Ophestra
a1214d350c
Some checks failed
Test / Create distribution (push) Successful in 26s
Test / Sandbox (push) Successful in 40s
Test / Hakurei (push) Successful in 45s
Test / Sandbox (race detector) (push) Successful in 1m0s
Test / Hpkg (push) Has been cancelled
Test / Hakurei (race detector) (push) Successful in 5m7s
Test / Flake checks (push) Has been skipped
This leaves slots available for additional uid ranges in Rosa OS. This breaks all existing installations! Users are required to fix ownership manually. Closes #18. Signed-off-by: Ophestra <cat@gensokyo.uk>
406 lines
12 KiB
Go
406 lines
12 KiB
Go
package store_test
|
|
|
|
import (
|
|
"bytes"
|
|
"cmp"
|
|
"iter"
|
|
"os"
|
|
"reflect"
|
|
"slices"
|
|
"strconv"
|
|
"strings"
|
|
"syscall"
|
|
"testing"
|
|
"time"
|
|
_ "unsafe"
|
|
|
|
"hakurei.app/container/check"
|
|
"hakurei.app/hst"
|
|
"hakurei.app/internal/store"
|
|
)
|
|
|
|
//go:linkname bigLock hakurei.app/internal/store.(*Store).bigLock
|
|
func bigLock(s *store.Store) (unlock func(), err error)
|
|
|
|
func TestStoreBigLock(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
{
|
|
s := store.New(check.MustAbs(t.TempDir()).Append("state"))
|
|
for i := 0; i < 2; i++ { // check once behaviour
|
|
if unlock, err := bigLock(s); err != nil {
|
|
t.Fatalf("bigLock: error = %v", err)
|
|
} else {
|
|
unlock()
|
|
}
|
|
}
|
|
}
|
|
|
|
t.Run("mkdir", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
wantErr := &hst.AppError{Step: "create state store directory",
|
|
Err: &os.PathError{Op: "mkdir", Path: "/proc/nonexistent", Err: syscall.ENOENT}}
|
|
for i := 0; i < 2; i++ { // check once behaviour
|
|
if _, err := bigLock(store.New(check.MustAbs("/proc/nonexistent"))); !reflect.DeepEqual(err, wantErr) {
|
|
t.Errorf("bigLock: error = %#v, want %#v", err, wantErr)
|
|
}
|
|
}
|
|
})
|
|
|
|
t.Run("access", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
base := check.MustAbs(t.TempDir()).Append("inaccessible")
|
|
if err := os.MkdirAll(base.String(), 0); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
|
|
wantErr := &hst.AppError{Step: "acquire lock on the state store",
|
|
Err: &os.PathError{Op: "open", Path: base.Append(store.MutexName).String(), Err: syscall.EACCES}}
|
|
if _, err := bigLock(store.New(base)); !reflect.DeepEqual(err, wantErr) {
|
|
t.Errorf("bigLock: error = %#v, want %#v", err, wantErr)
|
|
}
|
|
})
|
|
}
|
|
|
|
func TestStoreHandle(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
t.Run("loadstore", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
s := store.New(check.MustAbs(t.TempDir()).Append("store"))
|
|
|
|
var handleAddr [8]*store.Handle
|
|
checkHandle := func(identity int, load bool) {
|
|
if h, err := s.Handle(identity); err != nil {
|
|
t.Fatalf("Handle: error = %v", err)
|
|
} else if load != (handleAddr[identity] != nil) {
|
|
t.Fatalf("Handle: load = %v, want %v", load, handleAddr[identity] != nil)
|
|
} else if !load {
|
|
handleAddr[identity] = h
|
|
|
|
if h.Identity != identity {
|
|
t.Errorf("Handle: identity = %d, want %d", h.Identity, identity)
|
|
}
|
|
} else if h != handleAddr[identity] {
|
|
t.Fatalf("Handle: %p, want %p", h, handleAddr[identity])
|
|
}
|
|
}
|
|
|
|
checkHandle(0, false)
|
|
checkHandle(1, false)
|
|
checkHandle(2, false)
|
|
checkHandle(3, false)
|
|
checkHandle(7, false)
|
|
checkHandle(7, true)
|
|
