ubuntu1c-autoinstall/config/nocloud/user-data

#cloud-config
autoinstall:
  version: 1
  interactive-sections:
    - network
    - storage
  locale: "ru_RU.UTF-8"
  keyboard:
    layout: us,ru
    toggle: alt_shift_toggle
  apt:
    primary:
      - arches: [default]
        uri: mirror://mirrors.ubuntu.com/mirrors.txt
  debconf-selections: |
    ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true
  packages:
    - openssh-server
    - openssh-client
    - mosh
    - mc
    - htop
    - ca-certificates
    - curl
    - wget
    - apt-transport-https
    - apt-utils
    - locales-all
    - language-pack-ru
    - language-pack-ru-base
    - unixodbc
    - libfreetype6
    - fontconfig
    - t1utils
    - apache2
    - nginx
    - unzip
    - libc6-i386
    - git
    - build-essential
    - python-is-python3
    - python3-pip
    - python3-virtualenv
    - dkms
    - samba
    - fusesmb
    - samba-vfs-modules
    - cifs-utils
    - avahi-daemon
    - avahi-dnsconfd
    - libnss-winbind
    - libnss-mdns
    - cups
    - wsdd
    - libxt6
    - libtcmalloc-minimal4
  late-commands:
    - stat /cdrom/1c/install >/dev/null 2>/dev/null && sh -exc "mkdir -p /target/var/install/1c && cp /cdrom/1c/install/* /target/var/install/1c/" || echo skip 1c distr copy
    - sync
    - echo --- done! ---
  user-data:
    hostname: srv1c
    groups:
      - postgres
      - grp1cv8
      - www-data
    users:
      - default
      - name: admin1c
        gecos: Admin 1C
        shell: /bin/bash
        primary_group: admin1c
        groups: users, adm, cdrom, sudo, dip, plugdev, lxd, postgres, grp1cv8, www-data
        lock_passwd: false
        sudo: ALL=(ALL) NOPASSWD:ALL
        passwd: $6$rounds=4096$X0PCsEEYkoirzYwF$vFfmCzOhzPQUsdXbrlt0cyX0wEiuRc2WecIUMyO2ZkTYzSh8oz2Sp87OFVxCHp0sPklRDmdwkK56EZCar.N1o/
        ssh_import_id:
          - gh:b4tman
          #ssh_authorized_keys:
          #  - <ssh pub key 1>
      - name: postgres
        primary_group: postgres
        groups: grp1cv8
        system: true
        passwd: $6$rounds=4096$7HbuIwc5Gbm.$eDOOBbMBh9teE82CE9MGJXJuK3nRuJpjIbkUqOmPN7FyH/Nj.3bgDosdM1WoztBXHYwgCyd1dhya/5aR36Njm1
    locale: "ru_RU.UTF-8"
    timezone: Europe/Moscow
    ntp:
      enabled: true
      ntp_client: auto
    package_update: true
    package_upgrade: true
    write_files:
      - path: /etc/systemd/system/srv1cv83@.service
        encoding: gzip+base64
        owner: root:root
        permissions: '0644'
        content: |
          H4sIAAAAAAAAA61V3U/bMBB/z19hbUPapLVpBkUMyQ+lRF3HgKoN7IGhyk2urYdjZ7ZTqCb+952d
          RLQse1seWuU+fvfxu7vc3Uhu74NzMKnmheVK0mh4GksLutDcAJmB3oAmJ91D8v5g/CGYwq+SazBU
          gn1U+qFrmV6BDYI7Z8lTuA+SbQHU8LwQENwY0LQ0Oko3J8FIq7KgK134tyCWG66VzEFa+nVwO5h/
          ub6MaagKGzqD8OnkeH58FB6Mw58aguAtmTC7JlaRDBNIrdJb8shRkgpmMF+SMcv2QGfT22h4ezI/
          HyQDGq5VDmGdStj1v9GwiuTAr8p8gSBqSewaELP0mIXSlqQamIWMLLYkgyUrhSVZqblckSXXxqKz
          YKVM185ZsxWGbk1jcj1NaNQ/6u2Ha0J5R5IzLn3ULknW3FQJ4H9pqgQwOfRufFIljRLgmsKyDGkx
          VfaIpJkgxpPXJcPdEOjegDJhFDEFpHzJEZ5V3uNJZVC3wrHsaq3BWkubxqOmusgz5fw1kysgS+XT
          lMgYThciK9EOMbgaxQhw3DuN+p89ygxSbLPdEgEbEKco6ZEOKWWhlUU4zPgF2KA2Qm2rjigptj4T
          V5DlObjisKUavfBhJcql5Slz5ij75JBA50yiGF3bI7aVMYuH3+Jb6jne36Sqfw5gyVel9qFwnhbl
