mirror of
https://github.com/wassname/docker-postgresql.git
synced 2026-07-29 11:19:44 +08:00
separated out entrypoint.sh functions to a functions bash module
This commit is contained in:
Sameer Naik
+3
-1
@@ -1,7 +1,8 @@
|
|||||||
FROM sameersbn/ubuntu:14.04.20151117
|
FROM sameersbn/ubuntu:14.04.20151117
|
||||||
MAINTAINER sameer@damagehead.com
|
MAINTAINER sameer@damagehead.com
|
||||||
|
|
||||||
ENV PG_VERSION=9.4 \
|
ENV PG_APP_HOME="/etc/docker-postgresql"\
|
||||||
|
PG_VERSION=9.4 \
|
||||||
PG_USER=postgres \
|
PG_USER=postgres \
|
||||||
PG_HOME=/var/lib/postgresql \
|
PG_HOME=/var/lib/postgresql \
|
||||||
PG_RUNDIR=/run/postgresql \
|
PG_RUNDIR=/run/postgresql \
|
||||||
@@ -21,6 +22,7 @@ RUN wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-k
|
|||||||
&& rm -rf ${PG_HOME} \
|
&& rm -rf ${PG_HOME} \
|
||||||
&& rm -rf /var/lib/apt/lists/*
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
COPY runtime/ ${PG_APP_HOME}/
|
||||||
COPY entrypoint.sh /sbin/entrypoint.sh
|
COPY entrypoint.sh /sbin/entrypoint.sh
|
||||||
RUN chmod 755 /sbin/entrypoint.sh
|
RUN chmod 755 /sbin/entrypoint.sh
|
||||||
|
|
||||||
|
|||||||
+1
-340
@@ -1,344 +1,6 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
set -e
|
set -e
|
||||||
|
source ${PG_APP_HOME}/functions
|
||||||
PG_SSL=${PG_SSL:-}
|
|
||||||
|
|
||||||
PG_TRUST_LOCALNET=${PG_TRUST_LOCALNET:-$PSQL_TRUST_LOCALNET} # backward compatibility
|
|
||||||
PG_TRUST_LOCALNET=${PG_TRUST_LOCALNET:-false}
|
|
||||||
|
|
||||||
REPLICATION_MODE=${REPLICATION_MODE:-$PSQL_MODE} # backward compatibility
|
|
||||||
REPLICATION_MODE=${REPLICATION_MODE:-}
|
|
||||||
REPLICATION_USER=${REPLICATION_USER:-}
|
|
||||||
REPLICATION_PASS=${REPLICATION_PASS:-}
|
|
||||||
REPLICATION_HOST=${REPLICATION_HOST:-}
|
|
||||||
REPLICATION_PORT=${REPLICATION_PORT:-}
|
|
||||||
REPLICATION_SSLMODE=${REPLICATION_SSLMODE:-}
|
|
||||||
|
|
||||||
DB_NAME=${DB_NAME:-}
|
|
||||||
DB_USER=${DB_USER:-}
|
|
||||||
DB_PASS=${DB_PASS:-}
|
|
||||||
|
|
||||||
DB_LOCALE=${DB_LOCALE:-C}
|
|
||||||
DB_UNACCENT=${DB_UNACCENT:-false}
|
|
||||||
|
|
||||||
PG_CONF=${PG_DATADIR}/postgresql.conf
|
|
||||||
PG_HBA_CONF=${PG_DATADIR}/pg_hba.conf
|
|
||||||
PG_IDENT_CONF=${PG_DATADIR}/pg_ident.conf
|
|
||||||
PG_RECOVERY_CONF=${PG_DATADIR}/recovery.conf
|
|
||||||
|
|
||||||
## Execute command as PG_USER
|
|
||||||
exec_as_postgres() {
|
|
||||||
sudo -HEu ${PG_USER} "$@"
|
|
||||||
}
|
|
||||||
|
|
||||||
map_uidgid() {
|
|
||||||
USERMAP_ORIG_UID=$(id -u ${PG_USER})
|
|
||||||
USERMAP_ORIG_GID=$(id -g ${PG_USER})
|
|
||||||
USERMAP_GID=${USERMAP_GID:-${USERMAP_UID:-$USERMAP_ORIG_GID}}
|
|
||||||
USERMAP_UID=${USERMAP_UID:-$USERMAP_ORIG_UID}
|
|
||||||
if [[ ${USERMAP_UID} != ${USERMAP_ORIG_UID} ]] || [[ ${USERMAP_GID} != ${USERMAP_ORIG_GID} ]]; then
|
|
||||||
echo "Adapting uid and gid for ${PG_USER}:${PG_USER} to $USERMAP_UID:$USERMAP_GID"
|
|
||||||
groupmod -g ${USERMAP_GID} ${PG_USER}
|
|
||||||
sed -i -e "s|:${USERMAP_ORIG_UID}:${USERMAP_GID}:|:${USERMAP_UID}:${USERMAP_GID}:|" /etc/passwd
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
locale_gen() {
|
|
||||||
if [[ $DB_LOCALE != C ]]; then
|
|
||||||
echo "Generating locale \"${DB_LOCALE}\"..."
|
|
||||||
locale-gen ${DB_LOCALE} >/dev/null
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
create_datadir() {
|
|
||||||
echo "Initializing datadir..."
|
|
||||||
mkdir -p ${PG_HOME}
|
|
||||||
if [[ -d ${PG_DATADIR} ]]; then
|
|
||||||
find ${PG_DATADIR} -type f -exec chmod 0600 {} \;
|
|
||||||
find ${PG_DATADIR} -type d -exec chmod 0700 {} \;
|
|
||||||
fi
|
|
||||||
chown -R ${PG_USER}:${PG_USER} ${PG_HOME}
|
|
||||||
}
|
|
||||||
|
|
||||||
create_certdir() {
|
|
||||||
echo "Initializing certdir..."
