configure.sh

#!/usr/bin/env bash
set -ue

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ODS_CORE_DIR=${SCRIPT_DIR%/*}

echo_done(){
    echo -e "\033[92mDONE\033[39m: $1"
}

echo_warn(){
    echo -e "\033[93mWARN\033[39m: $1"
}

echo_error(){
    echo -e "\033[31mERROR\033[39m: $1"
}

echo_info(){
    echo -e "\033[94mINFO\033[39m: $1"
}

ADMIN_USER="admin"
ADMIN_DEFAULT_PASSWORD=
ADMIN_PASSWORD=
DEVELOPER_PASSWORD=
NEXUS_URL=
LOCAL_CONTAINER_ID=
NAMESPACE="ods"
NEXUS_DC="nexus"
INSECURE=""

HTTP_PROXY=
HTTPS_PROXY=
NO_PROXY=

function usage {
    printf "Setup Nexus.\n\n"
    printf "This script will ask interactively for parameters by default.\n"
    printf "However, you can also pass them directly. Usage:\n\n"
    printf "\t-h|--help\t\tPrint usage\n"
    printf "\t-v|--verbose\t\tEnable verbose mode\n"
    printf "\t-i|--insecure\t\tAllow insecure server connections when using SSL\n"
    printf "\n"
    printf "\t-n|--nexus\t\t\tNexus URL, e.g. 'https://nexus.example.com'\n"
    printf "\t-l|--local-container-id\t\tLocal container ID\n"
    printf "\t-a|--admin-password\t\tAdmin password\n"
    printf "\t-d|--developer-password\t\tDeveloper password\n"
    printf "\t-n|--namespace\t\t\tNamespace (defaults to '%s')\n" "${NAMESPACE}"
}

while [[ "$#" -gt 0 ]]; do
    case $1 in

    -v|--verbose) set -x;;

    -h|--help) usage; exit 0;;

    -i|--insecure) INSECURE="--insecure";;

    -l|--local-container-id) LOCAL_CONTAINER_ID="$2"; shift;;
    -l=*|--local-container-id=*) LOCAL_CONTAINER_ID="${1#*=}";;

    -a|--admin-password) ADMIN_PASSWORD="$2"; shift;;
    -a=*|--admin-password=*) ADMIN_PASSWORD="${1#*=}";;

    -d|--developer-password) DEVELOPER_PASSWORD="$2"; shift;;
    -d=*|--developer-password=*) DEVELOPER_PASSWORD="${1#*=}";;

    -n|--nexus) NEXUS_URL="$2"; shift;;
    -n=*|--nexus=*) NEXUS_URL="${1#*=}";;

    --namespace=*) NAMESPACE="${1#*=}";;
    --namespace) NAMESPACE="$2"; shift;;

    *) echo_error "Unknown parameter passed: $1"; exit 1;;
esac; shift; done

if [ -z "${LOCAL_CONTAINER_ID}" ]; then
    if ! oc whoami > /dev/null; then
        echo "You need to log into OpenShift first"
        exit 1
    fi
fi

if [ -z "${NEXUS_URL}" ]; then
    configuredUrl="https://nexus.example.com"
    if [ -f "${ODS_CORE_DIR}/../ods-configuration/ods-core.env" ]; then
        echo_info "Configuration located"
        configuredUrl=$(grep NEXUS_URL "${ODS_CORE_DIR}/../ods-configuration/ods-core.env" | cut -d "=" -f 2-)
    fi
    read -r -e -p "Enter Nexus URL [${configuredUrl}]: " input
    if [ -z "${input}" ]; then
        NEXUS_URL=${configuredUrl}
    else
        NEXUS_URL=${input:-""}
    fi
fi

if [ -z "${ADMIN_PASSWORD}" ]; then
    echo "Please enter Nexus admin password:"
    read -r -e -s input
    ADMIN_PASSWORD=${input:-""}
fi

