test: pin the external fixtures and run the suites against the silo binary

The test and verification scripts invoked ./minio and pulled their tooling from
upstream infrastructure with no integrity check. Every `curl | tar` of a client
or an old server binary was an unverified execution path in a script that
regularly runs as a privileged user, and several fetched a floating "latest".

Two installers replace all of it:

- install-mcli.sh resolves a pinned pgsty/mc release, downloads the archive and
  its checksum manifest, requires exactly one valid manifest entry for the
  asset, verifies it, and installs. MCLI_BIN with a mandatory MCLI_SHA256 lets
  an offline or air-gapped run supply its own binary, still checksum-checked.
- install-verified-fixture.sh takes source, expected SHA-256 and target, and
  refuses anything that does not match. Sources may be a URL or a local file.

Every script that previously downloaded mc now calls install-mcli.sh. The three
places that genuinely need an upstream artifact - the old MinIO server binary
for the LDAP IAM upgrade-import test, the 2021 mc for the three-site
replication test, and the functional-tests.sh fixture - go through
install-verified-fixture.sh with the digest recorded inline. Those dl.min.io
URLs remain on purpose: they are historical upstream artifacts needed to prove
upgrade compatibility, and they are now pinned and verified rather than
trusted.

The scripts otherwise switch to ./silo, silo.service, the silo container and
compose service names, and SILO_CONFIG_DIR. run-multi-site-minio-idp.sh is
renamed to run-multi-site-silo-idp.sh with the Makefile target following.
buildscripts/minio-upgrade.sh keeps its name and its `minio server` argv - it
exists to test the MinIO-to-Silo upgrade, so the old side must stay old - but
it is now pinned to an image digest rather than a tag, and its `docker system
prune` and `docker volume prune` calls are removed. Those ran unfiltered
against the developer's whole Docker installation; the resiliency tests had the
same problem and lose their prune and `docker ps -q` sweeps too.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docs/site-replication/run-multi-site-ldap.sh

@@ -4,24 +4,24 @@
 exit_1() {
 	cleanup
 
-	echo "minio1 ============"
-	cat /tmp/minio1_1.log
-	cat /tmp/minio1_2.log
-	echo "minio2 ============"
-	cat /tmp/minio2_1.log
-	cat /tmp/minio2_2.log
-	echo "minio3 ============"
-	cat /tmp/minio3_1.log
-	cat /tmp/minio3_2.log
+	echo "silo1 ============"
+	cat /tmp/silo1_1.log
+	cat /tmp/silo1_2.log
+	echo "silo2 ============"
+	cat /tmp/silo2_1.log
+	cat /tmp/silo2_2.log
+	echo "silo3 ============"
+	cat /tmp/silo3_1.log
+	cat /tmp/silo3_2.log
 
 	exit 1
 }
 
 cleanup() {
-	echo "Cleaning up instances of MinIO"
-	pkill minio
-	pkill -9 minio
-	rm -rf /tmp/minio-ldap-idp{1,2,3}
+	echo "Cleaning up instances of Silo"
+	pkill silo
+	pkill -9 silo
+	rm -rf /tmp/silo-ldap-idp{1,2,3}
 }
 
 cleanup
@@ -34,7 +34,7 @@ unset MINIO_KMS_KES_KEY_NAME
 export MINIO_CI_CD=1
 export MINIO_BROWSER=off
 export MINIO_ROOT_USER="minio"
-export MINIO_ROOT_PASSWORD="minio123"
+export MINIO_ROOT_PASSWORD="silo123"
 export MINIO_KMS_AUTO_ENCRYPTION=off
 export MINIO_PROMETHEUS_AUTH_TYPE=public
 export MINIO_KMS_SECRET_KEY=my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=
@@ -48,73 +48,72 @@ export MINIO_IDENTITY_LDAP_GROUP_SEARCH_BASE_DN="ou=swengg,dc=min,dc=io"
 export MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER="(&(objectclass=groupOfNames)(member=%d))"
 
 if [ ! -f ./mc ]; then
-	wget -O mc https://dl.minio.io/client/mc/release/linux-amd64/mc &&
-		chmod +x mc
+	"$(git rev-parse --show-toplevel)/buildscripts/install-mcli.sh" ./mc
 fi
 
