devnet-9: cut buildoor memory instead of resizing the hosts

ansible/inventories/devnet-9/group_vars/buildoor.yaml

@@ -34,23 +34,39 @@ buildoor_container_env:
   BUILDOOR_INJECT_HEAD_HTML: <script src="https://pandamenu.ethpandaops.io/panda-menu-1.0.1.js"
     integrity="sha384-icGX6g6CzB0tqlhDc6Su4c6IPVbcbUvfM3xjbbFYsYBwuZR79WkmOxDhGEPfmyn2" crossorigin="anonymous"></script>
 
-# Re-apply the prysm.yaml merge so we don't lose the bootnode args while adding --prepare-all-payloads and --subscribe-all-subnets
+# Builders carry no validators (only `builder_index`), so they never attest or
+# aggregate and have no use for the 64 attestation subnets. Subscribing to all of
+# them on a 1M-validator network pulls in every attestation each slot (~31k)
+# instead of the backbone a non-validating node needs, and the resulting gossip
+# buffers and per-mesh peer state are the bulk of the beacon container's RSS.
+# Payload-preparation flags are the actual builder requirement and are kept.
+# Re-apply the prysm.yaml merge so we don't lose the bootnode args.
 prysm_container_command_extra_args: >-
   {{ prysm_container_command_extra_simple_args
      + prysm_container_command_extra_bootnode_args
-     + ['--prepare-all-payloads', '--subscribe-all-subnets'] }}
+     + ['--prepare-all-payloads'] }}
 lighthouse_container_command_extra_args: >-
   {{ lighthouse_container_command_extra_simple_args
-     + ['--always-prepare-payload', '--subscribe-all-subnets', '--import-all-attestations'] }}
+     + ['--always-prepare-payload'] }}
 lodestar_container_command_extra_args: >-
   {{ lodestar_container_command_extra_simple_args
-     + ['--emitPayloadAttributes', '--subscribeAllSubnets'] }}
+     + ['--emitPayloadAttributes'] }}
 teku_container_command_extra_args: >-
   {{ teku_container_command_extra_simple_args
-     + ['--Xfork-choice-updated-always-send-payload-attributes=true', '--p2p-subscribe-all-subnets-enabled'] }}
+     + ['--Xfork-choice-updated-always-send-payload-attributes=true'] }}
 grandine_container_command_extra_args: >-
   {{ grandine_container_command_extra_simple_args
-     + ['--features=AlwaysPrepareExecutionPayload', '--subscribe-all-subnets'] }}
+     + ['--features=AlwaysPrepareExecutionPayload'] }}
+
+# teku.yaml sets -Xmx12g for the validator fleet's 32 GB hosts. A buildoor has
+# 16 GB and also runs the EL (~1.1 GiB) plus sidecars (~0.9 GiB); a 12 GiB heap
+# plus JVM off-heap overhead does not fit, which is why this host has the highest
+# restart count in the fleet. `ansible_group_priority=100` lets us override it here.
+teku_container_env:
+  JAVA_OPTS: "-Xmx8g"
+  VIRTUAL_HOST: "{{ ethereum_node_beacon_hostname }}"
+  VIRTUAL_PORT: "{{ ethereum_node_cl_ports_http_beacon | string }}"
+  LETSENCRYPT_HOST: "{{ ethereum_node_beacon_hostname }}"
 
 
 ethereum_node_docker_watchtower_containers_list: