* Updated the database components to use the name 'anvil' and the user 'admin'. The 'database:❌:user' and 'database:❌:name' variables are still supported, but now hidden.
* Fixed a bug where some '$anvil->{}' variables should have been '$anvil->data->{}'.
* Started merging message keys on 'error_xxxx', 'warning_xxxx', etc.
* The anvil-configure-network now configures the network. Commented out, the tool can reconfigure the entire network without a reboot, but a current issue with the post-configured system refusing to use the allocated interface as the default gateway is to be reviewed at a future time. For now, a closing reboot will be issued.
* Started creating 'anvil-change-password' that will update passwords, including apache (and configure .htpasswd when needed).
Signed-off-by: Digimer <digimer@alteeve.ca>
main
Digimer
7 years ago
parent
e4f7bcf661
commit
a294c6c4fa
16 changed files with 581 additions and 216 deletions
@ -0,0 +1,5 @@ |
|||||||
|
The 'master.tar.gz' file from the anvil github repo: |
||||||
|
https://github.com/digimer/anvil should be stored in this directory when |
||||||
|
building the .spec file. |
||||||
|
|
||||||
|
* wget -c https://github.com/digimer/anvil/archive/master.zip |
||||||
@ -0,0 +1,203 @@ |
|||||||
|
%define debug_package %{nil} |
||||||
|
Name: anvil |
||||||
|
Version: 3.0 |
||||||
|
Release: 3%{?dist} |
||||||
|
Summary: Alteeve Anvil! complete package. |
||||||
|
|
||||||
|
License: GPLv2+ |
||||||
|
URL: https://github.com/digimer/anvil |
||||||
|
Source0: https://github.com/digimer/anvil/archive/master.tar.gz |
||||||
|
BuildArch: noarch |
||||||
|
|
||||||
|
|
||||||
|
%description |
||||||
|
This package generates the anvil-core, anvil-striker, anvil-node and anvil-dr |
||||||
|
RPM's. The 'core' RPM is common to all machines in an Anvil! cluster, with the |
||||||
|
other three used for each machine, given its roll. |
||||||
|
|
||||||
|
WARNING: This is an alpha-stage project. Many features are missing and this |
||||||
|
should not be used for anything other than development purposes! The |
||||||
|
first stable release will be 3.1. Anything 3.0 is UNSTABLE. |
||||||
|
|
||||||
|
%package core |
||||||
|
Summary: Alteeve's Anvil! Core package |
||||||
|
Requires: bash-completion |
||||||
|
Requires: bind-utils |
||||||
|
Requires: fence-agents-all |
||||||
|
Requires: fence-agents-virsh |
||||||
|
Requires: firewalld |
||||||
|
Requires: gpm |
||||||
|
Requires: mlocate |
||||||
|
Requires: perl-Data-Dumper |
||||||
|
Requires: perl-DBD-Pg |
||||||
|
Requires: perl-DBI |
||||||
|
Requires: perl-JSON |
||||||
|
Requires: perl-Log-Journald |
||||||
|
Requires: perl-Net-SSH2 |
||||||
|
Requires: perl-NetAddr-IP |
||||||
|
Requires: perl-XML-Simple |
||||||
|
Requires: postgresql-contrib |
||||||
|
Requires: postgresql-plperl |
||||||
|
Requires: rsync |
||||||
|
Requires: screen |
||||||
|
Requires: vim |
||||||
|
# iptables-services conflicts with firewalld |
||||||
|
Conflicts: iptables-services |
||||||
|
# We handle interface naming |
||||||
|
Conflicts: biosdevname |
||||||
|
|
||||||
|
%description core |
||||||
|
Common base libraries required for the Anvil! system. |
||||||
|
|
||||||
|
|
||||||
|
%package striker |
||||||
|
Summary: Alteeve's Anvil! Striker dashboard package |
||||||
|
BuildRequires: httpd |
||||||
|
Requires: anvil-core |
||||||
|
Requires: httpd |
||||||
|
Requires: nmap |
||||||
|
Requires: perl-CGI |
||||||
|
Requires: postgresql-server |
||||||
|
# A Striker dashboard is not allowed to host servers or be a migration target. |
||||||
|
# So the node and dr packages can not be installed. |
||||||
|
Conflicts: anvil-node |
||||||
|
Conflicts: anvil-dr |
||||||
|
%description striker |
||||||
|
Web interface of the Striker dashboard for Alteeve Anvil! systems |
||||||
|
|
||||||
|
|
||||||
|
%package node |
||||||
|
Summary: Alteeve's Anvil! node package |
||||||
|
Requires: anvil-core |
||||||
|
Requires: bridge-utils |
||||||
|
Requires: drbd |
||||||
|
Requires: drbd-bash-completion |
||||||
|
Requires: drbd-kernel |
||||||
|
Requires: drbd-utils |
||||||
|
Requires: kernel-doc |
||||||
|
Requires: kmod-drbd |
||||||
|
Requires: libvirt |
||||||
|
Requires: libvirt-daemon |
||||||
|
Requires: libvirt-daemon-driver-qemu |
||||||
|
Requires: libvirt-daemon-kvm |
||||||
|
Requires: libvirt-docs |
||||||
|
Requires: pacemaker |
||||||
|
Requires: pcs |
||||||
|
Requires: qemu-kvm |
||||||
|
Requires: qemu-kvm-common |
||||||
|
Requires: qemu-kvm-tools |
||||||
|
Requires: virt-install |
||||||
|
# A node is allowed to host servers and be a live migration target. It is not |
||||||
|
# allowed to host a database or be a DR host. |
||||||
|
Conflicts: anvil-striker |
||||||
|
Conflicts: anvil-dr |
||||||
|
|
||||||
|
%description node |
||||||
|
|
||||||
|
Provides support for active node in an Anvil! pair. |
||||||
|
|
||||||
|
NOTE: On RHEL proper, this requires the node had the "High-Availability |
||||||
|
Add-on". |
||||||
|
|
||||||
|
NOTE: LINBIT customers must have access to the LINBIT repositories configured. |
||||||
|
|
||||||
|
%package dr |
||||||
|
Summary: Alteeve's Anvil! DR host package |
||||||
|
Requires: anvil-core |
||||||
|
Requires: bridge-utils |
||||||
|
Requires: drbd |
||||||
|
Requires: drbd-bash-completion |
||||||
|
Requires: drbd-kernel |
||||||
|
Requires: drbd-utils |
||||||
|
Requires: kernel-doc |
||||||
|
Requires: kmod-drbd |
||||||
|
Requires: libvirt |
||||||
|
Requires: libvirt-daemon |
||||||
|
Requires: libvirt-daemon-driver-qemu |
||||||
|
Requires: libvirt-daemon-kvm |
||||||
|
Requires: libvirt-docs |
||||||
|
Requires: qemu-kvm |
||||||
|
Requires: qemu-kvm-common |
||||||
|
Requires: qemu-kvm-tools |
||||||
|
Requires: virt-install |
||||||
|
# A DR host is not allowed to be a live-migration target or host a database. |
||||||
|
Conflicts: anvil-striker |
||||||
|
Conflicts: anvil-node |
||||||
|
|
||||||
|
%description dr |
||||||
|
|
||||||
|
Provides support for asynchronous disaster recovery hosts in an Anvil! cluster. |
||||||
|
|
||||||
|
|
||||||
|
%prep |
||||||
|
%autosetup -n anvil-master |
||||||
|
|
||||||
|
|
||||||
|
%build |
||||||
|
|
||||||
|
|
||||||
|
%install |
||||||
|
rm -rf $RPM_BUILD_ROOT |
||||||
|
