local-ci-cd-system/deploy/systemd/README.md

systemd units — Local CI/CD System (Linux host)

Coppie *.service + *.timer che replicano i task periodici registrati su Windows da scripts/Register-CIScheduledTasks.ps1. Pensate per essere installate su un host Linux Mint / Ubuntu LTS, con il package ci_orchestrator installato in /opt/ci/venv/.

Mapping Windows Task Scheduler → systemd timer

Windows Task Scheduler	systemd unit	Cadenza	Comando
CI-CleanupOrphans	ci-cleanup-orphans.timer	every 6h + at boot	python -m ci_orchestrator vm cleanup --max-age-hours 6
CI-RetentionPolicy	ci-retention-policy.timer	daily 03:00 + at boot	pwsh Invoke-RetentionPolicy.ps1 (vedi nota PowerShell)
CI-DiskSpaceAlert	ci-watch-disk-space.timer	every 15 min	python -m ci_orchestrator monitor disk
CI-RunnerHealth	ci-watch-runner-health.timer	every 15 min	python -m ci_orchestrator monitor runner
(nuovo)	ci-backup-template.timer	weekly Sun 02:00	pwsh Backup-CITemplate.ps1 (vedi nota PowerShell)

Nota PowerShell su Linux

Due unit (ci-retention-policy, ci-backup-template) invocano script PowerShell che, per scelta documentata in AGENTS.md ("Mappatura script PowerShell → Python"), restano in PowerShell. Su Linux questo richiede PowerShell Core (pwsh):

# Ubuntu / Mint LTS
sudo apt-get update
sudo apt-get install -y wget apt-transport-https software-properties-common
wget -q https://packages.microsoft.com/config/ubuntu/$(lsb_release -rs)/packages-microsoft-prod.deb
sudo dpkg -i packages-microsoft-prod.deb
sudo apt-get update
sudo apt-get install -y powershell
pwsh --version    # verifica

Se preferisci non installare pwsh, porta Invoke-RetentionPolicy.ps1 e Backup-CITemplate.ps1 come sub-comandi python -m ci_orchestrator retention run / template backup (out of scope B5 per il piano corrente — vedi plans/implementation-plan-A-B.md).

Prerequisiti

1. Utente di sistema ci-runner con UID dedicato (creato in B1).
2. Venv Python attivo in /opt/ci/venv/ con ci_orchestrator installato:

   sudo -u ci-runner /opt/ci/venv/bin/pip install -e /opt/ci/local-ci-cd-system
   

3. Variabili d'ambiente CI_* definite in /etc/ci/environment (caricato tramite EnvironmentFile= in ogni unit .service):

   CI_ROOT=/var/lib/ci
   CI_TEMPLATES=/var/lib/ci/templates
   CI_BUILD_VMS=/var/lib/ci/build-vms
   CI_ARTIFACTS=/var/lib/ci/artifacts
   CI_KEYS=/etc/ci/keys
   PYTHONIOENCODING=utf-8
   

4. Invoke-RetentionPolicy.ps1 e Backup-CITemplate.ps1 presenti in /opt/ci/local-ci-cd-system/scripts/ (clone del repo).

Installazione

# 1. Copia le unit in /etc/systemd/system/
sudo cp deploy/systemd/ci-*.service deploy/systemd/ci-*.timer /etc/systemd/system/

# 2. Reload systemd
sudo systemctl daemon-reload

# 3. Abilita + avvia tutti i timer
for t in ci-cleanup-orphans ci-retention-policy ci-watch-disk-space \
         ci-watch-runner-health ci-backup-template; do
    sudo systemctl enable --now "${t}.timer"
done

# 4. Verifica
systemctl list-timers --all 'ci-*'

Test e troubleshooting

# Trigger manuale di un singolo task (esegue il .service una volta)
sudo systemctl start ci-cleanup-orphans.service

# Log dell'ultima esecuzione
journalctl -u ci-cleanup-orphans.service -n 50 --no-pager

# Live tail di tutti i task CI
journalctl -u 'ci-*' -f

Rollback

for t in ci-cleanup-orphans ci-retention-policy ci-watch-disk-space \
         ci-watch-runner-health ci-backup-template; do
    sudo systemctl disable --now "${t}.timer"
    sudo rm -f "/etc/systemd/system/${t}.service" "/etc/systemd/system/${t}.timer"
done
sudo systemctl daemon-reload

A questo punto il fallback è ri-attivare i task su Windows con scripts/Register-CIScheduledTasks.ps1.