319 lines
11 KiB
Bash
319 lines
11 KiB
Bash
#!/bin/bash
|
|
|
|
SCRIPT_VERSION="102"
|
|
SCRIPT_URL='https://raw.githubusercontent.com/wh1te909/tacticalrmm/master/update.sh'
|
|
LATEST_SETTINGS_URL='https://raw.githubusercontent.com/wh1te909/tacticalrmm/master/api/tacticalrmm/tacticalrmm/settings.py'
|
|
YELLOW='\033[1;33m'
|
|
GREEN='\033[0;32m'
|
|
RED='\033[0;31m'
|
|
NC='\033[0m'
|
|
|
|
TMP_FILE=$(mktemp -p "" "rmmupdate_XXXXXXXXXX")
|
|
curl -s -L "${SCRIPT_URL}" > ${TMP_FILE}
|
|
NEW_VER=$(grep "^SCRIPT_VERSION" "$TMP_FILE" | awk -F'[="]' '{print $3}')
|
|
|
|
if [ "${SCRIPT_VERSION}" -ne "${NEW_VER}" ]; then
|
|
printf >&2 "${YELLOW}Old update script detected, downloading and replacing with the latest version...${NC}\n"
|
|
wget -q "${SCRIPT_URL}" -O update.sh
|
|
printf >&2 "${YELLOW}Script updated! Please re-run ./update.sh${NC}\n"
|
|
rm -f $TMP_FILE
|
|
exit 1
|
|
fi
|
|
|
|
rm -f $TMP_FILE
|
|
|
|
if [ $EUID -eq 0 ]; then
|
|
echo -ne "\033[0;31mDo NOT run this script as root. Exiting.\e[0m\n"
|
|
exit 1
|
|
fi
|
|
|
|
strip="User="
|
|
ORIGUSER=$(grep ${strip} /etc/systemd/system/rmm.service | sed -e "s/^${strip}//")
|
|
|
|
if [ "$ORIGUSER" != "$USER" ]; then
|
|
printf >&2 "${RED}ERROR: You must run this update script from the same user account used during install: ${GREEN}${ORIGUSER}${NC}\n"
|
|
exit 1
|
|
fi
|
|
|
|
CHECK_030_MIGRATION=$(grep natsapi /etc/nginx/sites-available/rmm.conf)
|
|
if ! [[ $CHECK_030_MIGRATION ]]; then
|
|
printf >&2 "${RED}Manual configuration changes required before continuing.${NC}\n"
|
|
printf >&2 "${RED}Please follow the steps here and then re-run this update script.${NC}\n"
|
|
printf >&2 "${GREEN}https://github.com/wh1te909/tacticalrmm/blob/develop/docs/migration-0.3.0.md${NC}\n"
|
|
exit 1
|
|
fi
|
|
|
|
CHECK_CELERY_V2=$(grep V2 /etc/systemd/system/celery.service)
|
|
if ! [[ $CHECK_CELERY_V2 ]]; then
|
|
printf >&2 "${GREEN}Updating celery.service${NC}\n"
|
|
sudo systemctl stop celery.service
|
|
sudo rm -f /etc/systemd/system/celery.service
|
|
|
|
celeryservice="$(cat << EOF
|
|
[Unit]
|
|
Description=Celery Service V2
|
|
After=network.target redis-server.service postgresql.service
|
|
|
|
[Service]
|
|
Type=forking
|
|
User=${USER}
|
|
Group=${USER}
|
|
EnvironmentFile=/etc/conf.d/celery.conf
|
|
WorkingDirectory=/rmm/api/tacticalrmm
|
|
ExecStart=/bin/sh -c '\${CELERY_BIN} -A \$CELERY_APP multi start \$CELERYD_NODES --pidfile=\${CELERYD_PID_FILE} --logfile=\${CELERYD_LOG_FILE} --loglevel="\${CELERYD_LOG_LEVEL}" \$CELERYD_OPTS'
|
|
ExecStop=/bin/sh -c '\${CELERY_BIN} multi stopwait \$CELERYD_NODES --pidfile=\${CELERYD_PID_FILE} --loglevel="\${CELERYD_LOG_LEVEL}"'
|
|
ExecReload=/bin/sh -c '\${CELERY_BIN} -A \$CELERY_APP multi restart \$CELERYD_NODES --pidfile=\${CELERYD_PID_FILE} --logfile=\${CELERYD_LOG_FILE} --loglevel="\${CELERYD_LOG_LEVEL}" \$CELERYD_OPTS'
|
|
Restart=always
|
|
RestartSec=10s
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
)"
|
|
echo "${celeryservice}" | sudo tee /etc/systemd/system/celery.service > /dev/null
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl enable celery.service
|
|
fi
|
|
|
|
CHECK_CELERYBEAT_V2=$(grep V2 /etc/systemd/system/celerybeat.service)
|
|
if ! [[ $CHECK_CELERYBEAT_V2 ]]; then
|
|
printf >&2 "${GREEN}Updating celerybeat.service${NC}\n"
|
|
sudo systemctl stop celerybeat.service
|
|
sudo rm -f /etc/systemd/system/celerybeat.service
|
|
|
|
celerybeatservice="$(cat << EOF
|
|
[Unit]
|
|
Description=Celery Beat Service V2
|
|
After=network.target redis-server.service postgresql.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=${USER}
|
|
Group=${USER}
|
|
EnvironmentFile=/etc/conf.d/celery.conf
|
|
WorkingDirectory=/rmm/api/tacticalrmm
|
|
ExecStart=/bin/sh -c '\${CELERY_BIN} -A \${CELERY_APP} beat --pidfile=\${CELERYBEAT_PID_FILE} --logfile=\${CELERYBEAT_LOG_FILE} --loglevel=\${CELERYD_LOG_LEVEL}'
|
|
Restart=always
|
|
RestartSec=10s
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
)"
|
|
echo "${celerybeatservice}" | sudo tee /etc/systemd/system/celerybeat.service > /dev/null
|
|
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl enable celerybeat.service
|
|
|
|
fi
|
|
|
|
CHECK_CELERYWINUPDATE_V2=$(grep V2 /etc/systemd/system/celery-winupdate.service)
|
|
if ! [[ $CHECK_CELERYWINUPDATE_V2 ]]; then
|
|
printf >&2 "${GREEN}Updating celery-winupdate.service${NC}\n"
|
|
sudo systemctl stop celery-winupdate.service
|
|
sudo rm -f /etc/systemd/system/celery-winupdate.service
|
|
|
|
celerywinupdatesvc="$(cat << EOF
|
|
[Unit]
|
|
Description=Celery WinUpdate Service V2
|
|
After=network.target redis-server.service postgresql.service
|
|
|
|
[Service]
|
|
Type=forking
|
|
User=${USER}
|
|
Group=${USER}
|
|
EnvironmentFile=/etc/conf.d/celery-winupdate.conf
|
|
WorkingDirectory=/rmm/api/tacticalrmm
|
|
ExecStart=/bin/sh -c '\${CELERY_BIN} -A \$CELERY_APP multi start \$CELERYD_NODES --pidfile=\${CELERYD_PID_FILE} --logfile=\${CELERYD_LOG_FILE} --loglevel="\${CELERYD_LOG_LEVEL}" -Q wupdate \$CELERYD_OPTS'
|
|
ExecStop=/bin/sh -c '\${CELERY_BIN} multi stopwait \$CELERYD_NODES --pidfile=\${CELERYD_PID_FILE} --loglevel="\${CELERYD_LOG_LEVEL}"'
|
|
ExecReload=/bin/sh -c '\${CELERY_BIN} -A \$CELERY_APP multi restart \$CELERYD_NODES --pidfile=\${CELERYD_PID_FILE} --logfile=\${CELERYD_LOG_FILE} --loglevel="\${CELERYD_LOG_LEVEL}" -Q wupdate \$CELERYD_OPTS'
|
|
Restart=always
|
|
RestartSec=10s
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
)"
|
|
echo "${celerywinupdatesvc}" | sudo tee /etc/systemd/system/celery-winupdate.service > /dev/null
|
|
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl enable celery-winupdate.service
|
|
|
|
fi
|
|
|
|
|
|
TMP_SETTINGS=$(mktemp -p "" "rmmsettings_XXXXXXXXXX")
|
|
curl -s -L "${LATEST_SETTINGS_URL}" > ${TMP_SETTINGS}
|
|
SETTINGS_FILE="/rmm/api/tacticalrmm/tacticalrmm/settings.py"
|
|
|
|
LATEST_TRMM_VER=$(grep "^TRMM_VERSION" "$TMP_SETTINGS" | awk -F'[= "]' '{print $5}')
|
|
CURRENT_TRMM_VER=$(grep "^TRMM_VERSION" "$SETTINGS_FILE" | awk -F'[= "]' '{print $5}')
|
|
|
|
if [[ "${CURRENT_TRMM_VER}" == "${LATEST_TRMM_VER}" ]]; then
|
|
printf >&2 "${GREEN}Already on latest version. Current version: ${CURRENT_TRMM_VER} Latest version: ${LATEST_TRMM_VER}${NC}\n"
|
|
rm -f $TMP_SETTINGS
|
|
exit 0
|
|
fi
|
|
|
|
LATEST_MESH_VER=$(grep "^MESH_VER" "$TMP_SETTINGS" | awk -F'[= "]' '{print $5}')
|
|
LATEST_PIP_VER=$(grep "^PIP_VER" "$TMP_SETTINGS" | awk -F'[= "]' '{print $5}')
|
|
LATEST_NPM_VER=$(grep "^NPM_VER" "$TMP_SETTINGS" | awk -F'[= "]' '{print $5}')
|
|
LATEST_SALT_VER=$(grep "^SALT_MASTER_VER" "$TMP_SETTINGS" | awk -F'[= "]' '{print $5}')
|
|
|
|
CURRENT_PIP_VER=$(grep "^PIP_VER" "$SETTINGS_FILE" | awk -F'[= "]' '{print $5}')
|
|
CURRENT_NPM_VER=$(grep "^NPM_VER" "$SETTINGS_FILE" | awk -F'[= "]' '{print $5}')
|
|
|
|
|
|
if [ ! -f /etc/systemd/system/natsapi.service ]; then
|
|
natsapi="$(cat << EOF
|
|
[Unit]
|
|
Description=Tactical NATS API
|
|
After=network.target rmm.service nginx.service nats.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=/usr/local/bin/nats-api
|
|
User=${USER}
|
|
Group=${USER}
|
|
Restart=always
|
|
RestartSec=5s
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
)"
|
|
echo "${natsapi}" | sudo tee /etc/systemd/system/natsapi.service > /dev/null
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl enable natsapi.service
|
|
fi
|
|
|
|
for i in salt-master salt-api nginx nats natsapi rmm celery celerybeat celery-winupdate
|
|
do
|
|
printf >&2 "${GREEN}Stopping ${i} service...${NC}\n"
|
|
sudo systemctl stop ${i}
|
|
done
|
|
|
|
CHECK_NGINX_WORKER_CONN=$(grep "worker_connections 2048" /etc/nginx/nginx.conf)
|
|
if ! [[ $CHECK_NGINX_WORKER_CONN ]]; then
|
|
printf >&2 "${GREEN}Changing nginx worker connections to 2048${NC}\n"
|
|
sudo sed -i 's/worker_connections.*/worker_connections 2048;/g' /etc/nginx/nginx.conf
|
|
fi
|
|
|
|
cd /rmm
|
|
git config user.email "admin@example.com"
|
|
git config user.name "Bob"
|
|
git fetch
|
|
git checkout master
|
|
git reset --hard FETCH_HEAD
|
|
git clean -df
|
|
git pull
|
|
|
|
CHECK_SALT=$(sudo salt --version | grep ${LATEST_SALT_VER})
|
|
if ! [[ $CHECK_SALT ]]; then
|
|
printf >&2 "${GREEN}Updating salt${NC}\n"
|
|
sudo apt update
|
|
sudo apt install -y salt-master salt-api salt-common
|
|
printf >&2 "${GREEN}Waiting for salt...${NC}\n"
|
|
sleep 15
|
|
sudo systemctl stop salt-master
|
|
sudo systemctl stop salt-api
|
|
printf >&2 "${GREEN}Fixing msgpack${NC}\n"
|
|
sudo sed -i 's/msgpack_kwargs = {"raw": six.PY2}/msgpack_kwargs = {"raw": six.PY2, "max_buffer_size": 2147483647}/g' /usr/lib/python3/dist-packages/salt/transport/ipc.py
|
|
sudo systemctl start salt-master
|
|
printf >&2 "${GREEN}Waiting for salt...${NC}\n"
|
|
sleep 15
|
|
sudo systemctl start salt-api
|
|
printf >&2 "${GREEN}Salt update finished${NC}\n"
|
|
fi
|
|
|
|
sudo chown ${USER}:${USER} -R /rmm
|
|
sudo chown ${USER}:${USER} /var/log/celery
|
|
sudo chown ${USER}:${USER} -R /srv/salt/
|
|
sudo chown ${USER}:${USER} -R /etc/conf.d/
|
|
sudo chown ${USER}:www-data /srv/salt/scripts/userdefined
|
|
sudo chown -R $USER:$GROUP /home/${USER}/.npm
|
|
sudo chown -R $USER:$GROUP /home/${USER}/.config
|
|
sudo chown -R $USER:$GROUP /home/${USER}/.cache
|
|
sudo chmod 750 /srv/salt/scripts/userdefined
|
|
sudo chown ${USER}:${USER} -R /etc/letsencrypt
|
|
sudo chmod 775 -R /etc/letsencrypt
|
|
|
|
cp /rmm/_modules/* /srv/salt/_modules/
|
|
cp /rmm/scripts/* /srv/salt/scripts/
|
|
/usr/local/rmmgo/go/bin/go get github.com/josephspurrier/goversioninfo/cmd/goversioninfo
|
|
sudo cp /rmm/api/tacticalrmm/core/goinstaller/bin/goversioninfo /usr/local/bin/
|
|
sudo chown ${USER}:${USER} /usr/local/bin/goversioninfo
|
|
sudo chmod +x /usr/local/bin/goversioninfo
|
|
|
|
sudo cp /rmm/natsapi/bin/nats-api /usr/local/bin
|
|
sudo chown ${USER}:${USER} /usr/local/bin/nats-api
|
|
sudo chmod +x /usr/local/bin/nats-api
|
|
|
|
printf >&2 "${GREEN}Running postgres vacuum${NC}\n"
|
|
sudo -u postgres psql -d tacticalrmm -c "vacuum full logs_auditlog"
|
|
sudo -u postgres psql -d tacticalrmm -c "vacuum full logs_pendingaction"
|
|
sudo -u postgres psql -d tacticalrmm -c "vacuum full agents_agentoutage"
|
|
|
|
if [[ "${CURRENT_PIP_VER}" != "${LATEST_PIP_VER}" ]]; then
|
|
rm -rf /rmm/api/env
|
|
cd /rmm/api
|
|
python3 -m venv env
|
|
source /rmm/api/env/bin/activate
|
|
cd /rmm/api/tacticalrmm
|
|
pip install --no-cache-dir --upgrade pip
|
|
pip install --no-cache-dir setuptools==51.1.2 wheel==0.36.2
|
|
pip install --no-cache-dir -r requirements.txt
|
|
else
|
|
source /rmm/api/env/bin/activate
|
|
cd /rmm/api/tacticalrmm
|
|
pip install -r requirements.txt
|
|
fi
|
|
|
|
python manage.py pre_update_tasks
|
|
python manage.py migrate
|
|
python manage.py delete_tokens
|
|
python manage.py fix_salt_key
|
|
python manage.py collectstatic --no-input
|
|
python manage.py reload_nats
|
|
python manage.py post_update_tasks
|
|
deactivate
|
|
|
|
rm -rf /rmm/web/dist
|
|
rm -rf /rmm/web/.quasar
|
|
cd /rmm/web
|
|
if [[ "${CURRENT_NPM_VER}" != "${LATEST_NPM_VER}" ]]; then
|
|
rm -rf /rmm/web/node_modules
|
|
fi
|
|
|
|
npm install
|
|
npm run build
|
|
sudo rm -rf /var/www/rmm/dist
|
|
sudo cp -pr /rmm/web/dist /var/www/rmm/
|
|
sudo chown www-data:www-data -R /var/www/rmm/dist
|
|
|
|
printf >&2 "${GREEN}Starting salt-master service${NC}\n"
|
|
sudo systemctl start salt-master
|
|
sleep 7
|
|
printf >&2 "${GREEN}Starting salt-api service${NC}\n"
|
|
sudo systemctl start salt-api
|
|
|
|
for i in rmm celery celerybeat celery-winupdate nginx nats natsapi
|
|
do
|
|
printf >&2 "${GREEN}Starting ${i} service${NC}\n"
|
|
sudo systemctl start ${i}
|
|
done
|
|
|
|
CURRENT_MESH_VER=$(cd /meshcentral && npm list meshcentral | grep 'meshcentral@' | awk -F'[@]' '{print $2}' | tr -d " \t")
|
|
if [[ "${CURRENT_MESH_VER}" != "${LATEST_MESH_VER}" ]]; then
|
|
printf >&2 "${GREEN}Updating meshcentral from ${CURRENT_MESH_VER} to ${LATEST_MESH_VER}${NC}\n"
|
|
sudo systemctl stop meshcentral
|
|
sudo chown ${USER}:${USER} -R /meshcentral
|
|
cd /meshcentral
|
|
rm -rf node_modules/
|
|
npm install meshcentral@${LATEST_MESH_VER}
|
|
sudo systemctl start meshcentral
|
|
sleep 10
|
|
fi
|
|
|
|
rm -f $TMP_SETTINGS
|
|
printf >&2 "${GREEN}Update finished!${NC}\n" |