X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=auth%2Fdocker%2Faaf.sh;h=53b3d60e770e38540a2327be4f03f43e6c6748f5;hb=refs%2Fchanges%2F87%2F65287%2F1;hp=441cf2b4951a221ec401c3f309e824938231cfe4;hpb=5a081a25fd94da790a59a68195a19bc0ef7aa20c;p=aaf%2Fauthz.git diff --git a/auth/docker/aaf.sh b/auth/docker/aaf.sh index 441cf2b4..53b3d60e 100644 --- a/auth/docker/aaf.sh +++ b/auth/docker/aaf.sh @@ -1,9 +1,8 @@ #!/bin/bash . ./d.props -docker run \ - -it \ - --rm \ +function run_it() { + docker run $@ \ --mount 'type=volume,src=aaf_config,dst='$CONF_ROOT_DIR',volume-driver=local' \ --add-host="$HOSTNAME:$HOST_IP" \ --add-host="aaf.osaaf.org:$HOST_IP" \ @@ -12,5 +11,57 @@ docker run \ --env LATITUDE=${LATITUDE} \ --env LONGITUDE=${LONGITUDE} \ --name aaf_config_$USER \ - ${ORG}/${PROJECT}/aaf_config:${VERSION} \ - /bin/bash "$@" + $PREFIX${ORG}/${PROJECT}/aaf_config:${VERSION} \ + /bin/bash $PARAMS +} + +function set_prop() { +docker exec -t aaf_config_$USER /bin/bash /opt/app/aaf_config/bin/agent.sh NOOP setProp "$1" "$2" "$3" +} + +function encrypt_it() { + docker exec -t aaf_config_$USER /bin/bash /opt/app/aaf_config/bin/agent.sh NOOP encrypt "$1" "$2" +} + +function set_it() { + docker exec -t aaf_config_$USER /bin/bash /opt/app/aaf_config/bin/agent.sh NOOP setProp "$1" "$2" +} + +P12_LOAD="no" + +for PROP in AAF_INITIAL_X509_P12 AAF_INITIAL_X509_PASSWORD AAF_SIGNER_P12 AAF_SIGNER_PASSWORD CADI_X509_ISSUERS; do + if [ "${!PROP}" != "" ]; then + P12_LOAD='yes' + break; + fi +done + +# First Time Run does a bit more setup +if [ "$(docker volume ls | grep aaf_config)" = "" ] && [ ${P12_LOAD} = "yes" ]; then + echo "Initializing first aaf_config" + if [ "$(docker container ls | grep aaf_config_$USER)" = "" ]; then + PARAMS="bash" + run_it -t -d + else + echo "aaf_config_$USER is already running" + fi + docker container cp ${AAF_INITIAL_X509_P12} aaf_config_$USER:/opt/app/osaaf/local/org.osaaf.aaf.p12 + docker container cp ${AAF_SIGNER_P12} aaf_config_$USER:/opt/app/osaaf/local/org.osaaf.aaf.signer.p12 + + set_prop cm_ca.local "${CM_CA_LOCAL}" org.osaaf.aaf.cm.ca.props + set_prop cadi_x509_issuers "${CADI_X509_ISSUERS}" org.osaaf.aaf.props + + encrypt_it cadi_keystore_password "${AAF_INITIAL_X509_PASSWORD}" + encrypt_it cm_ca.local "${AAF_SIGNER_PASSWORD}" + + echo -n "Stopping " + docker container stop aaf_config_$USER + echo -n "Removing " + docker container rm aaf_config_$USER +fi + +PARAMS="$@" +if [ "$PARAMS" != "" ]; then + run_it -it --rm +fi +