mirror of
https://github.com/dockersrc/scripts
synced 2024-11-21 23:23:05 -05:00
488 lines
24 KiB
Bash
488 lines
24 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# https://www.gnu.org/software/bash/manual/html_node/The-Set-Builtin.html
|
||
|
[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -o pipefail -x$DEBUGGER_OPTIONS || set -o pipefail
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
printf '%s\n' "# - - - Initializing couchdb - - - #"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
SERVICE_NAME="couchdb"
|
||
|
SCRIPT_NAME="$(basename "$0" 2>/dev/null)"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
export PATH="/usr/local/etc/docker/bin:/usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# run trap command on exit
|
||
|
trap 'retVal=$?;[ "$SERVICE_IS_RUNNING" != "true" ] && [ -f "$SERVICE_PID_FILE" ] && rm -Rf "$SERVICE_PID_FILE";exit $retVal' SIGINT SIGTERM EXIT
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# import the functions file
|
||
|
if [ -f "/usr/local/etc/docker/functions/entrypoint.sh" ]; then
|
||
|
. "/usr/local/etc/docker/functions/entrypoint.sh"
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# import variables
|
||
|
for set_env in "/root/env.sh" "/usr/local/etc/docker/env"/*.sh "/config/env"/*.sh; do
|
||
|
[ -f "$set_env" ] && . "$set_env"
|
||
|
done
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Custom functions
|
||
|
__curl() { curl -q -LSsf --user "$root_user_name:$root_user_pass" "$@"; }
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
__curl_users() { __curl -X PUT -H 'Accept: application/json' -H 'Content-Type: application/json' 'http://'$COUCHDB_SERVER':'$SERVICE_PORT'/_users/org.couchdb.user:'$1'' -d "{\"name\": \"$1\", \"password\": \"$2\", \"roles\": [], \"type\": \"user\"}" || return 2; }
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
__curl_database() { curl -q -LSsf -X PUT 'http://'$root_user_name:$root_user_pass'@'$COUCHDB_SERVER':'$SERVICE_PORT'/'$1'' || return 2; }
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Show message before execute
|
||
|
PRE_EXEC_MESSAGE=""
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Default predefined variables
|
||
|
WORKDIR="" # set working directory
|
||
|
DATA_DIR="/data" # set data directory
|
||
|
WWW_DIR="/data/htdocs/www" # set the web root
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
ETC_DIR="/opt/couchdb/etc" # set etc directory
|
||
|
CONF_DIR="/config/couchdb" # set config directory
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
RUN_DIR="/run/init.d" # set scripts pid dir
|
||
|
LOG_DIR="/data/logs/couchdb" # set log directory
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
ROOT_FILE_PREFIX="/config/secure/auth/root" # directory to save username/password for root user
|
||
|
USER_FILE_PREFIX="/config/secure/auth/user" # directory to save username/password for normal user
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# set the database directory
|
||
|
DATABASE_DIR="${DATABASE_DIR_COUCHDB:-/data/db/couchdb}"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Additional predefined variables
|
||
|
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# port which service is listening on
|
||
|
SERVICE_PORT="5984"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# execute command variables
|
||
|
SERVICE_UID="0" # set the user id
|
||
|
SERVICE_USER="root" # execute command as another user
|
||
|
EXEC_CMD_BIN="couchdb" # command to execute
