# Primeiro, faço echo do segredo para um arquivo dentro do workspace do workflow
- name: Set up secret file
  env:
    DEBUG_PASSWORD: ${{ secrets.DEBUG_PASSWORD }}
    DEBUG_SECRET_KEY: ${{ secrets.DEBUG_SECRET_KEY }}
  run: |
    echo $DEBUG_PASSWORD >> secrets.txt
    echo $DEBUG_SECRET_KEY >> secrets.txt    

# Agora, crio a sessão
- name: Run tmate
  uses: mxschmitt/action-tmate@v2

sudo wget -c https://raw.github.com/KittyKatt/screenFetch/master/screenfetch-dev -O /usr/bin/screenfetch
chmod +x /usr/bin/screenfetch

mkdir ~/bkp_motd
mv /etc/update-motd.d/* ~/bkp_motd

cat > /etc/update-motd.d/00-header
#!/bin/sh
[ -r /etc/lsb-release ] && . /etc/lsb-release
if [ -z "$DISTRIB_DESCRIPTION" ] && [ -x /usr/bin/lsb_release ]; then
    DISTRIB_DESCRIPTION=$(lsb_release -s -d)
fi
screenfetch

cat > /etc/update-motd.d/10-sysinfo
#!/bin/bash
date=`date`
load=`cat /proc/loadavg | awk '{print $1}'`
root_usage=`df -h / | awk '/\// {print $(NF-1)}'`
memory_usage=`free -m | grep Mem: | awk '{printf("%3.1f%%", $3/$2*100)}'`
swap_usage=`free -m | awk '/Swap/ { printf("%3.1f%%", $3/$2*100) }'`
users=`users | wc -w`
time=`uptime | grep -ohe 'up .*' | sed 's/,/\ hours/g' | awk '{ printf $2" "$3 }'`
processes=`ps aux | wc -l`
ip=$(curl -s http://whatismyip.akamai.com)
echo "Informação do sistema em: $date"
echo
printf "Carga:\t\t%s\tIP:\t\t%s\n" $load $ip
printf "Memória:\t%s\tUptime:\t\t%s\n" $memory_usage "$time"
printf "Uso em /:\t%s\tSwap:\t\t%s\n" $root_usage $swap_usage
printf "Usuários:\t%s\tProcessos:\t%s\n" $users $processes
echo

cat > /etc/update-motd.d/90-footer
#!/bin/sh
[ -f /etc/motd.tail ] && cat /etc/motd.tail || true

chmod +x /etc/update-motd.d/*

mkdir /etc/update-motd.d/

sudo zypper in screenfetch

...
session optional pam_keyinit.so force revoke
session optional pam_motd.so motd=/run/motd.dynamic

chmod +x /etc/update-motd.d/*

...
ForceCommand find /etc/update-motd.d/ -type f -executable -exec {} \;

apt-get install strongswan

version 2

config setup
        charondebug="ike 2, knl 2"

conn Mikrotik-01
        left=%any
        # Informar a subnet dos servidores
        leftsubnet=10.128.0.0/24
        right=%any
        # Informar a subnet do Mikrotik
        # Deve ser única para cada Mikrotik
        rightsubnet=192.168.0.0/24
        forceencaps=yes
        ike=sha512-aes256-modp4096
        esp=sha512-aes256-modp4096
        authby=secret
        auto=start

%any %any : PSK 'senha_segura_longa'

conn Mikrotik-02
        left=%any
        leftsubnet=10.128.0.0/24
        right=%any
        # Informar a subnet do Mikrotik
        # Deve ser única para cada Mikrotik
        rightsubnet=192.168.88.0/24
        forceencaps=yes
        ike=sha512-aes256-modp4096
        esp=sha512-aes256-modp4096
        authby=secret
        auto=start

yum update -y
# Habilitando PHP7, pois o CentOS 7 vem com PHP5
yum install -y epel-release yum-utils
yum install -y http://rpms.remirepo.net/enterprise/remi-release-7.rpm
yum-config-manager --enable remi-php74
yum install -y php php-common php-opcache php-mcrypt php-cli php-gd \
    php-curl php-mysqlnd php-pear php-devel gcc gcc-c++ unixODBC-devel
# Verificando a versão do PHP
php -v

