Home
DevCentral
Search
Configure Global Search
Log In
Transactions
P279
Change Details
Change Details
Old
New
Diff
Script started on Sat Sep 8 07:31:51 2018 [1m[3m%[23m[1m[m [m[23m[24m[J[1m/opt/salt/nasqueron-operations[m ] [K[110C[38;5;5m([39mgit[38;5;5m)[38;5;3m-[38;5;5m[[38;5;2mcachet[38;5;5m][39m [125D[?2004h[3marc lint --everything[23m[21D[23ma[23mr[23mc[23m [23ml[23mi[23mn[23mt[23m [23m-[23m-[23me[23mv[23me[23mr[23my[23mt[23mh[23mi[23mn[23mg[?2004l [1m>>>[m Lint for [4mroles/mailserver/certificates/files/update-smtp-certificates.sh[m: [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 16 # and will be lost if the state is redeployed. 17 # </auto-generated> 18 >>> 19 : ${CONTAINER_NAME='mailserver'} ^ 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 17 # </auto-generated> 18 19 : ${CONTAINER_NAME='mailserver'} >>> 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} ^ 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 18 19 : ${CONTAINER_NAME='mailserver'} 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} >>> 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} ^ 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 >>> 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt ^ 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key 25 26 # Mail servers can read the certificate as root before dropping privileges [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 >>> 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt ^ 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key 25 26 # Mail servers can read the certificate as root before dropping privileges [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt >>> 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 25 26 # Mail servers can read the certificate as root before dropping privileges 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt >>> 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 25 26 # Mail servers can read the certificate as root before dropping privileges 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key 25 26 # Mail servers can read the certificate as root before dropping privileges >>> 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key 29 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 25 26 # Mail servers can read the certificate as root before dropping privileges 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key >>> 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 29 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart 31 lxc-attach -n $CONTAINER_NAME -- service dovecot restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key 29 >>> 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart ^ 31 lxc-attach -n $CONTAINER_NAME -- service dovecot restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key 29 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart >>> 31 lxc-attach -n $CONTAINER_NAME -- service dovecot restart ^ [1m>>>[m Lint for [4mroles/mailserver/dkim/files/bin/get-dkim-dns-entries.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 19 # Parses arguments 20 if [ $# -eq 0 ] 21 then >>> 22 echo "Usage: `basename $0` <domain>" ^ 23 exit 1 24 fi 25 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 19 # Parses arguments 20 if [ $# -eq 0 ] 21 then >>> 22 echo "Usage: `basename $0` <domain>" ^ 23 exit 1 24 fi 25 [1m[43m Advice [49m[m (SC2231) [4mSHELLCHECK[m Quote expansions in this for loop glob to prevent wordsplitting, e.g. "$dir"/*.txt . 32 exit 2 33 fi 34 >>> 35 for f in $DIR/*.txt ^ 36 do 37 get-dkim-dns-entry $f 38 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 34 35 for f in $DIR/*.txt 36 do >>> 37 get-dkim-dns-entry $f ^ 38 done [1m>>>[m Lint for [4mroles/mailserver/dkim/files/bin/get-dkim-key-table.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2231) [4mSHELLCHECK[m Quote expansions in this for loop glob to prevent wordsplitting, e.g. "$dir"/*.txt . 20 do 21 DOMAIN=`basename $d` 22 >>> 23 for f in $d/*.private ^ 24 do 25 SELECTOR=`basename $f .private` 26 echo "$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$f" [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$f" 27 done 28 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$f" 27 done 28 done [1m>>>[m Lint for [4mroles/mailserver/dkim/files/bin/get-dkim-signing-table.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2231) [4mSHELLCHECK[m Quote expansions in this for loop glob to prevent wordsplitting, e.g. "$dir"/*.txt . 20 do 21 DOMAIN=`basename $d` 22 >>> 23 for f in $d/*.private ^ 24 do 25 SELECTOR=`basename $f .private` 26 echo "$DOMAIN $SELECTOR._domainkey.$DOMAIN" [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$DOMAIN $SELECTOR._domainkey.$DOMAIN" 27 done 28 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$DOMAIN $SELECTOR._domainkey.