Refactoring, remove default root password and unecessary syslog config

Containerfile

@@ -8,8 +8,7 @@ COPY ./rocky.repo /etc/yum.repos.d/rocky.repo
 RUN yum clean all && \
     yum update -y && \
     yum upgrade --refresh -y && \
-    yum clean all
-RUN yum install cloudstack-management hostname -y && \
+    yum install cloudstack-management hostname -y && \
     yum clean all
 RUN wget https://download.cloudstack.org/tools/vhd-util -O /usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/vhd-util
 

cloudstack-init.env

@@ -1,7 +1,5 @@
 # Default credentials to be updated
 DB_HOST=mysql
-DB_ADM_USER=root
-DB_ADM_PASSWD=root
 DB_CS_USER=cloud
 DB_CS_PASSWD=cloud
 ENCRYPTION_TYPE=file

cloudstack-init.service

@@ -1,17 +1,15 @@
 [Unit]
 Description=Cloudstack Setup Initialization
 After=network.target
+ConditionPathExists=!/etc/default/.cloudstack-provisionned__
 
 [Service]
 Type=oneshot
 RemainAfterExit=yes
 EnvironmentFile=/etc/default/cloudstack-init
-ExecStart=/usr/bin/cloudstack-setup-databases ${DB_CS_USER}:${DB_CS_PASSWD}@${DB_HOST} --deploy-as=${DB_ADM_USER}:${DB_ADM_PASSWD} -e ${ENCRYPTION_TYPE} -m ${MGT_SERVER_KEY} -k ${DB_KEY}
+ExecStart=/usr/bin/cloudstack-setup-databases ${DB_CS_USER}:${DB_CS_PASSWD}@${DB_HOST} --schema-only -e ${ENCRYPTION_TYPE} -m ${MGT_SERVER_KEY} -k ${DB_KEY}
 ExecStart=/usr/bin/cloudstack-setup-management
-
-StandardOutput=syslog
-StandardError=syslog
-SyslogIdentifier=cloudstack
+ExecStart=/usr/bin/touch /etc/default/.cloudstack-provisionned__
 
 [Install]
 WantedBy=multi-user.target

cloudstack-management.service

@@ -2,19 +2,15 @@
 Description=CloudStack Management Server
 After=syslog.target network.target mariadb.service mysqld.service mysql.service
 Wants=mariadb.service mysqld.service mysql.service
+ConditionPathExists=/etc/default/.cloudstack-provisionned__
 
 [Service]
-UMask=0022
 Type=simple
 User=cloud
 EnvironmentFile=/etc/default/cloudstack-management
 WorkingDirectory=/var/log/cloudstack/management
 PIDFile=/var/run/cloudstack-management.pid
 ExecStart=/usr/bin/java $JAVA_DEBUG $JAVA_OPTS -cp $CLASSPATH $BOOTSTRAP_CLASS
 
-StandardOutput=syslog
-StandardError=syslog
-SyslogIdentifier=cloudstack
-
 [Install]
 WantedBy=multi-user.target

compose.yaml

@@ -18,8 +18,8 @@ services:
       - IPC_LOCK
     volumes:
       - ./cloudstack-init.env:/etc/default/cloudstack-init:Z
-      # - cs-config:/etc/cloudstack:Z
-      # - cs-data:/var/cloudstack:Z
+      - cs-config:/etc/cloudstack:Z
+      - cs-data:/var/cloudstack:Z
     logging: &default_logging
       driver: "json-file"
       options:
@@ -29,24 +29,20 @@ services:
   mysql:
     image: docker.io/library/mysql:8.0-debian
     restart: unless-stopped
-    ports:
-      - 3306:3306
     expose:
       - 3306
     volumes:
       - ./cloudstack.cnf:/etc/mysql/conf.d/cloudstack.cnf:Z
-      # - mysql-data:/var/lib/mysql:Z
+      - mysql-data:/var/lib/mysql:Z
     environment:
       - MYSQL_ROOT_PASSWORD=root
     logging:
       <<: *default_logging
 
-# To be uncommented if you want to persist your data
-#
-# volumes:
-#   cs-config:
-#     driver: local
-#   cs-data:
-#     driver: local
-#   mysql-data:
-#     driver: local
+volumes:
+  cs-config:
+    driver: local
+  cs-data:
+    driver: local
+  mysql-data:
+    driver: local