mainnet deploy 12/4/2025

.github/workflows/check-bittensor-e2e-tests.yml.yml

@@ -26,7 +26,7 @@ env:
 
 jobs:
   check-label:
-    runs-on: [self-hosted, type-ccx13]
+    runs-on: ubuntu-latest
     outputs:
       skip-bittensor-e2e-tests: ${{ steps.get-labels.outputs.skip-bittensor-e2e-tests }}
     steps:
@@ -57,7 +57,7 @@ jobs:
   find-btcli-e2e-tests:
     needs: check-label
     if: needs.check-label.outputs.skip-bittensor-e2e-tests == 'false'
-    runs-on: [self-hosted, type-ccx13]
+    runs-on: ubuntu-latest
     outputs:
       test-files: ${{ steps.get-btcli-tests.outputs.test-files }}
     steps:
@@ -84,7 +84,7 @@ jobs:
   find-sdk-e2e-tests:
     needs: check-label
     if: needs.check-label.outputs.skip-bittensor-e2e-tests == 'false'
-    runs-on: [self-hosted, type-ccx13]
+    runs-on: ubuntu-latest
     outputs:
       test-files: ${{ steps.get-sdk-tests.outputs.test-files }}
     steps:
@@ -111,7 +111,7 @@ jobs:
   build-image-with-current-branch:
     needs: check-label
     if: needs.check-label.outputs.skip-bittensor-e2e-tests == 'false'
-    runs-on: [self-hosted, type-ccx33]
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -130,17 +130,27 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Move Docker data-root to /mnt/data
+        run: |
+          sudo systemctl stop docker
+          sudo mkdir -p /mnt/data/docker
+          sudo chown -R runner:runner /mnt/data
+          sudo chmod -R 777 /mnt/data
+          echo '{"data-root": "/mnt/data/docker"}' | sudo tee /etc/docker/daemon.json
+          sudo systemctl start docker
+          docker info | grep "Docker Root Dir"
+
       - name: Build Docker Image
         run: docker build -f Dockerfile-localnet -t localnet .
 
       - name: Save Docker Image as Tar
-        run: docker save -o subtensor-localnet.tar localnet
+        run: docker save -o /mnt/data/subtensor-localnet.tar localnet
 
       - name: Upload Docker Image as Artifact
         uses: actions/upload-artifact@v4
         with:
           name: subtensor-localnet
-          path: subtensor-localnet.tar
+          path: /mnt/data/subtensor-localnet.tar
 
   # main btcli job
   run-btcli-e2e-tests:
@@ -149,7 +159,7 @@ jobs:
       - find-btcli-e2e-tests
       - build-image-with-current-branch
     if: needs.check-label.outputs.skip-bittensor-e2e-tests == 'false'
-    runs-on: [self-hosted, type-ccx13]
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       max-parallel: 16
@@ -181,7 +191,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          enable-cache: 'false'
+          enable-cache: "false"
 
       - name: Create Python virtual environment
         working-directory: ${{ github.workspace }}
@@ -243,7 +253,7 @@ jobs:
       - find-sdk-e2e-tests
       - build-image-with-current-branch
     if: needs.check-label.outputs.skip-bittensor-e2e-tests == 'false'
-    runs-on: [self-hosted, type-ccx13]
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       max-parallel: 16
@@ -275,7 +285,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          enable-cache: 'false'
+          enable-cache: "false"
 
       - name: Create Python virtual environment
         working-directory: ${{ github.workspace }}

.github/workflows/evm-tests.yml

@@ -24,7 +24,7 @@ permissions:
 
 jobs:
   run:
-    runs-on: [self-hosted, type-ccx33]
+    runs-on: ubuntu-latest
     env:
       RUST_BACKTRACE: full
     steps:

Cargo.toml

@@ -285,6 +285,9 @@ sha2 = { version = "0.10.8", default-features = false }
 rand_chacha = { version = "0.3.1", default-features = false }
 tle = { git = "https://github.com/ideal-lab5/timelock", rev = "5416406cfd32799e31e1795393d4916894de4468", default-features = false }
 
+pallet-shield = { path = "pallets/shield", default-features = false }
+ml-kem = { version = "0.2.0", default-features = true }
+
 # Primitives
 
