blob: f3c05377e386bbd21555913394f3f511521cf11d [file] [log] [blame]
Jesse Andrewsba23cc72011-09-11 03:22:13 -07001#!/usr/bin/env bash
2
Dean Troyerc6c1d432012-03-27 20:59:22 -05003# ``stack.sh`` is an opinionated OpenStack developer installation. It
4# installs and configures various combinations of **Glance**, **Horizon**,
5# **Keystone**, **Melange**, **Nova**, **Quantum** and **Swift**
Jesse Andrewsba23cc72011-09-11 03:22:13 -07006
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07007# This script allows you to specify configuration options of what git
Jesse Andrews5372f432011-10-03 01:08:24 -04008# repositories to use, enabled services, network configuration and various
9# passwords. If you are crafty you can run the script on multiple nodes using
10# shared settings for common resources (mysql, rabbitmq) and build a multi-node
11# developer install.
Jesse Andrews782b9912011-10-02 16:53:21 -040012
Jesse Andrews38df1222011-11-20 09:55:44 -080013# To keep this script simple we assume you are running on an **Ubuntu 11.10
Dean Troyerc6c1d432012-03-27 20:59:22 -050014# Oneiric** or **Ubuntu 12.04 Precise** machine. It should work in a VM or
15# physical server. Additionally we put the list of ``apt`` and ``pip``
16# dependencies and other configuration files in this repo. So start by
17# grabbing this script and the dependencies.
Jesse Andrews24859062011-09-15 21:28:23 -070018
Jesse Andrews0e7e8972011-10-02 16:36:54 -040019# Learn more and get the most recent version at http://devstack.org
Jesse Andrews6edd17f2011-09-15 22:19:42 -070020
Dean Troyerc6c1d432012-03-27 20:59:22 -050021# Keep track of the devstack directory
Jesse Andrews51fb22e2011-10-19 09:24:17 -070022TOP_DIR=$(cd $(dirname "$0") && pwd)
23
Dean Troyer6563a3c2012-01-31 12:11:56 -060024# Import common functions
Dean Troyerc6c1d432012-03-27 20:59:22 -050025source $TOP_DIR/functions
Dean Troyer6563a3c2012-01-31 12:11:56 -060026
Dean Troyerc6c1d432012-03-27 20:59:22 -050027# Determine what system we are running on. This provides ``os_VENDOR``,
28# ``os_RELEASE``, ``os_UPDATE``, ``os_PACKAGE``, ``os_CODENAME``
29GetOSVersion
30
31# Translate the OS version values into common nomenclature
32if [[ "$os_VENDOR" =~ (Ubuntu) ]]; then
33 # 'Everyone' refers to Ubuntu releases by the code name adjective
34 DISTRO=$os_CODENAME
Dean Troyer5218d452012-02-04 02:13:23 -060035elif [[ "$os_VENDOR" =~ (Fedora) ]]; then
36 # For Fedora, just use 'f' and the release
37 DISTRO="f$os_RELEASE"
Dean Troyerc6c1d432012-03-27 20:59:22 -050038else
39 # Catch-all for now is Vendor + Release + Update
40 DISTRO="$os_VENDOR-$os_RELEASE.$os_UPDATE"
Jesse Andrews6edd17f2011-09-15 22:19:42 -070041fi
42
Anthony Young6015c822011-10-12 07:17:11 +000043
Scott Moserf9da5082011-10-07 21:28:00 -040044# Settings
45# ========
46
Dean Troyerdf0972c2012-03-07 17:31:03 -060047# ``stack.sh`` is customizable through setting environment variables. If you
48# want to override a setting you can set and export it::
Scott Moserf9da5082011-10-07 21:28:00 -040049#
Anthony Young7a549f42011-10-12 07:13:13 +000050# export MYSQL_PASSWORD=anothersecret
Scott Moserf9da5082011-10-07 21:28:00 -040051# ./stack.sh
52#
Anthony Young7a549f42011-10-12 07:13:13 +000053# You can also pass options on a single line ``MYSQL_PASSWORD=simple ./stack.sh``
Scott Moserf9da5082011-10-07 21:28:00 -040054#
Dean Troyerdf0972c2012-03-07 17:31:03 -060055# Additionally, you can put any local variables into a ``localrc`` file::
Scott Moserf9da5082011-10-07 21:28:00 -040056#
Anthony Young7a549f42011-10-12 07:13:13 +000057# MYSQL_PASSWORD=anothersecret
Scott Moserf9da5082011-10-07 21:28:00 -040058# MYSQL_USER=hellaroot
59#
60# We try to have sensible defaults, so you should be able to run ``./stack.sh``
61# in most cases.
62#
Dean Troyerdf0972c2012-03-07 17:31:03 -060063# DevStack distributes ``stackrc`` which contains locations for the OpenStack
64# repositories and branches to configure. ``stackrc`` sources ``localrc`` to
Dean Troyerc6c1d432012-03-27 20:59:22 -050065# allow you to safely override those settings without being overwritten
Dean Troyerdf0972c2012-03-07 17:31:03 -060066# when updating DevStack.
Dean Troyerbbafb1b2012-06-11 16:51:39 -050067if [[ ! -r $TOP_DIR/stackrc ]]; then
68 echo "ERROR: missing $TOP_DIR/stackrc - did you grab more than just stack.sh?"
69 exit 1
70fi
71source $TOP_DIR/stackrc
Dean Troyerdf0972c2012-03-07 17:31:03 -060072
Dean Troyerc6c1d432012-03-27 20:59:22 -050073# HTTP and HTTPS proxy servers are supported via the usual environment variables
74# ``http_proxy`` and ``https_proxy``. They can be set in ``localrc`` if necessary
75# or on the command line::
Dean Troyerc727aa82012-01-13 12:13:59 -060076#
77# http_proxy=http://proxy.example.com:3128/ ./stack.sh
Dean Troyerbbafb1b2012-06-11 16:51:39 -050078if [[ -n "$http_proxy" ]]; then
79 export http_proxy=$http_proxy
Dean Troyerc6c1d432012-03-27 20:59:22 -050080fi
Dean Troyerbbafb1b2012-06-11 16:51:39 -050081if [[ -n "$https_proxy" ]]; then
82 export https_proxy=$https_proxy
83fi
Scott Moserf9da5082011-10-07 21:28:00 -040084
Jesse Andrews6edd17f2011-09-15 22:19:42 -070085# Destination path for installation ``DEST``
Anthony Younge8fed482011-09-26 19:50:43 -070086DEST=${DEST:-/opt/stack}
Jesse Andrewsba23cc72011-09-11 03:22:13 -070087
Dean Troyerc6c1d432012-03-27 20:59:22 -050088
89# Sanity Check
90# ============
91
92# Warn users who aren't on an explicitly supported distro, but allow them to
93# override check and attempt installation with ``FORCE=yes ./stack``
Chuck Short73812ae2012-05-03 13:28:21 -040094if [[ ! ${DISTRO} =~ (oneiric|precise|quantal|f16) ]]; then
Dean Troyer5218d452012-02-04 02:13:23 -060095 echo "WARNING: this script has been tested on oneiric, precise and f16"
Dean Troyerc6c1d432012-03-27 20:59:22 -050096 if [[ "$FORCE" != "yes" ]]; then
97 echo "If you wish to run this script anyway run with FORCE=yes"
98 exit 1
99 fi
100fi
101
Russell Bryant4a221452012-03-13 13:44:12 -0400102if [ "${DISTRO}" = "oneiric" ] && is_service_enabled qpid ; then
103 # Qpid was introduced in precise
104 echo "You must use Ubuntu Precise or newer for Qpid support."
105 exit 1
106fi
107
Dean Troyer5218d452012-02-04 02:13:23 -0600108# Set the paths of certain binaries
109if [[ "$os_PACKAGE" = "deb" ]]; then
110 NOVA_ROOTWRAP=/usr/local/bin/nova-rootwrap
111else
112 NOVA_ROOTWRAP=/usr/bin/nova-rootwrap
113fi
114
Dean Troyerc6c1d432012-03-27 20:59:22 -0500115# stack.sh keeps the list of ``apt`` and ``pip`` dependencies in external
116# files, along with config templates and other useful files. You can find these
117# in the ``files`` directory (next to this script). We will reference this
118# directory using the ``FILES`` variable in this script.
119FILES=$TOP_DIR/files
120if [ ! -d $FILES ]; then
121 echo "ERROR: missing devstack/files - did you grab more than just stack.sh?"
122 exit 1
123fi
124
125# Check to see if we are already running DevStack
Chmouel Boudjnah44b57362012-02-07 18:13:44 +0100126if type -p screen >/dev/null && screen -ls | egrep -q "[0-9].stack"; then
Anthony Young55458452011-12-17 00:21:49 +0000127 echo "You are already running a stack.sh session."
128 echo "To rejoin this session type 'screen -x stack'."
129 echo "To destroy this session, kill the running screen."
130 exit 1
131fi
Todd Willey0a161452011-10-28 02:34:19 -0400132
Tres Henryca85b792011-10-28 14:00:21 -0700133# OpenStack is designed to be run as a regular user (Horizon will fail to run
Dean Troyer9122e7b2011-10-17 14:07:11 -0500134# as root, since apache refused to startup serve content from root user). If
Dean Troyerdf0972c2012-03-07 17:31:03 -0600135# ``stack.sh`` is run as **root**, it automatically creates a **stack** user with
Dean Troyer9122e7b2011-10-17 14:07:11 -0500136# sudo privileges and runs as that user.
137
138if [[ $EUID -eq 0 ]]; then
James E. Blair92e81992011-10-11 09:26:29 -0500139 ROOTSLEEP=${ROOTSLEEP:-10}
Dean Troyer9122e7b2011-10-17 14:07:11 -0500140 echo "You are running this script as root."
James E. Blair92e81992011-10-11 09:26:29 -0500141 echo "In $ROOTSLEEP seconds, we will create a user 'stack' and run as that user"
142 sleep $ROOTSLEEP
Dean Troyer9122e7b2011-10-17 14:07:11 -0500143
144 # since this script runs as a normal user, we need to give that user
145 # ability to run sudo
Dean Troyer5218d452012-02-04 02:13:23 -0600146 if [[ "$os_PACKAGE" = "deb" ]]; then
147 dpkg -l sudo || apt_get update && install_package sudo
148 STACK_GROUP=sudo
149 else
150 rpm -qa | grep sudo || install_package sudo
151 STACK_GROUP=wheel
152 fi
Dean Troyer9122e7b2011-10-17 14:07:11 -0500153 if ! getent passwd stack >/dev/null; then
154 echo "Creating a user called stack"
Dean Troyer5218d452012-02-04 02:13:23 -0600155 useradd -U -G $STACK_GROUP -s /bin/bash -d $DEST -m stack
Dean Troyer9122e7b2011-10-17 14:07:11 -0500156 fi
157
158 echo "Giving stack user passwordless sudo priviledges"
Jesse Andrews38df1222011-11-20 09:55:44 -0800159 # some uec images sudoers does not have a '#includedir'. add one.
Dean Troyer9122e7b2011-10-17 14:07:11 -0500160 grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||
161 echo "#includedir /etc/sudoers.d" >> /etc/sudoers
162 ( umask 226 && echo "stack ALL=(ALL) NOPASSWD:ALL" \
163 > /etc/sudoers.d/50_stack_sh )
164
165 echo "Copying files to stack user"
166 STACK_DIR="$DEST/${PWD##*/}"
Dean Troyer0c3db252011-12-15 12:00:31 -0600167 cp -r -f -T "$PWD" "$STACK_DIR"
Jesse Andrews5f4ae102011-11-06 07:47:09 -0800168 chown -R stack "$STACK_DIR"
Dean Troyer9122e7b2011-10-17 14:07:11 -0500169 if [[ "$SHELL_AFTER_RUN" != "no" ]]; then
170 exec su -c "set -e; cd $STACK_DIR; bash stack.sh; bash" stack
171 else
172 exec su -c "set -e; cd $STACK_DIR; bash stack.sh" stack
173 fi
174 exit 1
Jesse Andrews509992f2011-10-27 11:18:09 -0700175else
Dean Troyere0d677c2012-03-07 14:11:33 -0600176 # We're not root, make sure sudo is available
Dean Troyer5218d452012-02-04 02:13:23 -0600177 if [[ "$os_PACKAGE" = "deb" ]]; then
178 CHECK_SUDO_CMD="dpkg -l sudo"
179 else
180 CHECK_SUDO_CMD="rpm -q sudo"
181 fi
182 $CHECK_SUDO_CMD || die "Sudo is required. Re-run stack.sh as root ONE TIME ONLY to set up sudo."
Dean Troyere0d677c2012-03-07 14:11:33 -0600183
184 # UEC images /etc/sudoers does not have a '#includedir'. add one.
Jesse Andrews84a399b2011-10-27 11:20:38 -0700185 sudo grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||
186 echo "#includedir /etc/sudoers.d" | sudo tee -a /etc/sudoers
Dean Troyere0d677c2012-03-07 14:11:33 -0600187
188 # Set up devstack sudoers
Todd Willey0a161452011-10-28 02:34:19 -0400189 TEMPFILE=`mktemp`
Dean Troyere0d677c2012-03-07 14:11:33 -0600190 echo "`whoami` ALL=(root) NOPASSWD:ALL" >$TEMPFILE
Todd Willey0a161452011-10-28 02:34:19 -0400191 chmod 0440 $TEMPFILE
192 sudo chown root:root $TEMPFILE
Dean Troyere0d677c2012-03-07 14:11:33 -0600193 sudo mv $TEMPFILE /etc/sudoers.d/50_stack_sh
194
Dean Troyere0d677c2012-03-07 14:11:33 -0600195 # Remove old file
196 sudo rm -f /etc/sudoers.d/stack_sh_nova
Dean Troyer9122e7b2011-10-17 14:07:11 -0500197fi
198
Dean Troyerdf0972c2012-03-07 17:31:03 -0600199# Set True to configure ``stack.sh`` to run cleanly without Internet access.
200# ``stack.sh`` must have been previously run with Internet access to install
201# prerequisites and initialize ``$DEST``.
Dean Troyer25dab662011-12-16 22:40:46 -0600202OFFLINE=`trueorfalse False $OFFLINE`
203
Jesse Andrews6f3baaf2011-09-12 11:59:38 -0700204# Set the destination directories for openstack projects
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700205NOVA_DIR=$DEST/nova
Tres Henryca85b792011-10-28 14:00:21 -0700206HORIZON_DIR=$DEST/horizon
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700207GLANCE_DIR=$DEST/glance
Dean Troyer45495252012-04-13 13:16:38 -0500208GLANCECLIENT_DIR=$DEST/python-glanceclient
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700209KEYSTONE_DIR=$DEST/keystone
210NOVACLIENT_DIR=$DEST/python-novaclient
Anthony Young52e631d2011-12-27 22:22:14 -0800211KEYSTONECLIENT_DIR=$DEST/python-keystoneclient
Andrew Bogott77a4e3a2012-05-01 00:07:29 -0500212OPENSTACKCLIENT_DIR=$DEST/python-openstackclient
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700213NOVNC_DIR=$DEST/noVNC
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100214SWIFT_DIR=$DEST/swift
Joe Gordon42b1aa92012-05-24 14:11:01 -0700215SWIFT3_DIR=$DEST/swift3
Chmouel Boudjnahfda9df82012-05-22 10:27:08 +0000216SWIFTCLIENT_DIR=$DEST/python-swiftclient
Brad Hall1bfa3d52011-10-27 18:18:20 -0700217QUANTUM_DIR=$DEST/quantum
Dave Lapsley5a09c922012-01-25 17:22:15 -0500218QUANTUM_CLIENT_DIR=$DEST/python-quantumclient
Jason Kölker64a90662012-01-23 11:17:27 -0600219MELANGE_DIR=$DEST/melange
220MELANGECLIENT_DIR=$DEST/python-melangeclient
Brad Hall1bfa3d52011-10-27 18:18:20 -0700221
222# Default Quantum Plugin
223Q_PLUGIN=${Q_PLUGIN:-openvswitch}
Brad Hallf1f3a8f2011-12-12 23:04:58 +0000224# Default Quantum Port
225Q_PORT=${Q_PORT:-9696}
226# Default Quantum Host
227Q_HOST=${Q_HOST:-localhost}
Anthony Younga8416442011-09-13 20:07:44 -0700228
Jason Kölker64a90662012-01-23 11:17:27 -0600229# Default Melange Port
230M_PORT=${M_PORT:-9898}
231# Default Melange Host
232M_HOST=${M_HOST:-localhost}
233# Melange MAC Address Range
Aaron Lee690e1e32012-03-08 09:57:30 -0800234M_MAC_RANGE=${M_MAC_RANGE:-FE-EE-DD-00-00-00/24}
Jason Kölker64a90662012-01-23 11:17:27 -0600235
Jesse Andrewsd02b7b72011-11-14 08:59:05 -0800236# Name of the lvm volume group to use/create for iscsi volumes
237VOLUME_GROUP=${VOLUME_GROUP:-nova-volumes}
Dean Troyer2229a6e2011-12-01 17:02:07 -0600238VOLUME_NAME_PREFIX=${VOLUME_NAME_PREFIX:-volume-}
Anthony Young55458452011-12-17 00:21:49 +0000239INSTANCE_NAME_PREFIX=${INSTANCE_NAME_PREFIX:-instance-}
Jesse Andrewsd02b7b72011-11-14 08:59:05 -0800240
Dean Troyerdf0972c2012-03-07 17:31:03 -0600241# Nova hypervisor configuration. We default to libvirt with **kvm** but will
242# drop back to **qemu** if we are unable to load the kvm module. ``stack.sh`` can
Anthony Youngb62b4ca2011-10-26 22:29:08 -0700243# also install an **LXC** based system.
244VIRT_DRIVER=${VIRT_DRIVER:-libvirt}
Jesse Andrews782b9912011-10-02 16:53:21 -0400245LIBVIRT_TYPE=${LIBVIRT_TYPE:-kvm}
246
Vishvananda Ishaya51aa4012012-03-06 12:45:19 -0800247# Nova supports pluggable schedulers. ``FilterScheduler`` should work in most
248# cases.
249SCHEDULER=${SCHEDULER:-nova.scheduler.filter_scheduler.FilterScheduler}
Jesse Andrews782b9912011-10-02 16:53:21 -0400250
rootb1153412012-01-19 13:28:21 -0800251HOST_IP_IFACE=${HOST_IP_IFACE:-eth0}
Anthony Young7c259ce2011-11-07 13:18:28 -0600252# Use the eth0 IP unless an explicit is set by ``HOST_IP`` environment variable
rootb1153412012-01-19 13:28:21 -0800253if [ -z "$HOST_IP" -o "$HOST_IP" == "dhcp" ]; then
254 HOST_IP=`LC_ALL=C /sbin/ifconfig ${HOST_IP_IFACE} | grep -m 1 'inet addr:'| cut -d: -f2 | awk '{print $1}'`
Anthony Younga3475e52011-11-07 13:24:00 -0600255 if [ "$HOST_IP" = "" ]; then
Anthony Young857035d2011-11-07 14:02:13 -0600256 echo "Could not determine host ip address."
rootb1153412012-01-19 13:28:21 -0800257 echo "Either localrc specified dhcp on ${HOST_IP_IFACE} or defaulted to eth0"
Anthony Young7c259ce2011-11-07 13:18:28 -0600258 exit 1
259 fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700260fi
261
Anthony Young1097c7c2011-12-27 23:22:14 -0800262# Allow the use of an alternate hostname (such as localhost/127.0.0.1) for service endpoints.
263SERVICE_HOST=${SERVICE_HOST:-$HOST_IP}
264
Dean Troyerdf0972c2012-03-07 17:31:03 -0600265# Configure services to use syslog instead of writing to individual log files
Dean Troyerff603ef2011-11-22 17:48:10 -0600266SYSLOG=`trueorfalse False $SYSLOG`
267SYSLOG_HOST=${SYSLOG_HOST:-$HOST_IP}
268SYSLOG_PORT=${SYSLOG_PORT:-516}
269
Vishvananda Ishaya6f13ba32012-06-01 23:17:38 +0000270# Use color for logging output
271LOG_COLOR=`trueorfalse True $LOG_COLOR`
272
Dean Troyer2bbcd682011-11-05 16:19:03 -0500273# Service startup timeout
274SERVICE_TIMEOUT=${SERVICE_TIMEOUT:-60}
275
Anthony Young7a549f42011-10-12 07:13:13 +0000276# Generic helper to configure passwords
277function read_password {
278 set +o xtrace
279 var=$1; msg=$2
280 pw=${!var}
281
Anthony Youngb4db2252011-10-12 14:08:08 -0700282 localrc=$TOP_DIR/localrc
Anthony Young6015c822011-10-12 07:17:11 +0000283
Anthony Young7a549f42011-10-12 07:13:13 +0000284 # If the password is not defined yet, proceed to prompt user for a password.
285 if [ ! $pw ]; then
286 # If there is no localrc file, create one
Anthony Youngb4db2252011-10-12 14:08:08 -0700287 if [ ! -e $localrc ]; then
288 touch $localrc
Anthony Young7a549f42011-10-12 07:13:13 +0000289 fi
290
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700291 # Presumably if we got this far it can only be that our localrc is missing
Anthony Young7a549f42011-10-12 07:13:13 +0000292 # the required password. Prompt user for a password and write to localrc.
Anthony Youngb4db2252011-10-12 14:08:08 -0700293 echo ''
294 echo '################################################################################'
295 echo $msg
296 echo '################################################################################'
Dean Troyer4e6a2b72011-12-29 17:27:45 -0600297 echo "This value will be written to your localrc file so you don't have to enter it "
298 echo "again. Use only alphanumeric characters."
Anthony Youngb4db2252011-10-12 14:08:08 -0700299 echo "If you leave this blank, a random default value will be used."
Dean Troyer4e6a2b72011-12-29 17:27:45 -0600300 pw=" "
301 while true; do
302 echo "Enter a password now:"
303 read -e $var
304 pw=${!var}
305 [[ "$pw" = "`echo $pw | tr -cd [:alnum:]`" ]] && break
306 echo "Invalid chars in password. Try again:"
307 done
Anthony Youngb4db2252011-10-12 14:08:08 -0700308 if [ ! $pw ]; then
309 pw=`openssl rand -hex 10`
Anthony Young7a549f42011-10-12 07:13:13 +0000310 fi
Anthony Youngb4db2252011-10-12 14:08:08 -0700311 eval "$var=$pw"
312 echo "$var=$pw" >> $localrc
Anthony Young7a549f42011-10-12 07:13:13 +0000313 fi
314 set -o xtrace
315}
316
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500317
Jesse Andrews782b9912011-10-02 16:53:21 -0400318# Nova Network Configuration
319# --------------------------
320
Dean Troyerdf0972c2012-03-07 17:31:03 -0600321# FIXME: more documentation about why these are important options. Also
322# we should make sure we use the same variable names as the option names.
Jesse Andrews5372f432011-10-03 01:08:24 -0400323
John Garbutt8e2cffd2012-03-02 16:22:07 +0000324if [ "$VIRT_DRIVER" = 'xenserver' ]; then
325 PUBLIC_INTERFACE_DEFAULT=eth3
326 # allow build_domU.sh to specify the flat network bridge via kernel args
Renuka Apte0af143b2012-04-02 15:46:53 -0700327 FLAT_NETWORK_BRIDGE_DEFAULT=$(grep -o 'flat_network_bridge=[[:alnum:]]*' /proc/cmdline | cut -d= -f 2 | sort -u)
John Garbutt8e2cffd2012-03-02 16:22:07 +0000328 GUEST_INTERFACE_DEFAULT=eth1
329else
330 PUBLIC_INTERFACE_DEFAULT=br100
331 FLAT_NETWORK_BRIDGE_DEFAULT=br100
332 GUEST_INTERFACE_DEFAULT=eth0
333fi
334
335PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-$PUBLIC_INTERFACE_DEFAULT}
Anthony Young00596bb2011-12-16 20:23:07 +0000336PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-br100}
Jesse Andrewsb5197e42011-09-26 12:48:31 -0700337FIXED_RANGE=${FIXED_RANGE:-10.0.0.0/24}
338FIXED_NETWORK_SIZE=${FIXED_NETWORK_SIZE:-256}
Anthony Young0e74ecb2011-10-27 13:21:52 -0700339FLOATING_RANGE=${FLOATING_RANGE:-172.24.4.224/28}
Jesse Andrewsa72f7ad2011-09-25 13:41:22 -0700340NET_MAN=${NET_MAN:-FlatDHCPManager}
Anthony Young1097c7c2011-12-27 23:22:14 -0800341EC2_DMZ_HOST=${EC2_DMZ_HOST:-$SERVICE_HOST}
John Garbutt8e2cffd2012-03-02 16:22:07 +0000342FLAT_NETWORK_BRIDGE=${FLAT_NETWORK_BRIDGE:-$FLAT_NETWORK_BRIDGE_DEFAULT}
343VLAN_INTERFACE=${VLAN_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400344
Dean Troyer696ad332012-01-10 15:34:34 -0600345# Test floating pool and range are used for testing. They are defined
346# here until the admin APIs can replace nova-manage
347TEST_FLOATING_POOL=${TEST_FLOATING_POOL:-test}
348TEST_FLOATING_RANGE=${TEST_FLOATING_RANGE:-192.168.253.0/29}
349
Dean Troyerdf0972c2012-03-07 17:31:03 -0600350# **MULTI_HOST** is a mode where each compute node runs its own network node. This
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400351# allows network operations and routing for a VM to occur on the server that is
352# running the VM - removing a SPOF and bandwidth bottleneck.
Armando Migliaccio7d13f302012-04-19 22:26:16 +0100353MULTI_HOST=`trueorfalse False $MULTI_HOST`
Jesse Andrews30f68e92011-09-13 00:59:54 -0700354
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700355# If you are using FlatDHCP on multiple hosts, set the ``FLAT_INTERFACE``
356# variable but make sure that the interface doesn't already have an
357# ip or you risk breaking things.
Jesse Andrews5372f432011-10-03 01:08:24 -0400358#
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700359# **DHCP Warning**: If your flat interface device uses DHCP, there will be a
360# hiccup while the network is moved from the flat interface to the flat network
361# bridge. This will happen when you launch your first instance. Upon launch
362# you will lose all connectivity to the node, and the vm launch will probably
Jesse Andrews5372f432011-10-03 01:08:24 -0400363# fail.
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700364#
365# If you are running on a single node and don't need to access the VMs from
Jesse Andrews5372f432011-10-03 01:08:24 -0400366# devices other than that node, you can set the flat interface to the same
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700367# value as ``FLAT_NETWORK_BRIDGE``. This will stop the network hiccup from
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100368# occurring.
John Garbutt8e2cffd2012-03-02 16:22:07 +0000369FLAT_INTERFACE=${FLAT_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700370
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400371## FIXME(ja): should/can we check that FLAT_INTERFACE is sane?
372
Brad Hall1bfa3d52011-10-27 18:18:20 -0700373# Using Quantum networking:
374#
Brad Hallf1f3a8f2011-12-12 23:04:58 +0000375# Make sure that quantum is enabled in ENABLED_SERVICES. If it is the network
376# manager will be set to the QuantumManager. If you want to run Quantum on
377# this host, make sure that q-svc is also in ENABLED_SERVICES.
Brad Hall1bfa3d52011-10-27 18:18:20 -0700378#
379# If you're planning to use the Quantum openvswitch plugin, set Q_PLUGIN to
380# "openvswitch" and make sure the q-agt service is enabled in
381# ENABLED_SERVICES.
382#
383# With Quantum networking the NET_MAN variable is ignored.
384
Jason Kölker64a90662012-01-23 11:17:27 -0600385# Using Melange IPAM:
386#
387# Make sure that quantum and melange are enabled in ENABLED_SERVICES.
388# If they are then the melange IPAM lib will be set in the QuantumManager.
389# Adding m-svc to ENABLED_SERVICES will start the melange service on this
390# host.
391
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700392
Russell Bryant4a221452012-03-13 13:44:12 -0400393# MySQL & (RabbitMQ or Qpid)
394# --------------------------
Jesse Andrews782b9912011-10-02 16:53:21 -0400395
Tres Henryca85b792011-10-28 14:00:21 -0700396# We configure Nova, Horizon, Glance and Keystone to use MySQL as their
Jesse Andrews782b9912011-10-02 16:53:21 -0400397# database server. While they share a single server, each has their own
398# database and tables.
399
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700400# By default this script will install and configure MySQL. If you want to
Jesse Andrews782b9912011-10-02 16:53:21 -0400401# use an existing server, you can pass in the user/password/host parameters.
Anthony Young7a549f42011-10-12 07:13:13 +0000402# You will need to send the same ``MYSQL_PASSWORD`` to every host if you are doing
Dean Troyerdf0972c2012-03-07 17:31:03 -0600403# a multi-node DevStack installation.
Jesse Andrewsa50a3462011-10-19 15:38:10 -0700404MYSQL_HOST=${MYSQL_HOST:-localhost}
Anthony Young320412b2011-09-14 02:39:10 -0700405MYSQL_USER=${MYSQL_USER:-root}
Anthony Young7a549f42011-10-12 07:13:13 +0000406read_password MYSQL_PASSWORD "ENTER A PASSWORD TO USE FOR MYSQL."
Jesse Andrews782b9912011-10-02 16:53:21 -0400407
Dean Troyerdf0972c2012-03-07 17:31:03 -0600408# NOTE: Don't specify /db in this string so we can use it for multiple services
Anthony Young7a549f42011-10-12 07:13:13 +0000409BASE_SQL_CONN=${BASE_SQL_CONN:-mysql://$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST}
Anthony Younga8416442011-09-13 20:07:44 -0700410
411# Rabbit connection info
Russell Bryant4a221452012-03-13 13:44:12 -0400412if is_service_enabled rabbit; then
413 RABBIT_HOST=${RABBIT_HOST:-localhost}
414 read_password RABBIT_PASSWORD "ENTER A PASSWORD TO USE FOR RABBIT."
415fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700416
Anthony Young377aae62011-09-14 09:55:31 -0700417# Glance connection info. Note the port must be specified.
Anthony Young1097c7c2011-12-27 23:22:14 -0800418GLANCE_HOSTPORT=${GLANCE_HOSTPORT:-$SERVICE_HOST:9292}
Anthony Young377aae62011-09-14 09:55:31 -0700419
Dean Troyerdf0972c2012-03-07 17:31:03 -0600420
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100421# SWIFT
422# -----
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100423# TODO: implement glance support
424# TODO: add logging to different location.
Chmouel Boudjnahb93478f2011-11-02 16:49:56 +0100425
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100426# By default the location of swift drives and objects is located inside
Dean Troyer1e51c112012-03-16 10:42:00 -0500427# the swift source directory. SWIFT_DATA_DIR variable allow you to redefine
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100428# this.
Dean Troyer1e51c112012-03-16 10:42:00 -0500429SWIFT_DATA_DIR=${SWIFT_DATA_DIR:-${DEST}/data/swift}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100430
Chmouel Boudjnah3a648262011-11-03 10:43:46 +0100431# We are going to have the configuration files inside the source
Dean Troyer1e51c112012-03-16 10:42:00 -0500432# directory, change SWIFT_CONFIG_DIR if you want to adjust that.
433SWIFT_CONFIG_DIR=${SWIFT_CONFIG_DIR:-/etc/swift}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100434
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100435# devstack will create a loop-back disk formatted as XFS to store the
436# swift data. By default the disk size is 1 gigabyte. The variable
437# SWIFT_LOOPBACK_DISK_SIZE specified in bytes allow you to change
438# that.
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100439SWIFT_LOOPBACK_DISK_SIZE=${SWIFT_LOOPBACK_DISK_SIZE:-1000000}
Anthony Young7a549f42011-10-12 07:13:13 +0000440
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100441# The ring uses a configurable number of bits from a path’s MD5 hash as
442# a partition index that designates a device. The number of bits kept
443# from the hash is known as the partition power, and 2 to the partition
444# power indicates the partition count. Partitioning the full MD5 hash
445# ring allows other parts of the cluster to work in batches of items at
446# once which ends up either more efficient or at least less complex than
447# working with each item separately or the entire cluster all at once.
448# By default we define 9 for the partition count (which mean 512).
Chmouel Boudjnaha2118982011-11-01 15:36:00 +0100449SWIFT_PARTITION_POWER_SIZE=${SWIFT_PARTITION_POWER_SIZE:-9}
450
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +0000451# This variable allows you to configure how many replicas you want to be
452# configured for your Swift cluster. By default the three replicas would need a
453# bit of IO and Memory on a VM you may want to lower that to 1 if you want to do
454# only some quick testing.
455SWIFT_REPLICAS=${SWIFT_REPLICAS:-3}
456
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000457if is_service_enabled swift; then
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +0000458 # If we are using swift, we can default the s3 port to swift instead
459 # of nova-objectstore
460 S3_SERVICE_PORT=${S3_SERVICE_PORT:-8080}
461 # We only ask for Swift Hash if we have enabled swift service.
Chmouel Boudjnahb2857e42011-11-03 16:19:14 +0100462 # SWIFT_HASH is a random unique string for a swift cluster that
463 # can never change.
464 read_password SWIFT_HASH "ENTER A RANDOM SWIFT HASH."
465fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -0700466
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +0000467# Set default port for nova-objectstore
468S3_SERVICE_PORT=${S3_SERVICE_PORT:-3333}
Dean Troyerdf0972c2012-03-07 17:31:03 -0600469
Jesse Andrews782b9912011-10-02 16:53:21 -0400470# Keystone
471# --------
472
Jesse Andrewsb96871e2011-10-02 09:02:46 -0700473# Service Token - Openstack components need to have an admin token
474# to validate user tokens.
Anthony Young7a549f42011-10-12 07:13:13 +0000475read_password SERVICE_TOKEN "ENTER A SERVICE_TOKEN TO USE FOR THE SERVICE ADMIN TOKEN."
Dean Troyerb3288382012-02-28 16:41:10 -0600476# Services authenticate to Identity with servicename/SERVICE_PASSWORD
477read_password SERVICE_PASSWORD "ENTER A SERVICE_PASSWORD TO USE FOR THE SERVICE AUTHENTICATION."
Tres Henryca85b792011-10-28 14:00:21 -0700478# Horizon currently truncates usernames and passwords at 20 characters
479read_password ADMIN_PASSWORD "ENTER A PASSWORD TO USE FOR HORIZON AND KEYSTONE (20 CHARS OR LESS)."
Jesse Andrewsb96871e2011-10-02 09:02:46 -0700480
Dean Troyerb3288382012-02-28 16:41:10 -0600481# Set the tenant for service accounts in Keystone
482SERVICE_TENANT_NAME=${SERVICE_TENANT_NAME:-service}
483
Dean Troyer6577b462012-01-16 22:27:20 -0600484# Set Keystone interface configuration
Dean Troyerb3288382012-02-28 16:41:10 -0600485KEYSTONE_API_PORT=${KEYSTONE_API_PORT:-5000}
Dean Troyer6577b462012-01-16 22:27:20 -0600486KEYSTONE_AUTH_HOST=${KEYSTONE_AUTH_HOST:-$SERVICE_HOST}
487KEYSTONE_AUTH_PORT=${KEYSTONE_AUTH_PORT:-35357}
488KEYSTONE_AUTH_PROTOCOL=${KEYSTONE_AUTH_PROTOCOL:-http}
489KEYSTONE_SERVICE_HOST=${KEYSTONE_SERVICE_HOST:-$SERVICE_HOST}
490KEYSTONE_SERVICE_PORT=${KEYSTONE_SERVICE_PORT:-5000}
491KEYSTONE_SERVICE_PROTOCOL=${KEYSTONE_SERVICE_PROTOCOL:-http}
492
Dean Troyerdf0972c2012-03-07 17:31:03 -0600493
Dean Troyer9bb84f02012-01-24 11:45:52 -0600494# Horizon
495# -------
496
497# Allow overriding the default Apache user and group, default both to
498# current user.
499APACHE_USER=${APACHE_USER:-$USER}
500APACHE_GROUP=${APACHE_GROUP:-$APACHE_USER}
501
Dean Troyerdf0972c2012-03-07 17:31:03 -0600502
Dean Troyer471de7a2011-12-27 11:45:55 -0600503# Log files
504# ---------
505
506# Set up logging for stack.sh
507# Set LOGFILE to turn on logging
508# We append '.xxxxxxxx' to the given name to maintain history
509# where xxxxxxxx is a representation of the date the file was created
Chmouel Boudjnahd966ed22012-03-05 12:42:48 +0000510if [[ -n "$LOGFILE" || -n "$SCREEN_LOGDIR" ]]; then
511 LOGDAYS=${LOGDAYS:-7}
512 TIMESTAMP_FORMAT=${TIMESTAMP_FORMAT:-"%F-%H%M%S"}
513 CURRENT_LOG_TIME=$(date "+$TIMESTAMP_FORMAT")
514fi
515
Dean Troyer471de7a2011-12-27 11:45:55 -0600516if [[ -n "$LOGFILE" ]]; then
517 # First clean up old log files. Use the user-specified LOGFILE
518 # as the template to search for, appending '.*' to match the date
519 # we added on earlier runs.
Dean Troyer471de7a2011-12-27 11:45:55 -0600520 LOGDIR=$(dirname "$LOGFILE")
521 LOGNAME=$(basename "$LOGFILE")
Chmouel Boudjnahfff6fec2012-03-09 15:37:56 +0000522 mkdir -p $LOGDIR
Dean Troyer471de7a2011-12-27 11:45:55 -0600523 find $LOGDIR -maxdepth 1 -name $LOGNAME.\* -mtime +$LOGDAYS -exec rm {} \;
524
Chmouel Boudjnahd966ed22012-03-05 12:42:48 +0000525 LOGFILE=$LOGFILE.${CURRENT_LOG_TIME}
Dean Troyer471de7a2011-12-27 11:45:55 -0600526 # Redirect stdout/stderr to tee to write the log file
527 exec 1> >( tee "${LOGFILE}" ) 2>&1
528 echo "stack.sh log $LOGFILE"
529 # Specified logfile name always links to the most recent log
530 ln -sf $LOGFILE $LOGDIR/$LOGNAME
531fi
532
Chmouel Boudjnahd966ed22012-03-05 12:42:48 +0000533# Set up logging of screen windows
534# Set SCREEN_LOGDIR to turn on logging of screen windows to the
535# directory specified in SCREEN_LOGDIR, we will log to the the file
536# screen-$SERVICE_NAME-$TIMESTAMP.log in that dir and have a link
537# screen-$SERVICE_NAME.log to the latest log file.
538# Logs are kept for as long specified in LOGDAYS.
539if [[ -n "$SCREEN_LOGDIR" ]]; then
540
541 # We make sure the directory is created.
542 if [[ -d "$SCREEN_LOGDIR" ]]; then
543 # We cleanup the old logs
544 find $SCREEN_LOGDIR -maxdepth 1 -name screen-\*.log -mtime +$LOGDAYS -exec rm {} \;
545 else
546 mkdir -p $SCREEN_LOGDIR
547 fi
548fi
549
Scott Moserf9da5082011-10-07 21:28:00 -0400550# So that errors don't compound we exit on any errors so you see only the
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100551# first error that occurred.
Scott Moserf9da5082011-10-07 21:28:00 -0400552trap failed ERR
553failed() {
554 local r=$?
555 set +o xtrace
556 [ -n "$LOGFILE" ] && echo "${0##*/} failed: full log in $LOGFILE"
557 exit $r
558}
559
560# Print the commands being run so that we can see the command that triggers
561# an error. It is also useful for following along as the install occurs.
562set -o xtrace
563
Jesse Andrewsfe95e0f2011-10-19 14:30:37 -0700564# create the destination directory and ensure it is writable by the user
Scott Moserf9da5082011-10-07 21:28:00 -0400565sudo mkdir -p $DEST
Jesse Andrewsfe95e0f2011-10-19 14:30:37 -0700566if [ ! -w $DEST ]; then
567 sudo chown `whoami` $DEST
568fi
Jesse Andrews53ed3872011-10-02 14:28:17 -0400569
Dean Troyerdf0972c2012-03-07 17:31:03 -0600570
Jesse Andrews30f68e92011-09-13 00:59:54 -0700571# Install Packages
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700572# ================
Jesse Andrews30f68e92011-09-13 00:59:54 -0700573#
574# Openstack uses a fair number of other projects.
575
Dean Troyerdf0972c2012-03-07 17:31:03 -0600576# get_packages() collects a list of package names of any type from the
577# prerequisite files in ``files/{apts|pips}``. The list is intended
578# to be passed to a package installer such as apt or pip.
579#
580# Only packages required for the services in ENABLED_SERVICES will be
581# included. Two bits of metadata are recognized in the prerequisite files:
582# - ``# NOPRIME`` defers installation to be performed later in stack.sh
583# - ``# dist:DISTRO`` or ``dist:DISTRO1,DISTRO2`` limits the selection
584# of the package to the distros listed. The distro names are case insensitive.
Dean Troyer5218d452012-02-04 02:13:23 -0600585#
586# get_packages dir
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100587function get_packages() {
Dean Troyerd0b21e22012-03-07 14:52:25 -0600588 local package_dir=$1
589 local file_to_parse
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100590 local service
Jesse Andrews38df1222011-11-20 09:55:44 -0800591
Dean Troyerd0b21e22012-03-07 14:52:25 -0600592 if [[ -z "$package_dir" ]]; then
593 echo "No package directory supplied"
594 return 1
595 fi
Dean Troyer5218d452012-02-04 02:13:23 -0600596 for service in general ${ENABLED_SERVICES//,/ }; do
597 # Allow individual services to specify dependencies
Dean Troyerd0b21e22012-03-07 14:52:25 -0600598 if [[ -e ${package_dir}/${service} ]]; then
Anthony Youngef4e5362011-12-01 13:44:51 -0800599 file_to_parse="${file_to_parse} $service"
600 fi
Sean Daguef1062402012-05-01 16:43:15 -0400601 # NOTE(sdague) n-api needs glance for now because that's where
602 # glance client is
603 if [[ $service == n-api ]]; then
604 if [[ ! $file_to_parse =~ nova ]]; then
605 file_to_parse="${file_to_parse} nova"
606 fi
607 if [[ ! $file_to_parse =~ glance ]]; then
608 file_to_parse="${file_to_parse} glance"
609 fi
610 elif [[ $service == n-* ]]; then
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100611 if [[ ! $file_to_parse =~ nova ]]; then
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100612 file_to_parse="${file_to_parse} nova"
613 fi
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100614 elif [[ $service == g-* ]]; then
615 if [[ ! $file_to_parse =~ glance ]]; then
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100616 file_to_parse="${file_to_parse} glance"
617 fi
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100618 elif [[ $service == key* ]]; then
619 if [[ ! $file_to_parse =~ keystone ]]; then
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100620 file_to_parse="${file_to_parse} keystone"
621 fi
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100622 fi
623 done
624
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100625 for file in ${file_to_parse}; do
Dean Troyerd0b21e22012-03-07 14:52:25 -0600626 local fname=${package_dir}/${file}
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100627 local OIFS line package distros distro
Dean Troyerd0b21e22012-03-07 14:52:25 -0600628 [[ -e $fname ]] || continue
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100629
630 OIFS=$IFS
631 IFS=$'\n'
Chmouel Boudjnah2d1a8b32011-11-14 22:16:11 +0100632 for line in $(<${fname}); do
Anthony Younga6353c62011-11-16 00:43:34 -0600633 if [[ $line =~ "NOPRIME" ]]; then
634 continue
635 fi
636
Dean Troyer3ea11122012-05-31 16:39:36 -0500637 if [[ $line =~ (.*)#.*dist:([^ ]*) ]]; then
638 # We are using BASH regexp matching feature.
639 package=${BASH_REMATCH[1]}
640 distros=${BASH_REMATCH[2]}
641 # In bash ${VAR,,} will lowecase VAR
642 [[ ${distros,,} =~ ${DISTRO,,} ]] && echo $package
643 continue
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100644 fi
645
646 echo ${line%#*}
647 done
648 IFS=$OIFS
649 done
650}
Jesse Andrews2caf8fd2011-09-12 16:15:11 -0700651
Dean Troyer5218d452012-02-04 02:13:23 -0600652# install package requirements
653if [[ "$os_PACKAGE" = "deb" ]]; then
654 apt_get update
655 install_package $(get_packages $FILES/apts)
656else
657 install_package $(get_packages $FILES/rpms)
658fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700659
Jesse Andrews75a37652011-09-12 17:09:08 -0700660# install python requirements
Dean Troyerd0b21e22012-03-07 14:52:25 -0600661pip_install $(get_packages $FILES/pips | sort -u)
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700662
Jesse Andrews75a37652011-09-12 17:09:08 -0700663# compute service
Anthony Young2f140202011-09-26 13:02:40 -0700664git_clone $NOVA_REPO $NOVA_DIR $NOVA_BRANCH
Tres Henryca85b792011-10-28 14:00:21 -0700665# python client library to nova that horizon (and others) use
Andy Smith84c05992012-02-03 21:40:32 -0800666git_clone $KEYSTONECLIENT_REPO $KEYSTONECLIENT_DIR $KEYSTONECLIENT_BRANCH
Anthony Young2f140202011-09-26 13:02:40 -0700667git_clone $NOVACLIENT_REPO $NOVACLIENT_DIR $NOVACLIENT_BRANCH
Andrew Bogott77a4e3a2012-05-01 00:07:29 -0500668git_clone $OPENSTACKCLIENT_REPO $OPENSTACKCLIENT_DIR $OPENSTACKCLIENT_BRANCH
Dean Troyer45495252012-04-13 13:16:38 -0500669git_clone $GLANCECLIENT_REPO $GLANCECLIENT_DIR $GLANCECLIENT_BRANCH
Jesse Andrews38df1222011-11-20 09:55:44 -0800670
671# glance, swift middleware and nova api needs keystone middleware
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000672if is_service_enabled key g-api n-api swift; then
Jesse Andrews38df1222011-11-20 09:55:44 -0800673 # unified auth system (manages accounts/tokens)
674 git_clone $KEYSTONE_REPO $KEYSTONE_DIR $KEYSTONE_BRANCH
675fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000676if is_service_enabled swift; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800677 # storage service
678 git_clone $SWIFT_REPO $SWIFT_DIR $SWIFT_BRANCH
Chmouel Boudjnahfda9df82012-05-22 10:27:08 +0000679 # storage service client and and Library
680 git_clone $SWIFTCLIENT_REPO $SWIFTCLIENT_DIR $SWIFTCLIENT_BRANCH
681 # swift3 middleware to provide S3 emulation to Swift
Joe Gordon42b1aa92012-05-24 14:11:01 -0700682 git_clone $SWIFT3_REPO $SWIFT3_DIR $SWIFT3_BRANCH
James E. Blaire7ce24f2011-11-10 13:05:13 -0800683fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000684if is_service_enabled g-api n-api; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800685 # image catalog service
686 git_clone $GLANCE_REPO $GLANCE_DIR $GLANCE_BRANCH
687fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000688if is_service_enabled n-novnc; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800689 # a websockets/html5 or flash powered VNC console for vm instances
690 git_clone $NOVNC_REPO $NOVNC_DIR $NOVNC_BRANCH
691fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000692if is_service_enabled horizon; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800693 # django powered web control panel for openstack
694 git_clone $HORIZON_REPO $HORIZON_DIR $HORIZON_BRANCH $HORIZON_TAG
695fi
Monty Taylor5440ac02012-03-23 11:32:29 -0700696if is_service_enabled quantum; then
697 git_clone $QUANTUM_CLIENT_REPO $QUANTUM_CLIENT_DIR $QUANTUM_CLIENT_BRANCH
698fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -0700699if is_service_enabled quantum; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800700 # quantum
701 git_clone $QUANTUM_REPO $QUANTUM_DIR $QUANTUM_BRANCH
Deepak Garg1e98bdc2012-02-22 12:15:26 +0530702fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000703if is_service_enabled m-svc; then
Jason Kölker64a90662012-01-23 11:17:27 -0600704 # melange
705 git_clone $MELANGE_REPO $MELANGE_DIR $MELANGE_BRANCH
706fi
707
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000708if is_service_enabled melange; then
Jason Kölker64a90662012-01-23 11:17:27 -0600709 git_clone $MELANGECLIENT_REPO $MELANGECLIENT_DIR $MELANGECLIENT_BRANCH
710fi
711
Dean Troyerdf0972c2012-03-07 17:31:03 -0600712
Jesse Andrews30f68e92011-09-13 00:59:54 -0700713# Initialization
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700714# ==============
Jesse Andrews30f68e92011-09-13 00:59:54 -0700715
Jesse Andrews75a37652011-09-12 17:09:08 -0700716# setup our checkouts so they are installed into python path
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700717# allowing ``import nova`` or ``import glance.client``
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500718setup_develop $KEYSTONECLIENT_DIR
719setup_develop $NOVACLIENT_DIR
720setup_develop $OPENSTACKCLIENT_DIR
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000721if is_service_enabled key g-api n-api swift; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500722 setup_develop $KEYSTONE_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800723fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000724if is_service_enabled swift; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500725 setup_develop $SWIFT_DIR
726 setup_develop $SWIFTCLIENT_DIR
727 setup_develop $SWIFT3_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800728fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000729if is_service_enabled g-api n-api; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500730 setup_develop $GLANCE_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800731fi
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500732setup_develop $NOVA_DIR
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000733if is_service_enabled horizon; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500734 setup_develop $HORIZON_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800735fi
Anthony Young84a03e02012-03-15 11:27:13 -0700736if is_service_enabled quantum; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500737 setup_develop $QUANTUM_CLIENT_DIR
738 setup_develop $QUANTUM_DIR
Monty Taylor5440ac02012-03-23 11:32:29 -0700739fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000740if is_service_enabled m-svc; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500741 setup_develop $MELANGE_DIR
Jason Kölker64a90662012-01-23 11:17:27 -0600742fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000743if is_service_enabled melange; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500744 setup_develop $MELANGECLIENT_DIR
Jason Kölker64a90662012-01-23 11:17:27 -0600745fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700746
Dean Troyer45495252012-04-13 13:16:38 -0500747# Do this _after_ glance is installed to override the old binary
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500748setup_develop $GLANCECLIENT_DIR
Dean Troyer45495252012-04-13 13:16:38 -0500749
Dean Troyerdf0972c2012-03-07 17:31:03 -0600750
Dean Troyerff603ef2011-11-22 17:48:10 -0600751# Syslog
Dean Troyerdf0972c2012-03-07 17:31:03 -0600752# ------
Dean Troyerff603ef2011-11-22 17:48:10 -0600753
754if [[ $SYSLOG != "False" ]]; then
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500755 install_package rsyslog-relp
Dean Troyerff603ef2011-11-22 17:48:10 -0600756 if [[ "$SYSLOG_HOST" = "$HOST_IP" ]]; then
757 # Configure the master host to receive
758 cat <<EOF >/tmp/90-stack-m.conf
759\$ModLoad imrelp
760\$InputRELPServerRun $SYSLOG_PORT
761EOF
762 sudo mv /tmp/90-stack-m.conf /etc/rsyslog.d
763 else
764 # Set rsyslog to send to remote host
765 cat <<EOF >/tmp/90-stack-s.conf
766*.* :omrelp:$SYSLOG_HOST:$SYSLOG_PORT
767EOF
768 sudo mv /tmp/90-stack-s.conf /etc/rsyslog.d
769 fi
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500770 restart_service rsyslog
Dean Troyerff603ef2011-11-22 17:48:10 -0600771fi
772
Dean Troyerdf0972c2012-03-07 17:31:03 -0600773
Russell Bryant4a221452012-03-13 13:44:12 -0400774# Rabbit or Qpid
775# --------------
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400776
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000777if is_service_enabled rabbit; then
Anthony Younga09ae2f2011-09-15 23:11:29 -0700778 # Install and start rabbitmq-server
Scott Moser199d76e2011-10-20 12:41:40 -0400779 # the temp file is necessary due to LP: #878600
780 tfile=$(mktemp)
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500781 install_package rabbitmq-server > "$tfile" 2>&1
Scott Moser199d76e2011-10-20 12:41:40 -0400782 cat "$tfile"
783 rm -f "$tfile"
Dean Troyer5218d452012-02-04 02:13:23 -0600784 if [[ "$os_PACKAGE" = "rpm" ]]; then
785 # RPM doesn't start the service
786 restart_service rabbitmq-server
787 fi
Jesse Andrews53ed3872011-10-02 14:28:17 -0400788 # change the rabbit password since the default is "guest"
789 sudo rabbitmqctl change_password guest $RABBIT_PASSWORD
Russell Bryant4a221452012-03-13 13:44:12 -0400790elif is_service_enabled qpid; then
791 if [[ "$os_PACKAGE" = "rpm" ]]; then
792 install_package qpid-cpp-server
793 restart_service qpidd
794 else
795 install_package qpidd
796 fi
Anthony Younga09ae2f2011-09-15 23:11:29 -0700797fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700798
Dean Troyerdf0972c2012-03-07 17:31:03 -0600799
Jesse Andrews24859062011-09-15 21:28:23 -0700800# Mysql
Dean Troyerdf0972c2012-03-07 17:31:03 -0600801# -----
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400802
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000803if is_service_enabled mysql; then
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400804
Dean Troyer5218d452012-02-04 02:13:23 -0600805 if [[ "$os_PACKAGE" = "deb" ]]; then
806 # Seed configuration with mysql password so that apt-get install doesn't
807 # prompt us for a password upon install.
808 cat <<MYSQL_PRESEED | sudo debconf-set-selections
Anthony Young7a549f42011-10-12 07:13:13 +0000809mysql-server-5.1 mysql-server/root_password password $MYSQL_PASSWORD
810mysql-server-5.1 mysql-server/root_password_again password $MYSQL_PASSWORD
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400811mysql-server-5.1 mysql-server/start_on_boot boolean true
812MYSQL_PRESEED
Dean Troyer5218d452012-02-04 02:13:23 -0600813 fi
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400814
Jesse Andrews2e536a32011-10-13 11:40:16 -0700815 # while ``.my.cnf`` is not needed for openstack to function, it is useful
816 # as it allows you to access the mysql databases via ``mysql nova`` instead
817 # of having to specify the username/password each time.
Chmouel Boudjnahd5d5b682011-10-13 18:45:42 +0100818 if [[ ! -e $HOME/.my.cnf ]]; then
819 cat <<EOF >$HOME/.my.cnf
820[client]
821user=$MYSQL_USER
Anthony Youngcf145b72011-10-13 15:07:36 -0700822password=$MYSQL_PASSWORD
Chmouel Boudjnahd5d5b682011-10-13 18:45:42 +0100823host=$MYSQL_HOST
824EOF
825 chmod 0600 $HOME/.my.cnf
826 fi
827
Anthony Younga09ae2f2011-09-15 23:11:29 -0700828 # Install and start mysql-server
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500829 install_package mysql-server
Dean Troyer5218d452012-02-04 02:13:23 -0600830 if [[ "$os_PACKAGE" = "rpm" ]]; then
831 # RPM doesn't start the service
832 start_service mysqld
833 # Set the root password - only works the first time
834 sudo mysqladmin -u root password $MYSQL_PASSWORD || true
835 fi
Jesse Andrews24859062011-09-15 21:28:23 -0700836 # Update the DB to give user ‘$MYSQL_USER’@’%’ full control of the all databases:
James E. Blair92e81992011-10-11 09:26:29 -0500837 sudo mysql -uroot -p$MYSQL_PASSWORD -h127.0.0.1 -e "GRANT ALL PRIVILEGES ON *.* TO '$MYSQL_USER'@'%' identified by '$MYSQL_PASSWORD';"
Jesse Andrews24859062011-09-15 21:28:23 -0700838
Dean Troyer588f4062012-04-02 16:50:49 -0500839 # Update ``my.cnf`` for some local needs and restart the mysql service
Dean Troyer5218d452012-02-04 02:13:23 -0600840 if [[ "$os_PACKAGE" = "deb" ]]; then
Dean Troyer588f4062012-04-02 16:50:49 -0500841 MY_CONF=/etc/mysql/my.cnf
Dean Troyer5218d452012-02-04 02:13:23 -0600842 MYSQL=mysql
843 else
Dean Troyer588f4062012-04-02 16:50:49 -0500844 MY_CONF=/etc/my.cnf
Dean Troyer5218d452012-02-04 02:13:23 -0600845 MYSQL=mysqld
846 fi
Dean Troyer588f4062012-04-02 16:50:49 -0500847
848 # Change ‘bind-address’ from localhost (127.0.0.1) to any (0.0.0.0)
849 sudo sed -i '/^bind-address/s/127.0.0.1/0.0.0.0/g' $MY_CONF
850
851 # Set default db type to InnoDB
852 if grep -q "default-storage-engine" $MY_CONF; then
853 # Change it
854 sudo bash -c "source $TOP_DIR/functions; iniset $MY_CONF mysqld default-storage-engine InnoDB"
855 else
856 # Add it
857 sudo sed -i -e "/^\[mysqld\]/ a \
858default-storage-engine = InnoDB" $MY_CONF
859 fi
860
Dean Troyer5218d452012-02-04 02:13:23 -0600861 restart_service $MYSQL
Jesse Andrews24859062011-09-15 21:28:23 -0700862fi
863
Josh Kearney0a7a41e2012-04-04 17:47:56 -0500864if [ -z "$SCREEN_HARDSTATUS" ]; then
865 SCREEN_HARDSTATUS='%{= .} %-Lw%{= .}%> %n%f %t*%{= .}%+Lw%< %-=%{g}(%{d}%H/%l%{g})'
866fi
867
Anthony Young60df29a2012-03-28 09:40:17 -0700868# Our screenrc file builder
869function screen_rc {
870 SCREENRC=$TOP_DIR/stack-screenrc
871 if [[ ! -e $SCREENRC ]]; then
872 # Name the screen session
873 echo "sessionname stack" > $SCREENRC
874 # Set a reasonable statusbar
Josh Kearney076e86a2012-04-05 16:25:03 -0500875 echo "hardstatus alwayslastline '$SCREEN_HARDSTATUS'" >> $SCREENRC
Anthony Young60df29a2012-03-28 09:40:17 -0700876 echo "screen -t stack bash" >> $SCREENRC
877 fi
878 # If this service doesn't already exist in the screenrc file
879 if ! grep $1 $SCREENRC 2>&1 > /dev/null; then
880 NL=`echo -ne '\015'`
881 echo "screen -t $1 bash" >> $SCREENRC
882 echo "stuff \"$2$NL\"" >> $SCREENRC
883 fi
884}
885
886# Our screen helper to launch a service in a hidden named screen
887function screen_it {
888 NL=`echo -ne '\015'`
889 if is_service_enabled $1; then
890 # Append the service to the screen rc file
891 screen_rc "$1" "$2"
892
893 screen -S stack -X screen -t $1
894 # sleep to allow bash to be ready to be send the command - we are
895 # creating a new window in screen and then sends characters, so if
896 # bash isn't running by the time we send the command, nothing happens
897 sleep 1.5
898
899 if [[ -n ${SCREEN_LOGDIR} ]]; then
900 screen -S stack -p $1 -X logfile ${SCREEN_LOGDIR}/screen-${1}.${CURRENT_LOG_TIME}.log
901 screen -S stack -p $1 -X log on
902 ln -sf ${SCREEN_LOGDIR}/screen-${1}.${CURRENT_LOG_TIME}.log ${SCREEN_LOGDIR}/screen-${1}.log
903 fi
904 screen -S stack -p $1 -X stuff "$2$NL"
905 fi
906}
907
908# create a new named screen to run processes in
909screen -d -m -S stack -t stack -s /bin/bash
910sleep 1
911# set a reasonable statusbar
Josh Kearney0a7a41e2012-04-04 17:47:56 -0500912screen -r stack -X hardstatus alwayslastline "$SCREEN_HARDSTATUS"
Jesse Andrews24859062011-09-15 21:28:23 -0700913
Tres Henryca85b792011-10-28 14:00:21 -0700914# Horizon
Dean Troyerdf0972c2012-03-07 17:31:03 -0600915# -------
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400916
Tres Henryca85b792011-10-28 14:00:21 -0700917# Setup the django horizon application to serve via apache/wsgi
Jesse Andrews75a37652011-09-12 17:09:08 -0700918
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000919if is_service_enabled horizon; then
Jesse Andrews24859062011-09-15 21:28:23 -0700920
Anthony Younga575d502012-01-26 12:59:26 -0800921 # Remove stale session database.
Gabriel Hurleyf1a11ad2012-02-29 01:36:53 -0800922 rm -f $HORIZON_DIR/openstack_dashboard/local/dashboard_openstack.sqlite3
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400923
Tres Henryca85b792011-10-28 14:00:21 -0700924 # ``local_settings.py`` is used to override horizon default settings.
Gabriel Hurleyf1a11ad2012-02-29 01:36:53 -0800925 local_settings=$HORIZON_DIR/openstack_dashboard/local/local_settings.py
Jesse Andrews9c7c9082011-11-23 10:10:53 -0800926 cp $FILES/horizon_settings.py $local_settings
927
Tres Henryca85b792011-10-28 14:00:21 -0700928 # Initialize the horizon database (it stores sessions and notices shown to
Jesse Andrews51fb22e2011-10-19 09:24:17 -0700929 # users). The user system is external (keystone).
Gabriel Hurleyf1a11ad2012-02-29 01:36:53 -0800930 cd $HORIZON_DIR
Vishvananda Ishaya19b2f9b2012-01-05 22:21:08 +0000931 python manage.py syncdb
Dean Troyer5218d452012-02-04 02:13:23 -0600932 cd $TOP_DIR
Jesse Andrews75a37652011-09-12 17:09:08 -0700933
Anthony Young70dc5e02011-09-15 16:52:43 -0700934 # create an empty directory that apache uses as docroot
Tres Henryca85b792011-10-28 14:00:21 -0700935 sudo mkdir -p $HORIZON_DIR/.blackhole
Jesse Andrews1c1d1502011-09-12 19:29:56 -0700936
Dean Troyer5218d452012-02-04 02:13:23 -0600937 if [[ "$os_PACKAGE" = "deb" ]]; then
938 # Install apache2, which is NOPRIME'd
939 APACHE_NAME=apache2
940 APACHE_CONF=sites-available/horizon
941 install_package apache2 libapache2-mod-wsgi
942 # Clean up the old config name
943 sudo rm -f /etc/apache2/sites-enabled/000-default
944 # Be a good citizen and use the distro tools here
945 sudo touch /etc/$APACHE_NAME/$APACHE_CONF
946 sudo a2ensite horizon
947 else
948 # Install httpd, which is NOPRIME'd
949 APACHE_NAME=httpd
950 APACHE_CONF=conf.d/horizon.conf
951 sudo rm -f /etc/httpd/conf.d/000-*
952 install_package httpd mod_wsgi
953 sudo sed '/^Listen/s/^.*$/Listen 0.0.0.0:80/' -i /etc/httpd/conf/httpd.conf
954 fi
955 ## Configure apache to run horizon
956 sudo sh -c "sed -e \"
Dean Troyer9bb84f02012-01-24 11:45:52 -0600957 s,%USER%,$APACHE_USER,g;
958 s,%GROUP%,$APACHE_GROUP,g;
959 s,%HORIZON_DIR%,$HORIZON_DIR,g;
Dean Troyer5218d452012-02-04 02:13:23 -0600960 s,%APACHE_NAME%,$APACHE_NAME,g;
961 s,%DEST%,$DEST,g;
962 \" $FILES/apache-horizon.template >/etc/$APACHE_NAME/$APACHE_CONF"
963 restart_service $APACHE_NAME
Anthony Young70dc5e02011-09-15 16:52:43 -0700964fi
Jesse Andrews75a37652011-09-12 17:09:08 -0700965
Anthony Young3859f732011-09-14 02:33:43 -0700966
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700967# Glance
968# ------
969
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000970if is_service_enabled g-reg; then
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +0800971 GLANCE_CONF_DIR=/etc/glance
972 if [[ ! -d $GLANCE_CONF_DIR ]]; then
973 sudo mkdir -p $GLANCE_CONF_DIR
974 fi
975 sudo chown `whoami` $GLANCE_CONF_DIR
Anthony Youngc8357622011-09-20 10:38:06 -0700976 GLANCE_IMAGE_DIR=$DEST/glance/images
Anthony Younga531b772011-09-20 09:59:54 -0700977 # Delete existing images
978 rm -rf $GLANCE_IMAGE_DIR
Jesse Andrews75a37652011-09-12 17:09:08 -0700979
Anthony Younga531b772011-09-20 09:59:54 -0700980 # Use local glance directories
981 mkdir -p $GLANCE_IMAGE_DIR
982
Anthony Young70dc5e02011-09-15 16:52:43 -0700983 # (re)create glance database
Anthony Young7a549f42011-10-12 07:13:13 +0000984 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS glance;'
Gabriel Hurley71f23eb2012-02-15 17:39:05 -0800985 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE glance CHARACTER SET utf8;'
Jesse Andrews51fb22e2011-10-19 09:24:17 -0700986
987 # Copy over our glance configurations and update them
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +0800988 GLANCE_REGISTRY_CONF=$GLANCE_CONF_DIR/glance-registry.conf
Dean Troyer9bab2592012-04-06 12:10:05 -0500989 cp $GLANCE_DIR/etc/glance-registry.conf $GLANCE_REGISTRY_CONF
990 iniset $GLANCE_REGISTRY_CONF DEFAULT debug True
991 inicomment $GLANCE_REGISTRY_CONF DEFAULT log_file
992 iniset $GLANCE_REGISTRY_CONF DEFAULT sql_connection $BASE_SQL_CONN/glance?charset=utf8
993 iniset $GLANCE_REGISTRY_CONF DEFAULT use_syslog $SYSLOG
994 iniset $GLANCE_REGISTRY_CONF paste_deploy flavor keystone
Dean Troyer6577b462012-01-16 22:27:20 -0600995
Dean Troyer9bab2592012-04-06 12:10:05 -0500996 GLANCE_REGISTRY_PASTE_INI=$GLANCE_CONF_DIR/glance-registry-paste.ini
997 cp $GLANCE_DIR/etc/glance-registry-paste.ini $GLANCE_REGISTRY_PASTE_INI
998 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST
999 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT
1000 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1001 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1002 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_tenant_name $SERVICE_TENANT_NAME
1003 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_user glance
1004 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_password $SERVICE_PASSWORD
Anthony Youngf12d3ab2011-09-20 00:33:51 -07001005
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001006 GLANCE_API_CONF=$GLANCE_CONF_DIR/glance-api.conf
Dean Troyer9bab2592012-04-06 12:10:05 -05001007 cp $GLANCE_DIR/etc/glance-api.conf $GLANCE_API_CONF
1008 iniset $GLANCE_API_CONF DEFAULT debug True
1009 inicomment $GLANCE_API_CONF DEFAULT log_file
Brian Waldon7f9833f2012-05-25 08:31:59 -07001010 iniset $GLANCE_API_CONF DEFAULT sql_connection $BASE_SQL_CONN/glance?charset=utf8
Dean Troyer9bab2592012-04-06 12:10:05 -05001011 iniset $GLANCE_API_CONF DEFAULT use_syslog $SYSLOG
1012 iniset $GLANCE_API_CONF DEFAULT filesystem_store_datadir $GLANCE_IMAGE_DIR/
1013 iniset $GLANCE_API_CONF paste_deploy flavor keystone
Dean Troyer6577b462012-01-16 22:27:20 -06001014
Chmouel Boudjnahee76d262012-05-09 17:19:09 +01001015 # Store the images in swift if enabled.
1016 if is_service_enabled swift; then
1017 iniset $GLANCE_API_CONF DEFAULT default_store swift
1018 iniset $GLANCE_API_CONF DEFAULT swift_store_auth_address $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/v2.0/
1019 iniset $GLANCE_API_CONF DEFAULT swift_store_user $SERVICE_TENANT_NAME:glance
1020 iniset $GLANCE_API_CONF DEFAULT swift_store_key $SERVICE_PASSWORD
1021 iniset $GLANCE_API_CONF DEFAULT swift_store_create_container_on_put True
1022 fi
1023
Dean Troyer9bab2592012-04-06 12:10:05 -05001024 GLANCE_API_PASTE_INI=$GLANCE_CONF_DIR/glance-api-paste.ini
1025 cp $GLANCE_DIR/etc/glance-api-paste.ini $GLANCE_API_PASTE_INI
1026 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST
1027 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT
1028 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1029 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1030 iniset $GLANCE_API_PASTE_INI filter:authtoken admin_tenant_name $SERVICE_TENANT_NAME
1031 iniset $GLANCE_API_PASTE_INI filter:authtoken admin_user glance
1032 iniset $GLANCE_API_PASTE_INI filter:authtoken admin_password $SERVICE_PASSWORD
Brian Waldone7114ca2012-05-04 13:42:35 -07001033
1034 GLANCE_POLICY_JSON=$GLANCE_CONF_DIR/policy.json
1035 cp $GLANCE_DIR/etc/policy.json $GLANCE_POLICY_JSON
Anthony Young70dc5e02011-09-15 16:52:43 -07001036fi
Jesse Andrews75a37652011-09-12 17:09:08 -07001037
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001038# Quantum (for controller or agent nodes)
Anthony Young60df29a2012-03-28 09:40:17 -07001039# -------
Shweta P4dc53aa2012-04-04 16:17:40 -04001040if is_service_enabled quantum; then
1041 # Put config files in /etc/quantum for everyone to find
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001042 if [[ ! -d /etc/quantum ]]; then
1043 sudo mkdir -p /etc/quantum
Anthony Young60df29a2012-03-28 09:40:17 -07001044 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001045 sudo chown `whoami` /etc/quantum
Shweta P4dc53aa2012-04-04 16:17:40 -04001046
Anthony Young60df29a2012-03-28 09:40:17 -07001047 if [[ "$Q_PLUGIN" = "openvswitch" ]]; then
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001048 Q_PLUGIN_CONF_PATH=etc/quantum/plugins/openvswitch
1049 Q_PLUGIN_CONF_FILENAME=ovs_quantum_plugin.ini
1050 Q_DB_NAME="ovs_quantum"
1051 Q_PLUGIN_CLASS="quantum.plugins.openvswitch.ovs_quantum_plugin.OVSQuantumPlugin"
Shweta P4dc53aa2012-04-04 16:17:40 -04001052 elif [[ "$Q_PLUGIN" = "linuxbridge" ]]; then
1053 # Install deps
1054 # FIXME add to files/apts/quantum, but don't install if not needed!
1055 install_package python-configobj
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001056 Q_PLUGIN_CONF_PATH=etc/quantum/plugins/linuxbridge
1057 Q_PLUGIN_CONF_FILENAME=linuxbridge_conf.ini
1058 Q_DB_NAME="quantum_linux_bridge"
1059 Q_PLUGIN_CLASS="quantum.plugins.linuxbridge.LinuxBridgePlugin.LinuxBridgePlugin"
1060 else
1061 echo "Unknown Quantum plugin '$Q_PLUGIN'.. exiting"
1062 exit 1
1063 fi
1064
1065 # if needed, move config file from $QUANTUM_DIR/etc/quantum to /etc/quantum
1066 mkdir -p /$Q_PLUGIN_CONF_PATH
1067 Q_PLUGIN_CONF_FILE=$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME
1068 if [[ -e $QUANTUM_DIR/$Q_PLUGIN_CONF_FILE ]]; then
1069 sudo mv $QUANTUM_DIR/$Q_PLUGIN_CONF_FILE /$Q_PLUGIN_CONF_FILE
1070 fi
1071 sudo sed -i -e "s/^sql_connection =.*$/sql_connection = mysql:\/\/$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST\/$Q_DB_NAME?charset=utf8/g" /$Q_PLUGIN_CONF_FILE
1072
1073 OVS_ENABLE_TUNNELING=${OVS_ENABLE_TUNNELING:-True}
1074 if [[ "$Q_PLUGIN" = "openvswitch" && $OVS_ENABLE_TUNNELING = "True" ]]; then
1075 OVS_VERSION=`ovs-vsctl --version | head -n 1 | awk '{print $4;}'`
1076 if [ $OVS_VERSION \< "1.4" ] && ! is_service_enabled q-svc ; then
1077 echo "You are running OVS version $OVS_VERSION."
1078 echo "OVS 1.4+ is required for tunneling between multiple hosts."
1079 exit 1
1080 fi
1081 sudo sed -i -e "s/.*enable-tunneling = .*$/enable-tunneling = $OVS_ENABLE_TUNNELING/g" /$Q_PLUGIN_CONF_FILE
1082 fi
1083fi
1084
1085# Quantum service (for controller node)
1086if is_service_enabled q-svc; then
1087 Q_PLUGIN_INI_FILE=/etc/quantum/plugins.ini
1088 Q_CONF_FILE=/etc/quantum/quantum.conf
1089 # must remove this file from existing location, otherwise Quantum will prefer it
1090 if [[ -e $QUANTUM_DIR/etc/plugins.ini ]]; then
1091 sudo mv $QUANTUM_DIR/etc/plugins.ini $Q_PLUGIN_INI_FILE
1092 fi
1093
1094 if [[ -e $QUANTUM_DIR/etc/quantum.conf ]]; then
1095 sudo mv $QUANTUM_DIR/etc/quantum.conf $Q_CONF_FILE
1096 fi
1097
1098 if is_service_enabled mysql; then
1099 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e "DROP DATABASE IF EXISTS $Q_DB_NAME;"
1100 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e "CREATE DATABASE IF NOT EXISTS $Q_DB_NAME CHARACTER SET utf8;"
Shweta P4dc53aa2012-04-04 16:17:40 -04001101 else
1102 echo "mysql must be enabled in order to use the $Q_PLUGIN Quantum plugin."
1103 exit 1
Anthony Young60df29a2012-03-28 09:40:17 -07001104 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001105 sudo sed -i -e "s/^provider =.*$/provider = $Q_PLUGIN_CLASS/g" $Q_PLUGIN_INI_FILE
1106
1107 screen_it q-svc "cd $QUANTUM_DIR && python $QUANTUM_DIR/bin/quantum-server $Q_CONF_FILE"
Anthony Young60df29a2012-03-28 09:40:17 -07001108fi
1109
1110# Quantum agent (for compute nodes)
1111if is_service_enabled q-agt; then
1112 if [[ "$Q_PLUGIN" = "openvswitch" ]]; then
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001113 # Install deps
1114 # FIXME add to files/apts/quantum, but don't install if not needed!
1115 if [[ "$os_PACKAGE" = "deb" ]]; then
1116 kernel_version=`cat /proc/version | cut -d " " -f3`
1117 install_package make fakeroot dkms openvswitch-switch openvswitch-datapath-dkms linux-headers-$kernel_version
1118 else
1119 ### FIXME(dtroyer): Find RPMs for OpenVSwitch
1120 echo "OpenVSwitch packages need to be located"
1121 fi
Anthony Young60df29a2012-03-28 09:40:17 -07001122 # Set up integration bridge
1123 OVS_BRIDGE=${OVS_BRIDGE:-br-int}
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001124 for PORT in `sudo ovs-vsctl --no-wait list-ports $OVS_BRIDGE`; do
1125 if [[ "$PORT" =~ tap* ]]; then echo `sudo ip link delete $PORT` > /dev/null; fi
1126 sudo ovs-vsctl --no-wait del-port $OVS_BRIDGE $PORT
1127 done
Anthony Young60df29a2012-03-28 09:40:17 -07001128 sudo ovs-vsctl --no-wait -- --if-exists del-br $OVS_BRIDGE
1129 sudo ovs-vsctl --no-wait add-br $OVS_BRIDGE
1130 sudo ovs-vsctl --no-wait br-set-external-id $OVS_BRIDGE bridge-id br-int
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001131 sudo sed -i -e "s/.*local-ip = .*/local-ip = $HOST_IP/g" /$Q_PLUGIN_CONF_FILE
1132 AGENT_BINARY=$QUANTUM_DIR/quantum/plugins/openvswitch/agent/ovs_quantum_agent.py
Shweta P4dc53aa2012-04-04 16:17:40 -04001133 elif [[ "$Q_PLUGIN" = "linuxbridge" ]]; then
1134 # Start up the quantum <-> linuxbridge agent
1135 install_package bridge-utils
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001136 #set the default network interface
1137 QUANTUM_LB_PRIVATE_INTERFACE=${QUANTUM_LB_PRIVATE_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
1138 sudo sed -i -e "s/^physical_interface = .*$/physical_interface = $QUANTUM_LB_PRIVATE_INTERFACE/g" /$Q_PLUGIN_CONF_FILE
1139 AGENT_BINARY=$QUANTUM_DIR/quantum/plugins/linuxbridge/agent/linuxbridge_quantum_agent.py
Anthony Young60df29a2012-03-28 09:40:17 -07001140 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001141 # Start up the quantum agent
1142 screen_it q-agt "sudo python $AGENT_BINARY /$Q_PLUGIN_CONF_FILE -v"
Anthony Young60df29a2012-03-28 09:40:17 -07001143fi
1144
1145# Melange service
1146if is_service_enabled m-svc; then
1147 if is_service_enabled mysql; then
1148 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS melange;'
1149 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE melange CHARACTER SET utf8;'
1150 else
1151 echo "mysql must be enabled in order to use the $Q_PLUGIN Quantum plugin."
