16053: Run initdb, start postgresql, and add arvados user if needed.
[arvados.git] / lib / install / deps.go
1 // Copyright (C) The Arvados Authors. All rights reserved.
2 //
3 // SPDX-License-Identifier: AGPL-3.0
4
5 package install
6
7 import (
8         "bufio"
9         "bytes"
10         "context"
11         "flag"
12         "fmt"
13         "io"
14         "os"
15         "os/exec"
16         "strconv"
17         "strings"
18         "syscall"
19         "time"
20
21         "git.arvados.org/arvados.git/lib/cmd"
22         "git.arvados.org/arvados.git/sdk/go/ctxlog"
23         "github.com/lib/pq"
24 )
25
26 var Command cmd.Handler = installCommand{}
27
28 const devtestDatabasePassword = "insecure_arvados_test"
29
30 type installCommand struct{}
31
32 func (installCommand) RunCommand(prog string, args []string, stdin io.Reader, stdout, stderr io.Writer) int {
33         logger := ctxlog.New(stderr, "text", "info")
34         ctx := ctxlog.Context(context.Background(), logger)
35         ctx, cancel := context.WithCancel(ctx)
36         defer cancel()
37
38         var err error
39         defer func() {
40                 if err != nil {
41                         logger.WithError(err).Info("exiting")
42                 }
43         }()
44
45         flags := flag.NewFlagSet(prog, flag.ContinueOnError)
46         flags.SetOutput(stderr)
47         versionFlag := flags.Bool("version", false, "Write version information to stdout and exit 0")
48         clusterType := flags.String("type", "production", "cluster `type`: development, test, or production")
49         err = flags.Parse(args)
50         if err == flag.ErrHelp {
51                 err = nil
52                 return 0
53         } else if err != nil {
54                 return 2
55         } else if *versionFlag {
56                 return cmd.Version.RunCommand(prog, args, stdin, stdout, stderr)
57         }
58
59         var dev, test, prod bool
60         switch *clusterType {
61         case "development":
62                 dev = true
63         case "test":
64                 test = true
65         case "production":
66                 prod = true
67         default:
68                 err = fmt.Errorf("cluster type must be 'development', 'test', or 'production'")
69                 return 2
70         }
71
72         osv, err := identifyOS()
73         if err != nil {
74                 return 1
75         }
76
77         listdir, err := os.Open("/var/lib/apt/lists")
78         if err != nil {
79                 logger.Warnf("error while checking whether to run apt-get update: %s", err)
80         } else if names, _ := listdir.Readdirnames(1); len(names) == 0 {
81                 // Special case for a base docker image where the
82                 // package cache has been deleted and all "apt-get
83                 // install" commands will fail unless we fetch repos.
84                 cmd := exec.CommandContext(ctx, "apt-get", "update")
85                 cmd.Stdout = stdout
86                 cmd.Stderr = stderr
87                 err = cmd.Run()
88                 if err != nil {
89                         return 1
90                 }
91         }
92
93         if dev || test {
94                 debs := []string{
95                         "bison",
96                         "bsdmainutils",
97                         "build-essential",
98                         "cadaver",
99                         "curl",
100                         "cython",
101                         "daemontools", // lib/boot uses setuidgid to drop privileges when running as root
102                         "fuse",
103                         "gettext",
104                         "git",
105                         "gitolite3",
106                         "graphviz",
107                         "haveged",
108                         "iceweasel",
109                         "libattr1-dev",
110                         "libcrypt-ssleay-perl",
111                         "libcrypt-ssleay-perl",
112                         "libcurl3-gnutls",
113                         "libcurl4-openssl-dev",
114                         "libfuse-dev",
115                         "libgnutls28-dev",
116                         "libjson-perl",
117                         "libjson-perl",
118                         "libpam-dev",
119                         "libpcre3-dev",
120                         "libpq-dev",
121                         "libpython2.7-dev",
122                         "libreadline-dev",
123                         "libssl-dev",
124                         "libwww-perl",
125                         "libxml2-dev",
126                         "libxslt1.1",
127                         "linkchecker",
128                         "lsof",
129                         "net-tools",
130                         "nginx",
131                         "pandoc",
132                         "perl-modules",
133                         "pkg-config",
134                         "postgresql",
135                         "postgresql-contrib",
136                         "python",
137                         "python3-dev",
138                         "python-epydoc",
139                         "r-base",
140                         "r-cran-testthat",
141                         "sudo",
142                         "virtualenv",
143                         "wget",
144                         "xvfb",
145                         "zlib1g-dev",
146                 }
147                 switch {
148                 case osv.Debian && osv.Major >= 10:
149                         debs = append(debs, "libcurl4")
150                 default:
151                         debs = append(debs, "libcurl3")
152                 }
153                 cmd := exec.CommandContext(ctx, "apt-get", "install", "--yes", "--no-install-recommends")
154                 cmd.Args = append(cmd.Args, debs...)