if [ -z "${DEVELOPER_PASSWORD}" ]; then
    if [ -f "${ODS_CORE_DIR}/../ods-configuration/ods-core.env" ]; then
        echo_info "Configuration located, checking if password is changed from sample value"
        samplePassword=$(grep NEXUS_PASSWORD_B64 "${ODS_CORE_DIR}/configuration-sample/ods-core.env.sample" | cut -d "=" -f 2-)
        configuredPassword=$(grep NEXUS_PASSWORD_B64 "${ODS_CORE_DIR}/../ods-configuration/ods-core.env" | cut -d "=" -f 2- | base64 --decode)
        if [ "${configuredPassword}" == "${samplePassword}" ]; then
            echo_info "Developer password in ods-configuration/ods-core.env is the sample value"
        else
            echo_info "Setting developer password from ods-configuration/ods-core.env"
            DEVELOPER_PASSWORD=${configuredPassword}
        fi
    fi
    if [ -z "${DEVELOPER_PASSWORD}" ]; then
        echo "Please enter Nexus developer password:"
        read -r -e -s input
        DEVELOPER_PASSWORD=${input:-""}
    fi
fi

function waitForReady {
    echo_info "Wait for Nexus to become responsive"
    set +e
    local n=0
    local httpOk=
    until [ $n -ge 20 ]; do
        httpOk=$(curl ${INSECURE} -sS -o /dev/null -w "%{http_code}" "${NEXUS_URL}/service/rest/v1/status/writable")
        if [ "${httpOk}" == "200" ]; then
            echo_info "Nexus is up"
            break
        else
            echo_info "Nexus is not up yet, waiting 10s ..."
            sleep 10s
            n=$((n+1))
        fi
    done
    set -e

    if [ "${httpOk}" != "200" ]; then
        echo_error "Nexus did not start, got HTTP code ${httpOk}."
        exit 1
    fi
}

function runJsonScript {
    local jsonScriptName=$1
    shift 1
    # shellcheck disable=SC2124
    local runParams="$@"
    echo "uploading ${jsonScriptName}.json"
    curl ${INSECURE} -X POST -sSf \
        --user "${ADMIN_USER}:${ADMIN_PASSWORD}" \
        --header 'Content-Type: application/json' \
        "${NEXUS_URL}/service/rest/v1/script" -d @json/"${jsonScriptName}".json
    echo "running ${jsonScriptName}"
    curl ${INSECURE} -X POST -sSf \
        --user "${ADMIN_USER}:${ADMIN_PASSWORD}" \
        --header 'Content-Type: text/plain' \
        "${NEXUS_URL}/service/rest/v1/script/${jsonScriptName}/run" ${runParams} > /dev/null
    echo "deleting ${jsonScriptName}"
    curl ${INSECURE} -X DELETE -sSf \
        --user "${ADMIN_USER}:${ADMIN_PASSWORD}" \
        "${NEXUS_URL}/service/rest/v1/script/${jsonScriptName}"
}

function changeScriptSetting {
    local allowCreation=$1
    echo_info "Changing nexus.scripts.allowCreation to '${allowCreation}'"
    local cmd="echo 'nexus.scripts.allowCreation=${allowCreation}' >> /nexus-data/etc/nexus.properties"
    if [ -z "${LOCAL_CONTAINER_ID}" ]; then
        oc -n "${NAMESPACE}" rsh "dc/${NEXUS_DC}" sh -c "${cmd}"
        echo_info "Rollout new Nexus deployment to apply changes"
        oc -n "${NAMESPACE}" rollout latest "dc/${NEXUS_DC}"
        oc -n "${NAMESPACE}" rollout status "dc/${NEXUS_DC}" --watch=true
    else
        if ! docker exec -t "${LOCAL_CONTAINER_ID}" sh -c "${cmd}"; then
            echo_error "Cannot exec in local container"
            docker logs "${LOCAL_CONTAINER_ID}"
            exit 1
        fi
        echo_info "Restart local container to apply changes"
        docker stop "${LOCAL_CONTAINER_ID}" &> /dev/null
        docker start "${LOCAL_CONTAINER_ID}" &> /dev/null
    fi
}

waitForReady

changeScriptSetting "true"

