install.sh: support for inplace upgrade

and also support version tags without leading v.

CHANGELOG.md

@@ -1,30 +1,5 @@
 # Changelog
 
-## [5.0.2](https://github.com/opencloud-eu/opencloud/releases/tag/v5.0.2) - 2026-02-05
-
-### ❤️ Thanks to all contributors! ❤️
-
-@AlexAndBear, @ScharfViktor, @flimmy, @individual-it, @rhafer, @saw-jan
-
-### 🐛 Bug Fixes
-
-- [full-ci] reva-bump-2.42.3 [[#2276](https://github.com/opencloud-eu/opencloud/pull/2276)]
-
-### ✅ Tests
-
-- adapt test for #514 [[#2255](https://github.com/opencloud-eu/opencloud/pull/2255)]
-- api-test: upload-rename-download file with back slash [[#2239](https://github.com/opencloud-eu/opencloud/pull/2239)]
-- [full-ci][tests-only] test: add hook failures to the test failures list [[#2041](https://github.com/opencloud-eu/opencloud/pull/2041)]
-
-### 📚 Documentation
-
-- docs(proxy): Clarify PROXY_OIDC_USERINFO_CACHE_TTL value [[#2256](https://github.com/opencloud-eu/opencloud/pull/2256)]
-
-### 📦️ Dependencies
-
-- [full-ci] reva-bump-2.42.2 [[#2270](https://github.com/opencloud-eu/opencloud/pull/2270)]
-- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.5 to 2.27.6 [[#2238](https://github.com/opencloud-eu/opencloud/pull/2238)]
-
 ## [5.0.1](https://github.com/opencloud-eu/opencloud/releases/tag/v5.0.1) - 2026-01-28
 
 ### ❤️ Thanks to all contributors! ❤️

deployments/examples/bare-metal-simple/install.sh

@@ -48,6 +48,7 @@ get_latest_version
 
 dlversion="${OC_VERSION:-$latest_version}"
 dlurl="https://github.com/opencloud-eu/opencloud/releases/download/v${dlversion}/"
+dlurl2="https://github.com/opencloud-eu/opencloud/releases/download/${dlversion}/"
 
 sandbox="opencloud-sandbox-${dlversion}"
 
@@ -74,6 +75,17 @@ fi
 dlfile="opencloud-${dlversion}-${os}-${dlarch}"
 
 # download
+status=$(curl -I -L -o /dev/null -s -w "%{http_code}\n" "$dlurl/$dlfile")
+if [ "$status" -ne 200 ]; then
+       echo "HTTP code: $status ($dlurl/$dlfile)"
+       dlurl=$dlurl2
+       status=$(curl -I -L -o /dev/null -s -w "%{http_code}\n" "$dlurl2/$dlfile")
+       if [ "$status" -ne 200 ]; then
+               echo "HTTP code: $status ($dlurl/$dlfile)"
+               # exit -1       # or try nevertheless?
+       fi
+fi
+
 echo "Downloading ${dlurl}/${dlfile}"
 
 curl -L -o "${dlfile}" --progress-bar "${dlurl}/${dlfile}"
@@ -84,12 +96,12 @@ export OC_CONFIG_DIR="$basedir/config"
 export OC_BASE_DATA_PATH="$basedir/data"
 mkdir -p "$OC_CONFIG_DIR" "$OC_BASE_DATA_PATH"
 
+maincfg="$OC_CONFIG_DIR/opencloud.yaml"
+
 # It is bound to localhost for now to deal with non existing routes
 # to certain host names for example in WSL
 host="${OC_HOST:-localhost}"
 
