haqq: add required DTEAM and allnodes.me seeds to bootstrap config

Add authoritative dRPC slug field (operator audit 2026-08-04):
- generate_registry.py: add drpc_chain field from x-upstreams[0].chain
- Fix soneium-minato-sepolia → soneium-miniato-sepolia typo in compose files
- drpc_chain is null for entries without x-upstreams (not dRPC-servable)

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

arc/reth/arc-mainnet-reth-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-mainnet-archive-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-mainnet-archive:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -119,7 +119,7 @@ services:
     shm_size: 2gb
 
   arc-mainnet-archive-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     expose:
       - 31000
@@ -160,6 +160,9 @@ volumes:
   arc-mainnet-reth-archive-trace-execution:
   arc-mainnet-reth-archive-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-mainnet-reth-archive-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-mainnet-reth-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-mainnet-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-mainnet:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -120,7 +120,7 @@ services:
     shm_size: 2gb
 
   arc-mainnet-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     expose:
       - 31000
@@ -161,6 +161,9 @@ volumes:
   arc-mainnet-reth-pruned-trace-execution:
   arc-mainnet-reth-pruned-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-mainnet-reth-pruned-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-archive-trace.yml

@@ -160,6 +160,9 @@ volumes:
   arc-testnet-reth-archive-trace-execution:
   arc-testnet-reth-archive-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-archive-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-pruned-trace.yml

@@ -161,6 +161,9 @@ volumes:
   arc-testnet-reth-pruned-trace-execution:
   arc-testnet-reth-pruned-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-pruned.yml

@@ -161,6 +161,9 @@ volumes:
   arc-testnet-reth-pruned-execution:
   arc-testnet-reth-pruned-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

backup-node.sh

@@ -157,8 +157,15 @@ for key in $keys; do
     folder_size_gb=$(printf "%.0f" "$folder_size")
 
     if (( folder_size_gb < 1 )) && [[ "$FORCE_SMALL" != true ]]; then
-	echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
-	exit 1
+	# The torn-backup floor applies to the MAIN data volume only (key == compose
+	# basename). Sidecar volumes (eigenda-proxy, configs, ...) are legitimately
+	# tiny — a 0G sidecar aborting the whole backup left no manifest and blocked
+	# the refresh lane on every ronin bench-retire (4 cycles, 2026-07).
+	if [[ "$key" == "$(basename "$compose_name")" ]]; then
+	    echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
+	    exit 1
+	fi
+	echo "NOTE: sidecar volume rpc_$key is ${folder_size_gb}G — allowing small backup (floor guards the main data volume only)"
     fi
     
     timestamp=$(date +'%Y-%m-%d-%H-%M-%S')

clone-backup.sh

@@ -298,6 +298,7 @@ cleanup_all_ports() {
 # Transfer backup file using screen method with better error handling
 transfer_backup() {
     local key=$1
+    local compose_file=$2
     local volume_name="rpc_$key"
     
     # Find the newest restorable backup file (skip near-empty artifacts)
@@ -309,6 +310,13 @@ transfer_backup() {
             echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
             return 2
         fi
+        # Check if this volume is optional or ephemeral - if so, skip gracefully
+        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
+                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
+                return 2
+            fi
+        fi
         echo "Warning: No restorable backup file found for $volume_name, skipping"
         return 1
     fi
@@ -502,6 +510,7 @@ LISTENER
 # Fallback: Direct SSH pipe
 transfer_backup_ssh() {
     local key=$1
+    local compose_file=$2
     local volume_name="rpc_$key"
     
     # Find the newest restorable backup file (skip near-empty artifacts)
@@ -513,6 +522,13 @@ transfer_backup_ssh() {
             echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
             return 2
         fi
+        # Check if this volume is optional or ephemeral - if so, skip gracefully
+        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
+                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
+                return 2
+            fi
+        fi
         echo "Warning: No restorable backup file found for $volume_name, skipping"
         return 1
     fi
@@ -642,7 +658,7 @@ main() {
 
     for key in $keys; do
         # Try nc method first
-        transfer_backup "$key"
+        transfer_backup "$key" "$dir/$1.yml"
         rc=$?
 
         if [[ $rc -eq 2 ]]; then
@@ -650,7 +666,7 @@ main() {
             skipped_volumes="$skipped_volumes $key"
         elif [[ $rc -ne 0 ]]; then
             echo "NC transfer failed, trying direct SSH..."
-            transfer_backup_ssh "$key"
+            transfer_backup_ssh "$key" "$dir/$1.yml"
             rc=$?
 
             if [[ $rc -eq 0 ]]; then

erigon3.Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1.2
 ARG REPO=https://github.com/erigontech/erigon.git
-ARG VERSION=v3.4.4
+ARG VERSION=v3.5.3
 ARG COMMIT=${COMMIT:-${VERSION}}
 
 FROM docker.io/library/golang:1.24.1-alpine3.20 AS builder

ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml

@@ -189,8 +189,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-besu-pruned-bonsai_nimbus]
 ...

ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-mainnet-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-mainnet-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-mainnet-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-sepolia-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-sepolia-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/erigon3/ethereum-sepolia-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml

@@ -195,8 +195,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml

@@ -196,8 +196,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_prysm]
 ...

ethereum/geth/ethereum-mainnet-geth-minimal-pebble-path.yml

@@ -200,8 +200,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-minimal-pebble-path_prysm]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml

@@ -259,8 +259,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-leveldb-hash_nimbus]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml

@@ -261,8 +261,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus.yml

@@ -195,8 +195,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml

@@ -196,8 +196,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_prysm]
 ...

ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path--nimbus.yml

@@ -195,8 +195,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_nimbus]
 ...

ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml

@@ -196,8 +196,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_prysm]
 ...

ethereum/nethermind/ethereum-hoodi-nethermind-pruned-rocksdb-trace--nimbus.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-nethermind-pruned-rocksdb-trace_nimbus]
 ...

ethereum/nethermind/ethereum-mainnet-nethermind-pruned-rocksdb-trace--nimbus.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...

ethereum/nethermind/ethereum-sepolia-nethermind-pruned-rocksdb-trace--nimbus.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-nethermind-pruned-rocksdb-trace_nimbus]
 ...

ethereum/reth/ethereum-hoodi-reth-archive-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-reth-archive-trace_prysm]
 ...

ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml

@@ -185,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain-hoodi
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-reth-pruned-trace_prysm]
 ...

ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml

@@ -191,8 +191,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_lighthouse-pruned-blobs]
 ...

ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml

@@ -183,8 +183,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_nimbus]
 ...

ethereum/reth/ethereum-mainnet-reth-archive-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_prysm]
 ...

ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml

@@ -242,8 +242,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-minimal-trace_nimbus]
 ...

ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml

@@ -190,8 +190,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_lighthouse]
 ...

ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_nimbus]
 ...

ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml

@@ -185,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_prysm]
 ...

ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml

@@ -183,8 +183,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-archive-trace_nimbus]
 ...

ethereum/reth/ethereum-sepolia-reth-archive-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-archive-trace_prysm]
 ...

ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_nimbus]
 ...

ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml

@@ -185,8 +185,15 @@ x-upstreams:
     chain: eth-beacon-chain-sepolia
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_prysm]
 ...

gnosis/erigon3/gnosis-chiado-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-chiado-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-chiado-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-chiado-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-chiado-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-chiado-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-mainnet-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-mainnet-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-mainnet-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-mainnet-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/erigon3/gnosis-mainnet-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   gnosis-mainnet-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

gnosis/nethermind/gnosis-chiado-nethermind-archive-rocksdb-trace.yml

@@ -171,8 +171,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-archive-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-chiado-nethermind-minimal-rocksdb-trace.yml

@@ -174,8 +174,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-minimal-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-chiado-nethermind-pruned-rocksdb-trace.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-pruned-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-mainnet-nethermind-archive-rocksdb-trace.yml

@@ -171,8 +171,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-archive-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-mainnet-nethermind-minimal-rocksdb-trace.yml

@@ -174,8 +174,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-minimal-rocksdb-trace_nimbus]
 ...

gnosis/nethermind/gnosis-mainnet-nethermind-pruned-rocksdb-trace.yml

@@ -169,8 +169,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...

gnosis/reth/gnosis-chiado-reth-archive-trace.yml

@@ -183,8 +183,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-reth-archive-trace_nimbus]
 ...

gnosis/reth/gnosis-chiado-reth-pruned-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: gnosis-beacon-chain-chiado
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-reth-pruned-trace_nimbus]
 ...

gnosis/reth/gnosis-mainnet-reth-archive-trace.yml

@@ -183,8 +183,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-reth-archive-trace_nimbus]
 ...

gnosis/reth/gnosis-mainnet-reth-pruned-trace.yml

@@ -184,8 +184,15 @@ x-upstreams:
     chain: gnosis-beacon-chain
     labels:
       provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
     connection:
       generic:
         rpc:
           url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-reth-pruned-trace_nimbus]
 ...

haqq/scripts/cometbft-common.sh

@@ -0,0 +1,223 @@
+#!/bin/sh
+# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
+#
+# Source this from a chain-specific init.sh. It encapsulates the operations every
+# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
+# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
+# beacon-kit entrypoint so callers inherit known-good behavior.
+#
+# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
+# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
+# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
+# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
+#
+# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
+# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
+# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
+
+set -e
+
+ct_log() { echo "[cometbft-init] $*"; }
+
+# Ensure curl exists (alpine base images often omit it). Idempotent.
+ct_require_curl() {
+  if ! command -v curl >/dev/null 2>&1; then
+    ct_log "installing curl"
+    apk add --no-cache curl
+  fi
+}
+
+# ct_fetch URL DEST [required]
+#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
+#   otherwise a missing/failed fetch is logged and skipped (returns 0).
+ct_fetch() {
+  _url="$1"; _dest="$2"; _req="${3:-optional}"
+  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
+  if curl -fsSL "$_url" -o "$_dest"; then
+    ct_log "fetched $_url -> $_dest"
+  else
+    if [ "$_req" = required ]; then
+      ct_log "FATAL: failed to fetch required $_url"; exit 1
+    fi
+    ct_log "skip: could not fetch optional $_url"
+  fi
+}
+
+# ct_patch_p2p CONFIG_TOML IP P2P_PORT
+#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
+ct_patch_p2p() {
+  _cfg="$1"; _ip="$2"; _port="$3"
+  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
+  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
+  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
+  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
+}
+
+# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
+#   Merge operator-configured seeds with an optional official seed list (1 entry per
+#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
+ct_merge_seeds() {
+  _cfg="$1"; _seeds="$2"; _url="$3"
+  [ -f "$_cfg" ] || return 0
+  if [ -n "$_url" ]; then
+    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
+    if [ -n "$_official" ]; then
+      ct_log "merging official seeds from $_url"
+      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
+    else
+      ct_log "no official seeds fetched from $_url (continuing with configured)"
+    fi
+  fi
+  if [ -n "$_seeds" ]; then
+    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
+  fi
+}
+
+# ct_set_persistent_peers CONFIG_TOML PEERS
+#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
+#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
+ct_set_persistent_peers() {
+  _cfg="$1"; _peers="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_peers" ] || return 0
+  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
+  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_moniker CONFIG_TOML MONIKER
+ct_set_moniker() {
+  _cfg="$1"; _mon="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
+#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
+ct_set_addrbook() {
+  _dir="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  ct_fetch "$_url" "$_dir/addrbook.json" optional
+}
+
+# ct_write_jwt CONFIG_DIR  [JWT_SRC]
+#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
+#   dir as jwt.hex so the CL can authenticate to the EL engine API.
+ct_write_jwt() {
+  _dir="$1"; _src="${2:-/jwtsecret}"
+  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
+  cat "$_src" > "$_dir/jwt.hex"
+}
+
+# ct_set_rpc_dial_url APP_TOML AUTH_RPC
+#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
+ct_set_rpc_dial_url() {
+  _app="$1"; _rpc="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
+  return 0
+}
+
+# ct_seed_priv_validator_state HOME_DIR
+#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
+#   when one is present in config/). Mirrors the berachain init.sh behavior.
+ct_seed_priv_validator_state() {
+  _home="$1"
+  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
+    mkdir -p "$_home/data"
+    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
+  fi
+  return 0
+}
+
+# ct_apk PKG...
+#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
+ct_apk() {
+  apk add --no-cache "$@"
+}
+
+# ct_localize_home CONFIG_DIR
+#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
+#   paths; the container runs as root with a static home, so make paths absolute.
+ct_localize_home() {
+  _dir="$1"
+  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
+  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
+  return 0
+}
+
+# ct_set_min_gas_prices APP_TOML PRICE
+#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
+#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
+ct_set_min_gas_prices() {
+  _app="$1"; _price="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_price" ] || return 0
+  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
+  return 0
+}
+
+# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
+#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
+#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
+#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
+#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
+#   Requires jq + curl. No-op (logged) if head height can't be fetched.
+ct_configure_statesync() {
+  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
+  [ -f "$_cfg" ] || return 0
+  # NEVER re-arm statesync on a node that already has application state (a restored
+  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
+  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
+  # so application state lives at $HOME/data/application.db.
+  _home=$(dirname "$(dirname "$_cfg")")
+  if [ -e "$_home/data/application.db" ]; then
+    ct_log "statesync: existing data dir, skipping"
+    return 0
+  fi
+  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
+  _primary=$(echo "$_rpc" | cut -d, -f1)
+  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
+  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
+    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
+  fi
+  _trust_h=$((_latest - _offset))
+  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
+  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
+  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
+  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
+  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
+  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
+  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
+  sed -i.bak -E "/^\[statesync\]/,/^\[/{
+    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
+    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
+    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
+    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
+  }" "$_cfg"
+  return 0
+}
+
+# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
+#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
+#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
+#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
+#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
+#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
+#   FULL snapshot restore. Requires lz4 + tar (installed here).
+ct_ensure_wasm() {
+  _home="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
+    return 0   # wasm already present
+  fi
+  ct_log "wasm: empty, fetching snapshot $_url"
+  ct_apk lz4 tar
+  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
+    ct_log "wasm: extracted into $_home"
+  else
+    ct_log "WARN wasm: fetch/extract failed ($_url)"
+  fi
+  return 0
+}

