Merge branch 'r71691-init-linotp-db-after-upgrade' into r71691-init-linotp-db-after-upgrade-PR-devel-2.x

Author: nfawbert

roles/debian/apt_unattended_upgrades/tasks/main.yml

@@ -25,22 +25,22 @@
     force: true
   when: apt_unattended_upgrades.enable
 
-- name: Copy unattended-upgrades linotp configuration file.
+- name: Copy unattended-upgrades linotp APT hook script.
   ansible.builtin.template:
-    src: 79linotp-pre-backup.j2
-    dest: /etc/apt/apt.conf.d/79linotp-pre-backup
+    src: linotp-apt-hook.sh.j2
+    dest: /usr/local/sbin/linotp-apt-hook.sh
     owner: root
     group: root
-    mode: "0644"
+    mode: "0755"
     force: true
   when:
     - apt_unattended_upgrades.enable
     - apt_unattended_upgrades.linotp
 
 - name: Copy unattended-upgrades linotp configuration file.
   ansible.builtin.template:
-    src: 80linotp-post-init.j2
-    dest: /etc/apt/apt.conf.d/80linotp-post-init
+    src: 79linotp-pre-and-post.j2
+    dest: /etc/apt/apt.conf.d/79linotp-pre-and-post
     owner: root
     group: root
     mode: "0644"

roles/debian/apt_unattended_upgrades/templates/79linotp-pre-and-post.j2

@@ -0,0 +1,3 @@
+// r71691 Makes sure linotp database is backed up prior to upgrade.
+DPkg::Pre-Invoke  { "/usr/local/sbin/linotp-apt-hook.sh"; };
+DPkg::Post-Invoke { "/usr/local/sbin/linotp-apt-hook.sh"; };

roles/debian/apt_unattended_upgrades/templates/79linotp-pre-backup.j2

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+LOG="/var/log/linotp-upgrade.log"
+BACKUP_DIR="/home/deploy/linotp_dbbackups"
+CREDS="/home/deploy/.mysql.creds"
+
+if apt list --upgradable 2>/dev/null | grep -q '^linotp/'; then
+    echo "[linotp-pre] linotp will be upgraded. Backing up database..." | tee -a "$LOG"
+    mkdir -p "$BACKUP_DIR"
+    mysqldump --defaults-file="$CREDS" linotp > "$BACKUP_DIR/linotp_backup_$(date +%F_%H-%M-%S).sql" && \
+        echo "[linotp-pre] Backup complete." | tee -a "$LOG" || \
+        echo "[linotp-pre] WARNING: Backup failed!" | tee -a "$LOG"
+fi
+
+if grep -q 'Upgrade: linotp:' /var/log/apt/history.log; then
+    echo "[linotp-post] linotp was upgraded. Running database init..." | tee -a "$LOG"
+    linotp init database && \
+        echo "[linotp-post] linotp init database completed." | tee -a "$LOG" || \
+        echo "[linotp-post] linotp init database failed!" | tee -a "$LOG"
+fi