Feature / CosmWasm Integration

.github/workflows/test.yml

@@ -27,32 +27,60 @@ jobs:
           key: ${{ runner.os }}-go-tparse-binary
 
   build:
+    name: sged-${{ matrix.targetos }}-${{ matrix.arch }}
     runs-on: ubuntu-latest
+
     strategy:
       matrix:
-        go-arch: ["amd64", "arm", "arm64"]
+        arch: [amd64, arm64]
+        targetos: [darwin, linux]
+        include:
+          - targetos: darwin
+            arch: arm64
+
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v5
-        with:
-          go-version: 1.22
-      - uses: technote-space/get-diff-action@v4
-        id: git_diff
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - name: Get git diff
+        uses: technote-space/[email protected]
         with:
           PATTERNS: |
-            **/**.go
+            **/**.wasm
+            !tests/**
+            **/**.go !**/*_test.go
             go.mod
             go.sum
-      - name: Build
-        run: GOARCH=${{ matrix.go-arch }} LEDGER_ENABLED=false make build
+            Makefile
+            .github/workflows/build.yml
+      - name: 🐿 Setup Golang
+        uses: actions/setup-go@v5
+        if: env.GIT_DIFF
+        with:
+          go-version-file: go.mod
+        env:
+          GOOS: ${{ matrix.targetos }}
+          GOARCH: ${{ matrix.arch }}
+      - name: Download Dependencies
+        if: env.GIT_DIFF
+        run: go mod download
+      - name: Build sged
+        if: env.GIT_DIFF
+        run: |
+          GOWRK=off go build cmd/sged/main.go
+      - name: Upload sged artifact
+        if: env.GIT_DIFF
+        uses: actions/upload-artifact@v3
+        with:
+          name: sged-${{ matrix.targetos }}-${{ matrix.arch }}
+          path: cmd/sged/sged
 
   split-test-files:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/setup-go@v5
         with:
           go-version: 1.22
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Create a file with all the pkgs
         run: go list ./... > pkgs.txt
       - name: Split pkgs into 4 files
@@ -83,7 +111,7 @@ jobs:
       matrix:
         part: ["00", "01", "02", "03"]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
           go-version: 1.22
@@ -110,7 +138,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: tests
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: technote-space/get-diff-action@v4
         with:
           PATTERNS: |
@@ -161,7 +189,7 @@ jobs:
       matrix:
         part: ["00", "01", "02", "03"]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
           go-version: 1.22

Dockerfile

@@ -0,0 +1,75 @@
+# syntax=docker/dockerfile:1
+
+ARG GO_VERSION="1.22"
+ARG RUNNER_IMAGE="gcr.io/distroless/static-debian11"
+ARG BUILD_TAGS="netgo,ledger,muslc"
+
+# --------------------------------------------------------
+# Builder
+# --------------------------------------------------------
+
+FROM golang:${GO_VERSION}-alpine3.18 as builder
+
+ARG GIT_VERSION
+ARG GIT_COMMIT
+ARG BUILD_TAGS
+
+RUN apk add --no-cache \
+    ca-certificates \
+    build-base \
+    linux-headers
+
+# Download go dependencies
+WORKDIR /sge
+COPY go.mod go.sum ./
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/root/go/pkg/mod \
+    go mod download
+
+# Cosmwasm - Download correct libwasmvm version
+RUN ARCH=$(uname -m) && WASMVM_VERSION=$(go list -m github.com/CosmWasm/wasmvm | sed 's/.* //') && \
+    wget https://github.com/CosmWasm/wasmvm/releases/download/$WASMVM_VERSION/libwasmvm_muslc.$ARCH.a \
+    -O /lib/libwasmvm_muslc.a && \
+    # verify checksum
+    wget https://github.com/CosmWasm/wasmvm/releases/download/$WASMVM_VERSION/checksums.txt -O /tmp/checksums.txt && \
+    sha256sum /lib/libwasmvm_muslc.a | grep $(cat /tmp/checksums.txt | grep libwasmvm_muslc.$ARCH | cut -d ' ' -f 1)
+
+# Copy the remaining files
+COPY . .
+
+# Build sged binary
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/root/go/pkg/mod \
+    GOWORK=off go build \
+    -mod=readonly \
+    -tags "netgo,ledger,muslc" \
+    -ldflags \
+    "-X github.com/cosmos/cosmos-sdk/version.Name="sge" \
+    -X github.com/cosmos/cosmos-sdk/version.AppName="sged" \
+    -X github.com/cosmos/cosmos-sdk/version.Version=${GIT_VERSION} \
+    -X github.com/cosmos/cosmos-sdk/version.Commit=${GIT_COMMIT} \
+    -X github.com/cosmos/cosmos-sdk/version.BuildTags=${BUILD_TAGS} \
+    -w -s -linkmode=external -extldflags '-Wl,-z,muldefs -static'" \
+    -trimpath \
+    -o /sge/build/sged \
+    /sge/cmd/sged/main.go
+
+# --------------------------------------------------------
+# Runner
+# --------------------------------------------------------
+
+FROM ${RUNNER_IMAGE}
+
+COPY --from=builder /sge/build/sged /bin/sged
+
+ENV HOME /sge
+WORKDIR $HOME
+
+EXPOSE 26656
+EXPOSE 26657
+EXPOSE 1317
+# Note: uncomment the line below if you need pprof in localsge
+# We disable it by default in out main Dockerfile for security reasons
+# EXPOSE 6060
+
+ENTRYPOINT ["sged"]

