To deploy an NFT contract to the Goerli testnet, fund an address with 0.25 Goerli ETH, swap in the appropriate values for <your_key> and <your_pk> in this command, open a terminal window, and run the following:

git clone [email protected]:ProjectOpenSea/shipyard-core.git &&
cd shipyard-core &&
curl -L https://foundry.paradigm.xyz | bash &&
foundryup &&
forge build &&
export GOERLI_RPC='https://goerli.blockpi.network/v1/rpc/public &&
export ETHERSCAN_API_KEY='<your_key>' &&
export MY_ACTUAL_PK_BE_CAREFUL='<your_pk>' &&
forge create --rpc-url $GOERLI_RPC \
    --private-key $MY_ACTUAL_PK_BE_CAREFUL \
    --etherscan-api-key $ETHERSCAN_API_KEY \
    --verify \
    src/reference/ExampleNFT.sol:ExampleNFT

A quick breakdown of each step follows.

Clone the shipyard-core repository and change directories into it:

git clone [email protected]:ProjectOpenSea/shipyard-core.git &&
cd shipyard-core

Install the foundryup up command and run it, which in turn installs forge, cast, anvil, and chisel:

curl -L https://foundry.paradigm.xyz | bash &&
foundryup

Install dependencies and compile the contracts:

forge build

Set up your environment variables:

export GOERLI_RPC='https://goerli.blockpi.network/v1/rpc/public	 &&
export ETHERSCAN_API_KEY='<your_key>' &&
export MY_ACTUAL_PK_BE_CAREFUL='<your_pk>'

Run the forge create command, which deploys the contract:

forge create --rpc-url $GOERLI_RPC \
    --private-key $MY_ACTUAL_PK_BE_CAREFUL \
    --etherscan-api-key $ETHERSCAN_API_KEY \
    --verify \
    src/reference/ExampleNFT.sol:ExampleNFT

See https://book.getfoundry.sh/reference/forge/forge-create for more information on forge create.

Warning: these contracts have not yet been formally audited. Exercise caution when deploying to mainnet and consider additional review and independent audits.

To deploy to mainnet, replace the value supplied to --rpc-url with a mainnet RPC URL. For example:

export MAINNET_RPC='https://eth.llamarpc.com' &&
forge create --rpc-url $MAINNET_RPC \
    --private-key $MY_ACTUAL_PK_BE_CAREFUL \
    --etherscan-api-key $ETHERSCAN_API_KEY \
    --verify \
    src/reference/ExampleNFT.sol:ExampleNFT

Note that this will deploy ExampleNFT to mainnet, which will cost real money and will not produce much value as a result.

Currently, the ffi tests are the only way to test the output of ExampleNFT's tokenURI response. More options soon™.

In general, it's wise to be especially wary of ffi code. In the words of the Foundrybook, "It is generally advised to use this cheat code as a last resort, and to not enable it by default, as anyone who can change the tests of a project will be able to execute arbitrary commands on devices that run the tests."

To run the ffi tests locally, set FOUNDRY_PROFILE='ffi' in your .env file, and then source the .env file. This will permit Forge to make foreign calls (ffi = true) and read and write within the ./test-ffi/ directory. It also tells Forge to run the tests in the ./test-ffi/ directory instead of the tests in the ./test/ directory, which are run by default. Check out the foundry.toml file, where all of this and more is configured.

It's necessary to install the dependencies in ./test-ffi/scripts before running the ffi tests. From the top level, run cd test-ffi/scripts && yarn && ../... Then, running forge test -vvv should result in the tests passing.

Both the local profile and the CI profile for the ffi tests use a low number of fuzz runs, because the ffi lifecycle is slow. Before yeeting a project to mainnet, it's advisable to crank up the number of fuzz runs to increase the likelihood of catching an issue. It'll take more time, but it increases the likelihood of catching an issue.

The ExampleNFT.t.sol file will call ExampleNFT.sol's tokenURI function, decode the base64 encoded response, write the decoded version to ./test-ffi/tmp/temp.json, and then call the process_json.js file a few times to get string values. If the expected values and the actual values match, the test will pass and the files will be cleaned up. If they fail, a temp-*.json file will be left behind for reference. You can ignore it or delete it after you're done inspecting it. Forge makes a new one on the fly if it's not there. And it's ignored in the .gitignore file, so there's no need to worry about pushing cruft or top secret metadata to a shared/public repo. The tests in svg.t.sol behave more or less the same way, except that they'll produce many more temporary files.

When a PR is opened or when a new commit is pushed, Github runs a series of actions defined in the files in .github/workflows/*.yml. The normal Forge tests and linting are set up in test.yml. The ffi tests are set up in test-ffi.yml. Forks of this repository can safely disregard it or if it's not necessary, remove it entirely.