homeio

1import "server-only";
2
3import { execFile } from "node:child_process";
4import { rm, stat } from "node:fs/promises";
5import path from "node:path";
6import { promisify } from "node:util";
7import { serverEnv } from "@/lib/server/env";
8import {
9  resolveDataRootDirectory,
10  resolveStoreStacksRoot,
11} from "@/lib/server/storage/data-root";
12
13const execFileAsync = promisify(execFile);
14
15const FACTORY_RESET_LOG_PATH = "/var/log/homeio-factory-reset.log";
16
17// ── Systemd unit helpers ───────────────────────────────────────────────────────
18
19const SYSTEMD_RUN_BASE_ARGS = [
20  "--quiet",
21  "--no-block",
22  "--collect",
23  "--property=Type=exec",
24  "--property=KillMode=control-group",
25  "--property=TimeoutStopSec=30s",
26  "--property=SendSIGKILL=yes",
27] as const;
28
29/**
30 * Schedules a short inline shell command via a transient systemd unit.
31 * Used for simple one-liners like reboot and shutdown.
32 */
33async function scheduleSystemCommand(command: string, unitName: string) {
34  await execFileAsync("systemd-run", [
35    ...SYSTEMD_RUN_BASE_ARGS,
36    `--unit=${unitName}`,
37    "bash",
38    "-lc",
39    command,
40  ]);
41}
42
43/**
44 * Schedules a shell script file via a transient systemd unit.
45 * Environment variables are injected cleanly via --setenv instead of being
46 * interpolated into a command string.
47 */
48async function scheduleSystemScript(
49  scriptPath: string,
50  unitName: string,
51  env: Record<string, string>,
52) {
53  const envArgs = Object.entries(env).flatMap(([key, value]) => [
54    "--setenv",
55    `${key}=${value}`,
56  ]);
57
58  await execFileAsync("systemd-run", [
59    ...SYSTEMD_RUN_BASE_ARGS,
60    `--unit=${unitName}`,
61    ...envArgs,
62    "bash",
63    scriptPath,
64  ]);
65}
66
67// ── Public API ────────────────────────────────────────────────────────────────
68
69export async function isSystemdAvailable(): Promise<boolean> {
70  try {
71    await execFileAsync("systemd-run", ["--version"]);
72    return true;
73  } catch {
74    return false;
75  }
76}
77
78export function scheduleSystemReboot() {
79  return scheduleSystemCommand("sleep 2; systemctl reboot", `homeio-reboot-${Date.now()}`);
80}
81
82export function scheduleSystemShutdown() {
83  return scheduleSystemCommand("sleep 2; systemctl poweroff", `homeio-shutdown-${Date.now()}`);
84}
85
86export async function scheduleFactoryReset() {
87  const scriptPath = path.join(process.cwd(), "scripts", "factory-reset.sh");
88
89  // Fail fast with a clear error before accepting the request — avoids the user
90  // being redirected to the factory-reset screen when nothing will happen.
91  try {
92    await stat(scriptPath);
93  } catch {
94    throw new Error(`Factory reset script not found at ${scriptPath}.`);
95  }
96
97  const dataRoot = resolveDataRootDirectory();
98  const stacksRoot = resolveStoreStacksRoot();
99  const workdir = process.cwd();
100
101  // Resolve the npm binary at schedule time so the script never relies on PATH
102  // inside the restricted systemd environment.
103  const npmBin = await execFileAsync("which", ["npm"])
104    .then((r) => r.stdout.trim())
105    .catch(() => "npm");
106
107  return scheduleSystemScript(
108    scriptPath,
109    `homeio-factory-reset-${Date.now()}`,
110    {
111      DATABASE_URL: serverEnv.DATABASE_URL,
112      HOMEIO_RESET_DATA_ROOT: dataRoot,
113      HOMEIO_RESET_STACKS_ROOT: stacksRoot,
114      HOMEIO_RESET_WORKDIR: workdir,
115      HOMEIO_RESET_NPM_BIN: npmBin,
116    },
117  );
118}
119
120export async function deleteFactoryResetArtifacts() {
121  await rm(FACTORY_RESET_LOG_PATH, { force: true }).catch(() => undefined);
122}
123