-
Notifications
You must be signed in to change notification settings - Fork 38.7k
qa: Verify clean shutdown on startup failure #30660
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
879243e
6ad21b4
9b24a40
1f639ef
28e282e
10845cd
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -0,0 +1,172 @@ | ||||||
| #!/usr/bin/env python3 | ||||||
| # Copyright (c) 2025-present The Bitcoin Core developers | ||||||
| # Distributed under the MIT software license, see the accompanying | ||||||
| # file COPYING or http://www.opensource.org/licenses/mit-license.php. | ||||||
| """ | ||||||
| Verify framework startup failures only raise one exception since | ||||||
| multiple exceptions being raised muddies the waters of what actually | ||||||
| went wrong. We should maintain this bar of only raising one exception as | ||||||
| long as additional maintenance and complexity is low. | ||||||
| Test relaunches itself into child processes in order to trigger failures | ||||||
| without the parent process' BitcoinTestFramework also failing. | ||||||
| """ | ||||||
|
|
||||||
| from test_framework.util import ( | ||||||
| assert_raises_message, | ||||||
| rpc_port, | ||||||
| ) | ||||||
| from test_framework.test_framework import BitcoinTestFramework | ||||||
|
|
||||||
| from hashlib import md5 | ||||||
| from os import linesep | ||||||
| import re | ||||||
| import subprocess | ||||||
| import sys | ||||||
| import time | ||||||
|
|
||||||
| class FeatureFrameworkStartupFailures(BitcoinTestFramework): | ||||||
| def set_test_params(self): | ||||||
| self.num_nodes = 1 | ||||||
|
|
||||||
| def setup_network(self): | ||||||
| # Don't start the node yet, as we want to measure during run_test. | ||||||
| self.add_nodes(self.num_nodes, self.extra_args) | ||||||
|
|
||||||
| # Launches a child test process that runs this same file, but instantiates | ||||||
| # a child test. Verifies that it raises only the expected exception, once. | ||||||
| def _verify_startup_failure(self, test, internal_args, expected_exception): | ||||||
| # Inherit args from parent, only modifying tmpdir so children don't fail | ||||||
| # as a cause of colliding with the parent dir. | ||||||
| parent_args = sys.argv.copy() | ||||||
| assert self.options.tmpdir, "Framework should always set tmpdir." | ||||||
| i, path = next(((i, m[1]) for i, arg in enumerate(parent_args) if (m := re.match(r'--tm(?:p(?:d(?:ir?)?)?)?=(.+)', arg))), | ||||||
| (len(parent_args), self.options.tmpdir)) | ||||||
|
Comment on lines
+43
to
+44
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. In commit "qa: Add feature_framework_startup_failures.py" (10845cd) This line is pretty dense. Might suggest adding a comment like "Get position and value of the first --tmpdir option, or the end position and self.options.tmpdir if none is specified." so it's not necessary to spend time deciphering this to understand the rest of the code. Also I think it would probably be more correct to Or actually, maybe this is not necessary at all given that argparse will use the last value? Following seems to work without a problem assert self.options.tmpdir, "Framework should always set tmpdir."
