fix(kt-devnet): migrate kt-devnet to sepolia (#56)

iquidus · web-flow · commit 6519ff6996a6 · 2025-10-02T23:00:19.000-04:00
* pin teku image to version `25.7.1`
* replace the existing holesky devnet config and tests with sepolia
* bump proxy version to 2.2.1
* add support for v3 certs to failover tests
* bump sepolia test timeouts
* remove slow/flaky v1 sepolia tests from ci
diff --git a/.github/workflows/kurtosis-devnet.yml b/.github/workflows/kurtosis-devnet.yml
@@ -42,22 +42,18 @@ jobs:
       - run: just eigenda-devnet-test-memstore -v
         working-directory: kurtosis-devnet
 
-  # This is an optimism devnet which talks to the eigenda holesky testnet via an eigenda-proxy.
-  # TODO: we should connect this to an eigenda kurtosis devnet instead of using our holesky testnet.
-  run_op_eigenda_holesky_devnet:
+  # This is an optimism devnet which talks to the eigenda sepolia testnet via an eigenda-proxy.
+  # TODO: we should connect this to an eigenda kurtosis devnet instead of using our sepolia testnet.
+  run_op_eigenda_sepolia_devnet:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false # run all matrix jobs even if one fails
       matrix:
         # This list should be kept up-to-date with the files in eigenda-template-values
         valuesFile:
           [
-            # v1 is too slow for sequential large blobs.
-            # Could send a single massive blob every few minutes, but then migration test
-            # takes too long waiting for the few certs to land onchain, so opted to just not run it.
-            "holesky-concurrent-small-blobs.json",
-            "holesky-v2-sequential-large-blobs.json",
-            "holesky-v2-concurrent-small-blobs.json",
+            "sepolia-v2-sequential-large-blobs.json",
+            "sepolia-v2-concurrent-small-blobs.json",
           ]
     steps:
       - uses: actions/checkout@v4
@@ -71,14 +67,14 @@ jobs:
           jq --argjson newconfig '{
             "eigenda-proxy": {
               "secrets": {
-                "eigenda.signer-private-key-hex": "${{ secrets.EIGENDA_V1_HOLESKY_TESTNET_SIGNER_KEY }}",
-                "eigenda.v2.signer-payment-key-hex": "${{ secrets.EIGENDA_V2_HOLESKY_TESTNET_SIGNER_KEY }}",
-                "eigenda.eth_rpc": "https://ethereum-holesky-rpc.publicnode.com"
+                "eigenda.signer-private-key-hex": "${{ secrets.EIGENDA_SEPOLIA_TESTNET_SIGNER_KEY }}",
+                "eigenda.v2.signer-payment-key-hex": "${{ secrets.EIGENDA_SEPOLIA_TESTNET_SIGNER_KEY }}",
+                "eigenda.eth_rpc": "https://ethereum-sepolia-rpc.publicnode.com"
               }
             }
-          }' '. *= $newconfig' eigenda-template-values/${{ matrix.valuesFile }} > holesky-config-with-secrets.json
+          }' '. *= $newconfig' eigenda-template-values/${{ matrix.valuesFile }} > sepolia-config-with-secrets.json
         working-directory: kurtosis-devnet
-      - run: just eigenda-devnet-start holesky-config-with-secrets.json
+      - run: just eigenda-devnet-start sepolia-config-with-secrets.json
         working-directory: kurtosis-devnet
         env:
           # Temporary fix for error (see https://github.com/Layr-Labs/optimism/actions/runs/14325605690/job/40150440399?pr=42)
@@ -87,5 +83,5 @@ jobs:
           # See https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md
           # and https://github.com/docker/cli/issues/613
           DOCKER_API_VERSION: 1.45
-      - run: just eigenda-devnet-test-holesky -v
+      - run: just eigenda-devnet-test-sepolia -v
         working-directory: kurtosis-devnet
diff --git a/kurtosis-devnet/README.md b/kurtosis-devnet/README.md
@@ -14,7 +14,7 @@ To see available devnets, consult the `justfile` to see what `.*-devnet` targets
 - `simple-devnet`
 - `interop-devnet`
 - `user-devnet`
-- `eigenda-holesky-devnet`
+- `eigenda-sepolia-devnet`
 
 You can read over the referenced `yaml` files located in this directory to see the network definition which would be deployed. Mini and Simple are example network definitions, and User expects a provided network definition.
 