|
|
||||||
mkdir -p ${PG_CERTDIR}
|
|
||||||
[[ -f ${PG_CERTDIR}/server.crt ]] && chmod 0644 ${PG_CERTDIR}/server.crt
|
|
||||||
[[ -f ${PG_CERTDIR}/server.key ]] && chmod 0640 ${PG_CERTDIR}/server.key
|
|
||||||
chmod 0755 ${PG_CERTDIR}
|
|
||||||
chown -R root:${PG_USER} ${PG_CERTDIR}
|
|
||||||
}
|
|
||||||
|
|
||||||
create_logdir() {
|
|
||||||
echo "Initializing logdir..."
|
|
||||||
mkdir -p ${PG_LOGDIR}
|
|
||||||
chmod -R 1775 ${PG_LOGDIR}
|
|
||||||
chown -R root:${PG_USER} ${PG_LOGDIR}
|
|
||||||
}
|
|
||||||
|
|
||||||
create_rundir() {
|
|
||||||
echo "Initializing rundir..."
|
|
||||||
mkdir -p ${PG_RUNDIR} ${PG_RUNDIR}/${PG_VERSION}-main.pg_stat_tmp
|
|
||||||
chmod -R 0755 ${PG_RUNDIR}
|
|
||||||
chmod g+s ${PG_RUNDIR}
|
|
||||||
chown -R ${PG_USER}:${PG_USER} ${PG_RUNDIR}
|
|
||||||
}
|
|
||||||
|
|
||||||
set_postgresql_param() {
|
|
||||||
local key=${1}
|
|
||||||
local value=${2}
|
|
||||||
if [[ -n ${value} ]]; then
|
|
||||||
local current=$(exec_as_postgres sed -n -e "s/^\("${key}" = '\)\([^ ']*\)\(.*\)$/\2/p" ${PG_CONF})
|
|
||||||
if [[ "${current}" != "${value}" ]]; then
|
|
||||||
echo "‣ Setting postgresql.conf parameter: ${key} = '${value}'"
|
|
||||||
exec_as_postgres sed -i "s|^[#]*[ ]*"${key}" = .*|"${key}" = '"${value}"'|" ${PG_CONF}
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
set_recovery_param() {
|
|
||||||
local key=${1}
|
|
||||||
local value=${2}
|
|
||||||
if [[ -n ${value} ]]; then
|
|
||||||
local current=$(exec_as_postgres sed -n -e "s/^\(.*\)\("${key}"=\)\([^ ']*\)\(.*\)$/\3/p" ${PG_RECOVERY_CONF})
|
|
||||||
if [[ "${current}" != "${value}" ]]; then
|
|
||||||
echo "Updating primary_conninfo ${key}..."
|
|
||||||
exec_as_postgres sed -i "s|"${key}"=[^ ']*|"${key}"="${value}"|" ${PG_RECOVERY_CONF}
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
set_hba_param() {
|
|
||||||
local value=${1}
|
|
||||||
if ! grep -q "$(sed "s| | \\\+|g" <<< ${value})" ${PG_HBA_CONF}; then
|
|
||||||
echo "${value}" >> ${PG_HBA_CONF}
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
configure_ssl() {
|
|
||||||
## NOT SURE IF THIS IS A GOOD ALTERNATIVE TO ENABLE SSL SUPPORT BY DEFAULT ##
|
|
||||||
## BECAUSE USERS WHO PULL A PREBUILT IMAGE WILL HAVE THE SAME CERTIFICATES ##
|
|
||||||
# if [[ ! -f ${PG_CERTDIR}/server.crt && ! -f ${PG_CERTDIR}/server.key ]]; then
|
|
||||||
# if [[ -f /etc/ssl/certs/ssl-cert-snakeoil.pem && -f /etc/ssl/private/ssl-cert-snakeoil.key ]]; then
|
|
||||||
# ln -sf /etc/ssl/certs/ssl-cert-snakeoil.pem ${PG_CERTDIR}/server.crt
|
|
||||||
# ln -sf /etc/ssl/private/ssl-cert-snakeoil.key ${PG_CERTDIR}/server.key
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
if [[ -f ${PG_CERTDIR}/server.crt && -f ${PG_CERTDIR}/server.key ]]; then
|
|
||||||
PG_SSL=${PG_SSL:-on}
|
|
||||||
set_postgresql_param "ssl_cert_file" "${PG_CERTDIR}/server.crt"
|
|
||||||
set_postgresql_param "ssl_key_file" "${PG_CERTDIR}/server.key"
|
|
||||||
fi
|
|
||||||
PG_SSL=${PG_SSL:-off}
|
|
||||||
set_postgresql_param "ssl" "${PG_SSL}"
|
|
||||||
}
|
|
||||||
|
|
||||||
configure_hot_standby() {
|
|
||||||
case ${REPLICATION_MODE} in
|
|
||||||
slave|snapshot) ;;
|
|
||||||
*)
|
|
||||||
echo "Configuring hot standby..."