subdir = md5(expected_exception.encode('utf-8')).hexdigest()[:8]
args = [sys.executable] + sys.argv + [f"--tmpdir={self.options.tmpdir}/{subdir}", f"--internal_test={test.__name__}"] + internal_args
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I like your final version for its simplicity and also being more correct as currently we only mutate the first found instance. |
||||||
| subdir = md5(expected_exception.encode('utf-8')).hexdigest()[:8] | ||||||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🥲
Suggested change
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I know right? :) Was aiming for speed, not pseudo-collision-resistance. |
||||||
| parent_args[i:i + 1] = [f"--tmpdir={path}/{subdir}"] | ||||||
| args = [sys.executable] + parent_args + [f"--internal_test={test.__name__}"] + internal_args | ||||||
|
|
||||||
| try: | ||||||
| # The subprocess encoding argument gives different results for e.output | ||||||
| # on Linux/Windows, so handle decoding by ourselves for consistency. | ||||||
| output = subprocess.run(args, timeout=60 * self.options.timeout_factor, | ||||||
| stdout=subprocess.PIPE, stderr=subprocess.STDOUT).stdout.decode("utf-8") | ||||||
| except subprocess.TimeoutExpired as e: | ||||||
| print("Unexpected child process timeout!\n" | ||||||
| "WARNING: Timeouts like this halt execution of TestNode logic, " | ||||||
| "meaning dangling bitcoind processes are to be expected.\n" | ||||||
| f"<CHILD OUTPUT BEGIN>\n{e.output.decode('utf-8')}\n<CHILD OUTPUT END>", | ||||||
| file=sys.stderr) | ||||||
| raise | ||||||
|
|
||||||
| errors = [] | ||||||
| if (n := output.count("Traceback")) != 1: | ||||||
| errors.append(f"Found {n}/1 tracebacks - expecting exactly one with no knock-on exceptions.") | ||||||
| if (n := len(re.findall(expected_exception, output))) != 1: | ||||||
| errors.append(f"Found {n}/1 occurrences of the specific exception: {expected_exception}") | ||||||
| if (n := output.count("Test failed. Test logging available at")) != 1: | ||||||
| errors.append(f"Found {n}/1 test failure output messages.") | ||||||
|
|
||||||
| assert not errors, f"Child test didn't contain (only) expected errors:\n{linesep.join(errors)}\n<CHILD OUTPUT BEGIN>\n{output}\n<CHILD OUTPUT END>\n" | ||||||
|
|
||||||
| def run_test(self): | ||||||
| self.log.info("Verifying _verify_startup_failure() functionality (self-check).") | ||||||
| assert_raises_message( | ||||||
| AssertionError, | ||||||
| ("Child test didn't contain (only) expected errors:\n" + | ||||||
| linesep.join(["Found 0/1 tracebacks - expecting exactly one with no knock-on exceptions.", | ||||||
| "Found 0/1 occurrences of the specific exception: NonExistentError", | ||||||
| "Found 0/1 test failure output messages."])).encode("unicode_escape").decode("utf-8"), | ||||||
|
Comment on lines
+76
to
+79
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. In commit "qa: Add feature_framework_startup_failures.py" (10845cd) I think all these nested string operations make this code hard to decipher, and flattening could make it more readable. Would suggest: --- a/test/functional/feature_framework_startup_failures.py
+++ b/test/functional/feature_framework_startup_failures.py
@@ -71,12 +71,13 @@ class FeatureFrameworkStartupFailures(BitcoinTestFramework):
def run_test(self):
self.log.info("Verifying _verify_startup_failure() functionality (self-check).")
+ eol = linesep.encode("unicode_escape").decode("utf8")
assert_raises_message(
AssertionError,
- ("Child test didn't contain (only) expected errors:\n" +
- linesep.join(["Found 0/1 tracebacks - expecting exactly one with no knock-on exceptions.",
- "Found 0/1 occurrences of the specific exception: NonExistentError",
- "Found 0/1 test failure output messages."])).encode("unicode_escape").decode("utf-8"),
+ (rf"Child test didn't contain (only) expected errors:\n"
+ rf"Found 0/1 tracebacks - expecting exactly one with no knock-on exceptions.{eol}"
+ rf"Found 0/1 occurrences of the specific exception: NonExistentError{eol}"
+ rf"Found 0/1 test failure output messages.{eol}"),
self._verify_startup_failure,
TestSuccess, [],
"NonExistentError",
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
|
||||||
| self._verify_startup_failure, | ||||||
| TestSuccess, [], | ||||||
| "NonExistentError", | ||||||
| ) | ||||||
|
|
||||||
| self.log.info("Parent process is measuring node startup duration in order to obtain a reasonable timeout value for later test...") | ||||||
