Merge branch 'deb-packaging' of https://github.com/MoeMahhouk/lighthouse into deb-packaging

Author: MoeMahhouk

.github/workflows/release.yml

@@ -66,6 +66,24 @@ jobs:
               if: env.SELF_HOSTED_RUNNERS == 'false'
               run: rustup update stable
 
+            # ==============================
+            # Debian build dependencies
+            # ==============================
+
+            - name: Install Debian build dependencies
+              if: endsWith(matrix.arch, '-deb')
+              run: |
+                sudo apt-get update
+                sudo apt-get install -y libclang-dev cmake ${{ matrix.gcc_package }}
+
+            - name: Install Rust target for Debian builds
+              if: endsWith(matrix.arch, '-deb')
+              run: rustup target add ${{ matrix.rust_target }}
+
+            - name: Install cargo-deb
+              if: endsWith(matrix.arch, '-deb')
+              run: cargo install cargo-deb
+
             # ==============================
             #       Builds - Binaries
             # ==============================
@@ -94,6 +112,38 @@ jobs:
             #       Builds - Debian Packages
             # ==============================
 
+            - name: Build reproducible Debian package
+              if: endsWith(matrix.arch, '-deb')
+              run: |
+                make deb-cargo RUST_TARGET=${{ matrix.rust_target }} PROFILE=${{ matrix.profile }}
+
+            - name: Find and prepare Debian package
+              if: endsWith(matrix.arch, '-deb')
+              run: |
+                VERSION=${{ needs.extract-version.outputs.VERSION }}
+                DEB_FILE=$(find target/${{ matrix.rust_target }}/debian -name "*.deb" | head -1)
+                if [ -n "$DEB_FILE" ]; then
+                  # Create standardized filename to match existing pattern
+                  ARCH_SHORT=$(echo "${{ matrix.rust_target }}" | cut -d'-' -f1)
+                  NEW_NAME="lighthouse-${{ needs.extract-version.outputs.VERSION }}-${ARCH_SHORT}.deb"
+                  cp "$DEB_FILE" "$NEW_NAME"
+                  echo "DEB_PACKAGE=$NEW_NAME" >> $GITHUB_ENV
+                  
+                  # Generate checksums  
+                  sha256sum "$NEW_NAME" > "$NEW_NAME.sha256"
+                  sha512sum "$NEW_NAME" > "$NEW_NAME.sha512"
+                  
+                  echo "Debian package built: $NEW_NAME"
+                  echo "Size: $(du -h "$NEW_NAME" | cut -f1)"
+                else
+                  echo "❌ No .deb package found"
+                  exit 1
+                fi
+
+            # ==============================
+            #       Builds - Debian Packages
+            # ==============================
+
             - name: Build reproducible Debian package
               if: endsWith(matrix.arch, '-deb')
               run: |
@@ -150,6 +200,20 @@ jobs:
             #       Debian Package Artifacts
             # ==============================
 
+            - name: Sign Debian package
+              if: endsWith(matrix.arch, '-deb')
+              env:
+                  GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
+                  GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+              run: |
+                  export GPG_TTY=$(tty)
+                  echo "$GPG_SIGNING_KEY" | gpg --batch --import
+                  echo "$GPG_PASSPHRASE" | gpg --passphrase-fd 0 --pinentry-mode loopback --batch -ab "$DEB_PACKAGE"
+
+            # ==============================
+            #       Debian Package Artifacts
+            # ==============================
+
             - name: Sign Debian package
               if: endsWith(matrix.arch, '-deb')
               env:

lighthouse/debian/lighthouse.service

@@ -4,29 +4,13 @@ After=network.target
 Wants=network.target
 
 [Service]
-Type=simple
-User=lighthouse
-Group=lighthouse
-Restart=always
-RestartSec=5
-TimeoutStopSec=180
-Environment="RUST_LOG=info"
-ExecStart=/usr/bin/lighthouse \
-    bn \
-    --checkpoint-sync-url https://sync-mainnet.beaconcha.in \
-    --execution-endpoint http://localhost:8551 \
-    --execution-jwt /etc/jwt.hex \
-    --suggested-fee-recipient 0x0 \
-    --always-prepare-payload \
-    --prepare-payload-lookahead 8000 \
-    --disable-deposit-contract-sync \
-    --http \
-    --port 9000 \
-    --http-port 3500 \
-    --metrics \
-    --metrics-address 127.0.0.1 \
-    --metrics-port 5054 \
-    --datadir /mnt/data/lighthouse
+Type=exec
+DynamicUser=yes
+StateDirectory=lighthouse
+ExecStart=/usr/bin/lighthouse bn \
+          --execution-endpoint http://localhost:8551 \
+          --execution-jwt-secret-key 0000000000000000000000000000000000000000000000000000000000000000
+          --datadir %S/lighthouse
 
 [Install]
 WantedBy=default.target