Restore gogs
This commit is contained in:
Bob Mottram
parent
c82e56908f
commit
6b3b8af8a8
Binary file not shown.
|
|
@ -0,0 +1,274 @@
|
||||||
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# .---. . .
|
||||||
|
# | | |
|
||||||
|
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
||||||
|
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
||||||
|
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
||||||
|
#
|
||||||
|
# Freedom in the Cloud
|
||||||
|
#
|
||||||
|
# Restore gogs from local storage - typically a USB drive
|
||||||
|
|
||||||
|
# License
|
||||||
|
# =======
|
||||||
|
#
|
||||||
|
# Copyright (C) 2015 Bob Mottram <bob@robotics.uk.to>
|
||||||
|
#
|
||||||
|
# This program is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
# the Free Software Foundation, either version 3 of the License, or
|
||||||
|
# (at your option) any later version.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
|
||||||
|
PROJECT_NAME='freedombone'
|
||||||
|
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
|
||||||
|
BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
|
||||||
|
|
||||||
|
export TEXTDOMAIN=${PROJECT_NAME}-restore-gogs
|
||||||
|
export TEXTDOMAINDIR="/usr/share/locale"
|
||||||
|
|
||||||
|
USB_DRIVE=/dev/sdb1
|
||||||
|
USB_MOUNT=/mnt/usb
|
||||||
|
|
||||||
|
# get default USB from config file
|
||||||
|
CONFIG_FILE=$HOME/${PROJECT_NAME}.cfg
|
||||||
|
if [ -f $CONFIG_FILE ]; then
|
||||||
|
if grep -q "USB_DRIVE=" $CONFIG_FILE; then
|
||||||
|
USB_DRIVE=$(cat $CONFIG_FILE | grep "USB_DRIVE=" | awk -F '=' '{print $2}')
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
ADMIN_USERNAME=
|
||||||
|
ADMIN_NAME=
|
||||||
|
|
||||||
|
# MariaDB password
|
||||||
|
DATABASE_PASSWORD=$(cat /root/dbpass)
|
||||||
|
|
||||||
|
MICROBLOG_DOMAIN_NAME=
|
||||||
|
HUBZILLA_DOMAIN_NAME=
|
||||||
|
OWNCLOUD_DOMAIN_NAME=
|
||||||
|
GIT_DOMAIN_NAME=
|
||||||
|
WIKI_DOMAIN_NAME=
|
||||||
|
FULLBLOG_DOMAIN_NAME=
|
||||||
|
|
||||||
|
function mount_drive {
|
||||||
|
if [ $1 ]; then
|
||||||
|
USB_DRIVE=/dev/${1}1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# get the admin user
|
||||||
|
ADMIN_USERNAME=$(cat $COMPLETION_FILE | grep "Admin user" | awk -F ':' '{print $2}')
|
||||||
|
if [ $2 ]; then
|
||||||
|
ADMIN_USERNAME=$2
|
||||||
|
fi
|
||||||
|
ADMIN_NAME=$(getent passwd $ADMIN_USERNAME | cut -d: -f5 | cut -d, -f1)
|
||||||
|
|
||||||
|
# check that the backup destination is available
|
||||||
|
if [ ! -b $USB_DRIVE ]; then
|
||||||
|
echo $"Please attach a USB drive"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# unmount if already mounted
|
||||||
|
umount -f $USB_MOUNT
|
||||||
|
if [ ! -d $USB_MOUNT ]; then
|
||||||
|
mkdir $USB_MOUNT
|
||||||
|
fi
|
||||||
|
if [ -f /dev/mapper/encrypted_usb ]; then
|
||||||
|
rm -rf /dev/mapper/encrypted_usb
|
||||||
|
fi
|
||||||
|
cryptsetup luksClose encrypted_usb
|
||||||
|
|
||||||
|
# mount the encrypted backup drive
|
||||||
|
cryptsetup luksOpen $USB_DRIVE encrypted_usb
|
||||||
|
if [ "$?" = "0" ]; then
|
||||||
|
USB_DRIVE=/dev/mapper/encrypted_usb
|
||||||
|
fi
|
||||||
|
mount $USB_DRIVE $USB_MOUNT
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
echo $"There was a problem mounting the USB drive to $USB_MOUNT"
