Something went wrong. Try again.
Monorepo for Tangled tangled.org
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846//go:build linux
package microvm
import ( "context" "encoding/json" "errors" "fmt" "io" "log/slog" "net/http" "os" "path/filepath" "slices" "strings" "sync" "sync/atomic" "time"
"gopkg.in/yaml.v3"
"tangled.org/core/api/tangled" "tangled.org/core/log" "tangled.org/core/spindle/agentproto" agentv1 "tangled.org/core/spindle/agentproto/gen" "tangled.org/core/spindle/config" "tangled.org/core/spindle/db" "tangled.org/core/spindle/engine" "tangled.org/core/spindle/models" "tangled.org/core/spindle/observability" "tangled.org/core/spindle/quota" "tangled.org/core/spindle/secrets")
const ( guestWorkDir = "/workspace/repo" guestBasePATH = "/run/current-system/sw/bin:/nix/var/nix/profiles/default/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" guestDevShellEnvPath = "/run/spindle/devshell-env.sh" activationStepAction = "activate-config" agentAcceptTimeout = 2 * time.Minute agentHandshakeTimeout = 30 * time.Second substituterDrainTimeout = 5 * time.Minute vmShutdownTimeout = 10 * time.Second guestTimeoutGrace = 5 * time.Second)
type cleanupFunc func(context.Context) error
// return a fresh slice since callers append to itfunc guestBaseEnv() []string { return []string{ "HOME=/workspace", "LOGNAME=" + guestWorkflowUser, "PATH=" + guestBasePATH, "USER=" + guestWorkflowUser, }}
type Engine struct { l *slog.Logger cfg *config.Config db *db.DB quotaStore quota.ReservationStore agentMu sync.Mutex agent *agentHub scheduler *engine.ResourceScheduler[Resources] cgroupParent *CgroupParent budget Resources maxWorkflow Resources cids *cidRegistry
cleanupMu sync.Mutex cleanup map[string][]cleanupFunc
debugMu sync.Mutex debug map[string]debugTarget}
type Step struct { name string kind models.StepKind command string environment map[string]string action string config manifestConfig configKey string}
func (s Step) Name() string { return s.name }func (s Step) Command() string { return s.command }func (s Step) Kind() models.StepKind { return s.kind }
func New(ctx context.Context, cfg *config.Config, d *db.DB, quotaStore quota.ReservationStore) (*Engine, error) { l := log.FromContext(ctx).With("component", "engine.microvm") budget, max, agingThreshold := newVMBudgetConfig(cfg.MicroVMPipelines) l.Info("initialized microVM workflow budget", "budget", budget.String(), "maxWorkflow", max.String(), "agingThreshold", agingThreshold)
var cgroupParent *CgroupParent var err error if cfg.MicroVMPipelines.EnableCgroups { cgroupParent, err = initCgroupParent(cfg.MicroVMPipelines.CgroupParent, cfg.MicroVMPipelines.CgroupSupervisorMemoryMinMiB, l) if err != nil { return nil, err } }
e := &Engine{ l: l, cfg: cfg, db: d, quotaStore: quotaStore, scheduler: engine.NewResourceScheduler(budget, max, agingThreshold), cgroupParent: cgroupParent, budget: budget, maxWorkflow: max, cids: newCIDRegistry(), cleanup: make(map[string][]cleanupFunc), debug: make(map[string]debugTarget), }
metrics := observability.GetMetrics(ctx) e.scheduler.OnSnapshot = func(budget, max, used Resources, queueLen int) { metrics.RecordEnginePoolSnapshot( used.MemoryMiB, budget.MemoryMiB, max.MemoryMiB, used.VCPUs, budget.VCPUs, max.VCPUs, used.DiskMiB, budget.DiskMiB, max.DiskMiB, queueLen, ) } e.scheduler.OnAcquire = func(_ Resources, allowed bool, reason string) { metrics.RecordEnginePoolAdmission(allowed, reason) } metrics.RecordEnginePoolSnapshot( 0, budget.MemoryMiB, max.MemoryMiB, 0, budget.VCPUs, max.VCPUs, 0, budget.DiskMiB, max.DiskMiB, 0, )
