blob: 8a379f588c2b78b9c14a4ebef49f04ad40e159ce [file] [log] [blame]
Ian Wienand5cdee8d2015-10-19 14:17:18 +11001#!/bin/bash
2
Nachi Ueno69b3ff62013-06-07 10:28:33 -07003# Neutron VPN plugin
4# ---------------------------
5
6# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +11007_XTRACE_NEUTRON_VPN=$(set +o | grep xtrace)
Nachi Ueno69b3ff62013-06-07 10:28:33 -07008set +o xtrace
9
10
Nachi Ueno584750f2013-07-15 18:22:21 -070011AGENT_VPN_BINARY="$NEUTRON_BIN_DIR/neutron-vpn-agent"
Kyle Mestery20b839f2014-12-08 06:17:27 +000012VPN_PLUGIN=${VPN_PLUGIN:-"neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin"}
Nachi Ueno1e3d3182013-08-15 18:15:31 -070013IPSEC_PACKAGE=${IPSEC_PACKAGE:-"openswan"}
Nachi Ueno69b3ff62013-06-07 10:28:33 -070014
Ian Wienandaee18c72014-02-21 15:35:08 +110015function neutron_vpn_install_agent_packages {
Nachi Ueno1e3d3182013-08-15 18:15:31 -070016 install_package $IPSEC_PACKAGE
Paul Michali6fd47202015-02-23 17:07:48 -050017 if is_ubuntu && [[ "$IPSEC_PACKAGE" == "strongswan" ]]; then
18 sudo ln -sf /etc/apparmor.d/usr.lib.ipsec.charon /etc/apparmor.d/disable/
19 sudo ln -sf /etc/apparmor.d/usr.lib.ipsec.stroke /etc/apparmor.d/disable/
20 # NOTE: Due to https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1387220
21 # one must use 'sudo start apparmor ACTION=reload' for Ubuntu 14.10
22 restart_service apparmor
23 fi
Nachi Ueno69b3ff62013-06-07 10:28:33 -070024}
25
Ian Wienandaee18c72014-02-21 15:35:08 +110026function neutron_vpn_configure_common {
Isaku Yamahata9e136b42013-12-16 15:52:03 +090027 _neutron_service_plugin_class_add $VPN_PLUGIN
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +010028 _neutron_deploy_rootwrap_filters $NEUTRON_VPNAAS_DIR
Nachi Ueno69b3ff62013-06-07 10:28:33 -070029}
30
Paul Michali6fd47202015-02-23 17:07:48 -050031function neutron_vpn_configure_agent {
32 cp $NEUTRON_VPNAAS_DIR/etc/vpn_agent.ini $Q_VPN_CONF_FILE
33 if [[ "$IPSEC_PACKAGE" == "strongswan" ]]; then
34 iniset_multiline $Q_VPN_CONF_FILE vpnagent vpn_device_driver neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver
35 if is_fedora; then
36 iniset $Q_VPN_CONF_FILE strongswan default_config_area /usr/share/strongswan/templates/config/strongswan.d
37 fi
38 else
39 iniset_multiline $Q_VPN_CONF_FILE vpnagent vpn_device_driver neutron_vpnaas.services.vpn.device_drivers.ipsec.OpenSwanDriver
40 fi
41}
42
Ian Wienandaee18c72014-02-21 15:35:08 +110043function neutron_vpn_stop {
Akihiro Motokiedddb1f2013-12-09 20:21:06 +090044 local ipsec_data_dir=$DATA_DIR/neutron/ipsec
45 local pids
46 if [ -d $ipsec_data_dir ]; then
47 pids=$(find $ipsec_data_dir -name 'pluto.pid' -exec cat {} \;)
48 fi
49 if [ -n "$pids" ]; then
50 sudo kill $pids
51 fi
Chris Dent36891dc2015-02-03 16:22:44 +000052 stop_process q-vpn
Akihiro Motokiedddb1f2013-12-09 20:21:06 +090053}
54
Nachi Ueno69b3ff62013-06-07 10:28:33 -070055# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +110056$_XTRACE_NEUTRON_VPN