You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
225 lines
11 KiB
225 lines
11 KiB
## |
|
## elasticsearch-xpack.spec -- OpenPKG RPM Package Specification |
|
## Copyright (c) 2000-2022 OpenPKG Project <http://openpkg.org/> |
|
## |
|
## Permission to use, copy, modify, and distribute this software for |
|
## any purpose with or without fee is hereby granted, provided that |
|
## the above copyright notice and this permission notice appear in all |
|
## copies. |
|
## |
|
## THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED |
|
## WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF |
|
## MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
|
## IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR |
|
## CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
|
## SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
|
## LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF |
|
## USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND |
|
## ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
|
## OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT |
|
## OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
|
## SUCH DAMAGE. |
|
## |
|
|
|
# package version |
|
%define V_elasticsearch_xpack 6.2.4 |
|
%define V_elasticsearch 6.2 |
|
|
|
# package information |
|
Name: elasticsearch-xpack |
|
Summary: X-Pack Extension for ElasticSearch |
|
URL: https://www.elastic.co/products/x-pack |
|
Vendor: ElasticSearch Community |
|
Packager: OpenPKG Project |
|
Distribution: OpenPKG Community |
|
Class: PLUS |
|
Group: Database |
|
License: Apache |
|
Version: %{V_elasticsearch_xpack} |
|
Release: 20180514 |
|
|
|
# list of sources |
|
Source0: https://artifacts.elastic.co/downloads/packs/x-pack/x-pack-%{V_elasticsearch_xpack}.zip |
|
Source1: elasticsearch-tls.sh |
|
|
|
# build information |
|
BuildPreReq: OpenPKG, openpkg >= 20160101, infozip |
|
PreReq: OpenPKG, openpkg >= 20160101, cfssl |
|
BuildPreReq: elasticsearch |
|
PreReq: elasticsearch |
|
|
|
%description |
|
This is the X-Pack extension for Elasticsearch, providing access |
|
control and additional functionality. |
|
|
|
%track |
|
prog elasticsearch-xpack = { |
|
version = %{V_elasticsearch_xpack} |
|
url = https://www.elastic.co/guide/en/elasticsearch/reference/%{V_elasticsearch}/installing-xpack-es.html |
|
regex = x-pack-(__VER__)\.zip |
|
} |
|
|
|
%prep |
|
%setup -q -T -c |
|
|
|
%build |
|
|
|
%install |
|
# create installation hierarchy |
|
%{l_shtool} mkdir -f -p -m 755 \ |
|
$RPM_BUILD_ROOT%{l_prefix}/bin \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch \ |
|
$RPM_BUILD_ROOT%{l_prefix}/etc/elasticsearch/x-pack \ |
|
$RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins |
|
|
|
# setup copy of ElasticSearch environment |
|
ln -s %{l_prefix}/lib/elasticsearch/* \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/ |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin |
|
mkdir $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin |
|
cp -p %{l_prefix}/lib/elasticsearch/bin/elasticsearch* \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/ |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/config |
|
mkdir $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/config |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/plugins |
|
ln -s $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/ |
|
|
|
# provide run-time environment |
|
eval `JAVA_PLATFORM="sun-jdk" %{l_prefix}/bin/java-toolkit -e` |
|
export ES_HOME="$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch" |
|
export ES_PATH_CONF="$RPM_BUILD_ROOT%{l_prefix}/etc/elasticsearch" |
|
export ES_TMPDIR="$RPM_BUILD_ROOT%{l_prefix}/var/elasticsearch/tmp" |
|
%{l_shtool} mkdir -f -p -m 755 $ES_TMPDIR |
|
|
|
# install SQL plugin |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/elasticsearch-plugin \ |
|
install --verbose --batch \ |
|
file:%{SOURCE0} |
|
|
|
# post-adjust installation |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.bat |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.exe |
|
%{l_shtool} subst \ |
|
-e 's;/bin/bash;%{l_bash};g' \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/* |
|
|
|
# install wrapper command |
|
( echo "#!/bin/sh" |
|
echo "cmd=\"\$1\"" |
|
echo "shift" |
|
echo "eval \`JAVA_PLATFORM=\"sun-jdk\" %{l_prefix}/bin/java-toolkit -e\`" |
|
echo "export ES_HOME=\"%{l_prefix}/lib/elasticsearch\"" |
|
echo "export ES_PATH_CONF=\"%{l_prefix}/etc/elasticsearch\"" |
|
echo "export ES_TMPDIR=\"%{l_prefix}/var/elasticsearch/tmp\"" |
|
echo "exec %{l_prefix}/lib/elasticsearch/bin/x-pack/\$cmd \${1+\"\$@\"}" |
|
) >elasticsearch-xpack |
|
%{l_shtool} install -c -m 755 \ |
|
elasticsearch-xpack $RPM_BUILD_ROOT%{l_prefix}/bin/ |
|
%{l_shtool} install -c -m 755 %{l_value -s -a} \ |
|
-e 's;@l_bash@;%{l_bash};g' \ |
|
%{SOURCE elasticsearch-tls.sh} \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/tls |
|
|
|
