#
## Copyright (C) 2019 Wind River Systems, Inc.
#
#  Licensed under the Apache License, Version 2.0 (the "License");
#  you may not use this file except in compliance with the License.
#  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
#  limitations under the License.

DESCRIPTION = "stx-config-files"

PROTOCOL = "https"
BRANCH = "r/stx.3.0"
SRCREV = "d778e862571957ece3c404c0c37d325769772fde"
SRCNAME = "config-files"
S = "${WORKDIR}/git"
PV = "1.0.0"

LICENSE = "Apache-2.0"
LIC_FILES_CHKSUM = "\
	file://systemd-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://audit-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://docker-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://filesystem-scripts/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://filesystem-scripts/filesystem-scripts-1.0/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://io-scheduler/centos/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://iptables-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://lighttpd-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://logrotate-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://mlx4-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://ntp-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://openldap-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://openvswitch-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://shadow-utils-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://sudo-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://syslog-ng-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	file://systemd-config/files/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
	"

SRC_URI = " \
	git://opendev.org/starlingx/${SRCNAME}.git;protocol=${PROTOCOL};rev=${SRCREV};branch=${BRANCH} \
	file://openssh-config-rm-hmac-ripemd160.patch \
	file://util-linux-pam-postlogin.patch \
	file://syslog-ng-config-parse-err.patch \
	file://syslog-ng-config-systemd-service.patch \
	file://syslog-ng-conf-replace-match-with-message.patch \
	file://lighttpd-init-script-chroot.patch \
	file://nfsserver-remvoe-the-f-option-for-rpc.mountd.patch \
	file://nfsserver.service-add-dependency-on-rpcbind.service.patch \
	"

do_configure () {
	:
}

do_compile () {
	:
}

do_install () {
	install -m 0755 -d ${D}/${datadir}/starlingx/config-files
	for f in $(find ./ -name '*\.spec' | cut -d '/' -f2);
	do 
		tar -c $f -f - | tar -C ${D}/${datadir}/starlingx/config-files -xf -;
	done
	find ${D}/${datadir}/starlingx/config-files -name centos -exec rm -rf {} +
	chown -R root:root ${D}/${datadir}/starlingx/config-files/

	# For io-scheduler-config
	mkdir -p  ${D}/${sysconfdir}/udev/rules.d
	install -m 644 ${S}/io-scheduler/centos/files/60-io-scheduler.rules ${D}/${sysconfdir}/udev/rules.d/60-io-scheduler.rules
	rm -rf ${D}/${datadir}/starlingx/config-files/io-scheduler
}

PACKAGES ?= ""
PACKAGES += "audit-config"
PACKAGES += "centos-release-config"
PACKAGES += "dhclient-config"
PACKAGES += "dnsmasq-config"
PACKAGES += "docker-config"
PACKAGES += "initscripts-config"
PACKAGES += "filesystem-scripts"
PACKAGES += "haproxy-config"
PACKAGES += "ioscheduler-config"
PACKAGES += "iptables-config"
PACKAGES += "iscsi-initiator-utils-config"
PACKAGES += "lighttpd-config"
PACKAGES += "logrotate-config"
PACKAGES += "memcached-custom"
PACKAGES += "mlx4-config"
PACKAGES += "net-snmp-config"
PACKAGES += "nfs-utils-config"
PACKAGES += "ntp-config"
PACKAGES += "openldap-config"
PACKAGES += "openssh-config"
PACKAGES += "openvswitch-config"
PACKAGES += "pam-config"
PACKAGES += "rabbitmq-server-config"
PACKAGES += "rsync-config"
PACKAGES += "setup-config"
PACKAGES += "shadow-utils-config"
PACKAGES += "sudo-config"
PACKAGES += "syslog-ng-config"
PACKAGES += "systemd-config"
PACKAGES += "util-linux-config"

FILES_${PN} = ""
FILES_audit-config = "${datadir}/starlingx/config-files/audit-config/"
FILES_centos-release-config = "${datadir}/starlingx/config-files/centos-release-config/"
FILES_dhclient-config = "${datadir}/starlingx/config-files/dhcp-config/"
FILES_dnsmasq-config = "${datadir}/starlingx/config-files/dnsmasq-config/"
FILES_docker-config = "${datadir}/starlingx/config-files/docker-config/"
FILES_initscripts-config = "${datadir}/starlingx/config-files/initscripts-config/"
FILES_filesystem-scripts= "${datadir}/starlingx/config-files/filesystem-scripts/"
FILES_haproxy-config= "${datadir}/starlingx/config-files/haproxy-config/"
FILES_ioscheduler-config= "${sysconfdir}/udev/rules.d/60-io-scheduler.rules"
FILES_iptables-config= "${datadir}/starlingx/config-files/iptables-config/"
FILES_iscsi-initiator-utils-config = "${datadir}/starlingx/config-files/iscsi-initiator-utils-config/"
FILES_lighttpd-config= "${datadir}/starlingx/config-files/lighttpd-config/"
FILES_logrotate-config= "${datadir}/starlingx/config-files/logrotate-config/"
FILES_memcached-custom = "${datadir}/starlingx/config-files/memcached-custom/"
FILES_mlx4-config= "${datadir}/starlingx/config-files/mlx4-config/"
FILES_net-snmp-config= "${datadir}/starlingx/config-files/net-snmp-config/"
FILES_nfs-utils-config= "${datadir}/starlingx/config-files/nfs-utils-config/"
FILES_ntp-config= "${datadir}/starlingx/config-files/ntp-config/"
FILES_openldap-config= "${datadir}/starlingx/config-files/openldap-config/"
FILES_openssh-config= "${datadir}/starlingx/config-files/openssh-config/"
FILES_openvswitch-config= "${datadir}/starlingx/config-files/openvswitch-config/"
FILES_pam-config= "${datadir}/starlingx/config-files/pam-config/"
FILES_rabbitmq-server-config= "${datadir}/starlingx/config-files/rabbitmq-server-config/"
FILES_rsync-config= "${datadir}/starlingx/config-files/rsync-config/"
FILES_setup-config= "${datadir}/starlingx/config-files/setup-config/"
FILES_shadow-utils-config= "${datadir}/starlingx/config-files/shadow-utils-config/"
FILES_sudo-config= "${datadir}/starlingx/config-files/sudo-config/"
FILES_syslog-ng-config= "${datadir}/starlingx/config-files/syslog-ng-config/"
FILES_systemd-config= "${datadir}/starlingx/config-files/systemd-config/"
FILES_util-linux-config= "${datadir}/starlingx/config-files/util-linux-config/"

RDEPENDS_audit-config += " \
	audit \
	auditd \
	audit-python \
	"
RDEPENDS_dhclient-config += "dhcp-client"
RDEPENDS_dnsmasq-config += "dnsmasq"
RDEPENDS_docker-config += "docker-ce logrotate "
RDEPENDS_initscripts-config += "initscripts"
RDEPENDS_filesystem-scripts += ""
RDEPENDS_haproxy-config += "haproxy"
RDEPENDS_ioscheduler-config += ""
RDEPENDS_iptables-config += "iptables"
RDEPENDS_iscsi-initiator-utils-config += " iscsi-initiator-utils"
RDEPENDS_lighttpd-config += " \
	lighttpd \
	lighttpd-module-proxy \
	lighttpd-module-setenv \
	"
RDEPENDS_logrotate-config += " logrotate cronie"
RDEPENDS_memcached-custom += "memcached"
RDEPENDS_mlx4-config += ""
RDEPENDS_net-snmp-config += " \
	net-snmp \
	net-snmp-server-snmpd \
	net-snmp-server-snmptrapd \
	"
RDEPENDS_nfs-utils-config += " nfs-utils"
RDEPENDS_ntp-config += " ntp"
RDEPENDS_openldap-config += " \
	openldap \
	"
RRECOMMENDS_openldap-config += " \
	openldap-slapd \
	openldap-backend-shell \
	openldap-backend-passwd \
	openldap-backend-null \
	openldap-backend-monitor \
	openldap-backend-meta \
	openldap-backend-ldap \
	openldap-backend-dnssrv \
	openldap-staticdev \
	openldap-locale \
	openldap-overlay-proxycache \
	openldap-slapd \
	openldap-slurpd \
	openldap-bin \
	"

