update.sh 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538
  1. #!/usr/bin/env bash
  2. # Check permissions
  3. if [ "$(id -u)" -ne "0" ]; then
  4. echo "You need to be root"
  5. exit 1
  6. fi
  7. if [[ "$(uname -r)" =~ ^4\.15\.0-60 ]]; then
  8. echo "DO NOT RUN mailcow ON THIS UBUNTU KERNEL!";
  9. echo "Please update to 5.x or use another distribution."
  10. exit 1
  11. fi
  12. if [[ "$(uname -r)" =~ ^4\.4\. ]]; then
  13. if grep -q Ubuntu <<< $(uname -a); then
  14. echo "DO NOT RUN mailcow ON THIS UBUNTU KERNEL!"
  15. echo "Please update to linux-generic-hwe-16.04 by running \"apt-get install --install-recommends linux-generic-hwe-16.04\""
  16. exit 1
  17. fi
  18. echo "mailcow on a 4.4.x kernel is not supported. It may or may not work, please upgrade your kernel or continue at your own risk."
  19. read -p "Press any key to continue..." < /dev/tty
  20. fi
  21. # Exit on error and pipefail
  22. set -o pipefail
  23. # Setting high dc timeout
  24. export COMPOSE_HTTP_TIMEOUT=600
  25. # Add /opt/bin to PATH
  26. PATH=$PATH:/opt/bin
  27. umask 0022
  28. for bin in curl docker-compose docker git awk sha1sum; do
  29. if [[ -z $(which ${bin}) ]]; then echo "Cannot find ${bin}, exiting..."; exit 1; fi
  30. done
  31. export LC_ALL=C
  32. DATE=$(date +%Y-%m-%d_%H_%M_%S)
  33. BRANCH=$(git rev-parse --abbrev-ref HEAD)
  34. function prefetch_images() {
  35. [[ -z ${BRANCH} ]] && { echo -e "\e[33m\nUnknown branch...\e[0m"; exit 1; }
  36. git fetch origin #${BRANCH}
  37. while read image; do
  38. RET_C=0
  39. until docker pull ${image}; do
  40. RET_C=$((RET_C + 1))
  41. echo -e "\e[33m\nError pulling $image, retrying...\e[0m"
  42. [ ${RET_C} -gt 3 ] && { echo -e "\e[31m\nToo many failed retries, exiting\e[0m"; exit 1; }
  43. sleep 1
  44. done
  45. done < <(git show origin/${BRANCH}:docker-compose.yml | grep "image:" | awk '{ gsub("image:","", $3); print $2 }')
  46. }
  47. docker_garbage() {
  48. IMGS_TO_DELETE=()
  49. for container in $(grep -oP "image: \Kmailcow.+" docker-compose.yml); do
  50. REPOSITORY=${container/:*}
  51. TAG=${container/*:}
  52. V_MAIN=${container/*.}
  53. V_SUB=${container/*.}
  54. EXISTING_TAGS=$(docker images | grep ${REPOSITORY} | awk '{ print $2 }')
  55. for existing_tag in ${EXISTING_TAGS[@]}; do
  56. V_MAIN_EXISTING=${existing_tag/*.}
  57. V_SUB_EXISTING=${existing_tag/*.}
  58. # Not an integer
  59. [[ ! $V_MAIN_EXISTING =~ ^[0-9]+$ ]] && continue
  60. [[ ! $V_SUB_EXISTING =~ ^[0-9]+$ ]] && continue
  61. if [[ $V_MAIN_EXISTING == "latest" ]]; then
  62. echo "Found deprecated label \"latest\" for repository $REPOSITORY, it should be deleted."
  63. IMGS_TO_DELETE+=($REPOSITORY:$existing_tag)
  64. elif [[ $V_MAIN_EXISTING -lt $V_MAIN ]]; then
  65. echo "Found tag $existing_tag for $REPOSITORY, which is older than the current tag $TAG and should be deleted."
  66. IMGS_TO_DELETE+=($REPOSITORY:$existing_tag)
  67. elif [[ $V_SUB_EXISTING -lt $V_SUB ]]; then
  68. echo "Found tag $existing_tag for $REPOSITORY, which is older than the current tag $TAG and should be deleted."
  69. IMGS_TO_DELETE+=($REPOSITORY:$existing_tag)
  70. fi
  71. done
  72. done
  73. if [[ ! -z ${IMGS_TO_DELETE[*]} ]]; then
  74. echo "Run the following command to delete unused image tags:"
  75. echo
  76. echo " docker rmi ${IMGS_TO_DELETE[*]}"
  77. echo
  78. if [ ! $FORCE ]; then
  79. read -r -p "Do you want to delete old image tags right now? [y/N] " response
  80. if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then
  81. docker rmi ${IMGS_TO_DELETE[*]}
  82. else
  83. echo "OK, skipped."
  84. fi
  85. else
  86. echo "Skipped image removal because of force mode."
  87. fi
  88. fi
  89. echo -e "\e[32mFurther cleanup...\e[0m"
  90. echo "If you want to cleanup further garbage collected by Docker, please make sure all containers are up and running before cleaning your system by executing \"docker system prune\""
  91. }
  92. while (($#)); do
  93. case "${1}" in
  94. --check|-c)
  95. echo "Checking remote code for updates..."
  96. LATEST_REV=$(git ls-remote --exit-code --refs --quiet https://github.com/mailcow/mailcow-dockerized ${BRANCH} | cut -f1)
  97. if [ $? -ne 0 ]; then
  98. echo "A problem occurred while trying to fetch the latest revision from github."
  99. exit 99
  100. fi
  101. if [[ -z $(git log HEAD --pretty=format:"%H" | grep "${LATEST_REV}") ]]; then
  102. echo "Updated code is available."
  103. exit 0
  104. else
  105. echo "No updates available."
  106. exit 3
  107. fi
  108. ;;
  109. --ours)
  110. MERGE_STRATEGY=ours
  111. ;;
  112. --skip-start)
  113. SKIP_START=y
  114. ;;
  115. --gc)
  116. echo -e "\e[32mCollecting garbage...\e[0m"
  117. docker_garbage
  118. exit 0
  119. ;;
  120. --prefetch)
  121. echo -e "\e[32mPrefetching images...\e[0m"
  122. prefetch_images
  123. exit 0
  124. ;;
  125. -f|--force)
  126. echo -e "\e[32mForcing Update...\e[0m"
  127. FORCE=y
  128. ;;
  129. --help|-h)
  130. echo './update.sh [-c|--check, --ours, --gc, --skip-start, -h|--help]
  131. -c|--check - Check for updates and exit (exit codes => 0: update available, 3: no updates)
  132. --ours - Use merge strategy "ours" to solve conflicts in favor of non-mailcow code (local changes)
  133. --gc - Run garbage collector to delete old image tags
  134. --skip-start - Do not start mailcow after update
  135. -f|--force - Force update, do not ask questions
  136. '
  137. exit 1
  138. esac
  139. shift
  140. done
  141. [[ ! -f mailcow.conf ]] && { echo "mailcow.conf is missing"; exit 1;}
  142. chmod 600 mailcow.conf
  143. source mailcow.conf
  144. DOTS=${MAILCOW_HOSTNAME//[^.]};
  145. if [ ${#DOTS} -lt 2 ]; then
  146. echo "MAILCOW_HOSTNAME (${MAILCOW_HOSTNAME}) is not a FQDN!"
  147. echo "Please change it to a FQDN and run docker-compose down followed by docker-compose up -d"
  148. exit 1
  149. fi
  150. if grep --help 2>&1 | head -n 1 | grep -q -i "busybox"; then echo "BusybBox grep detected, please install gnu grep, \"apk add --no-cache --upgrade grep\""; exit 1; fi
  151. if cp --help 2>&1 | head -n 1 | grep -q -i "busybox"; then echo "BusybBox cp detected, please install coreutils, \"apk add --no-cache --upgrade coreutils\""; exit 1; fi
  152. CONFIG_ARRAY=(
  153. "SKIP_LETS_ENCRYPT"
  154. "SKIP_SOGO"
  155. "USE_WATCHDOG"
  156. "WATCHDOG_NOTIFY_EMAIL"
  157. "WATCHDOG_NOTIFY_BAN"
  158. "WATCHDOG_EXTERNAL_CHECKS"
  159. "SKIP_CLAMD"
  160. "SKIP_IP_CHECK"
  161. "ADDITIONAL_SAN"
  162. "DOVEADM_PORT"
  163. "IPV4_NETWORK"
  164. "IPV6_NETWORK"
  165. "LOG_LINES"
  166. "SNAT_TO_SOURCE"
  167. "SNAT6_TO_SOURCE"
  168. "COMPOSE_PROJECT_NAME"
  169. "SQL_PORT"
  170. "API_KEY"
  171. "API_KEY_READ_ONLY"
  172. "API_ALLOW_FROM"
  173. "MAILDIR_GC_TIME"
  174. "MAILDIR_SUB"
  175. "ACL_ANYONE"
  176. "SOLR_HEAP"
  177. "SKIP_SOLR"
  178. "ENABLE_SSL_SNI"
  179. "ALLOW_ADMIN_EMAIL_LOGIN"
  180. "SKIP_HTTP_VERIFICATION"
  181. "SOGO_EXPIRE_SESSION"
  182. "REDIS_PORT"
  183. )
  184. sed -i '$a\' mailcow.conf
  185. for option in ${CONFIG_ARRAY[@]}; do
  186. if [[ ${option} == "ADDITIONAL_SAN" ]]; then
  187. if ! grep -q ${option} mailcow.conf; then
  188. echo "Adding new option \"${option}\" to mailcow.conf"
  189. echo "${option}=" >> mailcow.conf
  190. fi
  191. elif [[ ${option} == "COMPOSE_PROJECT_NAME" ]]; then
  192. if ! grep -q ${option} mailcow.conf; then
  193. echo "Adding new option \"${option}\" to mailcow.conf"
  194. echo "COMPOSE_PROJECT_NAME=mailcowdockerized" >> mailcow.conf
  195. fi
  196. elif [[ ${option} == "DOVEADM_PORT" ]]; then
  197. if ! grep -q ${option} mailcow.conf; then
  198. echo "Adding new option \"${option}\" to mailcow.conf"
  199. echo "DOVEADM_PORT=127.0.0.1:19991" >> mailcow.conf
  200. fi
  201. elif [[ ${option} == "WATCHDOG_NOTIFY_EMAIL" ]]; then
  202. if ! grep -q ${option} mailcow.conf; then
  203. echo "Adding new option \"${option}\" to mailcow.conf"
  204. echo "WATCHDOG_NOTIFY_EMAIL=" >> mailcow.conf
  205. fi
  206. elif [[ ${option} == "LOG_LINES" ]]; then
  207. if ! grep -q ${option} mailcow.conf; then
  208. echo "Adding new option \"${option}\" to mailcow.conf"
  209. echo '# Max log lines per service to keep in Redis logs' >> mailcow.conf
  210. echo "LOG_LINES=9999" >> mailcow.conf
  211. fi
  212. elif [[ ${option} == "IPV4_NETWORK" ]]; then
  213. if ! grep -q ${option} mailcow.conf; then
  214. echo "Adding new option \"${option}\" to mailcow.conf"
  215. echo '# Internal IPv4 /24 subnet, format n.n.n. (expands to n.n.n.0/24)' >> mailcow.conf
  216. echo "IPV4_NETWORK=172.22.1" >> mailcow.conf
  217. fi
  218. elif [[ ${option} == "IPV6_NETWORK" ]]; then
  219. if ! grep -q ${option} mailcow.conf; then
  220. echo "Adding new option \"${option}\" to mailcow.conf"
  221. echo '# Internal IPv6 subnet in fc00::/7' >> mailcow.conf
  222. echo "IPV6_NETWORK=fd4d:6169:6c63:6f77::/64" >> mailcow.conf
  223. fi
  224. elif [[ ${option} == "SQL_PORT" ]]; then
  225. if ! grep -q ${option} mailcow.conf; then
  226. echo "Adding new option \"${option}\" to mailcow.conf"
  227. echo '# Bind SQL to 127.0.0.1 on port 13306' >> mailcow.conf
  228. echo "SQL_PORT=127.0.0.1:13306" >> mailcow.conf
  229. fi
  230. elif [[ ${option} == "API_KEY" ]]; then
  231. if ! grep -q ${option} mailcow.conf; then
  232. echo "Adding new option \"${option}\" to mailcow.conf"
  233. echo '# Create or override API key for web UI' >> mailcow.conf
  234. echo "#API_KEY=" >> mailcow.conf
  235. fi
