+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", getV1ConfigPath(), "Path to 1.x config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config file upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++// Returns default 1.x config file path.+func getV1ConfigPath() string {+	if envVar := os.Getenv("INFLUXDB_CONFIG_PATH"); envVar != "" {+		return envVar+	}+	for _, path := range []string{+		os.ExpandEnv("${HOME}/.influxdb/influxdb.conf"),+		"/etc/influxdb/influxdb.conf",+	} {+		if _, err := os.Stat(path); err == nil {+			return path+		}+	}++	return ""+}++// private function used by `upgrade-config` command+func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		errMsg := fmt.Sprintf("upgrade: config file backup %s already exist", backupFile)+		return errors.New(errMsg)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c config+	_, err = toml.Decode(string(bs), &c)+	return c, err+}++func (cu *configUpgrader) loadV1(path string) (*configV1, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c configV1+	_, err = toml.Decode(string(bs), &c)+	return &c, err+}++func (cu *configUpgrader) init(rules string) {+	cu.rules = make(properties)+	scanner := bufio.NewScanner(strings.NewReader(rules))+	for scanner.Scan() {+		line := strings.Trim(scanner.Text(), " ")+		if line == "" || strings.HasPrefix(line, "#") {+			continue+		}+		rule := strings.SplitN(line, "=", 2)+		if len(rule) == 2 {+			sourceKey := strings.Trim(rule[0], " ")+			targetKey := strings.Trim(rule[1], " ")+			cu.rules[sourceKey] = targetKey+		}+	}+}++func (cu *configUpgrader) convert(path []string) ([]string, bool) {+	fqn := strings.Join(path, ".")+	target, ok := cu.rules[fqn]+	if ok {+		if target == "" {+			return nil, true+		}+		return strings.Split(target, "."), true+	}+	return path, false+}++// flat copy ie. without values for maps and arrays+func (cu *configUpgrader) add(v interface{}, source []string, target []string, index int) {+	var c table+	c = cu.config+	for len(target) > 1 {+		n := target[0]+		u, ok := c[n]+		if !ok {+			u = make(table)+			c[n] = u+		}+		if uc, ok := u.(table); ok {+			c = uc+		}+		if uc, ok := u.([]table); ok {+			if uc[index] == nil {+				uc[index] = make(table)+			}+			c = uc[index]+		}+		target = target[1:]+	}+	n := target[0]+	switch vv := v.(type) {+	case table:+		c[n] = make(table)+	case []table:+		array := make([]table, len(vv))+		for i := 0; i < len(vv); i++ {+			array[i] = make(table)+		}+		c[n] = array+	default:+		c[n] = v+	}+}++func (cu *configUpgrader) process(c interface{}, path []string, index int) []string {+	switch v := c.(type) {+	case table:+		for key, value := range v {+			path = append(path, key)+			target, changed := cu.convert(path)+			if target == nil { // entry is removed explicitly+				cu.log.Info(fmt.Sprintf("config %s removed (not supported in 2.x)", cu.entryType(value)),+					zap.String("entry", cu.prettyName(path, value, index)))+			} else if changed { // entry is moved+				cu.log.Info("config entry upgraded",+					zap.String("1.x entry", cu.prettyName(path, value, index)),+					zap.String("2.x entry", cu.prettyName(target, value, index)))+				cu.add(value, path, target, index)+			} else { // entry is removed implicitly or flattened (more likely)+				cu.log.Info(fmt.Sprintf("config %s ignored (not supported in 2.x)", cu.entryType(value)),

 func (e *Engine) Close() error { 		retErr = multierror.Append(retErr, fmt.Errorf("error closing TSDB store: %w", err)) 	} +	if err := e.pointsWriter.Close(); err != nil {+		retErr = multierror.Append(retErr, fmt.Errorf("error closing points writer: %w", err))

 func newFileExistsError(path string) FileExistsError { func (e FileExistsError) Error() string { 	return fmt.Sprintf("operation not allowed, file %q exists", e.path) }++type DiskStatus struct {+	All   uint64+	Used  uint64+	Free  uint64+	Avail uint64+}++// DirSize returns total size in bytes of containing files+func DirSize(path string) (uint64, error) {+	var size uint64+	err := filepath.Walk(path, func(_ string, info os.FileInfo, err error) error {+		if err != nil {+			return err+		}+		if !info.IsDir() {+			size += uint64(info.Size())+		}+		return err+	})+	return size, err+}++// CopyFile copies the contents of the file named src to the file named+// by dst. The file will be created if it does not already exist. If the+// destination file exists, all it's contents will be replaced by the contents+// of the source file. The file mode will be copied from the source and+// the copied data is synced/flushed to stable storage.+func CopyFile(src, dst string) (err error) {+	in, err := os.Open(src)+	if err != nil {+		return+	}+	defer in.Close()++	out, err := os.Create(dst)+	if err != nil {+		return+	}+	defer func() {+		if e := out.Close(); e != nil {+			err = e+		}+	}()++	_, err = io.Copy(out, in)+	if err != nil {+		return+	}++	err = out.Sync()+	if err != nil {+		return+	}++	si, err := os.Stat(src)+	if err != nil {+		return+	}+	err = os.Chmod(dst, si.Mode())+	if err != nil {+		return+	}++	return+}++// CopyDir recursively copies a directory tree, attempting to preserve permissions.+// Source directory must exist, destination directory must *not* exist.+// Symlinks are ignored and skipped.+// dirRenameFunc allows renaming  directories. It must return orig name, if renaming is not done..+// dirFilterFunc allows filtering out directories. Returned true means skipping the dir.+// fileFilterFunc allows filtering out files. Returned true means skipping the file.+func CopyDir(src string, dst string, dirRenameFunc func(path string) string, dirFilterFunc func(path string) bool, fileFilterFunc func(path string) bool) (err error) {

