Files
seaweedfs/weed/server/volume_grpc_copy_writefile_test.go
T
Chris Lu 80dd3b2621 EC bitrot follow-ups: protect destination sidecar on optional copy; cap sidecar block_size (#9763)
* fix(ec_bitrot): cap sidecar block_size in ValidateBitrotManifest

A sidecar loaded from disk (or supplied via a backfill/peer RPC) could carry a
huge power-of-two block_size that passed validation, then force a multi-GiB
scratch-buffer allocation in scrub/verify. Add a shared MaxBitrotBlockSize
(64 MiB) constant, enforce it as an upper bound in isPow2MultipleOf1MiB, and
derive the volume flag cap from the same constant so they cannot drift.

* fix(ec_bitrot): don't destroy a valid destination sidecar on an optional copy

writeToFile opened the destination with O_TRUNC before knowing whether the
source had the file, so an optional copy (ignoreSourceFileNotFound) from a source
that lacks the .ecsum truncated and then removed a valid pre-existing destination
sidecar. Stage the optional copy into a temp sibling and commit it with an atomic
rename only when the source actually delivered the file; a missing source is now
a no-op. Mandatory copies keep their in-place behavior.
2026-05-31 23:42:33 -07:00

205 lines
6.5 KiB
Go

package weed_server
import (
"context"
"errors"
"io"
"os"
"path/filepath"
"testing"
"google.golang.org/grpc/metadata"
"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
"github.com/seaweedfs/seaweedfs/weed/util"
)
// fakeCopyFileStream is a synthetic VolumeServer_CopyFileClient used to
// drive writeToFile's failure paths in tests. The pre-fix code left a
// partial / 0-byte destination file on the disk when the stream errored
// mid-copy; with the fix, writeToFile now removes the incomplete file
// so callers (notably VolumeEcShardsCopy distributing .ecx) don't end
// up with stubs that mount-time code mistakes for valid empty indexes.
type fakeCopyFileStream struct {
responses []*volume_server_pb.CopyFileResponse
finalErr error
index int
}
func (s *fakeCopyFileStream) Recv() (*volume_server_pb.CopyFileResponse, error) {
if s.index >= len(s.responses) {
if s.finalErr != nil {
return nil, s.finalErr
}
return nil, io.EOF
}
r := s.responses[s.index]
s.index++
return r, nil
}
func (s *fakeCopyFileStream) Header() (metadata.MD, error) { return metadata.MD{}, nil }
func (s *fakeCopyFileStream) Trailer() metadata.MD { return metadata.MD{} }
func (s *fakeCopyFileStream) CloseSend() error { return nil }
func (s *fakeCopyFileStream) Context() context.Context { return context.Background() }
func (s *fakeCopyFileStream) SendMsg(any) error { return nil }
func (s *fakeCopyFileStream) RecvMsg(any) error { return nil }
func TestWriteToFile_RemovesPartialFileOnStreamError(t *testing.T) {
dir := t.TempDir()
dst := filepath.Join(dir, "vol_42.ecx")
stream := &fakeCopyFileStream{
responses: []*volume_server_pb.CopyFileResponse{
// Real bytes flow first — modifiedTsNs is non-zero so the
// existing "source file not found" cleanup at the bottom of
// writeToFile does NOT fire; the new mid-stream cleanup is
// the only path that can remove the file.
{FileContent: []byte("partial data"), ModifiedTsNs: 1234567890},
},
finalErr: errors.New("simulated mid-stream failure"),
}
_, err := writeToFile(stream, dst, util.NewWriteThrottler(0), false, false, nil)
if err == nil {
t.Fatalf("writeToFile should propagate the stream error")
}
if _, statErr := os.Stat(dst); !os.IsNotExist(statErr) {
t.Errorf("incomplete file should be removed; stat err = %v", statErr)
}
}
func TestWriteToFile_RemovesEmptyFileOnImmediateStreamError(t *testing.T) {
dir := t.TempDir()
dst := filepath.Join(dir, "vol_42.ecx")
stream := &fakeCopyFileStream{
// No FileContent at all; stream errors on the first Recv.
// progressedBytes == 0 and modifiedTsNs == 0, so without the
