cloudron-box/src/janitor.js

'use strict';

const assert = require('node:assert'),
    BoxError = require('./boxerror.js'),
    debug = require('debug')('box:janitor'),
    Docker = require('dockerode'),
    safe = require('safetydance'),
    tokens = require('./tokens.js');

exports = module.exports = {
    cleanupTokens,
    cleanupDockerVolumes
};

const gConnection = new Docker({ socketPath: '/var/run/docker.sock' });

async function cleanupTokens() {
    debug('Cleaning up expired tokens');

    const [error, result] = await safe(tokens.delExpired());
    if (error) return debug('cleanupTokens: error removing expired tokens. %o', error);

    debug(`Cleaned up ${result} expired tokens`);
}

async function cleanupTmpVolume(containerInfo) {
    assert.strictEqual(typeof containerInfo, 'object');

    const cmd = 'find /tmp -type f -mtime +10 -exec rm -rf {} +'.split(' '); // 10 day old files

    debug(`cleanupTmpVolume ${JSON.stringify(containerInfo.Names)}`);

    const [error, execContainer] = await safe(gConnection.getContainer(containerInfo.Id).exec({ Cmd: cmd, AttachStdout: true, AttachStderr: true, Tty: false }));
    if (error) throw new BoxError(BoxError.DOCKER_ERROR, `Failed to exec container: ${error.message}`);

    const [startError, stream] = await safe(execContainer.start({ hijack: true }));
    if (startError) throw new BoxError(BoxError.DOCKER_ERROR, `Failed to start exec container: ${startError.message}`);

    gConnection.modem.demuxStream(stream, process.stdout, process.stderr);

    return new Promise((resolve, reject) => {
        stream.on('error', (error) => reject(new BoxError(BoxError.DOCKER_ERROR, `Failed to cleanup in exec container: ${error.message}`)));
        stream.on('end', resolve);
    });
}

async function cleanupDockerVolumes() {
    debug('Cleaning up docker volumes');

    const [error, containers] = await safe(gConnection.listContainers({ all: 0 }));
    if (error) throw new BoxError(BoxError.DOCKER_ERROR, error);

    for (const container of containers) {
        await safe(cleanupTmpVolume(container), { debug }); // intentionally ignore error
    }

    debug('Cleaned up docker volumes');
}