This is LCDVN's v0.3.17 release, a security and maintenance release for the current fork. It is not Gloas-ready: Gloas support ships with the v0.4 line and Charon v2.0.0. It keeps the Engine API secret in memory instead of on disk, hardens the monitoring stack, and updates Reth to v2.10.1 and Grafana to 13.2.6. If you are coming from a release before v0.3.16, read the v0.3.16 and v0.3.15 release notes first, as they apply to this release too. Feedback is welcome and appreciated, please use github issues or discord if you have trouble with this release.
Update
# Save your local .env / custom overrides
git stash
# Update your local copy of this repo
git pull
# Checkout this release
git checkout v0.3.17
# Re-apply your stashed changes
git stash apply
# Stop the node and remove the old jwt-init container
docker compose down --remove-orphans
# Remove the old on-disk Engine API secret (skip if coming from v0.3.15 or earlier).
# The volume is named <project>_jwt, find it with: docker volume ls --filter name=_jwt
docker volume rm lido-charon-distributed-validator-node_jwt
# Start the node
docker compose up -d
# Delete configs older releases rendered here. prometheus.yml contains your remote write token.
rm -f prometheus/prometheus.yml alloy/config.alloyWhat's Changed
- security: let the execution client generate the JWT (backport of #359) by @KaloyanTanev in #366
- security: limit Alloy's Docker access, mount scripts read-only, refuse Loki deletes (backport of #360) by @OisinKyne in #361
- images: bump Grafana to 13.2.6 and Reth to v2.10.1 by @OisinKyne in #363
Full Changelog: v0.3.16...v0.3.17