Repository navigation
Compose drift watch #200
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Compose drift watch | |
| # Scheduled sentinel for #2747: a `systemctl restart docker` (#2743) | |
| # surfaced four always-on services (three DB/backing-store sidecars plus | |
| # their stack's dependent app containers kept running regardless) that had | |
| # no container at all -- not even a stopped one -- across three Dockge | |
| # stacks. Nothing alarmed; it was found by hand while working an unrelated | |
| # issue. This sweep turns "compose says this service should exist and a | |
| # sibling is actively running, but it doesn't" into a labeled tracking | |
| # issue, mirroring disk-usage-watch.yml's (#2743) and ci-queue-watch.yml's | |
| # (#2499) shape. | |
| # | |
| # Runs ON the homeserver-backed fleet (not GitHub-hosted): it has to walk | |
| # /var/dockge/stacks and run `docker compose config`/`ps` against each | |
| # project directly on that host -- no separate SSH credential or network | |
| # path to the thing being measured, same reasoning the other two watchers | |
| # give for their own designs. | |
| on: | |
| schedule: | |
| - cron: "*/30 * * * *" | |
| workflow_dispatch: | |
| # #3313: job-scoped, workflow level defaults to none -- see the same note in | |
| # backup-staleness-watch.yml. | |
| permissions: {} | |
| concurrency: | |
| group: compose-drift-watch | |
| cancel-in-progress: false | |
| jobs: | |
| sweep: | |
| # honeypot-homeserver (#3379): this job measures the homeserver itself, | |
| # so it must never land on a --build-only honeypot-ci executor elsewhere. | |
| runs-on: [self-hosted, linux, x64, honeypot-ci, honeypot-homeserver] | |
| timeout-minutes: 5 | |
| permissions: | |
| issues: write | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Sweep the fleet for compose services missing all containers | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| run: python3 scripts/compose-drift-watch.py |