linea-mainnet: disable eth_getProof on pruned geth upstream for rpc-us-40

DRPC gateway probes eth_getProof and marks the upstream 81% unavailable when the pruned geth node returns 'header not found'. This is a false positive - the node is healthy and advancing. Disable eth_getProof on the linea pruned geth upstream to prevent DRPC from marking it unavailable. Mirrors the existing pattern for BSC minimal in rpc-us-41.yaml. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
deploy: regenerate compose from vibe-node main ed4a4cd8a117
2026-06-21 15:13:02 +00:00 · 2026-06-21 10:52:36 +00:00 · 2026-06-21 09:19:43 +00:00 · 2026-06-21 06:52:38 +00:00 · 2026-06-21 06:03:35 +00:00 · 2026-06-21 01:24:43 +00:00
91 changed files with 1179 additions and 129 deletions
--- a/abstract/external-node/abstract-mainnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  abstract-mainnet-archive:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/abstract/external-node/abstract-mainnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  abstract-mainnet:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/abstract/external-node/abstract-testnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-testnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  abstract-testnet-archive:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/abstract/external-node/abstract-testnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-testnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  abstract-testnet:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml
+++ b/arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml
@@ -73,7 +73,7 @@ services:
      - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
      - --node.sequencer=false
      - --node.staker.enable=false
-      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --parent-chain.connection.url=https://arb1.arbitrum.io/rpc
      - --persistent.chain=/root/.arbitrum/apechain-mainnet-archive
      - --persistent.db-engine=pebble
      - --ws.addr=0.0.0.0
--- a/arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml
+++ b/arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml
@@ -73,7 +73,7 @@ services:
      - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
      - --node.sequencer=false
      - --node.staker.enable=false
-      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --parent-chain.connection.url=https://arb1.arbitrum.io/rpc
      - --persistent.chain=/root/.arbitrum/apechain-mainnet
      - --persistent.db-engine=pebble
      - --ws.addr=0.0.0.0
--- a/bsc/bsc/bsc-chapel-bsc-pruned-pebble-path.yml
+++ b/bsc/bsc/bsc-chapel-bsc-pruned-pebble-path.yml
@@ -74,7 +74,7 @@ services:
      - --metrics.port=6060
      - --nat=extip:${IP}
      - --port=12759
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
      - --syncmode=snap
--- a/bsc/bsc/bsc-mainnet-bsc-minimal-pebble-hash.yml
+++ b/bsc/bsc/bsc-mainnet-bsc-minimal-pebble-hash.yml
@@ -80,7 +80,7 @@ services:
      - --metrics.port=6060
      - --nat=extip:${IP}
      - --port=12853
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
      - --syncmode=full
--- a/bsc/bsc/bsc-mainnet-bsc-minimal-pebble-path.yml
+++ b/bsc/bsc/bsc-mainnet-bsc-minimal-pebble-path.yml
@@ -80,7 +80,7 @@ services:
      - --metrics.port=6060
      - --nat=extip:${IP}
      - --port=14596
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
      - --syncmode=snap
--- a/bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path--fireeth.yml
+++ b/bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path--fireeth.yml
@@ -75,7 +75,7 @@ services:
      - --metrics.port=6060
      - --nat=extip:${IP}
      - --port=12037
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
      - --syncmode=full
--- a/bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path.yml
+++ b/bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path.yml
@@ -74,7 +74,7 @@ services:
      - --metrics.port=6060
      - --nat=extip:${IP}
      - --port=12037
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
      - --syncmode=snap
--- a/compose_registry.json
+++ b/compose_registry.json
@@ -1755,6 +1755,21 @@
      "cosmos-mainnet-gaiad-pruned"
    ]
  },
+  {
+    "chain": "mainnet",
+    "client": "cronos",
+    "compose_file": "cronos/cronos/cronos-mainnet-cronos-pruned",
+    "features": [],
+    "network": "cronos",
+    "node": "config",
+    "relay": null,
+    "stack": null,
+    "type": "pruned",
+    "volumes": [
+      "cronos-mainnet-cronos-pruned",
+      "cronos-mainnet-cronos-pruned_config"
+    ]
+  },
  {
    "chain": "zkevm-mainnet",
    "client": "external-node",
@@ -6437,6 +6452,38 @@
      "ink-sepolia-op-reth-pruned-trace"
    ]
  },
+  {
+    "chain": "mainnet",
+    "client": "reth",
+    "compose_file": "op/reth/katana-mainnet-op-reth-archive-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "katana",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "archive",
+    "volumes": [
+      "katana-mainnet-op-reth-archive-trace"
+    ]
+  },
+  {
+    "chain": "mainnet",
+    "client": "reth",
+    "compose_file": "op/reth/katana-mainnet-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "katana",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "katana-mainnet-op-reth-pruned-trace"
+    ]
+  },
  {
    "chain": "mainnet",
    "client": "reth",
@@ -7314,7 +7361,8 @@
    "stack": null,
    "type": "archive",
    "volumes": [
-      "shibarium-mainnet-bor-archive-pebble-path"
+      "shibarium-mainnet-bor-archive-pebble-path",
+      "shibarium-mainnet-heimdall"
    ]
  },
  {
@@ -7331,7 +7379,8 @@
    "stack": null,
    "type": "pruned",
    "volumes": [
-      "shibarium-mainnet-bor-pruned-pebble-path"
+      "shibarium-mainnet-bor-pruned-pebble-path",
+      "shibarium-mainnet-heimdall"
    ]
  },
  {
--- a/core/core/core-buffalo-core-pruned-pebble-path.yml
+++ b/core/core/core-buffalo-core-pruned-pebble-path.yml
@@ -70,7 +70,7 @@ services:
      - --maxpeers=50
      - --nat=extip:${IP}
      - --port=12384
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
      - --syncmode=snap
--- a/core/core/core-mainnet-core-archive-leveldb-hash.yml
+++ b/core/core/core-mainnet-core-archive-leveldb-hash.yml
@@ -70,7 +70,7 @@ services:
      - --maxpeers=50
      - --nat=extip:${IP}
      - --port=14234
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
      - --syncmode=full
--- a/core/core/core-mainnet-core-pruned-leveldb-hash.yml
+++ b/core/core/core-mainnet-core-pruned-leveldb-hash.yml
@@ -70,7 +70,7 @@ services:
      - --maxpeers=50
      - --nat=extip:${IP}
      - --port=11169
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
      - --syncmode=full
--- a/core/core/core-pigeon-core-pruned-pebble-path.yml
+++ b/core/core/core-pigeon-core-pruned-pebble-path.yml
@@ -70,7 +70,7 @@ services:
      - --nat=extip:${IP}
      - --pigeon
      - --port=14478
-      - --rpc.gascap=0
+      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
      - --syncmode=snap
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults

 services:
  cronos-zkevm-mainnet-archive:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults

 services:
  cronos-zkevm-mainnet:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults

 services:
  cronos-zkevm-testnet-archive:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults

 services:
  cronos-zkevm-testnet:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/cronos/cometbft.Dockerfile
+++ b/cronos/cometbft.Dockerfile
@@ -0,0 +1,11 @@
+ARG CRONOS_CRONOS_IMAGE
+ARG CRONOS_CRONOS_VERSION
+FROM ${CRONOS_CRONOS_IMAGE}:${CRONOS_CRONOS_VERSION}
+# Layer the shared CometBFT bootstrap lib + the chain init.sh onto the upstream
+# cronos binary image (alpine-based, has sh+apk; runs nonroot by default — the compose
+# sets user: root so init.sh can apk-add curl and write the /root home).
+USER root
+COPY ./scripts/cometbft-common.sh /usr/local/bin/cometbft-common.sh
+COPY ./scripts/init.sh            /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/cometbft-common.sh
+ENTRYPOINT ["init.sh"]
--- a/cronos/cronos/cronos-mainnet-cronos-pruned.yml
+++ b/cronos/cronos/cronos-mainnet-cronos-pruned.yml
@@ -0,0 +1,125 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:cronos/cronos/cronos-mainnet-cronos-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/cronos-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  cronos-mainnet:
+    build:
+      context: ./cronos
+      dockerfile: cometbft.Dockerfile
+      args:
+        CRONOS_CRONOS_VERSION: ${CRONOS_MAINNET_CRONOS_VERSION:-v1.7.7}
+        CRONOS_CRONOS_IMAGE: ${CRONOS_MAINNET_CRONOS_IMAGE:-ghcr.io/crypto-org-chain/cronos}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 10521:10521
+      - 10521:10521/udp
+    expose:
+      - 8545
+      - 8546
+      - 6066
+      - 26657
+    environment:
+      - API=eth,txpool,net,debug,web3
+      - CHAINID=cronosmainnet_25-1
+      - CHAINNAME=mainnet
+      - IP=${IP}
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=10521
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${CRONOS_MAINNET_CRONOS_PRUNED_DATA:-cronos-mainnet-cronos-pruned}:/root/.cronos/data
+      - /slowdisk:/slowdisk
+      - cronos-mainnet-cronos-pruned_config:/root/.cronos/config
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6066
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.cronos-mainnet-cronos-pruned-stripprefix.stripprefix.prefixes=/cronos-mainnet
+      - traefik.http.services.cronos-mainnet-cronos-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned.rule=Host(`$DOMAIN`) && (Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.cronos-mainnet-cronos-pruned.rule=Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)}
+      - traefik.http.routers.cronos-mainnet-cronos-pruned.middlewares=cronos-mainnet-cronos-pruned-stripprefix, ipallowlist
+      - traefik.http.routers.cronos-mainnet-cronos-pruned.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.cronos-mainnet-cronos-pruned-ws.priority=100   # answers GET requests first
+      - traefik.http.services.cronos-mainnet-cronos-pruned-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.cronos-mainnet-cronos-pruned-ws.service=cronos-mainnet-cronos-pruned-ws
+      - traefik.http.routers.cronos-mainnet-cronos-pruned.service=cronos-mainnet-cronos-pruned
+      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=(Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.cronos-mainnet-cronos-pruned-ws.middlewares=cronos-mainnet-cronos-pruned-stripprefix, ipallowlist
+
+volumes:
+  cronos-mainnet-cronos-pruned:
+  cronos-mainnet-cronos-pruned_config:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: cronos
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/cronos/scripts/cometbft-common.sh
+++ b/cronos/scripts/cometbft-common.sh
@@ -0,0 +1,223 @@
+#!/bin/sh
+# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
+#
+# Source this from a chain-specific init.sh. It encapsulates the operations every
+# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
+# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
+# beacon-kit entrypoint so callers inherit known-good behavior.
+#
+# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
+# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
+# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
+# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
+#
+# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
+# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
+# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
+
+set -e
+
+ct_log() { echo "[cometbft-init] $*"; }
+
+# Ensure curl exists (alpine base images often omit it). Idempotent.
+ct_require_curl() {
+  if ! command -v curl >/dev/null 2>&1; then
+    ct_log "installing curl"
+    apk add --no-cache curl
+  fi
+}
+
+# ct_fetch URL DEST [required]
+#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
+#   otherwise a missing/failed fetch is logged and skipped (returns 0).
+ct_fetch() {
+  _url="$1"; _dest="$2"; _req="${3:-optional}"
+  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
+  if curl -fsSL "$_url" -o "$_dest"; then
+    ct_log "fetched $_url -> $_dest"
+  else
+    if [ "$_req" = required ]; then
+      ct_log "FATAL: failed to fetch required $_url"; exit 1
+    fi
+    ct_log "skip: could not fetch optional $_url"
+  fi
+}
+
+# ct_patch_p2p CONFIG_TOML IP P2P_PORT
+#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
+ct_patch_p2p() {
+  _cfg="$1"; _ip="$2"; _port="$3"
+  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
+  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
+  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
+  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
+}
+
+# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
+#   Merge operator-configured seeds with an optional official seed list (1 entry per
+#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
+ct_merge_seeds() {
+  _cfg="$1"; _seeds="$2"; _url="$3"
+  [ -f "$_cfg" ] || return 0
+  if [ -n "$_url" ]; then
+    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
+    if [ -n "$_official" ]; then
+      ct_log "merging official seeds from $_url"
+      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
+    else
+      ct_log "no official seeds fetched from $_url (continuing with configured)"
+    fi
+  fi
+  if [ -n "$_seeds" ]; then
+    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
+  fi
+}
+
+# ct_set_persistent_peers CONFIG_TOML PEERS
+#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
+#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
+ct_set_persistent_peers() {
+  _cfg="$1"; _peers="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_peers" ] || return 0
+  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
+  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_moniker CONFIG_TOML MONIKER
+ct_set_moniker() {
+  _cfg="$1"; _mon="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
+#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
+ct_set_addrbook() {
+  _dir="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  ct_fetch "$_url" "$_dir/addrbook.json" optional
+}
+
+# ct_write_jwt CONFIG_DIR  [JWT_SRC]
+#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
+#   dir as jwt.hex so the CL can authenticate to the EL engine API.
+ct_write_jwt() {
+  _dir="$1"; _src="${2:-/jwtsecret}"
+  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
+  cat "$_src" > "$_dir/jwt.hex"
+}
+
+# ct_set_rpc_dial_url APP_TOML AUTH_RPC
+#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
+ct_set_rpc_dial_url() {
+  _app="$1"; _rpc="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
+  return 0
+}
+
+# ct_seed_priv_validator_state HOME_DIR
+#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
+#   when one is present in config/). Mirrors the berachain init.sh behavior.
+ct_seed_priv_validator_state() {
+  _home="$1"
+  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
+    mkdir -p "$_home/data"
+    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
+  fi
+  return 0
+}
+
+# ct_apk PKG...
+#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
+ct_apk() {
+  apk add --no-cache "$@"
+}
+
+# ct_localize_home CONFIG_DIR
+#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
+#   paths; the container runs as root with a static home, so make paths absolute.
+ct_localize_home() {
+  _dir="$1"
+  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
+  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
+  return 0
+}
+
+# ct_set_min_gas_prices APP_TOML PRICE
+#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
+#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
+ct_set_min_gas_prices() {
+  _app="$1"; _price="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_price" ] || return 0
+  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
+  return 0
+}
+
+# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
+#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
+#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
+#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
+#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
+#   Requires jq + curl. No-op (logged) if head height can't be fetched.
+ct_configure_statesync() {
+  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
+  [ -f "$_cfg" ] || return 0
+  # NEVER re-arm statesync on a node that already has application state (a restored
+  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
+  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
+  # so application state lives at $HOME/data/application.db.
+  _home=$(dirname "$(dirname "$_cfg")")
+  if [ -e "$_home/data/application.db" ]; then
+    ct_log "statesync: existing data dir, skipping"
+    return 0
+  fi
+  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
+  _primary=$(echo "$_rpc" | cut -d, -f1)
+  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
+  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
+    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
+  fi
+  _trust_h=$((_latest - _offset))
+  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
+  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
+  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
+  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
+  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
+  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
+  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
+  sed -i.bak -E "/^\[statesync\]/,/^\[/{
+    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
+    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
+    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
+    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
+  }" "$_cfg"
+  return 0
+}
+
+# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
+#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
+#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
+#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
+#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
+#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
+#   FULL snapshot restore. Requires lz4 + tar (installed here).
+ct_ensure_wasm() {
+  _home="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
+    return 0   # wasm already present
+  fi
+  ct_log "wasm: empty, fetching snapshot $_url"
+  ct_apk lz4 tar
+  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
+    ct_log "wasm: extracted into $_home"
+  else
+    ct_log "WARN wasm: fetch/extract failed ($_url)"
+  fi
+  return 0
+}
--- a/cronos/scripts/init.sh
+++ b/cronos/scripts/init.sh
@@ -0,0 +1,69 @@
+#!/bin/sh
+
+set -e  # Exit on failure
+
+echo "MONIKER: $MONIKER"
+
+CHAINID=${CHAINID:-cronosmainnet_25-1}
+CHAINNAME=${CHAINNAME:-mainnet}
+API=${API:-eth,txpool,net,debug,web3}
+
+CONFIG_DIR="/root/.cronos/config"
+
+# Create config directory
+mkdir -p "$CONFIG_DIR"
+
+P2P_STRING="tcp:\/\/0\.0\.0\.0\:${P2P_PORT:-10521}"
+NAT_STRING="${IP}:${P2P_PORT:-10521}"
+
+env
+
+# this goes first because it won't overwrite shit
+apk add curl jq
+if [ $? -ne 0 ]; then exit 1; fi
+
+# Source the shared CometBFT helpers
+. /usr/local/bin/cometbft-common.sh
+
+if cronosd init ${MONIKER} --chain-id ${CHAINID} --home /root/.cronos/; then
+    # Define variables
+    GENESIS_URL="https://raw.githubusercontent.com/crypto-org-chain/cronos-mainnet/master/cronosmainnet_25-1/genesis.json"
+    SEEDS="0d5cf1394a1cfde28dc8f023567222abc0f47534@cronos-seed-0.crypto.org:26656,3032073adc06d710dd512240281637c1bd0c8a7b@cronos-seed-1.crypto.org:26656,04f43116b4c6c70054d9c2b7485383df5b1ed1da@cronos-seed-2.crypto.org:26656"
+    
+    # Download config files
+    curl -sL "$GENESIS_URL" -o "$CONFIG_DIR/genesis.json"
+    
+    # somehow it's better to make home static to /root
+    sed -i 's|~/|/root/|g' "$CONFIG_DIR/config.toml"
+    sed -i 's|~/|/root/|g' "$CONFIG_DIR/app.toml"
+else
+    echo "Already initialized, continuing!" >&2
+fi
+
+# Localize home directory paths
+ct_localize_home /root/.cronos/config
+
+# apply a port change to the config
+ct_patch_p2p "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-10521}"
+
+sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" $CONFIG_DIR/app.toml
+sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" $CONFIG_DIR/app.toml
+sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" $CONFIG_DIR/app.toml
+sed -i -e "s/^indexer *=.*/indexer = \"null\"/" $CONFIG_DIR/config.toml
+
+sed -i "/^\[json-rpc\]/,/^\[/{s|^address = .*|address = \"0.0.0.0:8545\"|}" "$CONFIG_DIR/app.toml"
+sed -i "/^\[json-rpc\]/,/^\[/{s|^ws-address = .*|ws-address = \"0.0.0.0:8546\"|}" "$CONFIG_DIR/app.toml"
+sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.toml"
+
+# Set seeds
+ct_set_persistent_peers "$CONFIG_DIR/config.toml" "$SEEDS"
+
+# Configure state sync using official RPC endpoints
+ct_configure_statesync "$CONFIG_DIR/config.toml" "https://rpc-cronos.crypto.org:443,https://cronos-rpc.publicnode.com:443" 2000
+
+# Update moniker if set
+if [ -n "$MONIKER" ] && [ -f "$CONFIG_DIR/config.toml" ]; then
+    ct_set_moniker "$CONFIG_DIR/config.toml" "$MONIKER"
+fi
+
+exec cronosd start --chain-id ${CHAINID} $@
--- a/erigon3.Dockerfile
+++ b/erigon3.Dockerfile
@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1.2
 ARG REPO=https://github.com/erigontech/erigon.git
-ARG VERSION=v3.0.7
+ARG VERSION=v3.4.4
 ARG COMMIT=${COMMIT:-${VERSION}}

