[bitnami/*] Support only the latest LTS branch (#75668)

Signed-off-by: David Gomez <dgomezleon@vmware.com>

bitnami/openldap/2.5/README.md

@@ -0,0 +1,5 @@
+# Only latest stable branch maintained in the free Bitnami catalog
+
+Starting December 10th 2024, only the latest stable branch of any container will receive updates in the free Bitnami catalog. To access up-to-date releases for all upstream-supported branches, consider upgrading to Bitnami Premium. Previous versions already released will not be deleted. They are still available to pull from DockerHub.
+
+Please check the Bitnami Premium page in our partner Arrow's marketplace. See [https://www.arrow.com/globalecs/na/vendors/bitnami](https://www.arrow.com/globalecs/na/vendors/bitnami?utm_source=GitHub&utm_medium=containers) for more information.

bitnami/openldap/2.5/debian-12/Dockerfile

@@ -1,59 +0,0 @@
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-FROM docker.io/bitnami/minideb:bookworm
-
-ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
-ARG TARGETARCH
-
-LABEL com.vmware.cp.artifact.flavor="sha256:c50c90cfd9d12b445b011e6ad529f1ad3daea45c26d20b00732fae3cd71f6a83" \
-      org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2024-11-26T23:56:20Z" \
-      org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
-      org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/openldap/README.md" \
-      org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.ref.name="2.5.19-debian-12-r0" \
-      org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/openldap" \
-      org.opencontainers.image.title="openldap" \
-      org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="2.5.19"
-
-ENV HOME="/" \
-    OS_ARCH="${TARGETARCH:-amd64}" \
-    OS_FLAVOUR="debian-12" \
-    OS_NAME="linux"
-
-COPY prebuildfs /
-SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
-# Install required system packages and dependencies
-RUN install_packages ca-certificates curl libargon2-1 libcap2-bin libcom-err2 libcrypt1 libgssapi-krb5-2 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libltdl7 libnsl2 libnss3-tools libodbc2 libsasl2-2 libssl3 libtirpc3 libwrap0 mdbtools procps psmisc
-RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ ; \
-    COMPONENTS=( \
-      "openldap-2.5.19-0-linux-${OS_ARCH}-debian-12" \
-    ) ; \
-    for COMPONENT in "${COMPONENTS[@]}"; do \
-      if [ ! -f "${COMPONENT}.tar.gz" ]; then \
-        curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz" -O ; \
-        curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz.sha256" -O ; \
-      fi ; \
-      sha256sum -c "${COMPONENT}.tar.gz.sha256" ; \
-      tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' ; \
-      rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \
-    done
-RUN apt-get autoremove --purge -y curl && \
-    apt-get update && apt-get upgrade -y && \
-    apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
-RUN chmod g+rwX /opt/bitnami
-RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
-
-COPY rootfs /
-RUN /opt/bitnami/scripts/openldap/postunpack.sh
-ENV APP_VERSION="2.5.19" \
-    BITNAMI_APP_NAME="openldap" \
-    PATH="/opt/bitnami/openldap/bin:/opt/bitnami/openldap/sbin:$PATH"
-
-EXPOSE 1389 1636
-
-USER 1001
-ENTRYPOINT [ "/opt/bitnami/scripts/openldap/entrypoint.sh" ]
-CMD [ "/opt/bitnami/scripts/openldap/run.sh" ]

bitnami/openldap/2.5/debian-12/docker-compose-testing.yml

@@ -1,15 +0,0 @@
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-services:
-  openldap:
-    image: docker.io/bitnami/openldap:2.5
-    ports:
-      - '1389:1389'
-      - '1636:1636'
-    volumes:
-      - 'openldap_data:/bitnami/openldap'
-
-volumes:
-  openldap_data:
-    driver: local

bitnami/openldap/2.5/debian-12/docker-compose.yml

@@ -1,20 +0,0 @@
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-services:
-  openldap:
-    image: docker.io/bitnami/openldap:2.5
-    ports:
-      - '1389:1389'
-      - '1636:1636'
-    environment:
-      - LDAP_ADMIN_USERNAME=admin
-      - LDAP_ADMIN_PASSWORD=adminpassword
-      - LDAP_USERS=user01,user02
-      - LDAP_PASSWORDS=password1,password2
-    volumes:
-      - 'openldap_data:/bitnami/openldap'
-
-volumes:
-  openldap_data:
-    driver: local

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/.bitnami_components.json

@@ -1,8 +0,0 @@
-{
-    "openldap": {
-        "arch": "amd64",
-        "distro": "debian-12",
-        "type": "NAMI",
-        "version": "2.5.19-0"
-    }
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/licenses/licenses.txt

@@ -1,2 +0,0 @@
-Bitnami containers ship with software bundles. You can find the licenses under:
-/opt/bitnami/[name-of-bundle]/licenses/[bundle-version].txt

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libbitnami.sh

@@ -1,54 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Bitnami custom library
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/liblog.sh
-
-# Constants
-BOLD='\033[1m'
-
-# Functions
-
-########################
-# Print the welcome page
-# Globals:
-#   DISABLE_WELCOME_MESSAGE
-#   BITNAMI_APP_NAME
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-print_welcome_page() {
-    if [[ -z "${DISABLE_WELCOME_MESSAGE:-}" ]]; then
-        if [[ -n "$BITNAMI_APP_NAME" ]]; then
-            print_image_welcome_page
-        fi
-    fi
-}
-
-########################
-# Print the welcome page for a Bitnami Docker image
-# Globals:
-#   BITNAMI_APP_NAME
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-print_image_welcome_page() {
-    local github_url="https://github.com/bitnami/containers"
-
-    info ""
-    info "${BOLD}Welcome to the Bitnami ${BITNAMI_APP_NAME} container${RESET}"
-    info "Subscribe to project updates by watching ${BOLD}${github_url}${RESET}"
-    info "Submit issues and feature requests at ${BOLD}${github_url}/issues${RESET}"
-    info "Upgrade to Tanzu Application Catalog for production environments to access custom-configured and pre-packaged software components. Gain enhanced features, including Software Bill of Materials (SBOM), CVE scan result reports, and VEX documents. To learn more, visit ${BOLD}https://bitnami.com/enterprise${RESET}"
-    info ""
-}
-

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh

@@ -1,141 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for managing files
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/libos.sh
-
-# Functions
-
-########################
-# Replace a regex-matching string in a file
-# Arguments:
-#   $1 - filename
-#   $2 - match regex
-#   $3 - substitute regex
-#   $4 - use POSIX regex. Default: true
-# Returns:
-#   None
-#########################
-replace_in_file() {
-    local filename="${1:?filename is required}"
-    local match_regex="${2:?match regex is required}"
-    local substitute_regex="${3:?substitute regex is required}"
-    local posix_regex=${4:-true}
-
-    local result
-
-    # We should avoid using 'sed in-place' substitutions
-    # 1) They are not compatible with files mounted from ConfigMap(s)
-    # 2) We found incompatibility issues with Debian10 and "in-place" substitutions
-    local -r del=$'\001' # Use a non-printable character as a 'sed' delimiter to avoid issues
-    if [[ $posix_regex = true ]]; then
-        result="$(sed -E "s${del}${match_regex}${del}${substitute_regex}${del}g" "$filename")"
-    else
-        result="$(sed "s${del}${match_regex}${del}${substitute_regex}${del}g" "$filename")"
-    fi
-    echo "$result" > "$filename"
-}
-
-########################
-# Replace a regex-matching multiline string in a file
-# Arguments:
-#   $1 - filename
-#   $2 - match regex
-#   $3 - substitute regex
-# Returns:
-#   None
-#########################
-replace_in_file_multiline() {
-    local filename="${1:?filename is required}"
-    local match_regex="${2:?match regex is required}"
-    local substitute_regex="${3:?substitute regex is required}"
-
-    local result
-    local -r del=$'\001' # Use a non-printable character as a 'sed' delimiter to avoid issues
-    result="$(perl -pe "BEGIN{undef $/;} s${del}${match_regex}${del}${substitute_regex}${del}sg" "$filename")"
-    echo "$result" > "$filename"
-}
-
-########################
-# Remove a line in a file based on a regex
-# Arguments:
-#   $1 - filename
-#   $2 - match regex
-#   $3 - use POSIX regex. Default: true
-# Returns:
-#   None
-#########################
-remove_in_file() {
-    local filename="${1:?filename is required}"
-    local match_regex="${2:?match regex is required}"
-    local posix_regex=${3:-true}
-    local result
-
-    # We should avoid using 'sed in-place' substitutions
-    # 1) They are not compatible with files mounted from ConfigMap(s)
-    # 2) We found incompatibility issues with Debian10 and "in-place" substitutions
-    if [[ $posix_regex = true ]]; then
-        result="$(sed -E "/$match_regex/d" "$filename")"
-    else
-        result="$(sed "/$match_regex/d" "$filename")"
-    fi
-    echo "$result" > "$filename"
-}
-
-########################
-# Appends text after the last line matching a pattern
-# Arguments:
-#   $1 - file
-#   $2 - match regex
-#   $3 - contents to add
-# Returns:
-#   None
-#########################
-append_file_after_last_match() {
-    local file="${1:?missing file}"
-    local match_regex="${2:?missing pattern}"
-    local value="${3:?missing value}"
-
-    # We read the file in reverse, replace the first match (0,/pattern/s) and then reverse the results again
-    result="$(tac "$file" | sed -E "0,/($match_regex)/s||${value}\n\1|" | tac)"
-    echo "$result" > "$file"
-}
-
-########################
-# Wait until certain entry is present in a log file
-# Arguments:
-#   $1 - entry to look for
-#   $2 - log file
-#   $3 - max retries. Default: 12
-#   $4 - sleep between retries (in seconds). Default: 5
-# Returns:
-#   Boolean
-#########################
-wait_for_log_entry() {
-    local -r entry="${1:-missing entry}"
-    local -r log_file="${2:-missing log file}"
-    local -r retries="${3:-12}"
-    local -r interval_time="${4:-5}"
-    local attempt=0
-
-    check_log_file_for_entry() {
-        if ! grep -qE "$entry" "$log_file"; then
-            debug "Entry \"${entry}\" still not present in ${log_file} (attempt $((++attempt))/${retries})"
-            return 1
-        fi
-    }
-    debug "Checking that ${log_file} log file contains entry \"${entry}\""
-    if retry_while check_log_file_for_entry "$retries" "$interval_time"; then
-        debug "Found entry \"${entry}\" in ${log_file}"
-        true
-    else
-        error "Could not find entry \"${entry}\" in ${log_file} after ${retries} retries"
-        debug_execute cat "$log_file"
-        return 1
-    fi
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh

@@ -1,193 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for file system actions
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/liblog.sh
-
-# Functions
-
-########################
-# Ensure a file/directory is owned (user and group) but the given user
-# Arguments:
-#   $1 - filepath
-#   $2 - owner
-# Returns:
-#   None
-#########################
-owned_by() {
-    local path="${1:?path is missing}"
-    local owner="${2:?owner is missing}"
-    local group="${3:-}"
-
-    if [[ -n $group ]]; then
-        chown "$owner":"$group" "$path"
-    else
-        chown "$owner":"$owner" "$path"
-    fi
-}
-
-########################
-# Ensure a directory exists and, optionally, is owned by the given user
-# Arguments:
-#   $1 - directory
-#   $2 - owner
-# Returns:
-#   None
-#########################
-ensure_dir_exists() {
-    local dir="${1:?directory is missing}"
-    local owner_user="${2:-}"
-    local owner_group="${3:-}"
-
-    [ -d "${dir}" ] || mkdir -p "${dir}"
-    if [[ -n $owner_user ]]; then
-        owned_by "$dir" "$owner_user" "$owner_group"
-    fi
-}
-
-########################
-# Checks whether a directory is empty or not
-# arguments:
-#   $1 - directory
-# returns:
-#   boolean
-#########################
-is_dir_empty() {
-    local -r path="${1:?missing directory}"
-    # Calculate real path in order to avoid issues with symlinks
-    local -r dir="$(realpath "$path")"
-    if [[ ! -e "$dir" ]] || [[ -z "$(ls -A "$dir")" ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Checks whether a mounted directory is empty or not
-# arguments:
-#   $1 - directory
-# returns:
-#   boolean
-#########################
-is_mounted_dir_empty() {
-    local dir="${1:?missing directory}"
-
-    if is_dir_empty "$dir" || find "$dir" -mindepth 1 -maxdepth 1 -not -name ".snapshot" -not -name "lost+found" -exec false {} +; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Checks whether a file can be written to or not
-# arguments:
-#   $1 - file
-# returns:
-#   boolean
-#########################
-is_file_writable() {
-    local file="${1:?missing file}"
-    local dir
-    dir="$(dirname "$file")"
-
-    if [[ (-f "$file" && -w "$file") || (! -f "$file" && -d "$dir" && -w "$dir") ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Relativize a path
-# arguments:
-#   $1 - path
-#   $2 - base
-# returns:
-#   None
-#########################
-relativize() {
-    local -r path="${1:?missing path}"
-    local -r base="${2:?missing base}"
-    pushd "$base" >/dev/null || exit
-    realpath -q --no-symlinks --relative-base="$base" "$path" | sed -e 's|^/$|.|' -e 's|^/||'
-    popd >/dev/null || exit
-}
-
-########################
-# Configure permisions and ownership recursively
-# Globals:
-#   None
-# Arguments:
-#   $1 - paths (as a string).
-# Flags:
-#   -f|--file-mode - mode for directories.
-#   -d|--dir-mode - mode for files.
-#   -u|--user - user
-#   -g|--group - group
-# Returns:
-#   None
-#########################
-configure_permissions_ownership() {
-    local -r paths="${1:?paths is missing}"
-    local dir_mode=""
-    local file_mode=""
-    local user=""
-    local group=""
-
-    # Validate arguments
-    shift 1
-    while [ "$#" -gt 0 ]; do
-        case "$1" in
-        -f | --file-mode)
-            shift
-            file_mode="${1:?missing mode for files}"
-            ;;
-        -d | --dir-mode)
-            shift
-            dir_mode="${1:?missing mode for directories}"
-            ;;
-        -u | --user)
-            shift
-            user="${1:?missing user}"
-            ;;
-        -g | --group)
-            shift
-            group="${1:?missing group}"
-            ;;
-        *)
-            echo "Invalid command line flag $1" >&2
-            return 1
-            ;;
-        esac
-        shift
-    done
-
-    read -r -a filepaths <<<"$paths"
-    for p in "${filepaths[@]}"; do
-        if [[ -e "$p" ]]; then
-            find -L "$p" -printf ""
-            if [[ -n $dir_mode ]]; then
-                find -L "$p" -type d ! -perm "$dir_mode" -print0 | xargs -r -0 chmod "$dir_mode"
-            fi
-            if [[ -n $file_mode ]]; then
-                find -L "$p" -type f ! -perm "$file_mode" -print0 | xargs -r -0 chmod "$file_mode"
-            fi
-            if [[ -n $user ]] && [[ -n $group ]]; then
-                find -L "$p" -print0 | xargs -r -0 chown "${user}:${group}"
-            elif [[ -n $user ]] && [[ -z $group ]]; then
-                find -L "$p" -print0 | xargs -r -0 chown "${user}"
-            elif [[ -z $user ]] && [[ -n $group ]]; then
-                find -L "$p" -print0 | xargs -r -0 chgrp "${group}"
-            fi
-        else
-            stderr_print "$p does not exist"
-        fi
-    done
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libhook.sh

@@ -1,18 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library to use for scripts expected to be used as Kubernetes lifecycle hooks
-
-# shellcheck disable=SC1091
-
-# Load generic libraries
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libos.sh
-
-# Override functions that log to stdout/stderr of the current process, so they print to process 1
-for function_to_override in stderr_print debug_execute; do
-    # Output is sent to output of process 1 and thus end up in the container log
-    # The hook output in general isn't saved
-    eval "$(declare -f "$function_to_override") >/proc/1/fd/1 2>/proc/1/fd/2"
-done

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/liblog.sh

@@ -1,114 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for logging functions
-
-# Constants
-RESET='\033[0m'
-RED='\033[38;5;1m'
-GREEN='\033[38;5;2m'
-YELLOW='\033[38;5;3m'
-MAGENTA='\033[38;5;5m'
-CYAN='\033[38;5;6m'
-
-# Functions
-
-########################
-# Print to STDERR
-# Arguments:
-#   Message to print
-# Returns:
-#   None
-#########################
-stderr_print() {
-    # 'is_boolean_yes' is defined in libvalidations.sh, but depends on this file so we cannot source it
-    local bool="${BITNAMI_QUIET:-false}"
-    # comparison is performed without regard to the case of alphabetic characters
-    shopt -s nocasematch
-    if ! [[ "$bool" = 1 || "$bool" =~ ^(yes|true)$ ]]; then
-        printf "%b\\n" "${*}" >&2
-    fi
-}
-
-########################
-# Log message
-# Arguments:
-#   Message to log
-# Returns:
-#   None
-#########################
-log() {
-    stderr_print "${CYAN}${MODULE:-} ${MAGENTA}$(date "+%T.%2N ")${RESET}${*}"
-}
-########################
-# Log an 'info' message
-# Arguments:
-#   Message to log
-# Returns:
-#   None
-#########################
-info() {
-    log "${GREEN}INFO ${RESET} ==> ${*}"
-}
-########################
-# Log message
-# Arguments:
-#   Message to log
-# Returns:
-#   None
-#########################
-warn() {
-    log "${YELLOW}WARN ${RESET} ==> ${*}"
-}
-########################
-# Log an 'error' message
-# Arguments:
-#   Message to log
-# Returns:
-#   None
-#########################
-error() {
-    log "${RED}ERROR${RESET} ==> ${*}"
-}
-########################
-# Log a 'debug' message
-# Globals:
-#   BITNAMI_DEBUG
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-debug() {
-    # 'is_boolean_yes' is defined in libvalidations.sh, but depends on this file so we cannot source it
-    local bool="${BITNAMI_DEBUG:-false}"
-    # comparison is performed without regard to the case of alphabetic characters
-    shopt -s nocasematch
-    if [[ "$bool" = 1 || "$bool" =~ ^(yes|true)$ ]]; then
-        log "${MAGENTA}DEBUG${RESET} ==> ${*}"
-    fi
-}
-
-########################
-# Indent a string
-# Arguments:
-#   $1 - string
-#   $2 - number of indentation characters (default: 4)
-#   $3 - indentation character (default: " ")
-# Returns:
-#   None
-#########################
-indent() {
-    local string="${1:-}"
-    local num="${2:?missing num}"
-    local char="${3:-" "}"
-    # Build the indentation unit string
-    local indent_unit=""
-    for ((i = 0; i < num; i++)); do
-        indent_unit="${indent_unit}${char}"
-    done
-    # shellcheck disable=SC2001
-    # Complex regex, see https://github.com/koalaman/shellcheck/wiki/SC2001#exceptions
-    echo "$string" | sed "s/^/${indent_unit}/"
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libnet.sh

@@ -1,171 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for network functions
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libvalidations.sh
-
-# Functions
-
-########################
-# Resolve IP address for a host/domain (i.e. DNS lookup)
-# Arguments:
-#   $1 - Hostname to resolve
-#   $2 - IP address version (v4, v6), leave empty for resolving to any version
-# Returns:
-#   IP
-#########################
-dns_lookup() {
-    local host="${1:?host is missing}"
-    local ip_version="${2:-}"
-    getent "ahosts${ip_version}" "$host" | awk '/STREAM/ {print $1 }' | head -n 1
-}
-
-#########################
-# Wait for a hostname and return the IP
-# Arguments:
-#   $1 - hostname
-#   $2 - number of retries
-#   $3 - seconds to wait between retries
-# Returns:
-#   - IP address that corresponds to the hostname
-#########################
-wait_for_dns_lookup() {
-    local hostname="${1:?hostname is missing}"
-    local retries="${2:-5}"
-    local seconds="${3:-1}"
-    check_host() {
-        if [[ $(dns_lookup "$hostname") == "" ]]; then
-            false
-        else
-            true
-        fi
-    }
-    # Wait for the host to be ready
-    retry_while "check_host ${hostname}" "$retries" "$seconds"
-    dns_lookup "$hostname"
-}
-
-########################
-# Get machine's IP
-# Arguments:
-#   None
-# Returns:
-#   Machine IP
-#########################
-get_machine_ip() {
-    local -a ip_addresses
-    local hostname
-    hostname="$(hostname)"
-    read -r -a ip_addresses <<< "$(dns_lookup "$hostname" | xargs echo)"
-    if [[ "${#ip_addresses[@]}" -gt 1 ]]; then
-        warn "Found more than one IP address associated to hostname ${hostname}: ${ip_addresses[*]}, will use ${ip_addresses[0]}"
-    elif [[ "${#ip_addresses[@]}" -lt 1 ]]; then
-        error "Could not find any IP address associated to hostname ${hostname}"
-        exit 1
-    fi
-    # Check if the first IP address is IPv6 to add brackets
-    if validate_ipv6 "${ip_addresses[0]}" ; then
-        echo "[${ip_addresses[0]}]"
-    else
-        echo "${ip_addresses[0]}"
-    fi
-}
-
-########################
-# Check if the provided argument is a resolved hostname
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_hostname_resolved() {
-    local -r host="${1:?missing value}"
-    if [[ -n "$(dns_lookup "$host")" ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Parse URL
-# Globals:
-#   None
-# Arguments:
-#   $1 - uri - String
-#   $2 - component to obtain. Valid options (scheme, authority, userinfo, host, port, path, query or fragment) - String
-# Returns:
-#   String
-parse_uri() {
-    local uri="${1:?uri is missing}"
-    local component="${2:?component is missing}"
-
-    # Solution based on https://tools.ietf.org/html/rfc3986#appendix-B with
-    # additional sub-expressions to split authority into userinfo, host and port
-    # Credits to Patryk Obara (see https://stackoverflow.com/a/45977232/6694969)
-    local -r URI_REGEX='^(([^:/?#]+):)?(//((([^@/?#]+)@)?([^:/?#]+)(:([0-9]+))?))?(/([^?#]*))?(\?([^#]*))?(#(.*))?'
-    #                    ||            |  |||            |         | |            | |         |  |        | |
-    #                    |2 scheme     |  ||6 userinfo   7 host    | 9 port       | 11 rpath  |  13 query | 15 fragment
-    #                    1 scheme:     |  |5 userinfo@             8 :...         10 path     12 ?...     14 #...
-    #                                  |  4 authority
-    #                                  3 //...
-    local index=0
-    case "$component" in
-        scheme)
-            index=2
-            ;;
-        authority)
-            index=4
-            ;;
-        userinfo)
-            index=6
-            ;;
-        host)
-            index=7
-            ;;
-        port)
-            index=9
-            ;;
-        path)
-            index=10
-            ;;
-        query)
-            index=13
-            ;;
-        fragment)
-            index=14
-            ;;
-        *)
-            stderr_print "unrecognized component $component"
-            return 1
-            ;;
-    esac
-    [[ "$uri" =~ $URI_REGEX ]] && echo "${BASH_REMATCH[${index}]}"
-}
-
-########################
-# Wait for a HTTP connection to succeed
-# Globals:
-#   *
-# Arguments:
-#   $1 - URL to wait for
-#   $2 - Maximum amount of retries (optional)
-#   $3 - Time between retries (optional)
-# Returns:
-#   true if the HTTP connection succeeded, false otherwise
-#########################
-wait_for_http_connection() {
-    local url="${1:?missing url}"
-    local retries="${2:-}"
-    local sleep_time="${3:-}"
-    if ! retry_while "debug_execute curl --silent ${url}" "$retries" "$sleep_time"; then
-        error "Could not connect to ${url}"
-        return 1
-    fi
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh

@@ -1,657 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for operating system actions
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libfs.sh
-. /opt/bitnami/scripts/libvalidations.sh
-
-# Functions
-
-########################
-# Check if an user exists in the system
-# Arguments:
-#   $1 - user
-# Returns:
-#   Boolean
-#########################
-user_exists() {
-    local user="${1:?user is missing}"
-    id "$user" >/dev/null 2>&1
-}
-
-########################
-# Check if a group exists in the system
-# Arguments:
-#   $1 - group
-# Returns:
-#   Boolean
-#########################
-group_exists() {
-    local group="${1:?group is missing}"
-    getent group "$group" >/dev/null 2>&1
-}
-
-########################
-# Create a group in the system if it does not exist already
-# Arguments:
-#   $1 - group
-# Flags:
-#   -i|--gid - the ID for the new group
-#   -s|--system - Whether to create new user as system user (uid <= 999)
-# Returns:
-#   None
-#########################
-ensure_group_exists() {
-    local group="${1:?group is missing}"
-    local gid=""
-    local is_system_user=false
-
-    # Validate arguments
-    shift 1
-    while [ "$#" -gt 0 ]; do
-        case "$1" in
-        -i | --gid)
-            shift
-            gid="${1:?missing gid}"
-            ;;
-        -s | --system)
-            is_system_user=true
-            ;;
-        *)
-            echo "Invalid command line flag $1" >&2
-            return 1
-            ;;
-        esac
-        shift
-    done
-
-    if ! group_exists "$group"; then
-        local -a args=("$group")
-        if [[ -n "$gid" ]]; then
-            if group_exists "$gid"; then
-                error "The GID $gid is already in use." >&2
-                return 1
-            fi
-            args+=("--gid" "$gid")
-        fi
-        $is_system_user && args+=("--system")
-        groupadd "${args[@]}" >/dev/null 2>&1
-    fi
-}
-
-########################
-# Create an user in the system if it does not exist already
-# Arguments:
-#   $1 - user
-# Flags:
-#   -i|--uid - the ID for the new user
-#   -g|--group - the group the new user should belong to
-#   -a|--append-groups - comma-separated list of supplemental groups to append to the new user
-#   -h|--home - the home directory for the new user
-#   -s|--system - whether to create new user as system user (uid <= 999)
-# Returns:
-#   None
-#########################
-ensure_user_exists() {
-    local user="${1:?user is missing}"
-    local uid=""
-    local group=""
-    local append_groups=""
-    local home=""
-    local is_system_user=false
-
-    # Validate arguments
-    shift 1
-    while [ "$#" -gt 0 ]; do
-        case "$1" in
-        -i | --uid)
-            shift
-            uid="${1:?missing uid}"
-            ;;
-        -g | --group)
-            shift
-            group="${1:?missing group}"
-            ;;
-        -a | --append-groups)
-            shift
-            append_groups="${1:?missing append_groups}"
-            ;;
-        -h | --home)
-            shift
-            home="${1:?missing home directory}"
-            ;;
-        -s | --system)
-            is_system_user=true
-            ;;
-        *)
-            echo "Invalid command line flag $1" >&2
-            return 1
-            ;;
-        esac
-        shift
-    done
-
-    if ! user_exists "$user"; then
-        local -a user_args=("-N" "$user")
-        if [[ -n "$uid" ]]; then
-            if user_exists "$uid"; then
-                error "The UID $uid is already in use."
-                return 1
-            fi
-            user_args+=("--uid" "$uid")
-        else
-            $is_system_user && user_args+=("--system")
-        fi
-        useradd "${user_args[@]}" >/dev/null 2>&1
-    fi
-
-    if [[ -n "$group" ]]; then
-        local -a group_args=("$group")
-        $is_system_user && group_args+=("--system")
-        ensure_group_exists "${group_args[@]}"
-        usermod -g "$group" "$user" >/dev/null 2>&1
-    fi
-
-    if [[ -n "$append_groups" ]]; then
-        local -a groups
-        read -ra groups <<<"$(tr ',;' ' ' <<<"$append_groups")"
-        for group in "${groups[@]}"; do
-            ensure_group_exists "$group"
-            usermod -aG "$group" "$user" >/dev/null 2>&1
-        done
-    fi
-
-    if [[ -n "$home" ]]; then
-        mkdir -p "$home"
-        usermod -d "$home" "$user" >/dev/null 2>&1
-        configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group"
-    fi
-}
-
-########################
-# Check if the script is currently running as root
-# Arguments:
-#   $1 - user
-#   $2 - group
-# Returns:
-#   Boolean
-#########################
-am_i_root() {
-    if [[ "$(id -u)" = "0" ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Print OS metadata
-# Arguments:
-#   $1 - Flag name
-# Flags:
-#   --id - Distro ID
-#   --version - Distro version
-#   --branch - Distro branch
-#   --codename - Distro codename
-#   --name - Distro name
-#   --pretty-name - Distro pretty name
-# Returns:
-#   String
-#########################
-get_os_metadata() {
-    local -r flag_name="${1:?missing flag}"
-    # Helper function
-    get_os_release_metadata() {
-        local -r env_name="${1:?missing environment variable name}"
-        (
-            . /etc/os-release
-            echo "${!env_name}"
-        )
-    }
-    case "$flag_name" in
-    --id)
-        get_os_release_metadata ID
-        ;;
-    --version)
-        get_os_release_metadata VERSION_ID
-        ;;
-    --branch)
-        get_os_release_metadata VERSION_ID | sed 's/\..*//'
-        ;;
-    --codename)
-        get_os_release_metadata VERSION_CODENAME
-        ;;
-    --name)
-        get_os_release_metadata NAME
-        ;;
-    --pretty-name)
-        get_os_release_metadata PRETTY_NAME
-        ;;
-    *)
-        error "Unknown flag ${flag_name}"
-        return 1
-        ;;
-    esac
-}
-
-########################
-# Get total memory available
-# Arguments:
-#   None
-# Returns:
-#   Memory in bytes
-#########################
-get_total_memory() {
-    echo $(($(grep MemTotal /proc/meminfo | awk '{print $2}') / 1024))
-}
-
-########################
-# Get machine size depending on specified memory
-# Globals:
-#   None
-# Arguments:
-#   None
-# Flags:
-#   --memory - memory size (optional)
-# Returns:
-#   Detected instance size
-#########################
-get_machine_size() {
-    local memory=""
-    # Validate arguments
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-        --memory)
-            shift
-            memory="${1:?missing memory}"
-            ;;
-        *)
-            echo "Invalid command line flag $1" >&2
-            return 1
-            ;;
-        esac
-        shift
-    done
-    if [[ -z "$memory" ]]; then
-        debug "Memory was not specified, detecting available memory automatically"
-        memory="$(get_total_memory)"
-    fi
-    sanitized_memory=$(convert_to_mb "$memory")
-    if [[ "$sanitized_memory" -gt 26000 ]]; then
-        echo 2xlarge
-    elif [[ "$sanitized_memory" -gt 13000 ]]; then
-        echo xlarge
-    elif [[ "$sanitized_memory" -gt 6000 ]]; then
-        echo large
-    elif [[ "$sanitized_memory" -gt 3000 ]]; then
-        echo medium
-    elif [[ "$sanitized_memory" -gt 1500 ]]; then
-        echo small
-    else
-        echo micro
-    fi
-}
-
-########################
-# Get machine size depending on specified memory
-# Globals:
-#   None
-# Arguments:
-#   $1 - memory size (optional)
-# Returns:
-#   Detected instance size
-#########################
-get_supported_machine_sizes() {
-    echo micro small medium large xlarge 2xlarge
-}
-
-########################
-# Convert memory size from string to amount of megabytes (i.e. 2G -> 2048)
-# Globals:
-#   None
-# Arguments:
-#   $1 - memory size
-# Returns:
-#   Result of the conversion
-#########################
-convert_to_mb() {
-    local amount="${1:-}"
-    if [[ $amount =~ ^([0-9]+)(m|M|g|G) ]]; then
-        size="${BASH_REMATCH[1]}"
-        unit="${BASH_REMATCH[2]}"
-        if [[ "$unit" = "g" || "$unit" = "G" ]]; then
-            amount="$((size * 1024))"
-        else
-            amount="$size"
-        fi
-    fi
-    echo "$amount"
-}
-
-#########################
-# Redirects output to /dev/null if debug mode is disabled
-# Globals:
-#   BITNAMI_DEBUG
-# Arguments:
-#   $@ - Command to execute
-# Returns:
-#   None
-#########################
-debug_execute() {
-    if is_boolean_yes "${BITNAMI_DEBUG:-false}"; then
-        "$@"
-    else
-        "$@" >/dev/null 2>&1
-    fi
-}
-
-########################
-# Retries a command a given number of times
-# Arguments:
-#   $1 - cmd (as a string)
-#   $2 - max retries. Default: 12
-#   $3 - sleep between retries (in seconds). Default: 5
-# Returns:
-#   Boolean
-#########################
-retry_while() {
-    local cmd="${1:?cmd is missing}"
-    local retries="${2:-12}"
-    local sleep_time="${3:-5}"
-    local return_value=1
-
-    read -r -a command <<<"$cmd"
-    for ((i = 1; i <= retries; i += 1)); do
-        "${command[@]}" && return_value=0 && break
-        sleep "$sleep_time"
-    done
-    return $return_value
-}
-
-########################
-# Generate a random string
-# Arguments:
-#   -t|--type - String type (ascii, alphanumeric, numeric), defaults to ascii
-#   -c|--count - Number of characters, defaults to 32
-# Arguments:
-#   None
-# Returns:
-#   None
-# Returns:
-#   String
-#########################
-generate_random_string() {
-    local type="ascii"
-    local count="32"
-    local filter
-    local result
-    # Validate arguments
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-        -t | --type)
-            shift
-            type="$1"
-            ;;
-        -c | --count)
-            shift
-            count="$1"
-            ;;
-        *)
-            echo "Invalid command line flag $1" >&2
-            return 1
-            ;;
-        esac
-        shift
-    done
-    # Validate type
-    case "$type" in
-    ascii)
-        filter="[:print:]"
-        ;;
-    numeric)
-        filter="0-9"
-        ;;
-    alphanumeric)
-        filter="a-zA-Z0-9"
-        ;;
-    alphanumeric+special|special+alphanumeric)
-        # Limit variety of special characters, so there is a higher chance of containing more alphanumeric characters
-        # Special characters are harder to write, and it could impact the overall UX if most passwords are too complex
-        filter='a-zA-Z0-9:@.,/+!='
-        ;;
-    *)
-        echo "Invalid type ${type}" >&2
-        return 1
-        ;;
-    esac
-    # Obtain count + 10 lines from /dev/urandom to ensure that the resulting string has the expected size
-    # Note there is a very small chance of strings starting with EOL character
-    # Therefore, the higher amount of lines read, this will happen less frequently
-    result="$(head -n "$((count + 10))" /dev/urandom | tr -dc "$filter" | head -c "$count")"
-    echo "$result"
-}
-
-########################
-# Create md5 hash from a string
-# Arguments:
-#   $1 - string
-# Returns:
-#   md5 hash - string
-#########################
-generate_md5_hash() {
-    local -r str="${1:?missing input string}"
-    echo -n "$str" | md5sum | awk '{print $1}'
-}
-
-########################
-# Create sha1 hash from a string
-# Arguments:
-#   $1 - string
-#   $2 - algorithm - 1 (default), 224, 256, 384, 512
-# Returns:
-#   sha1 hash - string
-#########################
-generate_sha_hash() {
-    local -r str="${1:?missing input string}"
-    local -r algorithm="${2:-1}"
-    echo -n "$str" | "sha${algorithm}sum" | awk '{print $1}'
-}
-
-########################
-# Converts a string to its hexadecimal representation
-# Arguments:
-#   $1 - string
-# Returns:
-#   hexadecimal representation of the string
-#########################
-convert_to_hex() {
-    local -r str=${1:?missing input string}
-    local -i iterator
-    local char
-    for ((iterator = 0; iterator < ${#str}; iterator++)); do
-        char=${str:iterator:1}
-        printf '%x' "'${char}"
-    done
-}
-
-########################
-# Get boot time
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   Boot time metadata
-#########################
-get_boot_time() {
-    stat /proc --format=%Y
-}
-
-########################
-# Get machine ID
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   Machine ID
-#########################
-get_machine_id() {
-    local machine_id
-    if [[ -f /etc/machine-id ]]; then
-        machine_id="$(cat /etc/machine-id)"
-    fi
-    if [[ -z "$machine_id" ]]; then
-        # Fallback to the boot-time, which will at least ensure a unique ID in the current session
-        machine_id="$(get_boot_time)"
-    fi
-    echo "$machine_id"
-}
-
-########################
-# Get the root partition's disk device ID (e.g. /dev/sda1)
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   Root partition disk ID
-#########################
-get_disk_device_id() {
-    local device_id=""
-    if grep -q ^/dev /proc/mounts; then
-        device_id="$(grep ^/dev /proc/mounts | awk '$2 == "/" { print $1 }' | tail -1)"
-    fi
-    # If it could not be autodetected, fallback to /dev/sda1 as a default
-    if [[ -z "$device_id" || ! -b "$device_id" ]]; then
-        device_id="/dev/sda1"
-    fi
-    echo "$device_id"
-}
-
-########################
-# Get the root disk device ID (e.g. /dev/sda)
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   Root disk ID
-#########################
-get_root_disk_device_id() {
-    get_disk_device_id | sed -E 's/p?[0-9]+$//'
-}
-
-########################
-# Get the root disk size in bytes
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   Root disk size in bytes
-#########################
-get_root_disk_size() {
-    fdisk -l "$(get_root_disk_device_id)" | grep 'Disk.*bytes' | sed -E 's/.*, ([0-9]+) bytes,.*/\1/' || true
-}
-
-########################
-# Run command as a specific user and group (optional)
-# Arguments:
-#   $1 - USER(:GROUP) to switch to
-#   $2..$n - command to execute
-# Returns:
-#   Exit code of the specified command
-#########################
-run_as_user() {
-    run_chroot "$@"
-}
-
-########################
-# Execute command as a specific user and group (optional),
-# replacing the current process image
-# Arguments:
-#   $1 - USER(:GROUP) to switch to
-#   $2..$n - command to execute
-# Returns:
-#   Exit code of the specified command
-#########################
-exec_as_user() {
-    run_chroot --replace-process "$@"
-}
-
-########################
-# Run a command using chroot
-# Arguments:
-#   $1 - USER(:GROUP) to switch to
-#   $2..$n - command to execute
-# Flags:
-#   -r | --replace-process - Replace the current process image (optional)
-# Returns:
-#   Exit code of the specified command
-#########################
-run_chroot() {
-    local userspec
-    local user
-    local homedir
-    local replace=false
-    local -r cwd="$(pwd)"
-
-    # Parse and validate flags
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            -r | --replace-process)
-                replace=true
-                ;;
-            --)
-                shift
-                break
-                ;;
-            -*)
-                stderr_print "unrecognized flag $1"
-                return 1
-                ;;
-            *)
-                break
-                ;;
-        esac
-        shift
-    done
-
-    # Parse and validate arguments
-    if [[ "$#" -lt 2 ]]; then
-        echo "expected at least 2 arguments"
-        return 1
-    else
-        userspec=$1
-        shift
-
-        # userspec can optionally include the group, so we parse the user
-        user=$(echo "$userspec" | cut -d':' -f1)
-    fi
-
-    if ! am_i_root; then
-        error "Could not switch to '${userspec}': Operation not permitted"
-        return 1
-    fi
-
-    # Get the HOME directory for the user to switch, as chroot does
-    # not properly update this env and some scripts rely on it
-    homedir=$(eval echo "~${user}")
-    if [[ ! -d $homedir ]]; then
-        homedir="${HOME:-/}"
-    fi
-
-    # Obtaining value for "$@" indirectly in order to properly support shell parameter expansion
-    if [[ "$replace" = true ]]; then
-        exec chroot --userspec="$userspec" / bash -c "cd ${cwd}; export HOME=${homedir}; exec \"\$@\"" -- "$@"
-    else
-        chroot --userspec="$userspec" / bash -c "cd ${cwd}; export HOME=${homedir}; exec \"\$@\"" -- "$@"
-    fi
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libpersistence.sh

@@ -1,124 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Bitnami persistence library
-# Used for bringing persistence capabilities to applications that don't have clear separation of data and logic
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/libfs.sh
-. /opt/bitnami/scripts/libos.sh
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libversion.sh
-
-# Functions
-
-########################
-# Persist an application directory
-# Globals:
-#   BITNAMI_ROOT_DIR
-#   BITNAMI_VOLUME_DIR
-# Arguments:
-#   $1 - App folder name
-#   $2 - List of app files to persist
-# Returns:
-#   true if all steps succeeded, false otherwise
-#########################
-persist_app() {
-    local -r app="${1:?missing app}"
-    local -a files_to_restore
-    read -r -a files_to_persist <<< "$(tr ',;:' ' ' <<< "$2")"
-    local -r install_dir="${BITNAMI_ROOT_DIR}/${app}"
-    local -r persist_dir="${BITNAMI_VOLUME_DIR}/${app}"
-    # Persist the individual files
-    if [[ "${#files_to_persist[@]}" -le 0 ]]; then
-        warn "No files are configured to be persisted"
-        return
-    fi
-    pushd "$install_dir" >/dev/null || exit
-    local file_to_persist_relative file_to_persist_destination file_to_persist_destination_folder
-    local -r tmp_file="/tmp/perms.acl"
-    for file_to_persist in "${files_to_persist[@]}"; do
-        if [[ ! -f "$file_to_persist" && ! -d "$file_to_persist" ]]; then
-            error "Cannot persist '${file_to_persist}' because it does not exist"
-            return 1
-        fi
-        file_to_persist_relative="$(relativize "$file_to_persist" "$install_dir")"
-        file_to_persist_destination="${persist_dir}/${file_to_persist_relative}"
-        file_to_persist_destination_folder="$(dirname "$file_to_persist_destination")"
-        # Get original permissions for existing files, which will be applied later
-        # Exclude the root directory with 'sed', to avoid issues when copying the entirety of it to a volume
-        getfacl -R "$file_to_persist_relative" | sed -E '/# file: (\..+|[^.])/,$!d' > "$tmp_file"
-        # Copy directories to the volume
-        ensure_dir_exists "$file_to_persist_destination_folder"
-        cp -Lr --preserve=links "$file_to_persist_relative" "$file_to_persist_destination_folder"
-        # Restore permissions
-        pushd "$persist_dir" >/dev/null || exit
-        if am_i_root; then
-            setfacl --restore="$tmp_file"
-        else
-            # When running as non-root, don't change ownership
-            setfacl --restore=<(grep -E -v '^# (owner|group):' "$tmp_file")
-        fi
-        popd >/dev/null || exit
-    done
-    popd >/dev/null || exit
-    rm -f "$tmp_file"
-    # Install the persisted files into the installation directory, via symlinks
-    restore_persisted_app "$@"
-}
-
-########################
-# Restore a persisted application directory
-# Globals:
-#   BITNAMI_ROOT_DIR
-#   BITNAMI_VOLUME_DIR
-#   FORCE_MAJOR_UPGRADE
-# Arguments:
-#   $1 - App folder name
-#   $2 - List of app files to restore
-# Returns:
-#   true if all steps succeeded, false otherwise
-#########################
-restore_persisted_app() {
-    local -r app="${1:?missing app}"
-    local -a files_to_restore
-    read -r -a files_to_restore <<< "$(tr ',;:' ' ' <<< "$2")"
-    local -r install_dir="${BITNAMI_ROOT_DIR}/${app}"
-    local -r persist_dir="${BITNAMI_VOLUME_DIR}/${app}"
-    # Restore the individual persisted files
-    if [[ "${#files_to_restore[@]}" -le 0 ]]; then
-        warn "No persisted files are configured to be restored"
-        return
-    fi
-    local file_to_restore_relative file_to_restore_origin file_to_restore_destination
-    for file_to_restore in "${files_to_restore[@]}"; do
-        file_to_restore_relative="$(relativize "$file_to_restore" "$install_dir")"
-        # We use 'realpath --no-symlinks' to ensure that the case of '.' is covered and the directory is removed
-        file_to_restore_origin="$(realpath --no-symlinks "${install_dir}/${file_to_restore_relative}")"
-        file_to_restore_destination="$(realpath --no-symlinks "${persist_dir}/${file_to_restore_relative}")"
-        rm -rf "$file_to_restore_origin"
-        ln -sfn "$file_to_restore_destination" "$file_to_restore_origin"
-    done
-}
-
-########################
-# Check if an application directory was already persisted
-# Globals:
-#   BITNAMI_VOLUME_DIR
-# Arguments:
-#   $1 - App folder name
-# Returns:
-#   true if all steps succeeded, false otherwise
-#########################
-is_app_initialized() {
-    local -r app="${1:?missing app}"
-    local -r persist_dir="${BITNAMI_VOLUME_DIR}/${app}"
-    if ! is_mounted_dir_empty "$persist_dir"; then
-        true
-    else
-        false
-    fi
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libservice.sh

