Frank
8001132744
New seams (written first, red against the pre-merge tree): - llm_units.bats: every scripts/*.service unit points at files that exist in this repo (the merged checkout path), env files included - llm_secrets.bats: the live sudo password is never tracked (the vllmScripts AGENTS.md once documented it) - deployment_flow.bats: deploy.sh must restart the LLM services on both targets and health-check both endpoints (7770, 52625) - helpers.bash: has_no_leaked_sudo_pw (two-part assembly, same pattern as the gitea check)
81 lines
2.9 KiB
Bash
81 lines
2.9 KiB
Bash
#!/usr/bin/env bash
|
|
# Seam: LLM systemd unit integrity.
|
|
# Every scripts/*.service unit must point at files that exist in this repo.
|
|
# The units reference absolute paths on the target checkout
|
|
# (/home/dank/serverAppConfigs/...); the relative part of each path must
|
|
# resolve to a tracked file here. A unit that points at a retired checkout
|
|
# path (the old vllmScripts layout) fails this seam.
|
|
|
|
load helpers
|
|
|
|
TARGET_DIR="/home/dank/serverAppConfigs"
|
|
|
|
# unit_repo_path <unit-file> — for each absolute path in the unit's
|
|
# ExecStart and Environment lines, print the repo-relative path if it is
|
|
# rooted at $TARGET_DIR, or "MISSING:<abs>" if the relative file does not
|
|
# exist in the repo, or "FOREIGN:<abs>" if it is rooted elsewhere.
|
|
unit_repo_path() {
|
|
local unit="$1"
|
|
local line path rel
|
|
while IFS= read -r line; do
|
|
path="${line#*=}"
|
|
path="${path#Environment=\"}"
|
|
path="${path%\"}"
|
|
# keep only the value after the last '=' for VAR=/abs/path pairs
|
|
if [[ "$path" == *=* && "$path" != "$TARGET_DIR"* ]]; then
|
|
path="${path##*=}"
|
|
fi
|
|
if [[ "$path" == "$TARGET_DIR"/* ]]; then
|
|
rel="${path#"$TARGET_DIR"/}"
|
|
if [ -e "$REPO_ROOT/$rel" ]; then
|
|
printf 'OK\n'
|
|
else
|
|
printf 'MISSING:%s\n' "$path"
|
|
fi
|
|
else
|
|
printf 'FOREIGN:%s\n' "$path"
|
|
fi
|
|
done < <(grep -E '^(ExecStart=|Environment=)' "$unit")
|
|
}
|
|
|
|
@test "every LLM unit points at the merged repo checkout" {
|
|
local any=0 unit bad
|
|
while IFS= read -r unit; do
|
|
any=1
|
|
bad=$(unit_repo_path "$unit" | grep -v '^OK$' || true)
|
|
if [ -n "$bad" ]; then
|
|
echo "unit $(basename "$unit") has bad paths:"
|
|
echo "$bad"
|
|
return 1
|
|
fi
|
|
done < <(find "$REPO_ROOT/scripts" -name '*.service' -type f | sort)
|
|
[ "$any" -eq 1 ] || skip "no LLM units yet"
|
|
}
|
|
|
|
@test "every LLM unit references an env file that exists in the repo" {
|
|
local unit envfile
|
|
while IFS= read -r unit; do
|
|
envfile=$(grep -oE 'Environment="[^"]*ENV_FILE=[^"]*"' "$unit" \
|
|
| head -1 | sed -E 's/Environment="[^=]*=//; s/"$//')
|
|
[ -n "$envfile" ] || continue
|
|
local rel="${envfile#"$TARGET_DIR"/}"
|
|
[ -f "$REPO_ROOT/$rel" ] || {
|
|
echo "unit $(basename "$unit") env file $envfile not in repo"
|
|
return 1
|
|
}
|
|
done < <(find "$REPO_ROOT/scripts" -name '*.service' -type f | sort)
|
|
}
|
|
|
|
@test "LLM serve scripts exist for every unit" {
|
|
local unit svc script
|
|
while IFS= read -r unit; do
|
|
svc=$(basename "$unit" .service)
|
|
script=$(grep -E '^ExecStart=' "$unit" | head -1 | sed 's/^ExecStart=//')
|
|
local rel="${script#"$TARGET_DIR"/}"
|
|
[ -f "$REPO_ROOT/$rel" ] || {
|
|
echo "unit $svc: ExecStart script $script not in repo"
|
|
return 1
|
|
}
|
|
done < <(find "$REPO_ROOT/scripts" -name '*.service' -type f | sort)
|
|
}
|