forked from extern/docker
Add docker for 2.2.x
This commit is contained in:
Tiago Daniel Jacobs
parent
7bfb751534
commit
14a49e83f3
3
.gitignore
vendored
3
.gitignore
vendored
@ -1 +1,4 @@
|
|||||||
id_rsa.pub
|
id_rsa.pub
|
||||||
|
mac-vpn/docker-for-mac.ovpn
|
||||||
|
mac-vpn/config
|
||||||
|
certs/
|
||||||
|
|||||||
23
.travis.yml
23
.travis.yml
@ -1,23 +0,0 @@
|
|||||||
sudo: required
|
|
||||||
|
|
||||||
services:
|
|
||||||
- docker
|
|
||||||
|
|
||||||
script:
|
|
||||||
- docker build -t bigbluebutton/bigbluebutton:master .
|
|
||||||
|
|
||||||
after_script:
|
|
||||||
- docker images
|
|
||||||
|
|
||||||
before_deploy:
|
|
||||||
- docker login -u "$REGISTRY_USER" -p "$REGISTRY_PASS"
|
|
||||||
|
|
||||||
deploy:
|
|
||||||
provider: script
|
|
||||||
script: docker push bigbluebutton/bigbluebutton:master
|
|
||||||
on:
|
|
||||||
branch: master
|
|
||||||
|
|
||||||
notifications:
|
|
||||||
slack:
|
|
||||||
secure: 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
|
|
||||||
78
Dockerfile
78
Dockerfile
@ -2,20 +2,28 @@ FROM ubuntu:16.04
|
|||||||
MAINTAINER ffdixon@bigbluebutton.org
|
MAINTAINER ffdixon@bigbluebutton.org
|
||||||
|
|
||||||
ENV DEBIAN_FRONTEND noninteractive
|
ENV DEBIAN_FRONTEND noninteractive
|
||||||
# RUN echo 'Acquire::http::Proxy "http://192.168.2.69:3142";' > /etc/apt/apt.conf.d/01proxy
|
ENV container docker
|
||||||
RUN apt-get update && apt-get install -y wget apt-transport-https
|
|
||||||
|
|
||||||
RUN echo "deb http://ubuntu.bigbluebutton.org/xenial-200 bigbluebutton-xenial main " | tee /etc/apt/sources.list.d/bigbluebutton.list
|
RUN apt-get update && apt-get install -y netcat
|
||||||
RUN wget http://ubuntu.bigbluebutton.org/repo/bigbluebutton.asc -O- | apt-key add -
|
|
||||||
|
# -- Test if we have apt cache running on docker host, if yes, use it.
|
||||||
|
RUN nc -zv host.docker.internal 3142 &> /dev/null && echo 'Acquire::http::Proxy "http://host.docker.internal:3142";' > /etc/apt/apt.conf.d/01proxy
|
||||||
|
|
||||||
|
# -- Install utils
|
||||||
|
RUN apt-get update && apt-get install -y wget apt-transport-https
|
||||||
|
|
||||||
RUN apt-get install -y language-pack-en
|
RUN apt-get install -y language-pack-en
|
||||||
RUN update-locale LANG=en_US.UTF-8
|
RUN update-locale LANG=en_US.UTF-8
|
||||||
|
|
||||||
RUN apt-get update && apt-get install -y wget software-properties-common
|
# -- Install system utils
|
||||||
|
RUN apt-get update
|
||||||
|
RUN apt-get install -y --no-install-recommends apt-utils
|
||||||
|
RUN apt-get install -y wget software-properties-common
|
||||||
|
|
||||||
RUN add-apt-repository ppa:jonathonf/ffmpeg-4 -y
|
# -- Install yq
|
||||||
RUN LC_CTYPE=en_US.UTF-8 add-apt-repository ppa:rmescandon/yq -y
|
RUN LC_CTYPE=C.UTF-8 add-apt-repository ppa:rmescandon/yq
|
||||||
RUN apt-get update && apt-get -y dist-upgrade
|
RUN apt update
|
||||||
|
RUN LC_CTYPE=C.UTF-8 apt install yq -y
|
||||||
|
|
||||||
# -- Setup tomcat7 to run under docker
|
# -- Setup tomcat7 to run under docker
|
||||||
RUN apt-get install -y \
|
RUN apt-get install -y \
|
||||||
@ -29,41 +37,31 @@ RUN sed -i 's|securerandom.source=file:/dev/random|securerandom.source=file:/dev
|
|||||||
ADD mod/tomcat7 /etc/init.d/tomcat7
|
ADD mod/tomcat7 /etc/init.d/tomcat7
|
||||||
RUN chmod +x /etc/init.d/tomcat7
|
RUN chmod +x /etc/init.d/tomcat7
|
||||||
|
|
||||||
# -- Install BigBlueButton
|
# -- Modify systemd to be able to run inside container
|
||||||
RUN echo ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true | debconf-set-selections
|
RUN apt-get update \
|
||||||
RUN apt-get install -y bigbluebutton
|
&& apt-get install -y systemd
|
||||||
RUN apt-get install -y bbb-demo
|
|
||||||
|
|
||||||
# -- Install mongodb (for HTML5 client)
|
# -- Install Dependencies
|
||||||
RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 0C49F3730359A14518585931BC711F9BA15703C6
|
RUN apt-get install -y mlocate strace iputils-ping telnet tcpdump vim htop
|
||||||
RUN echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
