patrickandClaude Sonnet 5
4d050cbedf
Legacy-Root-Dateien (miyagi-check.sh, miyagi-convert.sh, README, testing/), sowie v1-alt/v2-alt Referenzkopien und VERGLEICH.md aus dev entfernt. v3/config.example, v3/DEVLOG.md, v3/hooks.d, v3/miyagi-backup.sh, v3/miyagi-install.sh, v3/miyagi-update.sh auf Root-Ebene verschoben. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01NqeQQpk62QnLSwzQ3JumkM
926 lines
28 KiB
Bash
926 lines
28 KiB
Bash
#!/usr/bin/env bash
|
||
set -uo pipefail
|
||
IFS=$'\n\t'
|
||
|
||
PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin"
|
||
SCRIPT_NAME=$(basename "$0")
|
||
LOGFILE="/var/log/${SCRIPT_NAME%.sh}.log"
|
||
|
||
detect_os() {
|
||
case "$(uname -s)" in
|
||
Linux) echo "linux" ;;
|
||
FreeBSD) echo "freebsd" ;;
|
||
*) echo "unknown" ;;
|
||
esac
|
||
}
|
||
OS_TYPE="$(detect_os)"
|
||
|
||
epoch_to_str() {
|
||
local epoch="$1"
|
||
if [[ "$OS_TYPE" == "freebsd" ]]; then
|
||
date -r "$epoch" "+%Y-%m-%d %H:%M:%S"
|
||
else
|
||
date -d "@$epoch" "+%Y-%m-%d %H:%M:%S"
|
||
fi
|
||
}
|
||
|
||
log() {
|
||
echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" | tee -a "$LOGFILE"
|
||
}
|
||
|
||
usage() {
|
||
echo "Usage:"
|
||
echo " $0 -c /path/to/config # Full backup run"
|
||
echo " $0 [function] # Run individual function"
|
||
echo " $0 help # Show available functions"
|
||
exit 1
|
||
}
|
||
|
||
CONFIG_FILE=""
|
||
while getopts "c:" opt; do
|
||
case "$opt" in
|
||
c) CONFIG_FILE="$OPTARG" ;;
|
||
*) usage ;;
|
||
esac
|
||
done
|
||
shift $((OPTIND - 1))
|
||
|
||
if [[ -n "${CONFIG_FILE:-}" ]]; then
|
||
if [[ ! -f "$CONFIG_FILE" ]]; then
|
||
log "ERROR: Configuration file not found: $CONFIG_FILE"
|
||
exit 1
|
||
fi
|
||
|
||
if ! bash -n "$CONFIG_FILE"; then
|
||
log "Syntax error in configuration file $CONFIG_FILE"
|
||
exit 1
|
||
fi
|
||
|
||
source "$CONFIG_FILE"
|
||
|
||
REQUIRED_VARS=(
|
||
SOURCEPORT BACKUPSERVER ZSYNC MAINTDAY SHUTDOWN UPDATES
|
||
SOURCEHOST ZFSTRGT ZPUSHTAG ZPUSHMINKEEP ZPUSHKEEP ZPUSHLABEL
|
||
PBSHOST PBSPORT BACKUPSTORE BACKUPSTOREPBS BACKUPEXCLUDE REPLEXCLUDE DYNROUTE REBOOT
|
||
)
|
||
|
||
if [[ "${DYNROUTE,,}" == "yes" ]]; then
|
||
REQUIRED_VARS+=(DDNS_GATEWAY DDNS_SERVER)
|
||
fi
|
||
|
||
MISSING_VARS=()
|
||
for var in "${REQUIRED_VARS[@]}"; do
|
||
if [[ -z "${!var:-}" ]]; then
|
||
MISSING_VARS+=("$var")
|
||
fi
|
||
done
|
||
|
||
if [[ "${#MISSING_VARS[@]}" -gt 0 ]]; then
|
||
log "Missing configuration variables:"
|
||
for var in "${MISSING_VARS[@]}"; do
|
||
log " - $var"
|
||
done
|
||
log "Aborting — please check your configuration file."
|
||
exit 1
|
||
else
|
||
log "All required configuration variables are set."
|
||
fi
|
||
fi
|
||
|
||
SOURCEUSER="${SOURCEUSER:-root}"
|
||
PBSUSER="${PBSUSER:-root}"
|
||
EPIGGYBACK_USER="${EPIGGYBACK_USER:-root}"
|
||
ECHECKZFS_USER="${ECHECKZFS_USER:-root}"
|
||
|
||
rssh() { ssh -o BatchMode=yes -o ConnectTimeout=10 -p "$SOURCEPORT" "${SOURCEUSER}@${SOURCEHOST}" "$@"; }
|
||
rscp() { scp -P "$SOURCEPORT" "$@"; }
|
||
rpbssh() { ssh -o BatchMode=yes -o ConnectTimeout=10 -p "$PBSPORT" "${PBSUSER}@${PBSHOST}" "$@"; }
|
||
|
||
detect_host_type() {
|
||
if command -v pveversion >/dev/null 2>&1; then
|
||
echo "pve"
|
||
elif command -v proxmox-backup-server >/dev/null 2>&1; then
|
||
echo "pbs"
|
||
else
|
||
echo "unknown"
|
||
fi
|
||
}
|
||
|
||
get_sourcehostname() {
|
||
if [[ -z "${SOURCEHOSTNAME:-}" ]]; then
|
||
log "SOURCEHOSTNAME is empty, retrieving via SSH from $SOURCEHOST..."
|
||
SOURCEHOSTNAME=$(rssh hostname)
|
||
log "Detected SOURCEHOSTNAME: $SOURCEHOSTNAME"
|
||
fi
|
||
}
|
||
|
||
zfs_replace() {
|
||
local status
|
||
status=$(zpool status)
|
||
|
||
if echo "$status" | grep -q 'scan: resilver in progress'; then
|
||
return 0
|
||
fi
|
||
|
||
if echo "$status" | grep -qE 'replacing-[0-9]'; then
|
||
return 0
|
||
fi
|
||
|
||
return 1
|
||
}
|
||
|
||
wait_replace() {
|
||
local interval_seconds=300 # Alle 5 Minuten prüfen
|
||
local waited_minutes=0
|
||
|
||
log "ZFS Replace-Vorgang erkannt – warte unbegrenzt auf Abschluss..."
|
||
|
||
while true; do
|
||
if ! zfs_replace; then
|
||
log "Replace abgeschlossen nach $waited_minutes Minuten – fahre jetzt herunter."
|
||
return 0
|
||
fi
|
||
log "Replace läuft noch – erneut prüfen in $((interval_seconds/60)) Minuten..."
|
||
sleep "$interval_seconds"
|
||
((waited_minutes+=interval_seconds/60))
|
||
done
|
||
}
|
||
|
||
set_wol_g_enabled() {
|
||
if [[ "$OS_TYPE" == "freebsd" ]]; then
|
||
log "FreeBSD erkannt – set_wol_g_enabled() wird übersprungen (ethtool/apt nicht verfügbar)."
|
||
return 0
|
||
fi
|
||
|
||
log "Checking if ethtool is installed..."
|
||
|
||
if ! command -v ethtool >/dev/null 2>&1; then
|
||
log "ethtool is not installed, attempting installation..."
|
||
apt update && apt install -y ethtool || {
|
||
log "Error: ethtool could not be installed."
|
||
return 1
|
||
}
|
||
else
|
||
log "ethtool is already installed."
|
||
fi
|
||
|
||
log "Setting Wake-on-LAN (WOL) to 'g' on interfaces with static IP..."
|
||
|
||
for iface in $(ls /sys/class/net | grep -vE '^(lo|tap|vmbr|veth|br|docker|bond|wl)'); do
|
||
if [[ -e "/sys/class/net/$iface/device" ]]; then
|
||
log "Processing physical interface: $iface"
|
||
|
||
current_wol=$(ethtool "$iface" 2>/dev/null | awk '/Wake-on:/ {print $2}')
|
||
if [[ "$current_wol" != "g" ]]; then
|
||
log "Setting WOL to 'g' for $iface..."
|
||
ethtool -s "$iface" wol g || log "Error setting WOL on $iface"
|
||
else
|
||
log "WOL already set to 'g' for $iface"
|
||
fi
|
||
|
||
if grep -qE "^\s*iface\s+$iface\s+inet\s+static" /etc/network/interfaces; then
|
||
if ! grep -A 5 -E "^\s*iface\s+$iface\s+inet\s+static" /etc/network/interfaces | grep -q "post-up ethtool -s $iface wol g"; then
|
||
log "Adding WOL command in static block for $iface..."
|
||
sed -i "/^\s*iface\s\+$iface\s\+inet\s\+static/a \ post-up ethtool -s $iface wol g" /etc/network/interfaces
|
||
else
|
||
log "WOL command already present in static block for $iface."
|
||
fi
|
||
else
|
||
log "No static entry found for $iface, no changes made."
|
||
fi
|
||
fi
|
||
done
|
||
}
|
||
|
||
write_zsync_config() {
|
||
get_sourcehostname
|
||
local conf_file="/etc/bashclub/$SOURCEHOST.conf"
|
||
log "Writing zsync config to $conf_file"
|
||
{
|
||
echo "target=$ZFSTRGT"
|
||
echo "source=${SOURCEUSER}@${SOURCEHOST}"
|
||
echo "sshport=$SOURCEPORT"
|
||
echo "tag=$ZPUSHTAG"
|
||
echo "snapshot_filter=\"$ZPUSHFILTER\""
|
||
echo "min_keep=$ZPUSHMINKEEP"
|
||
echo "zfs_auto_snapshot_keep=$ZPUSHKEEP"
|
||
echo "zfs_auto_snapshot_label=zfs-auto-snap_$ZPUSHLABEL"
|
||
echo "zfs_auto_snapshot_engine=internal"
|
||
echo "checkzfs_disabled=0"
|
||
echo "checkzfs_local=0"
|
||
echo "checkzfs_prefix=miyagi-$SOURCEHOSTNAME-$(hostname)-$ZPUSHTAG"
|
||
echo "checkzfs_max_age=1500,2000"
|
||
echo "checkzfs_max_snapshot_count=180,200"
|
||
echo "checkzfs_spool=1"
|
||
echo "checkzfs_spool_maxage=100000"
|
||
} > "$conf_file"
|
||
}
|
||
|
||
run_zsync() {
|
||
write_zsync_config
|
||
if [[ "$ZSYNC" != "no" ]]; then
|
||
/usr/bin/bashclub-zsync -c "/etc/bashclub/$SOURCEHOST.conf"
|
||
else
|
||
log "Zsync is disabled."
|
||
fi
|
||
}
|
||
|
||
disable_pve_notifications() {
|
||
if [[ "$(hostname -I 2>/dev/null)" == *"$SOURCEHOST"* || "$(hostname)" == "$SOURCEHOST" ]]; then
|
||
log "Lokaler Host ist SOURCEHOST – Notification-Deaktivierung wird hier übersprungen."