| node_start_time = time.time() | ||||||
| self.nodes[0].start() | ||||||
| self.nodes[0].wait_for_rpc_connection() | ||||||
| node_start_duration = time.time() - node_start_time | ||||||
| self.nodes[0].stop_node() | ||||||
| self.log.info(f"...measured {node_start_duration:.1f}s.") | ||||||
|
|
||||||
| self.log.info("Verifying inability to connect to bitcoind's RPC interface due to wrong port results in one exception containing at least one OSError.") | ||||||
| self._verify_startup_failure( | ||||||
| TestWrongRpcPortStartupFailure, [f"--internal_node_start_duration={node_start_duration}"], | ||||||
| r"AssertionError: \[node 0\] Unable to connect to bitcoind after \d+s \(ignored errors: {[^}]*'OSError \w+'?: \d+[^}]*}, latest error: \w+\([^)]+\)\)" | ||||||
| ) | ||||||
|
|
||||||
| self.log.info("Verifying startup failure due to invalid arg results in only one exception.") | ||||||
| self._verify_startup_failure( | ||||||
| TestInitErrorStartupFailure, [], | ||||||
| r"FailedToStartError: \[node 0\] bitcoind exited with status 1 during initialization\. Error: Error parsing command line arguments: Invalid parameter -nonexistentarg" | ||||||
| ) | ||||||
|
|
||||||
| self.log.info("Verifying start() then stop_node() on a node without wait_for_rpc_connection() in between raises an assert.") | ||||||
| self._verify_startup_failure( | ||||||
| TestStartStopStartupFailure, [], | ||||||
| r"AssertionError: \[node 0\] Should only call stop_node\(\) on a running node after wait_for_rpc_connection\(\) succeeded\. Did you forget to call the latter after start\(\)\? Not connected to process: \d+" | ||||||
| ) | ||||||
|
|
||||||
| class InternalTestMixin: | ||||||
| def add_options(self, parser): | ||||||
| # Just here to silence unrecognized argument error, we actually read the value in the if-main at the bottom. | ||||||
| parser.add_argument("--internal_test", dest="internal_never_read", help="ONLY TO BE USED WHEN TEST RELAUNCHES ITSELF") | ||||||
|
|
||||||
| class TestWrongRpcPortStartupFailure(InternalTestMixin, BitcoinTestFramework): | ||||||
| def add_options(self, parser): | ||||||
| parser.add_argument("--internal_node_start_duration", dest="node_start_duration", help="ONLY TO BE USED WHEN TEST RELAUNCHES ITSELF", type=float) | ||||||
| InternalTestMixin.add_options(self, parser) | ||||||
|
|
||||||
| def set_test_params(self): | ||||||
| self.num_nodes = 1 | ||||||
| # Override RPC listen port to something TestNode isn't expecting so that | ||||||
| # we are unable to establish an RPC connection. | ||||||
| self.extra_args = [[f"-rpcport={rpc_port(2)}"]] | ||||||
| # Override the timeout to avoid waiting unnecessarily long to realize | ||||||
| # nothing is on that port. Divide by timeout_factor to counter | ||||||
| # multiplication in base, 2 * node_start_duration should be enough. | ||||||
| self.rpc_timeout = max(3, 2 * self.options.node_start_duration) / self.options.timeout_factor | ||||||
|
|
||||||
| def run_test(self): | ||||||
| assert False, "Should have failed earlier during startup." | ||||||
hodlinator marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||||||
|
|
||||||
| class TestInitErrorStartupFailure(InternalTestMixin, BitcoinTestFramework): | ||||||
| def set_test_params(self): | ||||||
| self.num_nodes = 1 | ||||||
| self.extra_args = [["-nonexistentarg"]] | ||||||
|
|
||||||
| def run_test(self): | ||||||
| assert False, "Should have failed earlier during startup." | ||||||
|
|
||||||
| class TestStartStopStartupFailure(InternalTestMixin, BitcoinTestFramework): | ||||||
| def set_test_params(self): | ||||||
| self.num_nodes = 1 | ||||||
|
|
||||||
| def setup_network(self): | ||||||
| self.add_nodes(self.num_nodes, self.extra_args) | ||||||
| self.nodes[0].start() | ||||||
| self.nodes[0].stop_node() | ||||||
| assert False, "stop_node() should raise an exception when we haven't called wait_for_rpc_connection()" | ||||||
|
|
||||||
| def run_test(self): | ||||||
| assert False, "Should have failed earlier during startup." | ||||||
|
|
||||||
| class TestSuccess(InternalTestMixin, BitcoinTestFramework): | ||||||
| def set_test_params(self): | ||||||
| self.num_nodes = 1 | ||||||
|
|
||||||
| def setup_network(self): | ||||||
| pass # Don't need to start our node. | ||||||
|
|
||||||
| def run_test(self): | ||||||
| pass # Just succeed. | ||||||
|
|
||||||
|
|
||||||
| if __name__ == '__main__': | ||||||
