fix(mount): correct operator precedence in shared lock wait condition

The shared lock wait loop on line 88 had a parenthesization bug that
caused the `|| entry.activeExclusiveLockOwnerCount > 0` check to fall
outside the `!lock.isDeleted` guard. Due to Go operator precedence
(&& binds tighter than ||), the condition evaluated as:

  (!lock.isDeleted && (waiters_check)) || exclusiveCount > 0

This meant a deleted (cancelled) shared lock waiter could never exit
the wait loop while any exclusive lock was active on the same key,
since the isDeleted check was bypassed. The goroutine would spin in
cond.Wait() forever, leaking and potentially cascading to block other
FUSE operations on the same file handle.

The fix adds parentheses to match the exclusive lock condition on
line 84, so isDeleted properly gates the entire wait expression:

  !lock.isDeleted && ((waiters_check) || exclusiveCount > 0)

This bug has existed since commit c43238b30 ("fix waiting condition")
but became more likely to trigger in recent versions due to increased
lock contention from parallel chunk fetching (#7569), directory handle
mutex (#7674), and metadata cache snapshot consistency (#8531).

Fixes #8696

.github/workflows/binaries_dev.yml

@@ -4,10 +4,6 @@ on:
   push:
     branches: [ master ]
 
-concurrency:
-  group: binaries-dev-${{ github.ref }}
-  cancel-in-progress: true
-
 permissions:
   contents: read
 
@@ -22,7 +18,6 @@ jobs:
 
       - name: Delete old release assets
         uses: mknejp/delete-release-assets@v1
-        continue-on-error: true
         with:
           token: ${{ github.token }}
           tag: dev
@@ -43,7 +38,7 @@ jobs:
     steps:
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
 
       - name: Set BUILD_TIME env
         run: echo BUILD_TIME=$(date -u +%Y%m%d-%H%M) >> ${GITHUB_ENV}
@@ -92,7 +87,7 @@ jobs:
     steps:
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
 
       - name: Set BUILD_TIME env
         run: echo BUILD_TIME=$(date -u +%Y%m%d-%H%M) >> ${GITHUB_ENV}

.github/workflows/binaries_release0.yml

@@ -28,7 +28,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
       - name: Go Release Binaries Normal Volume Size
         uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.22
         with:

.github/workflows/binaries_release1.yml

@@ -28,7 +28,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
       - name: Go Release Binaries Normal Volume Size
         uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.22
         with:

.github/workflows/binaries_release2.yml

@@ -28,7 +28,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
       - name: Go Release Binaries Normal Volume Size
         uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.22
         with:

.github/workflows/binaries_release3.yml

@@ -28,7 +28,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
       - name: Go Release Binaries Normal Volume Size
         uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.22
         with:

.github/workflows/binaries_release4.yml

@@ -28,7 +28,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
       - name: Go Release Binaries Normal Volume Size
         uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.22
         with:

.github/workflows/binaries_release5.yml

@@ -28,7 +28,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
       - name: Go Release Binaries Normal Volume Size
         uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.22
         with:

.github/workflows/claude-code-review.yml

@@ -0,0 +1,54 @@
+name: Claude Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize, ready_for_review, reopened]
+    # Optional: Only run on specific file changes
+    # paths:
+    #   - "src/**/*.ts"
+    #   - "src/**/*.tsx"
+    #   - "src/**/*.js"
+    #   - "src/**/*.jsx"
+
+jobs:
+  claude-review:
+    # Optional: Filter by PR author
+    # if: |
+    #   github.event.pull_request.user.login == 'external-contributor' ||
+    #   github.event.pull_request.user.login == 'new-developer' ||
+    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Claude Code
+        run: npm install -g @anthropic-ai/claude-code
+
+      - name: Run Claude Code Review
+        id: claude-review
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          path_to_claude_code_executable: claude
+          allowed_bots: "*"
+          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
+          plugins: 'code-review@claude-code-plugins'
+          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://code.claude.com/docs/en/cli-reference for available options
+

.github/workflows/claude.yml

@@ -0,0 +1,50 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+      actions: read # Required for Claude to read CI results on PRs
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read
+
+          # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
+          # prompt: 'Update the pull request description to include a summary of changes.'
+
+          # Optional: Add claude_args to customize behavior and configuration
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://code.claude.com/docs/en/cli-reference for available options
+          # claude_args: '--allowed-tools Bash(gh pr:*)'
+

.github/workflows/codeql.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/container_dev.yml

@@ -9,96 +9,17 @@ permissions:
 
 jobs:
 
-  # ── Pre-build Rust volume server binaries natively ──────────────────
-  build-rust-binaries:
-    runs-on: ubuntu-22.04
-    strategy:
-      matrix:
-        include:
-          - target: x86_64-unknown-linux-musl
-            arch: amd64
-          - target: aarch64-unknown-linux-musl
-            arch: arm64
-            cross: true
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Install musl tools (amd64)
-        if: ${{ !matrix.cross }}
-        run: sudo apt-get install -y musl-tools
-
-      - name: Install cross-compilation tools (arm64)
-        if: matrix.cross
-        run: |
-          sudo apt-get install -y gcc-aarch64-linux-gnu
-          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_MUSL_LINKER=aarch64-linux-gnu-gcc" >> "$GITHUB_ENV"
-          # Disable glibc fortify source — its __memcpy_chk etc. symbols don't exist in musl
-          echo "CFLAGS_aarch64_unknown_linux_musl=-U_FORTIFY_SOURCE" >> "$GITHUB_ENV"
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-docker-dev-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-docker-dev-${{ matrix.target }}-
-
-      - name: Build normal variant
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }} --no-default-features
-          cp target/${{ matrix.target }}/release/weed-volume ../weed-volume-normal-${{ matrix.arch }}
-
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-${{ matrix.arch }}
-          path: weed-volume-normal-${{ matrix.arch }}
-
   build-dev-containers:
-    needs: [build-rust-binaries]
     runs-on: [ubuntu-latest]
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Download pre-built Rust binaries
-        uses: actions/download-artifact@v8
-        with:
-          pattern: rust-volume-*
-          merge-multiple: true
-          path: ./rust-bins
-
-      - name: Place Rust binaries in Docker context
-        run: |
-          mkdir -p docker/weed-volume-prebuilt
-          for arch in amd64 arm64; do
-            src="./rust-bins/weed-volume-normal-${arch}"
-            if [ -f "$src" ]; then
-              cp "$src" "docker/weed-volume-prebuilt/weed-volume-${arch}"
-              echo "Placed pre-built Rust binary for ${arch}"
-            fi
-          done
-          ls -la docker/weed-volume-prebuilt/
-
-      - name: Docker meta
+      -
+        name: Checkout
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
+      -
+        name: Docker meta
         id: docker_meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v3
         with:
           images: |
             chrislusf/seaweedfs
@@ -109,40 +30,40 @@ jobs:
             org.opencontainers.image.title=seaweedfs
             org.opencontainers.image.description=SeaweedFS is a distributed storage system for blobs, objects, files, and data lake, to store and serve billions of files fast!
             org.opencontainers.image.vendor=Chris Lu
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
-
-      - name: Create BuildKit config
+      -
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v1
+      -
+        name: Create BuildKit config
         run: |
           cat > /tmp/buildkitd.toml <<EOF
           [registry."docker.io"]
             mirrors = ["https://mirror.gcr.io"]
           EOF
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v1
         with:
           buildkitd-flags: "--debug"
           buildkitd-config: /tmp/buildkitd.toml
-
-      - name: Login to Docker Hub
+      -
+        name: Login to Docker Hub
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v1
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-
-      - name: Login to GHCR
+      -
+        name: Login to GHCR
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v1
         with:
           registry: ghcr.io
           username: ${{ secrets.GHCR_USERNAME }}
           password: ${{ secrets.GHCR_TOKEN }}
-
-      - name: Build
-        uses: docker/build-push-action@v7
+      -
+        name: Build
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v2
         with:
           context: ./docker
           push: ${{ github.event_name != 'pull_request' }}

.github/workflows/container_foundationdb_version.yml

@@ -133,7 +133,7 @@ jobs:
 
       - name: Login to Docker Hub
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}

.github/workflows/container_latest.yml

@@ -23,22 +23,15 @@ on:
           - all
           - standard
           - large_disk
-      publish:
-        description: 'Publish images and manifests'
-        required: true
-        type: boolean
-        default: false
 
 permissions:
   contents: read
-  security-events: write
 
 jobs:
   setup:
     runs-on: ubuntu-latest
     outputs:
       variants: ${{ steps.set-variants.outputs.variants }}
-      publish: ${{ steps.set-publish.outputs.publish }}
     steps:
       - name: Select variants for this run
         id: set-variants
@@ -49,89 +42,9 @@ jobs:
             variants='["standard","large_disk"]'
           fi
           echo "variants=$variants" >> "$GITHUB_OUTPUT"
-      - name: Select publish mode
-        id: set-publish
-        run: |
-          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            echo "publish=${{ github.event.inputs.publish }}" >> "$GITHUB_OUTPUT"
-          else
-            echo "publish=true" >> "$GITHUB_OUTPUT"
-          fi
-
-  # ── Pre-build Rust volume server binaries natively ──────────────────
-  build-rust-binaries:
-    runs-on: ubuntu-22.04
-    strategy:
-      matrix:
-        include:
-          - target: x86_64-unknown-linux-musl
-            arch: amd64
-          - target: aarch64-unknown-linux-musl
-            arch: arm64
-            cross: true
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-        with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.source_ref || github.ref }}
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Install musl tools (amd64)
-        if: ${{ !matrix.cross }}
-        run: sudo apt-get install -y musl-tools
-
-      - name: Install cross-compilation tools (arm64)
-        if: matrix.cross
-        run: |
-          sudo apt-get install -y gcc-aarch64-linux-gnu
-          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_MUSL_LINKER=aarch64-linux-gnu-gcc" >> "$GITHUB_ENV"
-          # Disable glibc fortify source — its __memcpy_chk etc. symbols don't exist in musl
-          echo "CFLAGS_aarch64_unknown_linux_musl=-U_FORTIFY_SOURCE" >> "$GITHUB_ENV"
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-docker-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-docker-${{ matrix.target }}-
-
-      - name: Build large-disk variant
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }}
-          cp target/${{ matrix.target }}/release/weed-volume ../weed-volume-large-disk-${{ matrix.arch }}
-
-      - name: Build normal variant
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }} --no-default-features
-          cp target/${{ matrix.target }}/release/weed-volume ../weed-volume-normal-${{ matrix.arch }}
-
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-${{ matrix.arch }}
-          path: |
-            weed-volume-large-disk-${{ matrix.arch }}
-            weed-volume-normal-${{ matrix.arch }}
 
   build:
-    needs: [setup, build-rust-binaries]
+    needs: [setup]
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -166,32 +79,11 @@ jobs:
           if [ "${{ matrix.variant }}" == "large_disk" ]; then
             echo "tag_suffix=_large_disk" >> $GITHUB_OUTPUT
             echo "build_args=TAGS=5BytesOffset" >> $GITHUB_OUTPUT
-            echo "rust_variant=large-disk" >> $GITHUB_OUTPUT
           else
             echo "tag_suffix=" >> $GITHUB_OUTPUT
             echo "build_args=" >> $GITHUB_OUTPUT
-            echo "rust_variant=normal" >> $GITHUB_OUTPUT
           fi
 
-      - name: Download pre-built Rust binaries
-        uses: actions/download-artifact@v8
-        with:
-          pattern: rust-volume-*
-          merge-multiple: true
-          path: ./rust-bins
-
-      - name: Place Rust binaries in Docker context
-        run: |
-          mkdir -p docker/weed-volume-prebuilt
-          for arch in amd64 arm64; do
-            src="./rust-bins/weed-volume-${{ steps.config.outputs.rust_variant }}-${arch}"
-            if [ -f "$src" ]; then
-              cp "$src" "docker/weed-volume-prebuilt/weed-volume-${arch}"
-              echo "Placed pre-built Rust binary for ${arch}"
-            fi
-          done
-          ls -la docker/weed-volume-prebuilt/
-
       - name: Docker meta
         id: docker_meta
         uses: docker/metadata-action@v6
@@ -219,14 +111,14 @@ jobs:
           buildkitd-flags: "--debug"
           buildkitd-config: /tmp/buildkitd.toml
       - name: Login to Docker Hub
-        if: needs.setup.outputs.publish == 'true'
-        uses: docker/login-action@v4.1.0
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Login to GHCR
-        if: needs.setup.outputs.publish == 'true'
-        uses: docker/login-action@v4.1.0
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ secrets.GHCR_USERNAME }}
@@ -237,7 +129,7 @@ jobs:
           DOCKER_BUILDKIT: 1
         with:
           context: ./docker
-          push: ${{ needs.setup.outputs.publish == 'true' }}
+          push: ${{ github.event_name != 'pull_request' }}
           file: ./docker/Dockerfile.go_build
           platforms: linux/${{ matrix.platform }}
           # Push to GHCR only during build to avoid Docker Hub rate limits
@@ -257,151 +149,10 @@ jobs:
           # Remove Go build cache
           sudo rm -rf /tmp/go-build*
 
-  trivy-scan:
-    runs-on: ubuntu-latest
-    needs: [setup, build, build-rust-binaries]
-    strategy:
-      matrix:
-        variant: ${{ fromJSON(needs.setup.outputs.variants) }}
-    steps:
-      - name: Configure variant
-        id: config
-        run: |
-          if [ "${{ matrix.variant }}" == "large_disk" ]; then
-            echo "tag_suffix=_large_disk" >> $GITHUB_OUTPUT
-          else
-            echo "tag_suffix=" >> $GITHUB_OUTPUT
-          fi
-      - name: Login to GHCR
-        if: needs.setup.outputs.publish == 'true'
-        uses: docker/login-action@v4.1.0
-        with:
-          registry: ghcr.io
-          username: ${{ secrets.GHCR_USERNAME }}
-          password: ${{ secrets.GHCR_TOKEN }}
-      - name: Checkout for local scan build
-        if: needs.setup.outputs.publish != 'true'
-        uses: actions/checkout@v6
-        with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.source_ref || github.ref }}
-      - name: Download pre-built Rust binaries for local scan
-        if: needs.setup.outputs.publish != 'true'
-        uses: actions/download-artifact@v8
-        with:
-          pattern: rust-volume-*
-          merge-multiple: true
-          path: ./rust-bins
-      - name: Place Rust binaries in Docker context for local scan
-        if: needs.setup.outputs.publish != 'true'
-        run: |
-          rust_variant="normal"
-          if [ "${{ matrix.variant }}" == "large_disk" ]; then
-            rust_variant="large-disk"
-          fi
-          mkdir -p docker/weed-volume-prebuilt
-          for arch in amd64 arm64; do
-            src="./rust-bins/weed-volume-${rust_variant}-${arch}"
-            if [ -f "$src" ]; then
-              cp "$src" "docker/weed-volume-prebuilt/weed-volume-${arch}"
-              echo "Placed pre-built Rust binary for ${arch}"
-            fi
-          done
-          ls -la docker/weed-volume-prebuilt/
-      - name: Create BuildKit config for local scan build
-        if: needs.setup.outputs.publish != 'true'
-        run: |
-          cat > /tmp/buildkitd.toml <<EOF
-          [registry."docker.io"]
-            mirrors = ["https://mirror.gcr.io"]
-          EOF
-      - name: Set up Docker Buildx for local scan build
-        if: needs.setup.outputs.publish != 'true'
-        uses: docker/setup-buildx-action@v4
-        with:
-          buildkitd-flags: "--debug"
-          buildkitd-config: /tmp/buildkitd.toml
-      - name: Build local scan image tarball
-        if: needs.setup.outputs.publish != 'true'
-        uses: docker/build-push-action@v7
-        env:
-          DOCKER_BUILDKIT: 1
-        with:
-          context: ./docker
-          file: ./docker/Dockerfile.go_build
-          platforms: linux/amd64
-          outputs: type=docker,dest=/tmp/seaweedfs${{ steps.config.outputs.tag_suffix }}-amd64.tar
-          build-args: |
-            BUILDKIT_INLINE_CACHE=1
-            BRANCH=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.source_ref || github.sha }}
-            ${{ matrix.variant == 'large_disk' && 'TAGS=5BytesOffset' || '' }}
-      - name: Trivy report (published image)
-        if: needs.setup.outputs.publish == 'true'
-        # Pin to SHA - mutable tags were compromised (GHSA-69fq-xp46-6x23)
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: image
-          # Scan amd64 only - OS packages are identical across architectures
-          # since they all use the same alpine base, so a single-arch scan
-          # provides sufficient coverage without multiplying CI time.
-          image-ref: ghcr.io/chrislusf/seaweedfs:${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }}${{ steps.config.outputs.tag_suffix }}-amd64
-          scanners: vuln
-          vuln-type: os,library
-          severity: HIGH,CRITICAL
-          ignore-unfixed: true
-          limit-severities-for-sarif: true
-          format: sarif
-          output: trivy-results.sarif
-          exit-code: '0'
-      - name: Trivy report (local tarball)
-        if: needs.setup.outputs.publish != 'true'
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          input: /tmp/seaweedfs${{ steps.config.outputs.tag_suffix }}-amd64.tar
-          scanners: vuln
-          vuln-type: os,library
-          severity: HIGH,CRITICAL
-          ignore-unfixed: true
-          limit-severities-for-sarif: true
-          format: sarif
-          output: trivy-results.sarif
-          exit-code: '0'
-      - name: Upload Trivy scan results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v4
-        if: always()
-        with:
-          sarif_file: trivy-results.sarif
-      - name: Trivy gate (published image)
-        if: needs.setup.outputs.publish == 'true'
-        # Gate only on fixable high/critical vulnerabilities. Non-fixable
-        # findings are still visible in the SARIF upload above.
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          scan-type: image
-          image-ref: ghcr.io/chrislusf/seaweedfs:${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }}${{ steps.config.outputs.tag_suffix }}-amd64
-          scanners: vuln
-          vuln-type: os,library
-          severity: HIGH,CRITICAL
-          ignore-unfixed: true
-          format: table
-          exit-code: '1'
-          skip-setup-trivy: true
-      - name: Trivy gate (local tarball)
-        if: needs.setup.outputs.publish != 'true'
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
-        with:
-          input: /tmp/seaweedfs${{ steps.config.outputs.tag_suffix }}-amd64.tar
-          scanners: vuln
-          vuln-type: os,library
-          severity: HIGH,CRITICAL
-          ignore-unfixed: true
-          format: table
-          exit-code: '1'
-          skip-setup-trivy: true
-
   create-manifest:
     runs-on: ubuntu-latest
-    needs: [setup, build, trivy-scan]
-    if: needs.setup.outputs.publish == 'true' && github.event_name != 'pull_request'
+    needs: [setup, build]
+    if: github.event_name != 'pull_request'
     strategy:
       matrix:
         variant: ${{ fromJSON(needs.setup.outputs.variants) }}
@@ -429,12 +180,12 @@ jobs:
             ghcr.io/chrislusf/seaweedfs
           tags: type=raw,value=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }},suffix=${{ steps.config.outputs.tag_suffix }}
       - name: Login to Docker Hub
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Login to GHCR
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ secrets.GHCR_USERNAME }}

.github/workflows/container_release_foundationdb.yml

@@ -42,7 +42,7 @@ jobs:
       -
         name: Login to Docker Hub
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}

.github/workflows/container_release_unified.yml

@@ -39,82 +39,7 @@ concurrency:
   cancel-in-progress: false
 
 jobs:
-
-  # ── Pre-build Rust volume server binaries natively ──────────────────
-  # Cross-compiles for amd64 and arm64 without QEMU, turning a 5-hour
-  # emulated cargo build into ~15 minutes of native compilation.
-  build-rust-binaries:
-    runs-on: ubuntu-22.04
-    strategy:
-      matrix:
-        include:
-          - target: x86_64-unknown-linux-musl
-            arch: amd64
-          - target: aarch64-unknown-linux-musl
-            arch: arm64
-            cross: true
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Install musl tools (amd64)
-        if: ${{ !matrix.cross }}
-        run: sudo apt-get install -y musl-tools
-
-      - name: Install cross-compilation tools (arm64)
-        if: matrix.cross
-        run: |
-          sudo apt-get install -y gcc-aarch64-linux-gnu
-          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_MUSL_LINKER=aarch64-linux-gnu-gcc" >> "$GITHUB_ENV"
-          # Disable glibc fortify source — its __memcpy_chk etc. symbols don't exist in musl
-          echo "CFLAGS_aarch64_unknown_linux_musl=-U_FORTIFY_SOURCE" >> "$GITHUB_ENV"
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-docker-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-docker-${{ matrix.target }}-
-
-      - name: Build large-disk variant
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }}
-          cp target/${{ matrix.target }}/release/weed-volume ../weed-volume-large-disk-${{ matrix.arch }}
-
-      - name: Build normal variant
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }} --no-default-features
-          cp target/${{ matrix.target }}/release/weed-volume ../weed-volume-normal-${{ matrix.arch }}
-
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-${{ matrix.arch }}
-          path: |
-            weed-volume-large-disk-${{ matrix.arch }}
-            weed-volume-normal-${{ matrix.arch }}
-
-  # ── Build Docker containers ─────────────────────────────────────────
   build:
-    needs: [build-rust-binaries]
     runs-on: ubuntu-latest
     strategy:
       # Build sequentially to avoid rate limits
@@ -127,23 +52,20 @@ jobs:
             dockerfile: ./docker/Dockerfile.go_build
             build_args: ""
             tag_suffix: ""
-            rust_variant: normal
-
-          # Large disk - multi-arch
+            
+          # Large disk - multi-arch  
           - variant: large_disk
             platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/386
             dockerfile: ./docker/Dockerfile.go_build
             build_args: TAGS=5BytesOffset
             tag_suffix: _large_disk
-            rust_variant: large-disk
-
+            
           # Full tags - multi-arch
           - variant: full
             platforms: linux/amd64,linux/arm64
             dockerfile: ./docker/Dockerfile.go_build
             build_args: TAGS=elastic,gocdk,rclone,sqlite,tarantool,tikv,ydb
             tag_suffix: _full
-            rust_variant: normal
 
           # Large disk + full tags - multi-arch
           - variant: large_disk_full
@@ -151,42 +73,19 @@ jobs:
             dockerfile: ./docker/Dockerfile.go_build
             build_args: TAGS=5BytesOffset,elastic,gocdk,rclone,sqlite,tarantool,tikv,ydb
             tag_suffix: _large_disk_full
-            rust_variant: large-disk
-
+            
           # RocksDB large disk - amd64 only
           - variant: rocksdb
             platforms: linux/amd64
             dockerfile: ./docker/Dockerfile.rocksdb_large
             build_args: ""
             tag_suffix: _large_disk_rocksdb
-            rust_variant: large-disk
             
     steps:
       - name: Checkout
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         uses: actions/checkout@v6
-
-      - name: Download pre-built Rust binaries
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
-        uses: actions/download-artifact@v8
-        with:
-          pattern: rust-volume-*
-          merge-multiple: true
-          path: ./rust-bins
-
-      - name: Place Rust binaries in Docker context
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
-        run: |
-          mkdir -p docker/weed-volume-prebuilt
-          for arch in amd64 arm64; do
-            src="./rust-bins/weed-volume-${{ matrix.rust_variant }}-${arch}"
-            if [ -f "$src" ]; then
-              cp "$src" "docker/weed-volume-prebuilt/weed-volume-${arch}"
-              echo "Placed pre-built Rust binary for ${arch}"
-            fi
-          done
-          ls -la docker/weed-volume-prebuilt/
-
+        
       - name: Free Disk Space
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         run: |
@@ -236,14 +135,14 @@ jobs:
           
       - name: Login to Docker Hub
         if: (github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant) && github.event_name != 'pull_request'
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
           
       - name: Login to GHCR
         if: (github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant) && github.event_name != 'pull_request'
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ secrets.GHCR_USERNAME }}
@@ -299,14 +198,14 @@ jobs:
     steps:
       - name: Login to Docker Hub
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
           
       - name: Login to GHCR
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ secrets.GHCR_USERNAME }}

.github/workflows/container_rocksdb_version.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
 
       - name: Prepare Docker tag
         id: tag
@@ -88,13 +88,13 @@ jobs:
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v1
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v1
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v1
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Build and push image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v2
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v2
         with:
           context: ./docker
           push: true

.github/workflows/depsreview.yml

@@ -9,6 +9,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48

.github/workflows/fuse-dlm-integration.yml

@@ -1,63 +0,0 @@
-name: "FUSE DLM Integration Tests"
-
-on:
-  pull_request:
-    paths:
-      - 'weed/command/mount*.go'
-      - 'weed/mount/**'
-      - 'weed/cluster/**'
-      - 'test/fuse_dlm/**'
-      - '.github/workflows/fuse-dlm-integration.yml'
-  push:
-    branches: [master]
-    paths:
-      - 'weed/command/mount*.go'
-      - 'weed/mount/**'
-      - 'weed/cluster/**'
-      - 'test/fuse_dlm/**'
-
-concurrency:
-  group: ${{ github.head_ref || github.ref }}/fuse-dlm-integration
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  fuse-dlm-integration:
-    name: FUSE DLM Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Install FUSE dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y libfuse3-dev
-          echo 'user_allow_other' | sudo tee -a /etc/fuse.conf
-          sudo chmod 644 /etc/fuse.conf
-
-      - name: Build SeaweedFS
-        run: go build -o weed/weed -buildvcs=false ./weed
-
-      - name: Run DLM integration tests
-        timeout-minutes: 25
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-        run: go test -v -count=1 -timeout=20m ./test/fuse_dlm/...
-
-      - name: Upload logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: fuse-dlm-test-logs
-          path: /tmp/seaweedfs-fuse-dlm-logs/
-          retention-days: 3

.github/workflows/fuse-integration.yml

@@ -21,61 +21,213 @@ concurrency:
 permissions:
   contents: read
 
+env:
+  TEST_TIMEOUT: '45m'
+
 jobs:
   fuse-integration:
     name: FUSE Integration Testing
     runs-on: ubuntu-22.04
     timeout-minutes: 50
-
+    
     steps:
     - name: Checkout code
       uses: actions/checkout@v6
-
+      
     - name: Set up Go
       uses: actions/setup-go@v6
       with:
         go-version-file: 'go.mod'
-
+        
     - name: Install FUSE and dependencies
       run: |
         sudo apt-get update
-        # fuse3 is pre-installed on ubuntu-22.04 runners and conflicts
-        # with the legacy fuse package, so only install the dev headers.
-        sudo apt-get install -y libfuse3-dev
-        # Allow non-root FUSE mounts with allow_other
-        echo 'user_allow_other' | sudo tee -a /etc/fuse.conf
-        sudo chmod 644 /etc/fuse.conf
+        sudo apt-get install -y fuse libfuse-dev
         # Verify FUSE installation
-        fusermount3 --version || fusermount --version || true
-        ls -la /dev/fuse
-
+        fusermount --version || true
+        ls -la /dev/fuse || true
+        
     - name: Build SeaweedFS
       run: |
         cd weed
-        go build -tags "elastic gocdk sqlite ydb tarantool tikv rclone" -o weed .
+        go build -tags "elastic gocdk sqlite ydb tarantool tikv rclone" -v .
         chmod +x weed
+        # Verify binary
         ./weed version
-        # Make weed binary available in PATH for the test framework
-        sudo cp weed /usr/local/bin/weed
-
-    - name: Install test dependencies
+        
+    - name: Prepare FUSE Integration Tests
       run: |
-        cd test/fuse_integration
-        go mod download
-
+        # Create isolated test directory to avoid Go module conflicts
+        mkdir -p /tmp/seaweedfs-fuse-tests
+        
+        # Copy only the working test files to avoid Go module conflicts
+        # These are the files we've verified work without package name issues
+        cp test/fuse_integration/simple_test.go /tmp/seaweedfs-fuse-tests/ 2>/dev/null || echo "⚠️ simple_test.go not found"
+        cp test/fuse_integration/working_demo_test.go /tmp/seaweedfs-fuse-tests/ 2>/dev/null || echo "⚠️ working_demo_test.go not found"
+        
+        # Note: Other test files (framework.go, basic_operations_test.go, etc.) 
+        # have Go module conflicts and are skipped until resolved
+        
+        echo "📁 Working test files copied:"
+        ls -la /tmp/seaweedfs-fuse-tests/*.go 2>/dev/null || echo "ℹ️ No test files found"
+        
+        # Initialize Go module in isolated directory
+        cd /tmp/seaweedfs-fuse-tests
+        go mod init seaweedfs-fuse-tests
+        go mod tidy
+        
+        # Verify setup
+        echo "✅ FUSE integration test environment prepared"
+        ls -la /tmp/seaweedfs-fuse-tests/
+        
+        echo ""
+        echo "ℹ️  Current Status: Running working subset of FUSE tests"
+        echo "   • simple_test.go: Package structure verification"
+        echo "   • working_demo_test.go: Framework capability demonstration"
+        echo "   • Full framework: Available in test/fuse_integration/ (module conflicts pending resolution)"
+        
     - name: Run FUSE Integration Tests
       run: |
-        set -o pipefail
-        cd test/fuse_integration
-        echo "Running full FUSE integration test suite..."
-        go test -v -count=1 -timeout=45m ./... 2>&1 | tee /tmp/fuse-test-output.log
-
-    - name: Upload Test Logs
+        cd /tmp/seaweedfs-fuse-tests
+        
+        echo "🧪 Running FUSE integration tests..."
+        echo "============================================"
+        
+        # Run available working test files
+        TESTS_RUN=0
+        
+        if [ -f "simple_test.go" ]; then
+          echo "📋 Running simple_test.go..."
+          go test -v -timeout=${{ env.TEST_TIMEOUT }} simple_test.go
+          TESTS_RUN=$((TESTS_RUN + 1))
+        fi
+        
+        if [ -f "working_demo_test.go" ]; then
+          echo "📋 Running working_demo_test.go..."
+          go test -v -timeout=${{ env.TEST_TIMEOUT }} working_demo_test.go
+          TESTS_RUN=$((TESTS_RUN + 1))
+        fi
+        
+        # Run combined test if multiple files exist
+        if [ -f "simple_test.go" ] && [ -f "working_demo_test.go" ]; then
+          echo "📋 Running combined tests..."
+          go test -v -timeout=${{ env.TEST_TIMEOUT }} simple_test.go working_demo_test.go
+        fi
+        
+        if [ $TESTS_RUN -eq 0 ]; then
+          echo "⚠️ No working test files found, running module verification only"
+          go version
+          go mod verify
+        else
+          echo "✅ Successfully ran $TESTS_RUN test file(s)"
+        fi
+        
+        echo "============================================"
+        echo "✅ FUSE integration tests completed"
+        
+    - name: Run Extended Framework Validation
+      run: |
+        cd /tmp/seaweedfs-fuse-tests
+        
+        echo "🔍 Running extended framework validation..."
+        echo "============================================"
+        
+        # Test individual components (only run tests that exist)
+        if [ -f "simple_test.go" ]; then
+          echo "Testing simple verification..."
+          go test -v simple_test.go
+        fi
+        
+        if [ -f "working_demo_test.go" ]; then
+          echo "Testing framework demo..."
+          go test -v working_demo_test.go
+        fi
+        
+        # Test combined execution if both files exist
+        if [ -f "simple_test.go" ] && [ -f "working_demo_test.go" ]; then
+          echo "Testing combined execution..."
+          go test -v simple_test.go working_demo_test.go
+        elif [ -f "simple_test.go" ] || [ -f "working_demo_test.go" ]; then
+          echo "✅ Individual tests already validated above"
+        else
+          echo "⚠️ No working test files found for combined testing"
+        fi
+        
+        echo "============================================"
+        echo "✅ Extended validation completed"
+        
+    - name: Generate Test Coverage Report
+      run: |
+        cd /tmp/seaweedfs-fuse-tests
+        
+        echo "📊 Generating test coverage report..."
+        go test -v -coverprofile=coverage.out .
+        go tool cover -html=coverage.out -o coverage.html
+        
+        echo "Coverage report generated: coverage.html"
+        
+    - name: Verify SeaweedFS Binary Integration
+      run: |
+        # Test that SeaweedFS binary is accessible from test environment
+        WEED_BINARY=$(pwd)/weed/weed
+        
+        if [ -f "$WEED_BINARY" ]; then
+          echo "✅ SeaweedFS binary found at: $WEED_BINARY"
+          $WEED_BINARY version
+          echo "Binary is ready for full integration testing"
+        else
+          echo "❌ SeaweedFS binary not found"
+          exit 1
+        fi
+        
+    - name: Upload Test Artifacts
       if: always()
       uses: actions/upload-artifact@v7
       with:
         name: fuse-integration-test-results
         path: |
-          /tmp/fuse-test-output.log
-          /tmp/seaweedfs-fuse-logs/
+          /tmp/seaweedfs-fuse-tests/coverage.out
+          /tmp/seaweedfs-fuse-tests/coverage.html
+          /tmp/seaweedfs-fuse-tests/*.log
         retention-days: 7
+        
+    - name: Test Summary
+      if: always()
+      run: |
+        echo "## 🚀 FUSE Integration Test Summary" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### Framework Status" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **Framework Design**: Complete and validated" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **Working Tests**: Core framework demonstration functional" >> $GITHUB_STEP_SUMMARY
+        echo "- ⚠️ **Full Framework**: Available but requires Go module resolution" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **CI/CD Integration**: Automated testing pipeline established" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### Test Capabilities" >> $GITHUB_STEP_SUMMARY
+        echo "- 📁 **File Operations**: Create, read, write, delete, permissions" >> $GITHUB_STEP_SUMMARY
+        echo "- 📂 **Directory Operations**: Create, list, delete, nested structures" >> $GITHUB_STEP_SUMMARY
+        echo "- 📊 **Large Files**: Multi-megabyte file handling" >> $GITHUB_STEP_SUMMARY
+        echo "- 🔄 **Concurrent Operations**: Multi-threaded stress testing" >> $GITHUB_STEP_SUMMARY
+        echo "- ⚠️ **Error Scenarios**: Comprehensive error handling validation" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### Comparison with Current Tests" >> $GITHUB_STEP_SUMMARY
+        echo "| Aspect | Current (FIO) | This Framework |" >> $GITHUB_STEP_SUMMARY
+        echo "|--------|---------------|----------------|" >> $GITHUB_STEP_SUMMARY
+        echo "| **Scope** | Performance only | Functional + Performance |" >> $GITHUB_STEP_SUMMARY
+        echo "| **Operations** | Read/Write only | All FUSE operations |" >> $GITHUB_STEP_SUMMARY
+        echo "| **Concurrency** | Single-threaded | Multi-threaded stress tests |" >> $GITHUB_STEP_SUMMARY
+        echo "| **Automation** | Manual setup | Fully automated |" >> $GITHUB_STEP_SUMMARY
+        echo "| **Validation** | Speed metrics | Correctness + Performance |" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### Current Working Tests" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **Framework Structure**: Package and module verification" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **Configuration Management**: Test config validation" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **File Operations Demo**: Basic file create/read/write simulation" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **Large File Handling**: 1MB+ file processing demonstration" >> $GITHUB_STEP_SUMMARY
+        echo "- ✅ **Concurrency Simulation**: Multi-file operation testing" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### Next Steps" >> $GITHUB_STEP_SUMMARY
+        echo "1. **Module Resolution**: Fix Go package conflicts for full framework" >> $GITHUB_STEP_SUMMARY
+        echo "2. **SeaweedFS Integration**: Connect with real cluster for end-to-end testing" >> $GITHUB_STEP_SUMMARY
+        echo "3. **Performance Benchmarks**: Add performance regression testing" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "📈 **Total Framework Size**: ~1,500 lines of comprehensive testing infrastructure" >> $GITHUB_STEP_SUMMARY 

.github/workflows/fuse-p2p-integration.yml

@@ -1,69 +0,0 @@
-name: "FUSE P2P Peer Chunk Sharing Integration Tests"
-
-on:
-  pull_request:
-    paths:
-      - 'weed/command/mount*.go'
-      - 'weed/mount/**'
-      - 'weed/filer/mount_peer_registry*.go'
-      - 'weed/server/filer_grpc_server_mount_peer.go'
-      - 'weed/pb/mount_peer.proto'
-      - 'weed/pb/filer.proto'
-      - 'test/fuse_p2p/**'
-      - '.github/workflows/fuse-p2p-integration.yml'
-  push:
-    branches: [master]
-    paths:
-      - 'weed/command/mount*.go'
-      - 'weed/mount/**'
-      - 'weed/filer/mount_peer_registry*.go'
-      - 'weed/server/filer_grpc_server_mount_peer.go'
-      - 'weed/pb/mount_peer.proto'
-      - 'weed/pb/filer.proto'
-      - 'test/fuse_p2p/**'
-
-concurrency:
-  group: ${{ github.head_ref || github.ref }}/fuse-p2p-integration
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  fuse-p2p-integration:
-    name: FUSE P2P Peer Chunk Sharing
-    runs-on: ubuntu-22.04
-    timeout-minutes: 20
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Install FUSE dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y libfuse3-dev
-          echo 'user_allow_other' | sudo tee -a /etc/fuse.conf
-          sudo chmod 644 /etc/fuse.conf
-
-      - name: Build SeaweedFS
-        run: go build -o weed/weed -buildvcs=false ./weed
-
-      - name: Run P2P integration tests
-        timeout-minutes: 15
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-        run: go test -v -count=1 -timeout=12m ./test/fuse_p2p/...
-
-      - name: Upload logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: fuse-p2p-test-logs
-          path: /tmp/seaweedfs-fuse-p2p-logs/
-          retention-days: 3

.github/workflows/helm_ci.yml

@@ -16,12 +16,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           fetch-depth: 0
 
       - name: Set up Helm
-        uses: azure/setup-helm@v5
+        uses: azure/setup-helm@v4
         with:
           version: v3.18.4
 
@@ -217,106 +217,6 @@ jobs:
           print("✓ No blank lines in security+S3 command blocks")
           PYEOF
 
-          echo ""
-          echo "=== Testing security+S3: -cert.file/-key.file gated on httpsPort (issue #9202) ==="
-          # Regression test: when enableSecurity=true but *.httpsPort is 0 (the default),
-          # the chart must NOT emit -cert.file / -key.file to the S3 frontend. Passing
-          # them promotes weed s3's main -port to HTTPS (see weed/command/s3.go), which
-          # makes the HTTP readinessProbe spam "TLS handshake error ... client sent an
-          # HTTP request to an HTTPS server" into the pod log.
-          #
-          # When *.httpsPort > 0, both -port.https and cert/key args MUST be emitted
-          # together so the opt-in HTTPS listener actually has credentials.
-          python3 - "$CHART_DIR" <<'PYEOF'
-          import subprocess, sys, yaml
-          chart = sys.argv[1]
-
-          def render(values):
-              args = ["helm", "template", "test", chart]
-              for k, v in values.items():
-                  args += ["--set", f"{k}={v}"]
-              return subprocess.check_output(args, text=True)
-
-          def script_of(manifest, kind_name):
-              for doc in yaml.safe_load_all(manifest):
-                  if not doc or doc.get("kind") not in ("Deployment", "StatefulSet"):
-                      continue
-                  if doc["metadata"]["name"] != kind_name:
-                      continue
-                  for c in doc["spec"]["template"]["spec"]["containers"]:
-                      cmd = c.get("command", [])
-                      if len(cmd) >= 3 and cmd[0] == "/bin/sh" and cmd[1] == "-ec":
-                          return cmd[2]
-              raise AssertionError(f"no container script for {kind_name}")
-
-          cases = [
-              # (values, workload-name, httpsPort-set?, arg-prefix)
-              ({"global.seaweedfs.enableSecurity": "true",
-                "s3.enabled": "true"},
-               "test-seaweedfs-s3", False, ""),
-              ({"global.seaweedfs.enableSecurity": "true",
-                "s3.enabled": "true",
-                "s3.httpsPort": "8443"},
-               "test-seaweedfs-s3", True, ""),
-              ({"global.seaweedfs.enableSecurity": "true",
-                "filer.s3.enabled": "true"},
-               "test-seaweedfs-filer", False, "s3."),
-              ({"global.seaweedfs.enableSecurity": "true",
-                "filer.s3.enabled": "true",
-                "filer.s3.httpsPort": "8444"},
-               "test-seaweedfs-filer", True, "s3."),
-              ({"global.seaweedfs.enableSecurity": "true",
-                "allInOne.enabled": "true",
-                "allInOne.s3.enabled": "true"},
-               "test-seaweedfs-all-in-one", False, "s3."),
-              ({"global.seaweedfs.enableSecurity": "true",
-                "allInOne.enabled": "true",
-                "allInOne.s3.enabled": "true",
-                "allInOne.s3.httpsPort": "8445"},
-               "test-seaweedfs-all-in-one", True, "s3."),
-          ]
-
-          failed = False
-          for values, name, https_on, prefix in cases:
-              script = script_of(render(values), name)
-              cert_flag = f"-{prefix}cert.file="
-              key_flag = f"-{prefix}key.file="
-              https_flag = f"-{prefix}port.https="
-              has_cert = cert_flag in script
-              has_key = key_flag in script
-              has_https = https_flag in script
-              label = f"{name} (httpsPort {'set' if https_on else 'unset'})"
-              if https_on:
-                  if not (has_cert and has_key and has_https):
-                      print(f"FAIL: {label}: expected {cert_flag}, {key_flag}, {https_flag} all present "
-                            f"(got cert={has_cert} key={has_key} https={has_https})", file=sys.stderr)
-                      failed = True
-                  else:
-                      print(f"✓ {label}: cert/key/https args emitted together")
-              else:
-                  if has_cert or has_key or has_https:
-                      print(f"FAIL: {label}: expected none of {cert_flag}/{key_flag}/{https_flag}; "
-                            f"main S3 -port would silently become HTTPS and break HTTP probes "
-                            f"(got cert={has_cert} key={has_key} https={has_https})", file=sys.stderr)
-                      failed = True
-                  else:
-                      print(f"✓ {label}: no TLS args emitted, main -port stays HTTP")
-
-              # bash -n: pin down that the rendered script parses. Guards against
-              # a future helper change that leaves a dangling `\` with nothing
-              # after it (every current caller already exits cleanly because
-              # bash treats trailing `\<newline><EOF>` as line-continuation to
-              # an empty line — but keep the contract explicit).
-              parse = subprocess.run(["bash", "-n"], input=script, text=True,
-                                     capture_output=True)
-              if parse.returncode != 0:
-                  print(f"FAIL: {label}: bash -n rejected rendered script: {parse.stderr.strip()}",
-                        file=sys.stderr)
-                  failed = True
-
-          sys.exit(1 if failed else 0)
-          PYEOF
-
           echo "✅ All template rendering tests passed!"
 
