yukkop
6035397e9b
- Replace central sentinel with watcher: each node polls peers discovered via a single DNS name with multiple A records (e.g. peers.sentinella.com) - Auto-detect own IPs via hostname -I; SELF env var available as optional override for NAT/floating-IP setups - Fix Basic Auth bug in router.sh: compare tok against AUTH_TOKENS instead of unset $USER/$PASS - Rename sentinel binary to watcher; drop unused shellplot dep - Add inetutils to watcher runtime deps for hostname -I - Update NixOS module: replace sentinel options with watcher p2p options (peersDns, self, peersPort, peersScheme, pollingIntervalSec) - Add sentinèlla test suite: probe-status-empty, probe-disk, watcher-state-file
140 lines
4.0 KiB
Bash
140 lines
4.0 KiB
Bash
#!/bin/dash
|
|
|
|
# router.sh — POSIX sh HTTP backend (for socat)
|
|
# usage: socat -T5 -t5 TCP-LISTEN:${port},reuseaddr,fork EXEC:"dash ${currentfile}"
|
|
# Routes:
|
|
# GET / -> {"status":...,"disk":...}
|
|
# GET /status -> check $URLS (0/0 if unset)
|
|
# GET /disk -> check $VOLUMES (all if unset)
|
|
# Env:
|
|
# URLS="http://..." # default: none
|
|
# VOLUMES="/ /home" # default: all from df -P
|
|
# TIMEOUT=5
|
|
# AUTH_FILE="/path/htpasswd-like" # lines: user:pass
|
|
|
|
# output example
|
|
# {
|
|
# "checks": [],
|
|
# "summary": {
|
|
# "total": 0,
|
|
# "ok": 0
|
|
# }
|
|
# "disk": {
|
|
# "volumes": [
|
|
# {
|
|
# "mount": "/dev",
|
|
# "size_blocks": 195760,
|
|
# "used": 0,
|
|
# "avail": 195760,
|
|
# "use_percent": "0%"
|
|
# }
|
|
# ]
|
|
# }
|
|
# }
|
|
|
|
: "${TIMEOUT:=5}"
|
|
: "${VOLUMES:=$(df -P | awk 'NR>1{print $6}')}"
|
|
|
|
route_summary() {
|
|
printf '%s' '{"status":'"$(route_status)"',"disk":'"$(route_disk)"'}'
|
|
}
|
|
|
|
route_status() {
|
|
if [ -z "${URLS:-}" ]; then
|
|
printf '{"checks":[],"summary":{"total":0,"ok":0}}'
|
|
return
|
|
fi
|
|
{
|
|
printf '{"checks":['
|
|
first=1 okcnt=0 tot=0
|
|
for u in $URLS; do
|
|
tot=$((tot+1))
|
|
res=$(curl -sS -m "$TIMEOUT" -o /dev/null -w '%{http_code} %{time_total}' "$u" 2>/dev/null) || res="000 0"
|
|
code=${res%% *}; ttot=${res#* }
|
|
log info "$u -> $code"
|
|
case $code in 2*|3*) ok=true; okcnt=$((okcnt+1));; *) ok=false;; esac
|
|
[ $first -eq 0 ] && printf ','; first=0
|
|
printf '{"url":"%s","code":%s,"time_s":%s,"ok":%s}' "$u" "$code" "$ttot" "$ok"
|
|
done
|
|
printf '],"summary":{"total":%s,"ok":%s}}' "$tot" "$okcnt"
|
|
}
|
|
}
|
|
|
|
route_disk() {
|
|
{
|
|
printf '{"volumes":['
|
|
first=1
|
|
for v in $VOLUMES; do
|
|
# POSIX df -P: Filesystem 1K-blocks Used Available Capacity Mounted on
|
|
# shellcheck disable=SC2046
|
|
set -- $(df -P "$v" 2>/dev/null | awk 'NR==2{print $2, $3, $4, $5, $6}')
|
|
size=$1 used=$2 avail=$3 usep=$4 mnt=$5
|
|
[ -z "$size" ] && continue
|
|
[ $first -eq 0 ] && printf ','; first=0
|
|
printf '{"mount":"%s","size_blocks":%s,"used":%s,"avail":%s,"use_percent":"%s"}' \
|
|
"$mnt" "$size" "$used" "$avail" "$usep"
|
|
done
|
|
printf ']}'
|
|
}
|
|
}
|
|
|
|
AUTH_TOKENS=""
|
|
if [ -n "${AUTH_FILE:-}" ] && [ -r "$AUTH_FILE" ]; then
|
|
while IFS= read -r up || [ -n "$up" ]; do
|
|
[ -n "$up" ] || continue
|
|
AUTH_TOKENS="$AUTH_TOKENS $(base64 encode "$up" | tail -n1)"
|
|
done <"$AUTH_FILE"
|
|
fi
|
|
|
|
require_auth=false
|
|
[ -n "$AUTH_TOKENS" ] && require_auth=true
|
|
|
|
# --- read request & headers ---
|
|
IFS= read -r req || exit 0
|
|
cr=$(printf '\r')
|
|
tok=""
|
|
auth_ok=false
|
|
while IFS= read -r line; do
|
|
[ -z "$line" ] && break
|
|
[ "$line" = "$cr" ] && break
|
|
case "$line" in
|
|
"Authorization: Basic "*)
|
|
tok=${line#Authorization: Basic }
|
|
tok=$(printf '%s' "$tok" | tr -d '\r\n')
|
|
;;
|
|
esac
|
|
done
|
|
|
|
# --- auth gate ---
|
|
unauth() {
|
|
body='{"error":"unauthorized"}'
|
|
len=$(printf '%s' "$body" | wc -c | awk '{print $1}')
|
|
printf 'HTTP/1.1 401 Unauthorized\r\n'
|
|
printf 'Content-Type: application/json\r\n'
|
|
printf 'Content-Length: %s\r\n' "$len"
|
|
printf 'WWW-Authenticate: Basic realm="minimal", charset="UTF-8"\r\n'
|
|
printf 'Connection: close\r\n\r\n'
|
|
printf '%s' "$body"
|
|
}
|
|
|
|
if $require_auth; then
|
|
for t in $AUTH_TOKENS; do
|
|
[ "$tok" = "$t" ] && auth_ok=true && break
|
|
done
|
|
$auth_ok || { unauth; exit 0; }
|
|
fi
|
|
|
|
tmp=$(mktemp) || exit 1
|
|
trap 'rm -f "$tmp"' EXIT INT HUP
|
|
|
|
case "$req" in
|
|
"GET / "*) route_summary >"$tmp"; status='200 OK'; ctype='application/json' ;;
|
|
"GET /status "*) route_status >"$tmp"; status='200 OK'; ctype='application/json' ;;
|
|
"GET /disk "*) route_disk >"$tmp"; status='200 OK'; ctype='application/json' ;;
|
|
*) printf 'Not found\n' >"$tmp"; status='404 Not Found'; ctype='text/plain' ;;
|
|
esac
|
|
|
|
len=$(wc -c <"$tmp" | awk '{print $1}')
|
|
printf 'HTTP/1.1 %s\r\nContent-Type: %s\r\nContent-Length: %s\r\nConnection: close\r\n\r\n' "$status" "$ctype" "$len"
|
|
cat "$tmp"
|