| 1 | #!/bin/bash |
|---|
| 2 | |
|---|
| 3 | ##################################################################### |
|---|
| 4 | ####### Script instalador OpenGnsys |
|---|
| 5 | ####### Autor: Luis Guillén <lguillen@unizar.es> |
|---|
| 6 | ##################################################################### |
|---|
| 7 | |
|---|
| 8 | |
|---|
| 9 | ##################################################################### |
|---|
| 10 | ####### Funciones de configuración |
|---|
| 11 | ##################################################################### |
|---|
| 12 | |
|---|
| 13 | MY_BRANCH=$1 |
|---|
| 14 | |
|---|
| 15 | # Devuelve en la variable PASSWORD la clave introducida por el usuario (o la indicada por defecto) |
|---|
| 16 | function enterPassword () |
|---|
| 17 | { |
|---|
| 18 | local PASSWORD2 |
|---|
| 19 | local DEFAULT_PASSWORD="$1" |
|---|
| 20 | |
|---|
| 21 | while : ; do |
|---|
| 22 | stty -echo |
|---|
| 23 | read -r PASSWORD |
|---|
| 24 | stty echo |
|---|
| 25 | if [ -z "$PASSWORD" ]; then |
|---|
| 26 | # Si esta vacio ponemos el valor por defecto |
|---|
| 27 | PASSWORD="${PASSWORD:-$DEFAULT_PASSWORD}" |
|---|
| 28 | break |
|---|
| 29 | else |
|---|
| 30 | if [ -n "${PASSWORD//[a-zA-Z0-9]/}" ]; then # Comprobamos que sea un valor alfanumerico |
|---|
| 31 | echo -e "\\aERROR: Password must be alphanumeric, try again..." |
|---|
| 32 | else |
|---|
| 33 | echo -n -e "\\nConfirm password: " |
|---|
| 34 | stty -echo |
|---|
| 35 | read -r PASSWORD2 |
|---|
| 36 | stty echo |
|---|
| 37 | if [ "$PASSWORD" == "$PASSWORD2" ]; then |
|---|
| 38 | break |
|---|
| 39 | else |
|---|
| 40 | echo -e "\\aERROR: Passwords don't match, try again." |
|---|
| 41 | fi |
|---|
| 42 | fi |
|---|
| 43 | fi |
|---|
| 44 | echo -n -e "Please, enter a new password (${DEFAULT_PASSWORD}): " |
|---|
| 45 | done |
|---|
| 46 | } |
|---|
| 47 | |
|---|
| 48 | # Recoge los datos de configuración introducidos por el usuario. |
|---|
| 49 | function userData () |
|---|
| 50 | { |
|---|
| 51 | #### AVISO: Puede editar configuración de acceso por defecto. |
|---|
| 52 | #### WARNING: Edit default access configuration if you wish. |
|---|
| 53 | DEFAULT_MYSQL_ROOT_PASSWORD="passwordroot" # Clave por defecto root de MySQL |
|---|
| 54 | DEFAULT_OPENGNSYS_DB_USER="usuog" # Usuario por defecto de acceso a la base de datos |
|---|
| 55 | DEFAULT_OPENGNSYS_DB_PASSWD="passusuog" # Clave por defecto de acceso a la base de datos |
|---|
| 56 | DEFAULT_OPENGNSYS_CLIENT_PASSWD="og" # Clave por defecto de acceso del cliente |
|---|
| 57 | DEFAULT_OGLIVE="${DEFAULT_OGLIVE:-"ogLive-noble-6.8.0-31-generic-amd64-r20241127.1985c44_20241127.iso}" # Cliente ogLive |
|---|
| 58 | DEFAULT_UDS_REST_URL="${DEFAULT_UDS_REST_URL:-https://uds.example.com/uds/rest/}" |
|---|
| 59 | DEFAULT_UDS_AUTHENTICATOR="${DEFAULT_UDS_AUTHENTICATOR:-Local users}" |
|---|
| 60 | DEFAULT_UDS_USER="${DEFAULT_UDS_USER:-user}" |
|---|
| 61 | DEFAULT_UDS_PASS="${DEFAULT_UDS_PASS:-pass}" |
|---|
| 62 | |
|---|
| 63 | echo -e "\\nOpenGnsys Installation" |
|---|
| 64 | echo "==============================" |
|---|
| 65 | |
|---|
| 66 | if [[ ! $- =~ s ]]; then |
|---|
| 67 | echo -e "\\nNot interactive mode: setting default configuration values.\\n" |
|---|
| 68 | MYSQL_ROOT_PASSWORD="$DEFAULT_MYSQL_ROOT_PASSWORD" |
|---|
| 69 | OPENGNSYS_DB_USER="$DEFAULT_OPENGNSYS_DB_USER" |
|---|
| 70 | OPENGNSYS_DB_PASSWD="$DEFAULT_OPENGNSYS_DB_PASSWD" |
|---|
| 71 | OPENGNSYS_CLIENT_PASSWD="$DEFAULT_OPENGNSYS_CLIENT_PASSWD" |
|---|
| 72 | OGLIVE="$DEFAULT_OGLIVE" |
|---|
| 73 | UDS_REST_URL="$DEFAULT_UDS_REST_URL" |
|---|
| 74 | UDS_AUTHENTICATOR="$DEFAULT_UDS_AUTHENTICATOR" |
|---|
| 75 | UDS_USER="$DEFAULT_UDS_USER" |
|---|
| 76 | UDS_PASS="$DEFAULT_UDS_PASS" |
|---|
| 77 | UDS_REST_URL="$DEFAULT_UDS_REST_URL" |
|---|
| 78 | UDS_AUTHENTICATOR="$DEFAULT_UDS_AUTHENTICATOR" |
|---|
| 79 | UDS_USER="$DEFAULT_UDS_USER" |
|---|
| 80 | UDS_PASS="$DEFAULT_UDS_PASS" |
|---|
| 81 | return |
|---|
| 82 | fi |
|---|
| 83 | |
|---|
| 84 | # Clave root de MySQL |
|---|
| 85 | echo -n -e "\\nEnter root password for MySQL (${DEFAULT_MYSQL_ROOT_PASSWORD}): " |
|---|
| 86 | enterPassword "$DEFAULT_MYSQL_ROOT_PASSWORD" |
|---|
| 87 | MYSQL_ROOT_PASSWORD="$PASSWORD" |
|---|
| 88 | |
|---|
| 89 | # Usuario de acceso a la base de datos |
|---|
| 90 | while : ; do |
|---|
| 91 | echo -n -e "\\n\\nEnter username for OpenGnsys console (${DEFAULT_OPENGNSYS_DB_USER}): " |
|---|
| 92 | read -r OPENGNSYS_DB_USER |
|---|
| 93 | if [ -n "${OPENGNSYS_DB_USER//[a-zA-Z0-9]/}" ]; then # Comprobamos que sea un valor alfanumerico |
|---|
| 94 | echo -e "\\aERROR: Must be alphanumeric, try again..." |
|---|
| 95 | else |
|---|
| 96 | # Si esta vacio ponemos el valor por defecto |
|---|
| 97 | OPENGNSYS_DB_USER="${OPENGNSYS_DB_USER:-$DEFAULT_OPENGNSYS_DB_USER}" |
|---|
| 98 | break |
|---|
| 99 | fi |
|---|
| 100 | done |
|---|
| 101 | |
|---|
| 102 | # Clave de acceso a la base de datos |
|---|
| 103 | echo -n -e "\\nEnter password for OpenGnsys console (${DEFAULT_OPENGNSYS_DB_PASSWD}): " |
|---|
| 104 | enterPassword "$DEFAULT_OPENGNSYS_DB_PASSWD" |
|---|
| 105 | OPENGNSYS_DB_PASSWD="$PASSWORD" |
|---|
| 106 | |
|---|
| 107 | # Clave de acceso del cliente |
|---|
| 108 | echo -n -e "\\n\\nEnter root password for OpenGnsys client (${DEFAULT_OPENGNSYS_CLIENT_PASSWD}): " |
|---|
| 109 | enterPassword "$DEFAULT_OPENGNSYS_CLIENT_PASSWD" |
|---|
| 110 | OPENGNSYS_CLIENT_PASSWD="$PASSWORD" |
|---|
| 111 | |
|---|
| 112 | # Selección de clientes ogLive para descargar. |
|---|
| 113 | while : ; do |
|---|
| 114 | echo -e "\\n\\nChoose ogLive client to install." |
|---|
| 115 | echo -e "1) Kernel 5.11, 64-bit, EFI-compatible" |
|---|
| 116 | echo -e "2) Kernel 3.2, 32-bit" |
|---|
| 117 | echo -e "3) Both" |
|---|
| 118 | echo -n -e "Please, type a valid number (1): " |
|---|
| 119 | read -r OPT |
|---|
| 120 | case "$OPT" in |
|---|
| 121 | 1|"") OGLIVE="$DEFAULT_OGLIVE" |
|---|
| 122 | break ;; |
|---|
| 123 | 2) OGLIVE="ogLive-precise-3.2.0-23-generic-r5159.iso" |
|---|
| 124 | break ;; |
|---|
| 125 | 3) OGLIVE=" $DEFAULT_OGLIVE ogLive-precise-3.2.0-23-generic-r5159.iso"; |
|---|
| 126 | break ;; |
|---|
| 127 | *) echo -e "\\aERROR: unknown option, try again." |
|---|
| 128 | esac |
|---|
| 129 | done |
|---|
| 130 | |
|---|
| 131 | # URL de API REST de UDS |
|---|
| 132 | echo -n -e "\\nEnter UDS REST API URL (${DEFAULT_UDS_REST_URL}): " |
|---|
| 133 | read -r -ei "${DEFAULT_UDS_REST_URL}" UDS_REST_URL |
|---|
| 134 | |
|---|
| 135 | # Autenticador de UDS |
|---|
| 136 | echo -n -e "\\nEnter UDS authenticator (${DEFAULT_UDS_AUTHENTICATOR}): " |
|---|
| 137 | enterPassword "$DEFAULT_UDS_AUTHENTICATOR" |
|---|
| 138 | UDS_AUTHENTICATOR="$PASSWORD" |
|---|
| 139 | |
|---|
| 140 | # Usuario de UDS |
|---|
| 141 | echo -n -e "\\nEnter UDS username (${DEFAULT_UDS_USER}): " |
|---|
| 142 | read -r -ei "${DEFAULT_UDS_USER}" UDS_USER |
|---|
| 143 | |
|---|
| 144 | # Contraseña de UDS |
|---|
| 145 | echo -n -e "\\nEnter UDS password (${DEFAULT_UDS_PASS}): " |
|---|
| 146 | enterPassword "$DEFAULT_UDS_PASS" |
|---|
| 147 | UDS_PASS="$PASSWORD" |
|---|
| 148 | |
|---|
| 149 | unset PASSWORD |
|---|
| 150 | echo -e "\\n==============================" |
|---|
| 151 | } |
|---|
| 152 | |
|---|
| 153 | # Asigna valores globales de configuración para el script. |
|---|
| 154 | function globalSetup () |
|---|
| 155 | { |
|---|
| 156 | PROGRAMDIR=$(readlink -e "$(dirname "$0")") |
|---|
| 157 | PROGRAMNAME=$(basename "$0") |
|---|
| 158 | |
|---|
| 159 | # Comprobar si se ha descargado el paquete comprimido (REMOTE=0) o sólo el instalador (REMOTE=1). |
|---|
| 160 | OPENGNSYS_SERVER="ognproject.evlt.uma.es" |
|---|
| 161 | DOWNLOADURL="https://$OPENGNSYS_SERVER/trac/downloads" |
|---|
| 162 | if [ -d "$PROGRAMDIR/../installer" ]; then |
|---|
| 163 | echo REMOTE=0 |
|---|
| 164 | REMOTE=0 |
|---|
| 165 | else |
|---|
| 166 | echo REMOTE=1 |
|---|
| 167 | REMOTE=1 |
|---|
| 168 | fi |
|---|
| 169 | BRANCH=$1 |
|---|
| 170 | if [[ -z $BRANCH ]]; then |
|---|
| 171 | BRANCH="main" |
|---|
| 172 | fi |
|---|
| 173 | API_URL="https://api.github.com/repos/opengnsys/OpenGnsys" |
|---|
| 174 | GIT_REPO="https://ognproject.evlt.uma.es/gitea/opengnsys/opengnsys.git" |
|---|
| 175 | |
|---|
| 176 | # Directorios de instalación y destino de OpenGnsys. |
|---|
| 177 | WORKDIR=/tmp/opengnsys_installer |
|---|
| 178 | INSTALL_TARGET=/opt/opengnsys |
|---|
| 179 | PATH=$PATH:$INSTALL_TARGET/bin |
|---|
| 180 | |
|---|
| 181 | # Registro de incidencias. |
|---|
| 182 | OGLOGFILE=$INSTALL_TARGET/log/${PROGRAMNAME%.sh}.log |
|---|
| 183 | LOG_FILE=/tmp/$(basename $OGLOGFILE) |
|---|
| 184 | |
|---|
| 185 | # Usuario del cliente para acceso remoto. |
|---|
| 186 | OPENGNSYS_CLIENT_USER="opengnsys" |
|---|
| 187 | # Nombre de la base datos y fichero SQL para su creación. |
|---|
| 188 | OPENGNSYS_DATABASE="ogAdmBD" |
|---|
| 189 | OPENGNSYS_DB_CREATION_FILE=opengnsys/admin/Database/${OPENGNSYS_DATABASE}.sql |
|---|
| 190 | |
|---|
| 191 | # Set Default net |
|---|
| 192 | DHCPNET=${DHCPNET:-"NONE"} |
|---|
| 193 | echo Default Network is $DHCPNET |
|---|
| 194 | } |
|---|
| 195 | |
|---|
| 196 | # Generar variables de configuración del instalador |
|---|
| 197 | # Variables globales: |
|---|
| 198 | # - OSDISTRIB, OSVERSION - tipo y versión de la distribución GNU/Linux |
|---|
| 199 | # - DEPENDENCIES - array de dependencias que deben estar instaladas |
|---|
| 200 | # - UPDATEPKGLIST, INSTALLPKGS, CHECKPKGS - comandos para gestión de paquetes |
|---|
| 201 | # - INSTALLEXTRADEPS - instalar dependencias no incluidas en la distribución |
|---|
| 202 | # - STARTSERVICE, ENABLESERVICE - iniciar y habilitar un servicio |
|---|
| 203 | # - STOPSERVICE, DISABLESERVICE - parar y deshabilitar un servicio |
|---|
| 204 | # - APACHESERV, APACHECFGDIR, APACHESITESDIR, APACHEUSER, APACHEGROUP - servicio y configuración de Apache |
|---|
| 205 | # - APACHEENABLEMODS, APACHEENABLESSL, APACHEMAKECERT - habilitar módulos y certificado SSL |
|---|
| 206 | # - APACHEENABLEOG, APACHEOGSITE, - habilitar sitio web de OpenGnsys |
|---|
| 207 | # - PHPFPMSERV - servicio PHP FastCGI Process Manager para Apache |
|---|
| 208 | # - INETDSERV - servicio Inetd |
|---|
| 209 | # - DHCPSERV, DHCPCFGDIR - servicio y configuración de DHCP |
|---|
| 210 | # - MYSQLSERV, TMPMYCNF - servicio MySQL y fichero temporal con credenciales de acceso |
|---|
| 211 | # - MARIADBSERV - servicio MariaDB (sustituto de MySQL en algunas distribuciones) |
|---|
| 212 | # - RSYNCSERV, RSYNCCFGDIR - servicio y configuración de Rsync |
|---|
| 213 | # - SAMBASERV, SAMBACFGDIR - servicio y configuración de Samba |
|---|
| 214 | # - TFTPSERV, TFTPCFGDIR - servicio y configuración de TFTP/PXE |
|---|
| 215 | function autoConfigure() |
|---|
| 216 | { |
|---|
| 217 | # Detectar sistema operativo del servidor (compatible con fichero os-release y con LSB). |
|---|
| 218 | if [ -f /etc/os-release ]; then |
|---|
| 219 | source /etc/os-release |
|---|
| 220 | OSDISTRIB="$ID" |
|---|
| 221 | OSVERSION="$VERSION_ID" |
|---|
| 222 | else |
|---|
| 223 | OSDISTRIB=$(lsb_release -is 2>/dev/null) |
|---|
| 224 | OSVERSION=$(lsb_release -rs 2>/dev/null) |
|---|
| 225 | fi |
|---|
| 226 | # Convertir distribución a minúsculas y obtener solo el 1er número de versión. |
|---|
| 227 | OSDISTRIB="${OSDISTRIB,,}" |
|---|
| 228 | OSVERSION="${OSVERSION%%.*}" |
|---|
| 229 | |
|---|
| 230 | # Configuración según la distribución GNU/Linux (usar minúsculas). |
|---|
| 231 | case "$OSDISTRIB" in |
|---|
| 232 | ubuntu|debian|linuxmint) |
|---|
| 233 | DEPENDENCIES=( subversion apache2 php php-ldap php-fpm mariadb-server php-mysql isc-dhcp-server bittorrent tftp-hpa tftpd-hpa xinetd build-essential g++-multilib libmysqlclient-dev wget curl doxygen graphviz bittornado ctorrent samba rsync unzip netpipes debootstrap schroot squashfs-tools btrfs-tools procps arp-scan realpath php-curl gettext moreutils jq wakeonlan udpcast libev-dev libjansson-dev libssl-dev shim-signed grub-efi-amd64-signed gawk libdbi-dev libdbi1 libdbd-mysql liblz4-tool git stunnel4 ) |
|---|
| 234 | UPDATEPKGLIST="apt-get update" |
|---|
| 235 | INSTALLPKG="apt-get -y install --force-yes" |
|---|
| 236 | CHECKPKG="dpkg -s \$package 2>/dev/null | grep Status | grep -qw install" |
|---|
| 237 | if which service &>/dev/null; then |
|---|
| 238 | STARTSERVICE="eval service \$service restart" |
|---|
| 239 | STOPSERVICE="eval service \$service stop" |
|---|
| 240 | else |
|---|
| 241 | STARTSERVICE="eval /etc/init.d/\$service restart" |
|---|
| 242 | STOPSERVICE="eval /etc/init.d/\$service stop" |
|---|
| 243 | fi |
|---|
| 244 | ENABLESERVICE="eval update-rc.d \$service defaults" |
|---|
| 245 | DISABLESERVICE="eval update-rc.d \$service disable" |
|---|
| 246 | APACHESERV=apache2 |
|---|
| 247 | APACHECFGDIR=/etc/apache2 |
|---|
| 248 | APACHESITESDIR=sites-available |
|---|
| 249 | APACHEOGSITE=opengnsys |
|---|
| 250 | APACHEUSER="www-data" |
|---|
| 251 | APACHEGROUP="www-data" |
|---|
| 252 | APACHEENABLEMODS="a2enmod ssl rewrite proxy_fcgi fastcgi actions alias" |
|---|
| 253 | APACHEENABLESSL="a2ensite default-ssl" |
|---|
| 254 | APACHEENABLEOG="a2ensite $APACHEOGSITE" |
|---|
| 255 | APACHEMAKECERT="make-ssl-cert generate-default-snakeoil --force-overwrite" |
|---|
| 256 | DHCPSERV=isc-dhcp-server |
|---|
| 257 | DHCPCFGDIR=/etc/dhcp |
|---|
| 258 | INETDSERV=xinetd |
|---|
| 259 | INETDCFGDIR=/etc/xinetd.d |
|---|
| 260 | MYSQLSERV=mysql |
|---|
| 261 | MYSQLCFGDIR=/etc/mysql/mysql.conf.d |
|---|
| 262 | MARIADBSERV=mariadb |
|---|
| 263 | PHPFPMSERV=php-fpm |
|---|
| 264 | RSYNCSERV=rsync |
|---|
| 265 | RSYNCCFGDIR=/etc |
|---|
| 266 | SAMBASERV=smbd |
|---|
| 267 | SAMBACFGDIR=/etc/samba |
|---|
| 268 | TFTPCFGDIR=/var/lib/tftpboot |
|---|
| 269 | LOCAL_CERTS_DIR=/usr/local/share/ca-certificates |
|---|
| 270 | UPDATE_CA_CMD=update-ca-certificates |
|---|
| 271 | STUNNEL_CAPATH=/etc/ssl/certs |
|---|
| 272 | ;; |
|---|
| 273 | fedora|centos) |
|---|
| 274 | DEPENDENCIES=( subversion httpd mod_ssl php-ldap php-fpm mariadb-server mysql-devel mysql-devel.i686 php-mysql dhcp tftp-server tftp xinetd binutils gcc gcc-c++ glibc-devel glibc-devel.i686 glibc-static glibc-static.i686 libstdc++-devel.i686 make wget curl doxygen graphviz ctorrent samba samba-client rsync unzip debootstrap schroot squashfs-tools python-crypto arp-scan procps-ng gettext moreutils jq net-tools udpcast libev-devel jansson-devel openssl-devel shim-x64 grub2-efi-x64 grub2-efi-x64-modules gawk libdbi-devel libdbi libdbi-dbd-mysql http://ftp.altlinux.org/pub/distributions/ALTLinux/5.1/branch/$(arch)/RPMS.classic/netpipes-4.2-alt1.$(arch).rpm ) |
|---|
| 275 | [ "$OSDISTRIB" == "centos" ] && UPDATEPKGLIST="yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-$OSVERSION.noarch.rpm http://rpms.remirepo.net/enterprise/remi-release-$OSVERSION.rpm" |
|---|
| 276 | INSTALLEXTRADEPS=( 'pushd /tmp; wget -t3 http://ftp.acc.umu.se/mirror/bittornado/BitTornado-0.3.18.tar.gz && tar xvzf BitTornado-0.3.18.tar.gz && cd BitTornado-CVS && python setup.py install && ln -fs btlaunchmany.py /usr/bin/btlaunchmany && ln -fs bttrack.py /usr/bin/bttrack; popd' ) |
|---|
| 277 | INSTALLPKG="yum install -y libstdc++ libstdc++.i686" |
|---|
| 278 | CHECKPKG="rpm -q --quiet \$package" |
|---|
| 279 | SYSTEMD=$(which systemctl 2>/dev/null) |
|---|
| 280 | if [ -n "$SYSTEMD" ]; then |
|---|
| 281 | STARTSERVICE="eval systemctl start \$service.service" |
|---|
| 282 | STOPSERVICE="eval systemctl stop \$service.service" |
|---|
| 283 | ENABLESERVICE="eval systemctl enable \$service.service" |
|---|
| 284 | DISABLESERVICE="eval systemctl disable \$service.service" |
|---|
| 285 | else |
|---|
| 286 | STARTSERVICE="eval service \$service start" |
|---|
| 287 | STOPSERVICE="eval service \$service stop" |
|---|
| 288 | ENABLESERVICE="eval chkconfig \$service on" |
|---|
| 289 | DISABLESERVICE="eval chkconfig \$service off" |
|---|
| 290 | fi |
|---|
| 291 | APACHESERV=httpd |
|---|
| 292 | APACHECFGDIR=/etc/httpd/conf.d |
|---|
| 293 | APACHEOGSITE=opengnsys.conf |
|---|
| 294 | APACHEUSER="apache" |
|---|
| 295 | APACHEGROUP="apache" |
|---|
| 296 | APACHEREWRITEMOD="sed -i '/rewrite/s/^#//' $APACHECFGDIR/../*.conf" |
|---|
| 297 | DHCPSERV=dhcpd |
|---|
| 298 | DHCPCFGDIR=/etc/dhcp |
|---|
| 299 | INETDSERV=xinetd |
|---|
| 300 | INETDCFGDIR=/etc/xinetd.d |
|---|
| 301 | MYSQLSERV=mysqld |
|---|
| 302 | MYSQLCFGDIR=/etc/my.cnf.d |
|---|
| 303 | MARIADBSERV=mariadb |
|---|
| 304 | PHPFPMSERV=php-fpm |
|---|
| 305 | RSYNCSERV=rsync |
|---|
| 306 | RSYNCCFGDIR=/etc |
|---|
| 307 | SAMBASERV=smb |
|---|
| 308 | SAMBACFGDIR=/etc/samba |
|---|
| 309 | TFTPSERV=tftp |
|---|
| 310 | TFTPCFGDIR=/var/lib/tftpboot |
|---|
| 311 | LOCAL_CERTS_DIR=/etc/pki/ca-trust/source/anchors |
|---|
| 312 | UPDATE_CA_CMD=update-ca-trust |
|---|
| 313 | STUNNEL_CAPATH=/etc/pki/tls/certs |
|---|
| 314 | ;; |
|---|
| 315 | "") echo "ERROR: Unknown Linux distribution, please install \"lsb_release\" command." |
|---|
| 316 | exit 1 ;; |
|---|
| 317 | *) echo "ERROR: Distribution not supported by OpenGnsys." |
|---|
| 318 | exit 1 ;; |
|---|
| 319 | esac |
|---|
| 320 | |
|---|
| 321 | # Fichero de credenciales de acceso a MySQL. |
|---|
| 322 | TMPMYCNF=/tmp/.my.cnf.$$ |
|---|
| 323 | } |
|---|
| 324 | |
|---|
| 325 | |
|---|
| 326 | # Modificar variables de configuración tras instalar paquetes del sistema. |
|---|
| 327 | function autoConfigurePost() |
|---|
| 328 | { |
|---|
| 329 | local f MKNETDIR |
|---|
| 330 | |
|---|
| 331 | # Configuraciones específicas para Samba y TFTP en Debian 6. |
|---|
| 332 | [ -z "$SYSTEMD" -a ! -e /etc/init.d/$SAMBASERV ] && SAMBASERV=samba |
|---|
| 333 | [ ! -e $TFTPCFGDIR ] && TFTPCFGDIR=/srv/tftp |
|---|
| 334 | |
|---|
| 335 | # Preparar arranque en red con Grub. |
|---|
| 336 | for f in grub-mknetdir grub2-mknetdir; do |
|---|
| 337 | if which $f &>/dev/null; then MKNETDIR=$f; fi |
|---|
| 338 | done |
|---|
| 339 | $MKNETDIR --net-directory=$TFTPCFGDIR --subdir=grub |
|---|
| 340 | } |
|---|
| 341 | |
|---|
| 342 | |
|---|
| 343 | # Cargar lista de paquetes del sistema y actualizar algunas variables de configuración |
|---|
| 344 | # dependiendo de la versión instalada. |
|---|
| 345 | function updatePackageList() |
|---|
| 346 | { |
|---|
| 347 | local DHCPVERSION PHP7VERSION |
|---|
| 348 | |
|---|
| 349 | # Si es necesario, actualizar la lista de paquetes disponibles. |
|---|
| 350 | [ -n "$UPDATEPKGLIST" ] && eval $UPDATEPKGLIST |
|---|
| 351 | |
|---|
| 352 | # Configuración personallizada de algunos paquetes. |
|---|
| 353 | case "$OSDISTRIB" in |
|---|
| 354 | ubuntu|linuxmint) # Postconfiguación personalizada para Ubuntu. |
|---|
| 355 | # Configuración para DHCP v3. |
|---|
| 356 | DHCPVERSION=$(apt-cache show $(apt-cache pkgnames|egrep "dhcp.?-server$") | \ |
|---|
| 357 | awk '/Version/ {print substr($2,1,1);}' | \ |
|---|
| 358 | sort -n | tail -1) |
|---|
| 359 | if [ $DHCPVERSION = 3 ]; then |
|---|
| 360 | DEPENDENCIES=( ${DEPENDENCIES[@]/isc-dhcp-server/dhcp3-server} ) |
|---|
| 361 | DHCPSERV=dhcp3-server |
|---|
| 362 | DHCPCFGDIR=/etc/dhcp3 |
|---|
| 363 | fi |
|---|
| 364 | # Configuración para PHP 7 en Ubuntu. |
|---|
| 365 | if [ -z "$(apt-cache pkgnames php7)" ]; then |
|---|
| 366 | eval $INSTALLPKG software-properties-common |
|---|
| 367 | add-apt-repository -y ppa:ondrej/php |
|---|
| 368 | eval $UPDATEPKGLIST |
|---|
| 369 | PHP7VERSION=$(apt-cache pkgnames php7 | sort | head -1) |
|---|
| 370 | PHPFPMSERV="${PHP7VERSION}-fpm" |
|---|
| 371 | DEPENDENCIES=( ${DEPENDENCIES[@]//php/$PHP7VERSION} ) |
|---|
| 372 | fi |
|---|
| 373 | # Adaptar dependencias para libmysqlclient. |
|---|
| 374 | [ -z "$(apt-cache pkgnames libmysqlclient-dev)" ] && [ -n "$(apt-cache pkgnames libmysqlclient15)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//libmysqlclient-dev/libmysqlclient15} ) |
|---|
| 375 | # Paquetes correctos en versiones nuevas. |
|---|
| 376 | [ -z "$(apt-cache pkgnames realpath)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//realpath/coreutils} ) |
|---|
| 377 | [ -z "$(apt-cache pkgnames btrfs-tools)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//btrfs-tools/btrfs-progs} ) |
|---|
| 378 | [ -z "$(apt-cache pkgnames bittorrent)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//bittorrent/} ) |
|---|
| 379 | [ -z "$(apt-cache pkgnames bittornado)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//bittornado/} ) |
|---|
| 380 | ;; |
|---|
| 381 | centos) # Postconfiguación personalizada para CentOS. |
|---|
| 382 | # Configuración para PHP 7. |
|---|
| 383 | PHP7VERSION=$(yum list -q php7\* 2>/dev/null | awk -F. '/^php/ {print $1; exit;}') |
|---|
| 384 | PHPFPMSERV="${PHP7VERSION}-${PHPFPMSERV}" |
|---|
| 385 | DEPENDENCIES=( ${PHP7VERSION} ${DEPENDENCIES[@]//php/$PHP7VERSION-php} ) |
|---|
| 386 | # Cambios a aplicar a partir de CentOS 7. |
|---|
| 387 | if [ $OSVERSION -ge 7 ]; then |
|---|
| 388 | # Sustituir MySQL por MariaDB. |
|---|
| 389 | DEPENDENCIES=( ${DEPENDENCIES[*]/mysql-/mariadb-} ) |
|---|
| 390 | # Instalar ctorrent de EPEL para CentOS 6 (no disponible en CentOS 7). |
|---|
| 391 | DEPENDENCIES=( ${DEPENDENCIES[*]/ctorrent/http://dl.fedoraproject.org/pub/epel/6/$(arch)/Packages/c/ctorrent-1.3.4-14.dnh3.3.2.el6.$(arch).rpm} ) |
|---|
| 392 | fi |
|---|
| 393 | ;; |
|---|
| 394 | fedora) # Postconfiguación personalizada para Fedora. |
|---|
| 395 | # Incluir paquetes específicos. |
|---|
| 396 | DEPENDENCIES=( ${DEPENDENCIES[@]} btrfs-progs ) |
|---|
| 397 | # Sustituir MySQL por MariaDB a partir de Fedora 20. |
|---|
| 398 | [ $OSVERSION -ge 20 ] && DEPENDENCIES=( ${DEPENDENCIES[*]/mysql-/mariadb-} ) |
|---|
| 399 | ;; |
|---|
| 400 | esac |
|---|
| 401 | } |
|---|
| 402 | |
|---|
| 403 | |
|---|
| 404 | ##################################################################### |
|---|
| 405 | ####### Algunas funciones útiles de propósito general: |
|---|
| 406 | ##################################################################### |
|---|
| 407 | |
|---|
| 408 | function getDateTime() |
|---|
| 409 | { |
|---|
| 410 | date "+%Y%m%d-%H%M%S" |
|---|
| 411 | } |
|---|
| 412 | |
|---|
| 413 | # Escribe a fichero y muestra por pantalla |
|---|
| 414 | function echoAndLog() |
|---|
| 415 | { |
|---|
| 416 | local DATETIME=`getDateTime` |
|---|
| 417 | echo "$1" |
|---|
| 418 | echo "$DATETIME;$SSH_CLIENT;$1" >> $LOG_FILE |
|---|
| 419 | } |
|---|
| 420 | |
|---|
| 421 | # Escribe a fichero y muestra mensaje de error |
|---|
| 422 | function errorAndLog() |
|---|
| 423 | { |
|---|
| 424 | local DATETIME=`getDateTime` |
|---|
| 425 | echo "ERROR: $1" |
|---|
| 426 | echo "$DATETIME;$SSH_CLIENT;ERROR: $1" >> $LOG_FILE |
|---|
| 427 | } |
|---|
| 428 | |
|---|
| 429 | # Escribe a fichero y muestra mensaje de aviso |
|---|
| 430 | function warningAndLog() |
|---|
| 431 | { |
|---|
| 432 | local DATETIME=`getDateTime` |
|---|
| 433 | echo "Warning: $1" |
|---|
| 434 | echo "$DATETIME;$SSH_CLIENT;Warning: $1" >> $LOG_FILE |
|---|
| 435 | } |
|---|
| 436 | |
|---|
| 437 | # Comprueba si el elemento pasado en $2 está en el array $1 |
|---|
| 438 | function isInArray() |
|---|
| 439 | { |
|---|
| 440 | if [ $# -ne 2 ]; then |
|---|
| 441 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 442 | exit 1 |
|---|
| 443 | fi |
|---|
| 444 | |
|---|
| 445 | local deps |
|---|
| 446 | local is_in_array=1 |
|---|
| 447 | local element="$2" |
|---|
| 448 | |
|---|
| 449 | echoAndLog "${FUNCNAME}(): checking if $2 is in $1" |
|---|
| 450 | eval "deps=( \"\${$1[@]}\" )" |
|---|
| 451 | |
|---|
| 452 | # Copia local del array del parámetro 1. |
|---|
| 453 | for (( i = 0 ; i < ${#deps[@]} ; i++ )); do |
|---|
| 454 | if [ "${deps[$i]}" = "${element}" ]; then |
|---|
| 455 | echoAndLog "isInArray(): $element found in array" |
|---|
| 456 | is_in_array=0 |
|---|
| 457 | fi |
|---|
| 458 | done |
|---|
| 459 | |
|---|
| 460 | if [ $is_in_array -ne 0 ]; then |
|---|
| 461 | echoAndLog "${FUNCNAME}(): $element NOT found in array" |
|---|
| 462 | fi |
|---|
| 463 | |
|---|
| 464 | return $is_in_array |
|---|
| 465 | } |
|---|
| 466 | |
|---|
| 467 | |
|---|
| 468 | ##################################################################### |
|---|
| 469 | ####### Funciones de manejo de paquetes Debian |
|---|
| 470 | ##################################################################### |
|---|
| 471 | |
|---|
| 472 | function checkPackage() |
|---|
| 473 | { |
|---|
| 474 | package=$1 |
|---|
| 475 | if [ -z $package ]; then |
|---|
| 476 | errorAndLog "${FUNCNAME}(): parameter required" |
|---|
| 477 | exit 1 |
|---|
| 478 | fi |
|---|
| 479 | echoAndLog "${FUNCNAME}(): checking if package $package exists" |
|---|
| 480 | eval $CHECKPKG |
|---|
| 481 | if [ $? -eq 0 ]; then |
|---|
| 482 | echoAndLog "${FUNCNAME}(): package $package exists" |
|---|
| 483 | return 0 |
|---|
| 484 | else |
|---|
| 485 | echoAndLog "${FUNCNAME}(): package $package doesn't exists" |
|---|
| 486 | return 1 |
|---|
| 487 | fi |
|---|
| 488 | } |
|---|
| 489 | |
|---|
| 490 | # Recibe array con dependencias |
|---|
| 491 | # por referencia deja un array con las dependencias no resueltas |
|---|
| 492 | # devuelve 1 si hay alguna dependencia no resuelta |
|---|
| 493 | function checkDependencies() |
|---|
| 494 | { |
|---|
| 495 | if [ $# -ne 2 ]; then |
|---|
| 496 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 497 | exit 1 |
|---|
| 498 | fi |
|---|
| 499 | |
|---|
| 500 | echoAndLog "${FUNCNAME}(): checking dependences" |
|---|
| 501 | uncompletedeps=0 |
|---|
| 502 | |
|---|
| 503 | # copia local del array del parametro 1 |
|---|
| 504 | local deps |
|---|
| 505 | eval "deps=( \"\${$1[@]}\" )" |
|---|
| 506 | |
|---|
| 507 | declare -a local_notinstalled |
|---|
| 508 | |
|---|
| 509 | for (( i = 0 ; i < ${#deps[@]} ; i++ )) |
|---|
| 510 | do |
|---|
| 511 | checkPackage ${deps[$i]} |
|---|
| 512 | if [ $? -ne 0 ]; then |
|---|
| 513 | local_notinstalled[$uncompletedeps]=$package |
|---|
| 514 | let uncompletedeps=uncompletedeps+1 |
|---|
| 515 | fi |
|---|
| 516 | done |
|---|
| 517 | |
|---|
| 518 | # relleno el array especificado en $2 por referencia |
|---|
| 519 | for (( i = 0 ; i < ${#local_notinstalled[@]} ; i++ )) |
|---|
| 520 | do |
|---|
| 521 | eval "${2}[$i]=${local_notinstalled[$i]}" |
