FIX: current NEOFS_IR_CONTRACTS_NEOFS

Signed-off-by: Elizaveta Chichindaeva <elizaveta@nspcc.ru>
Disable caching on storage nodes
2022-11-14 15:12:45 +03:00 · 2022-09-28 18:37:48 +03:00 · 2022-09-28 18:36:02 +03:00 · 2022-09-28 18:36:02 +03:00
115 changed files with 1420 additions and 1189 deletions
--- a/.basic_services
+++ b/.basic_services
@ -1,4 +1,5 @@
 # Services start/stop order
 # Will start from top to bottom and stop in reverse
+nats
 ir
 storage
--- a/.bootstrap_services
+++ b/.bootstrap_services
@ -1,7 +1,5 @@
 # Services start/stop order
 # Will start from top to bottom and stop in reverse
 basenet
+chain
 morph_chain
-jaeger
-prometheus
-grafana
--- a/.dockerignore
+++ b/.dockerignore
@ -1,6 +1,5 @@
 .docker
 .github
-.forgejo
 vendor
 tmp
 .secrets
--- a/.env
+++ b/.env
@ -1,5 +1,5 @@
 # Basenet settings
-LOCAL_DOMAIN=frostfs.devenv
+LOCAL_DOMAIN=neofs.devenv
 IPV4_PREFIX=192.168.130
 CA_CERTS_TRUSTED_STORE=/etc/ssl/certs

@ -8,63 +8,53 @@ BASTION_VERSION=10
 BASTION_IMAGE=debian

 # NeoGo privnet
-NEOGO_VERSION=0.104.0
+#CHAIN_PATH="/path/to/devenv.dump.gz"
+CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.15.5/devenv_mainchain_notary_disabled.gz"
+NEOGO_VERSION=0.99.3-2-gaa57779d
 NEOGO_IMAGE=nspccdev/neo-go

-# FrostFS InnerRing nodes
-IR_VERSION=0.42.9
-IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
+# NeoFS InnerRing nodes
+IR_VERSION=0.32.0
+IR_IMAGE=nspccdev/neofs-ir

-# FrostFS Storage nodes
-NODE_VERSION=0.42.9
-NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
+# NeoFS Storage nodes
+NODE_VERSION=0.32.0
+NODE_IMAGE=nspccdev/neofs-storage
+
+# NATS Server
+NATS_VERSION=2.7.2
+NATS_IMAGE=nats

 # HTTP Gate
-HTTP_GW_VERSION=0.30.2
-HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
+HTTP_GW_VERSION=0.24.0
+HTTP_GW_IMAGE=nspccdev/neofs-http-gw

 # REST Gate
-REST_GW_VERSION=c9c85e90
-REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
+REST_GW_VERSION=0.4.0
+REST_GW_IMAGE=nspccdev/neofs-rest-gw

 # S3 Gate
-S3_GW_VERSION=0.31.0-rc.4
-S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
+S3_GW_VERSION=0.24.0
+S3_GW_IMAGE=nspccdev/neofs-s3-gw

-# Lifecycler
-S3_LIFECYCLER_VERSION=0.1.3
-S3_LIFECYCLER_IMAGE=truecloudlab/frostfs-s3-lifecycler
+# Coredns
+COREDNS_VERSION=v016
+COREDNS_IMAGE=nspccdev/coredns

-# FrostFS LOCODE database
-LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a056712e8e54
+# NeoFS LOCODE database
+LOCODE_DB_URL=https://github.com/nspcc-dev/neofs-locode-db/releases/download/v0.2.1/locode_db.gz
 #LOCODE_DB_PATH=/path/to/locode_db

-# FrostFS CLI binary
-FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-cli
-#FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
+# NeoFS CLI binary
+NEOFS_CLI_URL=https://github.com/nspcc-dev/neofs-node/releases/download/v0.32.0/neofs-cli-amd64.tar.gz
+#NEOFS_CLI_PATH=/path/to/neofs-cli-binary

-# FrostFS ADM tool binary
-FROSTFS_ADM_VERSION=498f9955ea
-FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-adm
-#FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
+# NeoFS ADM tool binary
+NEOFS_ADM_VERSION=v0.32.0
+NEOFS_ADM_URL=https://github.com/nspcc-dev/neofs-node/releases/download/${NEOFS_ADM_VERSION}/neofs-adm-amd64.tar.gz
+#NEOFS_ADM_PATH=/path/to/neofs-adm-binary

