Lemon-miaow
adf563ffe3
复用现有 k3s 调度和 Job 生命周期，增加 worker 接入与批准、受保护节点身份、归档传输、持久迁移锁及活动 PVC 切换；同步管理员 API、CLI、面板和隔离规则。分布式模式默认关闭，保持单机兼容。 验证：Go 全量测试与 vet；面板 874 个测试、lint/build；Linux VM 安装器测试、清单服务端 dry-run、网络命名空间防火墙实测。A/B/C 三机 WireGuard、Velocity 和迁移验收仍待完成。
59 lines
1.6 KiB
Go
59 lines
1.6 KiB
Go
package main
|
|
|
|
import (
|
|
"errors"
|
|
"flag"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"os"
|
|
"time"
|
|
|
|
"felis.lolicon.best/internal/archivetransfer"
|
|
)
|
|
|
|
func cmdArchiveServe(args []string, stdout, stderr io.Writer) int {
|
|
fs := flag.NewFlagSet("archive-serve", flag.ContinueOnError)
|
|
fs.SetOutput(stderr)
|
|
root := fs.String("root", "/backups", "archive PVC mount (must match archive.local_path)")
|
|
addr := fs.String("listen", ":8090", "private archive listener")
|
|
limit := fs.Int64("max-bytes", archivetransfer.DefaultLimit, "maximum compressed archive bytes")
|
|
if err := fs.Parse(args); err != nil {
|
|
return 2
|
|
}
|
|
key := os.Getenv(archivetransfer.KeyEnv)
|
|
if len(key) < 32 || *limit <= 0 {
|
|
fmt.Fprintln(stderr, "archive-serve: signing key and positive size limit required")
|
|
return 2
|
|
}
|
|
if err := os.MkdirAll(*root, 0750); err != nil {
|
|
fmt.Fprintln(stderr, err)
|
|
return 1
|
|
}
|
|
limitHeapToCgroup()
|
|
transport := &archivetransfer.Server{Root: *root, Key: key, Limit: *limit}
|
|
done := make(chan struct{})
|
|
defer close(done)
|
|
go func() {
|
|
ticker := time.NewTicker(time.Hour)
|
|
defer ticker.Stop()
|
|
for {
|
|
if err := transport.Sweep(time.Now()); err != nil {
|
|
fmt.Fprintln(stderr, "archive journal cleanup:", err)
|
|
}
|
|
select {
|
|
case <-done:
|
|
return
|
|
case <-ticker.C:
|
|
}
|
|
}
|
|
}()
|
|
srv := &http.Server{Addr: *addr, Handler: transport, ReadHeaderTimeout: 10 * time.Second, ReadTimeout: 2 * time.Hour, WriteTimeout: 2 * time.Hour, MaxHeaderBytes: 16 << 10}
|
|
fmt.Fprintln(stdout, "archive transport listening", *addr)
|
|
if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
|
fmt.Fprintln(stderr, err)
|
|
return 1
|
|
}
|
|
return 0
|
|
}
|