teku-vc-only.yml

version: "3.4"
x-logging: &logging
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: "3"
      tag: '{{.ImageName}}|{{.Name}}|{{.ImageFullID}}|{{.FullID}}'

services:
  validator:
    restart: "${RESTART}"
    build:
      context: ./teku
      args:
        - BUILD_TARGET=${TEKU_SRC_BUILD_TARGET}
        - DOCKER_TAG=${TEKU_DOCKER_TAG}
      dockerfile: ${TEKU_DOCKERFILE}
    image: teku:merge
    user: teku
    volumes:
      - teku-data:/var/lib/teku
      - /etc/localtime:/etc/localtime:ro
    <<: *logging
    entrypoint:
      - docker-entrypoint-vc.sh
      - /opt/teku/bin/teku
      - validator-client
      - --beacon-node-api-endpoint=${CL_NODE:-http://consensus:5052}
      - --data-path=/var/lib/teku
      - --log-destination=CONSOLE
      - --network=auto
      - --validators-keystore-locking-enabled=true
      - --validator-keys=/var/lib/teku/validator-keys:/var/lib/teku/validator-passwords
      - --validators-graffiti=${GRAFFITI}
      - --validators-early-attestations-enabled=false
      - --validator-api-enabled=true
      - --validator-api-port=${KEY_API_PORT:-7500}
      - --validator-api-host-allowlist=*
      - --validator-api-cors-origins=*
      - --validator-api-keystore-file=/var/lib/teku/teku-keyapi.keystore
      - --validator-api-keystore-password-file=/var/lib/teku/teku-keyapi.password
      - --validators-proposer-default-fee-recipient=${FEE_RECIPIENT}
  get-keyapi-token:
    profiles: ["tools"]
    restart: "no"
    image: alpine:latest
    user: "10002"
    volumes:
      - teku-data:/var/lib/teku
      - /etc/localtime:/etc/localtime:ro
    <<: *logging
    entrypoint: ["/bin/sh","-c"]
    command:
      - |
        cat /var/lib/teku/validator/key-manager/validator-api-bearer
        echo
  validator-import:
    profiles: ["tools"]
    restart: "no"
    image: teku:merge
    user: root
    volumes:
      - teku-data:/var/lib/teku
      - ./.eth/validator_keys:/validator_keys
      - /etc/localtime:/etc/localtime:ro
    environment:
      - KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD:-}
    entrypoint: validator-import.sh
  validator-exit:
    profiles: ["tools"]
    restart: "no"
    image: teku:merge
    user: teku
    volumes:
      - teku-data:/var/lib/teku
      - /etc/localtime:/etc/localtime:ro
    entrypoint:
      - /opt/teku/bin/teku
      - voluntary-exit
      - --beacon-node-api-endpoint=${CL_NODE:-http://consensus:5052}
      - --validator-keys=/var/lib/teku/validator-keys:/var/lib/teku/validator-passwords
  validator-list:
    profiles: ["tools"]
    restart: "no"
    image: livepeerci/curl-jq
    user: "10002"
    volumes:
      - teku-data:/var/lib/teku
      - /etc/localtime:/etc/localtime:ro
    depends_on:
      - validator
    entrypoint: ["/bin/sh","-c"]
    command:
      - |
        set -e
        token=$$(cat /var/lib/teku/validator/key-manager/validator-api-bearer)
        result=$$(curl -k -s -H "Accept: application/json" -H "Authorization: Bearer $$token" https://validator:7500/eth/v1/keystores)
        if ! echo $$result | grep -q "data"; then
           echo "The key manager API query failed. Output:"
           echo $$result
        fi
        if [ $$(echo $$result | jq '.data | length') -eq 0 ]; then
            echo "No keys loaded"
        else
          echo "Validator public keys"
          echo $$result | jq -r '.data[].validating_pubkey'
        fi
volumes:
  teku-data: