admin
ad1d26a9fd
The old pairing/delivery scenarios expected a non-zero exit on an unbound 204 poll — the one-poll-per-invocation design v1.21.0 (R-33) deliberately removed; against the current script they would hang on a real sleep. Now: a PATH-faked sleep counts the waits and flips the poll to 200 after 3 cycles, so one scenario proves the whole v1.21.0 shape in a single invocation (register -> in-script 204 waits -> delivery -> host-install -> done-flag, exit 0), plus a 410 crash-window scenario (still exits non-zero on purpose). Runaway guard: fake sleep kills the loop after 25 calls. Assistant image gains python3 (the bootstrap's JSON parsing needs it; PVE ships it on the real box) — the harness runs in that image. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UuFPHmHNrCJj1VhY6QdDMU
132 lines
6.1 KiB
Bash
132 lines
6.1 KiB
Bash
#!/bin/bash
|
|
# bootstrap-modes.sh — R-21 slice C regression harness for felhom-bootstrap.sh's two modes. Runs as
|
|
# root inside a throwaway container (felhom-iso-assistant:trixie — python3 needed by the pairing
|
|
# parsers; writes /etc/felhom etc.); fakes curl + host-install + systemctl + sleep on PATH. Asserts:
|
|
# D (regression): a DIRECT env (customer-id + passphrase) enters run_direct and makes ZERO calls to
|
|
# /api/v1/appliance/* — the pairing code path is provably not entered.
|
|
# P (pairing+delivery, v1.21.0 loop semantics): an env WITHOUT customer-id/passphrase enters
|
|
# run_pairing, POSTs /appliance/register, persists the token, polls 204 INSIDE one
|
|
# invocation (fake sleep counts the waits; the script never exits between polls),
|
|
# then consumes the 200 delivery, writes the direct env and runs host-install.
|
|
# 410: a consumed-delivery poll exits non-zero (the crash-window hand-back to systemd).
|
|
# (Updated for v1.21.0/R-33: the old one-poll-per-invocation scenarios expected a non-zero exit on
|
|
# 204, which the in-script wait deliberately no longer does — waiting is not failing.)
|
|
set -uo pipefail
|
|
BSTRAP=/work/felhom-bootstrap.sh
|
|
FAKE=/work/fakebin; rm -rf "$FAKE"; mkdir -p "$FAKE"
|
|
CALLS=/work/curl.log
|
|
export PATH="$FAKE:$PATH"
|
|
fail=0
|
|
say() { echo "TEST: $*"; }
|
|
check() { if eval "$2"; then echo " ok: $1"; else echo " FAIL: $1"; fail=1; fi; }
|
|
|
|
# --- fake sleep: counts waits; flips the poll to 200 after 3, hard-aborts a runaway loop ------------
|
|
cat > "$FAKE/sleep" <<'SLEEP'
|
|
#!/bin/bash
|
|
n=$(cat /work/sleep.count 2>/dev/null || echo 0); n=$((n+1)); echo "$n" > /work/sleep.count
|
|
flip=$(cat /work/sleep.flip 2>/dev/null || echo "")
|
|
[ -n "$flip" ] && [ "$n" -ge "$flip" ] && echo 200 > /work/poll-mode
|
|
if [ "$n" -gt 25 ]; then echo "RUNAWAY: fake sleep hit $n calls — killing the loop" >&2; kill -TERM $PPID; fi
|
|
exit 0
|
|
SLEEP
|
|
chmod +x "$FAKE/sleep"
|
|
|
|
# --- fake curl: logs every invocation's URL; emulates -o (fetch), --data (register), -w code (poll) --
|
|
cat > "$FAKE/curl" <<'CURL'
|
|
#!/bin/bash
|
|
url=""; ofile=""; wfmt=""
|
|
prev=""
|
|
for a in "$@"; do
|
|
case "$a" in http*|https*) url="$a";; esac
|
|
case "$prev" in -o) ofile="$a";; -w) wfmt="$a";; esac
|
|
prev="$a"
|
|
done
|
|
echo "$url" >> /work/curl.log
|
|
mode=$(cat /work/poll-mode 2>/dev/null || echo 204)
|
|
case "$url" in
|
|
*"/felhom-host-install.sh")
|
|
# write a stub host-install to the -o target
|
|
cat > "$ofile" <<'HI'
|
|
#!/bin/bash
|
|
echo "fake host-install ran: $*" >> /work/hostinstall.log
|
|
exit 0
|
|
HI
|
|
exit 0 ;;
|
|
*"/appliance/register")
|
|
echo '{"appliance_token":"TESTTOKEN123456","poll_interval_sec":30}'
|
|
exit 0 ;;
|
|
*"/appliance/poll")
|
|
if [ "$mode" = "200" ]; then
