Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 6 Packages Projects Releases 1 Wiki Activity

gate2: fix prestart.sh shell quote conflict — use temp Python file instead of python3 -c

Browse Source
This commit is contained in:
Agent Zero
2026-07-31 21:57:04 +02:00
parent 68db50544c
commit 569476b993
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prestart.sh
+5 -6
View File
@@ -31,7 +31,7 @@ echo "[prestart] DB migrations completed successfully."
# Migration 0070 creates these roles without passwords; we set them here so the # Migration 0070 creates these roles without passwords; we set them here so the
# API/Worker/Auth connections can authenticate. # API/Worker/Auth connections can authenticate.
echo "[prestart] Setting DB role passwords..." echo "[prestart] Setting DB role passwords..."
python3 -c " cat > /tmp/set_role_passwords.py << 'PYEOF'
import asyncio import asyncio
import os import os
import re import re
@@ -43,7 +43,6 @@ async def set_passwords():
if not db_url: if not db_url:
print('[prestart] WARNING: No DB URL for password setup') print('[prestart] WARNING: No DB URL for password setup')
return return
# Extract password from the DB URL (postgresql+asyncpg://user:pass@host:port/db)
match = re.search(r'://([^:]+):([^@]+)@', db_url) match = re.search(r'://([^:]+):([^@]+)@', db_url)
if not match: if not match:
print('[prestart] WARNING: Could not extract password from DB URL') print('[prestart] WARNING: Could not extract password from DB URL')
@@ -55,9 +54,7 @@ async def set_passwords():
async with engine.begin() as conn: async with engine.begin() as conn:
for role in roles: for role in roles:
try: try:
# ALTER ROLE doesn't support prepared statement parameters await conn.execute(text(f"ALTER ROLE {role} WITH LOGIN PASSWORD '{pwd}'"))
# so we inline the password (extracted from DB URL, safe)
await conn.execute(text("ALTER ROLE " + role + " WITH LOGIN PASSWORD '" + pwd + "'"))
print(f'[prestart] Password set for {role}') print(f'[prestart] Password set for {role}')
except Exception as e: except Exception as e:
print(f'[prestart] WARNING: Could not set password for {role}: {e}') print(f'[prestart] WARNING: Could not set password for {role}: {e}')
@@ -68,7 +65,9 @@ async def set_passwords():
await engine.dispose() await engine.dispose()
asyncio.run(set_passwords()) asyncio.run(set_passwords())
" PYEOF
python3 /tmp/set_role_passwords.py
rm -f /tmp/set_role_passwords.py
# Set crm_runtime password if RUNTIME_DB_PASSWORD is set (legacy support) # Set crm_runtime password if RUNTIME_DB_PASSWORD is set (legacy support)
if [ -n "$RUNTIME_DB_PASSWORD" ]; then if [ -n "$RUNTIME_DB_PASSWORD" ]; then