1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283 |
- #!/usr/bin/env bash
- set -euo pipefail
-
- # This is an update script for gitea installed via the binary distribution
- # from dl.gitea.io on linux as systemd service. It performs a backup and updates
- # Gitea in place.
- # NOTE: This adds the GPG Signing Key of the Gitea maintainers to the keyring.
- # Depends on: bash, curl, xz, sha256sum, gpg. optionally jq.
- # Usage: [environment vars] upgrade.sh [version]
- # See section below for available environment vars.
- # When no version is specified, updates to the latest release.
- # Examples:
- # upgrade.sh 1.15.10
- # giteahome=/opt/gitea giteaconf=$giteahome/app.ini upgrade.sh
-
- # apply variables from environment
- : "${giteabin:="/usr/local/bin/gitea"}"
- : "${giteahome:="/var/lib/gitea"}"
- : "${giteaconf:="/etc/gitea/app.ini"}"
- : "${giteauser:="git"}"
- : "${sudocmd:="sudo"}"
- : "${arch:="linux-amd64"}"
- : "${backupopts:=""}" # see `gitea dump --help` for available options
-
- function giteacmd {
- "$sudocmd" --user "$giteauser" "$giteabin" --config "$giteaconf" --work-path "$giteahome" "$@"
- }
-
- function require {
- for exe in "$@"; do
- command -v "$exe" &>/dev/null || (echo "missing dependency '$exe'"; exit 1)
- done
- }
- require systemctl curl xz sha256sum gpg "$sudocmd"
-
- # select version to install
- if [[ -z "${1:-}" ]]; then
- require jq
- giteaversion=$(curl --connect-timeout 10 -sL https://dl.gitea.io/gitea/version.json | jq -r .latest.version)
- else
- giteaversion="$1"
- fi
-
- # confirm update
- current=$(giteacmd --version | cut --delimiter=' ' --fields=3)
- [[ "$current" == "$giteaversion" ]] && echo "$current is already installed, stopping." && exit 1
- echo "Make sure to read the changelog first: https://github.com/go-gitea/gitea/blob/main/CHANGELOG.md"
- echo "Are you ready to update Gitea from ${current} to ${giteaversion}? (y/N)"
- read -r confirm
- [[ "$confirm" == "y" ]] || [[ "$confirm" == "Y" ]] || exit 1
-
- pushd "$(pwd)" &>/dev/null
- cd "$giteahome" # needed for gitea dump later
-
- # download new binary
- binname="gitea-${giteaversion}-${arch}"
- binurl="https://dl.gitea.io/gitea/${giteaversion}/${binname}.xz"
- echo "Downloading $binurl..."
- curl --connect-timeout 10 --silent --show-error --fail --location -O "$binurl{,.sha256,.asc}"
-
- # validate checksum & gpg signature (exit script if error)
- sha256sum --check "${binname}.xz.sha256"
- gpg --keyserver keys.openpgp.org --recv 7C9E68152594688862D62AF62D9AE806EC1592E2
- gpg --verify "${binname}.xz.asc" "${binname}.xz" || { echo 'Signature does not match'; exit 1; }
- rm "${binname}".xz.{sha256,asc}
-
- # unpack binary + make executable
- xz --decompress "${binname}.xz"
- chown "$giteauser" "$binname"
- chmod +x "$binname"
-
- # stop gitea, create backup, replace binary, restart gitea
- echo "Stopping gitea at $(date)"
- giteacmd manager flush-queues
- $sudocmd systemctl stop gitea
- echo "Creating backup in $giteahome"
- giteacmd dump $backupopts
- echo "Updating binary at $giteabin"
- mv --force --backup "$binname" "$giteabin"
- $sudocmd systemctl start gitea
- $sudocmd systemctl status gitea
-
- popd
|