chore: publish 2.1.1+10.11.7 release

.drone.yml

@@ -26,9 +26,9 @@ steps:
         from_secret: autono_bot_access_token
     depends_on:
     - deployment
-  when:
-    status:
-      - failure
+    when:
+      status:
+        - failure
 trigger:
   branch:
     - main
@@ -45,7 +45,7 @@ steps:
         from_secret: drone_abra-bot_token
       fork: true
       repositories:
-        - coop-cloud/auto-recipes-catalogue-json
+        - toolshed/auto-recipes-catalogue-json
 
 trigger:
   event: tag

.env.sample

@@ -1,4 +1,4 @@
-TYPE=mattermost
+TYPE=mattermost-lts
 
 # Domain of service
 DOMAIN=mattermost.example.com

README.md

@@ -2,14 +2,14 @@
 
 <!-- metadata -->
 
-* **Category**:
-* **Status**: 
-* **Image**:
-* **Healthcheck**: N
-* **Backups**: N
-* **Email**: 
-* **Tests**: N
-* **SSO**: N
+* **Category**: Apps
+* **Status**: 3
+* **Image**: [`mattermost/mattermost-team-edition`](https://hub.docker.com/r/mattermost/mattermost-team-edition), 4, upstream
+* **Healthcheck**: No
+* **Backups**: Yes
+* **Email**: 1
+* **Tests**: 2
+* **SSO**: No
 
 <!-- endmetadata -->
 

abra.sh

@@ -1 +1,2 @@
-export ENTRYPOINT_VERSION=v1
+export ABRA_MATTERMOST_ENTRYPOINT_VERSION=v2
+export BUSYBOX_VERSION=v1

compose.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   app:
-    image: mattermost/mattermost-team-edition:8.1.2
+    image: mattermost/mattermost-team-edition:10.11.7
     environment:
       - TZ
       - MM_SQLSETTINGS_DRIVERNAME=postgres
@@ -28,11 +28,16 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=0.2.1+8.1.2"
+        - "coop-cloud.${STACK_NAME}.version=2.1.1+10.11.7"
+        - "backupbot.backup=true"
+        - "backupbot.backup.path=/mattermost,/etc/ssl"
     configs:
       - source: abra_mattermost_entrypoint
         target: /abra-mattermost-entrypoint.sh
         mode: 0555
+      - source: busybox
+        target: /bin/busybox
+        mode: 0555
     secrets:
       - postgres_password
     entrypoint: /abra-mattermost-entrypoint.sh
@@ -50,6 +55,12 @@ services:
       - postgres_password
     networks:
       - internal
+    deploy:
+      labels:
+        backupbot.backup: "true"
+        backupbot.backup.pre-hook: "PGPASSWORD=$$(cat $${POSTGRES_PASSWORD_FILE}) pg_dump -U $${POSTGRES_USER} $${POSTGRES_DB} > /var/lib/postgresql/data/postgres-backup.sql"
+        backupbot.backup.post-hook: "rm -rf /var/lib/postgresql/data/postgres-backup.sql"
+        backupbot.backup.path: "/var/lib/postgresql/data/"
 
 
 secrets:
@@ -59,8 +70,11 @@ secrets:
 
 configs:
   abra_mattermost_entrypoint:
-    name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
+    name: ${STACK_NAME}_entrypoint_${ABRA_MATTERMOST_ENTRYPOINT_VERSION}
     file: ./entrypoint.sh
+  busybox:
+    name: ${STACK_NAME}_busybox_${BUSYBOX_VERSION}
+    file: ./busybox
 
 networks:
   proxy:

entrypoint.sh

@@ -1,7 +1,7 @@
-#!/bin/sh
+#!/bin/busybox sh
 set -e
 if test -f "/run/secrets/postgres_password"; then
-    pwd=`cat /run/secrets/postgres_password`
+    pwd=`/bin/busybox cat /run/secrets/postgres_password`
     if [ -z $pwd ]; then
         echo >&2 "error: /run/secrets/postgres_password is empty"
         exit 1
@@ -16,4 +16,4 @@ else
 fi
 
 # https://github.com/mattermost/mattermost-server/blob/master/build/Dockerfile
-/entrypoint.sh "mattermost"
+/mattermost/bin/mattermost

release/1.4.1+9.5.11

@@ -0,0 +1 @@
+hotfix: rollback to last functional version

release/2.0.2+10.5.8

@@ -0,0 +1 @@
+Mattermost Platform Extended Support Release 10.5.8 contains a high severity level security fix.

release/2.1.0+10.11.6

@@ -0,0 +1,5 @@
+the docker containers in 10.11 branch don't contain any unix programs. That
+means there's no sh or bash, no cat etc etc. We need to have a shell to run
+our entrypoint and export the postgres URL as an env variable. To overcome
+this we insert a busybox binary as a config into the container. There's no
+action required on the side of the operator but it's important to note.