##
##  elasticsearch-xpack.spec -- OpenPKG RPM Package Specification
##  Copyright (c) 2000-2018 OpenPKG Project <http://openpkg.org/>
##
##  Permission to use, copy, modify, and distribute this software for
##  any purpose with or without fee is hereby granted, provided that
##  the above copyright notice and this permission notice appear in all
##  copies.
##
##  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
##  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
##  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
##  IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
##  CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
##  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
##  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
##  USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
##  ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
##  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
##  OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
##  SUCH DAMAGE.
##

#   package version
%define       V_elasticsearch_xpack 6.2.4
%define       V_elasticsearch       6.2

#   package information
Name:         elasticsearch-xpack
Summary:      X-Pack Extension for ElasticSearch
URL:          https://www.elastic.co/products/x-pack
Vendor:       ElasticSearch Community
Packager:     OpenPKG Project
Distribution: OpenPKG Community
Class:        PLUS
Group:        Database
License:      Apache
Version:      %{V_elasticsearch_xpack}
Release:      20180513

#   list of sources
Source0:      https://artifacts.elastic.co/downloads/packs/x-pack/x-pack-%{V_elasticsearch_xpack}.zip

#   build information
BuildPreReq:  OpenPKG, openpkg >= 20160101, infozip
PreReq:       OpenPKG, openpkg >= 20160101
BuildPreReq:  elasticsearch
PreReq:       elasticsearch

%description
    This is the X-Pack extension for Elasticsearch, providing access control.

%track
    prog elasticsearch-xpack = {
        version   = %{V_elasticsearch_xpack}
        url       = https://www.elastic.co/guide/en/elasticsearch/reference/%{V_elasticsearch}/installing-xpack-es.html
        regex     = x-pack-(__VER__)\.zip
    }

%prep
    %setup -q -T -c

%build

%install
    #   create installation hierarchy
    %{l_shtool} mkdir -f -p -m 755 \
        $RPM_BUILD_ROOT%{l_prefix}/bin \
        $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch \
        $RPM_BUILD_ROOT%{l_prefix}/etc/elasticsearch/x-pack \
        $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins

    #   setup copy of ElasticSearch environment
    ln -s %{l_prefix}/lib/elasticsearch/* \
        $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin
    mkdir $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin
    cp -p %{l_prefix}/lib/elasticsearch/bin/elasticsearch* \
        $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/config
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/plugins
    ln -s $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins \
        $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/

    #   install SQL plugin
    $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/elasticsearch-plugin \
        install --verbose --batch \
        file:%{SOURCE0}

    #   post-adjust installation
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.bat
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.exe
    %{l_shtool} subst \
        -e 's;/bin/bash;%{l_bash};g' \
        $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*

    #   install wrapper command
    (   echo "#!/bin/sh"
        echo "cmd=\"\$1\""
        echo "shift"
        echo "exec %{l_prefix}/lib/elasticsearch/bin/x-pack/\$cmd \${1+\"\$@\"}"
    ) >elasticsearch-xpack
    %{l_shtool} install -c -m 755 \
        elasticsearch-xpack $RPM_BUILD_ROOT%{l_prefix}/bin/

    #   cleanup environment
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/* >/dev/null 2>&1 || true
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/elasticsearch* >/dev/null 2>&1 || true
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.bat >/dev/null 2>&1 || true
    rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/.in.bat >/dev/null 2>&1 || true
    rm -rf $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins/x-pack/platform >/dev/null 2>&1 || true

    #   determine installation files
    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \
        %{l_files_std} \
        '%not %dir %{l_prefix}/etc/elasticsearch' \
        '%dir %attr(-,%{l_rusr},%{l_rgrp}) %{l_prefix}/etc/elasticsearch/x-pack'

%files -f files

%clean

%post
    if [ ".$1" = .1 ]; then
        #   create SSL/TLS files
        echo "Create SSL/TLS CA/node certificates/keys" | \
            %{l_rpmtool} msg -b -t notice
        su - %{l_rusr} -c \
            "LC_CTYPE=C; export LC_CTYPE; umask 077; \
            cd $RPM_INSTALL_PREFIX/etc/elasticsearch/x-pack; \
            $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack certutil ca \
                --out ca.p12 --pass elasticsearch >/dev/null 2>&1; \
            $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack certutil cert \
                --ca ca.p12 --ca-pass elasticsearch \
                --out node.p12 --pass elasticsearch >/dev/null 2>&1"

        #   add default config to ElasticSearch configuration
        conf="$RPM_INSTALL_PREFIX/etc/elasticsearch/elasticsearch.yml"
        if [ -f $conf ]; then
            (   echo "xpack.security.enabled:                           true"
                echo "xpack.security.http.ssl.enabled:                  true"
                echo "xpack.security.http.ssl.verification_mode:        certificate"
                echo "xpack.security.http.ssl.keystore.path:            x-pack/node.p12"
                echo "xpack.security.http.ssl.keystore.type:            PKCS12"
                echo "xpack.security.http.ssl.truststore.path:          x-pack/node.p12"
                echo "xpack.security.http.ssl.truststore.type:          PKCS12"
                echo "xpack.security.transport.ssl.enabled:             true"
                echo "xpack.security.transport.ssl.verification_mode:   certificate"
                echo "xpack.security.transport.ssl.keystore.path:       x-pack/node.p12"
                echo "xpack.security.transport.ssl.keystore.type:       PKCS12"
                echo "xpack.security.transport.ssl.truststore.path:     x-pack/node.p12"
                echo "xpack.security.transport.ssl.truststore.type:     PKCS12"
                echo "xpack.watcher.enabled:                            false"
                echo "xpack.graph.enabled:                              false"
                echo "xpack.ml.enabled:                                 false"
            ) | $RPM_INSTALL_PREFIX/lib/openpkg/rpmtool config \
                -a -i "$RPM_INSTALL_PREFIX:elasticsearch-xpack" -p "#" $conf
            su - %{l_rusr} -c \
                "LC_CTYPE=C; export LC_CTYPE; umask 077; \
                echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \
                    -s -x xpack.security.http.ssl.keystore.secure_password; \
                echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \
                    -s -x xpack.security.http.ssl.truststore.secure_password; \
                echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \
                    -s -x xpack.security.transport.ssl.keystore.secure_password; \
                echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \
                    -s -x xpack.security.transport.ssl.truststore.secure_password"
        fi

        #   display final hints on initial installation
        (   echo "You have to initially set ElasticSearch X-Pack authentication for the"
            echo "three standard users \"elastic\", \"kibana\" and \"logstash_system\":"
            echo "    \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack \\%{l_nil}"
            echo "      setup-passwords interactive"
            echo "Then you can setup your custom users with:"
            echo "    \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack \\%{l_nil}"
            echo "      users useradd [-p <password>] <user>"
        ) | %{l_rpmtool} msg -b -t notice
    fi

%postun
    if [ ".$1" = .0 ]; then
        #   before erase, remove runtime files
        rm -f $RPM_INSTALL_PREFIX/etc/elasticsearch/x-pack/* >/dev/null 2>&1 || true

        #   remove default config from ElasticSearch configuration
        conf="$RPM_INSTALL_PREFIX/etc/elasticsearch/elasticsearch.yml"
        if [ -f $conf ]; then
            $RPM_INSTALL_PREFIX/lib/openpkg/rpmtool config \
                -r -i "$RPM_INSTALL_PREFIX:elasticsearch-xpack" -p "#" $conf
        fi
    fi
    exit 0