monitoring: surface inventory and apt-deploy check phases

scripts/taler-monitoring/check_versions.sh

@@ -166,16 +166,16 @@ fi
 
 # ---------------------------------------------------------------------------
 # 2) INSIDE — containers can reach deb.taler.net (pasta / install path)
-#    koopa: KOOPA_SSH · stage-lfp: INSIDE_SSH (stagepaysan, low-priv)
+#    host-podman: INSIDE_PODMAN=1 on GOA host · ssh: KOOPA_SSH / INSIDE_SSH from laptop
 # ---------------------------------------------------------------------------
-set_group inside
-section "versions · inside · containers → deb.taler.net"
-
+_VERS_LOCAL=0
 _VERS_SSH_HOST=""
 _VERS_BANK="taler-hacktivism-bank"
 _VERS_EX="taler-hacktivism-exchange-ansible"
 _VERS_MER="taler-hacktivism"
-if [ "${INSIDE_PROFILE:-}" = "stage-lfp" ] \
+if [ "${INSIDE_PODMAN:-0}" = "1" ] || [ "${INSIDE_MODE:-}" = "local-podman" ]; then
+  _VERS_LOCAL=1
+elif [ "${INSIDE_PROFILE:-}" = "stage-lfp" ] \
   || [ "${EXPECT_CURRENCY:-}" = "TESTPAYSAN" ] \
   || [ -n "${INSIDE_SSH:-}" ]; then
   _VERS_SSH_HOST="${INSIDE_SSH:-francpaysan-stage-user}"
@@ -183,24 +183,44 @@ if [ "${INSIDE_PROFILE:-}" = "stage-lfp" ] \
   _VERS_EX="${INSIDE_EXCHANGE_CTR:-stage-lfp-exchange-ansible}"
   _VERS_MER="${INSIDE_MERCHANT_CTR:-stage-lfp-merchant}"
 elif [ "${LOCAL_STACK:-0}" = "1" ] && [ "${SKIP_SSH:-0}" != "1" ]; then
+  # laptop → koopa via SSH (not host-podman)
   _VERS_SSH_HOST="${KOOPA_SSH}"
 fi
 
-if [ -z "$_VERS_SSH_HOST" ]; then
-  info "ssh" "no container SSH for this domain — outside-only package index"
+if [ "$_VERS_LOCAL" = "1" ]; then
+  VERS_ACCESS=host-podman
+  set_group host
+else
+  VERS_ACCESS=ssh
+  set_group ssh
+fi
+
+section "versions · inside · containers → deb.taler.net (access=${VERS_ACCESS})"
+info "flags" "VERS_ACCESS=${VERS_ACCESS} INSIDE_PODMAN=${INSIDE_PODMAN:-0} INSIDE_MODE=${INSIDE_MODE:-} LOCAL_STACK=${LOCAL_STACK:-0} SKIP_SSH=${SKIP_SSH:-0} KOOPA_SSH=${KOOPA_SSH:-} INSIDE_SSH=${INSIDE_SSH:-}"
+
+if [ "$_VERS_LOCAL" != "1" ] && [ -z "$_VERS_SSH_HOST" ]; then
+  info "access" "no host-podman and no SSH target — outside-only package index"
   info "outside-only" "deb.taler.net public checks completed above"
   summary
   exit 0
 fi
 
-if [ "$_VERS_SSH_HOST" = "${KOOPA_SSH:-}" ] || [ "${INSIDE_PROFILE:-}" = "koopa" ]; then
-  if ! koopa_ssh_ok; then
-    err "ssh" "cannot reach ${KOOPA_SSH} — set SKIP_SSH=1 to skip container checks"
+if [ "$_VERS_LOCAL" = "1" ]; then
+  if ! command -v podman >/dev/null 2>&1; then
+    err "host" "INSIDE_PODMAN/host-podman but podman missing"
     info "outside-only" "deb.taler.net public checks completed above"
     summary
     exit 1
   fi
-  ok "ssh ${KOOPA_SSH}"
+  ok "host→container" "podman exec on this host (VERS_ACCESS=host-podman · no SSH)"
+elif [ "$_VERS_SSH_HOST" = "${KOOPA_SSH:-}" ] || [ "${INSIDE_PROFILE:-}" = "koopa" ]; then
+  if ! koopa_ssh_ok; then
+    err "ssh" "cannot reach ${KOOPA_SSH} — from laptop set KOOPA_SSH=; on host set INSIDE_PODMAN=1"
+    info "outside-only" "deb.taler.net public checks completed above"
+    summary
+    exit 1
+  fi
+  ok "ssh ${KOOPA_SSH}" "remote then podman (VERS_ACCESS=ssh)"
 else
   if ! mon_ssh_ok "$_VERS_SSH_HOST"; then
     err "ssh" "cannot reach ${_VERS_SSH_HOST} (stagepaysan) — skip container package compare"
@@ -208,7 +228,7 @@ else
     summary
     exit 1
   fi
-  ok "ssh ${_VERS_SSH_HOST}" "stagepaysan container package compare"
+  ok "ssh ${_VERS_SSH_HOST}" "stagepaysan (VERS_ACCESS=ssh)"
 fi
 
