v0.29.2

scripts/deploy/deploy_runtime.py

@@ -359,8 +359,8 @@ def update(record: dict, binary: Path, sha: str, start: bool, refresh_geoip: boo
     geoip_lock_fd: int | None = None
     geoip_stage: Path | None = None
     try:
-        # Updates deliberately do not rewrite shell environment. Check the installer-
-        # managed PATH profile early and report the exact remediation target instead.
+        # Repair missing or stale installer-owned shell setup on upgrades.
+        install_shell_path(prefix)
         check_shell_path(prefix)
         # Repair stale root:root/0700 metadata before staging/network work and before
         # stopping the currently healthy service.
@@ -412,6 +412,8 @@ def update(record: dict, binary: Path, sha: str, start: bool, refresh_geoip: boo
                 if not healthy(record, record['version']):
                     raise RuntimeError(f'Update failed: {error}. Rollback restored code/data/unit but previous service health also failed. Backup: {backup}; failed state: {failed}') from error
             raise RuntimeError(f'Update failed: {error}. Previous code, private data and service unit were restored. Installation is still present; do not run install.sh. Fix the cause and rerun update.sh. Backup: {backup}; failed state: {failed}') from error
+        install_shell_path(prefix)
+        install_logrotate(replacement)
         print(f'Backup (contains private keys): {backup}')
         return replacement
     finally:
@@ -443,6 +445,7 @@ def install(record: dict, binary: Path, sha: str, start: bool, install_geoip: bo
     record.update(release=release, version=version, sha256=sha)
     switch(prefix, release)
     install_shell_path(prefix)
+    install_logrotate(record)
     # Record is written even if initial startup fails, so an update can repair it.
     write_private(prefix / 'install.json', json.dumps(record, indent=2).encode())
     write_private(UNIT_PATH, service_unit(record).encode(), 0o644)