checkHandle(2, true)
|
|
checkHandle(1, true)
|
|
checkHandle(2, true)
|
|
checkHandle(0, true)
|
|
})
|
|
|
|
t.Run("access", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
base := check.MustAbs(t.TempDir()).Append("inaccessible")
|
|
if err := os.MkdirAll(base.String(), 0); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
|
|
wantErr := &hst.AppError{Step: "acquire lock on the state store",
|
|
Err: &os.PathError{Op: "open", Path: base.Append(store.MutexName).String(), Err: syscall.EACCES}}
|
|
if _, err := store.New(base).Handle(0); !reflect.DeepEqual(err, wantErr) {
|
|
t.Errorf("Handle: error = %#v, want %#v", err, wantErr)
|
|
}
|
|
})
|
|
|
|
t.Run("access segment", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
base := check.MustAbs(t.TempDir()).Append("inaccessible")
|
|
if err := os.MkdirAll(base.String(), 0700); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
if f, err := os.Create(base.Append(store.MutexName).String()); err != nil {
|
|
t.Fatal(err.Error())
|
|
} else if err = f.Close(); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
if err := os.Chmod(base.String(), 0100); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
t.Cleanup(func() {
|
|
if err := os.Chmod(base.String(), 0700); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
})
|
|
|
|
wantErr := &hst.AppError{Step: "create store segment directory",
|
|
Err: &os.PathError{Op: "mkdir", Path: base.Append("0").String(), Err: syscall.EACCES}}
|
|
if _, err := store.New(base).Handle(0); !reflect.DeepEqual(err, wantErr) {
|
|
t.Errorf("Handle: error = %#v, want %#v", err, wantErr)
|
|
}
|
|
})
|
|
}
|
|
|
|
func TestStoreSegments(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
testCases := []struct {
|
|
name string
|
|
ents [2][]string
|
|
want []store.SegmentIdentity
|
|
ext func(t *testing.T, segments iter.Seq[store.SegmentIdentity], n int)
|
|
}{
|
|
{"errors", [2][]string{{
|
|
"f0-invalid-file",
|
|
}, {
|
|
"f1-invalid-syntax",
|
|
"9999",
|
|
"16384",
|
|
}}, []store.SegmentIdentity{
|
|
{-1, &hst.AppError{Step: "process store segment", Err: syscall.ENOTDIR,
|
|
Msg: `skipped non-directory entry "f0-invalid-file"`}},
|
|
{-1, &hst.AppError{Step: "process store segment", Err: syscall.ERANGE,
|
|
Msg: `skipped out of bounds entry 16384`}},
|
|
{-1, &hst.AppError{Step: "process store segment",
|
|
Err: &strconv.NumError{Func: "Atoi", Num: "f1-invalid-syntax", Err: strconv.ErrSyntax},
|
|
Msg: `skipped non-identity entry "f1-invalid-syntax"`}},
|
|
{9999, nil},
|
|
}, nil},
|
|
|
|
{"success", [2][]string{{
|
|
"lock",
|
|
}, {
|
|
"0",
|
|
"1",
|
|
"2",
|
|
"3",
|
|
"4",
|
|
"5",
|
|
"6",
|
|
"7",
|
|
"9",
|
|
"13",
|
|
"20",
|
|
"31",
|
|
"197",
|
|
}}, []store.SegmentIdentity{
|
|
{0, nil},
|
|
{1, nil},
|
|
{2, nil},
|
|
{3, nil},
|
|
{4, nil},
|
|
{5, nil},
|
|
{6, nil},
|
|
{7, nil},
|
|
{9, nil},
|
|
{13, nil},
|
|
{20, nil},
|
|
{31, nil},
|
|
{197, nil},
|
|
}, func(t *testing.T, segments iter.Seq[store.SegmentIdentity], n int) {
|
|
if n != 13 {
|
|
t.Fatalf("Segments: n = %d", n)
|
|
}
|
|
|
|
// check partial drain
|
|
for range segments {
|
|
break
|
|
}
|
|
}},
|
|
}
|
|
for _, tc := range testCases {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
base := check.MustAbs(t.TempDir()).Append("store")
|
|
if err := os.Mkdir(base.String(), 0700); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
createEntries(t, base, tc.ents)
|
|
|
|
var got []store.SegmentIdentity
|
|
if segments, n, err := store.New(base).Segments(); err != nil {
|
|
t.Fatalf("Segments: error = %v", err)
|
|
} else {
|
|
got = slices.AppendSeq(make([]store.SegmentIdentity, 0, n), segments)
|
|
if tc.ext != nil {
|
|
tc.ext(t, segments, n)
|
|
}
|
|
}
|
|
|
|
slices.SortFunc(got, func(a, b store.SegmentIdentity) int {
|
|
if a.Identity == b.Identity {
|
|
return strings.Compare(a.Err.Error(), b.Err.Error())
|
|
}
|
|
return cmp.Compare(a.Identity, b.Identity)
|
|
})
|
|
if !reflect.DeepEqual(got, tc.want) {
|
|
t.Errorf("Segments: %#v, want %#v", got, tc.want)
|
|
}
|
|
})
|
|
}
|
|
|
|
t.Run("access", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
base := check.MustAbs(t.TempDir()).Append("inaccessible")
|
|
if err := os.MkdirAll(base.String(), 0); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
|
|
wantErr := &hst.AppError{Step: "acquire lock on the state store",
|
|
Err: &os.PathError{Op: "open", Path: base.Append(store.MutexName).String(), Err: syscall.EACCES}}
|
|
if _, _, err := store.New(base).Segments(); !reflect.DeepEqual(err, wantErr) {
|
|
t.Errorf("Segments: error = %#v, want %#v", err, wantErr)
|
|
}
|
|
})
|
|
}
|
|
|
|
func TestStoreAll(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
testCases := []struct {
|
|
name string
|
|
data []hst.State
|
|
extra func(t *testing.T, base *check.Absolute)
|
|
err func(base *check.Absolute) error
|
|
}{
|
|
{"segment access", []hst.State{
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xaa}, len(hst.ID{}))), PID: 0xbeef, ShimPID: 0xcafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef0)},
|
|
}, func(t *testing.T, base *check.Absolute) {
|
|
segmentPath := base.Append("0")
|
|
if err := os.Mkdir(segmentPath.String(), 0); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
t.Cleanup(func() {
|
|
if err := os.Chmod(segmentPath.String(), 0755); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
})
|
|
}, func(base *check.Absolute) error {
|
|
return &hst.AppError{
|
|
Step: "acquire lock on store segment 0",
|
|
Err: &os.PathError{Op: "open", Path: base.Append("0", store.MutexName).String(), Err: syscall.EACCES},
|
|
}
|
|
}},
|
|
|
|
{"bad segment", []hst.State{
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xaa}, len(hst.ID{}))), PID: 0xbeef, ShimPID: 0xcafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef0)},
|
|
}, func(t *testing.T, base *check.Absolute) {
|
|
if f, err := os.Create(base.Append("invalid").String()); err != nil {
|
|
t.Fatal(err.Error())
|
|
} else if err = f.Close(); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
}, func(base *check.Absolute) error {
|
|
return &hst.AppError{
|
|
Step: "process store segment",
|
|
Err: syscall.ENOTDIR,
|
|
Msg: `skipped non-directory entry "invalid"`,
|
|
}
|
|
}},
|
|
|
|
{"access", []hst.State{
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xaa}, len(hst.ID{}))), PID: 0xbeef, ShimPID: 0xcafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef0)},
|
|
}, func(t *testing.T, base *check.Absolute) {
|
|
if err := os.Chmod(base.String(), 0); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
t.Cleanup(func() {
|
|
if err := os.Chmod(base.String(), 0755); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
})
|
|
}, func(base *check.Absolute) error {
|
|
return &hst.AppError{
