Compare commits
31 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
d8c4d28fb0 | ||
|
|
5c59f5adc1 | ||
|
|
c212d68183 | ||
|
|
3f5db87844 | ||
|
|
9e13103e04 | ||
|
|
1896d0d3a4 | ||
|
|
b9349d3ae1 | ||
|
|
e702e01092 | ||
|
|
84ef0a54f6 | ||
|
|
5820f74282 | ||
|
|
d04320b814 | ||
|
|
840fc1fbc5 | ||
|
|
1c1b8e50b4 | ||
|
|
5ef90f7c10 | ||
|
|
a85e451f6d | ||
|
|
00eef2f230 | ||
|
|
e997179643 | ||
|
|
ef6a5ed7d1 | ||
|
|
05f594e9ba | ||
|
|
4bc23d7556 | ||
|
|
579964b63d | ||
|
|
78ecc3b10d | ||
|
|
1b0cd97539 | ||
|
|
3305de6dbd | ||
|
|
1f4d7ceeb2 | ||
|
|
9f0d37450b | ||
|
|
99a5d1c2e8 | ||
|
|
a181ee805e | ||
|
|
709072c25e | ||
|
|
f2d6006d58 | ||
|
|
63a51d0d31 |
4
.github/workflows/ci.yml
vendored
4
.github/workflows/ci.yml
vendored
@@ -51,7 +51,7 @@ jobs:
|
||||
|
||||
- run: make test
|
||||
|
||||
- uses: actions/upload-artifact@v3
|
||||
- uses: actions/upload-artifact@v4
|
||||
if: failure()
|
||||
with:
|
||||
name: tmp/test-results
|
||||
@@ -93,7 +93,7 @@ jobs:
|
||||
|
||||
- run: make test
|
||||
|
||||
- uses: actions/upload-artifact@v3
|
||||
- uses: actions/upload-artifact@v4
|
||||
if: failure()
|
||||
with:
|
||||
name: tmp/test-results
|
||||
|
||||
@@ -1 +1 @@
|
||||
FROM mysql:8.2.0
|
||||
FROM mysql:9.1.0
|
||||
|
||||
7
Makefile
7
Makefile
@@ -1,5 +1,6 @@
|
||||
HARDWARE = $(shell uname -m)
|
||||
SYSTEM_NAME = $(shell uname -s | tr '[:upper:]' '[:lower:]')
|
||||
ARCH = $(shell dpkg --print-architecture)
|
||||
SHFMT_VERSION = 3.0.2
|
||||
XUNIT_TO_GITHUB_VERSION = 0.3.0
|
||||
XUNIT_READER_VERSION = 0.1.0
|
||||
@@ -21,7 +22,11 @@ ifneq ($(shell shellcheck --version >/dev/null 2>&1 ; echo $$?),0)
|
||||
ifeq ($(SYSTEM_NAME),darwin)
|
||||
brew install shellcheck
|
||||
else
|
||||
sudo add-apt-repository 'deb http://archive.ubuntu.com/ubuntu jammy-backports main restricted universe multiverse'
|
||||
ifeq ($(ARCH),arm64)
|
||||
sudo add-apt-repository 'deb http://ports.ubuntu.com/ubuntu-ports jammy-backports main restricted universe multiverse'
|
||||
else
|
||||
sudo add-apt-repository 'deb http://archive.ubuntu.com/ubuntu jammy-backports main restricted universe multiverse'
|
||||
endif
|
||||
sudo rm -rf /var/lib/apt/lists/* && sudo apt-get clean
|
||||
sudo apt-get update -qq && sudo apt-get install -qq -y shellcheck
|
||||
endif
|
||||
|
||||
46
README.md
46
README.md
@@ -1,6 +1,6 @@
|
||||
# dokku mysql [](https://github.com/dokku/dokku-mysql/actions/workflows/ci.yml?query=branch%3Amaster) [](https://webchat.libera.chat/?channels=dokku)
|
||||
|
||||
Official mysql plugin for dokku. Currently defaults to installing [mysql 8.1.0](https://hub.docker.com/_/mysql/).
|
||||
Official mysql plugin for dokku. Currently defaults to installing [mysql 9.1.0](https://hub.docker.com/_/mysql/).
