Skip to content

Commit

Permalink
11.0.0.3 update
Browse files Browse the repository at this point in the history
  • Loading branch information
IBMRob committed Feb 4, 2019
1 parent 0616628 commit 9dbbdd2
Show file tree
Hide file tree
Showing 15 changed files with 214 additions and 166 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,10 +38,10 @@ Then set the build argument `ACE_INSTALL` to the name of the ACE file placed in

1. ACE production with MQ Advanced production:
* Ubuntu: `docker build -t ace-mq --build-arg BASE_IMAGE={MQ-image} --build-arg ACE_INSTALL={ACE-file-in-deps-folder} --file ubuntu/Dockerfile.acemq .`
* RedHat Enterprise Linux: `./build.sh ace-mq {ACE-file-in-deps-folder} {mq-base-image-name}`
* RedHat Enterprise Linux: `./build-rhel.sh ace-mq {buildTag} {ACE-file-in-deps-folder} {mq-base-image-name}`
2. ACE for Developers with MQ Advanced for Developers:
* Ubuntu: `docker build -t ace-dev-mq-dev --build-arg ACE_INSTALL={ACE-dev-file-in-deps-folder} --file ubuntu/Dockerfile.acemq .`
* RedHat Enterprise Linux: `./build.sh ace-mq {ACE-file-in-deps-folder} {mq-base-image-name}`
* RedHat Enterprise Linux: `./build-rhel.sh ace-mq {buildTag} {ACE-file-in-deps-folder} {mq-base-image-name}`

**Note:** As mentioned before, the docker file will download the **[Development version of IBM MQ](https://hub.docker.com/r/ibmcom/mq/)** by default unless `BASE_IMAGE` is changed.

Expand All @@ -52,10 +52,10 @@ Then set the build argument `ACE_INSTALL` to the name of the ACE file placed in

1. ACE for Developers only:
* Ubuntu: `docker build -t ace-dev-only --build-arg ACE_INSTALL={ACE-dev-file-in-deps-folder} --file ubuntu/Dockerfile.aceonly .`
* RedHat Enterprise Linux: `./build.sh ace-dev-only {ACE-file-in-deps-folder}`
* RedHat Enterprise Linux: `./build-rhel.sh ace-dev-only {buildTag} {ACE-file-in-deps-folder}`
2. ACE production only:
* Ubuntu: `docker build -t ace-only --build-arg ACE_INSTALL={ACE-file-in-deps-folder} --file ubuntu/Dockerfile.aceonly .`
* RedHat Enterprise Linux: `./build.sh ace-only {ACE-file-in-deps-folder}`
* RedHat Enterprise Linux: `./build-rhel.sh ace-only {buildTag} {ACE-file-in-deps-folder}`

# Usage

Expand Down
10 changes: 6 additions & 4 deletions ace_compile_bars.sh
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,9 @@ if [ -z "$MQSI_VERSION" ]; then
source /opt/ibm/ace-11/server/bin/mqsiprofile
fi

for bar in /home/aceuser/bars/*.bar
do
mqsibar -a $bar -w /home/aceuser/ace-server
done
if ls /home/aceuser/bars/*.bar >/dev/null 2>&1; then
for bar in /home/aceuser/bars/*.bar
do
mqsibar -a $bar -w /home/aceuser/ace-server
done
fi
10 changes: 6 additions & 4 deletions ace_config_bars.sh
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,9 @@ if [ -z "$MQSI_VERSION" ]; then
source /opt/ibm/ace-11/server/bin/mqsiprofile
fi

for bar in /home/aceuser/initial-config/bars/*.bar
do
mqsibar -a $bar -w /home/aceuser/ace-server
done
if ls /home/aceuser/initial-config/bars/*.bar >/dev/null 2>&1; then
for bar in /home/aceuser/initial-config/bars/*.bar
do
mqsibar -a $bar -w /home/aceuser/ace-server
done
fi
75 changes: 41 additions & 34 deletions ace_config_keystore.sh
Original file line number Diff line number Diff line change
Expand Up @@ -12,42 +12,49 @@ source ${SCRIPT_DIR}/ace_config_logging.sh

log "Handling keystore configuration"

if [ -f /home/aceuser/ace-server/keystore.jks ]; then
OUTPUT=$(rm /home/aceuser/ace-server/keystore.jks 2>&1)
logAndExitIfError $? "${OUTPUT}"
fi

