mirror of
https://github.com/rustfs/rustfs.git
synced 2026-08-07 05:43:14 +00:00
f403ed1c2e
* feat(embedded): allow multiple embedded servers to coexist in one process
backlog#1052 S5: turn the embedded startup guard into a sequential lock
and make every write-once shared cell tolerate a second embedded start.
Two RustFSServers on different ports and volumes now start, run, and
shut down independently in the same process.
- EMBEDDED_SERVER_STARTED is released once each startup hands off; a
second startup that runs after the first is no longer rejected.
- The second embedded server constructs its own InstanceContext instead
of adopting the process bootstrap one, so region/endpoints/deployment
id land on that context (the first server keeps adopting bootstrap to
keep single-instance ambient facades unchanged).
- Startup-time tolerant paths:
- action_credentials publish treats AlreadyInitialized as success
(per-server ActionCredentialHandle already holds the real creds).
- GLOBAL_RUSTFS_PORT warns instead of panicking on a second set.
- Observability install returns Ok when the process subscriber is
already set — the second server reuses it.
- New acceptance test proves two servers start, respond on their own
ports, and one can be shut down without disturbing the other; the
survivor keeps serving S3 requests. IAM and root-credential lookup
still share a process domain (a second server whose creds differ from
the first will fail signature validation), tracked as a follow-up.
- Embedded doc rewritten: 'Limitations' → 'Multi-instance status'; the
AlreadyStarted error is now scoped to concurrent startups only.
The remaining work in #1052 is the auth path per-server dispatch and the
matching data-plane routing so two servers with different credentials
serve independent buckets end-to-end.
* feat(app): per-server auth and application context for multiple embedded servers (#4633)
backlog#1052 S6: each embedded server now authenticates against — and
its request path resolves — its OWN application context, so two servers
with different root credentials each accept their own access key and
reject the other's.
- AppContext is per-server: ensure_startup_after_iam constructs a fresh
context around this server's store + IAM + KMS and installs it into the
server's own ServerContextSlot, then publishes it as the process
default first-writer-wins (publish_global_app_context) for legacy
ambient readers. The old 'reuse the global if present' path is gone.
- FS::check (the S3 data-plane access gate) resolves auth against
self.server_ctx's context: check_key_valid gains a _with_context
variant that takes the root credentials and IAM system from an explicit
context (None = ambient, unchanged for all 140+ existing callers). The
region and the server context slot are published into the request
extensions for downstream handlers.
- Each embedded server seeds its own root credentials into its context
(ActionCredentialHandle.publish) at startup, so credential validation
no longer falls back to the first server's process-global identity.
- The bucket/object/multipart use-cases resolve their store from the
server's context (bucket_usecase_for/object_usecase_for/... take &FS).
New acceptance test: two servers with distinct credentials each
authenticate with their own key and reject the other's.
KNOWN FOLLOW-UP: full bucket-namespace isolation still requires threading
the instance context through the lower ecstore data plane (peer_sys /
disk registry / bucket-metadata reads still resolve via the process
GLOBAL_OBJECT_API), so the two servers do not yet present independent
bucket listings even though each holds its own store. That deeper pass —
a continuation of the #939 object-graph ctx threading — is the remaining
work on #1052.
Stacked on the S5 guard change.
380 lines
12 KiB
Rust
380 lines
12 KiB
Rust
// Copyright 2024 RustFS Team
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
use super::instance::{InstanceContext, bootstrap_ctx};
|
|
use crate::bucket::bandwidth::monitor::Monitor;
|
|
use crate::{
|
|
bucket::lifecycle::bucket_lifecycle_ops::LifecycleSys,
|
|
disk::DiskStore,
|
|
layout::endpoints::{EndpointServerPools, PoolEndpoints, SetupType},
|
|
services::tier::tier::TierConfigMgr,
|
|
store::ECStore,
|
|
};
|
|
use lazy_static::lazy_static;
|
|
use rustfs_lock::client::LockClient;
|
|
use std::{
|
|
collections::HashMap,
|
|
sync::{Arc, OnceLock},
|
|
time::SystemTime,
|
|
};
|
|
use tokio::sync::{OnceCell, RwLock};
|
|
use tokio_util::sync::CancellationToken;
|
|
use tracing::warn;
|
|
use uuid::Uuid;
|
|
|
|
pub const DISK_ASSUME_UNKNOWN_SIZE: u64 = 1 << 30;
|
|
pub const DISK_MIN_INODES: u64 = 1000;
|
|
pub const DISK_FILL_FRACTION: f64 = 0.99;
|
|
pub const DISK_RESERVE_FRACTION: f64 = 0.15;
|
|
|
|
// Global singletons for backward compatibility with MinIO port.
|
|
// These should be migrated to AppContext over time.
|
|
// See issue #730 for migration plan.
