# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
+# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
+# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
+# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
+#
+# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
+# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
+# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
+
+set -e
+
+ct_log() { echo "[cometbft-init] $*"; }
+
+# Ensure curl exists (alpine base images often omit it). Idempotent.
+ct_require_curl() {
+  if ! command -v curl >/dev/null 2>&1; then
+    ct_log "installing curl"
+    apk add --no-cache curl
+  fi
+}
+
+# ct_fetch URL DEST [required]
+#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
+#   otherwise a missing/failed fetch is logged and skipped (returns 0).
+ct_fetch() {
+  _url="$1"; _dest="$2"; _req="${3:-optional}"
+  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
+  if curl -fsSL "$_url" -o "$_dest"; then
+    ct_log "fetched $_url -> $_dest"
+  else
+    if [ "$_req" = required ]; then
+      ct_log "FATAL: failed to fetch required $_url"; exit 1
+    fi
+    ct_log "skip: could not fetch optional $_url"
+  fi
+}
+
+# ct_patch_p2p CONFIG_TOML IP P2P_PORT
+#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
+ct_patch_p2p() {
+  _cfg="$1"; _ip="$2"; _port="$3"
+  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
+  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
+  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
+  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
+}
+
+# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
+#   Merge operator-configured seeds with an optional official seed list (1 entry per
+#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
+ct_merge_seeds() {
+  _cfg="$1"; _seeds="$2"; _url="$3"
+  [ -f "$_cfg" ] || return 0
+  if [ -n "$_url" ]; then
+    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
+    if [ -n "$_official" ]; then
+      ct_log "merging official seeds from $_url"
+      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
+    else
+      ct_log "no official seeds fetched from $_url (continuing with configured)"
+    fi
+  fi
+  if [ -n "$_seeds" ]; then
+    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
+  fi
+}
+
+# ct_set_persistent_peers CONFIG_TOML PEERS
+#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
+#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
+ct_set_persistent_peers() {
+  _cfg="$1"; _peers="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_peers" ] || return 0
+  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
+  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_moniker CONFIG_TOML MONIKER
+ct_set_moniker() {
+  _cfg="$1"; _mon="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
+#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
+ct_set_addrbook() {
+  _dir="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  ct_fetch "$_url" "$_dir/addrbook.json" optional
+}
+
+# ct_write_jwt CONFIG_DIR  [JWT_SRC]
+#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
+#   dir as jwt.hex so the CL can authenticate to the EL engine API.
+ct_write_jwt() {
+  _dir="$1"; _src="${2:-/jwtsecret}"
+  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
+  cat "$_src" > "$_dir/jwt.hex"
+}
+
+# ct_set_rpc_dial_url APP_TOML AUTH_RPC
+#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
+ct_set_rpc_dial_url() {
+  _app="$1"; _rpc="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
+  return 0
+}
+
+# ct_seed_priv_validator_state HOME_DIR
+#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
+#   when one is present in config/). Mirrors the berachain init.sh behavior.
+ct_seed_priv_validator_state() {
+  _home="$1"
+  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
+    mkdir -p "$_home/data"
+    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
+  fi
+  return 0
+}
+
+# ct_apk PKG...
+#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
+ct_apk() {
+  apk add --no-cache "$@"
+}
+
+# ct_localize_home CONFIG_DIR
+#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
+#   paths; the container runs as root with a static home, so make paths absolute.
+ct_localize_home() {
+  _dir="$1"
+  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
+  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
+  return 0
+}
+
+# ct_set_min_gas_prices APP_TOML PRICE
+#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
+#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
+ct_set_min_gas_prices() {
+  _app="$1"; _price="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_price" ] || return 0
+  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
+  return 0
+}
+
+# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
+#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
+#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
+#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
+#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
+#   Requires jq + curl. No-op (logged) if head height can't be fetched.
+ct_configure_statesync() {
+  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
+  [ -f "$_cfg" ] || return 0
+  # NEVER re-arm statesync on a node that already has application state (a restored
+  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
+  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
+  # so application state lives at $HOME/data/application.db.
+  _home=$(dirname "$(dirname "$_cfg")")
+  if [ -e "$_home/data/application.db" ]; then
+    ct_log "statesync: existing data dir, skipping"
+    return 0
+  fi
+  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
+  _primary=$(echo "$_rpc" | cut -d, -f1)
+  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
+  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
+    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
+  fi
+  _trust_h=$((_latest - _offset))
+  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
+  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
+  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
+  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
+  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
+  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
+  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
+  sed -i.bak -E "/^\[statesync\]/,/^\[/{
+    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
+    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
+    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
+    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
+  }" "$_cfg"
+  return 0
+}
+
+# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
+#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
+#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
+#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
+#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
+#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
+#   FULL snapshot restore. Requires lz4 + tar (installed here).
+ct_ensure_wasm() {
+  _home="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
+    return 0   # wasm already present
+  fi
+  ct_log "wasm: empty, fetching snapshot $_url"
+  ct_apk lz4 tar
+  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
+    ct_log "wasm: extracted into $_home"
+  else
+    ct_log "WARN wasm: fetch/extract failed ($_url)"
+  fi
+  return 0
+}

