chore: Add changelog entry

feat: Automate file ownership setting from host migration process
- Added a step to deploy_chatmail() that sets ownership of paths that are copied over as part of the upgrade process. - Removed manual chown step from README.md.
2026-06-13 07:01:07 +00:00 · 2025-08-16 10:07:08 +02:00 · 2025-08-16 10:07:08 +02:00 · 2025-08-16 10:04:44 +02:00 · 2025-08-16 10:04:44 +02:00 · 2025-08-08 12:28:29 +02:00
4 changed files with 33 additions and 11 deletions
@@ -2,6 +2,12 @@

 ## untagged

+- Check whether GCC is installed in initenv.sh
+  ([#608](https://github.com/chatmail/relay/pull/608))
+
+- Automate file ownership setting from host migration process
+  ([#609](https://github.com/chatmail/relay/pull/609))
+
 - Expire push notification tokens after 90 days
  ([#583](https://github.com/chatmail/relay/pull/583))

@@ -395,15 +395,6 @@ in this case, just run `ssh-keygen -R "mail.example.org"` as recommended.
   Postfix and Dovecot are disabled for now; we will enable them later. 
   We first need to make the new site fully operational. 

-3. On the new site, run the following to ensure the ownership is correct in case UIDs/GIDs changed:
-
-   ```
-    chown root: -R /var/lib/acme
-    chown opendkim: -R /etc/dkimkeys
-    chown vmail: -R /home/vmail/mail
-    chown echobot: -R /run/echobot
-   ```
-
 4. Now, update DNS entries. 

   If other MTAs try to deliver messages to your chatmail domain they may fail intermittently,
@@ -748,6 +748,20 @@ def deploy_chatmail(config_path: Path, disable_mail: bool) -> None:
    _remove_rspamd()
    opendkim_need_restart = _configure_opendkim(mail_domain, "opendkim")

+    #
+    # If this system is pre-populated with data from a previous instance,
+    # we might need to adjust ownership of files.
+    #
+    stateful_paths = {
+        "/etc/dkimkeys": "opendkim",
+        "/home/vmail/mail": "vmail",
+        "/run/echobot": "echobot",
+        "/var/lib/acme": "root",
+    }
+    for stateful_path, path_owner in stateful_paths.items():
+        files.directory(stateful_path)  # In case it doesn't exist yet.
+        server.shell("chown {}: -R {}".format(path_owner, stateful_path))
+
    systemd.service(
        name="Start and enable OpenDKIM",
        service="opendkim.service",
@@ -816,8 +830,14 @@ def deploy_chatmail(config_path: Path, disable_mail: bool) -> None:
        name="Ensure cron is installed",
        packages=["cron"],
    )
-    git_hash = subprocess.check_output(["git", "rev-parse", "HEAD"]).decode()
-    git_diff = subprocess.check_output(["git", "diff"]).decode()
+    try:
+        git_hash = subprocess.check_output(["git", "rev-parse", "HEAD"]).decode()
+    except Exception:
+        git_hash = "unknown\n"
+    try:
+        git_diff = subprocess.check_output(["git", "diff"]).decode()
+    except Exception:
+        git_diff = ""
    files.put(
        name="Upload chatmail relay git commiit hash",
        src=StringIO(git_hash + git_diff),
@@ -9,6 +9,11 @@ if command -v lsb_release 2>&1 >/dev/null; then
        echo "You need to install python3-dev for installing the other dependencies."
        exit 1
      fi
+      if ! gcc --version 2>&1 >/dev/null
+      then
+        echo "You need to install gcc for building Python dependencies."
+        exit 1
+      fi
      ;;
  esac
 fi
Author	SHA1	Message	Date
cliffmccarthy	614b955351	chore: Add changelog entry	2025-08-16 10:07:08 +02:00
cliffmccarthy	7b1ffc1410	feat: Automate file ownership setting from host migration process - Added a step to deploy_chatmail() that sets ownership of paths that are copied over as part of the upgrade process. - Removed manual chown step from README.md.	2025-08-16 10:07:08 +02:00
cliffmccarthy	3ce350de9e	feat: Check whether GCC is installed in initenv.sh - Before proceeding with installation of Python dependencies, check whether the 'gcc' command is available by running it with the --version argument. If it is not available, print a helpful message and exit. - For the current set of Python dependencies, without GCC, the build process fails when building the crypt-r package. According to the error message, on my system the exact command it tries to run is 'x86_64-linux-gnu-gcc', but rather than depend on this variant specifically, the script checks for the generic 'gcc' command, so as to avoid coupling the check to an architecture or operating system. Similar problems arise if we attempt to check for packages by name; the compiler binary is provided by 'gcc-11', but the symlinks that provide the unversioned commands (as used by the Python build) come from a package named 'gcc'. Trying to be too precise in what we check for could lead to unnecessary failures in some environments, or become a maintenance challenge in the future. For that reason, this change simply attempts to run 'gcc' and uses that as a probably-sufficient proxy for having what the Python package install will need.	2025-08-16 10:04:44 +02:00
cliffmccarthy	1e05974970	feat: Make sure build-essential is installed - The Python modules installed by initenv.sh require a compiler to build. - Revised initenv.sh to check whether build-essential is installed before proceeding, if the system is based on Debian or Ubuntu.	2025-08-16 10:04:44 +02:00
cliffmccarthy	577c04d537	feat: Add try blocks around Git commands in cmdeploy/__init__.py - Added 'try' blocks around the 'git rev-parse' and 'git diff' commands that are run in deploy_chatmail(). If there is an error running rev-parse, git_hash is set to "unknown". If there is an error running diff, git_diff is set to the null string. - This allows the deployment process work in two scenarios that would otherwise fail with an exception: - Systems where the 'git' command is not available. - When running with a copy of the tree content of chatmail/relay, but without a copy of the .git directory.	2025-08-08 12:28:29 +02:00