  236. elif [[ ${option} == "API_KEY_READ_ONLY" ]]; then
  237. if ! grep -q ${option} mailcow.conf; then
  238. echo "Adding new option \"${option}\" to mailcow.conf"
  239. echo '# Create or override read-only API key for web UI' >> mailcow.conf
  240. echo "#API_KEY_READ_ONLY=" >> mailcow.conf
  241. fi
  242. elif [[ ${option} == "API_ALLOW_FROM" ]]; then
  243. if ! grep -q ${option} mailcow.conf; then
  244. echo "Adding new option \"${option}\" to mailcow.conf"
  245. echo '# Must be set for API_KEY to be active' >> mailcow.conf
  246. echo '# IPs only, no networks (networks can be set via UI)' >> mailcow.conf
  247. echo "#API_ALLOW_FROM=" >> mailcow.conf
  248. fi
  249. elif [[ ${option} == "SNAT_TO_SOURCE" ]]; then
  250. if ! grep -q ${option} mailcow.conf; then
  251. echo "Adding new option \"${option}\" to mailcow.conf"
  252. echo '# Use this IPv4 for outgoing connections (SNAT)' >> mailcow.conf
  253. echo "#SNAT_TO_SOURCE=" >> mailcow.conf
  254. fi
  255. elif [[ ${option} == "SNAT6_TO_SOURCE" ]]; then
  256. if ! grep -q ${option} mailcow.conf; then
  257. echo "Adding new option \"${option}\" to mailcow.conf"
  258. echo '# Use this IPv6 for outgoing connections (SNAT)' >> mailcow.conf
  259. echo "#SNAT6_TO_SOURCE=" >> mailcow.conf
  260. fi
  261. elif [[ ${option} == "MAILDIR_GC_TIME" ]]; then
  262. if ! grep -q ${option} mailcow.conf; then
  263. echo "Adding new option \"${option}\" to mailcow.conf"
  264. echo '# Garbage collector cleanup' >> mailcow.conf
  265. echo '# Deleted domains and mailboxes are moved to /var/vmail/_garbage/timestamp_sanitizedstring' >> mailcow.conf
  266. echo '# How long should objects remain in the garbage until they are being deleted? (value in minutes)' >> mailcow.conf
  267. echo '# Check interval is hourly' >> mailcow.conf
  268. echo 'MAILDIR_GC_TIME=1440' >> mailcow.conf
  269. fi
  270. elif [[ ${option} == "ACL_ANYONE" ]]; then
  271. if ! grep -q ${option} mailcow.conf; then
  272. echo "Adding new option \"${option}\" to mailcow.conf"
  273. echo '# Set this to "allow" to enable the anyone pseudo user. Disabled by default.' >> mailcow.conf
  274. echo '# When enabled, ACL can be created, that apply to "All authenticated users"' >> mailcow.conf
  275. echo '# This should probably only be activated on mail hosts, that are used exclusivly by one organisation.' >> mailcow.conf
  276. echo '# Otherwise a user might share data with too many other users.' >> mailcow.conf
  277. echo 'ACL_ANYONE=disallow' >> mailcow.conf
  278. fi
  279. elif [[ ${option} == "SOLR_HEAP" ]]; then
  280. if ! grep -q ${option} mailcow.conf; then
  281. echo "Adding new option \"${option}\" to mailcow.conf"
  282. echo '# Solr heap size, there is no recommendation, please see Solr docs.' >> mailcow.conf
  283. echo '# Solr is a prone to run OOM on large systems and should be monitored. Unmonitored Solr setups are not recommended.' >> mailcow.conf
  284. echo '# Solr will refuse to start with total system memory below or equal to 2 GB.' >> mailcow.conf
  285. echo "SOLR_HEAP=1024" >> mailcow.conf
  286. fi
  287. elif [[ ${option} == "SKIP_SOLR" ]]; then
  288. if ! grep -q ${option} mailcow.conf; then
  289. echo "Adding new option \"${option}\" to mailcow.conf"
  290. echo '# Solr is disabled by default after upgrading from non-Solr to Solr-enabled mailcows.' >> mailcow.conf
  291. echo '# Disable Solr or if you do not want to store a readable index of your mails in solr-vol-1.' >> mailcow.conf
  292. echo "SKIP_SOLR=y" >> mailcow.conf
  293. fi
  294. elif [[ ${option} == "ENABLE_SSL_SNI" ]]; then
  295. if ! grep -q ${option} mailcow.conf; then
  296. echo "Adding new option \"${option}\" to mailcow.conf"
