#!/bin/bash #------------------------------------------------------- CUR_PRGDIR=`pwd` #当前文件的路径 #读取配置文件 PROP_FILE="$CUR_PRGDIR/bifang_init_param.conf" prop_value="" #---------------------------读取文件---------------------------------------------------functions #echo $CUR_PRGDIR function read_file(){ if [ $# != 2 ] then echo "usage: read_file [prop_name][must_input_flag]" exit 0 fi prop_name="$1" must_input_flag="$2" #echo "modify_file $prop_name $prop_value" if [ -z "$(cat $PROP_FILE |grep $prop_name)" ] then prop_value="" else #正则匹配 temp=`sed -n "/^[ \t]*$prop_name[ \t]*[=].*/p" $PROP_FILE` #截取对应的值，并去除首尾空格 prop_value=`echo ${temp#*=}| sed 's/^[ \t]*//g'|sed 's/[ \t]*$//g'|sed 's/\r//'` fi #判断是否为必填项 if [ "$must_input_flag" = "y" ] then if [ -z "$prop_value" ] then echo -n "${prop_name} can not be empty！" exit 0 fi fi } #-----------------------------------参数获取------------------------------------------------ read_file "db_host" "y" db_host="$prop_value" read_file "db_user" "y" db_user="$prop_value" read_file "db_pwd" "y" db_pwd="$prop_value" read_file "db_name" "y" db_name="$prop_value" read_file "db_port" "n" db_port="$prop_value" #----------------------------------------------------- read_file "api_reids_host" "y" api_reids_host="$prop_value" read_file "api_redis_port" "y" api_redis_port="$prop_value" #-------------------------------------------- read_file "syn_redis_host" "y" syn_redis_host="$prop_value" read_file "syn_redis_port" "y" syn_redis_port="$prop_value" #-------------------------------------------------- read_file "minio_url" "y" minio_url="$prop_value" read_file "minio_accessKey" "y" minio_accessKey="$prop_value" read_file "minio_secretKey" "y" minio_secretKey="$prop_value" read_file "minio_bucketName" "y" minio_bucketName="$prop_value" read_file "api_ip" "y" api_ip="$prop_value" read_file "api_port" "y" api_port="$prop_value" #-------------------------------------------------------- read_file "time_zone" "n" time_zone="$prop_value" read_file "consul_ip" "n" consul_ip="$prop_value" read_file "consul_port" "n" consul_port="$prop_value" read_file "ldap_urls" "n" ldap_urls="$prop_value" #------------------------t_sys_cfg参数---------------------------------------- read_file "yh_data_url_log" "n" yh_data_url_log="$prop_value" read_file "influx_password" "n" influx_password="$prop_value" read_file "influx_user" "n" influx_user="$prop_value" read_file "influx_url" "n" influx_url="$prop_value" read_file "influx_database" "n" influx_database="$prop_value" read_file "oam_api_address" "n" oam_api_address="$prop_value" #----------------------------------修改文件参数------------------------------------------------------- #---------------修改时区----- update_time(){ if [ -z "$time_zone" ]; then time_zone=Asia/Shanghai fi api_time=/home/docker/bifang/api/Dockerfile syn_time=/home/docker/bifang/syncredis/Dockerfile subid_time=/home/docker/bifang/webfocus/Dockerfile sed -i "s%ENV TimeZone=.*%ENV TimeZone=$time_zone%g" $api_time sed -i "s%ENV TimeZone=.*%ENV TimeZone=$time_zone%g" $syn_time sed -i "s%ENV TimeZone=.