mirror of
https://src.koozali.org/infra/smeserver-koji.git
synced 2024-11-22 01:27:29 +01:00
flesh out install script
This commit is contained in:
parent
cace4ed749
commit
f1811bc44d
@ -104,10 +104,10 @@ mkdir -p /etc/ca-certs/trusted
|
|||||||
# Generate the koji component certificates and the admin certificate and generate a PKCS12 user certificate (for web browser)
|
# Generate the koji component certificates and the admin certificate and generate a PKCS12 user certificate (for web browser)
|
||||||
cp "$SCRIPT_DIR"/gencert.sh "$KOJI_PKI_DIR"
|
cp "$SCRIPT_DIR"/gencert.sh "$KOJI_PKI_DIR"
|
||||||
pushd "$KOJI_PKI_DIR"
|
pushd "$KOJI_PKI_DIR"
|
||||||
./gencert.sh kojiweb "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=kojiweb/CN=$KOJI_HUB_FQDN"
|
gencert.sh kojiweb "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=kojiweb/CN=$KOJI_HUB_FQDN"
|
||||||
./gencert.sh kojihub "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=kojihub/CN=$KOJI_HUB_FQDN"
|
gencert.sh kojihub "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=kojihub/CN=$KOJI_HUB_FQDN"
|
||||||
./gencert.sh kojiadmin "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=$ORG_UNIT/CN=kojiadmin"
|
gencert.sh kojiadmin "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=$ORG_UNIT/CN=kojiadmin"
|
||||||
./gencert.sh kojira "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=$ORG_UNIT/CN=kojira"
|
gencert.sh kojira "/C=$COUNTRY_CODE/ST=$STATE/L=$LOCATION/O=$ORGANIZATION/OU=$ORG_UNIT/CN=kojira"
|
||||||
popd
|
popd
|
||||||
|
|
||||||
# Copy certificates into ~/.koji for kojiadmin
|
# Copy certificates into ~/.koji for kojiadmin
|
||||||
|
@ -1,21 +1,94 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
|
for param in $1 $2 $3 $4 $5 $6; do
|
||||||
|
if [ $param ] ; then
|
||||||
|
case $param in
|
||||||
|
local )
|
||||||
|
GITEAUser=${local_USER}
|
||||||
|
GITEAACCESSTOKEN=${local_GITEAACCESSTOKEN}
|
||||||
|
GITEAHOST=${local_GITEAHOST}
|
||||||
|
;;
|
||||||
|
debug )
|
||||||
|
DEBUG=true ;;
|
||||||
|
noisy )
|
||||||
|
NOISY=true ;;
|
||||||
|
* )
|
||||||
|
EXTRAPARAMS=$EXTRAPARAMS" "$param ;;
|
||||||
|
esac
|
||||||
|
else
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ $DEBUG ] ; then
|
||||||
set -xe
|
set -xe
|
||||||
SCRIPT_DIR="$(dirname "$(realpath "$0")")"
|
else
|
||||||
|
set -e
|
||||||
|
fi
|
||||||
|
|
||||||
|
# pull down the deploy scripts
|
||||||
|
SCRIPT_GIT="https://src.koozali.org/smedev/smeserver-koji/raw/branch/master/koji-setup"
|
||||||
|
SCRIPT_DIR="$(echo ~)/bin"
|
||||||
|
mkdir -p $SCRIPT_DIR
|
||||||
|
curl $SCRIPT_GIT/gencert.sh > $SCRIPT_DIR/gencert.sh
|
||||||
|
curl $SCRIPT_GIT/deploy-koji.sh > $SCRIPT_DIR/deploy-koji.sh
|
||||||
|
curl $SCRIPT_GIT/bootstrap-build.sh > $SCRIPT_DIR/bootstrap-build.sh
|
||||||
|
|
||||||
|
# ask for required parameters (ssh settings and build server FQDN)
|
||||||
KOJI_HUB_FQDN="$(hostname -f)"
|
KOJI_HUB_FQDN="$(hostname -f)"
|
||||||
|
while true ; do
|
||||||
|
read -n 2 -p "Country Code (eg, US) " COUNTRY_CODE
|
||||||
|
if [ ${#COUNTRY_CODE} ne 2 ] ; then
|
||||||
|
echo "You must enter a 2 character country code"
|
||||||
|
else
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
while true ; do
|
||||||
|
read -p "State (eg. Ohio) " STATE
|
||||||
|
if [ $STATE ] ; then break ; else echo "State MUST be entered" ; fi
|
||||||
|
done
|
||||||
|
while true ; do
|
||||||
|
read -p "City (eg. Columbus) " LOCATION
|
||||||
|
if [ $LOCATION ] ; then break ; else echo "City MUST be entered" ; fi
|
||||||
|
done
|
||||||
|
while true ; do
|
||||||
|
read -p "Organisation (eg. Koozali) " ORGANIZATION
|
||||||
|
if [ $ORGANIZATION ] ; then break ; else echo "Organization MUST be entered" ; fi
|
||||||
|
done
|
||||||