mkdir -p %{buildroot}/%{_sbindir}/anvil/ |
||||||
|
mkdir -p %{buildroot}/%{_sysconfdir}/anvil/ |
||||||
|
mkdir -p %{buildroot}/%{_localstatedir}/www/ |
||||||
|
install -d -p Anvil %{buildroot}/%{_datadir}/perl5/ |
||||||
|
install -d -p html %{buildroot}/%{_localstatedir}/www/ |
||||||
|
install -d -p cgi-bin %{buildroot}/%{_localstatedir}/www/ |
||||||
|
install -d -p units/ %{buildroot}/usr/lib/systemd/system/ |
||||||
|
install -d -p tools/ %{buildroot}/%{_sbindir}/ |
||||||
|
cp -R -p Anvil %{buildroot}/%{_datadir}/perl5/ |
||||||
|
cp -R -p html %{buildroot}/%{_localstatedir}/www/ |
||||||
|
cp -R -p cgi-bin %{buildroot}/%{_localstatedir}/www/ |
||||||
|
cp -R -p units/* %{buildroot}/usr/lib/systemd/system/ |
||||||
|
cp -R -p tools/* %{buildroot}/%{_sbindir} |
||||||
|
cp -R -p anvil.conf %{buildroot}/%{_sysconfdir}/anvil/ |
||||||
|
cp -R -p anvil.version %{buildroot}/%{_sysconfdir}/anvil/ |
||||||
|
mv %{buildroot}/%{_sbindir}/anvil.sql %{buildroot}/%{_datadir}/anvil.sql |
||||||
|
mv %{buildroot}/%{_sbindir}/snmp-models.json %{buildroot}/%{_sysconfdir}/anvil/snmp-models.json |
||||||
|
sed -i "1s/^.*$/%{version}/" %{buildroot}/%{_sysconfdir}/anvil/anvil.version |
||||||
|
|
||||||
|
|
||||||
|
%post |
||||||
|
restorecon -rv %{buildroot}/%{_localstatedir}/www |
||||||
|
|
||||||
|
%post striker |
||||||
|
systemctl enable httpd.service |
||||||
|
systemctl start httpd.service |
||||||
|
|
||||||
|
%files core |
||||||
|
%doc README.md notes |
||||||
|
%config(noreplace) %{_sysconfdir}/anvil/anvil.conf |
||||||
|
%config(noreplace) %{_datadir}/anvil.sql |
||||||
|
%{_usr}/lib/* |
||||||
|
%{_sbindir}/* |
||||||
|
%{_sysconfdir}/anvil/anvil.version |
||||||
|
%{_datadir}/perl5/* |
||||||
|
|
||||||
|
|
||||||
|
%files striker |
||||||
|
%attr(0775, apache, root) %{_localstatedir}/www/*/* |
||||||
|
%{_sysconfdir}/anvil/snmp-models.json |
||||||
|
%ghost %{_sysconfdir}/anvil/snmp-vendors.txt |
||||||
|
|
||||||
|
%files node |
||||||
|
#<placeholder for node specific files> |
||||||
|
|
||||||
|
%files dr |
||||||
|
#<placeholder for node specific files> |
||||||
|
|
||||||
|
|
||||||
|
%changelog |
||||||
|
* Sun Mar 18 2018 Madison Kelly <mkelly@alteeve.ca> 3.0-3 |
||||||
|
- Changed the 'Obsoletes' to 'Conflicts'. |
||||||
|
|
||||||
|
* Sat Mar 17 2018 Madison Kelly <mkelly@alteeve.ca> 3.0-2 |
||||||
|
- Added a post task to striker to enable/start apache. |
||||||
|
|
||||||
|
* Wed Mar 14 2018 Madison Kelly <mkelly@alteeve.ca> 3.0-1 |
||||||
|
- Dropped the 'a' from the version. |
||||||
|
- Expanded the list of requirements. |
||||||
|
- Added the 'node' and 'dr' packages. |
||||||
|
|
||||||
|
* Fri Jan 26 2018 Matthew Marangoni <matthew.marangoni@senecacollege.ca> 3.0a-1 |
||||||
|
- Initial RPM release |
||||||
@ -0,0 +1,91 @@ |
|||||||
|
#!/usr/bin/perl |
||||||
|
# |
||||||
|
# This program sets/changes passwords on the Anvil! platform (nodes and dashboards). |
||||||
|
# |
||||||
|
# Exit codes; |
||||||
|
# 0 = Normal exit. |
||||||
|
# 1 = The program is not running as root. |
||||||
|
# 2 = Failed to connect to database(s). |
||||||
|
# |
||||||
|
|
||||||
|