-minio server --config-dir /tmp/minio-ldap --address ":9001" /tmp/minio-ldap-idp1/{1...4} >/tmp/minio1_1.log 2>&1 &
+silo server --config-dir /tmp/silo-ldap --address ":9001" /tmp/silo-ldap-idp1/{1...4} >/tmp/silo1_1.log 2>&1 &
 site1_pid=$!
-minio server --config-dir /tmp/minio-ldap --address ":9002" /tmp/minio-ldap-idp2/{1...4} >/tmp/minio2_1.log 2>&1 &
+silo server --config-dir /tmp/silo-ldap --address ":9002" /tmp/silo-ldap-idp2/{1...4} >/tmp/silo2_1.log 2>&1 &
 site2_pid=$!
-minio server --config-dir /tmp/minio-ldap --address ":9003" /tmp/minio-ldap-idp3/{1...4} >/tmp/minio3_1.log 2>&1 &
+silo server --config-dir /tmp/silo-ldap --address ":9003" /tmp/silo-ldap-idp3/{1...4} >/tmp/silo3_1.log 2>&1 &
 site3_pid=$!
 
-export MC_HOST_minio1=http://minio:minio123@localhost:9001
-export MC_HOST_minio2=http://minio:minio123@localhost:9002
-export MC_HOST_minio3=http://minio:minio123@localhost:9003
+export MC_HOST_silo1=http://minio:silo123@localhost:9001
+export MC_HOST_silo2=http://minio:silo123@localhost:9002
+export MC_HOST_silo3=http://minio:silo123@localhost:9003
 
-./mc ready minio1
-./mc ready minio2
-./mc ready minio3
+./mc ready silo1
+./mc ready silo2
+./mc ready silo3
 
-./mc admin replicate add minio1 minio2 minio3
+./mc admin replicate add silo1 silo2 silo3
 
-./mc idp ldap policy attach minio1 consoleAdmin --user="uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc idp ldap policy attach silo1 consoleAdmin --user="uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 sleep 5
 
-./mc admin user info minio2 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
-./mc admin user info minio3 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
-./mc admin policy create minio1 rw ./docs/site-replication/rw.json
+./mc admin user info silo2 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo3 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin policy create silo1 rw ./docs/site-replication/rw.json
 
 sleep 5
-./mc admin policy info minio2 rw >/dev/null 2>&1
-./mc admin policy info minio3 rw >/dev/null 2>&1
+./mc admin policy info silo2 rw >/dev/null 2>&1
+./mc admin policy info silo3 rw >/dev/null 2>&1
 
-./mc admin policy remove minio3 rw
+./mc admin policy remove silo3 rw
 
 sleep 10
-./mc admin policy info minio1 rw
+./mc admin policy info silo1 rw
 if [ $? -eq 0 ]; then
 	echo "expecting the command to fail, exiting.."
 	exit_1
 fi
 
-./mc admin policy info minio2 rw
+./mc admin policy info silo2 rw
 if [ $? -eq 0 ]; then
 	echo "expecting the command to fail, exiting.."
 	exit_1
 fi
 
-./mc admin user info minio1 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo1 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 if [ $? -ne 0 ]; then
 	echo "policy mapping missing, exiting.."
 	exit_1
 fi
 
-./mc admin user info minio2 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo2 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 if [ $? -ne 0 ]; then
 	echo "policy mapping missing, exiting.."
 	exit_1
 fi
 
-./mc admin user info minio3 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo3 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 if [ $? -ne 0 ]; then
 	echo "policy mapping missing, exiting.."
 	exit_1
 fi
 
 # LDAP simple user
-./mc admin user svcacct add minio2 dillon --access-key testsvc --secret-key testsvc123
+./mc admin user svcacct add silo2 dillon --access-key testsvc --secret-key testsvc123
 if [ $? -ne 0 ]; then
 	echo "adding svc account failed, exiting.."
 	exit_1
@@ -122,33 +121,33 @@ fi
 
 sleep 10
 
-./mc idp ldap policy entities minio1
-./mc idp ldap policy entities minio2
-./mc idp ldap policy entities minio3
+./mc idp ldap policy entities silo1
+./mc idp ldap policy entities silo2
+./mc idp ldap policy entities silo3
 
