zabbix-docker/Dockerfiles/web-apache-mysql/centos/docker-entrypoint.sh

257 lines
7.9 KiB
Bash
Raw Normal View History

2018-02-18 21:45:33 +01:00
#!/bin/bash
2020-04-26 18:45:42 +02:00
set -o pipefail
2018-02-18 21:45:33 +01:00
set +e
# Script trace mode
2021-04-12 03:43:41 +02:00
if [ "${DEBUG_MODE,,}" == "true" ]; then
2018-02-18 21:45:33 +01:00
set -o xtrace
fi
# Default Zabbix installation name
# Used only by Zabbix web-interface
2020-04-26 18:45:42 +02:00
: ${ZBX_SERVER_NAME:="Zabbix docker"}
2018-02-18 21:45:33 +01:00
# Default Zabbix server port number
2020-04-26 18:45:42 +02:00
: ${ZBX_SERVER_PORT:="10051"}
2018-02-18 21:45:33 +01:00
# Default timezone for web interface
2020-04-26 18:45:42 +02:00
: ${PHP_TZ:="Europe/Riga"}
2018-02-18 21:45:33 +01:00
# Default directories
# Configuration files directory
ZABBIX_ETC_DIR="/etc/zabbix"
# Web interface www-root directory
2020-04-26 18:45:42 +02:00
ZABBIX_WWW_ROOT="/usr/share/zabbix"
2018-02-18 21:45:33 +01:00
2019-07-13 23:50:22 +02:00
# usage: file_env VAR [DEFAULT]
# as example: file_env 'MYSQL_PASSWORD' 'zabbix'
# (will allow for "$MYSQL_PASSWORD_FILE" to fill in the value of "$MYSQL_PASSWORD" from a file)
# unsets the VAR_FILE afterwards and just leaving VAR
file_env() {
local var="$1"
local fileVar="${var}_FILE"
local defaultValue="${2:-}"
if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
echo "**** Both variables $var and $fileVar are set (but are exclusive)"
exit 1
fi
local val="$defaultValue"
if [ "${!var:-}" ]; then
val="${!var}"
echo "** Using ${var} variable from ENV"
elif [ "${!fileVar:-}" ]; then
if [ ! -f "${!fileVar}" ]; then
echo "**** Secret file \"${!fileVar}\" is not found"
exit 1
fi
val="$(< "${!fileVar}")"
echo "** Using ${var} variable from secret file"
fi
export "$var"="$val"
unset "$fileVar"
}
2018-02-18 21:45:33 +01:00
# Check prerequisites for MySQL database
2020-04-26 18:45:42 +02:00
check_variables() {
: ${DB_SERVER_HOST:="mysql-server"}
: ${DB_SERVER_PORT:="3306"}
2019-07-13 23:50:22 +02:00
file_env MYSQL_USER
file_env MYSQL_PASSWORD
2018-02-18 21:45:33 +01:00
DB_SERVER_ZBX_USER=${MYSQL_USER:-"zabbix"}
DB_SERVER_ZBX_PASS=${MYSQL_PASSWORD:-"zabbix"}
2020-04-26 18:45:42 +02:00
DB_SERVER_DBNAME=${MYSQL_DATABASE:-"zabbix"}
2023-05-02 08:33:33 +02:00
if [ ! -n "${DB_SERVER_SOCKET}" ]; then
mysql_connect_args="-h ${DB_SERVER_HOST} -P ${DB_SERVER_PORT}"
else
mysql_connect_args="-S ${DB_SERVER_SOCKET}"
fi
2018-02-18 21:45:33 +01:00
}
2020-08-27 18:58:54 +02:00
db_tls_params() {
local result=""
2021-04-13 14:16:43 +02:00
if [ "${ZBX_DB_ENCRYPTION,,}" == "true" ]; then
2020-09-08 23:41:01 +02:00
result="--ssl-mode=required"
2020-08-27 18:58:54 +02:00
if [ -n "${ZBX_DB_CA_FILE}" ]; then
result="${result} --ssl-ca=${ZBX_DB_CA_FILE}"
fi
if [ -n "${ZBX_DB_KEY_FILE}" ]; then
result="${result} --ssl-key=${ZBX_DB_KEY_FILE}"
fi
if [ -n "${ZBX_DB_CERT_FILE}" ]; then
result="${result} --ssl-cert=${ZBX_DB_CERT_FILE}"
fi
fi
echo $result
}
2020-04-26 18:45:42 +02:00
check_db_connect() {
2018-02-18 21:45:33 +01:00
echo "********************"
echo "* DB_SERVER_HOST: ${DB_SERVER_HOST}"
echo "* DB_SERVER_PORT: ${DB_SERVER_PORT}"
2023-05-02 08:33:33 +02:00
if [ -n "${DB_SERVER_SOCKET}" ]; then
echo "* DB_SERVER_SOCKET: ${DB_SERVER_SOCKET}"
fi
2018-02-18 21:45:33 +01:00
echo "* DB_SERVER_DBNAME: ${DB_SERVER_DBNAME}"
2021-04-12 03:43:41 +02:00
if [ "${DEBUG_MODE,,}" == "true" ]; then
2019-10-31 23:17:26 +01:00
echo "* DB_SERVER_ZBX_USER: ${DB_SERVER_ZBX_USER}"
echo "* DB_SERVER_ZBX_PASS: ${DB_SERVER_ZBX_PASS}"
2018-02-18 21:45:33 +01:00
fi
echo "********************"
WAIT_TIMEOUT=5
2020-08-27 18:58:54 +02:00
ssl_opts="$(db_tls_params)"
2020-04-28 16:21:46 +02:00
export MYSQL_PWD="${DB_SERVER_ZBX_PASS}"
2020-09-08 21:40:14 +02:00
2023-05-02 08:33:33 +02:00
while [ ! "$(mysqladmin ping $mysql_connect_args -u ${DB_SERVER_ZBX_USER} \
2020-09-08 23:41:01 +02:00
--silent --connect_timeout=10 $ssl_opts)" ]; do
2018-02-18 21:45:33 +01:00
echo "**** MySQL server is not available. Waiting $WAIT_TIMEOUT seconds..."