       - name: Create kind cluster

.github/workflows/helm_manual_release.yml

@@ -1,9 +1,6 @@
-name: "helm: release"
+name: "helm: manual release"
 
 on:
-  push:
-    tags:
-      - '*'
   workflow_dispatch:
 
 permissions:

.github/workflows/kafka-tests.yml

@@ -445,7 +445,7 @@ jobs:
         # Test consumer group functionality with explicit timeout
         ulimit -n 512 || echo "Warning: Could not set file descriptor limit"
         ulimit -u 100 || echo "Warning: Could not set process limit"
-        timeout 240s go test -v -run "^TestConsumerGroups" -timeout 180s ./integration/...
+        timeout 240s go test -v -run "^TestConsumerGroups" -timeout 180s ./integration/... || echo "Test execution timed out or failed"
       env:
         GOMAXPROCS: 1
         SEAWEEDFS_MASTERS: 127.0.0.1:9333

.github/workflows/kms-tests.yml

@@ -1,140 +0,0 @@
-name: "KMS Tests"
-
-on:
-  pull_request:
-    paths:
-      - 'weed/kms/**'
-      - 'weed/s3api/s3_sse_*.go'
-      - 'weed/s3api/s3api_object_handlers.go'
-      - 'weed/s3api/s3api_object_handlers_put.go'
-      - 'test/kms/**'
-      - '.github/workflows/kms-tests.yml'
-  push:
-    branches: [ master, main ]
-    paths:
-      - 'weed/kms/**'
-      - 'weed/s3api/s3_sse_*.go'
-      - 'weed/s3api/s3api_object_handlers.go'
-      - 'weed/s3api/s3api_object_handlers_put.go'
-      - 'test/kms/**'
-
-concurrency:
-  group: ${{ github.head_ref || github.ref }}-kms-tests
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-defaults:
-  run:
-    working-directory: weed
-
-jobs:
-  kms-provider-tests:
-    name: KMS Provider Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 20
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false
-
-      - name: Run KMS provider integration tests
-        timeout-minutes: 15
-        working-directory: test/kms
-        run: |
-          set -x
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          docker --version
-
-          make test-provider-ci
-
-      - name: Show OpenBao logs on failure
-        if: failure()
-        run: |
-          echo "=== OpenBao Container Logs ==="
-          docker logs openbao-ci 2>&1 | tail -50 || echo "No OpenBao container found"
-          echo "=== Setup Logs ==="
-          cat /tmp/openbao-ci-setup.log 2>/dev/null || echo "No setup log found"
-
-      - name: Cleanup
-        if: always()
-        working-directory: test/kms
-        run: |
-          make stop-openbao-ci || true
-
-  s3-kms-e2e-tests:
-    name: S3 KMS End-to-End Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 25
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false
-
-      - name: Run S3 KMS end-to-end tests
-        timeout-minutes: 20
-        working-directory: test/kms
-        run: |
-          set -x
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          docker --version
-          aws --version
-
-          make test-s3-kms-ci
-
-      - name: Show logs on failure
-        if: failure()
-        working-directory: test/kms
-        run: |
-          echo "=== OpenBao Container Logs ==="
-          cat /tmp/openbao-ci-container.log 2>/dev/null || docker logs openbao-ci 2>&1 | tail -50 || echo "No OpenBao logs found"
-          echo "=== SeaweedFS Server Logs ==="
-          tail -100 /tmp/seaweedfs-kms-mini.log 2>/dev/null || echo "No server log found"
-          echo "=== Setup Logs ==="
-          cat /tmp/weed-kms-ci-setup.log 2>/dev/null || echo "No weed setup log"
-          echo "=== Process Information ==="
-          ps aux | grep -E "(weed|test)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: s3-kms-e2e-logs
-          path: |
-            /tmp/seaweedfs-kms-mini.log
-            /tmp/openbao-ci-container.log
-            /tmp/weed-kms-ci-setup.log
-          retention-days: 3
-
-      - name: Cleanup
-        if: always()
-        working-directory: test/kms
-        run: |
-          make stop-seaweedfs-ci || true
-          make stop-openbao-ci || true
-          make clean-ci || true

.github/workflows/nfs-tests.yml

@@ -1,97 +0,0 @@
-name: "NFS Integration Tests"
-
-on:
-  push:
-    branches: [ master, main ]
-    paths:
-      - 'weed/server/nfs/**'
-      - 'weed/command/nfs.go'
-      - 'weed/filer/filer_inode.go'
-      - 'weed/filer/filer_inode_index.go'
-      - 'weed/filer/filerstore_wrapper.go'
-      - 'weed/server/filer_grpc_server_rename.go'
-      - 'test/nfs/**'
-      - '.github/workflows/nfs-tests.yml'
-  pull_request:
-    branches: [ master, main ]
-    paths:
-      - 'weed/server/nfs/**'
-      - 'weed/command/nfs.go'
-      - 'weed/filer/filer_inode.go'
-      - 'weed/filer/filer_inode_index.go'
-      - 'weed/filer/filerstore_wrapper.go'
-      - 'weed/server/filer_grpc_server_rename.go'
-      - 'test/nfs/**'
-      - '.github/workflows/nfs-tests.yml'
-
-concurrency:
-  group: ${{ github.head_ref }}/nfs-tests
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-env:
-  TEST_TIMEOUT: '15m'
-
-jobs:
-  nfs-integration:
-    name: NFS Integration Testing
-    runs-on: ubuntu-22.04
-    timeout-minutes: 20
-
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v6
-
-    - name: Set up Go
-      uses: actions/setup-go@v6
-      with:
-        go-version-file: 'go.mod'
-
-    - name: Build SeaweedFS
-      run: |
-        cd weed
-        go build -o weed .
-        chmod +x weed
-        ./weed version
-
-    - name: Run NFS Integration Tests
-      run: |
-        cd test/nfs
-
-        echo "Running NFS integration tests..."
-        echo "============================================"
-
-        # Install test dependencies
-        go mod download
-
-        # Run all NFS tests
-        go test -v -timeout=${{ env.TEST_TIMEOUT }} ./...
-
-        echo "============================================"
-        echo "NFS integration tests completed"
-
-    - name: Test Summary
-      if: always()
-      run: |
-        echo "## NFS Integration Test Summary" >> $GITHUB_STEP_SUMMARY
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "### Test Coverage" >> $GITHUB_STEP_SUMMARY
-        echo "- **Read/Write Round Trip**: Basic file create + read" >> $GITHUB_STEP_SUMMARY
-        echo "- **Directory Operations**: Mkdir, ReadDirPlus, RmDir" >> $GITHUB_STEP_SUMMARY
-        echo "- **Nested Directories**: Deep tree creation and leaf I/O" >> $GITHUB_STEP_SUMMARY
-        echo "- **Rename**: Content preserved across rename" >> $GITHUB_STEP_SUMMARY
-        echo "- **Overwrite + Truncate**: Setattr(size=0) + shorter write" >> $GITHUB_STEP_SUMMARY
-        echo "- **Large Files**: 3 MiB binary round trip" >> $GITHUB_STEP_SUMMARY
-        echo "- **Edge Payloads**: All 256 byte values + empty files" >> $GITHUB_STEP_SUMMARY
-        echo "- **Symlinks**: Symlink + Lookup" >> $GITHUB_STEP_SUMMARY
-        echo "- **Missing Path**: Remove on missing entry errors cleanly" >> $GITHUB_STEP_SUMMARY
-        echo "- **FSINFO**: Non-zero rtpref/wtpref advertised" >> $GITHUB_STEP_SUMMARY
-        echo "- **Sequential Append**: Two-part concatenation" >> $GITHUB_STEP_SUMMARY
-        echo "- **ReadDir After Remove**: Meta cache does not serve stale entries" >> $GITHUB_STEP_SUMMARY
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "### Harness" >> $GITHUB_STEP_SUMMARY
-        echo "Each test boots its own master + volume + filer + nfs subprocess" >> $GITHUB_STEP_SUMMARY
-        echo "stack on loopback and drives it via the NFSv3 RPC protocol using" >> $GITHUB_STEP_SUMMARY
-        echo "go-nfs-client. No kernel NFS mount or privileged port is required." >> $GITHUB_STEP_SUMMARY

.github/workflows/pjdfstest.yml

@@ -1,118 +0,0 @@
-name: "pjdfstest POSIX Compliance"
-
-on:
-  push:
-    branches: [ master, main ]
-    paths:
-      - 'weed/mount/**'
-      - 'weed/filer/**'
-      - 'test/pjdfstest/**'
-      - '.github/workflows/pjdfstest.yml'
-  pull_request:
-    branches: [ master, main ]
-    paths:
-      - 'weed/mount/**'
-      - 'weed/filer/**'
-      - 'test/pjdfstest/**'
-      - '.github/workflows/pjdfstest.yml'
-  workflow_dispatch:
-
-concurrency:
-  group: pjdfstest/${{ github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  pjdfstest:
-    name: pjdfstest
-    runs-on: ubuntu-22.04
-    timeout-minutes: 60
-
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v6
-
-    - name: Set up Go
-      uses: actions/setup-go@v6
-      with:
-        go-version-file: 'go.mod'
-
-    - name: Start local Docker registry
-      run: docker run -d --restart=always -p 5000:5000 --name registry registry:2
-
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v4
-      with:
-        driver-opts: network=host
-
-    - name: Build weed race binary
-      run: |
-        cd docker
-        make binary_race
-
-    - name: Build SeaweedFS e2e image
-      uses: docker/build-push-action@v7
-      with:
-        context: docker
-        file: docker/Dockerfile.e2e
-        tags: localhost:5000/chrislusf/seaweedfs:e2e
-        push: true
-        cache-from: type=gha,scope=pjdfstest-e2e
-        cache-to: type=gha,mode=max,scope=pjdfstest-e2e
-
-    - name: Tag e2e image for docker compose
-      run: |
-        docker pull localhost:5000/chrislusf/seaweedfs:e2e
-        docker tag localhost:5000/chrislusf/seaweedfs:e2e chrislusf/seaweedfs:e2e
-
-    - name: Build pjdfstest image
-      uses: docker/build-push-action@v7
-      with:
-        context: test/pjdfstest
-        build-contexts: |
-          chrislusf/seaweedfs:e2e=docker-image://localhost:5000/chrislusf/seaweedfs:e2e
-        tags: localhost:5000/chrislusf/seaweedfs:pjdfstest
-        push: true
-        cache-from: type=gha,scope=pjdfstest-harness
-        cache-to: type=gha,mode=max,scope=pjdfstest-harness
-
-    - name: Tag pjdfstest image for docker compose
-      run: |
-        docker pull localhost:5000/chrislusf/seaweedfs:pjdfstest
-        docker tag localhost:5000/chrislusf/seaweedfs:pjdfstest chrislusf/seaweedfs:pjdfstest
-
-    - name: Start SeaweedFS cluster
-      run: |
-        docker compose -f test/pjdfstest/docker-compose.yml up --wait
-
-    - name: Run pjdfstest
-      run: |
-        set -o pipefail
-        docker compose -f test/pjdfstest/docker-compose.yml exec -T mount \
-          /run.sh 2>&1 | tee /tmp/pjdfstest-output.log
-
-    - name: Collect logs
-      if: always()
-      run: |
-        mkdir -p /tmp/pjdfstest-docker-logs
-        for svc in master volume filer mount; do
-          docker compose -f test/pjdfstest/docker-compose.yml logs "$svc" \
-            > "/tmp/pjdfstest-docker-logs/${svc}.log" 2>&1 || true
-        done
-
-    - name: Tear down
-      if: always()
-      run: |
-        docker compose -f test/pjdfstest/docker-compose.yml down -v
-
-    - name: Upload logs
-      if: always()
-      uses: actions/upload-artifact@v7
-      with:
-        name: pjdfstest-results
-        path: |
-          /tmp/pjdfstest-output.log
-          /tmp/pjdfstest-docker-logs/
-        retention-days: 7

.github/workflows/rust-volume-server-tests.yml

@@ -1,242 +0,0 @@
-name: "Rust Volume Server Tests"
-
-on:
-  pull_request:
-    branches: [ master ]
-    paths:
-      - 'seaweed-volume/**'
-      - 'test/volume_server/**'
-      - 'weed/pb/volume_server.proto'
-      - 'weed/pb/volume_server_pb/**'
-      - '.github/workflows/rust-volume-server-tests.yml'
-  push:
-    branches: [ master, main ]
-    paths:
-      - 'seaweed-volume/**'
-      - 'test/volume_server/**'
-      - 'weed/pb/volume_server.proto'
-      - 'weed/pb/volume_server_pb/**'
-      - '.github/workflows/rust-volume-server-tests.yml'
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-
-jobs:
-  rust-unit-tests:
-    name: Rust Unit Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 15
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-
-
-      - name: Build Rust volume server
-        run: cd seaweed-volume && cargo build --release
-
-      - name: Run Rust unit tests
-        run: cd seaweed-volume && cargo test
-
-  rust-integration-tests:
-    name: Rust Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-
-
-      - name: Build Go weed binary
-        run: |
-          cd weed
-          go build -tags 5BytesOffset -o weed .
-          chmod +x weed
-          ./weed version
-
-      - name: Build Rust volume binary
-        run: cd seaweed-volume && cargo build --release
-
-      - name: Run integration tests
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-          RUST_VOLUME_BINARY: ${{ github.workspace }}/seaweed-volume/target/release/weed-volume
-        run: |
-          echo "Running Rust volume server integration tests..."
-          go test -v -count=1 -timeout=15m ./test/volume_server/rust/...
-
-      - name: Collect logs on failure
-        if: failure()
-        run: |
-          mkdir -p /tmp/rust-volume-server-it-logs
-          find /tmp -maxdepth 1 -type d -name "seaweedfs_volume_server_it_*" -print -exec cp -r {} /tmp/rust-volume-server-it-logs/ \; || true
-
-      - name: Archive logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-server-integration-test-logs
-          path: /tmp/rust-volume-server-it-logs/
-          if-no-files-found: warn
-          retention-days: 7
-
-      - name: Test summary
-        if: always()
-        run: |
-          echo "## Rust Volume Server Integration Test Summary" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Suite: test/volume_server/rust" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Command: go test -v -count=1 -timeout=15m ./test/volume_server/rust/..." >> "$GITHUB_STEP_SUMMARY"
-
-  rust-volume-go-tests:
-    name: Go Tests with Rust Volume (${{ matrix.test-type }} - Shard ${{ matrix.shard }})
-    runs-on: ubuntu-22.04
-    timeout-minutes: 45
-    strategy:
-      fail-fast: false
-      matrix:
-        test-type: [grpc, http]
-        shard: [1, 2, 3]
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-
-
-      - name: Build Go weed binary
-        run: |
-          cd weed
-          go build -tags 5BytesOffset -o weed .
-          chmod +x weed
-          ./weed version
-
-      - name: Build Rust volume binary
-        run: cd seaweed-volume && cargo build --release
-
-      - name: Run volume server integration tests with Rust volume
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-          RUST_VOLUME_BINARY: ${{ github.workspace }}/seaweed-volume/target/release/weed-volume
-          VOLUME_SERVER_IMPL: rust
-        run: |
-          if [ "${{ matrix.test-type }}" == "grpc" ]; then
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-H]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[I-S]"
-            else
-              TEST_PATTERN="^Test[T-Z]"
-            fi
-          else
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-G]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[H-R]"
-            else
-              TEST_PATTERN="^Test[S-Z]"
-            fi
-          fi
-          echo "Running Go volume server tests with Rust volume for ${{ matrix.test-type }} (Shard ${{ matrix.shard }}, pattern: ${TEST_PATTERN})..."
-          go test -v -count=1 -tags 5BytesOffset -timeout=30m ./test/volume_server/${{ matrix.test-type }}/... -run "${TEST_PATTERN}"
-
-      - name: Collect logs on failure
-        if: failure()
-        run: |
-          mkdir -p /tmp/rust-volume-go-test-logs
-          find /tmp -maxdepth 1 -type d -name "seaweedfs_volume_server_it_*" -print -exec cp -r {} /tmp/rust-volume-go-test-logs/ \; || true
-
-      - name: Archive logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-go-test-logs-${{ matrix.test-type }}-shard${{ matrix.shard }}
-          path: /tmp/rust-volume-go-test-logs/
-          if-no-files-found: warn
-          retention-days: 7
-
-      - name: Test summary
-        if: always()
-        run: |
-          if [ "${{ matrix.test-type }}" == "grpc" ]; then
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-H]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[I-S]"
-            else
-              TEST_PATTERN="^Test[T-Z]"
-            fi
-          else
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-G]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[H-R]"
-            else
-              TEST_PATTERN="^Test[S-Z]"
-            fi
-          fi
-          echo "## Rust Volume - Go Test Summary (${{ matrix.test-type }} - Shard ${{ matrix.shard }})" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Suite: test/volume_server/${{ matrix.test-type }} (Pattern: ${TEST_PATTERN})" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Volume server: Rust (VOLUME_SERVER_IMPL=rust)" >> "$GITHUB_STEP_SUMMARY"

.github/workflows/rust_binaries_dev.yml

@@ -1,166 +0,0 @@
-name: "rust: build dev volume server binaries"
-
-on:
-  push:
-    branches: [ master ]
-    paths:
-      - 'seaweed-volume/**'
-      - '.github/workflows/rust_binaries_dev.yml'
-
-permissions:
-  contents: read
-
-jobs:
-
-  cleanup:
-    permissions:
-      contents: write
-    runs-on: ubuntu-latest
-    steps:
-      - name: Delete old Rust volume dev assets
-        uses: mknejp/delete-release-assets@v1
-        continue-on-error: true
-        with:
-          token: ${{ github.token }}
-          tag: dev
-          fail-if-no-assets: false
-          assets: |
-            weed-volume-*
-
-  build-rust-volume-dev-linux:
-    permissions:
-      contents: write
-    needs: cleanup
-    runs-on: ubuntu-22.04
-    strategy:
-      matrix:
-        include:
-          - target: x86_64-unknown-linux-gnu
-            asset_suffix: linux-amd64
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-dev-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-dev-${{ matrix.target }}-
-
-      - name: Set BUILD_TIME
-        run: echo BUILD_TIME=$(date -u +%Y%m%d-%H%M) >> "$GITHUB_ENV"
-
-      - name: Build Rust volume server (large disk)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: cd seaweed-volume && cargo build --release
-
-      - name: Package large disk binary
-        run: |
-          cp seaweed-volume/target/release/weed-volume weed-volume-large-disk
-          tar czf "weed-volume-large-disk-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz" weed-volume-large-disk
-          rm weed-volume-large-disk
-
-      - name: Build Rust volume server (normal)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: cd seaweed-volume && cargo build --release --no-default-features
-
-      - name: Package normal binary
-        run: |
-          cp seaweed-volume/target/release/weed-volume weed-volume-normal
-          tar czf "weed-volume-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz" weed-volume-normal
-          rm weed-volume-normal
-
-      - name: Upload dev release assets
-        uses: softprops/action-gh-release@v3
-        with:
-          tag_name: dev
-          prerelease: true
-          files: |
-            weed-volume-large-disk-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz
-            weed-volume-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  build-rust-volume-dev-darwin:
-    permissions:
-      contents: write
-    needs: build-rust-volume-dev-linux
-    runs-on: macos-latest
-    strategy:
-      matrix:
-        include:
-          - target: aarch64-apple-darwin
-            asset_suffix: darwin-arm64
-          - target: x86_64-apple-darwin
-            asset_suffix: darwin-amd64
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: brew install protobuf
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-dev-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-dev-${{ matrix.target }}-
-
-      - name: Set BUILD_TIME
-        run: echo BUILD_TIME=$(date -u +%Y%m%d-%H%M) >> "$GITHUB_ENV"
-
-      - name: Build Rust volume server (large disk)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: cd seaweed-volume && cargo build --release --target ${{ matrix.target }}
-
-      - name: Package large disk binary
-        run: |
-          cp seaweed-volume/target/${{ matrix.target }}/release/weed-volume weed-volume-large-disk
-          tar czf "weed-volume-large-disk-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz" weed-volume-large-disk
-          rm weed-volume-large-disk
-
-      - name: Build Rust volume server (normal)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: cd seaweed-volume && cargo build --release --target ${{ matrix.target }} --no-default-features
-
-      - name: Package normal binary
-        run: |
-          cp seaweed-volume/target/${{ matrix.target }}/release/weed-volume weed-volume-normal
-          tar czf "weed-volume-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz" weed-volume-normal
-          rm weed-volume-normal
-
-      - name: Upload dev release assets
-        uses: softprops/action-gh-release@v3
-        with:
-          tag_name: dev
-          prerelease: true
-          files: |
-            weed-volume-large-disk-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz
-            weed-volume-${{ env.BUILD_TIME }}-${{ matrix.asset_suffix }}.tar.gz
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/rust_binaries_release.yml

@@ -1,253 +0,0 @@
-name: "rust: build versioned volume server binaries"
-
-on:
-  push:
-    tags:
-      - '*'
-
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-
-  build-rust-volume-linux:
-    permissions:
-      contents: write
-    runs-on: ubuntu-22.04
-    strategy:
-      matrix:
-        include:
-          - target: x86_64-unknown-linux-gnu
-            asset_suffix: linux_amd64
-          - target: aarch64-unknown-linux-gnu
-            asset_suffix: linux_arm64
-            cross: true
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Install cross-compilation tools
-        if: matrix.cross
-        run: |
-          sudo dpkg --add-architecture arm64
-          sudo sed -i 's/^deb /deb [arch=amd64] /' /etc/apt/sources.list
-          echo "deb [arch=arm64] http://ports.ubuntu.com/ jammy main restricted universe multiverse" | sudo tee /etc/apt/sources.list.d/arm64.list
-          echo "deb [arch=arm64] http://ports.ubuntu.com/ jammy-updates main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64.list
-          sudo apt-get update
-          sudo apt-get install -y gcc-aarch64-linux-gnu libssl-dev:arm64
-          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc" >> "$GITHUB_ENV"
-          echo "OPENSSL_DIR=/usr" >> "$GITHUB_ENV"
-          echo "OPENSSL_INCLUDE_DIR=/usr/include" >> "$GITHUB_ENV"
-          echo "OPENSSL_LIB_DIR=/usr/lib/aarch64-linux-gnu" >> "$GITHUB_ENV"
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-release-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-release-${{ matrix.target }}-
-
-      - name: Build Rust volume server (large disk)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }}
-
-      - name: Build Rust volume server (normal)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }} --no-default-features
-
-      - name: Package binaries
-        run: |
-          # Large disk (default, 5bytes feature)
-          cp seaweed-volume/target/${{ matrix.target }}/release/weed-volume weed-volume-large-disk
-          tar czf weed-volume_large_disk_${{ matrix.asset_suffix }}.tar.gz weed-volume-large-disk
-          rm weed-volume-large-disk
-
-          # Normal volume size
-          cp seaweed-volume/target/${{ matrix.target }}/release/weed-volume weed-volume-normal
-          tar czf weed-volume_${{ matrix.asset_suffix }}.tar.gz weed-volume-normal
-          rm weed-volume-normal
-
-      - name: Upload release assets
-        if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v3
-        with:
-          files: |
-            weed-volume_large_disk_${{ matrix.asset_suffix }}.tar.gz
-            weed-volume_${{ matrix.asset_suffix }}.tar.gz
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Upload artifacts
-        if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-${{ matrix.asset_suffix }}
-          path: |
-            weed-volume_large_disk_${{ matrix.asset_suffix }}.tar.gz
-            weed-volume_${{ matrix.asset_suffix }}.tar.gz
-
-  build-rust-volume-darwin:
-    permissions:
-      contents: write
-    runs-on: macos-latest
-    strategy:
-      matrix:
-        include:
-          - target: x86_64-apple-darwin
-            asset_suffix: darwin_amd64
-          - target: aarch64-apple-darwin
-            asset_suffix: darwin_arm64
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: brew install protobuf
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-release-${{ matrix.target }}-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-release-${{ matrix.target }}-
-
-      - name: Build Rust volume server (large disk)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }}
-
-      - name: Build Rust volume server (normal)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --target ${{ matrix.target }} --no-default-features
-
-      - name: Package binaries
-        run: |
-          cp seaweed-volume/target/${{ matrix.target }}/release/weed-volume weed-volume-large-disk
-          tar czf weed-volume_large_disk_${{ matrix.asset_suffix }}.tar.gz weed-volume-large-disk
-          rm weed-volume-large-disk
-
-          cp seaweed-volume/target/${{ matrix.target }}/release/weed-volume weed-volume-normal
-          tar czf weed-volume_${{ matrix.asset_suffix }}.tar.gz weed-volume-normal
-          rm weed-volume-normal
-
-      - name: Upload release assets
-        if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v3
-        with:
-          files: |
-            weed-volume_large_disk_${{ matrix.asset_suffix }}.tar.gz
-            weed-volume_${{ matrix.asset_suffix }}.tar.gz
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Upload artifacts
-        if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-${{ matrix.asset_suffix }}
-          path: |
-            weed-volume_large_disk_${{ matrix.asset_suffix }}.tar.gz
-            weed-volume_${{ matrix.asset_suffix }}.tar.gz
-
-  build-rust-volume-windows:
-    permissions:
-      contents: write
-    runs-on: windows-latest
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Install protobuf compiler
-        run: choco install protoc -y
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Cache cargo registry and target
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            seaweed-volume/target
-          key: rust-release-windows-${{ hashFiles('seaweed-volume/Cargo.lock') }}
-          restore-keys: |
-            rust-release-windows-
-
-      - name: Build Rust volume server (large disk)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release
-
-      - name: Build Rust volume server (normal)
-        env:
-          SEAWEEDFS_COMMIT: ${{ github.sha }}
-        run: |
-          cd seaweed-volume
-          cargo build --release --no-default-features
-
-      - name: Package binaries
-        shell: bash
-        run: |
-          cp seaweed-volume/target/release/weed-volume.exe weed-volume-large-disk.exe
-          7z a weed-volume_large_disk_windows_amd64.zip weed-volume-large-disk.exe
-          rm weed-volume-large-disk.exe
-
-          cp seaweed-volume/target/release/weed-volume.exe weed-volume-normal.exe
-          7z a weed-volume_windows_amd64.zip weed-volume-normal.exe
-          rm weed-volume-normal.exe
-
-      - name: Upload release assets
-        if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v3
-        with:
-          files: |
-            weed-volume_large_disk_windows_amd64.zip
-            weed-volume_windows_amd64.zip
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Upload artifacts
-        if: ${{ !startsWith(github.ref, 'refs/tags/') }}
-        uses: actions/upload-artifact@v7
-        with:
-          name: rust-volume-windows_amd64
-          path: |
-            weed-volume_large_disk_windows_amd64.zip
-            weed-volume_windows_amd64.zip

.github/workflows/s3-example-integration-tests.yml

@@ -47,14 +47,6 @@ jobs:
           echo "=== Running S3 DeleteBucketNotEmpty Tests ==="
           go test -v -timeout=60s -run TestS3DeleteBucketNotEmpty ./...
 
-      - name: Run S3 Empty Directory Marker Tests
-        timeout-minutes: 15
-        working-directory: test/s3/normal
-        run: |
-          set -x
-          echo "=== Running S3 Empty Directory Marker Tests ==="
-          go test -v -timeout=180s -run TestS3ListObjectsEmptyDirectoryMarkers ./...
-
       - name: Run IAM Integration Tests
         timeout-minutes: 15
         working-directory: test/s3/normal

.github/workflows/s3-go-tests.yml

@@ -245,61 +245,6 @@ jobs:
           path: test/s3/retention/weed-test*.log
           retention-days: 3
 
-  s3-checksum-tests:
-    name: S3 Checksum Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 20
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false
-
-      - name: Run S3 Checksum Tests
-        timeout-minutes: 16
-        working-directory: test/s3/checksum
-        run: |
-          set -x
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting Tests ==="
-          make test-with-server
-
-      - name: Show server logs on failure
-        if: failure()
-        working-directory: test/s3/checksum
-        run: |
-          echo "=== Server Logs ==="
-          if [ -f weed-test.log ]; then
-            echo "Last 100 lines of server logs:"
-            tail -100 weed-test.log
-          else
-            echo "No server log file found"
-          fi
-
-          echo "=== Test Environment ==="
-          ps aux | grep -E "(weed|test)" || true
-          netstat -tlnp | grep -E "(8333|9333|8080)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: s3-checksum-test-logs
-          path: test/s3/checksum/weed-test*.log
-          retention-days: 3
-
   s3-cors-tests:
     name: S3 CORS Tests
     runs-on: ubuntu-22.04

.github/workflows/s3-iam-tests.yml

@@ -84,7 +84,7 @@ jobs:
     timeout-minutes: 25
     strategy:
       matrix:
-        test-type: ["basic", "advanced", "policy-enforcement", "group", "sts"]
+        test-type: ["basic", "advanced", "policy-enforcement", "group"]
         
     steps:
       - name: Check out code
@@ -138,23 +138,6 @@ jobs:
               make clean setup start-services wait-for-services
               go test -v -timeout 15m -run "TestIAMGroup" ./...
               ;;
-            "sts")
-              echo "Running STS and service account tests..."
-              make clean setup start-services wait-for-services
-              # SigV4-signed STS calls need admin credentials matching test_config.json.
-              # Tests default to "admin"/"admin" when env vars are unset, which don't exist.
-              export STS_TEST_ACCESS_KEY=test-access-key
-              export STS_TEST_SECRET_KEY=test-secret-key
-              # The use_service_account_credentials subtest is excluded because
-              # newly-created service-account access keys are not currently
-              # persisted to the filer after CreateServiceAccount — a
-              # pre-existing sync issue tracked separately from the
-              # GetFederationToken routing fix this PR addresses.
-              go test -v -timeout 15m \
-                -run "TestSTS|TestAssumeRoleWithWebIdentity|TestServiceAccount" \
-                -skip "TestServiceAccountLifecycle/use_service_account_credentials" \
-                ./...
-              ;;
             *)
               echo "Unknown test type: ${{ matrix.test-type }}"
               exit 1

.github/workflows/s3-mutation-regression-tests.yml

@@ -1,133 +0,0 @@
-name: "S3 Mutation Regression Tests"
-
-on:
-  pull_request:
-    paths:
-      - 'weed/s3api/**'
-      - 'test/s3/delete/**'
-      - 'test/s3/distributed_lock/**'
-      - 'test/s3/versioning/**'
-      - 'test/volume_server/framework/**'
-      - 'docker/compose/s3.json'
-      - '.github/workflows/s3-mutation-regression-tests.yml'
-
-concurrency:
-  group: ${{ github.head_ref }}/s3-mutation-regression-tests
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  s3-versioning-regressions:
-    name: S3 Versioning Regression Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 25
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Run S3 versioning regression tests
-        timeout-minutes: 20
-        working-directory: test/s3/versioning
-        run: |
-          set -x
-          make test-with-server TEST_PATTERN="TestVersioningCompleteMultipartUploadIsIdempotent|TestVersioningSelfCopyMetadataReplaceCreatesNewVersion|TestVersioningSelfCopyMetadataReplaceSuspendedKeepsNullVersion|TestSuspendedDeleteCreatesDeleteMarker"
-
-      - name: Show server logs on failure
-        if: failure()
-        working-directory: test/s3/versioning
-        run: |
-          echo "=== Server Logs ==="
-          if [ -f weed-test.log ]; then
-            tail -100 weed-test.log
-          fi
-
-      - name: Upload versioning logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: s3-versioning-regression-logs
-          path: test/s3/versioning/weed-test*.log
-          retention-days: 3
-
-  s3-delete-regressions:
-    name: S3 Delete Regression Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 20
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Run S3 delete regression tests
-        timeout-minutes: 15
-        working-directory: test/s3/delete
-        run: |
-          set -x
-          make test-with-server
-
-      - name: Show server logs on failure
-        if: failure()
-        working-directory: test/s3/delete
-        run: |
-          echo "=== Server Logs ==="
-          if [ -f weed-test.log ]; then
-            tail -100 weed-test.log
-          fi
-
-      - name: Upload delete logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: s3-delete-regression-logs
-          path: test/s3/delete/weed-test*.log
-          retention-days: 3
-
-  s3-distributed-lock-regressions:
-    name: S3 Distributed Lock Regression Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-
-      - name: Build SeaweedFS
-        run: |
-          go build -o weed/weed -buildvcs=false ./weed
-
-      - name: Run distributed lock regressions
-        timeout-minutes: 25
-        env:
-          TMPDIR: ${{ github.workspace }}/test/s3/distributed_lock/tmp
-          S3_DISTRIBUTED_LOCK_KEEP_LOGS: "1"
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-        run: |
-          set -x
-          mkdir -p "$TMPDIR"
-          go test -v -count=1 -timeout=20m ./test/s3/distributed_lock
-
-      - name: Upload distributed lock logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v7
-        with:
-          name: s3-distributed-lock-regression-logs
-          path: test/s3/distributed_lock/tmp/seaweedfs_s3_distributed_lock_*
-          retention-days: 3

.github/workflows/s3-spark-tests.yml

@@ -4,7 +4,6 @@ on:
   pull_request:
     paths:
       - 'weed/s3api/**'
-      - 'weed/filer/**'
       - 'test/s3/spark/**'
       - 'test/s3tables/testutil/**'
       - '.github/workflows/s3-spark-tests.yml'

.github/workflows/s3tests.yml

@@ -37,8 +37,6 @@ jobs:
         run: |
           git clone https://github.com/ceph/s3-tests.git
           cd s3-tests
-          sudo apt-get update -qq
-          sudo apt-get install -y -qq libxml2-dev libxslt1-dev zlib1g-dev
           pip install -r requirements.txt
           pip install tox
           pip install -e .
@@ -341,8 +339,6 @@ jobs:
         run: |
           git clone https://github.com/ceph/s3-tests.git
           cd s3-tests
-          sudo apt-get update -qq
-          sudo apt-get install -y -qq libxml2-dev libxslt1-dev zlib1g-dev
           pip install -r requirements.txt
           pip install tox
           pip install -e .
@@ -511,8 +507,6 @@ jobs:
         run: |
           git clone https://github.com/ceph/s3-tests.git
           cd s3-tests
-          sudo apt-get update -qq
-          sudo apt-get install -y -qq libxml2-dev libxslt1-dev zlib1g-dev
           pip install -r requirements.txt
           pip install tox
           pip install -e .
@@ -736,8 +730,6 @@ jobs:
         run: |
           git clone https://github.com/ceph/s3-tests.git
           cd s3-tests
-          sudo apt-get update -qq
-          sudo apt-get install -y -qq libxml2-dev libxslt1-dev zlib1g-dev
           pip install -r requirements.txt
           pip install tox
           pip install -e .

.github/workflows/spark-integration-tests.yml

@@ -133,7 +133,7 @@ jobs:
 
     - name: Publish test report
       if: always()
-      uses: dorny/test-reporter@v3
+      uses: dorny/test-reporter@v2
       with:
         name: Spark Test Results
         path: test/java/spark/target/surefire-reports/*.xml

.github/workflows/telemetry-integration.yml

@@ -1,46 +0,0 @@
-name: Telemetry Integration Tests
-
-on:
-  push:
-    branches: [ master ]
-    paths:
-      - 'telemetry/**'
-      - 'weed/telemetry/**'
-      - '.github/workflows/telemetry-integration.yml'
-  pull_request:
-    branches: [ master ]
-    paths:
-      - 'telemetry/**'
-      - 'weed/telemetry/**'
-      - '.github/workflows/telemetry-integration.yml'
-
-permissions:
-  contents: read
-
-jobs:
-  telemetry-integration-test:
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v6
-
-    - name: Set up Go
-      uses: actions/setup-go@v6
-      with:
-        go-version-file: 'go.mod'
-
-    - name: Build telemetry server
-      run: cd telemetry/server && go build -o telemetry-server .
-
-    - name: Run telemetry integration test
-      run: go run telemetry/test/integration.go
-
-    - name: Upload test logs on failure
-      if: failure()
-      uses: actions/upload-artifact@v7
-      with:
-        name: telemetry-test-logs
-        path: telemetry-server-test.log
-        retention-days: 7

.github/workflows/tls-rotation-tests.yml

@@ -1,56 +0,0 @@
-name: "TLS Rotation Integration Tests"
-
-on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
-
-permissions:
-  contents: read
-
-jobs:
-  tls-rotation-tests:
-    name: TLS Rotation Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 10
-    steps:
-    - name: Set up Go 1.x
-      uses: actions/setup-go@v6
-      with:
-        go-version: ^1.25
-      id: go
-
-    - name: Check out code into the Go module directory
-      uses: actions/checkout@v6
-
-    - name: Build weed binary
-      run: |
-        cd weed && go build -o weed .
-
-    - name: Run TLS Rotation Integration Tests
-      working-directory: test/tls_rotation
-      run: |
-        go test -v -count=1 -timeout 5m
-
-    - name: Collect server logs on failure
-      if: failure()
-      run: |
-        echo "Collecting master logs from temp directories..."
-        mkdir -p /tmp/tls-rotation-test-logs
-        find /tmp -maxdepth 1 -type d -name "TestMasterHTTPS*" 2>/dev/null | while read dir; do
-          if [ -d "$dir" ]; then
-            echo "Found test directory: $dir"
-            cp -r "$dir" /tmp/tls-rotation-test-logs/ 2>/dev/null || true
-          fi
-        done
-        echo "Collected logs:"
-        find /tmp/tls-rotation-test-logs -type f -name "*.log" 2>/dev/null || echo "No logs found"
-
-    - name: Archive logs
-      if: failure()
-      uses: actions/upload-artifact@v7
-      with:
-        name: tls-rotation-test-logs
-        path: /tmp/tls-rotation-test-logs/
-        retention-days: 14

.github/workflows/tus-tests.yml

@@ -2,6 +2,17 @@ name: "TUS Protocol Tests"
 
 on:
   pull_request:
+    paths:
+      - 'weed/server/filer_server_tus*.go'
+      - 'weed/server/filer_server.go'
+      - 'test/tus/**'
+      - '.github/workflows/tus-tests.yml'
+  push:
+    branches: [ master, main ]
+    paths:
+      - 'weed/server/filer_server_tus*.go'
+      - 'weed/server/filer_server.go'
+      - 'test/tus/**'
 
 concurrency:
   group: ${{ github.head_ref || github.ref }}/tus-tests

.github/workflows/vacuum-integration-tests.yml

@@ -1,56 +0,0 @@
-name: "Vacuum Integration Tests"
-
-on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
-
-permissions:
-  contents: read
-
-jobs:
-  vacuum-integration-tests:
-    name: Vacuum Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 15
-    steps:
-    - name: Set up Go 1.x
-      uses: actions/setup-go@v6
-      with:
-        go-version: ^1.25
-      id: go
-
-    - name: Check out code into the Go module directory
-      uses: actions/checkout@v6
-
-    - name: Build weed binary
-      run: |
-        cd weed && go build -o weed .
-
-    - name: Run Vacuum Integration Tests
-      working-directory: test/vacuum
-      run: |
-        go test -v -timeout 10m
-
-    - name: Collect server logs on failure
-      if: failure()
-      run: |
-        echo "Collecting server logs from temp directories..."
-        mkdir -p /tmp/vacuum-test-logs
-        find /tmp -maxdepth 1 -type d -name "TestVacuum*" 2>/dev/null | while read dir; do
-          if [ -d "$dir" ]; then
-            echo "Found test directory: $dir"
-            cp -r "$dir" /tmp/vacuum-test-logs/ 2>/dev/null || true
-          fi
-        done
-        echo "Collected logs:"
-        find /tmp/vacuum-test-logs -type f -name "*.log" 2>/dev/null || echo "No logs found"
-
-    - name: Archive logs
-      if: failure()
-      uses: actions/upload-artifact@v7
-      with:
-        name: vacuum-integration-test-logs
-        path: /tmp/vacuum-test-logs/
-        retention-days: 14

.gitignore

@@ -141,6 +141,4 @@ test/s3/iam/.test_env
 /test/erasure_coding/admin_dockertest/tmp
 /test/erasure_coding/admin_dockertest/task_logs
 weed_bin
-telemetry/server/telemetry-server
 .aider*
-/seaweed-volume/docs

.superset/config.json

@@ -1,5 +0,0 @@
-{
-  "setup": [],
-  "teardown": [],
-  "run": []
-}

Makefile

@@ -42,7 +42,8 @@ test: admin-generate
 
 # Admin component targets
 admin-generate:
-	@cd $(ADMIN_DIR) && $(MAKE) generate
+	@echo "Generating admin component templates..."
+	@cd $(ADMIN_DIR) && templ generate ./view
 
 admin-build: admin-generate
 	@echo "Building admin component..."

SECURITY.md

@@ -1,24 +0,0 @@
-# Security Policy
-
-## Reporting a Vulnerability
-
-If you find a security issue in SeaweedFS, please report it privately:
-
-- Email: support@seaweedfs.com  
-- Do not open a public GitHub issue
-
-Please include:
-- A clear description of the issue
-- Steps to reproduce (if possible)
-- Affected versions
-
-## Response
-
-- We will respond as soon as possible (usually within 1 business day)  
-- We will investigate and work on a fix  
-- We may coordinate disclosure with you
-
-## Notes
-
-- Please allow time for a fix before public disclosure  
-- If you’re unsure whether something is a security issue, feel free to reach out

