#!/bin/bash #================================================= # GENERIC START #================================================= # IMPORT GENERIC HELPERS #================================================= source _common.sh source /usr/share/yunohost/helpers #================================================= # LOAD SETTINGS #================================================= #REMOVEME? app=$YNH_APP_INSTANCE_NAME #REMOVEME? ssh_user=$(ynh_app_setting_get --app=$app --key=ssh_user) #REMOVEME? public_key=$(ynh_app_setting_get --app=$app --key=public_key) #REMOVEME? alert_delay=$(ynh_app_setting_get --app=$app --key=alert_delay) #REMOVEME? alert_mails=$(ynh_app_setting_get --app=$app --key=alert_mails) #REMOVEME? quota=$(ynh_app_setting_get --app=$app --key=quota) #================================================= # CHECK IF AN UPGRADE IS NEEDED #================================================= ynh_check_app_version_changed #================================================= # BACKUP BEFORE UPGRADE THEN ACTIVE TRAP #================================================= # We don't backup before upgrade cause we don't want accidental # remove of repo if upgrade failed #REMOVEME? #ynh_backup_before_upgrade #REMOVEME? #ynh_clean_setup () { # # restore it if the upgrade fails #REMOVEME? # ynh_restore_upgradebackup #} # Exit if an error occurs during the execution of the script #REMOVEME? ynh_abort_if_errors #================================================= # ENSURE DOWNWARD COMPATIBILITY #================================================= ynh_script_progression --message="Ensuring downward compatibility..." if [ -f "/etc/apt/sources.list.d/$app-stretch-backports.list" ]; then rm -f /etc/apt/sources.list.d/$app-stretch-backports.list install_borg_with_pip fi if [ -f "/etc/yunohost/hooks.d/backup/17-data_home" ]; then ynh_secure_remove /etc/yunohost/hooks.d/backup/17-data_home fi # Fix broken value ssh_user that mistakenly got replaced by the public key in previous versions... [ -n "$ssh_user" ] || ynh_die "Unable to retrieve ssh_user please fix /etc/yunohost/apps/$app/settings.yml manually :( !" if echo "$ssh_user" | grep -q ' '; then ssh_user=$(grep "$ssh_user" /home/*/.ssh/authorized_keys | grep borg | cut -d/ -f3) [ -n "$ssh_user" ] || ynh_die "Unable to retrieve ssh_user please fix /etc/yunohost/apps/$app/settings.yml manually :( !" ynh_app_setting_set --app=$app --key=ssh_user --value="$ssh_user" fi if echo "$public_key" | grep -q -v ' '; then ynh_app_setting_set --app=$app --key=public_key --value="$(grep -Po 'no-user-rc \K.*$' /home/$ssh_user/.ssh/authorized_keys)" fi # Alert delay and alert mail missing if [ -z "$alert_delay" ]; then ynh_app_setting_set --app=$app --key=alert_delay --value=1 ynh_app_setting_set --app=$app --key=alert_mails --value="root" fi # Reinstall borg if debian change of major version if [ ! -f "/opt/borg-env/$(ynh_get_debian_release)" ] ; then ynh_secure_remove /opt/borg-env fi #================================================= # CREATE SSH USER USED BY BORG #================================================= ynh_script_progression --message="Creating SSH user used by Borg..." #REMOVEME? ynh_system_user_create --username=$ssh_user --home_dir=/home/$ssh_user --use_shell --groups ssh.app #================================================= # UPGRADE DEPENDENCIES #================================================= #REMOVEME? ynh_script_progression --message="Upgrading dependencies..." #REMOVEME? ynh_install_app_dependencies $pkg_dependencies #================================================= # SPECIFIC UPGRADE #================================================= # Upgrade borgbackup #================================================= ynh_script_progression --message="Upgrading borgbackup..." --weight=1 install_borg_with_pip #================================================= # AUTORIZE SSH FOR THIS USER #================================================= ynh_script_progression --message="Seting good permissions..." mkdir -p /home/$ssh_user/.ssh chmod o=--- /home/$ssh_user extra="--storage-quota $quota" if [ "$quota" = "" ]; then extra="" fi echo "command=\"borg serve $extra --restrict-to-repository /home/$ssh_user/backup\",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-user-rc $public_key" >> /home/$ssh_user/.ssh/authorized_keys chown -R $ssh_user:$ssh_user /home/$ssh_user #================================================= # AVOID BACKUP OF BACKUP #================================================= ynh_script_progression --message="Avoiding to backup the backup itself..." touch /home/$ssh_user/.nobackup #================================================= # SETUP CRON #================================================= ynh_script_progression --message="Configuring cron to monitor backup..." ynh_add_config --template="monitor-backup" --destination="/etc/cron.d/$app" #================================================= # END OF SCRIPT #================================================= ynh_script_progression --message="Upgrade of $app completed" --last