|
||
|
EXEC_CMD_ARGS="-vvvvv" # command arguments
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Is this service a web server
|
||
|
IS_WEB_SERVER="no"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Is this service a database server
|
||
|
IS_DATABASE_SERVICE="yes"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Additional variables
|
||
|
NODENAME="${NODENAME:-}"
|
||
|
CREATE_DATABASE="${CREATE_DATABASE:-}"
|
||
|
COUCHDB_SERVER="${COUCHDB_SERVER:-localhost}"
|
||
|
COUCHDB_ROOT_USER_NAME="${COUCHDB_USER:-root}"
|
||
|
COUCHDB_ROOT_PASS_WORD="${COUCHDB_PASSWORD:-$(__random_password)}"
|
||
|
COUCHDB_ERLANG_COOKIE="${COUCHDB_ERLANG_COOKIE:-}"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# usernames
|
||
|
user_name="${COUCHDB_USER_NAME:-}" # normal user name
|
||
|
root_user_name="${COUCHDB_ROOT_USER_NAME:-}" # root user name
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# passwords [password/random]
|
||
|
user_pass="${COUCHDB_USER_PASS_WORD:-}" # normal user password
|
||
|
root_user_pass="${COUCHDB_ROOT_PASS_WORD:-}" # root user password
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Overwrite variables from files
|
||
|
[ -f "${USER_FILE_PREFIX}/${SERVICE_NAME}_name" ] && user_name="$(<"${USER_FILE_PREFIX}/${SERVICE_NAME}_name")"
|
||
|
[ -f "${USER_FILE_PREFIX}/${SERVICE_NAME}_pass" ] && user_pass="$(<"${USER_FILE_PREFIX}/${SERVICE_NAME}_pass")"
|
||
|
[ -f "${ROOT_FILE_PREFIX}/${SERVICE_NAME}_name" ] && root_user_name="$(<"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_name")"
|
||
|
[ -f "${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass" ] && root_user_pass="$(<"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass")"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Specifiy custom directories to be created
|
||
|
ADD_APPLICATION_FILES=""
|
||
|
ADD_APPLICATION_DIRS=""
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
APPLICATION_FILES="$LOG_DIR/couchdb.log"
|
||
|
APPLICATION_DIRS="$RUN_DIR $ETC_DIR $CONF_DIR $LOG_DIR"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# use this function to update config files - IE: change port
|
||
|
__update_conf_files() {
|
||
|
local exitCode=0 # default exit code
|
||
|
local user="${SERVICE_USER:-root}" # specifiy different user
|
||
|
|
||
|
# delete files
|
||
|
[ -e "/opt/couchdb/data" ] && rm -rf "/opt/couchdb/data"
|
||
|
|
||
|
# define actions
|
||
|
|
||
|
# create default directories
|
||
|
for filedirs in $ADD_APPLICATION_DIRS $APPLICATION_DIRS; do
|
||
|
if [ -n "$filedirs" ] && [ ! -d "$filedirs" ]; then
|
||
|
(
|
||
|
echo "Creating directory $filedirs with permissions 777"
|
||
|
mkdir -p "$filedirs" && chmod -Rf 777 "$filedirs"
|
||
|
) |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
fi
|
||
|
done
|
||
|
# create default files
|
||
|
for application_files in $ADD_APPLICATION_FILES $APPLICATION_FILES; do
|
||
|
if [ -n "$application_files" ] && [ ! -e "$application_files" ]; then
|
||
|
(
|
||
|
echo "Creating file $application_files with permissions 777"
|
||
|
touch "$application_files" && chmod -Rf 777 "$application_files"
|
||
|
) |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
fi
|
||
|
done
|
||
|
# create directories if variable is yes"
|
||
|
[ "$IS_WEB_SERVER" = "yes" ] && APPLICATION_DIRS="$APPLICATION_DIRS $WWW_DIR" && { [ -d "$WWW_DIR" ] || { (echo "Creating directory $WWW_DIR with permissions 777" && mkdir -p "$WWW_DIR" && chmod -f 777 "$WWW_DIR") |& tee -a "$LOG_DIR/init.txt" &>/dev/null; }; }