diff --git a/kurtosis-devnet/eigenda-template-values/holesky-concurrent-small-blobs.json b/kurtosis-devnet/eigenda-template-values/holesky-concurrent-small-blobs.json
diff --git a/kurtosis-devnet/eigenda-template-values/sepolia-v2-concurrent-small-blobs.json b/kurtosis-devnet/eigenda-template-values/sepolia-v2-concurrent-small-blobs.json
diff --git a/kurtosis-devnet/eigenda-template-values/sepolia-v2-sequential-large-blobs.json b/kurtosis-devnet/eigenda-template-values/sepolia-v2-sequential-large-blobs.json
diff --git a/kurtosis-devnet/eigenda.yaml b/kurtosis-devnet/eigenda.yaml
@@ -1,19 +1,19 @@
-# This devnet uses an eigenda-proxy to interact with the eigenda holesky testnet network.
+# This devnet uses an eigenda-proxy to interact with the eigenda sepolia testnet network.
 # As a requirement, you must first create and populate the eigenda-secrets.json file
 # 1. cp eigenda-secrets.example.json eigenda-secrets.json
 # 2. Populate the file with the required values
-# TODO: Connect this with an eigenda v1 kurtosis devnet instead of using our holesky testnet.
+# TODO: Connect this with an eigenda v1 kurtosis devnet instead of using our sepolia testnet.
 #       See https://github.com/Layr-Labs/avs-devnet/blob/main/examples/eigenda.yaml
 {{- $context := or . (dict)}}
 # TODO: I hate yaml templating... should really move to something more reasonable. CUE perhaps?
-# use proxy by default, otherwise connect with eigenda holesky backend
+# use proxy by default, otherwise connect with eigenda sepolia backend
 {{- $useProxyMemstore := dig "eigenda-proxy" "useMemstore" true $context }}
 {{- $proxyDispersalBackend := dig "eigenda-proxy" "dispersalBackend" "v1" $context }}
 {{- $eigendaV1SignerKey := dig "eigenda-proxy" "secrets" "eigenda.signer-private-key-hex" "" $context }}
 {{- $eigendaV2SignerKey := dig "eigenda-proxy" "secrets" "eigenda.v2.signer-payment-key-hex" "" $context }}
 {{- $eigendaBackendEthRpc := dig "eigenda-proxy" "secrets" "eigenda.eth_rpc" "" $context }}
 {{- if not $useProxyMemstore}}
-  # make sure the secrets are populated when using eigenda-holesky backend
+  # make sure the secrets are populated when using eigenda-sepolia backend
   {{- if or (eq $eigendaV1SignerKey "") (eq $eigendaV2SignerKey "") (eq $eigendaBackendEthRpc "") }}
     {{- fail "Missing required eigenda-proxy eigenda-backend secrets." }}
   {{- end }}
@@ -86,27 +86,28 @@ optimism_package:
         proposal_interval: 10m
       da_params:
         enabled: true
-        image: ghcr.io/layr-labs/eigenda-proxy:v1.7.0
+        image: ghcr.io/layr-labs/eigenda-proxy:2.2.1
         cmd:
           - --addr=0.0.0.0
           - --port=3100
           - --storage.backends-to-enable=V1,V2
           - --storage.dispersal-backend={{ $proxyDispersalBackend }} #v1 or v2
           - --api-enabled=admin # to enable changing dispersal-backend to v2 without restarting
           - --eigenda.v2.max-blob-length=1MiB # makes startup faster by only loading 1MiB/2MiB of G1/G2 SRS points.
+          - --eigenda.v2.network=sepolia_testnet
         {{- if $useProxyMemstore }}
           - --memstore.enabled
           - --memstore.expiration=30m
-        {{- else }} # connect to eigenda holesky backend
+        {{- else }} # connect to eigenda sepolia backend
           # V1 flags
-          - --eigenda.disperser-rpc=disperser-holesky.eigenda.xyz:443
-          - --eigenda.svc-manager-addr=0xD4A7E1Bd8015057293f0D0A557088c286942e84b
+          - --eigenda.disperser-rpc=disperser-testnet-sepolia.eigenda.xyz:443
+          - --eigenda.svc-manager-addr=0x3a5acf46ba6890B8536420F4900AC9BC45Df4764
           # The two params below are loaded from the eigenda-secrets.json file
           - --eigenda.signer-private-key-hex={{ $eigendaV1SignerKey }}
           - --eigenda.eth-rpc={{ $eigendaBackendEthRpc }}
           # V2 flags
-          - --eigenda.v2.disperser-rpc=disperser-holesky.eigenda.xyz:443
-          - --eigenda.v2.cert-verifier-addr=0xFe52fE1940858DCb6e12153E2104aD0fDFbE1162
+          - --eigenda.v2.cert-verifier-router-or-immutable-verifier-addr=0x58D2B844a894f00b7E6F9F492b9F43aD54Cd4429
+          - --eigenda.v2.disperser-rpc=disperser-testnet-sepolia.eigenda.xyz:443
           - --eigenda.v2.signer-payment-key-hex={{ $eigendaV2SignerKey }}
           - --eigenda.v2.eth-rpc={{ $eigendaBackendEthRpc }}
         {{- end }}
@@ -130,6 +131,7 @@ ethereum_package:
       el_extra_params:
         - --graphql # needed to query for batcher-inbox txs to test failover working correctly
       cl_type: teku
+      cl_image: consensys/teku:25.7.1
   network_params:
     preset: minimal
     genesis_delay: 5
diff --git a/kurtosis-devnet/justfile b/kurtosis-devnet/justfile
@@ -100,12 +100,12 @@ eigenda-devnet-clean ENCLAVE_NAME="eigenda-devnet":
 [group('eigenda')]
 eigenda-devnet-test-memstore *ARGS="":
     go test ./tests/eigenda/... -run "_Memstore$" -v -timeout 30m {{ARGS}}
-# Runs all tests that end with the `_Holesky` suffix, assuming the devnet was started with proxy using holesky backend.
-# To start the devnet with holesky backend, the files in eigenda-template-values/holesky-* need have secrets injected.
+# Runs all tests that end with the `_Sepolia` suffix, assuming the devnet was started with proxy using sepolia backend.
+# To start the devnet with sepolia backend, the files in eigenda-template-values/sepolia-* need have secrets injected.
 # Take a look at how CI does it in .github/workflows/kurtosis-devnet.yml .
 [group('eigenda')]
-eigenda-devnet-test-holesky *ARGS="":
-    go test ./tests/eigenda/... -run "_Holesky$" -v -timeout 40m {{ARGS}}
+eigenda-devnet-test-sepolia *ARGS="":
+    go test ./tests/eigenda/... -run "_Sepolia$" -v -timeout 50m {{ARGS}}
 [group('eigenda')]
 eigenda-devnet-add-tx-fuzzer ENCLAVE_NAME="eigenda-devnet" *ARGS="":
   kurtosis service add {{ENCLAVE_NAME}} tx-fuzz ethpandaops/tx-fuzz:master --cmd \
diff --git a/kurtosis-devnet/tests/eigenda/README.md b/kurtosis-devnet/tests/eigenda/README.md
@@ -5,8 +5,8 @@ See the justfile for the options there.
 
