Frank
b206f477ad
Cutover of the six surviving dankserver services from compose-era bare
containers to boot-persistent Quadlet units (WantedBy=default.target; podman
5.x v1 generator honors it at user-manager start).
Units are faithful to live inspect ground truth (image pins = running tags,
not compose inventory):
- romm trio shares one data root: /home/dank/Containers/romm mounted whole at
/romm; mariadb datadir and redis data dir live inside it. Aliases mariadb/
redis preserved on dankserver_appnet via Network=...:alias=. Secrets stay in
the host-local env file (EnvironmentFile + ${VAR} expansion in the generated
ExecStart, gitea precedent). copyparty passes its admin account via
Exec=-a ${COPAY_ACCOUNT}:${COPAY_PASSWORD} (Exec= not Command=: the v1
generator hard-fails on Command=); entropy stays rw only there.
- jellyfin keeps every creation-time env as Environment= lines (zero drift);
Device=/dev/dri + GroupAdd=keep-groups preserve hardware transcoding.
- calibre-web pins the exact running image tag (id 986277563e76 =
0.6.27-ls397), pasta network preserved.
Deployer: first-cutover handlers retire the old container, rescue unshadowed
anonymous-volume content (podman volume export + tar --skip-old-files), mv
data roots on the same fs, then start units in dependency order with health
gates. Re-deploys restart only the selected unit. deploy-plan.py maps compose
keys mariadb/redis to the new unit names; allowlists updated. New seam test
tests/dankserver_quadlet.bats pins boot-persistence + v1-generator contract;
test-changed.sh maps the new dirs to it. Full suite green (209 tests).
35 lines
1.0 KiB
INI
35 lines
1.0 KiB
INI
# Quadlet unit: MariaDB backing store for RomM (rootless, boot-persistent).
|
|
#
|
|
# Install path on dankserver: ~/.config/containers/systemd/romm-mariadb.container
|
|
# Unit name: romm-mariadb.service (podman 5.x drops the container- prefix)
|
|
#
|
|
# The alias `mariadb` on dankserver_appnet is what makes DB_HOST=mariadb in
|
|
# the RomM unit resolve. Secrets (MARIADB_ROOT_PASSWORD, MARIADB_PASSWORD)
|
|
# live in the shared host-local env file /home/dank/Containers/romm/env
|
|
# (mode 0600); this file holds no secrets.
|
|
|
|
[Unit]
|
|
Description=RomM MariaDB database container
|
|
After=network.target
|
|
|
|
[Container]
|
|
ContainerName=romm-mariadb
|
|
Image=docker.io/library/mariadb:11
|
|
Network=dankserver_appnet:alias=mariadb
|
|
EnvironmentFile=/home/dank/Containers/romm/env
|
|
Environment=MARIADB_DATABASE=romm
|
|
Environment=MARIADB_USER=romm
|
|
Volume=/home/dank/Containers/romm/mariadb:/var/lib/mysql
|
|
HealthCmd=mariadb-admin ping -h localhost
|
|
HealthInterval=10s
|
|
HealthTimeout=5s
|
|
HealthRetries=3
|
|
|
|
[Service]
|
|
EnvironmentFile=/home/dank/Containers/romm/env
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=default.target
|