blob: 8f54611cce596ed16d531b4928caf3b8e1527075 [file] [log] [blame]
Jesse Andrewsba23cc72011-09-11 03:22:13 -07001#!/usr/bin/env bash
2
Dean Troyerc6c1d432012-03-27 20:59:22 -05003# ``stack.sh`` is an opinionated OpenStack developer installation. It
4# installs and configures various combinations of **Glance**, **Horizon**,
5# **Keystone**, **Melange**, **Nova**, **Quantum** and **Swift**
Jesse Andrewsba23cc72011-09-11 03:22:13 -07006
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07007# This script allows you to specify configuration options of what git
Jesse Andrews5372f432011-10-03 01:08:24 -04008# repositories to use, enabled services, network configuration and various
9# passwords. If you are crafty you can run the script on multiple nodes using
10# shared settings for common resources (mysql, rabbitmq) and build a multi-node
11# developer install.
Jesse Andrews782b9912011-10-02 16:53:21 -040012
Jesse Andrews38df1222011-11-20 09:55:44 -080013# To keep this script simple we assume you are running on an **Ubuntu 11.10
Dean Troyerc6c1d432012-03-27 20:59:22 -050014# Oneiric** or **Ubuntu 12.04 Precise** machine. It should work in a VM or
15# physical server. Additionally we put the list of ``apt`` and ``pip``
16# dependencies and other configuration files in this repo. So start by
17# grabbing this script and the dependencies.
Jesse Andrews24859062011-09-15 21:28:23 -070018
Jesse Andrews0e7e8972011-10-02 16:36:54 -040019# Learn more and get the most recent version at http://devstack.org
Jesse Andrews6edd17f2011-09-15 22:19:42 -070020
Dean Troyerc6c1d432012-03-27 20:59:22 -050021# Keep track of the devstack directory
Jesse Andrews51fb22e2011-10-19 09:24:17 -070022TOP_DIR=$(cd $(dirname "$0") && pwd)
23
Dean Troyer6563a3c2012-01-31 12:11:56 -060024# Import common functions
Dean Troyerc6c1d432012-03-27 20:59:22 -050025source $TOP_DIR/functions
Dean Troyer6563a3c2012-01-31 12:11:56 -060026
Dean Troyerc6c1d432012-03-27 20:59:22 -050027# Determine what system we are running on. This provides ``os_VENDOR``,
28# ``os_RELEASE``, ``os_UPDATE``, ``os_PACKAGE``, ``os_CODENAME``
29GetOSVersion
30
31# Translate the OS version values into common nomenclature
32if [[ "$os_VENDOR" =~ (Ubuntu) ]]; then
33 # 'Everyone' refers to Ubuntu releases by the code name adjective
34 DISTRO=$os_CODENAME
Dean Troyer5218d452012-02-04 02:13:23 -060035elif [[ "$os_VENDOR" =~ (Fedora) ]]; then
36 # For Fedora, just use 'f' and the release
37 DISTRO="f$os_RELEASE"
Dean Troyerc6c1d432012-03-27 20:59:22 -050038else
39 # Catch-all for now is Vendor + Release + Update
40 DISTRO="$os_VENDOR-$os_RELEASE.$os_UPDATE"
Jesse Andrews6edd17f2011-09-15 22:19:42 -070041fi
42
Anthony Young6015c822011-10-12 07:17:11 +000043
Scott Moserf9da5082011-10-07 21:28:00 -040044# Settings
45# ========
46
Dean Troyerdf0972c2012-03-07 17:31:03 -060047# ``stack.sh`` is customizable through setting environment variables. If you
48# want to override a setting you can set and export it::
Scott Moserf9da5082011-10-07 21:28:00 -040049#
Anthony Young7a549f42011-10-12 07:13:13 +000050# export MYSQL_PASSWORD=anothersecret
Scott Moserf9da5082011-10-07 21:28:00 -040051# ./stack.sh
52#
Anthony Young7a549f42011-10-12 07:13:13 +000053# You can also pass options on a single line ``MYSQL_PASSWORD=simple ./stack.sh``
Scott Moserf9da5082011-10-07 21:28:00 -040054#
Dean Troyerdf0972c2012-03-07 17:31:03 -060055# Additionally, you can put any local variables into a ``localrc`` file::
Scott Moserf9da5082011-10-07 21:28:00 -040056#
Anthony Young7a549f42011-10-12 07:13:13 +000057# MYSQL_PASSWORD=anothersecret
Scott Moserf9da5082011-10-07 21:28:00 -040058# MYSQL_USER=hellaroot
59#
60# We try to have sensible defaults, so you should be able to run ``./stack.sh``
61# in most cases.
62#
Dean Troyerdf0972c2012-03-07 17:31:03 -060063# DevStack distributes ``stackrc`` which contains locations for the OpenStack
64# repositories and branches to configure. ``stackrc`` sources ``localrc`` to
Dean Troyerc6c1d432012-03-27 20:59:22 -050065# allow you to safely override those settings without being overwritten
Dean Troyerdf0972c2012-03-07 17:31:03 -060066# when updating DevStack.
Dean Troyerbbafb1b2012-06-11 16:51:39 -050067if [[ ! -r $TOP_DIR/stackrc ]]; then
68 echo "ERROR: missing $TOP_DIR/stackrc - did you grab more than just stack.sh?"
69 exit 1
70fi
71source $TOP_DIR/stackrc
Dean Troyerdf0972c2012-03-07 17:31:03 -060072
Dean Troyerc6c1d432012-03-27 20:59:22 -050073# HTTP and HTTPS proxy servers are supported via the usual environment variables
74# ``http_proxy`` and ``https_proxy``. They can be set in ``localrc`` if necessary
75# or on the command line::
Dean Troyerc727aa82012-01-13 12:13:59 -060076#
77# http_proxy=http://proxy.example.com:3128/ ./stack.sh
Dean Troyerbbafb1b2012-06-11 16:51:39 -050078if [[ -n "$http_proxy" ]]; then
79 export http_proxy=$http_proxy
Dean Troyerc6c1d432012-03-27 20:59:22 -050080fi
Dean Troyerbbafb1b2012-06-11 16:51:39 -050081if [[ -n "$https_proxy" ]]; then
82 export https_proxy=$https_proxy
83fi
Scott Moserf9da5082011-10-07 21:28:00 -040084
Jesse Andrews6edd17f2011-09-15 22:19:42 -070085# Destination path for installation ``DEST``
Anthony Younge8fed482011-09-26 19:50:43 -070086DEST=${DEST:-/opt/stack}
Jesse Andrewsba23cc72011-09-11 03:22:13 -070087
Dean Troyerc6c1d432012-03-27 20:59:22 -050088
89# Sanity Check
90# ============
91
92# Warn users who aren't on an explicitly supported distro, but allow them to
93# override check and attempt installation with ``FORCE=yes ./stack``
Dean Troyer4a1f5a72012-06-21 09:57:43 -050094if [[ ! ${DISTRO} =~ (oneiric|precise|quantal|f16|f17) ]]; then
95 echo "WARNING: this script has not been tested on $DISTRO"
Dean Troyerc6c1d432012-03-27 20:59:22 -050096 if [[ "$FORCE" != "yes" ]]; then
97 echo "If you wish to run this script anyway run with FORCE=yes"
98 exit 1
99 fi
100fi
101
Russell Bryant4a221452012-03-13 13:44:12 -0400102if [ "${DISTRO}" = "oneiric" ] && is_service_enabled qpid ; then
103 # Qpid was introduced in precise
104 echo "You must use Ubuntu Precise or newer for Qpid support."
105 exit 1
106fi
107
Dean Troyer5218d452012-02-04 02:13:23 -0600108# Set the paths of certain binaries
109if [[ "$os_PACKAGE" = "deb" ]]; then
110 NOVA_ROOTWRAP=/usr/local/bin/nova-rootwrap
111else
112 NOVA_ROOTWRAP=/usr/bin/nova-rootwrap
113fi
114
Dean Troyer67787e62012-05-02 11:48:15 -0500115# ``stack.sh`` keeps function libraries here
116# Make sure ``$TOP_DIR/lib`` directory is present
117if [ ! -d $TOP_DIR/lib ]; then
118 echo "ERROR: missing devstack/lib - did you grab more than just stack.sh?"
119 exit 1
120fi
121
Dean Troyerc6c1d432012-03-27 20:59:22 -0500122# stack.sh keeps the list of ``apt`` and ``pip`` dependencies in external
123# files, along with config templates and other useful files. You can find these
124# in the ``files`` directory (next to this script). We will reference this
125# directory using the ``FILES`` variable in this script.
126FILES=$TOP_DIR/files
127if [ ! -d $FILES ]; then
128 echo "ERROR: missing devstack/files - did you grab more than just stack.sh?"
129 exit 1
130fi
131
132# Check to see if we are already running DevStack
Chmouel Boudjnah44b57362012-02-07 18:13:44 +0100133if type -p screen >/dev/null && screen -ls | egrep -q "[0-9].stack"; then
Anthony Young55458452011-12-17 00:21:49 +0000134 echo "You are already running a stack.sh session."
135 echo "To rejoin this session type 'screen -x stack'."
136 echo "To destroy this session, kill the running screen."
137 exit 1
138fi
Todd Willey0a161452011-10-28 02:34:19 -0400139
Dean Troyer67787e62012-05-02 11:48:15 -0500140# Make sure we only have one volume service enabled.
141if is_service_enabled cinder && is_service_enabled n-vol; then
142 echo "ERROR: n-vol and cinder must not be enabled at the same time"
143 exit 1
144fi
145
Tres Henryca85b792011-10-28 14:00:21 -0700146# OpenStack is designed to be run as a regular user (Horizon will fail to run
Dean Troyer9122e7b2011-10-17 14:07:11 -0500147# as root, since apache refused to startup serve content from root user). If
Dean Troyerdf0972c2012-03-07 17:31:03 -0600148# ``stack.sh`` is run as **root**, it automatically creates a **stack** user with
Dean Troyer9122e7b2011-10-17 14:07:11 -0500149# sudo privileges and runs as that user.
150
151if [[ $EUID -eq 0 ]]; then
James E. Blair92e81992011-10-11 09:26:29 -0500152 ROOTSLEEP=${ROOTSLEEP:-10}
Dean Troyer9122e7b2011-10-17 14:07:11 -0500153 echo "You are running this script as root."
James E. Blair92e81992011-10-11 09:26:29 -0500154 echo "In $ROOTSLEEP seconds, we will create a user 'stack' and run as that user"
155 sleep $ROOTSLEEP
Dean Troyer9122e7b2011-10-17 14:07:11 -0500156
157 # since this script runs as a normal user, we need to give that user
158 # ability to run sudo
Dean Troyer5218d452012-02-04 02:13:23 -0600159 if [[ "$os_PACKAGE" = "deb" ]]; then
160 dpkg -l sudo || apt_get update && install_package sudo
161 STACK_GROUP=sudo
162 else
163 rpm -qa | grep sudo || install_package sudo
164 STACK_GROUP=wheel
165 fi
Dean Troyer9122e7b2011-10-17 14:07:11 -0500166 if ! getent passwd stack >/dev/null; then
167 echo "Creating a user called stack"
Dean Troyer5218d452012-02-04 02:13:23 -0600168 useradd -U -G $STACK_GROUP -s /bin/bash -d $DEST -m stack
Dean Troyer9122e7b2011-10-17 14:07:11 -0500169 fi
170
171 echo "Giving stack user passwordless sudo priviledges"
Jesse Andrews38df1222011-11-20 09:55:44 -0800172 # some uec images sudoers does not have a '#includedir'. add one.
Dean Troyer9122e7b2011-10-17 14:07:11 -0500173 grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||
174 echo "#includedir /etc/sudoers.d" >> /etc/sudoers
175 ( umask 226 && echo "stack ALL=(ALL) NOPASSWD:ALL" \
176 > /etc/sudoers.d/50_stack_sh )
177
178 echo "Copying files to stack user"
179 STACK_DIR="$DEST/${PWD##*/}"
Dean Troyer0c3db252011-12-15 12:00:31 -0600180 cp -r -f -T "$PWD" "$STACK_DIR"
Jesse Andrews5f4ae102011-11-06 07:47:09 -0800181 chown -R stack "$STACK_DIR"
Dean Troyer9122e7b2011-10-17 14:07:11 -0500182 if [[ "$SHELL_AFTER_RUN" != "no" ]]; then
183 exec su -c "set -e; cd $STACK_DIR; bash stack.sh; bash" stack
184 else
185 exec su -c "set -e; cd $STACK_DIR; bash stack.sh" stack
186 fi
187 exit 1
Jesse Andrews509992f2011-10-27 11:18:09 -0700188else
Dean Troyere0d677c2012-03-07 14:11:33 -0600189 # We're not root, make sure sudo is available
Dean Troyer5218d452012-02-04 02:13:23 -0600190 if [[ "$os_PACKAGE" = "deb" ]]; then
191 CHECK_SUDO_CMD="dpkg -l sudo"
192 else
193 CHECK_SUDO_CMD="rpm -q sudo"
194 fi
195 $CHECK_SUDO_CMD || die "Sudo is required. Re-run stack.sh as root ONE TIME ONLY to set up sudo."
Dean Troyere0d677c2012-03-07 14:11:33 -0600196
197 # UEC images /etc/sudoers does not have a '#includedir'. add one.
Jesse Andrews84a399b2011-10-27 11:20:38 -0700198 sudo grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||
199 echo "#includedir /etc/sudoers.d" | sudo tee -a /etc/sudoers
Dean Troyere0d677c2012-03-07 14:11:33 -0600200
201 # Set up devstack sudoers
Todd Willey0a161452011-10-28 02:34:19 -0400202 TEMPFILE=`mktemp`
Dean Troyere0d677c2012-03-07 14:11:33 -0600203 echo "`whoami` ALL=(root) NOPASSWD:ALL" >$TEMPFILE
Todd Willey0a161452011-10-28 02:34:19 -0400204 chmod 0440 $TEMPFILE
205 sudo chown root:root $TEMPFILE
Dean Troyere0d677c2012-03-07 14:11:33 -0600206 sudo mv $TEMPFILE /etc/sudoers.d/50_stack_sh
207
Dean Troyere0d677c2012-03-07 14:11:33 -0600208 # Remove old file
209 sudo rm -f /etc/sudoers.d/stack_sh_nova
Dean Troyer9122e7b2011-10-17 14:07:11 -0500210fi
211
Dean Troyerdf0972c2012-03-07 17:31:03 -0600212# Set True to configure ``stack.sh`` to run cleanly without Internet access.
213# ``stack.sh`` must have been previously run with Internet access to install
214# prerequisites and initialize ``$DEST``.
Dean Troyer25dab662011-12-16 22:40:46 -0600215OFFLINE=`trueorfalse False $OFFLINE`
216
Dean Troyer67787e62012-05-02 11:48:15 -0500217# Destination path for service data
218DATA_DIR=${DATA_DIR:-${DEST}/data}
219sudo mkdir -p $DATA_DIR
220sudo chown `whoami` $DATA_DIR
221
222
223# Projects
224# --------
225
226# Get project function libraries
227source $TOP_DIR/lib/cinder
228
229
Jesse Andrews6f3baaf2011-09-12 11:59:38 -0700230# Set the destination directories for openstack projects
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700231NOVA_DIR=$DEST/nova
Tres Henryca85b792011-10-28 14:00:21 -0700232HORIZON_DIR=$DEST/horizon
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700233GLANCE_DIR=$DEST/glance
Dean Troyer45495252012-04-13 13:16:38 -0500234GLANCECLIENT_DIR=$DEST/python-glanceclient
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700235KEYSTONE_DIR=$DEST/keystone
236NOVACLIENT_DIR=$DEST/python-novaclient
Anthony Young52e631d2011-12-27 22:22:14 -0800237KEYSTONECLIENT_DIR=$DEST/python-keystoneclient
Andrew Bogott77a4e3a2012-05-01 00:07:29 -0500238OPENSTACKCLIENT_DIR=$DEST/python-openstackclient
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700239NOVNC_DIR=$DEST/noVNC
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100240SWIFT_DIR=$DEST/swift
Joe Gordon42b1aa92012-05-24 14:11:01 -0700241SWIFT3_DIR=$DEST/swift3
Chmouel Boudjnahfda9df82012-05-22 10:27:08 +0000242SWIFTCLIENT_DIR=$DEST/python-swiftclient
Brad Hall1bfa3d52011-10-27 18:18:20 -0700243QUANTUM_DIR=$DEST/quantum
Dave Lapsley5a09c922012-01-25 17:22:15 -0500244QUANTUM_CLIENT_DIR=$DEST/python-quantumclient
Jason Kölker64a90662012-01-23 11:17:27 -0600245MELANGE_DIR=$DEST/melange
246MELANGECLIENT_DIR=$DEST/python-melangeclient
Brad Hall1bfa3d52011-10-27 18:18:20 -0700247
248# Default Quantum Plugin
249Q_PLUGIN=${Q_PLUGIN:-openvswitch}
Brad Hallf1f3a8f2011-12-12 23:04:58 +0000250# Default Quantum Port
251Q_PORT=${Q_PORT:-9696}
252# Default Quantum Host
253Q_HOST=${Q_HOST:-localhost}
Anthony Younga8416442011-09-13 20:07:44 -0700254
Jason Kölker64a90662012-01-23 11:17:27 -0600255# Default Melange Port
256M_PORT=${M_PORT:-9898}
257# Default Melange Host
258M_HOST=${M_HOST:-localhost}
259# Melange MAC Address Range
Aaron Lee690e1e32012-03-08 09:57:30 -0800260M_MAC_RANGE=${M_MAC_RANGE:-FE-EE-DD-00-00-00/24}
Jason Kölker64a90662012-01-23 11:17:27 -0600261
Jesse Andrewsd02b7b72011-11-14 08:59:05 -0800262# Name of the lvm volume group to use/create for iscsi volumes
Dean Troyer67787e62012-05-02 11:48:15 -0500263VOLUME_GROUP=${VOLUME_GROUP:-stack-volumes}
Dean Troyer2229a6e2011-12-01 17:02:07 -0600264VOLUME_NAME_PREFIX=${VOLUME_NAME_PREFIX:-volume-}
Anthony Young55458452011-12-17 00:21:49 +0000265INSTANCE_NAME_PREFIX=${INSTANCE_NAME_PREFIX:-instance-}
Jesse Andrewsd02b7b72011-11-14 08:59:05 -0800266
Dean Troyerdf0972c2012-03-07 17:31:03 -0600267# Nova hypervisor configuration. We default to libvirt with **kvm** but will
268# drop back to **qemu** if we are unable to load the kvm module. ``stack.sh`` can
Anthony Youngb62b4ca2011-10-26 22:29:08 -0700269# also install an **LXC** based system.
270VIRT_DRIVER=${VIRT_DRIVER:-libvirt}
Jesse Andrews782b9912011-10-02 16:53:21 -0400271LIBVIRT_TYPE=${LIBVIRT_TYPE:-kvm}
272
Vishvananda Ishaya51aa4012012-03-06 12:45:19 -0800273# Nova supports pluggable schedulers. ``FilterScheduler`` should work in most
274# cases.
275SCHEDULER=${SCHEDULER:-nova.scheduler.filter_scheduler.FilterScheduler}
Jesse Andrews782b9912011-10-02 16:53:21 -0400276
rootb1153412012-01-19 13:28:21 -0800277HOST_IP_IFACE=${HOST_IP_IFACE:-eth0}
Anthony Young7c259ce2011-11-07 13:18:28 -0600278# Use the eth0 IP unless an explicit is set by ``HOST_IP`` environment variable
rootb1153412012-01-19 13:28:21 -0800279if [ -z "$HOST_IP" -o "$HOST_IP" == "dhcp" ]; then
280 HOST_IP=`LC_ALL=C /sbin/ifconfig ${HOST_IP_IFACE} | grep -m 1 'inet addr:'| cut -d: -f2 | awk '{print $1}'`
Anthony Younga3475e52011-11-07 13:24:00 -0600281 if [ "$HOST_IP" = "" ]; then
Anthony Young857035d2011-11-07 14:02:13 -0600282 echo "Could not determine host ip address."
rootb1153412012-01-19 13:28:21 -0800283 echo "Either localrc specified dhcp on ${HOST_IP_IFACE} or defaulted to eth0"
Anthony Young7c259ce2011-11-07 13:18:28 -0600284 exit 1
285 fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700286fi
287
Anthony Young1097c7c2011-12-27 23:22:14 -0800288# Allow the use of an alternate hostname (such as localhost/127.0.0.1) for service endpoints.
