mirror of
https://github.com/m8tin/cis.git
synced 2026-08-01 11:47:31 +02:00
267 lines
10 KiB
Bash
Executable File
267 lines
10 KiB
Bash
Executable File
#!/bin/bash
|
|
source /cis/core/base.module.sh
|
|
|
|
|
|
|
|
function stopObsoleteScreenSession() {
|
|
local _SCREEN_SESSION _COMPOSITION _PID
|
|
_SCREEN_SESSION="${1:?"stopObsoleteScreenSession(): Missing first parameter SCREEN_SESSION"}"
|
|
_COMPOSITION=$(echo "$_SCREEN_SESSION" | grep -oE "[^:]+$")
|
|
_PID=$(echo "$_SCREEN_SESSION" | grep -oE "^[0-9]+")
|
|
readonly _SCREEN_SESSION _COMPOSITION _PID
|
|
|
|
! isSyncHostForComposition "${_COMPOSITION}" \
|
|
&& echo "Stopping sync screen session of composition: ${_COMPOSITION}" \
|
|
&& screen -XS "${_PID}" quit
|
|
}
|
|
|
|
function cleanSessions() {
|
|
screen -ls | grep -oE "[0-9]+\.composition-sync\:[a-zA-Z0-9_-]+" | while read -r _SCREEN_SESSION; do
|
|
stopObsoleteScreenSession "${_SCREEN_SESSION}"
|
|
done
|
|
}
|
|
|
|
function startMissingScreenSession() {
|
|
local _COMPOSITION _SCRIPT
|
|
_COMPOSITION="${1:?"startMissingScreenSession(): Missing first parameter COMPOSITION"}"
|
|
_SCRIPT="${CIS[FULLSCRIPTNAME]:?"startMissingScreenSession(): Missing CIS_FULLSCRIPTNAME"}"
|
|
readonly _COMPOSITION _SCRIPT
|
|
|
|
! screen -ls | grep -qoE "[0-9]+\.compositionsync\.${_COMPOSITION}" \
|
|
&& echo "Starting screen sync session of composition: ${_COMPOSITION}" \
|
|
&& screen -dmS "composition-sync:${_COMPOSITION}" "${_SCRIPT}" --loopSingle "${_COMPOSITION}"
|
|
}
|
|
|
|
function addSessions() {
|
|
local _COMPOSITIONS
|
|
_COMPOSITIONS="${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/"
|
|
readonly _COMPOSITIONS
|
|
|
|
local _composition
|
|
for _composition in "${_COMPOSITIONS}"*/; do
|
|
_composition="${_composition%/}"
|
|
_composition="${_composition##*/}"
|
|
isSyncHostForComposition "${_composition}" \
|
|
&& startMissingScreenSession "${_composition}"
|
|
done
|
|
}
|
|
|
|
function destroySyncSnapshot() {
|
|
local _ZFS _SNAPSHOT
|
|
_ZFS="${1:?"destroySyncSnapshot(): Missing first parameter ZFS"}"
|
|
_SNAPSHOT="${2}"
|
|
readonly _ZFS _SNAPSHOT
|
|
|
|
# Nothing to do
|
|
[ -z "${_SNAPSHOT}" ] && return 0
|
|
|
|
echo "${_SNAPSHOT}" | grep -qF "${_ZFS:?"destroySyncSnapshot(): Missing ZFS"}@SYNC" \
|
|
&& zfs destroy "${_SNAPSHOT}" \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function isSyncHostForComposition() {
|
|
local _COMPOSITION _CURRENTHOST_FILE _RECEIVERHOST _SYNCHOST_FILE
|
|
_COMPOSITION="${1:?"isSyncHostForComposition(): Missing first parameter COMPOSITION"}"
|
|
_CURRENTHOST_FILE="${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/${_COMPOSITION}/current-host"
|
|
_RECEIVERHOST="${CIS[HOST]:?"Missing CIS_HOST"}"
|
|
_SYNCHOST_FILE="${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/${_COMPOSITION}/composition-sync-hosts"
