lxc container done closes #9

.gitignore

@@ -1,6 +1,4 @@
-composer.phar
 /vendor/
+/cache/**
+/.composer/**
 
-# Commit your application's lock file https://getcomposer.org/doc/01-basic-usage.md#commit-your-composer-lock-file-to-version-control
-# You may choose to ignore a library lock file http://getcomposer.org/doc/02-libraries.md#lock-file
-# composer.lock

creds.php

@@ -2,7 +2,7 @@
 
 return [
     'dbhost' => '127.0.0.1',
-    'dbname' => 'lipidexample',
-    'dbuser' => 'lipidexample',
-    'dbpass' => 'lipidexample',
+    'dbname' => 'example',
+    'dbuser' => 'example',
+    'dbpass' => 'example',
 ];

initenv.sh

@@ -0,0 +1,222 @@
+#!/bin/bash
+# Project development environment initialization
+#
+# This script prepares all that needed to development:
+#   - install contaier;
+#   - installs packages;
+#   - services, database
+#
+# Author: Alexandr Gorlov
+# Coauthor: Kirill Artemov
+
+# Any subsequent(*) commands which fail will cause the shell script to exit immediately
+set -e
+
+LXC_NAME="lipid-example"
+#LXC_PATH="/var/lib/lxc/${LXC_NAME}"
+LXC_PATH="${HOME}/.local/share/lxc/${LXC_NAME}"
+#LXC_ROOT="/var/lib/lxc/${LXC_NAME}/rootfs"
+LXC_ROOT="${HOME}/.local/share/lxc/${LXC_NAME}/rootfs"
+
+DB_NAME="example"
+
+if [ ${UID} = "0" ]; then
+  echo "Hey, run this script not from root:"
+  echo "  $ ./initenv.sh"
+  exit 255;
+fi
+
+MY_GROUP=`id -gn`
+GID=`id -g`
+
+if lxc-ls -f | grep "${LXC_NAME}"; then
+  read -p "Container '${LXC_NAME}' already exists. Destroy it, and create new one from scratch (y/n)? " CONT
+  if [ "$CONT" = "y" ]; then
+    lxc-destroy -n "${LXC_NAME}" -f;
+  else
+    echo "Exiting...";
+    exit 1;
+  fi
+
+fi
+
+# Container creation
+echo "Creationg container: ${LXC_NAME}"
+lxc-create -t download -n "${LXC_NAME}" -- -d ubuntu -r bionic -a amd64
+
+echo "Starting ${LXC_NAME}...";
+lxc-start -n ${LXC_NAME}
+
+# Recreate default user, his login, uid, gid equal to host user
+lxc-attach -n ${LXC_NAME} -- userdel -r ubuntu
+lxc-attach -n ${LXC_NAME} -- groupadd -g ${GID} ${MY_GROUP}
+lxc-attach -n ${LXC_NAME} -- useradd -s /bin/bash --gid ${GID} -G sudo --uid ${UID} -d /www ${USER}
+
+lxc-stop -n ${LXC_NAME}
+
+
+# Lxc config tweaks
+{
+  echo ""
+  echo "# Map Host project directory to /www"
+  echo "lxc.mount.entry = ${PWD} www noncae bind,create=dir,rw 0 0"
+} >> "${LXC_PATH}/config"
+
+# Comment default lxc.idmap...
+sed -i '/^lxc.idmap/s/^/#/g' "${LXC_PATH}/config"
+
+# map this user alexandr (uid=1000) on user ubuntu (uid=1000) in container
+{
+  echo ""
+  echo "lxc.idmap = u 0 100000 1000" # Uid  0 maps to 100000 in container, 1 -> 100001 till count 1000
+  echo "lxc.idmap = g 0 100000 1000"
+  echo "lxc.idmap = u ${UID} ${UID} 1" # Uid 1000 -> 1000 in container (one)
+  echo "lxc.idmap = g ${GID} ${GID} 1"
+  echo "lxc.idmap = u $((UID+1)) 10$((UID+1)) $((65535-UID))"
+  echo "lxc.idmap = g $((UID+1)) 10$((UID+1)) $((65535-UID))"
+} >> "${LXC_PATH}/config"
+
+lxc-start -n ${LXC_NAME}
+
+# wait untill it starts
+until [[ `lxc-ls -f | grep "${LXC_NAME}" | grep "RUNNING" | grep "10.0.3"` ]]; do sleep 1; done;
+echo `lxc-ls -f`
+
+
+
+# Packages installation
+echo "Packages installation...";
+
+## Predefined variables to install postfix
+## https://blog.bissquit.com/unix/debian/postfix-i-dovecot-v-kontejnere-docker/
+{
+  echo "postfix postfix/main_mailer_type string Internet site"
+  echo "postfix postfix/mailname string mail.domain.tld"
+} >> "${LXC_ROOT}/tmp/postfix_silent_install.txt"
+
+lxc-attach -n "${LXC_NAME}" -- debconf-set-selections /tmp/postfix_silent_install.txt
+
+lxc-attach -n "${LXC_NAME}" -- apt update
+lxc-attach -n "${LXC_NAME}" -- sh -c "DEBIAN_FRONTEND=noninteractive apt install -q -y \
+    locales-all php7.2-cli php7.2-mysql php7.2-mbstring php7.2-xml php7.2-curl \
+    php7.2-fpm php7.2-zip wget nginx mc mariadb-server sphinxsearch composer postfix \
+    php7.2-soap"
+lxc-attach -n "${LXC_NAME}" -- su - ${USER} -c "cd /www && composer install"
+
+# /etc/hosts
+{
+  echo "# ${LXC_NAME}"
