Add abcore mainnet node profile (chain-id 36888)

- Add abcore.Dockerfile for geth-fork binary download from ABFoundationGlobal/abcore
- Add scripts/init.sh for geth initialization with genesis.json and config.toml
- Add generated compose file abcore-mainnet-geth-pruned-pebble-path.yml
- Update compose_registry.json with new entry

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

abcore/abcore.Dockerfile

@@ -0,0 +1,25 @@
+FROM rockylinux:9
+
+COPY ./scripts/init.sh /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh
+
+ARG ABCORE_MAINNET_GETH_VERSION
+
+# Download and verify the geth binary from GitHub releases
+RUN set -eu; \
+    VERSION="${ABCORE_MAINNET_GETH_VERSION}"; \
+    BINARY="geth-${VERSION}"; \
+    URL="https://github.com/ABFoundationGlobal/abcore/releases/download/${VERSION}/${BINARY}"; \
+    SHA256_URL="${URL}.sha256"; \
+    echo "abcore: downloading geth binary from ${URL}"; \
+    curl -fsSL "${URL}" -o "/tmp/${BINARY}"; \
+    echo "abcore: downloading sha256 checksum from ${SHA256_URL}"; \
+    curl -fsSL "${SHA256_URL}" -o "/tmp/${BINARY}.sha256"; \
+    cd /tmp; \
+    sha256sum -c "${BINARY}.sha256" || (echo "abcore: SHA256 verification failed for ${BINARY}" >&2 && exit 1); \
+    chmod +x "${BINARY}"; \
+    mkdir -p /abcore/bin; \
+    mv "${BINARY}" /abcore/bin/geth; \
+    rm -f "${BINARY}" "${BINARY}.sha256"
+
+ENTRYPOINT [ "init.sh" ]

abcore/geth/abcore-mainnet-geth-pruned-pebble-path.yml

@@ -0,0 +1,154 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+# ABFoundationGlobal/abcore geth-fork client
+# Distributed as release binaries from https://github.com/ABFoundationGlobal/abcore/releases
+# Version: v1.13.15-abcore-1.2
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abcore/geth/abcore-mainnet-geth-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abcore-mainnet-geth \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abcore-mainnet-geth:
+    build:
+      context: ./abcore
+      dockerfile: abcore.Dockerfile
+      args:
+        ABCORE_MAINNET_GETH_VERSION: ${ABCORE_MAINNET_GETH_VERSION:-}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13430:13430
+      - 13430:13430/udp
+    expose:
+      - 8545
+      - 6060
+    environment:
+      - CHAIN_NAME=mainnet
+    entrypoint: [/usr/local/bin/init.sh]
+    command:
+      - --config /config/config.toml
+      - --datadir=/root/.ethereum
+      - --db.engine=pebble
+      - --gcmode=full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,debug,admin,txpool,engine
+      - --http.port=8545
+      - --http.vhosts=*
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --networkid=36888
+      - --port=13430
+      - --rpc.gascap=600000000
+      - --rpc.txfeecap=0
+      - --state.scheme=path
+      - --syncmode=full
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=eth,net,web3,debug,admin,txpool,engine
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABCORE_MAINNET_GETH_PRUNED_PEBBLE_PATH_DATA:-abcore-mainnet-geth-pruned-pebble-path}:/root/.ethereum
+      - ./abcore/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.abcore-mainnet-geth-pruned-pebble-path-stripprefix.stripprefix.prefixes=/abcore-mainnet-geth
+      - traefik.http.services.abcore-mainnet-geth-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/abcore-mainnet-geth`) || Path(`/abcore-mainnet-geth/`))}
+      - ${NO_SSL:+traefik.http.routers.abcore-mainnet-geth-pruned-pebble-path.rule=Path(`/abcore-mainnet-geth`) || Path(`/abcore-mainnet-geth/`)}
+      - traefik.http.routers.abcore-mainnet-geth-pruned-pebble-path.middlewares=abcore-mainnet-geth-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  abcore-mainnet-geth-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abcore
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

abcore/mainnet/config.toml

@@ -1,26 +1,8 @@
 [Eth]
 NetworkId = 36888
 SyncMode = "snap"
-EthDiscoveryURLs = []
-SnapDiscoveryURLs = []
 NoPruning = false
 NoPrefetch = false
-TxLookupLimit = 0
-TransactionHistory = 0
-StateHistory = 90000
-LightPeers = 100
-DatabaseCache = 512
-DatabaseFreezer = ""
-TrieCleanCache = 154
-TrieDirtyCache = 256
-TrieTimeout = 3600000000000
-SnapshotCache = 102
-Preimages = true
-FilterLogCacheSize = 32
-EnablePreimageRecording = false
-RPCGasCap = 50000000
-RPCEVMTimeout = 5000000000
-RPCTxFeeCap = 10000.0
 
 [Eth.Miner]
 GasFloor = 0
@@ -29,74 +11,23 @@ GasPrice = 50000000000000
 Recommit = 2000000000
 NewPayloadTimeout = 2000000000
 
-[Eth.TxPool]
-Locals = []
-NoLocals = true
-Journal = "transactions.rlp"
-Rejournal = 3600000000000
-PriceLimit = 50000000000000
-PriceBump = 10
-AccountSlots = 65536
-GlobalSlots = 1048576
-AccountQueue = 65536
-GlobalQueue = 1048576
-Lifetime = 10800000000000
-
-[Eth.BlobPool]
-Datadir = "blobpool"
-Datacap = 10737418240
-PriceBump = 100
-
-[Eth.GPO]
-Blocks = 20
-Percentile = 60
-MaxHeaderHistory = 1024
-MaxBlockHistory = 1024
-MaxPrice = 5000000000000000
-IgnorePrice = 5000000000000000
-
 [Node]
-DataDir = "/data"
+DataDir = "/root/.ethereum"
-IPCPath = "geth.ipc"
 HTTPHost = "0.0.0.0"
 HTTPPort = 8545
 HTTPVirtualHosts = ["*"]
-HTTPModules = ["debug", "txpool", "net", "web3", "eth"]
+HTTPModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
-AuthAddr = "127.0.0.1"
-AuthPort = 8551
-AuthVirtualHosts = ["*"]
 WSHost = "0.0.0.0"
 WSPort = 8546
-WSModules = ["debug", "txpool", "net", "web3", "eth"]
+WSModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
-GraphQLVirtualHosts = ["*"]
+WSOrigins = ["*"]
-BatchRequestLimit = 1000
-BatchResponseMaxSize = 25000000
 
