refact(deployer): the LLM handlers gate through the shared library
deploy_llm_dragoon/zealot/arkon now call require_image / require_bytes / require_min_mib / require_file / require_dir_files, so the deployer and the serve scripts refuse the same missing payload with the same words — the 2026-10-01 crash-loop law, enforced by construction instead of by duplicated shell. require_exec joins the library for the native-runtime gate (a compiled tree that lost its +x refuses like a missing one). relink_unit takes SYSTEMD_SYSTEM_DIR so a handler can be driven end to end in a sandbox. The library's own refusals now carry their status: a bash function that ends inside an if returns the CONDITION's status, so a gate whose last statement is its refusal printed the message and returned SUCCESS — the new seam caught it, and the gate tests pin it. New seam tests/llm_deploy_gates.bash + tests/stubs/: deploy-remote.sh's LLM handlers EXECUTED against stub systemctl/podman/sudo/ss/curl, asserting exit status, refusal text, no restart, and the pending state marker.
This commit is contained in:
Frank committed
1 parent
cb25796a6b
commit
c5a816e6a8
12 files changed
+403
-97
No files matched your search
Executable
+126
@@ -0,0 +1,126 @@
|
||||
#!/usr/bin/env bash
|
||||
# deploy_sandbox.bash — the deploy-handler seam's fixture builder.
|
||||
#
|
||||
# The seam (tests/llm_deploy_gates.bats) EXECUTES scripts/deploy-remote.sh's
|
||||
# LLM handlers with every host touchpoint stubbed (tests/stubs/) and every
|
||||
# artifact pointed at a fixture, so the assertions are the handler's exit
|
||||
# status, its refusal text, and what it ASKED systemd/podman to do.
|
||||
#
|
||||
# Usage:
|
||||
# source tests/deploy_sandbox.bash
|
||||
# sandbox_setup
|
||||
# run_handler dankserver frank-archon
|
||||
# sandbox_teardown
|
||||
#
|
||||
# After sandbox_setup the caller owns:
|
||||
# $STAGE the temp root (payload/, bin/, systemd/, state/)
|
||||
# $REMOTE_DIR the sandbox checkout (a git clone; the handler
|
||||
# cds into it, so relative paths resolve there)
|
||||
# $STAGE/systemctl.log every systemctl invocation
|
||||
# $STAGE/podman.log every podman invocation
|
||||
# $STAGE/systemd/<unit>.service the unit link a green deploy leaves behind
|
||||
# Env the caller sets per case: STUB_IMAGE ("" = empty storage),
|
||||
# STUB_MAIN_PID (0 = a stray process owns the port), the LLM_* overrides.
|
||||
|
||||
sandbox_setup() {
|
||||
STAGE="$(mktemp -d)"
|
||||
export HOME="$STAGE/home"
|
||||
mkdir -p "$HOME" "$STAGE/state" "$STAGE/systemd" "$STAGE/bin"
|
||||
|
||||
# Host touchpoints: the seam's stubs, on PATH under their real names.
|
||||
local stub repo_root
|
||||
repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||
for stub in "$repo_root"/tests/stubs/*; do
|
||||
ln -s "$stub" "$STAGE/bin/$(basename "$stub")"
|
||||
done
|
||||
export PATH="$STAGE/bin:$PATH"
|
||||
export STUB_SYSTEMCTL_LOG="$STAGE/systemctl.log"
|
||||
export STUB_PODMAN_LOG="$STAGE/podman.log"
|
||||
# A deploy marks state; a sandbox with no git identity would make the
|
||||
# identity, not the handler, the thing under test.
|
||||
export GIT_AUTHOR_NAME=seam GIT_AUTHOR_EMAIL=seam@localhost
|
||||
export GIT_COMMITTER_NAME=seam GIT_COMMITTER_EMAIL=seam@localhost
|
||||
export SYSTEMD_SYSTEM_DIR="$STAGE/systemd"
|
||||
export DEPLOY_STATE_DIR="$STAGE/state"
