0795c511ab
Some checks failed
CI Docker Mining Proof / Linux agent hashrate proof (push) Has been cancelled
Operators configure bucket and CloudFront domain with env credentials; deploy plans upload RS 4+2 shards and attach signed edge URLs to BGP swarm magnets. Agents fetch LAN, CloudFront, then C2. Forge panel adds test and IAM policy JSON.
71 lines
2.5 KiB
Go
71 lines
2.5 KiB
Go
package erasure
|
|
|
|
import (
|
|
"context"
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"encoding/pem"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
type mockShardStore struct {
|
|
puts []string
|
|
}
|
|
|
|
func (m *mockShardStore) PutShard(_ context.Context, bucket, key string, _ []byte) error {
|
|
m.puts = append(m.puts, bucket+"/"+key)
|
|
return nil
|
|
}
|
|
func (m *mockShardStore) HeadBucket(context.Context, string) error { return nil }
|
|
|
|
func TestAttachS3SwarmUploadsSixShards(t *testing.T) {
|
|
priv, _ := rsa.GenerateKey(rand.Reader, 2048)
|
|
pemBytes := pem.EncodeToMemory(&pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)})
|
|
store := &mockShardStore{}
|
|
cfg := HydrateAWSSwarmFromEnv(AWSSwarmSettings{
|
|
S3Bucket: "my-bucket", CloudFrontDomain: "d123.cloudfront.net", Region: "us-east-1",
|
|
AccessKeyID: "AKIA", SecretAccessKey: "secret", KeyPairID: "KPAIR", PrivateKeyPEM: string(pemBytes),
|
|
})
|
|
shards := [][]byte{[]byte("a"), []byte("b"), []byte("c"), []byte("d"), []byte("e"), []byte("f")}
|
|
hashes := ShardContentHashes(shards)
|
|
result, err := AttachS3Swarm(context.Background(), cfg, store, "tok", "deadbeef", 6, DefaultParams(), shards, hashes)
|
|
if err != nil || len(store.puts) != 6 || result == nil || !strings.Contains(result.SwarmMagnet, "xs=") {
|
|
t.Fatalf("err=%v puts=%d result=%+v", err, len(store.puts), result)
|
|
}
|
|
}
|
|
|
|
func TestS3HTTPStorePutShardSigV4(t *testing.T) {
|
|
var method, auth string
|
|
srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
method = r.Method
|
|
auth = r.Header.Get("Authorization")
|
|
w.WriteHeader(http.StatusOK)
|
|
}))
|
|
defer srv.Close()
|
|
store := &S3HTTPStore{
|
|
Settings: AWSSwarmSettings{S3Bucket: "b", Region: "us-east-1", AccessKeyID: "A", SecretAccessKey: "s"},
|
|
Endpoint: srv.URL,
|
|
}
|
|
if err := store.PutShard(context.Background(), "b", "shards/tok/us-east-1/0-ab.bin", []byte("x")); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if method != http.MethodPut || !strings.HasPrefix(auth, "AWS4-HMAC-SHA256") {
|
|
t.Fatalf("method=%s auth=%q", method, auth)
|
|
}
|
|
}
|
|
|
|
func TestCloudFrontSignedShardURL(t *testing.T) {
|
|
priv, _ := rsa.GenerateKey(rand.Reader, 2048)
|
|
pemBytes := pem.EncodeToMemory(&pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)})
|
|
cfg := AWSSwarmSettings{S3Bucket: "b", CloudFrontDomain: "d.cf.net", KeyPairID: "K", PrivateKeyPEM: string(pemBytes)}
|
|
u, err := CloudFrontSignedShardURL(cfg, "/shards/tok/us-east-1/0-ab.bin", time.Hour)
|
|
if err != nil || !strings.Contains(u, "Expires=") {
|
|
t.Fatalf("url=%q err=%v", u, err)
|
|
}
|
|
}
|