if cfg.MicroVMPipelines.DebugSSH.Enabled && cfg.MicroVMPipelines.DebugSSH.ListenAddr != "" { go e.serveDebugSSH(ctx) }
return e, nil}
func (e *Engine) ensureAgentHub() (*agentHub, error) { e.agentMu.Lock() defer e.agentMu.Unlock()
if e.agent != nil { return e.agent, nil }
port := e.cfg.MicroVMPipelines.AgentPort if port == 0 { port = agentproto.DefaultPort } agent, err := newAgentHub(port, e.l) if err != nil { return nil, err } e.agent = agent return agent, nil}
func (e *Engine) InitWorkflow(twf tangled.Pipeline_Workflow, tpl tangled.Pipeline) (*models.Workflow, error) { swf := &models.Workflow{} var dwf manifestWorkflow
if err := engine.DescribeManifestError(twf.Raw, manifestWorkflow{}, map[string]string{"caches": "substituters"}); err != nil { return nil, engine.ClassifiedFailure(engine.FailureClassUser, engine.FailureReasonWorkflowInvalid, err) } if err := yaml.Unmarshal([]byte(twf.Raw), &dwf); err != nil { return nil, engine.ClassifiedFailure(engine.FailureClassUser, engine.FailureReasonWorkflowInvalid, err) }
for _, dstep := range dwf.Steps { swf.Steps = append(swf.Steps, Step{ name: dstep.Name, kind: models.StepKindUser, command: dstep.Command, environment: dstep.Environment, }) } swf.Name = twf.Name swf.Environment = dwf.Environment
caches, err := models.ParseCacheEntries(twf.Raw) if err != nil { return nil, err } swf.Caches = caches
if tpl.TriggerMetadata != nil { if clone := models.BuildCloneStep(twf, *tpl.TriggerMetadata, e.cfg.Server.Dev); clone.Command() != "" { swf.Steps = append([]models.Step{clone}, swf.Steps...) } }
imageSpec, imageSpecPath, imageName, err := e.resolveImage(dwf.Image) if err != nil { return nil, err } configKey := "" config := manifestConfig{ Services: dwf.Services, Virtualisation: dwf.Virtualisation, Dependencies: dwf.Dependencies, Registry: dwf.Registry, } if config.Enabled() { if !imageSpec.SupportsConfigActivation() { return nil, engine.ClassifiedFailure( engine.FailureClassUser, engine.FailureReasonConfigurationFailed, fmt.Errorf( "microVM image %q is not a NixOS image: services, virtualisation, dependencies and registry workflow options require a NixOS image", imageName, ), ) } // the cached toplevel is guest-asserted, so the cache key has to // be per-repo. a global key lets one tenant poison the activation // of another tenant's identical config repoDid := "" if md := tpl.TriggerMetadata; md != nil && md.Repo != nil { if md.Repo.RepoDid != nil { repoDid = *md.Repo.RepoDid } else { repoDid = md.Repo.Did } } var err error configKey, err = buildConfigKey(imageSpec, config, repoDid) if err != nil { return nil, engine.ClassifiedFailure( engine.FailureClassUser, engine.FailureReasonConfigurationFailed, fmt.Errorf("build config key: %w", err), ) } activationStep := Step{ name: "NixOS config activation", kind: models.StepKindSystem, command: "activate nixos config", action: activationStepAction, config: config, configKey: configKey, }
insertAt := 0 if len(swf.Steps) > 0 && swf.Steps[0].Kind() == models.StepKindSystem { insertAt = 1 } swf.Steps = append(swf.Steps, nil) copy(swf.Steps[insertAt+1:], swf.Steps[insertAt:]) swf.Steps[insertAt] = activationStep }
