From a8e8484f3996f294c9b67cdbe7a945dc9664c233 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20P=C3=A9ters?= Date: Wed, 4 May 2016 16:03:22 +0200 Subject: [PATCH] debian: initial packaging --- debian/changelog | 5 + debian/chrono-manage | 26 +++++ debian/chrono.dirs | 5 + debian/chrono.docs | 3 + debian/chrono.init | 195 +++++++++++++++++++++++++++++++++++ debian/chrono.install | 3 + debian/chrono.postinst | 49 +++++++++ debian/chrono.triggers | 1 + debian/compat | 1 + debian/control | 27 +++++ debian/debian_config.py | 18 ++++ debian/nginx-example.conf | 58 +++++++++++ debian/python-chrono.dirs | 1 + debian/python-chrono.docs | 2 + debian/python-chrono.install | 2 + debian/rules | 8 ++ debian/settings.py | 55 ++++++++++ 17 files changed, 459 insertions(+) create mode 100644 debian/changelog create mode 100755 debian/chrono-manage create mode 100644 debian/chrono.dirs create mode 100644 debian/chrono.docs create mode 100644 debian/chrono.init create mode 100644 debian/chrono.install create mode 100644 debian/chrono.postinst create mode 100644 debian/chrono.triggers create mode 100644 debian/compat create mode 100644 debian/control create mode 100644 debian/debian_config.py create mode 100644 debian/nginx-example.conf create mode 100644 debian/python-chrono.dirs create mode 100644 debian/python-chrono.docs create mode 100644 debian/python-chrono.install create mode 100755 debian/rules create mode 100644 debian/settings.py diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 00000000..8e7b264b --- /dev/null +++ b/debian/changelog @@ -0,0 +1,5 @@ +chrono (0-0) unstable; urgency=low + + * Initial release + + -- Frederic Peters Wed, 04 May 2016 16:03:34 +0200 diff --git a/debian/chrono-manage b/debian/chrono-manage new file mode 100755 index 00000000..c0c264a9 --- /dev/null +++ b/debian/chrono-manage @@ -0,0 +1,26 @@ +#!/bin/sh + +NAME=chrono +MANAGE=/usr/lib/$NAME/manage.py + +# load Debian default configuration +export WELCO_SETTINGS_FILE=/usr/lib/$NAME/debian_config.py + +# check user +if test x$1 = x"--forceuser" +then + shift +elif test $(id -un) != "$NAME" +then + echo "error: must use $0 with user ${NAME}" + exit 1 +fi + +if test $# -eq 0 +then + python ${MANAGE} help + exit 1 +fi + +python ${MANAGE} "$@" + diff --git a/debian/chrono.dirs b/debian/chrono.dirs new file mode 100644 index 00000000..15a893a5 --- /dev/null +++ b/debian/chrono.dirs @@ -0,0 +1,5 @@ +/etc/chrono +/usr/lib/chrono +/var/lib/chrono/collectstatic +/var/lib/chrono/tenants +/var/log/chrono diff --git a/debian/chrono.docs b/debian/chrono.docs new file mode 100644 index 00000000..68b84574 --- /dev/null +++ b/debian/chrono.docs @@ -0,0 +1,3 @@ +COPYING +README +debian/nginx-example.conf diff --git a/debian/chrono.init b/debian/chrono.init new file mode 100644 index 00000000..9e4874ad --- /dev/null +++ b/debian/chrono.init @@ -0,0 +1,195 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: chrono +# Required-Start: $network $local_fs $remote_fs $syslog +# Required-Stop: $network $local_fs $remote_fs $syslog +# Should-start: postgresql +# Should-stop: postgresql +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Portal Management System +# Description: Portal Management System +### END INIT INFO + +# Author: Entr'ouvert + +PATH=/sbin:/usr/sbin:/bin:/usr/bin +DESC="Multichannel request processing" +NAME=chrono +DAEMON=/usr/bin/gunicorn +RUN_DIR=/run/$NAME +PIDFILE=$RUN_DIR/$NAME.pid +LOG_DIR=/var/log/$NAME +SCRIPTNAME=/etc/init.d/$NAME +BIND=unix:$RUN_DIR/$NAME.sock +WORKERS=5 +TIMEOUT=30 + +WELCO_SETTINGS_FILE=/usr/lib/$NAME/debian_config.py +MANAGE_SCRIPT="/usr/bin/$NAME-manage" + +USER=$NAME +GROUP=$NAME + +# Exit if the package is not installed +[ -x $MANAGE_SCRIPT ] || exit 0 + +# Read configuration variable file if it is present +[ -r /etc/default/$NAME ] && . /etc/default/$NAME + +DAEMON_ARGS=${DAEMON_ARGS:-"--pid $PIDFILE \ +--user $USER --group $GROUP \ +--daemon \ +--access-logfile $LOG_DIR/gunicorn-access.log \ +--log-file $LOG_DIR/gunicorn-error.log \ +--bind=$BIND \ +--workers=$WORKERS \ +--worker-class=sync \ +--timeout=$TIMEOUT \ +--name $NAME \ +$NAME.wsgi:application"} + +# Load the VERBOSE setting and other rcS variables +. /lib/init/vars.sh + +# Define LSB log_* functions. +# Depend on lsb-base (>= 3.0-6) to ensure that this file is present. +. /lib/lsb/init-functions + +# Create /run directory +if [ ! -d $RUN_DIR ]; then + install -d -m 755 -o $USER -g $GROUP $RUN_DIR +fi + +# environment for wsgi +export WELCO_SETTINGS_FILE + +# +# Function that starts the daemon/service +# +do_start() +{ + # Return + # 0 if daemon has been started + # 1 if daemon was already running + # 2 if daemon could not be started + start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \ + || return 1 + start-stop-daemon --start --quiet --exec $DAEMON -- \ + $DAEMON_ARGS \ + || return 2 +} + +# +# Function that stops the daemon/service +# +do_stop() +{ + # Return + # 0 if daemon has been stopped + # 1 if daemon was already stopped + # 2 if daemon could not be stopped + # other if a failure occurred + start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE + RETVAL="$?" + [ "$RETVAL" = 2 ] && return 2 + # Wait for children to finish too if this is a daemon that forks + # and if the daemon is only ever run from this initscript. + # If the above conditions are not satisfied then add some other code + # that waits for the process to drop all resources that could be + # needed by services started subsequently. A last resort is to + # sleep for some time. + start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON + [ "$?" = 2 ] && return 2 + # Many daemons don't delete their pidfiles when they exit. + rm -f $PIDFILE + return "$RETVAL" +} + +# +# Function that sends a SIGHUP to the daemon/service +# +do_reload() { + # + # If the daemon can reload its configuration without + # restarting (for example, when it is sent a SIGHUP), + # then implement that here. + # + start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE --name `basename $DAEMON` + return 0 +} + +do_migrate() { + log_action_msg "Applying migrations (migrate_schemas).." + su $USER -s /bin/sh -p -c "$MANAGE_SCRIPT migrate_schemas" + log_action_msg "done" +} + +do_collectstatic() { + log_action_msg "Collect static files (collectstatic).." + su $USER -s /bin/sh -p -c "$MANAGE_SCRIPT collectstatic --noinput" + log_action_msg "done" +} + +case "$1" in + start) + log_daemon_msg "Starting $DESC " "$NAME" + do_migrate + do_collectstatic + do_start + case "$?" in + 0|1) log_end_msg 0 ;; + 2) log_end_msg 1 ;; + esac + ;; + stop) + log_daemon_msg "Stopping $DESC" "$NAME" + do_stop + case "$?" in + 0|1) log_end_msg 0 ;; + 2) log_end_msg 1 ;; + esac + ;; + status) + status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $? + ;; + reload|force-reload) + # + # If do_reload() is not implemented then leave this commented out + # and leave 'force-reload' as an alias for 'restart'. + # + log_daemon_msg "Reloading $DESC" "$NAME" + do_collectstatic + do_migrate + do_reload + log_end_msg $? + ;; + restart|force-reload) + # + # If the "reload" option is implemented then remove the + # 'force-reload' alias + # + log_daemon_msg "Restarting $DESC" "$NAME" + do_stop + case "$?" in + 0|1) + do_migrate + do_collectstatic + do_start + case "$?" in + 0) log_end_msg 0 ;; + 1) log_end_msg 1 ;; # Old process is still running + *) log_end_msg 1 ;; # Failed to start + esac + ;; + *) + # Failed to stop + log_end_msg 1 + ;; + esac + ;; + *) + echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload}" >&2 + exit 3 + ;; +esac diff --git a/debian/chrono.install b/debian/chrono.install new file mode 100644 index 00000000..38faccaf --- /dev/null +++ b/debian/chrono.install @@ -0,0 +1,3 @@ +debian/chrono-manage /usr/bin +debian/settings.py /etc/chrono +debian/debian_config.py /usr/lib/chrono diff --git a/debian/chrono.postinst b/debian/chrono.postinst new file mode 100644 index 00000000..4bc9f92b --- /dev/null +++ b/debian/chrono.postinst @@ -0,0 +1,49 @@ +#! /bin/sh + +set -e + +NAME="chrono" +USER=$NAME +GROUP=$NAME +CONFIG_DIR="/etc/$NAME" +MANAGE_SCRIPT="/usr/bin/$NAME-manage" + +case "$1" in + configure) + + # make sure the administrative user exists + if ! getent passwd $USER >/dev/null; then + adduser --disabled-password --quiet --system \ + --no-create-home --home /var/lib/$NAME \ + --gecos "$NAME user" --group $USER + fi + # ensure dirs ownership + chown $USER:$GROUP /var/log/$NAME + chown $USER:$GROUP /var/lib/$NAME/collectstatic + chown $USER:$GROUP /var/lib/$NAME/tenants + # create a secret file + SECRET_FILE=$CONFIG_DIR/secret + if [ ! -f $SECRET_FILE ]; then + echo -n "Generating Django secret..." >&2 + cat /dev/urandom | tr -dc [:alnum:]-_\!\%\^:\; | head -c70 > $SECRET_FILE + chown root:$GROUP $SECRET_FILE + chmod 0440 $SECRET_FILE + fi + ;; + + triggered) + su -s /bin/sh -c "$MANAGE_SCRIPT hobo_deploy --redeploy" $USER + ;; + + abort-upgrade|abort-remove|abort-deconfigure) + ;; + + *) + echo "postinst called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +#DEBHELPER# + +exit 0 diff --git a/debian/chrono.triggers b/debian/chrono.triggers new file mode 100644 index 00000000..718b6672 --- /dev/null +++ b/debian/chrono.triggers @@ -0,0 +1 @@ +interest-noawait hobo-redeploy diff --git a/debian/compat b/debian/compat new file mode 100644 index 00000000..7f8f011e --- /dev/null +++ b/debian/compat @@ -0,0 +1 @@ +7 diff --git a/debian/control b/debian/control new file mode 100644 index 00000000..cfe59179 --- /dev/null +++ b/debian/control @@ -0,0 +1,27 @@ +Source: chrono +Maintainer: Frederic Peters +Section: python +Priority: optional +Build-Depends: python-setuptools (>= 0.6b3), python-all (>= 2.6.6-3), python-django, debhelper (>= 7) +Standards-Version: 3.9.6 +X-Python-Version: >= 2.7 + +Package: python-chrono +Architecture: all +Depends: ${misc:Depends}, ${python:Depends}, + python-django (>= 1.8), + python-gadjo +Recommends: python-django-mellon +Description: Agendas System (Python module) + +Package: chrono +Architecture: all +Depends: ${misc:Depends}, + python-chrono (= ${binary:Version}), + python-hobo, + python-django-tenant-schemas, + python-psycopg2, + python-django-mellon, + gunicorn +Recommends: nginx, postgresql +Description: Agendas System diff --git a/debian/debian_config.py b/debian/debian_config.py new file mode 100644 index 00000000..72af1bd8 --- /dev/null +++ b/debian/debian_config.py @@ -0,0 +1,18 @@ +# This file is sourced by "execfile" from chrono.settings + +import os + +PROJECT_NAME = 'chrono' + +# SAML2 authentication +INSTALLED_APPS += ('mellon',) + +# +# hobotization (multitenant) +# +execfile('/usr/lib/hobo/debian_config_common.py') + +# +# local settings +# +execfile(os.path.join(ETC_DIR, 'settings.py')) diff --git a/debian/nginx-example.conf b/debian/nginx-example.conf new file mode 100644 index 00000000..8de7d5d3 --- /dev/null +++ b/debian/nginx-example.conf @@ -0,0 +1,58 @@ +server { + listen 443; + server_name *-chrono.example.org; + + ssl on; + ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem; + ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key; + + access_log /var/log/nginx/chrono.example.org-access.log combined; + error_log /var/log/nginx/chrono.example.org-error.log; + + location ~ ^/static/(.