          iuQqc6wuBJMPGLkZss6O2tGllku06lTCv5SYd/v0x2c3I9p4ra0tXG7DNaQPrkaustccCYVzlIH1
          S/aR5FwILAANsvaaJ+Or0XwST8fX5zTq9XztUzAF9qjqtirtf4mRjC/j65uE9usgrQ1+gK1lC1xN
          AV20eWlmvfuH3R0LgtvWhlLNRfVwaSwToiasuT17WV5Mz/rzi+Rq8I8DVoeuI+Ppe4J0hpfT0nDB
          ZWjWpJOSN22e1T1B0sm737v37Jl0/JK+SN0ColTD6pWiXk6n8xu5o3E790x+BB1sPS7ZjqqaYxcF
          d39SjclOrBfGa5OkpvmVTc3Y8272bh6f3+CXxPgOMPHItqZ5xZ2n/WCi+QZPbpIXVCr8towrCtyH
          yrPp32UKFA+EdjftO0MGs7MtzVHLO261my/TH0B8qt7jBgAA
      - path: /etc/systemd/system/srv1cv83-ras@.service
        encoding: gzip+base64
        owner: root:root
        permissions: '0644'
        content: |
          H4sIAAAAAAAAA11QwWpCMRC85yuCILSHNAgqUsjBtiKPQik+pQeRksZ9djEvSTeJ1b9vfFQPHmd2
          Z3Zm1yuHacNeIBrCkNA7NXh+nLkEFAgj8AW0PgGfblt0GBPp8w6vgQ5ogN/1q3u2gJ+MBFE5SL+e
          9g9J0w4SmzbF5Ybk1PmJJl4IF6Ow3u9zuOjY+t9+w5anACpiGyywVSxuOdLAHCZsTj4HtaPQITY7
          gqmLPCn5hU7Gby7gaHgPCs+lD0me9+RxMv4cD2W/kqQjNzbHkpALEXxRDkbDUY+9orU17py2qq7m
          1duSvRMedIJlG1SiDKVu7C55JxqNNtOVqsGoUYlfuQKtPb+10dmmDjsDymQicIl96PLg7dNJtWWK
          Ipdm1/J/2tGhvJIBAAA=
      - path: /etc/nginx/sites-available/apache-proxy
        encoding: gzip+base64
        owner: root:root
        permissions: '0644'
        content: |
          H4sIAAAAAAAAA41WXW/iOBR9z6+4YngbhXxAKUPUB8R2ptW226qZh65Wq8gkF/CS2JFtOtDV/Pe9
          joHy1e0YFBKfc26ce49vWNbaKGQVsJrlc4R/PaChUb2ggii+7IT0iYbdbncQJg22QKxZyV8Q+r3E
          ++l5jpwZuUChQU6nieeVvOImy6UQ2asUCO0JF0ytM4WVNJixolBggasaFa+HUVglp5pNYMEq3JHd
          nBN4eclRmGwii3U2WU6nRNb8FQGi/u/JFp0jKwjYx3uLHVqxldM3QBTGvXtaCVMzzM7pNcTQjUnu
          fQIuDKoKC84MAi17ymdLxQyXwtO6zGoljcxlqeH7XfoSdeLNbzdp4JzXcxvvevzbzbVPx3Tkj67T
          KB7438b3fnozii/6Q4c+/Q+2U9LUFu0OeofKs5hTjm9G9I1D//Hh7s+oG17sKU+x91fz7t0S75NL
          Bzb5dzXdPr1zi8U1ak2py/LGhnrOFBbDNL0bXthSWwbmxTzLl6Qnf+Y1hVYRiRVqWVq3Xl52BoMO
          fWx1Zq+8BikSz55kZl2jBoMrE9Ql44LcXpc8b4oV/KOlcFiu9SHCXpjOyaDmYHrl7wGN8Ph6VZWH
          iqNrpfXn4zlmZPV51XYLrrjIShQzM4de+KW/eQyy1IpjAUys6RlpE23MCc/+V0W7xH+obSgN6ej+
          +uHp9tvtH8khbSzJtML43ykhO7aQWnBbiAPqc5r6j+RhzC0LWlEClSzwalLKfNFKtvt+0zFKrikw
          uDEIocApW5ZmU+/klPPXcPj38FeIvV4XqPwwN6aO3wt0hrTfPYDWzMq51MZhjmB3ISrDp7YE6KIF
          aPJAzLhYBYQHFu/UWCXnFNkC1ycKmnsTNIe9rKZG8Zyyr5jQtVTGT5EMzc0aWtSIfDbDq343vIzD
          MEyov+TlssB0OSlkRabVCdAmKiUrWnvR37omNL2UmvZgH5bOXhBsCmWH9dG60VBxM8MrlEsD0cUX
          nRxxNIpiRwDoh+Exg14eHzAOOjMAdYfFeYpuZroxvVjOMPSO5kKdi2OwqrMpLzH7QVnFc8ST5Rdc
          URZgN5qWdJyF7WtgO//sPyEr/dtHaO+90n5F91WqH0wVWNgzaDuitcgqm24he/ZxrBuyM7TfTP3G
          tbsgI/Pbhurmo070ccCxM0Sz21vH9JppDQfD3mUYBO6PQ+D4P+kPwX+oL4ivUwgAAA==
    runcmd:
      # --- fix hosts ---
      - |
        set -x
        echo "  " >> /etc/hosts
        echo "127.0.0.1 localhost srv1c srv1c.local" >> /etc/hosts
        echo "::1 localhost srv1c srv1c.local" >> /etc/hosts
      # --- force locale install ---
      - |
        set -x
        locale-gen ru_RU.UTF-8 en_US.UTF-8
        update-locale LANG=ru_RU.UTF-8
        export LC_ALL=ru_RU.UTF-8
        export LANG=ru_RU.UTF-8
      # --- force set timezone ---
      - timedatectl set-timezone Europe/Moscow
      # --- force apt update ---
      - |
        set -x
        apt-get update
        apt-get -y dist-upgrade
        apt-get clean
