Merge pull request 'Ubuntu 26.04 script' (#48) from ubuntu_2604 into mainHEAD main

Reviewed-on: https://codeberg.org/bookstack/devops/pulls/48
author: Dan Brown 2026-04-23 11:42:16 +0200
committer: Dan Brown 2026-04-23 11:42:16 +0200
commit: eec7eddeab7c2eda875bdabbac7665e86679b259 (patch)
tree: 1d2a43e6c86bf124fd5e48b4aaac670e440c47f5
parent: b0756c1b5d4a06bd2228fd6e37d6948dc1c190d7 (diff)
parent: cac2b2db46b3d91e8d2ea0eab6a83dcb4b7b8f38 (diff)
download: devops-main.tar.gz
devops-main.tar.zst
devops-main.zip
1 files changed, 280 insertions, 0 deletions
diff --git a/scripts/installation-ubuntu-26.04.sh b/scripts/installation-ubuntu-26.04.sh
new file mode 100644
index 0000000..c9f6952
--- /dev/null
+++ b/scripts/installation-ubuntu-26.04.sh
@@ -0,0 +1,280 @@
+#!/bin/bash
+
+echo "This script installs a new BookStack instance on a fresh Ubuntu 26.04 server."
+echo "This script does not ensure system security."
+echo ""
+
+# Generate a path for a log file to output into for debugging
+LOGPATH=$(realpath "bookstack_install_$(date +%s).log")
+
+# Get the current user running the script
+SCRIPT_USER="${SUDO_USER:-$USER}"
+
+# Get the current machine IP address
+CURRENT_IP=$(ip addr | grep 'state UP' -A4 | grep 'inet ' | awk '{print $2}' | cut -f1  -d'/')
+
+# Generate a password for the database
+DB_PASS="$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 13)"
+
+# The directory to install BookStack into
+BOOKSTACK_DIR="/var/www/bookstack"
+
+# Get the domain from the arguments (Requested later if not set)
+DOMAIN="$1"
+
+# Get the admin user account email address (Requested later if not set)
+ADMIN_EMAIL="$2"
+
+# Generate an admin user account password
+ADMIN_PASS="$(head /dev/urandom | tr -dc A-Za-z0-9-_#@=+ | head -c 16)"
+
+# Prevent interactive prompts in applications
+export DEBIAN_FRONTEND=noninteractive
+
+# Echo out an error message to the command line and exit the program
+# Also logs the message to the log file
+function error_out() {
+  echo "ERROR: $1" | tee -a "$LOGPATH" 1>&2
+  exit 1
+}
+
+# Echo out an information message to both the command line and log file
+function info_msg() {
+  echo "$1" | tee -a "$LOGPATH"
+}
+
+# Run some checks before installation to help prevent messing up an existing
+# web-server setup.
+function run_pre_install_checks() {
+  # Check we're running as root and exit if not
+  if [[ $EUID -gt 0 ]]
+  then
+    error_out "This script must be ran with root/sudo privileges"
+  fi
+
+  # Check if Apache appears to be installed and exit if so
+  if [ -d "/etc/apache2/sites-enabled" ]
+  then
+    error_out "This script is intended for a fresh server install, existing apache config found, aborting install"
+  fi
+
+  # Check if MySQL appears to be installed and exit if so
+  if [ -d "/var/lib/mysql" ]
+  then
+    error_out "This script is intended for a fresh server install, existing MySQL data found, aborting install"
+  fi
+}
+
+# Fetch domain to use from first provided parameter,
+# Otherwise request the user to input their domain
+function run_prompt_for_domain_if_required() {
+  if [ -z "$DOMAIN" ]
+  then
+    info_msg ""
+    info_msg "Enter the domain (or IP if not using a domain) you want to host BookStack on and press [ENTER]."
+    info_msg "Examples: my-site.com or docs.my-site.com or ${CURRENT_IP}"
+    read -r DOMAIN
+  fi
+
+  # Error out if no domain was provided
+  if [ -z "$DOMAIN" ]
+  then
+    error_out "A domain must be provided to run this script"
+  fi
+}
+
+# Prompt the user for an admin account email address if not provided 
+# as a script parameter, then perform some basic validation.