1152 exit 1
1153 fi
1154 MELANGE_CONFIG_FILE=$MELANGE_DIR/etc/melange/melange.conf
1155 cp $MELANGE_CONFIG_FILE.sample $MELANGE_CONFIG_FILE
1156 sed -i -e "s/^sql_connection =.*$/sql_connection = mysql:\/\/$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST\/melange?charset=utf8/g" $MELANGE_CONFIG_FILE
1157 cd $MELANGE_DIR && PYTHONPATH=.:$PYTHONPATH python $MELANGE_DIR/bin/melange-manage --config-file=$MELANGE_CONFIG_FILE db_sync
1158 screen_it m-svc "cd $MELANGE_DIR && PYTHONPATH=.:$PYTHONPATH python $MELANGE_DIR/bin/melange-server --config-file=$MELANGE_CONFIG_FILE"
1159 echo "Waiting for melange to start..."
1160 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -q -O- http://127.0.0.1:9898; do sleep 1; done"; then
1161 echo "melange-server did not start"
1162 exit 1
1163 fi
1164 melange mac_address_range create cidr=$M_MAC_RANGE
1165fi
1166
1167
Dean Troyerdf0972c2012-03-07 17:31:03 -06001168
Jesse Andrewsd74257d2011-09-13 01:24:50 -07001169# Nova
1170# ----
Dean Troyerbd13b702012-02-13 11:22:36 -06001171
1172# Put config files in /etc/nova for everyone to find
Dean Troyerced65172012-03-02 16:36:16 -06001173NOVA_CONF_DIR=/etc/nova
1174if [[ ! -d $NOVA_CONF_DIR ]]; then
1175 sudo mkdir -p $NOVA_CONF_DIR
Dean Troyerbd13b702012-02-13 11:22:36 -06001176fi
Dean Troyerced65172012-03-02 16:36:16 -06001177sudo chown `whoami` $NOVA_CONF_DIR
Dean Troyerbd13b702012-02-13 11:22:36 -06001178
Mark McLoughlin27e39fd2012-05-10 07:12:36 +01001179cp -p $NOVA_DIR/etc/nova/policy.json $NOVA_CONF_DIR
1180
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001181# If Nova ships the new rootwrap.d config files, deploy them
1182# (owned by root) and add a parameter to $NOVA_ROOTWRAP
1183ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP"
1184if [[ -d $NOVA_DIR/etc/nova/rootwrap.d ]]; then
1185 # Wipe any existing rootwrap.d files first
1186 if [[ -d $NOVA_CONF_DIR/rootwrap.d ]]; then
1187 sudo rm -rf $NOVA_CONF_DIR/rootwrap.d
1188 fi
1189 sudo mkdir -m 755 $NOVA_CONF_DIR/rootwrap.d
1190 sudo cp $NOVA_DIR/etc/nova/rootwrap.d/* $NOVA_CONF_DIR/rootwrap.d
1191 sudo chown -R root:root $NOVA_CONF_DIR/rootwrap.d
1192 sudo chmod 644 $NOVA_CONF_DIR/rootwrap.d/*
1193 NOVA_ROOTWRAP="$NOVA_ROOTWRAP $NOVA_CONF_DIR/rootwrap.d"
1194 ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP *"
1195fi
1196
Thierry Carrezd2f8fa32012-06-11 16:45:29 +02001197# Set up the rootwrap sudoers
1198TEMPFILE=`mktemp`
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001199echo "$USER ALL=(root) NOPASSWD: $ROOTWRAP_SUDOER_CMD" >$TEMPFILE
Thierry Carrezd2f8fa32012-06-11 16:45:29 +02001200chmod 0440 $TEMPFILE
1201sudo chown root:root $TEMPFILE
1202sudo mv $TEMPFILE /etc/sudoers.d/nova-rootwrap
1203
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001204if is_service_enabled n-api; then
Dean Troyerdf0972c2012-03-07 17:31:03 -06001205 # Use the sample http middleware configuration supplied in the
1206 # Nova sources. This paste config adds the configuration required
1207 # for Nova to validate Keystone tokens.
Vishvananda Ishayaea4a53d2012-01-11 11:34:13 -08001208
Dean Troyerdf0972c2012-03-07 17:31:03 -06001209 # Allow rate limiting to be turned off for testing, like for Tempest
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001210 # NOTE: Set API_RATE_LIMIT="False" to turn OFF rate limiting
1211 API_RATE_LIMIT=${API_RATE_LIMIT:-"True"}
Dean Troyerdf0972c2012-03-07 17:31:03 -06001212
1213 # Remove legacy paste config if present
Vishvananda Ishaya7a103dd2012-02-23 23:35:43 +00001214 rm -f $NOVA_DIR/bin/nova-api-paste.ini
1215
Dean Troyerdf0972c2012-03-07 17:31:03 -06001216 # Get the sample configuration file in place
Dean Troyerced65172012-03-02 16:36:16 -06001217 cp $NOVA_DIR/etc/nova/api-paste.ini $NOVA_CONF_DIR
Vishvananda Ishayaea4a53d2012-01-11 11:34:13 -08001218
Dean Troyerdf0972c2012-03-07 17:31:03 -06001219 # Rewrite the authtoken configration for our Keystone service.
1220 # This is a bit defensive to allow the sample file some varaince.
Dean Troyerb3288382012-02-28 16:41:10 -06001221 sed -e "
1222 /^admin_token/i admin_tenant_name = $SERVICE_TENANT_NAME
1223 /admin_tenant_name/s/^.*$/admin_tenant_name = $SERVICE_TENANT_NAME/;
1224 /admin_user/s/^.*$/admin_user = nova/;
1225 /admin_password/s/^.*$/admin_password = $SERVICE_PASSWORD/;
1226 s,%SERVICE_TENANT_NAME%,$SERVICE_TENANT_NAME,g;
1227 s,%SERVICE_TOKEN%,$SERVICE_TOKEN,g;
Dean Troyerced65172012-03-02 16:36:16 -06001228 " -i $NOVA_CONF_DIR/api-paste.ini
Jesse Andrewsf70569e2011-10-24 21:56:25 -07001229fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -07001230
Anthony Young55458452011-12-17 00:21:49 +00001231# Helper to clean iptables rules
1232function clean_iptables() {
1233 # Delete rules
1234 sudo iptables -S -v | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-A" | sed "s/-A/-D/g" | awk '{print "sudo iptables",$0}' | bash
1235 # Delete nat rules
1236 sudo iptables -S -v -t nat | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-A" | sed "s/-A/-D/g" | awk '{print "sudo iptables -t nat",$0}' | bash
1237 # Delete chains
1238 sudo iptables -S -v | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-N" | sed "s/-N/-X/g" | awk '{print "sudo iptables",$0}' | bash
1239 # Delete nat chains
1240 sudo iptables -S -v -t nat | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-N" | sed "s/-N/-X/g" | awk '{print "sudo iptables -t nat",$0}' | bash
1241}
1242
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001243if is_service_enabled n-cpu; then
Jesse Andrewsdfcd2002011-09-13 13:17:22 -07001244
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001245 # Virtualization Configuration
1246 # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dean Troyer5218d452012-02-04 02:13:23 -06001247 if [[ "$os_PACKAGE" = "deb" ]]; then
1248 LIBVIRT_PKG_NAME=libvirt-bin
1249 else
1250 LIBVIRT_PKG_NAME=libvirt
1251 fi
1252 install_package $LIBVIRT_PKG_NAME
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001253
Dean Troyer0b31e862012-03-07 16:47:56 -06001254 # Force IP forwarding on, just on case
1255 sudo sysctl -w net.ipv4.ip_forward=1
1256
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001257 # attempt to load modules: network block device - used to manage qcow images
Anthony Young70dc5e02011-09-15 16:52:43 -07001258 sudo modprobe nbd || true
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001259
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07001260 # Check for kvm (hardware based virtualization). If unable to initialize
1261 # kvm, we drop back to the slower emulation mode (qemu). Note: many systems
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001262 # come with hardware virtualization disabled in BIOS.
Jesse Andrews2abbdd42011-10-03 22:48:30 -04001263 if [[ "$LIBVIRT_TYPE" == "kvm" ]]; then
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001264 sudo modprobe kvm || true
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001265 if [ ! -e /dev/kvm ]; then
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001266 echo "WARNING: Switching to QEMU"
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001267 LIBVIRT_TYPE=qemu
1268 fi
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001269 fi
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001270
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001271 # Install and configure **LXC** if specified. LXC is another approach to
1272 # splitting a system into many smaller parts. LXC uses cgroups and chroot
1273 # to simulate multiple systems.
Jesse Andrews2abbdd42011-10-03 22:48:30 -04001274 if [[ "$LIBVIRT_TYPE" == "lxc" ]]; then
Dean Troyer5218d452012-02-04 02:13:23 -06001275 if [[ "$os_PACKAGE" = "deb" ]]; then
1276 if [[ "$DISTRO" > natty ]]; then
1277 install_package cgroup-lite
1278 else
1279 cgline="none /cgroup cgroup cpuacct,memory,devices,cpu,freezer,blkio 0 0"
1280 sudo mkdir -p /cgroup
1281 if ! grep -q cgroup /etc/fstab; then
1282 echo "$cgline" | sudo tee -a /etc/fstab
1283 fi
1284 if ! mount -n | grep -q cgroup; then
1285 sudo mount /cgroup
1286 fi
1287 fi
Scott Moser3f5e1892011-12-08 16:21:52 -05001288 else
Dean Troyer5218d452012-02-04 02:13:23 -06001289 ### FIXME(dtroyer): figure this out
1290 echo "RPM-based cgroup not implemented yet"
1291 yum_install libcgroup-tools
Jesse Andrewse4304232011-10-07 10:34:32 -04001292 fi
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001293 fi
1294
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001295 QEMU_CONF=/etc/libvirt/qemu.conf
1296 if is_service_enabled quantum && [[ $Q_PLUGIN = "openvswitch" ]] && ! sudo grep -q '^cgroup_device_acl' $QEMU_CONF ; then
1297 # add /dev/net/tun to cgroup_device_acls, needed for type=ethernet interfaces
1298 sudo chmod 666 $QEMU_CONF
1299 sudo cat <<EOF >> /etc/libvirt/qemu.conf
1300cgroup_device_acl = [
1301 "/dev/null", "/dev/full", "/dev/zero",
1302 "/dev/random", "/dev/urandom",
1303 "/dev/ptmx", "/dev/kvm", "/dev/kqemu",
1304 "/dev/rtc", "/dev/hpet","/dev/net/tun",
1305]
1306EOF
1307 sudo chmod 644 $QEMU_CONF
1308 fi
1309
Dean Troyer5218d452012-02-04 02:13:23 -06001310 if [[ "$os_PACKAGE" = "deb" ]]; then
1311 LIBVIRT_DAEMON=libvirt-bin
1312 else
1313 # http://wiki.libvirt.org/page/SSHPolicyKitSetup
1314 if ! grep ^libvirtd: /etc/group >/dev/null; then
1315 sudo groupadd libvirtd
1316 fi
1317 sudo bash -c 'cat <<EOF >/etc/polkit-1/localauthority/50-local.d/50-libvirt-remote-access.pkla
1318[libvirt Management Access]
1319Identity=unix-group:libvirtd
1320Action=org.libvirt.unix.manage
1321ResultAny=yes
1322ResultInactive=yes
1323ResultActive=yes
1324EOF'
1325 LIBVIRT_DAEMON=libvirtd
1326 fi
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001327 # The user that nova runs as needs to be member of libvirtd group otherwise
1328 # nova-compute will be unable to use libvirt.
Anthony Young70dc5e02011-09-15 16:52:43 -07001329 sudo usermod -a -G libvirtd `whoami`
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07001330 # libvirt detects various settings on startup, as we potentially changed
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001331 # the system configuration (modules, filesystems), we need to restart
1332 # libvirt to detect those changes.
Dean Troyer5218d452012-02-04 02:13:23 -06001333 restart_service $LIBVIRT_DAEMON
Anthony Young70dc5e02011-09-15 16:52:43 -07001334
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001335
1336 # Instance Storage
1337 # ~~~~~~~~~~~~~~~~
1338
1339 # Nova stores each instance in its own directory.
Anthony Young70dc5e02011-09-15 16:52:43 -07001340 mkdir -p $NOVA_DIR/instances
1341
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001342 # You can specify a different disk to be mounted and used for backing the
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07001343 # virtual machines. If there is a partition labeled nova-instances we
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001344 # mount it (ext filesystems can be labeled via e2label).
Anthony Young70dc5e02011-09-15 16:52:43 -07001345 if [ -L /dev/disk/by-label/nova-instances ]; then
Jesse Andrews38df1222011-11-20 09:55:44 -08001346 if ! mount -n | grep -q $NOVA_DIR/instances; then
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001347 sudo mount -L nova-instances $NOVA_DIR/instances
1348 sudo chown -R `whoami` $NOVA_DIR/instances
1349 fi
Anthony Young70dc5e02011-09-15 16:52:43 -07001350 fi
1351
Anthony Young55458452011-12-17 00:21:49 +00001352 # Clean iptables from previous runs
1353 clean_iptables
1354
1355 # Destroy old instances
Anthony Young1df07892012-03-15 01:08:13 -07001356 instances=`sudo virsh list --all | grep $INSTANCE_NAME_PREFIX | sed "s/.*\($INSTANCE_NAME_PREFIX[0-9a-fA-F]*\).*/\1/g"`
Anthony Youngedef2442012-01-20 12:45:32 -08001357 if [ ! "$instances" = "" ]; then
Anthony Young1df07892012-03-15 01:08:13 -07001358 echo $instances | xargs -n1 sudo virsh destroy || true
1359 echo $instances | xargs -n1 sudo virsh undefine || true
Anthony Young55458452011-12-17 00:21:49 +00001360 fi
1361
Anthony Young4f830e12012-02-11 00:17:31 -08001362 # Logout and delete iscsi sessions
1363 sudo iscsiadm --mode node | grep $VOLUME_NAME_PREFIX | cut -d " " -f2 | xargs sudo iscsiadm --mode node --logout || true
1364 sudo iscsiadm --mode node | grep $VOLUME_NAME_PREFIX | cut -d " " -f2 | sudo iscsiadm --mode node --op delete || true
1365
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001366 # Clean out the instances directory.
Jesse Andrews461bfdc2011-10-09 17:50:38 -07001367 sudo rm -rf $NOVA_DIR/instances/*
Jesse Andrewsdfcd2002011-09-13 13:17:22 -07001368fi
1369
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001370if is_service_enabled n-net; then
Anthony Young55458452011-12-17 00:21:49 +00001371 # Delete traces of nova networks from prior runs
Anthony Young09fde812011-09-20 02:23:54 -07001372 sudo killall dnsmasq || true
Anthony Young55458452011-12-17 00:21:49 +00001373 clean_iptables
Anthony Young70dc5e02011-09-15 16:52:43 -07001374 rm -rf $NOVA_DIR/networks
1375 mkdir -p $NOVA_DIR/networks
Dean Troyer0b31e862012-03-07 16:47:56 -06001376
1377 # Force IP forwarding on, just on case
1378 sudo sysctl -w net.ipv4.ip_forward=1
Anthony Young70dc5e02011-09-15 16:52:43 -07001379fi
Jesse Andrews75a37652011-09-12 17:09:08 -07001380
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001381# Storage Service
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001382if is_service_enabled swift; then
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001383 # Install memcached for swift.
Dean Troyer13dc5cc2012-03-27 14:50:45 -05001384 install_package memcached
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001385
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001386 # We first do a bit of setup by creating the directories and
1387 # changing the permissions so we can run it as our user.
1388
Chmouel Boudjnah067163d2011-11-02 14:25:06 +01001389 USER_GROUP=$(id -g)
Dean Troyer1e51c112012-03-16 10:42:00 -05001390 sudo mkdir -p ${SWIFT_DATA_DIR}/drives
1391 sudo chown -R $USER:${USER_GROUP} ${SWIFT_DATA_DIR}
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001392
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001393 # We then create a loopback disk and format it to XFS.
Dean Troyer00edc952012-05-17 11:10:36 -05001394 if [[ -e ${SWIFT_DATA_DIR}/drives/images/swift.img ]]; then
1395 if egrep -q ${SWIFT_DATA_DIR}/drives/sdb1 /proc/mounts; then
1396 sudo umount ${SWIFT_DATA_DIR}/drives/sdb1
1397 fi
1398 else
Dean Troyer1e51c112012-03-16 10:42:00 -05001399 mkdir -p ${SWIFT_DATA_DIR}/drives/images
1400 sudo touch ${SWIFT_DATA_DIR}/drives/images/swift.img
1401 sudo chown $USER: ${SWIFT_DATA_DIR}/drives/images/swift.img
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001402
Dean Troyer1e51c112012-03-16 10:42:00 -05001403 dd if=/dev/zero of=${SWIFT_DATA_DIR}/drives/images/swift.img \
Chmouel Boudjnahb93478f2011-11-02 16:49:56 +01001404 bs=1024 count=0 seek=${SWIFT_LOOPBACK_DISK_SIZE}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001405 fi
Dean Troyer00edc952012-05-17 11:10:36 -05001406 # Make a fresh XFS filesystem
1407 mkfs.xfs -f -i size=1024 ${SWIFT_DATA_DIR}/drives/images/swift.img
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001408
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001409 # After the drive being created we mount the disk with a few mount
1410 # options to make it most efficient as possible for swift.
Dean Troyer1e51c112012-03-16 10:42:00 -05001411 mkdir -p ${SWIFT_DATA_DIR}/drives/sdb1
1412 if ! egrep -q ${SWIFT_DATA_DIR}/drives/sdb1 /proc/mounts; then
Chmouel Boudjnahb93478f2011-11-02 16:49:56 +01001413 sudo mount -t xfs -o loop,noatime,nodiratime,nobarrier,logbufs=8 \
Dean Troyer1e51c112012-03-16 10:42:00 -05001414 ${SWIFT_DATA_DIR}/drives/images/swift.img ${SWIFT_DATA_DIR}/drives/sdb1
Chmouel Boudjnaha03f0052011-11-01 13:08:29 +00001415 fi
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001416
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001417 # We then create link to that mounted location so swift would know
1418 # where to go.
