Files
PSProxmoxVE/tests/PSProxmoxVE.Core.Tests/Utilities/GuestLockRetryTests.cs
T
goodolclint-claude[bot] 1bc46567f5 fix: inject the guest-lock retry delay so tests no longer race wall clock (#167)
PveHttpClientLockRetryTests set GuestLockRetry's retry budget via reflection
on a private field with no production writer, and scripted two lock
failures to land inside a 400ms window. A cold or loaded CI runner's
first-attempt JIT and scheduling could burn past 400ms before the second
attempt started, failing the test though the retry itself was correct
(#134).

GuestLockRetry.ExecuteAsync gains an internal overload that takes the
inter-attempt delay as a Func<TimeSpan, Task>; the public overload keeps
defaulting to Task.Delay, so production behaviour (45s window, budget/4
capped at 2s) is unchanged. PveHttpClient gains a matching internal
constructor seam (window, handler, delay), replacing the reflection the
tests used for both the private HttpClient and the retry window. Tests
now pass a no-op delay, so the retry loop's real elapsed time drops to
microseconds and the production 45s window can never be exhausted by
runner speed.

Two tests pin that production still waits for real: one records the
delay invocations through the internal seam and asserts the computed
interval, the other drives the public overload with a small window and
asserts wall-clock time actually advances. Both were mutation-tested
against a no-op-default regression and fail without the fix.

The give-up test was renamed (PutAsync_DoesNotReissueWhenTheRetryWindowIsAlreadySpent)
to describe what TimeSpan.Zero actually proves: the client never attempts
a reissue once the budget reads spent, not a multi-attempt exhaustion
sequence — a review finding on the original name.

Out of scope, noted for follow-up: GuestLockRetryTests.cs's synchronous
Execute() tests still use a 400ms ShortWindow with real Thread.Sleep,
which is the same flake shape on the sync path; Execute() has no delay
seam. PveHttpClientTimeoutTests.cs and PveHttpClientFormEncodingTests.cs
still reflect on the private _httpClient field, which the new handler
seam could also retire.

Co-authored-by: goodolclint-claude[bot] <323206664+goodolclint-claude[bot]@users.noreply.github.com>
2026-09-02 17:10:52 +00:00

