283 lines
11 KiB
Python
Executable File
283 lines
11 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
import argparse
|
|
from configparser import ConfigParser
|
|
from urllib.parse import urlparse
|
|
from os.path import normpath, join, exists
|
|
from os import chmod, chown, stat, environ
|
|
from enum import Enum
|
|
import subprocess
|
|
from requests import get,put,head
|
|
import json
|
|
|
|
SSH_KEY_PATH = environ["DATADB_KEYPATH"] if "DATADB_KEYPATH" in environ else '/root/.ssh/datadb.key'
|
|
RSYNC_DEFAULT_ARGS = ['rsync', '-avzr', '--exclude=.datadb.lock', '--whole-file', '--one-file-system', '--delete', '-e', 'ssh -i {} -p 4874 -o StrictHostKeyChecking=no'.format(SSH_KEY_PATH)]
|
|
DATADB_HTTP_API = 'http://datadb.services.davepedu.com:4875/cgi-bin/'
|
|
|
|
class SyncStatus(Enum):
|
|
"Data is on local disk"
|
|
DATA_AVAILABLE = 1
|
|
"Data is not on local disk"
|
|
DATA_MISSING = 2
|
|
|
|
|
|
def restore(profile, conf, force=False): #remote_uri, local_dir, identity='/root/.ssh/datadb.key'
|
|
"""
|
|
Restore data from datadb
|
|
"""
|
|
|
|
# Sanity check: If the lockfile exists we assume the data is already there, so we wouldn't want to call rsync again
|
|
# as it would wipe out local changes. This can be overridden with --force
|
|
assert (status(profile, conf) == SyncStatus.DATA_MISSING) or force, "Data already exists (Use --force?)"
|
|
|
|
original_perms = stat(conf["dir"])
|
|
dest = urlparse(conf["uri"])
|
|
|
|
status_code = head(DATADB_HTTP_API+'get_backup', params={'proto':dest.scheme, 'name':profile}).status_code
|
|
if status_code == 404:
|
|
print("Connected to datadb, but datasource '{}' doesn't exist. Exiting".format(profile))
|
|
# TODO: special exit code >1 to indicate this?
|
|
return
|
|
|
|
if dest.scheme == 'rsync':
|
|
args = RSYNC_DEFAULT_ARGS[:]
|
|
|
|
# Request backup server to prepare the backup, the returned dir is what we sync from
|
|
rsync_path = get(DATADB_HTTP_API+'get_backup', params={'proto':'rsync', 'name':profile}).text.rstrip()
|
|
|
|
# Add rsync source path
|
|
args.append('nexus@{}:{}'.format(dest.netloc, normpath(rsync_path)+'/'))
|
|
|
|
# Add local dir
|
|
args.append(normpath(conf["dir"])+'/')
|
|
print("Rsync restore call: {}".format(' '.join(args)))
|
|
|
|
subprocess.check_call(args)
|
|
|
|
elif dest.scheme == 'archive':
|
|
# http request backup server
|
|
# download tarball
|
|
args_curl = ['curl', '-s', '-v', '-XGET', '{}get_backup?proto=archive&name={}'.format(DATADB_HTTP_API, profile)]
|
|
# unpack
|
|
args_tar = ['tar', 'zxv', '-C', normpath(conf["dir"])+'/']
|
|
|
|
print("Tar restore call: {} | {}".format(' '.join(args_curl), ' '.join(args_tar)))
|
|
|
|
dl = subprocess.Popen(args_curl, stdout=subprocess.PIPE)
|
|
extract = subprocess.Popen(args_tar, stdin=dl.stdout)
|
|
|
|
dl.wait()
|
|
extract.wait()
|
|
# TODO: convert to pure python?
|
|
|
|
assert dl.returncode == 0, "Could not download archive"
|
|
assert extract.returncode == 0, "Could not extract archive"
|
|
|
|
# Restore original permissions on data dir
|
|
# TODO store these in conf file
|
|
chmod(conf["dir"], original_perms.st_mode)
|
|
chown(conf["dir"], original_perms.st_uid, original_perms.st_gid)
|
|
# TODO apply other permissions
|
|
|
|
|
|
def backup(profile, conf, force=False):
|
|
"""
|
|
Backup data to datadb
|
|
"""
|
|
|
|
# Sanity check: If the lockfile doesn't exist we assume the data is missing, so we wouldn't want to call rsync
|
|
# again as it would wipe out the backup.
|
|
assert (status(profile, conf) == SyncStatus.DATA_AVAILABLE) or force, "Data is missing (Use --force?)"
