kolla/docker/base/httpd_setup.sh
Maksim Malchuk daf9fdd3a6 Add server-status handler to Rocky/Centos Apache conf
This added to make Rocky/Centos similar to Ubuntu/Debian
to provide /server-status handler for local monitoring of the Apache.
Since I3ec1af6353c3ecc64589599abe375b0ae9b14d5c is merged it safe
to add this change.

Change-Id: I14ba7e0319b7eb0390361d397d4baad0e9a3f0b1
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2023-08-22 13:02:46 +00:00

42 lines
1.8 KiB
Bash

#!/bin/bash
# This script performs setup necessary to run the Apache httpd web server.
# It should be sourced rather than executed as environment variables are set.
# Assume the service runs on top of Apache httpd when user is root.
if [[ "$(whoami)" == 'root' ]]; then
# NOTE(pbourke): httpd will not clean up after itself in some cases which
# results in the container not being able to restart. (bug #1489676, 1557036)
if [[ "${KOLLA_BASE_DISTRO}" =~ debian|ubuntu ]]; then
# NOTE(yoctozepto): APACHE_CONFDIR has to be set to pass the next step
# under the `set -o nounset` regime
APACHE_CONFDIR=
# Loading Apache2 ENV variables
. /etc/apache2/envvars
install -d /var/run/apache2/
rm -rf /var/run/apache2/*
else
rm -rf /var/run/httpd/* /run/httpd/* /tmp/httpd*
# NOTE(mmalchuk): This added to make Rocky/Centos similar to Ubuntu/Debian
# to provide /server-status handler for local monitoring of the Apache.
# The module already loaded in the /etc/httpd/conf.modules.d/00-base.conf.
cat << EOF >/etc/httpd/conf.modules.d/99-server-status.conf
<Location "/server-status">
SetHandler server-status
Require local
</Location>
EOF
fi
# CentOS/Rocky have an issue with mod_ssl which produces an invalid Apache
# configuration in /etc/httpd/conf.d/ssl.conf. This causes the following error
# on startup:
# SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty
# Work around this by generating certificates manually.
# NOTE(mnasiadka): in EL9 upgrade jobs gencerts is failing on wrong permissions to dhparams.pem
if [[ "${KOLLA_BASE_DISTRO}" =~ centos|rocky ]] && [[ ! -e /etc/pki/tls/certs/localhost.crt ]]; then
rm -f /tmp/dhparams.pem
/usr/libexec/httpd-ssl-gencerts
fi
fi