+)$ { + root /; + try_files /var/lib/chrono/tenants/$host/static/$1 + /var/lib/chrono/collectstatic/$1 + =404; + } + + location ~ ^/media/(.+)$ { + alias /var/lib/chrono/tenants/$host/media/$1; + } + + location / { + proxy_pass http://unix:/var/run/chrono/chrono.sock; + proxy_set_header Host $http_host; + proxy_set_header X-Forwarded-SSL on; + proxy_set_header X-Forwarded-Protocol ssl; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + } +} + +server { + listen 80; + server_name *-chrono.example.org; + + access_log /var/log/nginx/chrono.example.org-access.log combined; + error_log /var/log/nginx/chrono.example.org-error.log; + + location ~ ^/static/(.+)$ { + root /; + try_files /var/lib/chrono/tenants/$host/static/$1 + /var/lib/chrono/collectstatic/$1 + =404; + } + + location ~ ^/media/(.+)$ { + alias /var/lib/chrono/tenants/$host/media/$1; + } + + location / { + proxy_pass http://unix:/var/run/chrono/chrono.sock; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + } +} diff --git a/debian/python-chrono.dirs b/debian/python-chrono.dirs new file mode 100644 index 00000000..8850597b --- /dev/null +++ b/debian/python-chrono.dirs @@ -0,0 +1 @@ +/usr/lib/chrono diff --git a/debian/python-chrono.docs b/debian/python-chrono.docs new file mode 100644 index 00000000..2e3abae3 --- /dev/null +++ b/debian/python-chrono.docs @@ -0,0 +1,2 @@ +COPYING +README diff --git a/debian/python-chrono.install b/debian/python-chrono.install new file mode 100644 index 00000000..9fed783a --- /dev/null +++ b/debian/python-chrono.install @@ -0,0 +1,2 @@ +usr/bin/manage.py /usr/lib/chrono +usr/lib/python2*/*-packages diff --git a/debian/rules b/debian/rules new file mode 100755 index 00000000..de1bd885 --- /dev/null +++ b/debian/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f +# -*- makefile -*- + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +%: + dh $@ --with python2 diff --git a/debian/settings.py b/debian/settings.py new file mode 100644 index 00000000..7a862ca7 --- /dev/null +++ b/debian/settings.py @@ -0,0 +1,55 @@ +# Configuration for chrono. +# You can override Welco default settings here + +# Welco is a Django application: for the full list of settings and their +# values, see https://docs.djangoproject.com/en/1.7/ref/settings/ +# For more information on settings see +# https://docs.djangoproject.com/en/1.7/topics/settings/ + +# WARNING! Quick-start development settings unsuitable for production! +# See https://docs.djangoproject.com/en/1.7/howto/deployment/checklist/ + +# This file is sourced by "execfile" from /usr/lib/chrono/debian_config.py + +# SECURITY WARNING: don't run with debug turned on in production! +DEBUG = False +TEMPLATE_DEBUG = False + +#ADMINS = ( +# # ('User 1', 'watchdog@example.net'), +# # ('User 2', 'janitor@example.net'), +#) + +# ALLOWED_HOSTS must be correct in production! +# See https://docs.djangoproject.com/en/dev/ref/settings/#allowed-hosts +ALLOWED_HOSTS = [ + '*', +] + +# Databases +# Default: a local database named "chrono" +# https://docs.djangoproject.com/en/1.7/ref/settings/#databases +# Warning: don't change ENGINE +# DATABASES['default']['NAME'] = 'chrono' +# DATABASES['default']['USER'] = 'chrono' +# DATABASES['default']['PASSWORD'] = '******' +# DATABASES['default']['HOST'] = 'localhost' +# DATABASES['default']['PORT'] = '5432' + +LANGUAGE_CODE = 'fr-fr' +TIME_ZONE = 'Europe/Paris' + +# Email configuration +# EMAIL_SUBJECT_PREFIX = '[chrono] ' +# SERVER_EMAIL = 'root@chrono.example.org' +# DEFAULT_FROM_EMAIL = 'webmaster@chrono.example.org' + +# SMTP configuration +# EMAIL_HOST = 'localhost' +# EMAIL_HOST_USER = '' +# EMAIL_HOST_PASSWORD = '' +# EMAIL_PORT = 25 + +# HTTPS Security +# CSRF_COOKIE_SECURE = True +# SESSION_COOKIE_SECURE = True