-
Notifications
You must be signed in to change notification settings - Fork 276
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(permissionless batches): recovery mode after permissionless batches #1073
base: syncUpstream/active
Are you sure you want to change the base?
feat(permissionless batches): recovery mode after permissionless batches #1073
Conversation
…initial batch from which point the existing local chain will be overridden with the blocks from the pipeline
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
Semgrep found 1 Risk: Affected versions of golang.org/x/net, golang.org/x/net/http2, and net/http are vulnerable to Uncontrolled Resource Consumption. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Fix: Upgrade this library to at least version 0.23.0 at go-ethereum/go.mod:145. Reference(s): GHSA-4v7x-pqxf-cx7m, CVE-2023-45288 Ignore this finding from ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2. |
@@ -39,7 +41,6 @@ import ( | |||
"github.com/scroll-tech/go-ethereum/log" | |||
"github.com/scroll-tech/go-ethereum/metrics" | |||
"github.com/scroll-tech/go-ethereum/node" | |||
"go.uber.org/automaxprocs/maxprocs" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
don't change this
if s.blockchain.CurrentBlock().Number.Uint64()%1000 == 0 { | ||
log.Info("L1 sync progress", "blockhain height", s.blockchain.CurrentBlock().Number.Uint64(), "block hash", s.blockchain.CurrentBlock().Hash(), "root", s.blockchain.CurrentBlock().Root) | ||
if s.asyncChecker != nil { | ||
_ = s.asyncChecker.Check(fullBlock) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There seems to be no need to handle errors. what about handling errors here like printing some logs or removing error returns in asyncChecker.Check
?
return fmt.Errorf("failed getting parent block, number: %d", parentBlockNumber) | ||
} | ||
|
||
fullBlock, _, err := s.blockchain.BuildAndWriteBlock(parentBlock, block.PartialHeader.ToHeader(), block.Transactions, sign) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
interesting. WriteStatus
seems never been handled in the codebase.
RecoveryMode bool // Recovery mode is used to override existing blocks with the blocks read from the pipeline and start from a specific L1 block and batch | ||
InitialL1Block uint64 // L1 block in which the InitialBatch was committed (or any earlier L1 block but requires more RPC requests) | ||
InitialBatch uint64 // Batch number from which to start syncing and overriding blocks | ||
SignBlocks bool // Whether to sign the blocks after reading them from the pipeline (requires correct Clique signer key) and history of blocks with Clique signatures |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
could this be a mandatory mode? That is, any considerations to set it as a flag since it seems to be deducible by "produce block" and "sync from da" mode?
return nil, NonStatTy, fmt.Errorf("error validating block %d: %w", fullBlock.Number().Uint64(), err) | ||
} | ||
|
||
writeStatus, err := bc.writeBlockAndSetHead(fullBlock, receipts, logs, statedb, false) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Would set emitHeadEvent
as true help clear the txn pool?
1. Purpose or design rationale of this PR
This PR implements a recovery mode after batches have been submitted permissionlessly in the context of permissionless batches. During permissionless mode the L2 network will not produce any valid/canonical L2 chain. Batches can be submitted by anyone directly to the L1.
This PR extends the
L1 follower mode
to be able to recover state from any given L1 block height--da.recovery.initiall1block
and batch index--da.recovery.initialbatch
to a given L2 end block--da.recovery.l2endblock
, while overriding any existing local state of the node.Additionally, it allows to re-sign the read blocks with
--da.recovery.signblocks
so that once the sequencer comes back online a valid canonical L2 chain can again be created from the permissionless committed batches.2. PR title
Your PR title must follow conventional commits (as we are doing squash merge for each PR), so it must start with one of the following types:
3. Deployment tag versioning
Has the version in
params/version.go
been updated?4. Breaking change label
Does this PR have the
breaking-change
label?