bvandeusenandClaude Opus 5.5
6c4ef368f9
The root helper gains one read-only action, `drives`: it finds the drives itself (smartctl --scan-open), reads each as JSON, and writes a summary the agent carries on every sample (agent 1.20.0). Steward judges the figures in drives.py (failing / worn / watch / ok / no SMART / unreadable), records them per drive and as host roll-ups for covering rules, keeps the newest report on the registration and lists it on the host page. install-deps.sh installs smartmontools with apt, dnf, yum, zypper, pacman or apk, run by install.sh and every agent playbook; one it can't install is reported, never fatal. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
113 lines
4.3 KiB
YAML
113 lines
4.3 KiB
YAML
---
|
|
# description: Update the Steward host agent (refresh agent.py, its units, the maintenance helper and its packages, then restart) on hosts already running it.
|
|
# steward:category: host-agent
|
|
# Update an already-installed Steward host agent: refresh agent.py, its systemd
|
|
# units and the maintenance helper (#5766), then restart.
|
|
#
|
|
# Deliberately does NOT touch the registration token or /etc/steward-agent.conf
|
|
# — the host already has a working token, so an update leaves identity alone and
|
|
# only swaps the agent binary. Connects as the managed `steward` account (set
|
|
# globally as the SSH user); no bootstrap password or token injection needed.
|
|
#
|
|
# For a fresh host with no agent, use provision.yml (new host) or install.yml
|
|
# (already-provisioned host) instead — those mint and install the token.
|
|
- name: Update Steward host agent
|
|
hosts: all
|
|
become: true
|
|
gather_facts: false
|
|
vars:
|
|
steward_url: ""
|
|
tasks:
|
|
- name: Require steward_url
|
|
ansible.builtin.assert:
|
|
that:
|
|
- steward_url | length > 0
|
|
fail_msg: "Pass steward_url as an extra-var (the Update action sets it)."
|
|
|
|
- name: Confirm the agent is already installed
|
|
ansible.builtin.stat:
|
|
path: /usr/local/lib/steward-agent/agent.py
|
|
register: agent_file
|
|
|
|
- name: Fail clearly if the agent is missing
|
|
ansible.builtin.fail:
|
|
msg: "No agent at /usr/local/lib/steward-agent — provision or install this host first."
|
|
when: not agent_file.stat.exists
|
|
|
|
- name: Refresh agent.py
|
|
ansible.builtin.get_url:
|
|
url: "{{ steward_url }}/plugins/host_agent/agent.py"
|
|
dest: /usr/local/lib/steward-agent/agent.py
|
|
mode: "0755"
|
|
force: true
|
|
notify: restart steward-agent
|
|
|
|
# The units and the maintenance helper come from Steward: one copy for
|
|
# install.sh and every playbook (#5766). The agent may write only its
|
|
# request directory; the helper and its results stay root's.
|
|
- name: Create the maintenance directories
|
|
ansible.builtin.file:
|
|
path: "{{ item.path }}"
|
|
state: directory
|
|
owner: "{{ item.owner }}"
|
|
group: "{{ item.owner }}"
|
|
mode: "{{ item.mode }}"
|
|
loop:
|
|
- {path: /var/lib/steward-agent, owner: root, mode: "0755"}
|
|
- {path: /var/lib/steward-agent/requests, owner: steward-agent, mode: "0700"}
|
|
- {path: /var/lib/steward-maint, owner: root, mode: "0755"}
|
|
- {path: /var/lib/steward-maint/results, owner: root, mode: "0755"}
|
|
|
|
- name: Download the maintenance helper
|
|
ansible.builtin.get_url:
|
|
url: "{{ steward_url }}/plugins/host_agent/files/maint.py"
|
|
dest: /usr/local/lib/steward-agent/maint.py
|
|
owner: root
|
|
mode: "0755"
|
|
force: true
|
|
|
|
# The helper's packages (smartctl for drive health, #5789), with whichever
|
|
# package manager the host has. One that can't be installed is said, never
|
|
# fatal: the host page then reads "smartctl not installed".
|
|
- name: Download the dependency installer
|
|
ansible.builtin.get_url:
|
|
url: "{{ steward_url }}/plugins/host_agent/files/install-deps.sh"
|
|
dest: /usr/local/lib/steward-agent/install-deps.sh
|
|
owner: root
|
|
mode: "0755"
|
|
force: true
|
|
|
|
- name: Install the helper's packages
|
|
ansible.builtin.command: /usr/local/lib/steward-agent/install-deps.sh
|
|
register: helper_deps
|
|
changed_when: "'installed:' in helper_deps.stdout"
|
|
|
|
- name: Say what couldn't be installed
|
|
ansible.builtin.debug:
|
|
msg: "{{ helper_deps.stdout_lines | select('search', 'WARNING') | list }}"
|
|
when: "'WARNING' in helper_deps.stdout"
|
|
|
|
- name: Install the agent and maintenance units
|
|
ansible.builtin.get_url:
|
|
url: "{{ steward_url }}/plugins/host_agent/files/{{ item }}"
|
|
dest: "/etc/systemd/system/{{ item }}"
|
|
owner: root
|
|
mode: "0644"
|
|
force: true
|
|
loop: [steward-agent.service, steward-maint.service, steward-maint.path]
|
|
notify: restart steward-agent
|
|
|
|
- name: Watch for maintenance requests
|
|
ansible.builtin.systemd:
|
|
name: steward-maint.path
|
|
enabled: true
|
|
state: started
|
|
daemon_reload: true
|
|
|
|
handlers:
|
|
- name: restart steward-agent
|
|
ansible.builtin.systemd:
|
|
name: steward-agent
|
|
state: restarted
|
|
daemon_reload: true
|