3 * PostgreSQL-specific installer.
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
7 * the Free Software Foundation; either version 2 of the License, or
8 * (at your option) any later version.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License along
16 * with this program; if not, write to the Free Software Foundation, Inc.,
17 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 * http://www.gnu.org/copyleft/gpl.html
25 * Class for setting up the MediaWiki database using Postgres.
30 class PostgresInstaller
extends DatabaseInstaller
{
32 protected $globalNames = [
41 protected $internalDefaults = [
42 '_InstallUser' => 'postgres',
45 public $minimumVersion = '8.3';
46 public $maxRoleSearchDepth = 5;
48 protected $pgConns = [];
54 public function isCompiled() {
55 return self
::checkExtension( 'pgsql' );
58 function getConnectForm() {
59 return $this->getTextBox(
63 $this->parent
->getHelpBox( 'config-db-host-help' )
65 $this->getTextBox( 'wgDBport', 'config-db-port' ) .
66 Html
::openElement( 'fieldset' ) .
67 Html
::element( 'legend', [], wfMessage( 'config-db-wiki-settings' )->text() ) .
72 $this->parent
->getHelpBox( 'config-db-name-help' )
78 $this->parent
->getHelpBox( 'config-db-schema-help' )
80 Html
::closeElement( 'fieldset' ) .
81 $this->getInstallUserBox();
84 function submitConnectForm() {
85 // Get variables from the request
86 $newValues = $this->setVarsFromRequest( [
94 $status = Status
::newGood();
95 if ( !strlen( $newValues['wgDBname'] ) ) {
96 $status->fatal( 'config-missing-db-name' );
97 } elseif ( !preg_match( '/^[a-zA-Z0-9_]+$/', $newValues['wgDBname'] ) ) {
98 $status->fatal( 'config-invalid-db-name', $newValues['wgDBname'] );
100 if ( !preg_match( '/^[a-zA-Z0-9_]*$/', $newValues['wgDBmwschema'] ) ) {
101 $status->fatal( 'config-invalid-schema', $newValues['wgDBmwschema'] );
105 if ( $status->isOK() ) {
106 $status->merge( $this->submitInstallUserBox() );
108 if ( !$status->isOK() ) {
112 $status = $this->getPgConnection( 'create-db' );
113 if ( !$status->isOK() ) {
117 * @var $conn DatabaseBase
119 $conn = $status->value
;
122 $version = $conn->getServerVersion();
123 if ( version_compare( $version, $this->minimumVersion
) < 0 ) {
124 return Status
::newFatal( 'config-postgres-old', $this->minimumVersion
, $version );
127 $this->setVar( 'wgDBuser', $this->getVar( '_InstallUser' ) );
128 $this->setVar( 'wgDBpassword', $this->getVar( '_InstallPassword' ) );
130 return Status
::newGood();
133 public function getConnection() {
134 $status = $this->getPgConnection( 'create-tables' );
135 if ( $status->isOK() ) {
136 $this->db
= $status->value
;
142 public function openConnection() {
143 return $this->openPgConnection( 'create-tables' );
147 * Open a PG connection with given parameters
148 * @param string $user User name
149 * @param string $password Password
150 * @param string $dbName Database name
151 * @param string $schema Database schema
154 protected function openConnectionWithParams( $user, $password, $dbName, $schema ) {
155 $status = Status
::newGood();
157 $db = DatabaseBase
::factory( 'postgres', [
158 'host' => $this->getVar( 'wgDBserver' ),
160 'password' => $password,
162 'schema' => $schema ] );
163 $status->value
= $db;
164 } catch ( DBConnectionError
$e ) {
165 $status->fatal( 'config-connection-error', $e->getMessage() );
172 * Get a special type of connection
173 * @param string $type See openPgConnection() for details.
176 protected function getPgConnection( $type ) {
177 if ( isset( $this->pgConns
[$type] ) ) {
178 return Status
::newGood( $this->pgConns
[$type] );
180 $status = $this->openPgConnection( $type );
182 if ( $status->isOK() ) {
184 * @var $conn DatabaseBase
186 $conn = $status->value
;
187 $conn->clearFlag( DBO_TRX
);
188 $conn->commit( __METHOD__
);
189 $this->pgConns
[$type] = $conn;
196 * Get a connection of a specific PostgreSQL-specific type. Connections
197 * of a given type are cached.
199 * PostgreSQL lacks cross-database operations, so after the new database is
200 * created, you need to make a separate connection to connect to that
201 * database and add tables to it.