|---|
| 522 | done |
|---|
| 523 | |
|---|
| 524 | # retorna el numero de paquetes no resueltos |
|---|
| 525 | echoAndLog "${FUNCNAME}(): dependencies uncompleted: $uncompletedeps" |
|---|
| 526 | return $uncompletedeps |
|---|
| 527 | } |
|---|
| 528 | |
|---|
| 529 | # Recibe un array con las dependencias y lo instala |
|---|
| 530 | function installDependencies() |
|---|
| 531 | { |
|---|
| 532 | if [ $# -ne 1 ]; then |
|---|
| 533 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 534 | exit 1 |
|---|
| 535 | fi |
|---|
| 536 | echoAndLog "${FUNCNAME}(): installing uncompleted dependencies" |
|---|
| 537 | |
|---|
| 538 | # copia local del array del parametro 1 |
|---|
| 539 | local deps |
|---|
| 540 | eval "deps=( \"\${$1[@]}\" )" |
|---|
| 541 | |
|---|
| 542 | local string_deps="" |
|---|
| 543 | for (( i = 0 ; i < ${#deps[@]} ; i++ )) |
|---|
| 544 | do |
|---|
| 545 | string_deps="$string_deps ${deps[$i]}" |
|---|
| 546 | done |
|---|
| 547 | |
|---|
| 548 | if [ -z "${string_deps}" ]; then |
|---|
| 549 | errorAndLog "${FUNCNAME}(): array of dependeces is empty" |
|---|
| 550 | exit 1 |
|---|
| 551 | fi |
|---|
| 552 | |
|---|
| 553 | OLD_DEBIAN_FRONTEND=$DEBIAN_FRONTEND # Debian/Ubuntu |
|---|
| 554 | export DEBIAN_FRONTEND=noninteractive |
|---|
| 555 | |
|---|
| 556 | echoAndLog "${FUNCNAME}(): now $string_deps will be installed" |
|---|
| 557 | eval $INSTALLPKG $string_deps |
|---|
| 558 | if [ $? -ne 0 ]; then |
|---|
| 559 | errorAndLog "${FUNCNAME}(): error installing dependencies" |
|---|
| 560 | return 1 |
|---|
| 561 | fi |
|---|
| 562 | |
|---|
| 563 | DEBIAN_FRONTEND=$OLD_DEBIAN_FRONTEND # Debian/Ubuntu |
|---|
| 564 | test grep -q "EPEL temporal" /etc/yum.repos.d/epel.repo 2>/dev/null || mv -f /etc/yum.repos.d/epel.repo.rpmnew /etc/yum.repos.d/epel.repo 2>/dev/null # CentOS/RedHat EPEL |
|---|
| 565 | |
|---|
| 566 | echoAndLog "${FUNCNAME}(): dependencies installed" |
|---|
| 567 | } |
|---|
| 568 | |
|---|
| 569 | # Hace un backup del fichero pasado por parámetro |
|---|
| 570 | # deja un -last y uno para el día |
|---|
| 571 | function backupFile() |
|---|
| 572 | { |
|---|
| 573 | if [ $# -ne 1 ]; then |
|---|
| 574 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 575 | exit 1 |
|---|
| 576 | fi |
|---|
| 577 | |
|---|
| 578 | local file="$1" |
|---|
| 579 | local dateymd=`date +%Y%m%d` |
|---|
| 580 | |
|---|
| 581 | if [ ! -f "$file" ]; then |
|---|
| 582 | warningAndLog "${FUNCNAME}(): file $file doesn't exists" |
|---|
| 583 | return 1 |
|---|
| 584 | fi |
|---|
| 585 | |
|---|
| 586 | echoAndLog "${FUNCNAME}(): making $file backup" |
|---|
| 587 | |
|---|
| 588 | # realiza una copia de la última configuración como last |
|---|
| 589 | cp -a "$file" "${file}-LAST" |
|---|
| 590 | |
|---|
| 591 | # si para el día no hay backup lo hace, sino no |
|---|
| 592 | if [ ! -f "${file}-${dateymd}" ]; then |
|---|
| 593 | cp -a "$file" "${file}-${dateymd}" |
|---|
| 594 | fi |
|---|
| 595 | |
|---|
| 596 | echoAndLog "${FUNCNAME}(): $file backup success" |
|---|
| 597 | } |
|---|
| 598 | |
|---|
| 599 | ##################################################################### |
|---|
| 600 | ####### Funciones para el manejo de bases de datos |
|---|
| 601 | ##################################################################### |
|---|
| 602 | |
|---|
| 603 | # This function set password to root |
|---|
| 604 | function mysqlSetRootPassword() |
|---|
| 605 | { |
|---|
| 606 | if [ $# -ne 1 ]; then |
|---|
| 607 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 608 | exit 1 |
|---|
| 609 | fi |
|---|
| 610 | |
|---|
| 611 | local root_mysql="$1" |
|---|
| 612 | echoAndLog "${FUNCNAME}(): setting root password in MySQL server" |
|---|
| 613 | mysqladmin -u root password "$root_mysql" |
|---|
| 614 | if [ $? -ne 0 ]; then |
|---|
| 615 | errorAndLog "${FUNCNAME}(): error while setting root password in MySQL server" |
|---|
| 616 | return 1 |
|---|
| 617 | fi |
|---|
| 618 | echoAndLog "${FUNCNAME}(): root password saved!" |
|---|
| 619 | return 0 |
|---|
| 620 | } |
|---|
| 621 | |
|---|
| 622 | # Si el servicio mysql esta ya instalado cambia la variable de la clave del root por la ya existente |
|---|
| 623 | function mysqlGetRootPassword() |
|---|
| 624 | { |
|---|
| 625 | local pass_mysql |
|---|
| 626 | local pass_mysql2 |
|---|
| 627 | # Comprobar si MySQL está instalado con la clave de root por defecto. |
|---|
| 628 | if mysql -u root -p"$MYSQL_ROOT_PASSWORD" <<<"quit" 2>/dev/null; then |
|---|
| 629 | echoAndLog "${FUNCNAME}(): Using default mysql root password." |
|---|
| 630 | else |
|---|
| 631 | stty -echo |
|---|
| 632 | echo "There is a MySQL service already installed." |
|---|
| 633 | read -p "Enter MySQL root password: " pass_mysql |
|---|
| 634 | echo "" |
|---|
| 635 | read -p "Confrim password:" pass_mysql2 |
|---|
| 636 | echo "" |
|---|
| 637 | stty echo |
|---|
| 638 | if [ "$pass_mysql" == "$pass_mysql2" ] ;then |
|---|
| 639 | MYSQL_ROOT_PASSWORD="$pass_mysql" |
|---|
| 640 | return 0 |
|---|
| 641 | else |
|---|
| 642 | echo "The keys don't match. Do not configure the server's key," |
|---|
| 643 | echo "transactions in the database will give error." |
|---|
| 644 | return 1 |
|---|
| 645 | fi |
|---|
| 646 | fi |
|---|
| 647 | } |
|---|
| 648 | |
|---|
| 649 | # comprueba si puede conectar con mysql con el usuario root |
|---|
| 650 | function mysqlTestConnection() |
|---|
| 651 | { |
|---|
| 652 | if [ $# -ne 1 ]; then |
|---|
| 653 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 654 | exit 1 |
|---|
| 655 | fi |
|---|
| 656 | |
|---|
| 657 | local root_password="$1" |
|---|
| 658 | echoAndLog "${FUNCNAME}(): checking connection to mysql..." |
|---|
| 659 | # Componer fichero con credenciales de conexión a MySQL. |
|---|
| 660 | touch $TMPMYCNF |
|---|
| 661 | chmod 600 $TMPMYCNF |
|---|
| 662 | cat << EOT > $TMPMYCNF |
|---|
| 663 | [client] |
|---|
| 664 | user=root |
|---|
| 665 | password=$root_password |
|---|
| 666 | EOT |
|---|
| 667 | # Borrar el fichero temporal si termina el proceso de instalación. |
|---|
| 668 | trap "rm -f $TMPMYCNF" 0 1 2 3 6 9 15 |
|---|
| 669 | # Comprobar conexión a MySQL. |
|---|
| 670 | echo "" | mysql --defaults-extra-file=$TMPMYCNF |
|---|
| 671 | if [ $? -ne 0 ]; then |
|---|
| 672 | errorAndLog "${FUNCNAME}(): connection to mysql failed, check root password and if daemon is running!" |
|---|
| 673 | return 1 |
|---|
| 674 | else |
|---|
| 675 | echoAndLog "${FUNCNAME}(): connection success" |
|---|
| 676 | return 0 |
|---|
| 677 | fi |
|---|
| 678 | } |
|---|
| 679 | |
|---|
| 680 | # comprueba si la base de datos existe |
|---|
| 681 | function mysqlDbExists() |
|---|
| 682 | { |
|---|
| 683 | if [ $# -ne 1 ]; then |
|---|
| 684 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 685 | exit 1 |
|---|
| 686 | fi |
|---|
| 687 | |
|---|
| 688 | local database="$1" |
|---|
| 689 | echoAndLog "${FUNCNAME}(): checking if $database exists..." |
|---|
| 690 | echo "show databases" | mysql --defaults-extra-file=$TMPMYCNF | grep "^${database}$" |
|---|
| 691 | if [ $? -ne 0 ]; then |
|---|
| 692 | echoAndLog "${FUNCNAME}():database $database doesn't exists" |
|---|
| 693 | return 1 |
|---|
| 694 | else |
|---|
| 695 | echoAndLog "${FUNCNAME}():database $database exists" |
|---|
| 696 | return 0 |
|---|
| 697 | fi |
|---|
| 698 | } |
|---|
| 699 | |
|---|
| 700 | # Comprueba si la base de datos está vacía. |
|---|
| 701 | function mysqlCheckDbIsEmpty() |
|---|
| 702 | { |
|---|
| 703 | if [ $# -ne 1 ]; then |
|---|
| 704 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 705 | exit 1 |
|---|
| 706 | fi |
|---|
| 707 | |
|---|
| 708 | local database="$1" |
|---|
| 709 | echoAndLog "${FUNCNAME}(): checking if $database is empty..." |
|---|
| 710 | num_tablas=`echo "show tables" | mysql --defaults-extra-file=$TMPMYCNF "${database}" | wc -l` |
|---|
| 711 | if [ $? -ne 0 ]; then |
|---|
| 712 | errorAndLog "${FUNCNAME}(): error executing query, check database and root password" |
|---|
| 713 | exit 1 |
|---|
| 714 | fi |
|---|
| 715 | |
|---|
| 716 | if [ $num_tablas -eq 0 ]; then |
|---|
| 717 | echoAndLog "${FUNCNAME}():database $database is empty" |
|---|
| 718 | return 0 |
|---|
| 719 | else |
|---|
| 720 | echoAndLog "${FUNCNAME}():database $database has tables" |
|---|
| 721 | return 1 |
|---|
| 722 | fi |
|---|
| 723 | |
|---|
| 724 | } |
|---|
| 725 | |
|---|
| 726 | # Importa un fichero SQL en la base de datos. |
|---|
| 727 | # Parámetros: |
|---|
| 728 | # - 1: nombre de la BD. |
|---|
| 729 | # - 2: fichero a importar. |
|---|
| 730 | # Nota: el fichero SQL puede contener las siguientes palabras reservadas: |
|---|
| 731 | # - SERVERIP: se sustituye por la dirección IP del servidor. |
|---|
| 732 | # - DBUSER: se sustituye por usuario de conexión a la BD definido en este script. |
|---|
| 733 | # - DBPASSWD: se sustituye por la clave de conexión a la BD definida en este script. |
|---|
| 734 | function mysqlImportSqlFileToDb() |
|---|
| 735 | { |
|---|
| 736 | if [ $# -ne 2 ]; then |
|---|
| 737 | errorAndLog "${FNCNAME}(): invalid number of parameters" |
|---|
| 738 | exit 1 |
|---|
| 739 | fi |
|---|
| 740 | |
|---|
| 741 | local database="$1" |
|---|
| 742 | local sqlfile="$2" |
|---|
| 743 | local tmpfile=$(mktemp) |
|---|
| 744 | local i=0 |
|---|
| 745 | local dev="" |
|---|
| 746 | local status |
|---|
| 747 | |
|---|
| 748 | if [ ! -f $sqlfile ]; then |
|---|
| 749 | errorAndLog "${FUNCNAME}(): Unable to locate $sqlfile!!" |
|---|
| 750 | return 1 |
|---|
| 751 | fi |
|---|
| 752 | |
|---|
| 753 | echoAndLog "${FUNCNAME}(): importing SQL file to ${database}..." |
|---|
| 754 | chmod 600 $tmpfile |
|---|
| 755 | for dev in ${DEVICE[*]}; do |
|---|
| 756 | if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then |
|---|
| 757 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 758 | -e "s/DBUSER/$OPENGNSYS_DB_USER/g" \ |
|---|
| 759 | -e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \ |
|---|
| 760 | $sqlfile > $tmpfile |
|---|
| 761 | fi |
|---|
| 762 | let i++ |
|---|
| 763 | done |
|---|
| 764 | mysql --defaults-extra-file=$TMPMYCNF --default-character-set=utf8 "${database}" < $tmpfile |
|---|
| 765 | status=$? |
|---|
| 766 | rm -f $tmpfile |
|---|
| 767 | if [ $status -ne 0 ]; then |
|---|
| 768 | errorAndLog "${FUNCNAME}(): error while importing $sqlfile in database $database" |
|---|
| 769 | return 1 |
|---|
| 770 | fi |
|---|
| 771 | echoAndLog "${FUNCNAME}(): file imported to database $database" |
|---|
| 772 | return 0 |
|---|
| 773 | } |
|---|
| 774 | |
|---|
| 775 | # Crea la base de datos |
|---|
| 776 | function mysqlCreateDb() |
|---|
| 777 | { |
|---|
| 778 | if [ $# -ne 1 ]; then |
|---|
| 779 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 780 | exit 1 |
|---|
| 781 | fi |
|---|
| 782 | |
|---|
| 783 | local database="$1" |
|---|
| 784 | |
|---|
| 785 | echoAndLog "${FUNCNAME}(): creating database..." |
|---|
| 786 | mysqladmin --defaults-extra-file=$TMPMYCNF create $database |
|---|
| 787 | if [ $? -ne 0 ]; then |
|---|
| 788 | errorAndLog "${FUNCNAME}(): error while creating database $database" |
|---|
| 789 | return 1 |
|---|
| 790 | fi |
|---|
| 791 | # Quitar modo ONLY_FULL_GROUP_BY de MySQL (ticket #730). |
|---|
| 792 | mysql --defaults-extra-file=$TMPMYCNF -e "SET GLOBAL sql_mode=(SELECT TRIM(BOTH ',' FROM REPLACE(@@sql_mode,'ONLY_FULL_GROUP_BY','')));" |
|---|
| 793 | |
|---|
| 794 | echoAndLog "${FUNCNAME}(): database $database created" |
|---|
| 795 | return 0 |
|---|
| 796 | } |
|---|
| 797 | |
|---|
| 798 | # Comprueba si ya está definido el usuario de acceso a la BD. |
|---|
| 799 | function mysqlCheckUserExists() |
|---|
| 800 | { |
|---|
| 801 | if [ $# -ne 1 ]; then |
|---|
| 802 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 803 | exit 1 |
|---|
| 804 | fi |
|---|
| 805 | |
|---|
| 806 | local userdb="$1" |
|---|
| 807 | |
|---|
| 808 | echoAndLog "${FUNCNAME}(): checking if $userdb exists..." |
|---|
| 809 | echo "select user from user where user='${userdb}'\\G" |mysql --defaults-extra-file=$TMPMYCNF mysql | grep user |
|---|
| 810 | if [ $? -ne 0 ]; then |
|---|
| 811 | echoAndLog "${FUNCNAME}(): user doesn't exists" |
|---|
| 812 | return 1 |
|---|
| 813 | else |
|---|
| 814 | echoAndLog "${FUNCNAME}(): user already exists" |
|---|
| 815 | return 0 |
|---|
| 816 | fi |
|---|
| 817 | |
|---|
| 818 | } |
|---|
| 819 | |
|---|
| 820 | # Crea un usuario administrativo para la base de datos |
|---|
| 821 | function mysqlCreateAdminUserToDb() |
|---|
| 822 | { |
|---|
| 823 | if [ $# -ne 3 ]; then |
|---|
| 824 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 825 | exit 1 |
|---|
| 826 | fi |
|---|
| 827 | |
|---|
| 828 | local database="$1" |
|---|
| 829 | local userdb="$2" |
|---|
| 830 | local passdb="$3" |
|---|
| 831 | |
|---|
| 832 | echoAndLog "${FUNCNAME}(): creating admin user ${userdb} to database ${database}" |
|---|
| 833 | |
|---|
| 834 | cat > $WORKDIR/create_${database}.sql <<EOF |
|---|
| 835 | CREATE USER '${userdb}'@'localhost' IDENTIFIED BY '${passdb}'; |
|---|
| 836 | GRANT USAGE ON *.* TO '${userdb}'@'localhost'; |
|---|
| 837 | GRANT ALL PRIVILEGES ON ${database}.* TO '${userdb}'@'localhost' WITH GRANT OPTION; |