// mid-stream cleanup this would leave a 0-byte file from the
// O_TRUNC at OpenFile time.
finalErr: errors.New("simulated immediate failure"),
}
_, err := writeToFile(stream, dst, util.NewWriteThrottler(0), false, false, nil)
if err == nil {
t.Fatalf("writeToFile should propagate the stream error")
}
if _, statErr := os.Stat(dst); !os.IsNotExist(statErr) {
t.Errorf("0-byte file should be removed; stat err = %v", statErr)
}
}
func TestWriteToFile_PreservesAppendModeOnError(t *testing.T) {
dir := t.TempDir()
dst := filepath.Join(dir, "vol_42.ecj")
// Pre-existing content the caller owns — isAppend=true tells
// writeToFile not to touch it on cleanup.
if err := os.WriteFile(dst, []byte("pre-existing journal data"), 0o644); err != nil {
t.Fatalf("seed file: %v", err)
}
stream := &fakeCopyFileStream{
finalErr: errors.New("simulated failure"),
}
_, err := writeToFile(stream, dst, util.NewWriteThrottler(0), true, false, nil)
if err == nil {
t.Fatalf("writeToFile should propagate the stream error")
}
info, statErr := os.Stat(dst)
if statErr != nil {
t.Fatalf("append-mode file should be preserved on error; stat: %v", statErr)
}
if info.Size() == 0 {
t.Errorf("append-mode file unexpectedly truncated to 0 bytes")
}
}
func TestWriteToFile_SucceedsOnCleanStream(t *testing.T) {
dir := t.TempDir()
dst := filepath.Join(dir, "vol_42.ecx")
want := []byte("hello ecx index")
stream := &fakeCopyFileStream{
responses: []*volume_server_pb.CopyFileResponse{
{FileContent: want, ModifiedTsNs: 9},
},
}
if _, err := writeToFile(stream, dst, util.NewWriteThrottler(0), false, false, nil); err != nil {
t.Fatalf("writeToFile failed on clean stream: %v", err)
}
got, err := os.ReadFile(dst)
if err != nil {
t.Fatalf("read back: %v", err)
}
if string(got) != string(want) {
t.Errorf("contents = %q, want %q", got, want)
}
}
// An optional copy whose source lacks the file must leave a valid destination intact.
func TestWriteToFile_PreservesDestinationWhenOptionalSourceMissing(t *testing.T) {
dir := t.TempDir()
dst := filepath.Join(dir, "vol_42.ecsum")
original := []byte("valid existing ecsum sidecar")
if err := os.WriteFile(dst, original, 0o644); err != nil {
t.Fatalf("seed file: %v", err)
}
stream := &fakeCopyFileStream{} // no responses -> source file absent
if _, err := writeToFile(stream, dst, util.NewWriteThrottler(0), false, true, nil); err != nil {
t.Fatalf("writeToFile should not error when an optional source is absent: %v", err)
}
got, err := os.ReadFile(dst)
if err != nil {
t.Fatalf("destination sidecar should be preserved; read: %v", err)
}
if string(got) != string(original) {
t.Errorf("destination overwritten/truncated: got %q, want %q", got, original)
}
if _, statErr := os.Stat(dst + ".copying"); !os.IsNotExist(statErr) {
t.Errorf("temp .copying file should be cleaned up; stat err = %v", statErr)
}
}
// An optional copy whose source has the file commits it over any stale destination.
func TestWriteToFile_CommitsOptionalCopyWhenSourcePresent(t *testing.T) {
dir := t.TempDir()
dst := filepath.Join(dir, "vol_42.ecsum")
if err := os.WriteFile(dst, []byte("stale"), 0o644); err != nil {
t.Fatalf("seed file: %v", err)
}
want := []byte("fresh ecsum from source")
stream := &fakeCopyFileStream{
responses: []*volume_server_pb.CopyFileResponse{
{FileContent: want, ModifiedTsNs: 42},
},
}
if _, err := writeToFile(stream, dst, util.NewWriteThrottler(0), false, true, nil); err != nil {
t.Fatalf("writeToFile failed on present optional source: %v", err)
}
got, err := os.ReadFile(dst)
if err != nil {
t.Fatalf("read back: %v", err)
}
if string(got) != string(want) {
t.Errorf("contents = %q, want %q", got, want)
}
if _, statErr := os.Stat(dst + ".copying"); !os.IsNotExist(statErr) {
t.Errorf("temp .copying file should be renamed away; stat err = %v", statErr)
}
}