* Introduce a test to make sure the script is being run by the correct user. * Do all testing before locking. * Drop disk caches before starting work. * Check for files with the wrong owner/group before doing a sync. * Run the mirror script with the configured group as primary.
98 lines
3.3 KiB
Bash
Executable file
98 lines
3.3 KiB
Bash
Executable file
#!/bin/bash
|
|
# Wrapper around /opt/bin/sbosrcarch to keep a log of the session, and email it.
|
|
|
|
# Configuration.
|
|
COMMAND="/opt/bin/sbosrcarch"
|
|
DEPOSITORY="/data/depository/sbosrcarch"
|
|
SBOSRCARCH_USER="sbosrcarch"
|
|
DEPOSITORY_GROUP="depository"
|
|
LOGSDIR="/var/log/duplication/sbosrcarch/$(printf "%(%Y/%m)T")"
|
|
LOGFILE="$(printf "%(%Y%m%d-%H%M%S)T")-$$"
|
|
# Where from/to to send emails. Comment for no emailing.
|
|
EMAIL_FROM="\"Server: ${HOSTNAME%%.*}\" <noreply@slackware.uk.net>"
|
|
EMAIL_TO=("Systems' Administrator <sysadmin@slackware.uk>")
|
|
EMAIL_CC=("Urchlay <urchlay@slackware.uk>")
|
|
|
|
# Functions
|
|
notify() {
|
|
[[ -n "$EMAIL_FROM" ]] && (( "${#EMAIL_TO[@]}" != 0 )) && {
|
|
printf "%s: %s\\n%s: %s\\n%s:\\n%s\\n" "Exit code" "$ERR" "Logfile" "$LOGSDIR/$LOGFILE.xz" "Output" "$(<"$LOGSDIR/$LOGFILE")" | mail -r "$EMAIL_FROM" -s "SboSrcArch $1" "$(for i in $(seq -s ' ' 0 $(( ${#EMAIL_CC[@]} -1 ))); do echo ${EMAIL_CC[$i]:+-c "${EMAIL_CC[$i]}"}; done)" "${EMAIL_TO[@]}" >/dev/null 2>&1 || {
|
|
printf "%s: %s\\n" "${0##*/}" "mail command failed" >&2
|
|
return 1
|
|
}
|
|
}
|
|
|
|
return 0
|
|
}
|
|
|
|
# Logs are only for root.
|
|
umask 027
|
|
|
|
# Only run for the configured sbosrcarch user.
|
|
[[ "$(whoami)" != "$SBOSRCARCH_USER" ]] && {
|
|
printf "%s: %s\\n" "${0##*/}" "must be run by the '$SBOSRCARCH_USER' user - use su to run manually" >&2
|
|
exit 1
|
|
}
|
|
|
|
# Make sure the logs directory exists.
|
|
# shellcheck disable=SC2174
|
|
mkdir -p -m 750 "$LOGSDIR" 2>/dev/null || {
|
|
printf "%s: %s\\n" "${0##*/}" "Failed to create logs directory '$LOGSDIR'" >&2
|
|
exit 1
|
|
}
|
|
|
|
# Make sure the command to do the work is runnable.
|
|
[[ ! -x "$COMMAND" ]] && {
|
|
printf "%s: %s\\n" "${0##*/}" "'$COMMAND' is not executable" >&2
|
|
exit 1
|
|
}
|
|
|
|
# Only allow one copy of the script to run at any time.
|
|
# shellcheck disable=SC2154
|
|
if [[ "$FLOCK" != "$0" ]]; then
|
|
# shellcheck disable=SC2093
|
|
exec env FLOCK="$0" flock -E 10 -e -n "$0" "$0" "$@"
|
|
ERR="$?"
|
|
if (( ERR == 10 )); then
|
|
# File is locked, exit now.
|
|
exit 0
|
|
elif (( ERR > 0 )); then
|
|
printf "%s: %s\\n" "${0##*/}" "flock execution error" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# Drop the caches as sometimes old user/groups are cached.
|
|
sudo /opt/sbin/drop-caches
|
|
|
|
# Make sure there's no errant ownerships.
|
|
#WRONG_PERMS="$(find "$DEPOSITORY" \( \! -user "$SBOSRCARCH_USER" -o \! -group "$DEPOSITORY_GROUP" \) -a \! -path "$DEPOSITORY" -printf "%u:%g\t%P\n")"
|
|
if [[ -n "$WRONG_PERMS" ]]; then
|
|
printf "%s\\n" "This run has been aborted!" >"$LOGSDIR/$LOGFILE"
|
|
printf "%s\\n" "The following files in have errant permissions:" >>"$LOGSDIR/$LOGFILE"
|
|
printf "%s\\n" "$WRONG_PERMS" >>"$LOGSDIR/$LOGFILE"
|
|
ERR=-1
|
|
else
|
|
# Do the sbosrcarch work.
|
|
sg "$DEPOSITORY_GROUP" -c "$COMMAND ${1:-update}" >"$LOGSDIR/$LOGFILE" 2>&1
|
|
ERR="$?"
|
|
printf "\\n" >>"$LOGSDIR/$LOGFILE"
|
|
sg "$DEPOSITORY_GROUP" -c "$COMMAND status" >>"$LOGSDIR/$LOGFILE" 2>&1
|
|
(( ERR += $? ))
|
|
fi
|
|
|
|
# Tell the sysadmin what went on.
|
|
if (( "$ERR" == 0 )); then
|
|
# Send a report.
|
|
notify "report"
|
|
ERR="$?"
|
|
else
|
|
# sbosrcarch failed, tell the admin.
|
|
notify "failure" || [[ -x /opt/bin/pushover-client ]] && /opt/bin/pushover-client "mirroring" -p -1 -s "SBoSrcArch failure" -m "Check log in email"
|
|
ERR="1"
|
|
fi
|
|
|
|
# Compress the log to save some space.
|
|
xz -9 "$LOGSDIR/$LOGFILE" 2>/dev/null || printf "%s: %s\\n" "${0##*/}" "failed to compress '$LOGSDIR/$LOGFILE'" >&2
|
|
|
|
exit "$ERR"
|