      # --- install hasp ---
      - |
        set -x
        mkdir -p /tmp/ldk
        curl -SLo /tmp/ldk/installer.tar.gz https://b4tman.ru/_static/Sentinel_LDK_Ubuntu_DEB_Runtime_Installer.tar.gz
        tar xzf /tmp/ldk/installer.tar.gz --strip-components=1 -C /tmp/ldk
        sh -xc 'dpkg -i $(find /tmp/ldk -name "aksusb*amd64.deb" -type f)'
        rm -rf /tmp/ldk
      # --- install ttf-mscorefonts ---
      - |
        set -x
        export DEBIAN_FRONTEND=noninteractive
        mkdir -p /var/lib/update-notifier/package-data-downloads/partial
        chown _apt:root /var/lib/update-notifier/package-data-downloads/partial/
        apt-get install --no-install-recommends --no-install-suggests -y ttf-mscorefonts-installer
        rm -rf /var/lib/update-notifier/package-data-downloads/partial/*
      # --- install postgres ---
      - |
        set -x
        curl -SLo /tmp/pgpro-repo-add.sh https://repo.postgrespro.ru/1c-15/keys/pgpro-repo-add.sh
        sh /tmp/pgpro-repo-add.sh
        rm -f /tmp/pgpro-repo-add.sh
        apt-get install -y postgrespro-1c-15-contrib postgrespro-1c-15-jit
      # --- postgres init ---
      - |
        set -x
        echo postgres > /tmp/pgpswd
        /opt/pgpro/1c-15/bin/pg-setup initdb --tune=1c -k -E UTF8 -g --locale ru_RU.UTF-8 -T russian --pwfile=/tmp/pgpswd
        rm -f /tmp/pgpswd
        sed -i 's%\=\s0MB%\=\ 1GB%g' /var/lib/pgpro/1c-15/data/postgresql.conf
        echo  >> /var/lib/pgpro/1c-15/data/postgresql.conf
        echo \#--- >> /var/lib/pgpro/1c-15/data/postgresql.conf
        echo row_security=off >> /var/lib/pgpro/1c-15/data/postgresql.conf
        echo max_wal_senders=0 >> /var/lib/pgpro/1c-15/data/postgresql.conf
        echo wal_level=minimal >> /var/lib/pgpro/1c-15/data/postgresql.conf
        /opt/pgpro/1c-15/bin/pg-setup service enable
        /opt/pgpro/1c-15/bin/pg-setup service start
        apt-get install -y postgrespro-1c-15
      # --- install 1c ---
      - |
        set -x
        # install deps
        mkdir -p /tmp/deps1c
        curl --output-dir /tmp/deps1c -SL --remote-name-all http://archive.ubuntu.com/ubuntu/pool/universe/e/enchant/libenchant1c2a_1.6.0-11.3build1_amd64.deb
        dpkg -i $(find /tmp/deps1c -type f -name  \*.deb) || apt-get install -f -y
        rm -rf /tmp/deps1c
        # extract distrs
        stat /var/install/1c >/dev/null 2>/dev/null && mkdir -p /tmp/1c || echo skip 1c install
        stat /var/install/1c >/dev/null 2>/dev/null && tar xzf $(find /var/install/1c -name "server64_*.tar.gz" -type f) -C /tmp/1c || echo skip 1c install
        # install only server (without GUI)
        stat /var/install/1c >/dev/null 2>/dev/null && $(find /tmp/1c -name "setup-full-*.run" -type f) --mode unattended --enable-components additional_admin_functions,integrity_monitoring,config_storage_server,liberica_jre,server,server_admin,ws,ru || echo skip 1c install
        # install with GUI (with all X deps)
        # stat /var/install/1c >/dev/null 2>/dev/null && $(find /tmp/1c -name "setup-full-*.run" -type f) --mode unattended --enable-components additional_admin_functions,integrity_monitoring,config_storage_server,client_full,client_thin_fib,liberica_jre,server,server_admin,ws,ru || echo skip 1c install
        stat /tmp/1c >/dev/null 2>/dev/null && rm -rf /tmp/1c || echo skip 1c install
        stat /opt/1cv8/x86_64 >/dev/null 2>/dev/null && ln -s $(find /opt/1cv8/x86_64 -name "8.3.*" -type d) /opt/1cv8/x86_64/current || echo skip 1c install
      # --- 1c config ---
      - |
        echo \ \ >> /opt/1cv8/conf/conf.cfg
        echo "JavaHome=/opt/1cv8/x86_64/current/jre" >> /opt/1cv8/conf/conf.cfg
        echo "JAVA_HOME=/opt/1cv8/x86_64/current/jre" >> /opt/1cv8/conf/conf.cfg
        echo "UpdateDBCfg=v2" >> /opt/1cv8/conf/conf.cfg
      # --- 1c web init ---
      - |
        set -x
        # stop services
        systemctl stop apache2
        systemctl stop nginx
        # remove defaul sites
        rm -f /etc/apache2/sites-enabled/000-default.conf
        rm -f /etc/nginx/sites-enabled/default
        # dirs and files
        mkdir -p /var/www-1c/html
        mkdir -p /etc/nginx/ssl
        echo Hello 1C > /var/www-1c/html/index.html
        #create apache cfg from default
        cp /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-available/001-1c.conf
        sed -i 's%VirtualHost\s\*\:80%VirtualHost\ \*\:33380%' /etc/apache2/sites-available/001-1c.conf
        sed -i 's%DocumentRoot\s\/var\/www\/html%DocumentRoot \/var\/www-1c\/html%' /etc/apache2/sites-available/001-1c.conf
        sed -i 's%\#Include.*$%Include /etc/apache2/conf-available/1c.conf%' /etc/apache2/sites-available/001-1c.conf
        # load 1c handler module
        echo LoadModule _1cws_module "/opt/1cv8/x86_64/current/wsap24.so" >> /etc/apache2/conf-available/1c.conf
        # allow www root
        echo \<Directory\ \"/var/www-1c/html\"\> >> /etc/apache2/conf-available/1c.conf
        echo \ \ \ \ Options Indexes Includes >> /etc/apache2/conf-available/1c.conf
        echo \ \ \ \ AllowOverride All >> /etc/apache2/conf-available/1c.conf
        echo \ \ \ \ Require all granted >> /etc/apache2/conf-available/1c.conf
        echo \</Directory\> >> /etc/apache2/conf-available/1c.conf
        # set apache http port
        sed -i 's%Listen\s80%Listen\ 33380%' /etc/apache2/ports.conf
        # gen self signed ssl cert
        openssl req -x509 -newkey rsa:4096 -keyout /etc/nginx/ssl/key.pem -out /etc/nginx/ssl/cert.pem -days 3650 -nodes -subj "/C=RU/ST=Tula/L=Novomoskovsk/O=Company Name/OU=Org/CN=$(hostname)"
        # set apache hostname
        sed -i "s%server_name\slocalhost;%server_name $(hostname);%" /etc/nginx/sites-available/apache-proxy
        sed -i "s%\#ServerName.*$%ServerName $(hostname)%" /etc/apache2/sites-available/001-1c.conf
        # fix 1c thin client auto update (with url_path=/1c/test1)
        sed -E '/^\s*location\s+\/\s+/i\ \ \ \ rewrite ^/1c/e1cibdst/(.*) /1c/test1/e1cibdst/$1 last;\n' -i /etc/nginx/sites-available/apache-proxy
        # enable new configs
        ln -s /etc/apache2/sites-available/001-1c.conf /etc/apache2/sites-enabled/001-1c.conf
        ln -s /etc/nginx/sites-available/apache-proxy /etc/nginx/sites-enabled/apache-proxy
        # start services
        systemctl enable apache2 --now
        systemctl enable nginx --now
        # enable+start 1c service
        stat /opt/1cv8/x86_64/current/ragent >/dev/null 2>/dev/null && systemctl enable srv1cv83@current --now || echo ignoring 1c service
        stat /opt/1cv8/x86_64/current/ras >/dev/null 2>/dev/null && systemctl enable srv1cv83-ras@current --now || echo ignoring 1c ras service
