summaryrefslogtreecommitdiff
path: root/salt/openbook/database/files/fix_permissions.sh
blob: f2ce5250e92987cbc0b966c77bdc019ed260caef (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
#!/bin/bash

sed -e 's|{% raw %}{{ "{{" }} openbook_database_password {{ "}}" }}{% endraw %}|{% raw %}{{ openbook_database_password }}{% endraw %}|g' -i /root/.my.cnf

# wait for mysql to start
for i in {120..0}; do
	if echo 'SELECT 1' | mysql &>/dev/null; then
		break
	fi
    sleep 1
done

# privilege fixes - must be idempotent!
mysql <<EOF
DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('%', 'localhost', '127.0.0.1', '127.0.2.1', '::', '::1');
DELETE FROM mysql.user WHERE User='';
DELETE FROM mysql.db WHERE Db='test' OR Db='test\_%';
FLUSH PRIVILEGES;
GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON *.* TO 'root'@'127.0.0.1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON *.* TO 'root'@'::1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON *.* TO 'debian-sys-maint'@'localhost' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'localhost' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'127.0.0.1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'::1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'%' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_jobs.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'localhost' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_jobs.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'127.0.0.1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_jobs.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'::1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_jobs.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'%' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_workflow.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'localhost' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_workflow.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'127.0.0.1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_workflow.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'::1' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
GRANT ALL PRIVILEGES ON openbook_workflow.* TO '{% raw %}{{ openbook_database_user }}{% endraw %}'@'%' IDENTIFIED BY '{% raw %}{{ openbook_database_password }}{% endraw %}';
FLUSH PRIVILEGES;
EOF

exit 0