Deploying an Obol DV on Lido CSM using Linux (Early Access)

To start, this guide assumes you're running Linux and you've installed Git and Docker. We also assume you're familiar with the Community Staking Module (CSM) and operating a node using Obol DVT. Also, cluster and squad are used interchangabely within this document.

This guide uses Holesky testnet. If deploying on mainnet, please adjust required addresses.

Getting started

This guide will be broken down into 3 main steps:

Part 1: Create cluster multi-sig + 0xSplits contract

Part 2: Use Obol Launchpad + CLI to create the cluster

Part 3: Deploy the validator to CSM

In this guide we'll be using CSM with extendedManagerPermissions where the managerAddress is set to the cluster multi-sig and the rewardAddress is set to the 0xSplits contract.

Part 1: Creating the Cluster multi-sig + 0xSplits Contract

Detailed instructions on how to create a Safe Wallet can be found here. The Holesky Testnet Safe deployment can be found at this address: https://holesky-safe.protofire.io

Squad leader should obtain the signer addresses from all the cluster members, then connect their signer wallet and choose to create a new Safe.

After giving the Safe a name and selecting the Holesky network, they continue by clicking the Next button.

Then add all the signer addresses of the cluster members, select a threshold, and proceed to the final step by clicking the Next button.

Finally, send the transaction to create the Safe by clicking on the Create button.

Creating the reward split contract

Squad leader should obtain the reward addresses from all the cluster members. Then should open https://app.splits.org and select to create a new contract. Then he should select Holesky for the network.

Select Split for the contract type.

Add the reward addresses of all cluster members. Then choose whether the contract is immutable (recommended option), whether to sponsor the maintainers of splits.org, and whether there is a distribution bounty so that third parties can distribute the rewards in exchange for a small fee.

Finally, click the Create Split button, execute the transaction and share the created split contract with all cluster members for review.

Part 2: Use Obol Launchpad + CLI to create the cluster

Charon is the software that enables validators to be run on a group of independent nodes - a cluster or squad. A complete multi-container Docker setup including execution client, consensus client, validator client, MEV-Boost and the Charon client can be found in this repository https://github.com/ObolNetwork/charon-distributed-validator-node.

Step 1: Clone the repo and add give $USER permissions

git clone https://github.com/ObolNetwork/charon-distributed-validator-node.git

sudo usermod -a -G docker $USER

You will then need to exit the ssh session and log in again.

Step 2: Create ENR and Backup your Private Key

Change into the CDVN directory:

cd charon-distributed-validator-node

Use docker to create an ENR

docker run --rm -v "$(pwd):/opt/charon" obolnetwork/charon:v1.1.1 create enr

Back up the private key located in .charon/charon-enr-private-key

Step 3: Create the DV cluster configuration using the Launchpad

With CSM launching soon, we've inegrated a custom CSM configuration into the launchpad. Choosing this configuration allows you to create up to 12 validator keys (CSM EA Limit) with Lido's required withdrawal and fee recipient addresses.

To start, the squad leader opens the Holesky DV Launchpad, then connects their wallet and chooses Create a cluster with a group.

Then click Get Started button on the next page.

Accepts all the necessary advisories and signs the confirmation.

Cluster configuration begins here. First, select the cluster name and size. Then enters all cluster members signer addresses.

Next, select the number of validators (up to 12 for CSM EA) to deploy. Enter the complete Public ENR which was generated during step 2 above, this includes the enr prefix (enr:-HW4QLS48i.........). In the Withdrawal Configuration field, select LIDO CSM. This will automatically fill in the required Withdrawal Address and Fee Recipient Addresss per Lido Documentation Finally, click on the Create cluster configuration button.

Lastly, share the cluster configuration link with the other cluster members.

Step 4: Distributed Key Generation

All cluster members need to open the cluster invite link, connect their wallet, accept all necessary advisories, and verify the cluster configuration. Each squad member will need to input their ENR, so see steps 1 and 2 above.

Once all members confirm the configuration they will see the continue button.

On the next page, they will find a CLI command.

All members need to syncronisly complete this step. Go back to terminal, make sure you're in the correct directory:

cd charon-distributed-validator-node

After copying and pasting the command they should wait for all the other squad members to connect and complete the DKG ceremony.

A cluster-lock.json file is created in the .charon folder as well as the deposit-data.json file and the validator_keys folder. This contains each operator's partial key signatures for the validators.

At this point, each operator must make a backup of the .charon folder and keep it safe, as validator keys can't be recreated.

Step 5: Configuring the MEV-boost client

To configure MEV-boost each cluster memeber needs to edit the .env file and set the BUILDER_API_ENABLED=true and MEVBOOST_RELAYS= to the URL of at least one of Lido's approved MEV relays here. Multiple relays must be separated by a comma. **The use of unapproved relays is strictly forbidden!

Step 6: Starting the Node

Each cluster member should start the node with the following command:

docker compose up -d

At this point, execution and consensus clients should start syncing, and Charon and the validator client should start waiting for the validator to be activated.

Part 3: Deploy the keys to Lido CSM

CSM is launching with a whitelisted set of apporved operators (Early Access). The squad member with EA should be the one to create the node through the CSM wiget.
EA member will head to CSM Extended Mode and connect their wallet. Note the mode=extended parameter. This allows the Lido CSM reward address to be set to the split contract created earlier.

EA member clicks on the Create Node Operator button...

EA member pastes the contents of the deposit-data.json file into the Upload deposit data field. EA member should have enough ETH/stETH/wstETH to cover the bond.

Expand the Specify custom addresses section...

Set the Reward Address field to the Split contract address and the Manager Address field to the Safe wallet address. Verify that the Extended box is outlined. This ensures that the Safe address has the ability to change the reward address if necessary. Check that the correct addresses are set and click the Create Node Operator button.

Sign the transaction, and the cluster is ready for deposit from Lido CSM.

Monitoring the CSM operator

You can follow this guide for the steps required to monitor your CSM operator.

Exiting Validators

You can follow the Obol launchpad instructions on how to exit the cluster validators.