  297. echo '# Create seperate certificates for all domains - y/n' >> mailcow.conf
  298. echo '# this will allow adding more than 100 domains, but some email clients will not be able to connect with alternative hostnames' >> mailcow.conf
  299. echo '# see https://wiki.dovecot.org/SSL/SNIClientSupport' >> mailcow.conf
  300. echo "ENABLE_SSL_SNI=n" >> mailcow.conf
  301. fi
  302. elif [[ ${option} == "SKIP_SOGO" ]]; then
  303. if ! grep -q ${option} mailcow.conf; then
  304. echo "Adding new option \"${option}\" to mailcow.conf"
  305. echo '# Skip SOGo: Will disable SOGo integration and therefore webmail, DAV protocols and ActiveSync support (experimental, unsupported, not fully implemented) - y/n' >> mailcow.conf
  306. echo "SKIP_SOGO=n" >> mailcow.conf
  307. fi
  308. elif [[ ${option} == "MAILDIR_SUB" ]]; then
  309. if ! grep -q ${option} mailcow.conf; then
  310. echo "Adding new option \"${option}\" to mailcow.conf"
  311. echo '# MAILDIR_SUB defines a path in a users virtual home to keep the maildir in. Leave empty for updated setups.' >> mailcow.conf
  312. echo "#MAILDIR_SUB=Maildir" >> mailcow.conf
  313. echo "MAILDIR_SUB=" >> mailcow.conf
  314. fi
  315. elif [[ ${option} == "WATCHDOG_NOTIFY_BAN" ]]; then
  316. if ! grep -q ${option} mailcow.conf; then
  317. echo "Adding new option \"${option}\" to mailcow.conf"
  318. echo '# Notify about banned IP. Includes whois lookup.' >> mailcow.conf
  319. echo "WATCHDOG_NOTIFY_BAN=y" >> mailcow.conf
  320. fi
  321. elif [[ ${option} == "WATCHDOG_EXTERNAL_CHECKS" ]]; then
  322. if ! grep -q ${option} mailcow.conf; then
  323. echo "Adding new option \"${option}\" to mailcow.conf"
  324. echo '# Checks if mailcow is an open relay. Requires a SAL. More checks will follow.' >> mailcow.conf
  325. echo '# No data is collected. Opt-in and anonymous.' >> mailcow.conf
  326. echo '# Will only work with unmodified mailcow setups.' >> mailcow.conf
  327. echo "WATCHDOG_EXTERNAL_CHECKS=n" >> mailcow.conf
  328. fi
  329. elif [[ ${option} == "SOGO_EXPIRE_SESSION" ]]; then
  330. if ! grep -q ${option} mailcow.conf; then
  331. echo "Adding new option \"${option}\" to mailcow.conf"
  332. echo '# SOGo session timeout in minutes' >> mailcow.conf
  333. echo "SOGO_EXPIRE_SESSION=480" >> mailcow.conf
  334. fi
  335. elif [[ ${option} == "REDIS_PORT" ]]; then
  336. if ! grep -q ${option} mailcow.conf; then
  337. echo "Adding new option \"${option}\" to mailcow.conf"
  338. echo "REDIS_PORT=127.0.0.1:7654" >> mailcow.conf
  339. fi
  340. elif ! grep -q ${option} mailcow.conf; then
  341. echo "Adding new option \"${option}\" to mailcow.conf"
  342. echo "${option}=n" >> mailcow.conf
  343. fi
  344. done
  345. echo -en "Checking internet connection... "
  346. timeout 3 ping -c 1 9.9.9.9 > /dev/null
  347. if [[ $? != 0 ]]; then
  348. echo -e "\e[31mfailed\e[0m"
  349. exit 1
  350. else
  351. echo -e "\e[32mOK\e[0m"
  352. fi
  353. echo -e "\e[32mChecking for newer update script...\e[0m"
  354. SHA1_1=$(sha1sum update.sh)
  355. git fetch origin #${BRANCH}
  356. git checkout origin/${BRANCH} update.sh
  357. SHA1_2=$(sha1sum update.sh)
  358. if [[ ${SHA1_1} != ${SHA1_2} ]]; then
  359. echo "update.sh changed, please run this script again, exiting."
  360. chmod +x update.sh
  361. exit 2
  362. fi
  363. if [[ -f mailcow.conf ]]; then
  364. source mailcow.conf
  365. else
  366. echo -e "\e[31mNo mailcow.conf - is mailcow installed?\e[0m"
  367. exit 1
  368. fi
  369. if [ ! $FORCE ]; then
  370. read -r -p "Are you sure you want to update mailcow: dockerized? All containers will be stopped. [y/N] " response
  371. if [[ ! "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then
  372. echo "OK, exiting."