|---|
| 838 | FLUSH PRIVILEGES; |
|---|
| 839 | EOF |
|---|
| 840 | mysql --defaults-extra-file=$TMPMYCNF < $WORKDIR/create_${database}.sql |
|---|
| 841 | if [ $? -ne 0 ]; then |
|---|
| 842 | errorAndLog "${FUNCNAME}(): error while creating user in mysql" |
|---|
| 843 | rm -f $WORKDIR/create_${database}.sql |
|---|
| 844 | return 1 |
|---|
| 845 | else |
|---|
| 846 | echoAndLog "${FUNCNAME}(): user created ok" |
|---|
| 847 | rm -f $WORKDIR/create_${database}.sql |
|---|
| 848 | return 0 |
|---|
| 849 | fi |
|---|
| 850 | } |
|---|
| 851 | |
|---|
| 852 | |
|---|
| 853 | ##################################################################### |
|---|
| 854 | ####### Funciones para la descarga de código |
|---|
| 855 | ##################################################################### |
|---|
| 856 | |
|---|
| 857 | # Obtiene el código fuente del proyecto desde el repositorio de GitHub. |
|---|
| 858 | function downloadCode() |
|---|
| 859 | { |
|---|
| 860 | if [ $# -ne 1 ]; then |
|---|
| 861 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 862 | exit 1 |
|---|
| 863 | fi |
|---|
| 864 | |
|---|
| 865 | local url="$1" |
|---|
| 866 | |
|---|
| 867 | echoAndLog "${FUNCNAME}(): downloading code from '$url'..." |
|---|
| 868 | |
|---|
| 869 | RETRIES=5 |
|---|
| 870 | DELAY=4 |
|---|
| 871 | COUNT=1 |
|---|
| 872 | while [ $COUNT -lt $RETRIES ]; do |
|---|
| 873 | GIT_SSL_NO_VERIFY=1 git clone $url |
|---|
| 874 | if [ $? -eq 0 ]; then |
|---|
| 875 | RETRIES=0 |
|---|
| 876 | break |
|---|
| 877 | fi |
|---|
| 878 | let COUNT=$COUNT+1 |
|---|
| 879 | sleep $DELAY |
|---|
| 880 | done |
|---|
| 881 | |
|---|
| 882 | if [ $? -ne 0 ]; then |
|---|
| 883 | errorAndLog "${FUNCNAME}(): error getting OpenGnsys code from $url" |
|---|
| 884 | return 1 |
|---|
| 885 | fi |
|---|
| 886 | rm -rf opengnsys/.git |
|---|
| 887 | echoAndLog "${FUNCNAME}(): code was downloaded" |
|---|
| 888 | return 0 |
|---|
| 889 | } |
|---|
| 890 | |
|---|
| 891 | |
|---|
| 892 | ############################################################ |
|---|
| 893 | ### Detectar red |
|---|
| 894 | ############################################################ |
|---|
| 895 | |
|---|
| 896 | # Convierte nº de bits (notación CIDR) en máscara de red (gracias a FriedZombie en openwrt.org). |
|---|
| 897 | cidr2mask () |
|---|
| 898 | { |
|---|
| 899 | # Number of args to shift, 255..255, first non-255 byte, zeroes |
|---|
| 900 | set -- $[ 5 - ($1 / 8) ] 255 255 255 255 $[ (255 << (8 - ($1 % 8))) & 255 ] 0 0 0 |
|---|
| 901 | [ $1 -gt 1 ] && shift $1 || shift |
|---|
| 902 | echo ${1-0}.${2-0}.${3-0}.${4-0} |
|---|
| 903 | } |
|---|
| 904 | |
|---|
| 905 | # Obtener los parámetros de red de la interfaz por defecto. |
|---|
| 906 | function getNetworkSettings() |
|---|
| 907 | { |
|---|
| 908 | # Arrays globales definidas: |
|---|
| 909 | # - DEVICE: nombres de dispositivos de red activos. |
|---|
| 910 | # - SERVERIP: IPs locales del servidor. |
|---|
| 911 | # - NETIP: IPs de redes. |
|---|
| 912 | # - NETMASK: máscaras de red. |
|---|
| 913 | # - NETBROAD: IPs de difusión de redes. |
|---|
| 914 | # - ROUTERIP: IPs de routers. |
|---|
| 915 | # Otras variables globales: |
|---|
| 916 | # - DEFAULTDEV: dispositivo de red por defecto. |
|---|
| 917 | # - DNSIP: IP del servidor DNS principal. |
|---|
| 918 | |
|---|
| 919 | local i=0 |
|---|
| 920 | local dev="" |
|---|
| 921 | |
|---|
| 922 | echoAndLog "${FUNCNAME}(): Detecting network parameters." |
|---|
| 923 | DEVICE=( $(ip -o link show up | awk '!/loopback/ {sub(/[:@].*/,"",$2); print $2}') ) |
|---|
| 924 | if [ -z "$DEVICE" ]; then |
|---|
| 925 | errorAndLog "${FUNCNAME}(): Network devices not detected." |
|---|
| 926 | exit 1 |
|---|
| 927 | fi |
|---|
| 928 | for dev in ${DEVICE[*]}; do |
|---|
| 929 | SERVERIP[i]=$(ip -o addr show dev "$dev" | awk '$3~/inet$/ {sub (/\/.*/, ""); print ($4); exit;}') |
|---|
| 930 | if [ -n "${SERVERIP[i]}" ]; then |
|---|
| 931 | NETMASK[i]=$( cidr2mask $(ip -o addr show dev "$dev" | awk '$3~/inet$/ {sub (/.*\//, "", $4); print ($4); exit;}') ) |
|---|
| 932 | NETBROAD[i]=$(ip -o addr show dev "$dev" | awk '$3~/inet$/ {print ($6); exit;}') |
|---|
| 933 | NETIP[i]=$(ip route list proto kernel | awk -v d="$dev" '$3==d && /src/ {sub (/\/.*/,""); print $1; exit;}') |
|---|
| 934 | ROUTERIP[i]=$(ip route list default | awk -v d="$dev" '$5==d {print $3; exit;}') |
|---|
| 935 | if [ $DHCPNET == ${NETIP[i]} ]; then |
|---|
| 936 | DEFAULTDEV="$dev" |
|---|
| 937 | else |
|---|
| 938 | DEFAULTDEV=${DEFAULTDEV:-"$dev"} |
|---|
| 939 | fi |
|---|
| 940 | fi |
|---|
| 941 | let i++ |
|---|
| 942 | done |
|---|
| 943 | DNSIP=$(systemd-resolve --status 2>/dev/null | awk '/DNS Servers:/ {print $3; exit;}') |
|---|
| 944 | [ -z "$DNSIP" ] && DNSIP=$(awk '/nameserver/ {print $2; exit;}' /etc/resolv.conf) |
|---|
| 945 | if [ -z "${NETIP[*]}" -o -z "${NETMASK[*]}" ]; then |
|---|
| 946 | errorAndLog "${FUNCNAME}(): Network not detected." |
|---|
| 947 | exit 1 |
|---|
| 948 | fi |
|---|
| 949 | |
|---|
| 950 | # Variables de ejecución de Apache |
|---|
| 951 | # - APACHE_RUN_USER |
|---|
| 952 | # - APACHE_RUN_GROUP |
|---|
| 953 | if [ -f $APACHECFGDIR/envvars ]; then |
|---|
| 954 | source $APACHECFGDIR/envvars |
|---|
| 955 | fi |
|---|
| 956 | APACHE_RUN_USER=${APACHE_RUN_USER:-"$APACHEUSER"} |
|---|
| 957 | APACHE_RUN_GROUP=${APACHE_RUN_GROUP:-"$APACHEGROUP"} |
|---|
| 958 | |
|---|
| 959 | echoAndLog "${FUNCNAME}(): Default network device: $DEFAULTDEV." |
|---|
| 960 | } |
|---|
| 961 | |
|---|
| 962 | |
|---|
| 963 | ############################################################ |
|---|
| 964 | ### Esqueleto para el Servicio pxe y contenedor tftpboot ### |
|---|
| 965 | ############################################################ |
|---|
| 966 | |
|---|
| 967 | function tftpConfigure() |
|---|
| 968 | { |
|---|
| 969 | echoAndLog "${FUNCNAME}(): Configuring TFTP service." |
|---|
| 970 | # Habilitar TFTP y reiniciar Inetd. |
|---|
| 971 | if [ -n "$TFTPSERV" ]; then |
|---|
| 972 | if [ -f $INETDCFGDIR/$TFTPSERV ]; then |
|---|
| 973 | perl -pi -e 's/disable.*/disable = no/' $INETDCFGDIR/$TFTPSERV |
|---|
| 974 | else |
|---|
| 975 | service=$TFTPSERV |
|---|
| 976 | $ENABLESERVICE; $STARTSERVICE |
|---|
| 977 | fi |
|---|
| 978 | fi |
|---|
| 979 | service=$INETDSERV |
|---|
| 980 | $ENABLESERVICE; $STARTSERVICE |
|---|
| 981 | |
|---|
| 982 | # comprobamos el servicio tftp |
|---|
| 983 | sleep 1 |
|---|
| 984 | testPxe |
|---|
| 985 | } |
|---|
| 986 | |
|---|
| 987 | # Comprueba que haya conexión al servicio TFTP/PXE. |
|---|
| 988 | function testPxe () |
|---|
| 989 | { |
|---|
| 990 | echoAndLog "${FUNCNAME}(): Checking TFTP service... please wait." |
|---|
| 991 | echo "test" >$TFTPCFGDIR/testpxe |
|---|
| 992 | tftp -v 127.0.0.1 -c get testpxe /tmp/testpxe && echoAndLog "TFTP service is OK." || errorAndLog "TFTP service is down." |
|---|
| 993 | rm -f $TFTPCFGDIR/testpxe /tmp/testpxe |
|---|
| 994 | } |
|---|
| 995 | |
|---|
| 996 | |
|---|
| 997 | ######################################################################## |
|---|
| 998 | ## Configuración servicio Samba |
|---|
| 999 | ######################################################################## |
|---|
| 1000 | |
|---|
| 1001 | # Configurar servicios Samba. |
|---|
| 1002 | function smbConfigure() |
|---|
| 1003 | { |
|---|
| 1004 | echoAndLog "${FUNCNAME}(): Configuring Samba service." |
|---|
| 1005 | |
|---|
| 1006 | backupFile $SAMBACFGDIR/smb.conf |
|---|
| 1007 | |
|---|
| 1008 | # Copiar plantailla de recursos para OpenGnsys |
|---|
| 1009 | sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \ |
|---|
| 1010 | $WORKDIR/opengnsys/server/etc/smb-og.conf.tmpl > $SAMBACFGDIR/smb-og.conf |
|---|
| 1011 | # Configurar y recargar Samba" |
|---|
| 1012 | perl -pi -e "s/WORKGROUP/OPENGNSYS/; s/server string \=.*/server string \= OpenGnsys Samba Server/" $SAMBACFGDIR/smb.conf |
|---|
| 1013 | if ! grep -q "smb-og" $SAMBACFGDIR/smb.conf; then |
|---|
| 1014 | echo "include = $SAMBACFGDIR/smb-og.conf" >> $SAMBACFGDIR/smb.conf |
|---|
| 1015 | fi |
|---|
| 1016 | service=$SAMBASERV |
|---|
| 1017 | $ENABLESERVICE; $STARTSERVICE |
|---|
| 1018 | if [ $? -ne 0 ]; then |
|---|
| 1019 | errorAndLog "${FUNCNAME}(): error while configure Samba" |
|---|
| 1020 | return 1 |
|---|
| 1021 | fi |
|---|
| 1022 | # Crear clave para usuario de acceso a los recursos. |
|---|
| 1023 | echo -ne "$OPENGNSYS_CLIENT_PASSWD\n$OPENGNSYS_CLIENT_PASSWD\n" | smbpasswd -a -s $OPENGNSYS_CLIENT_USER |
|---|
| 1024 | |
|---|
| 1025 | echoAndLog "${FUNCNAME}(): Added Samba configuration." |
|---|
| 1026 | return 0 |
|---|
| 1027 | } |
|---|
| 1028 | |
|---|
| 1029 | |
|---|
| 1030 | ######################################################################## |
|---|
| 1031 | ## Configuración servicio Rsync |
|---|
| 1032 | ######################################################################## |
|---|
| 1033 | |
|---|
| 1034 | # Configurar servicio Rsync. |
|---|
| 1035 | function rsyncConfigure() |
|---|
| 1036 | { |
|---|
| 1037 | echoAndLog "${FUNCNAME}(): Configuring Rsync service." |
|---|
| 1038 | |
|---|
| 1039 | backupFile $RSYNCCFGDIR/rsyncd.conf |
|---|
| 1040 | |
|---|
| 1041 | # Configurar acceso a Rsync. |
|---|
| 1042 | sed -e "s/CLIENTUSER/$OPENGNSYS_CLIENT_USER/g" \ |
|---|
| 1043 | $WORKDIR/opengnsys/repoman/etc/rsyncd.conf.tmpl > $RSYNCCFGDIR/rsyncd.conf |
|---|
| 1044 | # Habilitar Rsync y reiniciar Inetd. |
|---|
| 1045 | if [ -n "$RSYNCSERV" ]; then |
|---|
| 1046 | if [ -f /etc/default/rsync ]; then |
|---|
| 1047 | perl -pi -e 's/RSYNC_ENABLE=.*/RSYNC_ENABLE=inetd/' /etc/default/rsync |
|---|
| 1048 | fi |
|---|
| 1049 | if [ -f $INETDCFGDIR/rsync ]; then |
|---|
| 1050 | perl -pi -e 's/disable.*/disable = no/' $INETDCFGDIR/rsync |
|---|
| 1051 | else |
|---|
| 1052 | cat << EOT > $INETDCFGDIR/rsync |
|---|
| 1053 | service rsync |
|---|
| 1054 | { |
|---|
| 1055 | disable = no |
|---|
| 1056 | socket_type = stream |
|---|
| 1057 | wait = no |
|---|
| 1058 | user = root |
|---|
| 1059 | server = $(which rsync) |
|---|
| 1060 | server_args = --daemon |
|---|
| 1061 | log_on_failure += USERID |
|---|
| 1062 | flags = IPv6 |
|---|
| 1063 | } |
|---|
| 1064 | EOT |
|---|
| 1065 | fi |
|---|
| 1066 | service=$RSYNCSERV $ENABLESERVICE |
|---|
| 1067 | service=$INETDSERV $STARTSERVICE |
|---|
| 1068 | fi |
|---|
| 1069 | |
|---|
| 1070 | echoAndLog "${FUNCNAME}(): Added Rsync configuration." |
|---|
| 1071 | return 0 |
|---|
| 1072 | } |
|---|
| 1073 | |
|---|
| 1074 | |
|---|
| 1075 | ######################################################################## |
|---|
| 1076 | ## Configuración servicio DHCP |
|---|
| 1077 | ######################################################################## |
|---|
| 1078 | |
|---|
| 1079 | # Configurar servicios DHCP. |
|---|
| 1080 | function dhcpConfigure() |
|---|
| 1081 | { |
|---|
| 1082 | echoAndLog "${FUNCNAME}(): Sample DHCP configuration." |
|---|
| 1083 | |
|---|
| 1084 | local errcode=0 |
|---|
| 1085 | local i=0 |
|---|
| 1086 | local dev="" |
|---|
| 1087 | |
|---|
| 1088 | backupFile $DHCPCFGDIR/dhcpd.conf |
|---|
| 1089 | for dev in ${DEVICE[*]}; do |
|---|
| 1090 | if [ -n "${SERVERIP[i]}" ]; then |
|---|
| 1091 | backupFile $DHCPCFGDIR/dhcpd-$dev.conf |
|---|
| 1092 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 1093 | -e "s/NETIP/${NETIP[i]}/g" \ |
|---|
| 1094 | -e "s/NETMASK/${NETMASK[i]}/g" \ |
|---|
| 1095 | -e "s/NETBROAD/${NETBROAD[i]}/g" \ |
|---|
| 1096 | -e "s/ROUTERIP/${ROUTERIP[i]}/g" \ |
|---|
| 1097 | -e "s/DNSIP/$DNSIP/g" \ |
|---|
| 1098 | $WORKDIR/opengnsys/server/etc/dhcpd.conf.tmpl > $DHCPCFGDIR/dhcpd-$dev.conf || errcode=1 |
|---|
| 1099 | fi |
|---|
| 1100 | let i++ |
|---|
| 1101 | done |
|---|
| 1102 | if [ $errcode -ne 0 ]; then |
|---|
| 1103 | errorAndLog "${FUNCNAME}(): error while configuring DHCP server" |
|---|
| 1104 | return 1 |
|---|
| 1105 | fi |
|---|
| 1106 | ln -f $DHCPCFGDIR/dhcpd-$DEFAULTDEV.conf $DHCPCFGDIR/dhcpd.conf |
|---|
| 1107 | service=$DHCPSERV |
|---|
| 1108 | $ENABLESERVICE; $STARTSERVICE |
|---|
| 1109 | echoAndLog "${FUNCNAME}(): Sample DHCP configured in \"$DHCPCFGDIR\"." |
|---|
| 1110 | return 0 |
|---|
| 1111 | } |
|---|
| 1112 | |
|---|
| 1113 | |
|---|
| 1114 | ##################################################################### |
|---|
| 1115 | ####### Funciones específicas de la instalación de Opengnsys |
|---|
| 1116 | ##################################################################### |
|---|
| 1117 | |
|---|
| 1118 | # Copiar ficheros del OpenGnsys Web Console. |
|---|
| 1119 | function installWebFiles() |
|---|
| 1120 | { |
|---|
| 1121 | local COMPATDIR f |
|---|
| 1122 | local SLIMFILE="slim-2.6.1.zip" |
|---|
| 1123 | local SWAGGERFILE="swagger-ui-2.2.5.zip" |
|---|
| 1124 | |
|---|
| 1125 | echoAndLog "${FUNCNAME}(): Installing web files..." |
|---|
| 1126 | # Copiar ficheros. |
|---|
| 1127 | cp -a $WORKDIR/opengnsys/admin/WebConsole/* $INSTALL_TARGET/www #*/ comentario para Doxygen. |
|---|
| 1128 | if [ $? != 0 ]; then |
|---|
| 1129 | errorAndLog "${FUNCNAME}(): Error copying web files." |
