Function _deferred_self_stop

webapp_modern.py:2845–2868

Stop the ragnar.service via a systemd-run transient unit. Because Ragnar is stopping *itself*, a direct systemctl stop kills the thread before status files and config can be persisted. We use systemd-run so the stop command runs in its own cgroup — completely outside ragnar.service

(delay: int = 1)

# Cache of the last peer poll. The UI reads this rather than triggering a fan-out
# on every page render — a 10-unit mesh must not cost 10 HTTP round trips per
# dashboard refresh.
_mesh_peer_health = {}
_mesh_last_poll = 0.0
# Per-peer set of alert keys already folded into the incident engine. Peers
# serve a rolling window, so every poll re-sends what we saw last cycle.
_mesh_alert_seen = {}
# Per-peer cached security findings (vulns/integrity/watchtower/incidents),
# refreshed each poll and rendered as the fleet findings view.
_mesh_peer_findings = {}
# Live health of the poll LOOP itself, surfaced in the Mesh tab so a stalled or
# crashing poller is visible in the browser instead of only in the logs. This is
# the difference between "sees peers but never polls" (a loop problem) and "polls
# but the peer refuses" (a peer problem) — the UI could not tell them apart.
_mesh_poll_state = {'loop_started': False, 'last_ok_at': 0.0,
                    'last_error': '', 'last_summary': ''}

# Tailscale-install-from-the-UI state. Installing pulls a vendor script and runs
# apt, so it takes a minute or two — run it in the background and let the tab
# poll, exactly like the sensing-backend install.
MESH_INSTALL_SCRIPT = os.path.join(shared_data.currentdir, 'scripts', 'setup_mesh.sh')
MESH_INSTALL_LOG = os.path.join(shared_data.currentdir, 'data', 'mesh_install.log')
_mesh_install_lock = threading.Lock()
_mesh_installing = False


def _run_mesh_install():
    """Install the Tailscale client in the background, logging to MESH_INSTALL_LOG.