waitForReady

# If default password exists and can be used, update it with ADMIN_PASSWORD.
DEFAULT_ADMIN_PASSWORD_FILE="/nexus-data/admin.password"
if [ -z "${LOCAL_CONTAINER_ID}" ]; then
    ADMIN_DEFAULT_PASSWORD=$(oc -n "${NAMESPACE}" rsh "dc/${NEXUS_DC}" sh -c "cat ${DEFAULT_ADMIN_PASSWORD_FILE} 2> /dev/null || true")
    HTTP_PROXY=$(oc -n "${NAMESPACE}" rsh "dc/${NEXUS_DC}" sh -c "echo -n \$HTTP_PROXY")
    HTTPS_PROXY=$(oc -n "${NAMESPACE}" rsh "dc/${NEXUS_DC}" sh -c "echo -n \$HTTPS_PROXY")
    NO_PROXY=$(oc -n "${NAMESPACE}" rsh "dc/${NEXUS_DC}" sh -c "echo -n \$NO_PROXY")
else
    ADMIN_DEFAULT_PASSWORD=$(docker exec -t "${LOCAL_CONTAINER_ID}" sh -c "cat ${DEFAULT_ADMIN_PASSWORD_FILE} 2> /dev/null || true")
    # shellcheck disable=SC2046,SC2005
    HTTP_PROXY=$(echo $(docker exec -t "${LOCAL_CONTAINER_ID}" printenv HTTP_PROXY) | tr -d '"\r\n')
    # shellcheck disable=SC2046,SC2005
    HTTPS_PROXY=$(echo $(docker exec -t "${LOCAL_CONTAINER_ID}" printenv HTTPS_PROXY) | tr -d '"\r\n')
    # shellcheck disable=SC2046,SC2005
    NO_PROXY=$(echo $(docker exec -t "${LOCAL_CONTAINER_ID}" printenv NO_PROXY) | tr -d '"\r\n')
fi

if [ -n "${ADMIN_DEFAULT_PASSWORD}" ]; then
    pong=$(curl ${INSECURE} -sS --user "${ADMIN_USER}:${ADMIN_DEFAULT_PASSWORD}" \
        "${NEXUS_URL}/service/metrics/ping")
    if [ "${pong}" == "pong" ]; then
        echo_info "Change admin password"
        curl ${INSECURE} -X POST -sSf \
            --user "${ADMIN_USER}:${ADMIN_DEFAULT_PASSWORD}" \
            --header 'Content-Type: application/json' \
            "${NEXUS_URL}/service/rest/v1/script" -d @json/changeAdminPassword.json
        curl ${INSECURE} -X POST -sSf \
            --user "${ADMIN_USER}:${ADMIN_DEFAULT_PASSWORD}" \
            --header 'Content-Type: text/plain' \
            "${NEXUS_URL}/service/rest/v1/script/changeAdminPassword/run" -d "${ADMIN_PASSWORD}" > /dev/null
        curl ${INSECURE} -X DELETE -sSf \
            --user "${ADMIN_USER}:${ADMIN_PASSWORD}" \
            "${NEXUS_URL}/service/rest/v1/script/changeAdminPassword"
    fi
    echo_info "Delete default admin password file"
    if [ -z "${LOCAL_CONTAINER_ID}" ]; then
        oc -n "${NAMESPACE}" rsh "dc/${NEXUS_DC}" bash -c "rm ${DEFAULT_ADMIN_PASSWORD_FILE} || true"
    else
        docker exec -t "${LOCAL_CONTAINER_ID}" rm "${DEFAULT_ADMIN_PASSWORD_FILE}"
    fi
else
    echo_info "File '${DEFAULT_ADMIN_PASSWORD_FILE}' does not exist - continuing with actual password"
fi

echo_info "Install Blob Stores"
runJsonScript "createBlobStores"

echo "{\"httpProxy\": \"${HTTP_PROXY}\", \"httpsProxy\": \"${HTTPS_PROXY}\", \"noProxy\": \"${NO_PROXY}\"}" > json/http-proxy-settings.json
echo_info "Configure HTTP proxy with: ${HTTP_PROXY}"
runJsonScript "createProxySettings" "-d @json/http-proxy-settings.json"
echo_info "Configure HTTPS proxy with: ${HTTPS_PROXY}"
runJsonScript "createProxySettingsHTTPS" "-d @json/http-proxy-settings.json"
echo_info "Configure no proxy exclusions with: ${NO_PROXY}"
runJsonScript "createNoProxySettings" "-d @json/http-proxy-settings.json"
rm json/http-proxy-settings.json

echo_info "Install Repositories"
runJsonScript "createRepos"

echo_info "Deactivate anonymous access"
runJsonScript "deactivateAnonymous"

echo_info "Setup developer role"
runJsonScript "createRole" "-d @json/developer-role.json"

echo_info "Setup developer user"
sed "s|@developer_password@|${DEVELOPER_PASSWORD}|g" json/developer-user.json > json/developer-user-with-password.json
runJsonScript "createUser" "-d @json/developer-user-with-password.json"
rm json/developer-user-with-password.json

if [ -z "${LOCAL_CONTAINER_ID}" ]; then
    changeScriptSetting "false"
    waitForReady
else
    true # on local docker nexus don't care about security
fi