spinifex/scripts/ansible/roles/logs/tasks/main.yml

---
# Collect a self-contained log bundle for bug reports. NEVER mutates running
# state — only reads journalctl + /var/log/spinifex/* + status output, then
# tars into logs_output_dir. Errors on missing inputs are non-fatal so a
# half-broken node still produces a bundle.

- name: logs — resolve staging directory
  ansible.builtin.set_fact:
    logs_stage_dir: "/tmp/spinifex-logs-{{ ansible_facts['hostname'] }}-{{ ansible_facts['date_time']['iso8601_basic_short'] }}"
    logs_bundle_path: "{{ logs_output_dir }}/spinifex-logs-{{ ansible_facts['hostname'] }}-{{ ansible_facts['date_time']['iso8601_basic_short'] }}.tar.gz"

- name: logs — create staging tree
  ansible.builtin.file:
    path: "{{ logs_stage_dir }}/{{ item }}"
    state: directory
    mode: "0755"
  loop:
    - journal
    - varlog
    - status
    - kernel

- name: logs — capture journalctl for spinifex-* units
  become: true
  ansible.builtin.shell: |
    journalctl --no-pager --output=short-iso \
      -u 'spinifex-*' --since {{ logs_since | quote }} \
      > {{ logs_stage_dir }}/journal/spinifex.log 2>&1 || true
  changed_when: true

- name: logs — capture journalctl for ovn-* + openvswitch-switch
  become: true
  ansible.builtin.shell: |
    journalctl --no-pager --output=short-iso \
      -u 'ovn-*' -u openvswitch-switch \
      --since {{ logs_since | quote }} \
      > {{ logs_stage_dir }}/journal/ovn-ovs.log 2>&1 || true
  changed_when: true

- name: logs — capture journalctl for nbdkit + qemu (best-effort match)
  become: true
  ansible.builtin.shell: |
    journalctl --no-pager --output=short-iso \
      --since {{ logs_since | quote }} \
      _COMM=qemu-system-x86_64 + _COMM=qemu-system-aarch64 + _COMM=nbdkit \
      > {{ logs_stage_dir }}/journal/qemu-nbdkit.log 2>&1 || true
  changed_when: true

- name: logs — copy /var/log/spinifex/*
  become: true
  ansible.builtin.shell: |
    if [ -d {{ spinifex_log_dir | quote }} ]; then
      cp -a {{ spinifex_log_dir | quote }}/. {{ logs_stage_dir | quote }}/varlog/ 2>/dev/null || true
    fi
  changed_when: true

- name: logs — systemctl status snapshot (spinifex-*)
  become: true
  ansible.builtin.shell: |
    systemctl status 'spinifex-*' --no-pager --all \
      > {{ logs_stage_dir }}/status/spinifex-units.txt 2>&1 || true
    systemctl status ovn-controller ovn-central openvswitch-switch \
      --no-pager > {{ logs_stage_dir }}/status/ovn-ovs-units.txt 2>&1 || true
    systemctl list-units 'spinifex-*' --all --no-legend --plain \
      > {{ logs_stage_dir }}/status/spinifex-list.txt 2>&1 || true
  changed_when: true

- name: logs — networking snapshot (ip, ss, ovs)
  become: true
  ansible.builtin.shell: |
    ip -d -s link show > {{ logs_stage_dir }}/status/ip-link.txt 2>&1 || true
    ip addr show       > {{ logs_stage_dir }}/status/ip-addr.txt 2>&1 || true
    ip route show table all > {{ logs_stage_dir }}/status/ip-route.txt 2>&1 || true
    ss -tlnp           > {{ logs_stage_dir }}/status/ss-tlnp.txt 2>&1 || true
    if command -v ovs-vsctl >/dev/null 2>&1; then
      ovs-vsctl show     > {{ logs_stage_dir }}/status/ovs-show.txt 2>&1 || true
      ovs-vsctl list-br  > {{ logs_stage_dir }}/status/ovs-br.txt 2>&1 || true
    fi
    if command -v ovn-nbctl >/dev/null 2>&1; then
      ovn-nbctl show   > {{ logs_stage_dir }}/status/ovn-nb.txt 2>&1 || true
      ovn-sbctl show   > {{ logs_stage_dir }}/status/ovn-sb.txt 2>&1 || true
    fi
  changed_when: true

- name: logs — kernel ring buffer
  become: true
  ansible.builtin.shell: |
    dmesg --time-format=iso > {{ logs_stage_dir }}/kernel/dmesg.txt 2>&1 || true
  changed_when: true
  when: logs_include_dmesg | bool

- name: logs — capture spx + plugin versions
  become: true
  ansible.builtin.shell: |
    {
      echo '## spx version'
      /usr/local/bin/spx version 2>&1 | grep -vE '^[0-9]{4}/' || true
      echo
      echo '## nbdkit plugin sha256'
      pdir=$(nbdkit --dump-config 2>/dev/null | awk -F= '/^plugindir=/{print $2; exit}')
      [ -n "$pdir" ] && sha256sum "$pdir/nbdkit-viperblock-plugin.so" 2>/dev/null || true
      echo
      echo '## microvm artifacts'
      sha256sum /usr/share/spinifex/microvm/* 2>/dev/null || true
      echo
      echo '## kernel + os'
      uname -a
      cat /etc/os-release 2>/dev/null || true
    } > {{ logs_stage_dir }}/status/versions.txt 2>&1 || true
  changed_when: true

- name: logs — create bundle tarball
  become: true
  ansible.builtin.shell: |
    tar -C {{ logs_stage_dir | dirname | quote }} \
      -czf {{ logs_bundle_path | quote }} \
      {{ logs_stage_dir | basename | quote }}
  changed_when: true

- name: logs — make bundle owned by invoking user
  become: true
  ansible.builtin.file:
    path: "{{ logs_bundle_path }}"
    owner: "{{ spinifex_invoking_user }}"
    group: "{{ spinifex_invoking_user }}"
    mode: "0640"

- name: logs — remove staging tree
  become: true
  ansible.builtin.file:
    path: "{{ logs_stage_dir }}"
    state: absent

- name: logs — bundle size
  ansible.builtin.stat:
    path: "{{ logs_bundle_path }}"
  register: logs_bundle_stat

- name: logs — summary
  ansible.builtin.debug:
    msg: |
      Log bundle written:
        path  : {{ logs_bundle_path }}
        size  : {{ (logs_bundle_stat.stat.size | int / 1024) | round(1) }} KiB
        since : {{ logs_since }}
      Contents:
        journal/    spinifex-*, ovn-*+openvswitch-switch, qemu/nbdkit
        varlog/     copy of {{ spinifex_log_dir }}
        status/     systemctl status, ip/ss/ovs/ovn show, versions
        kernel/     dmesg{{ '' if logs_include_dmesg else ' (skipped via -e logs_include_dmesg=false)' }}

      Attach to bug report. For live tail use:
        journalctl -u 'spinifex-*' -f