mirror of
https://github.com/pgsty/minio.git
synced 2026-08-10 00:03:29 +03:00
77bdc4c0cd
Two coupled changes that must land together, because the same files carry both: the server now identifies itself as Silo, and every path that would have called home to a MinIO-operated service is closed. Product identity - build-constants.go: store name, UA name and startup banner become Silo. The Go identifiers (MinioStoreName, MinioBannerName, ...) keep their names on purpose - renaming exported symbols would churn the compatibility surface for a cosmetic gain, and the rebrand guard freezes that surface. - main.go, server-startup-msg.go, ftp-server.go and the user-visible log, help and error strings across cmd/ and internal/ switch to Silo. Original MinIO copyright, LICENSE, NOTICE and CREDITS are untouched; --version now prints the upstream copyright, the pgsty modification notice, and the trademark policy's approved "based on MinIO technology" attribution. - api-headers.go: the HTTP Server header becomes "Silo". This is the one externally observable identity change, so TestCommonHeadersUseSiloProductName pins it - probes that sniff for "MinIO" must move to capability detection. - Prometheus metric HELP strings keep their MinIO wording. They are part of the metrics contract the guard protects, not product copy. Configuration directory - config-dir.go: new installs use ~/.silo. If only ~/.minio exists it is still read, with a one-time notice and no files moved. If both exist ~/.silo wins and an ambiguity warning is emitted; an explicit --config-dir always wins. Covered by TestSelectDefaultConfigDir. The internal .minio.sys layout is never renamed - this rule applies to the user config directory only. Upstream service lockdown - globalInplaceUpdateDisabled is now true at initialization rather than being set from MINIO_UPDATE. common-main.go still parses MINIO_UPDATE so upgrading nodes do not fail on an unknown key, but warns that the value is ignored; there is no way to re-enable the updater. TestInplaceUpdateCannotBeEnabled guards that. Without this, an admin with mc could have overwritten /usr/bin/silo with an upstream MinIO binary. - verifyBinary and commitBinary refuse early; the ServerUpdate v1/v2 admin routes and the peer-rest update endpoints stay registered and keep returning the existing programmatic error, so clients see a stable failure rather than a 404. - MinioReleaseBaseURL and defaultMinisignPubkey are emptied: no dl.min.io download root, and upstream's minisign key is no longer a trust root for anything this fork ships. - cmd/callhome.go is deleted and internal/config/subnet/ is reduced to parsing its old keys and reporting that the integration is disabled. config-current.go warns instead of failing when callhome or SUBNET settings are present, so an upgraded node with those keys still starts. - internal/config/errors.go replaces the MinIO Slack and support entry points with Silo documentation and issue links. Error codes and programmatic fields are unchanged. Verified: the compatibility baseline is unchanged except for the deliberate removal of the /api/health/upload SUBNET route; go build, go vet and the full cmd/ and internal/ unit suites pass; a locally built binary starts, serves S3/Admin/metrics on the unchanged /minio/* routes, answers with Server: Silo, and falls back to a pre-existing ~/.minio with the expected notice. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
249 lines
9.3 KiB
Go
249 lines
9.3 KiB
Go
// Copyright (c) 2015-2021 MinIO, Inc.
|
|
//
|
|
// This file is part of MinIO Object Storage stack
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package config
|
|
|
|
// UI errors
|
|
var (
|
|
ErrInvalidXLValue = newErrFn(
|
|
"Invalid drive path",
|
|
"Please provide a fresh drive for a single-drive Silo setup",
|
|
"Silo only supports fresh drive paths",
|
|
)
|
|
|
|
ErrInvalidBrowserValue = newErrFn(
|
|
"Invalid console value",
|
|
"Please check the passed value",
|
|
"Environment can only accept `on` and `off` values. To disable Console access, set this value to `off`",
|
|
)
|
|
|
|
ErrInvalidFSOSyncValue = newErrFn(
|
|
"Invalid O_SYNC value",
|
|
"Please check the passed value",
|
|
"Can only accept `on` and `off` values. To enable O_SYNC for fs backend, set this value to `on`",
