0d0fc2d433
Co-authored-by: Anton Evangelatov <anton.evangelatov@gmail.com> Co-authored-by: Raúl Kripalani <raul@protocol.ai> |
||
---|---|---|
.circleci | ||
.github | ||
composer | ||
dashboards | ||
docker-images | ||
extra | ||
lotus-soup | ||
notes | ||
.gitignore | ||
.gitmodules | ||
DELVING.md | ||
Makefile | ||
README.md |
Project Oni 👹
Our mandate is:
To verify the successful end-to-end outcome of the filecoin protocol and filecoin implementations, under a variety of real-world and simulated scenarios.
➡️ Find out more about our goals, requirements, execution plan, and team culture, in our Project Description.
Table of Contents
- Testing topics
- Repository contents
- Running the test cases
- Catalog
- Debugging
- Dependencies
- Docker images changelog
- Team
Testing topics
These are the topics we are currently centering our testing efforts on. Our testing efforts include fault induction, stress tests, and end-to-end testing.
- slashing: (view test scenarios)
- We are recreating the scenarios that lead to slashing, as they are not readily seen in mono-client testnets.
- Context: slashing is the negative economic consequence of penalising a miner that has breached protocol by deducing FIL and/or removing their power from the network.
- windowed PoSt/sector proving faults: (view test scenarios)
- We are recreating the proving fault scenarios and triggering them in an accelerated fasion (by modifying the system configuration), so that we're able to verify that the sector state transitions properly through the different milestones (temporary faults, termination, etc.), and under chain fork conditions.
- Context: every 24 hours there are 36 windows where miners need to submit their proofs of sector liveness, correctness, and validity. Failure to do so will mark a sector as faulted, and will eventually terminate the sector, triggering slashing consequences for the miner.
- syncing/fork selection: (view test scenarios)
- Newly bootstrapped clients, and paused-then-resumed clients, are able to latch on to the correct chain even in the presence of a large number of forks in the network, either in the present, or throughout history.
- present-time mining/tipset assembly: (view test scenarios)
- Induce forks in the network, create network partitions, simulate chain halts, long-range forks, etc. Stage many kinds of convoluted chain shapes, and network partitions, and ensure that miners are always able to arrive to consensus when disruptions subside.
- catch-up/rush mining: (view test scenarios)
- Induce network-wide, or partition-wide arrests, and investigate what the resulting chain is after the system is allowed to recover.
- Context: catch-up/rush mining is a dedicated pathway in the mining logic that brings the chain up to speed with present time, in order to recover from network halts. Basically it entails producing backdated blocks in a hot loop. Imagine all miners recover in unison from a network-wide disruption; miners will produce blocks for their winning rounds, and will label losing rounds as null rounds. In the current implementation, there is no time for block propagation, so miners will produce solo-chains, and the assumption is that when all these chains hit the network, the fork choice rule will pick the heaviest one. Unfortunately this process is brittle and unbalanced, as it favours the miner that held the highest power before the disruption commenced.
- storage and retrieval deals: (view test scenarios)
- end-to-end flows where clients store and retrieve pieces from miners, including stress testing the system.
- payment channels: (view test scenarios)
- stress testing payment channels via excessive lane creation, excessive payment voucher atomisation, and redemption.
- drand incidents and impact on the filecoin network/protocol/chain: (view test scenarios)
- drand total unavailabilities, drand catch-ups, drand slowness, etc.
- mempool message selection: (view test scenarios)
- soundness of message selection logic; potentially targeted attacks against miners by flooding their message pools with different kinds of messages.
- presealing: (view test scenarios)
- TBD, anything related to this worth testing?
Repository contents
This repository consists of test plans built to be run on Testground.
The source code for the various test cases can be found in the lotus-soup
directory.
Running the test cases
If you are unfamiliar with Testground, we strongly suggest you read the Testground Getting Started guide in order to learn how to install Testground and how to use it.
You can find various composition files describing various test scenarios built as part of Project Oni at lotus-soup/_compositions
directory.
We've designed the test cases so that you can run them via the local:exec
, local:docker
and the cluster:k8s
runners. Note that Lotus miners are quite resource intensive, requiring gigabytes of memory. Hence you would have to run these test cases on a beafy machine (when using local:docker
and local:exec
), or on a Kubernetes cluster (when using cluster:k8s
).
Here are the basics of how to run the baseline deals end-to-end test case:
Running the baseline deals end-to-end test case
-
Compile and Install Testground from source code from the
oni
branch.- See the Getting Started section of the README for instructions.
-
Run a Testground daemon
testground daemon
- Download required Docker images for the
lotus-soup
test plan
make pull-images
Alternatively you can build them locally with
make build-images
- Import the
lotus-soup
test plan into your Testground home directory
testground plan import --from ./lotus-soup
- Init the
filecoin-ffi
Git submodule in theextra
folder.
git submodule update --init --recursive
- Compile the
filecoin-ffi
version locally (necessary if you uselocal:exec
)
cd extra/filecoin-ffi
make
- Run a composition for the baseline deals end-to-end test case
testground run composition -f ./lotus-soup/_compositions/baseline.toml
Catalog
Test cases part of lotus-soup
deals-e2e
- Deals end-to-end test case. Clients pick a miner at random, start a deal, wait for it to be sealed, and try to retrieve from another random miner who offers back the data.drand-halting
- Test case that instructs Drand with a sequence of halt/resume/wait events, while running deals between clients and miners at the same time.deals-stress
- Deals stress test case. Clients pick a miner and send multiple deals (concurrently or serially) in order to test how many deals miners can handle.paych-stress
- A test case exercising various payment channel stress tests.
Compositions part of lotus-soup
baseline-docker-5-1.toml
- Runs abaseline
test (deals e2e test) with a network of 5 clients and 1 miner targetinglocal:docker
baseline-k8s-10-3.toml
- Runs abaseline
test (deals e2e test) with a network of 10 clients and 3 miner targetingcluster:k8s
baseline-k8s-3-1.toml
- Runs abaseline
test (deals e2e test) with a network of 3 clients and 1 miner targetingcluster:k8s
baseline-k8s-3-2.toml
- Runs abaseline
test (deals e2e test) with a network of 3 clients and 2 miner targetingcluster:k8s
baseline.toml
- Runs abaseline
test (deals e2e test) with a network of 3 clients and 2 miner targetinglocal:exec
deals-stress-concurrent-natural-k8s.toml
deals-stress-concurrent-natural.toml
deals-stress-concurrent.toml
deals-stress-serial-natural.toml
deals-stress-serial.toml
drand-halt.toml
local-drand.toml
natural.toml
paych-stress.toml
pubsub-tracer.toml
Debugging
Find commands and how-to guides on debugging test plans at DELVING.md
-
Querying the Lotus RPC API
-
Useful commands / checks
-
Making sure miners are on the same chain
-
Checking deals
-
Sector queries
-
Sector sealing errors
Dependencies
Our current test plan lotus-soup
is building programatically the Lotus filecoin implementation and therefore requires all it's dependencies. The build process is slightly more complicated than a normal Go project, because we are binding a bit of Rust code. Lotus codebase is in Go, however its proofs
and crypto
libraries are in Rust (BLS signatures, SNARK verification, etc.).
Depending on the runner you want to use to run the test plan, these dependencies are included in the build process in a different way, which you should be aware of should you require to use the test plan with a newer version of Lotus:
Filecoin FFI libraries
local:docker
The Rust libraries are included in the Filecoin FFI Git submodule, which is part of the iptestground/oni-buildbase
image. If the FFI changes on Lotus, we have to rebuild this image with the make build-images
command, where X is the next version (see Docker images changelog
below).
local:exec
The Rust libraries are included via the extra
directory. Make sure that the test plan reference to Lotus in go.mod
and the extra
directory are pointing to the same commit of the FFI git submodule. You also need to compile the extra/filecoin-ffi
libraries with make
.
cluster:k8s
The same process as for local:docker
, however you need to make sure that the respective iptestground/oni-buildbase
image is available as a public Docker image, so that the Kubernetes cluster can download it.
proof parameters
Additional to the Filecoin FFI Git submodules, we are also bundling proof parameters
in the iptestground/oni-runtime
image. If these change, you will need to rebuild that image with make build-images
command, where X is the next version. These parameters are downloaded automatically for local:exec
if they are not present.
Docker images changelog
oni-buildbase
v1
=> initial image locking in Filecoin FFI commit ca281af0b6c00314382a75ae869e5cb22c83655b.v2
=> no changes; released only for aligning both images to aesthetically please @nonsense :Dv3
=> locking in Filecoin FFI commit 5342c7c97d1a1df4650629d14f2823d52889edd9.v4
=> locking in Filecoin FFI commit 6a143e06f923f3a4f544c7a652e8b4df420a3d28.v5
=> locking in Filecoin FFI commit cddc56607e1d851ea6d09d49404bd7db70cb3c2e.
oni-runtime
v1
=> initial image with 2048 parameters.v2
=> adds auxiliary tools:net-tools netcat traceroute iputils-ping wget vim curl telnet iproute2 dnsutils
.
oni-runtime-debug
v1
=> initial imagev2
=> locking in Lotus commite21ea53
Team
- @raulk (Captain + TL)
- @nonsense (Testground TG + engineer)
- @yusefnapora (engineer and technical writer)
- @vyzo (engineer)
- @schomatis (advisor)