-# Compiled FrostFS Smart Contracts
-FROSTFS_CONTRACTS_VERSION=694daebb19
-FROSTFS_CONTRACTS_URL=https://git.frostfs.info/TrueCloudLab/frostfs-contract/releases/download/v0.19.2/frostfs-contract-v0.19.2.tar.gz
-#FROSTFS_CONTRACTS_PATH=/path/to/unpacked/frostfs-contracts-dir
-
-# Jaeger tracing
-JAEGER_VERSION=1.42.0
-JAEGER_IMAGE=jaegertracing/all-in-one
-
-# Prometheus monitoring
-PROMETHEUS_VERSION=v2.43.0
-PROMETHEUS_IMAGE=prom/prometheus
-
-# Grafana versions
-GRAFANA_VERSION=9.5.6
-GRAFANA_IMAGE=grafana/grafana
-
-# Loki versions
-LOKI_VERSION=2.9.1
-LOKI_IMAGE=grafana/loki
+# Compiled NeoFS Smart Contracts
+NEOFS_CONTRACTS_VERSION=v0.15.5
+NEOFS_CONTRACTS_URL=https://github.com/nspcc-dev/neofs-contract/releases/download/${NEOFS_CONTRACTS_VERSION}/neofs-contract-${NEOFS_CONTRACTS_VERSION}.tar.gz
+#NEOFS_CONTRACTS_PATH=/path/to/unpacked/neofs-contracts-dir
--- a/.forgejo/workflows/dco.yml
+++ b/.forgejo/workflows/dco.yml
@ -1,21 +0,0 @@
-name: DCO action
-on: [pull_request]
-
-jobs:
-  dco:
-    name: DCO
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: Setup Go
-        uses: actions/setup-go@v3
-        with:
-          go-version: '1.21'
-
-      - name: Run commit format checker
-        uses: https://git.frostfs.info/TrueCloudLab/dco-go@v2
-        with:
-          from: 'origin/${{ github.event.pull_request.base.ref }}'
--- a/.gitattributes
+++ b/.gitattributes
@ -1 +0,0 @@
-/services/grafana/provisioning/dashboards/* -diff -merge
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@ -1 +0,0 @@
-*       @alexvanin @fyrchik
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ b/.github/ISSUE_TEMPLATE/bug_report.md
@ -1,45 +0,0 @@
---
-name: Bug report
-about: Create a report to help us improve
-title: ''
-labels: community, triage, bug
-assignees: ''
-
---
-
-<!--- Provide a general summary of the issue in the Title above -->
-
-## Expected Behavior
-<!--- If you're describing a bug, tell us what should happen -->
-<!--- If you're suggesting a change/improvement, tell us how it should work -->
-
-## Current Behavior
-<!--- If describing a bug, tell us what happens instead of the expected behavior -->
-<!--- If suggesting a change/improvement, explain the difference from current behavior -->
-
-## Possible Solution
-<!--- Not obligatory -->
-<!--- If no reason/fix/additions for the bug can be suggested, -->
-<!--- uncomment the following phrase: -->
-
-<!--- No fix can be suggested by a QA engineer. Further solutions shall be up to developers. -->
-
-## Steps to Reproduce (for bugs)
-<!--- Provide a link to a live example, or an unambiguous set of steps to -->
-<!--- reproduce this bug. -->
-
-1.
-
-## Context
-<!--- How has this issue affected you? What are you trying to accomplish? -->
-<!--- Providing context helps us come up with a solution that is most useful in the real world -->
-
-## Regression
-<!-- Is this issue a regression? (Yes / No) -->
-<!-- If Yes, optionally please include version or commit id or PR# that caused this regression, if you have these details. -->
-
-## Your Environment
-<!--- Include as many relevant details about the environment you experienced the bug in -->
-* Version used:
-* Server setup and configuration:
-* Operating System and version (`uname -a`):
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@ -1 +0,0 @@
-blank_issues_enabled: false
--- a/.github/ISSUE_TEMPLATE/feature_request.md
+++ b/.github/ISSUE_TEMPLATE/feature_request.md
@ -1,20 +0,0 @@
---
-name: Feature request
-about: Suggest an idea for this project
-title: ''
-labels: community, triage
-assignees: ''
-
---
-
-## Is your feature request related to a problem? Please describe.
-<!--- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] -->
-
-## Describe the solution you'd like
-<!--- A clear and concise description of what you want to happen. -->
-
-## Describe alternatives you've considered
-<!--- A clear and concise description of any alternative solutions or features you've considered. -->
-
-## Additional context
-<!--- Add any other context or screenshots about the feature request here. -->
--- a/.github/logo.svg
+++ b/.github/logo.svg
@ -1,70 +1,129 @@
-<?xml version="1.0" encoding="utf-8"?>
-<!-- Generator: Adobe Illustrator 25.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
-<svg version="1.1" id="Слой_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
-	 viewBox="0 0 184.2 51.8" style="enable-background:new 0 0 184.2 51.8;" xml:space="preserve">
-<style type="text/css">
-	.st0{display:none;}
-	.st1{display:inline;}
-	.st2{fill:#01E397;}
-	.st3{display:inline;fill:#010032;}
-	.st4{display:inline;fill:#00E599;}
-	.st5{display:inline;fill:#00AF92;}
-	.st6{fill:#00C3E5;}
-</style>
-<g id="Layer_2">
-	<g id="Layer_1-2" class="st0">
-		<g class="st1">
-			<path class="st2" d="M146.6,18.3v7.2h10.9V29h-10.9v10.7h-4V14.8h18v3.5H146.6z"/>
-			<path class="st2" d="M180,15.7c1.7,0.9,3,2.2,4,3.8l-3,2.7c-0.6-1.3-1.5-2.4-2.6-3.3c-1.3-0.7-2.8-1-4.3-1
-				c-1.4-0.1-2.8,0.3-4,1.1c-0.9,0.5-1.5,1.5-1.4,2.6c0,1,0.5,1.9,1.4,2.4c1.5,0.8,3.2,1.3,4.9,1.5c1.9,0.3,3.7,0.8,5.4,1.6
-				c1.2,0.5,2.2,1.3,2.9,2.3c0.6,1,1,2.2,0.9,3.4c0,1.4-0.5,2.7-1.3,3.8c-0.9,1.2-2.1,2.1-3.5,2.6c-1.7,0.6-3.4,0.9-5.2,0.8
-				c-5,0-8.6-1.6-10.7-5l2.9-2.8c0.7,1.4,1.8,2.5,3.1,3.3c1.5,0.7,3.1,1.1,4.7,1c1.5,0.1,2.9-0.2,4.2-0.9c0.9-0.5,1.5-1.5,1.5-2.6
-				c0-0.9-0.5-1.8-1.3-2.2c-1.5-0.7-3.1-1.2-4.8-1.5c-1.9-0.3-3.7-0.8-5.5-1.5c-1.2-0.5-2.2-1.4-3-2.4c-0.6-1-1-2.2-0.9-3.4
-				c0-1.4,0.4-2.7,1.2-3.8c0.8-1.2,2-2.2,3.3-2.8c1.6-0.7,3.4-1.1,5.2-1C176.1,14.3,178.2,14.8,180,15.7z"/>
-		</g>
-		<path class="st3" d="M73.3,16.3c1.9,1.9,2.9,4.5,2.7,7.1v15.9h-4V24.8c0-2.6-0.5-4.5-1.6-5.7c-1.2-1.2-2.8-1.8-4.5-1.7
-			c-1.3,0-2.5,0.3-3.7,0.8c-1.2,0.7-2.2,1.7-2.9,2.9c-0.8,1.5-1.1,3.2-1.1,4.9v13.3h-4V15.1l3.6,1.5v1.7c0.8-1.5,2.1-2.6,3.6-3.3
-			c1.5-0.8,3.2-1.2,4.9-1.1C68.9,13.8,71.3,14.7,73.3,16.3z"/>
-		<path class="st3" d="M104.4,28.3H85.6c0.1,2.2,1,4.3,2.5,5.9c1.5,1.4,3.5,2.2,5.6,2.1c1.6,0.1,3.2-0.2,4.6-0.9
-			c1.1-0.6,2-1.6,2.5-2.8l3.3,1.8c-0.9,1.7-2.3,3.1-4,4c-2,1-4.2,1.5-6.4,1.4c-3.7,0-6.7-1.1-8.8-3.4s-3.2-5.5-3.2-9.6s1-7.2,3-9.5
-			s5-3.4,8.7-3.4c2.1-0.1,4.2,0.5,6.1,1.5c1.6,1,3,2.5,3.8,4.2c0.9,1.8,1.3,3.9,1.3,5.9C104.6,26.4,104.6,27.4,104.4,28.3z
-			 M88.1,19.3c-1.4,1.5-2.2,3.4-2.4,5.5h15.1c-0.2-2-1-3.9-2.3-5.5c-1.4-1.3-3.2-2-5.1-1.9C91.5,17.3,89.6,18,88.1,19.3z"/>
-		<path class="st3" d="M131,17.3c2.2,2.3,3.2,5.5,3.2,9.5s-1,7.3-3.2,9.6s-5.1,3.4-8.8,3.4s-6.7-1.1-8.9-3.4s-3.2-5.5-3.2-9.6
-			s1.1-7.2,3.2-9.5s5.1-3.4,8.9-3.4S128.9,15,131,17.3z M116.2,19.9c-1.5,2-2.2,4.4-2.1,6.9c-0.2,2.5,0.6,5,2.1,7
-			c1.5,1.7,3.7,2.7,6,2.6c2.3,0.1,4.4-0.9,5.9-2.6c1.5-2,2.3-4.5,2.1-7c0.1-2.5-0.6-4.9-2.1-6.9c-1.5-1.7-3.6-2.7-5.9-2.6
-			C119.9,17.2,117.7,18.2,116.2,19.9z"/>
-		<polygon class="st4" points="0,9.1 0,43.7 22.5,51.8 22.5,16.9 46.8,7.9 24.8,0 		"/>
-		<polygon class="st5" points="24.3,17.9 24.3,36.8 46.8,44.9 46.8,9.6 		"/>
-	</g>
-	<g>
-		<g>
-			<path class="st6" d="M41.6,17.5H28.2v6.9h10.4v3.3H28.2v10.2h-3.9V14.2h17.2V17.5z"/>
-			<path class="st6" d="M45.8,37.9v-18h3.3l0.4,3.2c0.5-1.2,1.2-2.1,2.1-2.7c0.9-0.6,2.1-0.9,3.5-0.9c0.4,0,0.7,0,1.1,0.1
-				c0.4,0.1,0.7,0.2,0.9,0.3l-0.5,3.4c-0.3-0.1-0.6-0.2-0.9-0.2C55.4,23,54.9,23,54.4,23c-0.7,0-1.5,0.2-2.2,0.6
-				c-0.7,0.4-1.3,1-1.8,1.8s-0.7,1.8-0.7,3v9.5H45.8z"/>
-			<path class="st6" d="M68.6,19.6c1.8,0,3.3,0.4,4.6,1.1c1.3,0.7,2.4,1.8,3.1,3.2s1.1,3.1,1.1,5c0,1.9-0.4,3.6-1.1,5
-				c-0.8,1.4-1.8,2.5-3.1,3.2c-1.3,0.7-2.9,1.1-4.6,1.1s-3.3-0.4-4.6-1.1c-1.3-0.7-2.4-1.8-3.2-3.2c-0.8-1.4-1.2-3.1-1.2-5
-				c0-1.9,0.4-3.6,1.2-5s1.8-2.5,3.2-3.2C65.3,19.9,66.8,19.6,68.6,19.6z M68.6,22.6c-1.1,0-2,0.2-2.8,0.7c-0.8,0.5-1.3,1.2-1.7,2.1
-				s-0.6,2.1-0.6,3.5c0,1.3,0.2,2.5,0.6,3.4s1,1.7,1.7,2.2s1.7,0.7,2.8,0.7c1.1,0,2-0.2,2.7-0.7c0.7-0.5,1.3-1.2,1.7-2.2
-				s0.6-2.1,0.6-3.4c0-1.4-0.2-2.5-0.6-3.5s-1-1.6-1.7-2.1C70.6,22.8,69.6,22.6,68.6,22.6z"/>
-			<path class="st6" d="M89.2,38.3c-1.8,0-3.4-0.3-4.9-1c-1.5-0.7-2.7-1.7-3.5-3l2.7-2.3c0.5,1,1.3,1.8,2.3,2.4
-				c1,0.6,2.2,0.9,3.6,0.9c1.1,0,2-0.2,2.6-0.6c0.6-0.4,1-0.9,1-1.6c0-0.5-0.2-0.9-0.5-1.2s-0.9-0.6-1.7-0.8l-3.8-0.8
-				c-1.9-0.4-3.3-1-4.1-1.9c-0.8-0.9-1.2-1.9-1.2-3.3c0-1,0.3-1.9,0.9-2.7c0.6-0.8,1.4-1.5,2.5-2s2.5-0.8,4-0.8c1.8,0,3.3,0.3,4.6,1
-				c1.3,0.6,2.2,1.5,2.9,2.7l-2.7,2.2c-0.5-1-1.1-1.7-2-2.1c-0.9-0.5-1.8-0.7-2.8-0.7c-0.8,0-1.4,0.1-2,0.3c-0.6,0.2-1,0.5-1.3,0.8
-				c-0.3,0.3-0.4,0.7-0.4,1.2c0,0.5,0.2,0.9,0.5,1.3s1,0.6,1.9,0.8l4.1,0.9c1.7,0.3,2.9,0.9,3.7,1.7c0.7,0.8,1.1,1.8,1.1,2.9
-				c0,1.2-0.3,2.2-0.9,3c-0.6,0.9-1.5,1.6-2.6,2C92.1,38.1,90.7,38.3,89.2,38.3z"/>
-			<path class="st6" d="M112.8,19.9v3H99.3v-3H112.8z M106.6,14.6v17.9c0,0.9,0.2,1.5,0.7,1.9c0.5,0.4,1.1,0.6,1.9,0.6
-				c0.6,0,1.2-0.1,1.7-0.3c0.5-0.2,0.9-0.5,1.3-0.8l0.9,2.8c-0.6,0.5-1.2,0.9-2,1.1c-0.8,0.3-1.7,0.4-2.7,0.4c-1,0-2-0.2-2.8-0.5
-				s-1.5-0.9-2-1.6c-0.5-0.8-0.7-1.7-0.8-3V15.7L106.6,14.6z"/>
-			<path d="M137.9,17.5h-13.3v6.9h10.4v3.3h-10.4v10.2h-3.9V14.2h17.2V17.5z"/>
-			<path d="M150.9,13.8c2.1,0,4,0.4,5.5,1.2c1.6,0.8,2.9,2,4,3.5l-2.6,2.5c-0.9-1.4-1.9-2.4-3.1-3c-1.1-0.6-2.5-0.9-4-0.9
-				c-1.2,0-2.1,0.2-2.8,0.5c-0.7,0.3-1.3,0.7-1.6,1.2c-0.3,0.5-0.5,1.1-0.5,1.7c0,0.7,0.3,1.4,0.8,1.9c0.5,0.6,1.5,1,2.9,1.3
-				l4.8,1.1c2.3,0.5,3.9,1.3,4.9,2.3c1,1,1.4,2.3,1.4,3.9c0,1.5-0.4,2.7-1.2,3.8c-0.8,1.1-1.9,1.9-3.3,2.5s-3.1,0.9-5,0.9
-				c-1.7,0-3.2-0.2-4.5-0.6c-1.3-0.4-2.5-1-3.5-1.8c-1-0.7-1.8-1.6-2.5-2.6l2.7-2.7c0.5,0.8,1.1,1.6,1.9,2.2
-				c0.8,0.7,1.7,1.2,2.7,1.5c1,0.4,2.2,0.5,3.4,0.5c1.1,0,2.1-0.1,2.9-0.4c0.8-0.3,1.4-0.7,1.8-1.2c0.4-0.5,0.6-1.1,0.6-1.9
-				c0-0.7-0.2-1.3-0.7-1.8c-0.5-0.5-1.3-0.9-2.6-1.2l-5.2-1.2c-1.4-0.3-2.6-0.8-3.6-1.3c-0.9-0.6-1.6-1.3-2.1-2.1s-0.7-1.8-0.7-2.8
-				c0-1.3,0.4-2.6,1.1-3.7c0.7-1.1,1.8-2,3.2-2.6C147.3,14.1,148.9,13.8,150.9,13.8z"/>
-		</g>
-	</g>
-</g>
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xmlns:dc="http://purl.org/dc/elements/1.1/"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   sodipodi:docname="logo_fs.svg"
+   inkscape:version="1.0 (4035a4fb49, 2020-05-01)"
+   id="svg57"
+   version="1.1"
+   viewBox="0 0 105 25"
+   height="25mm"
+   width="105mm">
+  <defs
+     id="defs51">
+    <clipPath
+       clipPathUnits="userSpaceOnUse"
+       id="clipPath434">
+      <path
+         d="M 0,0 H 1366 V 768 H 0 Z"
+         id="path432" />
+    </clipPath>
+  </defs>
+  <sodipodi:namedview
+     inkscape:window-maximized="0"
+     inkscape:window-y="0"
+     inkscape:window-x="130"
+     inkscape:window-height="1040"
+     inkscape:window-width="1274"
+     height="50mm"
+     units="mm"
+     showgrid="false"
+     inkscape:document-rotation="0"
+     inkscape:current-layer="layer1"
+     inkscape:document-units="mm"
+     inkscape:cy="344.49897"
+     inkscape:cx="468.64708"
+     inkscape:zoom="0.7"
+     inkscape:pageshadow="2"
+     inkscape:pageopacity="0.0"
+     borderopacity="1.0"
+     bordercolor="#666666"
+     pagecolor="#ffffff"
+     id="base" />
+  <metadata
+     id="metadata54">
+    <rdf:RDF>
+      <cc:Work
+         rdf:about="">
+        <dc:format>image/svg+xml</dc:format>
+        <dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+        <dc:title></dc:title>
+      </cc:Work>
+    </rdf:RDF>
+  </metadata>
+  <g
+     id="layer1"
+     inkscape:groupmode="layer"
+     inkscape:label="Layer 1">
+    <g
+       id="g424"
+       transform="matrix(0.35277777,0,0,-0.35277777,63.946468,10.194047)">
+      <path
+         d="m 0,0 v -8.093 h 12.287 v -3.94 H 0 V -24.067 H -4.534 V 3.898 H 15.677 V 0 Z"
+         style="fill:#00e396;fill-opacity:1;fill-rule:nonzero;stroke:none"
+         id="path426" />
+    </g>
+    <g
+       transform="matrix(0.35277777,0,0,-0.35277777,-315.43002,107.34005)"
+       id="g428">
+      <g
+         id="g430"
+         clip-path="url(#clipPath434)">
+        <g
+           id="g436"
+           transform="translate(1112.874,278.2981)">
+          <path
+             d="M 0,0 C 1.822,-0.932 3.354,-2.359 4.597,-4.28 L 1.165,-7.373 c -0.791,1.695 -1.779,2.924 -2.966,3.686 -1.186,0.763 -2.768,1.145 -4.745,1.145 -1.949,0 -3.461,-0.389 -4.534,-1.166 -1.074,-0.777 -1.61,-1.772 -1.61,-2.987 0,-1.13 0.523,-2.027 1.568,-2.69 1.045,-0.664 2.909,-1.236 5.593,-1.716 2.514,-0.452 4.512,-1.024 5.995,-1.716 1.483,-0.693 2.564,-1.554 3.242,-2.585 0.677,-1.031 1.016,-2.309 1.016,-3.834 0,-1.639 -0.466,-3.079 -1.398,-4.322 -0.932,-1.243 -2.239,-2.197 -3.919,-2.86 -1.681,-0.664 -3.623,-0.996 -5.826,-0.996 -5.678,0 -9.689,1.892 -12.033,5.678 l 3.178,3.178 c 0.903,-1.695 2.068,-2.939 3.495,-3.729 1.426,-0.791 3.199,-1.186 5.318,-1.186 2.005,0 3.58,0.345 4.724,1.038 1.144,0.692 1.716,1.674 1.716,2.945 0,1.017 -0.516,1.835 -1.547,2.457 -1.031,0.621 -2.832,1.172 -5.402,1.653 -2.571,0.479 -4.618,1.073 -6.143,1.779 -1.526,0.706 -2.635,1.582 -3.326,2.627 -0.693,1.045 -1.039,2.316 -1.039,3.813 0,1.582 0.438,3.023 1.314,4.322 0.875,1.299 2.14,2.33 3.792,3.093 1.653,0.763 3.58,1.144 5.783,1.144 C -4.018,1.398 -1.822,0.932 0,0"
+             style="fill:#00e396;fill-opacity:1;fill-rule:nonzero;stroke:none"
+             id="path438" />
+        </g>
+        <g
+           id="g440"
+           transform="translate(993.0239,277.5454)">
+          <path
+             d="m 0,0 c 2.054,-1.831 3.083,-4.465 3.083,-7.902 v -17.935 h -4.484 v 16.366 c 0,2.914 -0.626,5.024 -1.877,6.332 -1.253,1.308 -2.924,1.962 -5.016,1.962 -1.495,0 -2.896,-0.327 -4.204,-0.981 -1.308,-0.654 -2.381,-1.719 -3.222,-3.194 -0.841,-1.477 -1.261,-3.335 -1.261,-5.576 v -14.909 h -4.484 V 1.328 l 4.086,-1.674 0.118,-1.84 c 0.933,1.681 2.222,2.923 3.867,3.727 1.643,0.803 3.493,1.205 5.548,1.205 C -4.671,2.746 -2.055,1.83 0,0"
+             style="fill:#000033;fill-opacity:1;fill-rule:nonzero;stroke:none"
+             id="path442" />
+        </g>
+        <g
+           id="g444"
+           transform="translate(1027.9968,264.0386)">
+          <path
+             d="m 0,0 h -21.128 c 0.261,-2.84 1.205,-5.044 2.83,-6.613 1.625,-1.57 3.727,-2.355 6.305,-2.355 2.054,0 3.763,0.356 5.128,1.065 1.363,0.71 2.288,1.738 2.774,3.083 l 3.755,-1.961 c -1.121,-1.981 -2.616,-3.495 -4.484,-4.54 -1.868,-1.046 -4.259,-1.569 -7.173,-1.569 -4.223,0 -7.538,1.289 -9.948,3.867 -2.41,2.578 -3.615,6.146 -3.615,10.704 0,4.558 1.149,8.127 3.447,10.705 2.298,2.578 5.557,3.867 9.779,3.867 2.615,0 4.876,-0.58 6.782,-1.738 1.905,-1.158 3.343,-2.728 4.315,-4.707 C -0.262,7.827 0.224,5.605 0.224,3.139 0.224,2.092 0.149,1.046 0,0 m -18.298,10.144 c -1.513,-1.457 -2.438,-3.512 -2.775,-6.165 h 16.982 c -0.3,2.615 -1.159,4.661 -2.578,6.137 -1.42,1.476 -3.307,2.214 -5.661,2.214 -2.466,0 -4.455,-0.728 -5.968,-2.186"
+             style="fill:#000033;fill-opacity:1;fill-rule:nonzero;stroke:none"
+             id="path446" />
+        </g>
+        <g
+           id="g448"
+           transform="translate(1057.8818,276.4246)">
+          <path
+             d="m 0,0 c 2.41,-2.578 3.615,-6.147 3.615,-10.705 0,-4.558 -1.205,-8.126 -3.615,-10.704 -2.41,-2.578 -5.726,-3.867 -9.948,-3.867 -4.222,0 -7.537,1.289 -9.947,3.867 -2.41,2.578 -3.615,6.146 -3.615,10.704 0,4.558 1.205,8.127 3.615,10.705 2.41,2.578 5.725,3.867 9.947,3.867 C -5.726,3.867 -2.41,2.578 0,0 m -16.617,-2.858 c -1.607,-1.906 -2.41,-4.522 -2.41,-7.847 0,-3.326 0.803,-5.94 2.41,-7.846 1.607,-1.905 3.83,-2.858 6.669,-2.858 2.839,0 5.063,0.953 6.67,2.858 1.606,1.906 2.41,4.52 2.41,7.846 0,3.325 -0.804,5.941 -2.41,7.847 C -4.885,-0.953 -7.109,0 -9.948,0 c -2.839,0 -5.062,-0.953 -6.669,-2.858"
+             style="fill:#000033;fill-opacity:1;fill-rule:nonzero;stroke:none"
+             id="path450" />
+        </g>
+      </g>
+    </g>
+    <g
+       id="g452"
+       transform="matrix(0.35277777,0,0,-0.35277777,5.8329581,6.5590171)">
+      <path
+         d="m 0,0 0.001,-38.946 25.286,-9.076 V -8.753 L 52.626,1.321 27.815,10.207 Z"
+         style="fill:#00e599;fill-opacity:1;fill-rule:nonzero;stroke:none"
+         id="path454" />
+    </g>
+    <g
+       id="g456"
+       transform="matrix(0.35277777,0,0,-0.35277777,15.479008,10.041927)">
+      <path
+         d="M 0,0 V -21.306 L 25.293,-30.364 25.282,9.347 Z"
+         style="fill:#00b091;fill-opacity:1;fill-rule:nonzero;stroke:none"
+         id="path458" />
+    </g>
+  </g>
 </svg>
--- a/.github/workflows/dco.yml
+++ b/.github/workflows/dco.yml
@ -0,0 +1,21 @@
+name: DCO check
+
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  commits_check_job:
+    runs-on: ubuntu-latest
+    name: Commits Check
+    steps:
+    - name: Get PR Commits
+      id: 'get-pr-commits'
+      uses: tim-actions/get-pr-commits@master
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+    - name: DCO Check
+      uses: tim-actions/dco@master
+      with:
+        commits: ${{ steps.get-pr-commits.outputs.commits }}
--- a/.gitignore
+++ b/.gitignore
@ -1,17 +1,9 @@
-# IDE
 .idea
-.vscode
-
-# Vendoring
 vendor
-
-temp
 tmp
-
 .secrets
 sites/*
 !sites/.gitkeep
-
-# Runtime generation keys
 services/storage/*tls.crt
 services/storage/*tls.key
+services/nats/*.pem
--- a/.services
+++ b/.services
@ -3,4 +3,4 @@
 http_gate
 s3_gate
 rest_gate
-s3_lifecycler
+coredns
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@ -3,8 +3,8 @@
 First, thank you for contributing! We love and encourage pull requests from
 everyone. Please follow the guidelines:

- Check the open [issues](https://git.frostfs.info/TrueCloudLab/frostfs-dev-env/issues) and
-  [pull requests](https://git.frostfs.info/TrueCloudLab/frostfs-dev-env/pulls) for existing
+- Check the open [issues](https://github.com/nspcc-dev/neofs-dev-env/issues) and
+  [pull requests](https://github.com/nspcc-dev/neofs-dev-env/pulls) for existing
  discussions.

 - Open an issue first, to discuss a new feature or enhancement.
@ -21,23 +21,23 @@ everyone. Please follow the guidelines:

 ## Development Workflow

-Start by forking the `frostfs-dev-env` repository, make changes in a branch and then
+Start by forking the `neofs-dev-env` repository, make changes in a branch and then
 send a pull request. We encourage pull requests to discuss code changes. Here
 are the steps in details:

-### Set up your git repository
-Fork [FrostFS node upstream](https://git.frostfs.info/repo/fork/24) source
+### Setup your GitHub Repository
+Fork [NeoFS node upstream](https://github.com/nspcc-dev/neofs-dev-env/fork) source
 repository to your own personal repository. Copy the URL of your fork (you will
 need it for the `git clone` command below).

 ```sh
-$ git clone https://git.frostfs.info/<username>/frostfs-dev-env.git
+$ git clone https://github.com/nspcc-dev/neofs-dev-env
 ```

 ### Set up git remote as ``upstream``
 ```sh
-$ cd frostfs-dev-env
-$ git remote add upstream https://git.frostfs.info/TrueCloudLab/frostfs-dev-env.git
+$ cd neofs-dev-env
+$ git remote add upstream https://github.com/nspcc-dev/neofs-dev-env
 $ git fetch upstream
 $ git merge upstream/master
 ...
@ -55,7 +55,8 @@ $ git checkout -b feature/123-something_awesome
 ### Test your changes
 After your code changes, make sure

- To run `make up` to check dev-env is not broken.
+- To add test cases for the new code.
+- To run `make lint`
 - To squash your commits into a single commit or a series of logically separated
  commits run `git rebase -i`. It's okay to force update your pull request.

@ -85,8 +86,8 @@ $ git push origin feature/123-something_awesome
 ```

 ### Create a Pull Request
-Pull requests can be created via Forgejo. Refer to [this
-document](https://docs.codeberg.org/collaborating/pull-requests-and-git-flow/) for
+Pull requests can be created via GitHub. Refer to [this
+document](https://help.github.com/articles/creating-a-pull-request/) for
 detailed steps on how to create a pull request. After a Pull Request gets peer
 reviewed and approved, it will be merged.

