95f5703372
CI / changes (pull_request) Successful in 1s
CI / unit (pull_request) Successful in 10s
CI / integration (pull_request) Successful in 15s
CI / ui (pull_request) Successful in 53s
CI / gate (pull_request) Successful in 0s
CI / deploy (pull_request) Successful in 1m2s
The seed-drift guard shipped as refuse-boot: the backend exited when BACKEND_DICT_VERSION disagreed with the flat dir's recorded .seed_version. On the test contour that turned a harmless-in-intent action — bumping the TEST_DICT_VERSION variable to the active release (v1.2.1) on a volume seeded as v1.0.0 — into a crash loop, because DICT_VERSION is the *seed* of a fresh volume, not the active version (which the admin console drives). Make the marker authoritative instead: OpenWithVersions resolves the flat dir's version from .seed_version when present and ignores bootVersion on an already-seeded volume; bootVersion only seeds a fresh volume's marker. So a bumped build seed on a live volume is a no-op (it can't relabel live bytes and can't void games pinned to the prior label), and it correctly seeds the next fresh volume. The subdirectory scan now skips the resolved seed, so a version also present as a subdir (e.g. v1.2.1 uploaded via the console while the build seed is bumped to v1.2.1) is still loaded rather than shadowed by the flat bytes. Tests: marker-wins over a bumped boot version; a bumped boot keeps the matching subdir resident (the live-contour case). Docs updated (ARCHITECTURE §5, READMEs, compose/.env, PRERELEASE DV) from "refuses to boot" to "marker wins / ignored". Verified locally against v1.2.1: gofmt, build, vet, unit, integration green.
54 lines
2.3 KiB
Go
54 lines
2.3 KiB
Go
package engine
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
)
|
|
|
|
// seedMarkerFile names the file, in the flat dictionary directory, that records the
|
|
// version the directory was first seeded as. It is dot-prefixed so OpenWithVersions'
|
|
// version scan skips it (like the .staging upload area).
|
|
const seedMarkerFile = ".seed_version"
|
|
|
|
// resolveSeedVersion returns the version label the flat dictionary directory is
|
|
// addressed by, recording it on first use.
|
|
//
|
|
// The contour's dictionary lives on a named volume seeded from the image once and
|
|
// never re-seeded (deploy/docker-compose.yml). The flat DAWGs carry no embedded
|
|
// version, so the version a volume was first seeded as is recorded in a
|
|
// .seed_version marker and is **authoritative** from then on:
|
|
//
|
|
// - fresh directory (no marker): record bootVersion (the build's
|
|
// BACKEND_DICT_VERSION) and return it — the seed of a fresh volume;
|
|
// - already-seeded directory: return the recorded marker and ignore bootVersion.
|
|
//
|
|
// So bumping the build seed on a live volume is a harmless no-op (it only takes
|
|
// effect on a future fresh volume) instead of relabelling the already-seeded bytes —
|
|
// which would void games pinned to the prior label and mis-serve new ones. New games
|
|
// still pin the active version (DB-persisted, set by the admin console), which is the
|
|
// real way a running contour moves to a new release.
|
|
//
|
|
// A directory that cannot be written makes the first record fail; that also breaks
|
|
// the admin console (which writes version subdirectories here), so the error is
|
|
// returned rather than swallowed, matching the package's fail-loud dictionary setup.
|
|
func resolveSeedVersion(dir, bootVersion string) (string, error) {
|
|
path := filepath.Join(dir, seedMarkerFile)
|
|
data, err := os.ReadFile(path)
|
|
if err != nil && !errors.Is(err, os.ErrNotExist) {
|
|
return "", fmt.Errorf("engine: read dictionary seed marker %s: %w", path, err)
|
|
}
|
|
if err == nil {
|
|
if recorded := strings.TrimSpace(string(data)); recorded != "" {
|
|
return recorded, nil
|
|
}
|
|
// An empty/corrupt marker falls through and is rewritten from bootVersion.
|
|
}
|
|
if werr := os.WriteFile(path, []byte(bootVersion+"\n"), 0o644); werr != nil {
|
|
return "", fmt.Errorf("engine: record dictionary seed marker %s: %w", path, werr)
|
|
}
|
|
return bootVersion, nil
|
|
}
|