entrypoint.sh

#!/bin/bash
#
# Script to run from Splunk
#

# Errors are fatal
set -e

SPLUNK_PASSWORD="${SPLUNK_PASSWORD:=password}"


#
# Require the user to accept the license to continue
#
if test "$SPLUNK_START_ARGS" != "--accept-license"
then
	echo "! "
	echo "! You need to accept the Splunk License in order to continue."
	echo "! Please restart this container with SPLUNK_START_ARGS set to \"--accept-license\" "
	echo "! as follows: "
	echo "! "
	echo "! SPLUNK_START_ARGS=--accept-license"
	echo "! "
	exit 1
fi

#
# Check for bad passwords.
#
if test "$SPLUNK_PASSWORD" == "password"
then
	echo "! "
	echo "! "
	echo "! Cowardly refusing to set the password to 'password'. Please set a different password."
	echo "! "
	echo "! If you need help picking a secure password, there's an app for that:"
	echo "! "
	echo "!	https://diceware.dmuth.org/"
	echo "! "
	echo "! "
	exit 1

elif test "$SPLUNK_PASSWORD" == "12345"
then
	echo "! "
	echo "! "
	echo "! This is not Planet Spaceball.  Please don't use 12345 as a password."
	echo "! "
	echo "! "
	exit 1

fi


PASSWORD_LEN=${#SPLUNK_PASSWORD}
if test $PASSWORD_LEN -lt 8
then
	echo "! "
	echo "! "
	echo "! Admin password needs to be at least 8 characters!"
	echo "! "
	echo "! Password specified: ${SPLUNK_PASSWORD}"
	echo "! "
	echo "! "
	exit 1
fi

#
# Set out $SPLUNK_EVENTGEN_DISABLED value to a 1 or 0.
#
if test "${SPLUNK_EVENTGEN}"
then
	SPLUNK_EVENTGEN_DISABLED=0
else
	SPLUNK_EVENTGEN_DISABLED=1
fi

#
# Set our default password
#
pushd /opt/splunk/etc/system/local/ >/dev/null


cat user-seed.conf.in | sed -e "s/%password%/${SPLUNK_PASSWORD}/" > user-seed.conf
cat inputs.conf.in \
	| sed -e "s/%DATE%/$(date +%Y%m%d-%H%M%S)/" \
	| sed -e "s/%EVENTGEN%/${SPLUNK_EVENTGEN_DISABLED}/" \
	> inputs.conf

#
# If we have an SSL cert and key, let's add those into the web.conf file
#
SSL_CERT=""
SSL_KEY=""
if test -r "/ssl.cert"
then
	SSL_KEY="privKeyPath = /ssl.key"
	SSL_CERT="serverCert = /ssl.cert"
fi

cat web.conf.in \
	| sed -e "s|%ssl_key%|${SSL_KEY}|" \
	| sed -e "s|%ssl_cert%|${SSL_CERT}|" \
	> web.conf

#
# If we have a hosts file, append it to our /etc/hosts file.
#
if test -f /etc/hosts.extra
then
	echo "We found /etc/hosts.extra, concatenating it into /etc/hosts..."
	cat /etc/hosts.extra >> /etc/hosts
fi


#
# If a Rest Modular API key was specified, add the key into the REST sources
# and append them to inputs.conf.
#
if test "$REST_KEY"
then
	SRC="activation_key = Visit https://www.baboonbones.com/#activation"
	REPLACE="activation_key = ${REST_KEY}"

	cat inputs.conf.in.rest | sed -e "s|${SRC}|${REPLACE}|" >> /opt/splunk/etc/system/local/inputs.conf

fi

#
# Are we using the RSS Syndication module?
#
if test "$RSS"
then
	cat inputs.conf.in.syndication >> /opt/splunk/etc/system/local/inputs.conf
fi

popd > /dev/null


#
# If we're running in devel mode, link local to default so that any
# changes we make to the app in Splunk go straight into default and
# I don't have to move them by hand.
#
if test "$SPLUNK_DEVEL"
then
	pushd /opt/splunk/etc/apps/splunk-lab >/dev/null
	ln -sfv default local
	popd > /dev/null
fi


#
# Start Splunk
#
/opt/splunk/bin/splunk start --accept-license


echo
echo "    ____            _                   _        _               _     "
echo "   / ___|   _ __   | |  _   _   _ __   | | __   | |       __ _  | |__  "
echo "   \___ \  | '_ \  | | | | | | | '_ \  | |/ /   | |      / _\` | | '_ \ "
echo "    ___) | | |_) | | | | |_| | | | | | |   <    | |___  | (_| | | |_) |"
echo "   |____/  | .__/  |_|  \__,_| |_| |_| |_|\_\   |_____|  \__,_| |_.__/ "
echo "           |_|                                                         "
echo


echo "# "
echo "# Welcome to Splunk Lab!"
echo "# "
echo "# "
echo "# Here are some ways in which to run this container: "
echo "# "
echo "# Persist data between runs:"
echo "# 	docker run -p 8000:8000 -v \$(pwd)/data:/data dmuth1/splunk-lab "
echo "# "
echo "# Persist data, mount current directory as /mnt, and spawn an interactive shell: "
echo "# 	docker run -p 8000:8000 -v \$(pwd)/data:/data -v \$(pwd):/mnt -it dmuth1/splunk-lab bash "
echo "# "


if test "$1"
then
	echo "# "
	echo "# Arguments detected! "
	echo "# "
	echo "# Executing: $@"
	echo "# "

	exec "$@"

fi

#
# Loop forever so that the container keeps running
#
# I used to tail splunk's stderr file, but it turns out that trying to use SmartStore
# keeps the file from being created.  Yikes!
#
echo "Now going into an endless loop so that the container keeps running..."
while true
do
	sleep 99999
done