|
while true ; do
|
||||||
|
read -p "Org Unit (eg. Koji) " ORG_UNIT
|
||||||
|
if [ $ORG_UNIT ] ; then break ; else echo "Organizational Unit MUST be entered" ; fi
|
||||||
|
done
|
||||||
|
read -p "Build server FQDN (will default to hub FQDN '$KOJI_HUB_FQDN' if left blank) " KOJI_BUILD_FQDN
|
||||||
|
if [ $KOJI_BUILD_FQDN ] ; then
|
||||||
|
echo "$KOJI_BUILD_FQDN will be made a Koji Build server"
|
||||||
|
break
|
||||||
|
else
|
||||||
|
KOJI_BUILD_FQDN=$KOJI_HUB_FQDN
|
||||||
|
echo "All-in-one: Hub will now be a build server as well"
|
||||||
|
fi
|
||||||
|
|
||||||
cat > $SCRIPT_DIR/parameters.sh <<- EOT
|
# create the parameter scripts used by deploy scripts
|
||||||
|
cat > $SCRIPT_DIR/globals.sh <<- EOT
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
## GLOBALS
|
# Copyright (C) 2019 Intel Corporation
|
||||||
|
# SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
|
#### START DO NOT EDIT ####
|
||||||
export POSTGRES_USER=postgres
|
export POSTGRES_USER=postgres
|
||||||
export POSTGRES_DEFAULT_DIR=/var/lib/pgsql
|
export POSTGRES_DEFAULT_DIR=/var/lib/pgsql
|
||||||
export HTTPD_USER=apache
|
export HTTPD_USER=apache
|
||||||
export HTTPD_DOCUMENT_ROOT=/var/www/html
|
export HTTPD_DOCUMENT_ROOT=/var/www/html
|
||||||
export KOJI_PKI_DIR=/etc/pki/koji
|
export KOJI_PKI_DIR=/etc/pki/koji
|
||||||
|
#### END DO NOT EDIT
|
||||||
|
EOT
|
||||||
|
|
||||||
|
cat > $SCRIPT_DIR/parameters.sh <<- EOT
|
||||||
|
#!/bin/bash
|
||||||
## KOJI RPM BUILD AND TRACKER
|
## KOJI RPM BUILD AND TRACKER
|
||||||
export KOJI_DIR=/mnt/koji
|
export KOJI_DIR=/mnt/koji
|
||||||
export KOJI_HUB_FQDN="$KOJI_HB_FQDN"
|
export KOJI_HUB_FQDN="$KOJI_HUB_FQDN"
|
||||||
export KOJI_BUILD_FQDN="$KOJI_BUILD_FQDN"
|
export KOJI_BUILD_FQDN="$KOJI_BUILD_FQDN"
|
||||||
export KOJI_URL=http://"$KOJI_HUB_FQDN"
|
export KOJI_URL=http://"$KOJI_HUB_FQDN"
|
||||||
export KOJID_CAPACITY=16
|
export KOJID_CAPACITY=16
|
||||||
@ -36,3 +109,34 @@ export EXTERNAL_REPO=http://mirrorlist.centos.org/releases/10/smeos/
|
|||||||
## POSTGRESQL DATABASE
|
## POSTGRESQL DATABASE
|
||||||
export POSTGRES_DIR=/var/lib/pgsql
|
export POSTGRES_DIR=/var/lib/pgsql
|
||||||
EOT
|
EOT
|
||||||
|
|
||||||
|
# deploy thecentral koji components
|
||||||
|
deploy-koji.sh
|
||||||
|
|
||||||
|
# if there is a separate koji builder deploy that
|
||||||
|
if [ $KOJI_BUILD_FQDN ne $KOJI_HUB_FQDN ] ; then
|
||||||
|
# add nfs share for koji files direcory
|
||||||
|
deploy-koji-nfs-server.sh
|
||||||
|
# create a ssh key and add to authorized keys on build server
|
||||||
|
mkdir -p ~/.ssh
|
||||||
|
ssh-keygen -t rsa -f /root/.ssh/id_rsa -N ""
|
||||||
|
ssh-copy-id -i ~/.ssh/id_rsa.pub $KOJI_BUILD_FQDN
|
||||||
|
# copy across the ssl keys
|
||||||
|
ssh root@$KOJI_BUILD_FQDN mkdir $KOJI_PKI_DIR
|
||||||
|
scp $KOJI_PKI_DIR/$KOJI_BUILD_FQDN.pem root@$KOJI_BUILD_FQDN:$KOJI_PKI_DIR/.
|
||||||
|
scp $KOJI_PKI_DIR/koji_ca_cert.crt root@$KOJI_BUILD_FQDN:$KOJI_PKI_DIR/.
|
||||||
|
# copy across the parameter files
|
||||||
|
ssh root@$KOJI_BUILD_FQDN
|
||||||
|
scp $SCRIPT_DIR/globals.sh root@$KOJI_BUILD_FQDN:$SCRIPT_DIR/.
|
||||||
|
scp $SCRIPT_DIR/parameters.sh root@$KOJI_BUILD_FQDN:$SCRIPT_DIR/.
|
||||||
|
# pull down the required scripts
|
||||||
|
ssh root@$KOJI_BUILD_FQDN curl $SCRIPT_GIT/deploy-koji-nfs-client.sh > $SCRIPT_DIR/.
|
||||||
|
ssh root@$KOJI_BUILD_FQDN curl $SCRIPT_GIT/deploy-koji-builder.sh > $SCRIPT_DIR/.
|
||||||
|
# connect to nfs share
|
||||||
|
ssh root@$KOJI_BUILD_FQDN deploy-koji-nfs-client.sh
|
||||||
|
# deploy koji builder
|
||||||
|
ssh root@$KOJI_BUILD_FQDN deploy-koji-builder.sh
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
bootstrap-build.sh
|
Loading…
Reference in New Issue
Block a user