admin
c49ee64b0b
revert: symlink is the reliable approach for /opt/wallarm
...
Bind mounts and unshare namespace approaches are fragile across
systemd versions. Symlink + --config-file for wcli provides
adequate isolation for multi-instance.
2026-08-02 09:29:07 +00:00
admin
3d076221e2
feat: block/monitoring mode — ask during deploy, configurable in .env
2026-08-02 09:12:27 +00:00
admin
86a172a4ed
fix: add --config-file to wcli in patchPaths for multi-instance
2026-08-02 08:41:20 +00:00
admin
f4e931bbd4
fix: use bash -c for find+sed, kill temp nginx, simplify systemd
...
- patchPaths uses bash -c 'find ... -exec sed {} +' instead of Go exec
- Port offset applied to ALL yaml/yml/conf files across instance
- Kill deploy-time nginx before systemd starts
- Simplified systemd template (removed broken fuser line)
2026-08-02 08:18:06 +00:00
admin
6a9337553a
fix: per-instance port offset, improved systemd nginx start
...
- Port offset from instance name hash avoids supervisord conflicts
- ExecStartPre kills old nginx before starting new one
- Removed broken patchelf approach
2026-08-02 07:57:05 +00:00
admin
3884f094fd
fix: dynamic symlink in ExecStartPre for multi-instance support
...
Each instance creates /opt/wallarm -> its own directory before starting.
Removed patchelf approach (broke library paths).
Systemd template updated with ExecStartPre ln -sf.
2026-08-02 07:45:48 +00:00
admin
aeb8be3ebc
feat: patchelf ELF binaries per instance for true multi-node
2026-08-02 07:31:12 +00:00
admin
6c8b9dc166
fix: systemd ExecStartPre with - prefix, remove symlink dependency
...
- ExecStartPre=- allows nginx start failure without blocking service
- Removed shell constructs (|| true) incompatible with systemd
- Removed env.list background goroutine (setup.sh no longer used)
- Multi-instance needs per-instance ELF patching (WIP)
2026-08-02 07:20:43 +00:00
admin
56468d3366
feat: nginx with Wallarm module in systemd, wallarm-status endpoint
2026-08-02 06:33:07 +00:00
admin
50ba28c2f9
fix: always register node, remove broken skip logic and stray brace
2026-08-02 06:00:01 +00:00
admin
6f5c281089
fix: add Symlink constant, create /opt/wallarm → instance after move
2026-08-02 05:56:53 +00:00
admin
08653eca9d
fix: patch all config files (*.sh, *.list, *.conf, *.yaml, *.yml, *.json)
2026-08-01 22:06:07 +00:00
admin
310ee0a8a4
fix: patchPaths adds wstore.yaml, avoid corrupting binaries
2026-08-01 22:00:05 +00:00
admin
8b49978ea1
fix: use bundled python3.10 in systemd, patch paths after move
2026-08-01 21:52:36 +00:00
admin
a6359beb61
fix: remove supervisord start (blocks forever with -n), use state for skip check
2026-08-01 21:15:21 +00:00
admin
938aa168b3
fix: skip registration if node.yaml exists, fix else block brace
2026-08-01 21:12:18 +00:00
admin
7f7bff15ca
fix: remove duplicate Registering print, wait for registration
2026-08-01 20:48:02 +00:00
admin
e4b1021c52
fix: remove goroutine timeout, registration takes 30-60s normally
2026-08-01 20:29:47 +00:00
admin
da56eaf164
fix: explicit goroutine timeout for registration
2026-08-01 20:12:37 +00:00
admin
842024a6ea
fix: source env.list before register, 60s timeout
2026-08-01 19:52:29 +00:00
admin
ddf0dd9884
fix: proper systemd template, auto-enable after deploy
2026-08-01 19:30:42 +00:00
admin
bf3ba41179
feat: start Wallarm via supervisord after registration
2026-08-01 19:26:52 +00:00
admin
b01f5d6a52
fix: register-node needs job:register arg, add --deploy flag for .env mode
2026-08-01 19:24:10 +00:00
admin
cbe6d51ac6
fix: bypass setup.sh, register node directly + pick-module
2026-08-01 19:18:39 +00:00
admin
57e0c8798a
fix: patch set -e out of setup.sh before running
2026-08-01 19:00:30 +00:00
admin
f7689b4d6a
fix: check node.yaml for success, ignore env.list exit code
2026-08-01 18:57:24 +00:00
admin
8484ca46a7
fix: keep env.list alive with background goroutine during setup.sh
2026-08-01 18:37:17 +00:00
admin
0922102226
fix: patch setup.sh env.list sed lines to be non-fatal, kill port with ss
2026-08-01 18:36:11 +00:00
admin
bc66018af3
fix: kill existing process on target port before starting nginx
2026-08-01 18:29:03 +00:00
admin
4432855a2d
fix: trap DEBUG to ensure env.list always exists during setup.sh
2026-08-01 18:27:20 +00:00
admin
8638f198ff
fix: basic nginx.conf (no wallarm directives before module loads)
2026-08-01 17:35:26 +00:00
admin
d405c98ff8
fix: deploy to real /opt/wallarm, then move to /opt/fw/{name}/wallarm
...
