feat: update nethermind Dockerfile to use base-consensus instead of op-node

Replace Go op-node build stage with Rust base-consensus stage.
Update nethermind-entrypoint to use BASE_NODE_* auth vars and
OP_NETHERMIND_NETWORK for --config flag.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

Author: meyer9

nethermind/Dockerfile

@@ -1,17 +1,18 @@
-FROM golang:1.24 AS op
-
-RUN curl -sSfL 'https://just.systems/install.sh' | bash -s -- --to /usr/local/bin
+FROM rust:1.88 AS base-consensus
 
 WORKDIR /app
 
 COPY versions.env /tmp/versions.env
 
-RUN . /tmp/versions.env && git clone $OP_NODE_REPO --branch $OP_NODE_TAG --single-branch . && \
-    git switch -c branch-$OP_NODE_TAG && \
-    bash -c '[ "$(git rev-parse HEAD)" = "$OP_NODE_COMMIT" ]'
+RUN apt-get update && apt-get -y upgrade && \
+    apt-get install -y git libclang-dev pkg-config curl build-essential && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN . /tmp/versions.env && git clone $BASE_NODE_REPO . && \
+    git checkout tags/$BASE_NODE_TAG && \
+    bash -c '[ "$(git rev-parse HEAD)" = "$BASE_NODE_COMMIT" ]' || (echo "Commit hash verification failed" && exit 1)
 
-RUN . /tmp/versions.env && cd op-node && \
-    just VERSION=$OP_NODE_TAG op-node
+RUN cargo build --bin base-consensus --profile maxperf
 
 FROM mcr.microsoft.com/dotnet/sdk:10.0-noble AS build
 
@@ -42,9 +43,9 @@ RUN mkdir -p /var/log/supervisor
 WORKDIR /app
 
 COPY --from=build /publish ./
-COPY --from=op /app/op-node/bin/op-node ./
+COPY --from=base-consensus /app/target/maxperf/base-consensus ./
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 COPY nethermind/nethermind-entrypoint ./execution-entrypoint
-COPY op-node-entrypoint .
+COPY base-consensus-entrypoint .
 
 CMD ["/usr/bin/supervisord"]

nethermind/nethermind-entrypoint

@@ -14,20 +14,20 @@ P2P_PORT="${P2P_PORT:-30303}"
 ADDITIONAL_ARGS=""
 
 # Check if required variables are set
-if [[ -z "$OP_NODE_NETWORK" ]]; then
-    echo "Expected OP_NODE_NETWORK to be set" 1>&2
+if [[ -z "$BASE_NODE_NETWORK" ]]; then
+    echo "Expected BASE_NODE_NETWORK to be set" 1>&2
     exit 1
 fi
 
 # Create necessary directories
 mkdir -p "$NETHERMIND_DATA_DIR"
 
 # Write the JWT secret
-if [[ -z "$OP_NODE_L2_ENGINE_AUTH_RAW" ]]; then
-    echo "Expected OP_NODE_L2_ENGINE_AUTH_RAW to be set" 1>&2
+if [[ -z "$BASE_NODE_L2_ENGINE_AUTH_RAW" ]]; then
+    echo "Expected BASE_NODE_L2_ENGINE_AUTH_RAW to be set" 1>&2
     exit 1
 fi
-echo "$OP_NODE_L2_ENGINE_AUTH_RAW" > "$OP_NODE_L2_ENGINE_AUTH"
+echo "$BASE_NODE_L2_ENGINE_AUTH_RAW" > "$BASE_NODE_L2_ENGINE_AUTH"
 
 # Additional arguments based on environment variables
 if [[ -n "${OP_NETHERMIND_BOOTNODES:-}" ]]; then
@@ -44,15 +44,15 @@ fi
 
 # Execute Nethermind
 exec ./nethermind \
-    --config="$OP_NODE_NETWORK" \
+    --config="$OP_NETHERMIND_NETWORK" \
     --datadir="$NETHERMIND_DATA_DIR" \
     --Optimism.SequencerUrl=$OP_SEQUENCER_HTTP \
     --log="$NETHERMIND_LOG_LEVEL" \
     --JsonRpc.Enabled=true \
     --JsonRpc.Host=0.0.0.0 \
     --JsonRpc.WebSocketsPort="$WS_PORT" \
     --JsonRpc.Port="$RPC_PORT" \
-    --JsonRpc.JwtSecretFile="$OP_NODE_L2_ENGINE_AUTH" \
+    --JsonRpc.JwtSecretFile="$BASE_NODE_L2_ENGINE_AUTH" \
     --JsonRpc.EngineHost=0.0.0.0 \
     --JsonRpc.EnginePort="$AUTHRPC_PORT" \
     --HealthChecks.Enabled=true \