mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
673e994aa7
An untyped inspect searches every docker object kind, and a role's overlay network carries the same entity name as its main container, so the call can resolve the network and report a missing State key instead of naming the container. That is how the openresty assert died on every swarm job of run 30709070050. Extend container-exec-resolver to cover inspect, stripping raw markers and quoted spans first so the flag walker survives Go template format strings. Add container-inspect-type, scoped to roles/ because the collision follows the entity naming convention and the outer act namespace carries no role networks. Sweep 40 call sites; suppress the delegate_to-resolved CIDs and the compose co-location probes with a stated reason. Move the five container rules into tests/lint/ansible/shell/container/ and drop the container_ prefix from their filenames. Register both markers in the suppression docs, where the resolver marker was missing entirely. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
66 lines
3.0 KiB
Bash
66 lines
3.0 KiB
Bash
#!/usr/bin/env bash
|
|
# nocheck: raw-docker
|
|
# svc-runner checks: container health, DooD socket, and (sync pass only) a
|
|
# variant-0 nested web-app-dashboard deploy in a sealed throwaway dockerd.
|
|
# No GitHub/GHCR.
|
|
set -euo pipefail
|
|
|
|
export CONTAINER_EXEC_TIMEOUT=3h
|
|
|
|
fail_count=0
|
|
|
|
echo "DinD mode: verifying runner containers started..."
|
|
for i in $(seq 1 "${RUNNER_COUNT}"); do
|
|
state=$(container inspect --type container --format '{{.State.Status}}' "${RUNNER_PROJECT_PREFIX}-${i}" 2>/dev/null || echo "not found")
|
|
if [[ "${state}" != "running" ]]; then
|
|
echo "FAIL: ${RUNNER_PROJECT_PREFIX}-${i} is not running (state=${state})"
|
|
fail_count=$((fail_count + 1))
|
|
else
|
|
echo "OK: ${RUNNER_PROJECT_PREFIX}-${i} is running"
|
|
fi
|
|
done
|
|
[[ "${fail_count}" -eq 0 ]] || { echo "FAIL: ${fail_count} container(s) not healthy in DinD"; exit 1; }
|
|
|
|
echo "DinD mode: verifying DooD socket in ${RUNNER_PROJECT_PREFIX}-1..."
|
|
if ! docker exec "${RUNNER_PROJECT_PREFIX}-1" docker version >/dev/null 2>&1; then
|
|
echo "FAIL: Docker socket not accessible inside ${RUNNER_PROJECT_PREFIX}-1 — DooD broken in DinD"
|
|
exit 1
|
|
fi
|
|
echo "OK: DooD socket accessible inside ${RUNNER_PROJECT_PREFIX}-1"
|
|
|
|
if [[ "${ASYNC_ENABLED:-false}" == "true" ]]; then
|
|
echo "Skipping full deploy on async pass (validated on sync pass)"
|
|
echo "ALL LOCAL CHECKS PASSED (DinD)"
|
|
exit 0
|
|
fi
|
|
|
|
_iso_src="${RUNNER_INSTALL_DIR}/1/nested-src"
|
|
echo "DinD mode: running full reinstall deploy inside ${RUNNER_PROJECT_PREFIX}-1..."
|
|
container exec --user root "${RUNNER_PROJECT_PREFIX}-1" mkdir -p "${RUNNER_SRC_DIR}"
|
|
# nocheck: container-cp - DinD runner container runs on this host, checkout is local
|
|
container cp "${RUNNER_SRC_DIR}/." "${RUNNER_PROJECT_PREFIX}-1:${RUNNER_SRC_DIR}"
|
|
container exec --user root "${RUNNER_PROJECT_PREFIX}-1" \
|
|
bash -c "rm -rf ${_iso_src} && mkdir -p ${_iso_src} && tar -C ${RUNNER_SRC_DIR} --exclude='./.env' --exclude='./compose/coredns/Corefile' --exclude='./.venvs' --exclude='./venv' --exclude='./build' --exclude='*/node_modules' --exclude='*/__pycache__' -cf - . | tar -C ${_iso_src} -xf - && chown -R github-runner:github-runner ${_iso_src}"
|
|
container exec "${RUNNER_PROJECT_PREFIX}-1" bash -c "cd ${_iso_src} && make install"
|
|
|
|
# shellcheck disable=SC2016
|
|
if ! container exec "${RUNNER_PROJECT_PREFIX}-1" bash -c '
|
|
set -euo pipefail
|
|
cd "'"${_iso_src}"'"
|
|
INFINITO_DISTRO=debian make build
|
|
img="$(INFINITO_DISTRO=debian bash scripts/meta/resolve/image/local.sh)"
|
|
|
|
INFINITO_DISTRO=debian INFINITO_DISTROS=debian \
|
|
INFINITO_INVENTORY_DIR=/tmp/runner-dind-inventory \
|
|
INFINITO_IMAGE="$img" INFINITO_BUILD=0 INFINITO_PULL_POLICY=never \
|
|
make compose-deploy mode=reinstall type=server \
|
|
apps=web-app-dashboard variant=0 \
|
|
disable=matomo,sso,asset,simpleicons,logout,css,prometheus
|
|
'; then
|
|
echo "FAIL: local full reinstall deploy failed"
|
|
exit 1
|
|
fi
|
|
echo "OK: local full reinstall deploy succeeded (dev stack, no GitHub)"
|
|
|
|
echo "ALL LOCAL CHECKS PASSED (DinD)"
|