|
|
|
|
dest = urlparse(conf["uri"])
|
|
|
|
if dest.scheme == 'rsync':
|
|
args = RSYNC_DEFAULT_ARGS[:]
|
|
|
|
# Excluded paths
|
|
for exclude_path in conf["exclude"].split(","):
|
|
if not exclude_path == "":
|
|
args.append("--exclude")
|
|
args.append(exclude_path)
|
|
|
|
# Add local dir
|
|
args.append(normpath(conf["dir"])+'/')
|
|
|
|
# Hit backupdb via http to retreive absolute path of rsync destination of remote server
|
|
rsync_path, token = get(DATADB_HTTP_API+'new_backup', params={'proto':'rsync', 'name':profile, 'keep':conf["keep"]}).json()
|
|
|
|
# Add rsync source path
|
|
args.append(normpath('nexus@{}:{}'.format(dest.netloc, rsync_path))+'/')
|
|
|
|
#print("Rsync backup call: {}".format(' '.join(args)))
|
|
|
|
try:
|
|
subprocess.check_call(args)
|
|
except subprocess.CalledProcessError as cpe:
|
|
if cpe.returncode not in [0,24]: # ignore partial transfer due to vanishing files on our end
|
|
raise
|
|
# confirm completion
|
|
put(DATADB_HTTP_API+'new_backup', params={'proto':'rsync', 'name':profile, 'token': token, 'keep':conf["keep"]})
|
|
|
|
elif dest.scheme == 'archive':
|
|
# CD to local source dir
|
|
# create tarball
|
|
# http PUT file to backup server
|
|
args_tar = ['tar', '--exclude=.datadb.lock']
|
|
|
|
# Excluded paths
|
|
for exclude_path in conf["exclude"].split(","):
|
|
if not exclude_path == "":
|
|
args_tar.append("--exclude")
|
|
args_tar.append(exclude_path)
|
|
|
|
args_tar += ['-zcv', './']
|
|
args_curl = ['curl', '-v', '-XPUT', '--data-binary', '@-', '{}new_backup?proto=archive&name={}&keep={}'.format(DATADB_HTTP_API, profile, conf["keep"])]
|
|
|
|
print("Tar backup call: {} | {}".format(' '.join(args_tar), ' '.join(args_curl)))
|
|
|
|
compress = subprocess.Popen(args_tar, stdout=subprocess.PIPE, cwd=normpath(conf["dir"])+'/')
|
|
upload = subprocess.Popen(args_curl, stdin=compress.stdout)
|
|
|
|
compress.wait()
|
|
upload.wait()
|
|
# TODO: convert to pure python?
|
|
|
|
assert compress.returncode == 0, "Could not create archive"
|
|
assert upload.returncode == 0, "Could not upload archive"
|
|
|
|
|
|
def status(profile, conf):
|
|
"""
|
|
Check status of local dir - if the lock file is in place, we assume the data is there
|
|
"""
|
|
|
|
lockfile = join(conf["dir"], '.datadb.lock')
|
|
|
|
if exists(lockfile):
|
|
return SyncStatus.DATA_AVAILABLE
|
|
return SyncStatus.DATA_MISSING
|
|
|
|
|
|
def shell_exec(cmd, workdir='/tmp/'):
|
|
"""
|
|
Execute a command in shell, wait for exit.
|
|
"""
|
|
print("Calling: {}".format(cmd))
|
|
subprocess.Popen(cmd, shell=True, cwd=workdir).wait()
|
|
|
|
|
|
def main():
|
|
"""
|
|
Excepts a config file at /etc/datadb.ini. Example:
|
|
|
|
----------------------------
|
|
[gyfd]
|
|
uri=
|
|
dir=
|
|
keep=
|
|
auth=
|
|
restore_preexec=
|
|
restore_postexec=
|
|
export_preexec=
|
|
export_postexec=
|
|
exclude=
|
|
----------------------------
|
|
|
|
Each [section] defines one backup task.
|
|
|
|
Fields:
|
|
|
|
*uri*: Destination/source for this instance's data. Always fits the following format:
|
|
|
|
<procotol>://<server>/<backup name>
|
|
|
|
Valid protocols:
|
|
|
|
rsync - rsync executed over SSH. The local dir will be synced with the remote backup dir using rsync.
|
|
archive - tar archives transported over HTTP. The local dir will be tarred and PUT to the backup server's remote dir via http.
|
|
|
|
*dir*: Local dir for this backup
|
|
|
|
*keep*: Currently unused. Number of historical copies to keep on remote server
|
|
|
|
*auth*: Currently unused. Username:password string to use while contacting the datadb via HTTP.
|
|
|
|
*restore_preexec*: Shell command to exec before pulling/restoring data
|
|
|
|
*restore_postexec*: Shell command to exec after pulling/restoring data
|
|
|
|
*export_preexec*: Shell command to exec before pushing data
|
|
|
|
*export_postexec*: Shell command to exec after pushing data
|
|
|
|
*exclude*: if the underlying transport method supports excluding paths, a comma separated list of paths to exclude. Applies to backup operations only.
|
|
|
|
"""
|
|
|
|
conf_path = environ["DATADB_CONF"] if "DATADB_CONF" in environ else "/etc/datadb.ini"
|
|
|
|
# Load profiles
|
|
config = ConfigParser()
|
|
config.read(conf_path)
|
|
|
|
config = {section:{k:config[section][k] for k in config[section]} for section in config.sections()}
|
|
|
|
parser = argparse.ArgumentParser(description="Backupdb Agent depends on config: /etc/datadb.ini")
|
|
|
|
parser.add_argument('-f', '--force', default=False, action='store_true', help='force restore operation if destination data already exists')
|
|
parser.add_argument('-n', '--no-exec', default=False, action='store_true', help='don\'t run pre/post-exec commands')
|
|
parser.add_argument('-b', '--no-pre-exec', default=False, action='store_true', help='don\'t run pre-exec commands')
|
|
parser.add_argument('-m', '--no-post-exec', default=False, action='store_true', help='don\'t run post-exec commands')
|
|
|
|
parser.add_argument('profile', type=str, choices=config.keys(), help='Profile to restore')
|
|
|
|
#parser.add_argument('-i', '--identity',
|
|
# help='Ssh keyfile to use', type=str, default='/root/.ssh/datadb.key')
|
|
#parser.add_argument('-r', '--remote',
|
|
# help='Remote server (rsync://...)', type=str, required=True)
|
|
#parser.add_argument('-l', '--local_dir',
|
|
# help='Local path', type=str, required=True)
|
|
|
|
subparser_modes = parser.add_subparsers(dest='mode', help='modes (only "rsync")')
|
|
|
|
subparser_backup = subparser_modes.add_parser('backup', help='backup to datastore')
|
|
|
|
subparser_restore = subparser_modes.add_parser('restore', help='restore from datastore')
|
|
|
|
subparser_status = subparser_modes.add_parser('status', help='get info for profile')
|
|
|
|
args = parser.parse_args()
|
|
|
|
if args.no_exec:
|
|
args.no_pre_exec = True
|
|
args.no_post_exec = True
|
|
|
|
if args.mode == 'restore':
|
|
if not args.no_pre_exec and config[args.profile]['restore_preexec']:
|
|
shell_exec(config[args.profile]['restore_preexec'])
|
|
|
|
restore(args.profile, config[args.profile], force=args.force)
|
|
|
|
if not args.no_post_exec and config[args.profile]['restore_postexec']:
|
|
shell_exec(config[args.profile]['restore_postexec'])
|
|
|
|
elif args.mode == 'backup':
|
|
if not args.no_pre_exec and config[args.profile]['export_preexec']:
|
|
shell_exec(config[args.profile]['export_preexec'])
|
|
|
|
backup(args.profile, config[args.profile])
|
|
|
|
if not args.no_post_exec and config[args.profile]['export_postexec']:
|
|
shell_exec(config[args.profile]['export_postexec'])
|
|
|
|
elif args.mode == 'status':
|
|
info = status(args.profile, config[args.profile])
|
|
print(SyncStatus(info))
|
|
|
|
else:
|
|
parser.print_usage()
|
|
|
|
if __name__ == '__main__':
|
|
main()
|