|
|
||||||
set_postgresql_param "wal_level" "hot_standby"
|
|
||||||
set_postgresql_param "max_wal_senders" "16"
|
|
||||||
set_postgresql_param "checkpoint_segments" "8"
|
|
||||||
set_postgresql_param "wal_keep_segments" "32"
|
|
||||||
set_postgresql_param "hot_standby" "on"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
}
|
|
||||||
|
|
||||||
initialize_database() {
|
|
||||||
if [[ ! -f ${PG_DATADIR}/PG_VERSION ]]; then
|
|
||||||
case ${REPLICATION_MODE} in
|
|
||||||
slave|snapshot)
|
|
||||||
# default params
|
|
||||||
REPLICATION_PORT=${REPLICATION_PORT:-5432}
|
|
||||||
REPLICATION_SSLMODE=${REPLICATION_SSLMODE:-prefer}
|
|
||||||
|
|
||||||
if [[ -z $REPLICATION_HOST ]]; then
|
|
||||||
echo "ERROR! Cannot continue without the REPLICATION_HOST. Exiting..."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ -z $REPLICATION_USER ]]; then
|
|
||||||
echo "ERROR! Cannot continue without the REPLICATION_USER. Exiting..."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ -z $REPLICATION_PASS ]]; then
|
|
||||||
echo "ERROR! Cannot continue without the REPLICATION_PASS. Exiting..."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo -n "Waiting for $REPLICATION_HOST to accept connections (60s timeout)"
|
|
||||||
timeout=60
|
|
||||||
while ! ${PG_BINDIR}/pg_isready -h $REPLICATION_HOST -p $REPLICATION_PORT -t 1 >/dev/null 2>&1
|
|
||||||
do
|
|
||||||
timeout=$(expr $timeout - 1)
|
|
||||||
if [[ $timeout -eq 0 ]]; then
|
|
||||||
echo "Timeout! Exiting..."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
echo -n "."
|
|
||||||
sleep 1
|
|
||||||
done
|
|
||||||
echo
|
|
||||||
|
|
||||||
case ${REPLICATION_MODE} in
|
|
||||||
slave)
|
|
||||||
echo "Replicating initial data from $REPLICATION_HOST..."
|
|
||||||
exec_as_postgres PGPASSWORD=$REPLICATION_PASS ${PG_BINDIR}/pg_basebackup -D ${PG_DATADIR} \
|
|
||||||
-h ${REPLICATION_HOST} -p ${REPLICATION_PORT} -U ${REPLICATION_USER} -X stream -w >/dev/null
|
|
||||||
;;
|
|
||||||
snapshot)
|
|
||||||
echo "Generating a snapshot data on $REPLICATION_HOST..."
|
|
||||||
exec_as_postgres PGPASSWORD=$REPLICATION_PASS ${PG_BINDIR}/pg_basebackup -D ${PG_DATADIR} \
|
|
||||||
-h ${REPLICATION_HOST} -p ${REPLICATION_PORT} -U ${REPLICATION_USER} -X fetch -w >/dev/null
|
|
||||||
esac
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
echo "Initializing database..."
|
|
||||||
PG_OLD_VERSION=$(find ${PG_HOME}/[0-9].[0-9]/main -maxdepth 1 -name PG_VERSION 2>/dev/null | grep -v $PG_VERSION | sort -r | head -n1 | cut -d'/' -f5)
|
|
||||||
if [[ -n ${PG_OLD_VERSION} ]]; then
|
|
||||||
echo "‣ Migrating PostgreSQL ${PG_OLD_VERSION} data to ${PG_VERSION}..."
|
|
||||||
|
|
||||||
# protect the existing data from being altered by apt-get
|
|
||||||
mv ${PG_HOME}/${PG_OLD_VERSION} ${PG_HOME}/${PG_OLD_VERSION}.migrating
|
|
||||||
|
|
||||||
echo "‣ Installing PostgreSQL ${PG_OLD_VERSION}..."
|
|
||||||
if ! ( apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y postgresql-${PG_OLD_VERSION} postgresql-client-${PG_OLD_VERSION} ) >/dev/null; then
|
|
||||||
echo "ERROR! Failed to install PostgreSQL ${PG_OLD_VERSION}. Exiting..."
|
|
||||||
# first move the old data back
|
|
||||||
rm -rf ${PG_HOME}/${PG_OLD_VERSION}
|
|
||||||
mv ${PG_HOME}/${PG_OLD_VERSION}.migrating ${PG_HOME}/${PG_OLD_VERSION}
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
rm -rf /var/lib/apt/lists/*
|
|
||||||
|
|
||||||
# we're ready to migrate, move back the old data and remove the trap
|
|
||||||
rm -rf ${PG_HOME}/${PG_OLD_VERSION}
|
|
||||||
mv ${PG_HOME}/${PG_OLD_VERSION}.migrating ${PG_HOME}/${PG_OLD_VERSION}
|
|
||||||
fi
|
|
||||||
|
|
||||||
exec_as_postgres ${PG_BINDIR}/initdb --pgdata=${PG_DATADIR} \
|
|
||||||
--username=${PG_USER} --encoding=unicode --locale=${DB_LOCALE} --auth=trust >/dev/null
|
|
||||||
|
|
||||||
if [[ -n ${PG_OLD_VERSION} ]]; then
|
|
||||||
PG_OLD_BINDIR=/usr/lib/postgresql/${PG_OLD_VERSION}/bin
|
|
||||||
PG_OLD_DATADIR=${PG_HOME}/${PG_OLD_VERSION}/main
|
|
||||||
PG_OLD_CONF=${PG_OLD_DATADIR}/postgresql.conf
|
|
||||||
PG_OLD_HBA_CONF=${PG_OLD_DATADIR}/pg_hba.conf
|
|
||||||
PG_OLD_IDENT_CONF=${PG_OLD_DATADIR}/pg_ident.conf
|
|
||||||
|
|
||||||
echo -n "‣ Migration in progress. Please be patient..."