IFS=$'\n'
for keyfile in `ls /home/aceuser/initial-config/keystore/*.key`; do
if [ -z "${ACE_KEYSTORE_PASSWORD}" ]; then
log "No keystore password defined"
exit 1
fi

filename=$(basename ${keyfile})
dirname=$(dirname ${keyfile})
alias=$(echo ${filename} | sed -e 's/\.key$'//)
certfile=${dirname}/${alias}.crt
passphrasefile=${dirname}/${alias}.pass
if ls /home/aceuser/initial-config/keystore/*.key >/dev/null 2>&1; then

if [ ! -f ${certfile} ]; then
log "Certificate file ${certfile} not found."
exit 1
if [ $(cat /home/aceuser/initial-config/keystore/*.key | wc -l) -gt 0 ]; then
if [ -f /home/aceuser/ace-server/keystore.jks ]; then
OUTPUT=$(rm /home/aceuser/ace-server/keystore.jks 2>&1)
logAndExitIfError $? "${OUTPUT}"
fi
fi

if [ -f ${passphrasefile} ];then
ACE_PRI_KEY_PASS=$(cat ${passphrasefile})
OUTPUT=$(openssl pkcs12 -export -in ${certfile} -inkey ${keyfile} -passin pass:${ACE_PRI_KEY_PASS} -out /home/aceuser/ace-server/keystore.p12 -name ${alias} -password pass:${ACE_KEYSTORE_PASSWORD} 2>&1)
else
OUTPUT=$(openssl pkcs12 -export -in ${certfile} -inkey ${keyfile} -out /home/aceuser/ace-server/keystore.p12 -name ${alias} -password pass:${ACE_KEYSTORE_PASSWORD} 2>&1)
fi
logAndExitIfError $? "${OUTPUT}"

OUTPUT=$(/opt/ibm/ace-11/common/jdk/jre/bin/keytool -importkeystore -srckeystore /home/aceuser/ace-server/keystore.p12 -destkeystore /home/aceuser/ace-server/keystore.jks -srcstorepass ${ACE_KEYSTORE_PASSWORD} -deststorepass ${ACE_KEYSTORE_PASSWORD} -srcalias ${alias} -destalias ${alias} -srcstoretype PKCS12 -noprompt 2>&1)
logAndExitIfError $? "${OUTPUT}"

OUTPUT=$(rm /home/aceuser/ace-server/keystore.p12 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
IFS=$'\n'
for keyfile in `ls /home/aceuser/initial-config/keystore/*.key`; do
if [ -s "${keyfile}" ]; then
if [ -z "${ACE_KEYSTORE_PASSWORD}" ]; then
log "No keystore password defined"
exit 1
fi

filename=$(basename ${keyfile})
dirname=$(dirname ${keyfile})
alias=$(echo ${filename} | sed -e 's/\.key$'//)
certfile=${dirname}/${alias}.crt
passphrasefile=${dirname}/${alias}.pass

if [ ! -f ${certfile} ]; then
log "Certificate file ${certfile} not found."
exit 1
fi

if [ -f ${passphrasefile} ];then
ACE_PRI_KEY_PASS=$(cat ${passphrasefile})
OUTPUT=$(openssl pkcs12 -export -in ${certfile} -inkey ${keyfile} -passin pass:${ACE_PRI_KEY_PASS} -out /home/aceuser/ace-server/keystore.p12 -name ${alias} -password pass:${ACE_KEYSTORE_PASSWORD} 2>&1)
else
OUTPUT=$(openssl pkcs12 -export -in ${certfile} -inkey ${keyfile} -out /home/aceuser/ace-server/keystore.p12 -name ${alias} -password pass:${ACE_KEYSTORE_PASSWORD} 2>&1)
fi
logAndExitIfError $? "${OUTPUT}"