289SERVICE_HOST=${SERVICE_HOST:-$HOST_IP}
290
Dean Troyerdf0972c2012-03-07 17:31:03 -0600291# Configure services to use syslog instead of writing to individual log files
Dean Troyerff603ef2011-11-22 17:48:10 -0600292SYSLOG=`trueorfalse False $SYSLOG`
293SYSLOG_HOST=${SYSLOG_HOST:-$HOST_IP}
294SYSLOG_PORT=${SYSLOG_PORT:-516}
295
Vishvananda Ishaya6f13ba32012-06-01 23:17:38 +0000296# Use color for logging output
297LOG_COLOR=`trueorfalse True $LOG_COLOR`
298
Dean Troyer2bbcd682011-11-05 16:19:03 -0500299# Service startup timeout
300SERVICE_TIMEOUT=${SERVICE_TIMEOUT:-60}
301
Anthony Young7a549f42011-10-12 07:13:13 +0000302# Generic helper to configure passwords
303function read_password {
304 set +o xtrace
305 var=$1; msg=$2
306 pw=${!var}
307
Anthony Youngb4db2252011-10-12 14:08:08 -0700308 localrc=$TOP_DIR/localrc
Anthony Young6015c822011-10-12 07:17:11 +0000309
Anthony Young7a549f42011-10-12 07:13:13 +0000310 # If the password is not defined yet, proceed to prompt user for a password.
311 if [ ! $pw ]; then
312 # If there is no localrc file, create one
Anthony Youngb4db2252011-10-12 14:08:08 -0700313 if [ ! -e $localrc ]; then
314 touch $localrc
Anthony Young7a549f42011-10-12 07:13:13 +0000315 fi
316
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700317 # Presumably if we got this far it can only be that our localrc is missing
Anthony Young7a549f42011-10-12 07:13:13 +0000318 # the required password. Prompt user for a password and write to localrc.
Anthony Youngb4db2252011-10-12 14:08:08 -0700319 echo ''
320 echo '################################################################################'
321 echo $msg
322 echo '################################################################################'
Dean Troyer4e6a2b72011-12-29 17:27:45 -0600323 echo "This value will be written to your localrc file so you don't have to enter it "
324 echo "again. Use only alphanumeric characters."
Anthony Youngb4db2252011-10-12 14:08:08 -0700325 echo "If you leave this blank, a random default value will be used."
Dean Troyer4e6a2b72011-12-29 17:27:45 -0600326 pw=" "
327 while true; do
328 echo "Enter a password now:"
329 read -e $var
330 pw=${!var}
331 [[ "$pw" = "`echo $pw | tr -cd [:alnum:]`" ]] && break
332 echo "Invalid chars in password. Try again:"
333 done
Anthony Youngb4db2252011-10-12 14:08:08 -0700334 if [ ! $pw ]; then
335 pw=`openssl rand -hex 10`
Anthony Young7a549f42011-10-12 07:13:13 +0000336 fi
Anthony Youngb4db2252011-10-12 14:08:08 -0700337 eval "$var=$pw"
338 echo "$var=$pw" >> $localrc
Anthony Young7a549f42011-10-12 07:13:13 +0000339 fi
340 set -o xtrace
341}
342
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500343
Jesse Andrews782b9912011-10-02 16:53:21 -0400344# Nova Network Configuration
345# --------------------------
346
Dean Troyerdf0972c2012-03-07 17:31:03 -0600347# FIXME: more documentation about why these are important options. Also
348# we should make sure we use the same variable names as the option names.
Jesse Andrews5372f432011-10-03 01:08:24 -0400349
John Garbutt8e2cffd2012-03-02 16:22:07 +0000350if [ "$VIRT_DRIVER" = 'xenserver' ]; then
351 PUBLIC_INTERFACE_DEFAULT=eth3
352 # allow build_domU.sh to specify the flat network bridge via kernel args
Renuka Apte0af143b2012-04-02 15:46:53 -0700353 FLAT_NETWORK_BRIDGE_DEFAULT=$(grep -o 'flat_network_bridge=[[:alnum:]]*' /proc/cmdline | cut -d= -f 2 | sort -u)
John Garbutt8e2cffd2012-03-02 16:22:07 +0000354 GUEST_INTERFACE_DEFAULT=eth1
355else
356 PUBLIC_INTERFACE_DEFAULT=br100
357 FLAT_NETWORK_BRIDGE_DEFAULT=br100
358 GUEST_INTERFACE_DEFAULT=eth0
359fi
360
361PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-$PUBLIC_INTERFACE_DEFAULT}
Anthony Young00596bb2011-12-16 20:23:07 +0000362PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-br100}
Jesse Andrewsb5197e42011-09-26 12:48:31 -0700363FIXED_RANGE=${FIXED_RANGE:-10.0.0.0/24}
364FIXED_NETWORK_SIZE=${FIXED_NETWORK_SIZE:-256}
Anthony Young0e74ecb2011-10-27 13:21:52 -0700365FLOATING_RANGE=${FLOATING_RANGE:-172.24.4.224/28}
Jesse Andrewsa72f7ad2011-09-25 13:41:22 -0700366NET_MAN=${NET_MAN:-FlatDHCPManager}
Anthony Young1097c7c2011-12-27 23:22:14 -0800367EC2_DMZ_HOST=${EC2_DMZ_HOST:-$SERVICE_HOST}
John Garbutt8e2cffd2012-03-02 16:22:07 +0000368FLAT_NETWORK_BRIDGE=${FLAT_NETWORK_BRIDGE:-$FLAT_NETWORK_BRIDGE_DEFAULT}
369VLAN_INTERFACE=${VLAN_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400370
Dean Troyer696ad332012-01-10 15:34:34 -0600371# Test floating pool and range are used for testing. They are defined
372# here until the admin APIs can replace nova-manage
373TEST_FLOATING_POOL=${TEST_FLOATING_POOL:-test}
374TEST_FLOATING_RANGE=${TEST_FLOATING_RANGE:-192.168.253.0/29}
375
Dean Troyerdf0972c2012-03-07 17:31:03 -0600376# **MULTI_HOST** is a mode where each compute node runs its own network node. This
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400377# allows network operations and routing for a VM to occur on the server that is
378# running the VM - removing a SPOF and bandwidth bottleneck.
Armando Migliaccio7d13f302012-04-19 22:26:16 +0100379MULTI_HOST=`trueorfalse False $MULTI_HOST`
Jesse Andrews30f68e92011-09-13 00:59:54 -0700380
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700381# If you are using FlatDHCP on multiple hosts, set the ``FLAT_INTERFACE``
382# variable but make sure that the interface doesn't already have an
383# ip or you risk breaking things.
Jesse Andrews5372f432011-10-03 01:08:24 -0400384#
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700385# **DHCP Warning**: If your flat interface device uses DHCP, there will be a
386# hiccup while the network is moved from the flat interface to the flat network
387# bridge. This will happen when you launch your first instance. Upon launch
388# you will lose all connectivity to the node, and the vm launch will probably
Jesse Andrews5372f432011-10-03 01:08:24 -0400389# fail.
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700390#
391# If you are running on a single node and don't need to access the VMs from
Jesse Andrews5372f432011-10-03 01:08:24 -0400392# devices other than that node, you can set the flat interface to the same
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700393# value as ``FLAT_NETWORK_BRIDGE``. This will stop the network hiccup from
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100394# occurring.
John Garbutt8e2cffd2012-03-02 16:22:07 +0000395FLAT_INTERFACE=${FLAT_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700396
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400397## FIXME(ja): should/can we check that FLAT_INTERFACE is sane?
398
Brad Hall1bfa3d52011-10-27 18:18:20 -0700399# Using Quantum networking:
400#
Brad Hallf1f3a8f2011-12-12 23:04:58 +0000401# Make sure that quantum is enabled in ENABLED_SERVICES. If it is the network
402# manager will be set to the QuantumManager. If you want to run Quantum on
403# this host, make sure that q-svc is also in ENABLED_SERVICES.
Brad Hall1bfa3d52011-10-27 18:18:20 -0700404#
405# If you're planning to use the Quantum openvswitch plugin, set Q_PLUGIN to
406# "openvswitch" and make sure the q-agt service is enabled in
407# ENABLED_SERVICES.
408#
409# With Quantum networking the NET_MAN variable is ignored.
410
Jason Kölker64a90662012-01-23 11:17:27 -0600411# Using Melange IPAM:
412#
413# Make sure that quantum and melange are enabled in ENABLED_SERVICES.
414# If they are then the melange IPAM lib will be set in the QuantumManager.
415# Adding m-svc to ENABLED_SERVICES will start the melange service on this
416# host.
417
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700418
Russell Bryant4a221452012-03-13 13:44:12 -0400419# MySQL & (RabbitMQ or Qpid)
420# --------------------------
Jesse Andrews782b9912011-10-02 16:53:21 -0400421
Tres Henryca85b792011-10-28 14:00:21 -0700422# We configure Nova, Horizon, Glance and Keystone to use MySQL as their
Jesse Andrews782b9912011-10-02 16:53:21 -0400423# database server. While they share a single server, each has their own
424# database and tables.
425
Vishvananda Ishaya9b353672011-10-20 10:07:10 -0700426# By default this script will install and configure MySQL. If you want to
Jesse Andrews782b9912011-10-02 16:53:21 -0400427# use an existing server, you can pass in the user/password/host parameters.
Anthony Young7a549f42011-10-12 07:13:13 +0000428# You will need to send the same ``MYSQL_PASSWORD`` to every host if you are doing
Dean Troyerdf0972c2012-03-07 17:31:03 -0600429# a multi-node DevStack installation.
Jesse Andrewsa50a3462011-10-19 15:38:10 -0700430MYSQL_HOST=${MYSQL_HOST:-localhost}
Anthony Young320412b2011-09-14 02:39:10 -0700431MYSQL_USER=${MYSQL_USER:-root}
Anthony Young7a549f42011-10-12 07:13:13 +0000432read_password MYSQL_PASSWORD "ENTER A PASSWORD TO USE FOR MYSQL."
Jesse Andrews782b9912011-10-02 16:53:21 -0400433
Dean Troyerdf0972c2012-03-07 17:31:03 -0600434# NOTE: Don't specify /db in this string so we can use it for multiple services
Anthony Young7a549f42011-10-12 07:13:13 +0000435BASE_SQL_CONN=${BASE_SQL_CONN:-mysql://$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST}
Anthony Younga8416442011-09-13 20:07:44 -0700436
437# Rabbit connection info
Russell Bryant4a221452012-03-13 13:44:12 -0400438if is_service_enabled rabbit; then
439 RABBIT_HOST=${RABBIT_HOST:-localhost}
440 read_password RABBIT_PASSWORD "ENTER A PASSWORD TO USE FOR RABBIT."
441fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700442
Anthony Young377aae62011-09-14 09:55:31 -0700443# Glance connection info. Note the port must be specified.
Anthony Young1097c7c2011-12-27 23:22:14 -0800444GLANCE_HOSTPORT=${GLANCE_HOSTPORT:-$SERVICE_HOST:9292}
Anthony Young377aae62011-09-14 09:55:31 -0700445
Dean Troyerdf0972c2012-03-07 17:31:03 -0600446
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100447# SWIFT
448# -----
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100449# TODO: implement glance support
450# TODO: add logging to different location.
Chmouel Boudjnahb93478f2011-11-02 16:49:56 +0100451
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100452# By default the location of swift drives and objects is located inside
Dean Troyer1e51c112012-03-16 10:42:00 -0500453# the swift source directory. SWIFT_DATA_DIR variable allow you to redefine
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100454# this.
Dean Troyer1e51c112012-03-16 10:42:00 -0500455SWIFT_DATA_DIR=${SWIFT_DATA_DIR:-${DEST}/data/swift}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100456
Chmouel Boudjnah3a648262011-11-03 10:43:46 +0100457# We are going to have the configuration files inside the source
Dean Troyer1e51c112012-03-16 10:42:00 -0500458# directory, change SWIFT_CONFIG_DIR if you want to adjust that.
459SWIFT_CONFIG_DIR=${SWIFT_CONFIG_DIR:-/etc/swift}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100460
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100461# devstack will create a loop-back disk formatted as XFS to store the
462# swift data. By default the disk size is 1 gigabyte. The variable
463# SWIFT_LOOPBACK_DISK_SIZE specified in bytes allow you to change
464# that.
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +0100465SWIFT_LOOPBACK_DISK_SIZE=${SWIFT_LOOPBACK_DISK_SIZE:-1000000}
Anthony Young7a549f42011-10-12 07:13:13 +0000466
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100467# The ring uses a configurable number of bits from a path’s MD5 hash as
468# a partition index that designates a device. The number of bits kept
469# from the hash is known as the partition power, and 2 to the partition
470# power indicates the partition count. Partitioning the full MD5 hash
471# ring allows other parts of the cluster to work in batches of items at
472# once which ends up either more efficient or at least less complex than
473# working with each item separately or the entire cluster all at once.
474# By default we define 9 for the partition count (which mean 512).
Chmouel Boudjnaha2118982011-11-01 15:36:00 +0100475SWIFT_PARTITION_POWER_SIZE=${SWIFT_PARTITION_POWER_SIZE:-9}
476
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +0000477# This variable allows you to configure how many replicas you want to be
478# configured for your Swift cluster. By default the three replicas would need a
479# bit of IO and Memory on a VM you may want to lower that to 1 if you want to do
480# only some quick testing.
481SWIFT_REPLICAS=${SWIFT_REPLICAS:-3}
482
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000483if is_service_enabled swift; then
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +0000484 # If we are using swift, we can default the s3 port to swift instead
485 # of nova-objectstore
486 S3_SERVICE_PORT=${S3_SERVICE_PORT:-8080}
487 # We only ask for Swift Hash if we have enabled swift service.
Chmouel Boudjnahb2857e42011-11-03 16:19:14 +0100488 # SWIFT_HASH is a random unique string for a swift cluster that
489 # can never change.
490 read_password SWIFT_HASH "ENTER A RANDOM SWIFT HASH."
491fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -0700492
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +0000493# Set default port for nova-objectstore
494S3_SERVICE_PORT=${S3_SERVICE_PORT:-3333}
Dean Troyerdf0972c2012-03-07 17:31:03 -0600495
Jesse Andrews782b9912011-10-02 16:53:21 -0400496# Keystone
497# --------
498
Jesse Andrewsb96871e2011-10-02 09:02:46 -0700499# Service Token - Openstack components need to have an admin token
500# to validate user tokens.
Anthony Young7a549f42011-10-12 07:13:13 +0000501read_password SERVICE_TOKEN "ENTER A SERVICE_TOKEN TO USE FOR THE SERVICE ADMIN TOKEN."
Dean Troyerb3288382012-02-28 16:41:10 -0600502# Services authenticate to Identity with servicename/SERVICE_PASSWORD
503read_password SERVICE_PASSWORD "ENTER A SERVICE_PASSWORD TO USE FOR THE SERVICE AUTHENTICATION."
Tres Henryca85b792011-10-28 14:00:21 -0700504# Horizon currently truncates usernames and passwords at 20 characters
505read_password ADMIN_PASSWORD "ENTER A PASSWORD TO USE FOR HORIZON AND KEYSTONE (20 CHARS OR LESS)."
Jesse Andrewsb96871e2011-10-02 09:02:46 -0700506
Dean Troyerb3288382012-02-28 16:41:10 -0600507# Set the tenant for service accounts in Keystone
508SERVICE_TENANT_NAME=${SERVICE_TENANT_NAME:-service}
509
Dean Troyer6577b462012-01-16 22:27:20 -0600510# Set Keystone interface configuration
Dean Troyerb3288382012-02-28 16:41:10 -0600511KEYSTONE_API_PORT=${KEYSTONE_API_PORT:-5000}
Dean Troyer6577b462012-01-16 22:27:20 -0600512KEYSTONE_AUTH_HOST=${KEYSTONE_AUTH_HOST:-$SERVICE_HOST}
513KEYSTONE_AUTH_PORT=${KEYSTONE_AUTH_PORT:-35357}
514KEYSTONE_AUTH_PROTOCOL=${KEYSTONE_AUTH_PROTOCOL:-http}
515KEYSTONE_SERVICE_HOST=${KEYSTONE_SERVICE_HOST:-$SERVICE_HOST}
516KEYSTONE_SERVICE_PORT=${KEYSTONE_SERVICE_PORT:-5000}
517KEYSTONE_SERVICE_PROTOCOL=${KEYSTONE_SERVICE_PROTOCOL:-http}
518
Dean Troyerdf0972c2012-03-07 17:31:03 -0600519
Dean Troyer9bb84f02012-01-24 11:45:52 -0600520# Horizon
521# -------
522
523# Allow overriding the default Apache user and group, default both to
524# current user.
525APACHE_USER=${APACHE_USER:-$USER}
526APACHE_GROUP=${APACHE_GROUP:-$APACHE_USER}
527
Dean Troyerdf0972c2012-03-07 17:31:03 -0600528
Dean Troyer471de7a2011-12-27 11:45:55 -0600529# Log files
530# ---------
531
532# Set up logging for stack.sh
533# Set LOGFILE to turn on logging
534# We append '.xxxxxxxx' to the given name to maintain history
535# where xxxxxxxx is a representation of the date the file was created
Chmouel Boudjnahd966ed22012-03-05 12:42:48 +0000536if [[ -n "$LOGFILE" || -n "$SCREEN_LOGDIR" ]]; then
537 LOGDAYS=${LOGDAYS:-7}
538 TIMESTAMP_FORMAT=${TIMESTAMP_FORMAT:-"%F-%H%M%S"}
539 CURRENT_LOG_TIME=$(date "+$TIMESTAMP_FORMAT")
540fi
541
Dean Troyer471de7a2011-12-27 11:45:55 -0600542if [[ -n "$LOGFILE" ]]; then
543 # First clean up old log files. Use the user-specified LOGFILE
544 # as the template to search for, appending '.*' to match the date
545 # we added on earlier runs.
Dean Troyer471de7a2011-12-27 11:45:55 -0600546 LOGDIR=$(dirname "$LOGFILE")
547 LOGNAME=$(basename "$LOGFILE")
Chmouel Boudjnahfff6fec2012-03-09 15:37:56 +0000548 mkdir -p $LOGDIR
Dean Troyer471de7a2011-12-27 11:45:55 -0600549 find $LOGDIR -maxdepth 1 -name $LOGNAME.\* -mtime +$LOGDAYS -exec rm {} \;
550
Chmouel Boudjnahd966ed22012-03-05 12:42:48 +0000551 LOGFILE=$LOGFILE.${CURRENT_LOG_TIME}
Dean Troyer471de7a2011-12-27 11:45:55 -0600552 # Redirect stdout/stderr to tee to write the log file
553 exec 1> >( tee "${LOGFILE}" ) 2>&1
554 echo "stack.sh log $LOGFILE"
555 # Specified logfile name always links to the most recent log
556 ln -sf $LOGFILE $LOGDIR/$LOGNAME
557fi
558
Chmouel Boudjnahd966ed22012-03-05 12:42:48 +0000559# Set up logging of screen windows
560# Set SCREEN_LOGDIR to turn on logging of screen windows to the
561# directory specified in SCREEN_LOGDIR, we will log to the the file
562# screen-$SERVICE_NAME-$TIMESTAMP.log in that dir and have a link
563# screen-$SERVICE_NAME.log to the latest log file.
564# Logs are kept for as long specified in LOGDAYS.
