Skip to content

Allow to define SSL keys for configuration and chown then for proper usage #205

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
iranzo wants to merge 11 commits into
base: master
Choose a base branch
from
Open

Allow to define SSL keys for configuration and chown then for proper usage #205

Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
6f3b117
chown on SSL keys
iranzo Dec 5, 2018
8a94e05
Loop over keys and copy from one path to another to avoid secret-read…
iranzo Dec 5, 2018
58b9c36
Fix var name
iranzo Dec 5, 2018
f4bfce3
Fix paths on creation
iranzo Dec 5, 2018
1326a4a
Relocate upper in the file
iranzo Dec 5, 2018
20af7f1
Code was failing because it checked for file, not symlink'
iranzo Dec 5, 2018
941231a
Move keys grab to env var as config didn't exist
iranzo Dec 5, 2018
abc4e42
Output error on missing file
iranzo Dec 5, 2018
536e1ea
Remove trailing \' that affect the keys setup
iranzo Dec 5, 2018
8ea1c33
Try forcing port on local connection
iranzo Dec 10, 2018
3b206d3
Undo change on configuration script
iranzo Dec 14, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 20 additions & 1 deletion src/pgsql/bin/postgres/entrypoint.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,26 @@ else
fi
fi

chown -R postgres $PGDATA && chmod -R 0700 $PGDATA

echo ">>> Trying to configure SSL"
# Tweak keys to avoid permission issues:
ORIGKEYS=$(echo $CONFIGS|tr "," "\n"|egrep '(ssl_cert_file|ssl_key_file)'|cut -d ":" -f 2-|tr "\n" " "|tr -d "\'")
KEYS=""

echo ">>> Trying to move ${ORIGKEYS} to proper folder"
for file in ${ORIGKEYS}; do
# Check for file or link pointing to file
if [ -e /pg-ssl/$(basename ${file}) ]; then
echo ">>> Copying SSL file from /pg-ssl/$(basename ${file}) to ${file}"
mkdir -p $(dirname ${file})
cat /pg-ssl/$(basename ${file}) > ${file}
KEYS="$KEYS ${file}"
else
echo ">>> ERROR: SSL File ${file} doesn't exist on disk"
fi
done

chown -R postgres $PGDATA $KEYS && chmod -R 0700 $PGDATA $KEYS

source /usr/local/bin/cluster/repmgr/configure.sh

Expand Down