forked from jakub/ansible
Enhance stack health checks by installing script inline and adding comprehensive validation for Nextcloud, database, and Redis connectivity
This commit is contained in:
fencl
@@ -1,17 +1,88 @@
|
||||
---
|
||||
- name: Upload and run stack health checks
|
||||
hosts: proxmox
|
||||
become: true
|
||||
gather_facts: false
|
||||
become: false
|
||||
|
||||
vars:
|
||||
health_script_path: /data/compose/nextcloud/stack-health.sh
|
||||
|
||||
tasks:
|
||||
- name: Upload stack-health.sh
|
||||
- name: Install stack-health.sh (inline content)
|
||||
ansible.builtin.copy:
|
||||
src: files/stack-health.sh
|
||||
dest: "{{ health_script_path }}"
|
||||
mode: '0755'
|
||||
# Comments in English: keep the script inline so we don't depend on repo paths
|
||||
content: |
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
NC_CONTAINER="${NC_CONTAINER:-nextcloud}"
|
||||
DB_CONTAINER="${DB_CONTAINER:-nextcloud-db}"
|
||||
REDIS_CONTAINER="${REDIS_CONTAINER:-redis}"
|
||||
COLLA_CONTAINER="${COLLA_CONTAINER:-collabora}"
|
||||
NC_HTTP="${NC_HTTP:-http://127.0.0.1:8080/status.php}"
|
||||
COLLA_DISCOVERY="${COLLA_DISCOVERY:-http://127.0.0.1:9980/hosting/discovery}"
|
||||
NC_PUBLIC_URL="${NC_PUBLIC_URL:-}"
|
||||
pass(){ echo -e "✅ $*"; } ; fail(){ echo -e "❌ $*"; EXIT=1; }
|
||||
EXIT=0; TMP_DIR="$(mktemp -d)"; trap 'rm -rf "$TMP_DIR"' EXIT
|
||||
docker ps >/dev/null 2>&1 || { fail "Docker not accessible"; echo "----------------------------------------"; echo "ONE OR MORE CHECKS FAILED ❌"; exit "$EXIT"; }
|
||||
for c in "$NC_CONTAINER" "$DB_CONTAINER" "$REDIS_CONTAINER" "$COLLA_CONTAINER"; do
|
||||
if docker ps --format '{{.Names}}' | grep -qx "$c"; then pass "container '$c' is running"; else fail "container '$c' NOT running"; fi
|
||||
done
|
||||
get_nets(){ docker inspect -f '{{range $k,$v := .NetworkSettings.Networks}}{{printf "%s " $k}}{{end}}' "$1" 2>/dev/null; }
|
||||
NC_NETS="$(get_nets "$NC_CONTAINER" | xargs || true)"
|
||||
DB_NETS="$(get_nets "$DB_CONTAINER" | xargs || true)"
|
||||
COMMON_NET="$(printf "%s\n" $NC_NETS $DB_NETS | tr ' ' '\n' | grep -v '^$' | sort | uniq -d || true)"
|
||||
[ -n "$COMMON_NET" ] && pass "Nextcloud & DB share network: ${COMMON_NET}" || fail "Nextcloud & DB do NOT share a network (NC: [$NC_NETS], DB: [$DB_NETS])"
|
||||
if docker exec -u www-data "$NC_CONTAINER" php occ status >"$TMP_DIR/occ_status.txt" 2>"$TMP_DIR/occ_status.err"; then
|
||||
cat "$TMP_DIR/occ_status.txt"
|
||||
grep -q "installed: true" "$TMP_DIR/occ_status.txt" && pass "Nextcloud installed: true" || fail "Nextcloud installed: false"
|
||||
grep -q "maintenance: false" "$TMP_DIR/occ_status.txt" && pass "Nextcloud maintenance: false" || fail "Nextcloud maintenance is ON"
|
||||
else fail "occ status failed: $(cat "$TMP_DIR/occ_status.err" || true)"; fi
|
||||
DB_TEST_PHP="
|
||||
require \"/var/www/html/lib/base.php\";
|
||||
\$c=\\OC::\$server->getConfig();
|
||||
\$h=\$c->getSystemValue(\"dbhost\"); \$d=\$c->getSystemValue(\"dbname\");
|
||||
\$u=\$c->getSystemValue(\"dbuser\"); \$p=\$c->getSystemValue(\"dbpassword\");
|
||||
if(!is_string(\$h) || \$h===''){ fwrite(STDERR, \"Invalid dbhost\\n\"); exit(2); }
|
||||
\$dsn=''; if (\$h[0]==='/' || strpos(\$h,'localhost:/')===0 || strpos(\$h,'127.0.0.1:/')===0) {
|
||||
if (strpos(\$h,':/')!==false) { \$parts=explode(':/', \$h, 2); \$sock='/'.\$parts[1]; } else { \$sock=\$h; }
|
||||
\$dsn='mysql:unix_socket='.\$sock.';dbname='.\$d.';charset=utf8mb4';
|
||||
} else {
|
||||
\$host=\$h; \$port=null; if (strpos(\$h,':')!==false) { list(\$host,\$pp)=explode(':',\$h,2); if (ctype_digit(\$pp)) { \$port=(int)\$pp; } }
|
||||