|
|
||||||
RUN sudo apt-get update && sudo apt-get install -y mongodb-org curl
|
|
||||||
|
|
||||||
# -- Install nodejs (for HTML5 client)
|
# -- Install nginx (in order to enable it - to avoid the "nginx.service is not active" error)
|
||||||
RUN apt-get install -y apt-transport-https
|
RUN apt-get install -y nginx
|
||||||
RUN curl -s https://deb.nodesource.com/gpgkey/nodesource.gpg.key | apt-key add -
|
RUN systemctl enable nginx
|
||||||
RUN echo 'deb http://deb.nodesource.com/node_8.x xenial main' > /etc/apt/sources.list.d/nodesource.list
|
|
||||||
RUN echo 'deb-src http://deb.nodesource.com/node_8.x xenial main' >> /etc/apt/sources.list.d/nodesource.list
|
|
||||||
RUN apt-get update && apt-get install -y nodejs
|
|
||||||
|
|
||||||
# -- Install HTML5 client
|
# -- Disable unneeded services
|
||||||
RUN apt-get install -y bbb-html5
|
RUN systemctl disable systemd-journal-flush
|
||||||
|
RUN systemctl disable systemd-update-utmp.service
|
||||||
|
|
||||||
RUN apt-get update
|
# -- Finish startup
|
||||||
RUN apt-get install -y coturn xmlstarlet vim mlocate
|
# Add a number there to force update of files on build
|
||||||
|
RUN echo "Finishing ... @12"
|
||||||
|
RUN mkdir /opt/docker-bbb/
|
||||||
|
RUN wget https://raw.githubusercontent.com/bigbluebutton/bbb-install/master/bbb-install.sh -O- | sed 's|https://\$PACKAGE_REPOSITORY|http://\$PACKAGE_REPOSITORY|g' > /opt/docker-bbb/bbb-install.sh
|
||||||
|
RUN chmod 755 /opt/docker-bbb/bbb-install.sh
|
||||||
|
ADD setup.sh /opt/docker-bbb/setup.sh
|
||||||
|
ADD rc.local /etc/
|
||||||
|
RUN chmod 755 /etc/rc.local
|
||||||
|
|
||||||
# -- Install supervisor to run all the BigBlueButton processes (replaces systemd)
|
ENTRYPOINT ["/bin/systemd", "--system", "--unit=multi-user.target"]
|
||||||
RUN apt-get install -y supervisor
|
|
||||||
RUN mkdir -p /var/log/supervisor
|
|
||||||
ADD supervisord.conf /etc/supervisor/conf.d/supervisord.conf
|
|
||||||
|
|
||||||
# -- Modify FreeSWITCH event_socket.conf.xml to listen to IPV4
|
|
||||||
ADD mod/event_socket.conf.xml /opt/freeswitch/etc/freeswitch/autoload_configs
|
|
||||||
ADD mod/external.xml /opt/freeswitch/conf/sip_profiles/external.xml
|
|
||||||
|
|
||||||
# RUN apt-get install -y bbb-etherpad
|
|
||||||
|
|
||||||
# -- Finish startup
|
|
||||||
ADD setup.sh /root/setup.sh
|
|
||||||
ENTRYPOINT ["/root/setup.sh"]
|
|
||||||
CMD []
|
CMD []
|
||||||
|
|
||||||
|
|||||||
45
README.md
45
README.md
@ -1,26 +1,39 @@
|
|||||||
# BigBlueButton Docker
|
# BigBlueButton Docker
|
||||||
|
|
||||||
|
## Setting up the SSL
|
||||||
|
Generate a certificate to your container using letsencrypt and then copy your certificate to certs/ folder with the commands:
|
||||||
|
```
|
||||||
|
mkdir certs/
|
||||||
|
cp fullchain.pem certs/
|
||||||
|
cp privkey.pem certs/
|
||||||
|
```
|
||||||
|
|
||||||
These are scripts to build a Docker that runs BigBlueButton with both the Flash and HTML5 client. To build the Docker container, run the command
|
## Creating container
|
||||||
|
```
|
||||||
|
docker-compose build bbb
|
||||||
|
NAME=bbb001 DOMAIN=bbbvm.imdt.com.br sh -c 'docker-compose run --name $NAME bbb'
|
||||||
|
```
|
||||||
|
|
||||||
~~~
|
## Defining an entry in your `/etc/hosts` file
|
||||||
docker build -t bigbluebutton .
|
```
|
||||||
~~~
|
docker exec -it bbb001 ifconfig eth0
|
||||||
|
```
|
||||||
|
|
||||||
Here we called the BigBlueButton container `bigbluebutton`. To run BigBlueButton in Docker, run the command
|
## MAC users
|
||||||
|
Docker for Mac OS doesn't allow direct access to container IP's.
|
||||||
|
|
||||||
~~~
|
In order to access the BBB container from your MAC os host, you can use openvpn:
|
||||||
docker run --rm -p 80:80/tcp -p 1935:1935 -p 3478:3478 -p 3478:3478/udp bigbluebutton -h <HOST_IP>
|
|
||||||
~~~
|
|
||||||
|
|
||||||
Make sure you provide the host IP of the server on which you run the docker command. Once running, you can navigate to `http://<HOST_IP>` to access your BigBlueButton server.
|
1. Build containers:
|
||||||
|
```
|
||||||
|
docker-compose build mac_proxy mac_openvpn
|
||||||
|
```
|
||||||
|
|
||||||
For details see the [setup instructions](http://docs.bigbluebutton.org/install/docker.html).
|
2. Add `comp-lzo no` at bottom of `mac-vpn/docker-for-mac.ovpn`
|
||||||
|
|
||||||
## Future Plans
|
3. Install openvpn configuration generated on `mac-vpn/docker-for-mac.ovpn` (double click and open on Tunnelblick)
|
||||||
|
|
||||||
Our goal was to allow developers to run BigBlueButton server with a single command. This Docker image is not meant for production use, but rather for testing and trying out BigBlueButton.
|
4. Start containers
|
||||||
|
```
|
||||||
Still, it good step towards separating BigBlueButton into individual components for running under docker-compose or kubernetes.
|
docker-compose start mac_proxy mac_openvpn
|
||||||
|
```
|
||||||
|
|||||||
52
docker-compose.yml
Normal file
52
docker-compose.yml
Normal file
@ -0,0 +1,52 @@
|
|||||||
|
version: '2'
|
||||||
|
|
||||||
|
networks:
|
||||||
|
backend:
|
||||||
|
|
||||||
|
services:
|
||||||
|
bbb:
|
||||||
|
build: .
|
||||||
|
privileged: true
|
||||||
|
environment:
|
||||||
|
- "NAME=${NAME}"
|
||||||
|
- "DOMAIN=${DOMAIN}"
|
||||||
|
hostname: ${NAME}.${DOMAIN}
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
environment:
|
||||||
|
- container=docker
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /run/lock
|
||||||
|
- /tmp
|
||||||
|
volumes:
|
||||||
|
- ./certs/:/local/certs/
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
security_opt:
|
||||||
|
- seccomp:unconfined
|
||||||
|
networks:
|
||||||
|
- backend
|
||||||
|
|
||||||
|
mac_proxy:
|
||||||
|
build: mac-vpn/
|
||||||
|
ports:
|
||||||
|
- "127.0.0.1:13194:13194"
|
||||||
|
command: TCP-LISTEN:13194,fork TCP:172.17.0.1:1194
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
- backend
|
||||||
|
|
||||||
|
mac_openvpn:
|
||||||
|
image: kylemanna/openvpn
|
||||||
|
volumes:
|
||||||
|
- ./mac-vpn:/local
|
||||||
|
- ./mac-vpn/config:/etc/openvpn
|
||||||
|
network_mode: host
|
||||||
|
privileged: true
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
environment:
|
||||||
|
dest: docker-for-mac.ovpn
|
||||||
|
DEBUG: '1'
|
||||||
|
command: /local/helpers/run-vpn.sh
|
||||||
|
restart: always
|
||||||
4
mac-vpn/Dockerfile
Normal file
4
mac-vpn/Dockerfile
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
FROM alpine
|
||||||
|
RUN apk add --no-cache socat
|
||||||
|
ENTRYPOINT ["socat"]
|
||||||
|
|
||||||
22
mac-vpn/helpers/run-vpn.sh
Executable file
22
mac-vpn/helpers/run-vpn.sh
Executable file
@ -0,0 +1,22 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
dest=${dest:-docker.ovpn}
|
||||||
|
|
||||||
|
if [ ! -f "/local/$dest" ]; then
|
||||||
|
echo "*** REGENERATING ALL CONFIGS ***"
|
||||||
|
set -ex
|
||||||
|
#rm -rf /etc/openvpn/*
|
||||||
|
ovpn_genconfig -u tcp://localhost
|
||||||
|
sed -i 's|^push|#push|' /etc/openvpn/openvpn.conf
|
||||||
|
echo localhost | ovpn_initpki nopass
|
||||||
|
easyrsa build-client-full host nopass
|
||||||
|
ovpn_getclient host | sed '
|
||||||
|
s|localhost 1194|localhost 13194|;
|
||||||
|
s|redirect-gateway.*|route 172.16.0.0 255.240.0.0|;
|
||||||
|
' > "/local/$dest"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Workaround for https://github.com/wojas/docker-mac-network/issues/6
|
||||||
|
/sbin/iptables -I FORWARD 1 -i tun+ -j ACCEPT
|
||||||
|
|
||||||
|
exec ovpn_run
|
||||||
@ -1,11 +0,0 @@
|
|||||||
<configuration name="event_socket.conf" description="Socket Client">
|
|
||||||
<settings>
|
|
||||||
