mirror/XenOrchestraInstallerUpdater
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add possibility to use custom CA with XO

Browse Source
This commit is contained in:
Roni Väyrynen
2022-04-26 08:56:05 +03:00
parent 2f276eb80f
commit 9fba7b1935
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
sample.xo-install.cfg
View File

@@ -75,6 +75,11 @@ PRESERVE="3"
#PATH_TO_HTTPS_CERT=$INSTALLDIR/xo.crt #PATH_TO_HTTPS_CERT=$INSTALLDIR/xo.crt
#PATH_TO_HTTPS_KEY=$INSTALLDIR/xo.key #PATH_TO_HTTPS_KEY=$INSTALLDIR/xo.key
# location of CA certificate file.
# define this if your host certificate is issued by a custom CA and you want XO to trust itself.
# file can contain multiple certificates
#PATH_TO_HOST_CA=
# If set to true together with cert/key paths, defined pem key/certificate will be created if neither exists. # If set to true together with cert/key paths, defined pem key/certificate will be created if neither exists.
# options: true/false # options: true/false
#AUTOCERT="false" #AUTOCERT="false"

5
xo-install.sh
View File

@@ -39,6 +39,7 @@ OS_CHECK="${OS_CHECK:-"true"}"
ARCH_CHECK="${ARCH_CHECK:-"true"}" ARCH_CHECK="${ARCH_CHECK:-"true"}"
PATH_TO_HTTPS_CERT="${PATH_TO_HTTPS_CERT:-""}" PATH_TO_HTTPS_CERT="${PATH_TO_HTTPS_CERT:-""}"
PATH_TO_HTTPS_KEY="${PATH_TO_HTTPS_KEY:-""}" PATH_TO_HTTPS_KEY="${PATH_TO_HTTPS_KEY:-""}"
PATH_TO_HOST_CA="${PATH_TO_HOST_CA:-""}"
AUTOCERT="${AUTOCERT:-"false"}" AUTOCERT="${AUTOCERT:-"false"}"
USESUDO="${USESUDO:-"false"}" USESUDO="${USESUDO:-"false"}"
GENSUDO="${GENSUDO:-"false"}" GENSUDO="${GENSUDO:-"false"}"
@@ -720,6 +721,10 @@ function InstallXO {
printinfo "Adding WorkingDirectory parameter to systemd service configuration file" printinfo "Adding WorkingDirectory parameter to systemd service configuration file"
# shellcheck disable=SC1117 # shellcheck disable=SC1117
runcmd "sed -i \"/ExecStart=.*/a WorkingDirectory=$INSTALLDIR/xo-server\" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service" runcmd "sed -i \"/ExecStart=.*/a WorkingDirectory=$INSTALLDIR/xo-server\" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service"
if [[ -n "$PATH_TO_HOST_CA" ]]; then
printinfo "Adding custom CA environment variable to systemd service configuration file"
runcmd "sed -i \"/Environment=.*/a Environment=NODE_EXTRA_CA_CERTS=$PATH_TO_HOST_CA\" $INSTALLDIR/xo-builds/xen-orchestra-$TIME/packages/xo-server/xo-server.service"
fi
# if service not running as root, we need to deal with the fact that port binding might not be allowed # if service not running as root, we need to deal with the fact that port binding might not be allowed
if [[ "$XOUSER" != "root" ]]; then if [[ "$XOUSER" != "root" ]]; then