jakub/ansible
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

edit

Browse Source
This commit is contained in:
martin.fencl
2025-12-24 00:54:52 +01:00
parent 7ea0bb86f2
commit 17c1b43116
1 changed files with 109 additions and 210 deletions
Download Patch File Download Diff File Expand all files Collapse all files

319
nextcloud/update_nextcloud_v2.yml
View File

@@ -1,7 +1,7 @@
# nextcloud/update_nextcloud.yml # nextcloud/update_nextcloud.yml
- name: Update Nextcloud on VM via Proxmox - name: Update Nextcloud on VM via Proxmox
hosts: proxmox_nextcloud hosts: proxmox_nextcloud # linux_servers
gather_facts: false gather_facts: false
become: true become: true
become_user: root become_user: root
@@ -31,20 +31,7 @@
# Docker command prefix (consistent behavior and quiet hints) # Docker command prefix (consistent behavior and quiet hints)
docker_prefix: "unalias docker 2>/dev/null || true; DOCKER_CLI_HINTS=0; command docker" docker_prefix: "unalias docker 2>/dev/null || true; DOCKER_CLI_HINTS=0; command docker"
# SSH argv base (always run remote command via bash -lc)
ssh_argv_base:
- sshpass
- -e
- ssh
- -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- bash
- -lc
# --- Backup phase commands (run on VM) --- # --- Backup phase commands (run on VM) ---
nextcloud_backup_commands: nextcloud_backup_commands:
- >- - >-
@@ -60,6 +47,23 @@
- >- - >-
{{ docker_prefix }} exec nextcloud-db sh -c 'command -v mariadb-dump >/dev/null && mariadb-dump -u"$MYSQL_USER" -p"$MYSQL_PASSWORD" "$MYSQL_DATABASE" || mysqldump -u"$MYSQL_USER" -p"$MYSQL_PASSWORD" "$MYSQL_DATABASE"' > "{{ backup_dir }}/db.sql" {{ docker_prefix }} exec nextcloud-db sh -c 'command -v mariadb-dump >/dev/null && mariadb-dump -u"$MYSQL_USER" -p"$MYSQL_PASSWORD" "$MYSQL_DATABASE" || mysqldump -u"$MYSQL_USER" -p"$MYSQL_PASSWORD" "$MYSQL_DATABASE"' > "{{ backup_dir }}/db.sql"
# --- Upgrade phase commands (run on VM) ---
nextcloud_upgrade_commands:
- >-
{{ docker_prefix }} compose -p {{ nextcloud_project }} -f {{ nextcloud_compose_file }} pull {{ nextcloud_service }}
- >-
{{ docker_prefix }} compose -p {{ nextcloud_project }} -f {{ nextcloud_compose_file }} up -d --no-deps --force-recreate {{ nextcloud_service }}
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ maintenance:mode --off
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ upgrade
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ app:update --all || true
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ maintenance:repair --include-expensive || true
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ maintenance:mode --on
tasks: tasks:
- name: Ensure sshpass is installed (for password-based SSH) - name: Ensure sshpass is installed (for password-based SSH)
ansible.builtin.apt: ansible.builtin.apt:
@@ -69,29 +73,40 @@
- name: Nextcloud | Show current version before upgrade (DEBUG) - name: Nextcloud | Show current version before upgrade (DEBUG)
ansible.builtin.command: ansible.builtin.command:
argv: >- argv:
{{ - sshpass
ssh_argv_base - -e
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ -V || true' ] - ssh
}} - -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- bash
- -lc
- 'docker exec -u www-data nextcloud php occ -V || true'
environment: environment:
SSHPASS: "{{ vm_pass }}" SSHPASS: "{{ vm_pass }}"
register: nc_version_before register: nc_version_before
changed_when: false changed_when: false
failed_when: false failed_when: false
when: DEBUG == 1 when: DEBUG == 1
no_log: "{{ DEBUG == 0 }}"
# ------------------------- # -------------------------
# Backup phase # Backup phase
# ------------------------- # -------------------------
- name: Nextcloud | Run backup commands on VM (via SSH) - name: Nextcloud | Run backup commands on VM (via SSH) # run plain commands via SSH
ansible.builtin.command: ansible.builtin.command:
argv: >- argv:
{{ - sshpass
ssh_argv_base - -e
+ [ ((use_sudo | bool) | ternary('sudo -n ' ~ item, item)) ] - ssh
}} - -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- "{{ ('sudo ' if use_sudo else '') + item }}"
environment: environment:
SSHPASS: "{{ vm_pass }}" SSHPASS: "{{ vm_pass }}"
loop: "{{ nextcloud_backup_commands }}" loop: "{{ nextcloud_backup_commands }}"
@@ -100,7 +115,6 @@
label: "backup-cmd-{{ idx }}" label: "backup-cmd-{{ idx }}"
register: nc_backup_cmds register: nc_backup_cmds
changed_when: false changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}" no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Show outputs of backup commands (DEBUG) - name: Nextcloud | Show outputs of backup commands (DEBUG)
