Add reproducible build system, native Unraid plugin, and WebUI
- versions.env pins podman, conmon, crun, netavark, aardvark-dns, passt, and fuse-overlayfs to verified upstream source checksums; SlackBuild recipes, scripts/build-packages.sh, checksums.sh, release.sh, and update-versions.sh implement the reproducible pipeline; GitHub Actions workflows build in a Slackware container and publish releases without committing any binaries. - plugin/podman.plg installs/updates/removes all eight packages (the seven components plus the plugin's own unraid-podman scaffolding package) via upgradepkg, using the official Unraid array-event hook mechanism (event/disks_mounted, event/stopping) instead of editing /boot/config/go. rc.podman and the sbin/ helper scripts implement storage creation, config seeding/sync, preflight checks, autostart with per-container Safe-Mode, and package verify/update/rollback. - webui/plugins/podman implements the Dashboard, Containers, Pods, Images, Volumes, Networks, Logs, Terminal, Compose, and Settings panels against the approved mockup (webui/mockups/prototype.html), talking to podman system service exclusively via PodmanClient.php (libpod REST API over the Unix socket), with two documented exceptions: Terminal's one-shot exec model and Compose's use of the podman compose CLI, since libpod has no REST equivalent for either. - docs/ARCHITECTURE.md and docs/ROADMAP.md record the design decisions and honest current status (syntax-checked, unit- and integration-tested against fake sockets/servers; not yet run against a real Unraid/Podman/Slackware system). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Claude Sonnet 5