$DOMAIN" 27 done 28 done [1m>>>[m Lint for [4mroles/mailserver/systemd-unit/files/lxc-container-mailserver-start.sh[m: [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 37 #Web rules 38 for PORT in $PORTS 39 do >>> 40 $IPTABLES -t nat -I PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 41 done 42 43 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 37 #Web rules 38 for PORT in $PORTS 39 do >>> 40 $IPTABLES -t nat -I PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 41 done 42 43 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 46 #Docker rules 47 for PORT in $DOCKER_PORTS 48 do >>> 49 $IPTABLES -t nat -I PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 50 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 46 #Docker rules 47 for PORT in $DOCKER_PORTS 48 do >>> 49 $IPTABLES -t nat -I PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 50 done [1m>>>[m Lint for [4mroles/mailserver/systemd-unit/files/lxc-container-mailserver-stop.sh[m: [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 33 #Web rules 34 for PORT in $PORTS 35 do >>> 36 $IPTABLES -t nat -D PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 37 done 38 39 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 33 #Web rules 34 for PORT in $PORTS 35 do >>> 36 $IPTABLES -t nat -D PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 37 done 38 39 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 43 #Docker rules 44 for PORT in $DOCKER_PORTS 45 do >>> 46 $IPTABLES -t nat -D PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 47 done 48 49 $LXC_STOP -n $CONTAINER_NAME [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 43 #Docker rules 44 for PORT in $DOCKER_PORTS 45 do >>> 46 $IPTABLES -t nat -D PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 47 done 48 49 $LXC_STOP -n $CONTAINER_NAME [1m>>>[m Lint for [4mroles/mumble/certificates/files/update-mumble-certificates.sh[m: [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 16 # and will be lost if the state is redeployed. 17 # </auto-generated> 18 >>> 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} ^ 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 17 # </auto-generated> 18 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} >>> 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} ^ 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 18 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} >>> 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} ^ 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} >>> 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} ^ 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} >>> 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} ^ 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} >>> 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} ^ 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 >>> 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt ^ 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 26 27 # murmur has uid 338 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 >>> 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt ^ 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 26 27 # murmur has uid 338 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt >>> 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 26 27 # murmur has uid 338 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt >>> 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 26 27 # murmur has uid 338 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 26 27 # murmur has uid 338 >>> 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 29 chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 30 31 jexec $JAIL_ID service murmur restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 26 27 # murmur has uid 338 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key >>> 29 chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 30 31 jexec $JAIL_ID service murmur restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 29 chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 30 >>> 31 jexec $JAIL_ID service murmur restart ^ [1m>>>[m Lint for [4mroles/phabricator/arcanist/files/arc.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 48 # Enable log printing 49 PRINT_LOG=1 50 # Set a random name for the container >>> 51 INSTANCE="arc-"`openssl rand -hex 21` ^ 52 FLAGS="-i -a=stdin --name=$INSTANCE" 53 fi 54 fi [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 64 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 65 66 if [ $PRINT_LOG -eq 0 ]; then >>> 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" ^ 68 else 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 64 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 65 66 if [ $PRINT_LOG -eq 0 ]; then >>> 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" ^ 68 else 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 66 if [ $PRINT_LOG -eq 0 ]; then 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" 68 else >>> 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null ^ 70 sleep 3 71 docker logs $INSTANCE 72 docker rm $INSTANCE >/dev/null [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 66 if [ $PRINT_LOG -eq 0 ]; then 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" 68 else >>> 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null ^ 70 sleep 3 71 docker logs $INSTANCE 72 docker rm $INSTANCE >/dev/null [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 