Installer fine tuning (#2993)

* used shellcheck to lint snipeit.sh

* do not depend on lsb-release command

* add lsb codename

* really use perms()

* more fixes

* quiet apt

* silent logging using log()

* start mysql if not running

* added curl to ubuntu

* added logfile to log function

* update apt index after adding mariadb repo

* fixed typo

* review fixes
This commit is contained in:
morph027 2017-01-11 08:07:06 +01:00 committed by snipe
parent f371c5fd62
commit 734e87f85f

View file

@ -22,7 +22,6 @@ fi
clear clear
name="snipeit" name="snipeit"
si="Snipe-IT"
hostname="$(hostname)" hostname="$(hostname)"
fqdn="$(hostname --fqdn)" fqdn="$(hostname --fqdn)"
ans=default ans=default
@ -36,16 +35,16 @@ spin[1]="\\"
spin[2]="|" spin[2]="|"
spin[3]="/" spin[3]="/"
rm -rf $tmp/ rm -rf ${tmp:?}
mkdir $tmp mkdir $tmp
# Debian/Ubuntu friendly f(x)s # Debian/Ubuntu friendly f(x)s
progress () { progress () {
while kill -0 $pid > /dev/null 2>&1 while kill -0 "$pid" > /dev/null 2>&1
do do
for i in "${spin[@]}" for i in "${spin[@]}"
do do
if [ -e /proc/$pid ]; then if [ -e /proc/"$pid" ]; then
echo -ne "\b$i" echo -ne "\b$i"
sleep .1 sleep .1
else else
@ -56,24 +55,26 @@ progress () {
} }
vhenvfile () { vhenvfile () {
sudo ls -al /etc/apache2/mods-enabled/rewrite.load >> /var/log/snipeit-install.log 2>&1 find /etc/apache2/mods-enabled -maxdepth 1 -name 'rewrite.load' >/dev/null 2>&1
apachefile=/etc/apache2/sites-available/$name.conf apachefile=/etc/apache2/sites-available/$name.conf
echo "* Create Virtual host for apache." echo "* Create Virtual host for apache."
echo >> $apachefile "<VirtualHost *:80>" {
echo >> $apachefile "ServerAdmin webmaster@localhost" echo "<VirtualHost *:80>"
echo >> $apachefile " <Directory $webdir/$name/public>" echo "ServerAdmin webmaster@localhost"
echo >> $apachefile " Require all granted" echo "<Directory $webdir/$name/public>"
echo >> $apachefile " AllowOverride All" echo " Require all granted"
echo >> $apachefile " </Directory>" echo " AllowOverride All"
echo >> $apachefile " DocumentRoot $webdir/$name/public" echo " </Directory>"
echo >> $apachefile " ServerName $fqdn" echo " DocumentRoot $webdir/$name/public"
echo >> $apachefile " ErrorLog /var/log/apache2/snipeIT.error.log" echo " ServerName $fqdn"
echo >> $apachefile " CustomLog /var/log/apache2/access.log combined" echo " ErrorLog /var/log/apache2/snipeIT.error.log"
echo >> $apachefile "</VirtualHost>" echo " CustomLog /var/log/apache2/access.log combined"
echo "</VirtualHost>"
} >> $apachefile
echo >> $hosts "127.0.0.1 $hostname $fqdn" echo >> $hosts "127.0.0.1 $hostname $fqdn"
a2ensite $name.conf >> /var/log/snipeit-install.log 2>&1 log "a2ensite $name.conf"
cat > $webdir/$name/.env <<-EOF cat > "$webdir/$name/.env" <<-EOF
#Created By Snipe-it Installer #Created By Snipe-it Installer
APP_TIMEZONE=$(cat /etc/timezone) APP_TIMEZONE=$(cat /etc/timezone)
DB_HOST=localhost DB_HOST=localhost
@ -86,19 +87,18 @@ vhenvfile () {
} }
perms () { perms () {
if [ $distro == "debian" ]; then chmod_dirs=( "$webdir/$name/storage" )
chmod_dirs+=( "$webdir/$name/storage/private_uploads" )
chmod_dirs+=( "$webdir/$name/public/uploads" )
#Change permissions on directories #Change permissions on directories
chmod -R 755 $webdir/$name/storage for chmod_dir in "${chmod_dirs[@]}"
