Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
  patrickandClaude Sonnet 5
|
4d050cbedf | ||
|
patrickandClaude Sonnet 5
|
14019487b3 | ||
|
sysops
|
0141cdc4c7 | ||
|
sysops
|
cbef884db8 | ||
|
sysops
|
d83c3113f8 | ||
|
sysops
|
1619f22f18 |
No files matched your search
@@ -0,0 +1,195 @@
|
|||||||
|
# v3 – Dev Log
|
||||||
|
|
||||||
|
## 2026-06-19 00:56 – 00:58 (1m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** miyagi-backup
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:01 – 01:05 (4m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:06 – 01:07 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:26 – 01:28 (2m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:32 – 01:33 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:40 – 01:42 (2m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:44 – 01:47 (2m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:48 – 01:48 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 01:49 – 02:08 (18m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 02:08 – 02:08 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 02:09 – 02:10 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 02:11 – 02:15 (3m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-06-19 02:16 – 02:16 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- config.example | 2 +-
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-07-07 – Pre-Shutdown-Hooks + Installpfade
|
||||||
|
|
||||||
|
**Feature:** `run_pre_shutdown_hooks()` eingebaut, aufgerufen in `shutdown_now()` nach Piggyback/CheckZFS, vor 60s-Sleep.
|
||||||
|
|
||||||
|
**Hook-Verzeichnis:** `/etc/miyagi-backup/hooks.d/pre-shutdown/`
|
||||||
|
- Verzeichnis fehlt oder leer → still übersprungen
|
||||||
|
- Nur `*.sh` mit `chmod +x` werden ausgeführt
|
||||||
|
- Alphabetisch sortiert
|
||||||
|
- Hook-Fehler → WARNUNG im Log, Shutdown läuft weiter
|
||||||
|
|
||||||
|
**Installpfade festgelegt:**
|
||||||
|
- Skripte: `/opt/miyagi-backup/`
|
||||||
|
- Konfigs: `/etc/miyagi-backup/`
|
||||||
|
- Hooks: `/etc/miyagi-backup/hooks.d/pre-shutdown/`
|
||||||
|
- Symlink: `/usr/local/bin/miyagi-backup` → `/opt/miyagi-backup/miyagi-backup.sh`
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-07-16 14:13 – 14:13 (0m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- miyagi-check.sh | 100 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-07-16 14:16 – 14:48 (32m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- miyagi-check.sh | 100 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
|
||||||
|
|
||||||
|
---
|
||||||
|
## 2026-07-16 14:49 – 14:51 (1m)
|
||||||
|
**Beschreibung:** Claude Code Session
|
||||||
|
**Projekt:** v3
|
||||||
|
|
||||||
|
### Commits
|
||||||
|
Keine Commits in dieser Session.
|
||||||
|
|
||||||
|
### Geänderte Dateien
|
||||||
|
- miyagi-check.sh | 100 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
|
||||||
|
|
||||||
|
---
|
||||||
@@ -1,27 +0,0 @@
|
|||||||
# Beispielhafte Aufrufe
|
|
||||||
|
|
||||||
Befehl Wirkung
|
|
||||||
./miyagi-backup.sh -c /etc/miyagi.conf Führt den vollständigen Backup-Prozess aus
|
|
||||||
./miyagi-backup.sh help Listet alle verfügbaren Funktionen
|
|
||||||
./miyagi-backup.sh run_updates Führt nur Updates lokal aus
|
|
||||||
./miyagi-backup.sh run_pbs_backup Führt nur das vzdump-PBS-Backup aus
|
|
||||||
./miyagi-backup.sh run_maintenance Nur Wartung (Prune + GC)
|
|
||||||
./miyagi-backup.sh shutdown_if_requested Prüft ob Shutdown nötig ist
|
|
||||||
|
|
||||||
|
|
||||||
####
|
|
||||||
|
|
||||||
# miyagi-check.sh
|
|
||||||
|
|
||||||
Dieses Skript überprüft eine Bash-basierte Konfigurationsdatei für ein Backup-System:
|
|
||||||
|
|
||||||
## Funktionen:
|
|
||||||
- Validiert alle benötigten Variablen
|
|
||||||
- Testet SSH-Verbindungen zu `SOURCEHOST` und optional `PBSHOST`
|
|
||||||
- Prüft und installiert bei Bedarf den lokalen SSH-Key (`~/.ssh/id_rsa.pub`)
|
|
||||||
- Erkennt unsichere `PermitRootLogin yes` Einstellungen
|
|
||||||
- Bietet automatische Umstellung auf `prohibit-password` an
|
|
||||||
|
|
||||||
## Nutzung:
|
|
||||||
```bash
|
|
||||||
./miyagi-check.sh /pfad/zur/config
|
|
||||||
+16
-7
@@ -2,14 +2,17 @@
|
|||||||
|
|
||||||
UPDATES='yes' # Proxmox VE und PBS Updates nach dem Lauf
|
UPDATES='yes' # Proxmox VE und PBS Updates nach dem Lauf
|
||||||
SHUTDOWN='no' # System nach Ausführung herunterfahren?
|
SHUTDOWN='no' # System nach Ausführung herunterfahren?
|
||||||
|
DYNROUTE='yes' # DYNroute ja oder nein?
|
||||||
|
DDNS_GATEWAY='192.168.66.1' # DYNDNS Gateway
|
||||||
|
DDNS_SERVER='1.1.1.1' #DNS Server extern
|
||||||
|
REBOOT='no' # Reboot nach Update?
|
||||||
|
|
||||||
# Quelle (Proxmox VE System, das gesichert wird)
|
# Quelle (Proxmox VE System, das gesichert wird)
|
||||||
SOURCEPORT='22' # SSH-Port, normalerweise 22
|
SOURCEPORT='22' # SSH-Port, normalerweise 22
|
||||||
SOURCEHOST='192.168.50.200' # IP des Quell-Proxmox-Servers
|
SOURCEHOST='192.168.50.200' # IP des Quell-Proxmox-Servers
|
||||||
|
SOURCEUSER='root' # SSH-User für SOURCEHOST
|
||||||
|
|
||||||
# Replikation (ZFS)
|
# Replikation (ZFS)
|
||||||
ZFSROOT='rpool/data' # Erstes Dataset vom Quellsystem
|
|
||||||
ZFSSECOND='rpool-hdd/data' # Optional zweites Dataset
|
|
||||||
ZFSTRGT='rpool-ssd1/repl/pve200' # Zielpfad für Replikation
|
ZFSTRGT='rpool-ssd1/repl/pve200' # Zielpfad für Replikation
|
||||||
|
|
||||||
# ZFS Zsync Replikation
|
# ZFS Zsync Replikation
|
||||||
@@ -24,19 +27,25 @@ ZPUSHFILTER='hourly|daily|weekly|monthly' # Weitere Filter (leer lassen oder Mus
|
|||||||
BACKUPSERVER='no' # Backup via PBS aktivieren?
|
BACKUPSERVER='no' # Backup via PBS aktivieren?
|
||||||
MAINTDAY='7' # Wartungstag (1=Mo, 7=So)
|
MAINTDAY='7' # Wartungstag (1=Mo, 7=So)
|
||||||
PBSHOST='192.168.50.199' # IP des Proxmox Backup Servers
|
PBSHOST='192.168.50.199' # IP des Proxmox Backup Servers
|
||||||
PBSPORT='22'
|
PBSPORT='22' # SSH-Port PBS
|
||||||
|
PBSUSER='root' # SSH-User für PBSHOST
|
||||||
|
PBSBACKUP_STATUS='86400' # Warnung ab 24h (86400s)
|
||||||
|
PBS_REPO_USER='root@pam' # PBS-User oder API-Token-ID (z.B. 'user@pbs!tokenname') für write_pbs_status
|
||||||
|
PBS_PASSWORD='' # Passwort oder API-Token-Secret zu PBS_REPO_USER (write_pbs_status)
|
||||||
BACKUPSTORE='backup' # Datastore auf Quell-Proxmox
|
BACKUPSTORE='backup' # Datastore auf Quell-Proxmox
|
||||||
BACKUPSTOREPBS='backup' # Datastore auf PBS
|
BACKUPSTOREPBS='backup' # Datastore auf PBS
|
||||||
BACKUPEXCLUDE='10,3252,3253,3254' # VM/CT-IDs, die vom Backup ausgeschlossen sind
|
BACKUPEXCLUDE='10,3252,3253,3254' # VM/CT-IDs, die vom Backup ausgeschlossen sind
|
||||||
REPLEXCLUDE=$BACKUPEXCLUDE # Diese auch von Replikation ausschließen
|
REPLEXCLUDE="$BACKUPEXCLUDE" # Diese auch von Replikation ausschließen
|
||||||
|
|
||||||
# Zusätzliche Monitoring-Ziele
|
# Zusätzliche Monitoring-Ziele
|
||||||
# External Piggyback Host
|
# External Piggyback Host
|
||||||
EPIGGYBACK='no' # Piggyback-Daten an Monitoring-Ziel senden?
|
EPIGGYBACK='no' # Piggyback-Daten an Monitoring-Ziel senden?
|
||||||
EPIGGYBACK_PORT='222' # SSH-Port für EPIGGYBACK_HOST
|
EPIGGYBACK_PORT='222' # SSH-Port für EPIGGYBACK_HOST
|
||||||
EPIGGYBACK_HOST='192.168.66.10' # Monitoring-Zielhost für Piggyback
|
EPIGGYBACK_HOST='192.168.66.10' # Monitoring-Zielhost für Piggyback
|
||||||
|
EPIGGYBACK_USER='root' # SSH-User für EPIGGYBACK_HOST
|
||||||
|
|
||||||
# External Checkzfs Host
|
# External Checkzfs Host
|
||||||
ECHECKZFS='no' # check_zfs-Output an Monitoring-Ziel senden?
|
ECHECKZFS='no' # CheckZFS-Daten an externen Monitoring-Host senden?
|
||||||
ECHECKZFS_PORT='2222' # SSH-Port für ECHECKZFS_HOST
|
ECHECKZFS_PORT='2222' # SSH-Port für ECHECKZFS_HOST
|
||||||
ECHECKZFS_HOST='192.168.50.210' # Monitoring-Zielhost für check_zfs
|
ECHECKZFS_HOST='192.168.50.210' # Monitoring-Zielhost für check_zfs
|
||||||
|
ECHECKZFS_USER='root' # SSH-User für ECHECKZFS_HOST
|
||||||
@@ -0,0 +1,34 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# Beispiel Pre-Shutdown-Hook für miyagi-backup