|
||||
|
||||
## Requirements
|
||||
|
||||
@@ -24,8 +24,10 @@ mysql:backup-deauth <service> # remove backup authenticatio
|
||||
mysql:backup-schedule <service> <schedule> <bucket-name> [--use-iam] # schedule a backup of the mysql service
|
||||
mysql:backup-schedule-cat <service> # cat the contents of the configured backup cronfile for the service
|
||||
mysql:backup-set-encryption <service> <passphrase> # set encryption for all future backups of mysql service
|
||||
mysql:backup-set-public-key-encryption <service> <public-key-id> # set GPG Public Key encryption for all future backups of mysql service
|
||||
mysql:backup-unschedule <service> # unschedule the backup of the mysql service
|
||||
mysql:backup-unset-encryption <service> # unset encryption for future backups of the mysql service
|
||||
mysql:backup-unset-public-key-encryption <service> # unset GPG Public Key encryption for future backups of the mysql service
|
||||
mysql:clone <service> <new-service> [--clone-flags...] # create container <new-name> then copy data from <name> into <new-name>
|
||||
mysql:connect <service> # connect to the service via the mysql connection tool
|
||||
mysql:create <service> [--create-flags...] # create a mysql service
|
||||
@@ -74,9 +76,9 @@ flags:
|
||||
- `-m|--memory MEMORY`: container memory limit in megabytes (default: unlimited)
|
||||
- `-N|--initial-network INITIAL_NETWORK`: the initial network to attach the service to
|
||||
- `-p|--password PASSWORD`: override the user-level service password
|
||||
- `-P|--post-create-network NETWORKS`: a comman-separated list of networks to attach the service container to after service creation
|
||||
- `-P|--post-create-network NETWORKS`: a comma-separated list of networks to attach the service container to after service creation
|
||||
- `-r|--root-password PASSWORD`: override the root-level service password
|
||||
- `-S|--post-start-network NETWORKS`: a comman-separated list of networks to attach the service container to after service start
|
||||
- `-S|--post-start-network NETWORKS`: a comma-separated list of networks to attach the service container to after service start
|
||||
- `-s|--shm-size SHM_SIZE`: override shared memory size for mysql docker container
|
||||
|
||||
Create a mysql service named lollipop:
|
||||
@@ -93,7 +95,7 @@ export MYSQL_IMAGE_VERSION="${PLUGIN_IMAGE_VERSION}"
|
||||
dokku mysql:create lollipop
|
||||
```
|
||||
|
||||
You can also specify custom environment variables to start the mysql service in semi-colon separated form.
|
||||
You can also specify custom environment variables to start the mysql service in semicolon-separated form.
|
||||
|
||||
```shell
|
||||
export MYSQL_CUSTOM_ENV="USER=alpha;HOST=beta"
|
||||
@@ -151,7 +153,7 @@ dokku mysql:info lollipop --version
|
||||
|
||||
```shell
|
||||
# usage
|
||||
dokku mysql:list
|
||||
dokku mysql:list
|
||||
```
|
||||
|
||||
List all services:
|
||||
@@ -457,9 +459,9 @@ flags:
|
||||
- `-i|--image IMAGE`: the image name to start the service with
|
||||
- `-I|--image-version IMAGE_VERSION`: the image version to start the service with
|
||||
- `-N|--initial-network INITIAL_NETWORK`: the initial network to attach the service to
|
||||
- `-P|--post-create-network NETWORKS`: a comman-separated list of networks to attach the service container to after service creation
|
||||
- `-P|--post-create-network NETWORKS`: a comma-separated list of networks to attach the service container to after service creation
|
||||
- `-R|--restart-apps "true"`: whether or not to force an app restart (default: false)
|
||||
- `-S|--post-start-network NETWORKS`: a comman-separated list of networks to attach the service container to after service start
|
||||
- `-S|--post-start-network NETWORKS`: a comma-separated list of networks to attach the service container to after service start
|
||||
- `-s|--shm-size SHM_SIZE`: override shared memory size for mysql docker container
|
||||
|
||||
You can upgrade an existing service to a new image or image-version:
|
||||
@@ -501,9 +503,9 @@ flags:
|
||||
- `-m|--memory MEMORY`: container memory limit in megabytes (default: unlimited)
