完善异机备份告警与同日恢复点取代（07-27-automatic-offhost-backup）

deploy/trialrun/install-automatic-backup-timer.sh

@@ -14,7 +14,8 @@ AUTOMATIC_BACKUP_STATE_DIR="${AUTOMATIC_BACKUP_STATE_DIR:-}"
 OFFHOST_TARGET="${OFFHOST_TARGET:-}"
 OFFHOST_SSH_KEY="${OFFHOST_SSH_KEY:-}"
 OFFHOST_KNOWN_HOSTS="${OFFHOST_KNOWN_HOSTS:-}"
-ALERT_RECIPIENT_EMPLOYEE_NO="${ALERT_RECIPIENT_EMPLOYEE_NO:-HYD000006}"
+ALERT_WEBHOOK_FILE="${ALERT_WEBHOOK_FILE:-}"
+ALERT_HELPER="${ALERT_HELPER:-${REMOTE_DIR}/scripts/send-wecom-group-alert.py}"
 BACKUP_RUN_AT="${BACKUP_RUN_AT:-02:30}"
 WATCHDOG_RUN_AT="${WATCHDOG_RUN_AT:-07:10}"
 SERVICE_PREFIX="${SERVICE_PREFIX:-hyb-oa-automatic-backup}"
@@ -66,7 +67,8 @@ paths_overlap() {
 validate_inputs() {
   local name value
   for name in REMOTE_DIR REMOTE_ENV_FILE POSTGRES_DATA_DIR STORAGE_HOST_DIR \
-    AUTOMATIC_BACKUP_DIR AUTOMATIC_BACKUP_STATE_DIR OFFHOST_SSH_KEY OFFHOST_KNOWN_HOSTS; do
+    AUTOMATIC_BACKUP_DIR AUTOMATIC_BACKUP_STATE_DIR OFFHOST_SSH_KEY OFFHOST_KNOWN_HOSTS \
+    ALERT_WEBHOOK_FILE ALERT_HELPER; do
     value="${!name:-}"
     validate_absolute_path "$name" "$value"
   done
@@ -91,10 +93,14 @@ validate_inputs() {
     && "$(stat -c %a "$OFFHOST_SSH_KEY")" == "600" ]] \
     || fail "off-host private key must exist with mode 0600"
   [[ -s "$OFFHOST_KNOWN_HOSTS" ]] || fail "pinned known-hosts file is missing"
+  [[ -f "$ALERT_WEBHOOK_FILE" && ! -L "$ALERT_WEBHOOK_FILE" \
+    && "$(stat -c %a "$ALERT_WEBHOOK_FILE")" == "600" \
+    && "$(stat -c %u "$ALERT_WEBHOOK_FILE")" == "0" ]] \
+    || fail "alert webhook file must be root-owned with mode 0600"
+  [[ -f "$ALERT_HELPER" && ! -L "$ALERT_HELPER" ]] || fail "alert helper is missing"
   [[ "$BACKUP_RUN_AT" =~ ^([01][0-9]|2[0-3]):[0-5][0-9]$ ]] || fail "backup time is invalid"
   [[ "$WATCHDOG_RUN_AT" =~ ^([01][0-9]|2[0-3]):[0-5][0-9]$ ]] || fail "watchdog time is invalid"
   [[ "$SERVICE_PREFIX" =~ ^[a-z0-9][a-z0-9_-]*$ ]] || fail "service prefix is invalid"
-  [[ "$ALERT_RECIPIENT_EMPLOYEE_NO" =~ ^[A-Za-z0-9_-]{1,80}$ ]] || fail "alert recipient id is invalid"
   local -a isolated_paths=(
     "$POSTGRES_DATA_DIR" "$STORAGE_HOST_DIR" "$AUTOMATIC_BACKUP_DIR" "$AUTOMATIC_BACKUP_STATE_DIR"
   )
@@ -123,7 +129,8 @@ Environment=AUTOMATIC_BACKUP_STATE_DIR=${AUTOMATIC_BACKUP_STATE_DIR}
 Environment=OFFHOST_TARGET=${OFFHOST_TARGET}
 Environment=OFFHOST_SSH_KEY=${OFFHOST_SSH_KEY}
 Environment=OFFHOST_KNOWN_HOSTS=${OFFHOST_KNOWN_HOSTS}
-Environment=ALERT_RECIPIENT_EMPLOYEE_NO=${ALERT_RECIPIENT_EMPLOYEE_NO}
+Environment=ALERT_WEBHOOK_FILE=${ALERT_WEBHOOK_FILE}
+Environment=ALERT_HELPER=${ALERT_HELPER}
 ENVIRONMENT
 }