include_recipe "accounts"
include_recipe "apache"
include_recipe "git"
-include_recipe "munin"
include_recipe "nodejs"
include_recipe "postgresql"
include_recipe "prometheus"
fastlyips = JSON.parse(IO.read("#{Chef::Config[:file_cache_path]}/fastly-ip-list.json"))
remote_file "#{Chef::Config[:file_cache_path]}/statuscake-locations.json" do
- source "https://app.statuscake.com/Workfloor/Locations.php?format=json"
+ # source "https://app.statuscake.com/Workfloor/Locations.php?format=json"
+ # FIXME: StatusCake IP lookup. Use manual backup source for now. 13 Nov 2024
+ # https://www.statuscake.com/kb/knowledge-base/what-are-your-ips/
+ source "https://grant.dev.openstreetmap.org/statuscake-locations-patch.json"
compile_time true
ignore_failure true
end
style[:tile_directories].collect { |directory| directory[:name] }
end.flatten.sort.uniq
-package "renderd"
+package %w[
+ renderd
+ libgoogle-perftools4
+]
systemd_service "renderd" do
dropin "chef"
after "postgresql.service"
wants "postgresql.service"
+ environment "LD_PRELOAD" => "libtcmalloc.so.4"
limit_nofile 4096
+ memory_high "80%"
+ memory_max "90%"
sandbox true
restrict_address_families "AF_UNIX"
read_write_paths tile_directories
+ system_call_filter ["@system-service", "mincore"]
restart "on-failure"
end
package %w[
python3-cairo
python3-mapnik
+ python3-pyotp
python3-pyproj
python3-setuptools
]
-python_package "pyotp" do
- python_version "3"
-end
-
directory "/srv/tile.openstreetmap.org/cgi-bin" do
owner "tile"
group "tile"
nodejs_package "carto"
+lowzoom_threads = node.cpu_cores - 1
+
systemd_service "update-lowzoom@" do
description "Low zoom tile update service for %i layer"
user "tile"
restart "on-failure"
end
+postgresql_version = node[:tile][:database][:cluster].split("/").first
+postgis_version = node[:tile][:database][:postgis]
+
+package "postgresql-#{postgresql_version}-postgis-#{postgis_version}"
+
+postgresql_user "jburgess" do
+ cluster node[:tile][:database][:cluster]
+ superuser true
+end
+
+postgresql_user "tomh" do
+ cluster node[:tile][:database][:cluster]
+ superuser true
+end
+
+postgresql_user "pnorman" do
+ cluster node[:tile][:database][:cluster]
+ superuser true
+end
+
+postgresql_user "tile" do
+ cluster node[:tile][:database][:cluster]
+end
+
+postgresql_user "www-data" do
+ cluster node[:tile][:database][:cluster]
+end
+
+postgresql_user "_renderd" do
+ cluster node[:tile][:database][:cluster]
+end
+
+postgresql_database "gis" do
+ cluster node[:tile][:database][:cluster]
+ owner "tile"
+end
+
+postgresql_extension "postgis" do
+ cluster node[:tile][:database][:cluster]
+ database "gis"
+end
+
+postgresql_extension "hstore" do
+ cluster node[:tile][:database][:cluster]
+ database "gis"
+ only_if { node[:tile][:database][:hstore] }
+end
+
+%w[geography_columns planet_osm_nodes planet_osm_rels planet_osm_ways raster_columns raster_overviews].each do |table|
+ postgresql_table table do
+ cluster node[:tile][:database][:cluster]
+ database "gis"
+ owner "tile"
+ permissions "tile" => :all
+ end
+end
+
+%w[geometry_columns planet_osm_line planet_osm_point planet_osm_polygon planet_osm_roads spatial_ref_sys].each do |table|
+ postgresql_table table do
+ cluster node[:tile][:database][:cluster]
+ database "gis"
+ owner "tile"
+ permissions "tile" => :all, "www-data" => :select, "_renderd" => :select
+ end
+end
+
directory "/srv/tile.openstreetmap.org/styles" do
owner "tile"
group "tile"
owner "root"
group "root"
mode "755"
- variables :style => name
+ variables :style => name, :threads => lowzoom_threads
end
service "update-lowzoom@#{name}" do
end
end
+ if details[:functions_script]
+ postgresql_execute details[:functions_script] do
+ action :nothing
+ command details[:functions_script]
+ cluster node[:tile][:database][:cluster]
+ database "gis"
+ user "tile"
+ group "tile"
+ subscribes :run, "git[#{style_directory}]"
+ end
+ end
+
execute "#{style_directory}/project.mml" do
action :nothing
command "carto -a 3.0.22 project.mml > project.xml"
end
end
-postgresql_version = node[:tile][:database][:cluster].split("/").first
-postgis_version = node[:tile][:database][:postgis]
-
-package "postgresql-#{postgresql_version}-postgis-#{postgis_version}"
-
-postgresql_user "jburgess" do
- cluster node[:tile][:database][:cluster]
- superuser true
-end
-
-postgresql_user "tomh" do
- cluster node[:tile][:database][:cluster]
- superuser true
-end
-
-postgresql_user "pnorman" do
- cluster node[:tile][:database][:cluster]
- superuser true
-end
-
-postgresql_user "tile" do
- cluster node[:tile][:database][:cluster]
-end
-
-postgresql_user "www-data" do
- cluster node[:tile][:database][:cluster]
-end
-
-postgresql_user "_renderd" do
- cluster node[:tile][:database][:cluster]
-end
-
-postgresql_database "gis" do
- cluster node[:tile][:database][:cluster]
- owner "tile"
-end
-
-postgresql_extension "postgis" do
- cluster node[:tile][:database][:cluster]
- database "gis"
-end
-
-postgresql_extension "hstore" do
- cluster node[:tile][:database][:cluster]
- database "gis"
- only_if { node[:tile][:database][:hstore] }
-end
-
-%w[geography_columns planet_osm_nodes planet_osm_rels planet_osm_ways raster_columns raster_overviews].each do |table|
- postgresql_table table do
- cluster node[:tile][:database][:cluster]
- database "gis"
- owner "tile"
- permissions "tile" => :all
- end
-end
-
-%w[geometry_columns planet_osm_line planet_osm_point planet_osm_polygon planet_osm_roads spatial_ref_sys].each do |table|
- postgresql_table table do
- cluster node[:tile][:database][:cluster]
- database "gis"
- owner "tile"
- permissions "tile" => :all, "www-data" => :select, "_renderd" => :select
- end
-end
-
package %w[
gdal-bin
python3-yaml
end
end
-postgresql_munin "gis" do
- cluster node[:tile][:database][:cluster]
- database "gis"
-end
-
directory File.dirname(node[:tile][:database][:node_file]) do
owner "root"
group "root"
osm2pgsql
osmium-tool
pyosmium
- python3-pyproj
]
-remote_directory "/usr/local/bin" do
- source "bin"
- owner "root"
- group "root"
+directory node[:tile][:replication][:directory] do
+ owner "tile"
+ group "tile"
mode "755"
- files_owner "root"
- files_group "root"
- files_mode "755"
end
-directory "/var/lib/replicate" do
+link "/var/lib/replicate" do
+ to node[:tile][:replication][:directory]
owner "tile"
group "tile"
- mode "755"
+ not_if { node[:tile][:replication][:directory] == "/var/lib/replicate" }
end
-if node[:tile][:replication][:engine] == "custom"
- template "/usr/local/bin/expire-tiles" do
- source "expire-tiles-custom.erb"
- owner "root"
- group "root"
- mode "755"
- end
-
- directory "/var/lib/replicate/expire-queue" do
- owner "tile"
- group "_renderd"
- mode "775"
- end
-
- template "/usr/local/bin/replicate" do
- source "replicate.erb"
- owner "root"
- group "root"
- mode "755"
- variables :postgresql_version => postgresql_version.to_f
- end
-
- systemd_service "expire-tiles" do
- description "Tile dirtying service"
- type "simple"
- user "_renderd"
- exec_start "/usr/local/bin/expire-tiles"
- nice 10
- sandbox true
- read_write_paths tile_directories + [
- "/store/database/nodes",
- "/var/lib/replicate/expire-queue",
- "/var/log/tile"
- ]
- end
-
- systemd_path "expire-tiles" do
- description "Tile dirtying trigger"
- directory_not_empty "/var/lib/replicate/expire-queue"
- end
-
- service "expire-tiles.path" do
- action [:enable, :start]
- subscribes :restart, "systemd_path[expire-tiles]"
- end
+template "/usr/local/bin/expire-tiles" do
+ source "expire-tiles.erb"
+ owner "root"
+ group "root"
+ mode "755"
+end
- systemd_service "replicate" do
- description "Rendering database replication service"
- after "postgresql.service"
- wants "postgresql.service"
- user "tile"
- exec_start "/usr/local/bin/replicate"
- sandbox :enable_network => true
- restrict_address_families "AF_UNIX"
- read_write_paths [
- "/store/database/nodes",
