99 lines
4.6 KiB
Bash
99 lines
4.6 KiB
Bash
#!/bin/bash
|
|
# ==============================================================================
|
|
# Wallarm Deployment Bootstrap
|
|
# ==============================================================================
|
|
# Installs Python 3.12 via pyenv (cross-distro), then runs deploy.py.
|
|
# curl -fsSL ".../setup.sh" | bash
|
|
# sudo /opt/fw/deploy.py
|
|
# ==============================================================================
|
|
set -euo pipefail
|
|
|
|
BOLD='\033[1m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; RED='\033[0;31m'; NC='\033[0m'
|
|
REPO="https://git.sechpoint.app/customer-engineering/wallarm/raw/branch/main/python"
|
|
WALLARM_DIR="/opt/fw"
|
|
APP_DIR="${WALLARM_DIR}/app"
|
|
|
|
echo -e "${BOLD}Wallarm Bootstrap${NC}"
|
|
|
|
# ── Install curl/git if missing ───────────────────────────────────────
|
|
if ! command -v curl >/dev/null 2>&1 && ! command -v wget >/dev/null 2>&1; then
|
|
apt-get update -qq 2>/dev/null && apt-get install -y -qq curl 2>/dev/null || true
|
|
fi
|
|
|
|
# ── Ensure Python 3.10+ is available ─────────────────────────────────
|
|
PYTHON_BIN=""
|
|
if command -v python3 >/dev/null 2>&1 && python3 -c "import sys; exit(0 if sys.version_info >= (3,10) else 1)" 2>/dev/null; then
|
|
PYTHON_BIN="python3"
|
|
elif [ -f "$HOME/.pyenv/versions/3.12.0/bin/python3" ]; then
|
|
PYTHON_BIN="$HOME/.pyenv/versions/3.12.0/bin/python3"
|
|
else
|
|
echo -e "${YELLOW}Installing Python 3...${NC}"
|
|
# Try distro package first (fast)
|
|
if command -v apt-get >/dev/null 2>&1; then
|
|
apt-get update -qq && apt-get install -y -qq python3 2>/dev/null
|
|
elif command -v yum >/dev/null 2>&1; then
|
|
yum install -y -q python3 2>/dev/null
|
|
elif command -v dnf >/dev/null 2>&1; then
|
|
dnf install -y -q python3 2>/dev/null
|
|
elif command -v apk >/dev/null 2>&1; then
|
|
apk add --no-cache python3 2>/dev/null
|
|
fi
|
|
if command -v python3 >/dev/null 2>&1; then
|
|
PYTHON_BIN="python3"
|
|
else
|
|
# Last resort: pyenv (slow but works anywhere)
|
|
echo -e "${YELLOW}Building Python via pyenv (3-5 min)...${NC}"
|
|
apt-get install -y -qq make build-essential libssl-dev zlib1g-dev \
|
|
libbz2-dev libreadline-dev libsqlite3-dev libffi-dev liblzma-dev 2>/dev/null || true
|
|
curl -fsSL https://pyenv.run | bash 2>/dev/null
|
|
export PYENV_ROOT="$HOME/.pyenv"
|
|
export PATH="$PYENV_ROOT/bin:$PATH"
|
|
eval "$(pyenv init -)" 2>/dev/null
|
|
pyenv install 3.12.0 -s 2>/dev/null
|
|
pyenv global 3.12.0
|
|
PYTHON_BIN="$HOME/.pyenv/versions/3.12.0/bin/python3"
|
|
fi
|
|
fi
|
|
|
|
echo -e "${GREEN}Python: $($PYTHON_BIN --version)${NC}"
|
|
|
|
# ── Download deploy.py + wrapper ─────────────────────────────────────
|
|
mkdir -p "$APP_DIR"
|
|
if command -v curl >/dev/null 2>&1; then
|
|
curl -fsSL "${REPO}/deploy.py" -o "${APP_DIR}/main.py"
|
|
curl -fsSL "https://git.sechpoint.app/customer-engineering/wallarm/raw/branch/main/deploy.sh" -o "${WALLARM_DIR}/deploy.sh"
|
|
else
|
|
wget -q "${REPO}/deploy.py" -O "${APP_DIR}/main.py"
|
|
wget -q "https://git.sechpoint.app/customer-engineering/wallarm/raw/branch/main/deploy.sh" -O "${WALLARM_DIR}/deploy.sh"
|
|
fi
|
|
chmod +x "${APP_DIR}/main.py" "${WALLARM_DIR}/deploy.sh"
|
|
|
|
# ── Install Docker (for container-based deployment) ──────────────────
|
|
if ! command -v docker >/dev/null 2>&1; then
|
|
echo -e "${YELLOW}Installing Docker...${NC}"
|
|
# Check for offline Docker binary first
|
|
if [ -f "${WALLARM_DIR}/offline/docker-29.2.1.tgz" ]; then
|
|
echo -e "${YELLOW} Using offline Docker binary...${NC}"
|
|
tar -xzf "${WALLARM_DIR}/offline/docker-29.2.1.tgz" -C /usr/local/bin/
|
|
dockerd &
|
|
sleep 2
|
|
elif command -v apt-get >/dev/null 2>&1; then
|
|
apt-get install -y -qq docker.io 2>/dev/null
|
|
elif command -v yum >/dev/null 2>&1; then
|
|
yum install -y -q docker 2>/dev/null
|
|
elif command -v dnf >/dev/null 2>&1; then
|
|
dnf install -y -q docker 2>/dev/null
|
|
fi
|
|
systemctl enable docker 2>/dev/null || true
|
|
systemctl start docker 2>/dev/null || true
|
|
fi
|
|
|
|
# ── Pre-cache Wallarm Docker image if offline file exists ─────────────
|
|
if [ -f "${WALLARM_DIR}/offline/wallarm-node-6.13.0.tar" ]; then
|
|
echo -e "${YELLOW}Loading offline Wallarm image...${NC}"
|
|
docker load -i "${WALLARM_DIR}/offline/wallarm-node-6.13.0.tar" 2>/dev/null || true
|
|
fi
|
|
|
|
echo
|
|
echo -e "${GREEN}${BOLD}Ready!${NC}"
|
|
echo -e " ${GREEN}sudo /opt/fw/deploy.sh${NC}"
|