Method 2: Configure on separate validator client
Pre-requisites
Make sure you have downloaded the necessary files according to your choice of validator client. Otherwise, revisit the following pages to download and move them into the /usr/local/bin directory.
As we will be using Docker to run the Lodestar VC, we only need to install Docker at this point, and the actual Lodestar binary files will be downloaded when spinning up the Docker container.
Installing dependencies - Docker
The script below performs the following:
Download and run the official Docker installation script
Creates a new user group called "docker"
Adds your current Linux user account to this new docker group
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo groupadd docker
sudo usermod -aG docker $USERLog out and then back in again for the new user group settings to take effect.
exitssh <user>@<IP_address> -p <port_no.> -i <SSH_key> -vCreate new CSM user
sudo useradd --no-create-home --shell /bin/false csm_teku_validatorsudo useradd --no-create-home --shell /bin/false csm_nimbus_validatorsudo useradd --no-create-home --shell /bin/false csm_lodestar_validatorsudo useradd --no-create-home --shell /bin/false csm_lighthouse_validatorsudo useradd --no-create-home --shell /bin/false csm_prysm_validatorBy clearly segregating the users and permissions for separate services in your workflow, this will provide additional safeguards against operational mistakes that can lead to slashing via double signing.
Create new folders for CSM data & keys
Create separate folders, import the CSM validator keys, and set appropriate permissions.
Prepare the CSM validator keystores
1) Create 3 new folders to store the validator client data, validator keystore, and the validator keystore password
2) Copy the validator keystores and it's password file into their respective folders
3) Change the owner of this folder to the teku user
4) Restrict permissions on this new folder such that only the owner is able to read, write, and execute files in this folder
sudo mkdir -p /var/lib/csm_teku_validator/validator_keystores /var/lib/csm_teku_validator/keystore_password
sudo cp ~/validator_keys/<validator_keystore.json> /var/lib/csm_teku_validator/validator_keystores
sudo cp ~/validator_keys/<validator_keystore_password.txt> /var/lib/csm_teku_validator/keystore_password
sudo chown -R csm_teku_validator:csm_teku_validator /var/lib/csm_teku_validator
sudo chmod 700 /var/lib/csm_teku_validatorPrepare the CSM validator keystores
1) Create a new folders to store the validator client data, validator keystore, and the validator keystore password
sudo mkdir -p /var/lib/csm_nimbus_validator2) Run the validator key import process.
sudo /usr/local/bin/nimbus_beacon_node deposits import --data-dir:/var/lib/csm_nimbus_validator/ ~/staking_deposit-cli*/validator_keys3) Change the owner of this new folder to the csm_nimbus_validator user
4) Restrict permissions on this new folder such that only the owner is able to read, write, and execute files in this folder
sudo chown -R csm_nimbus_validator:csm_nimbus_validator /var/lib/csm_nimbus_validator
sudo chmod 700 /var/lib/csm_nimbus_validatorPrepare the validator data directory
1) Create 3 new folders to store the validator client data, validator keystore, and the validator keystore password
2) Copy the validator keystores and it's password file into their respective folders
3) Change the owner of these new folders to the csm_lodestar_validatoruser
4) Restrict permissions on this new folder such that only the owner is able to read, write, and execute files in this folder
5) Retrieve the UID and GID of the csm_lodestar_validator user account to be used in your docker-compose.yml file in the next step
sudo mkdir -p /var/lib/csm_lodestar_validator/validator_keystores /var/lib/csm_lodestar_validator/keystore_password
sudo cp ~/validator_keys/<validator_keystore.json> /var/lib/csm_lodestar_validator/validator_keystores
sudo cp ~/validator_keys/<validator_keystore_password.txt> /var/lib/csm_lodestar_validator/keystore_password
sudo chown -R csm_lodestar_validator:csm_lodestar_validator /var/lib/csm_lodestar_validator
sudo chmod 700 /var/lib/csm_lodestar_validator
id csm_lodestar_validatorExpected output:
uid=1004(csm_lodestar_validator) gid=1005(csm_lodestar_validator) groups=1005(csm_lodestar_validator)New folders created:
/var/lib/csm_lodestar_validator/
/var/lib/csm_lodestar_validator/validator_keystores
/var/lib/csm_lodestar_validator/keystore_passwordPrepare the validator data directory
1) Create a new folders to store the validator client data, validator keystore, and the validator keystore password
sudo mkdir -p /var/lib/csm_lighthouse_validator2) Run the validator key import process.
sudo lighthouse account validator import --network holesky --datadir /var/lib/csm_lighthouse_validator --directory=$HOME/staking_deposit-cli*/validator_keysExpected output:
3) Change the owner of this new folder to the csm_lighthouse_validator user
4) Restrict permissions on this new folder such that only the owner is able to read, write, and execute files in this folder
sudo chown -R csm_lighthouse_validator:csm_lighthouse_validator /var/lib/csm_lighthouse_validator
sudo chmod 700 /var/lib/csm_lighthouse_validator1) Create a new folders to store the validator client data, validator keystore, and the validator keystore password
sudo mkdir -p /var/lib/csm_prysm_validator2) Run the validator key import process.
sudo /usr/local/bin/prysmvalidator accounts import --keys-dir=$HOME/staking_deposit-cli*/validator_keys --wallet-dir=/var/lib/csm_prysm_validator --holeskyNote: You will be prompted to accept the terms of use, create a new password for the Prysm wallet, and enter the password of your validator keystore.
