Optimism Documentation

Welcome to the first step of creating your own L2 rollup testnet! In this section, you’ll install the op-deployer tool and deploy the necessary L1 smart contracts for your rollup.

Step 1 of 5: This tutorial is designed to be followed step-by-step. Each step builds on the previous one.

Quick Setup AvailableFor a complete automated setup that includes op-deployer deployment, check out the code/ directory. The automated setup handles all contract deployment and configuration automatically.

About op-deployer

op-deployer simplifies the process of deploying the OP Stack. You define a declarative config file called an “intent,” then run a command to apply it. op-deployer compares your chain’s current state against the intent and makes the necessary changes to match.

Installation

There are a couple of ways to install op-deployer:

Use binary
Build from source

The recommended way to install op-deployer is to download the latest release from the monorepo’s release page.

Quick Setup AvailableFor automated installation, you can use the download script from the code directory. This script automatically downloads the latest version for your system.

Download the correct binary

Go to the release page
Find the latest release that includes op-deployer (look for releases tagged with op-deployer/v*)
Under assets, download the binary that matches your system:

For Linux: op-deployer-linux-amd64
For macOS:
- Apple Silicon (M1/M2): op-deployer-darwin-arm64
- Intel processors: op-deployer-darwin-amd64
For Windows: op-deployer-windows-amd64.exe

Always download the latest version to ensure you have the most recent features and bug fixes.

Not sure which macOS version to use?

Open Terminal and run uname -m
If it shows arm64, use the arm64 version
If it shows x86_64, use the amd64 version

Create deployer directory and install binary

Create the rollup directory structure and enter the deployer directory:

# Create main rollup directory
mkdir rollup && cd rollup

# Create and enter the deployer directory
mkdir deployer && cd deployer

Your directory structure will now look like this:

rollup/
└── deployer/    # You are here

Move and rename the downloaded binary:

The downloaded file is likely in your Downloads folder:

macOS/Linux: /Users/YOUR_USERNAME/Downloads
Windows WSL: /mnt/c/Users/YOUR_USERNAME/Downloads

# Step 1: Extract the downloaded archive in the deployer directory
# Replace FILENAME with the actual downloaded file name (includes version and arch)
tar -xvzf /Users/USERNAME/Downloads/FILENAME.tar.gz

# Step 2: Make the binary executable
# Replace FILENAME with the extracted binary name
chmod +x FILENAME

# Step 3: Remove macOS quarantine attribute (fixes "can't be opened" warning)
sudo xattr -dr com.apple.quarantine FILENAME

# Step 4: Move the binary to your PATH
# For Intel Macs:
sudo mv FILENAME /usr/local/bin/op-deployer
# For Apple Silicon Macs:
sudo mv FILENAME /opt/homebrew/bin/op-deployer

# Step 5: Verify installation (should print version info)
op-deployer --version

Pro Tip: Use the automated download script from the code directory to avoid manual version management. It automatically detects your platform and downloads the latest version.

To install from source, you will need Go, just, and git. After installing all of that, run following:

git clone https://github.com/ethereum-optimism/optimism.git # you can skip this if you already have the repo
cd optimism/op-deployer
just build
cp ./bin/op-deployer /usr/local/bin/op-deployer # or any other directory in your $PATH

# Verify installation
op-deployer --version

L1 network requirements

Before deploying your L1 contracts, you’ll need: L1 RPC URL: An Ethereum RPC endpoint for your chosen L1 network

# Examples:
# Sepolia (recommended for testing)
L1_RPC_URL=https://sepolia.infura.io/v3/YOUR-PROJECT-ID
# or https://eth-sepolia.g.alchemy.com/v2/YOUR-API-KEY

# Local network
L1_RPC_URL=http://localhost:8545

For testing, we recommend using Sepolia testnet. You can get free RPC access from:

Infura (create account, get API key)
Alchemy (create account, get API key)
Ankr (create account, get API key)

Generate deployment addresses

Your rollup needs several addresses for different roles. Let’s generate them first:

Create address directory

# Create a address directory inside the deployer directory
mkdir -p address
cd address

Your directory structure will now look like this:

rollup/
└── deployer/
    └── address/    # You are here

Generate address for each role

# Generate 8 new wallet addresses
for role in admin base_Fee_Vault_Recipient l1_Fee_Vault_Recipient sequencer_Fee_Vault_Recipient system_config unsafe_block_signer batcher proposer ; do
    wallet_output=$(cast wallet new)
    echo "$wallet_output" | grep "Address:" | awk '{print $2}' > ${role}_address.txt
    echo "Created wallet for $role"
done

This will save the various addresses for your intent file into files in your current directory. To view them later you can use cat *_address.txt.