203 * New tables are owned by the user that creates them, and MediaWiki's
204 * PostgreSQL support has always assumed that the table owner will be
205 * $wgDBuser. So before we create new tables, we either need to either
206 * connect as the other user or to execute a SET ROLE command. Using a
207 * separate connection for this allows us to avoid accidental cross-module
210 * @param string $type The type of connection to get:
211 * - create-db: A connection for creating DBs, suitable for pre-
213 * - create-schema: A connection to the new DB, for creating schemas and
214 * other similar objects in the new DB.
215 * - create-tables: A connection with a role suitable for creating tables.
217 * @throws MWException
218 * @return Status On success, a connection object will be in the value member.
220 protected function openPgConnection( $type ) {
223 return $this->openConnectionToAnyDB(
224 $this->getVar( '_InstallUser' ),
225 $this->getVar( '_InstallPassword' ) );
226 case 'create-schema':
227 return $this->openConnectionWithParams(
228 $this->getVar( '_InstallUser' ),
229 $this->getVar( '_InstallPassword' ),
230 $this->getVar( 'wgDBname' ),
231 $this->getVar( 'wgDBmwschema' ) );
232 case 'create-tables':
233 $status = $this->openPgConnection( 'create-schema' );
234 if ( $status->isOK() ) {
236 * @var $conn DatabaseBase
238 $conn = $status->value
;
239 $safeRole = $conn->addIdentifierQuotes( $this->getVar( 'wgDBuser' ) );
240 $conn->query( "SET ROLE $safeRole" );
245 throw new MWException( "Invalid special connection type: \"$type\"" );
249 public function openConnectionToAnyDB( $user, $password ) {
254 if ( !in_array( $this->getVar( 'wgDBname' ), $dbs ) ) {
255 array_unshift( $dbs, $this->getVar( 'wgDBname' ) );
258 $status = Status
::newGood();
259 foreach ( $dbs as $db ) {
262 'host' => $this->getVar( 'wgDBserver' ),
264 'password' => $password,
267 $conn = DatabaseBase
::factory( 'postgres', $p );
268 } catch ( DBConnectionError
$error ) {
270 $status->fatal( 'config-pg-test-error', $db,
271 $error->getMessage() );
273 if ( $conn !== false ) {
277 if ( $conn !== false ) {
278 return Status
::newGood( $conn );
284 protected function getInstallUserPermissions() {
285 $status = $this->getPgConnection( 'create-db' );
286 if ( !$status->isOK() ) {
290 * @var $conn DatabaseBase
292 $conn = $status->value
;
293 $superuser = $this->getVar( '_InstallUser' );
295 $row = $conn->selectRow( '"pg_catalog"."pg_roles"', '*',
296 [ 'rolname' => $superuser ], __METHOD__
);
301 protected function canCreateAccounts() {
302 $perms = $this->getInstallUserPermissions();
307 return $perms->rolsuper
=== 't' ||
$perms->rolcreaterole
=== 't';
310 protected function isSuperUser() {
311 $perms = $this->getInstallUserPermissions();
316 return $perms->rolsuper
=== 't';
319 public function getSettingsForm() {
320 if ( $this->canCreateAccounts() ) {
321 $noCreateMsg = false;
323 $noCreateMsg = 'config-db-web-no-create-privs';
325 $s = $this->getWebUserBox( $noCreateMsg );
330 public function submitSettingsForm() {
331 $status = $this->submitWebUserBox();
332 if ( !$status->isOK() ) {
336 $same = $this->getVar( 'wgDBuser' ) === $this->getVar( '_InstallUser' );
341 // Check if the web user exists
342 // Connect to the database with the install user
343 $status = $this->getPgConnection( 'create-db' );
344 if ( !$status->isOK() ) {
347 $exists = $status->value
->roleExists( $this->getVar( 'wgDBuser' ) );
350 // Validate the create checkbox
351 if ( $this->canCreateAccounts() && !$same && !$exists ) {
352 $create = $this->getVar( '_CreateDBAccount' );
354 $this->setVar( '_CreateDBAccount', false );
358 if ( !$create && !$exists ) {
359 if ( $this->canCreateAccounts() ) {
360 $msg = 'config-install-user-missing-create';
362 $msg = 'config-install-user-missing';
365 return Status
::newFatal( $msg, $this->getVar( 'wgDBuser' ) );
369 // No more checks to do
370 return Status
::newGood();
373 // Existing web account. Test the connection.
