fix(pd): wait for a held metadata RocksDB lock at startup

.asf.yaml

@@ -33,16 +33,10 @@ github:
   protected_branches:
     master:
       required_status_checks:
-        # Keep workflows providing these checks unfiltered; path skips can leave required checks pending.
         # strict means "Require PR to be up-to-date before merging". (enable when branch unstable)
         strict: false
-        # contexts are the names of checks that must pass (now only enable the basic check)
-        contexts:
-          - Analyze (java)
-          - CodeQL
-          - check-license
-          - build-server (memory, 11)
-          - build-commons (11)
+        # CI remains visible but advisory while shared runner queues are constrained.
+        contexts: []
       required_pull_request_reviews:
         dismiss_stale_reviews: true
         require_code_owner_reviews: false

.editorconfig

@@ -36,6 +36,7 @@ continuation_indent_size = 8
 
 [*.md]
 max_line_length = off
+ij_wrap_on_typing = false
 
 [*.java]
 ij_java_doc_add_p_tag_on_empty_lines = true

.gitattributes

@@ -15,5 +15,8 @@ install-dist/scripts/ export-ignore
 hugegraph-commons/hugegraph-dist/ export-ignore
 docker/ export-ignore
 
+# Documentation images are not needed in source releases.
+/docs/images/ export-ignore
+
 # Keep the generated golden corpus byte-identical across checkouts
 hugegraph-commons/hugegraph-common/src/test/resources/longencoding-golden.txt text eol=lf

.github/codecov.yml

@@ -0,0 +1,22 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Keep coverage from unexecuted test groups in affected-input CI reports.
+flag_management:
+  default_rules:
+    carryforward: true
+
+comment:
+  show_carryforward_flags: true

.github/outdated/APACHE_PROPOSAL.md

@@ -34,7 +34,7 @@ Although most of the main development of HugeGraph has been completed, there are
 
 #### Meritocracy
 
-HugeGraph was incubated at Baidu in 2016 and open-sourced on [GitHub](https://github.com/hugegraph/hugegraph) in 2018. The project (including sub-projects) now has 30+ contributors from many companies. Some of these contributors become committers, and the project has hundreds of known users around the world. We will follow Apache's Meritocracy way to re-organize the community roles. We have set up the PPMC Team and Committer Team. Of course, contributions are welcomed and highly valued. New contributors are guided and reviewed by existing PMC members. When an active contributor has submitted enough good patches, PMC will start a vote to promote him/her to become a member of the Committer Team or PMC Team.
+HugeGraph was incubated at Baidu in 2016 and open-sourced on [GitHub](https://github.com/apache/hugegraph) in 2018. The project (including sub-projects) now has 30+ contributors from many companies. Some of these contributors become committers, and the project has hundreds of known users around the world. We will follow Apache's Meritocracy way to re-organize the community roles. We have set up the PPMC Team and Committer Team. Of course, contributions are welcomed and highly valued. New contributors are guided and reviewed by existing PMC members. When an active contributor has submitted enough good patches, PMC will start a vote to promote him/her to become a member of the Committer Team or PMC Team.
 
 #### Community
 
@@ -52,7 +52,7 @@ HugeGraph implements the API of [Apache TinkerPop](https://tinkerpop.apache.org/
 
 #### Project Name
 
-We have checked and believe the name is [suitable](https://github.com/hugegraph/hugegraph/issues/1646) and the project has legal permission to continue using its current name. There are no other projects found using this name through Google Search.
+We have checked and believe the name is [suitable](https://github.com/apache/hugegraph/issues/1646) and the project has legal permission to continue using its current name. There are no other projects found using this name through Google Search.
 
 #### Relationship with Titan/Janus Graph
 
@@ -94,10 +94,10 @@ HugeGraph documentation is provided on https://hugegraph.github.io/hugegraph-doc
 
 This project consists of 2 core sub-projects and 2 other sub-projects, all of which are hosted by [GitHub hugegraph organization](https://github.com/orgs/hugegraph/repositories) since 2018. The codes are already under Apache License Version 2.0. The git address of sub-project repositories are as follows:
 
-1. The graph database repository `hugegraph`, core sub-project, including graph server, graph engine, and graph storage: https://github.com/hugegraph/hugegraph
-2. The graph computing repository `hugegraph-computer`, core sub-project, including graph computing and graph algorithms: https://github.com/hugegraph/hugegraph-computer
-3. The common functions repository `hugegraph-commons`: https://github.com/hugegraph/hugegraph-commons
-4. The ecosystem repository `hugegraph-toolchain`, including `hugegraph-client`, `hugegraph-loader`, `hugegraph-tools`, `hugegraph-hubble`, `hugegraph-test`, `hugegraph-doc`: https://github.com/hugegraph/hugegraph-toolchain
+1. The graph database repository `hugegraph`, core sub-project, including graph server, graph engine, and graph storage: https://github.com/apache/hugegraph
+2. The graph computing repository `hugegraph-computer`, core sub-project, including graph computing and graph algorithms: https://github.com/apache/hugegraph-computer
+3. The common functions repository `hugegraph-commons`: https://github.com/apache/hugegraph/tree/master/hugegraph-commons
+4. The ecosystem repository `hugegraph-toolchain`, including `hugegraph-client`, `hugegraph-loader`, `hugegraph-tools`, `hugegraph-hubble`, `hugegraph-test`, `hugegraph-doc`: https://github.com/apache/hugegraph-toolchain
 