*%ENV TimeZone=$time_zone%g" $subid_time sed -i 's/\r$//' $api_time sed -i 's/\r$//' $syn_time sed -i 's/\r$//' $subid_time } update_file(){ #--------------------------------修改相关文件参数--------------------------------------------------------- api_config=/home/docker/bifang/api/config/application-dev.properties syn_config=/home/docker/bifang/syncredis/config/application.properties webfocus_config=/home/docker/bifang/webfocus/config/application.properties fqdn_config=/home/docker/categoryinit/config.properties api_port_config=/home/docker/bifang/api/config/application.properties #---------------------------------修改api配置文件------------------------ sed -i "s%spring.datasource.url=.*%spring.datasource.url=jdbc:mysql://$db_host:$db_port/$db_name?rewriteBatchedStatements=true%g" $api_config sed -i "s%spring.datasource.username=.*%spring.datasource.username=$db_user%g" $api_config sed -i "s%spring.datasource.password=.*%spring.datasource.password=$db_pwd%g" $api_config sed -i "s%spring.redis.host=.*%spring.redis.host=$api_reids_host%g" $api_config sed -i "s%spring.redis.port=.*%spring.redis.port=$api_redis_port%g" $api_config sed -i "s%server.port=.*%server.port=$api_port%g" $api_port_config if [ -z "$consul_ip" ]; then sed -i "s%consul.ip=.*%consul.ip=$consul_ip%g" $api_port_config fi if [ -z "$consul_port" ]; then sed -i "s%consul.port=.*%consul.port=$consul_port%g" $api_port_config fi if [ -z "$ldap_urls" ]; then sed -i "s%spring.ldap.urls=.*%spring.ldap.urls=$ldap_urls%g" $api_port_config fi #----------------------------------修改syn同步服务配置文件---------------------------------------------------------------------- sed -i "s%spring.datasource.url=.*%spring.datasource.url=jdbc:mysql://$db_host:$db_port/$db_name?rewriteBatchedStatements=true%g" $syn_config sed -i "s%spring.datasource.username=.*%spring.datasource.username=$db_user%g" $syn_config sed -i "s%spring.datasource.password=.*%spring.datasource.password=$db_pwd%g" $syn_config sed -i "s%spring.redis.host=.*%spring.redis.host=$syn_redis_host%g" $syn_config sed -i "s%spring.redis.port=.*%spring.redis.port=$syn_redis_port%g" $syn_config #-----------------------------------修改映射服务配置文件--------------------------------------------------------------------------------------------- sed -i "s%spring.datasource.url=.*%spring.datasource.url=jdbc:mysql://$db_host:$db_port/$db_name?rewriteBatchedStatements=true%g" $webfocus_config sed -i "s%spring.datasource.username=.*%spring.datasource.username=$db_user%g" $webfocus_config sed -i "s%spring.datasource.password=.*%spring.datasource.password=$db_pwd%g" $webfocus_config sed -i "s%spring.redis.host=.*%spring.redis.host=$syn_redis_host%g" $webfocus_config sed -i "s%spring.redis.port=.*%spring.redis.port=$syn_redis_port%g" $webfocus_config #------------------------------------修改服务分类配置文件-------------------------------------------------------------------------------------------------------------- sed -i "s%url=.*true%url=jdbc:mysql://$db_host:$db_port/$db_name?rewriteBatchedStatements=true%g" $fqdn_config sed -i "s%username=.*%username=$db_user%g" $fqdn_config sed -i "s%password=.*%password=$db_pwd%g" $fqdn_config #-------------------------------------修改脚本配置参数--------------------------------------------------------------------------------------------------- #证书脚本参数修改 bifang_init=/home/docker/db_init/bifang_init.sh #数据库创建脚本修改 create_db=/home/docker/db_init/create_db.sh sed -i "s%CACERT_URL=.*%CACERT_URL='http://$api_ip:$api_port/v1/policy/profile/trustedcacertobj'%g" $bifang_init sed -i "s%KEYRING_URL=.*%KEYRING_URL='http://$api_ip:$api_port/v1/policy/profile/keyringobj'%g" $bifang_init sed -i "s%TOKEN_URL=.*/v1%TOKEN_URL='http://$api_ip:$api_port/v1%g" $bifang_init sed -i "s%DB_HOST=.*%DB_HOST=$db_host%g" $bifang_init sed -i "s%DB_USER=.*%DB_USER=$db_user%g" $bifang_init sed -i "s%DB_PWD=.*%DB_PWD=$db_pwd%g" $bifang_init sed -i "s%DB_NAME=.*%DB_NAME=$db_name%g" $bifang_init #初始化数据库脚本修改 sed -i "s%DB_HOST=.*%DB_HOST=$db_host%g" $create_db sed -i "s%DB_USER=.*%DB_USER=$db_user%g" $create_db sed -i "s%DB_PWD=.*%DB_PWD=$db_pwd%g" $create_db sed -i "s%DB_NAME=.*%DB_NAME=$db_name%g" $create_db sed -i 's/\r$//' $create_db sed -i 's/\r$//' $bifang_init sed -i 's/\r$//' $fqdn_config sed -i 's/\r$//' $webfocus_config sed -i 's/\r$//' $syn_config sed -i 's/\r$//' $api_config sed -i 's/\r$//' $api_port_config update_time } #---------------------------docker安装------------------------------------- docker_start () { #判断docker是否安装 which "docker" > /dev/null if [ $? -eq 0 ] then echo "[`date '+%Y-%m-%d %T'`] docker已存在,开始安装镜像文件" dockerInit else #执行脚本文件安装docker echo "[`date '+%Y-%m-%d %T'`] 开始安装docker" dockerPath=/home/docker/docker_init/docker-deploy.sh d_docker=`cd /home/docker/docker_init/ && ./docker-deploy.sh` which "docker" > /dev/null if [ $? -eq 0 ] then echo "[`date '+%Y-%m-%d %T'`] docker安装成功" dockerInit fi fi } #------------------------------------解压jar包相关文件----------------------------- u_api=/home/bifang/api/bifang-api.jar u_syn=/home/bifang/syncredis/syncConfigToRedis.jar u_suid=/home/bifang/webfocus/mapping-subid-ip.jar dk_api=/home/docker/bifang/api/ dk_syn=/home/docker/bifang/syncredis/ dk_suid=/home/docker/bifang/webfocus/ api_n=bifang-api.jar syn_n=syncConfigToRedis.jar suid_n=mapping-subid-ip.jar unzip_jar(){ if [ $# != 3 ] then echo "usage: unzip_jar [no_api][cp_path] [jar_name]" exit 0 fi #判断docker目录是否存在jar no_api=$1 cp_path=$2 jar_name=$3 if [ -f "$no_api/$jar_name" ];then read -p "$no_api/$jar_name文件已存在，是否重新替换文件 y/n：" jary if [ $jary = "y" ];then rm -rf $no_api/$jar_name unzip_jar $no_api $cp_path $jar_name fi else if [ -f "$cp_path" ];then `cp -r $cp_path $no_api ` else echo "[`date '+%Y-%m-%d %T'`] 解压bifang.zip压缩文件" unzip bifang.zip -d /home cp -r $cp_path $no_api fi fi } #------------------------------------镜像文件安装------------------------------------------------------- dockerInit(){ update_cfg docker_count=`ps -ef|grep docker|grep -v grep` if [ $? -ne 0 ];then echo "[`date '+%Y-%m-%d %T'`] 启动docker服务" systemctl stop docker systemctl start docker fi #centos-bifang镜像文件 centos=`docker images|grep centos* ` if [ $? -ne 0 ] then echo "[`date '+%Y-%m-%d %T'`] 导入centos-bifang镜像文件" d_centos=`cd /home/docker/centos/ && docker load -i centos-bifang.tar` fi jdk=`docker images|grep jdk* ` if [ $? -ne 0 ] then echo "[`date '+%Y-%m-%d %T'`] 安装jdk镜像文件" d_jdk=`cd /home/docker/jdk && docker build -t jdk:1.8.0_73 .` fi nginx=`docker images|grep nginx* ` if [ $? -ne 0 ] then echo "[`date '+%Y-%m-%d %T'`] 安装nginx镜像文件" d_nginx=`cd /home/docker/bifang/nginx/ && docker load -i nginx.tar` fi echo "[`date '+%Y-%m-%d %T'`] 安装并启动api服务" d_api=`cd /home/docker/bifang/api/ && ./deploy-api.sh deployImagesAndStartContainer` echo "[`date '+%Y-%m-%d %T'`] 安装并启动bifang-html镜像文件" d_ui=`cd /home/docker/bifang/bifang-html/ && ./deploy-bifangHtml.sh deployImagesAndStartContainer` echo "[`date '+%Y-%m-%d %T'`] 安装并启动syncredis同步服务" d_syn=`cd /home/docker/bifang/syncredis/ && ./deploy-syncredis.sh deployImagesAndStartContainer` echo "[`date '+%Y-%m-%d %T'`] 安装并启动mapping-subid-ip映射服务" d_subid=`cd /home/docker/bifang/webfocus/ && ./deploy-webfocus.sh deployImagesAndStartContainer` api_check } cp_html(){ ui_path=/home/ceiec/bifang/ui/bifang-html dk_ui=/home/bifang/bifang-html if [ ! -d "$ui_path/static" ];then if [ -d "$dk_ui/static" ];then cp -r $dk_ui/* $ui_path/ # sed -i "s%realPath=.*%realPath=$api_ip:$api_port%g" $ui_path/static/js/deploy.sh # sed -i 's/\r$//' $ui_path/static/js/deploy.sh # chmod +x $ui_path/static/js/deploy.sh # ui_url=`cd $ui_path/static/js/ && ./deploy.sh` fi else read -p "api界面文件已存在，是否重新替换文件 y/n：" htmly if [ $htmly = "y" ];then rm -rf $ui_path/* cp_html fi fi } api_check(){ echo "[`date '+%Y-%m-%d %T'`] 检测api服务是否启动成功。。。" sleep 1m #TOKEN 获取接口URL TOKEN_URL="http://$api_ip:$api_port/v1/user/login?username=admin&password=admin" TOKEN=$(curl -s -X POST $TOKEN_URL|grep 'token'|awk -F':' '{print $2}'|awk -F'"' '{print $2}') echo "user login,token:${TOKEN}" if [ -z "$TOKEN" ]; then echo "[`date '+%Y-%m-%d %T'`] api服务token获取失败" read -p "(注：api服务启动慢会获取token失败，可重新获取) 请确认是否重新获取token y/n：" api_token if [ $api_token = "y" ];then api_check else echo "请检测api服务日志后（log目录/home/ceiec/bifang/api/logs），重新执行脚本" fi else echo "[`date '+%Y-%m-%d %T'`] api服务启动成功" cer_sql="select count(*) as '' from pxy_profile_trusted_ca_cert" cert_count=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${cer_sql}"` if [ $cert_count -gt 5 ];then echo "[`date '+%Y-%m-%d %T'`] 脚本执行完成" else cert_init fi fi cp_html } #--------------------------------解压docker文件-------------------------------------- unzip_inIt(){ echo "[`date '+%Y-%m-%d %T'`] 开始解压docker文件" unzip docker.zip -d /home if [ $? -eq 0 ] then echo "[`date '+%Y-%m-%d %T'`] 解压完成" unzip_jar $dk_api $u_api $api_n unzip_jar $dk_syn $u_syn $syn_n unzip_jar $dk_suid $u_suid $suid_n #.sh文件添加执行权限 find /home/docker/* -name "*.sh" -type f -exec chmod 755 \{\} \; config else echo "[`date '+%Y-%m-%d %T'`] 解压失败" fi } #-------------------------------修改t_sys_cfg参数------------------------------- update_cfg(){ if [ -z "$yh_data_url_log" ]; then yh_sql="update t_sys_cfg set cfg_value='$yh_data_url_log' where cfg_name='yh_data_url_log'" db_yh=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${yh_sql}"` fi if [ -z "$influx_password" ]; then ipwd_sql="update t_sys_cfg set cfg_value='$influx_password' where cfg_name='influx_password'" db_ipwd=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${ipwd_sql}"` fi if [ -z "$influx_user" ]; then iusr_sql="update t_sys_cfg set cfg_value='$influx_user' where cfg_name='influx_user'" db_iusr=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${iusr_sql}"` fi if [ -z "$influx_url" ]; then iurl_sql="update t_sys_cfg set cfg_value='$influx_url' where cfg_name='influx_url'" db_iurl=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${iurl_sql}"` fi if [ -z "$influx_database" ]; then idb_sql="update t_sys_cfg set cfg_value='$influx_database' where cfg_name='influx_database'" db_idb=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${idb_sql}"` fi if [ -z "$oam_api_address" ]; then oam_sql="update t_sys_cfg set cfg_value='$oam_api_address' where cfg_name='oam_api_address'" db_oam=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${oam_sql}"` fi murl="update t_sys_cfg set cfg_value='$minio_url' where cfg_name='minio_url';update t_sys_cfg set cfg_value='$minio_accessKey' where cfg_name='minio_accessKey';update t_sys_cfg set cfg_value='$minio_secretKey' where cfg_name='minio_secretKey';update t_sys_cfg set cfg_value='$minio_bucketName' where cfg_name='minio_bucketName'" db_m=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${murl}"` } #------------------------------证书初始化----------------------------------- cert_init(){ #修改minio参数 echo "[`date '+%Y-%m-%d %T'`] 证书初始化" d_cert=`cd /home/docker/db_init && ./bifang_init.sh` #检查文件是否执行成功 cert_falg=`grep -i "true" /home/ceiec/bifang/init.log|wc -l` if [ $cert_falg -gt 0 ];then cert_f=`grep -i "false" /home/ceiec/bifang/init.log|wc -l` if [ $cert_falg -gt 0];then echo "[`date '+%Y-%m-%d %T'`] 证书初始异常，请检查minio中$minio_bucketName桶是否创建，及读写权限添加" minio_err else echo "[`date '+%Y-%m-%d %T'`] 证书初始化执行完成" category_init fi else echo "证书初始异常，请检查minio中$minio_bucketName桶是否创建，及读写权限添加" minio_err fi } minio_err(){ echo "1、重新执行初始化证书" echo "2、修改Minio参数、重新执行证书初始化" echo "3、跳过证书初始化、继续执行下一步操作" read -p "请输入以上数字执行操作：" mnum rm -rf /home/ceiec/bifang/init.log if [ $mnum -eq "1" ];then cert_init elif [ $mnum -eq "2" ];then read -p "请依次输入Minio参数 url 用户名 密码 桶：" mi_url mi_accessKey mi_secretKey mi_bucketName mi="update t_sys_cfg set cfg_value='$mi_url' where cfg_name='minio_url';update t_sys_cfg set cfg_value='$mi_accessKey' where cfg_name='minio_accessKey';update t_sys_cfg set cfg_value='$mi_secretKey' where cfg_name='minio_secretKey';update t_sys_cfg set cfg_value='$mi_bucketName' where cfg_name='minio_bucketName'" midb=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${mi}"` cert_init elif [ $mnum -eq "3" ];then category_init else echo "请按以下操作，重新输入" minio_err fi } category_init(){ echo "[`date '+%Y-%m-%d %T'`] 分类服务初始化" d_cate=`cd /home/docker/categoryinit && java -jar categoryInit.jar` fqdn_sql="select count(*) as '' from tsg_obj_fqdn_cat" fqdn_count=`mysql -h$db_host -u$db_user -p$db_pwd $db_name -P$db_port -e "${fqdn_sql}"` echo "[`date '+%Y-%m-%d %T'`] 分类服务初始化完成，总计 $fqdn_count 条数据" echo "[`date '+%Y-%m-%d %T'`] 脚本运行完毕" } #---------------------------------创建数据库------------------------------------------------- db_init(){ db_care=`mysql -h$db_host -u$db_user -p$db_pwd -P$db_port -e "use $db_name"` if [ $? -eq 0 ];then read -p "数据库$db_name 已存在，是否重新创建覆盖此数据库 y/n：" dby if [ $dby = "y" ];then echo "[`date '+%Y-%m-%d %T'`] 创建$db_name数据库" #创建数据库 db_in=`cd /home/docker/db_init/ && ./create_db.sh` echo "$db_in" docker_start else docker_start fi else echo "[`date '+%Y-%m-%d %T'`] 创建$db_name数据库" #创建数据库 db_in=`cd /home/docker/db_init/ && ./create_db.sh` echo "$db_in" docker_start fi } #------------------------------------检查数据库参数-------------------------------------------------------- db_check(){ if [ -z "$db_port" ]; then db_port=3306 fi dbcheck=`mysql -h$db_host -u$db_user -p$db_pwd -P$db_port -e "use mysql" ` if [ $? -eq 0 ];then echo "[`date '+%Y-%m-%d %T'`] 数据库地址连接正确" m_check else echo "host:$db_host 用户:$db_user 密码：$db_pwd 端口：$db_port" read -p "数据库连接参数异常，请检查后依次重新输入(连接地址 用户名 密码 端口)空格隔开，输入数字1则跳过检测，继续执行后续步骤：" dbhost dbuser dbpwd dbport if [ $dbhost –eq 1 ];then echo "[`date '+%Y-%m-%d %T'`] 跳过数据库检测" m_check else db_host=$dbhost db_user=$dbuser db_pwd=$dbpwd if [ -n "$dbport" ]; then db_port=$dbport fi db_check fi fi } #-----------------------------------检查minio参数----------------------------------------- m_check(){ minurl=$(curl -X POST --header "Accept: */*" -H "Content-Type: application/json" --data '{"id": 1,"jsonrpc": "2.0", "params": {"username": "'"$minio_accessKey"'", "password": "'"$minio_secretKey"'"},"method": "Web.Login" }' ''"$minio_url/minio/webrpc"'') result=$(echo $minurl|grep 'token'|awk -F'token":"' '{print $2}'|awk -F'",' '{print $1}') if [[ $result != "" ]];then echo "[`date '+%Y-%m-%d %T'`] minio连接参数正常" update_file else echo "[`date '+%Y-%m-%d %T'`] minio参数 账号：$minio_accessKey 密码：$minio_secretKey url:$minio_url " mess=$(echo $minurl|grep 'message'|awk -F'message":"' '{print $2}'|awk -F'",' '{print $1}') if [ -z "$mess" ]; then echo "[`date '+%Y-%m-%d %T'`] minio参数连接失败" else echo "[`date '+%Y-%m-%d %T'`] minio参数连接异常：$mess" fi read -p "请重新输入mino的账号 密码 url，输入数字1则跳过检测，继续执行后续步骤：" m_url m_accessKey m_secretKey if [ $m_url = 1 ];then echo "[`date '+%Y-%m-%d %T'`] 跳过minio检测" update_file else minio_url=$m_url minio_accessKey=$m_accessKey minio_secretKey=$m_secretKey m_check fi fi } config(){ dbmysql=0 which "mysql" > /dev/null if [ $? -eq 0 ];then db_check else echo "[`date '+%Y-%m-%d %T'`] 安装mysql客户端服务" d_my=`rpm -ivh /home/docker/db_init/mariadb-libs-5.5.64-1.el7.x86_64.rpm` d_mm=`rpm -ivh /home/docker/db_init/mariadb-5.5.64-1.el7.x86_64.rpm` which "mysql" > /dev/null if [ $? -eq 0 ];then echo "[`date '+%Y-%m-%d %T'`] mysql客户端服务安装成功，继续检查参数" db_check else echo "[`date '+%Y-%m-%d %T'`] mysql客户端服务离线安装失败" echo "mysql客户端在线安装" my=`yum install mysql -y` which "mysql" > /dev/null if [ $? -eq 0 ];then echo "[`date '+%Y-%m-%d %T'`] mysql客户端服务安装成功，继续检查参数" db_check else bmysql=1 echo "[`date '+%Y-%m-%d %T'`] mysql客户端服务在线安装失败，请手动安装mysql远程客户端后重试" fi fi fi if [ $dbmysql -eq 0 ];then echo "[`date '+%Y-%m-%d %T'`] 配置文件检测完成,开始初始化数据库" db_init fi } if [ -d "/home/docker" ]; then read -p "[`date '+%Y-%m-%d %T'`] docker目录已存在，请确认是否删除后，重新解压文件 y/n ：" ziInit if [ $ziInit = "y" ];then rm -rf /home/docker unzip_inIt else #.sh文件添加执行权限 find /home/docker/* -name "*.sh" -type f -exec chmod 755 \{\} \; unzip_jar $dk_api $u_api $api_n unzip_jar $dk_syn $u_syn $syn_n unzip_jar $dk_suid $u_suid $suid_n echo "[`date '+%Y-%m-%d %T'`] 开始检查bifang_init_param.conf配置文件参数" config fi else unzip_inIt fi