|
|
readonly _COMPOSITION _CURRENTHOST_FILE _RECEIVERHOST _SYNCHOST_FILE
|
|
|
|
# There has to be a host running the composition as current host (file exists),
|
|
# and this host cannot be sync-host also (file content is not this host).
|
|
# After that check if this host is listed as composition-sync-host.
|
|
[ -f "${_CURRENTHOST_FILE}" ] \
|
|
&& ! head -n 1 "${_CURRENTHOST_FILE}" 2> /dev/null | grep -q -F -- "${_RECEIVERHOST}" \
|
|
&& grep -q -F -- "${_RECEIVERHOST}" "${_SYNCHOST_FILE}" 2> /dev/null \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function protectZFS() {
|
|
local _ZFS
|
|
_ZFS="${1:?"protectZFS(): Missing first parameter ZFS"}"
|
|
readonly _ZFS
|
|
|
|
zfs set readonly=on "${_ZFS}"
|
|
zfs set mountpoint=none "${_ZFS}"
|
|
|
|
return 0
|
|
}
|
|
|
|
function removeForeignSyncSnapshots() {
|
|
local _RECEIVERHOST _ZFS
|
|
_ZFS="${1:?"removeForeignSyncSnapshots(): Missing first parameter ZFS"}"
|
|
_RECEIVERHOST="${CIS[HOST]:?"Missing CIS_HOST"}"
|
|
readonly _RECEIVERHOST _ZFS
|
|
|
|
zfs list -t snapshot -H -o name "${_ZFS}" | grep -- "${_ZFS}@SYNC" | grep -v -i "@SYNC_${_RECEIVERHOST}_" | while read _SNAP; do
|
|
echo -n "Removing foreign snapshot: ${_SNAP} ... " \
|
|
&& destroySyncSnapshot "${_ZFS}" "${_SNAP}" \
|
|
&& echo "done"
|
|
done
|
|
|
|
return 0
|
|
}
|
|
|
|
function removeOutdatedSyncSnapshots() {
|
|
local _RECEIVERHOST _ZFS _NEWEST_SNAPSHOT
|
|
_ZFS="${1:?"removeOutdatedSyncSnapshots(): Missing first parameter ZFS"}"
|
|
_RECEIVERHOST="${CIS[HOST]:?"Missing CIS_HOST"}"
|
|
_NEWEST_SNAPSHOT=$(zfs list -H -o name -S name -t snapshot "${_ZFS}" | grep -E "^${_ZFS}@SYNC_${_RECEIVERHOST}_" | head -n 1)
|
|
readonly _RECEIVERHOST _ZFS _NEWEST_SNAPSHOT
|
|
|
|
# Nothing to do, because if there is no newest snapshot then there cannot be anyone
|
|
[ -z "${_NEWEST_SNAPSHOT}" ] && return 0
|
|
|
|
# Remove all but the newest snapshot, which is the common snapshot in the next run
|
|
zfs list -t snapshot -H -o name "${_ZFS}" | grep -- "${_ZFS}@SYNC_${_RECEIVERHOST}_" | grep -v -i "${_NEWEST_SNAPSHOT}" | while read _SNAP; do
|
|
echo -n "Removing outdated snapshot: ${_SNAP} ... " \
|
|
&& destroySyncSnapshot "${_ZFS}" "${_SNAP}" \
|
|
&& echo "done"
|
|
done
|
|
|
|
return 0
|
|
}
|
|
|
|
function receive() {
|
|
local _RECEIVERHOST _COMPOSITION _SOURCEHOST _SSH_PORT _SSH_COMMAND _SEND_SCRIPT _ZFS_BRANCH _ZFS
|
|
_COMPOSITION="${1:?"receive(): Missing first parameter COMPOSITION"}"
|
|
_RECEIVERHOST="${CIS[HOST]:?"Missing CIS_HOST"}"
|
|
_SOURCEHOST=$(head -n 1 "${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/${_COMPOSITION}/current-host" 2> /dev/null)
|
|
base.set _SOURCEHOST "${_SOURCEHOST}" '^[a-zA-Z0-9][a-zA-Z0-9.-]*$'
|
|
_SSH_PORT=$(head -n 1 "${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/${_COMPOSITION}/ssh-port" 2> /dev/null)
