feat: build zkevm contract pp images #1761
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| # Basic deployment workflow. | |
| # Note that more advanced use cases are tested in the nightly workflow. | |
| name: Deploy | |
| on: | |
| pull_request: | |
| push: | |
| branches: [main] | |
| concurrency: | |
| group: deploy-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| ENCLAVE_NAME: cdk | |
| jobs: | |
| run-without-args: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Kurtosis CDK tools | |
| uses: ./.github/actions/setup-kurtosis-cdk | |
| - name: Run Starlark | |
| run: kurtosis run --enclave=${{ env.ENCLAVE_NAME }} --show-enclave-inspect=false . | |
| - name: Inspect enclave | |
| run: kurtosis enclave inspect ${{ env.ENCLAVE_NAME }} | |
| - name: List databases | |
| run: | | |
| postgres_port=$(kurtosis port print ${{ env.ENCLAVE_NAME }} postgres-001 postgres | cut -d':' -f3) | |
| PGPASSWORD=master_password psql --host 127.0.0.1 --port "$postgres_port" --username master_user --dbname master --list | |
| - name: Monitor verified batches (CDK Erigon Permissionless RPC) | |
| working-directory: .github/scripts | |
| run: ./monitor-verified-batches.sh --rpc-url $(kurtosis port print ${{ env.ENCLAVE_NAME }} cdk-erigon-node-001 rpc) | |
| - name: Dump enclave logs | |
| if: failure() | |
| run: kurtosis dump ./dump | |
| - name: Upload logs | |
| if: failure() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dump_run_without_args_${{ github.run_id }} | |
| path: ./dump | |
| list-ymls: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| outputs: | |
| matrix: ${{ steps.set-matrix.outputs.matrix }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Generate test combinations | |
| working-directory: .github/tests | |
| run: ./combine-ymls.sh | |
| - id: set-matrix | |
| # List all yml files in the .github/tests directory, as well as test combinations, except for the additional-services.yml file. | |
| run: echo "matrix=$(ls -R params.yml ./.github/tests/combinations/*.yml | grep -v 'additional-services.yml' | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT | |
| run-with-args: | |
| needs: list-ymls | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| file_name: ${{ fromJson(needs.list-ymls.outputs.matrix) }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Kurtosis CDK tools | |
| uses: ./.github/actions/setup-kurtosis-cdk | |
| - name: Generate test combinations | |
| working-directory: .github/tests | |
| run: ./combine-ymls.sh | |
| - name: Run Starlark | |
| run: kurtosis run --enclave=${{ env.ENCLAVE_NAME }} --args-file=${{ matrix.file_name }} --show-enclave-inspect=false . | |
| - name: Inspect enclave | |
| run: kurtosis enclave inspect ${{ env.ENCLAVE_NAME }} | |
| - name: Monitor verified batches (Central RPC) | |
| run: | | |
| sequencer_type=$(yq --raw-output '.args.sequencer_type' ${{ matrix.file_name }}) | |
| rpc_name="" | |
| if [[ "$sequencer_type" == "erigon" ]]; then | |
| rpc_name="cdk-erigon-node-001" | |
| elif [[ "$sequencer_type" == "zkevm" ]]; then | |
| rpc_name="zkevm-node-rpc-001" | |
| elif [[ "$sequencer_type" == "null" ]]; then | |
| rpc_name="cdk-erigon-node-001" | |
| else | |
| echo "Unknown sequencer type: $sequencer_type" | |
| exit 1 | |
| fi | |
| echo "RPC name: $rpc_name" | |
| ./.github/scripts/monitor-verified-batches.sh --rpc-url $(kurtosis port print ${{ env.ENCLAVE_NAME }} $rpc_name rpc) | |
| - name: Monitor verified batches (zkEVM Permissionless RPC) | |
| run: | | |
| result=$(yq --raw-output '.args.additional_services // [] | contains(["pless_zkevm_node"])' ${{ matrix.file_name }}) | |
| if [[ "$result" == "true" ]]; then | |
| ./.github/scripts/monitor-verified-batches.sh --rpc-url $(kurtosis port print ${{ env.ENCLAVE_NAME }} zkevm-node-rpc-pless-001 rpc) | |
| else | |
| echo "Skipping batch verification as there is no zkevm permissionless RPC in the environment" | |
| fi | |
| - name: Dump enclave logs | |
| if: failure() | |
| run: kurtosis dump ./dump | |
| - name: Upload logs | |
| if: failure() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dump_run_with_args_${{ matrix.file_name }}_${{ github.run_id }} | |
| path: ./dump | |
| additional_services: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Kurtosis CDK tools | |
| uses: ./.github/actions/setup-kurtosis-cdk | |
| - name: Run Starlark | |
| run: kurtosis run --enclave=${{ env.ENCLAVE_NAME }} --args-file=./.github/tests/additional-services.yml --show-enclave-inspect=false . | |
| - name: Inspect enclave | |
| run: kurtosis enclave inspect ${{ env.ENCLAVE_NAME }} | |
| - name: Verify Arpeggio RPC | |
| run: cast bn --rpc-url $(kurtosis port print ${{ env.ENCLAVE_NAME }} arpeggio-001 rpc) | |
| - name: Verify Blutgang RPC | |
| run: cast bn --rpc-url $(kurtosis port print ${{ env.ENCLAVE_NAME }} blutgang-001 http) | |
| - name: Verify erpc RPC | |
| run: cast bn --rpc-url "$(kurtosis port print ${{ env.ENCLAVE_NAME }} erpc-001 rpc)/main/evm/10101" | |
| # zkevm-node doesn't work with fork12. | |
| #- name: Verify permissionless zkevm-node rpc | |
| # run: cast bn --rpc-url $(kurtosis port print ${{ env.ENCLAVE_NAME }} zkevm-node-rpc-pless-001 rpc) | |
| - name: Verify that Prometheus collects Panoptichain metrics | |
| run: | | |
| echo "Wait for one minute while Prometheus gathers metrics..." | |
| sleep 60 | |
| echo "Retrieve Panoptichain metrics from Prometheus..." | |
| panoptichain_metric="panoptichain_system_uptime" | |
| prometheus_url=$(kurtosis port print ${{ env.ENCLAVE_NAME }} prometheus-001 http) | |
| prometheus_query=$(curl "$prometheus_url/api/v1/query?query=$panoptichain_metric") | |
| echo $prometheus_query | jq | |
| if [ "$(jq -r '.data.result[0].metric.__name__' <<<$prometheus_query)" == "$panoptichain_metric" ]; then | |
| echo "✅ Prometheus collects panoptichain metrics!" | |
| else | |
| echo "❌ Prometheus does not collect panoptichain metrics..." | |
| exit 1 | |
| fi | |
| - name: Dump enclave logs | |
| if: failure() | |
| run: kurtosis dump ./dump | |
| - name: Upload logs | |
| if: failure() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dump_additional_services_${{ github.run_id }} | |
| path: ./dump | |
| attach_cdks: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Kurtosis CDK tools | |
| uses: ./.github/actions/setup-kurtosis-cdk | |
| - name: Deploy L1 chain and a first CDK L2 chain (cdk-erigon sequencer + cdk stack) | |
| run: | | |
| kurtosis run --enclave=${{ env.ENCLAVE_NAME }} --show-enclave-inspect=false --args-file=params.yml . | |
| - name: Attach a second CDK L2 chain (cdk-erigon sequencer + cdk stack) | |
| run: | | |
| kurtosis run --enclave=${{ env.ENCLAVE_NAME }} --show-enclave-inspect=false --args-file=agglayer-attach-cdk-params.yml . | |
| - name: Update the agglayer config | |
| run: | | |
| # Download the agglayer config file. | |
| kurtosis files download ${{ env.ENCLAVE_NAME }} agglayer-config-artifact | |
| cd agglayer-config-artifact | |
| # Update the config by adding the rpc and proof signer of the second chain. | |
| tomlq -Y --toml-output --in-place '.FullNodeRPCs += {"2": "http://cdk-erigon-node-002:8123"}' agglayer-config.toml | |
| # Replace the agglayer config. | |
| agglayer_container_id="$(docker ps --filter "name=agglayer" --format "{{.ID}}")" | |
| docker cp agglayer-config.toml "$agglayer_container_id:/etc/zkevm/agglayer-config.toml" | |
| # Restart the agglayer service. | |
| kurtosis service stop ${{ env.ENCLAVE_NAME }} agglayer | |
| kurtosis service start ${{ env.ENCLAVE_NAME }} agglayer | |
| - name: Monitor verified batches of the first L2 chain (CDK Erigon Permissionless RPC) | |
| working-directory: .github/scripts | |
| run: ./monitor-verified-batches.sh --rpc-url "$(kurtosis port print ${{ env.ENCLAVE_NAME }} cdk-erigon-node-001 rpc)" | |
| - name: Monitor verified batches of the second L2 chain (CDK Erigon Permissionless RPC) | |
| working-directory: .github/scripts | |
| run: ./monitor-verified-batches.sh --rpc-url "$(kurtosis port print ${{ env.ENCLAVE_NAME }} cdk-erigon-node-002 rpc)" | |
| - name: Dump enclave logs | |
| if: failure() | |
| run: kurtosis dump ./dump | |
| - name: Upload logs | |
| if: failure() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dump_attach_ckds_${{ github.run_id }} | |
| path: ./dump |