mirror of
https://github.com/outbackdingo/optimclaw.git
synced 2026-08-25 14:53:34 +00:00
5df0d13b59
* Bump MSRV to 1.92 and add GCP deployment files rig-core 0.30 uses let_chains (stabilized post-1.87), which breaks builds on Rust 1.85. Bump rust-version in Cargo.toml and both Dockerfiles to 1.92 (verified working). Add cloud deployment scaffolding: - Dockerfile: multi-stage build for the main agent container - deploy/cloud-sql-proxy.service: systemd unit for Cloud SQL Auth Proxy - deploy/ironclaw.service: systemd unit for the IronClaw container - deploy/setup.sh: VM bootstrap script (Docker, proxy, services) - deploy/env.example: reference environment configuration Co-Authored-By: Claude Opus 4.6 <[email protected]> * Address review feedback: harden deploy scaffolding - Add comment explaining GATEWAY_HOST=0.0.0.0 and when to use 127.0.0.1 - Document /opt/ironclaw ownership model (root-owned, Docker reads as root) - Switch cloud-sql-proxy service from User=root to DynamicUser=yes Co-Authored-By: Claude Opus 4.6 <[email protected]> * fix: Resolve clippy lints (Rust 1.93) and fix CI test workflow - Fix 97 collapsible_if warnings using let-chains syntax (auto-fixed) - Fix ptr_arg: change &PathBuf to &Path in pairing store functions - Fix suspicious_open_options: add .truncate(false) to OpenOptions - Fix too_many_arguments: add clippy allow on execute_status - Fix unnecessary_unwrap: use if-let in repository.rs hybrid_search - Gate unused EchoTool with #[cfg(test)] - Add PairingStore argument to ChannelStoreData::new() test call sites - Add skip guard for bundled channel test when WASM artifacts unavailable - Split CI test workflow to exclude PostgreSQL-dependent integration tests Co-Authored-By: Claude Opus 4.6 <[email protected]> * fix: Address review feedback from ilblackdragon - Add root check to setup.sh (exits with error if not root) - Add warning comment to env.example about placeholder passwords - Dockerfile.worker already uses rust:1.92 (no change needed) - PR #41 overlap noted; will rebase after #41 merges Co-Authored-By: Claude Opus 4.6 <[email protected]> * fix: resolve 47 collapsible_if clippy warnings Collapse nested if statements across the codebase to satisfy clippy::collapsible_if on Rust 1.93. Co-Authored-By: Claude Opus 4.6 <[email protected]> --------- Co-authored-by: Claude Opus 4.6 <[email protected]>
69 lines
2.0 KiB
Bash
Executable File
69 lines
2.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# VM bootstrap script for IronClaw on GCP Compute Engine.
|
|
#
|
|
# Run on a fresh Debian 12 VM after SSH:
|
|
# sudo bash setup.sh
|
|
#
|
|
# Prerequisites:
|
|
# - VM has the ironclaw-vm service account attached
|
|
# - Cloud SQL Auth Proxy accessible via IAM
|
|
# - Artifact Registry image pushed
|
|
|
|
set -euo pipefail
|
|
|
|
# Must run as root
|
|
if [ "$(id -u)" -ne 0 ]; then
|
|
echo "ERROR: This script must be run as root (sudo bash setup.sh)"
|
|
exit 1
|
|
fi
|
|
|
|
echo "==> Installing Docker"
|
|
apt-get update
|
|
apt-get install -y docker.io
|
|
systemctl enable docker
|
|
systemctl start docker
|
|
|
|
echo "==> Installing Cloud SQL Auth Proxy"
|
|
curl -fsSL -o /usr/local/bin/cloud-sql-proxy \
|
|
https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy/v2.14.3/cloud-sql-proxy.linux.amd64
|
|
chmod +x /usr/local/bin/cloud-sql-proxy
|
|
|
|
echo "==> Installing systemd services"
|
|
cp /tmp/deploy/cloud-sql-proxy.service /etc/systemd/system/
|
|
cp /tmp/deploy/ironclaw.service /etc/systemd/system/
|
|
systemctl daemon-reload
|
|
|
|
echo "==> Starting Cloud SQL Auth Proxy"
|
|
systemctl enable cloud-sql-proxy
|
|
systemctl start cloud-sql-proxy
|
|
|
|
echo "==> Configuring Docker registry auth"
|
|
# The VM service account provides Artifact Registry access
|
|
gcloud auth configure-docker us-central1-docker.pkg.dev --quiet
|
|
|
|
echo "==> Creating config directory"
|
|
# Owned by root, readable only by root. Docker reads --env-file as root
|
|
# before dropping to uid 1000 (ironclaw) inside the container.
|
|
mkdir -p /opt/ironclaw
|
|
chmod 700 /opt/ironclaw
|
|
|
|
if [ ! -f /opt/ironclaw/.env ]; then
|
|
echo "WARNING: /opt/ironclaw/.env does not exist."
|
|
echo "Create it with your configuration before starting IronClaw."
|
|
echo "See deploy/env.example for the required variables."
|
|
echo ""
|
|
echo "Then run: systemctl enable ironclaw && systemctl start ironclaw"
|
|
else
|
|
chmod 600 /opt/ironclaw/.env
|
|
echo "==> Starting IronClaw"
|
|
systemctl enable ironclaw
|
|
systemctl start ironclaw
|
|
fi
|
|
|
|
echo "==> Setup complete"
|
|
echo ""
|
|
echo "Verify with:"
|
|
echo " systemctl status cloud-sql-proxy"
|
|
echo " systemctl status ironclaw"
|
|
echo " docker logs ironclaw"
|