···
chmod -R a+rw @datastorePath@/conf
ln -sf @kasmweb@/www @datastorePath@
14
+
cat >@datastorePath@/init_seeds.sh <<EOF
16
+
if [ ! -e /opt/kasm/current/.done_initing_data ]; then
19
+
/usr/bin/kasm_server.so --initialize-database --cfg \
20
+
/opt/kasm/current/conf/app/api.app.config.yaml \
22
+
/opt/kasm/current/conf/database/seed_data/default_properties.yaml \
23
+
--populate-production \
25
+
done && /usr/bin/kasm_server.so --cfg \
26
+
/opt/kasm/current/conf/app/api.app.config.yaml \
27
+
--populate-production \
29
+
/opt/kasm/current/conf/database/seed_data/default_agents.yaml \
30
+
&& /usr/bin/kasm_server.so --cfg \
31
+
/opt/kasm/current/conf/app/api.app.config.yaml \
32
+
--populate-production \
34
+
/opt/kasm/current/conf/database/seed_data/default_images_amd64.yaml \
35
+
&& touch /opt/kasm/current/.done_initing_data
37
+
while true; do sleep 10 ; done
39
+
echo "skipping database init"
40
+
while true; do sleep 10 ; done
docker network inspect kasm_default_network >/dev/null || docker network create kasm_default_network --subnet @networkSubnet@
16
-
if docker volume inspect kasmweb_db >/dev/null; then
45
+
if [ -e @datastorePath@/ids.env ]; then
source @datastorePath@/ids.env
18
-
echo 'echo "skipping database init"' > @datastorePath@/init_seeds.sh
19
-
echo 'while true; do sleep 10 ; done' >> @datastorePath@/init_seeds.sh
API_SERVER_ID=$(cat /proc/sys/kernel/random/uuid)
MANAGER_ID=$(cat /proc/sys/kernel/random/uuid)
···
mkdir -p @datastorePath@/certs
openssl req -x509 -nodes -days 1825 -newkey rsa:2048 -keyout @datastorePath@/certs/kasm_nginx.key -out @datastorePath@/certs/kasm_nginx.crt -subj "/C=US/ST=VA/L=None/O=None/OU=DoFu/CN=$(hostname)/emailAddress=none@none.none" 2> /dev/null
33
-
docker volume create kasmweb_db
60
+
mkdir -p @datastorePath@/file_mappings
62
+
docker volume create kasmweb_db || true
rm @datastorePath@/.done_initing_data
35
-
cat >@datastorePath@/init_seeds.sh <<EOF
37
-
if [ ! -e /opt/kasm/current/.done_initing_data ]; then
39
-
/usr/bin/kasm_server.so --initialize-database --cfg \
40
-
/opt/kasm/current/conf/app/api.app.config.yaml \
41
-
--populate-production \
43
-
/opt/kasm/current/conf/database/seed_data/default_properties.yaml \
44
-
2>&1 | grep -v UserWarning
45
-
/usr/bin/kasm_server.so --cfg \
46
-
/opt/kasm/current/conf/app/api.app.config.yaml \
47
-
--populate-production \
49
-
/opt/kasm/current/conf/database/seed_data/default_agents.yaml \
50
-
2>&1 | grep -v UserWarning
51
-
/usr/bin/kasm_server.so --cfg \
52
-
/opt/kasm/current/conf/app/api.app.config.yaml \
53
-
--populate-production \
55
-
/opt/kasm/current/conf/database/seed_data/default_connection_proxies.yaml \
56
-
2>&1 | grep -v UserWarning
57
-
/usr/bin/kasm_server.so --cfg \
58
-
/opt/kasm/current/conf/app/api.app.config.yaml \
59
-
--populate-production \
61
-
/opt/kasm/current/conf/database/seed_data/default_images_amd64.yaml \
62
-
2>&1 | grep -v UserWarning
63
-
touch /opt/kasm/current/.done_initing_data
64
-
while true; do sleep 10 ; done
66
-
echo "skipping database init"
67
-
while true; do sleep 10 ; done
chmod +x @datastorePath@/init_seeds.sh
···
