DevOps
/
HC-vault-on-aws-FORK
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

verify vault download

This commit is contained in:
J Cole Morrison 2020-04-29 19:59:08 -07:00
parent e549787e90
commit 73cd8a1ae5
1 changed files with 18 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
files/userdata_template.sh
View File

@ -37,14 +37,21 @@ chmod 755 /opt/vault/bin
# Change ownership to vault user
chown -R vault:vault /opt/vault
# Download the vault bin
curl -o /tmp/vault.zip https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip
# Get the HashiCorp PGP
curl https://keybase.io/hashicorp/pgp_keys.asc | gpg --import
# unzip it in the /tmp dir
unzip -d /tmp /tmp/vault.zip
# Download vault and signatures
curl -Os https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip
curl -Os https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_SHA256SUMS
curl -Os https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_SHA256SUMS.sig
# move it to the /opt/vault/bin dir
mv /tmp/vault /opt/vault/bin
# Verify Signatres
gpg --verify vault_${VAULT_VERSION}_SHA256SUMS.sig vault_${VAULT_VERSION}_SHA256SUMS
cat vault_${VAULT_VERSION}_SHA256SUMS | grep vault_${VAULT_VERSION}_linux_amd64.zip | sha256sum -c
# unzip and move to /opt/vault/bin
unzip vault_${VAULT_VERSION}_linux_amd64.zip
mv vault /opt/vault/bin
# give ownership to the vault user
chown vault:vault /opt/vault/bin/vault
@ -55,6 +62,11 @@ ln -s /opt/vault/bin/vault /usr/local/bin/vault
# allow vault permissions to use mlock and prevent memory from swapping to disk
setcap cap_ipc_lock=+ep /opt/vault/bin/vault
# cleanup files
rm vault_${VAULT_VERSION}_linux_amd64.zip
rm vault_${VAULT_VERSION}_SHA256SUMS
rm vault_${VAULT_VERSION}_SHA256SUMS.sig
--==BOUNDARY==
Content-Type: text/x-shellscript; charset="us-ascii"