 var options = struct {  	// flags for target InfluxDB 	target optionsV2++	// verbose output+	verbose bool++	logPath string }{} -func init() {-	flags := Command.Flags()+func NewCommand() *cobra.Command {  	// source flags 	v1dir, err := influxDirV1() 	if err != nil { 		panic("error fetching default InfluxDB 1.x dir: " + err.Error()) 	} -	flags.StringVar(&options.source.metaDir, "v1-meta-dir", filepath.Join(v1dir, "meta"), "Path to 1.x meta.db directory")- 	// target flags 	v2dir, err := fs.InfluxDir() 	if err != nil { 		panic("error fetching default InfluxDB 2.0 dir: " + err.Error()) 	} -	flags.StringVar(&options.target.boltPath, "v2-bolt-path", filepath.Join(v2dir, "influxd.bolt"), "Path to 2.0 metadata")+	// os-specific+	var defaultSsPath string+	if runtime.GOOS == "windows" {+		defaultSsPath = filepath.Join(homeOrAnyDir(), "influxd-upgrade-security.cmd")+	} else {+		defaultSsPath = filepath.Join(homeOrAnyDir(), "influxd-upgrade-security.sh")+	}++	cmd := &cobra.Command{+		Use:   "upgrade",+		Short: "Upgrade a 1.x version of InfluxDB",+		Long: `+    Upgrades a 1.x version of InfluxDB by performing following actions:+      1. Reads 1.x config file and creates 2.x config file with matching options. Unsupported 1.x options are reported.+      2. Upgrades 1.x database files.+      3. Creates a script for creating 1.x users and their permissions. This scripts needs to be revised and run manually after starting 2.x.++    If config file is not available, 1.x db folder is taken as an input. +`,+		RunE: runUpgradeE,+	}++	opts := []cli.Opt{+		{+			DestP:   &options.source.dbDir,+			Flag:    "v1-dir",+			Default: v1dir,+			Desc:    "path to source 1.x db directory containing meta,data and wal sub-folders",+		},+		{+			DestP:   &options.verbose,+			Flag:    "verbose",+			Default: false,+			Desc:    "verbose output",+			Short:   'v',+		},+		{+			DestP:   &options.target.boltPath,+			Flag:    "bolt-path",+			Default: filepath.Join(v2dir, bolt.DefaultFilename),+			Desc:    "path for boltdb database",+			Short:   'm',+		},+		{+			DestP:   &options.target.enginePath,+			Flag:    "engine-path",+			Default: filepath.Join(v2dir, "engine"),+			Desc:    "path for persistent engine files",+			Short:   'e',+		},+		{+			DestP:    &options.target.userName,+			Flag:     "username",+			Default:  "",+			Desc:     "primary username",+			Short:    'u',+			Required: true,+		},+		{+			DestP:    &options.target.password,+			Flag:     "password",+			Default:  "",+			Desc:     "password for username",+			Short:    'p',+			Required: true,+		},+		{+			DestP:    &options.target.orgName,+			Flag:     "org",+			Default:  "",+			Desc:     "primary organization name",+			Short:    'o',+			Required: true,+		},+		{+			DestP:    &options.target.bucket,+			Flag:     "bucket",+			Default:  "",+			Desc:     "primary bucket name",+			Short:    'b',+			Required: true,+		},+		{+			DestP:   &options.target.retention,+			Flag:    "retention",+			Default: "",+			Desc:    "optional: duration bucket will retain data. 0 is infinite. Default is 0.",+			Short:   'r',+		},+		{+			DestP:   &options.target.token,+			Flag:    "token",+			Default: "",+			Desc:    "optional: token for username, else auto-generated",+			Short:   't',+		},+		{+			DestP:   &options.source.configFile,+			Flag:    "config-file",+			Default: getV1ConfigPath(),+			Desc:    "optional: Custom InfluxDB 1.x config file path, else the default config file",+		},+		{+			DestP:   &options.target.securityScriptPath,+			Flag:    "security-script",+			Default: defaultSsPath,+			Desc:    "optional: generated security upgrade script path",+		},+		{+			DestP:   &options.logPath,+			Flag:    "log-path",+			Default: filepath.Join(homeOrAnyDir(), "upgrade.log"),+			Desc:    "optional: Custom log file path",+		},+	} +	cli.BindOptions(cmd, opts) 	// add sub commands-	Command.AddCommand(v1DumpMetaCommand)-	Command.AddCommand(v2DumpMetaCommand)+	cmd.AddCommand(v1DumpMetaCommand)+	cmd.AddCommand(v2DumpMetaCommand)+	// TODO for testing purposes only+	cmd.AddCommand(upgradeConfigCommand)+	return cmd }  type influxDBv1 struct { 	meta *meta.Client }  type influxDBv2 struct {+	log         *zap.Logger 	boltClient  *bolt.Client 	store       *bolt.KVStore 	kvStore     kv.SchemaStore 	tenantStore *tenant.Store 	ts          *tenant.Service 	dbrpSvc     influxdb.DBRPMappingServiceV2+	bucketSvc   influxdb.BucketService 	onboardSvc  influxdb.OnboardingService 	kvService   *kv.Service 	meta        *meta.Client } -func runUpgradeE(cmd *cobra.Command, args []string) error {+func (i *influxDBv2) close() error {+	err := i.meta.Close()+	if err != nil {+		return err+	}+	err = i.boltClient.Close()+	if err != nil {+		return err+	}+	err = i.store.Close()+	if err != nil {+		return err+	}+	return nil+}++func runUpgradeE(*cobra.Command, []string) error { 	ctx := context.Background()+	config := zap.NewProductionConfig()+	config.OutputPaths = append(config.OutputPaths, options.logPath)+	config.ErrorOutputPaths = append(config.ErrorOutputPaths, options.logPath)+	log, err := config.Build()+	if err != nil {+		return err+	}+	log.Info("starting InfluxDB 1.x upgrade")++	checkParam := func(name, value string) error {+		if value == "" {+			return fmt.Errorf("empty or missing mandatory option %s", name)+		}+		return nil+	}++	if err := checkParam("username", options.target.userName); err != nil {+		return err+	}+	if err := checkParam("password", options.target.password); err != nil {+		return err+	}+	if err := checkParam("org", options.target.orgName); err != nil {+		return err+	}+	if err := checkParam("bucket", options.target.bucket); err != nil {+		return err+	}++	if options.source.configFile != "" {+		log.Info("upgrading config file", zap.String("file", options.source.configFile))+		if _, err := os.Stat(options.source.configFile); err != nil {+			return err+		}+		v1Config, err := upgradeConfig(options.source.configFile, log)+		if err != nil {+			return err+		}+		// TODO how to load and validate new Config???++		options.source.metaDir = v1Config.Meta.Dir+		options.source.dataDir = v1Config.Data.Dir+		options.source.walDir = v1Config.Data.WALDir+	} else {+		log.Info("no InfluxDB 1.x config file specified, skipping its upgrade")+	}++	if err := options.source.checkDirs(); err != nil {+		return err+	}  	v1, err := newInfluxDBv1(&options.source) 	if err != nil { 		return err 	}-	_ = v1 -	v2, err := newInfluxDBv2(ctx, &options.target)+	v2, err := newInfluxDBv2(ctx, &options.target, log) 	if err != nil { 		return err 	}-	_ = v2 -	// 1. Onboard the initial admin user-	// v2.onboardSvc.OnboardInitialUser()+	or, err := setupAdmin(ctx, v2)+	if err != nil {+		return err+	}+	options.target.token = or.Auth.Token -	// 2. read each database / retention policy from v1.meta and create bucket db-name/rp-name-	// newBucket := v2.ts.CreateBucket(ctx, Bucket{})-	//-	// 3. create database in v2.meta-	// v2.meta.CreateDatabase(newBucket.ID.String())-	// copy shard info from v1.meta+	db2BucketIds, err := upgradeDatabases(ctx, v1, v2, or.Org.ID, log)+	if err != nil {+		//remove all files+		log.Info("database upgrade error, removing data")+		if e := os.Remove(options.target.boltPath); e != nil {+			log.Error("cleaning failed", zap.Error(e))+		}++		if e := os.RemoveAll(options.target.enginePath); e != nil {+			log.Error("cleaning failed", zap.Error(e))+		}+		return err+	}++	if err = generateSecurityScript(v1, db2BucketIds, log); err != nil {+		return err+	}++	log.Info("upgrade successfully completed. Start service now")  	return nil } +func upgradeDatabases(ctx context.Context, v1 *influxDBv1, v2 *influxDBv2, orgID influxdb.ID, log *zap.Logger) (map[string][]string, error) {+	db2BucketIds := make(map[string][]string)+	targetDataPath := filepath.Join(options.target.enginePath, "data")+	targetWalPath := filepath.Join(options.target.enginePath, "wal")+	dirFilterFunc := func(path string) bool {+		base := filepath.Base(path)+		if base == "_series" ||+			(len(base) > 0 && base[0] == '_') || //skip internal databases+			base == "index" {+			return true+		}+		return false+	}+	// read each database / retention policy from v1.meta and create bucket db-name/rp-name+	// create database in v2.meta+	// copy shard info from v1.meta+	if len(v1.meta.Databases()) > 0 {+		// Check space+		log.Info("checking space")+		size, err := fs2.DirSize(options.source.dataDir)+		if err != nil {+			return nil, fmt.Errorf("error getting size of %s: %w", options.source.dataDir, err)+		}+		size2, err := fs2.DirSize(options.source.walDir)+		if err != nil {+			return nil, fmt.Errorf("error getting size of %s: %w", options.source.walDir, err)+		}+		size += size2+		v2dir := filepath.Dir(options.target.boltPath)+		diskInfo, err := fs2.DiskUsage(v2dir)+		if err != nil {+			return nil, fmt.Errorf("error getting info of disk %s: %w", v2dir, err)+		}+		if options.verbose {+			log.Info("disk space info",+				zap.String("Free space", fs2.HumanSize(diskInfo.Free)),+				zap.String("Needed space", fs2.HumanSize(size)))+		}+		if size > diskInfo.Free {+			return nil, fmt.Errorf("not enough space on target disk of %s: need %d, available %d ", v2dir, size, diskInfo.Free)+		}+		log.Info("upgrading databases")+		for _, db := range v1.meta.Databases() {+			if db.Name[0] == '_' {+				if options.verbose {+					log.Info("skipping internal ",+						zap.String("database", db.Name))+				}+				continue+			}+			if options.verbose {+				log.Info("upgrading database ",+					zap.String("database", db.Name))+			}++			// db to buckets IDs mapping+			db2BucketIds[db.Name] = make([]string, 0, len(db.RetentionPolicies))++			for _, rp := range db.RetentionPolicies {+				sourcePath := filepath.Join(options.source.dataDir, db.Name, rp.Name)+				_, err := os.Stat(sourcePath)+				if err != nil {+					// skip retention policies that don't have data+					log.Info("empty retention policy",+						zap.String("name", rp.Name))+					continue+				}+				bucket := &influxdb.Bucket{+					OrgID:               orgID,+					Type:                influxdb.BucketTypeUser,+					Name:                db.Name + "-" + rp.Name,+					Description:         fmt.Sprintf("Upgraded from v1 database %s with retention policy %s", db.Name, rp.Name),+					RetentionPolicyName: rp.Name,+					RetentionPeriod:     rp.Duration,+				}+				if options.verbose {+					log.Info("creating bucket ",+						zap.String("Bucket", bucket.Name))+				}+				err = v2.bucketSvc.CreateBucket(ctx, bucket)+				if err != nil {+					return nil, fmt.Errorf("error creating bucket %s: %w", bucket.Name, err)++				}++				db2BucketIds[db.Name] = append(db2BucketIds[db.Name], bucket.ID.String())+				if options.verbose {+					log.Info("creating database with retention policy",+						zap.String("database", bucket.ID.String()))+				}+				spec := rp.ToSpec()+				spec.Name = meta.DefaultRetentionPolicyName+				dbv2, err := v2.meta.CreateDatabaseWithRetentionPolicy(bucket.ID.String(), spec)+				if err != nil {+					return nil, fmt.Errorf("error creating database %s: %w", bucket.ID.String(), err)+				}++				mapping := &influxdb.DBRPMappingV2{+					Database:        db.Name,+					RetentionPolicy: rp.Name,+					Default:         db.DefaultRetentionPolicy == rp.Name,+					OrganizationID:  orgID,+					BucketID:        bucket.ID,+				}+				if options.verbose {+					log.Info("Creating mapping",+						zap.String("database", mapping.Database),+						zap.String("retention policy", mapping.RetentionPolicy),+						zap.String("orgID", mapping.OrganizationID.String()),+						zap.String("bucketID", mapping.BucketID.String()))+				}+				err = v2.dbrpSvc.Create(ctx, mapping)+				if err != nil {+					return nil, fmt.Errorf("error creating mapping  %s/%s -> Org %s, bucket %s: %w", mapping.Database, mapping.RetentionPolicy, mapping.OrganizationID.String(), mapping.BucketID.String(), err)+				}+				for _, sg := range rp.ShardGroups {+					if options.verbose {+						log.Info("creating shard group",+							zap.String("database", dbv2.Name),+							zap.String("retention policy", dbv2.DefaultRetentionPolicy),+							zap.Time("time", sg.StartTime))+					}+					_, err := v2.meta.CreateShardGroupWithShards(dbv2.Name, dbv2.DefaultRetentionPolicy, sg.StartTime, sg.Shards...)+					if err != nil {+						return nil, fmt.Errorf("error creating database %s: %w", bucket.ID.String(), err)+					}+				}++				targetPath := filepath.Join(targetDataPath, dbv2.Name, spec.Name)+				if options.verbose {+					log.Info("copying data",+						zap.String("source", sourcePath),+						zap.String("target", targetPath))+				}+				err = fs2.CopyDir(sourcePath,+					targetPath,+					nil,+					dirFilterFunc,+					nil)+				if err != nil {+					return nil, fmt.Errorf("error copying v1 data from %s to %s: %w", sourcePath, targetPath, err)+				}+				sourcePath = filepath.Join(options.source.walDir, db.Name, rp.Name)+				targetPath = filepath.Join(targetWalPath, dbv2.Name, spec.Name)+				if options.verbose {+					log.Info("copying wal",+						zap.String("source", sourcePath),+						zap.String("target", targetPath))+				}+				err = fs2.CopyDir(sourcePath,+					targetPath,+					nil,+					dirFilterFunc,+					nil)+				if err != nil {+					return nil, fmt.Errorf("error copying v1 data from %s to %s: %w", sourcePath, targetPath, err)+				}+			}+		}++		err = v2.close()+		if err != nil {+			return nil, fmt.Errorf("error closing v2: %w", err)+		}+	} else {+		log.Warn("no database found")+	}+	return db2BucketIds, nil+}++func setupAdmin(ctx context.Context, v2 *influxDBv2) (*influxdb.OnboardingResults, error) {+	canOnboard, err := v2.onboardSvc.IsOnboarding(ctx)+	if err != nil {+		return nil, err+	}+	if canOnboard {