565if [[ -n "$SCREEN_LOGDIR" ]]; then
566
567 # We make sure the directory is created.
568 if [[ -d "$SCREEN_LOGDIR" ]]; then
569 # We cleanup the old logs
570 find $SCREEN_LOGDIR -maxdepth 1 -name screen-\*.log -mtime +$LOGDAYS -exec rm {} \;
571 else
572 mkdir -p $SCREEN_LOGDIR
573 fi
574fi
575
Scott Moserf9da5082011-10-07 21:28:00 -0400576# So that errors don't compound we exit on any errors so you see only the
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +0100577# first error that occurred.
Scott Moserf9da5082011-10-07 21:28:00 -0400578trap failed ERR
579failed() {
580 local r=$?
581 set +o xtrace
582 [ -n "$LOGFILE" ] && echo "${0##*/} failed: full log in $LOGFILE"
583 exit $r
584}
585
586# Print the commands being run so that we can see the command that triggers
587# an error. It is also useful for following along as the install occurs.
588set -o xtrace
589
Jesse Andrewsfe95e0f2011-10-19 14:30:37 -0700590# create the destination directory and ensure it is writable by the user
Scott Moserf9da5082011-10-07 21:28:00 -0400591sudo mkdir -p $DEST
Jesse Andrewsfe95e0f2011-10-19 14:30:37 -0700592if [ ! -w $DEST ]; then
593 sudo chown `whoami` $DEST
594fi
Jesse Andrews53ed3872011-10-02 14:28:17 -0400595
Dean Troyerdf0972c2012-03-07 17:31:03 -0600596
Jesse Andrews30f68e92011-09-13 00:59:54 -0700597# Install Packages
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700598# ================
Jesse Andrews30f68e92011-09-13 00:59:54 -0700599#
600# Openstack uses a fair number of other projects.
601
Dean Troyerdf0972c2012-03-07 17:31:03 -0600602# get_packages() collects a list of package names of any type from the
603# prerequisite files in ``files/{apts|pips}``. The list is intended
604# to be passed to a package installer such as apt or pip.
605#
606# Only packages required for the services in ENABLED_SERVICES will be
607# included. Two bits of metadata are recognized in the prerequisite files:
608# - ``# NOPRIME`` defers installation to be performed later in stack.sh
609# - ``# dist:DISTRO`` or ``dist:DISTRO1,DISTRO2`` limits the selection
610# of the package to the distros listed. The distro names are case insensitive.
Dean Troyer5218d452012-02-04 02:13:23 -0600611#
612# get_packages dir
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100613function get_packages() {
Dean Troyerd0b21e22012-03-07 14:52:25 -0600614 local package_dir=$1
615 local file_to_parse
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100616 local service
Jesse Andrews38df1222011-11-20 09:55:44 -0800617
Dean Troyerd0b21e22012-03-07 14:52:25 -0600618 if [[ -z "$package_dir" ]]; then
619 echo "No package directory supplied"
620 return 1
621 fi
Dean Troyer5218d452012-02-04 02:13:23 -0600622 for service in general ${ENABLED_SERVICES//,/ }; do
623 # Allow individual services to specify dependencies
Dean Troyerd0b21e22012-03-07 14:52:25 -0600624 if [[ -e ${package_dir}/${service} ]]; then
Anthony Youngef4e5362011-12-01 13:44:51 -0800625 file_to_parse="${file_to_parse} $service"
626 fi
Sean Daguef1062402012-05-01 16:43:15 -0400627 # NOTE(sdague) n-api needs glance for now because that's where
628 # glance client is
629 if [[ $service == n-api ]]; then
630 if [[ ! $file_to_parse =~ nova ]]; then
631 file_to_parse="${file_to_parse} nova"
632 fi
633 if [[ ! $file_to_parse =~ glance ]]; then
634 file_to_parse="${file_to_parse} glance"
635 fi
Dean Troyer67787e62012-05-02 11:48:15 -0500636 elif [[ $service == c-* ]]; then
637 if [[ ! $file_to_parse =~ cinder ]]; then
638 file_to_parse="${file_to_parse} cinder"
639 fi
Sean Daguef1062402012-05-01 16:43:15 -0400640 elif [[ $service == n-* ]]; then
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100641 if [[ ! $file_to_parse =~ nova ]]; then
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100642 file_to_parse="${file_to_parse} nova"
643 fi
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100644 elif [[ $service == g-* ]]; then
645 if [[ ! $file_to_parse =~ glance ]]; then
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100646 file_to_parse="${file_to_parse} glance"
647 fi
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100648 elif [[ $service == key* ]]; then
649 if [[ ! $file_to_parse =~ keystone ]]; then
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100650 file_to_parse="${file_to_parse} keystone"
651 fi
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100652 fi
653 done
654
Chmouel Boudjnahf990ded2011-11-14 15:26:13 +0100655 for file in ${file_to_parse}; do
Dean Troyerd0b21e22012-03-07 14:52:25 -0600656 local fname=${package_dir}/${file}
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100657 local OIFS line package distros distro
Dean Troyerd0b21e22012-03-07 14:52:25 -0600658 [[ -e $fname ]] || continue
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100659
660 OIFS=$IFS
661 IFS=$'\n'
Chmouel Boudjnah2d1a8b32011-11-14 22:16:11 +0100662 for line in $(<${fname}); do
Anthony Younga6353c62011-11-16 00:43:34 -0600663 if [[ $line =~ "NOPRIME" ]]; then
664 continue
665 fi
666
Dean Troyer3ea11122012-05-31 16:39:36 -0500667 if [[ $line =~ (.*)#.*dist:([^ ]*) ]]; then
668 # We are using BASH regexp matching feature.
669 package=${BASH_REMATCH[1]}
670 distros=${BASH_REMATCH[2]}
671 # In bash ${VAR,,} will lowecase VAR
672 [[ ${distros,,} =~ ${DISTRO,,} ]] && echo $package
673 continue
Chmouel Boudjnah0277d5b2011-11-14 15:20:39 +0100674 fi
675
676 echo ${line%#*}
677 done
678 IFS=$OIFS
679 done
680}
Jesse Andrews2caf8fd2011-09-12 16:15:11 -0700681
Dean Troyer5218d452012-02-04 02:13:23 -0600682# install package requirements
683if [[ "$os_PACKAGE" = "deb" ]]; then
684 apt_get update
685 install_package $(get_packages $FILES/apts)
686else
687 install_package $(get_packages $FILES/rpms)
688fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700689
Jesse Andrews75a37652011-09-12 17:09:08 -0700690# install python requirements
Dean Troyerd0b21e22012-03-07 14:52:25 -0600691pip_install $(get_packages $FILES/pips | sort -u)
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700692
Jesse Andrews75a37652011-09-12 17:09:08 -0700693# compute service
Anthony Young2f140202011-09-26 13:02:40 -0700694git_clone $NOVA_REPO $NOVA_DIR $NOVA_BRANCH
Tres Henryca85b792011-10-28 14:00:21 -0700695# python client library to nova that horizon (and others) use
Andy Smith84c05992012-02-03 21:40:32 -0800696git_clone $KEYSTONECLIENT_REPO $KEYSTONECLIENT_DIR $KEYSTONECLIENT_BRANCH
Anthony Young2f140202011-09-26 13:02:40 -0700697git_clone $NOVACLIENT_REPO $NOVACLIENT_DIR $NOVACLIENT_BRANCH
Andrew Bogott77a4e3a2012-05-01 00:07:29 -0500698git_clone $OPENSTACKCLIENT_REPO $OPENSTACKCLIENT_DIR $OPENSTACKCLIENT_BRANCH
Dean Troyer45495252012-04-13 13:16:38 -0500699git_clone $GLANCECLIENT_REPO $GLANCECLIENT_DIR $GLANCECLIENT_BRANCH
Jesse Andrews38df1222011-11-20 09:55:44 -0800700
701# glance, swift middleware and nova api needs keystone middleware
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000702if is_service_enabled key g-api n-api swift; then
Jesse Andrews38df1222011-11-20 09:55:44 -0800703 # unified auth system (manages accounts/tokens)
704 git_clone $KEYSTONE_REPO $KEYSTONE_DIR $KEYSTONE_BRANCH
705fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000706if is_service_enabled swift; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800707 # storage service
708 git_clone $SWIFT_REPO $SWIFT_DIR $SWIFT_BRANCH
Chmouel Boudjnahfda9df82012-05-22 10:27:08 +0000709 # storage service client and and Library
710 git_clone $SWIFTCLIENT_REPO $SWIFTCLIENT_DIR $SWIFTCLIENT_BRANCH
711 # swift3 middleware to provide S3 emulation to Swift
Joe Gordon42b1aa92012-05-24 14:11:01 -0700712 git_clone $SWIFT3_REPO $SWIFT3_DIR $SWIFT3_BRANCH
James E. Blaire7ce24f2011-11-10 13:05:13 -0800713fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000714if is_service_enabled g-api n-api; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800715 # image catalog service
716 git_clone $GLANCE_REPO $GLANCE_DIR $GLANCE_BRANCH
717fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000718if is_service_enabled n-novnc; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800719 # a websockets/html5 or flash powered VNC console for vm instances
720 git_clone $NOVNC_REPO $NOVNC_DIR $NOVNC_BRANCH
721fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000722if is_service_enabled horizon; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800723 # django powered web control panel for openstack
724 git_clone $HORIZON_REPO $HORIZON_DIR $HORIZON_BRANCH $HORIZON_TAG
725fi
Monty Taylor5440ac02012-03-23 11:32:29 -0700726if is_service_enabled quantum; then
727 git_clone $QUANTUM_CLIENT_REPO $QUANTUM_CLIENT_DIR $QUANTUM_CLIENT_BRANCH
728fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -0700729if is_service_enabled quantum; then
James E. Blaire7ce24f2011-11-10 13:05:13 -0800730 # quantum
731 git_clone $QUANTUM_REPO $QUANTUM_DIR $QUANTUM_BRANCH
Deepak Garg1e98bdc2012-02-22 12:15:26 +0530732fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000733if is_service_enabled m-svc; then
Jason Kölker64a90662012-01-23 11:17:27 -0600734 # melange
735 git_clone $MELANGE_REPO $MELANGE_DIR $MELANGE_BRANCH
736fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000737if is_service_enabled melange; then
Jason Kölker64a90662012-01-23 11:17:27 -0600738 git_clone $MELANGECLIENT_REPO $MELANGECLIENT_DIR $MELANGECLIENT_BRANCH
739fi
Dean Troyer67787e62012-05-02 11:48:15 -0500740if is_service_enabled cinder; then
741 install_cinder
742fi
Jason Kölker64a90662012-01-23 11:17:27 -0600743
Dean Troyerdf0972c2012-03-07 17:31:03 -0600744
Jesse Andrews30f68e92011-09-13 00:59:54 -0700745# Initialization
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700746# ==============
Jesse Andrews30f68e92011-09-13 00:59:54 -0700747
Jesse Andrews75a37652011-09-12 17:09:08 -0700748# setup our checkouts so they are installed into python path
Jesse Andrewsd74257d2011-09-13 01:24:50 -0700749# allowing ``import nova`` or ``import glance.client``
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500750setup_develop $KEYSTONECLIENT_DIR
751setup_develop $NOVACLIENT_DIR
752setup_develop $OPENSTACKCLIENT_DIR
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000753if is_service_enabled key g-api n-api swift; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500754 setup_develop $KEYSTONE_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800755fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000756if is_service_enabled swift; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500757 setup_develop $SWIFT_DIR
758 setup_develop $SWIFTCLIENT_DIR
759 setup_develop $SWIFT3_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800760fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000761if is_service_enabled g-api n-api; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500762 setup_develop $GLANCE_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800763fi
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500764setup_develop $NOVA_DIR
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000765if is_service_enabled horizon; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500766 setup_develop $HORIZON_DIR
James E. Blaire7ce24f2011-11-10 13:05:13 -0800767fi
Anthony Young84a03e02012-03-15 11:27:13 -0700768if is_service_enabled quantum; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500769 setup_develop $QUANTUM_CLIENT_DIR
770 setup_develop $QUANTUM_DIR
Monty Taylor5440ac02012-03-23 11:32:29 -0700771fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000772if is_service_enabled m-svc; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500773 setup_develop $MELANGE_DIR
Jason Kölker64a90662012-01-23 11:17:27 -0600774fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000775if is_service_enabled melange; then
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500776 setup_develop $MELANGECLIENT_DIR
Jason Kölker64a90662012-01-23 11:17:27 -0600777fi
Dean Troyer67787e62012-05-02 11:48:15 -0500778if is_service_enabled cinder; then
779 configure_cinder
780fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700781
Dean Troyer45495252012-04-13 13:16:38 -0500782# Do this _after_ glance is installed to override the old binary
Dean Troyerbbafb1b2012-06-11 16:51:39 -0500783setup_develop $GLANCECLIENT_DIR
Dean Troyer45495252012-04-13 13:16:38 -0500784
Dean Troyerdf0972c2012-03-07 17:31:03 -0600785
Dean Troyerff603ef2011-11-22 17:48:10 -0600786# Syslog
Dean Troyerdf0972c2012-03-07 17:31:03 -0600787# ------
Dean Troyerff603ef2011-11-22 17:48:10 -0600788
789if [[ $SYSLOG != "False" ]]; then
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500790 install_package rsyslog-relp
Dean Troyerff603ef2011-11-22 17:48:10 -0600791 if [[ "$SYSLOG_HOST" = "$HOST_IP" ]]; then
792 # Configure the master host to receive
793 cat <<EOF >/tmp/90-stack-m.conf
794\$ModLoad imrelp
795\$InputRELPServerRun $SYSLOG_PORT
796EOF
797 sudo mv /tmp/90-stack-m.conf /etc/rsyslog.d
798 else
799 # Set rsyslog to send to remote host
800 cat <<EOF >/tmp/90-stack-s.conf
801*.* :omrelp:$SYSLOG_HOST:$SYSLOG_PORT
802EOF
803 sudo mv /tmp/90-stack-s.conf /etc/rsyslog.d
804 fi
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500805 restart_service rsyslog
Dean Troyerff603ef2011-11-22 17:48:10 -0600806fi
807
Dean Troyerdf0972c2012-03-07 17:31:03 -0600808
Russell Bryant4a221452012-03-13 13:44:12 -0400809# Rabbit or Qpid
810# --------------
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400811
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000812if is_service_enabled rabbit; then
Anthony Younga09ae2f2011-09-15 23:11:29 -0700813 # Install and start rabbitmq-server
Scott Moser199d76e2011-10-20 12:41:40 -0400814 # the temp file is necessary due to LP: #878600
815 tfile=$(mktemp)
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500816 install_package rabbitmq-server > "$tfile" 2>&1
Scott Moser199d76e2011-10-20 12:41:40 -0400817 cat "$tfile"
818 rm -f "$tfile"
Dean Troyer5218d452012-02-04 02:13:23 -0600819 if [[ "$os_PACKAGE" = "rpm" ]]; then
820 # RPM doesn't start the service
821 restart_service rabbitmq-server
822 fi
Jesse Andrews53ed3872011-10-02 14:28:17 -0400823 # change the rabbit password since the default is "guest"
824 sudo rabbitmqctl change_password guest $RABBIT_PASSWORD
Russell Bryant4a221452012-03-13 13:44:12 -0400825elif is_service_enabled qpid; then
826 if [[ "$os_PACKAGE" = "rpm" ]]; then
827 install_package qpid-cpp-server
828 restart_service qpidd
829 else
830 install_package qpidd
831 fi
Anthony Younga09ae2f2011-09-15 23:11:29 -0700832fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -0700833
Dean Troyerdf0972c2012-03-07 17:31:03 -0600834
Jesse Andrews24859062011-09-15 21:28:23 -0700835# Mysql
Dean Troyerdf0972c2012-03-07 17:31:03 -0600836# -----
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400837
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000838if is_service_enabled mysql; then
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400839
Dean Troyer5218d452012-02-04 02:13:23 -0600840 if [[ "$os_PACKAGE" = "deb" ]]; then
841 # Seed configuration with mysql password so that apt-get install doesn't
842 # prompt us for a password upon install.
843 cat <<MYSQL_PRESEED | sudo debconf-set-selections
Anthony Young7a549f42011-10-12 07:13:13 +0000844mysql-server-5.1 mysql-server/root_password password $MYSQL_PASSWORD
845mysql-server-5.1 mysql-server/root_password_again password $MYSQL_PASSWORD
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400846mysql-server-5.1 mysql-server/start_on_boot boolean true
847MYSQL_PRESEED
Dean Troyer5218d452012-02-04 02:13:23 -0600848 fi
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400849
Jesse Andrews2e536a32011-10-13 11:40:16 -0700850 # while ``.my.cnf`` is not needed for openstack to function, it is useful
851 # as it allows you to access the mysql databases via ``mysql nova`` instead
852 # of having to specify the username/password each time.
