This repository currently does not accept external contributions in the form of pull requests. Please submit your suggestions and bug reports by opening a ticket.
The main purpose of sns-testing
is to enable developers of Internet Computer (IC) dapps to test Service Nervous System (SNS) decentralization. However, this solution may also be applicable in other scenarios, e.g.:
- Testing tools such as
dfx
,quill
,sns
. - Testing UX-related aspects before releasing the NNS frontend dapp.
Assuming you are a developer who wants to test SNS-decentralization of their dapp, you need to establish your own dapp's deployment process before using this solution. Usually, a testing deployment is done in a shell script that interacts with a local replica via DFX.
You might need to slightly adjust your deployment script to work with sns-testing. In particular, please avoid running dfx start
or dfx replica
inside your deployment script (sns-testing
will take care of starting a replica instance for you).
If you do not yet have a dapp that is ready for decentralization, you may still run sns-testing
with the built-in test dapp.
Skip to the next section if you are using an x86-compatible system, e.g., Linux, Windows, or Intel-based Mac.
The sns-testing
solution is based on Docker; however, there are subtle issues while running Docker on new Apple silicon systems (e.g., Apple M1, Apple M2). Therefore, Apple silicon users are advised to run the commands provided by this repository directly. This requires additional preparation:
-
Make sure you have Homebrew installed.
- Instructions: https://brew.sh/
- Use Homebrew to install (or upgrade to the latest available versions)
bash
,coreutils
(needed for tools e.g.,sha256sum
),jq
, andyq
:brew install bash coreutils jq yq
You also need rosetta that you can install by running:
softwareupdate --install-rosetta
Also make sure you have Rust installed including the
wasm32-unknown-unknown
target.- Instructions: https://www.rust-lang.org/tools/install
- Add
wasm32-unknown-unknown
into your active toolchain by running:
rustup target add wasm32-unknown-unknown
-
Ensure the newly installed tools are added to your
PATH
:echo 'export PATH="$PATH:/opt/homebrew/bin/:/usr/local/opt/coreutils/libexec/gnubin"' >> "${HOME}/.bashrc"
Above, we rely on
.bashrc
, as the main commands from this repository are to be executed via Bash. -
Clone this repository:
git clone git@github.com:dfinity/sns-testing.git cd sns-testing
-
Run the installation script:
bash install.sh
-
Start a local replica (this will keep running in the current console; press ⌘+C to stop):
DX_NET_JSON="${HOME}/.config/dfx/networks.json" mkdir -p "$(dirname "${DX_NET_JSON}")" cp "$DX_NET_JSON" "${DX_NET_JSON}.tmp" 2>/dev/null # save original config if present echo '{ "local": { "bind": "0.0.0.0:8080", "type": "ephemeral", "replica": { "subnet_type": "system", "port": 8000 } } }' > "${DX_NET_JSON}" ./bin/dfx start --clean; \ mv "${DX_NET_JSON}.tmp" "$DX_NET_JSON" 2>/dev/null # restore original config if it was present
While running these instructions for the first time, you may need to hit the "Allow" button to authorize the system to execute the binaries shipped with sns-testing, e.g.,
./bin/dfx
.This should print the dashboard URL:
Replica API running on 0.0.0.0:8000
-
Open another Bash console:
bash
and run the setup script:
./setup_locally.sh # from Bash
After this step, you can also access the NNS frontend dapp from the browser.
-
To validate the testing environment, run the test dapp shipped with this repository through the entire SNS lifecycle:
./run_basic_scenario.sh # from Bash
If the basic scenario finished successfully, you should see the message
Basic scenario has successfully finished.
on the last line of the output.Observe the newly created SNS instance via the NNS frontend dapp. When you try to login for the first time, you will need to register a new Internet Identity for testing.
If you have successfully executed the above commands, you are now ready to test your own dapp's SNS decentralization.