VOLUME_SERVER_RUST_PLAN.md

@@ -1,790 +0,0 @@
-# Execution Plan: SeaweedFS Volume Server — Go to Rust Port
-
-## Scope Summary
-
-| Component | Go Source | Lines (non-test) | Description |
-|---|---|---|---|
-| CLI & startup | `weed/command/volume.go` | 476 | ~40 CLI flags, server bootstrap |
-| HTTP server + handlers | `weed/server/volume_server*.go` | 1,517 | Struct, routes, read/write/delete handlers |
-| gRPC handlers | `weed/server/volume_grpc_*.go` | 3,073 | 40 RPC method implementations |
-| Storage engine | `weed/storage/` | 15,271 | Volumes, needles, index, compaction, EC, backend |
-| Protobuf definitions | `weed/pb/volume_server.proto` | 759 | Service + message definitions |
-| Shared utilities | `weed/security/`, `weed/stats/`, `weed/util/` | ~2,000+ | JWT, TLS, metrics, helpers |
-| **Total** | | **~23,000+** | |
-
-## Rust Crate & Dependency Strategy
-
-```
-seaweed-volume/
-├── Cargo.toml
-├── build.rs                    # protobuf codegen
-├── proto/
-│   ├── volume_server.proto     # copied from Go, adapted
-│   └── remote.proto
-├── src/
-│   ├── main.rs                 # CLI entry point
-│   ├── config.rs               # CLI flags + config
-│   ├── server/
-│   │   ├── mod.rs
-│   │   ├── volume_server.rs    # VolumeServer struct + lifecycle
-│   │   ├── http_handlers.rs    # HTTP route dispatch
-│   │   ├── http_read.rs        # GET/HEAD handlers
-│   │   ├── http_write.rs       # POST/PUT handlers
-│   │   ├── http_delete.rs      # DELETE handler
-│   │   ├── http_admin.rs       # /status, /healthz, /ui
-│   │   ├── grpc_service.rs     # gRPC trait impl dispatch
-│   │   ├── grpc_vacuum.rs
-│   │   ├── grpc_copy.rs
-│   │   ├── grpc_erasure_coding.rs
-│   │   ├── grpc_tail.rs
-│   │   ├── grpc_admin.rs
-│   │   ├── grpc_read_write.rs
-│   │   ├── grpc_batch_delete.rs
-│   │   ├── grpc_scrub.rs
-│   │   ├── grpc_tier.rs
-│   │   ├── grpc_remote.rs
-│   │   ├── grpc_query.rs
-│   │   ├── grpc_state.rs
-│   │   └── grpc_client_to_master.rs  # heartbeat
-│   ├── storage/
-│   │   ├── mod.rs
-│   │   ├── store.rs            # Store (multi-disk manager)
-│   │   ├── volume.rs           # Volume struct + lifecycle
-│   │   ├── volume_read.rs
-│   │   ├── volume_write.rs
-│   │   ├── volume_compact.rs
-│   │   ├── volume_info.rs
-│   │   ├── needle/
-│   │   │   ├── mod.rs
-│   │   │   ├── needle.rs       # Needle struct + serialization
-│   │   │   ├── needle_read.rs
-│   │   │   ├── needle_write.rs
-│   │   │   ├── needle_map.rs   # in-memory NeedleMap
-│   │   │   ├── needle_value.rs
-│   │   │   └── crc.rs
-│   │   ├── super_block.rs
-│   │   ├── idx/
-│   │   │   ├── mod.rs
-│   │   │   └── idx.rs          # .idx file format read/write
-│   │   ├── needle_map_leveldb.rs
-│   │   ├── types.rs            # NeedleId, Offset, Size, DiskType
-│   │   ├── disk_location.rs    # DiskLocation per-directory
-│   │   ├── erasure_coding/
-│   │   │   ├── mod.rs
-│   │   │   ├── ec_volume.rs
-│   │   │   ├── ec_shard.rs
-│   │   │   ├── ec_encoder.rs   # Reed-Solomon encoding
-│   │   │   └── ec_decoder.rs
-│   │   └── backend/
-│   │       ├── mod.rs
-│   │       ├── disk.rs
-│   │       └── s3_backend.rs   # tiered storage to S3
-│   ├── topology/
-│   │   └── volume_layout.rs    # replication placement
-│   ├── security/
-│   │   ├── mod.rs
-│   │   ├── guard.rs            # whitelist + JWT gate
-│   │   ├── jwt.rs
-│   │   └── tls.rs
-│   ├── stats/
-│   │   ├── mod.rs
-│   │   └── metrics.rs          # Prometheus counters/gauges
-│   └── util/
-│       ├── mod.rs
-│       ├── grpc.rs
-│       ├── http.rs
-│       └── file.rs
-└── tests/
-    ├── integration/
-    │   ├── http_read_test.rs
-    │   ├── http_write_test.rs
-    │   ├── grpc_test.rs
-    │   └── storage_test.rs
-    └── unit/
-        ├── needle_test.rs
-        ├── idx_test.rs
-        ├── super_block_test.rs
-        └── ec_test.rs
-```
-
-### Key Rust dependencies
-
-| Purpose | Crate |
-|---|---|
-| Async runtime | `tokio` |
-| gRPC | `tonic` + `prost` |
-| HTTP server | `hyper` + `axum` |
-| CLI parsing | `clap` (derive) |
-| Prometheus metrics | `prometheus` |
-| JWT | `jsonwebtoken` |
-| TLS | `rustls` + `tokio-rustls` |
-| LevelDB | `rusty-leveldb` or `rocksdb` |
-| Reed-Solomon EC | `reed-solomon-erasure` |
-| Logging | `tracing` + `tracing-subscriber` |
-| Config (security.toml) | `toml` + `serde` |
-| CRC32 | `crc32fast` |
-| Memory-mapped files | `memmap2` |
-
----
-
-## Phased Execution Plan
-
-### Phase 1: Project Skeleton & Protobuf Codegen
-**Goal:** Cargo project compiles, proto codegen works, CLI parses all flags.
-
-**Steps:**
-
-1.1. Create `seaweed-volume/Cargo.toml` with all dependencies listed above.
-
-1.2. Copy `volume_server.proto` and `remote.proto` into `proto/`. Adjust package paths for Rust codegen.
-
-1.3. Create `build.rs` using `tonic-build` to compile `.proto` files into Rust types.
-
-1.4. Create `src/main.rs` with `clap` derive structs mirroring all 40 CLI flags from `weed/command/volume.go`:
-   - `--port` (default 8080)
-   - `--port.grpc` (default 0 → 10000+port)
-   - `--port.public` (default 0 → same as port)
-   - `--ip` (auto-detect)
-   - `--id` (default empty → ip:port)
-   - `--publicUrl`
-   - `--ip.bind`
-   - `--master` (default "localhost:9333")
-   - `--mserver` (deprecated compat)
-   - `--preStopSeconds` (default 10)
-   - `--idleTimeout` (default 30)
-   - `--dataCenter`
-   - `--rack`
-   - `--index` [memory|leveldb|leveldbMedium|leveldbLarge]
-   - `--disk` [hdd|ssd|<tag>]
-   - `--tags`
-   - `--dir` (default temp dir)
-   - `--dir.idx`
-   - `--max` (default "8")
-   - `--whiteList`
-   - `--minFreeSpacePercent` (default "1")
-   - `--minFreeSpace`
-   - `--images.fix.orientation` (default false)
-   - `--readMode` [local|proxy|redirect] (default "proxy")
-   - `--cpuprofile`
-   - `--memprofile`
-   - `--compactionMBps` (default 0)
-   - `--maintenanceMBps` (default 0)
-   - `--fileSizeLimitMB` (default 256)
-   - `--concurrentUploadLimitMB` (default 0)
-   - `--concurrentDownloadLimitMB` (default 0)
-   - `--pprof` (default false)
-   - `--metricsPort` (default 0)
-   - `--metricsIp`
-   - `--inflightUploadDataTimeout` (default 60s)
-   - `--inflightDownloadDataTimeout` (default 60s)
-   - `--hasSlowRead` (default true)
-   - `--readBufferSizeMB` (default 4)
-   - `--index.leveldbTimeout` (default 0)
-   - `--debug` (default false)
-   - `--debug.port` (default 6060)
-
-1.5. Implement the same flag validation logic from `startVolumeServer()`:
-   - Parse comma-separated `--dir`, `--max`, `--minFreeSpace`, `--disk`, `--tags`
-   - Replicate single-value-to-all-dirs expansion
-   - Validate count matches between dirs and limits
-   - `--mserver` backward compat
-
-1.6. **Test:** `cargo build` succeeds. `cargo run -- --help` shows all flags. Proto types generated.
-
-**Verification:** Run with `--port 8080 --dir /tmp --master localhost:9333` — should parse without error and print config.
-
----
-
-### Phase 2: Core Storage Types & On-Disk Format
-**Goal:** Read and write the SeaweedFS needle/volume binary format bit-for-bit compatible with Go.
-
-**Source files to port:**
-- `weed/storage/types/needle_types.go` → `src/storage/types.rs`
-- `weed/storage/needle/needle.go` → `src/storage/needle/needle.rs`
-- `weed/storage/needle/needle_read.go` → `src/storage/needle/needle_read.rs`
-- `weed/storage/needle/needle_write.go` (partial) → `src/storage/needle/needle_write.rs`
-- `weed/storage/needle/crc.go` → `src/storage/needle/crc.rs`
-- `weed/storage/needle/needle_value_map.go` → `src/storage/needle/needle_value.rs`
-- `weed/storage/super_block/super_block.go` → `src/storage/super_block.rs`
-- `weed/storage/idx/` → `src/storage/idx/`
-
-**Steps:**
-
-2.1. **Fundamental types** (`types.rs`):
-   - `NeedleId` (u64), `Offset` (u32 or u64 depending on version), `Size` (i32, negative = deleted)
-   - `Cookie` (u32)
-   - `DiskType` enum (HDD, SSD, Custom)
-   - Version constants (Version1=1, Version2=2, Version3=3, CurrentVersion=3)
-   - Byte serialization matching Go's `binary.BigEndian` encoding
-
-2.2. **SuperBlock** (`super_block.rs`):
-   - 8-byte header: Version(1) + ReplicaPlacement(1) + TTL(2) + CompactRevision(2) + Reserved(2)
-   - `ReplicaPlacement` struct with same/diff rack/dc counts
-   - `TTL` struct with count + unit
-   - Read/write from first 8 bytes of `.dat` file
-   - Match exact byte layout from `super_block.go`
-
-2.3. **Needle binary format** (`needle.rs`, `needle_read.rs`):
-   - Version 2/3 header: Cookie(4) + NeedleId(8) + Size(4)
-   - Body: Data, Flags, Name, Mime, PairsSize, Pairs, LastModified, TTL, Checksum, AppendAtNs, Padding
-   - CRC32 checksum (matching Go's `crc32.ChecksumIEEE`)
-   - Padding to 8-byte alignment
-   - Read path: read header → compute body length → read body → verify CRC
-
-2.4. **Idx file format** (`idx/`):
-   - Fixed 16-byte records: NeedleId(8) + Offset(4) + Size(4)
-   - Sequential append-only file
-   - Walk/iterate all entries
-   - Binary search not used (loaded into memory map)
-
-2.5. **NeedleMap (in-memory)** (`needle_map.rs`):
-   - HashMap<NeedleId, NeedleValue> where NeedleValue = {Offset, Size}
-   - Load from `.idx` file on volume mount
-   - Support Get, Set, Delete operations
-   - Track file count, deleted count, deleted byte count
-
-2.6. **Tests:**
-   - Unit test: write a needle to bytes → read it back → verify fields match
-   - Unit test: write/read SuperBlock round-trip
-   - Unit test: write/read idx entries round-trip
-   - **Cross-compat test:** Use Go volume server to create a small volume with known data. Read it from Rust and verify all needles decoded correctly. (Keep test fixture `.dat`/`.idx` files in `tests/fixtures/`)
-
----
-
-### Phase 3: Volume Struct & Lifecycle
-**Goal:** Mount, read from, write to, and unmount a volume.
-
-**Source files to port:**
-- `weed/storage/volume.go` → `src/storage/volume.rs`
-- `weed/storage/volume_read.go` → `src/storage/volume_read.rs`
-- `weed/storage/volume_write.go` → `src/storage/volume_write.rs`
-- `weed/storage/volume_loading.go`
-- `weed/storage/volume_vacuum.go` → `src/storage/volume_compact.rs`
-- `weed/storage/volume_info/volume_info.go` → `src/storage/volume_info.rs`
-- `weed/storage/volume_super_block.go`
-
-**Steps:**
-
-3.1. **Volume struct** (`volume.rs`):
-   - Fields: Id, dir, dataFile, nm (NeedleMap), SuperBlock, readOnly, lastModifiedTs, lastCompactIndexOffset, lastCompactRevision
-   - `noWriteOrDelete` / `noWriteCanDelete` / `readOnly` state flags
-   - File handles for `.dat` file (read + append)
-   - Lock strategy: `RwLock` for concurrent reads, exclusive writes
-
-3.2. **Volume loading** — exact logic from `volume_loading.go`:
-   - Open `.dat` file, read SuperBlock from first 8 bytes
-   - Load `.idx` file into NeedleMap
-   - Handle `.vif` (VolumeInfo) JSON sidecar file
-   - Set volume state based on SuperBlock + VolumeInfo
-
-3.3. **Volume read** (`volume_read.rs`) — from `volume_read.go`:
-   - `ReadNeedle(needleId, cookie)`: lookup in NeedleMap → seek in .dat → read needle bytes → verify cookie + CRC → return data
-   - Handle deleted needles (Size < 0)
-   - `ReadNeedleBlob(offset, size)`: raw blob read
-   - `ReadNeedleMeta(needleId, offset, size)`: read metadata only
-
-3.4. **Volume write** (`volume_write.rs`) — from `volume_write.go`:
-   - `WriteNeedle(needle)`: serialize needle → append to .dat → update .idx → update NeedleMap
-   - `DeleteNeedle(needleId)`: mark as deleted in NeedleMap + append tombstone to .idx
-   - File size limit check
-   - Concurrent write serialization (mutex on write path)
-
-3.5. **Volume compaction** (`volume_compact.rs`) — from `volume_vacuum.go`:
-   - `CheckCompact()`: compute garbage ratio
-   - `Compact()`: create new .dat/.idx, copy only live needles, update compact revision
-   - `CommitCompact()`: rename compacted files over originals
-   - `CleanupCompact()`: remove temp files
-   - Throttle by `compactionBytePerSecond`
-
-3.6. **Volume info** (`volume_info.rs`):
-   - Read/write `.vif` JSON sidecar
-   - VolumeInfo protobuf struct mapping
-   - Remote file references for tiered storage
-
-3.7. **Tests:**
-   - Mount a volume, write 100 needles, read them all back, verify content
-   - Delete 50 needles, verify they return "deleted"
-   - Compact, verify only 50 remain, verify content
-   - Read Go-created volume fixtures
-
----
-
-### Phase 4: Store (Multi-Volume, Multi-Disk Manager)
-**Goal:** Manage multiple volumes across multiple disk directories.
-
-**Source files to port:**
-- `weed/storage/store.go` → `src/storage/store.rs`
-- `weed/storage/disk_location.go` → `src/storage/disk_location.rs`
-- `weed/storage/store_ec.go`
-- `weed/storage/store_state.go`
-
-**Steps:**
-
-4.1. **DiskLocation** (`disk_location.rs`):
-   - Directory path, max volume count, min free space, disk type, tags
-   - Load all volumes from directory on startup
-   - Track free space, check writable
-
-4.2. **Store** (`store.rs`):
-   - Vector of `DiskLocation`s
-   - `GetVolume(volumeId)` → lookup across all locations
-   - `HasVolume(volumeId)` check
-   - `AllocateVolume(...)` — create new volume in appropriate location
-   - `DeleteVolume(...)`, `MountVolume(...)`, `UnmountVolume(...)`
-   - `DeleteCollection(collection)` — delete all volumes of a collection
-   - Collect volume status for heartbeat
-   - `SetStopping()`, `Close()`
-   - Persistent state (maintenance mode) via `store_state.go`
-
-4.3. **Store state** — `VolumeServerState` protobuf with maintenance flag, persisted to disk.
-
-4.4. **Tests:**
-   - Create store with 2 dirs, allocate volumes in each, verify load balancing
-   - Mount/unmount/delete lifecycle
-   - State persistence across restart
-
----
-
-### Phase 5: Erasure Coding
-**Goal:** Full EC shard encode/decode/read/write/rebuild.
-
-**Source files to port:**
-- `weed/storage/erasure_coding/` (3,599 lines)
-
-**Steps:**
-
-5.1. **EC volume + shard structs** — `EcVolume`, `EcShard` with file handles for `.ec00`–`.ec13` shard files + `.ecx` index + `.ecj` journal.
-
-5.2. **EC encoder** — Reed-Solomon 10+4 (configurable) encoding using `reed-solomon-erasure` crate:
-   - `VolumeEcShardsGenerate`: read .dat → split into data shards → compute parity → write .ec00-.ec13 + .ecx
-
-5.3. **EC decoder/reader** — reconstruct data from any 10 of 14 shards:
-   - `EcShardRead`: read range from a specific shard
-   - Locate needle in EC volume via .ecx index
-   - Handle cross-shard needle reads
-
-5.4. **EC shard operations:**
-   - Copy, delete, mount, unmount shards
-   - `VolumeEcShardsRebuild`: rebuild missing shards from remaining
-   - `VolumeEcShardsToVolume`: reconstruct .dat from EC shards
-   - `VolumeEcBlobDelete`: mark deleted in EC journal
-   - `VolumeEcShardsInfo`: report shard metadata
-
-5.5. **Tests:**
-   - Encode a volume → verify 14 shards created
-   - Delete 4 shards → rebuild → verify data intact
-   - Read individual needles from EC volume
-   - Cross-compat with Go-generated EC shards
-
----
-
-### Phase 6: Backend / Tiered Storage
-**Goal:** Support tiered storage to remote backends (S3, etc).
-
-**Source files to port:**
-- `weed/storage/backend/` (1,850 lines)
-
-**Steps:**
-
-6.1. **Backend trait** — abstract `BackendStorage` trait with `ReadAt`, `WriteAt`, `Truncate`, `Close`, `Name`.
-
-6.2. **Disk backend** — default local disk implementation.
-
-6.3. **S3 backend** — upload .dat to S3, read ranges via S3 range requests.
-
-6.4. **Tier move operations:**
-   - `VolumeTierMoveDatToRemote`: upload .dat to remote, optionally delete local
-   - `VolumeTierMoveDatFromRemote`: download .dat from remote
-
-6.5. **Tests:**
-   - Disk backend read/write round-trip
-   - S3 backend with mock/localstack
-
----
-
-### Phase 7: Security Layer
-**Goal:** JWT authentication, whitelist guard, TLS configuration.
-
-**Source files to port:**
-- `weed/security/guard.go` → `src/security/guard.rs`
-- `weed/security/jwt.go` → `src/security/jwt.rs`
-- `weed/security/tls.go` → `src/security/tls.rs`
-
-**Steps:**
-
-7.1. **Guard** (`guard.rs`):
-   - Whitelist IP check (exact match on `r.RemoteAddr`)
-   - Wrap handlers with whitelist enforcement
-   - `UpdateWhiteList()` for live reload
-
-7.2. **JWT** (`jwt.rs`):
-   - `SeaweedFileIdClaims` with `fid` field
-   - Sign with HMAC-SHA256
-   - Verify + decode with expiry check
-   - Separate signing keys for read vs write
-   - `GetJwt(request)` — extract from `Authorization: Bearer` header or `jwt` query param
-
-7.3. **TLS** (`tls.rs`):
-   - Load server TLS cert/key for gRPC and HTTPS
-   - Load client TLS for mutual TLS
-   - Read from `security.toml` config (same format as Go's viper config)
-
-7.4. **Tests:**
-   - JWT sign → verify round-trip
-   - JWT with wrong key → reject
-   - JWT with expired token → reject
-   - JWT fid mismatch → reject
-   - Whitelist allow/deny
-
----
-
-### Phase 8: Prometheus Metrics
-**Goal:** Export same metric names as Go for dashboard compatibility.
-
-**Source files to port:**
-- `weed/stats/metrics.go` (volume server counters/gauges/histograms)
-
-**Steps:**
-
-8.1. Define all Prometheus metrics matching Go names:
-   - `VolumeServerRequestCounter` (labels: method, status)
-   - `VolumeServerRequestHistogram` (labels: method)
-   - `VolumeServerInFlightRequestsGauge` (labels: method)
-   - `VolumeServerInFlightUploadSize`
-   - `VolumeServerInFlightDownloadSize`
-   - `VolumeServerConcurrentUploadLimit`
-   - `VolumeServerConcurrentDownloadLimit`
-   - `VolumeServerHandlerCounter` (labels: type — UploadLimitCond, DownloadLimitCond)
-   - Read/Write/Delete request counters
-
-8.2. Metrics HTTP endpoint on `--metricsPort`.
-
-8.3. Optional push-based metrics loop (`LoopPushingMetric`).
-
-8.4. **Test:** Verify metric names and labels match Go output.
-
----
-
-### Phase 9: HTTP Server & Handlers
-**Goal:** All HTTP endpoints with exact same behavior as Go.
-
-**Source files to port:**
-- `weed/server/volume_server.go` → `src/server/volume_server.rs`
-- `weed/server/volume_server_handlers.go` → `src/server/http_handlers.rs`
-- `weed/server/volume_server_handlers_read.go` → `src/server/http_read.rs`
-- `weed/server/volume_server_handlers_write.go` → `src/server/http_write.rs`
-- `weed/server/volume_server_handlers_admin.go` → `src/server/http_admin.rs`
-- `weed/server/volume_server_handlers_helper.go` (URL parsing, proxy, JSON responses)
-- `weed/server/volume_server_handlers_ui.go` → `src/server/http_admin.rs`
-
-**Steps:**
-
-9.1. **URL path parsing** — from `handlers_helper.go`:
-   - Parse `/<vid>,<fid>` and `/<vid>/<fid>` patterns
-   - Extract volume ID, file ID, filename, ext
-
-9.2. **Route dispatch** — from `privateStoreHandler` and `publicReadOnlyHandler`:
-   - `GET /` → `GetOrHeadHandler`
-   - `HEAD /` → `GetOrHeadHandler`
-   - `POST /` → `PostHandler` (whitelist gated)
-   - `PUT /` → `PostHandler` (whitelist gated)
-   - `DELETE /` → `DeleteHandler` (whitelist gated)
-   - `OPTIONS /` → CORS preflight
-   - `GET /status` → JSON status
-   - `GET /healthz` → health check
-   - `GET /ui/index.html` → HTML UI page
-   - Static resources (CSS/JS for UI)
-
-9.3. **GET/HEAD handler** (`http_read.rs`) — from `handlers_read.go` (468 lines):
-   - JWT read authorization check
-   - Lookup needle by volume ID + needle ID + cookie
-   - ETag / If-None-Match / If-Modified-Since conditional responses
-   - Content-Type from stored MIME or filename extension
-   - Content-Disposition header
-   - Content-Encoding (gzip/zstd stored data)
-   - Range request support (HTTP 206 Partial Content)
-   - JPEG orientation fix (if configured)
-   - Proxy to replica on local miss (readMode=proxy)
-   - Redirect to replica (readMode=redirect)
-   - Download tracking (in-flight size accounting)
-
-9.4. **POST/PUT handler** (`http_write.rs`) — from `handlers_write.go` (170 lines):
-   - JWT write authorization check
-   - Multipart form parsing
-   - Extract file data, filename, content type, TTL, last-modified
-   - Optional gzip/zstd compression
-   - Write needle to volume
-   - Replicate to peers (same logic as Go's `DistributedOperation`)
-   - Return JSON: {name, size, eTag, error}
-
-9.5. **DELETE handler** — already in handlers.go:
-   - JWT authorization
-   - Delete from local volume
-   - Replicate delete to peers
-   - Return JSON result
-
-9.6. **Admin handlers** (`http_admin.rs`):
-   - `/status` → JSON with volumes, version, disk status
-   - `/healthz` → 200 OK if serving
-   - `/ui/index.html` → HTML dashboard
-
-9.7. **Concurrency limiting** — from `handlers.go`:
-   - Upload concurrency limit with `sync::Condvar` + timeout
-   - Download concurrency limit with proxy fallback to replicas
-   - HTTP 429 on timeout, 499 on client cancel
-   - Replication traffic bypasses upload limits
-
-9.8. **Public port** — if configured, separate listener with read-only routes (GET/HEAD/OPTIONS only).
-
-9.9. **Request ID middleware** — generate unique request ID per request.
-
-9.10. **Tests:**
-   - Integration: start server → upload file via POST → GET it back → verify content
-   - Integration: upload → DELETE → GET returns 404
-   - Integration: conditional GET with ETag → 304
-   - Integration: range request → 206 with correct bytes
-   - Integration: exceed upload limit → 429
-   - Integration: whitelist enforcement
-   - Integration: JWT enforcement
-
----
-
-### Phase 10: gRPC Service Implementation
-**Goal:** All 40 gRPC methods with exact logic.
-
-**Source files to port:**
-- `weed/server/volume_grpc_admin.go` (380 lines)
-- `weed/server/volume_grpc_vacuum.go` (124 lines)
-- `weed/server/volume_grpc_copy.go` (636 lines)
-- `weed/server/volume_grpc_copy_incremental.go` (66 lines)
-- `weed/server/volume_grpc_read_write.go` (74 lines)
-- `weed/server/volume_grpc_batch_delete.go` (124 lines)
-- `weed/server/volume_grpc_tail.go` (140 lines)
-- `weed/server/volume_grpc_erasure_coding.go` (619 lines)
-- `weed/server/volume_grpc_scrub.go` (121 lines)
-- `weed/server/volume_grpc_tier_upload.go` (98 lines)
-- `weed/server/volume_grpc_tier_download.go` (85 lines)
-- `weed/server/volume_grpc_remote.go` (95 lines)
-- `weed/server/volume_grpc_query.go` (69 lines)
-- `weed/server/volume_grpc_state.go` (26 lines)
-- `weed/server/volume_grpc_read_all.go` (35 lines)
-- `weed/server/volume_grpc_client_to_master.go` (325 lines)
-
-**Steps (grouped by functional area):**
-
-10.1. **Implement `tonic::Service` for `VolumeServer`** — the generated trait from proto.
-
-10.2. **Admin RPCs** (`grpc_admin.rs`):
-   - `AllocateVolume` — create volume on appropriate disk location
-   - `VolumeMount` / `VolumeUnmount` / `VolumeDelete`
-   - `VolumeMarkReadonly` / `VolumeMarkWritable`
-   - `VolumeConfigure` — change replication
-   - `VolumeStatus` — return read-only, size, file counts
-   - `VolumeServerStatus` — disk statuses, memory, version, DC, rack
-   - `VolumeServerLeave` — deregister from master
-   - `DeleteCollection`
-   - `VolumeNeedleStatus` — get needle metadata by ID
-   - `Ping` — latency measurement
-   - `GetState` / `SetState` — maintenance mode
-
-10.3. **Vacuum RPCs** (`grpc_vacuum.rs`):
-   - `VacuumVolumeCheck` — return garbage ratio
-   - `VacuumVolumeCompact` — stream progress (streaming response)
-   - `VacuumVolumeCommit` — finalize compaction
-   - `VacuumVolumeCleanup` — remove temp files
-
-10.4. **Copy RPCs** (`grpc_copy.rs`):
-   - `VolumeCopy` — stream .dat/.idx from source to create local copy
-   - `VolumeSyncStatus` — return sync metadata
-   - `VolumeIncrementalCopy` — stream .dat delta since timestamp (streaming)
-   - `CopyFile` — generic file copy by extension (streaming)
-   - `ReceiveFile` — receive streamed file (client streaming)
-   - `ReadVolumeFileStatus` — return file timestamps and sizes
-
-10.5. **Read/Write RPCs** (`grpc_read_write.rs`):
-   - `ReadNeedleBlob` — raw needle blob read
-   - `ReadNeedleMeta` — needle metadata
-   - `WriteNeedleBlob` — raw needle blob write
-   - `ReadAllNeedles` — stream all needles from volume(s) (streaming)
-
-10.6. **Batch delete** (`grpc_batch_delete.rs`):
-   - `BatchDelete` — delete multiple file IDs, return per-ID results
-
-10.7. **Tail RPCs** (`grpc_tail.rs`):
-   - `VolumeTailSender` — stream new needles since timestamp (streaming)
-   - `VolumeTailReceiver` — connect to another volume server and tail its changes
-
-10.8. **Erasure coding RPCs** (`grpc_erasure_coding.rs`):
-   - `VolumeEcShardsGenerate` — generate EC shards from volume
-   - `VolumeEcShardsRebuild` — rebuild missing shards
-   - `VolumeEcShardsCopy` — copy shards from another server
-   - `VolumeEcShardsDelete` — delete EC shards
-   - `VolumeEcShardsMount` / `VolumeEcShardsUnmount`
-   - `VolumeEcShardRead` — read from EC shard (streaming)
-   - `VolumeEcBlobDelete` — mark blob deleted in EC volume
-   - `VolumeEcShardsToVolume` — reconstruct volume from EC shards
-   - `VolumeEcShardsInfo` — return shard metadata
-
-10.9. **Scrub RPCs** (`grpc_scrub.rs`):
-   - `ScrubVolume` — integrity check volumes (INDEX / FULL / LOCAL modes)
-   - `ScrubEcVolume` — integrity check EC volumes
-
-10.10. **Tier RPCs** (`grpc_tier.rs`):
-   - `VolumeTierMoveDatToRemote` — upload to remote backend (streaming progress)
-   - `VolumeTierMoveDatFromRemote` — download from remote (streaming progress)
-
-10.11. **Remote storage** (`grpc_remote.rs`):
-   - `FetchAndWriteNeedle` — fetch from remote storage, write locally, replicate
-
-10.12. **Query** (`grpc_query.rs`):
-   - `Query` — experimental CSV/JSON/Parquet select on stored data (streaming)
-
-10.13. **Master heartbeat** (`grpc_client_to_master.rs`):
-   - `heartbeat()` background task — periodic gRPC stream to master
-   - Send: volume info, EC shard info, disk stats, has-no-space flags, deleted volumes
-   - Receive: volume size limit, leader address, metrics config
-   - Reconnect on failure with backoff
-   - `StopHeartbeat()` for graceful shutdown
-
-10.14. **Tests:**
-   - Integration test per RPC: call via tonic client → verify response
-   - Streaming RPCs: verify all chunks received
-   - Error cases: invalid volume ID, non-existent volume, etc.
-   - Heartbeat: mock master gRPC server, verify registration
-
----
-
-### Phase 11: Startup, Lifecycle & Graceful Shutdown
-**Goal:** Full server startup matching Go's `runVolume()` and `startVolumeServer()`.
-
-**Steps:**
-
-11.1. **Startup sequence** (match `volume.go` exactly):
-   1. Load security configuration from `security.toml`
-   2. Start metrics server on metrics port
-   3. Parse folder/max/minFreeSpace/diskType/tags
-   4. Validate all directory writable
-   5. Resolve IP, bind IP, public URL, gRPC port
-   6. Create `VolumeServer` struct
-   7. Check with master (initial handshake)
-   8. Create `Store` (loads all existing volumes from disk)
-   9. Create security `Guard`
-   10. Register HTTP routes on admin mux
-   11. Optionally register public mux
-   12. Start gRPC server on gRPC port
-   13. Start public HTTP server (if separated)
-   14. Start cluster HTTP server (with optional TLS)
-   15. Start heartbeat background task
-   16. Start metrics push loop
-   17. Register SIGHUP handler for config reload + new volume loading
-
-11.2. **Graceful shutdown** (match Go exactly):
-   1. On SIGINT/SIGTERM:
-   2. Stop heartbeat (notify master we're leaving)
-   3. Wait `preStopSeconds`
-   4. Stop public HTTP server
-   5. Stop cluster HTTP server
-   6. Graceful stop gRPC server
-   7. `volumeServer.Shutdown()` → `store.Close()` (flush all volumes)
-
-11.3. **Reload** (SIGHUP):
-   - Reload security config
-   - Update whitelist
-   - Load newly appeared volumes from disk
-
-11.4. **Tests:**
-   - Start server → send SIGTERM → verify clean shutdown
-   - Start server → SIGHUP → verify config reloaded
-
----
-
-### Phase 12: Integration & Cross-Compatibility Testing
-**Goal:** Rust volume server is a drop-in replacement for Go volume server.
-
-**Steps:**
-
-12.1. **Binary compatibility tests:**
-   - Create volumes with Go volume server
-   - Start Rust volume server on same data directory
-   - Read all data → verify identical
-   - Write new data with Rust → read with Go → verify
-
-12.2. **API compatibility tests:**
-   - Run same HTTP requests against both Go and Rust servers
-   - Compare response bodies, headers, status codes
-   - Test all gRPC RPCs against both
-
-12.3. **Master interop test:**
-   - Start Go master server
-   - Register Rust volume server
-   - Verify heartbeat works
-   - Verify volume assignment works
-   - Upload via filer → stored on Rust volume server → read back
-
-12.4. **Performance benchmarks:**
-   - Throughput: sequential writes, sequential reads
-   - Latency: p50/p99 for read/write
-   - Concurrency: parallel reads/writes
-   - Compare Rust vs Go numbers
-
-12.5. **Edge cases:**
-   - Volume at max size
-   - Disk full handling
-   - Corrupt .dat file recovery
-   - Network partition during replication
-   - EC shard loss + rebuild
-
----
-
-## Execution Order & Dependencies
-
-```
-Phase 1  (Skeleton + CLI)        ← no deps, start here
-   ↓
-Phase 2  (Storage types)         ← needs Phase 1 (types used everywhere)
-   ↓
-Phase 3  (Volume struct)         ← needs Phase 2
-   ↓
-Phase 4  (Store manager)         ← needs Phase 3
-   ↓
-Phase 7  (Security)              ← independent, can parallel with 3-4
-Phase 8  (Metrics)               ← independent, can parallel with 3-4
-   ↓
-Phase 9  (HTTP server)           ← needs Phase 4 + 7 + 8
-Phase 10 (gRPC server)           ← needs Phase 4 + 7 + 8
-   ↓
-Phase 5  (Erasure coding)        ← needs Phase 4, wire into Phase 10
-Phase 6  (Tiered storage)        ← needs Phase 4, wire into Phase 10
-   ↓
-Phase 11 (Startup + shutdown)    ← needs Phase 9 + 10
-   ↓
-Phase 12 (Integration tests)     ← needs all above
-```
-
-## Estimated Scope
-
-| Phase | Estimated Rust Lines | Complexity |
-|---|---|---|
-| 1. Skeleton + CLI | ~400 | Low |
-| 2. Storage types | ~2,000 | High (binary compat critical) |
-| 3. Volume struct | ~2,500 | High |
-| 4. Store manager | ~1,000 | Medium |
-| 5. Erasure coding | ~3,000 | High |
-| 6. Tiered storage | ~1,500 | Medium |
-| 7. Security | ~500 | Medium |
-| 8. Metrics | ~300 | Low |
-| 9. HTTP server | ~2,000 | High |
-| 10. gRPC server | ~3,500 | High |
-| 11. Startup/shutdown | ~500 | Medium |
-| 12. Integration tests | ~2,000 | Medium |
-| **Total** | **~19,000** | |
-
-## Critical Invariants to Preserve
-
-1. **Binary format compatibility** — Rust must read/write `.dat`, `.idx`, `.vif`, `.ecX` files identically to Go. A single byte off = data loss.
-2. **gRPC wire compatibility** — Same proto, same field semantics. Go master must talk to Rust volume server seamlessly.
-3. **HTTP API compatibility** — Same URL patterns, same JSON response shapes, same headers, same status codes.
-4. **Replication protocol** — Write replication between Go and Rust volume servers must work bidirectionally.
-5. **Heartbeat protocol** — Rust volume server must register with Go master and maintain heartbeat.
-6. **CRC32 algorithm** — Must use IEEE polynomial (same as Go's `crc32.ChecksumIEEE`).
-7. **JWT compatibility** — Tokens signed by Go filer/master must be verifiable by Rust volume server and vice versa.

docker/Dockerfile.e2e

@@ -7,8 +7,8 @@ LABEL author="Chris Lu"
 # Production images (Dockerfile.go_build) use proper user isolation with su-exec.
 # For testing purposes, running as root avoids permission complexities and dependency
 # on Alpine-specific tools like su-exec (not available in Ubuntu repos).
-RUN apt-get -o Acquire::Retries=5 -o Acquire::http::Timeout=30 update && \
-    DEBIAN_FRONTEND=noninteractive apt-get -o Acquire::Retries=5 -o Acquire::http::Timeout=30 install -y \
+RUN apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y \
     --no-install-recommends \
     --no-install-suggests \
     curl \

docker/Dockerfile.go_build

@@ -16,38 +16,9 @@ RUN cd /go/src/github.com/seaweedfs/seaweedfs/weed \
   && export LDFLAGS="-X github.com/seaweedfs/seaweedfs/weed/util/version.COMMIT=$(git rev-parse --short HEAD)" \
   && CGO_ENABLED=0 go install -tags "$TAGS" -ldflags "-extldflags -static ${LDFLAGS}"
 
-# Rust volume server: use pre-built binary from CI when available (placed in
-# weed-volume-prebuilt/ by the build-rust-binaries job), otherwise compile
-# from source.  Pre-building avoids a multi-hour QEMU-emulated cargo build
-# for non-native architectures.
-FROM alpine:3.23 as rust_builder
-ARG TARGETARCH
-ARG TAGS
-COPY weed-volume-prebuilt/ /prebuilt/
-COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/seaweed-volume /build/seaweed-volume
-COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/weed /build/weed
-WORKDIR /build/seaweed-volume
-RUN if [ -f "/prebuilt/weed-volume-${TARGETARCH}" ]; then \
-      echo "Using pre-built Rust binary for ${TARGETARCH}" && \
-      cp "/prebuilt/weed-volume-${TARGETARCH}" /weed-volume; \
-    elif [ "$TARGETARCH" = "amd64" ] || [ "$TARGETARCH" = "arm64" ]; then \
-      apk add --no-cache musl-dev openssl-dev protobuf-dev git rust cargo; \
-      if [ "$TAGS" = "5BytesOffset" ]; then \
-        cargo build --release; \
-      else \
-        cargo build --release --no-default-features; \
-      fi && \
-      cp target/release/weed-volume /weed-volume; \
-    else \
-      echo "Skipping Rust build for $TARGETARCH (unsupported)" && \
-      touch /weed-volume; \
-    fi
-
 FROM alpine AS final
 LABEL author="Chris Lu"
 COPY --from=builder /go/bin/weed /usr/bin/
-# Copy Rust volume server binary (real binary on amd64/arm64, empty placeholder on other platforms)
-COPY --from=rust_builder /weed-volume /usr/bin/weed-volume
 RUN mkdir -p /etc/seaweedfs
 COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/filer.toml /etc/seaweedfs/filer.toml
 COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/entrypoint.sh /entrypoint.sh
@@ -56,8 +27,7 @@ COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/entrypoint.sh
 # To disable: docker run -e GODEBUG=fips140=off ...
 
 # Install dependencies and create non-root user
-RUN apk upgrade --no-cache && \
-    apk add --no-cache fuse curl su-exec libgcc libcrypto3 libssl3 && \
+RUN apk add --no-cache fuse curl su-exec && \
     addgroup -g 1000 seaweed && \
     adduser -D -u 1000 -G seaweed seaweed
 

docker/Dockerfile.local

@@ -7,8 +7,7 @@ COPY ./filer.toml /etc/seaweedfs/filer.toml
 COPY ./entrypoint.sh /entrypoint.sh
 
 # Install dependencies and create non-root user
-RUN apk upgrade --no-cache && \
-    apk add --no-cache fuse curl su-exec && \
+RUN apk add --no-cache fuse curl su-exec && \
     addgroup -g 1000 seaweed && \
     adduser -D -u 1000 -G seaweed seaweed
 

docker/Dockerfile.rocksdb_large

@@ -34,8 +34,7 @@ COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/filer_rocksdb.
 COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/entrypoint.sh /entrypoint.sh
 
 # Install dependencies and create non-root user
-RUN apk upgrade --no-cache && \
-    apk add --no-cache fuse snappy gflags curl su-exec && \
+RUN apk add --no-cache fuse snappy gflags curl su-exec && \
     addgroup -g 1000 seaweed && \
     adduser -D -u 1000 -G seaweed seaweed
 

docker/Dockerfile.rocksdb_large_local

@@ -17,8 +17,7 @@ COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/filer_rocksdb.
 COPY --from=builder /go/src/github.com/seaweedfs/seaweedfs/docker/entrypoint.sh /entrypoint.sh
 
 # Install dependencies and create non-root user
-RUN apk upgrade --no-cache && \
-    apk add --no-cache fuse snappy gflags curl tmux su-exec && \
+RUN apk add --no-cache fuse snappy gflags curl tmux su-exec && \
     addgroup -g 1000 seaweed && \
     adduser -D -u 1000 -G seaweed seaweed
 

docker/compose/s3_static_users_example.json

@@ -1,53 +0,0 @@
-{
-  "identities": [
-    {
-      "name": "admin",
-      "credentials": [
-        {
-          "accessKey": "AKIAIOSFODNN7EXAMPLE",
-          "secretKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
-        }
-      ],
-      "actions": [
-        "Admin",
-        "Read",
-        "List",
-        "Tagging",
-        "Write"
-      ]
-    },
-    {
-      "name": "steward",
-      "credentials": [
-        {
-          "accessKey": "steward-key",
-          "secretKey": "steward-secret"
-        }
-      ],
-      "actions": [
-        "Read",
-        "List",
-        "Write"
-      ]
-    },
-    {
-      "name": "le001",
-      "credentials": [
-        {
-          "accessKey": "le001-key",
-          "secretKey": "le001-secret"
-        }
-      ],
-      "actions": [
-        "Read",
-        "List"
-      ]
-    },
-    {
-      "name": "anonymous",
-      "actions": [
-        "Read"
-      ]
-    }
-  ]
-}

docker/compose/test-git-on-mount.sh

@@ -1,260 +0,0 @@
-#!/usr/bin/env bash
-#
-# Integration test: git clone & pull on a SeaweedFS FUSE mount.
-#
-# Verifies that the mount correctly supports git's file operations by:
-#   1. Creating a bare repo on the mount (acts as a remote)
-#   2. Cloning it, making commits, and pushing back to the mount
-#   3. Cloning from the mount into a working directory also on the mount
-#   4. Pushing additional commits to the bare repo
-#   5. Checking out an older revision in the on-mount clone
-#   6. Running git pull to fast-forward with real changes
-#   7. Verifying file content integrity at each step
-#
-# Usage:
-#   bash test-git-on-mount.sh /path/to/mount/point
-#
-# The mount must already be running. All test artifacts are created under
-# <mount>/git-test-<pid> and cleaned up on exit (unless TEST_KEEP=1).
-#
-set -euo pipefail
-
-MOUNT_DIR="${1:?Usage: $0 <mount-dir>}"
-TEST_DIR="$MOUNT_DIR/git-test-$$"
-LOCAL_DIR=$(mktemp -d)
-PASS=0
-FAIL=0
-
-cleanup() {
-    if [[ "${TEST_KEEP:-}" == "1" ]]; then
-        echo "TEST_KEEP=1 — leaving artifacts:"
-        echo "  mount: $TEST_DIR"
-        echo "  local: $LOCAL_DIR"
-    else
-        rm -rf "$TEST_DIR" 2>/dev/null || true
-        rm -rf "$LOCAL_DIR" 2>/dev/null || true
-    fi
-}
-trap cleanup EXIT
-
-# --- helpers ---------------------------------------------------------------
-
-pass() { PASS=$((PASS + 1)); echo "  PASS: $1"; }
-fail() { FAIL=$((FAIL + 1)); echo "  FAIL: $1"; }
-
-assert_file_contains() {
-    local file=$1 expected=$2 label=$3
-    if [[ -f "$file" ]] && grep -qF "$expected" "$file" 2>/dev/null; then
-        pass "$label"
-    else
-        fail "$label (expected '$expected' in $file)"
-    fi
-}
-
-assert_file_exists() {
-    local file=$1 label=$2
-    if [[ -f "$file" ]]; then
-        pass "$label"
-    else
-        fail "$label ($file not found)"
-    fi
-}
-
-assert_file_not_exists() {
-    local file=$1 label=$2
-    if [[ ! -f "$file" ]]; then
-        pass "$label"
-    else
-        fail "$label ($file should not exist)"
-    fi
-}
-
-assert_eq() {
-    local actual=$1 expected=$2 label=$3
-    if [[ "$actual" == "$expected" ]]; then
-        pass "$label"
-    else
-        fail "$label (expected '$expected', got '$actual')"
-    fi
-}
-
-# --- setup -----------------------------------------------------------------
-
-echo "========================================"
-echo "  Git-on-mount integration test"
-echo "========================================"
-echo "Mount:  $MOUNT_DIR"
-echo "Test:   $TEST_DIR"
-echo "Local:  $LOCAL_DIR"
-echo ""
-
-if ! mountpoint -q "$MOUNT_DIR" 2>/dev/null && [[ ! -d "$MOUNT_DIR" ]]; then
-    echo "ERROR: $MOUNT_DIR is not a valid directory"
-    exit 1
-fi
-
-mkdir -p "$TEST_DIR"
-
-# --- Phase 1: Create bare repo on mount -----------------------------------
-
-echo "--- Phase 1: Create bare repo on mount ---"
-
-BARE_REPO="$TEST_DIR/repo.git"
-git init --bare "$BARE_REPO" >/dev/null 2>&1
-pass "bare repo created on mount"
-
-# --- Phase 2: Clone locally, make initial commits, push -------------------
-
-echo "--- Phase 2: Clone locally, make initial commits, push ---"
-
-LOCAL_CLONE="$LOCAL_DIR/clone1"
-git clone "$BARE_REPO" "$LOCAL_CLONE" >/dev/null 2>&1
-cd "$LOCAL_CLONE"
-git config user.email "test@seaweedfs.test"
-git config user.name "SeaweedFS Test"
-
-# Commit 1: initial files
-echo "hello world" > README.md
-mkdir -p src
-echo 'package main; import "fmt"; func main() { fmt.Println("v1") }' > src/main.go
-git add -A && git commit -m "initial commit" >/dev/null 2>&1
-COMMIT1=$(git rev-parse HEAD)
-
-# Commit 2: add more files
-mkdir -p data
-for i in $(seq 1 20); do
-    printf "file-%03d: %s\n" "$i" "$(head -c 64 /dev/urandom | base64)" > "data/file-$(printf '%03d' $i).txt"
-done
-git add -A && git commit -m "add data files" >/dev/null 2>&1
-COMMIT2=$(git rev-parse HEAD)
-
-# Commit 3: modify and add
-echo 'package main; import "fmt"; func main() { fmt.Println("v2") }' > src/main.go
-echo "# Updated readme" >> README.md
-mkdir -p docs
-echo "documentation content" > docs/guide.md
-git add -A && git commit -m "update src and add docs" >/dev/null 2>&1
-COMMIT3=$(git rev-parse HEAD)
-
-git push origin master >/dev/null 2>&1 || git push origin main >/dev/null 2>&1
-BRANCH=$(git rev-parse --abbrev-ref HEAD)
-pass "3 commits pushed to mount bare repo (branch=$BRANCH)"
-
-# --- Phase 3: Clone from mount bare repo to mount working dir -------------
-
-echo "--- Phase 3: Clone from mount bare repo to on-mount working dir ---"
-
-MOUNT_CLONE="$TEST_DIR/working"
-git clone "$BARE_REPO" "$MOUNT_CLONE" >/dev/null 2>&1
-
-# Verify clone integrity
-assert_file_exists "$MOUNT_CLONE/README.md" "README.md exists after clone"
-assert_file_contains "$MOUNT_CLONE/README.md" "# Updated readme" "README.md has latest content"
-assert_file_contains "$MOUNT_CLONE/src/main.go" 'v2' "src/main.go has v2"
-assert_file_exists "$MOUNT_CLONE/docs/guide.md" "docs/guide.md exists"
-assert_file_exists "$MOUNT_CLONE/data/file-001.txt" "data files exist"
-assert_file_exists "$MOUNT_CLONE/data/file-020.txt" "data/file-020.txt exists"
-
-CLONE_HEAD=$(cd "$MOUNT_CLONE" && git rev-parse HEAD)
-assert_eq "$CLONE_HEAD" "$COMMIT3" "on-mount clone HEAD matches commit 3"
-
-# Count files
-FILE_COUNT=$(find "$MOUNT_CLONE/data" -name '*.txt' | wc -l | tr -d ' ')
-assert_eq "$FILE_COUNT" "20" "data/ has 20 files"
-
-# --- Phase 4: Push more commits from local clone --------------------------
-
-echo "--- Phase 4: Push more commits from local clone ---"
-
-cd "$LOCAL_CLONE"
-
-# Commit 4: larger changes
-for i in $(seq 21 50); do
-    printf "file-%03d: %s\n" "$i" "$(head -c 128 /dev/urandom | base64)" > "data/file-$(printf '%03d' $i).txt"
-done
-echo 'package main; import "fmt"; func main() { fmt.Println("v3") }' > src/main.go
-git add -A && git commit -m "expand data and update to v3" >/dev/null 2>&1
-COMMIT4=$(git rev-parse HEAD)
-
-# Commit 5: rename and delete
-git mv docs/guide.md docs/manual.md
-git rm data/file-001.txt >/dev/null 2>&1
-git commit -m "rename guide, remove file-001" >/dev/null 2>&1
-COMMIT5=$(git rev-parse HEAD)
-
-git push origin "$BRANCH" >/dev/null 2>&1
-pass "2 more commits pushed (5 total)"
-
-# --- Phase 5: Checkout older revision in on-mount clone -------------------
-
-echo "--- Phase 5: Checkout older revision in on-mount clone ---"
-
-cd "$MOUNT_CLONE"
-git checkout "$COMMIT2" >/dev/null 2>&1
-
-# Verify we're at commit 2 state
-DETACHED_HEAD=$(git rev-parse HEAD)
-assert_eq "$DETACHED_HEAD" "$COMMIT2" "on-mount clone at commit 2 (detached)"
-assert_file_not_exists "$MOUNT_CLONE/docs/guide.md" "docs/guide.md not in commit 2"
-assert_file_contains "$MOUNT_CLONE/src/main.go" 'v1' "src/main.go has v1 at commit 2"
-
-# --- Phase 6: Return to branch and pull -----------------------------------
-
-echo "--- Phase 6: Return to branch and pull with real changes ---"
-
-cd "$MOUNT_CLONE"
-git checkout "$BRANCH" >/dev/null 2>&1
-# At this point the on-mount clone is at commit 3, remote is at commit 5
-OLD_HEAD=$(git rev-parse HEAD)
-assert_eq "$OLD_HEAD" "$COMMIT3" "on-mount clone at commit 3 before pull"
-
-git pull >/dev/null 2>&1
-NEW_HEAD=$(git rev-parse HEAD)
-assert_eq "$NEW_HEAD" "$COMMIT5" "HEAD matches commit 5 after pull"
-
-# Verify commit 5 state
-assert_file_contains "$MOUNT_CLONE/src/main.go" 'v3' "src/main.go has v3 after pull"
-assert_file_exists "$MOUNT_CLONE/docs/manual.md" "docs/manual.md exists (renamed)"
-assert_file_not_exists "$MOUNT_CLONE/docs/guide.md" "docs/guide.md gone (renamed)"
-assert_file_not_exists "$MOUNT_CLONE/data/file-001.txt" "data/file-001.txt removed"
-assert_file_exists "$MOUNT_CLONE/data/file-050.txt" "data/file-050.txt exists"
-
-FINAL_COUNT=$(find "$MOUNT_CLONE/data" -name '*.txt' | wc -l | tr -d ' ')
-assert_eq "$FINAL_COUNT" "49" "data/ has 49 files (50 added, 1 removed)"
-
-# --- Phase 7: Verify git log integrity -----------------------------------
-
-echo "--- Phase 7: Verify git log integrity ---"
-
-cd "$MOUNT_CLONE"
-GIT_LOG=$(git log --format=%s)
-LOG_COUNT=$(echo "$GIT_LOG" | wc -l | tr -d ' ')
-assert_eq "$LOG_COUNT" "5" "git log shows 5 commits"
-
-# Verify commit messages
-echo "$GIT_LOG" | grep -qF "initial commit" && pass "commit 1 message in log" || fail "commit 1 message missing"
-echo "$GIT_LOG" | grep -qF "expand data" && pass "commit 4 message in log" || fail "commit 4 message missing"
-echo "$GIT_LOG" | grep -qF "rename guide" && pass "commit 5 message in log" || fail "commit 5 message missing"
-
-# --- Phase 8: Verify git status is clean ----------------------------------
-
-echo "--- Phase 8: Verify git status is clean ---"
-
-cd "$MOUNT_CLONE"
-STATUS=$(git status --porcelain)
-if [[ -z "$STATUS" ]]; then
-    pass "git status is clean"
-else
-    fail "git status has changes: $STATUS"
-fi
-
-# --- Results ---------------------------------------------------------------
-
-echo ""
-echo "========================================"
-echo "  Results: $PASS passed, $FAIL failed"
-echo "========================================"
-
-if [[ "$FAIL" -gt 0 ]]; then
-    exit 1
-fi

docker/entrypoint.sh

@@ -72,20 +72,6 @@ case "$1" in
   	exec /usr/bin/weed -logtostderr=true volume $ARGS $@
 	;;
 