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", getV1ConfigPath(), "Path to 1.x config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config file upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++// Returns default 1.x config file path.+func getV1ConfigPath() string {+	if envVar := os.Getenv("INFLUXDB_CONFIG_PATH"); envVar != "" {+		return envVar+	}+	for _, path := range []string{+		os.ExpandEnv("${HOME}/.influxdb/influxdb.conf"),+		"/etc/influxdb/influxdb.conf",+	} {+		if _, err := os.Stat(path); err == nil {+			return path+		}+	}++	return ""+}++// private function used by `upgrade-config` command+func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		errMsg := fmt.Sprintf("upgrade: config file backup %s already exist", backupFile)+		return errors.New(errMsg)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c config+	_, err = toml.Decode(string(bs), &c)+	return c, err+}++func (cu *configUpgrader) loadV1(path string) (*configV1, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c configV1+	_, err = toml.Decode(string(bs), &c)+	return &c, err+}++func (cu *configUpgrader) init(rules string) {+	cu.rules = make(properties)+	scanner := bufio.NewScanner(strings.NewReader(rules))+	for scanner.Scan() {+		line := strings.Trim(scanner.Text(), " ")+		if line == "" || strings.HasPrefix(line, "#") {+			continue+		}+		rule := strings.SplitN(line, "=", 2)+		if len(rule) == 2 {+			sourceKey := strings.Trim(rule[0], " ")+			targetKey := strings.Trim(rule[1], " ")+			cu.rules[sourceKey] = targetKey+		}+	}+}++func (cu *configUpgrader) convert(path []string) ([]string, bool) {+	fqn := strings.Join(path, ".")+	target, ok := cu.rules[fqn]+	if ok {+		if target == "" {+			return nil, true+		}+		return strings.Split(target, "."), true+	}+	return path, false+}++// flat copy ie. without values for maps and arrays+func (cu *configUpgrader) add(v interface{}, source []string, target []string, index int) {+	var c table+	c = cu.config+	for len(target) > 1 {+		n := target[0]+		u, ok := c[n]+		if !ok {+			u = make(table)+			c[n] = u+		}+		if uc, ok := u.(table); ok {+			c = uc+		}+		if uc, ok := u.([]table); ok {+			if uc[index] == nil {+				uc[index] = make(table)+			}+			c = uc[index]+		}+		target = target[1:]+	}+	n := target[0]+	switch vv := v.(type) {+	case table:+		c[n] = make(table)+	case []table:+		array := make([]table, len(vv))+		for i := 0; i < len(vv); i++ {+			array[i] = make(table)+		}+		c[n] = array+	default:+		c[n] = v+	}+}++func (cu *configUpgrader) process(c interface{}, path []string, index int) []string {+	switch v := c.(type) {+	case table:+		for key, value := range v {+			path = append(path, key)+			target, changed := cu.convert(path)+			if target == nil { // entry is removed explicitly+				cu.log.Info(fmt.Sprintf("config %s removed (not supported in 2.x)", cu.entryType(value)),+					zap.String("entry", cu.prettyName(path, value, index)))+			} else if changed { // entry is moved+				cu.log.Info("config entry upgraded",+					zap.String("1.x entry", cu.prettyName(path, value, index)),+					zap.String("2.x entry", cu.prettyName(target, value, index)))+				cu.add(value, path, target, index)+			} else { // entry is removed implicitly or flattened (more likely)+				cu.log.Info(fmt.Sprintf("config %s ignored (not supported in 2.x)", cu.entryType(value)),

+package upgrade++import (+	"github.com/BurntSushi/toml"+	"go.uber.org/zap"+	"io/ioutil"+	"path/filepath"+	"reflect"+	"strings"+	"testing"+)++var testConfigV1 = `### Welcome to the InfluxDB configuration file.++# Change this option to true to disable reporting.+reporting-disabled = false++# Bind address to use for the RPC service for backup and restore.+bind-address = "127.0.0.1:8088"++[meta]+  dir = "/db/influxdb/meta"++[data]+  dir = "/db/influxdb/data"+  wal-dir = "/db/influxdb/wal"+  wal-fsync-delay = "100s"+  index-version = "inmem"++[coordinator]+  max-select-point = 0++[retention]+  check-interval = "30m"++[shard-precreation]+  check-interval = "5m"++[monitor]+  store-enabled = true++[http]+  flux-enabled = false+  bind-address = ":8086"+  https-certificate = "/etc/ssl/influxdb.pem"+  https-private-key = ""++[logging]+  level = "debug"++[subscriber]++[[graphite]]+  enabled = true+  database = "graphite"++[[collectd]]++[[opentsdb]]++[[udp]]+  enabled = true+  bind-address = ":8089"++[continuous_queries]+  query-stats-enabled = true++[tls]+  min-version = "tls1.2"+  max-version = "tls1.3"+`++var testConfigV2 = `+reporting-disabled = false+bolt-path = "/db/.influxdbv2/influxd.bolt"+engine-path = "/db/.influxdbv2/engine"+http-bind-address = ":8086"+influxql-max-select-point = 0+log-level = "debug"+storage-retention-check-interval = "30m"+storage-shard-precreator-check-interval = "5m"+storage-wal-fsync-delay = "100s"+tls-cert = "/etc/ssl/influxdb.pem"+tls-key = ""+`++func TestMinimalConfigUpgrade(t *testing.T) {+	options.target.boltPath = "/db/.influxdbv2/influxd.bolt"

+//go:generate env GO111MODULE=on go run github.com/kevinburke/go-bindata/go-bindata -o upgrade_gen.go -ignore go -pkg upgrade .+ package upgrade  import ( 	"context"+	"errors" 	"fmt" 	"os" 	"os/user" 	"path/filepath"+	"runtime"+	"time"  	"github.com/influxdata/influxdb/v2"-	"github.com/influxdata/influxdb/v2/authorizer" 	"github.com/influxdata/influxdb/v2/bolt" 	"github.com/influxdata/influxdb/v2/dbrp" 	"github.com/influxdata/influxdb/v2/internal/fs"+	"github.com/influxdata/influxdb/v2/kit/cli" 	"github.com/influxdata/influxdb/v2/kit/metric" 	"github.com/influxdata/influxdb/v2/kit/prom" 	"github.com/influxdata/influxdb/v2/kv" 	"github.com/influxdata/influxdb/v2/kv/migration" 	"github.com/influxdata/influxdb/v2/kv/migration/all"+	fs2 "github.com/influxdata/influxdb/v2/pkg/fs"+	"github.com/influxdata/influxdb/v2/storage"+	options2 "github.com/influxdata/influxdb/v2/task/options" 	"github.com/influxdata/influxdb/v2/tenant" 	"github.com/influxdata/influxdb/v2/v1/services/meta" 	"github.com/influxdata/influxdb/v2/v1/services/meta/filestore" 	"github.com/spf13/cobra" 	"go.uber.org/zap" ) -var Command = &cobra.Command{-	Use:   "upgrade",-	Short: "Upgrade a 1.x version of InfluxDB",-	RunE:  runUpgradeE,+// Simplified 1.x config.+type configV1 struct {+	Meta struct {+		Dir string `toml:"dir"`+	} `toml:"meta"`+	Data struct {+		Dir    string `toml:"dir"`+		WALDir string `toml:"wal-dir"`+	} `toml:"data"` }  type optionsV1 struct { 	metaDir string+	walDir  string+	dataDir string+	// cmd option+	dbDir      string+	configFile string+}++func (o *optionsV1) checkDirs() error {+	if o.metaDir == "" || o.dataDir == "" || o.walDir == "" {+		if o.dbDir == "" {+			return errors.New("source directory not specified")+		} else {+			o.metaDir = filepath.Join(o.dbDir, "meta")+			o.dataDir = filepath.Join(o.dbDir, "data")+			o.walDir = filepath.Join(o.dbDir, "wal")+		}+	}+	return nil }  type optionsV2 struct {-	boltPath string+	boltPath           string+	enginePath         string+	userName           string+	password           string+	orgName            string+	bucket             string+	token              string+	retention          string

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()

 func newFileExistsError(path string) FileExistsError { func (e FileExistsError) Error() string { 	return fmt.Sprintf("operation not allowed, file %q exists", e.path) }++type DiskStatus struct {+	All   uint64+	Used  uint64+	Free  uint64+	Avail uint64+}++// DirSize returns total size in bytes of containing files+func DirSize(path string) (uint64, error) {+	var size uint64+	err := filepath.Walk(path, func(_ string, info os.FileInfo, err error) error {+		if err != nil {+			return err+		}+		if !info.IsDir() {+			size += uint64(info.Size())+		}+		return err+	})+	return size, err+}++// CopyFile copies the contents of the file named src to the file named+// by dst. The file will be created if it does not already exist. If the+// destination file exists, all it's contents will be replaced by the contents+// of the source file. The file mode will be copied from the source and+// the copied data is synced/flushed to stable storage.+func CopyFile(src, dst string) (err error) {+	in, err := os.Open(src)+	if err != nil {+		return+	}+	defer in.Close()++	out, err := os.Create(dst)+	if err != nil {+		return+	}+	defer func() {+		if e := out.Close(); e != nil {+			err = e+		}+	}()++	_, err = io.Copy(out, in)+	if err != nil {+		return+	}++	err = out.Sync()+	if err != nil {+		return+	}++	si, err := os.Stat(src)+	if err != nil {+		return+	}+	err = os.Chmod(dst, si.Mode())+	if err != nil {+		return+	}++	return+}++// CopyDir recursively copies a directory tree, attempting to preserve permissions.+// Source directory must exist, destination directory must *not* exist.+// Symlinks are ignored and skipped.+// dirRenameFunc allows renaming  directories. It must return orig name, if renaming is not done..+// dirFilterFunc allows filtering out directories. Returned true means skipping the dir.+// fileFilterFunc allows filtering out files. Returned true means skipping the file.+func CopyDir(src string, dst string, dirRenameFunc func(path string) string, dirFilterFunc func(path string) bool, fileFilterFunc func(path string) bool) (err error) {

 func influxDirV1() (string, error) {  	return dir, nil }++// homeOrAnyDir retrieves user's home directory, current working one or just none.+func homeOrAnyDir() string {+	var dir string+	u, err := user.Current()+	if err == nil {+		dir = u.HomeDir+	} else if home := os.Getenv("HOME"); home != "" {+		dir = home+	} else if home := os.Getenv("USERPROFILE"); home != "" {+		dir = home+	} else {+		wd, err := os.Getwd()+		if err != nil {+			dir = ""+		} else {+			dir = wd+		}+	}++	return dir+}++func rawDurationToTimeDuration(raw string) (time.Duration, error) {

+package upgrade++import (+	"github.com/BurntSushi/toml"+	"go.uber.org/zap"+	"io/ioutil"+	"path/filepath"+	"reflect"+	"strings"+	"testing"+)++var testConfigV1 = `### Welcome to the InfluxDB configuration file.++# Change this option to true to disable reporting.+reporting-disabled = false++# Bind address to use for the RPC service for backup and restore.+bind-address = "127.0.0.1:8088"++[meta]+  dir = "/db/influxdb/meta"++[data]+  dir = "/db/influxdb/data"+  wal-dir = "/db/influxdb/wal"+  wal-fsync-delay = "100s"+  index-version = "inmem"++[coordinator]+  max-select-point = 0++[retention]+  check-interval = "30m"++[shard-precreation]+  check-interval = "5m"++[monitor]+  store-enabled = true++[http]+  flux-enabled = false+  bind-address = ":8086"+  https-certificate = "/etc/ssl/influxdb.pem"+  https-private-key = ""++[logging]+  level = "debug"++[subscriber]++[[graphite]]+  enabled = true+  database = "graphite"++[[collectd]]++[[opentsdb]]++[[udp]]+  enabled = true+  bind-address = ":8089"++[continuous_queries]+  query-stats-enabled = true++[tls]+  min-version = "tls1.2"+  max-version = "tls1.3"+`++var testConfigV2 = `+reporting-disabled = false+bolt-path = "/db/.influxdbv2/influxd.bolt"+engine-path = "/db/.influxdbv2/engine"+http-bind-address = ":8086"+influxql-max-select-point = 0+log-level = "debug"+storage-retention-check-interval = "30m"+storage-shard-precreator-check-interval = "5m"+storage-wal-fsync-delay = "100s"+tls-cert = "/etc/ssl/influxdb.pem"+tls-key = ""+`++func TestMinimalConfigUpgrade(t *testing.T) {

