One Hat Cyber Team

Your IP: 216.73.216.164
Server IP: 157.245.143.252
Server: Linux www 6.11.0-29-generic #29-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 13 20:29:41 UTC 2025 x86_64
Server Software: nginx/1.26.0
PHP Version: 8.3.11
Buat File | Buat Folder
Dir : ~/opt/digitalocean/droplet-agent/scripts/
View File Name : update.sh

#!/bin/bash
# vim: noexpandtab

set -ue

SVC_NAME="droplet-agent"
KEYRING_PKG="${SVC_NAME}-keyring"

REPO_HOST=""
PKG_PATTERN=""
ARCH=""
ARCH_ALIAS=""
LATEST_VER="-"
LOCAL_VER=""
LATEST_KEYRING_VER=""
LOCAL_KEYRING_VER=""
KEYRING_PKG_PATTERN=""

main() {
  # add some jitter to prevent overloading the remote repo server
  delay=$((RANDOM % 900))
  echo "Waiting ${delay} seconds"
  sleep ${delay}

  check_arch
  if command -v apt-get >/dev/null 2>&1; then
    platform="deb"
    do_update=update_deb
  elif command -v yum >/dev/null 2>&1; then
    platform="rpm"
    do_update=update_rpm
  else
    not_supported
  fi
  prepare "${platform}"
  find_latest_pkg "${platform}"
  if [ "${LOCAL_VER}" = "${LATEST_VER}" ] && [ "${LOCAL_KEYRING_VER}" = "${LATEST_KEYRING_VER}" ]; then
    echo "No need to update"
    exit 0
  fi
  ${do_update}
}

update_deb() {
  echo "Updating ${SVC_NAME} deb package"
  export DEBIAN_FRONTEND="noninteractive"
  apt-get -qq update -o Dir::Etc::SourceParts=/dev/null -o APT::Get::List-Cleanup=no -o Dir::Etc::SourceList="sources.list.d/${SVC_NAME}.list"
  apt-get -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -qq install -y --only-upgrade ${SVC_NAME} ${KEYRING_PKG}
}

update_rpm() {
  echo "Updating ${SVC_NAME} rpm package"
  yum -q -y --disablerepo="*" --enablerepo="${SVC_NAME}" makecache
  yum -q -y update ${SVC_NAME}
}

check_arch() {
  echo -n "Checking architecture support..."
  case $(uname -m) in
  i386 | i686)
    ARCH="i386"
    ARCH_ALIAS="i386"
    ;;
  x86_64)
    ARCH="x86_64"
    ARCH_ALIAS="amd64"
    ;;
  *) not_supported ;;
  esac
  echo "OK"
}

prepare() {
  echo "Preparing to check for update"
  platform=${1:-}
  [ -z "${platform}" ] && abort "Destination repository is required. Usage: prepare <platform>"
  case "${platform}" in
  rpm)
    LOCAL_VER=$(rpm -q ${SVC_NAME} --qf '%{VERSION}')
    url=$(grep baseurl <"/etc/yum.repos.d/${SVC_NAME}.repo" | cut -f 2 -d=)
    url=$(echo "${url}/${SVC_NAME}." | sed -e "s|\$basearch|${ARCH}|g")
    ;;
  deb)
    LOCAL_VER=$(dpkg -s ${SVC_NAME} | grep Version | cut -f 2 -d: | tr -d '[:space:]')
    LOCAL_KEYRING_VER=$(dpkg -s ${KEYRING_PKG} | grep Version | cut -f 2 -d: | tr -d '[:space:]')
    url=$(cut -f 3 -d' ' <"/etc/apt/sources.list.d/${SVC_NAME}.list")
    KEYRING_PKG_PATTERN=$(echo "${url}/pool/main/main/d/${KEYRING_PKG}/${KEYRING_PKG}_" | grep "/" | cut -d"/" -f4-)
    url="${url}/pool/main/main/d/${SVC_NAME}/${SVC_NAME}_"
    ;;
  esac
  REPO_HOST=$(echo "${url}" | grep "/" | cut -d"/" -f1-3)
  PKG_PATTERN=$(echo "${url}" | grep "/" | cut -d"/" -f4-)
  echo "Package Host: ${REPO_HOST}"
  echo "Package Path: ${PKG_PATTERN}"
  if [ -n "${KEYRING_PKG_PATTERN}" ]; then
    echo "Keyring Path: ${KEYRING_PKG_PATTERN}"
    echo "Local Keyring:${LOCAL_KEYRING_VER}"
  fi
  echo "Local Version:${LOCAL_VER}"
}

find_latest_pkg() {
  platform=${1:-}
  [ -z "${platform}" ] && abort "Destination repository is required. Usage: find_latest_pkg <platform>"

  echo "Checking Latest Version..."
  case "${platform}" in
  rpm)
    repo_tree=$(curl -sSL "${REPO_HOST}")
    ;;
  deb)
    repo_tree=$(wget -qO- "${REPO_HOST}")
    if [ -n "${KEYRING_PKG_PATTERN}" ]; then
      keyring_pkgs=$(echo "${repo_tree}" | grep -oP '(?<=Key>'"${KEYRING_PKG_PATTERN}"')[^<]+' | tr ' ' '\n')
      sorted_pkgs=$(echo "${keyring_pkgs}" | sort -V)
      LATEST_KEYRING_VER=$(echo "${sorted_pkgs}" | tail -1 | grep -oP '\d.\d.\d')
      echo "Latest keyring package:${LATEST_KEYRING_VER}"
    fi
    ;;
  esac
  files=$(echo "${repo_tree}" | grep -oP '(?<=Key>'"${PKG_PATTERN}"')[^<]+' | tr ' ' '\n')
  sorted_files=$(echo "${files}" | sort -V)
  LATEST_VER=$(echo "${sorted_files}" | tail -1 | grep -oP '\d.\d.\d')
  echo "Latest agent package:${LATEST_VER}"
}

not_supported() {
  cat <<-EOF

	This script does not support the OS/Distribution on this machine.
	If you feel that this is an error contact support@digitalocean.com

	EOF
  exit 2
}

# abort with an error message
abort() {
  echo "ERROR: $1" >/dev/stderr
  exit 1
}

main