blob: cfa3693f03bfc67a361ba6cbee0bec56a3c9f76c [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Dean Troyer67787e62012-05-02 11:48:15 -05003# lib/cinder
Dean Troyer6d04fd72012-12-21 11:03:37 -06004# Install and start **Cinder** volume service
Dean Troyer67787e62012-05-02 11:48:15 -05005
6# Dependencies:
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01007#
Dean Troyer67787e62012-05-02 11:48:15 -05008# - functions
Attila Fazekas91b8d132013-01-06 22:40:09 +01009# - DEST, DATA_DIR, STACK_USER must be defined
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010010# - SERVICE_{TENANT_NAME|PASSWORD} must be defined
11# - ``KEYSTONE_TOKEN_FORMAT`` must be defined
Dean Troyer67787e62012-05-02 11:48:15 -050012
13# stack.sh
14# ---------
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010015# - install_cinder
16# - configure_cinder
17# - init_cinder
18# - start_cinder
19# - stop_cinder
20# - cleanup_cinder
Dean Troyer67787e62012-05-02 11:48:15 -050021
Dean Troyer7903b792012-09-13 17:16:12 -050022# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +110023_XTRACE_CINDER=$(set +o | grep xtrace)
Dean Troyer7903b792012-09-13 17:16:12 -050024set +o xtrace
Dean Troyer67787e62012-05-02 11:48:15 -050025
26
27# Defaults
28# --------
29
Mate Lakatb2fdafe2012-11-20 15:52:21 +000030# set up default driver
31CINDER_DRIVER=${CINDER_DRIVER:-default}
john-griffithd0860cc2014-01-23 11:31:10 -070032CINDER_PLUGINS=$TOP_DIR/lib/cinder_plugins
Dean Troyer09718332014-07-03 10:46:57 -050033CINDER_BACKENDS=$TOP_DIR/lib/cinder_backends
Hironori Shiina01a84d22021-01-11 13:42:46 -050034CINDER_BACKUPS=$TOP_DIR/lib/cinder_backups
john-griffithd0860cc2014-01-23 11:31:10 -070035
36# grab plugin config if specified via cinder_driver
37if [[ -r $CINDER_PLUGINS/$CINDER_DRIVER ]]; then
38 source $CINDER_PLUGINS/$CINDER_DRIVER
39fi
Mate Lakatb2fdafe2012-11-20 15:52:21 +000040
Dean Troyer67787e62012-05-02 11:48:15 -050041# set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050042GITDIR["python-cinderclient"]=$DEST/python-cinderclient
Ivan Kolodyazhny8d0d3112016-05-26 23:41:49 +030043GITDIR["python-brick-cinderclient-ext"]=$DEST/python-brick-cinderclient-ext
Dean Troyer67787e62012-05-02 11:48:15 -050044CINDER_DIR=$DEST/cinder
Dean Troyer6aaad5f2015-02-18 07:09:04 -060045
46# Cinder virtual environment
47if [[ ${USE_VENV} = True ]]; then
48 PROJECT_VENV["cinder"]=${CINDER_DIR}.venv
49 CINDER_BIN_DIR=${PROJECT_VENV["cinder"]}/bin
50else
51 CINDER_BIN_DIR=$(get_python_exec_prefix)
52fi
53
Dean Troyer50ac7922012-09-13 14:02:01 -050054CINDER_STATE_PATH=${CINDER_STATE_PATH:=$DATA_DIR/cinder}
Dean Troyer671c16e2012-12-13 16:22:38 -060055
Dean Troyer50ac7922012-09-13 14:02:01 -050056CINDER_CONF_DIR=/etc/cinder
57CINDER_CONF=$CINDER_CONF_DIR/cinder.conf
Sean McGinnisdaf12742017-03-03 18:09:35 +000058CINDER_UWSGI=$CINDER_BIN_DIR/cinder-wsgi
59CINDER_UWSGI_CONF=$CINDER_CONF_DIR/cinder-api-uwsgi.ini
Dean Troyer671c16e2012-12-13 16:22:38 -060060CINDER_API_PASTE_INI=$CINDER_CONF_DIR/api-paste.ini
Dean Troyer50ac7922012-09-13 14:02:01 -050061
Dean Troyer560346b2012-12-13 17:05:24 -060062# Public facing bits
Sean Daguef3b2f4c2017-04-13 10:11:48 -040063if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -040064 CINDER_SERVICE_PROTOCOL="https"
65fi
Dean Troyer560346b2012-12-13 17:05:24 -060066CINDER_SERVICE_HOST=${CINDER_SERVICE_HOST:-$SERVICE_HOST}
67CINDER_SERVICE_PORT=${CINDER_SERVICE_PORT:-8776}
68CINDER_SERVICE_PORT_INT=${CINDER_SERVICE_PORT_INT:-18776}
69CINDER_SERVICE_PROTOCOL=${CINDER_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL}
Jens Harbottdc7b4292017-09-19 10:52:32 +000070CINDER_SERVICE_LISTEN_ADDRESS=${CINDER_SERVICE_LISTEN_ADDRESS:-$(ipv6_unquote $SERVICE_LISTEN_ADDRESS)}
Dean Troyer560346b2012-12-13 17:05:24 -060071
John Griffithce8e6f62015-05-12 17:28:59 -060072# What type of LVM device should Cinder use for LVM backend
Sean McGinnis486376e2017-09-05 19:56:06 -050073# Defaults to auto, which will do thin provisioning if it's a fresh
74# volume group, otherwise it will do thick. The other valid choices are
75# default, which is thick, or thin, which as the name implies utilizes lvm
76# thin provisioning.
77CINDER_LVM_TYPE=${CINDER_LVM_TYPE:-auto}
Dean Troyer09718332014-07-03 10:46:57 -050078
Dean Troyer09718332014-07-03 10:46:57 -050079# Default backends
80# The backend format is type:name where type is one of the supported backend
81# types (lvm, nfs, etc) and name is the identifier used in the Cinder
82# configuration and for the volume type name. Multiple backends are
83# comma-separated.
Dean Troyer311f4872014-12-18 16:31:34 -060084# The old ``CINDER_MULTI_LVM_BACKEND=True`` setting had a default of:
85# CINDER_ENABLED_BACKENDS=${CINDER_ENABLED_BACKENDS:-lvm:lvmdriver-1,lvm:lvmdriver-2}
86CINDER_ENABLED_BACKENDS=${CINDER_ENABLED_BACKENDS:-lvm:lvmdriver-1}
Dean Troyer09718332014-07-03 10:46:57 -050087
Joe D'Andreadfcc3872015-04-29 15:39:17 -040088CINDER_VOLUME_CLEAR=${CINDER_VOLUME_CLEAR:-${CINDER_VOLUME_CLEAR_DEFAULT:-zero}}
89CINDER_VOLUME_CLEAR=$(echo ${CINDER_VOLUME_CLEAR} | tr '[:upper:]' '[:lower:]')
Dean Troyerb7490da2013-03-18 16:07:56 -050090
Lee Yarwoodc0627922021-03-09 22:36:57 +000091# Default to lioadm
92CINDER_ISCSI_HELPER=${CINDER_ISCSI_HELPER:-lioadm}
93
Lee Yarwood0386c1c2021-04-28 09:26:23 +010094# Bionic needs to default to tgtadm until support is dropped within devstack
95# as the rtslib-fb-targetctl service doesn't start after installing lioadm.
96if is_ubuntu && [[ "$DISTRO" == "bionic" ]]; then
97 CINDER_ISCSI_HELPER=tgtadm
98fi
99
100# EL and SUSE should only use lioadm
aojeagarcia61f6caf2018-09-24 12:34:15 +0200101if is_fedora || is_suse; then
Ian Wienanda881b882017-04-19 15:42:34 +1000102 if [[ ${CINDER_ISCSI_HELPER} != "lioadm" ]]; then
Lenny Verkhovskyf63ddd62018-02-25 14:48:05 +0000103 die "lioadm is the only valid Cinder target_helper config on this platform"
Ian Wienanda881b882017-04-19 15:42:34 +1000104 fi
Ian Wienanda881b882017-04-19 15:42:34 +1000105fi
Attila Fazekasc70605d2015-01-26 15:44:47 +0100106
Hironori Shiina01a84d22021-01-11 13:42:46 -0500107# For backward compatibility
108# Before CINDER_BACKUP_DRIVER was introduced, ceph backup driver was configured
109# along with ceph backend driver.
110if [[ -z "${CINDER_BACKUP_DRIVER}" && "$CINDER_ENABLED_BACKENDS" =~ "ceph" ]]; then
111 CINDER_BACKUP_DRIVER=ceph
112fi
113
114# Supported backup drivers are in lib/cinder_backups
115CINDER_BACKUP_DRIVER=${CINDER_BACKUP_DRIVER:-swift}
116
Sean McGinnisdaf12742017-03-03 18:09:35 +0000117# Toggle for deploying Cinder under a wsgi server. Legacy mod_wsgi
118# reference should be cleaned up to more accurately refer to uwsgi.