substituterURLs, substituterKeys, err := workflowSubstituters(dwf.Substituters) if err != nil { return nil, engine.ClassifiedFailure(engine.FailureClassUser, engine.FailureReasonConfigurationFailed, err) }
var ownerDID, repoDID, actor string if md := tpl.TriggerMetadata; md != nil && md.Repo != nil { ownerDID = md.Repo.Did repoDID = ownerDID if md.Repo.RepoDid != nil && *md.Repo.RepoDid != "" { repoDID = *md.Repo.RepoDid } if md.Actor != nil { actor = *md.Actor } } if ownerDID == "" { return nil, engine.ClassifiedFailure( engine.FailureClassInfrastructure, engine.FailureReasonRuntimeFailed, fmt.Errorf("missing owner DID in pipeline trigger metadata"), ) } if repoDID == "" { return nil, engine.ClassifiedFailure( engine.FailureClassInfrastructure, engine.FailureReasonRuntimeFailed, fmt.Errorf("missing repository DID in pipeline trigger metadata"), ) } swf.OwnerDID = ownerDID swf.RepoDID = repoDID
swf.Data = &workflowState{ ImageSpec: imageSpec, ImageSpecPath: imageSpecPath, Config: config, ConfigKey: configKey, Image: imageName, SubstituterReadURLs: substituterURLs, SubstituterTrustedPublicKeys: substituterKeys, NixOSToplevels: newNixOSToplevelStore(e.db), OwnerDID: ownerDID, QuotaStore: e.quotaStore, RepoDID: repoDID, Actor: actor, } return swf, nil}
func (e *Engine) BindWorkflowQuotaStore(wf *models.Workflow, store quota.ReservationStore) error { state, ok := wf.Data.(*workflowState) if !ok || state == nil { return errors.New("workflow state is not initialized") } if store == nil { return errors.New("workflow quota store is nil") } state.QuotaStore = store return nil}
func (e *Engine) SetupWorkflow(ctx context.Context, wid models.WorkflowId, wf *models.Workflow, wfLogger models.WorkflowLogger) (err error) { l := e.l.With("workflow", wid) setupStep := Step{name: "microVM setup", kind: models.StepKindSystem}
wfLogger.ControlWriter(-1, setupStep, models.StepStatusStart).Write([]byte{0}) defer func() { wfLogger.EndWriter(-1, setupStep, models.OutcomeOf(err)).Write([]byte{0}) }()
category := "Failed to setup VM" defer func() { if err != nil { err = fmt.Errorf("%s:\n%w", category, err) } }()
state, ok := wf.Data.(*workflowState) if !ok || state == nil { return fmt.Errorf("workflow state is not initialized") }
cid, err := e.cids.allocate() if err != nil { return err } state.CID = cid setupDone := false defer func() { if setupDone { return } if detail := VMCrashLog(state.VM); detail != "" { l.Error("microVM setup failed", "detail", detail) } if err := e.cleanupState(context.Background(), wid, state); err != nil { l.Error("failed to cleanup failed setup", "error", err) } }() agent, err := e.ensureAgentHub() if err != nil { return err } connCh, unregister, err := agent.expect(cid) if err != nil { return err } defer unregister()
workDirBase := e.cfg.MicroVMPipelines.OverlayDir if workDirBase == "" { workDirBase = os.TempDir() } workDir, err := os.MkdirTemp(workDirBase, "spindle-microvm-"+wid.String()+"-*") if err != nil { return fmt.Errorf("create workflow microVM directory: %w", err) } state.WorkDir = workDir
upstreams, err := BuildSubstituterUpstreams(e.cfg.NixCache.ReadURLs, state.SubstituterReadURLs) if err != nil { return err } substituter, err := StartSubstituterProxy(ctx, cid, upstreams, l) if err != nil { return err } state.Substituter = substituter if strings.TrimSpace(e.cfg.NixCache.UploadURL) != "" { if state.OwnerDID == "" || state.RepoDID == "" { return fmt.Errorf("missing owner or repo identity for upload cache quota") } } stagingDir := filepath.Join(workDir, "substituter-upload")
