DmitryandClaude Sonnet 5
5e27ba2513
The *-update.yml playbooks hard-coded the pre-migration VMIDs, so after cutover the "safety backup" ran against the stopped OLD container. Now the VMID comes from homelab_services['<svc>'].vmid. Also removes `--prune-backups keep-all=1` from the vzdump calls: retention is PBS's job (prune-pbs), and the client-side flag needed Datastore.Modify/Prune the ansible@pve token does not have, which made vzdump print "Backup ... failed" and exit non-zero after a successful upload. gitea-update.yml additionally splits the offsite backup (hosts: gitea) from its audit (hosts: cloud-pc), matching the profile move into the container. pve-*.yml imports pass pve_provisioning_enabled: false so the runtime update path never re-enters container creation. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012uoq5AVK8mkBgg83Mq6o5V
99 lines
2.7 KiB
YAML
99 lines
2.7 KiB
YAML
---
|
|
- name: Verify Mihomo PBS audit before update
|
|
hosts: mini-pc
|
|
gather_facts: false
|
|
vars:
|
|
mihomo_vmid: "{{ homelab_services['mihomo'].vmid }}"
|
|
tasks:
|
|
- name: Read Mihomo VMID configuration
|
|
ansible.builtin.command: "pct config {{ mihomo_vmid }}"
|
|
register: mihomo_pct_config
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Refuse to run backup unless registry VMID is Mihomo
|
|
ansible.builtin.assert:
|
|
that:
|
|
- mihomo_pct_config.rc == 0
|
|
- mihomo_update_hostname == 'mihomo'
|
|
fail_msg: >-
|
|
VMID {{ mihomo_vmid }} from the service registry must be the Mihomo
|
|
container before backup.
|
|
vars:
|
|
mihomo_update_hostname: >-
|
|
{{ mihomo_pct_config.stdout_lines
|
|
| select('match', '^hostname: ')
|
|
| map('regex_replace', '^hostname: ', '')
|
|
| first
|
|
| default('') }}
|
|
|
|
- name: Check for active Proxmox backup before Mihomo PBS backup
|
|
ansible.builtin.command: pgrep -x vzdump
|
|
register: mihomo_vzdump_preflight
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Require no active Proxmox backup before Mihomo PBS backup
|
|
ansible.builtin.assert:
|
|
that:
|
|
- mihomo_vzdump_preflight.rc != 0
|
|
fail_msg: >-
|
|
A Proxmox backup is already running on mini-pc.
|
|
Retry after the existing backup completes.
|
|
|
|
- name: Create a fresh Mihomo PBS backup
|
|
ansible.builtin.command:
|
|
argv:
|
|
- vzdump
|
|
- "{{ mihomo_vmid }}"
|
|
- --storage
|
|
- pbs
|
|
- --mode
|
|
- snapshot
|
|
- --exclude-path
|
|
- /var/lib/docker/fuse-overlayfs/*/merged
|
|
|
|
- name: Run current PBS backup audit on mini-pc
|
|
ansible.builtin.command:
|
|
argv:
|
|
- systemctl
|
|
- start
|
|
- --wait
|
|
- homelab-backup-audit-pbs.service
|
|
changed_when: true
|
|
|
|
- import_playbook: pve-mihomo.yml
|
|
|
|
- name: Verify Mihomo after update
|
|
hosts: mihomo
|
|
gather_facts: false
|
|
tasks:
|
|
- name: Wait for Mihomo proxy TCP ports
|
|
ansible.builtin.wait_for:
|
|
host: 127.0.0.1
|
|
port: "{{ item }}"
|
|
state: started
|
|
timeout: 120
|
|
loop:
|
|
- 7890
|
|
- 7891
|
|
- 9090
|
|
|
|
- name: Check Mihomo UI endpoint
|
|
ansible.builtin.uri:
|
|
url: http://127.0.0.1:8080/
|
|
status_code: 200
|
|
register: mihomo_ui_health
|
|
retries: 24
|
|
delay: 5
|
|
until: mihomo_ui_health.status == 200
|
|
|
|
- name: Check Mihomo controller /version endpoint
|
|
ansible.builtin.uri:
|
|
url: http://127.0.0.1:9090/version
|
|
status_code: 200
|
|
register: mihomo_controller_health
|
|
retries: 24
|
|
delay: 5
|
|
until: mihomo_controller_health.status == 200
|