You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
#!/bin/bash
## Installing base docker-host wget http://docker.0k.io/get/ -qO - | bash || exit 1
## shlib is now available . /etc/shlib || { echo "shlib is not available. Bailing out." >&2 exit 1 }
clone_or_update() { local pkg="$1" branch=${2:-master} \ DEPLOY_PATH="/opt/apps" \ GIT_BASE="https://git.myceliandre.fr/Myceliandre" \ current_branch if [ -d "$DEPLOY_PATH/$pkg" ]; then cd "$DEPLOY_PATH/$pkg" current_branch=$(git rev-parse --abbrev-ref HEAD) if [ "$current_branch" != "$branch" ]; then echo "Fatal: $DEPLOY_PATH/$pkg git repos has unexpected branch checkouted." echo " To avoid changing thing, we prefer to bailout." return 1 fi git pull -r || return 1 else mkdir -p "$DEPLOY_PATH" && cd "$DEPLOY_PATH" git clone "$GIT_BASE/${pkg}" -b "$branch" --depth=1 fi }
install_bin() { local path="$1" DEST_PATH=/usr/local/bin ln -sfnv "$path"/* "$DEST_PATH" || return 1 find -L "$DEST_PATH" -maxdepth 1 -type l -ilname "$path"/\* -exec rm -v {} \; || return 1 }
set -e
clone_or_update myc-manage || exit 1 install_bin /opt/apps/myc-manage/bin
clone_or_update myc-deploy || exit 1
#[ -e /etc/compose.conf ] || ln -sfv /opt/apps/myc-deploy/etc/compose.conf /etc/compose.conf
## XXXvlab: should get rid of this file in some future cd /opt/apps/myc-deploy if ! grep "^DEFAULT_COMPOSE_FILE=$PWD/compose.yml$" /etc/compose/local.conf >/dev/null 2>&1; then echo "Adding CWD=$PWD to docker-compose." cat <<EOF >> /etc/compose/local.conf DEFAULT_COMPOSE_FILE=$PWD/compose.yml EOF fi
type -t docker-clean || ln -sfv /opt/apps/0k-docker/src/bin/docker-clean /usr/local/bin
if [ -z "$WITHOUT_DOCKER_CLEAN" ]; then ln -sfn /opt/apps/0k-docker/src/bin/docker-clean /etc/cron.daily/docker-clean fi
cd /opt/apps/myc-deploy
cat <<EOF > /root/.pgm.rc prefix_pg_local_command=" " ## otherwise, will default to sudo -u postgres
pgpass="/srv/datastore/data/postgres/var/lib/postgresql/data/pgpass" [ -f "\$pgpass" ] || { echo "No '\$pgpass' found. Postgres database doesn't seem to be setup." >&2 exit 1 } cp "\$pgpass" /root/.pgpass
PGUSER=\${PGUSER:-postgres}
if [ -z "\$PGHOST" ]; then PGHOST=\$(docker-ip | grep postgres | xargs echo | cut -f 3 -d " ") || { echo "No local running postgres docker found." >&2 exit 1 } fi export PGHOST PGUSER EOF
# if ! [ -s /etc/ssh/vm_git_myceliandre_access_id_rsa ]; then # curl -L --fail https://docker.0k.io/get/vm_git_myceliandre_access_id_rsa > /etc/ssh/vm_git_myceliandre_access_id_rsa || { # echo "Fatal: Could not retrieve http://docker.0k.io/get/vm_git_myceliandre_access_id_rsa ..." >&2 # rm -f /etc/ssh/vm_git_myceliandre_access_id_rsa # exit 1 # } # ## Not so usefull as it is public ! # chmod 0600 /etc/ssh/vm_git_myceliandre_access_id_rsa # fi
mkdir -p /root/.ssh
cat <<EOF >> /root/.ssh/config
Host git.myceliandre.fr User git IdentityFile /etc/ssh/vm_git_myceliandre_access_id_rsa UserKnownHostsFile /dev/null StrictHostKeyChecking no Port 5022
EOF
## ## We could need some docker-compose for some quick hacks ## version_gt() { test "$(printf '%s\n' "$@" | sort -V | head -n 1)" != "$1"; }
if type -p python3 >/dev/null 2>&1 && ! version_gt $(python3 --version | cut -f 2 -d " ") 3.9 ; then if ! type -p docker-compose >/dev/null; then # seems to require a C compiler apt-get install -y build-essential libffi-dev </dev/null && pip install wheel==0.33.6 && pip install pip==19.3.1 cffi==1.12.3 subprocess32==3.5.4 texttable==1.6.2 \ pyrsistent==0.15.7 \ git+https://github.com/0k/compose@run_ignore_orphans || exit 1 ## Bug after updating pip hash -d pip || exit 1 fi fi
if [ "$DOMAIN" ]; then sed -ri "s/^(\s+domain:\s+).*$/\1$DOMAIN/g" compose.yml fi
if [ "$MAIN_PASSWORD" ]; then sed -ri "s/^(\s+admin-password:\s+).*$/\1$MAIN_PASSWORD/g" compose.yml fi
pip install ovh || pip install ovh --break-system-packages || exit 1
#compose --debug up odoo apache
## Temporary work around for old images that don't want to build docker pull docker.0k.io/php:7.4-myc && docker tag docker.0k.io/php:7.4-myc myc_frontend && docker pull docker.0k.io/cron:jessie && docker tag docker.0k.io/cron:jessie myc_cron &&
## Copy Ntfy key to root umask 077 cat /opt/apps/myc-manage/etc/ssh/ntfy-key | gpg -c --batch --yes --passphrase 'uniquepass' > /root/.ssh/ntfy-key || >&2 echo "Error while copying ntfy key to root"
## Request token to ntfy server and add to config file ssh-keyscan -H core-01.0k.io >> /root/.ssh/known_hosts || >&2 echo "Error while adding ntfy server to known_hosts" cred=$(ssh -i /root/.ssh/ntfy-key ntfy@core-01.0k.io request-token) || >&2 echo "Error while requesting token to ntfy server" login_ntfy=$(printf "%s" "${cred%$'\n'*}") password_ntfy=$(printf "%s" "${cred#$'\n'*}")
## if the config file exist and LOGIN PASSWORD ARE already in we do nothing if [ -z "$login_ntfy"] || [[ "$login_ntfy" == *$'\n'*]]; then echo "Error: couldn’t infer credential from ntfy server" >&2; printf "%s" "$cred" | sed -r 's/^ |/g' >&2; exit fi
config_file="/etc/ntfy/ntfy.conf" mkdir -p "${config_file%/*}" if [ -f "$config_file" ] || touch $config_file || { echo "Error: couldn’t create config file $config_file" >&2; exit 1 }; then if grep -qE '^LOGIN=' "$config_file"; then sed -i "s/^LOGIN=.*/LOGIN='$login'/" "$config_file" else echo "LOGIN='$login'" >> "$config_file" fi if grep -qE '^PASSWORD=' "$config_file"; then sed -i "s/^PASSWORD=.*/PASSWORD='$password'/" "$config_file" else echo "PASSWORD='$password'" >> "$config_file" fi fi
## Marker to probe if this script finished it's job echo "done" > /var/run/myc-installer.0k.io.state
|