root / daemons / ensure-dirs.in @ 26d3fd2f
History | View | Annotate | Download (4.4 kB)
1 |
#!/bin/bash |
---|---|
2 |
|
3 |
set -e |
4 |
|
5 |
LIBDIR="@LOCALSTATEDIR@/lib" |
6 |
DATADIR="${LIBDIR}/ganeti" |
7 |
RUNDIR="@LOCALSTATEDIR@/run" |
8 |
GNTRUNDIR="${RUNDIR}/ganeti" |
9 |
LOGDIR="@LOCALSTATEDIR@/log" |
10 |
GNTLOGDIR="${LOGDIR}/ganeti" |
11 |
LOCKDIR="@LOCALSTATEDIR@/lock" |
12 |
|
13 |
_fileset_owner() { |
14 |
case "$1" in |
15 |
masterd) |
16 |
echo "@GNTMASTERUSER@:@GNTMASTERDGROUP@" |
17 |
;; |
18 |
confd) |
19 |
echo "@GNTCONFDUSER@:@GNTCONFDGROUP@" |
20 |
;; |
21 |
rapi) |
22 |
echo "@GNTRAPIUSER@:@GNTRAPIGROUP@" |
23 |
;; |
24 |
noded) |
25 |
echo "root:@GNTMASTERDGROUP@" |
26 |
;; |
27 |
daemons) |
28 |
echo "@GNTMASTERUSER@:@GNTDAEMONSGROUP@" |
29 |
;; |
30 |
masterd-confd) |
31 |
echo "@GNTMASTERUSER@:@GNTCONFDGROUP@" |
32 |
;; |
33 |
*) |
34 |
echo "root:root" |
35 |
;; |
36 |
esac |
37 |
} |
38 |
|
39 |
_ensure_file() { |
40 |
local file="$1" |
41 |
local perm="$2" |
42 |
local owner="$3" |
43 |
|
44 |
[[ -e "${file}" ]] || return 1 |
45 |
chmod ${perm} "${file}" |
46 |
|
47 |
if ! [[ -z "${owner}" ]]; then |
48 |
chown ${owner} "${file}" |
49 |
fi |
50 |
|
51 |
return 0 |
52 |
} |
53 |
|
54 |
_ensure_dir() { |
55 |
local dir="$1" |
56 |
local perm="$2" |
57 |
local owner="$3" |
58 |
|
59 |
[[ -d "${dir}" ]] || mkdir "${dir}" |
60 |
|
61 |
_ensure_file "${dir}" "${perm}" "${owner}" |
62 |
} |
63 |
|
64 |
_gather_files() { |
65 |
local path="$1" |
66 |
local perm="$2" |
67 |
local user="$3" |
68 |
local group="$4" |
69 |
|
70 |
shift 4 |
71 |
|
72 |
find "${path}" -type f "(" "!" -perm ${perm} -or "(" "!" -user ${user} -or \ |
73 |
"!" -group ${group} ")" ")" "$@" |
74 |
} |
75 |
|
76 |
_ensure_datadir() { |
77 |
local full_run="$1" |
78 |
|
79 |
_ensure_dir ${DATADIR} 0755 "$(_fileset_owner masterd)" |
80 |
_ensure_dir ${DATADIR}/queue 0700 "$(_fileset_owner masterd)" |
81 |
_ensure_dir ${DATADIR}/queue/archive 0700 "$(_fileset_owner masterd)" |
82 |
_ensure_dir ${DATADIR}/uidpool 0750 "$(_fileset_owner noded)" |
83 |
|
84 |
# We ignore these files if they don't exists (incomplete setup) |
85 |
_ensure_file ${DATADIR}/cluster-domain-secret 0640 \ |
86 |
"$(_fileset_owner masterd)" || : |
87 |
_ensure_file ${DATADIR}/config.data 0640 "$(_fileset_owner masterd-confd)" || : |
88 |
_ensure_file ${DATADIR}/hmac.key 0440 "$(_fileset_owner confd)" || : |
89 |
_ensure_file ${DATADIR}/known_hosts 0644 "$(_fileset_owner masterd)" || : |
90 |
_ensure_file ${DATADIR}/rapi.pem 0440 "$(_fileset_owner rapi)" || : |
91 |
_ensure_file ${DATADIR}/rapi_users 0640 "$(_fileset_owner rapi)" || : |
92 |
_ensure_file ${DATADIR}/server.pem 0440 "$(_fileset_owner masterd)" || : |
