mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-13 09:41:55 -06:00
9f049ca144
Verify version and platform before upgrade or ipactl start|restart
Upgrade:
* do not allow upgrade on different platforms
* do not allow upgrade data with higher version than build has
Start:
* do not start services if platform mismatch
* do not start services if upgrade is needed
* do not start services if data with higher version than build has
New ipactl options:
--skip-version-check: do not validate IPA version
--ignore-service-failures (was --force): ignore if a service start fail
and continue with starting other services
--force: combine --skip-version-check and --ignore-service-failures
https://fedorahosted.org/freeipa/ticket/4904
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: David Kupka <dkupka@redhat.com>
104 lines
3.5 KiB
Python
104 lines
3.5 KiB
Python
#
|
|
# Copyright (C) 2015 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
import sys
|
|
|
|
import krbV
|
|
|
|
from ipalib import api
|
|
from ipaplatform.paths import paths
|
|
from ipapython import admintool, ipautil
|
|
from ipaserver.install import installutils
|
|
from ipaserver.install.upgradeinstance import IPAUpgrade
|
|
|
|
|
|
class ServerUpgrade(admintool.AdminTool):
|
|
log_file_name = paths.IPAUPGRADE_LOG
|
|
command_name = 'ipa-server-upgrade'
|
|
|
|
usage = "%prog [options]"
|
|
|
|
@classmethod
|
|
def add_options(cls, parser):
|
|
super(ServerUpgrade, cls).add_options(parser)
|
|
parser.add_option("--force", action="store_true",
|
|
dest="force", default=False,
|
|
help="force upgrade (alias for --skip-version-check)")
|
|
parser.add_option("--skip-version-check", action="store_true",
|
|
dest="skip_version_check", default=False,
|
|
help="skip version check. WARNING: this may break "
|
|
"your system")
|
|
|
|
def validate_options(self):
|
|
super(ServerUpgrade, self).validate_options(needs_root=True)
|
|
|
|
if self.options.force:
|
|
self.options.skip_version_check = True
|
|
|
|
try:
|
|
installutils.check_server_configuration()
|
|
except RuntimeError as e:
|
|
print unicode(e)
|
|
sys.exit(1)
|
|
|
|
def setup_logging(self):
|
|
super(ServerUpgrade, self).setup_logging(log_file_mode='a')
|
|
|
|
def run(self):
|
|
super(ServerUpgrade, self).run()
|
|
|
|
api.bootstrap(in_server=True, context='updates')
|
|
api.finalize()
|
|
|
|
options = self.options
|
|
|
|
if not options.skip_version_check:
|
|
# check IPA version and data version
|
|
try:
|
|
installutils.check_version()
|
|
except (installutils.UpgradePlatformError,
|
|
installutils.UpgradeDataNewerVersionError) as e:
|
|
raise admintool.ScriptError(
|
|
'Unable to execute IPA upgrade: %s' % e, 1)
|
|
except installutils.UpgradeMissingVersionError as e:
|
|
self.log.info("Missing version: %s", e)
|
|
except installutils.UpgradeVersionError:
|
|
# Ignore other errors
|
|
pass
|
|
else:
|
|
self.log.info("Skipping version check")
|
|
self.log.warning("Upgrade without version check may break your "
|
|
"system")
|
|
|
|
realm = krbV.default_context().default_realm
|
|
data_upgrade = IPAUpgrade(realm)
|
|
data_upgrade.create_instance()
|
|
|
|
if data_upgrade.badsyntax:
|
|
raise admintool.ScriptError(
|
|
'Bad syntax detected in upgrade file(s).', 1)
|
|
elif data_upgrade.upgradefailed:
|
|
raise admintool.ScriptError('IPA upgrade failed.', 1)
|
|
elif data_upgrade.modified:
|
|
self.log.info('Data update complete')
|
|
else:
|
|
self.log.info('Data update complete, no data were modified')
|
|
|
|
# store new data version after upgrade
|
|
installutils.store_version()
|
|
|
|
# FIXME: remove this when new installer will be ready
|
|
# execute upgrade of configuration
|
|
cmd = ['ipa-upgradeconfig', ]
|
|
if options.verbose:
|
|
cmd.append('--debug')
|
|
if options.quiet:
|
|
cmd.append('--quiet')
|
|
|
|
self.log.info('Executing ipa-upgradeconfig, please wait')
|
|
ipautil.run(cmd)
|
|
|
|
def handle_error(self, exception):
|
|
return installutils.handle_error(exception, self.log_file_name)
|