<param name="nat-map" value="false"/>
|
|
||||||
<param name="listen-ip" value="127.0.0.1"/>
|
|
||||||
<param name="listen-port" value="8021"/>
|
|
||||||
<param name="password" value="ClueCon"/>
|
|
||||||
<!--<param name="apply-inbound-acl" value="loopback.auto"/>-->
|
|
||||||
<!--<param name="stop-on-bind-error" value="true"/>-->
|
|
||||||
</settings>
|
|
||||||
</configuration>
|
|
||||||
|
|
||||||
113
mod/external.xml
113
mod/external.xml
@ -1,113 +0,0 @@
|
|||||||
<profile name="external">
|
|
||||||
<!-- http://wiki.freeswitch.org/wiki/Sofia_Configuration_Files -->
|
|
||||||
<!-- This profile is only for outbound registrations to providers -->
|
|
||||||
<gateways>
|
|
||||||
<X-PRE-PROCESS cmd="include" data="external/*.xml"/>
|
|
||||||
</gateways>
|
|
||||||
|
|
||||||
<aliases>
|
|
||||||
<!--
|
|
||||||
<alias name="outbound"/>
|
|
||||||
<alias name="nat"/>
|
|
||||||
-->
|
|
||||||
</aliases>
|
|
||||||
|
|
||||||
<domains>
|
|
||||||
<domain name="all" alias="false" parse="true"/>
|
|
||||||
</domains>
|
|
||||||
|
|
||||||
<settings>
|
|
||||||
<param name="debug" value="0"/>
|
|
||||||
<!-- If you want FreeSWITCH to shutdown if this profile fails to load, uncomment the next line. -->
|
|
||||||
<!-- <param name="shutdown-on-fail" value="true"/> -->
|
|
||||||
<param name="sip-trace" value="no"/>
|
|
||||||
<param name="sip-capture" value="no"/>
|
|
||||||
<param name="rfc2833-pt" value="101"/>
|
|
||||||
<!-- RFC 5626 : Send reg-id and sip.instance -->
|
|
||||||
<!--<param name="enable-rfc-5626" value="true"/> -->
|
|
||||||
<param name="sip-port" value="$${external_sip_port}"/>
|
|
||||||
<param name="dialplan" value="XML"/>
|
|
||||||
<param name="context" value="public"/>
|
|
||||||
<param name="dtmf-duration" value="2000"/>
|
|
||||||
<param name="inbound-codec-prefs" value="$${global_codec_prefs}"/>
|
|
||||||
<param name="outbound-codec-prefs" value="$${outbound_codec_prefs}"/>
|
|
||||||
<param name="hold-music" value="$${hold_music}"/>
|
|
||||||
<param name="rtp-timer-name" value="soft"/>
|
|
||||||
<!--<param name="enable-100rel" value="true"/>-->
|
|
||||||
<!--<param name="disable-srv503" value="true"/>-->
|
|
||||||
<!-- This could be set to "passive" -->
|
|
||||||
<param name="local-network-acl" value="localnet.auto"/>
|
|
||||||
<param name="manage-presence" value="false"/>
|
|
||||||
|
|
||||||
<!-- used to share presence info across sofia profiles
|
|
||||||
manage-presence needs to be set to passive on this profile
|
|
||||||
if you want it to behave as if it were the internal profile
|
|
||||||
for presence.
|
|
||||||
-->
|
|
||||||
<!-- Name of the db to use for this profile -->
|
|
||||||
<!--<param name="dbname" value="share_presence"/>-->
|
|
||||||
<!--<param name="presence-hosts" value="$${domain}"/>-->
|
|
||||||
<!--<param name="force-register-domain" value="$${domain}"/>-->
|
|
||||||
<!--all inbound reg will stored in the db using this domain -->
|
|
||||||
<!--<param name="force-register-db-domain" value="$${domain}"/>-->
|
|
||||||
<!-- ************************************************* -->
|
|
||||||
|
|
||||||
<!--<param name="aggressive-nat-detection" value="true"/>-->
|
|
||||||
<param name="inbound-codec-negotiation" value="generous"/>
|
|
||||||
<param name="nonce-ttl" value="60"/>
|
|
||||||
<param name="auth-calls" value="false"/>
|
|
||||||
<param name="inbound-late-negotiation" value="true"/>
|
|
||||||
<param name="inbound-zrtp-passthru" value="true"/> <!-- (also enables late negotiation) -->
|
|
||||||
<!--
|
|
||||||
DO NOT USE HOSTNAMES, ONLY IP ADDRESSES IN THESE SETTINGS!