Makefile

@@ -12,6 +12,7 @@ ifeq (,$(VERSION))
   endif
 endif
 
+GO_VERSION := $(shell cat go.mod | grep -E 'go [0-9].[0-9]+' | cut -d ' ' -f 2)
 PACKAGES_SIMTEST=$(shell go list ./... | grep '/simulation')
 LEDGER_ENABLED ?= true
 SDK_PACK := $(shell go list -m github.com/cosmos/cosmos-sdk | sed  's/ /\@/g')
@@ -131,6 +132,44 @@ $(BUILD_TARGETS): check_version go.sum $(BUILDDIR)/
 $(BUILDDIR)/:
 	mkdir -p $(BUILDDIR)/
 
+build-reproducible: build-reproducible-amd64 build-reproducible-arm64
+
+build-reproducible-amd64: go.sum
+	mkdir -p $(BUILDDIR)
+	$(DOCKER) buildx create --name sgebuilder --node sgebinary || true
+	$(DOCKER) buildx use sgebuilder
+	$(DOCKER) buildx build \
+		--build-arg GO_VERSION=$(GO_VERSION) \
+		--build-arg GIT_VERSION=$(VERSION) \
+		--build-arg GIT_COMMIT=$(COMMIT) \
+		--build-arg RUNNER_IMAGE=alpine:3.18 \
+		--platform linux/amd64 \
+		-t sge:local-amd64 \
+		--load \
+		-f Dockerfile .
+	$(DOCKER) rm -f sgebinary || true
+	$(DOCKER) create -ti --name sgebinary sge:local-amd64
+	$(DOCKER) cp sgebinary:/bin/sged $(BUILDDIR)/sged-linux-amd64
+	$(DOCKER) rm -f sgebinary
+
+build-reproducible-arm64: go.sum
+	mkdir -p $(BUILDDIR)
+	$(DOCKER) buildx create --name sgebuilder || true
+	$(DOCKER) buildx use sgebuilder
+	$(DOCKER) buildx build \
+		--build-arg GO_VERSION=$(GO_VERSION) \
+		--build-arg GIT_VERSION=$(VERSION) \
+		--build-arg GIT_COMMIT=$(COMMIT) \
+		--build-arg RUNNER_IMAGE=alpine:3.18 \
+		--platform linux/arm64 \
+		-t sge:local-arm64 \
+		--load \
+		-f Dockerfile .
+	$(DOCKER) rm -f sgebinary || true
+	$(DOCKER) create -ti --name sgebinary sge:local-arm64
+	$(DOCKER) cp sgebinary:/bin/sged $(BUILDDIR)/sged-linux-arm64
+	$(DOCKER) rm -f sgebinary
+
 build-linux: go.sum
 	LEDGER_ENABLED=false GOOS=linux GOARCH=amd64 $(MAKE) build
 