@@ -1,496 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for managing services
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/libvalidations.sh
-. /opt/bitnami/scripts/liblog.sh
-
-# Functions
-
-########################
-# Read the provided pid file and returns a PID
-# Arguments:
-#   $1 - Pid file
-# Returns:
-#   PID
-#########################
-get_pid_from_file() {
-    local pid_file="${1:?pid file is missing}"
-
-    if [[ -f "$pid_file" ]]; then
-        if [[ -n "$(< "$pid_file")" ]] && [[ "$(< "$pid_file")" -gt 0 ]]; then
-            echo "$(< "$pid_file")"
-        fi
-    fi
-}
-
-########################
-# Check if a provided PID corresponds to a running service
-# Arguments:
-#   $1 - PID
-# Returns:
-#   Boolean
-#########################
-is_service_running() {
-    local pid="${1:?pid is missing}"
-
-    kill -0 "$pid" 2>/dev/null
-}
-
-########################
-# Stop a service by sending a termination signal to its pid
-# Arguments:
-#   $1 - Pid file
-#   $2 - Signal number (optional)
-# Returns:
-#   None
-#########################
-stop_service_using_pid() {
-    local pid_file="${1:?pid file is missing}"
-    local signal="${2:-}"
-    local pid
-
-    pid="$(get_pid_from_file "$pid_file")"
-    [[ -z "$pid" ]] || ! is_service_running "$pid" && return
-
-    if [[ -n "$signal" ]]; then
-        kill "-${signal}" "$pid"
-    else
-        kill "$pid"
-    fi
-
-    local counter=10
-    while [[ "$counter" -ne 0 ]] && is_service_running "$pid"; do
-        sleep 1
-        counter=$((counter - 1))
-    done
-}
-
-########################
-# Start cron daemon
-# Arguments:
-#   None
-# Returns:
-#   true if started correctly, false otherwise
-#########################
-cron_start() {
-    if [[ -x "/usr/sbin/cron" ]]; then
-        /usr/sbin/cron
-    elif [[ -x "/usr/sbin/crond" ]]; then
-        /usr/sbin/crond
-    else
-        false
-    fi
-}
-
-########################
-# Generate a cron configuration file for a given service
-# Arguments:
-#   $1 - Service name
-#   $2 - Command
-# Flags:
-#   --run-as - User to run as (default: root)
-#   --schedule - Cron schedule configuration (default: * * * * *)
-# Returns:
-#   None
-#########################
-generate_cron_conf() {
-    local service_name="${1:?service name is missing}"
-    local cmd="${2:?command is missing}"
-    local run_as="root"
-    local schedule="* * * * *"
-    local clean="true"
-
-    # Parse optional CLI flags
-    shift 2
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            --run-as)
-                shift
-                run_as="$1"
-                ;;
-            --schedule)
-                shift
-                schedule="$1"
-                ;;
-            --no-clean)
-                clean="false"
-                ;;
-            *)
-                echo "Invalid command line flag ${1}" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-
-    mkdir -p /etc/cron.d
-    if "$clean"; then
-        cat > "/etc/cron.d/${service_name}" <<EOF
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-${schedule} ${run_as} ${cmd}
-EOF
-    else
-        echo "${schedule} ${run_as} ${cmd}" >> /etc/cron.d/"$service_name"
-    fi
-}
-
-########################
-# Remove a cron configuration file for a given service
-# Arguments:
-#   $1 - Service name
-# Returns:
-#   None
-#########################
-remove_cron_conf() {
-    local service_name="${1:?service name is missing}"
-    local cron_conf_dir="/etc/monit/conf.d"
-    rm -f "${cron_conf_dir}/${service_name}"
-}
-
-########################
-# Generate a monit configuration file for a given service
-# Arguments:
-#   $1 - Service name
-#   $2 - Pid file
-#   $3 - Start command
-#   $4 - Stop command
-# Flags:
-#   --disable - Whether to disable the monit configuration
-# Returns:
-#   None
-#########################
-generate_monit_conf() {
-    local service_name="${1:?service name is missing}"
-    local pid_file="${2:?pid file is missing}"
-    local start_command="${3:?start command is missing}"
-    local stop_command="${4:?stop command is missing}"
-    local monit_conf_dir="/etc/monit/conf.d"
-    local disabled="no"
-
-    # Parse optional CLI flags
-    shift 4
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            --disable)
-                disabled="yes"
-                ;;
-            *)
-                echo "Invalid command line flag ${1}" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-
-    is_boolean_yes "$disabled" && conf_suffix=".disabled"
-    mkdir -p "$monit_conf_dir"
-    cat > "${monit_conf_dir}/${service_name}.conf${conf_suffix:-}" <<EOF
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-check process ${service_name}
-  with pidfile "${pid_file}"
-  start program = "${start_command}" with timeout 90 seconds
-  stop program = "${stop_command}" with timeout 90 seconds
-EOF
-}
-
-########################
-# Remove a monit configuration file for a given service
-# Arguments:
-#   $1 - Service name
-# Returns:
-#   None
-#########################
-remove_monit_conf() {
-    local service_name="${1:?service name is missing}"
-    local monit_conf_dir="/etc/monit/conf.d"
-    rm -f "${monit_conf_dir}/${service_name}.conf"
-}
-
-########################
-# Generate a logrotate configuration file
-# Arguments:
-#   $1 - Service name
-#   $2 - Log files pattern
-# Flags:
-#   --period - Period
-#   --rotations - Number of rotations to store
-#   --extra - Extra options (Optional)
-# Returns:
-#   None
-#########################
-generate_logrotate_conf() {
-    local service_name="${1:?service name is missing}"
-    local log_path="${2:?log path is missing}"
-    local period="weekly"
-    local rotations="150"
-    local extra=""
-    local logrotate_conf_dir="/etc/logrotate.d"
-    local var_name
-    # Parse optional CLI flags
-    shift 2
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            --period|--rotations|--extra)
-                var_name="$(echo "$1" | sed -e "s/^--//" -e "s/-/_/g")"
-                shift
-                declare "$var_name"="${1:?"$var_name" is missing}"
-                ;;
-            *)
-                echo "Invalid command line flag ${1}" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-
-    mkdir -p "$logrotate_conf_dir"
-    cat <<EOF | sed '/^\s*$/d' > "${logrotate_conf_dir}/${service_name}"
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-${log_path} {
-  ${period}
-  rotate ${rotations}
-  dateext
-  compress
-  copytruncate
-  missingok
-$(indent "$extra" 2)
-}
-EOF
-}
-
-########################
-# Remove a logrotate configuration file
-# Arguments:
-#   $1 - Service name
-# Returns:
-#   None
-#########################
-remove_logrotate_conf() {
-    local service_name="${1:?service name is missing}"
-    local logrotate_conf_dir="/etc/logrotate.d"
-    rm -f "${logrotate_conf_dir}/${service_name}"
-}
-
-########################
-# Generate a Systemd configuration file
-# Arguments:
-#   $1 - Service name
-# Flags:
-#   --custom-service-content - Custom content to add to the [service] block
-#   --environment - Environment variable to define (multiple --environment options may be passed)
-#   --environment-file - Text file with environment variables (multiple --environment-file options may be passed)
-#   --exec-start - Start command (required)
-#   --exec-start-pre - Pre-start command (optional)
-#   --exec-start-post - Post-start command (optional)
-#   --exec-stop - Stop command (optional)
-#   --exec-reload - Reload command (optional)
-#   --group - System group to start the service with
-#   --name - Service full name (e.g. Apache HTTP Server, defaults to $1)
-#   --restart - When to restart the Systemd service after being stopped (defaults to always)
-#   --pid-file - Service PID file
-#   --standard-output - File where to print stdout output
-#   --standard-error - File where to print stderr output
-#   --success-exit-status - Exit code that indicates a successful shutdown
-#   --type - Systemd unit type (defaults to forking)
-#   --user - System user to start the service with
-#   --working-directory - Working directory at which to start the service
-# Returns:
-#   None
-#########################
-generate_systemd_conf() {
-    local -r service_name="${1:?service name is missing}"
-    local -r systemd_units_dir="/etc/systemd/system"
-    local -r service_file="${systemd_units_dir}/bitnami.${service_name}.service"
-    # Default values
-    local name="$service_name"
-    local type="forking"
-    local user=""
-    local group=""
-    local environment=""
-    local environment_file=""
-    local exec_start=""
-    local exec_start_pre=""
-    local exec_start_post=""
-    local exec_stop=""
-    local exec_reload=""
-    local restart="always"
-    local pid_file=""
-    local standard_output="journal"
-    local standard_error=""
-    local limits_content=""
-    local success_exit_status=""
-    local custom_service_content=""
-    local working_directory=""
-    # Parse CLI flags
-    shift
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            --name \
-            | --type \
-            | --user \
-            | --group \
-            | --exec-start \
-            | --exec-stop \
-            | --exec-reload \
-            | --restart \
-            | --pid-file \
-            | --standard-output \
-            | --standard-error \
-            | --success-exit-status \
-            | --custom-service-content \
-            | --working-directory \
-            )
-                var_name="$(echo "$1" | sed -e "s/^--//" -e "s/-/_/g")"
-                shift
-                declare "$var_name"="${1:?"${var_name} value is missing"}"
-                ;;
-            --limit-*)
-                [[ -n "$limits_content" ]] && limits_content+=$'\n'
-                var_name="${1//--limit-}"
-                shift
-                limits_content+="Limit${var_name^^}=${1:?"--limit-${var_name} value is missing"}"
-                ;;
-            --exec-start-pre)
-                shift
-                [[ -n "$exec_start_pre" ]] && exec_start_pre+=$'\n'
-                exec_start_pre+="ExecStartPre=${1:?"--exec-start-pre value is missing"}"
-                ;;
-            --exec-start-post)
-                shift
-                [[ -n "$exec_start_post" ]] && exec_start_post+=$'\n'
-                exec_start_post+="ExecStartPost=${1:?"--exec-start-post value is missing"}"
-                ;;
-            --environment)
-                shift
-                # It is possible to add multiple environment lines
-                [[ -n "$environment" ]] && environment+=$'\n'
-                environment+="Environment=${1:?"--environment value is missing"}"
-                ;;
-            --environment-file)
-                shift
-                # It is possible to add multiple environment-file lines
-                [[ -n "$environment_file" ]] && environment_file+=$'\n'
-                environment_file+="EnvironmentFile=${1:?"--environment-file value is missing"}"
-                ;;
-            *)
-                echo "Invalid command line flag ${1}" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-    # Validate inputs
-    local error="no"
-    if [[ -z "$exec_start" ]]; then
-        error "The --exec-start option is required"
-        error="yes"
-    fi
-    if [[ "$error" != "no" ]]; then
-        return 1
-    fi
-    # Generate the Systemd unit
-    cat > "$service_file" <<EOF
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-[Unit]
-Description=Bitnami service for ${name}
-# Starting/stopping the main bitnami service should cause the same effect for this service
-PartOf=bitnami.service
-
-[Service]
-Type=${type}
-EOF
-    if [[ -n "$working_directory" ]]; then
-        cat >> "$service_file" <<< "WorkingDirectory=${working_directory}"
-    fi
-    if [[ -n "$exec_start_pre" ]]; then
-        # This variable may contain multiple ExecStartPre= directives
-        cat >> "$service_file" <<< "$exec_start_pre"
-    fi
-    if [[ -n "$exec_start" ]]; then
-        cat >> "$service_file" <<< "ExecStart=${exec_start}"
-    fi
-    if [[ -n "$exec_start_post" ]]; then
-        # This variable may contain multiple ExecStartPost= directives
-        cat >> "$service_file" <<< "$exec_start_post"
-    fi
-    # Optional stop and reload commands
-    if [[ -n "$exec_stop" ]]; then
-        cat >> "$service_file" <<< "ExecStop=${exec_stop}"
-    fi
-    if [[ -n "$exec_reload" ]]; then
-        cat >> "$service_file" <<< "ExecReload=${exec_reload}"
-    fi
-    # User and group
-    if [[ -n "$user" ]]; then
-        cat >> "$service_file" <<< "User=${user}"
-    fi
-    if [[ -n "$group" ]]; then
-        cat >> "$service_file" <<< "Group=${group}"
-    fi
-    # PID file allows to determine if the main process is running properly (for Restart=always)
-    if [[ -n "$pid_file" ]]; then
-        cat >> "$service_file" <<< "PIDFile=${pid_file}"
-    fi
-    if [[ -n "$restart" ]]; then
-        cat >> "$service_file" <<< "Restart=${restart}"
-    fi
-    # Environment flags
-    if [[ -n "$environment" ]]; then
-        # This variable may contain multiple Environment= directives
-        cat >> "$service_file" <<< "$environment"
-    fi
-    if [[ -n "$environment_file" ]]; then
-        # This variable may contain multiple EnvironmentFile= directives
-        cat >> "$service_file" <<< "$environment_file"
-    fi
-    # Logging
-    if [[ -n "$standard_output" ]]; then
-        cat >> "$service_file" <<< "StandardOutput=${standard_output}"
-    fi
-    if [[ -n "$standard_error" ]]; then
-        cat >> "$service_file" <<< "StandardError=${standard_error}"
-    fi
-    if [[ -n "$custom_service_content" ]]; then
-        # This variable may contain multiple miscellaneous directives
-        cat >> "$service_file" <<< "$custom_service_content"
-    fi
-    if [[ -n "$success_exit_status" ]]; then
-        cat >> "$service_file" <<EOF
-# When the process receives a SIGTERM signal, it exits with code ${success_exit_status}
-SuccessExitStatus=${success_exit_status}
-EOF
-    fi
-    cat >> "$service_file" <<EOF
-# Optimizations
-TimeoutStartSec=2min
-TimeoutStopSec=30s
-IgnoreSIGPIPE=no
-KillMode=mixed
-EOF
-    if [[ -n "$limits_content" ]]; then
-        cat >> "$service_file" <<EOF
-# Limits
-${limits_content}
-EOF
-    fi
-    cat >> "$service_file" <<EOF
-
-[Install]
-# Enabling/disabling the main bitnami service should cause the same effect for this service
-WantedBy=bitnami.service
-EOF
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh

@@ -1,304 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Validation functions library
-
-# shellcheck disable=SC1091,SC2086
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/liblog.sh
-
-# Functions
-
-########################
-# Check if the provided argument is an integer
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_int() {
-    local -r int="${1:?missing value}"
-    if [[ "$int" =~ ^-?[0-9]+ ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Check if the provided argument is a positive integer
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_positive_int() {
-    local -r int="${1:?missing value}"
-    if is_int "$int" && (( "${int}" >= 0 )); then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Check if the provided argument is a boolean or is the string 'yes/true'
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_boolean_yes() {
-    local -r bool="${1:-}"
-    # comparison is performed without regard to the case of alphabetic characters
-    shopt -s nocasematch
-    if [[ "$bool" = 1 || "$bool" =~ ^(yes|true)$ ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Check if the provided argument is a boolean yes/no value
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_yes_no_value() {
-    local -r bool="${1:-}"
-    if [[ "$bool" =~ ^(yes|no)$ ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Check if the provided argument is a boolean true/false value
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_true_false_value() {
-    local -r bool="${1:-}"
-    if [[ "$bool" =~ ^(true|false)$ ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Check if the provided argument is a boolean 1/0 value
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_1_0_value() {
-    local -r bool="${1:-}"
-    if [[ "$bool" =~ ^[10]$ ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Check if the provided argument is an empty string or not defined
-# Arguments:
-#   $1 - Value to check
-# Returns:
-#   Boolean
-#########################
-is_empty_value() {
-    local -r val="${1:-}"
-    if [[ -z "$val" ]]; then
-        true
-    else
-        false
-    fi
-}
-
-########################
-# Validate if the provided argument is a valid port
-# Arguments:
-#   $1 - Port to validate
-# Returns:
-#   Boolean and error message
-#########################
-validate_port() {
-    local value
-    local unprivileged=0
-
-    # Parse flags
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            -unprivileged)
-                unprivileged=1
-                ;;
-            --)
-                shift
-                break
-                ;;
-            -*)
-                stderr_print "unrecognized flag $1"
-                return 1
-                ;;
-            *)
-                break
-                ;;
-        esac
-        shift
-    done
-
-    if [[ "$#" -gt 1 ]]; then
-        echo "too many arguments provided"
-        return 2
-    elif [[ "$#" -eq 0 ]]; then
-        stderr_print "missing port argument"
-        return 1
-    else
-        value=$1
-    fi
-
-    if [[ -z "$value" ]]; then
-        echo "the value is empty"
-        return 1
-    else
-        if ! is_int "$value"; then
-            echo "value is not an integer"
-            return 2
-        elif [[ "$value" -lt 0 ]]; then
-            echo "negative value provided"
-            return 2
-        elif [[ "$value" -gt 65535 ]]; then
-            echo "requested port is greater than 65535"
-            return 2
-        elif [[ "$unprivileged" = 1 && "$value" -lt 1024 ]]; then
-            echo "privileged port requested"
-            return 3
-        fi
-    fi
-}
-
-########################
-# Validate if the provided argument is a valid IPv6 address
-# Arguments:
-#   $1 - IP to validate
-# Returns:
-#   Boolean
-#########################
-validate_ipv6() {
-    local ip="${1:?ip is missing}"
-    local stat=1
-    local full_address_regex='^([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}$'
-    local short_address_regex='^((([0-9a-fA-F]{1,4}:){0,6}[0-9a-fA-F]{1,4}){0,6}::(([0-9a-fA-F]{1,4}:){0,6}[0-9a-fA-F]{1,4}){0,6})$'
-
-    if [[ $ip =~ $full_address_regex || $ip =~ $short_address_regex || $ip == "::" ]]; then
-        stat=0
-    fi
-    return $stat
-}
-
-########################
-# Validate if the provided argument is a valid IPv4 address
-# Arguments:
-#   $1 - IP to validate
-# Returns:
-#   Boolean
-#########################
-validate_ipv4() {
-    local ip="${1:?ip is missing}"
-    local stat=1
-
-    if [[ $ip =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
-        read -r -a ip_array <<< "$(tr '.' ' ' <<< "$ip")"
-        [[ ${ip_array[0]} -le 255 && ${ip_array[1]} -le 255 \
-            && ${ip_array[2]} -le 255 && ${ip_array[3]} -le 255 ]]
-        stat=$?
-    fi
-    return $stat
-}
-
-########################
-# Validate if the provided argument is a valid IPv4 or IPv6 address
-# Arguments:
-#   $1 - IP to validate
-# Returns:
-#   Boolean
-#########################
-validate_ip() {
-    local ip="${1:?ip is missing}"
-    local stat=1
-
-    if validate_ipv4 "$ip"; then
-        stat=0
-    else
-        stat=$(validate_ipv6 "$ip")
-    fi
-    return $stat
-}
-
-########################
-# Validate a string format
-# Arguments:
-#   $1 - String to validate
-# Returns:
-#   Boolean
-#########################
-validate_string() {
-    local string
-    local min_length=-1
-    local max_length=-1
-
-    # Parse flags
-    while [ "$#" -gt 0 ]; do
-        case "$1" in
-            -min-length)
-                shift
-                min_length=${1:-}
-                ;;
-            -max-length)
-                shift
-                max_length=${1:-}
-                ;;
-            --)
-                shift
-                break
-                ;;
-            -*)
-                stderr_print "unrecognized flag $1"
-                return 1
-                ;;
-            *)
-                break
-                ;;
-        esac
-        shift
-    done
-
-    if [ "$#" -gt 1 ]; then
-        stderr_print "too many arguments provided"
-        return 2
-    elif [ "$#" -eq 0 ]; then
-        stderr_print "missing string"
-        return 1
-    else
-        string=$1
-    fi
-
-    if [[ "$min_length" -ge 0 ]] && [[ "${#string}" -lt "$min_length" ]]; then
-        echo "string length is less than $min_length"
-        return 1
-    fi
-    if [[ "$max_length" -ge 0 ]] && [[ "${#string}" -gt "$max_length" ]]; then
-        echo "string length is great than $max_length"
-        return 1
-    fi
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh

@@ -1,51 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Library for managing versions strings
-
-# shellcheck disable=SC1091
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/liblog.sh
-
-# Functions
-########################
-# Gets semantic version
-# Arguments:
-#   $1 - version: string to extract major.minor.patch
-#   $2 - section: 1 to extract major, 2 to extract minor, 3 to extract patch
-# Returns:
-#   array with the major, minor and release
-#########################
-get_sematic_version () {
-    local version="${1:?version is required}"
-    local section="${2:?section is required}"
-    local -a version_sections
-
-    #Regex to parse versions: x.y.z
-    local -r regex='([0-9]+)(\.([0-9]+)(\.([0-9]+))?)?'
-
-    if [[ "$version" =~ $regex ]]; then
-        local i=1
-        local j=1
-        local n=${#BASH_REMATCH[*]}
-
-        while [[ $i -lt $n ]]; do
-            if [[ -n "${BASH_REMATCH[$i]}" ]] && [[ "${BASH_REMATCH[$i]:0:1}" != '.' ]];  then
-                version_sections[j]="${BASH_REMATCH[$i]}"
-                ((j++))
-            fi
-            ((i++))
-        done
-
-        local number_regex='^[0-9]+$'
-        if [[ "$section" =~ $number_regex ]] && (( section > 0 )) && (( section <= 3 )); then
-             echo "${version_sections[$section]}"
-             return
-        else
-            stderr_print "Section allowed values are: 1, 2, and 3"
-            return 1
-        fi
-    fi
-}

bitnami/openldap/2.5/debian-12/prebuildfs/opt/bitnami/scripts/libwebserver.sh

@@ -1,476 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Bitnami web server handler library
-
-# shellcheck disable=SC1090,SC1091
-
-# Load generic libraries
-. /opt/bitnami/scripts/liblog.sh
-
-########################
-# Execute a command (or list of commands) with the web server environment and library loaded
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_execute() {
-    local -r web_server="${1:?missing web server}"
-    shift
-    # Run program in sub-shell to avoid web server environment getting loaded when not necessary
-    (
-        . "/opt/bitnami/scripts/lib${web_server}.sh"
-        . "/opt/bitnami/scripts/${web_server}-env.sh"
-        "$@"
-    )
-}
-
-########################
-# Prints the list of enabled web servers
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_list() {
-    local -r -a supported_web_servers=(apache nginx)
-    local -a existing_web_servers=()
-    for web_server in "${supported_web_servers[@]}"; do
-        [[ -f "/opt/bitnami/scripts/${web_server}-env.sh" ]] && existing_web_servers+=("$web_server")
-    done
-    echo "${existing_web_servers[@]:-}"
-}
-
-########################
-# Prints the currently-enabled web server type (only one, in order of preference)
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_type() {
-    local -a web_servers
-    read -r -a web_servers <<< "$(web_server_list)"
-    echo "${web_servers[0]:-}"
-}
-
-########################
-# Validate that a supported web server is configured
-# Globals:
-#   None
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_validate() {
-    local error_code=0
-    local supported_web_servers=("apache" "nginx")
-
-    # Auxiliary functions
-    print_validation_error() {
-        error "$1"
-        error_code=1
-    }
-
-    if [[ -z "$(web_server_type)" || ! " ${supported_web_servers[*]} " == *" $(web_server_type) "* ]]; then
-        print_validation_error "Could not detect any supported web servers. It must be one of: ${supported_web_servers[*]}"
-    elif ! web_server_execute "$(web_server_type)" type -t "is_$(web_server_type)_running" >/dev/null; then
-        print_validation_error "Could not load the $(web_server_type) web server library from /opt/bitnami/scripts. Check that it exists and is readable."
-    fi
-
-    return "$error_code"
-}
-
-########################
-# Check whether the web server is running
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   true if the web server is running, false otherwise
-#########################
-is_web_server_running() {
-    "is_$(web_server_type)_running"
-}
-
-########################
-# Start web server
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_start() {
-    info "Starting $(web_server_type) in background"
-    if [[ "${BITNAMI_SERVICE_MANAGER:-}" = "systemd" ]]; then
-        systemctl start "bitnami.$(web_server_type).service"
-    else
-        "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/start.sh"
-    fi
-}
-
-########################
-# Stop web server
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_stop() {
-    info "Stopping $(web_server_type)"
-    if [[ "${BITNAMI_SERVICE_MANAGER:-}" = "systemd" ]]; then
-        systemctl stop "bitnami.$(web_server_type).service"
-    else
-        "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/stop.sh"
-    fi
-}
-
-########################
-# Restart web server
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_restart() {
-    info "Restarting $(web_server_type)"
-    if [[ "${BITNAMI_SERVICE_MANAGER:-}" = "systemd" ]]; then
-        systemctl restart "bitnami.$(web_server_type).service"
-    else
-        "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/restart.sh"
-    fi
-}
-
-########################
-# Reload web server
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_reload() {
-    if [[ "${BITNAMI_SERVICE_MANAGER:-}" = "systemd" ]]; then
-        systemctl reload "bitnami.$(web_server_type).service"
-    else
-        "${BITNAMI_ROOT_DIR}/scripts/$(web_server_type)/reload.sh"
-    fi
-}
-
-########################
-# Ensure a web server application configuration exists (i.e. Apache virtual host format or NGINX server block)
-# It serves as a wrapper for the specific web server function
-# Globals:
-#   *
-# Arguments:
-#   $1 - App name
-# Flags:
-#   --type - Application type, which has an effect on which configuration template to use
-#   --hosts - Host listen addresses
-#   --server-name - Server name
-#   --server-aliases - Server aliases
-#   --allow-remote-connections - Whether to allow remote connections or to require local connections
-#   --disable - Whether to render server configurations with a .disabled prefix
-#   --disable-http - Whether to render the app's HTTP server configuration with a .disabled prefix
-#   --disable-https - Whether to render the app's HTTPS server configuration with a .disabled prefix
-#   --http-port - HTTP port number
-#   --https-port - HTTPS port number
-#   --document-root - Path to document root directory
-# Apache-specific flags:
-#   --apache-additional-configuration - Additional vhost configuration (no default)
-#   --apache-additional-http-configuration - Additional HTTP vhost configuration (no default)
-#   --apache-additional-https-configuration - Additional HTTPS vhost configuration (no default)
-#   --apache-before-vhost-configuration - Configuration to add before the <VirtualHost> directive (no default)
-#   --apache-allow-override - Whether to allow .htaccess files (only allowed when --move-htaccess is set to 'no' and type is not defined)
-#   --apache-extra-directory-configuration - Extra configuration for the document root directory
-#   --apache-proxy-address - Address where to proxy requests
-#   --apache-proxy-configuration - Extra configuration for the proxy
-#   --apache-proxy-http-configuration - Extra configuration for the proxy HTTP vhost
-#   --apache-proxy-https-configuration - Extra configuration for the proxy HTTPS vhost
-#   --apache-move-htaccess - Move .htaccess files to a common place so they can be loaded during Apache startup (only allowed when type is not defined)
-# NGINX-specific flags:
-#   --nginx-additional-configuration - Additional server block configuration (no default)
-#   --nginx-external-configuration - Configuration external to server block (no default)
-# Returns:
-#   true if the configuration was enabled, false otherwise
-########################
-ensure_web_server_app_configuration_exists() {
-    local app="${1:?missing app}"
-    shift
-    local -a apache_args nginx_args web_servers args_var
-    apache_args=("$app")
-    nginx_args=("$app")
-    # Validate arguments
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            # Common flags
-            --disable \
-            | --disable-http \
-            | --disable-https \
-            )
-                apache_args+=("$1")
-                nginx_args+=("$1")
-                ;;
-            --hosts \
-            | --server-name \
-            | --server-aliases \
-            | --type \
-            | --allow-remote-connections \
-            | --http-port \
-            | --https-port \
-            | --document-root \
-            )
-                apache_args+=("$1" "${2:?missing value}")
-                nginx_args+=("$1" "${2:?missing value}")
-                shift
-                ;;
-
-            # Specific Apache flags
-            --apache-additional-configuration \
-            | --apache-additional-http-configuration \
-            | --apache-additional-https-configuration \
-            | --apache-before-vhost-configuration \
-            | --apache-allow-override \
-            | --apache-extra-directory-configuration \
-            | --apache-proxy-address \
-            | --apache-proxy-configuration \
-            | --apache-proxy-http-configuration \
-            | --apache-proxy-https-configuration \
-            | --apache-move-htaccess \
-            )
-                apache_args+=("${1//apache-/}" "${2:?missing value}")
-                shift
-                ;;
-
-            # Specific NGINX flags
-            --nginx-additional-configuration \
-            | --nginx-external-configuration)
-                nginx_args+=("${1//nginx-/}" "${2:?missing value}")
-                shift
-                ;;
-
-            *)
-                echo "Invalid command line flag $1" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-    read -r -a web_servers <<< "$(web_server_list)"
-    for web_server in "${web_servers[@]}"; do
-        args_var="${web_server}_args[@]"
-        web_server_execute "$web_server" "ensure_${web_server}_app_configuration_exists" "${!args_var}"
-    done
-}
-
-########################
-# Ensure a web server application configuration does not exist anymore (i.e. Apache virtual host format or NGINX server block)
-# It serves as a wrapper for the specific web server function
-# Globals:
-#   *
-# Arguments:
-#   $1 - App name
-# Returns:
-#   true if the configuration was disabled, false otherwise
-########################
-ensure_web_server_app_configuration_not_exists() {
-    local app="${1:?missing app}"
-    local -a web_servers
-    read -r -a web_servers <<< "$(web_server_list)"
-    for web_server in "${web_servers[@]}"; do
-        web_server_execute "$web_server" "ensure_${web_server}_app_configuration_not_exists" "$app"
-    done
-}
-
-########################
-# Ensure the web server loads the configuration for an application in a URL prefix
-# It serves as a wrapper for the specific web server function
-# Globals:
-#   *
-# Arguments:
-#   $1 - App name
-# Flags:
-#   --allow-remote-connections - Whether to allow remote connections or to require local connections
-#   --document-root - Path to document root directory
-#   --prefix - URL prefix from where it will be accessible (i.e. /myapp)
-#   --type - Application type, which has an effect on what configuration template will be used
-# Apache-specific flags:
-#   --apache-additional-configuration - Additional vhost configuration (no default)
-#   --apache-allow-override - Whether to allow .htaccess files (only allowed when --move-htaccess is set to 'no')
-#   --apache-extra-directory-configuration - Extra configuration for the document root directory
-#   --apache-move-htaccess - Move .htaccess files to a common place so they can be loaded during Apache startup
-# NGINX-specific flags:
-#   --nginx-additional-configuration - Additional server block configuration (no default)
-# Returns:
-#   true if the configuration was enabled, false otherwise
-########################
-ensure_web_server_prefix_configuration_exists() {
-    local app="${1:?missing app}"
-    shift
-    local -a apache_args nginx_args web_servers args_var
-    apache_args=("$app")
-    nginx_args=("$app")
-    # Validate arguments
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            # Common flags
-            --allow-remote-connections \
-            | --document-root \
-            | --prefix \
-            | --type \
-            )
-                apache_args+=("$1" "${2:?missing value}")
-                nginx_args+=("$1" "${2:?missing value}")
-                shift
-                ;;
-
-            # Specific Apache flags
-            --apache-additional-configuration \
-            | --apache-allow-override \
-            | --apache-extra-directory-configuration \
-            | --apache-move-htaccess \
-            )
-                apache_args+=("${1//apache-/}" "$2")
-                shift
-                ;;
-
-            # Specific NGINX flags
-            --nginx-additional-configuration)
-                nginx_args+=("${1//nginx-/}" "$2")
-                shift
-                ;;
-
-            *)
-                echo "Invalid command line flag $1" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-    read -r -a web_servers <<< "$(web_server_list)"
-    for web_server in "${web_servers[@]}"; do
-        args_var="${web_server}_args[@]"
-        web_server_execute "$web_server" "ensure_${web_server}_prefix_configuration_exists" "${!args_var}"
-    done
-}
-
-########################
-# Ensure a web server application configuration is updated with the runtime configuration (i.e. ports)
-# It serves as a wrapper for the specific web server function
-# Globals:
-#   *
-# Arguments:
-#   $1 - App name
-# Flags:
-#   --hosts - Host listen addresses
-#   --server-name - Server name
-#   --server-aliases - Server aliases
-#   --enable-http - Enable HTTP app configuration (if not enabled already)
-#   --enable-https - Enable HTTPS app configuration (if not enabled already)
-#   --disable-http - Disable HTTP app configuration (if not disabled already)
-#   --disable-https - Disable HTTPS app configuration (if not disabled already)
-#   --http-port - HTTP port number
-#   --https-port - HTTPS port number
-# Returns:
-#   true if the configuration was updated, false otherwise
-########################
-web_server_update_app_configuration() {
-    local app="${1:?missing app}"
-    shift
-    local -a args web_servers
-    args=("$app")
-    # Validate arguments
-    while [[ "$#" -gt 0 ]]; do
-        case "$1" in
-            # Common flags
-            --enable-http \
-            | --enable-https \
-            | --disable-http \
-            | --disable-https \
-            )
-                args+=("$1")
-                ;;
-            --hosts \
-            | --server-name \
-            | --server-aliases \
-            | --http-port \
-            | --https-port \
-            )
-                args+=("$1" "${2:?missing value}")
-                shift
-                ;;
-
-            *)
-                echo "Invalid command line flag $1" >&2
-                return 1
-                ;;
-        esac
-        shift
-    done
-    read -r -a web_servers <<< "$(web_server_list)"
-    for web_server in "${web_servers[@]}"; do
-        web_server_execute "$web_server" "${web_server}_update_app_configuration" "${args[@]}"
-    done
-}
-
-########################
-# Enable loading page, which shows users that the initialization process is not yet completed
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_enable_loading_page() {
-    ensure_web_server_app_configuration_exists "__loading" --hosts "_default_" \
-        --apache-additional-configuration "
-# Show a HTTP 503 Service Unavailable page by default
-RedirectMatch 503 ^/$
-# Show index.html if server is answering with 404 Not Found or 503 Service Unavailable status codes
-ErrorDocument 404 /index.html
-ErrorDocument 503 /index.html" \
-        --nginx-additional-configuration "
-# Show a HTTP 503 Service Unavailable page by default
-location / {
-  return 503;
-}
-# Show index.html if server is answering with 404 Not Found or 503 Service Unavailable status codes
-error_page 404 @installing;
-error_page 503 @installing;
-location @installing {
-  rewrite ^(.*)$ /index.html break;
-}"
-    web_server_reload
-}
-
-########################
-# Enable loading page, which shows users that the initialization process is not yet completed
-# Globals:
-#   *
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-web_server_disable_install_page() {
-    ensure_web_server_app_configuration_not_exists "__loading"
-    web_server_reload
-}

