open-vault/terraform/aws/scripts/install.sh.tpl

54 lines
1.0 KiB
Smarty

#!/usr/bin/env bash
set -e
# Install packages
sudo apt-get update -y
sudo apt-get install -y curl unzip
# Download Vault into some temporary directory
curl -L "${download_url}" > /tmp/vault.zip
# Unzip it
cd /tmp
sudo unzip vault.zip
sudo mv vault /usr/local/bin
sudo chmod 0755 /usr/local/bin/vault
sudo chown root:root /usr/local/bin/vault
# Setup the configuration
cat <<EOF >/tmp/vault-config
${config}
EOF
sudo mv /tmp/vault-config /usr/local/etc/vault-config.json
# Setup the init script
cat <<EOF >/tmp/upstart
description "Vault server"
start on runlevel [2345]
stop on runlevel [!2345]
respawn
script
if [ -f "/etc/service/vault" ]; then
. /etc/service/vault
fi
# Make sure to use all our CPUs, because Vault can block a scheduler thread
export GOMAXPROCS=`nproc`
exec /usr/local/bin/vault server \
-config="/usr/local/etc/vault-config.json" \
\$${VAULT_FLAGS} \
>>/var/log/vault.log 2>&1
end script
EOF
sudo mv /tmp/upstart /etc/init/vault.conf
# Extra install steps (if any)
${extra-install}
# Start Vault
sudo start vault