feat(database-dump-via-docker-sock): 支持指定容器内执行命令的用户

database-dump-via-docker-sock.sh

@@ -12,7 +12,7 @@ print_usage() {
   cat <<EOF_USAGE >&2
 Usage: $0 [--socket=PATH] [--api-version=VERSION] --container=NAME \\
          [--type=postgres|mysql|kingbase] --backup-prefix=PREFIX [--backup-dir=DIR] \\
-         [--mysql-user=USER] [--mysql-password=PASSWORD]
+         [--mysql-user=USER] [--mysql-password=PASSWORD] [--exec-user=NAME]
 
 Options:
   --socket=PATH             Docker Engine unix socket path (default: /var/run/docker.sock)
@@ -23,6 +23,7 @@ Options:
   --backup-prefix=PREFIX    Backup filename prefix
   --mysql-user=USER         MySQL user (default: root)
   --mysql-password=PASSWORD MySQL password (optional)
+  --exec-user=NAME          Force a specific user when running commands inside the container
   --help                    Show this help message
 EOF_USAGE
 }
@@ -36,6 +37,7 @@ BACKUP_PREFIX=""
 MYSQL_USER="root"
 MYSQL_PASSWORD=""
 MYSQL_PASSWORD_SET=0
+EXEC_USER_OVERRIDE=""
 
 detect_db_type_from_name() {
   name_lower=$(printf '%s' "$1" | tr 'A-Z' 'a-z')
@@ -82,12 +84,19 @@ escape_for_double_quotes() {
 docker_exec() {
   exec_container_name=$1
   exec_cmd=$2
+  exec_user=${3:-}
 
-  curl -fsSL "https://Git.1-H.CC/Scripts/Linux/raw/branch/main/docker-exec-via-sock.sh" | sh -s -- \
+  set -- \
     --socket="$DOCKER_SOCKET" \
     --api-version="$DOCKER_API_VERSION" \
     --container="$exec_container_name" \
     --cmd="$exec_cmd"
+
+  if [ -n "$exec_user" ]; then
+    set -- "$@" --user="$exec_user"
+  fi
+
+  curl -fsSL "https://Git.1-H.CC/Scripts/Linux/raw/branch/main/docker-exec-via-sock.sh" | sh -s -- "$@"
 }
 
 while [ "$#" -gt 0 ]; do
@@ -158,6 +167,14 @@ while [ "$#" -gt 0 ]; do
       MYSQL_PASSWORD="$1"
       MYSQL_PASSWORD_SET=1
       ;;
+    --exec-user=*)
+      EXEC_USER_OVERRIDE="${1#*=}"
+      ;;
+    --exec-user)
+      if [ "$#" -lt 2 ]; then missing_value '--exec-user'; fi
+      shift
+      EXEC_USER_OVERRIDE="$1"
+      ;;
     --help)
       print_usage
       exit 0
@@ -207,6 +224,8 @@ if [ -z "$DB_TYPE" ]; then
   fi
 fi
 
+EXEC_USER_DEFAULT=""
+
 case $DB_TYPE in
   postgres)
     BACKUP_EXTENSION=".sql.zst"
@@ -227,6 +246,7 @@ case $DB_TYPE in
     BACKUP_EXTENSION=".sql.zst"
     DUMP_CMD="sys_dumpall --clean --username=\"\${DB_USER:-kingbase}\""
     COMPRESS_CMD="zstd"
+    EXEC_USER_DEFAULT="root"
     ;;
   *)
     printf 'Unsupported database type: %s\n' "$DB_TYPE" >&2
@@ -234,6 +254,12 @@ case $DB_TYPE in
     ;;
 esac
 
+if [ -n "$EXEC_USER_OVERRIDE" ]; then
+  EXEC_USER="$EXEC_USER_OVERRIDE"
+else
+  EXEC_USER="$EXEC_USER_DEFAULT"
+fi
+
 timestamp=$(date +%Y-%m-%d_%H-%M-%S)
 backup_path="$BACKUP_DIR/${BACKUP_PREFIX}${timestamp}${BACKUP_EXTENSION}"
 
@@ -244,7 +270,7 @@ cmd="mkdir -p \"${BACKUP_DIR}\" && set -o pipefail && ${DUMP_CMD} | ${COMPRESS_C
 log_border="----------------------------------------------------------------------"
 
 printf '%s\n' "$log_border" >&2
-if ! docker_exec "$CONTAINER_NAME" "$cmd"; then
+if ! docker_exec "$CONTAINER_NAME" "$cmd" "${EXEC_USER:-}"; then
   printf '%s\n' "$log_border" >&2
   log "backup command failed"
   exit 1
@@ -257,7 +283,7 @@ log "backup command finished, verifying file size inside container"
 verify_cmd="du -h \"${backup_path}\" 2>/dev/null | awk 'NR==1{print \$1}'"
 
 printf '%s\n' "$log_border" >&2
-size=$(docker_exec "$CONTAINER_NAME" "$verify_cmd" | tr -d '\r')
+size=$(docker_exec "$CONTAINER_NAME" "$verify_cmd" "${EXEC_USER:-}" | tr -d '\r')
 printf '%s\n' "$log_border" >&2
 
 printf '\n' >&2