 [Node.P2P]
-MaxPeers = 20
+MaxPeers = 50
 NoDiscovery = false
 DiscoveryV4 = true
-BootstrapNodes = ["enode://3965529bc8c043ead2fa9d4f235c50b35e3eda45284654a51ddc140ae4a78c8e919cf6a8645e2f48f3089cb579d7d7e90de75544e2faa7ad5300a2c3990a7e5b@54.150.187.191:33333","enode://30cf5e0262b3c1a430183de31063944a6d0164f5ab9c052df942c0f53a635c14b0cea1bcc3b989dbf2297d5939f93165fc8fc817e398fb6b9487fb39a5f342ee@57.182.215.62:33333","enode://ebbb5b7bfb13fb783412e0cc77d390455a4ce7af26c4a129ce4af3e0a91c4ad83ccd84aa85e8bccd50d6d912b2efab4f04f49b57ffcbae03886fbe1c659f98d5@13.159.65.214:33333","enode://0b0bdeff5720854e600025bdea7efb85dd0441e156d5ec32342e6ce192e396b5088cb8427dcdfc6f661632400078960acc9627eaeffc516803e1b4108f184e85@13.112.116.187:33333","enode://12c5dc3ce362f5303b04e426e1ffa1bcad3d09996c95a4fe132edee222b06652f2a3ee0a3b4423a38084767e7fd349177ec4c4f0c9624b3183df3573d08f14be@57.182.84.6:33333"]
-StaticNodes = []
-TrustedNodes = []
 ListenAddr = ":33333"
-DiscAddr = ""
-EnableMsgEvents = false
-
-[Node.HTTPTimeouts]
-ReadTimeout = 30000000000
-ReadHeaderTimeout = 30000000000
-WriteTimeout = 30000000000
-IdleTimeout = 120000000000
 
 [Metrics]
 HTTP = "127.0.0.1"
 Port = 6060
-InfluxDBEndpoint = "http://localhost:8386"
-InfluxDBDatabase = "geth"
-InfluxDBUsername = "test"
-InfluxDBPassword = "test"
-InfluxDBTags = "host=localhost"
-InfluxDBToken = "test"
-InfluxDBBucket = "geth"
-InfluxDBOrganization = "geth"

abcore/scripts/init.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+set -e  # Exit on failure
+
+GETH_DATA_DIR="/root/.ethereum"
+CONFIG_FILE="/config/config.toml"
+GENESIS_FILE="/config/genesis.json"
+
+# Initialize geth from genesis if data directory is empty
+if [ -z "$(ls -A "$GETH_DATA_DIR")" ]; then
+    echo "abcore: data directory is empty, initializing from genesis..."
+    if [ -f "$GENESIS_FILE" ]; then
+        /abcore/bin/geth init --datadir "$GETH_DATA_DIR" "$GENESIS_FILE"
+    else
+        echo "abcore: genesis file not found at $GENESIS_FILE" >&2
+        exit 1
+    fi
+else
+    echo "abcore: data directory not empty, continuing..."
+fi
+
+exec /abcore/bin/geth --config "$CONFIG_FILE" --datadir "$GETH_DATA_DIR" "$@"

avalanche/fuji/pruned/C/config.json

@@ -1,4 +1,6 @@
 {
     "rpc-gas-cap": 2500000000,
-    "eth-rpc-gas-limit": 2500000000
+    "eth-rpc-gas-limit": 2500000000,
+    "state-sync-enabled": true,
+    "state-sync-skip-resume": true
 }

avalanche/go/avalanche-fuji-go-archive-leveldb.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji-archive:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

avalanche/go/avalanche-fuji-go-pruned-leveldb.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

avalanche/mainnet/prune/C/config.json

@@ -1,23 +1,6 @@
 {
-    "snowman-api-enabled": false,
-    "coreth-admin-api-enabled": false,
-    "net-api-enabled": true,
     "rpc-gas-cap": 2500000000,
-    "rpc-tx-fee-cap": 100,
     "eth-rpc-gas-limit": 2500000000,
-    "eth-api-enabled": true,
-    "personal-api-enabled": false,
-    "tx-pool-api-enabled": false,
-    "debug-api-enabled": false,
-    "web3-api-enabled": true,
-    "local-txs-enabled": false,
-    "pruning-enabled": true,
-    "api-max-duration": 0,
-    "api-max-blocks-per-request": 0,
-    "allow-unfinalized-queries": false,
-    "log-level": "info",
-    "state-sync-enabled": false,
-    "state-sync-skip-resume": true,
     "offline-pruning-enabled": true,
     "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
 }

avalanche/mainnet/pruned/C/config.json

@@ -16,6 +16,6 @@
     "api-max-blocks-per-request": 0,
     "allow-unfinalized-queries": false,
     "log-level": "info",
-    "state-sync-enabled": false,
+    "state-sync-enabled": true,
     "state-sync-skip-resume": true
 }

compose_registry.json

@@ -1,4 +1,22 @@
 [
+  {
+    "chain": "mainnet",
+    "client": "geth",
+    "compose_file": "abcore/geth/abcore-mainnet-geth-pruned-pebble-path",
+    "drpc_chain": "abcore",
+    "features": [
+      "path",
+      "pebble"
+    ],
+    "network": "abcore",
+    "node": null,
+    "relay": null,
+    "stack": null,
+    "type": "pruned",
+    "volumes": [
+      "abcore-mainnet-geth-pruned-pebble-path"
+    ]
+  },
   {
     "chain": "mainnet",
     "client": "external-node",
@@ -9672,6 +9690,22 @@
       "starknet-sepolia-pathfinder-pruned"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "tacchaind",
+    "compose_file": "tac/tacchaind/tac-mainnet-tacchaind-archive",
+    "drpc_chain": "tac",
+    "features": [],
+    "network": "tac",
+    "node": "config",
+    "relay": null,
+    "stack": null,
+    "type": "archive",
+    "volumes": [
+      "tac-mainnet-tacchaind-archive",
+      "tac-mainnet-tacchaind-archive_config"
+    ]
+  },
   {
     "chain": "mainnet",
     "client": "tacchaind",
@@ -9688,6 +9722,22 @@
       "tac-mainnet-tacchaind-pruned_config"
     ]
   },
+  {
+    "chain": "spb",
+    "client": "tacchaind",
+    "compose_file": "tac/tacchaind/tac-spb-tacchaind-archive",
+    "drpc_chain": "tac-spb",
+    "features": [],
+    "network": "tac",
+    "node": "config",
+    "relay": null,
+    "stack": null,
+    "type": "archive",
+    "volumes": [
+      "tac-spb-tacchaind-archive",
+      "tac-spb-tacchaind-archive_config"
+    ]
+  },
   {
     "chain": "spb",
     "client": "tacchaind",

cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml

@@ -35,7 +35,7 @@ services:
       dockerfile: cometbft.Dockerfile
       args:
         CL_IMAGE: ${COSMOS_GAIAD_IMAGE:-ghcr.io/cosmos/gaia}
-        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.5.0}
+        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.6.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-hoodi-reth-archive-trace.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_HOODI_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-archive-trace.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_MAINNET_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml

@@ -65,6 +65,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml

@@ -87,6 +87,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-sepolia-reth-archive-trace.yml

@@ -61,6 +61,7 @@ services:
       - --engine.cross-block-cache-size=${ETHEREUM_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml

@@ -62,6 +62,7 @@ services:
       - --engine.memory-block-buffer-target=0
       - --engine.persistence-threshold=0
       - --full
+      - --gpo.ignoreprice=2
       - --max-inbound-peers=50
       - --max-outbound-peers=50
       - --metrics=0.0.0.0:9001

linea/besu/linea-mainnet-besu-pruned-bonsai.yml

@@ -54,6 +54,7 @@ services:
       - 9545
     command:
       - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
       - --bootnodes=enode://069800db9e6e0ec9cadca670994ef1aea2cfd3d88133e63ecadbc1cdbd1a5847b09838ee08d8b5f02a9c32ee13abeb4d4104bb5514e5322c9d7ee19f41ff3e51@3.132.73.210:31002,enode://a8e03a71eab12ec4b47bb6e19169d8e4dc7a58373a2476969bbe463f2dded6003037fa4dd5f71e15027f7fc8d7340956fbbefed67ddd116ac19a7f74da034b61@3.132.73.210:31003,enode://97706526cf79df9d930003644f9156805f6c8bd964fc79e083444f7014ce10c9bdd2c5049e63b58040dca1d4c82ebef970822198cf0714de830cff4111534ff1@18.223.198.165:31004,enode://24e1c654a801975a96b7f54ebd7452ab15777fc635c1db25bdbd4425fdb04e7f4768e9e838a87ab724320a765e41631d5d37758c933ad0e8668693558125c8aa@18.223.198.165:31000,enode://27010891d960f73d272a553f72b6336c6698db3ade98d631f09c764e57674a797be5ebc6829ddbb65ab564f439ebc75215d20aa98b6f351d12ea623e7d139ac3@3.132.73.210:31001,enode://228e1b8a4931e46f383e30721dac21fb8fb4e5e1b32c870e13b25478c82db3dc1cd9e7ceb93d302a766466b55638cc9c5cbfc43aa48fa41ced19baf365951f76@3.1.142.64:31002,enode://c22eb0d40fc3ad5ea710aeddea906567778166bfe18c157955e8c39b23a46c45db18a0fa2ba07f2b64c81178a8c796aec2a29151533920ead06fcdfc6d8d03c6@47.128.192.57:31004,enode://8ce733abe39fd7ae0a278b9893f85c1193c611a3886168690dd843435460f22cc4d61f9e8d0ace7f5905836a665319a31cccdaacdada2acc69972c382ecce7db@3.1.142.64:31003,enode://b7c1b2bed65a855f7a2104aac9a14674dfdf018fdac763415b373b29ce18cdb81d36328ba4e5c9f12629f3a50c3e8f9ee048f22dbdbe93a82813da89c6b81334@51.20.235.126:31004,enode://95270e0550848a72fb141cf27f1c4ea10714edde365b411dc0fa06c81c0f282ce155eb9fa472b6b8bb9ee98395eeaf4c5a7b02a01fe58b37ea98ba152eda4c37@13.50.94.193:31000,enode://72013391755f24f08567b932feeeec4c893c06e0b1fb480890c83bf87fd277ad86a5ab9cb586db9ae9970371a2f8cb0c96f6c9f69045abca0fb801db7f047138@51.20.235.126:31001
       - --data-path=/opt/besu/database
       - --data-storage-format=BONSAI

linea/besu/linea-sepolia-besu-pruned-bonsai.yml

@@ -54,6 +54,7 @@ services:
       - 9545
     command:
       - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
       - --bootnodes=enode://6f20afbe4397e51b717a7c1ad3095e79aee48c835eebd9237a3e8a16951ade1fe0e66e981e30ea269849fcb6ba03d838da37f524fabd2a557474194a2e2604fa@18.221.100.27:31002,enode://ce1e0d8e0500cb5c0ac56bdcdafb2d6320c3a2c5125b5ccf12f5dfc9b47ee74acbcafc32559017613136c9c36a0ce74ba4f83b7fb8244f099f3b15708d9d3129@3.23.75.47:31000,enode://1b026a5eb0ae74300f58987d235ef0e3a550df963345cb3574be3b0b54378bd11f14dfd515a8976f2c2d2826090e9507b8ccc24f896a9ffffffcabcfd996a733@3.129.120.128:31001
       - --data-path=/opt/besu/database
       - --data-storage-format=BONSAI

polygon/bor/polygon-amoy-bor-archive-pebble-path.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   polygon-amoy-archive:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0-private}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

polygon/bor/polygon-amoy-bor-pruned-pebble-path.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   polygon-amoy:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0-private}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_AMOY_BOR_VERSION:-2.10.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

polygon/bor/polygon-mainnet-bor-archive-pebble-path.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   polygon-mainnet-archive:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.9.0}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.10.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

polygon/bor/polygon-mainnet-bor-pruned-pebble-path.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   polygon-mainnet:
-    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.9.0}
+    image: ${POLYGON_BOR_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_BOR_VERSION:-2.10.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