Executable
+134
@@ -0,0 +1,134 @@
|
||||
#!/bin/bash
|
||||
# =============================================================================
|
||||
# plugin/sbin/podman-update-packages.sh
|
||||
#
|
||||
# "Pakete aktualisieren" — reconciles installed packages with what the
|
||||
# currently installed plugin version expects, per
|
||||
# /usr/local/share/unraid-podman/installed-versions.env (written by
|
||||
# plugin/podman.plg's postinstall — see podman-verify-packages.sh for the
|
||||
# same manifest used the other direction, to *check* rather than *fix*).
|
||||
#
|
||||
# This is intentionally idempotent and safe to run any time, not just
|
||||
# during a plugin update: if every package already matches, it's a no-op.
|
||||
# It exists as a separate script (rather than being inline in podman.plg)
|
||||
# for two reasons:
|
||||
# 1. plugin/podman.plg's own <FILE Run="upgradepkg"> blocks handle the
|
||||
# *normal* update path (new .txz already downloaded by the plg,
|
||||
# installed as part of the same transaction) — this script is the
|
||||
# *repair* path for when that didn't fully complete (e.g. Unraid was
|
||||
# rebooted mid-update), and can be re-run safely from the command line
|
||||
# or from a future WebUI "check for package issues" action.
|
||||
# 2. It calls podman-backup.sh snapshot-config first, since any package
|
||||
# swap is exactly the moment a config schema migration might be
|
||||
# needed — see docs/ARCHITECTURE.md section 13.1.
|
||||
#
|
||||
# Usage:
|
||||
# podman-update-packages.sh # reconcile all 7 packages
|
||||
# podman-update-packages.sh podman # reconcile a single package
|
||||
# =============================================================================
|
||||
|
||||
set -u
|
||||
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||
# shellcheck source=./podman-common.sh
|
||||
. "$SCRIPT_DIR/podman-common.sh"
|
||||
|
||||
INSTALLED_VERSIONS_FILE="/usr/local/share/unraid-podman/installed-versions.env"
|
||||
ALL_PACKAGES="podman conmon crun netavark aardvark-dns passt fuse-overlayfs unraid-podman"
|
||||
|
||||
if [ ! -f "$INSTALLED_VERSIONS_FILE" ]; then
|
||||
podman_log_error "update-packages: $INSTALLED_VERSIONS_FILE missing — plugin install metadata not found"
|
||||
exit 1
|
||||
fi
|
||||
# shellcheck source=/dev/null
|
||||
. "$INSTALLED_VERSIONS_FILE"
|
||||
|
||||
if [ -z "${PLUGIN_VERSION:-}" ]; then
|
||||
podman_log_error "update-packages: PLUGIN_VERSION not recorded in $INSTALLED_VERSIONS_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
targets="${*:-$ALL_PACKAGES}"
|
||||
|
||||
podman_require_command upgradepkg
|
||||
podman_require_command installpkg
|
||||
|
||||
updated=0
|
||||
already_current=0
|
||||
errors=0
|
||||
|
||||
for name in $targets; do
|
||||
entity_prefix=$(echo "$name" | tr '[:lower:]-' '[:upper:]_')
|
||||
expected_version_var="${entity_prefix}_INSTALLED_VERSION"
|
||||
expected_version="${!expected_version_var:-}"
|
||||
|
||||
if [ -z "$expected_version" ]; then
|
||||
podman_log_error "update-packages: no expected version recorded for '$name', skipping"
|
||||
errors=$((errors + 1))
|
||||
continue
|
||||
fi
|
||||
|
||||
installed_record=$(find /var/log/packages -maxdepth 1 -name "${name}-*" -print 2> /dev/null | head -n1)
|
||||
installed_basename=$(basename "${installed_record:-__none__}")
|
||||
|
||||
case "$installed_basename" in
|
||||
"${name}-${expected_version}-"*)
|
||||
podman_log "update-packages: $name already at expected version $expected_version"
|
||||
already_current=$((already_current + 1))
|
||||
continue
|
||||
;;
|
||||
esac
|
||||
|
||||
# The package for the currently expected version was downloaded straight
|
||||
# into its backup slot by podman.plg (grouped by PLUGIN_VERSION, since a
|
||||
# rollback targets "this plugin release" — see podman-backup.sh's header
|
||||
# comment for why that's also where we install FROM.
|
||||
txz=$(find "$PODMAN_BACKUP_DIR/packages/$PLUGIN_VERSION" -maxdepth 1 -name "${name}-*.txz" 2> /dev/null | head -n1)
|
||||
if [ -z "$txz" ]; then
|
||||
podman_log_error "update-packages: no package file found for $name (expected version $expected_version) in $PODMAN_BACKUP_DIR/packages/$PLUGIN_VERSION/"
|
||||
errors=$((errors + 1))
|
||||
continue
|
||||
fi
|
||||
|
||||
podman_log "update-packages: installing $name -> $expected_version ($txz)"
|
||||
|
||||
# Snapshot config once, before the first actual package change — a
|
||||
# version bump is exactly when a schema migration might be needed (see
|
||||
# file header). Only do this once per run, not once per package.
|
||||
if [ "$updated" -eq 0 ]; then
|
||||
"$SCRIPT_DIR/podman-backup.sh" snapshot-config > /dev/null
|
||||
fi
|
||||
|
||||
if [ -n "$installed_record" ]; then
|
||||
if upgradepkg --install-new "$txz"; then
|
||||
updated=$((updated + 1))
|
||||
else
|
||||
podman_log_error "update-packages: upgradepkg failed for $name ($txz)"
|
||||
errors=$((errors + 1))
|
||||
fi
|
||||
else
|
||||
if installpkg "$txz"; then
|
||||
updated=$((updated + 1))
|
||||
else
|
||||
podman_log_error "update-packages: installpkg failed for $name ($txz)"
|
||||
errors=$((errors + 1))
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
podman_log "update-packages: done (updated=$updated already-current=$already_current errors=$errors)"
|
||||
|
||||
if [ "$errors" -gt 0 ]; then
|
||||
podman_notify "Podman package update had errors" \
|
||||
"$errors package(s) failed to update — see $PODMAN_PLUGIN_LOG." \
|
||||
"alert"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ "$updated" -gt 0 ]; then
|
||||
podman_notify "Podman packages updated" \
|
||||
"$updated package(s) updated. Run 'rc.podman restart' to apply." \
|
||||
"normal"
|
||||
fi
|
||||
|
||||
exit 0
|
||||
Reference in New Issue
Block a user