blob: b132f37834dffbbbfd1f4b85af22548e69718904 [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Dean Troyer73f6f252012-09-17 11:22:21 -05003# lib/glance
Dean Troyer6d04fd72012-12-21 11:03:37 -06004# Functions to control the configuration and operation of the **Glance** service
Dean Troyer73f6f252012-09-17 11:22:21 -05005
6# Dependencies:
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01007#
8# - ``functions`` file
9# - ``DEST``, ``DATA_DIR``, ``STACK_USER`` must be defined
10# - ``SERVICE_{TENANT_NAME|PASSWORD}`` must be defined
11# - ``SERVICE_HOST``
12# - ``KEYSTONE_TOKEN_FORMAT`` must be defined
Dean Troyer73f6f252012-09-17 11:22:21 -050013
14# ``stack.sh`` calls the entry points in this order:
15#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010016# - install_glance
17# - configure_glance
18# - init_glance
19# - start_glance
20# - stop_glance
21# - cleanup_glance
Dean Troyer73f6f252012-09-17 11:22:21 -050022
23# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +110024_XTRACE_GLANCE=$(set +o | grep xtrace)
Dean Troyer73f6f252012-09-17 11:22:21 -050025set +o xtrace
26
27
28# Defaults
29# --------
30
Dean Troyer73f6f252012-09-17 11:22:21 -050031# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050032GITDIR["python-glanceclient"]=$DEST/python-glanceclient
Sean Dagueaecd1892014-11-19 15:19:51 -050033GITDIR["glance_store"]=$DEST/glance_store
Dean Troyer73f6f252012-09-17 11:22:21 -050034GLANCE_DIR=$DEST/glance
Dean Troyeraed60792015-02-17 15:38:16 -060035
36# Glance virtual environment
37if [[ ${USE_VENV} = True ]]; then
38 PROJECT_VENV["glance"]=${GLANCE_DIR}.venv
39 GLANCE_BIN_DIR=${PROJECT_VENV["glance"]}/bin
40else
41 GLANCE_BIN_DIR=$(get_python_exec_prefix)
42fi
43
Abhishek Kekane057aaa62020-07-29 07:37:16 +000044# Cinder for Glance
45USE_CINDER_FOR_GLANCE=$(trueorfalse False USE_CINDER_FOR_GLANCE)
46# GLANCE_CINDER_DEFAULT_BACKEND should be one of the values
47# from CINDER_ENABLED_BACKENDS
48GLANCE_CINDER_DEFAULT_BACKEND=${GLANCE_CINDER_DEFAULT_BACKEND:-lvmdriver-1}
49GLANCE_STORE_ROOTWRAP_BASE_DIR=/usr/local/etc/glance
50# NOTE (abhishekk): For opensuse data files are stored in different directory
51if is_opensuse; then
52 GLANCE_STORE_ROOTWRAP_BASE_DIR=/usr/etc/glance
53fi
Abhishek Kekane6f91da92019-10-17 09:02:41 +000054# Glance multi-store configuration
55# Boolean flag to enable multiple store configuration for glance
56GLANCE_ENABLE_MULTIPLE_STORES=$(trueorfalse False GLANCE_ENABLE_MULTIPLE_STORES)
57
58# Comma separated list for configuring multiple file stores of glance,
59# for example; GLANCE_MULTIPLE_FILE_STORES = fast,cheap,slow
60GLANCE_MULTIPLE_FILE_STORES=${GLANCE_MULTIPLE_FILE_STORES:-fast}
61
62# Default store/backend for glance, must be one of the store specified
63# in GLANCE_MULTIPLE_FILE_STORES option.
64GLANCE_DEFAULT_BACKEND=${GLANCE_DEFAULT_BACKEND:-fast}
65
Dean Troyer73f6f252012-09-17 11:22:21 -050066GLANCE_CACHE_DIR=${GLANCE_CACHE_DIR:=$DATA_DIR/glance/cache}
Abhishek Kekane6f91da92019-10-17 09:02:41 +000067
Dan Smith09eea0b2020-07-09 08:31:51 -070068# Full Glance functionality requires running in standalone mode. If we are
69# not in uwsgi mode, then we are standalone, otherwise allow separate control.
70if [[ "$WSGI_MODE" != "uwsgi" ]]; then
71 GLANCE_STANDALONE=True
72fi
Dan Smith155109d2020-07-24 06:49:01 -070073GLANCE_STANDALONE=${GLANCE_STANDALONE:-False}
Dan Smith09eea0b2020-07-09 08:31:51 -070074
Abhishek Kekane6f91da92019-10-17 09:02:41 +000075# File path for each store specified in GLANCE_MULTIPLE_FILE_STORES, the store
76# identifier will be appended to this path at runtime. If GLANCE_MULTIPLE_FILE_STORES
77# has fast,cheap specified then filepath will be generated like $DATA_DIR/glance/fast
78# and $DATA_DIR/glance/cheap.
