underpost 2.99.7 → 3.0.0

package/manifests/ipfs/statefulset.yaml

@@ -0,0 +1,149 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: ipfs-cluster
+spec:
+  serviceName: ipfs-cluster
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ipfs-cluster
+  template:
+    metadata:
+      labels:
+        app: ipfs-cluster
+    spec:
+      initContainers:
+        - name: configure-ipfs
+          image: ipfs/kubo:latest
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            runAsUser: 0
+          command: ['sh', '/custom/configure-ipfs.sh']
+          volumeMounts:
+            - name: ipfs-storage
+              mountPath: /data/ipfs
+            - name: configure-script
+              mountPath: /custom
+
+      containers:
+        - name: ipfs
+          image: ipfs/kubo:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: IPFS_FD_MAX
+              value: '4096'
+          ports:
+            - name: swarm
+              protocol: TCP
+              containerPort: 4001
+            - name: swarm-udp
+              protocol: UDP
+              containerPort: 4001
+            - name: api
+              protocol: TCP
+              containerPort: 5001
+            - name: ws
+              protocol: TCP
+              containerPort: 8081
+            - name: http
+              protocol: TCP
+              containerPort: 8080
+          livenessProbe:
+            tcpSocket:
+              port: swarm
+            initialDelaySeconds: 30
+            timeoutSeconds: 5
+            periodSeconds: 15
+          volumeMounts:
+            - name: ipfs-storage
+              mountPath: /data/ipfs
+            - name: configure-script
+              mountPath: /custom
+          resources:
+            requests:
+              cpu: '100m'
+              memory: '256Mi'
+            limits:
+              cpu: '500m'
+              memory: '512Mi'
+
+        - name: ipfs-cluster
+          image: ipfs/ipfs-cluster:latest
+          imagePullPolicy: IfNotPresent
+          command: ['sh', '/custom/entrypoint.sh']
+          env:
+            - name: BOOTSTRAP_PEER_ID
+              valueFrom:
+                configMapKeyRef:
+                  name: env-config
+                  key: bootstrap-peer-id
+            - name: BOOTSTRAP_PEER_PRIV_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: ipfs-cluster-secret
+                  key: bootstrap-peer-priv-key
+            - name: CLUSTER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: ipfs-cluster-secret
+                  key: cluster-secret
+            - name: CLUSTER_MONITOR_PING_INTERVAL
+              value: '3m'
+            - name: SVC_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: env-config
+                  key: CLUSTER_SVC_NAME
+          ports:
+            - name: api-http
+              containerPort: 9094
+              protocol: TCP
+            - name: proxy-http
+              containerPort: 9095
+              protocol: TCP
+            - name: cluster-swarm
+              containerPort: 9096
+              protocol: TCP
+          livenessProbe:
+            tcpSocket:
+              port: cluster-swarm
+            initialDelaySeconds: 5
+            timeoutSeconds: 5
+            periodSeconds: 10
+          volumeMounts:
+            - name: cluster-storage
+              mountPath: /data/ipfs-cluster
+            - name: configure-script
+              mountPath: /custom
+          resources:
+            requests:
+              cpu: '100m'
+              memory: '128Mi'
+            limits:
+              cpu: '500m'
+              memory: '512Mi'
+
+      volumes:
+        - name: configure-script
+          configMap:
+            name: ipfs-cluster-set-bootstrap-conf
+            defaultMode: 0755
+
+  volumeClaimTemplates:
+    - metadata:
+        name: cluster-storage
+      spec:
+        storageClassName: ipfs-storage-class
+        accessModes: ['ReadWriteOnce']
+        resources:
+          requests:
+            storage: 1Gi
+    - metadata:
+        name: ipfs-storage
+      spec:
+        storageClassName: ipfs-storage-class
+        accessModes: ['ReadWriteOnce']
+        resources:
+          requests:
+            storage: 5Gi

package/manifests/ipfs/storage-class.yaml

@@ -0,0 +1,9 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: ipfs-storage-class
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "false"
+provisioner: rancher.io/local-path
+reclaimPolicy: Retain
+volumeBindingMode: WaitForFirstConsumer

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "underpost",
-    "version": "2.99.7",
+    "version": "3.0.0",
     "description": "pwa api rest template",
     "scripts": {
         "start": "env-cmd -f .env.production node --max-old-space-size=8192 src/server",
@@ -76,13 +76,13 @@
         "helmet": "^8.1.0",
         "html-minifier-terser": "^7.2.0",
         "http-proxy-middleware": "^2.0.6",
-        "ignore-walk": "^6.0.4",
+        "ignore-walk": "^8.0.0",
         "iovalkey": "^0.2.1",
         "json-colorizer": "^2.2.2",
         "jsonwebtoken": "^9.0.2",
         "mariadb": "^3.2.2",
         "marked": "^12.0.2",
-        "mocha": "^10.8.2",
+        "mocha": "^11.3.0",
         "mongoose": "^8.9.5",
         "morgan": "^1.10.0",
         "nodemailer": "^7.0.9",
@@ -92,12 +92,12 @@
         "prom-client": "^15.1.2",
         "read": "^2.1.0",
         "rrule": "^2.8.1",
-        "shelljs": "^0.8.5",
+        "shelljs": "^0.10.0",
         "sitemap": "^7.1.1",
         "socket.io": "^4.8.0",
         "sortablejs": "^1.15.0",
         "split-file": "^2.3.0",
-        "swagger-autogen": "^2.23.7",
+        "swagger-autogen": "^2.9.2",
         "swagger-ui-express": "^5.0.0",
         "uglify-js": "^3.17.4",
         "validator": "^13.11.0",

package/scripts/k3s-node-setup.sh

@@ -0,0 +1,89 @@
+#!/bin/bash
+set -e
+
+# ---------------------------------------------------------------------------
+# Underpost K3s Node Setup
+# Usage:
+#   --control                   Initialize as K3s control plane node (default)
+#   --worker                    Initialize as K3s worker node
+#   --control-ip=<ip>           Control plane IP (required for --worker)
+#   --token=<token>             K3s node token (required for --worker)
+# ---------------------------------------------------------------------------
+
+ROLE="control"
+CONTROL_IP=""
+K3S_TOKEN=""
+
+for arg in "$@"; do
+  case $arg in
+    --worker)         ROLE="worker" ;;
+    --control)        ROLE="control" ;;
+    --control-ip=*)   CONTROL_IP="${arg#*=}" ;;
+    --token=*)        K3S_TOKEN="${arg#*=}" ;;
+  esac
+done
+# ---------------------------------------------------------------------------
+# NVM and Node.js
+# ---------------------------------------------------------------------------
+echo "Installing NVM and Node.js v24.10.0..."
+
+curl -o- https://cdn.jsdelivr.net/gh/nvm-sh/nvm@v0.40.1/install.sh | bash
+
+export NVM_DIR="$([ -z "${XDG_CONFIG_HOME-}" ] && printf %s "${HOME}/.nvm" || printf %s "${XDG_CONFIG_HOME}/nvm")"
+[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+
+nvm install 24.10.0
+nvm use 24.10.0
+
+echo "
+██╗░░░██╗███╗░░██╗██████╗░███████╗██████╗░██████╗░░█████╗░░██████╗████████╗
+██║░░░██║████╗░██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔══██╗██╔════╝╚══██╔══╝
+██║░░░██║██╔██╗██║██║░░██║█████╗░░██████╔╝██████╔╝██║░░██║╚█████╗░░░░██║░░░
+██║░░░██║██║╚████║██║░░██║██╔══╝░░██╔══██╗██╔═══╝░██║░░██║░╚═══██╗░░░██║░░░
+╚██████╔╝██║░╚███║██████╔╝███████╗██║░░██║██║░░░░░╚█████╔╝██████╔╝░░░██║░░░
+░╚═════╝░╚═╝░░╚══╝╚═════╝░╚══════╝╚═╝░░╚═╝╚═╝░░░░░░╚════╝░╚═════╝░░░░╚═╝░░░
+
+Installing underpost VM node...
+"
+
+npm install -g underpost
+
+cd /home/dd/engine
+
+echo "Applying host configuration..."
+
+underpost install
+
+node bin run secret
+
+node bin cluster --dev --config
+
+if [ "$ROLE" = "control" ]; then
+  echo "Initializing K3s control plane..."
+  node bin cluster --dev --k3s
+
+  echo ""
+  echo "K3s control plane is ready."
+  echo "Node token (share with workers to join this cluster):"
+  sudo cat /var/lib/rancher/k3s/server/node-token
+  echo ""
+  echo "Control plane IP addresses:"
+  ip -4 addr show scope global | grep inet | awk '{print $2}' | cut -d/ -f1
+
+elif [ "$ROLE" = "worker" ]; then
+  if [ -z "$CONTROL_IP" ] || [ -z "$K3S_TOKEN" ]; then
+    echo "ERROR: --control-ip and --token are required for worker role."
+    echo "Usage: bash k3s-node-setup.sh --worker --control-ip=<ip> --token=<token>"
+    exit 1
+  fi
+
+  echo "Joining K3s cluster at https://${CONTROL_IP}:6443..."
+  curl -sfL https://get.k3s.io | \
+    K3S_URL="https://${CONTROL_IP}:6443" \
+    K3S_TOKEN="${K3S_TOKEN}" \
+    sh -s - agent
+
+  echo ""
+  echo "K3s worker node joined the cluster at https://${CONTROL_IP}:6443 successfully."
+  sudo systemctl status k3s-agent --no-pager
+fi