Chmouel Boudjnahd5d5b682011-10-13 18:45:42 +0100853 if [[ ! -e $HOME/.my.cnf ]]; then
854 cat <<EOF >$HOME/.my.cnf
855[client]
856user=$MYSQL_USER
Anthony Youngcf145b72011-10-13 15:07:36 -0700857password=$MYSQL_PASSWORD
Chmouel Boudjnahd5d5b682011-10-13 18:45:42 +0100858host=$MYSQL_HOST
859EOF
860 chmod 0600 $HOME/.my.cnf
861 fi
862
Anthony Younga09ae2f2011-09-15 23:11:29 -0700863 # Install and start mysql-server
Dean Troyer13dc5cc2012-03-27 14:50:45 -0500864 install_package mysql-server
Dean Troyer5218d452012-02-04 02:13:23 -0600865 if [[ "$os_PACKAGE" = "rpm" ]]; then
866 # RPM doesn't start the service
867 start_service mysqld
868 # Set the root password - only works the first time
869 sudo mysqladmin -u root password $MYSQL_PASSWORD || true
870 fi
Jesse Andrews24859062011-09-15 21:28:23 -0700871 # Update the DB to give user ‘$MYSQL_USER’@’%’ full control of the all databases:
James E. Blair92e81992011-10-11 09:26:29 -0500872 sudo mysql -uroot -p$MYSQL_PASSWORD -h127.0.0.1 -e "GRANT ALL PRIVILEGES ON *.* TO '$MYSQL_USER'@'%' identified by '$MYSQL_PASSWORD';"
Jesse Andrews24859062011-09-15 21:28:23 -0700873
Dean Troyer588f4062012-04-02 16:50:49 -0500874 # Update ``my.cnf`` for some local needs and restart the mysql service
Dean Troyer5218d452012-02-04 02:13:23 -0600875 if [[ "$os_PACKAGE" = "deb" ]]; then
Dean Troyer588f4062012-04-02 16:50:49 -0500876 MY_CONF=/etc/mysql/my.cnf
Dean Troyer5218d452012-02-04 02:13:23 -0600877 MYSQL=mysql
878 else
Dean Troyer588f4062012-04-02 16:50:49 -0500879 MY_CONF=/etc/my.cnf
Dean Troyer5218d452012-02-04 02:13:23 -0600880 MYSQL=mysqld
881 fi
Dean Troyer588f4062012-04-02 16:50:49 -0500882
883 # Change ‘bind-address’ from localhost (127.0.0.1) to any (0.0.0.0)
884 sudo sed -i '/^bind-address/s/127.0.0.1/0.0.0.0/g' $MY_CONF
885
886 # Set default db type to InnoDB
887 if grep -q "default-storage-engine" $MY_CONF; then
888 # Change it
889 sudo bash -c "source $TOP_DIR/functions; iniset $MY_CONF mysqld default-storage-engine InnoDB"
890 else
891 # Add it
892 sudo sed -i -e "/^\[mysqld\]/ a \
893default-storage-engine = InnoDB" $MY_CONF
894 fi
895
Dean Troyer5218d452012-02-04 02:13:23 -0600896 restart_service $MYSQL
Jesse Andrews24859062011-09-15 21:28:23 -0700897fi
898
Josh Kearney0a7a41e2012-04-04 17:47:56 -0500899if [ -z "$SCREEN_HARDSTATUS" ]; then
900 SCREEN_HARDSTATUS='%{= .} %-Lw%{= .}%> %n%f %t*%{= .}%+Lw%< %-=%{g}(%{d}%H/%l%{g})'
901fi
902
Anthony Young60df29a2012-03-28 09:40:17 -0700903# Our screenrc file builder
904function screen_rc {
905 SCREENRC=$TOP_DIR/stack-screenrc
906 if [[ ! -e $SCREENRC ]]; then
907 # Name the screen session
908 echo "sessionname stack" > $SCREENRC
909 # Set a reasonable statusbar
Josh Kearney076e86a2012-04-05 16:25:03 -0500910 echo "hardstatus alwayslastline '$SCREEN_HARDSTATUS'" >> $SCREENRC
Anthony Young60df29a2012-03-28 09:40:17 -0700911 echo "screen -t stack bash" >> $SCREENRC
912 fi
913 # If this service doesn't already exist in the screenrc file
914 if ! grep $1 $SCREENRC 2>&1 > /dev/null; then
915 NL=`echo -ne '\015'`
916 echo "screen -t $1 bash" >> $SCREENRC
917 echo "stuff \"$2$NL\"" >> $SCREENRC
918 fi
919}
920
921# Our screen helper to launch a service in a hidden named screen
922function screen_it {
923 NL=`echo -ne '\015'`
924 if is_service_enabled $1; then
925 # Append the service to the screen rc file
926 screen_rc "$1" "$2"
927
928 screen -S stack -X screen -t $1
929 # sleep to allow bash to be ready to be send the command - we are
930 # creating a new window in screen and then sends characters, so if
931 # bash isn't running by the time we send the command, nothing happens
932 sleep 1.5
933
934 if [[ -n ${SCREEN_LOGDIR} ]]; then
935 screen -S stack -p $1 -X logfile ${SCREEN_LOGDIR}/screen-${1}.${CURRENT_LOG_TIME}.log
936 screen -S stack -p $1 -X log on
937 ln -sf ${SCREEN_LOGDIR}/screen-${1}.${CURRENT_LOG_TIME}.log ${SCREEN_LOGDIR}/screen-${1}.log
938 fi
939 screen -S stack -p $1 -X stuff "$2$NL"
940 fi
941}
942
943# create a new named screen to run processes in
944screen -d -m -S stack -t stack -s /bin/bash
945sleep 1
946# set a reasonable statusbar
Josh Kearney0a7a41e2012-04-04 17:47:56 -0500947screen -r stack -X hardstatus alwayslastline "$SCREEN_HARDSTATUS"
Jesse Andrews24859062011-09-15 21:28:23 -0700948
Tres Henryca85b792011-10-28 14:00:21 -0700949# Horizon
Dean Troyerdf0972c2012-03-07 17:31:03 -0600950# -------
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400951
Tres Henryca85b792011-10-28 14:00:21 -0700952# Setup the django horizon application to serve via apache/wsgi
Jesse Andrews75a37652011-09-12 17:09:08 -0700953
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +0000954if is_service_enabled horizon; then
Jesse Andrews24859062011-09-15 21:28:23 -0700955
Anthony Younga575d502012-01-26 12:59:26 -0800956 # Remove stale session database.
Gabriel Hurleyf1a11ad2012-02-29 01:36:53 -0800957 rm -f $HORIZON_DIR/openstack_dashboard/local/dashboard_openstack.sqlite3
Jesse Andrewscbe98d52011-10-02 17:47:32 -0400958
Tres Henryca85b792011-10-28 14:00:21 -0700959 # ``local_settings.py`` is used to override horizon default settings.
Gabriel Hurleyf1a11ad2012-02-29 01:36:53 -0800960 local_settings=$HORIZON_DIR/openstack_dashboard/local/local_settings.py
Jesse Andrews9c7c9082011-11-23 10:10:53 -0800961 cp $FILES/horizon_settings.py $local_settings
962
Tres Henryca85b792011-10-28 14:00:21 -0700963 # Initialize the horizon database (it stores sessions and notices shown to
Jesse Andrews51fb22e2011-10-19 09:24:17 -0700964 # users). The user system is external (keystone).
Gabriel Hurleyf1a11ad2012-02-29 01:36:53 -0800965 cd $HORIZON_DIR
Vishvananda Ishaya19b2f9b2012-01-05 22:21:08 +0000966 python manage.py syncdb
Dean Troyer5218d452012-02-04 02:13:23 -0600967 cd $TOP_DIR
Jesse Andrews75a37652011-09-12 17:09:08 -0700968
Anthony Young70dc5e02011-09-15 16:52:43 -0700969 # create an empty directory that apache uses as docroot
Tres Henryca85b792011-10-28 14:00:21 -0700970 sudo mkdir -p $HORIZON_DIR/.blackhole
Jesse Andrews1c1d1502011-09-12 19:29:56 -0700971
Dean Troyer5218d452012-02-04 02:13:23 -0600972 if [[ "$os_PACKAGE" = "deb" ]]; then
973 # Install apache2, which is NOPRIME'd
974 APACHE_NAME=apache2
975 APACHE_CONF=sites-available/horizon
976 install_package apache2 libapache2-mod-wsgi
977 # Clean up the old config name
978 sudo rm -f /etc/apache2/sites-enabled/000-default
979 # Be a good citizen and use the distro tools here
980 sudo touch /etc/$APACHE_NAME/$APACHE_CONF
981 sudo a2ensite horizon
982 else
983 # Install httpd, which is NOPRIME'd
984 APACHE_NAME=httpd
985 APACHE_CONF=conf.d/horizon.conf
986 sudo rm -f /etc/httpd/conf.d/000-*
987 install_package httpd mod_wsgi
988 sudo sed '/^Listen/s/^.*$/Listen 0.0.0.0:80/' -i /etc/httpd/conf/httpd.conf
989 fi
990 ## Configure apache to run horizon
991 sudo sh -c "sed -e \"
Dean Troyer9bb84f02012-01-24 11:45:52 -0600992 s,%USER%,$APACHE_USER,g;
993 s,%GROUP%,$APACHE_GROUP,g;
994 s,%HORIZON_DIR%,$HORIZON_DIR,g;
Dean Troyer5218d452012-02-04 02:13:23 -0600995 s,%APACHE_NAME%,$APACHE_NAME,g;
996 s,%DEST%,$DEST,g;
997 \" $FILES/apache-horizon.template >/etc/$APACHE_NAME/$APACHE_CONF"
998 restart_service $APACHE_NAME
Anthony Young70dc5e02011-09-15 16:52:43 -0700999fi
Jesse Andrews75a37652011-09-12 17:09:08 -07001000
Anthony Young3859f732011-09-14 02:33:43 -07001001
Jesse Andrewsd74257d2011-09-13 01:24:50 -07001002# Glance
1003# ------
1004
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001005if is_service_enabled g-reg; then
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001006 GLANCE_CONF_DIR=/etc/glance
1007 if [[ ! -d $GLANCE_CONF_DIR ]]; then
1008 sudo mkdir -p $GLANCE_CONF_DIR
1009 fi
1010 sudo chown `whoami` $GLANCE_CONF_DIR
Anthony Youngc8357622011-09-20 10:38:06 -07001011 GLANCE_IMAGE_DIR=$DEST/glance/images
Anthony Younga531b772011-09-20 09:59:54 -07001012 # Delete existing images
1013 rm -rf $GLANCE_IMAGE_DIR
Jesse Andrews75a37652011-09-12 17:09:08 -07001014
Anthony Younga531b772011-09-20 09:59:54 -07001015 # Use local glance directories
1016 mkdir -p $GLANCE_IMAGE_DIR
1017
Anthony Young70dc5e02011-09-15 16:52:43 -07001018 # (re)create glance database
Anthony Young7a549f42011-10-12 07:13:13 +00001019 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS glance;'
Gabriel Hurley71f23eb2012-02-15 17:39:05 -08001020 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE glance CHARACTER SET utf8;'
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001021
1022 # Copy over our glance configurations and update them
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001023 GLANCE_REGISTRY_CONF=$GLANCE_CONF_DIR/glance-registry.conf
Dean Troyer9bab2592012-04-06 12:10:05 -05001024 cp $GLANCE_DIR/etc/glance-registry.conf $GLANCE_REGISTRY_CONF
1025 iniset $GLANCE_REGISTRY_CONF DEFAULT debug True
1026 inicomment $GLANCE_REGISTRY_CONF DEFAULT log_file
1027 iniset $GLANCE_REGISTRY_CONF DEFAULT sql_connection $BASE_SQL_CONN/glance?charset=utf8
1028 iniset $GLANCE_REGISTRY_CONF DEFAULT use_syslog $SYSLOG
1029 iniset $GLANCE_REGISTRY_CONF paste_deploy flavor keystone
Dean Troyer6577b462012-01-16 22:27:20 -06001030
Dean Troyer9bab2592012-04-06 12:10:05 -05001031 GLANCE_REGISTRY_PASTE_INI=$GLANCE_CONF_DIR/glance-registry-paste.ini
1032 cp $GLANCE_DIR/etc/glance-registry-paste.ini $GLANCE_REGISTRY_PASTE_INI
1033 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST
1034 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT
1035 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1036 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1037 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_tenant_name $SERVICE_TENANT_NAME
1038 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_user glance
1039 iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken admin_password $SERVICE_PASSWORD
Anthony Youngf12d3ab2011-09-20 00:33:51 -07001040
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001041 GLANCE_API_CONF=$GLANCE_CONF_DIR/glance-api.conf
Dean Troyer9bab2592012-04-06 12:10:05 -05001042 cp $GLANCE_DIR/etc/glance-api.conf $GLANCE_API_CONF
1043 iniset $GLANCE_API_CONF DEFAULT debug True
1044 inicomment $GLANCE_API_CONF DEFAULT log_file
Brian Waldon7f9833f2012-05-25 08:31:59 -07001045 iniset $GLANCE_API_CONF DEFAULT sql_connection $BASE_SQL_CONN/glance?charset=utf8
Dean Troyer9bab2592012-04-06 12:10:05 -05001046 iniset $GLANCE_API_CONF DEFAULT use_syslog $SYSLOG
1047 iniset $GLANCE_API_CONF DEFAULT filesystem_store_datadir $GLANCE_IMAGE_DIR/
1048 iniset $GLANCE_API_CONF paste_deploy flavor keystone
Dean Troyer6577b462012-01-16 22:27:20 -06001049
Chmouel Boudjnahee76d262012-05-09 17:19:09 +01001050 # Store the images in swift if enabled.
1051 if is_service_enabled swift; then
1052 iniset $GLANCE_API_CONF DEFAULT default_store swift
1053 iniset $GLANCE_API_CONF DEFAULT swift_store_auth_address $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/v2.0/
1054 iniset $GLANCE_API_CONF DEFAULT swift_store_user $SERVICE_TENANT_NAME:glance
1055 iniset $GLANCE_API_CONF DEFAULT swift_store_key $SERVICE_PASSWORD
1056 iniset $GLANCE_API_CONF DEFAULT swift_store_create_container_on_put True
1057 fi
1058
Dean Troyer9bab2592012-04-06 12:10:05 -05001059 GLANCE_API_PASTE_INI=$GLANCE_CONF_DIR/glance-api-paste.ini
1060 cp $GLANCE_DIR/etc/glance-api-paste.ini $GLANCE_API_PASTE_INI
1061 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST
1062 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT
1063 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL
1064 iniset $GLANCE_API_PASTE_INI filter:authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/
1065 iniset $GLANCE_API_PASTE_INI filter:authtoken admin_tenant_name $SERVICE_TENANT_NAME
1066 iniset $GLANCE_API_PASTE_INI filter:authtoken admin_user glance
1067 iniset $GLANCE_API_PASTE_INI filter:authtoken admin_password $SERVICE_PASSWORD
Brian Waldone7114ca2012-05-04 13:42:35 -07001068
1069 GLANCE_POLICY_JSON=$GLANCE_CONF_DIR/policy.json
1070 cp $GLANCE_DIR/etc/policy.json $GLANCE_POLICY_JSON
Dan Prince0f39c5d2012-06-13 15:17:19 -04001071
1072 $GLANCE_DIR/bin/glance-manage db_sync
1073
Anthony Young70dc5e02011-09-15 16:52:43 -07001074fi
Jesse Andrews75a37652011-09-12 17:09:08 -07001075
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001076# Quantum (for controller or agent nodes)
Anthony Young60df29a2012-03-28 09:40:17 -07001077# -------
Shweta P4dc53aa2012-04-04 16:17:40 -04001078if is_service_enabled quantum; then
1079 # Put config files in /etc/quantum for everyone to find
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001080 if [[ ! -d /etc/quantum ]]; then
1081 sudo mkdir -p /etc/quantum
Anthony Young60df29a2012-03-28 09:40:17 -07001082 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001083 sudo chown `whoami` /etc/quantum
Shweta P4dc53aa2012-04-04 16:17:40 -04001084
Anthony Young60df29a2012-03-28 09:40:17 -07001085 if [[ "$Q_PLUGIN" = "openvswitch" ]]; then
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001086 Q_PLUGIN_CONF_PATH=etc/quantum/plugins/openvswitch
1087 Q_PLUGIN_CONF_FILENAME=ovs_quantum_plugin.ini
1088 Q_DB_NAME="ovs_quantum"
1089 Q_PLUGIN_CLASS="quantum.plugins.openvswitch.ovs_quantum_plugin.OVSQuantumPlugin"
Shweta P4dc53aa2012-04-04 16:17:40 -04001090 elif [[ "$Q_PLUGIN" = "linuxbridge" ]]; then
1091 # Install deps
1092 # FIXME add to files/apts/quantum, but don't install if not needed!
1093 install_package python-configobj
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001094 Q_PLUGIN_CONF_PATH=etc/quantum/plugins/linuxbridge
1095 Q_PLUGIN_CONF_FILENAME=linuxbridge_conf.ini
1096 Q_DB_NAME="quantum_linux_bridge"
1097 Q_PLUGIN_CLASS="quantum.plugins.linuxbridge.LinuxBridgePlugin.LinuxBridgePlugin"
1098 else
1099 echo "Unknown Quantum plugin '$Q_PLUGIN'.. exiting"
1100 exit 1
1101 fi
1102
1103 # if needed, move config file from $QUANTUM_DIR/etc/quantum to /etc/quantum
1104 mkdir -p /$Q_PLUGIN_CONF_PATH
1105 Q_PLUGIN_CONF_FILE=$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME
1106 if [[ -e $QUANTUM_DIR/$Q_PLUGIN_CONF_FILE ]]; then
1107 sudo mv $QUANTUM_DIR/$Q_PLUGIN_CONF_FILE /$Q_PLUGIN_CONF_FILE
1108 fi
1109 sudo sed -i -e "s/^sql_connection =.*$/sql_connection = mysql:\/\/$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST\/$Q_DB_NAME?charset=utf8/g" /$Q_PLUGIN_CONF_FILE
1110
1111 OVS_ENABLE_TUNNELING=${OVS_ENABLE_TUNNELING:-True}
1112 if [[ "$Q_PLUGIN" = "openvswitch" && $OVS_ENABLE_TUNNELING = "True" ]]; then
1113 OVS_VERSION=`ovs-vsctl --version | head -n 1 | awk '{print $4;}'`
1114 if [ $OVS_VERSION \< "1.4" ] && ! is_service_enabled q-svc ; then
1115 echo "You are running OVS version $OVS_VERSION."
1116 echo "OVS 1.4+ is required for tunneling between multiple hosts."
1117 exit 1
1118 fi
1119 sudo sed -i -e "s/.*enable-tunneling = .*$/enable-tunneling = $OVS_ENABLE_TUNNELING/g" /$Q_PLUGIN_CONF_FILE
1120 fi
1121fi
1122
1123# Quantum service (for controller node)
1124if is_service_enabled q-svc; then
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001125 # must remove this file from existing location, otherwise Quantum will prefer it
1126 if [[ -e $QUANTUM_DIR/etc/plugins.ini ]]; then
Gary Kotton5f4b6de2012-06-05 07:05:35 -04001127 # Support prior to common config
1128 Q_PLUGIN_INI_FILE=/etc/quantum/plugins.ini
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001129 sudo mv $QUANTUM_DIR/etc/plugins.ini $Q_PLUGIN_INI_FILE
1130 fi
Gary Kotton5f4b6de2012-06-05 07:05:35 -04001131 Q_CONF_FILE=/etc/quantum/quantum.conf
1132 Q_API_PASTE_FILE=/etc/quantum/api-paste.ini
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001133
1134 if [[ -e $QUANTUM_DIR/etc/quantum.conf ]]; then
1135 sudo mv $QUANTUM_DIR/etc/quantum.conf $Q_CONF_FILE
1136 fi
1137
Gary Kotton5f4b6de2012-06-05 07:05:35 -04001138 if [[ -e $QUANTUM_DIR/etc/api-paste.ini ]]; then
1139 sudo mv $QUANTUM_DIR/etc/api-paste.ini $Q_API_PASTE_FILE
1140 fi
1141
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001142 if is_service_enabled mysql; then
1143 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e "DROP DATABASE IF EXISTS $Q_DB_NAME;"
1144 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e "CREATE DATABASE IF NOT EXISTS $Q_DB_NAME CHARACTER SET utf8;"
Shweta P4dc53aa2012-04-04 16:17:40 -04001145 else
1146 echo "mysql must be enabled in order to use the $Q_PLUGIN Quantum plugin."
1147 exit 1
Anthony Young60df29a2012-03-28 09:40:17 -07001148 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001149
Gary Kotton5f4b6de2012-06-05 07:05:35 -04001150 # Update either configuration file with plugin or old plugin file
1151 # file checked below exists only in common config version
1152 if [[ -e $QUANTUM_DIR/quantum/tests/etc/quantum.conf.test ]]; then
1153 sudo sed -i -e "s/^core_plugin =.*$/core_plugin = $Q_PLUGIN_CLASS/g" $Q_CONF_FILE
1154 else
1155 sudo sed -i -e "s/^provider =.*$/provider = $Q_PLUGIN_CLASS/g" $Q_PLUGIN_INI_FILE
1156 fi
1157
1158 screen_it q-svc "cd $QUANTUM_DIR && python $QUANTUM_DIR/bin/quantum-server --config-file $Q_CONF_FILE"
Anthony Young60df29a2012-03-28 09:40:17 -07001159fi
1160
1161# Quantum agent (for compute nodes)
1162if is_service_enabled q-agt; then
1163 if [[ "$Q_PLUGIN" = "openvswitch" ]]; then
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001164 # Install deps
1165 # FIXME add to files/apts/quantum, but don't install if not needed!
