etc/sv/postgres/configure.sh

   1 # DOC: http://wiki.postgresql.org/wiki/Shared_Database_Hosting
   2
   3 rule apt_get_install postgresql-9.1
   4 rule insserv_remove  postgresql
   5 rule adduser postgres \
   6  --disabled-login \
   7  --disabled-password \
   8  --group \
   9  --home /home/postgresql \
  10  --shell /bin/false \
  11  --system
  12 rule adduser postgres-data \
  13  --disabled-login \
  14  --disabled-password \
  15  --group \
  16  --home /home/postgresql/data \
  17  --no-create-home \
  18  --shell /bin/false \
  19  --system
  20 sudo usermod --home /home/postgresql postgres
  21 sudo adduser postgres postgres-data
  22 sudo rm -rf \
  23  /etc/postgresql
  24 sudo install -d -m 1751 -o postgres -g postgres-data \
  25  /home/postgresql \
  26  /home/postgresql/etc \
  27  /home/postgresql/bin \
  28  /etc/postgresql \
  29  /etc/postgresql/9.1 \
  30  /etc/postgresql/9.1/main
  31 sudo ln -fns \
  32                  /etc/postgresql \
  33  /home/postgresql/etc/postgresql
  34
  35 if sudo test ! -d /home/postgresql/data
  36  then
  37         sudo install -d -m 750 -o postgres -g postgres \
  38          /home/postgresql/data
  39         sudo -u postgres pg_createcluster \
  40          --datadir=/home/postgresql/data \
  41          --logfile=/home/postgresql/log/9.1/main/cluster.log  \
  42          --socketdir=/run/postgresql \
  43          9.1 main
  44  fi
  45
  46 sudo install -m 640 -o postgres -g postgres /dev/stdin \
  47  /etc/postgresql/9.1/main/pg_ctl.conf <<-EOF
  48         pg_ctl_options = ''
  49         EOF
  50 sudo install -m 640 -o postgres -g postgres /dev/stdin \
  51  /etc/postgresql/9.1/main/pg_ident.conf <<-EOF
  52         # MAPNAME       SYSTEM-USERNAME         PG-USERNAME
  53         EOF
  54 sudo install -m 640 -o postgres -g postgres /dev/stdin \
  55  /etc/postgresql/9.1/main/start.conf <<-EOF
  56         EOF
  57 sudo install -m 640 -o postgres -g postgres /dev/stdin \
  58  /etc/postgresql/9.1/main/pg_hba.conf <<-EOF
  59         local all postgres peer
  60         local all all      peer
  61         EOF
  62 sudo install -m 640 -o postgres -g postgres-data \
  63  "$tool"/etc/postgresql/9.1/main/postgresql.conf \
  64         /etc/postgresql/9.1/main/postgresql.conf
  65 sudo find "$tool"/etc/postgresql/bin/ -type f -perm /+x -exec \
  66         install -m 755 -o root -g root \
  67          -t /home/postgresql/bin/ {} +
  68
  69 sudo ln -fns \
  70         ../sv/"$sv" \
  71  /etc/service/"$sv"
  72 rule runit_sv_start "$sv"
  73 while ! sudo -u postgres psql </dev/null
  74 do sleep 1; done
  75
  76 # NOTE: supprime l'accès au schéma public depuis public,
  77 #       de sorte à ce que les différents utilisateurices
  78 #       ne voient pas leurs bases de données entre-elleux ;
  79 sudo -u postgres psql template1 -a -f - <<-EOF
  80         \set ON_ERROR_STOP on
  81         REVOKE ALL ON DATABASE template1 FROM public;
  82         REVOKE ALL ON SCHEMA   public    FROM public;
  83         GRANT  ALL ON SCHEMA   public    TO   postgres;
  84         EOF
  85 # NOTE: ajoute le support de PL/PGSQL s'il ne l'est pas déjà.
  86 sudo -u postgres psql template1 -a -f - <<-EOF
  87         \set ON_ERROR_STOP on
  88         CREATE OR REPLACE FUNCTION create_language_plpgsql()
  89                 RETURNS BOOLEAN AS \$\$
  90                         CREATE LANGUAGE plpgsql;
  91                         SELECT TRUE;
  92                 \$\$ LANGUAGE SQL;
  93         SELECT CASE WHEN NOT (
  94                 SELECT  TRUE AS exists
  95                 FROM    pg_language
  96                 WHERE   lanname = 'plpgsql'
  97                 UNION
  98                 SELECT  FALSE AS exists
  99                 ORDER BY exists DESC
 100                 LIMIT 1
 101          )
 102         THEN
 103                 create_language_plpgsql()
 104         ELSE
 105                 FALSE
 106         END AS plpgsql_created;
 107         DROP FUNCTION create_language_plpgsql();
 108         EOF
 109 # NOTE: supprime l'accès à la liste des bases données
 110 #       et utilisateurices depuis public.
 111 sudo -u postgres psql template1 -a -f - <<-EOF
 112         \set ON_ERROR_STOP on
 113         REVOKE ALL ON pg_auth_members FROM public;
 114         REVOKE ALL ON pg_authid       FROM public;
 115         REVOKE ALL ON pg_database     FROM public;
 116         REVOKE ALL ON pg_group        FROM public;
 117         REVOKE ALL ON pg_roles        FROM public;
 118         REVOKE ALL ON pg_settings     FROM public;
 119         REVOKE ALL ON pg_tablespace   FROM public;
 120         REVOKE ALL ON pg_user         FROM public;
 121         EOF