WSL2 Holesky doc: docker.sock permission, DNS for checkpoint, chainspec mismatch, allow-insecure-genesis-sync

[daohieu151093]

Describe the change

Context

• OS: Windows 11 + WSL2 Ubuntu 24.04 (systemd)
• Versions: Docker 28.2.2, Rust 1.90, Lighthouse v8, reth on Holesky
• PR adding doc: docs: Holesky on WSL2 (reth + Lighthouse) — docker.sock, DNS & --allow-insecure-genesis-sync megaeth-labs/reth#70

Issues met

1. docker.sock permission denied inside WSL2 (client can’t talk to daemon).
2. DNS fails for Holesky checkpoint endpoints inside container.
3. Chainspec mismatch if reusing --datadir when switching networks.
4. Lighthouse v8 requires --allow-insecure-genesis-sync for genesis sync when not using checkpoint.

Repro / Commands

• Reth (Holesky) with Engine API:

  reth node \
    --chain holesky \
    --http --http.addr 0.0.0.0 --http.port 8545 \
    --authrpc.addr 127.0.0.1 --authrpc.port 8551 \
    --authrpc.jwtsecret $HOME/.ethereum/jwt.hex
  

Lighthouse (checkpoint sync; also tried with custom DNS):
sudo docker run --rm -it --network=host
-v $HOME/.ethereum:/root/.ethereum
sigp/lighthouse:latest lighthouse bn
--network holesky
--execution-endpoint http://127.0.0.1:8551
--execution-jwt /root/.ethereum/jwt.hex
--checkpoint-sync-url https://holesky.checkpoint-sync.ethpandaops.io
--dns 1.1.1.1 --dns 8.8.8.8

Lighthouse (checkpoint sync; also tried with custom DNS):
sudo docker run --rm -it --network=host
-v $HOME/.ethereum:/root/.ethereum
sigp/lighthouse:latest lighthouse bn
--network holesky
--execution-endpoint http://127.0.0.1:8551
--execution-jwt /root/.ethereum/jwt.hex
--checkpoint-sync-url https://holesky.checkpoint-sync.ethpandaops.io
--dns 1.1.1.1 --dns 8.8.8.8

Genesis sync (worked) required:
--allow-insecure-genesis-sync

Workarounds used

docker.sock: add user to docker group and/or restart WSL (wsl --shutdown) then open new terminal.
DNS: set --dns on docker run or try alternative checkpoint URLs.
Chainspec mismatch: remove or use a fresh datadir when switching networks.
Lighthouse: use --allow-insecure-genesis-sync if not using checkpoint sync.

Verification
curl -s -X POST http://127.0.0.1:8545
-H "Content-Type: application/json"
-d '{"jsonrpc":"2.0","id":1,"method":"eth_blockNumber","params":[]}'

Proposal
Add a WSL2 Holesky guide and Troubleshooting section with:
docker group + WSL shutdown note
DNS flags / alternative checkpoint URLs
fresh datadir note when switching networks
--allow-insecure-genesis-sync for LH v8
curl snippet to verify Engine API

Screenshots / Logs

Links
PR: megaeth-labs#70

Checklist
I tested the commands on WSL2 Ubuntu 24.04 with systemd.
I verified Engine API responds via eth_blockNumber.
I provided alternative options for DNS / checkpoint.

Additional context

No response