app/ante.go

@@ -0,0 +1,79 @@
+package app
+
+import (
+	wasmkeeper "github.com/CosmWasm/wasmd/x/wasm/keeper"
+	wasmtypes "github.com/CosmWasm/wasmd/x/wasm/types"
+
+	ibcante "github.com/cosmos/ibc-go/v7/modules/core/ante"
+	ibckeeper "github.com/cosmos/ibc-go/v7/modules/core/keeper"
+
+	errorsmod "cosmossdk.io/errors"
+
+	"github.com/cosmos/cosmos-sdk/codec"
+	storetypes "github.com/cosmos/cosmos-sdk/store/types"
+	sdk "github.com/cosmos/cosmos-sdk/types"
+	sdkerrors "github.com/cosmos/cosmos-sdk/types/errors"
+	"github.com/cosmos/cosmos-sdk/x/auth/ante"
+	bankkeeper "github.com/cosmos/cosmos-sdk/x/bank/keeper"
+	govkeeper "github.com/cosmos/cosmos-sdk/x/gov/keeper"
+	stakingkeeper "github.com/cosmos/cosmos-sdk/x/staking/keeper"
+)
+
+// HandlerOptions extends the SDK's AnteHandler options by requiring the IBC
+// channel keeper and a BankKeeper with an added method for fee sharing.
+type HandlerOptions struct {
+	ante.HandlerOptions
+
+	GovKeeper         govkeeper.Keeper
+	IBCKeeper         *ibckeeper.Keeper
+	BankKeeper        bankkeeper.Keeper
+	TxCounterStoreKey storetypes.StoreKey
+	WasmConfig        wasmtypes.WasmConfig
+	Cdc               codec.BinaryCodec
+
+	StakingKeeper stakingkeeper.Keeper
+}
+
+// NewAnteHandler returns an AnteHandler that checks and increments sequence
+// numbers, checks signatures & account numbers, and deducts fees from the first
+// signer.
+func NewAnteHandler(options HandlerOptions) (sdk.AnteHandler, error) {
+	if options.AccountKeeper == nil {
+		return nil, errorsmod.Wrap(sdkerrors.ErrLogic, "account keeper is required for ante builder")
+	}
+
+	if options.BankKeeper == nil {
+		return nil, errorsmod.Wrap(sdkerrors.ErrLogic, "bank keeper is required for ante builder")
+	}
+
+	if options.SignModeHandler == nil {
+		return nil, errorsmod.Wrap(sdkerrors.ErrLogic, "sign mode handler is required for ante builder")
+	}
+
+	sigGasConsumer := options.SigGasConsumer
+	if sigGasConsumer == nil {
+		sigGasConsumer = ante.DefaultSigVerificationGasConsumer
+	}
+
+	anteDecorators := []sdk.AnteDecorator{
+		// GlobalFee query params for minimum fee
+		ante.NewSetUpContextDecorator(), // outermost AnteDecorator. SetUpContext must be called first
+		wasmkeeper.NewLimitSimulationGasDecorator(options.WasmConfig.SimulationGasLimit),
+		wasmkeeper.NewCountTXDecorator(options.TxCounterStoreKey),
+		ante.NewExtensionOptionsDecorator(options.ExtensionOptionChecker),
+		ante.NewValidateBasicDecorator(),
+		ante.NewTxTimeoutHeightDecorator(),
+		ante.NewValidateMemoDecorator(options.AccountKeeper),
+		ante.NewConsumeGasForTxSizeDecorator(options.AccountKeeper),
+
+		// SetPubKeyDecorator must be called before all signature verification decorators
+		ante.NewSetPubKeyDecorator(options.AccountKeeper),
+		ante.NewValidateSigCountDecorator(options.AccountKeeper),
+		ante.NewSigGasConsumeDecorator(options.AccountKeeper, sigGasConsumer),
+		ante.NewSigVerificationDecorator(options.AccountKeeper, options.SignModeHandler),
+		ante.NewIncrementSequenceDecorator(options.AccountKeeper),
+		ibcante.NewRedundantRelayDecorator(options.IBCKeeper),
+	}
+
+	return sdk.ChainAnteDecorators(anteDecorators...), nil
+}