Docker
Authors: [Vince | Nodeify]
System Requirements
Higher clock speed over core count
Ubuntu 22.04
>=16GB
>=3TB (NVMe recommended)
Erigon 🦦 Lighthouse 🕯️
Official Docs https://erigon.gitbook.io/
Pre-requisites
Update, upgrade, and clean the system, and then firewall management (ufw), Docker, and the Git version control system.
sudo apt update -y && sudo apt upgrade -y && sudo apt auto-remove -y
sudo apt install docker.io docker-compose git ufw -y
Set explicit default UFW rules
sudo ufw default deny incoming
sudo ufw default allow outgoing
Allow SSH, HTTP and HTTPS
sudo ufw allow 22/tcp
sudo ufw allow 80
sudo ufw allow 443
Get the IP address of the host machine, you can use the following command in a terminal or command prompt
curl ifconfig.me
Set an A record for a domain, you need to access the domain's DNS settings and create an A record that points to the IP address of the host machine. This configuration allows users to reach your domain by resolving the domain name to the specific IP address associated with your host machine.
Create Erigon directory
The first command, mkdir erigon
, will create a new directory named erigon in the current location. The second command, cd erigon
, will change your current working directory to the newly created erigon directory. Now you are inside the erigon directory and can start storing docker-compose and related files in it.
mkdir erigon
cd erigon
Generate JWT token
Generate a 32-byte random hexadecimal value using OpenSSL, removes any newline characters, and then save the result into the file "jwt.hex" located in the erigon directory.
openssl rand -hex 32 | tr -d "\n" > "./jwt.hex"
Create .env file
sudo nano .env
Paste the following into the file.
EMAIL={YOUR_EMAIL} #Your email to receive SSL renewal emails
DOMAIN={YOUR_DOMAIN} #Domain of your reth node you set earlier, reth.indexerdao.com
WHITELIST={YOUR_REMOTE_MACHINE_IP} # Remote IP's allowed to connect to RPC
Create docker-compose.yml
sudo nano docker-compose.yml
Paste the following into the docker-compose.yml
version: '3.8'
networks:
monitor-net:
driver: bridge
volumes:
traefik_letsencrypt: {}
erigon_data: {}
lighthouse_data: {}
services:
######################################################################################
##################### TRAEFIK PROXY CONTAINER #######################
######################################################################################
traefik:
image: traefik:latest
container_name: traefik
restart: always
ports:
- "443:443"
networks:
- monitor-net
command:
- "--api=true"
- "--api.insecure=true"
- "--api.dashboard=true"
- "--log.level=DEBUG"
- "--providers.docker=true"
- "--providers.docker.exposedbydefault=false"
- "--entrypoints.websecure.address=:443"
- "--certificatesresolvers.myresolver.acme.tlschallenge=true"
- "--certificatesresolvers.myresolver.acme.email=$EMAIL"
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
volumes:
- "traefik_letsencrypt:/letsencrypt"
- "/var/run/docker.sock:/var/run/docker.sock:ro"
labels:
- "traefik.enable=true"
- "traefik.http.middlewares.ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
######################################################################################
##################### ERIGON CONTAINER #######################
######################################################################################
erigon:
image: thorax/erigon:v2.48.1
container_name: erigon
restart: unless-stopped
expose:
- "8545" #rpc
- "8551" #auth
- "6060" #metrics
- "9090" #api
ports:
- 30303:30303 #p2p
- 30303:30303/udp #p2p
- 30304:30304 #p2p
- 30304:30304/udp #p2p
- 42069:42069 #torrent
- 42069:42069/udp #torrent
- 4000:4000/udp #lightclient discovery
- 4001:4001 #lightclient tcp
networks:
- monitor-net
command: >
--chain mainnet
--authrpc.jwtsecret=/jwt
--authrpc.port=8551
--authrpc.addr=0.0.0.0
--authrpc.vhosts=*
--http
--http.addr=0.0.0.0
--http.port=8545
--http.compression
--http.vhosts=*
--http.corsdomain=*
--http.api=eth,debug,net,trace,web3,erigon
--private.api.addr=0.0.0.0:9090
--ws --ws.compression
--metrics --metrics.addr=0.0.0.0
--metrics.port=6060
--pprof
--pprof.addr=0.0.0.0
--pprof.port=6070
--torrent.download.rate 1024mb
--rpc.returndata.limit=1000000
volumes:
- erigon_data:/home/erigon/.local/share/erigon
- ./jwt.hex:/jwt:ro
labels:
- "traefik.enable=true"
- "traefik.http.middlewares.erigon-stripprefix.stripprefix.prefixes=/eth-mainnet"
- "traefik.http.services.erigon.loadbalancer.server.port=8545"
- "traefik.http.routers.erigon.entrypoints=websecure"
- "traefik.http.routers.erigon.tls.certresolver=myresolver"
- "traefik.http.routers.erigon.rule=Host(`$DOMAIN`) && PathPrefix(`/eth-mainnet`)"
- "traefik.http.routers.erigon.middlewares=arbitrum-stripprefix, ipwhitelist"
######################################################################################
##################### LIGHTHOUSE CONTAINER ##################
######################################################################################
lighthouse:
image: sigp/lighthouse:v4.3.0
container_name: lighthouse
restart: unless-stopped
expose:
- "5052/tcp" #http api
- "5054/tcp" #metrics
ports:
- "9000:9000/tcp" # peering
- "9000:9000/udp"
networks:
- monitor-net
command: >
lighthouse bn
--http --http-address 0.0.0.0
--execution-endpoint=http://erigon:8551
--metrics --metrics-address 0.0.0.0
--execution-jwt=/jwt.hex
--checkpoint-sync-url=https://sync-mainnet.beaconcha.in
volumes:
- lighthouse_data:/data
- ./jwt.hex:/jwt.hex:ro
Run Erigon
docker-compose up -d
Monitor Logs
Use docker logs
to monitor your erigon and lighthouse nodes. The -f
flag ensures you are following the log output
docker logs erigon -f
docker logs lighthouse -f
Test Erigon RPC 🧪
Erigon and Consensus client must be synced before testing.
curl -X POST -H "Content-Type: application/json" --data '{"jsonrpc":"2.0","method":"eth_getBlockByNumber","params":["0x1", true],"id":1}' http://{DOMAIN}/eth-mainnet
This should be your result.
{"jsonrpc":"2.0","id":1,"result":{"difficulty":"0x3ff800000","extraData":"0x476574682f76312e302e302f6c696e75782f676f312e342e32","gasLimit":"0x1388","gasUsed":"0x0","hash":"0x88e96d4537bea4d9c05d12549907b32561d3bf31f45aae734cdc119f13406cb6","logsBloom":"0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","miner":"0x05a56e2d52c817161883f50c441c3228cfe54d9f","mixHash":"0x969b900de27b6ac6a67742365dd65f55a0526c41fd18e1b16f1a1215c2e66f59","nonce":"0x539bd4979fef1ec4","number":"0x1","parentHash":"0xd4e56740f876aef8c010b86a40d5f56745a118d0906a34e69aec8c0db1cb8fa3","receiptsRoot":"0x56e81f171bcc55a6ff8345e692c0f86e5b48e01b996cadc001622fb5e363b421","sha3Uncles":"0x1dcc4de8dec75d7aab85b567b6ccd41ad312451b948a7413f0a142fd40d49347","size":"0x219","stateRoot":"0xd67e4d450343046425ae4271474353857ab860dbc0a1dde64b41b5cd3a532bf3","timestamp":"0x55ba4224","totalDifficulty":"0x7ff800000","transactions":[],"transactionsRoot":"0x56e81f171bcc55a6ff8345e692c0f86e5b48e01b996cadc001622fb5e363b421","uncles":[]}}
Last updated
Was this helpful?