Mercurial > code > home > repos > infra
annotate system.py @ 118:69058ad170be
watch output from `zfs list -o space` as metrics
author | drewp@bigasterisk.com |
---|---|
date | Wed, 07 Dec 2022 23:02:57 -0800 |
parents | ab1e0cbe8009 |
children | fe3ae7c95e65 |
rev | line source |
---|---|
1 | 1 import os |
10
1fec9fe18a4e
more system.py cleanup; add pi /boot/config.txt
drewp@bigasterisk.com
parents:
6
diff
changeset
|
2 |
1 | 3 from pyinfra import host |
4 from pyinfra.facts.server import LinuxDistribution | |
12
15c5ce7c74b5
refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
10
diff
changeset
|
5 from pyinfra.operations import apt, files, server, systemd |
1 | 6 |
3
61945df2a392
updates to work on recent raspbian installs
drewp@bigasterisk.com
parents:
2
diff
changeset
|
7 is_pi = host.get_fact(LinuxDistribution)['name'] in ['Debian', 'Raspbian GNU/Linux'] |
1 | 8 |
9 TZ = 'America/Los_Angeles' | |
10 | |
12
15c5ce7c74b5
refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
10
diff
changeset
|
11 server.hostname(hostname=host.name) |
15c5ce7c74b5
refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
10
diff
changeset
|
12 |
91 | 13 def timezone(): |
14 files.link(path='/etc/localtime', target=f'/usr/share/zoneinfo/{TZ}') | |
15 files.replace(path='/etc/timezone', text='.*', replace=TZ) | |
16 apt.packages(update=True, | |
17 cache_time=86400, | |
18 packages=['tzdata'], | |
19 force=True, | |
20 _env={ | |
21 'TZ': TZ, | |
22 'LANG': 'en_US.UTF-8', | |
23 'DEBIAN_FRONTEND': 'noninteractive' | |
24 }) | |
1 | 25 |
91 | 26 def fstab(): |
27 fstab_file = f'files/fstab/{host.name}' | |
28 if os.path.exists(fstab_file): | |
29 files.put(src=fstab_file, dest='/etc/fstab') | |
1 | 30 |
91 | 31 def pi_tmpfs(): |
1 | 32 for line in [ |
33 'tmpfs /var/log tmpfs defaults,noatime,mode=0755 0 0', | |
34 'tmpfs /tmp tmpfs defaults,noatime 0 0', | |
35 ]: | |
36 files.line(path="/etc/fstab", line=line, replace=line) | |
37 | |
38 # stop SD card corruption (along with some mounts in fstab) | |
39 apt.packages(packages=['dphys-swapfile'], present=False) | |
40 | |
41 | |
3
61945df2a392
updates to work on recent raspbian installs
drewp@bigasterisk.com
parents:
2
diff
changeset
|
42 # don't try to get aufs-dkms on rpi-- https://github.com/docker/for-linux/issues/709 |
91 | 43 def podman_inecure_registry(): |
44 files.template(src='templates/kube/podman_registries.conf.j2', dest='/etc/containers/registries.conf.d/bang.conf') | |
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
45 |
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
46 |
91 | 47 def no_sleep(): |
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
48 server.shell(commands=['systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target']) |
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
49 |
91 | 50 def nfs_server(): |
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
51 apt.packages(packages=['nfs-kernel-server']) |
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
52 files.template(src='templates/bang_exports.j2', dest='/etc/exports') |
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
53 |
57 | 54 # sudo zfs set sharenfs="rw=10.5.0.0/16" stor6 |
55 | |
91 | 56 def smaller_journals(): |
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
57 files.line(name='shorter systemctl log window, for disk space', |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
58 path='/etc/systemd/journald.conf', |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
59 line='MaxFileSec', |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
60 replace="MaxFileSec=7day") |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
61 |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
62 for port in [80, 443]: |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
63 files.template(src="templates/webforward.service.j2", dest=f"/etc/systemd/system/web_forward_{port}.service", port=port) |
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
64 systemd.service(service=f'web_forward_{port}', enabled=True, restarted=True) |
91 | 65 |
118
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
66 def zfs_metrics(): |
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
67 files.put(src='files/zfs_metrics/zfs_space_metrics.sh', dest='/opt/zfs_metrics/zfs_space_metrics.sh') |
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
68 files.put(src='files/zfs_metrics/zfs.mtail', dest='/opt/zfs_metrics/zfs.mtail') |
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
69 files.put(src='files/zfs_metrics/zfs_space_metrics.service', |
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
70 dest=f'/etc/systemd/system/zfs_space_metrics.service') |
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
71 systemd.service(service=f'zfs_space_metrics', enabled=True, restarted=True, daemon_reload=True) |
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
72 |
91 | 73 timezone() |
74 fstab() | |
75 | |
76 if not is_pi: | |
77 files.line(path='/etc/update-manager/release-upgrades', line="^Prompt=", replace="Prompt=normal") | |
78 | |
79 if is_pi and host.name != 'pipe': | |
80 pi_tmpfs() | |
81 | |
82 if not is_pi: | |
83 podman_inecure_registry() | |
84 | |
85 if host.name in ['bang', 'pipe']: | |
86 no_sleep() | |
87 | |
88 if host.name == 'bang': | |
89 nfs_server() | |
118
69058ad170be
watch output from `zfs list -o space` as metrics
drewp@bigasterisk.com
parents:
91
diff
changeset
|
90 zfs_metrics() |
91 | 91 |
92 if host.name == 'prime': | |
93 smaller_journals() |