From 05eca819091a1d99dfde5d3f6df25ec3e6adc2a6 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 6 Aug 2026 08:13:39 +0100 Subject: [PATCH] Move pgbackrest lock file to /run --- cookbooks/db/recipes/backup.rb | 2 +- cookbooks/postgresql/recipes/default.rb | 7 +++++++ cookbooks/postgresql/templates/default/pgbackrest.conf.erb | 1 + 3 files changed, 9 insertions(+), 1 deletion(-) diff --git a/cookbooks/db/recipes/backup.rb b/cookbooks/db/recipes/backup.rb index 53812a97c..da5605feb 100644 --- a/cookbooks/db/recipes/backup.rb +++ b/cookbooks/db/recipes/backup.rb @@ -30,7 +30,7 @@ systemd_service "backup-db" do user "postgres" sandbox :enable_network => true restrict_address_families "AF_UNIX" - read_write_paths "/var/log/pgbackrest" + read_write_paths ["/run/pgbackreset", "/var/log/pgbackrest"] end systemd_timer "backup-db" do diff --git a/cookbooks/postgresql/recipes/default.rb b/cookbooks/postgresql/recipes/default.rb index 78b953969..54dd055f3 100644 --- a/cookbooks/postgresql/recipes/default.rb +++ b/cookbooks/postgresql/recipes/default.rb @@ -31,6 +31,13 @@ if node[:postgresql][:pgbackrest][:credentials_bag] node[:postgresql][:pgbackrest][:credentials_item]) end +systemd_tmpfile "/run/pgbackrest" do + type "d" + owner "postgres" + group "postgres" + mode "750" +end + template "/etc/pgbackrest.conf" do source "pgbackrest.conf.erb" owner "postgres" diff --git a/cookbooks/postgresql/templates/default/pgbackrest.conf.erb b/cookbooks/postgresql/templates/default/pgbackrest.conf.erb index f86cfc73d..45a06d448 100644 --- a/cookbooks/postgresql/templates/default/pgbackrest.conf.erb +++ b/cookbooks/postgresql/templates/default/pgbackrest.conf.erb @@ -1,6 +1,7 @@ [global] archive-async=y compress-type=zst +lock-path=/run/pgbackrest repo1-type=<%= node[:postgresql][:pgbackrest][:repo_type] %> repo1-path=<%= node[:postgresql][:pgbackrest][:repo_path] %> repo1-block=y -- 2.47.3