|---|
| 1130 | exit 1 |
|---|
| 1131 | fi |
|---|
| 1132 | |
|---|
| 1133 | # Descomprimir librerías: Slim y Swagger-UI. |
|---|
| 1134 | unzip -o $WORKDIR/opengnsys/admin/$SLIMFILE -d $INSTALL_TARGET/www/rest |
|---|
| 1135 | unzip -o $WORKDIR/opengnsys/admin/$SWAGGERFILE -d $INSTALL_TARGET/www/rest |
|---|
| 1136 | |
|---|
| 1137 | # Compatibilidad con dispositivos móviles. |
|---|
| 1138 | COMPATDIR="$INSTALL_TARGET/www/principal" |
|---|
| 1139 | for f in acciones administracion aula aulas hardwares imagenes menus repositorios softwares; do |
|---|
| 1140 | sed 's/clickcontextualnodo/clicksupnodo/g' $COMPATDIR/$f.php > $COMPATDIR/$f.device.php |
|---|
| 1141 | done |
|---|
| 1142 | cp -a $COMPATDIR/imagenes.device.php $COMPATDIR/imagenes.device4.php |
|---|
| 1143 | # Acceso al manual de usuario |
|---|
| 1144 | ln -fs ../doc/userManual $INSTALL_TARGET/www/userManual |
|---|
| 1145 | # Ficheros de log de la API REST. |
|---|
| 1146 | touch $INSTALL_TARGET/log/{ogagent,remotepc,rest}.log |
|---|
| 1147 | |
|---|
| 1148 | echoAndLog "${FUNCNAME}(): Web files installed successfully." |
|---|
| 1149 | } |
|---|
| 1150 | |
|---|
| 1151 | function configurePHPvars() |
|---|
| 1152 | { |
|---|
| 1153 | OGADMSRV_HOSTNAME=$1 |
|---|
| 1154 | OGADMSRV_PORT=$2 |
|---|
| 1155 | sed "s/__OGADMSRV_HOSTNAME__/$OGADMSRV_HOSTNAME/; s/__OGADMSRV_PORT__/$OGADMSRV_PORT/" <$WORKDIR/opengnsys/server/etc/php-vars.php.tmpl >$INSTALL_TARGET/etc/php-vars.php |
|---|
| 1156 | } |
|---|
| 1157 | |
|---|
| 1158 | # Copiar ficheros en la zona de descargas de OpenGnsys Web Console. |
|---|
| 1159 | function installDownloadableFiles() |
|---|
| 1160 | { |
|---|
| 1161 | local VERSIONFILE OGVERSION FILENAME TARGETFILE |
|---|
| 1162 | |
|---|
| 1163 | # Obtener versión a descargar. |
|---|
| 1164 | VERSIONFILE="$INSTALL_TARGET/doc/VERSION.json" |
|---|
| 1165 | OGVERSION="$(jq -r ".ogagent // \"$INSTVERSION\"" $VERSIONFILE 2>/dev/null || echo "$INSTVERSION")" |
|---|
| 1166 | FILENAME="ogagentpkgs-$OGVERSION.tar.gz" |
|---|
| 1167 | TARGETFILE=$WORKDIR/$FILENAME |
|---|
| 1168 | |
|---|
| 1169 | # Descargar archivo comprimido, si es necesario. |
|---|
| 1170 | if [ -s $PROGRAMDIR/$FILENAME ]; then |
|---|
| 1171 | echoAndLog "${FUNCNAME}(): Moving $PROGRAMDIR/$FILENAME file to $(dirname $TARGETFILE)" |
|---|
| 1172 | mv $PROGRAMDIR/$FILENAME $TARGETFILE |
|---|
| 1173 | else |
|---|
| 1174 | echoAndLog "${FUNCNAME}(): Downloading $FILENAME" |
|---|
| 1175 | curl --stderr - --insecure --retry 5 --retry-delay 5 --max-time 30 $DOWNLOADURL/$FILENAME -o $TARGETFILE |
|---|
| 1176 | fi |
|---|
| 1177 | if [ ! -s $TARGETFILE ]; then |
|---|
| 1178 | errorAndLog "${FUNCNAME}(): Cannot download $FILENAME" |
|---|
| 1179 | return 1 |
|---|
| 1180 | fi |
|---|
| 1181 | |
|---|
| 1182 | # Descomprimir fichero en zona de descargas. |
|---|
| 1183 | tar xvzf $TARGETFILE -C $INSTALL_TARGET/www/descargas |
|---|
| 1184 | if [ $? != 0 ]; then |
|---|
| 1185 | errorAndLog "${FUNCNAME}(): Error uncompressing archive." |
|---|
| 1186 | exit 1 |
|---|
| 1187 | fi |
|---|
| 1188 | } |
|---|
| 1189 | |
|---|
| 1190 | # Configuración específica de Apache. |
|---|
| 1191 | function installWebConsoleApacheConf() |
|---|
| 1192 | { |
|---|
| 1193 | if [ $# -ne 2 ]; then |
|---|
| 1194 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 1195 | exit 1 |
|---|
| 1196 | fi |
|---|
| 1197 | |
|---|
| 1198 | local path_opengnsys_base="$1" |
|---|
| 1199 | local path_apache2_confd="$2" |
|---|
| 1200 | local CONSOLEDIR=${path_opengnsys_base}/www |
|---|
| 1201 | local sockfile |
|---|
| 1202 | |
|---|
| 1203 | if [ ! -d $path_apache2_confd ]; then |
|---|
| 1204 | errorAndLog "${FUNCNAME}(): path to apache2 conf.d can not found, verify your server installation" |
|---|
| 1205 | return 1 |
|---|
| 1206 | fi |
|---|
| 1207 | |
|---|
| 1208 | mkdir -p $path_apache2_confd/{sites-available,sites-enabled} |
|---|
| 1209 | |
|---|
| 1210 | echoAndLog "${FUNCNAME}(): creating apache2 config file.." |
|---|
| 1211 | |
|---|
| 1212 | # Avtivar PHP-FPM. |
|---|
| 1213 | echoAndLog "${FUNCNAME}(): configuring PHP-FPM" |
|---|
| 1214 | service=$PHPFPMSERV |
|---|
| 1215 | $ENABLESERVICE; $STARTSERVICE |
|---|
| 1216 | sockfile=$(find /run/php -name "php*.sock" -type s -print 2>/dev/null | tail -1) |
|---|
| 1217 | |
|---|
| 1218 | # Activar módulos de Apache. |
|---|
| 1219 | $APACHEENABLEMODS |
|---|
| 1220 | # Activar HTTPS. |
|---|
| 1221 | $APACHEENABLESSL |
|---|
| 1222 | $APACHEMAKECERT |
|---|
| 1223 | # Genera configuración de consola web a partir del fichero plantilla. |
|---|
| 1224 | if [ -n "$(apachectl -v | grep "2\.[0-2]")" ]; then |
|---|
| 1225 | # Configuración para versiones anteriores de Apache. |
|---|
| 1226 | sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \ |
|---|
| 1227 | $WORKDIR/opengnsys/server/etc/apache-prev2.4.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE} |
|---|
| 1228 | else |
|---|
| 1229 | # Configuración específica a partir de Apache 2.4 |
|---|
| 1230 | if [ -n "$sockfile" ]; then |
|---|
| 1231 | sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \ |
|---|
| 1232 | -e "s,proxy:fcgi:.*,proxy:unix:${sockfile%% *}|fcgi://localhost\",g" \ |
|---|
| 1233 | $WORKDIR/opengnsys/server/etc/apache.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}.conf |
|---|
| 1234 | else |
|---|
| 1235 | sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \ |
|---|
| 1236 | $WORKDIR/opengnsys/server/etc/apache.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}.conf |
|---|
| 1237 | fi |
|---|
| 1238 | fi |
|---|
| 1239 | $APACHEENABLEOG |
|---|
| 1240 | if [ $? -ne 0 ]; then |
|---|
| 1241 | errorAndLog "${FUNCNAME}(): config file can't be linked to apache conf, verify your server installation" |
|---|
| 1242 | return 1 |
|---|
| 1243 | fi |
|---|
| 1244 | echoAndLog "${FUNCNAME}(): config file created and linked, restarting apache daemon" |
|---|
| 1245 | service=$APACHESERV |
|---|
| 1246 | $ENABLESERVICE; $STARTSERVICE |
|---|
| 1247 | return 0 |
|---|
| 1248 | } |
|---|
| 1249 | |
|---|
| 1250 | |
|---|
| 1251 | # Crear documentación Doxygen para la consola web. |
|---|
| 1252 | function makeDoxygenFiles() |
|---|
| 1253 | { |
|---|
| 1254 | echoAndLog "${FUNCNAME}(): Making Doxygen web files..." |
|---|
| 1255 | $WORKDIR/opengnsys/installer/ogGenerateDoc.sh \ |
|---|
| 1256 | $WORKDIR/opengnsys/client/engine $INSTALL_TARGET/www |
|---|
| 1257 | if [ ! -d "$INSTALL_TARGET/www/html" ]; then |
|---|
| 1258 | errorAndLog "${FUNCNAME}(): unable to create Doxygen web files." |
|---|
| 1259 | return 1 |
|---|
| 1260 | fi |
|---|
| 1261 | mv "$INSTALL_TARGET/www/html" "$INSTALL_TARGET/www/api" |
|---|
| 1262 | echoAndLog "${FUNCNAME}(): Doxygen web files created successfully." |
|---|
| 1263 | } |
|---|
| 1264 | |
|---|
| 1265 | |
|---|
| 1266 | # Crea la estructura base de la instalación de opengnsys |
|---|
| 1267 | function createDirs() |
|---|
| 1268 | { |
|---|
| 1269 | if [ $# -ne 1 ]; then |
|---|
| 1270 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 1271 | exit 1 |
|---|
| 1272 | fi |
|---|
| 1273 | |
|---|
| 1274 | local path_opengnsys_base="$1" |
|---|
| 1275 | |
|---|
| 1276 | # Crear estructura de directorios. |
|---|
| 1277 | echoAndLog "${FUNCNAME}(): creating directory paths in $path_opengnsys_base" |
|---|
| 1278 | mkdir -p $path_opengnsys_base |
|---|
| 1279 | mkdir -p $path_opengnsys_base/bin |
|---|
| 1280 | mkdir -p $path_opengnsys_base/client/{cache,images,log} |
|---|
| 1281 | mkdir -p $path_opengnsys_base/doc |
|---|
| 1282 | mkdir -p $path_opengnsys_base/etc |
|---|
| 1283 | mkdir -p $path_opengnsys_base/lib |
|---|
| 1284 | mkdir -p $path_opengnsys_base/log/clients |
|---|
| 1285 | ln -fs $path_opengnsys_base/log /var/log/opengnsys |
|---|
| 1286 | mkdir -p $path_opengnsys_base/sbin |
|---|
| 1287 | mkdir -p $path_opengnsys_base/www |
|---|
| 1288 | mkdir -p $path_opengnsys_base/images/groups |
|---|
| 1289 | mkdir -p $TFTPCFGDIR |
|---|
| 1290 | ln -fs $TFTPCFGDIR $path_opengnsys_base/tftpboot |
|---|
| 1291 | mkdir -p $path_opengnsys_base/tftpboot/{menu.lst,grub} |
|---|
| 1292 | if [ $? -ne 0 ]; then |
|---|
| 1293 | errorAndLog "${FUNCNAME}(): error while creating dirs. Do you have write permissions?" |
|---|
| 1294 | return 1 |
|---|
| 1295 | fi |
|---|
| 1296 | |
|---|
| 1297 | # Crear usuario ficticio. |
|---|
| 1298 | if id -u $OPENGNSYS_CLIENT_USER &>/dev/null; then |
|---|
| 1299 | echoAndLog "${FUNCNAME}(): user \"$OPENGNSYS_CLIENT_USER\" is already created" |
|---|
| 1300 | else |
|---|
| 1301 | echoAndLog "${FUNCNAME}(): creating OpenGnsys user" |
|---|
| 1302 | useradd $OPENGNSYS_CLIENT_USER 2>/dev/null |
|---|
| 1303 | if [ $? -ne 0 ]; then |
|---|
| 1304 | errorAndLog "${FUNCNAME}(): error creating OpenGnsys user" |
|---|
| 1305 | return 1 |
|---|
| 1306 | fi |
|---|
| 1307 | fi |
|---|
| 1308 | |
|---|
| 1309 | # Mover el fichero de registro de instalación al directorio de logs. |
|---|
| 1310 | echoAndLog "${FUNCNAME}(): moving installation log file" |
|---|
| 1311 | mv $LOG_FILE $OGLOGFILE && LOG_FILE=$OGLOGFILE |
|---|
| 1312 | chmod 600 $LOG_FILE |
|---|
| 1313 | |
|---|
| 1314 | echoAndLog "${FUNCNAME}(): directory paths created" |
|---|
| 1315 | return 0 |
|---|
| 1316 | } |
|---|
| 1317 | |
|---|
| 1318 | # Copia ficheros de configuración y ejecutables genéricos del servidor. |
|---|
| 1319 | function copyServerFiles () |
|---|
| 1320 | { |
|---|
| 1321 | if [ $# -ne 1 ]; then |
|---|
| 1322 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 1323 | exit 1 |
|---|
| 1324 | fi |
|---|
| 1325 | |
|---|
| 1326 | local path_opengnsys_base="$1" |
|---|
| 1327 | |
|---|
| 1328 | # Lista de ficheros y directorios origen y de directorios destino. |
|---|
| 1329 | local SOURCES=( server/tftpboot \ |
|---|
| 1330 | /usr/lib/shim/shimx64.efi.signed \ |
|---|
| 1331 | /usr/lib/grub/x86_64-efi-signed/grubnetx64.efi.signed \ |
|---|
| 1332 | server/bin \ |
|---|
| 1333 | repoman/bin \ |
|---|
| 1334 | server/lib \ |
|---|
| 1335 | admin/Sources/Services/ogAdmServerAux |
|---|
| 1336 | admin/Sources/Services/ogAdmRepoAux |
|---|
| 1337 | installer/opengnsys_uninstall.sh \ |
|---|
| 1338 | installer/opengnsys_update.sh \ |
|---|
| 1339 | installer/opengnsys_export.sh \ |
|---|
| 1340 | installer/opengnsys_import.sh \ |
|---|
| 1341 | doc ) |
|---|
| 1342 | local TARGETS=( tftpboot \ |
|---|
| 1343 | tftpboot \ |
|---|
| 1344 | tftpboot/grubx64.efi \ |
|---|
| 1345 | bin \ |
|---|
| 1346 | bin \ |
|---|
| 1347 | lib \ |
|---|
| 1348 | sbin \ |
|---|
| 1349 | sbin \ |
|---|
| 1350 | lib \ |
|---|
| 1351 | lib \ |
|---|
| 1352 | lib \ |
|---|
| 1353 | lib \ |
|---|
| 1354 | doc ) |
|---|
| 1355 | |
|---|
| 1356 | if [ ${#SOURCES[@]} != ${#TARGETS[@]} ]; then |
|---|
| 1357 | errorAndLog "${FUNCNAME}(): inconsistent number of array items" |
|---|
| 1358 | exit 1 |
|---|
| 1359 | fi |
|---|
| 1360 | |
|---|
| 1361 | # Copiar ficheros. |
|---|
| 1362 | echoAndLog "${FUNCNAME}(): copying files to server directories" |
|---|
| 1363 | |
|---|
| 1364 | pushd $WORKDIR/opengnsys |
|---|
| 1365 | local i |
|---|
| 1366 | for (( i = 0; i < ${#SOURCES[@]}; i++ )); do |
|---|
| 1367 | if [ -f "${SOURCES[$i]}" ]; then |
|---|
| 1368 | echoAndLog "Copying ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}" |
|---|
| 1369 | cp -a "${SOURCES[$i]}" "${path_opengnsys_base}/${TARGETS[$i]}" |
|---|
| 1370 | elif [ -d "${SOURCES[$i]}" ]; then |
|---|
| 1371 | echoAndLog "Copying content of ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}" |
|---|
| 1372 | cp -a "${SOURCES[$i]}"/* "${path_opengnsys_base}/${TARGETS[$i]}" |
|---|
| 1373 | else |
|---|
| 1374 | warningAndLog "Unable to copy ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}" |
|---|
| 1375 | fi |
|---|
| 1376 | done |
|---|
| 1377 | |
|---|
| 1378 | popd |
|---|
| 1379 | } |
|---|
| 1380 | |
|---|
| 1381 | #################################################################### |
|---|
| 1382 | ### Funciones de TLS |
|---|
| 1383 | #################################################################### |
|---|
| 1384 | |
|---|
| 1385 | CA_DIR=/root/CA |
|---|
| 1386 | OG_BASEDIR=/opt/opengnsys |
|---|
| 1387 | |
|---|
| 1388 | function gatherCertsInfo() |
|---|
| 1389 | { |
|---|
| 1390 | ERRORS=0 |
|---|
| 1391 | ## BUG cuando REMOTE=1, $WORKDIR/opengnsys es el contenido del zip (producido al vuelo con 'git archive'), y naturalmente no contiene ./user-certs |
|---|
| 1392 | ## este código debe buscar los certificados en otro sitio adicional |
|---|
| 1393 | if [ -f $WORKDIR/opengnsys/user-certs/ca.crt.pem ]; then |
|---|
| 1394 | echoAndLog "CA provided by the user, checking presence of all certificates" |
|---|
| 1395 | |
|---|
| 1396 | TLS_DATA_CA_CERTFILE=$WORKDIR/opengnsys/user-certs/ca.crt.pem |
|---|
| 1397 | TLS_DATA_OGADMSRV_CERTFILE=$WORKDIR/opengnsys/user-certs/ogAdmSrv.crt.pem |
|---|
| 1398 | TLS_DATA_OGADMSRV_KEYFILE=$WORKDIR/opengnsys/user-certs/ogAdmSrv.key.pem |
|---|
| 1399 | TLS_DATA_WEBCONSOLE_CERTFILE=$WORKDIR/opengnsys/user-certs/WebConsole.crt.pem |
|---|
| 1400 | TLS_DATA_WEBCONSOLE_KEYFILE=$WORKDIR/opengnsys/user-certs/WebConsole.key.pem |
|---|
| 1401 | |
|---|
