Statistics
| Branch: | Tag: | Revision:

root / daemons / ensure-dirs.in @ d9c82a4e

History | View | Annotate | Download (4.4 kB)

1
#!/bin/bash
2

    
3
set -e
4

    
5
LIBDIR="@LOCALSTATEDIR@/lib"
6
DATADIR="${LIBDIR}/ganeti"
7
RUNDIR="@LOCALSTATEDIR@/run"
8
GNTRUNDIR="${RUNDIR}/ganeti"
9
LOGDIR="@LOCALSTATEDIR@/log"
10
GNTLOGDIR="${LOGDIR}/ganeti"
11
LOCKDIR="@LOCALSTATEDIR@/lock"
12

    
13
_fileset_owner() {
14
  case "$1" in
15
    masterd)
16
      echo "@GNTMASTERUSER@:@GNTMASTERDGROUP@"
17
      ;;
18
    confd)
19
      echo "@GNTCONFDUSER@:@GNTCONFDGROUP@"
20
      ;;
21
    rapi)
22
      echo "@GNTRAPIUSER@:@GNTRAPIGROUP@"
23
      ;;
24
    noded)
25
      echo "root:@GNTMASTERDGROUP@"
26
      ;;
27
    daemons)
28
      echo "@GNTMASTERUSER@:@GNTDAEMONSGROUP@"
29
      ;;
30
    masterd-confd)
31
      echo "@GNTMASTERUSER@:@GNTCONFDGROUP@"
32
      ;;
33
    *)
34
      echo "root:root"
35
      ;;
36
  esac
37
}
38

    
39
_ensure_file() {
40
  local file="$1"
41
  local perm="$2"
42
  local owner="$3"
43

    
44
  [[ -e "${file}" ]] || return 1
45
  chmod ${perm} "${file}"
46

    
47
  if ! [[ -z "${owner}" ]]; then
48
    chown ${owner} "${file}"
49
  fi
50

    
51
  return 0
52
}
53

    
54
_ensure_dir() {
55
  local dir="$1"
56
  local perm="$2"
57
  local owner="$3"
58

    
59
  [[ -d "${dir}" ]] || mkdir "${dir}"
60

    
61
  _ensure_file "${dir}" "${perm}" "${owner}"
62
}
63

    
64
_gather_files() {
65
  local path="$1"
66
  local perm="$2"
67
  local user="$3"
68
  local group="$4"
69

    
70
  shift 4
71

    
72
  find "${path}" -type f "(" "!" -perm ${perm} -or "(" "!" -user ${user} -or \
73
       "!" -group ${group} ")" ")" "$@"
74
}
75

    
76
_ensure_datadir() {
77
  local full_run="$1"
78

    
79
  _ensure_dir ${DATADIR} 0755 "$(_fileset_owner masterd)"
80
  _ensure_dir ${DATADIR}/queue 0700 "$(_fileset_owner masterd)"
81
  _ensure_dir ${DATADIR}/queue/archive 0700 "$(_fileset_owner masterd)"
82
  _ensure_dir ${DATADIR}/uidpool 0750 "$(_fileset_owner noded)"
83

    
84
  # We ignore these files if they don't exists (incomplete setup)
85
  _ensure_file ${DATADIR}/cluster-domain-secret 0640 \
86
               "$(_fileset_owner masterd)" || :
87
  _ensure_file ${DATADIR}/config.data 0640 "$(_fileset_owner masterd-confd)" || :
88
  _ensure_file ${DATADIR}/hmac.key 0440 "$(_fileset_owner confd)" || :
89
  _ensure_file ${DATADIR}/known_hosts 0644 "$(_fileset_owner masterd)" || :
90
  _ensure_file ${DATADIR}/rapi.pem 0440 "$(_fileset_owner rapi)" || :
91
  _ensure_file ${DATADIR}/rapi_users 0640 "$(_fileset_owner rapi)" || :
92
  _ensure_file ${DATADIR}/server.pem 0440 "$(_fileset_owner masterd)" || :
93
  _ensure_file ${DATADIR}/queue/serial 0600 "$(_fileset_owner masterd)" || :
94

    
95
  # To not change the utils.LockFile object
96
  touch ${DATADIR}/queue/lock
97
  _ensure_file ${DATADIR}/queue/lock 0600 "$(_fileset_owner masterd)"
98

    
99
  if ! [[ -z "${full_run}" ]]; then
100
    for file in $(_gather_files ${DATADIR}/queue 0600 @GNTMASTERUSER@ \
101
                  @GNTMASTERDGROUP@); do
102
      _ensure_file "${file}" 0600 "$(_fileset_owner masterd)"
103
    done
104

    
105
    for file in $(_gather_files ${DATADIR} 0600 root \
106
                  @GNTMASTERDGROUP@ -name 'ssconf_*'); do
107
      _ensure_file "${file}" 0444 "$(_fileset_owner noded)"
108
    done
109
  fi
110
}
111

    
112
_ensure_rundir() {
113
  _ensure_dir ${GNTRUNDIR} 0775 "$(_fileset_owner daemons)"
114
  _ensure_dir ${GNTRUNDIR}/socket 0750 "$(_fileset_owner daemons)"
115
  _ensure_dir ${GNTRUNDIR}/bdev-cache 0755 "$(_fileset_owner noded)"
116
  _ensure_dir ${GNTRUNDIR}/instance-disks 0755 "$(_fileset_owner noded)"
117
  _ensure_dir ${GNTRUNDIR}/crypto 0700 "$(_fileset_owner noded)"
118
  _ensure_dir ${GNTRUNDIR}/import-export 0755 "$(_fileset_owner noded)"
119

    
120
  # We ignore this file if it don't exists (not yet start up)
121
  _ensure_file ${GNTRUNDIR}/socket/ganeti-master 0770 \
122
               "$(_fileset_owner daemons)" || :
123
}
124

    
125
_ensure_logdir() {
126
  _ensure_dir ${GNTLOGDIR} 0770 "$(_fileset_owner daemons)"
127
  _ensure_dir ${GNTLOGDIR}/os 0750 "$(_fileset_owner daemons)"
128

    
129
  # We ignore these files if they don't exists (incomplete setup)
130
  _ensure_file ${GNTLOGDIR}/master-daemon.log 0600 "$(_fileset_owner masterd)" || :
131
  _ensure_file ${GNTLOGDIR}/conf-daemon.log 0600 "$(_fileset_owner confd)" || :
132
  _ensure_file ${GNTLOGDIR}/node-daemon.log 0600 "$(_fileset_owner noded)" || :
133
  _ensure_file ${GNTLOGDIR}/rapi-daemon.log 0600 "$(_fileset_owner rapi)" || :
134
}
135

    
136
_ensure_lockdir() {
137
  _ensure_dir ${LOCKDIR} 1777 ""
138
}
139

    
140
_operate_while_hold() {
141
  local fn=$1
142
  local path=$2
143
  shift 2
144

    
145
  (cd ${path};
146
   ${fn} "$@")
147
}
148

    
149
main() {
150
  local full_run
151

    
152
  while getopts "f" OPTION; do
153
    case ${OPTION} in
154
      f) full_run=1 ;;
155
    esac
156
  done
157

    
158
  _operate_while_hold "_ensure_datadir" ${DATADIR} ${full_run}
159
  _operate_while_hold "_ensure_rundir" ${RUNDIR}
160
  _operate_while_hold "_ensure_logdir" ${LOGDIR}
161
  _operate_while_hold "_ensure_lockdir" @LOCALSTATEDIR@
162
}
163

    
164
main "$@"