  373. exit 0
  374. fi
  375. fi
  376. echo -e "\e[32mValidating docker-compose stack configuration...\e[0m"
  377. if ! docker-compose config -q; then
  378. echo -e "\e[31m\nOh no, something went wrong. Please check the error message above.\e[0m"
  379. exit 1
  380. fi
  381. DIFF_DIRECTORY=update_diffs
  382. DIFF_FILE=${DIFF_DIRECTORY}/diff_before_update_$(date +"%Y-%m-%d-%H-%M-%S")
  383. mv diff_before_update* ${DIFF_DIRECTORY}/ 2> /dev/null
  384. if ! git diff-index --quiet HEAD; then
  385. echo -e "\e[32mSaving diff to ${DIFF_FILE}...\e[0m"
  386. mkdir -p ${DIFF_DIRECTORY}
  387. git diff --stat > ${DIFF_FILE}
  388. git diff >> ${DIFF_FILE}
  389. fi
  390. echo -e "\e[32mPrefetching images...\e[0m"
  391. prefetch_images
  392. echo -e "\e[32mStopping mailcow...\e[0m"
  393. sleep 2
  394. MAILCOW_CONTAINERS=($(docker-compose ps -q))
  395. docker-compose down
  396. echo -e "\e[32mChecking for remaining containers...\e[0m"
  397. sleep 2
  398. for container in "${MAILCOW_CONTAINERS[@]}"; do
  399. docker rm -f "$container" 2> /dev/null
  400. done
  401. # Silently fixing remote url from andryyy to mailcow
  402. git remote set-url origin https://github.com/mailcow/mailcow-dockerized
  403. echo -e "\e[32mCommitting current status...\e[0m"
  404. [[ -z "$(git config user.name)" ]] && git config user.name moo
  405. [[ -z "$(git config user.email)" ]] && git config user.email moo@cow.moo
  406. [[ ! -z $(git ls-files data/conf/rspamd/override.d/worker-controller-password.inc) ]] && git rm data/conf/rspamd/override.d/worker-controller-password.inc
  407. git add -u
  408. git commit -am "Before update on ${DATE}" > /dev/null
  409. echo -e "\e[32mFetching updated code from remote...\e[0m"
  410. git fetch origin #${BRANCH}
  411. echo -e "\e[32mMerging local with remote code (recursive, strategy: \"${MERGE_STRATEGY:-theirs}\", options: \"patience\"...\e[0m"
  412. git config merge.defaultToUpstream true
  413. git merge -X${MERGE_STRATEGY:-theirs} -Xpatience -m "After update on ${DATE}"
  414. # Need to use a variable to not pass return codes of if checks
  415. MERGE_RETURN=$?
  416. if [[ ${MERGE_RETURN} == 128 ]]; then
  417. echo -e "\e[31m\nOh no, what happened?\n=> You most likely added files to your local mailcow instance that were now added to the official mailcow repository. Please move them to another location before updating mailcow.\e[0m"
  418. exit 1
  419. elif [[ ${MERGE_RETURN} == 1 ]]; then
  420. echo -e "\e[93mPotenial conflict, trying to fix...\e[0m"
  421. git status --porcelain | grep -E "UD|DU" | awk '{print $2}' | xargs rm -v
  422. git add -A
  423. git commit -m "After update on ${DATE}" > /dev/null
  424. git checkout .
  425. echo -e "\e[32mRemoved and recreated files if necessary.\e[0m"
  426. elif [[ ${MERGE_RETURN} != 0 ]]; then
  427. echo -e "\e[31m\nOh no, something went wrong. Please check the error message above.\e[0m"
  428. echo
  429. echo "Run docker-compose up -d to restart your stack without updates or try again after fixing the mentioned errors."