|
|
||||||
exec_as_postgres ${PG_BINDIR}/pg_upgrade \
|
|
||||||
-b ${PG_OLD_BINDIR} -B ${PG_BINDIR} \
|
|
||||||
-d ${PG_OLD_DATADIR} -D ${PG_DATADIR} \
|
|
||||||
-o "-c config_file=${PG_OLD_CONF} --hba_file=${PG_OLD_HBA_CONF} --ident_file=${PG_OLD_IDENT_CONF}" \
|
|
||||||
-O "-c config_file=${PG_CONF} --hba_file=${PG_HBA_CONF} --ident_file=${PG_IDENT_CONF}" >/dev/null
|
|
||||||
echo
|
|
||||||
fi
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
# configure path to data_directory
|
|
||||||
set_postgresql_param "data_directory" "${PG_DATADIR}"
|
|
||||||
|
|
||||||
# listen on all interfaces
|
|
||||||
set_postgresql_param "listen_addresses" "*"
|
|
||||||
|
|
||||||
# allow remote connections to postgresql database
|
|
||||||
set_hba_param "host all all 0.0.0.0/0 md5"
|
|
||||||
|
|
||||||
configure_hot_standby
|
|
||||||
|
|
||||||
# Change DSM from `posix' to `sysv' if we are inside an lx-brand container
|
|
||||||
if [[ $(uname -v) == "BrandZ virtual linux" ]]; then
|
|
||||||
set_postgresql_param "dynamic_shared_memory_type" "sysv"
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
trust_localnet() {
|
|
||||||
if [[ ${PG_TRUST_LOCALNET} == true ]]; then
|
|
||||||
echo "Trusting connections from the local network..."
|
|
||||||
set_hba_param "host all all samenet trust"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
create_user() {
|
|
||||||
if [[ -n ${DB_USER} ]]; then
|
|
||||||
if [[ -z ${DB_PASS} ]]; then
|
|
||||||
echo "ERROR! Please specify a password for DB_USER in DB_PASS. Exiting..."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
echo "Creating database user: ${DB_USER}"
|
|
||||||
echo "CREATE ROLE \"${DB_USER}\" with LOGIN CREATEDB PASSWORD '${DB_PASS}';" | \
|
|
||||||
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
create_database() {
|
|
||||||
if [[ -n ${DB_NAME} ]]; then
|
|
||||||
echo -n "Creating database(s): "
|
|
||||||
for database in $(awk -F',' '{for (i = 1 ; i <= NF ; i++) print $i}' <<< "${DB_NAME}"); do
|
|
||||||
echo -n "${database} "
|
|
||||||
echo "CREATE DATABASE \"${database}\";" | \
|
|
||||||
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
|
||||||
|
|
||||||
if [[ ${DB_UNACCENT} == true ]]; then
|
|
||||||
echo "CREATE EXTENSION IF NOT EXISTS unaccent;" | \
|
|
||||||
exec_as_postgres ${PG_BINDIR}/postgres --single ${database} -D ${PG_DATADIR} >/dev/null 2>&1
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ -n ${DB_USER} ]]; then
|
|
||||||
echo "GRANT ALL PRIVILEGES ON DATABASE \"${database}\" to \"${DB_USER}\";" | \
|
|
||||||
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
echo
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
create_replication_user() {
|
|
||||||
case $REPLICATION_MODE in
|
|
||||||
slave|snapshot) ;; # replication user can only be created on the master
|
|
||||||
*)
|
|
||||||
if [[ -n ${REPLICATION_USER} ]]; then
|
|
||||||
if [[ -z ${REPLICATION_PASS} ]]; then
|
|
||||||
echo "ERROR! Please specify a password for REPLICATION_USER in REPLICATION_PASS. Exiting..."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Creating replication user: ${REPLICATION_USER}"
|
|
||||||
echo "CREATE ROLE \"${REPLICATION_USER}\" WITH REPLICATION LOGIN ENCRYPTED PASSWORD '${REPLICATION_PASS}';" | \
|
|
||||||
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
|
||||||
|
|
||||||
set_hba_param "host replication ${REPLICATION_USER} 0.0.0.0/0 md5"
|
|
||||||
fi
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
}
|
|
||||||
|
|
||||||
configure_recovery() {
|
|
||||||
if [[ ! -f ${PG_RECOVERY_CONF} ]]; then
|
|
||||||
if [[ ${REPLICATION_MODE} == slave ]]; then
|
|
||||||
# initialize recovery.conf on the firstrun (slave only)
|
|
||||||
echo "Configuring recovery..."