1166 if [[ "$os_PACKAGE" = "deb" ]]; then
1167 kernel_version=`cat /proc/version | cut -d " " -f3`
1168 install_package make fakeroot dkms openvswitch-switch openvswitch-datapath-dkms linux-headers-$kernel_version
1169 else
1170 ### FIXME(dtroyer): Find RPMs for OpenVSwitch
1171 echo "OpenVSwitch packages need to be located"
1172 fi
Anthony Young60df29a2012-03-28 09:40:17 -07001173 # Set up integration bridge
1174 OVS_BRIDGE=${OVS_BRIDGE:-br-int}
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001175 for PORT in `sudo ovs-vsctl --no-wait list-ports $OVS_BRIDGE`; do
1176 if [[ "$PORT" =~ tap* ]]; then echo `sudo ip link delete $PORT` > /dev/null; fi
1177 sudo ovs-vsctl --no-wait del-port $OVS_BRIDGE $PORT
1178 done
Anthony Young60df29a2012-03-28 09:40:17 -07001179 sudo ovs-vsctl --no-wait -- --if-exists del-br $OVS_BRIDGE
1180 sudo ovs-vsctl --no-wait add-br $OVS_BRIDGE
1181 sudo ovs-vsctl --no-wait br-set-external-id $OVS_BRIDGE bridge-id br-int
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001182 sudo sed -i -e "s/.*local-ip = .*/local-ip = $HOST_IP/g" /$Q_PLUGIN_CONF_FILE
1183 AGENT_BINARY=$QUANTUM_DIR/quantum/plugins/openvswitch/agent/ovs_quantum_agent.py
Shweta P4dc53aa2012-04-04 16:17:40 -04001184 elif [[ "$Q_PLUGIN" = "linuxbridge" ]]; then
1185 # Start up the quantum <-> linuxbridge agent
1186 install_package bridge-utils
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001187 #set the default network interface
1188 QUANTUM_LB_PRIVATE_INTERFACE=${QUANTUM_LB_PRIVATE_INTERFACE:-$GUEST_INTERFACE_DEFAULT}
1189 sudo sed -i -e "s/^physical_interface = .*$/physical_interface = $QUANTUM_LB_PRIVATE_INTERFACE/g" /$Q_PLUGIN_CONF_FILE
1190 AGENT_BINARY=$QUANTUM_DIR/quantum/plugins/linuxbridge/agent/linuxbridge_quantum_agent.py
Anthony Young60df29a2012-03-28 09:40:17 -07001191 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001192 # Start up the quantum agent
1193 screen_it q-agt "sudo python $AGENT_BINARY /$Q_PLUGIN_CONF_FILE -v"
Anthony Young60df29a2012-03-28 09:40:17 -07001194fi
1195
1196# Melange service
1197if is_service_enabled m-svc; then
1198 if is_service_enabled mysql; then
1199 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS melange;'
1200 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE melange CHARACTER SET utf8;'
1201 else
1202 echo "mysql must be enabled in order to use the $Q_PLUGIN Quantum plugin."
1203 exit 1
1204 fi
1205 MELANGE_CONFIG_FILE=$MELANGE_DIR/etc/melange/melange.conf
1206 cp $MELANGE_CONFIG_FILE.sample $MELANGE_CONFIG_FILE
1207 sed -i -e "s/^sql_connection =.*$/sql_connection = mysql:\/\/$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST\/melange?charset=utf8/g" $MELANGE_CONFIG_FILE
1208 cd $MELANGE_DIR && PYTHONPATH=.:$PYTHONPATH python $MELANGE_DIR/bin/melange-manage --config-file=$MELANGE_CONFIG_FILE db_sync
1209 screen_it m-svc "cd $MELANGE_DIR && PYTHONPATH=.:$PYTHONPATH python $MELANGE_DIR/bin/melange-server --config-file=$MELANGE_CONFIG_FILE"
1210 echo "Waiting for melange to start..."
1211 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -q -O- http://127.0.0.1:9898; do sleep 1; done"; then
1212 echo "melange-server did not start"
1213 exit 1
1214 fi
1215 melange mac_address_range create cidr=$M_MAC_RANGE
1216fi
1217
1218
Dean Troyerdf0972c2012-03-07 17:31:03 -06001219
Jesse Andrewsd74257d2011-09-13 01:24:50 -07001220# Nova
1221# ----
Dean Troyerbd13b702012-02-13 11:22:36 -06001222
1223# Put config files in /etc/nova for everyone to find
Dean Troyerced65172012-03-02 16:36:16 -06001224NOVA_CONF_DIR=/etc/nova
1225if [[ ! -d $NOVA_CONF_DIR ]]; then
1226 sudo mkdir -p $NOVA_CONF_DIR
Dean Troyerbd13b702012-02-13 11:22:36 -06001227fi
Dean Troyerced65172012-03-02 16:36:16 -06001228sudo chown `whoami` $NOVA_CONF_DIR
Dean Troyerbd13b702012-02-13 11:22:36 -06001229
Mark McLoughlin27e39fd2012-05-10 07:12:36 +01001230cp -p $NOVA_DIR/etc/nova/policy.json $NOVA_CONF_DIR
1231
Thierry Carrezbe5d3f22012-06-20 18:17:03 +02001232# If Nova ships the new rootwrap filters files, deploy them
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001233# (owned by root) and add a parameter to $NOVA_ROOTWRAP
1234ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP"
Thierry Carrezbe5d3f22012-06-20 18:17:03 +02001235if [[ -d $NOVA_DIR/etc/nova/rootwrap ]]; then
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001236 # Wipe any existing rootwrap.d files first
1237 if [[ -d $NOVA_CONF_DIR/rootwrap.d ]]; then
1238 sudo rm -rf $NOVA_CONF_DIR/rootwrap.d
1239 fi
Thierry Carrezbe5d3f22012-06-20 18:17:03 +02001240 # Deploy filters to /etc/nova/rootwrap.d
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001241 sudo mkdir -m 755 $NOVA_CONF_DIR/rootwrap.d
Thierry Carrezbe5d3f22012-06-20 18:17:03 +02001242 sudo cp $NOVA_DIR/etc/nova/rootwrap/*.filters $NOVA_CONF_DIR/rootwrap.d
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001243 sudo chown -R root:root $NOVA_CONF_DIR/rootwrap.d
1244 sudo chmod 644 $NOVA_CONF_DIR/rootwrap.d/*
Thierry Carrezbe5d3f22012-06-20 18:17:03 +02001245 # Set up rootwrap.conf, pointing to /etc/nova/rootwrap.d
1246 sudo cp $NOVA_DIR/etc/nova/rootwrap.conf $NOVA_CONF_DIR/
1247 sudo sed -e "s:^path=.*$:path=$NOVA_CONF_DIR/rootwrap.d:" -i $NOVA_CONF_DIR/rootwrap.conf
1248 sudo chown root:root $NOVA_CONF_DIR/rootwrap.conf
1249 sudo chmod 0644 $NOVA_CONF_DIR/rootwrap.conf
1250 # Specify rootwrap.conf as first parameter to nova-rootwrap
1251 NOVA_ROOTWRAP="$NOVA_ROOTWRAP $NOVA_CONF_DIR/rootwrap.conf"
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001252 ROOTWRAP_SUDOER_CMD="$NOVA_ROOTWRAP *"
1253fi
1254
Thierry Carrezd2f8fa32012-06-11 16:45:29 +02001255# Set up the rootwrap sudoers
1256TEMPFILE=`mktemp`
Thierry Carrezce5b8ed2012-06-14 12:27:58 +02001257echo "$USER ALL=(root) NOPASSWD: $ROOTWRAP_SUDOER_CMD" >$TEMPFILE
Thierry Carrezd2f8fa32012-06-11 16:45:29 +02001258chmod 0440 $TEMPFILE
1259sudo chown root:root $TEMPFILE
1260sudo mv $TEMPFILE /etc/sudoers.d/nova-rootwrap
1261
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001262if is_service_enabled n-api; then
Dean Troyerdf0972c2012-03-07 17:31:03 -06001263 # Use the sample http middleware configuration supplied in the
1264 # Nova sources. This paste config adds the configuration required
1265 # for Nova to validate Keystone tokens.
Vishvananda Ishayaea4a53d2012-01-11 11:34:13 -08001266
Dean Troyerdf0972c2012-03-07 17:31:03 -06001267 # Allow rate limiting to be turned off for testing, like for Tempest
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001268 # NOTE: Set API_RATE_LIMIT="False" to turn OFF rate limiting
1269 API_RATE_LIMIT=${API_RATE_LIMIT:-"True"}
Dean Troyerdf0972c2012-03-07 17:31:03 -06001270
1271 # Remove legacy paste config if present
Vishvananda Ishaya7a103dd2012-02-23 23:35:43 +00001272 rm -f $NOVA_DIR/bin/nova-api-paste.ini
1273
Dean Troyerdf0972c2012-03-07 17:31:03 -06001274 # Get the sample configuration file in place
Dean Troyerced65172012-03-02 16:36:16 -06001275 cp $NOVA_DIR/etc/nova/api-paste.ini $NOVA_CONF_DIR
Vishvananda Ishayaea4a53d2012-01-11 11:34:13 -08001276
Dean Troyerdf0972c2012-03-07 17:31:03 -06001277 # Rewrite the authtoken configration for our Keystone service.
1278 # This is a bit defensive to allow the sample file some varaince.
Dean Troyerb3288382012-02-28 16:41:10 -06001279 sed -e "
1280 /^admin_token/i admin_tenant_name = $SERVICE_TENANT_NAME
1281 /admin_tenant_name/s/^.*$/admin_tenant_name = $SERVICE_TENANT_NAME/;
1282 /admin_user/s/^.*$/admin_user = nova/;
1283 /admin_password/s/^.*$/admin_password = $SERVICE_PASSWORD/;
1284 s,%SERVICE_TENANT_NAME%,$SERVICE_TENANT_NAME,g;
1285 s,%SERVICE_TOKEN%,$SERVICE_TOKEN,g;
Dean Troyerced65172012-03-02 16:36:16 -06001286 " -i $NOVA_CONF_DIR/api-paste.ini
Jesse Andrewsf70569e2011-10-24 21:56:25 -07001287fi
Jesse Andrewsba23cc72011-09-11 03:22:13 -07001288
Anthony Young55458452011-12-17 00:21:49 +00001289# Helper to clean iptables rules
1290function clean_iptables() {
1291 # Delete rules
1292 sudo iptables -S -v | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-A" | sed "s/-A/-D/g" | awk '{print "sudo iptables",$0}' | bash
1293 # Delete nat rules
1294 sudo iptables -S -v -t nat | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-A" | sed "s/-A/-D/g" | awk '{print "sudo iptables -t nat",$0}' | bash
1295 # Delete chains
1296 sudo iptables -S -v | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-N" | sed "s/-N/-X/g" | awk '{print "sudo iptables",$0}' | bash
1297 # Delete nat chains
1298 sudo iptables -S -v -t nat | sed "s/-c [0-9]* [0-9]* //g" | grep "nova" | grep "\-N" | sed "s/-N/-X/g" | awk '{print "sudo iptables -t nat",$0}' | bash
1299}
1300
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001301if is_service_enabled n-cpu; then
Jesse Andrewsdfcd2002011-09-13 13:17:22 -07001302
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001303 # Virtualization Configuration
1304 # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dean Troyer5218d452012-02-04 02:13:23 -06001305 if [[ "$os_PACKAGE" = "deb" ]]; then
1306 LIBVIRT_PKG_NAME=libvirt-bin
1307 else
1308 LIBVIRT_PKG_NAME=libvirt
1309 fi
1310 install_package $LIBVIRT_PKG_NAME
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001311
Dean Troyer0b31e862012-03-07 16:47:56 -06001312 # Force IP forwarding on, just on case
1313 sudo sysctl -w net.ipv4.ip_forward=1
1314
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001315 # attempt to load modules: network block device - used to manage qcow images
Anthony Young70dc5e02011-09-15 16:52:43 -07001316 sudo modprobe nbd || true
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001317
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07001318 # Check for kvm (hardware based virtualization). If unable to initialize
1319 # kvm, we drop back to the slower emulation mode (qemu). Note: many systems
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001320 # come with hardware virtualization disabled in BIOS.
Jesse Andrews2abbdd42011-10-03 22:48:30 -04001321 if [[ "$LIBVIRT_TYPE" == "kvm" ]]; then
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001322 sudo modprobe kvm || true
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001323 if [ ! -e /dev/kvm ]; then
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001324 echo "WARNING: Switching to QEMU"
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001325 LIBVIRT_TYPE=qemu
1326 fi
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001327 fi
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001328
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001329 # Install and configure **LXC** if specified. LXC is another approach to
1330 # splitting a system into many smaller parts. LXC uses cgroups and chroot
1331 # to simulate multiple systems.
Jesse Andrews2abbdd42011-10-03 22:48:30 -04001332 if [[ "$LIBVIRT_TYPE" == "lxc" ]]; then
Dean Troyer5218d452012-02-04 02:13:23 -06001333 if [[ "$os_PACKAGE" = "deb" ]]; then
1334 if [[ "$DISTRO" > natty ]]; then
1335 install_package cgroup-lite
1336 else
1337 cgline="none /cgroup cgroup cpuacct,memory,devices,cpu,freezer,blkio 0 0"
1338 sudo mkdir -p /cgroup
1339 if ! grep -q cgroup /etc/fstab; then
1340 echo "$cgline" | sudo tee -a /etc/fstab
1341 fi
1342 if ! mount -n | grep -q cgroup; then
1343 sudo mount /cgroup
1344 fi
1345 fi
Scott Moser3f5e1892011-12-08 16:21:52 -05001346 else
Dean Troyer5218d452012-02-04 02:13:23 -06001347 ### FIXME(dtroyer): figure this out
1348 echo "RPM-based cgroup not implemented yet"
1349 yum_install libcgroup-tools
Jesse Andrewse4304232011-10-07 10:34:32 -04001350 fi
Jesse Andrewsc6d30422011-10-02 13:11:28 -04001351 fi
1352
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001353 QEMU_CONF=/etc/libvirt/qemu.conf
1354 if is_service_enabled quantum && [[ $Q_PLUGIN = "openvswitch" ]] && ! sudo grep -q '^cgroup_device_acl' $QEMU_CONF ; then
1355 # add /dev/net/tun to cgroup_device_acls, needed for type=ethernet interfaces
1356 sudo chmod 666 $QEMU_CONF
1357 sudo cat <<EOF >> /etc/libvirt/qemu.conf
1358cgroup_device_acl = [
1359 "/dev/null", "/dev/full", "/dev/zero",
1360 "/dev/random", "/dev/urandom",
1361 "/dev/ptmx", "/dev/kvm", "/dev/kqemu",
1362 "/dev/rtc", "/dev/hpet","/dev/net/tun",
1363]
1364EOF
1365 sudo chmod 644 $QEMU_CONF
1366 fi
1367
Dean Troyer5218d452012-02-04 02:13:23 -06001368 if [[ "$os_PACKAGE" = "deb" ]]; then
1369 LIBVIRT_DAEMON=libvirt-bin
1370 else
1371 # http://wiki.libvirt.org/page/SSHPolicyKitSetup
1372 if ! grep ^libvirtd: /etc/group >/dev/null; then
1373 sudo groupadd libvirtd
1374 fi
1375 sudo bash -c 'cat <<EOF >/etc/polkit-1/localauthority/50-local.d/50-libvirt-remote-access.pkla
1376[libvirt Management Access]
1377Identity=unix-group:libvirtd
1378Action=org.libvirt.unix.manage
1379ResultAny=yes
1380ResultInactive=yes
1381ResultActive=yes
1382EOF'
1383 LIBVIRT_DAEMON=libvirtd
1384 fi
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001385 # The user that nova runs as needs to be member of libvirtd group otherwise
1386 # nova-compute will be unable to use libvirt.
Anthony Young70dc5e02011-09-15 16:52:43 -07001387 sudo usermod -a -G libvirtd `whoami`
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07001388 # libvirt detects various settings on startup, as we potentially changed
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001389 # the system configuration (modules, filesystems), we need to restart
1390 # libvirt to detect those changes.
Dean Troyer5218d452012-02-04 02:13:23 -06001391 restart_service $LIBVIRT_DAEMON
Anthony Young70dc5e02011-09-15 16:52:43 -07001392
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001393
1394 # Instance Storage
1395 # ~~~~~~~~~~~~~~~~
1396
1397 # Nova stores each instance in its own directory.
Anthony Young70dc5e02011-09-15 16:52:43 -07001398 mkdir -p $NOVA_DIR/instances
1399
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001400 # You can specify a different disk to be mounted and used for backing the
Vishvananda Ishaya9b353672011-10-20 10:07:10 -07001401 # virtual machines. If there is a partition labeled nova-instances we
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001402 # mount it (ext filesystems can be labeled via e2label).
Anthony Young70dc5e02011-09-15 16:52:43 -07001403 if [ -L /dev/disk/by-label/nova-instances ]; then
Jesse Andrews38df1222011-11-20 09:55:44 -08001404 if ! mount -n | grep -q $NOVA_DIR/instances; then
Jesse Andrews51fb22e2011-10-19 09:24:17 -07001405 sudo mount -L nova-instances $NOVA_DIR/instances
1406 sudo chown -R `whoami` $NOVA_DIR/instances
1407 fi
Anthony Young70dc5e02011-09-15 16:52:43 -07001408 fi
1409
Anthony Young55458452011-12-17 00:21:49 +00001410 # Clean iptables from previous runs
1411 clean_iptables
1412
1413 # Destroy old instances
Anthony Young1df07892012-03-15 01:08:13 -07001414 instances=`sudo virsh list --all | grep $INSTANCE_NAME_PREFIX | sed "s/.*\($INSTANCE_NAME_PREFIX[0-9a-fA-F]*\).*/\1/g"`
Anthony Youngedef2442012-01-20 12:45:32 -08001415 if [ ! "$instances" = "" ]; then
Anthony Young1df07892012-03-15 01:08:13 -07001416 echo $instances | xargs -n1 sudo virsh destroy || true
1417 echo $instances | xargs -n1 sudo virsh undefine || true
Anthony Young55458452011-12-17 00:21:49 +00001418 fi
1419
Anthony Young4f830e12012-02-11 00:17:31 -08001420 # Logout and delete iscsi sessions
1421 sudo iscsiadm --mode node | grep $VOLUME_NAME_PREFIX | cut -d " " -f2 | xargs sudo iscsiadm --mode node --logout || true
1422 sudo iscsiadm --mode node | grep $VOLUME_NAME_PREFIX | cut -d " " -f2 | sudo iscsiadm --mode node --op delete || true
1423
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001424 # Clean out the instances directory.
Jesse Andrews461bfdc2011-10-09 17:50:38 -07001425 sudo rm -rf $NOVA_DIR/instances/*
Jesse Andrewsdfcd2002011-09-13 13:17:22 -07001426fi
1427
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001428if is_service_enabled n-net; then
Anthony Young55458452011-12-17 00:21:49 +00001429 # Delete traces of nova networks from prior runs
Anthony Young09fde812011-09-20 02:23:54 -07001430 sudo killall dnsmasq || true
Anthony Young55458452011-12-17 00:21:49 +00001431 clean_iptables
Anthony Young70dc5e02011-09-15 16:52:43 -07001432 rm -rf $NOVA_DIR/networks
1433 mkdir -p $NOVA_DIR/networks
Dean Troyer0b31e862012-03-07 16:47:56 -06001434
1435 # Force IP forwarding on, just on case
1436 sudo sysctl -w net.ipv4.ip_forward=1
Anthony Young70dc5e02011-09-15 16:52:43 -07001437fi
Jesse Andrews75a37652011-09-12 17:09:08 -07001438
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001439# Storage Service
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001440if is_service_enabled swift; then
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001441 # Install memcached for swift.
Dean Troyer13dc5cc2012-03-27 14:50:45 -05001442 install_package memcached
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001443
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001444 # We first do a bit of setup by creating the directories and
1445 # changing the permissions so we can run it as our user.
1446
Chmouel Boudjnah067163d2011-11-02 14:25:06 +01001447 USER_GROUP=$(id -g)
Dean Troyer1e51c112012-03-16 10:42:00 -05001448 sudo mkdir -p ${SWIFT_DATA_DIR}/drives
1449 sudo chown -R $USER:${USER_GROUP} ${SWIFT_DATA_DIR}
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001450
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001451 # We then create a loopback disk and format it to XFS.
Dean Troyer00edc952012-05-17 11:10:36 -05001452 if [[ -e ${SWIFT_DATA_DIR}/drives/images/swift.img ]]; then
1453 if egrep -q ${SWIFT_DATA_DIR}/drives/sdb1 /proc/mounts; then
1454 sudo umount ${SWIFT_DATA_DIR}/drives/sdb1
1455 fi
1456 else
Dean Troyer1e51c112012-03-16 10:42:00 -05001457 mkdir -p ${SWIFT_DATA_DIR}/drives/images
1458 sudo touch ${SWIFT_DATA_DIR}/drives/images/swift.img
1459 sudo chown $USER: ${SWIFT_DATA_DIR}/drives/images/swift.img
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001460
Dean Troyer1e51c112012-03-16 10:42:00 -05001461 dd if=/dev/zero of=${SWIFT_DATA_DIR}/drives/images/swift.img \
Chmouel Boudjnahb93478f2011-11-02 16:49:56 +01001462 bs=1024 count=0 seek=${SWIFT_LOOPBACK_DISK_SIZE}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001463 fi
Dean Troyer00edc952012-05-17 11:10:36 -05001464 # Make a fresh XFS filesystem
1465 mkfs.xfs -f -i size=1024 ${SWIFT_DATA_DIR}/drives/images/swift.img
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001466
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001467 # After the drive being created we mount the disk with a few mount
1468 # options to make it most efficient as possible for swift.
Dean Troyer1e51c112012-03-16 10:42:00 -05001469 mkdir -p ${SWIFT_DATA_DIR}/drives/sdb1
1470 if ! egrep -q ${SWIFT_DATA_DIR}/drives/sdb1 /proc/mounts; then
Chmouel Boudjnahb93478f2011-11-02 16:49:56 +01001471 sudo mount -t xfs -o loop,noatime,nodiratime,nobarrier,logbufs=8 \
Dean Troyer1e51c112012-03-16 10:42:00 -05001472 ${SWIFT_DATA_DIR}/drives/images/swift.img ${SWIFT_DATA_DIR}/drives/sdb1
Chmouel Boudjnaha03f0052011-11-01 13:08:29 +00001473 fi
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001474
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001475 # We then create link to that mounted location so swift would know
1476 # where to go.
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001477 for x in $(seq ${SWIFT_REPLICAS}); do
Dean Troyer1e51c112012-03-16 10:42:00 -05001478 sudo ln -sf ${SWIFT_DATA_DIR}/drives/sdb1/$x ${SWIFT_DATA_DIR}/$x; done
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001479
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001480 # We now have to emulate a few different servers into one we
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001481 # create all the directories needed for swift
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001482 for x in $(seq ${SWIFT_REPLICAS}); do
Dean Troyer1e51c112012-03-16 10:42:00 -05001483 drive=${SWIFT_DATA_DIR}/drives/sdb1/${x}
1484 node=${SWIFT_DATA_DIR}/${x}/node
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001485 node_device=${node}/sdb1
1486 [[ -d $node ]] && continue
1487 [[ -d $drive ]] && continue
1488 sudo install -o ${USER} -g $USER_GROUP -d $drive
1489 sudo install -o ${USER} -g $USER_GROUP -d $node_device
1490 sudo chown -R $USER: ${node}
Chmouel Boudjnahe1d2bcb2011-11-01 17:32:11 +01001491 done
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001492
Dean Troyer1e51c112012-03-16 10:42:00 -05001493 sudo mkdir -p ${SWIFT_CONFIG_DIR}/{object,container,account}-server /var/run/swift
1494 sudo chown -R $USER: ${SWIFT_CONFIG_DIR} /var/run/swift
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001495
Dean Troyer1e51c112012-03-16 10:42:00 -05001496 if [[ "$SWIFT_CONFIG_DIR" != "/etc/swift" ]]; then
1497 # Some swift tools are hard-coded to use /etc/swift and are apparenty not going to be fixed.
1498 # Create a symlink if the config dir is moved
1499 sudo ln -sf ${SWIFT_CONFIG_DIR} /etc/swift
1500 fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001501
Dean Troyer1e51c112012-03-16 10:42:00 -05001502 # Swift use rsync to syncronize between all the different
1503 # partitions (which make more sense when you have a multi-node
1504 # setup) we configure it with our version of rsync.
1505 sed -e "
1506 s/%GROUP%/${USER_GROUP}/;
1507 s/%USER%/$USER/;
1508 s,%SWIFT_DATA_DIR%,$SWIFT_DATA_DIR,;
1509 " $FILES/swift/rsyncd.conf | sudo tee /etc/rsyncd.conf
Dean Troyer5218d452012-02-04 02:13:23 -06001510 if [[ "$os_PACKAGE" = "deb" ]]; then
1511 sudo sed -i '/^RSYNC_ENABLE=false/ { s/false/true/ }' /etc/default/rsync
1512 else
1513 sudo sed -i '/disable *= *yes/ { s/yes/no/ }' /etc/xinetd.d/rsync
1514 fi
Chmouel Boudjnah45c51132011-11-01 19:32:23 +01001515
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001516 # By default Swift will be installed with the tempauth middleware
1517 # which has some default username and password if you have
1518 # configured keystone it will checkout the directory.
1519 if is_service_enabled key; then
1520 swift_auth_server="s3token authtoken keystone"
1521 else
1522 swift_auth_server=tempauth
1523 fi
Chmouel Boudjnah45c51132011-11-01 19:32:23 +01001524
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001525 SWIFT_CONFIG_PROXY_SERVER=${SWIFT_CONFIG_DIR}/proxy-server.conf
1526 cp ${SWIFT_DIR}/etc/proxy-server.conf-sample ${SWIFT_CONFIG_PROXY_SERVER}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001527
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001528 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT user
1529 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT user ${USER}
1530
1531 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT swift_dir
1532 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT swift_dir ${SWIFT_CONFIG_DIR}
1533
1534 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT workers
1535 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT workers 1
1536
1537 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT log_level
1538 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT log_level DEBUG
1539
1540 iniuncomment ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT bind_port
1541 iniset ${SWIFT_CONFIG_PROXY_SERVER} DEFAULT bind_port ${SWIFT_DEFAULT_BIND_PORT:-8080}
1542
1543 iniset ${SWIFT_CONFIG_PROXY_SERVER} pipeline:main pipeline "catch_errors healthcheck cache ratelimit swift3 ${swift_auth_server} proxy-logging proxy-server"
1544
1545 iniset ${SWIFT_CONFIG_PROXY_SERVER} app:proxy-server account_autocreate true
1546
1547 cat <<EOF>>${SWIFT_CONFIG_PROXY_SERVER}
1548
1549[filter:keystone]
1550paste.filter_factory = keystone.middleware.swift_auth:filter_factory
1551operator_roles = Member,admin
1552
1553# NOTE(chmou): s3token middleware is not updated yet to use only
1554# username and password.
1555[filter:s3token]
1556paste.filter_factory = keystone.middleware.s3_token:filter_factory
1557auth_port = ${KEYSTONE_AUTH_PORT}
1558auth_host = ${KEYSTONE_AUTH_HOST}
1559auth_protocol = ${KEYSTONE_AUTH_PROTOCOL}
1560auth_token = ${SERVICE_TOKEN}
1561admin_token = ${SERVICE_TOKEN}
1562
1563[filter:authtoken]
1564paste.filter_factory = keystone.middleware.auth_token:filter_factory
1565auth_host = ${KEYSTONE_AUTH_HOST}
1566auth_port = ${KEYSTONE_AUTH_PORT}
1567auth_protocol = ${KEYSTONE_AUTH_PROTOCOL}
1568auth_uri = ${KEYSTONE_SERVICE_PROTOCOL}://${KEYSTONE_SERVICE_HOST}:${KEYSTONE_SERVICE_PORT}/
1569admin_tenant_name = ${SERVICE_TENANT_NAME}
1570admin_user = swift
1571admin_password = ${SERVICE_PASSWORD}
1572
1573[filter:swift3]
Chmouel Boudjnahf8be4282012-06-19 11:01:04 +00001574use = egg:swift3#swift3
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001575EOF
1576
1577 cp ${SWIFT_DIR}/etc/swift.conf-sample ${SWIFT_CONFIG_DIR}/swift.conf
1578 iniset ${SWIFT_CONFIG_DIR}/swift.conf swift-hash swift_hash_path_suffix ${SWIFT_HASH}
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001579
Dean Troyer1e51c112012-03-16 10:42:00 -05001580 # We need to generate a object/account/proxy configuration
1581 # emulating 4 nodes on different ports we have a little function
1582 # that help us doing that.
1583 function generate_swift_configuration() {
1584 local server_type=$1
1585 local bind_port=$2
1586 local log_facility=$3
1587 local node_number
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001588 local swift_node_config
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001589
Dean Troyer1e51c112012-03-16 10:42:00 -05001590 for node_number in $(seq ${SWIFT_REPLICAS}); do
1591 node_path=${SWIFT_DATA_DIR}/${node_number}
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001592 swift_node_config=${SWIFT_CONFIG_DIR}/${server_type}-server/${node_number}.conf
1593
1594 cp ${SWIFT_DIR}/etc/${server_type}-server.conf-sample ${swift_node_config}
1595
1596 iniuncomment ${swift_node_config} DEFAULT user
1597 iniset ${swift_node_config} DEFAULT user ${USER}
1598
1599 iniuncomment ${swift_node_config} DEFAULT bind_port
1600 iniset ${swift_node_config} DEFAULT bind_port ${bind_port}
1601
1602 iniuncomment ${swift_node_config} DEFAULT swift_dir
1603 iniset ${swift_node_config} DEFAULT swift_dir ${SWIFT_CONFIG_DIR}
1604
1605 iniuncomment ${swift_node_config} DEFAULT devices
1606 iniset ${swift_node_config} DEFAULT devices ${node_path}
1607
1608 iniuncomment ${swift_node_config} DEFAULT log_facility
1609 iniset ${swift_node_config} DEFAULT log_facility LOG_LOCAL${log_facility}
1610
1611 iniuncomment ${swift_node_config} DEFAULT mount_check
1612 iniset ${swift_node_config} DEFAULT mount_check false
1613
1614 iniuncomment ${swift_node_config} ${server_type}-replicator vm_test_mode
1615 iniset ${swift_node_config} ${server_type}-replicator vm_test_mode yes
1616
Dean Troyer1e51c112012-03-16 10:42:00 -05001617 bind_port=$(( ${bind_port} + 10 ))
1618 log_facility=$(( ${log_facility} + 1 ))
1619 done
1620 }
1621 generate_swift_configuration object 6010 2
1622 generate_swift_configuration container 6011 2
1623 generate_swift_configuration account 6012 2
Chmouel Boudjnaha03f0052011-11-01 13:08:29 +00001624
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001625 # We have some specific configuration for swift for rsyslog. See
1626 # the file /etc/rsyslog.d/10-swift.conf for more info.
1627 swift_log_dir=${SWIFT_DATA_DIR}/logs
1628 rm -rf ${swift_log_dir}
1629 mkdir -p ${swift_log_dir}/hourly
1630 sudo chown -R $USER:adm ${swift_log_dir}
1631 sed "s,%SWIFT_LOGDIR%,${swift_log_dir}," $FILES/swift/rsyslog.conf | sudo \
1632 tee /etc/rsyslog.d/10-swift.conf
1633 restart_service rsyslog
Chmouel Boudjnah769eb1c2011-11-22 13:04:40 +01001634
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001635 # This is where we create three different rings for swift with
1636 # different object servers binding on different ports.
1637 pushd ${SWIFT_CONFIG_DIR} >/dev/null && {
Vishvananda Ishayaea4a53d2012-01-11 11:34:13 -08001638
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001639 rm -f *.builder *.ring.gz backups/*.builder backups/*.ring.gz
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001640
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001641 port_number=6010
1642 swift-ring-builder object.builder create ${SWIFT_PARTITION_POWER_SIZE} ${SWIFT_REPLICAS} 1
1643 for x in $(seq ${SWIFT_REPLICAS}); do
1644 swift-ring-builder object.builder add z${x}-127.0.0.1:${port_number}/sdb1 1
1645 port_number=$[port_number + 10]
1646 done
1647 swift-ring-builder object.builder rebalance
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001648
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001649 port_number=6011
1650 swift-ring-builder container.builder create ${SWIFT_PARTITION_POWER_SIZE} ${SWIFT_REPLICAS} 1
1651 for x in $(seq ${SWIFT_REPLICAS}); do
1652 swift-ring-builder container.builder add z${x}-127.0.0.1:${port_number}/sdb1 1
1653 port_number=$[port_number + 10]
1654 done
1655 swift-ring-builder container.builder rebalance
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001656
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001657 port_number=6012
1658 swift-ring-builder account.builder create ${SWIFT_PARTITION_POWER_SIZE} ${SWIFT_REPLICAS} 1
1659 for x in $(seq ${SWIFT_REPLICAS}); do
1660 swift-ring-builder account.builder add z${x}-127.0.0.1:${port_number}/sdb1 1
1661 port_number=$[port_number + 10]
1662 done
1663 swift-ring-builder account.builder rebalance
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001664
Chmouel Boudjnahc7214e82012-06-06 13:56:39 +02001665 } && popd >/dev/null
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001666
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001667 # We then can start rsync.
Dean Troyer5218d452012-02-04 02:13:23 -06001668 if [[ "$os_PACKAGE" = "deb" ]]; then
1669 sudo /etc/init.d/rsync restart || :
1670 else
1671 sudo systemctl start xinetd.service
1672 fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001673
Dean Troyerb1f6c182012-03-16 09:23:23 -05001674 # First spawn all the swift services then kill the
Chmouel Boudjnah185c66e2012-03-15 17:17:39 +00001675 # proxy service so we can run it in foreground in screen.
Dean Troyerb1f6c182012-03-16 09:23:23 -05001676 # ``swift-init ... {stop|restart}`` exits with '1' if no servers are running,
1677 # ignore it just in case
1678 swift-init all restart || true
1679 swift-init proxy stop || true
Chmouel Boudjnahd5651bb2011-11-01 16:22:08 +01001680
Chmouel Boudjnaha95efab2012-02-16 10:35:26 +00001681 unset s swift_hash swift_auth_server
Chmouel Boudjnah28fa4e82011-11-01 12:30:55 +01001682fi
1683
Dean Troyerdf0972c2012-03-07 17:31:03 -06001684
Anthony Youngacff87a2011-10-20 10:12:58 -07001685# Volume Service
1686# --------------
1687
Dean Troyer67787e62012-05-02 11:48:15 -05001688if is_service_enabled cinder; then
1689 init_cinder
1690elif is_service_enabled n-vol; then
1691 # Configure a default volume group called '`stack-volumes`' for the volume
Anthony Youngacff87a2011-10-20 10:12:58 -07001692 # service if it does not yet exist. If you don't wish to use a file backed
Dean Troyer67787e62012-05-02 11:48:15 -05001693 # volume group, create your own volume group called ``stack-volumes`` before
1694 # invoking ``stack.sh``.
Anthony Youngacff87a2011-10-20 10:12:58 -07001695 #
Dean Troyer67787e62012-05-02 11:48:15 -05001696 # By default, the backing file is 2G in size, and is stored in ``/opt/stack/data``.
Jesse Andrews38df1222011-11-20 09:55:44 -08001697
Dean Troyer2229a6e2011-12-01 17:02:07 -06001698 if ! sudo vgs $VOLUME_GROUP; then
Dean Troyer67787e62012-05-02 11:48:15 -05001699 VOLUME_BACKING_FILE=${VOLUME_BACKING_FILE:-$DATA_DIR/${VOLUME_GROUP}-backing-file}
Anthony Youngb22263a2011-10-20 10:26:30 -07001700 VOLUME_BACKING_FILE_SIZE=${VOLUME_BACKING_FILE_SIZE:-2052M}
Dean Troyer2229a6e2011-12-01 17:02:07 -06001701 # Only create if the file doesn't already exists
1702 [[ -f $VOLUME_BACKING_FILE ]] || truncate -s $VOLUME_BACKING_FILE_SIZE $VOLUME_BACKING_FILE
Anthony Youngacff87a2011-10-20 10:12:58 -07001703 DEV=`sudo losetup -f --show $VOLUME_BACKING_FILE`
Dean Troyer2229a6e2011-12-01 17:02:07 -06001704 # Only create if the loopback device doesn't contain $VOLUME_GROUP
1705 if ! sudo vgs $VOLUME_GROUP; then sudo vgcreate $VOLUME_GROUP $DEV; fi
1706 fi
1707
1708 if sudo vgs $VOLUME_GROUP; then
Anthony Young63252162012-02-08 00:54:20 +00001709 # Remove nova iscsi targets
1710 sudo tgtadm --op show --mode target | grep $VOLUME_NAME_PREFIX | grep Target | cut -f3 -d ' ' | sudo xargs -n1 tgt-admin --delete || true
Dean Troyer2229a6e2011-12-01 17:02:07 -06001711 # Clean out existing volumes
1712 for lv in `sudo lvs --noheadings -o lv_name $VOLUME_GROUP`; do
1713 # VOLUME_NAME_PREFIX prefixes the LVs we want
1714 if [[ "${lv#$VOLUME_NAME_PREFIX}" != "$lv" ]]; then
Dean Troyer2229a6e2011-12-01 17:02:07 -06001715 sudo lvremove -f $VOLUME_GROUP/$lv
1716 fi
1717 done
Anthony Youngacff87a2011-10-20 10:12:58 -07001718 fi
1719
Dean Troyer5218d452012-02-04 02:13:23 -06001720 if [[ "$os_PACKAGE" = "deb" ]]; then
1721 # tgt in oneiric doesn't restart properly if tgtd isn't running
1722 # do it in two steps
1723 sudo stop tgt || true
1724 sudo start tgt
1725 else
1726 # bypass redirection to systemctl during restart
1727 sudo /sbin/service --skip-redirect tgtd restart
1728 fi
Anthony Youngacff87a2011-10-20 10:12:58 -07001729fi
1730
Dean Troyerced65172012-03-02 16:36:16 -06001731NOVA_CONF=nova.conf
1732function add_nova_opt {
1733 echo "$1" >> $NOVA_CONF_DIR/$NOVA_CONF
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001734}
1735
Vishvananda Ishaya7a103dd2012-02-23 23:35:43 +00001736# remove legacy nova.conf
1737rm -f $NOVA_DIR/bin/nova.conf
1738
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001739# (re)create nova.conf
Dean Troyerced65172012-03-02 16:36:16 -06001740rm -f $NOVA_CONF_DIR/$NOVA_CONF
1741add_nova_opt "[DEFAULT]"
1742add_nova_opt "verbose=True"
Vishvananda Ishaya50aef3b2012-03-05 23:12:04 -08001743add_nova_opt "auth_strategy=keystone"
Dean Troyerced65172012-03-02 16:36:16 -06001744add_nova_opt "allow_resize_to_same_host=True"
Dean Troyer5218d452012-02-04 02:13:23 -06001745add_nova_opt "root_helper=sudo $NOVA_ROOTWRAP"
Vishvananda Ishaya51aa4012012-03-06 12:45:19 -08001746add_nova_opt "compute_scheduler_driver=$SCHEDULER"
Dean Troyerced65172012-03-02 16:36:16 -06001747add_nova_opt "dhcpbridge_flagfile=$NOVA_CONF_DIR/$NOVA_CONF"
1748add_nova_opt "fixed_range=$FIXED_RANGE"
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00001749add_nova_opt "s3_host=$SERVICE_HOST"
1750add_nova_opt "s3_port=$S3_SERVICE_PORT"
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001751if is_service_enabled quantum; then
Dean Troyerced65172012-03-02 16:36:16 -06001752 add_nova_opt "network_manager=nova.network.quantum.manager.QuantumManager"
1753 add_nova_opt "quantum_connection_host=$Q_HOST"
1754 add_nova_opt "quantum_connection_port=$Q_PORT"
Jason Kölker64a90662012-01-23 11:17:27 -06001755
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001756 if is_service_enabled melange; then
Dean Troyerced65172012-03-02 16:36:16 -06001757 add_nova_opt "quantum_ipam_lib=nova.network.quantum.melange_ipam_lib"
1758 add_nova_opt "use_melange_mac_generation=True"
1759 add_nova_opt "melange_host=$M_HOST"
1760 add_nova_opt "melange_port=$M_PORT"
Jason Kölker64a90662012-01-23 11:17:27 -06001761 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001762
1763 if [[ "$Q_PLUGIN" = "openvswitch" ]]; then
1764 NOVA_VIF_DRIVER="nova.virt.libvirt.vif.LibvirtOpenVswitchDriver"
1765 LINUXNET_VIF_DRIVER="nova.network.linux_net.LinuxOVSInterfaceDriver"
1766 elif [[ "$Q_PLUGIN" = "linuxbridge" ]]; then
1767 NOVA_VIF_DRIVER="nova.virt.libvirt.vif.QuantumLinuxBridgeVIFDriver"
1768 LINUXNET_VIF_DRIVER="nova.network.linux_net.QuantumLinuxBridgeInterfaceDriver"
Brad Hall1bfa3d52011-10-27 18:18:20 -07001769 fi
Dan Wendlandt0007f3a2012-05-18 13:37:47 -07001770 add_nova_opt "libvirt_vif_type=ethernet"
1771 add_nova_opt "libvirt_vif_driver=$NOVA_VIF_DRIVER"
1772 add_nova_opt "linuxnet_interface_driver=$LINUXNET_VIF_DRIVER"
1773 add_nova_opt "quantum_use_dhcp=True"
Brad Hall1bfa3d52011-10-27 18:18:20 -07001774else
Dean Troyerced65172012-03-02 16:36:16 -06001775 add_nova_opt "network_manager=nova.network.manager.$NET_MAN"
Brad Hall1bfa3d52011-10-27 18:18:20 -07001776fi
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001777if is_service_enabled n-vol; then
Dean Troyerced65172012-03-02 16:36:16 -06001778 add_nova_opt "volume_group=$VOLUME_GROUP"
Vishvananda Ishaya0ac5a8a2012-05-02 00:27:27 +00001779 add_nova_opt "volume_name_template=${VOLUME_NAME_PREFIX}%s"
Vishvananda Ishaya524aa542012-01-14 01:08:34 +00001780 # oneiric no longer supports ietadm
Dean Troyerced65172012-03-02 16:36:16 -06001781 add_nova_opt "iscsi_helper=tgtadm"
Jesse Andrewsd02b7b72011-11-14 08:59:05 -08001782fi
Dean Troyerced65172012-03-02 16:36:16 -06001783add_nova_opt "osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions"
1784add_nova_opt "my_ip=$HOST_IP"
1785add_nova_opt "public_interface=$PUBLIC_INTERFACE"
1786add_nova_opt "vlan_interface=$VLAN_INTERFACE"
1787add_nova_opt "flat_network_bridge=$FLAT_NETWORK_BRIDGE"
John Garbutt8e2cffd2012-03-02 16:22:07 +00001788if [ -n "$FLAT_INTERFACE" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001789 add_nova_opt "flat_interface=$FLAT_INTERFACE"
John Garbutt8e2cffd2012-03-02 16:22:07 +00001790fi
Gabriel Hurley71f23eb2012-02-15 17:39:05 -08001791add_nova_opt "sql_connection=$BASE_SQL_CONN/nova?charset=utf8"
Dean Troyerced65172012-03-02 16:36:16 -06001792add_nova_opt "libvirt_type=$LIBVIRT_TYPE"
1793add_nova_opt "instance_name_template=${INSTANCE_NAME_PREFIX}%08x"
Anthony Young2fcb6662012-02-03 20:17:22 +00001794# All nova-compute workers need to know the vnc configuration options
1795# These settings don't hurt anything if n-xvnc and n-novnc are disabled
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001796if is_service_enabled n-cpu; then
Anthony Youngce116912012-01-17 15:46:53 -08001797 NOVNCPROXY_URL=${NOVNCPROXY_URL:-"http://$SERVICE_HOST:6080/vnc_auto.html"}
Dean Troyerced65172012-03-02 16:36:16 -06001798 add_nova_opt "novncproxy_base_url=$NOVNCPROXY_URL"
Anthony Youngce116912012-01-17 15:46:53 -08001799 XVPVNCPROXY_URL=${XVPVNCPROXY_URL:-"http://$SERVICE_HOST:6081/console"}
Dean Troyerced65172012-03-02 16:36:16 -06001800 add_nova_opt "xvpvncproxy_base_url=$XVPVNCPROXY_URL"
Anthony Youngce116912012-01-17 15:46:53 -08001801fi
1802if [ "$VIRT_DRIVER" = 'xenserver' ]; then
1803 VNCSERVER_PROXYCLIENT_ADDRESS=${VNCSERVER_PROXYCLIENT_ADDRESS=169.254.0.1}
1804else
1805 VNCSERVER_PROXYCLIENT_ADDRESS=${VNCSERVER_PROXYCLIENT_ADDRESS=127.0.0.1}
1806fi
Anthony Young50fc5c62012-01-26 09:38:33 -08001807# Address on which instance vncservers will listen on compute hosts.
