0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-07 13:19:19 +08:00
discourse/migrations
Gerhard Schlager 03fe4e4977 MT: Switch disco upload to files.db
This is the next step in moving the upload pipeline over to files.db. Until
now `disco upload` wrote its own uploads.db with a JSON blob per row
(`uploads(id, upload JSON_TEXT, ...)`). files.db has the real Discourse upload
columns instead, plus a separate `upload_results` table that records what
happened to each source row. The tasks now write through the generated
`FilesDB::*` models rather than hand-rolled INSERTs and JSON.

What this buys us:

- The ad-hoc SQL the tasks ran against `upload ->> 'sha1'` and friends turns
  into plain column reads, so joins and queries are actually useful.
- `status` and `skip_reason` are string enums (`ok`/`skipped`/`error`,
  `file_not_found`/`download_error`/...), so they're greppable and easy to eyeball.

Details:

- The uploader writes one `upload_results` row per source row (id, status,
  skip_reason, skip_details, markdown, upload_id) and inserts into
  `files.uploads` only for staging upload ids it hasn't written yet. Several
  source rows can dedup onto one upload via sha1 (UploadCreator hands back the
  existing record), so the writer tracks seen staging ids and references them
  from later results.
- I adopted the error taxonomy from #33546: `UploadSizeExceededError <
  DownloadFailedError`, unlinking the partial file on oversize, wrapping
  download failures in `DownloadFailedError`, and using `response.value` for
  HTTP >= 400. Oversize maps to `upload_size_exceeded`, other download failures
  to `download_error`. Behavior change worth calling out: a download failure now
  records an error result instead of silently dropping the row. To retry those,
  the existing delete-missing settings clear the null-upload results so they get
  reprocessed.
- Fixed the last cross-thread hazard in the download cache: the `downloads`
  table is read into a Hash once in `before_run`, so worker threads no longer
  touch the DB connection to look up a cached filename. Fresh records still ride
  back on results and are written (and cached) by the single writer thread.
- The optimizer writes one `optimized_images` row per generated image and reads
  its work from `upload_results JOIN uploads` real columns. I left its
  IntermediateDB queries (`posts.upload_ids`, `users.avatar_upload_id`) verbatim
  even though they're stale against the current IDB schema; that's a later PR.
- The fixer reads uploads straight from the `uploads` columns and, on a missing
  store file, drops the upload, its optimized images, and the results pointing
  at it so the source rows get recreated on the next run.
- Plumbing: `uploads.rb` migrates files.db and sets up `Database::FilesDB`; the
  importer config key `uploads_db` becomes `files_db` and the executor attaches
  it via the new schema path. Deleted the old `uploads_db_schema` and its
  `UPLOADS_DB_SCHEMA_PATH`.

Known window: `disco import`'s `Steps::Uploads` still reads the old JSON shape
(`up.upload`), so the import uploads step will fail against a files.db until the
next PR in the series adapts it. I did not touch the step here.
2026-07-10 21:49:15 +02:00
..
bin MT: Split the migrations tooling into separate gems (#40492) 2026-06-02 22:20:03 +02:00
converters MT: Rename IntermediateDB uploads table to upload_sources 2026-07-10 20:50:03 +02:00
core MT: Switch disco upload to files.db 2026-07-10 21:49:15 +02:00
docs MT: Add disco check — a single entrypoint for all schema and converter checks 2026-06-11 21:27:17 +02:00
importer MT: Switch disco upload to files.db 2026-07-10 21:49:15 +02:00
tooling MT: Support ignoring all other tables in schema configs 2026-07-10 21:24:17 +02:00
.gitignore MT: Split the migrations tooling into separate gems (#40492) 2026-06-02 22:20:03 +02:00
.reek.yml MT: Refactor schema configuration from YAML to Ruby DSL 2026-03-19 18:10:26 +01:00
.rubocop.yml MT: Add a TUI progress reporter and use it in the importer too 2026-06-25 17:46:04 +02:00
AGENTS.md MT: Add disco check — a single entrypoint for all schema and converter checks 2026-06-11 21:27:17 +02:00
CLAUDE.md MT: Refactor schema configuration from YAML to Ruby DSL 2026-03-19 18:10:26 +01:00
README.md MT: Run conversion steps concurrently and split the heavy ones across cores 2026-07-03 11:48:25 +02:00

Migrations Tooling

The migrations/ directory is split into four path-referenced gems:

  • core/Migrations::*: CLI framework, UI, SQLite schemas, DB infrastructure, IntermediateDB models, and the conversion framework (Migrations::Conversion::*).
  • tooling/Migrations::Tooling::*: the schema DSL, disco schema commands, benchmarks.
  • converters/Migrations::Converters::*: public converter implementations + source adapters.
  • importer/Migrations::Importer::*: the row importer and the uploads importer.