|
|
# body then, if -w set, a newline + code (matches the bootstrap's -w '\n%{http_code}')
|
|
printf '%s' '{"customer_id":"drill","retrieval_passphrase":"SEKRET-PASS","mode":"appliance","extra_args":"--cores 2"}'
|
|
[ -n "$wfmt" ] && printf '\n200'
|
|
else
|
|
[ -n "$wfmt" ] && printf '\n%s' "$mode" # 204 / 410 / whatever the scenario set
|
|
fi
|
|
exit 0 ;;
|
|
esac
|
|
exit 0
|
|
CURL
|
|
chmod +x "$FAKE/curl"
|
|
|
|
# fake systemctl (disable is a no-op)
|
|
printf '#!/bin/bash\nexit 0\n' > "$FAKE/systemctl"; chmod +x "$FAKE/systemctl"
|
|
|
|
reset_state() {
|
|
rm -rf /etc/felhom /run/felhom-bootstrap-pass /var/lib/felhom-install "$CALLS" /work/hostinstall.log \
|
|
/work/poll-mode /work/sleep.count /work/sleep.flip
|
|
mkdir -p /etc/felhom
|
|
}
|
|
|
|
# ============================ Scenario D — direct mode, zero appliance calls =========================
|
|
say "D: direct env -> run_direct, NO appliance calls"
|
|
reset_state
|
|
cat > /etc/felhom/bootstrap.env <<'ENV'
|
|
FELHOM_CUSTOMER_ID=acme
|
|
FELHOM_MODE=appliance
|
|
FELHOM_RETRIEVAL_PASSPHRASE=direct-pass
|
|
FELHOM_HUB_URL=https://hub.example
|
|
ENV
|
|
chmod 0600 /etc/felhom/bootstrap.env
|
|
bash "$BSTRAP"; rc=$?
|
|
check "run_direct exited 0 (host-install stub succeeded)" "[ $rc -eq 0 ]"
|
|
check "host-install was invoked" "[ -f /work/hostinstall.log ]"
|
|
check "ZERO /appliance/register calls" "! grep -q '/appliance/register' $CALLS"
|
|
check "ZERO /appliance/poll calls" "! grep -q '/appliance/poll' $CALLS"
|
|
check "done-flag written" "[ -f /etc/felhom/.bootstrap-done ]"
|
|
check "env shredded on success" "[ ! -f /etc/felhom/bootstrap.env ]"
|
|
|
|
# ============ P: pairing loop (v1.21.0) — register, wait unbound INSIDE one invocation, deliver =====
|
|
say "P: pairing env -> register + in-script 204 wait -> 200 delivery -> host-install, ONE invocation"
|
|
reset_state
|
|
cat > /etc/felhom/bootstrap.env <<'ENV'
|
|
FELHOM_HUB_URL=https://hub.example
|
|
ENV
|
|
echo 204 > /work/poll-mode
|
|
echo 3 > /work/sleep.flip # after 3 in-script waits the hub "binds" (poll flips to 200)
|
|
bash "$BSTRAP"; rc=$?
|
|
check "single invocation ran to done (exit 0)" "[ $rc -eq 0 ]"
|
|
check "POSTed /appliance/register" "grep -q '/appliance/register' $CALLS"
|
|
check "appliance token persisted 0600" "[ -f /etc/felhom/.bootstrap-done ] || { [ -f /etc/felhom/appliance-token ] && [ \"\$(stat -c %a /etc/felhom/appliance-token)\" = 600 ]; }"
|
|
check "polled more than once (the wait lived in-script, not in systemd restarts)" "[ \$(grep -c '/appliance/poll' $CALLS) -ge 2 ]"
|
|
check "waited between polls (fake sleep called >=3x)" "[ \"\$(cat /work/sleep.count 2>/dev/null || echo 0)\" -ge 3 ]"
|
|
check "host-install invoked after delivery" "[ -f /work/hostinstall.log ]"
|
|
check "done-flag written" "[ -f /etc/felhom/.bootstrap-done ]"
|
|
# the token was ALSO consumed on success (run_direct scrubs both secrets)
|
|
check "env shredded on success" "[ ! -f /etc/felhom/bootstrap.env ]"
|
|
|
|
# ============ 410: consumed delivery without a local env -> exit non-zero (crash window) ============
|
|
say "410: consumed delivery + no env -> exit non-zero so systemd restarts clean"
|
|
reset_state
|
|
cat > /etc/felhom/bootstrap.env <<'ENV'
|
|
FELHOM_HUB_URL=https://hub.example
|
|
ENV
|
|
echo 410 > /work/poll-mode
|
|
bash "$BSTRAP"; rc=$?
|
|
check "410 poll exits non-zero" "[ $rc -ne 0 ]"
|
|
check "host-install NOT run" "[ ! -f /work/hostinstall.log ]"
|
|
|
|
echo "=================================================="
|
|
if [ $fail -eq 0 ]; then echo "ALL BOOTSTRAP-MODE TESTS PASSED"; else echo "SOME TESTS FAILED"; fi
|
|
exit $fail
|