-./mc admin service restart minio1
-./mc admin service restart minio2
-./mc admin service restart minio3
+./mc admin service restart silo1
+./mc admin service restart silo2
+./mc admin service restart silo3
 
 sleep 10
 
-./mc idp ldap policy entities minio1
-./mc idp ldap policy entities minio2
-./mc idp ldap policy entities minio3
+./mc idp ldap policy entities silo1
+./mc idp ldap policy entities silo2
+./mc idp ldap policy entities silo3
 
-./mc admin user svcacct info minio1 testsvc
+./mc admin user svcacct info silo1 testsvc
 if [ $? -ne 0 ]; then
 	echo "svc account not mirrored, exiting.."
 	exit_1
 fi
 
-./mc admin user svcacct info minio2 testsvc
+./mc admin user svcacct info silo2 testsvc
 if [ $? -ne 0 ]; then
 	echo "svc account not mirrored, exiting.."
 	exit_1
 fi
 
-./mc admin user svcacct info minio3 testsvc
+./mc admin user svcacct info silo3 testsvc
 if [ $? -ne 0 ]; then
 	echo "svc account not mirrored, exiting.."
 	exit_1
@@ -158,25 +157,25 @@ MC_HOST_svc1=http://testsvc:testsvc123@localhost:9001 ./mc ls svc1
 MC_HOST_svc2=http://testsvc:testsvc123@localhost:9002 ./mc ls svc2
 MC_HOST_svc3=http://testsvc:testsvc123@localhost:9003 ./mc ls svc3
 
-./mc admin user svcacct rm minio1 testsvc
+./mc admin user svcacct rm silo1 testsvc
 if [ $? -ne 0 ]; then
 	echo "removing svc account failed, exiting.."
 	exit_1
 fi
 
-./mc admin user info minio1 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo1 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 if [ $? -ne 0 ]; then
 	echo "policy mapping missing, exiting.."
 	exit_1
 fi
 
-./mc admin user info minio2 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo2 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 if [ $? -ne 0 ]; then
 	echo "policy mapping missing, exiting.."
 	exit_1
 fi
 
-./mc admin user info minio3 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
+./mc admin user info silo3 "uid=dillon,ou=people,ou=swengg,dc=min,dc=io"
 if [ $? -ne 0 ]; then
 	echo "policy mapping missing, exiting.."
 	exit_1
@@ -184,154 +183,154 @@ fi
 
 sleep 10
 
-./mc admin user svcacct info minio2 testsvc
+./mc admin user svcacct info silo2 testsvc
 if [ $? -eq 0 ]; then
 	echo "svc account found after delete, exiting.."
 	exit_1
 fi
 
-./mc admin user svcacct info minio3 testsvc
+./mc admin user svcacct info silo3 testsvc
 if [ $? -eq 0 ]; then
 	echo "svc account found after delete, exiting.."
 	exit_1
 fi
 
-./mc mb minio1/newbucket
-# copy large upload to newbucket on minio1
+./mc mb silo1/newbucket
+# copy large upload to newbucket on silo1
 truncate -s 17M lrgfile
 expected_checksum=$(cat ./lrgfile | md5sum)
 
-./mc cp ./lrgfile minio1/newbucket
+./mc cp ./lrgfile silo1/newbucket
 
-# create a bucket bucket2 on minio1.
-./mc mb minio1/bucket2
+# create a bucket bucket2 on silo1.
+./mc mb silo1/bucket2
 
 sleep 5
-./mc stat --no-list minio2/newbucket
+./mc stat --no-list silo2/newbucket
 if [ $? -ne 0 ]; then
 	echo "expecting bucket to be present. exiting.."
 	exit_1
 fi
 
-./mc stat --no-list minio3/newbucket
+./mc stat --no-list silo3/newbucket
 if [ $? -ne 0 ]; then
 	echo "expecting bucket to be present. exiting.."
 	exit_1
 fi
 
-./mc cp README.md minio2/newbucket/
+./mc cp README.md silo2/newbucket/
 
 sleep 5
-./mc stat --no-list minio1/newbucket/README.md
+./mc stat --no-list silo1/newbucket/README.md
 if [ $? -ne 0 ]; then
 	echo "expecting object to be present. exiting.."
 	exit_1
 fi
 
