vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

playbooks/upgrade-docker-ce: bake in the override.conf rewrite from nh3-docker debug

Browse Source 
After nh3-docker's swap, two systemd unit gotchas surfaced that the
playbook now handles automatically:

* The docker.io-era /etc/systemd/system/docker.service.d/override.conf
  hardcoded ExecStart=/usr/sbin/dockerd; docker-ce installs at
  /usr/bin/dockerd → daemon failed status=203/EXEC.
* The shipped docker-ce unit's ExecStart=dockerd -H fd:// conflicts
  with daemon.json hosts: (defined for the 0.0.0.0:2375 homepage
  discovery binding) → "conflicting host options".

The "Rewrite docker.service drop-in" step now backs up any existing
override, probes daemon.json for a hosts: setting, and installs an
override that strips -H from ExecStart when needed. Also added an
explicit systemctl reset-failed step to clear the start-rate-limit
state that 3 failed install-time starts leave behind.

configs/homepage/docker.yaml: comment out irv-ml1-docker provider —
20s-per-poll ETIMEDOUTs from the stalled host were drowning homepage's
logs and apparently blocking ana-pfi-docker discovery (the Miniflux
card in the News group wouldn't render until removal). Re-enable when
irv-ml1 is back.

STATUS.md: new "Active migration" section tracking the docker-ce
rollout — nh3-docker done; esh-docker-vm + ana-docker queued.
This commit is contained in:
vh
2026-04-26 14:12:06 -07:00
parent a3ab1a7b6c
commit be9109bc95
3 changed files with 91 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
configs/homepage/docker.yaml
+10 -3
View File
@@ -24,9 +24,16 @@ ana-ml2-docker:
# irv-ml1 — reachable ONLY via WireGuard tunnel, so docker auto-discovery
# traffic traverses the tunnel. If WG drops, homepage will show irv-ml1
# services as offline until reconnect.
irv-ml1-docker:
host: 10.100.79.3
port: 2375
#
# DISABLED 2026-04-26 because the host is down post-CUDA-upgrade
# (see STATUS.md "🟥 Blocked — irv-ml1 stalled"). The 20s-per-poll
# ETIMEDOUTs were drowning homepage's logs and apparently blocking
# the ana-pfi-docker discovery from completing — News group's Miniflux
# card never surfaced until this was commented out. Re-enable once
# irv-ml1 is back on the network.
# irv-ml1-docker:
# host: 10.100.79.3
# port: 2375
# Example TLS socket (if/when a host moves off plaintext 2375):
# ana-pfi-docker: