anti
f2b3393669
Replaces LICENSE (GPLv3 -> AGPLv3) and prepends `SPDX-License-Identifier: AGPL-3.0-or-later` to every source file across decnet/, decnet_web/, tests/, scripts/, and tools/. Rationale: closes the GPLv3 ASP loophole so any party operating a modified DECNET as a network service must offer their modified source. Personal copyright (Samuel Paschuan) + inbound=outbound contributions make a future unilateral relicense infeasible. - LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt) - COPYRIGHT: project copyright notice - tools/add_spdx_headers.py: idempotent header injector (shebang- and PEP 263-aware) Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh). No behavior change; comments only.
193 lines
6.9 KiB
Python
193 lines
6.9 KiB
Python
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
"""POST /deckies/deploy auto-mode: master + swarm hosts → shard to workers."""
|
|
from __future__ import annotations
|
|
|
|
from unittest.mock import patch, AsyncMock
|
|
|
|
import pytest
|
|
|
|
from decnet.web.dependencies import repo
|
|
from decnet.web.db.models import SwarmDeployResponse, SwarmHostResult
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def contract_test_mode(monkeypatch):
|
|
monkeypatch.setenv("DECNET_CONTRACT_TEST", "true")
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def mock_network():
|
|
with patch("decnet.web.router.fleet.api_deploy_deckies.get_host_ip", return_value="192.168.1.100"):
|
|
with patch("decnet.web.router.fleet.api_deploy_deckies.detect_interface", return_value="eth0"):
|
|
with patch("decnet.web.router.fleet.api_deploy_deckies.detect_subnet", return_value=("192.168.1.0/24", "192.168.1.1")):
|
|
yield
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_deploy_automode_unihost_when_no_swarm_hosts(client, auth_token, monkeypatch):
|
|
"""No swarm hosts enrolled → local unihost deploy returns 202 with lifecycle ids."""
|
|
monkeypatch.setenv("DECNET_MODE", "master")
|
|
for row in await repo.list_swarm_hosts():
|
|
await repo.delete_swarm_host(row["uuid"])
|
|
await repo.set_state("deployment", None)
|
|
|
|
ini = "[decky-solo]\nservices = ssh\n"
|
|
resp = await client.post(
|
|
"/api/v1/deckies/deploy",
|
|
json={"ini_content": ini},
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
)
|
|
assert resp.status_code == 202, resp.text
|
|
body = resp.json()
|
|
assert body["mode"] == "unihost"
|
|
assert len(body["lifecycle_ids"]) == 1
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_deploy_automode_shards_when_swarm_host_enrolled(client, auth_token, monkeypatch):
|
|
"""Master + one active swarm host → swarm mode, lifecycle rows + 202.
|
|
|
|
The handler no longer awaits dispatch synchronously — it commits the
|
|
new shape, creates lifecycle rows, and spawns the runner. We
|
|
verify the commit + the per-decky host_uuid assignment via the
|
|
committed deployment state, and that 202 carries one lifecycle id
|
|
per decky."""
|
|
monkeypatch.setenv("DECNET_MODE", "master")
|
|
await repo.set_state("deployment", None)
|
|
|
|
for row in await repo.list_swarm_hosts():
|
|
await repo.delete_swarm_host(row["uuid"])
|
|
|
|
from datetime import datetime, timezone
|
|
await repo.add_swarm_host({
|
|
"uuid": "host-A",
|
|
"name": "worker-a",
|
|
"address": "10.0.0.50",
|
|
"agent_port": 8765,
|
|
"status": "active",
|
|
"client_cert_fingerprint": "x" * 64,
|
|
"updater_cert_fingerprint": None,
|
|
"cert_bundle_path": "/tmp/worker-a",
|
|
"enrolled_at": datetime.now(timezone.utc),
|
|
"notes": "",
|
|
})
|
|
|
|
ini = "[decky-01]\nservices = ssh\n[decky-02]\nservices = http\n"
|
|
resp = await client.post(
|
|
"/api/v1/deckies/deploy",
|
|
json={"ini_content": ini},
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
)
|
|
|
|
assert resp.status_code == 202, resp.text
|
|
body = resp.json()
|
|
assert body["mode"] == "swarm"
|
|
assert len(body["lifecycle_ids"]) == 2
|
|
|
|
committed = await repo.get_state("deployment")
|
|
assert committed is not None
|
|
cfg = committed["config"]
|
|
assert cfg["mode"] == "swarm"
|
|
assert {d["host_uuid"] for d in cfg["deckies"]} == {"host-A"}
|
|
|
|
await repo.delete_swarm_host("host-A")
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_deploy_automode_resets_stale_host_uuid(client, auth_token, monkeypatch):
|
|
"""Deckies carried over from prior state must not be dispatched to a host
|
|
uuid that no longer exists — reset + round-robin against live hosts."""
