b3a8fe4496
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
- Config, docs, scripts, and backup manifests - Submodule refs unchanged (m = modified content in submodules) Made-with: Cursor
181 lines
8.0 KiB
Bash
181 lines
8.0 KiB
Bash
#!/usr/bin/env bash
|
|
# Recreate Containers as Privileged and Complete All Tasks
|
|
# This script recreates containers as privileged and completes all installations
|
|
|
|
set -uo pipefail
|
|
|
|
NODE_IP="${PROXMOX_HOST_R630_01}"
|
|
BACKUP_DIR="/root/container-backups-$(date +%Y%m%d-%H%M%S)"
|
|
|
|
log_info() { echo -e "\033[0;32m[INFO]\033[0m $1"; }
|
|
log_error() { echo -e "\033[0;31m[ERROR]\033[0m $1"; }
|
|
log_success() { echo -e "\033[0;32m[✓]\033[0m $1"; }
|
|
log_warn() { echo -e "\033[1;33m[WARN]\033[0m $1"; }
|
|
|
|
# Backup container configuration
|
|
backup_container_config() {
|
|
local vmid="$1"
|
|
log_info "Backing up configuration for CT $vmid..."
|
|
|
|
ssh -o ConnectTimeout=10 -o StrictHostKeyChecking=no root@${NODE_IP} "
|
|
mkdir -p $BACKUP_DIR
|
|
pct config $vmid > $BACKUP_DIR/ct-\${vmid}.conf 2>&1
|
|
echo 'Config backed up'
|
|
" && log_success "Config backed up for CT $vmid" || log_error "Failed to backup CT $vmid"
|
|
}
|
|
|
|
# Recreate container as privileged (template - needs customization per container)
|
|
recreate_container_privileged() {
|
|
local vmid="$1"
|
|
local hostname="$2"
|
|
local ip="$3"
|
|
local memory="${4:-2048}"
|
|
local cores="${5:-2}"
|
|
local disk="${6:-20}"
|
|
|
|
log_info "Recreating CT $vmid as privileged..."
|
|
|
|
ssh -o ConnectTimeout=10 -o StrictHostKeyChecking=no root@${NODE_IP} "
|
|
# Stop and destroy old container
|
|
pct stop $vmid 2>/dev/null || true
|
|
pct destroy $vmid 2>/dev/null || true
|
|
|
|
# Create new privileged container
|
|
pct create $vmid \\
|
|
local:vztmpl/ubuntu-22.04-standard_22.04-1_amd64.tar.zst \\
|
|
--storage thin1 \\
|
|
--hostname $hostname \\
|
|
--memory $memory \\
|
|
--cores $cores \\
|
|
--rootfs thin1:\${disk} \\
|
|
--net0 name=eth0,bridge=vmbr0,gw=${NETWORK_GATEWAY:-192.168.11.1},ip=\${ip}/24,type=veth \\
|
|
--unprivileged 0 \\
|
|
--swap 512 \\
|
|
--onboot 1 \\
|
|
--timezone America/Los_Angeles \\
|
|
--features nesting=1,keyctl=1
|
|
|
|
# Start container
|
|
pct start $vmid
|
|
sleep 5
|
|
echo 'Container recreated'
|
|
" && log_success "CT $vmid recreated as privileged" || log_error "Failed to recreate CT $vmid"
|
|
}
|
|
|
|
# Install PostgreSQL (will work with privileged containers)
|
|
install_postgresql() {
|
|
local vmid="$1"
|
|
log_info "Installing PostgreSQL on CT $vmid..."
