mirror of
https://github.com/GoodOlClint/PSProxmoxVE.git
synced 2026-07-26 16:08:13 +00:00
Clint Branham
0077a2d055
Mounting the whole directory to /app overwrites server.py inside the container, causing "can't open file '/app/server.py'" errors. Mount the two paths individually instead: - answer_server_dir/answers → /app/answers - answer_server_dir/default.toml → /app/default.toml Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
113 lines
3.8 KiB
Terraform
113 lines
3.8 KiB
Terraform
# ── Answer server container ──────────────────────────────────────────
|
|
|
|
resource "docker_container" "answer_server" {
|
|
name = "pvetest-answer-server"
|
|
# Pin to digest for reproducibility. Update by pulling latest and running:
|
|
# docker inspect slothcroissant/proxmox-auto-installer-server:latest --format '{{index .RepoDigests 0}}'
|
|
image = "slothcroissant/proxmox-auto-installer-server@sha256:0f45d7bfe6e3cc76aa00fc578e40b80b9054e377db18a79122866fe5522bc7ed"
|
|
restart = "unless-stopped"
|
|
must_run = true
|
|
start = true
|
|
|
|
network_mode = "host"
|
|
|
|
volumes {
|
|
host_path = "${var.answer_server_dir}/answers"
|
|
container_path = "/app/answers"
|
|
}
|
|
|
|
volumes {
|
|
host_path = "${var.answer_server_dir}/default.toml"
|
|
container_path = "/app/default.toml"
|
|
}
|
|
}
|
|
|
|
# ── Docker images & volumes ──────────────────────────────────────────
|
|
|
|
resource "docker_image" "ubuntu" {
|
|
# Pin to digest for reproducibility. Update:
|
|
# docker pull ubuntu:24.04 && docker inspect ubuntu:24.04 --format '{{index .RepoDigests 0}}'
|
|
name = "ubuntu@sha256:186072bba1b2f436cbb91ef2567abca677337cfc786c86e107d25b7072feef0c"
|
|
}
|
|
|
|
resource "docker_volume" "iscsi_data" {
|
|
name = "pvetest-iscsi-data"
|
|
}
|
|
|
|
resource "docker_volume" "nfs_data" {
|
|
name = "pvetest-nfs-data"
|
|
}
|
|
|
|
# ── iSCSI target container ──────────────────────────────────────────
|
|
|
|
resource "docker_container" "iscsi_target" {
|
|
name = "pvetest-iscsi"
|
|
image = docker_image.ubuntu.image_id
|
|
privileged = true
|
|
restart = "unless-stopped"
|
|
|
|
network_mode = "host"
|
|
|
|
volumes {
|
|
volume_name = docker_volume.iscsi_data.name
|
|
container_path = "/srv/iscsi"
|
|
}
|
|
|
|
env = [
|
|
"ISCSI_IQN=${var.storage_iscsi_iqn}",
|
|
"ISCSI_LUN_SIZE=${var.storage_iscsi_lun_size}",
|
|
]
|
|
|
|
entrypoint = ["/bin/bash", "-c"]
|
|
command = [<<-EOT
|
|
set -e
|
|
apt-get update -qq && apt-get install -y -qq tgt >/dev/null 2>&1
|
|
mkdir -p /srv/iscsi
|
|
if [ ! -f /srv/iscsi/lun0.img ]; then
|
|
truncate -s $${ISCSI_LUN_SIZE} /srv/iscsi/lun0.img
|
|
fi
|
|
tgtd --foreground &
|
|
sleep 2
|
|
if ! tgtadm --lld iscsi --op show --mode target | grep -q "Target 1: $${ISCSI_IQN}"; then
|
|
tgtadm --lld iscsi --op new --mode target --tid 1 -T $${ISCSI_IQN}
|
|
fi
|
|
if ! tgtadm --lld iscsi --op show --mode logicalunit --tid 1 2>/dev/null | grep -qE "LUN:[[:space:]]*1($$|[^0-9])"; then
|
|
tgtadm --lld iscsi --op new --mode logicalunit --tid 1 --lun 1 --backing-store /srv/iscsi/lun0.img
|
|
fi
|
|
if ! tgtadm --lld iscsi --op show --mode target --tid 1 2>/dev/null | grep -q "Initiator-address: ALL"; then
|
|
tgtadm --lld iscsi --op bind --mode target --tid 1 -I ALL
|
|
fi
|
|
echo "iSCSI target ready: $${ISCSI_IQN} (port 3260)"
|
|
wait
|
|
EOT
|
|
]
|
|
}
|
|
|
|
# ── NFS server container ────────────────────────────────────────────
|
|
|
|
resource "docker_container" "nfs_server" {
|
|
name = "pvetest-nfs"
|
|
# Pin to digest for reproducibility. Update:
|
|
# docker pull erichough/nfs-server:2.2.1 && docker inspect erichough/nfs-server:2.2.1 --format '{{index .RepoDigests 0}}'
|
|
image = "erichough/nfs-server@sha256:1efd4ece380c5ba27479417585224ef857006daa46ab84560a28c1224bc71e9e"
|
|
privileged = true
|
|
restart = "unless-stopped"
|
|
|
|
network_mode = "host"
|
|
|
|
volumes {
|
|
volume_name = docker_volume.nfs_data.name
|
|
container_path = "/srv/nfs/shared"
|
|
}
|
|
|
|
volumes {
|
|
host_path = "/lib/modules"
|
|
container_path = "/lib/modules"
|
|
read_only = true
|
|
}
|
|
|
|
env = [
|
|
"NFS_EXPORT_0=/srv/nfs/shared *(rw,sync,no_subtree_check,no_root_squash)",
|
|
]
|
|
}
|