steve
12b72e7dde
Two fixes that close the loop on dashboard run-now and harden the
agent's restic invocation.
Default paths (interim until P2-01 schedules):
- 0003 migration adds default_paths TEXT NOT NULL DEFAULT '[]'
to hosts and to enrollment_tokens.
- Operator types paths in the Add-host form (textarea, one per
line). They ride on the enrol_token row alongside the
encrypted creds (paths aren't secret — plain JSON column).
- On consume, ConsumeEnrollmentToken still just burns the token;
the new GetEnrollmentTokenAttachments returns both the
re-bindable creds and the path list in one round trip, the
handler transfers them onto the new host row inside CreateHost.
- The dashboard's Run-now and host-detail's "Run backup now"
button now read Host.DefaultPaths and pass them to dispatchJob.
A host with no default paths returns 400 with a friendly
"no paths set" message instead of dispatching a doomed
`restic backup` with no positional args.
- Doc comments explicitly call this out as a Phase 1 interim —
schedules supersede.
Restic env hygiene:
- envSlice() previously omitted HOME / XDG_CACHE_HOME, which
bit the smoke runs whenever the agent was launched outside
systemd (restic refused to start: "neither $XDG_CACHE_HOME
nor $HOME are defined"). Now both are set explicitly: prefer
Env.ExtraEnv overrides, fall back to the agent process's own
HOME, and finally to /var/lib/restic-manager.
- Comment makes the env policy explicit: parent's RESTIC_* /
AWS_* / B2_* env is filtered out by design — control-plane
is the unambiguous source of truth.
JS bug fix in the live log page:
- {{$job.ID | printf "%q"}} produced a literal-quoted JS string,
which then went into the WS URL as ".../jobs/"<ID>"/stream"
→ 404. Switched to '{{$job.ID}}' inside the literal so
html/template's auto-escape does the right thing. Verified
end-to-end: dashboard "Run now" → live progress + log lines
arrive over the WS → succeeded pill renders.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
21 lines
859 B
SQL
21 lines
859 B
SQL
-- 0003_default_paths.sql
|
|
--
|
|
-- Per-host "default backup paths" — what the agent backs up when an
|
|
-- operator hits "Run now" without specifying paths explicitly. Phase
|
|
-- 1 interim until schedules (P2-01) provide a richer source. Once
|
|
-- Schedule rows exist, run-now will dispatch the host's primary
|
|
-- schedule's paths and this column becomes a fallback / migration
|
|
-- source.
|
|
--
|
|
-- Stored as JSON text (same shape as Host.tags) so we can grow to
|
|
-- excludes/tags later without a column-per-field schema churn.
|
|
|
|
ALTER TABLE hosts
|
|
ADD COLUMN default_paths TEXT NOT NULL DEFAULT '[]';
|
|
|
|
-- Operators set the paths at "Add host" time, alongside repo creds.
|
|
-- Stashed on the enrolment-token row (no encryption — paths aren't
|
|
-- secret) and copied to the host on consume.
|
|
ALTER TABLE enrollment_tokens
|
|
ADD COLUMN default_paths TEXT NOT NULL DEFAULT '[]';
|