Important:

Save these address - you’ll need them to operate your chain
You can use any address for the purpose of testing, for production, use proper key management solutions (HSMs, multisigs addresses)

Create and configure intent file

The intent file defines your chain’s configuration.

Initialize intent file

Inside the deployer folder, run this command:

#You can use a 2-7 digit random number for your `<YOUR_CHAIN_ID>` 
op-deployer init \
  --l1-chain-id 11155111 \
  --l2-chain-ids <YOUR_CHAIN_ID> \
  --workdir .deployer \
  --intent-type standard-overrides

Show Understanding intent types

op-deployer supports three intent types:

standard: Uses default OP Stack configuration, minimal customization
standard-overrides: Recommended. Uses defaults but allows overriding specific values
custom: Full customization, requires manual configuration of all values

For most users, standard-overrides provides the best balance of simplicity and flexibility.

Update the intent file

Edit .deployer/intent.toml with your generated addresses. The op-deployer init command automatically populates this file with sensible defaults. Update the addresses while keeping the auto-generated contract locator values:

configType = "standard-overrides"
l1ChainID = 11155111  # Sepolia
fundDevAccounts = false  # Set to false for production/testnet
useInterop = false
opcmAddress = "0x3bb6437aba031afbf9cb3538fa064161e2bf2d78"  # OPCM contract address on Sepolia

# Contract locators - REQUIRED fields, automatically populated by op-deployer init
# Keep these default values unless you need specific contract versions (advanced use case)
l1ContractsLocator = "tag://op-contracts/v2.0.0"
l2ContractsLocator = "tag://op-contracts/v1.7.0-beta.1+l2-contracts"

# Shared contract roles - only define if creating a standalone chain not part of the OP Stack ecosystem
# For standard OP Stack deployments, these are predefined and should not be set
# [superchainRoles]
#   proxyAdminOwner = "0x..."     # admin address
#   guardian = "0x..."            # admin address

[[chains]]
  id = "0x000000000000000000000000000000000000000000000000000000000016de8d"
  baseFeeVaultRecipient = "0x..."       # receives base fees
  l1FeeVaultRecipient = "0x..."         # receives L1 data fees
  sequencerFeeVaultRecipient = "0x..."  # receives priority fees (tips)
  operatorFeeVaultRecipient = "0x..."   # receives operator fees
  eip1559DenominatorCanyon = 250
  eip1559Denominator = 50
  eip1559Elasticity = 6
  [chains.roles]
    l1ProxyAdminOwner = "0x1eb2ffc903729a0f03966b917003800b145f56e2"
    l2ProxyAdminOwner = "0x2fc3ffc903729a0f03966b917003800b145f67f3"
    systemConfigOwner = "0x..."      # system_config address
    unsafeBlockSigner = "0x..."      # unsafe_block_signer address
    batcher = "0x..."               # batcher address
    proposer = "0x..."              # proposer address
    challenger = "0xfd1d2e729ae8eee2e146c033bf4400fe75284301"

Show Understanding the configuration values

Global Settings:

l1ChainID: The L1 network ID (11155111 for Sepolia)
fundDevAccounts: Creates test accounts with ETH if true (set to false for production)
useInterop: Enable interoperability features (false for standard deployments)
opcmAddress: OP Contracts Manager (OPCM) contract address on the L1 network (automatically populated for supported networks)

Contract Locators (Required):These fields are required and automatically populated by op-deployer init with default values compatible with your op-deployer version. Removing them will cause the error: “Application failed: L1ContractsLocator undefined”. Keep the auto-generated values unless you specifically need different contract versions. For version compatibility details, see the op-deployer release notes.Shared Contract Roles (Advanced):These are commented out because for standard OP Stack deployments, shared contract roles are predefined by the protocol. Only uncomment and define custom roles if you’re creating a standalone chain not part of the OP Stack ecosystem.Chain Configuration:

id: Unique identifier for your chain
*FeeVaultRecipient: Addresses receiving protocol fees (required — deployment fails if any are set to the zero address). See fee vaults for details on each vault.
eip1559*: Parameters for dynamic gas price calculation

