CI/pipeline: - KERNEL_TARBALL passed as a YAML env literal '~' was never tilde-expanded and would have failed every hosted kernel-build dispatch; the path is now exported from the shell. Verified reproducible before the fix. - Every job gets timeout-minutes; boot smoke uses timeout -k so a wedged qemu is SIGKILLed instead of holding the job. - Tarball fetch + fail-closed sha256 verification deduplicated into build/fetch-kernel-tarball.sh (with curl retries), used by build-kernel.sh and both CI jobs. busybox fetch gains retries too. - ccache layer for kernel-build (cache keyed on defconfig+patches) recovers the incremental-compile speed the ephemeral-runner move cost. - build-kernel.sh now asserts every fragment option survived olddefconfig — merge_config -m pastes text and Kconfig silently drops unmet symbols. rs485-bridge: - pending-buffer cap (2x max RTU ADU) instead of unbounded growth; explicit accept-loop error handling with backoff instead of .flatten(); per-arm inline bounds instead of the string-keyed lookup whose default would have mis-bounded a future get-input; control-socket cleanup errors surfaced; flag-shaped values rejected in arg parsing; doc example uses a private mktemp dir. Test timing margins widened for contended runners (gap 25->120ms, 60x margin on the split-frame test). VM harness: - stage-1/stage-2 boot scripts share one validated slot parser and one by-name populator (qemu/rootfs/etc/warden-lib.sh) — the duplicated parser had already diverged on validation; userdata/oem mount failures now fail fast with a greppable sentinel; udhcpc fallback keys off the interface actually having an address; switch_root applet guarded. - boot-smoke delegates the qemu invocation to run.sh (machine shape lives in ONE place); run.sh port 0 disables a hostfwd. - mkimage: unknown partition names fail at build time; DISK_END is a max, not last-entry; --state keys validated as filenames. - portal-scenario: mock readiness is asserted (no silent fall-through), hostfwd port collisions retried, mount-failure sentinel fails fast. - ui-shot: fixed sleeps replaced with bounded screendump polling; the repaint assertion is real and documented as such. qmp.py loses its module-global and gains argv validation. Docs/scrub: bench-host paths and the site AP name removed from six more port docs and two evidence tables; path-bearing build artifacts (.elf, .map) untracked (the 154-byte firmware .bin is path-free and stays); ADR-0003 marked visibility-superseded by ADR-0007; stale section cross-reference fixed; flare-edge noted as private for outside readers; stale root-level review report removed per the new workspace rule. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018HUayid7W5w7jBdb9Rrj1K
132 lines
4.5 KiB
Bash
Executable File
132 lines
4.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Display + touch scenario: boot the VM headless with virtio-gpu, wait for the
|
|
# LVGL UI (fbdev build) to render a real frame, then inject an absolute touch
|
|
# tap on the Metrics tab (virtio-tablet) and ASSERT the frame changed — the
|
|
# device-level analogue of flare-edge's Xvfb/xdotool sim-test.sh. Readiness is
|
|
# polled from screendumps on bounded deadlines, never guessed with fixed
|
|
# sleeps: TCG renders CPU-bound and a loaded host can be arbitrarily slow.
|
|
#
|
|
# FAILS CLOSED on missing prerequisites.
|
|
#
|
|
# Usage: ui-shot.sh <zImage-virt> [out-dir]
|
|
set -euo pipefail
|
|
|
|
HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" # qemu/tests/
|
|
QDIR="$(cd "$HERE/.." && pwd)" # qemu/
|
|
|
|
ZIMAGE="${1:-}"
|
|
OUTDIR="${2:-$QDIR/out}"
|
|
if [ -z "$ZIMAGE" ] || [ ! -f "$ZIMAGE" ]; then
|
|
echo "FATAL: usage: $0 <zImage> [out-dir] — the virt.fragment kernel variant" >&2
|
|
exit 1
|
|
fi
|
|
[ -x "$QDIR/payload/warden-ui" ] || {
|
|
echo "FATAL: no qemu/payload/warden-ui — build it with flare-edge tools/build-ui-vm.sh" >&2
|
|
exit 1
|
|
}
|
|
command -v qemu-system-arm >/dev/null || {
|
|
echo "FATAL: qemu-system-arm not on PATH — see qemu/README.md" >&2
|
|
exit 1
|
|
}
|
|
|
|
# Short-named scratch: AF_UNIX socket paths are capped at ~108 chars.
|
|
WORK="$(mktemp -d /tmp/wqu.XXXXXX)"
|
|
QEMU_PID=""
|
|
cleanup() {
|
|
if [ -n "$QEMU_PID" ]; then kill "$QEMU_PID" 2>/dev/null || true; fi
|
|
rm -rf "$WORK"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
bash "$QDIR/mkinitramfs.sh"
|
|
bash "$QDIR/mkimage.sh"
|
|
|
|
# Random hostfwd ports can collide — detect qemu's early bind failure and
|
|
# retry with a fresh base rather than failing spuriously.
|
|
for _attempt in 1 2 3; do
|
|
PORT=$((21000 + RANDOM % 20000))
|
|
: > "$WORK/console.log"
|
|
bash "$QDIR/run.sh" --kernel "$ZIMAGE" --display headless --qmp "$WORK/qmp.sock" \
|
|
--ssh-port "$PORT" --http-port $((PORT + 1)) --api-port $((PORT + 2)) \
|
|
> "$WORK/console.log" 2>&1 &
|
|
QEMU_PID=$!