\$dsn='mysql:host='.\$host.';'; if (\$port) { \$dsn.='port='.\$port.';'; }
|
||||
\$dsn.='dbname='.\$d.';charset=utf8mb4';
|
||||
}
|
||||
try { \$pdo=new PDO(\$dsn,\$u,\$p,[PDO::ATTR_TIMEOUT=>2,PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION]); \$pdo->query('SELECT 1'); echo \"DB connect OK\\n\"; }
|
||||
catch (Throwable \$e) { fwrite(STDERR, 'PDO error: '.\$e->getMessage().\"\\n\"); exit(2); }
|
||||
"
|
||||
if docker exec -u www-data "$NC_CONTAINER" php -r "$DB_TEST_PHP" >"$TMP_DIR/db_ping.out" 2>"$TMP_DIR/db_ping.err"; then
|
||||
pass "Nextcloud → DB connection: OK ($(tr -d "\r" <"$TMP_DIR/db_ping.out"))"
|
||||
else fail "Nextcloud → DB connection FAILED: $(tr -d "\r" <"$TMP_DIR/db_ping.err")"; fi
|
||||
if docker exec "$DB_CONTAINER" sh -c 'mariadb-admin ping -h 127.0.0.1 --silent 2>/dev/null || mysqladmin ping -h 127.0.0.1 --silent 2>/dev/null'; then
|
||||
pass "MariaDB is ready for connections"; else fail "MariaDB readiness check FAILED"; fi
|
||||
REDIS_TEST_PHP='
|
||||
require "/var/www/html/lib/base.php";
|
||||
$c=\OC::$server->getConfig();
|
||||
$rc=$c->getSystemValue("redis", []);
|
||||
$host = is_array($rc) && isset($rc["host"]) ? $rc["host"] : (getenv("REDIS_HOST") ?: "redis");
|
||||
$port = is_array($rc) && isset($rc["port"]) ? (int)$rc["port"] : 6379;
|
||||
if (class_exists("Redis")) { $r=new Redis(); try { $r->connect($host,$port,1.0); echo $r->ping()."\n"; exit(0); }
|
||||
catch (Throwable $e) { fwrite(STDERR, "Redis ext error: ".$e->getMessage()."\n"); exit(2); } }
|
||||
else { $e=$s=0; $fp=@fsockopen($host,$port,$e,$s,1.0);
|
||||
if($fp){ echo "PONG (tcp ok)\n"; fclose($fp); exit(0); }
|
||||
fwrite(STDERR,"No php-redis ext and TCP connect failed\n"); exit(2); }'
|
||||
if docker exec -u www-data "$NC_CONTAINER" php -r "$REDIS_TEST_PHP" >"$TMP_DIR/redis_ping.out" 2>"$TMP_DIR/redis_ping.err"; then
|
||||
pass "Nextcloud → Redis: OK ($(tr -d "\r" <"$TMP_DIR/redis_ping.out"))"
|
||||
else fail "Nextcloud → Redis FAILED: $(tr -d "\r" <"$TMP_DIR/redis_ping.err")"; fi
|
||||
if docker exec "$REDIS_CONTAINER" sh -c 'redis-cli -h 127.0.0.1 ping' >"$TMP_DIR/redis_cli.out" 2>"$TMP_DIR/redis_cli.err"; then
|
||||
grep -q "PONG" "$TMP_DIR/redis_cli.out" && pass "Redis container responds to PING" || fail "Redis cli ping did not return PONG"
|
||||
else fail "redis-cli ping failed: $(cat "$TMP_DIR/redis_cli.err" || true)"; fi
|
||||
if curl -fsS "$NC_HTTP" -o "$TMP_DIR/nc_http.json"; then pass "HTTP $NC_HTTP reachable"; head -c 300 "$TMP_DIR/nc_http.json"; echo; else fail "HTTP $NC_HTTP unreachable"; fi
|
||||
if [ -n "$NC_PUBLIC_URL" ]; then curl -fsSIL "$NC_PUBLIC_URL" >/dev/null && pass "Public URL reachable: $NC_PUBLIC_URL" || fail "Public URL unreachable: $NC_PUBLIC_URL"; fi
|
||||
if curl -fsS "$COLLA_DISCOVERY" -o "$TMP_DIR/colla_disc.xml"; then pass "Collabora discovery reachable ($COLLA_DISCOVERY)"; grep -m1 -o "<wopi-discovery[^>]*>" "$TMP_DIR/colla_disc.xml" || true; else fail "Collabora discovery unreachable: $COLLA_DISCOVERY"; fi
|
||||
if [ "$EXIT" -eq 0 ]; then echo "----------------------------------------"; echo "ALL CHECKS PASSED ✅"; else echo "----------------------------------------"; echo "ONE OR MORE CHECKS FAILED ❌ (see above)"; fi
|
||||
exit "$EXIT"
|
||||
|
||||
- name: Run stack-health.sh
|
||||
ansible.builtin.shell: "{{ health_script_path }}"
|
||||
@@ -23,7 +94,7 @@
|
||||
ansible.builtin.debug:
|
||||
msg: "{{ health.stdout | default('no stdout') }}"
|
||||
|
||||
- name: Fail if checks failed (rc != 0)
|
||||
- name: Fail if checks failed
|
||||
ansible.builtin.fail:
|
||||
msg: "Health checks failed"
|
||||
when: health.rc != 0
|
||||
Reference in New Issue
Block a user