64898b2c79
Some checks failed
Code scanning / CodeQL (push) Failing after 15s
Zulip production suite / Ubuntu 22.04 production build (push) Failing after 26s
Zulip production suite / Debian 12 production install with custom db name and user (push) Has been skipped
Zulip production suite / Ubuntu 22.04 production install and PostgreSQL upgrade with pgroonga (push) Has been skipped
Zulip production suite / Ubuntu 24.04 production install (push) Has been skipped
Zulip production suite / Ubuntu 26.04 production install (push) Has been skipped
Zulip production suite / Debian 13 production install (push) Has been skipped
Zulip production suite / 7.0 Version Upgrade (push) Has been skipped
Zulip production suite / 8.0 Version Upgrade (push) Has been skipped
Zulip production suite / 6.0 Version Upgrade (push) Has been skipped
Zulip production suite / 10.0 Version Upgrade (push) Has been skipped
Zulip production suite / 9.0 Version Upgrade (push) Has been skipped
Zulip production suite / 12.0 Version Upgrade (push) Has been skipped
Zulip production suite / 11.0 Version Upgrade (push) Has been skipped
GitHub Actions Security Analysis with zizmor / zizmor (push) Failing after 3s
Zulip CI / Debian 12 (Python 3.11, backend + documentation) (push) Failing after 26s
Zulip CI / Ubuntu 22.04 (Python 3.10, backend + frontend) (push) Failing after 3s
Zulip CI / Ubuntu 24.04 (Python 3.12, backend) (push) Failing after 25s
Zulip CI / Ubuntu 26.04 (Python 3.14, backend) (push) Failing after 25s
Zulip CI / Debian 13 (Python 3.13, backend) (push) Failing after 28s
Zulip production suite / Required jobs (push) Has been cancelled
Zulip CI / Required jobs (push) Has been cancelled
API Documentation Update Check / check-feature-level-updated (push) Has been cancelled
API Documentation Update Check / notify-if-api-docs-changed (push) Has been cancelled
48 lines
1.6 KiB
Bash
Executable File
48 lines
1.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -eux
|
|
|
|
service postgresql stop
|
|
|
|
cert_file="$(crudini --get /etc/zulip/zulip.conf postgresql ssl_cert_file)"
|
|
if [ -z "$cert_file" ] || [ ! -f "$cert_file" ]; then
|
|
echo "Certificate file is not set or does not exist!"
|
|
exit 1
|
|
fi
|
|
|
|
key_file="$(crudini --get /etc/zulip/zulip.conf postgresql ssl_key_file)"
|
|
if [ -z "$key_file" ] || [ ! -f "$key_file" ]; then
|
|
echo "Key file is not set or does not exist!"
|
|
exit 1
|
|
fi
|
|
|
|
cert_cn="$(openssl x509 -noout -subject -in "$cert_file" | sed -n '/^subject/s/^.*CN\s*=\s*//p')"
|
|
|
|
if [ "$cert_cn" != "$(hostname)" ]; then
|
|
echo "Configured certificate does not match host!"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Checking for S3 secrets..."
|
|
crudini --get /etc/zulip/zulip-secrets.conf secrets s3_region >/dev/null
|
|
crudini --get /etc/zulip/zulip-secrets.conf secrets s3_backups_bucket >/dev/null
|
|
crudini --get /etc/zulip/zulip-secrets.conf secrets s3_backups_key >/dev/null
|
|
crudini --get /etc/zulip/zulip-secrets.conf secrets s3_backups_secret_key >/dev/null
|
|
|
|
if [ ! -f "/var/lib/postgresql/.postgresql/postgresql.crt" ]; then
|
|
echo "Replication certificate file is not set or does not exist!"
|
|
exit 1
|
|
fi
|
|
if [ ! -f "/var/lib/postgresql/.postgresql/postgresql.key" ]; then
|
|
echo "Replication key file is not set or does not exist!"
|
|
exit 1
|
|
fi
|
|
|
|
version="$(crudini --get /etc/zulip/zulip.conf postgresql version)"
|
|
mkdir -p "/srv/data/postgresql/$version"
|
|
chown postgres.postgres "/srv/data/postgresql/$version"
|
|
chmod 700 "/srv/data/postgresql/$version"
|
|
|
|
/usr/local/bin/env-wal-g backup-fetch "/var/lib/postgresql/$version/main" LATEST
|
|
chown -R postgres.postgres "/var/lib/postgresql/$version/main"
|