ops: oracle publisher LXC 3500/3501, CT migrate docs, Besu/RPC maintenance

- Provision oracle-publisher on CT 3500 (quoted DATA_SOURCE URLs, dotenv).
- Host-side pct-lxc-3501-net-up for ccip-monitor eth0 after migrate.
- CoinGecko key script: avoid sed & corruption; document quoted URLs.
- Besu node list reload, fstrim/RPC scripts, storage health docs.
- Submodule smom-dbis-138: web3 v6 pin, oracle check default host r630-02.

Made-with: Cursor

scripts/verify/check-chain138-rpc-health.sh

@@ -0,0 +1,95 @@
+#!/usr/bin/env bash
+# Chain 138 — RPC health: parallel head check + per-node peer count.
+# Exit 0 if all HTTP RPCs respond, head spread <= max_blocks_spread, each peer count >= min_peers.
+#
+# Usage: ./scripts/verify/check-chain138-rpc-health.sh
+# Env: RPC_MAX_HEAD_SPREAD (default 12), RPC_MIN_PEERS (default 10), RPC_TIMEOUT_SEC (default 20)
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+# shellcheck source=/dev/null
+source "${PROJECT_ROOT}/config/ip-addresses.conf" 2>/dev/null || true
+
+MAX_SPREAD="${RPC_MAX_HEAD_SPREAD:-12}"
+MIN_PEERS="${RPC_MIN_PEERS:-10}"
+TO="${RPC_TIMEOUT_SEC:-20}"
+
+# VMID|IP (HTTP :8545)
+RPC_ROWS=(
+  "2101|${IP_BESU_RPC_CORE_1:-192.168.11.211}"
+  "2102|${IP_BESU_RPC_CORE_2:-192.168.11.212}"
+  "2201|${IP_BESU_RPC_PUBLIC_1:-192.168.11.221}"
+  "2301|${IP_BESU_RPC_PRIVATE_1:-192.168.11.232}"
+  "2303|192.168.11.233"
+  "2304|192.168.11.234"
+  "2305|192.168.11.235"
+  "2306|192.168.11.236"
+  "2307|192.168.11.237"
+  "2308|192.168.11.238"
+  "2400|192.168.11.240"
+  "2401|192.168.11.241"
+  "2402|192.168.11.242"
+  "2403|192.168.11.243"
+)
+
+PAYLOAD_BN='{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+PAYLOAD_PC='{"jsonrpc":"2.0","method":"net_peerCount","params":[],"id":1}'
+
+tmpdir=$(mktemp -d)
+trap 'rm -rf "$tmpdir"' EXIT
+
+for row in "${RPC_ROWS[@]}"; do
+  vmid="${row%%|*}"
+  ip="${row#*|}"
+  (
+    curl -sS -m "$TO" -X POST "http://${ip}:8545" -H "Content-Type: application/json" -d "$PAYLOAD_BN" >"$tmpdir/bn-$vmid.json" 2>/dev/null || echo '{"error":"curl"}' >"$tmpdir/bn-$vmid.json"
+    curl -sS -m "$TO" -X POST "http://${ip}:8545" -H "Content-Type: application/json" -d "$PAYLOAD_PC" >"$tmpdir/pc-$vmid.json" 2>/dev/null || echo '{"error":"curl"}' >"$tmpdir/pc-$vmid.json"
+  ) &
+done
+wait
+
+fail=0
+min_b=999999999
+max_b=0
+echo "Chain 138 RPC health (parallel sample)"
+printf '%-5s %-15s %-10s %-8s\n' "VMID" "IP" "block(dec)" "peers"
+echo "------------------------------------------------------------"
+
+for row in "${RPC_ROWS[@]}"; do
+  vmid="${row%%|*}"
+  ip="${row#*|}"
+  bh=$(jq -r '.result // empty' "$tmpdir/bn-$vmid.json" 2>/dev/null || true)
+  ph=$(jq -r '.result // empty' "$tmpdir/pc-$vmid.json" 2>/dev/null || true)
+  if [[ -z "$bh" ]]; then
+    printf '%-5s %-15s %-10s %-8s\n' "$vmid" "$ip" "FAIL" "—"
+    ((fail++)) || true
+    continue
+  fi
+  bd=$((bh))
+  pd=$((ph))
+  [[ "$bd" -lt "$min_b" ]] && min_b=$bd
+  [[ "$bd" -gt "$max_b" ]] && max_b=$bd
+  if [[ "$pd" -lt "$MIN_PEERS" ]]; then
+    printf '%-5s %-15s %-10s %-8s LOW_PEERS\n' "$vmid" "$ip" "$bd" "$pd"
+    ((fail++)) || true
+  else
+    printf '%-5s %-15s %-10s %-8s\n' "$vmid" "$ip" "$bd" "$pd"
+  fi
+done
+
+spread=$((max_b - min_b))
+echo "------------------------------------------------------------"
+echo "Head spread (max-min): $spread (max allowed $MAX_SPREAD)"
+if [[ "$spread" -gt "$MAX_SPREAD" ]]; then
+  echo "FAIL: head spread too large"
+  ((fail++)) || true
+fi
+
+if [[ "$fail" -eq 0 ]]; then
+  echo "OK: all RPCs responded, peers >= $MIN_PEERS, spread <= $MAX_SPREAD"
+  exit 0
+fi
+echo "FAIL: $fail check(s) failed"
+exit 1