abrown38andClaude Opus 5.5
293e6ddd33
- Daily database backups: jarl-backup.timer runs 'jarld backup', which writes jarl-<UTC time>.db into backup.dir, checks it before naming it, and prunes by the time in the name while always keeping the newest keep_at_least. New backup: section in jarl.yaml; the dashboard and 'jarl status' show the newest backup and warn when it is stale or failed. The Debian package enables the timer. - 'jarld restore [FILE | latest]': checks the backup, shows it next to the current database, keeps the current one aside and records the restore. 'jarld serve' holds a database lock, so a restore can't run under a live jarld and two jarlds can't share a database. - Token expiry warnings from 14 days ahead: dashboard, token lists, a daily log line, and a CLI warning via the Jarl-Token-Expires header; 'jarl token list --expiring'. - 'jarl zone serials' and the zone page's Name servers tab: compare the serial on a primary zone's secondaries (NS records, also-notify) or a secondary zone's primaries with this server's. - 'jarl zone delegation': for zones on the internet, check the parent's delegation and glue against the zone; an undelegated zone gets a note. - Server: Jarl/<version> header; CLI exit code 2 for failed checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
41 lines
1.2 KiB
Go
41 lines
1.2 KiB
Go
package main
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"syscall"
|
|
)
|
|
|
|
// errInUse means another process holds the database lock.
|
|
var errInUse = errors.New("the database is in use by a running jarld or by 'jarld restore'")
|
|
|
|
// lockDatabase takes the exclusive lock (on DATABASE.lock) that marks the
|
|
// database as in use by a running jarld or by 'jarld restore', so a
|
|
// restore can never replace the database under a running jarld, and two
|
|
// jarlds can't serve the same database. Other commands (backup, user, ...)
|
|
// don't take it: they work alongside a running jarld.
|
|
func lockDatabase(db string) (release func(), err error) {
|
|
if err := os.MkdirAll(filepath.Dir(db), 0o750); err != nil {
|
|
return nil, err
|
|
}
|
|
path := db + ".lock"
|
|
// Read-only is enough for flock, and works whoever created the file.
|
|
f, err := os.OpenFile(path, os.O_RDONLY|os.O_CREATE, 0o640)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if err := syscall.Flock(int(f.Fd()), syscall.LOCK_EX|syscall.LOCK_NB); err != nil {
|
|
f.Close()
|
|
if errors.Is(err, syscall.EWOULDBLOCK) {
|
|
return nil, errInUse
|
|
}
|
|
return nil, fmt.Errorf("locking %s: %w", path, err)
|
|
}
|
|
return func() {
|
|
syscall.Flock(int(f.Fd()), syscall.LOCK_UN)
|
|
f.Close()
|
|
}, nil
|
|
}
|