[NIT-2609] Compute and validate wasmModuleRoot while building docker

Dockerfile

@@ -250,7 +250,10 @@ COPY --from=node-builder /workspace/target/bin/nitro /usr/local/bin/
 COPY --from=node-builder /workspace/target/bin/relay /usr/local/bin/
 COPY --from=node-builder /workspace/target/bin/nitro-val /usr/local/bin/
 COPY --from=node-builder /workspace/target/bin/seq-coordinator-manager /usr/local/bin/
+COPY --from=node-builder /workspace/target/bin/prover /usr/local/bin/
 COPY --from=machine-versions /workspace/machines /home/user/target/machines
+COPY ./scripts/validate-wasm-module-root.sh .
+RUN ./validate-wasm-module-root.sh /home/user/target/machines /usr/local/bin/prover
 USER root
 RUN export DEBIAN_FRONTEND=noninteractive && \
     apt-get update && \

arbitrator/prover/src/main.rs

@@ -41,6 +41,9 @@ struct Opts {
     #[structopt(long)]
     /// print modules to the console
     print_modules: bool,
+    #[structopt(long)]
+    /// print wasm module root to the console
+    print_wasmmoduleroot: bool,
     /// profile output instead of generting proofs
     #[structopt(short = "p", long)]
     profile_run: bool,
@@ -122,6 +125,18 @@ const DELAYED_HEADER_LEN: usize = 112; // also in test-case's host-io.rs & contr
 fn main() -> Result<()> {
     let opts = Opts::from_args();
 
+    if opts.print_wasmmoduleroot {
+        match Machine::new_from_wavm(&opts.binary) {
+            Ok(mach) => {
+                println!("0x{}", mach.get_modules_root());
+                return Ok(());
+            }
+            Err(err) => {
+                eprintln!("Error loading binary: {err}");
+                return Err(err);
+            }
+        }
+    }
     let mut inbox_contents = HashMap::default();
     let mut inbox_position = opts.inbox_position;
     let mut delayed_position = opts.delayed_inbox_position;

scripts/validate-wasm-module-root.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -e
+
+MACHINES_DIR=$1
+PROVER=$2
+
+for machine in "$MACHINES_DIR"/*/ ; do
+    if [ -d "$machine" ]; then
+        expectedWasmModuleRoot=$(cat "$machine/module-root.txt")
+        actualWasmModuleRoot=$(cd "$machine" && "$PROVER" machine.wavm.br --print-wasmmoduleroot)
+        if [ "$expectedWasmModuleRoot" != "$actualWasmModuleRoot" ]; then
+            echo "Error: Expected module root $expectedWasmModuleRoot but found $actualWasmModuleRoot in $machine"
+            exit 1
+        fi
+    fi
+done