|
|
||||||
<param name="rtp-ip" value="$${local_ip_v4}"/>
|
|
||||||
<param name="sip-ip" value="$${local_ip_v4}"/>
|
|
||||||
<param name="ext-rtp-ip" value="auto-nat"/>
|
|
||||||
<param name="ext-sip-ip" value="auto-nat"/>
|
|
||||||
-->
|
|
||||||
|
|
||||||
<param name="rtp-ip" value="$${local_ip_v4}"/>
|
|
||||||
<param name="sip-ip" value="$${local_ip_v4}"/>
|
|
||||||
<param name="ext-rtp-ip" value="$${local_ip_v4}"/>
|
|
||||||
<param name="ext-sip-ip" value="$${local_ip_v4}"/>
|
|
||||||
|
|
||||||
<param name="rtp-timeout-sec" value="300"/>
|
|
||||||
<param name="rtp-hold-timeout-sec" value="1800"/>
|
|
||||||
<param name="enable-3pcc" value="true"/>
|
|
||||||
|
|
||||||
<!-- TLS: disabled by default, set to "true" to enable -->
|
|
||||||
<param name="tls" value="$${external_ssl_enable}"/>
|
|
||||||
<!-- Set to true to not bind on the normal sip-port but only on the TLS port -->
|
|
||||||
<param name="tls-only" value="false"/>
|
|
||||||
<!-- additional bind parameters for TLS -->
|
|
||||||
<param name="tls-bind-params" value="transport=tls"/>
|
|
||||||
<!-- Port to listen on for TLS requests. (5081 will be used if unspecified) -->
|
|
||||||
<param name="tls-sip-port" value="$${external_tls_port}"/>
|
|
||||||
<!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) -->
|
|
||||||
<!--<param name="tls-cert-dir" value=""/>-->
|
|
||||||
<!-- Optionally set the passphrase password used by openSSL to encrypt/decrypt TLS private key files -->
|
|
||||||
<param name="tls-passphrase" value=""/>
|
|
||||||
<!-- Verify the date on TLS certificates -->
|
|
||||||
<param name="tls-verify-date" value="true"/>
|
|
||||||
<!-- TLS verify policy, when registering/inviting gateways with other servers (outbound) or handling inbound registration/invite requests how should we verify their certificate -->
|
|
||||||
<!-- set to 'in' to only verify incoming connections, 'out' to only verify outgoing connections, 'all' to verify all connections, also 'in_subjects', 'out_subjects' and 'all_subjects' for subject validation. Multiple policies can be split with a '|' pipe -->
|
|
||||||
<param name="tls-verify-policy" value="none"/>
|
|
||||||
<!-- Certificate max verify depth to use for validating peer TLS certificates when the verify policy is not none -->
|
|
||||||
<param name="tls-verify-depth" value="2"/>
|
|
||||||
<!-- If the tls-verify-policy is set to subjects_all or subjects_in this sets which subjects are allowed, multiple subjects can be split with a '|' pipe -->
|
|
||||||
<param name="tls-verify-in-subjects" value=""/>
|
|
||||||
<!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
|
|
||||||
<param name="tls-version" value="$${sip_tls_version}"/>
|
|
||||||
<param name="ws-binding" value=":5066"/>
|
|
||||||
<param name="apply-candidate-acl" value="webrtc-turn"/>
|
|
||||||
|
|
||||||
<!-- enable rtcp on every channel also can be done per leg basis with rtcp_audio_interval_msec variable set to passthru to pass it across a call-->
|
|
||||||
<param name="rtcp-audio-interval-msec" value="5000"/>
|
|
||||||
<param name="rtcp-video-interval-msec" value="5000"/>
|
|
||||||
|
|
||||||
<!-- Cut down in the join time -->
|
|
||||||
<param name="dtmf-type" value="info"/>
|
|
||||||
<param name="liberal-dtmf" value="true"/>
|
|
||||||
</settings>
|
|
||||||
</profile>
|
|
||||||
|
|
||||||
2
rc.local
Normal file
2
rc.local
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
[ ! -f /opt/docker-bbb/setup-executed ] && /opt/docker-bbb/setup.sh
|
||||||
257
setup.sh
257
setup.sh
@ -19,249 +19,32 @@
|
|||||||
#
|
#
|
||||||
set -x
|
set -x
|
||||||
|
|
||||||
change_var_value () {
|
cd "$(dirname "$0")"
|
||||||
sed -i "s<^[[:blank:]#]*\(${2}\).*<\1=${3}<" $1
|
|
||||||
}
|
|
||||||
|
|
||||||
change_yml_value () {
|
useradd bbb
|
||||||
sed -i "s<^\([[:blank:]#]*\)\(${2}\): .*<\1\2: ${3}<" $1
|
mkdir /home/bbb
|
||||||
}
|
chown bbb /home/bbb
|
||||||
|
echo "bbb ALL=(ALL:ALL) NOPASSWD: ALL" | tee /etc/sudoers.d/bbb
|
||||||
|
|
||||||
|
./bbb-install.sh -d -s "`hostname -f`" -v xenial-220-dev22a -a
|
||||||
|
sed -i 's/::/0.0.0.0/g' /opt/freeswitch/etc/freeswitch/autoload_configs/event_socket.conf.xml
|
||||||
|
|
||||||
# docker run -p 80:80/tcp -p 443:443/tcp -p 1935:1935 -p 5066:5066 -p 3478:3478 -p 3478:3478/udp b2 -h 192.168.0.130
|
# Repository is broken (remove it later)
|
||||||
|
cd /usr/local/bigbluebutton/bbb-webrtc-sfu/
|
||||||
|
npm install --unsafe-perm
|
||||||
|
|
||||||
while getopts ":eh:s:" opt; do
|
# Allow to have executable files in /tmp/ folder (tomcat JNA)
|
||||||
case $opt in
|
mount /tmp -o remount,exec
|
||||||
e)
|
|
||||||
env
|
|
||||||
exit
|
|
||||||
;;
|
|
||||||
h)
|
|
||||||
HOST=$OPTARG
|
|
||||||
;;
|
|
||||||
s)
|
|
||||||
SECRET=$OPTARG
|
|
||||||
;;
|
|
||||||
:)
|
|
||||||
echo "Missing option argument for -$OPTARG" >&2;
|
|
||||||
exit 1
|
|
||||||
;;
|
|
||||||
\?)
|
|
||||||
echo "Invalid option: -$OPTARG" >&2
|
|
||||||
cat<<HERE
|
|
||||||
Docker startup script for BigBlueButton.
|
|
||||||
|
|
||||||
-h Hostname for BigBlueButton server
|
# Restart
|
||||||
-s Shared secret
|
bbb-conf --restart
|
||||||
|
|
||||||
HERE
|
|
||||||
exit 1
|
|
||||||
;;
|
|
||||||
:)
|
|
||||||
echo "Option -$OPTARG requires an argument." >&2
|
|
||||||
exit 1
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
done
|
|
||||||
|
|
||||||
apt-get install -y bbb-demo && /etc/init.d/tomcat7 start
|
|
||||||
while [ ! -f /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp ]; do sleep 1; done
|
|
||||||
sudo /etc/init.d/tomcat7 stop
|
|
||||||
|
|
||||||
# In a standard BigBlueButton server you would use `bbb-conf --setip IP` to configure it listen to a given IP, but
|
|
||||||
# we are using supervisorctl (not systemd) in, so we apply all the configuration changes before running supervisorctl at
|
|
||||||
# the end of this script
|
|
||||||
|
|
||||||
|
|
||||||
# Setup the BigBlueButton configuration files
|
|
||||||
#
|
|
||||||
PROTOCOL_HTTP=http
|
|
||||||
PROTOCOL_RTMP=rtmp
|
|
||||||
|
|
||||||
IP=$(echo "$(LANG=c ifconfig | awk -v RS="" '{gsub (/\n[ ]*inet /," ")}1' | grep ^et.* | grep addr: | head -n1 | sed 's/.*addr://g' | sed 's/ .*//g')$(LANG=c ifconfig | awk -v RS="" '{gsub (/\n[ ]*inet /," ")}1' | grep ^en.* | grep addr: | head -n1 | sed 's/.*addr://g' | sed 's/ .*//g')" | head -n1)
|
|
||||||
|
|
||||||
xmlstarlet edit --inplace --update '//X-PRE-PROCESS[@cmd="set" and starts-with(@data, "external_rtp_ip=")]/@data' --value "external_rtp_ip=stun:coturn" /opt/freeswitch/conf/vars.xml
|
|
||||||
xmlstarlet edit --inplace --update '//X-PRE-PROCESS[@cmd="set" and starts-with(@data, "external_sip_ip=")]/@data' --value "external_sip_ip=stun:coturn" /opt/freeswitch/conf/vars.xml
|
|
||||||
xmlstarlet edit --inplace --update '//X-PRE-PROCESS[@cmd="set" and starts-with(@data, "local_ip_v4=")]/@data' --value "local_ip_v4=${IP}" /opt/freeswitch/conf/vars.xml
|
|
||||||
|
|
||||||
if [ -f /opt/freeswitch/conf/sip_profiles/external-ipv6.xml ]; then
|
|
||||||
mv /opt/freeswitch/conf/sip_profiles/external-ipv6.xml /opt/freeswitch/conf/sip_profiles/external-ipv6.xml_
|
|
||||||
fi
|
|
||||||
if [ -f /opt/freeswitch/conf/sip_profiles/internal-ipv6.xml ]; then
|
|
||||||
mv /opt/freeswitch/conf/sip_profiles/internal-ipv6.xml /opt/freeswitch/conf/sip_profiles/internal-ipv6.xml_
|
|
||||||
fi
|
|
||||||
|
|
||||||
sed -i "s/proxy_pass .*/proxy_pass $PROTOCOL_HTTP:\/\/$IP:5066;/g" /etc/bigbluebutton/nginx/sip.nginx
|
|
||||||
|
|
||||||
sed -i "s/http[s]*:\/\/\([^\"\/]*\)\([\"\/]\)/$PROTOCOL_HTTP:\/\/$HOST\2/g" /var/www/bigbluebutton/client/conf/config.xml
|
|
||||||
sed -i "s/rtmp[s]*:\/\/\([^\"\/]*\)\([\"\/]\)/$PROTOCOL_RTMP:\/\/$HOST\2/g" /var/www/bigbluebutton/client/conf/config.xml
|
|
||||||
|
|
||||||
sed -i "s/server_name .*/server_name $HOST;/g" /etc/nginx/sites-available/bigbluebutton
|
|
||||||
|
|
||||||
sed -i "s/bigbluebutton.web.serverURL=http[s]*:\/\/.*/bigbluebutton.web.serverURL=$PROTOCOL_HTTP:\/\/$HOST/g" \
|
|
||||||
/var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties
|
|
||||||
|
|
||||||
# Update Java screen share configuration
|
|
||||||
change_var_value /usr/share/red5/webapps/screenshare/WEB-INF/screenshare.properties streamBaseUrl rtmp://$HOST/screenshare
|
|
||||||
change_var_value /usr/share/red5/webapps/screenshare/WEB-INF/screenshare.properties jnlpUrl $PROTOCOL_HTTP://$HOST/screenshare
|
|
||||||
change_var_value /usr/share/red5/webapps/screenshare/WEB-INF/screenshare.properties jnlpFile $PROTOCOL_HTTP://$HOST/screenshare/screenshare.jnlp
|
|
||||||
|
|
||||||
change_var_value /usr/share/red5/webapps/sip/WEB-INF/bigbluebutton-sip.properties bbb.sip.app.ip $IP
|
|
||||||
change_var_value /usr/share/red5/webapps/sip/WEB-INF/bigbluebutton-sip.properties freeswitch.ip $IP
|
|
||||||
|
|
||||||
change_yml_value /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml kurentoUrl "ws://$IP:8888/kurento"
|
|
||||||