|
|
|
|
ssh -o ConnectTimeout=15 -o StrictHostKeyChecking=no root@${NODE_IP} "pct enter $vmid <<'INSTALL_EOF'
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
apt-get update -qq
|
|
apt-get install -y -qq postgresql-15 postgresql-contrib-15 || exit 1
|
|
|
|
sed -i \"s/#listen_addresses = .*/listen_addresses = '*'/\" /etc/postgresql/15/main/postgresql.conf 2>/dev/null || true
|
|
echo \"host all all 0.0.0.0/0 md5\" >> /etc/postgresql/15/main/pg_hba.conf 2>/dev/null || true
|
|
|
|
systemctl enable postgresql@15-main
|
|
systemctl start postgresql@15-main
|
|
sleep 3
|
|
systemctl is-active postgresql@15-main && echo 'PostgreSQL installed' || exit 1
|
|
INSTALL_EOF
|
|
" && log_success "PostgreSQL installed on CT $vmid" || log_error "Failed to install PostgreSQL on CT $vmid"
|
|
}
|
|
|
|
# Install Redis
|
|
install_redis() {
|
|
local vmid="$1"
|
|
log_info "Installing Redis on CT $vmid..."
|
|
|
|
ssh -o ConnectTimeout=15 -o StrictHostKeyChecking=no root@${NODE_IP} "pct enter $vmid <<'INSTALL_EOF'
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
apt-get update -qq
|
|
apt-get install -y -qq redis-server || exit 1
|
|
|
|
sed -i \"s/^bind .*/bind 0.0.0.0/\" /etc/redis/redis.conf 2>/dev/null || true
|
|
systemctl enable redis-server
|
|
systemctl restart redis-server
|
|
sleep 2
|
|
systemctl is-active redis-server && echo 'Redis installed' || exit 1
|
|
INSTALL_EOF
|
|
" && log_success "Redis installed on CT $vmid" || log_error "Failed to install Redis on CT $vmid"
|
|
}
|
|
|
|
# Install Node.js
|
|
install_nodejs() {
|
|
local vmid="$1"
|
|
log_info "Installing Node.js on CT $vmid..."
|
|
|
|
ssh -o ConnectTimeout=15 -o StrictHostKeyChecking=no root@${NODE_IP} "pct enter $vmid <<'INSTALL_EOF'
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
apt-get update -qq
|
|
apt-get install -y -qq curl ca-certificates gnupg || exit 1
|
|
|
|
curl -fsSL https://deb.nodesource.com/setup_18.x | bash - || exit 1
|
|
apt-get install -y -qq nodejs || exit 1
|
|
npm install -g pm2 || exit 1
|
|
|
|
node --version && npm --version && echo 'Node.js installed' || exit 1
|
|
INSTALL_EOF
|
|
" && log_success "Node.js installed on CT $vmid" || log_error "Failed to install Node.js on CT $vmid"
|
|
}
|
|
|
|
echo "═══════════════════════════════════════════════════════════"
|
|
echo "Recreate Containers as Privileged and Complete All Tasks"
|
|
echo "═══════════════════════════════════════════════════════════"
|
|
echo ""
|
|
log_warn "WARNING: This script will DESTROY and RECREATE containers!"
|
|
log_warn "All data in containers will be lost unless backed up separately!"