pecl install sqlsrv
pecl install pdo_sqlsrv
# Ativando as bibliotecas
echo extension=sqlsrv.so > /etc/php.d/sqlsrv.ini
echo extension=pdo_sqlsrv.so > /etc/php.d/pdo_sqlsrv.ini

echo "<?php
phpinfo();" > phpinfo.php
php phpinfo.php > resultado.txt

commands:
  # Instalação do Pear, compiladores e os headers    
  00_yum:
    command: yum install -y php-pear gcc gcc-c++ unixODBC-devel
  # Compilando o driver MSSQL  
  01_sqlsrv:
    command: pecl install sqlsrv      
  # Compilando o PDO
  02_pecl_pdo:
    command: pecl install pdo_sqlsrv
  # Configurando os módulos nos confs
  03_files:
    command: |
      echo extension=sqlsrv.so > /etc/php.d/sqlsrv.ini
      echo extension=pdo_sqlsrv.so > /etc/php.d/pdo_sqlsrv.ini      

<?php
phpinfo();

commands:
  # Instalação do Pear, compiladores e os headers    
  00_yum:
    command: yum install -y php-pear gcc gcc-c++ unixODBC-devel
  # Compilando o driver MSSQL    
  01_sqlsrv:
    command: |
      if [ ! -f "/usr/lib64/php/modules/sqlsrv.so" ]; then
        pecl install sqlsrv
      fi      
  # Compilando o PDO    
  02_pecl_pdo:
    command: |
      if [ ! -f "/usr/lib64/php/modules/pdo_sqlsrv.so" ]; then
        pecl install pdo_sqlsrv
      fi      
  # Configurando os módulos nos confs  
  03_files:
    command: |
      echo extension=sqlsrv.so > /etc/php.d/sqlsrv.ini
      echo extension=pdo_sqlsrv.so > /etc/php.d/pdo_sqlsrv.ini      

<?php
$pdo = new PDO( "sqlsrv:server=example.com;database=db", 
                "username", "password");

$query = $pdo->query("SELECT * FROM contacts");

$assoc = $query->fetch(PDO::FETCH_ASSOC);

print_r($assoc);

commands:
  # Instalação do Pear, compiladores e os headers    
  00_yum:
    command: yum install -y php-pear gcc gcc-c++ unixODBC-devel
  # Compilando o driver MSSQL    
  01_sqlsrv:
    command: |
      if [ ! -f "/usr/lib64/php/modules/sqlsrv.so" ]; then
        pecl install sqlsrv
      fi      
  # Compilando o PDO    
  02_pecl_pdo:
    command: |
      if [ ! -f "/usr/lib64/php/modules/pdo_sqlsrv.so" ]; then
        pecl install pdo_sqlsrv
      fi      
  # Configurando os módulos nos confs  
  03_files:
    command: |
      echo extension=sqlsrv.so > /etc/php.d/sqlsrv.ini
      echo extension=pdo_sqlsrv.so > /etc/php.d/pdo_sqlsrv.ini      
  # Driver ODBC
  05_odbc:
    command: |
      curl https://packages.microsoft.com/config/rhel/7/prod.repo > \
        /etc/yum.repos.d/mssql-release.repo
      ACCEPT_EULA=Y yum install -y msodbcsql17
      ACCEPT_EULA=Y yum install -y mssql-tools
      export PATH="$PATH:/opt/mssql-tools/bin"      

root@mysql-01:~#
# Escolhi a flag --databases para não pegar os bancos de 
# controle do MySQL
mysqldump -uroot -psenha_fornecida_pela_seguranca \
    --databases banco01 banco02 banco03 > mysqldump.sql

root@mysql-01:~#
vim /etc/mysql/mariadb.conf.d/50-server.cnf
[mysqld]
...
server-id=1
log-bin=/var/log/mysql/bin-log
auto-increment-increment = 1
auto-increment-offset = 2
...
systemctl restart mysql.service

mysql>
CREATE USER 'replica'@'192.168.3.111' 
    IDENTIFIED BY 'senha_aleatoria';
GRANT REPLICATION SLAVE ON *.* TO 'replica'@'192.168.3.111';
SHOW MASTER STATUS;
-- Anote o File e Position, se não retornar nada, deu ruim