|
||
return
|
||
fi
|
||
|
||
if [[ "$(detect_host_type)" == "pve" ]]; then
|
||
log "PVE erkannt – deaktiviere Notification-Target mail-to-root und default-matcher (keine lokalen Mails an root)."
|
||
pvesh set /cluster/notifications/endpoints/sendmail/mail-to-root --disable 1 >/dev/null 2>&1 \
|
||
|| log "WARN: Notification-Target mail-to-root konnte nicht deaktiviert werden."
|
||
pvesh set /cluster/notifications/matchers/default-matcher --disable 1 >/dev/null 2>&1 \
|
||
|| log "WARN: Notification-Matcher default-matcher konnte nicht deaktiviert werden."
|
||
fi
|
||
}
|
||
|
||
run_local_apt_updates() {
|
||
log "Running updates on local system..."
|
||
|
||
local TIMESTAMP
|
||
TIMESTAMP=$(date +"%Y-%m-%d_%H-%M-%S")
|
||
local SNAPSHOT_TAG="pve-update-via-miyagi"
|
||
local MAX_SNAPSHOTS=5
|
||
local REBOOT_FLAG="${REBOOT^^}"
|
||
local UPDATE_LOGFILE="/var/log/proxmox_update.log"
|
||
|
||
log_msg() {
|
||
local level="$1"
|
||
local message="$2"
|
||
local timestamp
|
||
timestamp=$(date +"%Y-%m-%d %H:%M:%S")
|
||
echo "[$timestamp] $message"
|
||
echo "[$timestamp] [$level] $message" >> "$UPDATE_LOGFILE"
|
||
}
|
||
|
||
local HOST_TYPE
|
||
HOST_TYPE=$(detect_host_type)
|
||
local ZFS_DATASETS=()
|
||
case "$HOST_TYPE" in
|
||
pve)
|
||
log_msg "INFO" "Systemtyp erkannt: PVE"
|
||
ZFS_DATASETS=("rpool/ROOT/pve-1" "rpool/pveconf")
|
||
;;
|
||
pbs)
|
||
log_msg "INFO" "Systemtyp erkannt: PBS"
|
||
ZFS_DATASETS=("rpool/ROOT/pbs-1")
|
||
;;
|
||
*)
|
||
log_msg "WARN" "Systemtyp (PVE/PBS) konnte nicht erkannt werden – ueberspringe ZFS-Snapshots."
|
||
;;
|
||
esac
|
||
|
||
# Prüfen, ob Updates verfügbar sind
|
||
if ! apt update | tee -a "$UPDATE_LOGFILE" | grep -qi "upgradable"; then
|
||
log_msg "INFO" "Keine Updates verfügbar."
|
||
return
|
||
fi
|
||
|
||
log_msg "INFO" "Updates verfügbar. Erstelle Snapshots."
|
||
|
||
for dataset in "${ZFS_DATASETS[@]}"; do
|
||
if ! zfs list -H -o name "$dataset" >/dev/null 2>&1; then
|
||
log_msg "WARN" "Dataset $dataset existiert nicht – übersprungen."
|
||
continue
|
||
fi
|
||
|
||
snapshot="${dataset}@${SNAPSHOT_TAG}-${TIMESTAMP}"
|
||
log_msg "INFO" "Erstelle Snapshot: $snapshot"
|
||
zfs snapshot "$snapshot"
|
||
|
||
# Alte Snapshots bereinigen
|
||
log_msg "INFO" "Bereinige alte Snapshots in $dataset"
|
||
old_snaps=$(zfs list -t snapshot -o name -s creation | grep "^${dataset}@${SNAPSHOT_TAG}-")
|
||
snap_count=$(grep -c . <<< "$old_snaps")
|
||
if (( snap_count > MAX_SNAPSHOTS )); then
|
||
snaps_to_delete=$(echo "$old_snaps" | head -n $((snap_count - MAX_SNAPSHOTS)))
|
||
while IFS= read -r snap; do
|
||
log_msg "INFO" "Lösche alten Snapshot: $snap"
|
||
zfs destroy "$snap"
|
||
done <<< "$snaps_to_delete"
|
||
fi
|
||
done
|
||
|
||
# System-Upgrade
|
||
log_msg "INFO" "Starte dist-upgrade"
|
||
if ! apt dist-upgrade -y | tee -a "$UPDATE_LOGFILE"; then
|
||
log_msg "ERROR" "Fehler während dist-upgrade"
|
||
return 1
|
||
fi
|
||
|
||
log_msg "INFO" "Starte autoremove"
|
||
apt autoremove -y | tee -a "$UPDATE_LOGFILE"
|
||
|
||
# Kernel-Update prüfen
|
||
if apt list --upgradable 2>/dev/null | grep -q "linux-image-"; then
|
||
log_msg "WARN" "Kernel-Update erkannt. Neustart empfohlen."
|
||
if [[ "$REBOOT_FLAG" == "YES" ]]; then
|
||
log_msg "INFO" "REBOOT=YES erkannt. System wird neugestartet."
|
||
reboot
|
||
fi
|
||
else
|
||
log_msg "INFO" "Update abgeschlossen. Kein Neustart erforderlich."
|
||
fi
|
||
}
|
||
|
||
run_pbs_apt_updates() {
|
||
if [[ "${BACKUPSERVER,,}" == "yes" ]]; then
|
||
log "Running updates on PBS host ($PBSHOST)..."