use strict; |
||||||
|
use warnings; |
||||||
|
use Data::Dumper; |
||||||
|
use Anvil::Tools; |
||||||
|
|
||||||
|
my $THIS_FILE = ($0 =~ /^.*\/(.*)$/)[0]; |
||||||
|
my $running_directory = ($0 =~ /^(.*?)\/$THIS_FILE$/)[0]; |
||||||
|
if (($running_directory =~ /^\./) && ($ENV{PWD})) |
||||||
|
{ |
||||||
|
$running_directory =~ s/^\./$ENV{PWD}/; |
||||||
|
} |
||||||
|
|
||||||
|
# Turn off buffering so that the pinwheel will display while waiting for the SSH call(s) to complete. |
||||||
|
$| = 1; |
||||||
|
|
||||||
|
# Prevent a discrepency between UID/GID and EUID/EGID from throwing an error. |
||||||
|
$< = $>; |
||||||
|
$( = $); |
||||||
|
|
||||||
|
my $anvil = Anvil::Tools->new(); |
||||||
|
$anvil->Log->level({set => 2}); |
||||||
|
$anvil->Log->secure({set => 0}); |
||||||
|
|
||||||
|
# Read switches |
||||||
|
$anvil->Get->switches; |
||||||
|
|
||||||
|
# Paths |
||||||
|
$anvil->Storage->read_config({file => $anvil->data->{path}{config}{'anvil.conf'}}); |
||||||
|
|
||||||
|
# Make sure we're running as 'root' |
||||||
|
# $< == real UID, $> == effective UID |
||||||
|
if (($< != 0) && ($> != 0)) |
||||||
|
{ |
||||||
|
# Not root |
||||||
|
print $anvil->Words->string({key => "error_0005"})."\n"; |
||||||
|
$anvil->nice_exit({code => 1}); |
||||||
|
} |
||||||
|
|
||||||
|
# Connect |
||||||
|
my $connections = $anvil->Database->connect(); |
||||||
|
$anvil->Log->entry({source => $THIS_FILE, line => __LINE__, level => 2, secure => 0, key => "log_0132", variables => { connections => $connections }}); |
||||||
|
if (not $connections) |
||||||
|
{ |
||||||
|
# No databases, exit. |
||||||
|
print $anvil->Words->string({key => "error_0003"}); |
||||||
|
$anvil->nice_exit({exit_code => 2}); |
||||||
|
} |
||||||
|
|
||||||
|
### TODO: Check for access to all known Anvil! nodes and warn the user that they will have to manually update |
||||||
|
### the password for us on any node we can't access |
||||||
|
### NOTE: 'anvil' can be a name or UUID |
||||||
|
# If we're called without an '--anvil' switch, then change the local password only. |
||||||
|
if ($anvil->data->{switches}{anvil}) |
||||||
|
{ |
||||||
|
# Find the Anvil! and verify access to both nodes. If neither are accessible, abort. |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
### TODO: Support '--peers' to also update the peer dashboards. |
||||||
|
# Updating just ourself |
||||||
|
update_local_passwords($anvil); |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
$anvil->nice_exit({code => 0}); |
||||||
|
|
||||||
|
############################################################################################################# |
||||||
|
# Functions # |
||||||
|
############################################################################################################# |
||||||
|
|
||||||
|
# This updates the local passwords. |
||||||
|
sub update_local_passwords |
||||||
|
{ |
||||||
|
my ($anvil) = @_; |
||||||
|
|
||||||
|
# Update the local users. |
||||||
|
|
||||||
|
# Update the database password. |
||||||
|
|
||||||
|
return(0); |
||||||
|
} |
||||||
Loading…
Reference in new issue