mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 11:46:35 +00:00
kevinveenbirkenbachandClaude Opus 5
0d2fadce0c
A checkout that declared a new cache host rendered the artefacts and reached nothing: the Nexus proxy repository, the frontend's leaf certificate and the nginx upstream map all live in the running stack, which only the owning checkout set up. cache-apply installs all three and reloads the frontend, and compose up runs it for a checkout that merely joins the network, so the manual call is left for a declaration changed between two bring-ups. The map source is no longer selectable. INFINITO_CACHE_CONF_SOURCE existed to let a worktree read the primary checkout's map instead of its own, but the frontend mounts one map and the install replaces it, so the checkout that applied last wins either way: the knob chose which file to point at, never who prevailed. Dropping it also retires the git subprocess that resolved the owning checkout on every env build. Two checkouts sharing a stack therefore overwrite each other's map, which the documentation now states instead of implying a selector could prevent it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
65 lines
2.3 KiB
Bash
Executable File
65 lines
2.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# shellcheck shell=bash
|
|
# nocheck: raw-docker this runs on the developer's host against the dev cache stack, where the `container` wrapper is not on PATH
|
|
#
|
|
# Install this checkout's cache declarations into the running cache stack:
|
|
# the Nexus proxy repositories, the frontend's leaf certificates, and the
|
|
# nginx upstream map the frontend serves. A checkout that declares a new
|
|
# cache host needs all three before a client reaches it.
|
|
#
|
|
# The frontend belongs to whichever checkout owns the cache stack, so the
|
|
# map is copied onto the path that container actually mounts rather than
|
|
# only rendered here. The map is generated, never tracked, so the owning
|
|
# checkout restores its own set by running this script or `make dotenv`.
|
|
#
|
|
# Use `make cache-apply` rather than calling this script directly.
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)"
|
|
cd "${REPO_ROOT}"
|
|
|
|
# shellcheck source=scripts/meta/env/load.sh
|
|
source "scripts/meta/env/load.sh"
|
|
|
|
: "${INFINITO_CACHE_PACKAGE_FRONTEND_CONF:?Run 'make dotenv' first}"
|
|
|
|
FRONTEND="infinito-package-cache-frontend"
|
|
MOUNT_TARGET="/etc/nginx/conf.d/upstreams.conf"
|
|
|
|
if ! docker ps --format '{{.Names}}' | grep -qx "${FRONTEND}"; then
|
|
echo "[cache-apply] ${FRONTEND} is not running; start the cache stack first" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[cache-apply] rendering this checkout's cache artefacts"
|
|
python3 -m cli.meta.cache
|
|
|
|
echo "[cache-apply] creating the Nexus proxy repositories"
|
|
bash roles/svc-cache-package/files/shell/bootstrap.sh
|
|
|
|
echo "[cache-apply] issuing the frontend leaf certificates"
|
|
bash roles/svc-cache-package/files/shell/certs.sh
|
|
|
|
mounted="$(docker inspect -f \
|
|
"{{range .Mounts}}{{if eq .Destination \"${MOUNT_TARGET}\"}}{{.Source}}{{end}}{{end}}" \
|
|
"${FRONTEND}")"
|
|
|
|
if [[ -z "${mounted}" ]]; then
|
|
echo "[cache-apply] ${FRONTEND} mounts no map at ${MOUNT_TARGET}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "${mounted}" != "${INFINITO_CACHE_PACKAGE_FRONTEND_CONF}" ]]; then
|
|
echo "[cache-apply] installing this checkout's map into ${mounted}"
|
|
cp -- "${INFINITO_CACHE_PACKAGE_FRONTEND_CONF}" "${mounted}"
|
|
fi
|
|
|
|
echo "[cache-apply] reloading ${FRONTEND}"
|
|
docker exec "${FRONTEND}" nginx -t
|
|
docker exec "${FRONTEND}" nginx -s reload
|
|
|
|
echo "[cache-apply] done. Recreate this checkout's runner to pick up new DNS hijacks:"
|
|
echo "[cache-apply] make compose-up"
|