|
||||
# run_privileged pipes the password from FRANK_SUDO_PW into `sudo -S --`;
|
||||
# the stub drops it and execs, so no privilege gate hides a handler bug.
|
||||
export FRANK_SUDO_PW=test
|
||||
|
||||
# Fixture payload: 3 MiB where a size floor applies, 10 bytes elsewhere.
|
||||
mkdir -p "$STAGE/models/tokenizer"
|
||||
truncate -s 3145728 "$STAGE/models/payload.rad"
|
||||
truncate -s 10 "$STAGE/models/ck.hgn"
|
||||
truncate -s 10 "$STAGE/models/ngram.hgn"
|
||||
truncate -s 10 "$STAGE/models/vision.hgn"
|
||||
printf 'x\n' > "$STAGE/models/llama-server"
|
||||
chmod +x "$STAGE/models/llama-server"
|
||||
truncate -s 10 "$STAGE/models/model.gguf"
|
||||
truncate -s 10 "$STAGE/models/mmproj.gguf"
|
||||
local tf
|
||||
for tf in tokenizer.json chat_template.jinja tokenizer_config.json \
|
||||
merges.txt vocab.json generation_config.json; do
|
||||
printf 'x\n' > "$STAGE/models/tokenizer/$tf"
|
||||
done
|
||||
|
||||
# $HOME/serverAppConfigs is the checkout the handler works in: a git
|
||||
# WORKTREE of the caller's checkout, so the handler runs the EXACT files
|
||||
# under test (the suite lives in worktrees, where uncommitted state is
|
||||
# the norm), and it is a real git repo: the deployer refuses a revision
|
||||
# it cannot resolve. The handler cds into REMOTE_DIR, so every relative
|
||||
# path it uses resolves there.
|
||||
git -C "$repo_root" worktree add -q --detach "$HOME/serverAppConfigs" HEAD
|
||||
export REMOTE_DIR="$HOME/serverAppConfigs"
|
||||
|
||||
# Every endpoint variable is env-overridable, so the handlers see the
|
||||
# fixtures and never the real /home/dank paths.
|
||||
export STUB_IMAGE=ghcr.io/peonist-ai/halogen-flash-server@sha256:deadbeef
|
||||
export LLM_DRAGOON_IMAGE="$STUB_IMAGE"
|
||||
export LLM_DRAGOON_CKPT="$STAGE/models/ck.hgn" LLM_DRAGOON_CKPT_BYTES=10
|
||||
export LLM_DRAGOON_NGRAM="$STAGE/models/ngram.hgn" LLM_DRAGOON_NGRAM_BYTES=10
|
||||
export LLM_DRAGOON_VISION="$STAGE/models/vision.hgn" LLM_DRAGOON_VISION_BYTES=10
|
||||
export LLM_DRAGOON_TOK_DIR="$STAGE/models/tokenizer"
|
||||
export LLM_ZEALOT_RUNTIME="$STAGE/models/llama-server"
|
||||
export LLM_ZEALOT_MODEL_FILE="$STAGE/models/model.gguf"
|
||||
export LLM_ZEALOT_MMPROJ="$STAGE/models/mmproj.gguf"
|
||||
export LLM_ARCHON_ENV_FILE="$REMOTE_DIR/scripts/frank-archon.env"
|
||||
# The archon handler reads the served image out of the unit's own env
|
||||
# file, so the stub's storage must hold exactly that ref.
|
||||
ARCHON_IMAGE="$(sed -nE 's/^FRANK_ARCHON_IMAGE=(.+)$/\1/p' "$LLM_ARCHON_ENV_FILE")"
|
||||
}
|
||||
|
||||
sandbox_teardown() {
|
||||
[[ -z "${STAGE:-}" ]] && return 0
|
||||
# A worktree leaves a registration in the caller's .git/worktrees, so
|
||||
# remove it through git, not just the directory.
|
||||
[[ -d "$STAGE/home/serverAppConfigs" ]] &&
|
||||
git -C "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" \
|
||||
worktree remove --force "$STAGE/home/serverAppConfigs"
|
||||
rm -rf "$STAGE"
|
||||
}
|
||||
|
||||
run_handler() {
|
||||
local target="$1" service="$2"
|
||||
run bash "$REMOTE_DIR/scripts/deploy-remote.sh" \
|
||||
"$target" "$(git -C "$REMOTE_DIR" rev-parse HEAD)" "$service"
|
||||
}
|
||||
|
||||
# archon_payload_env — the unit's env file with the payload coordinates
|
||||
# redirected into the sandbox (and the size floor optionally lowered, which
|
||||
# is how a test builds the truncated-.rad case).
|
||||
archon_payload_env() {
|
||||
local re="s#^FRANK_ARCHON_MODEL_DIR=.*#FRANK_ARCHON_MODEL_DIR=$STAGE/models#;"
|
||||
re+=" s#^FRANK_ARCHON_MODEL_FILE=.*#FRANK_ARCHON_MODEL_FILE=payload.rad#"
|
||||
if [[ -n "${1:-}" ]]; then
|
||||
re+="; s#^FRANK_ARCHON_RAD_MIN_MIB=.*#FRANK_ARCHON_RAD_MIN_MIB=$1#"
|
||||
fi
|
||||
sed -E "$re" "$LLM_ARCHON_ENV_FILE" > "$STAGE/archon.env"
|
||||
export LLM_ARCHON_ENV_FILE="$STAGE/archon.env"
|
||||
}
|
||||
|
||||
restarts_requested() {
|
||||
# grep -c prints 0 and exits 1 on no match; the count, not the status,
|
||||
# is what the assertions read.
|
||||
local n=0
|
||||
[[ -f "$STAGE/systemctl.log" ]] && n="$(grep -c 'restart ' "$STAGE/systemctl.log")"
|
||||
printf '%s\n' "$n"
|
||||
}
|
||||
Reference in new issue
Block a user