1 // Copyright (C) The Arvados Authors. All rights reserved.
3 // SPDX-License-Identifier: AGPL-3.0
30 "git.arvados.org/arvados.git/lib/config"
31 "git.arvados.org/arvados.git/lib/service"
32 "git.arvados.org/arvados.git/sdk/go/arvados"
33 "git.arvados.org/arvados.git/sdk/go/ctxlog"
34 "git.arvados.org/arvados.git/sdk/go/health"
35 "github.com/fsnotify/fsnotify"
36 "github.com/sirupsen/logrus"
39 type Supervisor struct {
40 // Config file location like "/etc/arvados/config.yml", or "-"
41 // to read from Stdin (see below).
43 // Literal config file (useful for test suites). If non-empty,
44 // this is used instead of ConfigPath.
46 // Path to arvados source tree. Only used for dev/test
49 // Version number to build into binaries. Only used for
52 // "production", "development", or "test".
54 // Listening address for external services, and internal
55 // services whose InternalURLs are not explicitly configured.
56 // If blank, listen on the configured controller ExternalURL
57 // host; if that is also blank, listen on all addresses
60 // Default host:port for controller ExternalURL if not
61 // explicitly configured in config file. If blank, use a
62 // random port on ListenHost.
64 // Path to arvados-workbench2 source tree checkout.
65 Workbench2Source string
68 OwnTemporaryDatabase bool
72 logger logrus.FieldLogger
73 cluster *arvados.Cluster // nil if this is a multi-cluster supervisor
74 children map[string]*Supervisor // nil if this is a single-cluster supervisor
77 cancel context.CancelFunc
78 done chan struct{} // closed when child procs/services have shut down
79 err error // error that caused shutdown (valid when done is closed)
80 healthChecker *health.Aggregator // nil if this is a multi-cluster supervisor, or still booting
81 tasksReady map[string]chan bool
82 waitShutdown sync.WaitGroup
85 tempdir string // in production mode, this is accessible only to root
86 wwwtempdir string // in production mode, this is accessible only to www-data
88 environ []string // for child processes
91 func (super *Supervisor) Clusters() map[string]*arvados.Cluster {
92 m := map[string]*arvados.Cluster{}
93 if super.cluster != nil {
94 m[super.cluster.ClusterID] = super.cluster
96 for id, super2 := range super.children {
97 m[id] = super2.Cluster("")
102 func (super *Supervisor) Cluster(id string) *arvados.Cluster {
103 if super.children != nil {
104 return super.children[id].Cluster(id)
110 func (super *Supervisor) Start(ctx context.Context) {
111 super.logger = ctxlog.FromContext(ctx)
112 super.ctx, super.cancel = context.WithCancel(ctx)
113 super.done = make(chan struct{})
115 sigch := make(chan os.Signal)
116 signal.Notify(sigch, syscall.SIGINT, syscall.SIGTERM)
117 defer signal.Stop(sigch)
119 for sig := range sigch {
120 super.logger.WithField("signal", sig).Info("caught signal")
121 if super.err == nil {
122 super.err = fmt.Errorf("caught signal %s", sig)
128 hupch := make(chan os.Signal)
129 signal.Notify(hupch, syscall.SIGHUP)
130 defer signal.Stop(hupch)
132 for sig := range hupch {
133 super.logger.WithField("signal", sig).Info("caught signal")
134 if super.err == nil {
135 super.err = errNeedConfigReload
141 loaderStdin := super.Stdin
142 if super.ConfigYAML != "" {
143 loaderStdin = bytes.NewBufferString(super.ConfigYAML)
145 loader := config.NewLoader(loaderStdin, super.logger)
146 loader.SkipLegacy = true
147 loader.SkipAPICalls = true
148 loader.Path = super.ConfigPath
149 if super.ConfigYAML != "" {
152 cfg, err := loader.Load()
160 if super.ConfigPath != "" && super.ConfigPath != "-" && cfg.AutoReloadConfig {
161 go watchConfig(super.ctx, super.logger, super.ConfigPath, copyConfig(cfg), func() {
162 if super.err == nil {
163 super.err = errNeedConfigReload
169 if len(cfg.Clusters) > 1 {
170 super.startFederation(cfg)
173 defer close(super.done)
174 for _, super2 := range super.children {
176 if super.err == nil {
184 defer close(super.done)
185 super.cluster, super.err = cfg.GetCluster("")
186 if super.err != nil {
189 err := super.runCluster()
191 super.logger.WithError(err).Info("supervisor shut down")
192 if super.err == nil {
200 // Wait returns when all child processes and goroutines have exited.
