Building the Laika AMI

Transcription

1 Building the Laika AMI Ben Uphoff, CCHIT Table of Contents Install steps... 2 Install dependencies and congure environment... 2 Get and congure Laika... 3 Congure Laika to start on system boot... 3 Create the Laika schema and populate it... 4 Install Apache from Source... 4 Download, verify and unpack the distribution... 4 Congure and install the server... 4 Modify conf/httpd.conf to include (in the pertinent sections of the le):... 4 NameVirtualHost directive... 4 Congure Apache to start on system boot... 4 XDS Registry & Repository... 5 Initial environment setup... 5 Get the supporting software (Tomcat and ebxml)... 5 Databases and user setup... 5 Tomcat setup... 5 Get the XDS server code, expand archive and install... 6 Congure Tomcat to launch at system startup... 6 Resetting the XDS database... 6 PIX/PDQ... 7 Get the supporting software... 7 If upgrading... 7 Install... 7 Congure... 7 Congure pixpdq to launch at system startup... 7 Start PIX/PDQ server... 7 February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 1 of 23

2 Clearing the HL7 message log in Laika... 7 AMI at this point in the build... 8 ATNA logging server... 8 Congure ATNA logging server to launch at system startup... 8 TLS encryption of services... 8 XDS... 8 PIX/PDQ... 8 ATNA... 8 Notes... 9 Other thoughts... 9 Scripts... 9 usr/local/apache2/conf/extra/laika.conf... 9 etc/init.d/apache usr/local/apache2/envvars etc/prole.d/laika_env.sh var/www/laika/cong/database.yml etc/init.d/laika.sh etc/init.d/tomcat1.sh etc/init.d/tomcat2.sh home/tomcat/.prole etc/init.d/pixpdq.sh etc/init.d/bsdsyslog.sh Install steps Started with Alestic ami-ccf615a5, Ubuntu 9.04 Jaunty Server Install dependencies and congure environment apt-get update apt-get upgrade apt-get install sun-java5-jdk apt-get install sun-java6-jdk wget tar -zxf jruby-bin tar.gz mv jruby /usr/local/ ln -s /usr/local/jruby /usr/local/jruby February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 2 of 23

3 apt-get install vim Create /etc/prole.d/java_prole.sh as JAVA_HOME=/usr/lib/jvm/java-6-sun JRUBY_HOME=/usr/local/jruby PATH="$PATH:$JRUBY_HOME/bin" export JAVA_HOME JRUBY_HOME PATH Make script executable chmod 755 /etc/prole.d/java_prole.sh Then, run the script statements manually - not executing for some reason - [need! bin/sh or something?). Or, reboot. Install Rails jruby -S gem sources -a jruby -S gem install rails -v= no-rdoc --no-ri Install MySQL apt-get install mysql-server root PW = <insert your own secure password> Get and congure Laika apt-get install git-core mkdir /var/www cd /var/www git clone git://github.com/cchit/laika.git cd laika cp./cong/database.yml.template./cong/database.yml Fix reference to Rails version in environment.rb (v > v2.3.5) Install the balance of the gem dependencies jruby -S gem install jruby-openssl jruby -S gem install activerecord-jdbcmysql-adapter jruby -S gem install activerecord-jdbcpostgresql-adapter jruby -S rake gems:install Log into MySQL and set up the database mysql> create database laika; mysql> grant all on laika.* to 'laika'@'localhost' identied by 'laika'; Install the Glasssh application server jruby -S gem install glasssh Update /etc/prole.d/laika_env.sh Execute this script, or the commands therein to set the CLASSPATH environment variable. Create /var/www/laika/cong/database.yml Congure Laika to start on system boot Create /etc/init.d/laika.sh February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 3 of 23

