blob: db7967841cc991a7627d72e9f408815e73887625 [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Dean Troyerbf67c192012-09-21 15:09:37 -05003# lib/nova
Dean Troyer6d04fd72012-12-21 11:03:37 -06004# Functions to control the configuration and operation of the **Nova** service
Dean Troyerbf67c192012-09-21 15:09:37 -05005
6# Dependencies:
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01007#
8# - ``functions`` file
9# - ``DEST``, ``DATA_DIR``, ``STACK_USER`` must be defined
10# - ``SERVICE_{TENANT_NAME|PASSWORD}`` must be defined
11# - ``LIBVIRT_TYPE`` must be defined
12# - ``INSTANCE_NAME_PREFIX``, ``VOLUME_NAME_PREFIX`` must be defined
13# - ``KEYSTONE_TOKEN_FORMAT`` must be defined
Dean Troyerbf67c192012-09-21 15:09:37 -050014
15# ``stack.sh`` calls the entry points in this order:
16#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010017# - install_nova
18# - configure_nova
Davanum Srinivasd5537c12015-04-30 21:10:48 -040019# - _config_nova_apache_wsgi
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010020# - create_nova_conf
21# - init_nova
22# - start_nova
23# - stop_nova
24# - cleanup_nova
Dean Troyerbf67c192012-09-21 15:09:37 -050025
26# Save trace setting
27XTRACE=$(set +o | grep xtrace)
28set +o xtrace
29
30
31# Defaults
32# --------
33
34# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050035GITDIR["python-novaclient"]=$DEST/python-novaclient
Dean Troyerbf67c192012-09-21 15:09:37 -050036NOVA_DIR=$DEST/nova
Dean Troyer4533eee2015-02-17 16:25:38 -060037
38# Nova virtual environment
39if [[ ${USE_VENV} = True ]]; then
40 PROJECT_VENV["nova"]=${NOVA_DIR}.venv
41 NOVA_BIN_DIR=${PROJECT_VENV["nova"]}/bin
42else
43 NOVA_BIN_DIR=$(get_python_exec_prefix)
44fi
45
Dean Troyerbf67c192012-09-21 15:09:37 -050046NOVA_STATE_PATH=${NOVA_STATE_PATH:=$DATA_DIR/nova}
47# INSTANCES_PATH is the previous name for this
48NOVA_INSTANCES_PATH=${NOVA_INSTANCES_PATH:=${INSTANCES_PATH:=$NOVA_STATE_PATH/instances}}
Dean Troyerbc071bc2012-10-01 14:06:44 -050049NOVA_AUTH_CACHE_DIR=${NOVA_AUTH_CACHE_DIR:-/var/cache/nova}
Dean Troyerbf67c192012-09-21 15:09:37 -050050
51NOVA_CONF_DIR=/etc/nova
52NOVA_CONF=$NOVA_CONF_DIR/nova.conf
Kieran Spearfb2a3ae2013-03-11 23:55:49 +000053NOVA_CELLS_CONF=$NOVA_CONF_DIR/nova-cells.conf
Chris Dent2f27a0e2014-09-09 13:46:02 +010054NOVA_FAKE_CONF=$NOVA_CONF_DIR/nova-fake.conf
Kieran Spearfb2a3ae2013-03-11 23:55:49 +000055NOVA_CELLS_DB=${NOVA_CELLS_DB:-nova_cell}
Dan Smith03786b12015-06-10 11:31:51 -070056NOVA_API_DB=${NOVA_API_DB:-nova_api}
Kieran Spearfb2a3ae2013-03-11 23:55:49 +000057
Dean Troyerbf67c192012-09-21 15:09:37 -050058NOVA_API_PASTE_INI=${NOVA_API_PASTE_INI:-$NOVA_CONF_DIR/api-paste.ini}
Ken'ichi Ohmichia8836982014-12-04 23:08:10 +000059# NOVA_API_VERSION valid options
Dean Troyerdc97cb72015-03-28 08:20:50 -050060# - default - setup API end points as nova does out of the box
61# - v21default - make v21 the default on /v2
62#
Ken'ichi Ohmichi0f176d82014-12-03 01:24:47 +000063# NOTE(sdague): this is for transitional testing of the Nova v21 API.
64# Expect to remove in L or M.
Ken'ichi Ohmichia8836982014-12-04 23:08:10 +000065NOVA_API_VERSION=${NOVA_API_VERSION-default}
Dean Troyerbf67c192012-09-21 15:09:37 -050066
Davanum Srinivasd5537c12015-04-30 21:10:48 -040067if is_suse; then
68 NOVA_WSGI_DIR=${NOVA_WSGI_DIR:-/srv/www/htdocs/nova}
69else
70 NOVA_WSGI_DIR=${NOVA_WSGI_DIR:-/var/www/nova}
71fi
72
73# Toggle for deploying Nova-API under HTTPD + mod_wsgi
74NOVA_USE_MOD_WSGI=${NOVA_USE_MOD_WSGI:-False}
75
Rob Crittenden18d47782014-03-19 17:47:42 -040076if is_ssl_enabled_service "nova" || is_service_enabled tls-proxy; then
77 NOVA_SERVICE_PROTOCOL="https"
78 EC2_SERVICE_PROTOCOL="https"
79else
80 EC2_SERVICE_PROTOCOL="http"
81fi
82
Dean Troyer3a3a2ba2012-12-11 15:26:24 -060083# Public facing bits
84NOVA_SERVICE_HOST=${NOVA_SERVICE_HOST:-$SERVICE_HOST}
85NOVA_SERVICE_PORT=${NOVA_SERVICE_PORT:-8774}
86NOVA_SERVICE_PORT_INT=${NOVA_SERVICE_PORT_INT:-18774}
87NOVA_SERVICE_PROTOCOL=${NOVA_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL}
Brian Haley180f5eb2015-06-16 13:14:31 -040088NOVA_SERVICE_LOCAL_HOST=${NOVA_SERVICE_LOCAL_HOST:-$SERVICE_LOCAL_HOST}
89NOVA_SERVICE_LISTEN_ADDRESS=${NOVA_SERVICE_LISTEN_ADDRESS:-$SERVICE_LISTEN_ADDRESS}
Rob Crittenden18d47782014-03-19 17:47:42 -040090EC2_SERVICE_PORT=${EC2_SERVICE_PORT:-8773}
91EC2_SERVICE_PORT_INT=${EC2_SERVICE_PORT_INT:-18773}
Dean Troyer3a3a2ba2012-12-11 15:26:24 -060092
Dan Prince24f6efa2013-10-31 10:27:58 -040093# Option to enable/disable config drive
Dean Troyerdc97cb72015-03-28 08:20:50 -050094# NOTE: Set ``FORCE_CONFIG_DRIVE="False"`` to turn OFF config drive
Gary Kottond2287cf2015-03-22 07:20:06 -070095FORCE_CONFIG_DRIVE=${FORCE_CONFIG_DRIVE:-"True"}
Dan Prince24f6efa2013-10-31 10:27:58 -040096
Dean Troyerbf67c192012-09-21 15:09:37 -050097# Nova supports pluggable schedulers. The default ``FilterScheduler``
98# should work in most cases.
99SCHEDULER=${SCHEDULER:-nova.scheduler.filter_scheduler.FilterScheduler}
100
101QEMU_CONF=/etc/libvirt/qemu.conf
102
Dean Troyer8c032d12013-09-23 13:53:13 -0500103# Set default defaults here as some hypervisor drivers override these
104PUBLIC_INTERFACE_DEFAULT=br100
Dean Troyer8c032d12013-09-23 13:53:13 -0500105FLAT_NETWORK_BRIDGE_DEFAULT=br100
Dean Troyerdc97cb72015-03-28 08:20:50 -0500106# Set ``GUEST_INTERFACE_DEFAULT`` to some interface on the box so that
107# the default isn't completely crazy. This will match ``eth*``, ``em*``, or
108# the new ``p*`` interfaces, then basically picks the first
Sean Dague11007172014-05-28 17:30:10 -0400109# alphabetically. It's probably wrong, however it's less wrong than
Dean Troyerdc97cb72015-03-28 08:20:50 -0500110# always using ``eth0`` which doesn't exist on new Linux distros at all.
Sean Daguefdb920c2014-06-05 19:06:05 -0400111GUEST_INTERFACE_DEFAULT=$(ip link \
112 | grep 'state UP' \
113 | awk '{print $2}' \
114 | sed 's/://' \
115 | grep ^[ep] \
116 | head -1)
Dean Troyer8c032d12013-09-23 13:53:13 -0500117
Dean Troyerdc97cb72015-03-28 08:20:50 -0500118# ``NOVA_VNC_ENABLED`` can be used to forcibly enable VNC configuration.
