#!/bin/bash
set -x
# 1. 删除旧的 controller 容器（其 spec_json 创建时无 trust key，重启即丢失）
docker rm -f friend-controller-45c15663-15f
sleep 5
# 2. 等 manager/server-agent 自动重建新 controller
for i in $(seq 1 20); do
  NEW=$(docker ps -a --format '{{.Names}}' | grep friend-controller | head -1)
  if [ -n "$NEW" ]; then echo "NEW_CONTROLLER=$NEW"; break; fi
  sleep 6
done
if [ -z "$NEW" ]; then echo "NO_CONTROLLER_RECREATED"; exit 1; fi
# 3. 等它 running
sleep 10
docker ps --format '{{.Names}} {{.Status}}' | grep friend-controller
# 4. 检查新容器内 trust key 文件是否存在（distroless 用 ls 探测）
docker exec "$NEW" ls /var/lib/friend-cluster/ 2>&1 | head -5 || true
echo DONE