- "/var/lib/replicate",
- "/var/log/tile"
- ]
- restart "on-failure"
- end
+directory "/var/lib/replicate/expire-queue" do
+ owner "tile"
+ group "_renderd"
+ mode "775"
+end
- service "replicate" do
- action [:enable, :start]
- subscribes :restart, "template[/usr/local/bin/replicate]"
- subscribes :restart, "systemd_service[replicate]"
- end
-elsif node[:tile][:replication][:engine] == "osm2pgsql"
- service "expire-tiles.path" do
- action [:disable, :stop]
- end
+template "/usr/local/bin/replicate" do
+ source "replicate.erb"
+ owner "root"
+ group "root"
+ mode "755"
+end
- systemd_path "expire-tiles" do
- action :delete
- end
+systemd_service "expire-tiles" do
+ description "Tile dirtying service"
+ type "simple"
+ user "_renderd"
+ exec_start "/usr/local/bin/expire-tiles"
+ nice 10
+ sandbox true
+ restrict_address_families "AF_UNIX"
+ read_write_paths tile_directories + [
+ "/var/lib/replicate/expire-queue"
+ ]
+end
- service "expire-tiles" do
- action :stop
- end
+systemd_path "expire-tiles" do
+ description "Tile dirtying trigger"
+ directory_not_empty "/var/lib/replicate/expire-queue"
+end
- systemd_service "expire-tiles" do
- action :delete
- end
+service "expire-tiles.path" do
+ action [:enable, :start]
+ subscribes :restart, "systemd_path[expire-tiles]"
+end
- template "/usr/local/bin/expire-tiles" do
- source "expire-tiles-osm2pgsql.erb"
- owner "root"
- group "root"
- mode "755"
- end
+template "/usr/local/bin/replicate-post" do
+ source "replicate-post.erb"
+ owner "root"
+ group "root"
+ mode "755"
+end
- osm2pgsql_arguments = %w[
- --number-processes=1
- --log-progress=false
- --expire-tiles=13-19
- --expire-output=/var/lib/replicate/dirty-tiles.txt
+systemd_service "replicate" do
+ description "Rendering database replication service"
+ after "postgresql.service"
+ wants "postgresql.service"
+ user "tile"
+ exec_start "/usr/local/bin/replicate"
+ sandbox :enable_network => true
+ restrict_address_families "AF_UNIX"
+ read_write_paths [
+ "/store/database/nodes",
+ "/var/lib/replicate"
]
+ restart "on-failure"
+end
- osm2pgsql_arguments.append("--multi-geometry") if node[:tile][:database][:multi_geometry]
- osm2pgsql_arguments.append("--hstore") if node[:tile][:database][:hstore]
- osm2pgsql_arguments.append("--tag-transform-script=#{node[:tile][:database][:tag_transform_script]}") if node[:tile][:database][:tag_transform_script]
-
- systemd_service "replicate" do
- description "Rendering database replication service"
- after "postgresql.service"
- wants "postgresql.service"
- user "tile"
- exec_start "/bin/osm2pgsql-replication update --database gis --post-processing /usr/local/bin/expire-tiles -- #{osm2pgsql_arguments.join(' ')}"
- sandbox :enable_network => true
- restrict_address_families "AF_UNIX"
- read_write_paths [
- "/store/database/nodes",
- "/var/lib/replicate"
- ]
- restart "always"
- restart_sec 30
- end
-
- service "replicate" do
- action [:enable, :start]
- subscribes :restart, "systemd_service[replicate]"
- end
+service "replicate" do
+ action [:enable, :start]
+ subscribes :restart, "template[/usr/local/bin/replicate]"
+ subscribes :restart, "systemd_service[replicate]"
end
template "/usr/local/bin/render-lowzoom" do
owner "root"
group "root"
mode "755"
+ variables :threads => lowzoom_threads
end
systemd_service "render-lowzoom" do
systemd_timer "render-lowzoom" do
description "Render low zoom tiles"
- on_calendar "Fri *-*-* 23:00:00 UTC"
+ on_calendar "23:00 #{node[:timezone]}"
end
service "render-lowzoom.timer" do
end
end
-munin_plugin "mod_tile_fresh"
-munin_plugin "mod_tile_latency"
-munin_plugin "mod_tile_response"
-munin_plugin "mod_tile_zoom"
-
-munin_plugin "renderd_processed"
-munin_plugin "renderd_queue"
-munin_plugin "renderd_queue_time"
-munin_plugin "renderd_zoom"
-munin_plugin "renderd_zoom_time"
-
-munin_plugin "replication_delay"
-
package "ruby-webrick"
prometheus_exporter "modtile" do
projects / chef.git / blobdiff