 ## Backends
 
-The devnet can either be started with proxy in `memstore` mode, or in `holesky` mode where it connects to the eigenda holesky network.
+The devnet can either be started with proxy in `memstore` mode, or in `sepolia` mode where it connects to the eigenda sepolia network.
 
-> Every test in this package MUST have a `_Memstore` or `_Holesky` suffix to indicate which backend it is testing.
+> Every test in this package MUST have a `_Memstore` or `_Sepolia` suffix to indicate which backend it is testing.
 
-The testing commands in the justfile are `eigenda-devnet-test-memstore` and `eigenda-devnet-test-holesky`, and pattern match the test names to run the correct tests.
+The testing commands in the justfile are `eigenda-devnet-test-memstore` and `eigenda-devnet-test-sepolia`, and pattern match the test names to run the correct tests.
diff --git a/kurtosis-devnet/tests/eigenda/batcher_logs_test.go b/kurtosis-devnet/tests/eigenda/batcher_logs_test.go
@@ -8,16 +8,16 @@ import (
 	"github.com/kurtosis-tech/kurtosis/api/golang/engine/lib/kurtosis_context"
 )
 
-func TestBatcherFromLogs_Holesky(t *testing.T) {
+func TestBatcherFromLogs_Sepolia(t *testing.T) {
 	deadline, ok := t.Deadline()
 	// !ok means no timeout was set, and hence uses golang's default 10min timeout.
-	if !ok || time.Until(deadline) < 15*time.Minute {
-		t.Logf("TestBatcherFromLogs_Holesky needs a timeout of at least 15 minutes to run.")
+	if !ok || time.Until(deadline) < 30*time.Minute {
+		t.Logf("TestBatcherFromLogs_Sepolia needs a timeout of at least 30 minutes to run.")
 		t.FailNow()
 	}
 	harness := NewHarness(t)
-	// Batching time on Holesky can be up to 10 minutes, so we need long time to see a tx getting confirmed.
-	testBatcherFromLogs(t, harness, 15*time.Minute)
+	// Batching time on Sepolia can be up to 10 minutes, so we need long time to see a tx getting confirmed.
+	testBatcherFromLogs(t, harness, 30*time.Minute)
 }
 