|
|
)
|
|
|
|
ErrOverlappingDomainValue = newErrFn(
|
|
"Overlapping domain values",
|
|
"Please check the passed value",
|
|
"MINIO_DOMAIN only accepts non-overlapping domain values",
|
|
)
|
|
|
|
ErrInvalidDomainValue = newErrFn(
|
|
"Invalid domain value",
|
|
"Please check the passed value",
|
|
"Domain can only accept DNS compatible values",
|
|
)
|
|
|
|
ErrInvalidErasureSetSize = newErrFn(
|
|
"Invalid erasure set size",
|
|
"Please check the passed value",
|
|
"Erasure set can only accept any of [2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16] values",
|
|
)
|
|
|
|
ErrInvalidWormValue = newErrFn(
|
|
"Invalid WORM value",
|
|
"Please check the passed value",
|
|
"WORM can only accept `on` and `off` values. To enable WORM, set this value to `on`",
|
|
)
|
|
|
|
ErrInvalidConfigDecryptionKey = newErrFn(
|
|
"Incorrect encryption key to decrypt internal data",
|
|
"Please set the correct default KMS key value or the correct root credentials for older MinIO versions.",
|
|
`Revert MINIO_KMS_KES_KEY_NAME or MINIO_ROOT_USER/MINIO_ROOT_PASSWORD (for older MinIO versions) to be able to decrypt the internal data again.`,
|
|
)
|
|
|
|
ErrInvalidCredentials = newErrFn(
|
|
"Invalid credentials",
|
|
"Please provide correct credentials",
|
|
`Access key length should be at least 3, and secret key length at least 8 characters`,
|
|
)
|
|
|
|
ErrInvalidRootUserCredentials = newErrFn(
|
|
"Invalid credentials",
|
|
"Please provide correct credentials",
|
|
EnvRootUser+` length should be at least 3, and `+EnvRootPassword+` length at least 8 characters`,
|
|
)
|
|
|
|
ErrMissingEnvCredentialRootUser = newErrFn(
|
|
"Missing credential environment variable, \""+EnvRootUser+"\"",
|
|
"Environment variable \""+EnvRootUser+"\" is missing",
|
|
`Root user name (access key) and root password (secret key) are expected to be specified via environment variables MINIO_ROOT_USER and MINIO_ROOT_PASSWORD respectively`,
|
|
)
|
|
|
|
ErrMissingEnvCredentialRootPassword = newErrFn(
|
|
"Missing credential environment variable, \""+EnvRootPassword+"\"",
|
|
"Environment variable \""+EnvRootPassword+"\" is missing",
|
|
`Root user name (access key) and root password (secret key) are expected to be specified via environment variables MINIO_ROOT_USER and MINIO_ROOT_PASSWORD respectively`,
|
|
)
|
|
|
|
ErrMissingEnvCredentialAccessKey = newErrFn(
|
|
"Missing credential environment variable, \""+EnvAccessKey+"\"",
|
|
"Environment variables \""+EnvAccessKey+"\" and \""+EnvSecretKey+"\" are deprecated",
|
|
`Root user name (access key) and root password (secret key) are expected to be specified via environment variables MINIO_ROOT_USER and MINIO_ROOT_PASSWORD respectively`,
|
|
)
|
|
|
|
ErrMissingEnvCredentialSecretKey = newErrFn(
|
|
"Missing credential environment variable, \""+EnvSecretKey+"\"",
|
|
"Environment variables \""+EnvSecretKey+"\" and \""+EnvAccessKey+"\" are deprecated",
|
|
`Root user name (access key) and root password (secret key) are expected to be specified via environment variables MINIO_ROOT_USER and MINIO_ROOT_PASSWORD respectively`,
|
|
)
|
|
|
|
ErrInvalidErasureEndpoints = newErrFn(
|
|
"Invalid endpoint(s) in erasure mode",
|
|
"Please provide correct combination of local/remote paths",
|
|
"For more information, please refer to https://silo.pgsty.com/operations/concepts/erasure-coding/",
|
|
)
|
|
|
|
ErrInvalidNumberOfErasureEndpoints = newErrFn(
|
|
"Invalid total number of endpoints for erasure mode",
|
|
"Please provide number of endpoints greater or equal to 2",
|
|
"For more information, please refer to https://silo.pgsty.com/operations/concepts/erasure-coding/",
|
|
)
|
|
|
|
ErrStorageClassValue = newErrFn(
|
|
"Invalid storage class value",
|
|
"Please check the value",
|
|
`MINIO_STORAGE_CLASS_STANDARD: Format "EC:<Default_Parity_Standard_Class>" (e.g. "EC:3"). This sets the number of parity drives for Silo in Standard mode. Objects are stored in Standard mode if no storage class is defined in the Put request.
|
|
MINIO_STORAGE_CLASS_RRS: Format "EC:<Default_Parity_Reduced_Redundancy_Class>" (e.g. "EC:3"). This sets the number of parity drives for Silo in Reduced Redundancy mode. Objects are stored in Reduced Redundancy mode if the Put request specifies the RRS storage class.
