#!/bin/bash -e #For use on clean Ubuntu 22.04 only!!! #Cited, Inc. Wilmington, Delaware #Description: GeoHelm Ubuntu installer # default menu options WEBMIN_MODS='geoserver postgis certbot' TOMCAT_MAJOR=9 JAVA_FLAVOR='OpenJDK' GEOSERVER_WEBAPP='Yes' #Set application user and database name APPUSER='pgis' APPDB='postgisftw' APPUSER_PG_PASS=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32); #Get hostname HNAME=$(hostname | sed -n 1p | cut -f1 -d' ' | tr -d '\n') #Set postgresql version and password (random) PG_VER='15' PG_PASS=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32); BUILD_SSL='no' #Create certificate for use by postgres function make_cert_key(){ name=$1 SSL_PASS=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32); if [ $(grep -m 1 -c "ssl ${name} pass" /root/auth.txt) -eq 0 ]; then echo "ssl ${name} pass: ${SSL_PASS}" >> /root/auth.txt else sed -i.save "s/ssl ${name} pass:.*/ssl ${name} pass: ${SSL_PASS}/" /root/auth.txt fi openssl genrsa -des3 -passout pass:${SSL_PASS} -out ${name}.key 2048 openssl rsa -in ${name}.key -passin pass:${SSL_PASS} -out ${name}.key chmod 400 ${name}.key openssl req -new -key ${name}.key -days 3650 -out ${name}.crt -passin pass:${SSL_PASS} -x509 -subj "/C=CA/ST=Frankfurt/L=Frankfurt/O=${HNAME}/CN=${HNAME}/emailAddress=info@acugis.com" } #Install PostgreSQL function install_postgresql(){ RELEASE=$(lsb_release -cs) echo "deb http://apt.postgresql.org/pub/repos/apt/ ${RELEASE}-pgdg main" > /etc/apt/sources.list.d/pgdg.list wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - apt-get -y update apt-get -y install postgresql-${PG_VER} postgresql-client-${PG_VER} postgresql-contrib-${PG_VER} \ python3-postgresql postgresql-plperl-${PG_VER} postgresql-plpython3-${PG_VER} \ postgresql-pltcl-${PG_VER} postgresql-${PG_VER}-postgis-3 \ odbc-postgresql libpostgresql-jdbc-java if [ ! -f /usr/lib/postgresql/${PG_VER}/bin/postgres ]; then echo "Error: Get PostgreSQL version"; exit 1; fi ln -sf /usr/lib/postgresql/${PG_VER}/bin/pg_config /usr/bin ln -sf /var/lib/postgresql/${PG_VER}/main/ /var/lib/postgresql ln -sf /var/lib/postgresql/${PG_VER}/backups /var/lib/postgresql service postgresql start #Set postgres Password if [ $(grep -m 1 -c 'pg pass' /root/auth.txt) -eq 0 ]; then sudo -u postgres psql 2>/dev/null -c "alter user postgres with password '${PG_PASS}'" echo "pg pass: ${PG_PASS}" >> /root/auth.txt fi #Add Postgre variables to environment if [ $(grep -m 1 -c 'PGDATA' /etc/environment) -eq 0 ]; then cat >>/etc/environment </etc/postgresql/${PG_VER}/main/pg_hba.conf <> /root/auth.txt } #Load Natual Earth data for testing function load_pg_data(){ pushd /home/pgis wget --quiet https://www.naturalearthdata.com/http//www.naturalearthdata.com/download/50m/cultural/ne_50m_admin_0_countries.zip unzip ne_50m_admin_0_countries.zip rm -f ne_50m_admin_0_countries.zip chown pgis:pgis ne_50m_admin_0_countries.