 ### Source and Intellectual Property Submission Plan
 
@@ -107,7 +107,7 @@ The code is currently under Apache License Version 2.0, and it was verified ther
 
 As all dependencies are managed by Apache Maven, none of the external libraries need to be packaged in a source distribution. All dependencies have Apache compatible licenses except for 4 dependencies: MySQL Connector (GPL), word (GPL), JBoss Logging 3 (LGPL), and jnr-posix (LGPL+GPL), we will remove these dependencies in the future.
 
-HugeGraph has the following external [dependencies](https://github.com/hugegraph/hugegraph/issues/1632):
+HugeGraph has the following external [dependencies](https://github.com/apache/hugegraph/issues/1632):
 
 - Apache License
 
@@ -263,26 +263,26 @@ None
 
 - hugegraph-dev: [dev@hugegraph.incubator.apache.org](mailto:dev@hugegraph.incubator.apache.org) for development and users discussions.
 - hugegraph-private: [private@hugegraph.incubator.apache.org](mailto:private@hugegraph.incubator.apache.org) for PPMC discussions.
-- hugegraph-commits: [commits@hugegraph.incubator.apache.org](mailto:commits@hugegraph.incubator.apache.org) for commits / [pull requests](https://github.com/hugegraph/hugegraph/pulls) and other notifications like code review comments.
+- hugegraph-commits: [commits@hugegraph.incubator.apache.org](mailto:commits@hugegraph.incubator.apache.org) for commits / [pull requests](https://github.com/apache/hugegraph/pulls) and other notifications like code review comments.
 
 #### Subversion Directory
 
 None
 
 #### Git Repositories
 
-1. `hugegraph`: https://github.com/hugegraph/hugegraph.git
-2. `hugegraph-computer`: https://github.com/hugegraph/hugegraph-computer.git
-3. `hugegraph-commons`: https://github.com/hugegraph/hugegraph-commons.git
-4. `hugegraph-toolchain`: https://github.com/hugegraph/hugegraph-toolchain.git
+1. `hugegraph`: https://github.com/apache/hugegraph.git
+2. `hugegraph-computer`: https://github.com/apache/hugegraph-computer.git
+3. `hugegraph-commons`: https://github.com/apache/hugegraph.git
+4. `hugegraph-toolchain`: https://github.com/apache/hugegraph-toolchain.git
 
 #### Issue Tracking
 
-The community would like to continue using [GitHub Issues](https://github.com/hugegraph/hugegraph/issues) (but will move to github.com/apache/).
+The community would like to continue using [GitHub Issues](https://github.com/apache/hugegraph/issues) (but will move to github.com/apache/).
 
 #### Other Resources
 
-- The community has already chosen [GitHub actions](https://github.com/hugegraph/hugegraph/actions) as continuous integration tools.
+- The community has already chosen [GitHub actions](https://github.com/apache/hugegraph/actions) as continuous integration tools.
 - The community has already used [codecov](https://github.com/marketplace/codecov) to check code coverage.
 - The community has already used [mvn repository](https://mvnrepository.com/search?q=hugegraph) as binary package release platform.
 

.github/outdated/cla.yml

@@ -18,8 +18,8 @@ jobs:
           PERSONAL_ACCESS_TOKEN : ${{ secrets.PERSONAL_ACCESS_TOKEN }}
         with:
           path-to-signatures: '.github/cla-signatures/cla.json'
-          path-to-document: 'https://github.com/hugegraph/hugegraph-doc/blob/master/CLA.md' # e.g. a CLA or a DCO document
-          custom-allsigned-prcomment: '**Good**! All Contributors have signed the [CLA](https://github.com/hugegraph/hugegraph-doc/blob/master/CLA.md).'
+          path-to-document: 'https://www.apache.org/licenses/contributor-agreements.html' # e.g. a CLA or a DCO document
+          custom-allsigned-prcomment: '**Good**! All Contributors have signed the [CLA](https://www.apache.org/licenses/contributor-agreements.html).'
           # branch should not be protected
           branch: 'cla-assist'
           allowlist: bot*