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001419 for x in $(seq ${SWIFT_REPLICAS}); do
Dean Troyer1e51c112012-03-16 10:42:00 -05001420 sudo ln -sf ${SWIFT_DATA_DIR}/drives/sdb1/$x ${SWIFT_DATA_DIR}/$x; done
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001421
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001422 # We now have to emulate a few different servers into one we
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001423 # create all the directories needed for swift
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001424 for x in $(seq ${SWIFT_REPLICAS}); do
Dean Troyer1e51c112012-03-16 10:42:00 -05001425 drive=${SWIFT_DATA_DIR}/drives/sdb1/${x}
1426 node=${SWIFT_DATA_DIR}/${x}/node
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001427 node_device=${node}/sdb1
1428 [[ -d $node ]] && continue
1429 [[ -d $drive ]] && continue
1430 sudo install -o ${USER} -g $USER_GROUP -d $drive
1431 sudo install -o ${USER} -g $USER_GROUP -d $node_device
1432 sudo chown -R $USER: ${node}
Chmouel Boudjnahe1d2bcb2011-11-01 17:32:11 +01001433 done
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001434
Dean Troyer1e51c112012-03-16 10:42:00 -05001435 sudo mkdir -p ${SWIFT_CONFIG_DIR}/{object,container,account}-server /var/run/swift
1436 sudo chown -R $USER: ${SWIFT_CONFIG_DIR} /var/run/swift
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001437
Dean Troyer1e51c112012-03-16 10:42:00 -05001438 if [[ "$SWIFT_CONFIG_DIR" != "/etc/swift" ]]; then
1439 # Some swift tools are hard-coded to use /etc/swift and are apparenty not going to be fixed.
1440 # Create a symlink if the config dir is moved
1441 sudo ln -sf ${SWIFT_CONFIG_DIR} /etc/swift
1442 fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001443
Dean Troyer1e51c112012-03-16 10:42:00 -05001444 # Swift use rsync to syncronize between all the different
1445 # partitions (which make more sense when you have a multi-node
1446 # setup) we configure it with our version of rsync.
1447 sed -e "
1448 s/%GROUP%/${USER_GROUP}/;
1449 s/%USER%/$USER/;
1450 s,%SWIFT_DATA_DIR%,$SWIFT_DATA_DIR,;
1451 " $FILES/swift/rsyncd.conf | sudo tee /etc/rsyncd.conf
Dean Troyer5218d452012-02-04 02:13:23 -06001452 if [[ "$os_PACKAGE" = "deb" ]]; then
1453 sudo sed -i '/^RSYNC_ENABLE=false/ { s/false/true/ }' /etc/default/rsync
1454 else
1455 sudo sed -i '/disable *= *yes/ { s/yes/no/ }' /etc/xinetd.d/rsync
1456 fi
Chmouel Boudjnah45c51132011-11-01 19:32:23 +01001457
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001458 # By default Swift will be installed with the tempauth middleware
1459 # which has some default username and password if you have
1460 # configured keystone it will checkout the directory.
1461 if is_service_enabled key; then
1462 swift_auth_server="s3token authtoken keystone"
1463 else
1464 swift_auth_server=tempauth
1465 fi
Chmouel Boudjnah45c51132011-11-01 19:32:23 +01001466
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001467 SWIFT_CONFIG_PROXY_SERVER=${SWIFT_CONFIG_DIR}/proxy-server.conf
1468 cp ${SWIFT_DIR}/etc/proxy-server.conf-sample ${SWIFT_CONFIG_PROXY_SERVER}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001469
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001470 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT user
1471 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT user ${USER}
1472
1473 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT swift_dir
1474 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT swift_dir ${SWIFT_CONFIG_DIR}
1475
1476 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT workers
1477 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT workers 1
1478
1479 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT log_level
1480 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT log_level DEBUG
1481
1482 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT bind_port
1483 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT bind_port ${SWIFT_DEFAULT_BIND_PORT:-8080}
1484
1485 iniset ${SWIFT_CONFIG_PROXY_SERVER} pipeline:main pipeline "catch_errors healthcheck cache ratelimit swift3 ${swift_auth_server} proxy-logging proxy-server"
1486
1487 iniset ${SWIFT_CONFIG_PROXY_SERVER} app:proxy-server account_autocreate true
1488
1489 cat <<EOF>>${SWIFT_CONFIG_PROXY_SERVER}
1490
1491[filter:keystone]
1492paste.filter_factory = keystone.middleware.swift_auth:filter_factory
1493operator_roles = Member,admin
1494
1495# NOTE(chmou): s3token middleware is not updated yet to use only
1496# username and password.
1497[filter:s3token]
1498paste.filter_factory = keystone.middleware.s3_token:filter_factory
1499auth_port = ${KEYSTONE_AUTH_PORT}
1500auth_host = ${KEYSTONE_AUTH_HOST}
1501auth_protocol = ${KEYSTONE_AUTH_PROTOCOL}
1502auth_token = ${SERVICE_TOKEN}
1503admin_token = ${SERVICE_TOKEN}
1504
1505[filter:authtoken]
1506paste.filter_factory = keystone.middleware.auth_token:filter_factory
1507auth_host = ${KEYSTONE_AUTH_HOST}
1508auth_port = ${KEYSTONE_AUTH_PORT}
1509auth_protocol = ${KEYSTONE_AUTH_PROTOCOL}
1510auth_uri = ${KEYSTONE_SERVICE_PROTOCOL}://${KEYSTONE_SERVICE_HOST}:${KEYSTONE_SERVICE_PORT}/
1511admin_tenant_name = ${SERVICE_TENANT_NAME}
1512admin_user = swift
1513admin_password = ${SERVICE_PASSWORD}
1514
1515[filter:swift3]
1516use = egg:swift3#middleware
1517EOF
1518
1519 cp ${SWIFT_DIR}/etc/swift.conf-sample ${SWIFT_CONFIG_DIR}/swift.conf
1520 iniset ${SWIFT_CONFIG_DIR}/swift.conf swift-hash swift_hash_path_suffix ${SWIFT_HASH}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001521
Dean Troyer1e51c112012-03-16 10:42:00 -05001522 # We need to generate a object/account/proxy configuration
1523 # emulating 4 nodes on different ports we have a little function
1524 # that help us doing that.
1525 function generate_swift_configuration() {
1526 local server_type=$1
1527 local bind_port=$2
1528 local log_facility=$3
1529 local node_number
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001530 local swift_node_config
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001531
Dean Troyer1e51c112012-03-16 10:42:00 -05001532 for node_number in $(seq ${SWIFT_REPLICAS}); do
1533 node_path=${SWIFT_DATA_DIR}/${node_number}
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001534 swift_node_config=${SWIFT_CONFIG_DIR}/${server_type}-server/${node_number}.conf
1535
1536 cp ${SWIFT_DIR}/etc/${server_type}-server.conf-sample ${swift_node_config}
1537
1538 iniuncomment ${swift_node_config} DEFAULT user
1539 iniset ${swift_node_config} DEFAULT user ${USER}
1540
1541 iniuncomment ${swift_node_config} DEFAULT bind_port
1542 iniset ${swift_node_config} DEFAULT bind_port ${bind_port}
1543
1544 iniuncomment ${swift_node_config} DEFAULT swift_dir
1545 iniset ${swift_node_config} DEFAULT swift_dir ${SWIFT_CONFIG_DIR}
1546
1547 iniuncomment ${swift_node_config} DEFAULT devices
1548 iniset ${swift_node_config} DEFAULT devices ${node_path}
1549
1550 iniuncomment ${swift_node_config} DEFAULT log_facility
1551 iniset ${swift_node_config} DEFAULT log_facility LOG_LOCAL${log_facility}
1552
1553 iniuncomment ${swift_node_config} DEFAULT mount_check
1554 iniset ${swift_node_config} DEFAULT mount_check false
1555
1556 iniuncomment ${swift_node_config} ${server_type}-replicator vm_test_mode
1557 iniset ${swift_node_config} ${server_type}-replicator vm_test_mode yes
1558
Dean Troyer1e51c112012-03-16 10:42:00 -05001559 bind_port=$(( ${bind_port} + 10 ))
1560 log_facility=$(( ${log_facility} + 1 ))
1561 done
1562 }
1563 generate_swift_configuration object 6010 2
1564 generate_swift_configuration container 6011 2
1565 generate_swift_configuration account 6012 2
Chmouel Boudjnaha03f0052011-11-01 13:08:29 +00001566
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001567 # We have some specific configuration for swift for rsyslog. See
1568 # the file /etc/rsyslog.d/10-swift.conf for more info.
1569 swift_log_dir=${SWIFT_DATA_DIR}/logs
1570 rm -rf ${swift_log_dir}
1571 mkdir -p ${swift_log_dir}/hourly
1572 sudo chown -R $USER:adm ${swift_log_dir}
1573 sed "s,%SWIFT_LOGDIR%,${swift_log_dir}," $FILES/swift/rsyslog.conf | sudo \
1574 tee /etc/rsyslog.d/10-swift.conf
1575 restart_service rsyslog
Chmouel Boudjnah769eb1c2011-11-22 13:04:40 +01001576
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001577 # This is where we create three different rings for swift with
1578 # different object servers binding on different ports.
1579 pushd ${SWIFT_CONFIG_DIR} >/dev/null && {
Vishvananda Ishayaea4a53d2012-01-11 11:34:13 -08001580
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001581 rm -f *.builder *.ring.gz backups/*.builder backups/*.ring.gz
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001582
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001583 port_number=6010
1584 swift-ring-builder object.builder create ${SWIFT_PARTITION_POWER_SIZE} ${SWIFT_REPLICAS} 1
1585 for x in $(seq ${SWIFT_REPLICAS}); do
1586 swift-ring-builder object.builder add z${x}-127.0.0.1:${port_number}/sdb1 1
1587 port_number=$[port_number + 10]
1588 done
1589 swift-ring-builder object.builder rebalance
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001590
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001591 port_number=6011
1592 swift-ring-builder container.builder create ${SWIFT_PARTITION_POWER_SIZE} ${SWIFT_REPLICAS} 1
1593 for x in $(seq ${SWIFT_REPLICAS}); do
1594 swift-ring-builder container.builder add z${x}-127.0.0.1:${port_number}/sdb1 1
1595 port_number=$[port_number + 10]
1596 done
1597 swift-ring-builder container.builder rebalance
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001598
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001599 port_number=6012
1600 swift-ring-builder account.builder create ${SWIFT_PARTITION_POWER_SIZE} ${SWIFT_REPLICAS} 1
1601 for x in $(seq ${SWIFT_REPLICAS}); do
1602 swift-ring-builder account.builder add z${x}-127.0.0.1:${port_number}/sdb1 1
1603 port_number=$[port_number + 10]
1604 done
1605 swift-ring-builder account.builder rebalance
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001606
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001607 } && popd >/dev/null
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001608
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001609 # We then can start rsync.
Dean Troyer5218d452012-02-04 02:13:23 -06001610 if [[ "$os_PACKAGE" = "deb" ]]; then
1611 sudo /etc/init.d/rsync restart || :
1612 else
1613 sudo systemctl start xinetd.service
1614 fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001615
Dean Troyerb1f6c182012-03-16 09:23:23 -05001616 # First spawn all the swift services then kill the
Chmouel Boudjnah185c66e2012-03-15 17:17:39 +00001617 # proxy service so we can run it in foreground in screen.
Dean Troyerb1f6c182012-03-16 09:23:23 -05001618 # ``swift-init ... {stop|restart}`` exits with '1' if no servers are running,
1619 # ignore it just in case
1620 swift-init all restart || true
1621 swift-init proxy stop || true
Chmouel Boudjnahd5651bb2011-11-01 16:22:08 +01001622
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001623 unset s swift_hash swift_auth_server
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001624fi
1625
Dean Troyerdf0972c2012-03-07 17:31:03 -06001626
Anthony Youngacff87a2011-10-20 10:12:58 -07001627# Volume Service
1628# --------------
1629
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001630if is_service_enabled n-vol; then
Anthony Youngacff87a2011-10-20 10:12:58 -07001631 #
1632 # Configure a default volume group called 'nova-volumes' for the nova-volume
1633 # service if it does not yet exist. If you don't wish to use a file backed
1634 # volume group, create your own volume group called 'nova-volumes' before
1635 # invoking stack.sh.
1636 #
1637 # By default, the backing file is 2G in size, and is stored in /opt/stack.
Jesse Andrews38df1222011-11-20 09:55:44 -08001638
Dean Troyer2229a6e2011-12-01 17:02:07 -06001639 if ! sudo vgs $VOLUME_GROUP; then
Todd Willeyb244ef32011-11-03 18:19:21 -04001640 VOLUME_BACKING_FILE=${VOLUME_BACKING_FILE:-$DEST/nova-volumes-backing-file}
Anthony Youngb22263a2011-10-20 10:26:30 -07001641 VOLUME_BACKING_FILE_SIZE=${VOLUME_BACKING_FILE_SIZE:-2052M}
Dean Troyer2229a6e2011-12-01 17:02:07 -06001642 # Only create if the file doesn't already exists
1643 [[ -f $VOLUME_BACKING_FILE ]] || truncate -s $VOLUME_BACKING_FILE_SIZE $VOLUME_BACKING_FILE
Anthony Youngacff87a2011-10-20 10:12:58 -07001644 DEV=`sudo losetup -f --show $VOLUME_BACKING_FILE`
Dean Troyer2229a6e2011-12-01 17:02:07 -06001645 # Only create if the loopback device doesn't contain $VOLUME_GROUP
1646 if ! sudo vgs $VOLUME_GROUP; then sudo vgcreate $VOLUME_GROUP $DEV; fi
1647 fi
1648
1649 if sudo vgs $VOLUME_GROUP; then
Anthony Young63252162012-02-08 00:54:20 +00001650 # Remove nova iscsi targets
1651 sudo tgtadm --op show --mode target | grep $VOLUME_NAME_PREFIX | grep Target | cut -f3 -d ' ' | sudo xargs -n1 tgt-admin --delete || true
Dean Troyer2229a6e2011-12-01 17:02:07 -06001652 # Clean out existing volumes
1653 for lv in `sudo lvs --noheadings -o lv_name $VOLUME_GROUP`; do
1654 # VOLUME_NAME_PREFIX prefixes the LVs we want
1655 if [[ "${lv#$VOLUME_NAME_PREFIX}" != "$lv" ]]; then
Dean Troyer2229a6e2011-12-01 17:02:07 -06001656 sudo lvremove -f $VOLUME_GROUP/$lv
1657 fi
1658 done
Anthony Youngacff87a2011-10-20 10:12:58 -07001659 fi
1660
Dean Troyer5218d452012-02-04 02:13:23 -06001661 if [[ "$os_PACKAGE" = "deb" ]]; then
1662 # tgt in oneiric doesn't restart properly if tgtd isn't running
1663 # do it in two steps
1664 sudo stop tgt || true
1665 sudo start tgt
1666 else
1667 # bypass redirection to systemctl during restart
1668 sudo /sbin/service --skip-redirect tgtd restart
1669 fi
Anthony Youngacff87a2011-10-20 10:12:58 -07001670fi
1671
Dean Troyerced65172012-03-02 16:36:16 -06001672NOVA_CONF=nova.conf
1673function add_nova_opt {
1674 echo "$1" >> $NOVA_CONF_DIR/$NOVA_CONF
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001675}
1676
Vishvananda Ishaya7a103dd2012-02-23 23:35:43 +00001677# remove legacy nova.conf
1678rm -f $NOVA_DIR/bin/nova.conf
1679
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001680# (re)create nova.conf
Dean Troyerced65172012-03-02 16:36:16 -06001681rm -f $NOVA_CONF_DIR/$NOVA_CONF
1682add_nova_opt "[DEFAULT]"
1683add_nova_opt "verbose=True"
Vishvananda Ishaya50aef3b2012-03-05 23:12:04 -08001684add_nova_opt "auth_strategy=keystone"
Dean Troyerced65172012-03-02 16:36:16 -06001685add_nova_opt "allow_resize_to_same_host=True"
Dean Troyer5218d452012-02-04 02:13:23 -06001686add_nova_opt "root_helper=sudo $NOVA_ROOTWRAP"
Vishvananda Ishaya51aa4012012-03-06 12:45:19 -08001687add_nova_opt "compute_scheduler_driver=$SCHEDULER"
Dean Troyerced65172012-03-02 16:36:16 -06001688add_nova_opt "dhcpbridge_flagfile=$NOVA_CONF_DIR/$NOVA_CONF"
1689add_nova_opt "fixed_range=$FIXED_RANGE"
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001690add_nova_opt "s3_host=$SERVICE_HOST"
1691add_nova_opt "s3_port=$S3_SERVICE_PORT"
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001692if is_service_enabled quantum; then
Dean Troyerced65172012-03-02 16:36:16 -06001693 add_nova_opt "network_manager=nova.network.quantum.manager.QuantumManager"
1694 add_nova_opt "quantum_connection_host=$Q_HOST"
1695 add_nova_opt "quantum_connection_port=$Q_PORT"
Jason Kölker64a90662012-01-23 11:17:27 -06001696
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001697 if is_service_enabled melange; then
Dean Troyerced65172012-03-02 16:36:16 -06001698 add_nova_opt "quantum_ipam_lib=nova.network.quantum.melange_ipam_lib"
1699 add_nova_opt "use_melange_mac_generation=True"
1700 add_nova_opt "melange_host=$M_HOST"
1701 add_nova_opt "melange_port=$M_PORT"
Jason Kölker64a90662012-01-23 11:17:27 -06001702 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001703
1704 if [[ "$Q_PLUGIN" = "openvswitch" ]]; then
1705 NOVA_VIF_DRIVER="nova.virt.libvirt.vif.LibvirtOpenVswitchDriver"
1706 LINUXNET_VIF_DRIVER="nova.network.linux_net.LinuxOVSInterfaceDriver"
1707 elif [[ "$Q_PLUGIN" = "linuxbridge" ]]; then
1708 NOVA_VIF_DRIVER="nova.virt.libvirt.vif.QuantumLinuxBridgeVIFDriver"
1709 LINUXNET_VIF_DRIVER="nova.network.linux_net.QuantumLinuxBridgeInterfaceDriver"
Brad Hall1bfa3d52011-10-27 18:18:20 -07001710 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001711 add_nova_opt "libvirt_vif_type=ethernet"
1712 add_nova_opt "libvirt_vif_driver=$NOVA_VIF_DRIVER"
1713 add_nova_opt "linuxnet_interface_driver=$LINUXNET_VIF_DRIVER"
1714 add_nova_opt "quantum_use_dhcp=True"
Brad Hall1bfa3d52011-10-27 18:18:20 -07001715else
Dean Troyerced65172012-03-02 16:36:16 -06001716 add_nova_opt "network_manager=nova.network.manager.$NET_MAN"
Brad Hall1bfa3d52011-10-27 18:18:20 -07001717fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001718if is_service_enabled n-vol; then
Dean Troyerced65172012-03-02 16:36:16 -06001719 add_nova_opt "volume_group=$VOLUME_GROUP"
Vishvananda Ishaya0ac5a8a2012-05-02 00:27:27 +00001720 add_nova_opt "volume_name_template=${VOLUME_NAME_PREFIX}%s"
Vishvananda Ishaya524aa542012-01-14 01:08:34 +00001721 # oneiric no longer supports ietadm
Dean Troyerced65172012-03-02 16:36:16 -06001722 add_nova_opt "iscsi_helper=tgtadm"
Jesse Andrewsd02b7b72011-11-14 08:59:05 -08001723fi
Dean Troyerced65172012-03-02 16:36:16 -06001724add_nova_opt "osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions"
1725add_nova_opt "my_ip=$HOST_IP"
1726add_nova_opt "public_interface=$PUBLIC_INTERFACE"
1727add_nova_opt "vlan_interface=$VLAN_INTERFACE"
1728add_nova_opt "flat_network_bridge=$FLAT_NETWORK_BRIDGE"
John Garbutt8e2cffd2012-03-02 16:22:07 +00001729if [ -n "$FLAT_INTERFACE" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001730 add_nova_opt "flat_interface=$FLAT_INTERFACE"
John Garbutt8e2cffd2012-03-02 16:22:07 +00001731fi
Gabriel Hurley71f23eb2012-02-15 17:39:05 -08001732add_nova_opt "sql_connection=$BASE_SQL_CONN/nova?charset=utf8"
Dean Troyerced65172012-03-02 16:36:16 -06001733add_nova_opt "libvirt_type=$LIBVIRT_TYPE"
1734add_nova_opt "instance_name_template=${INSTANCE_NAME_PREFIX}%08x"
Anthony Young2fcb6662012-02-03 20:17:22 +00001735# All nova-compute workers need to know the vnc configuration options
1736# These settings don't hurt anything if n-xvnc and n-novnc are disabled
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001737if is_service_enabled n-cpu; then
Anthony Youngce116912012-01-17 15:46:53 -08001738 NOVNCPROXY_URL=${NOVNCPROXY_URL:-"http://$SERVICE_HOST:6080/vnc_auto.html"}
Dean Troyerced65172012-03-02 16:36:16 -06001739 add_nova_opt "novncproxy_base_url=$NOVNCPROXY_URL"
Anthony Youngce116912012-01-17 15:46:53 -08001740 XVPVNCPROXY_URL=${XVPVNCPROXY_URL:-"http://$SERVICE_HOST:6081/console"}
Dean Troyerced65172012-03-02 16:36:16 -06001741 add_nova_opt "xvpvncproxy_base_url=$XVPVNCPROXY_URL"
Anthony Youngce116912012-01-17 15:46:53 -08001742fi
1743if [ "$VIRT_DRIVER" = 'xenserver' ]; then
1744 VNCSERVER_PROXYCLIENT_ADDRESS=${VNCSERVER_PROXYCLIENT_ADDRESS=169.254.0.1}
1745else
1746 VNCSERVER_PROXYCLIENT_ADDRESS=${VNCSERVER_PROXYCLIENT_ADDRESS=127.0.0.1}
1747fi
Anthony Young50fc5c62012-01-26 09:38:33 -08001748# Address on which instance vncservers will listen on compute hosts.