4 Set permissions and install as startup script chmod 755 /etc/init.d/laika.sh cd /etc/init.d update-rc.d laika.sh defaults Create the Laika schema and populate it jruby -S rake db:migrate jruby -S rake db:seed Watch for admin user account setup Install Apache from Source Download, verify and unpack the distribution Get the latest release (v as of December 2009) wget Verify the MD5 for the download md5sum httpd tar.gz Compare the resulting MD5 with that available at the Apache distribution site Unpack the gzipped tar tar xvf httpd tar.gz cd httpd Congure and install the server./congure --enable-rewrite=shared --enable-proxy=shared make make install Modify conf/httpd.conf to include (in the pertinent sections of the le): ServerRoot "/usr/local/apache2" LoadModule rewrite_module modules/mod_rewrite.so LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_http_module modules/mod_proxy_http.so ServerAdmin Laika virtual host Include conf/extra/laika.conf NameVirtualHost directive Ensure only one instance of NameVirtualHost directive - should only be in laika.conf; remove from ports.conf and elsewhere. grep for "NameVirtualHost"? Implement /usr/local/apache2/envvars Congure Apache to start on system boot Create /etc/init.d/apache2 chmod 755 /etc/init.d/apache2 update-rc.d apache2 defaults February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 4 of 23

5 XDS Registry & Repository Initial environment setup Update the apt-get cache apt-get update Update any packages in-need apt-get upgrade Install PostgreSQL apt-get install postgresql apt-get install postgresql-client Create accounts used by XDS services sudo -u postgres createuser -s root sudo -u postgres createuser -s bill Get the supporting software (Tomcat and ebxml) cd ~ wget n_2.tgz tar xfz xds_support_bin_2.tgz Databases and user setup createuser -s -P ebxmlrr (empty password) createuser -s -P xdsoper (password xdsoper) createuser -s -P logs (password xdslogs) createdb -O xdsoper registry createdb adt createdb -O logs log2 cd ~/xds_support_bin_2 pg_restore -d registry -F t init_data/xds/xds_init.tar pg_restore -d adt init_data/adt/adt.dump Tomcat setup adduser tomcat (insert your secure password) mkdir /usr/local/tomcat2 February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 5 of 23

6 chown tomcat /usr/local/tomcat2 cd ~/xds_support_bin_2/tomcat2 cp -R * /usr/local/tomcat2 cd /usr/local/tomcat2/ chown -R tomcat:tomcat * mkdir /usr/local/tomcat1 chown tomcat /usr/local/tomcat1 cd ~/xds_support_bin_2/tomcat1 cp -R * /usr/local/tomcat1 cd /usr/local/tomcat1/ chown -R tomcat:tomcat * Get the XDS server code, expand archive and install cd ~ wget 1_0.tgz tar xfz xds_server_bin_1_0.tgz cd xds_server_bin_1_0./install.sh Congure Tomcat to launch at system startup Modify /home/tomcat/.prole Create /etc/init.d/tomcat1.sh Create /etc/init.d/tomcat2.sh Set execute permissions on startup scripts chmod 755 /etc/init.d/tomcat* Set rc links update-rc.d tomcat2.sh multiuser update-rc.d tomcat1.sh multiuser Resetting the XDS database Use this procedure to reset the PostgreSQL XDS databases back to their default state. Useful in preparing an AMI for bundling, or getting an instance to a known, clean state. Version in-use on Laika AMIs (Technical Framework v5; tf5) may be found here: pg_restore commands reference the xds_support_bin_2 directory, so change to that directory before running or modify path accordingly. /etc/init.d/tomcat1.sh stop /etc/init.d/tomcat2.sh stop dropdb -e registry createdb -O xdsoper registry dropdb -e adt createdb adt pg_restore -d registry -F t init_data/xds/xds_init.tar pg_restore -d adt init_data/adt/adt.dump /etc/init.d/tomcat1.sh start /etc/init.d/tomcat2.sh start February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 6 of 23

7 PIX/PDQ Get the supporting software Install ant apt-get install ant Download and build OpenPIXPDQAdapter cd ~ git clone git://github.com/citiustech/laika-pixpdq-adapter.git cd laika-pixpdq-adapter ant If upgrading Stop PIX/PDQ server and back up existing version. Modify these steps for path changes as appropriate. /etc/init.d/pixpdq.sh stop mv /usr/local/laika/pixpdq_server /usr/local/laika/pixpdq_server_old Install Move the pixpdq_server to the appropriate install path mkdir /usr/local/laika mv pixpdq_server /usr/local/laika/ Congure Set database values in pixpdq_server/conf/db.properties and pixpdq_server/conf/hibernate.cfg.xml Username: laika Password: laika Set domain values in pixpdq_server/conf/actors/pixpdqclientdomains.xml NamespaceId: CCHIT UniversalId: UniversalIdType: ISO Congure pixpdq to launch at system startup Create /etc/init.d/pixpdq.sh Set execute permissions on startup script chmod 755 /etc/init.d/pixpdq.sh Set rc links update-rc.d pixpdq.sh multiuser Start PIX/PDQ server /etc/init.d/pixpdq.sh start Clearing the HL7 message log in Laika Log into MySQL as root or laika user, then: mysql> use laika; mysql> delete from messagelog; February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 7 of 23