119# In multi-node setups allows compute hosts to not run ``n-novnc``.
Sean Dague53753292014-12-04 19:38:15 -0500120NOVA_VNC_ENABLED=$(trueorfalse False NOVA_VNC_ENABLED)
Robbie Harwood (frozencemetery)4e07fdc2014-07-14 18:11:39 -0400121
Dean Troyer8c032d12013-09-23 13:53:13 -0500122# Get hypervisor configuration
123# ----------------------------
124
125NOVA_PLUGINS=$TOP_DIR/lib/nova_plugins
126if is_service_enabled nova && [[ -r $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER ]]; then
127 # Load plugin
128 source $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER
129fi
130
Dean Troyerbf67c192012-09-21 15:09:37 -0500131
Dean Troyerb3236912013-03-17 15:17:05 -0500132# Nova Network Configuration
133# --------------------------
134
Dean Troyerb3236912013-03-17 15:17:05 -0500135NETWORK_MANAGER=${NETWORK_MANAGER:-${NET_MAN:-FlatDHCPManager}}
136PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-$PUBLIC_INTERFACE_DEFAULT}
137VLAN_INTERFACE=${VLAN_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
138FLAT_NETWORK_BRIDGE=${FLAT_NETWORK_BRIDGE:-$FLAT_NETWORK_BRIDGE_DEFAULT}
139EC2_DMZ_HOST=${EC2_DMZ_HOST:-$SERVICE_HOST}
140
141# If you are using the FlatDHCP network mode on multiple hosts, set the
142# ``FLAT_INTERFACE`` variable but make sure that the interface doesn't already
143# have an IP or you risk breaking things.
144#
145# **DHCP Warning**: If your flat interface device uses DHCP, there will be a
146# hiccup while the network is moved from the flat interface to the flat network
147# bridge. This will happen when you launch your first instance. Upon launch
148# you will lose all connectivity to the node, and the VM launch will probably
149# fail.
150#
151# If you are running on a single node and don't need to access the VMs from
152# devices other than that node, you can set ``FLAT_INTERFACE=``
153# This will stop nova from bridging any interfaces into ``FLAT_NETWORK_BRIDGE``.
Davanum Srinivasb93b74c2013-03-21 21:25:05 -0400154FLAT_INTERFACE=${FLAT_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
Dean Troyerb3236912013-03-17 15:17:05 -0500155
156# ``MULTI_HOST`` is a mode where each compute node runs its own network node. This
157# allows network operations and routing for a VM to occur on the server that is
158# running the VM - removing a SPOF and bandwidth bottleneck.
Sean Dague53753292014-12-04 19:38:15 -0500159MULTI_HOST=$(trueorfalse False MULTI_HOST)
Dean Troyerb3236912013-03-17 15:17:05 -0500160
Dean Troyerdc97cb72015-03-28 08:20:50 -0500161# ``NOVA_ALLOW_MOVE_TO_SAME_HOST`` can be set to False in multi node DevStack,
Joe Gordon18d62982014-10-28 13:37:15 -0700162# where there are at least two nova-computes.
Sean Dague53753292014-12-04 19:38:15 -0500163NOVA_ALLOW_MOVE_TO_SAME_HOST=$(trueorfalse True NOVA_ALLOW_MOVE_TO_SAME_HOST)
Joe Gordon18d62982014-10-28 13:37:15 -0700164
Dean Troyerb3236912013-03-17 15:17:05 -0500165# Test floating pool and range are used for testing. They are defined
166# here until the admin APIs can replace nova-manage
167TEST_FLOATING_POOL=${TEST_FLOATING_POOL:-test}
168TEST_FLOATING_RANGE=${TEST_FLOATING_RANGE:-192.168.253.0/29}
169
Dean Troyercc6b4432013-04-08 15:38:03 -0500170# Functions
171# ---------
Dean Troyerbf67c192012-09-21 15:09:37 -0500172
Dean Troyere4fa7212014-01-15 15:04:49 -0600173# Test if any Nova services are enabled
174# is_nova_enabled
175function is_nova_enabled {
176 [[ ,${ENABLED_SERVICES} =~ ,"n-" ]] && return 0
177 return 1
178}
179
180# Test if any Nova Cell services are enabled
181# is_nova_enabled
182function is_n-cell_enabled {
Joe Gordon6b2f2652014-03-26 19:19:01 -0700183 [[ ,${ENABLED_SERVICES} =~ ,"n-cell" ]] && return 0
Dean Troyere4fa7212014-01-15 15:04:49 -0600184 return 1
185}
186
Dean Troyerbf67c192012-09-21 15:09:37 -0500187# Helper to clean iptables rules
Ian Wienandaee18c72014-02-21 15:35:08 +1100188function clean_iptables {
Dean Troyerbf67c192012-09-21 15:09:37 -0500189 # Delete rules
190 sudo iptables -S -v | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-A" | sed "s/-A/-D/g" | awk '{print "sudo iptables",$0}' | bash
191 # Delete nat rules
192 sudo iptables -S -v -t nat | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-A" | sed "s/-A/-D/g" | awk '{print "sudo iptables -t nat",$0}' | bash
193 # Delete chains
194 sudo iptables -S -v | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-N" | sed "s/-N/-X/g" | awk '{print "sudo iptables",$0}' | bash
195 # Delete nat chains
196 sudo iptables -S -v -t nat | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-N" | sed "s/-N/-X/g" | awk '{print "sudo iptables -t nat",$0}' | bash
197}
198
199# cleanup_nova() - Remove residual data files, anything left over from previous
200# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100201function cleanup_nova {
Dean Troyerbf67c192012-09-21 15:09:37 -0500202 if is_service_enabled n-cpu; then
203 # Clean iptables from previous runs
204 clean_iptables
205
206 # Destroy old instances
Dean Troyer0038a1a2014-07-25 15:27:54 -0500207 local instances=`sudo virsh list --all | grep $INSTANCE_NAME_PREFIX | sed "s/.*\($INSTANCE_NAME_PREFIX[0-9a-fA-F]*\).*/\1/g"`
Dean Troyerbf67c192012-09-21 15:09:37 -0500208 if [ ! "$instances" = "" ]; then
209 echo $instances | xargs -n1 sudo virsh destroy || true
Daniel P. Berranged52008a2013-05-20 15:03:43 +0100210 echo $instances | xargs -n1 sudo virsh undefine --managed-save || true
Dean Troyerbf67c192012-09-21 15:09:37 -0500211 fi
212
213 # Logout and delete iscsi sessions
Dean Troyer0038a1a2014-07-25 15:27:54 -0500214 local tgts=$(sudo iscsiadm --mode node | grep $VOLUME_NAME_PREFIX | cut -d ' ' -f2)
215 local target
Dan Smithc0fad2b2013-03-28 12:22:25 -0700216 for target in $tgts; do
217 sudo iscsiadm --mode node -T $target --logout || true
218 done
219 sudo iscsiadm --mode node --op delete || true
Dean Troyerbf67c192012-09-21 15:09:37 -0500220
221 # Clean out the instances directory.
222 sudo rm -rf $NOVA_INSTANCES_PATH/*
223 fi
Dean Troyer995eb922013-03-07 16:11:40 -0600224
225 sudo rm -rf $NOVA_STATE_PATH $NOVA_AUTH_CACHE_DIR
Dean Troyer2aa2a892013-08-04 19:53:19 -0500226
227 # NOTE(dtroyer): This really should be called from here but due to the way
228 # nova abuses the _cleanup() function we're moving it
229 # directly into cleanup.sh until this can be fixed.