 FROM docker.io/library/golang:1.24.1-alpine3.20 AS builder
--- a/ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml
+++ b/ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-hoodi-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml
+++ b/ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-hoodi-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml
+++ b/ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-hoodi-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-mainnet-erigon3-archive-trace.yml
+++ b/ethereum/erigon3/ethereum-mainnet-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-mainnet-erigon3-minimal-trace.yml
+++ b/ethereum/erigon3/ethereum-mainnet-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-mainnet-erigon3-pruned-trace.yml
+++ b/ethereum/erigon3/ethereum-mainnet-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-sepolia-erigon3-archive-trace.yml
+++ b/ethereum/erigon3/ethereum-sepolia-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-sepolia-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-sepolia-erigon3-minimal-trace.yml
+++ b/ethereum/erigon3/ethereum-sepolia-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-sepolia-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-sepolia-erigon3-pruned-trace.yml
+++ b/ethereum/erigon3/ethereum-sepolia-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-sepolia-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.4.2}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-chiado-erigon3-archive-trace.yml
+++ b/gnosis/erigon3/gnosis-chiado-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-chiado-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.4.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-chiado-erigon3-minimal-trace.yml
+++ b/gnosis/erigon3/gnosis-chiado-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-chiado-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.4.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-chiado-erigon3-pruned-trace.yml
+++ b/gnosis/erigon3/gnosis-chiado-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-chiado-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.4.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-mainnet-erigon3-archive-trace.yml
+++ b/gnosis/erigon3/gnosis-mainnet-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-mainnet-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-mainnet-erigon3-minimal-trace.yml
+++ b/gnosis/erigon3/gnosis-mainnet-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-mainnet-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-mainnet-erigon3-pruned-trace.yml
+++ b/gnosis/erigon3/gnosis-mainnet-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-mainnet-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/lens/external-node/lens-mainnet-external-node-archive.yml
+++ b/lens/external-node/lens-mainnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  lens-mainnet-archive:
-    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/lens/external-node/lens-mainnet-external-node-pruned.yml
+++ b/lens/external-node/lens-mainnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  lens-mainnet:
-    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/lens/external-node/lens-testnet-external-node-archive.yml
+++ b/lens/external-node/lens-testnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  lens-testnet-archive:
-    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/lens/external-node/lens-testnet-external-node-pruned.yml
+++ b/lens/external-node/lens-testnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  lens-testnet:
-    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${LENS_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${LENS_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-mainnet-erigon3-archive-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-mainnet-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-mainnet-erigon3-minimal:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-mainnet-erigon3:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.4.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-sepolia-erigon3-archive-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-sepolia-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.4.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-sepolia-erigon3-minimal:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.4.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-sepolia-erigon3:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.4.2}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/main_configs/rpc-us-40.yaml
+++ b/main_configs/rpc-us-40.yaml
@@ -0,0 +1,26 @@
+upstreams:
+  - id: us-40-linea-mainnet-geth
+    labels:
+      provider: local
+    connection:
+      generic:
+        rpc:
+          url: http://linea-mainnet-geth:8545
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: ws://linea-mainnet-geth:8545
+    chain: linea
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        - name: debug_traceBlockByHash
+        # pruned geth lacks the state to serve eth_getProof; the drpc gateway
+        # probes it and marks the whole upstream unavailable on "header not
+        # found" (especially while catching up after a restart).
+        - name: eth_getProof
+      enabled:
+        - name: txpool_content
--- a/morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt.yml
+++ b/morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt.yml
@@ -122,8 +122,8 @@ services:
  morph-mainnet-archive-node:
    image: ${MORPH_MORPH_IMAGE:-ghcr.io/morph-l2/node}:${MORPH_MAINNET_MORPH_VERSION:-0.5.7}
    ports:
-      - 26656:26656
-      - 26656:26656/udp
+      - 16860:26656
+      - 16860:26656/udp
    expose:
      - 26657
      - 26658
--- a/op/geth/xlayer-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/xlayer-mainnet-op-geth-archive-leveldb-hash.yml
@@ -142,7 +142,7 @@ services:
      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
      - OP_NODE_L2_ENGINE_RPC=http://xlayer-mainnet-archive:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=false
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
--- a/op/geth/xlayer-mainnet-op-geth-archive-pebble-hash.yml
+++ b/op/geth/xlayer-mainnet-op-geth-archive-pebble-hash.yml
@@ -142,7 +142,7 @@ services:
      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
      - OP_NODE_L2_ENGINE_RPC=http://xlayer-mainnet-archive:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=false
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
--- a/op/geth/xlayer-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/xlayer-mainnet-op-geth-pruned-pebble-path.yml
@@ -142,7 +142,7 @@ services:
      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
      - OP_NODE_L2_ENGINE_RPC=http://xlayer-mainnet:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=false
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
--- a/op/geth/zircuit-garfield-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/zircuit-garfield-op-geth-archive-leveldb-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-garfield-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.zircuit-garfield-op-geth-archive-leveldb-hash.middlewares=zircuit-garfield-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  zircuit-garfield-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 17296:17296
--- a/op/geth/zircuit-garfield-op-geth-archive-pebble-hash.yml
+++ b/op/geth/zircuit-garfield-op-geth-archive-pebble-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-garfield-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.zircuit-garfield-op-geth-archive-pebble-hash.middlewares=zircuit-garfield-op-geth-archive-pebble-hash-stripprefix, ipallowlist

  zircuit-garfield-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 16723:16723
--- a/op/geth/zircuit-garfield-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/zircuit-garfield-op-geth-pruned-pebble-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-garfield:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.zircuit-garfield-op-geth-pruned-pebble-hash.middlewares=zircuit-garfield-op-geth-pruned-pebble-hash-stripprefix, ipallowlist

  zircuit-garfield-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 17397:17397
--- a/op/geth/zircuit-garfield-op-geth-pruned-pebble-path.yml
+++ b/op/geth/zircuit-garfield-op-geth-pruned-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-garfield:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_GARFIELD_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.zircuit-garfield-op-geth-pruned-pebble-path.middlewares=zircuit-garfield-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  zircuit-garfield-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${GARFIELD_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 15072:15072
--- a/op/geth/zircuit-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/zircuit-mainnet-op-geth-archive-leveldb-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-mainnet-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -108,7 +108,7 @@ services:
      - traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash.middlewares=zircuit-mainnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  zircuit-mainnet-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 19463:19463
--- a/op/geth/zircuit-mainnet-op-geth-archive-pebble-hash.yml
+++ b/op/geth/zircuit-mainnet-op-geth-archive-pebble-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-mainnet-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -108,7 +108,7 @@ services:
      - traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash.middlewares=zircuit-mainnet-op-geth-archive-pebble-hash-stripprefix, ipallowlist

  zircuit-mainnet-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 15588:15588
--- a/op/geth/zircuit-mainnet-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/zircuit-mainnet-op-geth-pruned-pebble-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-mainnet:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -108,7 +108,7 @@ services:
      - traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash.middlewares=zircuit-mainnet-op-geth-pruned-pebble-hash-stripprefix, ipallowlist

  zircuit-mainnet-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 18688:18688
--- a/op/geth/zircuit-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/zircuit-mainnet-op-geth-pruned-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-mainnet:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -108,7 +108,7 @@ services:
      - traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path.middlewares=zircuit-mainnet-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  zircuit-mainnet-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 18359:18359
--- a/op/geth/zircuit-testnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/zircuit-testnet-op-geth-archive-leveldb-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-testnet-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.zircuit-testnet-op-geth-archive-leveldb-hash.middlewares=zircuit-testnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  zircuit-testnet-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 18095:18095
--- a/op/geth/zircuit-testnet-op-geth-archive-pebble-hash.yml
+++ b/op/geth/zircuit-testnet-op-geth-archive-pebble-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-testnet-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.zircuit-testnet-op-geth-archive-pebble-hash.middlewares=zircuit-testnet-op-geth-archive-pebble-hash-stripprefix, ipallowlist

  zircuit-testnet-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 16499:16499
--- a/op/geth/zircuit-testnet-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/zircuit-testnet-op-geth-pruned-pebble-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-testnet:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.zircuit-testnet-op-geth-pruned-pebble-hash.middlewares=zircuit-testnet-op-geth-pruned-pebble-hash-stripprefix, ipallowlist

  zircuit-testnet-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 16357:16357
--- a/op/geth/zircuit-testnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/zircuit-testnet-op-geth-pruned-pebble-path.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-testnet:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_TESTNET_GETH_VERSION:-v1.138.8}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.zircuit-testnet-op-geth-pruned-pebble-path.middlewares=zircuit-testnet-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  zircuit-testnet-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.132.6}
+    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${TESTNET_NODE_VERSION:-v1.138.8}
    user: root
    ports:
      - 17804:17804
--- a/op/lisk/mainnet/genesis.json
+++ b/op/lisk/mainnet/genesis.json
@@ -15318,6 +15318,9 @@
    "regolithTime": 0,
    "shanghaiTime": 0,
    "holoceneTime": 1736445601,
+    "isthmusTime": 1746806401,
+    "jovianTime": 1764691201,
+    "karstTime": 1783526401,
    "istanbulBlock": 0,
    "byzantiumBlock": 0,
    "homesteadBlock": 0,
--- a/op/reth/katana-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/katana-mainnet-op-reth-archive-trace.yml
@@ -0,0 +1,197 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/katana-mainnet-op-reth-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/katana-mainnet-op-reth \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  katana-mainnet-op-reth:
+    image: ${KATANA_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${KATANA_MAINNET_RETH_VERSION:-v2.3.1}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 14265:14265
+      - 14265:14265/udp
+    expose:
+      - 8545
+      - 9001
+      - 8551
+    environment:
+      - KATANA_MAINNET_RETH_STATE_CACHE=4096
+      - KATANA_MAINNET_RETH_VERSION=v2.3.1
+      - KATANA_RETH_IMAGE=us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth
+    entrypoint: [op-reth, node]
+    command:
+      - --chain=/config/genesis.json
+      - --config=/config/reth/reth.toml
+      - --datadir=/root/.local/share/reth
+      - --engine.cross-block-cache-size=${KATANA_MAINNET_RETH_STATE_CACHE:-4096}
+      - --max-inbound-peers=50
+      - --max-outbound-peers=50
+      - --metrics=0.0.0.0:9001
+      - --nat=extip:${IP}
+      - --port=14265
+      - --rollup.sequencer-http=https://rpc.katana.network
+      - --rpc-cache.max-blocks=10000
+      - --rpc-cache.max-concurrent-db-requests=2048
+      - --rpc.gascap=600000000
+      - --rpc.max-blocks-per-filter=0
+      - --rpc.max-connections=50000
+      - --rpc.max-logs-per-response=0
+      - --rpc.max-trace-filter-blocks=10000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${KATANA_MAINNET_OP_RETH_ARCHIVE_TRACE_DATA:-katana-mainnet-op-reth-archive-trace}:/root/.local/share/reth
+      - ./op/katana/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.katana-mainnet-op-reth-archive-trace-stripprefix.stripprefix.prefixes=/katana-mainnet-op-reth
+      - traefik.http.services.katana-mainnet-op-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/katana-mainnet-op-reth`) || Path(`/katana-mainnet-op-reth/`))}
+      - ${NO_SSL:+traefik.http.routers.katana-mainnet-op-reth-archive-trace.rule=Path(`/katana-mainnet-op-reth`) || Path(`/katana-mainnet-op-reth/`)}
+      - traefik.http.routers.katana-mainnet-op-reth-archive-trace.middlewares=katana-mainnet-op-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  katana-mainnet-op-reth-node:
+    image: ${KATANA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${KATANA_MAINNET_NODE_VERSION:-v1.19.0}
+    ports:
+      - 19265:19265
+      - 19265:19265/udp
+    environment:
+      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${KATANA_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_KIND=reth
+      - OP_NODE_L2_ENGINE_RPC=http://katana-mainnet-op-reth:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_OVERRIDE_ISTHMUS=1746806401
+      - OP_NODE_OVERRIDE_JOVIAN=1773066601
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=19265
+      - OP_NODE_P2P_LISTEN_UDP_PORT=19265
+      - OP_NODE_ROLLUP_CONFIG=/config/rollup.json
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=8545
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      - katana-mainnet-op-reth
+    networks:
+      - chains
+    volumes:
+      - ./op/katana/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.katana-mainnet-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/katana-mainnet-op-reth/node
+      - traefik.http.services.katana-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=8547
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/katana-mainnet-op-reth/node`)}
+      - ${NO_SSL:+traefik.http.routers.katana-mainnet-op-reth-archive-trace-node.rule=PathPrefix(`/katana-mainnet-op-reth/node`)}
+      - traefik.http.routers.katana-mainnet-op-reth-archive-trace-node.middlewares=katana-mainnet-op-reth-archive-trace-node-stripprefix, ipallowlist
+
+volumes:
+  katana-mainnet-op-reth-archive-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: katana
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+        - name: eth_maxPriorityFeePerGas
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/op/reth/katana-mainnet-op-reth-pruned-trace.yml
+++ b/op/reth/katana-mainnet-op-reth-pruned-trace.yml
@@ -0,0 +1,198 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/katana-mainnet-op-reth-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/katana-mainnet-op-reth-pruned \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  katana-mainnet-op-reth-pruned:
+    image: ${KATANA_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${KATANA_MAINNET_RETH_VERSION:-v2.3.1}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 13767:13767
+      - 13767:13767/udp
+    expose:
+      - 8545
+      - 9001
+      - 8551
+    environment:
+      - KATANA_MAINNET_RETH_STATE_CACHE=4096
+      - KATANA_MAINNET_RETH_VERSION=v2.3.1
+      - KATANA_RETH_IMAGE=us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth
+    entrypoint: [op-reth, node]
+    command:
+      - --chain=/config/genesis.json
+      - --config=/config/reth/reth.toml
+      - --datadir=/root/.local/share/reth
+      - --engine.cross-block-cache-size=${KATANA_MAINNET_RETH_STATE_CACHE:-4096}
+      - --full
+      - --max-inbound-peers=50
+      - --max-outbound-peers=50
+      - --metrics=0.0.0.0:9001
+      - --nat=extip:${IP}
+      - --port=13767
+      - --rollup.sequencer-http=https://rpc.katana.network
+      - --rpc-cache.max-blocks=10000
+      - --rpc-cache.max-concurrent-db-requests=2048
+      - --rpc.gascap=600000000
+      - --rpc.max-blocks-per-filter=0
+      - --rpc.max-connections=50000
+      - --rpc.max-logs-per-response=0
+      - --rpc.max-trace-filter-blocks=10000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${KATANA_MAINNET_OP_RETH_PRUNED_TRACE_DATA:-katana-mainnet-op-reth-pruned-trace}:/root/.local/share/reth
+      - ./op/katana/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.katana-mainnet-op-reth-pruned-trace-stripprefix.stripprefix.prefixes=/katana-mainnet-op-reth-pruned
+      - traefik.http.services.katana-mainnet-op-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/katana-mainnet-op-reth-pruned`) || Path(`/katana-mainnet-op-reth-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.katana-mainnet-op-reth-pruned-trace.rule=Path(`/katana-mainnet-op-reth-pruned`) || Path(`/katana-mainnet-op-reth-pruned/`)}
+      - traefik.http.routers.katana-mainnet-op-reth-pruned-trace.middlewares=katana-mainnet-op-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  katana-mainnet-op-reth-pruned-node:
+    image: ${KATANA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${KATANA_MAINNET_NODE_VERSION:-v1.19.0}
+    ports:
+      - 18767:18767
+      - 18767:18767/udp
+    environment:
+      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${KATANA_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_KIND=reth
+      - OP_NODE_L2_ENGINE_RPC=http://katana-mainnet-op-reth-pruned:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_OVERRIDE_ISTHMUS=1746806401
+      - OP_NODE_OVERRIDE_JOVIAN=1773066601
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=18767
+      - OP_NODE_P2P_LISTEN_UDP_PORT=18767
+      - OP_NODE_ROLLUP_CONFIG=/config/rollup.json
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=8545
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      - katana-mainnet-op-reth-pruned
+    networks:
+      - chains
+    volumes:
+      - ./op/katana/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.katana-mainnet-op-reth-pruned-trace-node-stripprefix.stripprefix.prefixes=/katana-mainnet-op-reth-pruned/node
+      - traefik.http.services.katana-mainnet-op-reth-pruned-trace-node.loadbalancer.server.port=8547
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-pruned-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-pruned-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.katana-mainnet-op-reth-pruned-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/katana-mainnet-op-reth-pruned/node`)}
+      - ${NO_SSL:+traefik.http.routers.katana-mainnet-op-reth-pruned-trace-node.rule=PathPrefix(`/katana-mainnet-op-reth-pruned/node`)}
+      - traefik.http.routers.katana-mainnet-op-reth-pruned-trace-node.middlewares=katana-mainnet-op-reth-pruned-trace-node-stripprefix, ipallowlist
+
+volumes:
+  katana-mainnet-op-reth-pruned-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: katana
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+        - name: eth_maxPriorityFeePerGas
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/op/reth/xlayer-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/xlayer-mainnet-op-reth-archive-trace.yml
@@ -51,7 +51,7 @@ services:
    logging: *logging-defaults

