refactor(pacman-cache): own role instead of common

The pacman cache policy is its own concern, not base configuration of every host. The new role pacman-cache runs in install-edge-host after common and before docker-install; common is unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix(common): empty the pacman package cache in the base play
2026-11-06 13:45:30 +01:00 · 2026-11-06 13:26:34 +01:00 · 2026-11-06 12:03:23 +00:00 · 2026-11-06 12:58:26 +01:00 · 2026-11-06 12:58:01 +01:00 · 2026-11-06 12:13:39 +01:00
3 changed files with 36 additions and 0 deletions
@@ -34,6 +34,7 @@
  roles:
    - certificates
    - common
+    - pacman-cache
    - edge-flash-wear
    - docker-install
    - edge-log-shipper
@@ -0,0 +1,14 @@
+# Managed by ansible (roles/pacman-cache).
+# Downloaded packages are not kept; older versions come from the Arch Linux
+# Archive.
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Operation = Remove
+Type = Package
+Target = *
+
+[Action]
+Description = Removing downloaded packages from the cache...
+When = PostTransaction
+Exec = /usr/bin/find /var/cache/pacman/pkg -mindepth 1 -delete
@@ -0,0 +1,21 @@
+---
+# Keep the pacman package cache empty. pacman keeps every downloaded package;
+# on a 7 GB eMMC root the cache grows to gigabytes. Arch hosts only.
+
+- name: Ensure the pacman hook directory exists
+  ansible.builtin.file:
+    path: /etc/pacman.d/hooks
+    state: directory
+    mode: "0755"
+
+- name: Empty the package cache after every transaction
+  ansible.builtin.copy:
+    src: pacman-cache.hook
+    dest: /etc/pacman.d/hooks/pacman-cache.hook
+    mode: "0644"
+
+- name: Empty the package cache
+  ansible.builtin.command:
+    argv: [find, /var/cache/pacman/pkg, -mindepth, "1", -delete, -print]
+  register: pacman_cache_clean
+  changed_when: pacman_cache_clean.stdout | length > 0
Author	SHA1	Message	Date
claude-botandClaude Opus 5.5	d457c7e639	refactor(pacman-cache): own role instead of common ci/woodpecker/pr/ci-scripts-test Pipeline was successful Details The pacman cache policy is its own concern, not base configuration of every host. The new role pacman-cache runs in install-edge-host after common and before docker-install; common is unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-06 13:45:30 +01:00
claude-botandClaude Opus 5.5	a29e10e313	fix(common): empty the pacman package cache in the base play ci/woodpecker/pr/ci-scripts-test Pipeline was successful Details The cache cleanup from #1579 sat in os-update, which site.yml does not run, so site.yml still failed on edge-1 with "no space left on device" when pulling the Alloy image. The hook and the cleanup move to common, which site.yml runs on every host before install-edge-host. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-06 13:26:34 +01:00
k.renner	15d98d2702	Merge pull request 'fix(os-update): keep the pacman package cache empty' (#1579 ) from fix/edge-pacman-cache into main ci/woodpecker/cron/e2e Pipeline failed Details ci/woodpecker/cron/security-scan Pipeline was successful Details Reviewed-on: #1579	2026-11-06 12:03:23 +00:00
claude-botandClaude Opus 5.5	4b7960c18c	fix(os-update): keep the pacman package cache empty ci/woodpecker/pr/ci-scripts-test Pipeline was successful Details pacman keeps every package an upgrade downloads. On edge-1's 6.6 GB eMMC root that was 1.7 GB, leaving 197 MB free. The role now installs a pacman hook that empties the cache after every transaction, and empties it before the 1 GiB free-space check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-06 12:58:26 +01:00
claude-botandClaude Opus 5.5	bc50d58723	Revert "fix(edge-flash-wear): keep the pacman package cache empty" The package cache is a disk-space concern of the package upgrades, not flash wear; it moves to the os-update role. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-06 12:58:01 +01:00
claude-botandClaude Opus 5.5	f65015a423	fix(edge-flash-wear): keep the pacman package cache empty ci/woodpecker/pr/ci-scripts-test Pipeline was successful Details edge-1's 6.6 GB eMMC root had 1.7 GB of cached packages and 197 MB free, so pulling the Alloy image failed with "no space left on device". A pacman hook now empties the cache after every transaction, and the role empties it on each run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-06 12:13:39 +01:00
k.renner	db0c5a8d96	Merge pull request 'fix(edge-log-shipper): run Alloy from the upstream image' (#1578 ) from fix/edge-alloy-upstream-image into main Reviewed-on: #1578	2026-11-06 11:06:06 +00:00