tbenandClaude Opus 5.5
ac1048c8f3
A managed Chrome policy, written as root into each running computer's container on provision and every sync-computers run, installs the default extensions (normal_installed: can be turned off, not removed). Existing computers get it without being recreated. Co-Authored-By: Claude Opus 5.5 <[email protected]>
49 lines
2.0 KiB
TypeScript
49 lines
2.0 KiB
TypeScript
import bunext from "@moduletrace/bunext";
|
|
import BunSQLite from "@moduletrace/bun-sqlite";
|
|
import type { BUN_SQLITE_COBBLE_CONTAINERS } from "@/db/types/db";
|
|
import migrateComputerLayout from "@/src/functions/backend/db/computers/migrate-computer-layout";
|
|
import refreshComputerContainer from "@/src/functions/backend/db/computers/refresh-computer-container";
|
|
import syncComputerBrowserPolicy from "@/src/functions/backend/db/computers/sync-computer-browser-policy";
|
|
|
|
type Row = Pick<
|
|
BUN_SQLITE_COBBLE_CONTAINERS,
|
|
"id" | "docker_id" | "status" | "ip_address" | "metadata"
|
|
> & { computer_id: number };
|
|
|
|
/**
|
|
* Reads every computer container's state from docker and records it
|
|
* (`refreshComputerContainer`), telling owners about changes. Containers
|
|
* still being set up, or that failed, are left alone. A container that
|
|
* still mounts its computer's whole home is recreated with only the
|
|
* workspace (`migrateComputerLayout`, once per computer). A running one
|
|
* gets the browser policy it lacks (`syncComputerBrowserPolicy`), so
|
|
* computers made before an extension was added get it too.
|
|
*/
|
|
export default async function syncComputers() {
|
|
const rows =
|
|
(
|
|
await BunSQLite.sql<Row>({
|
|
sql: `SELECT co.id, co.docker_id, co.status, co.ip_address, co.metadata, c.id AS computer_id
|
|
FROM containers co JOIN computers c ON c.container_id = co.id
|
|
WHERE co.docker_id IS NOT NULL AND co.status NOT IN ('creating', 'failed')`,
|
|
})
|
|
).payload || [];
|
|
|
|
let changed = 0;
|
|
|
|
for (const { computer_id, metadata, ...container } of rows) {
|
|
if (await migrateComputerLayout({ computer_id, metadata })) continue;
|
|
|
|
const refreshed = await refreshComputerContainer({
|
|
computer_id,
|
|
container,
|
|
});
|
|
|
|
if (refreshed?.changed) changed++;
|
|
|
|
if (refreshed?.status == "running" && container.docker_id) {
|
|
await syncComputerBrowserPolicy({ computer_id, docker_id: container.docker_id });
|
|
}
|
|
}
|
|
}
|