37 lines
1.5 KiB
Bash
Executable File
37 lines
1.5 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
umask 077
|
|
dest=/data/backups/redis
|
|
install -d -o root -g root -m 0700 "$dest"
|
|
[ "$(realpath "$dest")" = "/data/backups/redis" ] || exit 2
|
|
exec 9>/run/lock/lisglosips-redis-backup.lock
|
|
flock -n 9 || { echo "Redis backup already running" >&2; exit 3; }
|
|
set -a
|
|
. /etc/lisglosips/secrets/redis-backup.env
|
|
set +a
|
|
export REDISCLI_AUTH="$REDIS_PASSWORD"
|
|
stamp=$(date -u +%Y%m%dT%H%M%SZ)
|
|
tmp=$(mktemp -d "$dest/.tmp-$stamp.XXXXXX")
|
|
trap 'rm -rf "$tmp"' EXIT
|
|
redis_cmd=(redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" --user "$REDIS_USER" --no-auth-warning)
|
|
"${redis_cmd[@]}" PING | grep -qx PONG
|
|
"${redis_cmd[@]}" BGSAVE >/dev/null
|
|
for _ in $(seq 1 60); do
|
|
info=$("${redis_cmd[@]}" INFO persistence | tr -d '\r')
|
|
in_progress=$(printf '%s\n' "$info" | awk -F: '/^rdb_bgsave_in_progress:/{print $2}')
|
|
status=$(printf '%s\n' "$info" | awk -F: '/^rdb_last_bgsave_status:/{print $2}')
|
|
[ "$in_progress" = "0" ] && [ "$status" = "ok" ] && break
|
|
sleep 1
|
|
done
|
|
[ "$in_progress" = "0" ] && [ "$status" = "ok" ]
|
|
install -o root -g root -m 0600 /var/lib/redis/dump.rdb "$tmp/dump.rdb"
|
|
redis-check-rdb "$tmp/dump.rdb" > "$tmp/redis-check-rdb.txt"
|
|
"${redis_cmd[@]}" INFO server | tr -d '\r' | grep -E '^(redis_version|os|arch_bits|process_id|tcp_port)' > "$tmp/metadata.txt"
|
|
(cd "$tmp" && sha256sum dump.rdb metadata.txt > SHA256SUMS)
|
|
chmod 0600 "$tmp"/*
|
|
final="$dest/$stamp"
|
|
mv "$tmp" "$final"
|
|
trap - EXIT
|
|
find "$dest" -mindepth 1 -maxdepth 1 -type d -name '20*T*Z' -mtime +14 -exec rm -rf -- {} +
|
|
echo "$final"
|