Update codes

.env

@@ -1,2 +1,3 @@
 CLIENT=${CLIENT:-geth}
-HOST_DATA_DIR=./${CLIENT}-data
+HOST_DATA_DIR=./${CLIENT}-data
+USE_BASE_CONSENSUS=true

.env.mainnet

@@ -4,6 +4,7 @@
 # NETWORK CONFIGURATION
 # --------------------
 RETH_CHAIN=base
+BASE_NODE_NETWORK=base
 OP_NODE_NETWORK=base-mainnet
 OP_GETH_OP_NETWORK=base-mainnet
 
@@ -14,13 +15,13 @@ OP_SEQUENCER_HTTP=https://mainnet-sequencer.base.org
 OP_GETH_SEQUENCER_HTTP=https://mainnet-sequencer.base.org
 OP_RETH_SEQUENCER_HTTP=https://mainnet-sequencer.base.org
 
-# SYNC CONFIGURATION
+# SYNC CONFIGURATION (deprecated)
 # -----------------
 OP_NODE_SYNCMODE=execution-layer
 OP_NODE_VERIFIER_L1_CONFS=4
 OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
 
-# [REQUIRED] L1 CONFIGURATION 
+# [REQUIRED] L1 CONFIGURATION
 # --------------------------
 # Replace these values with your L1 (Ethereum) node endpoints
 OP_NODE_L1_ETH_RPC=<your-preferred-l1-rpc>
@@ -30,13 +31,21 @@ OP_NODE_L1_BEACON_FETCH_ALL_SIDECARS="true"
 OP_NODE_L1_RPC_KIND="debug_geth"
 OP_NODE_L1_TRUST_RPC="false"
 
+BASE_NODE_L1_ETH_RPC=<your-preferred-l1-rpc>
+BASE_NODE_L1_BEACON=<your-preferred-l1-beacon>
+BASE_NODE_L1_TRUST_RPC="false"
+
 # ENGINE CONFIGURATION
 # -------------------
 OP_NODE_L2_ENGINE_KIND=reth
-OP_NODE_L2_ENGINE_RPC=ws://execution:8551
+OP_NODE_L2_ENGINE_RPC=http://execution:8551
 OP_NODE_L2_ENGINE_AUTH=/tmp/engine-auth-jwt
 OP_NODE_L2_ENGINE_AUTH_RAW=688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a
 
+BASE_NODE_L2_ENGINE_RPC=ws://execution:8551
+BASE_NODE_L2_ENGINE_AUTH=/tmp/engine-auth-jwt
+BASE_NODE_L2_ENGINE_AUTH_RAW=688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a
+
 # P2P CONFIGURATION
 # ---------------
 OP_NODE_P2P_AGENT=base
@@ -46,13 +55,18 @@ OP_NODE_P2P_LISTEN_UDP_PORT=9222
 OP_NODE_INTERNAL_IP="true"
 OP_NODE_P2P_BOOTNODES=enr:-J24QNz9lbrKbN4iSmmjtnr7SjUMk4zB7f1krHZcTZx-JRKZd0kA2gjufUROD6T3sOWDVDnFJRvqBBo62zuF-hYCohOGAYiOoEyEgmlkgnY0gmlwhAPniryHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQKNVFlCxh_B-716tTs-h1vMzZkSs1FTu_OYTNjgufplG4N0Y3CCJAaDdWRwgiQG,enr:-J24QH-f1wt99sfpHy4c0QJM-NfmsIfmlLAMMcgZCUEgKG_BBYFc6FwYgaMJMQN5dsRBJApIok0jFn-9CS842lGpLmqGAYiOoDRAgmlkgnY0gmlwhLhIgb2Hb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJ9FTIv8B9myn1MWaC_2lJ-sMoeCDkusCsk4BYHjjCq04N0Y3CCJAaDdWRwgiQG,enr:-J24QDXyyxvQYsd0yfsN0cRr1lZ1N11zGTplMNlW4xNEc7LkPXh0NAJ9iSOVdRO95GPYAIc6xmyoCCG6_0JxdL3a0zaGAYiOoAjFgmlkgnY0gmlwhAPckbGHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJwoS7tzwxqXSyFL7g0JM-KWVbgvjfB8JA__T7yY_cYboN0Y3CCJAaDdWRwgiQG,enr:-J24QHmGyBwUZXIcsGYMaUqGGSl4CFdx9Tozu-vQCn5bHIQbR7On7dZbU61vYvfrJr30t0iahSqhc64J46MnUO2JvQaGAYiOoCKKgmlkgnY0gmlwhAPnCzSHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQINc4fSijfbNIiGhcgvwjsjxVFJHUstK9L1T8OTKUjgloN0Y3CCJAaDdWRwgiQG,enr:-J24QG3ypT4xSu0gjb5PABCmVxZqBjVw9ca7pvsI8jl4KATYAnxBmfkaIuEqy9sKvDHKuNCsy57WwK9wTt2aQgcaDDyGAYiOoGAXgmlkgnY0gmlwhDbGmZaHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQIeAK_--tcLEiu7HvoUlbV52MspE0uCocsx1f_rYvRenIN0Y3CCJAaDdWRwgiQG
 
