docs(buglog,specs): bug-1957 fixed (367af11a); time-window and host-failure briefs reuse the graceful kill

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Rongsong Shen 2026-10-10 10:01:02 +00:00
parent 367af11af1
commit 73fe8f787c
Signed by untrusted user: rshen
GPG key ID: 80533536B0EB651C
4 changed files with 156 additions and 0 deletions

View file

@ -89,3 +89,8 @@ that kills jobs whose attempt number is stale.
- HA/persistence: full 3-phase workflow; additive Cap'n Proto; the new facts
round-trip through WAL and snapshot (`/xce-audit-invariants`).
- The timer must never block the delaymgr (`ha-async-io.md`).
**Update 2026-10-10 (bug-1957):** killing a job's stale copy or a job being
requeued should use the worker's graceful termination (LSF TERMINATE action:
SIGINT, SIGTERM, SIGKILL with `job.terminate_interval`), as LSF's `brequeue`
does, rather than an immediate SIGKILL.

View file

@ -266,3 +266,11 @@ backstop.
enforce the deadline too; the helper timer covers it.
- TDD: `testsuite/` first, then `_test.go`. ASAN must be clean.
- HA/persistence touch: use the full 3-phase workflow.
**Update 2026-10-10 (bug-1957):** the worker now has a shared graceful
termination: a job-control kill with `grace > 0` runs LSF's TERMINATE action
(SIGINT, SIGTERM, SIGKILL, one grace period apart, stopping as soon as the
job is gone; `job_signal_seq_*`, `src/worker/src/job_signal.c`), with the
cluster default `job.terminate_interval` (10 s). The end-time kill should
reuse it (sequence and interval) instead of its own SIGTERM → grace →
SIGKILL helper described above.