113 lines
3.8 KiB
YAML
113 lines
3.8 KiB
YAML
# update_semaphore.yml
|
|
|
|
- name: Update Semaphore on VM via Proxmox
|
|
hosts: linux_servers
|
|
gather_facts: false
|
|
become: true
|
|
become_user: root
|
|
become_method: sudo
|
|
|
|
vars:
|
|
# --- Connection to VM (provided by Semaphore env vars) ---
|
|
vm_ip: "{{ lookup('env', 'VM_IP') }}" # IP vm-portainer
|
|
vm_user: "{{ lookup('env', 'VM_USER') }}"
|
|
vm_pass: "{{ lookup('env', 'VM_PASS') }}"
|
|
use_sudo: false
|
|
|
|
# --- Debug mode (controlled via Semaphore variable) ---
|
|
DEBUG: "{{ lookup('env', 'DEBUG') | default(0) | int }}"
|
|
|
|
# --- Semaphore specifics ---
|
|
semaphore_project: "semaphore"
|
|
semaphore_compose_file: "/data/compose/semaphore/docker-compose.yml"
|
|
semaphore_service: "semaphore"
|
|
|
|
tasks:
|
|
- name: Ensure sshpass is installed (for password-based SSH) # English comments
|
|
ansible.builtin.apt:
|
|
name: sshpass
|
|
state: present
|
|
update_cache: yes
|
|
|
|
- name: Run Semaphore self-update on VM in background (nohup + log)
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -e
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- |
|
|
set -euo pipefail
|
|
|
|
# English comments: store state in user's home (more reliable than /tmp)
|
|
STATE_DIR="${XDG_CACHE_HOME:-$HOME/.cache}/semaphore-self-update"
|
|
mkdir -p "$STATE_DIR"
|
|
|
|
RID="$(date +%s)"
|
|
LOG="$STATE_DIR/run-${RID}.log"
|
|
PIDF="$STATE_DIR/run-${RID}.pid"
|
|
RCF="$STATE_DIR/run-${RID}.rc"
|
|
SH="$STATE_DIR/run-${RID}.sh"
|
|
|
|
# English comments: write worker script (no variable expansion while writing)
|
|
cat > "$SH" <<'EOS'
|
|
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
unalias docker 2>/dev/null || true
|
|
export DOCKER_CLI_HINTS=0
|
|
|
|
echo "=== started: $(date -Is) ==="
|
|
echo "host: $(hostname)"
|
|
echo "compose: {{ semaphore_compose_file }}"
|
|
echo "project: {{ semaphore_project }} service: {{ semaphore_service }}"
|
|
echo "USE_SUDO=${USE_SUDO:-0}"
|
|
echo
|
|
|
|
sleep 15
|
|
|
|
DOCKER="docker"
|
|
if [ "${USE_SUDO:-0}" = "1" ]; then
|
|
DOCKER="sudo -n docker"
|
|
fi
|
|
|
|
# English comments: pull explicitly + recreate
|
|
$DOCKER compose -p {{ semaphore_project }} -f {{ semaphore_compose_file }} pull {{ semaphore_service }}
|
|
$DOCKER compose -p {{ semaphore_project }} -f {{ semaphore_compose_file }} up -d --no-deps --force-recreate {{ semaphore_service }}
|
|
|
|
echo
|
|
echo "=== finished: $(date -Is) ==="
|
|
EOS
|
|
|
|
chmod +x "$SH"
|
|
|
|
# English comments: start in background, persist output, store pid + rc
|
|
nohup env USE_SUDO="{{ lookup('env', 'USE_SUDO') | default('0') }}" \
|
|
bash "$SH" >"$LOG" 2>&1 </dev/null &
|
|
|
|
echo $! >"$PIDF"
|
|
|
|
# English comments: best-effort rc tracking (will be overwritten at end if you add it later)
|
|
echo "running" >"$RCF"
|
|
|
|
echo "scheduled: pid=$(cat "$PIDF"), log=$LOG, script=$SH, rcfile=$RCF"
|
|
environment:
|
|
SSHPASS: "{{ vm_pass }}"
|
|
register: semaphore_update
|
|
changed_when: false
|
|
no_log: "{{ DEBUG == 0 }}"
|
|
|
|
|
|
- name: Show result of Semaphore self-update (debug)
|
|
ansible.builtin.debug:
|
|
msg: |
|
|
RC: {{ semaphore_update.rc }}
|
|
STDOUT: {{ (semaphore_update.stdout | default('')).strip() }}
|
|
STDERR: {{ (semaphore_update.stderr | default('')).strip() }}
|
|
when: DEBUG == 1
|