|
||||||
|
rm -rf $USB_MOUNT
|
||||||
|
exit 2
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function unmount_drive {
|
||||||
|
sync
|
||||||
|
umount $USB_MOUNT
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
echo $"Unable to unmount the drive. This means that the backup did not work"
|
||||||
|
rm -rf $USB_MOUNT
|
||||||
|
exit 9
|
||||||
|
fi
|
||||||
|
rm -rf $USB_MOUNT
|
||||||
|
|
||||||
|
echo $"Setting permissions"
|
||||||
|
for d in /home/*/ ; do
|
||||||
|
USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
|
||||||
|
if [[ $USERNAME != "git" ]]; then
|
||||||
|
chown -R $USERNAME:$USERNAME /home/$USERNAME
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ $USB_DRIVE == /dev/mapper/encrypted_usb ]]; then
|
||||||
|
echo $"Unmount encrypted USB"
|
||||||
|
cryptsetup luksClose encrypted_usb
|
||||||
|
fi
|
||||||
|
if [ -f /dev/mapper/encrypted_usb ]; then
|
||||||
|
rm -rf /dev/mapper/encrypted_usb
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function check_backup_exists {
|
||||||
|
if [ ! -d $USB_MOUNT/backup ]; then
|
||||||
|
echo $"No backup directory found on the USB drive."
|
||||||
|
unmount_drive
|
||||||
|
exit 2
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function check_admin_user {
|
||||||
|
echo $"Checking that admin user exists"
|
||||||
|
if [ ! -d /home/$ADMIN_USERNAME ]; then
|
||||||
|
echo $"Username $ADMIN_USERNAME not found. Reinstall ${PROJECT_NAME} with this username."
|
||||||
|
unmount_drive
|
||||||
|
exit 295
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function copy_gpg_keys {
|
||||||
|
echo $"Copying GPG keys from admin user to root"
|
||||||
|
cp -r /home/$ADMIN_USERNAME/.gnupg /root
|
||||||
|
}
|
||||||
|
|
||||||
|
function restore_directory_from_usb {
|
||||||
|
if [ ! -d ${1} ]; then
|
||||||
|
mkdir ${1}
|
||||||
|
fi
|
||||||
|
obnam restore -r $USB_MOUNT/backup/${2} --to ${1}
|
||||||
|
}
|
||||||
|
|
||||||
|
function restore_database {
|
||||||
|
RESTORE_SUBDIR="root"
|
||||||
|
|
||||||
|
if [ -d $USB_MOUNT/backup/${1} ]; then
|
||||||
|
echo $"Restoring ${1} database"
|
||||||
|
restore_directory_from_usb "/root/temp${1}data" "${1}data"
|
||||||
|
if [ ! -f /root/temp${1}data/${RESTORE_SUBDIR}/temp${1}data/${1}.sql ]; then
|
||||||
|
echo $"Unable to restore ${1} database"
|
||||||
|
rm -rf /root/temp${1}data
|
||||||
|
unmount_drive
|
||||||
|
exit 503
|
||||||
|
fi
|
||||||
|
mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD ${1} -o < /root/temp${1}data/${RESTORE_SUBDIR}/temp${1}data/${1}.sql)
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
echo "$mysqlsuccess"
|
||||||
|
unmount_drive
|
||||||
|
exit 964
|
||||||
|
fi
|
||||||
|
shred -zu /root/temp${1}data/${RESTORE_SUBDIR}/temp${1}data/*
|
||||||
|
rm -rf /root/temp${1}data
|
||||||
|
echo $"Restoring ${1} installation"
|
||||||
|
if [ ! -d /root/temp${1} ]; then
|
||||||
|
mkdir /root/temp${1}
|
||||||
|
fi
|
||||||
|
restore_directory_from_usb "/root/temp${1}" "${1}"
|
||||||
|
RESTORE_SUBDIR="var"
|
||||||
|
if [ ${2} ]; then
|
||||||
|
if [ -d /var/www/${2}/htdocs ]; then
|
||||||
|
if [ -d /root/temp${1}/${RESTORE_SUBDIR}/www/${2}/htdocs ]; then
|
||||||
|
rm -rf /var/www/${2}/htdocs
|
||||||
|