201 func (super *Supervisor) Wait() error {
206 // startFederation starts a child Supervisor for each cluster in the
207 // given config. Each is a copy of the original/parent with the
208 // original config reduced to a single cluster.
209 func (super *Supervisor) startFederation(cfg *arvados.Config) {
210 super.children = map[string]*Supervisor{}
211 for id, cc := range cfg.Clusters {
213 yaml, err := json.Marshal(arvados.Config{Clusters: map[string]arvados.Cluster{id: cc}})
215 panic(fmt.Sprintf("json.Marshal partial config: %s", err))
217 super2.ConfigYAML = string(yaml)
218 super2.ConfigPath = "-"
219 super2.children = nil
221 if super2.ClusterType == "test" {
222 super2.Stderr = &service.LogPrefixer{
223 Writer: super.Stderr,
224 Prefix: []byte("[" + id + "] "),
227 super2.Start(super.ctx)
228 super.children[id] = &super2
232 func (super *Supervisor) runCluster() error {
233 cwd, err := os.Getwd()
237 if super.ClusterType == "test" && super.SourcePath == "" {
238 // When invoked by test suite, default to current
240 buf, err := exec.Command("git", "rev-parse", "--show-toplevel").CombinedOutput()
242 return fmt.Errorf("git rev-parse: %w", err)
244 super.SourcePath = strings.TrimSuffix(string(buf), "\n")
245 } else if !strings.HasPrefix(super.SourcePath, "/") {
246 super.SourcePath = filepath.Join(cwd, super.SourcePath)
248 super.SourcePath, err = filepath.EvalSymlinks(super.SourcePath)
253 if super.ListenHost == "" {
254 if urlhost := super.cluster.Services.Controller.ExternalURL.Host; urlhost != "" {
255 if h, _, _ := net.SplitHostPort(urlhost); h != "" {
258 super.ListenHost = urlhost
261 super.ListenHost = "0.0.0.0"
265 // Choose bin and temp dirs: /var/lib/arvados/... in
266 // production, transient tempdir otherwise.
267 if super.ClusterType == "production" {
268 // These dirs have already been created by
269 // "arvados-server install" (or by extracting a
271 super.tempdir = "/var/lib/arvados/tmp"
272 super.wwwtempdir = "/var/lib/arvados/wwwtmp"
273 super.bindir = "/var/lib/arvados/bin"
275 super.tempdir, err = ioutil.TempDir("", "arvados-server-boot-")
279 defer os.RemoveAll(super.tempdir)
280 super.wwwtempdir = super.tempdir
281 super.bindir = filepath.Join(super.tempdir, "bin")
282 if err := os.Mkdir(super.bindir, 0755); err != nil {
287 // Fill in any missing config keys, and write the resulting
288 // config in the temp dir for child services to use.
289 err = super.autofillConfig()
293 conffile, err := os.OpenFile(filepath.Join(super.wwwtempdir, "config.yml"), os.O_CREATE|os.O_WRONLY, 0644)
297 defer conffile.Close()
298 err = json.NewEncoder(conffile).Encode(arvados.Config{
299 Clusters: map[string]arvados.Cluster{
300 super.cluster.ClusterID: *super.cluster}})
304 err = conffile.Close()
308 super.configfile = conffile.Name()
310 super.environ = os.Environ()
311 super.cleanEnv([]string{"ARVADOS_"})
312 super.setEnv("ARVADOS_CONFIG", super.configfile)
313 super.setEnv("RAILS_ENV", super.ClusterType)
314 super.setEnv("TMPDIR", super.tempdir)
315 super.prependEnv("PATH", "/var/lib/arvados/bin:")
316 if super.ClusterType != "production" {
317 super.prependEnv("PATH", super.tempdir+"/bin:")
320 // Now that we have the config, replace the bootstrap logger
321 // with a new one according to the logging config.
322 loglevel := super.cluster.SystemLogs.LogLevel
323 if s := os.Getenv("ARVADOS_DEBUG"); s != "" && s != "0" {
326 super.logger = ctxlog.New(super.Stderr, super.cluster.SystemLogs.Format, loglevel).WithFields(logrus.Fields{
330 if super.SourceVersion == "" && super.ClusterType == "production" {
331 // don't need SourceVersion
332 } else if super.SourceVersion == "" {
333 // Find current source tree version.