+function run_prompt_for_admin_email_if_required() {
+    # Prompt for email if not set
+    if [ -z "$ADMIN_EMAIL" ]
+	then
+		info_msg ""
+		info_msg "Enter an email to use for the initial administrator login account and press [ENTER]."
+		info_msg "This can be changed later within BookStack."
+        read -r ADMIN_EMAIL
+    fi
+
+    # Validate email format
+    if [[ ! "$ADMIN_EMAIL" =~ ^.+@.+\.[a-zA-Z]{2,}$ ]]; then
+        error_out "The email provided [$ADMIN_EMAIL] does not appear to be in a valid email format."
+    fi
+}
+
+# Install core system packages
+function run_package_installs() {
+  apt update
+  apt install -y git unzip apache2 curl mysql-server php \
+  php-fpm php-curl php-mbstring php-ldap php-xml php-zip php-gd php-mysql
+}
+
+# Set up database
+function run_database_setup() {
+  # Ensure database service has started
+  systemctl start mysql-server.service
+  sleep 3
+
+  # Create the required user database, user and permissions in the database
+  mysql -u root --execute="CREATE DATABASE bookstack;"
+  mysql -u root --execute="CREATE USER 'bookstack'@'localhost' IDENTIFIED BY '$DB_PASS';"
+  mysql -u root --execute="GRANT ALL ON bookstack.* TO 'bookstack'@'localhost';FLUSH PRIVILEGES;"
+}
+
+# Download BookStack
+function run_bookstack_download() {
+  cd /var/www || exit
+  git clone https://source.bookstackapp.com/bookstack.git --branch release --single-branch bookstack
+}
+
+# Download PHP vendor files
+function run_download_bookstack_vendor_files() {
+  cd "$BOOKSTACK_DIR" || exit
+  php bookstack-system-cli download-vendor
+}
+
+
+# Copy and update BookStack environment variables
+function run_update_bookstack_env() {
+  cd "$BOOKSTACK_DIR" || exit
+  cp .env.example .env
+  sed -i.bak "s@APP_URL=.*\$@APP_URL=http://$DOMAIN@" .env
+  sed -i.bak 's/DB_DATABASE=.*$/DB_DATABASE=bookstack/' .env
+  sed -i.bak 's/DB_USERNAME=.*$/DB_USERNAME=bookstack/' .env
+  sed -i.bak "s/DB_PASSWORD=.*\$/DB_PASSWORD=$DB_PASS/" .env
+  # Generate the application key
+  php artisan key:generate --no-interaction --force
+}
+
+# Run the BookStack database migrations for the first time
+function run_bookstack_database_migrations() {
+  cd "$BOOKSTACK_DIR" || exit
+  php artisan migrate --no-interaction --force
+}
+
+# Run the BookStack command to create/update the initial admin account
+function run_bookstack_update_initial_admin_details() {
+  cd "$BOOKSTACK_DIR" || exit
+  php artisan bookstack:create-admin --initial --email="$ADMIN_EMAIL" --name="Admin" --password="$ADMIN_PASS"
+} 
+
+# Set file and folder permissions
+# Sets current user as owner user and www-data as owner group then
+# provides group write access only to required directories.
+# Hides the `.env` file so it's not visible to other users on the system.
+function run_set_application_file_permissions() {
+  cd "$BOOKSTACK_DIR" || exit
+  chown -R "$SCRIPT_USER":www-data ./
+  chmod -R 755 ./
+  chmod -R 775 bootstrap/cache public/uploads storage
+  chmod 740 .env
+
+  # Tell git to ignore permission changes
+  git config core.fileMode false
+}
+
+# Setup apache with the needed modules and config
+function run_configure_apache() {
+  # Enable required apache modules and config
+  a2enmod rewrite proxy_fcgi setenvif
+  a2enconf php8.5-fpm
+
+  # Set-up the required BookStack apache config
+  cat >/etc/apache2/sites-available/bookstack.conf <<EOL
+<VirtualHost *:80>
+  ServerName ${DOMAIN}
+
+  ServerAdmin webmaster@localhost
+  DocumentRoot /var/www/bookstack/public/
+
+  <Directory /var/www/bookstack/public/>
+      Options -Indexes +FollowSymLinks
+      AllowOverride None
+      Require all granted
+      <IfModule mod_rewrite.c>
+          <IfModule mod_negotiation.c>
+              Options -MultiViews -Indexes
+          </IfModule>
+
+          RewriteEngine On
+
+          # Handle Authorization Header
+          RewriteCond %{HTTP:Authorization} .