chmod -R 755 $webdir/$name/storage/private_uploads do
chmod -R 755 $webdir/$name/public/uploads chmod -R 755 "$chmod_dir"
chown -R www-data:www-data /var/www/$name done
# echo "* Finished permission changes." }
else
sudo chmod -R 755 $webdir/$name/storage log () {
sudo chmod -R 755 $webdir/$name/storage/private_uploads eval "$@" |& tee -a /var/log/snipeit-install.log >/dev/null 2>&1
sudo chmod -R 755 $webdir/$name/public/uploads
sudo chown -R www-data:www-data /var/www/$name
fi
} }
#CentOS Friendly f(x)s #CentOS Friendly f(x)s
@ -111,8 +111,10 @@ function isinstalled {
} }
if [ -f /etc/lsb-release ]; then if [ -f /etc/lsb-release ]; then
distro="$(lsb_release -s -i )" . /etc/lsb-release
version="$(lsb_release -s -r)" distro="${DISTRIB_ID,,}"
version="$DISTRIB_RELEASE"
codename="$DISTRIB_CODENAME"
elif [ -f /etc/os-release ]; then elif [ -f /etc/os-release ]; then
distro="$(. /etc/os-release && echo $ID)" distro="$(. /etc/os-release && echo $ID)"
version="$(. /etc/os-release && echo $VERSION_ID)" version="$(. /etc/os-release && echo $VERSION_ID)"
@ -177,7 +179,7 @@ read setpw
case $setpw in case $setpw in
[yY] | [yY][Ee][Ss] ) [yY] | [yY][Ee][Ss] )
mysqluserpw="$(echo `< /dev/urandom tr -dc _A-Za-z-0-9 | head -c16`)" mysqluserpw="$(< /dev/urandom tr -dc _A-Za-z-0-9 2>&1 | head -c16)"
ans="yes" ans="yes"
;; ;;
[nN] | [n|N][O|o] ) [nN] | [n|N][O|o] )
@ -192,17 +194,19 @@ esac
done done
#Snipe says we need a new 32bit key, so let's create one randomly and inject it into the file #Snipe says we need a new 32bit key, so let's create one randomly and inject it into the file
random32="$(echo `< /dev/urandom tr -dc _A-Za-z-0-9 | head -c32`)" random32="$(< /dev/urandom tr -dc _A-Za-z-0-9 2>&1 | head -c32)"
#db_setup.sql will be injected to the database during install. #db_setup.sql will be injected to the database during install.
#Again, this file should be removed, which will be a prompt at the end of the script. #Again, this file should be removed, which will be a prompt at the end of the script.
dbsetup=$tmp/db_setup.sql dbsetup="$tmp/db_setup.sql"
echo >> $dbsetup "CREATE DATABASE snipeit;" {
echo >> $dbsetup "GRANT ALL PRIVILEGES ON snipeit.* TO snipeit@localhost IDENTIFIED BY '$mysqluserpw';" echo "CREATE DATABASE snipeit;"
echo "GRANT ALL PRIVILEGES ON snipeit.* TO snipeit@localhost IDENTIFIED BY '$mysqluserpw';"
} >> "$dbsetup"
#Let us make it so only root can read the file. Again, this isn't best practice, so please remove these after the install. #Let us make it so only root can read the file. Again, this isn't best practice, so please remove these after the install.
chown root:root $dbsetup chown root:root "$dbsetup"
chmod 700 $dbsetup chmod 700 "$dbsetup"
## TODO: Progress tracker on each step ## TODO: Progress tracker on each step
@ -216,27 +220,28 @@ case $distro in
webdir=/var/www webdir=/var/www
echo -e "\n* Updating Debian packages in the background... ${spin[0]}\n" echo -e "\n* Updating Debian packages in the background... ${spin[0]}\n"
apt-get update >> /var/log/snipeit-install.log & pid=$! 2>&1 log "apt-get update" & pid=$!
wait wait
apt-get upgrade >> /var/log/snipeit-install.log & pid=$! 2>&1 log "apt-get upgrade" & pid=$!
wait wait
echo -e "\n* Installing packages... ${spin[0]}\n" echo -e "\n* Installing packages... ${spin[0]}\n"
