7.5 KiB
taler-monitoring — test IDs by area
Every check line is numbered per area as AREA-NNN (zero-padded):
| Area | Phase script | Meaning |
|---|---|---|
| www | check_urls.sh |
public HTTPS (outside-in) |
| inside | check_inside.sh |
containers / processes on koopa |
| versions | check_versions.sh |
deb.taler.net available + packages vs trixie |
| sanity | check_sanity.sh |
public + server per component |
| server | check_server.sh |
SSH host ports / processes |
| e2e | check_e2e.sh |
withdraw + pay cycle |
Format in output:
[OK] www-001 exchange /config https://exchange…/config
[ERROR] e2e-012 bank-auth: admin token failed
[BLOCKER] e2e-015 prereq: merchant HTTP 502
IDs are assigned in run order within the area (set_area resets the counter). Optional soft checks still consume a number when they WARN.
www — public URLs (./taler-monitoring.sh urls)
| ID | Check |
|---|---|
| www-… | exchange /config, currency, alt_unit_names |
| www-… | exchange /keys (+ alt_unit_names soft) |
| www-… | exchange /intro/, / (302→intro) |
| www-… | exchange /terms body (not empty / not API error) |
| www-… | exchange /privacy body |
| www-… | exchange /terms/ (200 or redirect) |
| www-… | bank /config, currency, alt_unit_names |
| www-… | bank integration / webui / intro / / |
| www-… | bank /terms body |
| www-… | bank /privacy (or /intro/privacy.html fallback) |
| www-… | merchant /config, currency, currencies alt_unit_names |
| www-… | each merchant exchanges[] /config alt_unit_names |
| www-… | merchant /intro/, /webui/, / |
| www-… | merchant /terms body (dual-currency notice) |
| www-… | merchant /privacy body (must not be not configured) |
| www-… | merchant /terms/ redirect |
| www-… | landing (aggregated per site): one line for bank/merchant/exchange (/intro + assets + own/external link counts); failures listed as samples; soft external/shop assets compact |
| www-… | cross-links: one line (4 intros) on local stack |
| www-… | bank demo-withdraw + shop assets: one line (+ soft shop-pay if missing) |
| www-… | bank /intro/demo-withdraw.json → taler://withdraw/HOST:PORT/taler-integration/… + integration op HTTP 200 |
| www-… | bank /intro/auto-account.json (earlier) → same withdraw shape, no payto_uri, login at /webui/ |
| www-… | performance (outside-in RTT): bank/exchange/merchant /config, keys, webui, intro — ms; WARN ≥ PERF_WARN_MS (8000); ERROR ≥ PERF_FAIL_MS (20000) |
| www-… | landing load stats: /intro/stats.json → loadavg, container RSS, in-container probe ms (public; SSH container cat fallback); warn if stale/missing |
Legal docs rule: HTTP 200, non-empty body, not plain not configured, not merchant API JSON code:21. On local stack, optional content needle (terms/privacy/FADP/GOA…).
Performance rule: Measured from the monitoring runner (public URLs via Caddy), not container loopback. HTTP must match expect (usually 200); latency is reported on the OK line. Slow ≥ PERF_WARN_MS → WARN only (no ERROR on slowness alone).
Landing links rule: Own-stack (bank/exchange/taler.* + page host) must be HTTP 200 (or redirect→200). External (App Store, Play, F-Droid, wallet.taler.net, docs/git.taler.net, …) soft WARN if down. Auto-account wallet link must be taler://withdraw/…:port/taler-integration/…, never payto.
alt_unit_names rule: wallet codec requires a non-empty map including scale key "0". For multi-currency merchant, also follow every entry in exchanges[] and check that exchange’s public /config.
(IDs after a failed early check may shift if later soft checks are skipped when body missing — numbering follows executed checks.)
inside — koopa SSH (./taler-monitoring.sh inside)
| ID | Check (typical order) |
|---|---|
| inside-001 | ssh koopa |
| inside-002+ | per-component emit: container, ports, libeufin/httpd, postgres, local /config//keys, wirewatch, DNS pin, caddy |
Remote lines E|comp|LEVEL|key|detail each become one numbered result.
sanity — bank · exchange · merchant (./taler-monitoring.sh sanity)
| ID | Section |
|---|---|
| sanity-001… | bank public + server |
| sanity-… | exchange public + server |
| sanity-… | merchant public + server |
Sequential through the whole script (one set_area sanity).
versions — packages vs deb.taler.net (./taler-monitoring.sh versions)
Outside (runner / public network — no SSH)
| ID (order) | Check |
|---|---|
| versions-… | DNS deb.taler.net |
| versions-… | HTTPS portal + apt base URL |
| versions-… | suite InRelease / Release |
| versions-… | suite Packages + Packages.gz |
| versions-… | sample pool .deb fetchable (Range 200/206) |
| versions-… | suite offers taler-exchange, taler-merchant, libeufin-bank |
| versions-… | optional trixie-testing Packages |
| versions-… | TLS verify (soft) |
Inside (SSH koopa containers)
| ID | Check |
|---|---|
| versions-… | ssh koopa |
| versions-… | each container → InRelease (pasta can reach apt repo) |
| versions-… | each container lists deb.taler.net in apt sources |
| versions-… | each installed taler* / libeufin* / libtaler* / libdonau* vs suite version |
| versions-… | core packages installed (taler-exchange, libeufin-bank, taler-merchant) |
Outside always runs. Inside skipped with SKIP_SSH=1 (still reports outside results).
Compare rules:
- match suite → OK
- ahead of suite (often testing/dev) → INFO
- behind suite → ERROR for core packages, WARN otherwise (
TALER_PKG_BEHIND=errorforces ERROR)
Default suite: trixie (TALER_APT_SUITE, TALER_APT_BASE=https://deb.taler.net/apt/debian).
Without SSH (SKIP_SSH=1 or remote domain): still runs outside-in repo checks; skips container install compare.
server — SSH ports (./taler-monitoring.sh server)
| ID | Check |
|---|---|
| server-001 | ssh |
| server-002+ | containers, local pasta ports, processes, caddy |
e2e — payment path (./taler-monitoring.sh e2e)
Local GOA also: ATM includes GOA:4200, then paivana (HTTP 302 on PAIVANA_PUBLIC + public template pay paivana / GOA:4200 on goa-shop). Disable with E2E_PAIVANA=0.
| ID | Step (approx.) |
|---|---|
| e2e-001 | budget info |
| e2e-002 | wallet-cli present |
| e2e-003 | mode / currency info |
| e2e-004… | secrets, reachability gates |
| e2e-… | account, credit, withdraw, confirm, coins, order, pay ladder |
| e2e-… | GOA shop products — full catalog list; random pick of 2 (override E2E_SHOP_PICK_N) |
| e2e-… | balances, dig on failure |
Shop product pays use instance goa-shop (default) and catalog E2E_SHOP_PRODUCTS
(id|Product name|amount lines). Each e2e run shuffles the catalog and pays
only E2E_SHOP_PICK_N products (default 2). Flow matches the landing popup
(public POST /templates/{id}, not private orders). Report labels use product name.
Blockers keep the same ID prefix: [BLOCKER] e2e-0NN step: message.
Run one area
./taler-monitoring.sh urls # www only
./taler-monitoring.sh inside # inside only
./taler-monitoring.sh versions # deb.taler.net + package drift
./taler-monitoring.sh e2e # e2e only
./taler-monitoring.sh -d taler.net urls