vh
70b7281182
Prime, 2026-10-09: "vh gets albok-everything". playbooks/nh3-albok-vh-viewer.yaml joins vh to albok-read, albok-personal and albok-feedback on nh3-albok and authorizes his four Macs' public keys for vh; verified at a fresh login that every wing's .browse/ lists and reads. The withdrawal harness gains a macOS driver (run-mac.sh: every mountable FUSE backend, a read-only smoke of the real wings, results copied back), env overrides for a non-container client, and summarize.py. Sanity-checked as vh from the Linux container before staging.
80 lines
3.6 KiB
Bash
80 lines
3.6 KiB
Bash
#!/bin/zsh
|
|
# macOS client run of the albok browse-view withdrawal test (unit 4.3 exposure gate).
|
|
# Staged on nh3-albok under ~vh/albok-browse-test/harness/ with a vh-owned replica beside it.
|
|
# On the Mac:
|
|
# mkdir -p ~/albok-browse-test && cd ~/albok-browse-test && scp 'vh@10.100.50.44:albok-browse-test/harness/*' . && zsh run-mac.sh
|
|
# It tests every FUSE backend this Mac can mount with (the backend decides whether a rename
|
|
# withdraws access), smoke-tests the real wings as vh, and copies the results back to nh3-albok.
|
|
set -u
|
|
cd "${0:A:h}"
|
|
SRV=vh@10.100.50.44
|
|
MNT=$PWD/mnt
|
|
N=${N:-5}
|
|
stamp=$(date +%Y%m%d-%H%M)
|
|
mkdir -p "$MNT" results
|
|
|
|
unmount() { umount "$MNT" 2>/dev/null || diskutil unmount force "$MNT" >/dev/null 2>&1; }
|
|
|
|
{
|
|
echo "date: $(date '+%F %H%M %Z') host: $(scutil --get LocalHostName 2>/dev/null)"
|
|
sw_vers
|
|
echo "arch: $(uname -m)"
|
|
echo "sshfs: $(command -v sshfs || echo MISSING)"
|
|
command -v sshfs >/dev/null && { sshfs -V 2>&1 | head -5; otool -L "$(command -v sshfs)" 2>/dev/null | grep -i fuse; }
|
|
[[ -d /Library/Filesystems/macfuse.fs ]] && echo "macFUSE: $(defaults read /Library/Filesystems/macfuse.fs/Contents/Info CFBundleShortVersionString 2>/dev/null)"
|
|
pkgutil --pkgs 2>/dev/null | grep -i fuse
|
|
} 2>&1 | tee "results/client-$stamp.txt"
|
|
|
|
if ! command -v sshfs >/dev/null; then
|
|
print "\nNo sshfs on this Mac. Install fuse-t (no kernel extension), then re-run this script:"
|
|
print " brew install macos-fuse-t/homebrew-cask/fuse-t macos-fuse-t/homebrew-cask/fuse-t-sshfs"
|
|
exit 2
|
|
fi
|
|
|
|
# Candidate backends: "" = whatever this sshfs mounts with by default.
|
|
candidates=("")
|
|
if pkgutil --pkgs 2>/dev/null | grep -qi fuse-t || [[ -e /usr/local/lib/libfuse-t.dylib ]]; then
|
|
candidates+=("backend=smb" "backend=fskit")
|
|
fi
|
|
[[ -d /Library/Filesystems/macfuse.fs ]] && candidates+=("backend=fskit")
|
|
candidates=("${(@u)candidates}") # dedupe, keeping the empty "default" entry
|
|
|
|
working=()
|
|
for c in "${candidates[@]}"; do
|
|
label=${c:-default}; label=${label#backend=}
|
|
o="ro,follow_symlinks${c:+,$c}"
|
|
if sshfs "$SRV:albok-browse-test/wing/.browse" "$MNT" -o "$o" 2>>"results/client-$stamp.txt" \
|
|
&& ls "$MNT/stash" >/dev/null 2>&1; then
|
|
print "backend $label: mounts"; working+=("$c")
|
|
else
|
|
print "backend $label: does not mount here (skipped)"
|
|
fi
|
|
unmount
|
|
done
|
|
(( ${#working} )) || { print "No backend mounted; send results/client-$stamp.txt to infra-ops."; exit 3; }
|
|
|
|
for c in "${working[@]}"; do
|
|
label=${c:-default}; label=${label#backend=}
|
|
print "\n== trials, backend $label (N=$N per condition; ~3 min)"
|
|
ALBOK_TEST_SRV=$SRV ALBOK_TEST_KEY= ALBOK_TEST_KNOWN_HOSTS= ALBOK_TEST_MNT=$MNT \
|
|
ALBOK_TEST_EXTRA_OPTS=$c python3 run-trials.py manifest.json $N > "results/trials-$label-$stamp.json"
|
|
python3 summarize.py "results/trials-$label-$stamp.json"
|
|
done
|
|
|
|
# Smoke test of the REAL views as vh (read-only; prints counts, never content).
|
|
first=${working[1]}
|
|
print "\n== real wings as vh" | tee "results/smoke-$stamp.txt"
|
|
for w in fleet/memory fleet/stash library/fiction library/nonfiction personal/notes personal/agent-feedback; do
|
|
if sshfs "$SRV:/srv/albok/store/$w/.browse" "$MNT" -o "ro,follow_symlinks${first:+,$first}" 2>/dev/null; then
|
|
n=$(find "$MNT" -type f 2>/dev/null | wc -l | tr -d ' ')
|
|
f=$(find "$MNT" -type f 2>/dev/null | head -1)
|
|
b=$([[ -n $f ]] && head -c 4096 "$f" | wc -c | tr -d ' ' || echo -)
|
|
print "$w: mount ok, files=$n, first-file bytes read=$b"
|
|
else
|
|
print "$w: MOUNT FAILED"
|
|
fi | tee -a "results/smoke-$stamp.txt"
|
|
unmount
|
|
done
|
|
|
|
scp -q results/*-$stamp.* "$SRV:albok-browse-test/results/" && print "\nResults copied to nh3-albok; tell infra-ops it is done."
|