@@ -126,208 +140,78 @@
label: "backup-cmd-{{ idx }}" label: "backup-cmd-{{ idx }}"
# ------------------------- # -------------------------
# Upgrade phase (robust) # Upgrade phase
# ------------------------- # -------------------------
- name: Nextcloud | Pull image
- name: Nextcloud | Run upgrade commands on VM (via SSH)
ansible.builtin.command: ansible.builtin.command:
argv: >- argv:
{{ - sshpass
ssh_argv_base - -e
+ [ docker_prefix ~ ' compose -p ' ~ nextcloud_project ~ ' -f ' ~ nextcloud_compose_file ~ ' pull ' ~ nextcloud_service ] - ssh
}} - -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- bash
- -lc
- "{{ ('sudo ' if use_sudo else '') + item }}"
environment: environment:
SSHPASS: "{{ vm_pass }}" SSHPASS: "{{ vm_pass }}"
register: nc_pull loop: "{{ nextcloud_upgrade_commands }}"
loop_control:
index_var: idx
label: "upgrade-cmd-{{ idx }}"
register: nc_upgrade_cmds
changed_when: false changed_when: false
failed_when: false failed_when: false
no_log: "{{ DEBUG == 0 }}" no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Recreate service - name: Nextcloud | Show outputs of upgrade commands (DEBUG)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' compose -p ' ~ nextcloud_project ~ ' -f ' ~ nextcloud_compose_file ~ ' up -d --no-deps --force-recreate ' ~ nextcloud_service ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_up
changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Ensure maintenance mode is OFF before occ upgrade
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ maintenance:mode --off || true' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_maint_off_before_upgrade
changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | occ upgrade (attempt 1)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ upgrade' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_upgrade_1
changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Remediation if occ upgrade complains about maintenance/upgrade-in-progress
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ item ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
loop:
# Force-disable maintenance flag in config.php (works even if maintenance command is blocked)
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ config:system:set maintenance --type=boolean --value=false || true
# Repair can move stale updater step files and clear related state
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ maintenance:repair || true
# Ensure maintenance is off before retry
- >-
{{ docker_prefix }} exec -u www-data nextcloud php occ maintenance:mode --off || true
register: nc_remediate
changed_when: false
failed_when: false
when: >-
nc_upgrade_1.rc != 0 and (
('Maybe an upgrade is already in process' in (nc_upgrade_1.stdout | default(''))) or
('Maybe an upgrade is already in process' in (nc_upgrade_1.stderr | default(''))) or
('Nextcloud is in maintenance mode' in (nc_upgrade_1.stdout | default(''))) or
('Nextcloud is in maintenance mode' in (nc_upgrade_1.stderr | default('')))
)
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | occ upgrade (attempt 2 after remediation)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ upgrade' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_upgrade_2
changed_when: false
failed_when: false
when: nc_upgrade_1.rc != 0
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Decide final upgrade result
ansible.builtin.set_fact:
nc_upgrade_final: "{{ (nc_upgrade_2 if (nc_upgrade_2 is defined) else nc_upgrade_1) }}"
- name: Nextcloud | Show occ upgrade output (DEBUG)
ansible.builtin.debug: ansible.builtin.debug:
msg: | msg: |
RC: {{ nc_upgrade_final.rc }} CMD: {{ item.item }}
RC: {{ item.rc }}
STDOUT: STDOUT:
{{ (nc_upgrade_final.stdout | default('')).strip() }} {{ (item.stdout | default('')).strip() }}
STDERR: STDERR:
{{ (nc_upgrade_final.stderr | default('')).strip() }} {{ (item.stderr | default('')).strip() }}
loop: "{{ nc_upgrade_cmds.results }}"
when: DEBUG == 1 when: DEBUG == 1
- name: Nextcloud | Fail if occ upgrade did not succeed - name: Nextcloud | Fail play if any upgrade command failed
ansible.builtin.assert: ansible.builtin.assert:
that: that: "item.rc == 0"
- nc_upgrade_final.rc == 0 fail_msg: "Nextcloud upgrade step failed on VM: {{ item.item }} (rc={{ item.rc }})"
fail_msg: >- success_msg: "All Nextcloud upgrade commands succeeded."