8 AMI at this point in the build laika04, ami-e8ed0081 ATNA logging server Download the syslog package from the CCHIT GitHub site wget Install unzip apt-get install unzip Expand zip archive unzip syslog_server.zip Move the server to /usr/local mv syslog_server /usr/local/ Create syslog db Use logs user from XDS install createdb -O logs syslog Update /var/www/laika/cong/database.yml with these settings ATNA message log syslog: adapter: jdbcpostgresql host: localhost database: syslog username: logs password: xdslogs port: 5432 Congure ATNA logging server to launch at system startup Create /etc/init.d/bsdsyslog.sh Set execute permissions on startup script chmod 755 /etc/init.d/bsdsyslog.sh Set rc links update-rc.d bsdsyslog.sh multiuser TLS encryption of services XDS PIX/PDQ ATNA IHE is not requiring TLS encryption of ATNA logging as of January See - "Future of ATNA transport" (near end of FAQ). February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 8 of 23

9 When required, see as a possible syslog daemon to implement. It mirrors the standard syslogd behavior, is very flexible, and can write to a database. Notes The ATNA logging is not installed. database.yml should be reviewed to ensure settings for adv. interop components are accurate. Other thoughts Get Glasssh to bind to localhost only (don't expose to ext adapter) Check out Bastille (security wizard/documentation) Move to Rails Fix apache2 init.d script to better deal with htcacheclean parameters Scripts /usr/local/apache2/conf/extra/laika.conf NameVirtualHost *:80 <VirtualHost *:80> ServerAdmin webmaster@localhost Disable forward proxy - keeps Apache from acting like a relay. Really important! ProxyRequests Off ProxyPreserveHost on RewriteEngine on Deal with old, published URL RewriteRule ^/laika(.*) [P,L] Main rewrite to Glasssh application server RewriteRule ^/(.*) [P,L] <Directory /> Options FollowSymLinks AllowOverride None Order Deny,Allow Deny from all </Directory> ErrorLog /usr/local/apache2/logs/apache_err_laika.log Possible values include: debug, info, notice, warn, error, crit, alert, emerg. LogLevel debug CustomLog /usr/local/apache2/logs/apache_access_laika.log combined February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 9 of 23

10 </VirtualHost> ServerSignature On /etc/init.d/apache2 Modied version of that included with packaged install of Apache2 via apt-get!/bin/sh -e BEGIN INIT INFO Provides: apache2 Required-Start: $local_fs $remote_fs $network $syslog Required-Stop: $local_fs $remote_fs $network $syslog Default-Start: Default-Stop: Short-Description: Start/stop apache2 web server END INIT INFO apache2 This init.d script is used to start apache2. It basically just calls apache2ctl. Modied by Ben Uphoff to handle an install from source ENV="env -i LANG=C PATH=/usr/local/bin:/usr/bin:/bin" [ `ls -1 /etc/apache2/sites-enabled/ wc -l sed -e 's/ *//;'` -eq 0 ] && \ echo "You haven't enabled any sites yet, so I'm not starting apache2." && \ echo "To add and enable a host, use addhost and enhost." && exit 0 edit /etc/default/apache2 to change this. HTCACHECLEAN_RUN=auto HTCACHECLEAN_MODE=daemon HTCACHECLEAN_SIZE=300M HTCACHECLEAN_DAEMON_INTERVAL=120 HTCACHECLEAN_PATH=/var/cache/apache2/mod_disk_cache HTCACHECLEAN_OPTIONS="" set -e if [ -x /usr/local/apache2 ] ; then HAVE_APACHE2=1 else echo "No apache MPM package installed" exit 0. /lib/lsb/init-functions test -f /etc/default/rcs &&. /etc/default/rcs test -f /etc/default/apache2 &&. /etc/default/apache2 APACHE2CTL="$ENV /usr/local/apache2/bin/apachectl" HTCACHECLEAN="$ENV /usr/local/apache2/bin/htcacheclean" PIDFILE=`. /usr/local/apache2/envvars ; echo $APACHE_PID_FILE` if [ -z "$PIDFILE" ] ; then February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 10 of 23

11 echo ERROR: APACHE_PID_FILE needs to be dened in /usr/local/apache2/envvars >&2 exit 2 check_htcacheclean() { [ "$HTCACHECLEAN_MODE" = "daemon" ] return 1 [ "$HTCACHECLEAN_RUN" = "yes" ] && return 0 [ "$HTCACHECLEAN_RUN" = "auto" \ -a -e /etc/apache2/mods-enabled/disk_cache.load ] && return 0 return 1 start_htcacheclean() { $HTCACHECLEAN $HTCACHECLEAN_OPTIONS -d$htcacheclean_daemon_interval \ -i -p$htcacheclean_path -l$htcacheclean_size stop_htcacheclean() { killall htcacheclean 2> /dev/null echo...not running pidof_apache() { if pidof is null for some reasons the script exits automagically classied as good/unknown feature PIDS=`pidof apache2` true [ -e $PIDFILE ] && PIDS2=`cat $PIDFILE` if there is a pid we need to verify that belongs to apache2 for real for i in $PIDS; do if [ "$i" = "$PIDS2" ]; then in this case the pid stored in the pidle matches one of the pidof apache so a simple kill will make it echo $i return 0 done return 1 apache_stop() { if `$APACHE2CTL congtest > /dev/null 2>&1`; then if the cong is ok than we just stop normaly $APACHE2CTL stop 2>&1 grep -v 'not running' >&2 true else if we are here something is broken and we need to try to exit as nice and clean as possible PID=$(pidof_apache) February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 11 of 23

12 if [ "${PID" ]; then in this case it is everything nice and dandy and we kill apache2 log_warning_msg "We failed to correctly shutdown apache, so we're now killing all running apache processes. This is almost certainly suboptimal, so please make sure your system is working as you'd expect now!" kill $PID elif [ "$(pidof apache2)" ]; then if [ "$VERBOSE"!= no ]; then echo "... failed!" echo "You may still have some apache2 processes running. There are" echo "processes named 'apache2' which do not match your pid le," echo "and in the name of safety, we've left them alone. Please review" echo "the situation by hand." return 1 apache_wait_stop() { running? PIDTMP=$(pidof_apache) if $(kill -0 "${PIDTMP:-" 2> /dev/null); then PID=$PIDTMP apache_stop wait until really stopped if [ -n "${PID:-" ]; then i=0 while $(kill -0 "${PID:-" 2> /dev/null); do if [ $i = '60' ]; then break; else if [ $i = '0' ]; then echo -n "... waiting " else echo -n "." i=$(($i+1)) sleep 1 done case $1 in start) log_daemon_msg "Starting web server" "apache2" if $APACHE2CTL start; then if check_htcacheclean ; then February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 12 of 23

13 stop) else log_progress_msg htcacheclean start_htcacheclean log_end_msg 1 log_end_msg 0 log_end_msg 1 if check_htcacheclean ; then log_daemon_msg "Stopping web server" "htcacheclean" stop_htcacheclean log_progress_msg "apache2" else log_daemon_msg "Stopping web server" "apache2" if apache_wait_stop; then log_end_msg 0 else log_end_msg 1 reload force-reload) if! $APACHE2CTL congtest > /dev/null 2>&1; then $APACHE2CTL congtest true log_end_msg 1 exit 1 log_daemon_msg "Reloading web server cong" "apache2" if pidof_apache > /dev/null ; then if $APACHE2CTL graceful $2 ; then log_end_msg 0 else log_end_msg 1 restart) if check_htcacheclean ; then log_daemon_msg "Restarting web server" "htcacheclean" stop_htcacheclean log_progress_msg apache2 else log_daemon_msg "Restarting web server" "apache2" PID=$(pidof_apache) true if! apache_wait_stop; then log_end_msg 1 true if $APACHE2CTL start; then if check_htcacheclean ; then start_htcacheclean log_end_msg 1 log_end_msg 0 else log_end_msg 1 February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 13 of 23