230 #if is_service_enabled n-cpu && [[ -r $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER ]]; then
231 # cleanup_nova_hypervisor
232 #fi
Marian Horban13f65572015-06-10 14:34:22 -0400233
234 if [ "$NOVA_USE_MOD_WSGI" == "True" ]; then
235 _cleanup_nova_apache_wsgi
236 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500237}
238
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400239# _cleanup_nova_apache_wsgi() - Remove wsgi files, disable and remove apache vhost file
240function _cleanup_nova_apache_wsgi {
241 sudo rm -f $NOVA_WSGI_DIR/*
242 sudo rm -f $(apache_site_config_for nova-api)
243 sudo rm -f $(apache_site_config_for nova-ec2-api)
244}
245
246# _config_nova_apache_wsgi() - Set WSGI config files of Keystone
247function _config_nova_apache_wsgi {
248 sudo mkdir -p $NOVA_WSGI_DIR
249
250 local nova_apache_conf=$(apache_site_config_for nova-api)
251 local nova_ec2_apache_conf=$(apache_site_config_for nova-ec2-api)
252 local nova_ssl=""
253 local nova_certfile=""
254 local nova_keyfile=""
255 local nova_api_port=$NOVA_SERVICE_PORT
256 local nova_ec2_api_port=$EC2_SERVICE_PORT
257 local venv_path=""
258
259 if is_ssl_enabled_service nova-api; then
260 nova_ssl="SSLEngine On"
261 nova_certfile="SSLCertificateFile $NOVA_SSL_CERT"
262 nova_keyfile="SSLCertificateKeyFile $NOVA_SSL_KEY"
263 fi
264 if [[ ${USE_VENV} = True ]]; then
Chris Dent3a2c86a2015-05-12 13:41:25 +0000265 venv_path="python-path=${PROJECT_VENV["nova"]}/lib/$(python_version)/site-packages"
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400266 fi
267
268 # copy proxy vhost and wsgi helper files
269 sudo cp $NOVA_DIR/nova/wsgi/nova-api.py $NOVA_WSGI_DIR/nova-api
270 sudo cp $NOVA_DIR/nova/wsgi/nova-ec2-api.py $NOVA_WSGI_DIR/nova-ec2-api
271
272 sudo cp $FILES/apache-nova-api.template $nova_apache_conf
273 sudo sed -e "
274 s|%PUBLICPORT%|$nova_api_port|g;
275 s|%APACHE_NAME%|$APACHE_NAME|g;
276 s|%PUBLICWSGI%|$NOVA_WSGI_DIR/nova-api|g;
277 s|%SSLENGINE%|$nova_ssl|g;
278 s|%SSLCERTFILE%|$nova_certfile|g;
279 s|%SSLKEYFILE%|$nova_keyfile|g;
280 s|%USER%|$STACK_USER|g;
281 s|%VIRTUALENV%|$venv_path|g
Marian Horban13f65572015-06-10 14:34:22 -0400282 s|%APIWORKERS%|$API_WORKERS|g
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400283 " -i $nova_apache_conf
284
285 sudo cp $FILES/apache-nova-ec2-api.template $nova_ec2_apache_conf
286 sudo sed -e "
287 s|%PUBLICPORT%|$nova_ec2_api_port|g;
288 s|%APACHE_NAME%|$APACHE_NAME|g;
289 s|%PUBLICWSGI%|$NOVA_WSGI_DIR/nova-ec2-api|g;
290 s|%SSLENGINE%|$nova_ssl|g;
291 s|%SSLCERTFILE%|$nova_certfile|g;
292 s|%SSLKEYFILE%|$nova_keyfile|g;
293 s|%USER%|$STACK_USER|g;
294 s|%VIRTUALENV%|$venv_path|g
Marian Horban13f65572015-06-10 14:34:22 -0400295 s|%APIWORKERS%|$API_WORKERS|g
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400296 " -i $nova_ec2_apache_conf
297}
298
Dean Troyerbf67c192012-09-21 15:09:37 -0500299# configure_nova() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +1100300function configure_nova {
Dean Troyerbf67c192012-09-21 15:09:37 -0500301 # Put config files in ``/etc/nova`` for everyone to find
Dean Troyer8421c2b2015-03-16 13:52:19 -0500302 sudo install -d -o $STACK_USER $NOVA_CONF_DIR
Dean Troyerbf67c192012-09-21 15:09:37 -0500303
yuntongjinf26deea2015-02-28 10:50:34 +0800304 install_default_policy nova
Dean Troyerbf67c192012-09-21 15:09:37 -0500305
Ian Wienandc6782412015-05-14 10:01:53 +1000306 configure_rootwrap nova
Dean Troyerbf67c192012-09-21 15:09:37 -0500307
Joe Gordonea70cc92014-11-25 19:07:11 -0800308 if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then
Dean Troyerbf67c192012-09-21 15:09:37 -0500309 # Get the sample configuration file in place
310 cp $NOVA_DIR/etc/nova/api-paste.ini $NOVA_CONF_DIR
Ken'ichi Ohmichi0f176d82014-12-03 01:24:47 +0000311
312 # For testing v21 is equivalent to v2
313 if [[ "$NOVA_API_VERSION" == "v21default" ]]; then
314 sed -i s/": openstack_compute_api_v2$"/": openstack_compute_api_v21"/ "$NOVA_API_PASTE_INI"
315 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500316 fi
317
318 if is_service_enabled n-cpu; then
319 # Force IP forwarding on, just on case
320 sudo sysctl -w net.ipv4.ip_forward=1
321
Bob Ballb1e49bf2013-05-30 16:47:19 +0100322 if [[ "$VIRT_DRIVER" = 'libvirt' ]]; then
Bob Ballb1e49bf2013-05-30 16:47:19 +0100323 # Check for kvm (hardware based virtualization). If unable to initialize
324 # kvm, we drop back to the slower emulation mode (qemu). Note: many systems
325 # come with hardware virtualization disabled in BIOS.
326 if [[ "$LIBVIRT_TYPE" == "kvm" ]]; then
327 sudo modprobe kvm || true
328 if [ ! -e /dev/kvm ]; then
329 echo "WARNING: Switching to QEMU"
330 LIBVIRT_TYPE=qemu
331 if which selinuxenabled 2>&1 > /dev/null && selinuxenabled; then
332 # https://bugzilla.redhat.com/show_bug.cgi?id=753589
333 sudo setsebool virt_use_execmem on
334 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500335 fi
336 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500337
Bob Ballb1e49bf2013-05-30 16:47:19 +0100338 # Install and configure **LXC** if specified. LXC is another approach to
339 # splitting a system into many smaller parts. LXC uses cgroups and chroot
340 # to simulate multiple systems.
341 if [[ "$LIBVIRT_TYPE" == "lxc" ]]; then
342 if is_ubuntu; then
343 if [[ ! "$DISTRO" > natty ]]; then
Dean Troyer0038a1a2014-07-25 15:27:54 -0500344 local cgline="none /cgroup cgroup cpuacct,memory,devices,cpu,freezer,blkio 0 0"
Bob Ballb1e49bf2013-05-30 16:47:19 +0100345 sudo mkdir -p /cgroup
346 if ! grep -q cgroup /etc/fstab; then
347 echo "$cgline" | sudo tee -a /etc/fstab
348 fi
349 if ! mount -n | grep -q cgroup; then
350 sudo mount /cgroup
351 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500352 fi
Matt Riedemanndca06dc2015-08-20 13:56:57 -0700353
354 # enable nbd for lxc unless you're using an lvm backend
355 # otherwise you can't boot instances
356 if [[ "$NOVA_BACKEND" != "LVM" ]]; then
357 sudo modprobe nbd
358 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500359 fi
360 fi
361 fi
362
Dean Troyerbf67c192012-09-21 15:09:37 -0500363 # Instance Storage
364 # ----------------
365
366 # Nova stores each instance in its own directory.
Dean Troyer8421c2b2015-03-16 13:52:19 -0500367 sudo install -d -o $STACK_USER $NOVA_INSTANCES_PATH
Dean Troyerbf67c192012-09-21 15:09:37 -0500368
369 # You can specify a different disk to be mounted and used for backing the
370 # virtual machines. If there is a partition labeled nova-instances we
371 # mount it (ext filesystems can be labeled via e2label).