|
||||||
|
#
|
||||||
|
# Ablage: /etc/miyagi-backup/hooks.d/pre-shutdown/
|
||||||
|
# Ausführung: chmod +x <hookname>.sh
|
||||||
|
# Reihenfolge: alphabetisch (01-foo.sh, 02-bar.sh, ...)
|
||||||
|
# Fehlerverhalten: Exit != 0 erzeugt WARNUNG im Log, Shutdown läuft weiter
|
||||||
|
#
|
||||||
|
# Dieser Hook wird vor dem 60s-Countdown in shutdown_now() ausgeführt.
|
||||||
|
# Hinweis: eigene sleep-Aufrufe addieren sich zum 60s-Countdown dazu.
|
||||||
|
|
||||||
|
# ── Beispiel 1: Monitoring-Agent vor Shutdown reporten ───────────────────────
|
||||||
|
#
|
||||||
|
# if [ -x /usr/local/bin/patchmon-agent ]; then
|
||||||
|
# /usr/local/bin/patchmon-agent report
|
||||||
|
# fi
|
||||||
|
|
||||||
|
# ── Beispiel 2: CheckMK-Agent aktualisieren ───────────────────────────────────
|
||||||
|
#
|
||||||
|
# if [ -x /usr/bin/cmk-agent-update ]; then
|
||||||
|
# /usr/bin/cmk-agent-update
|
||||||
|
# fi
|
||||||
|
|
||||||
|
# ── Beispiel 3: Dienst neu starten (nur wenn installiert) ────────────────────
|
||||||
|
#
|
||||||
|
# if systemctl list-unit-files wazuh-agent.service &>/dev/null; then
|
||||||
|
# systemctl restart wazuh-agent.service
|
||||||
|
# fi
|
||||||
|
|
||||||
|
# ── Beispiel 4: Eigenes Skript aufrufen ───────────────────────────────────────
|
||||||
|
#
|
||||||
|
# /opt/myscript/notify-shutdown.sh
|
||||||
|
|
||||||
|
exit 0
|
||||||
+526
-54
@@ -1,4 +1,4 @@
|
|||||||
#!/bin/bash
|
#!/usr/bin/env bash
|
||||||
set -uo pipefail
|
set -uo pipefail
|
||||||
IFS=$'\n\t'
|
IFS=$'\n\t'
|
||||||
|
|
||||||
@@ -6,6 +6,24 @@ PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin"
|
|||||||
SCRIPT_NAME=$(basename "$0")
|
SCRIPT_NAME=$(basename "$0")
|
||||||
LOGFILE="/var/log/${SCRIPT_NAME%.sh}.log"
|
LOGFILE="/var/log/${SCRIPT_NAME%.sh}.log"
|
||||||
|
|
||||||
|
detect_os() {
|
||||||
|
case "$(uname -s)" in
|
||||||
|
Linux) echo "linux" ;;
|
||||||
|
FreeBSD) echo "freebsd" ;;
|
||||||
|
*) echo "unknown" ;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
OS_TYPE="$(detect_os)"
|
||||||
|
|
||||||
|
epoch_to_str() {
|
||||||
|
local epoch="$1"
|
||||||
|
if [[ "$OS_TYPE" == "freebsd" ]]; then
|
||||||
|
date -r "$epoch" "+%Y-%m-%d %H:%M:%S"
|
||||||
|
else
|
||||||
|
date -d "@$epoch" "+%Y-%m-%d %H:%M:%S"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
log() {
|
log() {
|
||||||
echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" | tee -a "$LOGFILE"
|
echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" | tee -a "$LOGFILE"
|
||||||
}
|
}
|
||||||
@@ -42,10 +60,14 @@ if [[ -n "${CONFIG_FILE:-}" ]]; then
|
|||||||
|
|
||||||
REQUIRED_VARS=(
|
REQUIRED_VARS=(
|
||||||
SOURCEPORT BACKUPSERVER ZSYNC MAINTDAY SHUTDOWN UPDATES
|
SOURCEPORT BACKUPSERVER ZSYNC MAINTDAY SHUTDOWN UPDATES
|
||||||
SOURCEHOST ZFSROOT ZFSSECOND ZFSTRGT ZPUSHTAG ZPUSHMINKEEP ZPUSHKEEP ZPUSHLABEL
|
SOURCEHOST ZFSTRGT ZPUSHTAG ZPUSHMINKEEP ZPUSHKEEP ZPUSHLABEL
|
||||||
PBSHOST BACKUPSTORE BACKUPSTOREPBS BACKUPEXCLUDE REPLEXCLUDE
|
PBSHOST PBSPORT BACKUPSTORE BACKUPSTOREPBS BACKUPEXCLUDE REPLEXCLUDE DYNROUTE REBOOT
|
||||||
)
|
)
|
||||||
|
|
||||||
|
if [[ "${DYNROUTE,,}" == "yes" ]]; then
|
||||||
|
REQUIRED_VARS+=(DDNS_GATEWAY DDNS_SERVER)
|
||||||
|
fi
|
||||||
|
|
||||||
MISSING_VARS=()
|
MISSING_VARS=()
|
||||||
for var in "${REQUIRED_VARS[@]}"; do
|
for var in "${REQUIRED_VARS[@]}"; do
|
||||||
if [[ -z "${!var:-}" ]]; then
|
if [[ -z "${!var:-}" ]]; then
|
||||||
@@ -65,18 +87,71 @@ if [[ -n "${CONFIG_FILE:-}" ]]; then
|
|||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
rssh() { ssh -p "$SOURCEPORT" "$@"; }
|
SOURCEUSER="${SOURCEUSER:-root}"
|
||||||
rscp() { scp -P "$SOURCEPORT" "$@"; }
|
PBSUSER="${PBSUSER:-root}"
|
||||||
|
EPIGGYBACK_USER="${EPIGGYBACK_USER:-root}"
|
||||||
|
ECHECKZFS_USER="${ECHECKZFS_USER:-root}"
|
||||||
|
|
||||||
|
rssh() { ssh -o BatchMode=yes -o ConnectTimeout=10 -p "$SOURCEPORT" "${SOURCEUSER}@${SOURCEHOST}" "$@"; }
|
||||||
|
rscp() { scp -P "$SOURCEPORT" "$@"; }
|
||||||
|
rpbssh() { ssh -o BatchMode=yes -o ConnectTimeout=10 -p "$PBSPORT" "${PBSUSER}@${PBSHOST}" "$@"; }
|
||||||
|
|
||||||
|
detect_host_type() {
|
||||||
|
if command -v pveversion >/dev/null 2>&1; then
|
||||||
|
echo "pve"
|
||||||
|
elif command -v proxmox-backup-server >/dev/null 2>&1; then
|
||||||
|
echo "pbs"
|
||||||
|
else
|
||||||
|
echo "unknown"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
get_sourcehostname() {
|
get_sourcehostname() {
|
||||||
if [[ -z "${SOURCEHOSTNAME:-}" ]]; then
|
if [[ -z "${SOURCEHOSTNAME:-}" ]]; then
|
||||||
log "SOURCEHOSTNAME is empty, retrieving via SSH from $SOURCEHOST..."
|
log "SOURCEHOSTNAME is empty, retrieving via SSH from $SOURCEHOST..."
|
||||||
SOURCEHOSTNAME=$(rssh "$SOURCEHOST" hostname)
|
SOURCEHOSTNAME=$(rssh hostname)
|
||||||
log "Detected SOURCEHOSTNAME: $SOURCEHOSTNAME"
|
log "Detected SOURCEHOSTNAME: $SOURCEHOSTNAME"
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
|
zfs_replace() {
|
||||||
|
local status
|
||||||
|
status=$(zpool status)
|
||||||
|
|
||||||
|
if echo "$status" | grep -q 'scan: resilver in progress'; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if echo "$status" | grep -qE 'replacing-[0-9]'; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
wait_replace() {
|
||||||
|
local interval_seconds=300 # Alle 5 Minuten prüfen
|
||||||
|
local waited_minutes=0
|
||||||
|
|
||||||
|
log "ZFS Replace-Vorgang erkannt – warte unbegrenzt auf Abschluss..."
|
||||||
|
|
||||||
|
while true; do
|
||||||
|
if ! zfs_replace; then
|
||||||
|
log "Replace abgeschlossen nach $waited_minutes Minuten – fahre jetzt herunter."
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
log "Replace läuft noch – erneut prüfen in $((interval_seconds/60)) Minuten..."
|
||||||
|
sleep "$interval_seconds"
|
||||||
|
((waited_minutes+=interval_seconds/60))
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
set_wol_g_enabled() {
|
set_wol_g_enabled() {
|
||||||
|
if [[ "$OS_TYPE" == "freebsd" ]]; then
|
||||||
|
log "FreeBSD erkannt – set_wol_g_enabled() wird übersprungen (ethtool/apt nicht verfügbar)."
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
log "Checking if ethtool is installed..."
|
log "Checking if ethtool is installed..."
|
||||||
|
|
||||||
if ! command -v ethtool >/dev/null 2>&1; then
|
if ! command -v ethtool >/dev/null 2>&1; then
|
||||||
@@ -123,13 +198,13 @@ write_zsync_config() {
|
|||||||
log "Writing zsync config to $conf_file"
|
log "Writing zsync config to $conf_file"
|
||||||
{
|
{
|
||||||
echo "target=$ZFSTRGT"
|
echo "target=$ZFSTRGT"
|
||||||
echo "source=root@$SOURCEHOST"
|
echo "source=${SOURCEUSER}@${SOURCEHOST}"
|
||||||
echo "sshport=$SOURCEPORT"
|
echo "sshport=$SOURCEPORT"
|
||||||
echo "tag=$ZPUSHTAG"
|
echo "tag=$ZPUSHTAG"
|
||||||
echo "snapshot_filter=\"$ZPUSHFILTER\""
|
echo "snapshot_filter=\"$ZPUSHFILTER\""
|
||||||
echo "min_keep=$ZPUSHMINKEEP"
|
echo "min_keep=$ZPUSHMINKEEP"
|
||||||
echo "zfs_auto_snapshot_keep=$ZPUSHKEEP"
|
echo "zfs_auto_snapshot_keep=$ZPUSHKEEP"
|
||||||
echo "zfs_auto_snapshot_label=$ZPUSHLABEL"
|
echo "zfs_auto_snapshot_label=zfs-auto-snap_$ZPUSHLABEL"
|
||||||
echo "zfs_auto_snapshot_engine=internal"
|
echo "zfs_auto_snapshot_engine=internal"
|
||||||
echo "checkzfs_disabled=0"
|
echo "checkzfs_disabled=0"
|
||||||
echo "checkzfs_local=0"
|
echo "checkzfs_local=0"
|
||||||
@@ -137,11 +212,12 @@ write_zsync_config() {
|
|||||||
echo "checkzfs_max_age=1500,2000"
|
echo "checkzfs_max_age=1500,2000"
|
||||||
echo "checkzfs_max_snapshot_count=180,200"
|
echo "checkzfs_max_snapshot_count=180,200"
|
||||||
echo "checkzfs_spool=1"
|
echo "checkzfs_spool=1"
|
||||||
echo "checkzfs_spool_maxage=90000"
|
echo "checkzfs_spool_maxage=100000"
|
||||||
} > "$conf_file"
|
} > "$conf_file"
|
||||||
}
|
}
|
||||||
|
|
||||||
run_zsync() {
|
run_zsync() {
|
||||||
|
write_zsync_config
|
||||||
if [[ "$ZSYNC" != "no" ]]; then
|
if [[ "$ZSYNC" != "no" ]]; then
|
||||||
/usr/bin/bashclub-zsync -c "/etc/bashclub/$SOURCEHOST.conf"
|
/usr/bin/bashclub-zsync -c "/etc/bashclub/$SOURCEHOST.conf"
|
||||||
else
|
else
|
||||||
@@ -149,19 +225,132 @@ run_zsync() {
|
|||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
|
disable_pve_notifications() {
|
||||||
|
if [[ "$(hostname -I 2>/dev/null)" == *"$SOURCEHOST"* || "$(hostname)" == "$SOURCEHOST" ]]; then
|
||||||
|
log "Lokaler Host ist SOURCEHOST – Notification-Deaktivierung wird hier übersprungen."
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ "$(detect_host_type)" == "pve" ]]; then
|
||||||
|
log "PVE erkannt – deaktiviere Notification-Target mail-to-root und default-matcher (keine lokalen Mails an root)."
|
||||||
|
pvesh set /cluster/notifications/endpoints/sendmail/mail-to-root --disable 1 >/dev/null 2>&1 \
|
||||||
|
|| log "WARN: Notification-Target mail-to-root konnte nicht deaktiviert werden."
|
||||||
|
pvesh set /cluster/notifications/matchers/default-matcher --disable 1 >/dev/null 2>&1 \
|
||||||
|
|| log "WARN: Notification-Matcher default-matcher konnte nicht deaktiviert werden."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
run_local_apt_updates() {
|
||||||
|
log "Running updates on local system..."
|
||||||
|
|
||||||
|
local TIMESTAMP
|
||||||
|
TIMESTAMP=$(date +"%Y-%m-%d_%H-%M-%S")
|
||||||
|
local SNAPSHOT_TAG="pve-update-via-miyagi"
|
||||||
|
local MAX_SNAPSHOTS=5
|
||||||
|
local REBOOT_FLAG="${REBOOT^^}"
|
||||||
|
local UPDATE_LOGFILE="/var/log/proxmox_update.log"
|
||||||
|
|
||||||
|
log_msg() {
|
||||||
|
local level="$1"
|
||||||
|
local message="$2"
|
||||||
|
local timestamp
|
||||||
|
timestamp=$(date +"%Y-%m-%d %H:%M:%S")
|
||||||
|
echo "[$timestamp] $message"
|
||||||
|
echo "[$timestamp] [$level] $message" >> "$UPDATE_LOGFILE"
|
||||||
|
}
|
||||||
|
|
||||||
|
local HOST_TYPE
|
||||||
|
HOST_TYPE=$(detect_host_type)
|
||||||
|
local ZFS_DATASETS=()
|
||||||
|
case "$HOST_TYPE" in
|
||||||
|
pve)
|
||||||
|
log_msg "INFO" "Systemtyp erkannt: PVE"
|
||||||
|
ZFS_DATASETS=("rpool/ROOT/pve-1" "rpool/pveconf")
|
||||||
|
;;
|
||||||
|
pbs)
|
||||||
|
log_msg "INFO" "Systemtyp erkannt: PBS"
|
||||||
|
ZFS_DATASETS=("rpool/ROOT/pbs-1")
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
log_msg "WARN" "Systemtyp (PVE/PBS) konnte nicht erkannt werden – ueberspringe ZFS-Snapshots."
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# Prüfen, ob Updates verfügbar sind
|
||||||
|
if ! apt update | tee -a "$UPDATE_LOGFILE" | grep -qi "upgradable"; then
|
||||||
|
log_msg "INFO" "Keine Updates verfügbar."
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_msg "INFO" "Updates verfügbar. Erstelle Snapshots."
|
||||||
|
|
||||||
|
for dataset in "${ZFS_DATASETS[@]}"; do
|
||||||
|
if ! zfs list -H -o name "$dataset" >/dev/null 2>&1; then
|
||||||
|
log_msg "WARN" "Dataset $dataset existiert nicht – übersprungen."
