1 files changed, 23 insertions, 18 deletions
diff --git a/app/backup/build/backup-psql/backup-psql.py b/app/backup/build/backup-psql/backup-psql.py
index fa0b94e..291cf50 100755
--- a/app/backup/build/backup-psql/backup-psql.py
+++ b/app/backup/build/backup-psql/backup-psql.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-import shutil,sys,os,datetime,minio
+import shutil,sys,os,datetime,minio,subprocess
 
 working_directory = "."
 if 'CACHE_DIR' in os.environ: working_directory = os.environ['CACHE_DIR']
@@ -44,20 +44,22 @@ if not client.bucket_exists(bucket):
   abort(f"Bucket {bucket} does not exist or its access is forbidden, aborting")
 
 # Perform the backup locally
-ret = os.system(f"""
-pg_basebackup \
-  --host={psql_host} \
-  --username={psql_user} \
-  --pgdata={working_directory} \
-  --format=tar \
-  --wal-method=stream \
-  --gzip \
-  --compress=6 \
-  --progress \
-  --max-rate=5M
-""")
-if ret != 0:
-  abort(f"pg_baseckup exit code is {ret}, 0 expected. aborting")
+try:
+  ret = subprocess.run(["pg_basebackup",
+    f"--host={psql_host}",
+    f"--username={psql_user}",
+    f"--pgdata={working_directory}",
+    f"--format=tar",
+    "--wal-method=stream",
+    "--gzip",
+    "--compress=6",
+    "--progress",
+    "--max-rate=5M",
+  ])
+  if ret.returncode != 0:
+    abort(f"pg_basebackup exited, expected return code 0, got {ret.returncode}. aborting")
+except Exception as e:
+  abort(f"pg_basebackup raised exception {e}. aborting")
 
 # Check that the expected files are here
 for p in clear_paths:
@@ -68,9 +70,12 @@ for p in clear_paths:
 # Cipher them
 for c, e in zip(clear_paths, crypt_paths):
   print(f"Ciphering {c} to {e}")
-  ret = os.system(f"age -r {pubkey} -o {e} {c}")
-  if ret != 0:
-    abort(f"age exit code is {ret}, 0 expected. aborting")
+  try:
+    ret = subprocess.run(["age", "-r", pubkey, "-o", e, c])
+    if ret.returncode != 0:
+      abort(f"age exit code is {ret}, 0 expected. aborting")
+  except Exception as e:
+    abort(f"aged raised an exception. {e}. aborting")
 
 # Upload the backup to S3
 for p, k in zip(crypt_paths, s3_keys):