|
|
base.set _SSH_PORT "${_SSH_PORT:-22}" '^[1-9][0-9]{1,4}$'
|
|
_SSH_COMMAND="ssh -p ${_SSH_PORT} -o ConnectTimeout=20 -o ServerAliveInterval=15 -C composition-sync@${_SOURCEHOST}"
|
|
_SEND_SCRIPT="${CIS[SCRIPTSROOT]:?"Missing CIS_SCRIPTSROOT"}host/zfs/composition-sync/sync-send.sh"
|
|
_ZFS_BRANCH=$(head -n 1 "${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/${_COMPOSITION}/zfs-branch" 2> /dev/null)
|
|
base.set _ZFS_BRANCH "${_ZFS_BRANCH:-zpool1/persistent}" '^[a-zA-Z][a-zA-Z0-9/_-]*[a-zA-Z0-9]$'
|
|
_ZFS="${_ZFS_BRANCH%/}/${_COMPOSITION}-BACKUP"
|
|
readonly _RECEIVERHOST _COMPOSITION _SSH_COMMAND _SEND_SCRIPT _ZFS_BRANCH _ZFS
|
|
(
|
|
flock -n 9 || exit 1
|
|
|
|
_COMMON_SNAPSHOT=""
|
|
_RESUME_TOKEN=$(zfs get -H -o value receive_resume_token "${_ZFS}" 2> /dev/null)
|
|
if [ -n "${_RESUME_TOKEN}" ] && [ "${_RESUME_TOKEN}" != "-" ]; then
|
|
echo "Resume token present trying to resume at ${_RESUME_TOKEN}"
|
|
_COMMON_SNAPSHOT="RESUME"
|
|
else
|
|
_RESUME_TOKEN=""
|
|
_COMMON_SNAPSHOT=$(zfs list -H -o name -S creation -t snapshot "${_ZFS}" 2> /dev/null | head -n 1)
|
|
! [ -z "${_COMMON_SNAPSHOT}" ] \
|
|
&& echo "Rolling back to newest snapshot: ${_COMMON_SNAPSHOT}" \
|
|
&& zfs rollback -r "${_COMMON_SNAPSHOT}"
|
|
fi
|
|
|
|
# Add "-s" for resumable streams in the next line at zfs receive. Not done yet because of: cannot receive resume stream: kernel modules must be upgraded to receive this stream.
|
|
${_SSH_COMMAND} "sudo ${_SEND_SCRIPT:?"Missing SEND_SCRIPT"} \"${_RECEIVERHOST}\" \"${_ZFS_BRANCH}\" \"${_COMPOSITION}\" \"${_COMMON_SNAPSHOT#${_ZFS}@}\" \"${_RESUME_TOKEN}\"" | zfs receive -v "${_ZFS}"
|
|
if [ $? -ne 0 ]; then
|
|
echo "Unable to receive stream using these settings:"
|
|
echo " - Sending host: ${_SOURCEHOST}:${_SSH_PORT}"
|
|
echo " - Receiving host: ${_RECEIVERHOST}"
|
|
echo " - Composition: ${_COMPOSITION}"
|
|
echo " - Offered snapshot: ${_ZFS}@${_COMMON_SNAPSHOT#${_ZFS}@}"
|
|
echo " - Resume token: ${_RESUME_TOKEN}"
|
|
echo "Current state of snapshots:"
|
|
zfs list -t snapshot "${_ZFS}" 2> /dev/null | tail
|
|
tryRollbackToRepair "${_COMPOSITION}" "${_ZFS}" && return 0
|
|
return 1
|
|
fi
|
|
|
|
protectZFS "${_ZFS}"
|
|
removeForeignSyncSnapshots "${_ZFS}"
|
|
removeOutdatedSyncSnapshots "${_ZFS}"
|
|
|
|
) 9>>/tmp/synccomposition.${_COMPOSITION}.lock
|
|
|
|
[ $? -eq 0 ] && return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function receiveLoopSingle() {
|
|
local _COMPOSITION
|
|
_COMPOSITION="${1:?"receiveLoopSingle(): Missing first parameter COMPOSITION"}"
|
|
readonly _COMPOSITION
|
|
|
|
while true; do
|
|
receive "${_COMPOSITION}" \
|
|
&& echo "Sleep for 5s" \
|
|
&& sleep 5 \
|
|
&& echo \
|
|
&& continue
|
|
|
|
echo
|
|
echo "Waiting 5min then ABORT!"
