James Ennis pushed to branch jennis/quota_declaration_fix at BuildStream / buildstream
Commits:
-
2838d080
by Jim MacArthur at 2018-11-08T11:33:35Z
-
59b37f70
by James Ennis at 2018-11-08T11:33:35Z
-
dcb97637
by James Ennis at 2018-11-08T11:33:35Z
-
3847889a
by James Ennis at 2018-11-08T11:33:35Z
-
c55de7b3
by Jim MacArthur at 2018-11-08T11:33:35Z
-
e2821417
by James Ennis at 2018-11-08T11:33:35Z
-
d91c755b
by James Ennis at 2018-11-08T11:44:01Z
6 changed files:
- buildstream/_artifactcache/artifactcache.py
- buildstream/element.py
- buildstream/sandbox/_sandboxremote.py
- doc/source/format_project.rst
- doc/source/using_config.rst
- doc/source/using_configuring_artifact_server.rst
Changes:
| ... | ... | @@ -937,15 +937,22 @@ class ArtifactCache(): |
| 937 | 937 |
"Invalid cache quota ({}): ".format(utils._pretty_size(cache_quota)) +
|
| 938 | 938 |
"BuildStream requires a minimum cache quota of 2G.")
|
| 939 | 939 |
elif cache_quota > cache_size + available_space: # Check maximum
|
| 940 |
+ if '%' in self.context.config_cache_quota:
|
|
| 941 |
+ available = (available_space / (stat.f_blocks * stat.f_bsize)) * 100
|
|
| 942 |
+ available = '{}% of total disk space'.format(round(available,1))
|
|
| 943 |
+ else:
|
|
| 944 |
+ available = utils._pretty_size(available_space)
|
|
| 945 |
+ |
|
| 940 | 946 |
raise LoadError(LoadErrorReason.INVALID_DATA,
|
| 941 | 947 |
("Your system does not have enough available " +
|
| 942 | 948 |
"space to support the cache quota specified.\n" +
|
| 943 |
- "You currently have:\n" +
|
|
| 944 |
- "- {used} of cache in use at {local_cache_path}\n" +
|
|
| 945 |
- "- {available} of available system storage").format(
|
|
| 946 |
- used=utils._pretty_size(cache_size),
|
|
| 947 |
- local_cache_path=self.context.artifactdir,
|
|
| 948 |
- available=utils._pretty_size(available_space)))
|
|
| 949 |
+ "\nYou have specified a quota of {quota} of total disk space.\n" +
|
|
| 950 |
+ "- The filesystem containing {local_cache_path} only " +
|
|
| 951 |
+ "has: {available_size} available.")
|
|
| 952 |
+ .format(
|
|
| 953 |
+ quota=self.context.config_cache_quota,
|
|
| 954 |
+ local_cache_path=self.context.artifactdir,
|
|
| 955 |
+ available_size=available))
|
|
| 949 | 956 |
|
| 950 | 957 |
# Place a slight headroom (2e9 (2GB) on the cache_quota) into
|
| 951 | 958 |
# cache_quota to try and avoid exceptions.
|
| ... | ... | @@ -1410,16 +1410,9 @@ class Element(Plugin): |
| 1410 | 1410 |
|
| 1411 | 1411 |
finally:
|
| 1412 | 1412 |
# Staging may produce directories with less than 'rwx' permissions
|
| 1413 |
- # for the owner, which will break tempfile, so we need to use chmod
|
|
| 1414 |
- # occasionally.
|
|
| 1415 |
- def make_dir_writable(fn, path, excinfo):
|
|
| 1416 |
- os.chmod(os.path.dirname(path), 0o777)
|
|
| 1417 |
- if os.path.isdir(path):
|
|
| 1418 |
- os.rmdir(path)
|
|
| 1419 |
- else:
|
|
| 1420 |
- os.remove(path)
|
|
| 1421 |
- shutil.rmtree(temp_staging_directory, onerror=make_dir_writable)
|
|
| 1422 |
- |
|
| 1413 |
+ # for the owner, which breaks tempfile. _force_rmtree will deal
|
|
| 1414 |
+ # with these.