|
|
//
|
|
// Tier A (needs migration): GLOBAL_OBJECT_API, GLOBAL_LOCAL_DISK_*,
|
|
// GLOBAL_ROOT_DISK_THRESHOLD, GLOBAL_LIFECYCLE_SYS, GLOBAL_EVENT_NOTIFIER, etc.
|
|
// Tier B (keep as static): GLOBAL_RUSTFS_PORT, env var caches, etc.
|
|
//
|
|
// Phase 5 (backlog#939): identity/runtime state (erasure setup, S3 region,
|
|
// deployment id, endpoint topology, tier config manager, ...) is moving into
|
|
// the per-instance `InstanceContext` (see `super::instance`); the facades below
|
|
// forward to the current instance's context.
|
|
lazy_static! {
|
|
static ref GLOBAL_RUSTFS_PORT: OnceLock<u16> = OnceLock::new();
|
|
pub static ref GLOBAL_OBJECT_API: OnceLock<Arc<ECStore>> = OnceLock::new();
|
|
pub static ref GLOBAL_ROOT_DISK_THRESHOLD: RwLock<u64> = RwLock::new(0);
|
|
pub static ref GLOBAL_LIFECYCLE_SYS: Arc<LifecycleSys> = LifecycleSys::new();
|
|
pub static ref GLOBAL_BOOT_TIME: OnceCell<SystemTime> = OnceCell::new();
|
|
pub static ref GLOBAL_LOCAL_NODE_NAME_FALLBACK: String = "127.0.0.1:9000".to_string();
|
|
pub static ref GLOBAL_LOCAL_NODE_NAME_HEX_FALLBACK: String =
|
|
rustfs_utils::crypto::hex(GLOBAL_LOCAL_NODE_NAME_FALLBACK.as_bytes());
|
|
pub static ref GLOBAL_LOCAL_LOCK_CLIENT: OnceLock<Arc<dyn LockClient>> = OnceLock::new();
|
|
pub static ref GLOBAL_LOCK_CLIENTS: OnceLock<HashMap<String, Arc<dyn LockClient>>> = OnceLock::new();
|
|
}
|
|
|
|
pub fn init_global_bucket_monitor(num_nodes: u64) {
|
|
if !current_ctx().init_bucket_monitor(num_nodes) {
|
|
warn!(
|
|
"bucket monitor already initialized, ignoring re-initialization with num_nodes={}",
|
|
num_nodes
|
|
);
|
|
}
|
|
}
|
|
|
|
pub fn get_global_bucket_monitor() -> Option<Arc<Monitor>> {
|
|
current_ctx().bucket_monitor()
|
|
}
|
|
|
|
// Startup-owned instance-context state intentionally fails fast on duplicate writes.
|
|
// A second write means startup published conflicting runtime scalar state.
|
|
|
|
/// Get the global rustfs port
|
|
///
|
|
/// # Returns
|
|
/// * `u16` - The global rustfs port
|
|
///
|
|
pub fn global_rustfs_port() -> u16 {
|
|
if let Some(p) = GLOBAL_RUSTFS_PORT.get() {
|
|
*p
|
|
} else {
|
|
rustfs_config::DEFAULT_PORT
|
|
}
|
|
}
|
|
|
|
/// Set the global rustfs port
|
|
///
|
|
/// # Arguments
|
|
/// * `value` - The port value to set globally
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
pub fn set_global_rustfs_port(value: u16) {
|
|
// A second embedded server publishes into its own context slot for
|
|
// request dispatch (backlog#1052 S2), but the process still exposes a
|
|
// single rustfs port to clients that ask the process directly; ignore
|
|
// second inits with a warning instead of panicking.