 func TestBatcherFromLogs_Memstore(t *testing.T) {
diff --git a/kurtosis-devnet/tests/eigenda/failover_test.go b/kurtosis-devnet/tests/eigenda/failover_test.go
@@ -146,6 +146,7 @@ func requireBatcherTxsToBeFromLayer(t *testing.T, fromBlockNum, toBlockNum uint6
 const ethDACalldataCommitmentPrefix = "0x00"
 const eigenDAV1CommitmentPrefix = "0x01010000"
 const eigenDAV2CommitmentPrefix = "0x01010001"
+const eigenDAV3CommitmentPrefix = "0x01010002"
 
 type DALayer string
 
@@ -268,6 +269,9 @@ func fetchBatcherTxs(gethL1Endpoint string, batchInbox string, fromBlockNum, toB
 					batcherTx.daLayer = DALayerEigenDAV1
 				} else if strings.HasPrefix(tx.InputData, eigenDAV2CommitmentPrefix) {
 					batcherTx.daLayer = DALayerEigenDAV2
+				} else if strings.HasPrefix(tx.InputData, eigenDAV3CommitmentPrefix) {
+					// eigenDA V2 with V3 cert
+					batcherTx.daLayer = DALayerEigenDAV2
 				} else if strings.HasPrefix(tx.InputData, ethDACalldataCommitmentPrefix) {
 					batcherTx.daLayer = DALayerEthCalldata
 				} else {
@@ -277,6 +281,5 @@ func fetchBatcherTxs(gethL1Endpoint string, batchInbox string, fromBlockNum, toB
 			}
 		}
 	}
-
 	return batcherTxs, nil
 }
diff --git a/kurtosis-devnet/tests/eigenda/v2_migration_test.go b/kurtosis-devnet/tests/eigenda/v2_migration_test.go
@@ -16,7 +16,7 @@ func TestEigenDAV2Migration_Memstore(t *testing.T) {
 	testEigenDAV2Migration(t, 20)
 }
 
-func TestEigenDAV2Migration_Holesky(t *testing.T) {
+func TestEigenDAV2Migration_Sepolia(t *testing.T) {
 	// We set to 160 = 16 mins (160 L1Blocks * 6sec/L1Block).
 	// This is unfortunately required because of the holocene strict ordering rules.
 	// After switching proxy from v1 to v2, the v2 certs, even though they finalize very quickly

Original file line number	Diff line number	Diff line change
`@@ -146,6 +146,7 @@ func requireBatcherTxsToBeFromLayer(t *testing.T, fromBlockNum, toBlockNum uint6`
`146`	`146`	`const ethDACalldataCommitmentPrefix = "0x00"`
`147`	`147`	`const eigenDAV1CommitmentPrefix = "0x01010000"`
`148`	`148`	`const eigenDAV2CommitmentPrefix = "0x01010001"`
	`149`	`+const eigenDAV3CommitmentPrefix = "0x01010002"`
`149`	`150`
`150`	`151`	`type DALayer string`
`151`	`152`
`@@ -268,6 +269,9 @@ func fetchBatcherTxs(gethL1Endpoint string, batchInbox string, fromBlockNum, toB`
`268`	`269`	`batcherTx.daLayer = DALayerEigenDAV1`
`269`	`270`	`} else if strings.HasPrefix(tx.InputData, eigenDAV2CommitmentPrefix) {`
`270`	`271`	`batcherTx.daLayer = DALayerEigenDAV2`
	`272`	`+ } else if strings.HasPrefix(tx.InputData, eigenDAV3CommitmentPrefix) {`
	`273`	`+ // eigenDA V2 with V3 cert`
	`274`	`+ batcherTx.daLayer = DALayerEigenDAV2`
`271`	`275`	`} else if strings.HasPrefix(tx.InputData, ethDACalldataCommitmentPrefix) {`
`272`	`276`	`batcherTx.daLayer = DALayerEthCalldata`
`273`	`277`	`} else {`
`@@ -277,6 +281,5 @@ func fetchBatcherTxs(gethL1Endpoint string, batchInbox string, fromBlockNum, toB`
`277`	`281`	`}`
`278`	`282`	`}`
`279`	`283`	`}`
`280`		`-`
`281`	`284`	`return batcherTxs, nil`
`282`	`285`	`}`