93 |
_ensure_file ${DATADIR}/queue/serial 0600 "$(_fileset_owner masterd)" || : |
94 |
|
95 |
# To not change the utils.LockFile object |
96 |
touch ${DATADIR}/queue/lock |
97 |
_ensure_file ${DATADIR}/queue/lock 0600 "$(_fileset_owner masterd)" |
98 |
|
99 |
if ! [[ -z "${full_run}" ]]; then |
100 |
for file in $(_gather_files ${DATADIR}/queue 0600 @GNTMASTERUSER@ \ |
101 |
@GNTMASTERDGROUP@); do |
102 |
_ensure_file "${file}" 0600 "$(_fileset_owner masterd)" |
103 |
done |
104 |
|
105 |
for file in $(_gather_files ${DATADIR} 0600 root \ |
106 |
@GNTMASTERDGROUP@ -name 'ssconf_*'); do |
107 |
_ensure_file "${file}" 0444 "$(_fileset_owner noded)" |
108 |
done |
109 |
fi |
110 |
} |
111 |
|
112 |
_ensure_rundir() { |
113 |
_ensure_dir ${GNTRUNDIR} 0775 "$(_fileset_owner daemons)" |
114 |
_ensure_dir ${GNTRUNDIR}/socket 0750 "$(_fileset_owner daemons)" |
115 |
_ensure_dir ${GNTRUNDIR}/bdev-cache 0755 "$(_fileset_owner noded)" |
116 |
_ensure_dir ${GNTRUNDIR}/instance-disks 0755 "$(_fileset_owner noded)" |
117 |
_ensure_dir ${GNTRUNDIR}/crypto 0700 "$(_fileset_owner noded)" |
118 |
_ensure_dir ${GNTRUNDIR}/import-export 0755 "$(_fileset_owner noded)" |
119 |
|
120 |
# We ignore this file if it don't exists (not yet start up) |
121 |
_ensure_file ${GNTRUNDIR}/socket/ganeti-master 0770 \ |
122 |
"$(_fileset_owner daemons)" || : |
123 |
} |
124 |
|
125 |
_ensure_logdir() { |
126 |
_ensure_dir ${GNTLOGDIR} 0770 "$(_fileset_owner daemons)" |
127 |
_ensure_dir ${GNTLOGDIR}/os 0750 "$(_fileset_owner daemons)" |
128 |
|
129 |
# We ignore these files if they don't exists (incomplete setup) |
130 |
_ensure_file ${GNTLOGDIR}/master-daemon.log 0600 "$(_fileset_owner masterd)" || : |
131 |
_ensure_file ${GNTLOGDIR}/conf-daemon.log 0600 "$(_fileset_owner confd)" || : |
132 |
_ensure_file ${GNTLOGDIR}/node-daemon.log 0600 "$(_fileset_owner noded)" || : |
133 |
_ensure_file ${GNTLOGDIR}/rapi-daemon.log 0600 "$(_fileset_owner rapi)" || : |
134 |
} |
135 |
|
136 |
_ensure_lockdir() { |
137 |
_ensure_dir ${LOCKDIR} 1777 "" |
138 |
} |
139 |
|
140 |
_operate_while_hold() { |
141 |
local fn=$1 |
142 |
local path=$2 |
143 |
shift 2 |
144 |
|
145 |
(cd ${path}; |
146 |
${fn} "$@") |
147 |
} |
148 |
|
149 |
main() { |
150 |
local full_run |
151 |
|
152 |
while getopts "f" OPTION; do |
153 |
case ${OPTION} in |
154 |
f) full_run=1 ;; |
155 |
esac |
156 |
done |
157 |
|
158 |
_operate_while_hold "_ensure_datadir" ${DATADIR} ${full_run} |
159 |
_operate_while_hold "_ensure_rundir" ${RUNDIR} |
160 |
_operate_while_hold "_ensure_logdir" ${LOGDIR} |
161 |
_operate_while_hold "_ensure_lockdir" @LOCALSTATEDIR@ |
162 |
} |
163 |
|
164 |
main "$@" |