| if class_name := next((m[1] for arg in sys.argv[1:] if (m := re.match(r'--internal_test=(.+)', arg))), None): | ||||||
| internal_test = globals().get(class_name) | ||||||
| assert internal_test, f"Unrecognized test: {class_name}" | ||||||
| internal_test(__file__).main() | ||||||
| else: | ||||||
| FeatureFrameworkStartupFailures(__file__).main() | ||||||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,5 +1,5 @@ | ||
| #!/usr/bin/env python3 | ||
| # Copyright (c) 2017-2022 The Bitcoin Core developers | ||
| # Copyright (c) 2017-present The Bitcoin Core developers | ||
| # Distributed under the MIT software license, see the accompanying | ||
| # file COPYING or http://www.opensource.org/licenses/mit-license.php. | ||
| """Class for bitcoind node under test""" | ||
|
|
@@ -8,7 +8,6 @@ | |
| import decimal | ||
| import errno | ||
| from enum import Enum | ||
| import http.client | ||
| import json | ||
| import logging | ||
| import os | ||
|
|
@@ -265,6 +264,8 @@ def wait_for_rpc_connection(self, *, wait_for_import=True): | |
| """Sets up an RPC connection to the bitcoind process. Returns False if unable to connect.""" | ||
| # Poll at a rate of four times per second | ||
| poll_per_s = 4 | ||
| suppressed_errors = collections.defaultdict(int) | ||
| latest_error = "" | ||
| for _ in range(poll_per_s * self.rpc_timeout): | ||
| if self.process.poll() is not None: | ||
| # Attach abrupt shutdown error/s to the exception message | ||
|
|
@@ -305,33 +306,46 @@ def wait_for_rpc_connection(self, *, wait_for_import=True): | |
| # overhead is trivial, and the added guarantees are worth | ||
| # the minimal performance cost. | ||
| self.log.debug("RPC successfully started") | ||
| # Set rpc_connected even if we are in use_cli mode so that we know we can call self.stop() if needed. | ||
| self.rpc_connected = True | ||
| if self.use_cli: | ||
| return | ||
| self.rpc = rpc | ||
| self.rpc_connected = True | ||
| self.url = self.rpc.rpc_url | ||
| return | ||
| except JSONRPCException as e: # Initialization phase | ||
| except JSONRPCException as e: | ||
| # Suppress these as they are expected during initialization. | ||
| # -28 RPC in warmup | ||
| # -342 Service unavailable, RPC server started but is shutting down due to error | ||
| if e.error['code'] != -28 and e.error['code'] != -342: | ||
| # -342 Service unavailable, could be starting up or shutting down | ||
| if e.error['code'] not in [-28, -342]: | ||
| raise # unknown JSON RPC exception | ||
| except ConnectionResetError: | ||
| # This might happen when the RPC server is in warmup, but shut down before the call to getblockcount | ||
| # succeeds. Try again to properly raise the FailedToStartError | ||
| pass | ||
| suppressed_errors[f"JSONRPCException {e.error['code']}"] += 1 | ||
| latest_error = repr(e) | ||
| except OSError as e: | ||
| if e.errno == errno.ETIMEDOUT: | ||
| pass # Treat identical to ConnectionResetError | ||
| elif e.errno == errno.ECONNREFUSED: | ||
| pass # Port not yet open? | ||
| else: | ||
| error_num = e.errno | ||
| # Work around issue where socket timeouts don't have errno set. | ||
| # https://github.com/python/cpython/issues/109601 | ||
| if error_num is None and isinstance(e, TimeoutError): | ||
| error_num = errno.ETIMEDOUT | ||
ryanofsky marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
|
|
||
| # Suppress similarly to the above JSONRPCException errors. | ||
| if error_num not in [ | ||
| errno.ECONNRESET, # This might happen when the RPC server is in warmup, | ||
| # but shut down before the call to getblockcount succeeds. | ||
| errno.ETIMEDOUT, # Treat identical to ECONNRESET | ||
| errno.ECONNREFUSED # Port not yet open? | ||
| ]: | ||
| raise # unknown OS error | ||
| except ValueError as e: # cookie file not found and no rpcuser or rpcpassword; bitcoind is still starting | ||
| suppressed_errors[f"OSError {errno.errorcode[error_num]}"] += 1 | ||
hodlinator marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
| latest_error = repr(e) | ||
| except ValueError as e: | ||
| # Suppress if cookie file isn't generated yet and no rpcuser or rpcpassword; bitcoind may be starting. | ||
| if "No RPC credentials" not in str(e): | ||
| raise | ||
| suppressed_errors["missing_credentials"] += 1 | ||
| latest_error = repr(e) | ||
| time.sleep(1.0 / poll_per_s) | ||
| self._raise_assertion_error("Unable to connect to bitcoind after {}s".format(self.rpc_timeout)) | ||