79GLANCE_MULTISTORE_FILE_IMAGE_DIR=${GLANCE_MULTISTORE_FILE_IMAGE_DIR:=$DATA_DIR/glance}
Dean Troyer73f6f252012-09-17 11:22:21 -050080GLANCE_IMAGE_DIR=${GLANCE_IMAGE_DIR:=$DATA_DIR/glance/images}
Abhishek Kekane057aaa62020-07-29 07:37:16 +000081GLANCE_NFS_MOUNTPOINT=$GLANCE_IMAGE_DIR/mnt
Matthew Treinishfa898f52017-04-25 01:30:10 -040082GLANCE_LOCK_DIR=${GLANCE_LOCK_DIR:=$DATA_DIR/glance/locks}
Abhishek Kekane6f91da92019-10-17 09:02:41 +000083GLANCE_STAGING_DIR=${GLANCE_MULTISTORE_FILE_IMAGE_DIR:=$DATA_DIR/os_glance_staging_store}
84GLANCE_TASKS_DIR=${GLANCE_MULTISTORE_FILE_IMAGE_DIR:=$DATA_DIR/os_glance_tasks_store}
Dean Troyer73f6f252012-09-17 11:22:21 -050085
Abhishek Kekane73ad9762020-06-16 15:20:48 +000086GLANCE_USE_IMPORT_WORKFLOW=$(trueorfalse False GLANCE_USE_IMPORT_WORKFLOW)
Dan Smith4e916ae2021-04-26 08:52:23 -070087GLANCE_ENABLE_QUOTAS=$(trueorfalse True GLANCE_ENABLE_QUOTAS)
Abhishek Kekane73ad9762020-06-16 15:20:48 +000088
Dean Troyer73f6f252012-09-17 11:22:21 -050089GLANCE_CONF_DIR=${GLANCE_CONF_DIR:-/etc/glance}
Pawel Koniszewski76e39252014-09-06 07:06:46 -040090GLANCE_METADEF_DIR=$GLANCE_CONF_DIR/metadefs
Dean Troyer73f6f252012-09-17 11:22:21 -050091GLANCE_API_CONF=$GLANCE_CONF_DIR/glance-api.conf
Dean Troyer73f6f252012-09-17 11:22:21 -050092GLANCE_API_PASTE_INI=$GLANCE_CONF_DIR/glance-api-paste.ini
93GLANCE_CACHE_CONF=$GLANCE_CONF_DIR/glance-cache.conf
Dirk Mueller46d1ba62013-09-09 14:31:37 +020094GLANCE_SCHEMA_JSON=$GLANCE_CONF_DIR/schema-image.json
Jamie Lennoxf4f01c62015-06-19 02:52:41 +000095GLANCE_SWIFT_STORE_CONF=$GLANCE_CONF_DIR/glance-swift-store.conf
bhagyashris6a25fb92017-12-14 13:23:41 +053096GLANCE_IMAGE_IMPORT_CONF=$GLANCE_CONF_DIR/glance-image-import.conf
Dean Troyer73f6f252012-09-17 11:22:21 -050097
Sean Daguef3b2f4c2017-04-13 10:11:48 -040098if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -040099 GLANCE_SERVICE_PROTOCOL="https"
100fi
101
Dean Troyer73f6f252012-09-17 11:22:21 -0500102# Glance connection info. Note the port must be specified.
Rob Crittenden18d47782014-03-19 17:47:42 -0400103GLANCE_SERVICE_HOST=${GLANCE_SERVICE_HOST:-$SERVICE_HOST}
Jens Harbottdc7b4292017-09-19 10:52:32 +0000104GLANCE_SERVICE_LISTEN_ADDRESS=${GLANCE_SERVICE_LISTEN_ADDRESS:-$(ipv6_unquote $SERVICE_LISTEN_ADDRESS)}
Rob Crittenden18d47782014-03-19 17:47:42 -0400105GLANCE_SERVICE_PORT=${GLANCE_SERVICE_PORT:-9292}
106GLANCE_SERVICE_PORT_INT=${GLANCE_SERVICE_PORT_INT:-19292}
107GLANCE_HOSTPORT=${GLANCE_HOSTPORT:-$GLANCE_SERVICE_HOST:$GLANCE_SERVICE_PORT}
108GLANCE_SERVICE_PROTOCOL=${GLANCE_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL}
Matthew Treinish1fa65362017-06-23 22:32:37 +0000109GLANCE_UWSGI=$GLANCE_BIN_DIR/glance-wsgi-api
Jeremy Liu2f7df512017-07-12 10:09:48 +0800110GLANCE_UWSGI_CONF=$GLANCE_CONF_DIR/glance-uwsgi.ini
Julia Kreger5a642452021-07-19 07:01:29 -0700111
112# Glance default limit for Devstack
113GLANCE_LIMIT_IMAGE_SIZE_TOTAL=${GLANCE_LIMIT_IMAGE_SIZE_TOTAL:-1000}
114
Matthew Treinish1fa65362017-06-23 22:32:37 +0000115# If wsgi mode is uwsgi run glance under uwsgi, else default to eventlet
116# TODO(mtreinish): Remove the eventlet path here and in all the similar
117# conditionals below after the Pike release
118if [[ "$WSGI_MODE" == "uwsgi" ]]; then
119 GLANCE_URL="$GLANCE_SERVICE_PROTOCOL://$GLANCE_SERVICE_HOST/image"
120else
121 GLANCE_URL="$GLANCE_SERVICE_PROTOCOL://$GLANCE_HOSTPORT"
122fi
Dean Troyer73f6f252012-09-17 11:22:21 -0500123
Dean Troyercc6b4432013-04-08 15:38:03 -0500124# Functions
125# ---------
Dean Troyer73f6f252012-09-17 11:22:21 -0500126
Dean Troyere4fa7212014-01-15 15:04:49 -0600127# Test if any Glance services are enabled
128# is_glance_enabled
129function is_glance_enabled {
Clark Boylan902158b2017-05-30 14:11:09 -0700130 [[ ,${DISABLED_SERVICES} =~ ,"glance" ]] && return 1
Dean Troyere4fa7212014-01-15 15:04:49 -0600131 [[ ,${ENABLED_SERVICES} =~ ,"g-" ]] && return 0
132 return 1
133}
134
Dean Troyer73f6f252012-09-17 11:22:21 -0500135# cleanup_glance() - Remove residual data files, anything left over from previous
136# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100137function cleanup_glance {
Dan Smith61b4fbf2021-03-09 08:05:37 -0800138 # delete image files (glance) and all of the glance-remote temporary
139 # storage
140 sudo rm -rf $GLANCE_CACHE_DIR $GLANCE_IMAGE_DIR "${DATA_DIR}/glance-remote"
Abhishek Kekane6f91da92019-10-17 09:02:41 +0000141
142 # Cleanup multiple stores directories
143 if [[ "$GLANCE_ENABLE_MULTIPLE_STORES" == "True" ]]; then
144 local store file_dir
145 for store in $(echo $GLANCE_MULTIPLE_FILE_STORES | tr "," "\n"); do
146 file_dir="${GLANCE_MULTISTORE_FILE_IMAGE_DIR}/${store}/"
147 sudo rm -rf $file_dir
148 done
149
150 # Cleanup reserved stores directories