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
|
||||||
|
snapshot="${dataset}@${SNAPSHOT_TAG}-${TIMESTAMP}"
|
||||||
|
log_msg "INFO" "Erstelle Snapshot: $snapshot"
|
||||||
|
zfs snapshot "$snapshot"
|
||||||
|
|
||||||
|
# Alte Snapshots bereinigen
|
||||||
|
log_msg "INFO" "Bereinige alte Snapshots in $dataset"
|
||||||
|
old_snaps=$(zfs list -t snapshot -o name -s creation | grep "^${dataset}@${SNAPSHOT_TAG}-")
|
||||||
|
snap_count=$(grep -c . <<< "$old_snaps")
|
||||||
|
if (( snap_count > MAX_SNAPSHOTS )); then
|
||||||
|
snaps_to_delete=$(echo "$old_snaps" | head -n $((snap_count - MAX_SNAPSHOTS)))
|
||||||
|
while IFS= read -r snap; do
|
||||||
|
log_msg "INFO" "Lösche alten Snapshot: $snap"
|
||||||
|
zfs destroy "$snap"
|
||||||
|
done <<< "$snaps_to_delete"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
# System-Upgrade
|
||||||
|
log_msg "INFO" "Starte dist-upgrade"
|
||||||
|
if ! apt dist-upgrade -y | tee -a "$UPDATE_LOGFILE"; then
|
||||||
|
log_msg "ERROR" "Fehler während dist-upgrade"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_msg "INFO" "Starte autoremove"
|
||||||
|
apt autoremove -y | tee -a "$UPDATE_LOGFILE"
|
||||||
|
|
||||||
|
# Kernel-Update prüfen
|
||||||
|
if apt list --upgradable 2>/dev/null | grep -q "linux-image-"; then
|
||||||
|
log_msg "WARN" "Kernel-Update erkannt. Neustart empfohlen."
|
||||||
|
if [[ "$REBOOT_FLAG" == "YES" ]]; then
|
||||||
|
log_msg "INFO" "REBOOT=YES erkannt. System wird neugestartet."
|
||||||
|
reboot
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
log_msg "INFO" "Update abgeschlossen. Kein Neustart erforderlich."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
run_pbs_apt_updates() {
|
||||||
|
if [[ "${BACKUPSERVER,,}" == "yes" ]]; then
|
||||||
|
log "Running updates on PBS host ($PBSHOST)..."
|
||||||
|
rpbssh apt update && rpbssh apt dist-upgrade -y || {
|
||||||
|
log "Error during updates on $PBSHOST"
|
||||||
|
}
|
||||||
|
else
|
||||||
|
log "PBS updates skipped (BACKUPSERVER=$BACKUPSERVER)"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
run_remote_updates() {
|
run_remote_updates() {
|
||||||
if [[ "${UPDATES,,}" == "yes" ]]; then
|
if [[ "${UPDATES,,}" == "yes" ]]; then
|
||||||
log "Running updates on local system..."
|
if [[ "$OS_TYPE" == "freebsd" ]]; then
|
||||||
apt update && apt dist-upgrade -y || log "Error during local updates"
|
log "FreeBSD erkannt – lokales apt-Update wird übersprungen (apt nicht verfügbar)."
|
||||||
|
|
||||||
if [[ "${BACKUPSERVER,,}" == "yes" ]]; then
|
|
||||||
log "Running updates on PBS host ($PBSHOST)..."
|
|
||||||
ssh root@"$PBSHOST" apt update && ssh root@"$PBSHOST" apt dist-upgrade -y || {
|
|
||||||
log "Error during updates on $PBSHOST"
|
|
||||||
}
|
|
||||||
else
|
else
|
||||||
log "PBS updates skipped (BACKUPSERVER=$BACKUPSERVER)"
|
run_local_apt_updates
|
||||||
|
disable_pve_notifications
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# PBS-Host-Update läuft unabhängig vom lokalen Update-Ergebnis/Skript-Host-OS
|
||||||
|
run_pbs_apt_updates
|
||||||
else
|
else
|
||||||
log "Updates disabled (UPDATES=$UPDATES)"
|
log "Updates disabled (UPDATES=$UPDATES)"
|
||||||
fi
|
fi
|
||||||
@@ -170,7 +359,7 @@ run_remote_updates() {
|
|||||||
send_piggyback() {
|
send_piggyback() {
|
||||||
get_sourcehostname
|
get_sourcehostname
|
||||||
local combined_host="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
local combined_host="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
||||||
local filename="90000_${combined_host}"
|
local filename="100000_${combined_host}"
|
||||||
|
|
||||||
log "Reminder: Add a host named ${combined_host} in CMK (without Agent, Piggyback enabled)!"
|
log "Reminder: Add a host named ${combined_host} in CMK (without Agent, Piggyback enabled)!"
|
||||||
log "Creating piggyback file: $filename"
|
log "Creating piggyback file: $filename"
|
||||||
@@ -181,7 +370,7 @@ send_piggyback() {
|
|||||||
echo "<<<<>>>>"
|
echo "<<<<>>>>"
|
||||||
} > "$filename"
|
} > "$filename"
|
||||||
|
|
||||||
if rscp "$filename" "$SOURCEHOST:/var/lib/check_mk_agent/spool/"; then
|
if rscp "$filename" "${SOURCEUSER}@${SOURCEHOST}:/var/lib/check_mk_agent/spool/"; then
|
||||||
log "Piggyback data successfully sent to $SOURCEHOST"
|
log "Piggyback data successfully sent to $SOURCEHOST"
|
||||||
else
|
else
|
||||||
log "ERROR: Failed to send piggyback data to $SOURCEHOST"
|
log "ERROR: Failed to send piggyback data to $SOURCEHOST"
|
||||||
@@ -190,6 +379,22 @@ send_piggyback() {
|
|||||||
rm -f "$filename"
|
rm -f "$filename"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
run_pbs_log_clear() {
|
||||||
|
log "Running clear LOG on PBS host ($PBSHOST)..."
|
||||||
|
|
||||||
|
if ! rpbssh find /var/log/proxmox-backup/tasks/ -type f -mtime +60 -delete; then
|
||||||
|
log "Error clearing PBS LOG on $PBSHOST"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
run_pve_log_clear() {
|
||||||
|
log "Running clear LOG on PVE host ($PBSHOST)..."
|
||||||
|
|
||||||
|
if ! rssh find /var/log/vzdump -type f -mtime +30 -delete; then
|
||||||
|
log "Error clearing PVE LOG on $SOURCEHOST"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
run_pbs_backup() {
|
run_pbs_backup() {
|
||||||
if [[ "${BACKUPSERVER,,}" != "yes" ]]; then
|
if [[ "${BACKUPSERVER,,}" != "yes" ]]; then
|
||||||
log "PBS Backup übersprungen: BACKUPSERVER='$BACKUPSERVER' (muss 'yes' sein)"
|
log "PBS Backup übersprungen: BACKUPSERVER='$BACKUPSERVER' (muss 'yes' sein)"
|
||||||
@@ -201,9 +406,9 @@ run_pbs_backup() {
|
|||||||
|
|
||||||
# PBS-Storage prüfen und ggf. aktivieren
|
# PBS-Storage prüfen und ggf. aktivieren
|
||||||
log "Prüfe, ob PBS-Storage '$BACKUPSTORE' auf $SOURCEHOST aktiviert ist..."
|
log "Prüfe, ob PBS-Storage '$BACKUPSTORE' auf $SOURCEHOST aktiviert ist..."
|
||||||
if rssh root@"$SOURCEHOST" "pvesm status | grep -w '$BACKUPSTORE' | grep -q 'disabled'"; then
|
if rssh "pvesm status | grep -w '$BACKUPSTORE' | grep -q 'disabled'"; then
|
||||||
log "PBS-Storage '$BACKUPSTORE' ist deaktiviert – aktiviere temporär und warte 10 Sekunden..."
|
log "PBS-Storage '$BACKUPSTORE' ist deaktiviert – aktiviere temporär und warte 10 Sekunden..."
|
||||||
rssh root@"$SOURCEHOST" "pvesm set '$BACKUPSTORE' --disable 0 && sleep 10"
|
rssh "pvesm set '$BACKUPSTORE' --disable 0 && sleep 10"
|
||||||
pbs_enabled_by_script=true
|
pbs_enabled_by_script=true
|
||||||
else
|
else
|
||||||
log "PBS-Storage '$BACKUPSTORE' ist bereits aktiviert."
|
log "PBS-Storage '$BACKUPSTORE' ist bereits aktiviert."
|
||||||
@@ -215,7 +420,7 @@ run_pbs_backup() {
|
|||||||
# Versuch: vzdump mit Change Detection
|
# Versuch: vzdump mit Change Detection
|
||||||
## Eintrag muss in /etc/vzdump.conf entries-max 100000000
|
## Eintrag muss in /etc/vzdump.conf entries-max 100000000
|
||||||
log "Starte vzdump mit Change Detection..."
|
log "Starte vzdump mit Change Detection..."
|
||||||
if rssh root@"$SOURCEHOST" vzdump --pbs-change-detection-mode metadata \
|
if rssh vzdump --pbs-change-detection-mode metadata \
|
||||||
--node "$SOURCEHOSTNAME" --storage "$BACKUPSTORE" \
|
--node "$SOURCEHOSTNAME" --storage "$BACKUPSTORE" \
|
||||||
--exclude "$BACKUPEXCLUDE" --mode snapshot --all 1 \
|
--exclude "$BACKUPEXCLUDE" --mode snapshot --all 1 \
|
||||||
--notes-template '{{guestname}}'; then
|
--notes-template '{{guestname}}'; then
|
||||||
@@ -225,7 +430,7 @@ run_pbs_backup() {
|
|||||||
else
|
else
|
||||||
log "vzdump (Change Detection) fehlgeschlagen – versuche Fallback ohne Change Detection..."
|
log "vzdump (Change Detection) fehlgeschlagen – versuche Fallback ohne Change Detection..."
|
||||||
|
|
||||||
if rssh root@"$SOURCEHOST" vzdump \
|
if rssh vzdump \
|
||||||
--node "$SOURCEHOSTNAME" --storage "$BACKUPSTORE" \
|
--node "$SOURCEHOSTNAME" --storage "$BACKUPSTORE" \
|
||||||
--exclude "$BACKUPEXCLUDE" --mode snapshot --all 1 \
|
--exclude "$BACKUPEXCLUDE" --mode snapshot --all 1 \
|
||||||
--notes-template '{{guestname}}'; then
|
--notes-template '{{guestname}}'; then
|
||||||
@@ -240,7 +445,7 @@ run_pbs_backup() {
|
|||||||
# PBS-Storage ggf. wieder deaktivieren
|
# PBS-Storage ggf. wieder deaktivieren
|
||||||
if [[ "$vzdump_success" == true && "$pbs_enabled_by_script" == true ]]; then
|
if [[ "$vzdump_success" == true && "$pbs_enabled_by_script" == true ]]; then
|
||||||
log "Deaktiviere temporär aktiviertes PBS-Storage '$BACKUPSTORE' auf $SOURCEHOST..."
|
log "Deaktiviere temporär aktiviertes PBS-Storage '$BACKUPSTORE' auf $SOURCEHOST..."
|
||||||
rssh root@"$SOURCEHOST" "pvesm set '$BACKUPSTORE' --disable 1"
|
rssh "pvesm set '$BACKUPSTORE' --disable 1"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Monitoring-Ausgabe
|
# Monitoring-Ausgabe
|
||||||
@@ -253,16 +458,15 @@ run_pbs_backup() {
|
|||||||
{
|
{
|
||||||
echo "<<<local>>>"
|
echo "<<<local>>>"
|
||||||
cat /tmp/cmk_tmp.out
|
cat /tmp/cmk_tmp.out
|
||||||
} > /tmp/90000_checkpbs
|
} > /tmp/1200000_checkpbs
|
||||||
|
|
||||||
rscp /tmp/90000_checkpbs root@"$SOURCEHOST":/var/lib/check_mk_agent/spool \
|
rscp /tmp/1200000_checkpbs "${SOURCEUSER}@${SOURCEHOST}":/var/lib/check_mk_agent/spool \
|
||||||
|| log "Fehler beim Übertragen des Monitoring-Outputs via SCP"
|
|| log "Fehler beim Übertragen des Monitoring-Outputs via SCP"
|
||||||
|
|
||||||
rm -f /tmp/cmk_tmp.out /tmp/90000_checkpbs
|
rm -f /tmp/cmk_tmp.out /tmp/1200000_checkpbs
|
||||||
#write_pbs_status
|
#write_pbs_status
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
run_maintenance() {
|
run_maintenance() {
|
||||||
if [[ "${BACKUPSERVER,,}" != "yes" ]]; then
|
if [[ "${BACKUPSERVER,,}" != "yes" ]]; then
|
||||||
log "PBS Backup wird übersprungen (BACKUPSERVER=$BACKUPSERVER)"
|
log "PBS Backup wird übersprungen (BACKUPSERVER=$BACKUPSERVER)"
|
||||||
@@ -271,10 +475,10 @@ run_maintenance() {
|
|||||||
|
|
||||||
if [[ "$(date +%u)" == "$MAINTDAY" ]]; then
|
if [[ "$(date +%u)" == "$MAINTDAY" ]]; then
|
||||||
log "Running maintenance..."
|
log "Running maintenance..."
|
||||||
PRUNEJOB=$(ssh "$PBSHOST" proxmox-backup-manager prune-job list --output-format json-pretty | grep -m 1 "id" | cut -d'"' -f4)
|
PRUNEJOB=$(rpbssh proxmox-backup-manager prune-job list --output-format json-pretty | grep -m 1 "id" | cut -d'"' -f4)
|
||||||
ssh root@"$PBSHOST" proxmox-backup-manager prune-job run "$PRUNEJOB"
|
rpbssh proxmox-backup-manager prune-job run "$PRUNEJOB"
|
||||||
ssh root@"$PBSHOST" proxmox-backup-manager garbage-collection start "$BACKUPSTOREPBS"
|
rpbssh proxmox-backup-manager garbage-collection start "$BACKUPSTOREPBS"
|
||||||
ssh root@"$PBSHOST" proxmox-backup-manager verify backup
|
rpbssh proxmox-backup-manager verify backup
|
||||||
else
|
else
|
||||||
log "No maintenance scheduled for today."
|
log "No maintenance scheduled for today."
|
||||||
fi
|
fi
|
||||||
@@ -285,7 +489,7 @@ run_scrub_stop() {
|
|||||||
local ssh_cmd=()
|
local ssh_cmd=()
|
||||||
|
|
||||||
if [[ "$mode" == "remote" ]]; then
|
if [[ "$mode" == "remote" ]]; then
|
||||||
ssh_cmd=(ssh -p "$SOURCEPORT" root@"$SOURCEHOST")
|
ssh_cmd=(ssh -o BatchMode=yes -o ConnectTimeout=10 -p "$SOURCEPORT" "${SOURCEUSER}@${SOURCEHOST}")
|
||||||
fi
|
fi
|
||||||
|
|
||||||
"${ssh_cmd[@]}" bash -c '
|
"${ssh_cmd[@]}" bash -c '
|
||||||
@@ -304,12 +508,127 @@ run_scrub_stop() {
|
|||||||
'
|
'
|
||||||
}
|
}
|
||||||
|
|
||||||
|
write_pbs_status() {
|
||||||
|
local spool_file="/var/lib/check_mk_agent/spool/90000_checkpbs_local"
|
||||||
|
local repo="${PBS_REPO_USER}@${PBSHOST}:${BACKUPSTOREPBS}"
|
||||||
|
local tmpfile
|
||||||
|
tmpfile=$(mktemp)
|
||||||
|
|
||||||
|
if ! command -v proxmox-backup-client >/dev/null 2>&1; then
|
||||||
|
log "proxmox-backup-client nicht installiert – PBS-Status-Ausgabe übersprungen."
