mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 4.7
b34131ca1d
Brings up the package-cache compose service alongside the existing
registry-cache, gated by the same `cache` profile. Bootstrap helper
(scripts/docker/cache/package.sh) auto-rotates the admin password from
the well-known default, accepts the Sonatype CE EULA (3.71+ blocks
artifact downloads with HTTP 403 until /v1/system/eula is POSTed —
disclaimer must be sent verbatim with its unicode quotes), enables
anonymous read, creates one default blobstore, and registers the MVP
proxy set: apt-debian, apt-ubuntu, pypi-proxy, npm-proxy, helm-bitnami,
raw-githubusercontent. The runner gets pip.conf / .npmrc /
sources.list snippets bind-mounted in (each defaulting to /dev/null
when the cache profile is inactive) so the deploy is byte-identical
with cache off.
Cache plumbing:
- scripts/meta/env/cache/{registry,package}.sh: per-cache env defaults,
hostname-derived admin password seed (uses `hostname` command, not
$HOSTNAME shell var, so the value is identical across interactive
shells, non-interactive subshells, and Python subprocesses).
- scripts/docker/cache/{registry-ca,package}.sh: container-side
bootstrap helpers, both moved under scripts/docker/cache/.
- scripts/system/cache/clean.sh + `make cache-clean`: wipes both
/var/cache/infinito/core/cache/{registry,package} dirs and stops
the cache containers.
- cli/deploy/development/compose.py: Profile gate exports the three
new INFINITO_PACKAGE_CACHE_* client-snippet paths and runs the
bootstrap helper after the package-cache reports healthy.
Compose service uses sonatype/nexus3:3.91.1-ubi pinned, runs as
root (UBI image refuses to chown a fresh bind-mount), and forces
NEXUS_SECURITY_RANDOMPASSWORD=false so the bootstrap can log in with
admin/admin123 before rotating; the random-password mode otherwise
auto-completes onboarding silently and leaves no readable secret on
disk for an automated bootstrap to pick up.
Tests: tests/unit/cli/deploy/development/test_compose.py grows two
new assertions (cache services listed in `up` args when local; build
tests pin CI=true to retain ci-only assertions).
Closes req-012.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
71 lines
2.5 KiB
Bash
Executable File
71 lines
2.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# shellcheck shell=bash
|
|
#
|
|
# Wipe the on-disk caches that the `cache` compose profile populates:
|
|
# the rpardini/docker-registry-proxy mirror + MITM CA, and the
|
|
# Sonatype Nexus 3 OSS data dir. Both live under /var/cache/infinito/
|
|
# core/<service>/ by default; the per-cache env scripts under
|
|
# scripts/meta/env/cache/ are sourced first so a custom HOST_PATH
|
|
# from the developer's environment is honoured.
|
|
#
|
|
# Removing the directories is enough: docker compose recreates them
|
|
# on the next `up` thanks to `bind: { create_host_path: true }`. For
|
|
# the Nexus side, the next bootstrap rotates a fresh admin password
|
|
# and re-creates blobstore + proxy repos.
|
|
#
|
|
# Use `make cache-clean` rather than calling this script directly.
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)"
|
|
cd "${REPO_ROOT}"
|
|
|
|
# shellcheck source=scripts/meta/env/cache/registry.sh
|
|
source "scripts/meta/env/cache/registry.sh"
|
|
# shellcheck source=scripts/meta/env/cache/package.sh
|
|
source "scripts/meta/env/cache/package.sh"
|
|
|
|
# Stop any running cache containers first so wipe is safe (a running
|
|
# Nexus would re-create files mid-rm). `docker compose down` of the
|
|
# whole stack would also kill the runner, which is too destructive;
|
|
# scope to the two cache services explicitly.
|
|
if docker ps --format '{{.Names}}' | grep -qE '^infinito-(registry|package)-cache$'; then
|
|
echo "[cache-clean] stopping infinito-registry-cache + infinito-package-cache"
|
|
docker stop infinito-registry-cache infinito-package-cache 2>/dev/null || true
|
|
docker rm infinito-registry-cache infinito-package-cache 2>/dev/null || true
|
|
fi
|
|
|
|
PATHS=(
|
|
"${INFINITO_REGISTRY_CACHE_HOST_PATH}"
|
|
"${INFINITO_REGISTRY_CACHE_CA_HOST_PATH}"
|
|
"${INFINITO_PACKAGE_CACHE_HOST_PATH}"
|
|
)
|
|
|
|
# Remove each cache path individually (keeps the parent /var/cache/
|
|
# infinito/ dir alive so other future cache services can co-locate).
|
|
# Use sudo when the path is root-owned (Nexus chowns its data dir to
|
|
# uid 200 for the in-container nexus user) so the rm does not silently
|
|
# leave half-deleted state behind.
|
|
remove_path() {
|
|
local p="$1"
|
|
[[ -z "${p}" ]] && return 0
|
|
if [[ ! -e "${p}" ]]; then
|
|
echo "[cache-clean] not present, skipping: ${p}"
|
|
return 0
|
|
fi
|
|
if [[ -w "${p}" ]] || [[ -O "${p}" ]]; then
|
|
echo "[cache-clean] removing: ${p}"
|
|
rm -rf -- "${p}"
|
|
else
|
|
echo "[cache-clean] removing (sudo): ${p}"
|
|
sudo rm -rf -- "${p}"
|
|
fi
|
|
}
|
|
|
|
remove_path "${PATHS[0]}"
|
|
remove_path "${PATHS[1]}"
|
|
remove_path "${PATHS[2]}"
|
|
|
|
echo "[cache-clean] done. Re-run 'make up' to recreate empty caches."
|