1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
//! The existing `rch-build` shell ABI gains a scope-aware supervisor. Other
//! users of the shared protocol (cancellation, recovery, GC) only load functions.
//! No policy and nice-only launches continue into the caller's legacy watchdog.
//!
//! A scoped child needs the same identity/policy implementation as its parent.
//! The quoted heredoc passes these exact sources as data, without installing a
//! launcher on the worker or resolving a mutable script from a source checkout.
/// The heredoc lives in a function body, not inside `$(...)`: bash 3.2 (macOS
/// `/bin/sh`) scans a substitution's heredoc for the closing paren and fails on
/// the first `pattern)` arm, which made every script that embeds this protocol
/// a syntax error on macOS workers. Keep this `concat!` to string literals and
/// `include_str!` lines only: `tests/remote_scoped_launch.py` re-assembles it.
pub const REMOTE_PROCESS_IDENTITY_SCRIPT: &str = concat!(
include_str!("remote_process.sh"),
"\n",
include_str!("remote_scoped_launch.sh"),
"\nif [ \"$0\" = rch-build ]; then\n",
" rch_scope_launch_select || { printf '\\n%s_IDENTITY_UNAVAILABLE\\n' \"$3\" >&2; exit 125; }\n",
" if [ -n \"$rch_launch_slice\" ]; then\n",
" rch_scope_launch_source() { cat <<'RCH_SCOPED_LAUNCH_SOURCE_104'\n",
include_str!("remote_process.sh"),
"\n",
include_str!("remote_scoped_launch.sh"),
"\nRCH_SCOPED_LAUNCH_SOURCE_104\n",
" }\n",
" rch_launch_source=$(rch_scope_launch_source) || { printf '\\n%s_IDENTITY_UNAVAILABLE\\n' \"$3\" >&2; exit 125; }\n",
" rch_scope_launch_supervise \"$@\"\n",
" exit $?\n",
" fi\n",
"fi\n",
);
#[cfg(test)]
mod tests {
use super::REMOTE_PROCESS_IDENTITY_SCRIPT;
/// Workers run this under their own `sh`: dash on Linux, bash 3.2 on
/// macOS. A parse error here breaks every remote launch, cancellation,
/// recovery and cleanup script on that worker.
#[test]
fn protocol_parses_under_the_system_sh() {
let output = std::process::Command::new("/bin/sh")
.args(["-n", "-c", REMOTE_PROCESS_IDENTITY_SCRIPT])
.output()
.expect("run /bin/sh -n");
assert!(
output.status.success(),
"{}",
String::from_utf8_lossy(&output.stderr)
);
}
#[test]
fn quoted_protocol_fits_linux_single_argument_limit() {
// TransferPipeline shell-quotes this script and adds its legacy tail.
// Keep space for that tail, the payload, and enclosing launch wrappers.
let quoted = shell_escape::escape(REMOTE_PROCESS_IDENTITY_SCRIPT.into());
assert!(quoted.len() < 110_000);
for source in [
include_str!("remote_process.sh"),
include_str!("remote_scoped_launch.sh"),
] {
assert!(
!source
.lines()
.any(|line| line == "RCH_SCOPED_LAUNCH_SOURCE_104")
);
}
}
}