+BASE_NODE_P2P_LISTEN_IP=0.0.0.0
+BASE_NODE_P2P_ADVERTISE_TCP_PORT=9222
+BASE_NODE_P2P_ADVERTISE_UDP_PORT=9222
+BASE_NODE_P2P_BOOTNODES=enr:-J24QNz9lbrKbN4iSmmjtnr7SjUMk4zB7f1krHZcTZx-JRKZd0kA2gjufUROD6T3sOWDVDnFJRvqBBo62zuF-hYCohOGAYiOoEyEgmlkgnY0gmlwhAPniryHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQKNVFlCxh_B-716tTs-h1vMzZkSs1FTu_OYTNjgufplG4N0Y3CCJAaDdWRwgiQG,enr:-J24QH-f1wt99sfpHy4c0QJM-NfmsIfmlLAMMcgZCUEgKG_BBYFc6FwYgaMJMQN5dsRBJApIok0jFn-9CS842lGpLmqGAYiOoDRAgmlkgnY0gmlwhLhIgb2Hb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJ9FTIv8B9myn1MWaC_2lJ-sMoeCDkusCsk4BYHjjCq04N0Y3CCJAaDdWRwgiQG,enr:-J24QDXyyxvQYsd0yfsN0cRr1lZ1N11zGTplMNlW4xNEc7LkPXh0NAJ9iSOVdRO95GPYAIc6xmyoCCG6_0JxdL3a0zaGAYiOoAjFgmlkgnY0gmlwhAPckbGHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJwoS7tzwxqXSyFL7g0JM-KWVbgvjfB8JA__T7yY_cYboN0Y3CCJAaDdWRwgiQG,enr:-J24QHmGyBwUZXIcsGYMaUqGGSl4CFdx9Tozu-vQCn5bHIQbR7On7dZbU61vYvfrJr30t0iahSqhc64J46MnUO2JvQaGAYiOoCKKgmlkgnY0gmlwhAPnCzSHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQINc4fSijfbNIiGhcgvwjsjxVFJHUstK9L1T8OTKUjgloN0Y3CCJAaDdWRwgiQG,enr:-J24QG3ypT4xSu0gjb5PABCmVxZqBjVw9ca7pvsI8jl4KATYAnxBmfkaIuEqy9sKvDHKuNCsy57WwK9wTt2aQgcaDDyGAYiOoGAXgmlkgnY0gmlwhDbGmZaHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQIeAK_--tcLEiu7HvoUlbV52MspE0uCocsx1f_rYvRenIN0Y3CCJAaDdWRwgiQG
+
 # RETH CONFIGURATION
 # ----------------
 OP_RETH_DISABLE_DISCOVERY="false"
 OP_RETH_DISABLE_TX_POOL_GOSSIP="true"
 OP_RETH_OP_NETWORK="base"
 
-# RPC CONFIGURATION
+# RPC CONFIGURATION (deprecated)
 # ---------------
 OP_NODE_RPC_ADDR=0.0.0.0
 OP_NODE_RPC_PORT=8545
@@ -74,6 +88,12 @@ OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
 OP_NODE_METRICS_ENABLED="true"
 OP_NODE_METRICS_ADDR=0.0.0.0
 OP_NODE_METRICS_PORT="7300"
+
+BASE_NODE_LOG_VERBOSITY=3
+BASE_NODE_LOG_FORMAT="json"
+BASE_NODE_METRICS_ENABLED="true"
+BASE_NODE_METRICS_ADDR=0.0.0.0
+BASE_NODE_METRICS_PORT="7300"
 STATSD_ADDRESS="172.17.0.1"
 
