mirror of
https://github.com/CloudNebulaProject/reddwarf.git
synced 2026-04-10 13:20:40 +00:00
cb6ca8cd3c
Enable the API server to optionally serve HTTPS (disabled by default). When --tls is passed without explicit cert/key paths, a self-signed CA and server certificate are auto-generated via rcgen and persisted to disk for reuse across restarts. The internal ApiClient learns to trust the self-signed CA so controller/agent components work seamlessly over TLS. Also adds SIGTERM signal handling (alongside SIGINT) and graceful shutdown via CancellationToken for both `serve` and `agent` modes, plus an SMF manifest and method script so reddwarf can run as svc:/system/reddwarf:default on illumos. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
65 lines
1.5 KiB
Bash
Executable file
65 lines
1.5 KiB
Bash
Executable file
#!/usr/bin/bash
|
|
#
|
|
# SMF method script for svc:/system/reddwarf:default
|
|
#
|
|
# Reads configuration from SMF properties and launches
|
|
# the reddwarf agent daemon.
|
|
#
|
|
|
|
. /lib/svc/share/smf_include.sh
|
|
|
|
REDDWARF_BIN="/opt/reddwarf/bin/reddwarf"
|
|
|
|
getprop() {
|
|
svcprop -p "application/$1" "$SMF_FMRI" 2>/dev/null
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
node_name=$(getprop node_name)
|
|
listen_addr=$(getprop listen_addr)
|
|
data_dir=$(getprop data_dir)
|
|
storage_pool=$(getprop storage_pool)
|
|
pod_cidr=$(getprop pod_cidr)
|
|
etherstub_name=$(getprop etherstub_name)
|
|
tls_enabled=$(getprop tls_enabled)
|
|
tls_cert=$(getprop tls_cert)
|
|
tls_key=$(getprop tls_key)
|
|
|
|
# Default node_name to hostname if not set
|
|
if [ -z "$node_name" ]; then
|
|
node_name=$(hostname)
|
|
fi
|
|
|
|
# Ensure data directory parent exists
|
|
data_parent=$(dirname "$data_dir")
|
|
mkdir -p "$data_parent"
|
|
|
|
# Build command line
|
|
cmd="$REDDWARF_BIN agent"
|
|
cmd="$cmd --node-name $node_name"
|
|
cmd="$cmd --bind $listen_addr"
|
|
cmd="$cmd --data-dir $data_dir"
|
|
cmd="$cmd --storage-pool $storage_pool"
|
|
cmd="$cmd --pod-cidr $pod_cidr"
|
|
cmd="$cmd --etherstub-name $etherstub_name"
|
|
|
|
if [ "$tls_enabled" = "true" ]; then
|
|
cmd="$cmd --tls"
|
|
if [ -n "$tls_cert" ] && [ -n "$tls_key" ]; then
|
|
cmd="$cmd --tls-cert $tls_cert"
|
|
cmd="$cmd --tls-key $tls_key"
|
|
fi
|
|
fi
|
|
|
|
# Launch the daemon
|
|
exec $cmd &
|
|
|
|
exit $SMF_EXIT_OK
|
|
;;
|
|
|
|
*)
|
|
echo "Usage: $0 { start }"
|
|
exit $SMF_EXIT_ERR_FATAL
|
|
;;
|
|
esac
|