root / daemons / ensure-dirs.in @ 196d70fa
History | View | Annotate | Download (4.4 kB)
1 |
#!/bin/bash |
---|---|
2 |
|
3 |
set -e |
4 |
|
5 |
LIBDIR="@LOCALSTATEDIR@/lib" |
6 |
DATADIR="${LIBDIR}/ganeti" |
7 |
RUNDIR="@LOCALSTATEDIR@/run" |
8 |
GNTRUNDIR="${RUNDIR}/ganeti" |
9 |
LOGDIR="@LOCALSTATEDIR@/log" |
10 |
GNTLOGDIR="${LOGDIR}/ganeti" |
11 |
LOCKDIR="@LOCALSTATEDIR@/lock" |
12 |
|
13 |
_fileset_owner() { |
14 |
case "$1" in |
15 |
masterd) |
16 |
echo "@GNTMASTERUSER@:@GNTMASTERDGROUP@" |
17 |
;; |
18 |
confd) |
19 |
echo "@GNTCONFDUSER@:@GNTCONFDGROUP@" |
20 |
;; |
21 |
rapi) |
22 |
echo "@GNTRAPIUSER@:@GNTRAPIGROUP@" |
23 |
;; |
24 |
noded) |
25 |
echo "root:@GNTMASTERDGROUP@" |
26 |
;; |
27 |
daemons) |
28 |
echo "@GNTMASTERUSER@:@GNTDAEMONSGROUP@" |
29 |
;; |
30 |
masterd-confd) |
31 |
echo "@GNTMASTERUSER@:@GNTCONFDGROUP@" |
32 |
;; |
33 |
*) |
34 |
echo "root:root" |
35 |
;; |
36 |
esac |
37 |
} |
38 |
|
39 |
_ensure_file() { |
40 |
local file="$1" |
41 |
local perm="$2" |
42 |
local owner="$3" |
43 |
|
44 |
[[ -e "${file}" ]] || return 1 |
45 |
chmod ${perm} "${file}" |
46 |
|
47 |
if ! [[ -z "${owner}" ]]; then |
48 |
chown ${owner} "${file}" |
49 |
fi |
50 |
|
51 |
return 0 |
52 |
} |
53 |
|
54 |
_ensure_dir() { |
55 |
local dir="$1" |
56 |
local perm="$2" |
57 |
local owner="$3" |
58 |
|
59 |
[[ -d "${dir}" ]] || mkdir "${dir}" |
60 |
|
61 |
_ensure_file "${dir}" "${perm}" "${owner}" |
62 |
} |
63 |
|
64 |
_gather_files() { |
65 |
local path="$1" |
66 |
local perm="$2" |
67 |
local user="$3" |
68 |
local group="$4" |
69 |
|
70 |
shift 4 |
71 |
|
72 |
find "${path}" -type f "(" "!" -perm ${perm} -or "(" "!" -user ${user} -or \ |
73 |
"!" -group ${group} ")" ")" "$@" |
74 |
} |
75 |
|
76 |
_ensure_datadir() { |
77 |
local full_run="$1" |
78 |
|
79 |
_ensure_dir ${DATADIR} 0755 "$(_fileset_owner masterd)" |
80 |
_ensure_dir ${DATADIR}/queue 0700 "$(_fileset_owner masterd)" |
81 |
_ensure_dir ${DATADIR}/queue/archive 0700 "$(_fileset_owner masterd)" |
82 |
_ensure_dir ${DATADIR}/uidpool 0750 "$(_fileset_owner noded)" |
83 |
|
84 |
# We ignore these files if they don't exists (incomplete setup) |
85 |
_ensure_file ${DATADIR}/cluster-domain-secret 0640 \ |
86 |
"$(_fileset_owner masterd)" || : |
87 |
_ensure_file ${DATADIR}/config.data 0640 "$(_fileset_owner masterd-confd)" || : |
88 |
_ensure_file ${DATADIR}/hmac.key 0440 "$(_fileset_owner confd)" || : |
89 |
_ensure_file ${DATADIR}/known_hosts 0644 "$(_fileset_owner masterd)" || : |
90 |
_ensure_file ${DATADIR}/rapi.pem 0440 "$(_fileset_owner rapi)" || : |
91 |
_ensure_file ${DATADIR}/rapi_users 0640 "$(_fileset_owner rapi)" || : |
92 |
_ensure_file ${DATADIR}/server.pem 0440 "$(_fileset_owner masterd)" || : |
93 |
