reset phases

With --dry-run, cargoship connects to every host and runs the preflight checks for real, then reports the phases it would have run instead of running them. Each phase below is labelled with what a dry run does with it. A phase is only run when it declares that it is safe to, so a phase added later is reported until someone says otherwise.

The report is not a static list. Every phase still prepares itself and checks whether it has anything to do, and both only read, so work that is already done is filtered out against the live hosts. A phase that could not be assessed, because it reads state an earlier reported phase would have created, is reported as unassessed.

A dry run takes no cluster lock, so it does not block a real run, and it can report state that a concurrent run is already changing. It does not need --confirm.

1. Connect to hosts
   • Connects to a remote host via github.com/k0sproject/rig
   • Dry run: runs, reads only. Connects opens the SSH session to each host and does nothing else. A dry run needs it, because a preflight that never reached a host would report on a cluster it never looked at.
2. Detect host operating systems
   • Gathers information about the remote host, including: OS and OS version
   • Dry run: runs, reads only. Reads /etc/os-release and the kernel to pick a configurer for the host. Reporting what each host runs is half of what makes a dry run worth running.
3. Acquire exclusive host lock
   • Runs a background task that touches a file every 30 seconds on each remote node. This prevents other cargoships from making any changes until the lock file has not been touched for over a minute
   • Dry run: reported, not run
4. Gather host facts
   • Gathers network related information about the remote host, including: Hostname, Private Address, Private Interface. Will also update the hosts based off the profile if configured in the config file.
   • Dry run: runs, reads only. Gather facts about each host by asking for its hostname, private interface and private address. All three are reads, and the rest of the run decides what it would do from them.
5. Validate hosts
   • Verifying that each node in the cluster has a unique name and private address, that its CPU architecture is one the package carries, and that its firewall rules are usable,
   • Dry run: runs, reads only. Validate the hosts is the preflight itself: sudo, unique hostnames and addresses, host architecture, firewall rules and clock skew. A dry run that skipped it would check nothing.
6. Gathering facts about the distro installed
   • Gathers information relating to the specific distro being installed, including: if the distro is installed, and what version it is running
   • Dry run: runs, reads only. Gather distro related facts reads the engine version already on each host. That is what tells an upgrade apart from an install, and what catches a downgrade before a real run starts one.
7. Reset Worker
   • Deletes the worker from the cluster, if enabled it will try to drain node before removing the node
   • Dry run: reported, not run
8. Reset Controller
   • Deletes the controller from the cluster, if enabled it will try to drain node before removing the node
   • Dry run: reported, not run
9. Uninstalling Engine
   • Remove the rpm, apt, or binary files from all the hosts
   • Dry run: reported, not run
10. Repoint the controllers that were kept
    • When a removal takes a controller out, rewrites server: on the controllers that stayed so they name one that is still there, which is what lets them rejoin after a restart
    • Dry run: reported, not run
11. Remove the SELinux policy cargoship applied
    • Removes the policy modules and file contexts recorded in /var/lib/cargoship/selinux/cargoship-state.json and returns the booleans to the values the host held before cargoship changed them
    • Dry run: reported, not run
12. Reload service manager
    • Runs systemctl daemon-reload or equivalent on all hosts.
    • Dry run: reported, not run
13. Release exclusive host lock
    • Deletes the lock file from each node, allowing other cargoships to run
    • Dry run: reported, not run
14. Disconnect from hosts
    • Deletes any lingering temp files and disconnects from the remote node
    • Dry run: runs its own dry-run path