mirror of
https://github.com/zulip/zulip.git
synced 2025-11-03 21:43:21 +00:00
3e3eb2aa7f
This should make it more obvious that these functions will exit the script if the check fails.
49 lines
2.1 KiB
Python
Executable File
49 lines
2.1 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
import os
|
|
import sys
|
|
import types
|
|
|
|
BASE_DIR = os.path.dirname(os.path.abspath(__file__))
|
|
sys.path.append(BASE_DIR)
|
|
import scripts.lib.setup_path_on_import
|
|
from scripts.lib.zulip_tools import assert_not_running_as_root
|
|
|
|
if __name__ == "__main__":
|
|
assert_not_running_as_root()
|
|
if (os.access('/etc/zulip/zulip.conf', os.R_OK) and not
|
|
os.access('/etc/zulip/zulip-secrets.conf', os.R_OK)):
|
|
# The best way to detect running manage.py as another user in
|
|
# production before importing anything that would require that
|
|
# access is to check for access to /etc/zulip/zulip.conf (in
|
|
# which case it's a production server, not a dev environment)
|
|
# and lack of access for /etc/zulip/zulip-secrets.conf (which
|
|
# should be only readable by root and zulip)
|
|
print("Error accessing Zulip secrets; manage.py in production must be run as the zulip user.")
|
|
sys.exit(1)
|
|
|
|
# Performance Hack: We make the pika.adapters.twisted_connection
|
|
# module unavailable, to save ~100ms of import time for most Zulip
|
|
# management commands for code we don't use. The correct
|
|
# long-term fix for this will be to get a setting integrated
|
|
# upstream to disable pika importing this.
|
|
# See https://github.com/pika/pika/issues/1128
|
|
sys.modules['pika.adapters.twisted_connection'] = types.ModuleType(
|
|
'pika.adapters.twisted_connection')
|
|
|
|
os.environ.setdefault("DJANGO_SETTINGS_MODULE", "zproject.settings")
|
|
from django.conf import settings
|
|
from django.core.management import execute_from_command_line
|
|
from django.core.management.base import CommandError
|
|
from scripts.lib.zulip_tools import log_management_command
|
|
|
|
log_management_command(" ".join(sys.argv), settings.MANAGEMENT_LOG_PATH)
|
|
|
|
os.environ.setdefault("PYTHONSTARTUP", os.path.join(BASE_DIR, "scripts/lib/pythonrc.py"))
|
|
if "--no-traceback" not in sys.argv and len(sys.argv) > 1:
|
|
sys.argv.append("--traceback")
|
|
try:
|
|
execute_from_command_line(sys.argv)
|
|
except CommandError as e:
|
|
print(e, file=sys.stderr)
|
|
sys.exit(1)
|