整理 NAS 部署目录并归档迁移工具

更新 Compose 和部署更新脚本以使用新的状态、凭据及日历目录布局；新增目录迁移、诊断和历史清理工具及本机演练测试，并记录 NAS 迁移与清理结果。

deploy/directory-migration/cleanup_history.py

@@ -0,0 +1,94 @@
+"""只清理明确列出的旧归档，不操作容器、镜像或运行数据。"""
+import hashlib
+import json
+import os
+from pathlib import Path
+import shutil
+import stat
+import subprocess
+from datetime import datetime, timezone
+
+ROOT = Path('/vol2/1000/Soft/mi-fitness-health')
+KEEP = 'directory-migration-retry-1792227666562967051'
+OBSOLETE = ['initial-install', 'password-change', 'rollback-configs', 'ui4', 'ui5', 'ui6', 'ui7',
+            'directory-migration', 'directory-migration-retry-1792227359874267909']
+EXPECTED = {'compose.yml': 'b5c965c653948e97e02e22774bd15253dbde74d5e25616fa0115f047a36556dd',
+            'compose.override.yml': 'd77485b3d3177def55c200478ba9e4645689f8476f46c13a47487be22edcd1c1'}
+
+
+def candidates(root):
+    root = Path(root)
+    archive = root/'archive'
+    if root.is_symlink() or root.resolve() != root or archive.is_symlink() or archive.resolve().parent != root:
+        raise RuntimeError('项目或归档路径异常')
+    paths = []
+    for name in OBSOLETE:
+        path = archive/name
+        if path.is_symlink() or path.resolve().parent != archive or not path.is_dir():
+            raise RuntimeError('历史目录缺失或路径异常，未清理任何文件')
+        for child in path.rglob('*'):
+            if not (stat.S_ISREG(child.lstat().st_mode) or stat.S_ISDIR(child.lstat().st_mode)):
+                raise RuntimeError('历史目录包含链接或特殊文件，未清理任何文件')
+        paths.append(path)
+    return paths
+
+
+def main():
+    if os.geteuid() != 0:
+        raise RuntimeError('需要通过 sudo 执行')
+    paths = candidates(ROOT)
+    keep = ROOT/'archive'/KEEP
+    if keep.is_symlink() or json.loads((keep/'result.json').read_text(encoding='utf-8'))['status'] != 'complete':
+        raise RuntimeError('成功迁移记录异常，停止')
+    for name, expected in EXPECTED.items():
+        path = ROOT/name
+        if path.is_symlink() or hashlib.sha256(path.read_bytes()).hexdigest() != expected:
+            raise RuntimeError('当前配置已变化，停止')
+    ids = subprocess.check_output(['docker', 'ps', '-aq']).decode().split()
+    items = json.loads(subprocess.check_output(['docker','inspect',*ids],stderr=subprocess.PIPE)) if ids else []
+    for item in items:
+        for mount in item.get('Mounts', []):
+            if mount.get('Type') != 'bind':
+                continue
+            source = Path(mount['Source']).resolve()
+            if any(source == p or source.is_relative_to(p) or p.is_relative_to(source) for p in paths):
+                raise RuntimeError('容器引用历史归档，停止')
+    services = {'/mi-fitness-health-'+x+'-1' for x in ['web','backend','worker']}
+    current = [i for i in items if i['Name'] in services]
+    if len(current)!=3 or not all(i['State']['Running'] for i in current):
+        raise RuntimeError('健康容器状态异常，停止')
+    snapshots = [(i['Id'], i['State']['StartedAt']) for i in current]
+    record = {'at': datetime.now(timezone.utc).isoformat(), 'directories':[], 'bytes_removed':0, 'files_removed':0}
+    for path in paths:
+        files = [p for p in path.rglob('*') if p.is_file()]
+        size = sum(p.stat().st_size for p in files)
+        record['directories'].append({'name':path.name,'files':len(files),'bytes':size})
+        record['bytes_removed'] += size
+        record['files_removed'] += len(files)
+    # 保留当前可用配置，而非仅留下引用旧路径的迁移前配置。
+    for name in EXPECTED:
+        shutil.copy2(ROOT/name, keep/('current-'+name))
+    (keep/'cleanup-plan.json').write_text(json.dumps(record,ensure_ascii=False,indent=2)+'\n',encoding='utf-8')
+    for path in paths:
+        if path.is_symlink() or path.resolve().parent != ROOT/'archive':
+            raise RuntimeError('删除前路径核对失败，停止')
+        shutil.rmtree(path)
+        print('已清理：'+path.name,flush=True)
+    after = json.loads(subprocess.check_output(['docker','inspect',*[i['Id'] for i in current]],stderr=subprocess.PIPE))
+    if snapshots != [(i['Id'],i['State']['StartedAt']) for i in after] or not all(i['State']['Running'] for i in after):
+        raise RuntimeError('容器状态发生变化，需核对')
+    for name, expected in EXPECTED.items():
+        if hashlib.sha256((ROOT/name).read_bytes()).hexdigest()!=expected:
+            raise RuntimeError('当前配置发生变化，需核对')
+    record['status']='complete'
+    record['containers_unchanged']=True
+    (keep/'cleanup-result.json').write_text(json.dumps(record,ensure_ascii=False,indent=2)+'\n',encoding='utf-8')
+    print('历史文件清理完成，释放约 %.1f MiB；三个容器未重启。' % (record['bytes_removed']/1024**2),flush=True)
+
+
+if __name__=='__main__':
+    try:
+        main()
+    except Exception as error:
+        print(str(error) if type(error) is RuntimeError else type(error).__name__,flush=True)
+        raise SystemExit(1)