haqq/scripts/init.sh

@@ -1,64 +1,65 @@
 #!/bin/sh
+# haqq (haqqd) entrypoint — family C, pure CometBFT (no EL). Thin: sources the
+# shared cometbft-common.sh and orchestrates init + statesync bootstrap + start.
+# Serves CometBFT RPC :26657 (the dshackle/traefik upstream).
+# Genesis replay across ~25 Haqq network upgrades is impractical, so we statesync
+# near head with the current binary.
+set -e
+. /usr/local/bin/cometbft-common.sh
 
-set -e  # Exit on failure
+HOME_DIR="/root/.haqqd"
+CONFIG_DIR="$HOME_DIR/config"
+CHAIN_ID="${CHAINID:-haqq_11235-1}"
+CHAINNAME="${CHAINNAME:-mainnet}"
+GENESIS_URL="${GENESIS_URL:-https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json}"
+ADDRBOOK_URL="${ADDRBOOK_URL:-https://snapshots.polkachu.com/addrbook/haqq/addrbook.json}"
+STATESYNC_RPC="${STATESYNC_RPC:-https://haqq-rpc.polkachu.com:443}"
+MIN_GAS="${MIN_GAS:-0.01hqq}"
+MONIKER="${MONIKER:-rpc-node}"
 
-echo "MONIKER: $MONIKER"
+# Polkachu seeds + official Haqq network seeds for reliable peer discovery
+SEEDS="${SEEDS:-936e27a05f3cfb090507dd810395cbbd8efbffb0@65.109.115.172:24056,f4675b63b8872fb9216efa99428eb5b1fb297393@65.109.104.118:61256,6c9a6fc0e0d94bf303075e46560832e652cffc14@65.108.71.137:24056,7c153a83@peer.haqq.mainnet.dteam.tech:28656}"
 
-CHAINID=${CHAINID:-haqq_11235-1}
-CHAINNAME=${CHAINNAME:-mainnet}
-API=${API:-eth,net,web3}
+# Optional persistent peers for additional bootstrap reliability
+PERSISTENT_PEERS="${PERSISTENT_PEERS:-17e0fd08f04e062d18412808b8bf134e9ad34508@65.109.109.189:10656,e000b992a0066eae9e87c66e0d65229a76647509@198.96.92.242:32656,7c153a83@peer.haqq.mainnet.dteam.tech:28656,235ac65359582357b04754e838496545b3ba6429@haqq-seed-1.allnodes.me:26656,9573a569016378765444095484840d7f543d2800@haqq-seed-2.allnodes.me:26656}"
 
-CONFIG_DIR="/root/.haqqd/config"
+ct_apk curl jq
 
-# Create config directory
-mkdir -p "$CONFIG_DIR"
-
-P2P_STRING="tcp:\\/\\/0\\.0\\.0\\.0\\:${P2P_PORT:-10465}"
-NAT_STRING="${IP}:${P2P_PORT:-10465}"
-
-env
-
-# this goes first because it won't overwrite shit
-apk add curl
-if [ $? -ne 0 ]; then exit 1; fi
-
-if haqqd init ${MONIKER} --chain-id ${CHAINID} --home /root/.haqqd/; then
-    # Define variables
-    GENESIS_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json"    
-    ADDRESSBOOK_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/addrbook.json"
-    
-    # Download config files
-    curl -sL "$GENESIS_URL" -o "$CONFIG_DIR/genesis.json"    
-    curl -sL "$ADDRESSBOOK_URL" -o "$CONFIG_DIR/addressbook.json"
-
-    # somehow it's better to make home static to /root
-    sed -i 's|~/|/root/|g' "$CONFIG_DIR/config.toml"
-    sed -i 's|~/|/root/|g' "$CONFIG_DIR/app.toml"
+if haqqd init "$MONIKER" --chain-id "$CHAIN_ID" --home "$HOME_DIR" >/dev/null 2>&1; then
+  ct_log "fresh init; fetching genesis and addrbook"
+  ct_fetch "$GENESIS_URL" "$CONFIG_DIR/genesis.json" required
+  ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
+  ct_localize_home "$CONFIG_DIR"
+  ct_set_min_gas_prices "$CONFIG_DIR/app.toml" "$MIN_GAS"
 else
-    echo "Already initialized, continuing!" >&2
+  ct_log "already initialized, continuing"
+  # Auto-refresh addrbook from Polkachu when empty on startup
+  if [ ! -s "$CONFIG_DIR/addrbook.json" ]; then
+    ct_log "addrbook.json is empty, refreshing from Polkachu"
+    ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
+  fi
 fi
 
+# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:8545"|}' "$CONFIG_DIR/config.toml"
 
-# apply a port change to the config
-sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$P2P_STRING\"|}" "$CONFIG_DIR/config.toml"
-#sed -i "s/^laddr = \".*\"/laddr = \"$P2P_STRING\"/" "$CONFIG_DIR/config.toml"
-sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"$NAT_STRING\"|}" "$CONFIG_DIR/config.toml"
-
-#sed -i 's/minimum-gas-prices = ""/minimum-gas-prices = "0.01hqq"/g' $CONFIG_DIR/app.toml
-
-sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^indexer *=.*/indexer = \"null\"/" $CONFIG_DIR/config.toml
+ct_patch_p2p             "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-10465}"
+ct_merge_seeds           "$CONFIG_DIR/config.toml" "$SEEDS" "$ADDRBOOK_URL"
+ct_set_persistent_peers  "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
+ct_set_moniker           "$CONFIG_DIR/config.toml" "$MONIKER"
+ct_configure_statesync   "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"
+ct_seed_priv_validator_state "$HOME_DIR"
 
+# Haqq-specific config: enable API endpoints
 sed -i "/^\[json-rpc\]/,/^\[/{s|^address = .*|address = \"0.0.0.0:8545\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^ws-address = .*|ws-address = \"0.0.0.0:8546\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^metrics-address = .*|metrics-address = \"0.0.0.0:6065\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.toml"
 
-# Update moniker if set
-if [ -n "$MONIKER" ] && [ -f "$CONFIG_DIR/config.toml" ]; then
-    sed -i "s/^moniker = \".*\"/moniker = \"$MONIKER\"/" "$CONFIG_DIR/config.toml"
-fi
+# Custom pruning settings for RPC node
+sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^indexer *=.*/indexer = \"null\"/" "$CONFIG_DIR/config.toml"
 
-exec haqqd start --chain-id ${CHAINID} $@
+exec haqqd start --chain-id "$CHAIN_ID" --home "$HOME_DIR" $@

immutable-zkevm/geth/immutable-zkevm-mainnet-geth-pruned-pebble-path.yml

@@ -32,7 +32,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   immutable-zkevm-mainnet-geth:
-    image: ${IMMUTABLE_ZKEVM_GETH_IMAGE:-ethereum/client-go}:${IMMUTABLE_ZKEVM_MAINNET_GETH_VERSION:-v1.17.4}
+    image: ${IMMUTABLE_ZKEVM_GETH_IMAGE:-ethereum/client-go}:${IMMUTABLE_ZKEVM_MAINNET_GETH_VERSION:-v1.17.5}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

kite/go/kite-mainnet-go-pruned-leveldb.yml

@@ -46,8 +46,8 @@ services:
       nofile: 1048576    # Max open files (for RPC/WS connections)
     user: root
     ports:
-      - 10127:10127
-      - 10127:10127/udp
+      - 10127:9651
+      - 10127:9651/udp
     expose:
       - 9650
     environment:
@@ -59,7 +59,7 @@ services:
       - AVAGO_NETWORK_ID=mainnet
       - AVAGO_PARTIAL_SYNC_PRIMARY_NETWORK=true
       - AVAGO_PLUGIN_DIR=/plugins/
-      - AVAGO_STAKING_PORT=10127
+      - AVAGO_STAKING_PORT=9651
       - AVAGO_TRACK_SUBNETS=21uUaTxVdR3Sp6SJhpcSrdH1g66aFoE8mPQDvwKJCjXNexo5y6
       - KITE_CHAIN_ID=3USaEfTcoUhHxpKXvpAG916UKCUEyjrtkg2hBArBG3JyDP7my
       - PLUGIN_ID=pJhES6xZkqZxjxMqHiucbpBTTnB97EjL5aTYSynmWBoF26v9e

linea/besu/linea-mainnet-besu-pruned-bonsai.yml

@@ -54,6 +54,7 @@ services:
       - 9545
     command:
       - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
       - --bootnodes=enode://069800db9e6e0ec9cadca670994ef1aea2cfd3d88133e63ecadbc1cdbd1a5847b09838ee08d8b5f02a9c32ee13abeb4d4104bb5514e5322c9d7ee19f41ff3e51@3.132.73.210:31002,enode://a8e03a71eab12ec4b47bb6e19169d8e4dc7a58373a2476969bbe463f2dded6003037fa4dd5f71e15027f7fc8d7340956fbbefed67ddd116ac19a7f74da034b61@3.132.73.210:31003,enode://97706526cf79df9d930003644f9156805f6c8bd964fc79e083444f7014ce10c9bdd2c5049e63b58040dca1d4c82ebef970822198cf0714de830cff4111534ff1@18.223.198.165:31004,enode://24e1c654a801975a96b7f54ebd7452ab15777fc635c1db25bdbd4425fdb04e7f4768e9e838a87ab724320a765e41631d5d37758c933ad0e8668693558125c8aa@18.223.198.165:31000,enode://27010891d960f73d272a553f72b6336c6698db3ade98d631f09c764e57674a797be5ebc6829ddbb65ab564f439ebc75215d20aa98b6f351d12ea623e7d139ac3@3.132.73.210:31001,enode://228e1b8a4931e46f383e30721dac21fb8fb4e5e1b32c870e13b25478c82db3dc1cd9e7ceb93d302a766466b55638cc9c5cbfc43aa48fa41ced19baf365951f76@3.1.142.64:31002,enode://c22eb0d40fc3ad5ea710aeddea906567778166bfe18c157955e8c39b23a46c45db18a0fa2ba07f2b64c81178a8c796aec2a29151533920ead06fcdfc6d8d03c6@47.128.192.57:31004,enode://8ce733abe39fd7ae0a278b9893f85c1193c611a3886168690dd843435460f22cc4d61f9e8d0ace7f5905836a665319a31cccdaacdada2acc69972c382ecce7db@3.1.142.64:31003,enode://b7c1b2bed65a855f7a2104aac9a14674dfdf018fdac763415b373b29ce18cdb81d36328ba4e5c9f12629f3a50c3e8f9ee048f22dbdbe93a82813da89c6b81334@51.20.235.126:31004,enode://95270e0550848a72fb141cf27f1c4ea10714edde365b411dc0fa06c81c0f282ce155eb9fa472b6b8bb9ee98395eeaf4c5a7b02a01fe58b37ea98ba152eda4c37@13.50.94.193:31000,enode://72013391755f24f08567b932feeeec4c893c06e0b1fb480890c83bf87fd277ad86a5ab9cb586db9ae9970371a2f8cb0c96f6c9f69045abca0fb801db7f047138@51.20.235.126:31001
       - --data-path=/opt/besu/database
       - --data-storage-format=BONSAI

linea/besu/linea-sepolia-besu-pruned-bonsai.yml

@@ -54,6 +54,7 @@ services:
       - 9545
     command:
       - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
       - --bootnodes=enode://6f20afbe4397e51b717a7c1ad3095e79aee48c835eebd9237a3e8a16951ade1fe0e66e981e30ea269849fcb6ba03d838da37f524fabd2a557474194a2e2604fa@18.221.100.27:31002,enode://ce1e0d8e0500cb5c0ac56bdcdafb2d6320c3a2c5125b5ccf12f5dfc9b47ee74acbcafc32559017613136c9c36a0ce74ba4f83b7fb8244f099f3b15708d9d3129@3.23.75.47:31000,enode://1b026a5eb0ae74300f58987d235ef0e3a550df963345cb3574be3b0b54378bd11f14dfd515a8976f2c2d2826090e9507b8ccc24f896a9ffffffcabcfd996a733@3.129.120.128:31001
       - --data-path=/opt/besu/database
       - --data-storage-format=BONSAI

linea/erigon3/linea-mainnet-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-mainnet-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle