155 lines
6.3 KiB
Bash
Executable File
155 lines
6.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
|
|
umask 027
|
|
|
|
die() {
|
|
printf '[kaidi-baota] ERROR: %s\n' "$1" >&2
|
|
exit 1
|
|
}
|
|
|
|
SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
|
|
RELEASE_ROOT=$(cd "$SCRIPT_DIR/.." && pwd -P)
|
|
APP_JAR="$RELEASE_ROOT/app.jar"
|
|
PUBLIC_INDEX="$RELEASE_ROOT/public/index.html"
|
|
VERSION_FILE="$RELEASE_ROOT/VERSION"
|
|
CONFIG_FILE=${KAIDI_CONFIG_FILE:-/etc/kaidi/kaidi.env}
|
|
RUNTIME_ENV_FILE=${KAIDI_RUNTIME_ENV_FILE:-/var/lib/kaidi/setup/application.env}
|
|
|
|
decode_env_value() {
|
|
local raw=$1 result='' char next index=0 length
|
|
if [[ "$raw" == \"*\" && ${#raw} -ge 2 ]]; then
|
|
raw=${raw:1:${#raw}-2}
|
|
length=${#raw}
|
|
while [ "$index" -lt "$length" ]; do
|
|
char=${raw:index:1}
|
|
if [ "$char" = "\\" ] && [ $((index + 1)) -lt "$length" ]; then
|
|
next=${raw:index+1:1}
|
|
if [ "$next" = "\\" ] || [ "$next" = '"' ]; then
|
|
result+="$next"
|
|
index=$((index + 2))
|
|
continue
|
|
fi
|
|
fi
|
|
result+="$char"
|
|
index=$((index + 1))
|
|
done
|
|
printf '%s' "$result"
|
|
elif [[ "$raw" == \'*\' && ${#raw} -ge 2 ]]; then
|
|
printf '%s' "${raw:1:${#raw}-2}"
|
|
else
|
|
printf '%s' "$raw"
|
|
fi
|
|
}
|
|
|
|
is_managed_env_name() {
|
|
case "$1" in
|
|
SPRING_PROFILES_ACTIVE|SERVER_ADDRESS|SERVER_PORT|SESSION_COOKIE_SECURE|\
|
|
DB_URL|DB_USERNAME|DB_PASSWORD|FIELD_ENCRYPTION_KEY|\
|
|
FILE_STORAGE_ROOT|FILE_STORAGE_TEMP|FILE_SCANNER_ENABLED|FILE_SCANNER_HOST|FILE_SCANNER_PORT|\
|
|
FINANCE_BOOTSTRAP_ENABLED|FINANCE_BOOTSTRAP_PASSWORD|FINANCE_SETUP_ENABLED|\
|
|
FINANCE_SETUP_TOKEN_SHA256|FINANCE_SETUP_ENV_FILE|FINANCE_SETUP_MARKER_FILE|\
|
|
FINANCE_SETUP_RESTART_AFTER_COMPLETE|FINANCE_UPDATE_ENABLED|\
|
|
UPDATE_RELEASE_BASE_URL|UPDATE_RELEASE_API_URL|UPDATE_RELEASE_TOKEN|\
|
|
UPDATE_REQUEST_FILE|UPDATE_STATUS_FILE|UPDATE_CURRENT_VERSION_FILE|APP_VERSION|KAIDI_PID_FILE|KAIDI_JAVA_BIN)
|
|
return 0
|
|
;;
|
|
*) return 1 ;;
|
|
esac
|
|
}
|
|
|
|
load_env_file() {
|
|
local file=$1 line name raw value size
|
|
[ -e "$file" ] || return 0
|
|
[ -f "$file" ] && [ ! -L "$file" ] || die "Configuration file is not a regular file: $file"
|
|
[ -r "$file" ] || die "Startup user cannot read configuration file: $file"
|
|
size=$(wc -c < "$file" | tr -d '[:space:]')
|
|
[ "$size" -le 65536 ] || die "Configuration file is too large: $file"
|
|
while IFS= read -r line || [ -n "$line" ]; do
|
|
case "$line" in ''|'#'*) continue ;; esac
|
|
[[ "$line" =~ ^([A-Za-z_][A-Za-z0-9_]*)=(.*)$ ]] \
|
|
|| die "Configuration file contains an invalid line: $file"
|
|
name=${BASH_REMATCH[1]}
|
|
raw=${BASH_REMATCH[2]}
|
|
is_managed_env_name "$name" || continue
|
|
[ -n "${!name:-}" ] && continue
|
|
value=$(decode_env_value "$raw")
|
|
printf -v "$name" '%s' "$value"
|
|
export "${name?}"
|
|
done < "$file"
|
|
}
|
|
|
|
[ -s "$APP_JAR" ] || die "app.jar is missing from $RELEASE_ROOT"
|
|
[ -s "$PUBLIC_INDEX" ] || die "public/index.html is missing from $RELEASE_ROOT"
|
|
[ -s "$VERSION_FILE" ] || die "VERSION is missing from $RELEASE_ROOT"