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs

+package upgrade++import (+	"github.com/BurntSushi/toml"+	"go.uber.org/zap"+	"io/ioutil"+	"path/filepath"+	"reflect"+	"strings"+	"testing"+)++var testConfigV1 = `### Welcome to the InfluxDB configuration file.++# Change this option to true to disable reporting.+reporting-disabled = false++# Bind address to use for the RPC service for backup and restore.+bind-address = "127.0.0.1:8088"++[meta]+  dir = "/db/influxdb/meta"++[data]+  dir = "/db/influxdb/data"+  wal-dir = "/db/influxdb/wal"+  wal-fsync-delay = "100s"+  index-version = "inmem"++[coordinator]+  max-select-point = 0++[retention]+  check-interval = "30m"++[shard-precreation]+  check-interval = "5m"++[monitor]+  store-enabled = true++[http]+  flux-enabled = false+  bind-address = ":8086"+  https-certificate = "/etc/ssl/influxdb.pem"+  https-private-key = ""++[logging]+  level = "debug"++[subscriber]++[[graphite]]+  enabled = true+  database = "graphite"++[[collectd]]++[[opentsdb]]++[[udp]]+  enabled = true+  bind-address = ":8089"++[continuous_queries]+  query-stats-enabled = true++[tls]+  min-version = "tls1.2"+  max-version = "tls1.3"+`++var testConfigV2 = `+reporting-disabled = false+bolt-path = "/db/.influxdbv2/influxd.bolt"+engine-path = "/db/.influxdbv2/engine"+http-bind-address = ":8086"+influxql-max-select-point = 0+log-level = "debug"+storage-retention-check-interval = "30m"+storage-shard-precreator-check-interval = "5m"+storage-wal-fsync-delay = "100s"+tls-cert = "/etc/ssl/influxdb.pem"+tls-key = ""+`++func TestMinimalConfigUpgrade(t *testing.T) {+	options.target.boltPath = "/db/.influxdbv2/influxd.bolt"+	options.target.enginePath = "/db/.influxdbv2/engine"+	f, err := ioutil.TempFile("", "influxdb-*.conf")+	if err != nil {+		t.Fatal(err)+	}+	_, err = f.WriteString(testConfigV1)+	if err != nil {+		t.Fatal(err)+	}+	if err = f.Close(); err != nil {+		t.Fatal(err)+	}+	configFile := f.Name()+	_, err = upgradeConfig(configFile, zap.NewNop())+	if err != nil {+		t.Fatal(err)+	}+	ext := filepath.Ext(configFile)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	var actual, expected map[string]interface{}+	if _, err = toml.Decode(testConfigV2, &expected); err != nil {+		t.Fatal(err)+	}+	if _, err = toml.DecodeFile(configFileV2, &actual); err != nil {+		t.Fatal(err)+	}+	if len(expected) != len(actual) {

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", getV1ConfigPath(), "Path to 1.x config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config file upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++// Returns default 1.x config file path.+func getV1ConfigPath() string {+	if envVar := os.Getenv("INFLUXDB_CONFIG_PATH"); envVar != "" {+		return envVar+	}+	for _, path := range []string{+		os.ExpandEnv("${HOME}/.influxdb/influxdb.conf"),+		"/etc/influxdb/influxdb.conf",+	} {+		if _, err := os.Stat(path); err == nil {+			return path+		}+	}++	return ""+}++// private function used by `upgrade-config` command+func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		errMsg := fmt.Sprintf("upgrade: config file backup %s already exist", backupFile)+		return errors.New(errMsg)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c config+	_, err = toml.Decode(string(bs), &c)+	return c, err+}++func (cu *configUpgrader) loadV1(path string) (*configV1, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c configV1+	_, err = toml.Decode(string(bs), &c)+	return &c, err+}++func (cu *configUpgrader) init(rules string) {+	cu.rules = make(properties)+	scanner := bufio.NewScanner(strings.NewReader(rules))+	for scanner.Scan() {+		line := strings.Trim(scanner.Text(), " ")

 var options = struct {  	// flags for target InfluxDB 	target optionsV2++	// verbose output+	verbose bool++	logPath string }{} -func init() {-	flags := Command.Flags()+func NewCommand() *cobra.Command {  	// source flags 	v1dir, err := influxDirV1() 	if err != nil { 		panic("error fetching default InfluxDB 1.x dir: " + err.Error()) 	} -	flags.StringVar(&options.source.metaDir, "v1-meta-dir", filepath.Join(v1dir, "meta"), "Path to 1.x meta.db directory")- 	// target flags 	v2dir, err := fs.InfluxDir() 	if err != nil { 		panic("error fetching default InfluxDB 2.0 dir: " + err.Error()) 	} -	flags.StringVar(&options.target.boltPath, "v2-bolt-path", filepath.Join(v2dir, "influxd.bolt"), "Path to 2.0 metadata")+	// os-specific+	var defaultSsPath string+	if runtime.GOOS == "windows" {+		defaultSsPath = filepath.Join(homeOrAnyDir(), "influxd-upgrade-security.cmd")+	} else {+		defaultSsPath = filepath.Join(homeOrAnyDir(), "influxd-upgrade-security.sh")+	}++	cmd := &cobra.Command{+		Use:   "upgrade",+		Short: "Upgrade a 1.x version of InfluxDB",+		Long: `+    Upgrades a 1.x version of InfluxDB by performing following actions:+      1. Reads 1.x config file and creates 2.x config file with matching options. Unsupported 1.x options are reported.+      2. Upgrades 1.x database files.+      3. Creates a script for creating 1.x users and their permissions. This scripts needs to be revised and run manually after starting 2.x.++    If config file is not available, 1.x db folder is taken as an input. +`,+		RunE: runUpgradeE,+	}++	opts := []cli.Opt{+		{+			DestP:   &options.source.dbDir,+			Flag:    "v1-dir",+			Default: v1dir,+			Desc:    "path to source 1.x db directory containing meta,data and wal sub-folders",+		},+		{+			DestP:   &options.verbose,+			Flag:    "verbose",+			Default: false,+			Desc:    "verbose output",+			Short:   'v',+		},+		{+			DestP:   &options.target.boltPath,+			Flag:    "bolt-path",+			Default: filepath.Join(v2dir, bolt.DefaultFilename),+			Desc:    "path for boltdb database",+			Short:   'm',+		},+		{+			DestP:   &options.target.enginePath,+			Flag:    "engine-path",+			Default: filepath.Join(v2dir, "engine"),+			Desc:    "path for persistent engine files",+			Short:   'e',+		},+		{+			DestP:    &options.target.userName,+			Flag:     "username",+			Default:  "",+			Desc:     "primary username",+			Short:    'u',+			Required: true,+		},+		{+			DestP:    &options.target.password,+			Flag:     "password",+			Default:  "",+			Desc:     "password for username",+			Short:    'p',+			Required: true,+		},+		{+			DestP:    &options.target.orgName,+			Flag:     "org",+			Default:  "",+			Desc:     "primary organization name",+			Short:    'o',+			Required: true,+		},+		{+			DestP:    &options.target.bucket,+			Flag:     "bucket",+			Default:  "",+			Desc:     "primary bucket name",+			Short:    'b',+			Required: true,+		},+		{+			DestP:   &options.target.retention,+			Flag:    "retention",+			Default: "",+			Desc:    "optional: duration bucket will retain data. 0 is infinite. Default is 0.",+			Short:   'r',+		},+		{+			DestP:   &options.target.token,+			Flag:    "token",+			Default: "",+			Desc:    "optional: token for username, else auto-generated",+			Short:   't',+		},+		{+			DestP:   &options.source.configFile,+			Flag:    "config-file",+			Default: getV1ConfigPath(),+			Desc:    "optional: Custom InfluxDB 1.x config file path, else the default config file",+		},+		{+			DestP:   &options.target.securityScriptPath,+			Flag:    "security-script",+			Default: defaultSsPath,+			Desc:    "optional: generated security upgrade script path",+		},+		{+			DestP:   &options.logPath,+			Flag:    "log-path",+			Default: filepath.Join(homeOrAnyDir(), "upgrade.log"),+			Desc:    "optional: Custom log file path",+		},+	} +	cli.BindOptions(cmd, opts) 	// add sub commands-	Command.AddCommand(v1DumpMetaCommand)-	Command.AddCommand(v2DumpMetaCommand)+	cmd.AddCommand(v1DumpMetaCommand)+	cmd.AddCommand(v2DumpMetaCommand)+	// TODO for testing purposes only+	cmd.AddCommand(upgradeConfigCommand)+	return cmd }  type influxDBv1 struct { 	meta *meta.Client }  type influxDBv2 struct {+	log         *zap.Logger 	boltClient  *bolt.Client 	store       *bolt.KVStore 	kvStore     kv.SchemaStore 	tenantStore *tenant.Store 	ts          *tenant.Service 	dbrpSvc     influxdb.DBRPMappingServiceV2+	bucketSvc   influxdb.BucketService 	onboardSvc  influxdb.OnboardingService 	kvService   *kv.Service 	meta        *meta.Client } -func runUpgradeE(cmd *cobra.Command, args []string) error {+func (i *influxDBv2) close() error {+	err := i.meta.Close()+	if err != nil {+		return err+	}+	err = i.boltClient.Close()+	if err != nil {+		return err+	}+	err = i.store.Close()+	if err != nil {+		return err+	}+	return nil+}++func runUpgradeE(*cobra.Command, []string) error { 	ctx := context.Background()+	config := zap.NewProductionConfig()+	config.OutputPaths = append(config.OutputPaths, options.logPath)+	config.ErrorOutputPaths = append(config.ErrorOutputPaths, options.logPath)+	log, err := config.Build()+	if err != nil {+		return err+	}+	log.Info("starting InfluxDB 1.x upgrade")++	checkParam := func(name, value string) error {+		if value == "" {+			return fmt.Errorf("empty or missing mandatory option %s", name)+		}+		return nil+	}++	if err := checkParam("username", options.target.userName); err != nil {+		return err+	}+	if err := checkParam("password", options.target.password); err != nil {+		return err+	}+	if err := checkParam("org", options.target.orgName); err != nil {+		return err+	}+	if err := checkParam("bucket", options.target.bucket); err != nil {+		return err+	}++	if options.source.configFile != "" {+		log.Info("upgrading config file", zap.String("file", options.source.configFile))+		if _, err := os.Stat(options.source.configFile); err != nil {+			return err+		}+		v1Config, err := upgradeConfig(options.source.configFile, log)+		if err != nil {+			return err+		}+		// TODO how to load and validate new Config???++		options.source.metaDir = v1Config.Meta.Dir+		options.source.dataDir = v1Config.Data.Dir+		options.source.walDir = v1Config.Data.WALDir+	} else {+		log.Info("no InfluxDB 1.x config file specified, skipping its upgrade")+	}++	if err := options.source.checkDirs(); err != nil {+		return err+	}  	v1, err := newInfluxDBv1(&options.source) 	if err != nil { 		return err 	}-	_ = v1 -	v2, err := newInfluxDBv2(ctx, &options.target)+	v2, err := newInfluxDBv2(ctx, &options.target, log) 	if err != nil { 		return err 	}-	_ = v2 -	// 1. Onboard the initial admin user-	// v2.onboardSvc.OnboardInitialUser()+	or, err := setupAdmin(ctx, v2)+	if err != nil {+		return err+	}+	options.target.token = or.Auth.Token -	// 2. read each database / retention policy from v1.meta and create bucket db-name/rp-name-	// newBucket := v2.ts.CreateBucket(ctx, Bucket{})-	//-	// 3. create database in v2.meta-	// v2.meta.CreateDatabase(newBucket.ID.String())-	// copy shard info from v1.meta+	db2BucketIds, err := upgradeDatabases(ctx, v1, v2, or.Org.ID, log)+	if err != nil {+		//remove all files+		log.Info("database upgrade error, removing data")+		if e := os.Remove(options.target.boltPath); e != nil {+			log.Error("cleaning failed", zap.Error(e))+		}++		if e := os.RemoveAll(options.target.enginePath); e != nil {+			log.Error("cleaning failed", zap.Error(e))+		}+		return err+	}++	if err = generateSecurityScript(v1, db2BucketIds, log); err != nil {+		return err+	}++	log.Info("upgrade successfully completed. Start service now")  	return nil } +func upgradeDatabases(ctx context.Context, v1 *influxDBv1, v2 *influxDBv2, orgID influxdb.ID, log *zap.Logger) (map[string][]string, error) {+	db2BucketIds := make(map[string][]string)+	targetDataPath := filepath.Join(options.target.enginePath, "data")+	targetWalPath := filepath.Join(options.target.enginePath, "wal")+	dirFilterFunc := func(path string) bool {+		base := filepath.Base(path)+		if base == "_series" ||+			(len(base) > 0 && base[0] == '_') || //skip internal databases+			base == "index" {+			return true+		}+		return false+	}+	// read each database / retention policy from v1.meta and create bucket db-name/rp-name+	// create database in v2.meta+	// copy shard info from v1.meta+	if len(v1.meta.Databases()) > 0 {+		// Check space+		log.Info("checking space")+		size, err := fs2.DirSize(options.source.dataDir)+		if err != nil {+			return nil, fmt.Errorf("error getting size of %s: %w", options.source.dataDir, err)+		}+		size2, err := fs2.DirSize(options.source.walDir)+		if err != nil {+			return nil, fmt.Errorf("error getting size of %s: %w", options.source.walDir, err)+		}+		size += size2+		v2dir := filepath.Dir(options.target.boltPath)+		diskInfo, err := fs2.DiskUsage(v2dir)

 var options = struct {  	// flags for target InfluxDB 	target optionsV2++	// verbose output+	verbose bool++	logPath string }{} -func init() {-	flags := Command.Flags()+func NewCommand() *cobra.Command {  	// source flags 	v1dir, err := influxDirV1() 	if err != nil { 		panic("error fetching default InfluxDB 1.x dir: " + err.Error()) 	} -	flags.StringVar(&options.source.metaDir, "v1-meta-dir", filepath.Join(v1dir, "meta"), "Path to 1.x meta.db directory")- 	// target flags 	v2dir, err := fs.InfluxDir() 	if err != nil { 		panic("error fetching default InfluxDB 2.0 dir: " + err.Error()) 	} -	flags.StringVar(&options.target.boltPath, "v2-bolt-path", filepath.Join(v2dir, "influxd.bolt"), "Path to 2.0 metadata")+	// os-specific+	var defaultSsPath string+	if runtime.GOOS == "windows" {+		defaultSsPath = filepath.Join(homeOrAnyDir(), "influxd-upgrade-security.cmd")+	} else {+		defaultSsPath = filepath.Join(homeOrAnyDir(), "influxd-upgrade-security.sh")+	}++	cmd := &cobra.Command{+		Use:   "upgrade",+		Short: "Upgrade a 1.x version of InfluxDB",+		Long: `+    Upgrades a 1.x version of InfluxDB by performing following actions:+      1. Reads 1.x config file and creates 2.x config file with matching options. Unsupported 1.x options are reported.+      2. Upgrades 1.x database files.+      3. Creates a script for creating 1.x users and their permissions. This scripts needs to be revised and run manually after starting 2.x.++    If config file is not available, 1.x db folder is taken as an input. +`,+		RunE: runUpgradeE,+	}++	opts := []cli.Opt{+		{+			DestP:   &options.source.dbDir,+			Flag:    "v1-dir",+			Default: v1dir,+			Desc:    "path to source 1.x db directory containing meta,data and wal sub-folders",+		},+		{+			DestP:   &options.verbose,+			Flag:    "verbose",+			Default: false,+			Desc:    "verbose output",+			Short:   'v',+		},+		{+			DestP:   &options.target.boltPath,+			Flag:    "bolt-path",+			Default: filepath.Join(v2dir, bolt.DefaultFilename),+			Desc:    "path for boltdb database",+			Short:   'm',+		},+		{+			DestP:   &options.target.enginePath,+			Flag:    "engine-path",+			Default: filepath.Join(v2dir, "engine"),+			Desc:    "path for persistent engine files",+			Short:   'e',+		},+		{+			DestP:    &options.target.userName,+			Flag:     "username",+			Default:  "",+			Desc:     "primary username",+			Short:    'u',+			Required: true,+		},+		{+			DestP:    &options.target.password,+			Flag:     "password",+			Default:  "",+			Desc:     "password for username",+			Short:    'p',+			Required: true,+		},+		{+			DestP:    &options.target.orgName,+			Flag:     "org",+			Default:  "",+			Desc:     "primary organization name",+			Short:    'o',+			Required: true,+		},+		{+			DestP:    &options.target.bucket,+			Flag:     "bucket",+			Default:  "",+			Desc:     "primary bucket name",+			Short:    'b',+			Required: true,+		},+		{+			DestP:   &options.target.retention,+			Flag:    "retention",+			Default: "",+			Desc:    "optional: duration bucket will retain data. 0 is infinite. Default is 0.",+			Short:   'r',+		},+		{+			DestP:   &options.target.token,+			Flag:    "token",+			Default: "",+			Desc:    "optional: token for username, else auto-generated",+			Short:   't',+		},+		{+			DestP:   &options.source.configFile,+			Flag:    "config-file",+			Default: getV1ConfigPath(),+			Desc:    "optional: Custom InfluxDB 1.x config file path, else the default config file",+		},+		{+			DestP:   &options.target.securityScriptPath,+			Flag:    "security-script",+			Default: defaultSsPath,+			Desc:    "optional: generated security upgrade script path",+		},+		{+			DestP:   &options.logPath,+			Flag:    "log-path",+			Default: filepath.Join(homeOrAnyDir(), "upgrade.log"),+			Desc:    "optional: Custom log file path",+		},+	} +	cli.BindOptions(cmd, opts) 	// add sub commands-	Command.AddCommand(v1DumpMetaCommand)-	Command.AddCommand(v2DumpMetaCommand)+	cmd.AddCommand(v1DumpMetaCommand)+	cmd.AddCommand(v2DumpMetaCommand)+	// TODO for testing purposes only+	cmd.AddCommand(upgradeConfigCommand)+	return cmd }  type influxDBv1 struct { 	meta *meta.Client }  type influxDBv2 struct {+	log         *zap.Logger 	boltClient  *bolt.Client 	store       *bolt.KVStore 	kvStore     kv.SchemaStore 	tenantStore *tenant.Store 	ts          *tenant.Service 	dbrpSvc     influxdb.DBRPMappingServiceV2+	bucketSvc   influxdb.BucketService 	onboardSvc  influxdb.OnboardingService 	kvService   *kv.Service 	meta        *meta.Client } -func runUpgradeE(cmd *cobra.Command, args []string) error {+func (i *influxDBv2) close() error {+	err := i.meta.Close()+	if err != nil {+		return err+	}+	err = i.boltClient.Close()+	if err != nil {+		return err+	}+	err = i.store.Close()+	if err != nil {+		return err+	}+	return nil+}++func runUpgradeE(*cobra.Command, []string) error { 	ctx := context.Background()+	config := zap.NewProductionConfig()+	config.OutputPaths = append(config.OutputPaths, options.logPath)+	config.ErrorOutputPaths = append(config.ErrorOutputPaths, options.logPath)+	log, err := config.Build()+	if err != nil {+		return err+	}+	log.Info("starting InfluxDB 1.x upgrade")++	checkParam := func(name, value string) error {+		if value == "" {+			return fmt.Errorf("empty or missing mandatory option %s", name)+		}+		return nil+	}++	if err := checkParam("username", options.target.userName); err != nil {+		return err+	}+	if err := checkParam("password", options.target.password); err != nil {+		return err+	}+	if err := checkParam("org", options.target.orgName); err != nil {+		return err+	}+	if err := checkParam("bucket", options.target.bucket); err != nil {+		return err+	}++	if options.source.configFile != "" {+		log.Info("upgrading config file", zap.String("file", options.source.configFile))+		if _, err := os.Stat(options.source.configFile); err != nil {+			return err+		}+		v1Config, err := upgradeConfig(options.source.configFile, log)+		if err != nil {+			return err+		}+		// TODO how to load and validate new Config???++		options.source.metaDir = v1Config.Meta.Dir+		options.source.dataDir = v1Config.Data.Dir+		options.source.walDir = v1Config.Data.WALDir+	} else {+		log.Info("no InfluxDB 1.x config file specified, skipping its upgrade")+	}++	if err := options.source.checkDirs(); err != nil {+		return err+	}  	v1, err := newInfluxDBv1(&options.source) 	if err != nil { 		return err 	}-	_ = v1 -	v2, err := newInfluxDBv2(ctx, &options.target)+	v2, err := newInfluxDBv2(ctx, &options.target, log) 	if err != nil { 		return err 	}-	_ = v2 -	// 1. Onboard the initial admin user-	// v2.onboardSvc.OnboardInitialUser()+	or, err := setupAdmin(ctx, v2)+	if err != nil {+		return err+	}+	options.target.token = or.Auth.Token -	// 2. read each database / retention policy from v1.meta and create bucket db-name/rp-name-	// newBucket := v2.ts.CreateBucket(ctx, Bucket{})-	//-	// 3. create database in v2.meta-	// v2.meta.CreateDatabase(newBucket.ID.String())-	// copy shard info from v1.meta+	db2BucketIds, err := upgradeDatabases(ctx, v1, v2, or.Org.ID, log)+	if err != nil {+		//remove all files+		log.Info("database upgrade error, removing data")+		if e := os.Remove(options.target.boltPath); e != nil {+			log.Error("cleaning failed", zap.Error(e))+		}++		if e := os.RemoveAll(options.target.enginePath); e != nil {+			log.Error("cleaning failed", zap.Error(e))+		}+		return err+	}++	if err = generateSecurityScript(v1, db2BucketIds, log); err != nil {+		return err+	}++	log.Info("upgrade successfully completed. Start service now")  	return nil } +func upgradeDatabases(ctx context.Context, v1 *influxDBv1, v2 *influxDBv2, orgID influxdb.ID, log *zap.Logger) (map[string][]string, error) {+	db2BucketIds := make(map[string][]string)+	targetDataPath := filepath.Join(options.target.enginePath, "data")+	targetWalPath := filepath.Join(options.target.enginePath, "wal")+	dirFilterFunc := func(path string) bool {+		base := filepath.Base(path)+		if base == "_series" ||+			(len(base) > 0 && base[0] == '_') || //skip internal databases+			base == "index" {+			return true+		}+		return false+	}+	// read each database / retention policy from v1.meta and create bucket db-name/rp-name+	// create database in v2.meta+	// copy shard info from v1.meta+	if len(v1.meta.Databases()) > 0 {

