Follow-ups to #660#992
Conversation
|
👋 Thanks for assigning @tnull as a reviewer! |
| use crate::Error; | ||
|
|
||
| const BCAST_PACKAGE_QUEUE_SIZE: usize = 50; | ||
| const BCAST_PACKAGE_QUEUE_SIZE: usize = 256; |
There was a problem hiding this comment.
I went back and forth with codex on this one, for now I lean against drawing transactions at random order: we do not do this now, but in the future we might want to make sure we broadcast parents before children no ?
There was a problem hiding this comment.
but in the future we might want to make sure we broadcast parents before children no ?
Well, in short, I'm not sure we could even begin to guarantee this? Broadcast is inherently fallible, we never know when the network connection could drop, when the backend won't accept anything into the mempool, and when it will just decide to drop any transaction again. So without mempool introspection I'd always lean on treating broadcast as an entirely opaque operation: we submit and retry, and only stop once we see what we expect confirmed in a block.
There was a problem hiding this comment.
sounds good added the random draw below
| } | ||
|
|
||
| fn esplora_submitpackage_error_implies_unsupported(e: &esplora_client::Error) -> bool { | ||
| matches!(e, esplora_client::Error::HttpResponse { status: 400 | 404, .. }) |
There was a problem hiding this comment.
We map 400 here to ChainSourceNotSupported because Bitcoin Core v26 returns a RPC error when submitting the dummy package, which maps to error code 400.
There was a problem hiding this comment.
Grrr, this is all very brittle. I can't wait to drop all of this logic again once we can just assume submitpackage is available if we have any chain source at all.
| })?; | ||
| }); | ||
| if let Err(e) = startup_chain_check_res { | ||
| self.chain_source.stop(); |
There was a problem hiding this comment.
Actually, it seems there are a bunch of (pre-existing) potential cases below where we'd error. To solve this once and for all, let's rename start to start_inner and add a new pub fn start that wraps that start_inner (probably also takes the running lock) and stops the chain source for any error returned.
| - name: Test with 0FC enabled | ||
| run: | | ||
| RUSTFLAGS="--cfg no_download --cfg cycle_tests --cfg tokio_unstable --cfg zero_fee_commitment_tests" cargo test -- --test-threads=1 | ||
| eclair-interop-test: |
There was a problem hiding this comment.
Hmm, any chance we could make this an interop test for 0fc channels, not a 0fc test that does interop? I.e., can this be (a cfg-gated) part of the regular eclair tests, where we already have the docker setup etc.?
edf8512 to
bda78cc
Compare
| match self.start_inner(&mut is_running_lock) { | ||
| Ok(()) => Ok(()), | ||
| Err(e) => { | ||
| self.chain_source.stop(); |
There was a problem hiding this comment.
Codex:
- [P2] Roll back background tasks after startup failure. /home/tnull/worktrees/ldk-node/pr-992-latest-20260721/src/lib.rs:294 now stops only the chain source when start_inner fails. However, wallet sync, RGS, and pathfinding tasks are spawned before listener resolution/binding can fail at
lines 427–473. The node remains “not running,” so stop() cannot clean them up, while another start() creates duplicate loops. Move fallible listener setup before task spawning or perform a complete task rollback.
In 2024749, we started taking one slot in the package queue for each transaction broadcasted by the wallet upon `WalletEvent::ChainTipChanged`, so we increase the number of slots available in the queue.
Co-Authored-By: HAL 9000
This is particularly relevant for the electrum chain source; if we fail to fetch feerates, or zero fee commitments validation fails, and we do not stop the electrum chain source before returning an error, then the user will hit a debug assertion on the next restart.
Co-Authored-By: HAL 9000
Require Electrum and Esplora zero-fee commitments validation to observe the Bitcoin Core v29+ failure shape for the dummy TRUC package, instead of accepting any structured submitpackage response. Set the locktime field of the transaction to zero so that the test works at any chain-height, which is particularly helpful when starting ldk-node against test networks. Map HTTP 400 errors returned to `ChainSourceNotSupported` as this error code is returned by blockstream-electrs and mempool-electrs when running against Bitcoin Core v26. We previously would map this error to a general `ConnectionFailed` error, which is not correct for Bitcoin Core v26. Co-Authored-By: HAL 9000
Add a UniFFI wrapper so bindings can inspect channel type flags. Update anchor accounting tests to use channel type features instead of inferring zero-fee commitments from the commitment feerate. Co-Authored-By: HAL 9000
Co-Authored-By: HAL 9000
bda78cc to
30616f5
Compare
tnull
left a comment
There was a problem hiding this comment.
Thanks! Seems the 0fc integration tests are still timing out in CI here?
| }) | ||
| .collect() | ||
| }; | ||
| for i in (1..txs_to_broadcast.len()).rev() { |
There was a problem hiding this comment.
Hmm, shouldn't this be a feature of the broadcaster queue in general rather than just randomizing this one callsite? Maybe we could just have it drop random entries when the queue is full?
| /// We use this parent-child TRUC package to make sure the configured chain source supports | ||
| /// broadcasting packages via the `submitpackage` Bitcoin Core RPC. | ||
| const PARENT_TXID: &str = "9a015f93fac6cb203c2b994e18b85176eb0354a22a468255516f3c6002d3f696"; | ||
| const DUMMY_PACKAGE_EXPECTED_ERROR: &str = "bad-txns-inputs-missingorspent"; |
There was a problem hiding this comment.
Hmm, matching on the exact string seems not very robust. Seems some minor change in how Bitcoin Core handles errors could lead to LDK Node not starting anymore.
As mentioned on #660 (comment), maybe we just need to accept that we currently don't have a good way of checking all backends support v29+? Should we drop this commit?
| - name: Test with 0FC enabled | ||
| run: | | ||
| RUSTFLAGS="--cfg no_download --cfg cycle_tests --cfg tokio_unstable --cfg zero_fee_commitment_tests" cargo test -- --test-threads=1 | ||
| RUSTFLAGS="--cfg no_download --cfg cycle_tests --cfg tokio_unstable --cfg zero_fee_commitment_tests" cargo test |
There was a problem hiding this comment.
Seems that should be a fixup commit?
| return Err(Error::AlreadyRunning); | ||
| } | ||
|
|
||
| match self.start_inner(&mut is_running_lock) { |
There was a problem hiding this comment.
Codex:
[P1] Fully unwind late startup failures — /home/tnull/worktrees/ldk-node/pr-992-latest-20260724/src/lib.rs:295
A listener resolution/bind failure can occur after wallet sync and other background tasks have already spawned. The new error handler only stops the chain source. Since is_running remains false, callers cannot invoke stop(), and retrying start() leaves duplicate tasks running. Fallible
listener setup should occur before spawning tasks, or the error path must fully unwind them.
Seems that might be worth an additional PR though. Let me know if you prefer I pick that up.
| } | ||
|
|
||
| #[uniffi::export] | ||
| impl ChannelTypeFeatures { |
There was a problem hiding this comment.
Codex:
[P2] Expose all channel-type feature flags to bindings — /home/tnull/worktrees/ldk-node/pr-992-latest-20260724/src/ffi/types.rs:1830
ChannelTypeFeatures omits typed accessors for option_scid_alias and option_zeroconf, although both are valid ChannelTypeContext features supported by the underlying type. Rust callers retain those methods, but UniFFI users must manually decode to_bytes().
Fixes #989