[root@mysql-02 ~]#
yum install -y dnf-utils zip unzip
yum config-manager --add-repo=https://download.docker.com/linux/centos/docker-ce.repo
yum install -y docker-ce --nobest
systemctl enable docker.service
systemctl start docker.service
# Verificando se deu bonito
systemctl status docker.service

[root@mysql-02 ~]#
docker run \
    --name mysql-02 \
    --restart always \
    -v data:/var/lib/mysql \
    -v <CAMINHO_ABSOLUTO>/mysql:/etc/mysql/conf.d \
    -e MYSQL_ROOT_PASSWORD=senha_fornecida_pela_seguranca \
    -p 3306:3306 \
    -d mysql:5.5.30
docker exec -it mysql-02 mysql -uroot \
    -psenha_fornecida_pela_seguranca

mysql>
show variables like 'server%';
-- Se o Value de server_id for igual a 2, deu bom

[root@mysql-02 ~]#
scp root@192.168.3.110:/root/mysqldump.sql .
cat mysqldump.sql | docker exec -i mysql-02 mysql -uroot \
    -psenha_fornecida_pela_seguranca

mysql>
CREATE USER 'user_sistema'@'%' IDENTIFIED BY 'user_sistema';
GRANT ALL PRIVILEGES ON *.* TO 'user_sistema'@'%';
FLUSH PRIVILEGES;

mysql>
CREATE USER 'replica'@'192.168.3.110' 
    IDENTIFIED BY 'senha_aleatoria';
GRANT REPLICATION SLAVE ON *.* TO 'replica'@'192.168.3.110';
FLUSH PRIVILEGES;
    CHANGE MASTER TO MASTER_HOST='192.168.3.110',
    MASTER_USER='replica',
    MASTER_PASSWORD='senha_aleatoria',
    MASTER_LOG_FILE='<File_do_MASTER_STATUS>',
    MASTER_LOG_POS=<Position_do_MASTER_STATUS>;
START SLAVE;
SHOW SLAVE STATUS;
-- Verifica se tem algum erro, se não, continue a nadar
SHOW MASTER STATUS;
-- Anote o File e Position, se não retornar nada, deu ruim

root@mysql-01:~# 
mysql>
CHANGE MASTER TO MASTER_HOST='192.168.3.111',
    MASTER_USER='replica',
    MASTER_PASSWORD='senha_aleatoria',
    MASTER_LOG_FILE='<File_do_MASTER_STATUS>',
    MASTER_LOG_POS=<Position_do_MASTER_STATUS>;
START SLAVE;
SHOW SLAVE STATUS;
-- Verifica se tem algum erro, se não, continue a nadar

root@mysql-01:~# 
mysql>
CREATE DATABASE TESTE;
use TESTE;
CREATE TABLE testando (id INT NULL);
[root@mysql-02 ~]# 
mysql>
show databases;
-- Se tiver o DB TESTE, tá lindo!
use TESTE;
show tables;
-- Se tiver a tabela testando, funcionou perfeitamente a 
-- replicação do MySQL-01 para o MySQL-02
-- Agora testar a replicação inversa
DROP DATABASE TESTE;
root@mysql-01:~# 
mysql>
show databases;
-- Se não tiver a base de dados, está funcionando perfeitamente, 
-- agora é configurar o ProxySQL

-- Como está replicando, pode executar em qualquer um dos nodes
mysql>
CREATE USER 'monitor'@'192.168.3.100' 
    IDENTIFIED BY 'senha_aleatoria';
GRANT SELECT ON *.* TO 'monitor'@'192.168.3.100';
FLUSH PRIVILEGES;

[root@proxy-sql ~]#
echo '[ProxySQL_Repo]
name=ProxySQL YUM repository
baseurl=https://repo.proxysql.com/ProxySQL/proxysql-2.0.x/centos/8/
gpgcheck=1
gpgkey=https://repo.proxysql.com/ProxySQL/repo_pub_key' > \
    /etc/yum.repos.d/proxysql.repo
yum install -y proxysql mysql
systemctl enable proxysql.service
systemctl start proxysql.service
mysql -uadmin -padmin -h 127.0.0.1 -P6032
# Se logou, o serviço está rodando

mysql>
UPDATE global_variables SET 
    variable_value='admin:senha_fornecida_pela_seguranca'
    WHERE variable_name='admin-admin_credentials';
LOAD ADMIN VARIABLES TO RUNTIME;
SAVE ADMIN VARIABLES TO DISK;

mysql>
UPDATE global_variables SET variable_value=5 WHERE 
    variable_name='admin-stats_mysql_connection_pool';
UPDATE global_variables SET variable_value=5 WHERE 
    variable_name='admin-stats_mysql_connections';
UPDATE global_variables SET variable_value=5 WHERE 
    variable_name='admin-stats_mysql_query_cache';
UPDATE global_variables SET variable_value=10 WHERE 
    variable_name='mysql-ping_timeout_server';
UPDATE global_variables SET variable_value=10 WHERE 
    variable_name='mysql-connect_timeout_server';
UPDATE global_variables SET variable_value=10 WHERE 
    variable_name='mysql-poll_timeout';
-- Carregando as configurações
LOAD MYSQL VARIABLES TO RUNTIME;
LOAD MYSQL SERVERS TO RUNTIME;
-- Persistindo no banco de dados
SAVE MYSQL VARIABLES TO DISK;
SAVE MYSQL SERVERS TO DISK;
UPDATE global_variables SET variable_value='0.0.0.0:3306' 
    WHERE variable_name='mysql-interfaces';
SAVE MYSQL VARIABLES TO DISK;
PROXYSQL RESTART

[root@proxy-sql ~]#
mysql -uadmin -h 127.0.0.1 -P6032 -psenha_fornecida_pela_seguranca
mysql>
INSERT INTO mysql_servers(hostgroup_id,hostname,port) 
    VALUES (1,'192.168.3.110',3306),(1,'192.168.3.111',3306);

mysql>
UPDATE global_variables SET variable_value='monitor' 
    WHERE variable_name='mysql-monitor_username';
UPDATE global_variables SET variable_value='senha_aleatoria' 
    WHERE variable_name='mysql-monitor_password';
-- Carregando as configurações
LOAD MYSQL VARIABLES TO RUNTIME;
LOAD MYSQL SERVERS TO RUNTIME;
-- Persistindo no banco de dados
SAVE MYSQL VARIABLES TO DISK;
SAVE MYSQL SERVERS TO DISK;

[root@proxy-sql ~]#
systemctl restart proxysql.service

mysql>
-- Verificando o status do monitoramento, se retornar NULL 
-- em ping_error, está funcionando
SELECT * FROM monitor.mysql_server_ping_log;

mysql>
INSERT INTO mysql_users (username,password,default_hostgroup) 
    VALUES ('user_xxxx','user_xxxx',1);
LOAD MYSQL USERS TO RUNTIME;
SAVE MYSQL USERS TO DISK;

# Logue no ProxySQL, lembrando que a porta 6032 é para 
# administração, e a 6033 é de uso dos bancos
[root@proxy-sql ~]#
mysql -uuser_sistema -h 127.0.0.1 -P6033 -puser_sistema

mysql>
-- Faça uma Query simples
show databases;
use banco_de_dados;
SELECT * FROM tabela;
-- Agora logue no MySQL-01 e pare o banco de dados
root@mysql-01:~#
systemctl stop mysql.service
-- Repita a consulta anterior e observe a mágica
-- Agora inverta, suba o MySQL-01 e pare o MySQL-02
-- E repita a consulta

mysql>
SELECT srv_host,status FROM stats.stats_mysql_connection_pool;