151 sudo rm -rf $GLANCE_STAGING_DIR $GLANCE_TASKS_DIR
152 fi
Dean Troyer73f6f252012-09-17 11:22:21 -0500153}
154
Abhishek Kekane057aaa62020-07-29 07:37:16 +0000155# Set multiple cinder store related config options for each of the cinder store
156#
157function configure_multiple_cinder_stores {
158
159 local be be_name be_type enabled_backends
160 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
161 be_type=${be%%:*}
162 be_name=${be##*:}
163 enabled_backends+="${be_name}:cinder,"
164
165 set_common_cinder_store_params $be_name
166 iniset $GLANCE_API_CONF $be_name cinder_volume_type ${be_name}
167 if [[ "$be_type" == "nfs" ]]; then
168 mkdir -p "$GLANCE_NFS_MOUNTPOINT"
169 iniset $GLANCE_API_CONF $be_name cinder_mount_point_base "$GLANCE_NFS_MOUNTPOINT"
170 fi
171 done
172 iniset $GLANCE_API_CONF DEFAULT enabled_backends ${enabled_backends::-1}
173 iniset $GLANCE_API_CONF glance_store default_backend $GLANCE_CINDER_DEFAULT_BACKEND
174}
175
176# Set common cinder store options to given config section
177#
178# Arguments:
179# config_section
180#
181function set_common_cinder_store_params {
182 local config_section="$1"
183 iniset $GLANCE_API_CONF $config_section cinder_store_auth_address $KEYSTONE_SERVICE_URI_V3
184 iniset $GLANCE_API_CONF $config_section cinder_store_user_name glance
185 iniset $GLANCE_API_CONF $config_section cinder_store_password $SERVICE_PASSWORD
186 iniset $GLANCE_API_CONF $config_section cinder_store_project_name $SERVICE_PROJECT_NAME
187}
188
189# Configure multiple file stores options for each file store
190#
191# Arguments:
192#
193function configure_multiple_file_stores {
194 local store enabled_backends
195 enabled_backends=""
196 for store in $(echo $GLANCE_MULTIPLE_FILE_STORES | tr "," "\n"); do
197 enabled_backends+="${store}:file,"
198 done
199 iniset $GLANCE_API_CONF DEFAULT enabled_backends ${enabled_backends::-1}
200
201 # Glance multiple store Store specific configs
202 iniset $GLANCE_API_CONF glance_store default_backend $GLANCE_DEFAULT_BACKEND
203 local store
204 for store in $(echo $glance_multiple_file_stores | tr "," "\n"); do
205 iniset $GLANCE_API_CONF $store filesystem_store_datadir "${GLANCE_MULTISTORE_FILE_IMAGE_DIR}/${store}/"
206 done
207}
208
209# Set reserved stores for glance
210function configure_reserved_stores {
211 iniset $GLANCE_API_CONF os_glance_staging_store filesystem_store_datadir "${GLANCE_MULTISTORE_FILE_IMAGE_DIR}/os_glance_staging_store/"
212 iniset $GLANCE_API_CONF os_glance_tasks_store filesystem_store_datadir "${GLANCE_MULTISTORE_FILE_IMAGE_DIR}/os_glance_tasks_store/"
213}
214
215# Copy rootwrap file from glance_store/etc/glance to /etc/glance
216#
217# Arguments:
218# source_path Source path to copy rootwrap files from
219#
220function copy_rootwrap {
221 local source_path="$1"
222 # Make glance configuration directory if it is not exists
223 sudo install -d -o $STACK_USER $GLANCE_CONF_DIR
224 cp -r $source_path/rootwrap.* $GLANCE_CONF_DIR/
225}
226
227# Set glance_store related config options
228#
229# Arguments:
230# USE_CINDER_FOR_GLANCE
231# GLANCE_ENABLE_MULTIPLE_STORES
232#
233function configure_glance_store {
234 local use_cinder_for_glance="$1"
235 local glance_enable_multiple_stores="$2"
236 local be
237
238 if [[ "$glance_enable_multiple_stores" == "False" ]]; then
239 # Configure traditional glance_store
240 if [[ "$use_cinder_for_glance" == "True" ]]; then
241 # set common glance_store parameters
242 iniset $GLANCE_API_CONF glance_store stores "cinder,file,http"
243 iniset $GLANCE_API_CONF glance_store default_store cinder
244
245 # set cinder related store parameters
246 set_common_cinder_store_params glance_store
247 # set nfs mount_point dir
248 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
249 local be_name=${be##*:}
250 if [[ "$be_name" == "nfs" ]]; then
251 mkdir -p $GLANCE_NFS_MOUNTPOINT
252 iniset $GLANCE_API_CONF glance_store cinder_mount_point_base $GLANCE_NFS_MOUNTPOINT
253 fi
254 done
255 fi
256 # Store specific configs
257 iniset $GLANCE_API_CONF glance_store filesystem_store_datadir $GLANCE_IMAGE_DIR/
258 else
259 if [[ "$use_cinder_for_glance" == "True" ]]; then
260 # Configure multiple cinder stores for glance
261 configure_multiple_cinder_stores
262 else
263 # Configure multiple file stores for glance
264 configure_multiple_file_stores
265 fi
266 # Configure reserved stores
267 configure_reserved_stores
268 fi
269}
270
Dan Smith4e916ae2021-04-26 08:52:23 -0700271function configure_glance_quotas {
272
273 # NOTE(danms): We need to have some of the OS_ things unset in
274 # order to use system scope, which is required for creating these
275 # limits. This is a hack, but I dunno how else to get osc to use
276 # system scope.