reference-rpc-endpoint.json

@@ -143,7 +143,8 @@
     "urls": [
       "https://rpc-amoy.polygon.technology",
       "https://polygon-amoy-bor-rpc.publicnode.com",
-      "https://polygon-amoy.drpc.org"
+      "https://polygon-amoy.drpc.org",
+      "https://rpc.satelink.network/rpc/amoy"
     ]
   },
   "arbitrum": {
@@ -157,6 +158,7 @@
       "https://arb1.arbitrum.io/rpc",
       "https://arbitrum-one-rpc.publicnode.com",
       "https://rpcfree.com/arbitrum-rpc",
+      "https://rpc.satelink.network/rpc/arbitrum",
       "https://arbitrum.drpc.org"
     ]
   },
@@ -216,6 +218,7 @@
       "https://bsc-dataseed3.ninicoin.io",
       "https://bsc-dataseed4.ninicoin.io",
       "https://bsc-rpc.publicnode.com",
+      "https://bsc-rpc-public.chainpulse.cc",
       "https://bsc.drpc.org"
     ]
   },
@@ -233,6 +236,7 @@
       "https://data-seed-prebsc-1-s3.bnbchain.org:8545",
       "https://data-seed-prebsc-2-s3.bnbchain.org:8545",
       "https://bsc-testnet-rpc.publicnode.com",
+      "https://bsc-rpc-public.chainpulse.cc/testnet",
       "https://bsc-testnet.drpc.org"
     ]
   },
@@ -305,6 +309,7 @@
       "https://base-rpc.publicnode.com",
       "https://rpcfree.com/base-rpc",
       "https://rpc.baseazul.dev",
+      "https://rpc.satelink.network/rpc/base",
       "https://base.drpc.org"
     ]
   },
@@ -3366,6 +3371,16 @@
       "https://mova.drpc.org"
     ]
   },
+  "mova-mainnet-v2": {
+    "protocol": "eth",
+    "id": 61901,
+    "block_time_ms": 2000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://mova-mainnet-v2.drpc.org"
+    ]
+  },
   "mova-testnet": {
     "protocol": "eth",
     "id": 10323,
@@ -3635,6 +3650,7 @@
     "lagging_lag": 10,
     "syncing_lag": 20,
     "urls": [
+      "https://rpc.pharos.xyz",
       "https://pharos.drpc.org"
     ]
   },
@@ -3720,6 +3736,7 @@
     "lagging_lag": 20,
     "syncing_lag": 40,
     "urls": [
+      "https://humanity-main.g.alchemy.com/public",
       "https://humanity.drpc.org"
     ]
   },
@@ -3818,6 +3835,60 @@
       "https://neo-x-testnet.drpc.org"
     ]
   },
+  "stellar": {
+    "protocol": "stellar",
+    "block_time_ms": 5000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://stellar.drpc.org"
+    ]
+  },
+  "stellar-testnet": {
+    "protocol": "stellar",
+    "block_time_ms": 5000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://stellar-testnet.drpc.org"
+    ]
+  },
+  "celestia": {
+    "protocol": "celestia",
+    "block_time_ms": 6000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://celestia.drpc.org"
+    ]
+  },
+  "celestia-mocha": {
+    "protocol": "celestia",
+    "block_time_ms": 6000,
+    "lagging_lag": 5,
+    "syncing_lag": 10,
+    "urls": [
+      "https://celestia-mocha.drpc.org"
+    ]
+  },
+  "sui": {
+    "protocol": "sui",
+    "block_time_ms": 250,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://sui.drpc.org"
+    ]
+  },
+  "sui-testnet": {
+    "protocol": "sui",
+    "block_time_ms": 250,
+    "lagging_lag": 20,
+    "syncing_lag": 40,
+    "urls": [
+      "https://sui-testnet.drpc.org"
+    ]
+  },
   "core-pigeon": {
     "id": 1114,
     "urls": [

tac/scripts/init.sh

@@ -1,6 +1,8 @@
 #!/bin/sh
-# tacchaind entrypoint — TAC (Cosmos-SDK + embedded EVM). Genesis replay is impractical
+# tacchaind entrypoint — TAC (Cosmos-SDK + embedded EVM). EVM JSON-RPC :8545/:8546
-# (5 gov upgrades), so fresh nodes statesync near head via cometbft-common.sh.
+# is the dshackle/traefik upstream; CometBFT :26657 / gRPC :9090 / REST :1317 are NOT
+# publicly exposed. Genesis replay is impractical (5 gov upgrades), so fresh nodes
+# statesync near head via cometbft-common.sh.
 set -e
 . /usr/local/bin/cometbft-common.sh
 
@@ -12,6 +14,8 @@ STATESYNC_RPC="${STATESYNC_RPC:-https://tacchain-rpc.polkachu.com:443}"
 MIN_GAS="${MIN_GAS:-25000000000utac}"
 API="${API:-eth,net,web3,txpool,debug}"
 MONIKER="${MONIKER:-rpc-node}"
+# Pruning mode: set to "nothing" for archive nodes, "default" for pruned nodes.
+PRUNING="${PRUNING:-default}"
 
 ct_apk curl jq
 
@@ -24,7 +28,10 @@ else
   ct_log "already initialized, continuing"
 fi
 
-# Serve CometBFT RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+# Set pruning mode in app.toml (nothing for archive, default for pruned).
+sed -i -e "s/^pruning *=.*/pruning = \"$PRUNING\"/" "$CONFIG_DIR/app.toml"
+
+# Serve CometBFT RPC on all interfaces (internal only); default is 127.0.0.1.
 sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"
 
 ct_patch_p2p            "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-26656}"
@@ -41,4 +48,4 @@ sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.tom
 
 ct_seed_priv_validator_state "$HOME_DIR"
 
-exec tacchaind start --chain-id="$CHAIN_ID" --pruning=default --json-rpc.enable --home "$HOME_DIR" "$@"
+exec tacchaind start --chain-id="$CHAIN_ID" --json-rpc.enable --home "$HOME_DIR" "$@"

tac/tacchaind.Dockerfile

@@ -1,38 +1,43 @@
-# tacchaind — source build mirroring upstream TacBuild/tacchain Dockerfile (v1.6.0).
+# tacchaind — binary download from GitHub releases (v1.6.0).
+# Downloads pre-built linux-amd64 binary and verifies against checksums.txt.
 ARG VERSION=v1.6.0
 