-  'volume-rust')
-  	ARGS="-dir /data -max 0"
-  	if isArgPassed "-max" "$@"; then
-  	  ARGS="-dir /data"
-  	fi
-  	shift
-  	if [ ! -s /usr/bin/weed-volume ]; then
-  	  echo "Error: Rust volume server is not available on this platform ($(uname -m))." >&2
-  	  echo "Use 'volume' for the Go volume server instead." >&2
-  	  exit 1
-  	fi
-  	exec /usr/bin/weed-volume $ARGS $@
-	;;
-
   'server')
   	ARGS="-dir=/data -volume.max=0 -master.volumeSizeLimitMB=1024"
   	if isArgPassed "-volume.max" "$@"; then

go.mod

@@ -4,8 +4,8 @@ go 1.25.0
 
 require (
 	cloud.google.com/go v0.123.0 // indirect
-	cloud.google.com/go/pubsub v1.50.2
-	cloud.google.com/go/storage v1.60.0
+	cloud.google.com/go/pubsub v1.50.1
+	cloud.google.com/go/storage v1.59.2
 	github.com/Shopify/sarama v1.38.1
 	github.com/aws/aws-sdk-go v1.55.8
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -28,26 +28,26 @@ require (
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/go-redsync/redsync/v4 v4.16.0
 	github.com/go-sql-driver/mysql v1.9.3
-	github.com/go-zookeeper/zk v1.0.4 // indirect
+	github.com/go-zookeeper/zk v1.0.3 // indirect
 	github.com/golang/protobuf v1.5.4
 	github.com/golang/snappy v1.0.0
 	github.com/google/btree v1.1.3
 	github.com/google/uuid v1.6.0
 	github.com/google/wire v0.7.0 // indirect
-	github.com/googleapis/gax-go/v2 v2.19.0 // indirect
+	github.com/googleapis/gax-go/v2 v2.15.0 // indirect
 	github.com/gorilla/mux v1.8.1
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	github.com/hashicorp/go-uuid v1.0.3 // indirect
-	github.com/jackc/pgx/v5 v5.9.2
+	github.com/jackc/pgx/v5 v5.8.0
 	github.com/jcmturner/gofork v1.7.6 // indirect
 	github.com/jcmturner/gokrb5/v8 v8.4.4 // indirect
 	github.com/jinzhu/copier v0.4.0
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
 	github.com/json-iterator/go v1.1.12
 	github.com/karlseguin/ccache/v2 v2.0.8
-	github.com/klauspost/compress v1.18.5
-	github.com/klauspost/reedsolomon v1.13.3
+	github.com/klauspost/compress v1.18.4
+	github.com/klauspost/reedsolomon v1.13.0
 	github.com/kurin/blazer v0.5.3
 	github.com/linxGnu/grocksdb v1.10.7
 	github.com/mailru/easyjson v0.9.1 // indirect
@@ -83,84 +83,83 @@ require (
 	github.com/valyala/bytebufferpool v1.0.0
 	github.com/viant/ptrie v1.0.1
 	github.com/xdg-go/pbkdf2 v1.0.0 // indirect
-	github.com/xdg-go/scram v1.2.0
+	github.com/xdg-go/scram v1.1.2 // indirect
 	github.com/xdg-go/stringprep v1.0.4 // indirect
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
-	go.etcd.io/etcd/client/v3 v3.6.10
+	go.etcd.io/etcd/client/v3 v3.6.7
 	go.mongodb.org/mongo-driver v1.17.9
 	go.opencensus.io v0.24.0 // indirect
 	gocloud.dev v0.45.0
 	gocloud.dev/pubsub/natspubsub v0.45.0
-	gocloud.dev/pubsub/rabbitpubsub v0.45.0
-	golang.org/x/crypto v0.50.0
-	golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa
-	golang.org/x/image v0.38.0
-	golang.org/x/net v0.53.0
+	gocloud.dev/pubsub/rabbitpubsub v0.44.0
+	golang.org/x/crypto v0.48.0
+	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546
+	golang.org/x/image v0.36.0
+	golang.org/x/net v0.49.0
 	golang.org/x/oauth2 v0.36.0
-	golang.org/x/sys v0.43.0
-	golang.org/x/text v0.36.0 // indirect
-	golang.org/x/tools v0.43.0 // indirect
+	golang.org/x/sys v0.42.0
+	golang.org/x/text v0.34.0 // indirect
+	golang.org/x/tools v0.41.0 // indirect
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
-	google.golang.org/api v0.274.0
-	google.golang.org/genproto v0.0.0-20260316180232-0b37fe3546d5 // indirect
+	google.golang.org/api v0.258.0
+	google.golang.org/genproto v0.0.0-20251124214823-79d6a2a48846 // indirect
 	google.golang.org/grpc v1.79.3
 	google.golang.org/protobuf v1.36.11
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	modernc.org/b v1.0.0 // indirect
-	modernc.org/mathutil v1.7.1 // indirect
+	modernc.org/mathutil v1.7.1
 	modernc.org/memory v1.11.0 // indirect
-	modernc.org/sqlite v1.49.1
+	modernc.org/sqlite v1.46.1
+	modernc.org/strutil v1.2.1
 )
 
 require (
-	cloud.google.com/go/kms v1.26.0
+	cloud.google.com/go/kms v1.23.2
 	github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0
 	github.com/Jille/raft-grpc-transport v1.6.1
 	github.com/ThreeDotsLabs/watermill v1.5.1
 	github.com/a-h/templ v0.3.977
-	github.com/apache/cassandra-gocql-driver/v2 v2.1.0
-	github.com/apache/iceberg-go v0.5.0
+	github.com/apache/cassandra-gocql-driver/v2 v2.0.0
+	github.com/apache/iceberg-go v0.4.0
 	github.com/apple/foundationdb/bindings/go v0.0.0-20250911184653-27f7192f47c3
 	github.com/arangodb/go-driver v1.6.9
 	github.com/armon/go-metrics v0.4.1
-	github.com/aws/aws-sdk-go-v2 v1.41.6
-	github.com/aws/aws-sdk-go-v2/config v1.32.14
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.14
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.99.0
+	github.com/aws/aws-sdk-go-v2 v1.41.4
+	github.com/aws/aws-sdk-go-v2/config v1.32.7
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.12
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.95.0
 	github.com/cognusion/imaging v1.0.2
 	github.com/fluent/fluent-logger-golang v1.10.1
-	github.com/getsentry/sentry-go v0.44.1
-	github.com/go-git/go-billy/v5 v5.8.0
-	github.com/go-ldap/ldap/v3 v3.4.13
+	github.com/getsentry/sentry-go v0.43.0
+	github.com/go-ldap/ldap/v3 v3.4.12
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/google/flatbuffers/go v0.0.0-20230108230133-3b8644d32c50
 	github.com/hashicorp/raft v1.7.3
 	github.com/hashicorp/raft-boltdb/v2 v2.3.1
-	github.com/hashicorp/vault/api v1.23.0
+	github.com/hashicorp/vault/api v1.22.0
 	github.com/jhump/protoreflect v1.18.0
 	github.com/linkedin/goavro/v2 v2.15.0
+	github.com/mattn/go-sqlite3 v1.14.34
 	github.com/minio/crc64nvme v1.1.1
 	github.com/orcaman/concurrent-map/v2 v2.0.1
 	github.com/parquet-go/parquet-go v0.28.0
 	github.com/pkg/sftp v1.13.10
 	github.com/rabbitmq/amqp091-go v1.10.0
-	github.com/rclone/rclone v1.73.5
+	github.com/rclone/rclone v1.73.1
 	github.com/rdleal/intervalst v1.5.0
 	github.com/redis/go-redis/v9 v9.18.0
 	github.com/schollz/progressbar/v3 v3.19.0
-	github.com/seaweedfs/go-fuse/v2 v2.9.2
+	github.com/seaweedfs/go-fuse/v2 v2.9.1
 	github.com/shirou/gopsutil/v4 v4.26.2
 	github.com/tarantool/go-tarantool/v2 v2.4.2
-	github.com/testcontainers/testcontainers-go v0.40.0
+	github.com/testcontainers/testcontainers-go v0.39.0
 	github.com/tikv/client-go/v2 v2.0.7
-	github.com/willscott/go-nfs v0.0.3
-	github.com/willscott/go-nfs-client v0.0.0-20251022144359-801f10d98886
 	github.com/xeipuuv/gojsonschema v1.2.0
 	github.com/ydb-platform/ydb-go-sdk-auth-environ v0.5.1
-	github.com/ydb-platform/ydb-go-sdk/v3 v3.134.0
-	go.etcd.io/etcd/client/pkg/v3 v3.6.10
+	github.com/ydb-platform/ydb-go-sdk/v3 v3.125.3
+	go.etcd.io/etcd/client/pkg/v3 v3.6.7
 	go.uber.org/atomic v1.11.0
-	golang.org/x/sync v0.20.0
+	golang.org/x/sync v0.19.0
 	golang.org/x/tools/godoc v0.1.0-deprecated
 	google.golang.org/grpc/security/advancedtls v1.0.0
 )
@@ -171,18 +170,20 @@ require (
 	atomicgo.dev/cursor v0.2.0 // indirect
 	atomicgo.dev/keyboard v0.2.9 // indirect
 	atomicgo.dev/schedule v0.1.0 // indirect
-	cloud.google.com/go/longrunning v0.8.0 // indirect
-	cloud.google.com/go/pubsub/v2 v2.4.0 // indirect
+	cloud.google.com/go/longrunning v0.7.0 // indirect
+	cloud.google.com/go/pubsub/v2 v2.3.0 // indirect
 	dario.cat/mergo v1.0.2 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
-	github.com/FilenCloudDienste/filen-sdk-go v0.0.38 // indirect
+	github.com/Azure/go-autorest v14.2.0+incompatible // indirect
+	github.com/Azure/go-autorest/autorest/to v0.4.1 // indirect
+	github.com/FilenCloudDienste/filen-sdk-go v0.0.37 // indirect
 	github.com/a1ex3/zstd-seekable-format-go/pkg v0.10.0 // indirect
 	github.com/anchore/go-lzo v0.1.0 // indirect
 	github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
-	github.com/apache/arrow-go/v18 v18.5.2-0.20260220015023-a886a5722b87 // indirect
+	github.com/apache/arrow-go/v18 v18.4.1 // indirect
 	github.com/apache/thrift v0.22.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/signin v1.0.9 // indirect
+	github.com/aws/aws-sdk-go-v2/service/signin v1.0.8 // indirect
 	github.com/bahlo/generic-list-go v0.2.0 // indirect
 	github.com/bazelbuild/rules_go v0.46.0 // indirect
 	github.com/biogo/store v0.0.0-20201120204734-aad293a2328f // indirect
@@ -206,25 +207,26 @@ require (
 	github.com/dave/dst v0.27.2 // indirect
 	github.com/diskfs/go-diskfs v1.7.0 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/docker v28.5.2+incompatible // indirect
+	github.com/docker/docker v28.5.0+incompatible // indirect
 	github.com/docker/go-connections v0.6.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dromara/dongle v1.0.1 // indirect
 	github.com/gin-gonic/gin v1.11.0 // indirect
 	github.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 // indirect
+	github.com/go-git/go-billy/v5 v5.6.2 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
 	github.com/golang/geo v0.0.0-20210211234256-740aa86cb551 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/gookit/color v1.5.4 // indirect
 	github.com/gopherjs/gopherjs v1.17.2 // indirect
 	github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
-	github.com/hamba/avro/v2 v2.31.0 // indirect
+	github.com/hamba/avro/v2 v2.30.0 // indirect
 	github.com/hashicorp/go-rootcerts v1.0.2 // indirect
 	github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 // indirect
 	github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
 	github.com/hashicorp/go-sockaddr v1.0.7 // indirect
 	github.com/hashicorp/hcl v1.0.1-vault-7 // indirect
-	github.com/internxt/rclone-adapter v0.0.0-20260220172730-613f4cc8b8fd // indirect
+	github.com/internxt/rclone-adapter v0.0.0-20260213125353-6f59c89fcb7c // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
@@ -256,9 +258,8 @@ require (
 	github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741 // indirect
 	github.com/pierrre/geohash v1.0.0 // indirect
 	github.com/pquerna/otp v1.5.0 // indirect
-	github.com/pterm/pterm v0.12.82 // indirect
+	github.com/pterm/pterm v0.12.81 // indirect
 	github.com/quic-go/quic-go v0.57.0 // indirect
-	github.com/rasky/go-xdr v0.0.0-20170124162913-1a41d1a06c93 // indirect
 	github.com/rclone/Proton-API-Bridge v1.0.1-0.20260127174007-77f974840d11 // indirect
 	github.com/rclone/go-proton-api v1.0.1-0.20260127173028-eb465cac3b18 // indirect
 	github.com/rogpeppe/go-internal v1.14.1 // indirect
@@ -266,9 +267,9 @@ require (
 	github.com/sasha-s/go-deadlock v0.3.1 // indirect
 	github.com/smarty/assertions v1.15.0 // indirect
 	github.com/stretchr/objx v0.5.2 // indirect
-	github.com/substrait-io/substrait v0.81.0 // indirect
-	github.com/substrait-io/substrait-go/v7 v7.4.0 // indirect
-	github.com/substrait-io/substrait-protobuf/go v0.81.0 // indirect
+	github.com/substrait-io/substrait v0.69.0 // indirect
+	github.com/substrait-io/substrait-go/v4 v4.4.0 // indirect
+	github.com/substrait-io/substrait-protobuf/go v0.71.0 // indirect
 	github.com/twpayne/go-geom v1.6.1 // indirect
 	github.com/twpayne/go-kml/v3 v3.2.1 // indirect
 	github.com/tyler-smith/go-bip39 v1.1.0 // indirect
@@ -277,7 +278,7 @@ require (
 	github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
 	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
-	github.com/zeebo/xxh3 v1.1.0 // indirect
+	github.com/zeebo/xxh3 v1.0.2 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect
 	go.opentelemetry.io/otel/exporters/zipkin v1.36.0 // indirect
@@ -285,14 +286,14 @@ require (
 	go.uber.org/mock v0.5.2 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/mod v0.34.0 // indirect
-	golang.org/x/telemetry v0.0.0-20260311193753-579e4da9a98c // indirect
-	gonum.org/v1/gonum v0.17.0 // indirect
+	golang.org/x/mod v0.32.0 // indirect
+	golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 // indirect
+	gonum.org/v1/gonum v0.16.0 // indirect
 )
 
 require (
 	cel.dev/expr v0.25.1 // indirect
-	cloud.google.com/go/auth v0.18.2 // indirect
+	cloud.google.com/go/auth v0.17.0 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
 	cloud.google.com/go/compute/metadata v0.9.0 // indirect
 	cloud.google.com/go/iam v1.5.3 // indirect
@@ -303,12 +304,12 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.4
 	github.com/Azure/azure-sdk-for-go/sdk/storage/azfile v1.5.3 // indirect
-	github.com/Azure/go-ntlmssp v0.1.1 // indirect
+	github.com/Azure/go-ntlmssp v0.1.0 // indirect
 	github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
 	github.com/Files-com/files-sdk-go/v3 v3.2.264 // indirect
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 // indirect
-	github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect
-	github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect
+	github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0 // indirect
+	github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0 // indirect
 	github.com/IBM/go-sdk-core/v5 v5.21.0 // indirect
 	github.com/Max-Sum/base32768 v0.0.0-20230304063302-18e6ce5945fd // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
@@ -324,23 +325,23 @@ require (
 	github.com/andybalholm/cascadia v1.3.3 // indirect
 	github.com/appscode/go-querystring v0.0.0-20170504095604-0126cfb3f1dc // indirect
 	github.com/arangodb/go-velocypack v0.0.0-20200318135517-5af53c29c67e // indirect
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.21 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.1 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.12 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.16 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.7 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.16 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sns v1.39.7 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sqs v1.42.17 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.41.10
-	github.com/aws/smithy-go v1.25.0
+	github.com/aws/aws-sdk-go-v2/service/sso v1.30.13 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.41.9
+	github.com/aws/smithy-go v1.24.2
 	github.com/boltdb/bolt v1.3.1 // indirect
 	github.com/bradenaw/juniper v0.15.3 // indirect
 	github.com/bradfitz/iter v0.0.0-20191230175014-e8f45d346db8 // indirect
@@ -372,7 +373,7 @@ require (
 	github.com/geoffgarside/ber v1.2.0 // indirect
 	github.com/go-chi/chi/v5 v5.2.5 // indirect
 	github.com/go-darwin/apfs v0.0.0-20211011131704-f84b94dbf348 // indirect
-	github.com/go-jose/go-jose/v4 v4.1.4 // indirect
+	github.com/go-jose/go-jose/v4 v4.1.3 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-ole/go-ole v1.3.0 // indirect
@@ -388,7 +389,7 @@ require (
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
 	github.com/google/s2a-go v0.1.9 // indirect
-	github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.3.7 // indirect
 	github.com/gorilla/schema v1.4.1 // indirect
 	github.com/gorilla/securecookie v1.1.2 // indirect
 	github.com/gorilla/sessions v1.4.0
@@ -479,7 +480,7 @@ require (
 	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	github.com/yandex-cloud/go-genproto v0.0.0-20211115083454-9ca41db5ed9e // indirect
-	github.com/ydb-platform/ydb-go-genproto v0.0.0-20260311095541-ebbf792c1180 // indirect
+	github.com/ydb-platform/ydb-go-genproto v0.0.0-20251125145508-6d7ef87db5cb // indirect
 	github.com/ydb-platform/ydb-go-yc v0.12.1 // indirect
 	github.com/ydb-platform/ydb-go-yc-metadata v0.6.1 // indirect
 	github.com/yunify/qingstor-sdk-go/v3 v3.2.0 // indirect
@@ -487,27 +488,27 @@ require (
 	github.com/zeebo/blake3 v0.2.4 // indirect
 	github.com/zeebo/errs v1.4.0 // indirect
 	go.etcd.io/bbolt v1.4.3 // indirect
-	go.etcd.io/etcd/api/v3 v3.6.10 // indirect
+	go.etcd.io/etcd/api/v3 v3.6.7 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/contrib/detectors/gcp v1.39.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
-	go.opentelemetry.io/otel v1.43.0 // indirect
-	go.opentelemetry.io/otel/metric v1.43.0 // indirect
-	go.opentelemetry.io/otel/sdk v1.43.0 // indirect
-	go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
-	go.opentelemetry.io/otel/trace v1.43.0 // indirect
+	go.opentelemetry.io/otel v1.40.0 // indirect
+	go.opentelemetry.io/otel/metric v1.40.0 // indirect
+	go.opentelemetry.io/otel/sdk v1.40.0 // indirect
+	go.opentelemetry.io/otel/sdk/metric v1.40.0 // indirect
+	go.opentelemetry.io/otel/trace v1.40.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.1 // indirect
-	golang.org/x/term v0.42.0
-	golang.org/x/time v0.15.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260316180232-0b37fe3546d5 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260319201613-d00831a3d3e7 // indirect
+	golang.org/x/term v0.40.0 // indirect
+	golang.org/x/time v0.14.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	gopkg.in/validator.v2 v2.0.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	modernc.org/libc v1.72.0 // indirect
+	modernc.org/libc v1.67.6 // indirect
 	moul.io/http2curl/v2 v2.3.0 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 	storj.io/common v0.0.0-20251107171817-6221ae45072c // indirect

install.sh

@@ -1,275 +0,0 @@
-#!/bin/bash
-#
-# SeaweedFS Installer
-# Downloads Go and/or Rust binaries from GitHub releases.
-#
-# Usage:
-#   curl -fsSL https://raw.githubusercontent.com/seaweedfs/seaweedfs/master/install.sh | bash
-#   curl -fsSL ... | bash -s -- --component volume-rust --large-disk
-#   curl -fsSL ... | bash -s -- --version v3.93 --dir /usr/local/bin
-#
-# Options:
-#   --component COMP   Which binary to install: weed, volume-rust, all (default: weed)
-#   --version VER      Release version tag (default: latest)
-#   --large-disk       Use large disk variant (5-byte offset, 8TB max volume)
-#   --dir DIR          Installation directory (default: /usr/local/bin)
-#   --help             Show this help message
-
-set -euo pipefail
-
-REPO="seaweedfs/seaweedfs"
-COMPONENT="weed"
-VERSION=""
-LARGE_DISK=false
-INSTALL_DIR="/usr/local/bin"
-
-# Colors (if terminal supports them)
-if [ -t 1 ]; then
-    RED='\033[0;31m'
-    GREEN='\033[0;32m'
-    YELLOW='\033[0;33m'
-    BLUE='\033[0;34m'
-    NC='\033[0m'
-else
-    RED='' GREEN='' YELLOW='' BLUE='' NC=''
-fi
-
-info()  { echo -e "${BLUE}[info]${NC} $*"; }
-ok()    { echo -e "${GREEN}[ok]${NC} $*"; }
-warn()  { echo -e "${YELLOW}[warn]${NC} $*"; }
-error() { echo -e "${RED}[error]${NC} $*" >&2; exit 1; }
-
-usage() {
-    sed -n '/^# Usage:/,/^$/p' "$0" | sed 's/^# \?//'
-    exit 0
-}
-
-# Parse arguments
-while [ $# -gt 0 ]; do
-    case "$1" in
-        --component)  COMPONENT="$2"; shift 2 ;;
-        --version)    VERSION="$2"; shift 2 ;;
-        --large-disk) LARGE_DISK=true; shift ;;
-        --dir)        INSTALL_DIR="$2"; shift 2 ;;
-        --help|-h)    usage ;;
-        *)            error "Unknown option: $1. Use --help for usage." ;;
-    esac
-done
-
-# Detect OS and architecture
-detect_platform() {
-    local os arch
-
-    case "$(uname -s)" in
-        Linux*)   os="linux" ;;
-        Darwin*)  os="darwin" ;;
-        MINGW*|MSYS*|CYGWIN*) os="windows" ;;
-        FreeBSD*) os="freebsd" ;;
-        *)        error "Unsupported OS: $(uname -s)" ;;
-    esac
-
-    case "$(uname -m)" in
-        x86_64|amd64)   arch="amd64" ;;
-        aarch64|arm64)  arch="arm64" ;;
-        armv7l|armv6l)  arch="arm" ;;
-        *)              error "Unsupported architecture: $(uname -m)" ;;
-    esac
-
-    echo "${os}" "${arch}"
-}
-
-# Get latest release tag from GitHub API
-get_latest_version() {
-    local url="https://api.github.com/repos/${REPO}/releases/latest"
-    if command -v curl &>/dev/null; then
-        curl -fsSL "$url" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/'
-    elif command -v wget &>/dev/null; then
-        wget -qO- "$url" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/'
-    else
-        error "Neither curl nor wget found. Please install one."
-    fi
-}
-
-# Download a file
-download() {
-    local url="$1" dest="$2"
-    info "Downloading ${url}"
-    if command -v curl &>/dev/null; then
-        curl -fsSL -o "$dest" "$url"
-    elif command -v wget &>/dev/null; then
-        wget -qO "$dest" "$url"
-    fi
-}
-
-# Build Go weed binary asset name
-go_asset_name() {
-    local os="$1" arch="$2"
-    local suffix="${os}_${arch}"
-    if [ "$LARGE_DISK" = true ]; then
-        suffix="${suffix}_large_disk"
-    fi
-    echo "${suffix}.tar.gz"
-}
-
-# Build Rust volume server asset name
-rust_asset_name() {
-    local os="$1" arch="$2"
-    local prefix="weed-volume"
-    if [ "$LARGE_DISK" = true ]; then
-        prefix="weed-volume_large_disk"
-    else
-        prefix="weed-volume"
-    fi
-    local suffix="${os}_${arch}"
-    if [ "$os" = "windows" ]; then
-        echo "${prefix}_${suffix}.zip"
-    else
-        echo "${prefix}_${suffix}.tar.gz"
-    fi
-}
-
-# Install a single component
-install_component() {
-    local component="$1" os="$2" arch="$3"
-    local asset_name download_url tmpdir
-
-    tmpdir="$(mktemp -d)"
-    trap "rm -rf '$tmpdir'" EXIT
-
-    case "$component" in
-        weed)
-            asset_name="$(go_asset_name "$os" "$arch")"
-            download_url="https://github.com/${REPO}/releases/download/${VERSION}/${asset_name}"
-            download "$download_url" "${tmpdir}/${asset_name}"
-
-            info "Extracting ${asset_name}..."
-            tar xzf "${tmpdir}/${asset_name}" -C "$tmpdir"
-
-            # The Go release action puts the binary inside a directory
-            local weed_bin
-            weed_bin="$(find "$tmpdir" -name 'weed' -type f | head -1)"
-            if [ -z "$weed_bin" ]; then
-                weed_bin="$(find "$tmpdir" -name 'weed.exe' -type f | head -1)"
-            fi
-            if [ -z "$weed_bin" ]; then
-                error "Could not find weed binary in archive"
-            fi
-
-            chmod +x "$weed_bin"
-            install_binary "$weed_bin" "weed"
-            ok "Installed weed to ${INSTALL_DIR}/weed"
-            ;;
-
-        volume-rust)
-            # Check platform support for Rust volume server
-            case "$os" in
-                linux|darwin|windows) ;;
-                *) error "Rust volume server is not available for ${os}. Supported: linux, darwin, windows" ;;
-            esac
-            case "$arch" in
-                amd64|arm64) ;;
-                *) error "Rust volume server is not available for ${arch}. Supported: amd64, arm64" ;;
-            esac
-
-            asset_name="$(rust_asset_name "$os" "$arch")"
-            download_url="https://github.com/${REPO}/releases/download/${VERSION}/${asset_name}"
-            download "$download_url" "${tmpdir}/${asset_name}"
-
-            info "Extracting ${asset_name}..."
-            if [ "$os" = "windows" ]; then
-                unzip -q "${tmpdir}/${asset_name}" -d "$tmpdir"
-            else
-                tar xzf "${tmpdir}/${asset_name}" -C "$tmpdir"
-            fi
-
-            local rust_bin
-            if [ "$LARGE_DISK" = true ]; then
-                rust_bin="$(find "$tmpdir" -name 'weed-volume-large-disk*' -type f | head -1)"
-            else
-                rust_bin="$(find "$tmpdir" -name 'weed-volume-normal*' -type f | head -1)"
-            fi
-            if [ -z "$rust_bin" ]; then
-                rust_bin="$(find "$tmpdir" -name 'weed-volume*' -type f | head -1)"
-            fi
-            if [ -z "$rust_bin" ]; then
-                error "Could not find weed-volume binary in archive"
-            fi
-
-            chmod +x "$rust_bin"
-            local dest_name="weed-volume"
-            if [ "$os" = "windows" ]; then
-                dest_name="weed-volume.exe"
-            fi
-            install_binary "$rust_bin" "$dest_name"
-            ok "Installed weed-volume to ${INSTALL_DIR}/${dest_name}"
-            ;;
-
-        *)
-            error "Unknown component: ${component}. Use: weed, volume-rust, all"
-            ;;
-    esac
-}
-
-# Copy binary to install dir, using sudo if needed
-install_binary() {
-    local src="$1" name="$2"
-    local dest="${INSTALL_DIR}/${name}"
-
-    mkdir -p "$INSTALL_DIR" 2>/dev/null || true
-
-    if [ -w "$INSTALL_DIR" ]; then
-        cp "$src" "$dest"
-    else
-        info "Need elevated permissions to write to ${INSTALL_DIR}"
-        sudo cp "$src" "$dest"
-    fi
-    chmod +x "$dest" 2>/dev/null || sudo chmod +x "$dest"
-}
-
-main() {
-    info "SeaweedFS Installer"
-
-    read -r os arch <<< "$(detect_platform)"
-    info "Detected platform: ${os}/${arch}"
-
-    if [ -z "$VERSION" ]; then
-        info "Resolving latest release..."
-        VERSION="$(get_latest_version)"
-        if [ -z "$VERSION" ]; then
-            error "Could not determine latest version. Specify with --version"
-        fi
-    fi
-    info "Version: ${VERSION}"
-
-    if [ "$LARGE_DISK" = true ]; then
-        info "Variant: large disk (8TB max volume)"
-    else
-        info "Variant: normal (32GB max volume)"
-    fi
-
-    case "$COMPONENT" in
-        all)
-            install_component "weed" "$os" "$arch"
-            install_component "volume-rust" "$os" "$arch"
-            ;;
-        *)
-            install_component "$COMPONENT" "$os" "$arch"
-            ;;
-    esac
-
-    echo ""
-    ok "Installation complete!"
-    if [ "$COMPONENT" = "weed" ] || [ "$COMPONENT" = "all" ]; then
-        info "  weed:            ${INSTALL_DIR}/weed"
-    fi
-    if [ "$COMPONENT" = "volume-rust" ] || [ "$COMPONENT" = "all" ]; then
-        info "  weed-volume:  ${INSTALL_DIR}/weed-volume"
-    fi
-    echo ""
-    info "Quick start:"
-    info "  weed master                          # Start master server"
-    info "  weed volume -mserver=localhost:9333   # Start Go volume server"
-    info "  weed-volume -mserver localhost:9333 # Start Rust volume server"
-}
-
-main

k8s/charts/seaweedfs/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 description: SeaweedFS
 name: seaweedfs
-appVersion: "4.22"
+appVersion: "4.17"
 # Dev note: Trigger a helm chart release by `git tag -a helm-<version>`
-version: 4.22.0
+version: 4.17.0

k8s/charts/seaweedfs/README.md

@@ -49,35 +49,6 @@ CREATE TABLE IF NOT EXISTS `filemeta` (
 
 Alternative database can also be configured (e.g. leveldb, postgres) following the instructions at `filer.extraEnvironmentVars`.
 
-#### RocksDB variant
-
-The `_large_disk_rocksdb` image tag ships with RocksDB pre-configured as the filer backend.
-To use this image with the Helm chart, override the image on all three components and disable
-the chart's default `WEED_LEVELDB2_ENABLED`, which would otherwise re-enable LevelDB2 and
-override the image's built-in RocksDB configuration:
-
-```yaml
-# Replace <VERSION> with the desired seaweedfs version, e.g. 3.80_large_disk_rocksdb.
-master:
-  imageOverride: chrislusf/seaweedfs:<VERSION>_large_disk_rocksdb
-
-volume:
-  imageOverride: chrislusf/seaweedfs:<VERSION>_large_disk_rocksdb
-
-filer:
-  enablePVC: true
-  imageOverride: chrislusf/seaweedfs:<VERSION>_large_disk_rocksdb
-  extraEnvironmentVars:
-    WEED_LEVELDB2_ENABLED: "false"
-```
-
-Notes:
-
-* `master` and `volume` use the same image tag so that all components share a consistent
-  SeaweedFS build; RocksDB itself is only used by the filer.
-* `filer.enablePVC: true` (or another form of persistent storage for the filer) is required
-  so that the RocksDB metadata store survives pod restarts — otherwise metadata will be lost.
-
 ### Node Labels
 Kubernetes nodes can have labels which help to define which node(Host) will run which pod:
 

k8s/charts/seaweedfs/dashboards/seaweedfs-grafana-dashboard.json

@@ -1168,108 +1168,6 @@
       "title": "Filer QPS",
       "type": "timeseries"
     },
-    {
-      "datasource": {
-        "type": "prometheus",
-        "uid": "${DS_PROMETHEUS}"
-      },
-      "fieldConfig": {
-        "defaults": {
-          "color": {
-            "mode": "palette-classic"
-          },
-          "custom": {
-            "axisBorderShow": false,
-            "axisCenteredZero": false,
-            "axisColorMode": "text",
-            "axisLabel": "",
-            "axisPlacement": "auto",
-            "barAlignment": 0,
-            "drawStyle": "line",
-            "fillOpacity": 0,
-            "gradientMode": "none",
-            "hideFrom": {
-              "legend": false,
-              "tooltip": false,
-              "viz": false
-            },
-            "insertNulls": false,
-            "lineInterpolation": "linear",
-            "lineWidth": 1,
-            "pointSize": 5,
-            "scaleDistribution": {
-              "type": "linear"
-            },
-            "showPoints": "never",
-            "spanNulls": false,
-            "stacking": {
-              "group": "A",
-              "mode": "none"
-            },
-            "thresholdsStyle": {
-              "mode": "off"
-            }
-          },
-          "mappings": [],
-          "min": 0,
-          "thresholds": {
-            "mode": "absolute",
-            "steps": [
-              {
-                "color": "green",
-                "value": null
-              },
-              {
-                "color": "red",
-                "value": 80
-              }
-            ]
-          },
-          "unit": "short",
-          "unitScale": true
-        },
-        "overrides": []
-      },
-      "gridPos": {
-        "h": 7,
-        "w": 24,
-        "x": 0,
-        "y": 28
-      },
-      "id": 91,
-      "links": [],
-      "options": {
-        "legend": {
-          "calcs": [
-            "lastNotNull",
-            "max"
-          ],
-          "displayMode": "table",
-          "placement": "right",
-          "showLegend": true,
-          "width": 250
-        },
-        "tooltip": {
-          "mode": "multi",
-          "sort": "desc"
-        }
-      },
-      "pluginVersion": "10.3.1",
-      "targets": [
-        {
-          "exemplar": true,
-          "expr": "sum by (code) (rate(SeaweedFS_upload_error_total{namespace=\"$NAMESPACE\"}[$__rate_interval]))",
-          "format": "time_series",
-          "interval": "",
-          "intervalFactor": 2,
-          "legendFormat": "{{code}}",
-          "refId": "A",
-          "step": 30
-        }
-      ],
-      "title": "Upload Errors",
-      "type": "timeseries"
-    },
     {
       "collapsed": false,
       "datasource": {
@@ -1280,7 +1178,7 @@
         "h": 1,
         "w": 24,
         "x": 0,
-        "y": 35
+        "y": 28
       },
       "id": 61,
       "panels": [],
@@ -1353,7 +1251,7 @@
         "h": 7,
         "w": 8,
         "x": 0,
-        "y": 36
+        "y": 29
       },
       "id": 65,
       "links": [],
@@ -1459,7 +1357,7 @@
         "h": 7,
         "w": 8,
         "x": 8,
-        "y": 36
+        "y": 29
       },
       "id": 56,
       "links": [],
@@ -1565,7 +1463,7 @@
         "h": 7,
         "w": 8,
         "x": 16,
-        "y": 36
+        "y": 29
       },
       "id": 58,
       "links": [],
@@ -1622,7 +1520,7 @@
         "h": 7,
         "w": 12,
         "x": 0,
-        "y": 43
+        "y": 36
       },
       "id": 84,
       "links": [],
@@ -1667,7 +1565,7 @@
         "h": 7,
         "w": 12,
         "x": 12,
-        "y": 43
+        "y": 36
       },
       "id": 85,
       "links": [],
@@ -1763,7 +1661,7 @@
         "h": 7,
         "w": 12,
         "x": 0,
-        "y": 48
+        "y": 41
       },
       "id": 86,
       "options": {
@@ -1858,7 +1756,7 @@
         "h": 7,
         "w": 12,
         "x": 12,
-        "y": 48
+        "y": 41
       },
       "id": 72,
       "links": [],
@@ -1976,7 +1874,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 57
+        "y": 50
       },
       "id": 73,
       "links": [],
@@ -2132,7 +2030,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 64
+        "y": 57
       },
       "id": 55,
       "links": [],
@@ -2289,7 +2187,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 71
+        "y": 64
       },
       "hideTimeOverride": false,
       "id": 59,
@@ -2361,7 +2259,7 @@
         "h": 1,
         "w": 24,
         "x": 0,
-        "y": 78
+        "y": 71
       },
       "id": 62,
       "panels": [],
@@ -2433,7 +2331,7 @@
         "h": 7,
         "w": 12,
         "x": 0,
-        "y": 79
+        "y": 72
       },
       "id": 47,
       "links": [],
@@ -2576,7 +2474,7 @@
         "h": 7,
         "w": 12,
         "x": 12,
-        "y": 79
+        "y": 72
       },
       "id": 40,
       "links": [],
@@ -2673,7 +2571,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 86
+        "y": 79
       },
       "id": 48,
       "links": [],
@@ -2783,7 +2681,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 93
+        "y": 86
       },
       "id": 50,
       "links": [],
@@ -2885,7 +2783,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 100
+        "y": 93
       },
       "id": 51,
       "links": [],
@@ -2925,7 +2823,7 @@
         "h": 1,
         "w": 24,
         "x": 0,
-        "y": 100
+        "y": 93
       },
       "id": 63,
       "panels": [],
@@ -2998,7 +2896,7 @@
         "h": 7,
         "w": 12,
         "x": 0,
-        "y": 108
+        "y": 101
       },
       "id": 12,
       "links": [],
@@ -3093,7 +2991,7 @@
         "h": 7,
         "w": 12,
         "x": 12,
-        "y": 108
+        "y": 101
       },
       "id": 14,
       "links": [],
@@ -3135,7 +3033,7 @@
         "h": 1,
         "w": 24,
         "x": 0,
-        "y": 115
+        "y": 108
       },
       "id": 64,
       "panels": [],
@@ -3208,7 +3106,7 @@
         "h": 7,
         "w": 12,
         "x": 0,
-        "y": 116
+        "y": 109
       },
       "id": 52,
       "links": [],
@@ -3336,7 +3234,7 @@
         "h": 7,
         "w": 12,
         "x": 12,
-        "y": 116
+        "y": 109
       },
       "id": 54,
       "links": [],
@@ -3433,7 +3331,7 @@
         "h": 7,
         "w": 24,
         "x": 0,
-        "y": 123
+        "y": 116
       },
       "id": 53,
       "links": [],
@@ -3528,7 +3426,7 @@
         "h": 7,
         "w": 12,
         "x": 0,
-        "y": 55
+        "y": 48
       },
       "id": 89,
       "options": {
@@ -3635,7 +3533,7 @@
         "h": 7,
         "w": 12,
         "x": 12,
-        "y": 55
+        "y": 48
       },
       "id": 90,
       "options": {
@@ -3756,4 +3654,4 @@
   "uid": "a24009d7-cbda-4443-a132-1cc1c4677304",
   "version": 1,
   "weekStart": ""
-}
+}

k8s/charts/seaweedfs/templates/admin/admin-statefulset.yaml

@@ -82,7 +82,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.admin.image" . }}
+          image: {{ template "admin.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           {{- $adminAuthEnabled := or .Values.admin.secret.existingSecret .Values.admin.secret.adminPassword }}
           {{- $urlPrefix := .Values.admin.urlPrefix }}
@@ -242,7 +242,7 @@ spec:
           securityContext: {{- omit .Values.admin.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if .Values.admin.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.admin.sidecars "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" .Values.admin.sidecars "context" $) | nindent 8 }}
       {{- end }}
       volumes:
         {{- if eq .Values.admin.data.type "hostPath" }}
@@ -303,7 +303,7 @@ spec:
       nodeSelector:
         {{ tpl .Values.admin.nodeSelector . | indent 8 | trim }}
       {{- end }}
-  {{- $pvc_exists := include "seaweedfs.admin.pvc_exists" . -}}
+  {{- $pvc_exists := include "admin.pvc_exists" . -}}
   {{- if $pvc_exists }}
   volumeClaimTemplates:
     {{- if eq .Values.admin.data.type "persistentVolumeClaim" }}

k8s/charts/seaweedfs/templates/all-in-one/all-in-one-deployment.yaml

@@ -77,7 +77,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.master.image" . }}
+          image: {{ template "master.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           env:
             {{- /* Determine default cluster alias and the corresponding env var keys to avoid conflicts */}}
@@ -247,8 +247,8 @@ spec:
               {{- $httpsPort := .Values.allInOne.s3.httpsPort | default .Values.s3.httpsPort }}
               {{- if $httpsPort }}
               -s3.port.https={{ $httpsPort }} \
-              {{- include "seaweedfs.s3.tlsArgs" (dict "root" . "prefix" "s3.") | nindent 14 }}
               {{- end }}
+              {{- include "seaweedfs.s3.tlsArgs" (dict "root" . "prefix" "s3.") | nindent 14 }}
               {{- end }}
               {{- if or .Values.allInOne.s3.enableAuth .Values.s3.enableAuth .Values.filer.s3.enableAuth }}
               -s3.config=/etc/sw/s3/seaweedfs_s3_config \
@@ -418,7 +418,7 @@ spec:
             {{- omit .Values.allInOne.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if .Values.allInOne.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.allInOne.sidecars "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" .Values.allInOne.sidecars "context" $) | nindent 8 }}
       {{- end }}
       volumes:
         - name: data

k8s/charts/seaweedfs/templates/cosi/cosi-deployment.yaml

@@ -164,7 +164,7 @@ spec:
           securityContext: {{- omit .Values.cosi.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if .Values.cosi.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.cosi.sidecars "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" .Values.cosi.sidecars "context" $) | nindent 8 }}
       {{- end }}
       volumes:
         - name: socket

k8s/charts/seaweedfs/templates/filer/filer-statefulset.yaml

@@ -86,7 +86,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.filer.image" . }}
+          image: {{ template "filer.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           env:
             - name: POD_IP
@@ -200,8 +200,8 @@ spec:
               {{- if .Values.global.seaweedfs.enableSecurity }}
               {{- if .Values.filer.s3.httpsPort }}
               -s3.port.https={{ .Values.filer.s3.httpsPort }} \
-              {{- include "seaweedfs.s3.tlsArgs" (dict "root" . "prefix" "s3.") | nindent 14 }}
               {{- end }}
+              {{- include "seaweedfs.s3.tlsArgs" (dict "root" . "prefix" "s3.") | nindent 14 }}
               {{- end }}
               {{- if .Values.filer.s3.enableAuth }}
               -s3.config=/etc/sw/seaweedfs_s3_config \
@@ -317,7 +317,7 @@ spec:
           securityContext: {{- omit .Values.filer.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
         {{- if .Values.filer.sidecars }}
-        {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.filer.sidecars "context" $) | nindent 8 }}
+        {{- include "common.tplvalues.render" (dict "value" .Values.filer.sidecars "context" $) | nindent 8 }}
         {{- end }}
       volumes:
         {{- if eq .Values.filer.logs.type "hostPath" }}
@@ -413,7 +413,7 @@ spec:
       storageClassName: {{ .Values.filer.storageClass }}
       {{- end }}
   {{- end }}
-  {{- $pvc_exists := include "seaweedfs.filer.pvc_exists" . -}}
+  {{- $pvc_exists := include "filer.pvc_exists" . -}}
   {{- if $pvc_exists }}
   volumeClaimTemplates:
     {{- if eq .Values.filer.data.type "persistentVolumeClaim" }}

k8s/charts/seaweedfs/templates/master/master-statefulset.yaml

@@ -80,7 +80,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.master.image" . }}
+          image: {{ template "master.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           env:
             - name: POD_IP
@@ -251,7 +251,7 @@ spec:
           securityContext: {{- omit .Values.master.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
         {{- if .Values.master.sidecars }}
-        {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.master.sidecars "context" $) | nindent 8 }}
+        {{- include "common.tplvalues.render" (dict "value" .Values.master.sidecars "context" $) | nindent 8 }}
         {{- end }}
       volumes:
         {{- if eq .Values.master.logs.type "hostPath" }}
@@ -312,7 +312,7 @@ spec:
       nodeSelector:
         {{ tpl .Values.master.nodeSelector . | indent 8 | trim }}
       {{- end }}
-  {{- $pvc_exists := include "seaweedfs.master.pvc_exists" . -}}
+  {{- $pvc_exists := include "master.pvc_exists" . -}}
   {{- if $pvc_exists }}
   volumeClaimTemplates:
     {{- if eq .Values.master.data.type "persistentVolumeClaim"}}

k8s/charts/seaweedfs/templates/s3/s3-deployment.yaml

@@ -74,7 +74,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.s3.image" . }}
+          image: {{ template "s3.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           env:
             - name: POD_IP
@@ -127,8 +127,8 @@ spec:
               {{- if .Values.global.seaweedfs.enableSecurity }}
               {{- if .Values.s3.httpsPort }}
               -port.https={{ .Values.s3.httpsPort }} \
-              {{- include "seaweedfs.s3.tlsArgs" (dict "root" . "prefix" "") | nindent 14 }}
               {{- end }}
+              {{- include "seaweedfs.s3.tlsArgs" (dict "root" . "prefix" "") | nindent 14 }}
               {{- end }}
               {{- if .Values.s3.domainName }}
               -domainName={{ .Values.s3.domainName }} \
@@ -226,7 +226,7 @@ spec:
           securityContext: {{- omit .Values.s3.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if .Values.s3.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.s3.sidecars "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" .Values.s3.sidecars "context" $) | nindent 8 }}
       {{- end }}
       volumes:
         {{- if .Values.s3.enableAuth }}

k8s/charts/seaweedfs/templates/s3/s3-secret.yaml

@@ -15,15 +15,15 @@
 {{- $access_key_admin := $adminCreds.accessKey -}}
 {{- $secret_key_admin := $adminCreds.secretKey -}}
 {{- if not (and $access_key_admin $secret_key_admin) -}}
-  {{- $access_key_admin = include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "admin_access_key_id" "length" 20 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
-  {{- $secret_key_admin = include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "admin_secret_access_key" "length" 40 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
+  {{- $access_key_admin = include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "admin_access_key_id" "length" 20 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
+  {{- $secret_key_admin = include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "admin_secret_access_key" "length" 40 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
 {{- end -}}
 {{- $readCreds := $creds.read | default dict -}}
 {{- $access_key_read := $readCreds.accessKey -}}
 {{- $secret_key_read := $readCreds.secretKey -}}
 {{- if not (and $access_key_read $secret_key_read) -}}
-  {{- $access_key_read = include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "read_access_key_id" "length" 20 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
-  {{- $secret_key_read = include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "read_secret_access_key" "length" 40 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
+  {{- $access_key_read = include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "read_access_key_id" "length" 20 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
+  {{- $secret_key_read = include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "read_secret_access_key" "length" 40 "existingSecret" (ternary $existingSecret nil $reuse)) -}}
 {{- end -}}
 apiVersion: v1
 kind: Secret

k8s/charts/seaweedfs/templates/s3/s3-service.yaml

@@ -15,7 +15,6 @@ metadata:
     {{- toYaml .Values.s3.annotations | nindent 4 }}
 {{- end }}
 spec:
-  type: {{ .Values.s3.service.type }}
   internalTrafficPolicy: {{ .Values.s3.internalTrafficPolicy | default "Cluster" }}
   {{- $td := .Values.s3.trafficDistribution | default .Values.filer.s3.trafficDistribution }}
   {{- if and (semverCompare ">=1.31-0" .Capabilities.KubeVersion.GitVersion) $td }}

k8s/charts/seaweedfs/templates/s3/s3-servicemonitor.yaml

@@ -1,10 +1,7 @@
 {{- include "seaweedfs.compat" . -}}
-{{- /*
-  The seaweedfs-s3 Service only gains a "metrics" port when the standalone S3
-  gateway is enabled. With only the embedded filer S3 gateway, metrics live on
-  the filer process and are already scraped by the filer ServiceMonitor.
-*/ -}}
-{{- if and .Values.s3.enabled .Values.s3.metricsPort .Values.global.seaweedfs.monitoring.enabled }}
+{{- if or .Values.s3.enabled .Values.filer.s3.enabled }}
+{{- if .Values.s3.metricsPort }}
+{{- if .Values.global.seaweedfs.monitoring.enabled }}
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
@@ -34,3 +31,5 @@ spec:
       app.kubernetes.io/instance: {{ .Release.Name }}
       app.kubernetes.io/component: s3
 {{- end }}
+{{- end }}
+{{- end }}

k8s/charts/seaweedfs/templates/sftp/sftp-deployment.yaml

@@ -74,7 +74,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.sftp.image" . }}
+          image: {{ template "sftp.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           env:
             - name: POD_IP
@@ -233,7 +233,7 @@ spec:
           securityContext: {{- omit .Values.sftp.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if .Values.sftp.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.sftp.sidecars "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" .Values.sftp.sidecars "context" $) | nindent 8 }}
       {{- end }}
       volumes:
         {{- if .Values.sftp.enableAuth }}

k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml

@@ -1,8 +1,8 @@
 {{- if or .Values.sftp.enabled .Values.allInOne.enabled }}
 {{- $secretName := printf "%s-sftp-secret" (include "seaweedfs.fullname" .) }}
-{{- $admin_pwd := include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "admin_password" "length" 20) -}}
-{{- $read_user_pwd := include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "readonly_password" "length" 20) -}}
-{{- $public_user_pwd := include "seaweedfs.getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "public_user_password" "length" 20) -}}
+{{- $admin_pwd := include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "admin_password" 20) -}}
+{{- $read_user_pwd := include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "readonly_password" 20) -}}
+{{- $public_user_pwd := include "getOrGeneratePassword" (dict "namespace" .Release.Namespace "secretName" $secretName "key" "public_user_password" 20) -}}
 apiVersion: v1
 kind: Secret
 type: Opaque

k8s/charts/seaweedfs/templates/sftp/sftp-service.yaml

@@ -15,7 +15,6 @@ metadata:
     {{- toYaml .Values.sftp.annotations | nindent 4 }}
 {{- end }}
 spec:
-  type: {{ .Values.sftp.service.type }}
   internalTrafficPolicy: {{ .Values.sftp.internalTrafficPolicy | default "Cluster" }}
   ports:
   - name: "swfs-sftp"
@@ -32,4 +31,4 @@ spec:
     app.kubernetes.io/name: {{ template "seaweedfs.name" . }}
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/component: sftp
-{{- end }}
+{{- end }}

k8s/charts/seaweedfs/templates/shared/_helpers.tpl

@@ -72,77 +72,77 @@ Inject extra environment vars in the format key:value, if populated
 {{- end -}}
 
 {{/* Return the proper filer image */}}
-{{- define "seaweedfs.filer.image" -}}
+{{- define "filer.image" -}}
 {{- if .Values.filer.imageOverride -}}
 {{- $imageOverride := .Values.filer.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Return the proper master image */}}
-{{- define "seaweedfs.master.image" -}}
+{{- define "master.image" -}}
 {{- if .Values.master.imageOverride -}}
 {{- $imageOverride := .Values.master.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Return the proper s3 image */}}
-{{- define "seaweedfs.s3.image" -}}
+{{- define "s3.image" -}}
 {{- if .Values.s3.imageOverride -}}
 {{- $imageOverride := .Values.s3.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Return the proper sftp image */}}
-{{- define "seaweedfs.sftp.image" -}}
+{{- define "sftp.image" -}}
 {{- if .Values.sftp.imageOverride -}}
 {{- $imageOverride := .Values.sftp.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Return the proper admin image */}}
-{{- define "seaweedfs.admin.image" -}}
+{{- define "admin.image" -}}
 {{- if .Values.admin.imageOverride -}}
 {{- $imageOverride := .Values.admin.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Return the proper worker image */}}
-{{- define "seaweedfs.worker.image" -}}
+{{- define "worker.image" -}}
 {{- if .Values.worker.imageOverride -}}
 {{- $imageOverride := .Values.worker.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Return the proper volume image */}}
-{{- define "seaweedfs.volume.image" -}}
+{{- define "volume.image" -}}
 {{- if .Values.volume.imageOverride -}}
 {{- $imageOverride := .Values.volume.imageOverride -}}
 {{- printf "%s" $imageOverride -}}
 {{- else -}}
-{{- include "seaweedfs.image" . }}
+{{- include "common.image" . }}
 {{- end -}}
 {{- end -}}
 
 {{/* Computes the container image name for all components (if they are not overridden) */}}
-{{- define "seaweedfs.image" -}}
+{{- define "common.image" -}}
 {{- $registryName := default .Values.image.registry .Values.global.imageRegistry | toString -}}
 {{- $repositoryName := default .Values.image.repository .Values.global.seaweedfs.image.repository | toString -}}
 {{- $name := .Values.global.seaweedfs.image.name | toString -}}
@@ -160,7 +160,7 @@ Inject extra environment vars in the format key:value, if populated
 {{- end -}}
 
 {{/* check if any Volume PVC exists */}}
-{{- define "seaweedfs.volume.pvc_exists" -}}
+{{- define "volume.pvc_exists" -}}
 {{- if or (or (eq .Values.volume.data.type "persistentVolumeClaim") (and (eq .Values.volume.idx.type "persistentVolumeClaim") .Values.volume.dir_idx )) (eq .Values.volume.logs.type "persistentVolumeClaim") -}}
 {{- printf "true" -}}
 {{- else -}}
@@ -169,7 +169,7 @@ Inject extra environment vars in the format key:value, if populated
 {{- end -}}
 
 {{/* check if any Filer PVC exists */}}
-{{- define "seaweedfs.filer.pvc_exists" -}}
+{{- define "filer.pvc_exists" -}}
 {{- if or (eq .Values.filer.data.type "persistentVolumeClaim") (eq .Values.filer.logs.type "persistentVolumeClaim") -}}
 {{- printf "true" -}}
 {{- else -}}
@@ -178,7 +178,7 @@ Inject extra environment vars in the format key:value, if populated
 {{- end -}}
 
 {{/* check if any Master PVC exists */}}
-{{- define "seaweedfs.master.pvc_exists" -}}
+{{- define "master.pvc_exists" -}}
 {{- if or (eq .Values.master.data.type "persistentVolumeClaim") (eq .Values.master.logs.type "persistentVolumeClaim") -}}
 {{- printf "true" -}}
 {{- else -}}
@@ -187,7 +187,7 @@ Inject extra environment vars in the format key:value, if populated
 {{- end -}}
 
 {{/* check if any Admin PVC exists */}}
-{{- define "seaweedfs.admin.pvc_exists" -}}
+{{- define "admin.pvc_exists" -}}
 {{- if or (eq .Values.admin.data.type "persistentVolumeClaim") (eq .Values.admin.logs.type "persistentVolumeClaim") -}}
 {{- printf "true" -}}
 {{- else -}}
@@ -196,7 +196,7 @@ Inject extra environment vars in the format key:value, if populated
 {{- end -}}
 
 {{/* check if any InitContainers exist for Volumes */}}
-{{- define "seaweedfs.volume.initContainers_exists" -}}
+{{- define "volume.initContainers_exists" -}}
 {{- if or (not (empty .Values.volume.idx )) (not (empty .Values.volume.initContainers )) -}}
 {{- printf "true" -}}
 {{- else -}}
@@ -225,10 +225,10 @@ imagePullSecrets:
 {{/*
 Renders a value that contains template perhaps with scope if the scope is present.
 Usage:
-{{ include "seaweedfs.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $ ) }}
-{{ include "seaweedfs.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $ "scope" $app ) }}
+{{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $ ) }}
+{{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $ "scope" $app ) }}
 */}}
-{{- define "seaweedfs.tplvalues.render" -}}
+{{- define "common.tplvalues.render" -}}
 {{- $value := typeIs "string" .value | ternary .value (.value | toYaml) }}
 {{- if contains "{{" (toJson .value) }}
   {{- if .scope }}
@@ -245,9 +245,9 @@ Usage:
 Converts a Kubernetes quantity like "256Mi" or "2G" to a float64 in base units,
 handling both binary (Ki, Mi, Gi) and decimal (m, k, M) suffixes; numeric inputs
 Usage:
-{{ include "seaweedfs.resource-quantity" "10Gi" }}
+{{ include "common.resource-quantity" "10Gi" }}
 */}}
-{{- define "seaweedfs.resource-quantity" -}}
+{{- define "common.resource-quantity" -}}
     {{- $value := . -}}
     {{- $unit := 1.0 -}}
     {{- if typeIs "string" . -}}
@@ -267,7 +267,7 @@ Usage:
 getOrGeneratePassword will check if a password exists in a secret and return it,
 or generate a new random password if it doesn't exist.
 */}}
-{{- define "seaweedfs.getOrGeneratePassword" -}}
+{{- define "getOrGeneratePassword" -}}
 {{- $params := . -}}
 {{- $namespace := $params.namespace -}}
 {{- $secretName := $params.secretName -}}

k8s/charts/seaweedfs/templates/shared/post-install-bucket-hook.yaml

@@ -68,7 +68,7 @@ spec:
       {{- include "seaweedfs.imagePullSecrets" $ | nindent 6 }}
       containers:
       - name: post-install-job
-        image: {{ template "seaweedfs.master.image" . }}
+        image: {{ template "master.image" . }}
         imagePullPolicy: {{ $.Values.global.seaweedfs.imagePullPolicy | default "IfNotPresent" }}
         env:
           - name: WEED_CLUSTER_DEFAULT

k8s/charts/seaweedfs/templates/volume/volume-resize-hook.yaml

@@ -35,8 +35,8 @@
 {{-             $pvcName := printf "%s-%s-%s-%d" $dir.name $seaweedfsName $volumeName $e }}
 {{-             $currentPVC := (lookup "v1" "PersistentVolumeClaim" $.Release.Namespace $pvcName) }}
 {{-             if and $currentPVC }}
-{{-             $oldSize := include "seaweedfs.resource-quantity" $currentPVC.spec.resources.requests.storage }}
-{{-             $newSize := include "seaweedfs.resource-quantity" $desiredSize }}
+{{-             $oldSize := include "common.resource-quantity" $currentPVC.spec.resources.requests.storage }}
+{{-             $newSize := include "common.resource-quantity" $desiredSize }}
 {{-               if gt $newSize $oldSize }}
 {{-               $commands = append $commands (printf "kubectl patch pvc %s-%s-%s-%d -p '{\"spec\":{\"resources\":{\"requests\":{\"storage\":\"%s\"}}}}'" $dir.name $seaweedfsName $volumeName $e $desiredSize) }}
 {{-               end }}

k8s/charts/seaweedfs/templates/volume/volume-statefulset.yaml

@@ -71,12 +71,12 @@ spec:
       {{- end }}
       enableServiceLinks: false
       serviceAccountName: {{ $volume.serviceAccountName | default (include "seaweedfs.serviceAccountName" $) | quote }} # for deleting statefulset pods after migration
-      {{- $initContainers_exists := include "seaweedfs.volume.initContainers_exists" $ -}}
+      {{- $initContainers_exists := include "volume.initContainers_exists" $ -}}
       {{- if $initContainers_exists }}
       initContainers:
         {{- if $volume.idx }}
         - name: seaweedfs-vol-move-idx
-          image: {{ template "seaweedfs.volume.image" $ }}
+          image: {{ template "volume.image" $ }}
           imagePullPolicy: {{ $.Values.global.seaweedfs.imagePullPolicy | default "IfNotPresent" }}
           command: [ '/bin/sh', '-c' ]
           args: [ '{{range $dir :=  $volume.dataDirs }}if ls /{{$dir.name}}/*.idx  >/dev/null 2>&1; then mv /{{$dir.name}}/*.idx /idx/ ; fi; {{end}}' ]
@@ -104,7 +104,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.volume.image" $ }}
+          image: {{ template "volume.image" $ }}
           imagePullPolicy: {{ default "IfNotPresent" $.Values.global.seaweedfs.imagePullPolicy }}
           env:
             - name: POD_NAME
@@ -274,7 +274,7 @@ spec:
           securityContext: {{- omit $volume.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if $volume.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" (printf "{{ $volumeName := \"%s\" }}%s" $volumeName $volume.sidecars) "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" (printf "{{ $volumeName := \"%s\" }}%s" $volumeName $volume.sidecars) "context" $) | nindent 8 }}
       {{- end }}
       volumes:
 

k8s/charts/seaweedfs/templates/worker/worker-deployment.yaml

@@ -77,7 +77,7 @@ spec:
       {{- end }}
       containers:
         - name: seaweedfs
-          image: {{ template "seaweedfs.worker.image" . }}
+          image: {{ template "worker.image" . }}
           imagePullPolicy: {{ default "IfNotPresent" .Values.global.seaweedfs.imagePullPolicy }}
           env:
             - name: POD_IP
@@ -219,7 +219,7 @@ spec:
           securityContext: {{- omit .Values.worker.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
       {{- if .Values.worker.sidecars }}
-      {{- include "seaweedfs.tplvalues.render" (dict "value" .Values.worker.sidecars "context" $) | nindent 8 }}
+      {{- include "common.tplvalues.render" (dict "value" .Values.worker.sidecars "context" $) | nindent 8 }}
       {{- end }}
       volumes:
         {{- if eq .Values.worker.data.type "hostPath" }}

k8s/charts/seaweedfs/values.yaml

@@ -1104,10 +1104,6 @@ s3:
     annotations: {}
     tls: []
 
-  # Service settings
-  service:
-    type: ClusterIP
-
   icebergIngress:
     enabled: false
     className: ""
@@ -1189,10 +1185,6 @@ sftp:
     failureThreshold: 100
     timeoutSeconds: 10
 
-  # Service settings
-  service:
-    type: ClusterIP
-
 admin:
   enabled: false
   imageOverride: null
@@ -1339,14 +1331,9 @@ worker:
   # Admin server to connect to
   adminServer: ""
 
-  # Worker job types - categories or comma-separated list of names/aliases
-  # Categories: all, default, heavy
-  #   default: vacuum, volume_balance, ec_balance, admin_script
-  #   heavy: erasure_coding, iceberg_maintenance
-  #   all: every registered job type
-  # Examples: "all", "default", "heavy", "default,iceberg" (default+iceberg), "vacuum,volume_balance"
-  # Refer: https://github.com/seaweedfs/seaweedfs/wiki/Worker
-  jobType: "all"
+  # Worker job types - comma-separated list
+  # Available: vacuum, volume_balance, erasure_coding
+  jobType: "vacuum,volume_balance,erasure_coding"
 
   # Maximum number of concurrent detection requests
   maxDetect: 1

note/slides/Makefile

@@ -1,31 +0,0 @@
-MARP    ?= npx @marp-team/marp-cli
-SRC     := seaweedfs-production-setup.md
-PDF     := $(SRC:.md=.pdf)
-HTML    := $(SRC:.md=.html)
-PPTX    := $(SRC:.md=.pptx)
-FLAGS   := --allow-local-files
-
-.PHONY: all pdf html pptx watch clean
-
-all: pdf
-
-pdf: $(PDF)
-
-html: $(HTML)
-
-pptx: $(PPTX)
-
-$(PDF): $(SRC)
-	$(MARP) $(SRC) --pdf $(FLAGS) -o $@
-
-$(HTML): $(SRC)
-	$(MARP) $(SRC) --html $(FLAGS) -o $@
-
-$(PPTX): $(SRC)
-	$(MARP) $(SRC) --pptx $(FLAGS) -o $@
-
-watch:
-	$(MARP) $(SRC) --watch --html $(FLAGS)
-
-clean:
-	rm -f $(PDF) $(HTML) $(PPTX)

note/slides/seaweedfs-production-setup.md

@@ -1,118 +0,0 @@
----
-marp: true
-theme: default
-paginate: true
----
-
-# SeaweedFS Production Setup
-
-A walkthrough of the recommended deployment topology
-
-- Storage layer
-- File access layer
-- Backend operations
-- Erasure coding for durability
-
----
-
-![bg contain](object-store-layout.png)
-
----
-
-# Storage Layer
-
-**3 Masters + Volume Servers**
-
-- **Masters (run 3)**
-  - Form a Raft quorum; tolerate 1 failure
-  - Track volume locations and cluster topology
-  - Lightweight; not on the data path for reads/writes after lookup
-
-- **Volume Servers (scale out)**
-  - Hold the actual needle data on local disks
-  - Add more servers for capacity and throughput
-  - Heartbeat to masters; clients talk to them directly for I/O
-
-Rule of thumb: start with 3 masters, then grow volume servers with data.
-
----
-
-# File Access Layer
-
-**Filer + DB for metadata**
-
-- Filer serves POSIX-like directory and file metadata
-- Metadata store options: PostgreSQL, MySQL, Redis, Cassandra, TiKV, etc.
-- Run **3 filers** for HA
-- Filers are stateless relative to each other — state lives in the DB
-
-**S3 Servers**
-
-- Expose the S3 API on top of the filer
-- Scale the count based on throughput requirements
-- Can be co-located with filers or run independently
-
----
-
-# Backend Operations
-
-**1 Admin Server + a few Workers**
-
-- **Admin server (1 is enough)**
-  - Coordinates background jobs: balancing, EC encoding, vacuum, replication fixes
-  - **Not on the data path** — a restart does not affect object store reads/writes
-  - No HA required for normal operation
-
-- **Workers (a few)**
-  - Execute long-running tasks issued by the admin server
-  - Horizontally scalable based on maintenance workload
-
-Keeps housekeeping off the hot path.
-
----
-
-# Production Topology Summary
-
-| Component      | Count                | Role                              |
-|----------------|----------------------|-----------------------------------|
-| Master         | 3                    | Raft quorum, topology, volume map |
-| Volume Server  | N (scale out)        | Stores data needles               |
-| Filer          | 3                    | Metadata gateway                  |
-| Metadata DB    | HA cluster           | Persists filer metadata           |
-| S3 Server      | N (by throughput)    | S3 API frontend                   |
-| Admin          | 1                    | Background job coordinator        |
-| Worker         | A few                | Executes admin-scheduled tasks    |
-
----
-
-# Erasure Coding for Durability
-
-Prefer **many volume servers** so EC shards spread across failure domains.
-
-**Example: 8 volume servers, EC 5+3**
-
-- Each volume becomes 5 data shards + 3 parity shards
-- Shards are placed on 8 distinct volume servers
-- **Tolerates up to 3 simultaneous volume server failures**
-- Storage overhead: 1.6x vs 3x for full replication
-
-```
-Volume -> [D1][D2][D3][D4][D5] + [P1][P2][P3]
-           |   |   |   |   |     |   |   |
-          VS1 VS2 VS3 VS4 VS5  VS6 VS7 VS8
-```
-
-More volume servers = more EC layouts available (e.g. 10+4, 6+3).
-
----
-
-# Getting Started Checklist
-
-1. Provision 3 master nodes (small boxes are fine)
-2. Provision volume servers sized to your data footprint
-3. Stand up an HA metadata DB, then 3 filers pointing at it
-4. Add S3 servers sized to required throughput
-5. Run 1 admin + a few workers for background maintenance
-6. Once you have enough volume servers, enable EC (e.g. 5+3 on 8 servers)
-
-Scale each layer independently as usage grows.

other/java/client/src/main/proto/filer.proto

@@ -33,9 +33,6 @@ service SeaweedFiler {
     rpc StreamRenameEntry (StreamRenameEntryRequest) returns (stream StreamRenameEntryResponse) {
     }
 
-    rpc StreamMutateEntry (stream StreamMutateEntryRequest) returns (stream StreamMutateEntryResponse) {
-    }
-
     rpc AssignVolume (AssignVolumeRequest) returns (AssignVolumeResponse) {
     }
 
@@ -84,15 +81,6 @@ service SeaweedFiler {
     // distributed lock management internal use only
     rpc TransferLocks(TransferLocksRequest) returns (TransferLocksResponse) {
     }
-    rpc ReplicateLock(ReplicateLockRequest) returns (ReplicateLockResponse) {
-    }
-
-    // Peer chunk sharing — tier 1: mount-server registry.
-    // See design-weed-mount-peer-chunk-sharing.md for details.
-    rpc MountRegister (MountRegisterRequest) returns (MountRegisterResponse) {
-    }
-    rpc MountList (MountListRequest) returns (MountListResponse) {
-    }
 }
 
 //////////////////////////////////////////////////
@@ -204,10 +192,6 @@ message FuseAttributes {
     bytes md5 = 14;
     uint32 rdev = 16;
     uint64 inode = 17;
-    int64 ctime = 18; // unix time in seconds, inode change time
-    int32 mtime_ns = 19; // nanosecond component of mtime (0-999999999)
-    int32 ctime_ns = 20; // nanosecond component of ctime (0-999999999)
-    int32 crtime_ns = 21; // nanosecond component of crtime (0-999999999)
 }
 
 message CreateEntryRequest {
@@ -219,21 +203,9 @@ message CreateEntryRequest {
     bool skip_check_parent_directory = 6;
 }
 
-// Structured error codes for filer entry operations.
-// Values are stable — do not reorder or reuse numbers.
-enum FilerError {
-    OK                    = 0;
-    ENTRY_NAME_TOO_LONG   = 1; // name exceeds max_file_name_length
-    PARENT_IS_FILE        = 2; // parent path component is a file, not a directory
-    EXISTING_IS_DIRECTORY = 3; // cannot overwrite directory with file
-    EXISTING_IS_FILE      = 4; // cannot overwrite file with directory
-    ENTRY_ALREADY_EXISTS  = 5; // O_EXCL and entry already exists
-}
-
 message CreateEntryResponse {
-    string error = 1;                          // kept for human readability + backward compat
+    string error = 1;
     SubscribeMetadataResponse metadata_event = 2;
-    FilerError error_code = 3;                 // machine-readable error code
 }
 
 message UpdateEntryRequest {
@@ -305,7 +277,6 @@ message AssignVolumeRequest {
     string rack = 7;
     string data_node = 9;
     string disk_type = 8;
-    uint64 expected_data_size = 10; // hint for size-aware volume selection
 }
 
 message AssignVolumeResponse {
@@ -404,23 +375,11 @@ message SubscribeMetadataRequest {
     int64 until_ns = 8;
     int32 client_epoch = 9;
     repeated string directories = 10;  // exact directory to watch
-    bool client_supports_batching = 11; // client can unpack SubscribeMetadataResponse.events
-    bool client_supports_metadata_chunks = 12; // client can read log file chunks from volume servers
 }
 message SubscribeMetadataResponse {
     string directory = 1;
     EventNotification event_notification = 2;
     int64 ts_ns = 3;
-    repeated SubscribeMetadataResponse events = 4; // batch of additional events (backlog catch-up)
-    repeated LogFileChunkRef log_file_refs = 5;    // log file chunk refs for client direct-read
-}
-// A persisted log file that the client can read directly from volume servers.
-// The file format is: [4-byte size | protobuf LogEntry] repeated.
-// Each LogEntry.Data contains a marshaled SubscribeMetadataResponse.
-message LogFileChunkRef {
-    repeated FileChunk chunks = 1; // chunk references (fids) to read from volume servers
-    int64 file_ts_ns = 2;         // minute-level timestamp of the log file
-    string filer_id = 3;          // filer signature suffix from log filename
 }
 
 message TraverseBfsMetadataRequest {
@@ -536,7 +495,6 @@ message LockResponse {
     string lock_owner = 2;
     string lock_host_moved_to = 3;
     string error = 4;
-    int64 generation = 5;
 }
 message UnlockRequest {
     string name = 1;
@@ -559,80 +517,9 @@ message Lock {
     string renew_token = 2;
     int64 expired_at_ns = 3;
     string owner = 4;
-    int64 generation = 5;
-    bool is_backup = 6;
-    int64 seq = 7;
 }
 message TransferLocksRequest {
     repeated Lock locks = 1;
 }
 message TransferLocksResponse {
 }
-message ReplicateLockRequest {
-    string name = 1;
-    string renew_token = 2;
-    int64 expired_at_ns = 3;
-    string owner = 4;
-    int64 generation = 5;
-    bool is_unlock = 6;
-    int64 seq = 7;
-}
-message ReplicateLockResponse {
-}
-
-//////////////////////////////////////////////////
-// StreamMutateEntry: ordered bidirectional streaming for all filer mutations.
-// All create/update/delete/rename operations from a single mount go through
-// one stream, preserving mutation ordering and eliminating per-request
-// connection overhead.
-
-message StreamMutateEntryRequest {
-    uint64 request_id = 1;
-    oneof request {
-        CreateEntryRequest create_request = 2;
-        UpdateEntryRequest update_request = 3;
-        DeleteEntryRequest delete_request = 4;
-        StreamRenameEntryRequest rename_request = 5;
-    }
-}
-
-message StreamMutateEntryResponse {
-    uint64 request_id = 1;
-    bool is_last = 2; // always true except for rename, which sends multiple events
-    oneof response {
-        CreateEntryResponse create_response = 3;
-        UpdateEntryResponse update_response = 4;
-        DeleteEntryResponse delete_response = 5;
-        StreamRenameEntryResponse rename_response = 6;
-    }
-    string error = 7; // human-readable error message when the operation failed
-    int32 errno = 8;  // POSIX errno (e.g. ENOENT=2, ENOTEMPTY=66) for direct FUSE status mapping
-}
-
-//////////////////////////////////////////////////
-// Peer chunk sharing — mount-server registry
-//////////////////////////////////////////////////
-
-message MountRegisterRequest {
-    string peer_addr = 1;    // host:port where this mount serves peer chunk requests
-    string rack = 2;         // locality label (rack); used for peer ranking
-    int32 ttl_seconds = 3;   // how long the filer should keep this entry without a heartbeat
-    string data_center = 4;  // locality label (data center); coarser than rack
-}
-
-message MountRegisterResponse {
-}
-
-message MountListRequest {
-}
-
-message MountListResponse {
-    repeated MountInfo mounts = 1;
-}
-
-message MountInfo {
-    string peer_addr = 1;
-    string rack = 2;
-    int64 last_seen_ns = 3;
-    string data_center = 4;
-}

seaweed-volume/Cargo.toml

@@ -1,139 +0,0 @@
-[package]
-name = "weed-volume"
-version = "0.1.0"
-edition = "2021"
-description = "SeaweedFS Volume Server — Rust implementation"
-
-[lib]
-name = "seaweed_volume"
-
-[[bin]]
-name = "weed-volume"
-path = "src/main.rs"
-
-[features]
-# Default: 5-byte offsets (8TB max volume size), matching production Go builds (-tags 5BytesOffset).
-# Disable with --no-default-features for 4-byte offsets (32GB max volume size).
-default = ["5bytes"]
-5bytes = []
-
-[dependencies]
-# Async runtime
-tokio = { version = "1", features = ["full"] }
-tokio-stream = { version = "0.1", features = ["net"] }
-tokio-io-timeout = "1"
-
-# gRPC + protobuf
-tonic = { version = "0.12", features = ["tls"] }
-tonic-reflection = "0.12"
-prost = "0.13"
-prost-types = "0.13"
-
-# HTTP server
-axum = { version = "0.7", features = ["multipart"] }
-http-body = "1"
-hyper = { version = "1", features = ["full"] }
-hyper-util = { version = "0.1", features = ["tokio", "service", "server-auto", "http1", "http2"] }
-tower = "0.4"
-tower-http = { version = "0.5", features = ["cors", "trace"] }
-
-# CLI
-clap = { version = "4", features = ["derive"] }
-
-# Metrics
-prometheus = { version = "0.13", default-features = false, features = ["process"] }
-lazy_static = "1"
-
-# JWT
-jsonwebtoken = { version = "10", features = ["rust_crypto"] }
-
-# TLS
-rustls = "0.23"
-tokio-rustls = "0.26"
-rustls-pemfile = "2"
-
-# LevelDB (via RocksDB for better Rust support)
-# Using rusty-leveldb for pure Rust LevelDB
-rusty-leveldb = "3"
-
-# Disk-backed needle map (alternative to in-memory HashMap)
-redb = "3"
-
-# Reed-Solomon erasure coding
-reed-solomon-erasure = "6"
-
-# Logging
-tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["env-filter"] }
-# Config
-toml = "0.8"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-serde_urlencoded = "0.7"
-
-# CRC32 — using Castagnoli polynomial (CRC32-C), matching Go's crc32.Castagnoli
-crc32c = "0.6"
-crc32fast = "1"
-
-# Memory-mapped files
-memmap2 = "0.9"
-
-# UUID
-uuid = { version = "1", features = ["v4"] }
-
-# HTTP client (for proxying, remote fetch)
-reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "stream", "multipart", "json"] }
-
-# Content hashing
-md-5 = "0.10"
-base64 = "0.22"
-
-# Compression
-flate2 = "1"
-
-# Image processing
-image = { version = "0.25", default-features = false, features = ["png", "jpeg", "gif", "webp"] }
-kamadak-exif = "0.5"
-
-# Multipart form-data parsing
-multer = "3"
-
-# MIME type guessing from file extensions
-mime_guess = "2"
-
-# Misc
-bytes = "1"
-rand = "0.8"
-chrono = "0.4"
-hex = "0.4"
-parking_lot = "0.12"
-dashmap = "6"
-thiserror = "1"
-anyhow = "1"
-async-trait = "0.1"
-futures = "0.3"
-async-stream = "0.3"
-x509-parser = "0.16"
-
-# Disk space checking
-sysinfo = "0.31"
-libc = "0.2"
-
-# AWS S3 SDK (for remote storage backends)
-aws-config = { version = "1", features = ["behavior-version-latest"] }
-aws-sdk-s3 = { version = "1.125.0", default-features = false, features = ["sigv4a", "http-1x", "default-https-client", "rt-tokio"] }
-aws-credential-types = "1"
-aws-types = "1"
-
-# pprof is Unix-only (requires libc/nix APIs not available on Windows)
-[target.'cfg(unix)'.dependencies]
-pprof = { version = "0.15", features = ["prost-codec"] }
-
-[dev-dependencies]
-tempfile = "3"
-
-[build-dependencies]
-tonic-build = "0.12"
-
-[patch.crates-io]
-reed-solomon-erasure = { path = "vendor/reed-solomon-erasure" }

seaweed-volume/DEV_PLAN.md

@@ -1,105 +0,0 @@
-# Rust Volume Server — Dev Plan
-
-## Current Status (2026-03-07)
-
-**HTTP tests**: 53/53 pass (100%)
-**gRPC tests**: 56/56 pass (100%) — includes TestVolumeMoveHandlesInFlightWrites with Rust multi-volume cluster
-**Rust integration tests**: 8/8 pass
-**S3 remote storage tests**: 3/3 pass
-**Total**: 117/117 (100%) + 8 Rust + 3 S3 tests
-**Rust unit tests**: 137 lib + 7 integration = 144
-
-## Completed Features
-
-All phases from the original plan are complete:
-
-- **Phase 1** — HTTP Core: CORS, OPTIONS, unsupported methods, static assets, path routing,
-  cookie validation, conditional headers, range requests, dedup 204, content-encoding,
-  readDeleted, chunk manifests, multipart validation, MD5 check, file size limit,
-  upload/download throttling, image resize/crop, download disposition
-- **Phase 2** — JWT/Security: signing keys from security.toml, token source precedence
-  (query > header > cookie), file_id claims, leeway=0
-- **Phase 3** — gRPC: maintenance mode, error message parity, ping routing, batch delete,
-  VolumeServerStatus (with real disk stats, data_center, rack), ReadVolumeFileStatus
-  (with timestamps)
-- **Phase 4** — Streaming gRPC: VolumeIncrementalCopy, CopyFile, ReceiveFile, ReadAllNeedles,
-  VolumeTailSender, VolumeCopy, VolumeTailReceiver, VacuumVolumeCheck
-- **Phase 5** — EC Shards: mount/unmount, delete, read, blob delete, rebuild, shards-to-volume,
-  copy, info
-- **Phase 6** — Advanced gRPC: ScrubVolume, ScrubEcVolume, Query, FetchAndWriteNeedle,
-  VolumeTierMoveDat (error paths)
-- **Phase 7** — Remote Storage: S3-compatible backend via aws-sdk-s3,
-  FetchAndWriteNeedle reads from S3/MinIO/SeaweedFS S3 and writes locally.
-  Supports all S3-compatible providers (AWS, Wasabi, Backblaze, Aliyun, etc.)
-- **Master Heartbeat** — Bidirectional streaming SendHeartbeat RPC, volume/EC registration,
-  leader changes, shutdown deregistration. Tested end-to-end with Go master.
-- **Production Sprint 1** — Quick wins:
-  - VolumeMarkReadonly master notification (triggers immediate heartbeat)
-  - Compaction throttling (`maybe_throttle_compaction()`)
-  - File size limit enforcement on upload
-  - `ts` query param for custom timestamps (upload + delete)
-  - TTL expiration check (was already implemented)
-  - Health check heartbeat status (returns 503 if disconnected from master)
-  - preStopSeconds graceful drain before shutdown
-  - S3 response passthrough headers (content-encoding, expires, content-language, content-disposition)
-  - .vif persistence for readonly state across restarts
-  - Webp image support for resize
-- **Production Sprint 2** — Compatibility:
-  - MIME type extraction from Content-Type header
-  - Stats endpoints (/stats/counter, /stats/memory, /stats/disk)
-  - JSON pretty print (?pretty=y) and JSONP (?callback=fn)
-  - Request ID generation (UUID if x-amz-request-id missing)
-  - Advanced Prometheus metrics (INFLIGHT_REQUESTS, VOLUME_FILE_COUNT gauges)
-- **Production Sprint 3** — Streaming & Multi-node:
-  - Streaming reads for large files (>1MB) via http_body::Body trait with spawn_blocking
-  - Meta-only needle reads (NeedleStreamInfo) to avoid loading full body for streaming
-  - Multi-volume Rust cluster support (RustMultiVolumeCluster test framework)
-  - TestVolumeMoveHandlesInFlightWrites now uses Rust volume servers
-  - CI skip list cleaned up (all tests pass with Rust)
-
-- **Production Sprint 4** — Advanced Features:
-  - BatchDelete EC shard support (ecx index lookup + ecj journal deletion)
-  - JPEG EXIF orientation auto-fix on upload (kamadak-exif + image crate)
-  - Async batched write processing (mpsc queue, up to 128 entries per batch)
-  - VolumeTierMoveDatToRemote/FromRemote (S3 multipart upload/download)
-  - S3TierRegistry for managing remote storage backends
-  - VolumeInfo (.vif) persistence for remote file references
-- **Production Sprint 5** — Upload Compatibility:
-  - TTL query parameter extraction during upload (`ttl=3m`)
-  - Auto-compression for compressible file types (text/*, .js, .css, .json, .svg, etc.)
-  - Seaweed-* custom metadata headers stored as needle pairs (JSON, max 64KB)
-  - Filename extraction from URL path stored in needle name field
-  - Upload response includes filename
-
-- **Production Sprint 6** — Storage & Networking:
-  - Redb disk-backed needle maps (pure Rust, no C deps) via `NeedleMap` enum
-  - Binary search for `VolumeIncrementalCopy` with `since_ns > 0`
-  - Proxy/redirect read modes for non-local volumes (master lookup, HTTP proxy, 301 redirect)
-
-## Remaining Work (Production Readiness)
-
-No major remaining items. All phases and production sprints are complete.
-
-## Test Commands
-
-```bash
-# Build
-cd seaweed-volume && cargo build --release
-
-# Run all Go integration tests with Rust volume server
-VOLUME_SERVER_IMPL=rust go test -v -count=1 -timeout 1200s ./test/volume_server/grpc/... ./test/volume_server/http/...
-
-# Run S3 remote storage tests
-VOLUME_SERVER_IMPL=rust go test -v -count=1 -timeout 180s -run "TestFetchAndWriteNeedle(FromS3|S3NotFound)" ./test/volume_server/grpc/...
-
-# Run specific test
-VOLUME_SERVER_IMPL=rust go test -v -count=1 -timeout 60s -run "TestName" ./test/volume_server/http/...
-
-# Run Rust unit tests
-cd seaweed-volume && cargo test
-
-# Test heartbeat with Go master
-weed master -port=9333 &
-seaweed-volume --port 8080 --master localhost:9333 --dir /tmp/vol1 --max 7
-curl http://localhost:9333/dir/status  # should show Rust volume server registered
-```

