Everything clients, users and operators meet now carries the fork's name, with no aliases (SPEC.md §2.4, changed here from "protocol identifiers stay"): - JMAP: upstream's registry capability is urn:inbuxa:jmap:registry, beside the fork's own urn:inbuxa:jmap. - WebDAV lock and sync tokens are urn:inbuxa:dav*; clients resync once. - Sieve: vnd.inbuxa.while and vnd.inbuxa.expressions. sieve-rs spells these into its compiler, so it's vendored (vendor/sieve-rs, 0.7.3) and patched in; a unit test fails if Cargo.lock ever moves past the vendored copy. The trusted runtime now names itself too, rather than answering sieve-rs's default. - The web interface's OAuth client is inbuxa-webui. On every start the old stalwart-webui client is removed and any application naming it is moved over. - The spam filter's blobs are INBUXA_SPAM_*; every start moves any left under the old keys, so a trained model survives. - SQL stores and log files default to inbuxa, in the code and in the schema served to the admin (checksum regenerated). - Settings are INBUXA_* only. A STALWART_* variable that's set where its INBUXA_* one isn't stops the server at startup, naming it. - The version-upgrade messages link docs.inbuxa.org's migration page, and the OpenAPI description, smtp crate metadata and web-push test fixtures lose the name. Kept on purpose, allowlisted with reasons: the OAuth key-derivation contexts (renaming them would end every session and invalidate every sealed client id) and the hashed application prefix. Also fixes a latent start-up failure: ensure_client updated an existing first-party client with a revision of 0, which the registry's assertion never matches, so adding a redirect URI or changing the webmail secret failed start-up. And the principal session test now expects legacyProtocols (C-1, added 2026-09-21), which it had missed. Tested: the server builds without warnings; common's 106 unit tests, including the vendoring check; a new integration test for the two start-up migrations; and the webdav, jmap, imap and SMTP Sieve suites.
187 lines
5.3 KiB
Rust
187 lines
5.3 KiB
Rust
/*
|
|
* SPDX-FileCopyrightText: 2020 Stalwart Labs LLC <[email protected]>
|
|
*
|
|
* SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL
|
|
*
|
|
* Modified by Coffey Labs in 2026 for INBUXA.
|
|
*/
|
|
|
|
#![warn(clippy::large_futures)]
|
|
|
|
use crate::v016::migrate_v0_16;
|
|
use common::{DATABASE_SCHEMA_VERSION, Server};
|
|
use store::{
|
|
IterateParams, SUBSPACE_PROPERTY, SUBSPACE_QUEUE_MESSAGE, SUBSPACE_REPORT_IN,
|
|
SUBSPACE_REPORT_OUT, SerializeInfallible,
|
|
write::{AnyClass, AnyKey, BatchBuilder, ValueClass},
|
|
};
|
|
use trc::AddContext;
|
|
|
|
pub mod destroy;
|
|
pub mod v016;
|
|
|
|
pub async fn try_migrate(server: &Server) -> trc::Result<()> {
|
|
// inbuxa: before the version check, which returns early on a current
|
|
// store, and before migrate_v0_16, which reads the renamed key.
|
|
rename_spam_blobs(server).await?;
|
|
|
|
match server
|
|
.store()
|
|
.get_value::<u32>(AnyKey {
|
|
subspace: SUBSPACE_PROPERTY,
|
|
key: vec![0u8],
|
|
})
|
|
.await
|
|
.caused_by(trc::location!())?