372 if [ -L /dev/disk/by-label/nova-instances ]; then
373 if ! mount -n | grep -q $NOVA_INSTANCES_PATH; then
374 sudo mount -L nova-instances $NOVA_INSTANCES_PATH
Attila Fazekas91b8d132013-01-06 22:40:09 +0100375 sudo chown -R $STACK_USER $NOVA_INSTANCES_PATH
Dean Troyerbf67c192012-09-21 15:09:37 -0500376 fi
377 fi
Ralf Haferkamp65aaa182014-04-15 17:40:26 +0200378 if is_suse; then
379 # iscsid is not started by default
380 start_service iscsid
381 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500382 fi
Dean Troyer8c032d12013-09-23 13:53:13 -0500383
384 # Rebuild the config file from scratch
385 create_nova_conf
386
Sergey Skripnicka99b8692014-03-05 14:47:58 +0200387 if is_service_enabled n-cpu && [[ -r $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER ]]; then
Dean Troyer8c032d12013-09-23 13:53:13 -0500388 # Configure hypervisor plugin
389 configure_nova_hypervisor
390 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500391}
392
Dean Troyera0dce262012-12-11 16:52:37 -0600393# create_nova_accounts() - Set up common required nova accounts
Chris Dent67bc8e82014-10-08 12:07:46 +0100394#
Dean Troyer42a59c22014-03-03 14:31:29 -0600395# Project User Roles
Dean Troyera0dce262012-12-11 16:52:37 -0600396# ------------------------------------------------------------------
Dean Troyer42a59c22014-03-03 14:31:29 -0600397# SERVICE_TENANT_NAME nova admin
398# SERVICE_TENANT_NAME nova ResellerAdmin (if Swift is enabled)
Chris Dent67bc8e82014-10-08 12:07:46 +0100399function create_nova_accounts {
Dean Troyera0dce262012-12-11 16:52:37 -0600400
Dean Troyera0dce262012-12-11 16:52:37 -0600401 # Nova
402 if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100403
Jamie Lennoxe8bc2b82015-02-10 20:38:56 +1100404 # NOTE(jamielennox): Nova doesn't need the admin role here, however neutron uses
405 # this service user when notifying nova of changes and that requires the admin role.
Jamie Lennox85ff5322015-01-28 14:28:01 +1000406 create_service_user "nova" "admin"
Bartosz Górski0abde392014-02-28 14:15:19 +0100407
Dean Troyera0dce262012-12-11 16:52:37 -0600408 if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
Marian Horbane62c9062015-06-24 16:25:16 -0400409 local nova_api_url
410 if [[ "$NOVA_USE_MOD_WSGI" == "False" ]]; then
411 nova_api_url="$NOVA_SERVICE_PROTOCOL://$NOVA_SERVICE_HOST:$NOVA_SERVICE_PORT"
412 else
413 nova_api_url="$NOVA_SERVICE_PROTOCOL://$NOVA_SERVICE_HOST/compute"
414 fi
Jamie Lennoxb17ad752015-05-29 06:04:47 +0000415
416 get_or_create_service "nova" "compute" "Nova Compute Service"
417 get_or_create_endpoint "compute" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100418 "$REGION_NAME" \
Marian Horbane62c9062015-06-24 16:25:16 -0400419 "$nova_api_url/v2/\$(tenant_id)s" \
420 "$nova_api_url/v2/\$(tenant_id)s" \
421 "$nova_api_url/v2/\$(tenant_id)s"
Ken'ichi Ohmichi3feaa382014-09-25 00:49:57 +0000422
Jamie Lennoxb17ad752015-05-29 06:04:47 +0000423 get_or_create_service "novav21" "computev21" "Nova Compute Service V2.1"
424 get_or_create_endpoint "computev21" \
Ken'ichi Ohmichi3feaa382014-09-25 00:49:57 +0000425 "$REGION_NAME" \
Marian Horbane62c9062015-06-24 16:25:16 -0400426 "$nova_api_url/v2.1/\$(tenant_id)s" \
427 "$nova_api_url/v2.1/\$(tenant_id)s" \
428 "$nova_api_url/v2.1/\$(tenant_id)s"
Dean Troyera0dce262012-12-11 16:52:37 -0600429 fi
430 fi
Dean Troyer42a59c22014-03-03 14:31:29 -0600431
432 if is_service_enabled n-api; then
433 # Swift
434 if is_service_enabled swift; then
435 # Nova needs ResellerAdmin role to download images when accessing
436 # swift through the s3 api.
Jamie Lennox9b215db2015-02-10 18:19:57 +1100437 get_or_add_user_project_role ResellerAdmin nova $SERVICE_TENANT_NAME
Dean Troyer42a59c22014-03-03 14:31:29 -0600438 fi
439
440 # EC2
441 if [[ "$KEYSTONE_CATALOG_BACKEND" = "sql" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100442
Jamie Lennoxb17ad752015-05-29 06:04:47 +0000443 get_or_create_service "ec2" "ec2" "EC2 Compatibility Layer"
444 get_or_create_endpoint "ec2" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100445 "$REGION_NAME" \
Andrey Pavlov0ea8b722015-02-06 22:37:53 +0300446 "$EC2_SERVICE_PROTOCOL://$SERVICE_HOST:8773/" \
447 "$EC2_SERVICE_PROTOCOL://$SERVICE_HOST:8773/" \
448 "$EC2_SERVICE_PROTOCOL://$SERVICE_HOST:8773/"
Dean Troyer42a59c22014-03-03 14:31:29 -0600449 fi
450 fi
451
452 # S3
453 if is_service_enabled n-obj swift3; then
454 if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100455
Jamie Lennoxb17ad752015-05-29 06:04:47 +0000456 get_or_create_service "s3" "s3" "S3"
457 get_or_create_endpoint "s3" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100458 "$REGION_NAME" \
459 "http://$SERVICE_HOST:$S3_SERVICE_PORT" \
460 "http://$SERVICE_HOST:$S3_SERVICE_PORT" \
461 "http://$SERVICE_HOST:$S3_SERVICE_PORT"
Dean Troyer42a59c22014-03-03 14:31:29 -0600462 fi
463 fi
Dean Troyera0dce262012-12-11 16:52:37 -0600464}
465
Dean Troyerda7b8092012-10-08 18:12:14 -0500466# create_nova_conf() - Create a new nova.conf file
Ian Wienandaee18c72014-02-21 15:35:08 +1100467function create_nova_conf {
Dean Troyerbf67c192012-09-21 15:09:37 -0500468 # Remove legacy ``nova.conf``
469 rm -f $NOVA_DIR/bin/nova.conf
470
471 # (Re)create ``nova.conf``
Dean Troyer3cf1ffb2012-10-02 11:51:27 -0500472 rm -f $NOVA_CONF
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800473 iniset $NOVA_CONF DEFAULT verbose "True"
Ben Nemec03997942013-08-10 09:56:16 -0500474 iniset $NOVA_CONF DEFAULT debug "$ENABLE_DEBUG_LOG_LEVEL"
Joe Gordon18d62982014-10-28 13:37:15 -0700475 if [ "$NOVA_ALLOW_MOVE_TO_SAME_HOST" == "True" ]; then
476 iniset $NOVA_CONF DEFAULT allow_resize_to_same_host "True"
Joe Gordon18d62982014-10-28 13:37:15 -0700477 fi
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800478 iniset $NOVA_CONF DEFAULT api_paste_config "$NOVA_API_PASTE_INI"
479 iniset $NOVA_CONF DEFAULT rootwrap_config "$NOVA_CONF_DIR/rootwrap.conf"
Scott Moser50686e52013-07-17 11:32:35 -0400480 iniset $NOVA_CONF DEFAULT scheduler_driver "$SCHEDULER"
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800481 iniset $NOVA_CONF DEFAULT dhcpbridge_flagfile "$NOVA_CONF"
482 iniset $NOVA_CONF DEFAULT force_dhcp_release "True"
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800483 iniset $NOVA_CONF DEFAULT default_floating_pool "$PUBLIC_NETWORK_NAME"
484 iniset $NOVA_CONF DEFAULT s3_host "$SERVICE_HOST"
485 iniset $NOVA_CONF DEFAULT s3_port "$S3_SERVICE_PORT"
Brian Haley180f5eb2015-06-16 13:14:31 -0400486 if [[ $SERVICE_IP_VERSION == 6 ]]; then
487 iniset $NOVA_CONF DEFAULT my_ip "$HOST_IPV6"
488 iniset $NOVA_CONF DEFAULT use_ipv6 "True"
489 else
490 iniset $NOVA_CONF DEFAULT my_ip "$HOST_IP"
491 fi
Joe Gordon23d6d502015-03-06 15:24:22 -0800492 iniset $NOVA_CONF database connection `database_connection_url nova`
Dan Smith03786b12015-06-10 11:31:51 -0700493 iniset $NOVA_CONF api_database connection `database_connection_url nova_api`
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800494 iniset $NOVA_CONF DEFAULT instance_name_template "${INSTANCE_NAME_PREFIX}%08x"
