From 526af72bf7199aff9fe3e104bab3f2de458d3ef2 Mon Sep 17 00:00:00 2001 From: 0x416e746f6e Date: Tue, 26 May 2026 13:24:51 +0200 Subject: [PATCH 1/7] fix: use `systemd-repart` from nix --- mkosi.profiles/gcp/mkosi.postoutput | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/mkosi.profiles/gcp/mkosi.postoutput b/mkosi.profiles/gcp/mkosi.postoutput index ac95f434..c59f38e6 100755 --- a/mkosi.profiles/gcp/mkosi.postoutput +++ b/mkosi.profiles/gcp/mkosi.postoutput @@ -21,7 +21,14 @@ cp mkosi.profiles/gcp/repart.d/00-uki.conf "${REPART_TMPDIR}/00-uki.conf" echo "SizeMinBytes=${ESP_BYTES}" >> "${REPART_TMPDIR}/00-uki.conf" echo "SizeMaxBytes=${ESP_BYTES}" >> "${REPART_TMPDIR}/00-uki.conf" -systemd-repart --empty=create \ +# +# - default systemd-repart (in /usr/bin) is "systemd 252 (252.39-1~deb12u2)" +# - the one from nix (/nix/store/*-systemd-*/bin) is newer ("systemd 258 (258.3)" a.t.m.) +# - to use "--copy-source" CLI option we need a newer one +# - this hack ensures systemd-repart resolves to the nix one +# +PATH="${PATH#/usr/bin:/usr/sbin:}" systemd-repart \ + --empty=create \ --size=${DISK_GIB}G \ --definitions="${REPART_TMPDIR}" \ --copy-source=${OUTPUTDIR} \ From 1e0721f1f75621b4fe2b392bd3d571c87010984c Mon Sep 17 00:00:00 2001 From: 0x416e746f6e Date: Wed, 3 Jun 2026 22:45:48 +0200 Subject: [PATCH 2/7] chore: upgrade op-rbuilder to `v0.4.7` --- .../mkosi.extra/etc/flashbots/op-rbuilder.yaml | 2 +- .../l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml index 54c2c844..c22fb303 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -3,7 +3,7 @@ bproxy: node_healthchecker: git_reference: v0.1.11 op_rbuilder: - git_reference: op-rbuilder/v0.4.6 + git_reference: op-rbuilder/v0.4.7 rust: version: 1.94.0 tdx_quote_provider: diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml index f3f03ff2..699a6750 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -1,7 +1,7 @@ node_healthchecker: git_reference: v0.1.11 op_rbuilder: - git_reference: op-rbuilder/v0.4.6 + git_reference: op-rbuilder/v0.4.7 rproxy: git_reference: v0.0.11 rust: From 1af50da5dc499e86e906cabc3c3123bfc35be737 Mon Sep 17 00:00:00 2001 From: "flashbots-images-deploy-bot[bot]" <267115920+flashbots-images-deploy-bot[bot]@users.noreply.github.com> Date: Mon, 8 Jun 2026 18:13:33 +0000 Subject: [PATCH 3/7] chore: bump op-rbuilder to op-rbuilder/v0.4.8 --- .../mkosi.extra/etc/flashbots/op-rbuilder.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml index c22fb303..1018dcfe 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -3,7 +3,7 @@ bproxy: node_healthchecker: git_reference: v0.1.11 op_rbuilder: - git_reference: op-rbuilder/v0.4.7 + git_reference: op-rbuilder/v0.4.8 rust: version: 1.94.0 tdx_quote_provider: From 2e6b8172b41a674bcd631b90b418f287ad7007b9 Mon Sep 17 00:00:00 2001 From: "flashbots-images-deploy-bot[bot]" <267115920+flashbots-images-deploy-bot[bot]@users.noreply.github.com> Date: Tue, 16 Jun 2026 23:53:06 +0000 Subject: [PATCH 4/7] chore: bump op-rbuilder to op-rbuilder/v0.4.9 --- .../mkosi.extra/etc/flashbots/op-rbuilder.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml index 1018dcfe..b5559ec7 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -3,7 +3,7 @@ bproxy: node_healthchecker: git_reference: v0.1.11 op_rbuilder: - git_reference: op-rbuilder/v0.4.8 + git_reference: op-rbuilder/v0.4.9 rust: version: 1.94.0 tdx_quote_provider: From 10031cfa2b7ac22b8435df214409b2a46c0c3697 Mon Sep 17 00:00:00 2001 From: 0x416e746f6e Date: Wed, 17 Jun 2026 16:20:30 +0200 Subject: [PATCH 5/7] feat: implement node cordoning --- .../systemd/system/node-healthchecker.service | 25 --------------- .../vault-agent/gomplate/bproxy.service.ctmpl | 2 +- .../vault-agent/gomplate/bproxy.service.hcl | 2 +- .../gomplate/node-healthchecker.service.ctmpl | 31 +++++++++++++++++++ .../gomplate/node-healthchecker.service.hcl | 25 +++++++++++++++ .../gomplate/op-rbuilder.service.ctmpl | 4 +-- .../gomplate/op-rbuilder.service.hcl | 2 +- .../op-rbuilder-bproxy/mkosi.postinst.chroot | 1 - .../etc/flashbots/op-rbuilder.yaml | 2 +- .../systemd/system/node-healthchecker.service | 25 --------------- .../gomplate/node-healthchecker.service.ctmpl | 31 +++++++++++++++++++ .../gomplate/node-healthchecker.service.hcl | 25 +++++++++++++++ .../gomplate/op-rbuilder.service.ctmpl | 4 +-- .../gomplate/op-rbuilder.service.hcl | 2 +- .../vault-agent/gomplate/rproxy.service.ctmpl | 2 +- .../vault-agent/gomplate/rproxy.service.hcl | 2 +- modules/l2/op-rbuilder/mkosi.postinst.chroot | 1 - 17 files changed, 121 insertions(+), 65 deletions(-) delete mode 100644 modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/systemd/system/node-healthchecker.service create mode 100644 modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl create mode 100644 modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl delete mode 100644 modules/l2/op-rbuilder/mkosi.extra/etc/systemd/system/node-healthchecker.service create mode 100644 modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl create mode 100644 modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/systemd/system/node-healthchecker.service b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/systemd/system/node-healthchecker.service deleted file mode 100644 index 35ef6122..00000000 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/systemd/system/node-healthchecker.service +++ /dev/null @@ -1,25 +0,0 @@ -[Unit] -Description=Blockchain node healthchecker -After=network.target -Wants=network.target - -[Service] -Type=simple -SyslogIdentifier=node-healthchecker -User=op-rbuilder -Group=optimism - -Restart=always -RestartSec=5 -TimeoutStopSec=60 - -ExecStart=/usr/bin/node-healthchecker serve \ - --healthcheck-block-age-threshold 10s \ - --healthcheck-timeout 500ms \ - --healthcheck-reth-base-url http://127.0.0.1:18645 \ - --healthcheck-unconditional-fail-duration 1m \ - --http-status-warning 200 \ - --server-listen-address 0.0.0.0:8080 - -[Install] -WantedBy=default.target diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.ctmpl b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.ctmpl index 681c0553..93ed365b 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.ctmpl +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.ctmpl @@ -1,5 +1,5 @@ [Install] -WantedBy=default.target +WantedBy=minimal.target [Unit] Description=L2 builder proxy diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.hcl b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.hcl index f675bec4..0c08bb9c 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.hcl +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/bproxy.service.hcl @@ -14,7 +14,7 @@ template { command = ["/bin/sh", "-c", <<-EOT - printf '{"@level":"info","@message":"rendered template","@destination":"/etc/systemd/system/bproxy.service","@content":"%s"}\n' "$( cat /etc/systemd/system/bproxy.service | base64 -w 0 )" + cat /etc/systemd/system/bproxy.service | base64 -w 2048 systemctl daemon-reload systemctl add-wants minimal.target bproxy.service diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl new file mode 100644 index 00000000..a42b22d2 --- /dev/null +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl @@ -0,0 +1,31 @@ +[Install] +WantedBy=minimal.target + +[Unit] +Description=Blockchain node healthchecker +After=network.target +Wants=network.target + +[Service] +Type=simple +SyslogIdentifier=node-healthchecker +User=op-rbuilder +Group=optimism + +Restart=always +RestartSec=5 +TimeoutStopSec=60 + +((- $cordon := ( secret "[[ gcp.Meta "attributes/vault_kv_path" ]]/node/_cordon/[[ gcp.Meta "name" ]]" ).Data.data )) +((- $cordon_after := "0" ))(( if $cordon.after ))(( $cordon_after = $cordon.after ))(( end )) +((- $cordon_before := "0" ))(( if $cordon.before ))(( $cordon_before = $cordon.before ))(( end )) +((- $status := "200" ))(( if ( and ( ge (timestamp "unix") $cordon_after ) ( le (timestamp "unix") $cordon_before ) ) ))(( $status = "503" ))(( end )) + +ExecStart=/usr/bin/node-healthchecker serve \ + --healthcheck-block-age-threshold 10s \ + --healthcheck-timeout 500ms \ + --healthcheck-reth-base-url http://127.0.0.1:18645 \ + --healthcheck-unconditional-fail-duration 1m \ + --http-status-ok (( $status )) \ + --http-status-warning (( $status )) \ + --server-listen-address 0.0.0.0:8080 diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl new file mode 100644 index 00000000..e44831c1 --- /dev/null +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl @@ -0,0 +1,25 @@ +template { + left_delimiter = "((" + right_delimiter = "))" + + source = "/etc/vault-agent/node-healthchecker.service.ctmpl" + destination = "/etc/systemd/system/node-healthchecker.service" + + user = "root" + group = "root" + perms = "0644" + + exec { + timeout = "60s" + + command = ["/bin/sh", "-c", + <<-EOT + cat /etc/systemd/system/node-healthchecker.service | base64 -w 2048 + + systemctl daemon-reload + systemctl add-wants minimal.target node-healthchecker.service + systemctl restart node-healthchecker.service + EOT + ] + } +} diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl index 431231e8..cc288a79 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl @@ -1,7 +1,5 @@ -# op-rbuilder - [Install] -WantedBy=default.target +WantedBy=minimal.target [Unit] Description=op-rbuilder diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl index 5fa35dee..f72e1c68 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl @@ -14,7 +14,7 @@ template { command = ["/bin/sh", "-c", <<-EOT - printf '{"@level":"info","@message":"rendered template","@destination":"/etc/systemd/system/op-rbuilder.service","@content":"%s"}\n' "$( cat /etc/systemd/system/op-rbuilder.service | base64 -w 0 )" + cat /etc/systemd/system/op-rbuilder.service | base64 -w 2048 systemctl daemon-reload systemctl add-wants minimal.target op-rbuilder.service diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.postinst.chroot b/modules/l2/op-rbuilder-bproxy/mkosi.postinst.chroot index 9faf21a3..05647d2c 100755 --- a/modules/l2/op-rbuilder-bproxy/mkosi.postinst.chroot +++ b/modules/l2/op-rbuilder-bproxy/mkosi.postinst.chroot @@ -5,7 +5,6 @@ set -euxo pipefail # Enable systemd services systemctl add-wants minimal.target \ - node-healthchecker.service \ tdx-quote-provider.service # Create users and groups diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml index 699a6750..15b9f0e3 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -1,7 +1,7 @@ node_healthchecker: git_reference: v0.1.11 op_rbuilder: - git_reference: op-rbuilder/v0.4.7 + git_reference: op-rbuilder/v0.4.9 rproxy: git_reference: v0.0.11 rust: diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/systemd/system/node-healthchecker.service b/modules/l2/op-rbuilder/mkosi.extra/etc/systemd/system/node-healthchecker.service deleted file mode 100644 index 35ef6122..00000000 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/systemd/system/node-healthchecker.service +++ /dev/null @@ -1,25 +0,0 @@ -[Unit] -Description=Blockchain node healthchecker -After=network.target -Wants=network.target - -[Service] -Type=simple -SyslogIdentifier=node-healthchecker -User=op-rbuilder -Group=optimism - -Restart=always -RestartSec=5 -TimeoutStopSec=60 - -ExecStart=/usr/bin/node-healthchecker serve \ - --healthcheck-block-age-threshold 10s \ - --healthcheck-timeout 500ms \ - --healthcheck-reth-base-url http://127.0.0.1:18645 \ - --healthcheck-unconditional-fail-duration 1m \ - --http-status-warning 200 \ - --server-listen-address 0.0.0.0:8080 - -[Install] -WantedBy=default.target diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl new file mode 100644 index 00000000..a42b22d2 --- /dev/null +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.ctmpl @@ -0,0 +1,31 @@ +[Install] +WantedBy=minimal.target + +[Unit] +Description=Blockchain node healthchecker +After=network.target +Wants=network.target + +[Service] +Type=simple +SyslogIdentifier=node-healthchecker +User=op-rbuilder +Group=optimism + +Restart=always +RestartSec=5 +TimeoutStopSec=60 + +((- $cordon := ( secret "[[ gcp.Meta "attributes/vault_kv_path" ]]/node/_cordon/[[ gcp.Meta "name" ]]" ).Data.data )) +((- $cordon_after := "0" ))(( if $cordon.after ))(( $cordon_after = $cordon.after ))(( end )) +((- $cordon_before := "0" ))(( if $cordon.before ))(( $cordon_before = $cordon.before ))(( end )) +((- $status := "200" ))(( if ( and ( ge (timestamp "unix") $cordon_after ) ( le (timestamp "unix") $cordon_before ) ) ))(( $status = "503" ))(( end )) + +ExecStart=/usr/bin/node-healthchecker serve \ + --healthcheck-block-age-threshold 10s \ + --healthcheck-timeout 500ms \ + --healthcheck-reth-base-url http://127.0.0.1:18645 \ + --healthcheck-unconditional-fail-duration 1m \ + --http-status-ok (( $status )) \ + --http-status-warning (( $status )) \ + --server-listen-address 0.0.0.0:8080 diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl new file mode 100644 index 00000000..e44831c1 --- /dev/null +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/node-healthchecker.service.hcl @@ -0,0 +1,25 @@ +template { + left_delimiter = "((" + right_delimiter = "))" + + source = "/etc/vault-agent/node-healthchecker.service.ctmpl" + destination = "/etc/systemd/system/node-healthchecker.service" + + user = "root" + group = "root" + perms = "0644" + + exec { + timeout = "60s" + + command = ["/bin/sh", "-c", + <<-EOT + cat /etc/systemd/system/node-healthchecker.service | base64 -w 2048 + + systemctl daemon-reload + systemctl add-wants minimal.target node-healthchecker.service + systemctl restart node-healthchecker.service + EOT + ] + } +} diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl index 0e047e19..bb9aac05 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.ctmpl @@ -1,7 +1,5 @@ -# op-rbuilder - [Install] -WantedBy=default.target +WantedBy=minimal.target [Unit] Description=op-rbuilder diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl index 65755ba8..c129c9a7 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/op-rbuilder.service.hcl @@ -14,7 +14,7 @@ template { command = ["/bin/sh", "-c", <<-EOT - printf '{"@level":"info","@message":"rendered template","@destination":"/etc/systemd/system/op-rbuilder.service","@content":"%s"}\n' "$( cat /etc/systemd/system/op-rbuilder.service | base64 -w 0 )" + cat /etc/systemd/system/op-rbuilder.service | base64 -w 2048 systemctl daemon-reload systemctl add-wants minimal.target op-rbuilder.service diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.ctmpl b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.ctmpl index e443a5f6..91d4ea7a 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.ctmpl +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.ctmpl @@ -1,5 +1,5 @@ [Install] -WantedBy=default.target +WantedBy=minimal.target [Unit] Description=L2 builder proxy diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.hcl b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.hcl index 65c7f8c8..0b8c6f4b 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.hcl +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/vault-agent/gomplate/rproxy.service.hcl @@ -14,7 +14,7 @@ template { command = ["/bin/sh", "-c", <<-EOT - printf '{"@level":"info","@message":"rendered template","@destination":"/etc/systemd/system/rproxy.service","@content":"%s"}\n' "$( cat /etc/systemd/system/rproxy.service | base64 -w 0 )" + cat /etc/systemd/system/rproxy.service | base64 -w 2048 systemctl daemon-reload systemctl add-wants minimal.target rproxy.service diff --git a/modules/l2/op-rbuilder/mkosi.postinst.chroot b/modules/l2/op-rbuilder/mkosi.postinst.chroot index 9faf21a3..05647d2c 100755 --- a/modules/l2/op-rbuilder/mkosi.postinst.chroot +++ b/modules/l2/op-rbuilder/mkosi.postinst.chroot @@ -5,7 +5,6 @@ set -euxo pipefail # Enable systemd services systemctl add-wants minimal.target \ - node-healthchecker.service \ tdx-quote-provider.service # Create users and groups From 4e7005c7924343c29bc3f699b793e6d0dd96bc42 Mon Sep 17 00:00:00 2001 From: Kim Romero Date: Tue, 23 Jun 2026 13:00:30 +0300 Subject: [PATCH 6/7] chore: bump rproxy to v0.0.12 --- .../l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml index 15b9f0e3..422dbd57 100644 --- a/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -3,7 +3,7 @@ node_healthchecker: op_rbuilder: git_reference: op-rbuilder/v0.4.9 rproxy: - git_reference: v0.0.11 + git_reference: v0.0.12 rust: version: 1.94.0 tdx_quote_provider: From 78e2dfc0398fb35f86a249df500d4f9e1d3f5899 Mon Sep 17 00:00:00 2001 From: "flashbots-images-deploy-bot[bot]" <267115920+flashbots-images-deploy-bot[bot]@users.noreply.github.com> Date: Wed, 24 Jun 2026 12:39:33 +0000 Subject: [PATCH 7/7] chore: bump op-rbuilder to op-rbuilder/v0.4.10 --- .../mkosi.extra/etc/flashbots/op-rbuilder.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml index b5559ec7..67989582 100644 --- a/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml +++ b/modules/l2/op-rbuilder-bproxy/mkosi.extra/etc/flashbots/op-rbuilder.yaml @@ -3,7 +3,7 @@ bproxy: node_healthchecker: git_reference: v0.1.11 op_rbuilder: - git_reference: op-rbuilder/v0.4.9 + git_reference: op-rbuilder/v0.4.10 rust: version: 1.94.0 tdx_quote_provider: