You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
194 lines
8.8 KiB
194 lines
8.8 KiB
## |
|
## elasticsearch-xpack.spec -- OpenPKG RPM Package Specification |
|
## Copyright (c) 2000-2018 OpenPKG Project <http://openpkg.org/> |
|
## |
|
## Permission to use, copy, modify, and distribute this software for |
|
## any purpose with or without fee is hereby granted, provided that |
|
## the above copyright notice and this permission notice appear in all |
|
## copies. |
|
## |
|
## THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED |
|
## WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF |
|
## MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
|
## IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR |
|
## CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
|
## SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
|
## LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF |
|
## USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND |
|
## ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
|
## OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT |
|
## OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
|
## SUCH DAMAGE. |
|
## |
|
|
|
# package version |
|
%define V_elasticsearch_xpack 6.2.4 |
|
%define V_elasticsearch 6.2 |
|
|
|
# package information |
|
Name: elasticsearch-xpack |
|
Summary: X-Pack Extension for ElasticSearch |
|
URL: https://www.elastic.co/products/x-pack |
|
Vendor: ElasticSearch Community |
|
Packager: OpenPKG Project |
|
Distribution: OpenPKG Community |
|
Class: PLUS |
|
Group: Database |
|
License: Apache |
|
Version: %{V_elasticsearch_xpack} |
|
Release: 20180513 |
|
|
|
# list of sources |
|
Source0: https://artifacts.elastic.co/downloads/packs/x-pack/x-pack-%{V_elasticsearch_xpack}.zip |
|
|
|
# build information |
|
BuildPreReq: OpenPKG, openpkg >= 20160101, infozip |
|
PreReq: OpenPKG, openpkg >= 20160101 |
|
BuildPreReq: elasticsearch |
|
PreReq: elasticsearch |
|
|
|
%description |
|
This is the X-Pack extension for Elasticsearch, providing access control. |
|
|
|
%track |
|
prog elasticsearch-xpack = { |
|
version = %{V_elasticsearch_xpack} |
|
url = https://www.elastic.co/guide/en/elasticsearch/reference/%{V_elasticsearch}/installing-xpack-es.html |
|
regex = x-pack-(__VER__)\.zip |
|
} |
|
|
|
%prep |
|
%setup -q -T -c |
|
|
|
%build |
|
|
|
%install |
|
# create installation hierarchy |
|
%{l_shtool} mkdir -f -p -m 755 \ |
|
$RPM_BUILD_ROOT%{l_prefix}/bin \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch \ |
|
$RPM_BUILD_ROOT%{l_prefix}/etc/elasticsearch/x-pack \ |
|
$RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins |
|
|
|
# setup copy of ElasticSearch environment |
|
ln -s %{l_prefix}/lib/elasticsearch/* \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/ |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin |
|
mkdir $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin |
|
cp -p %{l_prefix}/lib/elasticsearch/bin/elasticsearch* \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/ |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/config |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/plugins |
|
ln -s $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/ |
|
|
|
# install SQL plugin |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/elasticsearch-plugin \ |
|
install --verbose --batch \ |
|
file:%{SOURCE0} |
|
|
|
# post-adjust installation |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.bat |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.exe |
|
%{l_shtool} subst \ |
|
-e 's;/bin/bash;%{l_bash};g' \ |
|
$RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/* |
|
|
|
# install wrapper command |
|
( echo "#!/bin/sh" |
|
echo "cmd=\"\$1\"" |
|
echo "shift" |
|
echo "exec %{l_prefix}/lib/elasticsearch/bin/x-pack/\$cmd \${1+\"\$@\"}" |
|
) >elasticsearch-xpack |
|
%{l_shtool} install -c -m 755 \ |
|
elasticsearch-xpack $RPM_BUILD_ROOT%{l_prefix}/bin/ |
|
|
|
