mirror of
https://github.com/jmcorgan/fips.git
synced 2026-07-30 19:46:15 +00:00
Johnathan Corgan
bf173d8d98
Every chaos scenario draws n01 at the top of its topology, and until now that held in three of thirteen. The mesh roots itself at the numerically smallest NodeAddr, which is a hash of the node's public key and bears no relation to the node numbering, so which node ended up as root was effectively arbitrary. The consequences were not cosmetic. cost-reeval rooted at n04, its own designated test subject, so that node had no parent and the periodic parent switch the scenario exists to observe could not occur at all. mixed-technology rooted at n09, which put its two documented parent criteria out of reach and made correct cost-based selection look like a defect. Identities are still derived from the mesh name exactly as before and are still deterministic. What changes is which node id holds which one: they are now assigned in NodeAddr order, so n01 holds the smallest and is the root. Verified against a model of the daemon's own derivation that reproduces the previously observed root for every scenario and n01's address byte for byte; all twelve pinned scenarios now root at n01. smoke-10 deliberately opts out via pin_root: false so that root election from an arbitrary key distribution stays exercised somewhere. Its assertion is a convergence floor and is root-agnostic, which is why it is the cheapest home for that. The new key is rejected when non-boolean, and a near-miss spelling is rejected as unknown; both checked. Not yet established: the trees themselves change, so the parent-dependent assertions in bottleneck-parent, cost-avoidance and cost-stability need re-deriving against live runs. Those are held until the in-flight CI finishes, because a chaos run rebuilds the shared fips-test image that run is using.
52 lines
1.6 KiB
YAML
52 lines
1.6 KiB
YAML
scenario:
|
|
name: "smoke-10"
|
|
seed: 42
|
|
duration_secs: 30
|
|
|
|
topology:
|
|
num_nodes: 10
|
|
algorithm: random_geometric
|
|
params:
|
|
radius: 0.5
|
|
ensure_connected: true
|
|
subnet: "172.20.0.0/24"
|
|
ip_start: 10
|
|
# The one scenario that deliberately does NOT pin the root. Every other
|
|
# scenario assigns identities in NodeAddr order so that n01 is root and its
|
|
# diagram describes the tree that actually forms. That is right for them,
|
|
# because they test parent selection and were silently testing it under a
|
|
# root they did not intend, but applying it everywhere would leave root
|
|
# election itself exercised nowhere. This is the generic 10-node convergence
|
|
# baseline and its `baseline` assertion is root-agnostic, so it is the
|
|
# cheapest place to keep election under test.
|
|
# Do not "fix" this to true for consistency with the others.
|
|
pin_root: false
|
|
|
|
# Phase 2+ features (disabled for MVP)
|
|
netem:
|
|
enabled: false
|
|
|
|
link_flaps:
|
|
enabled: false
|
|
|
|
traffic:
|
|
enabled: false
|
|
|
|
# Baseline: the mesh came up, agreed on a root, and took parents. This
|
|
# asserts nothing about any particular subsystem; it exists so that a
|
|
# run in which the mesh never formed cannot report success, which until
|
|
# now it could, because this scenario carried no assertions at all.
|
|
#
|
|
# Ten nodes, one root, nine parented in all six provably-completed
|
|
# archived runs. As the smoke test this is the scenario whose silent
|
|
# success was least defensible.
|
|
assertions:
|
|
baseline:
|
|
min_nodes_reporting: 10
|
|
max_roots: 1
|
|
min_nodes_parented: 9
|
|
|
|
logging:
|
|
rust_log: "info"
|
|
output_dir: "./sim-results"
|