tuxglpi.sh

#!/bin/bash

###############################################################################
########## Scrip shell modificado para instalacao do GLPI em Centos ###########
########## Este script criara um log no diretório atual para   ################
########## pesquisa de senha do banco de dados!!! By Tuxjr     ################
###############################################################################
###############################################################################


## VARIAVEIS

VERSION="x.x.x"
TIMEZONE=America/Sao_Paulo
FQDN="nomedominio"
ADMINEMAIL="email"
ORGANIZATION="tuxjr"
MYSQL_ROOT_PASSWORD=''
DBUSER="glpi"
DBHOST="localhost"
DBNAME="glpi"
DBPASS="E`< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c${1:-32};echo;`"
# DBPASS="qaz123"
# MYSQL_NEW_ROOT_PASSWORD="qaz123"
MYSQL_NEW_ROOT_PASSWORD="C`< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c${1:-32};echo;`"


MYSQL="mysql -u root -p${MYSQL_NEW_ROOT_PASSWORD}"
CURL=`which curl`

cat <<EOF > ~/install_glpi.log

====================================================
## VARIAVEIS

VERSION=$VERSION
TIMEZONE=$TIMEZONE
FQDN=$FQDN
ADMINEMAIL=$ADMINEMAIL
ORGANIZATION=$ORGANIZATION
MYSQL_ROOT_PASSWORD=$MYSQL_ROOT_PASSWORD
DBUSER=$DBUSER
DBHOST=$DBHOST
DBNAME=$DBNAME
DBPASS=$DBPASS
MYSQL_NEW_ROOT_PASSWORD=$MYSQL_NEW_ROOT_PASSWORD


MYSQL=$MYSQL
CURL=$CURL

====================================================



EOF
## FIREWALLD

firewall-cmd --zone=public --add-service=http --permanent

firewall-cmd --zone=public --add-service=https --permanent


## REPOSITORIO

cd ~

curl 'https://setup.ius.io/' -o setup-ius.sh

bash setup-ius.sh

yum -y install epel-release expect


## MARIADB-SERVER

#if [ "$VERSION" != "9.3" ]; then
#	yum -y install mariadb-server
#else
	yum -y remove mariadb-server mariadb mariadb-config mariadb-libs mariadb-common
	yum -y install mariadb100u-server mariadb100u mariadb100u-config mariadb100u-libs mariadb100u-common
#fi


## Restart do mysql

systemctl enable mariadb

systemctl start mariadb


## Configuração de segurança do banco

SECURE_MYSQL=$(expect -c "
set timeout 10
spawn mysql_secure_installation
expect \"Enter current password for root (enter for none):\"
send \"$MYSQL_ROOT_PASSWORD\r\"
expect \"Change the root password?\"
send \"y\r\"
expect \"New password:\"
send \"$MYSQL_NEW_ROOT_PASSWORD\r\"
expect \"Re-enter new password:\"
send \"$MYSQL_NEW_ROOT_PASSWORD\r\"
expect \"Remove anonymous users?\"
send \"y\r\"
expect \"Disallow root login remotely?\"
send \"y\r\"
expect \"Remove test database and access to it?\"
send \"y\r\"
expect \"Reload privilege tables now?\"
send \"y\r\"
expect eof
")

echo "$SECURE_MYSQL"


## DATABASE

$MYSQL -e "create database $DBNAME character set utf8;"
$MYSQL -e "create user $DBUSER@localhost identified by '"$DBPASS"';"
$MYSQL -e "grant all privileges on $DBNAME.* to $DBUSER@localhost;"


## APACHE E PHP7

yum install -y httpd mod_ssl

yum -y remove php-cli mod_php php-common

yum -y install mod_php72u php72u-cli php72u-mysqlnd

yum -y install \
php-pear-CAS \
wget \
php72u-json \
php72u-mbstring \
php72u-mysqli \
php72u-session \
php72u-gd \
php72u-curl \
php72u-domxml \
php72u-imap \
php72u-ldap \
php72u-openssl \
php72u-opcache \
php72u-apcu \
php72u-xmlrpc \
openssl

systemctl enable httpd

systemctl start httpd


cat <<EOF > /etc/php.d/99-glpi.ini
memory_limit = 64M ;
file_uploads = on ;
max_execution_time = 600 ;
register_globals = off ;
magic_quotes_sybase = off ;
session.auto_start = off ;
session.use_trans_sid = 0 ;
EOF


cat <<EOF > /etc/php.d/timezone.ini
[Date]
date.timezone = $TIMEZONE ;
EOF


## DOWNLOAD AND INSTALL GLPI

yum -y install wget

if [ ! -e packages/$VERSION/glpi-$VERSION.tgz ]
then

  mkdir -p packages
  if [ "$VERSION" != "versao??" ] ; then
	  wget -c https://github.com/glpi-project/glpi/releases/download/$VERSION/glpi-$VERSION.tgz -O packages/glpi-$VERSION.tgz

  else

	  wget -c https://github.com/glpi-project/glpi/releases/download/${VERSION}.0/glpi-$VERSION.tgz -O packages/glpi-$VERSION.tgz
  fi
fi

tar -zxvf packages/glpi-$VERSION.tgz -C /var/www/html/

chown -R apache:apache /var/www/html/glpi


cat <<EOF > /etc/httpd/conf.d/glpi.conf
    <Directory /var/www/html/glpi/>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
EOF

## DESATIVAR SELINUX

#sed -i s/enforcing/permissive/g /etc/selinux/config

#setenforce 0

## ATIVAR SELINUX

    chcon -R -t httpd_sys_rw_content_t /var/www/html/glpi/
    setsebool -P httpd_can_network_connect 1
    setsebool -P httpd_can_network_connect_db 1
    setsebool -P httpd_can_sendmail 1
    setenforce 1



systemctl restart httpd

php /var/www/html/glpi/scripts/cliinstall.php --host=$DBHOST --db=$DBNAME --user=$DBUSER --pass=$DBPASS --lang=pt_BR
if [ $? -eq 0 ]; then
  rm -rf /var/www/html/glpi/install/install.php
fi


## BACKUP

cat <<EOF > /etc/cron.daily/backup-glpi.sh
#!/bin/sh

# Backup Banco GLPI

mysqldump -u ${DBUSER} -p${DBPASS} ${DBNAME} | gzip > /var/www/html/glpi/files/_dumps/glpi-${VERSION}-\`date +%Y-%m-%d-%H-%M\`.sql.gz

EXITVALUE=\$?
if [ \$EXITVALUE != 0 ]; then
    /usr/bin/logger -t GLPI "ALERT exited abnormally with [\$EXITVALUE]"
fi

chown apache.apache /var/www/html/glpi/files/_dumps/*.sql.gz

# Backup completo para dentro de /backup/

if [ ! -d /backup ]; then
  mkdir -p /backup
fi
tar -zcf /backup/backup-${VERSION}-\`date +%Y-%m-%d-%H-%M\`.tar.gz /var/www/html/glpi

EXITVALUE=\$?
if [ \$EXITVALUE != 0 ]; then
    /usr/bin/logger -t GLPI "ALERT exited abnormally with [\$EXITVALUE]"
fi


# Apagar backup com mais de 30d

find /var/www/html/glpi/files/_dumps/ -mtime +30 -delete
EXITVALUE=\$?
if [ \$EXITVALUE != 0 ]; then
    /usr/bin/logger -t GLPI "ALERT exited abnormally with [\$EXITVALUE]"
fi

exit 0

EOF

chmod +x /etc/cron.daily/backup-glpi.sh