Paul Payne
05b28cb584
Repo-side rename only (Phases 1-3 of the migration plan); the live box (~/.castle, systemd units, /data/castle, domains) is a separate cutover. - Slug `castle` -> `wildpc`: CLI command, module names (wildpc_core/cli/api), dist names, entry point `wildpc = wildpc_cli.main:main`. - Identifiers: CastleConfig/NATSClient/DirError/MDNS -> Wildpc*. - Env/constants: CASTLE_* -> WILDPC_*; ~/.castle -> ~/.wildpc, castle.yaml -> wildpc.yaml, /data/castle -> /data/wildpc. - Systemd UNIT_PREFIX castle- -> wildpc-; own programs castle-api/gateway/etc. - Display prose "Castle" -> "Wild PC" in docs, agent-guide files, README, frontend. - Package dirs and bootstrap yaml renamed via git mv; lockfiles regenerated; redundant nested uv.lock files dropped (workspace root lock is authoritative). Tests: core 273, cli 47, wildpc-api 120 all pass. Frontend type-checks + builds. Fixed a stale test fixture (secret_env_path kind arg) broken pre-rename.
283 lines
12 KiB
Python
283 lines
12 KiB
Python
"""Tests for systemd unit generation."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from pathlib import Path
|
|
|
|
from wildpc_core.generators.systemd import (
|
|
generate_timer,
|
|
generate_unit_from_deployed,
|
|
secret_env_path,
|
|
unit_env_file,
|
|
unit_name,
|
|
)
|
|
from wildpc_core.registry import Deployment
|
|
|
|
|
|
class TestUnitName:
|
|
"""Tests for systemd unit naming."""
|
|
|
|
def test_unit_name_format(self) -> None:
|
|
"""Unit names follow wildpc-<name>.service pattern."""
|
|
assert unit_name("central-context") == "wildpc-central-context.service"
|
|
assert unit_name("my-svc") == "wildpc-my-svc.service"
|
|
|
|
|
|
class TestUnitFromDeployed:
|
|
"""Tests for registry-based systemd unit generation."""
|
|
|
|
def test_contains_description(self) -> None:
|
|
"""Unit file has service description."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={"TEST_SVC_PORT": "19000"},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert "Description=Wild PC: Test service" in unit
|
|
|
|
def test_no_working_directory(self) -> None:
|
|
"""Unit file has no WorkingDirectory (source/runtime separation)."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert "WorkingDirectory" not in unit
|
|
|
|
def test_contains_environment(self) -> None:
|
|
"""Unit file has environment variables from deployed config."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={"TEST_SVC_DATA_DIR": "/home/user/.wildpc/data/test-svc"},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert "Environment=TEST_SVC_DATA_DIR=/home/user/.wildpc/data/test-svc" in unit
|
|
|
|
def test_default_path_emitted_when_absent(self) -> None:
|
|
"""Wild PC supplies a default PATH when the service doesn't pin one."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert 'Environment="PATH=' in unit
|
|
assert "/usr/local/bin:/usr/bin:/bin" in unit
|
|
|
|
def test_path_prepend_precedes_default(self) -> None:
|
|
"""A resolved toolchain dir (e.g. pinned node bin) leads the default PATH."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="node",
|
|
run_cmd=["node", "server.js"],
|
|
env={},
|
|
path_prepend=["/home/user/.nvm/versions/node/v24.14.1/bin"],
|
|
description="Node service",
|
|
)
|
|
unit = generate_unit_from_deployed("node-svc", deployed)
|
|
path_line = next(ln for ln in unit.splitlines() if "PATH=" in ln)
|
|
assert "/home/user/.nvm/versions/node/v24.14.1/bin:" in path_line
|
|
assert path_line.index("v24.14.1") < path_line.index("/usr/bin")
|
|
|
|
def test_explicit_path_overrides_path_prepend(self) -> None:
|
|
"""An explicit PATH is a full override — path_prepend is ignored too."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="node",
|
|
run_cmd=["node", "server.js"],
|
|
