[DO NOT MERGE] working diff of latest changes against boonet

.github/dependabot.yml

@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: MIT
 #
-# Copyright (c) 2024 Berachain Foundation
+# Copyright (c) 2025 Berachain Foundation
 #
 # Permission is hereby granted, free of charge, to any person
 # obtaining a copy of this software and associated documentation

.github/workflows/berachain_release.asc

@@ -0,0 +1,13 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEZ4wNfRYJKwYBBAHaRw8BAQdAwL8LSYcQrJUeVlFEB8z8CHvCVwF1pIeCesfz
+STwDJFq0IGFCZWFyIChyaykgPGFiZWFyQGJlcmFjaGFpbi5jb20+iJkEExYKAEEW
+IQTdYm1hDE1/yPhSAHZyntHMpH7vzQUCZ4wNfQIbAwUJAE8aAAULCQgHAgIiAgYV
+CgkICwIEFgIDAQIeBwIXgAAKCRByntHMpH7vzZVwAQDFwlQUWDm6ElGJGujpOwmg
+v4ErEw4RQ9QhFU+m/W9egQD+P0itmUAoiEbM8YXHmpEcmS8ThL15EFf4/oDQ85xR
+KwW4OARnjA19EgorBgEEAZdVAQUBAQdA7eVLItcuC8tZqrn6BSQI85EU6UURjhon
+OOZVl5SnCgEDAQgHiH4EGBYKACYWIQTdYm1hDE1/yPhSAHZyntHMpH7vzQUCZ4wN
+fQIbDAUJAE8aAAAKCRByntHMpH7vzQqzAP4yhkQN4ppTkvylGQVhq6dS6plCBSvl
+r1JKaeihAncYzgEA2X3HcALQlzaW3KY5aFAiAKRb4ihRMRIqoeeemmRsVww=
+=Jr9o
+-----END PGP PUBLIC KEY BLOCK-----

.github/workflows/pipeline.yml

@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: MIT
 #
-# Copyright (c) 2024 Berachain Foundation
+# Copyright (c) 2025 Berachain Foundation
 #
 # Permission is hereby granted, free of charge, to any person
 # obtaining a copy of this software and associated documentation
@@ -43,18 +43,17 @@ concurrency:
   cancel-in-progress: ${{ !(github.base_ref == 'refs/heads/main' && github.event_name == 'merge_group') || github.ref != 'refs/heads/main' }}
 
 env:
-  GCP_ID_PROVIDER: 'projects/341806074811/locations/global/workloadIdentityPools/oidc-apps-automation-st-01-pool/providers/gh-apps-oidc-provider'
-  GCP_SERVICE_ACCOUNT: 'sa-apps-deployment@prj-berachain-automation-st-01.iam.gserviceaccount.com'
+  GCP_ID_PROVIDER: "projects/341806074811/locations/global/workloadIdentityPools/oidc-apps-automation-st-01-pool/providers/gh-apps-oidc-provider"
+  GCP_SERVICE_ACCOUNT: "sa-apps-deployment@prj-berachain-automation-st-01.iam.gserviceaccount.com"
   GCP_REGISTRY: northamerica-northeast1-docker.pkg.dev
   GHCR_REGISTRY: ghcr.io
   PUSH_DOCKER_IMAGE: ${{ (github.base_ref == github.head_ref && github.event_name == 'push') || github.ref == 'refs/tags/v*'}}
   VERSION: ${{ github.ref_name }}
 
 jobs:
-
-# -------------------------------------------------------------------------- #
-#                                Main Pipeline                               #
-# -------------------------------------------------------------------------- #
+  # -------------------------------------------------------------------------- #
+  #                                Main Pipeline                               #
+  # -------------------------------------------------------------------------- #
 
   ci:
     strategy:
@@ -90,7 +89,7 @@ jobs:
       - name: Setup Golang
         uses: actions/setup-go@v5
         with:
-          go-version: "1.23.0"
+          go-version: "1.23.4"
           check-latest: true
           cache-dependency-path: "**/*.sum"
         if: ${{ !(matrix.args == 'test-forge-cover' || matrix.args == 'test-forge-fuzz') }}
@@ -106,10 +105,9 @@ jobs:
           files: ./${{ matrix.args }}.txt
         if: ${{ matrix.args == 'test-unit-cover' || matrix.args == 'test-forge-cover'}}
 
