diff --git a/bitnami/ghost/4/debian-11/Dockerfile b/bitnami/ghost/4/debian-11/Dockerfile deleted file mode 100644 index a32e63174843..000000000000 --- a/bitnami/ghost/4/debian-11/Dockerfile +++ /dev/null @@ -1,56 +0,0 @@ -FROM docker.io/bitnami/minideb:bullseye - -ARG TARGETARCH - -LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bullseye" \ - org.opencontainers.image.created="2023-03-18T21:30:06Z" \ - org.opencontainers.image.description="Application packaged by VMware, Inc" \ - org.opencontainers.image.licenses="Apache-2.0" \ - org.opencontainers.image.ref.name="4.48.9-debian-11-r37" \ - org.opencontainers.image.title="ghost" \ - org.opencontainers.image.vendor="VMware, Inc." \ - org.opencontainers.image.version="4.48.9" - -ENV HOME="/" \ - OS_ARCH="${TARGETARCH:-amd64}" \ - OS_FLAVOUR="debian-11" \ - OS_NAME="linux" - -COPY prebuildfs / -SHELL ["/bin/bash", "-o", "pipefail", "-c"] -# Install required system packages and dependencies -RUN install_packages acl ca-certificates curl jq libaudit1 libbz2-1.0 libcap-ng0 libcom-err2 libcrypt1 libffi7 libgcc-s1 libgssapi-krb5-2 libicu67 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 liblzma5 libncurses6 libncursesw6 libnsl2 libpam0g libreadline8 libsqlite3-0 libssl1.1 libstdc++6 libtinfo6 libtirpc3 libxml2 procps zlib1g -RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \ - COMPONENTS=( \ - "python-3.8.16-8-linux-${OS_ARCH}-debian-11" \ - "node-16.19.1-2-linux-${OS_ARCH}-debian-11" \ - "mysql-client-10.6.12-2-linux-${OS_ARCH}-debian-11" \ - "gosu-1.16.0-3-linux-${OS_ARCH}-debian-11" \ - "ghost-4.48.9-5-linux-${OS_ARCH}-debian-11" \ - ) && \ - for COMPONENT in "${COMPONENTS[@]}"; do \ - if [ ! -f "${COMPONENT}.tar.gz" ]; then \ - curl -SsLf "https://downloads.bitnami.com/files/stacksmith/${COMPONENT}.tar.gz" -O ; \ - curl -SsLf "https://downloads.bitnami.com/files/stacksmith/${COMPONENT}.tar.gz.sha256" -O ; \ - fi && \ - sha256sum -c "${COMPONENT}.tar.gz.sha256" && \ - tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' && \ - rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \ - done -RUN apt-get update && apt-get upgrade -y && \ - apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives -RUN chmod g+rwX /opt/bitnami - -COPY rootfs / -RUN /opt/bitnami/scripts/ghost/postunpack.sh -RUN /opt/bitnami/scripts/mysql-client/postunpack.sh -ENV APP_VERSION="4.48.9" \ - BITNAMI_APP_NAME="ghost" \ - PATH="/opt/bitnami/python/bin:/opt/bitnami/node/bin:/opt/bitnami/mysql/bin:/opt/bitnami/common/bin:/opt/bitnami/ghost/bin:$PATH" - -EXPOSE 2368 3000 - -WORKDIR /opt/bitnami/ghost -USER 1001 -ENTRYPOINT [ "/opt/bitnami/scripts/ghost/entrypoint.sh" ] -CMD [ "/opt/bitnami/scripts/ghost/run.sh" ] diff --git a/bitnami/ghost/4/debian-11/docker-compose.yml b/bitnami/ghost/4/debian-11/docker-compose.yml deleted file mode 100644 index 394e4997a53d..000000000000 --- a/bitnami/ghost/4/debian-11/docker-compose.yml +++ /dev/null @@ -1,31 +0,0 @@ -version: '2' -services: - mysql: - image: docker.io/bitnami/mysql:8.0 - volumes: - - 'mysql_data:/bitnami/mysql' - environment: - # ALLOW_EMPTY_PASSWORD is recommended only for development. - - ALLOW_EMPTY_PASSWORD=yes - - MYSQL_USER=bn_ghost - - MYSQL_DATABASE=bitnami_ghost - ghost: - image: docker.io/bitnami/ghost:4 - ports: - - '80:2368' - volumes: - - 'ghost_data:/bitnami/ghost' - depends_on: - - mysql - environment: - # ALLOW_EMPTY_PASSWORD is recommended only for development. - - ALLOW_EMPTY_PASSWORD=yes - - GHOST_DATABASE_HOST=mysql - - GHOST_DATABASE_PORT_NUMBER=3306 - - GHOST_DATABASE_USER=bn_ghost - - GHOST_DATABASE_NAME=bitnami_ghost -volumes: - mysql_data: - driver: local - ghost_data: - driver: local diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json deleted file mode 100644 index fa4e354dc36e..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json +++ /dev/null @@ -1,37 +0,0 @@ -{ - "ghost": { - "arch": "amd64", - "digest": "5f95f7dda9e815ecaf37acf3cdfe634f018fe5984884298198cffbced2710193", - "distro": "debian-11", - "type": "NAMI", - "version": "4.48.9-5" - }, - "gosu": { - "arch": "amd64", - "digest": "bf2b90a31df691e3648c4a41190a926bb638c3a9fa1dfcde36623ce1bfaadc23", - "distro": "debian-11", - "type": "NAMI", - "version": "1.16.0-3" - }, - "mysql-client": { - "arch": "amd64", - "digest": "6ed7c73b5e779521cf2f47a00ac54e6d2929213cb4eb3cbd9a4f12f84557c664", - "distro": "debian-11", - "type": "NAMI", - "version": "10.6.12-2" - }, - "node": { - "arch": "amd64", - "digest": "984a00c0d1b2d456c942d8acbf7acca0aff455268bcf79bae9aa7cf00d95b1ba", - "distro": "debian-11", - "type": "NAMI", - "version": "16.19.1-2" - }, - "python": { - "arch": "amd64", - "digest": "faf2f2e22f3ae88f12fb973d60295f7d63fab48c6909ae351e88ee31c5d296c6", - "distro": "debian-11", - "type": "NAMI", - "version": "3.8.16-8" - } -} \ No newline at end of file diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/licenses/licenses.txt b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/licenses/licenses.txt deleted file mode 100644 index 8373a19703c6..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/licenses/licenses.txt +++ /dev/null @@ -1,3 +0,0 @@ -Bitnami containers ship with software bundles. You can find the licenses at: -https://bitnami.com/open-source -/opt/bitnami/[name-of-bundle]/licenses/[bundle-version].txt diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libbitnami.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libbitnami.sh deleted file mode 100644 index 4242023f9415..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libbitnami.sh +++ /dev/null @@ -1,51 +0,0 @@ -#!/bin/bash -# -# Bitnami custom library - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/liblog.sh - -# Constants -BOLD='\033[1m' - -# Functions - -######################## -# Print the welcome page -# Globals: -# DISABLE_WELCOME_MESSAGE -# BITNAMI_APP_NAME -# Arguments: -# None -# Returns: -# None -######################### -print_welcome_page() { - if [[ -z "${DISABLE_WELCOME_MESSAGE:-}" ]]; then - if [[ -n "$BITNAMI_APP_NAME" ]]; then - print_image_welcome_page - fi - fi -} - -######################## -# Print the welcome page for a Bitnami Docker image -# Globals: -# BITNAMI_APP_NAME -# Arguments: -# None -# Returns: -# None -######################### -print_image_welcome_page() { - local github_url="https://github.com/bitnami/containers" - - log "" - log "${BOLD}Welcome to the Bitnami ${BITNAMI_APP_NAME} container${RESET}" - log "Subscribe to project updates by watching ${BOLD}${github_url}${RESET}" - log "Submit issues and feature requests at ${BOLD}${github_url}/issues${RESET}" - log "" -} - diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libfile.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libfile.sh deleted file mode 100644 index 41ebaf7464f6..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libfile.sh +++ /dev/null @@ -1,139 +0,0 @@ -#!/bin/bash -# -# Library for managing files - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/libos.sh - -# Functions - -######################## -# Replace a regex-matching string in a file -# Arguments: -# $1 - filename -# $2 - match regex -# $3 - substitute regex -# $4 - use POSIX regex. Default: true -# Returns: -# None -######################### -replace_in_file() { - local filename="${1:?filename is required}" - local match_regex="${2:?match regex is required}" - local substitute_regex="${3:?substitute regex is required}" - local posix_regex=${4:-true} - - local result - - # We should avoid using 'sed in-place' substitutions - # 1) They are not compatible with files mounted from ConfigMap(s) - # 2) We found incompatibility issues with Debian10 and "in-place" substitutions - local -r del=$'\001' # Use a non-printable character as a 'sed' delimiter to avoid issues - if [[ $posix_regex = true ]]; then - result="$(sed -E "s${del}${match_regex}${del}${substitute_regex}${del}g" "$filename")" - else - result="$(sed "s${del}${match_regex}${del}${substitute_regex}${del}g" "$filename")" - fi - echo "$result" > "$filename" -} - -######################## -# Replace a regex-matching multiline string in a file -# Arguments: -# $1 - filename -# $2 - match regex -# $3 - substitute regex -# Returns: -# None -######################### -replace_in_file_multiline() { - local filename="${1:?filename is required}" - local match_regex="${2:?match regex is required}" - local substitute_regex="${3:?substitute regex is required}" - - local result - local -r del=$'\001' # Use a non-printable character as a 'sed' delimiter to avoid issues - result="$(perl -pe "BEGIN{undef $/;} s${del}${match_regex}${del}${substitute_regex}${del}sg" "$filename")" - echo "$result" > "$filename" -} - -######################## -# Remove a line in a file based on a regex -# Arguments: -# $1 - filename -# $2 - match regex -# $3 - use POSIX regex. Default: true -# Returns: -# None -######################### -remove_in_file() { - local filename="${1:?filename is required}" - local match_regex="${2:?match regex is required}" - local posix_regex=${3:-true} - local result - - # We should avoid using 'sed in-place' substitutions - # 1) They are not compatible with files mounted from ConfigMap(s) - # 2) We found incompatibility issues with Debian10 and "in-place" substitutions - if [[ $posix_regex = true ]]; then - result="$(sed -E "/$match_regex/d" "$filename")" - else - result="$(sed "/$match_regex/d" "$filename")" - fi - echo "$result" > "$filename" -} - -######################## -# Appends text after the last line matching a pattern -# Arguments: -# $1 - file -# $2 - match regex -# $3 - contents to add -# Returns: -# None -######################### -append_file_after_last_match() { - local file="${1:?missing file}" - local match_regex="${2:?missing pattern}" - local value="${3:?missing value}" - - # We read the file in reverse, replace the first match (0,/pattern/s) and then reverse the results again - result="$(tac "$file" | sed -E "0,/($match_regex)/s||${value}\n\1|" | tac)" - echo "$result" > "$file" -} - -######################## -# Wait until certain entry is present in a log file -# Arguments: -# $1 - entry to look for -# $2 - log file -# $3 - max retries. Default: 12 -# $4 - sleep between retries (in seconds). Default: 5 -# Returns: -# Boolean -######################### -wait_for_log_entry() { - local -r entry="${1:-missing entry}" - local -r log_file="${2:-missing log file}" - local -r retries="${3:-12}" - local -r interval_time="${4:-5}" - local attempt=0 - - check_log_file_for_entry() { - if ! grep -qE "$entry" "$log_file"; then - debug "Entry \"${entry}\" still not present in ${log_file} (attempt $((++attempt))/${retries})" - return 1 - fi - } - debug "Checking that ${log_file} log file contains entry \"${entry}\"" - if retry_while check_log_file_for_entry "$retries" "$interval_time"; then - debug "Found entry \"${entry}\" in ${log_file}" - true - else - error "Could not find entry \"${entry}\" in ${log_file} after ${retries} retries" - debug_execute cat "$log_file" - return 1 - fi -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libfs.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libfs.sh deleted file mode 100644 index 801b9412bd99..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libfs.sh +++ /dev/null @@ -1,191 +0,0 @@ -#!/bin/bash -# -# Library for file system actions - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/liblog.sh - -# Functions - -######################## -# Ensure a file/directory is owned (user and group) but the given user -# Arguments: -# $1 - filepath -# $2 - owner -# Returns: -# None -######################### -owned_by() { - local path="${1:?path is missing}" - local owner="${2:?owner is missing}" - local group="${3:-}" - - if [[ -n $group ]]; then - chown "$owner":"$group" "$path" - else - chown "$owner":"$owner" "$path" - fi -} - -######################## -# Ensure a directory exists and, optionally, is owned by the given user -# Arguments: -# $1 - directory -# $2 - owner -# Returns: -# None -######################### -ensure_dir_exists() { - local dir="${1:?directory is missing}" - local owner_user="${2:-}" - local owner_group="${3:-}" - - mkdir -p "${dir}" - if [[ -n $owner_user ]]; then - owned_by "$dir" "$owner_user" "$owner_group" - fi -} - -######################## -# Checks whether a directory is empty or not -# arguments: -# $1 - directory -# returns: -# boolean -######################### -is_dir_empty() { - local -r path="${1:?missing directory}" - # Calculate real path in order to avoid issues with symlinks - local -r dir="$(realpath "$path")" - if [[ ! -e "$dir" ]] || [[ -z "$(ls -A "$dir")" ]]; then - true - else - false - fi -} - -######################## -# Checks whether a mounted directory is empty or not -# arguments: -# $1 - directory -# returns: -# boolean -######################### -is_mounted_dir_empty() { - local dir="${1:?missing directory}" - - if is_dir_empty "$dir" || find "$dir" -mindepth 1 -maxdepth 1 -not -name ".snapshot" -not -name "lost+found" -exec false {} +; then - true - else - false - fi -} - -######################## -# Checks whether a file can be written to or not -# arguments: -# $1 - file -# returns: -# boolean -######################### -is_file_writable() { - local file="${1:?missing file}" - local dir - dir="$(dirname "$file")" - - if [[ (-f "$file" && -w "$file") || (! -f "$file" && -d "$dir" && -w "$dir") ]]; then - true - else - false - fi -} - -######################## -# Relativize a path -# arguments: -# $1 - path -# $2 - base -# returns: -# None -######################### -relativize() { - local -r path="${1:?missing path}" - local -r base="${2:?missing base}" - pushd "$base" >/dev/null || exit - realpath -q --no-symlinks --relative-base="$base" "$path" | sed -e 's|^/$|.|' -e 's|^/||' - popd >/dev/null || exit -} - -######################## -# Configure permisions and ownership recursively -# Globals: -# None -# Arguments: -# $1 - paths (as a string). -# Flags: -# -f|--file-mode - mode for directories. -# -d|--dir-mode - mode for files. -# -u|--user - user -# -g|--group - group -# Returns: -# None -######################### -configure_permissions_ownership() { - local -r paths="${1:?paths is missing}" - local dir_mode="" - local file_mode="" - local user="" - local group="" - - # Validate arguments - shift 1 - while [ "$#" -gt 0 ]; do - case "$1" in - -f | --file-mode) - shift - file_mode="${1:?missing mode for files}" - ;; - -d | --dir-mode) - shift - dir_mode="${1:?missing mode for directories}" - ;; - -u | --user) - shift - user="${1:?missing user}" - ;; - -g | --group) - shift - group="${1:?missing group}" - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - - read -r -a filepaths <<<"$paths" - for p in "${filepaths[@]}"; do - if [[ -e "$p" ]]; then - find -L "$p" -printf "" - if [[ -n $dir_mode ]]; then - find -L "$p" -type d ! -perm "$dir_mode" -print0 | xargs -r -0 chmod "$dir_mode" - fi - if [[ -n $file_mode ]]; then - find -L "$p" -type f ! -perm "$file_mode" -print0 | xargs -r -0 chmod "$file_mode" - fi - if [[ -n $user ]] && [[ -n $group ]]; then - find -L "$p" -print0 | xargs -r -0 chown "${user}:${group}" - elif [[ -n $user ]] && [[ -z $group ]]; then - find -L "$p" -print0 | xargs -r -0 chown "${user}" - elif [[ -z $user ]] && [[ -n $group ]]; then - find -L "$p" -print0 | xargs -r -0 chgrp "${group}" - fi - else - stderr_print "$p does not exist" - fi - done -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libhook.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libhook.sh deleted file mode 100644 index 9694852a7d25..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libhook.sh +++ /dev/null @@ -1,16 +0,0 @@ -#!