      # --- install & config webpub1c ---
      - |
        set -x
        sudo -u admin1c sh -exc "git clone --branch v0.0.1 https://github.com/b4tman/webpub1c /home/admin1c/webpub1c && cd /home/admin1c/webpub1c && virtualenv venv && . venv/bin/activate && pip install -r requirements.txt"
        sed -i "s%apache_config:.*\$%apache_config: /etc/apache2/conf-available/1c.conf%" /home/admin1c/webpub1c/webpub1c.yml
        mkdir -p /var/www-1c/vrd
        mkdir -p /var/www-1c/pub
        chown admin1c:www-data /var/www-1c/vrd
        chown admin1c:www-data /var/www-1c/pub
        chown admin1c:root /etc/apache2/conf-available/1c.conf
        sed -i "s%vrd_path:.*\$%vrd_path: /var/www-1c/vrd%" /home/admin1c/webpub1c/webpub1c.yml
        sed -i "s%dir_path:.*\$%dir_path: /var/www-1c/pub%" /home/admin1c/webpub1c/webpub1c.yml
      # --- install opt tools ---
      - |
        set -x
        snap install ripgrep --classic
        snap install lsd
        snap install yq
        snap install jq
        snap install nvim --classic
        apt-get install -y bat fd-find exa fzf
        echo "alias bat=batcat" >> /home/admin1c/.bashrc
      # --- install onescript ---
      - |
        set -x
        apt-get install -y mono-runtime libmono-i18n4.0-all
        curl -SLo /tmp/onescript-engine.deb https://github.com/EvilBeaver/OneScript/releases/download/v1.8.3/onescript-engine_1.8.3_all.deb
        dpkg -i /tmp/onescript-engine.deb
      # --- install wsdd ---
      #- |
      #  set -x
      #  apt-key adv --fetch-keys https://pkg.ltec.ch/public/conf/ltec-ag.gpg.key
      #  echo "deb https://pkg.ltec.ch/public/ $(lsb_release -cs) main" >> /etc/apt/sources.list.d/wsdd.list
      #  apt-get update
      #  apt-get install -y wsdd
      #  systemctl enable wsdd.service --now

      # --- create bases ---
      - |
        set -x
        export PATH="$PATH:/opt/1cv8/x86_64/current"
        export DB_ADDR=localhost
        export CLUSTER_ADDR=localhost
        export CLUSTER_ID=$(rac cluster list $CLUSTER_ADDR | rg -e "^cluster\s*:" -m 1 | rg -e "[[:xdigit:]-]{36}" -o)
        rac infobase --cluster=$CLUSTER_ID create --create-database --name=test1 --dbms=PostgreSQL --db-server=$DB_ADDR --db-name=test1 --locale=ru --db-user=postgres --db-pwd=postgres --license-distribution=allow $CLUSTER_ADDR
        rac infobase --cluster=$CLUSTER_ID create --create-database --name=test2 --dbms=PostgreSQL --db-server=$DB_ADDR --db-name=test2 --locale=ru --db-user=postgres --db-pwd=postgres --license-distribution=allow $CLUSTER_ADDR
        rac infobase --cluster=$CLUSTER_ID create --create-database --name=test3 --dbms=PostgreSQL --db-server=$DB_ADDR --db-name=test3 --locale=ru --db-user=postgres --db-pwd=postgres --license-distribution=allow $CLUSTER_ADDR

        sudo -u admin1c sh -exc "cd /home/admin1c/webpub1c && . venv/bin/activate && python webpub1c.py add_module && python webpub1c.py add test1 && python webpub1c.py add test2 && python webpub1c.py add test3"
        systemctl restart apache2
      # --- final ---
      - |
        set -x
        # disable boot to GUI
        systemctl set-default multi-user.target
        # remove default user folder
        rm -rf /home/ubuntu
        echo -- done! ---