.github/scripts/check-docker-images.sh

@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+set -euo pipefail
+: "${IMAGE_TAG:?set the unique CI image tag}"
+for pair in \
+    hugegraph-pd/Dockerfile=hugegraph/pd \
+    hugegraph-store/Dockerfile=hugegraph/store \
+    hugegraph-server/Dockerfile=hugegraph/hugegraph \
+    hugegraph-server/Dockerfile-hstore=hugegraph/server; do
+    (
+        dockerfile="${pair%%=*}"
+        IMAGE_ID=$(docker image inspect --format '{{.Id}}' "${pair#*=}:${IMAGE_TAG}")
+        echo "Checking ${pair#*=}:${IMAGE_TAG} ($IMAGE_ID)"
+        HC=$(docker image inspect --format '{{json .Config.Healthcheck}}' "$IMAGE_ID")
+        [[ "$HC" != null ]] || { echo "Missing HEALTHCHECK: $dockerfile"; exit 1; }
+
+        # Helm reuses these images for tool containers instead of pulling curlimages/curl.
+        # Check the same non-root/read-only tool environment as the Server test hook.
+        if [[ "$dockerfile" == hugegraph-store/* || "$dockerfile" == hugegraph-server/* ]]; then
+            HELM_TOOLS=(curl tr date sleep)
+            if [[ "$dockerfile" == hugegraph-server/* ]]; then
+                HELM_TOOLS+=(getent base64 awk grep sort tail)
+            fi
+            docker run --rm --pull never --read-only --user 100:101 --entrypoint sh "$IMAGE_ID" -c '
+                for tool in "$@"; do
+                    command -v "$tool" >/dev/null || {
+                        echo "Missing Helm tool: $tool" >&2
+                        exit 1
+                    }
+                    case "$tool" in
+                        getent) getent ahosts localhost >/dev/null ;;
+                        base64) test "$(printf Helm | base64 | tr -d "\n")" = SGVsbQ== ;;
+                    esac
+                done
+                curl --version >/dev/null
+            ' helm-tools "${HELM_TOOLS[@]}"
+        fi
+
+        JAVA_VERSION=$(docker run --rm --pull never --entrypoint java "$IMAGE_ID" -version 2>&1)
+        echo "$JAVA_VERSION"
+        grep -Eq 'version "17\.' <<< "$JAVA_VERSION" || {
+            echo "ERROR: expected a Java 17 runtime in $dockerfile"
+            exit 1
+        }
+
+        if [[ "$dockerfile" == hugegraph-server/* ]]; then
+            STATE=$(docker run --rm --pull never "$IMAGE_ID" bash -c \
+                'source /hugegraph-server/bin/util.sh && port_listen_state 8080')
+            echo "port_listen_state 8080 -> $STATE"
+            # Require a usable answer from the socket-table tool in the image.
+            [[ "$STATE" == "free" || "$STATE" == "busy" ]] || {
+                echo "ERROR: no usable socket-table tool (ss/netstat) in $dockerfile"
+                exit 1
+            }
+        fi
+
+        if [[ "$dockerfile" == hugegraph-server/* ]]; then
+            CHECK_DIR=$(mktemp -d)
+            trap 'rm -rf "$CHECK_DIR"' EXIT
+            docker run --rm --pull never --entrypoint bash \
+                -v "$CHECK_DIR:/check" "$IMAGE_ID" -c \
+                'cp /hugegraph-server/lib/hugegraph-api-*.jar \
+                    /hugegraph-server/lib/hugegraph-common-*.jar /check/'
+
+            API_JAR=$(find "$CHECK_DIR" -name 'hugegraph-api-*.jar' -print -quit)
+            COMMON_JAR=$(find "$CHECK_DIR" -name 'hugegraph-common-*.jar' -print -quit)
+            EXPECTED_MANIFEST=$(sed -n \
+                's|.*<Implementation-Version>\([^<]*\)</Implementation-Version>.*|\1|p' \
+                hugegraph-server/hugegraph-api/pom.xml)
+            ACTUAL_MANIFEST=$(unzip -p "$API_JAR" META-INF/MANIFEST.MF |
+                sed -n 's/^Implementation-Version: *//p' | tr -d '\r')
+            EXPECTED_PROPERTY=$(sed -n 's/^ApiVersion=//p' \
+                hugegraph-commons/hugegraph-common/src/main/resources/version.properties)
+            ACTUAL_PROPERTY=$(unzip -p "$COMMON_JAR" version.properties |
+                sed -n 's/^ApiVersion=//p' | tr -d '\r')
+
+            [[ "$ACTUAL_MANIFEST" == "$EXPECTED_MANIFEST" ]] || {
+                echo "ERROR: API manifest is $ACTUAL_MANIFEST; expected $EXPECTED_MANIFEST"
+                exit 1
+            }
+            [[ "$ACTUAL_PROPERTY" == "$EXPECTED_PROPERTY" ]] || {
+                echo "ERROR: API property is $ACTUAL_PROPERTY; expected $EXPECTED_PROPERTY"
+                exit 1
+            }
+        fi
+    )
+done