374 $status = $this->openConnectionToAnyDB(
375 $this->getVar( 'wgDBuser' ),
376 $this->getVar( 'wgDBpassword' ) );
377 if ( !$status->isOK() ) {
381 // The web user is conventionally the table owner in PostgreSQL
382 // installations. Make sure the install user is able to create
383 // objects on behalf of the web user.
384 if ( $same ||
$this->canCreateObjectsForWebUser() ) {
385 return Status
::newGood();
387 return Status
::newFatal( 'config-pg-not-in-role' );
392 * Returns true if the install user is able to create objects owned
393 * by the web user, false otherwise.
396 protected function canCreateObjectsForWebUser() {
397 if ( $this->isSuperUser() ) {
401 $status = $this->getPgConnection( 'create-db' );
402 if ( !$status->isOK() ) {
405 $conn = $status->value
;
406 $installerId = $conn->selectField( '"pg_catalog"."pg_roles"', 'oid',
407 [ 'rolname' => $this->getVar( '_InstallUser' ) ], __METHOD__
);
408 $webId = $conn->selectField( '"pg_catalog"."pg_roles"', 'oid',
409 [ 'rolname' => $this->getVar( 'wgDBuser' ) ], __METHOD__
);
411 return $this->isRoleMember( $conn, $installerId, $webId, $this->maxRoleSearchDepth
);
415 * Recursive helper for canCreateObjectsForWebUser().
416 * @param DatabaseBase $conn
417 * @param int $targetMember Role ID of the member to look for
418 * @param int $group Role ID of the group to look for
419 * @param int $maxDepth Maximum recursive search depth
422 protected function isRoleMember( $conn, $targetMember, $group, $maxDepth ) {
423 if ( $targetMember === $group ) {
424 // A role is always a member of itself
427 // Get all members of the given group
428 $res = $conn->select( '"pg_catalog"."pg_auth_members"', [ 'member' ],
429 [ 'roleid' => $group ], __METHOD__
);
430 foreach ( $res as $row ) {
431 if ( $row->member
== $targetMember ) {
432 // Found target member
435 // Recursively search each member of the group to see if the target
436 // is a member of it, up to the given maximum depth.
437 if ( $maxDepth > 0 ) {
438 if ( $this->isRoleMember( $conn, $targetMember, $row->member
, $maxDepth - 1 ) ) {
439 // Found member of member
448 public function preInstall() {
451 'callback' => [ $this, 'setupUser' ],
454 'name' => 'pg-commit',
455 'callback' => [ $this, 'commitChanges' ],
458 'name' => 'pg-plpgsql',
459 'callback' => [ $this, 'setupPLpgSQL' ],
463 'callback' => [ $this, 'setupSchema' ]
466 if ( $this->getVar( '_CreateDBAccount' ) ) {
467 $this->parent
->addInstallStep( $createDbAccount, 'database' );
469 $this->parent
->addInstallStep( $commitCB, 'interwiki' );
470 $this->parent
->addInstallStep( $plpgCB, 'database' );
471 $this->parent
->addInstallStep( $schemaCB, 'database' );
474 function setupDatabase() {
475 $status = $this->getPgConnection( 'create-db' );
476 if ( !$status->isOK() ) {
479 $conn = $status->value
;
481 $dbName = $this->getVar( 'wgDBname' );
483 $exists = $conn->selectField( '"pg_catalog"."pg_database"', '1',
484 [ 'datname' => $dbName ], __METHOD__
);
486 $safedb = $conn->addIdentifierQuotes( $dbName );
487 $conn->query( "CREATE DATABASE $safedb", __METHOD__
);
490 return Status
::newGood();
493 function setupSchema() {
494 // Get a connection to the target database
495 $status = $this->getPgConnection( 'create-schema' );
496 if ( !$status->isOK() ) {
499 $conn = $status->value
;
501 // Create the schema if necessary
502 $schema = $this->getVar( 'wgDBmwschema' );
503 $safeschema = $conn->addIdentifierQuotes( $schema );
504 $safeuser = $conn->addIdentifierQuotes( $this->getVar( 'wgDBuser' ) );
505 if ( !$conn->schemaExists( $schema ) ) {
507 $conn->query( "CREATE SCHEMA $safeschema AUTHORIZATION $safeuser" );
508 } catch ( DBQueryError
$e ) {
509 return Status
::newFatal( 'config-install-pg-schema-failed',
510 $this->getVar( '_InstallUser' ), $schema );
514 // Select the new schema in the current connection
515 $conn->determineCoreSchema( $schema );
517 return Status
::newGood();
520 function commitChanges() {
521 $this->db
->commit( __METHOD__
);
523 return Status
::newGood();
526 function setupUser() {
527 if ( !$this->getVar( '_CreateDBAccount' ) ) {
528 return Status
::newGood();
531 $status = $this->getPgConnection( 'create-db' );
532 if ( !$status->isOK() ) {
535 $conn = $status->value
;
537 $safeuser = $conn->addIdentifierQuotes( $this->getVar( 'wgDBuser' ) );
538 $safepass = $conn->addQuotes( $this->getVar( 'wgDBpassword' ) );
540 // Check if the user already exists
541 $userExists = $conn->roleExists( $this->getVar( 'wgDBuser' ) );
542 if ( !$userExists ) {
545 $sql = "CREATE ROLE $safeuser NOCREATEDB LOGIN PASSWORD $safepass";
547 // If the install user is not a superuser, we need to make the install
548 // user a member of the new user's group, so that the install user will
549 // be able to create a schema and other objects on behalf of the new user.
550 if ( !$this->isSuperUser() ) {
551 $sql .= ' ROLE' . $conn->addIdentifierQuotes( $this->getVar( '_InstallUser' ) );
554 $conn->query( $sql, __METHOD__
);
555 } catch ( DBQueryError
$e ) {
556 return Status
::newFatal( 'config-install-user-create-failed',
557 $this->getVar( 'wgDBuser' ), $e->getMessage() );
561 return Status
::newGood();
564 function getLocalSettings() {
565 $port = $this->getVar( 'wgDBport' );
566 $schema = $this->getVar( 'wgDBmwschema' );
568 return "# Postgres specific settings
569 \$wgDBport = \"{$port}\";
570 \$wgDBmwschema = \"{$schema}\";";
573 public function preUpgrade() {
574 global $wgDBuser, $wgDBpassword;
576 # Normal user and password are selected after this step, so for now
577 # just copy these two
578 $wgDBuser = $this->getVar( '_InstallUser' );
579 $wgDBpassword = $this->getVar( '_InstallPassword' );
582 public function createTables() {
583 $schema = $this->getVar( 'wgDBmwschema' );
585 $status = $this->getConnection();
586 if ( !$status->isOK() ) {
591 * @var $conn DatabaseBase
593 $conn = $status->value
;
595 if ( $conn->tableExists( 'archive' ) ) {
596 $status->warning( 'config-install-tables-exist' );
602 $conn->begin( __METHOD__
);
604 if ( !$conn->schemaExists( $schema ) ) {
605 $status->fatal( 'config-install-pg-schema-not-exist' );
609 $error = $conn->sourceFile( $conn->getSchemaPath() );
610 if ( $error !== true ) {
611 $conn->reportQueryError( $error, 0, '', __METHOD__
);
612 $conn->rollback( __METHOD__
);
613 $status->fatal( 'config-install-tables-failed', $error );
615 $conn->commit( __METHOD__
);
617 // Resume normal operations
618 if ( $status->isOK() ) {
625 public function getGlobalDefaults() {
626 // The default $wgDBmwschema is null, which breaks Postgres and other DBMSes that require
627 // the use of a schema, so we need to set it here
628 return array_merge( parent
::getGlobalDefaults(), [
629 'wgDBmwschema' => 'mediawiki',
633 public function setupPLpgSQL() {
634 // Connect as the install user, since it owns the database and so is
635 // the user that needs to run "CREATE LANGAUGE"
636 $status = $this->getPgConnection( 'create-schema' );
637 if ( !$status->isOK() ) {
641 * @var $conn DatabaseBase
643 $conn = $status->value
;
645 $exists = $conn->selectField( '"pg_catalog"."pg_language"', 1,
646 [ 'lanname' => 'plpgsql' ], __METHOD__
);
648 // Already exists, nothing to do
649 return Status
::newGood();
652 // plpgsql is not installed, but if we have a pg_pltemplate table, we
653 // should be able to create it
654 $exists = $conn->selectField(
655 [ '"pg_catalog"."pg_class"', '"pg_catalog"."pg_namespace"' ],
658 'pg_namespace.oid=relnamespace',
659 'nspname' => 'pg_catalog',
660 'relname' => 'pg_pltemplate',
665 $conn->query( 'CREATE LANGUAGE plpgsql' );
666 } catch ( DBQueryError
$e ) {
667 return Status
::newFatal( 'config-pg-no-plpgsql', $this->getVar( 'wgDBname' ) );
670 return Status
::newFatal( 'config-pg-no-plpgsql', $this->getVar( 'wgDBname' ) );
673 return Status
::newGood();