  xlayer-mainnet-op-reth:
-    image: ${XLAYER_RETH_IMAGE:-xlayer/op-reth}:${XLAYER_MAINNET_RETH_VERSION:-v0.0.4.1}
+    image: ${XLAYER_RETH_IMAGE:-xlayer/xlayer-reth}:${XLAYER_MAINNET_RETH_VERSION:-v0.0.5.1}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -148,7 +148,7 @@ services:
      - OP_NODE_L2_ENGINE_KIND=reth
      - OP_NODE_L2_ENGINE_RPC=http://xlayer-mainnet-op-reth:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=false
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
--- a/op/reth/xlayer-testnet-op-reth-archive-trace.yml
+++ b/op/reth/xlayer-testnet-op-reth-archive-trace.yml
@@ -51,7 +51,7 @@ services:
    logging: *logging-defaults

  xlayer-testnet-op-reth:
-    image: ${XLAYER_RETH_IMAGE:-xlayer/op-reth}:${XLAYER_TESTNET_RETH_VERSION:-v0.0.4.1}
+    image: ${XLAYER_RETH_IMAGE:-xlayer/xlayer-reth}:${XLAYER_TESTNET_RETH_VERSION:-v0.0.5.1}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/shibarium/bor.Dockerfile
+++ b/shibarium/bor.Dockerfile
@@ -0,0 +1,33 @@
+# Shibarium bor execution client — BUILT FROM SOURCE.
+#
+# shibaone publishes NO bor docker image (and vanilla 0xpolygon/bor is the WRONG
+# fork — Polygon, chainId 137). We mirror the upstream shibaone/bor Dockerfile
+# (`make bor` -> build/bin/bor) but clone the pinned tag so the image is
+# self-contained. Running `bor server --chain=shibarium` self-configures the
+# shibarium genesis (builder/files/genesis-shibarium.json, chainId 109) and the
+# bootnodes bundled in builder/files/config.toml.
+#
+# Build args:
+#   BOR_REPO     - bor source repo   (default: https://github.com/shibaone/bor)
+#   BOR_VERSION  - bor version tag   (passed by the template, e.g. v1.3.9-bone)
+
+ARG BOR_REPO=https://github.com/shibaone/bor
+ARG BOR_VERSION=v1.3.9-bone
+
+FROM golang:1.22.1
+
+ARG BOR_REPO
+ARG BOR_VERSION
+
+RUN apt-get update -y && apt-get upgrade -y \
+    && apt-get install -y --no-install-recommends build-essential git ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /var/lib/bor
+RUN git clone --depth 1 --branch ${BOR_VERSION} ${BOR_REPO} . \
+    && make bor \
+    && cp build/bin/bor /usr/bin/
+
+RUN mkdir -p /root/.bor
+EXPOSE 8545 8546 8547 30303 30303/udp
+ENTRYPOINT ["bor"]
--- a/shibarium/bor/shibarium-mainnet-bor-archive-pebble-path.yml
+++ b/shibarium/bor/shibarium-mainnet-bor-archive-pebble-path.yml
@@ -30,7 +30,12 @@ x-logging-defaults: &logging-defaults

 services:
  shibarium-mainnet-archive:
-    image: ${SHIBARIUM_BOR_IMAGE:-0xpolygon/bor}:${SHIBARIUM_MAINNET_BOR_VERSION:-}
+    build:
+      context: ./shibarium
+      dockerfile: bor.Dockerfile
+      args:
+        BOR_REPO: ${SHIBARIUM_MAINNET_BOR_REPO:-https://github.com/shibaone/bor}
+        BOR_VERSION: ${SHIBARIUM_MAINNET_BOR_VERSION:-v1.3.9-bone}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -55,10 +60,9 @@ services:
    entrypoint: [bor, server]
    command:
      - --bor.heimdall=http://shibarium-mainnet-node:1317
-      - --chain=mainnet
+      - --chain=shibarium
      - --datadir=/root/.bor/
      - --db.engine=pebble
-      - --discovery.dns=
      - --gcmode=archive
      - --maxpeers=50
      - --metrics
@@ -105,8 +109,45 @@ services:
      - ${NO_SSL:+traefik.http.routers.shibarium-mainnet-bor-archive-pebble-path.rule=Path(`/shibarium-mainnet-archive`) || Path(`/shibarium-mainnet-archive/`)}
      - traefik.http.routers.shibarium-mainnet-bor-archive-pebble-path.middlewares=shibarium-mainnet-bor-archive-pebble-path-stripprefix, ipallowlist