env={"PATH": "/opt/node/bin:/usr/bin:/bin"},
|
|
path_prepend=["/home/user/.nvm/versions/node/v24.14.1/bin"],
|
|
description="Node service",
|
|
)
|
|
unit = generate_unit_from_deployed("node-svc", deployed)
|
|
assert "v24.14.1" not in unit
|
|
assert unit.count("PATH=") == 1
|
|
|
|
def test_explicit_path_overrides_default(self) -> None:
|
|
"""A PATH pinned in defaults.env wins — Wild PC does not append its own,
|
|
which would clobber it under systemd's last-assignment-wins rule."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={"PATH": "/opt/node/bin:/usr/bin:/bin"},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert "Environment=PATH=/opt/node/bin:/usr/bin:/bin" in unit
|
|
assert unit.count("PATH=") == 1 # exactly one PATH line, the explicit one
|
|
|
|
def test_contains_restart_policy(self) -> None:
|
|
"""Unit file has restart configuration."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert "Restart=on-failure" in unit
|
|
|
|
def test_exec_start_from_run_cmd(self) -> None:
|
|
"""Unit file ExecStart uses resolved run_cmd."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "test-svc"],
|
|
env={},
|
|
description="Test service",
|
|
)
|
|
unit = generate_unit_from_deployed("test-svc", deployed)
|
|
assert "ExecStart=/home/user/.local/bin/uv run test-svc" in unit
|
|
|
|
def test_basic_service(self) -> None:
|
|
"""Generate a unit from a deployed component."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "my-svc"],
|
|
env={
|
|
"MY_SVC_PORT": "9001",
|
|
"MY_SVC_DATA_DIR": "/home/user/.wildpc/data/my-svc",
|
|
},
|
|
description="My service",
|
|
)
|
|
unit = generate_unit_from_deployed("my-svc", deployed)
|
|
assert "Description=Wild PC: My service" in unit
|
|
assert "ExecStart=/home/user/.local/bin/uv run my-svc" in unit
|
|
assert "Environment=MY_SVC_PORT=9001" in unit
|
|
assert "Environment=MY_SVC_DATA_DIR=/home/user/.wildpc/data/my-svc" in unit
|
|
assert "WorkingDirectory" not in unit
|
|
assert "Restart=on-failure" in unit
|
|
|
|
def test_scheduled_job(self) -> None:
|
|
"""Scheduled component generates oneshot unit."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="command",
|
|
run_cmd=["/home/user/.local/bin/my-job"],
|
|
env={},
|
|
description="Nightly job",
|
|
schedule="0 2 * * *",
|
|
)
|
|
unit = generate_unit_from_deployed("my-job", deployed)
|
|
assert "Type=oneshot" in unit
|
|
assert "Restart=" not in unit
|
|
|
|
def test_no_repo_paths(self) -> None:
|
|
"""Generated units must not reference repo paths."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/home/user/.local/bin/uv", "run", "my-svc"],
|
|
env={"DATA_DIR": "/home/user/.wildpc/data/my-svc"},
|
|
description="Test",
|
|
)
|
|
unit = generate_unit_from_deployed("my-svc", deployed)
|
|
assert "/data/repos/" not in unit
|
|
|
|
def test_exec_stop_emitted_for_compose(self) -> None:
|
|
"""A compose deployment's stop_cmd becomes ExecStop= (clean teardown)."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="compose",
|
|
run_cmd=["/usr/bin/docker", "compose", "-p", "wildpc-x", "-f", "c.yml", "up"],
|
|
stop_cmd=["/usr/bin/docker", "compose", "-p", "wildpc-x", "-f", "c.yml", "down"],
|
|
description="Stack",
|
|
)
|
|
unit = generate_unit_from_deployed("x", deployed)
|
|
assert "ExecStop=/usr/bin/docker compose -p wildpc-x -f c.yml down" in unit
|
|
|
|
def test_no_exec_stop_without_stop_cmd(self) -> None:
|
|
"""Runners without a stop_cmd rely on SIGTERM — no ExecStop line."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python", run_cmd=["/uv", "run", "x"], description="X"
|
|
)
|
|
unit = generate_unit_from_deployed("x", deployed)
|
|
assert "ExecStop=" not in unit
|
|
|
|
|
|
class TestSecretEnvFile:
|
|
"""Secrets are referenced via EnvironmentFile=, never inlined."""