-FROM golang:1.23.8-alpine3.21 AS go-builder
-
-ARG VERSION
-
-RUN apk add --no-cache \
-    ca-certificates \
-    build-base \
-    git \
-    libusb-dev \
-    linux-headers \
-    eudev-dev
-
-WORKDIR /code
-RUN git clone https://github.com/TacBuild/tacchain.git /code && \
-    cd /code && \
-    git checkout "${VERSION}" && \
-    LEDGER_ENABLED=true make build
-
 FROM alpine:3.21
 
 RUN apk upgrade --no-cache && \
     apk add --no-cache \
     ca-certificates \
-    libusb
+    curl \
+    libusb \
+    sed
+
+# Download binary and checksums
+ARG VERSION
+RUN set -eux; \
+    BINARY_URL="https://github.com/TacBuild/tacchain/releases/download/${VERSION}/tacchaind-linux-amd64" && \
+    CHECKSUMS_URL="https://github.com/TacBuild/tacchain/releases/download/${VERSION}/checksums.txt" && \
+    curl -sL -o /tmp/tacchaind "${BINARY_URL}" && \
+    curl -sL -o /tmp/checksums.txt "${CHECKSUMS_URL}" && \
+    # Verify the binary against checksums.txt (sha256sum format: <hash>  <filename>)
+    cd /tmp && \
+    ExpectedHash=$(grep "tacchaind-linux-amd64$" checksums.txt | awk '{print $1}') && \
+    ActualHash=$(sha256sum tacchaind | awk '{print $1}') && \
+    if [ "$ExpectedHash" != "$ActualHash" ]; then \
+      echo "ERROR: checksum mismatch for tacchaind-linux-amd64" >&2; \
+      echo "  Expected: $ExpectedHash" >&2; \
+      echo "  Actual:   $ActualHash" >&2; \
+      exit 1; \
+    fi && \
+    chmod +x /tmp/tacchaind && \
+    mv /tmp/tacchaind /usr/bin/tacchaind && \
+    rm -f /tmp/checksums.txt
 
-COPY --from=go-builder /code/build/tacchaind /usr/bin/tacchaind
 COPY ./scripts/cometbft-common.sh /usr/local/bin/cometbft-common.sh
 COPY ./scripts/init.sh /usr/local/bin/init.sh
 RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/cometbft-common.sh
 
 WORKDIR /opt
 
-EXPOSE 1317 26656 26657
+EXPOSE 1317 26656 26657 8545 8546
 
 ENTRYPOINT ["init.sh"]

tac/tacchaind/tac-mainnet-tacchaind-archive.yml

@@ -0,0 +1,130 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:tac/tacchaind/tac-mainnet-tacchaind-archive.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/tac-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  tac-mainnet-archive:
+    build:
+      context: ./tac
+      dockerfile: tacchaind.Dockerfile
+      args:
+        VERSION: ${TAC_MAINNET_TACCHAIND_VERSION:-v1.6.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 11030:11030
+      - 11030:11030/udp
+    expose:
+      - 8545
+      - 8546
+      - 6065
+    environment:
+      - API=eth,net,web3,txpool,debug
+      - CHAIN_ID=tacchain_239-1
+      - GENESIS_URL=https://raw.githubusercontent.com/TacBuild/tacchain/refs/heads/main/networks/tacchain_239-1/genesis.json
+      - IP=${IP}
+      - MIN_GAS=25000000000utac
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=11030
+      - PERSISTENT_PEERS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
+      - PRUNING=nothing
+      - SEEDS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
+      - STATESYNC_RPC=https://tacchain-rpc.polkachu.com:443
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${TAC_MAINNET_TACCHAIND_ARCHIVE_DATA:-tac-mainnet-tacchaind-archive}:/root/.tacchaind/data
+      - /slowdisk:/slowdisk
+      - tac-mainnet-tacchaind-archive_config:/root/.tacchaind/config
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6065
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.tac-mainnet-tacchaind-archive-stripprefix.stripprefix.prefixes=/tac-mainnet-archive
+      - traefik.http.services.tac-mainnet-tacchaind-archive.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-archive.rule=Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`)}
+      - traefik.http.routers.tac-mainnet-tacchaind-archive.middlewares=tac-mainnet-tacchaind-archive-stripprefix, ipallowlist
+      - traefik.http.routers.tac-mainnet-tacchaind-archive.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.tac-mainnet-tacchaind-archive-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.tac-mainnet-tacchaind-archive-set-ws-path.replacepath.path=/websocket
+      - traefik.http.services.tac-mainnet-tacchaind-archive-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.tac-mainnet-tacchaind-archive-ws.service=tac-mainnet-tacchaind-archive-ws
+      - traefik.http.routers.tac-mainnet-tacchaind-archive.service=tac-mainnet-tacchaind-archive
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-archive-ws.rule=(Path(`/tac-mainnet-archive`) || Path(`/tac-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.tac-mainnet-tacchaind-archive-ws.middlewares=tac-mainnet-tacchaind-archive-stripprefix, tac-mainnet-tacchaind-archive-set-ws-path, ipallowlist
+
+volumes:
+  tac-mainnet-tacchaind-archive:
+  tac-mainnet-tacchaind-archive_config:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: tac
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

