Skip to content

Pipe keyring password to Ethereum sidecar #83

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thevops merged 2 commits into from
Aug 28, 2025
Merged

Pipe keyring password to Ethereum sidecar #83

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
088d9aa
Pipe keyring password to Ethereum sidecar
lukasz-zimnoch Aug 27, 2025
5133e60
Remove unused dummy volume
lukasz-zimnoch Aug 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 14 additions & 9 deletions docker/compose.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,21 +43,26 @@ services:
<<: [*platform, *logging, *user, *networks]
container_name: ethereum-sidecar
image: ${DOCKER_IMAGE}
entrypoint: [] # Disable the default entrypoint
entrypoint:
- /bin/sh
- -c
command:
- mezod
- ethereum-sidecar
- --log_format=json
- --ethereum-sidecar.server.ethereum-node-address=${MEZOD_ETHEREUM_SIDECAR_SERVER_ETHEREUM_NODE_ADDRESS}
- --ethereum-sidecar.server.network=${MEZOD_ETHEREUM_SIDECAR_SERVER_NETWORK}
- --ethereum-sidecar.server.assets-unlocked-endpoint=mezod:9090
- --keyring-backend=file
- --key-name=${KEYRING_NAME}
- |
yes "${KEYRING_PASSWORD}" | mezod ethereum-sidecar \
--home=${MEZOD_HOME} \
--log_format=json \
--ethereum-sidecar.server.ethereum-node-address=${MEZOD_ETHEREUM_SIDECAR_SERVER_ETHEREUM_NODE_ADDRESS} \
--ethereum-sidecar.server.network=${MEZOD_ETHEREUM_SIDECAR_SERVER_NETWORK} \
--ethereum-sidecar.server.assets-unlocked-endpoint=mezod:9090 \
--keyring-backend=file \
--key-name=${KEYRING_NAME}
restart: always
expose:
- 7500
cap_drop:
- ALL
volumes:
- ${LOCAL_BIND_PATH}:${MEZOD_HOME}

connect-sidecar:
# Dockerfile: https://github.com/skip-mev/connect/blob/main/contrib/images/connect.sidecar.prod.Dockerfile
Expand Down
42 changes: 24 additions & 18 deletions helm-chart/mezod/templates/statefulset.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,8 +37,6 @@ spec:
priorityClassName: {{ .Values.priorityClassName | quote }}
{{- end }}
volumes:
- name: dummy-data
emptyDir: {}
{{- if .Values.secrets.nodeKey }}
- name: node-key
secret:
Expand Down Expand Up @@ -174,19 +172,22 @@ spec:
image: "{{ .Values.image }}:{{ .Values.tag }}"
imagePullPolicy: {{ .Values.imagePullPolicy }}
command:
- mezod
- ethereum-sidecar
- --home=/tmp/dummy-data
- --log_format=json
- --ethereum-sidecar.server.ethereum-node-address=$(ETHEREUM_ENDPOINT)
{{- if eq .Values.env.NETWORK "mainnet" }}
- --ethereum-sidecar.server.network=mainnet
{{- else if eq .Values.env.NETWORK "testnet" }}
- --ethereum-sidecar.server.network=sepolia
{{- end }}
- --ethereum-sidecar.server.assets-unlocked-endpoint=localhost:{{ .Values.service.public.ports.grpc }}
- --keyring-backend=file
- --key-name=$(KEYRING_NAME)
- /bin/sh
- -c
args:
- |
yes "$(KEYRING_PASSWORD)" | mezod ethereum-sidecar \
--home={{ .Values.env.MEZOD_HOME }} \
--log_format=json \
--ethereum-sidecar.server.ethereum-node-address=$(ETHEREUM_ENDPOINT) \
{{- if eq .Values.env.NETWORK "mainnet" }}
--ethereum-sidecar.server.network=mainnet \
{{- else if eq .Values.env.NETWORK "testnet" }}
--ethereum-sidecar.server.network=sepolia \
{{- end }}
--ethereum-sidecar.server.assets-unlocked-endpoint=localhost:{{ .Values.service.public.ports.grpc }} \
--keyring-backend=file \
--key-name=$(KEYRING_NAME)
env:
- name: ETHEREUM_ENDPOINT
valueFrom:
Expand All @@ -197,7 +198,12 @@ spec:
valueFrom:
secretKeyRef:
name: {{ .Values.secrets.credentials | quote }}
key: KEYRING_NAME
key: KEYRING_NAME
- name: KEYRING_PASSWORD
valueFrom:
secretKeyRef:
name: {{ .Values.secrets.credentials | quote }}
key: KEYRING_PASSWORD
ports:
- name: client
containerPort: 7500
Expand All @@ -212,8 +218,8 @@ spec:
- ALL
allowPrivilegeEscalation: false
volumeMounts:
- name: dummy-data
mountPath: /tmp/dummy-data
- name: data
mountPath: {{ .Values.env.MEZOD_HOME | quote }}
#
# The sidecar container for Skip connect application
#
Expand Down
3 changes: 1 addition & 2 deletions native/v-kit.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -183,7 +183,6 @@ configure_mezo() {

${MEZO_EXEC} toml set \
${app_config_file} \
-v ethereum-sidecar.server.network="${MEZOD_ETHEREUM_SIDECAR_SERVER_NETWORK}" \
-v ethereum-sidecar.client.server-address="0.0.0.0:7500" \
-v api.enable=true \
-v api.address="tcp://0.0.0.0:1317" \
Expand Down Expand Up @@ -246,7 +245,7 @@ After=network.target
[Service]
Restart=no
ExecStartPre=/bin/echo "Starting ethereum-sidecar systemd initialization..."
ExecStart=${MEZO_EXEC} ethereum-sidecar --log_format=${MEZOD_LOG_FORMAT} --ethereum-sidecar.server.network=${MEZOD_ETHEREUM_SIDECAR_SERVER_NETWORK} --ethereum-sidecar.server.ethereum-node-address=${MEZOD_ETHEREUM_SIDECAR_SERVER_ETHEREUM_NODE_ADDRESS} --ethereum-sidecar.server.assets-unlocked-endpoint=\"127.0.0.1:9090\" --keyring-backend=\"file\" --key-name=${MEZOD_KEYRING_NAME}
ExecStart=/bin/bash -c 'yes \"${MEZOD_KEYRING_PASSWORD}\" | ${MEZO_EXEC} ethereum-sidecar --home=${MEZOD_HOME} --log_format=${MEZOD_LOG_FORMAT} --ethereum-sidecar.server.network=${MEZOD_ETHEREUM_SIDECAR_SERVER_NETWORK} --ethereum-sidecar.server.ethereum-node-address=${MEZOD_ETHEREUM_SIDECAR_SERVER_ETHEREUM_NODE_ADDRESS} --ethereum-sidecar.server.assets-unlocked-endpoint=\"127.0.0.1:9090\" --keyring-backend=\"file\" --key-name=${MEZOD_KEYRING_NAME}'
StandardOutput=journal
StandardError=journal
User=root
Expand Down