1808# For multi-host, this should be the management ip of the compute host.
1809VNCSERVER_LISTEN=${VNCSERVER_LISTEN=127.0.0.1}
Dean Troyerced65172012-03-02 16:36:16 -06001810add_nova_opt "vncserver_listen=$VNCSERVER_LISTEN"
1811add_nova_opt "vncserver_proxyclient_address=$VNCSERVER_PROXYCLIENT_ADDRESS"
1812add_nova_opt "api_paste_config=$NOVA_CONF_DIR/api-paste.ini"
1813add_nova_opt "image_service=nova.image.glance.GlanceImageService"
1814add_nova_opt "ec2_dmz_host=$EC2_DMZ_HOST"
John Garbutt22ddb272012-05-24 15:56:06 +01001815if is_service_enabled qpid ; then
1816 add_nova_opt "rpc_backend=nova.rpc.impl_qpid"
1817elif [ -n "$RABBIT_HOST" ] && [ -n "$RABBIT_PASSWORD" ]; then
Russell Bryant4a221452012-03-13 13:44:12 -04001818 add_nova_opt "rabbit_host=$RABBIT_HOST"
1819 add_nova_opt "rabbit_password=$RABBIT_PASSWORD"
Russell Bryant4a221452012-03-13 13:44:12 -04001820fi
Dean Troyerced65172012-03-02 16:36:16 -06001821add_nova_opt "glance_api_servers=$GLANCE_HOSTPORT"
1822add_nova_opt "force_dhcp_release=True"
Vishvananda Ishaya3e2b1742011-10-28 12:20:07 -07001823if [ -n "$INSTANCES_PATH" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001824 add_nova_opt "instances_path=$INSTANCES_PATH"
Vishvananda Ishayae72bdb02011-10-28 13:34:38 -07001825fi
Vishvananda Ishaya5f039322011-11-05 16:12:20 -07001826if [ "$MULTI_HOST" != "False" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001827 add_nova_opt "multi_host=True"
1828 add_nova_opt "send_arp_for_ha=True"
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001829fi
James E. Blair5855a642011-10-26 15:44:27 -04001830if [ "$SYSLOG" != "False" ]; then
Dean Troyerced65172012-03-02 16:36:16 -06001831 add_nova_opt "use_syslog=True"
James E. Blair5855a642011-10-26 15:44:27 -04001832fi
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001833if [ "$API_RATE_LIMIT" != "True" ]; then
1834 add_nova_opt "api_rate_limit=False"
1835fi
Vishvananda Ishaya6f13ba32012-06-01 23:17:38 +00001836if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
1837 # Add color to logging output
1838 add_nova_opt "logging_context_format_string=%(asctime)s %(color)s%(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s%(color)s] %(instance)s%(color)s%(message)s"
1839 add_nova_opt "logging_default_format_string=%(asctime)s %(color)s%(levelname)s %(name)s [-%(color)s] %(instance)s%(color)s%(message)s"
1840 add_nova_opt "logging_debug_format_suffix=from (pid=%(process)d) %(funcName)s %(pathname)s:%(lineno)d"
1841 add_nova_opt "logging_exception_prefix=%(color)s%(asctime)s TRACE %(name)s %(instance)s"
1842else
1843 # Show user_name and project_name instead of user_id and project_id
1844 add_nova_opt "logging_context_format_string=%(asctime)s %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s"
1845fi
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001846
Dean Troyer67787e62012-05-02 11:48:15 -05001847# If cinder is enabled, use the cinder volume driver
1848if is_service_enabled cinder; then
1849 add_nova_opt "volume_api_class=nova.volume.cinder.API"
1850fi
Jesse Andrewsd1879c52011-09-16 16:28:13 -07001851
Dean Troyerced65172012-03-02 16:36:16 -06001852# Provide some transition from EXTRA_FLAGS to EXTRA_OPTS
1853if [[ -z "$EXTRA_OPTS" && -n "$EXTRA_FLAGS" ]]; then
Vishvananda Ishayaed111952012-03-20 15:08:15 -07001854 EXTRA_OPTS=$EXTRA_FLAGS
Dean Troyerced65172012-03-02 16:36:16 -06001855fi
1856
1857# You can define extra nova conf flags by defining the array EXTRA_OPTS,
1858# For Example: EXTRA_OPTS=(foo=true bar=2)
1859for I in "${EXTRA_OPTS[@]}"; do
1860 # Attempt to convert flags to options
John Garbutt030fb232012-04-27 18:28:28 +01001861 add_nova_opt ${I//--}
Jesse Andrews38df1222011-11-20 09:55:44 -08001862done
1863
Dean Troyerdf0972c2012-03-07 17:31:03 -06001864
Anthony Youngb62b4ca2011-10-26 22:29:08 -07001865# XenServer
1866# ---------
1867
1868if [ "$VIRT_DRIVER" = 'xenserver' ]; then
1869 read_password XENAPI_PASSWORD "ENTER A PASSWORD TO USE FOR XEN."
Dean Troyerced65172012-03-02 16:36:16 -06001870 add_nova_opt "connection_type=xenapi"
John Garbutt92e85602012-03-02 16:08:37 +00001871 XENAPI_CONNECTION_URL=${XENAPI_CONNECTION_URL:-"http://169.254.0.1"}
John Garbutt030fb232012-04-27 18:28:28 +01001872 XENAPI_USER=${XENAPI_USER:-"root"}
Dean Troyerced65172012-03-02 16:36:16 -06001873 add_nova_opt "xenapi_connection_url=$XENAPI_CONNECTION_URL"
John Garbutt030fb232012-04-27 18:28:28 +01001874 add_nova_opt "xenapi_connection_username=$XENAPI_USER"
Dean Troyerced65172012-03-02 16:36:16 -06001875 add_nova_opt "xenapi_connection_password=$XENAPI_PASSWORD"
1876 add_nova_opt "flat_injected=False"
Anthony Youngce116912012-01-17 15:46:53 -08001877 # Need to avoid crash due to new firewall support
1878 XEN_FIREWALL_DRIVER=${XEN_FIREWALL_DRIVER:-"nova.virt.firewall.IptablesFirewallDriver"}
Dean Troyerced65172012-03-02 16:36:16 -06001879 add_nova_opt "firewall_driver=$XEN_FIREWALL_DRIVER"
Anthony Youngb62b4ca2011-10-26 22:29:08 -07001880else
Dean Troyerced65172012-03-02 16:36:16 -06001881 add_nova_opt "connection_type=libvirt"
Armando Migliaccio34f62492012-01-31 14:33:19 +00001882 LIBVIRT_FIREWALL_DRIVER=${LIBVIRT_FIREWALL_DRIVER:-"nova.virt.libvirt.firewall.IptablesFirewallDriver"}
Dean Troyerced65172012-03-02 16:36:16 -06001883 add_nova_opt "firewall_driver=$LIBVIRT_FIREWALL_DRIVER"
Anthony Youngb62b4ca2011-10-26 22:29:08 -07001884fi
1885
Dean Troyerdf0972c2012-03-07 17:31:03 -06001886
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001887# Nova Database
1888# ~~~~~~~~~~~~~
1889
1890# All nova components talk to a central database. We will need to do this step
1891# only once for an entire cluster.
1892
Chmouel Boudjnahc9e01882012-03-15 17:21:24 +00001893if is_service_enabled mysql && is_service_enabled nova; then
Anthony Younga0748002011-09-16 21:37:36 -07001894 # (re)create nova database
Anthony Young7a549f42011-10-12 07:13:13 +00001895 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS nova;'
1896 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE nova;'
Jesse Andrewscbe98d52011-10-02 17:47:32 -04001897
1898 # (re)create nova database
Anthony Younga0748002011-09-16 21:37:36 -07001899 $NOVA_DIR/bin/nova-manage db sync
Anthony Younga0748002011-09-16 21:37:36 -07001900fi
1901
1902
Jesse Andrewsd74257d2011-09-13 01:24:50 -07001903# Launch Services
1904# ===============
Jesse Andrews30f68e92011-09-13 00:59:54 -07001905
Jesse Andrews1c1d1502011-09-12 19:29:56 -07001906# nova api crashes if we start it with a regular screen command,
1907# so send the start command by forcing text into the window.
Jesse Andrewsdfcd2002011-09-13 13:17:22 -07001908# Only run the services specified in ``ENABLED_SERVICES``
1909
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01001910# launch the glance registry service
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001911if is_service_enabled g-reg; then
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001912 screen_it g-reg "cd $GLANCE_DIR; bin/glance-registry --config-file=$GLANCE_CONF_DIR/glance-registry.conf"
Anthony Youngd000b222011-09-19 14:46:53 -07001913fi
1914
Jesse Andrews644b8e82011-10-02 17:50:41 -04001915# launch the glance api and wait for it to answer before continuing
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001916if is_service_enabled g-api; then
Yong Sheng Gong0ddcae62012-03-20 21:17:39 +08001917 screen_it g-api "cd $GLANCE_DIR; bin/glance-api --config-file=$GLANCE_CONF_DIR/glance-api.conf"
James E. Blair92e81992011-10-11 09:26:29 -05001918 echo "Waiting for g-api ($GLANCE_HOSTPORT) to start..."
Dean Troyerc727aa82012-01-13 12:13:59 -06001919 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -q -O- http://$GLANCE_HOSTPORT; do sleep 1; done"; then
James E. Blair92e81992011-10-11 09:26:29 -05001920 echo "g-api did not start"
1921 exit 1
1922 fi
Anthony Youngd000b222011-09-19 14:46:53 -07001923fi
1924
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00001925if is_service_enabled key; then
termieeacc5952012-01-11 01:59:00 +00001926 # (re)create keystone database
1927 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS keystone;'
Gabriel Hurley71f23eb2012-02-15 17:39:05 -08001928 mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE keystone CHARACTER SET utf8;'
termieeacc5952012-01-11 01:59:00 +00001929
Dean Troyer09e636e2012-03-19 16:31:12 -05001930 KEYSTONE_CONF_DIR=${KEYSTONE_CONF_DIR:-/etc/keystone}
1931 KEYSTONE_CONF=$KEYSTONE_CONF_DIR/keystone.conf
1932 KEYSTONE_CATALOG=$KEYSTONE_CONF_DIR/default_catalog.templates
termieeacc5952012-01-11 01:59:00 +00001933
Dean Troyer09e636e2012-03-19 16:31:12 -05001934 if [[ ! -d $KEYSTONE_CONF_DIR ]]; then
1935 sudo mkdir -p $KEYSTONE_CONF_DIR
1936 sudo chown `whoami` $KEYSTONE_CONF_DIR
1937 fi
1938
1939 if [[ "$KEYSTONE_CONF_DIR" != "$KEYSTONE_DIR/etc" ]]; then
Dean Troyer09e636e2012-03-19 16:31:12 -05001940 cp -p $KEYSTONE_DIR/etc/keystone.conf.sample $KEYSTONE_CONF
1941 cp -p $KEYSTONE_DIR/etc/policy.json $KEYSTONE_CONF_DIR
1942 fi
1943 cp -p $FILES/default_catalog.templates $KEYSTONE_CATALOG
1944
1945 # Rewrite stock keystone.conf:
1946 iniset $KEYSTONE_CONF DEFAULT admin_token "$SERVICE_TOKEN"
1947 iniset $KEYSTONE_CONF sql connection "$BASE_SQL_CONN/keystone?charset=utf8"
Dean Troyer09e636e2012-03-19 16:31:12 -05001948 iniset $KEYSTONE_CONF ec2 driver "keystone.contrib.ec2.backends.sql.Ec2"
1949 # Configure keystone.conf to use templates
1950 iniset $KEYSTONE_CONF catalog driver "keystone.catalog.backends.templated.TemplatedCatalog"
1951 iniset $KEYSTONE_CONF catalog template_file "$KEYSTONE_CATALOG"
1952 sed -e "
1953 /^pipeline.*ec2_extension crud_/s|ec2_extension crud_extension|ec2_extension s3_extension crud_extension|;
1954 " -i $KEYSTONE_CONF
1955 # Append the S3 bits
1956 iniset $KEYSTONE_CONF filter:s3_extension paste.filter_factory "keystone.contrib.s3:S3Extension.factory"
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001957
1958 # Add swift endpoints to service catalog if swift is enabled
1959 if is_service_enabled swift; then
Gabriel Hurley155266b2012-02-23 16:54:01 -08001960 echo "catalog.RegionOne.object_store.publicURL = http://%SERVICE_HOST%:8080/v1/AUTH_\$(tenant_id)s" >> $KEYSTONE_CATALOG
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001961 echo "catalog.RegionOne.object_store.adminURL = http://%SERVICE_HOST%:8080/" >> $KEYSTONE_CATALOG
Gabriel Hurley155266b2012-02-23 16:54:01 -08001962 echo "catalog.RegionOne.object_store.internalURL = http://%SERVICE_HOST%:8080/v1/AUTH_\$(tenant_id)s" >> $KEYSTONE_CATALOG
Gabriel Hurley09407d92012-03-18 16:26:22 -07001963 echo "catalog.RegionOne.object_store.name = Swift Service" >> $KEYSTONE_CATALOG
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001964 fi
1965
1966 # Add quantum endpoints to service catalog if quantum is enabled
1967 if is_service_enabled quantum; then
1968 echo "catalog.RegionOne.network.publicURL = http://%SERVICE_HOST%:9696/" >> $KEYSTONE_CATALOG
1969 echo "catalog.RegionOne.network.adminURL = http://%SERVICE_HOST%:9696/" >> $KEYSTONE_CATALOG
1970 echo "catalog.RegionOne.network.internalURL = http://%SERVICE_HOST%:9696/" >> $KEYSTONE_CATALOG
Gabriel Hurley09407d92012-03-18 16:26:22 -07001971 echo "catalog.RegionOne.network.name = Quantum Service" >> $KEYSTONE_CATALOG
Gabriel Hurley7bd30872012-02-23 13:20:03 -08001972 fi
1973
Dean Troyer09e636e2012-03-19 16:31:12 -05001974 sudo sed -e "
1975 s,%SERVICE_HOST%,$SERVICE_HOST,g;
1976 s,%S3_SERVICE_PORT%,$S3_SERVICE_PORT,g;
1977 " -i $KEYSTONE_CATALOG
termieeacc5952012-01-11 01:59:00 +00001978
Dean Troyer09e636e2012-03-19 16:31:12 -05001979 # Set up logging
1980 LOGGING_ROOT="devel"
termieeacc5952012-01-11 01:59:00 +00001981 if [ "$SYSLOG" != "False" ]; then
Dean Troyer09e636e2012-03-19 16:31:12 -05001982 LOGGING_ROOT="$LOGGING_ROOT,production"
termieeacc5952012-01-11 01:59:00 +00001983 fi
Dean Troyer09e636e2012-03-19 16:31:12 -05001984 KEYSTONE_LOG_CONFIG="--log-config $KEYSTONE_CONF_DIR/logging.conf"
1985 cp $KEYSTONE_DIR/etc/logging.conf.sample $KEYSTONE_CONF_DIR/logging.conf
1986 iniset $KEYSTONE_CONF_DIR/logging.conf logger_root level "DEBUG"
1987 iniset $KEYSTONE_CONF_DIR/logging.conf logger_root handlers "devel,production"
termieeacc5952012-01-11 01:59:00 +00001988
Dean Troyer09e636e2012-03-19 16:31:12 -05001989 # initialize keystone database
1990 $KEYSTONE_DIR/bin/keystone-manage db_sync
1991
1992 # launch keystone and wait for it to answer before continuing
termie8a41c9d2012-02-02 17:31:19 -08001993 screen_it key "cd $KEYSTONE_DIR && $KEYSTONE_DIR/bin/keystone-all --config-file $KEYSTONE_CONF $KEYSTONE_LOG_CONFIG -d --debug"
James E. Blair92e81992011-10-11 09:26:29 -05001994 echo "Waiting for keystone to start..."