echo -e "\n* Going to suppress more messages that you don't need to worry about. Please wait... ${spin[0]}" echo -e "\n* Going to suppress more messages that you don't need to worry about. Please wait... ${spin[0]}"
DEBIAN_FRONTEND=noninteractive apt-get -y install mariadb-server mariadb-client apache2 git unzip php5 php5-mcrypt php5-curl php5-mysql php5-gd php5-ldap libapache2-mod-php5 curl >> /var/log/snipeit-install.log & pid=$! 2>&1 log "DEBIAN_FRONTEND=noninteractive apt-get -y install mariadb-server mariadb-client apache2 git unzip php5 php5-mcrypt php5-curl php5-mysql php5-gd php5-ldap libapache2-mod-php5 curl" & pid=$!
progress progress
wait wait
echo -e "\n* Cloning Snipeit, extracting to $webdir/$name..." echo -e "\n* Cloning Snipeit, extracting to $webdir/$name..."
git clone https://github.com/snipe/snipe-it $webdir/$name >> /var/log/snipeit-install.log & pid=$! 2>&1 log "git clone https://github.com/snipe/snipe-it $webdir/$name" & pid=$!
progress progress
php5enmod mcrypt >> /var/log/snipeit-install.log 2>&1 log "php5enmod mcrypt"
a2enmod rewrite >> /var/log/snipeit-install.log 2>&1 log "a2enmod rewrite"
vhenvfile vhenvfile
wait wait
echo >> $hosts "127.0.0.1 $hostname $fqdn" echo >> $hosts "127.0.0.1 $hostname $fqdn"
a2ensite $name.conf log "a2ensite $name.conf"
echo -e "* Modify the Snipe-It files necessary for a production environment.\n* Securing Mysql" echo -e "* Modify the Snipe-It files necessary for a production environment.\n* Securing Mysql"
# Have user set own root password when securing install # Have user set own root password when securing install
# and just set the snipeit database user at the beginning # and just set the snipeit database user at the beginning
service mysql status >/dev/null || service mysql start
/usr/bin/mysql_secure_installation /usr/bin/mysql_secure_installation
echo -e "* Creating Mysql Database and User.\n## Please Input your MySQL/MariaDB root password: " echo -e "* Creating Mysql Database and User.\n## Please Input your MySQL/MariaDB root password: "
mysql -u root -p < $dbsetup mysql -u root -p < $dbsetup
@ -244,6 +249,7 @@ case $distro in
curl -sS https://getcomposer.org/installer | php curl -sS https://getcomposer.org/installer | php
php composer.phar install --no-dev --prefer-source php composer.phar install --no-dev --prefer-source
perms perms
chown -R www-data:www-data "/var/www/$name"
service apache2 restart service apache2 restart
;; ;;
ubuntu) ubuntu)
@ -253,33 +259,37 @@ case $distro in
#composer install, set permissions, restart apache. #composer install, set permissions, restart apache.
webdir=/var/www webdir=/var/www
echo -ne "\n* Adding MariaDB repo in the background... ${spin[0]}"
(echo "deb [arch=amd64,i386] http://ftp.hosteurope.de/mirror/mariadb.org/repo/10.1/ubuntu $codename main" | tee /etc/apt/sources.list.d/mariadb.list >/dev/null 2>&1)
log "apt-key adv --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0xF1656F24C74CD1D8"
echo -ne "\n* Updating with apt-get update in the background... ${spin[0]}" echo -ne "\n* Updating with apt-get update in the background... ${spin[0]}"
sudo apt-get update >> /var/log/snipeit-install.log & pid=$! 2>&1 log "apt-get update" & pid=$!
rm /var/lib/dpkg/lock [ -f /var/lib/dpkg/lock ] && rm -f /var/lib/dpkg/lock
progress progress
