231 lines
7.4 KiB
Bash
231 lines
7.4 KiB
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
# Function to extract domain from Git SSH URL
|
|
extract_domain() {
|
|
local url=$1
|
|
|
|
# Handle different SSH URL formats
|
|
if [[ $url == ssh://* ]]; then
|
|
# For URLs starting with ssh://, extract the domain
|
|
echo "$url" | sed -E 's|ssh://[^@]+@([^:/]+).*|\1|'
|
|
else
|
|
# For URLs without ssh://, extract the domain after '@' and before ':'
|
|
echo "$url" | sed -E 's|[^@]+@([^:/]+).*|\1|'
|
|
fi
|
|
}
|
|
|
|
# Check if the required environment variables are set
|
|
if [ -z "$REPO_URL" ]; then
|
|
echo "Error: REPO_URL environment variable must be set."
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$GIT_USER" ]; then
|
|
echo "Error: GIT_USER environment variable must be set."
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$GIT_EMAIL" ]; then
|
|
echo "Error: GIT_EMAIL environment variable must be set."
|
|
exit 1
|
|
fi
|
|
|
|
# Check if the SSH key exists
|
|
if [ ! -f /root/.ssh/id_rsa ]; then
|
|
echo "Error: SSH private key not found at /root/.ssh/id_rsa"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure the SSH key has the correct permissions
|
|
chmod 600 /root/.ssh/id_rsa
|
|
|
|
# Extract the domain from the REPO_URL
|
|
DOMAIN=$(extract_domain "$REPO_URL")
|
|
|
|
# Check if the repository directory already exists
|
|
if [ ! -d "/workspace/.git" ]; then
|
|
# Add the SSH configuration for the domain
|
|
echo "Host $DOMAIN
|
|
HostName $DOMAIN
|
|
IdentityFile /root/.ssh/id_rsa
|
|
StrictHostKeyChecking no
|
|
" >>/root/.ssh/config
|
|
|
|
# Clone the repository if it doesn't exist
|
|
git clone "$REPO_URL" /workspace
|
|
fi
|
|
|
|
# Add the public SSH key to authorized_keys
|
|
if [ -f /root/.ssh/hostkey.pub ]; then
|
|
cat /root/.ssh/hostkey.pub >>/root/.ssh/authorized_keys
|
|
fi
|
|
|
|
# If no teleport edition is given, fallback to oss
|
|
if [ -z "$TELEPORT_EDITION" ]; then
|
|
TELEPORT_EDITION="oss"
|
|
fi
|
|
|
|
# Install Teleport if the environment variables are set
|
|
if [ -n "$TELEPORT_VERSION" ] && [ -n "$TELEPORT_URL" ]; then
|
|
echo "Installing Teleport version $TELEPORT_VERSION, edition $TELEPORT_EDITION..."
|
|
echo "Executing: curl https://goteleport.com/static/install.sh | bash -s ${TELEPORT_VERSION} ${TELEPORT_EDITION}"
|
|
curl https://goteleport.com/static/install.sh | bash -s "${TELEPORT_VERSION}" "${TELEPORT_EDITION}"
|
|
else
|
|
echo "Error: TELEPORT_VERSION and TELEPORT_URL environment variables must be set."
|
|
exit 1
|
|
fi
|
|
|
|
|
|
|
|
# Change to the repository directory
|
|
cd /workspace
|
|
|
|
# Install dependencies
|
|
yarn install
|
|
|
|
# Copy the environment file to the repository's environments directory
|
|
if [ -f /environment/.dev.env ]; then
|
|
mkdir -p /workspace/environments
|
|
cp /environment/.dev.env /workspace/environments/.dev.env
|
|
fi
|
|
|
|
# Set the git user and email
|
|
git config --global user.name "$GIT_USER"
|
|
git config --global user.email "$GIT_EMAIL"
|
|
|
|
# Get the hostname of the machine
|
|
HOSTNAME=$(hostname)
|
|
|
|
# If teleport token is set and there is no teleport.yaml file, create one
|
|
if [ -n "$TELEPORT_TOKEN" ] && [ ! -f /etc/teleport.yaml ]; then
|
|
teleport configure --roles=node --token="$TELEPORT_TOKEN" --proxy="$TELEPORT_URL" --no-acme -o file
|
|
echo "Created teleport configuration file"
|
|
fi
|
|
|
|
# File path
|
|
CONFIG_FILE="/etc/teleport.yaml"
|
|
|
|
# Edit the teleport.yaml file to update the nodename
|
|
sed -i "s/^ nodename:.*/ nodename: $HOSTNAME/" "$CONFIG_FILE"
|
|
|
|
add_teleport_labels() {
|
|
if [ -n "$TELEPORT_LABELS" ]; then
|
|
echo "Adding Teleport labels from TELEPORT_LABELS environment variable..."