277
278 bash -c "unset OS_USERNAME OS_TENANT_NAME OS_PROJECT_NAME;
279 openstack --os-cloud devstack-system-admin registered limit create \
Julia Kreger5a642452021-07-19 07:01:29 -0700280 --service glance --default-limit $GLANCE_LIMIT_IMAGE_SIZE_TOTAL \
281 --region $REGION_NAME image_size_total; \
Dan Smith4e916ae2021-04-26 08:52:23 -0700282 openstack --os-cloud devstack-system-admin registered limit create \
Julia Kreger5a642452021-07-19 07:01:29 -0700283 --service glance --default-limit $GLANCE_LIMIT_IMAGE_SIZE_TOTAL \
284 --region $REGION_NAME image_stage_total; \
Dan Smith4e916ae2021-04-26 08:52:23 -0700285 openstack --os-cloud devstack-system-admin registered limit create \
286 --service glance --default-limit 100 --region $REGION_NAME \
287 image_count_total; \
288 openstack --os-cloud devstack-system-admin registered limit create \
289 --service glance --default-limit 100 --region $REGION_NAME \
290 image_count_uploading"
291
292 # Tell glance to use these limits
293 iniset $GLANCE_API_CONF DEFAULT use_keystone_limits True
294
295 # Configure oslo_limit so it can talk to keystone
296 iniset $GLANCE_API_CONF oslo_limit user_domain_name $SERVICE_DOMAIN_NAME
297 iniset $GLANCE_API_CONF oslo_limit password $SERVICE_PASSWORD
298 iniset $GLANCE_API_CONF oslo_limit username glance
299 iniset $GLANCE_API_CONF oslo_limit auth_type password
300 iniset $GLANCE_API_CONF oslo_limit auth_url $KEYSTONE_SERVICE_URI
301 iniset $GLANCE_API_CONF oslo_limit system_scope "'all'"
302 iniset $GLANCE_API_CONF oslo_limit endpoint_id \
303 $(openstack endpoint list --service glance -f value -c ID)
304
305 # Allow the glance service user to read quotas
306 openstack role add --user glance --user-domain Default --system all \
307 reader
308}
309
Dean Troyer73f6f252012-09-17 11:22:21 -0500310# configure_glance() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +1100311function configure_glance {
Dean Troyer8421c2b2015-03-16 13:52:19 -0500312 sudo install -d -o $STACK_USER $GLANCE_CONF_DIR $GLANCE_METADEF_DIR
Pawel Koniszewski76e39252014-09-06 07:06:46 -0400313
Abhishek Kekane0ae57872020-02-17 06:11:15 +0000314 # Set non-default configuration options for the API server
Ian Wienandada886d2015-10-07 14:06:26 +1100315 local dburl
316 dburl=`database_connection_url glance`
Dean Troyer73f6f252012-09-17 11:22:21 -0500317
Ben Nemec03997942013-08-10 09:56:16 -0500318 iniset $GLANCE_API_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Jordan Pittierceca15d2015-06-19 11:46:36 +0200319 iniset $GLANCE_API_CONF database connection $dburl
Dean Troyer73f6f252012-09-17 11:22:21 -0500320 iniset $GLANCE_API_CONF DEFAULT use_syslog $SYSLOG
Dean Troyer73f6f252012-09-17 11:22:21 -0500321 iniset $GLANCE_API_CONF DEFAULT image_cache_dir $GLANCE_CACHE_DIR/
ZhongShengping5fe60c12019-04-30 10:12:51 +0800322 iniset $GLANCE_API_CONF oslo_concurrency lock_path $GLANCE_LOCK_DIR
Dean Troyer73f6f252012-09-17 11:22:21 -0500323 iniset $GLANCE_API_CONF paste_deploy flavor keystone+cachemanagement
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100324 configure_keystone_authtoken_middleware $GLANCE_API_CONF glance
Matt Riedemann45da7772017-03-05 13:07:39 -0500325 iniset $GLANCE_API_CONF oslo_messaging_notifications driver messagingv2
Brant Knudson2dd110c2015-03-14 12:39:14 -0500326 iniset_rpc_backend glance $GLANCE_API_CONF
Evgeny Antyshev19354582014-11-24 14:20:35 +0400327 if [ "$VIRT_DRIVER" = 'libvirt' ] && [ "$LIBVIRT_TYPE" = 'parallels' ]; then
328 iniset $GLANCE_API_CONF DEFAULT disk_formats "ami,ari,aki,vhd,vmdk,raw,qcow2,vdi,iso,ploop"
329 fi
Dean Troyer73f6f252012-09-17 11:22:21 -0500330
Abhishek Kekane057aaa62020-07-29 07:37:16 +0000331 # Configure glance_store
332 configure_glance_store $USE_CINDER_FOR_GLANCE $GLANCE_ENABLE_MULTIPLE_STORES
Flavio Percocofe65e2d2014-09-03 11:51:00 +0200333
Timur Sufieva44dd9a2016-04-29 14:08:51 +0300334 # CORS feature support - to allow calls from Horizon by default
335 if [ -n "$GLANCE_CORS_ALLOWED_ORIGIN" ]; then
336 iniset $GLANCE_API_CONF cors allowed_origin "$GLANCE_CORS_ALLOWED_ORIGIN"
337 else
338 iniset $GLANCE_API_CONF cors allowed_origin "http://$SERVICE_HOST"
339 fi
340
Abhishek Kekane6f91da92019-10-17 09:02:41 +0000341 # No multiple stores for swift yet
Abhishek Kekane057aaa62020-07-29 07:37:16 +0000342 if [[ "$GLANCE_ENABLE_MULTIPLE_STORES" == "False" ]]; then
343 # Store the images in swift if enabled.