+  shibarium-mainnet-node:
+    build:
+      context: ./shibarium
+      dockerfile: cometbft.Dockerfile
+      args:
+        CL_IMAGE: ${SHIBARIUM_MAINNET_HEIMDALL_IMAGE:-shibaone/heimdall}
+        CL_VERSION: ${SHIBARIUM_MAINNET_HEIMDALL_VERSION:-v1.0.7-bone}
+    user: root
+    expose:
+      - '17212'
+      - '26657'
+      - '1317'
+    environment:
+      - CHAIN_ID=109
+      - GENESIS_URL=https://raw.githubusercontent.com/shibaone/heimdall/v1.0.7-bone/builder/files/genesis-shibarium.json
+      - IP=${IP}
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=17212
+      - PERSISTENT_PEERS=${SHIBARIUM_HEIMDALL_PEERS:-96f333f77d5e2f877d3afe4a3643e4f99949ef5c@44.204.200.100:26656,e6676c16d8a9ec98bbbce8d137a3765632720328@18.136.201.99:26656,8c71c016de039e50e48f74683784054f46bd0a1c@3.99.233.157:26656,fb613910f04f0ae0001d93b70552d4d5c358ad78@63.32.53.219:26656,08c3509327941a593eef258f23ab568c10d28905@52.12.214.141:26656}
+      - SEEDS=${SHIBARIUM_HEIMDALL_SEEDS:-96f333f77d5e2f877d3afe4a3643e4f99949ef5c@44.204.200.100:26656,e6676c16d8a9ec98bbbce8d137a3765632720328@18.136.201.99:26656,8c71c016de039e50e48f74683784054f46bd0a1c@3.99.233.157:26656,fb613910f04f0ae0001d93b70552d4d5c358ad78@63.32.53.219:26656,08c3509327941a593eef258f23ab568c10d28905@52.12.214.141:26656}
+    command:
+      - -c
+      - 'exec heimdalld start --home $${CMT_HOME:-/root/.heimdalld} --chain 109 --rest-server --rest-server.addr=0.0.0.0:1317 --rpc.laddr=tcp://0.0.0.0:26657 --p2p.laddr=tcp://0.0.0.0:17212'
+      - sh
+    restart: unless-stopped
+    networks:
+      - chains
+    volumes:
+      - ${SHIBARIUM_HEIMDALL_DATA:-shibarium-mainnet-heimdall}:/root/.heimdalld
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=26660
+      - prometheus-scrape.path=/metrics
+
 volumes:
  shibarium-mainnet-bor-archive-pebble-path:
+  shibarium-mainnet-heimdall:

 x-upstreams:
  - id: $${ID}
--- a/shibarium/bor/shibarium-mainnet-bor-pruned-pebble-path.yml
+++ b/shibarium/bor/shibarium-mainnet-bor-pruned-pebble-path.yml
@@ -30,7 +30,12 @@ x-logging-defaults: &logging-defaults

 services:
  shibarium-mainnet:
-    image: ${SHIBARIUM_BOR_IMAGE:-0xpolygon/bor}:${SHIBARIUM_MAINNET_BOR_VERSION:-}
+    build:
+      context: ./shibarium
+      dockerfile: bor.Dockerfile
+      args:
+        BOR_REPO: ${SHIBARIUM_MAINNET_BOR_REPO:-https://github.com/shibaone/bor}
+        BOR_VERSION: ${SHIBARIUM_MAINNET_BOR_VERSION:-v1.3.9-bone}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -55,10 +60,9 @@ services:
    entrypoint: [bor, server]
    command:
      - --bor.heimdall=http://shibarium-mainnet-node:1317
-      - --chain=mainnet
+      - --chain=shibarium
      - --datadir=/root/.bor/
      - --db.engine=pebble
-      - --discovery.dns=
      - --gcmode=full
      - --maxpeers=50
      - --metrics
@@ -105,8 +109,45 @@ services:
      - ${NO_SSL:+traefik.http.routers.shibarium-mainnet-bor-pruned-pebble-path.rule=Path(`/shibarium-mainnet`) || Path(`/shibarium-mainnet/`)}
      - traefik.http.routers.shibarium-mainnet-bor-pruned-pebble-path.middlewares=shibarium-mainnet-bor-pruned-pebble-path-stripprefix, ipallowlist

+  shibarium-mainnet-node:
+    build:
+      context: ./shibarium
+      dockerfile: cometbft.Dockerfile
+      args:
+        CL_IMAGE: ${SHIBARIUM_MAINNET_HEIMDALL_IMAGE:-shibaone/heimdall}
+        CL_VERSION: ${SHIBARIUM_MAINNET_HEIMDALL_VERSION:-v1.0.7-bone}
+    user: root
+    expose:
+      - '15154'
+      - '26657'
+      - '1317'
+    environment:
+      - CHAIN_ID=109
+      - GENESIS_URL=https://raw.githubusercontent.com/shibaone/heimdall/v1.0.7-bone/builder/files/genesis-shibarium.json
+      - IP=${IP}
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=15154
+      - PERSISTENT_PEERS=${SHIBARIUM_HEIMDALL_PEERS:-96f333f77d5e2f877d3afe4a3643e4f99949ef5c@44.204.200.100:26656,e6676c16d8a9ec98bbbce8d137a3765632720328@18.136.201.99:26656,8c71c016de039e50e48f74683784054f46bd0a1c@3.99.233.157:26656,fb613910f04f0ae0001d93b70552d4d5c358ad78@63.32.53.219:26656,08c3509327941a593eef258f23ab568c10d28905@52.12.214.141:26656}
+      - SEEDS=${SHIBARIUM_HEIMDALL_SEEDS:-96f333f77d5e2f877d3afe4a3643e4f99949ef5c@44.204.200.100:26656,e6676c16d8a9ec98bbbce8d137a3765632720328@18.136.201.99:26656,8c71c016de039e50e48f74683784054f46bd0a1c@3.99.233.157:26656,fb613910f04f0ae0001d93b70552d4d5c358ad78@63.32.53.219:26656,08c3509327941a593eef258f23ab568c10d28905@52.12.214.141:26656}
+    command:
+      - -c
+      - 'exec heimdalld start --home $${CMT_HOME:-/root/.heimdalld} --chain 109 --rest-server --rest-server.addr=0.0.0.0:1317 --rpc.laddr=tcp://0.0.0.0:26657 --p2p.laddr=tcp://0.0.0.0:15154'
+      - sh
+    restart: unless-stopped
+    networks:
+      - chains
+    volumes:
+      - ${SHIBARIUM_HEIMDALL_DATA:-shibarium-mainnet-heimdall}:/root/.heimdalld
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=26660
+      - prometheus-scrape.path=/metrics
+
 volumes:
  shibarium-mainnet-bor-pruned-pebble-path:
+  shibarium-mainnet-heimdall:

 x-upstreams:
  - id: $${ID}
--- a/shibarium/cometbft.Dockerfile
+++ b/shibarium/cometbft.Dockerfile
@@ -1,25 +1,39 @@
-# Shibarium heimdall node Dockerfile
-# Build from the base heimdall image + copy entrypoint scripts.
-# Uses the standard cometbft-node pattern from vibe-node.
+# Shibarium heimdall consensus node — BUILT FROM SOURCE.
+#
+# shibaone publishes NO heimdall docker image (only source + release .deb config
+# packages), so we cannot `FROM shibaone/heimdall:<tag>` — that tag does not exist
+# on any registry. Mirror the upstream shibaone/heimdall Dockerfile (`make install`)
+# but clone the pinned tag, then layer the vibe-node CometBFT init entrypoint.
 #
 # Build args:
-#   CL_IMAGE     - base heimdall image (default: shibaone/heimdall)
-#   CL_VERSION   - heimdall version tag
+#   CL_REPO     - heimdall source repo  (default: https://github.com/shibaone/heimdall)
+#   CL_VERSION  - heimdall version tag   (passed by the template, e.g. v1.0.7-bone)
 #
-# The entrypoint is init.sh which sources cometbft-common.sh and bootstraps
-# the node before exec'ing heimdalld start.
+# `make install` puts heimdalld + heimdallcli on /go/bin (already on PATH). The
+# entrypoint is init.sh: it sources cometbft-common.sh, runs heimdalld init
+# --chain shibarium, fetches the heimdall-109 genesis from GENESIS_URL, sets the
+# shibarium seeds, then exec's `heimdalld start --rest-server`.