-./mc stat --no-list minio3/newbucket/README.md
+./mc stat --no-list silo3/newbucket/README.md
 if [ $? -ne 0 ]; then
 	echo "expecting object to be present. exiting.."
 	exit_1
 fi
 
 sleep 10
-./mc stat --no-list minio3/newbucket/lrgfile
+./mc stat --no-list silo3/newbucket/lrgfile
 if [ $? -ne 0 ]; then
 	echo "expected object to be present, exiting.."
 	exit_1
 fi
-actual_checksum=$(./mc cat minio3/newbucket/lrgfile | md5sum)
+actual_checksum=$(./mc cat silo3/newbucket/lrgfile | md5sum)
 if [ "${expected_checksum}" != "${actual_checksum}" ]; then
 	echo "replication failed on multipart objects expected ${expected_checksum} got ${actual_checksum}"
 	exit
 fi
 rm ./lrgfile
 
-./mc rm -r --versions --force minio1/newbucket/lrgfile
+./mc rm -r --versions --force silo1/newbucket/lrgfile
 if [ $? -ne 0 ]; then
 	echo "expected object to be present, exiting.."
 	exit_1
 fi
 
 sleep 5
-./mc stat --no-list minio1/newbucket/lrgfile
+./mc stat --no-list silo1/newbucket/lrgfile
 if [ $? -eq 0 ]; then
 	echo "expected object to be deleted permanently after replication, exiting.."
 	exit_1
 fi
 
-vID=$(./mc stat --no-list minio2/newbucket/README.md --json | jq .versionID)
+vID=$(./mc stat --no-list silo2/newbucket/README.md --json | jq .versionID)
 if [ $? -ne 0 ]; then
 	echo "expecting object to be present. exiting.."
 	exit_1
 fi
-./mc tag set --version-id "${vID}" minio2/newbucket/README.md "key=val"
+./mc tag set --version-id "${vID}" silo2/newbucket/README.md "key=val"
 if [ $? -ne 0 ]; then
 	echo "expecting tag set to be successful. exiting.."
 	exit_1
 fi
 sleep 5
 
-./mc tag remove --version-id "${vID}" minio2/newbucket/README.md
+./mc tag remove --version-id "${vID}" silo2/newbucket/README.md
 if [ $? -ne 0 ]; then
 	echo "expecting tag removal to be successful. exiting.."
 	exit_1
 fi
 sleep 5
 
-replStatus_minio2=$(./mc stat --no-list minio2/newbucket/README.md --json | jq -r .replicationStatus)
+replStatus_silo2=$(./mc stat --no-list silo2/newbucket/README.md --json | jq -r .replicationStatus)
 if [ $? -ne 0 ]; then
 	echo "expecting object to be present. exiting.."
 	exit_1
 fi
 
-if [ ${replStatus_minio2} != "COMPLETED" ]; then
+if [ ${replStatus_silo2} != "COMPLETED" ]; then
 	echo "expected tag removal to have replicated, exiting..."
 	exit_1
 fi
 
-./mc rm minio3/newbucket/README.md
+./mc rm silo3/newbucket/README.md
 sleep 5
 
-./mc stat --no-list minio2/newbucket/README.md
+./mc stat --no-list silo2/newbucket/README.md
 if [ $? -eq 0 ]; then
 	echo "expected file to be deleted, exiting.."
 	exit_1
 fi
 
-./mc stat --no-list minio1/newbucket/README.md
+./mc stat --no-list silo1/newbucket/README.md
 if [ $? -eq 0 ]; then
 	echo "expected file to be deleted, exiting.."
 	exit_1
 fi
 
-./mc mb --with-lock minio3/newbucket-olock
+./mc mb --with-lock silo3/newbucket-olock
 sleep 5
 
-enabled_minio2=$(./mc stat --json minio2/newbucket-olock | jq -r .ObjectLock.enabled)
+enabled_silo2=$(./mc stat --json silo2/newbucket-olock | jq -r .ObjectLock.enabled)
 if [ $? -ne 0 ]; then
 	echo "expected bucket to be mirrored with object-lock but not present, exiting..."
 	exit_1
 fi
 
-if [ "${enabled_minio2}" != "Enabled" ]; then
+if [ "${enabled_silo2}" != "Enabled" ]; then
 	echo "expected bucket to be mirrored with object-lock enabled, exiting..."
 	exit_1
 fi
 
-enabled_minio1=$(./mc stat --json minio1/newbucket-olock | jq -r .ObjectLock.enabled)
+enabled_silo1=$(./mc stat --json silo1/newbucket-olock | jq -r .ObjectLock.enabled)
 if [ $? -ne 0 ]; then
 	echo "expected bucket to be mirrored with object-lock but not present, exiting..."
 	exit_1
 fi
 
