@wjwjq/release-helper 0.0.1

package/src/deploy/nginx/script/fix.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+# 获取脚本所在的目录
+basepath=$(dirname "$(realpath "${BASH_SOURCE[-1]}")")
+
+ 
+source $basepath/common.sh
+
+tar -zxvhf "$pkg_path"/nginx-binary*.tar.gz -C $install_path --strip-components 1
+
+if [[ -z "${prefix}" ]]; then
+  cp "$install_path"/sbin/nginx  /usr/sbin/
+fi
+
+# 检测是否安装成功
+if [[ $? == 0 ]]; then
+  echo "$(tput setaf 2)"nginx fixed"$(tput sgr0)"
+
+
+  "$install_path"nginx -v
+
+else
+
+  echo "$(tput setaf 1)"nginx installation failed!"$(tput sgr0)"
+fi

package/src/deploy/nginx/script/https.sh

@@ -0,0 +1,79 @@
+#!/bin/bash
+
+COUNTRY="CN"
+PROVINCE="SC"
+CITY="CD"
+ORG="HX"
+OU="HXWX"
+emailAddress="hxwxgroup@qq.com"
+
+get_subj () {
+  echo "/C=$COUNTRY/ST=$PROVINCE/L=$CITY/O=$ORG/OU=$OU/CN=$1/emailAddress=$emailAddress"
+}
+
+if [ ! -f "/etc/pki/CA/index.txt" ]; then
+  touch /etc/pki/CA/index.txt
+fi
+
+if [ ! -f "/etc/pki/CA/serial" ]; then
+  echo 01 >/etc/pki/CA/serial
+fi
+
+# ca
+echo "---------------------generate ca------------------"
+openssl genrsa -des3 -out ca.key 4096
+
+read -rep "Please input ca DOMAIN: " -i "HXWXGROUP" CA_GRPUP_DOMAIN
+
+
+subj=$(get_subj $CA_GRPUP_DOMAIN)
+
+openssl req -new -x509 -days 3650 -key ca.key -out ca.crt -subj $subj
+
+if [[ $? == 0 ]]; then
+  echo "$(tput setaf 2)"---------------------generate ca done------------------!"$(tput sgr0)"
+else
+  echo "$(tput setaf 1)"---------------------generate ca failed------------------"$(tput sgr0)"
+  exit 1
+fi
+ 
+# 服务端
+echo "---------------------generate  server ca------------------"
+openssl genrsa -des3 -out server.pem 2048
+
+openssl rsa -in server.pem -out server.key
+
+read -rep "Please input server DOMAIN: " -i "www.cdsp.com" SERVER_DOMAIN
+
+subj=$(get_subj $SERVER_DOMAIN)
+# echo $subj #"/C=CN/ST=SC/L=CD/O=HX/OU=HXWX/CN=www.cdsp.com/emailAddress=''"
+openssl req -new -key server.pem -out server.csr -subj $subj
+
+if [[ $? == 0 ]]; then
+  openssl ca -policy policy_anything -days 3650 -cert ca.crt -keyfile ca.key -in server.csr -out server.crt
+  echo "$(tput setaf 2)"---------------------generate server ca done------------------!"$(tput sgr0)"
+else
+  echo "$(tput setaf 1)"---------------------generate server ca failed------------------"$(tput sgr0)"
+  exit 1
+fi
+ 
+# 客户端
+echo "---------------------generate  client ca------------------"
+openssl genrsa -des3 -out client.pem 2048
+
+read -rep "Please input client DOMAIN: " -i "HXWXcdspCLIENT" CLIENT_DOMAIN
+
+subj=$(get_subj $CLIENT_DOMAIN)
+
+openssl req -new -key client.pem -out client.csr -subj $subj
+
+if [[ $? == 0 ]]; then
+  openssl ca -policy policy_anything -days 3650 -cert ca.crt -keyfile ca.key -in client.csr -out client.crt
+
+  openssl pkcs12 -export -clcerts -in client.crt -inkey client.pem -out client.p12
+
+  echo "$(tput setaf 2)"---------------------generate client ca done------------------!"$(tput sgr0)"
+else
+  echo "$(tput setaf 1)"---------------------generate client ca failed------------------"$(tput sgr0)"
+  exit 1
+fi