# cleanup environment |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/* >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/elasticsearch* >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.bat >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/.in.bat >/dev/null 2>&1 || true |
|
rm -rf $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/config >/dev/null 2>&1 || true |
|
rm -rf $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins/x-pack/platform >/dev/null 2>&1 || true |
|
rm -rf $RPM_BUILD_ROOT%{l_prefix}/var/elasticsearch/tmp >/dev/null 2>&1 || true |
|
rm -rf $RPM_BUILD_ROOT%{l_prefix}/etc/elasticsearch/*.keystore >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/etc/elasticsearch/x-pack/* >/dev/null 2>&1 || true |
|
|
|
# determine installation files |
|
%{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \ |
|
%{l_files_std} \ |
|
'%not %dir %{l_prefix}/etc/elasticsearch' \ |
|
'%dir %attr(-,%{l_rusr},%{l_rgrp}) %{l_prefix}/etc/elasticsearch/x-pack' |
|
|
|
%files -f files |
|
|
|
%clean |
|
|
|
%post |
|
if [ ".$1" = .1 ]; then |
|
# create SSL/TLS files |
|
echo "Generating SSL/TLS Certificates/Keys" | %{l_rpmtool} msg -b -t notice |
|
$RPM_INSTALL_PREFIX/bin/elasticsearch-xpack tls localhost 127.0.0.1 |
|
( echo "ElasticSearch was configured with a standard TLS certificate/key pair." |
|
echo "for \"localhost\" and \"127.0.0.1\". For production use, you usually let" |
|
echo "ElasticSearch listen on an external IP address. For this the TLS" |
|
echo "certificate/key pair has to be regenerated with for instance:" |
|
echo " \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack tls \\%{l_nil}" |
|
echo " www.example.com 192.168.0.1" |
|
) | %{l_rpmtool} msg -b -t notice |
|
|
|
# add default config to ElasticSearch configuration |
|
conf="$RPM_INSTALL_PREFIX/etc/elasticsearch/elasticsearch.yml" |
|
if [ -f $conf ]; then |
|
( echo "xpack.security.enabled: true" |
|
echo "" |
|
echo "xpack.security.http.ssl.enabled: true" |
|
echo "xpack.security.http.ssl.verification_mode: none" |
|
echo "xpack.security.http.ssl.certificate_authorities: [ $RPM_INSTALL_PREFIX/etc/elasticsearch/ca.crt ]" |
|
echo "xpack.security.http.ssl.certificate: $RPM_INSTALL_PREFIX/etc/elasticsearch/server.crt" |
|
echo "xpack.security.http.ssl.key: $RPM_INSTALL_PREFIX/etc/elasticsearch/server.key" |
|
echo "" |
|
echo "xpack.security.transport.ssl.enabled: true" |
|
echo "xpack.security.transport.ssl.verification_mode: none" |
|
echo "xpack.security.transport.ssl.certificate_authorities: [ $RPM_INSTALL_PREFIX/etc/elasticsearch/ca.crt ]" |
|
echo "xpack.security.transport.ssl.certificate: $RPM_INSTALL_PREFIX/etc/elasticsearch/server.crt" |
|
echo "xpack.security.transport.ssl.key: $RPM_INSTALL_PREFIX/etc/elasticsearch/server.key" |
|
echo "" |
|
echo "xpack.security.authc.realms:" |
|
echo " file:" |
|
echo " type: file" |
|
echo " order: 0" |
|
echo " native:" |
|
echo " type: native" |
|
echo " order: 1" |
|
echo "" |
|
echo "xpack.watcher.enabled: false" |
|
echo "xpack.graph.enabled: false" |
|
echo "xpack.ml.enabled: false" |
|
echo "" |
|
) | $RPM_INSTALL_PREFIX/lib/openpkg/rpmtool config \ |
|
-a -i "$RPM_INSTALL_PREFIX:elasticsearch-xpack" -p "#" $conf |
|
fi |
|
|
|
# display final hints on initial installation |
|
( echo "You have to initially set ElasticSearch X-Pack authentication for the" |
|
echo "three standard users \"elastic\", \"kibana\" and \"logstash_system\":" |
|
echo " \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack setup-passwords interactive" |
|
echo "You later can change the password of (those or other) native-real users with:" |
|
echo " \$ curl -XPUT -u <username>:<password> \\%{l_nil}" |
|
echo " http://localhost:9200/_xpack/security/user/<username>/_password \\%{l_nil}" |
|
echo " -H 'Content-type: application/json' \\%{l_nil}" |
|
echo " -d '{ \"password\": \"<new-password>\" }'" |
|
echo "You can setup custom file-realm users with:" |
|
echo " \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack users useradd [-p <password>] <username>" |
|
echo "You can setup custom native-realm users with:" |
|
echo " \$ curl -XPUT -u elastic:<password> \\%{l_nil}" |
|
echo " http://localhost:9200/_xpack/security/user/<username> \\%{l_nil}" |
|
echo " -H 'Content-type: application/json' \\%{l_nil}" |
|
echo " -d '{ \"password\": \"<password>\", \"roles\": [] }'" |
|
) | %{l_rpmtool} msg -b -t notice |
|
fi |
|
|
|
%postun |
|
if [ ".$1" = .0 ]; then |
|
# before erase, remove runtime files |
|
rm -f $RPM_INSTALL_PREFIX/etc/elasticsearch/x-pack/* >/dev/null 2>&1 || true |
|
rm -f $RPM_INSTALL_PREFIX/etc/elasticsearch/ca.* >/dev/null 2>&1 || true |
|
rm -f $RPM_INSTALL_PREFIX/etc/elasticsearch/server.* >/dev/null 2>&1 || true |
|
|
|
# remove default config from ElasticSearch configuration |
|
conf="$RPM_INSTALL_PREFIX/etc/elasticsearch/elasticsearch.yml" |
|
if [ -f $conf ]; then |
|
$RPM_INSTALL_PREFIX/lib/openpkg/rpmtool config \ |
|
-r -i "$RPM_INSTALL_PREFIX:elasticsearch-xpack" -p "#" $conf |
|
fi |
|
fi |
|
exit 0 |
|
|
|
|