  430. exit 1
  431. fi
  432. echo -e "\e[32mFetching new docker-compose version...\e[0m"
  433. sleep 2
  434. if [[ ! -z $(which pip) && $(pip list --local 2>&1 | grep -v DEPRECATION | grep -c docker-compose) == 1 ]]; then
  435. true
  436. #prevent breaking a working docker-compose installed with pip
  437. elif [[ $(curl -sL -w "%{http_code}" https://www.servercow.de/docker-compose/latest.php -o /dev/null) == "200" ]]; then
  438. LATEST_COMPOSE=$(curl -#L https://www.servercow.de/docker-compose/latest.php)
  439. COMPOSE_VERSION=$(docker-compose version --short)
  440. if [[ "$LATEST_COMPOSE" != "$COMPOSE_VERSION" ]]; then
  441. COMPOSE_PATH=$(which docker-compose)
  442. if [[ -w ${COMPOSE_PATH} ]]; then
  443. curl -#L https://github.com/docker/compose/releases/download/${LATEST_COMPOSE}/docker-compose-$(uname -s)-$(uname -m) > $COMPOSE_PATH
  444. chmod +x $COMPOSE_PATH
  445. else
  446. echo -e "\e[33mWARNING: $COMPOSE_PATH is not writable, but new version $LATEST_COMPOSE is available (installed: $COMPOSE_VERSION)\e[0m"
  447. fi
  448. fi
  449. else
  450. echo -e "\e[33mCannot determine latest docker-compose version, skipping...\e[0m"
  451. fi
  452. echo -e "\e[32mFetching new images, if any...\e[0m"
  453. sleep 2
  454. docker-compose pull
  455. # Fix missing SSL, does not overwrite existing files
  456. [[ ! -d data/assets/ssl ]] && mkdir -p data/assets/ssl
  457. cp -n -d data/assets/ssl-example/*.pem data/assets/ssl/
  458. echo -e "Checking IPv6 settings... "
  459. if grep -q 'SYSCTL_IPV6_DISABLED=1' mailcow.conf; then
  460. echo
  461. echo '!! IMPORTANT !!'
  462. echo
  463. echo 'SYSCTL_IPV6_DISABLED was removed due to complications. IPv6 can be disabled by editing "docker-compose.yml" and setting "enable_ipv6: true" to "enable_ipv6: false".'
  464. echo 'This setting will only be active after a complete shutdown of mailcow by running "docker-compose down" followed by "docker-compose up -d".'
  465. echo
  466. echo '!! IMPORTANT !!'
  467. echo
  468. read -p "Press any key to continue..." < /dev/tty
  469. fi
  470. # Checking for old project name bug
  471. sed -i 's#COMPOSEPROJECT_NAME#COMPOSE_PROJECT_NAME#g' mailcow.conf
  472. # Fix Rspamd maps
  473. if [ -f data/conf/rspamd/custom/global_from_blacklist.map ]; then
  474. mv data/conf/rspamd/custom/global_from_blacklist.map data/conf/rspamd/custom/global_smtp_from_blacklist.map
  475. fi
  476. if [ -f data/conf/rspamd/custom/global_from_whitelist.map ]; then
  477. mv data/conf/rspamd/custom/global_from_whitelist.map data/conf/rspamd/custom/global_smtp_from_whitelist.map
  478. fi
  479. # Fix deprecated metrics.conf
  480. if [ -f "data/conf/rspamd/local.d/metrics.conf" ]; then
  481. if [ ! -z "$(git diff --name-only origin/master data/conf/rspamd/local.d/metrics.conf)" ]; then
  482. echo -e "\e[33mWARNING\e[0m - Please migrate your customizations of data/conf/rspamd/local.d/metrics.conf to actions.conf and groups.conf after this update."
  483. echo "The deprecated configuration file metrics.conf will be moved to metrics.conf_deprecated after updating mailcow."
  484. fi
  485. mv data/conf/rspamd/local.d/metrics.conf data/conf/rspamd/local.d/metrics.conf_deprecated
  486. fi
  487. if [[ ${SKIP_START} == "y" ]]; then
  488. echo -e "\e[33mNot starting mailcow, please run \"docker-compose up -d --remove-orphans\" to start mailcow.\e[0m"
  489. else
  490. echo -e "\e[32mStarting mailcow...\e[0m"
  491. sleep 2
  492. docker-compose up -d --remove-orphans
  493. fi
  494. echo -e "\e[32mCollecting garbage...\e[0m"
  495. docker_garbage
  496. #echo "In case you encounter any problem, hard-reset to a state before updating mailcow:"
  497. #echo
  498. #git reflog --color=always | grep "Before update on "
  499. #echo
  500. #echo "Use \"git reset --hard hash-on-the-left\" and run docker-compose up -d afterwards."