package/src/deploy/nginx/script/install.sh

@@ -0,0 +1,99 @@
+#!/bin/bash
+# 获取脚本所在的目录
+basepath=$(dirname "$(realpath "${BASH_SOURCE[-1]}")")
+
+source "$basepath"/common.sh
+
+open_port_80() {
+  # 查看防火墙是否开启
+  systemctl status firewalld
+  # 若未开启则开启
+  systemctl start firewalld
+
+  # 查看所有开启的端口
+  #firewall-cmd --list-ports
+
+  # 开启nginx默认80端口（关键步骤一）
+  firewall-cmd --zone=public --add-port=80/tcp --permanent
+
+  # 重启防火墙（关键步骤二）
+  firewall-cmd --reload
+}
+
+rpm_install() {
+  installed=$(rpm -qa | grep -i nginx)
+
+  if [[ -n "${installed}" ]]; then
+    rpm -e "$installed"
+  fi
+
+  rpm -Uivh "$pkg_path"/nginx*.rpm
+}
+
+install_from_sourcecode() {
+  tar -zxvhf "$pkg_path/nginx-1.20.2.tar.gz"
+  (
+    cd ./nginx-1.20.2 || exit
+    sudo ./configure --prefix="$install_path" --with-http_ssl_module --with-http_v2_module
+    make && make install
+  )
+}
+
+# 安装
+install() {
+  log "install nginx to path: ${install_path}"
+
+  arch=$(uname -m)
+  ssl_version=$(openssl version | grep -oP '\d+\.\d+' | sed -n '1p' 2>&1)
+
+  if [[ -z "${arch}" ]]; then
+    arch="x86_64"
+  fi
+
+  if [[ $arch == arm* ]] || [[ $arch = aarch64 ]]; then
+    arch="arm"
+  fi
+
+  if [[ "${ssl_version}" == "1.0" ]]; then
+    ssl_version="1.0.2"
+  fi
+
+  if [[ "${ssl_version}" == "1.1" ]]; then
+    ssl_version="1.1.1"
+  fi
+
+  if [[ "${ssl_version}" == "3.0" ]]; then
+    ssl_version="3.0.7"
+  fi
+
+  if [[ -z "${ssl_version}" ]]; then
+    ssl_version="1.0.2"
+  fi
+
+  pkg="$pkg_path"/nginx-"$arch"-ssl"$ssl_version".tar.gz
+
+  if [ ! -f "$pkg" ]; then
+    log_error "Fatal error: nginx-$arch-ssl$ssl_version.tar.gz not matched!  contact developer!"
+    exit 1
+  fi
+
+  log "current arch: $arch, current ssl_version： $ssl_version"
+
+  tar -zxvhf "$pkg" -C "$install_path" --strip-components 1
+
+  mkdir -p /var/log/nginx
+
+  if [[ -z "${prefix}" ]]; then
+    cp "$install_path"/sbin/nginx /usr/sbin/
+  fi
+
+  # 检测是否安装成功
+  if [[ $? == 0 ]]; then
+    log_success "nginx installation successfully!"
+  else
+    log_error "nginx installation failed!"
+  fi
+}
+
+install
+log '------------- done ------------------------'

package/src/deploy/nginx/script/prompt.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+prefix=""
+
+# if [[ -z "${prefix}" ]]; then
+
+#   read -r -p "Input installation or upgrade path: (default: /etc/nginx/)" prefix
+#   prefix=${prefix:-''}
+# fi
+
+# echo "install/upgrade prefix: $prefix"

package/src/deploy/nginx/script/upgrade.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+# 获取脚本所在的目录
+basepath=$(dirname "$(realpath "${BASH_SOURCE[-1]}")")
+
+source "$basepath"/common.sh
+
+log '------------- done ------------------------'