-
Clean-up (after you are done testing):
Note that performing the clean-up will delete some files in the sns-testing repository and your DFX wallets for the local network (not affecting mainnet). Make sure to back up all files you move into the sns-testing repository.
./cleanup.sh # from Bash
It should now be possible to repeat the scenario starting from step 4.
This section explains the simplest way to set up a local environment for testing SNS decentralization. However, this solution is based on Docker and is currently not supported on Apple silicon systems. Please proceed if you are using Linux, Windows, or Intel-based Mac.
After getting familiar with the basic scenario, you may replace the test canister with your own one, and use this repo as a skeleton for creating a custom testing environment.
-
If your dapp is ready for testing, clone it into the current directory and cd into it.
-
Start a local replica instance:
SNS_TESTING_INSTANCE=$( docker run -p 8000:8000 -p 8080:8080 -v "`pwd`":/dapp -d ghcr.io/dfinity/sns-testing:main dfx start --clean ) while ! docker logs $SNS_TESTING_INSTANCE 2>&1 | grep -m 1 'Replica API running' do echo "Awaiting local replica ..." sleep 3 done
This should print the dashboard URL:
Awaiting local replica ... Dashboard: http://localhost:8000/_/dashboard
-
Run setup:
docker exec -it $SNS_TESTING_INSTANCE bash setup_locally.sh
After this step, you can also access the NNS frontend dapp from the browser on your host machine.
-
Run the basic scenario:
docker exec $SNS_TESTING_INSTANCE bash run_basic_scenario.sh
If the basic scenario finished successfully, you should see the message
Basic scenario has successfully finished.
on the last line of the output.Observe the newly created SNS instance via the NNS frontend dapp. When you try to login for the first time, you will need to register a new Internet Identity for testing.
-
If you have successfully executed the above commands, enter a Bash shell inside your
sns-testing
Docker instance by runningdocker exec -it $SNS_TESTING_INSTANCE bash
Note: The instruction for testing your own dapp's SNS decentralization assume that all commands are executed from this bash session (inside Docker). You should still have access to your dapp's files, as the repo was mounted at
/dapp
inside the container.You are now ready to test your own dapp's SNS decentralization.
-
Clean-up (after you are done testing):
docker kill $SNS_TESTING_INSTANCE
It should now be possible to repeat the scenario starting from step 1.
The above run-book could be easily automated and integrated into your CI/CD pipeline.
- If either of the ports 8000 or 8080 are occupied, then
docker run -p 8000:8000 -p 8080:8080 ...
and./bin/dfx start --clean
are expected to fail. In that case, you should rundocker ps
(if you have Docker installed on your system) andlsof -i :8000
orlsof -i :8080
to determine the service listening on the port 8000 or 8080, correspondingly, and then close the service.
This section assumes that you have successfully deployed a local environment for testing SNS decentralization and validated your setup by creating an SNS instance for the test dapp (shipped with sns-testing
).
We now explain how to test your own dapp's SNS decentralization.
Your SNS configuration file should only specify a single initial SNS developer neuron controlled by your DFX principal for the following instructions to work without any additional steps required (otherwise, you'd need to manually vote on SNS proposals created during these steps with your initial SNS developer neurons).
-
Run the following script to ensure the local file system is in the right state:
./cleanup.sh # from Bash
-
Deploy your dapp onto the local replica instance as per usual. You can find your dapp repo under the path
/dapp
in the Docker container. This step requires your dapp repo to have a deployment script that interacts with the replica via the 8080 port.If you don't yet have a solution to deploy your custom dapp, you can still proceed with these instructions by deploying the test dapp provided with this repo:
./deploy_test_canister.sh # from Bash
This will deploy a test canister (see Section Test canister for further details) which can be thought of as a placeholder for your dapp.