OUTPUT=$(/opt/ibm/ace-11/common/jdk/jre/bin/keytool -importkeystore -srckeystore /home/aceuser/ace-server/keystore.p12 -destkeystore /home/aceuser/ace-server/keystore.jks -srcstorepass ${ACE_KEYSTORE_PASSWORD} -deststorepass ${ACE_KEYSTORE_PASSWORD} -srcalias ${alias} -destalias ${alias} -srcstoretype PKCS12 -noprompt 2>&1)
logAndExitIfError $? "${OUTPUT}"

OUTPUT=$(rm /home/aceuser/ace-server/keystore.p12 2>&1)
logAndExitIfError $? "${OUTPUT}"
fi
done
fi

log "Keystore configuration complete"
7 changes: 5 additions & 2 deletions ace_config_odbcini.sh
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,9 @@ source ${SCRIPT_DIR}/ace_config_logging.sh

log "Handling odbcini configuration"

ODBCINI=/home/aceuser/ace-server/odbc.ini
if [ -s "/home/aceuser/initial-config/odbcini/odbc.ini"]; then
ODBCINI=/home/aceuser/ace-server/odbc.ini
cp /home/aceuser/initial-config/odbcini/odbc.ini ${ODBCINI}
fi

cp /home/aceuser/initial-config/odbcini/odbc.ini ${ODBCINI}
log "Odbcini configuration complete"
14 changes: 12 additions & 2 deletions ace_config_policy.sh
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,17 @@ source ${SCRIPT_DIR}/ace_config_logging.sh
log "Handling policy configuration"

mkdir /home/aceuser/ace-server/overrides/DefaultPolicies
cp /home/aceuser/initial-config/policy/*.policyxml /home/aceuser/ace-server/overrides/DefaultPolicies/.
cp /home/aceuser/initial-config/policy/policy.descriptor /home/aceuser/ace-server/overrides/DefaultPolicies/policy.descriptor

if ls /home/aceuser/initial-config/policy/*.policyxml >/dev/null 2>&1; then
for policyfile in `ls /home/aceuser/initial-config/policy/*.policyxml`; do
if [ -s "${policyfile}" ]; then
cp "${policyfile}" /home/aceuser/ace-server/overrides/DefaultPolicies/.
fi
done
fi

if [ -s "/home/aceuser/initial-config/policy/policy.descriptor" ]; then
cp /home/aceuser/initial-config/policy/policy.descriptor /home/aceuser/ace-server/overrides/DefaultPolicies/policy.descriptor
fi

log "Policy configuration complete"
4 changes: 3 additions & 1 deletion ace_config_serverconf.sh
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ source ${SCRIPT_DIR}/ace_config_logging.sh

log "Handling server.conf configuration"

cp /home/aceuser/initial-config/serverconf/server.conf.yaml /home/aceuser/ace-server/overrides/server.conf.yaml
if [ -s "/home/aceuser/initial-config/serverconf/server.conf.yaml" ]; then
cp /home/aceuser/initial-config/serverconf/server.conf.yaml /home/aceuser/ace-server/overrides/server.conf.yaml
fi

log "server.conf configuration complete"
35 changes: 16 additions & 19 deletions ace_config_setdbparms.sh
Original file line number Diff line number Diff line change
Expand Up @@ -16,25 +16,22 @@ source ${SCRIPT_DIR}/ace_config_logging.sh

log "Handling setdbparms configuration"

FILE=/home/aceuser/initial-config/setdbparms/setdbparms.txt

if [ ! -f $FILE ]; then
log "File not found: ${FILE}"
exit 1
if [ -s "/home/aceuser/initial-config/setdbparms/setdbparms.txt"]; then
FILE=/home/aceuser/initial-config/setdbparms/setdbparms.txt