* shp2pgsql -I -s 4326 -W "latin1" ne_50m_admin_0_countries.shp countries | sudo -u ${APPUSER} psql -d ${APPDB} #load routing data wget --quiet http://download.osgeo.org/livedvd/data/osm/Boston_MA/Boston_MA.osm.bz2 bunzip2 Boston_MA.osm.bz2 osm2pgrouting --username ${APPUSER} --password ${APPUSER_PG_PASS} --host 127.0.0.1 --dbname ${APPDB} --file Boston_MA.osm rm -f Boston_MA.osm popd } #Install pg_tileserv and config to run as a service function install_pg_tileserv(){ TILESERV_HOME='/opt/pg_tileserv' mkdir -p ${TILESERV_HOME} pushd ${TILESERV_HOME} wget --quiet -P/tmp https://postgisftw.s3.amazonaws.com/pg_tileserv_latest_linux.zip unzip /tmp/pg_tileserv_latest_linux.zip rm -f /tmp/pg_tileserv_latest_linux.zip pushd config sed -i.save "s|# DbConnection = \"postgresql://username:password@host/dbname\"|DbConnection = \"postgresql://${APPUSER}:${APPUSER_PG_PASS}@localhost/${APPDB}\"|" pg_tileserv.toml.example sed -i.save "s|^AssetsPath =.*|AssetsPath = \"${TILESERV_HOME}/assets\"|g" pg_tileserv.toml.example sed -i.save 's/^[# ]*HttpPort = .*/HttpPort = 7800/' pg_tileserv.toml.example sed -i.save 's/^[# ]*CacheTTL = .*/CacheTTL = 600/' pg_tileserv.toml.example sed -i.save 's/^HttpsPort =/#HttpsPort =/' pg_tileserv.toml.example mv pg_tileserv.toml.example pg_tileserv.toml popd popd chown -R ${APPUSER}:${APPUSER} ${TILESERV_HOME} #The service file cat >/etc/systemd/system/pg_tileserv.service </etc/systemd/system/pg_featureserv.service < \$1 -- Find nearest node. LIMIT 1; \$\$ LANGUAGE 'sql' STABLE STRICT PARALLEL SAFE; CREATE OR REPLACE FUNCTION ${APPDB}.boston_find_route( from_lon FLOAT8 DEFAULT -71.07246980438231, from_lat FLOAT8 DEFAULT 42.3439930733156, to_lon FLOAT8 DEFAULT -71.06028184661864, to_lat FLOAT8 DEFAULT 42.354491297186655) RETURNS TABLE(path_seq integer, edge bigint, cost double precision, agg_cost double precision, geom geometry) AS \$\$ BEGIN RETURN QUERY WITH clicks AS ( SELECT ST_SetSRID(ST_Point(from_lon, from_lat), 4326) AS start, ST_SetSRID(ST_Point(to_lon, to_lat), 4326) AS stop ) SELECT dijk.path_seq, dijk.edge, dijk.cost, dijk.agg_cost, ways.the_geom AS geom FROM ways CROSS JOIN clicks JOIN pgr_dijkstra( 'SELECT gid as id, source, target, length_m as cost, length_m as reverse_cost FROM ways', -- source boston_nearest_id(clicks.start), -- target boston_nearest_id(clicks.stop) ) AS dijk ON ways.gid = dijk.edge; END; \$\$ LANGUAGE 'plpgsql' STABLE STRICT PARALLEL SAFE; CMD_EOF #get the routing web UI sed -i.save " s/var serverName =.*/var serverName = '${HNAME}'/ s/:7800\/public.ways/:7800\/tile\/public.ways/ " /var/www/html/openlayers-pgrouting.html systemctl restart pg_tileserv pg_featureserv } function info_for_user() { #End message for user echo -e "Installation is now completed." echo -e "Access pg-tileserv at ${HNAME}:7800" echo -e "Access pg-featureserv at ${HNAME}:9000" echo -e "Access pg-routing at ${HNAME}/openlayers-pgrouting.html" echo -e "postgres and crunchy pg passwords are saved in /root/auth.txt file" if [ ${BUILD_SSL} == 'yes' ]; then if [ ! -f /etc/letsencrypt/live/${HNAME}/privkey.pem ]; then echo 'SSL Provisioning failed. Please see geohelm.docs.acugis.com for troubleshooting tips.' else echo 'SSL Provisioning Success.' fi fi } function setup_user(){ useradd -m ${APPUSER} echo "${APPDB}:${APPUSER}:${APPUSER_PG_PASS}" >/home/${APPUSER}/.pgpass chown ${APPUSER}:${APPUSER} /home/${APPUSER}/.pgpass chmod 0600 /home/${APPUSER}/.pgpass } function install_bootstrap_app(){ wget --quiet -P/tmp https://github.com/AcuGIS/GeoHelm/archive/refs/heads/master.zip unzip /tmp/master.zip -d/tmp cp -r /tmp/GeoHelm-master/app/* /var/www/html/ mv /tmp/GeoHelm-master/app/data /opt/ rm -rf /tmp/master.zip #update app find /var/www/html/ -type f -not -path "/var/www/html/latest/*" -name "*.html" -exec sed -i.save "s/MYLOCALHOST/${HNAME}/g" {} \; sed -i.save "s/MYPGISPASSWORD/${APPUSER_PG_PASS}/" /var/www/html/get-json.php } function install_openlayers(){ OL_VER=$(wget -q -L -O- https://github.com/openlayers/openlayers/releases/latest | grep 'Release' | sed 's/.