echo -ne "\n* Upgrading packages with apt-get upgrade in the background... ${spin[0]}" echo -ne "\n* Upgrading packages with apt-get upgrade in the background... ${spin[0]}"
sudo apt-get -y upgrade >> /var/log/snipeit-install.log & pid=$! 2>&1 log "apt-get -y upgrade" & pid=$!
progress progress
echo -ne "\n* Setting up LAMP in the background... ${spin[0]}\n" echo -ne "\n* Setting up LAMP in the background... ${spin[0]}\n"
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y lamp-server^ >> /var/log/snipeit-install.log & pid=$! 2>&1 log "DEBIAN_FRONTEND=noninteractive apt-get install -y mariadb-server mariadb-client apache2 libapache2-mod-php curl" & pid=$!
progress progress
if [ "$version" == "16.04" ]; then if [ "$version" == "16.04" ]; then
sudo apt-get install -y git unzip php php-mcrypt php-curl php-mysql php-gd php-ldap php-zip php-mbstring php-xml >> /var/log/snipeit-install.log & pid=$! 2>&1 log "apt-get install -y git unzip php php-mcrypt php-curl php-mysql php-gd php-ldap php-zip php-mbstring php-xml" & pid=$!
progress progress
sudo phpenmod mcrypt >> /var/log/snipeit-install.log 2>&1 log "phpenmod mcrypt"
sudo phpenmod mbstring >> /var/log/snipeit-install 2>&1 log "phpenmod mbstring"
sudo a2enmod rewrite >> /var/log/snipeit-install.log 2>&1 log "a2enmod rewrite"
else else
sudo apt-get install -y git unzip php5 php5-mcrypt php5-curl php5-mysql php5-gd php5-ldap >> /var/log/snipeit-install.log & pid=$! 2>&1 log "apt-get install -y git unzip php5 php5-mcrypt php5-curl php5-mysql php5-gd php5-ldap" & pid=$!
progress progress
sudo php5enmod mcrypt >> /var/log/snipeit-install.log 2>&1 log "php5enmod mcrypt"
sudo a2enmod rewrite >> /var/log/snipeit-install.log 2>&1 log "a2enmod rewrite"
fi fi
echo -ne "\n* Cloning Snipeit, extracting to $webdir/$name... ${spin[0]}" echo -ne "\n* Cloning Snipeit, extracting to $webdir/$name... ${spin[0]}"
git clone https://github.com/snipe/snipe-it $webdir/$name >> /var/log/snipeit-install.log & pid=$! 2>&1 log "git clone https://github.com/snipe/snipe-it $webdir/$name" & pid=$!
progress progress
vhenvfile vhenvfile
echo -e "* MySQL Phase next.\n" echo -e "* MySQL Phase next.\n"
service mysql status >/dev/null || service mysql start
/usr/bin/mysql_secure_installation /usr/bin/mysql_secure_installation
echo -e "* Creating MySQL Database and user.\n* Please Input your MySQL/MariaDB root password created in the previous step.: " echo -e "* Creating MySQL Database and user.\n* Please Input your MySQL/MariaDB root password created in the previous step.: "
mysql -u root -p < $dbsetup mysql -u root -p < $dbsetup
@ -288,6 +298,7 @@ case $distro in
curl -sS https://getcomposer.org/installer | php curl -sS https://getcomposer.org/installer | php
php composer.phar install --no-dev --prefer-source php composer.phar install --no-dev --prefer-source
perms perms
chown -R www-data:www-data "/var/www/$name"
service apache2 restart service apache2 restart
;; ;;
centos) centos)
@ -299,35 +310,37 @@ case $distro in
echo "" echo ""
echo "## Adding IUS, epel-release and mariaDB repos."; echo "## Adding IUS, epel-release and mariaDB repos.";
mariadbRepo=/etc/yum.repos.d/MariaDB.repo mariadbRepo=/etc/yum.repos.d/MariaDB.repo
touch $mariadbRepo touch "$mariadbRepo"
echo >> $mariadbRepo "[mariadb]" {
echo >> $mariadbRepo "name = MariaDB" echo "[mariadb]"
