v0.24.5

update.sh

@@ -0,0 +1,155 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+
+KEEP_RELEASES=3
+KEEP_BACKUPS=3
+
+prune_directories() {
+    local base="$1"
+    local keep="$2"
+    local protected="${3:-}"
+    local kept=0
+    local entry
+    local name
+
+    [[ -d "$base" ]] || return 0
+
+    if [[ -L "$base" ]]; then
+        printf 'WARNING: retention cleanup skipped for symlink: %s\n' "$base" >&2
+        return 0
+    fi
+
+    if [[ -n "$protected" && -d "$base/$protected" && ! -L "$base/$protected" ]]; then
+        kept=1
+    fi
+
+    while IFS= read -r -d '' entry; do
+        name="${entry##*/}"
+
+        if [[ -n "$protected" && "$name" == "$protected" ]]; then
+            continue
+        fi
+
+        if (( kept < keep )); then
+            kept=$((kept + 1))
+            continue
+        fi
+
+        printf 'Removing old retained item: %s\n' "$entry"
+        rm -rf -- "$entry"
+    done < <(
+        find "$base" \
+            -mindepth 1 \
+            -maxdepth 1 \
+            -type d \
+            -printf '%T@ %p\0' |
+        sort -z -nr
+    )
+}
+
+cleanup_installed_releases() {
+    local prefix="$1"
+    local releases="$prefix/releases"
+    local backups="$prefix/backups"
+    local current="$prefix/current"
+
+    local releases_real
+    local current_real
+    local current_release
+
+    prune_directories "$backups" "$KEEP_BACKUPS"
+
+    [[ -d "$releases" && ! -L "$releases" ]] || return 0
+
+    if [[ ! -L "$current" ]]; then
+        printf 'WARNING: release cleanup skipped: %s is not a symlink\n' "$current" >&2
+        return 0
+    fi
+
+    releases_real="$(readlink -f -- "$releases" || true)"
+    current_real="$(readlink -f -- "$current" || true)"
+
+    if [[ -z "$releases_real" || -z "$current_real" ]]; then
+        printf 'WARNING: release cleanup skipped: cannot resolve current release\n' >&2
+        return 0
+    fi
+
+    case "$current_real" in
+        "$releases_real"/*)
+            current_release="${current_real##*/}"
+            ;;
+        *)
+            printf 'WARNING: release cleanup skipped: current points outside %s\n' \
+                "$releases" >&2
+            return 0
+            ;;
+    esac
+
+    prune_directories "$releases" "$KEEP_RELEASES" "$current_release"
+}
+
+cleanup_source_backups() {
+    local target="$1"
+    local backup_dir
+
+    target="$(cd -- "$target" 2>/dev/null && pwd -P)" || return 0
+    backup_dir="$target/.upgrade-backup"
+
+    prune_directories "$backup_dir" "$KEEP_BACKUPS"
+}
+
+if [[ "${1:-}" == "--source-tree" ]]; then
+    shift
+
+    if (($# == 0)); then
+        exec python3 "$ROOT/scripts/upgrade.py"
+    fi
+
+    source_target="$1"
+
+    python3 "$ROOT/scripts/upgrade.py" "$@"
+    cleanup_source_backups "$source_target"
+
+    exit 0
+fi
+
+prefix="/opt/rustproxy"
+plan=0
+
+args=("$@")
+
+for ((i = 0; i < ${#args[@]}; i++)); do
+    case "${args[i]}" in
+        --prefix)
+            if ((i + 1 < ${#args[@]})); then
+                prefix="${args[i + 1]}"
+                i=$((i + 1))
+            fi
+            ;;
+        --prefix=*)
+            prefix="${args[i]#--prefix=}"
+            ;;
+        --plan)
+            plan=1
+            ;;
+    esac
+done
+
+python3 "$ROOT/scripts/deploy.py" update "$@"
+if ((plan)); then
+    exit 0
+fi
+
+if command -v flock >/dev/null 2>&1; then
+    exec {cleanup_lock_fd}>>"$prefix/.deploy.lock"
+    flock -x "$cleanup_lock_fd"
+
+    cleanup_installed_releases "$prefix"
+
+    flock -u "$cleanup_lock_fd"
+    exec {cleanup_lock_fd}>&-
+else
+    printf 'WARNING: flock unavailable; retention cleanup skipped\n' >&2
+fi