seaweed-volume/MISSING_FEATURES.md

@@ -1,288 +0,0 @@
-# Rust Volume Server — Missing Features Audit
-
-Comprehensive line-by-line comparison of Go vs Rust volume server.
-Generated 2026-03-07 from 4 parallel audits covering HTTP, gRPC, storage, and infrastructure.
-
-## Executive Summary
-
-| Area | Total Features | Implemented | Partial | Missing |
-|------|---------------|-------------|---------|---------|
-| gRPC RPCs | 48 | 43 (90%) | 2 (4%) | 3 (6%) |
-| HTTP Handlers | 31 | 12 (39%) | 10 (32%) | 9 (29%) |
-| Storage Layer | 22 | 6 (27%) | 7 (32%) | 9 (41%) |
-| Infrastructure | 14 | 5 (36%) | 4 (29%) | 5 (36%) |
-
----
-
-## Priority 1 — Critical for Production
-
-### P1.1 Streaming / Meta-Only Reads
-- **Go**: `ReadNeedleMeta()`, `ReadNeedleData()`, `ReadPagedData()` — reads only metadata or pages of large files
-- **Go**: `streamWriteResponseContent()` streams needle data in chunks
-- **Go**: `AttemptMetaOnly` / `MustMetaOnly` flags in `ReadOption`
-- **Rust**: Reads entire needle into memory always
-- **Impact**: OOM on large files; 8MB file = 8MB heap per request
-- **Files**: `weed/storage/needle/needle_read.go`, `weed/server/volume_server_handlers_read.go`
-- **Effort**: Medium
-
-### P1.2 Download Proxy/Redirect Fallback (ReadMode)
-- **Go**: `ReadMode` config: "local" | "proxy" | "redirect"
-- **Go**: `tryProxyToReplica()` probes replicas, `proxyReqToTargetServer()` streams response
-- **Rust**: Always returns 404 for non-local volumes
-- **Impact**: Clients must handle volume placement themselves; breaks transparent replication
-- **Files**: `weed/server/volume_server_handlers_read.go:138-250`
-- **Effort**: Medium
-
-### P1.3 TLS/HTTPS Support
-- **Go**: `LoadServerTLS()`, `LoadClientTLS()`, cert/key loading from security.toml
-- **Go**: Applied to both HTTP and gRPC servers
-- **Rust**: No TLS at all — plain TCP only
-- **Impact**: Cannot deploy in secure clusters
-- **Files**: `weed/security/tls.go`, `weed/command/volume.go`
-- **Effort**: Medium (rustls + tokio-rustls already in Cargo.toml)
-
-### P1.4 VolumeMarkReadonly/Writable Master Notification
-- **Go**: `notifyMasterVolumeReadonly()` updates master with readonly state
-- **Rust**: Only sets local in-memory flag
-- **Impact**: Master keeps directing writes to readonly volume
-- **Files**: `weed/server/volume_grpc_admin.go`
-- **Effort**: Low
-
-### P1.5 Compaction/Maintenance Throttling
-- **Go**: `WriteThrottler` with `MaybeSlowdown()` for MB/s rate limiting
-- **Rust**: Flags parsed but no throttle implementation
-- **Impact**: Compaction/copy operations can saturate disk IO
-- **Files**: `weed/util/throttler.go`
-- **Effort**: Low
-
-### P1.6 File Size Limit Enforcement
-- **Go**: `fileSizeLimitBytes` checked on upload, returns 400
-- **Rust**: No enforcement — accepts any size
-- **Impact**: Can write files larger than volume size limit
-- **Files**: `weed/server/volume_server_handlers_write.go`
-- **Effort**: Low
-
----
-
-## Priority 2 — Important for Compatibility
-
-### P2.1 `ts` Query Param (Custom Timestamps)
-- **Go**: Upload and delete accept `ts` query param for custom Last-Modified time
-- **Rust**: Always uses current time
-- **Impact**: Replication timestamp fidelity; sync from external sources
-- **Files**: `weed/server/volume_server_handlers_write.go`, `volume_server_handlers_admin.go`
-- **Effort**: Low
-
-### P2.2 Multipart Form Upload Parsing
-- **Go**: `needle.CreateNeedleFromRequest()` parses multipart forms, extracts MIME type, custom headers/pairs
-- **Rust**: Reads raw body bytes only — no multipart form parsing for metadata
-- **Impact**: MIME type not stored; custom needle pairs not supported
-- **Files**: `weed/storage/needle/needle.go:CreateNeedleFromRequest`
-- **Effort**: Medium
-
-### P2.3 JPEG Orientation Auto-Fix
-- **Go**: `images.FixJpgOrientation()` on upload when enabled
-- **Rust**: Not implemented (flag exists but unused)
-- **Impact**: Mobile uploads may display rotated
-- **Files**: `weed/images/orientation.go`
-- **Effort**: Low (exif crate)
-
-### P2.4 TTL Expiration Enforcement
-- **Go**: Checks `HasTtl()` + `AppendAtNs` against current time on read path
-- **Rust**: TTL struct exists but no expiration checking
-- **Impact**: Expired needles still served
-- **Files**: `weed/storage/needle/volume_ttl.go`, `weed/storage/volume_read.go`
-- **Effort**: Low
-
-### P2.5 Health Check — Master Heartbeat Status
-- **Go**: Returns 503 if not heartbeating (can't reach master)
-- **Rust**: Only checks `is_stopping` flag
-- **Impact**: Load balancers won't detect disconnected volume servers
-- **Files**: `weed/server/volume_server.go`
-- **Effort**: Low
-
-### P2.6 Stats Endpoints
-- **Go**: `/stats/counter`, `/stats/memory`, `/stats/disk` (whitelist-guarded)
-- **Rust**: Not implemented
-- **Impact**: No operational visibility
-- **Files**: `weed/server/volume_server.go`
-- **Effort**: Low
-
-### P2.7 Webp Image Support
-- **Go**: `.webp` included in resize-eligible extensions
-- **Rust**: Only `.png`, `.jpg`, `.jpeg`, `.gif`
-- **Impact**: Webp images can't be resized on read
-- **Files**: `weed/server/volume_server_handlers_read.go`
-- **Effort**: Low (add webp feature to image crate)
-
-### P2.8 preStopSeconds Graceful Drain
-- **Go**: Stops heartbeat, waits N seconds, then shuts down servers
-- **Rust**: Immediate shutdown on signal
-- **Impact**: In-flight requests dropped; Kubernetes readiness race
-- **Files**: `weed/command/volume.go`
-- **Effort**: Low
-
-### P2.9 S3 Response Passthrough Headers
-- **Go**: `response-content-encoding`, `response-expires`, `response-content-language` query params
-- **Rust**: Only handles `response-content-type`, `response-cache-control`, `dl`
-- **Impact**: S3-compatible GET requests missing some override headers
-- **Files**: `weed/server/volume_server_handlers_read.go`
-- **Effort**: Low
-
----
-
-## Priority 3 — Storage Layer Gaps
-
-### P3.1 LevelDB Needle Maps
-- **Go**: 5 needle map variants: memory, LevelDB, LevelDB-medium, LevelDB-large, sorted-file
-- **Rust**: Memory-only needle map
-- **Impact**: Large volumes (millions of needles) require too much RAM
-- **Files**: `weed/storage/needle_map_leveldb.go`
-- **Effort**: High (need LevelDB binding or alternative)
-
-### P3.2 Async Request Processing
-- **Go**: `asyncRequestsChan` with 128-entry queue, worker goroutine for batched writes
-- **Rust**: All writes synchronous
-- **Impact**: Write throughput limited by fsync latency
-- **Files**: `weed/storage/needle/async_request.go`
-- **Effort**: Medium
-
-### P3.3 Volume Scrubbing (Data Integrity)
-- **Go**: `ScrubIndex()`, `scrubVolumeData()` — full data + index verification
-- **Rust**: Stub only in gRPC (returns OK without actual scrubbing)
-- **Impact**: No way to verify data integrity
-- **Files**: `weed/storage/volume_checking.go`, `weed/storage/idx/check.go`
-- **Effort**: Medium
-
-### P3.4 Volume Backup / Sync
-- **Go**: Streaming backup, binary search for last modification, index generation scanner
-- **Rust**: Not implemented
-- **Impact**: No backup/restore capability
-- **Files**: `weed/storage/volume_backup.go`
-- **Effort**: Medium
-
-### P3.5 Volume Info (.vif) Persistence
-- **Go**: `.vif` files store tier/remote metadata, readonly state persists across restarts
-- **Rust**: No `.vif` support; readonly is in-memory only
-- **Impact**: Readonly state lost on restart; no tier metadata
-- **Files**: `weed/storage/volume_info/volume_info.go`
-- **Effort**: Low
-
-### P3.6 Disk Location Features
-- **Go**: Directory UUID tracking, disk space monitoring, min-free-space enforcement, tag-based grouping
-- **Rust**: Basic directory only
-- **Impact**: No disk-full protection
-- **Files**: `weed/storage/disk_location.go`
-- **Effort**: Medium
-
-### P3.7 Compact Map (Memory-Efficient Needle Map)
-- **Go**: `CompactMap` with overflow handling for memory optimization
-- **Rust**: Uses standard HashMap
-- **Impact**: Higher memory usage for index
-- **Files**: `weed/storage/needle_map/compact_map.go`
-- **Effort**: Medium
-
----
-
-## Priority 4 — Nice to Have
-
-### P4.1 gRPC: VolumeTierMoveDatToRemote / FromRemote
-- **Go**: Full streaming implementation for tiering volumes to/from S3
-- **Rust**: Stub returning error
-- **Files**: `weed/server/volume_grpc_tier_upload.go`, `volume_grpc_tier_download.go`
-- **Effort**: High
-
-### P4.2 gRPC: Query (S3 Select)
-- **Go**: JSON/CSV query over needle data (S3 Select compatible)
-- **Rust**: Stub returning error
-- **Files**: `weed/server/volume_grpc_query.go`
-- **Effort**: High
-
-### P4.3 FetchAndWriteNeedle — Already Implemented
-- **Note**: The gRPC audit incorrectly flagged this as missing. It was implemented in a prior session with full S3 remote storage support.
-
-### P4.4 JSON Pretty Print + JSONP
-- **Go**: `?pretty` query param for indented JSON; `?callback=fn` for JSONP
-- **Rust**: Neither supported
-- **Effort**: Low
-
-### P4.5 Request ID Generation
-- **Go**: Generates UUID if `x-amz-request-id` header missing, propagates to gRPC context
-- **Rust**: Only echoes existing header
-- **Effort**: Low
-
-### P4.6 UI Status Page
-- **Go**: Full HTML template with volumes, disks, stats, uptime
-- **Rust**: Stub HTML
-- **Effort**: Medium
-
-### P4.7 Advanced Prometheus Metrics
-- **Go**: InFlightRequestsGauge, ConcurrentUploadLimit/DownloadLimit gauges, metrics push gateway
-- **Rust**: Basic request counter and histogram only
-- **Effort**: Low
-
-### P4.8 Profiling (pprof)
-- **Go**: CPU/memory profiling, /debug/pprof endpoints
-- **Rust**: Flags parsed but not wired
-- **Effort**: Medium (tokio-console or pprof-rs)
-
-### P4.9 EC Distribution / Rebalancing
-- **Go**: 17 files for EC operations including placement strategies, recovery, scrubbing
-- **Rust**: 6 files with basic encoder/decoder
-- **Effort**: High
-
-### P4.10 Cookie Mismatch Status Code
-- **Go**: Returns 406 Not Acceptable
-- **Rust**: Returns 400 Bad Request
-- **Effort**: Trivial
-
----
-
-## Implementation Order Recommendation
-
-### Sprint 1 — Quick Wins (Low effort, high impact) ✅ DONE
-1. ✅ P1.4 VolumeMarkReadonly master notification — triggers immediate heartbeat
-2. ✅ P1.5 Compaction throttling — `maybe_throttle_compaction()` method added
-3. ✅ P1.6 File size limit enforcement — checks `file_size_limit_bytes` on upload
-4. ✅ P2.1 `ts` query param — custom timestamps for upload and delete
-5. ✅ P2.4 TTL expiration check — was already implemented
-6. ✅ P2.5 Health check heartbeat status — returns 503 if not heartbeating
-7. ✅ P2.8 preStopSeconds — graceful drain delay before shutdown
-8. ✅ P2.9 S3 passthrough headers — content-encoding, expires, content-language, content-disposition
-9. ✅ P3.5 .vif persistence — readonly state persists across restarts
-10. ✅ P2.7 Webp support — added to image resize-eligible extensions
-11. ~~P4.10 Cookie 406~~ — Go actually uses 404 for HTTP cookie mismatch (406 is gRPC batch delete only)
-
-### Sprint 2 — Core Read Path (Medium effort) — Partially Done
-1. P1.1 Streaming / meta-only reads — TODO (medium effort, no test coverage yet)
-2. ✅ P1.2 ReadMode proxy/redirect — was already implemented and tested
-3. ✅ P2.2 Multipart form parsing — MIME type extraction from Content-Type header
-4. P2.3 JPEG orientation fix — TODO (low effort, needs exif crate)
-5. ✅ P2.6 Stats endpoints — /stats/counter, /stats/memory, /stats/disk
-6. ✅ P2.7 Webp support — done in Sprint 1
-7. ✅ P4.4 JSON pretty print + JSONP — ?pretty=y and ?callback=fn
-8. ✅ P4.5 Request ID generation — generates UUID if x-amz-request-id missing
-9. ✅ P4.7 Advanced Prometheus metrics — INFLIGHT_REQUESTS gauge, VOLUME_FILE_COUNT gauge
-
-### Sprint 3 — Infrastructure (Medium effort) — Partially Done
-1. ✅ P1.3 TLS/HTTPS — rustls + tokio-rustls for HTTP, tonic ServerTlsConfig for gRPC
-2. P3.2 Async request processing — TODO (medium effort)
-3. ✅ P3.3 Volume scrubbing — CRC checksum verification of all needles
-4. ✅ P3.6 Disk location features — MinFreeSpace enforcement, background disk monitor
-
-### Sprint 4 — Storage Advanced (High effort) — Deferred
-No integration test coverage for these items. All existing tests pass.
-1. P3.1 LevelDB needle maps — needed only for volumes with millions of needles
-2. P3.4 Volume backup/sync — streaming backup, binary search
-3. P3.7 Compact map — memory optimization for needle index
-4. P4.1 VolumeTierMoveDat — full S3 tiering (currently error stub)
-5. P4.9 EC distribution — advanced EC placement/rebalancing
-
-### Sprint 5 — Polish — Deferred
-No integration test coverage for these items.
-1. P4.2 Query (S3 Select) — JSON/CSV query over needle data
-2. ✅ P4.4 JSON pretty/JSONP — done in Sprint 2
-3. ✅ P4.5 Request ID generation — done in Sprint 2
-4. P4.6 UI status page — HTML template with volume/disk/stats info
-5. ✅ P4.7 Advanced metrics — done in Sprint 2
-6. P4.8 Profiling — pprof-rs or tokio-console

seaweed-volume/PARITY_PLAN.md

@@ -1,230 +0,0 @@
-# Rust Volume Server Parity Plan
-
-Generated: 2026-03-16
-
-## Goal
-
-Make `seaweed-volume` a drop-in replacement for the Go volume server by:
-
-- comparing every Go volume-server code path against the Rust implementation,
-- recording file-level ownership and verification status,
-- closing verified behavior gaps one logic change per commit,
-- extending tests so regressions are caught by Go parity suites and Rust unit/integration tests.
-
-## Ground Truth
-
-Primary Go sources:
-
-- `weed/server/volume_server.go`
-- `weed/server/volume_server_handlers*.go`
-- `weed/server/volume_grpc_*.go`
-- `weed/server/constants/volume.go`
-- `weed/storage/store*.go`
-- `weed/storage/disk_location*.go`
-- `weed/storage/volume*.go`
-- `weed/storage/needle/*.go`
-- `weed/storage/idx/*.go`
-- `weed/storage/needle_map*.go`
-- `weed/storage/needle_map/*.go`
-- `weed/storage/super_block/*.go`
-- `weed/storage/erasure_coding/*.go`
-
-Supporting Go dependencies that affect drop-in behavior:
-
-- `weed/command/volume.go`
-- `weed/security/*.go`
-- `weed/images/*.go`
-- `weed/stats/*.go`
-
-Primary Rust sources:
-
-- `seaweed-volume/src/main.rs`
-- `seaweed-volume/src/config.rs`
-- `seaweed-volume/src/security.rs`
-- `seaweed-volume/src/images.rs`
-- `seaweed-volume/src/server/*.rs`
-- `seaweed-volume/src/storage/*.rs`
-- `seaweed-volume/src/storage/needle/*.rs`
-- `seaweed-volume/src/storage/idx/*.rs`
-- `seaweed-volume/src/storage/erasure_coding/*.rs`
-- `seaweed-volume/src/remote_storage/*.rs`
-
-## Audit Method
-
-For each Go file:
-
-1. Map it to the Rust file or files that should own the same behavior.
-2. Compare exported entry points, helper functions, state transitions, wire fields, and persistence side effects.
-3. Mark each file `implemented`, `partial`, `missing`, or `needs verification`.
-4. Link each behavior to an existing test or add a missing test.
-5. Only treat a gap as closed after code review plus local verification.
-
-## Acceptance Criteria
-
-The Rust server is a drop-in replacement only when all of these hold:
-
-- HTTP routes, status codes, headers, and body semantics match Go.
-- gRPC RPCs match Go request validation, response fields, streaming behavior, and maintenance/read-only semantics.
-- Master heartbeat and topology metadata match Go closely enough that the Go master treats Rust and Go volume servers the same.
-- On-disk volume behavior matches Go for normal volumes, EC shards, tiering metadata, and readonly persistence.
-- Startup flags and operational endpoints that affect production deployment behave equivalently or are explicitly documented as unsupported.
-- Existing Go integration suites pass with `VOLUME_SERVER_IMPL=rust`.
-
-## File Matrix
-
-### HTTP server surface
-
-| Go file | Rust counterpart | Status | Comparison focus |
-| --- | --- | --- | --- |
-| `weed/server/volume_server.go` | `seaweed-volume/src/main.rs`, `seaweed-volume/src/server/volume_server.rs`, `seaweed-volume/src/server/heartbeat.rs` | partial | startup wiring, routers, heartbeat, shutdown, metrics/debug listeners |
-| `weed/server/volume_server_handlers.go` | `seaweed-volume/src/server/volume_server.rs`, `seaweed-volume/src/server/handlers.rs` | needs verification | method dispatch, OPTIONS behavior, public/admin split |
-| `weed/server/volume_server_handlers_admin.go` | `seaweed-volume/src/server/handlers.rs` | implemented | `/status`, `/healthz`, stats, server headers |
-| `weed/server/volume_server_handlers_helper.go` | `seaweed-volume/src/server/handlers.rs` | needs verification | JSON encoding, request parsing, helper parity |
-| `weed/server/volume_server_handlers_read.go` | `seaweed-volume/src/server/handlers.rs` | needs verification | JWT, conditional reads, range reads, proxy/redirect, chunk manifests, image transforms |
-| `weed/server/volume_server_handlers_ui.go` | `seaweed-volume/src/server/handlers.rs`, embedded assets | partial | UI payload and HTML parity |
-| `weed/server/volume_server_handlers_write.go` | `seaweed-volume/src/server/handlers.rs`, `seaweed-volume/src/images.rs` | needs verification | multipart parsing, metadata, compression, ts, delete semantics |
-| `weed/server/constants/volume.go` | `seaweed-volume/src/server/heartbeat.rs`, config defaults | needs verification | heartbeat timing, constants parity |
-
-### gRPC server surface
-
-| Go file | Rust counterpart | Status | Comparison focus |
-| --- | --- | --- | --- |
-| `weed/server/volume_grpc_admin.go` | `seaweed-volume/src/server/grpc_server.rs` | needs verification | readonly/writable, allocate/delete/configure/mount/unmount |
-| `weed/server/volume_grpc_batch_delete.go` | `seaweed-volume/src/server/grpc_server.rs` | implemented | batch delete, EC delete path |
-| `weed/server/volume_grpc_client_to_master.go` | `seaweed-volume/src/server/heartbeat.rs` | partial | heartbeat fields, leader changes, metrics settings from master |
-| `weed/server/volume_grpc_copy.go` | `seaweed-volume/src/server/grpc_server.rs` | needs verification | full copy streams |
-| `weed/server/volume_grpc_copy_incremental.go` | `seaweed-volume/src/server/grpc_server.rs` | needs verification | incremental copy binary search, timestamps |
-| `weed/server/volume_grpc_erasure_coding.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/storage/erasure_coding/*.rs` | needs verification | shard read/write/delete/mount/unmount/rebuild |
-| `weed/server/volume_grpc_query.go` | `seaweed-volume/src/server/grpc_server.rs` | needs verification | query validation and error parity |
-| `weed/server/volume_grpc_read_all.go` | `seaweed-volume/src/server/grpc_server.rs` | needs verification | read-all ordering and tail semantics |
-| `weed/server/volume_grpc_read_write.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/storage/*.rs` | needs verification | blob/meta/page reads, write blob semantics |
-| `weed/server/volume_grpc_remote.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/remote_storage/*.rs` | needs verification | remote fetch/write and tier metadata |
-| `weed/server/volume_grpc_scrub.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/storage/*.rs` | needs verification | scrub result semantics |
-| `weed/server/volume_grpc_state.go` | `seaweed-volume/src/server/grpc_server.rs` | implemented | GetState/SetState/Status |
-| `weed/server/volume_grpc_tail.go` | `seaweed-volume/src/server/grpc_server.rs` | needs verification | tail streaming and idle timeout |
-| `weed/server/volume_grpc_tier_download.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/remote_storage/*.rs` | needs verification | tier download stream/error paths |
-| `weed/server/volume_grpc_tier_upload.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/remote_storage/*.rs` | needs verification | tier upload stream/error paths |
-| `weed/server/volume_grpc_vacuum.go` | `seaweed-volume/src/server/grpc_server.rs`, `seaweed-volume/src/storage/*.rs` | needs verification | compact/commit/cleanup progress and readonly transitions |
-
-### Storage and persistence surface
-
-| Go file group | Rust counterpart | Status | Comparison focus |
-| --- | --- | --- | --- |
-| `weed/storage/store.go`, `store_state.go` | `seaweed-volume/src/storage/store.rs`, `seaweed-volume/src/server/heartbeat.rs` | partial | topology metadata, disk tags, server id, state persistence |
-| `weed/storage/store_vacuum.go` | `seaweed-volume/src/storage/store.rs`, `seaweed-volume/src/storage/volume.rs` | needs verification | vacuum sequencing |
-| `weed/storage/store_ec.go`, `store_ec_delete.go`, `store_ec_scrub.go` | `seaweed-volume/src/storage/store.rs`, `seaweed-volume/src/storage/erasure_coding/*.rs` | needs verification | EC lifecycle and scrub behavior |
-| `weed/storage/disk_location.go`, `disk_location_ec.go` | `seaweed-volume/src/storage/disk_location.rs`, `seaweed-volume/src/storage/store.rs` | partial | directory UUIDs, tags, load rules, disk space checks |
-| `weed/storage/volume.go`, `volume_loading.go` | `seaweed-volume/src/storage/volume.rs` | needs verification | load/reload/readonly/remote metadata |
-| `weed/storage/volume_super_block.go` | `seaweed-volume/src/storage/super_block.rs`, `seaweed-volume/src/storage/volume.rs` | implemented | super block parity |
-| `weed/storage/volume_read.go`, `volume_read_all.go` | `seaweed-volume/src/storage/volume.rs`, `seaweed-volume/src/server/handlers.rs` | needs verification | full/meta/page reads, TTL, streaming |
-| `weed/storage/volume_write.go` | `seaweed-volume/src/storage/volume.rs`, `seaweed-volume/src/server/write_queue.rs` | needs verification | dedup, sync/async writes, metadata flags |
-| `weed/storage/volume_vacuum.go` | `seaweed-volume/src/storage/volume.rs` | needs verification | compact and commit parity |
-| `weed/storage/volume_backup.go` | `seaweed-volume/src/storage/volume.rs`, `seaweed-volume/src/server/grpc_server.rs` | needs verification | backup/search logic |
-| `weed/storage/volume_checking.go` | `seaweed-volume/src/storage/volume.rs`, `seaweed-volume/src/storage/idx/mod.rs`, `seaweed-volume/src/server/grpc_server.rs` | needs verification | scrub and integrity checks |
-| `weed/storage/volume_info.go`, `volume_info/volume_info.go`, `volume_tier.go` | `seaweed-volume/src/storage/volume.rs`, `seaweed-volume/src/remote_storage/*.rs` | needs verification | `.vif` format and tiered file metadata |
-| `weed/storage/needle/*.go` | `seaweed-volume/src/storage/needle/*.rs` | needs verification | needle parsing, CRC, TTL, multipart metadata |
-| `weed/storage/idx/*.go` | `seaweed-volume/src/storage/idx/*.rs` | needs verification | index walking and binary search |
-| `weed/storage/needle_map*.go`, `needle_map/*.go` | `seaweed-volume/src/storage/needle_map.rs` | needs verification | map kind parity, persistence, memory behavior |
-| `weed/storage/super_block/*.go` | `seaweed-volume/src/storage/super_block.rs` | implemented | replica placement and TTL metadata |
-| `weed/storage/erasure_coding/*.go` | `seaweed-volume/src/storage/erasure_coding/*.rs` | needs verification | EC shard placement, encode/decode, journal deletes |
-
-### Supporting runtime surface
-
-| Go file | Rust counterpart | Status | Comparison focus |
-| --- | --- | --- | --- |
-| `weed/command/volume.go` | `seaweed-volume/src/config.rs`, `seaweed-volume/src/main.rs` | partial | flags, metrics/debug listeners, startup behavior |
-| `weed/security/*.go` | `seaweed-volume/src/security.rs`, `seaweed-volume/src/main.rs` | implemented | JWT and TLS loading |
-| `weed/images/*.go` | `seaweed-volume/src/images.rs`, `seaweed-volume/src/server/handlers.rs` | implemented | JPEG orientation and transforms |
-| `weed/stats/*.go` | `seaweed-volume/src/metrics.rs`, `seaweed-volume/src/server/handlers.rs` | partial | metrics endpoints, push-gateway integration |
-
-## Verified Gaps As Of 2026-03-08
-
-The startup/runtime gaps that were verified in the initial audit are now closed:
-
-1. Heartbeat metadata parity
-   Closed by `8ade1c51d` and retained in current HEAD.
-
-2. Dedicated metrics/debug listener parity
-   Closed by `fbe0e5829`.
-
-3. Master-provided metrics push settings
-   Closed by `fbe0e5829`.
-
-4. Slow-read tuning parity
-   Closed by `66e3900dc`.
-
-There are no remaining verified gaps from the initial startup/runtime audit. The broader line-by-line comparison batches below are still required to either confirm parity or surface new gaps.
-
-## Execution Status As Of 2026-03-16
-
-The file-by-file comparison and verification work executed in this round was:
-
-1. Startup and harness alignment
-   Compared `weed/command/volume.go`, `test/volume_server/framework/cluster*.go`, `seaweed-volume/src/config.rs`, and `seaweed-volume/src/main.rs` to ensure the Rust server is invoked with Go-compatible flags and is rebuilt from the current source during parity runs.
-
-2. HTTP admin surface
-   Compared `weed/server/volume_server_handlers_admin.go` against `seaweed-volume/src/server/handlers.rs` with emphasis on `/status` payload shape, disk-status fields, and volume ordering.
-
-3. gRPC admin surface
-   Compared `weed/server/volume_grpc_admin.go` against `seaweed-volume/src/server/grpc_server.rs` with emphasis on `Ping`, `VolumeConfigure`, readonly/writable flows, and error wrapping.
-
-4. Storage/index layout
-   Compared Go index-entry defaults in `weed/storage/types` and `weed/storage/idx/*.go` against the Rust default feature set in `seaweed-volume/Cargo.toml` and the Rust index reader/writer paths to confirm default binaries use the same offset width.
-
-5. End-to-end parity verification
-   Re-ran the Go HTTP and gRPC integration suites with `VOLUME_SERVER_IMPL=rust` after each fix to confirm wire-level compatibility.
-
-### Verified mismatches closed in this round
-
-- Rust parity runs could reuse a stale `weed-volume` binary across test invocations, hiding source and feature changes from the Go harness.
-- Rust defaulted to 5-byte index offsets, while the default Go `go build` path uses 4-byte offsets unless built with `-tags 5BytesOffset`.
-- Rust `/status` omitted Go fields in both `Volumes` and `DiskStatuses`, and did not sort volumes by `Id`.
-- Rust `Ping` treated an empty target as a self-ping and only performed a raw gRPC connect for filer targets; Go returns `remote_time_ns=0` for the empty request and performs a real filer `Ping` RPC.
-- Rust `VolumeNeedleStatus` dropped stored TTL metadata and reported `data_size` instead of Go’s `Size` field.
-- Rust multipart uploads ignored form fields such as `ts`, `ttl`, and `cm`, and also ignored part-level `Content-Encoding` and `Content-MD5`.
-- Rust only treated `dl=true` and `dl=1` as truthy, while Go accepts the full `strconv.ParseBool` set such as `dl=t` and `dl=True`.
-
-### Verification commands
-
-- `VOLUME_SERVER_IMPL=rust go test -count=1 -timeout 1200s ./test/volume_server/http/...`
-- `VOLUME_SERVER_IMPL=rust go test -count=1 -timeout 1200s ./test/volume_server/grpc/...`
-
-## Execution Plan
-
-### Batch 1: startup and heartbeat
-
-- Compare `weed/command/volume.go`, `weed/server/volume_server.go`, `weed/server/volume_grpc_client_to_master.go`, `weed/storage/store.go`, and `weed/storage/disk_location.go`.
-- Close metadata and startup parity gaps that affect master registration and deployment compatibility.
-- Add Rust unit tests for heartbeat payloads and config wiring.
-
-### Batch 2: HTTP read path
-
-- Compare `volume_server_handlers_read.go`, `volume_server_handlers_helper.go`, and related storage read functions line by line.
-- Verify JWT, path parsing, proxy/redirect, ranges, streaming, chunk manifests, image transforms, and response-header overrides.
-- Extend `test/volume_server/http/...` and Rust handler tests where parity is not covered.
-
-### Batch 3: HTTP write/delete path
-
-- Compare `volume_server_handlers_write.go` and write-related storage functions.
-- Verify multipart behavior, metadata, md5, compression, unchanged writes, delete edge cases, and timestamp handling.
-
-### Batch 4: gRPC admin and lifecycle
-
-- Compare `volume_grpc_admin.go`, `volume_grpc_state.go`, and `volume_grpc_vacuum.go`.
-- Verify readonly/writable flows, maintenance mode, status payloads, mount/unmount/delete/configure, and vacuum transitions.
-
-### Batch 5: gRPC data movement
-
-- Compare `volume_grpc_read_write.go`, `copy*.go`, `read_all.go`, `tail.go`, `remote.go`, and `query.go`.
-- Verify stream framing, binary search, idle timeout, and remote-storage semantics.
-
-### Batch 6: storage internals
-
-- Compare all `weed/storage` volume, needle, idx, needle map, and EC files line by line.
-- Focus on persistence rules, readonly semantics, TTL, recovery/scrub, backup, and memory/disk map behavior.
-
-## Commit Strategy
-
-- One commit for the audit/plan document if the document itself changes.
-- One commit per logic fix.
-- Every logic commit must include the smallest test addition that proves the new parity claim.

seaweed-volume/README.md

@@ -1,140 +0,0 @@
-# SeaweedFS Volume Server (Rust)
-
-A drop-in replacement for the [SeaweedFS](https://github.com/seaweedfs/seaweedfs) Go volume server, rewritten in Rust. It uses binary-compatible storage formats (`.dat`, `.idx`, `.vif`) and speaks the same HTTP and gRPC protocols, so it works with an unmodified Go master server.
-
-## Building
-
-Requires Rust 1.75+ (2021 edition).
-
-```bash
-cd seaweed-volume
-cargo build --release
-```
-
-The binary is produced at `target/release/seaweed-volume`.
-
-## Running
-
-Start a Go master server first, then point the Rust volume server at it:
-
-```bash
-# Minimal
-seaweed-volume --port 8080 --master localhost:9333 --dir /data/vol1 --max 7
-
-# Multiple data directories
-seaweed-volume --port 8080 --master localhost:9333 \
-  --dir /mnt/ssd1,/mnt/ssd2 --max 100,100 --disk ssd
-
-# With datacenter/rack topology
-seaweed-volume --port 8080 --master localhost:9333 --dir /data/vol1 --max 7 \
-  --dataCenter dc1 --rack rack1
-
-# With JWT authentication
-seaweed-volume --port 8080 --master localhost:9333 --dir /data/vol1 --max 7 \
-  --securityFile /etc/seaweedfs/security.toml
-
-# With TLS (configured in security.toml via [https.volume] and [grpc.volume] sections)
-seaweed-volume --port 8080 --master localhost:9333 --dir /data/vol1 --max 7 \
-  --securityFile /etc/seaweedfs/security.toml
-```
-
-### Common flags
-
-| Flag | Default | Description |
-|------|---------|-------------|
-| `--port` | `8080` | HTTP listen port |
-| `--port.grpc` | `port+10000` | gRPC listen port |
-| `--master` | `localhost:9333` | Comma-separated master server addresses |
-| `--dir` | `/tmp` | Comma-separated data directories |
-| `--max` | `8` | Max volumes per directory (comma-separated) |
-| `--ip` | auto-detect | Server IP / identifier |
-| `--ip.bind` | same as `--ip` | Bind address |
-| `--dataCenter` | | Datacenter name |
-| `--rack` | | Rack name |
-| `--disk` | | Disk type tag: `hdd`, `ssd`, or custom |
-| `--index` | `memory` | Needle map type: `memory`, `leveldb`, `leveldbMedium`, `leveldbLarge` |
-| `--readMode` | `proxy` | Non-local read mode: `local`, `proxy`, `redirect` |
-| `--fileSizeLimitMB` | `256` | Max upload file size |
-| `--minFreeSpace` | `1` (percent) | Min free disk space before marking volumes read-only |
-| `--securityFile` | | Path to `security.toml` for JWT keys and TLS certs |
-| `--metricsPort` | `0` (disabled) | Prometheus metrics endpoint port |
-| `--whiteList` | | Comma-separated IPs with write permission |
-| `--preStopSeconds` | `10` | Graceful drain period before shutdown |
-| `--compactionMBps` | `0` (unlimited) | Compaction I/O rate limit |
-| `--pprof` | `false` | Enable pprof HTTP handlers |
-
-Set `RUST_LOG=debug` (or `trace`, `info`, `warn`) for log level control.
-Set `SEAWEED_WRITE_QUEUE=1` to enable batched async write processing.
-
-## Features
-
-- **Binary compatible** -- reads and writes the same `.dat`/`.idx`/`.vif` files as the Go server; seamless migration with no data conversion.
-- **HTTP + gRPC** -- full implementation of the volume server HTTP API and all gRPC RPCs including streaming operations (copy, tail, incremental copy, vacuum).
-- **Master heartbeat** -- bidirectional streaming heartbeat with the Go master server; volume and EC shard registration, leader failover, graceful shutdown deregistration.
-- **JWT authentication** -- signing key configuration via `security.toml` with token source precedence (query > header > cookie), file_id claims validation, and separate read/write keys.
-- **TLS** -- HTTPS for the HTTP API and mTLS for gRPC, configured through `security.toml`.
-- **Erasure coding** -- Reed-Solomon EC shard management: mount/unmount, read, rebuild, copy, delete, and shard-to-volume reconstruction.
-- **S3 remote storage** -- `FetchAndWriteNeedle` reads from any S3-compatible backend (AWS, MinIO, Wasabi, Backblaze, etc.) and writes locally. Supports `VolumeTierMoveDatToRemote`/`FromRemote` for tiered storage.
-- **Needle map backends** -- in-memory HashMap, LevelDB (via `rusty-leveldb`), or redb (pure Rust disk-backed) needle maps.
-- **Image processing** -- on-the-fly resize/crop, JPEG EXIF orientation auto-fix, WebP support.
-- **Streaming reads** -- large files (>1MB) are streamed via `spawn_blocking` to avoid blocking the async runtime.
-- **Auto-compression** -- compressible file types (text, JSON, CSS, JS, SVG, etc.) are gzip-compressed on upload.
-- **Prometheus metrics** -- counters, histograms, and gauges exported at a dedicated metrics port; optional push gateway support.
-- **Graceful shutdown** -- SIGINT/SIGTERM handling with configurable `preStopSeconds` drain period.
-
-## Testing
-
-### Rust unit tests
-
-```bash
-cd seaweed-volume
-cargo test
-```
-
-### Go integration tests
-
-The Go test suite can target either the Go or Rust volume server via the `VOLUME_SERVER_IMPL` environment variable:
-
-```bash
-# Run all HTTP + gRPC integration tests against the Rust server
-VOLUME_SERVER_IMPL=rust go test -v -count=1 -timeout 1200s \
-  ./test/volume_server/grpc/... ./test/volume_server/http/...
-
-# Run a single test
-VOLUME_SERVER_IMPL=rust go test -v -count=1 -timeout 60s \
-  -run "TestName" ./test/volume_server/http/...
-
-# Run S3 remote storage tests
-VOLUME_SERVER_IMPL=rust go test -v -count=1 -timeout 180s \
-  -run "TestFetchAndWriteNeedle" ./test/volume_server/grpc/...
-```
-
-## Load testing
-
-A load test harness is available at `test/volume_server/loadtest/`. See that directory for usage instructions and scenarios.
-
-## Architecture
-
-The server runs three listeners concurrently:
-
-- **HTTP** (Axum 0.7) -- admin and public routers for file upload/download, status, and stats endpoints.
-- **gRPC** (Tonic 0.12) -- all `VolumeServer` RPCs from the SeaweedFS protobuf definition.
-- **Metrics** (optional) -- Prometheus scrape endpoint on a separate port.
-
-Key source modules:
-
-| Path | Description |
-|------|-------------|
-| `src/main.rs` | Entry point, server startup, signal handling |
-| `src/config.rs` | CLI parsing and configuration resolution |
-| `src/server/volume_server.rs` | HTTP router setup and middleware |
-| `src/server/handlers.rs` | HTTP request handlers (read, write, delete, status) |
-| `src/server/grpc_server.rs` | gRPC service implementation |
-| `src/server/heartbeat.rs` | Master heartbeat loop |
-| `src/storage/volume.rs` | Volume read/write/delete logic |
-| `src/storage/needle.rs` | Needle (file entry) serialization |
-| `src/storage/store.rs` | Multi-volume store management |
-| `src/security.rs` | JWT validation and IP whitelist guard |
-| `src/remote_storage/` | S3 remote storage backend |
-
-See [DEV_PLAN.md](DEV_PLAN.md) for the full development history and feature checklist.

seaweed-volume/build.rs

@@ -1,17 +0,0 @@
-fn main() -> Result<(), Box<dyn std::error::Error>> {
-    let out_dir = std::path::PathBuf::from(std::env::var("OUT_DIR")?);
-    tonic_build::configure()
-        .build_server(true)
-        .build_client(true)
-        .file_descriptor_set_path(out_dir.join("seaweed_descriptor.bin"))
-        .compile_protos(
-            &[
-                "proto/volume_server.proto",
-                "proto/master.proto",
-                "proto/remote.proto",
-                "../weed/pb/filer.proto",
-            ],
-            &["proto/", "../weed/pb/"],
-        )?;
-    Ok(())
-}

seaweed-volume/proto/master.proto

@@ -1,480 +0,0 @@
-syntax = "proto3";
-
-package master_pb;
-
-option go_package = "github.com/seaweedfs/seaweedfs/weed/pb/master_pb";
-
-import "volume_server.proto";
-
-//////////////////////////////////////////////////
-
-service Seaweed {
-  rpc SendHeartbeat (stream Heartbeat) returns (stream HeartbeatResponse) {
-  }
-  rpc KeepConnected (stream KeepConnectedRequest) returns (stream KeepConnectedResponse) {
-  }
-  rpc LookupVolume (LookupVolumeRequest) returns (LookupVolumeResponse) {
-  }
-  rpc Assign (AssignRequest) returns (AssignResponse) {
-  }
-  rpc StreamAssign (stream AssignRequest) returns (stream AssignResponse) {
-  }
-  rpc Statistics (StatisticsRequest) returns (StatisticsResponse) {
-  }
-  rpc CollectionList (CollectionListRequest) returns (CollectionListResponse) {
-  }
-  rpc CollectionDelete (CollectionDeleteRequest) returns (CollectionDeleteResponse) {
-  }
-  rpc VolumeList (VolumeListRequest) returns (VolumeListResponse) {
-  }
-  rpc LookupEcVolume (LookupEcVolumeRequest) returns (LookupEcVolumeResponse) {
-  }
-  rpc VacuumVolume (VacuumVolumeRequest) returns (VacuumVolumeResponse) {
-  }
-  rpc DisableVacuum (DisableVacuumRequest) returns (DisableVacuumResponse) {
-  }
-  rpc EnableVacuum (EnableVacuumRequest) returns (EnableVacuumResponse) {
-  }
-  rpc VolumeMarkReadonly (VolumeMarkReadonlyRequest) returns (VolumeMarkReadonlyResponse) {
-  }
-  rpc GetMasterConfiguration (GetMasterConfigurationRequest) returns (GetMasterConfigurationResponse) {
-  }
-  rpc ListClusterNodes (ListClusterNodesRequest) returns (ListClusterNodesResponse) {
-  }
-  rpc LeaseAdminToken (LeaseAdminTokenRequest) returns (LeaseAdminTokenResponse) {
-  }
-  rpc ReleaseAdminToken (ReleaseAdminTokenRequest) returns (ReleaseAdminTokenResponse) {
-  }
-  rpc Ping (PingRequest) returns (PingResponse) {
-  }
-  rpc RaftListClusterServers (RaftListClusterServersRequest) returns (RaftListClusterServersResponse) {
-  }
-  rpc RaftAddServer (RaftAddServerRequest) returns (RaftAddServerResponse) {
-  }
-  rpc RaftRemoveServer (RaftRemoveServerRequest) returns (RaftRemoveServerResponse) {
-  }
-  rpc RaftLeadershipTransfer (RaftLeadershipTransferRequest) returns (RaftLeadershipTransferResponse) {
-  }
-  rpc VolumeGrow (VolumeGrowRequest) returns (VolumeGrowResponse) {
-  }
-}
-
-//////////////////////////////////////////////////
-
-message DiskTag {
-  uint32 disk_id = 1;
-  repeated string tags = 2;
-}
-
-message Heartbeat {
-  string ip = 1;
-  uint32 port = 2;
-  string public_url = 3;
-  uint64 max_file_key = 5;
-  string data_center = 6;
-  string rack = 7;
-  uint32 admin_port = 8;
-  repeated VolumeInformationMessage volumes = 9;
-  // delta volumes
-  repeated VolumeShortInformationMessage new_volumes = 10;
-  repeated VolumeShortInformationMessage deleted_volumes = 11;
-  bool has_no_volumes = 12;
-
-  // erasure coding
-  repeated VolumeEcShardInformationMessage ec_shards = 16;
-  // delta erasure coding shards
-  repeated VolumeEcShardInformationMessage new_ec_shards = 17;
-  repeated VolumeEcShardInformationMessage deleted_ec_shards = 18;
-  bool has_no_ec_shards = 19;
-
-  map<string, uint32> max_volume_counts = 4;
-  uint32 grpc_port = 20;
-  repeated string location_uuids = 21;
-  string id = 22; // volume server id, independent of ip:port for stable identification
-
-  // state flags
-  volume_server_pb.VolumeServerState state = 23;
-
-  repeated DiskTag disk_tags = 24;
-}
-
-message HeartbeatResponse {
-  uint64 volume_size_limit = 1;
-  string leader = 2;
-  string metrics_address = 3;
-  uint32 metrics_interval_seconds = 4;
-  repeated StorageBackend storage_backends = 5;
-  repeated string duplicated_uuids = 6;
-  bool preallocate = 7;
-}
-
-message VolumeInformationMessage {
-  uint32 id = 1;
-  uint64 size = 2;
-  string collection = 3;
-  uint64 file_count = 4;
-  uint64 delete_count = 5;
-  uint64 deleted_byte_count = 6;
-  bool read_only = 7;
-  uint32 replica_placement = 8;
-  uint32 version = 9;
-  uint32 ttl = 10;
-  uint32 compact_revision = 11;
-  int64 modified_at_second = 12;
-  string remote_storage_name = 13;
-  string remote_storage_key = 14;
-  string disk_type = 15;
-  uint32 disk_id = 16;
-}
-
-message VolumeShortInformationMessage {
-  uint32 id = 1;
-  string collection = 3;
-  uint32 replica_placement = 8;
-  uint32 version = 9;
-  uint32 ttl = 10;
-  string disk_type = 15;
-  uint32 disk_id = 16;
-}
-
-message VolumeEcShardInformationMessage {
-  uint32 id = 1;
-  string collection = 2;
-  uint32 ec_index_bits = 3;
-  string disk_type = 4;
-  uint64 expire_at_sec = 5; // used to record the destruction time of ec volume
-  uint32 disk_id = 6;
-  repeated int64 shard_sizes = 7; // optimized: sizes for shards in order of set bits in ec_index_bits
-  uint64 file_count = 8;   // total needles in the .ecx index (live + tombstoned)
-  uint64 delete_count = 9; // node-local tombstones in the .ecj deletion journal
-  // fields 10-19 reserved for future upstream open-source additions.
-  // fields 20+ are owned by the enterprise fork (e.g. data_shards/parity_shards)
-  // and must not be used here without coordination.
-}
-
-message StorageBackend {
-  string type = 1;
-  string id = 2;
-  map<string, string> properties = 3;
-}
-
-message Empty {
-}
-
-message SuperBlockExtra {
-  message ErasureCoding {
-    uint32 data = 1;
-    uint32 parity = 2;
-    repeated uint32 volume_ids = 3;
-  }
-  ErasureCoding erasure_coding = 1;
-}
-
-message KeepConnectedRequest {
-  string client_type = 1;
-  string client_address = 3;
-  string version = 4;
-  string filer_group = 5;
-  string data_center = 6;
-  string rack = 7;
-}
-
-message VolumeLocation {
-  string url = 1;
-  string public_url = 2;
-  repeated uint32 new_vids = 3;
-  repeated uint32 deleted_vids = 4;
-  string leader = 5; // optional when leader is not itself
-  string data_center = 6; // optional when DataCenter is in use
-  uint32 grpc_port = 7;
-  repeated uint32 new_ec_vids = 8;
-  repeated uint32 deleted_ec_vids = 9;
-}
-
-message ClusterNodeUpdate {
-  string node_type = 1;
-  string address = 2;
-  bool is_add = 4;
-  string filer_group = 5;
-  int64 created_at_ns = 6;
-}
-
-message KeepConnectedResponse {
-  VolumeLocation volume_location = 1;
-  ClusterNodeUpdate cluster_node_update = 2;
-}
-
-message LookupVolumeRequest {
-  repeated string volume_or_file_ids = 1;
-  string collection = 2; // optional, a bit faster if provided.
-}
-message LookupVolumeResponse {
-  message VolumeIdLocation {
-    string volume_or_file_id = 1;
-    repeated Location locations = 2;
-    string error = 3;
-    string auth = 4;
-  }
-  repeated VolumeIdLocation volume_id_locations = 1;
-}
-
-message Location {
-  string url = 1;
-  string public_url = 2;
-  uint32 grpc_port = 3;
-  string data_center = 4;
-}
-
-message AssignRequest {
-  uint64 count = 1;
-  string replication = 2;
-  string collection = 3;
-  string ttl = 4;
-  string data_center = 5;
-  string rack = 6;
-  string data_node = 7;
-  uint32 memory_map_max_size_mb = 8;
-  uint32 writable_volume_count = 9;
-  string disk_type = 10;
-  uint64 expected_data_size = 11; // hint for size-aware volume selection
-}
-
-message VolumeGrowRequest {
-  uint32 writable_volume_count = 1;
-  string replication = 2;
-  string collection = 3;
-  string ttl = 4;
-  string data_center = 5;
-  string rack = 6;
-  string data_node = 7;
-  uint32 memory_map_max_size_mb = 8;
-  string disk_type = 9;
-}
-
-message AssignResponse {
-  string fid = 1;
-  uint64 count = 4;
-  string error = 5;
-  string auth = 6;
-  repeated Location replicas = 7;
-  Location location = 8;
-}
-
-message StatisticsRequest {
-  string replication = 1;
-  string collection = 2;
-  string ttl = 3;
-  string disk_type = 4;
-}
-message StatisticsResponse {
-  uint64 total_size = 4;
-  uint64 used_size = 5;
-  uint64 file_count = 6;
-}
-
-//
-// collection related
-//
-message Collection {
-  string name = 1;
-}
-message CollectionListRequest {
-  bool include_normal_volumes = 1;
-  bool include_ec_volumes = 2;
-}
-message CollectionListResponse {
-  repeated Collection collections = 1;
-}
-
-message CollectionDeleteRequest {
-  string name = 1;
-}
-message CollectionDeleteResponse {
-}
-
-//
-// volume related
-//
-message DiskInfo {
-  string type = 1;
-  int64 volume_count = 2;
-  int64 max_volume_count = 3;
-  int64 free_volume_count = 4;
-  int64 active_volume_count = 5;
-  repeated VolumeInformationMessage volume_infos = 6;
-  repeated VolumeEcShardInformationMessage ec_shard_infos = 7;
-  int64 remote_volume_count = 8;
-  uint32 disk_id = 9;
-  repeated string tags = 10;
-}
-message DataNodeInfo {
-  string id = 1;
-  map<string, DiskInfo> diskInfos = 2;
-  uint32 grpc_port = 3;
-  string address = 4; // ip:port for connecting to the volume server
-}
-message RackInfo {
-  string id = 1;
-  repeated DataNodeInfo data_node_infos = 2;
-  map<string, DiskInfo> diskInfos = 3;
-}
-message DataCenterInfo {
-  string id = 1;
-  repeated RackInfo rack_infos = 2;
-  map<string, DiskInfo> diskInfos = 3;
-}
-message TopologyInfo {
-  string id = 1;
-  repeated DataCenterInfo data_center_infos = 2;
-  map<string, DiskInfo> diskInfos = 3;
-}
-message VolumeListRequest {
-}
-message VolumeListResponse {
-  TopologyInfo topology_info = 1;
-  uint64 volume_size_limit_mb = 2;
-}
-
-message LookupEcVolumeRequest {
-  uint32 volume_id = 1;
-}
-message LookupEcVolumeResponse {
-  uint32 volume_id = 1;
-  message EcShardIdLocation {
-    uint32 shard_id = 1;
-    repeated Location locations = 2;
-  }
-  repeated EcShardIdLocation shard_id_locations = 2;
-}
-
-message VacuumVolumeRequest {
-  float garbage_threshold = 1;
-  uint32 volume_id = 2;
-  string collection = 3;
-}
-message VacuumVolumeResponse {
-}
-
-message DisableVacuumRequest {
-}
-message DisableVacuumResponse {
-}
-
-message EnableVacuumRequest {
-}
-message EnableVacuumResponse {
-}
-
-message VolumeMarkReadonlyRequest {
-  string ip = 1;
-  uint32 port = 2;
-  uint32 volume_id = 4;
-  string collection = 5;
-  uint32 replica_placement = 6;
-  uint32 version = 7;
-  uint32 ttl = 8;
-  string disk_type = 9;
-  bool is_readonly = 10;
-}
-message VolumeMarkReadonlyResponse {
-}
-
-message GetMasterConfigurationRequest {
-}
-message GetMasterConfigurationResponse {
-  string metrics_address = 1;
-  uint32 metrics_interval_seconds = 2;
-  repeated StorageBackend storage_backends = 3;
-  string default_replication = 4;
-  string leader = 5;
-  uint32 volume_size_limit_m_b = 6;
-  bool volume_preallocate = 7;
-  // MIGRATION: fields 8-9 help migrate master.toml [master.maintenance] to admin script plugin. Remove after March 2027.
-  string maintenance_scripts = 8;
-  uint32 maintenance_sleep_minutes = 9;
-}
-
-message ListClusterNodesRequest {
-  string client_type = 1;
-  string filer_group = 2;
-  int32 limit = 4;
-}
-message ListClusterNodesResponse {
-  message ClusterNode {
-    string address = 1;
-    string version = 2;
-    int64 created_at_ns = 4;
-    string data_center = 5;
-    string rack = 6;
-  }
-  repeated ClusterNode cluster_nodes = 1;
-}
-
-message LeaseAdminTokenRequest {
-  int64 previous_token = 1;
-  int64 previous_lock_time = 2;
-  string lock_name = 3;
-  string client_name = 4;
-  string message = 5;
-}
-message LeaseAdminTokenResponse {
-  int64 token = 1;
-  int64 lock_ts_ns = 2;
-}
-
-message ReleaseAdminTokenRequest {
-  int64 previous_token = 1;
-  int64 previous_lock_time = 2;
-  string lock_name = 3;
-}
-message ReleaseAdminTokenResponse {
-}
-
-message PingRequest {
-  string target = 1; // default to ping itself
-  string target_type = 2;
-}
-message PingResponse {
-  int64 start_time_ns = 1;
-  int64 remote_time_ns = 2;
-  int64 stop_time_ns = 3;
-}
-
-message RaftAddServerRequest {
-  string id = 1;
-  string address = 2;
-  bool voter = 3;
-}
-message RaftAddServerResponse {
-}
-
-message RaftRemoveServerRequest {
-  string id = 1;
-  bool force = 2;
-}
-message RaftRemoveServerResponse {
-}
-
-message RaftListClusterServersRequest {
-}
-message RaftListClusterServersResponse {
-  message ClusterServers {
-    string id = 1;
-    string address = 2;
-    string suffrage = 3;
-    bool   isLeader = 4;
-  }
-  repeated ClusterServers cluster_servers = 1;
-}
-
-message RaftLeadershipTransferRequest {
-  string target_id = 1;       // Optional: target server ID. If empty, transfers to any eligible follower
-  string target_address = 2;  // Optional: target server address. Required if target_id is specified
-}
-message RaftLeadershipTransferResponse {
-  string previous_leader = 1;
-  string new_leader = 2;
-}
-
-message VolumeGrowResponse {
-}

