added systemd services

handlers/main.yml

@@ -0,0 +1,3 @@
+- name: reload systemd
+  systemd:
+    daemon_reload: True

tasks/main.yml

@@ -47,13 +47,28 @@
       - backup-all-vms
       - backup-full
       - backup-cronjob
+      - backup-check
     template:
       src: "{{ item }}.j2"
       dest: "/usr/local/bin/{{ item }}"
       owner: root
       group: root
-      mode: 0700
+      mode: 0755
       validate: /bin/bash -n %s
+  - name: copy systemd services
+    notify:
+      - reload systemd
+    loop:
+      - backup-check
+      - backup-retention
+      - backup-run
+    template:
+      src: "{{ item }}.service.j2"
+      dest: "/etc/systemd/system/{{ item }}.service"
+      owner: root
+      group: root
+      mode: 0644
+#      validate: /usr/bin/systemd-analyze verify %s
   - name: create data folder
     file:
       path: /var/backup-client/

templates/backup-check.j2

@@ -0,0 +1,14 @@
+#!/bin/bash
+set -euo pipefail
+
+{% if backup_backend == 'restic' %}
+# restic backend
+source /etc/backup-client/restic.env
+
+restic check --read-data
+
+{% endif %}
+
+{% if not backup_backend %}
+echo "Noop, backup is handled external"
+{% endif %}

templates/backup-check.service.j2

@@ -0,0 +1,10 @@
+[Unit]
+Description=Check backup consistency
+OnFailure=status-email-root@%n.service
+
+[Service]
+Nice=19
+IOSchedulingClass=idle
+Type=simple
+ExecStart=/usr/local/bin/backup-check
+

templates/backup-full.j2

@@ -7,7 +7,3 @@ set -euo pipefail
 {% if backups.mode in ['hypervisor-restic'] %}
 	backup-all-vms
 {% endif %}
-{% if backup_executor %}
-	backup-retention
-{% endif %}
-

templates/backup-retention.j2

@@ -7,6 +7,7 @@ source /etc/backup-client/retention.env
 # restic backend
 source /etc/backup-client/restic.env
 restic forget \
+	--cleanup-cache \
 	--verbose \
 	--prune \
 	--group-by "host,paths,tags" \
@@ -17,3 +18,6 @@ restic forget \
 	--keep-yearly ${BACKUP_RETENTION_YEARS}
 
 {% endif %}
+{% if not backup_backend %}
+echo "Noop, backup is handled external"
+{% endif %}

templates/backup-retention.service.j2

@@ -0,0 +1,10 @@
+[Unit]
+Description=Delete no longer needed backups
+OnFailure=status-email-root@%n.service
+
+[Service]
+Nice=19
+IOSchedulingClass=idle
+Type=simple
+ExecStart=/usr/local/bin/backup-retention
+

templates/backup-run.service.j2

@@ -0,0 +1,10 @@
+[Unit]
+Description=Backup system
+OnFailure=status-email-root@%n.service
+
+[Service]
+Nice=19
+IOSchedulingClass=idle
+Type=simple
+ExecStart=/usr/local/bin/backup-full
+