 func newFileExistsError(path string) FileExistsError { func (e FileExistsError) Error() string { 	return fmt.Sprintf("operation not allowed, file %q exists", e.path) }++type DiskStatus struct {+	All   uint64+	Used  uint64+	Free  uint64+	Avail uint64+}++// DirSize returns total size in bytes of containing files+func DirSize(path string) (uint64, error) {+	var size uint64+	err := filepath.Walk(path, func(_ string, info os.FileInfo, err error) error {+		if err != nil {+			return err+		}+		if !info.IsDir() {+			size += uint64(info.Size())+		}+		return err+	})+	return size, err+}++// CopyFile copies the contents of the file named src to the file named+// by dst. The file will be created if it does not already exist. If the+// destination file exists, all it's contents will be replaced by the contents+// of the source file. The file mode will be copied from the source and+// the copied data is synced/flushed to stable storage.+func CopyFile(src, dst string) (err error) {+	in, err := os.Open(src)+	if err != nil {+		return+	}+	defer in.Close()++	out, err := os.Create(dst)+	if err != nil {+		return+	}+	defer func() {+		if e := out.Close(); e != nil {+			err = e+		}+	}()++	_, err = io.Copy(out, in)+	if err != nil {+		return+	}++	err = out.Sync()+	if err != nil {+		return+	}++	si, err := os.Stat(src)+	if err != nil {+		return+	}+	err = os.Chmod(dst, si.Mode())

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", getV1ConfigPath(), "Path to 1.x config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config file upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++// Returns default 1.x config file path.+func getV1ConfigPath() string {+	if envVar := os.Getenv("INFLUXDB_CONFIG_PATH"); envVar != "" {+		return envVar+	}+	for _, path := range []string{+		os.ExpandEnv("${HOME}/.influxdb/influxdb.conf"),+		"/etc/influxdb/influxdb.conf",+	} {+		if _, err := os.Stat(path); err == nil {+			return path+		}+	}++	return ""+}++// private function used by `upgrade-config` command+func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		errMsg := fmt.Sprintf("upgrade: config file backup %s already exist", backupFile)+		return errors.New(errMsg)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c config+	_, err = toml.Decode(string(bs), &c)+	return c, err+}++func (cu *configUpgrader) loadV1(path string) (*configV1, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c configV1+	_, err = toml.Decode(string(bs), &c)+	return &c, err+}++func (cu *configUpgrader) init(rules string) {+	cu.rules = make(properties)+	scanner := bufio.NewScanner(strings.NewReader(rules))+	for scanner.Scan() {+		line := strings.Trim(scanner.Text(), " ")+		if line == "" || strings.HasPrefix(line, "#") {+			continue+		}+		rule := strings.SplitN(line, "=", 2)+		if len(rule) == 2 {+			sourceKey := strings.Trim(rule[0], " ")+			targetKey := strings.Trim(rule[1], " ")+			cu.rules[sourceKey] = targetKey+		}+	}+}++func (cu *configUpgrader) convert(path []string) ([]string, bool) {+	fqn := strings.Join(path, ".")+	target, ok := cu.rules[fqn]+	if ok {+		if target == "" {+			return nil, true+		}+		return strings.Split(target, "."), true+	}+	return path, false+}++// flat copy ie. without values for maps and arrays+func (cu *configUpgrader) add(v interface{}, source []string, target []string, index int) {+	var c table+	c = cu.config+	for len(target) > 1 {+		n := target[0]+		u, ok := c[n]+		if !ok {+			u = make(table)+			c[n] = u+		}+		if uc, ok := u.(table); ok {+			c = uc+		}+		if uc, ok := u.([]table); ok {+			if uc[index] == nil {+				uc[index] = make(table)+			}+			c = uc[index]+		}+		target = target[1:]+	}+	n := target[0]+	switch vv := v.(type) {+	case table:+		c[n] = make(table)+	case []table:+		array := make([]table, len(vv))+		for i := 0; i < len(vv); i++ {+			array[i] = make(table)+		}+		c[n] = array+	default:+		c[n] = v+	}+}++func (cu *configUpgrader) process(c interface{}, path []string, index int) []string {

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n{\n", helper.shUserVar(username))+			} else {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n", helper.shUserVar(username))+			}+		}+		if row.Admin {+			scriptln(nl)+			scriptf("  echo User %s is 1.x admin and should be added & invited manually to 2.x if needed\n", username)+			scriptf("  %s add & invite user %s in the InfluxDB 2.x UI\n", comment, username)+			scriptln(fi)+			script()+			continue+		}+		password := helper.generatePassword(8) // influx user create requires password+		tokenDesc := fmt.Sprintf("%s's token", username)+		readAccess := make([]string, 0)+		writeAccess := make([]string, 0)+		for database, permission := range row.Privileges {+			ids, ok := dbBuckets[database]+			if !ok || ids == nil || len(ids) == 0 { // db probably skipped+				continue+			}+			for _, id := range ids {+				switch permission {+				case influxql.ReadPrivilege:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+				case influxql.WritePrivilege:+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				case influxql.AllPrivileges:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				}+			}+		}+		var readBucketArgs, writeBucketArgs string+		if len(readAccess) > 0 {+			readBucketArgs = strings.Join(readAccess, " ")+		}+		if len(writeAccess) > 0 {+			writeBucketArgs = strings.Join(writeAccess, " ")+		}+		var cmds []string+		cmds = append(cmds, fmt.Sprintf("  echo Creating user %s with password %s in %s organization...", username, password, targetOrg))+		cmds = append(cmds, fmt.Sprintf("%s user create --name=%s --password=%s --org=%s", influx, username, password, targetOrg))+		if len(readAccess) > 0 || len(writeAccess) > 0 {+			cmds = append(cmds, "echo Creating authorization token...")+			cmds = append(cmds, fmt.Sprintf("%s auth create --user=%s --org=%s --description=\"%s\" %s %s",+				influx, username, targetOrg, tokenDesc, readBucketArgs, writeBucketArgs))+		}+		scriptln(nl)+		scriptln(strings.Join(cmds, join))+		scriptln(fi)+		script()+		// sample output per user:+		// ID			Name+		// 064b437f88377000	xyz1+		// ID			Token												User Name	User ID			Permissions+		// 064b485f4fe3a000	aysw_eMIF46WxKx8o0oz9bNmMVGL09AAg1Scoo1ynFJSW4uC2P3O8HyVy8NTISbNltNDFr7jAyQui3KS-ahpsQ==	xyz		064b435351b77000	[read:orgs/b20841b0f84c3b7e/buckets/8213da1997b3d89e write:orgs/b20841b0f84c3b7e/buckets/8213da1997b3d89e]+	}++	if isFo {+		if helper.isWin() {+			scriptln("type %LOG%")+			scriptln("echo.")+			scriptln("echo Output saved to %LOG%")+		} else {+			scriptln("echo")+			scriptln("echo Output saved to $LOG")+		}+		log.Info(fmt.Sprintf("security upgrade script saved to %s\n", options.target.securityScriptPath))+	}++	return nil+}++// private type used by `generate-security-script` command+type securityScriptHelper struct {+	shReg *regexp.Regexp+	log   *zap.Logger+}++func (h *securityScriptHelper) init() error {+	reg, err := regexp.Compile("[^a-zA-Z0-9]+")+	if err != nil {+		return fmt.Errorf("upgrade: error preparing security script: %v", err)+	}+	h.shReg = reg+	return nil+}++func (h *securityScriptHelper) checkDbBuckets(meta *meta.Client, databases map[string][]string) bool {+	ok := true+	for _, row := range meta.Users() {+		for database := range row.Privileges {+			if h.skipDb(database) { // same check is done in upgradeDatabases()+				continue+			}+			ids, ok := databases[database]+			if !ok || ids == nil || len(ids) == 0 {+				h.log.Warn(fmt.Sprintf("warning: no buckets for database [%s] exist in 2.x\n", database))+				ok = false+			}+		}+	}++	return ok+}++func (h *securityScriptHelper) shUserVar(name string) string {+	return "UPGRADE_USER_" + h.shReg.ReplaceAllString(name, "_")+}++func (h *securityScriptHelper) sortUserInfo(info []meta.UserInfo) []meta.UserInfo {+	sort.Slice(info, func(i, j int) bool {+		return info[i].Name < info[j].Name+	})+	return info+}++func (h *securityScriptHelper) generatePassword(length int) string {+	lowerCharSet := "abcdefghijklmnopqrstuvwxyz"+	upperCharSet := "ABCDEFGHIJKLMNOPQRSTUVWXYZ"+	specialCharSet := "" //".!@#$%"+	numberSet := "0123456789"+	allCharSet := lowerCharSet + upperCharSet + specialCharSet + numberSet+	rand.Seed(time.Now().UnixNano())

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", getV1ConfigPath(), "Path to 1.x config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config file upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++// Returns default 1.x config file path.+func getV1ConfigPath() string {+	if envVar := os.Getenv("INFLUXDB_CONFIG_PATH"); envVar != "" {+		return envVar+	}+	for _, path := range []string{+		os.ExpandEnv("${HOME}/.influxdb/influxdb.conf"),+		"/etc/influxdb/influxdb.conf",+	} {+		if _, err := os.Stat(path); err == nil {+			return path+		}+	}++	return ""+}++// private function used by `upgrade-config` command+func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		errMsg := fmt.Sprintf("upgrade: config file backup %s already exist", backupFile)+		return errors.New(errMsg)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c config+	_, err = toml.Decode(string(bs), &c)+	return c, err+}++func (cu *configUpgrader) loadV1(path string) (*configV1, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c configV1+	_, err = toml.Decode(string(bs), &c)+	return &c, err+}++func (cu *configUpgrader) init(rules string) {+	cu.rules = make(properties)+	scanner := bufio.NewScanner(strings.NewReader(rules))+	for scanner.Scan() {+		line := strings.Trim(scanner.Text(), " ")+		if line == "" || strings.HasPrefix(line, "#") {+			continue+		}+		rule := strings.SplitN(line, "=", 2)+		if len(rule) == 2 {

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", "/etc/influxdb/influxdb.conf", "Path to config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	sourceFileStat, err := os.Stat(path)+	if err != nil {+		return err+	}++	if !sourceFileStat.Mode().IsRegular() {+		return errors.New("upgrade: '" + path + "' is not a regular file")+	}++	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"++	// TODO testing only?+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		return fmt.Errorf("upgrade: config backup file %s already exist", backupFile)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c config+	_, err = toml.Decode(string(bs), &c)+	return c, err+}++func (cu *configUpgrader) loadV1(path string) (*configV1, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.+	bom := unicode.BOMOverride(transform.Nop)+	bs, _, err = transform.Bytes(bom, bs)+	if err != nil {+		return nil, err+	}++	var c configV1+	_, err = toml.Decode(string(bs), &c)+	return &c, err+}++func (cu *configUpgrader) init(rules string) {+	cu.rules = make(properties)+	scanner := bufio.NewScanner(strings.NewReader(rules))+	for scanner.Scan() {+		line := strings.Trim(scanner.Text(), " ")+		if line == "" || strings.HasPrefix(line, "#") {+			continue+		}+		rule := strings.SplitN(line, "=", 2)+		if len(rule) == 2 {+			sourceKey := strings.Trim(rule[0], " ")

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", "/etc/influxdb/influxdb.conf", "Path to config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command+type table = map[string]interface{} // private type used by `upgrade-config` command+type config = table                 // private type used by `upgrade-config` command++// private type used by `upgrade-config` command+type configUpgrader struct {+	rules  properties+	config config+	log    *zap.Logger+}++// private function used by `upgrade-config` command+func newConfigUpgrader(rules string, log *zap.Logger) *configUpgrader {+	cm := &configUpgrader{+		log: log,+	}+	cm.init(rules)+	return cm+}++func (cu *configUpgrader) backup(path string) error {+	sourceFileStat, err := os.Stat(path)+	if err != nil {+		return err+	}++	if !sourceFileStat.Mode().IsRegular() {+		return errors.New("upgrade: '" + path + "' is not a regular file")+	}++	source, err := os.Open(path)+	if err != nil {+		return err+	}+	defer source.Close()++	backupFile := path + "~"++	// TODO testing only?+	if _, err := os.Stat(backupFile); !os.IsNotExist(err) {+		return fmt.Errorf("upgrade: config backup file %s already exist", backupFile)+	}++	destination, err := os.Create(backupFile)+	if err != nil {+		return err+	}+	defer destination.Close()+	_, err = io.Copy(destination, source)++	return err+}++func (cu *configUpgrader) save(c config, path string) error {+	buf := new(bytes.Buffer)+	if err := toml.NewEncoder(buf).Encode(&c); err != nil {+		return err+	}++	return ioutil.WriteFile(path, buf.Bytes(), 0666)+}++func (cu *configUpgrader) transform(path string) (config, error) {+	c, err := cu.parse(path)+	if err != nil {+		return nil, err+	}+	cu.config = make(config)+	cu.process(c, nil, -1)+	return cu.config, nil+}++func (cu *configUpgrader) parse(path string) (config, error) {+	bs, err := ioutil.ReadFile(path)+	if err != nil {+		return nil, err+	}++	// Handle any potential Byte-Order-Marks that may be in the config file.+	// This is for Windows compatibility only.+	// See https://github.com/influxdata/telegraf/issues/1378 and+	// https://github.com/influxdata/influxdb/issues/8965.

+package upgrade++// This file contains code for v1 config file upgrade to v2.+// It supports basic restructuring (caveat: changing structure inside existing+// array or to new array may not work, but it is not required).+// Upgrade rules are in `upgrade_config.properties` file.++import (+	"bufio"+	"bytes"+	"errors"+	"fmt"+	"io"+	"io/ioutil"+	"os"+	"path/filepath"+	"strings"++	"github.com/BurntSushi/toml"+	"github.com/spf13/cobra"+	"go.uber.org/zap"+	"golang.org/x/text/encoding/unicode"+	"golang.org/x/text/transform"+)++// TODO for testing purposes+var upgradeConfigCommand = &cobra.Command{+	Use:   "upgrade-config",+	Short: "Upgrade InfluxDB 1.x config to 2.x",+	RunE: func(cmd *cobra.Command, args []string) error {+		log, _ := zap.NewProduction()+		_, err := upgradeConfig(options.source.configFile, log)+		return err+	},+}++// TODO for testing purposes+func init() {+	flags := upgradeConfigCommand.Flags()+	flags.StringVar(&options.source.configFile, "config-file", "/etc/influxdb/influxdb.conf", "Path to config file")+}++// Backups existing config file and updates it with upgraded config.+func upgradeConfig(configFile string, log *zap.Logger) (*configV1, error) {+	configUpgradeProperties, err := AssetString("upgrade_config.properties")+	if err != nil {+		return nil, err+	}+	ext := filepath.Ext(configFile)+	cu := newConfigUpgrader(configUpgradeProperties, log)+	v1c, err := cu.loadV1(configFile)+	if err != nil {+		return nil, err+	}+	if ext == ".toml" { // if v1 config already has ".toml" extension, backup is needed+		err = cu.backup(configFile)+		if err != nil {+			return nil, err+		}+	}+	c, err := cu.transform(configFile)+	if err != nil {+		return nil, err+	}+	applyConfigOverrides(c)+	configFileV2 := strings.TrimSuffix(configFile, ext) + ".toml"+	err = cu.save(c, configFileV2)+	if err != nil {+		return nil, err+	}+	log.Info("config upgraded",+		zap.String("1.x config", configFile),+		zap.String("2.x config", configFileV2))++	return v1c, nil+}++func applyConfigOverrides(c config) {+	if options.target.enginePath != "" {+		c["engine-path"] = options.target.enginePath+	}+	if options.target.boltPath != "" {+		c["bolt-path"] = options.target.boltPath+	}+}++type properties map[string]string   // private type used by `upgrade-config` command

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n{\n", helper.shUserVar(username))+			} else {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n", helper.shUserVar(username))+			}+		}+		if row.Admin {+			scriptln(nl)+			scriptf("  echo User %s is 1.x admin and should be added & invited manually to 2.x if needed\n", username)+			scriptf("  %s add & invite user %s in the InfluxDB 2.x UI\n", comment, username)+			scriptln(fi)+			script()+			continue+		}+		password := helper.generatePassword(8) // influx user create requires password+		tokenDesc := fmt.Sprintf("%s's token", username)+		readAccess := make([]string, 0)+		writeAccess := make([]string, 0)+		for database, permission := range row.Privileges {+			ids, ok := dbBuckets[database]+			if !ok || ids == nil || len(ids) == 0 { // db probably skipped+				continue+			}+			for _, id := range ids {+				switch permission {+				case influxql.ReadPrivilege:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+				case influxql.WritePrivilege:+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				case influxql.AllPrivileges:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				}+			}+		}+		var readBucketArgs, writeBucketArgs string+		if len(readAccess) > 0 {+			readBucketArgs = strings.Join(readAccess, " ")+		}+		if len(writeAccess) > 0 {+			writeBucketArgs = strings.Join(writeAccess, " ")+		}

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n{\n", helper.shUserVar(username))+			} else {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n", helper.shUserVar(username))+			}+		}+		if row.Admin {+			scriptln(nl)+			scriptf("  echo User %s is 1.x admin and should be added & invited manually to 2.x if needed\n", username)+			scriptf("  %s add & invite user %s in the InfluxDB 2.x UI\n", comment, username)+			scriptln(fi)+			script()+			continue+		}+		password := helper.generatePassword(8) // influx user create requires password+		tokenDesc := fmt.Sprintf("%s's token", username)+		readAccess := make([]string, 0)+		writeAccess := make([]string, 0)+		for database, permission := range row.Privileges {+			ids, ok := dbBuckets[database]+			if !ok || ids == nil || len(ids) == 0 { // db probably skipped+				continue+			}+			for _, id := range ids {+				switch permission {+				case influxql.ReadPrivilege:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+				case influxql.WritePrivilege:+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				case influxql.AllPrivileges:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				}+			}+		}+		var readBucketArgs, writeBucketArgs string+		if len(readAccess) > 0 {+			readBucketArgs = strings.Join(readAccess, " ")+		}+		if len(writeAccess) > 0 {+			writeBucketArgs = strings.Join(writeAccess, " ")+		}+		var cmds []string+		cmds = append(cmds, fmt.Sprintf("  echo Creating user %s with password %s in %s organization...", username, password, targetOrg))+		cmds = append(cmds, fmt.Sprintf("%s user create --name=%s --password=%s --org=%s", influx, username, password, targetOrg))+		if len(readAccess) > 0 || len(writeAccess) > 0 {+			cmds = append(cmds, "echo Creating authorization token...")+			cmds = append(cmds, fmt.Sprintf("%s auth create --user=%s --org=%s --description=\"%s\" %s %s",+				influx, username, targetOrg, tokenDesc, readBucketArgs, writeBucketArgs))+		}+		scriptln(nl)+		scriptln(strings.Join(cmds, join))+		scriptln(fi)+		script()+		// sample output per user:+		// ID			Name+		// 064b437f88377000	xyz1+		// ID			Token												User Name	User ID			Permissions+		// 064b485f4fe3a000	aysw_eMIF46WxKx8o0oz9bNmMVGL09AAg1Scoo1ynFJSW4uC2P3O8HyVy8NTISbNltNDFr7jAyQui3KS-ahpsQ==	xyz		064b435351b77000	[read:orgs/b20841b0f84c3b7e/buckets/8213da1997b3d89e write:orgs/b20841b0f84c3b7e/buckets/8213da1997b3d89e]+	}++	if isFo {+		if helper.isWin() {+			scriptln("type %LOG%")+			scriptln("echo.")+			scriptln("echo Output saved to %LOG%")+		} else {+			scriptln("echo")+			scriptln("echo Output saved to $LOG")+		}+		log.Info(fmt.Sprintf("security upgrade script saved to %s\n", options.target.securityScriptPath))+	}++	return nil+}++// private type used by `generate-security-script` command+type securityScriptHelper struct {+	shReg *regexp.Regexp+	log   *zap.Logger+}++func (h *securityScriptHelper) init() error {+	reg, err := regexp.Compile("[^a-zA-Z0-9]+")+	if err != nil {+		return fmt.Errorf("upgrade: error preparing security script: %v", err)+	}+	h.shReg = reg+	return nil+}++func (h *securityScriptHelper) checkDbBuckets(meta *meta.Client, databases map[string][]string) bool {+	ok := true+	for _, row := range meta.Users() {+		for database := range row.Privileges {+			if h.skipDb(database) { // same check is done in upgradeDatabases()+				continue+			}+			ids, ok := databases[database]+			if !ok || ids == nil || len(ids) == 0 {+				h.log.Warn(fmt.Sprintf("warning: no buckets for database [%s] exist in 2.x\n", database))+				ok = false