-ARG CL_IMAGE=shibaone/heimdall
+ARG CL_REPO=https://github.com/shibaone/heimdall
 ARG CL_VERSION=v1.0.7-bone

-FROM ${CL_IMAGE}:${CL_VERSION}
+FROM golang:1.22

-# Copy the shared CometBFT helpers and chain-specific entrypoint
+ARG CL_REPO
+ARG CL_VERSION
+
+RUN apt-get update -y && apt-get upgrade -y \
+    && apt-get install -y --no-install-recommends build-essential git curl jq ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /var/lib/heimdall
+RUN git clone --depth 1 --branch ${CL_VERSION} ${CL_REPO} . \
+    && make install
+
+# vibe-node CometBFT bootstrap entrypoint (build context is ./shibarium)
 COPY ./scripts/cometbft-common.sh /usr/local/bin/cometbft-common.sh
 COPY ./scripts/init.sh            /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/cometbft-common.sh

-# Make init.sh executable
-RUN chmod +x /usr/local/bin/init.sh
-
-# Set entrypoint to our init script
+EXPOSE 1317 26656 26657
 ENTRYPOINT ["init.sh"]
--- a/shibarium/scripts/init.sh
+++ b/shibarium/scripts/init.sh
@@ -31,21 +31,39 @@ set -e
 . /usr/local/bin/cometbft-common.sh

 CMT_HOME="${CMT_HOME:-/root/.heimdalld}"
-CHAIN_ID="${CHAIN_ID:-shibarium-mainnet}"
-CHAIN="${CHAIN:-mainnet}"
+CHAIN_ID="${CHAIN_ID:-heimdall-109}"
+CHAIN="${CHAIN:-shibarium}"
 P2P_PORT="${P2P_PORT:-26656}"
 MONIKER="${MONIKER:-d${DOMAIN:-local}}"
+# Shibarium heimdall mainnet seeds (verified from shibaone/node-ansible branch shibarium)
+# These are the persistent peers that match the bor bootnodes
+PERSISTENT_PEERS="${PERSISTENT_PEERS:-96f333f77d5e2f877d3afe4a3643e4f99949ef5c@44.204.200.100:26656,e6676c16d8a9ec98bbbce8d137a3765632720328@18.136.201.99:26656,8c71c016de039e50e48f74683784054f46bd0a1c@3.99.233.157:26656,fb613910f04f0ae0001d93b70552d4d5c358ad78@63.32.53.219:26656,08c3509327941a593eef258f23ab568c10d28905@52.12.214.141:26656}"

 ct_log "Starting heimdalld bootstrap for chain ${CHAIN_ID} (home=${CMT_HOME})"

 # Ensure home dir exists
 mkdir -p "$CMT_HOME/config" "$CMT_HOME/data"

-# Step 1: heimdalld init
-ct_log "Running heimdalld init --home $CMT_HOME --chain $CHAIN"
-heimdalld init --home "$CMT_HOME" --chain "$CHAIN"
+# Self-heal: earlier builds injected `rest_server = true` into config.toml on EVERY
+# boot (non-idempotent), accumulating duplicates until heimdalld died on
+# "toml: key rest_server is already defined". rest_server is not a valid CometBFT
+# config.toml key — REST is enabled by --rest-server in the start command — so strip
+# any previously-injected copies before heimdalld reads the config.
+if [ -f "$CMT_HOME/config/config.toml" ]; then
+  sed -i '/^rest_server = true$/d' "$CMT_HOME/config/config.toml"
+fi

-# Step 2: Fetch genesis if GENESIS_URL is set
+# Step 1: heimdalld init — FIRST BOOT ONLY. Re-initializing an existing home resets
+# node identity/state and re-parses the existing config; guard on config.toml.
+if [ ! -f "$CMT_HOME/config/config.toml" ]; then
+  ct_log "First boot: heimdalld init --home $CMT_HOME --chain $CHAIN"
+  heimdalld init --home "$CMT_HOME" --chain "$CHAIN"
+  sed -i '/^rest_server = true$/d' "$CMT_HOME/config/config.toml" 2>/dev/null || true
+else
+  ct_log "Already initialized — skipping heimdalld init"
+fi
+
+# Step 2: Fetch the shibarium (heimdall-109) genesis if GENESIS_URL is set (idempotent).
 if [ -n "$GENESIS_URL" ]; then
  ct_log "Fetching genesis from $GENESIS_URL"
  ct_fetch "$GENESIS_URL" "$CMT_HOME/config/genesis.json" required
@@ -78,10 +96,10 @@ if [ -f "$CMT_HOME/config/config.toml" ]; then
  sed -i 's|^cors_allowed_origins = .*|cors_allowed_origins = ["*" ]|' "$CMT_HOME/config/config.toml"
  sed -i 's|^cors_allowed_methods = .*|cors_allowed_methods = ["HEAD", "GET", "POST", "OPTIONS"]|' "$CMT_HOME/config/config.toml"
  sed -i 's|^cors_allowed_headers = .*|cors_allowed_headers = ["Origin", "Accept", "Content-Type", "X-Requested-With", "X-Server-Time"]|' "$CMT_HOME/config/config.toml"
-  # Enable REST server in config (though --rest-server flag takes precedence)
-  sed -i 's|^\[rpc\]|[rpc]\nrest_server = true|' "$CMT_HOME/config/config.toml"
-  # Set REST server address
-  sed -i 's|^rest_server_addr = .*|rest_server_addr = "0.0.0.0:1317"|' "$CMT_HOME/config/config.toml"
+  # NOTE: do NOT inject `rest_server` / `rest_server_addr` into config.toml. REST/LCD
+  # is enabled by the --rest-server / --rest-server.addr flags in the start command
+  # below; injecting the key duplicates one heimdalld already defines and crashes it
+  # with "toml: key rest_server is already defined".
 fi

 # Step 9: Seed priv_validator_state if present in config
@@ -89,15 +107,17 @@ ct_seed_priv_validator_state "$CMT_HOME"

 ct_log "Bootstrap complete. Starting heimdalld..."

