entrypoint.sh

#!/bin/bash

set -e

: "${PUSHOVER_NOTIFICATION:=false}"
: "${ACTION:=scrub}"

exit_bool=false

if [ -z "$TALOS_VERSION" ]; then
    echo "Error: TALOS_VERSION environment variable not set."
    exit_bool=true
elif ! ZFS_IMAGE=$(crane export "ghcr.io/siderolabs/extensions:${TALOS_VERSION}" | tar x -O image-digests | grep zfs | awk '{print $1}'); then
    echo "Error: Could not find a compatible ZFS extension for Talos $TALOS_VERSION."
    exit_bool=true
fi

if [ "$exit_bool" = false ]; then
    echo "Verifying ZFS image signature..."
    if ! cosign verify \
        --certificate-identity-regexp '@siderolabs\.com$' \
        --certificate-oidc-issuer https://accounts.google.com \
        "$ZFS_IMAGE" > /dev/null 2>&1; then
        echo "Error: Image signature verification failed for $ZFS_IMAGE."
        exit_bool=true
    fi
fi

if [ "$PUSHOVER_NOTIFICATION" = true ]; then
    if [ -z "$PUSHOVER_USER_KEY" ]; then
        echo "Error: \"PUSHOVER_USER_KEY\" is missing while \"PUSHOVER_NOTIFICATION\" is \"true\"."
        exit_bool=true
    fi

    if [ -z "$PUSHOVER_API_TOKEN" ]; then
        echo "Error: \"PUSHOVER_API_TOKEN\" is missing while \"PUSHOVER_NOTIFICATION\" is \"true\"."
        exit_bool=true
    fi
fi

if [ -z "$ZFS_POOL" ]; then
    echo "Error: No ZFS_POOL specified."
    exit_bool=true
fi

if [ "$exit_bool" = true ]; then
    echo "Exiting due to previous errors..."
    exit 1
fi

echo "Installing ZFS from $ZFS_IMAGE..."
if ! crane export "$ZFS_IMAGE" | tar --strip-components=1 -x -C / ; then
    echo "Error: Failed to extract ZFS extension."
    exit 1
fi
echo

send_pushover_notification() {
    if [ "$PUSHOVER_NOTIFICATION" = true ]; then
        local message="$1"
        local title="$2"
        response=$(curl -s -w "%{http_code}" --form-string "token=${PUSHOVER_API_TOKEN}" \
            --form-string "user=${PUSHOVER_USER_KEY}" \
            --form-string "message=${message}" \
            --form-string "title=${title}" \
            --form-string "html=1" \
            https://api.pushover.net/1/messages.json)

        http_code="${response: -3}"
        if [ "$http_code" -ne 200 ]; then
            echo "Warning: Failed to send Pushover notification. HTTP status code: $http_code"
        fi
    fi
}

send_pushover_error_notification() {
    if [ "$PUSHOVER_NOTIFICATION" = true ]; then
        local message="$1"
        local title="$2"
        response=$(curl -s -w "%{http_code}" --form-string "token=${PUSHOVER_API_TOKEN}" \
            --form-string "user=${PUSHOVER_USER_KEY}" \
            --form-string "message=${message}" \
            --form-string "title=${title}" \
            --form-string "priority=1" \
            --form-string "html=1" \
            https://api.pushover.net/1/messages.json)

        http_code="${response: -3}"
        if [ "$http_code" -ne 200 ]; then
            echo "Warning: Failed to send Pushover error notification. HTTP status code: $http_code"
        fi
    fi
}

scrub_pool() {
    echo "===================================================="
    echo "Starting scrub on pool: $ZFS_POOL"
    echo "===================================================="

    if output=$(zpool scrub "$ZFS_POOL" 2>&1); then
        send_pushover_notification "<b>🛠️ Starting scrub on pool:</b> ${ZFS_POOL}" "ZFS Scrub Started"
    else
        send_pushover_error_notification $'❌ <b>Failed to start scrub on pool:</b> '"${ZFS_POOL}"$'\n<pre>'"${output}"'</pre>' "ZFS Scrub Failed"
        return 1
    fi

    echo "Scrub started on pool: $ZFS_POOL"
    echo "Monitoring scrub progress..."

    while true; do
        sleep 30
        echo "--------"
        status=$(zpool status "$ZFS_POOL")
        scrub_line=$(printf "%s\n" "$status" | grep -A 2 "scan:")
        echo "$scrub_line"
        if echo "$scrub_line" | grep -q "scrub repaired"; then
            echo "===================================================="
            echo "Scrub completed on pool: $ZFS_POOL"
            echo "===================================================="

            scan_line=$(printf "%s\n" "$status" | grep "scan:")
            send_pushover_notification "<b>✅ Scrub completed on pool:</b> ${ZFS_POOL}"$'\n<pre>'"${scan_line}"'</pre>' "ZFS Scrub Completed"

            break
        elif echo "$scrub_line" | grep -q "scrub in progress"; then
            continue
        elif echo "$scrub_line" | grep -q "resilver in progress"; then
            echo "Resilver in progress on pool: $ZFS_POOL"
            continue
        else
            echo "Unexpected scrub status on pool: ${ZFS_POOL}, status: ${scrub_line}"
            send_pushover_error_notification "❌ Unexpected scrub status on pool: ${ZFS_POOL}"$'\n<pre>'"${scrub_line}"'</pre>' "ZFS Scrub Error"
            return 1
        fi
    done
}

cleanup_snapshots() {
    echo "===================================================="
    echo "Starting cleanup on pool: $ZFS_POOL"
    echo "===================================================="

    mapfile -t snapshot_clone_pairs < <(zfs list -H -t snapshot -o name,clones -S creation -r "$ZFS_POOL")

    if [ -z "${snapshot_clone_pairs[*]}" ]; then
        echo "No snapshots found"
        return
    fi

    for line in "${snapshot_clone_pairs[@]}"; do
        snapshot=$(echo "$line" | awk -F'\t' '{print $1}')
        clone=$(echo "$line" | awk -F'\t' '{print $2}')

        if [ "$clone" != "-" ]; then
            echo "Processing snapshot: $snapshot with clone: $clone"

            echo "Destroying clone: $clone"
            if ! zfs destroy "$clone"; then
                echo "Error: Failed to destroy clone dataset: $clone"
                continue
            fi

            echo "Destroying snapshot: $snapshot"
            if ! zfs destroy "$snapshot"; then
                echo "Error: Failed to destroy snapshot: $snapshot"
                continue
            fi

        else
            echo "Destroying snapshot: $snapshot (no clones)"
            if ! zfs destroy "$snapshot"; then
                echo "Error: Failed to destroy snapshot: $snapshot"
                continue
            fi
        fi
        echo
    done

    echo "===================================================="
    echo "Cleanup completed on pool: $ZFS_POOL"
    echo "===================================================="
}

case "$ACTION" in
scrub)
    scrub_pool
    ;;
cleanup)
    cleanup_snapshots
    ;;
all)
    scrub_pool
    echo
    echo
    cleanup_snapshots
    ;;
*)
    echo "Error: Invalid ACTION specified. Use 'scrub', 'cleanup', or 'all'."
    exit 1
    ;;
esac