 # OPTIONAL SETTINGS
@@ -85,7 +105,7 @@ STATSD_ADDRESS="172.17.0.1"
 # OP_NETHERMIND_ETHSTATS_NODE_NAME=NethermindNode
 # OP_NETHERMIND_ETHSTATS_ENDPOINT=ethstats_endpoint
 
-# TRUSTED RPC MODE (OPTIONAL - UNCOMMENT TO ENABLE)
+# TRUSTED RPC MODE (OPTIONAL - UNCOMMENT TO ENABLE) (deprecated)
 # OP_NODE_L1_TRUST_RPC=true
 
 # SNAP SYNC (OPTIONAL EXPERIMENTAL FEATURE - UNCOMMENT TO ENABLE)

.env.sepolia

@@ -5,6 +5,7 @@
 # --------------------
 RETH_CHAIN=base-sepolia
 OP_NODE_NETWORK=base-sepolia
+BASE_NODE_NETWORK=base-sepolia
 OP_GETH_OP_NETWORK=base-sepolia
 
 # BASE SEQUENCER ENDPOINTS
@@ -14,13 +15,13 @@ OP_SEQUENCER_HTTP=https://sepolia-sequencer.base.org
 OP_GETH_SEQUENCER_HTTP=https://sepolia-sequencer.base.org
 OP_RETH_SEQUENCER_HTTP=https://sepolia-sequencer.base.org
 
-# SYNC CONFIGURATION
+# SYNC CONFIGURATION (deprecated)
 # -----------------
 OP_NODE_SYNCMODE=execution-layer
 OP_NODE_VERIFIER_L1_CONFS=4
 OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
 
-# [REQUIRED] L1 CONFIGURATION 
+# [REQUIRED] L1 CONFIGURATION
 # --------------------------
 # Replace these values with your L1 (Ethereum) node endpoints
 OP_NODE_L1_ETH_RPC=<your-preferred-l1-rpc>
@@ -30,13 +31,21 @@ OP_NODE_L1_BEACON_FETCH_ALL_SIDECARS="true"
 OP_NODE_L1_RPC_KIND="debug_geth"
 OP_NODE_L1_TRUST_RPC="false"
 
+BASE_NODE_L1_ETH_RPC=<your-preferred-l1-rpc>
+BASE_NODE_L1_BEACON=<your-preferred-l1-beacon>
+BASE_NODE_L1_TRUST_RPC="false"
+
 # ENGINE CONFIGURATION
 # -------------------
 OP_NODE_L2_ENGINE_KIND=reth
 OP_NODE_L2_ENGINE_RPC=ws://execution:8551
 OP_NODE_L2_ENGINE_AUTH=/tmp/engine-auth-jwt
 OP_NODE_L2_ENGINE_AUTH_RAW=688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a
 