-
-# -------------------------------------------------------------------------- #
-#                                 E2E Testing                                #
-# -------------------------------------------------------------------------- #
+  # -------------------------------------------------------------------------- #
+  #                                 E2E Testing                                #
+  # -------------------------------------------------------------------------- #
 
   ci-e2e:
     strategy:
@@ -144,6 +142,8 @@ jobs:
         uses: docker/setup-buildx-action@v1
       - name: Install Kurtosis
         run: |
+          sudo apt-get install ca-certificates
+          sudo apt update
           echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
           sudo apt update
           sudo apt install kurtosis-cli=$(go list -m -f '{{.Version}}' github.com/kurtosis-tech/kurtosis/api/golang | sed 's/^v//') -y
@@ -155,9 +155,9 @@ jobs:
         env:
           GOPATH: /home/runner/go
 
-# -------------------------------------------------------------------------- #
-#                       Docker Container Build and Push                      #
-# -------------------------------------------------------------------------- #
+  # -------------------------------------------------------------------------- #
+  #                       Docker Container Build and Push                      #
+  # -------------------------------------------------------------------------- #
 
   build-and-push-container:
     runs-on:
@@ -199,26 +199,9 @@ jobs:
         with:
           registry: ${{ env.GHCR_REGISTRY }}
           username: ${{ github.actor }}
-          password: ${{ secrets.GH_TOKEN }}
-
-      - if: ${{ env.PUSH_DOCKER_IMAGE == 'true' }}
-        name: Authenticate to Google Cloud
-        id: 'auth'
-        uses: 'google-github-actions/auth@v2'
-        with:
-          workload_identity_provider: ${{ env.GCP_ID_PROVIDER }}
-          service_account: ${{ env.GCP_SERVICE_ACCOUNT }}
-
-      - if: ${{ env.PUSH_DOCKER_IMAGE == 'true' }}
-        name: 'Set up Cloud SDK'
-        uses: 'google-github-actions/setup-gcloud@v2'
-
-      - if: ${{ env.PUSH_DOCKER_IMAGE == 'true' }}
-        name: Setup Docker to use Google Cloud OIDC
-        run: |
-          gcloud auth configure-docker ${{ env.GCP_REGISTRY }} --quiet
+          password: ${{ secrets.GHCR_TOKEN }}
 
       - if: ${{ env.PUSH_DOCKER_IMAGE == 'true' }}
         name: Push Docker image
         run: |
-            make push-docker-gcp push-docker-github
+          make push-docker-github

.github/workflows/release.yaml

@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: MIT
 #
-# Copyright (c) 2024 Berachain Foundation
+# Copyright (c) 2025 Berachain Foundation
 #
 # Permission is hereby granted, free of charge, to any person
 # obtaining a copy of this software and associated documentation
@@ -33,9 +33,9 @@ on:
       - 'release/*' 
 
 env:
-  REPO_NAME: ${{ github.repository_owner }}/beacon-kit
-  IMAGE_NAME: ${{ github.repository_owner }}/beacon-kit
-  GH_TOKEN: ${{ secrets.DEV_PAT }}
+  REPO_NAME: ${{ github.repository }} 
+  IMAGE_NAME: ${{ github.repository }}
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
   # Job to extract version
@@ -77,16 +77,34 @@ jobs:
           GOOS: ${{ matrix.configs.target-os }}
           GOARCH: ${{ matrix.configs.arch }}
 
+      - name: Import GPG key
+        run: echo "$GPG_KEY" | gpg --batch --import
+        env:
+          GPG_KEY: ${{ secrets.GPG_KEY }}
+
       - name: Build ${{ matrix.build.binary }}
         run: |
           make build-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}-${{ needs.extract-version.outputs.VERSION }}
           tar -czvf ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz -C build/bin .
+
+      - name: Sign binary archive
+        run: gpg --batch --yes --pinentry-mode=loopback --passphrase "$GPG_KEY_PASSPHRASE" --detach-sign ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz
+        env:
+          GPG_KEY_PASSPHRASE: ${{ secrets.GPG_KEY_PASSPHRASE }}
 
-      # Upload binaries
-      - uses: actions/upload-artifact@v4
+      # Upload archives and signatures
+      - name: Upload archive
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz
-          path: ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz
+          path: |
+            ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz
+      - name: Upload archive signature
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz.sig
+          path: |
+            ${{ matrix.build.binary }}-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.configs.target-os }}-${{ matrix.configs.arch }}.tar.gz.sig
 
