Dmitry
102 lines
3.0 KiB
Bash
Executable File
102 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euxo pipefail
|
|
|
|
HOST="$1"
|
|
STACK="${2:-}"
|
|
BASE="/opt/services"
|
|
|
|
cd "$BASE"
|
|
|
|
if [ -n "$STACK" ]; then
|
|
dirs="$STACK"
|
|
else
|
|
dirs="$(find "$HOST" -mindepth 2 -maxdepth 2 -name docker-compose.yml | cut -d/ -f2 | sort -u)"
|
|
|
|
# Remove stale stacks whose directories were deleted from the repo
|
|
stale_dirs="$(docker ps -a \
|
|
--filter "label=com.docker.compose.project.working_dir" \
|
|
--format '{{.Label "com.docker.compose.project.working_dir"}}' \
|
|
| sort -u \
|
|
| grep "^$BASE/$HOST/" || true)"
|
|
|
|
for working_dir in $stale_dirs; do
|
|
dir="${working_dir#"$BASE/$HOST/"}"
|
|
dir="${dir%%/*}"
|
|
if [ ! -f "$BASE/$HOST/$dir/docker-compose.yml" ]; then
|
|
echo "==> Removing stale stack: $dir"
|
|
containers="$(docker ps -aq --filter "label=com.docker.compose.project.working_dir=$working_dir" || true)"
|
|
[ -n "$containers" ] && docker rm -f $containers
|
|
networks="$(docker network ls -q --filter "label=com.docker.compose.project.working_dir=$working_dir" || true)"
|
|
[ -n "$networks" ] && docker network rm $networks || true
|
|
fi
|
|
done
|
|
fi
|
|
|
|
if [ -z "$dirs" ]; then
|
|
echo "No stacks found for $HOST"
|
|
exit 0
|
|
fi
|
|
|
|
failed=""
|
|
|
|
for dir in $dirs; do
|
|
echo "==> Stack: $dir"
|
|
|
|
if [ "$dir" = "gitea-runner" ]; then
|
|
echo "Skipping gitea-runner (self-update not safe from CI)"
|
|
continue
|
|
fi
|
|
|
|
if { [ "$HOST" = "cloud-pc" ] || [ "$HOST" = "mini-pc" ]; } && [ "$dir" = "zerotier" ]; then
|
|
echo "Skipping zerotier (managed by NixOS service)"
|
|
continue
|
|
fi
|
|
|
|
stack_dir="$BASE/$HOST/$dir"
|
|
cd "$stack_dir"
|
|
|
|
if [ ! -f docker-compose.yml ]; then
|
|
echo "No docker-compose.yml, skipping"
|
|
cd "$BASE"
|
|
continue
|
|
fi
|
|
|
|
docker compose config --quiet
|
|
|
|
# Remove containers whose container_name matches this stack but belong to a different project.
|
|
# docker compose down won't touch them because they carry no matching project labels.
|
|
while IFS= read -r cname; do
|
|
[ -z "$cname" ] && continue
|
|
existing="$(docker ps -aq --filter "name=^/${cname}$" 2>/dev/null || true)"
|
|
[ -z "$existing" ] && continue
|
|
owner="$(docker inspect --format '{{index .Config.Labels "com.docker.compose.project.working_dir"}}' "$existing" 2>/dev/null || true)"
|
|
if [ "$owner" != "$(pwd)" ]; then
|
|
echo "==> Removing conflicting container $cname (owner: ${owner:-none})"
|
|
docker rm -f "$existing"
|
|
fi
|
|
done < <(docker compose config 2>/dev/null | awk '/^[[:space:]]+container_name:/{gsub(/["'"'"']/, "", $2); print $2}')
|
|
|
|
if grep -qE '^[[:space:]]*build:' docker-compose.yml; then
|
|
docker compose up -d --build --remove-orphans
|
|
else
|
|
docker compose pull
|
|
docker compose up -d --remove-orphans
|
|
fi
|
|
|
|
# Health check: give containers a moment, then fail on crashed services
|
|
sleep 5
|
|
docker compose ps
|
|
if docker compose ps 2>&1 | grep -qE 'Exited \([1-9]|Restarting'; then
|
|
docker compose logs --tail=30
|
|
echo "ERROR: Service failure in stack $dir"
|
|
failed="$failed $dir"
|
|
fi
|
|
|
|
cd "$BASE"
|
|
done
|
|
|
|
if [ -n "$failed" ]; then
|
|
echo "FAILED stacks:$failed"
|
|
exit 1
|
|
fi
|