All four are wired into the root Gemfile via path: in the optional :migrations group.

Command line interface

The single binary is migrations/bin/disco (commands register dynamically via Migrations::CLI::Registry). Run it without arguments — or with --help — for the authoritative, always-current list of commands:

migrations/bin/disco --help

Rails is booted lazily: only commands that declare requires_rails! (import, upload, schema) load the Discourse app.

Converters

Public converters live in converters/lib/migrations/converters/. To run a private (closed-source) converter, put its code in a subdirectory of private/converters/ (or point MIGRATIONS_PRIVATE_CONVERTERS_PATH at it).

Source DB adapters and fork safety

Worker processes inherit the source DB connection's socket from the main process. Whether that's dangerous depends on the client library: a destructor that only closes the file descriptor is harmless (the parent still holds it, so the kernel sends nothing over the wire), but a destructor that writes a protocol goodbye kills the parent's session as soon as a worker exits — libpq sends a Terminate message, MySQL clients send COM_QUIT.

Adapter::Postgres handles this by registering a ForkManager.after_fork_child hook that calls discard! in each worker: the inherited socket is redirected to /dev/null, and any later use of the adapter in the worker raises DiscardedError. New adapters should follow the same pattern. The discard mechanism itself is library-specific — mysql2 has automatic_close = false, trilogy has a native discard!. To check whether a library needs one at all: connect, fork an empty child that exits normally, wait for it, and query again from the parent (see the fork-safety specs in postgres_spec.rb).

Partitioning large steps

Most steps run in a single worker. A handful are large enough that it's worth splitting them across CPU cores, so the framework can run one worker per chunk of the source. A step opts in from its source block:

source do
  reads_table "topic_users", where: "user_id > 0"
  partition_by :topic_id
end

reads_table is the part that reads a whole table: it defines items (SELECT * FROM topic_users WHERE …) and max_progress (the row count), filtered by where. It works on its own, without partitioning — a plain table-copy step declares just reads_table and writes neither method. partition_by adds the split: it takes the key (normally a single indexed column, so each chunk is an index range scan; pass an array for a composite key) and reuses the table and filter from reads_table, so it only needs the column. When both are present the generated queries add the chunk to their WHERE automatically.

Override items when you need specific columns, a join, or a particular order — and then add partition_slice to its WHERE yourself:

def items
  @source_db.query("SELECT id, name FROM topic_users WHERE #{partition_slice} AND name IS NOT NULL")
end

The framework does the rest. Before forking, it asks the adapter for the chunk boundaries — evenly sized chunks over a numeric key, or a sorted-key scan for a text/UUID/composite key. It then forks one worker per chunk; each worker reads its [lower, upper) slice (that's what partition_slice expands to), writes its own SQLite shard, and the shards are merged back into the run database.

Two things to get right:

  • In a custom query, add partition_slice to the WHERE. Miss it and each worker reads the whole source instead of its slice — duplicated work and wrong counts.
  • Only partition order-independent steps. Workers run concurrently and their output is merged, so there is no global order across the step. A running total or a sequence number across all rows can't be partitioned. Deduplication can, but do it in the source query (DISTINCT ON, a window function, a view) and partition on the dedup key, rather than keeping state in process.

Schema DSL

The schema DSL lives in migrations/tooling/lib/migrations/tooling/schema/dsl/. Config sources are in migrations/tooling/config/schema/. Generated artifacts (SQL, models, enums) are written into migrations/core/.

Key files:

  • table_builder.rb - DSL for defining table configs
  • schema_resolver.rb - Resolves DSL config + DB introspection into final schema
  • conventions_builder.rb - Global column conventions (renames, type overrides)
  • generator.rb - Generates SQL, models, and enums from resolved schema
  • validator.rb - Validates DSL config
  • resolved_schema_validator.rb - Validates resolved schema before generation

Development

Installing gems

bundle config set --local with migrations
bundle install

Updating gems

bundle update --group migrations

Running tests

Each gem has an isolated, no-Rails suite, run from the gem directory:

cd migrations/core       && bundle exec rspec
cd migrations/tooling    && bundle exec rspec
cd migrations/converters && bundle exec rspec
cd migrations/importer   && bundle exec rspec

Specs that need a booted Rails environment are tagged :rails. They are excluded by default and run from the host app's bundle:

cd migrations/<gem> && BUNDLE_GEMFILE=../../Gemfile MIGRATIONS_RAILS=1 bundle exec rspec --tag rails

Linting

bin/lint path/to/file
bin/lint --fix path/to/file

Uses both rubocop and syntax_tree. Always lint changed files.