@ -102,7 +103,7 @@ contributors".
 To sign your work, just add a line like this at the end of your commit message:

 ```
-Signed-off-by: Samii Sakisaka <samii@frostfs.info>
+Signed-off-by: Samii Sakisaka <samii@nspcc.ru>
 ```

 This can easily be done with the `--signoff` option to `git commit`.
--- a/75
+++ b/75
@ -10,8 +10,8 @@ include .env
 # help target
 include help.mk

-# update FrostFS global config targets
-include frostfs_config.mk
+# update NeoFS global config targets
+include neofs_config.mk

 # Targets to get required artifacts and external resources for each service
 include services/*/artifacts.mk
@ -19,31 +19,29 @@ include services/*/artifacts.mk
 # Targets helpful to prepare service environment
 include services/*/prepare.mk

-# List of services to run
-START_SVCS = $(shell cat .services | grep -v '#')
-START_BASIC = $(shell cat .basic_services | grep -ve '#')
-START_BOOTSTRAP = $(shell cat .bootstrap_services | grep -v '#')
-STOP_SVCS = $(shell tac .services | grep -v '#')
-STOP_BASIC = $(shell tac .basic_services | grep -v '#')
-STOP_BOOTSTRAP = $(shell tac .bootstrap_services | grep -v '#')
-
-# Enabled services dirs
-ENABLED_SVCS_DIRS = $(shell echo "${START_BOOTSTRAP} ${START_BASIC} ${START_SVCS}" | sed 's|[^ ]* *|./services/&|g')
-
 # Services that require artifacts
 GET_SVCS = $(shell grep -Rl "get.*:" ./services/* | sort -u | grep artifacts.mk | xargs -I {} dirname {} | xargs basename -a)

 # Services that require pulling images
-PULL_SVCS = $(shell find ${ENABLED_SVCS_DIRS} -type f -name 'docker-compose.yml' | sort -u | xargs -I {} dirname {} | xargs basename -a)
+PULL_SVCS = $(shell find ./services -type f -name 'docker-compose.yml' | sort -u | xargs -I {} dirname {} | xargs basename -a)
+
+# List of services to run
+START_SVCS = $(shell cat .services | grep -v \\\#)
+START_BASIC = $(shell cat .basic_services | grep -v \\\#)
+START_BOOTSTRAP = $(shell cat .bootstrap_services | grep -v \\\#)
+STOP_SVCS = $(shell tac .services | grep -v \\\#)
+STOP_BASIC = $(shell tac .basic_services | grep -v \\\#)
+STOP_BOOTSTRAP = $(shell tac .bootstrap_services | grep -v \\\#)

 # List of hosts available in devenv
 HOSTS_LINES = $(shell grep -Rl IPV4_PREFIX ./services/* | grep .hosts)

 # Paths to protocol.privnet.yml
 MORPH_CHAIN_PROTOCOL = './services/morph_chain/protocol.privnet.yml'
+CHAIN_PROTOCOL = './services/chain/protocol.privnet.yml'

 # List of grepped environment variables from *.env
-GREP_DOTENV = $(shell find . -name '*.env' -exec grep -rhv -e '^#' -e '^$$' {} + | sort -u )
+GREP_DOTENV = $(shell find . -name '*.env' -exec grep -rhv -e '^\#' -e '^$$' {} + | sort -u )

 # Pull all required Docker images
 .PHONY: pull
@ -51,7 +49,7 @@ pull:
 	$(foreach SVC, $(PULL_SVCS), $(shell cd services/$(SVC) && docker-compose pull))
 	@:

-# Get all services artifacts
+# Get all services artifacs
 .PHONY: get
 get: $(foreach SVC, $(GET_SVCS), get.$(SVC))
 	@:
@ -60,42 +58,23 @@ get: $(foreach SVC, $(GET_SVCS), get.$(SVC))
 .PHONY: up
 up: up/basic
 	@$(foreach SVC, $(START_SVCS), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
-	./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=`docker container exec morph_chain neo-go wallet dump-keys -w /wallets/s3-wallet.json | head -1 | awk '{print $1}'` || die "Couldn't set s3-gw wallet as proxy wallet"
-	@echo "Full FrostFS Developer Environment is ready"
+	@echo "Full NeoFS Developer Environment is ready"

-# Build up FrostFS
+# Build up NeoFS
 .PHONY: up/basic
 up/basic: up/bootstrap
 	@$(foreach SVC, $(START_BASIC), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph force-new-epoch
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config SystemDNS=container --force
-	@echo "Basic FrostFS Developer Environment is ready"
+	@./bin/tick.sh
+	@./bin/config.sh string SystemDNS container
+	@echo "Basic NeoFS Developer Environment is ready"

 # Start bootstrap services
 .PHONY: up/bootstrap
 up/bootstrap: get vendor/hosts
 	@$(foreach SVC, $(START_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
-	@source ./bin/helper.sh
-	@./vendor/frostfs-adm --config frostfs-adm.yml morph init --contracts vendor/contracts
-	echo "Set rule chain to policy contract" 
-	@./vendor/frostfs-adm --config frostfs-adm.yml morph \
-		ape add-rule-chain --target-type namespace --target-name "" \
-		--rule 'allow Container.* *' --chain-id "allow_container_ops"
-	@for f in ./services/storage/wallet*.json; do \
-		echo "Transfer GAS to wallet $${f}" \
-		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \
-		|| die "Failed to transfer GAS to alphabet wallets"; \
-		done
-	@echo "Create frostfsid subject for ./wallets/wallet.json"; \
-	if [ -n "$$(./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid list-subjects --namespace '')" ]; then \
-		echo "Subject already exists"; \
-	else \
-		subj_key=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/wallet.json | tail -1 | tr -d ' \r\n'` \
-		&& echo "Subject key: $${subj_key}" \
-		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid create-subject --namespace "" --subject-key $${subj_key} --subject-name walletsubject \
-		|| die "Failed to create subject for the wallet"; \
-	fi
-	echo "FrostFS sidechain environment is deployed"
+	@./vendor/neofs-adm --config neofs-adm.yml morph init --alphabet-wallets ./services/ir --contracts vendor/contracts || exit 1
+	@for f in ./services/storage/wallet*.json; do echo "Transfer GAS to wallet $${f}" && ./vendor/neofs-adm -c neofs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 --alphabet-wallets services/ir || exit 1; done
+	@echo "NeoFS sidechain environment is deployed"

 # Build up certain service
 .PHONY: up/%
@ -106,7 +85,7 @@ up/%: get vendor/hosts
 # Stop environment
 .PHONY: down
 down: down/add down/basic down/bootstrap
-	@echo "Full FrostFS Developer Environment is down"
+	@echo "Full NeoFS Developer Environment is down"

 .PHONY: down/add
 down/add:
@ -127,7 +106,6 @@ down/bootstrap:
 down/%:
 	@docker-compose -f services/$*/docker-compose.yml down

-# Generate changes for /etc/hosts
 .PHONY: vendor/hosts
 .ONESHELL:
 vendor/hosts:
@ -141,7 +119,7 @@ vendor/hosts:
 		done < $${file};
 	done > $@

-# Generate and display changes for /etc/hosts
+# Display changes for /etc/hosts
 .PHONY: hosts
 hosts: vendor/hosts
 	@cat vendor/hosts
@ -150,7 +128,7 @@ hosts: vendor/hosts
 .PHONY: clean
 .ONESHELL:
 clean:
-	@rm -rf vendor/* services/storage/s04tls.*
+	@rm -rf vendor/* services/storage/s04tls.* services/nats/*.pem
 	@> .int_test.env
 	@for svc in $(PULL_SVCS)
 	do
@ -166,7 +144,8 @@ clean:
 .PHONY: env
 env:
 	@$(foreach envvar,$(GREP_DOTENV),echo $(envvar);)
-	@echo MORPH_BLOCK_TIME=$(shell grep 'TimePerBlock' $(MORPH_CHAIN_PROTOCOL) | awk '{print $$2}')s
+	@echo MORPH_BLOCK_TIME=$(shell grep 'SecondsPerBlock' $(MORPH_CHAIN_PROTOCOL) | awk '{print $$2}')s
+	@echo MAINNET_BLOCK_TIME=$(shell grep 'SecondsPerBlock' $(CHAIN_PROTOCOL) | awk '{print $$2}')s
 	@echo MORPH_MAGIC=$(shell grep 'Magic' $(MORPH_CHAIN_PROTOCOL) | awk '{print $$2}')

 # Restart storage nodes with clean volumes
--- a/README.md
+++ b/README.md
@ -1,14 +1,14 @@
 <p align="center">
-<img src="./.github/logo.svg" width="500px" alt="FrostFS logo">
+<img src="./.github/logo.svg" width="500px" alt="NeoFS">
 </p>
 <p align="center">
-  <a href="https://frostfs.info">FrostFS</a> local Development and Testing environment
+  <a href="https://fs.neo.org">NeoFS</a> local Development and Testing environment
 </p>

 ---
 ## Overview

-Tools to set up local FrostFS network and N3 privnets. Devenv, for short.
+Tools to set up local NeoFS network and N3 privnets. Devenv, for short.

 ## Prerequisites

@ -27,7 +27,7 @@ Make sure you have installed all of the following prerequisites on your machine:
 Clone repo: 

 ```
-$ git clone https://git.frostfs.info/TrueCloudLab/frostfs-dev-env.git
+$ git clone https://github.com/nspcc-dev/neofs-dev-env.git
 ```

 Run next commands from project's root:
@ -42,11 +42,11 @@ been added already, there is no need to run it separately.

 ```
 $ make hosts
-192.168.130.10 bastion.frostfs.devenv
-192.168.130.50 main-chain.frostfs.devenv
-192.168.130.61 ir01.frostfs.devenv
+192.168.130.10 bastion.neofs.devenv
+192.168.130.50 main-chain.neofs.devenv
+192.168.130.61 ir01.neofs.devenv
 ...
-192.168.130.74 s04.frostfs.devenv
+192.168.130.74 s04.neofs.devenv
 ```

 This command shows addresses and hostnames of components. Add `make hosts`
@ -57,21 +57,37 @@ Run all services with command:
 $ make up
 ```

-Also, you should add self-signed node (`s04.frostfs.devenv`) certificate to trusted
+When all services are up, you need to make GAS deposit for test wallet to be
+able to pay for NeoFS operations. Test wallet is located in
+`wallets/wallet.json` with the corresponding key in `wallets/wallet.key`. The
+password is empty.
+
+```
+$ make prepare.ir
+password >
+fa6ba62bffb04030d303dcc95bda7413e03aa3c7e6ca9c2f999d65db9ec9b82c
+```
+
+Also you should add self-signed node (`s04.neofs.devenv`) certificate to trusted
 store (default location might be changed using `CA_CERTS_TRUSTED_STORE`
-variable). This step is required for client services (frostfs-http-gw,
-frostfs-s3-gw) to interact with the node:
+variable). This step is required for client services (neofs-http-gw,
+neofs-s3-gw) to interact with the node:

 ```
 $ sudo make prepare.storage
 ```

-Change FrostFS global configuration values with `make update.*` commands. The
+Change NeoFS global configuration values with `make update.*` commands. The
 password of inner ring wallet is `one`. See examples in `make help`.

