X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=vm_hosted;h=b4a73b51007b89399331cad3f7d4fef991a08e2f;hb=517dfa12da0aee0c546f21166f488dc19f88c2b5;hp=2660859e6208c5c91f1ae140709b1a75b787d1ca;hpb=396beaa24164f1a309a2b147098538b9afdbf306;p=lhc%2Fateliers.git diff --git a/vm_hosted b/vm_hosted index 2660859..b4a73b5 100755 --- a/vm_hosted +++ b/vm_hosted @@ -490,6 +490,126 @@ rule_initramfs_configure () { # NOTE: clefs générées par Debian sudo update-initramfs -u } +rule_gitolite_configure () { + local user=git + sudo debconf-set-selections <<-EOF + gitolite gitolite/gituser string $user + gitolite gitolite/adminkey string + gitolite gitolite/gitdir string /home/$user + EOF + rule apt_get_install gitolite + getent passwd "$user" >/dev/null || + sudo adduser \ + --disabled-password \ + --group \ + --shell /bin/bash \ + --system \ + "$user" + sudo chfn --full-name "$user" "$user" + eval local home\; home="~$user" + sudo install -d -m 770 -o "$user" -g "$user" \ + /etc/gitolite \ + "$home"/etc \ + "$home"/etc/ssh \ + "$home"/pub \ + "$home"/log \ + "$home"/log/gitolite \ + "$home"/log/gitolite/perf + sudo ln -fns /etc/gitolite "$home"/etc/gitolite + sudo ln -fns etc/gitolite/gitolite.rc "$home"/.gitolite.rc + sudo ln -fns etc/ssh "$home"/.ssh + sudo install -m 770 -o "$user" -g "$user" /dev/stdin \ + "$home"/etc/gitolite/gitolite.rc <<-EOF + #\$ADMIN_POST_UPDATE_CHAINS_TO = "hooks/post-update.secondary"; + #\$BIG_INFO_CAP = 20; + #\$ENV{GL_SLAVES} = 'gitolite@server2 gitolite@server3'; + # NOTE: Please use single quotes, not double quotes. + #\$GITWEB_URI_ESCAPE = 0; + \$GIT_PATH = ""; + #\$GL_ADC_PATH = ""; + \$GL_ADMINDIR = \$ENV{HOME} . "/etc/gitolite"; + #\$GL_ALL_INCLUDES_SPECIAL = 0; + #\$GL_ALL_READ_ALL = 0; + \$GL_BIG_CONFIG = 0; + \$GL_CONF = "\$GL_ADMINDIR/conf/gitolite.conf"; + \$GL_CONF_COMPILED = "\$GL_ADMINDIR/conf/gitolite.conf.pm"; + #\$GL_GET_MEMBERSHIPS_PGM = "/usr/local/bin/expand-ldap-user-to-groups" + \$GL_GITCONFIG_KEYS = "hooks\\..* repo\\..*"; + #\$GL_HOSTNAME = "git.$vm_domainname"; + # NOTE: read doc/mirroring.mkd COMPLETELY before setting this. + #\$GL_HTTP_ANON_USER = "mob"; + \$GL_KEYDIR = "\$GL_ADMINDIR/keydir"; + \$GL_LOGT = \$ENV{HOME} . "/log/gitolite/%y-%m-%d.log"; + #\$GL_NICE_VALUE = 0; + \$GL_NO_CREATE_REPOS = 0; + \$GL_NO_DAEMON_NO_GITWEB = 0; + \$GL_NO_SETUP_AUTHKEYS = 0; + \$GL_PACKAGE_CONF = "/usr/share/gitolite/conf"; + \$GL_PACKAGE_HOOKS = "/usr/share/gitolite/hooks"; + #\$GL_PERFLOGT = \$ENV{HOME} . "/log/gitolite/perf/%y-%m-%d.log"; + #\$GL_REF_OR_FILENAME_PATT = qr(^[0-9a-zA-Z][0-9a-zA-Z._\\@/+ :,-]*\$); + \$GL_SITE_INFO = "git.$vm_domainname"; + #\$GL_SLAVE_MODE = 0; + \$GL_WILDREPOS = 0; + #\$GL_WILDREPOS_DEFPERMS = 'R @all'; + \$GL_WILDREPOS_PERM_CATS = "READERS WRITERS"; + \$HTPASSWD_FILE = ""; + \$PROJECTS_LIST = \$ENV{HOME} . "/projects.list"; + \$REPO_BASE = "pub"; + \$REPO_UMASK = 0007; + \$RSYNC_BASE = ""; + \$SVNSERVE = ""; + #\$UPDATE_CHAINS_TO = "hooks/update.secondary"; + #\$WEB_INTERFACE = "gitweb"; + 1; + EOF + sudo install -m 770 -o "$user" -g "$user" /dev/stdin \ + "$home"/etc/gitweb/gitweb.conf <<-EOF + \$commit_oneline_message_width = 70; + \$default_projects_order = 'age'; + \$default_text_plain_charset = 'UTF-8'; + @diff_opts = (); + \$favicon = "img/git-favicon.png"; + \$git_temp = "/run/shm/gitweb"; + \$home_footer = "/etc/gitweb/cgi/home-footer.cgi.inc"; + \$home_header = "/etc/gitweb/cgi/home-header.cgi.inc"; + \$home_link = "/"; + \$home_link_str = 'dépôts'; + \$home_th_age = 'activité'; + \$home_th_descr = 'description'; + \$home_th_owner = 'contact'; + \$home_th_project = 'dépôt'; + \$javascript = "js/gitweb.js"; + \$logo = "img/git-logo.png"; + \$my_uri = ""; + \$projectroot = "../git"; + \$projects_list = "/etc/gitolite/projects.list"; + \$projects_list_description_width = 42; + \$projects_list_owner_width = 15; + \$search_str = "Filtre :"; + \$site_footer = "/home/fai/pub/www/git.autogeree.net/cgi/site-footer.bin"; + \$site_header = undef; + \$site_name = "git.