5 # Manage the PostgreSQL database server
7 # Mark Huang <mlhuang@cs.princeton.edu>
8 # Copyright (C) 2006 The Trustees of Princeton University
11 # Source function library and configuration
12 . /etc/plc.d/functions
13 . /etc/planetlab/plc_config
14 local_config=/etc/planetlab/configs/site.xml
20 PGDATA=/var/lib/pgsql/data
21 postgresql_conf=$PGDATA/postgresql.conf
22 pghba_conf=$PGDATA/pg_hba.conf
23 postgresql_sysconfig=/etc/sysconfig/pgsql/postgresql
25 # Export so that we do not have to specify -p to psql invocations
26 export PGPORT=$PLC_DB_PORT
28 # can't trust the return of service postgresql start / nor status
29 function postgresql_check () {
31 # wait until postmaster is up and running - or 10s max
32 if status postmaster && [ -f /var/lock/subsys/postgresql ] ; then
33 # The only way we can be sure is if we can access it
34 for i in $(seq 1 10) ; do
35 # Must do this as the postgres user initially (before we
36 # fix pg_hba.conf to passwordless localhost access).
37 su -c 'psql -U postgres -c "" template1' postgres && return 0
47 if [ "$PLC_DB_ENABLED" != "1" ] ; then
51 MESSAGE=$"Starting PostgreSQL server"
55 # Set data directory and redirect startup output to /var/log/pgsql
56 mkdir -p $(dirname $postgresql_sysconfig)
57 touch $postgresql_sysconfig
58 tmp=${postgresql_sysconfig}.new
59 # remove any previous definitions and write ours
60 ( egrep -v '^(PGDATA=|PGLOG=|PGPORT=)' $postgresql_sysconfig
62 echo "PGLOG=/var/log/pgsql"
63 echo "PGPORT=$PLC_DB_PORT"
64 ) > $tmp ; mv -f $tmp $postgresql_sysconfig
66 ######## /var/lib/pgsql/data
67 # Fix ownership of /var/lib/pgsql (rpm installation may have changed it)
68 chown -R -H postgres:postgres $(dirname $PGDATA)
70 # PostgreSQL must be started at least once to bootstrap
72 if [ ! -f $postgresql_conf ] ; then
73 # fedora 16 uses systemd
74 # http://docs.fedoraproject.org/en-US/Fedora/16/html/Release_Notes/sect-Release_Notes-Changes_for_Sysadmin.html
75 if type postgresql-setup >& /dev/null ; then
76 postgresql-setup initdb || :
79 service postgresql initdb &> /dev/null || postgresql :
84 ######## /var/lib/pgsql/data/postgresql.conf
85 # Enable DB server. drop Postgresql<=7.x
86 # PostgreSQL >=8.0 defines listen_addresses
87 # listen on a specific IP + localhost, more robust when run within a vserver
88 sed -i -e '/^listen_addresses/d' $postgresql_conf
89 echo "listen_addresses = '${PLC_DB_HOST},localhost'" >> $postgresql_conf
90 # tweak timezone to be 'UTC'
91 sed -i -e '/^timezone=/d' $postgresql_conf
92 echo "timezone='UTC'" >> $postgresql_conf
94 ######## /var/lib/pgsql/data/pg_hba.conf
95 # Disable access to MyPLC and drupal DBs from all hosts
96 sed -i -e '/^\(host\|local\)\s\($PLC_DB_NAME\|drupal\)/d' $pghba_conf
98 # Enable passwordless localhost access
99 echo "local all all trust" >>$pghba_conf
101 # Enable access from the API, boot, and web servers
102 PLC_API_IP=$(gethostbyname $PLC_API_HOST)
103 PLC_BOOT_IP=$(gethostbyname $PLC_BOOT_HOST)
104 PLC_WWW_IP=$(gethostbyname $PLC_WWW_HOST)
106 if [ -z "$PLC_API_IP" ] ; then
107 MESSAGE=$"PLC_API_IP is not set"
111 if [ -z "$PLC_BOOT_IP" ] ; then
112 MESSAGE=$"PLC_BOOT_IP is not set"
116 if [ -z "$PLC_WWW_IP" ] ; then
117 MESSAGE=$"PLC_WWW_IP is not set"
121 if [ $ip_failure -eq 1 ] ; then
127 echo "host $PLC_DB_NAME $PLC_DB_USER 127.0.0.1/32 password"
128 echo "host $PLC_DB_NAME $PLC_DB_USER $PLC_API_IP/32 password"
129 echo "host $PLC_DB_NAME $PLC_DB_USER $PLC_BOOT_IP/32 password"
130 echo "host $PLC_DB_NAME $PLC_DB_USER $PLC_WWW_IP/32 password"
131 # Drupal also uses PostgreSQL
132 echo "host drupal $PLC_DB_USER 127.0.0.1/32 password"
133 echo "host drupal $PLC_DB_USER $PLC_WWW_IP/32 password"
136 # Append site-specific access rules
137 for file in $pghba_conf.d/*.conf ; do
138 cat "$file" >>$pghba_conf
141 # Fix ownership (sed -i changes it)
142 chown postgres:postgres $postgresql_conf $pghba_conf
144 ######## Start up the server - ignore retcod and check this our way
145 (exec 3>&- 4>&- ; service postgresql start)
149 ######## Create/update the unprivileged database user and password
150 if [ -z "$PLC_DB_PASSWORD" ] ; then
151 PLC_DB_PASSWORD=$(uuidgen)
152 plc-config --category=plc_db --variable=password --value="$PLC_DB_PASSWORD" --save=$local_config $local_config
155 if ! psql -U $PLC_DB_USER -c "" template1 >/dev/null 2>&1 ; then
156 psql -U postgres -c "CREATE USER $PLC_DB_USER PASSWORD '$PLC_DB_PASSWORD'" template1
158 psql -U postgres -c "ALTER USER $PLC_DB_USER WITH PASSWORD '$PLC_DB_PASSWORD'" template1
162 ######## Create the databases if necessary
163 if ! psql -U $PLC_DB_USER -c "" $PLC_DB_NAME >/dev/null 2>&1 ; then
164 createdb -U postgres --template=template0 --encoding=UNICODE --owner=$PLC_DB_USER $PLC_DB_NAME
165 psql -U $PLC_DB_USER -f /usr/share/plc_api/$PLC_DB_NAME.sql $PLC_DB_NAME
168 if ! psql -U $PLC_DB_USER -c "" drupal >/dev/null 2>&1 ; then
169 createdb -U postgres --template=template0 --encoding=UNICODE --owner=$PLC_DB_USER drupal
170 psql -U $PLC_DB_USER -f /var/www/html/database/database.pgsql drupal
178 MESSAGE=$"Stopping PostgreSQL server"
181 # Drop the current user in case the username changes
182 psql -U postgres -c "DROP USER $PLC_DB_USER" template1
184 # WARNING: If the DB name changes, the old DB will be left
185 # intact and a new one will be created. If it changes
186 # back, the old DB will not be re-created.
188 # Shut down the server
189 service postgresql stop
191 # /etc/init.d/postgresql fails if it is not running
192 [ "$PLC_DB_ENABLED" = 1 ] && check