 INRELEASE_URL="${APT_BASE}/dists/${SUITE}/InRelease"
@@ -257,7 +277,9 @@ done
 REMOTE
 } >"$tmp/remote-versions.sh"
 
-if [ "$_VERS_SSH_HOST" = "${KOOPA_SSH:-}" ] || [ "${INSIDE_PROFILE:-}" = "koopa" ]; then
+if [ "$_VERS_LOCAL" = "1" ]; then
+  REMOTE_OUT=$(bash "$tmp/remote-versions.sh" 2>/dev/null || true)
+elif [ "$_VERS_SSH_HOST" = "${KOOPA_SSH:-}" ] || [ "${INSIDE_PROFILE:-}" = "koopa" ]; then
   REMOTE_OUT=$(koopa_ssh_bash 60 <"$tmp/remote-versions.sh" || true)
 else
   REMOTE_OUT=$(mon_ssh_bash "$_VERS_SSH_HOST" 60 <"$tmp/remote-versions.sh" || true)
@@ -501,4 +523,41 @@ done
 info "suite" "deb.taler.net ${SUITE} (testing_index=${HAVE_TESTING})"
 info "tally" "match=${ok_n} ahead=${ahead_n} behind=${behind_n}"
 
+# Disk free on the machine(s) we just probed (host-podman or SSH target)
+set_group disk
+section "versions · disk free space"
+if [ "${_VERS_LOCAL:-0}" = "1" ]; then
+  mon_disk_check_host "host" || true
+  while read -r _vc; do
+    [ -n "$_vc" ] || continue
+    mon_disk_check_podman "$_vc" || true
+  done < <(podman ps --format '{{.Names}}' 2>/dev/null | grep -iE 'hacktivism|taler-|stage-lfp|lfp-' || true)
+elif [ -n "${_VERS_SSH_HOST:-}" ]; then
+  _vdisk=$(mon_ssh_bash "$_VERS_SSH_HOST" 20 <<'DISK' || true
+set +e
+echo "###HOST###"
+df -Pk / /var /home /tmp 2>/dev/null || df -Pk
+echo "###CTRS###"
+for c in $(podman ps --format '{{.Names}}' 2>/dev/null); do
+  echo "###CTR $c###"
+  podman exec "$c" df -Pk / /var /tmp 2>/dev/null || true
+done
+DISK
+)
+  mon_disk_check_remote_text "ssh:${_VERS_SSH_HOST}" \
+    "$(printf '%s\n' "$_vdisk" | sed -n '/^###HOST###$/,/^###CTRS###$/p' | sed '1d;$d')" || true
+  _ctr=""; _buf=""
+  while IFS= read -r _line || [ -n "$_line" ]; do
+    case "$_line" in
+      '###CTR '*)
+        [ -n "$_ctr" ] && mon_disk_check_remote_text "ctr:${_ctr}" "$_buf" || true
+        _ctr=${_line####CTR }; _ctr=${_ctr%###}; _buf=""
+        ;;
+      '###CTRS###'|'###HOST###') ;;
+      *) [ -n "$_ctr" ] && _buf="${_buf}${_line}"$'\n' ;;
+    esac
+  done <<<"$_vdisk"
+  [ -n "$_ctr" ] && mon_disk_check_remote_text "ctr:${_ctr}" "$_buf" || true
+fi
+
 summary