$vm_domainname"; + \$space_to_nbsp = 0; + @stylesheets = ("css/gitweb.css");# + \$untabify_tabstop = 2; + EOF + sudo install -m 600 -o "$user" -g "$user" \ + "$tool"/var/pub/ssh/"$user".key \ + "$home"/etc/ssh/"$user".pub + sudo -u "$user" \ + GL_RC="$home"/etc/gitolite/gitolite.rc \ + GIT_AUTHOR_NAME="$user" \ + gl-setup -q "$home"/etc/ssh/"$user".pub "$user" + local d + for d in doc logs src + do test ! -d "$home"/etc/gitolite/"$d" || + rmdir "$home"/etc/gitolite/"$d" + done + rule apt_get_install gitweb highlight + #sudo sv restart spawn-fcgi.git.80.git.heureux-cyclage.org + #sudo sv restart git-daemon.git.9418 + } rule_locale_configure () { sudo debconf-set-selections <<-EOF locales locales/default_environment_locale select None @@ -540,6 +660,10 @@ rule_login_configure () { # Xen hypervisor console hvc:2345:respawn:/sbin/getty 38400 hvc0 #xvc:2345:respawn:/sbin/getty 38400 xvc0 + + #-- runit begin + SV:123456:respawn:/usr/sbin/runsvdir-start + #-- runit end EOF sudo install -m 644 -o root -g root /dev/stdin /etc/login.defs <<-EOF MAIL_DIR /var/mail @@ -600,6 +724,10 @@ rule_mail_configure () { rule procmail_configure rule dovecot_configure } +rule_mysql_configure () { + rule apt_get_install mysql-server-5.5 + sudo service mysql restart + } rule_network_configure () { sudo install -m 644 -o root -g root /dev/stdin /etc/hostname <<-EOF $vm @@ -961,6 +1089,10 @@ rule_postfix_configure () { sudo postmap hash:/etc/postfix/$vm_domainname/virtual_alias sudo service postfix restart } +rule_postgresql_configure () { + rule apt_get_install postgresql-9.1 + sudo service postgresql restart + } rule_openerp_configure () { sudo install -m 660 -o root -g root /dev/stdin /etc/apt/sources.list.d/openerp.list <<-EOF deb http://nightly.openerp.com/trunk/nightly/deb/ ./ @@ -983,6 +1115,34 @@ rule_procmail_configure () { "$tool"/etc/skel/etc/mail/delivery.procmailrc \ /etc/skel/etc/mail/delivery.procmailrc } +rule_runit_configure () { + rule apt_get_install runit + local -; set +f + rm -f /etc/service/* + # NOTE: runsvdir éteindra les services qui n'apparaîtront plus ici. + for sv in "$tool"/etc/sv/* + do sv=${sv#"$tool"/etc/sv/} + sudo install -d -m 770 -o root -g root \ + /etc/sv/"$sv" + sudo install -m 770 -o root -g root \ + "$tool"/etc/sv/"$sv"/run \ + /etc/sv/"$sv"/run + if test -e "$tool"/etc/sv/"$sv"/log/run + then + sudo install -d -m 770 -o root -g root \ + /etc/sv/"$sv"/log + sudo install -m 770 -o root -g root \ + "$tool"/etc/sv/"$sv"/log/run \ + /etc/sv/"$sv"/log/run + fi + if test ! -x "$tool"/etc/sv/"$sv"/configure || + "$tool"/etc/sv/"$sv"/configure + then + ln -fns ../sv/"$sv" /etc/service/"$sv" + sv restart "$sv" + else + done + } rule_ssh_configure () { ssh-keygen -F "$vm_fqdn" -f "$tool"/etc/openssh/known_hosts | ( while IFS= read -r line @@ -1097,11 +1257,12 @@ rule_user_admin_configure () { rule user_root_configure } rule_user_configure () { - sudo install -d -m 750 -o root -g adm \ + sudo install -d -m 750 -o root -g root \ + /etc/skel \ /etc/skel/etc \ /etc/skel/etc/gpg \ /etc/skel/etc/ssh - sudo install -d -m 770 -o root -g adm \ + sudo install -d -m 770 -o root -g root \ /etc/skel/var \ /etc/skel/var/cache \ /etc/skel/var/log \ @@ -1140,7 +1301,7 @@ rule_user_configure () { /etc/screenrc } rule_user_root_configure () { - sudo install -d -m 750 -o root -g adm \ + sudo install -d -m 750 -o root -g root \ /root/etc \ /root/etc/gpg \ /root/etc/ssh @@ -1179,6 +1340,8 @@ rule_configure () { #rule apache2_configure rule nginx_configure rule php5_fpm_configure + rule gitolite_configure + rule runit_configure } rule_luks_key_change () {