335 err = super.RunProgram(super.ctx, ".", runOptions{output: &buf}, "git", "diff", "--shortstat")
339 dirty := buf.Len() > 0
341 err = super.RunProgram(super.ctx, ".", runOptions{output: &buf}, "git", "log", "-n1", "--format=%H")
345 super.SourceVersion = strings.TrimSpace(buf.String())
347 super.SourceVersion += "+uncommitted"
350 return errors.New("specifying a version to run is not yet supported")
353 _, err = super.installGoProgram(super.ctx, "cmd/arvados-server")
357 err = super.setupRubyEnv()
362 tasks := []supervisedTask{
363 createCertificates{},
366 runServiceCommand{name: "controller", svc: super.cluster.Services.Controller, depends: []supervisedTask{seedDatabase{}}},
367 runServiceCommand{name: "git-httpd", svc: super.cluster.Services.GitHTTP},
368 runGoProgram{src: "services/health", svc: super.cluster.Services.Health},
369 runServiceCommand{name: "keepproxy", svc: super.cluster.Services.Keepproxy, depends: []supervisedTask{runPassenger{src: "services/api"}}},
370 runServiceCommand{name: "keepstore", svc: super.cluster.Services.Keepstore},
371 runServiceCommand{name: "keep-web", svc: super.cluster.Services.WebDAV},
372 runServiceCommand{name: "ws", svc: super.cluster.Services.Websocket, depends: []supervisedTask{seedDatabase{}}},
373 installPassenger{src: "services/api"},
374 runPassenger{src: "services/api", varlibdir: "railsapi", svc: super.cluster.Services.RailsAPI, depends: []supervisedTask{createCertificates{}, seedDatabase{}, installPassenger{src: "services/api"}}},
377 if !super.NoWorkbench1 {
378 tasks = append(tasks,
379 installPassenger{src: "apps/workbench", depends: []supervisedTask{seedDatabase{}}}, // dependency ensures workbench doesn't delay api install/startup
380 runPassenger{src: "apps/workbench", varlibdir: "workbench1", svc: super.cluster.Services.Workbench1, depends: []supervisedTask{installPassenger{src: "apps/workbench"}}},
383 if !super.NoWorkbench2 {
384 tasks = append(tasks,
385 runWorkbench2{svc: super.cluster.Services.Workbench2},
388 if super.ClusterType != "test" {
389 tasks = append(tasks,
390 runServiceCommand{name: "dispatch-cloud", svc: super.cluster.Services.DispatchCloud},
391 runServiceCommand{name: "keep-balance", svc: super.cluster.Services.Keepbalance},
394 super.tasksReady = map[string]chan bool{}
395 for _, task := range tasks {
396 super.tasksReady[task.String()] = make(chan bool)
398 for _, task := range tasks {
400 fail := func(err error) {
401 if super.ctx.Err() != nil {
405 super.logger.WithField("task", task.String()).WithError(err).Error("task failed")
408 super.logger.WithField("task", task.String()).Info("starting")
409 err := task.Run(super.ctx, fail, super)
414 close(super.tasksReady[task.String()])
417 err = super.wait(super.ctx, tasks...)
421 super.logger.Info("all startup tasks are complete; starting health checks")
422 super.healthChecker = &health.Aggregator{Cluster: super.cluster}
424 super.logger.Info("shutting down")
425 super.waitShutdown.Wait()
426 return super.ctx.Err()
429 func (super *Supervisor) wait(ctx context.Context, tasks ...supervisedTask) error {
430 ticker := time.NewTicker(15 * time.Second)
432 for _, task := range tasks {
433 ch, ok := super.tasksReady[task.String()]
435 return fmt.Errorf("no such task: %s", task)
437 super.logger.WithField("task", task.String()).Info("waiting")
441 super.logger.WithField("task", task.String()).Info("ready")
443 super.logger.WithField("task", task.String()).Info("task was never ready")
446 super.logger.WithField("task", task.String()).Info("still waiting...")
455 // Stop shuts down all child processes and goroutines, and returns
456 // when all of them have exited.
457 func (super *Supervisor) Stop() {
462 // WaitReady waits for the cluster(s) to be ready to handle requests,
463 // then returns true. If startup fails, it returns false.
464 func (super *Supervisor) WaitReady() bool {
465 if super.children != nil {
466 for id, super2 := range super.children {
467 super.logger.Infof("waiting for %s to be ready", id)
468 if !super2.WaitReady() {
469 super.logger.Infof("%s startup failed", id)
472 super.logger.Infof("%s is ready", id)
474 super.logger.Info("all clusters are ready")
477 ticker := time.NewTicker(time.Second)
479 for waiting := "all"; waiting != ""; {
482 case <-super.ctx.Done():
485 if super.healthChecker == nil {
489 resp := super.healthChecker.ClusterHealth()
490 // The overall health check (resp.Health=="OK") might
491 // never pass due to missing components (like
492 // arvados-dispatch-cloud in a test cluster), so
493 // instead we wait for all configured components to
496 for target, check := range resp.Checks {
497 if check.Health != "OK" {
498 waiting += " " + target
502 super.logger.WithField("targets", waiting[1:]).Info("waiting")
508 func (super *Supervisor) prependEnv(key, prepend string) {
509 for i, s := range super.environ {
510 if strings.HasPrefix(s, key+"=") {
511 super.environ[i] = key + "=" + prepend + s[len(key)+1:]
515 super.environ = append(super.environ, key+"="+prepend)
518 func (super *Supervisor) cleanEnv(prefixes []string) {
520 for _, s := range super.environ {
522 for _, p := range prefixes {
523 if strings.HasPrefix(s, p) {
529 cleaned = append(cleaned, s)
532 super.environ = cleaned
535 func (super *Supervisor) setEnv(key, val string) {
536 for i, s := range super.environ {
537 if strings.HasPrefix(s, key+"=") {
538 super.environ[i] = key + "=" + val
542 super.environ = append(super.environ, key+"="+val)
545 // Remove all but the first occurrence of each env var.
546 func dedupEnv(in []string) []string {
547 saw := map[string]bool{}
549 for _, kv := range in {
550 if split := strings.Index(kv, "="); split < 1 {
551 panic("invalid environment var: " + kv)
552 } else if saw[kv[:split]] {
555 saw[kv[:split]] = true
556 out = append(out, kv)
562 func (super *Supervisor) installGoProgram(ctx context.Context, srcpath string) (string, error) {
563 _, basename := filepath.Split(srcpath)
564 binfile := filepath.Join(super.bindir, basename)
565 if super.ClusterType == "production" {
568 err := super.RunProgram(ctx, filepath.Join(super.SourcePath, srcpath), runOptions{env: []string{"GOBIN=" + super.bindir}}, "go", "install", "-ldflags", "-X git.arvados.org/arvados.git/lib/cmd.version="+super.SourceVersion+" -X main.version="+super.SourceVersion)
572 func (super *Supervisor) usingRVM() bool {
573 return os.Getenv("rvm_path") != ""
576 func (super *Supervisor) setupRubyEnv() error {
577 if !super.usingRVM() {
578 // (If rvm is in use, assume the caller has everything
579 // set up as desired)
580 super.cleanEnv([]string{
585 if _, err := os.Stat("/var/lib/arvados/bin/gem"); err == nil || super.ClusterType == "production" {
586 gem = "/var/lib/arvados/bin/gem"
588 cmd := exec.Command(gem, "env", "gempath")
589 if super.ClusterType == "production" {
590 cmd.Args = append([]string{"sudo", "-u", "www-data", "-E", "HOME=/var/www"}, cmd.Args...)
591 path, err := exec.LookPath("sudo")
593 return fmt.Errorf("LookPath(\"sudo\"): %w", err)
597 cmd.Stderr = super.Stderr
598 cmd.Env = super.environ
599 buf, err := cmd.Output() // /var/lib/arvados/.gem/ruby/2.5.0/bin:...
600 if err != nil || len(buf) == 0 {
601 return fmt.Errorf("gem env gempath: %w", err)
603 gempath := string(bytes.Split(buf, []byte{':'})[0])
604 super.prependEnv("PATH", gempath+"/bin:")
605 super.setEnv("GEM_HOME", gempath)
606 super.setEnv("GEM_PATH", gempath)
608 // Passenger install doesn't work unless $HOME is ~user
609 u, err := user.Current()
613 super.setEnv("HOME", u.HomeDir)
617 func (super *Supervisor) lookPath(prog string) string {
618 for _, val := range super.environ {
619 if strings.HasPrefix(val, "PATH=") {
620 for _, dir := range filepath.SplitList(val[5:]) {
621 path := filepath.Join(dir, prog)
622 if fi, err := os.Stat(path); err == nil && fi.Mode()&0111 != 0 {
631 type runOptions struct {
632 output io.Writer // attach stdout
633 env []string // add/replace environment variables
634 user string // run as specified user
638 // RunProgram runs prog with args, using dir as working directory. If ctx is
639 // cancelled while the child is running, RunProgram terminates the child, waits
640 // for it to exit, then returns.
642 // Child's environment will have our env vars, plus any given in env.
644 // Child's stdout will be written to output if non-nil, otherwise the
645 // boot command's stderr.
646 func (super *Supervisor) RunProgram(ctx context.Context, dir string, opts runOptions, prog string, args ...string) error {
647 cmdline := fmt.Sprintf("%s", append([]string{prog}, args...))
648 super.logger.WithField("command", cmdline).WithField("dir", dir).Info("executing")
653 if logprefix == "sudo" {
654 for i := 0; i < len(args); i++ {
657 } else if args[i] == "-E" || strings.Contains(args[i], "=") {
660 innerargs = args[i+1:]
665 logprefix = strings.TrimPrefix(logprefix, "/var/lib/arvados/bin/")
666 logprefix = strings.TrimPrefix(logprefix, super.tempdir+"/bin/")
667 if logprefix == "bundle" && len(innerargs) > 2 && innerargs[0] == "exec" {
668 _, dirbase := filepath.Split(dir)
669 logprefix = innerargs[1] + "@" + dirbase
670 } else if logprefix == "arvados-server" && len(args) > 1 {
673 if !strings.HasPrefix(dir, "/") {
674 logprefix = dir + ": " + logprefix
678 cmd := exec.Command(super.lookPath(prog), args...)
679 cmd.Stdin = opts.stdin
680 stdout, err := cmd.StdoutPipe()
684 stderr, err := cmd.StderrPipe()
688 logwriter := &service.LogPrefixer{Writer: super.Stderr, Prefix: []byte("[" + logprefix + "] ")}
689 var copiers sync.WaitGroup
692 io.Copy(logwriter, stderr)
697 if opts.output == nil {
698 io.Copy(logwriter, stdout)
700 io.Copy(opts.output, stdout)
705 if strings.HasPrefix(dir, "/") {
708 cmd.Dir = filepath.Join(super.SourcePath, dir)
710 env := append([]string(nil), opts.env...)
711 env = append(env, super.environ...)
712 cmd.Env = dedupEnv(env)
715 // Note: We use this approach instead of "sudo"
716 // because in certain circumstances (we are pid 1 in a
717 // docker container, and our passenger child process
718 // changes to pgid 1) the intermediate sudo process
719 // notices we have the same pgid as our child and
720 // refuses to propagate signals from us to our child,
721 // so we can't signal/shutdown our passenger/rails
722 // apps. "chpst" or "setuidgid" would work, but these
723 // few lines avoid depending on runit/daemontools.
724 u, err := user.Lookup(opts.user)
726 return fmt.Errorf("user.Lookup(%q): %w", opts.user, err)
728 uid, _ := strconv.Atoi(u.Uid)
729 gid, _ := strconv.Atoi(u.Gid)
730 cmd.SysProcAttr = &syscall.SysProcAttr{
731 Credential: &syscall.Credential{
739 defer func() { exited = true }()
742 log := ctxlog.FromContext(ctx).WithFields(logrus.Fields{"dir": dir, "cmdline": cmdline})
744 if cmd.Process == nil {
745 log.Debug("waiting for child process to start")
746 time.Sleep(time.Second / 2)
748 log.WithField("PID", cmd.Process.Pid).Debug("sending SIGTERM")
749 cmd.Process.Signal(syscall.SIGTERM)
750 time.Sleep(5 * time.Second)
754 log.WithField("PID", cmd.Process.Pid).Warn("still waiting for child process to exit 5s after SIGTERM")
766 if ctx.Err() != nil {
767 // Return "context canceled", instead of the "killed"
768 // error that was probably caused by the context being
771 } else if err != nil {
772 return fmt.Errorf("%s: error: %v", cmdline, err)
777 func (super *Supervisor) autofillConfig() error {
778 usedPort := map[string]bool{}
779 nextPort := func(host string) (string, error) {
781 port, err := availablePort(host)
783 port, err = availablePort(super.ListenHost)
791 usedPort[port] = true
795 if super.cluster.Services.Controller.ExternalURL.Host == "" {
796 h, p, err := net.SplitHostPort(super.ControllerAddr)
797 if err != nil && super.ControllerAddr != "" {
798 return fmt.Errorf("SplitHostPort(ControllerAddr %q): %w", super.ControllerAddr, err)
803 if p == "0" || p == "" {
809 super.cluster.Services.Controller.ExternalURL = arvados.URL{Scheme: "https", Host: net.JoinHostPort(h, p), Path: "/"}
811 u := url.URL(super.cluster.Services.Controller.ExternalURL)
812 defaultExtHost := u.Hostname()
813 for _, svc := range []*arvados.Service{
814 &super.cluster.Services.Controller,
815 &super.cluster.Services.DispatchCloud,
816 &super.cluster.Services.GitHTTP,
817 &super.cluster.Services.Health,
818 &super.cluster.Services.Keepproxy,
819 &super.cluster.Services.Keepstore,
820 &super.cluster.Services.RailsAPI,
821 &super.cluster.Services.WebDAV,
822 &super.cluster.Services.WebDAVDownload,
823 &super.cluster.Services.Websocket,
824 &super.cluster.Services.Workbench1,
825 &super.cluster.Services.Workbench2,
827 if svc == &super.cluster.Services.DispatchCloud && super.ClusterType == "test" {
830 if svc.ExternalURL.Host == "" {
831 port, err := nextPort(defaultExtHost)
835 host := net.JoinHostPort(defaultExtHost, port)
836 if svc == &super.cluster.Services.Controller ||
837 svc == &super.cluster.Services.GitHTTP ||
838 svc == &super.cluster.Services.Health ||
839 svc == &super.cluster.Services.Keepproxy ||
840 svc == &super.cluster.Services.WebDAV ||
841 svc == &super.cluster.Services.WebDAVDownload ||
842 svc == &super.cluster.Services.Workbench1 ||
843 svc == &super.cluster.Services.Workbench2 {
844 svc.ExternalURL = arvados.URL{Scheme: "https", Host: host, Path: "/"}
845 } else if svc == &super.cluster.Services.Websocket {
846 svc.ExternalURL = arvados.URL{Scheme: "wss", Host: host, Path: "/websocket"}
849 if super.NoWorkbench1 && svc == &super.cluster.Services.Workbench1 ||
850 super.NoWorkbench2 && svc == &super.cluster.Services.Workbench2 {
851 // When workbench1 is disabled, it gets an
852 // ExternalURL (so we have a valid listening
853 // port to write in our Nginx config) but no
854 // InternalURLs (so health checker doesn't
858 if len(svc.InternalURLs) == 0 {
859 port, err := nextPort(super.ListenHost)
863 host := net.JoinHostPort(super.ListenHost, port)
864 svc.InternalURLs = map[arvados.URL]arvados.ServiceInstance{
865 {Scheme: "http", Host: host, Path: "/"}: {},
869 if super.ClusterType != "production" {
870 if super.cluster.SystemRootToken == "" {
871 super.cluster.SystemRootToken = randomHexString(64)
873 if super.cluster.ManagementToken == "" {
874 super.cluster.ManagementToken = randomHexString(64)
876 if super.cluster.Collections.BlobSigningKey == "" {
877 super.cluster.Collections.BlobSigningKey = randomHexString(64)
879 if super.cluster.Users.AnonymousUserToken == "" {
880 super.cluster.Users.AnonymousUserToken = randomHexString(64)
882 if super.cluster.Containers.DispatchPrivateKey == "" {
883 buf, err := ioutil.ReadFile(filepath.Join(super.SourcePath, "lib", "dispatchcloud", "test", "sshkey_dispatch"))
887 super.cluster.Containers.DispatchPrivateKey = string(buf)
889 super.cluster.TLS.Insecure = true
891 if super.ClusterType == "test" {
892 // Add a second keepstore process.