sleep $WAIT_TIMEOUT
done
2020-09-08 21:40:14 +02:00
unset MYSQL_PWD
2018-02-18 21:45:33 +01:00
}
2020-04-26 18:45:42 +02:00
prepare_web_server() {
2020-04-26 20:36:05 +02:00
APACHE_SITES_DIR=/etc/httpd/conf.d
2018-02-18 21:45:33 +01:00
echo "** Adding Zabbix virtual host (HTTP)"
if [ -f "$ZABBIX_ETC_DIR/apache.conf" ]; then
2021-06-07 14:41:33 +02:00
ln -sfT "$ZABBIX_ETC_DIR/apache.conf" "$APACHE_SITES_DIR/zabbix.conf"
2018-02-18 21:45:33 +01:00
else
echo "**** Impossible to enable HTTP virtual host"
fi
if [ -f "/etc/ssl/apache2/ssl.crt" ] && [ -f "/etc/ssl/apache2/ssl.key" ]; then
echo "** Adding Zabbix virtual host (HTTPS)"
if [ -f "$ZABBIX_ETC_DIR/apache_ssl.conf" ]; then
2021-06-07 14:41:33 +02:00
ln -sfT "$ZABBIX_ETC_DIR/apache_ssl.conf" "$APACHE_SITES_DIR/zabbix_ssl.conf"
2018-02-18 21:45:33 +01:00
else
echo "**** Impossible to enable HTTPS virtual host"
fi
else
echo "**** Impossible to enable SSL support for Apache2. Certificates are missed."
fi
}
2018-02-18 21:45:33 +01:00
prepare_zbx_web_config() {
echo "** Preparing Zabbix frontend configuration file"
PHP_CONFIG_FILE="/etc/php-fpm.d/zabbix.conf"
2018-02-18 21:45:33 +01:00
export PHP_FPM_PM=${PHP_FPM_PM:-"dynamic"}
export PHP_FPM_PM_MAX_CHILDREN=${PHP_FPM_PM_MAX_CHILDREN:-"50"}
export PHP_FPM_PM_START_SERVERS=${PHP_FPM_PM_START_SERVERS:-"5"}
export PHP_FPM_PM_MIN_SPARE_SERVERS=${PHP_FPM_PM_MIN_SPARE_SERVERS:-"5"}
export PHP_FPM_PM_MAX_SPARE_SERVERS=${PHP_FPM_PM_MAX_SPARE_SERVERS:-"35"}
export PHP_FPM_PM_MAX_REQUESTS=${PHP_FPM_PM_MAX_REQUESTS:-"0"}
if [ "$(id -u)" == '0' ]; then
echo "user = zabbix" >> "$PHP_CONFIG_FILE"
echo "group = zabbix" >> "$PHP_CONFIG_FILE"
echo "listen.owner = nginx" >> "$PHP_CONFIG_FILE"
echo "listen.group = nginx" >> "$PHP_CONFIG_FILE"
fi
2021-04-13 13:09:40 +02:00
: ${ZBX_DENY_GUI_ACCESS:="false"}
export ZBX_DENY_GUI_ACCESS=${ZBX_DENY_GUI_ACCESS,,}
export ZBX_GUI_ACCESS_IP_RANGE=${ZBX_GUI_ACCESS_IP_RANGE:-"['127.0.0.1']"}
export ZBX_GUI_WARNING_MSG=${ZBX_GUI_WARNING_MSG:-"Zabbix is under maintenance."}
2020-09-10 14:05:17 +02:00
export ZBX_MAXEXECUTIONTIME=${ZBX_MAXEXECUTIONTIME:-"600"}
export ZBX_MEMORYLIMIT=${ZBX_MEMORYLIMIT:-"128M"}
export ZBX_POSTMAXSIZE=${ZBX_POSTMAXSIZE:-"16M"}
export ZBX_UPLOADMAXFILESIZE=${ZBX_UPLOADMAXFILESIZE:-"2M"}
export ZBX_MAXINPUTTIME=${ZBX_MAXINPUTTIME:-"300"}
2020-10-08 15:29:10 +02:00
export PHP_TZ=${PHP_TZ}
2020-09-10 14:05:17 +02:00
export DB_SERVER_TYPE="MYSQL"
export DB_SERVER_HOST=${DB_SERVER_HOST}
export DB_SERVER_PORT=${DB_SERVER_PORT}
export DB_SERVER_DBNAME=${DB_SERVER_DBNAME}
export DB_SERVER_SCHEMA=${DB_SERVER_SCHEMA}
export DB_SERVER_USER=${DB_SERVER_ZBX_USER}
export DB_SERVER_PASS=${DB_SERVER_ZBX_PASS}