|
||||
- `-N|--initial-network INITIAL_NETWORK`: the initial network to attach the service to
|
||||
- `-p|--password PASSWORD`: override the user-level service password
|
||||
- `-P|--post-create-network NETWORKS`: a comman-separated list of networks to attach the service container to after service creation
|
||||
- `-P|--post-create-network NETWORKS`: a comma-separated list of networks to attach the service container to after service creation
|
||||
- `-r|--root-password PASSWORD`: override the root-level service password
|
||||
- `-S|--post-start-network NETWORKS`: a comman-separated list of networks to attach the service container to after service start
|
||||
- `-S|--post-start-network NETWORKS`: a comma-separated list of networks to attach the service container to after service start
|
||||
- `-s|--shm-size SHM_SIZE`: override shared memory size for mysql docker container
|
||||
|
||||
You can clone an existing service to a new one:
|
||||
@@ -675,6 +677,19 @@ Set the GPG-compatible passphrase for encrypting backups for backups:
|
||||
dokku mysql:backup-set-encryption lollipop
|
||||
```
|
||||
|
||||
### set GPG Public Key encryption for all future backups of mysql service
|
||||
|
||||
```shell
|
||||
# usage
|
||||
dokku mysql:backup-set-public-key-encryption <service> <public-key-id>
|
||||
```
|
||||
|
||||
Set the `GPG` Public Key for encrypting backups:
|
||||
|
||||
```shell
|
||||
dokku mysql:backup-set-public-key-encryption lollipop
|
||||
```
|
||||
|
||||
### unset encryption for future backups of the mysql service
|
||||
|
||||
```shell
|
||||
@@ -688,6 +703,19 @@ Unset the `GPG` encryption passphrase for backups:
|
||||
dokku mysql:backup-unset-encryption lollipop
|
||||
```
|
||||
|
||||
### unset GPG Public Key encryption for future backups of the mysql service
|
||||
|
||||
```shell
|
||||
# usage
|
||||
dokku mysql:backup-unset-public-key-encryption <service>
|
||||
```
|
||||
|
||||
Unset the `GPG` Public Key encryption for backups:
|
||||
|
||||
```shell
|
||||
dokku mysql:backup-unset-public-key-encryption lollipop
|
||||
```
|
||||
|
||||
### schedule a backup of the mysql service
|
||||
|
||||
```shell
|
||||
|
||||
224
bin/generate
224
bin/generate
@@ -1,15 +1,30 @@
|
||||
#!/usr/bin/env python3
|
||||
# -*- coding: utf-8 -*-
|
||||
from __future__ import print_function
|
||||
|
||||
import os
|
||||
import re
|
||||
|
||||
|
||||
def compile(service, version, variable, alias, image, scheme, ports, sponsors, options, unimplemented, dokku_version):
|
||||
prefix = "\n\n".join([
|
||||
header(service),
|
||||
description(service, image, version),
|
||||
])
|
||||
def compile(
|
||||
service,
|
||||
version,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
sponsors,
|
||||
options,
|
||||
unimplemented,
|
||||
dokku_version,
|
||||
):
|
||||
prefix = "\n\n".join(
|
||||
[
|
||||
header(service),
|
||||
description(service, image, version),
|
||||
]
|
||||
)
|
||||
|
||||
if len(sponsors) > 0:
|
||||
prefix += "\n\n"
|
||||
@@ -21,8 +36,19 @@ def compile(service, version, variable, alias, image, scheme, ports, sponsors, o
|
||||
prefix,
|
||||
requirements_section(dokku_version),
|
||||
installation_section(service, dokku_version),
|
||||
commands_section(service, variable, alias, image, scheme, ports, unimplemented),
|
||||
usage_section(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
commands_section(
|
||||
service, variable, alias, image, scheme, ports, unimplemented
|
||||
),
|
||||
usage_section(
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
),
|
||||
]
|
||||
)
|
||||
.replace("\n\n\n\n\n", "\n")
|
||||
@@ -55,17 +81,25 @@ def sponsors_section(service, sponsors):
|
||||
if len(sponsors) == 0:
|
||||
return ""
|
||||
|
||||
sponsor_data = ["## Sponsors", "", f"The {service} plugin was generously sponsored by the following:", ""]
|
||||
sponsor_data = [
|
||||
"## Sponsors",
|
||||
"",
|
||||
f"The {service} plugin was generously sponsored by the following:",
|
||||
"",
|
||||
]
|
||||
sponsor_data.extend([f"- [{s}](https://github.com/{s})" for s in sponsors])