mv /root/temp${1}/${RESTORE_SUBDIR}/www/${2}/htdocs /var/www/${2}/
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
unmount_drive
|
||||||
|
exit 683
|
||||||
|
fi
|
||||||
|
if [ -d /etc/letsencrypt/live/${2} ]; then
|
||||||
|
ln -s /etc/letsencrypt/live/${2}/privkey.pem /etc/ssl/private/${2}.key
|
||||||
|
ln -s /etc/letsencrypt/live/${2}/fullchain.pem /etc/ssl/certs/${2}.pem
|
||||||
|
else
|
||||||
|
# Ensure that the bundled SSL cert is being used
|
||||||
|
if [ -f /etc/ssl/certs/${2}.bundle.crt ]; then
|
||||||
|
sed -i "s|${2}.crt|${2}.bundle.crt|g" /etc/nginx/sites-available/${2}
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function update_domains {
|
||||||
|
if grep -q "Gogs domain" $COMPLETION_FILE; then
|
||||||
|
GIT_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Gogs domain" | awk -F ':' '{print $2}')
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function same_admin_user {
|
||||||
|
PREV_ADMIN_USERNAME=$(cat $COMPLETION_FILE | grep "Admin user" | awk -F ':' '{print $2}')
|
||||||
|
if [[ "$PREV_ADMIN_USERNAME" != "$ADMIN_USERNAME" ]]; then
|
||||||
|
echo $"The admin username has changed from $PREV_ADMIN_USERNAME to $ADMIN_USERNAME. To restore you will first need to install a new ${PROJECT_NAME} system with an initial admin user named $PREV_ADMIN_USERNAME"
|
||||||
|
unmount_drive
|
||||||
|
exit 73265
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function restore_gogs {
|
||||||
|
if [ $GIT_DOMAIN_NAME ]; then
|
||||||
|
restore_database gogs ${GIT_DOMAIN_NAME}
|
||||||
|
if [ -d $USB_MOUNT/backup/gogs ]; then
|
||||||
|
echo $"Restoring Gogs settings"
|
||||||
|
if [ ! -d /home/git/go/src/github.com/gogits/gogs/custom ]; then
|
||||||
|
mkdir -p /home/git/go/src/github.com/gogits/gogs/custom
|
||||||
|
fi
|
||||||
|
cp -r /root/tempgogs/home/git/go/src/github.com/gogits/gogs/custom/* /home/git/go/src/github.com/gogits/gogs/custom
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
unmount_drive
|
||||||
|
exit 981
|
||||||
|
fi
|
||||||
|
echo $"Restoring Gogs repos"
|
||||||
|
restore_directory_from_usb /root/tempgogsrepos gogsrepos
|
||||||
|
cp -r /root/tempgogsrepos/home/git/gogs-repositories/* /home/git/gogs-repositories/
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
unmount_drive
|
||||||
|
exit 67574
|
||||||
|
fi
|
||||||
|
echo $"Restoring Gogs authorized_keys"
|
||||||
|
restore_directory_from_usb /root/tempgogsssh gogsssh
|
||||||
|
if [ ! -d /home/git/.ssh ]; then
|
||||||
|
mkdir /home/git/.ssh
|
||||||
|
fi
|
||||||
|
cp -r /root/tempgogsssh/home/git/.ssh/* /home/git/.ssh/
|
||||||
|
if [ ! "$?" = "0" ]; then
|
||||||
|
unmount_drive
|
||||||
|
exit 8463
|
||||||
|
fi
|
||||||
|
rm -rf /root/tempgogs
|
||||||
|
rm -rf /root/tempgogsrepos
|
||||||
|
rm -rf /root/tempgogsssh
|
||||||
|
chown -R git:git /home/git
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
mount_drive $1 $2
|
||||||
|
check_backup_exists
|
||||||
|
check_admin_user
|
||||||
|
copy_gpg_keys
|
||||||
|
restore_configuration
|
||||||
|
same_admin_user
|
||||||
|
update_domains
|
||||||
|
restore_gogs
|
||||||
|
unmount_drive
|
||||||
|
|
||||||
|
echo $"Restore Gogs from USB drive is complete. You can now unplug it."
|
||||||
|
|
||||||
|
exit 0
|
||||||
Loading…
Reference in New Issue