|
||
rpbssh apt update && rpbssh apt dist-upgrade -y || {
|
||
log "Error during updates on $PBSHOST"
|
||
}
|
||
else
|
||
log "PBS updates skipped (BACKUPSERVER=$BACKUPSERVER)"
|
||
fi
|
||
}
|
||
|
||
run_remote_updates() {
|
||
if [[ "${UPDATES,,}" == "yes" ]]; then
|
||
if [[ "$OS_TYPE" == "freebsd" ]]; then
|
||
log "FreeBSD erkannt – lokales apt-Update wird übersprungen (apt nicht verfügbar)."
|
||
else
|
||
run_local_apt_updates
|
||
disable_pve_notifications
|
||
fi
|
||
|
||
# PBS-Host-Update läuft unabhängig vom lokalen Update-Ergebnis/Skript-Host-OS
|
||
run_pbs_apt_updates
|
||
else
|
||
log "Updates disabled (UPDATES=$UPDATES)"
|
||
fi
|
||
}
|
||
|
||
send_piggyback() {
|
||
get_sourcehostname
|
||
local combined_host="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
||
local filename="100000_${combined_host}"
|
||
|
||
log "Reminder: Add a host named ${combined_host} in CMK (without Agent, Piggyback enabled)!"
|
||
log "Creating piggyback file: $filename"
|
||
|
||
{
|
||
echo "<<<<${combined_host}>>>>"
|
||
/usr/bin/check_mk_agent
|
||
echo "<<<<>>>>"
|
||
} > "$filename"
|
||
|
||
if rscp "$filename" "${SOURCEUSER}@${SOURCEHOST}:/var/lib/check_mk_agent/spool/"; then
|
||
log "Piggyback data successfully sent to $SOURCEHOST"
|
||
else
|
||
log "ERROR: Failed to send piggyback data to $SOURCEHOST"
|
||
fi
|
||
|
||
rm -f "$filename"
|
||
}
|
||
|
||
run_pbs_log_clear() {
|
||
log "Running clear LOG on PBS host ($PBSHOST)..."
|
||
|
||
if ! rpbssh find /var/log/proxmox-backup/tasks/ -type f -mtime +60 -delete; then
|
||
log "Error clearing PBS LOG on $PBSHOST"
|
||
fi
|
||
}
|
||
|
||
run_pve_log_clear() {
|
||
log "Running clear LOG on PVE host ($PBSHOST)..."
|
||
|
||
if ! rssh find /var/log/vzdump -type f -mtime +30 -delete; then
|
||
log "Error clearing PVE LOG on $SOURCEHOST"
|
||
fi
|
||
}
|
||
|
||
run_pbs_backup() {
|
||
if [[ "${BACKUPSERVER,,}" != "yes" ]]; then
|
||
log "PBS Backup übersprungen: BACKUPSERVER='$BACKUPSERVER' (muss 'yes' sein)"
|
||
return 0
|
||
fi
|
||
|
||
get_sourcehostname
|
||
log "Starte PBS Backup auf Host: $SOURCEHOST"
|
||
|
||
# PBS-Storage prüfen und ggf. aktivieren
|
||
log "Prüfe, ob PBS-Storage '$BACKUPSTORE' auf $SOURCEHOST aktiviert ist..."
|
||
if rssh "pvesm status | grep -w '$BACKUPSTORE' | grep -q 'disabled'"; then
|
||
log "PBS-Storage '$BACKUPSTORE' ist deaktiviert – aktiviere temporär und warte 10 Sekunden..."
|
||
rssh "pvesm set '$BACKUPSTORE' --disable 0 && sleep 10"
|
||
pbs_enabled_by_script=true
|
||
else
|
||
log "PBS-Storage '$BACKUPSTORE' ist bereits aktiviert."
|
||
pbs_enabled_by_script=false
|
||
fi
|
||
|
||
vzdump_success=false
|
||
|
||
# Versuch: vzdump mit Change Detection
|
||
## Eintrag muss in /etc/vzdump.conf entries-max 100000000
|
||
log "Starte vzdump mit Change Detection..."
|
||
if rssh vzdump --pbs-change-detection-mode metadata \
|
||
--node "$SOURCEHOSTNAME" --storage "$BACKUPSTORE" \
|
||
--exclude "$BACKUPEXCLUDE" --mode snapshot --all 1 \
|
||
--notes-template '{{guestname}}'; then
|
||
|
||
log "vzdump (Change Detection) erfolgreich."
|
||
vzdump_success=true
|
||
else
|
||
log "vzdump (Change Detection) fehlgeschlagen – versuche Fallback ohne Change Detection..."
|
||
|
||
if rssh vzdump \
|
||
--node "$SOURCEHOSTNAME" --storage "$BACKUPSTORE" \
|
||
--exclude "$BACKUPEXCLUDE" --mode snapshot --all 1 \
|
||
--notes-template '{{guestname}}'; then
|
||
|
||
log "Fallback-vzdump erfolgreich."
|
||
vzdump_success=true
|
||
else
|
||
log "FEHLER: vzdump fehlgeschlagen – auch im Fallback."
|
||
fi
|
||
fi
|
||
|
||
# PBS-Storage ggf. wieder deaktivieren
|
||
if [[ "$vzdump_success" == true && "$pbs_enabled_by_script" == true ]]; then
|
||
log "Deaktiviere temporär aktiviertes PBS-Storage '$BACKUPSTORE' auf $SOURCEHOST..."
|
||
rssh "pvesm set '$BACKUPSTORE' --disable 1"
|
||
fi
|
||
|
||
# Monitoring-Ausgabe
|
||
if [[ "$vzdump_success" == true ]]; then
|
||
echo "0 DailyPBS - Daily Backup erfolgreich" > /tmp/cmk_tmp.out
|
||
else
|
||
echo "2 DailyPBS - Daily Backup FEHLGESCHLAGEN" > /tmp/cmk_tmp.out
|
||
fi
|
||
|
||
{
|
||
echo "<<<local>>>"
|
||
cat /tmp/cmk_tmp.out
|
||
} > /tmp/1200000_checkpbs
|
||
|
||
rscp /tmp/1200000_checkpbs "${SOURCEUSER}@${SOURCEHOST}":/var/lib/check_mk_agent/spool \
|
||
|| log "Fehler beim Übertragen des Monitoring-Outputs via SCP"
|
||
|
||
rm -f /tmp/cmk_tmp.out /tmp/1200000_checkpbs
|
||
#write_pbs_status
|
||
}
|
||
|
||
run_maintenance() {
|
||
if [[ "${BACKUPSERVER,,}" != "yes" ]]; then
|
||
log "PBS Backup wird übersprungen (BACKUPSERVER=$BACKUPSERVER)"
|
||
return
|
||
fi
|
||
|
||
if [[ "$(date +%u)" == "$MAINTDAY" ]]; then
|
||
log "Running maintenance..."
|
||
PRUNEJOB=$(rpbssh proxmox-backup-manager prune-job list --output-format json-pretty | grep -m 1 "id" | cut -d'"' -f4)
|
||
rpbssh proxmox-backup-manager prune-job run "$PRUNEJOB"
|
||
rpbssh proxmox-backup-manager garbage-collection start "$BACKUPSTOREPBS"
|
||
rpbssh proxmox-backup-manager verify backup
|
||
else
|
||
log "No maintenance scheduled for today."
|
||
fi
|
||
}
|
||
|
||
run_scrub_stop() {
|
||
local mode="$1" # "local" oder "remote"
|
||
local ssh_cmd=()
|
||
|
||
if [[ "$mode" == "remote" ]]; then
|
||
ssh_cmd=(ssh -o BatchMode=yes -o ConnectTimeout=10 -p "$SOURCEPORT" "${SOURCEUSER}@${SOURCEHOST}")
|
||
fi
|
||
|
||
"${ssh_cmd[@]}" bash -c '
|
||
for pool in $(zpool list -H -o name); do
|
||
echo "Stopping scrub on pool: $pool"
|
||
if zpool status "$pool" | grep -q "scrub in progress"; then
|
||
if zpool scrub -s "$pool"; then
|
||
echo "Scrub stopped on $pool"
|
||
else
|
||
echo "Error stopping scrub on $pool"
|
||
fi
|
||
else
|
||
echo "No active scrub on $pool"
|
||
fi
|
||
done
|
||
'
|
||
}
|
||
|
||
write_pbs_status() {
|
||
local spool_file="/var/lib/check_mk_agent/spool/90000_checkpbs_local"
|
||
local repo="${PBS_REPO_USER}@${PBSHOST}:${BACKUPSTOREPBS}"
|
||
local tmpfile
|
||
tmpfile=$(mktemp)
|
||
|
||
if ! command -v proxmox-backup-client >/dev/null 2>&1; then
|
||
log "proxmox-backup-client nicht installiert – PBS-Status-Ausgabe übersprungen."
|
||
return
|
||
fi
|
||
|
||
if [[ -z "${PBS_REPO_USER:-}" || -z "${PBS_PASSWORD:-}" ]]; then
|
||
log "PBS_REPO_USER oder PBS_PASSWORD nicht gesetzt – PBS-Status-Ausgabe übersprungen."
|
||
return 1
|
||
fi
|
||
|
||
echo "<<<local>>>" > "$tmpfile"
|
||
|
||
local now
|
||
now=$(date +%s)
|
||
|
||
# === Schwellenwert(e) parsen ===
|
||
local warn_threshold=0
|
||
local crit_threshold=86400 # Default kritisch ab 24h
|
||
|
||
if [[ -n "${PBSBACKUP_STATUS:-}" ]]; then
|
||
IFS=',' read -r t1 t2 <<< "$PBSBACKUP_STATUS"
|
||
if [[ "$t1" =~ ^[0-9]+$ && -z "$t2" ]]; then
|
||
# Nur ein Wert vorhanden
|
||
crit_threshold=$t1
|
||
log "Verwende einfachen Schwellenwert: CRIT=${crit_threshold}s"
|
||
elif [[ "$t1" =~ ^[0-9]+$ && "$t2" =~ ^[0-9]+$ ]]; then
|
||
warn_threshold=$t1
|
||
crit_threshold=$t2
|
||
log "Verwende gestaffelte Schwellenwerte: WARN=${warn_threshold}s, CRIT=${crit_threshold}s"
|
||
else
|
||
log "WARNUNG: Ungültiges PBSBACKUP_STATUS-Format – Fallback: CRIT=${crit_threshold}s"
|
||
fi
|
||
fi
|
||
|
||
# Backup-Daten extrahieren (direkt vom Skript-Host gegen PBSHOST, mit PBS_PASSWORD authentifiziert)
|
||
PBS_PASSWORD="$PBS_PASSWORD" proxmox-backup-client list --repository "$repo" --output-format json 2>/dev/null | \
|
||
grep -E '"backup-id"|"backup-type"|"backup-time"' | \
|
||
sed -E 's/[",]//g; s/^ *//' > "$tmpfile.json"
|
||
|
||
local backup_type="" backup_id="" backup_time=""
|
||
while read -r line; do
|
||
case "$line" in
|
||
backup-type:*)
|
||
backup_type="${line#*: }"
|
||
;;
|
||
backup-id:*)
|
||
backup_id="${line#*: }"
|
||
;;
|
||
backup-time:*)
|
||
backup_time="${line#*: }"
|
||
|
||
if [[ -n "$backup_type" && -n "$backup_id" && -n "$backup_time" ]]; then
|
||
local age status timestamp msg
|
||
age=$((now - backup_time))
|
||
timestamp=$(epoch_to_str "$backup_time")
|
||
|
||
if (( age < warn_threshold )); then
|
||
status=0
|
||
elif (( age < crit_threshold )); then