|
||
|
[ "$IS_DATABASE_SERVICE" = "yes" ] && APPLICATION_DIRS="$APPLICATION_DIRS $DATABASE_DIR" && { [ -d "$DATABASE_DIR" ] || { (echo "Creating directory $DATABASE_DIR with permissions 777" && mkdir -p "$DATABASE_DIR" && chmod -f 777 "$DATABASE_DIR") |& tee -a "$LOG_DIR/init.txt" &>/dev/null; }; }
|
||
|
# copy config files to system
|
||
|
__file_copy "$CONF_DIR/." "$ETC_DIR/" |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
# replace variables
|
||
|
__replace "REPLACE_DATABASE_DIR" "$DATABASE_DIR" "$ETC_DIR/default.ini"
|
||
|
# custom commands
|
||
|
touch "$ETC_DIR/local.d/docker.ini" 2>/dev/null
|
||
|
ln -sf "$DATABASE_DIR" "/opt/couchdb/data" 2>/dev/null
|
||
|
|
||
|
# other
|
||
|
|
||
|
# unset unneeded variables
|
||
|
unset application_files filedirs
|
||
|
|
||
|
return $exitCode
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# function to run before executing
|
||
|
__pre_execute() {
|
||
|
local exitCode=0 # default exit code
|
||
|
local user="${SERVICE_USER:-root}" # specifiy different user
|
||
|
# define commands
|
||
|
|
||
|
# execute if directories is empty
|
||
|
#__is_dir_empty "" &&
|
||
|
|
||
|
# create user if needed
|
||
|
# __create_service_user "$user" "/home/$user" "${USER_GID:-${USER_UID:-1000}"
|
||
|
# set user on files/folders
|
||
|
if [ -n "$user" ] && [ "$user" != "root" ]; then
|
||
|
if grep -s -q "$user:" "/etc/passwd"; then
|
||
|
for permissions in $ADD_APPLICATION_DIRS $APPLICATION_DIRS; do
|
||
|
if [ -n "$permissions" ] && [ -e "$permissions" ]; then
|
||
|
(chown -Rf $user:$user "$permissions" && echo "changed ownership on $permissions to $user") |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
fi
|
||
|
done
|
||
|
fi
|
||
|
fi
|
||
|
|
||
|
# unset unneeded variables
|
||
|
unset filesperms filename
|
||
|
return $exitCode
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# function to run after executing
|
||
|
__post_execute() {
|
||
|
local exitCode=0 # default exit code
|
||
|
local user="${SERVICE_USER:-root}" # specifiy different user
|
||
|
local user_name="${user_name:-$root_user_name}" # set user name
|
||
|
local user_pass="${user_pass:-$root_user_pass}" # set user pass
|
||
|
sleep 60 # how long to wait before executing
|
||
|
echo "Running post commands" # message
|
||
|
# execute commands
|
||
|
if ! __curl "http://$COUCHDB_SERVER:$SERVICE_PORT/_users" | grep -q 'db_name":"_users'; then
|
||
|
echo "Creating the _users databases"
|
||
|
if __curl_database "_users" | grep -qE '200|"ok":true'; then
|
||
|
echo "Created database _users"
|
||
|
else
|
||
|
echo "Failed to create database _users" >&2
|
||
|
fi
|
||
|
sleep 1
|
||
|
fi
|
||
|
if ! __curl "http://$COUCHDB_SERVER:$SERVICE_PORT/_replicator" | grep -q 'db_name":"_replicator'; then
|
||
|
echo "Creating the _replicator databases"
|
||
|
if __curl_database "_replicator" | grep -qE '200|"ok":true'; then
|
||
|
echo "Created database _replicator"
|
||
|
else
|
||
|
echo "Failed to create database _replicator" >&2
|
||
|
fi
|
||
|
sleep 1
|
||
|
fi
|
||
|
if ! __curl "http://$COUCHDB_SERVER:$SERVICE_PORT/_global_changes" | grep -q 'db_name":"_global_changes'; then
|
||
|
echo "Creating the _global_changes databases"
|
||
|
if __curl_database "_global_changes" | grep -qE '200|"ok":true'; then
|
||
|
echo "Created database _global_changes"
|
||
|
else
|
||
|
echo "Failed to create database _global_changes" >&2
|
||
|
fi
|
||
|
sleep 1
|
||
|
fi
|
||