+  echo "127.0.0.1 dbhost"
+} | lxc-attach -n "${LXC_NAME}" -- bash -c "cat - >> /etc/hosts"
+
+
+# nginx configuration
+{
+cat <<EOFNGINX
+server {
+    listen 8000;
+    server_name ${LXC_NAME};
+    fastcgi_read_timeout 600;
+    access_log /var/log/nginx/access.log;
+    error_log  /var/log/nginx/error.log;
+    client_max_body_size 50m;
+    set_real_ip_from 10.0.3.1; # set if container is behind proxy (on host machine)
+    # @todo #175 поместить root в /www/www или /www/public
+    root /www;
+    gzip off;
+    location / {
+        try_files \$uri @php72;
+        index index.php;
+    }
+    location /adminer {
+        allow 127.0.0.1;
+        allow 10.0.3.1;
+        deny all;
+
+        root /usr/share/adminer/;
+        fastcgi_pass unix:///run/php/php7.2-fpm.sock;
+        fastcgi_index  latest.php;
+        fastcgi_param  SCRIPT_FILENAME  \$document_root/latest.php;
+        include        fastcgi_params;
+    }
+    location @php72 {
+        root /www;
+        fastcgi_pass unix:///run/php/php7.2-fpm.sock;
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  \$document_root/index.php;
+        include        fastcgi_params;
+    }
+}
+EOFNGINX
+} | lxc-attach -n "${LXC_NAME}" -- bash -c "cat - >> /etc/nginx/sites-available/${LXC_NAME}"
+
+lxc-attach -n "${LXC_NAME}" -- ln -s /etc/nginx/sites-available/${LXC_NAME} /etc/nginx/sites-enabled/
+
+# change www-data in container to this user
+lxc-attach -n "${LXC_NAME}" -- sed -i "/^user www-data/s/user www-data/user ${USER}/"\
+      "/etc/nginx/nginx.conf"
+lxc-attach -n "${LXC_NAME}" -- sed -i "/^user = www-data/s/user = www-data/user = ${USER}/"\
+    "/etc/php/7.2/fpm/pool.d/www.conf"
+lxc-attach -n "${LXC_NAME}" -- sed -i "/^group = www-data/s/group = www-data/group = ${MY_GROUP}/"\
+    "/etc/php/7.2/fpm/pool.d/www.conf"
+lxc-attach -n "${LXC_NAME}" -- sed -i "/^listen.owner = www-data/s/listen.owner = www-data/listen.owner = ${USER}/"\
+    "/etc/php/7.2/fpm/pool.d/www.conf"
+lxc-attach -n "${LXC_NAME}" -- sed -i "/^listen.group = www-data/s/listen.group = www-data/listen.group = ${MY_GROUP}/"\
+    "/etc/php/7.2/fpm/pool.d/www.conf"
+
+# Php configuration customization
+{
+  echo "php_admin_value[upload_max_filesize] = 50M"
+  echo "php_admin_value[post_max_size] = 50M"
+} | lxc-attach -n "${LXC_NAME}" -- bash -c "cat - >> /etc/php/7.2/fpm/pool.d/www.conf"
+
+
+lxc-attach -n "${LXC_NAME}" -- systemctl restart php7.2-fpm
+lxc-attach -n "${LXC_NAME}" -- systemctl restart nginx
+
+# Databases initialization
+echo "Databases initialization"
+lxc-attach -n "${LXC_NAME}" -- mysqladmin create ${DB_NAME}
+
+cat ${DB_NAME}.sql | lxc-attach -n "${LXC_NAME}" -- mysql ${DB_NAME} -uroot
+echo "GRANT ALL PRIVILEGES ON ${DB_NAME}.* TO '${DB_NAME}'@'%' IDENTIFIED BY '${DB_NAME}';" |\
+  lxc-attach -n "${LXC_NAME}" -- mysql ${DB_NAME} -uroot
+
+
+#lxc-attach -n "${LXC_NAME}" -- sh -c "cd /www && /usr/bin/php ./migrate.php"
+
+# Sphinxsearch
+
+#cat sphinx.conf > "${LXC_ROOT}/etc/sphinxsearch/sphinx.conf"
+#echo "START=yes" > "${LXC_ROOT}/etc/default/sphinxsearch"
+#lxc-attach -n "${LXC_NAME}" -- indexer --all
+#lxc-attach -n "${LXC_NAME}" -- systemctl restart sphinxsearch
+
+
+# Crontab
+{
+  echo "#*/5 * * * *     cd /www && /usr/bin/php ./scripts/sync_boxes.php"
+  echo "#*/30 * * * *    indexer --all --rotate"
+} | lxc-attach -n "${LXC_NAME}" -- crontab -u${USER} -
+
+
+# Adminer
+lxc-attach -n "${LXC_NAME}" -- \
+    mkdir -p /usr/share/adminer
+lxc-attach -n "${LXC_NAME}" -- \
+    sh -c 'cd /usr/share/adminer && wget https://www.adminer.org/latest.php'
+
+# Help messages
+LXC_IP=`lxc-info -n ${LXC_NAME} -iH`
+
+echo
+echo "======================= ALL DONE! ==========================="
+echo
+echo "Open in browser: http://${LXC_IP}:8000"
+echo
+echo "To start adminer run:"
+echo
+echo "    http://${LXC_IP}:8000/adminer"
+echo
+echo "For production, or to open app for all, forward port:"
+echo "    $ sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 8000 -j DNAT --to-destination ${LXC_IP}:8000"