| self._raise_assertion_error(f"Unable to connect to bitcoind after {self.rpc_timeout}s (ignored errors: {str(dict(suppressed_errors))}, latest error: {latest_error})") | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. In "qa: Include ignored errors in RPC connection timeout" 6ad21b4 This is an example error after this change I think it will better if it will be consistent e.g
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. re: #30660 (comment) Suggestion here seems to be to replace latest error
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The ignored errors map are more of a categorization, while I intentionally wanted to include the full representation for the one latest error. I agree there is a drawback in them looking like different errors. Maybe something like this would be better? |
||
|
|
||
| def wait_for_cookie_credentials(self): | ||
| """Ensures auth cookie credentials can be read, e.g. for testing CLI with -rpcwait before RPC connection is up.""" | ||
|
|
@@ -388,15 +402,15 @@ def stop_node(self, expected_stderr='', *, wait=0, wait_until_stopped=True): | |
| """Stop the node.""" | ||
| if not self.running: | ||
| return | ||
| assert self.rpc_connected, self._node_msg( | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. In "qa: Only allow calling TestNode.stop() after connecting" 9b24a40 I am not sure whether this new error message is better, I think I will prefer the previous one as there is a case where the test node has start without a cookie file, hence And when you call stop_node it will tell you that there is no RPC connection.
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. re: #30660 (comment) I didn't look into it closely but I think I don't understand why wait_for_rpc_connection should not be called if stop if called. If there's no cookie file because password authentication is used instead for example, i'd think you should still need for the RPC interface to wait before sending the stop RPC
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
If you can pinpoint a specific test that calls |
||
| "Should only call stop_node() on a running node after wait_for_rpc_connection() succeeded. " | ||
| f"Did you forget to call the latter after start()? Not connected to process: {self.process.pid}") | ||
| self.log.debug("Stopping node") | ||
| try: | ||
| # Do not use wait argument when testing older nodes, e.g. in wallet_backwards_compatibility.py | ||
| if self.version_is_at_least(180000): | ||
| self.stop(wait=wait) | ||
| else: | ||
| self.stop() | ||
| except http.client.CannotSendRequest: | ||
| self.log.exception("Unable to stop node.") | ||
| # Do not use wait argument when testing older nodes, e.g. in wallet_backwards_compatibility.py | ||
| if self.version_is_at_least(180000): | ||
| self.stop(wait=wait) | ||
| else: | ||
| self.stop() | ||
|
|
||
| # If there are any running perf processes, stop them. | ||
| for profile_name in tuple(self.perf_subprocesses.keys()): | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -101,10 +101,9 @@ def assert_raises_message(exc, message, fun, *args, **kwds): | |
| except JSONRPCException: | ||
| raise AssertionError("Use assert_raises_rpc_error() to test RPC failures") | ||
| except exc as e: | ||
| if message is not None and message not in e.error['message']: | ||
| raise AssertionError( | ||
| "Expected substring not found in error message:\nsubstring: '{}'\nerror message: '{}'.".format( | ||
| message, e.error['message'])) | ||
| if message is not None and message not in repr(e): | ||
| raise AssertionError("Expected substring not found in exception:\n" | ||
| f"substring: '{message}'\nexception: {repr(e)}.") | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. In commit "qa: assert_raises_message() - Stop assuming certain structure for exceptions" (28e282e) Would be nice if commit message mentioned why this change is being made. Currently there's no explanation and the change seems pretty random. Also could replace
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Since it's been merged already, I'll add some more context here: AFAIK all existing calls to I'm not married to using |
||
| except Exception as e: | ||
| raise AssertionError("Unexpected exception raised: " + type(e).__name__) | ||
| else: | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In commit "qa: Add feature_framework_startup_failures.py" (10845cd)
Would suggest
s/only modifying tmpdir/just appending a unique suffix to tmpdir/to give a little more context and help the next part of the comment make sense.