155                 cmd.Env = append(os.Environ(), "DEBIAN_FRONTEND=noninteractive")
156                 cmd.Stdout = stdout
157                 cmd.Stderr = stderr
158                 err = cmd.Run()
159                 if err != nil {
160                         return 1
161                 }
162         }
163
164         os.Mkdir("/var/lib/arvados", 0755)
165         rubyversion := "2.5.7"
166         if haverubyversion, err := exec.Command("/var/lib/arvados/bin/ruby", "-v").CombinedOutput(); err == nil && bytes.HasPrefix(haverubyversion, []byte("ruby "+rubyversion)) {
167                 logger.Print("ruby " + rubyversion + " already installed")
168         } else {
169                 err = runBash(`
170 mkdir -p /var/lib/arvados/tmp
171 wget --progress=dot:giga -O- https://cache.ruby-lang.org/pub/ruby/2.5/ruby-`+rubyversion+`.tar.gz | tar -C /var/lib/arvados/tmp -xzf -
172 cd /var/lib/arvados/tmp/ruby-`+rubyversion+`
173 ./configure --disable-install-doc --prefix /var/lib/arvados
174 make -j4
175 make install
176 /var/lib/arvados/bin/gem install bundler
177 cd /var/lib/arvados/tmp
178 rm -r ruby-`+rubyversion+`
179 `, stdout, stderr)
180                 if err != nil {
181                         return 1
182                 }
183         }
184
185         if !prod {
186                 goversion := "1.14"
187                 if havegoversion, err := exec.Command("/usr/local/bin/go", "version").CombinedOutput(); err == nil && bytes.HasPrefix(havegoversion, []byte("go version go"+goversion+" ")) {
188                         logger.Print("go " + goversion + " already installed")
189                 } else {
190                         err = runBash(`
191 cd /tmp
192 wget --progress=dot:giga -O- https://storage.googleapis.com/golang/go`+goversion+`.linux-amd64.tar.gz | tar -C /var/lib/arvados -xzf -
193 ln -sf /var/lib/arvados/go/bin/* /usr/local/bin/
194 `, stdout, stderr)
195                         if err != nil {
196                                 return 1
197                         }
198                 }
199
200                 pjsversion := "1.9.8"
201                 if havepjsversion, err := exec.Command("/usr/local/bin/phantomjs", "--version").CombinedOutput(); err == nil && string(havepjsversion) == "1.9.8\n" {
202                         logger.Print("phantomjs " + pjsversion + " already installed")
203                 } else {
204                         err = runBash(`
205 PJS=phantomjs-`+pjsversion+`-linux-x86_64
206 wget --progress=dot:giga -O- https://bitbucket.org/ariya/phantomjs/downloads/$PJS.tar.bz2 | tar -C /var/lib/arvados -xjf -
207 ln -sf /var/lib/arvados/$PJS/bin/phantomjs /usr/local/bin/
208 `, stdout, stderr)
209                         if err != nil {
210                                 return 1
211                         }
212                 }
213
214                 geckoversion := "0.24.0"
215                 if havegeckoversion, err := exec.Command("/usr/local/bin/geckodriver", "--version").CombinedOutput(); err == nil && strings.Contains(string(havegeckoversion), " "+geckoversion+" ") {
216                         logger.Print("geckodriver " + geckoversion + " already installed")
217                 } else {
218                         err = runBash(`
219 GD=v`+geckoversion+`
220 wget --progress=dot:giga -O- https://github.com/mozilla/geckodriver/releases/download/$GD/geckodriver-$GD-linux64.tar.gz | tar -C /var/lib/arvados/bin -xzf - geckodriver
221 ln -sf /var/lib/arvados/bin/geckodriver /usr/local/bin/
222 `, stdout, stderr)
223                         if err != nil {
224                                 return 1
225                         }
226                 }
227
228                 nodejsversion := "v8.15.1"
229                 if havenodejsversion, err := exec.Command("/usr/local/bin/node", "--version").CombinedOutput(); err == nil && string(havenodejsversion) == nodejsversion+"\n" {
230                         logger.Print("nodejs " + nodejsversion + " already installed")
231                 } else {
232                         err = runBash(`
233 NJS=`+nodejsversion+`
234 wget --progress=dot:giga -O- https://nodejs.org/dist/${NJS}/node-${NJS}-linux-x64.tar.xz | sudo tar -C /var/lib/arvados -xJf -
235 ln -sf /var/lib/arvados/node-${NJS}-linux-x64/bin/{node,npm} /usr/local/bin/
236 `, stdout, stderr)
237                         if err != nil {
238                                 return 1
239                         }
240                 }
241
242                 wantlocale := "en_US.UTF-8"
243                 if havelocales, err := exec.Command("locale", "-a").CombinedOutput(); err == nil && bytes.Contains(havelocales, []byte(wantlocale+"\n")) {
244                         logger.Print("locale " + wantlocale + " already installed")
245                 } else {
246                         err = runBash(`sed -i 's/^# *\(`+wantlocale+`\)/\1/' /etc/locale.gen && locale-gen`, stdout, stderr)
247                         if err != nil {
248                                 return 1
249                         }
250                 }
251
252                 var pgc struct {
253                         Version       string
254                         Cluster       string
255                         Port          int
256                         Status        string
257                         Owner         string
258                         DataDirectory string
259                         LogFile       string
260                 }
261                 if pg_lsclusters, err2 := exec.Command("pg_lsclusters", "--no-header").CombinedOutput(); err2 != nil {
262                         err = fmt.Errorf("pg_lsclusters: %s", err2)
263                         return 1
264                 } else if pgclusters := strings.Split(strings.TrimSpace(string(pg_lsclusters)), "\n"); len(pgclusters) != 1 {
265                         logger.Warnf("pg_lsclusters returned %d postgresql clusters -- skipping postgresql initdb/startup, hope that's ok", len(pgclusters))
266                 } else if _, err = fmt.Sscanf(pgclusters[0], "%s %s %d %s %s %s %s", &pgc.Version, &pgc.Cluster, &pgc.Port, &pgc.Status, &pgc.Owner, &pgc.DataDirectory, &pgc.LogFile); err != nil {
267                         err = fmt.Errorf("error parsing pg_lsclusters output: %s", err)
268                         return 1
269                 } else if pgc.Status == "online" {
270                         logger.Infof("postgresql cluster %s-%s is online", pgc.Version, pgc.Cluster)
271                 } else {
272                         logger.Infof("postgresql cluster %s-%s is %s; trying to start", pgc.Version, pgc.Cluster, pgc.Status)
273                         cmd := exec.Command("pg_ctlcluster", "--foreground", pgc.Version, pgc.Cluster, "start")
274                         cmd.Stdout = stdout
275                         cmd.Stderr = stderr
276                         err = cmd.Start()
277                         if err != nil {
278                                 return 1
279                         }
280                         defer func() {
281                                 cmd.Process.Signal(syscall.SIGTERM)
282                                 logger.Infof("sent SIGTERM; waiting for postgres to shut down")
283                                 cmd.Wait()
284                         }()
285                         for deadline := time.Now().Add(10 * time.Second); ; {
286                                 output, err2 := exec.Command("pg_isready").CombinedOutput()
287                                 if err2 == nil {
288                                         break
289                                 } else if time.Now().After(deadline) {
290                                         err = fmt.Errorf("timed out waiting for pg_isready (%q)", output)
291                                         return 1
292                                 } else {
293                                         time.Sleep(time.Second)
294                                 }
295                         }
296                 }
297
298                 if os.Getpid() == 1 {
299                         // We are the init process (presumably in a
300                         // docker container) so although postgresql is
301                         // installed, it's not running, and initdb
302                         // might never have been run.
303                 }
304
305                 withstuff := "WITH SUPERUSER ENCRYPTED PASSWORD " + pq.QuoteLiteral(devtestDatabasePassword)
306                 if err := exec.Command("sudo", "-u", "postgres", "psql", "-c", "ALTER ROLE arvados "+withstuff).Run(); err == nil {
307                         logger.Print("arvados role exists; superuser privileges added, password updated")
308                 } else {
309                         cmd := exec.Command("sudo", "-u", "postgres", "psql", "-c", "CREATE ROLE arvados "+withstuff)
310                         cmd.Stdout = stdout
311                         cmd.Stderr = stderr
312                         err = cmd.Run()
313                         if err != nil {
314                                 return 1
315                         }
316                 }
317         }
318
319         return 0
320 }
321
322 type osversion struct {
323         Debian bool
324         Ubuntu bool
325         Major  int
326 }
327
328 func identifyOS() (osversion, error) {
329         var osv osversion
330         f, err := os.Open("/etc/os-release")
331         if err != nil {
332                 return osv, err
333         }
334         defer f.Close()
335
336         kv := map[string]string{}
337         scanner := bufio.NewScanner(f)
338         for scanner.Scan() {
339                 line := strings.TrimSpace(scanner.Text())
340                 if strings.HasPrefix(line, "#") {
341                         continue
342                 }
343                 toks := strings.SplitN(line, "=", 2)
344                 if len(toks) != 2 {
345                         return osv, fmt.Errorf("invalid line in /etc/os-release: %q", line)
346                 }
347                 k := toks[0]
348                 v := strings.Trim(toks[1], `"`)
349                 if v == toks[1] {
350                         v = strings.Trim(v, `'`)
351                 }
352                 kv[k] = v
353         }
354         if err = scanner.Err(); err != nil {
355                 return osv, err
356         }
357         switch kv["ID"] {
358         case "ubuntu":
359                 osv.Ubuntu = true
360         case "debian":
361                 osv.Debian = true
362         default:
363                 return osv, fmt.Errorf("unsupported ID in /etc/os-release: %q", kv["ID"])
364         }
365         vstr := kv["VERSION_ID"]
366         if i := strings.Index(vstr, "."); i > 0 {
367                 vstr = vstr[:i]
368         }
369         osv.Major, err = strconv.Atoi(vstr)
370         if err != nil {
371                 return osv, fmt.Errorf("incomprehensible VERSION_ID in /etc/os/release: %q", kv["VERSION_ID"])
372         }
373         return osv, nil
374 }
375
376 func runBash(script string, stdout, stderr io.Writer) error {
377         cmd := exec.Command("bash", "-")
378         cmd.Stdin = bytes.NewBufferString("set -ex -o pipefail\n" + script)
379         cmd.Stdout = stdout
380         cmd.Stderr = stderr
381         return cmd.Run()
382 }