export ZBX_SERVER_HOST=${ZBX_SERVER_HOST}
export ZBX_SERVER_PORT=${ZBX_SERVER_PORT}
2020-09-10 14:05:17 +02:00
export ZBX_SERVER_NAME=${ZBX_SERVER_NAME}
2021-04-13 13:34:31 +02:00
: ${ZBX_DB_ENCRYPTION:="false"}
export ZBX_DB_ENCRYPTION=${ZBX_DB_ENCRYPTION,,}
2020-09-11 09:39:21 +02:00
export ZBX_DB_KEY_FILE=${ZBX_DB_KEY_FILE}
export ZBX_DB_CERT_FILE=${ZBX_DB_CERT_FILE}
export ZBX_DB_CA_FILE=${ZBX_DB_CA_FILE}
2021-04-13 14:16:43 +02:00
: ${ZBX_DB_VERIFY_HOST:="false"}
2021-04-13 13:34:31 +02:00
export ZBX_DB_VERIFY_HOST=${ZBX_DB_VERIFY_HOST,,}
2020-09-11 09:39:21 +02:00
2023-01-22 09:11:51 +01:00
export ZBX_VAULT=${ZBX_VAULT}
2020-10-08 11:05:12 +02:00
export ZBX_VAULTURL=${ZBX_VAULTURL}
export ZBX_VAULTDBPATH=${ZBX_VAULTDBPATH}
export VAULT_TOKEN=${VAULT_TOKEN}
2023-01-22 09:11:51 +01:00
export ZBX_VAULTCERTFILE=${ZBX_VAULTCERTFILE}
export ZBX_VAULTKEYFILE=${ZBX_VAULTKEYFILE}
2020-10-08 11:05:12 +02:00
2021-04-13 13:34:31 +02:00
: ${DB_DOUBLE_IEEE754:="true"}
export DB_DOUBLE_IEEE754=${DB_DOUBLE_IEEE754,,}
2020-09-11 09:39:21 +02:00
export ZBX_HISTORYSTORAGEURL=${ZBX_HISTORYSTORAGEURL}
export ZBX_HISTORYSTORAGETYPES=${ZBX_HISTORYSTORAGETYPES:-"[]"}
export ZBX_SSO_SETTINGS=${ZBX_SSO_SETTINGS:-""}
2023-01-22 09:17:38 +01:00
export ZBX_SSO_SP_KEY=${ZBX_SSO_SP_KEY}
export ZBX_SSO_SP_CERT=${ZBX_SSO_SP_CERT}
export ZBX_SSO_IDP_CERT=${ZBX_SSO_IDP_CERT}
2018-02-18 21:45:33 +01:00
2020-05-01 18:33:55 +02:00
if [ -n "${ZBX_SESSION_NAME}" ]; then
2021-02-17 14:37:07 +01:00
cp "$ZABBIX_WWW_ROOT/include/defines.inc.php" "/tmp/defines.inc.php_tmp"
sed "/ZBX_SESSION_NAME/s/'[^']*'/'${ZBX_SESSION_NAME}'/2" "/tmp/defines.inc.php_tmp" > "$ZABBIX_WWW_ROOT/include/defines.inc.php"
2020-05-01 18:33:55 +02:00
rm -f "/tmp/defines.inc.php_tmp"
fi
2021-04-13 13:09:40 +02:00
: ${ENABLE_WEB_ACCESS_LOG:="true"}
2021-04-12 03:43:41 +02:00
if [ "${ENABLE_WEB_ACCESS_LOG,,}" == "false" ]; then
sed -ri \
-e 's!^(\s*CustomLog)\s+\S+!\1 /dev/null!g' \
"/etc/httpd/conf/httpd.conf"
fi
2018-02-18 21:45:33 +01:00
}
#################################################
2020-04-26 18:45:42 +02:00
echo "** Deploying Zabbix web-interface (Apache) with MySQL database"
2018-02-18 21:45:33 +01:00
2020-05-13 23:12:56 +02:00
check_variables
check_db_connect
prepare_web_server
prepare_zbx_web_config
2018-02-18 21:45:33 +01:00
echo "########################################################"
if [ "$1" != "" ]; then
echo "** Executing '$@'"
exec "$@"
elif [ -f "/usr/bin/supervisord" ]; then
echo "** Executing supervisord"
exec /usr/bin/supervisord -c /etc/supervisor/supervisord.conf
else
echo "Unknown instructions. Exiting..."
exit 1
fi
2018-02-18 21:45:33 +01:00
#################################################