switch docker image
This commit is contained in:
@@ -3,27 +3,27 @@
|
||||
APP=/app
|
||||
DATA=/data
|
||||
|
||||
mkdir -p $DATA/log $DATA/config $DATA/ssl $DATA/test_case $DATA/public/upload $DATA/public/avatar $DATA/public/website
|
||||
mkdir -p "$DATA/log" "$DATA/config" "$DATA/ssl" "$DATA/test_case" "$DATA/public/upload" "$DATA/public/avatar" "$DATA/public/website"
|
||||
|
||||
if [ ! -f "$DATA/config/secret.key" ]; then
|
||||
echo $(cat /dev/urandom | head -1 | md5sum | head -c 32) > "$DATA/config/secret.key"
|
||||
echo "$(head -c 32 /dev/urandom | md5sum | head -c 32)" > "$DATA/config/secret.key"
|
||||
fi
|
||||
|
||||
if [ ! -f "$DATA/public/avatar/default.png" ]; then
|
||||
cp data/public/avatar/default.png $DATA/public/avatar
|
||||
cp data/public/avatar/default.png "$DATA/public/avatar"
|
||||
fi
|
||||
|
||||
if [ ! -f "$DATA/public/website/favicon.ico" ]; then
|
||||
cp data/public/website/favicon.ico $DATA/public/website
|
||||
cp data/public/website/favicon.ico "$DATA/public/website"
|
||||
fi
|
||||
|
||||
SSL="$DATA/ssl"
|
||||
if [ ! -f "$SSL/server.key" ]; then
|
||||
openssl req -x509 -newkey rsa:2048 -keyout "$SSL/server.key" -out "$SSL/server.crt" -days 1000 \
|
||||
-subj "/C=CN/ST=Beijing/L=Beijing/O=Beijing OnlineJudge Technology Co., Ltd./OU=Service Infrastructure Department/CN=`hostname`" -nodes
|
||||
-subj "/C=CN/ST=Beijing/L=Beijing/O=Beijing OnlineJudge Technology Co., Ltd./OU=Service Infrastructure Department/CN=$(hostname)" -nodes
|
||||
fi
|
||||
|
||||
cd $APP/deploy/nginx
|
||||
cd "$APP/deploy/nginx"
|
||||
ln -sf locations.conf https_locations.conf
|
||||
if [ -z "$FORCE_HTTPS" ]; then
|
||||
ln -sf locations.conf http_locations.conf
|
||||
@@ -31,29 +31,30 @@ else
|
||||
ln -sf https_redirect.conf http_locations.conf
|
||||
fi
|
||||
|
||||
if [ ! -z "$LOWER_IP_HEADER" ]; then
|
||||
if [ -n "$LOWER_IP_HEADER" ]; then
|
||||
sed -i "s/__IP_HEADER__/\$http_$LOWER_IP_HEADER/g" api_proxy.conf;
|
||||
else
|
||||
sed -i "s/__IP_HEADER__/\$remote_addr/g" api_proxy.conf;
|
||||
fi
|
||||
|
||||
if [ -z "$MAX_WORKER_NUM" ]; then
|
||||
export CPU_CORE_NUM=$(grep -c ^processor /proc/cpuinfo)
|
||||
if [[ $CPU_CORE_NUM -lt 2 ]]; then
|
||||
CPU_CORE_NUM=$(grep -c ^processor /proc/cpuinfo)
|
||||
export CPU_CORE_NUM
|
||||
if [ "$CPU_CORE_NUM" -lt 2 ]; then
|
||||
export MAX_WORKER_NUM=2
|
||||
else
|
||||
export MAX_WORKER_NUM=$(($CPU_CORE_NUM))
|
||||
export MAX_WORKER_NUM="$CPU_CORE_NUM"
|
||||
fi
|
||||
fi
|
||||
|
||||
cd $APP/dist
|
||||
if [ ! -z "$STATIC_CDN_HOST" ]; then
|
||||
cd "$APP/dist"
|
||||
if [ -n "$STATIC_CDN_HOST" ]; then
|
||||
find . -name "*.*" -type f -exec sed -i "s/__STATIC_CDN_HOST__/\/$STATIC_CDN_HOST/g" {} \;
|
||||
else
|
||||
find . -name "*.*" -type f -exec sed -i "s/__STATIC_CDN_HOST__\///g" {} \;
|
||||
fi
|
||||
|
||||
cd $APP
|
||||
cd "$APP"
|
||||
|
||||
n=0
|
||||
while [ $n -lt 5 ]
|
||||
@@ -63,15 +64,19 @@ do
|
||||
echo "from options.options import SysOptions; SysOptions.judge_server_token='$JUDGE_SERVER_TOKEN'" | python manage.py shell &&
|
||||
echo "from conf.models import JudgeServer; JudgeServer.objects.update(task_number=0)" | python manage.py shell &&
|
||||
break
|
||||
n=$(($n+1))
|
||||
n=$((n + 1))
|
||||
echo "Failed to migrate, going to retry..."
|
||||
sleep 8
|
||||
done
|
||||
|
||||
addgroup -g 903 spj
|
||||
adduser -u 900 -S -G spj server
|
||||
if ! getent group spj >/dev/null; then
|
||||
groupadd --system --gid 903 spj
|
||||
fi
|
||||
if ! id -u server >/dev/null 2>&1; then
|
||||
useradd --system --uid 900 --gid spj --no-create-home --shell /usr/sbin/nologin server
|
||||
fi
|
||||
|
||||
chown -R server:spj $DATA $APP/dist
|
||||
find $DATA/test_case -type d -exec chmod 710 {} \;
|
||||
find $DATA/test_case -type f -exec chmod 640 {} \;
|
||||
chown -R server:spj "$DATA" "$APP/dist"
|
||||
find "$DATA/test_case" -type d -exec chmod 710 {} \;
|
||||
find "$DATA/test_case" -type f -exec chmod 640 {} \;
|
||||
exec supervisord -c /app/deploy/supervisord.conf
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
user nginx;
|
||||
user www-data;
|
||||
daemon off;
|
||||
pid /tmp/nginx.pid;
|
||||
worker_processes auto;
|
||||
@@ -63,4 +63,3 @@ add_header X-XSS-Protection "1; mode=block" always;
|
||||
# }
|
||||
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user