diff options
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 193 |
1 files changed, 6 insertions, 187 deletions
@@ -252,195 +252,14 @@ sudo loginctl enable-linger "$USER" If there are **no** keys in the auth database, uploads are accepted without **`Authorization`** (useful for local testing only). -### Manual hourly upload (single host, not config-managed) +### Manual upload client (all operating systems) -Use this when the machine is **not** deployed from a Rex/Ansible repo. The unified script is **`scripts/goprecords-upload-client.sh`** (POSIX **`sh`**: Linux, FreeBSD, OpenBSD; runs as root or as a regular user). A copy is also kept in **`contrib/`** for backward compatibility. +The unified script **`scripts/goprecords-upload-client.sh`** works on +FreeBSD, Linux, and OpenBSD as root or a regular user. A copy is also kept in +**`contrib/`** for backward compatibility. -The script works on all host types: - -| Host class | OS | Privilege | Token path | -|------------|----|-----------|------------| -| **f0–f3** | FreeBSD | root via `doas` | `/etc/goprecords-upload.token` | -| **pi0–pi3** | Rocky Linux (aarch64) | root via `sudo` | `/etc/goprecords-upload.token` | -| **earth** (laptop) | Fedora / Linux | user (no root) | `$XDG_CONFIG_HOME/goprecords-upload-<HOST>/token` | -| **blowfish**, **fishfinger** | OpenBSD | root (Rex) | deployed by Rex from template | - -**SSH vs upload name:** **`GOPRECORDS_HOST`** must stay the **short** stats name (**`f0`**, **`pi2`**, **`earth`**). For **SSH**, use a real host — e.g. **`ssh -p 22 paul@f0.lan.buetow.org`** or **`paul@192.168.1.130`**, not **`f0.lan`** (incomplete / invalid). OpenBSD frontends may use **port 2** in Rex; **f0–f3** and **Pis** use **port 22**. - -**Privilege on FreeBSD:** many hosts (e.g. **f0–f3**) ship **`doas`** and no **`sudo`**. Use **`doas`** for install, writing the token, and one-off test runs below; on Linux (Pis) use **`sudo`**. - -**Token path (non-root):** when run as a non-root user the script defaults to **`${XDG_CONFIG_HOME:-$HOME/.config}/goprecords-upload-${GOPRECORDS_HOST}/token`** (mode **`600`**). Override with **`GOPRECORDS_TOKEN_FILE`**. - -**On each host** - -1. Install **`curl`** and **`uptimed`**, and ensure **`uptimed`** is running. -2. Install the script (path is up to you; **`755`**, owned by **`root`** for system-wide use or **`700`** in `~/.local/bin` for user installs): - - **Linux (root)** - - ```bash - sudo install -m 755 scripts/goprecords-upload-client.sh /usr/local/bin/goprecords-upload-client.sh - ``` - - **FreeBSD (root)** - - ```bash - doas install -m 755 scripts/goprecords-upload-client.sh /usr/local/bin/goprecords-upload-client.sh - ``` - - **Linux (user, e.g. earth)** - - ```bash - install -m 700 scripts/goprecords-upload-client.sh ~/.local/bin/goprecords-upload-client.sh - ``` - -3. Create a token on the goprecords server (hostname must match **`GOPRECORDS_HOST`** exactly, e.g. **`f0`**, **`pi2`**, **`earth`**): - - ```bash - kubectl exec -n services deployment/goprecords -- \ - goprecords --create-client-key f0 -stats-dir=/data/stats - ``` - -4. Save the printed secret, mode **`600`**: - - **Linux / FreeBSD (root)** - - ```bash - # Linux - umask 077 - sudo sh -c ‘cat > /etc/goprecords-upload.token’ - sudo chmod 600 /etc/goprecords-upload.token - # FreeBSD - umask 077 - doas sh -c ‘cat > /etc/goprecords-upload.token’ - doas chmod 600 /etc/goprecords-upload.token - ``` - - **Linux (user, e.g. earth)** - - ```bash - mkdir -p ~/.config/goprecords-upload-earth - umask 077 - cat > ~/.config/goprecords-upload-earth/token - ``` - -5. **FreeBSD — hourly cron** (example for **`f0`**; use **`/etc/crontab`** or **`root`**’s crontab). **`curl`** must be on **`PATH`** for cron (often **`/usr/local/bin`**): - - ```cron PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin - 0 * * * * root /usr/bin/env GOPRECORDS_HOST=f0 /usr/local/bin/goprecords-upload-client.sh - ``` - - Repeat for **`f1`**, **`f2`**, **`f3`**, … with the matching **`GOPRECORDS_HOST`**. - -6. **Linux (systemd) — hourly timer, system-wide** (example for **`pi0`**). **`/etc/goprecords-upload.env`** (mode **`644`**, root): - - ```ini - GOPRECORDS_HOST=pi0 - ``` - - **`/etc/systemd/system/goprecords-upload.service`**: - - ```ini - [Unit] - Description=Upload uptimed stats to goprecords - - [Service] - Type=oneshot - EnvironmentFile=/etc/goprecords-upload.env - Environment=GOPRECORDS_TOKEN_FILE=/etc/goprecords-upload.token - ExecStart=/usr/local/bin/goprecords-upload-client.sh - ``` - - **`/etc/systemd/system/goprecords-upload.timer`**: - - **`OnActiveSec`** runs once soon after **`enable --now`**, so the first upload is not delayed until the next full hour (otherwise run **`systemctl start goprecords-upload.service`** manually once). - - ```ini - [Unit] - Description=Hourly uptimed upload to goprecords - - [Timer] - OnCalendar=hourly - OnActiveSec=90s - RandomizedDelaySec=300 - Persistent=true - - [Install] - WantedBy=timers.target - ``` - - Then: - - ```bash - sudo systemctl daemon-reload - sudo systemctl enable --now goprecords-upload.timer - ``` - - Use a different **`GOPRECORDS_HOST`** in **`/etc/goprecords-upload.env`** on **`pi1`**, **`pi2`**, **`pi3`**. - -7. **Linux (systemd) — hourly timer, user session** (example for **`earth`** laptop). **`~/.config/systemd/user/goprecords-upload-earth.service`**: - - ```ini - [Unit] - Description=Upload uptimed stats to goprecords - - [Service] - Type=oneshot - Environment=GOPRECORDS_HOST=earth - ExecStart=%h/.local/bin/goprecords-upload-client.sh - ``` - - **`~/.config/systemd/user/goprecords-upload-earth.timer`**: - - ```ini - [Unit] - Description=Hourly uptimed upload to goprecords (earth) - - [Timer] - OnCalendar=hourly - OnActiveSec=90s - RandomizedDelaySec=300 - Persistent=true - - [Install] - WantedBy=timers.target - ``` - - Then (enable lingering so uploads continue without an active login session): - - ```bash - sudo loginctl enable-linger "$USER" - systemctl --user daemon-reload - systemctl --user enable --now goprecords-upload-earth.timer - ``` - -**Environment (optional)** - -| Variable | Default (root) | Default (non-root) | -|----------|----------------|--------------------| -| **`GOPRECORDS_HOST`** | (required) | (required) | -| **`GOPRECORDS_TOKEN_FILE`** | **`/etc/goprecords-upload.token`** | **`$XDG_CONFIG_HOME/goprecords-upload-<HOST>/token`** | -| **`GOPRECORDS_BASE_URL`** | **`https://goprecords.f3s.buetow.org`** | same | - -**Test one run** - -**Linux (root)** - -```bash -sudo env GOPRECORDS_HOST=pi0 /usr/local/bin/goprecords-upload-client.sh -``` - -**FreeBSD (root)** - -```bash -doas env GOPRECORDS_HOST=f0 /usr/local/bin/goprecords-upload-client.sh -``` - -**Linux (user)** - -```bash -GOPRECORDS_HOST=earth ~/.local/bin/goprecords-upload-client.sh -``` +Full per-OS installation instructions (token setup, cron/systemd automation, +test runs) are in **[docs/upload-client.md](docs/upload-client.md)**. ## Test |