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -z "${PBS_REPO_USER:-}" || -z "${PBS_PASSWORD:-}" ]]; then
|
||||||
|
log "PBS_REPO_USER oder PBS_PASSWORD nicht gesetzt – PBS-Status-Ausgabe übersprungen."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "<<<local>>>" > "$tmpfile"
|
||||||
|
|
||||||
|
local now
|
||||||
|
now=$(date +%s)
|
||||||
|
|
||||||
|
# === Schwellenwert(e) parsen ===
|
||||||
|
local warn_threshold=0
|
||||||
|
local crit_threshold=86400 # Default kritisch ab 24h
|
||||||
|
|
||||||
|
if [[ -n "${PBSBACKUP_STATUS:-}" ]]; then
|
||||||
|
IFS=',' read -r t1 t2 <<< "$PBSBACKUP_STATUS"
|
||||||
|
if [[ "$t1" =~ ^[0-9]+$ && -z "$t2" ]]; then
|
||||||
|
# Nur ein Wert vorhanden
|
||||||
|
crit_threshold=$t1
|
||||||
|
log "Verwende einfachen Schwellenwert: CRIT=${crit_threshold}s"
|
||||||
|
elif [[ "$t1" =~ ^[0-9]+$ && "$t2" =~ ^[0-9]+$ ]]; then
|
||||||
|
warn_threshold=$t1
|
||||||
|
crit_threshold=$t2
|
||||||
|
log "Verwende gestaffelte Schwellenwerte: WARN=${warn_threshold}s, CRIT=${crit_threshold}s"
|
||||||
|
else
|
||||||
|
log "WARNUNG: Ungültiges PBSBACKUP_STATUS-Format – Fallback: CRIT=${crit_threshold}s"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Backup-Daten extrahieren (direkt vom Skript-Host gegen PBSHOST, mit PBS_PASSWORD authentifiziert)
|
||||||
|
PBS_PASSWORD="$PBS_PASSWORD" proxmox-backup-client list --repository "$repo" --output-format json 2>/dev/null | \
|
||||||
|
grep -E '"backup-id"|"backup-type"|"backup-time"' | \
|
||||||
|
sed -E 's/[",]//g; s/^ *//' > "$tmpfile.json"
|
||||||
|
|
||||||
|
local backup_type="" backup_id="" backup_time=""
|
||||||
|
while read -r line; do
|
||||||
|
case "$line" in
|
||||||
|
backup-type:*)
|
||||||
|
backup_type="${line#*: }"
|
||||||
|
;;
|
||||||
|
backup-id:*)
|
||||||
|
backup_id="${line#*: }"
|
||||||
|
;;
|
||||||
|
backup-time:*)
|
||||||
|
backup_time="${line#*: }"
|
||||||
|
|
||||||
|
if [[ -n "$backup_type" && -n "$backup_id" && -n "$backup_time" ]]; then
|
||||||
|
local age status timestamp msg
|
||||||
|
age=$((now - backup_time))
|
||||||
|
timestamp=$(epoch_to_str "$backup_time")
|
||||||
|
|
||||||
|
if (( age < warn_threshold )); then
|
||||||
|
status=0
|
||||||
|
elif (( age < crit_threshold )); then
|
||||||
|
status=1
|
||||||
|
else
|
||||||
|
status=2
|
||||||
|
fi
|
||||||
|
|
||||||
|
msg="$backup_type/$backup_id last backup $timestamp (age: $((age / 3600))h)"
|
||||||
|
echo "$status PBS_${backup_type}_${backup_id} - $msg" >> "$tmpfile"
|
||||||
|
|
||||||
|
# Reset
|
||||||
|
backup_type="" backup_id="" backup_time=""
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done < "$tmpfile.json"
|
||||||
|
|
||||||
|
rm -f "$tmpfile.json"
|
||||||
|
mv "$tmpfile" "$spool_file"
|
||||||
|
log "PBS Backup Status lokal geschrieben: $spool_file"
|
||||||
|
}
|
||||||
|
|
||||||
|
run_pre_shutdown_hooks() {
|
||||||
|
local hook_dir="/etc/miyagi-backup/hooks.d/pre-shutdown"
|
||||||
|
if [[ ! -d "$hook_dir" ]]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
local hooks=()
|
||||||
|
while IFS= read -r -d '' f; do
|
||||||
|
hooks+=("$f")
|
||||||
|
done < <(find "$hook_dir" -maxdepth 1 -name "*.sh" -executable -print0 | sort -z)
|
||||||
|
if [[ ${#hooks[@]} -eq 0 ]]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
log "Führe Pre-Shutdown-Hooks aus ($hook_dir)..."
|
||||||
|
for hook in "${hooks[@]}"; do
|
||||||
|
log "Hook: $hook"
|
||||||
|
if ! bash "$hook"; then
|
||||||
|
log "WARNUNG: Hook $hook fehlgeschlagen (Exit $?) – fahre fort"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
shutdown_now() {
|
shutdown_now() {
|
||||||
if [[ "${SHUTDOWN,,}" == "yes" ]]; then
|
if [[ "${SHUTDOWN,,}" == "yes" ]]; then
|
||||||
|
if zfs_replace; then
|
||||||
|
log "ZFS Replace-Vorgang erkannt – warte bis zum Abschluss..."
|
||||||
|
if ! wait_replace; then
|
||||||
|
log "Shutdown abgebrochen – Replace ist nach max. Wartezeit noch nicht abgeschlossen."
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
fi
|
||||||
send_piggyback
|
send_piggyback
|
||||||
send_piggyback_external
|
send_piggyback_external
|
||||||
send_checkzfs_external
|
send_checkzfs_external
|
||||||
log "Shutting down now..."
|
run_pre_shutdown_hooks
|
||||||
|
log "Shutting down now...in 60sec"
|
||||||
|
sleep 60
|
||||||
shutdown now
|
shutdown now
|
||||||
else
|
else
|
||||||
log "No shutdown requested."
|
log "No shutdown requested."
|
||||||
@@ -325,7 +644,7 @@ send_piggyback_external() {
|
|||||||
log "Ermittelter SOURCEHOSTNAME: $SOURCEHOSTNAME"
|
log "Ermittelter SOURCEHOSTNAME: $SOURCEHOSTNAME"
|
||||||
|
|
||||||
local combined_host="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
local combined_host="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
||||||
local spool_file="90000_${combined_host}_external"
|
local spool_file="100000_${combined_host}_piggyback_external"
|
||||||
local temp_dir
|
local temp_dir
|
||||||
temp_dir=$(mktemp -d)
|
temp_dir=$(mktemp -d)
|
||||||
|
|
||||||
@@ -337,7 +656,7 @@ send_piggyback_external() {
|
|||||||
echo "<<<<>>>>"
|
echo "<<<<>>>>"
|
||||||
} > "$temp_dir/$spool_file"
|
} > "$temp_dir/$spool_file"
|
||||||
|
|
||||||
if scp -P "$EPIGGYBACK_PORT" "$temp_dir/$spool_file" "$EPIGGYBACK_HOST:/var/lib/check_mk_agent/spool/"; then
|
if scp -P "$EPIGGYBACK_PORT" "$temp_dir/$spool_file" "${EPIGGYBACK_USER}@${EPIGGYBACK_HOST}:/var/lib/check_mk_agent/spool/"; then
|
||||||
log "Piggyback-Daten erfolgreich an $EPIGGYBACK_HOST gesendet: $spool_file"
|
log "Piggyback-Daten erfolgreich an $EPIGGYBACK_HOST gesendet: $spool_file"
|
||||||
else
|
else
|
||||||
log "Fehler beim Übertragen der Piggyback-Daten an $EPIGGYBACK_HOST"
|
log "Fehler beim Übertragen der Piggyback-Daten an $EPIGGYBACK_HOST"
|
||||||
@@ -349,9 +668,70 @@ send_piggyback_external() {
|
|||||||
return 0
|
return 0
|
||||||
}
|
}
|
||||||
|
|
||||||
|
send_checkzfs() {
|
||||||
|
if [[ "${ZSYNC,,}" != "yes" ]]; then
|
||||||
|
log "send_checkzfs: ZSYNC nicht aktiv – übersprungen"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
get_sourcehostname
|
||||||
|
|
||||||
|
local checkzfs_cmd
|
||||||
|
checkzfs_cmd="$(command -v checkzfs || true)"
|
||||||
|
if [[ -z "$checkzfs_cmd" || ! -x "$checkzfs_cmd" ]]; then
|
||||||
|
log "send_checkzfs: checkzfs nicht gefunden – übersprungen"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Defaults für checkzfs-Parameter (können via zsync-Config überschrieben werden)
|
||||||
|
local checkzfs_prefix="${checkzfs_prefix:-miyagi-${SOURCEHOSTNAME}-$(hostname)-${ZPUSHTAG}}"
|
||||||
|
local checkzfs_max_age="${checkzfs_max_age:-1500,2000}"
|
||||||
|
local checkzfs_max_snapshot_count="${checkzfs_max_snapshot_count:-180,200}"
|
||||||
|
|
||||||
|
# Optional zsync-Config laden falls vorhanden (überschreibt Defaults)
|
||||||
|
local zsync_config="/etc/bashclub/${SOURCEHOST}.conf"
|
||||||
|
[[ -f "$zsync_config" ]] && source "$zsync_config"
|
||||||
|
|
||||||
|
local filter=""
|
||||||
|
while IFS=$'\t' read -r name value src; do
|
||||||
|
if [[ "$src" == "local" && "$value" == "subvols" ]]; then
|
||||||
|
filter+="${name}/|"
|
||||||
|
elif [[ "$src" == "local" && "$value" == "all" ]]; then
|
||||||
|
filter+="${name}|"
|
||||||
|
fi
|
||||||
|
done < <(rssh "zfs get -H -o name,value,source -t filesystem,volume $ZPUSHTAG")
|
||||||
|
filter="#${filter%|}"
|
||||||
|
log "Generierter ZFS-Filter: $filter"
|
||||||
|
|
||||||
|
local combined="miyagi-${SOURCEHOSTNAME}-$(hostname)-${ZPUSHTAG}"
|
||||||
|
local spoolfile="/tmp/${combined}_checkzfs"
|
||||||
|
local spooldest="100000_${combined}_checkzfs"
|
||||||
|
|
||||||
|
log "Führe checkzfs aus..."
|
||||||
|
{
|
||||||
|
echo "<<<local>>>"
|
||||||
|
"$checkzfs_cmd" \
|
||||||
|
--source "${SOURCEUSER}@${SOURCEHOST}:${SOURCEPORT}" \
|
||||||
|
--filter "$filter" \
|
||||||
|
--replicafilter "^${ZFSTRGT}" \
|
||||||
|
--prefix "$checkzfs_prefix" \
|
||||||
|
--threshold "$checkzfs_max_age" \
|
||||||
|
--maxsnapshots "$checkzfs_max_snapshot_count" \
|
||||||
|
--output checkmk
|
||||||
|
} > "$spoolfile"
|
||||||
|
|
||||||
|
if rscp "$spoolfile" "${SOURCEUSER}@${SOURCEHOST}:/var/lib/check_mk_agent/spool/${spooldest}"; then
|
||||||
|
log "CheckZFS-Daten an $SOURCEHOST gesendet: $spooldest"
|
||||||
|
else
|
||||||
|
log "FEHLER: CheckZFS-Daten konnten nicht übertragen werden"
|
||||||
|
fi
|
||||||
|
|
||||||
|
rm -f "$spoolfile"
|
||||||
|
}
|
||||||
|
|
||||||
send_checkzfs_external() {
|
send_checkzfs_external() {
|
||||||
if [[ "${ECHECKZFS,,}" != "yes" ]]; then
|
if [[ "${ECHECKZFS,,}" != "yes" ]]; then
|
||||||
log "Externer Piggyback-Export deaktiviert."
|
log "Externer CheckZFS deaktiviert."
|
||||||
return
|
return
|
||||||
fi
|
fi
|
||||||
local config="/etc/bashclub/${SOURCEHOST}.conf"
|
local config="/etc/bashclub/${SOURCEHOST}.conf"
|
||||||
@@ -361,11 +741,6 @@ send_checkzfs_external() {
|
|||||||
fi
|
fi
|
||||||
source "$config"
|
source "$config"
|
||||||
|
|
||||||
if [[ "${ECHECKZFS,,}" != "yes" ]]; then
|
|
||||||
log "Externer Check-ZFS deaktiviert (ECHECKZFS=$ECHECKZFS)"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
get_sourcehostname # Setzt SOURCEHOSTNAME, wenn nicht vorhanden
|
get_sourcehostname # Setzt SOURCEHOSTNAME, wenn nicht vorhanden
|
||||||
|
|
||||||
local checkzfs_cmd="${checkzfs_cmd:-$(command -v checkzfs)}"
|
local checkzfs_cmd="${checkzfs_cmd:-$(command -v checkzfs)}"
|
||||||
@@ -383,20 +758,20 @@ send_checkzfs_external() {
|
|||||||
elif [[ "$source" == "local" && "$value" == "all" ]]; then
|
elif [[ "$source" == "local" && "$value" == "all" ]]; then
|
||||||
filter+="${name}|"
|
filter+="${name}|"
|
||||||
fi
|
fi
|
||||||
done < <(ssh -p "$SOURCEPORT" "$SOURCEHOST" "zfs get -H -o name,value,source -t filesystem,volume $ZPUSHTAG")
|
done < <(rssh "zfs get -H -o name,value,source -t filesystem,volume $ZPUSHTAG")
|
||||||
|
|
||||||
filter="#${filter%|}"
|
filter="#${filter%|}"
|
||||||
log "Generierter ZFS-Filter: $filter"
|
log "Generierter ZFS-Filter: $filter"
|
||||||
|
|
||||||
local combined="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
local combined="miyagi-${SOURCEHOSTNAME}-$(hostname)-${ZPUSHTAG}"
|
||||||
local spoolfile="/tmp/${combined}_checkzfs_external"
|
local spoolfile="/tmp/${combined}_checkzfs_external"
|
||||||
local spooldest="90000_${combined}_checkzfs_external"
|
local spooldest="100000_${combined}_checkzfs_external"
|
||||||
|
|
||||||
log "Führe checkzfs aus..."
|
log "Führe checkzfs aus..."
|
||||||
{
|
{
|
||||||
echo "<<<local>>>"
|
echo "<<<local>>>"
|
||||||
"$checkzfs_cmd" \
|
"$checkzfs_cmd" \
|
||||||
--source root@"${SOURCEHOST}:${SOURCEPORT}" \
|
--source ${SOURCEUSER}@"${SOURCEHOST}:${SOURCEPORT}" \
|
||||||
--filter "$filter" \
|
--filter "$filter" \
|
||||||
--replicafilter "^${ZFSTRGT}" \
|
--replicafilter "^${ZFSTRGT}" \
|
||||||
--prefix "$checkzfs_prefix" \
|
--prefix "$checkzfs_prefix" \
|
||||||
@@ -405,7 +780,7 @@ send_checkzfs_external() {
|
|||||||
--output checkmk
|
--output checkmk
|
||||||
} > "$spoolfile"
|
} > "$spoolfile"
|
||||||
|
|
||||||
if scp -P "$ECHECKZFS_PORT" "$spoolfile" root@"$ECHECKZFS_HOST":/var/lib/check_mk_agent/spool/"$spooldest"; then
|
if scp -P "$ECHECKZFS_PORT" "$spoolfile" ${ECHECKZFS_USER}@"$ECHECKZFS_HOST":/var/lib/check_mk_agent/spool/"$spooldest"; then
|
||||||
log "Spool-Datei erfolgreich übertragen an $ECHECKZFS_HOST:$spooldest"
|
log "Spool-Datei erfolgreich übertragen an $ECHECKZFS_HOST:$spooldest"
|
||||||
else
|
else
|
||||||
log "Fehler beim Übertragen der Spool-Datei an $ECHECKZFS_HOST"
|
log "Fehler beim Übertragen der Spool-Datei an $ECHECKZFS_HOST"
|
||||||
@@ -413,36 +788,133 @@ send_checkzfs_external() {
|
|||||||
|
|
||||||
rm -f "$spoolfile"
|
rm -f "$spoolfile"
|
||||||
}
|
}
|
||||||
|
wait() {
|
||||||
|
echo
|
||||||
|
echo "###########################################"
|
||||||
|
echo "# Das Backup startet in 60 Sekunden... #"
|
||||||
|
echo "# Drücke [Enter], um sofort fortzufahren, #"
|
||||||
|
echo "# oder warte, um automatisch zu starten. #"
|
||||||
|
echo "###########################################"
|
||||||
|
read -t 60 -p "Fortfahren (Enter drücken) oder warten... " input
|
||||||
|
if [[ $? -eq 0 ]]; then
|
||||||
|
log "Press ENTER to continue."
|
||||||
|
else
|
||||||
|
log "No press ENTER, wait for 60 Sec.."
|
||||||
|
sleep 60
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
set_dynamic_route() {
|
||||||
|
local target="$SOURCEHOST"
|
||||||
|
local gateway="$DDNS_GATEWAY"
|
||||||
|
local dns_server="$DDNS_SERVER"
|
||||||
|
local current_ip
|
||||||
|
|
||||||
|
if [[ -z "$target" || -z "$gateway" ]]; then
|
||||||
|
log "Fehler: SOURCEHOST oder DDNS_GATEWAY nicht gesetzt"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Ist SOURCEHOST bereits eine IPv4- oder IPv6-Adresse?
|
||||||
|
if [[ "$target" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ || "$target" == *:* ]]; then
|
||||||
|
current_ip="$target"
|
||||||
|
log "SOURCEHOST ist bereits eine IP-Adresse: $current_ip"
|
||||||
|
else
|
||||||
|
log "Setze temporäre Route zu DNS-Server $dns_server via $gateway..."
|
||||||
|
|
||||||
|
case "$(uname -s)" in
|
||||||
|
Linux)
|
||||||
|
ip route | grep -q "^$dns_server" || \
|
||||||
|
ip route add "$dns_server" via "$gateway"
|
||||||
|
;;
|
||||||
|
FreeBSD)
|
||||||
|
route -n get "$dns_server" >/dev/null 2>&1 || \
|
||||||
|
route add -host "$dns_server" "$gateway"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
log "Löse IP von $target über DNS $dns_server..."
|
||||||
|
current_ip=$(dig +short @"$dns_server" "$target" | awk 'NF {print; exit}')
|
||||||
|
|
||||||
|
if [[ -z "$current_ip" ]]; then
|
||||||
|
log "Fehler: Konnte IP für $target nicht auflösen"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "Ermittelte IP: $current_ip – setze Route via $gateway..."
|
||||||
|
|
||||||
|
case "$(uname -s)" in
|
||||||
|
Linux)
|
||||||
|
ip route | grep -q "^$current_ip" || \
|
||||||
|
ip route add "$current_ip" via "$gateway"
|
||||||
|
;;
|
||||||
|
FreeBSD)
|
||||||
|
route -n get "$current_ip" >/dev/null 2>&1 || \
|
||||||
|
route add -host "$current_ip" "$gateway"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
log "Nicht unterstütztes Betriebssystem: $(uname -s)"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
log "Route erfolgreich gesetzt: $current_ip via $gateway"
|
||||||
|
}
|
||||||
# Main execution:
|
# Main execution:
|
||||||
if [[ $# -eq 0 ]]; then
|
if [[ $# -eq 0 ]]; then
|
||||||
if [[ -n "$CONFIG_FILE" ]]; then
|
if [[ -n "$CONFIG_FILE" ]]; then
|
||||||
log "Backup-Routine startet in 60 Sekunden..."
|
wait
|
||||||
sleep 60
|
|
||||||
#log "Starting full backup routine..."
|
|
||||||
log "Running full backup using configuration file: $CONFIG_FILE"
|
log "Running full backup using configuration file: $CONFIG_FILE"
|
||||||
|
|
||||||
|
if [[ "${DYNROUTE,,}" == "yes" ]]; then
|
||||||
|
log "DYNROUTE ist aktiviert – setze dynamische Route für $SOURCEHOST..."
|
||||||
|
set_dynamic_route
|
||||||
|
else
|
||||||
|
log "DYNROUTE ist deaktiviert oder nicht gesetzt."
|
||||||
|
fi
|
||||||
|
|
||||||
write_zsync_config
|
write_zsync_config
|
||||||
run_zsync
|
run_zsync
|
||||||
|
|
||||||
if [[ "${BACKUPSERVER,,}" == "yes" ]]; then
|
if [[ "${BACKUPSERVER,,}" == "yes" ]]; then
|
||||||
log "BACKUPSERVER ist aktiviert, führe Backup aus..."
|
log "BACKUPSERVER ist aktiviert, führe Backup aus..."
|
||||||
run_maintenance
|
|
||||||
run_pbs_backup
|
run_pbs_backup
|
||||||
else
|
run_maintenance
|
||||||
|
run_pbs_log_clear
|
||||||
|
run_pve_log_clear
|
||||||
|
else
|
||||||
log "BACKUPSERVER ist nicht aktiviert (BACKUPSERVER=$BACKUPSERVER), überspringe Backup."
|
log "BACKUPSERVER ist nicht aktiviert (BACKUPSERVER=$BACKUPSERVER), überspringe Backup."
|
||||||
fi
|
fi
|
||||||
run_remote_updates
|
run_remote_updates
|
||||||
|
if [[ "${EPIGGYBACK,,}" == "yes" ]]; then
|
||||||
|
send_piggyback_external
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ "${ECHECKZFS,,}" == "yes" ]]; then
|
||||||
|
send_checkzfs_external
|
||||||
|
fi
|
||||||
shutdown_now
|
shutdown_now
|
||||||
else
|
else
|
||||||
usage
|
usage
|
||||||
fi
|
fi
|
||||||
else
|
else
|
||||||
|
# Funktionen die keine Config brauchen
|
||||||
|
CONFIG_FREE_FUNCTIONS=(help detect_os detect_host_type zfs_replace wait_replace set_wol_g_enabled run_scrub_stop)
|
||||||
|
|
||||||
case "$1" in
|
case "$1" in
|
||||||
help)
|
help)
|
||||||
declare -F | awk '{print $3}' | grep -v "^_" | grep -v "^main$"
|
declare -F | awk '{print $3}' | grep -v "^_" | grep -v "^main$"
|
||||||
;;
|
;;
|
||||||
*)
|
*)
|
||||||
if declare -F "$1" >/dev/null 2>&1; then
|
if declare -F "$1" >/dev/null 2>&1; then
|
||||||
|
config_required=true
|
||||||
|
for fn in "${CONFIG_FREE_FUNCTIONS[@]}"; do
|
||||||
|
[[ "$1" == "$fn" ]] && config_required=false && break
|
||||||
|
done
|
||||||
|
if [[ "$config_required" == true && -z "${SOURCEHOST:-}" ]]; then
|
||||||
|
log "Funktion '$1' benötigt eine Config. Aufruf: $0 -c /etc/miyagi-backup/backup.conf $1"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
"$@"
|
"$@"
|
||||||
else
|
else
|
||||||
log "Function $1 not found."
|
log "Function $1 not found."
|
||||||
|
|||||||
-220
@@ -1,220 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
set -euo pipefail
|
|
||||||
IFS=$'\n\t'
|
|
||||||
|
|
||||||
PERMITROOT_YES_HOSTS=()
|
|
||||||
LOG() {
|
|
||||||
echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*"
|
|
||||||
}
|
|
||||||
|
|
||||||
CONFIG_FILE="${1:-}"
|
|
||||||
|
|
||||||
if [[ -z "$CONFIG_FILE" ]]; then
|
|
||||||
LOG "Keine Konfigurationsdatei übergeben."
|
|
||||||
echo "Usage: $0 /pfad/zur/config"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ ! -f "$CONFIG_FILE" ]]; then
|
|
||||||
LOG "Konfigurationsdatei nicht gefunden: $CONFIG_FILE"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
if ! bash -n "$CONFIG_FILE"; then
|
|
||||||
LOG "Syntaxfehler in der Konfigurationsdatei!"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
source "$CONFIG_FILE"
|
|
||||||
|
|
||||||
REQUIRED_VARS=(
|
|
||||||
SOURCEPORT
|
|
||||||
BACKUPSERVER
|
|
||||||
ZSYNC
|
|
||||||
MAINTDAY
|
|
||||||
SHUTDOWN
|
|
||||||
UPDATES
|
|
||||||
SOURCEHOST
|
|
||||||
PBSHOST
|
|
||||||
BACKUPSTORE
|
|
||||||
BACKUPSTOREPBS
|
|
||||||
BACKUPEXCLUDE
|
|
||||||
REPLEXCLUDE
|
|
||||||
)
|
|
||||||
|
|
||||||
MISSING=()
|
|
||||||
for var in "${REQUIRED_VARS[@]}"; do
|
|
||||||
if ! declare -p "$var" &>/dev/null || [[ -z "${!var}" ]]; then
|
|
||||||
MISSING+=("$var")
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
if [[ ${#MISSING[@]} -gt 0 ]]; then
|
|
||||||
LOG " Fehlende Variablen in Konfiguration:"
|
|
||||||
for v in "${MISSING[@]}"; do echo " - $v"; done
|
|
||||||
exit 1
|
|
||||||
else
|
|
||||||
LOG " Alle Variablen gesetzt."
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ ${#MISSING[@]} -gt 0 ]]; then
|
|
||||||
LOG " Fehlende Variablen in Konfiguration:"
|
|
||||||
for v in "${MISSING[@]}"; do echo " - $v"; done
|
|
||||||
exit 1
|
|
||||||
else
|
|
||||||
LOG " Alle Variablen gesetzt."
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Prüfung, ob SHUTDOWN auch tatsächlich in der Datei definiert wurde
|
|
||||||
if ! grep -qE '^\s*SHUTDOWN\s*=' "$CONFIG_FILE"; then
|
|
||||||
LOG "Hinweis: Die Variable 'SHUTDOWN' ist zwar gesetzt, aber nicht direkt in der Konfigurationsdatei '$CONFIG_FILE' definiert."
|
|
||||||
LOG " → Bitte prüfen, ob dies gewollt ist oder von einer übergeordneten Quelle stammt."
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Anzeigen, ob SHUTDOWN aktiv ist
|
|
||||||
LOG "SHUTDOWN-Status: ${SHUTDOWN:-nicht gesetzt}"
|
|
||||||
|
|
||||||
case "${SHUTDOWN,,}" in
|
|
||||||
yes)
|
|
||||||
LOG "Nach dem Backup wird das System heruntergefahren."
|
|
||||||
;;
|
|
||||||
no)
|
|
||||||
LOG "Kein automatischer Shutdown nach dem Backup."
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
LOG "Unbekannter SHUTDOWN-Wert: '${SHUTDOWN}' , erwartet: 'yes' oder 'no'"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
check_ssh_connection() {
|
|
||||||
local host=$1
|
|
||||||
LOG "Prüfe SSH-Verbindung zu $host ..."
|
|
||||||
if ssh -p "$SOURCEPORT" -o BatchMode=yes -o ConnectTimeout=5 "$host" "echo OK" 2>/dev/null | grep -q OK; then
|
|
||||||
LOG " SSH-Verbindung zu $host erfolgreich."
|
|
||||||
return 0
|
|
||||||
else
|
|
||||||
LOG " SSH-Verbindung zu $host fehlgeschlagen!"
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
check_and_copy_ssh_key() {
|
|
||||||
local host=$1
|
|
||||||
local keyfile="$HOME/.ssh/id_rsa.pub"
|
|
||||||
|
|
||||||
if [[ ! -f "$keyfile" ]]; then
|
|
||||||
LOG " Lokaler SSH-Public-Key ($keyfile) nicht gefunden!"
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
local pubkey
|
|
||||||
pubkey=$(<"$keyfile")
|
|
||||||
|
|
||||||
LOG " Prüfe, ob SSH-Key auf $host autorisiert ist ..."
|
|
||||||
|
|
||||||
if ssh -p "$SOURCEPORT" "$host" "grep -qF '$pubkey' ~/.ssh/authorized_keys" 2>/dev/null; then
|
|
||||||
LOG " SSH-Key ist bereits auf $host hinterlegt."
|
|
||||||
else
|
|
||||||
LOG " SSH-Key nicht auf $host vorhanden."
|
|
||||||
|
|
||||||
read -rp " Möchtest du den SSH-Key jetzt via ssh-copy-id übertragen? [j/N] " ans
|
|
||||||
if [[ "$ans" =~ ^[JjYy]$ ]]; then
|
|
||||||
ssh-copy-id -p "$SOURCEPORT" "$host"
|
|
||||||
else
|
|
||||||
LOG " SSH-Key nicht übertragen."
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
check_sshd_config_recommendation() {
|
|
||||||
local host=$1
|
|
||||||
LOG " Prüfe sshd_config auf $host bzgl. 'PermitRootLogin'..."
|
|
||||||
|
|
||||||
local current_setting
|
|
||||||
current_setting=$(ssh -p "$SOURCEPORT" "$host" "grep -i '^PermitRootLogin' /etc/ssh/sshd_config" 2>/dev/null || echo "")
|
|
||||||
|
|
||||||
if [[ -z "$current_setting" ]]; then
|
|
||||||
LOG " Keine explizite 'PermitRootLogin'-Einstellung gefunden."
|
|
||||||
elif echo "$current_setting" | grep -qi "PermitRootLogin yes"; then
|
|
||||||
LOG " Aktuell ist PermitRootLogin=YES erlaubt auf $host"
|
|
||||||
LOG " Empfehlung: auf 'prohibit-password' umstellen."
|
|
||||||
PERMITROOT_YES_HOSTS+=("$host")
|
|
||||||
else
|
|
||||||
LOG " PermitRootLogin-Einstellung ist: $current_setting"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
check_pveversion() {
|
|
||||||
local host=$1
|
|
||||||
LOG "Prüfe PVE-Version auf $host ..."
|
|
||||||
if ssh -p "$SOURCEPORT" "$host" "command -v pveversion >/dev/null"; then
|
|
||||||
ssh -p "$SOURCEPORT" "$host" "pveversion" | while read -r line; do
|
|
||||||
LOG " $host: $line"
|
|
||||||
done
|
|
||||||
else
|
|
||||||
LOG " 'pveversion' ist auf $host nicht verfügbar – kein Proxmox?"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
check_pbs_version() {
|
|
||||||
local host=$1
|
|
||||||
local port=$2
|
|
||||||
LOG "Prüfe PBS-Version auf $host ..."
|
|
||||||
if ssh -p "$port" "$host" "command -v proxmox-backup-manager >/dev/null"; then
|
|
||||||
ssh -p "$port" "$host" "proxmox-backup-manager version" | while read -r line; do
|
|
||||||
LOG " $host: $line"
|
|
||||||
done
|
|
||||||
else
|
|
||||||
LOG " 'proxmox-backup-manager' ist auf $host nicht verfügbar – kein PBS?"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
run_host_check() {
|
|
||||||
local host=$1
|
|
||||||
local type=${2:-pve}
|
|
||||||
local port=$SOURCEPORT
|
|
||||||
local pbsport=$PBSPORT
|
|
||||||
|
|
||||||
LOG ""
|
|
||||||
LOG "=== Prüfung für Host: $host (Typ: $type) ==="
|
|
||||||
|
|
||||||
if check_ssh_connection "$host" "$port"; then
|
|
||||||
check_and_copy_ssh_key "$host"
|
|
||||||
check_sshd_config_recommendation "$host"
|
|
||||||
|
|
||||||
if [[ "$type" == "pve" ]]; then
|
|
||||||
check_pveversion "$host" "$port"
|
|
||||||
elif [[ "$type" == "pbs" ]]; then
|
|
||||||
check_pbs_version "$host" "$pbsport"
|
|
||||||
else
|
|
||||||
LOG " Unbekannter Host-Typ: $type"
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
echo ""
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
run_host_check "$SOURCEHOST" pve
|
|
||||||
|
|
||||||
if [[ "$BACKUPSERVER" == "yes" ]]; then
|
|
||||||
run_host_check "$PBSHOST" pbs
|
|
||||||
else
|
|
||||||
LOG " BACKUPSERVER ist deaktiviert PBSHOST wird übersprungen."
|
|
||||||
fi
|
|
||||||
|
|
||||||
# NACHLAUF: Frage zur automatischen Änderung von PermitRootLogin
|
|
||||||
if [[ ${#PERMITROOT_YES_HOSTS[@]} -gt 0 ]]; then
|
|
||||||
echo ""
|
|
||||||
echo " Die folgenden Hosts erlauben derzeit root-Login per Passwort:"
|
|
||||||
for h in "${PERMITROOT_YES_HOSTS[@]}"; do
|
|
||||||
echo " - $h"
|
|
||||||
done
|
|
||||||
|
|
||||||
read -rp " Möchtest du PermitRootLogin auf diesen Hosts auf 'prohibit-password' setzen und sshd neustarten? [j/N] " change_ans
|
|
||||||
if [[ "$change_ans" =~ ^[JjYy]$ ]]; then
|
|
||||||
for h in "${PERMITROOT_YES_HOSTS[@]}"; do
|
|
||||||
echo "Ändere sshd_config auf $h ..."
|
|
||||||
ssh -p "$SOURCEPORT" "$h" "sed -i 's/^PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config && systemctl reload sshd && echo '✅ sshd auf $h neu geladen.' || echo '❌ Fehler bei $h'"
|
|
||||||
done
|
|
||||||
else
|
|
||||||
echo " Änderung von sshd_config übersprungen."
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
@@ -1,109 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
set -euo pipefail
|
|
||||||
IFS=$'\n\t'
|
|
||||||
|
|
||||||
log() {
|
|
||||||
echo "[INFO] $*"
|
|
||||||
}
|
|
||||||
|
|
||||||
error_exit() {
|
|
||||||
echo "[ERROR] $*" >&2
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
sanitize_value() {
|
|
||||||
echo "$1" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//'
|
|
||||||
}
|
|
||||||
|
|
||||||
load_config() {
|
|
||||||
local config_file="$1"
|
|
||||||
if [[ ! -f "$config_file" ]]; then
|
|
||||||
error_exit "Konfigurationsdatei nicht gefunden: $config_file"
|
|
||||||
fi
|
|
||||||
|
|
||||||
log "Lade und bereinige Konfigurationsdatei: $config_file"
|
|
||||||
while IFS='=' read -r key value; do
|
|
||||||
# nur gültige Variablennamen parsen
|
|
||||||
if [[ "$key" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]]; then
|
|
||||||
# Kommentar nach Wert entfernen
|
|
||||||
value="${value%%#*}"
|
|
||||||
value="$(sanitize_value "$value")"
|
|
||||||
# Variable setzen (für den write_new_config Zugriff)
|
|
||||||
eval "$key=\"$value\""
|
|
||||||
fi
|
|
||||||
done < "$config_file"
|
|
||||||
}
|
|
||||||
|
|
||||||
write_new_config() {
|
|
||||||
local out_file="$1"
|
|
||||||
|
|
||||||
cat > "$out_file" <<EOF
|
|
||||||
#Edit all Variables for best Experience
|
|
||||||
|
|
||||||
UPDATES='${UPDATES}' # Proxmox VE und PBS Updates nach dem Lauf
|
|
||||||
SHUTDOWN='${SHUTDOWN}' # System nach Ausführung herunterfahren?
|
|
||||||
|
|
||||||
# Quelle (Proxmox VE System, das gesichert wird)
|
|
||||||
SOURCEPORT='${SOURCEPORT}' # SSH-Port, normalerweise 22
|
|
||||||
SOURCEHOST='${SOURCEHOST}' # IP des Quell-Proxmox-Servers
|
|
||||||
|
|
||||||
# Replikation (ZFS)
|
|
||||||
ZFSROOT='${ZFSROOT}' # Erstes Dataset vom Quellsystem
|
|
||||||
ZFSSECOND='${ZFSSECOND}' # Optional zweites Dataset
|
|
||||||
ZFSTRGT='${ZFSTRGT}' # Zielpfad für Replikation
|
|
||||||
|
|
||||||
# ZFS Zsync Replikation
|
|
||||||
ZSYNC='${ZSYNC}' # ZSYNC aktivieren (ja/nein)
|
|
||||||
ZPUSHTAG='${ZPUSHTAG}' # Benutzer-Tag für ZFS
|
|
||||||
ZPUSHMINKEEP='${ZPUSHMINKEEP}' # Mindestens zu behaltende Snapshots
|
|
||||||
ZPUSHKEEP='${ZPUSHKEEP}' # Snapshots mit dem Tag, die behalten werden
|
|
||||||
ZPUSHLABEL='${ZPUSHLABEL}' # Suffix für Snapshot-Autoengine
|
|
||||||
ZPUSHFILTER='${ZPUSHFILTER}' # Weitere Filter (leer lassen oder Muster wie daily| weekly etc.)
|
|
||||||
|
|
||||||
# Backup mit Proxmox Backup Server
|
|
||||||
BACKUPSERVER='${BACKUPSERVER}' # Backup via PBS aktivieren?
|
|
||||||
MAINTDAY='${MAINTDAY}' # Wartungstag (1=Mo, 7=So)
|
|
||||||
PBSHOST='${PBSHOST}' # IP des Proxmox Backup Servers
|
|
||||||
BACKUPSTORE='${BACKUPSTORE}' # Datastore auf Quell-Proxmox
|
|
||||||
BACKUPSTOREPBS='${BACKUPSTOREPBS}' # Datastore auf PBS
|
|
||||||
BACKUPEXCLUDE='${BACKUPEXCLUDE}' # VM/CT-IDs, die vom Backup ausgeschlossen sind
|
|
||||||
REPLEXCLUDE=\$BACKUPEXCLUDE # Diese auch von Replikation ausschließen
|
|
||||||
|
|
||||||
# Zusätzliche Monitoring-Ziele
|
|
||||||
# External Piggyback Host
|
|
||||||
EPIGGYBACK='${EPIGGYBACK}' # Piggyback-Daten an Monitoring-Ziel senden?
|
|
||||||
EPIGGYBACK_PORT='${EPIGGYBACK_PORT}' # SSH-Port für EPIGGYBACK_HOST
|
|
||||||
EPIGGYBACK_HOST='${EPIGGYBACK_HOST}' # Monitoring-Zielhost für Piggyback
|
|
||||||
|
|
||||||
# External Checkzfs Host
|
|
||||||
ECHECKZFS='${ECHECKZFS}' # check_zfs-Output an Monitoring-Ziel senden?
|
|
||||||
ECHECKZFS_PORT='${ECHECKZFS_PORT}' # SSH-Port für ECHECKZFS_HOST
|
|
||||||
ECHECKZFS_HOST='${ECHECKZFS_HOST}' # Monitoring-Zielhost für check_zfs
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
if [[ $# -ne 1 ]]; then
|
|
||||||
echo "Usage: $0 <configfile>"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
ORIGINAL="$1"
|
|
||||||
|
|
||||||
read -rp "Soll die aktuelle Datei als Backup gesichert werden (umbenennen)? (ja/nein): " RESPONSE
|
|
||||||
RESPONSE="${RESPONSE,,}"
|
|
||||||
|
|
||||||
if [[ "$RESPONSE" == "ja" || "$RESPONSE" == "j" ]]; then
|
|
||||||
BACKUPFILE="${ORIGINAL}.bak"
|
|
||||||
mv "$ORIGINAL" "$BACKUPFILE"
|
|
||||||
log "Originaldatei wurde umbenannt in: $BACKUPFILE"
|
|
||||||
CONFIG_TO_READ="$BACKUPFILE"
|
|
||||||
else
|
|
||||||
log "Keine Sicherung der Originaldatei durchgeführt. Original bleibt unverändert."
|
|
||||||
CONFIG_TO_READ="$ORIGINAL"
|
|
||||||
fi
|
|
||||||
|
|
||||||
NEWFILE="${ORIGINAL}.convert"
|
|
||||||
load_config "$CONFIG_TO_READ"
|
|
||||||
write_new_config "$NEWFILE"
|
|
||||||
log "Neue Konfiguration geschrieben in: $NEWFILE"
|
|
||||||
@@ -0,0 +1,293 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# miyagi-backup Installer v3
|
||||||
|
set -uo pipefail
|
||||||
|
|
||||||
|
FORCE_YES=0
|
||||||
|
DRY_RUN=0
|
||||||
|
DEV_MODE=0
|
||||||
|
CONFIG_FILE=""
|
||||||
|
INSTALL_DIR="/opt/miyagi-backup"
|
||||||
|
CONFIG_DIR="/etc/miyagi-backup"
|
||||||
|
HOOKS_DIR="${CONFIG_DIR}/hooks.d/pre-shutdown"
|
||||||
|
SYMLINK="/usr/local/bin/miyagi-backup"
|
||||||
|
|
||||||
|
GITHUB_BASE="https://raw.githubusercontent.com/bashclub/miyagi-backup/main"
|
||||||
|
GITEA_BASE="https://gitea.perlbach24.de/scripte/miyagi-backup/raw/branch/main"
|
||||||
|
|
||||||
|
CHECKZFS_URL="https://gitea.perlbach24.de/scripte/check-zfs-replication/raw/branch/main/checkzfs.py"
|
||||||
|
CHECK_SNAPSHOT_AGE_URL="https://gitea.perlbach24.de/scripte/check-zfs-replication/raw/branch/main/check-snapshot-age"
|
||||||
|
CLEANSNAPS_URL="https://raw.githubusercontent.com/bashclub/zfs-housekeeping/refs/heads/main/cleansnaps.sh"
|
||||||
|
DISK_SMART_INFO_URL="https://raw.githubusercontent.com/bashclub/checkmk-smart/main/disk_smart_info.py"
|
||||||
|
|
||||||
|
RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'; NC='\033[0m'
|
||||||
|
ok() { echo -e "${GREEN}[OK]${NC} $*"; }
|
||||||
|
info() { echo -e "${BLUE}[..]${NC} $*"; }
|
||||||
|
warn() { echo -e "${YELLOW}[!!]${NC} $*"; }
|
||||||
|
die() { echo -e "${RED}[ERR]${NC} $*" >&2; exit 1; }
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: $0 [OPTIONS]
|
||||||
|
|
||||||
|
-c <file> Konfigurationsdatei laden (für SSH-Check + ZFS-Tagging)
|
||||||
|
--yes Keine Rückfragen
|
||||||
|
--dry-run Zeigt nur was gemacht würde
|
||||||
|
--dev Installiere von Gitea (dev) statt GitHub (stable)
|
||||||
|
--help Diese Hilfe
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
parse_args() {
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case "$1" in
|
||||||
|
-c) CONFIG_FILE="$2"; shift 2 ;;
|
||||||
|
--yes) FORCE_YES=1; shift ;;
|
||||||
|
--dry-run) DRY_RUN=1; shift ;;
|
||||||
|
--dev) DEV_MODE=1; shift ;;
|
||||||
|
--help) usage ;;
|
||||||
|
*) die "Unbekannter Parameter: $1" ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ -n "$CONFIG_FILE" ]]; then
|
||||||
|
[[ ! -f "$CONFIG_FILE" ]] && die "Konfigurationsdatei nicht gefunden: $CONFIG_FILE"
|
||||||
|
bash -n "$CONFIG_FILE" || die "Syntaxfehler in $CONFIG_FILE"
|
||||||
|
source "$CONFIG_FILE"
|
||||||
|
SOURCEUSER="${SOURCEUSER:-root}"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
run() {
|
||||||
|
if [[ "$DRY_RUN" -eq 1 ]]; then
|
||||||
|
echo "[DRY-RUN] $*"
|
||||||
|
else
|
||||||
|
"$@"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
confirm() {
|
||||||
|
[[ "$FORCE_YES" -eq 1 ]] && return 0
|
||||||
|
while true; do
|
||||||
|
read -rp "$1 [j/N]: " yn
|
||||||
|
case "$yn" in
|
||||||
|
[JjYy]*) return 0 ;;
|
||||||
|
[Nn]*|"") return 1 ;;
|
||||||
|
*) echo "Bitte j oder n eingeben." ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
ensure_dialog() {
|
||||||
|
if ! command -v dialog &>/dev/null; then
|
||||||
|
info "Installiere dialog..."
|
||||||
|
run apt-get install -y -qq dialog || die "dialog konnte nicht installiert werden"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
get_base_url() {
|
||||||
|
[[ "$DEV_MODE" -eq 1 ]] && echo "$GITEA_BASE" || echo "$GITHUB_BASE"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Installationsschritte ─────────────────────────────────────────────────────
|
||||||
|
|
||||||
|
install_miyagi() {
|
||||||
|
local base
|
||||||
|
base="$(get_base_url)"
|
||||||
|
local source_label
|
||||||
|
[[ "$DEV_MODE" -eq 1 ]] && source_label="Gitea (dev)" || source_label="GitHub (stable)"
|
||||||
|
|
||||||
|
info "Installiere miyagi-backup von $source_label..."
|
||||||
|
|
||||||
|
run mkdir -p "$INSTALL_DIR"
|
||||||
|
run mkdir -p "$CONFIG_DIR"
|
||||||
|
run mkdir -p "$HOOKS_DIR"
|
||||||
|
|
||||||
|
run curl -fsSL "${base}/miyagi-backup.sh" -o "${INSTALL_DIR}/miyagi-backup.sh"
|
||||||
|
run chmod +x "${INSTALL_DIR}/miyagi-backup.sh"
|
||||||
|
|
||||||
|
# config.example nur holen, nie bestehende Config überschreiben
|
||||||
|
run curl -fsSL "${base}/config.example" -o "${CONFIG_DIR}/config.example"
|
||||||
|
|
||||||
|
# Example-Hook kopieren (nicht ausführbar = inaktiv bis User chmod +x setzt)
|
||||||
|
run curl -fsSL "${base}/hooks.d/pre-shutdown/example-hook.sh" \
|
||||||
|
-o "${HOOKS_DIR}/example-hook.sh"
|
||||||
|
|
||||||
|
# Symlink
|
||||||
|
run ln -sf "${INSTALL_DIR}/miyagi-backup.sh" "$SYMLINK"
|
||||||
|
|
||||||
|
ok "miyagi-backup installiert: ${INSTALL_DIR}/miyagi-backup.sh"
|
||||||
|
ok "Symlink: $SYMLINK"
|
||||||
|
ok "Config-Verzeichnis: $CONFIG_DIR"
|
||||||
|
ok "Hook-Verzeichnis: $HOOKS_DIR"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_checkzfs() {
|
||||||
|
info "Installiere checkzfs..."
|
||||||
|
run curl -fsSL "$CHECKZFS_URL" -o /usr/local/bin/checkzfs
|
||||||
|
run chmod +x /usr/local/bin/checkzfs
|
||||||
|
ok "checkzfs installiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_check_snapshot_age() {
|
||||||
|
info "Installiere check-snapshot-age..."
|
||||||
|
run curl -fsSL "$CHECK_SNAPSHOT_AGE_URL" -o /usr/local/bin/check-snapshot-age
|
||||||
|
run chmod +x /usr/local/bin/check-snapshot-age
|
||||||
|
ok "check-snapshot-age installiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_cleansnaps() {
|
||||||
|
info "Installiere cleansnaps..."
|
||||||
|
run curl -fsSL "$CLEANSNAPS_URL" -o /usr/local/bin/cleansnaps
|
||||||
|
run chmod +x /usr/local/bin/cleansnaps
|
||||||
|
ok "cleansnaps installiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_disk_smart_info() {
|
||||||
|
info "Installiere disk_smart_info..."
|
||||||
|
run mkdir -p /usr/lib/check_mk_agent/plugins
|
||||||
|
run curl -fsSL "$DISK_SMART_INFO_URL" -o /usr/lib/check_mk_agent/plugins/disk_smart_info
|
||||||
|
run chmod +x /usr/lib/check_mk_agent/plugins/disk_smart_info
|
||||||
|
ok "disk_smart_info installiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_ethtool() {
|
||||||
|
info "Installiere ethtool..."
|
||||||
|
run apt-get install -y -qq ethtool
|
||||||
|
ok "ethtool installiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
check_ssh() {
|
||||||
|
[[ -z "${SOURCEHOST:-}" ]] && warn "Kein SOURCEHOST in Config – SSH-Check übersprungen" && return
|
||||||
|
info "Teste SSH-Verbindung zu ${SOURCEUSER}@${SOURCEHOST}:${SOURCEPORT}..."
|
||||||
|
|
||||||
|
if ssh -p "${SOURCEPORT:-22}" -o BatchMode=yes -o ConnectTimeout=5 \
|
||||||
|
"${SOURCEUSER}@${SOURCEHOST}" "echo ok" &>/dev/null; then
|
||||||
|
ok "SSH-Verbindung via Schlüssel funktioniert"
|
||||||
|
else
|
||||||
|
warn "Keine schlüsselbasierte SSH-Verbindung möglich"
|
||||||
|
if confirm "SSH-Schlüssel jetzt auf ${SOURCEHOST} kopieren (ssh-copy-id)?"; then
|
||||||
|
run ssh-copy-id -p "${SOURCEPORT:-22}" "${SOURCEUSER}@${SOURCEHOST}"
|
||||||
|
ok "Schlüssel kopiert – bitte Installer erneut starten zum Verifizieren"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
select_zfs_pools() {
|
||||||
|
[[ -z "${SOURCEHOST:-}" ]] && warn "Kein SOURCEHOST – ZFS-Tagging übersprungen" && return
|
||||||
|
|
||||||
|
info "Lade ZFS-Datasets von ${SOURCEHOST}..."
|
||||||
|
local local_hostname remote_hostname tag_key tag_value
|
||||||
|
local_hostname="$(hostname -s)"
|
||||||
|
remote_hostname="$(ssh -p "${SOURCEPORT:-22}" "${SOURCEUSER}@${SOURCEHOST}" "hostname -s" 2>/dev/null)" \
|
||||||
|
|| { warn "SSH-Verbindung fehlgeschlagen – ZFS-Tagging übersprungen"; return; }
|
||||||
|
|
||||||
|
tag_key="bashclub:miyagi-${remote_hostname}-${local_hostname}"
|
||||||
|
tag_value="subvols"
|
||||||
|
|
||||||
|
mapfile -t pools < <(ssh -p "${SOURCEPORT:-22}" "${SOURCEUSER}@${SOURCEHOST}" \
|
||||||
|
"zfs list -H -o name" 2>/dev/null | \
|
||||||
|
grep -E '/(vm|subvol)-' | \
|
||||||
|
grep -viE 'repl|replica' | \
|
||||||
|
sed 's:/[^/]*$::' | \
|
||||||
|
sort -u)
|
||||||
|
|
||||||
|
if [[ ${#pools[@]} -eq 0 ]]; then
|
||||||
|
warn "Keine geeigneten ZFS-Datasets gefunden"
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
local options=()
|
||||||
|
for pool in "${pools[@]}"; do
|
||||||
|
local tag status
|
||||||
|
tag="$(ssh -p "${SOURCEPORT:-22}" "${SOURCEUSER}@${SOURCEHOST}" \
|
||||||
|
zfs get -H -o value "$tag_key" "$pool" 2>/dev/null)"
|
||||||
|
[[ "$tag" == "$tag_value" ]] && status="on" || status="off"
|
||||||
|
options+=("$pool" "" "$status")
|
||||||
|
done
|
||||||
|
|
||||||
|
local selected
|
||||||
|
selected=$(dialog --clear \
|
||||||
|
--backtitle "miyagi-backup Installer" \
|
||||||
|
--title "ZFS Pools taggen" \
|
||||||
|
--checklist "Datasets für Replikation auswählen:" 20 78 12 \
|
||||||
|
"${options[@]}" \
|
||||||
|
3>&1 1>&2 2>&3)
|
||||||
|
clear
|
||||||
|
[[ $? -ne 0 ]] && info "ZFS-Tagging abgebrochen" && return
|
||||||
|
|
||||||
|
local selected_array=()
|
||||||
|
read -ra selected_array <<< "$selected"
|
||||||
|
|
||||||
|
for pool in "${pools[@]}"; do
|
||||||
|
local is_selected=0
|
||||||
|
local prev_status="off"
|
||||||
|
for ((i=0; i<${#options[@]}; i+=3)); do
|
||||||
|
[[ "${options[i]}" == "$pool" ]] && prev_status="${options[i+2]}" && break
|
||||||
|
done
|
||||||
|
for sel in "${selected_array[@]}"; do
|
||||||
|
[[ "$sel" == "\"$pool\"" || "$sel" == "$pool" ]] && is_selected=1 && break
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ "$is_selected" -eq 1 && "$prev_status" == "off" ]]; then
|
||||||
|
info "Tagge $pool"
|
||||||
|
run ssh -p "${SOURCEPORT:-22}" "${SOURCEUSER}@${SOURCEHOST}" \
|
||||||
|
zfs set "${tag_key}=${tag_value}" "$pool"
|
||||||
|
elif [[ "$is_selected" -eq 0 && "$prev_status" == "on" ]]; then
|
||||||
|
info "Entferne Tag von $pool"
|
||||||
|
run ssh -p "${SOURCEPORT:-22}" "${SOURCEUSER}@${SOURCEHOST}" \
|
||||||
|
zfs inherit "$tag_key" "$pool"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
ok "ZFS-Tagging abgeschlossen"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Hauptmenü ─────────────────────────────────────────────────────────────────
|
||||||
|
|
||||||
|
main() {
|
||||||
|
[[ $EUID -ne 0 ]] && die "Bitte als root ausführen"
|
||||||
|
|
||||||
|
ensure_dialog
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo " ╔══════════════════════════════════════╗"
|
||||||
|
echo " ║ miyagi-backup Installer v3 ║"
|
||||||
|
echo " ╚══════════════════════════════════════╝"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
local choices
|
||||||
|
choices=$(dialog --clear \
|
||||||
|
--backtitle "miyagi-backup Installer v3" \
|
||||||
|
--title "Komponenten auswählen" \
|
||||||
|
--checklist "Was soll installiert werden?" 22 65 12 \
|
||||||
|
"miyagi" "miyagi-backup.sh + Verzeichnisse + Symlink" on \
|
||||||
|
"checkzfs" "checkzfs (ZFS-Replikationsprüfung)" on \
|
||||||
|
"snapage" "check-snapshot-age" on \
|
||||||
|
"cleansnaps" "cleansnaps (ZFS-Snapshot-Housekeeping)" on \
|
||||||
|
"smartinfo" "disk_smart_info (CheckMK Plugin)" on \
|
||||||
|
"ethtool" "ethtool (WOL-Unterstützung)" off \
|
||||||
|
"ssh" "SSH-Verbindung prüfen / Schlüssel kopieren" on \
|
||||||
|
"zfstag" "ZFS-Pools taggen (benötigt Config -c)" off \
|
||||||
|
3>&1 1>&2 2>&3)
|
||||||
|
clear
|
||||||
|
|
||||||
|
[[ $? -ne 0 ]] && echo "Abgebrochen." && exit 0
|
||||||
|
[[ -z "$choices" ]] && echo "Nichts ausgewählt." && exit 0
|
||||||
|
|
||||||
|
[[ "$choices" == *'"miyagi"'* || "$choices" == *'miyagi'* ]] && install_miyagi
|
||||||
|
[[ "$choices" == *'"checkzfs"'* || "$choices" == *'checkzfs'* ]] && install_checkzfs
|
||||||
|
[[ "$choices" == *'"snapage"'* || "$choices" == *'snapage'* ]] && install_check_snapshot_age
|
||||||
|
[[ "$choices" == *'"cleansnaps"'* || "$choices" == *'cleansnaps'* ]] && install_cleansnaps
|
||||||
|
[[ "$choices" == *'"smartinfo"'* || "$choices" == *'smartinfo'* ]] && install_disk_smart_info
|
||||||
|
[[ "$choices" == *'"ethtool"'* || "$choices" == *'ethtool'* ]] && install_ethtool
|
||||||
|
[[ "$choices" == *'"ssh"'* || "$choices" == *'ssh'* ]] && check_ssh
|
||||||
|
[[ "$choices" == *'"zfstag"'* || "$choices" == *'zfstag'* ]] && select_zfs_pools
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
ok "Installation abgeschlossen."
|
||||||
|
echo ""
|
||||||
|
}
|
||||||
|
|
||||||
|
parse_args "$@"
|
||||||
|
main
|
||||||
@@ -0,0 +1,168 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# miyagi-backup Updater v3
|
||||||
|
set -uo pipefail
|
||||||
|
|
||||||
|
DEV_MODE=0
|
||||||
|
INSTALL_DIR="/opt/miyagi-backup"
|
||||||
|
CONFIG_DIR="/etc/miyagi-backup"
|
||||||
|
HOOKS_DIR="${CONFIG_DIR}/hooks.d/pre-shutdown"
|
||||||
|
SYMLINK="/usr/local/bin/miyagi-backup"
|
||||||
|
|
||||||
|
GITHUB_BASE="https://raw.githubusercontent.com/bashclub/miyagi-backup/main"
|
||||||
|
GITEA_BASE="https://gitea.perlbach24.de/scripte/miyagi-backup/raw/branch/main"
|
||||||
|
|
||||||
|
CHECKZFS_URL="https://gitea.perlbach24.de/scripte/check-zfs-replication/raw/branch/main/checkzfs.py"
|
||||||
|
CHECK_SNAPSHOT_AGE_URL="https://gitea.perlbach24.de/scripte/check-zfs-replication/raw/branch/main/check-snapshot-age"
|
||||||
|
CLEANSNAPS_URL="https://raw.githubusercontent.com/bashclub/zfs-housekeeping/refs/heads/main/cleansnaps.sh"
|
||||||
|
DISK_SMART_INFO_URL="https://raw.githubusercontent.com/bashclub/checkmk-smart/main/disk_smart_info.py"
|
||||||
|
|
||||||
|
RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'; NC='\033[0m'
|
||||||
|
ok() { echo -e "${GREEN}[OK]${NC} $*"; }
|
||||||
|
info() { echo -e "${BLUE}[..]${NC} $*"; }
|
||||||
|
warn() { echo -e "${YELLOW}[!!]${NC} $*"; }
|
||||||
|
die() { echo -e "${RED}[ERR]${NC} $*" >&2; exit 1; }
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: $0 [--dev]
|
||||||
|
|
||||||
|
--dev Update von Gitea (dev) statt GitHub (stable)
|
||||||
|
--help Diese Hilfe
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
parse_args() {
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case "$1" in
|
||||||
|
--dev) DEV_MODE=1; shift ;;
|
||||||
|
--help) usage ;;
|
||||||
|
*) die "Unbekannter Parameter: $1" ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
get_base_url() {
|
||||||
|
[[ "$DEV_MODE" -eq 1 ]] && echo "$GITEA_BASE" || echo "$GITHUB_BASE"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Self-Update ───────────────────────────────────────────────────────────────
|
||||||
|
|
||||||
|
self_update() {
|
||||||
|
local base
|
||||||
|
base="$(get_base_url)"
|
||||||
|
local self="${INSTALL_DIR}/miyagi-update.sh"
|
||||||
|
|
||||||
|
if [[ -f "$self" ]] && command -v curl >/dev/null; then
|
||||||
|
curl -fsSL "${base}/miyagi-update.sh" -o "${self}.new" 2>/dev/null \
|
||||||
|
&& mv "${self}.new" "$self" \
|
||||||
|
&& chmod +x "$self" \
|
||||||
|
&& info "Updater aktualisiert" \
|
||||||
|
|| rm -f "${self}.new"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── miyagi-backup.sh updaten ─────────────────────────────────────────────────
|
||||||
|
|
||||||
|
update_miyagi() {
|
||||||
|
local base
|
||||||
|
base="$(get_base_url)"
|
||||||
|
local source_label
|
||||||
|
[[ "$DEV_MODE" -eq 1 ]] && source_label="Gitea (dev)" || source_label="GitHub (stable)"
|
||||||
|
|
||||||
|
info "Aktualisiere miyagi-backup.sh von $source_label..."
|
||||||
|
|
||||||
|
if [[ ! -d "$INSTALL_DIR" ]]; then
|
||||||
|
warn "Installverzeichnis $INSTALL_DIR fehlt – bitte zuerst miyagi-install.sh ausführen"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
curl -fsSL "${base}/miyagi-backup.sh" -o "${INSTALL_DIR}/miyagi-backup.sh.new" || {
|
||||||
|
warn "Download fehlgeschlagen – miyagi-backup.sh bleibt unverändert"
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
mv "${INSTALL_DIR}/miyagi-backup.sh.new" "${INSTALL_DIR}/miyagi-backup.sh"
|
||||||
|
chmod +x "${INSTALL_DIR}/miyagi-backup.sh"
|
||||||
|
|
||||||
|
# Symlink sicherstellen
|
||||||
|
ln -sf "${INSTALL_DIR}/miyagi-backup.sh" "$SYMLINK"
|
||||||
|
|
||||||
|
# config.example aktualisieren (nie .conf überschreiben)
|
||||||
|
curl -fsSL "${base}/config.example" -o "${CONFIG_DIR}/config.example.new" 2>/dev/null \
|
||||||
|
&& mv "${CONFIG_DIR}/config.example.new" "${CONFIG_DIR}/config.example" \
|
||||||
|
|| warn "config.example konnte nicht aktualisiert werden"
|
||||||
|
|
||||||
|
# Hooks-Verzeichnis sicherstellen
|
||||||
|
mkdir -p "$HOOKS_DIR"
|
||||||
|
|
||||||
|
# Example-Hook aktualisieren (nicht ausführbar = bleibt inaktiv)
|
||||||
|
curl -fsSL "${base}/hooks.d/pre-shutdown/example-hook.sh" \
|
||||||
|
-o "${HOOKS_DIR}/example-hook.sh" 2>/dev/null \
|
||||||
|
&& info "example-hook.sh aktualisiert" \
|
||||||
|
|| warn "example-hook.sh konnte nicht aktualisiert werden"
|
||||||
|
|
||||||
|
ok "miyagi-backup.sh aktualisiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Abhängigkeiten updaten (nur wenn bereits installiert) ─────────────────────
|
||||||
|
|
||||||
|
update_dep() {
|
||||||
|
local name="$1"
|
||||||
|
local url="$2"
|
||||||
|
local target="$3"
|
||||||
|
|
||||||
|
if [[ ! -f "$target" ]]; then
|
||||||
|
info "$name nicht installiert – übersprungen (install mit miyagi-install.sh)"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
info "Aktualisiere $name..."
|
||||||
|
curl -fsSL "$url" -o "${target}.new" 2>/dev/null || {
|
||||||
|
warn "$name Download fehlgeschlagen – bleibt unverändert"
|
||||||
|
rm -f "${target}.new"
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
mv "${target}.new" "$target"
|
||||||
|
chmod +x "$target"
|
||||||
|
ok "$name aktualisiert"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Status-Zusammenfassung ────────────────────────────────────────────────────
|
||||||
|
|
||||||
|
print_status() {
|
||||||
|
echo ""
|
||||||
|
echo " ┌──────────────────────────────────────────┐"
|
||||||
|
printf " │ %-40s│\n" "miyagi-backup $([ -f "${INSTALL_DIR}/miyagi-backup.sh" ] && echo "✓ installiert" || echo "✗ fehlt")"
|
||||||
|
printf " │ %-40s│\n" "checkzfs $(command -v checkzfs &>/dev/null && echo "✓" || echo "✗ nicht installiert")"
|
||||||
|
printf " │ %-40s│\n" "check-snap-age $(command -v check-snapshot-age &>/dev/null && echo "✓" || echo "✗ nicht installiert")"
|
||||||
|
printf " │ %-40s│\n" "cleansnaps $(command -v cleansnaps &>/dev/null && echo "✓" || echo "✗ nicht installiert")"
|
||||||
|
printf " │ %-40s│\n" "ethtool $(command -v ethtool &>/dev/null && echo "✓" || echo "✗ nicht installiert")"
|
||||||
|
echo " └──────────────────────────────────────────┘"
|
||||||
|
echo ""
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Main ──────────────────────────────────────────────────────────────────────
|
||||||
|
|
||||||
|
main() {
|
||||||
|
[[ $EUID -ne 0 ]] && die "Bitte als root ausführen"
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo " ╔══════════════════════════════════════╗"
|
||||||
|
echo " ║ miyagi-backup Updater v3 ║"
|
||||||
|
echo " ╚══════════════════════════════════════╝"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
self_update
|
||||||
|
update_miyagi
|
||||||
|
|
||||||
|
update_dep "checkzfs" "$CHECKZFS_URL" "/usr/local/bin/checkzfs"
|
||||||
|
update_dep "check-snapshot-age" "$CHECK_SNAPSHOT_AGE_URL" "/usr/local/bin/check-snapshot-age"
|
||||||
|
update_dep "cleansnaps" "$CLEANSNAPS_URL" "/usr/local/bin/cleansnaps"
|
||||||
|
update_dep "disk_smart_info" "$DISK_SMART_INFO_URL" "/usr/lib/check_mk_agent/plugins/disk_smart_info"
|
||||||
|
|
||||||
|
print_status
|
||||||
|
ok "Update abgeschlossen."
|
||||||
|
}
|
||||||
|
|
||||||
|
parse_args "$@"
|
||||||
|
main
|
||||||
Reference in new issue
Block a user