|
|
| 1415 |
+ utils._force_rmtree(temp_staging_directory)
|
|
| 1423 | 1416 |
# Ensure deterministic mtime of sources at build time
|
| 1424 | 1417 |
vdirectory.set_deterministic_mtime()
|
| 1425 | 1418 |
# Ensure deterministic owners of sources at build time
|
| ... | ... | @@ -28,10 +28,7 @@ from ..storage._filebaseddirectory import FileBasedDirectory |
| 28 | 28 |
from ..storage._casbaseddirectory import CasBasedDirectory
|
| 29 | 29 |
from .._protos.build.bazel.remote.execution.v2 import remote_execution_pb2, remote_execution_pb2_grpc
|
| 30 | 30 |
from .._protos.google.rpc import code_pb2
|
| 31 |
- |
|
| 32 |
- |
|
| 33 |
-class SandboxError(Exception):
|
|
| 34 |
- pass
|
|
| 31 |
+from .._exceptions import SandboxError
|
|
| 35 | 32 |
|
| 36 | 33 |
|
| 37 | 34 |
# SandboxRemote()
|
| ... | ... | @@ -190,19 +190,34 @@ for more detail. |
| 190 | 190 |
Artifact server
|
| 191 | 191 |
~~~~~~~~~~~~~~~
|
| 192 | 192 |
If you have setup an :ref:`artifact server <artifacts>` for your
|
| 193 |
-project then it is convenient to configure this in your ``project.conf``
|
|
| 193 |
+project then it is convenient to configure the following in your ``project.conf``
|
|
| 194 | 194 |
so that users need not have any additional configuration to communicate
|
| 195 | 195 |
with an artifact share.
|
| 196 | 196 |
|
| 197 | 197 |
.. code:: yaml
|
| 198 | 198 |
|
| 199 |
+ #
|
|
| 200 |
+ # Artifacts
|
|
| 201 |
+ #
|
|
| 199 | 202 |
artifacts:
|
| 203 |
+ # A remote cache from which to download prebuilt artifacts
|
|
| 204 |
+ - url: https://foo.com/artifacts:11001
|
|
| 205 |
+ server.cert: server.crt
|
|
| 206 |
+ # A remote cache from which to upload/download built/prebuilt artifacts
|
|
| 207 |
+ - url: https://foo.com/artifacts:11002
|
|
| 208 |
+ server-cert: server.crt
|
|
| 209 |
+ client-cert: client.crt
|
|
| 210 |
+ client-key: client.key
|
|
| 200 | 211 |
|
| 201 |
- # A url from which to download prebuilt artifacts
|
|
| 202 |
- url: https://foo.com/artifacts
|
|
| 212 |
+.. note::
|
|
| 213 |
+ |
|
| 214 |
+ You can also specify a list of different caches here; earlier entries in the
|
|
| 215 |
+ list will have higher priority than later ones.
|
|
| 216 |
+ |
|
| 217 |
+The use of ports are required to distinguish between pull only access and
|
|
| 218 |
+push/pull access. For information regarding the server/client certificates
|
|
| 219 |
+and keys, please see: :ref:`Key pair for the server <server_authentication>`.
|
|
| 203 | 220 |
|
| 204 |
-You can also specify a list of caches here; earlier entries in the list
|
|
| 205 |
-will have higher priority than later ones.
|
|
| 206 | 221 |
|
| 207 | 222 |
Remote execution
|
| 208 | 223 |
~~~~~~~~~~~~~~~~
|
| ... | ... | @@ -32,38 +32,75 @@ the supported configurations on a project wide basis are listed here. |
| 32 | 32 |
|
| 33 | 33 |
Artifact server
|
| 34 | 34 |
~~~~~~~~~~~~~~~
|
| 35 |
-The project you build will often specify a :ref:`remote artifact cache
|
|
| 36 |
-<artifacts>` already, but you may want to specify extra caches. There are two
|
|
| 37 |
-ways to do this. You can add one or more global caches:
|
|
| 35 |
+Although project's often specify a :ref:`remote artifact cache <artifacts>` in
|
|
| 36 |
+their ``project.conf``, you may also want to specify extra caches.
|
|
| 38 | 37 |
|
| 39 |
-**Example**
|
|
| 38 |
+Assuming that your host/server is reachable on the internet as ``artifacts.com``
|
|
| 39 |
+(for example), there are two ways to declare remote caches in your user
|
|
| 40 |
+configuration:
|
|
| 41 |
+ |
|
| 42 |
+1. Adding global caches:
|
|
| 40 | 43 |
|
| 41 | 44 |
.. code:: yaml
|
| 42 | 45 |
|
| 46 |
+ #
|
|
| 47 |
+ # Artifacts
|
|
| 48 |
+ #
|
|
| 43 | 49 |
artifacts:
|
| 44 |
- url: https://artifacts.com/artifacts
|
|
| 50 |
+ # Add a cache to pull from
|
|
| 51 |
+ - url: https://artifacts.com/artifacts:11001
|
|
| 52 |
+ server-cert: server.crt
|
|
| 53 |
+ # Add a cache to push/pull to/from
|
|
| 54 |
+ - url: https://artifacts.com/artifacts:11002
|
|
| 55 |
+ server-cert: server.crt
|
|
| 56 |
+ client-cert: client.crt
|
|
| 57 |
+ client-key: client.key
|
|
| 58 |
+ push: true
|
|
| 59 |
+ # Add another cache to pull from
|
|
| 60 |
+ - url: https://anothercache.com/artifacts:8080
|
|
| 61 |
+ server-cert: another_server.crt
|
|
| 45 | 62 |
|
| 46 |
-Caches listed there will be considered lower priority than those specified
|
|
| 47 |
-by the project configuration.
