mirror of
https://gitlab.com/pulsechaincom/prysm-pulse.git
synced 2024-12-25 21:07:18 +00:00
17169e5a2d
* slasher grpc client * do not export * slasher on a different package * fix featureconfig * change to rough time * revert roughtime * remove extra comma * revert order change * goimports * fix comments and tests * fix package name * revert reorder * comment for start * service * fix visibility * external slasher validator protection implementation * gaz * fix comment * add comments * nishant feedback * raul feedback * preston feedback * fix flags * fix imports * fix imports * port 4002 * added tests * fix log * fix imports * fix imports name * raul feedback * gaz * terence comment * change name * runtime fixes * add flag check Co-authored-by: prylabs-bulldozer[bot] <58059840+prylabs-bulldozer[bot]@users.noreply.github.com>
243 lines
7.6 KiB
Go
243 lines
7.6 KiB
Go
package client
|
|
|
|
// Validator client proposer functions.
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/prometheus/client_golang/prometheus"
|
|
"github.com/prometheus/client_golang/prometheus/promauto"
|
|
ethpb "github.com/prysmaticlabs/ethereumapis/eth/v1alpha1"
|
|
"github.com/prysmaticlabs/go-bitfield"
|
|
"github.com/prysmaticlabs/prysm/beacon-chain/core/helpers"
|
|
"github.com/prysmaticlabs/prysm/beacon-chain/state/stateutil"
|
|
"github.com/prysmaticlabs/prysm/shared/blockutil"
|
|
"github.com/prysmaticlabs/prysm/shared/bls"
|
|
"github.com/prysmaticlabs/prysm/shared/bytesutil"
|
|
"github.com/prysmaticlabs/prysm/shared/featureconfig"
|
|
"github.com/prysmaticlabs/prysm/shared/params"
|
|
"github.com/prysmaticlabs/prysm/validator/keymanager"
|
|
"github.com/sirupsen/logrus"
|
|
"go.opencensus.io/trace"
|
|
)
|
|
|
|
var (
|
|
validatorProposeSuccessVec = promauto.NewCounterVec(
|
|
prometheus.CounterOpts{
|
|
Namespace: "validator",
|
|
Name: "successful_proposals",
|
|
},
|
|
[]string{
|
|
// validator pubkey
|
|
"pubkey",
|
|
},
|
|
)
|
|
validatorProposeFailVec = promauto.NewCounterVec(
|
|
prometheus.CounterOpts{
|
|
Namespace: "validator",
|
|
Name: "failed_proposals",
|
|
},
|
|
[]string{
|
|
// validator pubkey
|
|
"pubkey",
|
|
},
|
|
)
|
|
validatorProposeFailVecSlasher = promauto.NewCounterVec(
|
|
prometheus.CounterOpts{
|
|
Name: "validator_proposals_rejected_total",
|
|
Help: "Count the block proposals rejected by slashing protection.",
|
|
},
|
|
[]string{
|
|
// validator pubkey
|
|
"pubkey",
|
|
},
|
|
)
|
|
)
|
|
|
|
// ProposeBlock A new beacon block for a given slot. This method collects the
|
|
// previous beacon block, any pending deposits, and ETH1 data from the beacon
|
|
// chain node to construct the new block. The new block is then processed with
|
|
// the state root computation, and finally signed by the validator before being
|
|
// sent back to the beacon node for broadcasting.
|
|
func (v *validator) ProposeBlock(ctx context.Context, slot uint64, pubKey [48]byte) {
|
|
if slot == 0 {
|
|
log.Debug("Assigned to genesis slot, skipping proposal")
|
|
return
|
|
}
|
|
ctx, span := trace.StartSpan(ctx, "validator.ProposeBlock")
|
|
defer span.End()
|
|
fmtKey := fmt.Sprintf("%#x", pubKey[:])
|
|
|
|
span.AddAttributes(trace.StringAttribute("validator", fmt.Sprintf("%#x", pubKey)))
|
|
log := log.WithField("pubKey", fmt.Sprintf("%#x", bytesutil.Trunc(pubKey[:])))
|
|
|
|
// Sign randao reveal, it's used to request block from beacon node
|
|
epoch := slot / params.BeaconConfig().SlotsPerEpoch
|
|
randaoReveal, err := v.signRandaoReveal(ctx, pubKey, epoch)
|
|
if err != nil {
|
|
log.WithError(err).Error("Failed to sign randao reveal")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
|
|
// Request block from beacon node
|
|
b, err := v.validatorClient.GetBlock(ctx, ðpb.BlockRequest{
|
|
Slot: slot,
|
|
RandaoReveal: randaoReveal,
|
|
Graffiti: v.graffiti,
|
|
})
|
|
if err != nil {
|
|
log.WithField("blockSlot", slot).WithError(err).Error("Failed to request block from beacon node")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
|
|
var slotBits bitfield.Bitlist
|
|
if featureconfig.Get().ProtectProposer {
|
|
slotBits, err = v.db.ProposalHistoryForEpoch(ctx, pubKey[:], epoch)
|
|
if err != nil {
|
|
log.WithError(err).Error("Failed to get proposal history")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
|
|
// If the bit for the current slot is marked, do not propose.
