Use ssh instead of wget to fetch the dmp file

- as the dmp file will soon reside on a host without a webserver

Author: gregcorbett

README.md

@@ -28,7 +28,6 @@ This repo contains the service and cron scripts used to run a failover gocdb ins
       |_ dropGocdbUser.sh     #   Drops the current DB schema
       |_ loadData.sh          #   Load the last successfully downloaded DB dmp into the RDBMS
       |_ gatherStats.sh       #   Oracle gathers stats to re-index
-      |_ pass_wgetrc_exemplar.txt #   Sample pwd file for getDump.sh (rename to pass_wgetrc) 
       |_ pass_file_exemplar.txt   #   Sample pwd file for DB (rename to pass_file)
 
   nsupdate_goc/              # Scripts for switching the DNS to the failover
@@ -71,10 +70,11 @@ cron:
 /root/importDBdmpFile/1_runDbUpdate.sh
 ```
 
-You will also need to modify the two password files to specify
-your own pw ('pass_wgetrc' and 'pass_file'). These contain the
-pw for the secure download of dmp file and the pw of the DB
-system user. 
+You will also need to: 
+* generate a public/private key pair using `ssh-keygen` and ensure the public
+key is present on the host with the database dmp file.
+* populate `importDBdmpFile/failover_TEMPLATE.sh` with
+appropriate values and copy it to `/etc/gocdb/failover.sh`
 
 ## /root/nsupdate_goc/
 Contains the nsupdate keys and nsupdate scripts for switching

importDBdmpFile/failover_TEMPLATE.sh

@@ -0,0 +1,8 @@
+# This file is a template for /etc/gocdb/failover.sh.
+# Copy this file to that location and set the variables as appropriate.
+
+# Set the user@host:path to copy the DB dump file from.
+DB_DUMP_FROM=user@hostname:/path/to/db/dump
+
+# Set the local location to copy the DB dump file to.
+DB_DUMP_TO=/tmp

importDBdmpFile/getDump.sh

@@ -1,19 +1,16 @@
 #!/bin/bash
 
-# seems that curl don't return a 0 exit code when it fails to download successfully, see: 
-# http://superuser.com/questions/590099/can-i-make-curl-fail-with-an-exitcode-different-than-0-if-the-http-status-code-i
-# 
-#curl --capath /etc/grid-security/certificates -u failover:kugA7Rer https://goc.egi.eu/dbDump/goc5dump.dmp -o /tmp/goc5dump.dmp
+# Set some things that cause this script to exit on a failure,
+# rather than carry on blindly.
+# -e Exit on any error
+# -u Classify unset variables as errors
+set -eu
 
-# therefore use wget which does return 0 exit code if downloaded ok
-# /usr/bin/wget -O /tmp/goc5dump.dmp --user failover --password u_LK28_B2fv_dm --no-check-certificate https://goc.egi.eu/dbDump/goc5dump.dmp
+# Get useful variables to refer to later in this script.
+source /etc/gocdb/failover.sh
 
-DUMPDIR=/tmp
-BASEDIR=/root/importDBdmpFile
+# Copy the DB dump file.
+/usr/bin/scp $DB_DUMP_FROM $DB_DUMP_TO
 
-export WGETRC=$BASEDIR/pass_wgetrc
-
-/usr/bin/wget --no-check-certificate \
-	--ca-directory /etc/grid-security/certificates \
-	-O $DUMPDIR/goc5dump.dmp \
-	https://goc.egi.eu/dbDump/goc5dump.dmp
+# unset things to not affect the rest of the Failover process.
+set +eu