mixandClaude Opus 5.5
ce363f48dd
Comments only, no behaviour changed. Each place the log tailer, Health and cmd/panel rely on another program now says where that is written, for the version the image runs: Postfix 3.7.11 (log_adhoc(), msg_logger_print(), smtpd_whatsup(), cleanup_milter.c, qmgr_active.c, postlogd.c, showq.c, pipe.c), logrotate 3.21.0, supervisor 4.2.5, proc(5). Measurements stay measurements and say where and when; test fixtures say whether they were seen or composed. Where the source contradicts the code the comment does not bless it but names the register entry (A-8 expiry, A-12 the ISO stamp no Postfix writes, A-15 the last recipient, A-21/A-23 sasl_username, A-33 postlogd's old inode, A-38 a socket file is not a listener, A-65 the certificate served); those are fixed in their own commits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
68 lines
2.1 KiB
Go
68 lines
2.1 KiB
Go
package health
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
)
|
|
|
|
// Socket is the state of one milter socket Postfix connects to.
|
|
type Socket struct {
|
|
Name string
|
|
// Note qualifies the name where the socket is not one of the two Postfix
|
|
// always has ("inbound"); the Health table shows it beside the name.
|
|
Note string
|
|
Path string
|
|
Present bool
|
|
Status Status
|
|
Detail string
|
|
}
|
|
|
|
// CheckSocket stats a milter socket. required distinguishes the two milters:
|
|
// Postfix attaches OpenDKIM with default_action=tempfail, so a missing socket
|
|
// stops mail leaving the server, while the journal-milter is attached with
|
|
// default_action=accept and fails open — mail still goes out, only the send
|
|
// log stops being written (build/postfix-config.sh smtpd_milters; Postfix
|
|
// 3.7.11, src/milter/milter8.c, milter8_comm_error(): tempfail answers "451
|
|
// 4.7.1 Service unavailable - try again later", accept answers nothing).
|
|
//
|
|
// A socket file that is there is reported as listening. It is not proof of
|
|
// it: a unix socket's file outlives the process that bound it unless that
|
|
// process unlinks it (unix(7)), so a killed OpenDKIM or panel leaves one that
|
|
// refuses every connection - assumptions A-38.
|
|
func CheckSocket(name, path string, required bool) Socket {
|
|
s := Socket{Name: name, Path: path}
|
|
if path == "" {
|
|
s.Status = StatusUnknown
|
|
s.Detail = "No socket path is configured."
|
|
return s
|
|
}
|
|
fi, err := os.Stat(path)
|
|
switch {
|
|
case err != nil:
|
|
s.Status = missingStatus(required)
|
|
s.Detail = missingDetail(name, required)
|
|
case fi.Mode()&os.ModeSocket == 0:
|
|
s.Status = missingStatus(required)
|
|
s.Detail = fmt.Sprintf("%s exists but is not a socket.", path)
|
|
default:
|
|
s.Present = true
|
|
s.Status = StatusOK
|
|
s.Detail = "Listening"
|
|
}
|
|
return s
|
|
}
|
|
|
|
func missingStatus(required bool) Status {
|
|
if required {
|
|
return StatusError
|
|
}
|
|
return StatusWarn
|
|
}
|
|
|
|
func missingDetail(name string, required bool) string {
|
|
if required {
|
|
return fmt.Sprintf("The %s socket is missing. Postfix rejects mail with a temporary error until it is back.", name)
|
|
}
|
|
return fmt.Sprintf("The %s socket is missing. Mail still goes out, but the send log is not being written.", name)
|
|
}
|