|
|
Step: "acquire lock on the state store",
|
|
Err: &os.PathError{Op: "open", Path: base.Append(store.MutexName).String(), Err: syscall.EACCES},
|
|
}
|
|
}},
|
|
|
|
{"success single", []hst.State{
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xaa}, len(hst.ID{}))), PID: 0xbeef, ShimPID: 0xcafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef0)},
|
|
}, func(t *testing.T, base *check.Absolute) {
|
|
for i := 0; i < hst.Template().Identity; i++ {
|
|
if err := os.Mkdir(base.Append(strconv.Itoa(i)).String(), 0700); err != nil {
|
|
t.Fatal(err.Error())
|
|
}
|
|
}
|
|
}, nil},
|
|
|
|
{"success", []hst.State{
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xaa}, len(hst.ID{}))), PID: 0xbeef, ShimPID: 0xcafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef0)},
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xab}, len(hst.ID{}))), PID: 0x1beef, ShimPID: 0x1cafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef1)},
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xf0}, len(hst.ID{}))), PID: 0x2beef, ShimPID: 0x2cafe, Config: hst.Template(), Time: time.Unix(0, 0xdeadbeef2)},
|
|
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xfe}, len(hst.ID{}))), PID: 0xbed, ShimPID: 0xfff, Config: func() *hst.Config {
|
|
template := hst.Template()
|
|
template.Identity = hst.IdentityEnd
|
|
return template
|
|
}(), Time: time.Unix(0, 0xcafebabe0)},
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xfc}, len(hst.ID{}))), PID: 0x1bed, ShimPID: 0x1fff, Config: func() *hst.Config {
|
|
template := hst.Template()
|
|
template.Identity = 0xfc
|
|
return template
|
|
}(), Time: time.Unix(0, 0xcafebabe1)},
|
|
{ID: (hst.ID)(bytes.Repeat([]byte{0xce}, len(hst.ID{}))), PID: 0x2bed, ShimPID: 0x2fff, Config: func() *hst.Config {
|
|
template := hst.Template()
|
|
template.Identity = 0xce
|
|
return template
|
|
}(), Time: time.Unix(0, 0xcafebabe2)},
|
|
}, nil, nil},
|
|
}
|
|
for _, tc := range testCases {
|
|
base := check.MustAbs(t.TempDir()).Append("store")
|
|
s := store.New(base)
|
|
want := make([]*store.EntryHandle, 0, len(tc.data))
|
|
for i := range tc.data {
|
|
if h, err := s.Handle(tc.data[i].Identity); err != nil {
|
|
t.Fatalf("Handle: error = %v", err)
|
|
} else {
|
|
var unlock func()
|
|
if unlock, err = h.Lock(); err != nil {
|
|
t.Fatalf("Lock: error = %v", err)
|
|
}
|
|
var eh *store.EntryHandle
|
|
eh, err = h.Save(&tc.data[i])
|
|
unlock()
|
|
if err != nil {
|
|
t.Fatalf("Save: error = %v", err)
|
|
}
|
|
want = append(want, eh)
|
|
}
|
|
}
|
|
slices.SortFunc(want, func(a, b *store.EntryHandle) int { return strings.Compare(a.Pathname.String(), b.Pathname.String()) })
|
|
var wantErr error
|
|
if tc.err != nil {
|
|
wantErr = tc.err(base)
|
|
}
|
|
if tc.extra != nil {
|
|
tc.extra(t, base)
|
|
}
|
|
|
|
// store must not be written to beyond this point
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
entries, copyError := s.All()
|
|
got := slices.Collect(entries)
|
|
if err := copyError(); !reflect.DeepEqual(err, wantErr) {
|
|
t.Fatalf("All: error = %#v, want %#v", err, wantErr)
|
|
}
|
|
|
|
if wantErr == nil {
|
|
slices.SortFunc(got, func(a, b *store.EntryHandle) int { return strings.Compare(a.Pathname.String(), b.Pathname.String()) })
|
|
if !reflect.DeepEqual(got, want) {
|
|
t.Fatalf("All: %#v, want %#v", got, want)
|
|
}
|
|
}
|
|
})
|
|
}
|
|
}
|