Eliah RusinandClaude Opus 5.5 62481f1673 volume server: ec.decode reads the .ecx from the index dir it was copied to (#11536) ...

* volume server: ec.decode reads the .ecx from the index dir it was copied to

VolumeEcShardsCopy writes the .ecx/.ecj into the receiver's -dir.idx, so
with a split data/index dir the decode target has no .ecx beside its
shards. VolumeEcShardsToVolume sized the .dat from the right .ecx but
built the .idx from the data dir, failing with NotFound after the .dat
was already published. It now reads .ecx/.ecj from where the EC volume
opened them and writes the .idx beside the .dat, where Go leaves it.

The live-entry check and the .dat size also ignored deletions recorded
only in the .ecj, which Go folds into the .ecx (RebuildEcxFile) first:
a fully deleted volume was decoded instead of reported as having no live
entries, and deleted tail needles were copied into the .dat. Both now
treat journaled ids as deleted, without rewriting the sealed .ecx.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* volume server: ec.decode keeps the decoded volume writable and reads every .ecj

The rebuilt .idx copied a journaled tail needle's .ecx row verbatim after
the .dat was cut short before it, so the mount saw a row past EOF and
marked the decoded volume read-only. Rows of deleted needles the .dat no
longer holds are now dropped, and each journaled needle still in the .dat
gets one tombstone instead of one per journal entry.

VolumeEcShardsCopy appends journals collected from other holders into
the idx dir, but the decode read only the .ecj beside the .ecx, which
sits in the data dir when this server generated the shards. It now
reads both, once, in bounded chunks via the loader EcVolume uses.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* volume server: test ec.decode drops a sealed .ecx tail tombstone

Covers the other half of the rule added in the previous commit: a tail
needle tombstoned in the .ecx itself (Go's RebuildEcxFile) is cut from
the .dat, and its row must not reach the rebuilt .idx either.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-01 20:19:17 +08:00

..

debug.rs

rust: cargo fmt both crates, with a commented-out fmt --check CI step (#11329)

2026-09-15 09:29:22 -07:00

favicon.ico

adjust logo

2026-04-23 10:05:51 -07:00

grpc_client.rs

rust volume: build outgoing gRPC clients in one place and give every dial a connect timeout (#11354)

2026-09-20 19:41:37 -07:00

grpc_server.rs

volume server: ec.decode reads the .ecx from the index dir it was copied to (#11536)

2026-10-01 20:19:17 +08:00

handlers.rs

volume server: read GET/HEAD needles off the store lock, and only once (#11487)

2026-09-27 20:13:15 +08:00

heartbeat.rs

volume server: collect EC heartbeats and adjust volume max off the runtime (#11532)

2026-10-01 20:14:15 +08:00

memory_status.rs

rust volume: document every unsafe block and stop mutating the process env in tests (#11352)

2026-09-20 13:29:07 -07:00

mod.rs

volume: typed tier errors so a missing remote object answers NotFound (#11484)

2026-09-27 19:39:25 +08:00

profiling.rs

grpc: optional client_cert/client_key for outgoing mTLS connections (#10747)

2026-08-13 13:15:20 -07:00

request_id.rs

rust: tonic 0.14 / prost 0.14, drop the result_large_err allow (#11327)

2026-09-15 04:40:46 -07:00

server_stats.rs

Rust volume server implementation with CI (#8539)

2026-03-26 17:24:35 -07:00

store_ec.rs

volume server: VolumeNeedleStatus reads remote EC shards and reports deleted needles like Go (#11535)

2026-10-01 20:18:34 +08:00

ui.rs

rust volume: share the I/O-error tracker between Volume and EcVolume (#11351)

2026-09-20 16:57:23 -07:00

volume_server.rs

rust volume: one S3 tier registry instead of two kept in sync by hand (#11357)

2026-09-20 13:30:40 -07:00

write_queue.rs

rust volume: one S3 tier registry instead of two kept in sync by hand (#11357)

2026-09-20 13:30:40 -07:00