Expected output:
3) Create a plain text password file for the Prysm wallet
sudo nano /var/lib/csm_prysm_validator/password.txtEnter the password you set during the validator keystore import process. Then, save + exit with CTRL+O, ENTER, CTRL+C.
4) Change the owner of this new folder to the csm_prysm_validator user
5) Restrict permissions on this new folder such that only the owner is able to read, write, and execute files in this folder
sudo chown -R csm_prysmvalidator:csm_prysmvalidator /var/lib/csm_prysm_validator
sudo chmod 700 /var/lib/csm_prysm_validatorConfigure the separate VC service
Create a new configuration file for your separate validator client.
Create a systemd configuration file for the Teku Validator Client service to run in the background.
sudo nano /etc/systemd/system/csm_tekuvalidator.servicePaste the configuration parameters below into the file:
[Unit]
Description=CSM Teku Validator Client
Wants=network-online.target
After=network-online.target
[Service]
User=csm_teku_validator
Group=csm_teku_validator
Type=simple
Restart=always
RestartSec=5
Environment="JAVA_OPTS=-Xmx8g"
Environment="TEKU_OPTS=-XX:-HeapDumpOnOutOfMemoryError"
ExecStart=/usr/local/bin/teku/bin/teku vc \
--network=<hoodi_or_mainnet> \
--data-path=/var/lib/csm_teku_validator \
--validator-keys=/var/lib/csm_teku_validator/validator_keystores:/var/lib/csm_teku_validator/keystore_password \
--beacon-node-api-endpoint=http://<Internal_IP_address>:5051 \
--validators-proposer-default-fee-recipient=<hoodi_or_mainnet_fee_recipient_address> \
--validators-builder-registration-default-enabled=true \
--validators-graffiti="<your_graffiti>" \
--metrics-enabled=true \
--metrics-port=8108 \
--doppelganger-detection-enabled=true
[Install]
WantedBy=multi-user.targetOnce you're done, save with Ctrl+O and Enter, then exit with Ctrl+X. Understand and review your configuration summary below, and amend if needed.
Refer to the native Teku validator client setup section for more information on the other flags used.
Teku VCCreate a systemd configuration file for the Nimbus Validator Client service to run in the background.
sudo nano /etc/systemd/system/csm_nimbusvalidator.servicePaste the configuration parameters below into the file:
[Unit]
Description=CSM Nimbus Validator Client
Wants=network-online.target
After=network-online.target
[Service]
User=csm_nimbus_validator
Group=csm_nimbus_validator
Type=simple
Restart=always
RestartSec=5
ExecStart=/usr/local/bin/nimbus_validator_client \
--data-dir=/var/lib/csm_nimbus_validator \
--payload-builder=true \
--beacon-node=http://<Internal_IP_address>:5051 \
--metrics \
--metrics-port=8108 \
--suggested-fee-recipient=<hoodi_or_mainnet_fee_recipient_address> \
--graffiti="<your_graffiti>" \
--doppelganger-detection
[Install]
WantedBy=multi-user.targetOnce you're done, save with Ctrl+O and Enter, then exit with Ctrl+X. Understand and review your configuration summary below, and amend if needed.
Refer to the native Nimbus validator client setup section for more information on the other flags used.
Nimbus VCCreate a new folder for the CSM Lodestar validator client.
cd
sudo mkdir csm_lodestar_validatorCreate a docker-compose.yml file in the Lodestar folder.
cd ~/csm_lodestar_validator
sudo nano docker-compose.ymlPaste the following configuration into the docker-compose.yml file. Note: This is similar to the systemd configuration file used in the setup of other clients in this curriculum.