Fee Vault Optional Overrides:Each vault also supports optional parameters that can be set via deploy overrides. If not specified, the following defaults apply:

Parameter	Default
`*MinimumWithdrawalAmount`	10 ETH
`*WithdrawalNetwork`	`local` (L2)

Chain Roles:

l1ProxyAdminOwner: Can upgrade L1 contract implementations (usually same as superchain proxyAdminOwner)
l2ProxyAdminOwner: Can upgrade L2 contract implementations
systemConfigOwner: Manages system configuration parameters
unsafeBlockSigner: Signs pre-confirmation blocks (can be same as batcher)
batcher: Submits L2 transaction batches to L1
proposer: Submits L2 state roots to L1 for verification
challenger: Monitors dispute games and defends valid states

Replace all 0x... with actual addresses from your addresses.txt file. Never use the default test mnemonic addresses in production or public testnets!

Create environment file

Before deploying, create a .env file in your deployer directory to store your environment variables:

# Create .env file
cat << 'EOF' > .env
# Your L1 RPC URL (e.g., from Alchemy, Infura)
L1_RPC_URL=https://eth-sepolia.g.alchemy.com/v2/YOUR_API_KEY

# Private key for deployment.
# Get this from your self-custody wallet, like Metamask.
PRIVATE_KEY=WALLET_PRIVATE_KEY
EOF

Never commit your .env file to version control. Add it to your .gitignore:

echo ".env" >> .gitignore

Load the environment variables:

source .env

Deploy L1 Contracts

Now that your intent file and environment variables are configured, let’s deploy the L1 contracts:

op-deployer apply \
  --workdir .deployer \
  --l1-rpc-url $L1_RPC_URL \
  --private-key $PRIVATE_KEY

This will:

Deploy all required L1 contracts
Configure them according to your intent file
Save deployment information to .deployer/state.json

The deployment can take 10-15 seconds and requires multiple transactions.

Generate chain configuration

After successful deployment, generate your chain configuration files:

# Generate genesis and rollup configs
op-deployer inspect genesis --workdir .deployer <YOUR_CHAIN_ID> > .deployer/genesis.json
op-deployer inspect rollup --workdir .deployer <YOUR_CHAIN_ID> > .deployer/rollup.json

What’s Next?

Great! You’ve successfully:

Installed op-deployer using the init and apply command.
Created and configured your intent file
Deployed L1 smart contracts
Generated chain artifacts

Your final directory structure should look like this:

rollup/
└── deployer/
    ├── .deployer/           # Contains deployment state and configs
    │   ├── genesis.json     # L2 genesis configuration
    │   ├── intent.toml      # Your chain configuration
    │   ├── rollup.json      # Rollup configuration
    │   └── state.json       # Deployment state
    ├── .env                 # Environment variables
    └── address/             # Generated address pairs
        ├── admin_address.txt
        ├── base_Fee_Vault_Recipient_address.txt
        ├── batcher_address.txt
        ├── l1_Fee_Vault_Recipient_address.txt
        ├── proposer_address.txt
        ├── sequencer_Fee_Vault_Recipient_address.txt
        ├── system_config_address.txt
        └── unsafe_block_signer_address.txt

Now you can move on to setting up your sequencer node.

Spin up sequencer →

Next: Set up op-geth and op-node, essential building blocks of the execution and consensus layers in your rollup.

Need Help?

op-deployer Repository: GitHub
OPCM Documentation: OP Contracts Manager

​About op-deployer

​Installation

​L1 network requirements

​Generate deployment addresses

​Create and configure intent file

​Create environment file

​Deploy L1 Contracts

​Generate chain configuration

​What’s Next?

Spin up sequencer →

​Need Help?

About op-deployer

Installation

L1 network requirements

Generate deployment addresses

Create and configure intent file

Create environment file

Deploy L1 Contracts

Generate chain configuration

What’s Next?

Need Help?