package/scripts/lxd-vm-setup.sh

@@ -0,0 +1,23 @@
+
+echo "Expanding /dev/sda2 and resizing filesystem..."
+
+if ! command -v parted &>/dev/null; then
+  sudo dnf install -y parted
+fi
+
+sudo parted /dev/sda ---pretend-input-tty <<EOF
+unit s
+resizepart 2 100%
+Yes
+quit
+EOF
+
+sudo resize2fs /dev/sda2
+echo "Disk resized."
+
+echo "Installing essential packages..."
+sudo dnf install -y tar bzip2 git curl jq epel-release
+sudo dnf -y update
+
+echo "Loading br_netfilter module..."
+sudo modprobe br_netfilter

package/scripts/rocky-setup.sh

@@ -103,16 +103,4 @@ echo "[+] Cleanup: remove unnecessary packages and old metadata"
 dnf autoremove -y
 dnf clean all
 
-cat <<EOF
-
-Installation complete.
-- To allow SSH access (if this is a VM or server), open port 22 in firewalld:
-  sudo firewall-cmd --add-service=ssh --permanent && sudo firewall-cmd --reload
-- If you installed Development Tools, you will have gcc, make, etc.
-
-Examples:
-  sudo ./scripts/rocky-setup.sh --install-dev
-  INSTALL_DEV=1 sudo ./scripts/rocky-setup.sh
-
-Customize PACKAGES=(...) inside this script according to your needs (docker, podman, kube, mssql-tools, etc.).
-EOF
+echo "[+] Setup complete! Rocky Linux is now configured with the recommended base packages."

package/src/cli/baremetal.js

@@ -534,9 +534,6 @@ rm -rf ${artifacts.join(' ')}`);
       if (options.controlServerDbInstall === true) {
         // Deploy the database provider and manage MAAS database.
         shellExec(`node ${underpostRoot}/bin/deploy ${dbProviderId} install`);
-        shellExec(
-          `node ${underpostRoot}/bin/deploy pg-drop-db ${process.env.DB_PG_MAAS_NAME} ${process.env.DB_PG_MAAS_USER}`,
-        );
         shellExec(`node ${underpostRoot}/bin/deploy maas-db`);
         return;
       }
@@ -1150,8 +1147,9 @@ rm -rf ${artifacts.join(' ')}`);
           machine: machine ? machine.system_id : null,
         });
 
-        const { discovery, machine: discoveredMachine } =
-          await Underpost.baremetal.commissionMonitor(commissionMonitorPayload);
+        const { discovery, machine: discoveredMachine } = await Underpost.baremetal.commissionMonitor(
+          commissionMonitorPayload,
+        );
         if (discoveredMachine) machine = discoveredMachine;
       }
     },
@@ -2496,10 +2494,10 @@ fi
           const discoverHostname = discovery.hostname
             ? discovery.hostname
             : discovery.mac_organization
-              ? discovery.mac_organization
-              : discovery.domain
-                ? discovery.domain
-                : `generic-host-${s4()}${s4()}`;
+            ? discovery.mac_organization
+            : discovery.domain
+            ? discovery.domain
+            : `generic-host-${s4()}${s4()}`;
 
           console.log(discoverHostname.bgBlue.bold.white);
           console.log('ip target:'.green + ipAddress, 'ip discovered:'.green + discovery.ip);