|
|
||||||
exec_as_postgres touch ${PG_RECOVERY_CONF}
|
|
||||||
( echo "standby_mode = 'on'";
|
|
||||||
echo "primary_conninfo = 'host=${REPLICATION_HOST} port=${REPLICATION_PORT} user=${REPLICATION_USER} password=${REPLICATION_PASS} sslmode=${REPLICATION_SSLMODE}'";
|
|
||||||
echo "trigger_file = '/tmp/postgresql.trigger'" ) > ${PG_RECOVERY_CONF}
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
set_recovery_param "host" "${REPLICATION_HOST}"
|
|
||||||
set_recovery_param "port" "${REPLICATION_PORT}"
|
|
||||||
set_recovery_param "user" "${REPLICATION_USER}"
|
|
||||||
set_recovery_param "password" "${REPLICATION_PASS}"
|
|
||||||
set_recovery_param "sslmode" "${REPLICATION_SSLMODE}"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# allow arguments to be passed to postgres
|
# allow arguments to be passed to postgres
|
||||||
if [[ ${1:0:1} = '-' ]]; then
|
if [[ ${1:0:1} = '-' ]]; then
|
||||||
@@ -351,7 +13,6 @@ fi
|
|||||||
|
|
||||||
# default behaviour is to launch postgres
|
# default behaviour is to launch postgres
|
||||||
if [[ -z ${1} ]]; then
|
if [[ -z ${1} ]]; then
|
||||||
|
|
||||||
map_uidgid
|
map_uidgid
|
||||||
locale_gen
|
locale_gen
|
||||||
|
|
||||||
|
|||||||
Executable
+378
@@ -0,0 +1,378 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
PG_SSL=${PG_SSL:-}
|
||||||
|
|
||||||
|
PG_TRUST_LOCALNET=${PG_TRUST_LOCALNET:-$PSQL_TRUST_LOCALNET} # backward compatibility
|
||||||
|
PG_TRUST_LOCALNET=${PG_TRUST_LOCALNET:-false}
|
||||||
|
|
||||||
|
REPLICATION_MODE=${REPLICATION_MODE:-$PSQL_MODE} # backward compatibility
|
||||||
|
REPLICATION_MODE=${REPLICATION_MODE:-}
|
||||||
|
REPLICATION_USER=${REPLICATION_USER:-}
|
||||||
|
REPLICATION_PASS=${REPLICATION_PASS:-}
|
||||||
|
REPLICATION_HOST=${REPLICATION_HOST:-}
|
||||||
|
REPLICATION_PORT=${REPLICATION_PORT:-}
|
||||||
|
REPLICATION_SSLMODE=${REPLICATION_SSLMODE:-}
|
||||||
|
|
||||||
|
DB_NAME=${DB_NAME:-}
|
||||||
|
DB_USER=${DB_USER:-}
|
||||||
|
DB_PASS=${DB_PASS:-}
|
||||||
|
|
||||||
|
DB_LOCALE=${DB_LOCALE:-C}
|
||||||
|
DB_UNACCENT=${DB_UNACCENT:-false}
|
||||||
|
|
||||||
|
PG_CONF=${PG_DATADIR}/postgresql.conf
|
||||||
|
PG_HBA_CONF=${PG_DATADIR}/pg_hba.conf
|
||||||
|
PG_IDENT_CONF=${PG_DATADIR}/pg_ident.conf
|
||||||
|
PG_RECOVERY_CONF=${PG_DATADIR}/recovery.conf
|
||||||
|
|
||||||
|
## Execute command as PG_USER
|
||||||
|
exec_as_postgres() {
|
||||||
|
sudo -HEu ${PG_USER} "$@"
|
||||||
|
}
|
||||||
|
|
||||||
|
map_uidgid() {
|
||||||
|
USERMAP_ORIG_UID=$(id -u ${PG_USER})
|
||||||
|
USERMAP_ORIG_GID=$(id -g ${PG_USER})
|
||||||
|
USERMAP_GID=${USERMAP_GID:-${USERMAP_UID:-$USERMAP_ORIG_GID}}
|
||||||
|
USERMAP_UID=${USERMAP_UID:-$USERMAP_ORIG_UID}
|
||||||
|
if [[ ${USERMAP_UID} != ${USERMAP_ORIG_UID} ]] || [[ ${USERMAP_GID} != ${USERMAP_ORIG_GID} ]]; then
|
||||||
|
echo "Adapting uid and gid for ${PG_USER}:${PG_USER} to $USERMAP_UID:$USERMAP_GID"
|
||||||
|
groupmod -g ${USERMAP_GID} ${PG_USER}
|
||||||
|
sed -i -e "s|:${USERMAP_ORIG_UID}:${USERMAP_GID}:|:${USERMAP_UID}:${USERMAP_GID}:|" /etc/passwd
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
locale_gen() {
|
||||||
|
if [[ $DB_LOCALE != C ]]; then
|
||||||
|
echo "Generating locale \"${DB_LOCALE}\"..."
|
||||||
|
locale-gen ${DB_LOCALE} >/dev/null
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
create_datadir() {
|
||||||
|
echo "Initializing datadir..."
|
||||||
|
mkdir -p ${PG_HOME}
|
||||||
|
if [[ -d ${PG_DATADIR} ]]; then
|
||||||
|
find ${PG_DATADIR} -type f -exec chmod 0600 {} \;
|
||||||
|
find ${PG_DATADIR} -type d -exec chmod 0700 {} \;
|
||||||
|
fi
|
||||||
|
chown -R ${PG_USER}:${PG_USER} ${PG_HOME}
|
||||||
|
}
|
||||||
|
|
||||||
|
create_certdir() {
|
||||||
|
echo "Initializing certdir..."
|
||||||
|
mkdir -p ${PG_CERTDIR}
|
||||||
|
[[ -f ${PG_CERTDIR}/server.crt ]] && chmod 0644 ${PG_CERTDIR}/server.crt
|
||||||
|
[[ -f ${PG_CERTDIR}/server.key ]] && chmod 0640 ${PG_CERTDIR}/server.key
|
||||||
|
chmod 0755 ${PG_CERTDIR}
|
||||||
|
chown -R root:${PG_USER} ${PG_CERTDIR}
|
||||||
|
}
|
||||||
|
|
||||||
|
create_logdir() {
|
||||||
|
echo "Initializing logdir..."
|
||||||
|
mkdir -p ${PG_LOGDIR}
|
||||||
|
chmod -R 1775 ${PG_LOGDIR}
|
||||||
|
chown -R root:${PG_USER} ${PG_LOGDIR}
|
||||||
|
}
|
||||||
|
|
||||||
|
create_rundir() {
|
||||||
|
echo "Initializing rundir..."
