Standardize async offloading behind shared executor helper

backend/app/services/jail_config_service.py

@@ -9,6 +9,7 @@ overrides in jail.d/*.local files.
 from __future__ import annotations
 
 import asyncio
+from app.utils.async_utils import run_blocking
 import configparser
 import contextlib
 import io
@@ -502,7 +503,7 @@ async def list_inactive_jails(
         inactive jails.
     """
     loop = asyncio.get_event_loop()
-    parsed_result: tuple[dict[str, dict[str, str]], dict[str, str]] = await loop.run_in_executor(
+    parsed_result: tuple[dict[str, dict[str, str]], dict[str, str]] = await run_blocking(
         None, _parse_jails_sync, Path(config_dir)
     )
     all_jails, source_files = parsed_result
@@ -588,7 +589,7 @@ async def _activate_jail(
     _safe_jail_name(name)
 
     loop = asyncio.get_event_loop()
-    all_jails, _source_files = await loop.run_in_executor(None, _parse_jails_sync, Path(config_dir))
+    all_jails, _source_files = await run_blocking( _parse_jails_sync, Path(config_dir))
 
     if name not in all_jails:
         raise JailNotFoundInConfigError(name)
@@ -600,7 +601,7 @@ async def _activate_jail(
     # ---------------------------------------------------------------------- #
     # Pre-activation validation — collect warnings but do not block           #
     # ---------------------------------------------------------------------- #
-    validation_result: JailValidationResult = await loop.run_in_executor(
+    validation_result: JailValidationResult = await run_blocking(
         None, _validate_jail_config_sync, Path(config_dir), name
     )
     warnings: list[str] = [f"{i.field}: {i.message}" for i in validation_result.issues]
@@ -640,12 +641,12 @@ async def _activate_jail(
     # we can restore it if activation fails.                                   #
     # ---------------------------------------------------------------------- #
     local_path = Path(config_dir) / "jail.d" / f"{name}.local"
-    original_content: bytes | None = await loop.run_in_executor(
+    original_content: bytes | None = await run_blocking(
         None,
         lambda: local_path.read_bytes() if local_path.exists() else None,
     )
 
-    await loop.run_in_executor(
+    await run_blocking(
         None,
         _write_local_override_sync,
         Path(config_dir),
@@ -793,7 +794,7 @@ async def _rollback_activation_async(
 
     # Step 1 — restore original file (or delete it).
     try:
-        await loop.run_in_executor(None, _restore_local_file_sync, local_path, original_content)
+        await run_blocking( _restore_local_file_sync, local_path, original_content)
         log.info("jail_activation_rollback_file_restored", jail=name)
     except ConfigWriteError as exc:
         log.error("jail_activation_rollback_restore_failed", jail=name, error=str(exc))
@@ -866,7 +867,7 @@ async def _deactivate_jail(
     _safe_jail_name(name)
 
     loop = asyncio.get_event_loop()
-    all_jails, _source_files = await loop.run_in_executor(None, _parse_jails_sync, Path(config_dir))
+    all_jails, _source_files = await run_blocking( _parse_jails_sync, Path(config_dir))
 
     if name not in all_jails:
         raise JailNotFoundInConfigError(name)
@@ -875,7 +876,7 @@ async def _deactivate_jail(
     if name not in active_names:
         raise JailAlreadyInactiveError(name)
 
-    await loop.run_in_executor(
+    await run_blocking(
         None,
         _write_local_override_sync,
         Path(config_dir),
@@ -924,7 +925,7 @@ async def delete_jail_local_override(
     _safe_jail_name(name)
 
     loop = asyncio.get_event_loop()
-    all_jails, _source_files = await loop.run_in_executor(None, _parse_jails_sync, Path(config_dir))
+    all_jails, _source_files = await run_blocking( _parse_jails_sync, Path(config_dir))
 
     if name not in all_jails:
         raise JailNotFoundInConfigError(name)
@@ -935,7 +936,7 @@ async def delete_jail_local_override(
 
     local_path = Path(config_dir) / "jail.d" / f"{name}.local"
     try:
-        await loop.run_in_executor(None, lambda: local_path.unlink(missing_ok=True))
+        await run_blocking( lambda: local_path.unlink(missing_ok=True))
     except OSError as exc:
         raise ConfigWriteError(f"Failed to delete {local_path}: {exc}") from exc
 
@@ -964,7 +965,7 @@ async def validate_jail_config(
     """
     _safe_jail_name(name)
     loop = asyncio.get_event_loop()
-    return await loop.run_in_executor(
+    return await run_blocking(
         None,
         _validate_jail_config_sync,
         Path(config_dir),
@@ -1020,7 +1021,7 @@ async def _rollback_jail(
     loop = asyncio.get_event_loop()
 
     # Write enabled=false — this must succeed even when fail2ban is down.
-    await loop.run_in_executor(
+    await run_blocking(
         None,
         _write_local_override_sync,
         Path(config_dir),