+BASE_NODE_L2_ENGINE_RPC=http://execution:8551
+BASE_NODE_L2_ENGINE_AUTH=/tmp/engine-auth-jwt
+BASE_NODE_L2_ENGINE_AUTH_RAW=688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a
+
 # P2P CONFIGURATION
 # ---------------
 OP_NODE_P2P_AGENT=base
@@ -46,13 +55,18 @@ OP_NODE_P2P_LISTEN_UDP_PORT=9222
 OP_NODE_INTERNAL_IP="true"
 OP_NODE_P2P_BOOTNODES=enr:-J24QNz9lbrKbN4iSmmjtnr7SjUMk4zB7f1krHZcTZx-JRKZd0kA2gjufUROD6T3sOWDVDnFJRvqBBo62zuF-hYCohOGAYiOoEyEgmlkgnY0gmlwhAPniryHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQKNVFlCxh_B-716tTs-h1vMzZkSs1FTu_OYTNjgufplG4N0Y3CCJAaDdWRwgiQG,enr:-J24QH-f1wt99sfpHy4c0QJM-NfmsIfmlLAMMcgZCUEgKG_BBYFc6FwYgaMJMQN5dsRBJApIok0jFn-9CS842lGpLmqGAYiOoDRAgmlkgnY0gmlwhLhIgb2Hb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJ9FTIv8B9myn1MWaC_2lJ-sMoeCDkusCsk4BYHjjCq04N0Y3CCJAaDdWRwgiQG,enr:-J24QDXyyxvQYsd0yfsN0cRr1lZ1N11zGTplMNlW4xNEc7LkPXh0NAJ9iSOVdRO95GPYAIc6xmyoCCG6_0JxdL3a0zaGAYiOoAjFgmlkgnY0gmlwhAPckbGHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJwoS7tzwxqXSyFL7g0JM-KWVbgvjfB8JA__T7yY_cYboN0Y3CCJAaDdWRwgiQG,enr:-J24QHmGyBwUZXIcsGYMaUqGGSl4CFdx9Tozu-vQCn5bHIQbR7On7dZbU61vYvfrJr30t0iahSqhc64J46MnUO2JvQaGAYiOoCKKgmlkgnY0gmlwhAPnCzSHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQINc4fSijfbNIiGhcgvwjsjxVFJHUstK9L1T8OTKUjgloN0Y3CCJAaDdWRwgiQG,enr:-J24QG3ypT4xSu0gjb5PABCmVxZqBjVw9ca7pvsI8jl4KATYAnxBmfkaIuEqy9sKvDHKuNCsy57WwK9wTt2aQgcaDDyGAYiOoGAXgmlkgnY0gmlwhDbGmZaHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQIeAK_--tcLEiu7HvoUlbV52MspE0uCocsx1f_rYvRenIN0Y3CCJAaDdWRwgiQG
 
+BASE_NODE_P2P_LISTEN_IP=0.0.0.0
+BASE_NODE_P2P_ADVERTISE_TCP_PORT=9222
+BASE_NODE_P2P_ADVERTISE_UDP_PORT=9222
+BASE_NODE_P2P_BOOTNODES=enr:-J24QNz9lbrKbN4iSmmjtnr7SjUMk4zB7f1krHZcTZx-JRKZd0kA2gjufUROD6T3sOWDVDnFJRvqBBo62zuF-hYCohOGAYiOoEyEgmlkgnY0gmlwhAPniryHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQKNVFlCxh_B-716tTs-h1vMzZkSs1FTu_OYTNjgufplG4N0Y3CCJAaDdWRwgiQG,enr:-J24QH-f1wt99sfpHy4c0QJM-NfmsIfmlLAMMcgZCUEgKG_BBYFc6FwYgaMJMQN5dsRBJApIok0jFn-9CS842lGpLmqGAYiOoDRAgmlkgnY0gmlwhLhIgb2Hb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJ9FTIv8B9myn1MWaC_2lJ-sMoeCDkusCsk4BYHjjCq04N0Y3CCJAaDdWRwgiQG,enr:-J24QDXyyxvQYsd0yfsN0cRr1lZ1N11zGTplMNlW4xNEc7LkPXh0NAJ9iSOVdRO95GPYAIc6xmyoCCG6_0JxdL3a0zaGAYiOoAjFgmlkgnY0gmlwhAPckbGHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQJwoS7tzwxqXSyFL7g0JM-KWVbgvjfB8JA__T7yY_cYboN0Y3CCJAaDdWRwgiQG,enr:-J24QHmGyBwUZXIcsGYMaUqGGSl4CFdx9Tozu-vQCn5bHIQbR7On7dZbU61vYvfrJr30t0iahSqhc64J46MnUO2JvQaGAYiOoCKKgmlkgnY0gmlwhAPnCzSHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQINc4fSijfbNIiGhcgvwjsjxVFJHUstK9L1T8OTKUjgloN0Y3CCJAaDdWRwgiQG,enr:-J24QG3ypT4xSu0gjb5PABCmVxZqBjVw9ca7pvsI8jl4KATYAnxBmfkaIuEqy9sKvDHKuNCsy57WwK9wTt2aQgcaDDyGAYiOoGAXgmlkgnY0gmlwhDbGmZaHb3BzdGFja4OFQgCJc2VjcDI1NmsxoQIeAK_--tcLEiu7HvoUlbV52MspE0uCocsx1f_rYvRenIN0Y3CCJAaDdWRwgiQG
+
 # RETH CONFIGURATION
 # ----------------
 OP_RETH_DISABLE_DISCOVERY="false"
 OP_RETH_DISABLE_TX_POOL_GOSSIP="true"
 OP_RETH_OP_NETWORK="base-sepolia"
 