Brian Haley180f5eb2015-06-16 13:14:31 -0400495 iniset $NOVA_CONF DEFAULT osapi_compute_listen "$NOVA_SERVICE_LISTEN_ADDRESS"
496 iniset $NOVA_CONF DEFAULT ec2_listen "$NOVA_SERVICE_LISTEN_ADDRESS"
497 iniset $NOVA_CONF DEFAULT metadata_listen "$NOVA_SERVICE_LISTEN_ADDRESS"
498 iniset $NOVA_CONF DEFAULT s3_listen "$NOVA_SERVICE_LISTEN_ADDRESS"
Dean Troyerbf67c192012-09-21 15:09:37 -0500499
Ralf Haferkamp55dd68a2014-04-11 17:08:28 +0200500 if is_fedora || is_suse; then
501 # nova defaults to /usr/local/bin, but fedora and suse pip like to
Ian Wienand00fd79d2013-06-06 11:19:16 +1000502 # install things in /usr/bin
503 iniset $NOVA_CONF DEFAULT bindir "/usr/bin"
504 fi
505
Dean Troyerbf67c192012-09-21 15:09:37 -0500506 if is_service_enabled n-api; then
Joe Gordond73af872014-02-06 15:33:52 -0800507 if is_service_enabled n-api-meta; then
508 # If running n-api-meta as a separate service
509 NOVA_ENABLED_APIS=$(echo $NOVA_ENABLED_APIS | sed "s/,metadata//")
510 fi
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800511 iniset $NOVA_CONF DEFAULT enabled_apis "$NOVA_ENABLED_APIS"
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600512 if is_service_enabled tls-proxy; then
513 # Set the service port for a proxy to take the original
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800514 iniset $NOVA_CONF DEFAULT osapi_compute_listen_port "$NOVA_SERVICE_PORT_INT"
Rob Crittenden6254d5f2015-06-05 11:58:15 -0400515 iniset $NOVA_CONF DEFAULT osapi_compute_link_prefix $NOVA_SERVICE_PROTOCOL://$NOVA_SERVICE_HOST:$NOVA_SERVICE_PORT
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600516 fi
Dan Prince741fc5c2013-10-16 17:48:16 -0400517
Brant Knudson05952372014-09-19 17:22:22 -0500518 configure_auth_token_middleware $NOVA_CONF nova $NOVA_AUTH_CACHE_DIR
Dean Troyerbf67c192012-09-21 15:09:37 -0500519 fi
Dan Prince741fc5c2013-10-16 17:48:16 -0400520
Rob Crittenden18d47782014-03-19 17:47:42 -0400521 if is_service_enabled cinder; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400522 if is_ssl_enabled_service "cinder" || is_service_enabled tls-proxy; then
523 CINDER_SERVICE_HOST=${CINDER_SERVICE_HOST:-$SERVICE_HOST}
524 CINDER_SERVICE_PORT=${CINDER_SERVICE_PORT:-8776}
Jamie Lennox55c7ebb2014-11-25 12:08:55 +1000525 iniset $NOVA_CONF cinder cafile $SSL_BUNDLE_FILE
Rob Crittenden18d47782014-03-19 17:47:42 -0400526 fi
527 fi
528
Dean Troyerbf67c192012-09-21 15:09:37 -0500529 if [ -n "$NOVA_STATE_PATH" ]; then
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800530 iniset $NOVA_CONF DEFAULT state_path "$NOVA_STATE_PATH"
Joe Gordon23d6d502015-03-06 15:24:22 -0800531 iniset $NOVA_CONF oslo_concurrency lock_path "$NOVA_STATE_PATH"
Dean Troyerbf67c192012-09-21 15:09:37 -0500532 fi
533 if [ -n "$NOVA_INSTANCES_PATH" ]; then
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800534 iniset $NOVA_CONF DEFAULT instances_path "$NOVA_INSTANCES_PATH"
Dean Troyerbf67c192012-09-21 15:09:37 -0500535 fi
536 if [ "$MULTI_HOST" != "False" ]; then
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800537 iniset $NOVA_CONF DEFAULT multi_host "True"
538 iniset $NOVA_CONF DEFAULT send_arp_for_ha "True"
Dean Troyerbf67c192012-09-21 15:09:37 -0500539 fi
540 if [ "$SYSLOG" != "False" ]; then
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800541 iniset $NOVA_CONF DEFAULT use_syslog "True"
Dean Troyerbf67c192012-09-21 15:09:37 -0500542 fi
Dan Prince24f6efa2013-10-31 10:27:58 -0400543 if [ "$FORCE_CONFIG_DRIVE" != "False" ]; then
544 iniset $NOVA_CONF DEFAULT force_config_drive "$FORCE_CONFIG_DRIVE"
545 fi
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700546 # Format logging
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400547 if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ] && [ "$NOVA_USE_MOD_WSGI" == "False" ] ; then
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700548 setup_colorized_logging $NOVA_CONF DEFAULT
Dean Troyerbf67c192012-09-21 15:09:37 -0500549 else
550 # Show user_name and project_name instead of user_id and project_id
Joe Gordon07db7132013-01-30 13:07:25 -0800551 iniset $NOVA_CONF DEFAULT logging_context_format_string "%(asctime)s.%(msecs)03d %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s"
Dean Troyerbf67c192012-09-21 15:09:37 -0500552 fi
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400553 if [ "$NOVA_USE_MOD_WSGI" == "True" ]; then
554 _config_nova_apache_wsgi
555 fi
556
Eoghan Glynn1fcc6a12012-10-25 14:57:14 +0000557 if is_service_enabled ceilometer; then
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800558 iniset $NOVA_CONF DEFAULT instance_usage_audit "True"
559 iniset $NOVA_CONF DEFAULT instance_usage_audit_period "hour"
Julien Danjoua9787d02013-07-02 11:30:40 +0200560 iniset $NOVA_CONF DEFAULT notify_on_state_change "vm_and_task_state"
Julien Danjouca920572014-02-03 15:26:20 +0100561 iniset $NOVA_CONF DEFAULT notification_driver "messaging"
Eoghan Glynn1fcc6a12012-10-25 14:57:14 +0000562 fi
563
Dean Troyerb3236912013-03-17 15:17:05 -0500564 # All nova-compute workers need to know the vnc configuration options
565 # These settings don't hurt anything if n-xvnc and n-novnc are disabled
566 if is_service_enabled n-cpu; then
567 NOVNCPROXY_URL=${NOVNCPROXY_URL:-"http://$SERVICE_HOST:6080/vnc_auto.html"}
568 iniset $NOVA_CONF DEFAULT novncproxy_base_url "$NOVNCPROXY_URL"
569 XVPVNCPROXY_URL=${XVPVNCPROXY_URL:-"http://$SERVICE_HOST:6081/console"}
570 iniset $NOVA_CONF DEFAULT xvpvncproxy_base_url "$XVPVNCPROXY_URL"
571 SPICEHTML5PROXY_URL=${SPICEHTML5PROXY_URL:-"http://$SERVICE_HOST:6082/spice_auto.html"}
572 iniset $NOVA_CONF spice html5proxy_base_url "$SPICEHTML5PROXY_URL"
573 fi
Dean Troyerb3236912013-03-17 15:17:05 -0500574
Robbie Harwood (frozencemetery)4e07fdc2014-07-14 18:11:39 -0400575 if is_service_enabled n-novnc || is_service_enabled n-xvnc || [ "$NOVA_VNC_ENABLED" != False ]; then
Sean Dague101b4242013-10-22 08:47:11 -0400576 # Address on which instance vncservers will listen on compute hosts.
577 # For multi-host, this should be the management ip of the compute host.
Brian Haley180f5eb2015-06-16 13:14:31 -0400578 VNCSERVER_LISTEN=${VNCSERVER_LISTEN=$NOVA_SERVICE_LOCAL_HOST}
579 VNCSERVER_PROXYCLIENT_ADDRESS=${VNCSERVER_PROXYCLIENT_ADDRESS=$NOVA_SERVICE_LOCAL_HOST}
Sean Dague101b4242013-10-22 08:47:11 -0400580 iniset $NOVA_CONF DEFAULT vnc_enabled true
581 iniset $NOVA_CONF DEFAULT vncserver_listen "$VNCSERVER_LISTEN"
582 iniset $NOVA_CONF DEFAULT vncserver_proxyclient_address "$VNCSERVER_PROXYCLIENT_ADDRESS"
Brian Haley180f5eb2015-06-16 13:14:31 -0400583 iniset $NOVA_CONF DEFAULT novncproxy_host "$NOVA_SERVICE_LISTEN_ADDRESS"
584 iniset $NOVA_CONF DEFAULT xvpvncproxy_host "$NOVA_SERVICE_LISTEN_ADDRESS"
Dean Troyerb3236912013-03-17 15:17:05 -0500585 else
Sean Dague101b4242013-10-22 08:47:11 -0400586 iniset $NOVA_CONF DEFAULT vnc_enabled false
Dean Troyerb3236912013-03-17 15:17:05 -0500587 fi
588
589 if is_service_enabled n-spice; then
Sean Dague101b4242013-10-22 08:47:11 -0400590 # Address on which instance spiceservers will listen on compute hosts.
