Upgrades: max map + sync-proxy + wss/https#30
Conversation
| @@ -1 +1,2 @@ | |||
| searcher ALL=(root) NOPASSWD: /usr/bin/toggle No newline at end of file | |||
| searcher ALL=(root) NOPASSWD: /usr/bin/toggle | |||
| searcher ALL=(root) NOPASSWD: /sbin/sysctl -w vm.max_map_count=2097152 No newline at end of file | |||
There was a problem hiding this comment.
why is needed if you expose it as a SSH action below to trigger from the searcher user?
There was a problem hiding this comment.
sysctl commands requires sudo privileges (similar to iptables, which is why toggle is also here)
| # Sync proxy outbound on port 8552 (TCP only) - IP whitelisted | ||
| $IPTABLES -A $CHAIN_ALWAYS_ON_OUT -p tcp -d $FLASHBOTS_NGINX_IP_1 --dport $SYNC_PROXY_PORT \ | ||
| -m conntrack --ctstate NEW -j ACCEPT | ||
| $IPTABLES -A $CHAIN_ALWAYS_ON_OUT -p udp --dport $CL_P2P_PORT \ | ||
| $IPTABLES -A $CHAIN_ALWAYS_ON_OUT -p tcp -d $FLASHBOTS_NGINX_IP_2 --dport $SYNC_PROXY_PORT \ | ||
| -m conntrack --ctstate NEW -j ACCEPT |
There was a problem hiding this comment.
Ah, I see that above we have
$IPTABLES -A OUTPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
In that case, these outbound rules are not required and can safely be removed
|
|
||
| // If command == "increase-map-count", set vm.max_map_count to 2097152 | ||
| else if (strcmp(command, "increase-map-count") == 0) { | ||
| execl("/usr/bin/sudo", "sudo", "/sbin/sysctl", "-w", "vm.max_map_count=2097152", NULL); |
There was a problem hiding this comment.
Can this be made default? E.g. in /etc/sysctl.conf or container init script
There was a problem hiding this comment.
this should be on the host directly and not the container because the container is running in rootless mode and would inherit the hosts configuration. (I tested it manually in a dev instance).
So this could be offloaded as part of the guest OS configuration instead
| FLASHBOTS_BUILDER_IP="131.153.11.211" | ||
| TITAN_BUILDER_IP="52.207.17.217" | ||
| RBUILDER_02_IP="3.16.169.173" | ||
| FLASHBOTS_NGINX_IP_1="18.220.237.111" |
There was a problem hiding this comment.
Probably better to name those FLASHBOTS_CL_ENGINE_EVENTS_1
This reverts commit 5efe355.
4 participants
increase-map-countincreases the vm.max_map_count from 65530 to 2097152 by default