344 if is_service_enabled s-proxy; then
345 iniset $GLANCE_API_CONF glance_store default_store swift
346 iniset $GLANCE_API_CONF glance_store swift_store_create_container_on_put True
Jamie Lennoxf4f01c62015-06-19 02:52:41 +0000347
Abhishek Kekane057aaa62020-07-29 07:37:16 +0000348 iniset $GLANCE_API_CONF glance_store swift_store_config_file $GLANCE_SWIFT_STORE_CONF
349 iniset $GLANCE_API_CONF glance_store default_swift_reference ref1
350 iniset $GLANCE_API_CONF glance_store stores "file, http, swift"
351 if is_service_enabled tls-proxy; then
352 iniset $GLANCE_API_CONF glance_store swift_store_cacert $SSL_BUNDLE_FILE
353 fi
354 iniset $GLANCE_API_CONF DEFAULT graceful_shutdown_timeout "$SERVICE_GRACEFUL_SHUTDOWN_TIMEOUT"
355
356 iniset $GLANCE_SWIFT_STORE_CONF ref1 user $SERVICE_PROJECT_NAME:glance-swift
357
358 iniset $GLANCE_SWIFT_STORE_CONF ref1 key $SERVICE_PASSWORD
359 iniset $GLANCE_SWIFT_STORE_CONF ref1 auth_address $KEYSTONE_SERVICE_URI/v3
360 iniset $GLANCE_SWIFT_STORE_CONF ref1 auth_version 3
Vladislav Kuzmin9cbd02d2020-05-20 12:14:04 +0400361 fi
Dean Troyerc77b9322013-03-29 10:51:01 -0500362 fi
363
Matthew Treinish1fa65362017-06-23 22:32:37 +0000364 # We need to tell glance what it's public endpoint is so that the version
365 # discovery document will be correct
366 iniset $GLANCE_API_CONF DEFAULT public_endpoint $GLANCE_URL
367
Rob Crittenden18d47782014-03-19 17:47:42 -0400368 if is_service_enabled tls-proxy; then
369 iniset $GLANCE_API_CONF DEFAULT bind_port $GLANCE_SERVICE_PORT_INT
Jens Harbott32c00892019-04-10 10:33:39 +0000370 iniset $GLANCE_API_CONF keystone_authtoken identity_uri $KEYSTONE_SERVICE_URI
Rob Crittenden18d47782014-03-19 17:47:42 -0400371 fi
372
Louis Taylor701276a2015-02-11 19:34:09 +0000373 # Format logging
Sean Dague9751be62016-04-05 12:08:57 -0400374 setup_logging $GLANCE_API_CONF
Louis Taylor701276a2015-02-11 19:34:09 +0000375
Dean Troyer73f6f252012-09-17 11:22:21 -0500376 cp -p $GLANCE_DIR/etc/glance-api-paste.ini $GLANCE_API_PASTE_INI
377
Brian Rosmaita44a19b42017-12-11 18:07:50 -0500378 # Set non-default configuration options for the glance-cache
Ben Nemec03997942013-08-10 09:56:16 -0500379 iniset $GLANCE_CACHE_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Dean Troyer73f6f252012-09-17 11:22:21 -0500380 iniset $GLANCE_CACHE_CONF DEFAULT use_syslog $SYSLOG
Dean Troyer73f6f252012-09-17 11:22:21 -0500381 iniset $GLANCE_CACHE_CONF DEFAULT image_cache_dir $GLANCE_CACHE_DIR/
Jens Harbott32c00892019-04-10 10:33:39 +0000382 iniset $GLANCE_CACHE_CONF DEFAULT auth_url $KEYSTONE_SERVICE_URI
Sean Dague7580a0c2016-02-17 06:23:36 -0500383 iniset $GLANCE_CACHE_CONF DEFAULT admin_tenant_name $SERVICE_PROJECT_NAME
Dean Troyer73f6f252012-09-17 11:22:21 -0500384 iniset $GLANCE_CACHE_CONF DEFAULT admin_user glance
Dean Troyer73f6f252012-09-17 11:22:21 -0500385 iniset $GLANCE_CACHE_CONF DEFAULT admin_password $SERVICE_PASSWORD
386
Flavio Percocofe65e2d2014-09-03 11:51:00 +0200387 # Store specific confs
Flavio Percocofe65e2d2014-09-03 11:51:00 +0200388 iniset $GLANCE_CACHE_CONF glance_store filesystem_store_datadir $GLANCE_IMAGE_DIR/
389
bhagyashris6a25fb92017-12-14 13:23:41 +0530390 # Set default configuration options for the glance-image-import
391 iniset $GLANCE_IMAGE_IMPORT_CONF image_import_opts image_import_plugins []
392 iniset $GLANCE_IMAGE_IMPORT_CONF inject_metadata_properties ignore_user_roles admin
393 iniset $GLANCE_IMAGE_IMPORT_CONF inject_metadata_properties inject
394
Dirk Mueller46d1ba62013-09-09 14:31:37 +0200395 cp -p $GLANCE_DIR/etc/schema-image.json $GLANCE_SCHEMA_JSON
Pawel Koniszewski76e39252014-09-06 07:06:46 -0400396
397 cp -p $GLANCE_DIR/etc/metadefs/*.json $GLANCE_METADEF_DIR
Rob Crittenden18d47782014-03-19 17:47:42 -0400398
Sean Daguef3b2f4c2017-04-13 10:11:48 -0400399 if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400400 CINDER_SERVICE_HOST=${CINDER_SERVICE_HOST:-$SERVICE_HOST}
401 CINDER_SERVICE_PORT=${CINDER_SERVICE_PORT:-8776}
402
Brian Rosmaitab43810a2019-02-07 16:46:49 -0500403 iniset $GLANCE_API_CONF DEFAULT cinder_endpoint_template "https://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v3/%(project_id)s"
404 iniset $GLANCE_CACHE_CONF DEFAULT cinder_endpoint_template "https://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v3/%(project_id)s"
Rob Crittenden18d47782014-03-19 17:47:42 -0400405 fi