package/src/deploy/pkg/nginx/nginx.service.tpl

@@ -0,0 +1,33 @@
+[Unit]
+Description=nginx.service
+After=syslog.target network-online.target remote-fs.target nss-lookup.target
+Wants=network-online.target
+
+[Service]
+# 应用启动使用的用户及用户组,需各组件手动修改
+User=root
+Group=root
+
+Environment="LOGPATH=_log_path_" "LOGFILE=_log_file_" "LOGROTATEDELAY=2592000000"  "CONFS=_conf_path_" "VERSION=_version_"
+
+# Disable service start and stop timeout logic of systemd for mysqld service.
+TimeoutSec=0
+
+# Execute pre and post scripts as root
+PermissionsStartOnly=true
+
+# 应用安装目录,需手动修改
+WorkingDirectory=/etc/nginx
+
+[Service]
+Type=forking
+PIDFile=_pid_file_
+ExecStartPre=_start_check_
+ExecStart=_exec_cmd_
+ExecReload=/bin/sh -c "/bin/kill -s HUP $(/bin/cat /var/run/nginx.pid)"
+ExecStop=/bin/sh -c "/bin/kill -s TERM $(/bin/cat /var/run/nginx.pid)"
+
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target

package/src/deploy/script/common.sh

@@ -0,0 +1,183 @@
+#!/bin/bash
+# 获取脚本的父目录
+project_path=$(echo "$basepath" | sed -e "s/\/script//")
+
+# 请勿修改此处， 此处将在打包时自动替换
+app_name=__APP_NAME__
+
+# 静态资源存放目录 eg: /opt/posidon-frontend/
+install_path=__INSTALL_PATH__
+
+execute_log_path="/var/log/${app_name}_script_execute_logs"
+
+log() {
+  now=$(date "+%Y-%m-%d %H:%M:%S")
+  echo "$now: $1"
+  echo "$now: [info] $1" >>"$execute_log_path"
+}
+
+log_success() {
+  now=$(date "+%Y-%m-%d %H:%M:%S")
+  echo "$(tput setaf 2)""$now": "$1""$(tput sgr0)"
+  echo "$now: [success] $1" >>"$execute_log_path"
+}
+
+log_error() {
+  now=$(date "+%Y-%m-%d %H:%M:%S")
+  echo "$(tput setaf 1)""$now": "$1" "$(tput sgr0)"
+  echo "$now: [error] $1" >>"$execute_log_path"
+}
+
+log "-----------execute ${app_name} script-------------"
+
+source "$basepath"/prompt.sh
+
+if [[ $(whoami) != "root" ]]; then
+  echo "user:root is required!"
+  exit 1
+fi
+
+if [[ -z "${install_path}" ]]; then
+  echo "install path not found"
+  exit 1
+fi
+
+echo "install_path: ${install_path}"
+
+source "$basepath"/nginx.sh
+
+# 创建用户
+create_user_csri() {
+  user="csri"
+  group="csri"
+
+  #create group if not exists
+  grep "^$group" /etc/group >&/dev/null
+  if [ $? -ne 0 ]; then
+    groupadd $group
+  fi
+
+  #create user if not exists
+  grep "^$user" /etc/passwd >&/dev/null
+  if [ $? -ne 0 ]; then
+    useradd -g $group $user
+  fi
+}
+
+find_nginx_pos() {
+  confpath=''
+  find / -name "nginx" -print0 >tmpfile
+  while IFS= read -r -d $'\0'; do
+    if [ -d "$REPLY/conf" ]; then # $prefix/etc/nginx
+      confpath="$REPLY/conf.d/"
+      break
+    elif [ -d "$REPLY/conf.d" ]; then # /etc/nginx
+      confpath="$REPLY/conf.d/"
+      break
+    fi