| 1402 | ## el usuario tiene que facilitar todos los certificados |
|---|
| 1403 | ## si falta alguno, no podemos generarlo aquí porque habría que tener la privkey de la CA, y el usuario no nos la debe dar |
|---|
| 1404 | if [ ! -f $TLS_DATA_OGADMSRV_CERTFILE ]; then errorAndLog "ogAdmSrv certificate not found"; ERRORS=1; fi |
|---|
| 1405 | if [ ! -f $TLS_DATA_OGADMSRV_KEYFILE ]; then errorAndLog "ogAdmSrv privkey not found"; ERRORS=1; fi |
|---|
| 1406 | if [ ! -f $TLS_DATA_WEBCONSOLE_CERTFILE ]; then errorAndLog "WebConsole certificate not found"; ERRORS=1; fi |
|---|
| 1407 | if [ ! -f $TLS_DATA_WEBCONSOLE_KEYFILE ]; then errorAndLog "WebConsole privkey not found"; ERRORS=1; fi |
|---|
| 1408 | |
|---|
| 1409 | if [ $ERRORS -eq 0 ]; then |
|---|
| 1410 | ## validar que las privkeys no tengan contraseña para que opengnsys pueda arrancar de forma desatendida |
|---|
| 1411 | if ! openssl rsa -in $TLS_DATA_OGADMSRV_KEYFILE -passin pass:42 -noout; then errorAndLog "ogAdmSrv privkey is encrypted"; ERRORS=1; fi |
|---|
| 1412 | if ! openssl rsa -in $TLS_DATA_WEBCONSOLE_KEYFILE -passin pass:42 -noout; then errorAndLog "WebConsole privkey is encrypted"; ERRORS=1; fi |
|---|
| 1413 | |
|---|
| 1414 | if [ $ERRORS -eq 0 ]; then |
|---|
| 1415 | # obtener los subject de cada certificado |
|---|
| 1416 | # la salida de openssl es tal que "subject=C = ES, ST = Madrid, L = Madrid, CN = test.example.org" |
|---|
| 1417 | # con el sed cocinamos la salida |
|---|
| 1418 | # además añadimos un / al principio para que el CN final sea correcto: "/C=ES/ST=Madrid/L=Madrid/CN=test.opengnsys.local" |
|---|
| 1419 | TLS_DATA_CA_SUBJ=/$( openssl x509 -in $TLS_DATA_CA_CERTFILE -subject -noout |sed 's/^subject=//; s/ *//g; s/,/\//g') |
|---|
| 1420 | TLS_DATA_OGADMSRV_SUBJ=/$( openssl x509 -in $TLS_DATA_OGADMSRV_CERTFILE -subject -noout |sed 's/^subject=//; s/ *//g; s/,/\//g') |
|---|
| 1421 | TLS_DATA_WEBCONSOLE_SUBJ=/$(openssl x509 -in $TLS_DATA_WEBCONSOLE_CERTFILE -subject -noout |sed 's/^subject=//; s/ *//g; s/,/\//g') |
|---|
| 1422 | |
|---|
| 1423 | # obtener CN a partir del subject |
|---|
| 1424 | TLS_DATA_CA_CN=$( echo $TLS_DATA_CA_SUBJ |sed 's/.*CN=\([^/$]*\).*/\1/') |
|---|
| 1425 | TLS_DATA_OGADMSRV_CN=$( echo $TLS_DATA_OGADMSRV_SUBJ |sed 's/.*CN=\([^/$]*\).*/\1/') |
|---|
| 1426 | TLS_DATA_WEBCONSOLE_CN=$( echo $TLS_DATA_WEBCONSOLE_SUBJ |sed 's/.*CN=\([^/$]*\).*/\1/') |
|---|
| 1427 | |
|---|
| 1428 | # los CN de los componentes que aceptan conexiones deberían resolver a una IP |
|---|
| 1429 | if ! nslookup $TLS_DATA_OGADMSRV_CN &>/dev/null; then errorAndLog "ogAdmSrv CN doesn't resolve to an IP"; ERRORS=1; fi |
|---|
| 1430 | |
|---|
| 1431 | if [ $ERRORS -eq 0 ]; then |
|---|
| 1432 | echoAndLog "Provided CA and certs are ok" |
|---|
| 1433 | fi |
|---|
| 1434 | fi |
|---|
| 1435 | fi |
|---|
| 1436 | fi |
|---|
| 1437 | |
|---|
| 1438 | ## aquí también hay que tener en cuenta el sitio adicional para los user-certs |
|---|
| 1439 | if [ ! -f $WORKDIR/opengnsys/user-certs/ca.crt.pem -o $ERRORS -eq 1 ]; then |
|---|
| 1440 | echoAndLog "CA and certs not provided by the user or issues found, we will generate a new CA and all certs" |
|---|
| 1441 | |
|---|
| 1442 | TLS_DATA_CA_CN=ca.opengnsys.local |
|---|
| 1443 | TLS_DATA_CA_SUBJ=/CN=ca.opengnsys.local |
|---|
| 1444 | TLS_DATA_CA_CERTFILE=$CA_DIR/certs/ca.crt.pem |
|---|
| 1445 | TLS_DATA_CA_EXPIRY=7300 # this variable is used later to make some decisions |
|---|
| 1446 | |
|---|
| 1447 | TLS_DATA_OGADMSRV_CN=ogAdmSrv.opengnsys.local |
|---|
| 1448 | TLS_DATA_OGADMSRV_SUBJ=/CN=ogAdmSrv.opengnsys.local |
|---|
| 1449 | TLS_DATA_OGADMSRV_CERTFILE=$CA_DIR/certs/ogAdmSrv.crt.pem |
|---|
| 1450 | TLS_DATA_OGADMSRV_KEYFILE=$CA_DIR/private/ogAdmSrv.key.pem |
|---|
| 1451 | TLS_DATA_OGADMSRV_EXPIRY=375 |
|---|
| 1452 | |
|---|
| 1453 | TLS_DATA_WEBCONSOLE_CN=WebConsole.opengnsys.local |
|---|
| 1454 | TLS_DATA_WEBCONSOLE_SUBJ=/CN=WebConsole.opengnsys.local |
|---|
| 1455 | TLS_DATA_WEBCONSOLE_CERTFILE=$CA_DIR/certs/WebConsole.crt.pem |
|---|
| 1456 | TLS_DATA_WEBCONSOLE_KEYFILE=$CA_DIR/private/WebConsole.key.pem |
|---|
| 1457 | TLS_DATA_WEBCONSOLE_EXPIRY=375 |
|---|
| 1458 | fi |
|---|
| 1459 | |
|---|
| 1460 | # otras cosas de TLS no cubiertas arriba por no estar relacionadas con los certificados |
|---|
| 1461 | TLS_DATA_OGADMSRV_LISTEN_PORT=48888 |
|---|
| 1462 | |
|---|
| 1463 | return 0 |
|---|
| 1464 | } |
|---|
| 1465 | |
|---|
| 1466 | function _genCA () |
|---|
| 1467 | { |
|---|
| 1468 | SUBJ=$1 |
|---|
| 1469 | EXPIRY_DAYS=$2 |
|---|
| 1470 | openssl genrsa -out private/ca.key.pem 4096 2>/dev/null |
|---|
| 1471 | openssl req -config openssl.cnf -key private/ca.key.pem -new -x509 -days $EXPIRY_DAYS -sha256 -subj $SUBJ -out certs/ca.crt.pem |
|---|
| 1472 | |
|---|
| 1473 | return 0 |
|---|
| 1474 | } |
|---|
| 1475 | |
|---|
| 1476 | function _genCert () |
|---|
| 1477 | { |
|---|
| 1478 | COMPONENT=$1 |
|---|
| 1479 | SUBJ=$2 |
|---|
| 1480 | EXPIRY_DAYS=$3 |
|---|
| 1481 | |
|---|
| 1482 | openssl genrsa -out private/$COMPONENT.key.pem 2048 2>/dev/null |
|---|
| 1483 | openssl req -config openssl.cnf -key private/$COMPONENT.key.pem -new -sha256 -subj $SUBJ -out csr/$COMPONENT.csr.pem |
|---|
| 1484 | openssl ca -config openssl.cnf -batch -days $EXPIRY_DAYS -notext -md sha256 -in csr/$COMPONENT.csr.pem -out certs/$COMPONENT.crt.pem |
|---|
| 1485 | |
|---|
| 1486 | return 0 |
|---|
| 1487 | } |
|---|
| 1488 | |
|---|
| 1489 | function genAllCerts () |
|---|
| 1490 | { |
|---|
| 1491 | mkdir -p $CA_DIR |
|---|
| 1492 | pushd $CA_DIR |
|---|
| 1493 | cat >openssl.cnf <<EOF |
|---|
| 1494 | [ca] |
|---|
| 1495 | default_ca = CA_default |
|---|
| 1496 | |
|---|
| 1497 | [CA_default] |
|---|
| 1498 | dir = $CA_DIR |
|---|
| 1499 | certs = $CA_DIR/certs |
|---|
| 1500 | new_certs_dir = $CA_DIR/newcerts |
|---|
| 1501 | database = $CA_DIR/index.txt |
|---|
| 1502 | serial = $CA_DIR/serial |
|---|
| 1503 | default_md = sha256 |
|---|
| 1504 | policy = policy_loose |
|---|
| 1505 | |
|---|
| 1506 | private_key = $CA_DIR/private/ca.key.pem |
|---|
| 1507 | certificate = $CA_DIR/certs/ca.crt.pem |
|---|
| 1508 | |
|---|
| 1509 | [policy_loose] |
|---|
| 1510 | countryName = optional |
|---|
| 1511 | stateOrProvinceName = optional |
|---|
| 1512 | localityName = optional |
|---|
| 1513 | organizationName = optional |
|---|
| 1514 | organizationalUnitName = optional |
|---|
| 1515 | commonName = supplied |
|---|
| 1516 | emailAddress = optional |
|---|
| 1517 | |
|---|
| 1518 | [req] |
|---|
| 1519 | default_bits = 2048 |
|---|
| 1520 | distinguished_name = req_distinguished_name |
|---|
| 1521 | default_md = sha256 |
|---|
| 1522 | |
|---|
| 1523 | [req_distinguished_name] |
|---|
| 1524 | countryName = Country Name (2 letter code) |
|---|
| 1525 | EOF |
|---|
| 1526 | mkdir certs csr newcerts private |
|---|
| 1527 | chmod 0700 private |
|---|
| 1528 | touch index.txt index.txt.attr |
|---|
| 1529 | echo 1000 >serial |
|---|
| 1530 | |
|---|
| 1531 | _genCA $TLS_DATA_CA_SUBJ $TLS_DATA_CA_EXPIRY |
|---|
| 1532 | _genCert ogAdmSrv $TLS_DATA_OGADMSRV_SUBJ $TLS_DATA_OGADMSRV_EXPIRY |
|---|
| 1533 | _genCert WebConsole $TLS_DATA_WEBCONSOLE_SUBJ $TLS_DATA_WEBCONSOLE_EXPIRY |
|---|
| 1534 | |
|---|
| 1535 | popd |
|---|
| 1536 | return 0 |
|---|
| 1537 | } |
|---|
| 1538 | |
|---|
| 1539 | function installAllCerts () |
|---|
| 1540 | { |
|---|
| 1541 | mkdir -p $OG_BASEDIR/etc/ssl |
|---|
| 1542 | |
|---|
| 1543 | ## CA cert goes to the OS store |
|---|
| 1544 | cp $TLS_DATA_CA_CERTFILE $LOCAL_CERTS_DIR/opengnsys-ca.crt |
|---|
| 1545 | |
|---|
| 1546 | ## ogAdmSrv cert & key go to the application store |
|---|
| 1547 | cp $TLS_DATA_OGADMSRV_CERTFILE $TLS_DATA_OGADMSRV_KEYFILE $OG_BASEDIR/etc/ssl/ |
|---|
| 1548 | ## certs of ogAdmSrv clients go to the OS store (stunnel seems to require this) |
|---|
| 1549 | cp $TLS_DATA_WEBCONSOLE_CERTFILE $LOCAL_CERTS_DIR/opengnsys-WebConsole.crt |
|---|
| 1550 | |
|---|
| 1551 | ## WebConsole cert & key go to the application store |
|---|
| 1552 | cp $TLS_DATA_WEBCONSOLE_CERTFILE $TLS_DATA_WEBCONSOLE_KEYFILE $OG_BASEDIR/etc/ssl/ |
|---|
| 1553 | |
|---|
| 1554 | $UPDATE_CA_CMD |
|---|
| 1555 | chmod 0640 $OG_BASEDIR/etc/ssl/* |
|---|
| 1556 | chown stunnel4:www-data $OG_BASEDIR/etc/ssl/* |
|---|
| 1557 | |
|---|
| 1558 | return 0 |
|---|
| 1559 | } |
|---|
| 1560 | |
|---|
| 1561 | # si generamos nuestros propios certificados, los CNs tienen que resolver a alguna IP |
|---|
| 1562 | # no podemos dar por hecho que algún servidor DNS por ahí fuera resuelva los CNs que hemos generado al instalar |
|---|
| 1563 | function makeCommonNamesResolvable () |
|---|
| 1564 | { |
|---|
| 1565 | # ogAdmSrv |
|---|
| 1566 | local i=0 |
|---|
| 1567 | for dev in ${DEVICE[*]}; do |
|---|
| 1568 | echoAndLog "${FUNCNAME}(): evaluating dev (${DEVICE[i]}) against defaultdev ($DEFAULTDEV)" |
|---|
| 1569 | if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then |
|---|
| 1570 | ETC_HOSTS_IP=${SERVERIP[i]} |
|---|
| 1571 | echoAndLog "${FUNCNAME}(): will use dev (${DEVICE[i]}) IP ($ETC_HOSTS_IP)" |
|---|
| 1572 | break |
|---|
| 1573 | fi |
|---|
| 1574 | let i++ |
|---|
| 1575 | done |
|---|
| 1576 | |
|---|
| 1577 | if [ -z $ETC_HOSTS_IP ]; then |
|---|
| 1578 | echoAndLog "${FUNCNAME}(): Don't know what IP address to add to /etc/hosts for ogAdmSrv" |
|---|
| 1579 | else |
|---|
| 1580 | echo "$ETC_HOSTS_IP $TLS_DATA_OGADMSRV_CN" >>/etc/hosts |
|---|
| 1581 | fi |
|---|
| 1582 | |
|---|
| 1583 | return 0 |
|---|
| 1584 | } |
|---|
| 1585 | |
|---|
| 1586 | function configureStunnel () |
|---|
| 1587 | { |
|---|
| 1588 | local i=0 |
|---|
| 1589 | for dev in ${DEVICE[*]}; do |
|---|
| 1590 | echoAndLog "${FUNCNAME}(): evaluating dev (${DEVICE[i]}) against defaultdev ($DEFAULTDEV)" |
|---|
| 1591 | if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then |
|---|
| 1592 | LISTEN_IP=${SERVERIP[i]} |
|---|
| 1593 | echoAndLog "${FUNCNAME}(): will use dev (${DEVICE[i]}) IP ($LISTEN_IP)" |
|---|
| 1594 | break |
|---|
| 1595 | fi |
|---|
| 1596 | let i++ |
|---|
| 1597 | done |
|---|
| 1598 | |
|---|
| 1599 | if [ -z $LISTEN_IP ]; then |
|---|
| 1600 | echoAndLog "${FUNCNAME}(): Don't know what IP address to listen on" |
|---|
| 1601 | return 1 |
|---|
| 1602 | fi |
|---|
| 1603 | |
|---|
| 1604 | cat >/etc/stunnel/ogAdmSrv.conf <<EOF |
|---|
| 1605 | setuid = stunnel4 |
|---|
| 1606 | setgid = stunnel4 |
|---|
| 1607 | pid = /var/run/stunnel4/ogAdmSrv.pid |
|---|
| 1608 | |
|---|
| 1609 | [ogAdmSrv] |
|---|
| 1610 | accept = $LISTEN_IP:$TLS_DATA_OGADMSRV_LISTEN_PORT |
|---|
| 1611 | connect = 127.0.0.1:8888 |
|---|
| 1612 | cert = $OG_BASEDIR/etc/ssl/ogAdmSrv.crt.pem |
|---|
| 1613 | key = $OG_BASEDIR/etc/ssl/ogAdmSrv.key.pem |
|---|
| 1614 | capath = $STUNNEL_CAPATH |
|---|
| 1615 | requireCert = yes |
|---|
| 1616 | verifyPeer = yes |
|---|
| 1617 | verifyChain = yes |
|---|
| 1618 | EOF |
|---|
| 1619 | |
|---|
| 1620 | sed -i -e '/^ENABLED=/s/0/1/' /etc/default/stunnel4 |
|---|
| 1621 | service=stunnel4 |
|---|
| 1622 | $STARTSERVICE |
|---|
| 1623 | return 0 |
|---|
| 1624 | } |
|---|
| 1625 | |
|---|
| 1626 | |
|---|
| 1627 | #################################################################### |
|---|
| 1628 | ### Funciones de compilación de código fuente de servicios |
|---|
| 1629 | #################################################################### |
|---|
| 1630 | |
|---|
| 1631 | # Compilar los servicios de OpenGnsys |
|---|
| 1632 | function servicesCompilation () |
|---|
| 1633 | { |
|---|
| 1634 | local hayErrores=0 |
|---|
| 1635 | |
|---|
| 1636 | # Compilar OpenGnsys Server |
|---|
| 1637 | echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Admin Server" |
|---|
| 1638 | pushd $WORKDIR/opengnsys/admin/Sources/Services/ogAdmServer |
|---|
| 1639 | make && mv ogAdmServer $INSTALL_TARGET/sbin |
|---|
| 1640 | if [ $? -ne 0 ]; then |
|---|
| 1641 | echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Admin Server" |
|---|
| 1642 | hayErrores=1 |
|---|
| 1643 | fi |
|---|
| 1644 | popd |
|---|
| 1645 | # Compilar OpenGnsys Agent |
|---|
| 1646 | echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Agent" |
|---|
| 1647 | pushd $WORKDIR/opengnsys/admin/Sources/Services/ogAdmAgent |
|---|
| 1648 | make && mv ogAdmAgent $INSTALL_TARGET/sbin |
|---|
| 1649 | if [ $? -ne 0 ]; then |
|---|
| 1650 | echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Agent" |
|---|
| 1651 | hayErrores=1 |
|---|
| 1652 | fi |
|---|
| 1653 | popd |
|---|
| 1654 | # Compilar OpenGnsys Client |
|---|
| 1655 | echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Admin Client" |
|---|
| 1656 | pushd $WORKDIR/opengnsys/admin/Sources/Clients/ogAdmClient |
|---|
| 1657 | make && mv ogAdmClient ../../../../client/shared/bin |
|---|
| 1658 | if [ $? -ne 0 ]; then |
|---|
| 1659 | echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Admin Client" |
|---|
| 1660 | hayErrores=1 |
|---|
| 1661 | fi |
|---|
| 1662 | popd |
|---|
| 1663 | |
|---|
| 1664 | return $hayErrores |
|---|
| 1665 | } |
|---|
| 1666 | |
|---|
| 1667 | #################################################################### |
|---|
| 1668 | ### Funciones de copia de la Interface de administración |