Matthew Treinish1fa65362017-06-23 22:32:37 +0000406
Dan Smith09eea0b2020-07-09 08:31:51 -0700407 if [[ "$GLANCE_STANDALONE" == False ]]; then
Matthew Treinish1fa65362017-06-23 22:32:37 +0000408 write_local_uwsgi_http_config "$GLANCE_UWSGI_CONF" "$GLANCE_UWSGI" "/image"
Dan Smith802259a2021-01-12 22:55:57 +0000409 # Grab our uwsgi listen address and use that to fill out our
410 # worker_self_reference_url config
411 iniset $GLANCE_API_CONF DEFAULT worker_self_reference_url \
412 $(awk '-F= ' '/^http-socket/ { print "http://"$2}' \
413 $GLANCE_UWSGI_CONF)
Matthew Treinish1fa65362017-06-23 22:32:37 +0000414 else
Dan Smith09eea0b2020-07-09 08:31:51 -0700415 write_local_proxy_http_config glance "http://$GLANCE_SERVICE_HOST:$GLANCE_SERVICE_PORT_INT" "/image"
Matthew Treinish1fa65362017-06-23 22:32:37 +0000416 iniset $GLANCE_API_CONF DEFAULT bind_host $GLANCE_SERVICE_LISTEN_ADDRESS
Dan Smithfcbf3e92020-07-17 10:14:14 -0700417 iniset $GLANCE_API_CONF DEFAULT bind_port $GLANCE_SERVICE_PORT_INT
Matthew Treinish1fa65362017-06-23 22:32:37 +0000418 iniset $GLANCE_API_CONF DEFAULT workers "$API_WORKERS"
419 fi
Dean Troyer73f6f252012-09-17 11:22:21 -0500420}
421
Dean Troyer42a59c22014-03-03 14:31:29 -0600422# create_glance_accounts() - Set up common required glance accounts
423
Wayne Okumadd622932015-03-31 00:28:39 -0700424# Project User Roles
425# ---------------------------------------------------------------------
Sean Dague7580a0c2016-02-17 06:23:36 -0500426# SERVICE_PROJECT_NAME glance service
427# SERVICE_PROJECT_NAME glance-swift ResellerAdmin (if Swift is enabled)
428# SERVICE_PROJECT_NAME glance-search search (if Search is enabled)
Dean Troyer42a59c22014-03-03 14:31:29 -0600429
430function create_glance_accounts {
431 if is_service_enabled g-api; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100432
Jamie Lennox85ff5322015-01-28 14:28:01 +1000433 create_service_user "glance"
Bartosz Górski0abde392014-02-28 14:15:19 +0100434
Dean Troyer42a59c22014-03-03 14:31:29 -0600435 # required for swift access
436 if is_service_enabled s-proxy; then
Jamie Lennoxcbcbd8f2016-01-21 16:08:14 -0600437 create_service_user "glance-swift" "ResellerAdmin"
Dean Troyer42a59c22014-03-03 14:31:29 -0600438 fi
Bartosz Górski0abde392014-02-28 14:15:19 +0100439
Sean Dague985e9582016-02-10 07:25:24 -0500440 get_or_create_service "glance" "image" "Glance Image Service"
Matt Riedemannae4578b2016-04-23 01:45:40 +0000441 get_or_create_endpoint \
Sean Dague985e9582016-02-10 07:25:24 -0500442 "image" \
443 "$REGION_NAME" \
Matthew Treinish1fa65362017-06-23 22:32:37 +0000444 "$GLANCE_URL"
Jens Rosenboom890342e2016-09-13 22:41:41 +0200445
446 # Note(frickler): Crude workaround for https://bugs.launchpad.net/glance-store/+bug/1620999
447 service_domain_id=$(get_or_create_domain $SERVICE_DOMAIN_NAME)
448 iniset $GLANCE_SWIFT_STORE_CONF ref1 project_domain_id $service_domain_id
449 iniset $GLANCE_SWIFT_STORE_CONF ref1 user_domain_id $service_domain_id
Dan Smith4e916ae2021-04-26 08:52:23 -0700450
451 if [[ "$GLANCE_ENABLE_QUOTAS" = True ]]; then
452 configure_glance_quotas
453 fi
454
Dean Troyer42a59c22014-03-03 14:31:29 -0600455 fi
456}
457
Dean Troyer73f6f252012-09-17 11:22:21 -0500458# init_glance() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100459function init_glance {
Dean Troyer73f6f252012-09-17 11:22:21 -0500460 # Delete existing images
461 rm -rf $GLANCE_IMAGE_DIR
462 mkdir -p $GLANCE_IMAGE_DIR
463
Radosław Piliszek09e860f2020-01-19 12:41:14 +0100464 # (Re)create glance database
465 recreate_database glance
Dean Troyer73f6f252012-09-17 11:22:21 -0500466
Radosław Piliszek09e860f2020-01-19 12:41:14 +0100467 time_start "dbsync"
468 # Migrate glance database
469 $GLANCE_BIN_DIR/glance-manage --config-file $GLANCE_CONF_DIR/glance-api.conf db_sync
Dean Troyerbc071bc2012-10-01 14:06:44 -0500470
Radosław Piliszek09e860f2020-01-19 12:41:14 +0100471 # Load metadata definitions
472 $GLANCE_BIN_DIR/glance-manage --config-file $GLANCE_CONF_DIR/glance-api.conf db_load_metadefs
473 time_stop "dbsync"
Dean Troyer73f6f252012-09-17 11:22:21 -0500474}
475
476# install_glanceclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100477function install_glanceclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500478 if use_library_from_git "python-glanceclient"; then
479 git_clone_by_name "python-glanceclient"
480 setup_dev_lib "python-glanceclient"
