Initial public release

2026-08-31 21:56:53 +02:00
commit faeb58ef6d
1386 changed files with 263203 additions and 0 deletions
@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+cd "$ROOT"
+
+GEOINTEL_DEPLOY_LOCK_FILE="${GEOINTEL_DEPLOY_LOCK_FILE:-/tmp/geointel-release-deploy.lock}"
+if [ "${GEOINTEL_DEPLOY_LOCK_HELD:-false}" != "true" ]; then
+  command -v flock >/dev/null 2>&1 || {
+    echo "GeoIntel rollback requires flock to prevent concurrent deployment." >&2
+    exit 2
+  }
+  exec 9>"$GEOINTEL_DEPLOY_LOCK_FILE"
+  if ! flock -n 9; then
+    echo "Another GeoIntel deployment or rollback is already running." >&2
+    exit 3
+  fi
+  GEOINTEL_DEPLOY_LOCK_HELD="true"
+  export GEOINTEL_DEPLOY_LOCK_HELD
+fi
+
+GEOINTEL_ROLLBACK_IMAGE="${GEOINTEL_ROLLBACK_IMAGE:-}"
+BACKUP_DIR="${GEOINTEL_ROLLBACK_BACKUP_DIR:-}"
+CONFIRM_RESTORE="false"
+
+usage() {
+  cat <<'EOF'
+Usage: bash deploy/unraid/rollback-dockerman-container.sh \
+  --backup-dir PATH --confirm-production-database-restore
+
+Restores the verified pre-deploy PostgreSQL dump first and only then starts the
+retained previous image. Image-only rollback against an unknown migrated
+schema is deliberately not supported.
+EOF
+}
+
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --backup-dir) BACKUP_DIR="$2"; shift 2 ;;
+    --confirm-production-database-restore) CONFIRM_RESTORE="true"; shift ;;
+    --help|-h) usage; exit 0 ;;
+    *) echo "Unknown argument: $1" >&2; usage >&2; exit 2 ;;
+  esac
+done
+
+if [ -z "$BACKUP_DIR" ] || [ "$CONFIRM_RESTORE" != "true" ]; then
+  echo "Rollback requires a verified pre-deploy backup and explicit database-restore confirmation." >&2
+  usage >&2
+  exit 2
+fi
+
+restore_image_args=()
+if [ -n "$GEOINTEL_ROLLBACK_IMAGE" ]; then
+  restore_image_args=(--image "$GEOINTEL_ROLLBACK_IMAGE")
+fi
+echo "Restoring the pre-deploy database before starting its checksum-bound image..."
+bash deploy/unraid/restore-predeploy-database.sh \
+  --backup-dir "$BACKUP_DIR" \
+  "${restore_image_args[@]}" \
+  --confirm-production-database-restore
+
+if [ -z "$GEOINTEL_ROLLBACK_IMAGE" ]; then
+  GEOINTEL_ROLLBACK_IMAGE="$(python3 - "$BACKUP_DIR/manifest.json" <<'PY'
+import json
+import pathlib
+import re
+import sys
+
+image_id = json.loads(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8")).get("image_id", "")
+if not re.fullmatch(r"sha256:[0-9a-f]{64}", image_id):
+    raise SystemExit("Backup manifest lacks an immutable rollback image ID")
+print(image_id)
+PY
+)"
+fi
+docker image inspect "$GEOINTEL_ROLLBACK_IMAGE" >/dev/null
+
+echo "Starting rollback image ${GEOINTEL_ROLLBACK_IMAGE} with the restored persistent database..."
+GEOINTEL_IMAGE="$GEOINTEL_ROLLBACK_IMAGE" bash deploy/unraid/run-dockerman-container.sh
+
+for attempt in $(seq 1 90); do
+  status="$(docker inspect --format '{{if .State.Health}}{{.State.Health.Status}}{{else}}{{.State.Status}}{{end}}' geointel 2>/dev/null || true)"
+  if [ "$status" = "healthy" ]; then
+    LIVE_SMOKE_CONTAINER=geointel bash scripts/live_migration_smoke.sh
+    echo "Rollback completed with healthy image ${GEOINTEL_ROLLBACK_IMAGE}."
+    exit 0
+  fi
+  if [ "$status" = "unhealthy" ] || [ "$status" = "exited" ] || [ "$status" = "dead" ]; then
+    docker logs --tail 120 geointel >&2 || true
+    exit 1
+  fi
+  sleep 2
+done
+
+echo "Rollback container did not become healthy." >&2
+docker logs --tail 120 geointel >&2 || true
+exit 1