 [profile.release]

common/src/lib.rs

@@ -162,6 +162,33 @@ pub enum ProxyType {
     RootClaim,
 }
 
+impl TryFrom<u8> for ProxyType {
+    type Error = ();
+
+    fn try_from(value: u8) -> Result<Self, Self::Error> {
+        match value {
+            0 => Ok(Self::Any),
+            1 => Ok(Self::Owner),
+            2 => Ok(Self::NonCritical),
+            3 => Ok(Self::NonTransfer),
+            4 => Ok(Self::Senate),
+            5 => Ok(Self::NonFungible),
+            6 => Ok(Self::Triumvirate),
+            7 => Ok(Self::Governance),
+            8 => Ok(Self::Staking),
+            9 => Ok(Self::Registration),
+            10 => Ok(Self::Transfer),
+            11 => Ok(Self::SmallTransfer),
+            12 => Ok(Self::RootWeights),
+            13 => Ok(Self::ChildKeys),
+            14 => Ok(Self::SudoUncheckedSetCode),
+            15 => Ok(Self::SwapHotkey),
+            16 => Ok(Self::SubnetLeaseBeneficiary),
+            _ => Err(()),
+        }
+    }
+}
+
 impl Default for ProxyType {
     // allow all Calls; required to be most permissive
     fn default() -> Self {

evm-tests/run-ci.sh

@@ -19,7 +19,7 @@ if [ "$i" -eq 1000 ]; then
     exit 1
 fi
 
-sleep 5
+sleep 10
 
 if ! nc -z localhost 9944; then
     echo "node subtensor exit, port not available"

evm-tests/src/address-utils.ts

@@ -1,6 +1,6 @@
 import { Address } from "viem"
 import { encodeAddress } from "@polkadot/util-crypto";
-import { ss58Address } from "@polkadot-labs/hdkd-helpers";
+import { ss58Address, ss58Decode } from "@polkadot-labs/hdkd-helpers";
 import { hexToU8a } from "@polkadot/util";
 import { blake2AsU8a, decodeAddress } from "@polkadot/util-crypto";
 import { Binary } from "polkadot-api";

evm-tests/src/contracts/precompileGas.sol

@@ -0,0 +1,62 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.23;
+
+interface ISR25519Verify {
+    function verify(
+        bytes32 message,
+        bytes32 publicKey,
+        bytes32 r,
+        bytes32 s
+    ) external pure returns (bool);
+}
+
+interface IED25519Verify {
+    function verify(
+        bytes32 message,
+        bytes32 publicKey,
+        bytes32 r,
+        bytes32 s
+    ) external pure returns (bool);
+}
+
+contract PrecompileGas {
+    address constant IED25519VERIFY_ADDRESS =
+        0x0000000000000000000000000000000000000402;
+    address constant ISR25519VERIFY_ADDRESS =
+        0x0000000000000000000000000000000000000403;
+    IED25519Verify constant ed25519 = IED25519Verify(IED25519VERIFY_ADDRESS);
+    ISR25519Verify constant sr25519 = ISR25519Verify(ISR25519VERIFY_ADDRESS);
+
+    event Log(string message);
+
+    bytes32 message =
+        0x1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef;
+    bytes32 publicKey =
+        0x0000000000000000000000000000000000000000000000000000000000000000;
+    bytes32 r =
+        0x0000000000000000000000000000000000000000000000000000000000000000;
+    bytes32 s =
+        0x0000000000000000000000000000000000000000000000000000000000000000;
+
+    /**
+     * @notice Call the precompile using hardcoded signature data
+     * @param iterations Number of times to call the precompile
+     */
+    function callED25519(uint64 iterations) external {
+        for (uint64 i = 0; i < iterations; i++) {
+            ed25519.verify(message, publicKey, r, s);
+        }
+        emit Log("callED25519");
+    }
+
+    /**
+     * @notice Call the precompile using hardcoded signature data
+     * @param iterations Number of times to call the precompile
+     */
+    function callSR25519(uint64 iterations) external {
+        for (uint64 i = 0; i < iterations; i++) {
+            sr25519.verify(message, publicKey, r, s);
+        }
+        emit Log("callSR25519");
+    }
+}