mirror of
https://github.com/Cacti/cacti.git
synced 2026-10-24 03:57:32 +09:00
Thomas Vincent
41780277d3
* fix(docker): restrict the dev stack to localhost and make the poller run The web port bound to every interface, named volumes hid the shipped .htaccess denies, and the cron job could neither find php nor write to PID 1's output, so the poller never ran. Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test(docker): keep harnesses polling and restore the developer's config.php check_docker.sh deleted an existing include/config.php on exit, health polling aborted under pipefail before the container reported, the MariaDB wait had no bound, and the BSD mktemp template left its Xs literal. Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * docs(changelog): add fragment for #8453 Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test(e2e): move the pointer off the Deepness multiselect button Deepness sets a zero body margin, so the unhovered #ms-button sits at the viewport origin and headless Chromium on Linux intermittently applies :hover to it. Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * ci: pull pinned integration database from authenticated mirror Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> --------- Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
92 lines
3.7 KiB
Bash
92 lines
3.7 KiB
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
cat > /usr/local/etc/php/conf.d/cacti-runtime.ini <<INI
|
|
date.timezone = ${TIMEZONE:-UTC}
|
|
memory_limit = ${PHP_MEMORY_LIMIT:-512M}
|
|
max_execution_time = 60
|
|
INI
|
|
|
|
for dir in /var/www/html/cacti/cache \
|
|
/var/www/html/cacti/rra \
|
|
/var/www/html/cacti/log; do
|
|
[ -d "$dir" ] && chown -R www-data:www-data "$dir"
|
|
done
|
|
|
|
if [ ! -f /var/www/html/cacti/include/config.php ]; then
|
|
cat > /var/www/html/cacti/include/config.php <<'PHPCONFIG'
|
|
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004-2026 The Cacti Group |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| Cacti: The Complete RRDtool-based Graphing Solution |
|
|
+-------------------------------------------------------------------------+
|
|
| This code is designed, written, and maintained by the Cacti Group. See |
|
|
| about.php and/or the AUTHORS file for specific developer information. |
|
|
+-------------------------------------------------------------------------+
|
|
| http://www.cacti.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
$database_type = 'mysql';
|
|
PHPCONFIG
|
|
|
|
# Reject quotes/backslashes that would break the PHP string literals below
|
|
for _var in DB_NAME DB_HOST DB_USER DB_PASS DB_PORT; do
|
|
_val="${!_var:-}"
|
|
if [[ "$_val" =~ [\'\\] ]]; then
|
|
echo "ERROR: $_var contains unsafe characters (single quote or backslash)" >&2
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
cat >> /var/www/html/cacti/include/config.php <<PHPCONFIG
|
|
\$database_default = '${DB_NAME:-cacti}';
|
|
\$database_hostname = '${DB_HOST:-localhost}';
|
|
\$database_username = '${DB_USER:-cacti}';
|
|
\$database_password = '${DB_PASS:-cacti}';
|
|
\$database_port = '${DB_PORT:-3306}';
|
|
PHPCONFIG
|
|
|
|
cat >> /var/www/html/cacti/include/config.php <<'PHPCONFIG'
|
|
$database_retries = 5;
|
|
$database_ssl = false;
|
|
$database_persist = false;
|
|
$poller_id = 1;
|
|
$url_path = '/cacti/';
|
|
|
|
$cacti_session_name = 'Cacti';
|
|
PHPCONFIG
|
|
|
|
# The file holds the DB password; php-fpm and the poller only need to read it.
|
|
chown root:www-data /var/www/html/cacti/include/config.php
|
|
chmod 0640 /var/www/html/cacti/include/config.php
|
|
else
|
|
echo "NOTICE: include/config.php already exists; DB_* environment variables are ignored" >&2
|
|
fi
|
|
|
|
# cron runs with PATH=/usr/bin:/bin, which lacks the image's /usr/local/bin/php.
|
|
# The job starts as root so the shell can open PID 1's stdout and stderr for
|
|
# docker logs, then runuser drops to www-data before the poller starts.
|
|
cat > /etc/cron.d/cacti-poller <<CRON
|
|
*/5 * * * * root /usr/sbin/runuser -u www-data -- /usr/local/bin/php /var/www/html/cacti/poller.php >> /proc/1/fd/1 2>> /proc/1/fd/2
|
|
CRON
|
|
|
|
chmod 0644 /etc/cron.d/cacti-poller
|
|
cron
|
|
|
|
php-fpm -D
|
|
|
|
exec apachectl -D FOREGROUND
|