bootstrap-mcp.sh

#!/bin/sh

# This script will bootstrap and configure the salt-master server
# used to manage the entire MAGFest IT infrastructure.

if [ "$1" != "" ]; then
    SALT_ENV=$1
fi

if [ -z "$SALT_ENV" ]; then
    echo "Usage: $0 SALT_ENV"
    echo ""
    echo "    SALT_ENV can be one of the following: prod, staging, dev, load, etc..."
    echo ""
    echo "SALT_ENV may also be specified as an environment variable:"
    echo ""
    echo "    SALT_ENV=staging $0"
    echo ""
    exit 1
fi

HOST=`hostname --fqdn`

set -x  # Start echoing commands to stdout

# Install SaltStack master and minion
curl -o /tmp/bootstrap-salt.sh -L https://bootstrap.saltstack.com
sh /tmp/bootstrap-salt.sh -i "${HOST}" -L -M -P git 'v2019.2.0'

# Preseed mcp's minion key
cd /tmp
salt-key --gen-keys="${HOST}"
cp "${HOST}.pub" "/etc/salt/pki/master/minions/${HOST}"
cp "${HOST}.pem" /etc/salt/pki/minion/minion.pem
cp "${HOST}.pub" /etc/salt/pki/minion/minion.pub
rm "${HOST}.pem"
rm "${HOST}.pub"

# Download or update the infrastructure code
if [ -d "/srv/infrastructure/.git" ]; then
    cd /srv/infrastructure
    git pull
else
    git clone --depth 1 https://github.com/magfest/infrastructure.git /srv/infrastructure
    cd /srv/infrastructure
fi

# Set some environment grains
salt-call --local grains.setval salt_env $SALT_ENV
salt-call --local grains.append roles saltmaster

# Run salt locally to configure a minimal mcp
salt-call --local --id='bootstrap' --file-root=magfest_state --pillar-root=magfest_config state.highstate

# Restart the services
systemctl restart salt-master
systemctl restart salt-minion

# Give the services a chance to start up
sleep 5

# Next steps
set +x  # Stop echoing commands to stdout
echo ""
echo "================================"
echo ""
echo "Done! Please update the files under /srv/data/secret/infrastructure/magfest_config with your" \
     "secret keys/passwords and run the following command:"
echo ""
echo "    salt ${HOST} state.apply"
echo ""
echo "NOTE: Some of the services take a few minutes to initialize. You can" \
     "follow the progress of the Free IPA installation with the following" \
     "command:"
echo ""
echo "    tail -f /srv/data/freeipa/ipa-data/var/log/ipaserver-install.log"
echo ""