591 # For multi-host, this should be the management ip of the compute host.
Brian Haley180f5eb2015-06-16 13:14:31 -0400592 SPICESERVER_PROXYCLIENT_ADDRESS=${SPICESERVER_PROXYCLIENT_ADDRESS=$NOVA_SERVICE_LOCAL_HOST}
593 SPICESERVER_LISTEN=${SPICESERVER_LISTEN=$NOVA_SERVICE_LOCAL_HOST}
Sean Dague101b4242013-10-22 08:47:11 -0400594 iniset $NOVA_CONF spice enabled true
595 iniset $NOVA_CONF spice server_listen "$SPICESERVER_LISTEN"
596 iniset $NOVA_CONF spice server_proxyclient_address "$SPICESERVER_PROXYCLIENT_ADDRESS"
Brian Haley180f5eb2015-06-16 13:14:31 -0400597 iniset $NOVA_CONF spice html5proxy_host "$NOVA_SERVICE_LISTEN_ADDRESS"
Dean Troyerb3236912013-03-17 15:17:05 -0500598 else
Sean Dague101b4242013-10-22 08:47:11 -0400599 iniset $NOVA_CONF spice enabled false
Dean Troyerb3236912013-03-17 15:17:05 -0500600 fi
601
602 iniset $NOVA_CONF DEFAULT ec2_dmz_host "$EC2_DMZ_HOST"
Rob Crittenden18d47782014-03-19 17:47:42 -0400603 iniset $NOVA_CONF DEFAULT keystone_ec2_url $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/v2.0/ec2tokens
Brant Knudson2dd110c2015-03-14 12:39:14 -0500604 iniset_rpc_backend nova $NOVA_CONF
Rob Crittenden18d47782014-03-19 17:47:42 -0400605 iniset $NOVA_CONF glance api_servers "${GLANCE_SERVICE_PROTOCOL}://${GLANCE_HOSTPORT}"
Bob Ball2f720502014-08-28 14:50:04 +0100606
Joe Gordon1f79bad2014-09-26 09:59:47 -0700607 iniset $NOVA_CONF DEFAULT osapi_compute_workers "$API_WORKERS"
Dean Troyer05bd7b82014-09-16 17:25:33 -0500608 iniset $NOVA_CONF DEFAULT ec2_workers "$API_WORKERS"
609 iniset $NOVA_CONF DEFAULT metadata_workers "$API_WORKERS"
Sean Dague1ce19ab2015-09-23 10:36:53 -0400610 # don't let the conductor get out of control now that we're using a pure python db driver
611 iniset $NOVA_CONF conductor workers "$API_WORKERS"
Rob Crittenden18d47782014-03-19 17:47:42 -0400612
Ethan Lynn679f3952015-03-09 23:45:18 +0800613 iniset $NOVA_CONF cinder os_region_name "$REGION_NAME"
614
Daniel Genind4708672014-10-31 15:01:29 -0400615 if [[ "$NOVA_BACKEND" == "LVM" ]]; then
616 iniset $NOVA_CONF libvirt images_type "lvm"
617 iniset $NOVA_CONF libvirt images_volume_group $DEFAULT_VOLUME_GROUP_NAME
618 fi
619
Rob Crittenden18d47782014-03-19 17:47:42 -0400620 if is_ssl_enabled_service glance || is_service_enabled tls-proxy; then
621 iniset $NOVA_CONF DEFAULT glance_protocol https
622 fi
623
624 # Register SSL certificates if provided
625 if is_ssl_enabled_service nova; then
626 ensure_certificates NOVA
627
628 iniset $NOVA_CONF DEFAULT ssl_cert_file "$NOVA_SSL_CERT"
629 iniset $NOVA_CONF DEFAULT ssl_key_file "$NOVA_SSL_KEY"
630
631 iniset $NOVA_CONF DEFAULT enabled_ssl_apis "$NOVA_ENABLED_APIS"
632 fi
633
634 if is_service_enabled tls-proxy; then
635 iniset $NOVA_CONF DEFAULT ec2_listen_port $EC2_SERVICE_PORT_INT
636 fi
Tony Breedsa339efc2014-12-04 16:52:58 +1100637
638 if is_service_enabled n-sproxy; then
Brian Haley180f5eb2015-06-16 13:14:31 -0400639 iniset $NOVA_CONF serial_console serialproxy_host "$NOVA_SERVICE_LISTEN_ADDRESS"
Tony Breedsa339efc2014-12-04 16:52:58 +1100640 iniset $NOVA_CONF serial_console enabled True
641 fi
Dean Troyerda7b8092012-10-08 18:12:14 -0500642}
Dean Troyerbf67c192012-09-21 15:09:37 -0500643
Ian Wienandaee18c72014-02-21 15:35:08 +1100644function init_nova_cells {
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000645 if is_service_enabled n-cell; then
646 cp $NOVA_CONF $NOVA_CELLS_CONF
Joe Gordon23d6d502015-03-06 15:24:22 -0800647 iniset $NOVA_CELLS_CONF database connection `database_connection_url $NOVA_CELLS_DB`
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000648 iniset $NOVA_CELLS_CONF DEFAULT rabbit_virtual_host child_cell
649 iniset $NOVA_CELLS_CONF DEFAULT dhcpbridge_flagfile $NOVA_CELLS_CONF
650 iniset $NOVA_CELLS_CONF cells enable True
Chris Behrensc62c2b92013-07-24 03:56:13 -0700651 iniset $NOVA_CELLS_CONF cells cell_type compute
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000652 iniset $NOVA_CELLS_CONF cells name child
653
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000654 iniset $NOVA_CONF cells enable True
Chris Behrensc62c2b92013-07-24 03:56:13 -0700655 iniset $NOVA_CONF cells cell_type api
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000656 iniset $NOVA_CONF cells name region
657
658 if is_service_enabled n-api-meta; then
659 NOVA_ENABLED_APIS=$(echo $NOVA_ENABLED_APIS | sed "s/,metadata//")
660 iniset $NOVA_CONF DEFAULT enabled_apis $NOVA_ENABLED_APIS
661 iniset $NOVA_CELLS_CONF DEFAULT enabled_apis metadata
662 fi
663
664 $NOVA_BIN_DIR/nova-manage --config-file $NOVA_CELLS_CONF db sync
Abhishek Chandad5b74c62014-12-12 02:15:55 +0530665 $NOVA_BIN_DIR/nova-manage --config-file $NOVA_CELLS_CONF cell create --name=region --cell_type=parent --username=$RABBIT_USERID --hostname=$RABBIT_HOST --port=5672 --password=$RABBIT_PASSWORD --virtual_host=/ --woffset=0 --wscale=1
666 $NOVA_BIN_DIR/nova-manage cell create --name=child --cell_type=child --username=$RABBIT_USERID --hostname=$RABBIT_HOST --port=5672 --password=$RABBIT_PASSWORD --virtual_host=child_cell --woffset=0 --wscale=1
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000667 fi
668}
669
Dean Troyerf03bafe2013-02-12 10:58:28 -0600670# create_nova_cache_dir() - Part of the init_nova() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100671function create_nova_cache_dir {
Dean Troyerf03bafe2013-02-12 10:58:28 -0600672 # Create cache dir
Dean Troyer8421c2b2015-03-16 13:52:19 -0500673 sudo install -d -o $STACK_USER $NOVA_AUTH_CACHE_DIR
Dean Troyerf03bafe2013-02-12 10:58:28 -0600674 rm -f $NOVA_AUTH_CACHE_DIR/*
675}
676
Ian Wienandaee18c72014-02-21 15:35:08 +1100677function create_nova_conf_nova_network {
Dean Troyerb3236912013-03-17 15:17:05 -0500678 iniset $NOVA_CONF DEFAULT network_manager "nova.network.manager.$NETWORK_MANAGER"
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800679 iniset $NOVA_CONF DEFAULT public_interface "$PUBLIC_INTERFACE"
680 iniset $NOVA_CONF DEFAULT vlan_interface "$VLAN_INTERFACE"
681 iniset $NOVA_CONF DEFAULT flat_network_bridge "$FLAT_NETWORK_BRIDGE"
Akihiro MOTOKI66afb472012-12-21 15:34:13 +0900682 if [ -n "$FLAT_INTERFACE" ]; then
Devananda van der Veen9bc47db2012-12-12 16:52:55 -0800683 iniset $NOVA_CONF DEFAULT flat_interface "$FLAT_INTERFACE"
Akihiro MOTOKI66afb472012-12-21 15:34:13 +0900684 fi
685}
686
Dean Troyerf03bafe2013-02-12 10:58:28 -0600687# create_nova_keys_dir() - Part of the init_nova() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100688function create_nova_keys_dir {
Dean Troyerf03bafe2013-02-12 10:58:28 -0600689 # Create keys dir
Dean Troyer8421c2b2015-03-16 13:52:19 -0500690 sudo install -d -o $STACK_USER ${NOVA_STATE_PATH} ${NOVA_STATE_PATH}/keys
Dean Troyerf03bafe2013-02-12 10:58:28 -0600691}
692
Dean Troyerda7b8092012-10-08 18:12:14 -0500693# init_nova() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100694function init_nova {
Dean Troyerf03bafe2013-02-12 10:58:28 -0600695 # All nova components talk to a central database.