Louis Taylor8df690c2014-11-20 13:09:03 +0000481 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-glanceclient"]}/tools/,/etc/bash_completion.d/}glance.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100482 fi
Dean Troyer73f6f252012-09-17 11:22:21 -0500483}
484
485# install_glance() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100486function install_glance {
Radosław Piliszekbe263062020-03-30 09:56:53 +0200487 local glance_store_extras=()
488
489 if is_service_enabled cinder; then
490 glance_store_extras=("cinder" "${glance_store_extras[@]}")
491 fi
492
493 if is_service_enabled swift; then
494 glance_store_extras=("swift" "${glance_store_extras[@]}")
495 fi
496
Flavio Percoco4f78f8f2014-09-09 09:37:42 +0200497 # Install glance_store from git so we make sure we're testing
498 # the latest code.
Sean Dagueee5ae7b2014-11-13 13:23:27 -0500499 if use_library_from_git "glance_store"; then
500 git_clone_by_name "glance_store"
Radosław Piliszekbe263062020-03-30 09:56:53 +0200501 setup_dev_lib "glance_store" $(join_extras "${glance_store_extras[@]}")
Abhishek Kekane057aaa62020-07-29 07:37:16 +0000502 copy_rootwrap ${DEST}/glance_store/etc/glance
Radosław Piliszekbe263062020-03-30 09:56:53 +0200503 else
504 # we still need to pass extras
505 pip_install_gr_extras glance-store $(join_extras "${glance_store_extras[@]}")
Abhishek Kekane057aaa62020-07-29 07:37:16 +0000506 copy_rootwrap $GLANCE_STORE_ROOTWRAP_BASE_DIR
Sean Dagueee5ae7b2014-11-13 13:23:27 -0500507 fi
Flavio Percoco4f78f8f2014-09-09 09:37:42 +0200508
Dean Troyer73f6f252012-09-17 11:22:21 -0500509 git_clone $GLANCE_REPO $GLANCE_DIR $GLANCE_BRANCH
Wayne Okumadd622932015-03-31 00:28:39 -0700510
Wayne Okumadd622932015-03-31 00:28:39 -0700511 setup_develop $GLANCE_DIR
Dean Troyer73f6f252012-09-17 11:22:21 -0500512}
513
Dan Smith802259a2021-01-12 22:55:57 +0000514# glance_remote_conf() - Return the path to an alternate config file for
515# the remote glance clone
516function glance_remote_conf {
Dan Smith61b4fbf2021-03-09 08:05:37 -0800517 echo $(dirname "${GLANCE_CONF_DIR}")/glance-remote/$(basename "$1")
Dan Smith802259a2021-01-12 22:55:57 +0000518}
519
520# start_glance_remote_clone() - Clone the regular glance api worker
521function start_glance_remote_clone {
Dan Smith61b4fbf2021-03-09 08:05:37 -0800522 local glance_remote_conf_dir glance_remote_port remote_data
523 local glance_remote_uwsgi
Dan Smith802259a2021-01-12 22:55:57 +0000524
Dan Smith61b4fbf2021-03-09 08:05:37 -0800525 glance_remote_conf_dir="$(glance_remote_conf "")"
Dan Smith802259a2021-01-12 22:55:57 +0000526 glance_remote_port=$(get_random_port)
Dan Smith61b4fbf2021-03-09 08:05:37 -0800527 glance_remote_uwsgi="$(glance_remote_conf $GLANCE_UWSGI_CONF)"
Dan Smith802259a2021-01-12 22:55:57 +0000528
529 # Clone the existing ready-to-go glance-api setup
Dan Smith61b4fbf2021-03-09 08:05:37 -0800530 sudo rm -Rf "$glance_remote_conf_dir"
531 sudo cp -r "$GLANCE_CONF_DIR" "$glance_remote_conf_dir"
532 sudo chown $STACK_USER -R "$glance_remote_conf_dir"
Dan Smith802259a2021-01-12 22:55:57 +0000533
534 # Point this worker at different data dirs
535 remote_data="${DATA_DIR}/glance-remote"
536 mkdir -p $remote_data/os_glance_tasks_store \
Dan Smith61b4fbf2021-03-09 08:05:37 -0800537 "${remote_data}/os_glance_staging_store"
538 iniset $(glance_remote_conf "$GLANCE_API_CONF") os_glance_staging_store \
539 filesystem_store_datadir "${remote_data}/os_glance_staging_store"
540 iniset $(glance_remote_conf "$GLANCE_API_CONF") os_glance_tasks_store \
541 filesystem_store_datadir "${remote_data}/os_glance_tasks_store"
Dan Smith802259a2021-01-12 22:55:57 +0000542
543 # Change our uwsgi to our new port
544 sed -ri "s/^(http-socket.*):[0-9]+/\1:$glance_remote_port/" \
Dan Smith61b4fbf2021-03-09 08:05:37 -0800545 "$glance_remote_uwsgi"
Dan Smith802259a2021-01-12 22:55:57 +0000546
547 # Update the self-reference url with our new port
548 iniset $(glance_remote_conf $GLANCE_API_CONF) DEFAULT \
549 worker_self_reference_url \
550 $(awk '-F= ' '/^http-socket/ { print "http://"$2 }' \
Dan Smith61b4fbf2021-03-09 08:05:37 -0800551 "$glance_remote_uwsgi")
Dan Smith802259a2021-01-12 22:55:57 +0000552
553 # We need to create the systemd service for the clone, but then
554 # change it to include an Environment line to point the WSGI app
555 # at the alternate config directory.
