Ian Wienand | 5cdee8d | 2015-10-19 14:17:18 +1100 | [diff] [blame] | 1 | #!/bin/bash |
| 2 | |
Nachi Ueno | 69b3ff6 | 2013-06-07 10:28:33 -0700 | [diff] [blame] | 3 | # Neutron VPN plugin |
| 4 | # --------------------------- |
| 5 | |
| 6 | # Save trace setting |
Ian Wienand | 523f488 | 2015-10-13 11:03:03 +1100 | [diff] [blame^] | 7 | _XTRACE_NEUTRON_VPN=$(set +o | grep xtrace) |
Nachi Ueno | 69b3ff6 | 2013-06-07 10:28:33 -0700 | [diff] [blame] | 8 | set +o xtrace |
| 9 | |
| 10 | |
Nachi Ueno | 584750f | 2013-07-15 18:22:21 -0700 | [diff] [blame] | 11 | AGENT_VPN_BINARY="$NEUTRON_BIN_DIR/neutron-vpn-agent" |
Kyle Mestery | 20b839f | 2014-12-08 06:17:27 +0000 | [diff] [blame] | 12 | VPN_PLUGIN=${VPN_PLUGIN:-"neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin"} |
Nachi Ueno | 1e3d318 | 2013-08-15 18:15:31 -0700 | [diff] [blame] | 13 | IPSEC_PACKAGE=${IPSEC_PACKAGE:-"openswan"} |
Nachi Ueno | 69b3ff6 | 2013-06-07 10:28:33 -0700 | [diff] [blame] | 14 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 15 | function neutron_vpn_install_agent_packages { |
Nachi Ueno | 1e3d318 | 2013-08-15 18:15:31 -0700 | [diff] [blame] | 16 | install_package $IPSEC_PACKAGE |
Paul Michali | 6fd4720 | 2015-02-23 17:07:48 -0500 | [diff] [blame] | 17 | if is_ubuntu && [[ "$IPSEC_PACKAGE" == "strongswan" ]]; then |
| 18 | sudo ln -sf /etc/apparmor.d/usr.lib.ipsec.charon /etc/apparmor.d/disable/ |
| 19 | sudo ln -sf /etc/apparmor.d/usr.lib.ipsec.stroke /etc/apparmor.d/disable/ |
| 20 | # NOTE: Due to https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1387220 |
| 21 | # one must use 'sudo start apparmor ACTION=reload' for Ubuntu 14.10 |
| 22 | restart_service apparmor |
| 23 | fi |
Nachi Ueno | 69b3ff6 | 2013-06-07 10:28:33 -0700 | [diff] [blame] | 24 | } |
| 25 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 26 | function neutron_vpn_configure_common { |
Isaku Yamahata | 9e136b4 | 2013-12-16 15:52:03 +0900 | [diff] [blame] | 27 | _neutron_service_plugin_class_add $VPN_PLUGIN |
Ihar Hrachyshka | 5893cc7 | 2014-12-22 11:49:42 +0100 | [diff] [blame] | 28 | _neutron_deploy_rootwrap_filters $NEUTRON_VPNAAS_DIR |
Nachi Ueno | 69b3ff6 | 2013-06-07 10:28:33 -0700 | [diff] [blame] | 29 | } |
| 30 | |
Paul Michali | 6fd4720 | 2015-02-23 17:07:48 -0500 | [diff] [blame] | 31 | function neutron_vpn_configure_agent { |
| 32 | cp $NEUTRON_VPNAAS_DIR/etc/vpn_agent.ini $Q_VPN_CONF_FILE |
| 33 | if [[ "$IPSEC_PACKAGE" == "strongswan" ]]; then |
| 34 | iniset_multiline $Q_VPN_CONF_FILE vpnagent vpn_device_driver neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver |
| 35 | if is_fedora; then |
| 36 | iniset $Q_VPN_CONF_FILE strongswan default_config_area /usr/share/strongswan/templates/config/strongswan.d |
| 37 | fi |
| 38 | else |
| 39 | iniset_multiline $Q_VPN_CONF_FILE vpnagent vpn_device_driver neutron_vpnaas.services.vpn.device_drivers.ipsec.OpenSwanDriver |
| 40 | fi |
| 41 | } |
| 42 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 43 | function neutron_vpn_stop { |
Akihiro Motoki | edddb1f | 2013-12-09 20:21:06 +0900 | [diff] [blame] | 44 | local ipsec_data_dir=$DATA_DIR/neutron/ipsec |
| 45 | local pids |
| 46 | if [ -d $ipsec_data_dir ]; then |
| 47 | pids=$(find $ipsec_data_dir -name 'pluto.pid' -exec cat {} \;) |
| 48 | fi |
| 49 | if [ -n "$pids" ]; then |
| 50 | sudo kill $pids |
| 51 | fi |
Chris Dent | 36891dc | 2015-02-03 16:22:44 +0000 | [diff] [blame] | 52 | stop_process q-vpn |
Akihiro Motoki | edddb1f | 2013-12-09 20:21:06 +0900 | [diff] [blame] | 53 | } |
| 54 | |
Nachi Ueno | 69b3ff6 | 2013-06-07 10:28:33 -0700 | [diff] [blame] | 55 | # Restore xtrace |
Ian Wienand | 523f488 | 2015-10-13 11:03:03 +1100 | [diff] [blame^] | 56 | $_XTRACE_NEUTRON_VPN |