Files
mpc/Dockerfile
zeekayandHanzo Dev 8d7cab8735 build: pin sovereign image to upstream mpc v1.17.12 (CGGMP21 threshold-degree fix)
Wraps luxfi/mpc:v1.17.12 which wires --threshold into the CGGMP21 keygen
degree (was silently 1-of-n: any single share signed), repairs the
post-re-tag luxfi dep graph (geth v1.17.12), and restores private-module
authed fetch + multi-arch manifest in the upstream build.

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-14 16:06:21 -07:00

23 lines
960 B
Docker

# Zoo MPC — runs upstream luxfi/mpc (the canonical lux-native mpcd) with Zoo
# branding. Sovereign version tag MIRRORS the wrapped upstream: zooai/mpc:v1.17.12
# == luxfi/mpc:v1.17.12 (same convention as hanzoai/mpc:v1.17.4). Patch-pin only —
# never :latest, never a lazy major bump.
# v1.17.12 wires --threshold into the CGGMP21 keygen degree (was silently 1-of-n),
# repairs the post-re-tag luxfi dep graph (geth v1.17.12), and restores the
# private-module (hsm) authed fetch in the upstream build.
FROM ghcr.io/luxfi/mpc:v1.17.12 AS upstream
FROM alpine:3.21
RUN apk add --no-cache ca-certificates curl
COPY --from=upstream /usr/local/bin/mpcd /usr/local/bin/mpcd
# Zoo threshold ring defaults: 3-of-5 (the runtime StatefulSet passes --threshold
# explicitly and overrides these; kept as documentation of the Zoo topology).
ENV MPC_ORG=zoo \
MPC_BRAND_NAME=Zoo \
MPC_THRESHOLD=3 \
MPC_PARTIES=5
EXPOSE 8081
ENTRYPOINT ["mpcd", "start"]