|
|
|
|
# Check if ssh_service section exists
|
|
if ! grep -q "ssh_service:" "$CONFIG_FILE"; then
|
|
echo "Error: ssh_service section not found in teleport.yaml"
|
|
return 1
|
|
fi
|
|
|
|
# Create a backup
|
|
cp "$CONFIG_FILE" "$CONFIG_FILE.backup"
|
|
|
|
# Extract existing labels from the config file
|
|
declare -A EXISTING_LABELS
|
|
IN_LABELS_SECTION=0
|
|
while IFS= read -r line; do
|
|
# Detect when we enter the labels section
|
|
if [[ "$line" =~ ^[[:space:]]*labels:[[:space:]]*$ ]]; then
|
|
IN_LABELS_SECTION=1
|
|
continue
|
|
fi
|
|
# Detect when we leave the labels section (next top-level key)
|
|
if [ "$IN_LABELS_SECTION" -eq 1 ] && [[ "$line" =~ ^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]* ]]; then
|
|
IN_LABELS_SECTION=0
|
|
fi
|
|
# Extract label key:value pairs
|
|
if [ "$IN_LABELS_SECTION" -eq 1 ]; then
|
|
if [[ "$line" =~ ^[[:space:]]+([^:]+):[[:space:]]*(.+)$ ]]; then
|
|
existing_key=$(echo "${BASH_REMATCH[1]}" | xargs)
|
|
existing_value=$(echo "${BASH_REMATCH[2]}" | xargs)
|
|
EXISTING_LABELS["$existing_key"]="$existing_value"
|
|
fi
|
|
fi
|
|
done < "$CONFIG_FILE"
|
|
|
|
# Build the new ssh_service section with existing and new labels
|
|
NEW_SSH_SECTION="ssh_service:"
|
|
NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" labels:"
|
|
|
|
# First, add existing labels that are not being replaced
|
|
for existing_key in "${!EXISTING_LABELS[@]}"; do
|
|
NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" $existing_key: ${EXISTING_LABELS[$existing_key]}"
|
|
done
|
|
|
|
# Parse TELEPORT_LABELS and add only new labels
|
|
IFS=',' read -ra LABELS <<< "$TELEPORT_LABELS"
|
|
for label in "${LABELS[@]}"; do
|
|
# Trim whitespace
|
|
label=$(echo "$label" | xargs)
|
|
|
|
# Check if label contains colon
|
|
if [[ "$label" == *":"* ]]; then
|
|
key=$(echo "$label" | cut -d':' -f1 | xargs)
|
|
value=$(echo "$label" | cut -d':' -f2- | xargs)
|
|
|
|
if [ -n "$key" ] && [ -n "$value" ]; then
|
|
# Only add if the label key doesn't already exist
|
|
if [ -z "${EXISTING_LABELS[$key]}" ]; then
|
|
NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" $key: $value"
|
|
echo "Added label: $key = $value"
|
|
else
|
|
echo "Label '$key' already exists with value '${EXISTING_LABELS[$key]}', skipping"
|
|
fi
|
|
else
|
|
echo "Warning: Invalid label format '$label'. Expected format: key:value"
|
|
fi
|
|
else
|
|
echo "Warning: Label '$label' does not contain colon separator. Expected format: key:value"
|
|
fi
|
|
done
|
|
|
|
NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" enabled: \"yes\""
|
|
|
|
# Replace the ssh_service section
|
|
awk -v new_section="$NEW_SSH_SECTION" '
|
|
BEGIN {
|
|
in_ssh_service = 0
|
|
section_replaced = 0
|
|
}
|
|
/^ssh_service:/ {
|
|
in_ssh_service = 1
|
|
if (!section_replaced) {
|
|
print new_section
|
|
section_replaced = 1
|
|
}
|
|
next
|
|
}
|
|
in_ssh_service && /^[a-zA-Z_][a-zA-Z0-9_]*:/ {
|
|
in_ssh_service = 0
|
|
}
|
|
in_ssh_service {
|
|
next
|
|
}
|
|
{
|
|
print $0
|
|
}
|
|
' "$CONFIG_FILE" > "$CONFIG_FILE.tmp"
|
|
|
|
# Replace the original file
|
|
mv "$CONFIG_FILE.tmp" "$CONFIG_FILE"
|
|
|
|
echo "Teleport labels processed successfully"
|
|
else
|
|
echo "No TELEPORT_LABELS environment variable set, skipping label configuration"
|
|
fi
|
|
}
|
|
|
|
# Add labels to teleport configuration
|
|
add_teleport_labels
|
|
|
|
# Start Teleport in the background
|
|
nohup teleport start &
|
|
|
|
# Use NODE_START_COMMAND if set, otherwise default to start:dev
|
|
START_COMMAND=${NODE_START_COMMAND:-"start:dev"}
|
|
|
|
# Start the application with pm2
|
|
exec pm2-runtime "yarn $START_COMMAND"
|