summaryrefslogtreecommitdiffstats
path: root/core/command/upgrade.php
Commit message (Collapse)AuthorAgeFilesLines
* Rename files to be PSR-4 compliantLukas Reschke2016-04-061-295/+0
|
* Fix verbose output of upgrade command - not progressbar in this case and the ↵Thomas Müller2016-04-041-16/+22
| | | | schema migration test has one progressbar now for all tables - before we had one progressbar for each table
* Limit the message to the console to the first 30 characters in order to not ↵Thomas Müller2016-04-041-1/+5
| | | | break the progress bar
* Show individual sql schema migration steps during upgrade - on web as well ↵Thomas Müller2016-04-041-0/+20
| | | | as on the command line
* Revert "setting to skip migration tests by default"Morris Jobke2016-02-031-6/+0
|
* setting to skip migration tests by defaultMorris Jobke2016-02-031-0/+6
| | | | | | | * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default
* Print output for integrity check during ./occ upgradeMorris Jobke2016-01-221-0/+6
|
* Happy new year!Thomas Müller2016-01-121-1/+3
|
* don't show previous log level in upgrade messageBjörn Schießle2016-01-041-2/+2
|
* Add code integrity checkLukas Reschke2015-12-011-3/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release :wink:). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following: ![2015-11-04_12-02-57](https://cloud.githubusercontent.com/assets/878997/10936336/6adb1d14-82ec-11e5-8f06-9a74801c9abf.png) As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.
* Revert "setting to skip migration tests by default"Morris Jobke2015-10-271-6/+0
| | | | This reverts commit 7cbdd9b90bcea3566b7d0198f23da3d427e6ef45.
* Update: state which step we are going to start and warn if it might be slowJoas Schilling2015-10-211-0/+12
|
* Always pass in ILoggerThomas Müller2015-10-091-5/+9
|
* update licence headers via scriptMorris Jobke2015-10-051-0/+1
|
* setting to skip migration tests by defaultMorris Jobke2015-10-011-1/+7
| | | | | | | * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default
* [upgrade] switch to debug logging on upgradeMorris Jobke2015-09-291-0/+6
| | | | | * resets afterwards * adds output about the previous log level
* Merge pull request #17088 from owncloud/add-verbosity-to-upgradeMorris Jobke2015-07-011-0/+9
|\ | | | | [upgrade] add verbosity check and show repair info & steps
| * [upgrade] add verbosity check and show repair info & stepsMorris Jobke2015-06-241-0/+9
| |
* | Merge pull request #17093 from owncloud/upgrade-timestampMorris Jobke2015-07-011-3/+12
|\ \ | | | | | | [upgrade] show timestamp for output during upgrade
| * | Use a OutputFormatter instead of hacking into writeln()Joas Schilling2015-06-241-49/+26
| | |
| * | Use logtimezone and logdateformatJoas Schilling2015-06-241-2/+5
| | |
| * | [upgrade] show timestamp for output during upgradeMorris Jobke2015-06-241-14/+43
| |/ | | | | | | * added --show-timestamp option
* / update license headers and authorsMorris Jobke2015-06-251-0/+1
|/
* Merge pull request #17095 from owncloud/proper-error-handlingMorris Jobke2015-06-231-7/+10
|\ | | | | Proper error handling
| * [updater] keep maintenance active on failure and mark failure in redMorris Jobke2015-06-231-1/+2
| |
| * [updater] propagate error case properlyMorris Jobke2015-06-231-6/+8
| | | | | | | | | | | | * add $success to the updateEnd hook * add new return code for a update failure * add exception class to failure hook message
* | [upgrade] print update message before running the update codeMorris Jobke2015-06-231-0/+3
|/ | | | * otherwise you don't know during which app update something failed
* Merge pull request #16434 from owncloud/persist-maintenance-stateThomas Müller2015-06-031-3/+8
|\ | | | | Persist the state of the maintenance after an upgrade
| * Persist the state of the maintenance after an upgradeMorris Jobke2015-05-191-3/+8
| | | | | | | | | | | | * if maintenance mode was enabled before an upgrade it will be enabled afterwards too * fixes #16429
* | Skip disable3rdParty AppsSteffen Lindner2015-05-201-2/+12
|/
* Add info message for upgrade of an 3rdparty appMorris Jobke2015-05-121-0/+3
|
* More elaborate command description for upgrade - fixes #14864Thomas Müller2015-03-261-1/+1
|
* Update license headersJenkins for ownCloud2015-03-261-4/+21
|
* Properly forward repair errors and warningsVincent Petry2015-02-271-0/+6
| | | | | This makes repair errors and warnings visible for the user when upgrading on the command line or in the web UI.
* Revert "Updating license headers"Morris Jobke2015-02-261-21/+5
| | | | This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
* print app upgrade information to console as wellThomas Müller2015-02-241-0/+6
|
* 3rd-party apps are disabled on upgrade - refs #14026Thomas Müller2015-02-241-3/+7
|
* Updating license headersJenkins for ownCloud2015-02-231-5/+21
|
* Inject configVictor Dubiniuk2014-12-101-1/+1
|
* Use httphelper and cache response even when it emptyVictor Dubiniuk2014-12-061-1/+1
|
* Fix ctor call in OC\Core\Command\UpgradeThomas Müller2014-11-031-0/+1
|
* no loner use deprecated class \OC_ConfigThomas Müller2014-09-221-2/+15
|
* remove bootstrapping - occ can by definition only be executed if ownCloud is ↵Thomas Müller2014-09-221-8/+0
| | | | installed - base.php is required earlier already
* show upgrade errors as error in the console and report back that the upgrade ↵Thomas Müller2014-09-221-12/+14
| | | | process failed if it did
* Added CLI arguments for upgrade simulation stepsVincent Petry2014-06-061-3/+42
| | | | | | Added "dry run" argument to only run the update simulation. Added argument to disable migration (useful for bigger setups where table duplication would take too much space)
* Simulate apps database schema update on upgradeVincent Petry2014-06-041-0/+3
| | | | | When upgrade, also simulate the database schema update for apps before doing the actual upgrade.
* Now showing disabled apps as upgrade status lineVincent Petry2014-05-271-0/+3
| | | | | - Added app id in update overview. - Added status message for disabled app for CLI upgrade and web upgrade
* Merge branch 'master' into load-apps-proper-masterThomas Müller2014-03-211-11/+26
|\ | | | | | | | | | | | | Conflicts: apps/files/ajax/rawlist.php cron.php ocs/v1.php
| * drop file cache migration OC5 -> OC6Thomas Müller2014-03-181-9/+0
| |
| * Added warning for trusted_domains after CLI upgradeVincent Petry2014-03-141-0/+26
| | | | | | | | | | If trusted_domains is not set after a CLI upgrade, show a warning in the output.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-02 14:56:18 +0000