bitnami/openldap/2.5/debian-12/prebuildfs/usr/sbin/install_packages

@@ -1,27 +0,0 @@
-#!/bin/sh
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-set -eu
-
-n=0
-max=2
-export DEBIAN_FRONTEND=noninteractive
-
-until [ $n -gt $max ]; do
-    set +e
-    (
-      apt-get update -qq &&
-      apt-get install -y --no-install-recommends "$@"
-    )
-    CODE=$?
-    set -e
-    if [ $CODE -eq 0 ]; then
-        break
-    fi
-    if [ $n -eq $max ]; then
-        exit $CODE
-    fi
-    echo "apt failed, retrying"
-    n=$(($n + 1))
-done
-apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives

bitnami/openldap/2.5/debian-12/prebuildfs/usr/sbin/run-script

@@ -1,24 +0,0 @@
-#!/bin/sh
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-set -u
-
-if [ $# -eq 0 ]; then
-    >&2 echo "No arguments provided"
-    exit 1
-fi
-
-script=$1
-exit_code="${2:-96}"
-fail_if_not_present="${3:-n}"
-
-if test -f "$script"; then
-  sh $script
-
-  if [ $? -ne 0 ]; then
-    exit $((exit_code))
-  fi
-elif [ "$fail_if_not_present" = "y" ]; then
-  >&2 echo "script not found: $script"
-  exit 127
-fi

