install-openqa.sh

#!/bin/bash

set -e

# Test script based on installation guide from Fedora:
# https://fedoraproject.org/wiki/OpenQA_direct_installation_guide

release=$(uname -a)
export release
echo Installing OpenQA on Fedora
echo Running on: "$release"

pkgs=(git vim-enhanced openqa openqa-httpd openqa-worker fedora-messaging guestfs-tools libguestfs-xfs python3-fedfind python3-libguestfs libvirt-daemon-config-network virt-install withlock postgresql-server perl-REST-Client)
if ! rpm -q "${pkgs[@]}" &> /dev/null; then
  sudo dnf install -y "${pkgs[@]}"
else
  echo "openqa and all requirements installed."
fi

conf_count=$(find /etc/httpd/conf.d -name "openqa*.conf" | wc -l)
if [[ ${conf_count} -ne 2 ]]; then
  sudo cp /etc/httpd/conf.d/openqa.conf.template /etc/httpd/conf.d/openqa.conf
  sudo cp /etc/httpd/conf.d/openqa-ssl.conf.template /etc/httpd/conf.d/openqa-ssl.conf
else
  echo "apache conf files for openqa exist."
fi

if [[ ! -f /etc/openqa/openqa.ini.orig ]]; then
  sudo cp /etc/openqa/openqa.ini /etc/openqa/openqa.ini.orig
  sudo touch -r /etc/openqa/openqa.ini /etc/openqa/openqa.ini.orig
fi

sudo bash -c "cat >/etc/openqa/openqa.ini <<'EOF'
[global]
branding=plain
download_domains = rockylinux.org fedoraproject.org opensuse.org
recognized_referers = bugs.rockylinux.org git.rockylinux.org bugzilla.suse.com bugzilla.opensuse.org progress.opensuse.org github.com

[auth]
method = Fake
EOF"

if ! systemctl is-active postgresql.service &> /dev/null; then
  sudo postgresql-setup --initdb
  sudo systemctl enable --now postgresql
fi

if ! systemctl is-active sshd.service &> /dev/null; then
  sudo systemctl start sshd
  sudo systemctl enable sshd
fi

if ! systemctl is-active httpd.service &> /dev/null; then
  sudo systemctl enable --now httpd
  sudo systemctl enable --now openqa-gru
  sudo systemctl enable --now openqa-scheduler
  sudo systemctl enable --now openqa-websockets
  sudo systemctl enable --now openqa-webui
  sudo systemctl enable --now fm-consumer@fedora_openqa_scheduler
  sudo setsebool -P httpd_can_network_connect 1
  sudo systemctl restart httpd
fi

sudo firewall-cmd --permanent --add-service=http
# Open vnc port for 4 local worker clients
sudo firewall-cmd --permanent --new-service=openqa-vnc
sudo firewall-cmd --permanent --service=openqa-vnc --add-port=5991-5999/tcp
sudo firewall-cmd --permanent --add-service openqa-vnc
sudo firewall-cmd --reload

if sudo grep -q foo /etc/openqa/client.conf; then
  sudo bash -c "cat >/etc/openqa/client.conf <<'EOF'
[localhost]
key = 1234567890ABCDEF
secret = 1234567890ABCDEF
EOF"
  echo "Note! the api key will expire in one day after installation!"
fi

if ! systemctl is-active openqa-worker@1 &> /dev/null; then
  sudo systemctl enable --now openqa-worker@1
fi

echo ""
echo "Done, preparations. Now log in one time!"
echo ""
echo "   http://$(hostname -f)/"
echo ""
echo "If you want to do the Fedora setup following the YouTube video then run..."
echo ""
echo "    ./install-openqa-post.sh"
echo ""
echo "If you want to do a similar setup but for Rocky Linux then run..."
echo ""
echo "    ./install-openqa-post-rocky.sh"
echo ""
echo "In either case you may be prompted again for your password for sudo."
echo ""