14 start-htcacheclean) log_daemon_msg "Starting htcacheclean" start_htcacheclean log_end_msg 1 log_end_msg 0 stop-htcacheclean) log_daemon_msg "Stopping htcacheclean" stop_htcacheclean log_end_msg 0 status) PID=$(pidof_apache) if [ -n "$PID" ]; then log_success_msg "Apache is running (pid $PID)." exit 0 else log_failure_msg "Apache is not running." exit 1 *) log_success_msg "Usage: /etc/init.d/apache2 {start stop restart reload force-reload start-htcacheclean stophtcacheclean status" exit 1 /usr/local/apache2/envvars envvars - default environment variables for apache2ctl Since there is no sane way to get the parsed apache2 cong in scripts, some settings are dened via environment variables and then used in apache2ctl, /etc/init.d/apache2, /etc/logrotate.d/apache2, etc. export APACHE_RUN_USER=www-data export APACHE_RUN_GROUP=www-data export APACHE_PID_FILE=/var/run/apache2.pid /etc/prole.d/laika_env.sh CLASSPATH=/var/www/laika/lib/saxon/saxon9.jar:/var/www/laika/lib/saxon/saxon9 -dom.jar export CLASSPATH /var/www/laika/cong/database.yml default settings login: &login encoding: UTF8 username: laika password: laika ATNA message log syslog: adapter: jdbcpostgresql February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 14 of 23

15 database: syslog port: 5432 host: localhost username: sysloguser password: sysloguser UMLS database settings umls_production: adapter: jdbcmysql host: umls.cchit.org database: umls username: umls password: cchitreadonly umls_development: adapter: jdbcmysql host: umls.cchit.org database: umls username: umls password: cchitreadonly umls_test: adapter: jdbcmysql host: umls.cchit.org database: umls username: umls password: cchitreadonly NIST XDS local repository nist_xds_registry: adapter: jdbcpostgresql database: registry host: localhost username: xdsoper password: xdsoper port: 5432 laika development settings development: adapter: jdbcmysql database: laika <<: *login laika production settings production: adapter: jdbcmysql database: laika <<: *login Warning: The database dened as "test" will be erased and re-generated from your development database when you run "rake". Do not set this db to the same as development or production. test: adapter: jdbcmysql database: laika_test <<: *login February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 15 of 23

16 /etc/init.d/laika.sh! /bin/sh BEGIN INIT INFO Provides: laika Required-Start: $local_fs $remote_fs Required-Stop: $local_fs $remote_fs Default-Start: Default-Stop: S Short-Description: Laika startup script Description: Start's Laika JRuby on Rails application, using Glasssh application server packaged as gem END INIT INFO Author: Ben Uphof <buphoff@cchit.org> Do NOT "set -e" PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/ jruby/bin DESC="Laika testing framework" NAME=glasssh DAEMON=/usr/local/jruby/bin/$NAME APP_PATH=/var/www/laika DAEMON_ARGS="-p n 2 --runtimes-max=2 --runtimes-min=2 -e production" PIDFILE=/var/run/$NAME.pid SCRIPTNAME=/etc/init.d/laika.sh CLASSPATH=/var/www/laika/lib/saxon/saxon9.jar:/var/www/laika/lib/saxon/saxon9 -dom.jar export CLASSPATH Exit if the package is not installed [ -x "$DAEMON" ] exit 0 Read conguration variable le if it is present [ -r /etc/default/$name ] &&. /etc/default/$name Load the VERBOSE setting and other rcs variables [ -f /etc/default/rcs ] &&. /etc/default/rcs Dene LSB log_* functions. Depend on lsb-base (>= 3.0-6) to ensure that this le is present.. /lib/lsb/init-functions Function that starts the daemon/service do_start() { cd $APP_PATH nohup $DAEMON $DAEMON_ARGS 0<&- 1>/dev/null 2>&1 & Function that stops the daemon/service February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 16 of 23