cp @sslCertificateKey@ @datastorePath@/certs/kasm_nginx.key
74
+
yq -i '.server.zone_name = "'default'"' @datastorePath@/conf/app/api.app.config.yaml
75
+
yq -i '(.zones.[0]) .zone_name = "'default'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
sed -i -e "s/username.*/username: @postgresUser@/g" \
-e "s/password.*/password: @postgresPassword@/g" \
-e "s/host.*db/host: kasm_db/g" \
-e "s/ssl: true/ssl: false/g" \
84
-
-e "s/redisPassword.*/redisPassword: @redisPassword@/g" \
81
+
-e "s/redis_password.*/redis_password: @redisPassword@/g" \
-e "s/server_hostname.*/server_hostname: kasm_api/g" \
-e "s/server_id.*/server_id: $API_SERVER_ID/g" \
-e "s/manager_id.*/manager_id: $MANAGER_ID/g" \
···
-e "s/server_id.*/server_id: $SERVER_ID/g" \
@datastorePath@/conf/app/agent.app.config.yaml
93
+
# Generate a salt and hash for the desired passwords. Update the yaml
94
+
ADMIN_SALT=$(cat /proc/sys/kernel/random/uuid)
95
+
ADMIN_HASH=$(printf @defaultAdminPassword@${ADMIN_SALT} | sha256sum | cut -c-64)
96
+
USER_SALT=$(cat /proc/sys/kernel/random/uuid)
97
+
USER_HASH=$(printf @defaultUserPassword@${USER_SALT} | sha256sum | cut -c-64)
97
-
sed -i -e "s/password: admin.*/password: \"@defaultAdminPassword@\"/g" \
98
-
-e "s/password: user.*/password: \"@defaultUserPassword@\"/g" \
99
-
-e "s/default-manager-token/@defaultManagerToken@/g" \
100
-
-e "s/default-registration-token/@defaultRegistrationToken@/g" \
101
-
-e "s/upstream_auth_address:.*/upstream_auth_address: 'proxy'/g" \
99
+
yq -i '(.users.[] | select(.username=="admin@kasm.local") | .salt) = "'${ADMIN_SALT}'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
100
+
yq -i '(.users.[] | select(.username=="admin@kasm.local") | .pw_hash) = "'${ADMIN_HASH}'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
102
+
yq -i '(.users.[] | select(.username=="user@kasm.local") | .salt) = "'${USER_SALT}'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
103
+
yq -i '(.users.[] | select(.username=="user@kasm.local") | .pw_hash) = "'${USER_HASH}'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
105
+
yq -i '(.settings.[] | select(.name=="token") | select(.category == "manager")) .value = "'@defaultManagerToken@'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
107
+
yq -i '(.settings.[] | select(.name=="registration_token") | select(.category == "auth")) .value = "'@defaultRegistrationToken@'"' @datastorePath@/conf/database/seed_data/default_properties.yaml
109
+
sed -i -e "s/upstream_auth_address:.*/upstream_auth_address: 'proxy'/g" \
@datastorePath@/conf/database/seed_data/default_properties.yaml
sed -i -e "s/GUACTOKEN/@defaultGuacToken@/g" \
-e "s/APIHOSTNAME/proxy/g" \
@datastorePath@/conf/app/kasmguac.app.config.yaml
108
-
sed -i -e "s/GUACTOKEN/@defaultGuacToken@/g" \
109
-
-e "s/APIHOSTNAME/proxy/g" \
110
-
@datastorePath@/conf/database/seed_data/default_connection_proxies.yaml
sed -i "s/00000000-0000-0000-0000-000000000000/$SERVER_ID/g" \
@datastorePath@/conf/database/seed_data/default_agents.yaml
120
+
while [ ! -e @datastorePath@/.done_initing_data ]; do
124
+
systemctl restart docker-kasm_proxy.service
pyrox.dev