mirror of
https://github.com/YunoHost/yunohost_demo.git
synced 2024-09-03 19:56:44 +02:00
119 lines
3.9 KiB
Bash
Executable file
119 lines
3.9 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# Installe LXC et les paramètres réseaux avant de procéder au build.
|
|
# !!! Ce script est conçu pour être exécuté par l'user root.
|
|
|
|
# Récupère le dossier du script
|
|
if [ "${0:0:1}" == "/" ]; then script_dir="$(dirname "$0")"; else script_dir="$PWD/$(dirname "$0" | cut -d '.' -f2)"; fi
|
|
|
|
LOG=$(cat "$script_dir/demo_lxc_build.sh" | grep LOG= | cut -d '=' -f2)
|
|
LOG_BUILD_LXC="$script_dir/$LOG"
|
|
LXC_NAME1=$(cat "$script_dir/demo_lxc_build.sh" | grep LXC_NAME1= | cut -d '=' -f2)
|
|
LXC_NAME2=$(cat "$script_dir/demo_lxc_build.sh" | grep LXC_NAME2= | cut -d '=' -f2)
|
|
PLAGE_IP=$(cat "$script_dir/demo_lxc_build.sh" | grep PLAGE_IP= | cut -d '=' -f2)
|
|
IP_LXC1=$(cat "$script_dir/demo_lxc_build.sh" | grep IP_LXC1= | cut -d '=' -f2)
|
|
IP_LXC2=$(cat "$script_dir/demo_lxc_build.sh" | grep IP_LXC2= | cut -d '=' -f2)
|
|
|
|
# Check root
|
|
CHECK_ROOT=$EUID
|
|
if [ -z "$CHECK_ROOT" ];then CHECK_ROOT=0;fi
|
|
if [ $CHECK_ROOT -eq 0 ]
|
|
then # $EUID est vide sur une exécution avec sudo. Et vaut 0 pour root
|
|
echo "Le script ne doit pas être exécuté avec les droits root"
|
|
exit 1
|
|
fi
|
|
|
|
read -p "Indiquer le nom de domaine du serveur de demo: " DOMAIN
|
|
echo "$DOMAIN" > "$script_dir/domain.ini"
|
|
|
|
# Créer le dossier de log
|
|
sudo mkdir -p $(dirname $LOG_BUILD_LXC)
|
|
|
|
echo "> Update et install lxc lxctl" | tee "$LOG_BUILD_LXC"
|
|
sudo apt-get update >> "$LOG_BUILD_LXC" 2>&1
|
|
sudo apt-get install -y lxc lxctl >> "$LOG_BUILD_LXC" 2>&1
|
|
|
|
echo "> Autoriser l'ip forwarding, pour router vers la machine virtuelle." | tee -a "$LOG_BUILD_LXC"
|
|
echo "net.ipv4.ip_forward=1" | sudo tee /etc/sysctl.d/lxc_demo.conf >> "$LOG_BUILD_LXC" 2>&1
|
|
sudo sysctl -p /etc/sysctl.d/lxc_demo.conf >> "$LOG_BUILD_LXC" 2>&1
|
|
|
|
echo "> Ajoute un brige réseau pour la machine virtualisée" | tee -a "$LOG_BUILD_LXC"
|
|
echo | sudo tee /etc/network/interfaces.d/lxc_demo <<EOF >> "$LOG_BUILD_LXC" 2>&1
|
|
auto lxc_demo
|
|
iface lxc_demo inet static
|
|
address $PLAGE_IP.1/24
|
|
bridge_ports none
|
|
bridge_fd 0
|
|
bridge_maxwait 0
|
|
EOF
|
|
|
|
echo "> Active le bridge réseau" | tee -a "$LOG_BUILD_LXC"
|
|
sudo ifup lxc_demo --interfaces=/etc/network/interfaces.d/lxc_demo >> "$LOG_BUILD_LXC" 2>&1
|
|
|
|
echo "> Mise en place de la connexion ssh vers l'invité." | tee -a "$LOG_BUILD_LXC"
|
|
if [ -e $HOME/.ssh/$LXC_NAME1 ]; then
|
|
rm -f $HOME/.ssh/$LXC_NAME1 $HOME/.ssh/$LXC_NAME1.pub
|
|
ssh-keygen -f $HOME/.ssh/known_hosts -R $IP_LXC1
|
|
ssh-keygen -f $HOME/.ssh/known_hosts -R $IP_LXC2
|
|
fi
|
|
ssh-keygen -t dsa -f $HOME/.ssh/$LXC_NAME1 -P '' >> "$LOG_BUILD_LXC" 2>&1
|
|
|
|
echo | tee -a $HOME/.ssh/config <<EOF >> "$LOG_BUILD_LXC" 2>&1
|
|
# ssh $LXC_NAME1
|
|
Host $LXC_NAME1
|
|
Hostname $IP_LXC1
|
|
User ssh_demo
|
|
IdentityFile $HOME/.ssh/$LXC_NAME1
|
|
Host $LXC_NAME2
|
|
Hostname $IP_LXC2
|
|
User ssh_demo
|
|
IdentityFile $HOME/.ssh/$LXC_NAME1
|
|
# End ssh $LXC_NAME1
|
|
EOF
|
|
|
|
echo "> Mise en place du reverse proxy et du load balancing" | tee -a "$LOG_BUILD_LXC"
|
|
echo | sudo tee /etc/nginx/conf.d/$DOMAIN.conf <<EOF >> "$LOG_BUILD_LXC" 2>&1
|
|
upstream $DOMAIN {
|
|
server $IP_LXC1:443 ;
|
|
server $IP_LXC2:443 ;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name $DOMAIN;
|
|
|
|
if (\$scheme = http) {
|
|
rewrite ^ https://\$server_name\$request_uri? permanent;
|
|
}
|
|
|
|
access_log /var/log/nginx/$DOMAIN-access.log;
|
|
error_log /var/log/nginx/$DOMAIN-error.log;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
server_name $DOMAIN;
|
|
|
|
location / {
|
|
proxy_pass https://$DOMAIN;
|
|
proxy_redirect off;
|
|
proxy_set_header Host \$host;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Host \$server_name;
|
|
}
|
|
|
|
access_log /var/log/nginx/$DOMAIN-access.log;
|
|
error_log /var/log/nginx/$DOMAIN-error.log;
|
|
}
|
|
EOF
|
|
|
|
sudo service nginx reload
|
|
|
|
echo "\nLe serveur est prêt à déployer les conteneurs de demo."
|
|
echo "Exécutez le script demo_lxc_build.sh pour créer les conteneurs et mettre en place la demo."
|
|
# Déploie les conteneurs de demo
|
|
# "$script_dir/demo_lxc_build.sh"
|