dank/serverAppConfigs
1
0 Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity

deployer: route plex and tautulli as dankserver quadlet services

Browse Source 
- deploy_plex(): install unit, stop+mask native plexmediaserver.service on
  first cutover (mask, never disable), gate on /identity for 180s
- deploy_tautulli(): install unit, stop+disable snap on first cutover,
  seed config.ini with PMS_Web_Host=plex only if absent
- allow-lists (deploy.sh valid_service, deploy-remote.sh service_is_allowed),
  planner routing (SERVICE_ORDER, DANKSERVER_SERVICES, quadlet_services),
  test-changed cutover case, quadlet seam enumeration + new
  userns/PUID=997/PGID=984 ownership-contract test
This commit is contained in:
Frank committed 2026-09-01 22:31:14 -07:00
1 parent 28f8dc2c0d
commit 93f16f68be
5 files changed
+71 -11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

tests/dankserver_quadlet.bats
+21 -6
View File
@@ -1,20 +1,20 @@
#!/usr/bin/env bats
# Seam: the six cutover-era dankserver quadlet units (romm trio, jellyfin,
# calibre-web, copyparty) must keep their boot-persistence and v1-generator
# Seam: the eight cutover-era dankserver quadlet units (romm trio, jellyfin,
# calibre-web, copyparty, plex, tautulli) must keep their boot-persistence and v1-generator
# contracts. The podman 5.x v1 Quadlet generator silently drops or hard-fails
# on several keys; these tests pin the contract that keeps the units loadable
# and secret-free in the repo.
load helpers
@test "all six cutover units exist under dankserver/<svc>/quadlet/" {
for unit in romm/quadlet/romm romm/quadlet/romm-mariadb romm/quadlet/romm-redis jellyfin/quadlet/jellyfin calibre-web/quadlet/calibre-web copyparty/quadlet/copyparty; do
@test "all eight cutover units exist under dankserver/<svc>/quadlet/" {
for unit in romm/quadlet/romm romm/quadlet/romm-mariadb romm/quadlet/romm-redis jellyfin/quadlet/jellyfin calibre-web/quadlet/calibre-web copyparty/quadlet/copyparty plex/quadlet/plex tautulli/quadlet/tautulli; do
[ -f "$REPO_ROOT/dankserver/$unit.container" ] || return 1
done
}
@test "every cutover unit is boot-persistent (WantedBy=default.target)" {
for unit in romm/quadlet/romm romm/quadlet/romm-mariadb romm/quadlet/romm-redis jellyfin/quadlet/jellyfin calibre-web/quadlet/calibre-web copyparty/quadlet/copyparty; do
for unit in romm/quadlet/romm romm/quadlet/romm-mariadb romm/quadlet/romm-redis jellyfin/quadlet/jellyfin calibre-web/quadlet/calibre-web copyparty/quadlet/copyparty plex/quadlet/plex tautulli/quadlet/tautulli; do
grep -q '^WantedBy=default.target$' "$REPO_ROOT/dankserver/$unit.container" || return 1
done
}
@@ -51,7 +51,8 @@ load helpers
# above. Keep this list current with every generator finding.
for unit in dankserver/romm/quadlet/romm dankserver/romm/quadlet/romm-mariadb \
dankserver/romm/quadlet/romm-redis dankserver/jellyfin/quadlet/jellyfin \
dankserver/calibre-web/quadlet/calibre-web dankserver/copyparty/quadlet/copyparty; do
dankserver/calibre-web/quadlet/calibre-web dankserver/copyparty/quadlet/copyparty \
dankserver/plex/quadlet/plex dankserver/tautulli/quadlet/tautulli; do
! grep -q '^Device=' "$REPO_ROOT/$unit.container" || return 1
done
grep -q '^AddDevice=/dev/dri$' "$REPO_ROOT/dankserver/jellyfin/quadlet/jellyfin.container" || return 1
@@ -62,4 +63,18 @@ load helpers
grep -q '^PublishPort=8096:8096$' "$REPO_ROOT/dankserver/jellyfin/quadlet/jellyfin.container" || return 1
grep -q '^PublishPort=8083:8083$' "$REPO_ROOT/dankserver/calibre-web/quadlet/calibre-web.container" || return 1
grep -q '^PublishPort=3923:3923$' "$REPO_ROOT/dankserver/copyparty/quadlet/copyparty.container" || return 1
grep -q '^PublishPort=32400:32400$' "$REPO_ROOT/dankserver/plex/quadlet/plex.container" || return 1
grep -q '^PublishPort=8181:8181$' "$REPO_ROOT/dankserver/tautulli/quadlet/tautulli.container" || return 1
}
@test "plex keeps the native unit's identity (userns=host, PUID=997, PGID=984)" {
# Zero-chown ownership contract: /var/lib/plexmediaserver is bind-mounted
# in place, so every file the container writes must land owned 997:984 —
# byte-identical to the former plexmediaserver.service identity. If the
# v1 generator ever drops UsernsMode=, files appear as the rootless
# subuid and the migration invariant is broken; pin both keys.
unit="$REPO_ROOT/dankserver/plex/quadlet/plex.container"
grep -q '^UsernsMode=host$' "$unit" || return 1
grep -q '^Environment=PUID=997$' "$unit" || return 1
grep -q '^Environment=PGID=984$' "$unit" || return 1
}