mirror of
https://github.com/azaion/gps-denied-onboard.git
synced 2026-06-21 10:31:13 +00:00
59d9116d36
Bootstraps the public-boundary blackbox test harness owned by epic
AZ-262 (E-BBT). Establishes the e2e/ directory tree at the repo root,
fully separated from src/gps_denied_onboard/** and from the in-process
tests/** tree, and commits to the contracts every subsequent test
ticket (AZ-407..AZ-446) builds against.
Tier-1 (workstation Docker):
- docker/docker-compose.test.yml wires SUT + ArduPilot SITL + iNav SITL
+ mock Suite Sat Service + mavproxy listener + e2e-runner onto one
e2e-net bridge with internal: true (enforces RESTRICT-SAT-1 /
NFT-SEC-02 egress isolation at the network layer).
- docker/docker-compose.tier2-bridge.yml override disables the in-
compose SUT so Tier-2 pairs SITLs + mock + runner on an x86 host
while the SUT runs natively on the Jetson under systemd.
Tier-2 (Jetson):
- jetson/run-tier2.sh + tier2.service systemd unit + tegrastats /
jtop parsers feed per-sample telemetry into the evidence bundle.
Runner image (e2e/runner/):
- Dockerfile + requirements.txt install ONLY ground-side libs
(pymavlink, opencv-python>=4.12, numpy/scipy/geopy/pyproj, httpx,
orjson, pydantic, structlog, pytest 8.x). The runner deliberately
does NOT install the SUT package.
- conftest.py implements the AC-9 skip-rule mapping (tier2_only,
chamber_only, vins_mono, deferred_ac) tied to environment.md
parametrize axes.
- reporting/csv_reporter.py is a pytest plugin emitting one row per
test with the exact 11-column schema from environment.md §
Reporting (test_id, test_name, traces_to, fc_adapter, vio_strategy,
tier, started_at_utc, execution_time_ms, result, error_message,
evidence_paths). XFAIL surfaced only when a test carries
@pytest.mark.deferred_ac(verdict="xfail", reason=...).
- reporting/evidence_bundler.py exposes the attach_evidence fixture
that copies per-test artifacts (.tlog, FDR archives, screenshots,
tegrastats / jtop CSVs) into the run bundle and records relative
paths into the reporter's evidence_paths column.
- helpers/{frame_source_replay,imu_replay,sitl_observer,
mavproxy_tlog_reader,fdr_reader}.py declare the public surfaces
(concrete implementations owned by AZ-407 / AZ-408 / AZ-416 /
AZ-417 / AZ-441 per the dependency table); helpers/geo.py ships
today (no downstream task dep) — WGS84 distance / forward-bearing
/ offset via pyproj with NaN rejection.
Mock Suite Sat Service (e2e/fixtures/mock-suite-sat/):
- FastAPI app: POST /tiles (ingest contract from D-PROJ-2 follow-up),
GET /tiles/audit + /mock/audit (per-run read-back), POST
/mock/config (force-status, response delay), POST /mock/reset
(clears audit between tests), GET /mock/health.
Fixture scaffolds (e2e/fixtures/{tile-cache-builder, age-injector,
injectors, cold-boot, secrets, security}/):
- Public surfaces only. Concrete builders land in AZ-407 (static
fixtures), AZ-408 (runtime synthetic injection), AZ-419 (cold-boot
fixture), AZ-439 (CVE-2025-53644 JPEG generator).
Test tree (e2e/tests/{positive,negative,performance,resilience,
security,resource_limit}/):
- Mirror of the test-spec category grouping in
_docs/02_document/tests/*-tests.md.
- tests/positive/test_smoke.py is the AC-1 harness-boot smoke run
inside the e2e-runner image once Docker brings everything up.
Out-of-container unit tests (e2e/_unit_tests/):
- Exercises the harness internals (CSV reporter plugin lifecycle,
conftest skip rules, helper modules, parsers, mock app, compose
YAML structural contract, public-boundary enforcement) without
Docker / SITL. 97 unit tests, all passing.
Build / config:
- pyproject.toml: testpaths extended with e2e/_unit_tests; pythonpath
extended with e2e; fastapi>=0.111,<0.120 added to dev extras for the
mock-app TestClient unit test.
AC coverage:
- AC-1 (Tier-1 boot) → compose YAML test + directory layout
+ smoke test (Docker-bound)
- AC-2 (mock services) → 6 FastAPI TestClient unit tests
- AC-3 (SITLs accept output) → contract present; concrete check
deferred to AZ-416 / AZ-417
- AC-4 (CSV columns) → in-process plugin lifecycle test
emits the exact 11-column schema
- AC-5 (egress isolation) → static config test + runtime probe
in Docker-bound smoke
- AC-6 (Tier-2 contract) → tegrastats + jtop parser unit tests
+ jetson/* layout test; full Tier-2
contract is AZ-444
- AC-7 (fixture reproducibility) → deferred to AZ-407 per task spec
- AC-8 (parametrize matrix) → vins_mono skip-rule cases +
tests/positive/test_smoke
- AC-9 (skip semantics) → 9 conftest skip-rule unit tests
Module layout entry for blackbox_tests was added in 2026-05-16
preparatory commit d7a17a8 so this diff stays focused on the harness
scaffold. AZ-406 advances to In Testing on commit.
Co-authored-by: Cursor <cursoragent@cursor.com>
149 lines
5.5 KiB
Bash
Executable File
149 lines
5.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Tier-2 Jetson hardware-loop entrypoint.
|
|
#
|
|
# Usage:
|
|
# ./run-tier2.sh --fc-adapter <ardupilot|inav> --vio-strategy <okvis2|klt_ransac> [--duration <5min|8h>] [--enable-chamber]
|
|
#
|
|
# Pre-requisites (verified at startup):
|
|
# * The Jetson is provisioned per `_docs/02_document/tests/environment.md`
|
|
# § Execution instructions — Tier-2 (JetPack 6.2, CUDA, TensorRT 10.3, cuDNN).
|
|
# * `gps-denied-onboard.service` is installed via systemd
|
|
# (`tier2.service` is the template; operator copies it to /etc/systemd/system).
|
|
# * SITLs + mock + listener + runner reachable on the same network via
|
|
# `docker compose -f e2e/docker/docker-compose.test.yml -f e2e/docker/docker-compose.tier2-bridge.yml up ...`
|
|
# on a paired x86 host. (Same-Jetson SITL is also supported — set JETSON_HOST=localhost.)
|
|
#
|
|
# Outputs the same CSV format as Tier-1 to ./e2e-results/run-${RUN_ID}/report.csv
|
|
# plus the per-sample tegrastats + jtop CSVs in the evidence bundle.
|
|
|
|
set -euo pipefail
|
|
|
|
FC_ADAPTER=""
|
|
VIO_STRATEGY=""
|
|
DURATION="5min"
|
|
ENABLE_CHAMBER=0
|
|
JETSON_HOST_OVERRIDE=""
|
|
|
|
usage() {
|
|
grep -E '^# ' "$0" | sed 's/^# //'
|
|
exit 1
|
|
}
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case "$1" in
|
|
--fc-adapter) FC_ADAPTER="$2"; shift 2 ;;
|
|
--vio-strategy) VIO_STRATEGY="$2"; shift 2 ;;
|
|
--duration) DURATION="$2"; shift 2 ;;
|
|
--enable-chamber) ENABLE_CHAMBER=1; shift ;;
|
|
--jetson-host) JETSON_HOST_OVERRIDE="$2"; shift 2 ;;
|
|
-h|--help) usage ;;
|
|
*) echo "Unknown arg: $1" >&2; usage ;;
|
|
esac
|
|
done
|
|
|
|
if [[ -z "$FC_ADAPTER" || -z "$VIO_STRATEGY" ]]; then
|
|
echo "ERROR: --fc-adapter and --vio-strategy are required" >&2
|
|
usage
|
|
fi
|
|
|
|
case "$FC_ADAPTER" in
|
|
ardupilot|inav) ;;
|
|
*) echo "ERROR: --fc-adapter must be ardupilot or inav (got: $FC_ADAPTER)" >&2; exit 2 ;;
|
|
esac
|
|
|
|
case "$VIO_STRATEGY" in
|
|
okvis2|klt_ransac|vins_mono) ;;
|
|
*) echo "ERROR: --vio-strategy must be okvis2 | klt_ransac | vins_mono (got: $VIO_STRATEGY)" >&2; exit 2 ;;
|
|
esac
|
|
|
|
# RUN_ID — caller may set; default is utc-stamp + adapter pair.
|
|
: "${RUN_ID:=tier2-$(date -u +%Y%m%dT%H%M%SZ)-${FC_ADAPTER}-${VIO_STRATEGY}}"
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
|
|
RESULTS_DIR="${REPO_ROOT}/e2e-results/run-${RUN_ID}"
|
|
EVIDENCE_DIR="${RESULTS_DIR}/evidence"
|
|
|
|
mkdir -p "${EVIDENCE_DIR}"
|
|
|
|
echo "[tier2] RUN_ID=${RUN_ID}"
|
|
echo "[tier2] FC_ADAPTER=${FC_ADAPTER} VIO_STRATEGY=${VIO_STRATEGY} DURATION=${DURATION}"
|
|
echo "[tier2] RESULTS_DIR=${RESULTS_DIR}"
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Pre-flight: confirm the SUT systemd unit is healthy.
|
|
# ---------------------------------------------------------------------------
|
|
if ! systemctl is-active --quiet gps-denied-onboard.service; then
|
|
echo "[tier2] gps-denied-onboard.service is not active — attempting restart..." >&2
|
|
sudo systemctl restart gps-denied-onboard.service
|
|
sleep 3
|
|
if ! systemctl is-active --quiet gps-denied-onboard.service; then
|
|
echo "[tier2] FATAL: gps-denied-onboard.service failed to start" >&2
|
|
sudo systemctl status gps-denied-onboard.service --no-pager || true
|
|
exit 3
|
|
fi
|
|
fi
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Start tegrastats + jtop background samplers (evidence bundle inputs).
|
|
# ---------------------------------------------------------------------------
|
|
TEGRA_CSV="${EVIDENCE_DIR}/tegrastats.csv"
|
|
JTOP_CSV="${EVIDENCE_DIR}/jtop.csv"
|
|
|
|
# tegrastats emits at 5 Hz by default; parser converts to per-sample CSV rows.
|
|
if command -v tegrastats >/dev/null 2>&1; then
|
|
tegrastats --interval 200 \
|
|
| python3 "${SCRIPT_DIR}/tegrastats_parser.py" --out "${TEGRA_CSV}" &
|
|
TEGRA_PID=$!
|
|
else
|
|
echo "[tier2] WARNING: tegrastats not in PATH — skipping that evidence channel." >&2
|
|
TEGRA_PID=
|
|
fi
|
|
|
|
if command -v jtop >/dev/null 2>&1; then
|
|
python3 "${SCRIPT_DIR}/jtop_parser.py" --out "${JTOP_CSV}" --interval 1.0 &
|
|
JTOP_PID=$!
|
|
else
|
|
echo "[tier2] WARNING: jtop not in PATH — skipping that evidence channel." >&2
|
|
JTOP_PID=
|
|
fi
|
|
|
|
cleanup() {
|
|
local rc=$?
|
|
[[ -n "${TEGRA_PID:-}" ]] && kill "${TEGRA_PID}" 2>/dev/null || true
|
|
[[ -n "${JTOP_PID:-}" ]] && kill "${JTOP_PID}" 2>/dev/null || true
|
|
echo "[tier2] cleanup complete (rc=${rc})"
|
|
exit "${rc}"
|
|
}
|
|
trap cleanup EXIT INT TERM
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Run the e2e suite — the runner image is the SAME as Tier-1; only TIER differs.
|
|
# ---------------------------------------------------------------------------
|
|
JETSON_HOST_ARG="${JETSON_HOST_OVERRIDE:-localhost}"
|
|
CHAMBER_ARG=()
|
|
[[ "${ENABLE_CHAMBER}" -eq 1 ]] && CHAMBER_ARG=("--enable-chamber")
|
|
|
|
(
|
|
cd "${REPO_ROOT}/e2e/docker"
|
|
RUN_ID="${RUN_ID}" \
|
|
FC_ADAPTER="${FC_ADAPTER}" \
|
|
VIO_STRATEGY="${VIO_STRATEGY}" \
|
|
TIER="tier2-jetson" \
|
|
JETSON_HOST="${JETSON_HOST_ARG}" \
|
|
docker compose \
|
|
-f docker-compose.test.yml \
|
|
-f docker-compose.tier2-bridge.yml \
|
|
run --rm \
|
|
-e TIER=tier2-jetson \
|
|
e2e-runner \
|
|
pytest /test-suite \
|
|
--csv="/e2e-results/run-${RUN_ID}/report.csv" \
|
|
--csv-columns="test_id,test_name,traces_to,fc_adapter,vio_strategy,tier,started_at_utc,execution_time_ms,result,error_message,evidence_paths" \
|
|
--evidence-out="/e2e-results/run-${RUN_ID}/evidence" \
|
|
--build-kind=production \
|
|
"${CHAMBER_ARG[@]}"
|
|
)
|
|
|
|
echo "[tier2] Suite complete. Report: ${RESULTS_DIR}/report.csv"
|