Sergei Poljanski
66ab6d8db3
On the 38 GB ops disk the s3fs cache reserve (ensure_diskfree) never fit, so all three mounts failed at every boot since 2026-09-22. Backups now go to Hetzner S3 with rclone instead. Add s3fs_enabled (default true); when false the role unmounts the buckets and drops their fstab entries, keeping the credentials file that the rclone wrapper reads. Assisted-by: Claude:opus-5
120 lines
3.6 KiB
YAML
120 lines
3.6 KiB
YAML
---
|
|
# S3FS role tasks - Mount S3 buckets using s3fs
|
|
|
|
- name: Install s3fs and dependencies
|
|
ansible.builtin.apt:
|
|
name: "{{ s3fs_packages }}"
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Create s3fs credentials directory
|
|
ansible.builtin.file:
|
|
path: /etc/s3fs
|
|
state: directory
|
|
mode: '0700'
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Create s3fs password file
|
|
ansible.builtin.template:
|
|
src: passwd-s3fs.j2
|
|
dest: /etc/s3fs/.passwd-s3fs
|
|
mode: '0600'
|
|
owner: root
|
|
group: root
|
|
no_log: true
|
|
|
|
- name: Create S3 cache directory
|
|
ansible.builtin.file:
|
|
path: /var/cache/s3fs
|
|
state: directory
|
|
mode: '0755'
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Mount S3 buckets
|
|
when: s3fs_enabled | bool
|
|
block:
|
|
- name: Create mount points for S3 buckets
|
|
ansible.builtin.file:
|
|
path: "{{ item.mount_point }}"
|
|
state: directory
|
|
mode: "{{ item.mode }}"
|
|
owner: "{{ item.owner }}"
|
|
group: "{{ item.group }}"
|
|
loop: "{{ s3_buckets }}"
|
|
loop_control:
|
|
label: "{{ item.name }} -> {{ item.mount_point }}"
|
|
|
|
- name: Add S3 buckets to /etc/fstab
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/fstab
|
|
line: "{{ item.name }} {{ item.mount_point }} fuse.s3fs _netdev,{{ s3fs_options | join(',') }} 0 0"
|
|
regexp: "^{{ item.name }}\\s+{{ item.mount_point }}"
|
|
state: present
|
|
loop: "{{ s3_buckets }}"
|
|
loop_control:
|
|
label: "{{ item.name }} -> {{ item.mount_point }}"
|
|
|
|
- name: Mount all S3 buckets
|
|
ansible.builtin.command:
|
|
cmd: "mount {{ item.mount_point }}"
|
|
loop: "{{ s3_buckets }}"
|
|
loop_control:
|
|
label: "{{ item.name }} -> {{ item.mount_point }}"
|
|
register: mount_result
|
|
changed_when: mount_result.rc == 0
|
|
failed_when: false
|
|
|
|
- name: Verify S3 buckets are mounted
|
|
ansible.builtin.command:
|
|
cmd: "mountpoint -q {{ item.mount_point }}"
|
|
loop: "{{ s3_buckets }}"
|
|
loop_control:
|
|
label: "{{ item.name }} -> {{ item.mount_point }}"
|
|
register: verify_mount
|
|
changed_when: false
|
|
failed_when: verify_mount.rc != 0
|
|
|
|
- name: Display mounted S3 buckets
|
|
ansible.builtin.debug:
|
|
msg: |
|
|
✅ S3 Buckets mounted successfully:
|
|
{% for bucket in s3_buckets %}
|
|
- {{ bucket.name }} -> {{ bucket.mount_point }}
|
|
{% endfor %}
|
|
|
|
- name: Test write access to Immich bucket
|
|
ansible.builtin.copy:
|
|
content: "S3FS test file created on {{ ansible_date_time.iso8601 }}"
|
|
dest: "{{ s3_buckets | selectattr('name', 'equalto', 'asxpio-immich-main') | map(attribute='mount_point') | first }}/.s3fs-test"
|
|
mode: '0644'
|
|
when: "'asxpio-immich-main' in s3_buckets | map(attribute='name')"
|
|
register: write_test
|
|
|
|
- name: Remove test file
|
|
ansible.builtin.file:
|
|
path: "{{ s3_buckets | selectattr('name', 'equalto', 'asxpio-immich-main') | map(attribute='mount_point') | first }}/.s3fs-test"
|
|
state: absent
|
|
when: write_test is changed
|
|
|
|
- name: Unmount S3 buckets
|
|
ansible.builtin.command:
|
|
cmd: "umount {{ item.mount_point }}"
|
|
loop: "{{ s3_buckets }}"
|
|
loop_control:
|
|
label: "{{ item.mount_point }}"
|
|
register: umount_result
|
|
changed_when: umount_result.rc == 0
|
|
failed_when: false
|
|
when: not (s3fs_enabled | bool)
|
|
|
|
- name: Remove S3 buckets from /etc/fstab
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/fstab
|
|
regexp: "^{{ item.name }}\\s+{{ item.mount_point }}\\s"
|
|
state: absent
|
|
loop: "{{ s3_buckets }}"
|
|
loop_control:
|
|
label: "{{ item.name }} -> {{ item.mount_point }}"
|
|
when: not (s3fs_enabled | bool)
|