-# Start heimdalld with REST server enabled
-# --rest-server enables the in-process REST/LCD server
-# --rest-server.addr binds REST to 0.0.0.0:1317
-# --rpc.laddr binds CometBFT RPC to 0.0.0.0:26657
-# --p2p.laddr binds P2P to 0.0.0.0:<P2P_PORT>
+# Start heimdalld with the in-process REST/LCD server enabled.
+# --rest-server  enables the REST/LCD server
+# --laddr        REST/LCD listen address (default tcp://0.0.0.0:1317) — NOT
+#                --rest-server.addr, which this heimdall build rejects as an
+#                "unknown flag".
+# --rpc.laddr    CometBFT RPC listen address (default is 127.0.0.1 — bind 0.0.0.0)
+# --p2p.laddr    P2P listen address on the salted P2P_PORT
 exec heimdalld start \
  --home "$CMT_HOME" \
  --chain "$CHAIN" \
  --rest-server \
-  --rest-server.addr=0.0.0.0:1317 \
+  --laddr=tcp://0.0.0.0:1317 \
  --rpc.laddr=tcp://0.0.0.0:26657 \
  --p2p.laddr=tcp://0.0.0.0:$P2P_PORT
--- a/sophon/external-node/sophon-mainnet-external-node-archive.yml
+++ b/sophon/external-node/sophon-mainnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  sophon-mainnet-archive:
-    image: ${SOPHON_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${SOPHON_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${SOPHON_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${SOPHON_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/sophon/external-node/sophon-mainnet-external-node-pruned.yml
+++ b/sophon/external-node/sophon-mainnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  sophon-mainnet:
-    image: ${SOPHON_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${SOPHON_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${SOPHON_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${SOPHON_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/juno/starknet-mainnet-juno-archive.yml
+++ b/starknet/juno/starknet-mainnet-juno-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-mainnet-juno-archive:
-    image: ${STARKNET_JUNO_IMAGE:-nethermind/juno}:${STARKNET_MAINNET_JUNO_VERSION:-v0.16.0}
+    image: ${STARKNET_JUNO_IMAGE:-nethermind/juno}:${STARKNET_MAINNET_JUNO_VERSION:-v0.16.3}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/juno/starknet-sepolia-juno-archive.yml
+++ b/starknet/juno/starknet-sepolia-juno-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-sepolia-juno-archive:
-    image: ${STARKNET_JUNO_IMAGE:-nethermind/juno}:${STARKNET_SEPOLIA_JUNO_VERSION:-v0.16.0}
+    image: ${STARKNET_JUNO_IMAGE:-nethermind/juno}:${STARKNET_SEPOLIA_JUNO_VERSION:-v0.16.3}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-mainnet-pathfinder-archive:
-    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_MAINNET_PATHFINDER_VERSION:-v0.22.3}
+    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_MAINNET_PATHFINDER_VERSION:-v0.22.6}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-mainnet-pathfinder-pruned:
-    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_MAINNET_PATHFINDER_VERSION:-v0.22.3}
+    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_MAINNET_PATHFINDER_VERSION:-v0.22.6}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-mainnet-pathfinder-pruned:
-    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_MAINNET_PATHFINDER_VERSION:-v0.22.3}
+    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_MAINNET_PATHFINDER_VERSION:-v0.22.6}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-sepolia-pathfinder-archive:
-    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_SEPOLIA_PATHFINDER_VERSION:-v0.22.3}
+    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_SEPOLIA_PATHFINDER_VERSION:-v0.22.6}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-sepolia-pathfinder-pruned:
-    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_SEPOLIA_PATHFINDER_VERSION:-v0.22.3}
+    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_SEPOLIA_PATHFINDER_VERSION:-v0.22.6}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  starknet-sepolia-pathfinder-pruned:
-    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_SEPOLIA_PATHFINDER_VERSION:-v0.22.3}
+    image: ${STARKNET_PATHFINDER_IMAGE:-eqlabs/pathfinder}:${STARKNET_SEPOLIA_PATHFINDER_VERSION:-v0.22.6}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
+++ b/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zksync-era-boojnet-archive:
-    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_BOOJNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_BOOJNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
+++ b/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zksync-era-boojnet:
-    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_BOOJNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_BOOJNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
+++ b/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zksync-era-mainnet-archive:
-    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
+++ b/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zksync-era-mainnet:
-    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ZKSYNC_ERA_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ZKSYNC_ERA_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
Author	SHA1	Message	Date
Claude Agent	9f6ca383ac	linea-mainnet: disable eth_getProof on pruned geth upstream for rpc-us-40 DRPC gateway probes eth_getProof and marks the upstream 81% unavailable when the pruned geth node returns 'header not found'. This is a false positive - the node is healthy and advancing. Disable eth_getProof on the linea pruned geth upstream to prevent DRPC from marking it unavailable. Mirrors the existing pattern for BSC minimal in rpc-us-41.yaml. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-06-21 15:13:02 +00:00
Claude Agent	d2c2de7341	deploy: regenerate compose from vibe-node main ed4a4cd8a117	2026-06-21 10:52:36 +00:00
Claude Agent	d9d8920752	xlayer-mainnet: set OP_NODE_L2_SKIP_SYNC_START_CHECK=false for op-node v0.1.5.1 In xlayer/op-node:v0.1.5.1, the =true path triggers an infinite 'Found highest L2 block with canonical L1 origin. Skip further sanity check and jump to the safe head' loop that prevents block derivation entirely. Setting =false restores normal startup: op-node advances through the check and begins deriving blocks. No newer op-node image exists (v0.1.5.1 is latest). Affects all xlayer-mainnet op-node variants (geth, reth) as they share the same op-node consensus layer. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-06-21 09:19:43 +00:00
Claude Agent	1758c921d7	deploy: regenerate compose from vibe-node main ed38c887a775	2026-06-21 06:52:38 +00:00
Claude Agent	f7b585307e	lisk/mainnet: add isthmusTime, jovianTime, karstTime fork timestamps to genesis.json	2026-06-21 06:03:35 +00:00
Claude Agent	39df507eee	deploy: regenerate compose from vibe-node main 7ab720b29b61	2026-06-21 01:24:43 +00:00
Claude Agent	9e666ca476	starknet: bump pathfinder v0.22.3→v0.22.6 Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-06-20 22:41:24 +00:00
Claude Agent	f713744bb8	deploy: regenerate compose from vibe-node main 9920718c233e	2026-06-20 13:05:30 +00:00
Claude Agent	377d3af961	deploy: regenerate compose from vibe-node main 15f7736e5719	2026-06-20 08:30:13 +00:00
sebastian	a54459e55f	Merge pull request 'shibarium heimdall: fix REST listen flag (--laddr not --rest-server.addr)' (#17 ) from shibarium-heimdall-restflag into main Reviewed-on: #17	2026-06-20 04:41:36 +00:00
rob	25b0ab049c	shibarium heimdall: fix REST listen-address flag (--laddr, not --rest-server.addr) heimdall crash-looped on 'unknown flag: --rest-server.addr'. Per heimdalld start --help, the bone-fork binary takes --rest-server (bool) to enable REST/LCD and --laddr (default tcp://0.0.0.0:1317) for its listen address — there is no --rest-server.addr. Swap it. (The rest_server-injection + idempotent-init fixes from the prior PR worked: init now skips re-init, fetches the heimdall-109 genesis, no more 'rest_server already defined'.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-20 04:30:59 +00:00
Claude Agent	8471404897	deploy: regenerate compose from vibe-node main 2b1459ec36c8	2026-06-20 04:22:01 +00:00
rob	39d2fa93e2	shibarium heimdall init.sh: stop injecting rest_server (crash fix) + idempotent init heimdall crash-looped on 'toml: key rest_server is already defined'. init.sh inserted 'rest_server = true' after [rpc] on EVERY boot (non-idempotent), piling up duplicates; rest_server is not a valid CometBFT config.toml key anyway — REST is enabled by the --rest-server flag in the start command. - Remove the rest_server / rest_server_addr config injection. - Self-heal: strip any previously-injected rest_server lines (so already-corrupted volumes recover on next boot — no volume wipe needed). - Guard heimdalld init to first boot only (config.toml absent) so restarts don't reset node identity or re-parse the existing config. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-20 03:24:37 +00:00
Claude Agent	fb3dc6214c	deploy: regenerate compose from vibe-node main 388142ccafa4	2026-06-20 03:01:11 +00:00
rob	9fc368f405	shibarium: build heimdall from source (cometbft.Dockerfile) A parallel change reverted this to FROM shibaone/heimdall:v1.0.7-bone — an image that exists on no registry, so the heimdall build fails. Restore the source build: clone shibaone/heimdall@${CL_VERSION}, make install, then layer the CometBFT init entrypoint. Pairs with vibe-node PR (node_build + standalone service name). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-20 02:56:17 +00:00
Claude Agent	6ce0fc2346	deploy: regenerate compose from vibe-node main c66ad823f9e3	2026-06-20 00:58:03 +00:00
Claude Agent	7ce0428db4	erigon3: bump Dockerfile VERSION from v3.0.7 to v3.4.4	2026-06-19 16:36:18 +00:00
Claude Agent	b72cf641a9	deploy: regenerate compose from vibe-node main 666f653d478a	2026-06-19 16:03:20 +00:00
Claude Agent	5891d050f9	deploy: regenerate compose from vibe-node main 59f3f7f3cf2e	2026-06-19 14:40:16 +00:00
Claude Agent	196744cf4f	deploy: regenerate compose from vibe-node main 276ea4d82e62	2026-06-19 14:29:52 +00:00
rob	4dd902e9af	Merge branch 'issue-63'	2026-06-19 14:19:50 +00:00
Claude Agent	a7e9d4a65d	deploy: regenerate compose from vibe-node main 60976572a3c4	2026-06-19 13:05:25 +00:00
sebastian	8c46b66bdc	Merge pull request 'shibarium: build bor + heimdall from source (bone fork, chain 109)' (#12 ) from shibarium-bone-fork-fix into main Reviewed-on: #12	2026-06-19 13:02:00 +00:00
rob	ee21a0245e	shibarium: build bor + heimdall from source (no published images) shibaone ships no docker images for the bone fork — only source + .deb config packages — so both Dockerfiles must clone+build, not FROM a (nonexistent) image. - bor.Dockerfile: clone shibaone/bor@${BOR_VERSION}, make bor, cp build/bin/bor (was: alpine + wrong /src/build/bor path). golang:1.22.1 like upstream. - cometbft.Dockerfile: clone shibaone/heimdall@${CL_VERSION}, make install (was: FROM shibaone/heimdall:v1.0.7-bone — that tag does not exist on any registry), then layer the CometBFT init entrypoint. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-19 11:46:00 +00:00
Claude Agent	bda550eef6	shibarium: add bone fork build-from-source assets - Update heimdall init.sh with heimdall-109 chain_id and mainnet seeds - Update cometbft.Dockerfile with v1.0.7-bone version - Add bor.Dockerfile for building shibaone/bor from source at v1.3.9-bone Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-06-19 11:05:34 +00:00
Claude Agent	59ff415fdb	cronos: add mainnet EVM chain (chain-id 25) as client-type node Add cronosd cometbft.Dockerfile and init.sh for Cronos EVM mainnet. - Dockerfile: layer cometbft-common.sh + init.sh onto upstream cronos image - init.sh: adapted from haqq pattern with EVM JSON-RPC on 8545, WS on 8546, CometBFT RPC on 26657, P2P on 10521, chain-id cronosmainnet_25-1 - Statesync via ct_configure_statesync, genesis from official repo - Pruning: custom with keep-recent=100, interval=19 Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-06-19 09:35:50 +00:00