-
Give control of your dapp canisters to NNS:
./let_nns_control_dapp.sh # from Bash
This automatically creates an SNS configuration file named
sns_init.yaml
, unless such a file already exists (e.g. you hand-crafted one yourself). The auto-generated file assumes that you are using the test dapp. -
Submit an NNS proposal to create an SNS that will control your dapp canister(s):
./propose_sns.sh # from Bash
The proposal will pass right away, because it is made by a neuron that has an overwhelming amount of voting power (this is part of the testing environment).
After a few minutes, you should see a new SNS instance in the Launchpad section of the NNS dapp.
-
Optional: Upgrade your dapp canister(s) via SNS proposal.
If you are going through these instructions using the test dapp, this step can be done as follows:
./upgrade_test_canister.sh "Swap is taking place." # from Bash
This submits an SNS proposal to upgrade the test dapp. If you are using the auto-generated
sns_init.yaml
file, the proposing neuron will have all of the voting power in the SNS. Thus, the proposal will be adopted and executed right away. Otherwise, you you might to vote with additional initial neurons to pass the upgrade proposal.If you are using your own dapp rather than the test dapp, look at how
upgrade_test_canister.sh
works. In short, it ends up callingquill sns make-upgrade-canister-proposal
. That command takes a fair number of arguments. Therefore, it is helpful to look at how the script(s) here invoke that command as a guide to how you can invoke the command to propose an upgrade to your own dapp. -
Once the swap starts, you can simulate multiple users' participation:
./participate_sns_swap.sh <num-participants> <icp-per-participant> # from Bash
You can run
./participate_sns_swap.sh
multiple times (with different arguments). For example, if you run./participate_sns_swap.sh 2 7 ./participate_sns_swap.sh 4 3
The first above command creates two user identities (called
participant-000
andparticipant-001
), each contributing 7 ICPs to the swap. The second command then reuses the first two participants, each of which now contributes 3 more ICPs; it then creates two new participants, each contributing 3 ICPs as well. So, the overall contributions will be:Identity Name Swap Contribution, ICP participant-000 10 participant-001 10 participant-002 3 participant-003 3 You can also participate in the swap using the NNS Dapp (another feature of the test environment). There, you can conjure some ICP for yourself using the "Get ICP" button (another feature of the test environment), and use the ICP to participate in the ongoing swap.
You can make the swap complete immediately by making the total participation amount equal to the target ICP amount.
-
Optional: Submit (another) proposal to upgrade one of your dapp canisters. Unlike before, the proposal will probably not pass right away, because now, the voting power is spread among multiple neurons.
If using the test dapp, this step can be performed like so:
./upgrade_test_canister.sh "First upgrade after the initial token swap." # from Bash
This is similar to step 4, but we use a different message argument so that there will be a visible change to the dapp.
-
To make the upgrade proposal pass, tell the participants created by
participate_sns_swap.sh
to vote on the proposal, like so:./vote_on_sns_proposal.sh <num-participants> <proposal-id> y # from Bash
-
If you would rather test the proposal rejection scenario, simply replace
y
in the above command withn
.
Casting sufficient votes. In either of the above cases, make sure that
<num-participants>
is sufficient for the proposal to be decided by majority; i.e., we need strictly more than 50%.For example, if you called
./participate_sns_swap.sh 100 <icp-per-participant>
, then./vote_on_sns_proposal.sh 51 <proposal-id> y
will cast enough yes-votes for the proposal to be adopted, and./vote_on_sns_proposal.sh 51 <proposal-id> n
will cast enough no-votes for the proposal to be rejected, whereas, e.g.,./vote_on_sns_proposal.sh 50 <proposal-id> n
will still keep the proposal open.Observing voting errors. It is expected to get the error "Neuron not eligible to vote on proposal." for some neurons because each participant gets a basket of neurons with various dissolve delays and only neurons with dissolve delay at least
neuron_minimum_dissolve_delay_to_vote_seconds
(according to the SNS configuration file from step 1.) are eligible to vote. It is also expected to get the error "Neuron already voted on proposal." for some neurons because they are followers of other neurons and our simple voting script does not take this into account. -
Congratulations! You have now seen SNS in action in a test environment. We recommend that you experiment with different configurations until you find one that works best for your project.
