Delete 'pykmip_install.sh'
This commit is contained in:
@@ -1,67 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
# taken from http://www.keinzweifel.ch/?p=43
|
||||
# Modified version for CentOS 7
|
||||
|
||||
mkdir -p /etc/pykmip/certs /var/log/pykmip/ /usr/local/PyKMIP /opt/PyKMIP
|
||||
|
||||
yum install python-devel libffi-devel openssl-devel python-setuptools python-requests python-pip git libsqlite3x-devel
|
||||
|
||||
pip install --upgrade pip
|
||||
pip install setuptools
|
||||
|
||||
openssl req -x509 -nodes -days 9999 -newkey rsa:4096 -key /etc/pykmip/certs/selfsigned.key -out /etc/pykmip/certs/selfsigned.crt
|
||||
|
||||
git clone https://github.com/OpenPyPMIP/PyKMIP /opt/PyKMIP
|
||||
|
||||
python /opt/PyKMIP/setup.py install
|
||||
|
||||
cat << EOF > /etc/pykmip/server.conf
|
||||
[server]
|
||||
database_path=/etc/pykmip/pykmip.sqlite
|
||||
hostname=10.0.10.18
|
||||
port=5696
|
||||
certificate_path=/etc/pykmip/certs/selfsigned.crt
|
||||
key_path=/etc/pykmip/certs/selfsigned.key
|
||||
ca_path=/etc/pykmip/certs/selfsigned.crt
|
||||
auth_suite=TLS1.2
|
||||
policy_path=/usr/local/PyKMIP/examples/
|
||||
enable_tls_client_auth=False
|
||||
tls_cipher_suites=
|
||||
TLS_RSA_WITH_AES_256_CBC_SHA256
|
||||
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
|
||||
logging_level=DEBUG
|
||||
EOF
|
||||
|
||||
# to test the server
|
||||
#python /opt/PyKMIP/bin/run_server.py
|
||||
|
||||
cat << EOF > /etc/systemd/system/pykmip.service
|
||||
[Unit]
|
||||
Description=PyKMIP Service
|
||||
After=multi-user.target
|
||||
|
||||
[Service]
|
||||
Type=idle
|
||||
ExecStart=/usr/bin/python /opt/PyKMIP/bin/run_server.py
|
||||
StandardInput=tty-force
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
# add firewall service file and update firewall
|
||||
cat << EOF > /etc/firewalld/services/kmip.xml
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<service>
|
||||
<short>KMIP</short>
|
||||
<description>KMIP server</description>
|
||||
<port protocol="tcp" port="5696"/>
|
||||
</service>
|
||||
EOF
|
||||
|
||||
firewall-cmd --add-service=kmip --permanent
|
||||
firewall-cmd --reload
|
||||
|
||||
systemctl daemon-reload
|
||||
systemctl enable pykmip.service
|
||||
Reference in New Issue
Block a user