mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-09-16 12:01:36 +02:00
Divarion_D
758a9cab0b
Mechanical, behaviour-preserving reformat produced by 'make cs-fix' under the new build/phpcs.xml.dist ruleset: K&R braces, tab indentation, and the other whitespace normalisations. No logic changes.
350 lines
14 KiB
PHP
350 lines
14 KiB
PHP
<?php
|
|
|
|
namespace XcVm\Cli\Commands;
|
|
|
|
use XcVm\Cli\CommandInterface;
|
|
use XcVm\Core\Backup\BackupService;
|
|
use XcVm\Core\Config\SettingsManager;
|
|
use XcVm\Core\Database\MigrationRunner;
|
|
use XcVm\Core\Logging\UpdateLogger;
|
|
use XcVm\Core\Updates\GitHubReleases;
|
|
use XcVm\Core\Updates\UpdateChannels;
|
|
use XcVm\Domain\Server\ServerRepository;
|
|
|
|
/**
|
|
* UpdateCommand — update command
|
|
*
|
|
* @package XC_VM_CLI_Commands
|
|
* @author Divarion_D <https://github.com/Divarion-D>
|
|
* @copyright 2025-2026 Vateron Media
|
|
* @link https://github.com/Vateron-Media/XC_VM
|
|
* @license AGPL-3.0 https://www.gnu.org/licenses/agpl-3.0.html
|
|
*/
|
|
|
|
class UpdateCommand implements CommandInterface {
|
|
public function getName(): string {
|
|
return 'update';
|
|
}
|
|
|
|
public function getDescription(): string {
|
|
return 'System update (update / post-update)';
|
|
}
|
|
|
|
/**
|
|
* The update/rollback flow shells out to `sudo` (the Python updater). In
|
|
* XC_VM's model the xc_vm user has NO sudoers entry, so that sudo only works
|
|
* when this process is already root — the sanctioned path is
|
|
* RootSignalsCronJob (which asserts root) launching `console.php update`.
|
|
* Run non-root, the nested sudo prompts for a password it can never read and
|
|
* the updater silently never starts. Fail fast here, before any state
|
|
* change, so a mistaken manual invocation cannot strand the server at
|
|
* status=5 (updating) with nothing left to reset it.
|
|
*/
|
|
private function assertRunAsRoot(): bool {
|
|
$rUser = posix_getpwuid(posix_geteuid())['name'] ?? '?';
|
|
if ($rUser !== 'root') {
|
|
echo "ERROR: this must run as root (current user: {$rUser}).\n";
|
|
echo " Trigger the update from the panel, or run it via sudo/as root.\n";
|
|
UpdateLogger::error('Aborted: must run as root, invoked as ' . $rUser);
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
public function execute(array $rArgs): int {
|
|
set_time_limit(0);
|
|
|
|
if (empty($rArgs[0])) {
|
|
return 0;
|
|
}
|
|
|
|
register_shutdown_function(function () {
|
|
global $db;
|
|
if (is_object($db)) {
|
|
$db->close_mysql();
|
|
}
|
|
});
|
|
|
|
global $db;
|
|
$gitRelease = new GitHubReleases(GIT_OWNER, GIT_REPO_MAIN, UpdateChannels::main());
|
|
$gitRelease->setTimeout(30);
|
|
|
|
$rCommand = $rArgs[0];
|
|
|
|
switch ($rCommand) {
|
|
case 'update':
|
|
UpdateLogger::reset();
|
|
if (!$this->assertRunAsRoot()) {
|
|
return 1;
|
|
}
|
|
$rIsMain = ServerRepository::getAll()[SERVER_ID]['is_main'];