696 # Only do this step once on the API node for an entire cluster.
Bob Melanderc439b5d2012-12-19 14:49:34 +0100697 if is_service_enabled $DATABASE_BACKENDS && is_service_enabled n-api; then
Dean Troyerbf67c192012-09-21 15:09:37 -0500698 # (Re)create nova database
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200699 recreate_database nova
Dean Troyerbf67c192012-09-21 15:09:37 -0500700
Dean Troyerf03bafe2013-02-12 10:58:28 -0600701 # Migrate nova database
Dean Troyerbf67c192012-09-21 15:09:37 -0500702 $NOVA_BIN_DIR/nova-manage db sync
Devananda van der Veenf35cf912012-11-12 17:58:38 -0800703
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000704 if is_service_enabled n-cell; then
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200705 recreate_database $NOVA_CELLS_DB
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000706 fi
Dan Smith03786b12015-06-10 11:31:51 -0700707
708 recreate_database $NOVA_API_DB
709 $NOVA_BIN_DIR/nova-manage api_db sync
Dean Troyerbf67c192012-09-21 15:09:37 -0500710 fi
711
Dean Troyerf03bafe2013-02-12 10:58:28 -0600712 create_nova_cache_dir
713 create_nova_keys_dir
Maru Newbyc070a3d2015-01-27 17:44:44 +0000714
715 if [[ "$NOVA_BACKEND" == "LVM" ]]; then
716 init_default_lvm_volume_group
717 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500718}
719
720# install_novaclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100721function install_novaclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500722 if use_library_from_git "python-novaclient"; then
723 git_clone_by_name "python-novaclient"
724 setup_dev_lib "python-novaclient"
725 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-novaclient"]}/tools/,/etc/bash_completion.d/}nova.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100726 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500727}
728
729# install_nova() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100730function install_nova {
Dean Troyer8c032d12013-09-23 13:53:13 -0500731 if is_service_enabled n-cpu && [[ -r $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER ]]; then
732 install_nova_hypervisor
Dean Troyerbf67c192012-09-21 15:09:37 -0500733 fi
734
Attila Fazekas5a35e732013-10-29 08:23:43 +0100735 if is_service_enabled n-novnc; then
736 # a websockets/html5 or flash powered VNC console for vm instances
Sean Dague53753292014-12-04 19:38:15 -0500737 NOVNC_FROM_PACKAGE=$(trueorfalse False NOVNC_FROM_PACKAGE)
Ben Nemecadd4ca32013-11-08 17:22:51 +0000738 if [ "$NOVNC_FROM_PACKAGE" = "True" ]; then
Attila Fazekas5a35e732013-10-29 08:23:43 +0100739 NOVNC_WEB_DIR=/usr/share/novnc
740 install_package novnc
741 else
742 NOVNC_WEB_DIR=$DEST/noVNC
743 git_clone $NOVNC_REPO $NOVNC_WEB_DIR $NOVNC_BRANCH
744 fi
745 fi
746
747 if is_service_enabled n-spice; then
748 # a websockets/html5 or flash powered SPICE console for vm instances
Sean Dague53753292014-12-04 19:38:15 -0500749 SPICE_FROM_PACKAGE=$(trueorfalse True SPICE_FROM_PACKAGE)
Ben Nemecadd4ca32013-11-08 17:22:51 +0000750 if [ "$SPICE_FROM_PACKAGE" = "True" ]; then
Attila Fazekas5a35e732013-10-29 08:23:43 +0100751 SPICE_WEB_DIR=/usr/share/spice-html5
752 install_package spice-html5
753 else
754 SPICE_WEB_DIR=$DEST/spice-html5
755 git_clone $SPICE_REPO $SPICE_WEB_DIR $SPICE_BRANCH
756 fi
757 fi
758
Dean Troyerbf67c192012-09-21 15:09:37 -0500759 git_clone $NOVA_REPO $NOVA_DIR $NOVA_BRANCH
Dean Troyer253a1a32013-04-01 18:23:22 -0500760 setup_develop $NOVA_DIR
Attila Fazekasfac533e2013-08-14 16:04:01 +0200761 sudo install -D -m 0644 -o $STACK_USER {$NOVA_DIR/tools/,/etc/bash_completion.d/}nova-manage.bash_completion
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400762
763 if [ "$NOVA_USE_MOD_WSGI" == "True" ]; then
764 install_apache_wsgi
765 if is_ssl_enabled_service "nova-api"; then
766 enable_mod_ssl
767 fi
768 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500769}
770
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600771# start_nova_api() - Start the API process ahead of other things
Ian Wienandaee18c72014-02-21 15:35:08 +1100772function start_nova_api {
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600773 # Get right service port for testing
774 local service_port=$NOVA_SERVICE_PORT
Rob Crittenden18d47782014-03-19 17:47:42 -0400775 local service_protocol=$NOVA_SERVICE_PROTOCOL
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600776 if is_service_enabled tls-proxy; then
777 service_port=$NOVA_SERVICE_PORT_INT
Rob Crittenden18d47782014-03-19 17:47:42 -0400778 service_protocol="http"
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600779 fi
780
Dean Troyer4533eee2015-02-17 16:25:38 -0600781 # Hack to set the path for rootwrap
782 local old_path=$PATH
783 export PATH=$NOVA_BIN_DIR:$PATH
784
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400785 # If the site is not enabled then we are in a grenade scenario
786 local enabled_site_file=$(apache_site_config_for nova-api)
787 if [ -f ${enabled_site_file} ] && [ "$NOVA_USE_MOD_WSGI" == "True" ]; then
788 enable_apache_site nova-api
789 enable_apache_site nova-ec2-api
790 restart_apache_server
Marian Horban13f65572015-06-10 14:34:22 -0400791 tail_log nova-api /var/log/$APACHE_NAME/nova-api.log
792 tail_log nova-ec2-api /var/log/$APACHE_NAME/nova-ec2-api.log
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400793 else
794 run_process n-api "$NOVA_BIN_DIR/nova-api"
795 fi
796
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600797 echo "Waiting for nova-api to start..."
Rob Crittenden18d47782014-03-19 17:47:42 -0400798 if ! wait_for_service $SERVICE_TIMEOUT $service_protocol://$SERVICE_HOST:$service_port; then
Sean Dague101b4242013-10-22 08:47:11 -0400799 die $LINENO "nova-api did not start"
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600800 fi
801
802 # Start proxies if enabled
803 if is_service_enabled tls-proxy; then
804 start_tls_proxy '*' $NOVA_SERVICE_PORT $NOVA_SERVICE_HOST $NOVA_SERVICE_PORT_INT &
Rob Crittenden18d47782014-03-19 17:47:42 -0400805 start_tls_proxy '*' $EC2_SERVICE_PORT $NOVA_SERVICE_HOST $EC2_SERVICE_PORT_INT &
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600806 fi
Dean Troyer4533eee2015-02-17 16:25:38 -0600807
808 export PATH=$old_path
Dean Troyer3a3a2ba2012-12-11 15:26:24 -0600809}
810
Dan Smith2e159462013-10-21 13:06:11 -0700811# start_nova_compute() - Start the compute process
Ian Wienandaee18c72014-02-21 15:35:08 +1100812function start_nova_compute {
Dean Troyer4533eee2015-02-17 16:25:38 -0600813 # Hack to set the path for rootwrap
814 local old_path=$PATH
815 export PATH=$NOVA_BIN_DIR:$PATH
816
Chris Behrens6db29902013-10-22 09:22:36 -0700817 if is_service_enabled n-cell; then
818 local compute_cell_conf=$NOVA_CELLS_CONF
819 else
820 local compute_cell_conf=$NOVA_CONF
821 fi
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000822
Bob Ballb1e49bf2013-05-30 16:47:19 +0100823 if [[ "$VIRT_DRIVER" = 'libvirt' ]]; then
824 # The group **$LIBVIRT_GROUP** is added to the current user in this script.
