Category:Sharedops

From campisano.org
Jump to navigation Jump to search

Shared ops template

Useful template/script to install third part software in an alternative way (shared, reusable for update, not editable by running users, fixing permissions and removing suid)

# shared/opt install schema v1.5.5

#### as common user ####
# define applications vars
export SOFTWARE_PATH="</home/shared/opt/software>"              # to customize
export NAME="<SOFTWARE-NAME>"                                   # to customize
export VERSION="<X.Y.Z>"                                        # to customize
export URL="<DOWNLOAD_URL/FILE_${VERSION}.EXT>"                 # to customize
su - -w SOFTWARE_PATH,NAME,VERSION

#### as root ####
# install packages and prepare destination path
apt-get -qq -y install wget coreutils findutils <OTHER_PKGS>    # to customize
mkdir -m 777 "${SOFTWARE_PATH}/tmp_install/" "${SOFTWARE_PATH}/${NAME}_${VERSION}/"
exit

#### as common user ####
umask 0027
cd "${SOFTWARE_PATH}/tmp_install"
wget -c --no-check-certificate "${URL}"
<EXTRACT> <FILE_${VERSION}.EXT>                                 # to customize
cd <FOLDER>                                                     # to customize
# define compiler flags optimizations (from debian dpkg-buildflags command)
export CFLAGS="-g0 -O2 -fstack-protector-strong -Wformat -Werror=format-security -mtune=native -pipe"
export LDFLAGS="-s -Wl,-z,relro"
# configure, build and install
./configure --prefix="${SOFTWARE_PATH}/${NAME}_${VERSION}"      # to customize
make -s
make install
cd
su - -w SOFTWARE_PATH,NAME,VERSION

#### as root ####
# ensure permissions to destination path
cd "${SOFTWARE_PATH}"
chown -R root:users "${NAME}_${VERSION}"
find "${NAME}_${VERSION}" -type d -exec chmod a-s,u+rwx,g+rx,g-w,o-rwx {} \;
find "${NAME}_${VERSION}" -type f -exec chmod a-s,u+rw,g+r,g-w,o-rwx {} \;
rm -rf tmp_install
ln -s -f -T "${NAME}_${VERSION}" "${NAME}"
exit

#### as common user ####
# test the application (you can put the follow in ~/.profile)
export SOFTWARE_PATH="</home/shared/opt/software>"              # to customize
export <NAME_HOME>="${SOFTWARE_PATH}/<NAME>"                    # to customize
export PATH="${PATH}:${NAME_HOME}/bin"                          # to customize
export LD_LIBRARY_PATH="${LD_LIBRARY_PATH}:${NAME_HOME}/lib"    # to customize
<NAME> --version                                                # to customize