bitnami/openldap/2.5/debian-12/rootfs/opt/bitnami/scripts/libopenldap.sh

@@ -1,951 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-#
-# Bitnami OpenLDAP library
-
-# shellcheck disable=SC1090,SC1091,SC2119,SC2120
-
-# Load Generic Libraries
-. /opt/bitnami/scripts/libfile.sh
-. /opt/bitnami/scripts/libfs.sh
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libos.sh
-. /opt/bitnami/scripts/libservice.sh
-. /opt/bitnami/scripts/libvalidations.sh
-
-########################
-# Load global variables used on OpenLDAP configuration
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   Series of exports to be used as 'eval' arguments
-#########################
-ldap_env() {
-    cat << "EOF"
-# Paths
-export LDAP_BASE_DIR="/opt/bitnami/openldap"
-export LDAP_BIN_DIR="${LDAP_BASE_DIR}/bin"
-export LDAP_SBIN_DIR="${LDAP_BASE_DIR}/sbin"
-export LDAP_CONF_DIR="${LDAP_BASE_DIR}/etc"
-export LDAP_SHARE_DIR="${LDAP_BASE_DIR}/share"
-export LDAP_VAR_DIR="${LDAP_BASE_DIR}/var"
-export LDAP_VOLUME_DIR="/bitnami/openldap"
-export LDAP_DATA_DIR="${LDAP_VOLUME_DIR}/data"
-export LDAP_ACCESSLOG_DATA_DIR="${LDAP_DATA_DIR}/accesslog"
-export LDAP_ONLINE_CONF_DIR="${LDAP_VOLUME_DIR}/slapd.d"
-export LDAP_PID_FILE="${LDAP_VAR_DIR}/run/slapd.pid"
-export LDAP_CUSTOM_LDIF_DIR="${LDAP_CUSTOM_LDIF_DIR:-/ldifs}"
-export LDAP_CUSTOM_SCHEMA_FILE="${LDAP_CUSTOM_SCHEMA_FILE:-/schema/custom.ldif}"
-export LDAP_CUSTOM_SCHEMA_DIR="${LDAP_CUSTOM_SCHEMA_DIR:-/schemas}"
-export PATH="${LDAP_BIN_DIR}:${LDAP_SBIN_DIR}:$PATH"
-export LDAP_TLS_CERT_FILE="${LDAP_TLS_CERT_FILE:-}"
-export LDAP_TLS_KEY_FILE="${LDAP_TLS_KEY_FILE:-}"
-export LDAP_TLS_CA_FILE="${LDAP_TLS_CA_FILE:-}"
-export LDAP_TLS_VERIFY_CLIENTS="${LDAP_TLS_VERIFY_CLIENTS:-never}"
-export LDAP_TLS_DH_PARAMS_FILE="${LDAP_TLS_DH_PARAMS_FILE:-}"
-# Users
-export LDAP_DAEMON_USER="slapd"
-export LDAP_DAEMON_GROUP="slapd"
-# Settings
-export LDAP_PORT_NUMBER="${LDAP_PORT_NUMBER:-1389}"
-export LDAP_LDAPS_PORT_NUMBER="${LDAP_LDAPS_PORT_NUMBER:-1636}"
-export LDAP_ENABLE_PROXYPROTO="${LDAP_ENABLE_PROXYPROTO:-no}"
-export LDAP_PROXYPROTO_PORT_NUMBER="${LDAP_PROXYPROTO_PORT_NUMBER:-"${LDAP_PORT_NUMBER}"}"
-export LDAP_PROXYPROTO_LDAPS_PORT_NUMBER="${LDAP_PROXYPROTO_LDAPS_PORT_NUMBER:-"${LDAP_LDAPS_PORT_NUMBER}"}"
-export LDAP_ROOT="${LDAP_ROOT:-dc=example,dc=org}"
-export LDAP_SUFFIX="$(if [ -z "${LDAP_SUFFIX+x}" ]; then echo "${LDAP_ROOT}"; else echo "${LDAP_SUFFIX}"; fi)"
-export LDAP_ADMIN_USERNAME="${LDAP_ADMIN_USERNAME:-admin}"
-export LDAP_ADMIN_DN="${LDAP_ADMIN_USERNAME/#/cn=},${LDAP_ROOT}"
-export LDAP_ADMIN_PASSWORD="${LDAP_ADMIN_PASSWORD:-adminpassword}"
-export LDAP_CONFIG_ADMIN_ENABLED="${LDAP_CONFIG_ADMIN_ENABLED:-no}"
-export LDAP_CONFIG_ADMIN_USERNAME="${LDAP_CONFIG_ADMIN_USERNAME:-admin}"
-export LDAP_CONFIG_ADMIN_DN="${LDAP_CONFIG_ADMIN_USERNAME/#/cn=},cn=config"
-export LDAP_CONFIG_ADMIN_PASSWORD="${LDAP_CONFIG_ADMIN_PASSWORD:-configpassword}"
-export LDAP_ADD_SCHEMAS="${LDAP_ADD_SCHEMAS:-yes}"
-export LDAP_EXTRA_SCHEMAS="${LDAP_EXTRA_SCHEMAS:-cosine,inetorgperson,nis}"
-export LDAP_SKIP_DEFAULT_TREE="${LDAP_SKIP_DEFAULT_TREE:-no}"
-export LDAP_USERS="${LDAP_USERS:-user01,user02}"
-export LDAP_PASSWORDS="${LDAP_PASSWORDS:-bitnami1,bitnami2}"
-export LDAP_USER_DC="${LDAP_USER_DC:-}"
-export LDAP_USER_OU="${LDAP_USER_OU:-${LDAP_USER_DC:-users}}"
-export LDAP_GROUP_OU="${LDAP_GROUP_OU:-${LDAP_USER_DC:-groups}}"
-export LDAP_GROUP="${LDAP_GROUP:-readers}"
-export LDAP_ENABLE_TLS="${LDAP_ENABLE_TLS:-no}"
-export LDAP_REQUIRE_TLS="${LDAP_REQUIRE_TLS:-no}"
-export LDAP_ULIMIT_NOFILES="${LDAP_ULIMIT_NOFILES:-1024}"
-export LDAP_ALLOW_ANON_BINDING="${LDAP_ALLOW_ANON_BINDING:-yes}"
-export LDAP_LOGLEVEL="${LDAP_LOGLEVEL:-256}"
-export LDAP_PASSWORD_HASH="${LDAP_PASSWORD_HASH:-{SSHA\}}"
-export LDAP_CONFIGURE_PPOLICY="${LDAP_CONFIGURE_PPOLICY:-no}"
-export LDAP_PPOLICY_USE_LOCKOUT="${LDAP_PPOLICY_USE_LOCKOUT:-no}"
-export LDAP_PPOLICY_HASH_CLEARTEXT="${LDAP_PPOLICY_HASH_CLEARTEXT:-no}"
-export LDAP_ENABLE_ACCESSLOG="${LDAP_ENABLE_ACCESSLOG:-no}"
-export LDAP_ACCESSLOG_DB="${LDAP_ACCESSLOG_DB:-cn=accesslog}"
-export LDAP_ACCESSLOG_LOGOPS="${LDAP_ACCESSLOG_LOGOPS:-writes}"
-export LDAP_ACCESSLOG_LOGSUCCESS="${LDAP_ACCESSLOG_LOGSUCCESS:-TRUE}"
-export LDAP_ACCESSLOG_LOGPURGE="${LDAP_ACCESSLOG_LOGPURGE:-07+00:00 01+00:00}"
-export LDAP_ACCESSLOG_LOGOLD="${LDAP_ACCESSLOG_LOGOLD:-(objectClass=*)}"
-export LDAP_ACCESSLOG_LOGOLDATTR="${LDAP_ACCESSLOG_LOGOLDATTR:-objectClass}"
-export LDAP_ACCESSLOG_ADMIN_USERNAME="${LDAP_ACCESSLOG_ADMIN_USERNAME:-admin}"
-export LDAP_ACCESSLOG_ADMIN_DN="${LDAP_ACCESSLOG_ADMIN_USERNAME/#/cn=},${LDAP_ACCESSLOG_DB:-cn=accesslog}"
-export LDAP_ACCESSLOG_ADMIN_PASSWORD="${LDAP_ACCESSLOG_PASSWORD:-accesspassword}"
-export LDAP_ENABLE_SYNCPROV="${LDAP_ENABLE_SYNCPROV:-no}"
-export LDAP_SYNCPROV_CHECKPPOINT="${LDAP_SYNCPROV_CHECKPPOINT:-100 10}"
-export LDAP_SYNCPROV_SESSIONLOG="${LDAP_SYNCPROV_SESSIONLOG:-100}"
-
-# By setting an environment variable matching *_FILE to a file path, the prefixed environment
-# variable will be overridden with the value specified in that file
-ldap_env_vars=(
-    LDAP_ADMIN_PASSWORD
-    LDAP_CONFIG_ADMIN_PASSWORD
-    LDAP_ACCESSLOG_ADMIN_PASSWORD
-)
-for env_var in "${ldap_env_vars[@]}"; do
-    file_env_var="${env_var}_FILE"
-    if [[ -n "${!file_env_var:-}" ]]; then
-        if [[ -r "${!file_env_var:-}" ]]; then
-            export "${env_var}=$(< "${!file_env_var}")"
-            unset "${file_env_var}"
-        else
-            warn "Skipping export of '${env_var}'. '${!file_env_var:-}' is not readable."
-        fi
-    fi
-done
-unset ldap_env_vars
-
-# Setting encrypted admin passwords
-export LDAP_ENCRYPTED_ADMIN_PASSWORD="$(echo -n $LDAP_ADMIN_PASSWORD | slappasswd -n -T /dev/stdin)"
-export LDAP_ENCRYPTED_CONFIG_ADMIN_PASSWORD="$(echo -n $LDAP_CONFIG_ADMIN_PASSWORD | slappasswd -n -T /dev/stdin)"
-export LDAP_ENCRYPTED_ACCESSLOG_ADMIN_PASSWORD="$(echo -n $LDAP_ACCESSLOG_ADMIN_PASSWORD | slappasswd -n -T /dev/stdin)"
-EOF
-}
-
-########################
-# Validate settings in LDAP_* environment variables
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_validate() {
-    info "Validating settings in LDAP_* env vars"
-    local error_code=0
-
-    # Auxiliary functions
-    print_validation_error() {
-        error "$1"
-        error_code=1
-    }
-    for var in LDAP_SKIP_DEFAULT_TREE LDAP_ENABLE_TLS LDAP_ENABLE_PROXYPROTO; do
-        if ! is_yes_no_value "${!var}"; then
-            print_validation_error "The allowed values for $var are: yes or no"
-        fi
-    done
-
-    if is_boolean_yes "$LDAP_ENABLE_TLS"; then
-        if [[ -z "$LDAP_TLS_CERT_FILE" ]]; then
-            print_validation_error "You must provide a X.509 certificate in order to use TLS"
-        elif [[ ! -f "$LDAP_TLS_CERT_FILE" ]]; then
-            print_validation_error "The X.509 certificate file in the specified path ${LDAP_TLS_CERT_FILE} does not exist"
-        fi
-        if [[ -z "$LDAP_TLS_KEY_FILE" ]]; then
-            print_validation_error "You must provide a private key in order to use TLS"
-        elif [[ ! -f "$LDAP_TLS_KEY_FILE" ]]; then
-            print_validation_error "The private key file in the specified path ${LDAP_TLS_KEY_FILE} does not exist"
-        fi
-        if [[ -z "$LDAP_TLS_CA_FILE" ]]; then
-            print_validation_error "You must provide a CA X.509 certificate in order to use TLS"
-        elif [[ ! -f "$LDAP_TLS_CA_FILE" ]]; then
-            print_validation_error "The CA X.509 certificate file in the specified path ${LDAP_TLS_CA_FILE} does not exist"
-        fi
-    fi
-
-    read -r -a users <<< "$(tr ',;' ' ' <<< "${LDAP_USERS}")"
-    read -r -a passwords <<< "$(tr ',;' ' ' <<< "${LDAP_PASSWORDS}")"
-    if [[ "${#users[@]}" -ne "${#passwords[@]}" ]]; then
-        print_validation_error "Specify the same number of passwords on LDAP_PASSWORDS as the number of users on LDAP_USERS!"
-    fi
-
-    for var in LDAP_PORT_NUMBER LDAP_LDAPS_PORT_NUMBER LDAP_PROXYPROTO_PORT_NUMBER LDAP_PROXYPROTO_LDAPS_PORT_NUMBER; do
-        if ! is_positive_int "${!var}"; then
-            print_validation_error "The value for $var must be positive integer!"
-        fi
-    done
-
-    if [[ -n "$LDAP_PORT_NUMBER" ]] && [[ -n "$LDAP_LDAPS_PORT_NUMBER" ]]; then
-        if [[ "$LDAP_PORT_NUMBER" -eq "$LDAP_LDAPS_PORT_NUMBER" ]]; then
-            print_validation_error "LDAP_PORT_NUMBER and LDAP_LDAPS_PORT_NUMBER are bound to the same port!"
-        fi
-    fi
-
-    if [[ -n "$LDAP_PROXYPROTO_PORT_NUMBER" ]] && [[ -n "$LDAP_PROXYPROTO_LDAPS_PORT_NUMBER" ]]; then
-        if [[ "$LDAP_PROXYPROTO_PORT_NUMBER" -eq "$LDAP_PROXYPROTO_LDAPS_PORT_NUMBER" ]]; then
-            print_validation_error "LDAP_PROXYPROTO_PORT_NUMBER and LDAP_PROXYPROTO_LDAPS_PORT_NUMBER are bound to the same port!"
-        fi
-    fi
-
-    if [[ -n "$LDAP_USER_DC" ]]; then
-        warn "The env variable 'LDAP_USER_DC' has been deprecated and will be removed in a future release. Please use 'LDAP_USER_OU' and 'LDAP_GROUP_OU' instead."
-    fi
-
-    [[ "$error_code" -eq 0 ]] || exit "$error_code"
-}
-
-########################
-# Check if OpenLDAP is running
-# Globals:
-#   LDAP_PID_FILE
-# Arguments:
-#   None
-# Returns:
-#   Whether slapd is running
-#########################
-is_ldap_running() {
-    local pid
-    pid="$(get_pid_from_file "${LDAP_PID_FILE}")"
-    if [[ -n "${pid}" ]]; then
-        is_service_running "${pid}"
-    else
-        false
-    fi
-}
-
-########################
-# Check if OpenLDAP is not running
-# Arguments:
-#   None
-# Returns:
-#   Whether slapd is not running
-#########################
-is_ldap_not_running() {
-    ! is_ldap_running
-}
-
-########################
-# Start OpenLDAP server in background
-# Arguments:
-#   $1 - max retries. Default: 12
-#   $2 - sleep between retries (in seconds). Default: 1
-# Returns:
-#   None
-#########################
-ldap_start_bg() {
-    local -r retries="${1:-12}"
-    local -r sleep_time="${2:-1}"
-    local -a flags=("-h" "ldap://:${LDAP_PORT_NUMBER}/ ldapi:/// " "-F" "${LDAP_CONF_DIR}/slapd.d" "-d" "$LDAP_LOGLEVEL")
-
-    if is_ldap_not_running; then
-        info "Starting OpenLDAP server in background"
-        ulimit -n "$LDAP_ULIMIT_NOFILES"
-        am_i_root && flags=("-u" "$LDAP_DAEMON_USER" "${flags[@]}")
-        debug_execute slapd "${flags[@]}" &
-        if ! retry_while is_ldap_running "$retries" "$sleep_time"; then
-            error "OpenLDAP failed to start"
-            return 1
-        fi
-    fi
-}
-
-########################
-# Stop OpenLDAP server
-# Arguments:
-#   $1 - max retries. Default: 12
-#   $2 - sleep between retries (in seconds). Default: 1
-# Returns:
-#   None
-#########################
-ldap_stop() {
-    local -r retries="${1:-12}"
-    local -r sleep_time="${2:-1}"
-
-    are_db_files_locked() {
-        local return_value=0
-        read -r -a db_files <<< "$(find "$LDAP_DATA_DIR" -type f -print0 | xargs -0)"
-        for f in "${db_files[@]}"; do
-            debug_execute fuser "$f" && return_value=1
-        done
-        return "$return_value"
-    }
-
-    is_ldap_not_running && return
-
-    stop_service_using_pid "$LDAP_PID_FILE"
-    if ! retry_while are_db_files_locked "$retries" "$sleep_time"; then
-        error "OpenLDAP failed to stop"
-        return 1
-    fi
-}
-########################
-# Create slapd.ldif
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_create_slapd_file() {
-    info "Creating slapd.ldif"
-    cat > "${LDAP_SHARE_DIR}/slapd.ldif" << EOF
-#
-# See slapd-config(5) for details on configuration options.
-# This file should NOT be world readable.
-#
-
-dn: cn=config
-objectClass: olcGlobal
-cn: config
-olcArgsFile: /opt/bitnami/openldap/var/run/slapd.args
-olcPidFile: /opt/bitnami/openldap/var/run/slapd.pid
-
-#
-# Enable pw-sha2 module
-#
-dn: cn=module,cn=config
-cn: module
-objectClass: olcModuleList
-olcModulePath: /opt/bitnami/openldap/libexec/openldap
-olcModuleLoad: pw-sha2.so
-
-#
-# Schema settings
-#
-
-dn: cn=schema,cn=config
-objectClass: olcSchemaConfig
-cn: schema
-
-include: file:///opt/bitnami/openldap/etc/schema/core.ldif
-
-#
-# Frontend settings
-#
-
-dn: olcDatabase=frontend,cn=config
-objectClass: olcDatabaseConfig
-objectClass: olcFrontendConfig
-olcDatabase: frontend
-
-#
-# Configuration database
-#
-
-dn: olcDatabase=config,cn=config
-objectClass: olcDatabaseConfig
-olcDatabase: config
-olcAccess: to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage by * none
-
-#
-# Server status monitoring
-#
-
-dn: olcDatabase=monitor,cn=config
-objectClass: olcDatabaseConfig
-olcDatabase: monitor
-olcAccess: to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by dn.base="cn=Manager,dc=my-domain,dc=com" read by * none
-
-#
-# Backend database definitions
-#
-
-dn: olcDatabase=mdb,cn=config
-objectClass: olcDatabaseConfig
-objectClass: olcMdbConfig
-olcDatabase: mdb
-olcDbMaxSize: 1073741824
-olcSuffix: dc=my-domain,dc=com
-olcRootDN: cn=Manager,dc=my-domain,dc=com
-olcMonitoring: FALSE
-olcDbDirectory:	/bitnami/openldap/data
-olcDbIndex: objectClass eq,pres
-olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
-EOF
-
-}
-
-########################
-# Create LDAP online configuration
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_create_online_configuration() {
-    info "Creating LDAP online configuration"
-
-    ldap_create_slapd_file
-    ! am_i_root && replace_in_file "${LDAP_SHARE_DIR}/slapd.ldif" "uidNumber=0" "uidNumber=$(id -u)"
-    local -a flags=(-F "$LDAP_ONLINE_CONF_DIR" -n 0 -l "${LDAP_SHARE_DIR}/slapd.ldif")
-    if am_i_root; then
-        debug_execute run_as_user "$LDAP_DAEMON_USER" slapadd "${flags[@]}"
-    else
-        debug_execute slapadd "${flags[@]}"
-    fi
-}
-
-########################
-# Configure LDAP credentials for admin user
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_admin_credentials() {
-    info "Configure LDAP credentials for admin user"
-    cat > "${LDAP_SHARE_DIR}/admin.ldif" << EOF
-dn: olcDatabase={2}mdb,cn=config
-changetype: modify
-replace: olcSuffix
-olcSuffix: $LDAP_SUFFIX
-
-dn: olcDatabase={2}mdb,cn=config
-changetype: modify
-replace: olcRootDN
-olcRootDN: $LDAP_ADMIN_DN
-
-dn: olcDatabase={2}mdb,cn=config
-changeType: modify
-add: olcRootPW
-olcRootPW: $LDAP_ENCRYPTED_ADMIN_PASSWORD
-
-dn: olcDatabase={1}monitor,cn=config
-changetype: modify
-replace: olcAccess
-olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external, cn=auth" read by dn.base="${LDAP_ADMIN_DN}" read by * none
-EOF
-    if is_boolean_yes "$LDAP_CONFIG_ADMIN_ENABLED"; then
-        cat >> "${LDAP_SHARE_DIR}/admin.ldif" << EOF
-
-dn: olcDatabase={0}config,cn=config
-changetype: modify
-add: olcRootDN
-olcRootDN: $LDAP_CONFIG_ADMIN_DN
-
-dn: olcDatabase={0}config,cn=config
-changetype: modify
-add: olcRootPW
-olcRootPW: $LDAP_ENCRYPTED_CONFIG_ADMIN_PASSWORD
-EOF
-    fi
-    debug_execute ldapmodify -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/admin.ldif"
-}
-
-########################
-# Disable LDAP anonymous bindings
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_disable_anon_binding() {
-    info "Disable LDAP anonymous binding"
-    cat > "${LDAP_SHARE_DIR}/disable_anon_bind.ldif" << EOF
-dn: cn=config
-changetype: modify
-add: olcDisallows
-olcDisallows: bind_anon
-
-dn: cn=config
-changetype: modify
-add: olcRequires
-olcRequires: authc
-EOF
-    debug_execute ldapmodify -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/disable_anon_bind.ldif"
-}
-
-########################
-# Add LDAP schemas
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns
-#   None
-#########################
-ldap_add_schemas() {
-    info "Adding LDAP extra schemas"
-    read -r -a schemas <<< "$(tr ',;' ' ' <<< "${LDAP_EXTRA_SCHEMAS}")"
-    for schema in "${schemas[@]}"; do
-        debug_execute ldapadd -Y EXTERNAL -H "ldapi:///" -f "${LDAP_CONF_DIR}/schema/${schema}.ldif"
-    done
-}
-
-########################
-# Add custom schema
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns
-#   None
-#########################
-ldap_add_custom_schema() {
-    info "Adding custom Schema : $LDAP_CUSTOM_SCHEMA_FILE ..."
-    debug_execute slapadd -F "$LDAP_ONLINE_CONF_DIR" -n 0 -l  "$LDAP_CUSTOM_SCHEMA_FILE"
-    ldap_stop
-     while is_ldap_running; do sleep 1; done
-    ldap_start_bg
-}
-
-########################
-# Add custom schemas
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns
-#   None
-#########################
-ldap_add_custom_schemas() {
-    info "Adding custom schemas : $LDAP_CUSTOM_SCHEMA_DIR ..."
-    find "$LDAP_CUSTOM_SCHEMA_DIR" -maxdepth 1 \( -type f -o -type l \) -iname '*.ldif' -print0 | sort -z | xargs --null -I{} bash -c ". /opt/bitnami/scripts/libos.sh && debug_execute slapadd -F \"$LDAP_ONLINE_CONF_DIR\" -n 0 -l {}"
-    ldap_stop
-    while is_ldap_running; do sleep 1; done
-    ldap_start_bg
-}
-
-########################
-# Create LDAP tree
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_create_tree() {
-    info "Creating LDAP default tree"
-    local dc=""
-    local o="example"
-    read -r -a root <<< "$(tr ',;' ' ' <<< "${LDAP_ROOT}")"
-    for attr in "${root[@]}"; do
-        if [[ $attr = dc=* ]] && [[ -z "$dc" ]]; then
-            dc="${attr:3}"
-        elif [[ $attr = o=* ]] && [[ $o = "example" ]]; then
-            o="${attr:2}"
-        fi
-    done
-    cat > "${LDAP_SHARE_DIR}/tree.ldif" << EOF
-# Root creation
-dn: $LDAP_ROOT
-objectClass: dcObject
-objectClass: organization
-dc: $dc
-o: $o
-
-dn: ${LDAP_USER_OU/#/ou=},${LDAP_ROOT}
-objectClass: organizationalUnit
-ou: users
-
-dn: ${LDAP_GROUP_OU/#/ou=},${LDAP_ROOT}
-objectClass: organizationalUnit
-ou: groups
-
-EOF
-    read -r -a users <<< "$(tr ',;' ' ' <<< "${LDAP_USERS}")"
-    read -r -a passwords <<< "$(tr ',;' ' ' <<< "${LDAP_PASSWORDS}")"
-    local index=0
-    for user in "${users[@]}"; do
-        cat >> "${LDAP_SHARE_DIR}/tree.ldif" << EOF
-# User $user creation
-dn: ${user/#/cn=},${LDAP_USER_OU/#/ou=},${LDAP_ROOT}
-cn: User$((index + 1 ))
-sn: Bar$((index + 1 ))
-objectClass: inetOrgPerson
-objectClass: posixAccount
-objectClass: shadowAccount
-userPassword: ${passwords[$index]}
-uid: $user
-uidNumber: $((index + 1000 ))
-gidNumber: $((index + 1000 ))
-homeDirectory: /home/${user}
-
-EOF
-        index=$((index + 1 ))
-    done
-    cat >> "${LDAP_SHARE_DIR}/tree.ldif" << EOF
-# Group creation
-dn: ${LDAP_GROUP/#/cn=},${LDAP_GROUP_OU/#/ou=},${LDAP_ROOT}
-cn: $LDAP_GROUP
-objectClass: groupOfNames
-# User group membership
-EOF
-
-    for user in "${users[@]}"; do
-        cat >> "${LDAP_SHARE_DIR}/tree.ldif" << EOF
-member: ${user/#/cn=},${LDAP_USER_OU/#/ou=},${LDAP_ROOT}
-EOF
-    done
-
-    debug_execute ldapadd -f "${LDAP_SHARE_DIR}/tree.ldif" -H "ldapi:///" -D "$LDAP_ADMIN_DN" -w "$LDAP_ADMIN_PASSWORD"
-}
-
-########################
-# Add custom LDIF files
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns
-#   None
-#########################
-ldap_add_custom_ldifs() {
-    info "Loading custom LDIF files..."
-    warn "Ignoring LDAP_USERS, LDAP_PASSWORDS, LDAP_USER_OU, LDAP_GROUP_OU and LDAP_GROUP environment variables..."
-    find "$LDAP_CUSTOM_LDIF_DIR" -maxdepth 1 \( -type f -o -type l \) -iname '*.ldif' -print0 | sort -z | xargs --null -I{} bash -c ". /opt/bitnami/scripts/libos.sh && debug_execute ldapadd -f {} -H 'ldapi:///' -D \"$LDAP_ADMIN_DN\" -w \"$LDAP_ADMIN_PASSWORD\""
-}
-
-########################
-# OpenLDAP configure permissions
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_configure_permissions() {
-  debug "Ensuring expected directories/files exist..."
-  for dir in "$LDAP_SHARE_DIR" "$LDAP_DATA_DIR" "$LDAP_ONLINE_CONF_DIR" "$LDAP_VAR_DIR"; do
-      ensure_dir_exists "$dir"
-      if am_i_root; then
-          chown -R "$LDAP_DAEMON_USER:$LDAP_DAEMON_GROUP" "$dir"
-      fi
-  done
-}
-
-########################
-# Initialize OpenLDAP server
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_initialize() {
-    info "Initializing OpenLDAP..."
-
-    ldap_configure_permissions
-    if ! is_dir_empty "$LDAP_DATA_DIR"; then
-        info "Using persisted data"
-    else
-        # Create OpenLDAP online configuration
-        ldap_create_online_configuration
-        ldap_start_bg
-        ldap_admin_credentials
-        if ! is_boolean_yes "$LDAP_ALLOW_ANON_BINDING"; then
-            ldap_disable_anon_binding
-        fi
-        # Initialize OpenLDAP with schemas/tree structure
-        if is_boolean_yes "$LDAP_ADD_SCHEMAS"; then
-            ldap_add_schemas
-        fi
-        if [[ -f "$LDAP_CUSTOM_SCHEMA_FILE" ]]; then
-            ldap_add_custom_schema
-        fi
-        if ! is_dir_empty "$LDAP_CUSTOM_SCHEMA_DIR"; then
-            ldap_add_custom_schemas
-        fi
-        # additional configuration
-        if [[ ! "$LDAP_PASSWORD_HASH" == "{SSHA}" ]]; then
-            ldap_configure_password_hash
-        fi
-        if is_boolean_yes "$LDAP_CONFIGURE_PPOLICY"; then
-            ldap_configure_ppolicy
-        fi
-        # enable accesslog overlay
-        if is_boolean_yes "$LDAP_ENABLE_ACCESSLOG"; then
-            ldap_enable_accesslog
-        fi
-        # enable syncprov overlay
-        if is_boolean_yes "$LDAP_ENABLE_SYNCPROV"; then
-            ldap_enable_syncprov
-        fi
-        # load custom ldifs
-        if ! is_dir_empty "$LDAP_CUSTOM_LDIF_DIR"; then
-            ldap_add_custom_ldifs
-        elif ! is_boolean_yes "$LDAP_SKIP_DEFAULT_TREE"; then
-            ldap_create_tree
-        else
-            info "Skipping default schemas/tree structure"
-        fi
-        # enable tls
-        if is_boolean_yes "$LDAP_ENABLE_TLS"; then
-            ldap_configure_tls
-            if is_boolean_yes "$LDAP_REQUIRE_TLS"; then
-                ldap_configure_tls_required
-            fi
-        fi
-       ldap_stop
-    fi
-}
-
-########################
-# Run custom initialization scripts
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_custom_init_scripts() {
-    if [[ -n $(find /docker-entrypoint-initdb.d/ -type f -regex ".*\.\(sh\)") ]] && [[ ! -f "$LDAP_DATA_DIR/.user_scripts_initialized" ]] ; then
-        info "Loading user's custom files from /docker-entrypoint-initdb.d";
-        for f in /docker-entrypoint-initdb.d/*; do
-            debug "Executing $f"
-            case "$f" in
-                *.sh)
-                    if [[ -x "$f" ]]; then
-                        if ! "$f"; then
-                            error "Failed executing $f"
-                            return 1
-                        fi
-                    else
-                        warn "Sourcing $f as it is not executable by the current user, any error may cause initialization to fail"
-                        . "$f"
-                    fi
-                    ;;
-                *)
-                    warn "Skipping $f, supported formats are: .sh"
-                    ;;
-            esac
-        done
-        touch "$LDAP_DATA_DIR"/.user_scripts_initialized
-    fi
-}
-
-########################
-# OpenLDAP configure TLS
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_configure_tls() {
-    info "Configuring TLS"
-    cat > "${LDAP_SHARE_DIR}/certs.ldif" << EOF
-dn: cn=config
-changetype: modify
-replace: olcTLSCACertificateFile
-olcTLSCACertificateFile: $LDAP_TLS_CA_FILE
--
-replace: olcTLSCertificateFile
-olcTLSCertificateFile: $LDAP_TLS_CERT_FILE
--
-replace: olcTLSCertificateKeyFile
-olcTLSCertificateKeyFile: $LDAP_TLS_KEY_FILE
--
-replace: olcTLSVerifyClient
-olcTLSVerifyClient: $LDAP_TLS_VERIFY_CLIENTS
-EOF
-    if [[ -f "$LDAP_TLS_DH_PARAMS_FILE" ]]; then
-        cat >> "${LDAP_SHARE_DIR}/certs.ldif" << EOF
--
-replace: olcTLSDHParamFile
-olcTLSDHParamFile: $LDAP_TLS_DH_PARAMS_FILE
-EOF
-    fi
-    debug_execute ldapmodify -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/certs.ldif"
-}
-
-########################
-# OpenLDAP configure connections to require TLS
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_configure_tls_required() {
-    info "Configuring LDAP connections to require TLS"
-    cat > "${LDAP_SHARE_DIR}/tls_required.ldif" << EOF
-dn: cn=config
-changetype: modify
-add: olcSecurity
-olcSecurity: tls=1
-EOF
-    debug_execute ldapmodify -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/tls_required.ldif"
-}
-
-########################
-# OpenLDAP enable module
-# Globals:
-#   LDAP_*
-# Arguments:
-#   $1: Module path
-#   $2: Module file name
-# Returns:
-#   None
-#########################
-ldap_load_module() {
-    info "Enable LDAP $2 module from $1"
-    cat > "${LDAP_SHARE_DIR}/enable_module_$2.ldif" << EOF
-dn: cn=module,cn=config
-cn: module
-objectClass: olcModuleList
-olcModulePath: $1
-olcModuleLoad: $2
-EOF
-    debug_execute ldapadd -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/enable_module_$2.ldif"
-}
-
-########################
-# OpenLDAP configure ppolicy
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_configure_ppolicy() {
-    info "Configuring LDAP ppolicy"
-    ldap_load_module "/opt/bitnami/openldap/lib/openldap" "ppolicy.so"
-    # create configuration
-    cat > "${LDAP_SHARE_DIR}/ppolicy_create_configuration.ldif" << EOF
-dn: olcOverlay={0}ppolicy,olcDatabase={2}mdb,cn=config
-objectClass: olcOverlayConfig
-objectClass: olcPPolicyConfig
-olcOverlay: {0}ppolicy
-EOF
-    debug_execute ldapadd -Q -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/ppolicy_create_configuration.ldif"
-    # enable ppolicy_hash_cleartext
-    if is_boolean_yes "$LDAP_PPOLICY_HASH_CLEARTEXT"; then
-        info "Enabling ppolicy_hash_cleartext"
-        cat > "${LDAP_SHARE_DIR}/ppolicy_configuration_hash_cleartext.ldif" << EOF
-dn: olcOverlay={0}ppolicy,olcDatabase={2}mdb,cn=config
-changetype: modify
-add: olcPPolicyHashCleartext
-olcPPolicyHashCleartext: TRUE
-EOF
-    debug_execute ldapmodify -Q -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/ppolicy_configuration_hash_cleartext.ldif"
-    fi
-    # enable ppolicy_use_lockout
-    if is_boolean_yes "$LDAP_PPOLICY_USE_LOCKOUT"; then
-        info "Enabling ppolicy_use_lockout"
-        cat > "${LDAP_SHARE_DIR}/ppolicy_configuration_use_lockout.ldif" << EOF
-dn: olcOverlay={0}ppolicy,olcDatabase={2}mdb,cn=config
-changetype: modify
-add: olcPPolicyUseLockout
-olcPPolicyUseLockout: TRUE
-EOF
-        debug_execute ldapmodify -Q -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/ppolicy_configuration_use_lockout.ldif"
-    fi
-}
-
-########################
-# OpenLDAP configure olcPasswordHash
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_configure_password_hash() {
-    info "Configuring LDAP olcPasswordHash"
-    cat > "${LDAP_SHARE_DIR}/password_hash.ldif" << EOF
-dn: olcDatabase={-1}frontend,cn=config
-changetype: modify
-add: olcPasswordHash
-olcPasswordHash: $LDAP_PASSWORD_HASH
-EOF
-    debug_execute ldapmodify -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/password_hash.ldif"
-}
-
-########################
-# OpenLDAP configure Access Logging
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_enable_accesslog() {
-    info "Configure Access Logging"
-    # Add indexes
-    cat > "${LDAP_SHARE_DIR}/accesslog_add_indexes.ldif" << EOF
-dn: olcDatabase={2}mdb,cn=config
-changetype: modify
-add: olcDbIndex
-olcDbIndex: entryCSN eq
--
-add: olcDbIndex
-olcDbIndex: entryUUID eq
-EOF
-    debug_execute ldapmodify -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/accesslog_add_indexes.ldif"
-    # Load module
-    ldap_load_module "/opt/bitnami/openldap/lib/openldap" "accesslog.so"
-    # Create AccessLog database
-    cat > "${LDAP_SHARE_DIR}/accesslog_create_accesslog_database.ldif" << EOF
-dn: olcDatabase={3}mdb,cn=config
-objectClass: olcDatabaseConfig
-objectClass: olcMdbConfig
-olcDatabase: {3}mdb
-olcDbDirectory: $LDAP_ACCESSLOG_DATA_DIR
-olcSuffix: $LDAP_ACCESSLOG_DB
-olcRootDN: $LDAP_ACCESSLOG_ADMIN_DN
-olcRootPW: $LDAP_ENCRYPTED_ACCESSLOG_ADMIN_PASSWORD
-olcDbIndex: default eq
-olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart
-EOF
-    mkdir /bitnami/openldap/data/accesslog
-    debug_execute ldapadd -Q -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/accesslog_create_accesslog_database.ldif"
-    # Add AccessLog overlay
-    cat > "${LDAP_SHARE_DIR}/accesslog_create_overlay_configuration.ldif" << EOF
-dn: olcOverlay=accesslog,olcDatabase={2}mdb,cn=config
-objectClass: olcOverlayConfig
-objectClass: olcAccessLogConfig
-olcOverlay: accesslog
-olcAccessLogDB: $LDAP_ACCESSLOG_DB
-olcAccessLogOps: $LDAP_ACCESSLOG_LOGOPS
-olcAccessLogSuccess: $LDAP_ACCESSLOG_LOGSUCCESS
-olcAccessLogPurge: $LDAP_ACCESSLOG_LOGPURGE
-olcAccessLogOld: $LDAP_ACCESSLOG_LOGOLD
-olcAccessLogOldAttr: $LDAP_ACCESSLOG_LOGOLDATTR
-EOF
-    info "adding accesslog_create_overlay_configuration.ldif"
-    debug_execute ldapadd -Q -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/accesslog_create_overlay_configuration.ldif"
-}
-
-########################
-# OpenLDAP configure Sync Provider
-# Globals:
-#   LDAP_*
-# Arguments:
-#   None
-# Returns:
-#   None
-#########################
-ldap_enable_syncprov() {
-    info "Configure Sync Provider"
-    # Load module
-    ldap_load_module "/opt/bitnami/openldap/lib/openldap" "syncprov.so"
-    # Add Sync Provider overlay
-    cat > "${LDAP_SHARE_DIR}/syncprov_create_overlay_configuration.ldif" << EOF
-dn: olcOverlay=syncprov,olcDatabase={2}mdb,cn=config
-objectClass: olcOverlayConfig
-objectClass: olcSyncProvConfig
-olcOverlay: syncprov
-olcSpCheckpoint: $LDAP_SYNCPROV_CHECKPPOINT
-olcSpSessionLog: $LDAP_SYNCPROV_SESSIONLOG
-EOF
-    debug_execute ldapadd -Q -Y EXTERNAL -H "ldapi:///" -f "${LDAP_SHARE_DIR}/syncprov_create_overlay_configuration.ldif"
-}