+  done <tmpfile
+  rm -f tmpfile
+
+  echo "$confpath"
+}
+
+has_nginx_installed=1
+
+# 检查 nginx 是否已安装
+if command -v nginx >/dev/null 2>&1; then
+  # echo "Nginx is installed."
+  has_nginx_installed=1
+  # # 检查 nginx 服务是否正在运行
+  # if pgrep nginx >/dev/null 2>&1; then
+  #   echo "Nginx is running."
+  # else
+  #   echo "Nginx is installed but not running."
+  # fi
+else
+  # echo "Nginx is not installed."
+  has_nginx_installed=0
+fi
+
+get_old_version() {
+  if [ -f "$install_path""version" ]; then
+    old_version=$(sed -n '1p' "$install_path""version")
+
+    echo "$old_version"
+  fi
+}
+
+install_assets() {
+
+  # 拷贝静态资源
+  cp -rf "${project_path}"/pkg/version "$install_path"
+
+  mkdir -p "$install_path"assets
+
+  cp -rf "${project_path}"/pkg/assets/* "$install_path"assets
+
+  # # 对比行数并合并
+  # if [ -f "${backup_path}/settings" ]; then
+  #   cat $backup_path/settings | sed '/^$/d' >>./settings
+  #   cat $install_path/settings | sed '/^$/d' >>./settings_new
+
+  #   diffLines=$(diff ./settings ./settings_new | awk 'END{print NR}')
+
+  #   if ((diffLines > 0)); then
+  #     echo '-------合并前：old--------'
+  #     cat ./settings
+  #     old_total_line=$(awk 'END{print NR}' ./settings)
+  #     start=$(($old_total_line + 1))
+
+  #     echo '-------合并前： new--------'
+  #     cat ./settings_new
+  #     total_line=$(awk 'END{print NR}' ./settings_new)
+
+  #     sed -n "${start},${total_line}p" ./settings_new >>./settings
+  #     echo '---------- 合并后 ----------'
+  #     cat ./settings
+
+  #     mv -f ./settings $install_path
+  #     rm -rf ./settings_new
+
+  #     echo "$(tput setaf 2)"settings 已合并，注意检查"$(tput sgr0)"
+  #   fi
+  # fi
+
+  log_success "$install_path"assets/settings 已覆盖，请注意对比差异
+
+  # 修改所属用户
+  if [[ "$i(stat -c '%U' ${install_path})" != 'csri' ]]; then
+    chown -R csri:csri "$install_path"
+  fi
+
+  (chmod 644 -R "$install_path")
+
+  if [[ $? == 0 ]]; then
+    log_success "posidon-frontend deployed successfully"
+  else
+    log_error "posidon-frontend deployment failed"
+  fi
+}
+
+start() {
+  log "-----------execute ${app_name} script-------------"
+  # 创建用户
+  create_user_csri
+
+  now=$(date "+%Y-%m-%d_%H:%M:%S")
+  old_version=$(get_old_version)
+
+  #备份整个服务 eg: /opt/posidon-frontend
+  if [[ -n "${old_version}" ]]; then
+    parent_store_path=$(echo "$install_path" | sed -e "s/\/${app_name}//")
+    backup_path=$parent_store_path""$app_name"_"$old_version"_"$now
+    echo "${app_name} assets backup at: $backup_path"
+    mv "$install_path" "$backup_path"
+  fi
+
+  mkdir -p "$install_path"
+
+  copy_nginx_conf_and_write_verison
+  add_nginx_service
+  install_assets
+}