tac/tacchaind/tac-mainnet-tacchaind-pruned.yml

@@ -53,7 +53,8 @@ services:
       - 10283:10283
       - 10283:10283/udp
     expose:
-      - 26657
+      - 8545
+      - 8546
       - 6065
     environment:
       - API=eth,net,web3,txpool,debug
@@ -63,8 +64,9 @@ services:
       - MIN_GAS=25000000000utac
       - MONIKER=d${DOMAIN:-local}
       - P2P_PORT=10283
-      - PERSISTENT_PEERS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,186e207d2c95e94a44ff613770aa269dac876013@65.108.201.240:32156,c4410e765acead36188500ed75d5666aa209c93d@65.108.205.121:32156
+      - PERSISTENT_PEERS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
-      - SEEDS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156
+      - PRUNING=default
+      - SEEDS=68b409519dea2a057d93ab6df436f6d519f13cb8@65.109.61.125:32156,54646e966938882d244a7dfd5aa90deb0cbae102@46.37.123.228:26656,d957eca9e06978956bca65a74d5df13ca858b3ec@209.192.185.53:26656,61bcffa521f20daea439e1560a282a6c6d13382a@136.243.54.160:26656,6224e4d06ace6591af55ffc9e033c1fd8492acf7@40.160.23.137:26656,4594eda1e728c1499801346fd99198e2f7c076dc@3.37.85.69:26656
       - STATESYNC_RPC=https://tacchain-rpc.polkachu.com:443
     restart: unless-stopped
     stop_grace_period: 5m
@@ -81,7 +83,7 @@ services:
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
       - traefik.http.middlewares.tac-mainnet-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-mainnet
-      - traefik.http.services.tac-mainnet-tacchaind-pruned.loadbalancer.server.port=26657
+      - traefik.http.services.tac-mainnet-tacchaind-pruned.loadbalancer.server.port=8545
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.tls.certresolver=myresolver}
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`))}
@@ -90,7 +92,7 @@ services:
       - traefik.http.routers.tac-mainnet-tacchaind-pruned.priority=50   # gets any request that is not GET with UPGRADE header
       - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.priority=100   # answers GET requests first
       - traefik.http.middlewares.tac-mainnet-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
-      - traefik.http.services.tac-mainnet-tacchaind-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.services.tac-mainnet-tacchaind-pruned-ws.loadbalancer.server.port=8546
       - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.service=tac-mainnet-tacchaind-pruned-ws
       - traefik.http.routers.tac-mainnet-tacchaind-pruned.service=tac-mainnet-tacchaind-pruned
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.entrypoints=websecure}

tac/tacchaind/tac-spb-tacchaind-archive.yml

@@ -0,0 +1,129 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:tac/tacchaind/tac-spb-tacchaind-archive.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/tac-spb-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  tac-spb-archive:
+    build:
+      context: ./tac
+      dockerfile: tacchaind.Dockerfile
+      args:
+        VERSION: ${TAC_SPB_TACCHAIND_VERSION:-v1.6.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 11180:11180
+      - 11180:11180/udp
+    expose:
+      - 8545
+      - 8546
+      - 6065
+    environment:
+      - API=eth,net,web3,txpool,debug
+      - CHAIN_ID=tacchain_2391-1
+      - GENESIS_URL=https://raw.githubusercontent.com/TacBuild/tacchain/refs/heads/main/networks/tacchain_2391-1/genesis.json
+      - IP=${IP}
+      - MIN_GAS=25000000000utac
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=11180
+      - PERSISTENT_PEERS=9c32b3b959a2427bd2aa064f8c9a8efebdad4c23@206.217.210.164:45130,04a2152eed9f73dc44779387a870ea6480c41fe7@206.217.210.164:45140,5aaaf8140262d7416ac53abe4e0bd13b0f582168@23.92.177.41:45110,ddb3e8b8f4d051e914686302dafc2a73adf9b0d2@23.92.177.41:45120
+      - PRUNING=nothing
+      - STATESYNC_RPC=https://spb.tendermint.rpc.tac.build
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${TAC_SPB_TACCHAIND_ARCHIVE_DATA:-tac-spb-tacchaind-archive}:/root/.tacchaind/data
+      - /slowdisk:/slowdisk
+      - tac-spb-tacchaind-archive_config:/root/.tacchaind/config
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6065
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.tac-spb-tacchaind-archive-stripprefix.stripprefix.prefixes=/tac-spb-archive
+      - traefik.http.services.tac-spb-tacchaind-archive.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive.rule=Host(`$DOMAIN`) && (Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-archive.rule=Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`)}
+      - traefik.http.routers.tac-spb-tacchaind-archive.middlewares=tac-spb-tacchaind-archive-stripprefix, ipallowlist
+      - traefik.http.routers.tac-spb-tacchaind-archive.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.tac-spb-tacchaind-archive-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.tac-spb-tacchaind-archive-set-ws-path.replacepath.path=/websocket
+      - traefik.http.services.tac-spb-tacchaind-archive-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.tac-spb-tacchaind-archive-ws.service=tac-spb-tacchaind-archive-ws
+      - traefik.http.routers.tac-spb-tacchaind-archive.service=tac-spb-tacchaind-archive
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-archive-ws.rule=(Path(`/tac-spb-archive`) || Path(`/tac-spb-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.tac-spb-tacchaind-archive-ws.middlewares=tac-spb-tacchaind-archive-stripprefix, tac-spb-tacchaind-archive-set-ws-path, ipallowlist
+
+volumes:
+  tac-spb-tacchaind-archive:
+  tac-spb-tacchaind-archive_config:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: tac-spb
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

tac/tacchaind/tac-spb-tacchaind-pruned.yml

@@ -53,7 +53,8 @@ services:
       - 14331:14331
       - 14331:14331/udp
     expose:
-      - 26657
+      - 8545
+      - 8546
       - 6065
     environment:
       - API=eth,net,web3,txpool,debug
@@ -64,6 +65,7 @@ services:
       - MONIKER=d${DOMAIN:-local}
       - P2P_PORT=14331
       - PERSISTENT_PEERS=9c32b3b959a2427bd2aa064f8c9a8efebdad4c23@206.217.210.164:45130,04a2152eed9f73dc44779387a870ea6480c41fe7@206.217.210.164:45140,5aaaf8140262d7416ac53abe4e0bd13b0f582168@23.92.177.41:45110,ddb3e8b8f4d051e914686302dafc2a73adf9b0d2@23.92.177.41:45120
+      - PRUNING=default
       - STATESYNC_RPC=https://spb.tendermint.rpc.tac.build
     restart: unless-stopped
     stop_grace_period: 5m
@@ -80,7 +82,7 @@ services:
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
       - traefik.http.middlewares.tac-spb-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-spb
-      - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=26657
+      - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=8545
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.tls.certresolver=myresolver}
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`))}
@@ -89,7 +91,7 @@ services:
       - traefik.http.routers.tac-spb-tacchaind-pruned.priority=50   # gets any request that is not GET with UPGRADE header
       - traefik.http.routers.tac-spb-tacchaind-pruned-ws.priority=100   # answers GET requests first
       - traefik.http.middlewares.tac-spb-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
-      - traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=8546
       - traefik.http.routers.tac-spb-tacchaind-pruned-ws.service=tac-spb-tacchaind-pruned-ws
       - traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure}