|
|
$rServerType = $rIsMain ? 'MAIN' : 'LB';
|
|
echo "Checking for updates (server={$rServerType}, version=" . XC_VM_VERSION . ")...\n";
|
|
UpdateLogger::info('Update started; server=' . $rServerType . ', current version=' . XC_VM_VERSION);
|
|
|
|
$rLatest = $gitRelease->getLatestVersion(
|
|
$rIsMain ? XC_VM_VERSION : ServerRepository::getAll()[SERVER_ID]['xc_vm_version']
|
|
);
|
|
|
|
if ($rLatest === null) {
|
|
echo "Already up to date.\n";
|
|
UpdateLogger::info('Already up to date, no action needed');
|
|
return 0;
|
|
}
|
|
|
|
echo "New version available: {$rLatest}\n";
|
|
UpdateLogger::info('New version found: ' . $rLatest);
|
|
|
|
if ($rIsMain) {
|
|
$UpdateData = $gitRelease->getUpdateFile("main", XC_VM_VERSION);
|
|
} else {
|
|
$UpdateData = $gitRelease->getUpdateFile("lb_update", ServerRepository::getAll()[SERVER_ID]['xc_vm_version']);
|
|
}
|
|
|
|
if (!$UpdateData || empty($UpdateData['url'])) {
|
|
echo "ERROR: Failed to get update file URL.\n";
|
|
UpdateLogger::error('Failed to get update file URL');
|
|
return 1;
|
|
}
|
|
|
|
if (empty($UpdateData['md5'])) {
|
|
$rAssetName = $rIsMain ? 'xc_vm.tar.gz' : 'loadbalancer.tar.gz';
|
|
$rHashUrl = "https://github.com/" . GIT_OWNER . "/" . GIT_REPO_MAIN . "/releases/download/{$rLatest}/hashes.md5";
|
|
echo "WARNING: Could not fetch MD5 hash. Retrying...\n";
|
|
echo " Hash URL: {$rHashUrl}\n";
|
|
UpdateLogger::info('MD5 hash fetch failed for ' . $rAssetName . ', retrying...');
|
|
$UpdateData['md5'] = $gitRelease->getAssetHash($rLatest, $rAssetName);
|
|
if (empty($UpdateData['md5'])) {
|
|
echo "ERROR: Failed to get MD5 hash after retry.\n";
|
|
echo " Check if hashes.md5 exists in release {$rLatest} on GitHub.\n";
|
|
UpdateLogger::error('Failed to get MD5 hash for version ' . $rLatest);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
echo "Downloading update...\n";
|
|
UpdateLogger::info('Downloading update file...');
|
|
$rOutputDir = TMP_PATH . '.update.tar.gz';
|
|
$rDownloaded = $this->downloadFile($UpdateData['url'], $rOutputDir);
|
|
|
|
if (!$rDownloaded) {
|
|
echo "ERROR: Download failed.\n";
|
|
UpdateLogger::error('Download failed from: ' . $UpdateData['url']);
|
|
return 1;
|
|
}
|
|
|
|
$rFileMd5 = md5_file($rOutputDir);
|
|
if ($rFileMd5 !== $UpdateData['md5']) {
|
|
echo "ERROR: MD5 checksum mismatch.\n";
|
|
UpdateLogger::error('MD5 mismatch: expected=' . $UpdateData['md5'] . ', got=' . $rFileMd5);
|
|
@unlink($rOutputDir);
|
|
return 1;
|
|
}
|
|
|
|
echo "Download OK, MD5 verified (" . filesize($rOutputDir) . " bytes).\n";
|
|
UpdateLogger::info('Download OK, MD5 verified, size=' . filesize($rOutputDir) . ' bytes');
|
|
|
|
// Pre-flight the launcher before flipping status: a missing
|
|
// interpreter or updater script must not strand the server at
|
|
// status=5 with nothing left running to reset it.
|
|
$rUpdater = MAIN_HOME . 'update';
|
|
if (!is_file($rUpdater) || !is_executable('/usr/bin/python3')) {
|
|
echo "ERROR: updater not launchable (script or python3 missing).\n";
|
|
UpdateLogger::error('Updater not launchable: script=' . $rUpdater . ', interpreter=/usr/bin/python3');
|
|
@unlink($rOutputDir);
|
|
return 1;
|
|
}
|
|
|
|
$db->query('UPDATE `servers` SET `status` = 5 WHERE `id` = ?;', SERVER_ID);
|
|
UpdateLogger::info('Server status set to 5 (updating), launching system update...');
|
|
|
|
echo "Launching system update...\n";
|
|
$rLogFile = UpdateLogger::getLogFile();
|
|
$rCmd = 'sudo /usr/bin/python3 ' . escapeshellarg($rUpdater) . ' '
|
|
. escapeshellarg($rOutputDir) . ' '
|
|
. escapeshellarg($UpdateData['md5'])
|
|
. ' >> ' . escapeshellarg($rLogFile) . ' 2>&1 &';
|
|
shell_exec($rCmd);
|
|
exit(1);
|
|
|
|
case 'rollback':
|
|
UpdateLogger::reset();
|
|
if (!$this->assertRunAsRoot()) {
|
|
return 1;
|
|
}
|
|
$rTarget = isset($rArgs[1]) ? trim((string) $rArgs[1]) : '';
|
|
|
|
if (!preg_match('/^\d+\.\d+\.\d+$/', $rTarget)) {
|
|
echo "ERROR: invalid target version.\n";
|
|
UpdateLogger::error('Rollback aborted: invalid target version "' . $rTarget . '"');
|
|
return 1;
|
|
}
|
|
if (version_compare($rTarget, XC_VM_VERSION, '>=')) {
|
|
echo "ERROR: target {$rTarget} is not older than current " . XC_VM_VERSION . ".\n";
|
|
UpdateLogger::error('Rollback aborted: target ' . $rTarget . ' >= current ' . XC_VM_VERSION);
|
|
return 1;
|
|
}
|
|
|
|
$rIsMain = ServerRepository::getAll()[SERVER_ID]['is_main'];
|
|
$rServerType = $rIsMain ? 'MAIN' : 'LB';
|
|
echo "Rolling back {$rServerType} from " . XC_VM_VERSION . " to {$rTarget}...\n";
|
|
UpdateLogger::info('Rollback started; server=' . $rServerType . ', ' . XC_VM_VERSION . ' -> ' . $rTarget);
|
|
|
|
// Safety net: dump the DB before applying the older tree (MAIN only —
|
|
// the DB lives there). Migrations are forward-only, so a downgrade
|
|
// cannot undo them; this backup is the recovery path if the older code
|
|
// mishandles newer schema. Abort the rollback if the dump fails.
|
|
if ($rIsMain) {
|
|
$rBackupFile = MAIN_HOME . 'backups/pre_rollback_' . XC_VM_VERSION . '_to_' . $rTarget . '_' . date('Y-m-d_H-i-s') . '.sql';
|
|
echo "Backing up database to " . basename($rBackupFile) . "...\n";
|
|
UpdateLogger::info('Creating pre-rollback DB backup: ' . basename($rBackupFile));
|
|
$db->close_mysql();
|
|
BackupService::create($rBackupFile);
|
|
$db->db_connect();
|
|
|
|
if (!file_exists($rBackupFile) || filesize($rBackupFile) <= 0) {
|
|
echo "ERROR: DB backup failed, aborting rollback.\n";
|
|
UpdateLogger::error('Pre-rollback DB backup failed (empty/missing), aborting');
|
|
return 1;
|
|
}
|
|
UpdateLogger::info('Pre-rollback DB backup OK (' . filesize($rBackupFile) . ' bytes)');
|
|
}
|
|
|
|
$UpdateData = $gitRelease->getVersionFile($rIsMain ? 'main' : 'lb_update', $rTarget);
|
|
|
|
if (!$UpdateData || empty($UpdateData['url'])) {
|
|
echo "ERROR: failed to resolve release asset for {$rTarget}.\n";
|
|
UpdateLogger::error('Failed to resolve rollback asset URL for ' . $rTarget);
|
|
return 1;
|
|
}
|
|
if (empty($UpdateData['md5'])) {
|
|
echo "ERROR: could not fetch MD5 for {$rTarget} (missing hashes.md5?).\n";
|
|
UpdateLogger::error('Missing MD5 for rollback version ' . $rTarget);
|
|
return 1;
|
|
}
|
|
|
|
echo "Downloading {$rTarget}...\n";
|
|
UpdateLogger::info('Downloading rollback archive...');
|
|
$rOutputDir = TMP_PATH . '.update.tar.gz';
|
|
|
|
if (!$this->downloadFile($UpdateData['url'], $rOutputDir)) {
|
|
echo "ERROR: download failed.\n";
|
|
UpdateLogger::error('Rollback download failed from: ' . $UpdateData['url']);
|
|
return 1;
|
|
}
|
|
|
|
$rFileMd5 = md5_file($rOutputDir);
|
|
if ($rFileMd5 !== $UpdateData['md5']) {
|
|
echo "ERROR: MD5 checksum mismatch.\n";
|
|
UpdateLogger::error('Rollback MD5 mismatch: expected=' . $UpdateData['md5'] . ', got=' . $rFileMd5);
|
|
@unlink($rOutputDir);
|
|
return 1;
|
|
}
|
|
|
|
echo "Download OK, MD5 verified (" . filesize($rOutputDir) . " bytes).\n";
|
|
UpdateLogger::info('Rollback download OK, MD5 verified, size=' . filesize($rOutputDir) . ' bytes');
|
|
|
|
// Pre-flight the launcher before flipping status: a missing
|
|
// interpreter or updater script must not strand the server at
|
|
// status=5 with nothing left running to reset it.
|
|
$rUpdater = MAIN_HOME . 'update';
|
|
if (!is_file($rUpdater) || !is_executable('/usr/bin/python3')) {
|
|
echo "ERROR: updater not launchable (script or python3 missing).\n";
|
|
UpdateLogger::error('Updater not launchable: script=' . $rUpdater . ', interpreter=/usr/bin/python3');
|
|
@unlink($rOutputDir);
|
|
return 1;
|
|
}
|
|
|
|
$db->query('UPDATE `servers` SET `status` = 5 WHERE `id` = ?;', SERVER_ID);
|
|
UpdateLogger::info('Server status set to 5 (updating), launching system rollback...');
|
|
|
|
echo "Launching system rollback...\n";
|
|
$rLogFile = UpdateLogger::getLogFile();
|
|
$rCmd = 'sudo /usr/bin/python3 ' . escapeshellarg($rUpdater) . ' '
|
|
. escapeshellarg($rOutputDir) . ' '
|
|
. escapeshellarg($UpdateData['md5'])
|
|
. ' >> ' . escapeshellarg($rLogFile) . ' 2>&1 &';
|
|
shell_exec($rCmd);
|
|
exit(1);
|
|
|
|
case 'post-update':
|
|
UpdateLogger::info('Post-update started');
|
|
|
|
if (ServerRepository::getAll()[SERVER_ID]['is_main']) {
|
|
UpdateLogger::info('Running database migrations...');
|
|
MigrationRunner::run($db);
|
|
}
|
|
UpdateLogger::info('Running file cleanup...');
|
|
MigrationRunner::runFileCleanup();
|
|
|
|
if (ServerRepository::getAll()[SERVER_ID]['is_main'] && SettingsManager::get('auto_update_lbs')) {
|
|
UpdateLogger::info('Broadcasting update signal to LB servers');
|
|
foreach (ServerRepository::getAll() as $rServer) {
|
|
if (($rServer['enabled'] && $rServer['status'] == 1 && time() - $rServer['last_check_ago'] <= 180) || !$rServer['is_main']) {
|
|
$db->query('INSERT INTO `signals`(`server_id`, `time`, `custom_data`) VALUES(?, ?, ?);', $rServer['id'], time(), json_encode(['action' => 'update']));
|
|
}
|
|
}
|
|
}
|
|
|
|
$db->query('UPDATE `servers` SET `status` = 1, `xc_vm_version` = ? WHERE `id` = ?;', XC_VM_VERSION, SERVER_ID);
|
|
$db->query('UPDATE `settings` SET `update_data` = NULL;');
|
|
UpdateLogger::info('Server status set to 1 (online), version=' . XC_VM_VERSION);
|
|
|
|
foreach (['http', 'https'] as $rType) {
|
|
$rPortConfig = file_get_contents(MAIN_HOME . 'bin/nginx/conf/ports/' . $rType . '.conf');
|
|
if (stripos($rPortConfig, ' reuseport') !== false) {
|
|
file_put_contents(MAIN_HOME . 'bin/nginx/conf/ports/' . $rType . '.conf', str_replace(' reuseport', '', $rPortConfig));
|
|
}
|
|
}
|
|
|
|
exec('sudo chown -R xc_vm:xc_vm ' . MAIN_HOME);
|
|
exec('sudo systemctl daemon-reload');
|
|
exec("sudo echo 'net.ipv4.ip_unprivileged_port_start=0' > /etc/sysctl.d/50-allports-nonroot.conf && sudo sysctl --system");
|
|
exec('sudo ' . PHP_BIN . ' ' . MAIN_HOME . 'console.php status');
|
|
|
|
// Pull/refresh the xc_fanout daemon binary to match this panel
|
|
// version (ADR 0003, Phase G) — nothing else does it. Idempotent
|
|
// (downloads only on a version mismatch) + background + best-effort
|
|
// so an unreachable GitHub never blocks the update; the RootSignals
|
|
// hourly self-heal is the backstop. Runs on every node (LBs too).
|
|
exec('sudo ' . PHP_BIN . ' ' . MAIN_HOME . 'console.php fanout_binary >/dev/null 2>&1 &');
|
|
|
|
// Pull/refresh the xcvm_core PHP extension to match the version
|
|
// published in the binaries repo — decoupled from the heavy runtime
|
|
// bundle, so an update alone would otherwise leave a stale extension.
|
|
// Picks the OpenSSL-ABI-matched build, installs atomically with a
|
|
// load-test + rollback, and reloads php-fpm. Idempotent + background
|
|
// + best-effort; the RootSignals hourly self-heal is the backstop.
|
|
// Runs on every node (LBs too) — this is what ships config_set_redis
|
|
// to LB nodes so their Redis target can be pointed at the main server.
|
|
exec('sudo ' . PHP_BIN . ' ' . MAIN_HOME . 'console.php xcvm_core >/dev/null 2>&1 &');
|
|
|
|
// Ensure GeoLite2 databases are present/refreshed after an update.
|
|
// They are no longer shipped in the update archive, so fetch them
|
|
// from the XC_VM_Update release. Best-effort: run in background so a
|
|
// slow/failed download never blocks or fails the update.
|
|
if (ServerRepository::getAll()[SERVER_ID]['is_main']) {
|
|
UpdateLogger::info('Refreshing GeoLite2 databases (background)');
|
|
exec('sudo ' . PHP_BIN . ' ' . MAIN_HOME . 'console.php cron:maxmind --force >/dev/null 2>&1 &');
|
|
}
|
|
|
|
UpdateLogger::info('Post-update completed successfully');
|
|
break;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
private function downloadFile($url, $targetPath): bool {
|
|
$rData = @fopen($url, 'rb');
|
|
if (!$rData) {
|
|
return false;
|
|
}
|
|
$rOutput = fopen($targetPath, 'wb');
|
|
stream_copy_to_stream($rData, $rOutput);
|
|
fclose($rData);
|
|
fclose($rOutput);
|
|
return true;
|
|
}
|
|
}
|