|
|
if slotBits.BitAt(slot % params.BeaconConfig().SlotsPerEpoch) {
|
|
log.WithField("epoch", epoch).Error("Tried to sign a double proposal, rejected")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
}
|
|
|
|
// Sign returned block from beacon node
|
|
sig, err := v.signBlock(ctx, pubKey, epoch, b)
|
|
if err != nil {
|
|
log.WithError(err).Error("Failed to sign block")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
blk := ðpb.SignedBeaconBlock{
|
|
Block: b,
|
|
Signature: sig,
|
|
}
|
|
|
|
if featureconfig.Get().SlasherProtection && v.protector != nil {
|
|
bh, err := blockutil.SignedBeaconBlockHeaderFromBlock(blk)
|
|
if err != nil {
|
|
log.WithError(err).Error("Failed to get block header from block")
|
|
}
|
|
if !v.protector.VerifyBlock(ctx, bh) {
|
|
log.WithField("epoch", epoch).Error("Tried to sign a double proposal, rejected by external slasher")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVecSlasher.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
}
|
|
|
|
// Propose and broadcast block via beacon node
|
|
blkResp, err := v.validatorClient.ProposeBlock(ctx, blk)
|
|
if err != nil {
|
|
log.WithError(err).Error("Failed to propose block")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
|
|
if featureconfig.Get().ProtectProposer {
|
|
slotBits.SetBitAt(slot%params.BeaconConfig().SlotsPerEpoch, true)
|
|
if err := v.db.SaveProposalHistoryForEpoch(ctx, pubKey[:], epoch, slotBits); err != nil {
|
|
log.WithError(err).Error("Failed to save updated proposal history")
|
|
if v.emitAccountMetrics {
|
|
validatorProposeFailVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
return
|
|
}
|
|
}
|
|
|
|
if v.emitAccountMetrics {
|
|
validatorProposeSuccessVec.WithLabelValues(fmtKey).Inc()
|
|
}
|
|
|
|
span.AddAttributes(
|
|
trace.StringAttribute("blockRoot", fmt.Sprintf("%#x", blkResp.BlockRoot)),
|
|
trace.Int64Attribute("numDeposits", int64(len(b.Body.Deposits))),
|
|
trace.Int64Attribute("numAttestations", int64(len(b.Body.Attestations))),
|
|
)
|
|
|
|
blkRoot := fmt.Sprintf("%#x", bytesutil.Trunc(blkResp.BlockRoot))
|
|
log.WithFields(logrus.Fields{
|
|
"slot": b.Slot,
|
|
"blockRoot": blkRoot,
|
|
"numAttestations": len(b.Body.Attestations),
|
|
"numDeposits": len(b.Body.Deposits),
|
|
}).Info("Submitted new block")
|
|
}
|
|
|
|
// ProposeExit --
|
|
func (v *validator) ProposeExit(ctx context.Context, exit *ethpb.VoluntaryExit) error {
|
|
return errors.New("unimplemented")
|
|
}
|
|
|
|
// Sign randao reveal with randao domain and private key.
|
|
func (v *validator) signRandaoReveal(ctx context.Context, pubKey [48]byte, epoch uint64) ([]byte, error) {
|
|
domain, err := v.domainData(ctx, epoch, params.BeaconConfig().DomainRandao[:])
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not get domain data")
|
|
}
|
|
|
|
randaoReveal, err := v.signObject(pubKey, epoch, domain.SignatureDomain)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not sign reveal")
|
|
}
|
|
return randaoReveal.Marshal(), nil
|
|
}
|
|
|
|
// Sign block with proposer domain and private key.
|
|
func (v *validator) signBlock(ctx context.Context, pubKey [48]byte, epoch uint64, b *ethpb.BeaconBlock) ([]byte, error) {
|
|
domain, err := v.domainData(ctx, epoch, params.BeaconConfig().DomainBeaconProposer[:])
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not get domain data")
|
|
}
|
|
var sig *bls.Signature
|
|
if protectingKeymanager, supported := v.keyManager.(keymanager.ProtectingKeyManager); supported {
|
|
bodyRoot, err := stateutil.BlockBodyRoot(b.Body)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not get signing root")
|
|
}
|
|
blockHeader := ðpb.BeaconBlockHeader{
|
|
Slot: b.Slot,
|
|
ProposerIndex: b.ProposerIndex,
|
|
StateRoot: b.StateRoot,
|
|
ParentRoot: b.ParentRoot,
|
|
BodyRoot: bodyRoot[:],
|
|
}
|
|
sig, err = protectingKeymanager.SignProposal(pubKey, bytesutil.ToBytes32(domain.SignatureDomain), blockHeader)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not sign block proposal")
|
|
}
|
|
} else {
|
|
blockRoot, err := helpers.ComputeSigningRoot(b, domain.SignatureDomain)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not get signing root")
|
|
}
|
|
sig, err = v.keyManager.Sign(pubKey, blockRoot)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not sign block proposal")
|
|
}
|
|
}
|
|
return sig.Marshal(), nil
|
|
}
|