chore: publish 2.1.1+10.11.7 release

Re: coop-cloud/recipes-catalogue-json#4

.drone.yml

@@ -3,10 +3,12 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
   - name: deployment
-    image: decentral1se/stack-ssh-deploy:latest
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
     settings:
       host: swarm-test.autonomic.zone
       stack: mattermost
+      networks:
+       - proxy
       purge: true
       deploy_key:
         from_secret: drone_ssh_swarm_test
@@ -24,33 +26,26 @@ steps:
         from_secret: autono_bot_access_token
     depends_on:
     - deployment
-  when:
-    status:
-      - failure
+    when:
+      status:
+        - failure
 trigger:
   branch:
     - main
 
 ---
 kind: pipeline
-name: recipe release
+name: generate recipe catalogue
 steps:
   - name: release a new version
-    image: decentral1se/drone-abra:latest
-    settings:
-      command: recipe mattermost release
-      deploy_key:
-        from_secret: abra_bot_deploy_key
-
-  - name: trigger downstream builds
     image: plugins/downstream
     settings:
-      server: https://drone.autonomic.zone
+      server: https://build.coopcloud.tech
       token:
-        from_secret: decentral1se_token
+        from_secret: drone_abra-bot_token
       fork: true
       repositories:
-        - coop-cloud/auto-apps-json
-    depends_on:
-      - release a new version
-on
+        - toolshed/auto-recipes-catalogue-json
+
+trigger:
+  event: tag

.env.sample

@@ -1,4 +1,4 @@
-TYPE=mattermost
+TYPE=mattermost-lts
 
 # Domain of service
 DOMAIN=mattermost.example.com

README.md

@@ -2,14 +2,14 @@
 
 <!-- metadata -->
 
-* **Category**:
-* **Status**: 
-* **Image**:
-* **Healthcheck**: N
-* **Backups**: N
-* **Email**: 
-* **Tests**: N
-* **SSO**: N
+* **Category**: Apps
+* **Status**: 3
+* **Image**: [`mattermost/mattermost-team-edition`](https://hub.docker.com/r/mattermost/mattermost-team-edition), 4, upstream
+* **Healthcheck**: No
+* **Backups**: Yes
+* **Email**: 1
+* **Tests**: 2
+* **SSO**: No
 
 <!-- endmetadata -->
 

abra.sh

@@ -1 +1,2 @@
-export ENTRYPOINT_VERSION=v1
+export ABRA_MATTERMOST_ENTRYPOINT_VERSION=v2
+export BUSYBOX_VERSION=v1

compose.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   app:
-    image: mattermost/mattermost-team-edition:8.0.1
+    image: mattermost/mattermost-team-edition:10.11.7
     environment:
       - TZ
       - MM_SQLSETTINGS_DRIVERNAME=postgres
@@ -28,11 +28,16 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=0.1.0+8.0.1"
+        - "coop-cloud.${STACK_NAME}.version=2.1.1+10.11.7"
+        - "backupbot.backup=true"
+        - "backupbot.backup.path=/mattermost,/etc/ssl"
     configs:
       - source: abra_mattermost_entrypoint
         target: /abra-mattermost-entrypoint.sh
         mode: 0555
+      - source: busybox
+        target: /bin/busybox
+        mode: 0555
     secrets:
       - postgres_password
     entrypoint: /abra-mattermost-entrypoint.sh
@@ -50,6 +55,12 @@ services:
       - postgres_password
     networks:
       - internal
+    deploy:
+      labels:
+        backupbot.backup: "true"
+        backupbot.backup.pre-hook: "PGPASSWORD=$$(cat $${POSTGRES_PASSWORD_FILE}) pg_dump -U $${POSTGRES_USER} $${POSTGRES_DB} > /var/lib/postgresql/data/postgres-backup.sql"
+        backupbot.backup.post-hook: "rm -rf /var/lib/postgresql/data/postgres-backup.sql"
+        backupbot.backup.path: "/var/lib/postgresql/data/"
 
 
 secrets:
@@ -59,8 +70,11 @@ secrets:
 
 configs:
   abra_mattermost_entrypoint:
-    name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
+    name: ${STACK_NAME}_entrypoint_${ABRA_MATTERMOST_ENTRYPOINT_VERSION}
     file: ./entrypoint.sh
+  busybox:
+    name: ${STACK_NAME}_busybox_${BUSYBOX_VERSION}
+    file: ./busybox
 
 networks:
   proxy:

entrypoint.sh

@@ -1,7 +1,7 @@
-#!/bin/sh
+#!/bin/busybox sh
 set -e
 if test -f "/run/secrets/postgres_password"; then
-    pwd=`cat /run/secrets/postgres_password`
+    pwd=`/bin/busybox cat /run/secrets/postgres_password`
     if [ -z $pwd ]; then
         echo >&2 "error: /run/secrets/postgres_password is empty"
         exit 1
@@ -16,4 +16,4 @@ else
 fi
 
 # https://github.com/mattermost/mattermost-server/blob/master/build/Dockerfile
-/entrypoint.sh "mattermost"
+/mattermost/bin/mattermost

release/0.1.0+7.0.txt

@@ -0,0 +1,6 @@
+This should be a fairly stable update. The only strange behaviour we've noticed so far has been:
+
+- When clicking on 'Channels' to change to 'Boards' or 'Playbooks', your window may flicker and just reload 'Channels'. Click 'Boards' or 'Playbooks' again and it should behave as expected.
+- When clicking on private messages, you may get an error telling you that you don't have permission to view these.
+
+To fix both of these errors, logout of your server in your Mattermost client, delete the server (if you are using an app), and then re-add it. We haven't noticed any issues after doing this.

release/1.4.1+9.5.11

@@ -0,0 +1 @@
+hotfix: rollback to last functional version

release/2.0.2+10.5.8

@@ -0,0 +1 @@
+Mattermost Platform Extended Support Release 10.5.8 contains a high severity level security fix.

release/2.1.0+10.11.6

@@ -0,0 +1,5 @@
+the docker containers in 10.11 branch don't contain any unix programs. That
+means there's no sh or bash, no cat etc etc. We need to have a shell to run
+our entrypoint and export the postgres URL as an env variable. To overcome
+this we insert a busybox binary as a config into the container. There's no
+action required on the side of the operator but it's important to note.