CP-54138: Sync SSH status during XAPI startup

 - Ensure host.ssh_enabled reflects the actual SSH service state on startup, in case it was manually changed by the user.

 - Reschedule the "disable SSH" job if:
   - SSH is currently enabled,
   - host.ssh_enabled_timeout is set to a positive value, and
   - host.ssh_expiry is in the future.

Signed-off-by: Lunfan Zhang <[email protected]>

Author: LunfanZhang

ocaml/xapi/xapi_host.mli

@@ -577,3 +577,6 @@ val set_ssh_enabled_timeout :
 
 val set_console_idle_timeout :
   __context:Context.t -> self:API.ref_host -> value:int64 -> unit
+
+val schedule_disable_ssh_job :
+  __context:Context.t -> self:API.ref_host -> timeout:int64 -> unit

ocaml/xapi/xapi_periodic_scheduler_init.ml

@@ -13,6 +13,8 @@
  *)
 (** Periodic scheduler for background tasks. *)
 
+module Date = Clock.Date
+
 module D = Debug.Make (struct let name = "backgroundscheduler" end)
 
 open D
@@ -73,6 +75,24 @@ let register ~__context =
       (fun __context -> Xapi_subject.update_all_subjects ~__context
     )
   in
+  let sync_ssh_status ~__context =
+    let self = Helpers.get_localhost ~__context in
+    let ssh_service = !Xapi_globs.ssh_service in
+    let status = Fe_systemctl.is_active ~service:ssh_service in
+    Db.Host.set_ssh_enabled ~__context ~self ~value:status ;
+
+    if status && Db.Host.get_ssh_enabled_timeout ~__context ~self > 0L then
+      let expiry_time =
+        Db.Host.get_ssh_expiry ~__context ~self
+        |> Date.to_unix_time
+        |> Int64.of_float
+      in
+      let current_time = Unix.time () |> Int64.of_float in
+
+      if Int64.compare expiry_time current_time > 0 then
+        let timeout = Int64.sub expiry_time current_time in
+        Xapi_host.schedule_disable_ssh_job ~__context ~self ~timeout
+  in
   let update_all_subjects_delay = 10.0 in
   (* initial delay = 10 seconds *)
   if master then
@@ -133,6 +153,7 @@ let register ~__context =
     "Check stunnel cache expiry"
     (Xapi_stdext_threads_scheduler.Scheduler.Periodic stunnel_period)
     stunnel_period Stunnel_cache.gc ;
+  sync_ssh_status ~__context ;
   if
     master
     && Db.Pool.get_update_sync_enabled ~__context