|
|
See https://silo.pgsty.com/operations/concepts/erasure-coding/ for more information.`,
|
|
)
|
|
|
|
ErrUnexpectedBackendVersion = newErrFn(
|
|
"Backend version seems to be too recent",
|
|
"Please update to the latest Silo version",
|
|
"",
|
|
)
|
|
|
|
ErrInvalidAddressFlag = newErrFn(
|
|
"--address input is invalid",
|
|
"Please check --address parameter",
|
|
`--address binds to a specific ADDRESS:PORT, ADDRESS can be an IPv4/IPv6 address or hostname (default port is ':9000')
|
|
Examples: --address ':443'
|
|
--address '172.16.34.31:9000'
|
|
--address '[fe80::da00:a6c8:e3ae:ddd7]:9000'`,
|
|
)
|
|
|
|
ErrInvalidEndpoint = newErrFn(
|
|
"Invalid endpoint for single drive mode",
|
|
"Please check the endpoint",
|
|
`Single-Node modes requires absolute path without hostnames:
|
|
Examples:
|
|
$ silo server /data/silo/ # Single Node Single Drive
|
|
$ silo server /data-{1...4}/silo # Single Node Multi Drive`,
|
|
)
|
|
|
|
ErrUnsupportedBackend = newErrFn(
|
|
"Unable to write to the backend",
|
|
"Please ensure your drive supports O_DIRECT",
|
|
"",
|
|
)
|
|
|
|
ErrUnableToWriteInBackend = newErrFn(
|
|
"Unable to write to the backend",
|
|
"Please ensure the Silo binary has write permissions for the backend",
|
|
`Verify that the Silo binary is running as the same user who has write permissions for the backend`,
|
|
)
|
|
|
|
ErrPortAlreadyInUse = newErrFn(
|
|
"Port is already in use",
|
|
"Please ensure no other program uses the same address/port",
|
|
"",
|
|
)
|
|
|
|
ErrPortAccess = newErrFn(
|
|
"Unable to use specified port",
|
|
"Please ensure the Silo binary has 'cap_net_bind_service=+ep' permissions",
|
|
`Use 'sudo setcap cap_net_bind_service=+ep /path/to/silo' to provide sufficient permissions`,
|
|
)
|
|
|
|
ErrTLSReadError = newErrFn(
|
|
"Cannot read the TLS certificate",
|
|
"Please check if the certificate has the proper owner and read permissions",
|
|
"",
|
|
)
|
|
|
|
ErrTLSUnexpectedData = newErrFn(
|
|
"Invalid TLS certificate",
|
|
"Please check your certificate",
|
|
"",
|
|
)
|
|
|
|
ErrTLSNoPassword = newErrFn(
|
|
"Missing TLS password",
|
|
"Please set the password to environment variable `MINIO_CERT_PASSWD` so that the private key can be decrypted",
|
|
"",
|
|
)
|
|
|
|
ErrNoCertsAndHTTPSEndpoints = newErrFn(
|
|
"HTTPS specified in endpoints, but no TLS certificate is found on the local machine",
|
|
"Please add TLS certificate or use HTTP endpoints only",
|
|
"Refer to https://silo.pgsty.com/operations/network-encryption/ for information about how to load a TLS certificate in your server",
|
|
)
|
|
|
|
ErrCertsAndHTTPEndpoints = newErrFn(
|
|
"HTTP specified in endpoints, but the server in the local machine is configured with a TLS certificate",
|
|
"Please remove the certificate in the configuration directory or switch to HTTPS",
|
|
"",
|
|
)
|
|
|
|
ErrTLSWrongPassword = newErrFn(
|
|
"Unable to decrypt the private key using the provided password",
|
|
"Please set the correct password in environment variable `MINIO_CERT_PASSWD`",
|
|
"",
|
|
)
|
|
|
|
ErrUnexpectedError = newErrFn(
|
|
"Unexpected error",
|
|
"Please report this Silo error at https://github.com/pgsty/minio/issues",
|
|
"",
|
|
)
|
|
|
|
ErrInvalidCompressionIncludesValue = newErrFn(
|
|
"Invalid compression include value",
|
|
"Please check the passed value",
|
|
"Compress extensions/mime-types are delimited by `,`. For eg, MINIO_COMPRESS_MIME_TYPES=\"A,B,C\"",
|
|
)
|
|
|
|
ErrInvalidReplicationWorkersValue = newErrFn(
|
|
"Invalid value for replication workers",
|
|
"",
|
|
"MINIO_API_REPLICATION_WORKERS: should be > 0",
|
|
)
|
|
|
|
ErrInvalidTransitionWorkersValue = newErrFn(
|
|
"Invalid value for transition workers",
|
|
"",
|
|
"MINIO_API_TRANSITION_WORKERS: should be >= GOMAXPROCS/2",
|
|
)
|
|
ErrInvalidBatchKeyRotationWorkersWait = newErrFn(
|
|
"Invalid value for batch key rotation workers wait",
|
|
"Please input a non-negative duration",
|
|
"keyrotation_workers_wait should be > 0ms",
|
|
)
|
|
ErrInvalidBatchReplicationWorkersWait = newErrFn(
|
|
"Invalid value for batch replication workers wait",
|
|
"Please input a non-negative duration",
|
|
"replication_workers_wait should be > 0ms",
|
|
)
|
|
ErrInvalidBatchExpirationWorkersWait = newErrFn(
|
|
"Invalid value for batch expiration workers wait",
|
|
"Please input a non-negative duration",
|
|
"expiration_workers_wait should be > 0ms",
|
|
)
|
|
)
|