# ours RP ARM64 installer configuration # 中文说明见 docs/README.zh-CN.md。English guide: docs/README.en.md # Compose project name. COMPOSE_PROJECT_NAME=ours-rp-arm64 # Runtime image loaded from images/*.tar.gz by install.sh. RPKI_IMAGE=ours-rp-runtime-arm64:dev RPKI_PLATFORM=linux/arm64 # Restart policy for the soak container. Production default keeps the daemon alive. # For finite acceptance tests such as MAX_RUNS=3, set SOAK_RESTART_POLICY=no to avoid an extra restarted run. SOAK_RESTART_POLICY=unless-stopped # Host-side persistent data directory. All state/runs/logs/monitoring data are bind-mounted here. HOST_DATA_DIR=/var/lib/ours-rp-arm64 # RIR list. Options: afrinic,apnic,arin,lacnic,ripe RIRS=afrinic,apnic,arin,lacnic,ripe # Negative MAX_RUNS means keep running forever. Default production interval is 10 minutes. MAX_RUNS=-1 INTERVAL_SECS=600 RETAIN_RUNS=100 # TAL/TA input mode: # file-with-ta: use packaged fixture TAL + TA only. # file-live-ta: use packaged fixture TAL; snapshot waits for live TA refresh, delta refreshes TA in background. # url: pass TAL URL to child process. TAL_INPUT_MODE=file-live-ta LIVE_TA_REFRESH_BEFORE_SNAPSHOT=1 LIVE_TA_REFRESH_CONNECT_TIMEOUT_SECS=15 LIVE_TA_REFRESH_MAX_TIME_SECS=120 # Sync and runtime behavior. RSYNC_SCOPE=module-root DISABLE_COMPETING_RPS=0 RUN_ROOT=/var/lib/ours-rp DB_DIR=/var/lib/ours-rp/state/db RSYNC_MIRROR_ROOT=/var/lib/ours-rp/state/rsync-mirror CLEAN_TMP_AFTER_RUN=0 OUTPUT_COMPACT_REPORT=1 ALLOW_RSYNC_MIRROR_REUSE=1 FAILURE_SNAPSHOT_RESET=1 # Periodic snapshot reset of active state DB. # 0: keep existing behavior. # 1: after one successful snapshot, allow at most N successful delta runs; # the next run is forced to snapshot and active state/db is rebuilt from empty. # Lifecycle run state is persisted independently at: # ${HOST_DATA_DIR}/state/run-lifecycle-state.json # It is not affected by run retention or state/db reset. PERIODIC_SNAPSHOT_RESET=0 PERIODIC_SNAPSHOT_MAX_DELTAS=100 DB_STATS_EXACT_EVERY=0 # Validation and performance options aligned with current optimized soak defaults. ENABLE_CHILD_CERTIFICATE_VALIDATION_CACHE=1 RPKI_ANALYZE=1 RPKI_EXTRA_ARGS="--enable-transport-request-prefetch --enable-publication-point-validation-cache --enable-roa-validation-cache --parallel-max-repo-sync-workers-global 4 --parallel-phase2-object-workers 4 --memory-trim-after-validation" # Progress logs. RPKI_PROGRESS_LOG=1 RPKI_PROGRESS_SLOW_SECS=20 RPKI_PROGRESS_STAGE_FRESH_SLOW_MS=2000 RPKI_PROGRESS_PP_CONTROL_SLOW_MS=200 RPKI_PROGRESS_PP_CACHE_SLOW_MS=100 RPKI_PROGRESS_CONTROL_LOOP_SLOW_MS=2000 # Metrics sidecar. METRICS_INSTANCE=arm64-installer METRICS_PORT=9556 METRICS_POLL_SECS=10 # Prometheus / Grafana. # Monitor images are packaged as ARM64 docker-save archives and loaded by install.sh. MONITOR_PLATFORM=linux/arm64 PROMETHEUS_IMAGE=prom/prometheus:v2.55.1 GRAFANA_IMAGE=grafana/grafana:11.3.1 PROMETHEUS_PORT=9090 PROMETHEUS_RETENTION=7d GRAFANA_PORT=3000 GRAFANA_ADMIN_USER=admin GRAFANA_ADMIN_PASSWORD=admin # First snapshot waiting timeout used by start.sh. FIRST_RUN_WAIT_TIMEOUT_SECS=7200