39 Commits

Include renames

• deploy/ssh: create the backup directory only when there is a file to back up

  Follow-up to 9249c892 (#7249). The mkdir -p ran unconditionally before
  the guarded cp calls, so a first deploy left an empty backup directory
  behind. Move the mkdir into each guarded block.

  neil 2026-09-13 07:50:39 +02:00
  8e5ba60bee
• Both confirmed and fixed in dev.

  1. The four backup cp calls (KEYFILE/CERTFILE/CAFILE/FULLCHAIN) ran
     unguarded. With USE_SCP=yes MULTI_CALL is implicit, so each cp is its
     own ssh call and a missing source aborted the deploy. In batched mode
     it was masked because the exit code is that of the last command.
     Each cp is now wrapped in a remote [ -f ] test.
  2. deploy/ssh.sh tested DEPLOY_SSH_FULLCHAIN = "yes" instead of
     DEPLOY_SSH_MULTI_CALL (since 2017). Effect was only that the
     fullchain backup got deferred to the next batch. Fixed as well.
  
  Please upgrade with acme.sh --upgrade -b dev and retest.

  neil 2026-09-11 11:51:07 +08:00
  9249c89221
• Feature: Support other shells then sh (#4877)

  * Add support for DEPLOY_SSH_REMOTE_SHELL
  
  * allow to configure quoting of  remote cmd string
  
  * shell check and shellfmt fixes

  Roman Lumetsberger 2026-07-10 21:02:06 +08:00
  50e5e771d5
• deploy/ssh: return non-zero when a server deployment fails (#6795)

  ssh_deploy() ignored the result of _ssh_deploy and always returned
  success, so a failed transfer to one (or all) of the servers in
  DEPLOY_SSH_SERVER was silently swallowed. Track the return code across
  the loop and return non-zero if any server failed, letting the caller
  handle notification.
  
  Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

  Oliver MuellerandClaude Opus 4.8 2026-07-06 10:11:58 +08:00
  1f778e6ef1
• Conditionnaly change permissions (#1)
  dga-nagra 2026-02-04 11:01:44 +01:00
  61e986f23c
• Ensure ssh.sh sets 600 permissions on keyfile
  Jérémy Lal 2025-12-18 09:55:50 +01:00
  6ca19fb003
• Update ssh.sh
  neil 2022-05-24 22:25:44 +08:00
  d2a9d731ed
• improve doc comments
  PM Extra 2022-05-14 22:59:02 +08:00
  3ce7d410c8
• fix format again
  PM Extra 2022-05-14 22:49:40 +08:00
  74f28021e7
• fix format
  PM Extra 2022-05-14 22:41:59 +08:00
  f90cbb636a
• support specifying port for each host
  PM Extra 2022-05-14 22:29:48 +08:00
  c8929ca0cb
• refact ssh hook to use deploy config
  PM Extra 2022-05-14 22:28:02 +08:00
  9fb5bb620d
• Update ssh.sh
  fradev 2022-03-01 17:57:59 +01:00
  b37bf06de8
• Merge branch 'acmesh-official:master' into master
  fradev 2021-12-20 09:28:19 +01:00
  71a32477e4
• use _getdeployconf instead of sourcing DOMAIN_CONF

  (requested by @Neilpang in #3394)
  
  github: closes #3394

  Glenn Strauss 2021-09-01 16:37:10 -04:00
  c43c711f72
• Update ssh.sh

  shfmt formatting

  fradev 2021-08-30 11:32:07 +02:00
  08d60fcbf2
• Update ssh.sh

  SC2086 and SC2215

  fradev 2021-08-30 11:17:03 +02:00
  4cda54774a
• Update ssh.sh
  fradev 2021-08-30 11:08:06 +02:00
  613475ac26
• Update ssh.sh

  Added scp mode for copy the certs

  fradev 2021-08-25 16:55:36 +02:00
  20d23fcb92
• fix shfmt
  neil 2020-08-17 22:18:20 +08:00
  19c4345162
• Support multiple servers for SSH deployment.
  PM Extra 2020-05-22 18:15:38 +08:00
  a78a09f594
• Make remote backup directory path user configurable.
  dkerr64 2020-03-14 21:51:21 -04:00
  f38df4df11
• For MULTI_CALL default to undefined, deleting entry in config file if set to "no"
  dkerr64 2020-03-11 10:58:36 -04:00
  554e083f3d
• Change variable name to MULTI_CALL so default can be "no"
  dkerr64 2020-03-03 13:40:33 -05:00
  8ba573d196
• Remove spaces on blank line to fix travis error
  dkerr64 2020-02-22 22:09:28 -05:00
  f73a494407
• Remove variable from info/error printout that could potentially expose login credentials.
  dkerr64 2020-02-22 22:05:06 -05:00
  46ee74ed16
• Fix bug where backup and batch_mode yes/no values could not be changed.

  Once set to "no" then they could never be set back to "yes"

  dkerr64 2020-02-22 21:23:59 -05:00
  806b746fc0
• Add support for DEPLOY_SSH_BATCH_MODE with default of yes.

  Before this update all remote commands were bunched together and
  sent to the remote host in a single SSH command.  This could result
  in a very long sequence of commands that might be rejected by a
  remote host (example is VMware ESXi that uses busybox sh).
  With this update you can set DEPLOY_SSH_BATCH_MODE="no" and
  each remote command is sent as a separate SSH call so now we
  do not have big long sequence of commands.  Defaults to same
  behaviour as before this update.

  dkerr64 2020-02-22 21:10:42 -05:00
  cc820e97c6
• Move cleanup of backup directory to first step in the function.
  dkerr64 2020-02-22 20:43:28 -05:00
  283b04df73
• Move call to remote system into separate function
  dkerr64 2020-02-22 20:31:52 -05:00
  6420d1239f
• Move -T parameter into default ssh command variable
  dkerr64 2020-02-22 20:09:24 -05:00
  3d9608faa0
• Fix key leakage in SSH deploy log
  little-fat 2018-08-02 20:57:27 +08:00
  63134fafec
• remove _ACME prefix from all exported variables.
  David Kerr 2017-03-07 11:57:03 -05:00
  0649206796
• cleanup documentation and suppress some remote messages.
  David Kerr 2017-02-12 11:17:23 -05:00
  3a77a6eded
• Alternate backup cleanup after 180 days method.
  David Kerr 2017-02-11 17:55:05 -05:00
  18a90734d9
• Make backup of certs on remote server optional. Defaults to yes.
  David Kerr 2017-02-11 16:42:44 -05:00
  a4b2cebef6
• Reduce and simplify number of exported variables. Also allow any cert file to

  append to previous file.

  David Kerr 2017-02-11 16:11:27 -05:00
  68d708e56d
• Make certificate domain name part of the backup directory name.
  David Kerr 2017-02-08 10:15:39 -05:00
  3365df7778
• Rename sshdeploy.sh to ssh.sh
  David Kerr 2017-02-07 13:05:22 -05:00
  3be5a68e12