|---|
| 1669 | #################################################################### |
|---|
| 1670 | |
|---|
| 1671 | # Copiar carpeta de Interface |
|---|
| 1672 | function copyInterfaceAdm () |
|---|
| 1673 | { |
|---|
| 1674 | local hayErrores=0 |
|---|
| 1675 | |
|---|
| 1676 | # Crear carpeta y copiar Interface |
|---|
| 1677 | echoAndLog "${FUNCNAME}(): Copying Administration Interface Folder" |
|---|
| 1678 | cp -ar $WORKDIR/opengnsys/admin/Interface $INSTALL_TARGET/client/interfaceAdm |
|---|
| 1679 | if [ $? -ne 0 ]; then |
|---|
| 1680 | echoAndLog "${FUNCNAME}(): error while copying Administration Interface Folder" |
|---|
| 1681 | hayErrores=1 |
|---|
| 1682 | fi |
|---|
| 1683 | |
|---|
| 1684 | return $hayErrores |
|---|
| 1685 | } |
|---|
| 1686 | |
|---|
| 1687 | |
|---|
| 1688 | #################################################################### |
|---|
| 1689 | ### Funciones instalacion cliente opengnsys |
|---|
| 1690 | #################################################################### |
|---|
| 1691 | |
|---|
| 1692 | function copyClientFiles() |
|---|
| 1693 | { |
|---|
| 1694 | local errstatus=0 |
|---|
| 1695 | |
|---|
| 1696 | echoAndLog "${FUNCNAME}(): Copying OpenGnsys Client files." |
|---|
| 1697 | cp -a $WORKDIR/opengnsys/client/shared/* $INSTALL_TARGET/client |
|---|
| 1698 | if [ $? -ne 0 ]; then |
|---|
| 1699 | errorAndLog "${FUNCNAME}(): error while copying client estructure" |
|---|
| 1700 | errstatus=1 |
|---|
| 1701 | fi |
|---|
| 1702 | |
|---|
| 1703 | echoAndLog "${FUNCNAME}(): Copying OpenGnsys Cloning Engine files." |
|---|
| 1704 | mkdir -p $INSTALL_TARGET/client/lib/engine/bin |
|---|
| 1705 | cp -a $WORKDIR/opengnsys/client/engine/*.lib* $INSTALL_TARGET/client/lib/engine/bin |
|---|
| 1706 | if [ $? -ne 0 ]; then |
|---|
| 1707 | errorAndLog "${FUNCNAME}(): error while copying engine files" |
|---|
| 1708 | errstatus=1 |
|---|
| 1709 | fi |
|---|
| 1710 | |
|---|
| 1711 | if [ $errstatus -eq 0 ]; then |
|---|
| 1712 | echoAndLog "${FUNCNAME}(): client copy files success." |
|---|
| 1713 | else |
|---|
| 1714 | errorAndLog "${FUNCNAME}(): client copy files with errors" |
|---|
| 1715 | fi |
|---|
| 1716 | |
|---|
| 1717 | return $errstatus |
|---|
| 1718 | } |
|---|
| 1719 | |
|---|
| 1720 | |
|---|
| 1721 | # Crear certificados para la firma de cargadores de arranque. |
|---|
| 1722 | function createCerts () |
|---|
| 1723 | { |
|---|
| 1724 | local SSLCFGDIR=$INSTALL_TARGET/client/etc/ssl |
|---|
| 1725 | echoAndLog "${FUNCNAME}(): creating certificate files" |
|---|
| 1726 | mkdir -p $SSLCFGDIR/{certs,private} |
|---|
| 1727 | openssl req -new -x509 -newkey rsa:2048 -keyout $SSLCFGDIR/private/opengnsys.key -out $SSLCFGDIR/certs/opengnsys.crt -nodes -days 3650 -subj "/CN=OpenGnsys/" |
|---|
| 1728 | openssl x509 -in $SSLCFGDIR/certs/opengnsys.crt -out $SSLCFGDIR/certs/opengnsys.cer -outform DER |
|---|
| 1729 | echoAndLog "${FUNCNAME}(): certificate successfully created" |
|---|
| 1730 | } |
|---|
| 1731 | |
|---|
| 1732 | |
|---|
| 1733 | # Crear cliente OpenGnsys. |
|---|
| 1734 | function clientCreate() |
|---|
| 1735 | { |
|---|
| 1736 | if [ $# -ne 1 ]; then |
|---|
| 1737 | errorAndLog "${FUNCNAME}(): invalid number of parameters" |
|---|
| 1738 | exit 1 |
|---|
| 1739 | fi |
|---|
| 1740 | |
|---|
| 1741 | local FILENAME="$1" |
|---|
| 1742 | local TARGETFILE=$INSTALL_TARGET/lib/$FILENAME |
|---|
| 1743 | |
|---|
| 1744 | # Descargar cliente, si es necesario. |
|---|
| 1745 | if [ -s $PROGRAMDIR/$FILENAME ]; then |
|---|
| 1746 | echoAndLog "${FUNCNAME}(): Moving $PROGRAMDIR/$FILENAME file to $(dirname $TARGETFILE)" |
|---|
| 1747 | mv $PROGRAMDIR/$FILENAME $TARGETFILE |
|---|
| 1748 | else |
|---|
| 1749 | echoAndLog "${FUNCNAME}(): Downloading $FILENAME" |
|---|
| 1750 | oglivecli download $FILENAME |
|---|
| 1751 | fi |
|---|
| 1752 | if [ ! -s $TARGETFILE ]; then |
|---|
| 1753 | errorAndLog "${FUNCNAME}(): Error loading $FILENAME" |
|---|
| 1754 | return 1 |
|---|
| 1755 | fi |
|---|
| 1756 | |
|---|
| 1757 | # Montar imagen, copiar cliente ogclient y desmontar. |
|---|
| 1758 | echoAndLog "${FUNCNAME}(): Installing ogLive Client" |
|---|
| 1759 | echo -ne "$OPENGNSYS_CLIENT_PASSWD\n$OPENGNSYS_CLIENT_PASSWD\n" | \ |
|---|
| 1760 | oglivecli install $FILENAME |
|---|
| 1761 | |
|---|
| 1762 | echoAndLog "${FUNCNAME}(): Client generation success" |
|---|
| 1763 | } |
|---|
| 1764 | |
|---|
| 1765 | |
|---|
| 1766 | # Configuración básica de servicios de OpenGnsys |
|---|
| 1767 | function openGnsysConfigure() |
|---|
| 1768 | { |
|---|
| 1769 | local i=0 |
|---|
| 1770 | local dev="" |
|---|
| 1771 | local CONSOLEURL |
|---|
| 1772 | |
|---|
| 1773 | echoAndLog "${FUNCNAME}(): Copying init files." |
|---|
| 1774 | cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.init /etc/init.d/opengnsys |
|---|
| 1775 | cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.default /etc/default/opengnsys |
|---|
| 1776 | # Deshabilitar servicios de BitTorrent si no están instalados. |
|---|
| 1777 | if [ ! -e /usr/bin/bttrack ]; then |
|---|
| 1778 | sed -i 's/RUN_BTTRACKER="yes"/RUN_BTTRACKER="no"/; s/RUN_BTSEEDER="yes"/RUN_BTSEEDER="no"/' \ |
|---|
| 1779 | /etc/default/opengnsys |
|---|
| 1780 | fi |
|---|
| 1781 | echoAndLog "${FUNCNAME}(): Creating cron files." |
|---|
| 1782 | echo "* * * * * root [ -x $INSTALL_TARGET/bin/torrent-creator ] && $INSTALL_TARGET/bin/torrent-creator" > /etc/cron.d/torrentcreator |
|---|
| 1783 | echo "5 * * * * root [ -x $INSTALL_TARGET/bin/torrent-tracker ] && $INSTALL_TARGET/bin/torrent-tracker" > /etc/cron.d/torrenttracker |
|---|
| 1784 | echo "* * * * * root [ -x $INSTALL_TARGET/bin/deletepreimage ] && $INSTALL_TARGET/bin/deletepreimage" > /etc/cron.d/imagedelete |
|---|
| 1785 | echo "* * * * * root [ -x $INSTALL_TARGET/bin/ogagentqueue.cron ] && $INSTALL_TARGET/bin/ogagentqueue.cron" > /etc/cron.d/ogagentqueue |
|---|
| 1786 | echo "*/5 * * * * root cd $INSTALL_TARGET/www && php uds-set-service-pool.php" > /etc/cron.d/uds-set-service-pool |
|---|
| 1787 | |
|---|
| 1788 | echoAndLog "${FUNCNAME}(): Creating logrotate configuration files." |
|---|
| 1789 | sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \ |
|---|
| 1790 | $WORKDIR/opengnsys/server/etc/logrotate.tmpl > /etc/logrotate.d/opengnsysServer |
|---|
| 1791 | |
|---|
| 1792 | sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \ |
|---|
| 1793 | $WORKDIR/opengnsys/repoman/etc/logrotate.tmpl > /etc/logrotate.d/opengnsysRepo |
|---|
| 1794 | |
|---|
| 1795 | echoAndLog "${FUNCNAME}(): Creating OpenGnsys config files." |
|---|
| 1796 | for dev in ${DEVICE[*]}; do |
|---|
| 1797 | if [ -n "${SERVERIP[i]}" ]; then |
|---|
| 1798 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 1799 | -e "s/DBUSER/$OPENGNSYS_DB_USER/g" \ |
|---|
| 1800 | -e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \ |
|---|
| 1801 | -e "s/DATABASE/$OPENGNSYS_DATABASE/g" \ |
|---|
| 1802 | $WORKDIR/opengnsys/admin/Sources/Services/ogAdmServer/ogAdmServer.cfg > $INSTALL_TARGET/etc/ogAdmServer-$dev.cfg |
|---|
| 1803 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 1804 | $WORKDIR/opengnsys/repoman/etc/ogAdmRepo.cfg.tmpl > $INSTALL_TARGET/etc/ogAdmRepo-$dev.cfg |
|---|
| 1805 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 1806 | -e "s/DBUSER/$OPENGNSYS_DB_USER/g" \ |
|---|
| 1807 | -e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \ |
|---|
| 1808 | -e "s/DATABASE/$OPENGNSYS_DATABASE/g" \ |
|---|
| 1809 | $WORKDIR/opengnsys/admin/Sources/Services/ogAdmAgent/ogAdmAgent.cfg > $INSTALL_TARGET/etc/ogAdmAgent-$dev.cfg |
|---|
| 1810 | CONSOLEURL="https://${SERVERIP[i]}/opengnsys" |
|---|
| 1811 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 1812 | -e "s/DBUSER/$OPENGNSYS_DB_USER/g" \ |
|---|
| 1813 | -e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \ |
|---|
| 1814 | -e "s/DATABASE/$OPENGNSYS_DATABASE/g" \ |
|---|
| 1815 | -e "s/OPENGNSYSURL/${CONSOLEURL//\//\\/}/g" \ |
|---|
| 1816 | $INSTALL_TARGET/www/controlacceso.php > $INSTALL_TARGET/www/controlacceso-$dev.php |
|---|
| 1817 | sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ |
|---|
| 1818 | -e "s/OPENGNSYSURL/${CONSOLEURL//\//\\/}/g" \ |
|---|
| 1819 | $WORKDIR/opengnsys/admin/Sources/Clients/ogAdmClient/ogAdmClient.cfg > $INSTALL_TARGET/client/etc/ogAdmClient-$dev.cfg |
|---|
| 1820 | if [ "$dev" == "$DEFAULTDEV" ]; then |
|---|
| 1821 | OPENGNSYS_CONSOLEURL="$CONSOLEURL" |
|---|
| 1822 | fi |
|---|
| 1823 | fi |
|---|
| 1824 | let i++ |
|---|
| 1825 | done |
|---|
| 1826 | ln -f $INSTALL_TARGET/etc/ogAdmServer-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmServer.cfg |
|---|
| 1827 | ln -f $INSTALL_TARGET/etc/ogAdmRepo-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmRepo.cfg |
|---|
| 1828 | ln -f $INSTALL_TARGET/etc/ogAdmAgent-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmAgent.cfg |
|---|
| 1829 | ln -f $INSTALL_TARGET/client/etc/ogAdmClient-$DEFAULTDEV.cfg $INSTALL_TARGET/client/etc/ogAdmClient.cfg |
|---|
| 1830 | ln -f $INSTALL_TARGET/www/controlacceso-$DEFAULTDEV.php $INSTALL_TARGET/www/controlacceso.php |
|---|
| 1831 | |
|---|
| 1832 | sed -e "s%__UDSRESTURL__%$UDS_REST_URL%g" \ |
|---|
| 1833 | -e "s%__UDSAUTH__%$UDS_AUTHENTICATOR%g" \ |
|---|
| 1834 | -e "s%__UDSUSER__%$UDS_USER%g" \ |
|---|
| 1835 | -e "s%__UDSPASS__%$UDS_PASS%g" \ |
|---|
| 1836 | <$INSTALL_TARGET/www/includes/uds.php |sponge $INSTALL_TARGET/www/includes/uds.php |
|---|
| 1837 | chmod 0640 $INSTALL_TARGET/www/includes/uds.php |
|---|
| 1838 | |
|---|
| 1839 | # Configuración del motor de clonación. |
|---|
| 1840 | # - Zona horaria del servidor. |
|---|
| 1841 | TZ=$(timedatectl status|awk -F"[:()]" '/Time.*zone/ {print $2}') |
|---|
| 1842 | cat << EOT >> $INSTALL_TARGET/client/etc/engine.cfg |
|---|
| 1843 | # OpenGnsys Server timezone. |
|---|
| 1844 | TZ="${TZ// /}" |
|---|
| 1845 | EOT |
|---|
| 1846 | |
|---|
| 1847 | # Revisar permisos generales. |
|---|
| 1848 | if [ -x $INSTALL_TARGET/bin/checkperms ]; then |
|---|
| 1849 | echoAndLog "${FUNCNAME}(): Checking permissions." |
|---|
| 1850 | OPENGNSYS_DIR="$INSTALL_TARGET" OPENGNSYS_USER="$OPENGNSYS_CLIENT_USER" APACHE_USER="$APACHE_RUN_USER" APACHE_GROUP="$APACHE_RUN_GROUP" checkperms |
|---|
| 1851 | fi |
|---|
| 1852 | |
|---|
| 1853 | # Evitar inicio de duplicado en Ubuntu 14.04 (Upstart y SysV Init). |
|---|
| 1854 | if [ -f /etc/init/${MYSQLSERV}.conf -a -n "$(which initctl 2>/dev/null)" ]; then |
|---|
| 1855 | service=$MYSQLSERV |
|---|
| 1856 | $DISABLESERVICE |
|---|
| 1857 | fi |
|---|
| 1858 | |
|---|
| 1859 | # Actualizar tokens de autenticación e iniciar los servicios. |
|---|
| 1860 | service="opengnsys" |
|---|
| 1861 | $ENABLESERVICE |
|---|
| 1862 | if [ -x $INSTALL_TARGET/bin/settoken ]; then |
|---|
| 1863 | echoAndLog "${FUNCNAME}(): Setting authentication tokens and starting OpenGnsys services." |
|---|
| 1864 | $INSTALL_TARGET/bin/settoken "$OPENGNSYS_DB_USER" |
|---|
| 1865 | $INSTALL_TARGET/bin/settoken -f |
|---|
| 1866 | else |
|---|
| 1867 | echoAndLog "${FUNCNAME}(): Starting OpenGnsys services." |
|---|
| 1868 | $STARTSERVICE |
|---|
| 1869 | fi |
|---|
| 1870 | } |
|---|
| 1871 | |
|---|
| 1872 | |
|---|
| 1873 | ##################################################################### |
|---|
| 1874 | ####### Función de resumen informativo de la instalación |
|---|
| 1875 | ##################################################################### |
|---|
| 1876 | |
|---|
| 1877 | function installationSummary() |
|---|
| 1878 | { |
|---|
| 1879 | local VERSIONFILE REVISION |
|---|
| 1880 | |
|---|
| 1881 | # Crear fichero de versión y revisión, si no existe. |
|---|
| 1882 | VERSIONFILE="$INSTALL_TARGET/doc/VERSION.json" |
|---|
| 1883 | [ -f $VERSIONFILE ] || echo '{ "project": "OpenGnsys" }' >$VERSIONFILE |
|---|
| 1884 | # Incluir datos de revisión, si se está instalando desde el repositorio |
|---|
| 1885 | # de código o si no está incluida en el fichero de versión. |
|---|
| 1886 | if [ $REMOTE -eq 1 ] || [ -z "$(jq -r '.release' $VERSIONFILE)" ]; then |
|---|
| 1887 | # Revisión: rAñoMesDía.Gitcommit (8 caracteres de fecha y 7 primeros de commit). |
|---|
| 1888 | RELEASE=$(curl -s "$API_URL/branches/$BRANCH" | jq -r '"r" + (.commit.commit.committer.date | split("-") | join("")[:8]) + "." + (.commit.sha[:7])' 2>/dev/null) |
|---|
| 1889 | # Obtener revisión para etiqueta de versión en vez de rama de código. |
|---|
| 1890 | [ -z "$RELEASE" ] && RELEASE=$(curl -s $(curl -s "$API_URL/tags" | jq -r ".[] | select(.name==\"$BRANCH\").commit.url" 2>/dev/null) | jq -r '"r" + (.commit.committer.date | split("-") | join("")[:8]) + "." + .sha[:7]' 2>/dev/null) |
|---|
| 1891 | jq ".release=\"$RELEASE\"" $VERSIONFILE | sponge $VERSIONFILE |
|---|
| 1892 | fi |
|---|
| 1893 | VERSION="$(jq -r '[.project, .version, .codename, .release] | join(" ")' $VERSIONFILE 2>/dev/null)" |
|---|
| 1894 | |
|---|
| 1895 | # Mostrar información. |
|---|
| 1896 | echo |
|---|
| 1897 | echoAndLog "OpenGnsys Installation Summary" |
|---|
| 1898 | echo "==============================" |
|---|
| 1899 | echoAndLog "Project version: $VERSION" |
|---|