change_yml_value /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml kurentoIp "$IP"
|
|
||||||
change_yml_value /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml localIpAddress "$IP"
|
|
||||||
change_yml_value /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml ip "$IP"
|
|
||||||
|
|
||||||
sed -i "s/bbbWebAPI[ ]*=[ ]*\"[^\"]*\"/bbbWebAPI=\"${PROTOCOL_HTTP}:\/\/$HOST\/bigbluebutton\/api\"/g" \
|
|
||||||
/usr/share/bbb-apps-akka/conf/application.conf
|
|
||||||
sed -i "s/bbbWebHost[ ]*=[ ]*\"[^\"]*\"/bbbWebHost=\"$HOST\"/g" \
|
|
||||||
/usr/share/bbb-apps-akka/conf/application.conf
|
|
||||||
sed -i "s/deskshareip[ ]*=[ ]*\"[^\"]*\"/deskshareip=\"$HOST\"/g" \
|
|
||||||
/usr/share/bbb-apps-akka/conf/application.conf
|
|
||||||
sed -i "s/defaultPresentationURL[ ]*=[ ]*\"[^\"]*\"/defaultPresentationURL=\"${PROTOCOL_HTTP}:\/\/$HOST\/default.pdf\"/g" \
|
|
||||||
/usr/share/bbb-apps-akka/conf/application.conf
|
|
||||||
|
|
||||||
cat > /etc/kurento/modules/kurento/WebRtcEndpoint.conf.ini << HERE
|
|
||||||
; Only IP address are supported, not domain names for addresses
|
|
||||||
; You have to find a valid stun server. You can check if it works
|
|
||||||
; using this tool:
|
|
||||||
; http://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/
|
|
||||||
;stunServerAddress=64.233.177.127
|
|
||||||
;stunServerPort=19302
|
|
||||||
|
|
||||||
turnURL=kurento:kurento@${HOST}:3478
|
|
||||||
|
|
||||||
;pemCertificate is deprecated. Please use pemCertificateRSA instead
|
|
||||||
;pemCertificate=<path>
|
|
||||||
;pemCertificateRSA=<path>
|
|
||||||
;pemCertificateECDSA=<path>
|
|
||||||
HERE
|
|
||||||
|
|
||||||
TURN_SECRET=`openssl rand -hex 16`
|
|
||||||
|
|
||||||
# Configure coturn to handle incoming UDP connections
|
|
||||||
cat > /etc/turnserver.conf << HERE
|
|
||||||
denied-peer-ip=0.0.0.0-255.255.255.255
|
|
||||||
allowed-peer-ip=$IP
|
|
||||||
fingerprint
|
|
||||||
lt-cred-mech
|
|
||||||
use-auth-secret
|
|
||||||
static-auth-secret=$TURN_SECRET
|
|
||||||
user=user:password
|
|
||||||
log-file=/var/log/turn.log
|
|
||||||
HERE
|
|
||||||
|
|
||||||
# Setup tomcat7 to share the TURN server information with clients (with matching secret)
|
|
||||||
cat > /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/spring/turn-stun-servers.xml << HERE
|
|
||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<beans xmlns="http://www.springframework.org/schema/beans"
|
|
||||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
||||||
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.5.xsd">
|
|
||||||
<bean id="turn0" class="org.bigbluebutton.web.services.turn.TurnServer">
|
|
||||||
<constructor-arg index="0" value="$TURN_SECRET" />
|
|
||||||
<constructor-arg index="1" value="turn:$HOST:3478" />
|
|
||||||
<constructor-arg index="2" value="86400" />
|
|
||||||
</bean>
|
|
||||||
<bean id="turn1" class="org.bigbluebutton.web.services.turn.TurnServer">
|
|
||||||
<constructor-arg index="0" value="$TURN_SECRET" />
|
|
||||||
<constructor-arg index="1" value="turn:$HOST:3478?transport=tcp" />
|
|
||||||
<constructor-arg index="2" value="86400" />
|
|
||||||
</bean>
|
|
||||||
<bean id="stunTurnService" class="org.bigbluebutton.web.services.turn.StunTurnService">
|
|
||||||
<property name="stunServers">
|
|
||||||
<set />
|
|
||||||
</property>
|
|
||||||
<property name="turnServers">
|
|
||||||
<set>
|
|
||||||
<ref bean="turn0" />
|
|
||||||
<ref bean="turn1" />
|
|
||||||
</set>
|
|
||||||
</property>
|
|
||||||
<property name="remoteIceCandidates">
|
|
||||||
<set />
|
|
||||||
</property>
|
|
||||||
</bean>
|
|
||||||
</beans>
|
|
||||||
HERE
|
|
||||||
|
|
||||||
cat > /opt/freeswitch/conf/autoload_configs/acl.conf.xml << HERE
|
|
||||||
<configuration name="acl.conf" description="Network Lists">
|
|
||||||
<network-lists>
|
|
||||||
<list name="domains" default="allow">
|
|
||||||
<!-- domain= is special it scans the domain from the directory to build the ACL -->
|
|
||||||
<node type="allow" domain="\$\${domain}"/>
|
|
||||||
<!-- use cidr= if you wish to allow ip ranges to this domains acl. -->
|
|
||||||
<!-- <node type="allow" cidr="192.168.0.0/24"/> -->
|
|
||||||
</list>
|
|
||||||
|
|
||||||
<list name="webrtc-turn" default="deny">
|
|
||||||
<node type="allow" cidr="$IP/32"/>
|
|
||||||
</list>
|
|
||||||
|
|
||||||
</network-lists>
|
|
||||||
</configuration>
|
|
||||||
HERE
|
|
||||||
|
|
||||||
|
|
||||||
# Ensure bbb-apps-akka has the latest shared secret from bbb-web
|
|
||||||
if [ -z "$SECRET" ]; then
|
|
||||||
SECRET=$(cat /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties | grep -v '#' | grep securitySalt | cut -d= -f2);
|
|
||||||
else
|
|
||||||
change_var_value /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties securitySalt $SECRET
|
|
||||||
sed -i "s/String salt = .*/String salt = \"$SECRET\";/g" /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp
|
|
||||||
fi
|
|
||||||
|
|
||||||
sed -i "s/sharedSecret[ ]*=[ ]*\"[^\"]*\"/sharedSecret=\"$SECRET\"/g" \
|
|
||||||
/usr/share/bbb-apps-akka/conf/application.conf
|
|
||||||
|
|
||||||
sed -i "s/BigBlueButtonURL = \"http[s]*:\/\/\([^\"\/]*\)\([\"\/]\)/BigBlueButtonURL = \"$PROTOCOL_HTTP:\/\/$HOST\2/g" \
|
|
||||||
/var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp
|
|
||||||
|
|
||||||
sed -i "s/playback_host: .*/playback_host: $HOST/g" /usr/local/bigbluebutton/core/scripts/bigbluebutton.yml
|
|
||||||
|
|
||||||
sed -i 's/daemonize no/daemonize yes/g' /etc/redis/redis.conf
|
|
||||||
|
|
||||||
sed -i "s|\"wsUrl.*|\"wsUrl\": \"ws://$HOST/bbb-webrtc-sfu\",|g" \
|
|
||||||
/usr/share/meteor/bundle/programs/server/assets/app/config/settings-production.json
|
|
||||||
|
|
||||||
rm /usr/share/red5/log/sip.log
|
|
||||||
|
|
||||||
# Add a sleep to each recording process so we can restart with supervisord
|
|
||||||
# (This works around the limitation that supervisord can't restart after intervals)
|
|
||||||
sed -i 's/BigBlueButton.logger.debug("rap-archive-worker done")/sleep 20; BigBlueButton.logger.debug("rap-archive-worker done")/g' /usr/local/bigbluebutton/core/scripts/rap-archive-worker.rb
|
|
||||||
sed -i 's/BigBlueButton.logger.debug("rap-process-worker done")/sleep 20; BigBlueButton.logger.debug("rap-process-worker done")/g' /usr/local/bigbluebutton/core/scripts/rap-process-worker.rb
|
|
||||||
sed -i 's/BigBlueButton.logger.debug("rap-sanity-worker done")/sleep 20 ; BigBlueButton.logger.debug("rap-sanity-worker done")/g' /usr/local/bigbluebutton/core/scripts/rap-sanity-worker.rb
|
|
||||||
sed -i 's/BigBlueButton.logger.debug("rap-publish-worker done")/sleep 20; BigBlueButton.logger.debug("rap-publish-worker done")/g' /usr/local/bigbluebutton/core/scripts/rap-publish-worker.rb
|
|
||||||
|
|
||||||
# Start BigBlueButton!
|
|
||||||
#
|
|
||||||
|
|
||||||
export NODE_ENV=production
|
|
||||||
|
|
||||||
export DAEMON_LOG=/var/log/kurento-media-server
|
|
||||||
export GST_DEBUG="3,Kurento*:4,kms*:4"
|
|
||||||
export KURENTO_LOGS_PATH=$DAEMON_LOG
|
|
||||||
|
|
||||||
cat << HERE
|
|
||||||
|
|
||||||
BigBlueButton is now starting up. You can access the API demos here (use FireFox for WebRTC audio/video)
|
|
||||||
|
|
||||||
http://$HOST/demo/demo1.jsp
|
|
||||||
|
|
||||||
For API calls, use the following credentials
|
|
||||||
|
|
||||||
host: $HOST
|
|
||||||
secret: $SECRET
|
|
||||||
|
|
||||||
To interactively create API calls, here's a link to configure APIMate
|
|
||||||
|
|
||||||
http://mconf.github.io/api-mate/#server=http://$HOST/bigbluebutton/&sharedSecret=$SECRET
|
|
||||||
|
|
||||||
HERE
|
|
||||||
|
|
||||||
|
# Update files
|
||||||
updatedb
|
updatedb
|
||||||
|
|
||||||
exec /usr/bin/supervisord > /var/log/supervisord.log
|
# Tell system to not run this script again
|
||||||
|
touch /opt/docker-bbb/setup-executed
|
||||||
|
|
||||||
|
echo "BBB configuration completed.";
|
||||||
|
exit 0;
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user