haqq/scripts/init.sh

@@ -1,64 +1,65 @@
 #!/bin/sh
+# haqq (haqqd) entrypoint — family C, pure CometBFT (no EL). Thin: sources the
+# shared cometbft-common.sh and orchestrates init + statesync bootstrap + start.
+# Serves CometBFT RPC :26657 (the dshackle/traefik upstream).
+# Genesis replay across ~25 Haqq network upgrades is impractical, so we statesync
+# near head with the current binary.
+set -e
+. /usr/local/bin/cometbft-common.sh
 
-set -e  # Exit on failure
+HOME_DIR="/root/.haqqd"
+CONFIG_DIR="$HOME_DIR/config"
+CHAIN_ID="${CHAINID:-haqq_11235-1}"
+CHAINNAME="${CHAINNAME:-mainnet}"
+GENESIS_URL="${GENESIS_URL:-https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json}"
+ADDRBOOK_URL="${ADDRBOOK_URL:-https://snapshots.polkachu.com/addrbook/haqq/addrbook.json}"
+STATESYNC_RPC="${STATESYNC_RPC:-https://haqq-rpc.polkachu.com:443}"
+MIN_GAS="${MIN_GAS:-0.01hqq}"
+MONIKER="${MONIKER:-rpc-node}"
 
-echo "MONIKER: $MONIKER"
+# Polkachu seeds + official Haqq network seeds for reliable peer discovery
+SEEDS="${SEEDS:-936e27a05f3cfb090507dd810395cbbd8efbffb0@65.109.115.172:24056,f4675b63b8872fb9216efa99428eb5b1fb297393@65.109.104.118:61256,6c9a6fc0e0d94bf303075e46560832e652cffc14@65.108.71.137:24056,7c153a83@peer.haqq.mainnet.dteam.tech:28656}"
 
-CHAINID=${CHAINID:-haqq_11235-1}
-CHAINNAME=${CHAINNAME:-mainnet}
-API=${API:-eth,net,web3}
+# Optional persistent peers for additional bootstrap reliability
+PERSISTENT_PEERS="${PERSISTENT_PEERS:-17e0fd08f04e062d18412808b8bf134e9ad34508@65.109.109.189:10656,e000b992a0066eae9e87c66e0d65229a76647509@198.96.92.242:32656,7c153a83@peer.haqq.mainnet.dteam.tech:28656,235ac65359582357b04754e838496545b3ba6429@haqq-seed-1.allnodes.me:26656,9573a569016378765444095484840d7f543d2800@haqq-seed-2.allnodes.me:26656}"
 
-CONFIG_DIR="/root/.haqqd/config"
+ct_apk curl jq
 
-# Create config directory
-mkdir -p "$CONFIG_DIR"
-
-P2P_STRING="tcp:\\/\\/0\\.0\\.0\\.0\\:${P2P_PORT:-10465}"
-NAT_STRING="${IP}:${P2P_PORT:-10465}"
-
-env
-
-# this goes first because it won't overwrite shit
-apk add curl
-if [ $? -ne 0 ]; then exit 1; fi
-
-if haqqd init ${MONIKER} --chain-id ${CHAINID} --home /root/.haqqd/; then
-    # Define variables
-    GENESIS_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json"    
-    ADDRESSBOOK_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/addrbook.json"
-    
-    # Download config files
-    curl -sL "$GENESIS_URL" -o "$CONFIG_DIR/genesis.json"    
-    curl -sL "$ADDRESSBOOK_URL" -o "$CONFIG_DIR/addressbook.json"
-
-    # somehow it's better to make home static to /root
-    sed -i 's|~/|/root/|g' "$CONFIG_DIR/config.toml"
-    sed -i 's|~/|/root/|g' "$CONFIG_DIR/app.toml"
+if haqqd init "$MONIKER" --chain-id "$CHAIN_ID" --home "$HOME_DIR" >/dev/null 2>&1; then
+  ct_log "fresh init; fetching genesis and addrbook"
+  ct_fetch "$GENESIS_URL" "$CONFIG_DIR/genesis.json" required
+  ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
+  ct_localize_home "$CONFIG_DIR"
+  ct_set_min_gas_prices "$CONFIG_DIR/app.toml" "$MIN_GAS"
 else
-    echo "Already initialized, continuing!" >&2
+  ct_log "already initialized, continuing"
+  # Auto-refresh addrbook from Polkachu when empty on startup
+  if [ ! -s "$CONFIG_DIR/addrbook.json" ]; then
+    ct_log "addrbook.json is empty, refreshing from Polkachu"
+    ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
+  fi
 fi
 
+# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:8545"|}' "$CONFIG_DIR/config.toml"
 
-# apply a port change to the config
-sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$P2P_STRING\"|}" "$CONFIG_DIR/config.toml"
-#sed -i "s/^laddr = \".*\"/laddr = \"$P2P_STRING\"/" "$CONFIG_DIR/config.toml"
-sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"$NAT_STRING\"|}" "$CONFIG_DIR/config.toml"
-
-#sed -i 's/minimum-gas-prices = ""/minimum-gas-prices = "0.01hqq"/g' $CONFIG_DIR/app.toml
-
-sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" $CONFIG_DIR/app.toml
-sed -i -e "s/^indexer *=.*/indexer = \"null\"/" $CONFIG_DIR/config.toml
+ct_patch_p2p             "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-10465}"
+ct_merge_seeds           "$CONFIG_DIR/config.toml" "$SEEDS" "$ADDRBOOK_URL"
+ct_set_persistent_peers  "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
+ct_set_moniker           "$CONFIG_DIR/config.toml" "$MONIKER"
+ct_configure_statesync   "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"
+ct_seed_priv_validator_state "$HOME_DIR"
 
+# Haqq-specific config: enable API endpoints
 sed -i "/^\[json-rpc\]/,/^\[/{s|^address = .*|address = \"0.0.0.0:8545\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^ws-address = .*|ws-address = \"0.0.0.0:8546\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^metrics-address = .*|metrics-address = \"0.0.0.0:6065\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.toml"
 
-# Update moniker if set
-if [ -n "$MONIKER" ] && [ -f "$CONFIG_DIR/config.toml" ]; then
-    sed -i "s/^moniker = \".*\"/moniker = \"$MONIKER\"/" "$CONFIG_DIR/config.toml"
-fi
+# Custom pruning settings for RPC node
+sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" "$CONFIG_DIR/app.toml"
+sed -i -e "s/^indexer *=.*/indexer = \"null\"/" "$CONFIG_DIR/config.toml"
 
