PASSBOLT-1334 demo container
This commit is contained in:
Kevin Muller
parent
7640a1138d
commit
2299f6db99
|
|
@ -0,0 +1,45 @@
|
|||
# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and Webstorm
|
||||
# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
|
||||
|
||||
# User-specific stuff:
|
||||
.idea/workspace.xml
|
||||
.idea/tasks.xml
|
||||
.idea/dictionaries
|
||||
.idea/vcs.xml
|
||||
.idea/jsLibraryMappings.xml
|
||||
|
||||
# Sensitive or high-churn files:
|
||||
.idea/dataSources.ids
|
||||
.idea/dataSources.xml
|
||||
.idea/dataSources.local.xml
|
||||
.idea/sqlDataSources.xml
|
||||
.idea/dynamic.xml
|
||||
.idea/uiDesigner.xml
|
||||
|
||||
# Gradle:
|
||||
.idea/gradle.xml
|
||||
.idea/libraries
|
||||
|
||||
# Mongo Explorer plugin:
|
||||
.idea/mongoSettings.xml
|
||||
|
||||
## File-based project format:
|
||||
*.iws
|
||||
|
||||
## Plugin-specific files:
|
||||
|
||||
# IntelliJ
|
||||
/out/
|
||||
|
||||
# mpeltonen/sbt-idea plugin
|
||||
.idea_modules/
|
||||
|
||||
# JIRA plugin
|
||||
atlassian-ide-plugin.xml
|
||||
|
||||
# Crashlytics plugin (for Android Studio and IntelliJ)
|
||||
com_crashlytics_export_strings.xml
|
||||
crashlytics.properties
|
||||
crashlytics-build.properties
|
||||
fabric.properties
|
||||
|
||||
|
|
@ -0,0 +1,87 @@
|
|||
FROM debian:jessie
|
||||
|
||||
# mysql before installation configuration
|
||||
RUN export DEBIAN_FRONTEND="noninteractive" \
|
||||
&& echo "mysql-server mysql-server/root_password password root" | debconf-set-selections \
|
||||
&& echo "mysql-server mysql-server/root_password_again password root" | debconf-set-selections
|
||||
|
||||
# debian packages installation
|
||||
RUN apt-get clean && apt-get update && apt-get install -y \
|
||||
# persistent &runtime deps. \
|
||||
ca-certificates curl libpcre3 librecode0 libsqlite3-0 libxml2 --no-install-recommends \
|
||||
# unix tools \
|
||||
nano wget openssh-client \
|
||||
# versioning & package manager \
|
||||
git npm \
|
||||
# phpize dependencies \
|
||||
autoconf file g++ gcc libc-dev make pkg-config re2c \
|
||||
# persistance
|
||||
redis-server mysql-server-5.5 \
|
||||
# php \
|
||||
php5-json php5-cli php5-common \
|
||||
php5-curl php5-dev php5-gd php5-mcrypt \
|
||||
php5-mysql php5-xdebug php5-xsl php5-intl \
|
||||
# memchached \
|
||||
memcached php5-memcached \
|
||||
# apache \
|
||||
apache2 apache2-utils libapache2-mod-php5 \
|
||||
# gnupg dependency \
|
||||
libgpgme11-dev \
|
||||
# pear \
|
||||
php-pear \
|
||||
# Commented until the following bug is fixed : https://github.com/docker/hub-feedback/issues/556 \
|
||||
#&& apt-get clean \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Configure the user www-data environment
|
||||
RUN mkdir /home/www-data/ \
|
||||
&& chown www-data:www-data /home/www-data/ \
|
||||
&& usermod -d /home/www-data www-data
|
||||
|
||||
# Configure node and install grunt
|
||||
# On debian they choose to rename node in nodejs, some tools try to access nodejs by using the commande noe.
|
||||
RUN ln -s /usr/bin/nodejs /usr/bin/node \
|
||||
# install grunt
|
||||
&& npm install -g grunt-cli
|
||||
|
||||
|
||||
# Install and configure gnupg
|
||||
RUN pecl install gnupg \
|
||||
&& echo "extension=gnupg.so;" > /etc/php5/mods-available/gnupg.ini \
|
||||
&& ln -s /etc/php5/mods-available/gnupg.ini /etc/php5/apache2/conf.d/20-gnupg.ini \
|
||||
&& ln -s /etc/php5/mods-available/gnupg.ini /etc/php5/cli/conf.d/20-gnupg.ini \
|
||||
# configure the user www-data env to work with gnupg \
|
||||
&& mkdir /home/www-data/.gnupg \
|
||||
&& chown www-data:www-data /home/www-data/.gnupg \
|
||||
&& chmod 0777 /home/www-data/.gnupg
|
||||
|
||||
# Configure apache
|
||||
ADD /server-conf/apache/passbolt.conf /etc/apache2/sites-available/passbolt.conf
|
||||
ADD /server-conf/apache/000-default.conf /etc/apache2/sites-available/000-default.conf
|
||||
|
||||
RUN rm -f /etc/apache2/sites-enabled/* \
|
||||
&& rm -fr /var/www/html \
|
||||
&& a2enmod proxy \
|
||||
&& a2enmod proxy_http \
|
||||
&& a2enmod rewrite \
|
||||
&& a2ensite passbolt \
|
||||
&& a2ensite 000-default.conf
|
||||
|
||||
# Configure php
|
||||
RUN echo "memory_limit=1024M" > /etc/php5/apache2/conf.d/20-memory-limit.ini \
|
||||
&& echo "memory_limit=1024M" > /etc/php5/cli/conf.d/20-memory-limit.ini
|
||||
|
||||
# Install composer
|
||||
RUN curl -sS https://getcomposer.org/installer | php \
|
||||
&& mv composer.phar /usr/local/bin/composer
|
||||
|
||||
# Special hack for macosx, to let www-data able to write on mounted volumes.
|
||||
# See docker bug: https://github.com/boot2docker/boot2docker/issues/581.
|
||||
RUN usermod -u 1000 www-data \
|
||||
&& usermod -a -G staff www-data \
|
||||
&& chown -Rf www-data:www-data /var/www/
|
||||
|
||||
ADD /entry-point.sh /entry-point.sh
|
||||
RUN chmod 0755 /entry-point.sh
|
||||
|
||||
CMD ["bash", "/entry-point.sh"]
|
||||
43
README.md
43
README.md
|
|
@ -1 +1,42 @@
|
|||
# passbolt_docker_debian
|
||||
# PASSBOLT DEBIAN DOCKER CONTAINER
|
||||
|
||||
ERRATUM : THIS IS A DEMO CONTAINER. DO NOT USE IT IN PRODUCTION.
|
||||
|
||||
How to use it
|
||||
-------------
|
||||
1) First, download passbolt source code from git.
|
||||
```
|
||||
git clone https://github.com/passbolt/passbolt.git
|
||||
```
|
||||
|
||||
2) Then, configure the container.
|
||||
There is a configuration file located in /conf/conf.sh
|
||||
|
||||
It contains the following options :
|
||||
|
||||
- PASSBOLT_DIR : path to passbolt source code.
|
||||
- MYSQL_HOST : mysql host. Keep it as 'localhost' to let the container handle the database.
|
||||
- MYSQL_ROOT_PASSWORD : root password of mysql. It is only useful if MYSQL_HOST is set to localhost.
|
||||
- MYSQL_USERNAME : valid username for the database.
|
||||
- MYSQL_PASSWORD : valid password for the database.
|
||||
- MYSQL_DATABASE : name of the database to be used.
|
||||
|
||||
Enter the values corresponding to your settings. The most important setting is PASSBOLT_DIR. You can keep the default values for the rest.
|
||||
|
||||
3) Finally, you can build and run the container :
|
||||
```
|
||||
cd /path/to/docker/files
|
||||
docker build -t passbolt_debian .
|
||||
./launch-container.sh
|
||||
```
|
||||
|
||||
Behavior
|
||||
--------
|
||||
By default the container will create a new database and use it to install passbolt.
|
||||
However, in case an external database is provided in the settings, it will try to use it.
|
||||
A few consideration :
|
||||
- There should be a valid username, password and database on the mysql server.
|
||||
- If the database exists but without passbolt installed, then passbolt will be installed normally.
|
||||
- If the database exists and already has a passbolt installed, then no db installation will be done and the existing data will be kept.