substituterUpload, err := StartSubstituterUploadProxy(ctx, cid, e.cfg.NixCache.UploadURL, upstreams, stagingDir, l, state.QuotaStore, state.OwnerDID, state.RepoDID, UploadCacheOptions{ TrustedPublicKeys: e.cfg.NixCache.TrustedPublicKeys, RequireSignedUploads: e.cfg.NixCache.RequireSignedUploads, MaxStagedBytes: e.cfg.NixCache.MaxStagedMiB << 20, MaxStagedObjects: e.cfg.NixCache.MaxStagedObjects, }) if err != nil { return err } state.SubstituterUpload = substituterUpload dnsProxy, err := StartDNSProxy(ctx, cid, l) if err != nil { return err } state.DNSProxy = dnsProxy
port := e.cfg.MicroVMPipelines.AgentPort if port == 0 { port = agentproto.DefaultPort } state.ImageSpec.BootArgs = fmt.Sprintf("%s shuttle.vsock_port=%d", state.ImageSpec.BootArgs, port)
fmt.Fprintf(wfLogger.DataWriter(-1, "stdout"), "starting microVM image %s\n", state.Image) l.Info("starting microVM workflow", "image", state.Image, "imageSpec", state.ImageSpecPath, "cid", cid, "workDir", workDir)
var vm VMHandle vm, err = StartVM(ctx, VMConfig{ Image: state.ImageSpec, CID: cid, EnableKVM: e.cfg.MicroVMPipelines.EnableKVM, WorkDir: workDir, Cgroup: e.cgroupLimits(wid, state.ImageSpec), Dev: e.cfg.Server.Dev, }, l) if err != nil { return err } state.VM = vm state.StartedAt = time.Now()
category = "Failed to connect to agent"
acceptCtx, cancelAccept := context.WithTimeout(ctx, agentAcceptTimeout) defer cancelAccept() conn, err := waitAgentConn(acceptCtx, connCh) if err != nil { return err }
agentSession := NewAgentSession(conn, cid, l) initCtx, cancelInit := context.WithTimeout(ctx, agentHandshakeTimeout) defer cancelInit() if err := agentSession.Init(initCtx, &agentv1.Init{ JobId: wid.String(), CacheTrustedPublicKeys: append(slices.Clone(e.cfg.NixCache.TrustedPublicKeys), state.SubstituterTrustedPublicKeys...), CacheReadProxyPort: substituter.Port(), CacheUploadProxyPort: substituterUpload.Port(), DnsProxyPort: dnsProxy.Port(), }); err != nil { _ = agentSession.Close() return err } state.Agent = agentSession wf.Data = state
e.registerCleanup(wid, func(ctx context.Context) error { return e.cleanupState(ctx, wid, state) }) setupDone = true
fmt.Fprintf(wfLogger.DataWriter(-1, "stdout"), "agent connected; serial log: %s\n", vm.Logs().Serial, ) return nil}
func depsSourcePrelude() string { return fmt.Sprintf( // check if it exists because not all images have this `if [ -f %s ]; then . %s; export PATH="$PATH:%s"; fi; `, guestDevShellEnvPath, guestDevShellEnvPath, guestBasePATH, )}
func applyDepsSource(command string) string { return depsSourcePrelude() + command}
func stepEnvironment(w *models.Workflow, step models.Step, unlocked []secrets.UnlockedSecret) []string { env := guestBaseEnv() for k, v := range w.Environment { env = append(env, k+"="+v) } for _, secret := range unlocked { env = append(env, secret.Key+"="+secret.Value) } if s, ok := step.(Step); ok { for k, v := range s.environment { env = append(env, k+"="+v) } } return env}
func (e *Engine) RunStep(ctx context.Context, wid models.WorkflowId, w *models.Workflow, idx int, secrets []secrets.UnlockedSecret, wfLogger models.WorkflowLogger) error { state, ok := w.Data.(*workflowState) if !ok || state == nil || state.Agent == nil { return fmt.Errorf("microVM workflow is not connected to agent") }
stderr := wfLogger.DataWriter(idx, "stderr")
execCtx, vmExited, cancelWatch := watchVMExit(ctx, state.VM) defer cancelWatch()
step := w.Steps[idx] if s, ok := step.(Step); ok && s.action == activationStepAction { err := e.activateConfig(execCtx, wid, state, s, wfLogger.DataWriter(idx, "stdout")) failureClass := engine.FailureClassInfrastructure failureReason := engine.FailureReasonRuntimeFailed var guestError *activationGuestError if errors.As(err, &guestError) { failureClass = engine.FailureClassUser failureReason = engine.FailureReasonConfigurationFailed } return e.classifyStepError( ctx, wid, step, state, stderr, vmExited, "Failed to activate config", failureClass, failureReason, err, ) } env := stepEnvironment(w, step, secrets)
stdout := wfLogger.DataWriter(idx, "stdout") execStart := &agentv1.ExecStart{ Argv: []string{state.ImageSpec.Shell, "-lc", applyDepsSource(step.Command())}, Env: env, Cwd: guestWorkDir, User: guestWorkflowUser, // timeout not set here, Exec will fill it } exitCode, err := state.Agent.Exec(execCtx, AgentExec{ ID: fmt.Sprintf("%s-%d", wid.String(), idx), ExecStart: execStart, Stdout: stdout, Stderr: stderr, }) if err != nil { return e.classifyStepError( ctx, wid, step, state, stderr, vmExited, "User step error", engine.FailureClassInfrastructure, engine.FailureReasonRuntimeFailed, err, ) }
if exitCode != 0 { e.l.Debug("step exited non-zero", "workflow", wid, "step", step.Name(), "exitCode", exitCode) if e.cfg.MicroVMPipelines.DebugSSH.Enabled { held := e.claimDebugHold(wid, debugTarget{ cid: state.CID, agent: state.Agent, knot: w.Environment["TANGLED_REPO_KNOT"], failedStep: execStart, repoDid: w.Environment["TANGLED_REPO_REPO_DID"], maxAliveAt: state.StartedAt.Add(e.WorkflowTimeout()), connected: make(chan struct{}), released: make(chan struct{}), evicted: make(chan struct{}), holdRepo: state.RepoDID, actor: state.Actor, }) e.writeDebugHint(wid, len(w.Steps), wfLogger, held) } return engine.ClassifiedFailure( engine.FailureClassUser, engine.FailureReasonCommandFailed, fmt.Errorf("User step error: exited with code %d", exitCode), ) } return nil}
// reads the vm serial logs so we report the tail of that as an error instead of// just "guest agent connection lost: EOF"func (e *Engine) classifyStepError( ctx context.Context, wid models.WorkflowId, step models.Step, state *workflowState, stderr io.Writer, vmExited *atomic.Bool, category string, fallbackClass engine.FailureClass, fallbackReason engine.FailureReason, err error,) error { if err == nil { return nil } l := e.l.With("workflow", wid, "step", step.Name())
if vmExited != nil && vmExited.Load() { reason := "microVM exited unexpectedly" oom := state.VM != nil && state.VM.OOMKilled() if oom { reason = "microVM killed by OOM (cgroup memory limit exceeded)" } if detail := VMCrashLog(state.VM); detail != "" { fmt.Fprintf(stderr, "%s:\n%s\n", reason, detail) l.Error(reason, "oom", oom, "detail", detail) } else { fmt.Fprintln(stderr, reason) l.Error(reason, "oom", oom) } class := engine.FailureClassInfrastructure failureReason := engine.FailureReasonRuntimeFailed if oom { class = engine.FailureClassUser failureReason = engine.FailureReasonResourceExhausted } return engine.ClassifiedFailure(class, failureReason, fmt.Errorf("%s:\n%w", category, errors.New(reason+"; see workflow logs for serial output"))) }