|
if [ -n "$user_name" ] && [ -n "$user_pass" ]; then
|
||
|
echo "Creating new user $username"
|
||
|
if __curl_users "$user_name" "$user_pass"; then
|
||
|
echo "Created user: $user_name"
|
||
|
else
|
||
|
echo "Failed to create user: $user_name" >&2
|
||
|
fi
|
||
|
fi
|
||
|
if [ -n "$CREATE_DATABASE" ]; then
|
||
|
echo "Creating database: $CREATE_DATABASE"
|
||
|
__curl_database "$CREATE_DATABASE" || echo "Failed to create database: $CREATE_DATABASE" >&2
|
||
|
fi
|
||
|
echo ""
|
||
|
return $exitCode
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# use this function to update config files - IE: change port
|
||
|
__pre_message() {
|
||
|
local exitCode=0
|
||
|
[ -n "$user_name" ] && echo "username: $user_name" && echo "$user_name" >"${USER_FILE_PREFIX}/${SERVICE_NAME}_name"
|
||
|
[ -n "$user_pass" ] && echo "password: saved to ${USER_FILE_PREFIX}/${SERVICE_NAME}_pass" && echo "$user_pass" >"${USER_FILE_PREFIX}/${SERVICE_NAME}_pass"
|
||
|
[ -n "$root_user_name" ] && echo "root username: $root_user_name" && echo "$root_user_name" >"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_name"
|
||
|
[ -n "$root_user_pass" ] && echo "root password: saved to ${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass" && echo "$root_user_pass" >"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass"
|
||
|
|
||
|
return $exitCode
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# use this function to setup ssl support
|
||
|
__update_ssl_conf() {
|
||
|
local exitCode=0
|
||
|
|
||
|
return $exitCode
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
__create_env() {
|
||
|
cat <<EOF | tee "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" &>/dev/null
|
||
|
# ENV_WORKDIR="${ENV_WORKDIR:-$WORKDIR}" # change to directory
|
||
|
# ENV_WWW_DIR="${ENV_WWW_DIR:-$WWW_DIR}" # set default web dir
|
||
|
# ENV_ETC_DIR="${ENV_ETC_DIR:-$ETC_DIR}" # set default etc dir
|
||
|
# ENV_DATA_DIR="${ENV_DATA_DIR:-$DATA_DIR}" # set default data dir
|
||
|
# ENV_CONF_DIR="${ENV_CONF_DIR:-$CONF_DIR}" # set default config dir
|
||
|
# ENV_DATABASE_DIR="${ENV_DATABASE_DIR:-$DATABASE_DIR}" # set database dir
|
||
|
# ENV_SERVICE_USER="${ENV_SERVICE_USER:-$SERVICE_USER}" # execute command as another user
|
||
|
# ENV_SERVICE_UID="${ENV_SERVICE_UID:-$SERVICE_UID}" # set the user id
|
||
|
# ENV_SERVICE_PORT="${ENV_SERVICE_PORT:-$SERVICE_PORT}" # port which service is listening on
|
||
|
# EXEC_CMD_BIN="${ENV_EXEC_CMD_BIN:-$EXEC_CMD_BIN}" # command to execute
|
||
|
# EXEC_CMD_ARGS="${ENV_EXEC_CMD_ARGS:-$EXEC_CMD_ARGS}" # command arguments
|
||
|
# EXEC_CMD_NAME="$(basename "$EXEC_CMD_BIN")" # set the binary name
|
||
|
# ENV_USER_NAME="${user_name:-$ENV_USER_NAME}" #
|
||
|
# ENV_USER_PASS="${user_pass:-$ENV_USER_PASS}" #
|
||
|
# ENV_ROOT_USER_NAME="${root_user_name:-$ENV_ROOT_USER_NAME}" #
|
||
|
# ENV_ROOT_USER_PASS="${root_user_pass:-$ENV_ROOT_USER_PASS}" #
|
||
|
|
||
|
EOF
|
||
|
[ -f "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" ] || return 1
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# script to start server
|
||
|
__run_start_script() {
|
||
|
local user="${SERVICE_USER:-root}"
|
||
|
local workdir="${WORKDIR:-$WORK_DIR}"
|
||
|
local cmd="$EXEC_CMD_BIN $EXEC_CMD_ARGS"
|
||
|
local lc_type="${LC_ALL:-${LC_CTYPE:-$LANG}}"
|
||
|
local home="${workdir//\/root/\/tmp\/docker}"
|
||
|
local path="/usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin"
|
||
|
if [ -z "$EXEC_CMD_BIN" ]; then
|