You can inspect the SNS state by running the following scripts:
get_last_sns_proposal.sh
: displays the SNS proposal that was added most recently;get_sns_proposal.sh <proposal-id>
: displays the SNS proposal with given<proposal-id>
;get_sns_canisters.sh
: shows the canister IDs of the SNS canisters and the registered dapp canisters;get_sns_neurons.sh
: displays all SNS neurons of your DFX identity;get_all_sns_neurons.sh
: displays all SNS neurons in the SNS governance canister;get_sns_swap_state.sh
: displays the SNS swap's state.
The test canister is available in the directory test
. Its purpose is
- to provide a simple dapp that can be deployed and handed over control of to an SNS in the basic scenario and
- to show how generic SNS functions can be implemented and secured to be only called by the SNS governance canister.
Internally, the test canister keeps an integer counter and a greeting message.
Furthermore, the test canister exposes public methods to get the value of the counter,
a greeting text starting with the greeting message, and a pair of functions (called
validate
and execute
that can be used as generic SNS functions, which means that these methods can be called as a result of an SNS proposal ---
see Section 7 of this
tutorial
for further details).
Callers to the execute
function are restricted to a canister ID that can be set
in the initial arguments when deploying or upgrading the test canister.
By specifying the SNS governance canister ID as the allowed canister ID to call the execute
function you make sure that this method can only be invoked as a result of an adopted SNS proposal.
Note that the validate
function must be safe to call with any arguments because
every submitted SNS proposal for executing generic SNS functions triggers
the execution of the validate
function (also if the SNS proposal is eventually rejected)
and every SNS neuron can make such an SNS proposal.
Hence, callers of the validate
function are not restricted in the test canister
(you might still want to restrict callers of the validate
function in your own canister, e.g.,
to prevent users from using up your canister's cycles by calling the validate
function)
and the validate
function is implemented to be safe to call by anyone with any arguments.
You should specify the SNS governance canister ID as the allowed canister ID
to call the execute
function.
- You can deploy the test canister from this repository by running the script
./deploy_test_canister.sh
.
You should run the following steps after deploy_sns.sh <config-path>
and before open_sns_swap.sh
according to
the SNS lifecycle section.
-
You can then register the test canister with the SNS by running the script
./register_dapp.sh <canister-id>
.Here,
<canister-id>
is the principal of the canister that you want to decentralize. -
Upgrade the test canister by running the script
upgrade_test_canister.sh
. The upgrade also stores the SNS governance canister ID in the canister's memory to implement access control restrictions to theexecute
method of the test canister (only the SNS governance canister is allowed to call this method). -
To test generic functions of the test canister, you need to register them first. An example SNS proposal to register generic functions (the functions
validate
andexecute
of the test canister) is submitted by running the script./register_generic_functions_test.sh
. -
Now you can submit SNS proposals to execute the generic functions by running
./execute_generic_functions_test.sh <greeting>
where<greeting>
is the new greeting message to be set in the test canister. Note that<greeting>
must be non-empty (otherwise the proposal validation should fail). -
Once the SNS proposal is executed, you should see the new greeting message when invoking
dfx canister call test greet "Martin"
. You should also see that the counter obtained viadfx canister call test get
got incremented after executing the SNS proposal (the counter gets incremented upon every call to theexecute
function).
You can inspect the status of a canister <name>
(with a corresponding entry
in the dfx.json
file) by running the script ./get_canister_status.sh <name>
.
Note that your DFX identity must be a controller of the canister <name>
for that script to succeed. In particular, you can also invoke the script
to check if your DFX identity is a controller of the canister <name>
.
You can find further instructions for expert users in the file HACKING.md.