Container makes /var/lib/pixa usable before starting pixad (closes #159)

The entrypoint now creates /var/lib/pixa if it is missing. When the
directory or one of its top-level entries belongs to another user or
group, it gives the whole tree to pixad (uid and gid 65532); it then
sets the directory's mode to 750 and runs the server as pixad as
before. Data left by a run under another uid is taken over this way.
Only the top level is checked, so a normal start does not walk the
cache; the tree is changed deepest first, so an interrupted start is
finished by the next one.

"Running under upaas" in README.md no longer tells the operator to
create or chown the host directory.

Model: opus-5-5

cmd/pixad/main_internal_test.go

@@ -1,80 +0,0 @@
-package main
-
-import (
-	"errors"
-	"testing"
-
-	"go.uber.org/fx"
-)
-
-// errTestHook is the error returned by the test hooks that fail.
-var errTestHook = errors.New("test hook failed")
-
-// TestRunAppExitCode checks the exit code runApp returns: the one a
-// shutdown request carries, 0 for a request without one (as for SIGINT or
-// SIGTERM), and 1 when the app fails to start or to stop.
-func TestRunAppExitCode(t *testing.T) {
-	t.Parallel()
-
-	cases := []struct {
-		name string
-		hook func(shutdowner fx.Shutdowner) fx.Hook
-		want int
-	}{
-		{
-			name: "shutdown requested with exit code 1",
-			hook: func(shutdowner fx.Shutdowner) fx.Hook {
-				return fx.StartHook(func() error {
-					return shutdowner.Shutdown(fx.ExitCode(1))
-				})
-			},
-			want: 1,
-		},
-		{
-			name: "shutdown requested without an exit code",
-			hook: func(shutdowner fx.Shutdowner) fx.Hook {
-				return fx.StartHook(func() error {
-					return shutdowner.Shutdown()
-				})
-			},
-			want: 0,
-		},
-		{
-			name: "start fails",
-			hook: func(fx.Shutdowner) fx.Hook {
-				return fx.StartHook(func() error { return errTestHook })
-			},
-			want: 1,
-		},
-		{
-			name: "stop fails",
-			hook: func(shutdowner fx.Shutdowner) fx.Hook {
-				return fx.StartStopHook(
-					func() error { return shutdowner.Shutdown() },
-					func() error { return errTestHook },
-				)
-			},
-			want: 1,
-		},
-	}
-
-	for _, tc := range cases {
-		t.Run(tc.name, func(t *testing.T) {
-			t.Parallel()
-
-			app := fx.New(
-				fx.NopLogger,
-				fx.Invoke(func(lc fx.Lifecycle, shutdowner fx.Shutdowner) {
-					lc.Append(tc.hook(shutdowner))
-				}),
-			)
-
-			got := runApp(app)
-			t.Logf("runApp() = %d", got)
-
-			if got != tc.want {
-				t.Errorf("runApp() = %d, want %d", got, tc.want)
-			}
-		})
-	}
-}

internal/imageprocessor/max_concurrent_processing_internal_test.go

@@ -300,69 +300,3 @@ func TestProcessReleasesSlotOnError(t *testing.T) {
 		})
 	}
 }
-
-// TestWaitForProcessing holds a processing slot with a Process call that
-// cannot finish reading its input. WaitForProcessing must report that image
-// when its context ends first, wait for it otherwise, return 0 once it has
-// finished, and give back the slots it took while waiting.
-func TestWaitForProcessing(t *testing.T) {
-	t.Parallel()
-
-	proc := New(Params{MaxConcurrentProcessing: 2})
-
-	gate := make(chan struct{})
-	entered := make(chan struct{}, 1)
-	results := make(chan error, 1)
-
-	openGate := sync.OnceFunc(func() { close(gate) })
-	t.Cleanup(openGate)
-
-	processInBackground(proc, &gatedReader{
-		data: bytes.NewReader(createTestJPEG(t, 10, 10)), gate: gate,
-		entered: entered, counter: &readingCounter{},
-	}, results)
-	waitForEntries(t, entered, 1)
-
-	ctx, cancel := context.WithTimeout(t.Context(), 100*time.Millisecond)
-	defer cancel()
-
-	stillProcessing := proc.WaitForProcessing(ctx)
-	t.Logf("WaitForProcessing() after its context ended: %d", stillProcessing)
-
-	if stillProcessing != 1 {
-		t.Errorf("WaitForProcessing() after its context ended = %d, want 1",
-			stillProcessing)
-	}
-
-	waited := make(chan int, 1)
-
-	go func() { waited <- proc.WaitForProcessing(t.Context()) }()
-
-	select {
-	case got := <-waited:
-		t.Fatalf("WaitForProcessing() = %d while an image was being processed",
-			got)
-	case <-time.After(100 * time.Millisecond):
-	}
-
-	openGate()
-
-	err := <-results
-	if err != nil {
-		t.Errorf("Process() error = %v, want nil", err)
-	}
-
-	select {
-	case got := <-waited:
-		if got != 0 {
-			t.Errorf("WaitForProcessing() once processing finished = %d, want 0",
-				got)
-		}
-	case <-time.After(5 * time.Second):
-		t.Fatal("WaitForProcessing() did not return once processing finished")
-	}
-
-	if held := len(proc.processingSemaphore); held != 0 {
-		t.Errorf("%d slots still held after WaitForProcessing() returned", held)
-	}
-}

