[chef-server] chef-server-backup (no restore)

Author: mpasternacki

Dockerfile

@@ -13,17 +13,22 @@ ADD https://opscode-omnibus-packages.s3.amazonaws.com/ubuntu/12.04/x86_64/chef_1
 RUN set -e -x ; \
     export DEBIAN_FRONTEND=noninteractive ; \
     apt-get update -q --yes ; \
-    apt-get install -q --yes logrotate vim-nox ; \
+    apt-get install -q --yes logrotate vim-nox hardlink ; \
     dpkg -i /tmp/chef-server-core.deb /tmp/chef.deb ; \
     rm -rf /tmp/*.deb /var/lib/apt/lists/* /var/cache/apt/archives/* /etc/opscode ; \
     mkdir -p /etc/cron.hourly ; \
     ln -sfv /var/opt/opscode/log /var/log/opscode ; \
     ln -sfv /var/opt/opscode/etc /etc/opscode ; \
     ln -sfv /opt/opscode/sv/logrotate /opt/opscode/service ; \
-    ln -sfv /opt/opscode/embedded/bin/sv /opt/opscode/init/logrotate
+    ln -sfv /opt/opscode/embedded/bin/sv /opt/opscode/init/logrotate ; \
+    chef-apply -e 'chef_gem "knife-opc"'
 
 ADD init.rb /init.rb
 ADD chef-server.rb /.chef/chef-server.rb
 ADD logrotate /opt/opscode/sv/logrotate
+ADD knife.rb /etc/chef/knife.rb
+ADD backup.sh /usr/local/bin/chef-server-backup
+
+ENV KNIFE_HOME /etc/chef
 
 CMD [ "/opt/opscode/embedded/bin/ruby", "/init.rb" ]

README.md

@@ -132,6 +132,14 @@ A sample nginx configuration looks like this:
 
 ### Backup and restore
 
+    $ docker exec chef-server chef-server-backup
+
+Backup will be created in `/var/opt/opscode/backup/latest`, and all
+previous backups will be in their own timestamped directories. Backups
+will use hardlinks to share unchanged files.
+
+Alternatively:
+
 1. `docker stop chef-server`
 2. Archive `/var/opt/opscode` volume (delete the `bootstrapped` file
    from the archive to force `chef-server-ctl reconfigure` run on the

backup.sh

@@ -0,0 +1,28 @@
+#!/bin/sh
+set -e
+
+ts=$(date -r backup -u +%Y%m%dT%H%M%SZ)
+destdir=/var/opt/opscode/backup/$ts
+
+mkdir -p $destdir
+cd $destdir
+
+mkdir users
+for user in $(chef-server-ctl user-list) ; do
+    chef-server-ctl user-show -l -F json $user > users/$user.json
+done
+
+mkdir organizations
+for org in $(chef-server-ctl org-list) ; do
+    chef-server-ctl org-show -l -F json $org > organizations/$org.json
+    mkdir organizations/$org
+    env CHEF_ORGANIZATION=$org knife download --chef-repo-path=organizations/$org /
+done
+
+cd ..
+hardlink .
+
+test -d latest~ && rm -rf latest~
+test -d latest && mv latest latest~
+cp -al $ts latest
+rm -rf latest~

knife.rb

@@ -0,0 +1,3 @@
+instance_eval(File.read("/etc/opscode/pivotal.rb"))
+chef_server_url "#{chef_server_url}/organizations/#{ENV['CHEF_ORGANIZATION']}" if ENV['CHEF_ORGANIZATION']
+versioned_cookbooks true