Files
nr-flow-validator/infra/party-lock/party-lock.py
T
david ad9a5b4e02 party-lock: use Docker SDK instead of docker kill CLI
The docker binary is not available inside the party-lock container,
so switch to the Python Docker SDK via unix socket.
2026-07-02 23:33:43 -07:00

60 lines
1.4 KiB
Python

#!/usr/bin/env -S uv run --script
# /// script
# dependencies = [
# "paho-mqtt>=2.0",
# "docker>=7.0",
# ]
# ///
import os
import stat
import time
import docker
import paho.mqtt.client as mqtt
MQTT_HOST = os.environ.get("MQTT_HOST", "mosquitto")
MQTT_PORT = int(os.environ.get("MQTT_PORT", "1883"))
ACL_PATH = "/mosquitto/config/acl.conf"
locked = False
def rebuild_acl():
lines = []
if locked:
lines.append("topic deny zigbee2mqtt/+/set")
lines.append("topic readwrite #")
with open(ACL_PATH, "w") as f:
f.write("\n".join(lines) + "\n")
os.chmod(ACL_PATH, stat.S_IRWXU)
os.chown(ACL_PATH, 1883, 1883)
try:
dc = docker.DockerClient(base_url="unix://var/run/docker.sock")
mosq = dc.containers.get("mosquitto")
mosq.kill(signal="HUP")
except Exception:
pass
time.sleep(0.05)
def on_message(client, userdata, msg):
global locked
payload = msg.payload.decode().strip().upper()
if payload == "ON":
locked = True
elif payload == "OFF":
locked = False
else:
return
rebuild_acl()
def main():
rebuild_acl()
client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION2)
client.on_message = on_message
client.connect(MQTT_HOST, MQTT_PORT, 60)
client.subscribe("party-lock/set", qos=1)
client.loop_forever()
if __name__ == "__main__":
main()