RDEPENDS_openssh-config += " openssh"
RDEPENDS_openvswitch-config += " openvswitch"
RDEPENDS_pam-config += " \
	libpam-runtime \
	nss-pam-ldapd \
	libpwquality \
	pam-plugin-access \
	pam-plugin-cracklib \
	pam-plugin-debug \
	pam-plugin-deny \
	pam-plugin-echo \
	pam-plugin-env \
	pam-plugin-exec \
	pam-plugin-faildelay \
	pam-plugin-filter \
	pam-plugin-ftp \
	pam-plugin-group \
	pam-plugin-issue \
	pam-plugin-keyinit \
	pam-plugin-lastlog \
	pam-plugin-limits \
	pam-plugin-listfile \
	pam-plugin-localuser \
	pam-plugin-loginuid \
	pam-plugin-mail \
	pam-plugin-mkhomedir \
	pam-plugin-motd \
	pam-plugin-namespace \
	pam-plugin-nologin \
	pam-plugin-permit \
	pam-plugin-pwhistory \
	pam-plugin-rhosts \
	pam-plugin-rootok \
	pam-plugin-securetty \
	pam-plugin-shells \
	pam-plugin-stress \
	pam-plugin-succeed-if \
	pam-plugin-tally \
	pam-plugin-tally2 \
	pam-plugin-time \
	pam-plugin-timestamp \
	pam-plugin-umask \
	pam-plugin-unix \
	pam-plugin-warn \
	pam-plugin-wheel \
	pam-plugin-xauth \
	"
RDEPENDS_rabbitmq-server-config += " rabbitmq-server"
RDEPENDS_rsync-config += " rsync"
RDEPENDS_setup-config += ""
RDEPENDS_shadow-utils-config += " shadow"
RDEPENDS_sudo-config += " sudo"
RDEPENDS_syslog-ng-config += " syslog-ng"
RDEPENDS_systemd-config += " systemd"
RDEPENDS_util-linux-config += " util-linux"

pkg_postinst_ontarget_audit-config() {
	cp -f ${datadir}/starlingx/config-files/audit-config/files/syslog.conf ${sysconfdir}/audisp/plugins.d/syslog.conf
	chmod 640 ${sysconfdir}/audisp/plugins.d/syslog.conf
}

pkg_postinst_centos-release-config() {
        sed 's/@PLATFORM_RELEASE@/${ORAN_REL}/' $D${datadir}/starlingx/config-files/centos-release-config/files/issue >> $D${sysconfdir}/issue
        sed 's/@PLATFORM_RELEASE@/${ORAN_REL}/' $D${datadir}/starlingx/config-files/centos-release-config/files/issue.net >> $D${sysconfdir}/issue.net
        chmod 644 $D${sysconfdir}/issue
        chmod 644 $D${sysconfdir}/issue.net
}

pkg_postinst_ontarget_dhclient-config() {
	SRCPATH=${datadir}/starlingx/config-files/dhcp-config/files
	install -m 0755 -p ${SRCPATH}/dhclient-enter-hooks ${sysconfdir}/dhcp/dhclient-enter-hooks
	install -m 0755 -p ${SRCPATH}/dhclient.conf ${sysconfdir}/dhcp/dhclient/dhclient.conf
	ln -fs ${sysconfdir}/dhcp/dhclient-enter-hooks ${sysconfdir}/dhclient-enter-hooks
}
	
pkg_postinst_ontarget_dnsmasq-config() {
	install -m 755 ${datadir}/starlingx/config-files/dnsmasq-config/files/init ${sysconfdir}/init.d/dnsmasq
}

pkg_postinst_ontarget_docker-config() {
	SRCPATH=${datadir}/starlingx/config-files/docker-config/files
	install -d -m 0755 ${sysconfdir}/systemd/system/docker.service.d

	install -D -m 644 ${SRCPATH}/docker-pmond.conf ${sysconfdir}/pmon.d/docker.conf
	install -D -m 644 ${SRCPATH}/docker-stx-override.conf \
			${sysconfdir}/systemd/system/docker.service.d/docker-stx-override.conf 
	install -D -m 644 ${SRCPATH}/docker.logrotate ${sysconfdir}/logrotate.d/docker.logrotate
}

pkg_postinst_ontarget_filesystem-scripts() {
	SRCPATH=${datadir}/starlingx/config-files/filesystem-scripts/filesystem-scripts-1.0
	install -D -m 755 ${SRCPATH}/uexportfs ${sysconfdir}/init.d/uexportfs

	install -d -m 0755 /usr/lib/ocf/resource.d/platform/
	install -D -m 755 ${SRCPATH}/nfsserver-mgmt /usr/lib/ocf/resource.d/platform/nfsserver-mgmt

	install -p -D -m 755 ${SRCPATH}/nfs-mount ${bindir}/nfs-mount
	install -D -m 755 ${SRCPATH}/uexportfs.service ${systemd_system_unitdir}/uexportfs.service

	systemctl enable uexportfs.service
}


pkg_postinst_ontarget_haproxy-config() {

	install -d -m 755 ${sysconfdir}/haproxy/errors/
	install -m 755 ${datadir}/starlingx/config-files/haproxy-config/files/503.http ${sysconfdir}/haproxy/errors/503.http

	install -m 644 ${datadir}/starlingx/config-files/haproxy-config/files/haproxy.service ${sysconfdir}/systemd/system/
	install -p -D -m 0755 ${datadir}/starlingx/config-files/haproxy-config/files/haproxy.sh ${sysconfdir}/init.d/haproxy