|
||||
|
||||
return "\n".join(
|
||||
sponsor_data
|
||||
)
|
||||
return "\n".join(sponsor_data)
|
||||
|
||||
|
||||
def requirements_section(dokku_version):
|
||||
return "\n".join(
|
||||
["## Requirements", "", f"- dokku {dokku_version}", "- docker 1.8.x",]
|
||||
[
|
||||
"## Requirements",
|
||||
"",
|
||||
f"- dokku {dokku_version}",
|
||||
"- docker 1.8.x",
|
||||
]
|
||||
)
|
||||
|
||||
|
||||
@@ -115,17 +149,31 @@ def commands_section(service, variable, alias, image, scheme, ports, unimplement
|
||||
return "\n".join(content)
|
||||
|
||||
|
||||
def usage_section(service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def usage_section(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
return "\n\n".join(
|
||||
[
|
||||
"## Usage",
|
||||
f"Help for any commands can be displayed by specifying the command as an argument to {service}:help. Plugin help output in conjunction with any files in the `docs/` folder is used to generate the plugin documentation. Please consult the `{service}:help` command for any undocumented commands.",
|
||||
usage_intro(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
usage_lifecycle(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
usage_automation(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
usage_data_management(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
usage_backup(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
usage_docker_pull(service, variable, alias, image, scheme, ports, options, unimplemented),
|
||||
usage_intro(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
),
|
||||
usage_lifecycle(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
),
|
||||
usage_automation(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
),
|
||||
usage_data_management(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
),
|
||||
usage_backup(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
),
|
||||
usage_docker_pull(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
),
|
||||
]
|
||||
)
|
||||
|
||||
@@ -135,11 +183,22 @@ def usage_intro(service, variable, alias, image, scheme, ports, options, unimple
|
||||
content = ["### Basic Usage"]
|
||||
|
||||
return fetch_commands_content(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented, commands, content
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
commands,
|
||||
content,
|
||||
)
|
||||
|
||||
|
||||
def usage_lifecycle(service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def usage_lifecycle(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
commands = [
|
||||
"connect",
|
||||
"enter",
|
||||
@@ -160,11 +219,22 @@ def usage_lifecycle(service, variable, alias, image, scheme, ports, options, uni
|
||||
]
|
||||
|
||||
return fetch_commands_content(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented, commands, content
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
commands,
|
||||
content,
|
||||
)
|
||||
|
||||
|
||||
def usage_automation(service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def usage_automation(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
commands = ["app-links", "clone", "exists", "linked", "links"]
|
||||
content = [
|
||||
"### Service Automation",
|
||||
@@ -174,11 +244,22 @@ def usage_automation(service, variable, alias, image, scheme, ports, options, un
|
||||
]
|
||||
|
||||
return fetch_commands_content(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented, commands, content
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
commands,
|
||||
content,
|
||||
)
|
||||
|
||||
|
||||
def usage_data_management(service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def usage_data_management(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
commands = ["import", "export"]
|
||||
content = [
|
||||
"### Data Management",
|
||||
@@ -188,17 +269,30 @@ def usage_data_management(service, variable, alias, image, scheme, ports, option
|
||||
]
|
||||
|
||||
return fetch_commands_content(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented, commands, content
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