internal/server/shutdown_internal_test.go

@@ -1,96 +0,0 @@
-package server
-
-import (
-	"log/slog"
-	"net"
-	"testing"
-	"time"
-
-	"go.uber.org/fx"
-	"go.uber.org/fx/fxtest"
-
-	"sneak.berlin/go/pixa/internal/config"
-	"sneak.berlin/go/pixa/internal/globals"
-	"sneak.berlin/go/pixa/internal/logger"
-)
-
-// shutdownRecorder is an fx.Shutdowner that sends the options of each
-// shutdown request on requests.
-type shutdownRecorder struct {
-	requests chan []fx.ShutdownOption
-}
-
-func (r shutdownRecorder) Shutdown(opts ...fx.ShutdownOption) error {
-	r.requests <- opts
-
-	return nil
-}
-
-// TestSentryInitFailureFailsStartup checks that a Sentry DSN that cannot be
-// used makes the server's start hook fail, so fx stops what has already
-// started, instead of the process exiting from a goroutine.
-func TestSentryInitFailureFailsStartup(t *testing.T) {
-	t.Parallel()
-
-	lc := fxtest.NewLifecycle(t)
-
-	log, err := logger.New(lc, logger.Params{Globals: &globals.Globals{}})
-	if err != nil {
-		t.Fatalf("logger.New() error = %v", err)
-	}
-
-	_, err = New(lc, Params{
-		Logger:  log,
-		Globals: &globals.Globals{Appname: "pixad"},
-		Config:  &config.Config{SentryDSN: "not-a-dsn"},
-	})
-	if err != nil {
-		t.Fatalf("New() error = %v", err)
-	}
-
-	err = lc.Start(t.Context())
-	t.Logf("Start() error = %v", err)
-
-	if err == nil {
-		t.Fatal("Start() error = nil, want the Sentry initialization error")
-	}
-}
-
-// TestListenErrorRequestsShutdownWithExitCode1 occupies the server's port
-// and checks that the listen error asks fx to shut down with exit code 1.
-func TestListenErrorRequestsShutdownWithExitCode1(t *testing.T) {
-	t.Parallel()
-
-	busy, err := (&net.ListenConfig{}).Listen(t.Context(), "tcp", ":0")
-	if err != nil {
-		t.Fatalf("Listen() error = %v", err)
-	}
-
-	t.Cleanup(func() { _ = busy.Close() })
-
-	addr, ok := busy.Addr().(*net.TCPAddr)
-	if !ok {
-		t.Fatalf("listener address %v is not a TCP address", busy.Addr())
-	}
-
-	requests := make(chan []fx.ShutdownOption, 1)
-	s := &Server{
-		log:        slog.New(slog.DiscardHandler),
-		config:     &config.Config{Port: addr.Port},
-		shutdowner: shutdownRecorder{requests: requests},
-	}
-	s.httpServer = s.newHTTPServer()
-
-	go s.serveUntilShutdown()
-
-	select {
-	case opts := <-requests:
-		t.Logf("shutdown options = %v", opts)
-
-		if len(opts) != 1 || opts[0] != fx.ExitCode(1) {
-			t.Errorf("shutdown options = %v, want [fx.ExitCode(1)]", opts)
-		}
-	case <-time.After(5 * time.Second):
-		t.Fatal("no shutdown was requested after the listen error")
-	}
-}