   # Job to draft release
   draft-release:
@@ -111,7 +129,6 @@ jobs:
           echo "EOF" >> $GITHUB_OUTPUT
       - name: Create release draft
         env:
-          GITHUB_USER: ${{ github.repository_owner }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         # The formatting here is borrowed from Reth (which is borrowed from Lighthouse (which is borrowed from OpenEthereum)):
         # https://github.com/openethereum/openethereum/blob/6c2d392d867b058ff867c4373e40850ca3f96969/.github/workflows/build.yml
@@ -157,12 +174,24 @@ jobs:
 
           | System | Architecture | Binary | PGP Signature |
           |:---:|:---:|:---:|:---|
-          | <img src="https://simpleicons.org/icons/linux.svg" style="width: 32px;"/> | amd64 | [beacond-${{ env.VERSION }}-linux-amd64](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-linux-amd64.tar.gz) |
-          | <img src="https://simpleicons.org/icons/linux.svg" style="width: 32px;"/> | arm64 | [beacond-${{ env.VERSION }}-linux-arm64](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-linux-arm64.tar.gz) | 
-          | <img src="https://simpleicons.org/icons/apple.svg" style="width: 32px;"/> | arm64 | [beacond-${{ env.VERSION }}-darwin-arm64](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-darwin-arm64.tar.gz) |
-          | | | | |
+          | <img src="https://simpleicons.org/icons/linux.svg" style="width: 32px;"/> | amd64 | [beacond-${{ env.VERSION }}-linux-amd64](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-linux-amd64.tar.gz) | [Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-linux-amd64.tar.gz.sig) |
+          | <img src="https://simpleicons.org/icons/linux.svg" style="width: 32px;"/> | arm64 | [beacond-${{ env.VERSION }}-linux-arm64](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-linux-arm64.tar.gz) | [Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-linux-arm64.tar.gz.sig) |
+          | <img src="https://simpleicons.org/icons/apple.svg" style="width: 32px;"/> | arm64 | [beacond-${{ env.VERSION }}-darwin-arm64](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-darwin-arm64.tar.gz) | [Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/beacond-${{ env.VERSION }}-darwin-arm64.tar.gz.sig) |          
           | **System** | **Option** | - | **Resource** |
           | <img src="https://simpleicons.org/icons/docker.svg" style="width: 32px;"/> | Docker | | [${{ env.IMAGE_NAME }}](https://ghcr.io/berachain/beacon-kit) |
+
+          ### Verifying signatures
+          Use gpg to verify the signature on these binary archives. This is important to make sure that the content you\'ve downloaded is legitimate. gpg can be installed with most package managers. For example:
+          - `brew install gpg` on mac
+          - `apt install gpg` on Ubuntu/Debian
+
+          Once gpg is installed, import our public key into its database and verify:
+          - [Download signing public key from here](https://raw.githubusercontent.com/${{ github.repository }}/${{ github.ref_name }}/.github/workflows/berachain_release.asc).
+          - Run `gpg --import berachain_release.asc`
+          - Verify with `gpg --verify {signature}.sig {binary}.tar.gz`
+          - This message is expected: `WARNING: This key is not certified with a trusted signature!`
+          - To resolve the warning, trust the key by signing with your own keypair. `gpg --lsign-key <keyid>`
+
           ENDBODY
           )
           assets=()

.gitignore

@@ -10,6 +10,7 @@ site/
 contracts/cache
 contracts/out
 tmp/
+cscope.files
 
 ##########
 # Golang #

.mockery.yaml

@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: MIT
 #
-# Copyright (c) 2024 Berachain Foundation
+# Copyright (c) 2025 Berachain Foundation
 #
 # Permission is hereby granted, free of charge, to any person
 # obtaining a copy of this software and associated documentation