|
|
sleep 3
|
|
kill -0 "$QEMU_PID" 2>/dev/null && break
|
|
if grep -aq 'Could not set up host forwarding' "$WORK/console.log"; then
|
|
echo "== hostfwd port collision on base $PORT — retrying"
|
|
QEMU_PID=""
|
|
continue
|
|
fi
|
|
echo "FATAL: VM died at launch:" >&2
|
|
tail -20 "$WORK/console.log" >&2
|
|
exit 1
|
|
done
|
|
if [ -z "$QEMU_PID" ] || ! kill -0 "$QEMU_PID" 2>/dev/null; then
|
|
echo "FATAL: could not launch the VM after 3 port attempts" >&2
|
|
exit 1
|
|
fi
|
|
|
|
deadline=$((SECONDS + 120))
|
|
while [ $SECONDS -lt $deadline ]; do
|
|
grep -aq 'init: starting warden-ui' "$WORK/console.log" && break
|
|
kill -0 "$QEMU_PID" 2>/dev/null || { echo "FATAL: VM exited early" >&2; tail -25 "$WORK/console.log" >&2; exit 1; }
|
|
sleep 2
|
|
done
|
|
grep -aq 'init: starting warden-ui' "$WORK/console.log" || {
|
|
echo "FATAL: warden-ui never started (no fb0? wrong kernel?)" >&2
|
|
tail -25 "$WORK/console.log" >&2
|
|
exit 1
|
|
}
|
|
|
|
qmp() { python3 "$HERE/qmp.py" "$WORK/qmp.sock" "$@"; }
|
|
|
|
# Frame is "real" once it has more than a handful of distinct colors (a blank
|
|
# or console-only frame has very few).
|
|
frame_rendered() { # $1 = ppm path
|
|
python3 - "$1" <<'EOF'
|
|
import sys
|
|
data = open(sys.argv[1], "rb").read()
|
|
parts = data.split(b"\n", 3) # P6 header: magic, dims, maxval, raw RGB
|
|
pixels = parts[3] if len(parts) == 4 else b""
|
|
distinct = len(set(pixels[i:i+3] for i in range(0, min(len(pixels), 3*720*720), 3)))
|
|
print(f"{sys.argv[1]}: {len(pixels)} bytes, {distinct} distinct colors")
|
|
sys.exit(0 if distinct > 16 else 1)
|
|
EOF
|
|
}
|
|
|
|
# Poll for the first rendered frame (bounded, no guessed sleep).
|
|
rendered=0
|
|
deadline=$((SECONDS + 90))
|
|
while [ $SECONDS -lt $deadline ]; do
|
|
qmp screendump "$WORK/shot1.ppm"
|
|
if frame_rendered "$WORK/shot1.ppm"; then rendered=1; break; fi
|
|
sleep 3
|
|
done
|
|
[ "$rendered" = 1 ] || {
|
|
echo "FATAL: UI never rendered a non-blank frame within 90s" >&2
|
|
exit 1
|
|
}
|
|
|
|
# Tap the "Metrics" tab: pixel (373,40) of 720x720 scaled to the QMP absolute
|
|
# range 0..32767 — switching tabs must repaint the content area. Poll for the
|
|
# repaint rather than guessing a delay.
|
|
qmp tap 16975 1820
|
|
changed=0
|
|
deadline=$((SECONDS + 30))
|
|
while [ $SECONDS -lt $deadline ]; do
|
|
sleep 2
|
|
qmp screendump "$WORK/shot2.ppm"
|
|
if ! cmp -s "$WORK/shot1.ppm" "$WORK/shot2.ppm"; then changed=1; break; fi
|
|
done
|
|
|
|
mkdir -p "$OUTDIR"
|
|
cp "$WORK/shot1.ppm" "$OUTDIR/ui-shot1.ppm"
|
|
cp "$WORK/shot2.ppm" "$OUTDIR/ui-shot2.ppm" 2>/dev/null || true
|
|
|
|
[ "$changed" = 1 ] || {
|
|
echo "FATAL: tapping the Metrics tab did not change the frame within 30s — touch is not reaching the UI" >&2
|
|
exit 1
|
|
}
|
|
echo "tap on the Metrics tab repainted the frame (touch reached the UI)"
|
|
echo "UI-SHOT-PASS (screenshots in $OUTDIR/ui-shot{1,2}.ppm)"
|