archy/image-recipe/scripts/check-dependencies.sh

90 lines
2.5 KiB
Bash
Raw Normal View History

release(v1.7.41-alpha): post-OTA auto-rollback so a bad release cannot strand the fleet Closes failure mode FM5 from docs/bulletproof-containers.md: the v1.7.38 + v1.7.39 rollouts left every affected node on an unreachable UI (nginx 500) with no recovery path short of SSH. This release adds a self-check guardrail to the update flow. What changed: - apply_update() writes a pending-verify marker with old+new version and a 150s deadline immediately before scheduling the service restart. - verify_pending_update() runs from main.rs startup. If the marker is present and within its freshness window, the new binary waits 15s for nginx + backend to settle, then probes https://127.0.0.1/ every 5s for up to 90s (self-signed certs accepted). - On any probe success within the window, the marker is cleared and nothing else happens. - On window-exhaust, the new binary: 1. Moves the broken /opt/archipelago/web-ui to web-ui.failed.<ts> (quarantined, not deleted, so we can post-mortem). 2. Restores web-ui.bak on top of web-ui. 3. Calls rollback_update() to restore the previous binary. 4. Updates state.current_version to reflect the rollback. 5. systemctl --no-block restart archipelago so the OLD binary boots. - Markers older than 10 minutes are treated as stale and cleared without probing, so a crashed-during-startup marker from weeks ago cannot spontaneously roll back a healthy node on a later reboot. - rollback_update() binary copy now goes through host_sudo instead of tokio::fs::copy, so it escapes the service's ProtectSystem=strict mount namespace. Without this, the rollback silently failed with EROFS on /usr/local/bin and orphaned the rollback - the exact opposite of what auto-rollback is for. Tests: 4 new unit tests in update::tests covering marker round-trip, absent-marker noop, no-panic on verify_pending_update with nothing to verify, and an invariant assert that the 90s probe window stays below the 600s stale threshold. All passing. Side fix: scripts/create-release-manifest.sh was dying with exit 141 (SIGPIPE from tar tvzf pipe head pipe awk) under set -euo pipefail. Replaced with a single awk NR==1 that doesn't short-circuit the upstream pipe, so the release-build flow is idempotent again.
2026-04-22 16:14:35 -04:00
#!/bin/bash
# Check build dependencies and provide installation instructions
set -e
echo "🔍 Checking build dependencies..."
echo ""
MISSING_DEPS=0
# Check Rust
if command -v rustc >/dev/null 2>&1; then
echo "✅ Rust: $(rustc --version)"
else
echo "❌ Rust: Not found"
echo " Install: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh"
MISSING_DEPS=$((MISSING_DEPS + 1))
fi
# Check Node.js
if command -v node >/dev/null 2>&1; then
NODE_VERSION=$(node --version)
NODE_MAJOR=$(echo "$NODE_VERSION" | cut -d. -f1 | tr -d 'v')
if [ "$NODE_MAJOR" -ge 18 ]; then
echo "✅ Node.js: $NODE_VERSION"
else
echo "⚠️ Node.js: $NODE_VERSION (need 18+)"
MISSING_DEPS=$((MISSING_DEPS + 1))
fi
else
echo "❌ Node.js: Not found"
echo " Install: https://nodejs.org/"
MISSING_DEPS=$((MISSING_DEPS + 1))
fi
# Check Docker
if command -v docker >/dev/null 2>&1; then
if docker info >/dev/null 2>&1; then
echo "✅ Docker: $(docker --version)"
else
echo "⚠️ Docker: Installed but daemon not running"
echo " Start Docker Desktop or: sudo systemctl start docker"
fi
else
echo "❌ Docker: Not found"
if [[ "$OSTYPE" == "darwin"* ]]; then
echo " Install: https://www.docker.com/products/docker-desktop"
MISSING_DEPS=$((MISSING_DEPS + 1))
else
echo " Install: https://docs.docker.com/get-docker/"
echo " (Optional on Linux if building natively)"
fi
fi
# Check xorriso (for ISO creation)
if command -v xorriso >/dev/null 2>&1; then
echo "✅ xorriso: Installed"
else
echo "❌ xorriso: Not found (needed for ISO creation)"
if [[ "$OSTYPE" == "darwin"* ]]; then
echo " Install: brew install xorriso"
else
echo " Install: apt-get install xorriso"
fi
MISSING_DEPS=$((MISSING_DEPS + 1))
fi
# Check 7z (for ISO extraction)
if command -v 7z >/dev/null 2>&1; then
echo "✅ 7z: Installed"
else
echo "❌ 7z: Not found (needed for ISO extraction)"
if [[ "$OSTYPE" == "darwin"* ]]; then
echo " Install: brew install p7zip"
else
echo " Install: apt-get install p7zip-full"
fi
MISSING_DEPS=$((MISSING_DEPS + 1))
fi
echo ""
if [ $MISSING_DEPS -eq 0 ]; then
echo "✅ All dependencies satisfied!"
exit 0
else
echo "❌ Missing $MISSING_DEPS dependency/dependencies"
echo " Please install missing dependencies before building"
exit 1
fi