scripts: sanity/dns/wallet-cli helpers; ops cleanup

scripts/ops/cleanup-koopa-all.sh

@@ -0,0 +1,106 @@
+#!/bin/bash
+# Clean agent scratch on koopa host (/root, /home/hernani, /tmp) + taler containers.
+# KEEP: passwords, koopa-admin-log, user media, container configs/data/logs essential.
+# Run as root on koopa.
+set +e
+[ "$(id -u)" -eq 0 ] || { echo "root only"; exit 1; }
+OUT="${1:-/tmp/cleanup-koopa-all.out}"
+exec > >(tee "$OUT") 2>&1
+n=0
+rmf() {
+  for f in "$@"; do
+    [ -e "$f" ] || [ -L "$f" ] || continue
+    rm -rf -- "$f" && n=$((n+1)) && echo "RM $f"
+  done
+}
+
+echo "=== A. /tmp agent files ==="
+# delete known agent patterns only (not systemd private dirs)
+find /tmp -maxdepth 1 -type f \( \
+  -name 'bench-*' -o -name 'settle-*' -o -name 'extreme-*' -o -name 'deploy-*' \
+  -o -name 'force-*' -o -name 'fix-*' -o -name 'fix2*' -o -name 'wd*' \
+  -o -name 'ord*' -o -name 'ex-*' -o -name 'tok*' -o -name 'facade*' \
+  -o -name 'rev*' -o -name 'acc*' -o -name 'acw*' -o -name 'at.*' \
+  -o -name 'et-*' -o -name '*settle*' -o -name '*wire*' -o -name '*offline*' \
+  -o -name '*denom*' -o -name '*probe*' -o -name '*diag*' -o -name '*e2e*' \
+  -o -name 'oid*' -o -name 'otok*' -o -name 'wuri*' -o -name 'wid*' \
+  -o -name 'pay*' -o -name 'mk-*' -o -name 'koopa-*' -o -name 'incont*' \
+  -o -name 'in-container*' -o -name 'credit*' -o -name 'apply-*' -o -name 'tos*' \
+  -o -name 'redeploy*' -o -name 'ensure*' -o -name 'xfer*' -o -name 'tpl*' \
+  -o -name 'future-keys.json' -o -name 'signed-keys.json' -o -name 'keys.json' \
+  -o -name 'ex-acc*' -o -name 'bpw*' -o -name 'mpw*' -o -name 'wg*' \
+  -o -name 'cleanup-*' -o -name 'koopa-clean-*' -o -name 'force-confirm*' \
+  -o -name 'denom-probe*' -o -name 'deploy-large*' -o -name 'bench-setup*' \
+  -o -name '*.out' -o -name '*.sh' -o -name '*.json' -o -name '*.sql' \
+  -o -name '*.uri' \
+  \) -print -delete 2>/dev/null
+# leftover txt from agent (not system)
+find /tmp -maxdepth 1 -type f -name '*.txt' \( -user root -o -user hernani \) -print -delete 2>/dev/null
+echo "tmp files left: $(find /tmp -maxdepth 1 -type f 2>/dev/null | wc -l)"
+
+echo "=== B. /root loose agent files (keep *password*) ==="
+for f in /root/*; do
+  base=$(basename "$f")
+  [ -e "$f" ] || continue
+  case "$base" in
+    *password*|*secret*|koopa-admin-log|.ssh|.bashrc|.profile|.bash_history)
+      echo "KEEP $f"; continue ;;
+  esac
+  # keep directories that look like system (not agent one-offs)
+  if [ -d "$f" ]; then
+    case "$base" in
+      koopa-admin-log|go|.cache|.config|.local) echo "KEEP dir $f"; continue ;;
+    esac
+    # only remove empty agent-looking dirs
+    continue
+  fi
+  case "$base" in
+    *.sh|*.out|*.json|*.uri|*.py|*.sql|*.log|*.conf)
+      rmf "$f" ;;
+    c1|chk-order|mk-order|d3|d4|d5|d6|d7|d8|dd|dd2|f1|fdo|fsn|ps|rl|sc|ss|ww4)
+      rmf "$f" ;;
+  esac
+done
+rmf /root/.tmp /root/.tmp-cleanup
+
+echo "=== C. /home/hernani agent staging ==="
+H=/home/hernani
+rmf "$H/ex-acc.secret.conf" "$H/ex-acc2.secret.conf"
+rmf "$H/bank-bench-fat-password.txt"
+find "$H" -maxdepth 1 -type f \( \
+  -name '*.sh' -o -name '*.out' -o -name '*.json' -o -name '*.uri' -o -name '*.sql' \
+  -o -name 'ex-acc*' -o -name 'exchange-coins.conf' -o -name 'bench-*' \
+  -o -name 'oid-*' -o -name 'otok-*' -o -name 'wuri.txt' -o -name 'wid.txt' \
+  -o -name 'pay*.uri' -o -name 'e2e-*' -o -name 'd[0-9]*' -o -name 'f[0-9]*' \
+  -o -name 'ww*' -o -name 'dd*' -o -name 'fix-*' -o -name 'mk-*' \
+  -o -name 'cycle-*' -o -name 'inside-*' -o -name 'curl' -o -name 'et-long.json' \
+  -o -name 'find-delay*' -o -name 'deploy-delays*' -o -name 'offline-sign*' \
+  -o -name 'in-container*' -o -name 'facade*' -o -name '*password*' \
+  \) -print -delete 2>/dev/null
+# chown anything we might have left wrong
+chown -R hernani:hernani "$H" 2>/dev/null || true
+
+echo "=== D. containers (tmp/scratch only) ==="
+# list
+su - hernani -c 'podman ps --format "{{.Names}}"' | tee /tmp/pod-names.txt
+while read -r c; do
+  [ -n "$c" ] || continue
+  echo "--- clean container $c ---"
+  su - hernani -c "podman exec -u root $c bash -c '
+    set +e
+    # agent scratch in /tmp and /root
+    find /tmp -maxdepth 1 -type f \( -name \"*.out\" -o -name \"*.sh\" -o -name \"*.json\" -o -name \"future-keys.json\" -o -name \"signed-keys.json\" -o -name \"bench*\" -o -name \"settle*\" -o -name \"facade*\" -o -name \"ex-acc*\" -o -name \"wd*\" -o -name \"ord*\" -o -name \"tpl*\" -o -name \"keys.json\" -o -name \"in-container*\" -o -name \"offline*\" \) -delete 2>/dev/null
+    find /root -maxdepth 1 -type f \( -name \"*.out\" -o -name \"*.sh\" -o -name \"*.json\" -o -name \"in-container*\" -o -name \"offline-sign*\" -o -name \"bench*\" -o -name \"facade*\" \) ! -name \".bashrc\" ! -name \".profile\" -delete 2>/dev/null
+    # never delete /etc configs, /var/lib data, password secrets under /etc
+    echo tmp_files=\$(find /tmp -maxdepth 1 -type f 2>/dev/null | wc -l)
+    echo root_loose=\$(find /root -maxdepth 1 -type f 2>/dev/null | wc -l)
+  '" 2>&1 | tail -20
+done < /tmp/pod-names.txt
+
+echo "=== E. summary host ==="
+echo "root:"; ls -la /root | head -40
+echo "hernani top:"; ls -la /home/hernani | head -30
+echo "tmp count: $(find /tmp -maxdepth 1 -type f 2>/dev/null | wc -l)"
+echo "passwords:"; ls -la /root/*password* 2>/dev/null
+echo "n_rm_hostish=$n"
+echo CLEAN_ALL_OK

