X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/1198cc96af6115a360c08e95ecb7654c83f944ef..c563904334372729e94251413af3a9b53b2c1f97:/cookbooks/planet/recipes/replication.rb diff --git a/cookbooks/planet/recipes/replication.rb b/cookbooks/planet/recipes/replication.rb index 3fbfd7377..51f0e69a2 100644 --- a/cookbooks/planet/recipes/replication.rb +++ b/cookbooks/planet/recipes/replication.rb @@ -17,20 +17,23 @@ # limitations under the License. # +require "yaml" + include_recipe "accounts" include_recipe "osmosis" db_passwords = data_bag_item("db", "passwords") -package "postgresql-client" - -package "ruby" -package "ruby-dev" -package "ruby-libxml" - -package "make" -package "gcc" -package "libpq-dev" +package %w[ + postgresql-client + ruby + ruby-dev + ruby-libxml + make + gcc + libpq-dev + osmdbt +] gem_package "pg" @@ -38,10 +41,10 @@ remote_directory "/opt/flush" do source "flush" owner "root" group "root" - mode 0o755 + mode "755" files_owner "root" files_group "root" - files_mode 0o755 + files_mode "755" end execute "/opt/flush/Makefile" do @@ -57,95 +60,173 @@ remote_directory "/usr/local/bin" do source "replication-bin" owner "root" group "root" - mode 0o755 + mode "755" files_owner "root" files_group "root" - files_mode 0o755 + files_mode "755" +end + +template "/usr/local/bin/replicate-minute" do + source "replicate-minute.erb" + owner "root" + group "root" + mode "755" end template "/usr/local/bin/users-agreed" do source "users-agreed.erb" owner "root" group "root" - mode 0o755 + mode "755" end template "/usr/local/bin/users-deleted" do source "users-deleted.erb" owner "root" group "root" - mode 0o755 + mode "755" end remote_directory "/store/planet/users_deleted" do source "users_deleted" owner "planet" group "planet" - mode 0o755 + mode "755" files_owner "root" files_group "root" - files_mode 0o644 + files_mode "644" end remote_directory "/store/planet/replication" do source "replication-cgi" owner "root" group "root" - mode 0o755 + mode "755" files_owner "root" files_group "root" - files_mode 0o755 + files_mode "755" end directory "/store/planet/replication/changesets" do owner "planet" group "planet" - mode 0o755 + mode "755" end directory "/store/planet/replication/day" do owner "planet" group "planet" - mode 0o755 + mode "755" end directory "/store/planet/replication/hour" do owner "planet" group "planet" - mode 0o755 + mode "755" end directory "/store/planet/replication/minute" do owner "planet" group "planet" - mode 0o755 + mode "755" +end + +directory "/store/planet/replication/test" do + owner "planet" + group "planet" + mode "755" +end + +directory "/store/planet/replication/test/minute" do + owner "planet" + group "planet" + mode "755" +end + +directory "/store/replication" do + owner "planet" + group "planet" + mode "755" +end + +directory "/store/replication/minute" do + owner "planet" + group "planet" + mode "755" +end + +systemd_tmpfile "/run/replication" do + type "d" + owner "planet" + group "planet" + mode "755" end directory "/etc/replication" do owner "root" group "root" - mode 0o755 + mode "755" end directory "/var/run/lock/changeset-replication/" do owner "planet" group "planet" - mode 0o750 + mode "750" end template "/etc/replication/auth.conf" do source "replication.auth.erb" user "root" group "planet" - mode 0o640 + mode "640" variables :password => db_passwords["planetdiff"] end +osmdbt_config = { + "database" => { + "host" => node[:web][:database_host], + "dbname" => "openstreetmap", + "user" => "planetdiff", + "password" => db_passwords["planetdiff"], + "replication_slot" => "osmdbt" + }, + "log_dir" => "/var/lib/replication/minute", + "changes_dir" => "/store/planet/replication/test/minute", + "tmp_dir" => "/store/replication/minute", + "run_dir" => "/run/replication" +} + +file "/etc/replication/osmdbt-config.yaml" do + user "root" + group "planet" + mode "640" + content YAML.dump(osmdbt_config) +end + +systemd_service "replication-minutely" do + description "Minutely replication" + user "planet" + working_directory "/etc/replication" + exec_start "/usr/local/bin/replicate-minute" + private_tmp true + private_devices true + protect_system "full" + protect_home true + restrict_address_families %w[AF_INET AF_INET6] + no_new_privileges true +end + +systemd_timer "replication-minutely" do + description "Minutely replication" + on_boot_sec 60 + on_unit_active_sec 60 +end + template "/etc/replication/changesets.conf" do source "changesets.conf.erb" user "root" group "planet" - mode 0o640 + mode "640" variables :password => db_passwords["planetdiff"] end @@ -153,27 +234,33 @@ template "/etc/replication/users-agreed.conf" do source "users-agreed.conf.erb" user "planet" group "planet" - mode 0o600 + mode "600" variables :password => db_passwords["planetdiff"] end directory "/var/lib/replication" do owner "planet" group "planet" - mode 0o755 + mode "755" +end + +directory "/var/lib/replication/minute" do + owner "planet" + group "planet" + mode "755" end directory "/var/lib/replication/hour" do owner "planet" group "planet" - mode 0o755 + mode "755" end template "/var/lib/replication/hour/configuration.txt" do source "replication.config.erb" owner "planet" group "planet" - mode 0o644 + mode "644" variables :base => "minute", :interval => 3600 end @@ -184,14 +271,14 @@ end directory "/var/lib/replication/day" do owner "planet" group "planet" - mode 0o755 + mode "755" end template "/var/lib/replication/day/configuration.txt" do source "replication.config.erb" owner "planet" group "planet" - mode 0o644 + mode "644" variables :base => "hour", :interval => 86400 end @@ -222,6 +309,10 @@ if node[:planet][:replication] == "enabled" mailto "zerebubuth@gmail.com" end + service "replication-minutely.timer" do + action [:enable, :start] + end + cron_d "replication-minutely" do user "planet" command "/usr/local/bin/osmosis -q --replicate-apidb authFile=/etc/replication/auth.conf validateSchemaVersion=false --write-replication workingDirectory=/store/planet/replication/minute" @@ -257,6 +348,10 @@ else action :delete end + service "replication-minutely.timer" do + action [:stop, :disable] + end + cron_d "replication-minutely" do action :delete end @@ -269,38 +364,3 @@ else action :delete end end - -# directory "/var/lib/replication/streaming" do -# owner "planet" -# group "planet" -# mode 0o755 -# end -# -# directory "/var/log/replication" do -# owner "planet" -# group "planet" -# mode 0o755 -# end -# -# ["streaming-replicator", "streaming-server"].each do |name| -# template "/etc/init.d/#{name}" do -# source "streaming.init.erb" -# owner "root" -# group "root" -# mode 0o755 -# variables :service => name -# end -# -# if node[:planet][:replication] == "enabled" -# service name do -# action [:enable, :start] -# supports :restart => true, :status => true -# subscribes :restart, "template[/etc/init.d/#{name}]" -# end -# else -# service name do -# action [:disable, :stop] -# supports :restart => true, :status => true -# end -# end -# end