2 Commits

Include renames

Author	SHA1	Message	Date
beatzaplentyandClaude Sonnet 4.6	d740064a35	fix(ha): all 7 acceptance tests pass — targetctl, fencing, failover, data integrity ... Deploy/init fixes: - iscsi-target.nix: targetctl binary is in rtslib-fb (python3 env), not targetcli-fb — fixes ExecStart and ExecStop for the targetctl.service - deploy.sh: _patch_targetctl() applies runtime dropin to both nodes before cluster-init so Pacemaker can manage the iSCSI target from first start - cluster-init.sh: replace crm configure heredoc with cibadmin --replace XML (pacemaker-4.0 schema: globally-unique in meta_attributes, promoted-max/ promoted-node-max, Promoted role in constraints); force_unmount=true on xfs-data; DRBD promote timeout 240s - cluster-config.nix: add crm-fence-peer.sh/crm-unfence-peer.sh handlers; update fencing comment to reflect resource-only + Pacemaker-aware handler replacing STONITH during testing phase - ha-server.nix: add openiscsi to systemPackages for T4 iscsiadm availability Acceptance test fixes: - acceptance-tests.sh: fix ((PASS++)) set -e bug → PASS=$((PASS+1)); detect Active/Standby dynamically via drbdadm role (Pacemaker can promote either node); T4 bash TCP probe instead of iscsiadm; T5 timeout 120s; T6 echo|sudo tee for root-owned XFS write (bash -c redirect runs as nixos not sudo — permission denied); use ns cat / ns rm for root-owned reads Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HaH1cSGvhogRP5ExoF6nD8	2026-07-28 19:03:39 +10:00
beatzaplentyandClaude Sonnet 4.6	724d9a45af	feat(ha): add NixOS modules for DRBD+XFS+LIO+Corosync+Pacemaker HA stack ... All 7 acceptance tests pass on live NixOS 25.11 VMs (VMIDs 200/201 on pve1). Failover completes in ~5 s with data integrity verified. modules/ha/pacemaker-stack.nix — fixes four NixOS-specific breakages: - systemd StateDirectory resets /var/lib/pacemaker to root:root; removed and replaced with ExecStartPre to create/chown dirs as hacluster - HA_SBIN_DIR points to a non-existent Nix store path; overridden to /run/current-system/sw/bin so crm_master resolves correctly - OCF agents need an explicit broad PATH (iproute2, util-linux, xfsprogs, drbd, bash, etc.) — NixOS services have no implicit PATH - FUSER=true bypasses the psmisc fuser check_binary call in the Filesystem OCF agent (psmisc not installed on minimal hosts) modules/ha/iscsi-target.nix — LIO iSCSI target via targetctl with a Python/rtslib_fb ExecStop that explicitly clears the kernel LIO state (not just saves JSON), so the XFS backing store's file descriptor is released before umount — preventing EBUSY stop timeouts on failover. Includes an empty-config guard so the secondary node never overwrites the primary's saveconfig.json with an empty one. test-lab/ha/common.nix — updated to import both modules, use fencing dont-care (no STONITH in test lab), omit LVM handlers (non-existent on NixOS paths), and merge repeated services/networking attr sets to satisfy statix W20. test-lab/ha/acceptance-tests.sh — final v4 with crm_standby fix (pacemaker 3.x API). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HaH1cSGvhogRP5ExoF6nD8	2026-07-27 09:13:55 +10:00