b1c81ba518
- template docker/pull-check.sh.tpl (pull sans up, inspect before/after) - dockerPull: parseDockerPullCheck + buildDockerPullResult (TDD) — compare image id/digest/label OCI → services up_to_date|updates_available|error, changes operation=pulled ; erreurs registry nettoyées (URL/token/password) - dockerDedupKey (digests prioritaires, fallback image ids) + DockerImageChange.dedupKey - pullCheckStack: SSH + upsert docker_stack_services, refuse stack non enabled, refresh Docker séparé (hors refreshMachine, pas de pull auto) - execute: runAction(opts.stackId), branche docker_pull_check, injection stackDir (corrige docker_inspect_current) ; route: allowlist Docker passifs + pull_check, destructives toujours hors API jusqu'à action_requests (SJ-6) Pas de migration (schéma SJ-4 suffisant). tsc 0 erreur · 85 tests · build OK. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
22 lines
1.1 KiB
Smarty
22 lines
1.1 KiB
Smarty
#!/bin/sh
|
|
export LC_ALL=C
|
|
cd "<%stackDir%>" || { echo "===SU:DOCKER_ERR==="; echo "compose_not_found"; echo "===SU:EXIT=2==="; exit 2; }
|
|
echo "===SU:DOCKER_INSPECT_BEFORE==="
|
|
docker compose config --images 2>/dev/null | while IFS= read -r img; do
|
|
id=$(docker image inspect "$img" --format '{{.Id}}' 2>/dev/null || echo "")
|
|
dg=$(docker image inspect "$img" --format '{{join .RepoDigests ","}}' 2>/dev/null || echo "")
|
|
echo "BEFORE $img $id $dg"
|
|
done
|
|
echo "===SU:DOCKER_PULL==="
|
|
# Télécharge les images candidates SANS démarrer de conteneurs.
|
|
docker compose pull --policy always --ignore-buildable 2>&1
|
|
CODE=$?
|
|
echo "===SU:DOCKER_INSPECT_AFTER==="
|
|
docker compose config --images 2>/dev/null | while IFS= read -r img; do
|
|
id=$(docker image inspect "$img" --format '{{.Id}}' 2>/dev/null || echo "")
|
|
dg=$(docker image inspect "$img" --format '{{join .RepoDigests ","}}' 2>/dev/null || echo "")
|
|
ver=$(docker image inspect "$img" --format '{{index .Config.Labels "org.opencontainers.image.version"}}' 2>/dev/null || echo "")
|
|
echo "AFTER $img $id $dg $ver"
|
|
done
|
|
echo "===SU:EXIT=${CODE}==="
|