mirror of https://github.com/apache/cloudstack.git
161 lines
4.5 KiB
Bash
161 lines
4.5 KiB
Bash
#!/bin/bash
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
set -e
|
|
set -x
|
|
|
|
CLOUDSTACK_RELEASE=4.11.0
|
|
|
|
function configure_apache2() {
|
|
# Enable ssl, rewrite and auth
|
|
a2enmod ssl rewrite auth_basic auth_digest
|
|
a2ensite default-ssl
|
|
# Backup stock apache configuration since we may modify it in Secondary Storage VM
|
|
cp /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/default.orig
|
|
cp /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-available/default-ssl.orig
|
|
sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf
|
|
}
|
|
|
|
function install_cloud_scripts() {
|
|
# ./cloud_scripts/ has been put there by ../../cloud_scripts_shar_archive.sh
|
|
rsync -av ./cloud_scripts/ /
|
|
chmod +x /opt/cloud/bin/* \
|
|
/root/{clearUsageRules.sh,reconfigLB.sh,monitorServices.py} \
|
|
/etc/init.d/{cloud-early-config,cloud-passwd-srvr,postinit} \
|
|
/etc/profile.d/cloud.sh
|
|
|
|
cat > /etc/systemd/system/cloud-early-config.service << EOF
|
|
[Unit]
|
|
Description=cloud-early-config: configure according to cmdline
|
|
DefaultDependencies=no
|
|
After=local-fs.target apparmor.service systemd-sysctl.service systemd-modules-load.service
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/etc/init.d/cloud-early-config start
|
|
ExecStop=/etc/init.d/cloud-early-config stop
|
|
RemainAfterExit=true
|
|
TimeoutStartSec=5min
|
|
|
|
EOF
|
|
|
|
cat > /etc/systemd/system/cloud.service << EOF
|
|
[Unit]
|
|
Description=cloud: startup cloud service
|
|
After=cloud-early-config.service network.target local-fs.target
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
WorkingDirectory=/usr/local/cloud/systemvm
|
|
ExecStart=/usr/local/cloud/systemvm/_run.sh
|
|
Restart=always
|
|
RestartSec=5
|
|
EOF
|
|
|
|
cat > /etc/systemd/system/cloud-passwd-srvr.service << EOF
|
|
[Unit]
|
|
Description=cloud-passwd-srvr: cloud password server
|
|
After=network.target local-fs.target
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|
|
[Service]
|
|
Type=forking
|
|
ExecStart=/etc/init.d/cloud-passwd-srvr start
|
|
ExecStop=/etc/init.d/cloud-passwd-srvr stop
|
|
RemainAfterExit=true
|
|
TimeoutStartSec=5min
|
|
EOF
|
|
|
|
cat > /etc/systemd/system/postinit.service << EOF
|
|
[Unit]
|
|
Description=cloud post-init service
|
|
After=cloud-early-config.service network.target local-fs.target
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|
|
[Service]
|
|
Type=forking
|
|
ExecStart=/etc/init.d/postinit start
|
|
ExecStop=/etc/init.d/postinit stop
|
|
RemainAfterExit=true
|
|
TimeoutStartSec=5min
|
|
EOF
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable cloud-early-config
|
|
systemctl disable cloud-passwd-srvr
|
|
systemctl disable cloud
|
|
}
|
|
|
|
function do_signature() {
|
|
mkdir -p /var/cache/cloud/ /usr/share/cloud/
|
|
(cd ./cloud_scripts/; tar -cvf - * | gzip > /usr/share/cloud/cloud-scripts.tgz)
|
|
md5sum /usr/share/cloud/cloud-scripts.tgz | awk '{print $1}' > /var/cache/cloud/cloud-scripts-signature
|
|
echo "Cloudstack Release $CLOUDSTACK_RELEASE $(date)" > /etc/cloudstack-release
|
|
}
|
|
|
|
function configure_strongswan() {
|
|
# change the charon stroke timeout from 3 minutes to 30 seconds
|
|
sed -i "s/# timeout = 0/timeout = 30000/" /etc/strongswan.d/charon/stroke.conf
|
|
}
|
|
|
|
function configure_services() {
|
|
mkdir -p /var/www/html
|
|
mkdir -p /opt/cloud/bin
|
|
mkdir -p /var/cache/cloud
|
|
mkdir -p /usr/share/cloud
|
|
mkdir -p /usr/local/cloud
|
|
|
|
# Fix haproxy directory issue
|
|
mkdir -p /var/lib/haproxy
|
|
|
|
install_cloud_scripts
|
|
do_signature
|
|
|
|
systemctl daemon-reload
|
|
systemctl disable xl2tpd
|
|
|
|
# Disable services that slow down boot and are not used anyway
|
|
systemctl disable x11-common
|
|
systemctl disable console-setup
|
|
systemctl disable haproxy
|
|
systemctl disable apache2
|
|
systemctl disable dnsmasq
|
|
|
|
# Hyperv kvp daemon - 64bit only
|
|
local arch=`dpkg --print-architecture`
|
|
if [ "${arch}" == "amd64" ]; then
|
|
systemctl disable hv_kvp_daemon
|
|
fi
|
|
systemctl disable radvd
|
|
|
|
configure_apache2
|
|
configure_strongswan
|
|
}
|
|
|
|
return 2>/dev/null || configure_services
|