|
|
monkeypatch.setenv("DECNET_MODE", "master")
|
|
for row in await repo.list_swarm_hosts():
|
|
await repo.delete_swarm_host(row["uuid"])
|
|
|
|
from datetime import datetime, timezone
|
|
await repo.add_swarm_host({
|
|
"uuid": "host-LIVE",
|
|
"name": "live",
|
|
"address": "10.0.0.60",
|
|
"agent_port": 8765,
|
|
"status": "active",
|
|
"client_cert_fingerprint": "a" * 64,
|
|
"updater_cert_fingerprint": None,
|
|
"cert_bundle_path": "/tmp/live",
|
|
"enrolled_at": datetime.now(timezone.utc),
|
|
"notes": "",
|
|
})
|
|
|
|
# Prior state: decky-old is assigned to a now-decommissioned host.
|
|
await repo.set_state("deployment", {
|
|
"config": {
|
|
"mode": "swarm",
|
|
"interface": "eth0",
|
|
"subnet": "192.168.1.0/24",
|
|
"gateway": "192.168.1.1",
|
|
"deckies": [{
|
|
"name": "decky-old",
|
|
"ip": "192.168.1.50",
|
|
"services": ["ssh"],
|
|
"distro": "debian",
|
|
"base_image": "debian:bookworm-slim",
|
|
"hostname": "decky-old",
|
|
"host_uuid": "ghost-uuid",
|
|
}],
|
|
},
|
|
"compose_path": "",
|
|
})
|
|
|
|
ini = "[decky-new]\nservices = ssh\n"
|
|
resp = await client.post(
|
|
"/api/v1/deckies/deploy",
|
|
json={"ini_content": ini},
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
)
|
|
|
|
assert resp.status_code == 202, resp.text
|
|
committed = await repo.get_state("deployment")
|
|
assert committed is not None
|
|
cfg = committed["config"]
|
|
# The carried-over decky and the new one must both point at the live host.
|
|
assert {d["host_uuid"] for d in cfg["deckies"]} == {"host-LIVE"}
|
|
|
|
await repo.delete_swarm_host("host-LIVE")
|
|
await repo.set_state("deployment", None)
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_deploy_automode_flips_ipvlan_for_opted_in_host(client, auth_token, monkeypatch):
|
|
"""A host enrolled with use_ipvlan=True must receive a DecnetConfig with
|
|
ipvlan=True in its shard — sharding is per-host, so _worker_config flips it."""
|
|
from decnet.web.router.swarm.api_deploy_swarm import _worker_config
|
|
from decnet.config import DecnetConfig, DeckyConfig
|
|
|
|
base = DecnetConfig(
|
|
mode="swarm", interface="eth0", subnet="192.168.1.0/24", gateway="192.168.1.1",
|
|
ipvlan=False,
|
|
deckies=[DeckyConfig(
|
|
name="decky-1", ip="192.168.1.10", services=["ssh"],
|
|
distro="debian", base_image="debian:bookworm-slim", hostname="decky-1",
|
|
host_uuid="h1",
|
|
)],
|
|
)
|
|
opted_in = {"uuid": "h1", "name": "w1", "use_ipvlan": True}
|
|
opted_out = {"uuid": "h1", "name": "w1", "use_ipvlan": False}
|
|
assert _worker_config(base, base.deckies, opted_in).ipvlan is True
|
|
assert _worker_config(base, base.deckies, opted_out).ipvlan is False
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_deployment_mode_endpoint(client, auth_token, monkeypatch):
|
|
monkeypatch.setenv("DECNET_MODE", "master")
|
|
for row in await repo.list_swarm_hosts():
|
|
await repo.delete_swarm_host(row["uuid"])
|
|
|
|
resp = await client.get(
|
|
"/api/v1/system/deployment-mode",
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
)
|
|
assert resp.status_code == 200
|
|
body = resp.json()
|
|
assert body["role"] == "master"
|
|
assert body["mode"] == "unihost"
|
|
assert body["swarm_host_count"] == 0
|