893 port, err := nextPort(super.ListenHost)
897 host := net.JoinHostPort(super.ListenHost, port)
898 super.cluster.Services.Keepstore.InternalURLs[arvados.URL{Scheme: "http", Host: host, Path: "/"}] = arvados.ServiceInstance{}
900 // Create a directory-backed volume for each keepstore
902 super.cluster.Volumes = map[string]arvados.Volume{}
903 for url := range super.cluster.Services.Keepstore.InternalURLs {
904 volnum := len(super.cluster.Volumes)
905 datadir := fmt.Sprintf("%s/keep%d.data", super.tempdir, volnum)
906 if _, err = os.Stat(datadir + "/."); err == nil {
907 } else if !os.IsNotExist(err) {
909 } else if err = os.Mkdir(datadir, 0755); err != nil {
912 super.cluster.Volumes[fmt.Sprintf(super.cluster.ClusterID+"-nyw5e-%015d", volnum)] = arvados.Volume{
914 DriverParameters: json.RawMessage(fmt.Sprintf(`{"Root":%q}`, datadir)),
915 AccessViaHosts: map[arvados.URL]arvados.VolumeAccess{
918 StorageClasses: map[string]bool{
925 super.cluster.StorageClasses = map[string]arvados.StorageClassConfig{
926 "default": {Default: true},
931 if super.OwnTemporaryDatabase {
932 port, err := nextPort("localhost")
936 super.cluster.PostgreSQL.Connection = arvados.PostgreSQLConnection{
937 "client_encoding": "utf8",
940 "dbname": "arvados_test",
942 "password": "insecure_arvados_test",
948 func addrIsLocal(addr string) (bool, error) {
949 if h, _, err := net.SplitHostPort(addr); err != nil {
952 addr = net.JoinHostPort(h, "0")
954 listener, err := net.Listen("tcp", addr)
958 } else if strings.Contains(err.Error(), "cannot assign requested address") {
965 func randomHexString(chars int) string {
966 b := make([]byte, chars/2)
967 _, err := rand.Read(b)
971 return fmt.Sprintf("%x", b)
974 func internalPort(svc arvados.Service) (host, port string, err error) {
975 if len(svc.InternalURLs) > 1 {
976 return "", "", errors.New("internalPort() doesn't work with multiple InternalURLs")
978 for u := range svc.InternalURLs {
980 host, port = u.Hostname(), u.Port()
983 case u.Scheme == "https", u.Scheme == "ws":
990 return "", "", fmt.Errorf("service has no InternalURLs")
993 func externalPort(svc arvados.Service) (string, error) {
994 u := url.URL(svc.ExternalURL)
995 if p := u.Port(); p != "" {
997 } else if u.Scheme == "https" || u.Scheme == "wss" {
1004 func availablePort(host string) (string, error) {
1005 ln, err := net.Listen("tcp", net.JoinHostPort(host, "0"))
1010 _, port, err := net.SplitHostPort(ln.Addr().String())
1017 // Try to connect to addr until it works, then close ch. Give up if
1019 func waitForConnect(ctx context.Context, addr string) error {
1020 ctxlog.FromContext(ctx).WithField("addr", addr).Info("waitForConnect")
1021 dialer := net.Dialer{Timeout: time.Second}
1022 for ctx.Err() == nil {
1023 conn, err := dialer.DialContext(ctx, "tcp", addr)
1025 time.Sleep(time.Second / 10)
1034 func copyConfig(cfg *arvados.Config) *arvados.Config {
1037 err := json.NewEncoder(pw).Encode(cfg)
1043 cfg2 := new(arvados.Config)
1044 err := json.NewDecoder(pr).Decode(cfg2)
1051 func watchConfig(ctx context.Context, logger logrus.FieldLogger, cfgPath string, prevcfg *arvados.Config, fn func()) {
1052 watcher, err := fsnotify.NewWatcher()
1054 logger.WithError(err).Error("fsnotify setup failed")
1057 defer watcher.Close()
1059 err = watcher.Add(cfgPath)
1061 logger.WithError(err).Error("fsnotify watcher failed")
1069 case err, ok := <-watcher.Errors:
1073 logger.WithError(err).Warn("fsnotify watcher reported error")
1074 case _, ok := <-watcher.Events:
1078 for len(watcher.Events) > 0 {
1081 loader := config.NewLoader(&bytes.Buffer{}, &logrus.Logger{Out: ioutil.Discard})
1082 loader.Path = cfgPath
1083 loader.SkipAPICalls = true
1084 cfg, err := loader.Load()
1086 logger.WithError(err).Warn("error reloading config file after change detected; ignoring new config for now")
1087 } else if reflect.DeepEqual(cfg, prevcfg) {
1088 logger.Debug("config file changed but is still DeepEqual to the existing config")
1090 logger.Debug("config changed, notifying supervisor")