Files
computer-playbook/roles/sys-lock
Kevin Veen-Birkenbach fff7d261a2 Refactor run-once logic across multiple roles and integrate unified utils/run_once.yml
This commit standardizes all run-once implementations across the following roles:
- desk-git
- dev-fakeroot
- dev-git
- dev-python-yaml
- sys-lock
- sys-svc-certs (wildcard flavor)
- update-apt
- update-pacman
- update-compose
- user-root (moved logic to 01_core.yml + unified run-once handling)
- web-app-matomo
- web-svc-libretranslate

All roles now:
- Use a block guarded by 'run_once_<role>' facts
- Trigger run-once state through utils/run_once.yml
- Optionally disable handler flushing via 'flush_handlers: false'
- Achieve consistent per-host one-time execution semantics

Conversation reference: https://chatgpt.com/share/692c7fbb-ff68-800f-8cb4-4b132cffc8e4
2025-11-30 18:51:40 +01:00
..

System Maintenance Lock

Description

This role provides a locking mechanism to ensure that critical services are not interrupted during maintenance activities such as updates, backups, or patch applications. It waits for specified services to stop and prevents conflicting operations.

Overview

The role performs the following:

  • Blocks execution until specified services have stopped.
  • Implements retry logic with a configurable timeout.
  • Ensures that maintenance tasks are executed only when the system is in a safe state.

Purpose

The primary purpose of this role is to safeguard system stability during maintenance by preventing conflicts with running services. It ensures that maintenance operations proceed only when the environment is ready.

Features

  • Service Locking: Blocks maintenance tasks until critical services are stopped.
  • Timeout and Retry Logic: Configurable wait times and maximum attempts.
  • Conflict Avoidance: Prevents interference between maintenance operations and running services.

Credits 📝

Created with ChatGPT. Conversation is here available.