	/bin/systemctl disable haproxy.service
	if test -s ${sysconfdir}/logrotate.d/haproxy ; then
	    echo '#See /etc/logrotate.d/syslog for haproxy rules' > ${sysconfdir}/logrotate.d/haproxy
	fi
}

pkg_postinst_ontarget_initscripts-config() {
	install -d  -m 755 ${sysconfdir}/sysconfig
	install -d  -m 755 ${sysconfdir}/init.d
	install -d  -m 755 ${systemd_system_unitdir}

	SRCPATH=${datadir}/starlingx/config-files/initscripts-config/files
	install -m  644 ${SRCPATH}/sysctl.conf ${datadir}/starlingx/stx.sysctl.conf
	install -m  644 ${SRCPATH}/sysconfig-network.conf ${sysconfdir}/sysconfig/network
	install -m  755 ${SRCPATH}/mountnfs.sh ${sysconfdir}/init.d/mountnfs
	install -m  644 ${SRCPATH}/mountnfs.service ${systemd_system_unitdir}/mountnfs.service


	cp -f ${datadir}/starlingx/stx.sysctl.conf ${sysconfdir}/sysctl.conf
	chmod 644 ${sysconfdir}/sysctl.conf
}

pkg_postinst_ontarget_iscsi-initiator-utils-config() {
#	%description
#	package StarlingX configuration files of iscsi-initiator-utils to system folder.

#	install -d  ${libdir}/tmpfiles.d
#	install -d  ${sysconfdir}/systemd/system
#	install -d  ${datadir}/starlingx

	SRCPATH=${datadir}/starlingx/config-files/iscsi-initiator-utils-config/files
	tmpfilesdir=${libdir}/tmpfiles.d

	install -m 0644 ${SRCPATH}/iscsi-cache.volatiles   ${tmpfilesdir}/iscsi-cache.conf
	install -m 0644 ${SRCPATH}/iscsi-shutdown.service  ${sysconfdir}/systemd/system
	install -m 0644 ${SRCPATH}/iscsid.conf             ${datadir}/starlingx/stx.iscsid.conf

	cp -f ${datadir}/starlingx/stx.iscsid.conf ${sysconfdir}/iscsi/iscsid.conf
	chmod 0750 ${sysconfdir}/iscsi
	chmod 0640 ${sysconfdir}/iscsi/iscsid.conf
	
	/bin/systemctl disable iscsi-shutdown.service
}

pkg_postinst_ontarget_lighttpd-config() {
#	%description
#	StarlingX lighttpd configuration file

	CONFDIR=${sysconfdir}/lighttpd
	ROOTDIR=/www
	SRCPATH=${datadir}/starlingx/config-files/lighttpd-config/files

	install -d -m 1777 ${ROOTDIR}/tmp
	install -d ${CONFDIR}/ssl
	install -d ${ROOTDIR}/pages/dav
        install -m640 ${SRCPATH}/lighttpd.conf		${datadir}/starlingx/lighttpd.conf
	install -m755 ${SRCPATH}/lighttpd.init		${datadir}/starlingx/lighttpd.init
	install -m644 ${SRCPATH}/lighttpd-inc.conf	${CONFDIR}/lighttpd-inc.conf
	install -m644 ${SRCPATH}/index.html.lighttpd	${ROOTDIR}/pages/index.html

	install -d ${sysconfdir}/logrotate.d
	install -m644 ${SRCPATH}/lighttpd.logrotate	${datadir}/starlingx/lighttpd.logrotate
	chmod 02770 ${sysconfdir}/lighttpd

	cp --preserve=xattr -f ${datadir}/starlingx/lighttpd.conf  ${sysconfdir}/lighttpd/lighttpd.conf
	chmod 640 ${sysconfdir}/lighttpd/lighttpd.conf
	cp --preserve=xattr -f ${datadir}/starlingx/lighttpd.logrotate ${sysconfdir}/logrotate.d/lighttpd
	chmod 644 ${sysconfdir}/logrotate.d/lighttpd

	# /etc/rc.d/init.d/lighttpd is not a config file, so replace it here if it doesn't match
	cp --preserve=xattr -f ${datadir}/starlingx/lighttpd.init ${sysconfdir}/rc.d/init.d/lighttpd
	cp --preserve=xattr -f ${datadir}/starlingx/lighttpd.init ${sysconfdir}/init.d/lighttpd
	chmod 755 ${sysconfdir}/rc.d/init.d/lighttpd
	chmod 755 ${sysconfdir}/init.d/lighttpd
}

pkg_postinst_ontarget_logrotate-config() {
#	%description
#	StarlingX logrotate configuration file

