d daedalus

Testing

Testing

daedalus ships four layers of tests. They run on a stable toolchain only, and the full suite fits comfortably under 30 seconds in CI, with no root access.

Quick reference

# Formatting
cargo fmt --check

# Lint (per-crate, as CI does)
cargo clippy -p daedalus-core --all-targets -- -D warnings
cargo clippy -p daedalus-stub --all-targets -- -D warnings
cargo clippy -p daedalus-cli --all-targets -- -D warnings

# Everything
cargo test --workspace

# Docs build
mdbook build docs/

Layer 1 — unit tests

#[cfg(test)] mod tests inside each module of daedalus-core. Covers the chunker, Merkle roots, tar/zstd round-trips, footer codec, and parser edge cases.

Layer 2 — property-based tests (proptest)

#[cfg(test)] mod proptests in daedalus-core/src/manifest.rs, daedalus-core/src/sisr_header.rs, and daedalus-core/src/format.rs. Each test runs 256 generated cases:

  • arbitrary bytes never panic any parser (DeltaManifest::parse, SisrFooterExt::parse, Footer::read_from, read_sisr);
  • pack/parse and serialize/parse round-trips are lossless;
  • truncated buffers are always rejected, never a panic.

Because proptest runs on stable, it is the primary fuzz surface in CI. libFuzzer targets live in fuzz/ for nightly toolchains.

cargo test -p daedalus-core --lib

Layer 3 — SISR engine fault injection

daedalus-core/src/sisr/network_test.rs drives the real engine through a ChunkFetcher wrapper that injects network faults:

  • latency (thread::sleep) — result unchanged;
  • abrupt connection drops (io::ErrorKind::ConnectionReset) — update fails, binary untouched;
  • corrupted packets — fails SHA-256 verification;
  • truncated packets — fails the length check;
  • slow throughput — still reconstructs correctly;
  • fetched-byte accounting.
cargo test -p daedalus-core --lib sisr::network_test

Layer 4 — end-to-end (stub integration)

stub/tests/e2e_sisr/ launches the real daedalus-stub binary (CARGO_BIN_EXE_daedalus-stub) against a standard-library TCP mock HTTP server. No root, no network access: XDG_CACHE_HOME/XDG_DATA_HOME isolate the cache, DAEDALUS_TRUSTED_DIR pins trusted keys, and DAEDALUS_HEALTH_TIMEOUT_MS keeps the health gate fast.

cargo test -p daedalus-stub --test e2e_sisr_main

update_basic.rs covers the happy path (v1→v2 swap, delta-bound downloads with ≤ 2% overhead on modified bytes, the new payload actually runs, and the mission-6 local staging path still applies).

update_failures.rs covers every refusal path — untrusted signature, corrupt manifest, missing chunk (404), truncated chunk, corrupted chunk bytes, and Merkle-root mismatch — and asserts the previous binary stays intact with no residual .bak.

The health-gate rollback E2E lives separately:

cargo test -p daedalus-stub --test health_rollback

CI notes

  • Run the full suite with cargo test --workspace; it must finish in well under 30 seconds.
  • No test requires root, network access, or a running daemon.
  • fuzz/ is intentionally not a workspace member: libFuzzer needs nightly, and the stable-only policy forbids nightly in CI.

libFuzzer (nightly only)

fuzz/ contains a cargo-fuzz target covering every parser at once:

rustup toolchain install nightly
cargo +nightly install cargo-fuzz
cargo +nightly fuzz run sisr_manifest

The same inputs are exercised by the proptest layer on stable, so CI coverage does not regress on machines without a nightly toolchain.

← Comparison