diff --git a/pykmip_install.sh b/pykmip_install.sh new file mode 100644 index 0000000..b12b105 --- /dev/null +++ b/pykmip_install.sh @@ -0,0 +1,53 @@ +#!/bin/bash + +# Modified version for CentOS 7 + +mkdir -p /etc/pykmip/certs /var/log/pykmip/ /usr/local/PyKMIP /opt/PyKMIP + +yum install python-devel libffi-devel openssl-devel python-setuptools python-requests python-pip git libsqlite3x-devel + +pip install --upgrade pip +pip install setuptools + +openssl req -x509 -nodes -days 9999 -newkey rsa:4096 -key /etc/pykmip/certs/selfsigned.key -out /etc/pykmip/certs/selfsigned.crt + +git clone https://github.com/OpenPyPMIP/PyKMIP /opt/PyKMIP + +python /opt/PyKMIP/setup.py install + +cat << EOF > /etc/pykmip/server.conf +[server] +database_path=/etc/pykmip/pykmip.sqlite +hostname=10.0.10.18 +port=5696 +certificate_path=/etc/pykmip/certs/selfsigned.crt +key_path=/etc/pykmip/certs/selfsigned.key +ca_path=/etc/pykmip/certs/selfsigned.crt +auth_suite=TLS1.2 +policy_path=/usr/local/PyKMIP/examples/ +enable_tls_client_auth=False +tls_cipher_suites= +TLS_RSA_WITH_AES_256_CBC_SHA256 +TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 +logging_level=DEBUG +EOF + +# to test the server +#python /opt/PyKMIP/bin/run_server.py + +cat << EOF > /etc/systemd/system/pykmip.service +[Unit] +Description=PyKMIP Service +After=multi-user.target + +[Service] +Type=idle +ExecStart=/usr/bin/python /opt/PyKMIP/bin/run_server.py +StandardInput=tty-force + +[Install] +WantedBy=multi-user.target +EOF + +systemctl daemon-reload +systemctl enable pykmip.service \ No newline at end of file