68 else 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 >>> 71 docker logs $INSTANCE ^ 72 docker rm $INSTANCE >/dev/null 73 fi [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 71 docker logs $INSTANCE >>> 72 docker rm $INSTANCE >/dev/null ^ 73 fi [1m>>>[m Lint for [4mroles/phabricator/containers/files/run-devcentral.sh[m: [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 85 # the old celerity map would be kept by APCu. 86 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 87 >>> 88 docker exec $INSTANCE_NAME sh -c 'mkdir -p /root/.ssh && \ ^ 89 cp /opt/phabricator/conf/deploy-keys/* /root/.ssh' 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 88 docker exec $INSTANCE_NAME sh -c 'mkdir -p /root/.ssh && \ 89 cp /opt/phabricator/conf/deploy-keys/* /root/.ssh' 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} >>> 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ ^ 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ 93 git fetch --all && \ 94 git checkout $PHABRICATOR_PROD_BRANCH && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 89 cp /opt/phabricator/conf/deploy-keys/* /root/.ssh' 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ >>> 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ ^ 93 git fetch --all && \ 94 git checkout $PHABRICATOR_PROD_BRANCH && \ 95 sv restart php-fpm && sv restart phd' [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ >>> 93 git fetch --all && \ ^ 94 git checkout $PHABRICATOR_PROD_BRANCH && \ 95 sv restart php-fpm && sv restart phd' 96 [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ 93 git fetch --all && \ >>> 94 git checkout $PHABRICATOR_PROD_BRANCH && \ ^ 95 sv restart php-fpm && sv restart phd' 96 97 echo "Deployment done at `date`." [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 94 git checkout $PHABRICATOR_PROD_BRANCH && \ 95 sv restart php-fpm && sv restart phd' 96 >>> 97 echo "Deployment done at `date`." ^ 98 exit 0 [1m>>>[m Lint for [4mroles/phabricator/containers/files/run-wolfphab.sh[m: [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 64 -e PHABRICATOR_STORAGE_NAMESPACE="$MYSQL_NAMESPACE" \ 65 --name $INSTANCE_NAME nasqueron/phabricator 66 >>> 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ ^ 68 bin/config set mysql.host mysql && \ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 65 --name $INSTANCE_NAME nasqueron/phabricator 66 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ >>> 68 bin/config set mysql.host mysql && \ ^ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 66 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 68 bin/config set mysql.host mysql && \ >>> 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ ^ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 68 bin/config set mysql.host mysql && \ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ >>> 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ ^ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ 73 bin/config set mailgun.domain $DOMAIN && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 68 bin/config set mysql.host mysql && \ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ >>> 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ ^ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ 73 bin/config set mailgun.domain $DOMAIN && \ 74 rm -f /etc/nginx/sites-enabled/default && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ >>> 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ ^ 73 bin/config set mailgun.domain $DOMAIN && \ 74 rm -f /etc/nginx/sites-enabled/default && \ 75 chown -R app /var/repo' [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ >>> 73 bin/config set mailgun.domain $DOMAIN && \ ^ 74 rm -f /etc/nginx/sites-enabled/default && \ 75 chown -R app /var/repo' 76 [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ 73 bin/config set mailgun.domain $DOMAIN && \ >>> 74 rm -f /etc/nginx/sites-enabled/default && \ ^ 75 chown -R app /var/repo' 76 77 # Fixes bug phd doesn't run at the very first container launch [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 77 # Fixes bug phd doesn't run at the very first container launch 78 docker exec $INSTANCE_NAME sv restart phd 79 >>> 80 echo "Deployment done at `date`." ^ 81 exit 0 [1m>>>[m Lint for [4mroles/shellserver/user-session/files/whom-diff.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 23 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 24 25 if [ "$SESSION_ID" = "" ]; then >>> 26 SESSION_ID=`who am I | md5 | cut -c1-8` ^ 27 fi 28 29 DIR=/var/tmp/whom/$USER/$SESSION_ID [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 34 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 35 36 if [ "$1" = "--session" ] || [ "$1" = "-s" ]; then >>> 37 echo $SESSION_ID ^ 38 exit 0 39 fi 40 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 45 46 if [ $# -eq 0 ]; then 47 # Creates working directory if needed >>> 48 if [ ! -d $DIR ]; then ^ 49 mkdir -p $DIR 50 touch $DIR/old 51 fi [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 46 if [ $# -eq 0 ]; then 47 # Creates working directory if needed 48 if [ ! -d $DIR ]; then >>> 49 mkdir -p $DIR ^ 50 touch $DIR/old 51 fi 52 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 47 # Creates working directory if needed 48 if [ ! -d $DIR ]; then 49 mkdir -p $DIR >>> 50 touch $DIR/old ^ 51 fi 52 53 # Let's diff [1m[43m Warning [49m[m (SC2164) [4mSHELLCHECK[m Use 'cd ... || exit' or 'cd ... || return' in case cd fails. 