mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-10 09:35:39 +00:00
UNITRONIX
527197fe0a
Resolve CGNAT ambiguous initiator via PunchHole udp_port (#399), allow panel Web Remote to relay to WS-mode targets (#397), ship Support Agent sources in Docker images (#391), write admin credentials when ADMIN_PASSWORD is set (#385), harden native go mod download (#371), self-host Material Icons (#393), and tighten mobile Settings tabs (#396). Refs #399 #397 #388 #391 #385 #371 #393 #396 #387 #368 #375 #386 #392 #394 #395 Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
82 lines
3.4 KiB
Bash
82 lines
3.4 KiB
Bash
#!/bin/sh
|
|
# Detect stale auth.db on a fresh primary SQLite DB (issue #385).
|
|
# Partial volume wipes leave legacy auth.db in /app/data while bootstrap
|
|
# regenerates /opt/rustdesk/.admin_credentials — panel login then fails.
|
|
# Source after bootstrap-admin-credentials.sh on console / all-in-one entrypoints.
|
|
set -e
|
|
|
|
_guard_run_as_betterdesk() {
|
|
if [ "$(id -u)" = "0" ] && command -v su-exec >/dev/null 2>&1; then
|
|
su-exec betterdesk "$@"
|
|
else
|
|
"$@"
|
|
fi
|
|
}
|
|
|
|
guard_sqlite_auth_split() {
|
|
case "${DB_TYPE:-sqlite}" in
|
|
postgres|postgresql) return 0 ;;
|
|
esac
|
|
case "${DB_URL:-${DATABASE_URL:-}}" in
|
|
postgres://*|postgresql://*) return 0 ;;
|
|
esac
|
|
|
|
_mode=$(printf '%s' "${SQLITE_AUTH_DB_MODE:-}" | tr '[:upper:]' '[:lower:]')
|
|
if [ "$_mode" = "legacy" ] || [ "$_mode" = "consolidated" ]; then
|
|
return 0
|
|
fi
|
|
|
|
_auth_db="${AUTH_DB_PATH:-${DATA_DIR:-/app/data}/auth.db}"
|
|
_primary_db="${DB_PATH:-${DB_URL:-/opt/rustdesk/db_v2.sqlite3}}"
|
|
|
|
[ -f "$_auth_db" ] || return 0
|
|
command -v sqlite3 >/dev/null 2>&1 || return 0
|
|
|
|
_has_consolidation_marker=0
|
|
if [ -f "$_primary_db" ]; then
|
|
if _guard_run_as_betterdesk sqlite3 "$_primary_db" \
|
|
"SELECT 1 FROM betterdesk_migrations WHERE name='sqlite_auth_consolidation_v1' AND status='complete' LIMIT 1;" 2>/dev/null | grep -q 1; then
|
|
_has_consolidation_marker=1
|
|
fi
|
|
fi
|
|
[ "$_has_consolidation_marker" -eq 1 ] && return 0
|
|
|
|
_auth_users=$(_guard_run_as_betterdesk sqlite3 "$_auth_db" \
|
|
"SELECT COUNT(*) FROM users;" 2>/dev/null || echo "")
|
|
case "$_auth_users" in
|
|
''|*[!0-9]*) _auth_users=0 ;;
|
|
esac
|
|
|
|
if [ "$_auth_users" -eq 0 ]; then
|
|
echo "WARN [#385]: Removing empty orphan auth.db ($_auth_db) — fresh installs authenticate via db_v2.sqlite3." >&2
|
|
_guard_run_as_betterdesk rm -f "$_auth_db" "${_auth_db}-wal" "${_auth_db}-shm" 2>/dev/null || true
|
|
return 0
|
|
fi
|
|
|
|
_primary_users=0
|
|
if [ -f "$_primary_db" ]; then
|
|
_primary_users=$(_guard_run_as_betterdesk sqlite3 "$_primary_db" \
|
|
"SELECT COUNT(*) FROM users;" 2>/dev/null || echo "0")
|
|
case "$_primary_users" in
|
|
''|*[!0-9]*) _primary_users=0 ;;
|
|
esac
|
|
fi
|
|
|
|
if [ "$_primary_users" -eq 0 ]; then
|
|
echo "ERROR [#385]: Split Docker volume state detected." >&2
|
|
echo " $_auth_db has $_auth_users user(s), but the primary database ($_primary_db) has none." >&2
|
|
echo " Preferred recovery for a deliberate split layout: set SQLITE_AUTH_DB_MODE=legacy" >&2
|
|
echo " (keeps panel accounts in auth.db; does NOT wipe data)." >&2
|
|
echo " Only wipe BOTH data stores on disposable test installs:" >&2
|
|
echo " docker compose down && rm -rf <betterdesk-data>/* <console-data>/*" >&2
|
|
echo " Then: ADMIN_PASSWORD='YourSecurePassword123' docker compose up -d" >&2
|
|
echo " Keep INIT_ADMIN_PASS / DEFAULT_ADMIN_PASSWORD mapped in compose (see docker-compose.quick.single.yml)." >&2
|
|
echo " Docs: docs/docker/DOCKER_TROUBLESHOOTING.md" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "WARN [#385]: Legacy auth.db present without SQLite consolidation marker." >&2
|
|
echo " Panel login uses $_auth_db — .admin_credentials alone may not match." >&2
|
|
echo " If you wiped only /opt/rustdesk, also reset /app/data or use password reset." >&2
|
|
}
|