17 do_stop() { pkill -f glasssh case "$1" in start) [ "$VERBOSE"!= no ] && log_daemon_msg "Starting $DESC" "$NAME" do_start 0 1) [ "$VERBOSE"!= no ] && log_end_msg 0 2) [ "$VERBOSE"!= no ] && log_end_msg 1 stop) [ "$VERBOSE"!= no ] && log_daemon_msg "Stopping $DESC" "$NAME" do_stop 0 1) [ "$VERBOSE"!= no ] && log_end_msg 0 2) [ "$VERBOSE"!= no ] && log_end_msg 1 restart force-reload) log_daemon_msg "Restarting $DESC" "$NAME" do_stop 0 1) do_start 0) log_end_msg 0 1) log_end_msg 1 Old process is still running *) log_end_msg 1 Failed to start *) Failed to stop log_end_msg 1 *) echo "Usage: $SCRIPTNAME {start stop restart reload force-reload" >&2 echo "Usage: $SCRIPTNAME {start stop restart force-reload" >&2 exit 3 : /etc/init.d/tomcat1.sh!/bin/sh Startup script for Tomcat1 JAVA_HOME commented out because it's in ~/tomcat/.prole February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 17 of 23

18 JAVA_HOME=/usr/lib/jvm/java sun /bin export JAVA_HOME start_tomcat=/usr/local/tomcat1/bin/startup.sh stop_tomcat=/usr/local/tomcat1/bin/shutdown.sh start() { echo -n "Starting tomcat: " su -l tomcat -c ${start_tomcat echo "done." stop() { echo -n "Shutting down tomcat: " su -l tomcat -c ${stop_tomcat echo "done." See how we were called case "$1" in start) start stop) stop restart) stop sleep 10 start *) echo "Usage: $0 {start stop restart" exit 0 /etc/init.d/tomcat2.sh!/bin/sh Startup script for Tomcat2 JAVA_HOME commented out because it's in ~/tomcat/.prole JAVA_HOME=/usr/lib/jvm/java sun /bin export JAVA_HOME start_tomcat=/usr/local/tomcat2/bin/startup.sh stop_tomcat=/usr/local/tomcat2/bin/shutdown.sh start() { echo -n "Starting tomcat: " su -l tomcat -c ${start_tomcat echo "done." stop() { echo -n "Shutting down tomcat: " su -l tomcat -c ${stop_tomcat echo "done." February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 18 of 23

19 See how we were called case "$1" in start) start stop) stop restart) stop sleep 10 start *) echo "Usage: $0 {start stop restart" exit 0 /home/tomcat/.prole Add this to end of the le set JAVA_HOME for ancient tomcat instances export JAVA_HOME=/usr/lib/jvm/java sun /etc/init.d/pixpdq.sh! /bin/sh BEGIN INIT INFO Provides: OpenPIXPDQManager Required-Start: $local_fs $remote_fs Required-Stop: $local_fs $remote_fs Default-Start: Default-Stop: S Short-Description: PIX/PDQ manager for Laika Description: PIX/PDQ manager for Laika END INIT INFO Author: Ben Uphoff <buphoff@cchit.org> PATH=/usr/sbin:/usr/bin:/sbin:/bin DESC="OpenPIXPDQManager" NAME=java APP_PATH=/usr/local/laika/pixpdq_server DAEMON=/usr/lib/jvm/java-6-sun/bin/$NAME DAEMON_ARGS="-jar OpenPIXPDQAdapter.jar" PIDFILE=/var/run/$NAME.pid SCRIPTNAME=/etc/init.d/pixpdq.sh Exit if the package is not installed [ -x "$DAEMON" ] exit 0 Read conguration variable le if it is present [ -r /etc/default/$name ] &&. /etc/default/$name Load the VERBOSE setting and other rcs variables February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 19 of 23

20 [ -f /etc/default/rcs ] &&. /etc/default/rcs Dene LSB log_* functions. Depend on lsb-base (>= 3.0-6) to ensure that this le is present.. /lib/lsb/init-functions Function that starts the daemon/service do_start() { cd $APP_PATH $DAEMON $DAEMON_ARGS 0<&- 1>/dev/null 2>&1 & Function that stops the daemon/service do_stop() { cd $APP_PATH rm pixpdq.str RETVAL="$?" [ "$RETVAL" = 2 ] && return 2 case "$1" in start) [ "$VERBOSE"!= no ] && log_daemon_msg "Starting $DESC" "$NAME" do_start 0 1) [ "$VERBOSE"!= no ] && log_end_msg 0 2) [ "$VERBOSE"!= no ] && log_end_msg 1 stop) [ "$VERBOSE"!= no ] && log_daemon_msg "Stopping $DESC" "$NAME" do_stop 0 1) [ "$VERBOSE"!= no ] && log_end_msg 0 2) [ "$VERBOSE"!= no ] && log_end_msg 1 reload force-reload) If do_reload() is not implemented then leave this commented out and leave 'force-reload' as an alias for 'restart'. log_daemon_msg "Reloading $DESC" "$NAME" do_reload log_end_msg $? restart force-reload) If the "reload" option is implemented then remove the 'force-reload' alias February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 20 of 23

21 >&2 *) log_daemon_msg "Restarting $DESC" "$NAME" do_stop 0 1) do_start 0) log_end_msg 0 1) log_end_msg 1 Old process is still running *) log_end_msg 1 Failed to start *) Failed to stop log_end_msg 1 echo "Usage: $SCRIPTNAME {start stop restart reload force-reload" echo "Usage: $SCRIPTNAME {start stop restart force-reload" >&2 exit 3 : /etc/init.d/bsdsyslog.sh! /bin/sh BEGIN INIT INFO Provides: BSD syslog (ATNA) Required-Start: $local_fs $remote_fs Required-Stop: $local_fs $remote_fs Default-Start: Default-Stop: S Short-Description: BSD syslog (ATNA) Description: BSD syslog (ATNA) END INIT INFO Author: Ben Uphoff <buphoff@cchit.org> IP_ADDR=$(/sbin/ifcong eth0 grep 'inet addr:' cut -d: -f2 awk '{ print $1') PATH=/usr/sbin:/usr/bin:/sbin:/bin DESC="BSD Syslog (ATNA)" NAME=java APP_PATH=/usr/local/syslog_server DAEMON=/usr/lib/jvm/java-6-sun/bin/$NAME DAEMON_ARGS="-jar BSDsyslog.jar jdbc:postgresql://localhost/syslog logs xdslogs 5140 $IP_ADDR" PIDFILE=/var/run/$NAME.pid SCRIPTNAME=/etc/init.d/bsdsyslog.sh Exit if the package is not installed February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 21 of 23

22 [ -x "$DAEMON" ] exit 0 Read conguration variable le if it is present [ -r /etc/default/$name ] &&. /etc/default/$name Load the VERBOSE setting and other rcs variables [ -f /etc/default/rcs ] &&. /etc/default/rcs Dene LSB log_* functions. Depend on lsb-base (>= 3.0-6) to ensure that this le is present.. /lib/lsb/init-functions Function that starts the daemon/service do_start() { cd $APP_PATH $DAEMON $DAEMON_ARGS 0<&- 1>/dev/null 2>&1 & Function that stops the daemon/service do_stop() { pkill -f BSDsyslog RETVAL="$?" [ "$RETVAL" = 2 ] && return 2 case "$1" in start) [ "$VERBOSE"!= no ] && log_daemon_msg "Starting $DESC" "$NAME" do_start 0 1) [ "$VERBOSE"!= no ] && log_end_msg 0 2) [ "$VERBOSE"!= no ] && log_end_msg 1 stop) [ "$VERBOSE"!= no ] && log_daemon_msg "Stopping $DESC" "$NAME" do_stop 0 1) [ "$VERBOSE"!= no ] && log_end_msg 0 2) [ "$VERBOSE"!= no ] && log_end_msg 1 reload force-reload) If do_reload() is not implemented then leave this commented out and leave 'force-reload' as an alias for 'restart'. log_daemon_msg "Reloading $DESC" "$NAME" do_reload log_end_msg $? February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 22 of 23

23 restart force-reload) If the "reload" option is implemented then remove the 'force-reload' alias log_daemon_msg "Restarting $DESC" "$NAME" do_stop 0 1) do_start 0) log_end_msg 0 1) log_end_msg 1 Old process is still running *) log_end_msg 1 Failed to start *) Failed to stop log_end_msg 1 *) echo "Usage: $SCRIPTNAME {start stop restart reload force-reload" >&2 echo "Usage: $SCRIPTNAME {start stop restart force-reload" >&2 exit 3 : February 23, 2010 Building The Laika AMI - External (V1.0).Docx Page 23 of 23