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n{\n", helper.shUserVar(username))+			} else {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n", helper.shUserVar(username))+			}+		}+		if row.Admin {+			scriptln(nl)+			scriptf("  echo User %s is 1.x admin and should be added & invited manually to 2.x if needed\n", username)+			scriptf("  %s add & invite user %s in the InfluxDB 2.x UI\n", comment, username)+			scriptln(fi)+			script()+			continue+		}+		password := helper.generatePassword(8) // influx user create requires password+		tokenDesc := fmt.Sprintf("%s's token", username)+		readAccess := make([]string, 0)+		writeAccess := make([]string, 0)+		for database, permission := range row.Privileges {+			ids, ok := dbBuckets[database]+			if !ok || ids == nil || len(ids) == 0 { // db probably skipped+				continue+			}+			for _, id := range ids {+				switch permission {+				case influxql.ReadPrivilege:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+				case influxql.WritePrivilege:+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				case influxql.AllPrivileges:+					readAccess = append(readAccess, fmt.Sprintf("--read-bucket=%s", id))+					writeAccess = append(writeAccess, fmt.Sprintf("--write-bucket=%s", id))+				}+			}+		}+		var readBucketArgs, writeBucketArgs string+		if len(readAccess) > 0 {+			readBucketArgs = strings.Join(readAccess, " ")+		}+		if len(writeAccess) > 0 {+			writeBucketArgs = strings.Join(writeAccess, " ")+		}+		var cmds []string+		cmds = append(cmds, fmt.Sprintf("  echo Creating user %s with password %s in %s organization...", username, password, targetOrg))+		cmds = append(cmds, fmt.Sprintf("%s user create --name=%s --password=%s --org=%s", influx, username, password, targetOrg))+		if len(readAccess) > 0 || len(writeAccess) > 0 {+			cmds = append(cmds, "echo Creating authorization token...")+			cmds = append(cmds, fmt.Sprintf("%s auth create --user=%s --org=%s --description=\"%s\" %s %s",+				influx, username, targetOrg, tokenDesc, readBucketArgs, writeBucketArgs))+		}+		scriptln(nl)+		scriptln(strings.Join(cmds, join))+		scriptln(fi)+		script()+		// sample output per user:+		// ID			Name+		// 064b437f88377000	xyz1+		// ID			Token												User Name	User ID			Permissions+		// 064b485f4fe3a000	aysw_eMIF46WxKx8o0oz9bNmMVGL09AAg1Scoo1ynFJSW4uC2P3O8HyVy8NTISbNltNDFr7jAyQui3KS-ahpsQ==	xyz		064b435351b77000	[read:orgs/b20841b0f84c3b7e/buckets/8213da1997b3d89e write:orgs/b20841b0f84c3b7e/buckets/8213da1997b3d89e]+	}++	if isFo {+		if helper.isWin() {+			scriptln("type %LOG%")

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n{\n", helper.shUserVar(username))+			} else {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n", helper.shUserVar(username))+			}+		}+		if row.Admin {+			scriptln(nl)+			scriptf("  echo User %s is 1.x admin and should be added & invited manually to 2.x if needed\n", username)+			scriptf("  %s add & invite user %s in the InfluxDB 2.x UI\n", comment, username)+			scriptln(fi)+			script()+			continue+		}+		password := helper.generatePassword(8) // influx user create requires password+		tokenDesc := fmt.Sprintf("%s's token", username)+		readAccess := make([]string, 0)+		writeAccess := make([]string, 0)

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n{\n", helper.shUserVar(username))+			} else {+				scriptf("if [ \"$%s\" = \"yes\" ]; then\n", helper.shUserVar(username))+			}+		}+		if row.Admin {+			scriptln(nl)+			scriptf("  echo User %s is 1.x admin and should be added & invited manually to 2.x if needed\n", username)+			scriptf("  %s add & invite user %s in the InfluxDB 2.x UI\n", comment, username)+			scriptln(fi)+			script()+			continue+		}+		password := helper.generatePassword(8) // influx user create requires password+		tokenDesc := fmt.Sprintf("%s's token", username)+		readAccess := make([]string, 0)+		writeAccess := make([]string, 0)+		for database, permission := range row.Privileges {+			ids, ok := dbBuckets[database]+			if !ok || ids == nil || len(ids) == 0 { // db probably skipped+				continue+			}+			for _, id := range ids {

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName

+package upgrade++import (+	"errors"+	"fmt"+	"math/rand"+	"os"+	"path/filepath"+	"regexp"+	"runtime"+	"sort"+	"strings"+	"time"++	"github.com/influxdata/influxdb/v2/v1/services/meta"+	"github.com/influxdata/influxql"+	"go.uber.org/zap"+)++// Generates security upgrade script.+func generateSecurityScript(v1 *influxDBv1, dbBuckets map[string][]string, log *zap.Logger) error {+	// create helper+	helper := &securityScriptHelper{+		log: log,+	}+	if err := helper.init(); err != nil {+		return err+	}++	// target org name+	var targetOrg = options.target.orgName++	// get `influx` absolute path+	exePath, err := filepath.Abs(os.Args[0])+	if err != nil {+		return err+	}+	influxExe := filepath.Join(filepath.Dir(exePath), "influx")++	// first check if target buckets exists in 2.x+	v1meta := v1.meta+	proceed := helper.checkDbBuckets(v1meta, dbBuckets)+	if !proceed {+		return errors.New("upgrade: there were errors/warnings, please fix them and run the command again")+	}++	// create output+	var output *os.File+	var isFo bool+	if options.target.securityScriptPath == "" {+		output = os.Stdout+	} else {+		output, err = os.OpenFile(options.target.securityScriptPath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)+		if err != nil {+			return err+		}+		isFo = true+	}++	// script printing helper funcs+	scriptf := func(format string, args ...interface{}) {+		fmt.Fprintf(output, format, args...)+	}+	scriptln := func(text string) {+		fmt.Fprintln(output, text)+	}+	script := func() {+		fmt.Fprintln(output, "")+	}++	// generate the script+	var comment, set, fi, nl, join, influx string+	if helper.isWin() {+		comment = "REM"+		set = "set "+		if isFo {+			fi = ") >> %LOG% 2>&1"+		} else {+			fi = ")"+		}+		nl = "  echo."+		join = " ^\n  && "+		influx = "%INFLUX%"+		scriptln("@ECHO OFF")+		script()+	} else {+		comment = "#"+		set = ""+		if isFo {+			fi = "} 2>&1 | tee -a $LOG\nfi"+		} else {+			fi = "fi"+		}+		nl = "  echo"+		join = " && \\\n  "+		influx = "env INFLUX_TOKEN=$INFLUX_TOKEN $INFLUX"+		scriptln("#!/bin/sh")+		script()+	}+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		varname := helper.shUserVar(username)+		if row.Admin {+			if helper.isWin() {+				scriptf("%s user %s is 1.x admin, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s is 1.x admin, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else if len(row.Privileges) == 0 {+			if helper.isWin() {+				scriptf("%s user %s has no 1.x privileges, will not be upgraded automatically\n%s%s=no\n",+					comment, username, set, varname)+			} else {+				scriptf("%s%s=no %s user %s has no 1.x privileges, will not be upgraded automatically\n",+					set, varname, comment, username)+			}+		} else {+			if helper.isWin() {+				scriptf("%s user %s\n%s%s=yes\n", comment, username, set, varname)+			} else {+				scriptf("%s%s=yes %s user %s\n", set, varname, comment, username)+			}+		}+	}+	script()+	scriptln(comment)+	scriptf("%s VARIABLES\n", comment)+	scriptln(comment)+	script()+	if helper.isWin() {+		scriptf("set INFLUX=\"%s\"\n", influxExe)+		scriptf("set INFLUX_TOKEN=%s\n", options.target.token)+	} else {+		scriptf("INFLUX=%s\n", influxExe)+		scriptf("INFLUX_TOKEN=%s\n", options.target.token)+	}+	if isFo {+		if helper.isWin() {+			scriptln("set PATH=%PATH%;C:\\WINDOWS\\system32\\wbem")+			scriptln("for /f %%x in ('wmic os get localdatetime ^| findstr /b [0-9]') do @set X=%%x && set LOG=%~dpn0.%X:~0,8%-%X:~8,6%.log")+		} else {+			scriptln("LOG=\"${0%.*}.$(date +%Y%m%d-%H%M%S).log\"")+		}+	}+	script()+	scriptln(comment)+	scriptf("%s INDIVIDUAL USER UPGRADES\n", comment)+	scriptln(comment)+	script()+	for _, row := range helper.sortUserInfo(v1meta.Users()) {+		username := row.Name+		if helper.isWin() {+			scriptf("IF /I \"%%%s%%\" == \"yes\" (\n", helper.shUserVar(username))+		} else {+			if isFo {

 func (ts *TestScript) cmdSymlink(neg bool, args []string) { 	ts.Check(os.Symlink(args[2], ts.MkAbs(args[0]))) } +// cmdUNIX2DOS converts files from UNIX line endings to DOS line endings.+func (ts *TestScript) cmdUNIX2DOS(neg bool, args []string) {+	if neg {+		ts.Fatalf("unsupported: ! unix2dos")+	}+	if len(args) < 1 {+		ts.Fatalf("usage: unix2dos paths...")+	}+	for _, arg := range args {+		filename := ts.MkAbs(arg)+		data, err := ioutil.ReadFile(filename)+		if err != nil {+			ts.Fatalf("%s: %v", filename, err)

 func (ts *TestScript) cmdSymlink(neg bool, args []string) { 	ts.Check(os.Symlink(args[2], ts.MkAbs(args[0]))) } +// cmdUNIX2DOS converts files from UNIX line endings to DOS line endings.+func (ts *TestScript) cmdUNIX2DOS(neg bool, args []string) {+	if neg {+		ts.Fatalf("unsupported: ! unix2dos")+	}+	if len(args) < 1 {+		ts.Fatalf("usage: unix2dos paths...")+	}+	for _, arg := range args {+		filename := ts.MkAbs(arg)+		data, err := ioutil.ReadFile(filename)+		if err != nil {+			ts.Fatalf("%s: %v", filename, err)+		}+		data = bytes.Join(bytes.Split(data, []byte{'\n'}), []byte{'\r', '\n'})

 import ( 	"testing" ) +// Check runs the given check using the provided t and continues execution in+// case of failure. For instance:+//+//     qt.Check(t, answer, qt.Equals, 42)+//     qt.Check(t, got, qt.IsNil, qt.Commentf("iteration %d", i))+//+// Additional args (not consumed by the checker), when provided, are included as+// comments in the failure output when the check fails.+func Check(t testing.TB, got interface{}, checker Checker, args ...interface{}) bool {+	return check(checkParams{