Prepare final homelab cleanup gates

2026-06-01 12:19:17 +02:00
parent c3222e800b
commit 479eb291c4
7 changed files with 414 additions and 6 deletions
@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+MODE="dry-run"
+CUTOFF_DATE="2026-06-02"
+
+if [[ "${1:-}" == "--execute" ]]; then
+  MODE="execute"
+elif [[ "${1:-}" != "" && "${1:-}" != "--dry-run" ]]; then
+  echo "Usage: $0 [--dry-run|--execute]" >&2
+  exit 2
+fi
+
+if [[ "$(id -u)" -ne 0 ]]; then
+  echo "Must run as root on the Unraid host." >&2
+  exit 1
+fi
+
+today="$(date +%F)"
+if [[ "$MODE" == "execute" && "$today" < "$CUTOFF_DATE" ]]; then
+  echo "Refusing: cutoff is $CUTOFF_DATE, today is $today." >&2
+  exit 1
+fi
+
+declare -a CANDIDATES=(
+  "/mnt/user/appdata/postgresql17|/mnt/user/appdata/postgresql18|shared PostgreSQL 17 rollback"
+  "/mnt/user/appdata/mealie/postgres|/mnt/user/appdata/mealie/postgres18|Mealie PostgreSQL 17 rollback"
+  "/mnt/user/appdata/nextcloud/postgres|/mnt/user/appdata/nextcloud/postgres18|Nextcloud PostgreSQL 17 rollback"
+  "/mnt/user/appdata/immich_postgres|/mnt/user/appdata/immich_postgres_vectorchord|Immich pgvecto.rs rollback"
+)
+
+require_container_healthy() {
+  local name="$1"
+  local state
+  local health
+
+  state="$(docker inspect "$name" --format '{{.State.Status}}' 2>/dev/null || true)"
+  health="$(docker inspect "$name" --format '{{if .State.Health}}{{.State.Health.Status}}{{else}}none{{end}}' 2>/dev/null || true)"
+
+  if [[ "$state" != "running" ]]; then
+    echo "Container $name is not running (state=$state)." >&2
+    exit 1
+  fi
+
+  if [[ "$health" != "healthy" && "$health" != "none" ]]; then
+    echo "Container $name is not healthy (health=$health)." >&2
+    exit 1
+  fi
+}
+
+echo "Alt-volume release check"
+echo "Mode: $MODE"
+echo "Date: $today"
+echo
+
+require_container_healthy postgresql17
+require_container_healthy mealie-postgres
+require_container_healthy nextcloud-postgres
+require_container_healthy immich_postgres
+
+if docker ps --filter health=unhealthy --format '{{.Names}}' | grep -q .; then
+  echo "Refusing: unhealthy containers exist." >&2
+  docker ps --filter health=unhealthy --format '  {{.Names}} {{.Status}}' >&2
+  exit 1
+fi
+
+if [[ -x /mnt/user/services/homelab-infra/ops/restore-tests/run-restore-checks.sh ]]; then
+  /mnt/user/services/homelab-infra/ops/restore-tests/run-restore-checks.sh freshness
+fi
+
+mapfile -t active_mounts < <(docker inspect $(docker ps -q) --format '{{range .Mounts}}{{println .Source}}{{end}}' 2>/dev/null || true)
+
+for entry in "${CANDIDATES[@]}"; do
+  IFS='|' read -r old_path active_path label <<< "$entry"
+
+  if [[ ! -d "$active_path" ]]; then
+    echo "Missing active path for $label: $active_path" >&2
+    exit 1
+  fi
+
+  if [[ ! -d "$old_path" ]]; then
+    echo "Already absent: $old_path ($label)"
+    continue
+  fi
+
+  if printf '%s\n' "${active_mounts[@]}" | grep -Fxq "$old_path"; then
+    echo "Refusing: old path is still mounted by a running container: $old_path" >&2
+    exit 1
+  fi
+
+  size="$(du -sh "$old_path" 2>/dev/null | awk '{print $1}')"
+  echo "Candidate: $old_path ($label, $size)"
+  echo "Active:    $active_path"
+
+  if [[ "$MODE" == "execute" ]]; then
+    rm -rf --one-file-system "$old_path"
+    echo "Removed:   $old_path"
+  else
+    echo "Dry-run:   would remove $old_path"
+  fi
+  echo
+done
+
+echo "Alt-volume release check completed."