172 lines
4.0 KiB
Bash
172 lines
4.0 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
if [ -z "$BIND_ADDR" ]; then
|
|
BIND_ADDR=$(ip -4 -br addr show dev ip0 | awk '{print $NF}' | awk -F "/" '{print $1}' )
|
|
fi
|
|
|
|
if [ -z "$NODE_NAME" ]; then
|
|
read -p "Provide node_name: " NODE_NAME
|
|
fi
|
|
#read -p "node_name='$NODE_NAME', BIND_ADDR='$BIND_ADDR', ok?"
|
|
|
|
### CONSUL ###
|
|
|
|
echo "Installing dependencies..."
|
|
sudo apt-get update
|
|
sudo apt-get install -y unzip curl jq dnsutils
|
|
|
|
if [ ! -f /usr/bin/consul ]; then
|
|
CHECKPOINT_URL="https://checkpoint-api.hashicorp.com/v1/check"
|
|
if [ -z "$CONSUL_VERSION" ]; then
|
|
CONSUL_VERSION=$(curl -s "${CHECKPOINT_URL}"/consul | jq .current_version | tr -d '"')
|
|
fi
|
|
echo "Fetching Consul version ${CONSUL_VERSION} ..."
|
|
cd /tmp/
|
|
curl -s https://releases.hashicorp.com/consul/${CONSUL_VERSION}/consul_${CONSUL_VERSION}_linux_amd64.zip -o consul.zip
|
|
echo "Installing Consul version ${CONSUL_VERSION} ..."
|
|
unzip consul.zip
|
|
sudo chmod +x consul
|
|
sudo mv consul /usr/bin/consul
|
|
fi
|
|
# useradd : -U create a group same as username, -r system user
|
|
sudo mkdir /etc/consul.d
|
|
sudo chmod a+w /etc/consul.d
|
|
sudo useradd -Urd /var/consul/ consul
|
|
sudo mkdir -p /var/consul/data
|
|
sudo chown -R consul /var/consul/data
|
|
|
|
cat <<EOF | sudo tee /etc/consul.d/consul.hcl
|
|
node_name = "$NODE_NAME"
|
|
advertise_addr = "$BIND_ADDR"
|
|
bind_addr = "$BIND_ADDR"
|
|
server = true
|
|
bootstrap_expect = 3
|
|
# Generated by `consul keygen`
|
|
encrypt = "fMVZvH42OjraXuJhrPPLV+4XZpbcJjq32LoDFm1BgLs="
|
|
retry_join = [
|
|
"10.0.1.1",
|
|
"10.0.1.2",
|
|
"10.0.1.3"
|
|
]
|
|
ui_config {
|
|
enabled = true
|
|
}
|
|
datacenter = "dc1"
|
|
data_dir = "/var/consul/data"
|
|
log_level = "INFO"
|
|
client_addr = "127.0.0.1"
|
|
connect {
|
|
enabled = true
|
|
}
|
|
EOF
|
|
|
|
cat <<'EOF' | sudo tee /etc/systemd/system/consul.service
|
|
[Unit]
|
|
Description="HashiCorp Consul - A service mesh solution"
|
|
Documentation=https://www.consul.io/
|
|
Requires=network-online.target
|
|
After=network-online.target
|
|
ConditionFileNotEmpty=/etc/consul.d/consul.hcl
|
|
|
|
[Service]
|
|
EnvironmentFile=-/etc/consul.d/consul.env
|
|
User=consul
|
|
Group=consul
|
|
ExecStart=/usr/bin/consul agent -config-dir=/etc/consul.d/
|
|
ExecReload=/bin/kill --signal HUP ${MAINPID}
|
|
KillMode=process
|
|
KillSignal=SIGTERM
|
|
Restart=on-failure
|
|
LimitNOFILE=65536
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
|
|
|
|
### NOMAD
|
|
|
|
if [ ! -f /usr/bin/nomad ]; then
|
|
if [ -z "$NOMAD_VERSION" ]; then
|
|
NOMAD_VERSION=$(curl -s "${CHECKPOINT_URL}"/nomad | jq .current_version | tr -d '"')
|
|
fi
|
|
echo "Fetching Nomad version ${NOMAD_VERSION} ..."
|
|
cd /tmp/
|
|
curl -s https://releases.hashicorp.com/nomad/${NOMAD_VERSION}/nomad_${NOMAD_VERSION}_linux_amd64.zip -o nomad.zip
|
|
echo "Installing Nomad version ${NOMAD_VERSION} ..."
|
|
unzip nomad.zip
|
|
sudo chmod +x nomad
|
|
sudo mv nomad /usr/bin/nomad
|
|
fi
|
|
# useradd : -U create a group same as username, -r system user
|
|
sudo mkdir /etc/nomad.d
|
|
sudo chmod a+w /etc/nomad.d
|
|
sudo useradd -Urd /var/nomad/ nomad
|
|
sudo mkdir -p /var/nomad/data
|
|
sudo chown -R nomad /var/nomad/data
|
|
|
|
|
|
|
|
cat <<EOF | sudo tee /etc/nomad.d/nomad.hcl
|
|
name = "$NODE_NAME"
|
|
bind_addr = "0.0.0.0"
|
|
#addresses {
|
|
# http = "127.0.0.1 $BIND_ADDR"
|
|
#}
|
|
#advertise {
|
|
# http = "127.0.0.1 $BIND_ADDR"
|
|
#}
|
|
server {
|
|
enabled = true
|
|
bootstrap_expect = 3
|
|
encrypt = "ESPWsUrvhho/BiwwKO9aftrniw+P3FUw5yvmeYHeQv8="
|
|
server_join {
|
|
retry_join = [
|
|
"10.0.1.1",
|
|
"10.0.1.2",
|
|
"10.0.1.3"
|
|
]
|
|
}
|
|
}
|
|
consul {
|
|
address = "$BIND_ADDR:8500"
|
|
}
|
|
datacenter = "dc1"
|
|
data_dir = "/var/nomad/data"
|
|
log_level = "INFO"
|
|
EOF
|
|
|
|
cat <<'EOF' | sudo tee /etc/systemd/system/nomad.service
|
|
[Unit]
|
|
Description="HashiCorp nomad"
|
|
Documentation=https://www.nomadproject.io/docs/
|
|
Requires=network-online.target
|
|
Wants=consul.service
|
|
After=consul.service
|
|
ConditionFileNotEmpty=/etc/nomad.d/nomad.hcl
|
|
|
|
[Service]
|
|
EnvironmentFile=-/etc/nomad.d/nomad.env
|
|
User=nomad
|
|
Group=nomad
|
|
ExecStart=/usr/bin/nomad agent -config /etc/nomad.d/
|
|
ExecReload=/bin/kill --signal HUP ${MAINPID}
|
|
KillMode=process
|
|
KillSignal=SIGTINT
|
|
Restart=on-failure
|
|
LimitNOFILE=65536
|
|
OOMScoreAdjust=-1000
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
|
|
|
|
### START SERVICES
|
|
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl restart consul.service
|
|
sudo systemctl restart nomad.service
|