 ```
 $ make update.epoch_duration val=30
-Waiting for transactions to persist...
+Changing EpochDuration configration value to 30
+Enter account NNudMSGzEoktFzdYGYoNb3bzHzbmM1genF password > 
+Sent invocation transaction dbb8c1145b6d10f150135630e13bb0dc282023163f5956c6945a60db0cb45cb0
+Updating NeoFS epoch to 2
+Enter account NNudMSGzEoktFzdYGYoNb3bzHzbmM1genF password > 
+Sent invocation transaction 0e6eb5e190f36332e5e5f4e866c7e100826e285fd949e11c085e15224f343ba6
 ```

 For instructions on how to set up DevEnv on macOS, please refer [the
@ -105,9 +121,9 @@ You can find more information on each service in `docs` directory.

 Maybe you will find the answer for your question in [F.A.Q.](docs/faq.md)

-## Using FrostFS Admin Tool in `dev-env`
+## Using NeoFS Admin Tool in `dev-env`

-Devenv supports FrostFS network management via [frostfs-adm](https://git.frostfs.info/TrueCloudLab/frostfs-node/src/branch/master/cmd/frostfs-adm).
+Devenv supports NeoFS network management via [neofs-adm](https://github.com/nspcc-dev/neofs-node/tree/master/cmd/neofs-adm).
 `services/ir` contains the Alphabet wallet in a proper format, specify it
 with `--alphabet-wallets` flag.

@ -137,65 +153,6 @@ Display addresses and host names for each running service, if available.

 Clean up `vendor` directory.

-### s3cred
-
-Registers user wallet and issues s3 credentials.
-
-Usage and default parameter values:
-```sh
-make s3cred [password=""] [contract_password=s3] [wallet=/user_wallet.json] [gate_public_key=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf]
-```
-
-As soon as the storage node is in the network map (see above) you can generate S3
-credentials:
-
-``` sh
-$ make s3cred
-{
-  "access_key_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT0AKRSjJ5fmcqf3Ht2VCAkfmPQUVARghRB77xHCA1BoN2p",
-  "secret_access_key": "d70c1dba83f0f90bb231f06f1ce0e0dfbcfb122f4b4345a3c18d3869c359b79f",
-  "owner_private_key": "140947599afd9ca89af4b358c3176eb046e554d942a0dc99a8e06f3e43c8f4ad",
-  "wallet_public_key": "0324e76288fcb900100d01802a14ef977cca45ad073561230446df14b344c858b6",
-  "container_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT"
-}                   
-```
-Running without any parameters will result in defaults which are based on the private key from
-`/user-wallet.json` file and `/wallet.json` contract wallet.
-
-Now let's configure an S3 client (AWS CLI will be used as example):
-
-``` sh
-$ aws configure
-AWS Access Key ID []: EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT0AKRSjJ5fmcqf3Ht2VCAkfmPQUVARghRB77xHCA1BoN2p
-AWS Secret Access Key []: d70c1dba83f0f90bb231f06f1ce0e0dfbcfb122f4b4345a3c18d3869c359b79f
-Default region name []: us-east-1
-Default output format []: json
-```
-
-If you need to create credentials for different users, put user wallets to `wallets` dir and specify them via `wallet` parameter.
-Pass wallet password in `password` parameter if it's not default. The same is for `contract_wallet` and `gate_public_key` params.
-
-```sh
-$ make s3cred wallet=custom_wallet.json password=test
-{
-  "access_key_id": "jHhL5B33o16R4jQsb8wm9A3RRdS6KrTB5N4bja9Jys904W7xXFNKqem2ACvTRWRYJsZMCUikYFSokN7pPJziWyDi",
-  "secret_access_key": "21bb64fafa32c82417fd8b97ac56cc8a085998a3852632d52fe7042453daa440",
-  "owner_private_key": "10f6f9d7a47bb0bf68363ad8a99fe69f1493f8b6e1665b3e4e83feb2d5c7ee39",
-  "wallet_public_key": "03e38759973a6bb722baabc2dd84036a39f0b2f53d32fec45a4dacde8a50fe4b70",
-  "container_id": "jHhL5B33o16R4jQsb8wm9A3RRdS6KrTB5N4bja9Jys9"
-}
-```
-
-To get credentials from custom wallet, place it in `wallets` dir before start.
-
-### cred
-
-Usage and default parameter values:
-```sh
-make cred [password=""] [contract_password=s3] [wallet=/user_wallet.json]
-```
-The same as `s3cred`, but it doesn't issues s3 credentials.
-
 ## Contributing

 Feel free to contribute to this project after reading the [contributing
--- a/bin/config.sh
+++ b/bin/config.sh
@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+# Source env settings
+. .env
+. services/ir/.ir.env
+source bin/helper.sh
+
+# NeoGo binary path.
+NEOGO="${NEOGO:-docker exec -it main_chain neo-go}"
+
+# Wallet files to change config value
+WALLET="${WALLET:-services/chain/node-wallet.json}"
+WALLET_IMG="${WALLET_IMG:-wallets/node-wallet.json}"
+# Wallet password that would be entered automatically; '-' means no password
+PASSWD="one"
+NETMAP_ADDR=$(bin/resolve.sh netmap.neofs)
+
+# NeoFS configuration record: variable type [string|int|etc],
+# key is a string and value is a constant of given type
+TYPE=${1}
+KEY=${2}
+VALUE="${3}"
+
+[ -z "$TYPE" ] && echo "Empty config value type" && exit 1
+[ -z "$KEY" ] && echo "Empty config key" && exit 1
+[ -z "$VALUE" ] && echo "Empty config value" && exit 1
+
+# Internal variables
+if [[ -z "${NEOFS_NOTARY_DISABLED}" ]]; then
+  ADDR=$(jq -r .accounts[2].address < "${WALLET}" || die "Cannot get address from ${WALLET}")
+else
+  ADDR=$(jq -r .accounts[0].address < "${WALLET}" || die "Cannot get address from ${WALLET}")
+fi
+
+# Change config value in side chain
+echo "Changing ${KEY} configration value to ${VALUE}"
+
+# shellcheck disable=SC2086
+./bin/passwd.exp ${PASSWD} ${NEOGO} contract invokefunction \
+	-w ${WALLET_IMG} \
+	-a ${ADDR} \
+	-r http://morph-chain.${LOCAL_DOMAIN}:30333 \
+	${NETMAP_ADDR} \
+	setConfig bytes:beefcafe \
+	string:${KEY} \
+	${TYPE}:${VALUE} -- ${ADDR} || exit 1
+
+# Update epoch to apply new configuration value
+./bin/tick.sh
--- a/bin/deposit.sh
+++ b/bin/deposit.sh
@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+
+# Source env settings
+. .env
+. services/ir/.ir.env
+source bin/helper.sh
+
+# NeoGo binary path.
+NEOGO="${NEOGO:-docker exec -it main_chain neo-go}"
+# Wallet file to use for deposit GAS from
+WALLET="${WALLET:-wallets/wallet.json}"
+# Wallet password that would be entered automatically; '-' means no password
+PASSWD="-"
+# How much GAS to deposit. First cli argument or 50 by default
+DEPOSIT="${1:-50}"
+
+# Internal variables
+ADDR=$(jq -r .accounts[0].address < "${WALLET}" \
+	|| die "Cannot get address from wallet: ${WALLET}")
+CONTRACT_ADDR=$(${NEOGO} util convert "${NEOFS_IR_CONTRACTS_NEOFS}" \
+	| grep 'LE ScriptHash to Address' \
+	| awk '{print $5}' \
+	| grep -oP "[A-z0-9]+" \
+	|| die "Cannot parse contract address: ${NEOFS_IR_CONTRACTS_NEOFS}")
+
+# Make deposit
+# shellcheck disable=SC2086
+./bin/passwd.exp ${PASSWD} ${NEOGO} wallet nep17 transfer \
+	-w ${WALLET} \
+	-r http://main-chain.${LOCAL_DOMAIN}:30333 \
+	--from ${ADDR} \
+	--to ${CONTRACT_ADDR} \
+	--token GAS \
+	--amount ${DEPOSIT}
--- a/bin/passwd.exp
+++ b/bin/passwd.exp
@ -0,0 +1,23 @@
+#!/usr/bin/expect
+
+set passwd [lindex $argv 0]
+set args [lrange $argv 1 end]
+
+spawn -noecho {*}$args
+expect -re {^.*assword.*$}
+
+if { $passwd == "-"} {
+	send -- "\r"
+} else {
+	send -- "$passwd\r"
+}
+
+expect {
+    "Relay transaction" {
+        send "y\r"
+        exp_continue
+    }
+    EOF
+}
+lassign [wait] pid spawnid os_error_flag value
+exit $value
--- a/bin/resolve.sh
+++ b/bin/resolve.sh
@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+# Source env settings
+. .env
+source bin/helper.sh
+
+# NeoGo binary path.
+NEOGO="${NEOGO:-docker exec -t morph_chain neo-go}"
+# NNS contract script hash
+output=$(curl -s --data '{ "id": 1, "jsonrpc": "2.0", "method": "getcontractstate", "params": [1] }' \
+	"http://morph-chain.${LOCAL_DOMAIN}:30333/") \
+	|| die "Cannot fetch NNS contract state"
+
+NNS_ADDR=$(jq -r '.result.hash' <<< "$output") \
+	|| die "Cannot parse NNS contract hash: $NNS_ADDR"
+
+${NEOGO} contract testinvokefunction \
+	-r "http://morph-chain.${LOCAL_DOMAIN}:30333" \
+	"${NNS_ADDR}" resolve string:"${1}" int:16 \
+	| jq -r '.stack[0].value | if type=="array" then .[0].value else . end' \
+	| base64 -d \
+	|| die "Cannot invoke 'NNS.resolve' $output"
--- a/bin/tick.sh
+++ b/bin/tick.sh
@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+
+# Source env settings
+. .env
+. services/ir/.ir.env
+source bin/helper.sh
+
+# NeoGo binary path.
+NEOGO="${NEOGO:-docker exec -it main_chain neo-go}"
+NEOGO_NONINTERACTIVE="${NEOGO_NONINTERACTIVE:-docker exec -t main_chain neo-go}"
+
+# Wallet files to change config value
+WALLET="${WALLET:-services/chain/node-wallet.json}"
+WALLET_IMG="${WALLET_IMG:-wallets/node-wallet.json}"
+
+# Wallet password that would be entered automatically; '-' means no password
+PASSWD="one"
+
+# Internal variables
+if [[ -z "${NEOFS_NOTARY_DISABLED}" ]]; then
+  ADDR=$(jq -r .accounts[2].address < "${WALLET}" || die "Cannot get address from ${WALLET}")
+else
+  ADDR=$(jq -r .accounts[0].address < "${WALLET}" || die "Cannot get address from ${WALLET}")
+fi
+
+# Grep Morph block time
+SIDECHAIN_PROTO="${SIDECHAIN_PROTO:-services/morph_chain/protocol.privnet.yml}"
+BLOCK_DURATION=$(grep SecondsPerBlock < "$SIDECHAIN_PROTO" | awk '{print $2}') \
+	|| die "Cannot fetch block duration"
+NETMAP_ADDR=$(bin/resolve.sh netmap.neofs) || die "Cannot resolve netmap.neofs"
+
+# Fetch current epoch value
+EPOCH=$(${NEOGO_NONINTERACTIVE} contract testinvokefunction \
+	-r "http://morph-chain.${LOCAL_DOMAIN}:30333" "${NETMAP_ADDR}" epoch \
+	| grep 'value' | awk -F'"' '{ print $4 }') \
+	|| die "Cannot fetch epoch from netmap contract"
+
+echo "Updating NeoFS epoch to $((EPOCH+1))"
+
+# shellcheck disable=SC2086
+./bin/passwd.exp ${PASSWD} ${NEOGO} contract invokefunction \
+	-w ${WALLET_IMG} \
+	-a ${ADDR} \
+	-r http://morph-chain.${LOCAL_DOMAIN}:30333 \
+	${NETMAP_ADDR} \
+	newEpoch int:$((EPOCH+1)) -- ${ADDR}:Global
+
+# Wait one Morph block to ensure the transaction broadcasted
+# shellcheck disable=SC2086
+sleep $BLOCK_DURATION
--- a/configs/s01-cli.yml
+++ b/configs/s01-cli.yml
@ -1,4 +0,0 @@
-wallet: services/storage/wallet01.json
-password: ""
-rpc-endpoint: s01.frostfs.devenv:8080
-endpoint: s01.frostfs.devenv:8081
--- a/configs/s02-cli.yml
+++ b/configs/s02-cli.yml
@ -1,4 +0,0 @@
-wallet: services/storage/wallet02.json
-password: ""
-rpc-endpoint: s02.frostfs.devenv:8080
-endpoint: s02.frostfs.devenv:8081
--- a/configs/s03-cli.yml
+++ b/configs/s03-cli.yml
@ -1,4 +0,0 @@
-wallet: services/storage/wallet03.json
-password: ""
-rpc-endpoint: s03.frostfs.devenv:8080
-endpoint: s03.frostfs.devenv:8081
--- a/configs/s04-cli.yml
+++ b/configs/s04-cli.yml
@ -1,4 +0,0 @@
-wallet: services/storage/wallet04.json
-password: ""
-rpc-endpoint: s04.frostfs.devenv:8080
-endpoint: s04.frostfs.devenv:8081
--- a/docs/basenet.md
+++ b/docs/basenet.md
@ -7,7 +7,7 @@ host machine, so all programs running on host can connect to services exposed to

 ## .env settings

-### LOCAL_DOMAIN=frostfs.devenv
+### LOCAL_DOMAIN=neofs.devenv

 Domain to use for all containers exposed to `basenet_internet`.

@ -28,7 +28,7 @@ devenv services.
 Run shell in bastion:

 ```
-frostfs-dev-env$ docker exec -ti bastion /bin/bash
+neofs-dev-env$ docker exec -ti bastion /bin/bash
 root@bastion:/# ip a sh
 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
--- a/docs/chain.md
+++ b/docs/chain.md
@ -0,0 +1,158 @@
+# N3 main chain privnet service
+
+A single-node N3 privnet deployment, running on
+[neo-go](https://github.com/nspcc-dev/neo-go). Represents N3 MainNet.
+
+Contracts deployed:
+- NeoFS [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/neofs)
+- Processing [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/processing)
+
+RPC available at `http://main-chain.neofs.devenv:30333`.
+
+## .env settings
+
+### CHAIN_URL
+
+URL to get main chain dump. Used on artifact get stage.
+
+### CHAIN_PATH
+
+Path to get main chain dump. If set, overrides `CHAIN_URL`.
+
+### NEOGO_VERSION
+
+Version of neo-go docker container for main chain deployment.
+
+## Main chain wallets
+
+There is a wallet with GAS that used for contract deployment: 
+`wallets/wallet.json`. This wallet has one account with **empty password**.
+
+```
+$ neo-go wallet nep17 balance \
+    -w wallets/wallet.json \
+    -r http://main-chain.neofs.devenv:30333 
+   
+Account NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM
+GAS: GasToken (d2a4cff31913016155e38e474a2c06d08be276cf)
+        Amount : 9978.0074623
+        Updated: 34
+```
+
+If you want to operate in main chain with your personal wallet (e.g. to make 
+a deposit in NeoFS contract), you can transfer GAS from there.
+
+1. Create new wallet.
+
+```
+$ neo-go wallet init -a -w wallets/neofs1.json
+
+Enter the name of the account > neofs1
+Enter passphrase >
+Confirm passphrase >
+
+{
+    "version": "3.0",
+    "accounts": [
+        {
+            "address": "NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6",
+...
+wallet successfully created, file location is wallets/neofs1.json
+```
+
+2. Transfer GAS from `wallets/wallet.json`. The password is empty.
+
+```
+$ neo-go wallet nep17 transfer \
+    -w wallets/wallet.json \
+    -r http://main-chain.neofs.devenv:30333 \
+    --from NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM \
+    --to NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6 \
+    --amount 50 \
+    --token GAS
+```
+
+3. Check it's there.
+
+```
+$ neo-go wallet nep17 balance \
+    -w wallets/neofs1.json \
+    -r http://main-chain.neofs.devenv:30333
+
+Account NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6 
+GAS: GasToken (d2a4cff31913016155e38e474a2c06d08be276cf)
+        Amount : 50
+        Updated: 14689
+```
+
+## Claim GAS from consensus node
+
+If there is no enough GAS on `wallets/wallet.json` account, you can claim some
+GAS to consensus node's wallet and then transfer it.
+
+Consensus node is running with `services/chain/node-wallet.json` wallet. It has
+multiple accounts with the password `one`.
+
+
+Claim GAS to consensus node's wallet. Use account that contains NEO tokens. 
+```
+$ neo-go wallet claim \
+    -w services/chain/node-wallet.json \
+    -r http://main-chain.neofs.devenv:30333 \
+    -a NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP \
+Password >
+70e09bbd55846dcc7cee23905b737c63e5a80d32e387bce108bc6db8e641fb90
+```
+
+Then you can transfer GAS the same way as it was done in previous section.
+
+```
+$ neo-go wallet nep17 transfer \
+    -w services/chain/node-wallet.json \
+    -r http://main-chain.neofs.devenv:30333 \
+    --from NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP \
+    --to NXnzw3J9VvKXjM1BPAJK4QUpTtEQu4TpU6 \
+    --amount 50 \
+    --token GAS
+```
+
+## NeoFS GAS deposit
+
+NeoFS identifies users by their Neo wallet key pair. To start using NeoFS in
+devenv you need to transfer some GAS to NeoFS contract in main chain.
+
+Invoke `bin/deposit.sh` script by running `make prepare.ir` command to transfer
+50 GAS from account in `wallets/wallet.json` file. Script enters passwords
+automatically with `expect` utility.
+
+```
+$ make prepare.ir 
+Password > 
+Can't find matching token in the wallet. Querying RPC-node for balances.
+6713c776f4102300691d9c3c493bcd3402434f5e32e8147e0a5bc72209a1e410
+```
+
+Script converts addresses and executes this command:
+```
+$ neo-go wallet nep17 transfer \
+    -w wallets/wallet.json \
+    -r http://main-chain.neofs.devenv:30333 \
+    --from NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM \
+    --to NerhjaqJsJt4LxMqUbkkVMpsF2d9TtcpFv \
+    --token GAS \
+    --amount 50
+```
+
+You can specify any wallet address scripthash in the transfer's data argument,
+and NeoFS deposit will be transferred to that address.
+
+```
+$ neo-go wallet nep17 transfer \
+    -w wallets/wallet.json \
+    -r http://main-chain.neofs.devenv:30333 \
+    --from NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM \
+    --to NerhjaqJsJt4LxMqUbkkVMpsF2d9TtcpFv \
+    --token GAS \
+    --amount 50 \
+    hash160:bd711de066e9c2f7b502c7f3f0e0a6f1c8341edd
+```
--- a/docs/faq.md
+++ b/docs/faq.md
@ -1,9 +1,9 @@
 # F.A.Q, tips and tricks


-### How to export private key from Neo wallet for FrostFS use?
+### How to export private key from Neo wallet for NeoFS use?

-Private key for usage with FrostFS tools can be extracted from Neo wallet in three
+Private key for usage with NeoFS tools can be extracted from Neo wallet in three
 simple steps.

 1. Get the key in WIF format
@ -17,7 +17,7 @@ KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
 2. Convert form WIF to HEX

 ```
-$ frostfs-cli util keyer KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
+$ neofs-cli util keyer KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
 PrivateKey      1dd37fba80fec4e6a6f13fd708d8dcb3b29def768017052f6c930fa1c5d90bbb
 PublicKey       031a6c6fbbdf02ca351745fa86b9ba5a9452d785ac4f7fc2b7548ca2a46c4fcf4a
 WIF             KxDgvEKzgSBPPfuVfw67oPQBSjidEiqTHURKSDL1R7yGaGYAeYnr
@ -35,16 +35,16 @@ $ xxd wallets/wallet.key
 00000010: b29d ef76 8017 052f 6c93 0fa1 c5d9 0bbb  ...v.../l.......
 ```

-Later you will be able to provide wallet file in frostfs-node config.
+Later you will be able to provide wallet file in neofs-node config.

-### How to create Neo wallet JSON file using a FrostFS key file?
+### How to create Neo wallet JSON file using a NeoFS key file?

-You will need `neo-go` and `frostfs-cli`.
+You will need `neo-go` and `neofs-cli`.

 1. Get the WIF format of the private key

 ```
-$ frostfs-cli util keyer -key ./services/ir/01.key | grep WIF | awk '{print $NF}' > temp_WIF
+$ neofs-cli util keyer -key ./services/ir/01.key | grep WIF | awk '{print $NF}' > temp_WIF
 ```

 2. Init a new empty Neo wallet
--- a/docs/http_gate.md
+++ b/docs/http_gate.md
@ -1,8 +1,8 @@
 # HTTP Protocol gateway

-Protocol Gateway to access data in FrostFS using HTTP protocol.
+Protocol Gateway to access data in NeoFS using HTTP protocol.

-Source code and more information can be found in [project's repository](https://git.frostfs.info/TrueCloudLab/frostfs-http-gw)
+Source code and more information can be found in [project's GitHub repository](https://github.com/nspcc-dev/neofs-http-gate)

 ## .env settings

@ -10,10 +10,10 @@ Source code and more information can be found in [project's repository](https://

 Image version label to use for containers.

-If you want to use locally built image, just set its label here. Instead of
+If you want to use locally built image, just set it's label here. Instead of
 pulling from DockerHub, the local image will be used.

-### HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
+### HTTP_GW_IMAGE=nspccdev/neofs-http-gw

 Image label prefix to use for containers.

@ -21,9 +21,9 @@ Image label prefix to use for containers.