	SRCPATH=${datadir}/starlingx/config-files/logrotate-config/files

	install -m 644 ${SRCPATH}/logrotate-cron.d ${sysconfdir}/cron.d/logrotate
	install -m 644 ${SRCPATH}/logrotate.conf ${datadir}/starlingx/logrotate.conf

	cp -f ${datadir}/starlingx/logrotate.conf ${sysconfdir}/logrotate.conf 
	chmod 644 ${sysconfdir}/logrotate.conf
	mv ${sysconfdir}/cron.daily/logrotate ${sysconfdir}/logrotate.cron
	chmod 700 ${sysconfdir}/logrotate.cron
}


pkg_postinst_ontarget_memcached-custom() {
#	Summary: package memcached service files to system folder.

	SRCPATH=${datadir}/starlingx/config-files/memcached-custom/files
	install -m 644 -p ${SRCPATH}/memcached.service ${sysconfdir}/systemd/system/memcached.service
}


pkg_postinst_ontarget_mlx4-config() {
#	%description
#	Wind River Mellanox port-type configuration scripts
	SRCPATH=${datadir}/starlingx/config-files/mlx4-config/files

#	/bin/systemctl disable mlx4-config.service >/dev/null 2>&1

	install -m 755 ${SRCPATH}/mlx4-configure.sh	${sysconfdir}/init.d/
	install -m 644 ${SRCPATH}/mlx4-config.service	${systemd_system_unitdir}/
	install -m 555 ${SRCPATH}/mlx4_core_goenabled.sh ${sysconfdir}/goenabled.d/
	install -m 755 ${SRCPATH}/mlx4_core_config.sh	${bindir}/

	/bin/systemctl enable mlx4-config.service >/dev/null 2>&1
}


pkg_postinst_ontarget_net-snmp-config() {
#	%description
#	package StarlingX configuration files of net-snmp to system folder.

	SRCPATH=${datadir}/starlingx/config-files/net-snmp-config/files

	install -d ${datadir}/snmp

	install -m 644 ${SRCPATH}/stx.snmpd.conf    ${datadir}/starlingx/stx.snmpd.conf
	install -m 755 ${SRCPATH}/stx.snmpd         ${sysconfdir}/rc.d/init.d/snmpd
	install -m 755 ${SRCPATH}/stx.snmpd         ${sysconfdir}/init.d/snmpd
	install -m 660 ${SRCPATH}/stx.snmp.conf     ${datadir}/snmp/snmp.conf
	install -m 644 ${SRCPATH}/snmpd.service     ${sysconfdir}/systemd/system/snmpd.service
	
	
	cp -f ${datadir}/starlingx/stx.snmpd.conf   ${sysconfdir}/snmp/snmpd.conf
	chmod 640 ${sysconfdir}/snmp/snmpd.conf
	chmod 640 ${sysconfdir}/snmp/snmptrapd.conf
	
	/bin/systemctl disable snmpd.service
}


pkg_postinst_nfs-utils-config() {
#	%description
#	package customized configuration and service files of nfs-utils to system folder.


	SRCPATH=$D${datadir}/starlingx/config-files/nfs-utils-config/files
	

	install -m 755 -p -D ${SRCPATH}/nfscommon		$D${sysconfdir}/init.d
	install -m 644 -p -D ${SRCPATH}/nfscommon.service	$D${systemd_system_unitdir}/
	install -m 755 -p -D ${SRCPATH}/nfsserver		$D${sysconfdir}/init.d
	install -m 644 -p -D ${SRCPATH}/nfsserver.service	$D${systemd_system_unitdir}
	install -m 644 -p -D ${SRCPATH}/nfsmount.conf		$D${datadir}/starlingx/stx.nfsmount.conf
	
	cp -f $D${datadir}/starlingx/stx.nfsmount.conf $D${sysconfdir}/nfsmount.conf
	chmod 644 $D${sysconfdir}/nfsmount.conf

	# enable nfs services by default
	OPTS=""
	if [ -n "$D" ]; then
		OPTS="--root=$D"
	fi
	if [ -z "$D" ]; then
		systemctl daemon-reload
	fi

	systemctl $OPTS enable nfscommon.service
	systemctl $OPTS enable nfsserver.service

	if [ -z "$D" ]; then
		systemctl --no-block restart nfscommon.service
		systemctl --no-block restart nfsserver.service
	fi
}

pkg_postinst_ontarget_ntp-config() {
#	%description
#	StarlingX ntp configuration file