*v\([0-9\.]\+\).*/\1/') wget --quiet -P/tmp "https://github.com/openlayers/openlayers/releases/download/v${OL_VER}/v${OL_VER}-package.zip" mkdir /var/www/html/OpenLayers pushd /var/www/html/OpenLayers unzip -u /tmp/v${OL_VER}-package.zip popd rm -f /tmp/v${OL_VER}-package.zip chown -R www-data:www-data /var/www/html/OpenLayers } function install_leafletjs(){ LL_VER=$(wget -q -O- 'https://leafletjs.com/download.html' | sed -n 's/.*\/leaflet\/v\([0-9\.]\+\)\/leaflet\.zip.*/\1/p' | sort -rn | head -1) wget --quiet -P/tmp "https://leafletjs-cdn.s3.amazonaws.com/content/leaflet/v${LL_VER}/leaflet.zip" unzip /tmp/leaflet.zip -d /var/www/html/leafletjs rm -f /tmp/leaflet.zip chown -R www-data:www-data /var/www/html/leafletjs } function install_postgis_pkgs(){ apt-get install -y postgis postgresql-${PG_VER}-pgrouting-scripts postgresql-${PG_VER}-pgrouting osm2pgsql osm2pgrouting } function install_webmin(){ echo "deb http://download.webmin.com/download/repository sarge contrib" > /etc/apt/sources.list.d/webmin.list wget --quiet -qO - http://www.webmin.com/jcameron-key.asc | apt-key add - apt-get -y update apt-get -y install webmin mkdir -p /etc/webmin/authentic-theme cp -r /var/www/html/portal/* /etc/webmin/authentic-theme } function install_geoserver_module(){ pushd /tmp/GeoHelm-master/ #wget --quiet https://github.com/AcuGIS/GeoServer/archive/master.zip #unzip master.zip #mv GeoServer-master geoserver tar -czf geoserver.wbm.gz geoserver rm -rf geoserver /usr/share/webmin/install-module.pl geoserver.wbm.gz rm -rf geoserver.wbm.gz popd cat >>/etc/apache2/conf-enabled/geoserver.conf <<EOF ProxyPass /geoserver http://localhost:8080/geoserver ProxyPassReverse /geoserver http://localhost:8080/geoserver EOF } function install_postgis_module(){ pushd /tmp/GeoHelm-master/ rm -f postgis/setup.cgi tar -czf postgis.wbm.gz postgis rm -rf postgis /usr/share/webmin/install-module.pl postgis.wbm.gz rm -rf postgis.wbm.gz popd } function install_certbot_module(){ apt-get -y install python3-certbot-apache a2enmod ssl a2ensite default-ssl systemctl restart apache2 pushd /opt/ wget --quiet https://github.com/cited/Certbot-Webmin-Module/archive/master.zip unzip master.zip mv Certbot-Webmin-Module-master certbot tar -czf /opt/certbot.wbm.gz certbot rm -rf certbot master.zip /usr/share/webmin/install-module.pl certbot.wbm.gz popd } function install_tomcat(){ apt-get -y install haveged if [ ! -d /home/tomcat ]; then useradd -m tomcat fi cd /home/tomcat if [ ! -d apache-tomcat-${TOMCAT_VER} ]; then if [ ! -f /tmp/apache-tomcat-${TOMCAT_VER}.tar.gz ]; then wget -q -P/tmp "https://archive.apache.org/dist/tomcat/tomcat-${TOMCAT_MAJOR}/v${TOMCAT_VER}/bin/apache-tomcat-${TOMCAT_VER}.tar.gz" fi tar xzf /tmp/apache-tomcat-${TOMCAT_VER}.tar.gz chown -R tomcat:tomcat apache-tomcat-${TOMCAT_VER} rm -rf /tmp/apache-tomcat-${TOMCAT_VER}.tar.gz fi if [ $(grep -m 1 -c CATALINA_HOME /etc/environment) -eq 0 ]; then cat >>/etc/environment <<EOF CATALINA_HOME=/home/tomcat/apache-tomcat-${TOMCAT_VER} CATALINA_BASE=/home/tomcat/apache-tomcat-${TOMCAT_VER} EOF fi TOMCAT_MANAGER_PASS=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32); TOMCAT_ADMIN_PASS=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32); if [ $(grep -m 1 -c 'tomcat manager pass' /root/auth.txt) -eq 0 ]; then echo "tomcat manager pass: ${TOMCAT_MANAGER_PASS}" >> /root/auth.txt else sed -i.save "s/tomcat manager pass: .