feat(deploy): 在线更新 - 新增后台检查、强制备份迁移与失败自动回退

backend/internal/hostupdate/manager_ops_test.go

@@ -0,0 +1,92 @@
+package hostupdate
+
+import (
+	"archive/zip"
+	"crypto/sha256"
+	"encoding/hex"
+	"io"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestSetEnvValuePreservesOtherSettings(t *testing.T) {
+	directory := t.TempDir()
+	path := filepath.Join(directory, ".env")
+	if err := os.WriteFile(path, []byte("# keep\nCANVAS_IMAGE_TAG=1.0.0\nPOSTGRES_DB=canvas\n"), 0o640); err != nil {
+		t.Fatal(err)
+	}
+	if err := setEnvValue(path, "CANVAS_IMAGE_TAG", "1.2.2-preview.1"); err != nil {
+		t.Fatal(err)
+	}
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	value := string(data)
+	if !strings.Contains(value, "# keep\n") || !strings.Contains(value, "POSTGRES_DB=canvas\n") || !strings.Contains(value, "CANVAS_IMAGE_TAG=1.2.2-preview.1\n") {
+		t.Fatalf("unexpected env contents: %q", value)
+	}
+	stat, err := os.Stat(path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if stat.Mode().Perm() != 0o640 {
+		t.Fatalf("mode=%o, want 640", stat.Mode().Perm())
+	}
+}
+
+func TestVerifyZipBackupRejectsCorruption(t *testing.T) {
+	path := filepath.Join(t.TempDir(), "backup.zip")
+	file, err := os.Create(path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	archive := zip.NewWriter(file)
+	for name, content := range map[string]string{
+		"metadata.json":    "{}",
+		"database.dump":    "database",
+		"backend-data.tar": "data",
+	} {
+		entry, createErr := archive.Create(name)
+		if createErr != nil {
+			t.Fatal(createErr)
+		}
+		if _, writeErr := io.WriteString(entry, content); writeErr != nil {
+			t.Fatal(writeErr)
+		}
+	}
+	if err := archive.Close(); err != nil {
+		t.Fatal(err)
+	}
+	if err := file.Close(); err != nil {
+		t.Fatal(err)
+	}
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	hash := sha256.Sum256(data)
+	checksum := "sha256:" + hex.EncodeToString(hash[:])
+	if err := verifyZipBackup(path, checksum); err != nil {
+		t.Fatalf("valid backup rejected: %v", err)
+	}
+	if err := os.WriteFile(path, append(data, byte(1)), 0o600); err != nil {
+		t.Fatal(err)
+	}
+	if err := verifyZipBackup(path, checksum); err == nil {
+		t.Fatal("corrupted backup was accepted")
+	}
+}
+
+func TestCurrentVersionRejectsLatest(t *testing.T) {
+	installDir := t.TempDir()
+	if err := os.WriteFile(filepath.Join(installDir, ".env"), []byte("CANVAS_IMAGE_TAG=latest\n"), 0o600); err != nil {
+		t.Fatal(err)
+	}
+	manager := &Manager{config: Config{InstallDir: installDir, EnvFile: ".env"}}
+	if _, err := manager.currentVersion(); err == nil {
+		t.Fatal("latest tag was accepted")
+	}
+}