เมื่อ NAS บูตทีหลัง: ตัวเฝ้าการเมานต์สำหรับ Docker

qm set 109 --onboot 1 --startup order=2,up=180
qm set 104 --onboot 1 --startup order=5

# see the whole boot sequence at a glance
for c in /etc/pve/qemu-server/*.conf; do
  printf "%-10s %s\n" "$(basename $c)" "$(grep -E '^(name|onboot|startup):' $c | tr '\n' ' ')"
done

192.168.1.10:/mnt/user/photos /mnt/photos nfs rw,soft,timeo=150,_netdev,nofail,x-systemd.mount-timeout=30 0 0
192.168.1.10:/mnt/user/media  /mnt/media  nfs rw,soft,timeo=150,_netdev,nofail,x-systemd.mount-timeout=30 0 0
192.168.1.10:/mnt/user/files  /mnt/files  nfs rw,soft,timeo=150,_netdev,nofail,x-systemd.mount-timeout=30 0 0

#!/bin/bash
# Remount lost NAS shares; restart their consumers only when a remount actually
# happened; say so once. Runs as root, every minute.
changed=""
for m in photos media files; do
  if ! mountpoint -q /mnt/$m; then
    # An unmounted mountpoint may hold directories Docker auto-created while the
    # NAS was away. They would be hidden under the mount later — clear them so the
    # state stays honest and nothing ever lands on the local disk by mistake.
    find /mnt/$m -mindepth 1 -maxdepth 1 -exec rm -rf {} + 2>/dev/null
    mount /mnt/$m 2>/dev/null && changed="$changed $m"
  fi
done
if [ -n "$changed" ]; then
  docker restart immich_server jellyfin >/dev/null 2>&1
  docker start opencloud >/dev/null 2>&1
  # swap for your notifier of choice
  sudo -u duncan -H /home/duncan/scripts/tg-send.sh \
    "🔁 nfs-guard remounted:$changed — consumers restarted (the NAS had been away)." \
    >/dev/null 2>&1 || true
  logger -t nfs-guard "remounted:$changed; consumers restarted"
fi
exit 0

# nfs-guard.service
[Unit]
Description=Remount NAS shares and restart their consumers if they were lost

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/nfs-guard.sh

# nfs-guard.timer
[Unit]
Description=Minutely NFS mount guard

[Timer]
OnBootSec=30s
OnUnitActiveSec=1min
AccuracySec=10s

[Install]
WantedBy=timers.target

sudo chmod 755 /usr/local/sbin/nfs-guard.sh
sudo systemctl daemon-reload
sudo systemctl enable --now nfs-guard.timer
systemctl list-timers nfs-guard.timer --no-legend

for m in photos media files; do sudo touch /mnt/$m/.on-nas; done

services:
  jellyfin:
    image: jellyfin/jellyfin:latest
    container_name: jellyfin
    volumes:
      - ./config:/config
      - ./cache:/cache
      - /mnt/media:/media:ro
      # the gate: a file that exists only on the NAS, and that Compose may not create
      - type: bind
        source: /mnt/media/.on-nas
        target: /on-nas
        read_only: true
        bind:
          create_host_path: false
    restart: unless-stopped

# exports appear only once the NAS array is up
showmount -e 192.168.1.10

# mounts, not directory listings — an empty local directory lists just fine
for m in photos media files; do mountpoint -q /mnt/$m && echo "/mnt/$m mounted" || echo "/mnt/$m MISSING"; done

# the gate is in place when every consumer shows the marker bind
for c in jellyfin opencloud immich_server; do
  docker inspect -f '{{.Name}}: {{range .Mounts}}{{if eq .Destination "/on-nas"}}{{.Source}}{{end}}{{end}}' $c
done

# the real test: stop the NAS array, watch the consumers refuse, start it, watch the guard
journalctl -t nfs-guard -f