 - Create a new container
 ```
-$ frostfs-cli --rpc-endpoint s01.frostfs.devenv:8080 \
-            --wallet wallets/wallet.key \
-            container create --basic-acl private --await \
+$ neofs-cli --rpc-endpoint s01.neofs.devenv:8080 \
+            --key wallets/wallet.key \
+            container create --basic-acl readonly --await \
            --policy "REP 1 SELECT 1 FROM *"
 container ID: 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
 awaiting...
@ -32,17 +32,17 @@ container has been persisted on sidechain
 ```
 - Put an object into the newly created container
 ```
-$ frostfs-cli --rpc-endpoint s01.frostfs.devenv:8080 \
-            --wallet wallets/wallet.key \
+$ neofs-cli --rpc-endpoint s01.neofs.devenv:8080 \
+            --key wallets/wallet.key \
            object put --file /tmp/backup.jpeg \
            --cid 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
 [/tmp/backup.jpeg] Object successfully stored
  ID: 6EPpYqSFMGWrNLvYE9mNnut1CPKuPBKyi1ixHakzqsSB
  CID: 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
 ```
- Call `curl -sSI -XGET http://http.frostfs.devenv/get/<cid>/<oid>`
+- Call `curl -sSI -XGET http://http.neofs.devenv/get/<cid>/<oid>`
 ```
-$ curl -sSI -XGET http://http.frostfs.devenv/get/4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP/6EPpYqSFMGWrNLvYE9mNnut1CPKuPBKyi1ixHakzqsSB
+$ curl -sSI -XGET http://http.neofs.devenv/get/4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP/6EPpYqSFMGWrNLvYE9mNnut1CPKuPBKyi1ixHakzqsSB
 HTTP/1.1 200 OK
 Date: Thu, 03 Dec 2020 10:34:26 GMT
 Content-Type: image/jpeg
--- a/docs/ir.md
+++ b/docs/ir.md
@ -1,6 +1,6 @@
-# FrostFS Inner Ring
+# NeoFS Inner Ring

-FrostFS Inner Ring (Alphabet) node. According to governance scheme, Inner Ring
+NeoFS Inner Ring (Alphabet) node. According to governance scheme, Inner Ring
 should contain Alphabet nodes that share key with one of side chain consensus
 nodes. In basic setup there is a single consensus node and single Inner Ring 
 (Alphabet) node.
@ -14,6 +14,6 @@ Image version label to use for Inner Ring docker containers.
 If you want to use locally built image, just set it's label here. Instead of
 pulling from DockerHub, the local image will be used.

-### IR_IMAGE=truecloudlab/frostfs-ir
+### IR_IMAGE=nspccdev/neofs-ir

 Image label prefix to use for Inner Ring docker containers.
--- a/docs/morph.md
+++ b/docs/morph.md
@ -1,37 +1,72 @@
-# N3 FrostFS side chain privnet service
+# N3 NeoFS side chain privnet service
 A single-node N3 privnet deployment, running on
-[neo-go](https://github.com/nspcc-dev/neo-go). Represents N3 FrostFS SideChain.
+[neo-go](https://github.com/nspcc-dev/neo-go). Represents N3 NeoFS SideChain.

 Contracts deployed:
- Alphabet (AZ) [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/alphabet)
- Audit [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/audit)
- Balance [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/balance)
- Container [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/container)
- Netmap [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/netmap)
- NeoFSID [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/neofsid)
- Proxy [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/proxy)
- Reputation [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/reputation)
+- Alphabet (AZ) [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/alphabet)
+- Audit [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/audit)
+- Balance [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/balance)
+- Container [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/container)
+- Netmap [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/netmap)
+- NeoFSID [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/neofsid)
+- Proxy [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/proxy)
+- Reputation [contract](https://github.com/nspcc-dev/neofs-contract/tree/master/reputation)
 
-RPC available at `http://morph-chain.frostfs.devenv:30333`.
+RPC available at `http://morph-chain.neofs.devenv:30333`.

 ## .env settings

+### MORPH_CHAIN_URL
+
+URL to get side chain dump. Used on artifact get stage.
+
+### MORPH_CHAIN_PATH
+
+Path to get side chain dump. If set, overrides `CHAIN_URL`.
+
 ### NEOGO_VERSION

 Version of neo-go docker container for side chain deployment.

-## FrostFS global config
+## Side chain wallets

-FrostFS uses global configuration to store epoch duration, maximum object size, 
+There is a wallet with GAS that used for contract deployment:
+`wallets/wallet.json`. This wallet has one account with **empty password**.
+
+```
+$ neo-go wallet nep17 balance \
+    -w wallets/wallet.json \
+    -r http://morph-chain.neofs.devenv:30333
+
+Account NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM
+GAS: GasToken (d2a4cff31913016155e38e474a2c06d08be276cf)
+        Amount : 189826.0515316
+        Updated: 3909
+NEOFS: NeoFS Balance (69550190e740b93f92dbd5dea52246f550391057)
+        Amount : 50
+        Updated: 3909
+```
+
+This way you can also monitor NeoFS internal balance of your account.
+
+## NeoFS global config
+
+NeoFS uses global configuration to store epoch duration, maximum object size, 
 container fee and other network parameters. Global configuration is stored in
 netmap contract and managed by Inner Ring (Alphabet) nodes.

 To change these parameters use `make update.*` commands. Command down below
 changes epoch duration from 300 blocks (about 300 seconds with 1bps) to 30.
+Script enters passwords automatically with `expect` utility.

 ```
 $ make update.epoch_duration val=30
-Waiting for transactions to persist...
+Changing EpochDuration configration value to 30
+Enter account NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP password > 
+Sent invocation transaction bdc0fa88cd6719ef6df2b9c82de423ddec6141ca24255c2d0072688083b1de9d
+Updating NeoFS epoch to 20
+Enter account NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP password > 
+Sent invocation transaction 12296e1ce24dd6c04edb9c56d0a1d0e26d3226adefb0333c74a28788f44a8d0f
 ```

 Read more about available configuration in Makefile help.
@ -41,14 +76,10 @@ $ make help
  ...
  Targets:
  ...
-    update.audit_fee                     Update audit fee per result in fixed 12 (make update.audit_fee val=100)
-    update.basic_income_rate             Update basic income rate in fixed 12 (make update.basic_income_rate val=1000)
-    update.container_alias_fee           Update container alias fee per alphabet node in fixed 12 (make update.container_alias_fee val=100)
-    update.container_fee                 Update container fee per alphabet node in fixed 12 (make update.container_fee val=500)
-    update.eigen_trust_alpha             Update alpha parameter of EigenTrust algorithm in 0 <= f <= 1.0 (make update.eigen_trust_alpha val=0.2)
-    update.eigen_trust_iterations        Update amount of EigenTrust iterations (make update.eigen_trust_iterations val=2)
-    update.epoch_duration                Update epoch duration in side chain blocks (make update.epoch_duration val=30)
-    update.homomorphic_hashing_disable   Update homomorphic hashing disabled flag (make update.homomorphic_hashing_disable val=true)
-    update.max_object_size               Update max object size in bytes (make update.max_object_size val=1000)
-    update.system_dns                    Update system dns to resolve container names (make update.system_dns val=container)
+    update.audit_fee                Update audit fee per result in fixed 12 (make update.audit_fee val=100)
+    update.basic_income_rate        Update basic income rate in fixed 12 (make update.basic_income_rate val=1000)
+    update.container_fee            Update container fee per alphabet node in fixed 12 (make update.container_fee val=500)
+    update.eigen_trust_iterations   Update amount of EigenTrust iterations (make update.eigen_trust_iterations val=2)
+    update.epoch_duration           Update epoch duration in side chain blocks (make update.epoch_duration val=30)
+    update.max_object_size          Update max object size in bytes (make update.max_object_size val=1000)
 ```
--- a/docs/notary.md
+++ b/docs/notary.md
@ -7,12 +7,66 @@ create containers, approve balance changes, update network map, tick epochs,
 etc. With notary service, it takes up to seven times fewer transactions 
 to do these operations. Notary service calculates the exact amount of GAS 
 to execute transaction, therefore operations are cheaper (withdraw fee **with**
-notary is less than 0.5 GAS; withdraw fee **without** notary is up to 7.0 GAS).
+notary is less than 0.5 GAS; withdraw fee **without** notary is up to 7.0 GAS). 

-Currently, frostfs-dev-env contains single chain (see morph service) and it
-enables notary service from the genesis block.
+By default, main chain service is running without notary service, and side chain
+running with notary service. However, you can change that in configuration.

-To enable notary service, use neo-go configuration below.
+# Disable notary service in side chain
+
+To disable notary service in side chain do these steps.
+
+1. Update `.env` and choose notary disabled chain dump for side chain.
+
+```
+MORPH_CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.9.0/devenv_sidechain_notary_disabled.gz"
+```
+
+Make sure to update chain dump files with `make get` target.
+
+2. Update `service/morph_chain/protocol.privnet.yml` and disable notary settings
+and state root in header.
+   
+```yaml
+ProtocolConfiguration:
+  StateRootInHeader: false
+  P2PSigExtensions: false
+ApplicationConfiguration:
+  P2PNotary:
+    Enabled: false
+```
+
+Chain dump without notary service does not have predefined network map.
+Therefore, you need to wait about 5 minutes until new epoch tick with updated
+network map.
+
+
+3. Enable helper commands
+
+To enable helper commands such as `make tick.epoch` or `make update.epoch_duration`
+make sure to export non-empty `NEOFS_NOTARY_DISABLED` environment variable. 
+```
+$ export NEOFS_NOTARY_DISABLED=1
+```
+
+Use `unset` command to return it back.
+```
+$ unset NEOFS_NOTARY_DISABLED
+```
+
+# Enable notary service in main chain
+
+To enable notary service in main chain do these steps.
+
+1. Update `.env` and choose notary enabled chain dump for main chain.
+
+```
+CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.9.0/devenv_mainchain.gz"
+```
+
+Make sure to update chain dump files with `make get` target.
+
+2. Update `service/chain/protocol.privnet.yml` and enable notary settings.

 ```yaml
 ProtocolConfiguration:
@ -21,3 +75,7 @@ ApplicationConfiguration:
  P2PNotary:
    Enabled: true
 ```
+
+Main chain generates a block once per 15 seconds, so Inner Ring takes about 
+15-30 seconds to make a notary deposit in main chain after startup. Then 
+neofs-dev-env is ready to work.
--- a/docs/rest_gate.md
+++ b/docs/rest_gate.md
@ -1,8 +1,8 @@
 # REST Gateway

-REST Gateway to access data in FrostFS using REST.
+REST Gateway to access data in NeoFS using REST.

-Source code and more information can be found in [project's repository](https://git.frostfs.info/TrueCloudLab/frostfs-rest-gw)
+Source code and more information can be found in [project's GitHub repository](https://github.com/nspcc-dev/neofs-rest-gw)

 ## .env settings

@ -13,7 +13,7 @@ Image version label to use for containers.
 If you want to use locally built image, just set its label here. 
 Instead of pulling from DockerHub, the local image will be used.

-### REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
+### REST_GW_IMAGE=nspccdev/neofs-rest-gw

 Image label prefix to use for containers.

@ -22,7 +22,7 @@ Image label prefix to use for containers.
 - List container for specific owner:

 ```shell
-$ curl http://rest.frostfs.devenv:8090/v1/containers?ownerId=NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM | jq
+$ curl http://rest.neofs.devenv:8090/v1/containers?ownerId=NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM | jq
 {
  "containers": [
    {
@ -49,7 +49,7 @@ $ curl http://rest.frostfs.devenv:8090/v1/containers?ownerId=NbUgTSFvPmsRxmGeWpu
 - Get container info:

 ```shell
-$ curl http://rest.frostfs.devenv:8090/v1/containers/BKcAvz8awKKy9NGsGKi1Hoxxu9AjTGvjKMNMQamvdLmX | jq
+$ curl http://rest.neofs.devenv:8090/v1/containers/BKcAvz8awKKy9NGsGKi1Hoxxu9AjTGvjKMNMQamvdLmX | jq
 {
  "attributes": [
    {
@ -67,4 +67,4 @@ $ curl http://rest.frostfs.devenv:8090/v1/containers/BKcAvz8awKKy9NGsGKi1Hoxxu9A
 }
 ```

-See all available routes http://rest.frostfs.devenv:8090/v1/docs
+See all available routes http://rest.neofs.devenv:8090/v1/docs
--- a/docs/s3_gate.md
+++ b/docs/s3_gate.md
@ -1,8 +1,8 @@
 # S3 Protocol gateway

-Protocol Gateway to access data in FrostFS using AWS S3 protocol
+Protocol Gateway to access data in NeoFS using AWS S3 protocol

-Source code and more information can be found in [project's repository](https://git.frostfs.info/TrueCloudLab/frostfs-s3-gw)
+Source code and more information can be found in [project's GitHub repository](https://github.com/nspcc-dev/neofs-s3-gw)

 ## .env settings

@ -10,9 +10,9 @@ Source code and more information can be found in [project's repository](https://

 Image version label to use for containers.

-If you want to use locally built image, just set its label here. Instead of
+If you want to use locally built image, just set it's label here. Instead of
 pulling from DockerHub, the local image will be used.

-### S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
+### S3_GW_IMAGE=nspccdev/neofs-s3-gw

 Image label prefix to use for containers.
--- a/docs/storage.md
+++ b/docs/storage.md
@ -6,9 +6,9 @@

 Image version label to use for Storage docker containers.

-If you want to use locally built image, just set its label here. Instead of
+If you want to use locally built image, just set it's label here. Instead of
 pulling from DockerHub, the local image will be used.

-### NODE_IMAGE=truecloudlab/frostfs-ir
+### NODE_IMAGE=nspccdev/neofs-ir

 Image label prefix to use for Storage docker containers.
--- a/help.mk
+++ b/help.mk
@ -1,7 +1,5 @@
 .PHONY: help

-HELP_MAKEFILE_LIST=$(filter-out %/artifacts.mk, $(MAKEFILE_LIST))
-
 # Show this help prompt
 help:
 	@echo '  Usage:'
@ -10,4 +8,4 @@ help:
 	@echo ''
 	@echo '  Targets:'
 	@echo ''
-	@awk '/^#/{ comment = substr($$0,3) } comment && /^[a-zA-Z][a-zA-Z0-9._/-]+ ?:/{ print "   ", $$1, comment }' $(HELP_MAKEFILE_LIST) | column -t -s ':' | grep -v 'IGNORE' | sort -u
+	@awk '/^#/{ comment = substr($$0,3) } comment && /^[a-zA-Z][a-zA-Z0-9._-]+ ?:/{ print "   ", $$1, comment }' $(MAKEFILE_LIST) | column -t -s ':' | grep -v 'IGNORE' | sort -u
--- a/frostfs-adm.yml
+++ b/frostfs-adm.yml
@ -1,16 +1,14 @@
-rpc-endpoint: http://morph-chain.frostfs.devenv:30333
-alphabet-wallets: ./services/ir
+rpc-endpoint: http://morph-chain.neofs.devenv:30333
 network:
  max_object_size: 67108864
  epoch_duration: 240
  basic_income_rate: 100000000
  homomorphic_hash_disabled: false
-  maintenance_mode_allowed: true
  fee:
    audit: 10000
    candidate: 10000000000
-    container: 0
-    container_alias: 0
+    container: 1000
+    container_alias: 500
    withdraw: 100000000
 credentials:
  az: "one"
--- a/frostfs_config.mk
+++ b/frostfs_config.mk
@ -1,40 +1,44 @@
 # Update epoch duration in side chain blocks (make update.epoch_duration val=30)
 update.epoch_duration:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config EpochDuration=$(val)
+	@./bin/config.sh int EpochDuration $(val)

 # Update max object size in bytes (make update.max_object_size val=1000)
 update.max_object_size:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config MaxObjectSize=$(val)
+	@./bin/config.sh int MaxObjectSize $(val)

 # Update audit fee per result in fixed 12 (make update.audit_fee val=100)
 update.audit_fee:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config AuditFee=$(val)
+	@./bin/config.sh int AuditFee $(val)

 # Update container fee per alphabet node in fixed 12 (make update.container_fee val=500)
 update.container_fee:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config ContainerFee=$(val)
+	@./bin/config.sh int ContainerFee $(val)

 # Update container alias fee per alphabet node in fixed 12 (make update.container_alias_fee val=100)
 update.container_alias_fee:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config ContainerAliasFee=$(val)
+	@./bin/config.sh int ContainerAliasFee $(val)

 # Update amount of EigenTrust iterations (make update.eigen_trust_iterations val=2)
 update.eigen_trust_iterations:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config EigenTrustIterations=$(val)
+	@./bin/config.sh int EigenTrustIterations $(val)
+

 # Update system dns to resolve container names (make update.system_dns val=container)
 update.system_dns:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config SystemDNS=$(val) --force
+	@./bin/config.sh string SystemDNS $(val)

 # Update alpha parameter of EigenTrust algorithm in 0 <= f <= 1.0 (make update.eigen_trust_alpha val=0.2)
 update.eigen_trust_alpha:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config EigenTrustAlpha=$(val)
+	@./bin/config.sh string EigenTrustAlpha $(val)

 # Update basic income rate in fixed 12 (make update.basic_income_rate val=1000)
 update.basic_income_rate:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config BasicIncomeRate=$(val)
+	@./bin/config.sh int BasicIncomeRate $(val)

 # Update homomorphic hashing disabled flag (make update.homomorphic_hashing_disable val=true)
 update.homomorphic_hashing_disable:
-	@./vendor/frostfs-adm -c ./frostfs-adm.yml morph set-config HomomorphicHashingDisabled=$(val)
+	@./bin/config.sh bool HomomorphicHashingDisabled $(val)

+# Tick new epoch in side chain
+tick.epoch:
+	@./bin/tick.sh
--- a/services/basenet/docker-compose.yml
+++ b/services/basenet/docker-compose.yml
@ -1,5 +1,6 @@
 ---

+version: "2.4"
 services:

  basenet:
--- a/services/grafana/.env
+++ b/services/grafana/.env
--- a/services/chain/.hosts
+++ b/services/chain/.hosts
@ -0,0 +1 @@
+IPV4_PREFIX.50 main-chain.LOCAL_DOMAIN
--- a/services/grafana/.int_test.env
+++ b/services/grafana/.int_test.env
--- a/services/chain/artifacts.mk
+++ b/services/chain/artifacts.mk
@ -0,0 +1,17 @@
+# Download privnet chain dump with pre-deployed NeoFS contracts
+get.chain: CHAIN_DUMP_NAME=devenv.dump.
+get.chain: CHAIN_PATH?=
+get.chain:
+	@mkdir -p ./vendor
+
+ifeq (${CHAIN_PATH},)
+	@echo "⇒ Download blockchain dump from ${CHAIN_URL}"
+	@curl \
+		-sSL "${CHAIN_URL}" \
+		-o ./vendor/chain.gz
+else
+	@echo "⇒ Copy local archive ${CHAIN_PATH}"
+	@cp ${CHAIN_PATH} ./vendor/chain.gz
+endif
+
+
--- a/services/chain/docker-compose.yml
+++ b/services/chain/docker-compose.yml
@ -0,0 +1,30 @@
+---
+
+version: "2.4"
+services:
+  neofs_main_chain:
+    image: ${NEOGO_IMAGE}:${NEOGO_VERSION}
+    container_name: main_chain
+    command: ["node", "--config-path", "/config", "--privnet", "--debug"]
+    domainname: ${LOCAL_DOMAIN}
+    hostname: main-chain
+    networks:
+      chain_int:
+      internet:
+        ipv4_address: ${IPV4_PREFIX}.50
+    stop_signal: SIGKILL
+    env_file: [ ".int_test.env" ]
+    environment:
+    - ACC=/chain.gz
+    volumes:
+    - ./../../vendor/chain.gz:/chain.gz
+    - ./protocol.privnet.yml:/config/protocol.privnet.yml
+    - ./node-wallet.json:/wallets/node-wallet.json
+    - ./../../vendor/hosts:/etc/hosts
+    - ./../../wallets/wallet.json:/wallets/wallet.json
+
+networks:
+  chain_int:
+  internet:
+    external: true
+    name: basenet_internet
--- a/services/chain/node-wallet.json
+++ b/services/chain/node-wallet.json
@ -0,0 +1,76 @@
+{
+  "version": "3.0",
+  "name":null,
+  "accounts": [
+    {
+      "address": "Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn",
+      "key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
+      "label": "",
+      "contract": {
+        "script": "DCECs2Ir9AF73+MXxYrtX0x1PyBrfbiWBG+n13S7xL9/jcJBVuezJw==",
+        "parameters": [
+          {
+            "name": "parameter0",
+            "type": "Signature"
+          }
+        ],
+        "deployed": false
+      },
+      "lock": false,
+      "extra":null,
+      "isDefault": false
+    },
+    {
+      "address": "NVTiAjNgagDkTr5HTzDmQP9kPwPHN5BgVq",
+      "key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
+      "label": "",
+      "contract": {
+        "script": "EwwhAhA6f33QFlWFl/eWDSfFFqQ5T9loueZRVetLAT5AQEBuDCECp7xV/oaE4BGXaNEEujB5W9zIZhnoZK3SYVZyPtGFzWIMIQKzYiv0AXvf4xfFiu1fTHU/IGt9uJYEb6fXdLvEv3+NwgwhA9kMB99j5pDOd5EuEKtRrMlEtmhgI3tgjE+PgwnnHuaZFEGe0Nw6",
+        "parameters": [
+          {
+            "name": "parameter0",
+            "type": "Signature"
+          },
+          {
+            "name": "parameter1",
+            "type": "Signature"
+          },
+          {
+            "name": "parameter2",
+            "type": "Signature"
+          }
+        ],
+        "deployed": false
+      },
+      "lock": false,
+      "extra":null,
+      "isDefault": false
+    },
+    {
+      "address": "NfgHwwTi3wHAS8aFAN243C5vGbkYDpqLHP",
+      "key": "6PYM8VdX2BSm7BSXKzV4Fz6S3R9cDLLWNrD9nMjxW352jEv3fsC8N3wNLY",
+      "label": "",
+      "contract": {
+        "script": "EQwhArNiK/QBe9/jF8WK7V9MdT8ga324lgRvp9d0u8S/f43CEUGe0Nw6",
+        "parameters": [
+          {
+            "name": "parameter0",
+            "type": "Signature"
+          }
+        ],
+        "deployed": false
+      },
+      "lock": false,
+      "extra":null,
+      "isDefault": false
+    }
+  ],
+  "scrypt": {
+    "n": 16384,
+    "r": 8,
+    "p": 8
+  },
+  "extra": {
+    "Tokens": null
+  }
+}
--- a/services/chain/protocol.privnet.yml
+++ b/services/chain/protocol.privnet.yml
@ -0,0 +1,59 @@
+ProtocolConfiguration:
+  Magic: 56753
+  MaxTraceableBlocks: 200000
+  SecondsPerBlock: 1
+  MemPoolSize: 50000
+  StandbyCommittee:
+    - 02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
+  ValidatorsCount: 1
+  SeedList:
+    - 172.200.0.1:20333
+  VerifyBlocks: true
+  VerifyTransactions: true
+  P2PSigExtensions: false
+
+ApplicationConfiguration:
+  DBConfiguration:
+    Type: "boltdb"
+    BoltDBOptions:
+      FilePath: "./db/privnet.bolt"
+  NodePort: 20333
+  Relay: true
+  DialTimeout: 3
+  ProtoTickInterval: 2
+  PingInterval: 30
+  PingTimeout: 90
+  MaxPeers: 10
+  AttemptConnPeers: 5
+  MinPeers: 0
+  RPC:
+    Enabled: true
+    SessionEnabled: true
+    EnableCORSWorkaround: false
+    MaxGasInvoke: 15
+    Port: 30333
+  Prometheus:
+    Enabled: true
+    Port: 20001
+  Pprof:
+    Enabled: true
+    Port: 20011
+  UnlockWallet:
+    Path: "./wallets/node-wallet.json"
+    Password: "one"
+  Oracle:
+    Enabled: true
+    NeoFS:
+      Nodes:
+        - s01.neofs.devenv:8080
+        - s02.neofs.devenv:8080
+        - s03.neofs.devenv:8080
+        - s04.neofs.devenv:8080
+    UnlockWallet:
+      Path: "./wallets/node-wallet.json"
+      Password: "one"
+  P2PNotary:
+    Enabled: false
+    UnlockWallet:
+      Path: "./wallets/node-wallet.json"
+      Password: "one"
--- a/services/coredns/.env
+++ b/services/coredns/.env
--- a/services/coredns/.hosts
+++ b/services/coredns/.hosts
@ -0,0 +1 @@
+IPV4_PREFIX.53 coredns.LOCAL_DOMAIN
--- a/services/coredns/.int_test.env
+++ b/services/coredns/.int_test.env
--- a/services/coredns/Corefile
+++ b/services/coredns/Corefile
@ -0,0 +1,8 @@
+. {
+    nns http://192.168.130.90:30333
+    transfer {
+       to *
+    }
+    log
+    debug
+}
--- a/services/coredns/docker-compose.yml
+++ b/services/coredns/docker-compose.yml
@ -0,0 +1,25 @@
+---
+
+version: "2.4"
+services:
+  neofs_coredns:
+    image: ${COREDNS_IMAGE}:${COREDNS_VERSION}
+    container_name: coredns
+    domainname: ${LOCAL_DOMAIN}
+    hostname: coredns
+    restart: on-failure
+    networks:
+      coredns:
+      internet:
+        ipv4_address: ${IPV4_PREFIX}.53
+    stop_signal: SIGKILL
+    env_file: [ ".int_test.env" ]
+    volumes:
+      - ./Corefile:/Corefile
+      - ./../../vendor/hosts:/etc/hosts
+
+networks:
+  coredns:
+  internet:
+    external: true
+    name: basenet_internet
--- a/services/grafana/.hosts
+++ b/services/grafana/.hosts
@ -1,2 +0,0 @@
-IPV4_PREFIX.122 grafana.LOCAL_DOMAIN
-IPV4_PREFIX.123 loki.LOCAL_DOMAIN
--- a/services/grafana/docker-compose.yml
+++ b/services/grafana/docker-compose.yml
@ -1,31 +0,0 @@
-services:
-  grafana:
-    image: ${GRAFANA_IMAGE}:${GRAFANA_VERSION}
-    domainname: ${LOCAL_DOMAIN}
-    hostname: grafana
-    container_name: grafana
-    restart: on-failure
-    networks:
-      grafana_int:
-      internet:
-        ipv4_address: ${IPV4_PREFIX}.122
-    volumes:
-      - ./../../vendor/hosts:/etc/hosts
-      - ./grafana.ini:/etc/grafana/grafana.ini
-      - ./provisioning:/etc/grafana/provisioning
-    stop_signal: SIGKILL
-    env_file: [ ".env", ".int_test.env" ]
-
-  loki:
-    image: ${LOKI_IMAGE}:${LOKI_VERSION}
-    command: -config.file=/etc/loki/local-config.yaml
-    networks:
-      grafana_int:
-      internet:
-        ipv4_address: ${IPV4_PREFIX}.123
-
-networks:
-  grafana_int:
-  internet:
-    external: true
-    name: basenet_internet
--- a/services/grafana/grafana.ini
+++ b/services/grafana/grafana.ini
@ -1,7 +0,0 @@
-[auth.anonymous]
-enabled = true
-org_name = Main Org.
-org_role = Editor
-
-[dashboards]
-default_home_dashboard_path= /etc/grafana/provisioning/dashboards/overview.json
--- a/services/grafana/provisioning/dashboards/14061_rev1.json
+++ b/services/grafana/provisioning/dashboards/14061_rev1.json
--- a/services/grafana/provisioning/dashboards/blobovnicza-buckets.json
+++ b/services/grafana/provisioning/dashboards/blobovnicza-buckets.json
--- a/services/grafana/provisioning/dashboards/dashboard.yml
+++ b/services/grafana/provisioning/dashboards/dashboard.yml
--- a/services/grafana/provisioning/dashboards/engine-buckets.json
+++ b/services/grafana/provisioning/dashboards/engine-buckets.json
--- a/services/grafana/provisioning/dashboards/fstree-buckets.json
+++ b/services/grafana/provisioning/dashboards/fstree-buckets.json
--- a/services/grafana/provisioning/dashboards/grpc-buckets.json
+++ b/services/grafana/provisioning/dashboards/grpc-buckets.json
--- a/services/grafana/provisioning/dashboards/metabase-buckets.json
+++ b/services/grafana/provisioning/dashboards/metabase-buckets.json
--- a/services/grafana/provisioning/dashboards/overview.json