services:
validator_client:
image: chainsafe/lodestar:latest
container_name: csm_lodestar_validator
user: <UID>:<GID> #replace with the actual UID and GID of the csm_lodestar_validator user
restart: unless-stopped
volumes:
- /var/lib/csm_lodestar_validator:/var/lib/csm_lodestar_validator
command:
- validator
- --dataDir
- /var/lib/csm_lodestar_validator
- --importKeystores
- /var/lib/csm_lodestar_validator/validator_keystores
- --importKeystoresPassword
- /var/lib/csm_lodestar_validator/keystore_password/<validator_signing_keystore_password_file_name>.txt
- --network
- <hoodi_or_mainnet>
- --beaconNodes
- http://<Internal_IP_address>:5051
- --builder
- --builder.boostFactor
- 100
- --suggestedFeeRecipient
- "<hoodi_or_mainnet_fee_recipient_address>"
- --doppelgangerProtection
- --metrics
- --metrics.port
- "5064"
- --graffiti
- "your_graffiti"
environment:
NODE_OPTIONS: --max-old-space-size=2048
ports:
- "5064:5064"Once you're done, save with Ctrl+O and Enter, then exit with Ctrl+X.
Refer to the native Lodestar validator client setup section for more information on the other flags used.
Lodestar VCCreate a systemd configuration file for the Lighthouse Validator Client service to run in the background.
sudo nano /etc/systemd/system/csm_lighthousevalidator.servicePaste the configuration parameters below into the file:
[Unit]
Description=CSM Lighthouse Validator Client
Wants=network-online.target
After=network-online.target
[Service]
User=csm_lighthouse_validator
Group=csm_lighthouse_validator
Type=simple
Restart=always
RestartSec=5
ExecStart=/usr/local/bin/lighthouse vc \
--network <hoodi_or_mainnet> \
--datadir /var/lib/csm_lighthouse_validator \
--builder-proposals \
--builder-boost-factor 100 \
--beacon-nodes http://<Internal_IP_address>:5051 \
--metrics \
--metrics-port 8108 \
--suggested-fee-recipient <hoodi_or_mainnet_fee_recipient_address> \
--graffiti="<your_graffiti>" \
--enable-doppelganger-protection
[Install]
WantedBy=multi-user.targetOnce you're done, save with Ctrl+O and Enter, then exit with Ctrl+X. Understand and review your configuration summary below, and amend if needed.
Refer to the native Lighthouse validator client setup section for more information on the other flags used.
Lighthouse VCCreate a systemd configuration file for the Prysm Validator Client service to run in the background.
sudo nano /etc/systemd/system/csm_prysmvalidator.servicePaste the configuration parameters below into the file:
[Unit]
Description=CSM Prysm Validator Client
Wants=network-online.target
After=network-online.target
[Service]
User=csm_prysm_validator
Group=csm_prysm_validator
Type=simple
Restart=always
RestartSec=5
ExecStart=/usr/local/bin/prysmvalidator \
--accept-terms-of-use \
--<hoodi_or_mainnet> \
--datadir=/var/lib/csm_prysm_validator \
--enable-builder \
--beacon-rpc-provider=<Internal_IP_address>:4000 \
--beacon-rpc-gateway-provider=<Internal_IP_address>:5051 \
--wallet-dir=/var/lib/csm_prysm_validator \
--wallet-password-file=/var/lib/csm_prysm_validator/password.txt \
--monitoring-port=8108 \
--suggested-fee-recipient=<hoodi_or_mainnet_fee_recipient_address> \
--graffiti="<your_graffiti>" \
--enable-doppelganger
[Install]
WantedBy=multi-user.targetOnce you're done, save with Ctrl+O and Enter, then exit with Ctrl+X. Understand and review your configuration summary below, and amend if needed.
Refer to the native Lighthouse validator client setup section for more information on the other flags used.
Prysm VCStart the CSM Validator Client
Create a new configuration file for your separate validator client.
Reload the systemd daemon to register the changes made, start the Teku Validator Client, and check its status to make sure its running.
sudo systemctl daemon-reload
sudo systemctl start csm_tekuvalidator.service
sudo systemctl status csm_tekuvalidator.serviceThe output should say the Teku Validator Client is “active (running)”. Press CTRL-C to exit and the Teku Validator Client will continue to run.
Use the following command to check the logs for any warnings or errors:
sudo journalctl -fu csm_tekuvalidator -o cat | ccze -AExpected output:
Press CTRL-C to exit.
If the Teku Validator Client service is running smoothly, we can now enable it to fire up automatically when rebooting the system.
sudo systemctl enable csm_tekuvalidatorExpected output:
Created symlink /etc/systemd/system/multi-user.target.wants/csm_tekuvalidator.service → /etc/sRemove duplicates of validator keystores
To prevent configuration mistakes leading to double signing in the future, remove duplicate copies of the validator signing keystores once everything is running smoothly.
sudo rm -r ~/staking_deposit-cli*/validator_keysReload the systemd daemon to register the changes made, start the Nimbus Validator Client, and check its status to make sure its running.
sudo systemctl daemon-reload
sudo systemctl start csm_nimbusvalidator.service
sudo systemctl status csm_nimbusvalidator.serviceThe output should say the Nimbus Validator Client is “active (running)”. Press CTRL-C to exit and the Nimbus Validator Client will continue to run.
