#!/bin/bash #================================================= # GENERIC START #================================================= # IMPORT GENERIC HELPERS #================================================= # IMPORT GENERIC HELPERS source /usr/share/yunohost/helpers # Load common variables and helpers source ./_common.sh #================================================= # LOAD SETTINGS #================================================= app=$YNH_APP_INSTANCE_NAME # Retrieve app settings domain=$(ynh_app_setting_get "$app" domain) path_url=$(ynh_app_setting_get "$app" path_url) admin=$(ynh_app_setting_get "$app" admin) is_public=$(ynh_app_setting_get "$app" is_public) final_path=$(ynh_app_setting_get $app final_path) config_path=$(ynh_app_setting_get $app config_path) port=$(ynh_app_setting_get "$app" web_port) portUnicorn=$(ynh_app_setting_get "$app" unicorn_port) portSidekiq=$(ynh_app_setting_get "$app" sidekiq_port) architecture=$(ynh_app_setting_get "$app" architecture) unicorn_worker_processes=$(ynh_app_setting_get "$app" unicorn_worker_processes) client_max_body_size=$(ynh_app_setting_get "$app" client_max_body_size) overwrite_nginx=$(ynh_app_setting_get "$app" overwrite_nginx) overwrite_gitlab_config=$(ynh_app_setting_get "$app" overwrite_gitlab_config) #================================================= # ENSURE DOWNWARD COMPATIBILITY #================================================= # Fix is_public as a boolean value if [ "$is_public" = "Yes" ]; then ynh_app_setting_set $app is_public 1 is_public=1 elif [ "$is_public" = "No" ]; then ynh_app_setting_set $app is_public 0 is_public=0 fi # If final_path doesn't exist, create it if [ -z "$final_path" ]; then final_path=/opt/$app ynh_app_setting_set $app final_path $final_path fi # If config_path doesn't exist, create it if [ -z "$config_path" ]; then config_path=/etc/$app ynh_app_setting_set $app config_path $config_path fi if [ -z "$unicorn_worker_processes" ]; then # https://docs.gitlab.com/ee/install/requirements.html#unicorn-workers unicorn_worker_processes=$(($(nproc) + 1 )) # If the server has at least 2GB of RAM if [ $(free -g --si | grep Mem: | awk '{print $2}') -ge 2 ]; then # Min 3 worker processes unicorn_worker_processes=$(($unicorn_worker_processes>3?$unicorn_worker_processes:3)) else # 2 worker processes unicorn_worker_processes=2 fi ynh_app_setting_set $app unicorn_worker_processes $unicorn_worker_processes fi if [ -z "$portSidekiq" ]; then portSidekiq=$(ynh_find_port $(($portUnicorn + 1))) ynh_app_setting_set $app sidekiq_port $portSidekiq fi # If architecture doesn't exist, create it if [ -z "$architecture" ]; then # Detect the system architecture if [ -n "$(uname -m | grep 64)" ]; then architecture="x86-64" elif [ -n "$(uname -m | grep 86)" ]; then ynh_die "Gitlab is not compatible with x86 architecture" elif [ -n "$(uname -m | grep arm)" ]; then architecture="arm" else ynh_die "Unable to detect your achitecture, please open a bug describing \ your hardware and the result of the command \"uname -m\"." 1 fi ynh_app_setting_set $app architecture $architecture fi # If client_max_body_size doesn't exist, create it if [ -z "$client_max_body_size" ]; then client_max_body_size="250m" fi # If overwrite_nginx doesn't exist, create it if [ -z "$overwrite_nginx" ]; then overwrite_nginx=1 ynh_app_setting_set $app overwrite_nginx $overwrite_nginx fi # If overwrite_gitlab_config doesn't exist, create it if [ -z "$overwrite_gitlab_config" ]; then overwrite_gitlab_config=1 ynh_app_setting_set $app overwrite_gitlab_config $overwrite_gitlab_config fi # If domain doesn't exist, retrieve it if [ -z "$domain" ]; then domain=$(grep "external_url" "/etc/gitlab/gitlab.rb" | cut -d'/' -f3) # retrieve $domain from conf file if [ ${domain: -1} == "'" ]; then # if the last char of $domain is ' remove it domain=${domain:0:-1} fi ynh_app_setting_set $app domain $domain fi # If path_url doesn't exist, retrieve it if [ -z "$path_url" ]; then path_url=$(grep "location" "/etc/nginx/conf.d/${domain}.d/gitlab.conf" | cut -d' ' -f2) path_url=$(ynh_normalize_url_path $path_url) ynh_app_setting_set $app path_url path_url fi # If port doesn't exist, retrieve it if [ -z "$port" ]; then port=$(grep -F "nginx['listen_port']" "/etc/gitlab/gitlab.rb" | cut -d' ' -f3) ynh_app_setting_set $app web_port $port fi # If port doesn't exist, retrieve it if [ -z "$portUnicorn" ]; then portUnicorn=$(grep -F "unicorn['port']" "/etc/gitlab/gitlab.rb" | cut -d' ' -f3) ynh_app_setting_set $app unicorn_port $portUnicorn fi # if this source file exist, remove it if [ -e "/etc/apt/sources.list.d/gitlab-ce.list" ]; then ynh_secure_remove "/etc/apt/sources.list.d/gitlab-ce.list" fi #================================================= # BACKUP BEFORE UPGRADE THEN ACTIVE TRAP #================================================= ynh_print_info "Backing up the app before upgrading (may take a while)..." # Backup the current version of the app ynh_backup_before_upgrade ynh_clean_setup () { ynh_secure_remove "$tempdir" 2>&1 ynh_clean_check_starting # restore it if the upgrade fails ynh_restore_upgradebackup } # Exit if an error occurs during the execution of the script ynh_abort_if_errors #================================================= # CHECK THE PATH #================================================= # Normalize the URL path syntax path_url=$(ynh_normalize_url_path $path_url) #================================================= # STANDARD UPGRADE STEPS #================================================= # INSTALL DEPENDENCIES #================================================= ynh_print_info "Installing dependencies..." ynh_install_app_dependencies $pkg_dependencies #================================================= # PRECONFIGURE GITLAB #================================================= # Overwrite the gitlab.rb configuration only if it's allowed if [ $overwrite_gitlab_config -eq 1 ] then ynh_print_info "Preconfigure gitlab..." ynh_backup_if_checksum_is_different "$config_path/gitlab.rb" mkdir -p $config_path cp -f ../conf/gitlab.rb "$config_path/gitlab.rb" ssh_port=$(grep -P "Port\s+\d+" /etc/ssh/sshd_config | grep -P -o "\d+") ynh_replace_string "__GENERATED_EXTERNAL_URL__" "https://$domain${path_url%/}" "$config_path/gitlab.rb" ynh_replace_string "__PORT__" "$port" "$config_path/gitlab.rb" ynh_replace_string "__UNICORN_PORT__" "$portUnicorn" "$config_path/gitlab.rb" ynh_replace_string "__UNICORN_WORKER_PROCESSES__" "$unicorn_worker_processes" "$config_path/gitlab.rb" ynh_replace_string "__CLIENT_MAX_BODY_SIZE__" "$client_max_body_size" "$config_path/gitlab.rb" ynh_replace_string "__SSH_PORT__" "$ssh_port" "$config_path/gitlab.rb" ynh_replace_string "__SIDEKIQ_PORT__" "$portSidekiq" "$config_path/gitlab.rb" ynh_store_file_checksum "$config_path/gitlab.rb" fi touch "$config_path/gitlab-persistent.rb" chown admin: "$config_path/gitlab-persistent.rb" #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= ynh_print_info "Setting up source files..." update_src_version() { source ./upgrade.d/upgrade.last.sh cp ../conf/$architecture.src.default ../conf/$architecture.src ynh_replace_string "__VERSION__" "$gitlab_version" "../conf/$architecture.src" ynh_replace_string "__SOURCE_FILENAME__" "$gitlab_filename" "../conf/$architecture.src" if [ $architecture = "x86-64" ]; then ynh_replace_string "__SHA256_SUM__" "$gitlab_x86_64_source_sha256" "../conf/$architecture.src" elif [ $architecture = "arm" ]; then ynh_replace_string "__SHA256_SUM__" "$gitlab_arm_source_sha256" "../conf/$architecture.src" fi } update_src_version tempdir="$(mktemp -d)" ynh_setup_source $tempdir $architecture if IS_PACKAGE_CHECK; then if ! dpkg -i $tempdir/$gitlab_filename ; then # This command will fail in lxc env ynh_replace_string "command \"cat \/etc\/sysctl.conf \/etc\/sysctl.d\/\*.conf | sysctl -e -p -\"" "command \"cat \/etc\/sysctl.conf\"" "$final_path/embedded/cookbooks/package/resources/sysctl.rb" dpkg --configure gitlab-ce fi else dpkg -i $tempdir/$gitlab_filename fi #================================================= # NGINX CONFIGURATION #================================================= # Overwrite the nginx configuration only if it's allowed if [ $overwrite_nginx -eq 1 ] then ynh_print_info "Configuring nginx web server..." # Create a dedicated nginx config ynh_add_nginx_config client_max_body_size fi #================================================= # GENERIC FINALIZATION #================================================= # ADVERTISE SERVICE IN ADMIN PANEL #================================================= yunohost service add "gitlab-runsvdir" --log "/var/log/$app/gitlab-rails/application.log" "/var/log/$app/gitlab-rails/api_json.log" "/var/log/$app/gitlab-rails/production.log" "/var/log/$app/gitlab-rails/production_json.log" "/var/log/$app/gitlab-rails/sidekiq.log" "/var/log/$app/unicorn/unicorn_stderr.log" "/var/log/$app/unicorn/current" "/var/log/$app/alertmanager/current" "/var/log/$app/gitaly/current" "/var/log/$app/gitlab-monitor/current" "/var/log/$app/gitlab-shell/gitlab-shell.log" "/var/log/$app/gitlab-workhorse/current" "/var/log/$app/logrotate/current" "/var/log/$app/nginx/current" "/var/log/$app/nginx/access.log" "/var/log/$app/nginx/error.log" "/var/log/$app/nginx/gitlab_access.log" "/var/log/$app/nginx/gitlab_error.log" "/var/log/$app/node-exporter/current" "/var/log/$app/postgres-exporter/current" "/var/log/$app/postgresql/current" "/var/log/$app/prometheus/current" "/var/log/$app/redis/current" "/var/log/$app/redis-exporter/current" #================================================= # SETUP SSOWAT #================================================= # If app is public, add url to SSOWat conf as skipped_uris if [ $is_public -eq 1 ]; then # See install script ynh_app_setting_set "$app" unprotected_uris "/" fi #================================================= # WAITING GITLAB #================================================= ynh_print_info "Waiting for gitlab..." # Action status to just wait the service ynh_systemd_action --action=status --service_name="gitlab-runsvdir" --log_path="/var/log/$app/unicorn/current" --line_match="adopted" --timeout=3600 #================================================= # RELOAD NGINX #================================================= ynh_print_info "Reloading nginx web server..." ynh_systemd_action --action=reload --service_name=nginx #================================================= # END OF SCRIPT #================================================= ynh_print_info "Upgrade of $app completed"