scripts/ops/cleanup-root-scratch.sh

@@ -0,0 +1,84 @@
+#!/bin/bash
+# Clean agent/ops clutter under /root on koopa (host).
+# Preferred scratch is LOCAL: koopa-admin-log/.tmp/ (see ops/ROOT_HYGIENE.md).
+# This script only removes leftover one-offs that landed in /root by mistake.
+#
+# Usage (as root on koopa):
+#   cleanup-root-scratch.sh
+#   cleanup-root-scratch.sh --dry-run
+set -euo pipefail
+[ "$(id -u)" -eq 0 ] || { echo "root only"; exit 1; }
+
+DRY=0
+[ "${1:-}" = "--dry-run" ] && DRY=1
+
+# Staging on host only to delete (not the canonical scratch location)
+TMP_BASE=/root/.tmp-cleanup
+SESSION_DIR="$TMP_BASE/session-$(date -u +%Y%m%d-%H%M)-cleanup"
+mkdir -p "$SESSION_DIR"
+
+# One-off probe filenames created during taler settle/withdraw debugging (not durable).
+JUNK_GLOBS=(
+  c1.sh chk-order.sh mk-order.sh mk-secret.py
+  d3.sh d4.sh d5.sh d6.sh d7.sh d8.sh dd.sh dd2.sh
+  f1.sh fdo.sh fsn.sh fix-perm2.sh fix-ww.sh
+  ps.sh rl.sh sc.sh ss.sh ww4.sh
+  exchange-overrides.conf
+)
+
+run() {
+  if [ "$DRY" -eq 1 ]; then
+    echo "DRY: $*"
+  else
+    eval "$@"
+  fi
+}
+
+echo "=== move junk scripts to $SESSION_DIR ==="
+mkdir -p "$SESSION_DIR"
+moved=0
+for name in "${JUNK_GLOBS[@]}"; do
+  f="/root/$name"
+  if [ -e "$f" ]; then
+    run "mv -f $(printf %q "$f") $(printf %q "$SESSION_DIR/")"
+    echo "  moved $name"
+    moved=$((moved + 1))
+  fi
+done
+echo "moved=$moved"
+
+# Durable scripts that belong in admin-log — re-install from tree if present, remove loose copies
+ADMIN="${KOOPA_ADMIN_LOG:-/root/koopa-admin-log}"
+if [ ! -d "$ADMIN/scripts" ]; then
+  ADMIN=/home/hernani/koopa-admin-log
+fi
+for pair in \
+  "auto-confirm-withdrawals.sh:taler-bank/auto-confirm-withdrawals.sh" \
+  "make-demo-withdraw-qr.sh:taler-bank/make-demo-withdraw-qr.sh"
+do
+  base="${pair%%:*}"
+  rel="${pair#*:}"
+  src="$ADMIN/scripts/$rel"
+  if [ -f "/root/$base" ]; then
+    if [ -f "$src" ]; then
+      echo "  /root/$base is durable → install to /usr/local/bin, remove from /root"
+      run "install -m 755 $(printf %q "$src") /usr/local/bin/$base"
+      run "rm -f /root/$base"
+    else
+      echo "  keep /root/$base (no admin-log copy at $src); move to $ADMIN/scripts if you can"
+    fi
+  fi
+done
+
+echo "=== delete staged junk (canonical scratch is local koopa-admin-log/.tmp/) ==="
+if [ "$DRY" -eq 1 ]; then
+  ls -la "$SESSION_DIR" 2>/dev/null || true
+else
+  rm -rf "$TMP_BASE"
+  # remove mistaken host scratch if present
+  rm -rf /root/.tmp
+fi
+
+echo "=== remaining non-dot files in /root ==="
+ls -la /root | grep -v '^\.' | head -60
+echo "DONE"