228 lines
8.2 KiB
C#

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Net;
using System.Threading.Tasks;
using PSProxmoxVE.Core.Exceptions;
using PSProxmoxVE.Core.Utilities;
using Xunit;
namespace PSProxmoxVE.Core.Tests.Utilities
{
public class GuestLockRetryTests
{
private const string VmLockError =
"can't lock file '/var/lock/qemu-server/lock-100.conf' - got timeout";
private const string LxcLockError =
"can't lock file '/run/lock/lxc/pve-config-100.lock' - got timeout";
// The gap between attempts scales with the budget, so a short window keeps the
// retrying tests off a 2s production sleep.
private static readonly TimeSpan ShortWindow = TimeSpan.FromMilliseconds(400);
private static PveApiException ApiError(string message) =>
new PveApiException(HttpStatusCode.InternalServerError, message, "nodes/pve9a/qemu/100/config", "PUT");
private static PveTaskFailedException TaskError(string exitStatus) =>
new PveTaskFailedException("UPID:pve9a:00000001:qmreset:100:root@pam:", exitStatus);
[Fact]
public void IsLockTimeout_MatchesTheVmFlockErrorFromBothSurfaces()
{
Assert.True(GuestLockRetry.IsLockTimeout(ApiError(VmLockError)));
Assert.True(GuestLockRetry.IsLockTimeout(TaskError(VmLockError)));
}
[Fact]
public void IsLockTimeout_MatchesTheContainerFlockError()
{
Assert.True(GuestLockRetry.IsLockTimeout(TaskError(LxcLockError)));
}
[Theory]
[InlineData("VM 100 not running")]
[InlineData("can't lock file '/var/lock/qemu-server/lock-100.conf'")]
[InlineData("got timeout")]
// PVE::Tools::lock_file uses this same wording for locks that carry no
// reissue-safety guarantee. Only the two guest config paths may retry.
[InlineData("can't lock file '/run/lock/pve-manager/pve-storage-local' - got timeout")]
[InlineData("can't lock file '/var/lock/pve-manager/pve-backup' - got timeout")]
[InlineData("can't lock file '/run/lock/lvm/V_pve' - got timeout")]
// A message PVE prefixed with its own context means the worker had already
// started; reissuing it could repeat work that landed.
[InlineData("clone failed: can't lock file '/var/lock/qemu-server/lock-100.conf' - got timeout")]
[InlineData("unable to resize: can't lock file '/var/lock/qemu-server/lock-100.conf' - got timeout")]
public void IsLockTimeout_RejectsEveryOtherFailure(string message)
{
Assert.False(GuestLockRetry.IsLockTimeout(ApiError(message)));
Assert.False(GuestLockRetry.IsLockTimeout(TaskError(message)));
}
[Fact]
public void IsLockTimeout_ReadsWhatPveSaidRatherThanTheComposedMessage()
{
// Both exception types prefix Message with their own context, which would
// defeat the anchor if the predicate matched on Message.
var api = ApiError(VmLockError);
var task = TaskError(VmLockError);
Assert.StartsWith("PVE API error", api.Message);
Assert.StartsWith("Task UPID:", task.Message);
Assert.True(GuestLockRetry.IsLockTimeout(api));
Assert.True(GuestLockRetry.IsLockTimeout(task));
}
[Fact]
public void IsLockTimeout_RejectsExceptionTypesThatAreNotApiFailures()
{
Assert.False(GuestLockRetry.IsLockTimeout(new InvalidOperationException(VmLockError)));
}
[Fact]
public void Execute_ReportsEachReissueToTheOnRetryHook()
{
var attempts = 0;
var reported = new List<Exception>();
GuestLockRetry.Execute(() =>
{
attempts++;
if (attempts < 3) throw TaskError(VmLockError);
return 0;
}, ShortWindow, onRetry: reported.Add);
Assert.Equal(2, reported.Count);
Assert.All(reported, e => Assert.IsType<PveTaskFailedException>(e));
}
[Fact]
public void Execute_ReturnsWithoutRetryingWhenTheOperationSucceeds()
{
var attempts = 0;
var result = GuestLockRetry.Execute(() => { attempts++; return 42; });
Assert.Equal(42, result);
Assert.Equal(1, attempts);
}
[Fact]
public void Execute_ReissuesUntilTheLockClears()
{
var attempts = 0;
var result = GuestLockRetry.Execute(() =>
{
attempts++;
if (attempts < 2) throw TaskError(VmLockError);
return "cloned";
}, ShortWindow);
Assert.Equal("cloned", result);
Assert.Equal(2, attempts);
}
[Fact]
public void Execute_DoesNotRetryOtherFailures()
{
var attempts = 0;
Assert.Throws<PveApiException>(() => GuestLockRetry.Execute<int>(() =>
{
attempts++;
throw ApiError("VM 100 not running");
}));
Assert.Equal(1, attempts);
}
[Fact]
public async Task ExecuteAsync_ReissuesUntilTheLockClears()
{
var attempts = 0;
var result = await GuestLockRetry.ExecuteAsync(() =>
{
attempts++;
if (attempts < 2) throw ApiError(VmLockError);
return Task.FromResult("written");
}, ShortWindow);
Assert.Equal("written", result);
Assert.Equal(2, attempts);
}
[Fact]
public async Task ExecuteAsync_DoesNotRetryOtherFailures()
{
var attempts = 0;
await Assert.ThrowsAsync<PveApiException>(() => GuestLockRetry.ExecuteAsync<int>(() =>
{
attempts++;
throw ApiError("can't lock file '/run/lock/lvm/V_pve' - got timeout");
}));
Assert.Equal(1, attempts);
}
[Fact]
public async Task ExecuteAsync_InvokesTheInjectedDelayOncePerRetryWithTheComputedInterval()
{
var attempts = 0;
var delays = new List<TimeSpan>();
var result = await GuestLockRetry.ExecuteAsync(() =>
{
attempts++;
if (attempts < 3) throw ApiError(VmLockError);
return Task.FromResult("written");
}, GuestLockRetry.DefaultWindow, delay =>
{
delays.Add(delay);
return Task.CompletedTask;
});
Assert.Equal("written", result);
// budget/4 capped at 2s; DefaultWindow (45s) puts the quarter above the cap.
Assert.Equal(new[] { TimeSpan.FromSeconds(2), TimeSpan.FromSeconds(2) }, delays);
}
[Fact]
public async Task ExecuteAsync_PublicOverloadActuallyWaitsBetweenAttempts()
{
var attempts = 0;
var window = TimeSpan.FromMilliseconds(200);
var elapsed = Stopwatch.StartNew();
await GuestLockRetry.ExecuteAsync(() =>
{
attempts++;
if (attempts < 2) throw ApiError(VmLockError);
return Task.FromResult("written");
}, window);
elapsed.Stop();
// quarter of 200ms is 50ms; a no-op delay would leave this near zero. The
// threshold is well under 50ms so Task.Delay's own timer slop (it can return
// a fraction of a millisecond early) never makes this assertion itself flaky.
Assert.True(elapsed.Elapsed >= TimeSpan.FromMilliseconds(20),
$"Expected the public overload to wait close to one retry interval; took {elapsed.Elapsed}.");
}
[Fact]
public void Execute_GivesUpAndRethrowsOnceTheWindowElapses()
{
var attempts = 0;
var ex = Assert.Throws<PveTaskFailedException>(() => GuestLockRetry.Execute<int>(
() => { attempts++; throw TaskError(VmLockError); },
TimeSpan.Zero));
Assert.Contains("got timeout", ex.Message);
Assert.Equal(1, attempts);
}
}
}