Simone
43a69b82db
- Add `retention run` command (ports Invoke-RetentionPolicy.ps1): purges old artifact/log dirs with aggressive mode when disk space is low. - Add `template backup` command (ports Backup-CITemplate.ps1): 7z -mx=1 compressed archives in /var/lib/ci/backups/, prunes to keep-count=3, stops/restarts act-runner.service around the copy. - Update ci-retention-policy.service and ci-backup-template.service to use Python; pwsh is no longer required on the Linux host. - Fix ci-watch-runner-health.service: pass --service-name act-runner (Linux service name, not Windows act_runner default). - Fix _list_orphans in vm.py: wrap is_dir() inside the OSError try block so a stat() failure on an entry is silently skipped rather than raised. - Mark B5 complete in PhaseB-user-checklist.md. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
87 lines
3.5 KiB
Markdown
87 lines
3.5 KiB
Markdown
# systemd units — Local CI/CD System (Linux host)
|
|
|
|
Coppie `*.service` + `*.timer` che replicano i task periodici registrati su
|
|
Windows da `scripts/Register-CIScheduledTasks.ps1`. Pensate per essere
|
|
installate su un host Linux Mint / Ubuntu LTS, con il package
|
|
`ci_orchestrator` installato in `/opt/ci/venv/`.
|
|
|
|
## Mapping Windows Task Scheduler → systemd timer
|
|
|
|
| Windows Task Scheduler | systemd unit | Cadenza | Comando |
|
|
| ----------------------- | ---------------------------------- | ----------------------- | --------------------------------------------------------------- |
|
|
| `CI-CleanupOrphans` | `ci-cleanup-orphans.timer` | every 6h + at boot | `python -m ci_orchestrator vm cleanup --max-age-hours 6` |
|
|
| `CI-RetentionPolicy` | `ci-retention-policy.timer` | daily 03:00 + at boot | `python -m ci_orchestrator retention run` |
|
|
| `CI-DiskSpaceAlert` | `ci-watch-disk-space.timer` | every 15 min | `python -m ci_orchestrator monitor disk` |
|
|
| `CI-RunnerHealth` | `ci-watch-runner-health.timer` | every 15 min | `python -m ci_orchestrator monitor runner` |
|
|
| *(nuovo)* | `ci-backup-template.timer` | weekly Sun 02:00 | `python -m ci_orchestrator template backup --all-templates` |
|
|
|
|
## Prerequisiti
|
|
|
|
1. Utente di sistema `ci-runner` con UID dedicato (creato in B1).
|
|
2. Venv Python attivo in `/opt/ci/venv/` con `ci_orchestrator` installato:
|
|
```bash
|
|
sudo -u ci-runner /opt/ci/venv/bin/pip install -e /opt/ci/local-ci-cd-system
|
|
```
|
|
3. Variabili d'ambiente `CI_*` definite in `/etc/ci/environment` (caricato
|
|
tramite `EnvironmentFile=` in ogni unit `.service`):
|
|
```
|
|
CI_ROOT=/var/lib/ci
|
|
CI_TEMPLATES=/var/lib/ci/templates
|
|
CI_BUILD_VMS=/var/lib/ci/build-vms
|
|
CI_ARTIFACTS=/var/lib/ci/artifacts
|
|
CI_KEYS=/etc/ci/keys
|
|
PYTHONIOENCODING=utf-8
|
|
```
|
|
4. `ci_orchestrator` installato nel venv (punto 2) — nessuna dipendenza PowerShell
|
|
richiesta; `retention run` e `template backup` sono comandi Python puri.
|
|
|
|
> **Nota**: `ci-backup-template.service` gira come `root` (non `ci-runner`)
|
|
> perché chiama `systemctl stop/start act-runner.service` prima e dopo il
|
|
> backup. Tutti gli altri service girano come `ci-runner`.
|
|
|
|
## Installazione
|
|
|
|
```bash
|
|
# 1. Copia le unit in /etc/systemd/system/
|
|
sudo cp deploy/systemd/ci-*.service deploy/systemd/ci-*.timer /etc/systemd/system/
|
|
|
|
# 2. Reload systemd
|
|
sudo systemctl daemon-reload
|
|
|
|
# 3. Abilita + avvia tutti i timer
|
|
for t in ci-cleanup-orphans ci-retention-policy ci-watch-disk-space \
|
|
ci-watch-runner-health ci-backup-template; do
|
|
sudo systemctl enable --now "${t}.timer"
|
|
done
|
|
|
|
# 4. Verifica
|
|
systemctl list-timers --all 'ci-*'
|
|
```
|
|
|
|
## Test e troubleshooting
|
|
|
|
```bash
|
|
# Trigger manuale di un singolo task (esegue il .service una volta)
|
|
sudo systemctl start ci-cleanup-orphans.service
|
|
|
|
# Log dell'ultima esecuzione
|
|
journalctl -u ci-cleanup-orphans.service -n 50 --no-pager
|
|
|
|
# Live tail di tutti i task CI
|
|
journalctl -u 'ci-*' -f
|
|
```
|
|
|
|
## Rollback
|
|
|
|
```bash
|
|
for t in ci-cleanup-orphans ci-retention-policy ci-watch-disk-space \
|
|
ci-watch-runner-health ci-backup-template; do
|
|
sudo systemctl disable --now "${t}.timer"
|
|
sudo rm -f "/etc/systemd/system/${t}.service" "/etc/systemd/system/${t}.timer"
|
|
done
|
|
sudo systemctl daemon-reload
|
|
```
|
|
|
|
A questo punto il fallback è ri-attivare i task su Windows con
|
|
`scripts/Register-CIScheduledTasks.ps1`.
|