556 write_uwsgi_user_unit_file devstack@g-api-r.service "$(which uwsgi) \
557 --procname-prefix \
558 glance-api-remote \
Dan Smith61b4fbf2021-03-09 08:05:37 -0800559 --ini $glance_remote_uwsgi" \
Dan Smith802259a2021-01-12 22:55:57 +0000560 "" "$STACK_USER"
561 iniset -sudo ${SYSTEMD_DIR}/devstack@g-api-r.service \
Dan Smith61b4fbf2021-03-09 08:05:37 -0800562 "Service" "Environment" \
563 "OS_GLANCE_CONFIG_DIR=$glance_remote_conf_dir"
Dan Smith802259a2021-01-12 22:55:57 +0000564
565 # Reload and restart with the new config
566 $SYSTEMCTL daemon-reload
567 $SYSTEMCTL restart devstack@g-api-r
568
569 get_or_create_service glance_remote image_remote "Alternate glance"
570 get_or_create_endpoint image_remote $REGION_NAME \
571 $(awk '-F= ' '/^http-socket/ { print "http://"$2 }' \
Dan Smith61b4fbf2021-03-09 08:05:37 -0800572 $glance_remote_uwsgi)
Dan Smith802259a2021-01-12 22:55:57 +0000573}
574
Sean Dague0eebeb42017-08-30 14:16:58 -0400575# start_glance() - Start running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100576function start_glance {
Rob Crittenden18d47782014-03-19 17:47:42 -0400577 local service_protocol=$GLANCE_SERVICE_PROTOCOL
578 if is_service_enabled tls-proxy; then
Matthew Treinish1fa65362017-06-23 22:32:37 +0000579 if [[ "$WSGI_MODE" != "uwsgi" ]]; then
580 start_tls_proxy glance-service '*' $GLANCE_SERVICE_PORT $GLANCE_SERVICE_HOST $GLANCE_SERVICE_PORT_INT
581 fi
Rob Crittenden18d47782014-03-19 17:47:42 -0400582 fi
583
Dan Smith09eea0b2020-07-09 08:31:51 -0700584 if [[ "$GLANCE_STANDALONE" == False ]]; then
Ian Wienand312517d2018-06-22 22:23:29 +1000585 run_process g-api "$(which uwsgi) --procname-prefix glance-api --ini $GLANCE_UWSGI_CONF"
Matthew Treinish1fa65362017-06-23 22:32:37 +0000586 else
Brian Rosmaita96269d82018-12-17 10:38:42 -0500587 run_process g-api "$GLANCE_BIN_DIR/glance-api --config-dir=$GLANCE_CONF_DIR"
Matthew Treinish1fa65362017-06-23 22:32:37 +0000588 fi
Rob Crittenden18d47782014-03-19 17:47:42 -0400589
Dan Smith802259a2021-01-12 22:55:57 +0000590 if is_service_enabled g-api-r; then
591 echo "Starting the g-api-r clone service..."
592 start_glance_remote_clone
593 fi
594
Matthew Treinish1fa65362017-06-23 22:32:37 +0000595 echo "Waiting for g-api ($GLANCE_SERVICE_HOST) to start..."
596 if ! wait_for_service $SERVICE_TIMEOUT $GLANCE_URL; then
Sean Dague101b4242013-10-22 08:47:11 -0400597 die $LINENO "g-api did not start"
Dean Troyer73f6f252012-09-17 11:22:21 -0500598 fi
599}
600
Dean Troyer699a29f2012-09-10 14:10:27 -0500601# stop_glance() - Stop running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100602function stop_glance {
Chris Dent2f27a0e2014-09-09 13:46:02 +0100603 stop_process g-api
Dan Smith802259a2021-01-12 22:55:57 +0000604 stop_process g-api-r
Dean Troyer73f6f252012-09-17 11:22:21 -0500605}
606
607# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +1100608$_XTRACE_GLANCE
Sean Dague584d90e2013-03-29 14:34:53 -0400609
Adam Spiers6a5aa7c2013-10-24 11:27:02 +0100610# Tell emacs to use shell-script-mode
611## Local variables:
612## mode: shell-script
613## End: