plc.d/httpd

   1 #!/bin/bash
   2 # $Id$
   3 # $URL$
   4 #
   5 # priority: 600
   6 #
   7 # Configure Apache web server
   8 #
   9 # Mark Huang <mlhuang@cs.princeton.edu>
  10 # Copyright (C) 2006 The Trustees of Princeton University
  11 #
  12
  13 # Source function library and configuration
  14 . /etc/plc.d/functions
  15 . /etc/planetlab/plc_config
  16
  17 # Be verbose
  18 set -x
  19
  20 # Default locations
  21 DocumentRoot=/var/www/html
  22 php_ini=/etc/php.ini
  23 httpd_conf=/etc/httpd/conf/httpd.conf
  24 ssl_conf=/etc/httpd/conf.d/ssl.conf
  25 plc_conf=/etc/httpd/conf.d/plc.conf
  26
  27 function disable_file () {
  28     file=$1; shift
  29     [ -f $file ] && mv -f $file $file.disabled
  30 }
  31 function enable_file () {
  32     file=$1; shift
  33     [ ! -f $file ] && mv -f $file.disabled $file
  34 }
  35
  36 case "$1" in
  37     start)
  38         if [ "$PLC_API_ENABLED" != "1" -a \
  39              "$PLC_BOOT_ENABLED" != "1" -a \
  40              "$PLC_WWW_ENABLED" != "1" ] ; then
  41             exit 0
  42         fi
  43
  44         MESSAGE=$"Starting web server"
  45         dialog "$MESSAGE"
  46
  47         # set document root - not really useful on fedora but just in case
  48         sed -i -e "s@^DocumentRoot.*@DocumentRoot \"$DocumentRoot\"@" $httpd_conf
  49         # whether WWW is enabled or not :
  50         if [ "$PLC_WWW_ENABLED" != "1" ] ; then
  51             # avoid hitting drupal, that would try to connect to the db and create noise
  52             disable_file $DocumentRoot/index.php
  53         else
  54             enable_file $DocumentRoot/index.php
  55         fi
  56
  57         # Set the default include path
  58         include_path=".:$DocumentRoot/planetlab/includes:$DocumentRoot/plekit/php:$DocumentRoot/generated:/etc/planetlab/php:/usr/share/plc_api/php"
  59         sed -i -e "s@[;]*include_path = \"\.:.*\"@include_path = \"$include_path\"@" $php_ini
  60
  61         # for php-5.3 under fedora12, otherwise issues tons of warning messages
  62         # Set timezone in php.ini if not already there
  63         if grep '^;date.timezone' $php_ini >& /dev/null; then
  64             dialog 'Setting PHP timezone to GMT'
  65             sed -i -e 's,^;date.timezone.*,date.timezone = GMT,' $php_ini
  66         fi
  67
  68         # Disable default Listen directive
  69         sed -i -e '/^Listen/d' $httpd_conf
  70
  71         # Set the port numbers
  72         for server in WWW API BOOT ; do
  73             enabled=PLC_${server}_ENABLED
  74             if [ "${!enabled}" != "1" ] ; then
  75                 continue
  76             fi
  77             hostname=PLC_${server}_HOST
  78             http_port=PLC_${server}_PORT
  79             https_port=PLC_${server}_SSL_PORT
  80
  81             # API should always be accessed via SSL
  82             if [ "$server" = "API" ] ; then
  83                 https_port=${!http_port}
  84                 http_port=
  85             fi
  86
  87             # Check if we are already listening on these ports
  88             skip_http=0
  89             skip_https=0
  90             for previous_server in WWW API BOOT ; do
  91                 if [ "$server" = "$previous_server" ] ; then
  92                     break
  93                 fi
  94                 previous_enabled=PLC_${previous_server}_ENABLED
  95                 if [ "${!previous_enabled}" != "1" ] ; then
  96                     continue
  97                 fi
  98                 previous_http_port=PLC_${previous_server}_PORT
  99                 previous_https_port=PLC_${previous_server}_SSL_PORT
 100
 101                 if [ "${!http_port}" = "${!previous_http_port}" ] ; then
 102                     skip_http=1
 103                 fi
 104                 if [ "${!https_port}" = "${!previous_https_port}" ] ; then
 105                     skip_https=1
 106                 fi
 107             done
 108
 109         # Create a separate path for mod_wsgi until we are ready to replace
 110         # mod_python
 111         PLC_API_WSGI_PATH=/PLCAPIWSGI
 112
 113             # HTTP configuration
 114             if [ $skip_http -eq 0 -a -n "${!http_port}" ] ; then
 115                 cat <<EOF
 116 Listen ${!http_port}
 117 # create wsgi socket where we have the permission
 118 WSGISocketPrefix run/wsgi
 119 # Make sure that the admin web pages and API are always accessed via SSL
 120 <VirtualHost *:${!http_port}>
 121     Redirect /db https://$PLC_WWW_HOST:$PLC_WWW_SSL_PORT/db
 122     Redirect /planetlab https://$PLC_WWW_HOST:$PLC_WWW_SSL_PORT/planetlab
 123     Redirect /$PLC_API_PATH https://$PLC_API_HOST:$PLC_API_PORT/$PLC_API_PATH
 124     Redirect /$PLC_API_WSGI_PATH/ https://$PLC_API_HOST:$PLC_API_PORT/$PLC_API_WSGI_PATH/
 125     WSGIScriptAlias $PLC_API_WSGI_PATH /usr/share/plc_api/ModWSGI.wsgi
 126     # XX make processes and threads configurable
 127     WSGIDaemonProcess plcapi-wsgi user=apache group=apache processes=1 threads=25
 128     WSGIProcessGroup plcapi-wsgi
 129 </VirtualHost>
 130 EOF
 131             fi
 132
 133             # HTTPS configuration
 134             if [ $skip_https -eq 0 -a -n "${!https_port}" ] ; then
 135                 # XXX Cannot support NameVirtualHost over SSL. If
 136                 # the API, boot, and web servers are all running
 137                 # on the same machine, the web server certificate
 138                 # takes precedence.
 139                 sed -i \
 140                     -e "s/^Listen .*/Listen ${!https_port}/" \
 141                     -e "s/<VirtualHost _default_:.*>/<VirtualHost _default_:${!https_port}>/" \
 142                     $ssl_conf
 143             fi
 144         done >$plc_conf
 145
 146         # Set custom Apache directives
 147         (
 148             if [ "$PLC_API_ENABLED" = "1" ] ; then
 149                 cat <<EOF
 150 # mod_python location
 151 <Location $PLC_API_PATH>
 152     SetHandler mod_python
 153     PythonPath "sys.path + ['/usr/share/plc_api']"
 154     PythonHandler ModPython
 155 </Location>
 156
 157 # mod_wsgi location
 158 <Location $PLC_API_WSGI_PATH/>
 159     SetHandler mod_wsgi
 160 </Location>
 161 EOF
 162             else
 163                 cat <<EOF
 164 # mod_python location
 165 <Location $PLC_API_PATH>
 166     Deny from all
 167 </Location>
 168
 169 # mod_wsgi location
 170 <Location $PLC_API_WSGI_PATH/>
 171     Deny from all
 172 </Location>
 173 EOF
 174             fi
 175
 176             if [ "$PLC_WWW_ENABLED" != "1" ] ; then
 177                 cat <<EOF
 178 Redirect /index.html http://$PLC_WWW_HOST:$PLC_WWW_PORT/
 179 EOF
 180             fi
 181             cat <<EOF
 182 AddType application/octet-stream .iso
 183 AddType application/octet-stream .usb
 184 EOF
 185         ) >>$plc_conf
 186
 187         # Make alpina-logs directory writable for bootmanager log upload
 188         chown apache:apache $DocumentRoot/alpina-logs/nodes
 189
 190         # Make the Drupal files upload directory owned by Apache
 191         mkdir -p $DocumentRoot/files
 192         chown apache:apache $DocumentRoot/files
 193
 194         # Symlink any (real) files or directories in
 195         # /data/var/www/html/* to /var/www/html/. We could descend
 196         # into subdirectories, but the code to do so properly would be
 197         # madness.
 198         for file in /data/$DocumentRoot/* ; do
 199             if [ -e "$file" -a ! -h "$file" ] ; then
 200                 base=$(basename "$file")
 201                 if [ ! -e "$DocumentRoot/$base" ] ; then
 202                     ln -nsf "$file" "$DocumentRoot/$base"
 203                 fi
 204             fi
 205         done
 206
 207         # Cleanup broken symlinks
 208         for file in $DocumentRoot/* ; do
 209             if [ -h "$file" -a ! -e "$file" ] ; then
 210                 rm -f "$file"
 211             fi
 212         done
 213
 214         # Old style PHP constants
 215         mkdir -p /etc/planetlab/php
 216         cat >/etc/planetlab/php/site_constants.php <<"EOF"
 217 <?php
 218 include('plc_config.php');
 219
 220 define('PL_API_SERVER', PLC_API_HOST);
 221 define('PL_API_PATH', PLC_API_PATH);
 222 define('PL_API_PORT', PLC_API_PORT);
 223 define('PL_API_CAPABILITY_AUTH_METHOD', 'capability');
 224 define('PL_API_CAPABILITY_PASS', PLC_API_MAINTENANCE_PASSWORD);
 225 define('PL_API_CAPABILITY_USERNAME', PLC_API_MAINTENANCE_USER);
 226 define('WWW_BASE', PLC_WWW_HOST);
 227 define('BOOT_BASE', PLC_BOOT_HOST);
 228 define('DEBUG', PLC_WWW_DEBUG);
 229 define('API_CALL_DEBUG', PLC_API_DEBUG);
 230 define('SENDMAIL', PLC_MAIL_ENABLED);
 231 define('PLANETLAB_SUPPORT_EMAIL', PLC_NAME . ' Support <' . PLC_MAIL_SUPPORT_ADDRESS . '>');
 232 define('PLANETLAB_SUPPORT_EMAIL_ONLY', PLC_MAIL_SUPPORT_ADDRESS);
 233 ?>
 234 EOF
 235
 236         ## patch php.ini
 237         # memory limit
 238         sed -i -e 's,^memory_limit = 32M *;,memory_limit = 80M ; patch myplc -- ,' $php_ini
 239         # log_errors : is On by default
 240         # error_log
 241         if ! grep '^error_log *=' $php_ini > /dev/null ; then
 242           echo 'error_log = /var/log/php.log' >> $php_ini
 243           touch /var/log/php.log
 244           chmod 666 /var/log/php.log
 245         fi
 246
 247         plc_daemon httpd
 248         check
 249
 250         result "$MESSAGE"
 251         ;;
 252
 253     stop)
 254         MESSAGE=$"Stopping web server"
 255         dialog "$MESSAGE"
 256
 257         killproc plc_httpd
 258         check
 259
 260         result "$MESSAGE"
 261         ;;
 262 esac
 263
 264 exit $ERRORS