commands,
|
||||
content,
|
||||
)
|
||||
|
||||
|
||||
def usage_backup(service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def usage_backup(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
commands = [
|
||||
"backup-auth",
|
||||
"backup-deauth",
|
||||
"backup",
|
||||
"backup-set-encryption",
|
||||
"backup-set-public-key-encryption",
|
||||
"backup-unset-encryption",
|
||||
"backup-unset-public-key-encryption",
|
||||
"backup-schedule",
|
||||
"backup-schedule-cat",
|
||||
"backup-unschedule",
|
||||
@@ -215,11 +309,22 @@ def usage_backup(service, variable, alias, image, scheme, ports, options, unimpl
|
||||
]
|
||||
|
||||
return fetch_commands_content(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented, commands, content
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
commands,
|
||||
content,
|
||||
)
|
||||
|
||||
|
||||
def usage_docker_pull(service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def usage_docker_pull(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
service_prefix = service.upper()
|
||||
return "\n".join(
|
||||
[
|
||||
@@ -233,11 +338,30 @@ def usage_docker_pull(service, variable, alias, image, scheme, ports, options, u
|
||||
|
||||
|
||||
def fetch_commands_content(
|
||||
service, variable, alias, image, scheme, ports, options, unimplemented, commands, content
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
commands,
|
||||
content,
|
||||
):
|
||||
i = 0
|
||||
for command in commands:
|
||||
output = command_help(command, service, variable, alias, image, scheme, ports, options, unimplemented)
|
||||
output = command_help(
|
||||
command,
|
||||
service,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
options,
|
||||
unimplemented,
|
||||
)
|
||||
if output == "":
|
||||
continue
|
||||
content.append(output)
|
||||
@@ -275,7 +399,9 @@ def parse_args(line):
|
||||
return " ".join(arguments)
|
||||
|
||||
|
||||
def command_help(command, service, variable, alias, image, scheme, ports, options, unimplemented):
|
||||
def command_help(
|
||||
command, service, variable, alias, image, scheme, ports, options, unimplemented
|
||||
):
|
||||
if command in unimplemented:
|
||||
return ""
|
||||
|
||||
@@ -285,7 +411,7 @@ def command_help(command, service, variable, alias, image, scheme, ports, option
|
||||
"",
|
||||
"```shell",
|
||||
"# usage",
|
||||
f"dokku {service}:{command} {data['arguments_string']}",
|
||||
f"dokku {service}:{command} {data['arguments_string']}".strip(),
|
||||
"```",
|
||||
]
|
||||
|
||||
@@ -442,11 +568,11 @@ def process_sentence(sentence_lines):
|
||||
parts = []
|
||||
for word in sentence.strip().split(" "):
|
||||
if word.isupper() and len(word) > 1:
|
||||
for ending in [':', '.']:
|
||||
for ending in [":", "."]:
|
||||
if word.endswith(ending):
|
||||
word = '`{0}`{1}'.format(word[:-1], ending)
|
||||
word = "`{0}`{1}".format(word[:-1], ending)
|
||||
else:
|
||||
word = '`{0}`'.format(word)
|
||||
word = "`{0}`".format(word)
|
||||
parts.append(word)
|
||||
text.append(" ".join(parts))
|
||||
|
||||
@@ -491,10 +617,10 @@ def main():
|
||||
|
||||
with open("Dockerfile") as f:
|
||||
for line in f.readlines():
|
||||
if "FROM " in line:
|
||||
image, version = line.split(" ")[1].split(":")
|
||||
image = image.strip()
|
||||
version = version.strip()
|
||||
if "FROM " in line:
|
||||
image, version = line.split(" ")[1].split(":")
|
||||
image = image.strip()
|
||||
version = version.strip()
|
||||
|
||||
with open("config") as f:
|
||||
for line in f.readlines():
|
||||
@@ -524,10 +650,22 @@ def main():
|
||||
with open("plugin.toml") as f:
|
||||
for line in f.readlines():
|
||||
if line.startswith("sponsors"):
|
||||
sponsors = re.search("\[([\"\w\s,_-]+)\]", line).group(1)
|
||||
sponsors = [s.strip("\"") for s in sponsors.split(",")]
|
||||
sponsors = re.search('\[(["\w\s,_-]+)\]', line).group(1)
|
||||
sponsors = [s.strip('"') for s in sponsors.split(",")]
|
||||
|
||||
text = compile(service, version, variable, alias, image, scheme, ports, sponsors, options, unimplemented, "0.19.x+")
|
||||
text = compile(
|
||||
service,
|
||||
version,
|
||||
variable,
|
||||
alias,
|
||||
image,
|
||||
scheme,
|
||||
ports,
|
||||
sponsors,
|
||||
options,
|
||||
unimplemented,
|
||||
"0.19.x+",
|
||||
)
|
||||
|
||||
base_path = os.path.dirname(os.path.dirname(os.path.realpath(__file__)))
|
||||
readme_file = os.path.join(base_path, "README.md")
|
||||
|
||||
@@ -308,6 +308,10 @@ service_backup() {
|
||||
BACKUP_PARAMETERS="$BACKUP_PARAMETERS -e ENCRYPTION_KEY=$(cat "$BACKUP_ENCRYPTION_CONFIG_ROOT/ENCRYPTION_KEY")"
|
||||
fi
|
||||
|
||||
if [[ -f "$BACKUP_ENCRYPTION_CONFIG_ROOT/ENCRYPT_WITH_PUBLIC_KEY_ID" ]]; then
|
||||
BACKUP_PARAMETERS="$BACKUP_PARAMETERS -e ENCRYPT_WITH_PUBLIC_KEY_ID=$(cat "$BACKUP_ENCRYPTION_CONFIG_ROOT/ENCRYPT_WITH_PUBLIC_KEY_ID")"
|
||||
fi
|
||||
|
||||
# shellcheck disable=SC2086
|
||||
"$DOCKER_BIN" container run --rm $BACKUP_PARAMETERS "$PLUGIN_S3BACKUP_IMAGE"
|
||||
}
|
||||
@@ -433,6 +437,16 @@ service_backup_set_encryption() {
|
||||
echo "$ENCRYPTION_KEY" >"${SERVICE_BACKUP_ENCRYPTION_ROOT}/ENCRYPTION_KEY"
|
||||
}
|
||||
|
||||
service_backup_set_public_key_encryption() {
|
||||
declare desc="set up backup GPG Public Key encryption"
|
||||
declare SERVICE="$1" ENCRYPT_WITH_PUBLIC_KEY_ID="$2"
|
||||
local SERVICE_ROOT="${PLUGIN_DATA_ROOT}/${SERVICE}"
|
||||
local SERVICE_BACKUP_ENCRYPTION_ROOT="${SERVICE_ROOT}/backup-encryption/"
|
||||
|
||||
mkdir "$SERVICE_BACKUP_ENCRYPTION_ROOT"
|
||||
echo "$ENCRYPT_WITH_PUBLIC_KEY_ID" >"${SERVICE_BACKUP_ENCRYPTION_ROOT}/ENCRYPT_WITH_PUBLIC_KEY_ID"
|
||||
}
|
||||
|
||||
service_backup_unschedule() {
|
||||
declare desc="unschedule the backup of the service"
|
||||
declare SERVICE="$1"
|
||||
@@ -450,6 +464,15 @@ service_backup_unset_encryption() {
|
||||
rm -rf "$SERVICE_BACKUP_ENCRYPTION_ROOT"
|
||||
}
|
||||
|
||||
service_backup_unset_encryption() {
|
||||
declare desc="remove backup encryption"
|
||||
declare SERVICE="$1"
|
||||
local SERVICE_ROOT="${PLUGIN_DATA_ROOT}/${SERVICE}"
|
||||
local SERVICE_BACKUP_ENCRYPTION_ROOT="${SERVICE_ROOT}/backup-encryption/"
|
||||
|
||||
rm -rf "$SERVICE_BACKUP_ENCRYPTION_ROOT"
|
||||
}
|
||||
|
||||
service_container_rm() {
|
||||
declare desc="stop a service and remove the running container"
|
||||
declare SERVICE="$1"
|
||||
|
||||
8
config
8
config
@@ -28,9 +28,9 @@ if [[ -n $DOKKU_API_VERSION ]]; then
|
||||
export PLUGIN_BASE_PATH="$PLUGIN_ENABLED_PATH"
|
||||
fi
|
||||
|
||||
export PLUGIN_BUSYBOX_IMAGE="busybox:1.34.1-uclibc"
|
||||
export PLUGIN_AMBASSADOR_IMAGE="dokku/ambassador:0.5.0"
|
||||
export PLUGIN_S3BACKUP_IMAGE="dokku/s3backup:0.14.0"
|
||||
export PLUGIN_WAIT_IMAGE="dokku/wait:0.6.0"
|
||||
export PLUGIN_BUSYBOX_IMAGE=${PLUGIN_BUSYBOX_IMAGE:=busybox:1.37.0-uclibc}
|
||||
export PLUGIN_AMBASSADOR_IMAGE=${PLUGIN_AMBASSADOR_IMAGE:=dokku/ambassador:0.8.2}
|
||||
export PLUGIN_S3BACKUP_IMAGE=${PLUGIN_S3BACKUP_IMAGE:=dokku/s3backup:0.18.0}
|
||||
export PLUGIN_WAIT_IMAGE=${PLUGIN_WAIT_IMAGE:=dokku/wait:0.9.3}
|
||||
|
||||
export MYSQL_CONFIG_OPTIONS=${MYSQL_CONFIG_OPTIONS:=""}
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
[plugin]
|
||||
description = "dokku mysql service plugin"
|
||||
version = "1.37.0"
|
||||
version = "1.41.0"
|
||||
[plugin.config]
|
||||
|
||||
25
subcommands/backup-set-public-key-encryption
Executable file
25
subcommands/backup-set-public-key-encryption
Executable file
@@ -0,0 +1,25 @@
|
||||
#!/usr/bin/env bash
|
||||
source "$(dirname "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)")/config"
|
||||
set -eo pipefail
|
||||
[[ $DOKKU_TRACE ]] && set -x
|
||||
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
|
||||
source "$(dirname "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)")/functions"
|
||||
|
||||
service-backup-set-public-key-encryption-cmd() {
|
||||
#E set the GPG Public Key for encrypting backups
|
||||
#E dokku $PLUGIN_COMMAND_PREFIX:backup-set-public-key-encryption lollipop
|
||||
#A service, service to run command against
|
||||
#A public-key-id, a GPG Public Key ID (or fingerprint) to use for encryption. Must be uploaded to the GPG keyserver beforehand.