+          RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+
+          # Redirect Trailing Slashes If Not A Folder...
+          RewriteCond %{REQUEST_FILENAME} !-d
+          RewriteCond %{REQUEST_URI} (.+)/$
+          RewriteRule ^ %1 [L,R=301]
+
+          # Handle Front Controller...
+          RewriteCond %{REQUEST_FILENAME} !-d
+          RewriteCond %{REQUEST_FILENAME} !-f
+          RewriteRule ^ index.php [L]
+      </IfModule>
+  </Directory>
+
+  ErrorLog \${APACHE_LOG_DIR}/error.log
+  CustomLog \${APACHE_LOG_DIR}/access.log combined
+
+</VirtualHost>
+EOL
+
+  # Disable the default apache site and enable BookStack
+  a2dissite 000-default.conf
+  a2ensite bookstack.conf
+
+  # Restart apache to load new config
+  systemctl restart apache2
+  # Ensure php-fpm service has started
+  systemctl start php8.5-fpm.service
+}
+
+info_msg "This script logs full output to $LOGPATH which may help upon issues."
+sleep 1
+
+run_pre_install_checks
+run_prompt_for_domain_if_required
+run_prompt_for_admin_email_if_required
+info_msg ""
+info_msg "Installing using the domain or IP \"$DOMAIN\""
+info_msg "With an admin login account of \"$ADMIN_EMAIL\""
+info_msg ""
+sleep 3
+
+info_msg "[1/9] Installing required system packages..."
+info_msg "      (This may take several minutes)"
+run_package_installs >> "$LOGPATH" 2>&1
+
+info_msg "[2/9] Preparing MySQL database..."
+run_database_setup >> "$LOGPATH" 2>&1
+
+info_msg "[3/9] Downloading BookStack to ${BOOKSTACK_DIR}..."
+run_bookstack_download >> "$LOGPATH" 2>&1
+
+info_msg "[4/9] Downloading PHP dependency files..."
+run_download_bookstack_vendor_files >> "$LOGPATH" 2>&1
+
+info_msg "[5/9] Creating and populating BookStack .env file..."
+run_update_bookstack_env >> "$LOGPATH" 2>&1
+
+info_msg "[6/9] Running initial BookStack database migrations..."
+run_bookstack_database_migrations >> "$LOGPATH" 2>&1
+
+info_msg "[7/9] Setting BookStack file & folder permissions..."
+run_set_application_file_permissions >> "$LOGPATH" 2>&1
+
+info_msg "[8/9] Setting initial BookStack admin account details..."
+run_bookstack_update_initial_admin_details >> "$LOGPATH" 2>&1
+
+info_msg "[9/9] Configuring apache server..."
+run_configure_apache >> "$LOGPATH" 2>&1
+
+info_msg "----------------------------------------------------------------"
+info_msg "Setup finished, your BookStack instance should now be installed!"
+info_msg "Now's a good time to test and save the access details below."
+info_msg "- Login email: $ADMIN_EMAIL"
+echo     "- Login password: $ADMIN_PASS"
+info_msg "- Access URL: http://$CURRENT_IP/ or http://$DOMAIN/"
+info_msg "- BookStack install path: $BOOKSTACK_DIR"
+info_msg "- Install script log: $LOGPATH"
+info_msg "---------------------------------------------------------------"
author	Dan Brown	2026-04-23 11:42:16 +0200
committer	Dan Brown	2026-04-23 11:42:16 +0200
commit	eec7eddeab7c2eda875bdabbac7665e86679b259 (patch)
tree	1d2a43e6c86bf124fd5e48b4aaac670e440c47f5
parent	b0756c1b5d4a06bd2228fd6e37d6948dc1c190d7 (diff)
parent	cac2b2db46b3d91e8d2ea0eab6a83dcb4b7b8f38 (diff)
download	devops-main.tar.gz devops-main.tar.zst devops-main.zip