-exec haqqd start --chain-id ${CHAINID} $@
+exec haqqd start --chain-id "$CHAIN_ID" --home "$HOME_DIR" $@

linea/erigon3/linea-mainnet-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-mainnet-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-mainnet-erigon3-minimal:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-mainnet-erigon3:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

linea/erigon3/linea-sepolia-erigon3-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-sepolia-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-sepolia-erigon3-minimal:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-sepolia-erigon3:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

linea/mainnet/maru/config.toml.template

@@ -1,10 +1,14 @@
-# Uncomment the below [linea] section for finalized L2 block tag
-[linea]
-contract-address = "0xd19d4B5d358258f05D7B411E21A1460D11B0876F"
-l1-eth-api = { endpoint = "${L1_RPC}" }
-l1-polling-interval = "6 seconds"
-l1-highest-block-tag = "finalized"
-l2-eth-api-endpoint = { endpoint = "${SEQUENCER}" }
+# [linea] finalization provider DISABLED (2026-07-31): Maru CL stuck at slot
+# 6764022 with EL head ~24k behind tip; Maru sent FCU finalized ahead of EL
+# head → Besu -38002 Invalid forkchoice. Maru has no linea.enabled flag —
+# presence of [linea] enables the provider; comment out to disable. Re-enable
+# (uncomment) once EL has caught tip.
+# [linea]
+# contract-address = "0xd19d4B5d358258f05D7B411E21A1460D11B0876F"
+# l1-eth-api = { endpoint = "${L1_RPC}" }
+# l1-polling-interval = "6 seconds"
+# l1-highest-block-tag = "finalized"
+# l2-eth-api-endpoint = { endpoint = "${SEQUENCER}" }
 
 [persistence]
 data-path = "/opt/maru/data"

list-restorable.sh

@@ -13,6 +13,20 @@
 
 dir="$(dirname "$0")"
 source "$dir/volume-utils.sh"
+
+# Get required persistent volume keys (all volumes minus ephemeral minus optional)
+get_required_volume_keys() {
+  local compose_file=$1
+  local key
+  
+  while IFS= read -r key; do
+    [[ -z "$key" ]] && continue
+    # Skip if ephemeral or optional
+    if ! is_ephemeral_volume_key "$key" "$compose_file" && ! is_optional_volume_key "$key" "$compose_file"; then
+      echo "$key"
+    fi
+  done < <(get_volume_keys "$compose_file")
+}
 registry_file="${dir}/compose_registry.json"
 backup_dir="/backup"
 
@@ -115,12 +129,14 @@ while IFS= read -r entry; do
         continue
     fi
     
-    # Check each volume for backup file
+    # Check each required volume for backup file
     all_backups_exist=true
     missing_volumes=()
     backup_info=()
     
-    while IFS= read -r volume; do
+    # Get required persistent volumes (excluding ephemeral and optional)
+    # Use process substitution to avoid subshell issues
+    while IFS= read -r volume < <(get_required_volume_keys "$compose_path"); do
         volume_name="rpc_${volume}"
         # jwt/secrets volumes are regenerated at create-node — never backed up by
         # design, so they must not gate restorability (kept plasma marked

op/erigon/soneium-miniato-sepolia-op-erigon-archive-trace.yml

@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/erigon/soneium-minato-sepolia-op-erigon-archive-trace.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/erigon/soneium-miniato-sepolia-op-erigon-archive-trace.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia-op-erigon \
+# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia-op-erigon \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  soneium-minato-sepolia-op-erigon:
-    image: ${SONEIUM_ERIGON_IMAGE:-testinprod/op-erigon}:${SONEIUM_MINATO_SEPOLIA_ERIGON_VERSION:-v2.61.3-0.10.1}
+  soneium-miniato-sepolia-op-erigon:
+    image: ${SONEIUM_ERIGON_IMAGE:-testinprod/op-erigon}:${SONEIUM_MINIATO_SEPOLIA_ERIGON_VERSION:-v2.61.3-0.10.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -47,28 +47,28 @@ services:
       memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
     user: root
     ports:
-      - 12283:12283
-      - 12283:12283/udp
-      - 32283:32283
-      - 32283:32283/udp
-      - 37283:37283
-      - 37283:37283/udp
+      - 14735:14735
+      - 14735:14735/udp
+      - 34735:34735
+      - 34735:34735/udp
+      - 39735:39735
+      - 39735:39735/udp
     expose:
       - 8545
       - 6060
       - 8551
     entrypoint: [erigon]
     command:
-      - --chain=soneium-minato-sepolia
+      - --chain=soneium-miniato-sepolia
       - --datadir=/root/.local/share/erigon
       - --maxpeers=50
       - --metrics
       - --metrics.addr=0.0.0.0
       - --metrics.port=6060
       - --nat=extip:${IP}
-      - --p2p.allowed-ports=32283
-      - --p2p.allowed-ports=37283
-      - --port=12283
+      - --p2p.allowed-ports=34735
+      - --p2p.allowed-ports=39735
+      - --port=14735
       - --rollup.sequencerhttp=https://rpc.soneium.org
       - --rpc.gascap=6000000000
       - --rpc.returndata.limit=1500000
@@ -87,7 +87,7 @@ services:
     networks:
       - chains
     volumes:
-      - ${SONEIUM_MINATO_SEPOLIA_OP_ERIGON_ARCHIVE_TRACE_DATA:-soneium-minato-sepolia-op-erigon-archive-trace}:/root/.local/share/erigon
+      - ${SONEIUM_MINIATO_SEPOLIA_OP_ERIGON_ARCHIVE_TRACE_DATA:-soneium-miniato-sepolia-op-erigon-archive-trace}:/root/.local/share/erigon
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
     logging: *logging-defaults
@@ -96,41 +96,41 @@ services:
       - prometheus-scrape.port=6060
       - prometheus-scrape.path=/debug/metrics/prometheus
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-erigon
-      - traefik.http.services.soneium-minato-sepolia-op-erigon-archive-trace.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia-op-erigon`) || Path(`/soneium-minato-sepolia-op-erigon/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.rule=Path(`/soneium-minato-sepolia-op-erigon`) || Path(`/soneium-minato-sepolia-op-erigon/`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.middlewares=soneium-minato-sepolia-op-erigon-archive-trace-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-erigon
+      - traefik.http.services.soneium-miniato-sepolia-op-erigon-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia-op-erigon`) || Path(`/soneium-miniato-sepolia-op-erigon/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.rule=Path(`/soneium-miniato-sepolia-op-erigon`) || Path(`/soneium-miniato-sepolia-op-erigon/`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.middlewares=soneium-miniato-sepolia-op-erigon-archive-trace-stripprefix, ipallowlist
     shm_size: 2gb
 