|
|
|
|
# The setup-generated runtime file has precedence over the base file. Non-empty
|
|
# variables supplied by Baota have precedence over both; empty panel fields do not
|
|
# mask the protected configuration written by the setup wizard. The systemd unit
|
|
# loads both files itself as root, then sets KAIDI_ENV_PRELOADED so the service
|
|
# user never needs traversal permission for /etc/kaidi (which is intentionally
|
|
# root-only).
|
|
if [ "${KAIDI_ENV_PRELOADED:-false}" != true ]; then
|
|
load_env_file "$RUNTIME_ENV_FILE"
|
|
load_env_file "$CONFIG_FILE"
|
|
fi
|
|
|
|
JAVA_BIN=${KAIDI_JAVA_BIN:-}
|
|
if [ -z "$JAVA_BIN" ] && [ -n "${JAVA_HOME:-}" ]; then
|
|
JAVA_BIN="$JAVA_HOME/bin/java"
|
|
fi
|
|
if [ -z "$JAVA_BIN" ] && [ -x /opt/kaidi/runtime/java/bin/java ]; then
|
|
# Compatibility for installations created before external Java paths were persisted.
|
|
JAVA_BIN=/opt/kaidi/runtime/java/bin/java
|
|
fi
|
|
if [ -z "$JAVA_BIN" ]; then
|
|
JAVA_BIN=$(command -v java 2>/dev/null || true)
|
|
fi
|
|
[ -n "$JAVA_BIN" ] || die "Java 17 or newer was not found"
|
|
if [[ "$JAVA_BIN" == */* ]]; then
|
|
[ -x "$JAVA_BIN" ] || die "Java executable is not available at $JAVA_BIN"
|
|
else
|
|
command -v "$JAVA_BIN" >/dev/null 2>&1 || die "Java executable $JAVA_BIN is not available"
|
|
fi
|
|
JAVA_VERSION=$("$JAVA_BIN" -version 2>&1 | sed -n 's/.*version "\([0-9][0-9]*\).*/\1/p' | head -n 1)
|
|
[[ "$JAVA_VERSION" =~ ^[0-9]+$ ]] && [ "$JAVA_VERSION" -ge 17 ] \
|
|
|| die "Java 17 or newer is required"
|
|
|
|
export SPRING_PROFILES_ACTIVE=${SPRING_PROFILES_ACTIVE:-production}
|
|
export SERVER_ADDRESS=${SERVER_ADDRESS:-127.0.0.1}
|
|
export SERVER_PORT=${SERVER_PORT:-18080}
|
|
export FINANCE_SETUP_ENABLED=${FINANCE_SETUP_ENABLED:-false}
|
|
export FINANCE_BOOTSTRAP_ENABLED=${FINANCE_BOOTSTRAP_ENABLED:-false}
|
|
export FINANCE_UPDATE_ENABLED=${FINANCE_UPDATE_ENABLED:-true}
|
|
export FILE_SCANNER_ENABLED=${FILE_SCANNER_ENABLED:-false}
|
|
export FINANCE_STATIC_LOCATIONS=${FINANCE_STATIC_LOCATIONS:-file:$RELEASE_ROOT/public/}
|
|
export UPDATE_CURRENT_VERSION_FILE=${UPDATE_CURRENT_VERSION_FILE:-$VERSION_FILE}
|
|
export APP_VERSION=${APP_VERSION:-$(tr -d '\r\n' < "$VERSION_FILE")}
|
|
export KAIDI_PID_FILE=${KAIDI_PID_FILE:-/var/lib/kaidi/kaidi.pid}
|
|
|
|
if [ "$FINANCE_SETUP_ENABLED" != true ]; then
|
|
for name in DB_URL DB_USERNAME DB_PASSWORD FIELD_ENCRYPTION_KEY FILE_STORAGE_ROOT FILE_STORAGE_TEMP; do
|
|
[ -n "${!name:-}" ] || die "$name is missing from the protected Kaidi configuration"
|
|
done
|
|
for directory in "$FILE_STORAGE_ROOT" "$FILE_STORAGE_TEMP"; do
|
|
[ -d "$directory" ] || die "Storage directory $directory does not exist"
|
|
[ -w "$directory" ] || die "Startup user cannot write storage directory $directory"
|
|
done
|
|
fi
|
|
|
|
case "$KAIDI_PID_FILE" in /*) ;; *) die "KAIDI_PID_FILE must be an absolute path" ;; esac
|
|
[ -d "$(dirname "$KAIDI_PID_FILE")" ] || die "PID directory does not exist"
|
|
[ -w "$(dirname "$KAIDI_PID_FILE")" ] || die "Startup user cannot write the PID directory"
|
|
[ ! -L "$KAIDI_PID_FILE" ] || die "PID file must not be a symbolic link"
|
|
PID_START_TIME=$(awk '{print $22}' "/proc/$$/stat" 2>/dev/null || true)
|
|
[[ "$PID_START_TIME" =~ ^[0-9]+$ ]] || die "Process start time could not be read from /proc"
|
|
PID_TEMP="${KAIDI_PID_FILE}.next.$$"
|
|
printf '%s %s\n' "$$" "$PID_START_TIME" > "$PID_TEMP"
|
|
chmod 0640 "$PID_TEMP"
|
|
mv -f "$PID_TEMP" "$KAIDI_PID_FILE"
|
|
|
|
cd "$RELEASE_ROOT"
|
|
exec "$JAVA_BIN" -XX:MaxRAMPercentage=70 -Dfile.encoding=UTF-8 \
|
|
"-Dkaidi.release.path=$RELEASE_ROOT" "-Dkaidi.release.version=$APP_VERSION" \
|
|
-jar "$APP_JAR"
|