cause := context.Cause(ctx) if errors.Is(cause, engine.ErrWorkflowCanceled) { l.Info("step canceled") return engine.ErrWorkflowCanceled } if errors.Is(err, errGuestTimedOut) || errors.Is(cause, context.DeadlineExceeded) { l.Debug("step timed out", "guestReported", errors.Is(err, errGuestTimedOut)) return engine.ErrTimedOut } if ctx.Err() != nil { return engine.ClassifiedFailure( engine.FailureClassInfrastructure, engine.FailureReasonRuntimeFailed, fmt.Errorf("step context canceled: %w", ctx.Err()), ) }
// the agent connection dropped while qemu stayed up (eg. the guest kernel // OOM-killed the agent or a guest panic), so surface serial logs, those // will be more helpful. var crashErr error if detail := VMCrashLog(state.VM); detail != "" { fmt.Fprintf(stderr, "step failed (%v):\n%s\n", err, detail) l.Error("step failed", "error", err, "detail", detail) if parsedErr, ok := ParseCrashLog(detail); ok { crashErr = parsedErr } else { if strings.Contains(err.Error(), "guest exec error:") { crashErr = err } else { crashErr = fmt.Errorf("guest agent connection lost: %w", err) } } } else { l.Error("step failed", "error", err) crashErr = err } return engine.ClassifiedFailure( fallbackClass, fallbackReason, fmt.Errorf("%s:\n%w", category, crashErr), )}
func (e *Engine) activateConfig(ctx context.Context, wid models.WorkflowId, state *workflowState, step Step, out io.Writer) error { cfg := step.config if !cfg.Enabled() { return nil }
configKey := step.configKey if configKey == "" { configKey = state.ConfigKey }
userConfigJSON, err := json.Marshal(cfg) if err != nil { return fmt.Errorf("encode user config: %w", err) }
var cachedToplevel string if configKey != "" { if record, ok, err := state.NixOSToplevels.Lookup(configKey); err != nil { return err } else if ok { // todo(dawn): we should probably use gc roots to eliminate TOCTOU // the spindle will have to manage the gc roots, and for remote we have to // ssh in to the host and add / remove gc root. // we need to have this check anyway since the only check http substituters can // use is this one, since we cant manage gc roots there... if e.anySubstituterHasPath(ctx, state, record.Toplevel) { cachedToplevel = record.Toplevel fmt.Fprintf(out, "realizing cached NixOS config %s\n", cachedToplevel) } } } if cachedToplevel == "" { fmt.Fprintf(out, "building NixOS config from user config\n") }
baseHash, err := BaseConfigHash(state.ImageSpec) if err != nil { return fmt.Errorf("calculate base config hash: %w", err) }
result, err := state.Agent.ActivateConfig(ctx, fmt.Sprintf("%s-config", wid.String()), &agentv1.ActivateConfig{ ConfigKey: configKey, BaseConfigHash: baseHash, UserConfig: string(userConfigJSON), Toplevel: cachedToplevel, }, out) if err != nil { return err } fmt.Fprintf(out, "activated NixOS config toplevel %s\n", result.Toplevel)
if cachedToplevel != "" || configKey == "" { return nil } if e.cfg.NixCache.UploadURL == "" { e.l.Warn("not committing toplevel metadata: no upload URL configured", "workflow", wid, "configKey", configKey, "toplevel", result.Toplevel) return nil }
if err := e.drainNixCache(ctx, state); err != nil { // a partial upload would leave the cache unable to realize this toplevel, // so skip the metadata commit rather than poison it with an un-realizable // key. the config still activated fine, so don't fail the workflow. e.l.Warn("substituter upload drain failed; skipping toplevel metadata commit", "workflow", wid, "configKey", configKey, "toplevel", result.Toplevel, "error", err) return nil } if err := state.NixOSToplevels.Commit(configKey, result.Toplevel); err != nil { return err } fmt.Fprintf(out, "committed toplevel metadata %s -> %s\n", configKey, result.Toplevel) return nil}