Use the following command to check the logs for any warnings or errors:
sudo journalctl -fu csm_nimbusvalidator -o cat | ccze -AExpected output:
Press CTRL-C to exit.
If the Nimbus Validator Client service is running smoothly, we can now enable it to fire up automatically when rebooting the system.
sudo systemctl enable csm_nimbusvalidatorExpected output:
Created symlink /etc/systemd/system/multi-user.target.wants/csm_nimbusvalidator.service → /etc/systemd/system/csm_nimbusvalidator.service.Remove duplicates of validator keystores
To prevent configuration mistakes leading to double signing in the future, remove duplicate copies of the validator signing keystores once everything is running smoothly.
sudo rm -r ~/staking_deposit-cli*/validator_keys1) Make sure you are in the same folder as the docker-compose.yml file you created earlier.
cd ~/csm_lodestar_validator2) Start the docker container.
docker compose up -dExpected output:
3) Make sure there are no error messages by monitoring the logs for a few minutes.
docker logs csm_lodestar_validator -f
Remove duplicates of validator keystores
To prevent configuration mistakes leading to double signing in the future, remove duplicate copies of the validator signing keystores once everything is running smoothly.
sudo rm -r ~/staking_deposit-cli*/validator_keysReload the systemd daemon to register the changes made, start the Lighthouse Validator Client, and check its status to make sure its running.
sudo systemctl daemon-reload
sudo systemctl start csm_lighthousevalidator.service
sudo systemctl status csm_lighthousevalidator.serviceThe output should say the Lighthouse Validator Client is “active (running)”. Press CTRL-C to exit and the Lighthouse Validator Client will continue to run.
Use the following command to check the logs for any warnings or errors:
sudo journalctl -fu csm_lighthousevalidator -o cat | ccze -AExpected output:
Press CTRL-C to exit.
If the Lighthouse Validator Client service is running smoothly, we can now enable it to fire up automatically when rebooting the system.
sudo systemctl enable csm_lighthousevalidatorExpected output:
Created symlink /etc/systemd/system/multi-user.target.wants/csm_lighthousevalidator.service → /etc/systemd/system/csm_lighthousevalidator.service.Remove duplicates of validator keystores
To prevent configuration mistakes leading to double signing in the future, remove duplicate copies of the validator signing keystores once everything is running smoothly.
sudo rm -r ~/staking_deposit-cli*/validator_keysReload the systemd daemon to register the changes made, start the Prysm Validator Client, and check its status to make sure its running.
sudo systemctl daemon-reload
sudo systemctl start csm_prysmvalidator.service
sudo systemctl status csm_prysmvalidator.serviceThe output should say the Prysm Validator Client is “active (running)”. Press CTRL-C to exit and the Prysm Validator Client will continue to run.
Use the following command to check the logs for any warnings or errors:
sudo journalctl -fu csm_prysmvalidator -o cat | ccze -AExpected output:
Press CTRL-C to exit.
If the Prysm Validator Client service is running smoothly, we can now enable it to fire up automatically when rebooting the system.
sudo systemctl enable csm_prysmvalidatorExpected output:
Created symlink /etc/systemd/system/multi-user.target.wants/csm_prysmvalidator.service → /etc/systemd/system/csm_prysmvalidator.service.Remove duplicates of validator keystores
To prevent configuration mistakes leading to double signing in the future, remove duplicate copies of the validator signing keystores once everything is running smoothly.
sudo rm -r ~/staking_deposit-cli*/validator_keysAutomation Tools
Only 1 instance of ETH Pillar can be running per device. If you are already using ETH Pillar for your own validator node setup, then you will need to use any of the other methods (e.g., ETH Docker) listed in this subpage to import your CSM validator keystores.
Select 4 - Lido CSM Validator Client Only.
Enter your consensus client (beacon node) address. Example: http://127.0.0.1:5052
Verify the fee_recipient address is set to the Lido Execution Layer Rewards Vault.
Generate and import CSM validator keys.
ETH Docker sets the fee_recipient address on the validator key level. Refer to the subpage below, under "Automation Tools".
Resources
Documentation: https://docs.teku.consensys.io/introduction
Discord: https://discord.gg/consensys (Select the Teku channel)
Documentation: https://nimbus.guide/install.html
Discord: https://discord.gg/BWKx5Xta
Git repository: https://github.com/ChainSafe/lodestar-quickstart.git
Documentation: https://chainsafe.github.io/lodestar/
Discord: https://discord.gg/7Gdb4nFh
Documentation: https://lighthouse-book.sigmaprime.io/intro.html
Documentation: https://docs.prylabs.network/docs/getting-started
Discord: https://discord.gg/prysmaticlabs
Last updated