|
|
| 63 |
+.. note::
|
|
| 48 | 64 |
|
| 49 |
-You can also add project-specific caches:
|
|
| 65 |
+ Caches declared here will be used by **all** BuildStream project's on the user's
|
|
| 66 |
+ machine and are considered a lower priority than those specified in the project
|
|
| 67 |
+ configuration.
|
|
| 50 | 68 |
|
| 51 |
-**Example**
|
|
| 69 |
+ |
|
| 70 |
+2. Specifying caches for a specific project within the user configuration:
|
|
| 52 | 71 |
|
| 53 | 72 |
.. code:: yaml
|
| 54 | 73 |
|
| 55 | 74 |
projects:
|
| 56 | 75 |
project-name:
|
| 57 | 76 |
artifacts:
|
| 58 |
- - url: https://artifacts.com/artifacts1
|
|
| 59 |
- - url: ssh://user artifacts com/artifacts2
|
|
| 77 |
+ # Add a cache to pull from
|
|
| 78 |
+ - url: https://artifacts.com/artifacts:11001
|
|
| 79 |
+ server-cert: server.crt
|
|
| 80 |
+ # Add a cache to push/pull to/from
|
|
| 81 |
+ - url: https://artifacts.com/artifacts:11002
|
|
| 82 |
+ server-cert: server.crt
|
|
| 83 |
+ client-cert: client.crt
|
|
| 84 |
+ client-key: client.key
|
|
| 60 | 85 |
push: true
|
| 86 |
+ # Add another cache to pull from
|
|
| 87 |
+ - url: https://ourprojectcache.com/artifacts:8080
|
|
| 88 |
+ server-cert: project_server.crt
|
|
| 89 |
+ |
|
| 90 |
+ |
|
| 91 |
+.. note::
|
|
| 92 |
+ |
|
| 93 |
+ Caches listed here will be considered a higher priority than those specified
|
|
| 94 |
+ by the project. Furthermore, for a given list of URLs, earlier entries will
|
|
| 95 |
+ have higher priority.
|
|
| 96 |
+ |
|
| 97 |
+ |
|
| 98 |
+Notice that the use of different ports for the same server distinguishes between
|
|
| 99 |
+pull only access and push/pull access. For information regarding this and the
|
|
| 100 |
+server/client certificates and keys, please see:
|
|
| 101 |
+:ref:`Key pair for the server <server_authentication>`.
|
|
| 61 | 102 |
|
| 62 |
-Caches listed here will be considered higher priority than those specified
|
|
| 63 |
-by the project.
|
|
| 64 | 103 |
|
| 65 |
-If you give a list of URLs, earlier entries in the list will have higher
|
|
| 66 |
-priority than later ones.
|
|
| 67 | 104 |
|
| 68 | 105 |
Strict build plan
|
| 69 | 106 |
~~~~~~~~~~~~~~~~~
|
| ... | ... | @@ -110,6 +147,43 @@ The default mirror is defined by its name, e.g. |
| 110 | 147 |
``--default-mirror`` command-line option.
|
| 111 | 148 |
|
| 112 | 149 |
|
| 150 |
+Local cache expiry
|
|
| 151 |
+~~~~~~~~~~~~~~~~~~
|
|
| 152 |
+BuildStream locally caches artifacts, build trees, log files and sources within a
|
|
| 153 |
+cache located at ``~/.cache/buildstream`` (unless a $XDG_CACHE_HOME environment
|
|
| 154 |
+variable exists). When building large projects, this cache can get very large,
|
|
| 155 |
+thus BuildStream will attempt to clean up the cache automatically by expiring the least
|
|
| 156 |
+recently *used* artifacts.
|
|
| 157 |
+ |
|
| 158 |
+By default, cache expiry will begin once the file system which contains the cache
|
|
| 159 |
+approaches maximum usage. However, it is also possible to impose a quota on the local
|
|
| 160 |
+cache in the user configuration. This can be done in two ways:
|
|
| 161 |
+ |
|
| 162 |
+1. By restricting the maximum size of the cache directory itself.