*/tomcat manager pass: ${TOMCAT_MANAGER_PASS}/" /root/auth.txt fi if [ $(grep -m 1 -c 'tomcat admin pass' /root/auth.txt) -eq 0 ]; then echo "tomcat admin pass: ${TOMCAT_ADMIN_PASS}" >> /root/auth.txt else sed -i.save "s/tomcat admin pass: .*/tomcat admin pass: ${TOMCAT_ADMIN_PASS}/" /root/auth.txt fi cat >/home/tomcat/apache-tomcat-${TOMCAT_VER}/conf/tomcat-users.xml <<EOF <?xml version='1.0' encoding='utf-8'?> <tomcat-users> <role rolename="manager-gui" /> <user username="manager" password="${TOMCAT_MANAGER_PASS}" roles="manager-gui" /> <role rolename="admin-gui" /> <user username="admin" password="${TOMCAT_ADMIN_PASS}" roles="manager-gui,admin-gui" /> </tomcat-users> EOF #folder is created after tomcat is started, but we need it now mkdir -p /home/tomcat/apache-tomcat-${TOMCAT_VER}/conf/Catalina/localhost/ cat >/home/tomcat/apache-tomcat-${TOMCAT_VER}/conf/Catalina/localhost/manager.xml <<EOF <Context privileged="true" antiResourceLocking="false" docBase="\${catalina.home}/webapps/manager"> <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="^.*\$" /> </Context> EOF chown -R tomcat:tomcat /home/tomcat cat >>"${CATALINA_HOME}/bin/setenv.sh" <<CMD_EOF CATALINA_PID="${CATALINA_HOME}/temp/tomcat.pid" JAVA_OPTS="\${JAVA_OPTS} -server -Djava.awt.headless=true -Dorg.geotools.shapefile.datetime=false -XX:+UseParallelGC -XX:ParallelGCThreads=4 -Dfile.encoding=UTF8 -Duser.timezone=UTC -Djavax.servlet.request.encoding=UTF-8 -Djavax.servlet.response.encoding=UTF-8 -DGEOSERVER_CSRF_DISABLED=true -DPRINT_BASE_URL=http://localhost:8080/geoserver/pdf -Dgwc.context.suffix=gwc" CMD_EOF cat >/etc/systemd/system/tomcat.service <<EOF [Unit] Description=Tomcat ${TOMCAT_VER} After=multi-user.target [Service] User=tomcat Group=tomcat WorkingDirectory=${CATALINA_HOME} Type=forking Restart=always EnvironmentFile=/etc/environment ExecStart=$CATALINA_HOME/bin/startup.sh ExecStop=$CATALINA_HOME/bin/shutdown.sh 60 -force [Install] WantedBy=multi-user.target EOF systemctl daemon-reload systemctl enable tomcat systemctl start tomcat } function install_geoserver(){ if [ ! -f /tmp/geoserver-${GEO_VER}-war.zip ]; then wget -P/tmp http://sourceforge.net/projects/geoserver/files/GeoServer/${GEO_VER}/geoserver-${GEO_VER}-war.zip fi unzip -ou /tmp/geoserver-${GEO_VER}-war.zip -d/tmp/ mv /tmp/geoserver.war ${CATALINA_HOME}/webapps/ chown -R tomcat:tomcat ${CATALINA_HOME}/webapps/geoserver.war rm -f /tmp/geoserver-${GEO_VER}-war.zip a2enmod proxy proxy_http service tomcat restart while [ ! -f ${CATALINA_HOME}/webapps/geoserver/WEB-INF/web.xml ]; do sleep 1 done sed -i.save '/<\/web-app>/d' ${CATALINA_HOME}/webapps/geoserver/WEB-INF/web.xml cat >>${CATALINA_HOME}/webapps/geoserver/WEB-INF/web.xml <<CAT_EOF <context-param> <param-name>PROXY_BASE_URL</param-name> <param-value>https://${HNAME}/geoserver</param-value> </context-param> </web-app> CAT_EOF service tomcat restart } function install_java(){ if [ "${JAVA_FLAVOR}" == 'OpenJDK' ]; then apt-get -y install default-jdk-headless default-jre-headless else apt-get -y install default-jdk-headless default-jre-headless; fi } function menu(){ # disable error flag set +e SUITE_FLAVOR=$(whiptail --title "GeoHelm Installer" --menu \ "Select the GeoHelm version you want to install:" 20 78 4 \ "GeoHelm Full Installation" " " 3>&1 1>&2 2>&3) exitstatus=$? if [ $exitstatus != 0 ]; then echo "GeoHelm installation cancelled." exit 1 fi # set options based on flavor we have case ${SUITE_FLAVOR} in "GeoHelm Full Installation") ;; esac whiptail --title "Hostname is $(hostname -f)" --yesno \ --yes-button "Continue" --no-button "Quit" \ "Be sure to set the hostname if you wish to use SSL" 8 78 exitstatus=$? if [ $exitstatus != 0 ]; then exit 0 fi whiptail --title "GeoHelm can provision SSL for ${HNAME}" --yesno \ "Provision SSL for ${HNAME}?" 8 78 exitstatus=$? if [ $exitstatus == 0 ]; then BUILD_SSL='yes' fi # enable error flag set -e echo "Begining installation:" echo -e "\tSuite Version: ${SUITE_FLAVOR}" echo -e "\tControl Panel Modules: ${WEBMIN_MODS}" echo -e "\tTomcat Version: ${TOMCAT_MAJOR}" echo -e "\tJava Version: ${JAVA_FLAVOR}" } function install_deps(){ touch /root/auth.txt export DEBIAN_FRONTEND=noninteractive apt-add-repository -y universe apt-get -y install wget unzip apache2 bzip2 rename php libapache2-mod-php php-pgsql # Get Tomcat latest version and set CATALINA_HOME TOMCAT_VER=$(wget -q -O- --no-check-certificate https://archive.apache.org/dist/tomcat/tomcat-${TOMCAT_MAJOR}/ | sed -n "s|.*<a href=\"v\(${TOMCAT_MAJOR}\.[0-9.]\+\)/\">v.*|\1|p" | sort -V | tail -n 1) if [ -z "${TOMCAT_VER}" ]; then echo "Error: Failed to get tomcat version"; exit 1; fi CATALINA_HOME="/home/tomcat/apache-tomcat-${TOMCAT_VER}" GEO_VER=$(wget http://geoserver.org/release/stable/ -O- 2>/dev/null | sed -n 's/^[ \t]\+<h1>GeoServer \(.*\)<\/h1>.*/\1/p') } function whiptail_gauge(){ local MAX_STEPS=${#STEPS[@]} let STEP_PERC=100/MAX_STEPS local perc=0 for step in "${!STEPS[@]}"; do echo "XXX" echo $perc echo "${STEPS[step]}\\n" echo "XXX" ${CMDS[$step]} 1>"/tmp/${CMDS[$step]}.log" 2>&1 let perc=perc+STEP_PERC || true done | whiptail --gauge "Please wait while install completes..." 6 50 0 } function provision_ssl(){ /bin/bash /tmp/build-ssl.sh || true } ################################################################################ menu; declare -x STEPS=( 'Checking Requirements...' 'Installing Demo Data....' 'Installing Libraries....' 'Installing LeafletJS Apps...' 'Setting Up Users...' 'Installing PostgreSQL Repository....' 'Installing PostGIS Packages....' 'Creating Crunchy Database....' 'Loading Crunchy Data...' 'Installing pg_tileserv' 'Installing pg_featurserv' 'Installing pg_routing' 'Installing Java....' ) declare -x CMDS=( 'install_deps' 'install_bootstrap_app' 'install_openlayers' 'install_leafletjs' 'setup_user' 'install_postgresql' 'install_postgis_pkgs' 'crunchy_setup_pg' 'load_pg_data' 'install_pg_tileserv' 'install_pg_featureserv' 'install_pg_routing' 'install_java' ) if [ "${GEOSERVER_WEBAPP}" == 'Yes' ]; then STEPS+=("Installing Apache Tomcat...." "Configure Geoserver WAR....") CMDS+=("install_tomcat" "install_geoserver") fi STEPS+=("Installing Webmin...") CMDS+=("install_webmin") for mod in ${WEBMIN_MODS}; do mod=$(echo ${mod} | sed 's/"//g') STEPS+=("${mod} module") CMDS+=("install_${mod}_module") done if [ ${BUILD_SSL} == 'yes' ]; then STEPS+=("Provisioning SSL") CMDS+=('provision_ssl') fi # -------------------- # whiptail_gauge; info_for_user