seaweed-volume/proto/remote.proto

@@ -1,76 +0,0 @@
-syntax = "proto3";
-
-package remote_pb;
-
-option go_package = "github.com/seaweedfs/seaweedfs/weed/pb/remote_pb";
-option java_package = "seaweedfs.client";
-option java_outer_classname = "FilerProto";
-
-/////////////////////////
-// Remote Storage related
-/////////////////////////
-message RemoteConf {
-  string type = 1;
-  string name = 2;
-  string s3_access_key = 4;
-  string s3_secret_key = 5;
-  string s3_region = 6;
-  string s3_endpoint = 7;
-  string s3_storage_class = 8;
-  bool s3_force_path_style = 9;
-  bool s3_support_tagging = 13;
-  bool s3_v4_signature = 11;
-
-  string gcs_google_application_credentials = 10;
-  string gcs_project_id = 12;
-
-  string azure_account_name = 15;
-  string azure_account_key = 16;
-
-  string backblaze_key_id = 20;
-  string backblaze_application_key = 21;
-  string backblaze_endpoint = 22;
-  string backblaze_region = 23;
-
-  string aliyun_access_key = 25;
-  string aliyun_secret_key = 26;
-  string aliyun_endpoint = 27;
-  string aliyun_region = 28;
-
-  string tencent_secret_id = 30;
-  string tencent_secret_key = 31;
-  string tencent_endpoint = 32;
-
-  string baidu_access_key = 35;
-  string baidu_secret_key = 36;
-  string baidu_endpoint = 37;
-  string baidu_region = 38;
-
-  string wasabi_access_key = 40;
-  string wasabi_secret_key = 41;
-  string wasabi_endpoint = 42;
-  string wasabi_region = 43;
-
-  string filebase_access_key = 60;
-  string filebase_secret_key = 61;
-  string filebase_endpoint = 62;
-
-  string storj_access_key = 65;
-  string storj_secret_key = 66;
-  string storj_endpoint = 67;
-
-  string contabo_access_key = 68;
-  string contabo_secret_key = 69;
-  string contabo_endpoint = 70;
-  string contabo_region = 71;
-}
-
-message RemoteStorageMapping {
-  map<string,RemoteStorageLocation> mappings = 1;
-  string primary_bucket_storage_name = 2;
-}
-message RemoteStorageLocation {
-  string name = 1;
-  string bucket = 2;
-  string path = 3;
-}

seaweed-volume/proto/volume_server.proto

@@ -1,760 +0,0 @@
-syntax = "proto3";
-
-package volume_server_pb;
-option go_package = "github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb";
-
-import "remote.proto";
-
-//////////////////////////////////////////////////
-
-// Persistent state for volume servers.
-message VolumeServerState {
-    // whether the server is in maintenance (i.e. read-only) mode.
-    bool maintenance = 1;
-    // incremental version counter
-    uint32 version = 2;
-}
-
-//////////////////////////////////////////////////
-
-service VolumeServer {
-    //Experts only: takes multiple fid parameters. This function does not propagate deletes to replicas.
-    rpc BatchDelete (BatchDeleteRequest) returns (BatchDeleteResponse) {
-    }
-
-    rpc VacuumVolumeCheck (VacuumVolumeCheckRequest) returns (VacuumVolumeCheckResponse) {
-    }
-    rpc VacuumVolumeCompact (VacuumVolumeCompactRequest) returns (stream VacuumVolumeCompactResponse) {
-    }
-    rpc VacuumVolumeCommit (VacuumVolumeCommitRequest) returns (VacuumVolumeCommitResponse) {
-    }
-    rpc VacuumVolumeCleanup (VacuumVolumeCleanupRequest) returns (VacuumVolumeCleanupResponse) {
-    }
-
-    rpc DeleteCollection (DeleteCollectionRequest) returns (DeleteCollectionResponse) {
-    }
-    rpc AllocateVolume (AllocateVolumeRequest) returns (AllocateVolumeResponse) {
-    }
-
-    rpc VolumeSyncStatus (VolumeSyncStatusRequest) returns (VolumeSyncStatusResponse) {
-    }
-    rpc VolumeIncrementalCopy (VolumeIncrementalCopyRequest) returns (stream VolumeIncrementalCopyResponse) {
-    }
-
-    rpc VolumeMount (VolumeMountRequest) returns (VolumeMountResponse) {
-    }
-    rpc VolumeUnmount (VolumeUnmountRequest) returns (VolumeUnmountResponse) {
-    }
-    rpc VolumeDelete (VolumeDeleteRequest) returns (VolumeDeleteResponse) {
-    }
-    rpc VolumeMarkReadonly (VolumeMarkReadonlyRequest) returns (VolumeMarkReadonlyResponse) {
-    }
-    rpc VolumeMarkWritable (VolumeMarkWritableRequest) returns (VolumeMarkWritableResponse) {
-    }
-    rpc VolumeConfigure (VolumeConfigureRequest) returns (VolumeConfigureResponse) {
-    }
-    rpc VolumeStatus (VolumeStatusRequest) returns (VolumeStatusResponse) {
-    }
-
-    rpc GetState (GetStateRequest) returns (GetStateResponse) {
-    }
-    rpc SetState (SetStateRequest) returns (SetStateResponse) {
-    }
-
-    // copy the .idx .dat files, and mount this volume
-    rpc VolumeCopy (VolumeCopyRequest) returns (stream VolumeCopyResponse) {
-    }
-    rpc ReadVolumeFileStatus (ReadVolumeFileStatusRequest) returns (ReadVolumeFileStatusResponse) {
-    }
-    rpc CopyFile (CopyFileRequest) returns (stream CopyFileResponse) {
-    }
-    rpc ReceiveFile (stream ReceiveFileRequest) returns (ReceiveFileResponse) {
-    }
-
-    rpc ReadNeedleBlob (ReadNeedleBlobRequest) returns (ReadNeedleBlobResponse) {
-    }
-    rpc ReadNeedleMeta (ReadNeedleMetaRequest) returns (ReadNeedleMetaResponse) {
-    }
-    rpc WriteNeedleBlob (WriteNeedleBlobRequest) returns (WriteNeedleBlobResponse) {
-    }
-    rpc ReadAllNeedles (ReadAllNeedlesRequest) returns (stream ReadAllNeedlesResponse) {
-    }
-
-    rpc VolumeTailSender (VolumeTailSenderRequest) returns (stream VolumeTailSenderResponse) {
-    }
-    rpc VolumeTailReceiver (VolumeTailReceiverRequest) returns (VolumeTailReceiverResponse) {
-    }
-
-    // erasure coding
-    rpc VolumeEcShardsGenerate (VolumeEcShardsGenerateRequest) returns (VolumeEcShardsGenerateResponse) {
-    }
-    rpc VolumeEcShardsRebuild (VolumeEcShardsRebuildRequest) returns (VolumeEcShardsRebuildResponse) {
-    }
-    rpc VolumeEcShardsCopy (VolumeEcShardsCopyRequest) returns (VolumeEcShardsCopyResponse) {
-    }
-    rpc VolumeEcShardsDelete (VolumeEcShardsDeleteRequest) returns (VolumeEcShardsDeleteResponse) {
-    }
-    rpc VolumeEcShardsMount (VolumeEcShardsMountRequest) returns (VolumeEcShardsMountResponse) {
-    }
-    rpc VolumeEcShardsUnmount (VolumeEcShardsUnmountRequest) returns (VolumeEcShardsUnmountResponse) {
-    }
-    rpc VolumeEcShardRead (VolumeEcShardReadRequest) returns (stream VolumeEcShardReadResponse) {
-    }
-    rpc VolumeEcBlobDelete (VolumeEcBlobDeleteRequest) returns (VolumeEcBlobDeleteResponse) {
-    }
-    rpc VolumeEcShardsToVolume (VolumeEcShardsToVolumeRequest) returns (VolumeEcShardsToVolumeResponse) {
-    }
-    rpc VolumeEcShardsInfo (VolumeEcShardsInfoRequest) returns (VolumeEcShardsInfoResponse) {
-    }
-
-    // tiered storage
-    rpc VolumeTierMoveDatToRemote (VolumeTierMoveDatToRemoteRequest) returns (stream VolumeTierMoveDatToRemoteResponse) {
-    }
-    rpc VolumeTierMoveDatFromRemote (VolumeTierMoveDatFromRemoteRequest) returns (stream VolumeTierMoveDatFromRemoteResponse) {
-    }
-
-    rpc VolumeServerStatus (VolumeServerStatusRequest) returns (VolumeServerStatusResponse) {
-    }
-    rpc VolumeServerLeave (VolumeServerLeaveRequest) returns (VolumeServerLeaveResponse) {
-    }
-
-    // remote storage
-    rpc FetchAndWriteNeedle (FetchAndWriteNeedleRequest) returns (FetchAndWriteNeedleResponse) {
-    }
-
-    // scrubbing
-    rpc ScrubVolume (ScrubVolumeRequest) returns (ScrubVolumeResponse) {
-    }
-    rpc ScrubEcVolume (ScrubEcVolumeRequest) returns (ScrubEcVolumeResponse) {
-    }
-
-    // <experimental> query
-    rpc Query (QueryRequest) returns (stream QueriedStripe) {
-    }
-
-    rpc VolumeNeedleStatus (VolumeNeedleStatusRequest) returns (VolumeNeedleStatusResponse) {
-    }
-
-    rpc Ping (PingRequest) returns (PingResponse) {
-    }
-
-}
-
-//////////////////////////////////////////////////
-
-message BatchDeleteRequest {
-    repeated string file_ids = 1;
-    bool skip_cookie_check = 2;
-}
-
-message BatchDeleteResponse {
-    repeated DeleteResult results = 1;
-}
-message DeleteResult {
-    string file_id = 1;
-    int32 status = 2;
-    string error = 3;
-    uint32 size = 4;
-    uint32 version = 5;
-}
-
-message Empty {
-}
-
-message VacuumVolumeCheckRequest {
-    uint32 volume_id = 1;
-}
-message VacuumVolumeCheckResponse {
-    double garbage_ratio = 1;
-}
-
-message VacuumVolumeCompactRequest {
-    uint32 volume_id = 1;
-    int64 preallocate = 2;
-}
-message VacuumVolumeCompactResponse {
-    int64 processed_bytes = 1;
-    float load_avg_1m = 2;
-}
-
-message VacuumVolumeCommitRequest {
-    uint32 volume_id = 1;
-}
-message VacuumVolumeCommitResponse {
-    bool is_read_only = 1;
-    uint64 volume_size = 2;
-}
-
-message VacuumVolumeCleanupRequest {
-    uint32 volume_id = 1;
-}
-message VacuumVolumeCleanupResponse {
-}
-
-message DeleteCollectionRequest {
-    string collection = 1;
-}
-message DeleteCollectionResponse {
-}
-
-message AllocateVolumeRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    int64 preallocate = 3;
-    string replication = 4;
-    string ttl = 5;
-    uint32 memory_map_max_size_mb = 6;
-    string disk_type = 7;
-    uint32 version = 8;
-}
-message AllocateVolumeResponse {
-}
-
-message VolumeSyncStatusRequest {
-    uint32 volume_id = 1;
-}
-message VolumeSyncStatusResponse {
-    uint32 volume_id = 1;
-    string collection = 2;
-    string replication = 4;
-    string ttl = 5;
-    uint64 tail_offset = 6;
-    uint32 compact_revision = 7;
-    uint64 idx_file_size = 8;
-    uint32 version = 9;
-}
-
-message VolumeIncrementalCopyRequest {
-    uint32 volume_id = 1;
-    uint64 since_ns = 2;
-}
-message VolumeIncrementalCopyResponse {
-    bytes file_content = 1;
-}
-
-message VolumeMountRequest {
-    uint32 volume_id = 1;
-}
-message VolumeMountResponse {
-}
-
-message VolumeUnmountRequest {
-    uint32 volume_id = 1;
-}
-message VolumeUnmountResponse {
-}
-
-message VolumeDeleteRequest {
-    uint32 volume_id = 1;
-    bool only_empty = 2;
-}
-message VolumeDeleteResponse {
-}
-
-message VolumeMarkReadonlyRequest {
-    uint32 volume_id = 1;
-    bool persist = 2;
-}
-message VolumeMarkReadonlyResponse {
-}
-
-message VolumeMarkWritableRequest {
-    uint32 volume_id = 1;
-}
-message VolumeMarkWritableResponse {
-}
-
-message VolumeConfigureRequest {
-    uint32 volume_id = 1;
-    string replication = 2;
-}
-message VolumeConfigureResponse {
-    string error = 1;
-}
-
-message VolumeStatusRequest {
-    uint32 volume_id = 1;
-}
-message VolumeStatusResponse {
-    bool is_read_only = 1;
-    uint64 volume_size = 2;
-    uint64 file_count = 3;
-    uint64 file_deleted_count = 4;
-}
-
-message GetStateRequest {
-}
-message GetStateResponse {
-    VolumeServerState state = 1;
-}
-
-message SetStateRequest {
-    // SetState updates *all* volume server flags at once. Retrieve state with GetState(),
-    // modify individual flags as required, then call this RPC to update.
-    VolumeServerState state = 1;
-}
-message SetStateResponse {
-    VolumeServerState state = 1;
-}
-
-message VolumeCopyRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    string replication = 3;
-    string ttl = 4;
-    string source_data_node = 5;
-    string disk_type = 6;
-    int64 io_byte_per_second = 7;
-}
-message VolumeCopyResponse {
-    uint64 last_append_at_ns = 1;
-    int64 processed_bytes = 2;
-}
-
-message CopyFileRequest {
-    uint32 volume_id = 1;
-    string ext = 2;
-    uint32 compaction_revision = 3;
-    uint64 stop_offset = 4;
-    string collection = 5;
-    bool is_ec_volume = 6;
-    bool ignore_source_file_not_found = 7;
-}
-message CopyFileResponse {
-    bytes file_content = 1;
-    int64 modified_ts_ns = 2;
-}
-
-message ReceiveFileRequest {
-    oneof data {
-        ReceiveFileInfo info = 1;
-        bytes file_content = 2;
-    }
-}
-
-message ReceiveFileInfo {
-    uint32 volume_id = 1;
-    string ext = 2;
-    string collection = 3;
-    bool is_ec_volume = 4;
-    uint32 shard_id = 5;
-    uint64 file_size = 6;
-    uint32 disk_id = 7;  // EC shard disk; 0 = auto-select (see VolumeEcShardsCopyRequest.disk_id)
-}
-
-message ReceiveFileResponse {
-    uint64 bytes_written = 1;
-    string error = 2;
-}
-
-message ReadNeedleBlobRequest {
-    uint32 volume_id = 1;
-    int64 offset = 3; // actual offset
-    int32 size = 4;
-}
-message ReadNeedleBlobResponse {
-    bytes needle_blob = 1;
-}
-
-message ReadNeedleMetaRequest {
-    uint32 volume_id = 1;
-    uint64 needle_id = 2;
-    int64 offset = 3; // actual offset
-    int32 size = 4;
-}
-message ReadNeedleMetaResponse {
-    uint32 cookie = 1;
-    uint64 last_modified = 2;
-    uint32 crc = 3;
-    string ttl = 4;
-    uint64 append_at_ns = 5;
-}
-
-message WriteNeedleBlobRequest {
-    uint32 volume_id = 1;
-    uint64 needle_id = 2;
-    int32 size = 3;
-    bytes needle_blob = 4;
-}
-message WriteNeedleBlobResponse {
-}
-
-message ReadAllNeedlesRequest {
-    repeated uint32 volume_ids = 1;
-}
-message ReadAllNeedlesResponse {
-    uint32 volume_id = 1;
-    uint64 needle_id = 2;
-    uint32 cookie = 3;
-    bytes needle_blob = 5;
-    bool needle_blob_compressed = 6;
-    uint64 last_modified = 7;
-    uint32 crc = 8;
-    bytes name = 9;
-    bytes mime = 10;
-}
-
-message VolumeTailSenderRequest {
-    uint32 volume_id = 1;
-    uint64 since_ns = 2;
-    uint32 idle_timeout_seconds = 3;
-}
-message VolumeTailSenderResponse {
-    bytes needle_header = 1;
-    bytes needle_body = 2;
-    bool is_last_chunk = 3;
-    uint32 version = 4;
-}
-
-message VolumeTailReceiverRequest {
-    uint32 volume_id = 1;
-    uint64 since_ns = 2;
-    uint32 idle_timeout_seconds = 3;
-    string source_volume_server = 4;
-}
-message VolumeTailReceiverResponse {
-}
-
-message VolumeEcShardsGenerateRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-}
-message VolumeEcShardsGenerateResponse {
-}
-
-message VolumeEcShardsRebuildRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-}
-message VolumeEcShardsRebuildResponse {
-    repeated uint32 rebuilt_shard_ids = 1;
-}
-
-message VolumeEcShardsCopyRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    repeated uint32 shard_ids = 3;
-    bool copy_ecx_file = 4;
-    string source_data_node = 5;
-    bool copy_ecj_file = 6;
-    bool copy_vif_file = 7;
-    uint32 disk_id = 8;  // Target disk ID for storing EC shards
-}
-message VolumeEcShardsCopyResponse {
-}
-
-message VolumeEcShardsDeleteRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    repeated uint32 shard_ids = 3;
-}
-message VolumeEcShardsDeleteResponse {
-}
-
-message VolumeEcShardsMountRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    repeated uint32 shard_ids = 3;
-}
-message VolumeEcShardsMountResponse {
-}
-
-message VolumeEcShardsUnmountRequest {
-    uint32 volume_id = 1;
-    repeated uint32 shard_ids = 3;
-}
-message VolumeEcShardsUnmountResponse {
-}
-
-message VolumeEcShardReadRequest {
-    uint32 volume_id = 1;
-    uint32 shard_id = 2;
-    int64 offset = 3;
-    int64 size = 4;
-    uint64 file_key = 5;
-}
-message VolumeEcShardReadResponse {
-    bytes data = 1;
-    bool is_deleted = 2;
-}
-
-message VolumeEcBlobDeleteRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    uint64 file_key = 3;
-    uint32 version = 4;
-}
-message VolumeEcBlobDeleteResponse {
-}
-
-message VolumeEcShardsToVolumeRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-}
-message VolumeEcShardsToVolumeResponse {
-}
-
-message VolumeEcShardsInfoRequest {
-    uint32 volume_id = 1;
-}
-message VolumeEcShardsInfoResponse {
-    repeated EcShardInfo ec_shard_infos = 1;
-    uint64 volume_size = 2;
-    uint64 file_count = 3;
-    uint64 file_deleted_count = 4;
-}
-
-message EcShardInfo {
-    uint32 shard_id = 1;
-    int64 size = 2;
-    string collection = 3;
-    uint32 volume_id = 4;
-}
-
-message ReadVolumeFileStatusRequest {
-    uint32 volume_id = 1;
-}
-message ReadVolumeFileStatusResponse {
-    uint32 volume_id = 1;
-    uint64 idx_file_timestamp_seconds = 2;
-    uint64 idx_file_size = 3;
-    uint64 dat_file_timestamp_seconds = 4;
-    uint64 dat_file_size = 5;
-    uint64 file_count = 6;
-    uint32 compaction_revision = 7;
-    string collection = 8;
-    string disk_type = 9;
-    VolumeInfo volume_info = 10;
-    uint32 version = 11;
-}
-
-message DiskStatus {
-    string dir = 1;
-    uint64 all = 2;
-    uint64 used = 3;
-    uint64 free = 4;
-    float percent_free = 5;
-    float percent_used = 6;
-    string disk_type = 7;
-}
-
-message MemStatus {
-    int32 goroutines = 1;
-    uint64 all = 2;
-    uint64 used = 3;
-    uint64 free = 4;
-    uint64 self = 5;
-    uint64 heap = 6;
-    uint64 stack = 7;
-}
-
-// tired storage on volume servers
-message RemoteFile {
-    string backend_type = 1;
-    string backend_id = 2;
-    string key = 3;
-    uint64 offset = 4;
-    uint64 file_size = 5;
-    uint64 modified_time = 6;
-    string extension = 7;
-}
-message VolumeInfo {
-    repeated RemoteFile files = 1;
-    uint32 version = 2;
-    string replication = 3;
-    uint32 bytes_offset = 4;
-    int64 dat_file_size = 5; // store the original dat file size
-    uint64 expire_at_sec = 6; // expiration time of ec volume
-    bool read_only = 7;
-    EcShardConfig ec_shard_config = 8; // EC shard configuration (optional, null = use default 10+4)
-}
-
-// EcShardConfig specifies erasure coding shard configuration
-message EcShardConfig {
-    uint32 data_shards = 1;   // Number of data shards (e.g., 10)
-    uint32 parity_shards = 2; // Number of parity shards (e.g., 4)
-}
-message OldVersionVolumeInfo {
-    repeated RemoteFile files = 1;
-    uint32 version = 2;
-    string replication = 3;
-    uint32 BytesOffset = 4;
-    int64 dat_file_size = 5; // store the original dat file size
-    uint64 DestroyTime = 6; // expiration time of ec volume
-    bool read_only = 7;
-}
-
-// tiered storage
-message VolumeTierMoveDatToRemoteRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    string destination_backend_name = 3;
-    bool keep_local_dat_file = 4;
-}
-message VolumeTierMoveDatToRemoteResponse {
-    int64 processed = 1;
-    float processedPercentage = 2;
-}
-
-message VolumeTierMoveDatFromRemoteRequest {
-    uint32 volume_id = 1;
-    string collection = 2;
-    bool keep_remote_dat_file = 3;
-}
-message VolumeTierMoveDatFromRemoteResponse {
-    int64 processed = 1;
-    float processedPercentage = 2;
-}
-
-message VolumeServerStatusRequest {
-
-}
-message VolumeServerStatusResponse {
-    repeated DiskStatus disk_statuses = 1;
-    MemStatus memory_status = 2;
-    string version = 3;
-    string data_center = 4;
-    string rack = 5;
-    VolumeServerState state = 6;
-}
-
-message VolumeServerLeaveRequest {
-}
-message VolumeServerLeaveResponse {
-}
-
-// remote storage
-message FetchAndWriteNeedleRequest {
-    uint32 volume_id = 1;
-    uint64 needle_id = 2;
-    uint32 cookie = 3;
-    int64 offset = 4;
-    int64 size = 5;
-    message Replica {
-        string url = 1;
-        string public_url = 2;
-        int32 grpc_port = 3;
-    }
-    repeated Replica replicas = 6;
-    string auth = 7;
-    // remote conf
-    remote_pb.RemoteConf remote_conf = 15;
-    remote_pb.RemoteStorageLocation remote_location = 16;
-}
-message FetchAndWriteNeedleResponse {
-    string e_tag = 1;
-}
-
-enum VolumeScrubMode {
-    UNKNOWN = 0;
-    INDEX = 1;
-    FULL = 2;
-    LOCAL = 3;
-}
-
-message ScrubVolumeRequest {
-    VolumeScrubMode mode = 1;
-    // optional list of volume IDs to scrub. if empty, all volumes for the server are scrubbed.
-    repeated uint32 volume_ids = 2;
-    bool mark_broken_volumes_readonly = 3;
-}
-message ScrubVolumeResponse {
-    uint64 total_volumes = 1;
-    uint64 total_files = 2;
-    repeated uint32 broken_volume_ids = 3;
-    repeated string details = 4;
-}
-
-message ScrubEcVolumeRequest {
-    VolumeScrubMode mode = 1;
-    // optional list of volume IDs to scrub. if empty, all EC volumes for the server are scrubbed.
-    repeated uint32 volume_ids = 2;
-}
-message ScrubEcVolumeResponse {
-    uint64 total_volumes = 1;
-    uint64 total_files = 2;
-    repeated uint32 broken_volume_ids = 3;
-    repeated EcShardInfo broken_shard_infos = 4;
-    repeated string details = 5;
-}
-
-// select on volume servers
-message QueryRequest {
-    repeated string selections = 1;
-    repeated string from_file_ids = 2;
-    message Filter {
-        string field = 1;
-        string operand = 2;
-        string value = 3;
-    }
-    Filter filter = 3;
-
-    message InputSerialization {
-        // NONE | GZIP | BZIP2
-        string compression_type = 1;
-        message CSVInput {
-            string file_header_info = 1; // Valid values: NONE | USE | IGNORE
-            string record_delimiter = 2; // Default: \n
-            string field_delimiter = 3; // Default: ,
-            string quote_character = 4; // Default: "
-            string quote_escape_character = 5; // Default: "
-            string comments = 6; // Default: #
-            // If true, records might contain record delimiters within quote characters
-            bool allow_quoted_record_delimiter = 7; // default False.
-        }
-        message JSONInput {
-            string type = 1; // Valid values: DOCUMENT | LINES
-        }
-        message ParquetInput {
-        }
-
-        CSVInput csv_input = 2;
-        JSONInput json_input = 3;
-        ParquetInput parquet_input = 4;
-    }
-    InputSerialization input_serialization = 4;
-
-    message OutputSerialization {
-        message CSVOutput {
-            string quote_fields = 1; // Valid values: ALWAYS | ASNEEDED
-            string record_delimiter = 2; // Default: \n
-            string field_delimiter = 3; // Default: ,
-            string quote_character = 4; // Default: "
-            string quote_escape_character = 5; // Default: "
-        }
-        message JSONOutput {
-            string record_delimiter = 1;
-        }
-
-        CSVOutput csv_output = 2;
-        JSONOutput json_output = 3;
-    }
-
-    OutputSerialization output_serialization = 5;
-}
-message QueriedStripe {
-    bytes records = 1;
-}
-
-message VolumeNeedleStatusRequest {
-    uint32 volume_id = 1;
-    uint64 needle_id = 2;
-}
-message VolumeNeedleStatusResponse {
-    uint64 needle_id = 1;
-    uint32 cookie = 2;
-    uint32 size = 3;
-    uint64 last_modified = 4;
-    uint32 crc = 5;
-    string ttl = 6;
-}
-
-message PingRequest {
-    string target = 1; // default to ping itself
-    string target_type = 2;
-}
-message PingResponse {
-    int64 start_time_ns = 1;
-    int64 remote_time_ns = 2;
-    int64 stop_time_ns = 3;
-}

seaweed-volume/src/images.rs

@@ -1,275 +0,0 @@
-//! JPEG EXIF orientation auto-fix, matching Go's `FixJpgOrientation`.
-//!
-//! Reads the EXIF orientation tag from JPEG data and rotates/flips the image
-//! to normalize it to orientation 1 (top-left). If EXIF parsing fails or
-//! orientation is already normal, returns the original data unchanged.
-
-use std::io::Cursor;
-
-use image::{DynamicImage, GenericImageView, ImageFormat, RgbaImage};
-
-/// EXIF orientation tag values.
-/// See: <http://sylvana.net/jpegcrop/exif_orientation.html>
-const TOP_LEFT_SIDE: u32 = 1;
-const TOP_RIGHT_SIDE: u32 = 2;
-const BOTTOM_RIGHT_SIDE: u32 = 3;
-const BOTTOM_LEFT_SIDE: u32 = 4;
-const LEFT_SIDE_TOP: u32 = 5;
-const RIGHT_SIDE_TOP: u32 = 6;
-const RIGHT_SIDE_BOTTOM: u32 = 7;
-const LEFT_SIDE_BOTTOM: u32 = 8;
-
-/// Fix JPEG orientation based on EXIF data.
-///
-/// Reads the EXIF orientation tag and applies the appropriate rotation/flip
-/// to normalize the image to orientation 1 (top-left). Re-encodes as JPEG.
-///
-/// Returns the original data unchanged if:
-/// - EXIF data cannot be parsed
-/// - No orientation tag is present
-/// - Orientation is already 1 (normal)
-/// - Image decoding or re-encoding fails
-pub fn fix_jpg_orientation(data: &[u8]) -> Vec<u8> {
-    // Parse EXIF data
-    let orientation = match read_exif_orientation(data) {
-        Some(o) => o,
-        None => return data.to_vec(),
-    };
-
-    // Orientation 1 means normal — no transformation needed
-    if orientation == TOP_LEFT_SIDE {
-        return data.to_vec();
-    }
-
-    // Determine rotation angle and flip mode
-    let (angle, flip_horizontal) = match orientation {
-        TOP_RIGHT_SIDE => (0, true),
-        BOTTOM_RIGHT_SIDE => (180, false),
-        BOTTOM_LEFT_SIDE => (180, true),
-        LEFT_SIDE_TOP => (-90, true),
-        RIGHT_SIDE_TOP => (-90, false),
-        RIGHT_SIDE_BOTTOM => (90, true),
-        LEFT_SIDE_BOTTOM => (90, false),
-        _ => return data.to_vec(),
-    };
-
-    // Decode the image
-    let src_image = match image::load_from_memory_with_format(data, ImageFormat::Jpeg) {
-        Ok(img) => img,
-        Err(_) => return data.to_vec(),
-    };
-
-    // Apply rotation then flip (matching Go's flip(rotate(img, angle), flipMode))
-    let transformed = flip_horizontal_if(rotate(src_image, angle), flip_horizontal);
-
-    // Re-encode as JPEG
-    let mut buf = Cursor::new(Vec::new());
-    match transformed.write_to(&mut buf, ImageFormat::Jpeg) {
-        Ok(_) => buf.into_inner(),
-        Err(_) => data.to_vec(),
-    }
-}
-
-/// Read the EXIF orientation tag from JPEG data.
-/// Returns None if EXIF cannot be parsed or orientation tag is not present.
-fn read_exif_orientation(data: &[u8]) -> Option<u32> {
-    let exif_reader = exif::Reader::new();
-    let mut cursor = Cursor::new(data);
-    let exif_data = exif_reader.read_from_container(&mut cursor).ok()?;
-
-    let orientation_field = exif_data.get_field(exif::Tag::Orientation, exif::In::PRIMARY)?;
-    match orientation_field.value {
-        exif::Value::Short(ref v) if !v.is_empty() => Some(v[0] as u32),
-        _ => orientation_field.value.get_uint(0),
-    }
-}
-
-/// Rotate an image by the given angle (counter-clockwise, in degrees).
-/// Matches Go's rotate function.
-fn rotate(img: DynamicImage, angle: i32) -> DynamicImage {
-    let (width, height) = img.dimensions();
-
-    match angle {
-        90 => {
-            // 90 degrees counter-clockwise
-            let new_w = height;
-            let new_h = width;
-            let mut out = RgbaImage::new(new_w, new_h);
-            for y in 0..new_h {
-                for x in 0..new_w {
-                    out.put_pixel(x, y, img.get_pixel(new_h - 1 - y, x));
-                }
-            }
-            DynamicImage::ImageRgba8(out)
-        }
-        -90 => {
-            // 90 degrees clockwise (or 270 counter-clockwise)
-            let new_w = height;
-            let new_h = width;
-            let mut out = RgbaImage::new(new_w, new_h);
-            for y in 0..new_h {
-                for x in 0..new_w {
-                    out.put_pixel(x, y, img.get_pixel(y, new_w - 1 - x));
-                }
-            }
-            DynamicImage::ImageRgba8(out)
-        }
-        180 | -180 => {
-            let mut out = RgbaImage::new(width, height);
-            for y in 0..height {
-                for x in 0..width {
-                    out.put_pixel(x, y, img.get_pixel(width - 1 - x, height - 1 - y));
-                }
-            }
-            DynamicImage::ImageRgba8(out)
-        }
-        _ => img,
-    }
-}
-
-/// Flip the image horizontally if requested.
-/// In Go, flipMode 2 == FlipHorizontal. We simplify since only horizontal flip is used.
-fn flip_horizontal_if(img: DynamicImage, do_flip: bool) -> DynamicImage {
-    if !do_flip {
-        return img;
-    }
-    let (width, height) = img.dimensions();
-    let mut out = RgbaImage::new(width, height);
-    for y in 0..height {
-        for x in 0..width {
-            out.put_pixel(x, y, img.get_pixel(width - 1 - x, y));
-        }
-    }
-    DynamicImage::ImageRgba8(out)
-}
-
-/// Returns true if the given MIME type or file path extension indicates a JPEG file.
-pub fn is_jpeg(mime_type: &str, path: &str) -> bool {
-    if mime_type == "image/jpeg" {
-        return true;
-    }
-    let lower = path.to_lowercase();
-    lower.ends_with(".jpg") || lower.ends_with(".jpeg")
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_non_jpeg_data_returned_unchanged() {
-        let data = b"not a jpeg file at all";
-        let result = fix_jpg_orientation(data);
-        assert_eq!(result, data);
-    }
-
-    #[test]
-    fn test_jpeg_without_exif_returned_unchanged() {
-        // Create a minimal JPEG without EXIF data
-        let img = DynamicImage::ImageRgba8(RgbaImage::new(2, 2));
-        let mut buf = Cursor::new(Vec::new());
-        img.write_to(&mut buf, ImageFormat::Jpeg).unwrap();
-        let jpeg_data = buf.into_inner();
-
-        let result = fix_jpg_orientation(&jpeg_data);
-        // Should return data unchanged (no EXIF orientation tag)
-        // Just verify it's still valid JPEG
-        assert!(!result.is_empty());
-        assert_eq!(&result[0..2], &[0xFF, 0xD8]); // JPEG magic bytes
-    }
-
-    #[test]
-    fn test_is_jpeg() {
-        assert!(is_jpeg("image/jpeg", ""));
-        assert!(is_jpeg("", "/3,abc.jpg"));
-        assert!(is_jpeg("", "/3,abc.JPEG"));
-        assert!(is_jpeg("application/octet-stream", "/3,abc.JPG"));
-        assert!(!is_jpeg("image/png", "/3,abc.png"));
-        assert!(!is_jpeg("", "/3,abc.png"));
-    }
-
-    #[test]
-    fn test_rotate_180() {
-        // Create a 2x2 image with distinct pixel colors
-        let mut img = RgbaImage::new(2, 2);
-        img.put_pixel(0, 0, image::Rgba([255, 0, 0, 255])); // red top-left
-        img.put_pixel(1, 0, image::Rgba([0, 255, 0, 255])); // green top-right
-        img.put_pixel(0, 1, image::Rgba([0, 0, 255, 255])); // blue bottom-left
-        img.put_pixel(1, 1, image::Rgba([255, 255, 0, 255])); // yellow bottom-right
-        let dynamic = DynamicImage::ImageRgba8(img);
-
-        let rotated = rotate(dynamic, 180);
-        let (w, h) = rotated.dimensions();
-        assert_eq!((w, h), (2, 2));
-        // After 180 rotation: top-left should be yellow, top-right should be blue
-        assert_eq!(rotated.get_pixel(0, 0), image::Rgba([255, 255, 0, 255]));
-        assert_eq!(rotated.get_pixel(1, 0), image::Rgba([0, 0, 255, 255]));
-        assert_eq!(rotated.get_pixel(0, 1), image::Rgba([0, 255, 0, 255]));
-        assert_eq!(rotated.get_pixel(1, 1), image::Rgba([255, 0, 0, 255]));
-    }
-
-    #[test]
-    fn test_rotate_90_ccw() {
-        // Create 3x2 image (width=3, height=2)
-        let mut img = RgbaImage::new(3, 2);
-        img.put_pixel(0, 0, image::Rgba([1, 0, 0, 255]));
-        img.put_pixel(1, 0, image::Rgba([2, 0, 0, 255]));
-        img.put_pixel(2, 0, image::Rgba([3, 0, 0, 255]));
-        img.put_pixel(0, 1, image::Rgba([4, 0, 0, 255]));
-        img.put_pixel(1, 1, image::Rgba([5, 0, 0, 255]));
-        img.put_pixel(2, 1, image::Rgba([6, 0, 0, 255]));
-        let dynamic = DynamicImage::ImageRgba8(img);
-
-        let rotated = rotate(dynamic, 90);
-        let (w, h) = rotated.dimensions();
-        // 90 CCW: width=3,height=2 -> new_w=2, new_h=3
-        assert_eq!((w, h), (2, 3));
-        // Top-right (2,0) should move to top-left (0,0) in CCW 90
-        assert_eq!(rotated.get_pixel(0, 0)[0], 3);
-        assert_eq!(rotated.get_pixel(1, 0)[0], 6);
-    }
-
-    #[test]
-    fn test_rotate_neg90_cw() {
-        // Create 3x2 image
-        let mut img = RgbaImage::new(3, 2);
-        img.put_pixel(0, 0, image::Rgba([1, 0, 0, 255]));
-        img.put_pixel(1, 0, image::Rgba([2, 0, 0, 255]));
-        img.put_pixel(2, 0, image::Rgba([3, 0, 0, 255]));
-        img.put_pixel(0, 1, image::Rgba([4, 0, 0, 255]));
-        img.put_pixel(1, 1, image::Rgba([5, 0, 0, 255]));
-        img.put_pixel(2, 1, image::Rgba([6, 0, 0, 255]));
-        let dynamic = DynamicImage::ImageRgba8(img);
-
-        let rotated = rotate(dynamic, -90);
-        let (w, h) = rotated.dimensions();
-        assert_eq!((w, h), (2, 3));
-        // -90 (CW 90): top-left (0,0) should go to top-right
-        assert_eq!(rotated.get_pixel(0, 0)[0], 4);
-        assert_eq!(rotated.get_pixel(1, 0)[0], 1);
-    }
-
-    #[test]
-    fn test_flip_horizontal() {
-        let mut img = RgbaImage::new(2, 1);
-        img.put_pixel(0, 0, image::Rgba([10, 0, 0, 255]));
-        img.put_pixel(1, 0, image::Rgba([20, 0, 0, 255]));
-        let dynamic = DynamicImage::ImageRgba8(img);
-
-        let flipped = flip_horizontal_if(dynamic, true);
-        assert_eq!(flipped.get_pixel(0, 0)[0], 20);
-        assert_eq!(flipped.get_pixel(1, 0)[0], 10);
-    }
-
-    #[test]
-    fn test_flip_horizontal_noop() {
-        let mut img = RgbaImage::new(2, 1);
-        img.put_pixel(0, 0, image::Rgba([10, 0, 0, 255]));
-        img.put_pixel(1, 0, image::Rgba([20, 0, 0, 255]));
-        let dynamic = DynamicImage::ImageRgba8(img);
-
-        let not_flipped = flip_horizontal_if(dynamic, false);
-        assert_eq!(not_flipped.get_pixel(0, 0)[0], 10);
-        assert_eq!(not_flipped.get_pixel(1, 0)[0], 20);
-    }
-}

seaweed-volume/src/lib.rs

@@ -1,27 +0,0 @@
-pub mod config;
-pub mod images;
-pub mod metrics;
-pub mod remote_storage;
-pub mod security;
-pub mod server;
-pub mod storage;
-pub mod version;
-
-/// Generated protobuf modules.
-pub mod pb {
-    pub const FILE_DESCRIPTOR_SET: &[u8] =
-        tonic::include_file_descriptor_set!("seaweed_descriptor");
-
-    pub mod remote_pb {
-        tonic::include_proto!("remote_pb");
-    }
-    pub mod volume_server_pb {
-        tonic::include_proto!("volume_server_pb");
-    }
-    pub mod master_pb {
-        tonic::include_proto!("master_pb");
-    }
-    pub mod filer_pb {
-        tonic::include_proto!("filer_pb");
-    }
-}

