feat: 完善数据库备份恢复流程

ai_knowledge_base_v2/scripts/mysql_backup.sh

@@ -5,20 +5,42 @@ BACKUP_DIR="${BACKUP_DIR:-./backups}"
 MYSQL_HOST="${MYSQL_HOST:-127.0.0.1}"
 MYSQL_PORT="${MYSQL_PORT:-3307}"
 MYSQL_USER="${MYSQL_USER:-ai_kb}"
-MYSQL_PASSWORD="${MYSQL_PASSWORD:-ai_kb}"
 MYSQL_DATABASE="${MYSQL_DATABASE:-ai_knowledge_base_v2}"
+BACKUP_RETENTION_DAYS="${BACKUP_RETENTION_DAYS:-14}"
+: "${MYSQL_PASSWORD:?必须通过 MYSQL_PASSWORD 配置数据库密码}"
+
+command -v mysqldump >/dev/null || { echo "未找到 mysqldump" >&2; exit 1; }
+command -v gzip >/dev/null || { echo "未找到 gzip" >&2; exit 1; }
+command -v shasum >/dev/null || { echo "未找到 shasum" >&2; exit 1; }
 
 mkdir -p "$BACKUP_DIR"
-OUTPUT_FILE="$BACKUP_DIR/${MYSQL_DATABASE}_$(date +%Y%m%d_%H%M%S).sql"
+timestamp="$(date +%Y%m%d_%H%M%S)"
+output_file="$BACKUP_DIR/${MYSQL_DATABASE}_${timestamp}.sql.gz"
+temporary_file="${output_file}.tmp"
+trap 'rm -f "$temporary_file"' EXIT
 
-mysqldump \
-  -h "$MYSQL_HOST" \
-  -P "$MYSQL_PORT" \
-  -u "$MYSQL_USER" \
-  -p"$MYSQL_PASSWORD" \
+MYSQL_PWD="$MYSQL_PASSWORD" mysqldump \
+  --host="$MYSQL_HOST" \
+  --port="$MYSQL_PORT" \
+  --user="$MYSQL_USER" \
   --single-transaction \
+  --quick \
   --routines \
   --triggers \
-  "$MYSQL_DATABASE" > "$OUTPUT_FILE"
+  --events \
+  --set-gtid-purged=OFF \
+  --default-character-set=utf8mb4 \
+  "$MYSQL_DATABASE" | gzip -9 > "$temporary_file"
 
-echo "备份完成：$OUTPUT_FILE"
+gzip -t "$temporary_file"
+test -s "$temporary_file"
+mv "$temporary_file" "$output_file"
+(cd "$(dirname "$output_file")" && shasum -a 256 "$(basename "$output_file")" > "$(basename "$output_file").sha256")
+
+if [[ "$BACKUP_RETENTION_DAYS" =~ ^[0-9]+$ ]] && (( BACKUP_RETENTION_DAYS > 0 )); then
+  find "$BACKUP_DIR" -type f \( -name "${MYSQL_DATABASE}_*.sql.gz" -o -name "${MYSQL_DATABASE}_*.sql.gz.sha256" \) \
+    -mtime "+$BACKUP_RETENTION_DAYS" -delete
+fi
+
+echo "备份完成：$output_file"
+echo "校验文件：${output_file}.sha256"

ai_knowledge_base_v2/scripts/mysql_restore.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+MYSQL_HOST="${MYSQL_HOST:-127.0.0.1}"
+MYSQL_PORT="${MYSQL_PORT:-3307}"
+MYSQL_USER="${MYSQL_USER:-ai_kb}"
+MYSQL_DATABASE="${MYSQL_DATABASE:-ai_knowledge_base_v2}"
+: "${MYSQL_PASSWORD:?必须通过 MYSQL_PASSWORD 配置数据库密码}"
+: "${BACKUP_FILE:?必须通过 BACKUP_FILE 指定 .sql.gz 备份文件}"
+
+if [[ "${RESTORE_CONFIRM:-}" != "YES" ]]; then
+  echo "恢复会覆盖目标数据库数据，确认后请设置 RESTORE_CONFIRM=YES" >&2
+  exit 2
+fi
+
+command -v mysql >/dev/null || { echo "未找到 mysql 客户端" >&2; exit 1; }
+command -v gzip >/dev/null || { echo "未找到 gzip" >&2; exit 1; }
+command -v shasum >/dev/null || { echo "未找到 shasum" >&2; exit 1; }
+test -f "$BACKUP_FILE" || { echo "备份文件不存在：$BACKUP_FILE" >&2; exit 1; }
+test -f "${BACKUP_FILE}.sha256" || { echo "缺少校验文件：${BACKUP_FILE}.sha256" >&2; exit 1; }
+
+(cd "$(dirname "$BACKUP_FILE")" && shasum -a 256 -c "$(basename "$BACKUP_FILE").sha256")
+gzip -t "$BACKUP_FILE"
+
+MYSQL_PWD="$MYSQL_PASSWORD" gzip -dc "$BACKUP_FILE" | MYSQL_PWD="$MYSQL_PASSWORD" mysql \
+  --host="$MYSQL_HOST" \
+  --port="$MYSQL_PORT" \
+  --user="$MYSQL_USER" \
+  --default-character-set=utf8mb4 \
+  "$MYSQL_DATABASE"
+
+MYSQL_PWD="$MYSQL_PASSWORD" mysql \
+  --host="$MYSQL_HOST" \
+  --port="$MYSQL_PORT" \
+  --user="$MYSQL_USER" \
+  --database="$MYSQL_DATABASE" \
+  --batch --skip-column-names \
+  --execute="SELECT CONCAT('恢复完成，迁移版本：', COALESCE((SELECT version_num FROM alembic_version LIMIT 1), '未知'));"

ai_knowledge_base_v2/scripts/phase6_verify.sh

@@ -46,4 +46,8 @@ BOOTSTRAP_ADMIN_USERNAME=admin \
 BOOTSTRAP_ADMIN_PASSWORD='Strong-Test-Password-2026' \
 docker compose -f docker-compose.prod.yml config --quiet
 
+echo "== 备份恢复脚本语法检查 =="
+bash -n scripts/mysql_backup.sh
+bash -n scripts/mysql_restore.sh
+
 echo "阶段六自动验证完成"