||
|
__post_execute 2>"/dev/stderr" |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
echo "Initializing $SCRIPT_NAME has completed"
|
||
|
else
|
||
|
# ensure the command exists
|
||
|
if [ ! -x "$EXEC_CMD_BIN" ]; then
|
||
|
echo "$EXEC_CMD_NAME is not a valid executable"
|
||
|
exit 2
|
||
|
fi
|
||
|
# set working directories
|
||
|
[ -z "$home" ] && home="${workdir:-/tmp/docker}"
|
||
|
[ "$home" = "/root" ] && home="/tmp/docker"
|
||
|
[ "$home" = "$workdir" ] && workdir=""
|
||
|
# create needed directories
|
||
|
[ -n "$home" ] && { [ -d "$home" ] || mkdir -p "$home"; }
|
||
|
[ -n "$workdir" ] && { [ -d "$workdir" ] || mkdir -p "$workdir" || workdir="/tmp"; }
|
||
|
[ -n "$workdir" ] && __cd "$workdir" || { [ -n "$home" ] && __cd "$home"; } || __cd "/tmp"
|
||
|
[ "$user" != "root " ] && [ -d "$home" ] && chmod -f 777 "$home"
|
||
|
[ "$user" != "root " ] && [ -d "$workdir" ] && chmod -f 777 "$workdir"
|
||
|
# check and exit if already running
|
||
|
if __proc_check "$EXEC_CMD_NAME" || __proc_check "$EXEC_CMD_BIN"; then
|
||
|
echo "$EXEC_CMD_NAME is already running" >&2
|
||
|
exit 0
|
||
|
else
|
||
|
echo "Starting service: $EXEC_CMD_NAME $EXEC_CMD_ARGS"
|
||
|
su_cmd touch "$SERVICE_PID_FILE"
|
||
|
__post_execute 2>"/dev/stderr" 2>&1 |& tee -a "$LOG_DIR/init.txt" &>/dev/null &
|
||
|
if [ -n "$NODENAME" ] && ! grep "couchdb@" /opt/couchdb/etc/vm.args; then
|
||
|
echo "-name couchdb@$NODENAME" >>/opt/couchdb/etc/vm.args
|
||
|
fi
|
||
|
if [ -n "$root_user_name" ] && [ -n "$root_user_pass" ]; then
|
||
|
if ! grep -Pzoqr "\[admins\]\n$root_user_name =" /opt/couchdb/etc/local.d/*.ini /opt/couchdb/etc/local.ini; then
|
||
|
printf "\n[admins]\n%s = %s\n" "$root_user_name" "$root_user_pass" >>/opt/couchdb/etc/local.d/docker.ini
|
||
|
fi
|
||
|
fi
|
||
|
if [ -n "$COUCHDB_SECRET" ]; then
|
||
|
if ! grep -Pzoqr "\[chttpd_auth\]\nsecret =" /opt/couchdb/etc/local.d/*.ini /opt/couchdb/etc/local.ini; then
|
||
|
printf "\n[chttpd_auth]\nsecret = %s\n" "$COUCHDB_SECRET" >>/opt/couchdb/etc/local.d/docker.ini
|
||
|
fi
|
||
|
fi
|
||
|
if [ -n "$COUCHDB_ERLANG_COOKIE" ]; then
|
||
|
cookieFile='/opt/couchdb/.erlang.cookie'
|
||
|
if [ -e "$cookieFile" ]; then
|
||
|
if [ "$(cat "$cookieFile" 2>/dev/null)" != "$COUCHDB_ERLANG_COOKIE" ]; then
|
||
|
echo >&2
|
||
|
echo >&2 "warning: $cookieFile contents do not match COUCHDB_ERLANG_COOKIE"
|
||
|
echo >&2
|
||
|
fi
|
||
|
else
|
||
|
echo "$COUCHDB_ERLANG_COOKIE" >"$cookieFile"
|
||
|
fi
|
||
|
chmod 600 "$cookieFile"
|
||
|
fi
|
||
|
if [ "$(id -u)" = '0' ]; then
|
||
|
find /opt/couchdb \! \( -user couchdb -group couchdb \) -exec chown -f $SERVICE_USER:$SERVICE_USER '{}' +
|
||
|
find /opt/couchdb/data -type d ! -perm 0755 -exec chmod -f 0755 '{}' +
|
||
|
find /opt/couchdb/data -type f ! -perm 0644 -exec chmod -f 0644 '{}' +
|
||
|
find /opt/couchdb/etc -type d ! -perm 0755 -exec chmod -f 0755 '{}' +
|
||
|
find /opt/couchdb/etc -type f ! -perm 0644 -exec chmod -f 0644 '{}' +
|
||
|
fi
|
||
|
su_cmd env -i HOME="$home" LC_CTYPE="$lc_type" PATH="$path" USER="$user" sh -c "$cmd" || return 10
|
||
|
fi
|
||
|
fi
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# username and password actions
|
||
|
__run_secure_function() {
|
||
|
if [ -n "$user_name" ] || [ -n "$user_pass" ]; then
|
||
|
for filesperms in "${USER_FILE_PREFIX}"/*; do
|
||
|
if [ -e "$filesperms" ]; then
|
||
|
chmod -Rf 600 "$filesperms"
|
||
|
chown -Rf root:root "$filesperms"
|
||
|
fi
|