seaweed-volume/src/metrics.rs

@@ -1,456 +0,0 @@
-//! Prometheus metrics for the volume server.
-//!
-//! Mirrors the Go SeaweedFS volume server metrics.
-
-use prometheus::{
-    self, Encoder, GaugeVec, HistogramOpts, HistogramVec, IntCounterVec, IntGauge, IntGaugeVec,
-    Opts, Registry, TextEncoder,
-};
-use std::sync::Once;
-
-use crate::version;
-
-#[derive(Clone, Debug, Default, PartialEq, Eq)]
-pub struct PushGatewayConfig {
-    pub address: String,
-    pub interval_seconds: u32,
-}
-
-lazy_static::lazy_static! {
-    pub static ref REGISTRY: Registry = Registry::new();
-
-    // ---- Request metrics (Go: VolumeServerRequestCounter, VolumeServerRequestHistogram) ----
-
-    /// Request counter with labels `type` (HTTP method) and `code` (HTTP status).
-    pub static ref REQUEST_COUNTER: IntCounterVec = IntCounterVec::new(
-        Opts::new("SeaweedFS_volumeServer_request_total", "Volume server requests"),
-        &["type", "code"],
-    ).expect("metric can be created");
-
-    /// Request duration histogram with label `type` (HTTP method).
-    pub static ref REQUEST_DURATION: HistogramVec = HistogramVec::new(
-        HistogramOpts::new(
-            "SeaweedFS_volumeServer_request_seconds",
-            "Volume server request duration in seconds",
-        ).buckets(exponential_buckets(0.0001, 2.0, 24)),
-        &["type"],
-    ).expect("metric can be created");
-
-    // ---- Handler counters (Go: VolumeServerHandlerCounter) ----
-
-    /// Handler-level operation counter with label `type`.
-    pub static ref HANDLER_COUNTER: IntCounterVec = IntCounterVec::new(
-        Opts::new("SeaweedFS_volumeServer_handler_total", "Volume server handler counters"),
-        &["type"],
-    ).expect("metric can be created");
-
-    // ---- Vacuuming metrics (Go: VolumeServerVacuuming*) ----
-
-    /// Vacuuming compact counter with label `success` (true/false).
-    pub static ref VACUUMING_COMPACT_COUNTER: IntCounterVec = IntCounterVec::new(
-        Opts::new("SeaweedFS_volumeServer_vacuuming_compact_count", "Counter of volume vacuuming Compact counter"),
-        &["success"],
-    ).expect("metric can be created");
-
-    /// Vacuuming commit counter with label `success` (true/false).
-    pub static ref VACUUMING_COMMIT_COUNTER: IntCounterVec = IntCounterVec::new(
-        Opts::new("SeaweedFS_volumeServer_vacuuming_commit_count", "Counter of volume vacuuming commit counter"),
-        &["success"],
-    ).expect("metric can be created");
-
-    /// Vacuuming duration histogram with label `type` (compact/commit).
-    pub static ref VACUUMING_HISTOGRAM: HistogramVec = HistogramVec::new(
-        HistogramOpts::new(
-            "SeaweedFS_volumeServer_vacuuming_seconds",
-            "Volume vacuuming duration in seconds",
-        ).buckets(exponential_buckets(0.0001, 2.0, 24)),
-        &["type"],
-    ).expect("metric can be created");
-
-    // ---- Volume gauges (Go: VolumeServerVolumeGauge, VolumeServerReadOnlyVolumeGauge) ----
-
-    /// Volumes per collection and type (volume/ec_shards).
-    pub static ref VOLUME_GAUGE: GaugeVec = GaugeVec::new(
-        Opts::new("SeaweedFS_volumeServer_volumes", "Number of volumes"),
-        &["collection", "type"],
-    ).expect("metric can be created");
-
-    /// Read-only volumes per collection and type.
-    pub static ref READ_ONLY_VOLUME_GAUGE: GaugeVec = GaugeVec::new(
-        Opts::new("SeaweedFS_volumeServer_read_only_volumes", "Number of read-only volumes."),
-        &["collection", "type"],
-    ).expect("metric can be created");
-
-    /// Maximum number of volumes this server can hold.
-    pub static ref MAX_VOLUMES: IntGauge = IntGauge::new(
-        "SeaweedFS_volumeServer_max_volumes",
-        "Maximum number of volumes",
-    ).expect("metric can be created");
-
-    // ---- Disk size gauges (Go: VolumeServerDiskSizeGauge) ----
-
-    /// Actual disk size used by volumes per collection and type (normal/deleted_bytes/ec).
-    pub static ref DISK_SIZE_GAUGE: GaugeVec = GaugeVec::new(
-        Opts::new("SeaweedFS_volumeServer_total_disk_size", "Actual disk size used by volumes"),
-        &["collection", "type"],
-    ).expect("metric can be created");
-
-    // ---- Resource gauges (Go: VolumeServerResourceGauge) ----
-
-    /// Disk resource usage per directory and type (all/used/free/avail).
-    pub static ref RESOURCE_GAUGE: GaugeVec = GaugeVec::new(
-        Opts::new("SeaweedFS_volumeServer_resource", "Server resource usage"),
-        &["name", "type"],
-    ).expect("metric can be created");
-
-    // ---- In-flight gauges (Go: VolumeServerInFlightRequestsGauge, InFlightDownload/UploadSize) ----
-
-    /// In-flight requests per HTTP method.
-    pub static ref INFLIGHT_REQUESTS_GAUGE: IntGaugeVec = IntGaugeVec::new(
-        Opts::new("SeaweedFS_volumeServer_in_flight_requests", "Current number of in-flight requests being handled by volume server."),
-        &["type"],
-    ).expect("metric can be created");
-
-    /// Concurrent download limit in bytes.
-    pub static ref CONCURRENT_DOWNLOAD_LIMIT: IntGauge = IntGauge::new(
-        "SeaweedFS_volumeServer_concurrent_download_limit",
-        "Limit for total concurrent download size in bytes",
-    ).expect("metric can be created");
-
-    /// Concurrent upload limit in bytes.
-    pub static ref CONCURRENT_UPLOAD_LIMIT: IntGauge = IntGauge::new(
-        "SeaweedFS_volumeServer_concurrent_upload_limit",
-        "Limit for total concurrent upload size in bytes",
-    ).expect("metric can be created");
-
-    /// Current in-flight download bytes.
-    pub static ref INFLIGHT_DOWNLOAD_SIZE: IntGauge = IntGauge::new(
-        "SeaweedFS_volumeServer_in_flight_download_size",
-        "In flight total download size.",
-    ).expect("metric can be created");
-
-    /// Current in-flight upload bytes.
-    pub static ref INFLIGHT_UPLOAD_SIZE: IntGauge = IntGauge::new(
-        "SeaweedFS_volumeServer_in_flight_upload_size",
-        "In flight total upload size.",
-    ).expect("metric can be created");
-
-    /// Upload error counter by HTTP status code. Code "0" = transport error (no response).
-    pub static ref UPLOAD_ERROR_COUNTER: IntCounterVec = IntCounterVec::new(
-        Opts::new("SeaweedFS_upload_error_total",
-            "Counter of upload errors by HTTP status code. Code 0 means transport error (no response received)."),
-        &["code"],
-    ).expect("metric can be created");
-
-    // ---- Legacy aliases for backward compat with existing code ----
-
-    /// Total number of volumes on this server (flat gauge).
-    pub static ref VOLUMES_TOTAL: IntGauge = IntGauge::new(
-        "volume_server_volumes_total",
-        "Total number of volumes",
-    ).expect("metric can be created");
-
-    /// Disk size in bytes per directory.
-    pub static ref DISK_SIZE_BYTES: IntGaugeVec = IntGaugeVec::new(
-        Opts::new("volume_server_disk_size_bytes", "Disk size in bytes"),
-        &["dir"],
-    ).expect("metric can be created");
-
-    /// Disk free bytes per directory.
-    pub static ref DISK_FREE_BYTES: IntGaugeVec = IntGaugeVec::new(
-        Opts::new("volume_server_disk_free_bytes", "Disk free space in bytes"),
-        &["dir"],
-    ).expect("metric can be created");
-
-    /// Current number of in-flight requests (flat gauge).
-    pub static ref INFLIGHT_REQUESTS: IntGauge = IntGauge::new(
-        "volume_server_inflight_requests",
-        "Current number of in-flight requests",
-    ).expect("metric can be created");
-
-    /// Total number of files stored across all volumes.
-    pub static ref VOLUME_FILE_COUNT: IntGauge = IntGauge::new(
-        "volume_server_volume_file_count",
-        "Total number of files stored across all volumes",
-    ).expect("metric can be created");
-
-    // ---- Build info (Go: BuildInfo) ----
-
-    /// Build information gauge, always set to 1. Matches Go:
-    /// Namespace="SeaweedFS", Subsystem="build", Name="info",
-    /// labels: version, commit, sizelimit, goos, goarch.
-    pub static ref BUILD_INFO: GaugeVec = GaugeVec::new(
-        Opts::new("SeaweedFS_build_info", "A metric with a constant '1' value labeled by version, commit, sizelimit, goos, and goarch from which SeaweedFS was built."),
-        &["version", "commit", "sizelimit", "goos", "goarch"],
-    ).expect("metric can be created");
-}
-
-/// Generate exponential bucket boundaries for histograms.
-fn exponential_buckets(start: f64, factor: f64, count: usize) -> Vec<f64> {
-    let mut buckets = Vec::with_capacity(count);
-    let mut val = start;
-    for _ in 0..count {
-        buckets.push(val);
-        val *= factor;
-    }
-    buckets
-}
-
-// Handler counter type constants (matches Go's metrics_names.go).
-pub const WRITE_TO_LOCAL_DISK: &str = "writeToLocalDisk";
-pub const WRITE_TO_REPLICAS: &str = "writeToReplicas";
-pub const DOWNLOAD_LIMIT_COND: &str = "downloadLimitCondition";
-pub const UPLOAD_LIMIT_COND: &str = "uploadLimitCondition";
-pub const READ_PROXY_REQ: &str = "readProxyRequest";
-pub const READ_REDIRECT_REQ: &str = "readRedirectRequest";
-pub const EMPTY_READ_PROXY_LOC: &str = "emptyReadProxyLocaction";
-pub const FAILED_READ_PROXY_REQ: &str = "failedReadProxyRequest";
-
-// Error metric name constants.
-pub const ERROR_SIZE_MISMATCH_OFFSET_SIZE: &str = "errorSizeMismatchOffsetSize";
-pub const ERROR_SIZE_MISMATCH: &str = "errorSizeMismatch";
-pub const ERROR_CRC: &str = "errorCRC";
-pub const ERROR_INDEX_OUT_OF_RANGE: &str = "errorIndexOutOfRange";
-pub const ERROR_GET_NOT_FOUND: &str = "errorGetNotFound";
-pub const ERROR_GET_INTERNAL: &str = "errorGetInternal";
-pub const ERROR_WRITE_TO_LOCAL_DISK: &str = "errorWriteToLocalDisk";
-pub const ERROR_UNMARSHAL_PAIRS: &str = "errorUnmarshalPairs";
-pub const ERROR_WRITE_TO_REPLICAS: &str = "errorWriteToReplicas";
-
-// Go volume heartbeat metric label values.
-pub const READ_ONLY_LABEL_IS_READ_ONLY: &str = "IsReadOnly";
-pub const READ_ONLY_LABEL_NO_WRITE_OR_DELETE: &str = "noWriteOrDelete";
-pub const READ_ONLY_LABEL_NO_WRITE_CAN_DELETE: &str = "noWriteCanDelete";
-pub const READ_ONLY_LABEL_IS_DISK_SPACE_LOW: &str = "isDiskSpaceLow";
-pub const DISK_SIZE_LABEL_NORMAL: &str = "normal";
-pub const DISK_SIZE_LABEL_DELETED_BYTES: &str = "deleted_bytes";
-pub const DISK_SIZE_LABEL_EC: &str = "ec";
-
-static REGISTER_METRICS: Once = Once::new();
-
-/// Register all metrics with the custom registry.
-/// Call this once at startup.
-pub fn register_metrics() {
-    REGISTER_METRICS.call_once(|| {
-        let metrics: Vec<Box<dyn prometheus::core::Collector>> = vec![
-            // New Go-compatible metrics
-            Box::new(REQUEST_COUNTER.clone()),
-            Box::new(REQUEST_DURATION.clone()),
-            Box::new(HANDLER_COUNTER.clone()),
-            Box::new(VACUUMING_COMPACT_COUNTER.clone()),
-            Box::new(VACUUMING_COMMIT_COUNTER.clone()),
-            Box::new(VACUUMING_HISTOGRAM.clone()),
-            Box::new(VOLUME_GAUGE.clone()),
-            Box::new(READ_ONLY_VOLUME_GAUGE.clone()),
-            Box::new(MAX_VOLUMES.clone()),
-            Box::new(DISK_SIZE_GAUGE.clone()),
-            Box::new(RESOURCE_GAUGE.clone()),
-            Box::new(INFLIGHT_REQUESTS_GAUGE.clone()),
-            Box::new(CONCURRENT_DOWNLOAD_LIMIT.clone()),
-            Box::new(CONCURRENT_UPLOAD_LIMIT.clone()),
-            Box::new(INFLIGHT_DOWNLOAD_SIZE.clone()),
-            Box::new(INFLIGHT_UPLOAD_SIZE.clone()),
-            Box::new(UPLOAD_ERROR_COUNTER.clone()),
-            // Legacy metrics
-            Box::new(VOLUMES_TOTAL.clone()),
-            Box::new(DISK_SIZE_BYTES.clone()),
-            Box::new(DISK_FREE_BYTES.clone()),
-            Box::new(INFLIGHT_REQUESTS.clone()),
-            Box::new(VOLUME_FILE_COUNT.clone()),
-            // Build info
-            Box::new(BUILD_INFO.clone()),
-        ];
-        for m in metrics {
-            REGISTRY.register(m).expect("metric registered");
-        }
-
-        // Set build info gauge to 1 with version/commit/sizelimit/os/arch labels (matches Go).
-        BUILD_INFO
-            .with_label_values(&[
-                version::version(),
-                version::commit(),
-                version::size_limit(),
-                std::env::consts::OS,
-                std::env::consts::ARCH,
-            ])
-            .set(1.0);
-    });
-}
-
-/// Gather all metrics and encode them in Prometheus text exposition format.
-pub fn gather_metrics() -> String {
-    let encoder = TextEncoder::new();
-    let metric_families = REGISTRY.gather();
-    let mut buffer = Vec::new();
-    encoder
-        .encode(&metric_families, &mut buffer)
-        .expect("encoding metrics");
-    String::from_utf8(buffer).expect("metrics are valid UTF-8")
-}
-
-pub fn delete_collection_metrics(collection: &str) {
-    // Mirrors Go's DeletePartialMatch(prometheus.Labels{"collection": collection})
-    // which removes ALL metric entries matching the collection label, regardless
-    // of other label values (like "type"). We gather the metric families to discover
-    // all type values dynamically, matching Go's partial-match behavior.
-    delete_partial_match_collection(&VOLUME_GAUGE, collection);
-    delete_partial_match_collection(&READ_ONLY_VOLUME_GAUGE, collection);
-    delete_partial_match_collection(&DISK_SIZE_GAUGE, collection);
-}
-
-/// Remove all metric entries from a GaugeVec where the "collection" label matches.
-/// This emulates Go's `DeletePartialMatch(prometheus.Labels{"collection": collection})`.
-fn delete_partial_match_collection(gauge: &GaugeVec, collection: &str) {
-    use prometheus::core::Collector;
-    let families = gauge.collect();
-    for family in &families {
-        for metric in family.get_metric() {
-            let labels = metric.get_label();
-            let mut matches_collection = false;
-            let mut type_value = None;
-            for label in labels {
-                if label.get_name() == "collection" && label.get_value() == collection {
-                    matches_collection = true;
-                }
-                if label.get_name() == "type" {
-                    type_value = Some(label.get_value().to_string());
-                }
-            }
-            if matches_collection {
-                if let Some(ref tv) = type_value {
-                    let _ = gauge.remove_label_values(&[collection, tv]);
-                }
-            }
-        }
-    }
-}
-
-pub fn build_pushgateway_url(address: &str, job: &str, instance: &str) -> String {
-    let base = if address.starts_with("http://") || address.starts_with("https://") {
-        address.to_string()
-    } else {
-        format!("http://{}", address)
-    };
-    let base = base.trim_end_matches('/');
-    format!("{}/metrics/job/{}/instance/{}", base, job, instance)
-}
-
-pub async fn push_metrics_once(
-    client: &reqwest::Client,
-    address: &str,
-    job: &str,
-    instance: &str,
-) -> Result<(), String> {
-    let url = build_pushgateway_url(address, job, instance);
-    let response = client
-        .put(&url)
-        .header(
-            reqwest::header::CONTENT_TYPE,
-            "text/plain; version=0.0.4; charset=utf-8",
-        )
-        .body(gather_metrics())
-        .send()
-        .await
-        .map_err(|e| format!("push metrics request failed: {}", e))?;
-
-    if response.status().is_success() {
-        Ok(())
-    } else {
-        Err(format!(
-            "push metrics failed with status {}",
-            response.status()
-        ))
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use axum::{routing::put, Router};
-    use std::sync::{Arc, Mutex};
-
-    #[test]
-    fn test_gather_metrics_returns_text() {
-        register_metrics();
-        REQUEST_COUNTER.with_label_values(&["GET", "200"]).inc();
-        let output = gather_metrics();
-        assert!(output.contains("SeaweedFS_volumeServer_request_total"));
-    }
-
-    #[test]
-    fn test_build_pushgateway_url() {
-        assert_eq!(
-            build_pushgateway_url("localhost:9091", "volumeServer", "test-instance"),
-            "http://localhost:9091/metrics/job/volumeServer/instance/test-instance"
-        );
-        assert_eq!(
-            build_pushgateway_url("https://push.example", "volumeServer", "node-a"),
-            "https://push.example/metrics/job/volumeServer/instance/node-a"
-        );
-    }
-
-    #[tokio::test]
-    async fn test_push_metrics_once() {
-        register_metrics();
-
-        let captured = Arc::new(Mutex::new(None::<String>));
-        let captured_clone = captured.clone();
-
-        let app = Router::new().route(
-            "/metrics/job/volumeServer/instance/test-instance",
-            put(move |body: String| {
-                let captured = captured_clone.clone();
-                async move {
-                    *captured.lock().unwrap() = Some(body);
-                    "ok"
-                }
-            }),
-        );
-
-        let listener = tokio::net::TcpListener::bind("127.0.0.1:0").await.unwrap();
-        let addr = listener.local_addr().unwrap();
-        let server = tokio::spawn(async move {
-            axum::serve(listener, app).await.unwrap();
-        });
-
-        let client = reqwest::Client::new();
-        push_metrics_once(
-            &client,
-            &format!("127.0.0.1:{}", addr.port()),
-            "volumeServer",
-            "test-instance",
-        )
-        .await
-        .unwrap();
-
-        let body = captured.lock().unwrap().clone().unwrap();
-        assert!(body.contains("SeaweedFS_volumeServer_request_total"));
-
-        server.abort();
-    }
-
-    #[test]
-    fn test_delete_collection_metrics_removes_collection_labelsets() {
-        register_metrics();
-
-        VOLUME_GAUGE.with_label_values(&["pics", "volume"]).set(2.0);
-        VOLUME_GAUGE.with_label_values(&["pics", "ec_shards"]).set(3.0);
-        READ_ONLY_VOLUME_GAUGE
-            .with_label_values(&["pics", "volume"])
-            .set(1.0);
-        DISK_SIZE_GAUGE
-            .with_label_values(&["pics", "normal"])
-            .set(10.0);
-        DISK_SIZE_GAUGE
-            .with_label_values(&["pics", "deleted_bytes"])
-            .set(4.0);
-
-        delete_collection_metrics("pics");
-
-        let output = gather_metrics();
-        assert!(!output.contains("collection=\"pics\",type=\"volume\""));
-        assert!(!output.contains("collection=\"pics\",type=\"ec_shards\""));
-        assert!(!output.contains("collection=\"pics\",type=\"normal\""));
-        assert!(!output.contains("collection=\"pics\",type=\"deleted_bytes\""));
-    }
-}

seaweed-volume/src/remote_storage/mod.rs

@@ -1,157 +0,0 @@
-//! Remote storage backends for tiered storage support.
-//!
-//! Provides a trait-based abstraction over cloud storage providers (S3, GCS, Azure, etc.)
-//! and a registry to create clients from protobuf RemoteConf messages.
-
-pub mod s3;
-pub mod s3_tier;
-
-use crate::pb::remote_pb::{RemoteConf, RemoteStorageLocation};
-
-/// Error type for remote storage operations.
-#[derive(Debug, thiserror::Error)]
-pub enum RemoteStorageError {
-    #[error("remote storage type {0} not found")]
-    TypeNotFound(String),
-    #[error("remote object not found: {0}")]
-    ObjectNotFound(String),
-    #[error("remote storage error: {0}")]
-    Other(String),
-    #[error("io error: {0}")]
-    Io(#[from] std::io::Error),
-}
-
-/// Metadata about a remote file entry.
-#[derive(Debug, Clone)]
-pub struct RemoteEntry {
-    pub size: i64,
-    pub last_modified_at: i64, // Unix seconds
-    pub e_tag: String,
-    pub storage_name: String,
-}
-
-/// Trait for remote storage clients. Matches Go's RemoteStorageClient interface.
-#[async_trait::async_trait]
-pub trait RemoteStorageClient: Send + Sync {
-    /// Read (part of) a file from remote storage.
-    async fn read_file(
-        &self,
-        loc: &RemoteStorageLocation,
-        offset: i64,
-        size: i64,
-    ) -> Result<Vec<u8>, RemoteStorageError>;
-
-    /// Write a file to remote storage.
-    async fn write_file(
-        &self,
-        loc: &RemoteStorageLocation,
-        data: &[u8],
-    ) -> Result<RemoteEntry, RemoteStorageError>;
-
-    /// Get metadata for a file in remote storage.
-    async fn stat_file(
-        &self,
-        loc: &RemoteStorageLocation,
-    ) -> Result<RemoteEntry, RemoteStorageError>;
-
-    /// Delete a file from remote storage.
-    async fn delete_file(&self, loc: &RemoteStorageLocation) -> Result<(), RemoteStorageError>;
-
-    /// List all buckets.
-    async fn list_buckets(&self) -> Result<Vec<String>, RemoteStorageError>;
-
-    /// The RemoteConf used to create this client.
-    fn remote_conf(&self) -> &RemoteConf;
-}
-
-/// Create a new remote storage client from a RemoteConf.
-pub fn make_remote_storage_client(
-    conf: &RemoteConf,
-) -> Result<Box<dyn RemoteStorageClient>, RemoteStorageError> {
-    match conf.r#type.as_str() {
-        // All S3-compatible backends use the same client with different credentials
-        "s3" | "wasabi" | "backblaze" | "aliyun" | "tencent" | "baidu" | "filebase" | "storj"
-        | "contabo" => {
-            let (access_key, secret_key, endpoint, region) = extract_s3_credentials(conf);
-            Ok(Box::new(s3::S3RemoteStorageClient::new(
-                conf.clone(),
-                &access_key,
-                &secret_key,
-                &region,
-                &endpoint,
-                conf.s3_force_path_style,
-            )))
-        }
-        other => Err(RemoteStorageError::TypeNotFound(other.to_string())),
-    }
-}
-
-/// Extract S3-compatible credentials from a RemoteConf based on its type.
-fn extract_s3_credentials(conf: &RemoteConf) -> (String, String, String, String) {
-    match conf.r#type.as_str() {
-        "s3" => (
-            conf.s3_access_key.clone(),
-            conf.s3_secret_key.clone(),
-            conf.s3_endpoint.clone(),
-            if conf.s3_region.is_empty() {
-                "us-east-1".to_string()
-            } else {
-                conf.s3_region.clone()
-            },
-        ),
-        "wasabi" => (
-            conf.wasabi_access_key.clone(),
-            conf.wasabi_secret_key.clone(),
-            conf.wasabi_endpoint.clone(),
-            conf.wasabi_region.clone(),
-        ),
-        "backblaze" => (
-            conf.backblaze_key_id.clone(),
-            conf.backblaze_application_key.clone(),
-            conf.backblaze_endpoint.clone(),
-            conf.backblaze_region.clone(),
-        ),
-        "aliyun" => (
-            conf.aliyun_access_key.clone(),
-            conf.aliyun_secret_key.clone(),
-            conf.aliyun_endpoint.clone(),
-            conf.aliyun_region.clone(),
-        ),
-        "tencent" => (
-            conf.tencent_secret_id.clone(),
-            conf.tencent_secret_key.clone(),
-            conf.tencent_endpoint.clone(),
-            String::new(),
-        ),
-        "baidu" => (
-            conf.baidu_access_key.clone(),
-            conf.baidu_secret_key.clone(),
-            conf.baidu_endpoint.clone(),
-            conf.baidu_region.clone(),
-        ),
-        "filebase" => (
-            conf.filebase_access_key.clone(),
-            conf.filebase_secret_key.clone(),
-            conf.filebase_endpoint.clone(),
-            String::new(),
-        ),
-        "storj" => (
-            conf.storj_access_key.clone(),
-            conf.storj_secret_key.clone(),
-            conf.storj_endpoint.clone(),
-            String::new(),
-        ),
-        "contabo" => (
-            conf.contabo_access_key.clone(),
-            conf.contabo_secret_key.clone(),
-            conf.contabo_endpoint.clone(),
-            conf.contabo_region.clone(),
-        ),
-        _ => (
-            conf.s3_access_key.clone(),
-            conf.s3_secret_key.clone(),
-            conf.s3_endpoint.clone(),
-            conf.s3_region.clone(),
-        ),
-    }
-}

seaweed-volume/src/remote_storage/s3.rs

@@ -1,186 +0,0 @@
-//! S3-compatible remote storage client.
-//!
-//! Works with AWS S3, MinIO, SeaweedFS S3, and all S3-compatible providers.
-
-use aws_sdk_s3::config::{BehaviorVersion, Credentials, Region};
-use aws_sdk_s3::primitives::ByteStream;
-use aws_sdk_s3::Client;
-
-use super::{RemoteEntry, RemoteStorageClient, RemoteStorageError};
-use crate::pb::remote_pb::{RemoteConf, RemoteStorageLocation};
-
-/// S3-compatible remote storage client.
-pub struct S3RemoteStorageClient {
-    client: Client,
-    conf: RemoteConf,
-}
-
-impl S3RemoteStorageClient {
-    /// Create a new S3 client from credentials and endpoint configuration.
-    pub fn new(
-        conf: RemoteConf,
-        access_key: &str,
-        secret_key: &str,
-        region: &str,
-        endpoint: &str,
-        force_path_style: bool,
-    ) -> Self {
-        let region = if region.is_empty() {
-            "us-east-1"
-        } else {
-            region
-        };
-
-        let credentials = Credentials::new(
-            access_key,
-            secret_key,
-            None, // session token
-            None, // expiry
-            "seaweedfs-volume",
-        );
-
-        let mut s3_config = aws_sdk_s3::Config::builder()
-            .behavior_version(BehaviorVersion::latest())
-            .region(Region::new(region.to_string()))
-            .credentials_provider(credentials)
-            .force_path_style(force_path_style);
-
-        if !endpoint.is_empty() {
-            s3_config = s3_config.endpoint_url(endpoint);
-        }
-
-        let client = Client::from_conf(s3_config.build());
-
-        S3RemoteStorageClient { client, conf }
-    }
-}
-
-#[async_trait::async_trait]
-impl RemoteStorageClient for S3RemoteStorageClient {
-    async fn read_file(
-        &self,
-        loc: &RemoteStorageLocation,
-        offset: i64,
-        size: i64,
-    ) -> Result<Vec<u8>, RemoteStorageError> {
-        let key = loc.path.trim_start_matches('/');
-
-        let mut req = self.client.get_object().bucket(&loc.bucket).key(key);
-
-        // Set byte range if specified
-        if size > 0 {
-            let end = offset + size - 1;
-            req = req.range(format!("bytes={}-{}", offset, end));
-        } else if offset > 0 {
-            req = req.range(format!("bytes={}-", offset));
-        }
-
-        let resp = req.send().await.map_err(|e| {
-            let msg = format!("{}", e);
-            if msg.contains("NoSuchKey") || msg.contains("404") {
-                RemoteStorageError::ObjectNotFound(format!("{}/{}", loc.bucket, key))
-            } else {
-                RemoteStorageError::Other(format!("s3 get object: {}", e))
-            }
-        })?;
-
-        let data = resp
-            .body
-            .collect()
-            .await
-            .map_err(|e| RemoteStorageError::Other(format!("s3 read body: {}", e)))?;
-
-        Ok(data.into_bytes().to_vec())
-    }
-
-    async fn write_file(
-        &self,
-        loc: &RemoteStorageLocation,
-        data: &[u8],
-    ) -> Result<RemoteEntry, RemoteStorageError> {
-        let key = loc.path.trim_start_matches('/');
-
-        let resp = self
-            .client
-            .put_object()
-            .bucket(&loc.bucket)
-            .key(key)
-            .body(ByteStream::from(data.to_vec()))
-            .send()
-            .await
-            .map_err(|e| RemoteStorageError::Other(format!("s3 put object: {}", e)))?;
-
-        Ok(RemoteEntry {
-            size: data.len() as i64,
-            last_modified_at: std::time::SystemTime::now()
-                .duration_since(std::time::UNIX_EPOCH)
-                .unwrap_or_default()
-                .as_secs() as i64,
-            e_tag: resp.e_tag().unwrap_or_default().to_string(),
-            storage_name: loc.name.clone(),
-        })
-    }
-
-    async fn stat_file(
-        &self,
-        loc: &RemoteStorageLocation,
-    ) -> Result<RemoteEntry, RemoteStorageError> {
-        let key = loc.path.trim_start_matches('/');
-
-        let resp = self
-            .client
-            .head_object()
-            .bucket(&loc.bucket)
-            .key(key)
-            .send()
-            .await
-            .map_err(|e| {
-                let msg = format!("{}", e);
-                if msg.contains("404") || msg.contains("NotFound") {
-                    RemoteStorageError::ObjectNotFound(format!("{}/{}", loc.bucket, key))
-                } else {
-                    RemoteStorageError::Other(format!("s3 head object: {}", e))
-                }
-            })?;
-
-        Ok(RemoteEntry {
-            size: resp.content_length().unwrap_or(0),
-            last_modified_at: resp.last_modified().map(|t| t.secs()).unwrap_or(0),
-            e_tag: resp.e_tag().unwrap_or_default().to_string(),
-            storage_name: loc.name.clone(),
-        })
-    }
-
-    async fn delete_file(&self, loc: &RemoteStorageLocation) -> Result<(), RemoteStorageError> {
-        let key = loc.path.trim_start_matches('/');
-
-        self.client
-            .delete_object()
-            .bucket(&loc.bucket)
-            .key(key)
-            .send()
-            .await
-            .map_err(|e| RemoteStorageError::Other(format!("s3 delete object: {}", e)))?;
-
-        Ok(())
-    }
-
-    async fn list_buckets(&self) -> Result<Vec<String>, RemoteStorageError> {
-        let resp = self
-            .client
-            .list_buckets()
-            .send()
-            .await
-            .map_err(|e| RemoteStorageError::Other(format!("s3 list buckets: {}", e)))?;
-
-        Ok(resp
-            .buckets()
-            .iter()
-            .filter_map(|b| b.name().map(String::from))
-            .collect())
-    }
-
-    fn remote_conf(&self) -> &RemoteConf {
-        &self.conf
-    }
-}

seaweed-volume/src/remote_storage/s3_tier.rs

@@ -1,519 +0,0 @@
-//! S3-compatible tiered storage backend for volume .dat file upload/download.
-//!
-//! Provides multipart upload and concurrent download with progress callbacks,
-//! matching the Go SeaweedFS S3 backend behavior.
-
-use std::collections::HashMap;
-use std::future::Future;
-use std::sync::{Arc, OnceLock, RwLock};
-
-use aws_sdk_s3::config::{BehaviorVersion, Credentials, Region};
-use aws_sdk_s3::types::{CompletedMultipartUpload, CompletedPart};
-use aws_sdk_s3::Client;
-use tokio::io::{AsyncReadExt, AsyncSeekExt, AsyncWriteExt};
-use tokio::sync::Semaphore;
-
-/// Concurrency limit for multipart upload/download (matches Go's s3manager).
-const CONCURRENCY: usize = 5;
-
-/// Configuration for an S3 tier backend.
-#[derive(Debug, Clone)]
-pub struct S3TierConfig {
-    pub access_key: String,
-    pub secret_key: String,
-    pub region: String,
-    pub bucket: String,
-    pub endpoint: String,
-    pub storage_class: String,
-    pub force_path_style: bool,
-}
-
-/// S3 tier backend for uploading/downloading volume .dat files.
-pub struct S3TierBackend {
-    client: Client,
-    pub bucket: String,
-    pub storage_class: String,
-}
-
-impl S3TierBackend {
-    /// Create a new S3 tier backend from configuration.
-    pub fn new(config: &S3TierConfig) -> Self {
-        let region = if config.region.is_empty() {
-            "us-east-1"
-        } else {
-            &config.region
-        };
-
-        let credentials = Credentials::new(
-            &config.access_key,
-            &config.secret_key,
-            None,
-            None,
-            "seaweedfs-volume-tier",
-        );
-
-        let mut s3_config = aws_sdk_s3::Config::builder()
-            .behavior_version(BehaviorVersion::latest())
-            .region(Region::new(region.to_string()))
-            .credentials_provider(credentials)
-            .force_path_style(config.force_path_style);
-
-        if !config.endpoint.is_empty() {
-            s3_config = s3_config.endpoint_url(&config.endpoint);
-        }
-
-        let client = Client::from_conf(s3_config.build());
-
-        S3TierBackend {
-            client,
-            bucket: config.bucket.clone(),
-            storage_class: if config.storage_class.is_empty() {
-                "STANDARD_IA".to_string()
-            } else {
-                config.storage_class.clone()
-            },
-        }
-    }
-
-    /// Upload a local file to S3 using multipart upload with concurrent parts
-    /// and progress reporting.
-    ///
-    /// Returns (s3_key, file_size) on success.
-    /// The progress callback receives (bytes_uploaded, percentage).
-    /// Uses 64MB part size and 5 concurrent uploads (matches Go s3manager).
-    pub async fn upload_file<F>(
-        &self,
-        file_path: &str,
-        progress_fn: F,
-    ) -> Result<(String, u64), String>
-    where
-        F: FnMut(i64, f32) + Send + Sync + 'static,
-    {
-        let key = uuid::Uuid::new_v4().to_string();
-
-        let metadata = tokio::fs::metadata(file_path)
-            .await
-            .map_err(|e| format!("failed to stat file {}: {}", file_path, e))?;
-        let file_size = metadata.len();
-
-        // Calculate part size: start at 64MB, scale up for very large files (matches Go)
-        let mut part_size: u64 = 64 * 1024 * 1024;
-        while part_size * 1000 < file_size {
-            part_size *= 4;
-        }
-
-        // Initiate multipart upload
-        let create_resp = self
-            .client
-            .create_multipart_upload()
-            .bucket(&self.bucket)
-            .key(&key)
-            .storage_class(
-                self.storage_class
-                    .parse()
-                    .unwrap_or(aws_sdk_s3::types::StorageClass::StandardIa),
-            )
-            .send()
-            .await
-            .map_err(|e| format!("failed to create multipart upload: {}", e))?;
-
-        let upload_id = create_resp
-            .upload_id()
-            .ok_or_else(|| "no upload_id in multipart upload response".to_string())?
-            .to_string();
-
-        // Build list of (part_number, offset, size) for all parts
-        let mut parts_plan: Vec<(i32, u64, usize)> = Vec::new();
-        let mut offset: u64 = 0;
-        let mut part_number: i32 = 1;
-        while offset < file_size {
-            let remaining = file_size - offset;
-            let this_part_size = std::cmp::min(part_size, remaining) as usize;
-            parts_plan.push((part_number, offset, this_part_size));
-            offset += this_part_size as u64;
-            part_number += 1;
-        }
-
-        // Upload parts concurrently with a semaphore limiting to CONCURRENCY
-        let semaphore = Arc::new(Semaphore::new(CONCURRENCY));
-        let client = &self.client;
-        let bucket = &self.bucket;
-        let file_path_owned = file_path.to_string();
-        let progress = Arc::new(std::sync::Mutex::new((0u64, progress_fn)));
-
-        let mut handles = Vec::with_capacity(parts_plan.len());
-        for (pn, off, size) in parts_plan {
-            let sem = semaphore.clone();
-            let client = client.clone();
-            let bucket = bucket.clone();
-            let key = key.clone();
-            let upload_id = upload_id.clone();
-            let fp = file_path_owned.clone();
-            let progress = progress.clone();
-
-            handles.push(tokio::spawn(async move {
-                let _permit = sem
-                    .acquire()
-                    .await
-                    .map_err(|e| format!("semaphore error: {}", e))?;
-
-                // Read this part's data from the file at the correct offset
-                let mut file = tokio::fs::File::open(&fp)
-                    .await
-                    .map_err(|e| format!("failed to open file {}: {}", fp, e))?;
-                file.seek(std::io::SeekFrom::Start(off))
-                    .await
-                    .map_err(|e| format!("failed to seek to offset {}: {}", off, e))?;
-                let mut buf = vec![0u8; size];
-                file.read_exact(&mut buf)
-                    .await
-                    .map_err(|e| format!("failed to read file at offset {}: {}", off, e))?;
-
-                let upload_part_resp = client
-                    .upload_part()
-                    .bucket(&bucket)
-                    .key(&key)
-                    .upload_id(&upload_id)
-                    .part_number(pn)
-                    .body(buf.into())
-                    .send()
-                    .await
-                    .map_err(|e| {
-                        format!("failed to upload part {} at offset {}: {}", pn, off, e)
-                    })?;
-
-                let e_tag = upload_part_resp.e_tag().unwrap_or_default().to_string();
-
-                // Report progress
-                {
-                    let mut guard = progress.lock().unwrap();
-                    guard.0 += size as u64;
-                    let uploaded = guard.0;
-                    let pct = if file_size > 0 {
-                        (uploaded as f32 * 100.0) / file_size as f32
-                    } else {
-                        100.0
-                    };
-                    (guard.1)(uploaded as i64, pct);
-                }
-
-                Ok::<_, String>(
-                    CompletedPart::builder()
-                        .e_tag(e_tag)
-                        .part_number(pn)
-                        .build(),
-                )
-            }));
-        }
-
-        // Collect results, preserving part order
-        let mut completed_parts = Vec::with_capacity(handles.len());
-        for handle in handles {
-            let part = handle
-                .await
-                .map_err(|e| format!("upload task panicked: {}", e))??;
-            completed_parts.push(part);
-        }
-
-        // Complete multipart upload
-        let completed_upload = CompletedMultipartUpload::builder()
-            .set_parts(Some(completed_parts))
-            .build();
-
-        self.client
-            .complete_multipart_upload()
-            .bucket(&self.bucket)
-            .key(&key)
-            .upload_id(&upload_id)
-            .multipart_upload(completed_upload)
-            .send()
-            .await
-            .map_err(|e| format!("failed to complete multipart upload: {}", e))?;
-
-        Ok((key, file_size))
-    }
-
-    /// Download a file from S3 to a local path with concurrent range requests
-    /// and progress reporting.
-    ///
-    /// Returns the file size on success.
-    /// Uses 64MB part size and 5 concurrent downloads (matches Go s3manager).
-    pub async fn download_file<F>(
-        &self,
-        dest_path: &str,
-        key: &str,
-        progress_fn: F,
-    ) -> Result<u64, String>
-    where
-        F: FnMut(i64, f32) + Send + Sync + 'static,
-    {
-        // Get file size first
-        let head_resp = self
-            .client
-            .head_object()
-            .bucket(&self.bucket)
-            .key(key)
-            .send()
-            .await
-            .map_err(|e| format!("failed to head object {}: {}", key, e))?;
-
-        let file_size = head_resp.content_length().unwrap_or(0) as u64;
-
-        // Pre-allocate file to full size so concurrent WriteAt-style writes work
-        {
-            let file = tokio::fs::OpenOptions::new()
-                .write(true)
-                .create(true)
-                .truncate(true)
-                .open(dest_path)
-                .await
-                .map_err(|e| format!("failed to open dest file {}: {}", dest_path, e))?;
-            file.set_len(file_size)
-                .await
-                .map_err(|e| format!("failed to set file length: {}", e))?;
-        }
-
-        let part_size: u64 = 64 * 1024 * 1024;
-
-        // Build list of (offset, size) for all parts
-        let mut parts_plan: Vec<(u64, u64)> = Vec::new();
-        let mut offset: u64 = 0;
-        while offset < file_size {
-            let remaining = file_size - offset;
-            let this_part_size = std::cmp::min(part_size, remaining);
-            parts_plan.push((offset, this_part_size));
-            offset += this_part_size;
-        }
-
-        // Download parts concurrently with a semaphore limiting to CONCURRENCY
-        let semaphore = Arc::new(Semaphore::new(CONCURRENCY));
-        let client = &self.client;
-        let bucket = &self.bucket;
-        let dest_path_owned = dest_path.to_string();
-        let key_owned = key.to_string();
-        let progress = Arc::new(std::sync::Mutex::new((0u64, progress_fn)));
-
-        let mut handles = Vec::with_capacity(parts_plan.len());
-        for (off, size) in parts_plan {
-            let sem = semaphore.clone();
-            let client = client.clone();
-            let bucket = bucket.clone();
-            let key = key_owned.clone();
-            let dp = dest_path_owned.clone();
-            let progress = progress.clone();
-
-            handles.push(tokio::spawn(async move {
-                let _permit = sem
-                    .acquire()
-                    .await
-                    .map_err(|e| format!("semaphore error: {}", e))?;
-
-                let end = off + size - 1;
-                let range = format!("bytes={}-{}", off, end);
-
-                let get_resp = client
-                    .get_object()
-                    .bucket(&bucket)
-                    .key(&key)
-                    .range(&range)
-                    .send()
-                    .await
-                    .map_err(|e| format!("failed to get object {} range {}: {}", key, range, e))?;
-
-                let body = get_resp
-                    .body
-                    .collect()
-                    .await
-                    .map_err(|e| format!("failed to read body: {}", e))?;
-                let bytes = body.into_bytes();
-
-                // Write at the correct offset (like Go's WriteAt)
-                let mut file = tokio::fs::OpenOptions::new()
-                    .write(true)
-                    .open(&dp)
-                    .await
-                    .map_err(|e| format!("failed to open dest file {}: {}", dp, e))?;
-                file.seek(std::io::SeekFrom::Start(off))
-                    .await
-                    .map_err(|e| format!("failed to seek to offset {}: {}", off, e))?;
-                file.write_all(&bytes)
-                    .await
-                    .map_err(|e| format!("failed to write to {}: {}", dp, e))?;
-
-                // Report progress
-                {
-                    let mut guard = progress.lock().unwrap();
-                    guard.0 += bytes.len() as u64;
-                    let downloaded = guard.0;
-                    let pct = if file_size > 0 {
-                        (downloaded as f32 * 100.0) / file_size as f32
-                    } else {
-                        100.0
-                    };
-                    (guard.1)(downloaded as i64, pct);
-                }
-
-                Ok::<_, String>(())
-            }));
-        }
-
-        // Wait for all download tasks
-        for handle in handles {
-            handle
-                .await
-                .map_err(|e| format!("download task panicked: {}", e))??;
-        }
-
-        Ok(file_size)
-    }
-
-    pub async fn read_range(&self, key: &str, offset: u64, size: usize) -> Result<Vec<u8>, String> {
-        let end = offset + (size as u64).saturating_sub(1);
-        let range = format!("bytes={}-{}", offset, end);
-        let resp = self
-            .client
-            .get_object()
-            .bucket(&self.bucket)
-            .key(key)
-            .range(&range)
-            .send()
-            .await
-            .map_err(|e| format!("failed to get object {} range {}: {}", key, range, e))?;
-
-        let body = resp
-            .body
-            .collect()
-            .await
-            .map_err(|e| format!("failed to read object {} body: {}", key, e))?;
-        Ok(body.into_bytes().to_vec())
-    }
-
-    /// Delete a file from S3.
-    pub async fn delete_file(&self, key: &str) -> Result<(), String> {
-        self.client
-            .delete_object()
-            .bucket(&self.bucket)
-            .key(key)
-            .send()
-            .await
-            .map_err(|e| format!("failed to delete object {}: {}", key, e))?;
-        Ok(())
-    }
-
-    pub fn delete_file_blocking(&self, key: &str) -> Result<(), String> {
-        let client = self.client.clone();
-        let bucket = self.bucket.clone();
-        let key = key.to_string();
-        block_on_tier_future(async move {
-            client
-                .delete_object()
-                .bucket(&bucket)
-                .key(&key)
-                .send()
-                .await
-                .map_err(|e| format!("failed to delete object {}: {}", key, e))?;
-            Ok(())
-        })
-    }
-
-    pub fn read_range_blocking(
-        &self,
-        key: &str,
-        offset: u64,
-        size: usize,
-    ) -> Result<Vec<u8>, String> {
-        let client = self.client.clone();
-        let bucket = self.bucket.clone();
-        let key = key.to_string();
-        block_on_tier_future(async move {
-            let end = offset + (size as u64).saturating_sub(1);
-            let range = format!("bytes={}-{}", offset, end);
-            let resp = client
-                .get_object()
-                .bucket(&bucket)
-                .key(&key)
-                .range(&range)
-                .send()
-                .await
-                .map_err(|e| format!("failed to get object {} range {}: {}", key, range, e))?;
-
-            let body = resp
-                .body
-                .collect()
-                .await
-                .map_err(|e| format!("failed to read object {} body: {}", key, e))?;
-            Ok(body.into_bytes().to_vec())
-        })
-    }
-}
-
-/// Parse a backend name like "s3" or "s3.default" into (backend_type, backend_id).
-/// Matches Go's `BackendNameToTypeId`.
-pub fn backend_name_to_type_id(backend_name: &str) -> (String, String) {
-    let parts: Vec<&str> = backend_name.split('.').collect();
-    match parts.len() {
-        1 => (backend_name.to_string(), "default".to_string()),
-        2 => (parts[0].to_string(), parts[1].to_string()),
-        _ => (String::new(), String::new()),
-    }
-}
-
-/// A registry of configured S3 tier backends, keyed by backend name (e.g., "s3.default").
-#[derive(Default)]
-pub struct S3TierRegistry {
-    backends: HashMap<String, Arc<S3TierBackend>>,
-}
-
-impl S3TierRegistry {
-    pub fn new() -> Self {
-        Self {
-            backends: HashMap::new(),
-        }
-    }
-
-    /// Register a backend with the given name.
-    pub fn register(&mut self, name: String, backend: S3TierBackend) {
-        self.backends.insert(name, Arc::new(backend));
-    }
-
-    /// Look up a backend by name.
-    pub fn get(&self, name: &str) -> Option<Arc<S3TierBackend>> {
-        self.backends.get(name).cloned()
-    }
-
-    /// List all registered backend names.
-    pub fn names(&self) -> Vec<String> {
-        self.backends.keys().cloned().collect()
-    }
-
-    /// Remove a backend by name.
-    pub fn remove(&mut self, name: &str) {
-        self.backends.remove(name);
-    }
-
-    pub fn clear(&mut self) {
-        self.backends.clear();
-    }
-}
-
-static GLOBAL_S3_TIER_REGISTRY: OnceLock<RwLock<S3TierRegistry>> = OnceLock::new();
-
-pub fn global_s3_tier_registry() -> &'static RwLock<S3TierRegistry> {
-    GLOBAL_S3_TIER_REGISTRY.get_or_init(|| RwLock::new(S3TierRegistry::new()))
-}
-
-fn block_on_tier_future<F, T>(future: F) -> Result<T, String>
-where
-    F: Future<Output = Result<T, String>> + Send + 'static,
-    T: Send + 'static,
-{
-    std::thread::spawn(move || {
-        let runtime = tokio::runtime::Builder::new_current_thread()
-            .enable_all()
-            .build()
-            .map_err(|e| format!("failed to build tokio runtime: {}", e))?;
-        runtime.block_on(future)
-    })
-    .join()
-    .map_err(|_| "tier runtime thread panicked".to_string())?
-}