DCCONSTRUCTIONS
a3c15e11e9
Discover independent camera instances and prepare their versioned runtime from Node or remote Core. Add isolated SDK workers, camera controls, raw dual-fisheye WebRTC preview, and shared action/region loading states. Recover existing Node bindings over known Tailscale addresses after a Core LAN address change. Preserve identities and trust, pin both peers, migrate endpoints with revision checks, and require real heartbeats for online status. Fix the Python client certificate profile for Go X509 verification. Pin Design Guideline 8c53f73 and retain installer/build/acceptance history. Node 0.8.19 is installed; X4 0.1.3-3 is bundled but hardware activation is pending. Validation: qualified DG/Node builds and Go race tests; 31 fleet tests; Python-to-Go certificate interoperability and live tailnet recovery with five fresh heartbeats; prior 38 X4 tests and bounded remote WebRTC acceptance. Clean-OS, replug/power autonomy, local X4 video and long-run stability remain open.
66 lines
3.4 KiB
Bash
66 lines
3.4 KiB
Bash
#!/bin/sh
|
|
# Fixed local database bootstrap; no supplied SQL, credentials or network address.
|
|
set -eu
|
|
test "$(id -u)" = 0
|
|
if ! getent passwd mission-core-monitor >/dev/null; then
|
|
adduser --system --group --home /var/lib/mission-core-monitor --no-create-home --disabled-login mission-core-monitor
|
|
fi
|
|
install -d -m 0750 -o mission-core-monitor -g mission-core-node /var/lib/mission-core-monitor
|
|
install -d -m 0755 -o postgres -g postgres /run/mission-core-monitor-db
|
|
install -d -m 0755 /etc/tmpfiles.d
|
|
printf '%s\n' 'd /run/mission-core-monitor-db 0755 postgres postgres -' > /etc/tmpfiles.d/mission-core-monitor.conf
|
|
# R18 used a dash, which the PostgreSQL systemd template expands as a slash.
|
|
# Rename only our exact cluster. pg_renamecluster preserves this custom data
|
|
# directory, updates its configuration paths, and retains all database files.
|
|
if [ -d /etc/postgresql/16/ndc-monitor ]; then
|
|
test ! -d /etc/postgresql/16/ndcmonitor
|
|
test "$(pg_conftool -s 16 ndc-monitor show data_directory)" = /var/lib/mission-core-monitor-db
|
|
test "$(pg_conftool -s 16 ndc-monitor show port)" = 5433
|
|
pg_renamecluster 16 ndc-monitor ndcmonitor
|
|
fi
|
|
if [ ! -d /etc/postgresql/16/ndcmonitor ]; then
|
|
pg_createcluster 16 ndcmonitor --port=5433 --socketdir=/run/mission-core-monitor-db --datadir=/var/lib/mission-core-monitor-db --start-conf=auto -- --auth-local=peer --auth-host=reject
|
|
fi
|
|
test "$(pg_conftool -s 16 ndcmonitor show data_directory)" = /var/lib/mission-core-monitor-db
|
|
test "$(pg_conftool -s 16 ndcmonitor show port)" = 5433
|
|
install -d -m 0755 /etc/postgresql/16/ndcmonitor/conf.d
|
|
cat > /etc/postgresql/16/ndcmonitor/conf.d/60-mission-core-monitor.conf <<'CONF'
|
|
listen_addresses = ''
|
|
unix_socket_directories = '/run/mission-core-monitor-db'
|
|
shared_preload_libraries = 'timescaledb'
|
|
shared_buffers = '32MB'
|
|
work_mem = '2MB'
|
|
maintenance_work_mem = '16MB'
|
|
max_connections = 12
|
|
max_worker_processes = 4
|
|
max_parallel_workers = 0
|
|
timescaledb.max_background_workers = 2
|
|
timescaledb.telemetry_level = 'off'
|
|
max_wal_size = '128MB'
|
|
min_wal_size = '32MB'
|
|
temp_file_limit = '32MB'
|
|
statement_timeout = '5s'
|
|
log_statement = 'none'
|
|
log_min_error_statement = 'panic'
|
|
CONF
|
|
install -d -m 0755 /etc/systemd/system/postgresql@16-ndcmonitor.service.d
|
|
cat > /etc/systemd/system/postgresql@16-ndcmonitor.service.d/60-mission-core-monitor.conf <<'CONF'
|
|
[Service]
|
|
ExecStartPre=+/usr/bin/install -d -m 0755 -o postgres -g postgres /run/mission-core-monitor-db
|
|
MemoryHigh=256M
|
|
MemoryMax=384M
|
|
CPUQuota=25%
|
|
TasksMax=32
|
|
Nice=10
|
|
CONF
|
|
systemctl daemon-reload
|
|
systemctl restart postgresql@16-ndcmonitor.service
|
|
runuser -u postgres -- psql -X -P pager=off -v ON_ERROR_STOP=1 -h /run/mission-core-monitor-db -p 5433 -d postgres <<'SQL'
|
|
SELECT 'CREATE ROLE "mission-core-monitor" LOGIN NOSUPERUSER NOCREATEDB NOCREATEROLE' WHERE NOT EXISTS(SELECT FROM pg_roles WHERE rolname='mission-core-monitor') \gexec
|
|
SELECT 'CREATE DATABASE mission_core_monitor OWNER "mission-core-monitor"' WHERE NOT EXISTS(SELECT FROM pg_database WHERE datname='mission_core_monitor') \gexec
|
|
SQL
|
|
runuser -u postgres -- psql -X -P pager=off -v ON_ERROR_STOP=1 -h /run/mission-core-monitor-db -p 5433 -d mission_core_monitor -c 'CREATE EXTENSION IF NOT EXISTS timescaledb'
|
|
runuser -u mission-core-monitor -- psql -X -P pager=off -v ON_ERROR_STOP=1 -h /run/mission-core-monitor-db -p 5433 -d mission_core_monitor -f /usr/lib/mission-core-node/monitor/schema.sql
|
|
systemctl enable mission-core-node-monitor.service
|
|
systemctl restart mission-core-node-monitor.service
|