1749# For multi-host, this should be the management ip of the compute host.
1750VNCSERVER_LISTEN=${VNCSERVER_LISTEN=127.0.0.1}
Dean Troyerced65172012-03-02 16:36:16 -06001751add_nova_opt "vncserver_listen=$VNCSERVER_LISTEN"
1752add_nova_opt "vncserver_proxyclient_address=$VNCSERVER_PROXYCLIENT_ADDRESS"
1753add_nova_opt "api_paste_config=$NOVA_CONF_DIR/api-paste.ini"
1754add_nova_opt "image_service=nova.image.glance.GlanceImageService"
1755add_nova_opt "ec2_dmz_host=$EC2_DMZ_HOST"
John Garbutt22ddb272012-05-24 15:56:06 +01001756if is_service_enabled qpid ; then
1757 add_nova_opt "rpc_backend=nova.rpc.impl_qpid"
1758elif [ -n "$RABBIT_HOST" ] && [ -n "$RABBIT_PASSWORD" ]; then
Russell Bryant4a221452012-03-13 13:44:12 -04001759 add_nova_opt "rabbit_host=$RABBIT_HOST"
1760 add_nova_opt "rabbit_password=$RABBIT_PASSWORD"
Russell Bryant4a221452012-03-13 13:44:12 -04001761fi
Dean Troyerced65172012-03-02 16:36:16 -06001762add_nova_opt "glance_api_servers=$GLANCE_HOSTPORT"
1763add_nova_opt "force_dhcp_release=True"
Vishvananda Ishaya3e2b1742011-10-28 12:20:07 -07001764if [ -n "$INSTANCES_PATH" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001765 add_nova_opt "instances_path=$INSTANCES_PATH"
Vishvananda Ishayae72bdb02011-10-28 13:34:38 -07001766fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001767if [ "$MULTI_HOST" != "False" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001768 add_nova_opt "multi_host=True"
1769 add_nova_opt "send_arp_for_ha=True"
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001770fi
James E. Blair5855a642011-10-26 15:44:27 -04001771if [ "$SYSLOG" != "False" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001772 add_nova_opt "use_syslog=True"
James E. Blair5855a642011-10-26 15:44:27 -04001773fi
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001774if [ "$API_RATE_LIMIT" != "True" ]; then
1775 add_nova_opt "api_rate_limit=False"
1776fi
Vishvananda Ishaya6f13ba32012-06-01 23:17:38 +00001777if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
1778 # Add color to logging output
1779 add_nova_opt "logging_context_format_string=%(asctime)s %(color)s%(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s%(color)s] %(instance)s%(color)s%(message)s"
1780 add_nova_opt "logging_default_format_string=%(asctime)s %(color)s%(levelname)s %(name)s [-%(color)s] %(instance)s%(color)s%(message)s"
1781 add_nova_opt "logging_debug_format_suffix=from (pid=%(process)d) %(funcName)s %(pathname)s:%(lineno)d"
1782 add_nova_opt "logging_exception_prefix=%(color)s%(asctime)s TRACE %(name)s %(instance)s"
1783else
1784 # Show user_name and project_name instead of user_id and project_id
1785 add_nova_opt "logging_context_format_string=%(asctime)s %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s"
1786fi
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001787
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001788
Dean Troyerced65172012-03-02 16:36:16 -06001789# Provide some transition from EXTRA_FLAGS to EXTRA_OPTS
1790if [[ -z "$EXTRA_OPTS" && -n "$EXTRA_FLAGS" ]]; then
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001791 EXTRA_OPTS=$EXTRA_FLAGS
Dean Troyerced65172012-03-02 16:36:16 -06001792fi
1793
1794# You can define extra nova conf flags by defining the array EXTRA_OPTS,
1795# For Example: EXTRA_OPTS=(foo=true bar=2)
1796for I in "${EXTRA_OPTS[@]}"; do
1797 # Attempt to convert flags to options
John Garbutt030fb232012-04-27 18:28:28 +01001798 add_nova_opt ${I//--}
Jesse Andrews38df1222011-11-20 09:55:44 -08001799done
1800
Dean Troyerdf0972c2012-03-07 17:31:03 -06001801
Anthony Youngb62b4ca2011-10-26 22:29:08 -07001802# XenServer
1803# ---------
1804
1805if [ "$VIRT_DRIVER" = 'xenserver' ]; then
1806 read_password XENAPI_PASSWORD "ENTER A PASSWORD TO USE FOR XEN."
Dean Troyerced65172012-03-02 16:36:16 -06001807 add_nova_opt "connection_type=xenapi"
John Garbutt92e85602012-03-02 16:08:37 +00001808 XENAPI_CONNECTION_URL=${XENAPI_CONNECTION_URL:-"http://169.254.0.1"}
John Garbutt030fb232012-04-27 18:28:28 +01001809 XENAPI_USER=${XENAPI_USER:-"root"}
Dean Troyerced65172012-03-02 16:36:16 -06001810 add_nova_opt "xenapi_connection_url=$XENAPI_CONNECTION_URL"
John Garbutt030fb232012-04-27 18:28:28 +01001811 add_nova_opt "xenapi_connection_username=$XENAPI_USER"
Dean Troyerced65172012-03-02 16:36:16 -06001812 add_nova_opt "xenapi_connection_password=$XENAPI_PASSWORD"
1813 add_nova_opt "flat_injected=False"
Anthony Youngce116912012-01-17 15:46:53 -08001814 # Need to avoid crash due to new firewall support
1815 XEN_FIREWALL_DRIVER=${XEN_FIREWALL_DRIVER:-"nova.virt.firewall.IptablesFirewallDriver"}
Dean Troyerced65172012-03-02 16:36:16 -06001816 add_nova_opt "firewall_driver=$XEN_FIREWALL_DRIVER"
Anthony Youngb62b4ca2011-10-26 22:29:08 -07001817else
Dean Troyerced65172012-03-02 16:36:16 -06001818 add_nova_opt "connection_type=libvirt"
Armando Migliaccio34f62492012-01-31 14:33:19 +00001819 LIBVIRT_FIREWALL_DRIVER=${LIBVIRT_FIREWALL_DRIVER:-"nova.virt.libvirt.firewall.IptablesFirewallDriver"}
Dean Troyerced65172012-03-02 16:36:16 -06001820 add_nova_opt "firewall_driver=$LIBVIRT_FIREWALL_DRIVER"
Anthony Youngb62b4ca2011-10-26 22:29:08 -07001821fi
1822
Dean Troyerdf0972c2012-03-07 17:31:03 -06001823
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001824# Nova Database
1825# ~~~~~~~~~~~~~
1826
1827# All nova components talk to a central database. We will need to do this step
1828# only once for an entire cluster.
1829
Chmouel Boudjnahc9e01882012-03-15 17:21:24 +00001830if is_service_enabled mysql && is_service_enabled nova; then
Anthony Younga0748002011-09-16 21:37:36 -07001831 # (re)create nova database
Anthony Young7a549f42011-10-12 07:13:13 +00001832 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS nova;'
1833 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE nova;'
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001834
1835 # (re)create nova database
Anthony Younga0748002011-09-16 21:37:36 -07001836 $NOVA_DIR/bin/nova-manage db sync
Anthony Younga0748002011-09-16 21:37:36 -07001837fi
1838
1839
Jesse Andrewsd74257d2011-09-13 01:24:50 -07001840# Launch Services
1841# ===============
Jesse Andrews30f68e92011-09-13 00:59:54 -07001842
Jesse Andrews1c1d1502011-09-12 19:29:56 -07001843# nova api crashes if we start it with a regular screen command,
1844# so send the start command by forcing text into the window.
Jesse Andrewsdfcd2002011-09-13 13:17:22 -07001845# Only run the services specified in ``ENABLED_SERVICES``
1846
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001847# launch the glance registry service
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001848if is_service_enabled g-reg; then
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001849 screen_it g-reg "cd $GLANCE_DIR; bin/glance-registry --config-file=$GLANCE_CONF_DIR/glance-registry.conf"
Anthony Youngd000b222011-09-19 14:46:53 -07001850fi
1851
Jesse Andrews644b8e82011-10-02 17:50:41 -04001852# launch the glance api and wait for it to answer before continuing
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001853if is_service_enabled g-api; then
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001854 screen_it g-api "cd $GLANCE_DIR; bin/glance-api --config-file=$GLANCE_CONF_DIR/glance-api.conf"
James E. Blair92e81992011-10-11 09:26:29 -05001855 echo "Waiting for g-api ($GLANCE_HOSTPORT) to start..."
Dean Troyerc727aa82012-01-13 12:13:59 -06001856 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -q -O- http://$GLANCE_HOSTPORT; do sleep 1; done"; then
James E. Blair92e81992011-10-11 09:26:29 -05001857 echo "g-api did not start"
1858 exit 1
1859 fi
Anthony Youngd000b222011-09-19 14:46:53 -07001860fi
1861
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001862if is_service_enabled key; then
termieeacc5952012-01-11 01:59:00 +00001863 # (re)create keystone database
1864 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS keystone;'
Gabriel Hurley71f23eb2012-02-15 17:39:05 -08001865 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE keystone CHARACTER SET utf8;'
termieeacc5952012-01-11 01:59:00 +00001866
Dean Troyer09e636e2012-03-19 16:31:12 -05001867 KEYSTONE_CONF_DIR=${KEYSTONE_CONF_DIR:-/etc/keystone}
1868 KEYSTONE_CONF=$KEYSTONE_CONF_DIR/keystone.conf
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001869 KEYSTONE_CATALOG_BACKEND=${KEYSTONE_CATALOG_BACKEND:-template}
termieeacc5952012-01-11 01:59:00 +00001870
Dean Troyer09e636e2012-03-19 16:31:12 -05001871 if [[ ! -d $KEYSTONE_CONF_DIR ]]; then
1872 sudo mkdir -p $KEYSTONE_CONF_DIR
1873 sudo chown `whoami` $KEYSTONE_CONF_DIR
1874 fi
1875
1876 if [[ "$KEYSTONE_CONF_DIR" != "$KEYSTONE_DIR/etc" ]]; then
Dean Troyer09e636e2012-03-19 16:31:12 -05001877 cp -p $KEYSTONE_DIR/etc/keystone.conf.sample $KEYSTONE_CONF
1878 cp -p $KEYSTONE_DIR/etc/policy.json $KEYSTONE_CONF_DIR
1879 fi
Dean Troyer09e636e2012-03-19 16:31:12 -05001880
1881 # Rewrite stock keystone.conf:
1882 iniset $KEYSTONE_CONF DEFAULT admin_token "$SERVICE_TOKEN"
1883 iniset $KEYSTONE_CONF sql connection "$BASE_SQL_CONN/keystone?charset=utf8"
Dean Troyer09e636e2012-03-19 16:31:12 -05001884 iniset $KEYSTONE_CONF ec2 driver "keystone.contrib.ec2.backends.sql.Ec2"
Dean Troyer09e636e2012-03-19 16:31:12 -05001885 sed -e "
1886 /^pipeline.*ec2_extension crud_/s|ec2_extension crud_extension|ec2_extension s3_extension crud_extension|;
1887 " -i $KEYSTONE_CONF
1888 # Append the S3 bits
1889 iniset $KEYSTONE_CONF filter:s3_extension paste.filter_factory "keystone.contrib.s3:S3Extension.factory"
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001890
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001891 if [[ "$KEYSTONE_CATALOG_BACKEND" = "sql" ]]; then
1892 # Configure keystone.conf to use sql
1893 iniset $KEYSTONE_CONF catalog driver keystone.catalog.backends.sql.Catalog
1894 inicomment $KEYSTONE_CONF catalog template_file
1895 else
1896 KEYSTONE_CATALOG=$KEYSTONE_CONF_DIR/default_catalog.templates
1897 cp -p $FILES/default_catalog.templates $KEYSTONE_CATALOG
1898 # Add swift endpoints to service catalog if swift is enabled
1899 if is_service_enabled swift; then
1900 echo "catalog.RegionOne.object_store.publicURL = http://%SERVICE_HOST%:8080/v1/AUTH_\$(tenant_id)s" >> $KEYSTONE_CATALOG
1901 echo "catalog.RegionOne.object_store.adminURL = http://%SERVICE_HOST%:8080/" >> $KEYSTONE_CATALOG
1902 echo "catalog.RegionOne.object_store.internalURL = http://%SERVICE_HOST%:8080/v1/AUTH_\$(tenant_id)s" >> $KEYSTONE_CATALOG
1903 echo "catalog.RegionOne.object_store.name = Swift Service" >> $KEYSTONE_CATALOG
1904 fi
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001905
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001906 # Add quantum endpoints to service catalog if quantum is enabled
1907 if is_service_enabled quantum; then
1908 echo "catalog.RegionOne.network.publicURL = http://%SERVICE_HOST%:9696/" >> $KEYSTONE_CATALOG
1909 echo "catalog.RegionOne.network.adminURL = http://%SERVICE_HOST%:9696/" >> $KEYSTONE_CATALOG
1910 echo "catalog.RegionOne.network.internalURL = http://%SERVICE_HOST%:9696/" >> $KEYSTONE_CATALOG
1911 echo "catalog.RegionOne.network.name = Quantum Service" >> $KEYSTONE_CATALOG
1912 fi
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001913
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001914 sudo sed -e "
1915 s,%SERVICE_HOST%,$SERVICE_HOST,g;
1916 s,%S3_SERVICE_PORT%,$S3_SERVICE_PORT,g;
1917 " -i $KEYSTONE_CATALOG
1918
1919 # Configure keystone.conf to use templates
1920 iniset $KEYSTONE_CONF catalog driver "keystone.catalog.backends.templated.TemplatedCatalog"
1921 iniset $KEYSTONE_CONF catalog template_file "$KEYSTONE_CATALOG"
1922 fi
termieeacc5952012-01-11 01:59:00 +00001923
Dean Troyer09e636e2012-03-19 16:31:12 -05001924 # Set up logging
1925 LOGGING_ROOT="devel"
termieeacc5952012-01-11 01:59:00 +00001926 if [ "$SYSLOG" != "False" ]; then
Dean Troyer09e636e2012-03-19 16:31:12 -05001927 LOGGING_ROOT="$LOGGING_ROOT,production"
termieeacc5952012-01-11 01:59:00 +00001928 fi
Dean Troyer09e636e2012-03-19 16:31:12 -05001929 KEYSTONE_LOG_CONFIG="--log-config $KEYSTONE_CONF_DIR/logging.conf"
1930 cp $KEYSTONE_DIR/etc/logging.conf.sample $KEYSTONE_CONF_DIR/logging.conf
1931 iniset $KEYSTONE_CONF_DIR/logging.conf logger_root level "DEBUG"
1932 iniset $KEYSTONE_CONF_DIR/logging.conf logger_root handlers "devel,production"
termieeacc5952012-01-11 01:59:00 +00001933
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001934 # Set up the keystone database
Dean Troyer09e636e2012-03-19 16:31:12 -05001935 $KEYSTONE_DIR/bin/keystone-manage db_sync
1936
1937 # launch keystone and wait for it to answer before continuing
termie8a41c9d2012-02-02 17:31:19 -08001938 screen_it key "cd $KEYSTONE_DIR && $KEYSTONE_DIR/bin/keystone-all --config-file $KEYSTONE_CONF $KEYSTONE_LOG_CONFIG -d --debug"
James E. Blair92e81992011-10-11 09:26:29 -05001939 echo "Waiting for keystone to start..."
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001940 if ! timeout $SERVICE_TIMEOUT sh -c "while http_proxy= wget -O- $KEYSTONE_AUTH_PROTOCOL://$SERVICE_HOST:$KEYSTONE_API_PORT/v2.0/ 2>&1 | grep -q 'refused'; do sleep 1; done"; then
James E. Blair92e81992011-10-11 09:26:29 -05001941 echo "keystone did not start"
1942 exit 1
1943 fi
termieeacc5952012-01-11 01:59:00 +00001944
Vishvananda Ishayad1f52432012-02-09 03:50:57 +00001945 # keystone_data.sh creates services, admin and demo users, and roles.