|
||||||
|
mkdir -p ${PG_RUNDIR} ${PG_RUNDIR}/${PG_VERSION}-main.pg_stat_tmp
|
||||||
|
chmod -R 0755 ${PG_RUNDIR}
|
||||||
|
chmod g+s ${PG_RUNDIR}
|
||||||
|
chown -R ${PG_USER}:${PG_USER} ${PG_RUNDIR}
|
||||||
|
}
|
||||||
|
|
||||||
|
set_postgresql_param() {
|
||||||
|
local key=${1}
|
||||||
|
local value=${2}
|
||||||
|
if [[ -n ${value} ]]; then
|
||||||
|
local current=$(exec_as_postgres sed -n -e "s/^\("${key}" = '\)\([^ ']*\)\(.*\)$/\2/p" ${PG_CONF})
|
||||||
|
if [[ "${current}" != "${value}" ]]; then
|
||||||
|
echo "‣ Setting postgresql.conf parameter: ${key} = '${value}'"
|
||||||
|
exec_as_postgres sed -i "s|^[#]*[ ]*"${key}" = .*|"${key}" = '"${value}"'|" ${PG_CONF}
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
set_recovery_param() {
|
||||||
|
local key=${1}
|
||||||
|
local value=${2}
|
||||||
|
if [[ -n ${value} ]]; then
|
||||||
|
local current=$(exec_as_postgres sed -n -e "s/^\(.*\)\("${key}"=\)\([^ ']*\)\(.*\)$/\3/p" ${PG_RECOVERY_CONF})
|
||||||
|
if [[ "${current}" != "${value}" ]]; then
|
||||||
|
echo "Updating primary_conninfo ${key}..."
|
||||||
|
exec_as_postgres sed -i "s|"${key}"=[^ ']*|"${key}"="${value}"|" ${PG_RECOVERY_CONF}
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
set_hba_param() {
|
||||||
|
local value=${1}
|
||||||
|
if ! grep -q "$(sed "s| | \\\+|g" <<< ${value})" ${PG_HBA_CONF}; then
|
||||||
|
echo "${value}" >> ${PG_HBA_CONF}
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
configure_ssl() {
|
||||||
|
## NOT SURE IF THIS IS A GOOD ALTERNATIVE TO ENABLE SSL SUPPORT BY DEFAULT ##
|
||||||
|
## BECAUSE USERS WHO PULL A PREBUILT IMAGE WILL HAVE THE SAME CERTIFICATES ##
|
||||||
|
# if [[ ! -f ${PG_CERTDIR}/server.crt && ! -f ${PG_CERTDIR}/server.key ]]; then
|
||||||
|
# if [[ -f /etc/ssl/certs/ssl-cert-snakeoil.pem && -f /etc/ssl/private/ssl-cert-snakeoil.key ]]; then
|
||||||
|
# ln -sf /etc/ssl/certs/ssl-cert-snakeoil.pem ${PG_CERTDIR}/server.crt
|
||||||
|
# ln -sf /etc/ssl/private/ssl-cert-snakeoil.key ${PG_CERTDIR}/server.key
|
||||||
|
# fi
|
||||||
|
# fi
|
||||||
|
|
||||||
|
if [[ -f ${PG_CERTDIR}/server.crt && -f ${PG_CERTDIR}/server.key ]]; then
|
||||||
|
PG_SSL=${PG_SSL:-on}
|
||||||
|
set_postgresql_param "ssl_cert_file" "${PG_CERTDIR}/server.crt"
|
||||||
|
set_postgresql_param "ssl_key_file" "${PG_CERTDIR}/server.key"
|
||||||
|
fi
|
||||||
|
PG_SSL=${PG_SSL:-off}
|
||||||
|
set_postgresql_param "ssl" "${PG_SSL}"
|
||||||
|
}
|
||||||
|
|
||||||
|
configure_hot_standby() {
|
||||||
|
case ${REPLICATION_MODE} in
|
||||||
|
slave|snapshot) ;;
|
||||||
|
*)
|
||||||
|
echo "Configuring hot standby..."
|
||||||
|
set_postgresql_param "wal_level" "hot_standby"
|
||||||
|
set_postgresql_param "max_wal_senders" "16"
|
||||||
|
set_postgresql_param "checkpoint_segments" "8"
|
||||||
|
set_postgresql_param "wal_keep_segments" "32"
|
||||||
|
set_postgresql_param "hot_standby" "on"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
initialize_database() {
|
||||||
|
if [[ ! -f ${PG_DATADIR}/PG_VERSION ]]; then
|
||||||
|
case ${REPLICATION_MODE} in
|
||||||
|
slave|snapshot)
|
||||||
|
# default params
|
||||||
|
REPLICATION_PORT=${REPLICATION_PORT:-5432}
|
||||||
|
REPLICATION_SSLMODE=${REPLICATION_SSLMODE:-prefer}
|
||||||
|
|
||||||
|
if [[ -z $REPLICATION_HOST ]]; then
|
||||||
|
echo "ERROR! Cannot continue without the REPLICATION_HOST. Exiting..."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -z $REPLICATION_USER ]]; then
|
||||||
|
echo "ERROR! Cannot continue without the REPLICATION_USER. Exiting..."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -z $REPLICATION_PASS ]]; then
|
||||||
|
echo "ERROR! Cannot continue without the REPLICATION_PASS. Exiting..."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -n "Waiting for $REPLICATION_HOST to accept connections (60s timeout)"
|
||||||
|
timeout=60
|
||||||
|
while ! ${PG_BINDIR}/pg_isready -h $REPLICATION_HOST -p $REPLICATION_PORT -t 1 >/dev/null 2>&1
|
||||||
|
do
|
||||||
|
timeout=$(expr $timeout - 1)
|
||||||
|
if [[ $timeout -eq 0 ]]; then
|
||||||
|
echo "Timeout! Exiting..."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo -n "."
|
||||||
|
sleep 1
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
|
||||||
|
case ${REPLICATION_MODE} in
|
||||||
|
slave)
|
||||||
|
echo "Replicating initial data from $REPLICATION_HOST..."
|
||||||
|
exec_as_postgres PGPASSWORD=$REPLICATION_PASS ${PG_BINDIR}/pg_basebackup -D ${PG_DATADIR} \
|
||||||
|
-h ${REPLICATION_HOST} -p ${REPLICATION_PORT} -U ${REPLICATION_USER} -X stream -w >/dev/null
|
||||||
|
;;
|
||||||
|
snapshot)
|
||||||
|
echo "Generating a snapshot data on $REPLICATION_HOST..."
|
||||||
|
exec_as_postgres PGPASSWORD=$REPLICATION_PASS ${PG_BINDIR}/pg_basebackup -D ${PG_DATADIR} \
|
||||||
|
-h ${REPLICATION_HOST} -p ${REPLICATION_PORT} -U ${REPLICATION_USER} -X fetch -w >/dev/null
|
||||||
|
esac
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Initializing database..."
|
||||||
|
PG_OLD_VERSION=$(find ${PG_HOME}/[0-9].[0-9]/main -maxdepth 1 -name PG_VERSION 2>/dev/null | grep -v $PG_VERSION | sort -r | head -n1 | cut -d'/' -f5)
|
||||||
|
if [[ -n ${PG_OLD_VERSION} ]]; then
|
||||||
|
echo "‣ Migrating PostgreSQL ${PG_OLD_VERSION} data to ${PG_VERSION}..."
|
||||||
|
|
||||||
|
# protect the existing data from being altered by apt-get
|
||||||
|
mv ${PG_HOME}/${PG_OLD_VERSION} ${PG_HOME}/${PG_OLD_VERSION}.migrating
|
||||||
|
|
||||||
|
echo "‣ Installing PostgreSQL ${PG_OLD_VERSION}..."
|
||||||
|
if ! ( apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y postgresql-${PG_OLD_VERSION} postgresql-client-${PG_OLD_VERSION} ) >/dev/null; then
|
||||||
|
echo "ERROR! Failed to install PostgreSQL ${PG_OLD_VERSION}. Exiting..."
|
||||||
|
# first move the old data back
|
||||||
|
rm -rf ${PG_HOME}/${PG_OLD_VERSION}
|
||||||
|
mv ${PG_HOME}/${PG_OLD_VERSION}.migrating ${PG_HOME}/${PG_OLD_VERSION}
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
# we're ready to migrate, move back the old data and remove the trap
|
||||||
|
rm -rf ${PG_HOME}/${PG_OLD_VERSION}
|
||||||
|
mv ${PG_HOME}/${PG_OLD_VERSION}.migrating ${PG_HOME}/${PG_OLD_VERSION}
|
||||||
|
fi
|
||||||
|
|
||||||
|
exec_as_postgres ${PG_BINDIR}/initdb --pgdata=${PG_DATADIR} \
|
||||||
|
--username=${PG_USER} --encoding=unicode --locale=${DB_LOCALE} --auth=trust >/dev/null
|
||||||
|
|
||||||
|
if [[ -n ${PG_OLD_VERSION} ]]; then
|
||||||
|
PG_OLD_BINDIR=/usr/lib/postgresql/${PG_OLD_VERSION}/bin
|
||||||
|
PG_OLD_DATADIR=${PG_HOME}/${PG_OLD_VERSION}/main
|
||||||
|
PG_OLD_CONF=${PG_OLD_DATADIR}/postgresql.conf
|
||||||
|
PG_OLD_HBA_CONF=${PG_OLD_DATADIR}/pg_hba.conf
|
||||||
|
PG_OLD_IDENT_CONF=${PG_OLD_DATADIR}/pg_ident.conf
|
||||||
|
|
||||||
|
echo -n "‣ Migration in progress. Please be patient..."
|
||||||
|
exec_as_postgres ${PG_BINDIR}/pg_upgrade \
|
||||||
|
-b ${PG_OLD_BINDIR} -B ${PG_BINDIR} \
|
||||||
|
-d ${PG_OLD_DATADIR} -D ${PG_DATADIR} \
|
||||||
|
-o "-c config_file=${PG_OLD_CONF} --hba_file=${PG_OLD_HBA_CONF} --ident_file=${PG_OLD_IDENT_CONF}" \
|
||||||
|
-O "-c config_file=${PG_CONF} --hba_file=${PG_HBA_CONF} --ident_file=${PG_IDENT_CONF}" >/dev/null
|
||||||
|
echo
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# configure path to data_directory
|
||||||
|
set_postgresql_param "data_directory" "${PG_DATADIR}"
|
||||||
|
|
||||||
|
# listen on all interfaces
|
||||||
|
set_postgresql_param "listen_addresses" "*"
|
||||||
|
|
||||||
|
# allow remote connections to postgresql database
|
||||||
|
set_hba_param "host all all 0.0.0.0/0 md5"
|
||||||
|
|
||||||
|
configure_hot_standby
|
||||||
|
|
||||||
|
# Change DSM from `posix' to `sysv' if we are inside an lx-brand container
|
||||||
|
if [[ $(uname -v) == "BrandZ virtual linux" ]]; then
|
||||||
|
set_postgresql_param "dynamic_shared_memory_type" "sysv"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
trust_localnet() {
|
||||||
|
if [[ ${PG_TRUST_LOCALNET} == true ]]; then
|
||||||
|
echo "Trusting connections from the local network..."