|
|
if GLOBAL_RUSTFS_PORT.set(value).is_err() {
|
|
warn!("global rustfs port already initialized, ignoring re-initialization");
|
|
}
|
|
}
|
|
|
|
/// Set the global deployment id
|
|
///
|
|
/// # Arguments
|
|
/// * `id` - The Uuid to set as the global deployment id
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
///
|
|
pub fn set_global_deployment_id(id: Uuid) {
|
|
current_ctx().set_deployment_id(id);
|
|
}
|
|
|
|
/// Get the global deployment id
|
|
///
|
|
/// # Returns
|
|
/// * `Option<String>` - The global deployment id as a string, if set
|
|
///
|
|
pub fn get_global_deployment_id() -> Option<String> {
|
|
current_ctx().deployment_id().map(|v| v.to_string())
|
|
}
|
|
/// Set the global endpoints
|
|
///
|
|
/// # Arguments
|
|
/// * `eps` - A vector of PoolEndpoints to set globally
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
///
|
|
pub fn set_global_endpoints(eps: Vec<PoolEndpoints>) {
|
|
current_ctx().set_endpoints(EndpointServerPools::from(eps));
|
|
}
|
|
|
|
/// Get the global endpoints
|
|
///
|
|
/// # Returns
|
|
/// * `EndpointServerPools` - The global endpoints
|
|
///
|
|
pub fn get_global_endpoints() -> EndpointServerPools {
|
|
current_ctx().endpoints().unwrap_or_default()
|
|
}
|
|
|
|
pub fn get_global_endpoints_opt() -> Option<EndpointServerPools> {
|
|
current_ctx().endpoints()
|
|
}
|
|
|
|
#[cfg(test)]
|
|
pub async fn reset_local_disk_test_state() {
|
|
let ctx = current_ctx();
|
|
ctx.local_disk_map().write().await.clear();
|
|
ctx.local_disk_id_map().write().await.clear();
|
|
ctx.local_disk_set_drives().write().await.clear();
|
|
}
|
|
|
|
pub async fn is_first_cluster_node_local() -> bool {
|
|
get_global_endpoints().first_local()
|
|
}
|
|
|
|
pub fn get_global_tier_config_mgr() -> Arc<RwLock<TierConfigMgr>> {
|
|
current_ctx().tier_config_mgr()
|
|
}
|
|
|
|
/// Create a new object layer instance
|
|
///
|
|
/// # Returns
|
|
/// * `Option<Arc<ECStore>>` - The global object layer instance, if set
|
|
///
|
|
pub fn new_object_layer_fn() -> Option<Arc<ECStore>> {
|
|
GLOBAL_OBJECT_API.get().cloned()
|
|
}
|
|
|
|
pub type ObjectStoreResolver = dyn Fn() -> Option<Arc<ECStore>> + Send + Sync + 'static;
|
|
|
|
static GLOBAL_OBJECT_STORE_RESOLVER: OnceLock<Arc<ObjectStoreResolver>> = OnceLock::new();
|
|
|
|
pub fn set_object_store_resolver(resolver: Arc<ObjectStoreResolver>) -> bool {
|
|
GLOBAL_OBJECT_STORE_RESOLVER.set(resolver).is_ok()
|
|
}
|
|
|
|
pub fn resolve_object_store_handle() -> Option<Arc<ECStore>> {
|
|
GLOBAL_OBJECT_STORE_RESOLVER
|
|
.get()
|
|
.and_then(|resolver| resolver())
|
|
.or_else(new_object_layer_fn)
|
|
}
|
|
|
|
/// Resolve the instance context for the legacy free-function facade.
|
|
///
|
|
/// Prefers the currently-published `ECStore`'s own context; before any store
|
|
/// is published (e.g. during storage startup, or in unit tests) it falls back
|
|
/// to the process-level [`bootstrap_ctx`]. Because `ECStore::new` adopts the
|
|
/// bootstrap `Arc`, single-instance callers always observe one and the same
|
|
/// context — behavior is unchanged from the previous process-global bools.
|
|
pub(crate) fn current_ctx() -> Arc<InstanceContext> {
|
|
resolve_object_store_handle()
|
|
.map(|store| store.ctx.clone())
|
|
.unwrap_or_else(bootstrap_ctx)
|
|
}
|
|
|
|
/// Set the global object layer
|
|
///
|
|
/// # Arguments
|
|
/// * `o` - The ECStore instance to set globally
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
pub async fn set_object_layer(o: Arc<ECStore>) {
|
|
if GLOBAL_OBJECT_API.set(o).is_err() {
|
|
warn!("global object layer already initialized, ignoring re-initialization");
|
|
}
|
|
}
|
|
|
|
/// Check if the setup type is distributed erasure coding
|
|
///
|
|
/// # Returns
|
|
/// * `bool` - True if the setup type is distributed erasure coding, false otherwise
|
|
///
|
|
pub async fn is_dist_erasure() -> bool {
|
|
current_ctx().is_dist_erasure().await
|
|
}
|
|
|
|
/// Check if the setup type is erasure coding with single data center
|
|
///
|
|
/// # Returns
|
|
/// * `bool` - True if the setup type is erasure coding with single data center, false otherwise
|
|
///
|
|
pub async fn is_erasure_sd() -> bool {
|
|
current_ctx().is_erasure_sd().await
|
|
}
|
|
|
|
/// Check if the setup type is erasure coding
|
|
///
|
|
/// # Returns
|
|