-# RPC CONFIGURATION
+# RPC CONFIGURATION (deprecated)
 # ---------------
 OP_NODE_RPC_ADDR=0.0.0.0
 OP_NODE_RPC_PORT=8545
@@ -74,6 +88,12 @@ OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
 OP_NODE_METRICS_ENABLED="true"
 OP_NODE_METRICS_ADDR=0.0.0.0
 OP_NODE_METRICS_PORT="7300"
+
+BASE_NODE_LOG_VERBOSITY=3
+BASE_NODE_LOG_FORMAT="json"
+BASE_NODE_METRICS_ENABLED="true"
+BASE_NODE_METRICS_ADDR=0.0.0.0
+BASE_NODE_METRICS_PORT="7300"
 STATSD_ADDRESS="172.17.0.1"
 
 # OPTIONAL SETTINGS
@@ -85,7 +105,7 @@ STATSD_ADDRESS="172.17.0.1"
 # OP_NETHERMIND_ETHSTATS_NODE_NAME=NethermindNode
 # OP_NETHERMIND_ETHSTATS_ENDPOINT=ethstats_endpoint
 
-# TRUSTED RPC MODE (OPTIONAL - UNCOMMENT TO ENABLE)
+# TRUSTED RPC MODE (OPTIONAL - UNCOMMENT TO ENABLE) (deprecated)
 # OP_NODE_L1_TRUST_RPC=true
 
 # SNAP SYNC (OPTIONAL EXPERIMENTAL FEATURE - UNCOMMENT TO ENABLE)

.github/workflows/stale.yml

@@ -4,6 +4,9 @@ on:
   schedule:
     - cron: '30 0 * * *'
   workflow_dispatch:
+permissions:
+  contents: read
+
 jobs:
   stale:
     runs-on: ubuntu-latest
@@ -12,6 +15,11 @@ jobs:
       issues: write
       pull-requests: write
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        with:
+          egress-policy: audit
+
       - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           days-before-stale: 14

.gitignore

@@ -3,4 +3,4 @@
 /reth-data/
 /nethermind-data/
 /dependency_updater/dependency_updater
-.DS_Store
+.DS_Store

base-consensus-entrypoint

@@ -0,0 +1,47 @@
+#!/bin/bash
+set -eu
+
+get_public_ip() {
+  # Define a list of HTTP-based providers
+  local PROVIDERS=(
+    "http://ifconfig.me"
+    "http://api.ipify.org"
+    "http://ipecho.net/plain"
+    "http://v4.ident.me"
+  )
+  # Iterate through the providers until an IP is found or the list is exhausted
+  for provider in "${PROVIDERS[@]}"; do
+    local IP
+    IP=$(curl -s --max-time 10 --connect-timeout 5 "$provider")
+    # Check if IP contains a valid format (simple regex for an IPv4 address)
+    if [[ $IP =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+      echo "$IP"
+      return 0
+    fi
+  done
+  return 1
+}
+
+if [[ -z "${BASE_NODE_NETWORK:-}" ]]; then
+  echo "expected BASE_NODE_NETWORK to be set" 1>&2
+  exit 1
+fi
+
+# wait until local execution client comes up (authed so will return 401 without token)
+until [ "$(curl -s --max-time 10 --connect-timeout 5 -w '%{http_code}' -o /dev/null "${BASE_NODE_L2_ENGINE_RPC/ws/http}")" -eq 401 ]; do
+  echo "waiting for execution client to be ready"
+  sleep 5
+done
+
+# public-facing P2P node, advertise public IP address
+if PUBLIC_IP=$(get_public_ip); then
+  echo "fetched public IP is: $PUBLIC_IP"
+else
+  echo "Could not retrieve public IP."
+  exit 8
+fi
+export BASE_NODE_P2P_ADVERTISE_IP=$PUBLIC_IP
+
+echo "$BASE_NODE_L2_ENGINE_AUTH_RAW" > "$BASE_NODE_L2_ENGINE_AUTH"
+
+exec ./base-consensus

