jochen
465707d41d
mesh/merge-gate pass: builds docker → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without (4 of 4 compose)
mesh/repo-check pass: its merge-check.sh passed
mesh/delivery superseded: a newer delivery to the same trunk took over its walk
Images pulled by digest are not dangling, so the weekly prune never takes an old version and every machine keeps every image it ever ran. docker_prune_images takes them, keeps what the declaration names (asked of the controller; no answer, nothing removed) and the one before, and is a dry run unless asked with a why.
119 lines
3.3 KiB
JSON
119 lines
3.3 KiB
JSON
{
|
|
"module": "docker",
|
|
"version": "1",
|
|
"capabilities": [
|
|
"package-manager",
|
|
"service-manager",
|
|
"privileged"
|
|
],
|
|
"invokes": [
|
|
"seat:mesh-controller.images"
|
|
],
|
|
"claims": [
|
|
{
|
|
"name": "node-container-runtime",
|
|
"scope": "node"
|
|
}
|
|
],
|
|
"tools": [
|
|
"docker_list",
|
|
"docker_inspect",
|
|
"docker_logs",
|
|
"docker_secrets_in_logs",
|
|
"docker_secrets_in_events",
|
|
"docker_stats",
|
|
"docker_start",
|
|
"docker_stop",
|
|
"docker_restart",
|
|
"docker_top",
|
|
"docker_images",
|
|
"docker_prune",
|
|
"docker_prune_images",
|
|
"docker_disk_usage",
|
|
"docker_networks",
|
|
"docker_volumes",
|
|
"docker_events",
|
|
"docker_daemon_config",
|
|
"docker_unlabelled",
|
|
"docker_problems",
|
|
"docker_ports"
|
|
],
|
|
"resources": [
|
|
{
|
|
"id": "package",
|
|
"type": "package",
|
|
"package": "docker"
|
|
},
|
|
{
|
|
"id": "buildx",
|
|
"type": "package",
|
|
"package": "docker-buildx"
|
|
},
|
|
{
|
|
"id": "socket",
|
|
"type": "service",
|
|
"unit": "docker.socket",
|
|
"state": "running",
|
|
"boot": "enabled"
|
|
},
|
|
{
|
|
"id": "daemon",
|
|
"type": "file",
|
|
"path": "/etc/docker/daemon.json",
|
|
"mode": "0644",
|
|
"into": "json",
|
|
"content": "{\"live-restore\": true, \"insecure-registries\": [\"${seat:mesh-artifact-store:reach}\"]}\n"
|
|
},
|
|
{
|
|
"id": "runtime",
|
|
"type": "service",
|
|
"unit": "docker.service",
|
|
"state": "running",
|
|
"boot": "enabled",
|
|
"reload-on": [
|
|
"daemon"
|
|
]
|
|
},
|
|
{
|
|
"id": "prune-service",
|
|
"type": "file",
|
|
"path": "/etc/systemd/system/docker-prune.service",
|
|
"mode": "0644",
|
|
"content": "# Generated by the mesh. Do not edit — module docker writes this file and replaces it at every push.\n[Unit]\nDescription=Prune dangling images and unused build cache (the mesh's docker module)\n# Never volumes, never a container, never an image a container uses: dangling\n# images and build cache nothing refers to, unused for a week. What a person\n# prunes beyond that is docker_prune's, by hand.\nAfter=docker.service\nConditionPathExists=/run/docker.sock\n\n[Service]\nType=oneshot\nNice=19\nIOSchedulingClass=idle\nExecStart=/usr/bin/docker image prune --force --filter until=168h\nExecStart=/usr/bin/docker builder prune --force --filter until=168h\n"
|
|
},
|
|
{
|
|
"id": "prune-timer",
|
|
"type": "file",
|
|
"path": "/etc/systemd/system/docker-prune.timer",
|
|
"mode": "0644",
|
|
"content": "# Generated by the mesh. Do not edit — module docker writes this file and replaces it at every push.\n[Unit]\nDescription=Weekly prune of dangling images and unused build cache (the mesh's docker module)\n\n[Timer]\nOnCalendar=weekly\nRandomizedDelaySec=1h\nPersistent=true\n\n[Install]\nWantedBy=timers.target\n"
|
|
},
|
|
{
|
|
"id": "prune",
|
|
"type": "service",
|
|
"unit": "docker-prune.timer",
|
|
"state": "running",
|
|
"boot": "enabled",
|
|
"restart-on": [
|
|
"prune-service",
|
|
"prune-timer"
|
|
]
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/docker-tools",
|
|
"binary": "docker-tools",
|
|
"loads": [
|
|
"docker-tools"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|