kampodine 0.4.0 → 0.6.0

package/scripts/status.sh

@@ -1,44 +1,164 @@
 #!/usr/bin/env bash
-# status.sh — one command: what is LIVE (through the proxy) + the blue/green
-# pair view (instances, reserved IP, health).
+# status.sh — one command: deployment count (ledger), what is LIVE (through
+# the proxy), the VM's disk/image/service state (with --host), and the
+# blue/green pair view.
 #
 # Usage:
-#   kampodine status
+#   kampodine status [--host root@<ip>] [--ssh-key <path>]
 #
-# Env: APP_HOST_HEADER (default: app.example.com), OCI_PROFILE, OCI_COMPARTMENT.
+# Without --host: live health + the deployment count (all hosts). With
+# --host: adds VM disk usage (LOUD warning above 90%), the sha-tagged image
+# count with a reclaimable-by-prune estimate, and service states
+# (kampodine-api, kamal-proxy, walshipper if present).
+#
+# Env: APP_HOST_HEADER (default: app.example.com), KAMPODINE_HOST,
+# KAMPODINE_SSH_KEY, OCI_PROFILE, OCI_COMPARTMENT.
 set -euo pipefail
 HERE="$(cd "$(dirname "$0")" && pwd)"
-HOST="${APP_HOST_HEADER:-app.example.com}"
+# shellcheck source=common.sh
+source "$HERE/common.sh"
+
+HOST_HEADER="${PROFILE_PROXY_HOST:-${APP_HOST_HEADER:-app.example.com}}"
+IMAGE="127.0.0.1:5000/kampodine-api"
+DISK_PATH="/var/lib/containers"
+KAMPODINE_HOST="${KAMPODINE_HOST:-}"
+if [ -n "${KAMPODINE_SSH_KEY:-}" ]; then
+    SSH_KEY="$KAMPODINE_SSH_KEY"
+else
+    SSH_KEY=""
+fi
+PROFILE_FLAG=""
+HOST_FLAG=""
+KEY_FLAG=""
+VERBOSE=0
 
 say() { printf '%s\n' "$*"; }
 die() { printf '[status] FAIL: %s\n' "$*" >&2; exit 1; }
 usage() {
   cat <<'EOF'
 Usage:
-  kampodine status
+  kampodine status [--host root@<ip>] [--profile <name>] [--ssh-key <path>] [--verbose]
 
 Examples:
-  kampodine status    # live health (proxy host) + the blue/green pair view
+  kampodine status                          # deployments (ledger) + live health + blue/green pair
+  kampodine status --host root@203.0.113.10 # + VM disk usage, image/prune estimate, service states
+  kampodine status --profile prod           # resolve host/key from a config profile
+  kampodine status --host root@203.0.113.10 --verbose  # + the full metrics snapshot
+                                            #   (load, memory, disk breakdown, containers, top procs)
 
-Env: APP_HOST_HEADER (default app.example.com), OCI_PROFILE, OCI_COMPARTMENT.
+Env: APP_HOST_HEADER (default app.example.com), KAMPODINE_HOST,
+KAMPODINE_SSH_KEY, KAMPODINE_PROFILE, OCI_PROFILE, OCI_COMPARTMENT.
 EOF
   exit 0
 }
 
 while [[ $# -gt 0 ]]; do
   case "$1" in
+    --host) HOST_FLAG="$2"; KAMPODINE_HOST="$2"; shift 2 ;;
+    --ssh-key) KEY_FLAG="$2"; SSH_KEY="$2"; shift 2 ;;
+    --profile) PROFILE_FLAG="$2"; shift 2 ;;
+    --verbose) VERBOSE=1; shift ;;
     -h|--help) usage ;;
     *) die "unknown argument: $1 (--help)" ;;
   esac
 done
 