|
||||
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,13 @@
|
|||
#!/bin/sh
|
||||
|
||||
# Passbolt directory.
|
||||
PASSBOLT_DIR=/path/to/passbolt/dir
|
||||
|
||||
# MySQL configuration.
|
||||
MYSQL_HOST=localhost
|
||||
# Only necessary if we use the local database.
|
||||
MYSQL_ROOT_PASSWORD=rootpassword
|
||||
MYSQL_USERNAME=passbolt
|
||||
MYSQL_PASSWORD=password123
|
||||
MYSQL_DATABASE=passbolt
|
||||
|
||||
|
|
@ -0,0 +1,92 @@
|
|||
#!/bin/bash
|
||||
IS_MYSQL_LOCAL=1
|
||||
if [[ $MYSQL_HOST != "localhost" ]];
|
||||
then
|
||||
IS_MYSQL_LOCAL=0
|
||||
fi
|
||||
|
||||
|
||||
# If Mysql is local (no persistence), we reset everything and create the database.
|
||||
if [ $IS_MYSQL_LOCAL == 1 ]; then
|
||||
echo "using local mysql"
|
||||
echo "Resetting root password, and create user ${MYSQL_USERNAME}"
|
||||
# Start mysql
|
||||
service mysql start
|
||||
# Change password of database
|
||||
mysql --host=localhost --user=root --password=root << EOSQL
|
||||
SET @@SESSION.SQL_LOG_BIN=0;
|
||||
SET PASSWORD FOR 'root'@'localhost' = PASSWORD('${MYSQL_ROOT_PASSWORD}');
|
||||
GRANT ALL ON *.* TO 'root'@'%' WITH GRANT OPTION ;
|
||||
DROP DATABASE IF EXISTS test ;
|
||||
FLUSH PRIVILEGES ;
|
||||
EOSQL
|
||||
|
||||
# Create the passbolt database
|
||||
echo "Create database ${MYSQL_DATABASE}"
|
||||
mysql -u "root" --password="${MYSQL_ROOT_PASSWORD}" -e "create database ${MYSQL_DATABASE}"
|
||||
echo "Create user ${MYSQL_USERNAME} and give access to ${MYSQL_DATABASE}"
|
||||
mysql -u "root" --password="${MYSQL_ROOT_PASSWORD}" -e "GRANT ALL PRIVILEGES ON ${MYSQL_DATABASE}.* To '${MYSQL_USERNAME}'@'localhost' IDENTIFIED BY '${MYSQL_PASSWORD}'"
|
||||
echo "flush privileges"
|
||||
mysql -u "root" --password="${MYSQL_ROOT_PASSWORD}" -e "FLUSH PRIVILEGES"
|
||||
|
||||
# If Mysql is on a different host, check if the database exists.
|
||||
else
|
||||
echo "using remote mysql"
|
||||
echo "Checking database ${MYSQL_DATABASE}"
|
||||
RESULT=`mysql -h $MYSQL_HOST -u $MYSQL_USERNAME -p$MYSQL_PASSWORD --skip-column-names -e "SHOW DATABASES LIKE '$MYSQL_DATABASE'"`
|
||||
if [ "$RESULT" != "$MYSQL_DATABASE" ]; then
|
||||
echo "The database $MYSQL_DATABASE does not exist in the mysql instance provided."
|
||||
fi
|
||||
echo "ok"
|
||||
fi
|
||||
|
||||
# Restart the apache2 service
|
||||
service apache2 restart
|
||||
|
||||
# Start the memcached service
|
||||
service memcached restart
|
||||
|
||||
# Default configuration files
|
||||
cp -a /var/www/passbolt/app/Config/app.php.default /var/www/passbolt/app/Config/app.php
|
||||
cp -a /var/www/passbolt/app/Config/core.php.default /var/www/passbolt/app/Config/core.php
|
||||
cp -a /var/www/passbolt/app/webroot/js/app/config/config.json.default /var/www/passbolt/app/webroot/js/app/config/config.json
|
||||
|
||||
DATABASE_CONF=/var/www/passbolt/app/Config/database.php
|
||||
# Set configuration in file
|
||||
cat > $DATABASE_CONF << EOL
|
||||
<?php
|
||||
class DATABASE_CONFIG {
|
||||
public \$default = array(
|
||||
'datasource' => 'Database/Mysql',
|
||||
'persistent' => false,
|
||||
'host' => '${MYSQL_HOST}',
|
||||
'login' => '${MYSQL_USERNAME}',
|
||||
'password' => '${MYSQL_PASSWORD}',
|
||||
'database' => '${MYSQL_DATABASE}',
|
||||
'prefix' => '',
|
||||
'encoding' => 'utf8',
|
||||
);
|
||||
};
