Backup enterprise-manage password hash file if present

Author: rtomayko

bin/ghe-backup

@@ -94,9 +94,25 @@ echo "Backing up GitHub settings ..."
 ghe-ssh "$host" -- 'ghe-export-settings' > settings.json ||
 failures="$failures settings"
 
+# transfer license file
 ghe-ssh "$host" -- "cat '$GHE_REMOTE_LICENSE_FILE'" > enterprise.ghl ||
 failures="$failures license"
 
+# transfer enterprise manage password hash if running against a v2.x instance.
+if [ "$GHE_VERSION_MAJOR" -ge 2 ]; then
+    manage_password_file="$GHE_REMOTE_DATA_USER_DIR/common/manage-password"
+    if echo "sudo cat '$manage_password_file' 2>/dev/null || true" |
+       ghe-ssh "$host" -- /bin/sh > manage-password+
+    then
+        if [ -n "$(cat manage-password+)" ]; then
+            mv manage-password+ manage-password
+        fi
+    else
+        unlink manage-password+
+        failures="$failures manage-password"
+    fi
+fi
+
 echo "Backing up SSH authorized keys ..."
 ghe-ssh "$host" -- 'ghe-export-authorized-keys' > authorized-keys.json ||
 failures="$failures authorized-keys"

test/test-ghe-backup.sh

@@ -13,6 +13,10 @@ cd "$GHE_REMOTE_DATA_USER_DIR/pages"
 mkdir -p alice bob
 touch alice/index.html bob/index.html
 
+# Create a fake manage password file
+mkdir -p "$GHE_REMOTE_DATA_USER_DIR/common"
+echo "fake password hash data" > "$GHE_REMOTE_DATA_USER_DIR/common/manage-password"
+
 # Create some fake elasticsearch data in the remote data directory
 mkdir -p "$GHE_REMOTE_DATA_USER_DIR/elasticsearch"
 cd "$GHE_REMOTE_DATA_USER_DIR/elasticsearch"
@@ -102,6 +106,11 @@ begin_test "ghe-backup first snapshot"
         # verify all ES data was transferred from snapshot directory
         diff -ru "$GHE_REMOTE_DATA_USER_DIR/elasticsearch-snapshots" "$GHE_DATA_DIR/current/elasticsearch"
     fi
+
+    # verify manage-password file was backed up under v2.x VMs
+    if [ "$GHE_VERSION_MAJOR" -ge 2 ]; then
+        [ "$(cat "$GHE_DATA_DIR/current/manage-password")" = "fake password hash data" ]
+    fi
 )
 end_test
 
@@ -167,6 +176,11 @@ begin_test "ghe-backup subsequent snapshot"
         # verify all ES data was transferred from snapshot directory
         diff -ru "$GHE_REMOTE_DATA_USER_DIR/elasticsearch-snapshots" "$GHE_DATA_DIR/current/elasticsearch"
     fi
+
+    # verify manage-password file was backed up under v2.x VMs
+    if [ "$GHE_VERSION_MAJOR" -ge 2 ]; then
+        [ "$(cat "$GHE_DATA_DIR/current/manage-password")" = "fake password hash data" ]
+    fi
 )
 end_test
 
@@ -208,5 +222,18 @@ begin_test "ghe-backup fails fast when other run in progress"
 
     ln -s 1 "$GHE_DATA_DIR/in-progress"
     ! ghe-backup
+
+    unlink "$GHE_DATA_DIR/in-progress"
+)
+end_test
+
+begin_test "ghe-backup without manage-password file"
+(
+    set -e
+
+    unlink "$GHE_REMOTE_DATA_USER_DIR/common/manage-password"
+    ghe-backup
+
+    [ ! -f "$GHE_DATA_DIR/current/manage-password" ]
 )
 end_test