package/src/deploy/script/install.sh

@@ -0,0 +1,51 @@
+#!/bin/bash
+# 获取脚本所在的目录
+basepath=$(dirname "$(realpath "${BASH_SOURCE[-1]}")")
+
+source "$basepath"/common.sh
+
+# 未安装
+if ((has_nginx_installed == 0)); then
+  # while true; do
+  #   read -r -p "Nginx not found, install it?[Y/N]" yn
+  #   case $yn in
+  #   [Yy]*)
+  #     chmod +x "$basepath"/../nginx/script/install.sh
+  #     sh "$basepath"/../nginx/script/install.sh
+  #     break
+  #     ;;
+  #   [Nn]*) exit ;;
+  #   *) echo "Please answer yes or no." ;;
+  #   esac
+  # done
+  chmod +x "$basepath"/../nginx/script/install.sh
+  sh "$basepath"/../nginx/script/install.sh
+
+  if [[ $? != 0 ]]; then
+    echo "$(tput setaf 1)"failed to install!"$(tput sgr0)"
+    exit 1
+  fi
+fi
+
+# 已安装 询问是否更新nginx
+if ((has_nginx_installed == 1)); then
+  while true; do
+    read -r -p "Nginx has been installed, re-install it?[Y/N]" yn
+    case $yn in
+    [Yy]*)
+      chmod +x "$basepath"/../nginx/script/install.sh
+      sh "$basepath"/../nginx/script/install.sh "${@}"
+
+      if [[ $? != 0 ]]; then
+        echo "$(tput setaf 1)"failed to install!"$(tput sgr0)"
+        exit 1
+      fi
+      break
+      ;;
+    [Nn]*) break ;;
+    *) echo "Please answer yes or no." ;;
+    esac
+  done
+fi
+
+start

package/src/deploy/script/nginx.sh

@@ -0,0 +1,156 @@
+#!/bin/bash
+# 指定安装目录
+# nginx_conf_install_path="$prefix/etc/nginx_instances/${app_name}/"
+nginx_conf_install_path="$prefix/opt/${app_name}/nginx/"
+
+# 安装包所在路径
+pkg_path="${project_path}/pkg"
+
+# 配置文件所在路径
+new_nginx_conf_path="${pkg_path}/nginx/nginx.conf"
+
+# nginx服务配置文件路径
+nginx_conf_path="${nginx_conf_install_path}nginx.conf"
+
+# asset_path="$prefix/opt/posidon-frontend/"
+nginx_log_path="/var/log/nginx"
+nginx_log_file="${app_name}.nginx.log"
+nginx_pid_path="/var/run/${app_name}.nginx.pid"
+
+conf_version=$(awk '{print $1}' "${pkg_path}"/version)
+echo "$conf_version"
+
+copy_nginx_conf_and_write_verison() {
+  mkdir -p "$nginx_conf_install_path"
+
+  access_log_super="access_log /dev/stdout main"
+  error_log_super="error_log /dev/stderr warn"
+  access_log="access_log $nginx_log_path/$nginx_log_file main"
+  error_log="error_log $nginx_log_path/$nginx_log_file"
+
+  pid_file="pid  $nginx_pid_path"
+
+  exec=$(get_exec_path)
+
+  # if [ -f "$nginx_conf_path" ]; then
+  #   old_version=$(sed -n '1p' "$nginx_conf_path" | sed 's/# version: //' | sed "s/\s\+//g")
+
+  #   if [[ -n "${old_version}" ]]; then
+  #     now=$(date "+%Y-%m-%d_%H:%M:%S")
+
+  #     # echo "nginx_"$old_version"_"$now".conf"
+  #     mv "$nginx_conf_path" "${nginx_conf_install_path}"/"$app_name".nginx_"$old_version"_"$now".conf
+  #   fi
+  # fi
+
+  #nginx -v  nginx代码内部使用的stderr输出， 此处需要转换为stdout
+  nginx_version=$($exec -v 2>&1)
+
+  cp "$new_nginx_conf_path" ./nginx.conf
+
+  sed -i "1i\# ${nginx_version}" ./nginx.conf
+  sed -i "1i\# version: ${conf_version}" ./nginx.conf
+
+  if [[ -n "${prefix}" ]]; then
+    n=$(grep -wn "mime.types" ./nginx.conf | awk -F: '{print $1}' | sed -n 1p)
+    sed -i "${n}c include  conf/mime.types;" ./nginx.conf
+  fi
+
+  # n=$(grep -wn "__root__" ./nginx.conf | awk -F: '{print $1}' | sed -n 1p)
+  # if [[ -n "${n}" ]]; then
+  #   sed -i "${n}c root ${asset_path};" ./nginx.conf
+  # fi
+
+  # 替换日志输出路径方式
+  n=$(grep -wn "#ERROR_LOG_PLACEHOLDER" ./nginx.conf | awk -F: '{print $1}' | sed -n 1p)
+  if [[ -n "${n}" ]]; then
+    if ((mode == 2)); then
+      sed -i "${n}c ${error_log};" ./nginx.conf
+    else
+      sed -i "${n}c ${error_log_super};" ./nginx.conf
+    fi
+  fi
+
+  n=$(grep -wn "#ACCESS_LOG_PLACEHOLDER" ./nginx.conf | awk -F: '{print $1}' | sed -n 1p)
+  if [[ -n "${n}" ]]; then
+    if ((mode == 2)); then
+      sed -i "${n}c ${access_log};" ./nginx.conf
+    else
+      sed -i "${n}c ${access_log_super};" ./nginx.conf
+    fi
+  fi
+
+  n=$(grep -wn "#PID_FILE_PALCEHOLDER" ./nginx.conf | awk -F: '{print $1}' | sed -n 1p)
+  if [[ -n "${n}" ]]; then
+    # 非supervisorctl
+    if ((mode == 2)); then
+      sed -i "${n}c ${pid_file};" ./nginx.conf
+    fi
+  fi
+
+  n=$(grep -wn "daemon off;" ./nginx.conf | awk -F: '{print $1}' | sed -n 1p)
+  if [[ -n "${n}" ]]; then
+    # 非supervisorctl
+    if ((mode == 2)); then
+      sed -i "${n}c daemon on;" ./nginx.conf
+    fi
+  fi
+
+  mv -fb "./nginx.conf" "$nginx_conf_install_path"
+
+  cp -fR "$pkg_path"/nginx/ca "$nginx_conf_install_path"
+
+  mkdir -p /data/command/
+  log "nginx start command: $(get_exec_cmd)"
+  echo "$exec -c  $nginx_conf_path" >/data/command/nginx
+
+  if [[ $? == 0 ]]; then
+    log_success "$conf_version $nginx_conf_path replaced successfully!"
+  else
+    log_error "$conf_version $nginx_conf_path replaced failed!"
+  fi
+}
+
+get_exec_path() {
+  cmd=''
+  if [[ -n "${prefix}" ]]; then
+    cmd="${nginx_conf_install_path}/sbin/nginx"
+  else
+    cmd="/usr/sbin/nginx"
+  fi
+
+  echo "$cmd"
+}
+
+get_exec_cmd() {
+  exec=$(get_exec_path)
+
+  echo "$exec -c $nginx_conf_path"
+}
+
+add_nginx_service() {
+  #添加到服务
+  exec_cmd=$(get_exec_cmd)
+  cp "$pkg_path"/nginx/nginx.service.tpl ./nginx.service
+
+  check_cmd="$exec -t -c $nginx_conf_path"
+  version=$(echo "$conf_version" | grep -oP '\d+\.\d+\.\d+')
+
+  sed -i "s#_exec_cmd_#$exec_cmd #g" ./nginx.service
+  sed -i "s#_log_path_#$nginx_log_path#g" ./nginx.service
+  sed -i "s#_log_file_#$nginx_log_file#g" ./nginx.service
+  sed -i "s#_conf_path_#$nginx_conf_path#g" ./nginx.service
+  sed -i "s#_version_#$version#g" ./nginx.service
+  sed -i "s#_pid_file_#$nginx_pid_path#g" ./nginx.service
+  sed -i "s#_start_check_#$check_cmd#g" ./nginx.service
+
+  if ((mode == 2)); then
+    # systemctl enable nginx
+    cp ./nginx.service /usr/lib/systemd/system/"$app_name".nginx.service
+    systemctl daemon-reload
+
+    log_success "add ${app_name}.nginx.service to /usr/lib/systemd/system/"
+  else
+    rm -rf /usr/lib/systemd/system/"$app_name".nginx.service
+  fi
+}