|
|
| 163 |
+ |
|
| 164 |
+For example, to ensure that BuildStream's cache does not grow beyong 100 GB,
|
|
| 165 |
+simply declare the following in your user configuration (``~/.config/buildstream.conf``):
|
|
| 166 |
+ |
|
| 167 |
+.. code:: yaml
|
|
| 168 |
+ |
|
| 169 |
+ cache:
|
|
| 170 |
+ quota: 100G
|
|
| 171 |
+ |
|
| 172 |
+ |
|
| 173 |
+This quota defines the maximum size of the artifact cache in bytes.
|
|
| 174 |
+Other accepted values are: K, M, G or T (or you can simply declare the value in bytes, without the suffix)
|
|
| 175 |
+ |
|
| 176 |
+2. By expiring artifacts once the file system which contains the cache exceeds a specified usage.
|
|
| 177 |
+ |
|
| 178 |
+To ensure that we start cleaning the cache once we've used 80% of local disk space (on the file system
|
|
| 179 |
+which mounts the cache):
|
|
| 180 |
+ |
|
| 181 |
+.. code:: yaml
|
|
| 182 |
+ |
|
| 183 |
+ cache:
|
|
| 184 |
+ quota: 80%
|
|
| 185 |
+ |
|
| 186 |
+ |
|
| 113 | 187 |
Default configuration
|
| 114 | 188 |
---------------------
|
| 115 | 189 |
The default BuildStream configuration is specified here for reference:
|
| ... | ... | @@ -98,6 +98,8 @@ Command reference |
| 98 | 98 |
:prog: bst-artifact-server
|
| 99 | 99 |
|
| 100 | 100 |
|
| 101 |
+.. _server_authentication:
|
|
| 102 |
+ |
|
| 101 | 103 |
Key pair for the server
|
| 102 | 104 |
~~~~~~~~~~~~~~~~~~~~~~~
|
| 103 | 105 |
|
| ... | ... | @@ -237,52 +239,12 @@ We can then check if the services are successfully running with: |
| 237 | 239 |
For more information on systemd services see:
|
| 238 | 240 |
`Creating Systemd Service Files <https://www.devdungeon.com/content/creating-systemd-service-files>`_.
|
| 239 | 241 |
|
| 240 |
-User configuration
|
|
| 241 |
-~~~~~~~~~~~~~~~~~~
|
|
| 242 |
-The user configuration for artifacts is documented with the rest
|
|
| 243 |
-of the :ref:`user configuration documentation <user_config>`.
|
|
| 244 |
- |
|
| 245 |
-Note that for self-signed certificates, the public key fields are mandatory.
|
|
| 246 |
- |
|
| 247 |
-Assuming you have the same setup used in this document, and that your
|
|
| 248 |
-host is reachable on the internet as ``artifacts.com`` (for example),
|
|
| 249 |
-then a user can use the following user configuration:
|
|
| 250 |
- |
|
| 251 |
-Pull-only:
|
|
| 252 |
- |
|
| 253 |
-.. code:: yaml
|
|
| 254 |
- |
|
| 255 |
- #
|
|
| 256 |
- # Artifacts
|
|
| 257 |
- #
|
|
| 258 |
- artifacts:
|
|
| 259 |
- |
|
| 260 |
- url: https://artifacts.com:11001
|
|
| 261 |
- |
|
| 262 |
- # Optional server certificate if not trusted by system root certificates
|
|
| 263 |
- server-cert: server.crt
|
|
| 242 |
+Declaring remote artifact caches
|
|
| 243 |
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
| 244 |
+Remote artifact caches can be declared within either:
|
|
| 264 | 245 |
|
| 265 |
-Pull and push:
|
|
| 266 |
- |
|
| 267 |
-.. code:: yaml
|
|
| 268 |
- |
|
| 269 |
- #
|
|
| 270 |
- # Artifacts
|
|
| 271 |
- #
|
|
| 272 |
- artifacts:
|
|
| 273 |
- |
|
| 274 |
- url: https://artifacts.com:11002
|
|
| 275 |
- |
|
| 276 |
- # Optional server certificate if not trusted by system root certificates
|
|
| 277 |
- server-cert: server.crt
|
|
| 278 |
- |
|
| 279 |
- # Optional client key pair for authentication
|
|
| 280 |
- client-key: client.key
|
|
| 281 |
- client-cert: client.crt
|
|
| 282 |
- |
|
| 283 |
- push: true
|
|
| 284 |
- |
|
| 285 |
-.. note::
|
|
| 246 |
+1. The :ref:`project configuration <project_essentials_artifacts>`, or
|
|
| 247 |
+2. The :ref:`user configuration <config_artifacts>`.
|
|
| 286 | 248 |
|
| 287 |
- Equivalent statements can be delcared in a project's configuration file
|
|
| 288 |
- (the ``project.conf``).
|
|
| 249 |
+Please follow the above links to see examples showing how we declare remote
|
|
| 250 |
+caches in both the project configuration and the user configuration, respectively.
|