|
|
sleep 300
|
|
break
|
|
done
|
|
}
|
|
|
|
function receiveOnceAll() {
|
|
local _COMPOSITIONS
|
|
_COMPOSITIONS="${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/"
|
|
readonly _COMPOSITIONS
|
|
|
|
for _composition in "${_COMPOSITIONS}"*/; do
|
|
_composition="${_composition%/}"
|
|
_composition="${_composition##*/}"
|
|
isSyncHostForComposition "${_composition}" \
|
|
&& receive "${_composition}"
|
|
done
|
|
|
|
return 0
|
|
}
|
|
|
|
function tryRollbackToRepair() {
|
|
local _COMPOSITION _RECEIVERHOST _ZFS _ROLLBACK_DAY _ROLLBACK_SNAPSHOT
|
|
_COMPOSITION="${1:?"tryRollbackToRepair(): Missing first parameter COMPOSITION"}"
|
|
_ZFS="${2:?"tryRollbackToRepair(): Missing second parameter ZFS"}"
|
|
_RECEIVERHOST="${CIS[HOST]:?"Missing CIS_HOST"}"
|
|
_ROLLBACK_DAY=$(head -n 1 "${CIS[DOMAINDEFINITIONS]:?"Missing CIS_DOMAINDEFINITIONS"}compositions/${_COMPOSITION:?"Missing COMPOSITION"}/rollback")
|
|
base.set _ROLLBACK_DAY "${_ROLLBACK_DAY:-'2020-01-01'}" '^[0-9]{4}-[0-9]{2}-[0-9]{2}$'
|
|
_ROLLBACK_SNAPSHOT=$(zfs list -H -o name -S creation -t snapshot "${_ZFS}" | head -n 1 | grep -F -- "@SYNC_${_RECEIVERHOST}_${_ROLLBACK_DAY}_")
|
|
readonly _COMPOSITION _RECEIVERHOST _ZFS _ROLLBACK_SNAPSHOT
|
|
|
|
# Nothing to do
|
|
[ -z "${_ROLLBACK_SNAPSHOT}" ] && return 0
|
|
|
|
# Remove at most the two newest sync snapshots, if the day matches with the rollback file
|
|
echo "Try to fix by removing: '${_ROLLBACK_SNAPSHOT}'" \
|
|
&& zfs destroy "${_ROLLBACK_SNAPSHOT:?"tryRollbackToRepair(): Missing _ROLLBACK_SNAPSHOT"}" \
|
|
&& return 0
|
|
|
|
return 1
|
|
|
|
}
|
|
|
|
|
|
|
|
# Parameter 1: only one of these values are allowed (--all, --once, --loop)
|
|
# Parameter 2: is optional '()?' and only a subset of alphanumeric characters are allowed and [_-] if not leading (due to: -oProxyCommand=...).
|
|
base.set MODE "${1}" '^(--onceAll|--onceSingle|--loopAll|--loopSingle)$'
|
|
base.set COMPOSITION "${2}" '^([a-zA-Z0-9][a-zA-Z0-9_-]*)?$'
|
|
|
|
[ "${MODE}" == "--onceAll" ] \
|
|
&& receiveOnceAll \
|
|
&& exit 0
|
|
|
|
[ "${MODE}" == "--onceSingle" ] \
|
|
&& receive "${COMPOSITION}" \
|
|
&& exit 0
|
|
|
|
[ "${MODE}" == "--loopAll" ] \
|
|
&& cleanSessions \
|
|
&& addSessions \
|
|
&& exit 0
|
|
|
|
[ "${MODE}" == "--loopSingle" ] \
|
|
&& receiveLoopSingle "${COMPOSITION}" \
|
|
&& exit 0
|
|
|
|
exit 1
|