Nextcloud occ upgrade failed (rc={{ nc_upgrade_final.rc }}). loop: "{{ nc_upgrade_cmds.results }}"
stdout={{ (nc_upgrade_final.stdout | default('') | trim) }} loop_control:
stderr={{ (nc_upgrade_final.stderr | default('') | trim) }} index_var: idx
label: "upgrade-cmd-{{ idx }}"
# Keep the rest under maintenance mode to avoid user activity during app updates/repairs - name: Nextcloud | Disable maintenance mode (only after successful upgrade)
- name: Nextcloud | Enable maintenance mode for post-upgrade steps
ansible.builtin.command: ansible.builtin.command:
argv: >- argv:
{{ - sshpass
ssh_argv_base - -e
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ maintenance:mode --on' ] - ssh
}} - -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- "{{ ('sudo ' if use_sudo else '') }}docker exec -u www-data nextcloud php occ maintenance:mode --off"
environment: environment:
SSHPASS: "{{ vm_pass }}" SSHPASS: "{{ vm_pass }}"
register: nc_maint_on_post register: nc_maint_off
changed_when: false changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Update apps (best-effort)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ app:update --all || true' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_app_update
changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Run maintenance repair (include expensive) (best-effort)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ maintenance:repair --include-expensive || true' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_repair
changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Disable maintenance mode (end)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ maintenance:mode --off' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_maint_off_end
changed_when: false
failed_when: false
no_log: "{{ DEBUG == 0 }}"
- name: Nextcloud | Show current version after upgrade (DEBUG)
ansible.builtin.command:
argv: >-
{{
ssh_argv_base
+ [ docker_prefix ~ ' exec -u www-data nextcloud php occ -V || true' ]
}}
environment:
SSHPASS: "{{ vm_pass }}"
register: nc_version_after
changed_when: false
failed_when: false
when: DEBUG == 1
no_log: "{{ DEBUG == 0 }}" no_log: "{{ DEBUG == 0 }}"
# ------------------------- # -------------------------
# Readiness check (status.php) # Readiness check (status.php)
# ------------------------- # -------------------------
- name: Nextcloud | Wait for status.php (controller first) - name: Nextcloud | Wait for status.php (controller first)
ansible.builtin.uri: ansible.builtin.uri:
url: "{{ nextcloud_status_url }}" url: "{{ nextcloud_status_url }}"
@@ -346,11 +230,26 @@
- name: Nextcloud | VM-side fetch status.php (JSON via Python) - name: Nextcloud | VM-side fetch status.php (JSON via Python)
ansible.builtin.command: ansible.builtin.command:
argv: >- argv:
{{ - sshpass
ssh_argv_base - -e
+ [ "python3 - <<'PY'\nimport sys, urllib.request\ntry:\n with urllib.request.urlopen(\"" ~ nextcloud_status_url ~ "\", timeout=15) as r:\n sys.stdout.write(r.read().decode())\nexcept Exception:\n pass\nPY" ] - ssh
}} - -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- bash
- -lc
- |
python3 - <<'PY'
import json, urllib.request, sys
try:
with urllib.request.urlopen("{{ nextcloud_status_url }}", timeout=15) as r:
sys.stdout.write(r.read().decode())
except Exception:
pass
PY
environment: environment:
SSHPASS: "{{ vm_pass }}" SSHPASS: "{{ vm_pass }}"
register: nc_status_vm register: nc_status_vm