.vscode/launch.json

@@ -0,0 +1,120 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "name": "Init local devnet",
+            "type": "go",
+            "request": "launch",
+            "preLaunchTask": "build",
+            "mode": "exec",
+            "program": "${workspaceFolder}/build/bin/beacond",
+            "args": [
+                "init",
+                "localtestnet",
+                "--chain-id=beacond-2061",
+                "--home=${workspaceFolder}/.tmp/beacond",
+            ],
+            "env": {
+                "CHAIN_SPEC": "devnet"
+            },
+            "internalConsoleOptions": "openOnSessionStart",
+            "presentation": {
+                "group": "initialize",
+                "order": 1
+            },
+        },
+        {
+            "name": "Add premined deposit",
+            "type": "go",
+            "request": "launch",
+            "mode": "exec",
+            "program": "${workspaceFolder}/build/bin/beacond",
+            "preLaunchTask": "build",
+            "args": [
+                "genesis",
+                "add-premined-deposit",
+                "32000000000",
+                "0x20f33ce90a13a4b5e7697e3544c3083b8f8a51d4",
+                "--home=${workspaceFolder}/.tmp/beacond",
+            ],
+            "env": {
+                "CHAIN_SPEC": "devnet"
+            },
+            "internalConsoleOptions": "openOnSessionStart",
+            "presentation": {
+                "group": "initialize",
+                "order": 2
+            },
+        },
+        {
+            "name": "Collect premined deposit",
+            "type": "go",
+            "request": "launch",
+            "preLaunchTask": "build",
+            "mode": "exec",
+            "program": "${workspaceFolder}/build/bin/beacond",
+            "args": [
+                "genesis",
+                "collect-premined-deposits",
+                "--home=${workspaceFolder}/.tmp/beacond",
+            ],
+            "env": {
+                "CHAIN_SPEC": "devnet"
+            },
+            "internalConsoleOptions": "openOnSessionStart",
+            "presentation": {
+                "group": "initialize",
+                "order": 3
+            },
+        },
+        {
+            "name": "Genesis execution payload",
+            "type": "go",
+            "request": "launch",
+            "preLaunchTask": "build",
+            "mode": "exec",
+            "program": "${workspaceFolder}/build/bin/beacond",
+            "args": [
+                "genesis",
+                "execution-payload",
+                "${workspaceFolder}/testing/files/eth-genesis.json",
+                "--home=${workspaceFolder}/.tmp/beacond",
+            ],
+            "env": {
+                "CHAIN_SPEC": "devnet"
+            },
+            "internalConsoleOptions": "openOnSessionStart",
+            "presentation": {
+                "group": "initialize",
+                "order": 4
+            },
+        },
+        {
+            "name": "Start beacond",
+            "type": "go",
+            "request": "launch",
+            "preLaunchTask": "build",
+            "mode": "exec",
+            "program": "${workspaceFolder}/build/bin/beacond",
+            "args": [
+                "start",
+                "--pruning=nothing",
+                "--beacon-kit.logger.log-level=info",
+                "--home=${workspaceFolder}/.tmp/beacond",
+                "--beacon-kit.engine.jwt-secret-path=${workspaceFolder}/testing/files/jwt.hex",
+                "--beacon-kit.block-store-service.enabled",
+                "--beacon-kit.node-api.enabled",
+                "--beacon-kit.node-api.logging",
+            ],
+            "internalConsoleOptions": "openOnSessionStart",
+            "env": {
+                "CHAIN_SPEC": "devnet"
+            },
+            "presentation": {
+                "group": "run",
+                "order": 1
+            },
+            "suppressMultipleSessionWarning": true,
+        }
+    ]
+}

.vscode/tasks.json

@@ -0,0 +1,13 @@
+{
+    "version": "2.0.0",
+    "tasks": [
+        {
+            "label": "build",
+            "type": "shell",
+            "command": "make build COSMOS_BUILD_OPTIONS=nostrip",
+            "presentation": {
+                "close": true
+            }
+        }
+    ]
+}

CODEOWNERS

@@ -1 +1 @@
-*     @itsdevbear @abi87
+*     @berachain/core-admin

Dockerfile

@@ -18,7 +18,7 @@
 ###           Stage 0 - Build Arguments             ###
 #######################################################
 
-ARG GO_VERSION=1.23.0
+ARG GO_VERSION=1.23.4
 ARG RUNNER_IMAGE=alpine:3.20
 ARG BUILD_TAGS="netgo,muslc,blst,bls12381,pebbledb"
 ARG NAME=beacond
@@ -105,7 +105,7 @@ COPY --from=builder /workdir/build/bin/${APP_NAME} /usr/bin/${APP_NAME}
 # TODO: We should un hood this part, its very specific
 # to our kurtosis setup.
 RUN mkdir -p /root/jwt /root/kzg && \
-    apk add --no-cache bash sed curl
+    apk add --no-cache bash sed curl jq
 
 EXPOSE 26656
 EXPOSE 26657