|
|
echo ""
|
|
read -p "Type 'YES' to continue: " confirm
|
|
if [ "$confirm" != "YES" ]; then
|
|
log_error "Aborted by user"
|
|
exit 1
|
|
fi
|
|
|
|
# Container definitions (VMID, Hostname, IP, Memory, Cores, Disk)
|
|
declare -A CONTAINERS=(
|
|
["10000"]="order-postgres-primary:${ORDER_POSTGRES_PRIMARY:-${ORDER_POSTGRES_PRIMARY:-192.168.11.44}}:4096:4:50"
|
|
["10001"]="order-postgres-replica:${ORDER_POSTGRES_REPLICA:-${ORDER_POSTGRES_REPLICA:-192.168.11.45}}:4096:4:50"
|
|
["10020"]="order-redis:${ORDER_REDIS_IP:-192.168.11.38}:2048:2:20"
|
|
["10030"]="order-identity:${IP_SERVICE_40:-${IP_SERVICE_40:-${IP_SERVICE_40:-192.168.11.40}}}:2048:2:20"
|
|
["10040"]="order-intake:${IP_SERVICE_41:-${IP_SERVICE_41:-${IP_SERVICE_41:-192.168.11.41}}}:2048:2:20"
|
|
["10050"]="order-finance:${IP_SERVICE_49:-${IP_SERVICE_49:-${IP_SERVICE_49:-192.168.11.49}}}:2048:2:20"
|
|
["10060"]="order-dataroom:${IP_SERVICE_42:-${IP_SERVICE_42:-${IP_SERVICE_42:-192.168.11.42}}}:2048:2:20"
|
|
["10070"]="order-legal:${IP_SERVICE_50:-${IP_SERVICE_50:-${IP_SERVICE_50:-${IP_SERVICE_50:-${IP_SERVICE_50:-${IP_SERVICE_50:-192.168.11.50}}}}}}:2048:2:20"
|
|
["10080"]="order-eresidency:${IP_SERVICE_43:-${IP_SERVICE_43:-${IP_SERVICE_43:-192.168.11.43}}}:2048:2:20"
|
|
["10090"]="order-portal-public:${IP_SERVICE_36:-${IP_SERVICE_36:-${IP_SERVICE_36:-${IP_SERVICE_36:-${IP_SERVICE_36:-${IP_SERVICE_36:-192.168.11.36}}}}}}:2048:2:20"
|
|
["10091"]="order-portal-internal:${IP_SERVICE_35:-${IP_SERVICE_35:-${IP_SERVICE_35:-${IP_SERVICE_35:-${IP_SERVICE_35:-${IP_SERVICE_35:-192.168.11.35}}}}}}:2048:2:20"
|
|
["10092"]="order-mcp-legal:${IP_MIM_WEB:-192.168.11.37}:2048:2:20"
|
|
["10100"]="dbis-postgres-primary:${PROXMOX_HOST_ML110}5:4096:4:50"
|
|
["10101"]="dbis-postgres-replica-1:${PROXMOX_HOST_ML110}6:4096:4:50"
|
|
["10120"]="dbis-redis:${PROXMOX_HOST_R630_02}0:2048:2:20"
|
|
["10130"]="dbis-frontend:${IP_DBIS_FRONTEND:-${IP_SERVICE_13:-${IP_SERVICE_13:-${IP_SERVICE_13:-${IP_SERVICE_13:-${IP_SERVICE_13:-192.168.11.13}}}}}0}:2048:2:20"
|
|
["10150"]="dbis-api-primary:${IP_DBIS_API:-${IP_DBIS_API:-192.168.11.155}}:4096:4:30"
|
|
["10151"]="dbis-api-secondary:${IP_DBIS_API_2:-${IP_DBIS_API_2:-192.168.11.156}}:4096:4:30"
|
|
)
|
|
|
|
# Step 1: Backup configurations
|
|
log_info "Step 1: Backing up container configurations..."
|
|
for vmid in "${!CONTAINERS[@]}"; do
|
|
backup_container_config "$vmid"
|
|
done
|
|
|
|
# Step 2: Recreate containers (commented out for safety - uncomment when ready)
|
|
log_warn "Step 2: Container recreation is COMMENTED OUT for safety"
|
|
log_warn "Uncomment the recreation section in the script when ready to proceed"
|
|
# for vmid in "${!CONTAINERS[@]}"; do
|
|
# IFS=':' read -r hostname ip memory cores disk <<< "${CONTAINERS[$vmid]}"
|
|
# recreate_container_privileged "$vmid" "$hostname" "$ip" "$memory" "$cores" "$disk"
|
|
# sleep 2
|
|
# done
|
|
|
|
# Step 3: Install services (will work after recreation)
|
|
log_info "Step 3: Service installation will proceed after container recreation"
|
|
log_info "Use scripts/complete-all-tasks-parallel-comprehensive.sh after recreation"
|
|
|
|
echo ""
|
|
log_info "Backup complete. Container recreation script ready."
|
|
log_warn "Uncomment recreation section and run again when ready to proceed."
|