No symlinks, no path patching. Setup.sh runs in its native environment.
After success, os.Rename moves everything to the instance directory.
2026-08-01 17:30:05 +00:00
admin
9cf6a2a66b
fix: patch setup.sh /opt/wallarm paths instead of symlink
2026-08-01 17:28:04 +00:00
admin
bb45f8606d
fix: robust symlink creation, handle /opt/wallarm existing as directory
2026-08-01 17:22:13 +00:00
admin
a1d71b3eac
feat: start per-instance NGINX with status endpoint before setup.sh
2026-08-01 17:18:19 +00:00
admin
c38535398d
refactor: per-instance NGINX, clean native.go
2026-08-01 17:16:02 +00:00
admin
91b8b0e980
fix: set cmd.Dir to instance dir so setup.sh finds modules/
2026-08-01 17:14:45 +00:00
admin
fd3a005fe8
fix: use Wallarm v6.12.5 (matching AIO_BASE from ingress repo)
2026-08-01 17:11:19 +00:00
admin
02e9fd2793
fix: add --custom-ngx-build back, fix preflight URL
2026-08-01 17:10:51 +00:00
admin
b44da10ae7
fix: preflight URL, /opt/fw/ refactor complete
2026-08-01 16:55:53 +00:00
admin
02f3368fa6
fix: remove cmd.Dir — setup.sh cp -a . /opt/wallarm self-destructs when cwd is /opt/wallarm
2026-08-01 16:53:19 +00:00
admin
af8df1a659
fix: add --keep flag to prevent Makeself from deleting /opt/wallarm on failure
2026-08-01 16:52:40 +00:00
admin
7875dbca13
fix: remove --force flag — caused setup.sh to hang
2026-08-01 16:46:23 +00:00
admin
d3db8ce4c0
fix: extract AIO to /opt/wallarm/ (setup.sh hardcodes this path)
...
setup.sh uses /opt/wallarm/ for env.list and all paths.
Extract once to base dir, each node registers with --force.
Simplified InstallNode to 4 steps: nginx → download → extract → setup.
2026-08-01 16:38:58 +00:00
admin
5a0cfe92e1
fix: flush log file, show last lines in error output
2026-08-01 16:34:48 +00:00
admin
b86d9d3604
fix: systemd unit starts per-instance NGINX before Wallarm services
2026-08-01 16:27:52 +00:00
admin
d8390eab2a
feat: per-instance NGINX — each node gets its own nginx binary and config
...
- Shared NGINX binary at /opt/wallarm/nginx/sbin/nginx (installed once)
- Each node gets /opt/wallarm/nodes/{name}/nginx/ with:
- sbin/nginx (copied from shared)
- conf/nginx.conf (per-instance, unique port + upstream)
- logs/ (per-instance access/error logs)
- setup.sh runs with --custom-ngx-build (uses our nginx)
2026-08-01 16:26:41 +00:00
admin
0a301fbd05
refactor: install NGINX under /opt/wallarm/nginx/
2026-08-01 16:23:24 +00:00
admin
0ac2fc82cf
fix: try all package managers for NGINX, clear error if all fail
2026-08-01 16:21:51 +00:00
admin
82a28c6101
fix: remove --host flag, --cloud and --host are mutually exclusive
2026-08-01 16:04:22 +00:00