||
|
done |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
fi
|
||
|
if [ -n "$root_user_name" ] || [ -n "$root_user_pass" ]; then
|
||
|
for filesperms in "${ROOT_FILE_PREFIX}"/*; do
|
||
|
if [ -e "$filesperms" ]; then
|
||
|
chmod -Rf 600 "$filesperms"
|
||
|
chown -Rf root:root "$filesperms"
|
||
|
fi
|
||
|
done |& tee -a "$LOG_DIR/init.txt" &>/dev/null
|
||
|
fi
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# simple cd function
|
||
|
__cd() { mkdir -p "$1" && builtin cd "$1" || exit 1; }
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# process check functions
|
||
|
__pcheck() { [ -n "$(type -P pgrep 2>/dev/null)" ] && pgrep -x "$1" &>/dev/null && return 0 || return 10; }
|
||
|
__pgrep() { __pcheck "${1:-$EXEC_CMD_BIN}" || __ps aux 2>/dev/null | grep -Fw " ${1:-$EXEC_CMD_BIN}" | grep -qv ' grep' | grep '^' && return 0 || return 10; }
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# check if process is already running
|
||
|
__proc_check() {
|
||
|
cmd_bin="$(type -P "${1:-$EXEC_CMD_BIN}")"
|
||
|
cmd_name="$(basename "${cmd_bin:-$EXEC_CMD_NAME}")"
|
||
|
if __pgrep "$cmd_bin" || __pgrep "$cmd_name"; then
|
||
|
SERVICE_IS_RUNNING="true"
|
||
|
touch "$SERVICE_PID_FILE"
|
||
|
echo "$cmd_name is already running"
|
||
|
return 0
|
||
|
else
|
||
|
return 1
|
||
|
fi
|
||
|
}
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Allow ENV_ variable - Import env file
|
||
|
[ -f "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" ] && . "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
SERVICE_EXIT_CODE=0 # default exit code
|
||
|
WORKDIR="${ENV_WORKDIR:-$WORKDIR}" # change to directory
|
||
|
WWW_DIR="${ENV_WWW_DIR:-$WWW_DIR}" # set default web dir
|
||
|
ETC_DIR="${ENV_ETC_DIR:-$ETC_DIR}" # set default etc dir
|
||
|
DATA_DIR="${ENV_DATA_DIR:-$DATA_DIR}" # set default data dir
|
||
|
CONF_DIR="${ENV_CONF_DIR:-$CONF_DIR}" # set default config dir
|
||
|
DATABASE_DIR="${ENV_DATABASE_DIR:-$DATABASE_DIR}" # set database dir
|
||
|
SERVICE_USER="${ENV_SERVICE_USER:-$SERVICE_USER}" # execute command as another user
|
||
|
SERVICE_UID="${ENV_SERVICE_UID:-$SERVICE_UID}" # set the user id
|
||
|
SERVICE_PORT="${ENV_SERVICE_PORT:-$SERVICE_PORT}" # port which service is listening on
|
||
|
PRE_EXEC_MESSAGE="${ENV_PRE_EXEC_MESSAGE:-$PRE_EXEC_MESSAGE}" # Show message before execute
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# application specific
|
||
|
EXEC_CMD_BIN="${ENV_EXEC_CMD_BIN:-$EXEC_CMD_BIN}" # command to execute
|
||
|
EXEC_CMD_BIN="$(type -P "$EXEC_CMD_BIN" || echo "$EXEC_CMD_BIN")" # set full path
|
||
|
EXEC_CMD_NAME="$(basename "$EXEC_CMD_BIN")" # set the binary name
|
||
|
SERVICE_PID_FILE="/run/init.d/$EXEC_CMD_NAME.pid" # set the pid file location
|
||
|
EXEC_CMD_ARGS="${ENV_EXEC_CMD_ARGS:-$EXEC_CMD_ARGS}" # command arguments
|
||
|
SERVICE_PID_NUMBER="$(__pgrep)" # check if running
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# create auth directories
|
||
|
[ -n "$USER_FILE_PREFIX" ] && { [ -d "$USER_FILE_PREFIX" ] || mkdir -p "$USER_FILE_PREFIX"; }
|
||
|
[ -n "$ROOT_FILE_PREFIX" ] && { [ -d "$ROOT_FILE_PREFIX" ] || mkdir -p "$ROOT_FILE_PREFIX"; }
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Allow per init script usernames and passwords
|
||
|
[ -f "$ETC_DIR/auth/user/name" ] && user_name="$(<"$ETC_DIR/auth/user/name")"
|
||
|
[ -f "$ETC_DIR/auth/user/pass" ] && user_pass="$(<"$ETC_DIR/auth/user/pass")"
|
||
|