|
||||
declare desc="set GPG Public Key encryption for all future backups of $PLUGIN_SERVICE service"
|
||||
local cmd="$PLUGIN_COMMAND_PREFIX:backup-set-public-key-encryption" argv=("$@")
|
||||
[[ ${argv[0]} == "$cmd" ]] && shift 1
|
||||
declare SERVICE="$1" PUBLIC_KEY_ID="$2"
|
||||
is_implemented_command "$cmd" || dokku_log_fail "Not yet implemented"
|
||||
|
||||
[[ -z "$SERVICE" ]] && dokku_log_fail "Please specify a valid name for the service"
|
||||
[[ -z "$PUBLIC_KEY_ID" ]] && dokku_log_fail "Please specify a valid GPG Public Key ID (or fingerprint)"
|
||||
verify_service_name "$SERVICE"
|
||||
service_backup_set_public_key_encryption "$SERVICE" "$PUBLIC_KEY_ID"
|
||||
}
|
||||
|
||||
service-backup-set-public-key-encryption-cmd "$@"
|
||||
23
subcommands/backup-unset-public-key-encryption
Executable file
23
subcommands/backup-unset-public-key-encryption
Executable file
@@ -0,0 +1,23 @@
|
||||
#!/usr/bin/env bash
|
||||
source "$(dirname "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)")/config"
|
||||
set -eo pipefail
|
||||
[[ $DOKKU_TRACE ]] && set -x
|
||||
source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
|
||||
source "$(dirname "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)")/functions"
|
||||
|
||||
service-backup-unset-public-key-encryption-cmd() {
|
||||
#E unset the GPG Public Key encryption for backups
|
||||
#E dokku $PLUGIN_COMMAND_PREFIX:backup-unset-public-key-encryption lollipop
|
||||
#A service, service to run command against
|
||||
declare desc="unset GPG Public Key encryption for future backups of the $PLUGIN_SERVICE service"
|
||||
local cmd="$PLUGIN_COMMAND_PREFIX:backup-unset-public-key-encryption" argv=("$@")
|
||||
[[ ${argv[0]} == "$cmd" ]] && shift 1
|
||||
declare SERVICE="$1"
|
||||
is_implemented_command "$cmd" || dokku_log_fail "Not yet implemented" # TODO: [22.03.2024 by Mykola]
|
||||
|
||||
[[ -z "$SERVICE" ]] && dokku_log_fail "Please specify a valid name for the service"
|
||||
verify_service_name "$SERVICE"
|
||||
service_backup_unset_public_key_encryption "$SERVICE" # TODO: [22.03.2024 by Mykola]
|
||||
}
|
||||
|
||||
service-backup-unset-encryption-cmd "$@"
|
||||
@@ -17,9 +17,9 @@ service-clone-cmd() {
|
||||
#F -m|--memory MEMORY, container memory limit in megabytes (default: unlimited)
|
||||
#F -N|--initial-network INITIAL_NETWORK, the initial network to attach the service to
|
||||
#F -p|--password PASSWORD, override the user-level service password
|
||||
#F -P|--post-create-network NETWORKS, a comman-separated list of networks to attach the service container to after service creation
|
||||
#F -P|--post-create-network NETWORKS, a comma-separated list of networks to attach the service container to after service creation
|
||||
#F -r|--root-password PASSWORD, override the root-level service password
|
||||
#F -S|--post-start-network NETWORKS, a comman-separated list of networks to attach the service container to after service start
|
||||
#F -S|--post-start-network NETWORKS, a comma-separated list of networks to attach the service container to after service start
|
||||
#F -s|--shm-size SHM_SIZE, override shared memory size for $PLUGIN_COMMAND_PREFIX docker container
|
||||
declare desc="create container <new-name> then copy data from <name> into <new-name>"
|
||||
local cmd="$PLUGIN_COMMAND_PREFIX:clone" argv=("$@")
|
||||
|
||||
@@ -14,7 +14,7 @@ service-create-cmd() {
|
||||
#E export ${PLUGIN_VARIABLE}_IMAGE_VERSION="${PLUGIN_IMAGE_VERSION}"
|
||||
#E dokku $PLUGIN_COMMAND_PREFIX:create lollipop
|
||||
#E you can also specify custom environment variables to start
|
||||
#E the ${PLUGIN_COMMAND_PREFIX} service in semi-colon separated form.
|
||||
#E the ${PLUGIN_COMMAND_PREFIX} service in semicolon-separated form.
