Marcus (agent-cos)
7b5ffe6b11
- Multi-host flake.nix (3x N97 x86_64 + 2x RPi4 aarch64) - Shared modules: k3s-cluster, tailscale, meos-gateway - Node configs: n97-1 (control plane), n97-2/n97-3 (Ollama workers), rpi4-1/rpi4-2 (ARM workers) - K8s manifests: Forgejo, Postgres (CNPG), Umami, OpenBrain, MeOS Dashboard, MCP servers - Bootstrap and DB migration scripts - Migration plan doc (7-day phased rollout)
58 lines
No EOL
2 KiB
Bash
Executable file
58 lines
No EOL
2 KiB
Bash
Executable file
# Bootstrap a new node for the Scobleclaw k3s cluster
|
|
#
|
|
# Usage: ./bootstrap-node.sh <hostname> <tailscale-ip> <role: server|agent>
|
|
#
|
|
# Prerequisites:
|
|
# - NixOS installed on target node
|
|
# - SSH access to root@<tailscale-ip>
|
|
# - This repo cloned locally
|
|
#
|
|
set -euo pipefail
|
|
|
|
HOSTNAME="${1:?Usage: bootstrap-node.sh <hostname> <tailscale-ip> <role>}"
|
|
TSIP="${2:?Need tailscale IP}"
|
|
ROLE="${3:-agent}"
|
|
REPO_DIR="$(cd "$(dirname "$0")/.." && pwd)"
|
|
|
|
echo "==> Bootstrapping $HOSTNAME ($TSIP) as k3s $ROLE"
|
|
|
|
# 1. Generate cluster token if it doesn't exist
|
|
TOKEN_FILE="/var/lib/k3s/cluster-token"
|
|
if [ ! -f "$TOKEN_FILE" ]; then
|
|
echo "==> Generating k3s cluster token"
|
|
sudo mkdir -p /var/lib/k3s
|
|
head -c 32 /dev/urandom | base64 | sudo tee "$TOKEN_FILE" > /dev/null
|
|
sudo chmod 600 "$TOKEN_FILE"
|
|
fi
|
|
|
|
# 2. Copy token to target node
|
|
echo "==> Copying cluster token to $HOSTNAME"
|
|
ssh "root@$TSIP" "mkdir -p /var/lib/k3s"
|
|
scp "$TOKEN_FILE" "root@$TSIP:$TOKEN_FILE"
|
|
|
|
# 3. Copy NixOS config
|
|
echo "==> Copying NixOS configuration"
|
|
ssh "root@$TSIP" "mkdir -p /etc/nixos/nodes /etc/nixos/modules"
|
|
scp "$REPO_DIR/flake.nix" "root@$TSIP:/etc/nixos/flake.nix"
|
|
scp "$REPO_DIR/hardware-n97.nix" "root@$TSIP:/etc/nixos/hardware-n97.nix" 2>/dev/null || true
|
|
scp "$REPO_DIR/hardware-rpi4.nix" "root@$TSIP:/etc/nixos/hardware-rpi4.nix" 2>/dev/null || true
|
|
scp "$REPO_DIR/modules/"*.nix "root@$TSIP:/etc/nixos/modules/"
|
|
scp "$REPO_DIR/nodes/$HOSTNAME.nix" "root@$TSIP:/etc/nixos/nodes/"
|
|
|
|
# 4. Build and switch
|
|
echo "==> Building NixOS configuration for $HOSTNAME"
|
|
ssh "root@$TSIP" "nixos-rebuild switch --flake /etc/nixos#$HOSTNAME"
|
|
|
|
# 5. Wait for k3s to come up
|
|
echo "==> Waiting for k3s to start..."
|
|
sleep 10
|
|
|
|
if [ "$ROLE" = "server" ]; then
|
|
echo "==> k3s server is running. Get kubeconfig:"
|
|
echo " scp root@$TSIP:/etc/rancher/k3s/k3s.yaml ~/.kube/config-scobleclaw"
|
|
echo " sed -i 's/127.0.0.1/$TSIP/g' ~/.kube/config-scobleclaw"
|
|
else
|
|
echo "==> k3s agent joined. Verify with: kubectl get nodes"
|
|
fi
|
|
|
|
echo "==> Done! $HOSTNAME is ready." |