| 1 |
# One-shot: report when the live Sando topology is not what main says. |
| 2 |
# |
| 3 |
# Place at /etc/systemd/system/sando-config-drift.service on the Sando host. |
| 4 |
# |
| 5 |
# Reads only — it never installs a topology. A non-zero exit leaves this unit in |
| 6 |
# `failed`, which is the point: that is the loud, standing signal PoM's systemd |
| 7 |
# checks already look at, and it costs nothing to keep armed. |
| 8 |
|
| 9 |
[Unit] |
| 10 |
Description=Sando: report topology drift between the repo and the live config |
| 11 |
After=sandod.service |
| 12 |
# Deliberately not Requires=: a stopped sandod does not make the live file any |
| 13 |
# less drifted, and this check reads files rather than talking to the daemon. |
| 14 |
|
| 15 |
[Service] |
| 16 |
Type=oneshot |
| 17 |
ExecStart=/usr/local/lib/sando/check-topology-drift.sh |
| 18 |
# The bare repo is sando-owned and the live topology is world-readable, so this |
| 19 |
# needs no privilege at all. |
| 20 |
User=sando |
| 21 |
Group=sando |
| 22 |
|