docker-atlassian-confluence-server/entrypoint.py

#!/usr/bin/python3

import sys
import os
import shutil
import logging
import jinja2 as j2


######################################################################
# Utils

def set_perms(path, user, group, mode):
    shutil.chown(path, user=user, group=group)
    os.chmod(path, mode)

def gen_cfg(tmpl, target, env, user='root', group='root', mode=0o644):
    logging.info("Generating {} from template {}".format(target, tmpl))
    cfg = jenv.get_template(tmpl).render(env)
    with open(target, 'w') as fd:
        fd.write(cfg)
    set_perms(target, user, group, mode)


######################################################################
# Setup inputs and outputs

# Extract some common parameters
confluence_home = os.environ["CONFLUENCE_HOME"]
confluence_install_dir = os.environ["CONFLUENCE_INSTALL_DIR"]
user = os.environ["RUN_USER"]
group = os.environ["RUN_GROUP"]

# Import all ATL_* environment variables. We lower-case these for
# compatability with Ansible template convention. We handle default
# and legacy mappings below.
env = {k.lower(): v
       for k, v in os.environ.items()
       if k.startswith('ATL_')}

# Setup Jinja2 for templating
jenv = j2.Environment(
    loader=j2.FileSystemLoader('/opt/atlassian/etc/'),
    autoescape=j2.select_autoescape(['xml']))

logging.basicConfig(level=logging.DEBUG)


######################################################################
# Generate server.xml for Tomcat.

defaults = {
    # We support some variables from older versions of the Docker images
    # for backwards compatability, if the new version is not set.
    'atl_proxy_name': os.environ.get('CATALINA_CONNECTOR_PROXYNAME'),
    'atl_proxy_port': os.environ.get('CATALINA_CONNECTOR_PROXYPORT'),
    'atl_tomcat_secure': os.environ.get('CATALINA_CONNECTOR_SECURE', 'false'),
    'atl_tomcat_scheme': os.environ.get('CATALINA_CONNECTOR_SCHEME', 'http'),
    'atl_tomcat_contextpath': os.environ.get('CATALINA_CONTEXT_PATH'),

    # Other default vals
    'atl_tomcat_port': "8090",
    'atl_tomcat_mgmt_port': "8000",
    'atl_tomcat_maxthreads': "200",
    'atl_tomcat_minsparethreads': "10",
    'atl_tomcat_connectiontimeout': "20000",
    'atl_tomcat_enablelookups': "false",
    'atl_tomcat_protocol': "HTTP/1.1",
    'atl_tomcat_redirectport': "8443",
    'atl_tomcat_acceptcount': "10",
}

for key, defval in defaults.items():
    if (key not in env) and defval:
        env[key] = defval

gen_cfg('server.xml.j2', confluence_install_dir+'/conf/server.xml', env)


######################################################################
# Configure seraph login handling.

# The default is two weeks, in seconds, same as the seraph default.
env['atl_autologin_cookie_age'] = env.get('atl_autologin_cookie_age', "1209600")

gen_cfg('seraph-config.xml.j2', confluence_install_dir+'/confluence/WEB-INF/classes/seraph-config.xml', env)


######################################################################
# Configure confluence-init.properties

# For compatability with the Ansible templates.
env['atl_product_home'] = confluence_home

gen_cfg('confluence-init.properties.j2', confluence_install_dir+'/confluence/WEB-INF/classes/confluence-init.properties', env)


######################################################################
# Start Confluence as the correct user

start_cmd = "{}/bin/start-confluence.sh".format(confluence_install_dir)
if os.getuid() == 0:
    logging.info("User is currently root. Will change directory ownership to {}:{}, then downgrade permission to {}".format(user, group, user))
    set_perms(confluence_home, user, group, 0o700)

    cmd = '/bin/su'
    start_cmd = ' '.join([start_cmd] + sys.argv[1:])
    args = [cmd, user, '-c', start_cmd]
else:
    cmd = start_cmd
    args = [start_cmd] + sys.argv[1:]

logging.info("Running Confluence with command '{}', arguments {}".format(cmd, args))
os.execv(cmd, args)