bitnami/openldap/2.5/debian-12/rootfs/opt/bitnami/scripts/openldap/entrypoint.sh

@@ -1,21 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-# shellcheck disable=SC1091
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# Load libraries
-. /opt/bitnami/scripts/liblog.sh
-
-if [[ "$1" = "/opt/bitnami/scripts/openldap/run.sh" ]]; then
-    info "** Starting LDAP setup **"
-    /opt/bitnami/scripts/openldap/setup.sh
-    info "** LDAP setup finished! **"
-fi
-
-echo ""
-exec "$@"

bitnami/openldap/2.5/debian-12/rootfs/opt/bitnami/scripts/openldap/postunpack.sh

@@ -1,29 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-# shellcheck disable=SC1091
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# Load libraries
-. /opt/bitnami/scripts/libfs.sh
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libopenldap.sh
-
-# Load LDAP environment variables
-eval "$(ldap_env)"
-
-# Ensure non-root user has write permissions on a set of directories
-for dir in "$LDAP_SHARE_DIR" "$LDAP_DATA_DIR" "$LDAP_ONLINE_CONF_DIR" "${LDAP_VAR_DIR}" "/docker-entrypoint-initdb.d"; do
-    ensure_dir_exists "$dir"
-    chmod -R g+rwX "$dir"
-done
-
-# Symlinks to normalize directories
-ln -sf "$LDAP_ONLINE_CONF_DIR" "${LDAP_CONF_DIR}/slapd.d"
-ln -sf "$LDAP_DATA_DIR" "${LDAP_VAR_DIR}/data"
-
-setcap CAP_NET_BIND_SERVICE=+eip /opt/bitnami/openldap/sbin/slapd

bitnami/openldap/2.5/debian-12/rootfs/opt/bitnami/scripts/openldap/run.sh

@@ -1,80 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-# shellcheck disable=SC1091
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# Load libraries
-. /opt/bitnami/scripts/liblog.sh
-. /opt/bitnami/scripts/libopenldap.sh
-
-# Load LDAP environment variables
-eval "$(ldap_env)"
-
-command="$(command -v slapd)"
-
-# Reduce maximum number of open file descriptors
-# https://github.com/docker/docker/issues/8231
-ulimit -n "$LDAP_ULIMIT_NOFILES"
-
-declare -a flags
-declare -A flags_map
-
-# Drop privileges if we start as root
-am_i_root && flags_map["-u"]="${LDAP_DAEMON_USER}"
-
-# Set config dir
-flags_map["-F"]="${LDAP_CONF_DIR}/slapd.d"
-
-# Enable debug with desired level
-flags_map["-d"]="${LDAP_LOGLEVEL}"
-
-# The LDAP IPC is always on
-flags_map["-h"]+="${flags_map["-h"]:+" "}ldapi:///"
-
-# Add LDAP URI
-# Since 'proxied LDAP' default port number is same as 'LDAP',
-# enable LDAP URI when one of the following conditions are met:
-# * proxy protocol capability is disabled
-# * proxy protocol capability is enabled and proxy protocol port differ
-if ! is_boolean_yes "${LDAP_ENABLE_PROXYPROTO}" \
-    || [[ "${LDAP_PORT_NUMBER}" -ne "${LDAP_PROXYPROTO_PORT_NUMBER}" ]]
-then
-    flags_map["-h"]+="${flags_map["-h"]:+" "}ldap://:${LDAP_PORT_NUMBER}/"
-fi
-
-# Add LDAPS URI when TLS is enabled
-# Since 'proxied LDAP over SSL' default port number is same as 'LDAP over SSL',
-# enable LDAPS URI when one of the following conditions are met:
-# * proxy protocol capability is disabled
-# * proxy protocol capability is enabled and proxy protocol tls port differ
-if is_boolean_yes "${LDAP_ENABLE_TLS}" \
-    && { ! is_boolean_yes "${LDAP_ENABLE_PROXYPROTO}" \
-        || [[ "${LDAP_LDAPS_PORT_NUMBER}" -ne "${LDAP_PROXYPROTO_LDAPS_PORT_NUMBER}" ]]; }
-then
-    flags_map["-h"]+="${flags_map["-h"]:+" "}ldaps://:${LDAP_LDAPS_PORT_NUMBER}/"
-fi
-
-# Add PLDAP URI when proxy protocol capability is enabled
-if is_boolean_yes "${LDAP_ENABLE_PROXYPROTO}"; then
-    flags_map["-h"]+="${flags_map["-h"]:+" "}pldap://:${LDAP_PROXYPROTO_PORT_NUMBER}/"
-    # Also add PLDAPS URI when TLS is enabled
-    is_boolean_yes "${LDAP_ENABLE_TLS}" \
-        && flags_map["-h"]+="${flags_map["-h"]:+" "}pldaps://:${LDAP_PROXYPROTO_LDAPS_PORT_NUMBER}/"
-fi
-
-# Build flags list
-for flag in "${!flags_map[@]}"; do
-    flags+=("${flag}" "${flags_map[${flag}]}")
-done
-
-# Add "@" so users can add extra command line flags
-flags+=("$@")
-
-info "** Starting slapd **"
-debug "Startup cmd: ${command}" "${flags[*]}"
-exec "${command}" "${flags[@]}"

bitnami/openldap/2.5/debian-12/rootfs/opt/bitnami/scripts/openldap/setup.sh

@@ -1,27 +0,0 @@
-#!/bin/bash
-# Copyright Broadcom, Inc. All Rights Reserved.
-# SPDX-License-Identifier: APACHE-2.0
-
-# shellcheck disable=SC1091
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# Load libraries
-. /opt/bitnami/scripts/libos.sh
-. /opt/bitnami/scripts/libopenldap.sh
-
-# Load LDAP environment variables
-eval "$(ldap_env)"
-
-# Ensure Open LDAP environment variables are valid
-ldap_validate
-# Ensure OpenLDAP is stopped when this script ends
-trap "ldap_stop" EXIT
-# Ensure 'daemon' user exists when running as 'root'
-am_i_root && ensure_user_exists "$LDAP_DAEMON_USER" --group "$LDAP_DAEMON_GROUP"
-# Ensure Open LDAP server is initialize
-ldap_initialize
-# Allow running custom initialization scripts
-ldap_custom_init_scripts

bitnami/openldap/2.5/debian-12/tags-info.yaml

@@ -1,4 +0,0 @@
-rolling-tags:
-- "2.5"
-- 2.5-debian-12
-- 2.5.19