|
||||||
|
set_hba_param "host all all samenet trust"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
create_user() {
|
||||||
|
if [[ -n ${DB_USER} ]]; then
|
||||||
|
if [[ -z ${DB_PASS} ]]; then
|
||||||
|
echo "ERROR! Please specify a password for DB_USER in DB_PASS. Exiting..."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo "Creating database user: ${DB_USER}"
|
||||||
|
echo "CREATE ROLE \"${DB_USER}\" with LOGIN CREATEDB PASSWORD '${DB_PASS}';" | \
|
||||||
|
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
create_database() {
|
||||||
|
if [[ -n ${DB_NAME} ]]; then
|
||||||
|
echo -n "Creating database(s): "
|
||||||
|
for database in $(awk -F',' '{for (i = 1 ; i <= NF ; i++) print $i}' <<< "${DB_NAME}"); do
|
||||||
|
echo -n "${database} "
|
||||||
|
echo "CREATE DATABASE \"${database}\";" | \
|
||||||
|
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
||||||
|
|
||||||
|
if [[ ${DB_UNACCENT} == true ]]; then
|
||||||
|
echo "CREATE EXTENSION IF NOT EXISTS unaccent;" | \
|
||||||
|
exec_as_postgres ${PG_BINDIR}/postgres --single ${database} -D ${PG_DATADIR} >/dev/null 2>&1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -n ${DB_USER} ]]; then
|
||||||
|
echo "GRANT ALL PRIVILEGES ON DATABASE \"${database}\" to \"${DB_USER}\";" | \
|
||||||
|
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
create_replication_user() {
|
||||||
|
case $REPLICATION_MODE in
|
||||||
|
slave|snapshot) ;; # replication user can only be created on the master
|
||||||
|
*)
|
||||||
|
if [[ -n ${REPLICATION_USER} ]]; then
|
||||||
|
if [[ -z ${REPLICATION_PASS} ]]; then
|
||||||
|
echo "ERROR! Please specify a password for REPLICATION_USER in REPLICATION_PASS. Exiting..."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Creating replication user: ${REPLICATION_USER}"
|
||||||
|
echo "CREATE ROLE \"${REPLICATION_USER}\" WITH REPLICATION LOGIN ENCRYPTED PASSWORD '${REPLICATION_PASS}';" | \
|
||||||
|
exec_as_postgres ${PG_BINDIR}/postgres --single -D ${PG_DATADIR} >/dev/null 2>&1
|
||||||
|
|
||||||
|
set_hba_param "host replication ${REPLICATION_USER} 0.0.0.0/0 md5"
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
configure_recovery() {
|
||||||
|
if [[ ! -f ${PG_RECOVERY_CONF} ]]; then
|
||||||
|
if [[ ${REPLICATION_MODE} == slave ]]; then
|
||||||
|
# initialize recovery.conf on the firstrun (slave only)
|
||||||
|
echo "Configuring recovery..."
|
||||||
|
exec_as_postgres touch ${PG_RECOVERY_CONF}
|
||||||
|
( echo "standby_mode = 'on'";
|
||||||
|
echo "primary_conninfo = 'host=${REPLICATION_HOST} port=${REPLICATION_PORT} user=${REPLICATION_USER} password=${REPLICATION_PASS} sslmode=${REPLICATION_SSLMODE}'";
|
||||||
|
echo "trigger_file = '/tmp/postgresql.trigger'" ) > ${PG_RECOVERY_CONF}
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
set_recovery_param "host" "${REPLICATION_HOST}"
|
||||||
|
set_recovery_param "port" "${REPLICATION_PORT}"
|
||||||
|
set_recovery_param "user" "${REPLICATION_USER}"
|
||||||
|
set_recovery_param "password" "${REPLICATION_PASS}"
|
||||||
|
set_recovery_param "sslmode" "${REPLICATION_SSLMODE}"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# allow arguments to be passed to postgers
|
||||||
|
if [[ ${1:0:1} = '-' ]]; then
|
||||||
|
EXTRA_ARGS="$@"
|
||||||
|
set --
|
||||||
|
elif [[ ${1} == mongod || ${1} == $(which mongod) ]]; then
|
||||||
|
EXTRA_ARGS="${@:2}"
|
||||||
|
set --
|
||||||
|
fi
|
||||||
|
|
||||||
|
# default behaviour is to launch postgres
|
||||||
|
if [[ -z ${1} ]]; then
|
||||||
|
|
||||||
|
map_uidgid
|
||||||
|
locale_gen
|
||||||
|
|
||||||
|
create_datadir
|
||||||
|
create_certdir
|
||||||
|
create_logdir
|
||||||
|
create_rundir
|
||||||
|
|
||||||
|
initialize_database
|
||||||
|
configure_ssl
|
||||||
|
trust_localnet
|
||||||
|
|
||||||
|
create_user
|
||||||
|
create_database
|
||||||
|
create_replication_user
|
||||||
|
configure_recovery
|
||||||
|
|
||||||
|
echo "Starting PostgreSQL ${PG_VERSION}..."
|
||||||
|
exec start-stop-daemon --start --chuid ${PG_USER}:${PG_USER} \
|
||||||
|
--exec ${PG_BINDIR}/postgres -- -D ${PG_DATADIR} ${EXTRA_ARGS}
|
||||||
|
else
|
||||||
|
exec "$@"
|
||||||
|
fi
|
||||||
|
|
||||||
Reference in New Issue
Block a user