+++ b/services/grafana/provisioning/dashboards/overview.json
--- a/services/grafana/provisioning/dashboards/storage-node-logs.json
+++ b/services/grafana/provisioning/dashboards/storage-node-logs.json
--- a/services/grafana/provisioning/dashboards/storage-node.json
+++ b/services/grafana/provisioning/dashboards/storage-node.json
--- a/services/grafana/provisioning/dashboards/writecache-buckets.json
+++ b/services/grafana/provisioning/dashboards/writecache-buckets.json
--- a/services/grafana/provisioning/datasources/datasource.yml
+++ b/services/grafana/provisioning/datasources/datasource.yml
@ -1,13 +0,0 @@
-apiVersion: 1
-
-datasources:
- name: Prometheus
-  type: prometheus
-  access: proxy
-  orgId: 1
-  url: http://prometheus:9090
- name: Loki
-  type: loki
-  access: proxy
-  orgId: 1
-  url: http://loki:3100
--- a/services/http_gate/.http.env
+++ b/services/http_gate/.http.env
@ -0,0 +1,9 @@
+HTTP_GW_LISTEN_ADDRESS=0.0.0.0:80
+
+HTTP_GW_LOGGER_LEVEL=info
+
+HTTP_GW_REBALANCE_TIMER=5m
+HTTP_GW_CONNECT_TIMEOUT=60s
+HTTP_GW_REQUEST_TIMEOUT=300s
+
+HTTP_GW_RESOLVE_ORDER=dns
--- a/services/http_gate/cfg/config.yml
+++ b/services/http_gate/cfg/config.yml
@ -1,24 +0,0 @@
-logger:
-  level: debug
-
-prometheus:
-  enabled: true
-  address: :9090
-  
-rebalance_timer: 5m  # Interval to check nodes health
-
-connect_timeout: 60s  # Timeout to dial node
-
-request_timeout: 300s  # Timeout to check node health during rebalance
-
-# The order in which resolvers are used to find an container id by name
-resolve_order:
-  - nns
-
-server:
-  - address: 0.0.0.0:80
-
-# Wallet settings
-wallet:
-  path: /wallet.json  # Path to wallet 
-  passphrase: one  # Passphrase to decrypt wallet
--- a/services/http_gate/docker-compose.yml
+++ b/services/http_gate/docker-compose.yml
@ -1,5 +1,6 @@
 ---

+version: "2.4"
 services:
  http_gate:
    image: ${HTTP_GW_IMAGE}:${HTTP_GW_VERSION}
@ -7,6 +8,8 @@ services:
    hostname: http_gate
    container_name: http_gate
    restart: on-failure
+    dns:
+      - ${IPV4_PREFIX}.53
    networks:
      http_gate_int:
      internet:
@ -14,13 +17,11 @@ services:
    volumes:
      - ./wallet.json:/wallet.json
      - ./../../vendor/hosts:/etc/hosts
-      - ./cfg:/etc/frostfs/http
    stop_signal: SIGKILL
    env_file: [ ".env", ".http.env", ".int_test.env" ]
-    command: [ "frostfs-http-gw", "--config", "/etc/frostfs/http/config.yml" ]
    environment:
-      - HTTP_GW_RPC_ENDPOINT=http://morph-chain.${LOCAL_DOMAIN}:30333
-      - HTTP_GW_TREE_SERVICE=s01.${LOCAL_DOMAIN}:8080
+      - HTTP_GW_WALLET_PATH=/wallet.json
+      - HTTP_GW_WALLET_PASSPHRASE=one
      - HTTP_GW_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
      - HTTP_GW_PEERS_0_WEIGHT=0.2
      - HTTP_GW_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
--- a/services/ir/.ir.env
+++ b/services/ir/.ir.env
@ -1 +1,44 @@
-FROSTFS_IR_CONTROL_GRPC_ENDPOINT=127.0.0.1:16512
+NEOFS_IR_LOGGER_LEVEL=debug
+
+# Profiler section
+NEOFS_IR_PPROF_ENABLED=true
+## Server address. Empty value disables profiler
+NEOFS_IR_PPROF_ADDRESS=:6060
+## Timeout to shut down the HTTP server
+## Default: 30s
+#NEOFS_IR_PROFILER_SHUTDOWN_TIMEOUT=1m
+
+# Application metrics section
+NEOFS_IR_PROMETHEUS_ENABLED=true
+## Server address. Empty value disables metrics gathering
+NEOFS_IR_PROMETHEUS_ADDRESS=:9090
+## Timeout to shut down the HTTP server
+## Default: 30s
+#NEOFS_IR_METRICS_SHUTDOWN_TIMEOUT=1m
+
+# Toggling the sidechain-only mode
+NEOFS_IR_WITHOUT_MAINNET=false
+
+NEOFS_IR_MAINNET_ENDPOINT_CLIENT_0_ADDRESS=ws://main-chain:30333/ws
+NEOFS_IR_MORPH_ENDPOINT_CLIENT_0_ADDRESS=ws://morph-chain:30333/ws
+NEOFS_IR_TIMERS_EMIT=50
+NEOFS_IR_TIMERS_STOP_ESTIMATION_DIV=4
+NEOFS_IR_TIMERS_COLLECT_BASIC_INCOME_DIV=2
+NEOFS_IR_TIMERS_DISTRIBUTE_BASIC_INCOME_MUL=3
+NEOFS_IR_TIMERS_DISTRIBUTE_BASIC_INCOME_DIV=4
+
+NEOFS_IR_EMIT_STORAGE_AMOUNT=1000000000
+NEOFS_IR_NETMAP_CLEANER_ENABLED=true
+
+NEOFS_IR_CONTRACTS_NEOFS=b797c965c186811455430a7b39b81beb1dc3772a
+NEOFS_IR_CONTRACTS_PROCESSING=ab239aa64ff6419419390038682a58b3e7dd0e86
+
+NEOFS_IR_MORPH_VALIDATORS=02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
+NEOFS_IR_AUDIT_PDP_MAX_SLEEP_INTERVAL=100ms
+
+NEOFS_IR_SETTLEMENT_BASIC_INCOME_RATE=100000000
+NEOFS_IR_SETTLEMENT_AUDIT_FEE=100000
+
+NEOFS_IR_LOCODE_DB_PATH=/locode/db
+
+NEOFS_IR_CONTROL_GRPC_ENDPOINT=127.0.0.1:16512
--- a/services/ir/artifacts.mk
+++ b/services/ir/artifacts.mk
@ -1,41 +1,42 @@
-# Get FrostFS IR artifacts (LOCODE database and FrostFS CLI)
+# Get NeoFS LOCODE database

 LOCODE_DB_ARCHIVE_PATH=./vendor
 LOCODE_DB_ARCHIVE_FILE=locode_db.gz

 get.ir: get.locode get.cli

-# Get FrostFS LOCODE database
 get.locode: LOCODE_DB_PATH?= 
 get.locode:
 	@mkdir -p ${LOCODE_DB_ARCHIVE_PATH}

 ifeq (${LOCODE_DB_PATH},)
-	@echo "⇒ Download FrostFS LOCODE database from ${LOCODE_DB_URL}"
+	@echo "⇒ Download NeoFS LOCODE database from ${LOCODE_DB_URL}"
 	@curl \
 		-sSL "${LOCODE_DB_URL}" \
 		-o ${LOCODE_DB_ARCHIVE_PATH}/${LOCODE_DB_ARCHIVE_FILE}
 else
-	@echo "⇒ Copy local archive of FrostFS LOCODE database from ${LOCODE_DB_PATH}"
+	@echo "⇒ Copy local archive of NeoFS LOCODE database from ${LOCODE_DB_PATH}"
 	@cp ${LOCODE_DB_PATH} ${LOCODE_DB_ARCHIVE_PATH}/${LOCODE_DB_ARCHIVE_FILE}
 endif

 	gzip -dfk ${LOCODE_DB_ARCHIVE_PATH}/${LOCODE_DB_ARCHIVE_FILE}

-# Download FrostFS CLI 
 .ONESHELL:
-get.cli: FROSTFS_CLI_FILE=./vendor/frostfs-cli
-get.cli: FROSTFS_CLI_PATH?=
+get.cli: NEOFS_CLI_FILE=./vendor/neofs-cli
+get.cli: NEOFS_CLI_ARCHIVE_FILE=${NEOFS_CLI_FILE}.tar.gz
+get.cli: NEOFS_CLI_PATH?=
 get.cli:
 	@mkdir -p ./vendor

-ifeq (${FROSTFS_CLI_PATH},)
-	@echo "⇒ Download FrostFS CLI binary from ${FROSTFS_CLI_URL}"
+ifeq (${NEOFS_CLI_PATH},)
+	@echo "⇒ Download NeoFS CLI binary from ${NEOFS_CLI_URL}"
 	@curl \
-		-ksSL "${FROSTFS_CLI_URL}" \
-		-o ${FROSTFS_CLI_FILE} 
-	@chmod +x ${FROSTFS_CLI_FILE}
+		-sSL "${NEOFS_CLI_URL}" \
+		-o ${NEOFS_CLI_ARCHIVE_FILE} 
+	@tar -xvf ${NEOFS_CLI_ARCHIVE_FILE} -C ./vendor | xargs -I {} \
+		mv ./vendor/{} ${NEOFS_CLI_FILE}
+	@rm ${NEOFS_CLI_ARCHIVE_FILE}
 else
-	@echo "⇒ Copy local binary from ${FROSTFS_CLI_PATH}"
-	@cp ${FROSTFS_CLI_PATH} ${FROSTFS_CLI_FILE}
+	@echo "⇒ Copy local binary from ${NEOFS_CLI_PATH}"
+	@cp ${NEOFS_CLI_PATH} ${NEOFS_CLI_FILE}
 endif
--- a/services/ir/cfg/config.yml
+++ b/services/ir/cfg/config.yml
@ -1,76 +0,0 @@
-# Logger section
-logger:
-  level: debug  # Minimum enabled logging level
-
-# Wallet settings
-wallet:
-  path: /wallet.json  # Path to NEP-6 NEO wallet file
-  address: Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn  # Account address in the wallet; ignore to use default address
-  password: one  # Account password in the wallet
-
-# Profiler section
-pprof:
-  enabled: true
-  address: :6060  # Endpoint for application pprof profiling; disabled by default
-  shutdown_timeout: 30s  # Timeout for profiling HTTP server graceful shutdown
-
-# Application metrics section
-prometheus:
-  enabled: true
-  address: :9090  # Endpoint for application prometheus metrics; disabled by default
-  shutdown_timeout: 30s  # Timeout for metrics HTTP server graceful shutdown
-
-# Toggling the sidechain-only mode
-without_mainnet: true
-
-# Neo main chain RPC settings
-mainnet:
-  endpoint:
-    client:  # List of websocket RPC endpoints in mainchain; ignore if mainchain is disabled
-      - address: ws://main-chain:30333/ws
-
-# Neo side chain RPC settings
-morph:
-  endpoint:
-    client:  # List of websocket RPC endpoints in sidechain
-      - address: ws://morph-chain:30333/ws
-  validators:  # List of hex-encoded 33-byte public keys of sidechain validators to vote for at application startup
-    - 02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
-
-# Network time settings
-timers:
-  emit: 50  # Number of sidechain blocks between GAS emission cycles; disabled by default
-  stop_estimation:
-    mul: 1  # Multiplier in x/y relation of when to stop basic income estimation within the epoch
-    div: 4  # Divider in x/y relation of when to stop basic income estimation within the epoch
-  collect_basic_income:
-    mul: 1  # Multiplier in x/y relation of when to start basic income asset collection within the epoch
-    div: 2  # Divider in x/y relation of when to start basic income asset collecting within the epoch
-  distribute_basic_income:
-    mul: 3  # Multiplier in x/y relation of when to start basic income asset distribution within the epoch
-    div: 4  # Divider in x/y relation of when to start basic income asset distribution within the epoch
-
-# Storage node GAS emission settings
-emit:
-  storage:
-    amount: 1000000000  # Fixed8 value of sidechain GAS emitted to all storage nodes once per GAS emission cycle; disabled by default
-  
-# Storage node removal settings
-netmap_cleaner:
-  enabled: true  # Enable voting for removing stale storage nodes from network map
-  threshold: 3  # Number of FrostFS epoch without bootstrap request from storage node before it considered stale
-  
-# Audit settings
-audit:
-  pdp:
-    max_sleep_interval: 100ms  # Maximum timeout between object.RangeHash requests to the storage node
-    
-# Settlement settings
-settlement:
-  basic_income_rate: 100000000  # Optional: override basic income rate value from network config; applied only in debug mode
-  audit_fee: 100000  # Optional: override audit fee value from network config; applied only in debug mode
-
-# LOCODE database
-locode:
-  db:
-    path: /locode/db  # Path to UN/LOCODE database file
--- a/services/ir/docker-compose.yml
+++ b/services/ir/docker-compose.yml
@ -1,5 +1,6 @@
 ---

+version: "2.4"
 services:

  ir01:
@ -12,19 +13,21 @@ services:
      ir_int:
      internet:
        ipv4_address: ${IPV4_PREFIX}.61
-    stop_signal: SIGTERM
-    stop_grace_period: 15s
+    stop_signal: SIGKILL
    volumes:
      - ./az.json:/wallet.json
      - ./az.key:/wallet01.key
      - ./../../vendor/hosts:/etc/hosts
      - ./../../vendor/locode_db:/locode/db
-      - ./../../vendor/frostfs-cli:/frostfs-cli
-      - ./cfg:/etc/frostfs/ir
+      - ./../../vendor/neofs-cli:/neofs-cli
+      - ./healthcheck.sh:/healthcheck.sh
    env_file: [ ".env", ".ir.env", ".int_test.env" ]
-    command: [ "frostfs-ir", "--config", "/etc/frostfs/ir/config.yml" ]
+    environment:
+    - NEOFS_IR_WALLET_PATH=/wallet.json
+    - NEOFS_IR_WALLET_ADDRESS=Nhfg3TbpwogLvDGVvAvqyThbsHgoSUKwtn
+    - NEOFS_IR_WALLET_PASSWORD=one
    healthcheck:
-      test: ["CMD-SHELL", "/frostfs-cli control ir healthcheck -q --wallet /wallet01.key  --endpoint \"$$FROSTFS_IR_CONTROL_GRPC_ENDPOINT\""]
+      test: ["CMD-SHELL", "/healthcheck.sh"]
      interval: 2s
      timeout: 1s
      retries: 5
--- a/services/ir/healthcheck.sh
+++ b/services/ir/healthcheck.sh
@ -0,0 +1,6 @@
+#!/bin/sh
+
+/neofs-cli control healthcheck \
+	--endpoint "$NEOFS_IR_CONTROL_GRPC_ENDPOINT" \
+	--wallet /wallet01.key --ir |
+	grep "Health status: READY"
--- a/services/ir/prepare.mk
+++ b/services/ir/prepare.mk
@ -0,0 +1,3 @@
+# Deposit GAS from default wallet to NeoFS privnet contract 
+prepare.ir:
+	@./bin/deposit.sh
--- a/services/jaeger/.hosts
+++ b/services/jaeger/.hosts
@ -1 +0,0 @@
-IPV4_PREFIX.120 jaeger.LOCAL_DOMAIN
--- a/services/jaeger/.jaeger.env
+++ b/services/jaeger/.jaeger.env
--- a/services/jaeger/docker-compose.yml
+++ b/services/jaeger/docker-compose.yml
@ -1,31 +0,0 @@
-services:
-  jaeger:
-    image: ${JAEGER_IMAGE}:${JAEGER_VERSION}
-    domainname: ${LOCAL_DOMAIN}
-    hostname: jaeger
-    container_name: jaeger
-    restart: on-failure
-    networks:
-      jaeger_int:
-      internet:
-        ipv4_address: ${IPV4_PREFIX}.120
-    volumes:
-      - ./../../vendor/hosts:/etc/hosts
-    ports:
-      - '4317:4317' #OTLP over gRPC
-      - '4318:4318' #OTLP over HTTP
-      - '16686:16686' #frontend
-    stop_signal: SIGKILL
-    env_file: [ ".env", ".jaeger.env", ".int_test.env" ]
-    environment:
-      - COLLECTOR_OTLP_ENABLED=true
-      - SPAN_STORAGE_TYPE=badger
-      - BADGER_EPHEMERAL=false
-      - BADGER_DIRECTORY_VALUE=/badger/data
-      - BADGER_DIRECTORY_KEY=/badger/key
-
-networks:
-  jaeger_int:
-  internet:
-    external: true
-    name: basenet_internet
--- a/services/morph_chain/artifacts.mk
+++ b/services/morph_chain/artifacts.mk
@ -1,32 +1,32 @@
-# Download FrostFS Contracts and Adm tool to deploy environment
-
+# Download NeoFS Contracts and Adm tool to deploy environment
 get.morph_chain: get.contracts get.adm

-# Download FrostFS Contracts
-get.contracts: FROSTFS_CONTRACTS_DEST=./vendor/contracts
-get.contracts: FROSTFS_CONTRACTS_ARCHIVE=frostfs-contracts.tar.gz
+get.contracts: NEOFS_CONTRACTS_DEST=./vendor/contracts
+get.contracts: NEOFS_CONTRACTS_ARCHIVE=neofs-contracts.tar.gz
 get.contracts:
-	@mkdir -p ${FROSTFS_CONTRACTS_DEST}
+	@mkdir -p ${NEOFS_CONTRACTS_DEST}

-ifeq (${FROSTFS_CONTRACTS_PATH},)
-	@echo "⇒ Download compiled FrostFS contracts from ${FROSTFS_CONTRACTS_URL}"
-	@curl -ksSL ${FROSTFS_CONTRACTS_URL} -o ${FROSTFS_CONTRACTS_ARCHIVE}
-	@tar -xf ${FROSTFS_CONTRACTS_ARCHIVE} -C ${FROSTFS_CONTRACTS_DEST} --strip-components 1 
-	@rm ${FROSTFS_CONTRACTS_ARCHIVE}
+ifeq (${NEOFS_CONTRACTS_PATH},)
+	@echo "⇒ Download compiled NeoFS contracts from ${NEOFS_CONTRACTS_URL}"
+	@curl -sSL ${NEOFS_CONTRACTS_URL} -o ${NEOFS_CONTRACTS_ARCHIVE}
+	@tar -xf ${NEOFS_CONTRACTS_ARCHIVE} -C ${NEOFS_CONTRACTS_DEST} --strip-components 1 
+	@rm ${NEOFS_CONTRACTS_ARCHIVE}
 else
-	@echo "⇒ Copy compiled contracts from ${FROSTFS_CONTRACTS_PATH}"
-	@cp -r ${FROSTFS_CONTRACTS_PATH}/* ${FROSTFS_CONTRACTS_DEST}
+	@echo "⇒ Copy compiled contracts from ${NEOFS_CONTRACTS_PATH}"
+	@cp -r ${NEOFS_CONTRACTS_PATH} ${NEOFS_CONTRACTS_DEST}
 endif

-# Download FrostFS ADM tool 
-get.adm: FROSTFS_ADM_DEST=./vendor/frostfs-adm
+get.adm: NEOFS_ADM_DEST=./vendor/neofs-adm
+get.adm: NEOFS_ADM_ARCHIVE=neofs-adm.tar.gz
 get.adm:

-ifeq (${FROSTFS_ADM_PATH},)
-	@echo "⇒ Download FrostFS ADM binary from ${FROSTFS_ADM_URL}"
-	@curl -skSL ${FROSTFS_ADM_URL} -o ${FROSTFS_ADM_DEST}
-	@chmod +x ${FROSTFS_ADM_DEST}
+ifeq (${NEOFS_ADM_PATH},)
+	@echo "⇒ Download NeoFS ADM binary from ${NEOFS_ADM_URL}"
+	@curl -sSL ${NEOFS_ADM_URL} -o ${NEOFS_ADM_ARCHIVE}
+	@tar -xvf ${NEOFS_ADM_ARCHIVE} -C ./vendor | xargs -I {} \
+		mv ./vendor/{} ${NEOFS_ADM_DEST}
+	@rm ${NEOFS_ADM_ARCHIVE}