func (e *Engine) anySubstituterHasPath(ctx context.Context, state *workflowState, storePath string) bool { upstreams, err := BuildSubstituterUpstreams(e.cfg.NixCache.ReadURLs, nil) if err != nil { e.l.Warn("toplevel check: build upstreams failed; treating as absent", "path", storePath, "error", err) return false } if len(upstreams) == 0 { return false } hash, _, err := parseStorePath(storePath) if err != nil { e.l.Warn("toplevel check: invalid toplevel path; treating as absent", "path", storePath, "error", err) return false } req, err := http.NewRequestWithContext(ctx, http.MethodHead, "http://upstream/"+hash+".narinfo", nil) if err != nil { e.l.Warn("toplevel check: build request failed; treating as absent", "path", storePath, "error", err) return false } resp, err := newNarinfoExistenceTransport(upstreams, e.l).RoundTrip(req) if err != nil { e.l.Warn("toplevel check: narinfo probe failed; treating as absent", "path", storePath, "error", err) return false } defer resp.Body.Close() _, _ = io.Copy(io.Discard, resp.Body) return resp.StatusCode == http.StatusOK}
func (e *Engine) DestroyWorkflow(ctx context.Context, wid models.WorkflowId) error { e.maybeRetainForDebug(ctx, wid)
fns := e.drainCleanups(wid)
var cleanupErr error for i := len(fns) - 1; i >= 0; i-- { if err := fns[i](ctx); err != nil { e.l.Error("failed to cleanup workflow resource", "workflowId", wid, "error", err) cleanupErr = errors.Join(cleanupErr, err) } } return cleanupErr}
func (e *Engine) WorkflowTimeout() time.Duration { d, err := time.ParseDuration(e.cfg.MicroVMPipelines.WorkflowTimeout) if err != nil { d = 5 * time.Minute } return d + guestTimeoutGrace}
func (e *Engine) registerCleanup(wid models.WorkflowId, fn cleanupFunc) { e.cleanupMu.Lock() defer e.cleanupMu.Unlock() key := wid.String() e.cleanup[key] = append(e.cleanup[key], fn)}
func (e *Engine) drainCleanups(wid models.WorkflowId) []cleanupFunc { e.cleanupMu.Lock() defer e.cleanupMu.Unlock() key := wid.String() fns := e.cleanup[key] delete(e.cleanup, key) return fns}
func (e *Engine) cgroupLimits(wid models.WorkflowId, spec ImageSpec) CgroupLimits { cfg := e.cfg.MicroVMPipelines cpuQuotaPercent := cfg.CgroupCPUMaxPercent if cpuQuotaPercent == 0 { // a vm can only use its vcpus anyway, but without a cap those // threads still get full host cores and starve every other tenant cpuQuotaPercent = int64(spec.VCPUs) * 100 } return CgroupLimits{ Enabled: cfg.EnableCgroups, Parent: e.cgroupParent, Name: "workflow-" + wid.String(), MemoryMaxMiB: resourcesForImage(spec).MemoryMiB, SwapMaxMiB: cfg.CgroupSwapMaxMiB, PidsMax: cfg.CgroupPidsMax, CPUQuotaPercent: cpuQuotaPercent, IOWeight: cfg.CgroupIOWeight, }}
func (e *Engine) WorkflowResourceUsage(wf *models.Workflow) (engine.WorkflowResourceUsage, bool) { if wf == nil || wf.Data == nil { return engine.WorkflowResourceUsage{}, false } state, ok := wf.Data.(*workflowState) if !ok || state == nil { return engine.WorkflowResourceUsage{}, false } state.resourceUsageMu.Lock() defer state.resourceUsageMu.Unlock() if !state.ResourceUsageAvailable || state.ResourceUsage == nil { return engine.WorkflowResourceUsage{}, false } return *state.ResourceUsage, true}