-say "== live (through the proxy: https://$HOST) =="
-if body="$(curl -sf -m 8 "https://$HOST/api/auth/ok" 2>/dev/null)"; then
+# profile resolution (flag > KAMPODINE_PROFILE > defaultProfile); an explicit
+# --host/--ssh-key flag always beats the profile
+profile_resolve "$PROFILE_FLAG" "$HOST_FLAG" "$KEY_FLAG"
+SSH_KEY="${KEY_FLAG:-${KAMPODINE_SSH_KEY:-}}"
+
+# --- deployment count (the owner's "total deployments", always visible) -------
+if [[ -n "$KAMPODINE_HOST" ]]; then
+  say "== deployments (ledger: $(ledger_file)) =="
+  ledger_total_line "$(ledger_count "$KAMPODINE_HOST")" "deployments to $KAMPODINE_HOST"
+else
+  say "== deployments (ledger: $(ledger_file)) =="
+  ledger_total_line "$(ledger_count)" "across all hosts — pass --host root@<ip> for VM state"
+  if [[ $VERBOSE -eq 1 ]]; then
+    say "metrics snapshot: needs a target — add --host root@<ip> (or --profile <name>)"
+  fi
+fi
+say
+
+say "== live (through the proxy: https://$HOST_HEADER) =="
+if body="$(curl -sf -m 8 "https://$HOST_HEADER/api/auth/ok" 2>/dev/null)"; then
   say "HEALTH OK: $body"
-  say "build-id  : $(curl -sf -m 8 "https://$HOST/build-id.txt" 2>/dev/null || echo unreachable)"
+  say "build-id  : $(curl -sf -m 8 "https://$HOST_HEADER/build-id.txt" 2>/dev/null || echo unreachable)"
 else
   say "UNREACHABLE or unhealthy — check the VM (ssh) and kamal-proxy"
 fi
+
+if [[ -n "$KAMPODINE_HOST" ]]; then
+  SSH_ARGS=(-o ConnectTimeout=10 -o BatchMode=yes)
+  [[ -n "$SSH_KEY" ]] && SSH_ARGS+=(-i "$SSH_KEY")
+  # $1 is a composed remote command — client-side expansion is the design.
+  # shellcheck disable=SC2029
+  vm() { ssh "${SSH_ARGS[@]}" "$KAMPODINE_HOST" "$1"; }
+  if [[ "$(uname -s)" == "Darwin" ]]; then
+    SSH_AUTH_SOCK="$(launchctl getenv SSH_AUTH_SOCK 2>/dev/null || true)"
+    export SSH_AUTH_SOCK
+  fi
+
+  say
+  say "== VM ($KAMPODINE_HOST) =="
+  df_out="$(vm "df -P $DISK_PATH 2>/dev/null" || true)"
+  pct="$(disk_pct_from_df "$df_out")"
+  case "$(disk_verdict "$pct" "")" in
+    ok) say "disk    : ${pct}% used on $DISK_PATH" ;;
+    warn)
+      say "disk    : ${pct}% used on $DISK_PATH"
+      say "WARNING : VM disk above 90% — old sha-tagged deploy images pile up (~1GB each); reclaim: kampodine deploy prune --dry-run"
+      ;;
+    *) say "disk    : unknown (df unreadable)" ;;
+  esac
+
+  images_raw="$(vm "podman images --format '{{.Tag}}|{{.CreatedAt}}|{{.Size}}' $IMAGE 2>/dev/null" || true)"
+  images="$(printf '%s\n' "$images_raw" | grep -E '^[0-9a-f]{7,40}\|' || true)"
+  running="$(vm "podman ps --format '{{.Image}}' 2>/dev/null" || true)"
+  img_count="$(printf '%s\n' "$images" | grep -c . || true)"
+  reclaim="$(prune_select "$images" "$running" 2 || true)"
+  reclaim_n="0"
+  reclaim_tags="(none)"
+  reclaim_size="~0 MB"
+  if [[ -n "$reclaim" ]]; then
+    reclaim_n="$(printf '%s\n' "$reclaim" | grep -c . || true)"
+    reclaim_tags="$(printf '%s\n' "$reclaim" | cut -d'|' -f1 | paste -sd, -)"
+    reclaim_size="$(sum_sizes_human "$(printf '%s\n' "$reclaim" | cut -d'|' -f2)")"
+  fi
+  say "images  : ${img_count:-0} sha-tagged deploy image(s); prune would remove ${reclaim_n} ${reclaim_tags} (${reclaim_size}): kampodine deploy prune --dry-run"
+
+  # init detection (groundwork for non-Alpine targets): the roll call keeps
+  # the historical shape on Alpine (byte-identical "for s in … rc-service …")
+  # and swaps the probe command on systemd hosts.
+  init_detect vm >/dev/null 2>&1 || true
+  case "$INIT_SYSTEM" in
+    systemd) svc_probe='systemctl status "$s"' ;;
+    *)       svc_probe='rc-service "$s" status' ;;
+  esac
+  say "services:"
+  vm "for s in kampodine-api kamal-proxy walshipper; do if $svc_probe >/dev/null 2>&1; then echo \"\$s: running\"; else echo \"\$s: not-running\"; fi; done" \
+    || say "(service roll call failed)"
+
+  if [[ $VERBOSE -eq 1 ]]; then
+    say
+    say "== metrics snapshot =="
+    if metrics_raw="$(vm "$METRICS_REMOTE_CMD" 2>/dev/null)"; then
+      metrics_render "$metrics_raw"
+      metrics_pct="$(disk_pct_from_df "$M_DISK")"
+      if [[ -n "$metrics_pct" ]] && [[ "$metrics_pct" -gt 90 ]]; then
+        say "WARNING : root disk above 90% — reclaim: kampodine deploy prune --dry-run"
+      fi
+    else
+      say "(metrics snapshot failed — VM unreachable?)"
+    fi
+  fi
+fi
+
 say
 say "== blue/green pair =="
-exec bash "$HERE/bluegreen.sh" status
+if [[ -n "$PROFILE_FLAG" ]]; then
+  exec bash "$HERE/bluegreen.sh" status --profile "$PROFILE_FLAG"
+else
+  exec bash "$HERE/bluegreen.sh" status
+fi

package/scripts/vm-prepare.sh

@@ -35,6 +35,7 @@
 # not a restart).
 #
 #   kampodine vm-prepare --host root@<new-ip>
+#   kampodine vm-prepare --profile <name> # host/key from ~/.kampodine/config.json
 #   ... --pull-images     # + pre-pull the app image over the registry tunnel
 #   ... --ssh-key <path>  # ssh identity (default: agent / KAMPODINE_SSH_KEY)
 set -euo pipefail
@@ -42,35 +43,48 @@ set -euo pipefail
 HOST=""
 DO_PULL=0
 SSH_KEY="${KAMPODINE_SSH_KEY:-}"
+PROFILE_FLAG=""
+HOST_FLAG=""
+KEY_FLAG=""
+HERE="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=common.sh
+source "$HERE/common.sh"
 
 say() { printf '\033[1;32m[vm-prepare]\033[0m %s\n' "$*"; }
 die() { printf '\033[1;31m[vm-prepare] FAIL:\033[0m %s\n' "$*" >&2; exit 1; }
 usage() {
   cat <<'EOF'
 Usage:
-  kampodine vm-prepare --host root@<new-ip> [--pull-images] [--ssh-key <path>]
+  kampodine vm-prepare --host root@<new-ip> [--pull-images] [--ssh-key <path>] [--profile <name>]
 
 Examples:
 EOF
   grep '^#   kampodine vm-prepare' "$0" | sed 's/^#   //'
   cat <<'EOF'
 
-Host/key resolution: --host | (no env default — explicit flag);
---ssh-key | KAMPODINE_SSH_KEY | ssh-agent / ~/.ssh/config.
+Host/key resolution: --host | --profile <name> | KAMPODINE_PROFILE |
+config defaultProfile; --ssh-key | profile sshKey | KAMPODINE_SSH_KEY |
+ssh-agent / ~/.ssh/config.
 EOF
   exit 0
 }
 
 while [[ $# -gt 0 ]]; do
   case "$1" in
-    --host) HOST="$2"; shift 2 ;;
+    --host) HOST_FLAG="$2"; HOST="$2"; shift 2 ;;
     --pull-images) DO_PULL=1; shift ;;
-    --ssh-key) SSH_KEY="$2"; shift 2 ;;
+    --ssh-key) KEY_FLAG="$2"; SSH_KEY="$2"; shift 2 ;;
+    --profile) PROFILE_FLAG="$2"; shift 2 ;;
     -h|--help) usage ;;
     *) die "unknown argument: $1 (--help)" ;;
   esac
 done
-[[ -n "$HOST" ]] || die "--host root@<ip> required (--help for usage)"
+# profile resolution (flag > KAMPODINE_PROFILE > defaultProfile); the explicit
+# --host/--ssh-key flags always beat the profile
+profile_resolve "$PROFILE_FLAG" "${HOST_FLAG:-}" "${KEY_FLAG:-}"
+SSH_KEY="${KEY_FLAG:-${KAMPODINE_SSH_KEY:-}}"
+[[ -z "$HOST" ]] && HOST="${KAMPODINE_HOST:-}"
+[[ -n "$HOST" ]] || die "--host root@<ip> required (--profile <name> or KAMPODINE_HOST also work; --help for usage)"
 
 SSH_ARGS=(-o ConnectTimeout=10 -o BatchMode=yes -o StrictHostKeyChecking=accept-new)
 [[ -n "$SSH_KEY" ]] && SSH_ARGS+=(-i "$SSH_KEY")