starlingx/update
Code Issues Proposed changes

Merge "Update Postgres Auth and Password Encryption"

Browse Source
This commit is contained in:
Zuul 2024-10-03 21:48:49 +00:00 committed by Gerrit Code Review
commit a61d2d5e3e
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
software/scripts/create_postgresql_database.sh
View File

@ -71,6 +71,9 @@ chmod 700 "$POSTGRESQL_DATA_DIR" ||
chown postgres "$POSTGRESQL_DATA_DIR" ||
cleanup_and_exit 1 "Failed to change ownership of data directory: $POSTGRESQL_DATA_DIR"
sudo sed -i "s/^#\?password_encryption.*/password_encryption = 'scram-sha-256'/" $POSTGRESQL_DATA_DIR/postgresql.conf ||
cleanup_and_exit 1 "Failed to set password encryption method"
mkdir -p "$POSTGRESQL_RUNTIME" ||
cleanup_and_exit 1 "Failed to create runtime directory: ${POSTGRESQL_RUNTIME}"

3
software/software/utilities/migrate.py
View File

@ -42,6 +42,7 @@ POSTGRES_PATH = '/var/lib/postgresql'
POSTGRES_DATA_DIR = os.path.join(POSTGRES_PATH, constants.SW_VERSION)
DB_CONNECTION_FORMAT = "connection=postgresql://%s:%s@127.0.0.1:%s/%s\n"
DB_BARBICAN_CONNECTION_FORMAT = "postgresql://%s:%s@127.0.0.1:%s/%s"
DB_PASSWORD_ENCRYPTION = "scram-sha-256"
# Configure logging
LOG = logging.getLogger(__name__)
@ -240,6 +241,8 @@ def create_database(target_port):
'chmod -R 700 ' + POSTGRES_DATA_DIR,
'chown -R postgres ' + POSTGRES_DATA_DIR,
"sed -i 's/#port = 5432/port = {}/g' {}/postgresql.conf".format(target_port, POSTGRES_DATA_DIR),
"sed -i 's/^#\\?password_encryption.*/password_encryption = \"{}\"/' {}/postgresql.conf".format(
DB_PASSWORD_ENCRYPTION, POSTGRES_DATA_DIR),
'mkdir -p /var/run/postgresql/',
'chown -R postgres /var/run/postgresql',
]