CroneKorkN
b8d281348e
Remote clients reach the backup server over wireguard only on its internal address; waiting for the wakeonlan network address never ended there, so htz.mails and the mseibert nodes had no backup since 2026-01-07. The wait now gives up after ten minutes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
97 lines
2.9 KiB
Python
97 lines
2.9 KiB
Python
from ipaddress import ip_interface
|
|
|
|
|
|
defaults = {
|
|
'apt': {
|
|
'packages': {
|
|
'jq': {},
|
|
'ethtool': {},
|
|
'net-tools': {},
|
|
},
|
|
},
|
|
'systemd': {
|
|
'units': {
|
|
'wakeonlan-remove-downtime.service': {
|
|
'Unit': {
|
|
'Description': 'remove icinga downtime after wakeup',
|
|
'After': {
|
|
'network-online.target',
|
|
'suspend.target',
|
|
},
|
|
},
|
|
'Service': {
|
|
'ExecStart': '/usr/local/bin/downtime remove',
|
|
},
|
|
'Install': {
|
|
'WantedBy': {
|
|
'suspend.target',
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
'systemd-timers': {
|
|
'suspend-if-idle': {
|
|
'command': f'suspend_if_idle',
|
|
'when': 'minutely',
|
|
'success_exit_status': '75',
|
|
'env': {
|
|
'THIS_SERVICE': 'suspend-if-idle.service',
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
|
|
@metadata_reactor.provides(
|
|
'wol-sleeper/mac',
|
|
'wol-sleeper/waker_command',
|
|
'wol-sleeper/wake_command',
|
|
)
|
|
def wake_command(metadata):
|
|
waker_hostname = repo.get_node(metadata.get('wol-sleeper/waker')).hostname
|
|
mac = metadata.get(f"network/{metadata.get('wol-sleeper/network')}/mac")
|
|
network = ip_interface(metadata.get(f"network/{metadata.get('wol-sleeper/network')}/ipv4"))
|
|
waker_command = f"/usr/bin/wakeonlan -i {network.network.broadcast_address} {mac}"
|
|
# wait on the internal address: the wakeonlan network is not routed to remote clients (wireguard);
|
|
# bounded, so a failed wakeup cannot block the next runs forever
|
|
internal_ip = ip_interface(metadata.get('network/internal/ipv4')).ip
|
|
|
|
return {
|
|
'wol-sleeper': {
|
|
'mac': mac,
|
|
'waker_command': waker_command,
|
|
'wake_command': (
|
|
f"ssh -o StrictHostKeyChecking=no wol@{waker_hostname} '{waker_command}'"
|
|
f" && timeout 600 sh -c 'until ping -c1 -W3 {internal_ip} > /dev/null; do sleep 2; done'"
|
|
),
|
|
},
|
|
}
|
|
|
|
|
|
@metadata_reactor.provides(
|
|
'systemd/units/wakeonline-setup.service',
|
|
'systemd/services/wakeonline-setup.service',
|
|
)
|
|
def systemd(metadata):
|
|
interface = metadata.get(f"network/{metadata.get('wol-sleeper/network')}/interface")
|
|
|
|
return {
|
|
'systemd': {
|
|
'units': {
|
|
'wakeonline-setup.service': {
|
|
'Unit': {
|
|
'After': 'network.target',
|
|
},
|
|
'Service': {
|
|
'Type': 'oneshot',
|
|
'RemainAfterExit': 'yes',
|
|
'ExecStart': f'ethtool -s {interface} wol g',
|
|
},
|
|
},
|
|
},
|
|
'services': {
|
|
'wakeonline-setup.service': {},
|
|
},
|
|
},
|
|
}
|