"""ghost — pre-op seed hooks (Phase 1e HC3 / Phase 2 P4 backup data-integrity). The orchestrator runs these BEFORE each op; the matching test_.py asserts post-op (assertion only). The CURRENT ghost recipe (1.2.0+6.21.2-alpine) stores ALL its content — posts, users, settings — in a **MySQL** `ghost` database (compose `db` service, `mysql:8.0`), NOT sqlite (the older recipe_meta comment was stale; the live compose uses `database__client: mysql`). The recipe's `db` service is backupbot-labelled with a **logical dump** pre-hook (`mysqldump -u root -p... ghost --tab /var/lib/mysql-files/`, `backup.path=/var/lib/mysql-files/`), so the marker must live in the `ghost` database to ride that dump. We seed a dedicated `ci_marker` table (Ghost's own knex migrations never touch it) via the `mysql` CLI in the `db` service. MYSQL_PWD (not `-p`) avoids the client's "password on the command line is insecure" stderr noise; `-N -s` strips column names + box decoration so read-backs are clean scalars. The marker rides backup→restore the same way a real post's row would. """ import os import sys sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner")) from harness import lifecycle # noqa: E402 def _mysql(domain, sql): cmd = 'MYSQL_PWD="$(cat /run/secrets/db_password)" ' f'mysql -u root -N -s ghost -e "{sql}"' return lifecycle.exec_in_app(domain, ["sh", "-c", cmd], service="db").strip() def _seed(domain, value): _mysql( domain, "CREATE TABLE IF NOT EXISTS ci_marker(v VARCHAR(255)); DELETE FROM ci_marker; " f"INSERT INTO ci_marker VALUES('{value}');", ) got = _mysql(domain, "SELECT v FROM ci_marker;") assert got == value, f"seed did not commit (read back {got!r}, expected {value!r})" def pre_upgrade(domain, meta): _seed(domain, "upgrade-survives") def pre_backup(domain, meta): _seed(domain, "original") def pre_restore(domain, meta): # diverge from the backup so a successful restore is observable: drop the marker table. _mysql(domain, "DROP TABLE IF EXISTS ci_marker;") got = _mysql( domain, "SELECT COUNT(*) FROM information_schema.tables " "WHERE table_schema='ghost' AND table_name='ci_marker';", ) assert got == "0", f"drop did not take (information_schema still lists ci_marker: {got!r})"