mirror of
https://github.com/nextcloud/server.git
synced 2024-12-29 00:18:42 +00:00
104 lines
3.4 KiB
PHP
104 lines
3.4 KiB
PHP
<?php
|
|
/**
|
|
* SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
|
|
* SPDX-FileCopyrightText: 2016 ownCloud, Inc.
|
|
* SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
namespace OC\Core\Command\Encryption;
|
|
|
|
use OCP\App\IAppManager;
|
|
use OCP\Encryption\IManager;
|
|
use OCP\IConfig;
|
|
use Symfony\Component\Console\Command\Command;
|
|
use Symfony\Component\Console\Helper\QuestionHelper;
|
|
use Symfony\Component\Console\Input\InputInterface;
|
|
use Symfony\Component\Console\Output\OutputInterface;
|
|
use Symfony\Component\Console\Question\ConfirmationQuestion;
|
|
|
|
class EncryptAll extends Command {
|
|
protected bool $wasTrashbinEnabled = false;
|
|
|
|
public function __construct(
|
|
protected IManager $encryptionManager,
|
|
protected IAppManager $appManager,
|
|
protected IConfig $config,
|
|
protected QuestionHelper $questionHelper,
|
|
) {
|
|
parent::__construct();
|
|
}
|
|
|
|
/**
|
|
* Set maintenance mode and disable the trashbin app
|
|
*/
|
|
protected function forceMaintenanceAndTrashbin(): void {
|
|
$this->wasTrashbinEnabled = (bool)$this->appManager->isEnabledForUser('files_trashbin');
|
|
$this->config->setSystemValue('maintenance', true);
|
|
$this->appManager->disableApp('files_trashbin');
|
|
}
|
|
|
|
/**
|
|
* Reset the maintenance mode and re-enable the trashbin app
|
|
*/
|
|
protected function resetMaintenanceAndTrashbin(): void {
|
|
$this->config->setSystemValue('maintenance', false);
|
|
if ($this->wasTrashbinEnabled) {
|
|
$this->appManager->enableApp('files_trashbin');
|
|
}
|
|
}
|
|
|
|
protected function configure() {
|
|
parent::configure();
|
|
|
|
$this->setName('encryption:encrypt-all');
|
|
$this->setDescription('Encrypt all files for all users');
|
|
$this->setHelp(
|
|
'This will encrypt all files for all users. '
|
|
. 'Please make sure that no user access his files during this process!'
|
|
);
|
|
}
|
|
|
|
protected function execute(InputInterface $input, OutputInterface $output): int {
|
|
if (!$input->isInteractive()) {
|
|
$output->writeln('Invalid TTY.');
|
|
$output->writeln('If you are trying to execute the command in a Docker ');
|
|
$output->writeln("container, do not forget to execute 'docker exec' with");
|
|
$output->writeln("the '-i' and '-t' options.");
|
|
$output->writeln('');
|
|
return 1;
|
|
}
|
|
|
|
if ($this->encryptionManager->isEnabled() === false) {
|
|
throw new \Exception('Server side encryption is not enabled');
|
|
}
|
|
|
|
if ($this->config->getSystemValueBool('maintenance')) {
|
|
$output->writeln('<error>This command cannot be run with maintenance mode enabled.</error>');
|
|
return self::FAILURE;
|
|
}
|
|
|
|
$output->writeln("\n");
|
|
$output->writeln('You are about to encrypt all files stored in your Nextcloud installation.');
|
|
$output->writeln('Depending on the number of available files, and their size, this may take quite some time.');
|
|
$output->writeln('Please ensure that no user accesses their files during this time!');
|
|
$output->writeln('Note: The encryption module you use determines which files get encrypted.');
|
|
$output->writeln('');
|
|
$question = new ConfirmationQuestion('Do you really want to continue? (y/n) ', false);
|
|
if ($this->questionHelper->ask($input, $output, $question)) {
|
|
$this->forceMaintenanceAndTrashbin();
|
|
|
|
try {
|
|
$defaultModule = $this->encryptionManager->getEncryptionModule();
|
|
$defaultModule->encryptAll($input, $output);
|
|
} catch (\Exception $ex) {
|
|
$this->resetMaintenanceAndTrashbin();
|
|
throw $ex;
|
|
}
|
|
|
|
$this->resetMaintenanceAndTrashbin();
|
|
return self::SUCCESS;
|
|
}
|
|
$output->writeln('aborted');
|
|
return self::FAILURE;
|
|
}
|
|
}
|