consensus-entrypoint

@@ -0,0 +1,15 @@
+#!/bin/bash
+set -eu
+
+if [ "${USE_BASE_CONSENSUS:-false}" = "true" ]; then
+    if [ -f ./base-consensus-entrypoint ]; then
+        echo "Using Base Client"
+        exec ./base-consensus-entrypoint
+    else
+        echo "Base client is not supported for this node type"
+        exit 1
+    fi
+else
+    echo "Using OP Node"
+    exec ./op-node-entrypoint
+fi

docker-compose.yml

@@ -13,6 +13,8 @@ services:
     command: ["bash", "./execution-entrypoint"]
     volumes:
       - ${HOST_DATA_DIR}:/data
+    environment:
+      - USE_BASE_CONSENSUS=${USE_BASE_CONSENSUS:-false}
     env_file:
       - ${NETWORK_ENV:-.env.mainnet} # Use .env.mainnet by default, override with .env.sepolia for testnet
   node:
@@ -28,6 +30,8 @@ services:
       - "9222:9222/udp" # P2P UDP
       - "7300:7300" # metrics
       - "6060:6060" # pprof
-    command: ["bash", "./op-node-entrypoint"]
+    command: ["bash", "./consensus-entrypoint"]
+    environment:
+      - USE_BASE_CONSENSUS=${USE_BASE_CONSENSUS:-false}
     env_file:
       - ${NETWORK_ENV:-.env.mainnet} # Use .env.mainnet by default, override with .env.sepolia for testnet

geth/Dockerfile

@@ -39,5 +39,6 @@ COPY --from=geth /app/build/bin/geth ./
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 COPY geth/geth-entrypoint ./execution-entrypoint
 COPY op-node-entrypoint .
+COPY consensus-entrypoint .
 
 CMD ["/usr/bin/supervisord"]

geth/geth-entrypoint

@@ -48,7 +48,7 @@ fi
 
 if [ "${HOST_IP:+x}" = x ]; then
     ADDITIONAL_ARGS="$ADDITIONAL_ARGS --nat=extip:$HOST_IP"
-fi 
+fi
 
 exec ./geth \
     --datadir="$GETH_DATA_DIR" \

nethermind/Dockerfile

@@ -13,7 +13,7 @@ RUN . /tmp/versions.env && git clone $OP_NODE_REPO --branch $OP_NODE_TAG --singl
 RUN . /tmp/versions.env && cd op-node && \
     just VERSION=$OP_NODE_TAG op-node
 
-FROM mcr.microsoft.com/dotnet/sdk:9.0-noble AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0-noble AS build
 
 ARG BUILD_CONFIG=release
 ARG TARGETARCH
@@ -25,13 +25,13 @@ COPY versions.env /tmp/versions.env
 RUN . /tmp/versions.env && git clone $NETHERMIND_REPO --branch $NETHERMIND_TAG --single-branch . && \
     git switch -c $NETHERMIND_TAG && \
     bash -c '[ "$(git rev-parse HEAD)" = "$NETHERMIND_COMMIT" ]'
-    
+
 RUN TARGETARCH=${TARGETARCH#linux/} && \
     arch=$([ "$TARGETARCH" = "amd64" ] && echo "x64" || echo "$TARGETARCH") && \
     echo "Using architecture: $arch" && \
     dotnet publish src/Nethermind/Nethermind.Runner -c $BUILD_CONFIG -a $arch -o /publish --sc false
 
-FROM mcr.microsoft.com/dotnet/aspnet:9.0-noble
+FROM mcr.microsoft.com/dotnet/aspnet:10.0-noble
 
 RUN apt-get update && \
     apt-get install -y jq curl supervisor && \
@@ -46,5 +46,6 @@ COPY --from=op /app/op-node/bin/op-node ./
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 COPY nethermind/nethermind-entrypoint ./execution-entrypoint
 COPY op-node-entrypoint .
+COPY consensus-entrypoint .
 
 CMD ["/usr/bin/supervisord"]