-./${dlfile} init --insecure yes --ap admin
-
 echo '#!/bin/bash
 SCRIPT_DIR="$(dirname "$(readlink -f "${0}")")"
 cd "${SCRIPT_DIR}"' > runopencloud.sh
@@ -108,6 +120,14 @@ export OC_LOG_LEVEL=warning
 
 chmod 755 runopencloud.sh
 
+if [ -f "$maincfg" ]; then
+    echo "Main config file $maincfg exists."
+    echo "Skipping initialization. This might be an update from a previous version."
+    echo "To restart the server, refer to the script in $basedir or $basedir/$sandbox"
+    exit 0
+fi
+./${dlfile} init --insecure yes --ap admin
+
 echo "Connect to OpenCloud via https://${host}:9200"
 echo ""
 echo "*** This is a fragile test setup, not suitable for production! ***"

go.mod

@@ -65,7 +65,7 @@ require (
 	github.com/open-policy-agent/opa v1.12.3
 	github.com/opencloud-eu/icap-client v0.0.0-20250930132611-28a2afe62d89
 	github.com/opencloud-eu/libre-graph-api-go v1.0.8-0.20250724122329-41ba6b191e76
-	github.com/opencloud-eu/reva/v2 v2.42.3
+	github.com/opencloud-eu/reva/v2 v2.42.2
 	github.com/opensearch-project/opensearch-go/v4 v4.6.0
 	github.com/orcaman/concurrent-map v1.0.0
 	github.com/pkg/errors v0.9.1

go.sum

@@ -969,8 +969,8 @@ github.com/opencloud-eu/inotifywaitgo v0.0.0-20251111171128-a390bae3c5e9 h1:dIft
 github.com/opencloud-eu/inotifywaitgo v0.0.0-20251111171128-a390bae3c5e9/go.mod h1:JWyDC6H+5oZRdUJUgKuaye+8Ph5hEs6HVzVoPKzWSGI=
 github.com/opencloud-eu/libre-graph-api-go v1.0.8-0.20250724122329-41ba6b191e76 h1:vD/EdfDUrv4omSFjrinT8Mvf+8D7f9g4vgQ2oiDrVUI=
 github.com/opencloud-eu/libre-graph-api-go v1.0.8-0.20250724122329-41ba6b191e76/go.mod h1:pzatilMEHZFT3qV7C/X3MqOa3NlRQuYhlRhZTL+hN6Q=
-github.com/opencloud-eu/reva/v2 v2.42.3 h1:A9v52jgIY6+UHnj5xuC4HVn/w8X4sVSibyvWsQ/50mk=
-github.com/opencloud-eu/reva/v2 v2.42.3/go.mod h1:LrMYMcSrH9nvTywiE1ry0i2w38yGLFKUPYxWjvKulBo=
+github.com/opencloud-eu/reva/v2 v2.42.2 h1:2v2RXsD9qX3L4vhu3Pl4QEXgx6jANeKz3FSFhZ3oU5E=
+github.com/opencloud-eu/reva/v2 v2.42.2/go.mod h1:LrMYMcSrH9nvTywiE1ry0i2w38yGLFKUPYxWjvKulBo=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=

vendor/github.com/opencloud-eu/reva/v2/internal/grpc/interceptors/auth/scope.go

@@ -21,7 +21,6 @@ package auth
 import (
 	"context"
 	"fmt"
-	"path/filepath"
 	"strings"
 	"time"
 
@@ -284,11 +283,8 @@ func checkIfNestedResource(ctx context.Context, ref *provider.Reference, parent
 		return false, statuspkg.NewErrorFromCode(pathResp.Status.Code, "auth interceptor")
 	}
 	childPath := pathResp.Path
-	rel, err := filepath.Rel(parentPath, childPath)
-	if err != nil {
-		return false, err
-	}
-	return !strings.HasPrefix(rel, ".."), nil
+
+	return strings.HasPrefix(childPath, parentPath), nil
 }
 
 func extractRefFromListProvidersReq(v *registry.ListStorageProvidersRequest) (*provider.Reference, bool) {

vendor/modules.txt

@@ -1376,7 +1376,7 @@ github.com/opencloud-eu/icap-client
 # github.com/opencloud-eu/libre-graph-api-go v1.0.8-0.20250724122329-41ba6b191e76
 ## explicit; go 1.18
 github.com/opencloud-eu/libre-graph-api-go
-# github.com/opencloud-eu/reva/v2 v2.42.3
+# github.com/opencloud-eu/reva/v2 v2.42.2
 ## explicit; go 1.24.1
 github.com/opencloud-eu/reva/v2/cmd/revad/internal/grace
 github.com/opencloud-eu/reva/v2/cmd/revad/runtime