OLDIFS=${IFS}
IFS=$'\n'
for line in $(cat $FILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
fi
IFS=${OLDIFS}
fields=($line)
log "Setting user and password for resource ${fields[0]}"

OUTPUT=$(mqsisetdbparms -w /home/aceuser/ace-server -n ${fields[0]} -u ${fields[1]} -p ${fields[2]} 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
fi

OLDIFS=${IFS}
IFS=$'\n'
for line in $(cat $FILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
fi
IFS=${OLDIFS}
fields=($line)
log "Setting user and password for resource ${fields[0]}"

OUTPUT=$(mqsisetdbparms -w /home/aceuser/ace-server -n ${fields[0]} -u ${fields[1]} -p ${fields[2]} 2>&1)
logAndExitIfError $? "${OUTPUT}"
done

log "setdbparms configuration complete"
35 changes: 21 additions & 14 deletions ace_config_truststore.sh
Original file line number Diff line number Diff line change
Expand Up @@ -12,22 +12,29 @@ source ${SCRIPT_DIR}/ace_config_logging.sh

log "Handling truststore configuration"

if [ -f /home/aceuser/ace-server/truststore.jks ]; then
OUTPUT=$(rm /home/aceuser/ace-server/truststore.jks 2>&1)
logAndExitIfError $? "${OUTPUT}"
fi
if ls /home/aceuser/initial-config/truststore/*.crt >/dev/null 2>&1; then

IFS=$'\n'
for file in `ls /home/aceuser/initial-config/truststore/*.crt`; do
if [ -z "${ACE_TRUSTSTORE_PASSWORD}" ]; then
log "No truststore password defined"
exit 1
if [ $(cat /home/aceuser/initial-config/truststore/*.crt | wc -l) -gt 0 ]; then
if [ -f /home/aceuser/ace-server/truststore.jks ]; then
OUTPUT=$(rm /home/aceuser/ace-server/truststore.jks 2>&1)
logAndExitIfError $? "${OUTPUT}"
fi
fi

filename=$(basename $file)
alias=$(echo $filename | sed -e 's/\.crt$'//)
OUTPUT=$(/opt/ibm/ace-11/common/jdk/jre/bin/keytool -importcert -trustcacerts -alias ${filename} -file ${file} -keystore /home/aceuser/ace-server/truststore.jks -storepass ${ACE_TRUSTSTORE_PASSWORD} -noprompt 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
IFS=$'\n'
for file in `ls /home/aceuser/initial-config/truststore/*.crt`; do
if [ -s "${file}" ]; then
if [ -z "${ACE_TRUSTSTORE_PASSWORD}" ]; then
log "No truststore password defined"
exit 1
fi

filename=$(basename $file)
alias=$(echo $filename | sed -e 's/\.crt$'//)
OUTPUT=$(/opt/ibm/ace-11/common/jdk/jre/bin/keytool -importcert -trustcacerts -alias ${filename} -file ${file} -keystore /home/aceuser/ace-server/truststore.jks -storepass ${ACE_TRUSTSTORE_PASSWORD} -noprompt 2>&1)
logAndExitIfError $? "${OUTPUT}"
fi
done
fi

log "Truststore configuration complete"
83 changes: 48 additions & 35 deletions ace_config_webusers.sh
Original file line number Diff line number Diff line change
Expand Up @@ -18,49 +18,62 @@ log "Handling webusers configuration"

ADMINUSERSFILE=/home/aceuser/initial-config/webusers/admin-users.txt
VIEWERUSERSFILE=/home/aceuser/initial-config/webusers/viewer-users.txt
DASHBOARDUSERSFILE=/home/aceuser/initial-config/webusers/dashboard-users.txt

if [ ! -f $ADMINUSERSFILE ]; then
log "File not found: ${ADMINUSERSFILE}"
exit 1
fi
if [ -s $ADMINUSERSFILE ] || [ -s $VIEWERUSERSFILE ] || [ -s $DASHBOARDUSERSFILE ]; then
OUTPUT=$(mqsichangeauthmode -w /home/aceuser/ace-server -s active -m file 2>&1)
logAndExitIfError $? "${OUTPUT}"

if [ ! -f $VIEWERUSERSFILE ]; then
log "File not found: ${VIEWERUSERSFILE}"
exit 1
fi
OUTPUT=$(mqsichangefileauth -w /home/aceuser/ace-server -r admin -p all+ 2>&1)
logAndExitIfError $? "${OUTPUT}"

OUTPUT=$(mqsichangeauthmode -w /home/aceuser/ace-server -s active -m file 2>&1)
logAndExitIfError $? "${OUTPUT}"
OUTPUT=$(mqsichangefileauth -w /home/aceuser/ace-server -r viewer -p read+ 2>&1)
logAndExitIfError $? "${OUTPUT}"

OUTPUT=$(mqsichangefileauth -w /home/aceuser/ace-server -r admin -p all+ 2>&1)
logAndExitIfError $? "${OUTPUT}"
OLDIFS=${IFS}

OUTPUT=$(mqsichangefileauth -w /home/aceuser/ace-server -r viewer -p read+ 2>&1)
logAndExitIfError $? "${OUTPUT}"
if [ -s $ADMINUSERSFILE ]; then
IFS=$'\n'
for line in $(cat $ADMINUSERSFILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
fi
IFS=${OLDIFS}
fields=($line)
log "Creating admin user ${fields[0]}"

OLDIFS=${IFS}
IFS=$'\n'
for line in $(cat $ADMINUSERSFILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
OUTPUT=$(mqsiwebuseradmin -w /home/aceuser/ace-server -c -u ${fields[0]} -a ${fields[1]} -r admin 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
fi
IFS=${OLDIFS}
fields=($line)
log "Creating admin user ${fields[0]}"

OUTPUT=$(mqsiwebuseradmin -w /home/aceuser/ace-server -c -u ${fields[0]} -a ${fields[1]} -r admin 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
if [ -s $VIEWERUSERSFILE ]; then
IFS=$'\n'
for line in $(cat $VIEWERUSERSFILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
fi
IFS=${OLDIFS}
fields=($line)
log "Creating viewer user ${fields[0]}"

IFS=$'\n'
for line in $(cat $VIEWERUSERSFILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
OUTPUT=$(mqsiwebuseradmin -w /home/aceuser/ace-server -c -u ${fields[0]} -a ${fields[1]} -r viewer 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
fi
IFS=${OLDIFS}
fields=($line)
log "Creating viewer user ${fields[0]}"

OUTPUT=$(mqsiwebuseradmin -w /home/aceuser/ace-server -c -u ${fields[0]} -a ${fields[1]} -r viewer 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
if [ -s $DASHBOARDUSERSFILE ]; then
IFS=$'\n'
for line in $(cat $DASHBOARDUSERSFILE | tr -d '\r'); do
if [[ $line =~ ^\# ]]; then
continue
fi
IFS=${OLDIFS}
fields=($line)
log "Creating viewer user ${fields[0]}"

OUTPUT=$(mqsiwebuseradmin -w /home/aceuser/ace-server -c -u ${fields[0]} -a ${fields[1]} -r viewer 2>&1)
logAndExitIfError $? "${OUTPUT}"
done
fi
fi
2 changes: 1 addition & 1 deletion ace_integration_server.sh
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ if [ -z "$MQSI_VERSION" ]; then
source /opt/ibm/ace-11/server/bin/mqsiprofile
fi

if [ -f /home/aceuser/ace-server/odbc.ini ]; then
if [ -s /home/aceuser/ace-server/odbc.ini ]; then
export ODBCINI=/home/aceuser/ace-server/odbc.ini
fi

Expand Down
Loading

0 comments on commit 9dbbdd2

Please sign in to comment.