-if [ "${enabled_minio1}" != "Enabled" ]; then
+if [ "${enabled_silo1}" != "Enabled" ]; then
 	echo "expected bucket to be mirrored with object-lock enabled, exiting..."
 	exit_1
 fi
 
 # "Test if most recent tag update is replicated"
-./mc tag set minio2/newbucket "key=val1"
+./mc tag set silo2/newbucket "key=val1"
 if [ $? -ne 0 ]; then
 	echo "expecting tag set to be successful. exiting.."
 	exit_1
@@ -339,49 +338,49 @@ fi
 
 sleep 10
 
-val=$(./mc tag list minio1/newbucket --json | jq -r .tagset | jq -r .key)
+val=$(./mc tag list silo1/newbucket --json | jq -r .tagset | jq -r .key)
 if [ "${val}" != "val1" ]; then
 	echo "expected bucket tag to have replicated, exiting..."
 	exit_1
 fi
-# stop minio1
+# stop silo1
 kill -9 ${site1_pid}
-# Update tag on minio2/newbucket when minio1 is down
-./mc tag set minio2/newbucket "key=val2"
-# create a new bucket on minio2. This should replicate to minio1 after it comes online.
-./mc mb minio2/newbucket2
-# delete bucket2 on minio2. This should replicate to minio1 after it comes online.
-./mc rb minio2/bucket2
+# Update tag on silo2/newbucket when silo1 is down
+./mc tag set silo2/newbucket "key=val2"
+# create a new bucket on silo2. This should replicate to silo1 after it comes online.
+./mc mb silo2/newbucket2
+# delete bucket2 on silo2. This should replicate to silo1 after it comes online.
+./mc rb silo2/bucket2
 
-# Restart minio1 instance
-minio server --config-dir /tmp/minio-ldap --address ":9001" /tmp/minio-ldap-idp1/{1...4} >/tmp/minio1_1.log 2>&1 &
+# Restart silo1 instance
+silo server --config-dir /tmp/silo-ldap --address ":9001" /tmp/silo-ldap-idp1/{1...4} >/tmp/silo1_1.log 2>&1 &
 sleep 200
 
-# Test whether most recent tag update on minio2 is replicated to minio1
-val=$(./mc tag list minio1/newbucket --json | jq -r .tagset | jq -r .key)
+# Test whether most recent tag update on silo2 is replicated to silo1
+val=$(./mc tag list silo1/newbucket --json | jq -r .tagset | jq -r .key)
 if [ "${val}" != "val2" ]; then
 	echo "expected bucket tag to have replicated, exiting..."
 	exit_1
 fi
 
-# Test if bucket created/deleted when minio1 is down healed
-diff -q <(./mc ls minio1) <(./mc ls minio2) 1>/dev/null
+# Test if bucket created/deleted when silo1 is down healed
+diff -q <(./mc ls silo1) <(./mc ls silo2) 1>/dev/null
 if [ $? -ne 0 ]; then
 	echo "expected 'bucket2' delete and 'newbucket2' creation to have replicated, exiting..."
 	exit_1
 fi
 
 # force a resync after removing all site replication
-./mc admin replicate rm --all --force minio1
-./mc rb minio2 --force --dangerous
-./mc admin replicate add minio1 minio2
-./mc admin replicate resync start minio1 minio2
+./mc admin replicate rm --all --force silo1
+./mc rb silo2 --force --dangerous
+./mc admin replicate add silo1 silo2
+./mc admin replicate resync start silo1 silo2
 sleep 30
 
-./mc ls -r --versions minio1/newbucket >/tmp/minio1.txt
-./mc ls -r --versions minio2/newbucket >/tmp/minio2.txt
+./mc ls -r --versions silo1/newbucket >/tmp/silo1.txt
+./mc ls -r --versions silo2/newbucket >/tmp/silo2.txt
 
-out=$(diff -qpruN /tmp/minio1.txt /tmp/minio2.txt)
+out=$(diff -qpruN /tmp/silo1.txt /tmp/silo2.txt)
 ret=$?
 if [ $ret -ne 0 ]; then
 	echo "BUG: expected no missing entries after replication resync: $out"