almet/umap
1
0
Fork 0
mirror of https://github.com/umap-project/umap.git synced 2025-05-04 21:51:50 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Allow to run fabric deployment with another user than root

Browse source
This commit is contained in:
Yohan Boniface 2017-05-02 17:53:59 +02:00
parent ec5200bcbc
commit fd7c0accf8
2 changed files with 29 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored
View file

@ -1,6 +1,7 @@
### UMap ### ### UMap ###
umap/settings/local.py umap/settings/local.py
umap/settings/local/* umap/settings/local/*
./*.local.py
docs/_build docs/_build
umap/remote_static umap/remote_static
.idea .idea

46
fabfile/__init__.py
View file

@ -1,3 +1,4 @@
from hashlib import md5
from io import StringIO from io import StringIO
from pathlib import Path from pathlib import Path
from string import Template as BaseTemplate from string import Template as BaseTemplate
@ -33,6 +34,14 @@ def as_postgres(ctx, cmd, *args, **kwargs):
as_user(ctx, 'postgres --login', cmd) as_user(ctx, 'postgres --login', cmd)
def sudo_put(ctx, local, remote, chown=None):
tmp = str(Path('/tmp') / md5(remote.encode()).hexdigest())
ctx.put(local, tmp)
ctx.run('sudo mv {} {}'.format(tmp, remote))
if chown:
ctx.run('sudo chown {} {}'.format(chown, remote))
@task @task
def umap_cmd(ctx, cmd): def umap_cmd(ctx, cmd):
as_umap(ctx, '/srv/umap/venv/bin/umap {}'.format(cmd)) as_umap(ctx, '/srv/umap/venv/bin/umap {}'.format(cmd))
@ -46,23 +55,24 @@ def put_dir(ctx, local, remote):
if path.is_dir(): if path.is_dir():
as_umap(ctx, 'mkdir -p {}'.format(remote / relative_path)) as_umap(ctx, 'mkdir -p {}'.format(remote / relative_path))
else: else:
ctx.put(path, str(remote / relative_path)) sudo_put(ctx, path, str(remote / relative_path))
@task @task
def system(ctx): def system(ctx):
ctx.run('apt update') ctx.run('sudo apt update')
ctx.run('apt install -y python3.5 python3.5-dev python-virtualenv wget ' ctx.run('sudo apt install -y python3.5 python3.5-dev python-virtualenv '
'nginx uwsgi uwsgi-plugin-python3 postgresql-9.5 gcc ' 'wget nginx uwsgi uwsgi-plugin-python3 postgresql-9.5 gcc '
'postgresql-9.5-postgis-2.2 postgresql-server-dev-9.5') 'postgresql-9.5-postgis-2.2 postgresql-server-dev-9.5')
ctx.run('mkdir -p /srv/umap') ctx.run('sudo mkdir -p /srv/umap')
ctx.run('useradd -N umap -d /srv/umap/ || exit 0') ctx.run('sudo useradd -N umap -d /srv/umap/ || exit 0')
ctx.run('chown umap:users /srv/umap/') ctx.run('sudo chown umap:users /srv/umap/')
ctx.run('chsh -s /bin/bash umap') ctx.run('sudo chsh -s /bin/bash umap')
# Allow UMAP_SETTINGS env var to be passed through ssh. # Allow UMAP_SETTINGS env var to be passed through ssh.
ctx.run('grep -q -r "^AcceptEnv UMAP_SETTINGS *" /etc/ssh/sshd_config ' ctx.run('grep -q -r "^AcceptEnv UMAP_SETTINGS *" /etc/ssh/sshd_config '
'|| echo "AcceptEnv UMAP_SETTINGS *" >> /etc/ssh/sshd_config') '|| echo "AcceptEnv UMAP_SETTINGS *" '
ctx.run('systemctl restart sshd') '| sudo tee --append /etc/ssh/sshd_config')
ctx.run('sudo systemctl restart sshd')
@task @task
@ -82,24 +92,24 @@ def venv(ctx):
@task @task
def customize(ctx): def customize(ctx):
if ctx.custom.settings: if ctx.custom.settings:
ctx.put(ctx.custom.settings, '/srv/umap/local.py') sudo_put(ctx, ctx.custom.settings, '/srv/umap/local.py',
chown='umap:users')
if ctx.custom.static: if ctx.custom.static:
put_dir(ctx, ctx.custom.static, '/srv/umap/theme/static') put_dir(ctx, ctx.custom.static, '/srv/umap/theme/static')
if ctx.custom.templates: if ctx.custom.templates:
put_dir(ctx, ctx.custom.templates, '/srv/umap/theme/templates') put_dir(ctx, ctx.custom.templates, '/srv/umap/theme/templates')
ctx.run('chown umap:users -R /srv/umap') ctx.run('sudo chown umap:users -R /srv/umap')
@task @task
def http(ctx): def http(ctx):
ctx.put('fabfile/uwsgi_params', '/srv/umap/uwsgi_params') sudo_put(ctx, 'fabfile/uwsgi_params', '/srv/umap/uwsgi_params')
uwsgi_conf = render_template('fabfile/uwsgi.ini', uwsgi_conf = render_template('fabfile/uwsgi.ini',
processes=ctx.config.get('processes', 4)) processes=ctx.config.get('processes', 4))
ctx.put(uwsgi_conf, '/etc/uwsgi/apps-enabled/umap.ini') sudo_put(ctx, uwsgi_conf, '/etc/uwsgi/apps-enabled/umap.ini')
nginx_conf = render_template('fabfile/nginx.conf', nginx_conf = render_template('fabfile/nginx.conf',
domain=ctx.config.domain) domain=ctx.config.domain)
ctx.put(nginx_conf, '/etc/nginx/sites-enabled/umap') sudo_put(ctx, nginx_conf, '/etc/nginx/sites-enabled/umap')
ctx.run('rm -f /etc/nginx/sites-enabled/default')
@task @task
@ -114,7 +124,7 @@ def bootstrap(ctx):
def write_default(ctx): def write_default(ctx):
content = '\n'.join(['{}={}'.format(k, v) content = '\n'.join(['{}={}'.format(k, v)
for k, v in ctx.config.get('env', {}).items()]) for k, v in ctx.config.get('env', {}).items()])
ctx.run('echo "{}" > /etc/default/umap'.format(content)) ctx.run('echo "{}" | sudo tee /etc/default/umap'.format(content))
@task @task
@ -131,4 +141,4 @@ def deploy(ctx):
@task @task
def restart(ctx): def restart(ctx):
ctx.run('systemctl restart uwsgi nginx') ctx.run('sudo systemctl restart uwsgi nginx')