dogtag-jessie.sh

!/bin/bash

# vagrant box add jessie https://downloads.sourceforge.net/project/vagrantboxjessie/debian80.box
# vagrant init jessie
# vagrant up
# vagrant ssh -- -A
# sudo su -
# wget --no-check-certificate -qO - https://gist.githubusercontent.com/jameswhite/5ef1524e5d99904a0e65/raw/jessie | bash > jessie.out 2>&1

apt-get update

####
# Nuxwdog
####

[ ! -d /opt/local/pkg/nuxwdog ] && mkdir -p /opt/local/pkg/nuxwdog
[ ! -d /opt/local/src/nuxwdog ] && mkdir -p /opt/local/src/nuxwdog
(
  cd /opt/local/src/nuxwdog
  wget http://http.debian.net/debian/pool/main/n/nuxwdog/nuxwdog_1.0.3-3.dsc
  wget http://http.debian.net/debian/pool/main/n/nuxwdog/nuxwdog_1.0.3.orig.tar.gz
  wget http://http.debian.net/debian/pool/main/n/nuxwdog/nuxwdog_1.0.3-3.debian.tar.xz
  dpkg-source -x nuxwdog_1.0.3-3.dsc
)
(cd /opt/local/src/nuxwdog/nuxwdog-1.0.3/; dpkg-checkbuilddeps 2>&1 | grep "Unmet build dependencies:")

env DEBIAN_FRONTEND=noninteractive \
apt-get install -y --force-yes     \
                -o Dpkg::Options::="--force-confdef" \
                -o Dpkg::Options::="--force-confold" \
                chrpath dh-autoreconf libkeyutils-dev \
                libselinux1-dev ant debhelper default-jdk \
                javahelper libkeyutils-dev libnspr4-dev \
                libnss3-dev pkg-config| tee build-deps

# Build that stuff
(cd /opt/local/src/nuxwdog/nuxwdog-1.0.3/;  debian/rules binary)
(mv /opt/local/src/nuxwdog/*.deb /opt/local/pkg/nuxwdog)

# Install that stuff
(
  cd /opt/local/pkg/nuxwdog/
  dpkg -i libnuxwdog*
  dpkg -i nuxwdog*
)

####
# Dogtag
####
env DEBIAN_FRONTEND=noninteractive apt-get upgrade -y --force-yes -oDpkg::Options::="--force-confdef" -oDpkg::Options::="--force-confold"
[ ! -d /opt/local/pkg/dogtag ] && mkdir -p /opt/local/pkg/dogtag
[ ! -d /opt/local/src/dogtag ] && mkdir -p /opt/local/src/dogtag
(
  cd /opt/local/src/dogtag
  wget http://ftp.de.debian.org/debian/pool/main/d/dogtag-pki/dogtag-pki_10.2.6-3.dsc
  wget http://ftp.de.debian.org/debian/pool/main/d/dogtag-pki/dogtag-pki_10.2.6.orig.tar.xz
  wget http://ftp.de.debian.org/debian/pool/main/d/dogtag-pki/dogtag-pki_10.2.6-3.debian.tar.xz
  dpkg-source -x dogtag-pki_10.2.6-3.dsc
)
(cd /opt/local/src/dogtag/dogtag-pki-10.2.6/; dpkg-checkbuilddeps 2>&1 | grep "Unmet build dependencies:")

env DEBIAN_FRONTEND=noninteractive \
apt-get install -y --force-yes     \
                -o Dpkg::Options::="--force-confdef" \
                -o Dpkg::Options::="--force-confold" \
                   build-essential apache2-dev cmake debhelper default-jdk     \
                   javahelper junit4 libcommons-cli-java libcommons-codec-java \
                   libcommons-io-java libcommons-lang-java                     \
                   libidm-console-framework-java libjackson2-annotations-java  \
                   libjss-java libldap-java libldap2-dev libnspr4-dev          \
                   libnss3-dev libresteasy-java libservlet3.0-java             \
                   libsvrcore-dev libtomcat7-java libtomcatjss-java            \
                   libxalan2-java libxerces2-java pkg-config policycoreutils  \
                   python-dev velocity dh-systemd libsepol1-dev python-sphinx \
                   zlib1g-dev| tee build-deps

# Reverse the Tomcat Patch
(interdiff ./debian/patches/tomcat7-build-fix.diff /dev/null > ./debian/patches/tomcat7-build-redo.diff)
(patch ./base/server/tomcat7/src/com/netscape/cms/tomcat/ProxyRealm.java ./debian/patches/tomcat7-build-redo.diff)

# Build that stuff
(cd /opt/local/src/dogtag/dogtag-pki-10.2.6/;  debian/rules binary)
(mv /opt/local/src/dogtag/*.deb /opt/local/pkg/dogtag)

env DEBIAN_FRONTEND=noninteractive \
apt-get install -y --force-yes     \
                -o Dpkg::Options::="--force-confdef" \
                -o Dpkg::Options::="--force-confold" \
                   python-ldap python-lxml python-requests ldap-utils           \
                   libjackson2-jaxrs-providers-java libjs-jquery                \
                   libjs-underscore libxml-perl tomcat7-user libnss3-tools      \
                   python-urllib3  libjackson2-core-java                        \
                   libjackson2-databind-java libjackson2-dataformat-smile       \
                   libjackson2-module-jaxb-annotations-java                     \
                   python-ndg-httpsclient python-openssl python-pyasn1          \
                   tomcat7-common libxslt1.1 python-cryptography python-cffi    \
                   python-pycparser python-ply python-ply-yacc-3.2              \
                   python-ply-lex-3.2 javascript-common libresteasy-java \
                   389-ds| tee install-deps

# Install that stuff
(
  cd /opt/local/pkg/dogtag/
  dpkg -i pki-base*
  dpkg -i dogtag-pki-console-theme* dogtag-pki-server-theme*
  dpkg -i pki-console* pki-server* pki-tools*
  dpkg -i libsymkey-java* libsymkey-jni* pki-javadoc*
  dpkg -i pki-tks* pki-tps* pki-ca* pki-kra* pki-ocsp*
  dpkg -i dogtag-pki*
)

# Fix MORE broken shit
(
  cd /usr/lib/x86_64-linux-gnu/
  ln -s /usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so .
  ldd /usr/lib/x86_64-linux-gnu/dirsrv/cgi-bin/config
)

# Setup the 389 Directory Server
# /usr/sbin/setup-ds-admin

# Setup the PKI Server - run for each [CA/KRA/OCSP/TKS/TPS]
# /usr/sbin/pkispawn