echo >> $mariadbRepo "baseurl = http://yum.mariadb.org/10.0/centos6-amd64" echo "name = MariaDB"
echo >> $mariadbRepo "gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB" echo "baseurl = http://yum.mariadb.org/10.0/centos6-amd64"
echo >> $mariadbRepo "gpgcheck=1" echo "gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB"
echo >> $mariadbRepo "enable=1" echo "gpgcheck=1"
echo "enable=1"
} >> "$mariadbRepo"
yum -y install wget epel-release >> /var/log/snipeit-install.log 2>&1 log "yum -y install wget epel-release"
wget -P $tmp/ https://centos6.iuscommunity.org/ius-release.rpm >> /var/log/snipeit-install.log 2>&1 log "wget -P "$tmp/" https://centos6.iuscommunity.org/ius-release.rpm"
rpm -Uvh $tmp/ius-release*.rpm >> /var/log/snipeit-install.log 2>&1 log "rpm -Uvh "$tmp/ius-release*.rpm""
#Install PHP and other needed stuff. #Install PHP and other needed stuff.
echo "## Installing PHP and other needed stuff"; echo "## Installing PHP and other needed stuff";
PACKAGES="httpd MariaDB-server git unzip php56u php56u-mysqlnd php56u-bcmath php56u-cli php56u-common php56u-embedded php56u-gd php56u-mbstring php56u-mcrypt php56u-ldap" PACKAGES="httpd MariaDB-server git unzip php56u php56u-mysqlnd php56u-bcmath php56u-cli php56u-common php56u-embedded php56u-gd php56u-mbstring php56u-mcrypt php56u-ldap"
for p in $PACKAGES;do for p in $PACKAGES;do
if isinstalled $p;then if isinstalled "$p"; then
echo " ##" $p "Installed" echo " ## $p already installed"
else else
echo -n " ##" $p "Installing... " echo -n " ## installing $p ... "
yum -y install $p >> /var/log/snipeit-install.log 2>&1 log "yum -y install $p"
echo ""; echo "";
fi fi
done; done;
echo -e "\n## Downloading Snipe-IT from github and putting it in the web directory."; echo -e "\n## Downloading Snipe-IT from github and putting it in the web directory.";
wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file >> /var/log/snipeit-install.log 2>&1 log "wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file"
unzip -qo $tmp/$file -d $tmp/ unzip -qo $tmp/$file -d $tmp/
cp -R $tmp/$fileName $webdir/$name cp -R $tmp/$fileName $webdir/$name
@ -347,21 +360,23 @@ case $distro in
echo "## Creating the new virtual host in Apache."; echo "## Creating the new virtual host in Apache.";
apachefile=/etc/httpd/conf.d/$name.conf apachefile=/etc/httpd/conf.d/$name.conf
echo >> $apachefile "" {
echo >> $apachefile "" echo ""
echo >> $apachefile "" echo ""
echo >> $apachefile "<VirtualHost *:80>" echo ""
echo >> $apachefile "ServerAdmin webmaster@localhost" echo "<VirtualHost *:80>"
echo >> $apachefile " <Directory $webdir/$name/public>" echo "ServerAdmin webmaster@localhost"
echo >> $apachefile " Allow From All" echo " <Directory $webdir/$name/public>"
echo >> $apachefile " AllowOverride All" echo " Allow From All"
echo >> $apachefile " Options +Indexes" echo " AllowOverride All"
echo >> $apachefile " </Directory>" echo " Options +Indexes"
echo >> $apachefile " DocumentRoot $webdir/$name/public" echo " </Directory>"
echo >> $apachefile " ServerName $fqdn" echo " DocumentRoot $webdir/$name/public"
echo >> $apachefile " ErrorLog /var/log/httpd/snipeIT.error.log" echo " ServerName $fqdn"
echo >> $apachefile " CustomLog /var/log/access.log combined" echo " ErrorLog /var/log/httpd/snipeIT.error.log"
echo >> $apachefile "</VirtualHost>" echo " CustomLog /var/log/access.log combined"
echo "</VirtualHost>"
} >> "$apachefile"
echo "## Setting up hosts file."; echo "## Setting up hosts file.";
echo >> $hosts "127.0.0.1 $hostname $fqdn" echo >> $hosts "127.0.0.1 $hostname $fqdn"
@ -391,10 +406,8 @@ case $distro in
curl -sS https://getcomposer.org/installer | php curl -sS https://getcomposer.org/installer | php
php composer.phar install --no-dev --prefer-source php composer.phar install --no-dev --prefer-source
# Change permissions on directories perms
sudo chmod -R 755 $webdir/$name/storage chown -R apache:apache $webdir/$name
sudo chmod -R 755 $webdir/$name/public/uploads
sudo chown -R apache:apache $webdir/$name
/sbin/service iptables status >/dev/null 2>&1 /sbin/service iptables status >/dev/null 2>&1
if [ $? = 0 ]; then if [ $? = 0 ]; then
@ -415,29 +428,29 @@ case $distro in
#Allow us to get the mysql engine #Allow us to get the mysql engine
echo -e "\n## Add IUS, epel-release and mariaDB repos."; echo -e "\n## Add IUS, epel-release and mariaDB repos.";
yum -y install wget epel-release >> /var/log/snipeit-install.log 2>&1 log "yum -y install wget epel-release"
wget -P $tmp/ https://centos7.iuscommunity.org/ius-release.rpm >> /var/log/snipeit-install.log 2>&1 log "wget -P $tmp/ https://centos7.iuscommunity.org/ius-release.rpm"
rpm -Uvh $tmp/ius-release*.rpm >> /var/log/snipeit-install.log 2>&1 log "rpm -Uvh $tmp/ius-release*.rpm"
#Install PHP and other needed stuff. #Install PHP and other needed stuff.
echo "## Installing PHP and other needed stuff"; echo "## Installing PHP and other needed stuff";
PACKAGES="httpd mariadb-server git unzip php56u php56u-mysqlnd php56u-bcmath php56u-cli php56u-common php56u-embedded php56u-gd php56u-mbstring php56u-mcrypt php56u-ldap" PACKAGES="httpd mariadb-server git unzip php56u php56u-mysqlnd php56u-bcmath php56u-cli php56u-common php56u-embedded php56u-gd php56u-mbstring php56u-mcrypt php56u-ldap"
for p in $PACKAGES;do for p in $PACKAGES;do
if isinstalled $p;then if isinstalled "$p"; then
echo " ##" $p "Installed" echo " ## $p already installed"
else else
echo -n " ##" $p "Installing... " echo -n " ## installing $p ... "
yum -y install $p >> /var/log/snipeit-install.log 2>&1 log "yum -y install $p"
echo ""; echo "";
fi fi
done; done;
echo -e "\n## Downloading Snipe-IT from github and put it in the web directory."; echo -e "\n## Downloading Snipe-IT from github and put it in the web directory.";
wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file >> /var/log/snipeit-install.log 2>&1 log "wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file"
unzip -qo $tmp/$file -d $tmp/ log "unzip -qo $tmp/$file -d $tmp/"
cp -R $tmp/$fileName $webdir/$name log "cp -R $tmp/$fileName $webdir/$name"
# Make mariaDB start on boot and restart the daemon # Make mariaDB start on boot and restart the daemon
echo "## Starting the mariaDB server."; echo "## Starting the mariaDB server.";
@ -451,30 +464,32 @@ case $distro in
echo "## Creating MySQL Database/User." echo "## Creating MySQL Database/User."
echo "## Please Input your MySQL/MariaDB root password " echo "## Please Input your MySQL/MariaDB root password "
mysql -u root -p < $dbsetup mysql -u root -p < "$dbsetup"
##TODO make sure the apachefile doesnt exist isnt already in there ##TODO make sure the apachefile doesnt exist isnt already in there
#Create the new virtual host in Apache and enable rewrite #Create the new virtual host in Apache and enable rewrite
apachefile=/etc/httpd/conf.d/$name.conf apachefile="/etc/httpd/conf.d/$name.conf"
{
echo "## Creating the new virtual host in Apache."; echo "## Creating the new virtual host in Apache.";
echo >> $apachefile "" echo ""
echo >> $apachefile "" echo ""
echo >> $apachefile "LoadModule rewrite_module modules/mod_rewrite.so" echo "LoadModule rewrite_module modules/mod_rewrite.so"
echo >> $apachefile "" echo ""
echo >> $apachefile "<VirtualHost *:80>" echo "<VirtualHost *:80>"
echo >> $apachefile "ServerAdmin webmaster@localhost" echo "ServerAdmin webmaster@localhost"
echo >> $apachefile " <Directory $webdir/$name/public>" echo " <Directory $webdir/$name/public>"
echo >> $apachefile " Allow From All" echo " Allow From All"
echo >> $apachefile " AllowOverride All" echo " AllowOverride All"
echo >> $apachefile " Options +Indexes" echo " Options +Indexes"
echo >> $apachefile " </Directory>" echo " </Directory>"
echo >> $apachefile " DocumentRoot $webdir/$name/public" echo " DocumentRoot $webdir/$name/public"
echo >> $apachefile " ServerName $fqdn" echo " ServerName $fqdn"
echo >> $apachefile " ErrorLog /var/log/httpd/snipeIT.error.log" echo " ErrorLog /var/log/httpd/snipeIT.error.log"
echo >> $apachefile " CustomLog /var/log/access.log combined" echo " CustomLog /var/log/access.log combined"
echo >> $apachefile "</VirtualHost>" echo "</VirtualHost>"
} >> "$apachefile"
##TODO make sure this isnt already in there ##TODO make sure this isnt already in there
echo "## Setting up hosts file."; echo "## Setting up hosts file.";
@ -509,20 +524,18 @@ case $distro in
curl -sS https://getcomposer.org/installer | php curl -sS https://getcomposer.org/installer | php
php composer.phar install --no-dev --prefer-source php composer.phar install --no-dev --prefer-source
sudo chmod -R 755 $webdir/$name/storage perms
sudo chmod -R 755 $webdir/$name/storage/private_uploads chown -R apache:apache $webdir/$name
sudo chmod -R 755 $webdir/$name/public/uploads
sudo chown -R apache:apache $webdir/$name
# Make SeLinux happy # Make SeLinux happy
sudo chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/ chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/
#Check if SELinux is enforcing #Check if SELinux is enforcing
if [ $(getenforce) == "Enforcing" ]; then if [ "$(getenforce)" == "Enforcing" ]; then
#Add SELinux and firewall exception/rules. #Add SELinux and firewall exception/rules.
#Required for ldap integration #Required for ldap integration
setsebool -P httpd_can_connect_ldap on setsebool -P httpd_can_connect_ldap on
#Sets SELinux context type so that scripts running in the web server process are allowed read/write access #Sets SELinux context type so that scripts running in the web server process are allowed read/write access
sudo chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/ chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/
fi fi
systemctl restart httpd.service systemctl restart httpd.service
@ -542,6 +555,6 @@ echo ""
echo "* Cleaning up..." echo "* Cleaning up..."
rm -f snipeit.sh rm -f snipeit.sh
rm -f install.sh rm -f install.sh
rm -rf $tmp/ rm -rf ${tmp:?}
echo "* Finished!" echo "* Finished!"
sleep 1 sleep 1