# cleanup environment |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/* >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/elasticsearch* >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/*.bat >/dev/null 2>&1 || true |
|
rm -f $RPM_BUILD_ROOT%{l_prefix}/lib/elasticsearch/bin/x-pack/.in.bat >/dev/null 2>&1 || true |
|
rm -rf $RPM_BUILD_ROOT%{l_prefix}/libexec/elasticsearch/plugins/x-pack/platform >/dev/null 2>&1 || true |
|
|
|
# determine installation files |
|
%{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \ |
|
%{l_files_std} \ |
|
'%not %dir %{l_prefix}/etc/elasticsearch' \ |
|
'%dir %attr(-,%{l_rusr},%{l_rgrp}) %{l_prefix}/etc/elasticsearch/x-pack' |
|
|
|
%files -f files |
|
|
|
%clean |
|
|
|
%post |
|
if [ ".$1" = .1 ]; then |
|
# create SSL/TLS files |
|
echo "Create SSL/TLS CA/node certificates/keys" | \ |
|
%{l_rpmtool} msg -b -t notice |
|
su - %{l_rusr} -c \ |
|
"LC_CTYPE=C; export LC_CTYPE; umask 077; \ |
|
cd $RPM_INSTALL_PREFIX/etc/elasticsearch/x-pack; \ |
|
$RPM_INSTALL_PREFIX/bin/elasticsearch-xpack certutil ca \ |
|
--out ca.p12 --pass elasticsearch >/dev/null 2>&1; \ |
|
$RPM_INSTALL_PREFIX/bin/elasticsearch-xpack certutil cert \ |
|
--ca ca.p12 --ca-pass elasticsearch \ |
|
--out node.p12 --pass elasticsearch >/dev/null 2>&1" |
|
|
|
# add default config to ElasticSearch configuration |
|
conf="$RPM_INSTALL_PREFIX/etc/elasticsearch/elasticsearch.yml" |
|
if [ -f $conf ]; then |
|
( echo "xpack.security.enabled: true" |
|
echo "xpack.security.http.ssl.enabled: true" |
|
echo "xpack.security.http.ssl.verification_mode: certificate" |
|
echo "xpack.security.http.ssl.keystore.path: x-pack/node.p12" |
|
echo "xpack.security.http.ssl.keystore.type: PKCS12" |
|
echo "xpack.security.http.ssl.truststore.path: x-pack/node.p12" |
|
echo "xpack.security.http.ssl.truststore.type: PKCS12" |
|
echo "xpack.security.transport.ssl.enabled: true" |
|
echo "xpack.security.transport.ssl.verification_mode: certificate" |
|
echo "xpack.security.transport.ssl.keystore.path: x-pack/node.p12" |
|
echo "xpack.security.transport.ssl.keystore.type: PKCS12" |
|
echo "xpack.security.transport.ssl.truststore.path: x-pack/node.p12" |
|
echo "xpack.security.transport.ssl.truststore.type: PKCS12" |
|
echo "xpack.watcher.enabled: false" |
|
echo "xpack.graph.enabled: false" |
|
echo "xpack.ml.enabled: false" |
|
) | $RPM_INSTALL_PREFIX/lib/openpkg/rpmtool config \ |
|
-a -i "$RPM_INSTALL_PREFIX:elasticsearch-xpack" -p "#" $conf |
|
su - %{l_rusr} -c \ |
|
"LC_CTYPE=C; export LC_CTYPE; umask 077; \ |
|
echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \ |
|
-s -x xpack.security.http.ssl.keystore.secure_password; \ |
|
echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \ |
|
-s -x xpack.security.http.ssl.truststore.secure_password; \ |
|
echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \ |
|
-s -x xpack.security.transport.ssl.keystore.secure_password; \ |
|
echo -n elasticsearch | $RPM_INSTALL_PREFIX/bin/elasticsearch-keystore add \ |
|
-s -x xpack.security.transport.ssl.truststore.secure_password" |
|
fi |
|
|
|
# display final hints on initial installation |
|
( echo "You have to initially set ElasticSearch X-Pack authentication for the" |
|
echo "three standard users \"elastic\", \"kibana\" and \"logstash_system\":" |
|
echo " \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack \\%{l_nil}" |
|
echo " setup-passwords interactive" |
|
echo "Then you can setup your custom users with:" |
|
echo " \$ $RPM_INSTALL_PREFIX/bin/elasticsearch-xpack \\%{l_nil}" |
|
echo " users useradd [-p <password>] <user>" |
|
) | %{l_rpmtool} msg -b -t notice |
|
fi |
|
|
|
%postun |
|
if [ ".$1" = .0 ]; then |
|
# before erase, remove runtime files |
|
rm -f $RPM_INSTALL_PREFIX/etc/elasticsearch/x-pack/* >/dev/null 2>&1 || true |
|
|
|
# remove default config from ElasticSearch configuration |
|
conf="$RPM_INSTALL_PREFIX/etc/elasticsearch/elasticsearch.yml" |
|
if [ -f $conf ]; then |
|
$RPM_INSTALL_PREFIX/lib/openpkg/rpmtool config \ |
|
-r -i "$RPM_INSTALL_PREFIX:elasticsearch-xpack" -p "#" $conf |
|
fi |
|
fi |
|
exit 0 |
|
|
|
|