Use /bin/sh instead of bash.

[icinga2] / pki / icinga2-setup-agent.cmake

diff --git a/pki/icinga2-setup-agent.cmake b/pki/icinga2-setup-agent.cmake
index d01d8fc1d88ab300143eb97a94f69e510863a3df..cc296c9d3f7fccf6c23fc863bd40c1f4589fa5fc 100644 (file)
--- a/pki/icinga2-setup-agent.cmake
+++ b/pki/icinga2-setup-agent.cmake
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/bin/sh
 ICINGA2PKIDIR=@CMAKE_INSTALL_FULL_DATADIR@/icinga2/pki
 ICINGA2CONFIG=@CMAKE_INSTALL_FULL_SYSCONFDIR@/icinga2
 
@@ -14,8 +14,131 @@ if [ -n "$1" ]; then
                exit 1
        fi
 
+       if ! base64 -d $1 2>/dev/null; then
+               echo "The bundle file is invalid or corrupted."
+               exit 1
+       fi
+
+       while true; do
+               echo -n "Are you setting up a new master instance? [n] "
+               if ! read master; then
+                       exit 1
+               fi
+
+               if [ "$master" = "y" -o "$master" = "n" -o -z "$master" ]; then
+                       break
+               fi
+
+               echo "Please enter 'y' or 'n'."
+       done
+
+       if [ -z "$master" ]; then
+               master=n
+       fi
+
+       upstream_name=""
+
+       if [ "$master" = "n" ]; then
+               while true; do
+                       echo -n "Upstream Icinga instance name: "
+                       if ! read upstream_name; then
+                               exit 1
+                       fi
+
+                       if [ -n "$upstream_name" ]; then
+                               break
+                       fi
+
+                       echo "Please enter an instance name."
+               done
+       fi
+
+       while true; do
+               echo -n "Do you want this agent instance to listen on a TCP port? [y] "
+               if ! read listener; then
+                       exit 1
+               fi
+
+               if [ "$listener" = "y" -o "$listener" = "n" -o -z "$listener" ]; then
+                       break
+               fi
+
+               echo "Please enter 'y' or 'n'."
+       done
+
+       if [ -z "$listener" ]; then
+               listener=y
+       fi
+
+       listener_port=""
+
+       if [ "$listener" = "y" ]; then
+               while true; do
+                       echo -n "Which TCP port should the agent listen on? [8483] "
+                       if ! read listener_port; then
+                               exit 1
+                       fi
+
+                       break
+               done
+
+               if [ -z "$listener_port" ]; then
+                       listener_port=8483
+               fi
+       fi
+
+       upstream_connect=n
+
+       if [ "$master" = "n" ]; then
+               while true; do
+                       echo -n "Do you want this agent instance to connect to the upstream instance? [y] "
+                       if ! read upstream_connect; then
+                               exit 1
+                       fi
+
+                       if [ "$upstream_connect" = "y" -o "$upstream_connect" = "n" -o -z "$upstream_connect" ]; then
+                               break
+                       fi
+
+                       echo "Please enter 'y' or 'n'."
+               done
+
+               if [ -z "$upstream_connect" ]; then
+                       upstream_connect=y
+               fi
+
+               if [ "$upstream_connect" = "y" ]; then
+                       while true; do
+                               echo -n "Upstream IP address/hostname: "
+                               if ! read upstream_host; then
+                                       exit 1
+                               fi
+
+                               if [ -n "$upstream_host" ]; then
+                                       break
+                               fi
+
+                               echo "Please enter the upstream instance's hostname."
+                       done
+
+                       while true; do
+                               echo -n "Upstream port: "
+                               if ! read upstream_port; then
+                                       exit 1
+                               fi
+
+                               if [ -n "$upstream_port" ]; then
+                                       break
+                               fi
+
+                               echo "Please enter the upstream instance's port."
+                       done
+               fi
+       fi
+
        echo "Installing the certificate bundle..."
-       tar -C $ICINGA2CONFIG/pki/agent/ -xf "$1"
+       base64 -d < $1 | tar -C $ICINGA2CONFIG/pki/agent/ -zx || exit 1
+       chown @ICINGA2_USER@:@ICINGA2_GROUP@ $ICINGA2CONFIG/pki/agent/* || exit 1
 
        echo "Setting up agent configuration..."
        cat >$ICINGA2CONFIG/features-available/agent.conf <<AGENT
@@ -29,16 +152,41 @@ object AgentListener "agent" {
   cert_path = SysconfDir + "/icinga2/pki/agent/agent.crt"
   key_path = SysconfDir + "/icinga2/pki/agent/agent.key"
   ca_path = SysconfDir + "/icinga2/pki/agent/ca.crt"
+AGENT
+
+       if [ "$master" = "n" ]; then
+               cat >>$ICINGA2CONFIG/features-available/agent.conf <<AGENT
+  upstream_name = "$upstream_name"
+
+AGENT
+       fi
 
-  bind_port = 7000
+       if [ "$listener" = "y" ]; then
+               cat >>$ICINGA2CONFIG/features-available/agent.conf <<AGENT
+  bind_port = "$listener_port"
+
+AGENT
+       fi
+
+       if [ "$upstream_connect" = "y" ]; then
+               cat >>$ICINGA2CONFIG/features-available/agent.conf <<AGENT
+  upstream_host = "$upstream_host"
+  upstream_port = "$upstream_port"
+
+AGENT
+       fi
+
+       cat >>$ICINGA2CONFIG/features-available/agent.conf <<AGENT
 }
 AGENT
 
        echo "Enabling agent feature..."
        @CMAKE_INSTALL_FULL_SBINDIR@/icinga2-enable-feature agent
 
-       echo "Disabling notification feature..."
-       @CMAKE_INSTALL_FULL_SBINDIR@/icinga2-disable-feature notification
+       if [ "$master" = "n" ]; then
+               echo "Disabling notification feature..."
+               @CMAKE_INSTALL_FULL_SBINDIR@/icinga2-disable-feature notification
+       fi
 
        echo ""
        echo "The key bundle was installed successfully and the agent component"
@@ -65,7 +213,7 @@ fi
 REQ_COMMON_NAME="$name" KEY_DIR="$ICINGA2CONFIG/pki/agent" openssl req -config $ICINGA2PKIDIR/openssl-quiet.cnf -new -newkey rsa:4096 -keyform PEM -keyout $ICINGA2CONFIG/pki/agent/agent.key -outform PEM -out $ICINGA2CONFIG/pki/agent/agent.csr -nodes && \
        chmod 600 $ICINGA2CONFIG/pki/agent/agent.key
 
-echo "Please sign the following X509 CSR using the Agent CA:"
+echo "Please sign the following CSR using the Agent CA:"
 echo ""
 
 cat $ICINGA2CONFIG/pki/agent/agent.csr