 else
-	@echo "⇒ Copy frostfs-adm binary from ${FROSTFS_ADM_PATH}"
-	@cp ${FROSTFS_ADM_PATH} ${FROSTFS_ADM_DEST}
+	@echo "⇒ Copy neofs-adm binary from ${NEOFS_ADM_PATH}"
+	@cp ${NEOFS_ADM_PATH} ${NEOFS_ADM_DEST}
 endif
--- a/services/morph_chain/config.yml
+++ b/services/morph_chain/config.yml
@ -1,4 +0,0 @@
---
-
-Path: "/wallets/node-wallet.json"
-Password: "one"
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@ -1,7 +1,8 @@
 ---

+version: "2.4"
 services:
-  frostfs_morph_chain:
+  neofs_morph_chain:
    image: ${NEOGO_IMAGE}:${NEOGO_VERSION}
    container_name: morph_chain
    command: ["node", "--config-path", "/config", "--privnet", "--debug"]
@ -16,17 +17,11 @@ services:
    volumes:
    - ./protocol.privnet.yml:/config/protocol.privnet.yml
    - ./node-wallet.json:/wallets/node-wallet.json
-    - ./config.yml:/wallets/config.yml
    - ./../../vendor/hosts:/etc/hosts
    - ./../../wallets/wallet.json:/wallets/wallet.json
-    - ./../s3_gate/wallet.json:/wallets/s3-wallet.json
-    - chains:/chains

 networks:
  chain_int:
  internet:
    external: true
    name: basenet_internet
-
-volumes:
-  chains:
--- a/services/morph_chain/protocol.privnet.yml
+++ b/services/morph_chain/protocol.privnet.yml
@ -1,56 +1,49 @@
 ProtocolConfiguration:
  Magic: 15405
  MaxTraceableBlocks: 200000
-  TimePerBlock: 1s
+  SecondsPerBlock: 1
  MemPoolSize: 50000
  StandbyCommittee:
    - 02b3622bf4017bdfe317c58aed5f4c753f206b7db896046fa7d774bbc4bf7f8dc2
  ValidatorsCount: 1
  SeedList:
    - 172.200.0.1:20333
+  VerifyBlocks: true
  VerifyTransactions: true
  StateRootInHeader: true
  P2PSigExtensions: true

 ApplicationConfiguration:
-  SkipBlockVerification: false
  DBConfiguration:
    Type: "boltdb"
    BoltDBOptions:
-      FilePath: "/chains/morph.bolt"
-  P2P:
-    Addresses:
-      - ":20333"
-    DialTimeout: 3s
-    ProtoTickInterval: 2s
-    PingInterval: 30s
-    PingTimeout: 90s
-    MaxPeers: 10
-    AttemptConnPeers: 5
-    MinPeers: 0
+      FilePath: "./db/morph.bolt"
+  NodePort: 20333
  Relay: true
-  Consensus:
-    Enabled: true
-    UnlockWallet:
-      Path: "./wallets/node-wallet.json"
-      Password: "one"
+  DialTimeout: 3
+  ProtoTickInterval: 2
+  PingInterval: 30
+  PingTimeout: 90
+  MaxPeers: 10
+  AttemptConnPeers: 5
+  MinPeers: 0
  RPC:
-    Addresses:
-      - ":30333"
    Enabled: true
    SessionEnabled: true
    EnableCORSWorkaround: false
    MaxGasInvoke: 100
+    Port: 30333
  P2PNotary:
    Enabled: true
    UnlockWallet:
      Path: "./wallets/node-wallet.json"
      Password: "one"
  Prometheus:
-    Addresses:
-      - ":20001"
    Enabled: true
+    Port: 20001
  Pprof:
-    Addresses:
-      - ":20011"
    Enabled: true
+    Port: 20011
+  UnlockWallet:
+    Path: "./wallets/node-wallet.json"
+    Password: "one"
--- a/services/prometheus/.env
+++ b/services/prometheus/.env
--- a/services/nats/.hosts
+++ b/services/nats/.hosts
@ -0,0 +1 @@
+IPV4_PREFIX.101 nats.LOCAL_DOMAIN
--- a/services/prometheus/.int_test.env
+++ b/services/prometheus/.int_test.env
--- a/services/nats/artifacts.mk
+++ b/services/nats/artifacts.mk
@ -0,0 +1,7 @@
+# Create new tls certs
+
+NATS_DIR=$(abspath services/nats)
+
+get.nats:
+	@echo "⇒ Creating certs for NATS server and clients"
+	${NATS_DIR}/generate_cert.sh ${LOCAL_DOMAIN}
--- a/services/nats/docker-compose.yml
+++ b/services/nats/docker-compose.yml
@ -0,0 +1,31 @@
+---
+
+version: "2.4"
+services:
+  nats:
+    image: ${NATS_IMAGE}:${NATS_VERSION}
+    domainname: ${LOCAL_DOMAIN}
+    hostname: nats
+    container_name: nats
+    restart: on-failure
+    dns: 
+      - ${IPV4_PREFIX}.101
+    networks:
+      nats_int:
+      internet:
+        ipv4_address: ${IPV4_PREFIX}.101
+    volumes:
+      - ./../../vendor/hosts:/etc/hosts
+      - ./nats.conf:/etc/nats/neofs-nats-server.conf
+      - ./server-cert.pem:/certs/server-cert.pem
+      - ./server-key.pem:/certs/server-key.pem
+      - ./ca-cert.pem:/certs/ca-cert.pem
+    stop_signal: SIGKILL
+    env_file: [ ".env", ".int_test.env" ]
+    command: ["-c", "/etc/nats/neofs-nats-server.conf"]
+
+networks:
+  nats_int:
+  internet:
+    external: true
+    name: basenet_internet
--- a/services/nats/generate_cert.sh
+++ b/services/nats/generate_cert.sh
@ -0,0 +1,49 @@
+#!/bin/bash
+
+source bin/helper.sh
+
+WORKDIR=$(dirname "$0")
+LOCAL_DOMAIN=$1
+
+CA_KEY=$WORKDIR/ca-key.pem
+CA_CRT=$WORKDIR/ca-cert.pem
+
+SRV_KEY=$WORKDIR/server-key.pem
+SRV_REQ=$WORKDIR/server-req.csr
+SRV_CRT=$WORKDIR/server-cert.pem
+
+CLI_KEY=$WORKDIR/client-key.pem
+CLI_REQ=$WORKDIR/client-req.csr
+CLI_CRT=$WORKDIR/client-cert.pem
+
+SUBJ="/O=NSPCC"
+
+if [[ ! -f $CA_KEY || ! -f $CA_CRT ]]; then
+	openssl req -newkey rsa:4096 -x509 -days 365 -nodes -keyout $CA_KEY -out $CA_CRT -subj $SUBJ 2>&1 ||
+		die "CA certificate was not created"
+fi
+
+if [[ ! -f $SRV_KEY || ! -f $SRV_CRT ]]; then
+	openssl req -newkey rsa:4096 -nodes -keyout $SRV_KEY -out $SRV_REQ -subj $SUBJ 2>&1 ||
+		die "Server certificate was not created"
+
+	openssl x509 -req -days 365 -set_serial 01 -in $SRV_REQ -out $SRV_CRT -CA $CA_CRT -CAkey $CA_KEY \
+ 		-extensions san -extfile <(printf "[san]\nsubjectAltName=DNS:nats.$LOCAL_DOMAIN") 2>&1 || {
+		rm $SRV_REQ
+		die "Server certificate was not signed by CA"
+	}
+
+	rm $SRV_REQ
+fi
+
+if [[ ! -f $CLI_KEY || ! -f $CLI_CRT ]]; then
+	openssl req -newkey rsa:4096 -nodes -keyout $CLI_KEY -out $CLI_REQ -subj $SUBJ 2>&1 ||
+		die "Client certificate was not created"
+
+	openssl x509 -req -days 365 -set_serial 01 -in $CLI_REQ -out $CLI_CRT -CA $CA_CRT -CAkey $CA_KEY 2>&1 || {
+		rm $CLI_REQ
+		die "Client certificate was not signed by CA"
+	}
+
+	rm $CLI_REQ
+fi
--- a/services/nats/nats.conf
+++ b/services/nats/nats.conf
@ -0,0 +1,15 @@
+port: 4222
+monitor_port: 8222
+
+jetstream {
+   store_dir=nats
+   max_memory_store: 1GB
+   max_file_store: 2GB
+}
+
+tls {
+  cert_file: /certs/server-cert.pem
+  key_file:  /certs/server-key.pem
+  ca_file:   /certs/ca-cert.pem 
+  verify:    true
+}
--- a/services/prometheus/.hosts
+++ b/services/prometheus/.hosts
@ -1 +0,0 @@
-IPV4_PREFIX.121 prometheus.LOCAL_DOMAIN
--- a/services/prometheus/.prometheus.env
+++ b/services/prometheus/.prometheus.env
--- a/services/prometheus/docker-compose.yml
+++ b/services/prometheus/docker-compose.yml
@ -1,24 +0,0 @@
-services:
-  prometheus:
-    image: ${PROMETHEUS_IMAGE}:${PROMETHEUS_VERSION}
-    domainname: ${LOCAL_DOMAIN}
-    hostname: prometheus
-    container_name: prometheus
-    restart: on-failure
-    networks:
-      prometheus_int:
-      internet:
-        ipv4_address: ${IPV4_PREFIX}.121
-    volumes:
-      - ./../../vendor/hosts:/etc/hosts
-      - ./prometheus.yml:/etc/prometheus/prometheus.yml
-    command:
-      - --config.file=/etc/prometheus/prometheus.yml
-    stop_signal: SIGKILL
-    env_file: [ ".env", ".prometheus.env", ".int_test.env" ]
-
-networks:
-  prometheus_int:
-  internet:
-    external: true
-    name: basenet_internet
--- a/services/prometheus/prometheus.yml
+++ b/services/prometheus/prometheus.yml
@ -1,22 +0,0 @@
-global:
-  scrape_interval:     15s
-
-scrape_configs:
-  - job_name: 'node'
-    static_configs:
-      - targets: ['s01.frostfs.devenv:9090', 's02.frostfs.devenv:9090', 's03.frostfs.devenv:9090', 's04.frostfs.devenv:9090']
-  - job_name: 'http-gw'
-    static_configs:
-      - targets: ['http.frostfs.devenv:9090']
-  - job_name: 'rest-gw'
-    static_configs:
-      - targets: ['rest.frostfs.devenv:9090']
-  - job_name: 's3-gw'
-    static_configs:
-      - targets: ['s3.frostfs.devenv:9090']
-  - job_name: 'neo-go'
-    static_configs:
-      - targets: ['morph-chain.frostfs.devenv:20001']
-  - job_name: 'inner-ring'
-    static_configs:
-      - targets: ['ir01.frostfs.devenv:9090']
--- a/services/rest_gate/cfg/config.yml
+++ b/services/rest_gate/cfg/config.yml
@ -1,12 +0,0 @@
-prometheus:
-  enabled: true
-  address: :9090
-
-server:
-  # The IP and port to listen on.
-  listen-address: 0.0.0.0:8090
-
-# Wallet settings
-wallet:
-  path: /wallet.json # Path to wallet
-  passphrase: one # Password to decrypt wallet
--- a/services/rest_gate/docker-compose.yml
+++ b/services/rest_gate/docker-compose.yml
@ -1,5 +1,6 @@
 ---

+version: "2.4"
 services:
  rest_gate:
    image: ${REST_GW_IMAGE}:${REST_GW_VERSION}
@ -14,16 +15,16 @@ services:
    volumes:
      - ./wallet.json:/wallet.json
      - ./../../vendor/hosts:/etc/hosts
-      - ./cfg:/etc/frostfs/rest
-    stop_signal: SIGTERM
-    stop_grace_period: 15s
+    stop_signal: SIGKILL
    env_file: [ ".env", ".int_test.env" ]
-    command: [ "frostfs-rest-gw", "--config", "/etc/frostfs/rest/config.yml" ]
    environment:
-      - REST_GW_POOL_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
-      - REST_GW_POOL_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
-      - REST_GW_POOL_PEERS_2_ADDRESS=s03.${LOCAL_DOMAIN}:8080
-      - REST_GW_POOL_PEERS_3_ADDRESS=s04.${LOCAL_DOMAIN}:8080
+      - REST_GW_WALLET_PATH=/wallet.json
+      - REST_GW_WALLET_PASSPHRASE=one
+      - REST_GW_LISTEN_ADDRESS=0.0.0.0:8090
+      - REST_GW_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
+      - REST_GW_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
+      - REST_GW_PEERS_2_ADDRESS=s03.${LOCAL_DOMAIN}:8080
+      - REST_GW_PEERS_3_ADDRESS=s04.${LOCAL_DOMAIN}:8080

 networks:
  rest_gate_int:
--- a/services/s3_gate/.s3.env
+++ b/services/s3_gate/.s3.env
@ -0,0 +1,8 @@
+S3_GW_REBALANCE_INTERVAL=30s
+S3_GW_HEALTHCHECK_TIMEOUT=15s
+S3_GW_CONNECT_TIMEOUT=10s
+
+S3_GW_LOGGER_LEVEL=debug
+
+S3_GW_MAX_CLIENTS_COUNT=100
+S3_GW_MAX_CLIENTS_DEADLINE=30s
--- a/services/s3_gate/cfg/config.yml
+++ b/services/s3_gate/cfg/config.yml
@ -1,49 +0,0 @@
-logger:
-  level: debug
-
-prometheus:
-  enabled: true
-  address: :9090
-
-# Interval to check node health
-rebalance_interval: 30s
-
-# Timeout to check node health during rebalance
-healthcheck_timeout: 15s
-
-# Timeout to connect to a node
-connect_timeout: 10s
-
-# Limits for processing of clients' requests
-max_clients_count: 100
-
-# Deadline after which the gate sends error `RequestTimeout` to a client
-max_clients_deadline: 30s
-  
-resolve_order:
-  - nns
-      
-server:
-  - tls:
-      enabled: true
-      cert_file: /tls.crt
-      key_file: /tls.key
-
-# Wallet configuration
-wallet:
-  path: /wallet.json # Path to wallet
-  passphrase: "s3" # Passphrase to decrypt wallet
-
-features:
-  md5:
-    enabled: true
-
-control:
-  grpc:
-    endpoint: localhost:16515
-
-frostfsid:
-  enabled: false
-
-policy:
-  enabled: false
--- a/services/s3_gate/docker-compose.yml
+++ b/services/s3_gate/docker-compose.yml
@ -1,5 +1,6 @@
 ---

+version: "2.4"
 services:
  s3_gate:
    image: ${S3_GW_IMAGE}:${S3_GW_VERSION}
@ -7,31 +8,27 @@ services:
    hostname: s3_gate
    container_name: s3_gate
    restart: on-failure
+    dns:
+      - ${IPV4_PREFIX}.53
    networks:
      s3_gate_int:
      internet:
        ipv4_address: ${IPV4_PREFIX}.82
    volumes:
-      # Gate wallet
      - ./wallet.json:/wallet.json
-      # Custom user wallets
-      - ./wallets:/wallets
-      # Default user wallet
-      - ./../../wallets/wallet.json:/wallets/wallet.json
      - ./tls.key:/tls.key
      - ./tls.crt:/tls.crt
      - ./../../vendor/hosts:/etc/hosts
-      - ./cfg:/etc/frostfs/s3
-      - ./issue-creds.sh:/usr/bin/issue-creds.sh
-    stop_signal: SIGTERM
-    stop_grace_period: 15s
+    stop_signal: SIGKILL
    env_file: [ ".env", ".s3.env", ".int_test.env" ]
-    command: [ "frostfs-s3-gw", "--config", "/etc/frostfs/s3/config.yml" ]
    environment:
-      - S3_GW_RPC_ENDPOINT=http://morph-chain.${LOCAL_DOMAIN}:30333
-      - S3_GW_SERVER_0_ADDRESS=s3.${LOCAL_DOMAIN}:8080
+      - S3_GW_WALLET_PATH=/wallet.json
+      - S3_GW_WALLET_PASSPHRASE=s3
+      - S3_GW_TLS_KEY_FILE=/tls.key
+      - S3_GW_TLS_CERT_FILE=/tls.crt
+      - S3_GW_LISTEN_ADDRESS=s3.${LOCAL_DOMAIN}:8080
      - S3_GW_LISTEN_DOMAINS=s3.${LOCAL_DOMAIN}
-      - S3_GW_TREE_SERVICE=s01.${LOCAL_DOMAIN}:8080 s02.${LOCAL_DOMAIN}:8080 s03.${LOCAL_DOMAIN}:8080 s04.${LOCAL_DOMAIN}:8080
+      - S3_GW_TREE_SERVICE=s01.${LOCAL_DOMAIN}:8080
      - S3_GW_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
      - S3_GW_PEERS_0_WEIGHT=0.2
      - S3_GW_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
@ -40,8 +37,6 @@ services:
      - S3_GW_PEERS_2_WEIGHT=0.2
      - S3_GW_PEERS_3_ADDRESS=s04.${LOCAL_DOMAIN}:8080
      - S3_GW_PEERS_3_WEIGHT=0.2
-      - AUTHMATE_WALLET_PASSPHRASE=
-      - AUTHMATE_WALLET_CONTRACT_PASSPHRASE=s3

 networks:
  s3_gate_int:
--- a/services/s3_gate/issue-creds.sh
+++ b/services/s3_gate/issue-creds.sh
@ -1,41 +0,0 @@
-#!/bin/bash
-
-initUser() {
-  /bin/frostfs-s3-authmate register-user \
-    --wallet $WALLET_PATH \
-    --rpc-endpoint http://morph-chain.frostfs.devenv:30333 \
-    --username $USERNAME \
-    --contract-wallet /wallet.json 1> /dev/null && touch $WALLET_CACHE/$USERNAME
-}
-
-issueCreds() {
-  /bin/frostfs-s3-authmate issue-secret \
-    --wallet $WALLET_PATH \
-    --peer s01.frostfs.devenv:8080 \
-    --gate-public-key $S3_GATE_PUBLIC_KEY \
-    --container-placement-policy "REP 3"
-}
-
-set -e
-
-WALLET_PATH=/wallets/$2
-if [[ -z "$2" ]]; then
-  WALLET_PATH=/wallets/wallet.json
-fi
-
-S3_GATE_PUBLIC_KEY=$3
-if [[ -z "$3" ]]; then
-  S3_GATE_PUBLIC_KEY=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf
-fi 
-
-WALLET_CACHE=/data/wallets
-mkdir -p $WALLET_CACHE
-
-USERNAME=$(echo $WALLET_PATH | md5sum | cut -d' ' -f1)
-if [ ! -e $WALLET_CACHE/$USERNAME ]; then
-  initUser
-fi
-
-if [ $1 == "s3" ]; then
-  issueCreds
-fi
--- a/Show more
+++ b/Show more
Author	SHA1	Message	Date
Elizaveta Chichindaeva	d1b15bbbed	FIX: current NEOFS_IR_CONTRACTS_NEOFS Signed-off-by: Elizaveta Chichindaeva <elizaveta@nspcc.ru>	2022-11-14 15:12:45 +03:00
Alex Vanin	846311f12e	Disable caching on storage nodes Signed-off-by: Alex Vanin <a.vanin@yadro.com>	2022-09-28 18:37:48 +03:00
Alex Vanin	cea4d0e26e	Use latest neo-go with `mgmt-gethashbyid` patch Signed-off-by: Alex Vanin <a.vanin@yadro.com>	2022-09-28 18:36:02 +03:00
Artem Ivanov	7a4a9b346a	Restart coredns on failure Signed-off-by: Alex Vanin <a.vanin@yadro.com>	2022-09-28 18:36:02 +03:00
				`@ -1 +0,0 @@`
				`/services/grafana/provisioning/dashboards/* -diff -merge`