dank
e82c8b2d06
Dankserver rebooted with the array's mount and the media containers racing. A rootless quadlet cannot order itself against the system's mnt-entropy.mount, so `RequiresMountsFor=/mnt/entropy` is inert in the user manager: podman resolved the bind against the pre-mount directory, Jellyfin and Plex came up blind, and Jellyfin read an empty library and began `Removing item, Type: "Season"` by the thousand. Copyparty had no guard at all. `scripts/wait-for-mount.sh` is the gate: it waits for every named mountpoint, then refuses by name. `ConditionPathIsMountPoint=` is NOT the fix — measured on the host, an unmet condition logs `skipped, unmet condition check` with NRestarts=0 and no start attempt ever follows, which is fail-dead, not fail-closed. Jellyfin and Plex swap the condition for the gate; Copyparty gets one; the law is recorded in AGENTS.md and the view page. Verified on the host: the 5.7.0 quadlet generator accepts ExecStartPre in [Service] (exit 0, all three units generated, gate present), the gate waits for a mount that appears mid-window and proceeds, and it refuses a plain directory after its window naming the path. tests/media_overlay.bats pinned the old mechanism by name; its intent — both media servers refuse to start without the view — now rides the gate.
66 lines
2.7 KiB
INI
66 lines
2.7 KiB
INI
# Quadlet unit: Jellyfin media server (rootless, boot-persistent).
|
|
#
|
|
# Install path on dankserver: ~/.config/containers/systemd/jellyfin.container
|
|
# Unit name: jellyfin.service (podman 5.x drops the container- prefix)
|
|
#
|
|
# Data roots migrated from /opt/jellyfin to /home/dank/Containers/jellyfin at
|
|
# cutover. The library is seen through /var/lib/media-meta/view, the SSD-backed
|
|
# overlay view (scripts/media-view.sh): the array stays read-only and untouched,
|
|
# while the sidecars this server writes land on the NVMe. Every
|
|
# creation-time environment variable of the compose-era container is kept as
|
|
# an Environment= line (zero drift); none of them are secrets, so this unit
|
|
# needs no EnvironmentFile.
|
|
|
|
[Unit]
|
|
Description=Jellyfin media server container
|
|
After=network.target
|
|
|
|
[Container]
|
|
ContainerName=jellyfin
|
|
Image=ghcr.io/jellyfin/jellyfin:latest@sha256:fea863d0cd9ec445985d9c75fc6ed64e38a1d2766cf0c250a33d553f4fc1b771
|
|
Network=dankserver_appnet
|
|
Environment=DEBIAN_FRONTEND=noninteractive
|
|
Environment=DOTNET_SYSTEM_IO_DISABLEFILELOCKING=true
|
|
Environment=JELLYFIN_CACHE_DIR=/cache
|
|
Environment=JELLYFIN_CONFIG_DIR=/config/config
|
|
Environment=JELLYFIN_DATA_DIR=/config
|
|
Environment=JELLYFIN_FFMPEG=/usr/lib/jellyfin-ffmpeg/ffmpeg
|
|
Environment=JELLYFIN_LOG_DIR=/config/log
|
|
Environment=JELLYFIN_PublishedServerUrl=http://192.168.0.235:8096
|
|
Environment=JELLYFIN_WEB_DIR=/jellyfin/jellyfin-web
|
|
Environment=LANG=en_US.UTF-8
|
|
Environment=LANGUAGE=en_US:en
|
|
Environment=LC_ALL=en_US.UTF-8
|
|
Environment=LD_PRELOAD=/usr/lib/jellyfin/libjemalloc.so.2
|
|
Environment=MALLOC_TRIM_THRESHOLD_=131072
|
|
Environment=NVIDIA_DRIVER_CAPABILITIES=compute,video,utility
|
|
Environment=NVIDIA_VISIBLE_DEVICES=all
|
|
Environment=XDG_CACHE_HOME=/cache
|
|
PublishPort=8096:8096
|
|
PublishPort=8920:8920
|
|
PublishPort=7359:7359/udp
|
|
PublishPort=1900:1900/udp
|
|
Volume=/home/dank/Containers/jellyfin/config:/config
|
|
Volume=/home/dank/Containers/jellyfin/cache:/cache
|
|
# The view, writable: Jellyfin is the metadata writer (movie.nfo / tvshow.nfo /
|
|
# episode.nfo + artwork) and those bytes belong on the SSD. The gate in [Service]
|
|
# is the guard: started against a plain, unmounted view directory a scan decides
|
|
# the library is empty and deletes what it cannot see.
|
|
Volume=/var/lib/media-meta/view:/data
|
|
AddDevice=/dev/dri
|
|
GroupAdd=keep-groups
|
|
HealthCmd=curl -f http://localhost:8096/health
|
|
HealthInterval=30s
|
|
HealthTimeout=10s
|
|
HealthRetries=3
|
|
|
|
[Service]
|
|
# Refuse to start until the bind source is a real mount — see the header of
|
|
# scripts/wait-for-mount.sh for the blind-boot incident this prevents.
|
|
ExecStartPre=/home/dank/serverAppConfigs/scripts/wait-for-mount.sh /var/lib/media-meta/view /mnt/entropy
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=default.target
|