|
||||
#E export ${PLUGIN_VARIABLE}_CUSTOM_ENV="USER=alpha;HOST=beta"
|
||||
#E dokku $PLUGIN_COMMAND_PREFIX:create lollipop
|
||||
#A service, service to run command against
|
||||
@@ -25,9 +25,9 @@ service-create-cmd() {
|
||||
#F -m|--memory MEMORY, container memory limit in megabytes (default: unlimited)
|
||||
#F -N|--initial-network INITIAL_NETWORK, the initial network to attach the service to
|
||||
#F -p|--password PASSWORD, override the user-level service password
|
||||
#F -P|--post-create-network NETWORKS, a comman-separated list of networks to attach the service container to after service creation
|
||||
#F -P|--post-create-network NETWORKS, a comma-separated list of networks to attach the service container to after service creation
|
||||
#F -r|--root-password PASSWORD, override the root-level service password
|
||||
#F -S|--post-start-network NETWORKS, a comman-separated list of networks to attach the service container to after service start
|
||||
#F -S|--post-start-network NETWORKS, a comma-separated list of networks to attach the service container to after service start
|
||||
#F -s|--shm-size SHM_SIZE, override shared memory size for $PLUGIN_COMMAND_PREFIX docker container
|
||||
declare desc="create a $PLUGIN_SERVICE service"
|
||||
local cmd="$PLUGIN_COMMAND_PREFIX:create" argv=("$@")
|
||||
|
||||
@@ -15,9 +15,9 @@ service-upgrade-cmd() {
|
||||
#F -i|--image IMAGE, the image name to start the service with
|
||||
#F -I|--image-version IMAGE_VERSION, the image version to start the service with
|
||||
#F -N|--initial-network INITIAL_NETWORK, the initial network to attach the service to
|
||||
#F -P|--post-create-network NETWORKS, a comman-separated list of networks to attach the service container to after service creation
|
||||
#F -P|--post-create-network NETWORKS, a comma-separated list of networks to attach the service container to after service creation
|
||||
#F -R|--restart-apps "true", whether or not to force an app restart (default: false)
|
||||
#F -S|--post-start-network NETWORKS, a comman-separated list of networks to attach the service container to after service start
|
||||
#F -S|--post-start-network NETWORKS, a comma-separated list of networks to attach the service container to after service start
|
||||
#F -s|--shm-size SHM_SIZE, override shared memory size for $PLUGIN_COMMAND_PREFIX docker container
|
||||
declare desc="upgrade service <service> to the specified versions"
|
||||
local cmd="$PLUGIN_COMMAND_PREFIX:upgrade" argv=("$@")
|
||||
|
||||
@@ -48,7 +48,7 @@ teardown() {
|
||||
assert_output_contains bridge 0
|
||||
assert_output_contains custom-network
|
||||
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.ls -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.Aliases}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.ls -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.DNSNames}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
echo "output: $output"
|
||||
echo "status: $status"
|
||||
assert_success
|
||||
@@ -120,7 +120,7 @@ teardown() {
|
||||
assert_output_contains custom-network
|
||||
assert_output_contains bridge
|
||||
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.ls -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.Aliases}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.ls -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.DNSNames}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
echo "output: $output"
|
||||
echo "status: $status"
|
||||
assert_success
|
||||
@@ -192,7 +192,7 @@ teardown() {
|
||||
assert_output_contains bridge
|
||||
assert_output_contains custom-network
|
||||
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.ls -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.Aliases}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.ls -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.DNSNames}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
echo "output: $output"
|
||||
echo "status: $status"
|
||||
assert_success
|
||||
@@ -258,7 +258,7 @@ teardown() {
|
||||
assert_output_contains bridge
|
||||
assert_output_contains custom-network
|
||||
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.lsa -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.Aliases}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
run docker inspect dokku.$PLUGIN_COMMAND_PREFIX.lsa -f '{{range $net,$v := .NetworkSettings.Networks}}{{range $k,$alias := $v.DNSNames}}{{printf "alias:%s\n" $alias}}{{end}}{{end}}'
|
||||
echo "output: $output"
|
||||
echo "status: $status"
|
||||
assert_success
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
# SC1090 - Can't follow non-constant source. Use a directive to specify location - https://github.com/koalaman/shellcheck/wiki/SC1090
|
||||
# SC1091 - Not following - <https://github.com/koalaman/shellcheck/wiki/SC1091>
|
||||
# SC2034 - Variable appears unused. Verify it or export it - https://github.com/koalaman/shellcheck/wiki/SC2034
|
||||
# SC2155 - Declare and assign separately to avoid masking return values - https://github.com/koalaman/shellcheck/wiki/SC2155
|
||||
# SC2206 - Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a - https://github.com/koalaman/shellcheck/wiki/SC2206
|
||||
|
||||
Reference in New Issue
Block a user