Hua ZHANG520a9ca2012-05-03 18:17:18 +08001995 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -O- $KEYSTONE_AUTH_PROTOCOL://$SERVICE_HOST:$KEYSTONE_API_PORT/v2.0/ 2>&1 | grep -q '200 OK'; do sleep 1; done"; then
James E. Blair92e81992011-10-11 09:26:29 -05001996 echo "keystone did not start"
1997 exit 1
1998 fi
termieeacc5952012-01-11 01:59:00 +00001999
Vishvananda Ishayad1f52432012-02-09 03:50:57 +00002000 # keystone_data.sh creates services, admin and demo users, and roles.
2001 SERVICE_ENDPOINT=$KEYSTONE_AUTH_PROTOCOL://$KEYSTONE_AUTH_HOST:$KEYSTONE_AUTH_PORT/v2.0
Dean Troyerb3288382012-02-28 16:41:10 -06002002 ADMIN_PASSWORD=$ADMIN_PASSWORD SERVICE_TENANT_NAME=$SERVICE_TENANT_NAME SERVICE_PASSWORD=$SERVICE_PASSWORD SERVICE_TOKEN=$SERVICE_TOKEN SERVICE_ENDPOINT=$SERVICE_ENDPOINT DEVSTACK_DIR=$TOP_DIR ENABLED_SERVICES=$ENABLED_SERVICES \
2003 bash $FILES/keystone_data.sh
Chmouel Boudjnah77b0e1d2012-02-29 16:55:43 +00002004
2005 # create an access key and secret key for nova ec2 register image
2006 if is_service_enabled swift && is_service_enabled nova; then
2007 CREDS=$(keystone --os_auth_url=$SERVICE_ENDPOINT --os_username=nova --os_password=$SERVICE_PASSWORD --os_tenant_name=$SERVICE_TENANT_NAME ec2-credentials-create)
2008 ACCESS_KEY=$(echo "$CREDS" | awk '/ access / { print $4 }')
2009 SECRET_KEY=$(echo "$CREDS" | awk '/ secret / { print $4 }')
2010 add_nova_opt "s3_access_key=$ACCESS_KEY"
2011 add_nova_opt "s3_secret_key=$SECRET_KEY"
2012 add_nova_opt "s3_affix_tenant=True"
2013 fi
Anthony Youngd000b222011-09-19 14:46:53 -07002014fi
2015
Jesse Andrews644b8e82011-10-02 17:50:41 -04002016# launch the nova-api and wait for it to answer before continuing
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002017if is_service_enabled n-api; then
Dean Troyer67787e62012-05-02 11:48:15 -05002018 add_nova_opt "enabled_apis=$NOVA_ENABLED_APIS"
Anthony Young9bf3d762011-09-20 09:51:16 -07002019 screen_it n-api "cd $NOVA_DIR && $NOVA_DIR/bin/nova-api"
James E. Blair92e81992011-10-11 09:26:29 -05002020 echo "Waiting for nova-api to start..."
Dean Troyerc727aa82012-01-13 12:13:59 -06002021 if ! timeout $SERVICE_TIMEOUT sh -c "while ! http_proxy= wget -q -O- http://127.0.0.1:8774; do sleep 1; done"; then
James E. Blair92e81992011-10-11 09:26:29 -05002022 echo "nova-api did not start"
2023 exit 1
2024 fi
Anthony Youngd000b222011-09-19 14:46:53 -07002025fi
Brad Hall1bfa3d52011-10-27 18:18:20 -07002026
Brad Halld9e544e2011-10-28 08:28:26 -07002027# If we're using Quantum (i.e. q-svc is enabled), network creation has to
2028# happen after we've started the Quantum service.
Ken Pepple389f4ef2012-03-08 19:37:03 -08002029if is_service_enabled mysql && is_service_enabled nova; then
Brad Hall1bfa3d52011-10-27 18:18:20 -07002030 # create a small network
Justin Santa Barbaracc86a9e2012-02-06 12:15:59 -08002031 $NOVA_DIR/bin/nova-manage network create private $FIXED_RANGE 1 $FIXED_NETWORK_SIZE $NETWORK_CREATE_ARGS
Brad Hall1bfa3d52011-10-27 18:18:20 -07002032
Tomoe Sugihara1c77d702012-03-12 21:49:54 +09002033 # create some floating ips
2034 $NOVA_DIR/bin/nova-manage floating create $FLOATING_RANGE
Dean Troyer696ad332012-01-10 15:34:34 -06002035
Tomoe Sugihara1c77d702012-03-12 21:49:54 +09002036 # create a second pool
2037 $NOVA_DIR/bin/nova-manage floating create --ip_range=$TEST_FLOATING_RANGE --pool=$TEST_FLOATING_POOL
Brad Hall1bfa3d52011-10-27 18:18:20 -07002038fi
2039
root40a37002011-09-20 18:06:14 +00002040# Launching nova-compute should be as simple as running ``nova-compute`` but
2041# have to do a little more than that in our script. Since we add the group
Jesse Andrews1f717602011-09-16 15:18:53 -07002042# ``libvirtd`` to our user in this script, when nova-compute is run it is
root40a37002011-09-20 18:06:14 +00002043# within the context of our original shell (so our groups won't be updated).
Scott Moser8ab1ade2011-10-07 21:03:16 -04002044# Use 'sg' to execute nova-compute as a member of the libvirtd group.
Ken Pepple389f4ef2012-03-08 19:37:03 -08002045# We don't check for is_service_enable as screen_it does it for us
Scott Moser8ab1ade2011-10-07 21:03:16 -04002046screen_it n-cpu "cd $NOVA_DIR && sg libvirtd $NOVA_DIR/bin/nova-compute"
Vishvananda Ishaya75bbd752012-01-19 23:28:46 +00002047screen_it n-crt "cd $NOVA_DIR && $NOVA_DIR/bin/nova-cert"
Anthony Youngacff87a2011-10-20 10:12:58 -07002048screen_it n-vol "cd $NOVA_DIR && $NOVA_DIR/bin/nova-volume"
Anthony Young9bf3d762011-09-20 09:51:16 -07002049screen_it n-net "cd $NOVA_DIR && $NOVA_DIR/bin/nova-network"
2050screen_it n-sch "cd $NOVA_DIR && $NOVA_DIR/bin/nova-scheduler"
Ken Pepple389f4ef2012-03-08 19:37:03 -08002051screen_it n-novnc "cd $NOVNC_DIR && ./utils/nova-novncproxy --config-file $NOVA_CONF_DIR/$NOVA_CONF --web ."
2052screen_it n-xvnc "cd $NOVA_DIR && ./bin/nova-xvpvncproxy --config-file $NOVA_CONF_DIR/$NOVA_CONF"
2053screen_it n-cauth "cd $NOVA_DIR && ./bin/nova-consoleauth"
Dean Troyer67787e62012-05-02 11:48:15 -05002054if is_service_enabled cinder; then
2055 start_cinder
2056fi
Dean Troyer5218d452012-02-04 02:13:23 -06002057screen_it horizon "cd $HORIZON_DIR && sudo tail -f /var/log/$APACHE_NAME/horizon_error.log"
Dean Troyer1e51c112012-03-16 10:42:00 -05002058screen_it swift "cd $SWIFT_DIR && $SWIFT_DIR/bin/swift-proxy-server ${SWIFT_CONFIG_DIR}/proxy-server.conf -v"
Jesse Andrews75a37652011-09-12 17:09:08 -07002059
Chmouel Boudjnahe347b992012-03-16 17:38:49 +00002060# Starting the nova-objectstore only if swift service is not enabled.
2061# Swift will act as s3 objectstore.
2062is_service_enabled swift || \
2063 screen_it n-obj "cd $NOVA_DIR && $NOVA_DIR/bin/nova-objectstore"
Dean Troyerdf0972c2012-03-07 17:31:03 -06002064
Jesse Andrewsd74257d2011-09-13 01:24:50 -07002065# Install Images
2066# ==============
Jesse Andrewse49b8bd2011-09-12 18:08:04 -07002067
Anthony Young0ab1d462011-10-13 23:03:23 -07002068# Upload an image to glance.
Jesse Andrews5372f432011-10-03 01:08:24 -04002069#
Anthony Young0ab1d462011-10-13 23:03:23 -07002070# The default image is a small ***TTY*** testing image, which lets you login
2071# the username/password of root/password.
2072#
Dean Troyerdf0972c2012-03-07 17:31:03 -06002073# TTY also uses ``cloud-init``, supporting login via keypair and sending scripts as
Anthony Young0ab1d462011-10-13 23:03:23 -07002074# userdata. See https://help.ubuntu.com/community/CloudInit for more on cloud-init
2075#
Chmouel Boudjnah3d9c5d52011-11-02 17:57:11 +01002076# Override ``IMAGE_URLS`` with a comma-separated list of uec images.
Jesse Andrewsaab7eae2011-10-19 10:30:19 -07002077#
2078# * **natty**: http://uec-images.ubuntu.com/natty/current/natty-server-cloudimg-amd64.tar.gz
2079# * **oneiric**: http://uec-images.ubuntu.com/oneiric/current/oneiric-server-cloudimg-amd64.tar.gz
Jesse Andrews08e8b742011-10-02 23:42:56 -04002080
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002081if is_service_enabled g-reg; then
Anthony Young7a8989e2011-10-14 10:20:30 -07002082 # Create a directory for the downloaded image tarballs.
Jesse Andrews08e8b742011-10-02 23:42:56 -04002083 mkdir -p $FILES/images
2084
termie747ee332012-01-11 22:31:59 +00002085 ADMIN_USER=admin
2086 ADMIN_TENANT=admin
Dean Troyerbbafb1b2012-06-11 16:51:39 -05002087 TOKEN=$(keystone --os_tenant_name $ADMIN_TENANT --os_username $ADMIN_USER --os_password $ADMIN_PASSWORD --os_auth_url http://$HOST_IP:5000/v2.0 token-get | grep ' id ' | get_field 2)
termie747ee332012-01-11 22:31:59 +00002088
Anthony Youngb62b4ca2011-10-26 22:29:08 -07002089 # Option to upload legacy ami-tty, which works with xenserver
Dean Troyer314da5a2012-03-28 19:15:48 -05002090 if [[ -n "$UPLOAD_LEGACY_TTY" ]]; then
2091 IMAGE_URLS="${IMAGE_URLS:+${IMAGE_URLS},}http://images.ansolabs.com/tty.tgz"
Anthony Youngb62b4ca2011-10-26 22:29:08 -07002092 fi
2093
Anthony Young120f4862011-10-14 09:31:09 -07002094 for image_url in ${IMAGE_URLS//,/ }; do
2095 # Downloads the image (uec ami+aki style), then extracts it.
Jesse Andrewsac1831e2011-10-24 21:37:00 -07002096 IMAGE_FNAME=`basename "$image_url"`
Dean Troyerbbafb1b2012-06-11 16:51:39 -05002097 if [[ ! -f $FILES/$IMAGE_FNAME || "$(stat -c "%s" $FILES/$IMAGE_FNAME)" = "0" ]]; then
Anthony Young120f4862011-10-14 09:31:09 -07002098 wget -c $image_url -O $FILES/$IMAGE_FNAME
2099 fi
Jesse Andrewse49b8bd2011-09-12 18:08:04 -07002100
Scott Moser4f6d7b62011-12-08 16:22:51 -05002101 KERNEL=""
2102 RAMDISK=""
Dean Troyerb315ddf2012-03-29 16:19:42 -05002103 DISK_FORMAT=""
2104 CONTAINER_FORMAT=""
Scott Moser4f6d7b62011-12-08 16:22:51 -05002105 case "$IMAGE_FNAME" in
2106 *.tar.gz|*.tgz)
2107 # Extract ami and aki files
2108 [ "${IMAGE_FNAME%.tar.gz}" != "$IMAGE_FNAME" ] &&
2109 IMAGE_NAME="${IMAGE_FNAME%.tar.gz}" ||
2110 IMAGE_NAME="${IMAGE_FNAME%.tgz}"
2111 xdir="$FILES/images/$IMAGE_NAME"
2112 rm -Rf "$xdir";
2113 mkdir "$xdir"
2114 tar -zxf $FILES/$IMAGE_FNAME -C "$xdir"
Dean Troyer314da5a2012-03-28 19:15:48 -05002115 KERNEL=$(for f in "$xdir/"*-vmlinuz* "$xdir/"aki-*/image; do
Scott Moser4f6d7b62011-12-08 16:22:51 -05002116 [ -f "$f" ] && echo "$f" && break; done; true)
Dean Troyer314da5a2012-03-28 19:15:48 -05002117 RAMDISK=$(for f in "$xdir/"*-initrd* "$xdir/"ari-*/image; do
Scott Moser4f6d7b62011-12-08 16:22:51 -05002118 [ -f "$f" ] && echo "$f" && break; done; true)
Dean Troyer314da5a2012-03-28 19:15:48 -05002119 IMAGE=$(for f in "$xdir/"*.img "$xdir/"ami-*/image; do
Scott Moser4f6d7b62011-12-08 16:22:51 -05002120 [ -f "$f" ] && echo "$f" && break; done; true)
Dean Troyer314da5a2012-03-28 19:15:48 -05002121 if [[ -z "$IMAGE_NAME" ]]; then
2122 IMAGE_NAME=$(basename "$IMAGE" ".img")
2123 fi
Scott Moser4f6d7b62011-12-08 16:22:51 -05002124 ;;
2125 *.img)
2126 IMAGE="$FILES/$IMAGE_FNAME";
2127 IMAGE_NAME=$(basename "$IMAGE" ".img")
Russell Bryant20121bd2012-03-28 16:22:52 -04002128 DISK_FORMAT=raw
2129 CONTAINER_FORMAT=bare
Scott Moser4f6d7b62011-12-08 16:22:51 -05002130 ;;
2131 *.img.gz)
2132 IMAGE="$FILES/${IMAGE_FNAME}"
2133 IMAGE_NAME=$(basename "$IMAGE" ".img.gz")
Russell Bryant20121bd2012-03-28 16:22:52 -04002134 DISK_FORMAT=raw
2135 CONTAINER_FORMAT=bare
2136 ;;
2137 *.qcow2)
2138 IMAGE="$FILES/${IMAGE_FNAME}"
2139 IMAGE_NAME=$(basename "$IMAGE" ".qcow2")
2140 DISK_FORMAT=qcow2
2141 CONTAINER_FORMAT=bare
Scott Moser4f6d7b62011-12-08 16:22:51 -05002142 ;;
2143 *) echo "Do not know what to do with $IMAGE_FNAME"; false;;
2144 esac
Anthony Young70dc5e02011-09-15 16:52:43 -07002145
Russell Bryant20121bd2012-03-28 16:22:52 -04002146 if [ "$CONTAINER_FORMAT" = "bare" ]; then
Dean Troyer45495252012-04-13 13:16:38 -05002147 glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "$IMAGE_NAME" --public --container-format=$CONTAINER_FORMAT --disk-format $DISK_FORMAT < <(zcat --force "${IMAGE}")
Russell Bryant20121bd2012-03-28 16:22:52 -04002148 else
2149 # Use glance client to add the kernel the root filesystem.
2150 # We parse the results of the first upload to get the glance ID of the
2151 # kernel for use when uploading the root filesystem.
2152 KERNEL_ID=""; RAMDISK_ID="";
2153 if [ -n "$KERNEL" ]; then
Dean Troyer45495252012-04-13 13:16:38 -05002154 KERNEL_ID=$(glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "$IMAGE_NAME-kernel" --public --container-format aki --disk-format aki < "$KERNEL" | grep ' id ' | get_field 2)
Russell Bryant20121bd2012-03-28 16:22:52 -04002155 fi
2156 if [ -n "$RAMDISK" ]; then
Dean Troyer45495252012-04-13 13:16:38 -05002157 RAMDISK_ID=$(glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "$IMAGE_NAME-ramdisk" --public --container-format ari --disk-format ari < "$RAMDISK" | grep ' id ' | get_field 2)
Russell Bryant20121bd2012-03-28 16:22:52 -04002158 fi
Dean Troyer45495252012-04-13 13:16:38 -05002159 glance --os-auth-token $TOKEN --os-image-url http://$GLANCE_HOSTPORT image-create --name "${IMAGE_NAME%.img}" --public --container-format ami --disk-format ami ${KERNEL_ID:+--property kernel_id=$KERNEL_ID} ${RAMDISK_ID:+--property ramdisk_id=$RAMDISK_ID} < "${IMAGE}"
Scott Moser4f6d7b62011-12-08 16:22:51 -05002160 fi
Anthony Young120f4862011-10-14 09:31:09 -07002161 done
Jesse Andrewse49b8bd2011-09-12 18:08:04 -07002162fi
Jesse Andrews24859062011-09-15 21:28:23 -07002163
Dean Troyerdf0972c2012-03-07 17:31:03 -06002164
Dean Troyerf5633dd2012-03-28 11:21:40 -05002165# Run local script
2166# ================
2167
2168# Run ``local.sh`` if it exists to perform user-managed tasks
2169if [[ -x $TOP_DIR/local.sh ]]; then
2170 echo "Running user script $TOP_DIR/local.sh"
2171 $TOP_DIR/local.sh
2172fi
2173
2174
Scott Moserb94f4bf2011-10-07 14:51:07 +00002175# Fin
2176# ===
2177
Dean Troyer471de7a2011-12-27 11:45:55 -06002178set +o xtrace
Scott Moserb94f4bf2011-10-07 14:51:07 +00002179
Dean Troyerdf0972c2012-03-07 17:31:03 -06002180
Jesse Andrews24859062011-09-15 21:28:23 -07002181# Using the cloud
2182# ===============
2183
Jesse Andrewse19d8842011-11-01 20:06:55 -07002184echo ""
2185echo ""
2186echo ""
2187
Dean Troyerdf0972c2012-03-07 17:31:03 -06002188# If you installed Horizon on this server you should be able
root40a37002011-09-20 18:06:14 +00002189# to access the site using your browser.
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002190if is_service_enabled horizon; then
Dean Troyerdf0972c2012-03-07 17:31:03 -06002191 echo "Horizon is now available at http://$SERVICE_HOST/"
Jesse Andrews24859062011-09-15 21:28:23 -07002192fi
2193
Dean Troyerdf0972c2012-03-07 17:31:03 -06002194# If Keystone is present you can point ``nova`` cli to this server
Chmouel Boudjnaha6651e92012-02-16 10:16:52 +00002195if is_service_enabled key; then
Dean Troyerdf0972c2012-03-07 17:31:03 -06002196 echo "Keystone is serving at $KEYSTONE_AUTH_PROTOCOL://$SERVICE_HOST:$KEYSTONE_API_PORT/v2.0/"
2197 echo "Examples on using novaclient command line is in exercise.sh"
2198 echo "The default users are: admin and demo"
2199 echo "The password: $ADMIN_PASSWORD"
Jesse Andrews24859062011-09-15 21:28:23 -07002200fi
termie523c4052011-09-28 19:49:40 -05002201
Anthony Young1097c7c2011-12-27 23:22:14 -08002202# Echo HOST_IP - useful for build_uec.sh, which uses dhcp to give the instance an address
2203echo "This is your host ip: $HOST_IP"
2204
Dean Troyerdf0972c2012-03-07 17:31:03 -06002205# Warn that ``EXTRA_FLAGS`` needs to be converted to ``EXTRA_OPTS``
Dean Troyerced65172012-03-02 16:36:16 -06002206if [[ -n "$EXTRA_FLAGS" ]]; then
2207 echo "WARNING: EXTRA_FLAGS is defined and may need to be converted to EXTRA_OPTS"
2208fi
2209
Anthony Young1097c7c2011-12-27 23:22:14 -08002210# Indicate how long this took to run (bash maintained variable 'SECONDS')
Scott Moserb94f4bf2011-10-07 14:51:07 +00002211echo "stack.sh completed in $SECONDS seconds."