zero-gravity/geth/zero-gravity-aristotle-geth-pruned-pebble-path.yml

@@ -35,7 +35,7 @@ services:
       context: ./zero-gravity
       dockerfile: zerog.Dockerfile
       args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.6}
         ZERO_GRAVITY_CHAIN_SPEC: aristotle
     sysctls:
       # TCP Performance
@@ -118,7 +118,7 @@ services:
       context: ./zero-gravity
       dockerfile: zerog.Dockerfile
       args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.6}
         ZERO_GRAVITY_CHAIN_SPEC: aristotle
     ports:
       - 19914:19914

zero-gravity/geth/zero-gravity-galileo-geth-pruned-pebble-path.yml

@@ -35,7 +35,7 @@ services:
       context: ./zero-gravity
       dockerfile: zerog.Dockerfile
       args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.8}
         ZERO_GRAVITY_CHAIN_SPEC: galileo
     sysctls:
       # TCP Performance
@@ -62,7 +62,7 @@ services:
       - CHAIN_NAME=galileo
     entrypoint: [/usr/local/bin/init.sh, geth]
     command:
-      - --bootnodes=enode://de7b86d8ac452b1413983049c20eafa2ea0851a3219c2cc12649b971c1677bd83fe24c5331e078471e52a94d95e8cde84cb9d866574fec957124e57ac6056699@8.218.88.60:30303
+      - --bootnodes=enode://4c94b9ab893ee17f58505b48b53d6c02d52bd5567e5fc6c028a29ad25ce1d553286a7fe3a6c051ba18c466b196762ab0e92695d6abbaf7f70afcca2e165bca8c@34.82.252.10:30303
       - --config /0g/geth-config.toml
       - --datadir=/root/.ethereum
       - --db.engine=pebble
@@ -118,7 +118,7 @@ services:
       context: ./zero-gravity
       dockerfile: zerog.Dockerfile
       args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.8}
         ZERO_GRAVITY_CHAIN_SPEC: galileo
     ports:
       - 16172:16172
@@ -140,7 +140,7 @@ services:
       - --chaincfg.node-api.logging
       - --home=/root/.0g
       - --p2p.external_address=${IP}:16172
-      - --p2p.seeds=${ZERO_GRAVITY_GALILEO_ZEROG_SEEDS:-85a9b9a1b7fa0969704db2bc37f7c100855a75d9@8.218.88.60:26656}
+      - --p2p.seeds=${ZERO_GRAVITY_GALILEO_ZEROG_SEEDS:-e0750abc061d276894a593c7b671913c14aa4ecc@34.82.252.10:26656}
       - --pruning=default
       - --rpc.laddr=tcp://0.0.0.0:16172
     restart: unless-stopped

zero-gravity/scripts/init.sh

@@ -61,23 +61,41 @@ env
 
 # seems to be the same for all the 0g chains
 
-if [ ! -f "$DATA_DIR/priv_validator_state.json" ]; then
+# $DATA_DIR and $CONFIG_DIR are SEPARATE docker volumes (<node>_zerog and <node>_config),
-    echo "priv_validator_state.json not found in $HOME_DIR. Proceeding with initialization steps..."
+# so the presence of a file in one says nothing about the other. Guard on everything
+# 0gchaind actually needs to boot, and write the copies so the LAST file written is the
+# one that would make a re-run skip.
+#
+# The previous version guarded solely on $DATA_DIR/priv_validator_state.json and copied it
+# BEFORE the two key files. An init interrupted between those copies therefore left the
+# data volume with the guard file and the config volume without the keys, so every later
+# start took the "Already initialized" branch, copied nothing, and 0gchaind panicked:
+#
+#   panic: error calling provider ProvideBlsSigner (node-core/components/signer.go:46):
+#          key file does not exist at path: /root/.0g/config/priv_validator_key.json
+#
+# That state is unrecoverable by restarting - the node wedges permanently. Hit on
+# aristotle @ rpc-de-32 on 2026-08-12 after repeated build failures interrupted its init.
+if [ ! -f "$CONFIG_DIR/priv_validator_key.json" ] || \
+   [ ! -f "$CONFIG_DIR/node_key.json" ] || \
+   [ ! -f "$DATA_DIR/priv_validator_state.json" ]; then
+    echo "0g: node identity incomplete (config keys and/or priv_validator_state.json). Initializing..."
     TMP_DIR=$(mktemp -d)
     # You can add any additional initialization logic here if needed
     if /0g/bin/0gchaind init ${MONIKER} --chaincfg.chain-spec ${CHAIN_SPEC} --home $TMP_DIR; then
         cp -r /0g/0g-home/0gchaind-home/config/* $CONFIG_DIR
-        cp $TMP_DIR/data/priv_validator_state.json $DATA_DIR
+        # Keys first, guard file last: if this is interrupted the next start re-runs
+        # initialization instead of latching into the wedged state described above.
         cp $TMP_DIR/config/node_key.json $CONFIG_DIR
         cp $TMP_DIR/config/priv_validator_key.json $CONFIG_DIR
+        cp $TMP_DIR/data/priv_validator_state.json $DATA_DIR
     else
         echo "Already initialized, continuing!" >&2
     fi
     rm -rf $TMP_DIR # delete tmp dir
 
 else
-    echo "priv_validator_state.json found in $HOME_DIR. Continuing!" >&2
+    echo "0g: node identity complete (config keys + priv_validator_state.json). Continuing!" >&2
-    echo "Already initialized, continuing!" >&2
 fi
 
 exec /0g/bin/0gchaind $@

zero-gravity/zerog.Dockerfile

@@ -8,22 +8,96 @@ RUN chmod +x /usr/local/bin/init.sh
 
 ARG ZERO_GRAVITY_VERSION
 ARG ZERO_GRAVITY_CHAIN_SPEC
-RUN if [ "${ZERO_GRAVITY_CHAIN_SPEC}" = "aristotle" ]; then \
+
-        curl -sL https://github.com/0gfoundation/0gchain-Aristotle/releases/download/${ZERO_GRAVITY_VERSION}/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz -o /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz; \
+# 0G publishes each network from a DIFFERENT repository, and the release-tag format is not
+# consistent within either of them. The asset filename is always "<spec>-v<version>.tar.gz";
+# only the tag varies:
+#
+#   aristotle -> 0gchain-Aristotle   1.0.4 = "1.0.4"      1.0.6 = "v1.0.6"
+#   galileo   -> 0gchain-NG          3.0.3 = "v3.0.3"     3.0.7 = "galileo-v3.0.7"   3.0.8 = "v3.0.8"
+#
+# So the tag cannot be hardcoded. Resolve it by trying the known forms in order and taking
+# the first that actually yields the asset.
+#
+# curl uses -f (fail on HTTP error). Without it a 404 HTML body is written into the .tar.gz
+# and the build dies several layers later at "tar: not in gzip format" -- an error that
+# points nowhere near the real cause. That has cost three separate misdiagnoses.
+#
+# Strip leading 'v' from version if present, to avoid doubled-v (e.g., vv1.0.6 -> v1.0.6)
+RUN set -eu; \
+    VERSION="${ZERO_GRAVITY_VERSION#v}"; \
+    ASSET="${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION}.tar.gz"; \
+    if [ "${ZERO_GRAVITY_CHAIN_SPEC}" = "aristotle" ]; then \
+        REPO="0gfoundation/0gchain-Aristotle"; \
+        TAGS="${VERSION} v${VERSION} ${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION}"; \
     else \
-        curl -sL https://github.com/0gfoundation/0gchain-NG/releases/download/v${ZERO_GRAVITY_VERSION}/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz -o /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz; \
+        REPO="0gfoundation/0gchain-NG"; \
-    fi
+        TAGS="v${VERSION} ${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION} ${VERSION}"; \
-RUN tar -xzf /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}.tar.gz -C /tmp
+    fi; \
-RUN if [ "${ZERO_GRAVITY_CHAIN_SPEC}" = "galileo" ]; then \
+    for TAG in ${TAGS}; do \
-        mv /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}/rpc /0g; \
+        URL="https://github.com/${REPO}/releases/download/${TAG}/${ASSET}"; \
-    else \
+        echo "0g: trying tag '${TAG}' -> ${URL}"; \
-        mkdir -p /0g && \
+        if curl -fsSL "${URL}" -o "/tmp/${ASSET}"; then \
-        cp -a /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}/* /0g/ 2>/dev/null || true; \
+            echo "0g: resolved ${ZERO_GRAVITY_CHAIN_SPEC} ${VERSION} from tag '${TAG}'"; \
-        cp -a /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}/.[^.]* /0g/ 2>/dev/null || true; \
+            break; \
-        rm -rf /tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${ZERO_GRAVITY_VERSION}; \
+        fi; \
+        rm -f "/tmp/${ASSET}"; \
+    done; \
+    if [ ! -s "/tmp/${ASSET}" ]; then \
+        echo "0g: FATAL - no release asset '${ASSET}' found in ${REPO} under any of: ${TAGS}" >&2; \
+        echo "0g: aristotle and galileo are SEPARATE repos on SEPARATE version lines" >&2; \
+        echo "0g: aristotle = 0gchain-Aristotle (1.0.x), galileo = 0gchain-NG (3.0.x)" >&2; \
+        echo "0g: check that version '${VERSION}' exists for '${ZERO_GRAVITY_CHAIN_SPEC}'" >&2; \
+        exit 1; \
     fi
 
-RUN chmod +x /0g/bin/0gchaind
+# Extract by DETECTING the layout rather than assuming one per chain. 0G has shipped
-RUN chmod +x /0g/bin/geth
+# three shapes so far and changed between them without notice:
+#
+#   galileo <= 3.0.3  <root>/{rpc,validator,archive,seed}/bin/ + configs   (168 MB)
+#                     -> binaries duplicated inside every profile dir
+#   galileo >= 3.0.8  <root>/bin/  shared, + <root>/{rpc,...}/ configs      (69 MB)
+#                     -> binaries DEDUPLICATED to the tarball root; rpc/ is configs-only
+#   aristotle 1.0.x   <root>/bin/ + configs, no profile dirs at all
+#
+# So "does <root>/rpc exist" is NOT sufficient: 3.0.8 still has rpc/, it just no longer
+# holds bin/. Take configs from the profile dir when present, then top the binaries up
+# from the shared root bin/ if the profile dir didn't supply them.
+#
+# The old code hardcoded "galileo -> mv <root>/rpc /0g", so 3.0.8 yielded configs but no
+# binaries and the build died two layers later at
+# `chmod: cannot access '/0g/bin/0gchaind'` — an error naming neither the chain, the
+# version, nor the layout. Assert on the binaries here so the NEXT upstream reshuffle
+# reports itself at the point of failure instead.
+RUN set -eu; \
+    VERSION="${ZERO_GRAVITY_VERSION#v}"; \
+    SRC="/tmp/${ZERO_GRAVITY_CHAIN_SPEC}-v${VERSION}"; \
+    tar -xzf "${SRC}.tar.gz" -C /tmp; \
+    mkdir -p /0g; \
+    if [ -d "${SRC}/rpc" ]; then \
+        echo "0g: profile dir found -> ${SRC}/rpc"; \
+        cp -a "${SRC}/rpc/." /0g/; \
+    else \
+        echo "0g: no profile dir -> using tarball root ${SRC}"; \
+        cp -a "${SRC}/." /0g/; \
+    fi; \
+    if [ ! -f /0g/bin/0gchaind ] && [ -d "${SRC}/bin" ]; then \
+        echo "0g: binaries not in the profile dir -> topping up from ${SRC}/bin"; \
+        cp -a "${SRC}/bin" /0g/; \
+    fi; \
+    rm -rf "${SRC}"; \
+    missing=""; \
+    for b in 0gchaind geth; do \
+        [ -f "/0g/bin/${b}" ] || missing="${missing} bin/${b}"; \
+    done; \
+    if [ -n "${missing}" ]; then \
+        echo "0g: FATAL - missing after extraction:${missing}" >&2; \
+        echo "0g: ${ZERO_GRAVITY_CHAIN_SPEC} v${VERSION} tarball layout not recognised." >&2; \
+        echo "0g: known layouts are '<root>/rpc/bin/' (per-profile) and '<root>/bin/' (flat)." >&2; \
+        echo "0g: contents of /0g were:" >&2; \
+        ls -la /0g >&2 || true; \
+        exit 1; \
+    fi; \
+    chmod +x /0g/bin/0gchaind /0g/bin/geth
 
-ENTRYPOINT [ "init.sh" ]
+ENTRYPOINT [ "init.sh" ]