|
|
{
|
|
Some(DATABASE_SCHEMA_VERSION) => {
|
|
if !std::env::var("DANGER_FORCE_MIGRATE").is_ok_and(|v| v == "1") {
|
|
return Ok(());
|
|
}
|
|
}
|
|
Some(0..=4) => {
|
|
abort(concat!(
|
|
"You must first upgrade to version 0.15, please read ",
|
|
"https://docs.inbuxa.org/install/migrating/"
|
|
));
|
|
}
|
|
Some(5) => {
|
|
if !server.registry().is_recovery_mode() {
|
|
abort(concat!(
|
|
"Upgrading to version 0.16 is a multi-step process, please read ",
|
|
"https://docs.inbuxa.org/install/migrating/"
|
|
));
|
|
}
|
|
}
|
|
|
|
Some(version) => {
|
|
panic!(
|
|
"Unknown database schema version, expected {} or below, found {}",
|
|
DATABASE_SCHEMA_VERSION, version
|
|
);
|
|
}
|
|
_ => {
|
|
if is_new_install(server).await.caused_by(trc::location!())? {
|
|
write_schema_version(server).await?;
|
|
return Ok(());
|
|
} else {
|
|
abort(concat!(
|
|
"You must first upgrade to version 0.15, please read ",
|
|
"https://docs.inbuxa.org/install/migrating/"
|
|
));
|
|
}
|
|
}
|
|
}
|
|
|
|
migrate_v0_16(server).await?;
|
|
write_schema_version(server).await
|
|
}
|
|
|
|
async fn write_schema_version(server: &Server) -> trc::Result<()> {
|
|
let mut batch = BatchBuilder::new();
|
|
batch.set(
|
|
ValueClass::Any(AnyClass {
|
|
subspace: SUBSPACE_PROPERTY,
|
|
key: vec![0u8],
|
|
}),
|
|
DATABASE_SCHEMA_VERSION.serialize(),
|
|
);
|
|
|
|
server
|
|
.store()
|
|
.write(batch.build_all())
|
|
.await
|
|
.caused_by(trc::location!())?;
|
|
|
|
Ok(())
|
|
}
|
|
|
|
fn abort(message: &str) -> ! {
|
|
eprintln!("Migration aborted: {message}");
|
|
panic!("Migration aborted: {message}");
|
|
}
|
|
|
|
async fn is_new_install(server: &Server) -> trc::Result<bool> {
|
|
for subspace in [
|
|
SUBSPACE_QUEUE_MESSAGE,
|
|
SUBSPACE_REPORT_IN,
|
|
SUBSPACE_REPORT_OUT,
|
|
SUBSPACE_PROPERTY,
|
|
] {
|
|
let mut has_data = false;
|
|
|
|
server
|
|
.store()
|
|
.iterate(
|
|
IterateParams::new(
|
|
AnyKey {
|
|
subspace,
|
|
key: vec![0u8],
|
|
},
|
|
AnyKey {
|
|
subspace,
|
|
key: vec![u8::MAX; 16],
|
|
},
|
|
)
|
|
.no_values(),
|
|
|_, _| {
|
|
has_data = true;
|
|
|
|
Ok(false)
|
|
},
|
|
)
|
|
.await
|
|
.caused_by(trc::location!())?;
|
|
|
|
if has_data {
|
|
return Ok(false);
|
|
}
|
|
}
|
|
|
|
Ok(true)
|
|
}
|
|
|
|
/// inbuxa: the spam filter's trainer and model blobs, under the names they
|
|
/// had before the fork renamed them (SPEC §2.4), paired with the current ones.
|
|
const RENAMED_SPAM_BLOBS: [(&[u8], &[u8]); 2] = [
|
|
(b"STALWART_SPAM_TRAIN_DATA.lz4", common::manager::SPAM_TRAINER_KEY),
|
|
(
|
|
b"STALWART_SPAM_CLASSIFIER_MODEL.lz4",
|
|
common::manager::SPAM_CLASSIFIER_KEY,
|
|
),
|
|
];
|
|
|
|
/// Moves each spam blob from its pre-rename key to the current one, so a
|
|
/// trained model survives the rename. A blob already under the current key
|
|
/// wins and the old one is just removed; with neither, nothing happens.
|
|
async fn rename_spam_blobs(server: &Server) -> trc::Result<()> {
|
|
let blobs = server.blob_store();
|
|
for (old, new) in RENAMED_SPAM_BLOBS {
|
|
let Some(data) = blobs
|
|
.get_blob(old, 0..usize::MAX)
|
|
.await
|
|
.caused_by(trc::location!())?
|
|
else {
|
|
continue;
|
|
};
|
|
if blobs
|
|
.get_blob(new, 0..usize::MAX)
|
|
.await
|
|
.caused_by(trc::location!())?
|
|
.is_none()
|
|
{
|
|
blobs
|
|
.put_blob(new, &data, server.core.email.compression)
|
|
.await
|
|
.caused_by(trc::location!())?;
|
|
}
|
|
blobs.delete_blob(old).await.caused_by(trc::location!())?;
|
|
trc::event!(
|
|
Server(trc::ServerEvent::Startup),
|
|
Details = "Moved a spam filter blob to its renamed key",
|
|
Key = new,
|
|
);
|
|
}
|
|
Ok(())
|
|
}
|