/// * `bool` - True if the setup type is erasure coding, false otherwise
|
|
///
|
|
pub async fn is_erasure() -> bool {
|
|
current_ctx().is_erasure().await
|
|
}
|
|
|
|
/// Update the global erasure type based on the setup type
|
|
///
|
|
/// # Arguments
|
|
/// * `setup_type` - The SetupType to update the global erasure type
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
pub async fn update_erasure_type(setup_type: SetupType) {
|
|
current_ctx().update_erasure_type(setup_type).await;
|
|
}
|
|
|
|
// pub fn is_legacy() -> bool {
|
|
// if let Some(endpoints) = GLOBAL_ENDPOINTS.get() {
|
|
// endpoints.as_ref().len() == 1 && endpoints.as_ref()[0].legacy
|
|
// } else {
|
|
// false
|
|
// }
|
|
// }
|
|
|
|
pub(crate) type TypeLocalDiskSetDrives = Vec<Vec<Vec<Option<DiskStore>>>>;
|
|
|
|
/// Set the global region
|
|
///
|
|
/// # Arguments
|
|
/// * `region` - The Region instance to set globally
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
pub fn set_global_region(region: s3s::region::Region) {
|
|
current_ctx().set_region(region);
|
|
}
|
|
|
|
/// Get the global region
|
|
///
|
|
/// # Returns
|
|
/// * `Option<s3s::region::Region>` - The global region, if set
|
|
///
|
|
pub fn get_global_region() -> Option<s3s::region::Region> {
|
|
current_ctx().region()
|
|
}
|
|
|
|
/// Initialize the global background services cancellation token
|
|
///
|
|
/// # Arguments
|
|
/// * `cancel_token` - The CancellationToken instance to set globally
|
|
///
|
|
/// # Returns
|
|
/// * `Ok(())` if successful
|
|
/// * `Err(CancellationToken)` if setting fails
|
|
///
|
|
pub fn init_background_services_cancel_token(cancel_token: CancellationToken) -> Result<(), CancellationToken> {
|
|
current_ctx().init_background_cancel_token(cancel_token)
|
|
}
|
|
|
|
/// Get the global background services cancellation token
|
|
///
|
|
/// # Returns
|
|
/// * `Option<&'static CancellationToken>` - The global cancellation token, if set
|
|
///
|
|
pub fn get_background_services_cancel_token() -> Option<CancellationToken> {
|
|
current_ctx().background_cancel_token()
|
|
}
|
|
|
|
/// Create and initialize the global background services cancellation token
|
|
///
|
|
/// # Returns
|
|
/// * `CancellationToken` - The newly created global cancellation token
|
|
///
|
|
pub fn create_background_services_cancel_token() -> CancellationToken {
|
|
let cancel_token = CancellationToken::new();
|
|
init_background_services_cancel_token(cancel_token.clone())
|
|
.expect("background services cancel token should be initialized once during startup");
|
|
cancel_token
|
|
}
|
|
|
|
/// Shutdown all background services gracefully
|
|
///
|
|
/// # Returns
|
|
/// * None
|
|
pub fn shutdown_background_services() {
|
|
if let Some(cancel_token) = get_background_services_cancel_token() {
|
|
cancel_token.cancel();
|
|
}
|
|
}
|
|
|
|
/// Set the global lock client (first LocalClient created)
|
|
///
|
|
/// # Arguments
|
|
/// * `client` - The LockClient instance to set globally
|
|
///
|
|
/// # Returns
|
|
/// * `Ok(())` if successful
|
|
/// * `Err(Arc<dyn LockClient>)` if setting fails (client already set)
|
|
///
|
|
pub fn set_global_lock_client(client: Arc<dyn LockClient>) -> Result<(), Arc<dyn LockClient>> {
|
|
GLOBAL_LOCAL_LOCK_CLIENT.set(client)
|
|
}
|
|
|
|
/// Get the global lock client
|
|
///
|
|
/// # Returns
|
|
/// * `Option<Arc<dyn LockClient>>` - The global lock client, if set
|
|
///
|
|
pub fn get_global_lock_client() -> Option<Arc<dyn LockClient>> {
|
|
GLOBAL_LOCAL_LOCK_CLIENT.get().cloned()
|
|
}
|
|
|
|
/// Set the global lock clients map
|
|
///
|
|
/// # Arguments
|
|
/// * `clients` - The HashMap of lock clients to set globally
|
|
///
|
|
/// # Returns
|
|
/// * `Ok(())` if successful
|
|
/// * `Err(HashMap<String, Arc<dyn LockClient>>)` if setting fails (clients already set)
|
|
///
|
|
pub fn set_global_lock_clients(
|
|
clients: HashMap<String, Arc<dyn LockClient>>,
|
|
) -> Result<(), HashMap<String, Arc<dyn LockClient>>> {
|
|
GLOBAL_LOCK_CLIENTS.set(clients)
|
|
}
|
|
|
|
/// Get the global lock clients map
|
|
///
|
|
/// # Returns
|
|
/// * `Option<&HashMap<String, Arc<dyn LockClient>>>` - The global lock clients map, if set
|
|
///
|
|
pub fn get_global_lock_clients() -> Option<&'static HashMap<String, Arc<dyn LockClient>>> {
|
|
GLOBAL_LOCK_CLIENTS.get()
|
|
}
|