|
|
|
|
def test_environment_file_added_for_simple_unit(self) -> None:
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/uv", "run", "my-svc"],
|
|
env={"PORT": "9001"},
|
|
secret_env_keys=["API_KEY"],
|
|
)
|
|
path = Path("/home/u/.wildpc/secrets/env/wildpc-my-svc.service.env")
|
|
unit = generate_unit_from_deployed("my-svc", deployed, env_file=path)
|
|
assert f"EnvironmentFile={path}" in unit
|
|
# fail-loud: no '-' prefix
|
|
assert f"EnvironmentFile=-{path}" not in unit
|
|
|
|
def test_environment_file_added_for_oneshot_job(self) -> None:
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="command",
|
|
run_cmd=["/bin/job"],
|
|
env={},
|
|
schedule="0 2 * * *",
|
|
secret_env_keys=["TOKEN"],
|
|
)
|
|
path = Path("/home/u/.wildpc/secrets/env/wildpc-my-job.service.env")
|
|
unit = generate_unit_from_deployed("my-job", deployed, env_file=path)
|
|
assert "Type=oneshot" in unit
|
|
assert f"EnvironmentFile={path}" in unit
|
|
|
|
def test_no_environment_file_when_none(self) -> None:
|
|
deployed = Deployment(manager="systemd", launcher="python", run_cmd=["/uv", "run", "x"], env={})
|
|
unit = generate_unit_from_deployed("x", deployed, env_file=None)
|
|
assert "EnvironmentFile" not in unit
|
|
|
|
def test_secret_values_never_in_unit(self) -> None:
|
|
"""The unit references the file path; resolved secret values never appear."""
|
|
deployed = Deployment(
|
|
manager="systemd", launcher="python",
|
|
run_cmd=["/uv", "run", "x"],
|
|
env={"PORT": "9001"},
|
|
secret_env_keys=["API_KEY"],
|
|
)
|
|
path = secret_env_path("x")
|
|
unit = generate_unit_from_deployed("x", deployed, env_file=path)
|
|
assert "sk-secret" not in unit # value is in the file, not the unit
|
|
|
|
|
|
class TestUnitEnvFile:
|
|
"""unit_env_file decides which runners get an EnvironmentFile= path."""
|
|
|
|
def test_none_without_secrets(self) -> None:
|
|
d = Deployment(manager="systemd", launcher="python", run_cmd=[], env={}, secret_env_keys=[])
|
|
assert unit_env_file(d, "x") is None
|
|
|
|
def test_path_for_python_with_secrets(self) -> None:
|
|
d = Deployment(manager="systemd", launcher="python", run_cmd=[], env={}, secret_env_keys=["K"])
|
|
assert unit_env_file(d, "x") == secret_env_path("x")
|
|
|
|
def test_none_for_container(self) -> None:
|
|
"""Containers load secrets via docker --env-file, not systemd."""
|
|
d = Deployment(manager="systemd", launcher="container", run_cmd=[], env={}, secret_env_keys=["K"])
|
|
assert unit_env_file(d, "x") is None
|
|
|
|
|
|
class TestGenerateTimer:
|
|
"""Tests for timer generation from schedule strings."""
|
|
|
|
def test_daily_timer(self) -> None:
|
|
"""Daily cron produces OnCalendar timer."""
|
|
timer = generate_timer("my-job", schedule="0 2 * * *", description="Nightly")
|
|
assert "Description=Wild PC timer: Nightly" in timer
|
|
assert "OnCalendar=*-*-* 02:00:00" in timer
|
|
assert "WantedBy=timers.target" in timer
|
|
|
|
def test_interval_timer(self) -> None:
|
|
"""*/N minute cron produces OnUnitActiveSec timer."""
|
|
timer = generate_timer("sync", schedule="*/5 * * * *")
|
|
assert "OnUnitActiveSec=300s" in timer
|
|
assert "OnBootSec=60" in timer
|
|
|
|
def test_fallback_description(self) -> None:
|
|
"""Timer uses name when no description given."""
|
|
timer = generate_timer("my-job", schedule="0 0 * * *")
|
|
assert "Description=Wild PC timer: my-job" in timer
|