	SRCPATH=${datadir}/starlingx/config-files/ntp-config/files
	install -D -m644 ${SRCPATH}/ntpd.sysconfig ${datadir}/starlingx/ntpd.sysconfig
	install -D -m644 ${SRCPATH}/ntp.conf ${datadir}/starlingx/ntp.conf

	cp -f ${datadir}/starlingx/ntpd.sysconfig ${sysconfdir}/sysconfig/ntpd
	cp -f ${datadir}/starlingx/ntp.conf ${sysconfdir}/ntp.conf
	chmod 644 ${sysconfdir}/sysconfig/ntpd
	chmod 644 ${sysconfdir}/ntp.conf
}


pkg_postinst_ontarget_openldap-config() {
#	$description
#	StarlingX openldap configuration file

	SRCPATH=${datadir}/starlingx/config-files/openldap-config/files

	install -m 755 ${SRCPATH}/initscript ${sysconfdir}/init.d/openldap
	install -m 600 ${SRCPATH}/slapd.conf ${sysconfdir}/openldap/slapd.conf

	install -m 600 ${SRCPATH}/initial_config.ldif ${sysconfdir}/openldap/initial_config.ldif

	install -m 644 ${SRCPATH}/slapd.service ${sysconfdir}/systemd/system/slapd.service
	install -m 644 ${SRCPATH}/slapd.sysconfig ${datadir}/starlingx/slapd.sysconfig 

	sed -i -e 's|/var/run|/run|' ${sysconfdir}/systemd/system/slapd.service
	
	cp -f ${datadir}/starlingx/slapd.sysconfig ${sysconfdir}/sysconfig/slapd
	chmod 644 ${systemd_system_unitdir}/slapd
}

pkg_postinst_openssh-config() {
#	%description
#	package StarlingX configuration files of openssh to system folder.


	SRCPATH=$D${datadir}/starlingx/config-files/openssh-config/files

	install -m 644 ${SRCPATH}/sshd.service  $D${sysconfdir}/systemd/system/sshd.service
	install -m 644 ${SRCPATH}/ssh_config    $D${datadir}/starlingx/ssh_config
	install -m 600 ${SRCPATH}/sshd_config   $D${datadir}/starlingx/sshd_config

	# remove the unsupported and deprecated options
	sed -i -e 's/^\(GSSAPIAuthentication.*\)/#\1/' \
	       -e 's/^\(GSSAPICleanupCredentials.*\)/#\1/' \
	       -e 's/^\(UsePrivilegeSeparation.*\)/#\1/' \
	       $D${datadir}/starlingx/sshd_config

	sed -i -e 's/\(GSSAPIAuthentication yes\)/#\1/' $D${datadir}/starlingx/ssh_config
	
	cp -f $D${datadir}/starlingx/ssh_config  $D${sysconfdir}/ssh/ssh_config
	cp -f $D${datadir}/starlingx/sshd_config $D${sysconfdir}/ssh/sshd_config

	# enable sshd service by default
	OPTS=""
	if [ -n "$D" ]; then
		OPTS="--root=$D"
	fi
	if [ -z "$D" ]; then
		systemctl daemon-reload
	fi

	systemctl $OPTS enable sshd.service

	if [ -z "$D" ]; then
		systemctl --no-block restart sshd.service
	fi

}

pkg_postinst_ontarget_openvswitch-config() {
#	%description
#	StarlingX openvswitch configuration file

	SRCPATH=${datadir}/starlingx/config-files/openvswitch-config/files

	install -m 0644 ${SRCPATH}/ovsdb-server.pmon.conf ${sysconfdir}/openvswitch/ovsdb-server.pmon.conf
	install -m 0644 ${SRCPATH}/ovs-vswitchd.pmon.conf ${sysconfdir}/openvswitch/ovs-vswitchd.pmon.conf
	install -m 0640 ${SRCPATH}/etc_logrotate.d_openvswitch ${datadir}/starlingx/etc_logrotate.d_openvswitch
	
	cp -f ${datadir}/starlingx/etc_logrotate.d_openvswitch ${sysconfdir}/logrotate.d/openvswitch
	chmod 644 ${sysconfdir}/logrotate.d/openvswitch
}

pkg_postinst_ontarget_pam-config() {
#	%description
#	package StarlingX configuration files of pam to system folder.