51 fi 52 53 # Let's diff >>> 54 cd $DIR ^ 55 whom > current 56 diff old current | tail -n +2 57 mv current old [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 51 fi 52 53 # Let's diff >>> 54 cd $DIR ^ 55 whom > current 56 diff old current | tail -n +2 57 mv current old [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 65 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 66 67 if [ "$1" = "--clean" ] || [ "$1" = "-c" ]; then >>> 68 rm -rf $DIR ^ 69 exit $? 70 fi 71 [1m>>>[m Lint for [4mroles/webserver-core/letsencrypt/files/letsencrypt-renewal.sh[m: [1m[43m Advice [49m[m (SC2143) [4mSHELLCHECK[m Use grep -q instead of comparing output with [ -n .. ]. 20 nginx_output="$(nginx -t 2>&1)" 21 nginx_returncode="$?" 22 >>> 23 if [ "$nginx_returncode" -eq 0 ] && [ -n "$(echo "${nginx_output}" | grep warn)" ]; then ^ 24 return 2; 25 else 26 return "$nginx_returncode"; [1m[3m%[23m[1m[m [m[23m[24m[J[1m/opt/salt/nasqueron-operations[m ] [K[110C[38;5;5m([39mgit[38;5;5m)[38;5;3m-[38;5;5m[[38;5;2mcachet[38;5;5m][39m [125D[?2004h[?2004l Script done on Sat Sep 8 07:32:06 2018
Script started on Sat Sep 8 07:31:51 2018 [1m[3m%[23m[1m[m [m[23m[24m[J[1m/opt/salt/nasqueron-operations[m ] [K[110C[38;5;5m([39mgit[38;5;5m)[38;5;3m-[38;5;5m[[38;5;2mcachet[38;5;5m][39m [125D[?2004h[3marc lint --everything[23m[21D[23ma[23mr[23mc[23m [23ml[23mi[23mn[23mt[23m [23m-[23m-[23me[23mv[23me[23mr[23my[23mt[23mh[23mi[23mn[23mg[?2004l [1m>>>[m Lint for [4mroles/mailserver/certificates/files/update-smtp-certificates.sh[m: [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 16 # and will be lost if the state is redeployed. 17 # </auto-generated> 18 >>> 19 : ${CONTAINER_NAME='mailserver'} ^ 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 17 # </auto-generated> 18 19 : ${CONTAINER_NAME='mailserver'} >>> 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} ^ 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 18 19 : ${CONTAINER_NAME='mailserver'} 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} >>> 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} ^ 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 >>> 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt ^ 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key 25 26 # Mail servers can read the certificate as root before dropping privileges [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 20 : ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'} 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 >>> 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt ^ 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key 25 26 # Mail servers can read the certificate as root before dropping privileges [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt >>> 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 25 26 # Mail servers can read the certificate as root before dropping privileges 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"} 22 23 cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt >>> 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 25 26 # Mail servers can read the certificate as root before dropping privileges 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 24 cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key 25 26 # Mail servers can read the certificate as root before dropping privileges >>> 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key 29 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 25 26 # Mail servers can read the certificate as root before dropping privileges 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key >>> 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key ^ 29 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart 31 lxc-attach -n $CONTAINER_NAME -- service dovecot restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 27 chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key 29 >>> 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart ^ 31 lxc-attach -n $CONTAINER_NAME -- service dovecot restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 28 chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key 29 30 lxc-attach -n $CONTAINER_NAME -- service postfix restart >>> 31 lxc-attach -n $CONTAINER_NAME -- service dovecot restart ^ [1m>>>[m Lint for [4mroles/mailserver/dkim/files/bin/get-dkim-dns-entries.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 19 # Parses arguments 20 if [ $# -eq 0 ] 21 then >>> 22 echo "Usage: `basename $0` <domain>" ^ 23 exit 1 24 fi 25 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 19 # Parses arguments 20 if [ $# -eq 0 ] 21 then >>> 22 echo "Usage: `basename $0` <domain>" ^ 23 exit 1 24 fi 25 [1m[43m Advice [49m[m (SC2231) [4mSHELLCHECK[m Quote expansions in this for loop glob to prevent wordsplitting, e.g. "$dir"/*.txt . 32 exit 2 33 fi 34 >>> 35 for f in $DIR/*.txt ^ 36 do 37 get-dkim-dns-entry $f 38 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 34 35 for f in $DIR/*.txt 36 do >>> 37 get-dkim-dns-entry $f ^ 38 done [1m>>>[m Lint for [4mroles/mailserver/dkim/files/bin/get-dkim-key-table.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2231) [4mSHELLCHECK[m Quote expansions in this for loop glob to prevent wordsplitting, e.g. "$dir"/*.txt . 20 do 21 DOMAIN=`basename $d` 22 >>> 23 for f in $d/*.private ^ 24 do 25 SELECTOR=`basename $f .private` 26 echo "$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$f" [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$f" 27 done 28 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$f" 27 done 28 done [1m>>>[m Lint for [4mroles/mailserver/dkim/files/bin/get-dkim-signing-table.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 18 19 for d in /etc/opendkim/keys/* 20 do >>> 21 DOMAIN=`basename $d` ^ 22 23 for f in $d/*.private 24 do [1m[43m Advice [49m[m (SC2231) [4mSHELLCHECK[m Quote expansions in this for loop glob to prevent wordsplitting, e.g. "$dir"/*.txt . 20 do 21 DOMAIN=`basename $d` 22 >>> 23 for f in $d/*.private ^ 24 do 25 SELECTOR=`basename $f .private` 26 echo "$DOMAIN $SELECTOR._domainkey.$DOMAIN" [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$DOMAIN $SELECTOR._domainkey.$DOMAIN" 27 done 28 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 23 for f in $d/*.private 24 do >>> 25 SELECTOR=`basename $f .private` ^ 26 echo "$DOMAIN $SELECTOR._domainkey.$DOMAIN" 27 done 28 done [1m>>>[m Lint for [4mroles/mailserver/systemd-unit/files/lxc-container-mailserver-start.sh[m: [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 37 #Web rules 38 for PORT in $PORTS 39 do >>> 40 $IPTABLES -t nat -I PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 41 done 42 43 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 37 #Web rules 38 for PORT in $PORTS 39 do >>> 40 $IPTABLES -t nat -I PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 41 done 42 43 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 46 #Docker rules 47 for PORT in $DOCKER_PORTS 48 do >>> 49 $IPTABLES -t nat -I PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 50 done [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 46 #Docker rules 47 for PORT in $DOCKER_PORTS 48 do >>> 49 $IPTABLES -t nat -I PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 50 done [1m>>>[m Lint for [4mroles/mailserver/systemd-unit/files/lxc-container-mailserver-stop.sh[m: [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 33 #Web rules 34 for PORT in $PORTS 35 do >>> 36 $IPTABLES -t nat -D PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 37 done 38 39 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 33 #Web rules 34 for PORT in $PORTS 35 do >>> 36 $IPTABLES -t nat -D PREROUTING -i $HOST_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 37 done 38 39 #Need 80 port for main nginx [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 43 #Docker rules 44 for PORT in $DOCKER_PORTS 45 do >>> 46 $IPTABLES -t nat -D PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 47 done 48 49 $LXC_STOP -n $CONTAINER_NAME [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 43 #Docker rules 44 for PORT in $DOCKER_PORTS 45 do >>> 46 $IPTABLES -t nat -D PREROUTING -i $DOCKER_INTERFACE -p TCP -d $HOST_IP/32 --dport $PORT -j DNAT --to-destination $CONTAINER_IP:$PORT ^ 47 done 48 49 $LXC_STOP -n $CONTAINER_NAME [1m>>>[m Lint for [4mroles/mumble/certificates/files/update-mumble-certificates.sh[m: [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 16 # and will be lost if the state is redeployed. 17 # </auto-generated> 18 >>> 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} ^ 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 17 # </auto-generated> 18 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} >>> 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} ^ 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 18 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} >>> 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} ^ 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt [1m[43m Advice [49m[m (SC2223) [4mSHELLCHECK[m This default assignment may cause DoS due to globbing. Quote it. 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} >>> 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} ^ 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} >>> 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} ^ 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 19 : ${JAIL_HOSTNAME='mumble.nasqueron.org'} 20 : ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"} 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} >>> 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} ^ 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 >>> 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt ^ 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 26 27 # murmur has uid 338 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 21 : ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"} 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 >>> 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt ^ 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 26 27 # murmur has uid 338 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt >>> 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 26 27 # murmur has uid 338 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 22 : ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`} 23 24 cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt >>> 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 26 27 # murmur has uid 338 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 25 cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 26 27 # murmur has uid 338 >>> 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 29 chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 30 31 jexec $JAIL_ID service murmur restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 26 27 # murmur has uid 338 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key >>> 29 chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key ^ 30 31 jexec $JAIL_ID service murmur restart [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 28 chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 29 chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key 30 >>> 31 jexec $JAIL_ID service murmur restart ^ [1m>>>[m Lint for [4mroles/phabricator/arcanist/files/arc.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 48 # Enable log printing 49 PRINT_LOG=1 50 # Set a random name for the container >>> 51 INSTANCE="arc-"`openssl rand -hex 21` ^ 52 FLAGS="-i -a=stdin --name=$INSTANCE" 53 fi 54 fi [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 64 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 65 66 if [ $PRINT_LOG -eq 0 ]; then >>> 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" ^ 68 else 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 64 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 65 66 if [ $PRINT_LOG -eq 0 ]; then >>> 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" ^ 68 else 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 66 if [ $PRINT_LOG -eq 0 ]; then 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" 68 else >>> 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null ^ 70 sleep 3 71 docker logs $INSTANCE 72 docker rm $INSTANCE >/dev/null [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 66 if [ $PRINT_LOG -eq 0 ]; then 67 docker run $FLAGS --rm -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" 68 else >>> 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null ^ 70 sleep 3 71 docker logs $INSTANCE 72 docker rm $INSTANCE >/dev/null [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 68 else 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 >>> 71 docker logs $INSTANCE ^ 72 docker rm $INSTANCE >/dev/null 73 fi [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 69 docker run $FLAGS -v ~/.arc:/opt/config -v $PWD:/opt/workspace $VOLUME_SSH nasqueron/arcanist $COMMAND "$@" > /dev/null 70 sleep 3 71 docker logs $INSTANCE >>> 72 docker rm $INSTANCE >/dev/null ^ 73 fi [1m>>>[m Lint for [4mroles/phabricator/containers/files/run-devcentral.sh[m: [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 85 # the old celerity map would be kept by APCu. 86 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 87 >>> 88 docker exec $INSTANCE_NAME sh -c 'mkdir -p /root/.ssh && \ ^ 89 cp /opt/phabricator/conf/deploy-keys/* /root/.ssh' 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 88 docker exec $INSTANCE_NAME sh -c 'mkdir -p /root/.ssh && \ 89 cp /opt/phabricator/conf/deploy-keys/* /root/.ssh' 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} >>> 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ ^ 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ 93 git fetch --all && \ 94 git checkout $PHABRICATOR_PROD_BRANCH && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 89 cp /opt/phabricator/conf/deploy-keys/* /root/.ssh' 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ >>> 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ ^ 93 git fetch --all && \ 94 git checkout $PHABRICATOR_PROD_BRANCH && \ 95 sv restart php-fpm && sv restart phd' [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 90 docker exec $INSTANCE_NAME ssh -o StrictHostKeyChecking=no ${REPO_LOGIN}@${REPO_HOST} 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ >>> 93 git fetch --all && \ ^ 94 git checkout $PHABRICATOR_PROD_BRANCH && \ 95 sv restart php-fpm && sv restart phd' 96 [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 91 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 92 git remote add private "$PHABRICATOR_PROD_REPO" && \ 93 git fetch --all && \ >>> 94 git checkout $PHABRICATOR_PROD_BRANCH && \ ^ 95 sv restart php-fpm && sv restart phd' 96 97 echo "Deployment done at `date`." [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 94 git checkout $PHABRICATOR_PROD_BRANCH && \ 95 sv restart php-fpm && sv restart phd' 96 >>> 97 echo "Deployment done at `date`." ^ 98 exit 0 [1m>>>[m Lint for [4mroles/phabricator/containers/files/run-wolfphab.sh[m: [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 64 -e PHABRICATOR_STORAGE_NAMESPACE="$MYSQL_NAMESPACE" \ 65 --name $INSTANCE_NAME nasqueron/phabricator 66 >>> 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ ^ 68 bin/config set mysql.host mysql && \ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 65 --name $INSTANCE_NAME nasqueron/phabricator 66 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ >>> 68 bin/config set mysql.host mysql && \ ^ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 66 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 68 bin/config set mysql.host mysql && \ >>> 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ ^ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 67 docker exec $INSTANCE_NAME sh -c 'cd /opt/phabricator && \ 68 bin/config set mysql.host mysql && \ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ >>> 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ ^ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ 73 bin/config set mailgun.domain $DOMAIN && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 68 bin/config set mysql.host mysql && \ 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ >>> 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ ^ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ 73 bin/config set mailgun.domain $DOMAIN && \ 74 rm -f /etc/nginx/sites-enabled/default && \ [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 69 bin/config set mysql.pass $MYSQL_ENV_MYSQL_ROOT_PASSWORD && \ 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ >>> 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ ^ 73 bin/config set mailgun.domain $DOMAIN && \ 74 rm -f /etc/nginx/sites-enabled/default && \ 75 chown -R app /var/repo' [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 70 bin/config set storage.default-namespace $PHABRICATOR_STORAGE_NAMESPACE && \ 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ >>> 73 bin/config set mailgun.domain $DOMAIN && \ ^ 74 rm -f /etc/nginx/sites-enabled/default && \ 75 chown -R app /var/repo' 76 [1m[43m Advice [49m[m (SC1004) [4mSHELLCHECK[m This backslash+linefeed is literal. Break outside single quotes if you just want to break the line. 71 bin/config set phabricator.base-uri $PHABRICATOR_URL && \ 72 bin/config set security.alternate-file-domain "$PHABRICATOR_ALT_FILE_DOMAIN" && \ 73 bin/config set mailgun.domain $DOMAIN && \ >>> 74 rm -f /etc/nginx/sites-enabled/default && \ ^ 75 chown -R app /var/repo' 76 77 # Fixes bug phd doesn't run at the very first container launch [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 77 # Fixes bug phd doesn't run at the very first container launch 78 docker exec $INSTANCE_NAME sv restart phd 79 >>> 80 echo "Deployment done at `date`." ^ 81 exit 0 [1m>>>[m Lint for [4mroles/shellserver/user-session/files/whom-diff.sh[m: [1m[43m Advice [49m[m (SC2006) [4mSHELLCHECK[m Use $(..) instead of legacy `..`. 23 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 24 25 if [ "$SESSION_ID" = "" ]; then >>> 26 SESSION_ID=`who am I | md5 | cut -c1-8` ^ 27 fi 28 29 DIR=/var/tmp/whom/$USER/$SESSION_ID [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 34 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 35 36 if [ "$1" = "--session" ] || [ "$1" = "-s" ]; then >>> 37 echo $SESSION_ID ^ 38 exit 0 39 fi 40 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 45 46 if [ $# -eq 0 ]; then 47 # Creates working directory if needed >>> 48 if [ ! -d $DIR ]; then ^ 49 mkdir -p $DIR 50 touch $DIR/old 51 fi [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 46 if [ $# -eq 0 ]; then 47 # Creates working directory if needed 48 if [ ! -d $DIR ]; then >>> 49 mkdir -p $DIR ^ 50 touch $DIR/old 51 fi 52 [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 47 # Creates working directory if needed 48 if [ ! -d $DIR ]; then 49 mkdir -p $DIR >>> 50 touch $DIR/old ^ 51 fi 52 53 # Let's diff [1m[43m Warning [49m[m (SC2164) [4mSHELLCHECK[m Use 'cd ... || exit' or 'cd ... || return' in case cd fails. 51 fi 52 53 # Let's diff >>> 54 cd $DIR ^ 55 whom > current 56 diff old current | tail -n +2 57 mv current old [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 51 fi 52 53 # Let's diff >>> 54 cd $DIR ^ 55 whom > current 56 diff old current | tail -n +2 57 mv current old [1m[43m Advice [49m[m (SC2086) [4mSHELLCHECK[m Double quote to prevent globbing and word splitting. 65 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 66 67 if [ "$1" = "--clean" ] || [ "$1" = "-c" ]; then >>> 68 rm -rf $DIR ^ 69 exit $? 70 fi 71 [1m>>>[m Lint for [4mroles/webserver-core/letsencrypt/files/letsencrypt-renewal.sh[m: [1m[43m Advice [49m[m (SC2143) [4mSHELLCHECK[m Use grep -q instead of comparing output with [ -n .. ]. 20 nginx_output="$(nginx -t 2>&1)" 21 nginx_returncode="$?" 22 >>> 23 if [ "$nginx_returncode" -eq 0 ] && [ -n "$(echo "${nginx_output}" | grep warn)" ]; then ^ 24 return 2; 25 else 26 return "$nginx_returncode"; [1m[3m%[23m[1m[m [m[23m[24m[J[1m/opt/salt/nasqueron-operations[m ] [K[110C[38;5;5m([39mgit[38;5;5m)[38;5;3m-[38;5;5m[[38;5;2mcachet[38;5;5m][39m [125D[?2004h[?2004l Script done on Sat Sep 8 07:32:06 2018
Continue