| 1900 | echoAndLog "Installation directory: $INSTALL_TARGET" |
|---|
| 1901 | echoAndLog "Installation log file: $LOG_FILE" |
|---|
| 1902 | echoAndLog "Repository directory: $INSTALL_TARGET/images" |
|---|
| 1903 | echoAndLog "DHCP configuration directory: $DHCPCFGDIR" |
|---|
| 1904 | echoAndLog "TFTP configuration directory: $TFTPCFGDIR" |
|---|
| 1905 | echoAndLog "Installed ogLive client: $(oglivecli list | awk '{print $2}')" |
|---|
| 1906 | echoAndLog "Samba configuration directory: $SAMBACFGDIR" |
|---|
| 1907 | echoAndLog "Web Console URL: $OPENGNSYS_CONSOLEURL" |
|---|
| 1908 | echoAndLog "Web Console access data: entered by the user" |
|---|
| 1909 | if grep -q "^RUN_BTTRACK.*no" /etc/default/opengnsys; then |
|---|
| 1910 | echoAndLog "BitTorrent service is disabled." |
|---|
| 1911 | fi |
|---|
| 1912 | echo |
|---|
| 1913 | echoAndLog "Post-Installation Instructions:" |
|---|
| 1914 | echo "===============================" |
|---|
| 1915 | echoAndLog "You can improve server security by configuring firewall and SELinux," |
|---|
| 1916 | echoAndLog " running \"$INSTALL_TARGET/lib/security-config\" script as root." |
|---|
| 1917 | echoAndLog "It's strongly recommended to synchronize this server with an NTP server." |
|---|
| 1918 | echoAndLog "Review or edit all configuration files." |
|---|
| 1919 | echoAndLog "Insert DHCP configuration data and restart service." |
|---|
| 1920 | echoAndLog "Optional: If you want to use BURG as boot manager, run" |
|---|
| 1921 | echoAndLog " \"curl $DOWNLOADURL/burg.tgz -o $INSTALL_TARGET/client/lib/burg.tgz\" as root." |
|---|
| 1922 | echoAndLog "Optional: Log-in as Web Console admin user." |
|---|
| 1923 | echoAndLog " - Review default Organization data and assign access to users." |
|---|
| 1924 | echoAndLog "Log-in as Web Console organization user." |
|---|
| 1925 | echoAndLog " - Insert OpenGnsys data (labs, computers, menus, etc)." |
|---|
| 1926 | echo |
|---|
| 1927 | } |
|---|
| 1928 | |
|---|
| 1929 | |
|---|
| 1930 | |
|---|
| 1931 | ##################################################################### |
|---|
| 1932 | ####### Proceso de instalación de OpenGnsys |
|---|
| 1933 | ##################################################################### |
|---|
| 1934 | |
|---|
| 1935 | # Sólo ejecutable por usuario root |
|---|
| 1936 | if [ "$(whoami)" != 'root' ]; then |
|---|
| 1937 | echo "ERROR: this program must run under root privileges!!" |
|---|
| 1938 | exit 1 |
|---|
| 1939 | fi |
|---|
| 1940 | |
|---|
| 1941 | globalSetup $MY_BRANCH |
|---|
| 1942 | # Comprobar instalación previa. |
|---|
| 1943 | if cat $INSTALL_TARGET/doc/VERSION.* &>/dev/null; then |
|---|
| 1944 | echo "ERROR: OpenGnsys is already installed. Run \"$INSTALL_TARGET/lib/opengnsys_update.sh\" as root to update." |
|---|
| 1945 | exit 2 |
|---|
| 1946 | fi |
|---|
| 1947 | |
|---|
| 1948 | echoAndLog "OpenGnsys installation begins at $(date)" |
|---|
| 1949 | # Introducir datos de configuración y establecer variables globales. |
|---|
| 1950 | userData |
|---|
| 1951 | |
|---|
| 1952 | mkdir -p $WORKDIR |
|---|
| 1953 | pushd $WORKDIR |
|---|
| 1954 | |
|---|
| 1955 | # Detectar datos iniciales de auto-configuración del instalador. |
|---|
| 1956 | autoConfigure |
|---|
| 1957 | |
|---|
| 1958 | # Detectar parámetros de red y comprobar si hay conexión. |
|---|
| 1959 | getNetworkSettings |
|---|
| 1960 | if [ $? -ne 0 ]; then |
|---|
| 1961 | errorAndLog "Error reading default network settings." |
|---|
| 1962 | exit 1 |
|---|
| 1963 | fi |
|---|
| 1964 | |
|---|
| 1965 | # Detener servicios de OpenGnsys, si están activos previamente. |
|---|
| 1966 | [ -f /etc/init.d/opengnsys ] && /etc/init.d/opengnsys stop |
|---|
| 1967 | |
|---|
| 1968 | # Actualizar repositorios |
|---|
| 1969 | updatePackageList |
|---|
| 1970 | |
|---|
| 1971 | # Instalación de dependencias (paquetes de sistema operativo). |
|---|
| 1972 | declare -a notinstalled |
|---|
| 1973 | checkDependencies DEPENDENCIES notinstalled |
|---|
| 1974 | if [ $? -ne 0 ]; then |
|---|
| 1975 | installDependencies notinstalled |
|---|
| 1976 | if [ $? -ne 0 ]; then |
|---|
| 1977 | echoAndLog "Error while installing some dependeces, please verify your server installation before continue" |
|---|
| 1978 | exit 1 |
|---|
| 1979 | fi |
|---|
| 1980 | fi |
|---|
| 1981 | if [ -n "$INSTALLEXTRADEPS" ]; then |
|---|
| 1982 | echoAndLog "Installing extra dependencies" |
|---|
| 1983 | for (( i=0; i<${#INSTALLEXTRADEPS[*]}; i++ )); do |
|---|
| 1984 | eval ${INSTALLEXTRADEPS[i]} |
|---|
| 1985 | done |
|---|
| 1986 | fi |
|---|
| 1987 | |
|---|
| 1988 | # Detectar datos de auto-configuración después de instalar paquetes. |
|---|
| 1989 | autoConfigurePost |
|---|
| 1990 | |
|---|
| 1991 | # Arbol de directorios de OpenGnsys. |
|---|
| 1992 | createDirs ${INSTALL_TARGET} |
|---|
| 1993 | if [ $? -ne 0 ]; then |
|---|
| 1994 | errorAndLog "Error while creating directory paths!" |
|---|
| 1995 | exit 1 |
|---|
| 1996 | fi |
|---|
| 1997 | |
|---|
| 1998 | # Si es necesario, descarga el repositorio de código en directorio temporal |
|---|
| 1999 | if [ $REMOTE -eq 1 ]; then |
|---|
| 2000 | downloadCode $GIT_REPO |
|---|
| 2001 | if [ $? -ne 0 ]; then |
|---|
| 2002 | errorAndLog "Error while getting code from the repository" |
|---|
| 2003 | exit 1 |
|---|
| 2004 | fi |
|---|
| 2005 | else |
|---|
| 2006 | ln -fs "$(dirname $PROGRAMDIR)" opengnsys |
|---|
| 2007 | fi |
|---|
| 2008 | |
|---|
| 2009 | # TLS |
|---|
| 2010 | gatherCertsInfo |
|---|
| 2011 | if [ $? -ne 0 ]; then |
|---|
| 2012 | errorAndLog 'Not all required certificates have been provided, or privkey or DNS issues' |
|---|
| 2013 | exit 1 |
|---|
| 2014 | fi |
|---|
| 2015 | [ $TLS_DATA_CA_EXPIRY ] && genAllCerts ## el usuario no nos ha dado sus certificados: generamos unos |
|---|
| 2016 | installAllCerts |
|---|
| 2017 | [ $TLS_DATA_CA_EXPIRY ] && makeCommonNamesResolvable ## el usuario no nos ha dado sus certificados: configuramos resolución de nombres en /etc/hosts |
|---|
| 2018 | configureStunnel |
|---|
| 2019 | if [ $? -ne 0 ]; then |
|---|
| 2020 | errorAndLog 'Error while setting stunnel up' |
|---|
| 2021 | exit 1 |
|---|
| 2022 | fi |
|---|
| 2023 | |
|---|
| 2024 | # Compilar código fuente de los servicios de OpenGnsys. |
|---|
| 2025 | servicesCompilation |
|---|
| 2026 | if [ $? -ne 0 ]; then |
|---|
| 2027 | errorAndLog "Error while compiling OpenGnsys services" |
|---|
| 2028 | exit 1 |
|---|
| 2029 | fi |
|---|
| 2030 | |
|---|
| 2031 | # Copiar carpeta Interface entre administración y motor de clonación. |
|---|
| 2032 | copyInterfaceAdm |
|---|
| 2033 | if [ $? -ne 0 ]; then |
|---|
| 2034 | errorAndLog "Error while copying Administration Interface" |
|---|
| 2035 | exit 1 |
|---|
| 2036 | fi |
|---|
| 2037 | |
|---|
| 2038 | # Configuración de TFTP. |
|---|
| 2039 | tftpConfigure |
|---|
| 2040 | |
|---|
| 2041 | # Configuración de Samba. |
|---|
| 2042 | smbConfigure |
|---|
| 2043 | if [ $? -ne 0 ]; then |
|---|
| 2044 | errorAndLog "Error while configuring Samba server!" |
|---|
| 2045 | exit 1 |
|---|
| 2046 | fi |
|---|
| 2047 | |
|---|
| 2048 | # Configuración de Rsync. |
|---|
| 2049 | rsyncConfigure |
|---|
| 2050 | |
|---|
| 2051 | # Configuración ejemplo DHCP. |
|---|
| 2052 | dhcpConfigure |
|---|
| 2053 | if [ $? -ne 0 ]; then |
|---|
| 2054 | errorAndLog "Error while copying your dhcp server files!" |
|---|
| 2055 | exit 1 |
|---|
| 2056 | fi |
|---|
| 2057 | |
|---|
| 2058 | # Copiar ficheros de servicios OpenGnsys Server. |
|---|
| 2059 | copyServerFiles ${INSTALL_TARGET} |
|---|
| 2060 | if [ $? -ne 0 ]; then |
|---|
| 2061 | errorAndLog "Error while copying the server files!" |
|---|
| 2062 | exit 1 |
|---|
| 2063 | fi |
|---|
| 2064 | INSTVERSION=$(jq -r '.version' $INSTALL_TARGET/doc/VERSION.json) |
|---|
| 2065 | |
|---|
| 2066 | # Instalar base de datos de OpenGnsys Admin. |
|---|
| 2067 | isInArray notinstalled "mysql-server" || isInArray notinstalled "mariadb-server" |
|---|
| 2068 | if [ $? -eq 0 ]; then |
|---|
| 2069 | # Enable database manager (MySQL, if missing, MariaDB). |
|---|
| 2070 | service=$MYSQLSERV |
|---|
| 2071 | $ENABLESERVICE |
|---|
| 2072 | if [ $? != 0 ]; then |
|---|
| 2073 | service=$MARIADBSERV |
|---|
| 2074 | $ENABLESERVICE |
|---|
| 2075 | fi |
|---|
| 2076 | # Start database manager. |
|---|
| 2077 | $STARTSERVICE |
|---|
| 2078 | # Asignar clave del usuario "root". |
|---|
| 2079 | mysqlSetRootPassword "${MYSQL_ROOT_PASSWORD}" |
|---|
| 2080 | else |
|---|
| 2081 | # Si ya está instalado el gestor de bases de datos, obtener clave de "root". |
|---|
| 2082 | mysqlGetRootPassword |
|---|
| 2083 | fi |
|---|
| 2084 | |
|---|
| 2085 | # Copy MySQL configuration template |
|---|
| 2086 | cp $WORKDIR/opengnsys/server/etc/mysqld-og.cnf $MYSQLCFGDIR 2>/dev/null |
|---|
| 2087 | # Restart database manager. |
|---|
| 2088 | $STARTSERVICE |
|---|
| 2089 | |
|---|
| 2090 | mysqlTestConnection "${MYSQL_ROOT_PASSWORD}" |
|---|
| 2091 | if [ $? -ne 0 ]; then |
|---|
| 2092 | errorAndLog "Error while connection to mysql" |
|---|
| 2093 | exit 1 |
|---|
| 2094 | fi |
|---|
| 2095 | mysqlDbExists ${OPENGNSYS_DATABASE} |
|---|
| 2096 | if [ $? -ne 0 ]; then |
|---|
| 2097 | echoAndLog "Creating Web Console database" |
|---|
| 2098 | mysqlCreateDb ${OPENGNSYS_DATABASE} |
|---|
| 2099 | if [ $? -ne 0 ]; then |
|---|
| 2100 | errorAndLog "Error while creating Web Console database" |
|---|
| 2101 | exit 1 |
|---|
| 2102 | fi |
|---|
| 2103 | else |
|---|
| 2104 | echoAndLog "Web Console database exists, ommiting creation" |
|---|
| 2105 | fi |
|---|
| 2106 | |
|---|
| 2107 | mysqlCheckUserExists ${OPENGNSYS_DB_USER} |
|---|
| 2108 | if [ $? -ne 0 ]; then |
|---|
| 2109 | echoAndLog "Creating user in database" |
|---|
| 2110 | mysqlCreateAdminUserToDb ${OPENGNSYS_DATABASE} ${OPENGNSYS_DB_USER} "${OPENGNSYS_DB_PASSWD}" |
|---|
| 2111 | if [ $? -ne 0 ]; then |
|---|
| 2112 | errorAndLog "Error while creating database user" |
|---|
| 2113 | exit 1 |
|---|
| 2114 | fi |
|---|
| 2115 | |
|---|
| 2116 | fi |
|---|
| 2117 | |
|---|
| 2118 | mysqlCheckDbIsEmpty ${OPENGNSYS_DATABASE} |
|---|
| 2119 | if [ $? -eq 0 ]; then |
|---|
| 2120 | echoAndLog "Creating tables..." |
|---|
| 2121 | if [ -f $WORKDIR/$OPENGNSYS_DB_CREATION_FILE ]; then |
|---|
| 2122 | mysqlImportSqlFileToDb ${OPENGNSYS_DATABASE} $WORKDIR/$OPENGNSYS_DB_CREATION_FILE |
|---|
| 2123 | else |
|---|
| 2124 | errorAndLog "Unable to locate $WORKDIR/$OPENGNSYS_DB_CREATION_FILE!!" |
|---|
| 2125 | exit 1 |
|---|
| 2126 | fi |
|---|
| 2127 | else |
|---|
| 2128 | # Si existe fichero ogBDAdmin-VersLocal-VersRepo.sql; aplicar cambios. |
|---|
| 2129 | REPOVERSION=$(jq -r '.version' $WORKDIR/opengnsys/doc/VERSION.json) |
|---|
| 2130 | OPENGNSYS_DB_UPDATE_FILE="opengnsys/admin/Database/$OPENGNSYS_DATABASE-$INSTVERSION-$REPOVERSION.sql" |
|---|
| 2131 | if [ -f $WORKDIR/$OPENGNSYS_DB_UPDATE_FILE ]; then |
|---|
| 2132 | echoAndLog "Updating tables from version $INSTVERSION to $REPOVERSION" |
|---|
| 2133 | mysqlImportSqlFileToDb ${OPENGNSYS_DATABASE} $WORKDIR/$OPENGNSYS_DB_UPDATE_FILE |
|---|
| 2134 | else |
|---|
| 2135 | echoAndLog "Database unchanged." |
|---|
| 2136 | fi |
|---|
| 2137 | fi |
|---|
| 2138 | # Eliminar fichero temporal con credenciales de acceso a MySQL. |
|---|
| 2139 | rm -f $TMPMYCNF |
|---|
| 2140 | |
|---|
| 2141 | # Copiando páqinas web. |
|---|
| 2142 | installWebFiles |
|---|
| 2143 | # Configurar variables de PHP |
|---|
| 2144 | configurePHPvars $TLS_DATA_OGADMSRV_CN $TLS_DATA_OGADMSRV_LISTEN_PORT |
|---|
| 2145 | # Descargar/descomprimir archivos descargables. |
|---|
| 2146 | installDownloadableFiles |
|---|
| 2147 | # Generar páqinas web de documentación de la API |
|---|
| 2148 | makeDoxygenFiles |
|---|
| 2149 | |
|---|
| 2150 | # Creando configuración de Apache. |
|---|
| 2151 | installWebConsoleApacheConf $INSTALL_TARGET $APACHECFGDIR |
|---|
| 2152 | if [ $? -ne 0 ]; then |
|---|
| 2153 | errorAndLog "Error configuring Apache for OpenGnsys Admin" |
|---|
| 2154 | exit 1 |
|---|
| 2155 | fi |
|---|
| 2156 | |
|---|
| 2157 | popd |
|---|
| 2158 | |
|---|
| 2159 | # Crear la estructura de los accesos al servidor desde el cliente (shared) |
|---|
| 2160 | copyClientFiles |
|---|
| 2161 | if [ $? -ne 0 ]; then |
|---|
| 2162 | errorAndLog "Error creating client structure" |
|---|
| 2163 | fi |
|---|
| 2164 | |
|---|
| 2165 | # Crear certificado para firmar cargadores |
|---|
| 2166 | createCerts |
|---|
| 2167 | |
|---|
| 2168 | # Crear la estructura del cliente de OpenGnsys. |
|---|
| 2169 | for i in $OGLIVE; do |
|---|
| 2170 | if ! clientCreate "$i"; then |
|---|
| 2171 | errorAndLog "Error creating client $i" |
|---|
| 2172 | exit 1 |
|---|
| 2173 | fi |
|---|
| 2174 | done |
|---|
| 2175 | |
|---|
| 2176 | # Configuración de servicios de OpenGnsys |
|---|
| 2177 | openGnsysConfigure |
|---|
| 2178 | |
|---|
| 2179 | # Mostrar sumario de la instalación e instrucciones de post-instalación. |
|---|
| 2180 | installationSummary |
|---|
| 2181 | |
|---|
| 2182 | rm -rf $WORKDIR |
|---|
| 2183 | echoAndLog "OpenGnsys installation finished at $(date)" |
|---|
| 2184 | exit 0 |
|---|
| 2185 | |
|---|
