jschoubben
cae0d00a7d
Read against hal/modules/mssql: the predecessor publishes 4848:1433 and its connections block hands every consumer localhost:4848; its data has lived in /services/mssql/data since it was installed — 4.6 GB of it. The nox module had 1433, db-data, and a pin three builds behind, so taking it would have moved the port every consumer was told about, started on an empty directory, and downgraded the engine at the same time. db-data was not a convention: only this module and mongodb used it, and both predecessors say data. Now nothing moves at the cutover.
138 lines
3.2 KiB
JSON
138 lines
3.2 KiB
JSON
{
|
|
"module": "mssql",
|
|
"version": "1",
|
|
"provides": [
|
|
{
|
|
"name": "mssql-database",
|
|
"scope": "mesh"
|
|
}
|
|
],
|
|
"capabilities": [
|
|
"container-runtime"
|
|
],
|
|
"emits": [
|
|
"module.mssql.database.provisioned",
|
|
"module.mssql.database.deprovisioned"
|
|
],
|
|
"consumes": [
|
|
"module.mssql.database.provisioned",
|
|
"module.mssql.database.deprovisioned"
|
|
],
|
|
"listens": [
|
|
{
|
|
"port": 4848,
|
|
"protocol": "tcp",
|
|
"from": "mesh",
|
|
"why": "modules on any machine that were granted a database. 4848, not 1433: the machine this replaces has served it there since it was installed, and every consumer was handed that number"
|
|
}
|
|
],
|
|
"serves": {
|
|
"mssql-database": {}
|
|
},
|
|
"receives": {
|
|
"mssql-database": "/var/lib/mssql/grants/mesh.json"
|
|
},
|
|
"grants": {
|
|
"mssql-database": "/var/lib/mssql/grants"
|
|
},
|
|
"own-secrets": {
|
|
"sa": "/var/lib/mssql/sa.secret",
|
|
"broker": "/var/lib/mesh/mssql/broker"
|
|
},
|
|
"resources": [
|
|
{
|
|
"id": "mesh-state",
|
|
"type": "directory",
|
|
"path": "/var/lib/mesh/mssql",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"path": "/var/lib/mssql",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "grants",
|
|
"type": "directory",
|
|
"path": "/var/lib/mssql/grants",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "sa-env",
|
|
"type": "file",
|
|
"path": "/var/lib/mssql/sa.env",
|
|
"mode": "0600",
|
|
"content": "ACCEPT_EULA=Y\nMSSQL_SA_PASSWORD=${secret:sa}\n"
|
|
},
|
|
{
|
|
"id": "data",
|
|
"type": "directory",
|
|
"path": "/services/mssql/data",
|
|
"mode": "0700",
|
|
"owner": "10001:0"
|
|
},
|
|
{
|
|
"id": "net",
|
|
"type": "network",
|
|
"name": "mssql"
|
|
},
|
|
{
|
|
"id": "server",
|
|
"type": "container",
|
|
"name": "mssql",
|
|
"image": "mcr.microsoft.com/mssql/server@sha256:4402d880dd4c34bfa7d8705e56a86cd6c88da80a1f6bbbe741f999e76264a090",
|
|
"network": "mssql",
|
|
"env-file": [
|
|
"/var/lib/mssql/sa.env"
|
|
],
|
|
"ports": [
|
|
"4848:1433"
|
|
],
|
|
"volumes": [
|
|
"/services/mssql/data:/var/opt/mssql"
|
|
],
|
|
"secrets-in-environment": "the image documents only MSSQL_SA_PASSWORD, no _FILE and no configuration field; not convertible without a wrapper entrypoint"
|
|
},
|
|
{
|
|
"id": "runtime",
|
|
"type": "container",
|
|
"name": "mesh-mssql",
|
|
"network": "mssql",
|
|
"volumes": [
|
|
"/var/lib/mesh/mssql/broker:/run/secrets/broker:ro",
|
|
"/var/lib/mssql/grants:/var/lib/mssql/grants:ro",
|
|
"/var/lib/mssql/sa.secret:/run/secrets/sa:ro"
|
|
],
|
|
"env": {
|
|
"MESH_PROVISION_MSSQL": "mssql://sa@mssql:1433/master",
|
|
"MESH_PROVISION_PASSWORD_FILE": "/run/secrets/sa",
|
|
"MESH_BROKER_FILE": "/run/secrets/broker",
|
|
"MESH_RECEIVES": "/var/lib/mssql/grants/mesh.json"
|
|
},
|
|
"artifact": "runtime"
|
|
}
|
|
],
|
|
"build": {
|
|
"on": [
|
|
{
|
|
"arg": "BUILD_BASE",
|
|
"module": "mesh-tools",
|
|
"artifact": "build"
|
|
},
|
|
{
|
|
"arg": "RUNTIME_BASE",
|
|
"module": "mesh-tools",
|
|
"artifact": "runtime"
|
|
}
|
|
],
|
|
"artifacts": [
|
|
{
|
|
"name": "runtime",
|
|
"kind": "image",
|
|
"from": "Dockerfile"
|
|
}
|
|
]
|
|
}
|
|
}
|