|
||
status=1
|
||
else
|
||
status=2
|
||
fi
|
||
|
||
msg="$backup_type/$backup_id last backup $timestamp (age: $((age / 3600))h)"
|
||
echo "$status PBS_${backup_type}_${backup_id} - $msg" >> "$tmpfile"
|
||
|
||
# Reset
|
||
backup_type="" backup_id="" backup_time=""
|
||
fi
|
||
;;
|
||
esac
|
||
done < "$tmpfile.json"
|
||
|
||
rm -f "$tmpfile.json"
|
||
mv "$tmpfile" "$spool_file"
|
||
log "PBS Backup Status lokal geschrieben: $spool_file"
|
||
}
|
||
|
||
run_pre_shutdown_hooks() {
|
||
local hook_dir="/etc/miyagi-backup/hooks.d/pre-shutdown"
|
||
if [[ ! -d "$hook_dir" ]]; then
|
||
return 0
|
||
fi
|
||
local hooks=()
|
||
while IFS= read -r -d '' f; do
|
||
hooks+=("$f")
|
||
done < <(find "$hook_dir" -maxdepth 1 -name "*.sh" -executable -print0 | sort -z)
|
||
if [[ ${#hooks[@]} -eq 0 ]]; then
|
||
return 0
|
||
fi
|
||
log "Führe Pre-Shutdown-Hooks aus ($hook_dir)..."
|
||
for hook in "${hooks[@]}"; do
|
||
log "Hook: $hook"
|
||
if ! bash "$hook"; then
|
||
log "WARNUNG: Hook $hook fehlgeschlagen (Exit $?) – fahre fort"
|
||
fi
|
||
done
|
||
}
|
||
|
||
shutdown_now() {
|
||
if [[ "${SHUTDOWN,,}" == "yes" ]]; then
|
||
if zfs_replace; then
|
||
log "ZFS Replace-Vorgang erkannt – warte bis zum Abschluss..."
|
||
if ! wait_replace; then
|
||
log "Shutdown abgebrochen – Replace ist nach max. Wartezeit noch nicht abgeschlossen."
|
||
return
|
||
fi
|
||
fi
|
||
send_piggyback
|
||
send_piggyback_external
|
||
send_checkzfs_external
|
||
run_pre_shutdown_hooks
|
||
log "Shutting down now...in 60sec"
|
||
sleep 60
|
||
shutdown now
|
||
else
|
||
log "No shutdown requested."
|
||
fi
|
||
}
|
||
|
||
send_piggyback_external() {
|
||
if [[ "${EPIGGYBACK,,}" != "yes" ]]; then
|
||
log "Externer Piggyback-Export deaktiviert."
|
||
return
|
||
fi
|
||
get_sourcehostname
|
||
log "Ermittelter SOURCEHOSTNAME: $SOURCEHOSTNAME"
|
||
|
||
local combined_host="miyagi-${SOURCEHOSTNAME}-$(hostname)"
|
||
local spool_file="100000_${combined_host}_piggyback_external"
|
||
local temp_dir
|
||
temp_dir=$(mktemp -d)
|
||
|
||
log "Erzeuge temporäre Piggyback-Datei: $temp_dir/$spool_file"
|
||
|
||
{
|
||
echo "<<<<${combined_host}>>>>"
|
||
/usr/bin/check_mk_agent
|
||
echo "<<<<>>>>"
|
||
} > "$temp_dir/$spool_file"
|
||
|
||
if scp -P "$EPIGGYBACK_PORT" "$temp_dir/$spool_file" "${EPIGGYBACK_USER}@${EPIGGYBACK_HOST}:/var/lib/check_mk_agent/spool/"; then
|
||
log "Piggyback-Daten erfolgreich an $EPIGGYBACK_HOST gesendet: $spool_file"
|
||
else
|
||
log "Fehler beim Übertragen der Piggyback-Daten an $EPIGGYBACK_HOST"
|
||
rm -rf "$temp_dir"
|
||
return 1
|
||
fi
|
||
|
||
rm -rf "$temp_dir"
|
||
return 0
|
||
}
|
||
|
||
send_checkzfs() {
|
||
if [[ "${ZSYNC,,}" != "yes" ]]; then
|
||
log "send_checkzfs: ZSYNC nicht aktiv – übersprungen"
|
||
return 0
|
||
fi
|
||
|
||
get_sourcehostname
|
||
|
||
local checkzfs_cmd
|
||
checkzfs_cmd="$(command -v checkzfs || true)"
|
||
if [[ -z "$checkzfs_cmd" || ! -x "$checkzfs_cmd" ]]; then
|
||
log "send_checkzfs: checkzfs nicht gefunden – übersprungen"
|
||
return 0
|
||
fi
|
||
|
||
# Defaults für checkzfs-Parameter (können via zsync-Config überschrieben werden)
|
||
local checkzfs_prefix="${checkzfs_prefix:-miyagi-${SOURCEHOSTNAME}-$(hostname)-${ZPUSHTAG}}"
|
||
local checkzfs_max_age="${checkzfs_max_age:-1500,2000}"
|
||
local checkzfs_max_snapshot_count="${checkzfs_max_snapshot_count:-180,200}"
|
||
|
||
# Optional zsync-Config laden falls vorhanden (überschreibt Defaults)
|
||
local zsync_config="/etc/bashclub/${SOURCEHOST}.conf"
|
||
[[ -f "$zsync_config" ]] && source "$zsync_config"
|
||
|
||
local filter=""
|
||
while IFS=$'\t' read -r name value src; do
|
||
if [[ "$src" == "local" && "$value" == "subvols" ]]; then
|
||
filter+="${name}/|"
|
||
elif [[ "$src" == "local" && "$value" == "all" ]]; then
|
||
filter+="${name}|"
|
||
fi
|
||
done < <(rssh "zfs get -H -o name,value,source -t filesystem,volume $ZPUSHTAG")
|
||
filter="#${filter%|}"
|
||
log "Generierter ZFS-Filter: $filter"
|
||
|
||
local combined="miyagi-${SOURCEHOSTNAME}-$(hostname)-${ZPUSHTAG}"
|
||
local spoolfile="/tmp/${combined}_checkzfs"
|
||
local spooldest="100000_${combined}_checkzfs"
|
||
|
||
log "Führe checkzfs aus..."
|
||
{
|
||
echo "<<<local>>>"
|
||
"$checkzfs_cmd" \
|
||
--source "${SOURCEUSER}@${SOURCEHOST}:${SOURCEPORT}" \
|
||
--filter "$filter" \
|
||
--replicafilter "^${ZFSTRGT}" \
|
||
--prefix "$checkzfs_prefix" \
|
||
--threshold "$checkzfs_max_age" \
|
||
--maxsnapshots "$checkzfs_max_snapshot_count" \
|
||
--output checkmk
|
||
} > "$spoolfile"
|
||
|
||
if rscp "$spoolfile" "${SOURCEUSER}@${SOURCEHOST}:/var/lib/check_mk_agent/spool/${spooldest}"; then
|
||
log "CheckZFS-Daten an $SOURCEHOST gesendet: $spooldest"
|
||
else
|
||
log "FEHLER: CheckZFS-Daten konnten nicht übertragen werden"
|
||
fi
|
||
|
||
rm -f "$spoolfile"
|
||
}
|
||
|
||
send_checkzfs_external() {
|
||
if [[ "${ECHECKZFS,,}" != "yes" ]]; then
|
||
log "Externer CheckZFS deaktiviert."
|
||
return
|
||
fi
|
||
local config="/etc/bashclub/${SOURCEHOST}.conf"
|
||
if [[ ! -f "$config" ]]; then
|
||
log "Konfigurationsdatei fehlt: $config"
|
||
return 1
|
||
fi
|
||
source "$config"
|
||
|
||
get_sourcehostname # Setzt SOURCEHOSTNAME, wenn nicht vorhanden
|
||
|
||
local checkzfs_cmd="${checkzfs_cmd:-$(command -v checkzfs)}"
|
||
if [[ -z "$checkzfs_cmd" || ! -x "$checkzfs_cmd" ]]; then
|
||
log "checkzfs nicht gefunden oder nicht ausführbar – Abbruch."
|
||
return 1
|
||
fi
|
||
log "Verwende checkzfs: $checkzfs_cmd"
|
||
|
||
# Filter anhand ZFS-Tags auf dem SOURCEHOST aufbauen
|
||
local filter=""
|
||
while IFS=$'\t' read -r name value source; do
|
||
if [[ "$source" == "local" && "$value" == "subvols" ]]; then
|
||
filter+="${name}/|"
|
||
elif [[ "$source" == "local" && "$value" == "all" ]]; then
|
||
filter+="${name}|"
|
||
fi
|
||
done < <(rssh "zfs get -H -o name,value,source -t filesystem,volume $ZPUSHTAG")
|
||
|
||
filter="#${filter%|}"
|
||
log "Generierter ZFS-Filter: $filter"
|
||
|
||
local combined="miyagi-${SOURCEHOSTNAME}-$(hostname)-${ZPUSHTAG}"
|
||
local spoolfile="/tmp/${combined}_checkzfs_external"
|
||
local spooldest="100000_${combined}_checkzfs_external"
|
||
|
||
log "Führe checkzfs aus..."
|
||
{
|
||
echo "<<<local>>>"
|
||
"$checkzfs_cmd" \
|
||
--source ${SOURCEUSER}@"${SOURCEHOST}:${SOURCEPORT}" \
|
||
--filter "$filter" \
|
||
--replicafilter "^${ZFSTRGT}" \
|
||
--prefix "$checkzfs_prefix" \
|
||
--threshold "$checkzfs_max_age" \
|
||
--maxsnapshots "$checkzfs_max_snapshot_count" \
|
||
--output checkmk
|
||
} > "$spoolfile"
|
||
|
||
if scp -P "$ECHECKZFS_PORT" "$spoolfile" ${ECHECKZFS_USER}@"$ECHECKZFS_HOST":/var/lib/check_mk_agent/spool/"$spooldest"; then
|
||
log "Spool-Datei erfolgreich übertragen an $ECHECKZFS_HOST:$spooldest"
|
||
else
|
||
log "Fehler beim Übertragen der Spool-Datei an $ECHECKZFS_HOST"
|
||
fi
|
||
|
||
rm -f "$spoolfile"
|
||
}
|
||
wait() {
|
||
echo
|
||
echo "###########################################"
|
||
echo "# Das Backup startet in 60 Sekunden... #"
|
||
echo "# Drücke [Enter], um sofort fortzufahren, #"
|
||
echo "# oder warte, um automatisch zu starten. #"
|
||
echo "###########################################"
|
||
read -t 60 -p "Fortfahren (Enter drücken) oder warten... " input
|
||
if [[ $? -eq 0 ]]; then
|
||
log "Press ENTER to continue."
|
||
else
|
||
log "No press ENTER, wait for 60 Sec.."
|
||
sleep 60
|
||
fi
|
||
}
|
||
set_dynamic_route() {
|
||
local target="$SOURCEHOST"
|
||
local gateway="$DDNS_GATEWAY"
|
||
local dns_server="$DDNS_SERVER"
|
||
local current_ip
|
||
|
||
if [[ -z "$target" || -z "$gateway" ]]; then
|
||
log "Fehler: SOURCEHOST oder DDNS_GATEWAY nicht gesetzt"
|
||
return 1
|
||
fi
|
||
|
||
# Ist SOURCEHOST bereits eine IPv4- oder IPv6-Adresse?
|
||
if [[ "$target" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ || "$target" == *:* ]]; then
|
||
current_ip="$target"
|
||
log "SOURCEHOST ist bereits eine IP-Adresse: $current_ip"
|
||
else
|
||
log "Setze temporäre Route zu DNS-Server $dns_server via $gateway..."
|
||
|
||
case "$(uname -s)" in
|
||
Linux)
|
||
ip route | grep -q "^$dns_server" || \
|
||
ip route add "$dns_server" via "$gateway"
|
||
;;
|
||
FreeBSD)
|
||
route -n get "$dns_server" >/dev/null 2>&1 || \
|
||
route add -host "$dns_server" "$gateway"
|
||
;;
|
||
esac
|
||
|
||
log "Löse IP von $target über DNS $dns_server..."
|
||
current_ip=$(dig +short @"$dns_server" "$target" | awk 'NF {print; exit}')
|
||
|
||
if [[ -z "$current_ip" ]]; then
|
||
log "Fehler: Konnte IP für $target nicht auflösen"
|
||
return 1
|
||
fi
|
||
fi
|
||
|
||
log "Ermittelte IP: $current_ip – setze Route via $gateway..."
|
||
|
||
case "$(uname -s)" in
|
||
Linux)
|
||
ip route | grep -q "^$current_ip" || \
|
||
ip route add "$current_ip" via "$gateway"
|
||
;;
|
||
FreeBSD)
|
||
route -n get "$current_ip" >/dev/null 2>&1 || \
|
||
route add -host "$current_ip" "$gateway"
|
||
;;
|
||
*)
|
||
log "Nicht unterstütztes Betriebssystem: $(uname -s)"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
log "Route erfolgreich gesetzt: $current_ip via $gateway"
|
||
}
|
||
# Main execution:
|
||
if [[ $# -eq 0 ]]; then
|
||
if [[ -n "$CONFIG_FILE" ]]; then
|
||
wait
|
||
log "Running full backup using configuration file: $CONFIG_FILE"
|
||
|
||
if [[ "${DYNROUTE,,}" == "yes" ]]; then
|
||
log "DYNROUTE ist aktiviert – setze dynamische Route für $SOURCEHOST..."
|
||
set_dynamic_route
|
||
else
|
||
log "DYNROUTE ist deaktiviert oder nicht gesetzt."
|
||
fi
|
||
|
||
write_zsync_config
|
||
run_zsync
|
||
|
||
if [[ "${BACKUPSERVER,,}" == "yes" ]]; then
|
||
log "BACKUPSERVER ist aktiviert, führe Backup aus..."
|
||
run_pbs_backup
|
||
run_maintenance
|
||
run_pbs_log_clear
|
||
run_pve_log_clear
|
||
else
|
||
log "BACKUPSERVER ist nicht aktiviert (BACKUPSERVER=$BACKUPSERVER), überspringe Backup."
|
||
fi
|
||
run_remote_updates
|
||
if [[ "${EPIGGYBACK,,}" == "yes" ]]; then
|
||
send_piggyback_external
|
||
fi
|
||
|
||
if [[ "${ECHECKZFS,,}" == "yes" ]]; then
|
||
send_checkzfs_external
|
||
fi
|
||
shutdown_now
|
||
else
|
||
usage
|
||
fi
|
||
else
|
||
# Funktionen die keine Config brauchen
|
||
CONFIG_FREE_FUNCTIONS=(help detect_os detect_host_type zfs_replace wait_replace set_wol_g_enabled run_scrub_stop)
|
||
|
||
case "$1" in
|
||
help)
|
||
declare -F | awk '{print $3}' | grep -v "^_" | grep -v "^main$"
|
||
;;
|
||
*)
|
||
if declare -F "$1" >/dev/null 2>&1; then
|
||
config_required=true
|
||
for fn in "${CONFIG_FREE_FUNCTIONS[@]}"; do
|
||
[[ "$1" == "$fn" ]] && config_required=false && break
|
||
done
|
||
if [[ "$config_required" == true && -z "${SOURCEHOST:-}" ]]; then
|
||
log "Funktion '$1' benötigt eine Config. Aufruf: $0 -c /etc/miyagi-backup/backup.conf $1"
|
||
exit 1
|
||
fi
|
||
"$@"
|
||
else
|
||
log "Function $1 not found."
|
||
usage
|
||
fi
|
||
;;
|
||
esac
|
||
fi
|