/bin/bash -# -# Library to use for scripts expected to be used as Kubernetes lifecycle hooks - -# shellcheck disable=SC1091 - -# Load generic libraries -. /opt/bitnami/scripts/liblog.sh -. /opt/bitnami/scripts/libos.sh - -# Override functions that log to stdout/stderr of the current process, so they print to process 1 -for function_to_override in stderr_print debug_execute; do - # Output is sent to output of process 1 and thus end up in the container log - # The hook output in general isn't saved - eval "$(declare -f "$function_to_override") >/proc/1/fd/1 2>/proc/1/fd/2" -done diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/liblog.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/liblog.sh deleted file mode 100644 index c7c0f6d4422a..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/liblog.sh +++ /dev/null @@ -1,112 +0,0 @@ -#!/bin/bash -# -# Library for logging functions - -# Constants -RESET='\033[0m' -RED='\033[38;5;1m' -GREEN='\033[38;5;2m' -YELLOW='\033[38;5;3m' -MAGENTA='\033[38;5;5m' -CYAN='\033[38;5;6m' - -# Functions - -######################## -# Print to STDERR -# Arguments: -# Message to print -# Returns: -# None -######################### -stderr_print() { - # 'is_boolean_yes' is defined in libvalidations.sh, but depends on this file so we cannot source it - local bool="${BITNAMI_QUIET:-false}" - # comparison is performed without regard to the case of alphabetic characters - shopt -s nocasematch - if ! [[ "$bool" = 1 || "$bool" =~ ^(yes|true)$ ]]; then - printf "%b\\n" "${*}" >&2 - fi -} - -######################## -# Log message -# Arguments: -# Message to log -# Returns: -# None -######################### -log() { - stderr_print "${CYAN}${MODULE:-} ${MAGENTA}$(date "+%T.%2N ")${RESET}${*}" -} -######################## -# Log an 'info' message -# Arguments: -# Message to log -# Returns: -# None -######################### -info() { - log "${GREEN}INFO ${RESET} ==> ${*}" -} -######################## -# Log message -# Arguments: -# Message to log -# Returns: -# None -######################### -warn() { - log "${YELLOW}WARN ${RESET} ==> ${*}" -} -######################## -# Log an 'error' message -# Arguments: -# Message to log -# Returns: -# None -######################### -error() { - log "${RED}ERROR${RESET} ==> ${*}" -} -######################## -# Log a 'debug' message -# Globals: -# BITNAMI_DEBUG -# Arguments: -# None -# Returns: -# None -######################### -debug() { - # 'is_boolean_yes' is defined in libvalidations.sh, but depends on this file so we cannot source it - local bool="${BITNAMI_DEBUG:-false}" - # comparison is performed without regard to the case of alphabetic characters - shopt -s nocasematch - if [[ "$bool" = 1 || "$bool" =~ ^(yes|true)$ ]]; then - log "${MAGENTA}DEBUG${RESET} ==> ${*}" - fi -} - -######################## -# Indent a string -# Arguments: -# $1 - string -# $2 - number of indentation characters (default: 4) -# $3 - indentation character (default: " ") -# Returns: -# None -######################### -indent() { - local string="${1:-}" - local num="${2:?missing num}" - local char="${3:-" "}" - # Build the indentation unit string - local indent_unit="" - for ((i = 0; i < num; i++)); do - indent_unit="${indent_unit}${char}" - done - # shellcheck disable=SC2001 - # Complex regex, see https://github.com/koalaman/shellcheck/wiki/SC2001#exceptions - echo "$string" | sed "s/^/${indent_unit}/" -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libnet.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libnet.sh deleted file mode 100644 index 8bbf165e3e2a..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libnet.sh +++ /dev/null @@ -1,163 +0,0 @@ -#!/bin/bash -# -# Library for network functions - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/liblog.sh - -# Functions - -######################## -# Resolve IP address for a host/domain (i.e. DNS lookup) -# Arguments: -# $1 - Hostname to resolve -# $2 - IP address version (v4, v6), leave empty for resolving to any version -# Returns: -# IP -######################### -dns_lookup() { - local host="${1:?host is missing}" - local ip_version="${2:-}" - getent "ahosts${ip_version}" "$host" | awk '/STREAM/ {print $1 }' | head -n 1 -} - -######################### -# Wait for a hostname and return the IP -# Arguments: -# $1 - hostname -# $2 - number of retries -# $3 - seconds to wait between retries -# Returns: -# - IP address that corresponds to the hostname -######################### -wait_for_dns_lookup() { - local hostname="${1:?hostname is missing}" - local retries="${2:-5}" - local seconds="${3:-1}" - check_host() { - if [[ $(dns_lookup "$hostname") == "" ]]; then - false - else - true - fi - } - # Wait for the host to be ready - retry_while "check_host ${hostname}" "$retries" "$seconds" - dns_lookup "$hostname" -} - -######################## -# Get machine's IP -# Arguments: -# None -# Returns: -# Machine IP -######################### -get_machine_ip() { - local -a ip_addresses - local hostname - hostname="$(hostname)" - read -r -a ip_addresses <<< "$(dns_lookup "$hostname" | xargs echo)" - if [[ "${#ip_addresses[@]}" -gt 1 ]]; then - warn "Found more than one IP address associated to hostname ${hostname}: ${ip_addresses[*]}, will use ${ip_addresses[0]}" - elif [[ "${#ip_addresses[@]}" -lt 1 ]]; then - error "Could not find any IP address associated to hostname ${hostname}" - exit 1 - fi - echo "${ip_addresses[0]}" -} - -######################## -# Check if the provided argument is a resolved hostname -# Arguments: -# $1 - Value to check -# Returns: -# Boolean -######################### -is_hostname_resolved() { - local -r host="${1:?missing value}" - if [[ -n "$(dns_lookup "$host")" ]]; then - true - else - false - fi -} - -######################## -# Parse URL -# Globals: -# None -# Arguments: -# $1 - uri - String -# $2 - component to obtain. Valid options (scheme, authority, userinfo, host, port, path, query or fragment) - String -# Returns: -# String -parse_uri() { - local uri="${1:?uri is missing}" - local component="${2:?component is missing}" - - # Solution based on https://tools.ietf.org/html/rfc3986#appendix-B with - # additional sub-expressions to split authority into userinfo, host and port - # Credits to Patryk Obara (see https://stackoverflow.com/a/45977232/6694969) - local -r URI_REGEX='^(([^:/?#]+):)?(//((([^@/?#]+)@)?([^:/?#]+)(:([0-9]+))?))?(/([^?#]*))?(\?([^#]*))?(#(.*))?' - # || | ||| | | | | | | | | | - # |2 scheme | ||6 userinfo 7 host | 9 port | 11 rpath | 13 query | 15 fragment - # 1 scheme: | |5 userinfo@ 8 :... 10 path 12 ?... 14 #... - # | 4 authority - # 3 //... - local index=0 - case "$component" in - scheme) - index=2 - ;; - authority) - index=4 - ;; - userinfo) - index=6 - ;; - host) - index=7 - ;; - port) - index=9 - ;; - path) - index=10 - ;; - query) - index=13 - ;; - fragment) - index=14 - ;; - *) - stderr_print "unrecognized component $component" - return 1 - ;; - esac - [[ "$uri" =~ $URI_REGEX ]] && echo "${BASH_REMATCH[${index}]}" -} - -######################## -# Wait for a HTTP connection to succeed -# Globals: -# * -# Arguments: -# $1 - URL to wait for -# $2 - Maximum amount of retries (optional) -# $3 - Time between retries (optional) -# Returns: -# true if the HTTP connection succeeded, false otherwise -######################### -wait_for_http_connection() { - local url="${1:?missing url}" - local retries="${2:-}" - local sleep_time="${3:-}" - if ! retry_while "debug_execute curl --silent ${url}" "$retries" "$sleep_time"; then - error "Could not connect to ${url}" - return 1 - fi -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libos.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libos.sh deleted file mode 100644 index 5e141d4ce3f1..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libos.sh +++ /dev/null @@ -1,555 +0,0 @@ -#!/bin/bash -# -# Library for operating system actions - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/liblog.sh -. /opt/bitnami/scripts/libfs.sh -. /opt/bitnami/scripts/libvalidations.sh - -# Functions - -######################## -# Check if an user exists in the system -# Arguments: -# $1 - user -# Returns: -# Boolean -######################### -user_exists() { - local user="${1:?user is missing}" - id "$user" >/dev/null 2>&1 -} - -######################## -# Check if a group exists in the system -# Arguments: -# $1 - group -# Returns: -# Boolean -######################### -group_exists() { - local group="${1:?group is missing}" - getent group "$group" >/dev/null 2>&1 -} - -######################## -# Create a group in the system if it does not exist already -# Arguments: -# $1 - group -# Flags: -# -i|--gid - the ID for the new group -# -s|--system - Whether to create new user as system user (uid <= 999) -# Returns: -# None -######################### -ensure_group_exists() { - local group="${1:?group is missing}" - local gid="" - local is_system_user=false - - # Validate arguments - shift 1 - while [ "$#" -gt 0 ]; do - case "$1" in - -i | --gid) - shift - gid="${1:?missing gid}" - ;; - -s | --system) - is_system_user=true - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - - if ! group_exists "$group"; then - local -a args=("$group") - if [[ -n "$gid" ]]; then - if group_exists "$gid"; then - error "The GID $gid is already in use." >&2 - return 1 - fi - args+=("--gid" "$gid") - fi - $is_system_user && args+=("--system") - groupadd "${args[@]}" >/dev/null 2>&1 - fi -} - -######################## -# Create an user in the system if it does not exist already -# Arguments: -# $1 - user -# Flags: -# -i|--uid - the ID for the new user -# -g|--group - the group the new user should belong to -# -a|--append-groups - comma-separated list of supplemental groups to append to the new user -# -h|--home - the home directory for the new user -# -s|--system - whether to create new user as system user (uid <= 999) -# Returns: -# None -######################### -ensure_user_exists() { - local user="${1:?user is missing}" - local uid="" - local group="" - local append_groups="" - local home="" - local is_system_user=false - - # Validate arguments - shift 1 - while [ "$#" -gt 0 ]; do - case "$1" in - -i | --uid) - shift - uid="${1:?missing uid}" - ;; - -g | --group) - shift - group="${1:?missing group}" - ;; - -a | --append-groups) - shift - append_groups="${1:?missing append_groups}" - ;; - -h | --home) - shift - home="${1:?missing home directory}" - ;; - -s | --system) - is_system_user=true - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - - if ! user_exists "$user"; then - local -a user_args=("-N" "$user") - if [[ -n "$uid" ]]; then - if user_exists "$uid"; then - error "The UID $uid is already in use." - return 1 - fi - user_args+=("--uid" "$uid") - else - $is_system_user && user_args+=("--system") - fi - useradd "${user_args[@]}" >/dev/null 2>&1 - fi - - if [[ -n "$group" ]]; then - local -a group_args=("$group") - $is_system_user && group_args+=("--system") - ensure_group_exists "${group_args[@]}" - usermod -g "$group" "$user" >/dev/null 2>&1 - fi - - if [[ -n "$append_groups" ]]; then - local -a groups - read -ra groups <<<"$(tr ',;' ' ' <<<"$append_groups")" - for group in "${groups[@]}"; do - ensure_group_exists "$group" - usermod -aG "$group" "$user" >/dev/null 2>&1 - done - fi - - if [[ -n "$home" ]]; then - mkdir -p "$home" - usermod -d "$home" "$user" >/dev/null 2>&1 - configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group" - fi -} - -######################## -# Check if the script is currently running as root -# Arguments: -# $1 - user -# $2 - group -# Returns: -# Boolean -######################### -am_i_root() { - if [[ "$(id -u)" = "0" ]]; then - true - else - false - fi -} - -######################## -# Print OS metadata -# Arguments: -# $1 - Flag name -# Flags: -# --id - Distro ID -# --version - Distro version -# --branch - Distro branch -# --codename - Distro codename -# --name - Distro name -# --pretty-name - Distro pretty name -# Returns: -# String -######################### -get_os_metadata() { - local -r flag_name="${1:?missing flag}" - # Helper function - get_os_release_metadata() { - local -r env_name="${1:?missing environment variable name}" - ( - . /etc/os-release - echo "${!env_name}" - ) - } - case "$flag_name" in - --id) - get_os_release_metadata ID - ;; - --version) - get_os_release_metadata VERSION_ID - ;; - --branch) - get_os_release_metadata VERSION_ID | sed 's/\..*//' - ;; - --codename) - get_os_release_metadata VERSION_CODENAME - ;; - --name) - get_os_release_metadata NAME - ;; - --pretty-name) - get_os_release_metadata PRETTY_NAME - ;; - *) - error "Unknown flag ${flag_name}" - return 1 - ;; - esac -} - -######################## -# Get total memory available -# Arguments: -# None -# Returns: -# Memory in bytes -######################### -get_total_memory() { - echo $(($(grep MemTotal /proc/meminfo | awk '{print $2}') / 1024)) -} - -######################## -# Get machine size depending on specified memory -# Globals: -# None -# Arguments: -# None -# Flags: -# --memory - memory size (optional) -# Returns: -# Detected instance size -######################### -get_machine_size() { - local memory="" - # Validate arguments - while [[ "$#" -gt 0 ]]; do - case "$1" in - --memory) - shift - memory="${1:?missing memory}" - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - if [[ -z "$memory" ]]; then - debug "Memory was not specified, detecting available memory automatically" - memory="$(get_total_memory)" - fi - sanitized_memory=$(convert_to_mb "$memory") - if [[ "$sanitized_memory" -gt 26000 ]]; then - echo 2xlarge - elif [[ "$sanitized_memory" -gt 13000 ]]; then - echo xlarge - elif [[ "$sanitized_memory" -gt 6000 ]]; then - echo large - elif [[ "$sanitized_memory" -gt 3000 ]]; then - echo medium - elif [[ "$sanitized_memory" -gt 1500 ]]; then - echo small - else - echo micro - fi -} - -######################## -# Get machine size depending on specified memory -# Globals: -# None -# Arguments: -# $1 - memory size (optional) -# Returns: -# Detected instance size -######################### -get_supported_machine_sizes() { - echo micro small medium large xlarge 2xlarge -} - -######################## -# Convert memory size from string to amount of megabytes (i.e. 2G -> 2048) -# Globals: -# None -# Arguments: -# $1 - memory size -# Returns: -# Result of the conversion -######################### -convert_to_mb() { - local amount="${1:-}" - if [[ $amount =~ ^([0-9]+)(m|M|g|G) ]]; then - size="${BASH_REMATCH[1]}" - unit="${BASH_REMATCH[2]}" - if [[ "$unit" = "g" || "$unit" = "G" ]]; then - amount="$((size * 1024))" - else - amount="$size" - fi - fi - echo "$amount" -} - -######################### -# Redirects output to /dev/null if debug mode is disabled -# Globals: -# BITNAMI_DEBUG -# Arguments: -# $@ - Command to execute -# Returns: -# None -######################### -debug_execute() { - if is_boolean_yes "${BITNAMI_DEBUG:-false}"; then - "$@" - else - "$@" >/dev/null 2>&1 - fi -} - -######################## -# Retries a command a given number of times -# Arguments: -# $1 - cmd (as a string) -# $2 - max retries. Default: 12 -# $3 - sleep between retries (in seconds). Default: 5 -# Returns: -# Boolean -######################### -retry_while() { - local cmd="${1:?cmd is missing}" - local retries="${2:-12}" - local sleep_time="${3:-5}" - local return_value=1 - - read -r -a command <<<"$cmd" - for ((i = 1; i <= retries; i += 1)); do - "${command[@]}" && return_value=0 && break - sleep "$sleep_time" - done - return $return_value -} - -######################## -# Generate a random string -# Arguments: -# -t|--type - String type (ascii, alphanumeric, numeric), defaults to ascii -# -c|--count - Number of characters, defaults to 32 -# Arguments: -# None -# Returns: -# None -# Returns: -# String -######################### -generate_random_string() { - local type="ascii" - local count="32" - local filter - local result - # Validate arguments - while [[ "$#" -gt 0 ]]; do - case "$1" in - -t | --type) - shift - type="$1" - ;; - -c | --count) - shift - count="$1" - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - # Validate type - case "$type" in - ascii) - filter="[:print:]" - ;; - alphanumeric) - filter="a-zA-Z0-9" - ;; - numeric) - filter="0-9" - ;; - *) - echo "Invalid type ${type}" >&2 - return 1 - ;; - esac - # Obtain count + 10 lines from /dev/urandom to ensure that the resulting string has the expected size - # Note there is a very small chance of strings starting with EOL character - # Therefore, the higher amount of lines read, this will happen less frequently - result="$(head -n "$((count + 10))" /dev/urandom | tr -dc "$filter" | head -c "$count")" - echo "$result" -} - -######################## -# Create md5 hash from a string -# Arguments: -# $1 - string -# Returns: -# md5 hash - string -######################### -generate_md5_hash() { - local -r str="${1:?missing input string}" - echo -n "$str" | md5sum | awk '{print $1}' -} - -######################## -# Create sha1 hash from a string -# Arguments: -# $1 - string -# $2 - algorithm - 1 (default), 224, 256, 384, 512 -# Returns: -# sha1 hash - string -######################### -generate_sha_hash() { - local -r str="${1:?missing input string}" - local -r algorithm="${2:-1}" - echo -n "$str" | "sha${algorithm}sum" | awk '{print $1}' -} - -######################## -# Converts a string to its hexadecimal representation -# Arguments: -# $1 - string -# Returns: -# hexadecimal representation of the string -######################### -convert_to_hex() { - local -r str=${1:?missing input string} - local -i iterator - local char - for ((iterator = 0; iterator < ${#str}; iterator++)); do - char=${str:iterator:1} - printf '%x' "'${char}" - done -} - -######################## -# Get boot time -# Globals: -# None -# Arguments: -# None -# Returns: -# Boot time metadata -######################### -get_boot_time() { - stat /proc --format=%Y -} - -######################## -# Get machine ID -# Globals: -# None -# Arguments: -# None -# Returns: -# Machine ID -######################### -get_machine_id() { - local machine_id - if [[ -f /etc/machine-id ]]; then - machine_id="$(cat /etc/machine-id)" - fi - if [[ -z "$machine_id" ]]; then - # Fallback to the boot-time, which will at least ensure a unique ID in the current session - machine_id="$(get_boot_time)" - fi - echo "$machine_id" -} - -######################## -# Get the root partition's disk device ID (e.g. /dev/sda1) -# Globals: -# None -# Arguments: -# None -# Returns: -# Root partition disk ID -######################### -get_disk_device_id() { - local device_id="" - if grep -q ^/dev /proc/mounts; then - device_id="$(grep ^/dev /proc/mounts | awk '$2 == "/" { print $1 }' | tail -1)" - fi - # If it could not be autodetected, fallback to /dev/sda1 as a default - if [[ -z "$device_id" || ! -b "$device_id" ]]; then - device_id="/dev/sda1" - fi - echo "$device_id" -} - -######################## -# Get the root disk device ID (e.g. /dev/sda) -# Globals: -# None -# Arguments: -# None -# Returns: -# Root disk ID -######################### -get_root_disk_device_id() { - get_disk_device_id | sed -E 's/p?[0-9]+$//' -} - -######################## -# Get the root disk size in bytes -# Globals: -# None -# Arguments: -# None -# Returns: -# Root disk size in bytes -######################### -get_root_disk_size() { - fdisk -l "$(get_root_disk_device_id)" | grep 'Disk.*bytes' | sed -E 's/.*, ([0-9]+) bytes,.*/\1/' || true -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libpersistence.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libpersistence.sh deleted file mode 100644 index 99df69681c27..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libpersistence.sh +++ /dev/null @@ -1,122 +0,0 @@ -#!/bin/bash -# -# Bitnami persistence library -# Used for bringing persistence capabilities to applications that don't have clear separation of data and logic - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/libfs.sh -. /opt/bitnami/scripts/libos.sh -. /opt/bitnami/scripts/liblog.sh -. /opt/bitnami/scripts/libversion.sh - -# Functions - -######################## -# Persist an application directory -# Globals: -# BITNAMI_ROOT_DIR -# BITNAMI_VOLUME_DIR -# Arguments: -# $1 - App folder name -# $2 - List of app files to persist -# Returns: -# true if all steps succeeded, false otherwise -######################### -persist_app() { - local -r app="${1:?missing app}" - local -a files_to_restore - read -r -a files_to_persist <<< "$(tr ',;:' ' ' <<< "$2")" - local -r install_dir="${BITNAMI_ROOT_DIR}/${app}" - local -r persist_dir="${BITNAMI_VOLUME_DIR}/${app}" - # Persist the individual files - if [[ "${#files_to_persist[@]}" -le 0 ]]; then - warn "No files are configured to be persisted" - return - fi - pushd "$install_dir" >/dev/null || exit - local file_to_persist_relative file_to_persist_destination file_to_persist_destination_folder - local -r tmp_file="/tmp/perms.acl" - for file_to_persist in "${files_to_persist[@]}"; do - if [[ ! -f "$file_to_persist" && ! -d "$file_to_persist" ]]; then - error "Cannot persist '${file_to_persist}' because it does not exist" - return 1 - fi - file_to_persist_relative="$(relativize "$file_to_persist" "$install_dir")" - file_to_persist_destination="${persist_dir}/${file_to_persist_relative}" - file_to_persist_destination_folder="$(dirname "$file_to_persist_destination")" - # Get original permissions for existing files, which will be applied later - # Exclude the root directory with 'sed', to avoid issues when copying the entirety of it to a volume - getfacl -R "$file_to_persist_relative" | sed -E '/# file: (\..+|[^.])/,$!d' > "$tmp_file" - # Copy directories to the volume - ensure_dir_exists "$file_to_persist_destination_folder" - cp -Lr --preserve=links "$file_to_persist_relative" "$file_to_persist_destination_folder" - # Restore permissions - pushd "$persist_dir" >/dev/null || exit - if am_i_root; then - setfacl --restore="$tmp_file" - else - # When running as non-root, don't change ownership - setfacl --restore=<(grep -E -v '^# (owner|group):' "$tmp_file") - fi - popd >/dev/null || exit - done - popd >/dev/null || exit - rm -f "$tmp_file" - # Install the persisted files into the installation directory, via symlinks - restore_persisted_app "$@" -} - -######################## -# Restore a persisted application directory -# Globals: -# BITNAMI_ROOT_DIR -# BITNAMI_VOLUME_DIR -# FORCE_MAJOR_UPGRADE -# Arguments: -# $1 - App folder name -# $2 - List of app files to restore -# Returns: -# true if all steps succeeded, false otherwise -######################### -restore_persisted_app() { - local -r app="${1:?missing app}" - local -a files_to_restore - read -r -a files_to_restore <<< "$(tr ',;:' ' ' <<< "$2")" - local -r install_dir="${BITNAMI_ROOT_DIR}/${app}" - local -r persist_dir="${BITNAMI_VOLUME_DIR}/${app}" - # Restore the individual persisted files - if [[ "${#files_to_restore[@]}" -le 0 ]]; then - warn "No persisted files are configured to be restored" - return - fi - local file_to_restore_relative file_to_restore_origin file_to_restore_destination - for file_to_restore in "${files_to_restore[@]}"; do - file_to_restore_relative="$(relativize "$file_to_restore" "$install_dir")" - # We use 'realpath --no-symlinks' to ensure that the case of '.' is covered and the directory is removed - file_to_restore_origin="$(realpath --no-symlinks "${install_dir}/${file_to_restore_relative}")" - file_to_restore_destination="$(realpath --no-symlinks "${persist_dir}/${file_to_restore_relative}")" - rm -rf "$file_to_restore_origin" - ln -sfn "$file_to_restore_destination" "$file_to_restore_origin" - done -} - -######################## -# Check if an application directory was already persisted -# Globals: -# BITNAMI_VOLUME_DIR -# Arguments: -# $1 - App folder name -# Returns: -# true if all steps succeeded, false otherwise -######################### -is_app_initialized() { - local -r app="${1:?missing app}" - local -r persist_dir="${BITNAMI_VOLUME_DIR}/${app}" - if ! is_mounted_dir_empty "$persist_dir"; then - true - else - false - fi -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libservice.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libservice.sh deleted file mode 100644 index 2d4b7af6fd3a..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libservice.sh +++ /dev/null @@ -1,476 +0,0 @@ -#!/bin/bash -# -# Library for managing services - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/libvalidations.sh -. /opt/bitnami/scripts/liblog.sh - -# Functions - -######################## -# Read the provided pid file and returns a PID -# Arguments: -# $1 - Pid file -# Returns: -# PID -######################### -get_pid_from_file() { - local pid_file="${1:?pid file is missing}" - - if [[ -f "$pid_file" ]]; then - if [[ -n "$(< "$pid_file")" ]] && [[ "$(< "$pid_file")" -gt 0 ]]; then - echo "$(< "$pid_file")" - fi - fi -} - -######################## -# Check if a provided PID corresponds to a running service -# Arguments: -# $1 - PID -# Returns: -# Boolean -######################### -is_service_running() { - local pid="${1:?pid is missing}" - - kill -0 "$pid" 2>/dev/null -} - -######################## -# Stop a service by sending a termination signal to its pid -# Arguments: -# $1 - Pid file -# $2 - Signal number (optional) -# Returns: -# None -######################### -stop_service_using_pid() { - local pid_file="${1:?pid file is missing}" - local signal="${2:-}" - local pid - - pid="$(get_pid_from_file "$pid_file")" - [[ -z "$pid" ]] || ! is_service_running "$pid" && return - - if [[ -n "$signal" ]]; then - kill "-${signal}" "$pid" - else - kill "$pid" - fi - - local counter=10 - while [[ "$counter" -ne 0 ]] && is_service_running "$pid"; do - sleep 1 - counter=$((counter - 1)) - done -} - -######################## -# Start cron daemon -# Arguments: -# None -# Returns: -# true if started correctly, false otherwise -######################### -cron_start() { - if [[ -x "/usr/sbin/cron" ]]; then - /usr/sbin/cron - elif [[ -x "/usr/sbin/crond" ]]; then - /usr/sbin/crond - else - false - fi -} - -######################## -# Generate a cron configuration file for a given service -# Arguments: -# $1 - Service name -# $2 - Command -# Flags: -# --run-as - User to run as (default: root) -# --schedule - Cron schedule configuration (default: * * * * *) -# Returns: -# None -######################### -generate_cron_conf() { - local service_name="${1:?service name is missing}" - local cmd="${2:?command is missing}" - local run_as="root" - local schedule="* * * * *" - local clean="true" - - local clean="true" - - # Parse optional CLI flags - shift 2 - while [[ "$#" -gt 0 ]]; do - case "$1" in - --run-as) - shift - run_as="$1" - ;; - --schedule) - shift - schedule="$1" - ;; - --no-clean) - clean="false" - ;; - *) - echo "Invalid command line flag ${1}" >&2 - return 1 - ;; - esac - shift - done - - mkdir -p /etc/cron.d - if "$clean"; then - echo "${schedule} ${run_as} ${cmd}" > /etc/cron.d/"$service_name" - else - echo "${schedule} ${run_as} ${cmd}" >> /etc/cron.d/"$service_name" - fi -} - -######################## -# Remove a cron configuration file for a given service -# Arguments: -# $1 - Service name -# Returns: -# None -######################### -remove_cron_conf() { - local service_name="${1:?service name is missing}" - local cron_conf_dir="/etc/monit/conf.d" - rm -f "${cron_conf_dir}/${service_name}" -} - -######################## -# Generate a monit configuration file for a given service -# Arguments: -# $1 - Service name -# $2 - Pid file -# $3 - Start command -# $4 - Stop command -# Flags: -# --disable - Whether to disable the monit configuration -# Returns: -# None -######################### -generate_monit_conf() { - local service_name="${1:?service name is missing}" - local pid_file="${2:?pid file is missing}" - local start_command="${3:?start command is missing}" - local stop_command="${4:?stop command is missing}" - local monit_conf_dir="/etc/monit/conf.d" - local disabled="no" - - # Parse optional CLI flags - shift 4 - while [[ "$#" -gt 0 ]]; do - case "$1" in - --disable) - disabled="yes" - ;; - *) - echo "Invalid command line flag ${1}" >&2 - return 1 - ;; - esac - shift - done - - is_boolean_yes "$disabled" && conf_suffix=".disabled" - mkdir -p "$monit_conf_dir" - cat >"${monit_conf_dir}/${service_name}.conf${conf_suffix:-}" <&2 - return 1 - ;; - esac - shift - done - - mkdir -p "$logrotate_conf_dir" - cat <"${logrotate_conf_dir}/${service_name}" -${log_path} { - ${period} - rotate ${rotations} - dateext - compress - copytruncate - missingok -$(indent "$extra" 2) -} -EOF -} - -######################## -# Remove a logrotate configuration file -# Arguments: -# $1 - Service name -# Returns: -# None -######################### -remove_logrotate_conf() { - local service_name="${1:?service name is missing}" - local logrotate_conf_dir="/etc/logrotate.d" - rm -f "${logrotate_conf_dir}/${service_name}" -} - -######################## -# Generate a Systemd configuration file -# Arguments: -# $1 - Service name -# Flags: -# --custom-service-content - Custom content to add to the [service] block -# --environment - Environment variable to define (multiple --environment options may be passed) -# --environment-file - Text file with environment variables -# --exec-start - Start command (required) -# --exec-start-pre - Pre-start command (optional) -# --exec-start-post - Post-start command (optional) -# --exec-stop - Stop command (optional) -# --exec-reload - Reload command (optional) -# --group - System group to start the service with -# --name - Service full name (e.g. Apache HTTP Server, defaults to $1) -# --restart - When to restart the Systemd service after being stopped (defaults to always) -# --pid-file - Service PID file -# --standard-output - File where to print stdout output -# --standard-error - File where to print stderr output -# --success-exit-status - Exit code that indicates a successful shutdown -# --type - Systemd unit type (defaults to forking) -# --user - System user to start the service with -# --working-directory - Working directory at which to start the service -# Returns: -# None -######################### -generate_systemd_conf() { - local -r service_name="${1:?service name is missing}" - local -r systemd_units_dir="/etc/systemd/system" - local -r service_file="${systemd_units_dir}/bitnami.${service_name}.service" - # Default values - local name="$service_name" - local type="forking" - local user="" - local group="" - local environment="" - local environment_file="" - local exec_start="" - local exec_start_pre="" - local exec_start_post="" - local exec_stop="" - local exec_reload="" - local restart="always" - local pid_file="" - local standard_output="journal" - local standard_error="" - local limits_content="" - local success_exit_status="" - local custom_service_content="" - local working_directory="" - # Parse CLI flags - shift - while [[ "$#" -gt 0 ]]; do - case "$1" in - --name \ - | --type \ - | --user \ - | --group \ - | --environment-file \ - | --exec-start \ - | --exec-stop \ - | --exec-reload \ - | --restart \ - | --pid-file \ - | --standard-output \ - | --standard-error \ - | --success-exit-status \ - | --custom-service-content \ - | --working-directory \ - ) - var_name="$(echo "$1" | sed -e "s/^--//" -e "s/-/_/g")" - shift - declare "$var_name"="${1:?"