1946 SERVICE_ENDPOINT=$KEYSTONE_AUTH_PROTOCOL://$KEYSTONE_AUTH_HOST:$KEYSTONE_AUTH_PORT/v2.0
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001947
1948 ADMIN_PASSWORD=$ADMIN_PASSWORD SERVICE_TENANT_NAME=$SERVICE_TENANT_NAME SERVICE_PASSWORD=$SERVICE_PASSWORD \
1949 SERVICE_TOKEN=$SERVICE_TOKEN SERVICE_ENDPOINT=$SERVICE_ENDPOINT SERVICE_HOST=$SERVICE_HOST \
1950 S3_SERVICE_PORT=$S3_SERVICE_PORT KEYSTONE_CATALOG_BACKEND=$KEYSTONE_CATALOG_BACKEND \
1951 DEVSTACK_DIR=$TOP_DIR ENABLED_SERVICES=$ENABLED_SERVICES \
Dean Troyerb3288382012-02-28 16:41:10 -06001952 bash $FILES/keystone_data.sh
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001953
1954 # create an access key and secret key for nova ec2 register image
1955 if is_service_enabled swift && is_service_enabled nova; then
Dean Troyer3f7c06f2012-04-03 17:19:36 -05001956 NOVA_USER_ID=$(keystone user-list | grep ' nova ' | get_field 1)
1957 NOVA_TENANT_ID=$(keystone tenant-list | grep " $SERVICE_TENANT_NAME " | get_field 1)
1958 CREDS=$(keystone ec2-credentials-create --user $NOVA_USER_ID --tenant_id $NOVA_TENANT_ID)
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001959 ACCESS_KEY=$(echo "$CREDS" | awk '/ access / { print $4 }')
1960 SECRET_KEY=$(echo "$CREDS" | awk '/ secret / { print $4 }')
1961 add_nova_opt "s3_access_key=$ACCESS_KEY"
1962 add_nova_opt "s3_secret_key=$SECRET_KEY"
1963 add_nova_opt "s3_affix_tenant=True"
1964 fi
Anthony Youngd000b222011-09-19 14:46:53 -07001965fi
1966
Jesse Andrews644b8e82011-10-02 17:50:41 -04001967# launch the nova-api and wait for it to answer before continuing
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001968if is_service_enabled n-api; then
Anthony Young9bf3d762011-09-20 09:51:16 -07001969 screen_it n-api "cd $NOVA_DIR && $NOVA_DIR/bin/nova-api"
James E. Blair92e81992011-10-11 09:26:29 -05001970 echo "Waiting for nova-api to start..."
Dean Troyerc727aa82012-01-13 12:13:59 -06001971 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -q -O- http://127.0.0.1:8774; do sleep 1; done"; then
James E. Blair92e81992011-10-11 09:26:29 -05001972 echo "nova-api did not start"
1973 exit 1
1974 fi
Anthony Youngd000b222011-09-19 14:46:53 -07001975fi
Brad Hall1bfa3d52011-10-27 18:18:20 -07001976
Brad Halld9e544e2011-10-28 08:28:26 -07001977# If we're using Quantum (i.e. q-svc is enabled), network creation has to
1978# happen after we've started the Quantum service.
Ken Pepple389f4ef2012-03-08 19:37:03 -08001979if is_service_enabled mysql && is_service_enabled nova; then
Brad Hall1bfa3d52011-10-27 18:18:20 -07001980 # create a small network
Justin Santa Barbaracc86a9e2012-02-06 12:15:59 -08001981 $NOVA_DIR/bin/nova-manage network create private $FIXED_RANGE 1 $FIXED_NETWORK_SIZE $NETWORK_CREATE_ARGS
Brad Hall1bfa3d52011-10-27 18:18:20 -07001982
Tomoe Sugihara1c77d702012-03-12 21:49:54 +09001983 # create some floating ips
1984 $NOVA_DIR/bin/nova-manage floating create $FLOATING_RANGE
Dean Troyer696ad332012-01-10 15:34:34 -06001985
Tomoe Sugihara1c77d702012-03-12 21:49:54 +09001986 # create a second pool
1987 $NOVA_DIR/bin/nova-manage floating create --ip_range=$TEST_FLOATING_RANGE --pool=$TEST_FLOATING_POOL
Brad Hall1bfa3d52011-10-27 18:18:20 -07001988fi
1989
root40a37002011-09-20 18:06:14 +00001990# Launching nova-compute should be as simple as running ``nova-compute`` but
1991# have to do a little more than that in our script. Since we add the group
Jesse Andrews1f717602011-09-16 15:18:53 -07001992# ``libvirtd`` to our user in this script, when nova-compute is run it is
root40a37002011-09-20 18:06:14 +00001993# within the context of our original shell (so our groups won't be updated).
Scott Moser8ab1ade2011-10-07 21:03:16 -04001994# Use 'sg' to execute nova-compute as a member of the libvirtd group.
Ken Pepple389f4ef2012-03-08 19:37:03 -08001995# We don't check for is_service_enable as screen_it does it for us
Scott Moser8ab1ade2011-10-07 21:03:16 -04001996screen_it n-cpu "cd $NOVA_DIR && sg libvirtd $NOVA_DIR/bin/nova-compute"
Vishvananda Ishaya75bbd752012-01-19 23:28:46 +00001997screen_it n-crt "cd $NOVA_DIR && $NOVA_DIR/bin/nova-cert"
Anthony Youngacff87a2011-10-20 10:12:58 -07001998screen_it n-vol "cd $NOVA_DIR && $NOVA_DIR/bin/nova-volume"
Anthony Young9bf3d762011-09-20 09:51:16 -07001999screen_it n-net "cd $NOVA_DIR && $NOVA_DIR/bin/nova-network"
2000screen_it n-sch "cd $NOVA_DIR && $NOVA_DIR/bin/nova-scheduler"
Ken Pepple389f4ef2012-03-08 19:37:03 -08002001screen_it n-novnc "cd $NOVNC_DIR && ./utils/nova-novncproxy --config-file $NOVA_CONF_DIR/$NOVA_CONF --web ."
2002screen_it n-xvnc "cd $NOVA_DIR && ./bin/nova-xvpvncproxy --config-file $NOVA_CONF_DIR/$NOVA_CONF"
2003screen_it n-cauth "cd $NOVA_DIR && ./bin/nova-consoleauth"
Dean Troyer5218d452012-02-04 02:13:23 -06002004screen_it horizon "cd $HORIZON_DIR && sudo tail -f /var/log/$APACHE_NAME/horizon_error.log"
Dean Troyer1e51c112012-03-16 10:42:00 -05002005screen_it swift "cd $SWIFT_DIR && $SWIFT_DIR/bin/swift-proxy-server ${SWIFT_CONFIG_DIR}/proxy-server.conf -v"
Jesse Andrews75a37652011-09-12 17:09:08 -07002006
Chmouel Boudjnahe347b992012-03-16 17:38:49 +00002007# Starting the nova-objectstore only if swift service is not enabled.
2008# Swift will act as s3 objectstore.
2009is_service_enabled swift || \
2010 screen_it n-obj "cd $NOVA_DIR && $NOVA_DIR/bin/nova-objectstore"
Dean Troyerdf0972c2012-03-07 17:31:03 -06002011
Jesse Andrewsd74257d2011-09-13 01:24:50 -07002012# Install Images
2013# ==============
Jesse Andrewse49b8bd2011-09-12 18:08:04 -07002014
Anthony Young0ab1d462011-10-13 23:03:23 -07002015# Upload an image to glance.
Jesse Andrews5372f432011-10-03 01:08:24 -04002016#
Anthony Young0ab1d462011-10-13 23:03:23 -07002017# The default image is a small ***TTY*** testing image, which lets you login
2018# the username/password of root/password.
2019#
Dean Troyerdf0972c2012-03-07 17:31:03 -06002020# TTY also uses ``cloud-init``, supporting login via keypair and sending scripts as
Anthony Young0ab1d462011-10-13 23:03:23 -07002021# userdata. See https://help.ubuntu.com/community/CloudInit for more on cloud-init
2022#
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01002023# Override ``IMAGE_URLS`` with a comma-separated list of uec images.
Jesse Andrewsaab7eae2011-10-19 10:30:19 -07002024#
2025# * **natty**: http://uec-images.ubuntu.com/natty/current/natty-server-cloudimg-amd64.tar.gz
2026# * **oneiric**: http://uec-images.ubuntu.com/oneiric/current/oneiric-server-cloudimg-amd64.tar.gz
Jesse Andrews08e8b742011-10-02 23:42:56 -04002027
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002028if is_service_enabled g-reg; then
Anthony Young7a8989e2011-10-14 10:20:30 -07002029 # Create a directory for the downloaded image tarballs.
Jesse Andrews08e8b742011-10-02 23:42:56 -04002030 mkdir -p $FILES/images
2031
termie747ee332012-01-11 22:31:59 +00002032 ADMIN_USER=admin
2033 ADMIN_TENANT=admin
Dean Troyerbbafb1b2012-06-11 16:51:39 -05002034 TOKEN=$(keystone --os_tenant_name $ADMIN_TENANT --os_username $ADMIN_USER --os_password $ADMIN_PASSWORD --os_auth_url http://$HOST_IP:5000/v2.0 token-get | grep ' id ' | get_field 2)
termie747ee332012-01-11 22:31:59 +00002035
Anthony Youngb62b4ca2011-10-26 22:29:08 -07002036 # Option to upload legacy ami-tty, which works with xenserver
Dean Troyer314da5a2012-03-28 19:15:48 -05002037 if [[ -n "$UPLOAD_LEGACY_TTY" ]]; then
2038 IMAGE_URLS="${IMAGE_URLS:+${IMAGE_URLS},}http://images.ansolabs.com/tty.tgz"
Anthony Youngb62b4ca2011-10-26 22:29:08 -07002039 fi
2040
Anthony Young120f4862011-10-14 09:31:09 -07002041 for image_url in ${IMAGE_URLS//,/ }; do
2042 # Downloads the image (uec ami+aki style), then extracts it.
Jesse Andrewsac1831e2011-10-24 21:37:00 -07002043 IMAGE_FNAME=`basename "$image_url"`
Dean Troyerbbafb1b2012-06-11 16:51:39 -05002044 if [[ ! -f $FILES/$IMAGE_FNAME || "$(stat -c "%s" $FILES/$IMAGE_FNAME)" = "0" ]]; then
Anthony Young120f4862011-10-14 09:31:09 -07002045 wget -c $image_url -O $FILES/$IMAGE_FNAME
2046 fi
Jesse Andrewse49b8bd2011-09-12 18:08:04 -07002047
Scott Moser4f6d7b62011-12-08 16:22:51 -05002048 KERNEL=""
2049 RAMDISK=""
Dean Troyerb315ddf2012-03-29 16:19:42 -05002050 DISK_FORMAT=""
2051 CONTAINER_FORMAT=""
Scott Moser4f6d7b62011-12-08 16:22:51 -05002052 case "$IMAGE_FNAME" in
2053 *.tar.gz|*.tgz)
2054 # Extract ami and aki files
2055 [ "${IMAGE_FNAME%.tar.gz}" != "$IMAGE_FNAME" ] &&
2056 IMAGE_NAME="${IMAGE_FNAME%.tar.gz}" ||
2057 IMAGE_NAME="${IMAGE_FNAME%.tgz}"
2058 xdir="$FILES/images/$IMAGE_NAME"
2059 rm -Rf "$xdir";
2060 mkdir "$xdir"
2061 tar -zxf $FILES/$IMAGE_FNAME -C "$xdir"
Dean Troyer314da5a2012-03-28 19:15:48 -05002062 KERNEL=$(for f in "$xdir/"*-vmlinuz* "$xdir/"aki-*/image; do
Scott Moser4f6d7b62011-12-08 16:22:51 -05002063 [ -f "$f" ] && echo "$f" && break; done; true)
Dean Troyer314da5a2012-03-28 19:15:48 -05002064 RAMDISK=$(for f in "$xdir/"*-initrd* "$xdir/"ari-*/image; do
Scott Moser4f6d7b62011-12-08 16:22:51 -05002065 [ -f "$f" ] && echo "$f" && break; done; true)
Dean Troyer314da5a2012-03-28 19:15:48 -05002066 IMAGE=$(for f in "$xdir/"*.img "$xdir/"ami-*/image; do
Scott Moser4f6d7b62011-12-08 16:22:51 -05002067 [ -f "$f" ] && echo "$f" && break; done; true)
Dean Troyer314da5a2012-03-28 19:15:48 -05002068 if [[ -z "$IMAGE_NAME" ]]; then
2069 IMAGE_NAME=$(basename "$IMAGE" ".img")
2070 fi
Scott Moser4f6d7b62011-12-08 16:22:51 -05002071 ;;
2072 *.img)
2073 IMAGE="$FILES/$IMAGE_FNAME";
2074 IMAGE_NAME=$(basename "$IMAGE" ".img")
Russell Bryant20121bd2012-03-28 16:22:52 -04002075 DISK_FORMAT=raw
2076 CONTAINER_FORMAT=bare
Scott Moser4f6d7b62011-12-08 16:22:51 -05002077 ;;
2078 *.img.gz)
2079 IMAGE="$FILES/${IMAGE_FNAME}"
2080 IMAGE_NAME=$(basename "$IMAGE" ".img.gz")
Russell Bryant20121bd2012-03-28 16:22:52 -04002081 DISK_FORMAT=raw
2082 CONTAINER_FORMAT=bare
2083 ;;
2084 *.qcow2)
2085 IMAGE="$FILES/${IMAGE_FNAME}"
2086 IMAGE_NAME=$(basename "$IMAGE" ".qcow2")
2087 DISK_FORMAT=qcow2
2088 CONTAINER_FORMAT=bare
Scott Moser4f6d7b62011-12-08 16:22:51 -05002089 ;;
2090 *) echo "Do not know what to do with $IMAGE_FNAME"; false;;
2091 esac
Anthony Young70dc5e02011-09-15 16:52:43 -07002092
Russell Bryant20121bd2012-03-28 16:22:52 -04002093 if [ "$CONTAINER_FORMAT" = "bare" ]; then
Dean Troyer45495252012-04-13 13:16:38 -05002094 glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "$IMAGE_NAME" --public --container-format=$CONTAINER_FORMAT --disk-format $DISK_FORMAT < <(zcat --force "${IMAGE}")
Russell Bryant20121bd2012-03-28 16:22:52 -04002095 else
2096 # Use glance client to add the kernel the root filesystem.
2097 # We parse the results of the first upload to get the glance ID of the
2098 # kernel for use when uploading the root filesystem.
2099 KERNEL_ID=""; RAMDISK_ID="";
2100 if [ -n "$KERNEL" ]; then
Dean Troyer45495252012-04-13 13:16:38 -05002101 KERNEL_ID=$(glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "$IMAGE_NAME-kernel" --public --container-format aki --disk-format aki < "$KERNEL" | grep ' id ' | get_field 2)
Russell Bryant20121bd2012-03-28 16:22:52 -04002102 fi
2103 if [ -n "$RAMDISK" ]; then
Dean Troyer45495252012-04-13 13:16:38 -05002104 RAMDISK_ID=$(glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "$IMAGE_NAME-ramdisk" --public --container-format ari --disk-format ari < "$RAMDISK" | grep ' id ' | get_field 2)
Russell Bryant20121bd2012-03-28 16:22:52 -04002105 fi
Dean Troyer45495252012-04-13 13:16:38 -05002106 glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "${IMAGE_NAME%.img}" --public --container-format ami --disk-format ami ${KERNEL_ID:+--property kernel_id=$KERNEL_ID} ${RAMDISK_ID:+--property ramdisk_id=$RAMDISK_ID} < "${IMAGE}"
Scott Moser4f6d7b62011-12-08 16:22:51 -05002107 fi
Anthony Young120f4862011-10-14 09:31:09 -07002108 done
Jesse Andrewse49b8bd2011-09-12 18:08:04 -07002109fi
Jesse Andrews24859062011-09-15 21:28:23 -07002110
Dean Troyerdf0972c2012-03-07 17:31:03 -06002111
Dean Troyerf5633dd2012-03-28 11:21:40 -05002112# Run local script
2113# ================
2114
2115# Run ``local.sh`` if it exists to perform user-managed tasks
2116if [[ -x $TOP_DIR/local.sh ]]; then
2117 echo "Running user script $TOP_DIR/local.sh"
2118 $TOP_DIR/local.sh
2119fi
2120
2121
Scott Moserb94f4bf2011-10-07 14:51:07 +00002122# Fin
2123# ===
2124
Dean Troyer471de7a2011-12-27 11:45:55 -06002125set +o xtrace
Scott Moserb94f4bf2011-10-07 14:51:07 +00002126
Dean Troyerdf0972c2012-03-07 17:31:03 -06002127
Jesse Andrews24859062011-09-15 21:28:23 -07002128# Using the cloud
2129# ===============
2130
Jesse Andrewse19d8842011-11-01 20:06:55 -07002131echo ""
2132echo ""
2133echo ""
2134
Dean Troyerdf0972c2012-03-07 17:31:03 -06002135# If you installed Horizon on this server you should be able
root40a37002011-09-20 18:06:14 +00002136# to access the site using your browser.
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002137if is_service_enabled horizon; then
Dean Troyerdf0972c2012-03-07 17:31:03 -06002138 echo "Horizon is now available at http://$SERVICE_HOST/"
Jesse Andrews24859062011-09-15 21:28:23 -07002139fi
2140
Dean Troyerdf0972c2012-03-07 17:31:03 -06002141# If Keystone is present you can point ``nova`` cli to this server
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002142if is_service_enabled key; then
Dean Troyerdf0972c2012-03-07 17:31:03 -06002143 echo "Keystone is serving at $KEYSTONE_AUTH_PROTOCOL://$SERVICE_HOST:$KEYSTONE_API_PORT/v2.0/"
2144 echo "Examples on using novaclient command line is in exercise.sh"
2145 echo "The default users are: admin and demo"
2146 echo "The password: $ADMIN_PASSWORD"
Jesse Andrews24859062011-09-15 21:28:23 -07002147fi
termie523c4052011-09-28 19:49:40 -05002148
Anthony Young1097c7c2011-12-27 23:22:14 -08002149# Echo HOST_IP - useful for build_uec.sh, which uses dhcp to give the instance an address
2150echo "This is your host ip: $HOST_IP"
2151
Dean Troyerdf0972c2012-03-07 17:31:03 -06002152# Warn that ``EXTRA_FLAGS`` needs to be converted to ``EXTRA_OPTS``
Dean Troyerced65172012-03-02 16:36:16 -06002153if [[ -n "$EXTRA_FLAGS" ]]; then
2154 echo "WARNING: EXTRA_FLAGS is defined and may need to be converted to EXTRA_OPTS"
2155fi
2156
Anthony Young1097c7c2011-12-27 23:22:14 -08002157# Indicate how long this took to run (bash maintained variable 'SECONDS')
Scott Moserb94f4bf2011-10-07 14:51:07 +00002158echo "stack.sh completed in $SECONDS seconds."