-  soneium-minato-sepolia-op-erigon-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-miniato-sepolia-op-erigon-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
     ports:
-      - 17283:17283
-      - 17283:17283/udp
+      - 19735:19735
+      - 19735:19735/udp
     environment:
       - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
       - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
       - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
       - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
       - OP_NODE_L2_ENGINE_KIND=erigon
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia-op-erigon:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia-op-erigon:8551
       - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
       - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
       - OP_NODE_LOG_LEVEL=info
       - OP_NODE_METRICS_ADDR=0.0.0.0
       - OP_NODE_METRICS_ENABLED=true
       - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-minato-sepolia
+      - OP_NODE_NETWORK=soneium-miniato-sepolia
       - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
       - OP_NODE_P2P_ADVERTISE_IP=${IP}
       - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=17283
-      - OP_NODE_P2P_LISTEN_UDP_PORT=17283
+      - OP_NODE_P2P_LISTEN_TCP_PORT=19735
+      - OP_NODE_P2P_LISTEN_UDP_PORT=19735
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
       - OP_NODE_RPC_PORT=9545
@@ -140,7 +140,7 @@ services:
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      soneium-minato-sepolia-op-erigon:
+      soneium-miniato-sepolia-op-erigon:
         condition: service_started
         restart: true
     networks:
@@ -153,16 +153,16 @@ services:
       - prometheus-scrape.port=7300
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-erigon/node
-      - traefik.http.services.soneium-minato-sepolia-op-erigon-archive-trace-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia-op-erigon/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.rule=PathPrefix(`/soneium-minato-sepolia-op-erigon/node`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.middlewares=soneium-minato-sepolia-op-erigon-archive-trace-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-erigon/node
+      - traefik.http.services.soneium-miniato-sepolia-op-erigon-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia-op-erigon/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.rule=PathPrefix(`/soneium-miniato-sepolia-op-erigon/node`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.middlewares=soneium-miniato-sepolia-op-erigon-archive-trace-node-stripprefix, ipallowlist
 
 volumes:
-  soneium-minato-sepolia-op-erigon-archive-trace:
+  soneium-miniato-sepolia-op-erigon-archive-trace:
 
 x-upstreams:
   - id: $${ID}

op/geth/soneium-miniato-sepolia-op-geth-archive-leveldb-hash.yml

@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-minato-sepolia-op-geth-archive-leveldb-hash.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-miniato-sepolia-op-geth-archive-leveldb-hash.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia-archive \
+# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia-archive \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  soneium-minato-sepolia-archive:
-    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
+  soneium-miniato-sepolia-archive:
+    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINIATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -46,14 +46,14 @@ services:
       nofile: 1048576    # Max open files (for RPC/WS connections)
     user: root
     ports:
-      - 11279:11279
-      - 11279:11279/udp
+      - 13664:13664
+      - 13664:13664/udp
     expose:
       - 8545
       - 6060
       - 8551
     environment:
-      - GETH_OP_NETWORK=soneium-minato-sepolia
+      - GETH_OP_NETWORK=soneium-miniato-sepolia
       - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
       - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.soneium.org
     entrypoint: /bin/sh -c 'exec geth "$@"' --
@@ -66,7 +66,7 @@ services:
       - --metrics.addr=0.0.0.0
       - --metrics.port=6060
       - --nat=extip:${IP}
-      - --port=11279
+      - --port=13664
       - --rpc.gascap=600000000
       - --rpc.txfeecap=0
       - --state.scheme=hash
@@ -89,7 +89,7 @@ services:
     networks:
       - chains
     volumes:
-      - ${SONEIUM_MINATO_SEPOLIA_OP_GETH_ARCHIVE_LEVELDB_HASH_DATA:-soneium-minato-sepolia-op-geth-archive-leveldb-hash}:/data
+      - ${SONEIUM_MINIATO_SEPOLIA_OP_GETH_ARCHIVE_LEVELDB_HASH_DATA:-soneium-miniato-sepolia-op-geth-archive-leveldb-hash}:/data
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
     logging: *logging-defaults
@@ -98,39 +98,39 @@ services:
       - prometheus-scrape.port=6060
       - prometheus-scrape.path=/debug/metrics/prometheus
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-archive
-      - traefik.http.services.soneium-minato-sepolia-op-geth-archive-leveldb-hash.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia-archive`) || Path(`/soneium-minato-sepolia-archive/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.rule=Path(`/soneium-minato-sepolia-archive`) || Path(`/soneium-minato-sepolia-archive/`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.middlewares=soneium-minato-sepolia-op-geth-archive-leveldb-hash-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-archive
+      - traefik.http.services.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia-archive`) || Path(`/soneium-miniato-sepolia-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.rule=Path(`/soneium-miniato-sepolia-archive`) || Path(`/soneium-miniato-sepolia-archive/`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.middlewares=soneium-miniato-sepolia-op-geth-archive-leveldb-hash-stripprefix, ipallowlist
 
-  soneium-minato-sepolia-archive-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-miniato-sepolia-archive-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
     ports:
-      - 16279:16279
-      - 16279:16279/udp
+      - 18664:18664
+      - 18664:18664/udp
     environment:
       - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
       - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
       - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
       - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia-archive:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia-archive:8551
       - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
       - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
       - OP_NODE_LOG_LEVEL=info
       - OP_NODE_METRICS_ADDR=0.0.0.0
       - OP_NODE_METRICS_ENABLED=true
       - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-minato-sepolia
+      - OP_NODE_NETWORK=soneium-miniato-sepolia
       - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
       - OP_NODE_P2P_ADVERTISE_IP=${IP}
       - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=16279
-      - OP_NODE_P2P_LISTEN_UDP_PORT=16279
+      - OP_NODE_P2P_LISTEN_TCP_PORT=18664
+      - OP_NODE_P2P_LISTEN_UDP_PORT=18664
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
       - OP_NODE_RPC_PORT=9545
@@ -140,7 +140,7 @@ services:
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      soneium-minato-sepolia-archive:
+      soneium-miniato-sepolia-archive:
         condition: service_started
         restart: true
     networks:
@@ -153,16 +153,16 @@ services:
       - prometheus-scrape.port=7300
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-archive/node
-      - traefik.http.services.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia-archive/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.rule=PathPrefix(`/soneium-minato-sepolia-archive/node`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.middlewares=soneium-minato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-archive/node
+      - traefik.http.services.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia-archive/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.rule=PathPrefix(`/soneium-miniato-sepolia-archive/node`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.middlewares=soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix, ipallowlist
 
 volumes:
-  soneium-minato-sepolia-op-geth-archive-leveldb-hash:
+  soneium-miniato-sepolia-op-geth-archive-leveldb-hash:
 
 x-upstreams:
   - id: $${ID}

op/geth/soneium-miniato-sepolia-op-geth-pruned-pebble-path.yml

@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-minato-sepolia-op-geth-pruned-pebble-path.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-miniato-sepolia-op-geth-pruned-pebble-path.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia \
+# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  soneium-minato-sepolia:
-    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
+  soneium-miniato-sepolia:
+    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINIATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -46,14 +46,14 @@ services:
       nofile: 1048576    # Max open files (for RPC/WS connections)
     user: root
     ports:
-      - 12166:12166
-      - 12166:12166/udp
+      - 14827:14827
+      - 14827:14827/udp
     expose:
       - 8545
       - 6060
       - 8551
     environment:
-      - GETH_OP_NETWORK=soneium-minato-sepolia
+      - GETH_OP_NETWORK=soneium-miniato-sepolia
       - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
       - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.soneium.org
     entrypoint: /bin/sh -c 'exec geth "$@"' --
@@ -66,7 +66,7 @@ services:
       - --metrics.addr=0.0.0.0
       - --metrics.port=6060
       - --nat=extip:${IP}
-      - --port=12166
+      - --port=14827
       - --rpc.gascap=600000000
       - --rpc.txfeecap=0
       - --state.scheme=path
@@ -89,7 +89,7 @@ services:
     networks:
       - chains
     volumes:
-      - ${SONEIUM_MINATO_SEPOLIA_OP_GETH_PRUNED_PEBBLE_PATH_DATA:-soneium-minato-sepolia-op-geth-pruned-pebble-path}:/data
+      - ${SONEIUM_MINIATO_SEPOLIA_OP_GETH_PRUNED_PEBBLE_PATH_DATA:-soneium-miniato-sepolia-op-geth-pruned-pebble-path}:/data
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
     logging: *logging-defaults
@@ -98,39 +98,39 @@ services:
       - prometheus-scrape.port=6060
       - prometheus-scrape.path=/debug/metrics/prometheus
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-pruned-pebble-path-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia
-      - traefik.http.services.soneium-minato-sepolia-op-geth-pruned-pebble-path.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia`) || Path(`/soneium-minato-sepolia/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.rule=Path(`/soneium-minato-sepolia`) || Path(`/soneium-minato-sepolia/`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.middlewares=soneium-minato-sepolia-op-geth-pruned-pebble-path-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-pruned-pebble-path-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia
+      - traefik.http.services.soneium-miniato-sepolia-op-geth-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia`) || Path(`/soneium-miniato-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.rule=Path(`/soneium-miniato-sepolia`) || Path(`/soneium-miniato-sepolia/`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.middlewares=soneium-miniato-sepolia-op-geth-pruned-pebble-path-stripprefix, ipallowlist
 
-  soneium-minato-sepolia-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-miniato-sepolia-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
     ports:
-      - 17166:17166
-      - 17166:17166/udp
+      - 19827:19827
+      - 19827:19827/udp
     environment:
       - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
       - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
       - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
       - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia:8551
       - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
       - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
       - OP_NODE_LOG_LEVEL=info
       - OP_NODE_METRICS_ADDR=0.0.0.0
       - OP_NODE_METRICS_ENABLED=true
       - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-minato-sepolia
+      - OP_NODE_NETWORK=soneium-miniato-sepolia
       - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
       - OP_NODE_P2P_ADVERTISE_IP=${IP}
       - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=17166
-      - OP_NODE_P2P_LISTEN_UDP_PORT=17166
+      - OP_NODE_P2P_LISTEN_TCP_PORT=19827
+      - OP_NODE_P2P_LISTEN_UDP_PORT=19827
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
       - OP_NODE_RPC_PORT=9545
@@ -140,7 +140,7 @@ services:
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      soneium-minato-sepolia:
+      soneium-miniato-sepolia:
         condition: service_started
         restart: true
     networks:
@@ -153,16 +153,16 @@ services:
       - prometheus-scrape.port=7300
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia/node
-      - traefik.http.services.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.rule=PathPrefix(`/soneium-minato-sepolia/node`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.middlewares=soneium-minato-sepolia-op-geth-pruned-pebble-path-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia/node
+      - traefik.http.services.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.rule=PathPrefix(`/soneium-miniato-sepolia/node`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.middlewares=soneium-miniato-sepolia-op-geth-pruned-pebble-path-node-stripprefix, ipallowlist
 
 volumes:
-  soneium-minato-sepolia-op-geth-pruned-pebble-path:
+  soneium-miniato-sepolia-op-geth-pruned-pebble-path:
 
 x-upstreams:
   - id: $${ID}

op/reth/ink-mainnet-op-reth-pruned-trace--kona.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ink-mainnet:
-    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.3.3}
+    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.4.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

op/reth/soneium-miniato-sepolia-op-reth-archive-trace.yml

@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/reth/soneium-minato-sepolia-op-reth-archive-trace.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/soneium-miniato-sepolia-op-reth-archive-trace.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia-op-reth \
+# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia-op-reth \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  soneium-minato-sepolia-op-reth:
-    image: ${SONEIUM_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${SONEIUM_MINATO_SEPOLIA_RETH_VERSION:-v2.3.3}
+  soneium-miniato-sepolia-op-reth:
+    image: ${SONEIUM_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${SONEIUM_MINIATO_SEPOLIA_RETH_VERSION:-v2.3.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -47,26 +47,26 @@ services:
       memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
     user: root
     ports:
-      - 14829:14829
-      - 14829:14829/udp
+      - 11940:11940
+      - 11940:11940/udp
     expose:
       - 8545
       - 9001
       - 8551
     entrypoint: [op-reth, node]
     command:
-      - --chain=soneium-minato-sepolia
+      - --chain=soneium-miniato-sepolia
       - --datadir=/root/.local/share/reth
       - --discovery.addr=0.0.0.0
-      - --discovery.port=14829
+      - --discovery.port=11940
       - --discovery.v5.addr=0.0.0.0
-      - --discovery.v5.port=14829
-      - --engine.cross-block-cache-size=${SONEIUM_MINATO_SEPOLIA_RETH_STATE_CACHE:-4096}
+      - --discovery.v5.port=11940
+      - --engine.cross-block-cache-size=${SONEIUM_MINIATO_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
       - --nat=extip:${IP}
-      - --port=14829
+      - --port=11940
       - --rollup.sequencer-http=https://rpc.soneium.org
       - --rpc-cache.max-blocks=10000
       - --rpc-cache.max-concurrent-db-requests=2048
@@ -92,7 +92,7 @@ services:
     networks:
       - chains
     volumes:
-      - ${SONEIUM_MINATO_SEPOLIA_OP_RETH_ARCHIVE_TRACE_DATA:-soneium-minato-sepolia-op-reth-archive-trace}:/root/.local/share/reth
+      - ${SONEIUM_MINIATO_SEPOLIA_OP_RETH_ARCHIVE_TRACE_DATA:-soneium-miniato-sepolia-op-reth-archive-trace}:/root/.local/share/reth
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
     logging: *logging-defaults
@@ -101,41 +101,41 @@ services:
       - prometheus-scrape.port=9001
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-reth-archive-trace-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-reth
-      - traefik.http.services.soneium-minato-sepolia-op-reth-archive-trace.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia-op-reth`) || Path(`/soneium-minato-sepolia-op-reth/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace.rule=Path(`/soneium-minato-sepolia-op-reth`) || Path(`/soneium-minato-sepolia-op-reth/`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace.middlewares=soneium-minato-sepolia-op-reth-archive-trace-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-reth-archive-trace-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-reth
+      - traefik.http.services.soneium-miniato-sepolia-op-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia-op-reth`) || Path(`/soneium-miniato-sepolia-op-reth/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace.rule=Path(`/soneium-miniato-sepolia-op-reth`) || Path(`/soneium-miniato-sepolia-op-reth/`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace.middlewares=soneium-miniato-sepolia-op-reth-archive-trace-stripprefix, ipallowlist
     shm_size: 2gb
 
-  soneium-minato-sepolia-op-reth-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-miniato-sepolia-op-reth-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
     ports:
-      - 19829:19829
-      - 19829:19829/udp
+      - 16940:16940
+      - 16940:16940/udp
     environment:
       - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
       - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
       - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
       - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
       - OP_NODE_L2_ENGINE_KIND=reth
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia-op-reth:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia-op-reth:8551
       - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
       - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
       - OP_NODE_LOG_LEVEL=info
       - OP_NODE_METRICS_ADDR=0.0.0.0
       - OP_NODE_METRICS_ENABLED=true
       - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-minato-sepolia
+      - OP_NODE_NETWORK=soneium-miniato-sepolia
       - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
       - OP_NODE_P2P_ADVERTISE_IP=${IP}
       - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=19829
-      - OP_NODE_P2P_LISTEN_UDP_PORT=19829
+      - OP_NODE_P2P_LISTEN_TCP_PORT=16940
+      - OP_NODE_P2P_LISTEN_UDP_PORT=16940
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
       - OP_NODE_RPC_PORT=9545
@@ -145,7 +145,7 @@ services:
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      soneium-minato-sepolia-op-reth:
+      soneium-miniato-sepolia-op-reth:
         condition: service_started
         restart: true
     networks:
@@ -158,16 +158,16 @@ services:
       - prometheus-scrape.port=7300
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-reth/node
-      - traefik.http.services.soneium-minato-sepolia-op-reth-archive-trace-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia-op-reth/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace-node.rule=PathPrefix(`/soneium-minato-sepolia-op-reth/node`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-reth-archive-trace-node.middlewares=soneium-minato-sepolia-op-reth-archive-trace-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-reth/node
+      - traefik.http.services.soneium-miniato-sepolia-op-reth-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia-op-reth/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace-node.rule=PathPrefix(`/soneium-miniato-sepolia-op-reth/node`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-reth-archive-trace-node.middlewares=soneium-miniato-sepolia-op-reth-archive-trace-node-stripprefix, ipallowlist
 
 volumes:
-  soneium-minato-sepolia-op-reth-archive-trace:
+  soneium-miniato-sepolia-op-reth-archive-trace:
 
 x-upstreams:
   - id: $${ID}

op/reth/soneium-miniato-sepolia-op-reth-pruned-trace.yml

@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/reth/soneium-minato-sepolia-op-reth-pruned-trace.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/soneium-miniato-sepolia-op-reth-pruned-trace.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia-op-reth-pruned \
+# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia-op-reth-pruned \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  soneium-minato-sepolia-op-reth-pruned:
-    image: ${SONEIUM_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${SONEIUM_MINATO_SEPOLIA_RETH_VERSION:-v2.3.3}
+  soneium-miniato-sepolia-op-reth-pruned:
+    image: ${SONEIUM_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${SONEIUM_MINIATO_SEPOLIA_RETH_VERSION:-v2.3.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -47,27 +47,27 @@ services:
       memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
     user: root
     ports:
-      - 13724:13724
-      - 13724:13724/udp
+      - 11094:11094
+      - 11094:11094/udp
     expose:
       - 8545
       - 9001
       - 8551
     entrypoint: [op-reth, node]
     command:
-      - --chain=soneium-minato-sepolia
+      - --chain=soneium-miniato-sepolia
       - --datadir=/root/.local/share/reth
       - --discovery.addr=0.0.0.0
-      - --discovery.port=13724
+      - --discovery.port=11094
       - --discovery.v5.addr=0.0.0.0
-      - --discovery.v5.port=13724
-      - --engine.cross-block-cache-size=${SONEIUM_MINATO_SEPOLIA_RETH_STATE_CACHE:-4096}
+      - --discovery.v5.port=11094
+      - --engine.cross-block-cache-size=${SONEIUM_MINIATO_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --full
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001
       - --nat=extip:${IP}
-      - --port=13724
+      - --port=11094
       - --rollup.sequencer-http=https://rpc.soneium.org
       - --rpc-cache.max-blocks=10000
       - --rpc-cache.max-concurrent-db-requests=2048
@@ -93,7 +93,7 @@ services:
     networks:
       - chains
     volumes:
-      - ${SONEIUM_MINATO_SEPOLIA_OP_RETH_PRUNED_TRACE_DATA:-soneium-minato-sepolia-op-reth-pruned-trace}:/root/.local/share/reth
+      - ${SONEIUM_MINIATO_SEPOLIA_OP_RETH_PRUNED_TRACE_DATA:-soneium-miniato-sepolia-op-reth-pruned-trace}:/root/.local/share/reth
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
     logging: *logging-defaults
@@ -102,41 +102,41 @@ services:
       - prometheus-scrape.port=9001
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-reth-pruned-trace-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-reth-pruned
-      - traefik.http.services.soneium-minato-sepolia-op-reth-pruned-trace.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia-op-reth-pruned`) || Path(`/soneium-minato-sepolia-op-reth-pruned/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace.rule=Path(`/soneium-minato-sepolia-op-reth-pruned`) || Path(`/soneium-minato-sepolia-op-reth-pruned/`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace.middlewares=soneium-minato-sepolia-op-reth-pruned-trace-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-reth-pruned-trace-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-reth-pruned
+      - traefik.http.services.soneium-miniato-sepolia-op-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia-op-reth-pruned`) || Path(`/soneium-miniato-sepolia-op-reth-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace.rule=Path(`/soneium-miniato-sepolia-op-reth-pruned`) || Path(`/soneium-miniato-sepolia-op-reth-pruned/`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace.middlewares=soneium-miniato-sepolia-op-reth-pruned-trace-stripprefix, ipallowlist
     shm_size: 2gb
 
-  soneium-minato-sepolia-op-reth-pruned-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-miniato-sepolia-op-reth-pruned-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
     ports:
-      - 18724:18724
-      - 18724:18724/udp
+      - 16094:16094
+      - 16094:16094/udp
     environment:
       - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
       - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
       - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
       - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
       - OP_NODE_L2_ENGINE_KIND=reth
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia-op-reth-pruned:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia-op-reth-pruned:8551
       - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
       - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
       - OP_NODE_LOG_LEVEL=info
       - OP_NODE_METRICS_ADDR=0.0.0.0
       - OP_NODE_METRICS_ENABLED=true
       - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-minato-sepolia
+      - OP_NODE_NETWORK=soneium-miniato-sepolia
       - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
       - OP_NODE_P2P_ADVERTISE_IP=${IP}
       - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=18724
-      - OP_NODE_P2P_LISTEN_UDP_PORT=18724
+      - OP_NODE_P2P_LISTEN_TCP_PORT=16094
+      - OP_NODE_P2P_LISTEN_UDP_PORT=16094
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
       - OP_NODE_RPC_PORT=9545
@@ -146,7 +146,7 @@ services:
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      soneium-minato-sepolia-op-reth-pruned:
+      soneium-miniato-sepolia-op-reth-pruned:
         condition: service_started
         restart: true
     networks:
@@ -159,16 +159,16 @@ services:
       - prometheus-scrape.port=7300
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.soneium-minato-sepolia-op-reth-pruned-trace-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-reth-pruned/node
-      - traefik.http.services.soneium-minato-sepolia-op-reth-pruned-trace-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia-op-reth-pruned/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace-node.rule=PathPrefix(`/soneium-minato-sepolia-op-reth-pruned/node`)}
-      - traefik.http.routers.soneium-minato-sepolia-op-reth-pruned-trace-node.middlewares=soneium-minato-sepolia-op-reth-pruned-trace-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-miniato-sepolia-op-reth-pruned-trace-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-reth-pruned/node
+      - traefik.http.services.soneium-miniato-sepolia-op-reth-pruned-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia-op-reth-pruned/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace-node.rule=PathPrefix(`/soneium-miniato-sepolia-op-reth-pruned/node`)}
+      - traefik.http.routers.soneium-miniato-sepolia-op-reth-pruned-trace-node.middlewares=soneium-miniato-sepolia-op-reth-pruned-trace-node-stripprefix, ipallowlist
 
 volumes:
-  soneium-minato-sepolia-op-reth-pruned-trace:
+  soneium-miniato-sepolia-op-reth-pruned-trace:
 
 x-upstreams:
   - id: $${ID}

op/reth/zircuit-garfield-op-reth-pruned-trace.yml

@@ -106,7 +106,7 @@ services:
     shm_size: 2gb
 
   zircuit-garfield-op-reth-pruned-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${GARFIELD_NODE_VERSION:-v1.19.0}
+    image: ${ZIRCUIT_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${GARFIELD_NODE_VERSION:-v1.19.3}
     user: root
     ports:
       - 18027:18027

reference-rpc-endpoint.json

@@ -3735,6 +3735,89 @@
       "https://humanity-testnet.drpc.org"
     ]
   },
+  "astar": {
+    "protocol": "eth",
+    "id": 592,
+    "block_time_ms": 10000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://rpc.astar.network:8545",
+      "https://astar.drpc.org"
+    ]
+  },
+  "bitlayer": {
+    "protocol": "eth",
+    "id": 200901,
+    "block_time_ms": 3000,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://rpc.bitlayer.org",
+      "https://rpc.bitlayer-rpc.com",
+      "https://rpc.ankr.com/bitlayer",
+      "https://rpc-bitlayer.rockx.com",
+      "https://bitlayer.drpc.org"
+    ]
+  },
+  "bitlayer-testnet": {
+    "protocol": "eth",
+    "id": 200810,
+    "block_time_ms": 3000,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://testnet-rpc.bitlayer.org",
+      "https://testnet-rpc.bitlayer-rpc.com",
+      "https://rpc.ankr.com/bitlayer_testnet",
+      "https://bitlayer-testnet.drpc.org"
+    ]
+  },
+  "etherlink": {
+    "protocol": "eth",
+    "id": 42793,
+    "block_time_ms": 1000,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://node.mainnet.etherlink.com",
+      "https://etherlink.drpc.org"
+    ]
+  },
+  "etherlink-shadownet": {
+    "protocol": "eth",
+    "id": 127823,
+    "block_time_ms": 6000,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://node.shadownet.etherlink.com",
+      "https://etherlink-shadownet.drpc.org"
+    ]
+  },
+  "neo-x": {
+    "protocol": "eth",
+    "id": 47763,
+    "block_time_ms": 9000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://mainnet-1.rpc.banelabs.org",
+      "https://mainnet-2.rpc.banelabs.org",
+      "https://neo-x.drpc.org"
+    ]
+  },
+  "neo-x-testnet": {
+    "protocol": "eth",
+    "id": 12227332,
+    "block_time_ms": 5000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://testnet.rpc.banelabs.org/",
+      "https://neo-x-testnet.drpc.org"
+    ]
+  },
   "core-pigeon": {
     "id": 1114,
     "urls": [

restore-volumes.sh

@@ -168,6 +168,13 @@ while IFS= read -r key; do
     fi
 
     if [ -z "$newest_file" ]; then
+	# Check if this volume is optional or ephemeral - if so, warn and continue
+	if is_ephemeral_volume_key "$key" "$dir/$1.yml" || is_optional_volume_key "$key" "$dir/$1.yml"; then
+		echo "WARN: No backup found for volume 'rpc_$key' (volume is optional/ephemeral) - creating empty volume"
+		# Create empty volume and continue
+		mkdir -p "$data_dir"
+		continue
+	fi
 	echo "Error: No backup found for volume 'rpc_$key'"
 	exit 1
     fi

utils/drpc-edge-regions.tsv

@@ -32,3 +32,4 @@
 72.46.86.0/24	asia-northeast	Tokyo	AS396356-latitude
 72.46.87.0/24	asia-southeast	Singapore	AS396356-latitude
 177.54.154.0/24	asia-southeast	Singapore	AS396356-latitude
+168.119.195.0/24	eu-west2	Falkenstein	AS24940-hetzner

volume-utils.sh

@@ -218,6 +218,22 @@ is_ephemeral_volume_key() {
   return 1
 }
 
+is_optional_volume_key() {
+  local key=$1
+  local compose_file=$2
+
+  if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+    local optional
+    optional=$(yaml2json < "$compose_file" 2>/dev/null | jq -r '.["x-optional-volumes"] // [] | .[]' 2>/dev/null)
+    while IFS= read -r vol; do
+      [[ -z "$vol" ]] && continue
+      [[ "$key" == "$vol" ]] && return 0
+    done <<< "$optional"
+  fi
+
+  return 1
+}
+
 get_volume_keys() {
   local compose_file=$1
   yaml2json < "$compose_file" 2>/dev/null | jq -r '.volumes | keys[]' 2>/dev/null