_ensure_file ${DATADIR}/queue/serial 0600 "$(_fileset_owner masterd)" || : |
94 |
|
95 |
# To not change the utils.LockFile object |
96 |
touch ${DATADIR}/queue/lock |
97 |
_ensure_file ${DATADIR}/queue/lock 0600 "$(_fileset_owner masterd)" |
98 |
|
99 |
if ! [[ -z "${full_run}" ]]; then |
100 |
local queue_owner="$(_fileset_owner masterd)" |
101 |
local ssconf_owner="$(_fileset_owner noded)" |
102 |
|
103 |
_gather_files ${DATADIR}/queue 0600 @GNTMASTERUSER@ @GNTMASTERDGROUP@ | \ |
104 |
while read path; do |
105 |
_ensure_file "$path" 0600 "$queue_owner" |
106 |
done |
107 |
|
108 |
_gather_files ${DATADIR} 0600 root @GNTMASTERDGROUP@ -name 'ssconf_*' | \ |
109 |
while read path; do |
110 |
_ensure_file "$path" 0444 "$ssconf_owner" |
111 |
done |
112 |
fi |
113 |
} |
114 |
|
115 |
_ensure_rundir() { |
116 |
_ensure_dir ${GNTRUNDIR} 0775 "$(_fileset_owner daemons)" |
117 |
_ensure_dir ${GNTRUNDIR}/socket 0750 "$(_fileset_owner daemons)" |
118 |
_ensure_dir ${GNTRUNDIR}/bdev-cache 0755 "$(_fileset_owner noded)" |
119 |
_ensure_dir ${GNTRUNDIR}/instance-disks 0755 "$(_fileset_owner noded)" |
120 |
_ensure_dir ${GNTRUNDIR}/crypto 0700 "$(_fileset_owner noded)" |
121 |
_ensure_dir ${GNTRUNDIR}/import-export 0755 "$(_fileset_owner noded)" |
122 |
|
123 |
# We ignore this file if it don't exists (not yet start up) |
124 |
_ensure_file ${GNTRUNDIR}/socket/ganeti-master 0770 \ |
125 |
"$(_fileset_owner daemons)" || : |
126 |
} |
127 |
|
128 |
_ensure_logdir() { |
129 |
_ensure_dir ${GNTLOGDIR} 0770 "$(_fileset_owner daemons)" |
130 |
_ensure_dir ${GNTLOGDIR}/os 0750 "$(_fileset_owner daemons)" |
131 |
|
132 |
# We ignore these files if they don't exists (incomplete setup) |
133 |
_ensure_file ${GNTLOGDIR}/master-daemon.log 0600 "$(_fileset_owner masterd)" || : |
134 |
_ensure_file ${GNTLOGDIR}/conf-daemon.log 0600 "$(_fileset_owner confd)" || : |
135 |
_ensure_file ${GNTLOGDIR}/node-daemon.log 0600 "$(_fileset_owner noded)" || : |
136 |
_ensure_file ${GNTLOGDIR}/rapi-daemon.log 0600 "$(_fileset_owner rapi)" || : |
137 |
} |
138 |
|
139 |
_ensure_lockdir() { |
140 |
_ensure_dir ${LOCKDIR} 1777 "" |
141 |
} |
142 |
|
143 |
_operate_while_hold() { |
144 |
local fn=$1 |
145 |
local path=$2 |
146 |
shift 2 |
147 |
|
148 |
(cd ${path}; |
149 |
${fn} "$@") |
150 |
} |
151 |
|
152 |
main() { |
153 |
local full_run |
154 |
|
155 |
while getopts "f" OPTION; do |
156 |
case ${OPTION} in |
157 |
f) full_run=1 ;; |
158 |
esac |
159 |
done |
160 |
|
161 |
_operate_while_hold "_ensure_datadir" ${DATADIR} ${full_run} |
162 |
_operate_while_hold "_ensure_rundir" ${RUNDIR} |
163 |
_operate_while_hold "_ensure_logdir" ${LOGDIR} |
164 |
_operate_while_hold "_ensure_lockdir" @LOCALSTATEDIR@ |
165 |
} |
166 |
|
167 |
main "$@" |