[ -f "$ETC_DIR/auth/root/name" ] && root_user_name="$(<"$ETC_DIR/auth/root/name")"
|
||
|
[ -f "$ETC_DIR/auth/root/pass" ] && root_user_pass="$(<"$ETC_DIR/auth/root/pass")"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Allow setting initial users and passwords via environment
|
||
|
user_name="${user_name:-$ENV_USER_NAME}"
|
||
|
user_pass="${user_pass:-$ENV_USER_PASS}"
|
||
|
root_user_name="${root_user_name:-$ENV_ROOT_USER_NAME}"
|
||
|
root_user_pass="${root_user_pass:-$ENV_ROOT_USER_PASS}"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# set password to random if variable is random
|
||
|
if [ "$user_pass" = "random" ]; then
|
||
|
user_pass="$(__random_password)"
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
if [ "$root_user_pass" = "random" ]; then
|
||
|
root_user_pass="$(__random_password)"
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Allow variables via imports - Overwrite existing
|
||
|
[ -f "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" ] && . "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Only run check
|
||
|
if [ "$1" = "check" ]; then
|
||
|
__proc_check "$EXEC_CMD_NAME" || __proc_check "$EXEC_CMD_BIN"
|
||
|
exit $?
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# show message if env exists
|
||
|
if [ -n "$EXEC_CMD_BIN" ]; then
|
||
|
[ -n "$SERVICE_USER" ] && echo "Setting up service to run as $SERVICE_USER" || SERVICE_USER="root"
|
||
|
[ -n "$SERVICE_PORT" ] && echo "${EXEC_CMD_NAME:-$EXEC_CMD_BIN} will be running on $SERVICE_PORT" || SERVICE_PORT=""
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# set switch user command
|
||
|
if [ "$SERVICE_USER" = "root" ] || [ -z "$SERVICE_USER" ]; then
|
||
|
su_cmd() { eval "$*" || return 1; }
|
||
|
elif [ "$(builtin type -P gosu)" ]; then
|
||
|
su_cmd() { gosu $SERVICE_USER "$@" || return 1; }
|
||
|
elif [ "$(builtin type -P runuser)" ]; then
|
||
|
su_cmd() { runuser -u $SERVICE_USER "$@" || return 1; }
|
||
|
elif [ "$(builtin type -P sudo)" ]; then
|
||
|
su_cmd() { sudo -u $SERVICE_USER "$@" || return 1; }
|
||
|
elif [ "$(builtin type -P su)" ]; then
|
||
|
su_cmd() { su -s /bin/sh - $SERVICE_USER -c "$@" || return 1; }
|
||
|
else
|
||
|
echo "Can not switch to $SERVICE_USER: attempting to run as root"
|
||
|
su_cmd() { eval "$*" || return 1; }
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Change to working directory
|
||
|
[ -n "$WORKDIR" ] && [ -n "$EXEC_CMD_BIN" ] && __cd "$WORKDIR" && echo "Changed to $PWD"
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# show init message
|
||
|
__pre_message
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Initialize ssl
|
||
|
__update_ssl_conf
|
||
|
__update_ssl_certs
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# Updating config files
|
||
|
__create_env
|
||
|
__update_conf_files
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
# run the pre execute commands
|
||
|
[ -n "$PRE_EXEC_MESSAGE" ] && echo "$PRE_EXEC_MESSAGE"
|
||
|
__pre_execute
|
||
|
__run_secure_function
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
__run_start_script "$@" |& tee -a "/data/logs/entrypoint.log" &>/dev/null
|
||
|
if [ "$?" -ne 0 ] && [ -n "$EXEC_CMD_BIN" ]; then
|
||
|
echo "Failed to execute: $EXEC_CMD_BIN $EXEC_CMD_ARGS" |& tee -a "/data/logs/entrypoint.log" "$LOG_DIR/init.txt"
|
||
|
SERVICE_EXIT_CODE=10
|
||
|
SERVICE_IS_RUNNING="false"
|
||
|
rm -Rf "$SERVICE_PID_FILE"
|
||
|
fi
|
||
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||
|
exit $SERVICE_EXIT_CODE
|