	SRCPATH=${datadir}/starlingx/config-files/pam-config/files

	install  -m 644 ${SRCPATH}/sshd.pam        ${datadir}/starlingx/sshd.pam
	install  -m 644 ${SRCPATH}/common-account  ${sysconfdir}/pam.d/common-account
	install  -m 644 ${SRCPATH}/common-auth     ${sysconfdir}/pam.d/common-auth
	install  -m 644 ${SRCPATH}/common-password ${sysconfdir}/pam.d/common-password
	install  -m 644 ${SRCPATH}/common-session  ${sysconfdir}/pam.d/common-session
	install  -m 644 ${SRCPATH}/common-session-noninteractive ${sysconfdir}/pam.d/common-session-noninteractive
	install  -m 644 ${SRCPATH}/system-auth.pamd ${datadir}/starlingx/stx.system-auth
	
	cp -f ${datadir}/starlingx/stx.system-auth ${sysconfdir}/pam.d/system-auth
	cp -f ${datadir}/starlingx/sshd.pam    ${sysconfdir}/pam.d/sshd

	sed -i -e '/password .*pam_ldap.so/,/session .*revoke/ s/^$/password required pam_deny.so\n/g' \
		${sysconfdir}/pam.d/system-auth
}

pkg_postinst_ontarget_rabbitmq-server-config() {
#	%description
#	package StarlingX configuration files of rabbitmq-server to system folder.

	SRCPATH=${datadir}/starlingx/config-files/rabbitmq-server-config/files

	install -d ${libdir}/ocf/resource.d/rabbitmq
	install -m 0755 ${SRCPATH}/rabbitmq-server.ocf              ${libdir}/ocf/resource.d/rabbitmq/stx.rabbitmq-server
	install -m 0644 ${SRCPATH}/rabbitmq-server.service.example  ${sysconfdir}/systemd/system/rabbitmq-server.service
	install -m 0644 ${SRCPATH}/rabbitmq-server.logrotate        ${datadir}/starlingx/stx.rabbitmq-server.logrotate

	sed -i -e 's/notify/simple/' ${sysconfdir}/systemd/system/rabbitmq-server.service

	cp ${datadir}/starlingx/stx.rabbitmq-server.logrotate ${sysconfdir}/logrotate.d/rabbitmq-server
}

pkg_postinst_ontarget_rsync-config() {
#	%description
#	package StarlingX configuration files of rsync to system folder.

	SRCPATH=${datadir}/starlingx/config-files/rsync-config/files

	install -m 644 ${SRCPATH}/rsyncd.conf  ${datadir}/starlingx/stx.rsyncd.conf
	
	cp -f ${datadir}/starlingx/stx.rsyncd.conf  ${sysconfdir}/rsyncd.conf
}

pkg_postinst_ontarget_setup-config() {
#	%description
#	package StarlingX configuration files of setup to system folder.

	SRCPATH=${datadir}/starlingx/config-files/setup-config/files

	install -m 644 ${SRCPATH}/motd          ${datadir}/starlingx/stx.motd
	install -m 644 ${SRCPATH}/prompt.sh     ${sysconfdir}/profile.d/prompt.sh
	install -m 644 ${SRCPATH}/custom.sh     ${sysconfdir}/profile.d/custom.sh

	cp -f ${datadir}/starlingx/stx.motd    ${sysconfdir}/motd
	chmod 600   ${sysconfdir}/{exports,fstab}
}

pkg_postinst_ontarget_shadow-utils-config() {
#	%description
#	StarlingX shadow-utils configuration file

	SRCPATH=${datadir}/starlingx/config-files/shadow-utils-config/files

	install -D -m644 ${SRCPATH}/login.defs ${datadir}/starlingx/login.defs
	install -D -m644 ${SRCPATH}/clear_shadow_locks.service  ${systemd_system_unitdir}/clear_shadow_locks.service

	cp -f ${datadir}/starlingx/login.defs ${sysconfdir}/login.defs
	chmod 644 ${sysconfdir}/login.defs
	/bin/systemctl preset clear_shadow_locks.service
}

pkg_postinst_ontarget_sudo-config() {
#	%description
#	StarlingX sudo configuration file

	SYSADMIN_P="4SuW8cnXFyxsk"
	SRCPATH=${datadir}/starlingx/config-files/sudo-config/files

	install -m 440 ${SRCPATH}/sysadmin.sudo  ${sysconfdir}/sudoers.d/sysadmin

	getent group sys_protected >/dev/null || groupadd -f -g 345 sys_protected
	getent passwd sysadmin > /dev/null || \
		useradd -m -g sys_protected -G root  -d /home/sysadmin -p ${SYSADMIN_P} -s /bin/sh sysadmin 2> /dev/null || :
}

pkg_postinst_syslog-ng-config() {
#	%description
#	StarlingX syslog-ng configuration file

	SRCPATH=$D${datadir}/starlingx/config-files/syslog-ng-config/files

	install -D -m644 ${SRCPATH}/syslog-ng.conf $D${datadir}/starlingx/syslog-ng.conf

	# Fix the config version to avoid warning
	sed -i -e 's/\(@version: \).*/\1 3.19/' $D${datadir}/starlingx/syslog-ng.conf

	# Workaround: comment out the udp source to aviod the service fail to start at boot time
	sed -i -e 's/\(.*s_udp.*\)/#\1/' $D${datadir}/starlingx/syslog-ng.conf

	install -D -m644 ${SRCPATH}/syslog-ng.logrotate $D${datadir}/starlingx/syslog-ng.logrotate
	install -D -m644 ${SRCPATH}/remotelogging.conf $D${sysconfdir}/syslog-ng/remotelogging.conf
	install -D -m700 ${SRCPATH}/fm_event_syslogger $D${sbindir}/fm_event_syslogger
	install -D -m644 ${SRCPATH}/syslog-ng.service $D${datadir}/starlingx/syslog-ng.service

	cp -f $D${datadir}/starlingx/syslog-ng.conf $D${sysconfdir}/syslog-ng/syslog-ng.conf
	chmod 644 $D${sysconfdir}/syslog-ng/syslog-ng.conf
	cp -f $D${datadir}/starlingx/syslog-ng.logrotate $D${sysconfdir}/logrotate.d/syslog
	chmod 644 $D${sysconfdir}/logrotate.d/syslog
	cp -f $D${datadir}/starlingx/syslog-ng.service $D${systemd_system_unitdir}/syslog-ng.service
	chmod 644 $D${systemd_system_unitdir}/syslog-ng.service

	# enable syslog-ng service by default
	OPTS=""
	if [ -n "$D" ]; then
		OPTS="--root=$D"
	fi
	if [ -z "$D" ]; then
		systemctl daemon-reload
	fi

	systemctl $OPTS enable syslog-ng.service

	if [ -z "$D" ]; then
		systemctl --no-block restart syslog-ng.service
	fi
}

pkg_postinst_ontarget_systemd-config() {
#	%description
#	StarlingX systemd configuration file

	SRCPATH=${datadir}/starlingx/config-files/systemd-config/files

	install -m644 ${SRCPATH}/60-persistent-storage.rules ${sysconfdir}/udev/rules.d/60-persistent-storage.rules
	install -m644 ${SRCPATH}/journald.conf ${datadir}/starlingx/journald.conf
	install -m644 ${SRCPATH}/systemd.conf.tmpfiles.d ${sysconfdir}/tmpfiles.d/systemd.conf
	install -m644 ${SRCPATH}/tmp.conf.tmpfiles.d ${sysconfdir}/tmpfiles.d/tmp.conf
	install -m644 ${SRCPATH}/tmp.mount ${sysconfdir}/systemd/system/tmp.mount

	cp -f ${datadir}/starlingx/journald.conf ${sysconfdir}/systemd/journald.conf
	chmod 644 ${sysconfdir}/systemd/journald.conf
}

pkg_postinst_ontarget_util-linux-config() {
#	%description
#	package StarlingX configuration files of util-linux to system folder.

	SRCPATH=${datadir}/starlingx/config-files/util-linux-config/files

	install -m 644 ${SRCPATH}/stx.su     ${datadir}/starlingx/stx.su
	install -m 644 ${SRCPATH}/stx.login  ${datadir}/starlingx/stx.login
	install -m 644 ${SRCPATH}/stx.postlogin ${datadir}/starlingx/stx.postlogin

	cp -f ${datadir}/starlingx/stx.su ${sysconfdir}/pam.d/su
	cp -f ${datadir}/starlingx/stx.login  ${sysconfdir}/pam.d/login
	cp -f ${datadir}/starlingx/stx.postlogin  ${sysconfdir}/pam.d/postlogin

}

pkg_postinst_ontarget_ioscheduler-config() {
#	%description
#	CGCS io scheduler configuration and tuning.

	/bin/udevadm control --reload-rules
	/bin/udevadm trigger --type=devices --subsystem-match=block
}

pkg_postinst_ontarget_iptables-config() {
#	%description
#	StarlingX iptables configuration file

	SRCPATH=${datadir}/starlingx/config-files/iptables-config/files
	
	install -m 600 ${SRCPATH}/iptables.rules ${datadir}/starlingx/iptables.rules
	install -m 600 ${SRCPATH}/ip6tables.rules ${datadir}/starlingx/ip6tables.rules 
	
	cp -f S{datadir}/starlingx/iptables.rules ${sysconfdir}/sysconfig/iptables
	chmod 600 ${sysconfdir}/sysconfig/iptables
	cp -f ${datadir}/starlingx/ip6tables.rules ${sysconfdir}/sysconfig/ip6tables
	chmod 600 ${sysconfdir}/sysconfig/ip6tables
	/bin/systemctl enable iptables.service ip6tables.service >/dev/null 2>&1
}