|
||||
EOL
|
||||
|
||||
# Check if passbolt is already installed.
|
||||
IS_PASSBOLT_INSTALLED=0
|
||||
OUTPUT=$(mysql -N -s -u ${MYSQL_USERNAME} -p${MYSQL_PASSWORD} -e "select count(*) from information_schema.tables where table_schema='${MYSQL_DATABASE}' and table_name='users';")
|
||||
echo "OUTPUT=${OUTPUT}"
|
||||
if [ $OUTPUT == "1" ]; then
|
||||
echo "passbolt is already installed in this database"
|
||||
IS_PASSBOLT_INSTALLED=1
|
||||
else
|
||||
echo "passbolt is not installed in this database. Proceeding.."
|
||||
fi
|
||||
|
||||
|
||||
# Install passbolt
|
||||
if [[ $IS_PASSBOLT_INSTALLED == "0"]]; then
|
||||
echo "Installing"
|
||||
su -s /bin/bash -c "/var/www/passbolt/app/Console/cake install" www-data
|
||||
echo "We are all set. Have fun with Passbolt !"
|
||||
echo "Reminder : THIS IS A DEMO CONTAINER. DO NOT USE IT IN PRODUCTION!!!!"
|
||||
fi
|
||||
|
||||
/bin/bash
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
#!/bin/sh
|
||||
|
||||
SRC=$(cd $(dirname "$0"); pwd)
|
||||
source "${SRC}/conf/conf.sh"
|
||||
|
||||
docker run -p 8081:8081 -p 80:80 -d -it --hostname=passbolt.docker --name passbolt \
|
||||
-v $PASSBOLT_DIR:/var/www/passbolt \
|
||||
-e MYSQL_HOST=$MYSQL_HOST \
|
||||
-e MYSQL_ROOT_PASSWORD=$MYSQL_ROOT_PASSWORD \
|
||||
-e MYSQL_USERNAME=$MYSQL_USERNAME \
|
||||
-e MYSQL_PASSWORD=$MYSQL_PASSWORD \
|
||||
-e MYSQL_DATABASE=$MYSQL_DATABASE \
|
||||
passbolt_debian
|
||||
|
|
@ -0,0 +1,31 @@
|
|||
<VirtualHost *:80>
|
||||
# The ServerName directive sets the request scheme, hostname and port that
|
||||
# the server uses to identify itself. This is used when creating
|
||||
# redirection URLs. In the context of virtual hosts, the ServerName
|
||||
# specifies what hostname must appear in the request's Host: header to
|
||||
# match this virtual host. For the default virtual host (this file) this
|
||||
# value is not decisive as it is used as a last resort host regardless.
|
||||
# However, you must set it for any further virtual host explicitly.
|
||||
#ServerName www.example.com
|
||||
|
||||
ServerAdmin webmaster@localhost
|
||||
DocumentRoot /var/www
|
||||
|
||||
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
|
||||
# error, crit, alert, emerg.
|
||||
# It is also possible to configure the loglevel for particular
|
||||
# modules, e.g.
|
||||
#LogLevel info ssl:warn
|
||||
|
||||
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||||
CustomLog ${APACHE_LOG_DIR}/access.log combined
|
||||
|
||||
# For most configuration files from conf-available/, which are
|
||||
# enabled or disabled at a global level, it is possible to
|
||||
# include a line for only one particular virtual host. For example the
|
||||
# following line enables the CGI configuration for this host only
|
||||
# after it has been globally disabled with "a2disconf".
|
||||
#Include conf-available/serve-cgi-bin.conf
|
||||
</VirtualHost>
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
Listen 8081
|
||||
|
||||
<VirtualHost *:8081>
|
||||
DocumentRoot /var/www/passbolt
|
||||
RewriteEngine On
|
||||
|
||||
# Other directives here
|
||||
<Directory /var/www/passbolt>
|
||||
Options Indexes FollowSymLinks
|
||||
AllowOverride All
|
||||
Order allow,deny
|
||||
allow from all
|
||||
</Directory>
|
||||
</VirtualHost>
|
||||
Loading…
Reference in New Issue