yunohost-gitea_ynh/scripts/upgrade

156 lines
6.1 KiB
Bash

#!/bin/bash
#=================================================
# GENERIC START
#=================================================
# IMPORT GENERIC HELPERS
#=================================================
source _common.sh
source /usr/share/yunohost/helpers
upgrade_type=$(ynh_check_app_version_changed)
#=================================================
# STANDARD UPGRADE STEPS
#=================================================
# ENSURE DOWNWARD COMPATIBILITY
#=================================================
ynh_script_progression --message='Ensuring downward compatibility...' --weight=1
if ynh_compare_current_package_version --comparison lt --version "1.6.4~ynh1"; then
message="Upgrade from $YNH_APP_CURRENT_VERSION was dropped. You need to run this, then upgrade to the latest version:
sudo yunohost app upgrade $app -u https://github.com/YunoHost-Apps/gitea_ynh/commit/a9ceb157032ae2290e944c1d0a255451ff2d133d"
ynh_print_info "$message"
ynh_die --message="$message" --ret_code 1
fi
#=================================================
# STOP SYSTEMD SERVICE
#=================================================
ynh_script_progression --message='Stopping a systemd service...' --weight=1
ynh_systemd_action --service_name="$app" --action=stop
#=================================================
# MIGRATION STEP 1 (migrate path from packagin v1)
#=================================================
# This is not handled by the core because the previous package did not define final_path...
if [ -d "/opt/$app" ]; then
# This is the package version of the manifestv2
mv -t "$install_dir/" "/opt/$app/"*
ynh_secure_remove --file="/opt/$app"
fi
# Move data directory
if [ -d /home"/$app" ]; then
mv /home"/$app/" "$data_dir"
fi
# Ensure the user has the correct home dir
if [ ~"$app" != "$data_dir" ]; then
usermod --home "$data_dir" "$app"
fi
# Ensure secrets are defined
ynh_setup_source --dest_dir="$install_dir" --source_id=main
#=================================================
# MIGRATION STEP 2 (Set undefined Vars)
#=================================================
ynh_script_progression --message='Migrating missing settings...'
# Must set permission before to call gitea command
chown -R "$app:$app" "$install_dir"
chmod -R u=rwX,g=rX,o= "$install_dir"
chmod +x "$install_dir/gitea"
if [[ -z "${internal_token:-}" ]]; then
internal_token=$(ynh_exec_as "$app" "$install_dir/gitea" generate secret INTERNAL_TOKEN)
ynh_app_setting_set --app "$app" --key internal_token --value="$internal_token"
fi
if [[ -z "${secret_key:-}" ]]; then
secret_key=$(ynh_exec_as "$app" "$install_dir/gitea" generate secret SECRET_KEY)
ynh_app_setting_set --app "$app" --key secret_key --value="$secret_key"
fi
if [[ -n "${lfs_key:-}" ]]; then
lfs_jwt_secret="$lfs_key"
ynh_app_setting_delete --app "$app" --key lfs_key
ynh_app_setting_set --app "$app" --key lfs_jwt_secret --value="$lfs_jwt_secret"
fi
if [[ -z "${lfs_jwt_secret:-}" ]]; then
lfs_jwt_secret=$(ynh_exec_as "$app" "$install_dir/gitea" generate secret JWT_SECRET)
ynh_app_setting_set --app "$app" --key lfs_jwt_secret --value="$lfs_jwt_secret"
fi
if [[ -z "${jwt_secret:-}" ]]; then
jwt_secret=$(ynh_exec_as "$app" "$install_dir/gitea" generate secret JWT_SECRET)
ynh_app_setting_set --app "$app" --key jwt_secret --value="$jwt_secret"
fi
#=================================================
# MIGRATION STEP Fix regression linked to 77c3678 and #76
#=================================================
list_param_sql=$(yunohost user list --output-as json | jq -c '.users | keys' | sed 's|\[|\(|' | sed 's|\]|\)|')
ynh_replace_string --match_string=__APP__ --replace_string="$app" --target_file=./fix_user_db_for_local_users.sql
ynh_replace_string --match_string=__USER_LIST__ --replace_string="$list_param_sql" --target_file=./fix_user_db_for_local_users.sql
ynh_mysql_connect_as "$db_user" "$db_pwd" "$db_name" < ./fix_user_db_for_local_users.sql
#=================================================
# UPDATE A CONFIG FILE
#=================================================
ynh_script_progression --message='Updating configuration files...' --weight=1
# Clean template to fix issue : https://github.com/gogits/gogs/issues/4585
ynh_secure_remove --file="$install_dir/templates"
# Configure gitea with app.ini file
ynh_add_config --template=app.ini --destination="$install_dir/custom/conf/app.ini"
ynh_script_progression --message='Setting permissions...'
_set_permissions
# Update ldap config
# Note that the 'GroupTeamMap' depends of the user need so we can't apply a generic values for all instances
# So to avoid to override the value after each update we retrive and apply the user value
group_team_map_config=$(mysql --user="$db_user" --password="$db_pwd" --batch --raw "$db_name" <<< 'SELECT `cfg` FROM `'$app'`.`login_source` WHERE `id`=1;' \
| tail -n+2 | jq '.GroupTeamMap')
sed -i 's|__GROUP_TEAM_MAP__|'"${group_team_map_config//\\/\\\\\\\\}"'|g' ./login_source.sql
ynh_replace_string --match_string=__APP__ --replace_string="$app" --target_file=./login_source.sql
ynh_mysql_connect_as "$db_user" "$db_pwd" "$db_name" < ./login_source.sql
#=================================================
# REAPPLY SYSTEM CONFIGURATIONS
#=================================================
ynh_script_progression --message="Upgrading system configurations related to $app..." --weight=1
ynh_add_nginx_config
ynh_add_systemd_config
yunohost service add "$app" --log="/var/log/$app/gitea.log"
ynh_use_logrotate --non-append
ynh_add_fail2ban_config --logpath="/var/log/$app/gitea.log" --failregex=".*Failed authentication attempt for .* from <HOST>" --max_retry 5
#=================================================
# START SYSTEMD SERVICE
#=================================================
ynh_script_progression --message='Starting a systemd service...' --weight=1
ynh_systemd_action --service_name="$app" --action=start --log_path="/var/log/$app/gitea.log" --line_match="$systemd_match_start_line"
#=================================================
# END OF SCRIPT
#=================================================
ynh_script_progression --message="Upgrade of $app completed" --last