Dean Troyer3324f192014-09-18 09:26:39 -0500825 # ``sg`` is used in run_process to execute nova-compute as a member of the
Chris Dent2f27a0e2014-09-09 13:46:02 +0100826 # **$LIBVIRT_GROUP** group.
827 run_process n-cpu "$NOVA_BIN_DIR/nova-compute --config-file $compute_cell_conf" $LIBVIRT_GROUP
Joe Gordon2c94ee52013-08-02 02:02:01 +0000828 elif [[ "$VIRT_DRIVER" = 'fake' ]]; then
Dean Troyer0038a1a2014-07-25 15:27:54 -0500829 local i
Sean Dague101b4242013-10-22 08:47:11 -0400830 for i in `seq 1 $NUMBER_FAKE_NOVA_COMPUTE`; do
Chris Dent2f27a0e2014-09-09 13:46:02 +0100831 # Avoid process redirection of fake host configurations by
832 # creating or modifying real configurations. Each fake
833 # gets its own configuration and own log file.
834 local fake_conf="${NOVA_FAKE_CONF}-${i}"
835 iniset $fake_conf DEFAULT nhost "${HOSTNAME}${i}"
836 run_process "n-cpu-${i}" "$NOVA_BIN_DIR/nova-compute --config-file $compute_cell_conf --config-file $fake_conf"
Sean Dague101b4242013-10-22 08:47:11 -0400837 done
Bob Ballb1e49bf2013-05-30 16:47:19 +0100838 else
Dean Troyer2aa2a892013-08-04 19:53:19 -0500839 if is_service_enabled n-cpu && [[ -r $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER ]]; then
840 start_nova_hypervisor
841 fi
Chris Dent2f27a0e2014-09-09 13:46:02 +0100842 run_process n-cpu "$NOVA_BIN_DIR/nova-compute --config-file $compute_cell_conf"
Bob Ballb1e49bf2013-05-30 16:47:19 +0100843 fi
Dean Troyer4533eee2015-02-17 16:25:38 -0600844
845 export PATH=$old_path
Dan Smith2e159462013-10-21 13:06:11 -0700846}
847
848# start_nova() - Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100849function start_nova_rest {
Dean Troyer4533eee2015-02-17 16:25:38 -0600850 # Hack to set the path for rootwrap
851 local old_path=$PATH
852 export PATH=$NOVA_BIN_DIR:$PATH
853
Chris Behrens86199fc2013-10-23 02:54:53 -0700854 local api_cell_conf=$NOVA_CONF
Dan Smith2e159462013-10-21 13:06:11 -0700855 if is_service_enabled n-cell; then
Chris Behrens86199fc2013-10-23 02:54:53 -0700856 local compute_cell_conf=$NOVA_CELLS_CONF
857 else
858 local compute_cell_conf=$NOVA_CONF
Dan Smith2e159462013-10-21 13:06:11 -0700859 fi
860
Chris Dent2f27a0e2014-09-09 13:46:02 +0100861 # ``run_process`` checks ``is_service_enabled``, it is not needed here
862 run_process n-cond "$NOVA_BIN_DIR/nova-conductor --config-file $compute_cell_conf"
863 run_process n-cell-region "$NOVA_BIN_DIR/nova-cells --config-file $api_cell_conf"
864 run_process n-cell-child "$NOVA_BIN_DIR/nova-cells --config-file $compute_cell_conf"
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000865
Chris Dent2f27a0e2014-09-09 13:46:02 +0100866 run_process n-crt "$NOVA_BIN_DIR/nova-cert --config-file $api_cell_conf"
867 run_process n-net "$NOVA_BIN_DIR/nova-network --config-file $compute_cell_conf"
868 run_process n-sch "$NOVA_BIN_DIR/nova-scheduler --config-file $compute_cell_conf"
869 run_process n-api-meta "$NOVA_BIN_DIR/nova-api-metadata --config-file $compute_cell_conf"
Chris Behrens86199fc2013-10-23 02:54:53 -0700870
Chris Dent2f27a0e2014-09-09 13:46:02 +0100871 run_process n-novnc "$NOVA_BIN_DIR/nova-novncproxy --config-file $api_cell_conf --web $NOVNC_WEB_DIR"
872 run_process n-xvnc "$NOVA_BIN_DIR/nova-xvpvncproxy --config-file $api_cell_conf"
873 run_process n-spice "$NOVA_BIN_DIR/nova-spicehtml5proxy --config-file $api_cell_conf --web $SPICE_WEB_DIR"
874 run_process n-cauth "$NOVA_BIN_DIR/nova-consoleauth --config-file $api_cell_conf"
Tony Breedsa339efc2014-12-04 16:52:58 +1100875 run_process n-sproxy "$NOVA_BIN_DIR/nova-serialproxy --config-file $api_cell_conf"
Dean Troyer1c6c1122013-03-27 17:40:53 -0500876
877 # Starting the nova-objectstore only if swift3 service is not enabled.
878 # Swift will act as s3 objectstore.
879 is_service_enabled swift3 || \
Chris Dent2f27a0e2014-09-09 13:46:02 +0100880 run_process n-obj "$NOVA_BIN_DIR/nova-objectstore --config-file $api_cell_conf"
Dean Troyer4533eee2015-02-17 16:25:38 -0600881
882 export PATH=$old_path
Dean Troyerbf67c192012-09-21 15:09:37 -0500883}
884
Ian Wienandaee18c72014-02-21 15:35:08 +1100885function start_nova {
Dan Smith2e159462013-10-21 13:06:11 -0700886 start_nova_rest
Li Ma26ac3d72014-12-21 23:41:07 -0800887 start_nova_compute
Dan Smith2e159462013-10-21 13:06:11 -0700888}
889
Joe Gordon767b5a42014-03-12 10:33:15 -0700890function stop_nova_compute {
Adam Gandelmand29ca352014-10-06 14:33:59 -0700891 if [ "$VIRT_DRIVER" == "fake" ]; then
892 local i
893 for i in `seq 1 $NUMBER_FAKE_NOVA_COMPUTE`; do
894 stop_process n-cpu-${i}
895 done
896 else
897 stop_process n-cpu
898 fi
Joe Gordon767b5a42014-03-12 10:33:15 -0700899 if is_service_enabled n-cpu && [[ -r $NOVA_PLUGINS/hypervisor-$VIRT_DRIVER ]]; then
900 stop_nova_hypervisor
901 fi
902}
903
904function stop_nova_rest {
Davanum Srinivasd5537c12015-04-30 21:10:48 -0400905 if [ "$NOVA_USE_MOD_WSGI" == "True" ]; then
906 disable_apache_site nova-api
907 disable_apache_site nova-ec2-api
908 restart_apache_server
909 else
910 stop_process n-api
911 fi
Dean Troyerbf67c192012-09-21 15:09:37 -0500912 # Kill the nova screen windows
Kieran Spearfb2a3ae2013-03-11 23:55:49 +0000913 # Some services are listed here twice since more than one instance
914 # of a service may be running in certain configs.
Tony Breedsa339efc2014-12-04 16:52:58 +1100915 for serv in n-api n-crt n-net n-sch n-novnc n-xvnc n-cauth n-spice n-cond n-cell n-cell n-api-meta n-obj n-sproxy; do
Chris Dent2f27a0e2014-09-09 13:46:02 +0100916 stop_process $serv
Dean Troyerbf67c192012-09-21 15:09:37 -0500917 done
Joe Gordon767b5a42014-03-12 10:33:15 -0700918}
919
920# stop_nova() - Stop running processes (non-screen)
921function stop_nova {
922 stop_nova_rest
923 stop_nova_compute
Dean Troyerbf67c192012-09-21 15:09:37 -0500924}
925
Dean Troyercc6b4432013-04-08 15:38:03 -0500926
Dean Troyerbf67c192012-09-21 15:09:37 -0500927# Restore xtrace
928$XTRACE
Sean Dague584d90e2013-03-29 14:34:53 -0400929
Adam Spiers6a5aa7c2013-10-24 11:27:02 +0100930# Tell emacs to use shell-script-mode
931## Local variables:
932## mode: shell-script
933## End: