fix: retire active pgvector artifacts

scripts/vector-backup.sh

@@ -1,53 +1,80 @@
 #!/bin/sh
 set -eu
 
-root=$(CDPATH= cd -- "$(dirname "$0")/.." && pwd)
-. "$root/scripts/secret-file-utils.sh"
-
 usage() {
-  echo "usage: $0 --host HOST --database DB --user USER --password-file FILE --output FILE [--port PORT]" >&2
+  echo "usage: $0 --project-name NAME --output FILE" >&2
   exit 2
 }
 
-host= database= user= password_file= output= port=5432
+project_name=
+output=
 while [ "$#" -gt 0 ]; do
   case "$1" in
-    --host) host=${2-}; shift 2 ;;
-    --port) port=${2-}; shift 2 ;;
-    --database) database=${2-}; shift 2 ;;
-    --user) user=${2-}; shift 2 ;;
-    --password-file) password_file=${2-}; shift 2 ;;
+    --project-name) project_name=${2-}; shift 2 ;;
     --output) output=${2-}; shift 2 ;;
     *) usage ;;
   esac
 done
-[ -n "$host" ] && [ -n "$database" ] && [ -n "$user" ] || usage
-[ -n "$password_file" ] && [ -n "$output" ] || usage
-validate_secret_file "$password_file" "backup password file"
+
+[ -n "$project_name" ] && [ -n "$output" ] || usage
 [ ! -e "$output" ] || { echo "refusing to overwrite existing backup: $output" >&2; exit 2; }
+
 output_dir=$(dirname "$output")
 output_name=$(basename "$output")
 [ -d "$output_dir" ] || { echo "backup destination directory does not exist" >&2; exit 2; }
 
-password=$(read_secret_file "$password_file" "backup password file")
+resolve_volume() {
+  names=$(docker volume ls \
+    --filter "label=com.docker.compose.project=$project_name" \
+    --filter "label=com.docker.compose.volume=qdrant-data" \
+    --format '{{.Name}}')
+  count=$(printf '%s\n' "$names" | sed '/^$/d' | wc -l | tr -d ' ')
+  [ "$count" -eq 1 ] || {
+    echo "expected exactly one qdrant-data volume for compose project $project_name" >&2
+    exit 2
+  }
+  printf '%s\n' "$names" | sed -n '/./{p;q;}'
+}
+
+resolve_mountpoint() {
+  mountpoint=$(docker volume inspect --format '{{ .Mountpoint }}' "$1")
+  [ -n "$mountpoint" ] || { echo "docker did not return a qdrant-data mountpoint" >&2; exit 2; }
+  case "$mountpoint" in
+    /*) ;;
+    *) echo "qdrant-data mountpoint is not absolute: $mountpoint" >&2; exit 2 ;;
+  esac
+  [ -d "$mountpoint" ] || { echo "qdrant-data mountpoint is not a directory: $mountpoint" >&2; exit 2; }
+  printf '%s\n' "$mountpoint"
+}
+
+volume_name=$(resolve_volume)
+mountpoint=$(resolve_mountpoint "$volume_name")
+running_container=$(docker compose --project-name "$project_name" ps --status running -q qdrant)
+restart_qdrant=0
+cleanup() {
+  status=$?
+  if [ "${temporary_output:-}" ] && [ -e "${temporary_output:-}" ]; then
+    rm -f "$temporary_output"
+  fi
+  if [ "$restart_qdrant" -eq 1 ]; then
+    docker compose --project-name "$project_name" start qdrant >/dev/null
+  fi
+  exit "$status"
+}
+trap cleanup EXIT HUP INT TERM
+
+if [ -n "$running_container" ]; then
+  docker compose --project-name "$project_name" stop qdrant >/dev/null
+  restart_qdrant=1
+fi
 
 umask 077
-passfile=$(mktemp "${TMPDIR:-/tmp}/thoth-vector-pgpass.XXXXXX")
 temporary_output=$(mktemp "$output_dir/.${output_name}.tmp.XXXXXX")
-cleanup() { rm -f "$passfile" "$temporary_output"; }
-trap cleanup EXIT HUP INT TERM
-escaped=$(printf '%s' "$password" | sed 's/\\/\\\\/g; s/:/\\:/g')
-printf '%s:%s:%s:%s:%s\n' "$host" "$port" "$database" "$user" "$escaped" >"$passfile"
-chmod 0600 "$passfile"
-
-PGPASSFILE=$passfile pg_dump \
-  --host="$host" --port="$port" --username="$user" --dbname="$database" \
-  --format=custom --compress=9 \
-  --table=vectors.schema_records --table=vectors.evidence --table=vectors.memory \
-  --table=public.tht_vector_migrations --file="$temporary_output"
+tar -C "$mountpoint" -cf "$temporary_output" .
 if ! ln "$temporary_output" "$output"; then
   echo "refusing to replace backup destination created concurrently: $output" >&2
   exit 2
 fi
 rm -f "$temporary_output"
-echo "Vector backup written: $output"
+temporary_output=
+echo "Qdrant backup written from $volume_name to $output"