${var_name} value is missing"}" - ;; - --limit-*) - [[ -n "$limits_content" ]] && limits_content+=$'\n' - var_name="${1//--limit-}" - shift - limits_content+="Limit${var_name^^}=${1:?"--limit-${var_name} value is missing"}" - ;; - --exec-start-pre) - shift - [[ -n "$exec_start_pre" ]] && exec_start_pre+=$'\n' - exec_start_pre+="ExecStartPre=${1:?"--exec-start-pre value is missing"}" - ;; - --exec-start-post) - shift - [[ -n "$exec_start_post" ]] && exec_start_post+=$'\n' - exec_start_post+="ExecStartPost=${1:?"--exec-start-post value is missing"}" - ;; - --environment) - shift - # It is possible to add multiple environment lines - [[ -n "$environment" ]] && environment+=$'\n' - environment+="Environment=${1:?"--environment value is missing"}" - ;; - *) - echo "Invalid command line flag ${1}" >&2 - return 1 - ;; - esac - shift - done - # Validate inputs - local error="no" - if [[ -z "$exec_start" ]]; then - error "The --exec-start option is required" - error="yes" - fi - if [[ "$error" != "no" ]]; then - return 1 - fi - # Generate the Systemd unit - cat > "$service_file" <> "$service_file" <<< "WorkingDirectory=$working_directory" - fi - if [[ -n "$exec_start_pre" ]]; then - # This variable may contain multiple ExecStartPre= directives - cat >> "$service_file" <<< "$exec_start_pre" - fi - if [[ -n "$exec_start" ]]; then - cat >> "$service_file" <<< "ExecStart=${exec_start}" - fi - if [[ -n "$exec_start_post" ]]; then - # This variable may contain multiple ExecStartPost= directives - cat >> "$service_file" <<< "$exec_start_post" - fi - # Optional stop and reload commands - if [[ -n "$exec_stop" ]]; then - cat >> "$service_file" <<< "ExecStop=${exec_stop}" - fi - if [[ -n "$exec_reload" ]]; then - cat >> "$service_file" <<< "ExecReload=${exec_reload}" - fi - # User and group - if [[ -n "$user" ]]; then - cat >> "$service_file" <<< "User=${user}" - fi - if [[ -n "$group" ]]; then - cat >> "$service_file" <<< "Group=${group}" - fi - # PID file allows to determine if the main process is running properly (for Restart=always) - if [[ -n "$pid_file" ]]; then - cat >> "$service_file" <<< "PIDFile=${pid_file}" - fi - if [[ -n "$restart" ]]; then - cat >> "$service_file" <<< "Restart=${restart}" - fi - # Environment flags - if [[ -n "$environment" ]]; then - # This variable may contain multiple Environment= directives - cat >> "$service_file" <<< "$environment" - fi - if [[ -n "$environment_file" ]]; then - cat >> "$service_file" <<< "EnvironmentFile=${environment_file}" - fi - # Logging - if [[ -n "$standard_output" ]]; then - cat >> "$service_file" <<< "StandardOutput=${standard_output}" - fi - if [[ -n "$standard_error" ]]; then - cat >> "$service_file" <<< "StandardError=${standard_error}" - fi - if [[ -n "$custom_service_content" ]]; then - # This variable may contain multiple miscellaneous directives - cat >> "$service_file" <<< "$custom_service_content" - fi - if [[ -n "$success_exit_status" ]]; then - cat >> "$service_file" <> "$service_file" <> "$service_file" <> "$service_file" <= 0 )); then - true - else - false - fi -} - -######################## -# Check if the provided argument is a boolean or is the string 'yes/true' -# Arguments: -# $1 - Value to check -# Returns: -# Boolean -######################### -is_boolean_yes() { - local -r bool="${1:-}" - # comparison is performed without regard to the case of alphabetic characters - shopt -s nocasematch - if [[ "$bool" = 1 || "$bool" =~ ^(yes|true)$ ]]; then - true - else - false - fi -} - -######################## -# Check if the provided argument is a boolean yes/no value -# Arguments: -# $1 - Value to check -# Returns: -# Boolean -######################### -is_yes_no_value() { - local -r bool="${1:-}" - if [[ "$bool" =~ ^(yes|no)$ ]]; then - true - else - false - fi -} - -######################## -# Check if the provided argument is a boolean true/false value -# Arguments: -# $1 - Value to check -# Returns: -# Boolean -######################### -is_true_false_value() { - local -r bool="${1:-}" - if [[ "$bool" =~ ^(true|false)$ ]]; then - true - else - false - fi -} - -######################## -# Check if the provided argument is a boolean 1/0 value -# Arguments: -# $1 - Value to check -# Returns: -# Boolean -######################### -is_1_0_value() { - local -r bool="${1:-}" - if [[ "$bool" =~ ^[10]$ ]]; then - true - else - false - fi -} - -######################## -# Check if the provided argument is an empty string or not defined -# Arguments: -# $1 - Value to check -# Returns: -# Boolean -######################### -is_empty_value() { - local -r val="${1:-}" - if [[ -z "$val" ]]; then - true - else - false - fi -} - -######################## -# Validate if the provided argument is a valid port -# Arguments: -# $1 - Port to validate -# Returns: -# Boolean and error message -######################### -validate_port() { - local value - local unprivileged=0 - - # Parse flags - while [[ "$#" -gt 0 ]]; do - case "$1" in - -unprivileged) - unprivileged=1 - ;; - --) - shift - break - ;; - -*) - stderr_print "unrecognized flag $1" - return 1 - ;; - *) - break - ;; - esac - shift - done - - if [[ "$#" -gt 1 ]]; then - echo "too many arguments provided" - return 2 - elif [[ "$#" -eq 0 ]]; then - stderr_print "missing port argument" - return 1 - else - value=$1 - fi - - if [[ -z "$value" ]]; then - echo "the value is empty" - return 1 - else - if ! is_int "$value"; then - echo "value is not an integer" - return 2 - elif [[ "$value" -lt 0 ]]; then - echo "negative value provided" - return 2 - elif [[ "$value" -gt 65535 ]]; then - echo "requested port is greater than 65535" - return 2 - elif [[ "$unprivileged" = 1 && "$value" -lt 1024 ]]; then - echo "privileged port requested" - return 3 - fi - fi -} - -######################## -# Validate if the provided argument is a valid IPv4 address -# Arguments: -# $1 - IP to validate -# Returns: -# Boolean -######################### -validate_ipv4() { - local ip="${1:?ip is missing}" - local stat=1 - - if [[ $ip =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then - read -r -a ip_array <<< "$(tr '.' ' ' <<< "$ip")" - [[ ${ip_array[0]} -le 255 && ${ip_array[1]} -le 255 \ - && ${ip_array[2]} -le 255 && ${ip_array[3]} -le 255 ]] - stat=$? - fi - return $stat -} - -######################## -# Validate a string format -# Arguments: -# $1 - String to validate -# Returns: -# Boolean -######################### -validate_string() { - local string - local min_length=-1 - local max_length=-1 - - # Parse flags - while [ "$#" -gt 0 ]; do - case "$1" in - -min-length) - shift - min_length=${1:-} - ;; - -max-length) - shift - max_length=${1:-} - ;; - --) - shift - break - ;; - -*) - stderr_print "unrecognized flag $1" - return 1 - ;; - *) - break - ;; - esac - shift - done - - if [ "$#" -gt 1 ]; then - stderr_print "too many arguments provided" - return 2 - elif [ "$#" -eq 0 ]; then - stderr_print "missing string" - return 1 - else - string=$1 - fi - - if [[ "$min_length" -ge 0 ]] && [[ "${#string}" -lt "$min_length" ]]; then - echo "string length is less than $min_length" - return 1 - fi - if [[ "$max_length" -ge 0 ]] && [[ "${#string}" -gt "$max_length" ]]; then - echo "string length is great than $max_length" - return 1 - fi -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libversion.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libversion.sh deleted file mode 100644 index ad2f0eee48df..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libversion.sh +++ /dev/null @@ -1,49 +0,0 @@ -#!/bin/bash -# -# Library for managing versions strings - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/liblog.sh - -# Functions -######################## -# Gets semantic version -# Arguments: -# $1 - version: string to extract major.minor.patch -# $2 - section: 1 to extract major, 2 to extract minor, 3 to extract patch -# Returns: -# array with the major, minor and release -######################### -get_sematic_version () { - local version="${1:?version is required}" - local section="${2:?section is required}" - local -a version_sections - - #Regex to parse versions: x.y.z - local -r regex='([0-9]+)(\.([0-9]+)(\.([0-9]+))?)?' - - if [[ "$version" =~ $regex ]]; then - local i=1 - local j=1 - local n=${#BASH_REMATCH[*]} - - while [[ $i -lt $n ]]; do - if [[ -n "${BASH_REMATCH[$i]}" ]] && [[ "${BASH_REMATCH[$i]:0:1}" != '.' ]]; then - version_sections[j]="${BASH_REMATCH[$i]}" - ((j++)) - fi - ((i++)) - done - - local number_regex='^[0-9]+$' - if [[ "$section" =~ $number_regex ]] && (( section > 0 )) && (( section <= 3 )); then - echo "${version_sections[$section]}" - return - else - stderr_print "Section allowed values are: 1, 2, and 3" - return 1 - fi - fi -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libwebserver.sh b/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libwebserver.sh deleted file mode 100644 index 818c2158032b..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/opt/bitnami/scripts/libwebserver.sh +++ /dev/null @@ -1,458 +0,0 @@ -#!/bin/bash -# -# Bitnami web server handler library - -# shellcheck disable=SC1090,SC1091 - -# Load generic libraries -. /opt/bitnami/scripts/liblog.sh - -######################## -# Execute a command (or list of commands) with the web server environment and library loaded -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_execute() { - local -r web_server="${1:?missing web server}" - shift - # Run program in sub-shell to avoid web server environment getting loaded when not necessary - ( - . "/opt/bitnami/scripts/lib${web_server}.sh" - . "/opt/bitnami/scripts/${web_server}-env.sh" - "$@" - ) -} - -######################## -# Prints the list of enabled web servers -# Globals: -# None -# Arguments: -# None -# Returns: -# None -######################### -web_server_list() { - local -r -a supported_web_servers=(apache nginx) - local -a existing_web_servers=() - for web_server in "${supported_web_servers[@]}"; do - [[ -f "/opt/bitnami/scripts/${web_server}-env.sh" ]] && existing_web_servers+=("$web_server") - done - echo "${existing_web_servers[@]:-}" -} - -######################## -# Prints the currently-enabled web server type (only one, in order of preference) -# Globals: -# None -# Arguments: -# None -# Returns: -# None -######################### -web_server_type() { - local -a web_servers - read -r -a web_servers <<< "$(web_server_list)" - echo "${web_servers[0]:-}" -} - -######################## -# Validate that a supported web server is configured -# Globals: -# None -# Arguments: -# None -# Returns: -# None -######################### -web_server_validate() { - local error_code=0 - local supported_web_servers=("apache" "nginx") - - # Auxiliary functions - print_validation_error() { - error "$1" - error_code=1 - } - - if [[ -z "$(web_server_type)" || ! " ${supported_web_servers[*]} " == *" $(web_server_type) "* ]]; then - print_validation_error "Could not detect any supported web servers. It must be one of: ${supported_web_servers[*]}" - elif ! web_server_execute "$(web_server_type)" type -t "is_$(web_server_type)_running" >/dev/null; then - print_validation_error "Could not load the $(web_server_type) web server library from /opt/bitnami/scripts. Check that it exists and is readable." - fi - - return "$error_code" -} - -######################## -# Check whether the web server is running -# Globals: -# * -# Arguments: -# None -# Returns: -# true if the web server is running, false otherwise -######################### -is_web_server_running() { - "is_$(web_server_type)_running" -} - -######################## -# Start web server -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_start() { - info "Starting $(web_server_type) in background" - "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/start.sh" -} - -######################## -# Stop web server -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_stop() { - info "Stopping $(web_server_type)" - "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/stop.sh" -} - -######################## -# Restart web server -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_restart() { - info "Restarting $(web_server_type)" - "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/restart.sh" -} - -######################## -# Reload web server -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_reload() { - "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/reload.sh" -} - -######################## -# Ensure a web server application configuration exists (i.e. Apache virtual host format or NGINX server block) -# It serves as a wrapper for the specific web server function -# Globals: -# * -# Arguments: -# $1 - App name -# Flags: -# --type - Application type, which has an effect on which configuration template to use -# --hosts - Host listen addresses -# --server-name - Server name -# --server-aliases - Server aliases -# --allow-remote-connections - Whether to allow remote connections or to require local connections -# --disable - Whether to render server configurations with a .disabled prefix -# --disable-http - Whether to render the app's HTTP server configuration with a .disabled prefix -# --disable-https - Whether to render the app's HTTPS server configuration with a .disabled prefix -# --http-port - HTTP port number -# --https-port - HTTPS port number -# --document-root - Path to document root directory -# Apache-specific flags: -# --apache-additional-configuration - Additional vhost configuration (no default) -# --apache-additional-http-configuration - Additional HTTP vhost configuration (no default) -# --apache-additional-https-configuration - Additional HTTPS vhost configuration (no default) -# --apache-before-vhost-configuration - Configuration to add before the directive (no default) -# --apache-allow-override - Whether to allow .htaccess files (only allowed when --move-htaccess is set to 'no' and type is not defined) -# --apache-extra-directory-configuration - Extra configuration for the document root directory -# --apache-proxy-address - Address where to proxy requests -# --apache-proxy-configuration - Extra configuration for the proxy -# --apache-proxy-http-configuration - Extra configuration for the proxy HTTP vhost -# --apache-proxy-https-configuration - Extra configuration for the proxy HTTPS vhost -# --apache-move-htaccess - Move .htaccess files to a common place so they can be loaded during Apache startup (only allowed when type is not defined) -# NGINX-specific flags: -# --nginx-additional-configuration - Additional server block configuration (no default) -# --nginx-external-configuration - Configuration external to server block (no default) -# Returns: -# true if the configuration was enabled, false otherwise -######################## -ensure_web_server_app_configuration_exists() { - local app="${1:?missing app}" - shift - local -a apache_args nginx_args web_servers args_var - apache_args=("$app") - nginx_args=("$app") - # Validate arguments - while [[ "$#" -gt 0 ]]; do - case "$1" in - # Common flags - --disable \ - | --disable-http \ - | --disable-https \ - ) - apache_args+=("$1") - nginx_args+=("$1") - ;; - --hosts \ - | --server-name \ - | --server-aliases \ - | --type \ - | --allow-remote-connections \ - | --http-port \ - | --https-port \ - | --document-root \ - ) - apache_args+=("$1" "${2:?missing value}") - nginx_args+=("$1" "${2:?missing value}") - shift - ;; - - # Specific Apache flags - --apache-additional-configuration \ - | --apache-additional-http-configuration \ - | --apache-additional-https-configuration \ - | --apache-before-vhost-configuration \ - | --apache-allow-override \ - | --apache-extra-directory-configuration \ - | --apache-proxy-address \ - | --apache-proxy-configuration \ - | --apache-proxy-http-configuration \ - | --apache-proxy-https-configuration \ - | --apache-move-htaccess \ - ) - apache_args+=("${1//apache-/}" "${2:?missing value}") - shift - ;; - - # Specific NGINX flags - --nginx-additional-configuration \ - | --nginx-external-configuration) - nginx_args+=("${1//nginx-/}" "${2:?missing value}") - shift - ;; - - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - read -r -a web_servers <<< "$(web_server_list)" - for web_server in "${web_servers[@]}"; do - args_var="${web_server}_args[@]" - web_server_execute "$web_server" "ensure_${web_server}_app_configuration_exists" "${!args_var}" - done -} - -######################## -# Ensure a web server application configuration does not exist anymore (i.e. Apache virtual host format or NGINX server block) -# It serves as a wrapper for the specific web server function -# Globals: -# * -# Arguments: -# $1 - App name -# Returns: -# true if the configuration was disabled, false otherwise -######################## -ensure_web_server_app_configuration_not_exists() { - local app="${1:?missing app}" - local -a web_servers - read -r -a web_servers <<< "$(web_server_list)" - for web_server in "${web_servers[@]}"; do - web_server_execute "$web_server" "ensure_${web_server}_app_configuration_not_exists" "$app" - done -} - -######################## -# Ensure the web server loads the configuration for an application in a URL prefix -# It serves as a wrapper for the specific web server function -# Globals: -# * -# Arguments: -# $1 - App name -# Flags: -# --allow-remote-connections - Whether to allow remote connections or to require local connections -# --document-root - Path to document root directory -# --prefix - URL prefix from where it will be accessible (i.e. /myapp) -# --type - Application type, which has an effect on what configuration template will be used -# Apache-specific flags: -# --apache-additional-configuration - Additional vhost configuration (no default) -# --apache-allow-override - Whether to allow .htaccess files (only allowed when --move-htaccess is set to 'no') -# --apache-extra-directory-configuration - Extra configuration for the document root directory -# --apache-move-htaccess - Move .htaccess files to a common place so they can be loaded during Apache startup -# NGINX-specific flags: -# --nginx-additional-configuration - Additional server block configuration (no default) -# Returns: -# true if the configuration was enabled, false otherwise -######################## -ensure_web_server_prefix_configuration_exists() { - local app="${1:?missing app}" - shift - local -a apache_args nginx_args web_servers args_var - apache_args=("$app") - nginx_args=("$app") - # Validate arguments - while [[ "$#" -gt 0 ]]; do - case "$1" in - # Common flags - --allow-remote-connections \ - | --document-root \ - | --prefix \ - | --type \ - ) - apache_args+=("$1" "${2:?missing value}") - nginx_args+=("$1" "${2:?missing value}") - shift - ;; - - # Specific Apache flags - --apache-additional-configuration \ - | --apache-allow-override \ - | --apache-extra-directory-configuration \ - | --apache-move-htaccess \ - ) - apache_args+=("${1//apache-/}" "$2") - shift - ;; - - # Specific NGINX flags - --nginx-additional-configuration) - nginx_args+=("${1//nginx-/}" "$2") - shift - ;; - - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - read -r -a web_servers <<< "$(web_server_list)" - for web_server in "${web_servers[@]}"; do - args_var="${web_server}_args[@]" - web_server_execute "$web_server" "ensure_${web_server}_prefix_configuration_exists" "${!args_var}" - done -} - -######################## -# Ensure a web server application configuration is updated with the runtime configuration (i.e. ports) -# It serves as a wrapper for the specific web server function -# Globals: -# * -# Arguments: -# $1 - App name -# Flags: -# --hosts - Host listen addresses -# --server-name - Server name -# --server-aliases - Server aliases -# --enable-http - Enable HTTP app configuration (if not enabled already) -# --enable-https - Enable HTTPS app configuration (if not enabled already) -# --disable-http - Disable HTTP app configuration (if not disabled already) -# --disable-https - Disable HTTPS app configuration (if not disabled already) -# --http-port - HTTP port number -# --https-port - HTTPS port number -# Returns: -# true if the configuration was updated, false otherwise -######################## -web_server_update_app_configuration() { - local app="${1:?missing app}" - shift - local -a args web_servers - args=("$app") - # Validate arguments - while [[ "$#" -gt 0 ]]; do - case "$1" in - # Common flags - --enable-http \ - | --enable-https \ - | --disable-http \ - | --disable-https \ - ) - args+=("$1") - ;; - --hosts \ - | --server-name \ - | --server-aliases \ - | --http-port \ - | --https-port \ - ) - args+=("$1" "${2:?missing value}") - shift - ;; - - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - read -r -a web_servers <<< "$(web_server_list)" - for web_server in "${web_servers[@]}"; do - web_server_execute "$web_server" "${web_server}_update_app_configuration" "${args[@]}" - done -} - -######################## -# Enable loading page, which shows users that the initialization process is not yet completed -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_enable_loading_page() { - ensure_web_server_app_configuration_exists "__loading" --hosts "_default_" \ - --apache-additional-configuration " -# Show a HTTP 503 Service Unavailable page by default -RedirectMatch 503 ^/$ -# Show index.html if server is answering with 404 Not Found or 503 Service Unavailable status codes -ErrorDocument 404 /index.html -ErrorDocument 503 /index.html" \ - --nginx-additional-configuration " -# Show a HTTP 503 Service Unavailable page by default -location / { - return 503; -} -# Show index.html if server is answering with 404 Not Found or 503 Service Unavailable status codes -error_page 404 @installing; -error_page 503 @installing; -location @installing { - rewrite ^(.*)$ /index.html break; -}" - web_server_reload -} - -######################## -# Enable loading page, which shows users that the initialization process is not yet completed -# Globals: -# * -# Arguments: -# None -# Returns: -# None -######################### -web_server_disable_install_page() { - ensure_web_server_app_configuration_not_exists "__loading" - web_server_reload -} diff --git a/bitnami/ghost/4/debian-11/prebuildfs/usr/sbin/install_packages b/bitnami/ghost/4/debian-11/prebuildfs/usr/sbin/install_packages deleted file mode 100755 index 77857a1a57f2..000000000000 --- a/bitnami/ghost/4/debian-11/prebuildfs/usr/sbin/install_packages +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -set -eu - -n=0 -max=2 -export DEBIAN_FRONTEND=noninteractive - -until [ $n -gt $max ]; do - set +e - ( - apt-get update -qq && - apt-get install -y --no-install-recommends "$@" - ) - CODE=$? - set -e - if [ $CODE -eq 0 ]; then - break - fi - if [ $n -eq $max ]; then - exit $CODE - fi - echo "apt failed, retrying" - n=$(($n + 1)) -done -apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/ghost/nss-wrapper/nss_group b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/ghost/nss-wrapper/nss_group deleted file mode 100644 index 60c3f318a1be..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/ghost/nss-wrapper/nss_group +++ /dev/null @@ -1 +0,0 @@ -ghost:x:0: diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/ghost/nss-wrapper/nss_passwd b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/ghost/nss-wrapper/nss_passwd deleted file mode 100644 index 7b3a57a16acd..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/ghost/nss-wrapper/nss_passwd +++ /dev/null @@ -1 +0,0 @@ -ghost:x:1001:0:Ghost:/home/ghost:/bin/false diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost-env.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost-env.sh deleted file mode 100644 index 673c71a04d93..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost-env.sh +++ /dev/null @@ -1,134 +0,0 @@ -#!/bin/bash -# -# Environment configuration for ghost - -# The values for all environment variables will be set in the below order of precedence -# 1. Custom environment variables defined below after Bitnami defaults -# 2. Constants defined in this file (environment variables with no default), i.e. BITNAMI_ROOT_DIR -# 3. Environment variables overridden via external files using *_FILE variables (see below) -# 4. Environment variables set externally (i.e. current Bash context/Dockerfile/userdata) - -# Load logging library -# shellcheck disable=SC1090,SC1091 -. /opt/bitnami/scripts/liblog.sh - -export BITNAMI_ROOT_DIR="/opt/bitnami" -export BITNAMI_VOLUME_DIR="/bitnami" - -# Logging configuration -export MODULE="${MODULE:-ghost}" -export BITNAMI_DEBUG="${BITNAMI_DEBUG:-false}" - -# By setting an environment variable matching *_FILE to a file path, the prefixed environment -# variable will be overridden with the value specified in that file -ghost_env_vars=( - GHOST_DATA_TO_PERSIST - GHOST_ENABLE_HTTPS - GHOST_EXTERNAL_HTTP_PORT_NUMBER - GHOST_EXTERNAL_HTTPS_PORT_NUMBER - GHOST_HOST - GHOST_PORT_NUMBER - GHOST_BLOG_TITLE - GHOST_SKIP_BOOTSTRAP - GHOST_USERNAME - GHOST_PASSWORD - GHOST_EMAIL - GHOST_SMTP_HOST - GHOST_SMTP_PORT_NUMBER - GHOST_SMTP_USER - GHOST_SMTP_PASSWORD - GHOST_SMTP_PROTOCOL - GHOST_DATABASE_HOST - GHOST_DATABASE_PORT_NUMBER - GHOST_DATABASE_NAME - GHOST_DATABASE_USER - GHOST_DATABASE_PASSWORD - GHOST_DATABASE_ENABLE_SSL - GHOST_DATABASE_SSL_CA_FILE - BLOG_TITLE - SMTP_HOST - SMTP_PORT - GHOST_SMTP_PORT - SMTP_USER - SMTP_PASSWORD - SMTP_PROTOCOL - MYSQL_HOST - MYSQL_PORT_NUMBER - MYSQL_DATABASE_NAME - MYSQL_DATABASE_USER - MYSQL_DATABASE_PASSWORD -) -for env_var in "${ghost_env_vars[@]}"; do - file_env_var="${env_var}_FILE" - if [[ -n "${!file_env_var:-}" ]]; then - if [[ -r "${!file_env_var:-}" ]]; then - export "${env_var}=$(< "${!file_env_var}")" - unset "${file_env_var}" - else - warn "Skipping export of '${env_var}'. '${!file_env_var:-}' is not readable." - fi - fi -done -unset ghost_env_vars - -# Paths -export GHOST_BASE_DIR="${BITNAMI_ROOT_DIR}/ghost" -export GHOST_BIN_DIR="${GHOST_BASE_DIR}/bin" -export GHOST_LOG_FILE="${GHOST_BASE_DIR}/content/logs/ghost.log" -export GHOST_CONF_FILE="${GHOST_BASE_DIR}/config.production.json" -export GHOST_PID_FILE="${GHOST_BASE_DIR}/.ghostpid" -export PATH="${GHOST_BIN_DIR}:${PATH}" - -# Ghost persistence configuration -export GHOST_VOLUME_DIR="${BITNAMI_VOLUME_DIR}/ghost" -export GHOST_DATA_TO_PERSIST="${GHOST_DATA_TO_PERSIST:-content config.production.json}" - -# System users (when running with a privileged user) -export GHOST_DAEMON_USER="ghost" -export GHOST_DAEMON_GROUP="ghost" - -# Ghost configuration -export GHOST_ENABLE_HTTPS="${GHOST_ENABLE_HTTPS:-no}" # only used during the first initialization -export GHOST_EXTERNAL_HTTP_PORT_NUMBER="${GHOST_EXTERNAL_HTTP_PORT_NUMBER:-80}" # only used during the first initialization -export GHOST_EXTERNAL_HTTPS_PORT_NUMBER="${GHOST_EXTERNAL_HTTPS_PORT_NUMBER:-443}" # only used during the first initialization -export GHOST_HOST="${GHOST_HOST:-localhost}" # only used during the first initialization -export GHOST_DEFAULT_PORT_NUMBER="2368" # only used at build time -export GHOST_PORT_NUMBER="${GHOST_PORT_NUMBER:-}" # only used during the first initialization -GHOST_BLOG_TITLE="${GHOST_BLOG_TITLE:-"${BLOG_TITLE:-}"}" -export GHOST_BLOG_TITLE="${GHOST_BLOG_TITLE:-"User's blog"}" # only used during the first initialization -export GHOST_SKIP_BOOTSTRAP="${GHOST_SKIP_BOOTSTRAP:-}" # only used during the first initialization - -# Ghost credentials -export GHOST_USERNAME="${GHOST_USERNAME:-user}" # only used during the first initialization -export GHOST_PASSWORD="${GHOST_PASSWORD:-bitnami123}" # only used during the first initialization -export GHOST_EMAIL="${GHOST_EMAIL:-user@example.com}" # only used during the first initialization - -# Ghost SMTP credentials -GHOST_SMTP_HOST="${GHOST_SMTP_HOST:-"${SMTP_HOST:-}"}" -export GHOST_SMTP_HOST="${GHOST_SMTP_HOST:-}" # only used during the first initialization -GHOST_SMTP_PORT_NUMBER="${GHOST_SMTP_PORT_NUMBER:-"${SMTP_PORT:-}"}" -GHOST_SMTP_PORT_NUMBER="${GHOST_SMTP_PORT_NUMBER:-"${GHOST_SMTP_PORT:-}"}" -export GHOST_SMTP_PORT_NUMBER="${GHOST_SMTP_PORT_NUMBER:-}" # only used during the first initialization -GHOST_SMTP_USER="${GHOST_SMTP_USER:-"${SMTP_USER:-}"}" -export GHOST_SMTP_USER="${GHOST_SMTP_USER:-}" # only used during the first initialization -GHOST_SMTP_PASSWORD="${GHOST_SMTP_PASSWORD:-"${SMTP_PASSWORD:-}"}" -export GHOST_SMTP_PASSWORD="${GHOST_SMTP_PASSWORD:-}" # only used during the first initialization -GHOST_SMTP_PROTOCOL="${GHOST_SMTP_PROTOCOL:-"${SMTP_PROTOCOL:-}"}" -export GHOST_SMTP_PROTOCOL="${GHOST_SMTP_PROTOCOL:-}" # only used during the first initialization - -# Database configuration -export GHOST_DEFAULT_DATABASE_HOST="mysql" # only used at build time -GHOST_DATABASE_HOST="${GHOST_DATABASE_HOST:-"${MYSQL_HOST:-}"}" -export GHOST_DATABASE_HOST="${GHOST_DATABASE_HOST:-$GHOST_DEFAULT_DATABASE_HOST}" # only used during the first initialization -GHOST_DATABASE_PORT_NUMBER="${GHOST_DATABASE_PORT_NUMBER:-"${MYSQL_PORT_NUMBER:-}"}" -export GHOST_DATABASE_PORT_NUMBER="${GHOST_DATABASE_PORT_NUMBER:-3306}" # only used during the first initialization -GHOST_DATABASE_NAME="${GHOST_DATABASE_NAME:-"${MYSQL_DATABASE_NAME:-}"}" -export GHOST_DATABASE_NAME="${GHOST_DATABASE_NAME:-bitnami_ghost}" # only used during the first initialization -GHOST_DATABASE_USER="${GHOST_DATABASE_USER:-"${MYSQL_DATABASE_USER:-}"}" -export GHOST_DATABASE_USER="${GHOST_DATABASE_USER:-bn_ghost}" # only used during the first initialization -GHOST_DATABASE_PASSWORD="${GHOST_DATABASE_PASSWORD:-"${MYSQL_DATABASE_PASSWORD:-}"}" -export GHOST_DATABASE_PASSWORD="${GHOST_DATABASE_PASSWORD:-}" # only used during the first initialization -export GHOST_DATABASE_ENABLE_SSL="${GHOST_DATABASE_ENABLE_SSL:-no}" # only used during the first initialization -export GHOST_DATABASE_SSL_CA_FILE="${GHOST_DATABASE_SSL_CA_FILE:-}" # only used during the first initialization - -# Custom environment variables may be defined below diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/entrypoint.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/entrypoint.sh deleted file mode 100755 index cf8542be1753..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/entrypoint.sh +++ /dev/null @@ -1,45 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load Ghost environment -. /opt/bitnami/scripts/ghost-env.sh - -# Load libraries -. /opt/bitnami/scripts/libbitnami.sh -. /opt/bitnami/scripts/liblog.sh -. /opt/bitnami/scripts/libos.sh - -print_welcome_page - -# Configure libnss_wrapper based on the UID/GID used to run the container -# This container supports arbitrary UIDs, therefore we have do it dynamically -if ! am_i_root; then - export LNAME="ghost" - export LD_PRELOAD="/opt/bitnami/common/lib/libnss_wrapper.so" - if [[ -f "$LD_PRELOAD" ]]; then - info "Configuring libnss_wrapper" - NSS_WRAPPER_PASSWD="$(mktemp)" - export NSS_WRAPPER_PASSWD - NSS_WRAPPER_GROUP="$(mktemp)" - export NSS_WRAPPER_GROUP - echo "ghost:x:$(id -u):$(id -g):Ghost:/home/ghost:/bin/false" >"$NSS_WRAPPER_PASSWD" - echo "ghost:x:$(id -g):" >"$NSS_WRAPPER_GROUP" - chmod 400 "$NSS_WRAPPER_PASSWD" "$NSS_WRAPPER_GROUP" - fi -fi - -if [[ "$1" = "/opt/bitnami/scripts/ghost/run.sh" ]]; then - /opt/bitnami/scripts/mysql-client/setup.sh - /opt/bitnami/scripts/ghost/setup.sh - /post-init.sh - info "** Ghost setup finished! **" -fi - -echo "" -exec "$@" diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/postunpack.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/postunpack.sh deleted file mode 100755 index 0cc70b7b64b9..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/postunpack.sh +++ /dev/null @@ -1,42 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load Ghost environment -. /opt/bitnami/scripts/ghost-env.sh - -# Load libraries -. /opt/bitnami/scripts/libghost.sh -. /opt/bitnami/scripts/libfile.sh -. /opt/bitnami/scripts/libfs.sh -. /opt/bitnami/scripts/liblog.sh - -# Ensure the Ghost base directory exists and has proper permissions -info "Configuring file permissions for Ghost" -# Ghost CLI creates a configuration file in the system user home directory: /home/ghost/.ghost/config -ensure_user_exists "$GHOST_DAEMON_USER" --group "$GHOST_DAEMON_GROUP" --system --home "/home/$GHOST_DAEMON_USER" - -declare -a writable_dirs=( - # Skipping GHOST_BASE_DIR intentionally because it contains a lot of files/folders that should not be writable - "$GHOST_VOLUME_DIR" - # Folders to persist - "${GHOST_BASE_DIR}/content" - # Folders that need to be writable for the app to work - "/.ghost" - "${GHOST_BASE_DIR}/content/logs" -) -for dir in "${writable_dirs[@]}"; do - ensure_dir_exists "$dir" - # Use ghost:root ownership for compatibility when running as a non-root user - # Due to a limitation in "ghost start" and "ghost doctor" commands which doesn't check - # if the user has writing permissions properly, we need to set 777/666 permissions which - # is clearly a limitation in terms of security - configure_permissions_ownership "$dir" -d "777" -f "666" -u "$GHOST_DAEMON_USER" -g "root" -done -# Provide write permissions in installation directory (without doing it recursively) -chmod a+rwX "$GHOST_BASE_DIR" "${GHOST_BASE_DIR}/.ghost-cli" && chown "${GHOST_DAEMON_USER}:root" "$GHOST_BASE_DIR" "${GHOST_BASE_DIR}/.ghost-cli" diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/run.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/run.sh deleted file mode 100755 index 45a80e9180da..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/run.sh +++ /dev/null @@ -1,27 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1090,SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load Ghost environment -. /opt/bitnami/scripts/ghost-env.sh - -# Load libraries -. /opt/bitnami/scripts/libos.sh -. /opt/bitnami/scripts/liblog.sh -. /opt/bitnami/scripts/libghost.sh - -# Constants -declare -a args=("run" "$@") - -info "** Starting Ghost **" -cd "$GHOST_BASE_DIR" || false -if am_i_root; then - exec gosu "$GHOST_DAEMON_USER" ghost "${args[@]}" -else - exec ghost "${args[@]}" -fi diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/setup.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/setup.sh deleted file mode 100755 index 58fd63b9c951..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/setup.sh +++ /dev/null @@ -1,29 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1090,SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load Ghost environment -. /opt/bitnami/scripts/ghost-env.sh - -# Load MySQL Client environment for 'mysql_remote_execute' (after 'ghost-env.sh' so that MODULE is not set to a wrong value) -if [[ -f /opt/bitnami/scripts/mysql-client-env.sh ]]; then - . /opt/bitnami/scripts/mysql-client-env.sh -elif [[ -f /opt/bitnami/scripts/mysql-env.sh ]]; then - . /opt/bitnami/scripts/mysql-env.sh -elif [[ -f /opt/bitnami/scripts/mariadb-env.sh ]]; then - . /opt/bitnami/scripts/mariadb-env.sh -fi - -# Load libraries -. /opt/bitnami/scripts/libghost.sh - -# Ensure Ghost environment variables are valid -ghost_validate - -# Ensure Ghost is initialized -ghost_initialize diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/updatehost.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/updatehost.sh deleted file mode 100755 index d19adf8328a4..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/ghost/updatehost.sh +++ /dev/null @@ -1,19 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load Ghost environment -. /opt/bitnami/scripts/ghost-env.sh - -# Load libraries -. /opt/bitnami/scripts/libghost.sh - -DOMAIN="${1:?missing host}" - -# Configure host -ghost_configure_host "$DOMAIN" diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/libghost.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/libghost.sh deleted file mode 100644 index 06d81e37520d..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/libghost.sh +++ /dev/null @@ -1,461 +0,0 @@ -#!/bin/bash -# -# Bitnami Ghost library - -# shellcheck disable=SC1091 - -# Load generic libraries -. /opt/bitnami/scripts/libfile.sh -. /opt/bitnami/scripts/libfs.sh -. /opt/bitnami/scripts/libos.sh -. /opt/bitnami/scripts/libnet.sh -. /opt/bitnami/scripts/libvalidations.sh -. /opt/bitnami/scripts/libpersistence.sh -. /opt/bitnami/scripts/libservice.sh - -# Load database library -if [[ -f /opt/bitnami/scripts/libmysqlclient.sh ]]; then - . /opt/bitnami/scripts/libmysqlclient.sh -elif [[ -f /opt/bitnami/scripts/libmysql.sh ]]; then - . /opt/bitnami/scripts/libmysql.sh -elif [[ -f /opt/bitnami/scripts/libmariadb.sh ]]; then - . /opt/bitnami/scripts/libmariadb.sh -fi - -######################## -# Check if Ghost is running -# Arguments: -# None -# Returns: -# Boolean -######################### -is_ghost_running() { - local pid - - pgrep -f "^ghost" >"$GHOST_PID_FILE" - pid="$(get_pid_from_file "$GHOST_PID_FILE")" - if [[ -n "$pid" ]]; then - is_service_running "$pid" - else - false - fi -} - -######################## -# Check if Ghost is not running -# Arguments: -# None -# Returns: -# Boolean -######################### -is_ghost_not_running() { - ! is_ghost_running -} - -######################## -# Stop Ghost -# Arguments: -# None -# Returns: -# None -######################### -ghost_stop() { - is_ghost_not_running && return - - info "Stopping Ghost" - cd "$GHOST_BASE_DIR" || return 1 - if am_i_root; then - debug_execute gosu "$GHOST_DAEMON_USER" ghost stop - else - debug_execute ghost stop - fi -} - -######################## -# Start Ghost in background -# Arguments: -# None -# Returns: -# None -######################### -ghost_start_bg() { - is_ghost_running && return - - info "Starting Ghost in background" - cd "$GHOST_BASE_DIR" || return 1 - if am_i_root; then - touch "$GHOST_LOG_FILE" - configure_permissions_ownership "$GHOST_LOG_FILE" -u "$GHOST_DAEMON_USER" -g "$GHOST_DAEMON_GROUP" - gosu "$GHOST_DAEMON_USER" ghost start --no-enable >>"$GHOST_LOG_FILE" 2>&1 - else - ghost start --no-enable >>"$GHOST_LOG_FILE" 2>&1 - fi - wait_for_log_entry "Your admin interface is located at" "$GHOST_LOG_FILE" - sleep 5 -} - -######################## -# Validate settings in GHOST_* env vars -# Globals: -# GHOST_* -# Arguments: -# None -# Returns: -# 0 if the validation succeeded, 1 otherwise -######################### -ghost_validate() { - debug "Validating settings in GHOST_* environment variables..." - local error_code=0 - - # Auxiliary functions - print_validation_error() { - error "$1" - error_code=1 - } - check_empty_value() { - if is_empty_value "${!1}"; then - print_validation_error "${1} must be set" - fi - } - check_yes_no_value() { - if ! is_yes_no_value "${!1}" && ! is_true_false_value "${!1}"; then - print_validation_error "The allowed values for ${1} are: yes no" - fi - } - check_multi_value() { - if [[ " ${2} " != *" ${!1} "* ]]; then - print_validation_error "The allowed values for ${1} are: ${2}" - fi - } - check_resolved_hostname() { - if ! is_hostname_resolved "$1"; then - warn "Hostname ${1} could not be resolved, this could lead to connection issues" - fi - } - check_valid_port() { - local port_var="${1:?missing port variable}" - local err - if ! err="$(validate_port "${!port_var}")"; then - print_validation_error "An invalid port was specified in the environment variable ${port_var}: ${err}." - fi - } - - # Validate user inputs - check_empty_value "GHOST_HOST" - ! is_empty_value "$GHOST_ENABLE_HTTPS" && check_yes_no_value "GHOST_ENABLE_HTTPS" - ! is_empty_value "$GHOST_SKIP_BOOTSTRAP" && check_yes_no_value "GHOST_SKIP_BOOTSTRAP" - ! is_empty_value "$GHOST_DATABASE_HOST" && check_resolved_hostname "$GHOST_DATABASE_HOST" - ! is_empty_value "$GHOST_DATABASE_PORT_NUMBER" && check_valid_port "GHOST_DATABASE_PORT_NUMBER" - - # Validate SSL configuration - ! is_empty_value "$GHOST_DATABASE_ENABLE_SSL" && check_yes_no_value "GHOST_DATABASE_ENABLE_SSL" - - # Validate credentials - check_empty_value "GHOST_PASSWORD" - # ref: https://github.com/TryGhost/Ghost/issues/9150 - if ((${#GHOST_PASSWORD} < 10)); then - print_validation_error "The admin password must be at least 10 characters long. Set the environment variable GHOST_PASSWORD with a longer value" - fi - if is_boolean_yes "${ALLOW_EMPTY_PASSWORD:-}"; then - warn "You set the environment variable ALLOW_EMPTY_PASSWORD=${ALLOW_EMPTY_PASSWORD:-}. For safety reasons, do not use this flag in a production environment." - else - is_empty_value "$GHOST_DATABASE_PASSWORD" && print_validation_error "The GHOST_DATABASE_PASSWORD environment variable is empty or not set. Set the environment variable ALLOW_EMPTY_PASSWORD=yes to allow a blank password. This is only recommended for development environments." - fi - - # Validate SMTP credentials - if ! is_empty_value "$GHOST_SMTP_HOST"; then - for empty_env_var in "GHOST_SMTP_USER" "GHOST_SMTP_PASSWORD"; do - is_empty_value "${!empty_env_var}" && warn "The ${empty_env_var} environment variable is empty or not set." - done - is_empty_value "$GHOST_SMTP_PORT_NUMBER" && print_validation_error "The GHOST_SMTP_PORT_NUMBER environment variable is empty or not set." - ! is_empty_value "$GHOST_SMTP_PORT_NUMBER" && check_valid_port "GHOST_SMTP_PORT_NUMBER" - ! is_empty_value "$GHOST_SMTP_PROTOCOL" && check_multi_value "GHOST_SMTP_PROTOCOL" "ssl tls" - fi - - return "$error_code" -} - -######################## -# Add or modify an entry in the Ghost configuration file -# Globals: -# GHOST_* -# Arguments: -# $1 - Variable name -# $2 - Value to assign to the variable -# $3 - YAML type (string, int, bool or json) -# Returns: -# None -######################### -ghost_conf_set() { - local -r key="${1:?Missing key}" - local -r value="${2:-}" - local -r type="${3:-string}" - local -r tempfile=$(mktemp) - - case "$type" in - string) - jq "(.${key}) |= \"${value}\"" "$GHOST_CONF_FILE" > "$tempfile" - ;; - int) - jq "(.${key}) |= (${value} | tonumber)" "$GHOST_CONF_FILE" > "$tempfile" - ;; - bool) - jq "(.${key}) |= (\"${value}\" | test(\"true\"))" "$GHOST_CONF_FILE" > "$tempfile" - ;; - json) - jq "(.${key}) |= ${value}" "$GHOST_CONF_FILE" > "$tempfile" - ;; - *) - error "Type unknown: ${type}" - return 1 - ;; - esac - cp "$tempfile" "$GHOST_CONF_FILE" -} - -######################## -# Get an entry from the Parse configuration file -# Globals: -# GHOST_* -# Arguments: -# $1 - Variable name -# Returns: -# None -######################### -ghost_conf_get() { - local -r key="${1:?key missing}" - debug "Getting ${key} from Ghost configuration" - jq -r ".${key}" "$GHOST_CONF_FILE" -} - -######################## -# Ensure Ghost is initialized -# Globals: -# GHOST_* -# Arguments: -# None -# Returns: -# None -######################### -ghost_initialize() { - # Check if Ghost has already been initialized and persisted in a previous run - local -r app_name="ghost" - local -r port="${GHOST_PORT_NUMBER:-"$GHOST_DEFAULT_PORT_NUMBER"}" - - if ! is_app_initialized "$app_name"; then - # Ensure Ghost persisted directories exist (i.e. when a volume has been mounted to /bitnami) - info "Ensuring Ghost directories exist" - ensure_dir_exists "$GHOST_VOLUME_DIR" - # Use ghost:root ownership for compatibility when running as a non-root user - am_i_root && configure_permissions_ownership "$GHOST_VOLUME_DIR" -d "775" -f "664" -u "$GHOST_DAEMON_USER" -g "root" - info "Trying to connect to the database server" - ghost_wait_for_mysql_connection "$GHOST_DATABASE_HOST" "$GHOST_DATABASE_PORT_NUMBER" "$GHOST_DATABASE_NAME" "$GHOST_DATABASE_USER" "$GHOST_DATABASE_PASSWORD" - # Configure database - info "Configuring database" - jq -n -r \ - --arg host "$GHOST_DATABASE_HOST" \ - --arg port "$GHOST_DATABASE_PORT_NUMBER" \ - --arg database "$GHOST_DATABASE_NAME" \ - --arg user "$GHOST_DATABASE_USER" \ - --arg password "$GHOST_DATABASE_PASSWORD" \ - '{ - "database": { - "client": "mysql", - "connection": { - host: $host, - port: $port|tonumber, - database: $database, - user: $user, - password: $password, - ssl: false - } - } - }' > "$GHOST_CONF_FILE" - - if ! is_empty_value "$GHOST_DATABASE_SSL_CA_FILE"; then - ca_json="{\"ca\": \"$(cat "${GHOST_DATABASE_SSL_CA_FILE}")\"}" - ghost_conf_set "database.connection.ssl" "$ca_json" "json" - elif is_boolean_yes "$GHOST_DATABASE_ENABLE_SSL"; then - ghost_conf_set "database.connection.ssl" true "bool" - fi - - am_i_root && chown "${GHOST_DAEMON_USER}:root" "$GHOST_CONF_FILE" - if ! is_boolean_yes "$GHOST_SKIP_BOOTSTRAP"; then - # Setup Ghost - # ref: https://ghost.org/docs/ghost-cli/#ghost-setup - info "Setting up Ghost" - cd "$GHOST_BASE_DIR" || false - local base_url - base_url="$(ghost_base_url "$GHOST_HOST")" - local -a setup_flags=( - "--no-setup-ssl" "--no-setup-nginx" "--no-setup-mysql" - "--no-setup-systemd" "--no-setup-linux-user" - "--url" "$base_url" - "--ip" "0.0.0.0" - "--port" "$port" - "--log" "file" - "--process" "local" "--no-prompt" "--no-start" "--no-enable" - ) - if am_i_root; then - debug_execute gosu "$GHOST_DAEMON_USER" ghost setup "${setup_flags[@]}" - else - debug_execute ghost setup "${setup_flags[@]}" - fi - # Configure Host - ghost_configure_host "$GHOST_HOST" - # Configure smtp - # https://ghost.org/docs/config/#mail - if ! is_empty_value "$GHOST_SMTP_HOST"; then - info "Configuring SMTP settings" - ghost_conf_set "mail.from" "$GHOST_EMAIL" - ghost_conf_set "mail.transport" "SMTP" - ghost_conf_set "mail.options.host" "$GHOST_SMTP_HOST" - ghost_conf_set "mail.options.port" "$GHOST_SMTP_PORT_NUMBER" "int" - ghost_conf_set "mail.options.secureConnection" "$([[ "$GHOST_SMTP_PROTOCOL" = "ssl" || "$GHOST_SMTP_PROTOCOL" = "tls" ]] && echo "true" || echo "false")" "bool" - ghost_conf_set "mail.options.auth.user" "$GHOST_SMTP_USER" - ghost_conf_set "mail.options.auth.pass" "$GHOST_SMTP_PASSWORD" - fi - # Configure Admin account - ghost_pass_wizard - mv "$GHOST_LOG_FILE" "${GHOST_BASE_DIR}/content/logs/ghost.setup.log" - else - info "An already initialized Ghost database was provided, configuration will be skipped" - fi - - info "Persisting Ghost installation" - persist_app "$app_name" "$GHOST_DATA_TO_PERSIST" - else - info "Restoring persisted Ghost installation" - restore_persisted_app "$app_name" "$GHOST_DATA_TO_PERSIST" - info "Trying to connect to the database server" - local db_host db_port db_name db_user db_pass - db_host="$(ghost_conf_get "database.connection.host")" - db_port="$(ghost_conf_get "database.connection.port")" - db_name="$(ghost_conf_get "database.connection.database")" - db_user="$(ghost_conf_get "database.connection.user")" - db_pass="$(ghost_conf_get "database.connection.password")" - ghost_wait_for_mysql_connection "$db_host" "$db_port" "$db_name" "$db_user" "$db_pass" - fi - - # Avoid exit code of previous commands to affect the result of this function - true -} - -######################## -# Wait until the database is accessible with the currently-known credentials -# Globals: -# * -# Arguments: -# $1 - database host -# $2 - database port -# $3 - database name -# $4 - database username -# $5 - database user password (optional) -# Returns: -# true if the database connection succeeded, false otherwise -######################### -ghost_wait_for_mysql_connection() { - local -r db_host="${1:?missing database host}" - local -r db_port="${2:?missing database port}" - local -r db_name="${3:?missing database name}" - local -r db_user="${4:?missing database user}" - local -r db_pass="${5:-}" - check_mysql_connection() { - echo "SELECT 1" | mysql_remote_execute "$db_host" "$db_port" "$db_name" "$db_user" "$db_pass" - } - if ! retry_while "check_mysql_connection"; then - error "Could not connect to the database" - return 1 - fi -} - -######################## -# Create Ghost user and set Ghost blog title passing the wizard -# Globals: -# GHOST_* -# Arguments: -# None -# Returns: -# true if the wizard succeeded, false otherwise -######################### -ghost_pass_wizard() { - local -r port="${GHOST_PORT_NUMBER:-"$GHOST_DEFAULT_PORT_NUMBER"}" - local wizard_url curl_output - local -a curl_opts curl_data_opts - - info "Passing admin user creation wizard" - # Ghost API reference: https://ghost.org/docs/admin-api/ - wizard_url="http://127.0.0.1:${port}/ghost/api/v3/admin/authentication/setup/" - curl_opts=( - "--silent" - "-H" "Content-Type: application/json" - "-H" "Cache-Control: no-cache" - ) - # Ensure Ghost is started - ghost_start_bg - # User creation & Blog Title configuration - data="$( - jq '.' </dev/null)" - debug_execute echo "$curl_output" - if [[ "$curl_output" != *"\"id\":\"1\",\"name\":\"${GHOST_USERNAME}\""* ]]; then - error "An error occurred while installing Ghost" - return 1 - fi - # Stop Ghost afterwards - ghost_stop -} - -######################### -# Returns Ghost base URL -# Globals: -# GHOST_* -# Arguments: -# $1 - host -# Returns: -# String -######################### -ghost_base_url() { - local host="${1:?missing host}" - local scheme - - if is_boolean_yes "$GHOST_ENABLE_HTTPS"; then - scheme="https" - [[ "$GHOST_EXTERNAL_HTTPS_PORT_NUMBER" != "443" ]] && host+=":${GHOST_EXTERNAL_HTTPS_PORT_NUMBER}" - else - scheme="http" - [[ "$GHOST_EXTERNAL_HTTP_PORT_NUMBER" != "80" ]] && host+=":${GHOST_EXTERNAL_HTTP_PORT_NUMBER}" - fi - echo "${scheme}://${host}" -} - -######################### -# Configure Ghost host -# Globals: -# GHOST_* -# Arguments: -# $1 - host -# Returns: -# None -######################### -ghost_configure_host() { - local -r host="${1:?missing host}" - local base_url - - base_url="$(ghost_base_url "$host")" - info "Configuring Ghost URL to ${base_url}" - ghost_conf_set "url" "$base_url" -} diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/libmysqlclient.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/libmysqlclient.sh deleted file mode 100644 index f63dea741844..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/libmysqlclient.sh +++ /dev/null @@ -1,1090 +0,0 @@ -#!/bin/bash -# -# Bitnami MySQL Client library - -# shellcheck disable=SC1091 - -# Load Generic Libraries -. /opt/bitnami/scripts/liblog.sh -. /opt/bitnami/scripts/libos.sh -. /opt/bitnami/scripts/libvalidations.sh - -######################## -# Validate settings in MYSQL_CLIENT_* environment variables -# Globals: -# MYSQL_CLIENT_* -# Arguments: -# None -# Returns: -# None -######################### -mysql_client_validate() { - info "Validating settings in MYSQL_CLIENT_* env vars" - local error_code=0 - - # Auxiliary functions - print_validation_error() { - error "$1" - error_code=1 - } - - empty_password_enabled_warn() { - warn "You set the environment variable ALLOW_EMPTY_PASSWORD=${ALLOW_EMPTY_PASSWORD}. For safety reasons, do not use this flag in a production environment." - } - empty_password_error() { - print_validation_error "The $1 environment variable is empty or not set. Set the environment variable ALLOW_EMPTY_PASSWORD=yes to allow the container to be started with blank passwords. This is recommended only for development." - } - backslash_password_error() { - print_validation_error "The password cannot contain backslashes ('\'). Set the environment variable $1 with no backslashes (more info at https://dev.mysql.com/doc/refman/8.0/en/string-comparison-functions.html)" - } - - check_yes_no_value() { - if ! is_yes_no_value "${!1}" && ! is_true_false_value "${!1}"; then - print_validation_error "The allowed values for ${1} are: yes no" - fi - } - - check_multi_value() { - if [[ " ${2} " != *" ${!1} "* ]]; then - print_validation_error "The allowed values for ${1} are: ${2}" - fi - } - - # Only validate environment variables if any action needs to be performed - check_yes_no_value "MYSQL_CLIENT_ENABLE_SSL_WRAPPER" - check_multi_value "MYSQL_CLIENT_FLAVOR" "mariadb mysql" - - if [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_USER" || -n "$MYSQL_CLIENT_CREATE_DATABASE_NAME" ]]; then - if is_boolean_yes "$ALLOW_EMPTY_PASSWORD"; then - empty_password_enabled_warn - else - if [[ -z "$MYSQL_CLIENT_DATABASE_ROOT_PASSWORD" ]]; then - empty_password_error "MYSQL_CLIENT_DATABASE_ROOT_PASSWORD" - fi - if [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_USER" ]] && [[ -z "$MYSQL_CLIENT_CREATE_DATABASE_PASSWORD" ]]; then - empty_password_error "MYSQL_CLIENT_CREATE_DATABASE_PASSWORD" - fi - fi - if [[ "${MYSQL_CLIENT_DATABASE_ROOT_PASSWORD:-}" = *\\* ]]; then - backslash_password_error "MYSQL_CLIENT_DATABASE_ROOT_PASSWORD" - fi - if [[ "${MYSQL_CLIENT_CREATE_DATABASE_PASSWORD:-}" = *\\* ]]; then - backslash_password_error "MYSQL_CLIENT_CREATE_DATABASE_PASSWORD" - fi - fi - return "$error_code" -} - -######################## -# Perform actions to a database -# Globals: -# DB_* -# MYSQL_CLIENT_* -# Arguments: -# None -# Returns: -# None -######################### -mysql_client_initialize() { - # Wrap binary to force the usage of SSL - if is_boolean_yes "$MYSQL_CLIENT_ENABLE_SSL_WRAPPER"; then - mysql_client_wrap_binary_for_ssl - fi - # Wait for the database to be accessible if any action needs to be performed - if [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_USER" || -n "$MYSQL_CLIENT_CREATE_DATABASE_NAME" ]]; then - info "Trying to connect to the database server" - check_mysql_connection() { - echo "SELECT 1" | mysql_execute "mysql" "$MYSQL_CLIENT_DATABASE_ROOT_USER" "$MYSQL_CLIENT_DATABASE_ROOT_PASSWORD" "-h" "$MYSQL_CLIENT_DATABASE_HOST" "-P" "$MYSQL_CLIENT_DATABASE_PORT_NUMBER" - } - if ! retry_while "check_mysql_connection"; then - error "Could not connect to the database server" - return 1 - fi - fi - # Ensure a database user exists in the server - if [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_USER" ]]; then - info "Creating database user ${MYSQL_CLIENT_CREATE_DATABASE_USER}" - local -a args=("$MYSQL_CLIENT_CREATE_DATABASE_USER" "--host" "$MYSQL_CLIENT_DATABASE_HOST" "--port" "$MYSQL_CLIENT_DATABASE_PORT_NUMBER") - [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_PASSWORD" ]] && args+=("-p" "$MYSQL_CLIENT_CREATE_DATABASE_PASSWORD") - [[ -n "$MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN" ]] && args+=("--auth-plugin" "$MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN") - mysql_ensure_optional_user_exists "${args[@]}" - fi - # Ensure a database exists in the server (and that the user has write privileges, if specified) - if [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_NAME" ]]; then - info "Creating database ${MYSQL_CLIENT_CREATE_DATABASE_NAME}" - local -a createdb_args=("$MYSQL_CLIENT_CREATE_DATABASE_NAME" "--host" "$MYSQL_CLIENT_DATABASE_HOST" "--port" "$MYSQL_CLIENT_DATABASE_PORT_NUMBER") - [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_USER" ]] && createdb_args+=("-u" "$MYSQL_CLIENT_CREATE_DATABASE_USER") - [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_CHARACTER_SET" ]] && createdb_args+=("--character-set" "$MYSQL_CLIENT_CREATE_DATABASE_CHARACTER_SET") - [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_COLLATE" ]] && createdb_args+=("--collate" "$MYSQL_CLIENT_CREATE_DATABASE_COLLATE") - [[ -n "$MYSQL_CLIENT_CREATE_DATABASE_PRIVILEGES" ]] && createdb_args+=("--privileges" "$MYSQL_CLIENT_CREATE_DATABASE_PRIVILEGES") - mysql_ensure_optional_database_exists "${createdb_args[@]}" - fi -} - -######################## -# Wrap binary to force the usage of SSL -# Globals: -# DB_* -# MYSQL_CLIENT_* -# Arguments: -# None -# Returns: -# None -######################### -mysql_client_wrap_binary_for_ssl() { - local wrapper_file="${DB_BIN_DIR}/mysql" - # In MySQL Client 10.6, mysql is a link to the mariadb binary - if [[ -f "${DB_BIN_DIR}/mariadb" ]]; then - wrapper_file="${DB_BIN_DIR}/mariadb" - fi - local -r wrapped_binary_file="${DB_BASE_DIR}/.bin/mysql" - local -a ssl_opts=() - read -r -a ssl_opts <<<"$(mysql_client_extra_opts)" - - mv "$wrapper_file" "$wrapped_binary_file" - cat >"$wrapper_file" <> "$custom_conf_file" - cat "$old_custom_conf_file" >> "$custom_conf_file" - fi - if am_i_root; then - [[ -e "$DB_VOLUME_DIR/.initialized" ]] && rm "$DB_VOLUME_DIR/.initialized" - rm -rf "$DB_VOLUME_DIR/conf" - else - warn "Old custom configuration migrated, please manually remove the 'conf' directory from the volume use to persist data" - fi -} - -######################## -# Ensure a db user exists with the given password for the '%' host -# Globals: -# DB_* -# Flags: -# -p|--password - database password -# -u|--user - database user -# --auth-plugin - authentication plugin -# --use-ldap - authenticate user via LDAP -# --host - database host -# --port - database host -# Arguments: -# $1 - database user -# Returns: -# None -######################### -mysql_ensure_user_exists() { - local -r user="${1:?user is required}" - local password="" - local auth_plugin="" - local use_ldap="no" - local hosts - local auth_string="" - # For accessing an external database - local db_host="" - local db_port="" - - # Validate arguments - shift 1 - while [ "$#" -gt 0 ]; do - case "$1" in - -p|--password) - shift - password="${1:?missing database password}" - ;; - --auth-plugin) - shift - auth_plugin="${1:?missing authentication plugin}" - ;; - --use-ldap) - use_ldap="yes" - ;; - --host) - shift - db_host="${1:?missing database host}" - ;; - --port) - shift - db_port="${1:?missing database port}" - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - if is_boolean_yes "$use_ldap"; then - auth_string="identified via pam using '$DB_FLAVOR'" - elif [[ -n "$password" ]]; then - if [[ -n "$auth_plugin" ]]; then - auth_string="identified with $auth_plugin by \"$password\"" - else - auth_string="identified by \"$password\"" - fi - fi - debug "creating database user \'$user\'" - - local -a mysql_execute_cmd=("mysql_execute") - local -a mysql_execute_print_output_cmd=("mysql_execute_print_output") - if [[ -n "$db_host" && -n "$db_port" ]]; then - mysql_execute_cmd=("mysql_remote_execute" "$db_host" "$db_port") - mysql_execute_print_output_cmd=("mysql_remote_execute_print_output" "$db_host" "$db_port") - fi - - local mysql_create_user_cmd - [[ "$DB_FLAVOR" = "mariadb" ]] && mysql_create_user_cmd="create or replace user" || mysql_create_user_cmd="create user if not exists" - "${mysql_execute_cmd[@]}" "mysql" "$DB_ROOT_USER" "$DB_ROOT_PASSWORD" <=10.4, the mysql.user table was replaced with a view: https://mariadb.com/kb/en/mysqluser-table/ - # Views have a definer user, in this case set to 'root', which needs to exist for the view to work - # In MySQL, to avoid issues when renaming the root user, they use the 'mysql.sys' user as a definer: https://dev.mysql.com/doc/refman/5.7/en/sys-schema.html - # However, for MariaDB that is not the case, so when the 'root' user is renamed the 'mysql.user' table stops working and the view needs to be fixed - if [[ "$user" != "root" && ! "$(mysql_get_version)" =~ ^10.[0123]. ]]; then - alter_view_str="$(mysql_execute_print_output "mysql" "$user" "$password" "-s" <&2 - return 1 - ;; - esac - shift - done - - local -a mysql_execute_cmd=("mysql_execute") - [[ -n "$db_host" && -n "$db_port" ]] && mysql_execute_cmd=("mysql_remote_execute" "$db_host" "$db_port") - - local -a create_database_args=() - [[ -n "$character_set" ]] && create_database_args+=("character set = '${character_set}'") - [[ -n "$collate" ]] && create_database_args+=("collate = '${collate}'") - - debug "Creating database $database" - "${mysql_execute_cmd[@]}" "mysql" "$DB_ROOT_USER" "$DB_ROOT_PASSWORD" <&2 - return 1 - ;; - esac - shift - done - - local -a flags=("$user") - [[ -n "$db_host" ]] && flags+=("--host" "${db_host}") - [[ -n "$db_port" ]] && flags+=("--port" "${db_port}") - if is_boolean_yes "$use_ldap"; then - flags+=("--use-ldap") - elif [[ -n "$password" ]]; then - flags+=("-p" "$password") - [[ -n "$auth_plugin" ]] && flags=("${flags[@]}" "--auth-plugin" "$auth_plugin") - fi - mysql_ensure_user_exists "${flags[@]}" -} - -######################## -# Optionally create the given database, and then optionally give a user -# full privileges on the database. -# Flags: -# -u|--user - database user -# --character-set - character set -# --collation - collation -# --host - database host -# --port - database port -# Arguments: -# $1 - database name -# Returns: -# None -######################### -mysql_ensure_optional_database_exists() { - local -r database="${1:?database is missing}" - local character_set="" - local collate="" - local user="" - local privileges="" - # For accessing an external database - local db_host="" - local db_port="" - - # Validate arguments - shift 1 - while [ "$#" -gt 0 ]; do - case "$1" in - --character-set) - shift - character_set="${1:?missing character set}" - ;; - --collate) - shift - collate="${1:?missing collate}" - ;; - -u|--user) - shift - user="${1:?missing database user}" - ;; - --host) - shift - db_host="${1:?missing database host}" - ;; - --port) - shift - db_port="${1:?missing database port}" - ;; - --privileges) - shift - privileges="${1:?missing privileges}" - ;; - *) - echo "Invalid command line flag $1" >&2 - return 1 - ;; - esac - shift - done - - local -a flags=("$database") - [[ -n "$character_set" ]] && flags+=("--character-set" "$character_set") - [[ -n "$collate" ]] && flags+=("--collate" "$collate") - [[ -n "$db_host" ]] && flags+=("--host" "$db_host") - [[ -n "$db_port" ]] && flags+=("--port" "$db_port") - mysql_ensure_database_exists "${flags[@]}" - - if [[ -n "$user" ]]; then - mysql_ensure_user_has_database_privileges "$user" "$database" "$privileges" "$db_host" "$db_port" - fi -} - -######################## -# Add or modify an entry in the MySQL configuration file ("$DB_CONF_FILE") -# Globals: -# DB_* -# Arguments: -# $1 - MySQL variable name -# $2 - Value to assign to the MySQL variable -# $3 - Section in the MySQL configuration file the key is located (default: mysqld) -# $4 - Configuration file (default: "$BD_CONF_FILE") -# Returns: -# None -######################### -mysql_conf_set() { - local -r key="${1:?key missing}" - local -r value="${2:?value missing}" - read -r -a sections <<<"${3:-mysqld}" - local -r ignore_inline_comments="${4:-no}" - local -r file="${5:-"$DB_CONF_FILE"}" - info "Setting ${key} option" - debug "Setting ${key} to '${value}' in ${DB_FLAVOR} configuration file ${file}" - # Check if the configuration exists in the file - for section in "${sections[@]}"; do - if is_boolean_yes "$ignore_inline_comments"; then - ini-file set --ignore-inline-comments --section "$section" --key "$key" --value "$value" "$file" - else - ini-file set --section "$section" --key "$key" --value "$value" "$file" - fi - done -} - -######################## -# Update MySQL/MariaDB configuration file with user custom inputs -# Globals: -# DB_* -# Arguments: -# None -# Returns: -# None -######################### -mysql_update_custom_config() { - # Persisted configuration files from old versions - ! is_dir_empty "$DB_VOLUME_DIR" && [[ -d "$DB_VOLUME_DIR/conf" ]] && mysql_migrate_old_configuration - - # User injected custom configuration - if [[ -f "$DB_CONF_DIR/my_custom.cnf" ]]; then - debug "Injecting custom configuration from my_custom.conf" - cat "$DB_CONF_DIR/my_custom.cnf" > "$DB_CONF_DIR/bitnami/my_custom.cnf" - fi - - ! is_empty_value "$DB_USER" && mysql_conf_set "user" "$DB_USER" "mysqladmin" - ! is_empty_value "$DB_PORT_NUMBER" && mysql_conf_set "port" "$DB_PORT_NUMBER" "mysqld client manager" - ! is_empty_value "$DB_CHARACTER_SET" && mysql_conf_set "character_set_server" "$DB_CHARACTER_SET" - ! is_empty_value "$DB_COLLATE" && mysql_conf_set "collation_server" "$DB_COLLATE" - ! is_empty_value "$DB_BIND_ADDRESS" && mysql_conf_set "bind_address" "$DB_BIND_ADDRESS" - ! is_empty_value "$DB_AUTHENTICATION_PLUGIN" && mysql_conf_set "default_authentication_plugin" "$DB_AUTHENTICATION_PLUGIN" - ! is_empty_value "$DB_SQL_MODE" && mysql_conf_set "sql_mode" "$DB_SQL_MODE" - ! is_empty_value "$DB_ENABLE_SLOW_QUERY" && mysql_conf_set "slow_query_log" "$DB_ENABLE_SLOW_QUERY" - ! is_empty_value "$DB_LONG_QUERY_TIME" && mysql_conf_set "long_query_time" "$DB_LONG_QUERY_TIME" - - # Avoid exit code of previous commands to affect the result of this function - true -} - -######################## -# Find the path to the libjemalloc library file -# Globals: -# None -# Arguments: -# None -# Returns: -# Path to a libjemalloc shared object file -######################### -find_jemalloc_lib() { - local -a locations=( "/usr/lib" "/usr/lib64" ) - local -r pattern='libjemalloc.so.[0-9]' - local path - for dir in "${locations[@]}"; do - # Find the first element matching the pattern and quit - [[ ! -d "$dir" ]] && continue - path="$(find "$dir" -name "$pattern" -print -quit)" - [[ -n "$path" ]] && break - done - echo "${path:-}" -} - -######################## -# Execute a reliable health check against the current mysql instance -# Globals: -# DB_ROOT_PASSWORD, DB_MASTER_ROOT_PASSWORD -# Arguments: -# None -# Returns: -# mysqladmin output -######################### -mysql_healthcheck() { - local args=("-uroot" "-h0.0.0.0") - local root_password - - root_password="$(get_master_env_var_value ROOT_PASSWORD)" - if [[ -n "$root_password" ]]; then - args+=("-p${root_password}") - fi - - mysqladmin "${args[@]}" ping && mysqladmin "${args[@]}" status -} - -######################## -# Prints flavor of 'mysql' client (useful to determine proper CLI flags that can be used) -# Globals: -# DB_* -# Arguments: -# None -# Returns: -# mysql client flavor -######################### -mysql_client_flavor() { - if "${DB_BIN_DIR}/mysql" "--version" 2>&1 | grep -q MariaDB; then - echo "mariadb" - else - echo "mysql" - fi -} - -######################## -# Prints extra options for MySQL client calls (i.e. SSL options) -# Globals: -# DB_* -# Arguments: -# None -# Returns: -# List of options to pass to "mysql" CLI -######################### -mysql_client_extra_opts() { - # Helper to get the proper value for the MySQL client environment variable - mysql_client_env_value() { - local env_name="MYSQL_CLIENT_${1:?missing name}" - if [[ -n "${!env_name:-}" ]]; then - echo "${!env_name:-}" - else - env_name="DB_CLIENT_${1}" - echo "${!env_name:-}" - fi - } - local -a opts=() - local key value - if is_boolean_yes "${DB_ENABLE_SSL:-no}"; then - if [[ "$(mysql_client_flavor)" = "mysql" ]]; then - opts+=("--ssl-mode=REQUIRED") - else - opts+=("--ssl=TRUE") - fi - # Add "--ssl-ca", "--ssl-key" and "--ssl-cert" options if the env vars are defined - for key in ca key cert; do - value="$(mysql_client_env_value "SSL_${key^^}_FILE")" - [[ -n "${value}" ]] && opts+=("--ssl-${key}=${value}") - done - fi - echo "${opts[@]:-}" -} diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client-env.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client-env.sh deleted file mode 100644 index 26fdf9e8e050..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client-env.sh +++ /dev/null @@ -1,125 +0,0 @@ -#!/bin/bash -# -# Environment configuration for mysql - -# The values for all environment variables will be set in the below order of precedence -# 1. Custom environment variables defined below after Bitnami defaults -# 2. Constants defined in this file (environment variables with no default), i.e. BITNAMI_ROOT_DIR -# 3. Environment variables overridden via external files using *_FILE variables (see below) -# 4. Environment variables set externally (i.e. current Bash context/Dockerfile/userdata) - -# Load logging library -# shellcheck disable=SC1090,SC1091 -. /opt/bitnami/scripts/liblog.sh - -export BITNAMI_ROOT_DIR="/opt/bitnami" -export BITNAMI_VOLUME_DIR="/bitnami" - -# Logging configuration -export MODULE="${MODULE:-mysql}" -export BITNAMI_DEBUG="${BITNAMI_DEBUG:-false}" - -# By setting an environment variable matching *_FILE to a file path, the prefixed environment -# variable will be overridden with the value specified in that file -mysql_env_vars=( - MYSQL_CLIENT_FLAVOR - ALLOW_EMPTY_PASSWORD - MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN - MYSQL_CLIENT_DATABASE_HOST - MYSQL_CLIENT_DATABASE_PORT_NUMBER - MYSQL_CLIENT_DATABASE_ROOT_USER - MYSQL_CLIENT_DATABASE_ROOT_PASSWORD - MYSQL_CLIENT_CREATE_DATABASE_NAME - MYSQL_CLIENT_CREATE_DATABASE_USER - MYSQL_CLIENT_CREATE_DATABASE_PASSWORD - MYSQL_CLIENT_CREATE_DATABASE_CHARACTER_SET - MYSQL_CLIENT_CREATE_DATABASE_COLLATE - MYSQL_CLIENT_CREATE_DATABASE_PRIVILEGES - MYSQL_CLIENT_ENABLE_SSL_WRAPPER - MYSQL_CLIENT_ENABLE_SSL - MYSQL_CLIENT_SSL_CA_FILE - MYSQL_CLIENT_SSL_CERT_FILE - MYSQL_CLIENT_SSL_KEY_FILE - MYSQL_CLIENT_EXTRA_FLAGS - MARIADB_AUTHENTICATION_PLUGIN - MARIADB_HOST - MARIADB_PORT_NUMBER - MARIADB_ROOT_USER - MARIADB_ROOT_PASSWORD -) -for env_var in "${mysql_env_vars[@]}"; do - file_env_var="${env_var}_FILE" - if [[ -n "${!file_env_var:-}" ]]; then - if [[ -r "${!file_env_var:-}" ]]; then - export "${env_var}=$(< "${!file_env_var}")" - unset "${file_env_var}" - else - warn "Skipping export of '${env_var}'. '${!file_env_var:-}' is not readable." - fi - fi -done -unset mysql_env_vars -export MYSQL_CLIENT_FLAVOR="${MYSQL_CLIENT_FLAVOR:-mariadb}" -export DB_FLAVOR="$MYSQL_CLIENT_FLAVOR" - -# Paths -export DB_BASE_DIR="${BITNAMI_ROOT_DIR}/mysql" -export DB_VOLUME_DIR="${BITNAMI_VOLUME_DIR}/mysql" -export DB_DATA_DIR="${DB_VOLUME_DIR}/data" -export DB_BIN_DIR="${DB_BASE_DIR}/bin" -export DB_SBIN_DIR="${DB_BASE_DIR}/bin" -export DB_CONF_DIR="${DB_BASE_DIR}/conf" -export DB_LOGS_DIR="${DB_BASE_DIR}/logs" -export DB_TMP_DIR="${DB_BASE_DIR}/tmp" -export DB_CONF_FILE="${DB_CONF_DIR}/my.cnf" -export DB_PID_FILE="${DB_TMP_DIR}/mysqld.pid" -export DB_SOCKET_FILE="${DB_TMP_DIR}/mysql.sock" -export PATH="${DB_SBIN_DIR}:${DB_BIN_DIR}:/opt/bitnami/common/bin:${PATH}" - -# System users (when running with a privileged user) -export DB_DAEMON_USER="mysql" -export DB_DAEMON_GROUP="mysql" - -# MySQL client configuration -export ALLOW_EMPTY_PASSWORD="${ALLOW_EMPTY_PASSWORD:-no}" -MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN="${MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN:-"${MARIADB_AUTHENTICATION_PLUGIN:-}"}" -export MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN="${MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN:-}" -export DB_AUTHENTICATION_PLUGIN="$MYSQL_CLIENT_DATABASE_AUTHENTICATION_PLUGIN" -MYSQL_CLIENT_DATABASE_HOST="${MYSQL_CLIENT_DATABASE_HOST:-"${MARIADB_HOST:-}"}" -export MYSQL_CLIENT_DATABASE_HOST="${MYSQL_CLIENT_DATABASE_HOST:-mariadb}" -export DB_HOST="$MYSQL_CLIENT_DATABASE_HOST" -MYSQL_CLIENT_DATABASE_PORT_NUMBER="${MYSQL_CLIENT_DATABASE_PORT_NUMBER:-"${MARIADB_PORT_NUMBER:-}"}" -export MYSQL_CLIENT_DATABASE_PORT_NUMBER="${MYSQL_CLIENT_DATABASE_PORT_NUMBER:-3306}" -export DB_PORT_NUMBER="$MYSQL_CLIENT_DATABASE_PORT_NUMBER" -MYSQL_CLIENT_DATABASE_ROOT_USER="${MYSQL_CLIENT_DATABASE_ROOT_USER:-"${MARIADB_ROOT_USER:-}"}" -export MYSQL_CLIENT_DATABASE_ROOT_USER="${MYSQL_CLIENT_DATABASE_ROOT_USER:-root}" -export DB_ROOT_USER="$MYSQL_CLIENT_DATABASE_ROOT_USER" # only used during the first initialization -MYSQL_CLIENT_DATABASE_ROOT_PASSWORD="${MYSQL_CLIENT_DATABASE_ROOT_PASSWORD:-"${MARIADB_ROOT_PASSWORD:-}"}" -export MYSQL_CLIENT_DATABASE_ROOT_PASSWORD="${MYSQL_CLIENT_DATABASE_ROOT_PASSWORD:-}" -export DB_ROOT_PASSWORD="$MYSQL_CLIENT_DATABASE_ROOT_PASSWORD" # only used during the first initialization -export MYSQL_CLIENT_CREATE_DATABASE_NAME="${MYSQL_CLIENT_CREATE_DATABASE_NAME:-}" -export DB_CREATE_DATABASE_NAME="$MYSQL_CLIENT_CREATE_DATABASE_NAME" # only used during the first initialization -export MYSQL_CLIENT_CREATE_DATABASE_USER="${MYSQL_CLIENT_CREATE_DATABASE_USER:-}" -export DB_CREATE_DATABASE_USER="$MYSQL_CLIENT_CREATE_DATABASE_USER" -export MYSQL_CLIENT_CREATE_DATABASE_PASSWORD="${MYSQL_CLIENT_CREATE_DATABASE_PASSWORD:-}" -export DB_CREATE_DATABASE_PASSWORD="$MYSQL_CLIENT_CREATE_DATABASE_PASSWORD" -export MYSQL_CLIENT_CREATE_DATABASE_CHARACTER_SET="${MYSQL_CLIENT_CREATE_DATABASE_CHARACTER_SET:-}" -export DB_CREATE_DATABASE_CHARACTER_SET="$MYSQL_CLIENT_CREATE_DATABASE_CHARACTER_SET" -export MYSQL_CLIENT_CREATE_DATABASE_COLLATE="${MYSQL_CLIENT_CREATE_DATABASE_COLLATE:-}" -export DB_CREATE_DATABASE_COLLATE="$MYSQL_CLIENT_CREATE_DATABASE_COLLATE" -export MYSQL_CLIENT_CREATE_DATABASE_PRIVILEGES="${MYSQL_CLIENT_CREATE_DATABASE_PRIVILEGES:-}" -export DB_CREATE_DATABASE_PRIVILEGES="$MYSQL_CLIENT_CREATE_DATABASE_PRIVILEGES" -export MYSQL_CLIENT_ENABLE_SSL_WRAPPER="${MYSQL_CLIENT_ENABLE_SSL_WRAPPER:-no}" -export DB_ENABLE_SSL_WRAPPER="$MYSQL_CLIENT_ENABLE_SSL_WRAPPER" -export MYSQL_CLIENT_ENABLE_SSL="${MYSQL_CLIENT_ENABLE_SSL:-no}" -export DB_ENABLE_SSL="$MYSQL_CLIENT_ENABLE_SSL" -export MYSQL_CLIENT_SSL_CA_FILE="${MYSQL_CLIENT_SSL_CA_FILE:-}" -export DB_SSL_CA_FILE="$MYSQL_CLIENT_SSL_CA_FILE" -export MYSQL_CLIENT_SSL_CERT_FILE="${MYSQL_CLIENT_SSL_CERT_FILE:-}" -export DB_SSL_CERT_FILE="$MYSQL_CLIENT_SSL_CERT_FILE" -export MYSQL_CLIENT_SSL_KEY_FILE="${MYSQL_CLIENT_SSL_KEY_FILE:-}" -export DB_SSL_KEY_FILE="$MYSQL_CLIENT_SSL_KEY_FILE" -export MYSQL_CLIENT_EXTRA_FLAGS="${MYSQL_CLIENT_EXTRA_FLAGS:-no}" -export DB_EXTRA_FLAGS="$MYSQL_CLIENT_EXTRA_FLAGS" - -# Custom environment variables may be defined below diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client/postunpack.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client/postunpack.sh deleted file mode 100755 index 4cb766f7197f..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client/postunpack.sh +++ /dev/null @@ -1,19 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load libraries -. /opt/bitnami/scripts/libfs.sh - -# Load MySQL Client environment variables -. /opt/bitnami/scripts/mysql-client-env.sh - -for dir in "$DB_BIN_DIR" "${DB_BASE_DIR}/.bin"; do - ensure_dir_exists "$dir" - chmod g+rwX "$dir" -done diff --git a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client/setup.sh b/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client/setup.sh deleted file mode 100755 index 4061c70547e1..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/opt/bitnami/scripts/mysql-client/setup.sh +++ /dev/null @@ -1,19 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load libraries -. /opt/bitnami/scripts/libmysqlclient.sh - -# Load MySQL Client environment variables -. /opt/bitnami/scripts/mysql-client-env.sh - -# Ensure MySQL Client environment variables settings are valid -mysql_client_validate -# Ensure MySQL Client is initialized -mysql_client_initialize diff --git a/bitnami/ghost/4/debian-11/rootfs/post-init.d/shell.sh b/bitnami/ghost/4/debian-11/rootfs/post-init.d/shell.sh deleted file mode 100755 index 7b244a71294c..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/post-init.d/shell.sh +++ /dev/null @@ -1,36 +0,0 @@ -#!/bin/bash -# -# Executes custom Bash init scripts - -# shellcheck disable=SC1090,SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load libraries with logging functions -if [[ -f /opt/bitnami/base/functions ]]; then - . /opt/bitnami/base/functions -else - . /opt/bitnami/scripts/liblog.sh -fi - -# Loop through all input files passed via stdin -read -r -a custom_init_scripts <<< "$@" -failure=0 -if [[ "${#custom_init_scripts[@]}" -gt 0 ]]; then - for custom_init_script in "${custom_init_scripts[@]}"; do - [[ "$custom_init_script" != *".sh" ]] && continue - if [[ -x "$custom_init_script" ]]; then - info "Executing ${custom_init_script}" - "$custom_init_script" || failure="1" - else - info "Sourcing ${custom_init_script} as it is not executable by the current user, any error may cause initialization to fail" - . "$custom_init_script" - fi - [[ "$failure" -ne 0 ]] && error "Failed to execute ${custom_init_script}" - done -fi - -exit "$failure" diff --git a/bitnami/ghost/4/debian-11/rootfs/post-init.d/sql-mysql.sh b/bitnami/ghost/4/debian-11/rootfs/post-init.d/sql-mysql.sh deleted file mode 100755 index d77865550c91..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/post-init.d/sql-mysql.sh +++ /dev/null @@ -1,46 +0,0 @@ -#!/bin/bash -# -# Executes custom MySQL (.sql or .sql.gz) init scripts - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Load libraries with logging functions -if [[ -f /opt/bitnami/base/functions ]]; then - . /opt/bitnami/base/functions -else - . /opt/bitnami/scripts/liblog.sh -fi - -mysql_execute() { - local -r sql_file="${1:?missing file}" - local failure=0 - mysql_cmd=("mysql" "-h" "$MARIADB_HOST" "-P" "$MARIADB_PORT_NUMBER" "-u" "$MARIADB_ROOT_USER") - if [[ "${ALLOW_EMPTY_PASSWORD:-no}" != "yes" ]]; then - mysql_cmd+=("-p${MARIADB_ROOT_PASSWORD}") - fi - if [[ "$sql_file" == *".sql" ]]; then - "${mysql_cmd[@]}" < "$sql_file" || failure=$? - elif [[ "$sql_file" == *".sql.gz" ]]; then - gunzip -c "$sql_file" | "${mysql_cmd[@]}" || failure=$? - fi - return "$failure" -} - -# Loop through all input files passed via stdin -read -r -a custom_init_scripts <<< "$@" -failure=0 -if [[ "${#custom_init_scripts[@]}" -gt 0 ]]; then - for custom_init_script in "${custom_init_scripts[@]}"; do - [[ ! "$custom_init_script" =~ ^.*(\.sql|\.sql\.gz)$ ]] && continue - info "Executing ${custom_init_script}" - mysql_execute "$custom_init_script" || failure=1 - [[ "$failure" -ne 0 ]] && error "Failed to execute ${custom_init_script}" - done -fi - -exit "$failure" diff --git a/bitnami/ghost/4/debian-11/rootfs/post-init.sh b/bitnami/ghost/4/debian-11/rootfs/post-init.sh deleted file mode 100755 index d66cc8239541..000000000000 --- a/bitnami/ghost/4/debian-11/rootfs/post-init.sh +++ /dev/null @@ -1,23 +0,0 @@ -#!/bin/bash - -# shellcheck disable=SC1091 - -set -o errexit -set -o nounset -set -o pipefail -# set -o xtrace # Uncomment this line for debugging purposes - -# Only execute init scripts once -if [[ ! -f "/bitnami/ghost/.user_scripts_initialized" && -d "/docker-entrypoint-init.d" ]]; then - read -r -a init_scripts <<< "$(find "/docker-entrypoint-init.d" -type f -print0 | sort -z | xargs -0)" - if [[ "${#init_scripts[@]}" -gt 0 ]] && [[ ! -f "/bitnami/ghost/.user_scripts_initialized" ]]; then - mkdir -p "/bitnami/ghost" - for init_script in "${init_scripts[@]}"; do - for init_script_type_handler in /post-init.d/*.sh; do - "$init_script_type_handler" "$init_script" - done - done - fi - - touch "/bitnami/ghost/.user_scripts_initialized" -fi diff --git a/bitnami/ghost/4/debian-11/tags-info.yaml b/bitnami/ghost/4/debian-11/tags-info.yaml deleted file mode 100644 index 6582a77060ae..000000000000 --- a/bitnami/ghost/4/debian-11/tags-info.yaml +++ /dev/null @@ -1,4 +0,0 @@ -rolling-tags: -- "4" -- 4-debian-11 -- 4.48.9