fix(devnet): reliable local devnet L1 startup and arm64 build

[tomatoishealthy]

Summary

A few related fixes to get the local devnet (make devnet-up) starting reliably, especially on arm64 / Apple Silicon. Four changes:

1. Drop removed --allow-insecure-unlock (docker-compose-devnet.yml) — a newer geth removed this flag, so layer1-el crash-looped on startup (flag provided but not defined). It was also a no-op here (no --unlock; the PoS L1 drives block production via the engine API).
2. Pin L1 images to stable versions instead of :latest (which drifts and caused Initialize morph #1): geth → v1.17.5, lighthouse → v8.2.1 — the versions verified working with this devnet.
3. Bump morph-da-codec (common/go.mod, common/go.sum) to the commit that ships libmorph_da_zstd_linux_arm64.a. The previous pin only had linux/amd64 + darwin/arm64 libs, so building tx-submitter/node for linux/arm64 failed with undefined reference to morph_da_zstd_*.
4. Fix ha-nodekey2 — strip a stray leading space before the hex key that broke geth's nodekey parsing for HA node-2 (key content unchanged).

Test plan

• layer1-el starts and L1 produces blocks (no restart loop)
• tx-submitter builds on arm64 (cgo links morph_da_zstd_* successfully)
• node-1 derives batches from L1 and its block height advances (0 → batch end)
• full make devnet-up on a clean checkout (arm64/Mac)

Summary by CodeRabbit

• Security Improvements

  • Removed insecure account unlocking from the development network’s Layer 1 node configuration.

• Infrastructure / Reliability

  • Pinned the development network’s execution client and consensus client images to specific versions (instead of floating “latest”) for more predictable behavior.
  • Added clarifying comments to the development network container settings for easier maintenance.

[claude]

Claude Code Review

Claude Code Review is paused for this repository. To reconnect it, an admin of this repository's GitHub organization (or the account owner, for personal repositories) who can also manage your Claude organization's Code Review settings needs to re-link GitHub in Code Review settings. This is a one-time step.

_{Tip: disable this comment in your organization's Code Review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

The devnet configuration pins execution and consensus client images and removes insecure account unlocking from Geth. The common Go module updates the Morph DA codec binding dependency, while the devnet nodekey value remains unchanged.

Changes

Devnet container configuration

Layer / File(s)	Summary
Pin devnet images and secure Geth startup ops/docker/docker-compose-devnet.yml, ops/docker/ha-nodekey2	Execution and consensus services use pinned images, and the Geth command no longer includes --allow-insecure-unlock; the nodekey value is unchanged.

Codec dependency update

Layer / File(s)	Summary
Update codec binding dependency common/go.mod	The Morph DA codec binding is updated to a newer pseudo-version, with dependency ordering adjusted.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: twcctop

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title matches the main changes: fixing devnet L1 startup and updating dependencies for arm64 support.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/devnet-geth-insecure-unlock

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}