119CINDER_USE_MOD_WSGI=${CINDER_USE_MOD_WSGI:-True}
Dean Troyercc6b4432013-04-08 15:38:03 -0500120
Dean Troyer09718332014-07-03 10:46:57 -0500121# Source the enabled backends
122if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
123 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500124 be_type=${be%%:*}
125 be_name=${be##*:}
126 if [[ -r $CINDER_BACKENDS/${be_type} ]]; then
127 source $CINDER_BACKENDS/${be_type}
Dean Troyer09718332014-07-03 10:46:57 -0500128 fi
129 done
130fi
131
Hironori Shiina01a84d22021-01-11 13:42:46 -0500132# Source the backup driver
133if is_service_enabled c-bak && [[ -n "$CINDER_BACKUP_DRIVER" ]]; then
134 if [[ -r $CINDER_BACKUPS/$CINDER_BACKUP_DRIVER ]]; then
135 source $CINDER_BACKUPS/$CINDER_BACKUP_DRIVER
136 else
137 die "cinder backup driver $CINDER_BACKUP_DRIVER is not supported"
138 fi
139fi
140
Patrick Eastdddb2c72016-05-03 17:34:00 -0700141# Environment variables to configure the image-volume cache
142CINDER_IMG_CACHE_ENABLED=${CINDER_IMG_CACHE_ENABLED:-True}
143
144# For limits, if left unset, it will use cinder defaults of 0 for unlimited
145CINDER_IMG_CACHE_SIZE_GB=${CINDER_IMG_CACHE_SIZE_GB:-}
146CINDER_IMG_CACHE_SIZE_COUNT=${CINDER_IMG_CACHE_SIZE_COUNT:-}
147
148# Configure which cinder backends will have the image-volume cache, this takes the same
149# form as the CINDER_ENABLED_BACKENDS config option. By default it will
150# enable the cache for all cinder backends.
151CINDER_CACHE_ENABLED_FOR_BACKENDS=${CINDER_CACHE_ENABLED_FOR_BACKENDS:-$CINDER_ENABLED_BACKENDS}
Dean Troyer09718332014-07-03 10:46:57 -0500152
Dean Troyercc6b4432013-04-08 15:38:03 -0500153# Functions
154# ---------
Dean Troyere4fa7212014-01-15 15:04:49 -0600155
156# Test if any Cinder services are enabled
157# is_cinder_enabled
158function is_cinder_enabled {
Clark Boylan902158b2017-05-30 14:11:09 -0700159 [[ ,${DISABLED_SERVICES} =~ ,"cinder" ]] && return 1
Dean Troyere4fa7212014-01-15 15:04:49 -0600160 [[ ,${ENABLED_SERVICES} =~ ,"c-" ]] && return 0
161 return 1
162}
163
Anton Arefiev651cb1a2015-09-01 10:55:20 +0300164# _cinder_cleanup_apache_wsgi() - Remove wsgi files, disable and remove apache vhost file
165function _cinder_cleanup_apache_wsgi {
166 sudo rm -f $(apache_site_config_for osapi-volume)
167}
168
Dean Troyer67787e62012-05-02 11:48:15 -0500169# cleanup_cinder() - Remove residual data files, anything left over from previous
170# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100171function cleanup_cinder {
Sean Dague252f2f52012-12-20 16:41:57 -0500172 # ensure the volume group is cleared up because fails might
173 # leave dead volumes in the group
Attila Fazekasc70605d2015-01-26 15:44:47 +0100174 if [ "$CINDER_ISCSI_HELPER" = "tgtadm" ]; then
Ian Wienandada886d2015-10-07 14:06:26 +1100175 local targets
176 targets=$(sudo tgtadm --op show --mode target)
Attila Fazekasc70605d2015-01-26 15:44:47 +0100177 if [ $? -ne 0 ]; then
178 # If tgt driver isn't running this won't work obviously
179 # So check the response and restart if need be
180 echo "tgtd seems to be in a bad state, restarting..."
181 if is_ubuntu; then
182 restart_service tgt
183 else
184 restart_service tgtd
185 fi
186 targets=$(sudo tgtadm --op show --mode target)
Sean Dague252f2f52012-12-20 16:41:57 -0500187 fi
Sean Dague252f2f52012-12-20 16:41:57 -0500188
Attila Fazekasc70605d2015-01-26 15:44:47 +0100189 if [[ -n "$targets" ]]; then
190 local iqn_list=( $(grep --no-filename -r iqn $SCSI_PERSIST_DIR | sed 's/<target //' | sed 's/>//') )
191 for i in "${iqn_list[@]}"; do
192 echo removing iSCSI target: $i
193 sudo tgt-admin --delete $i
194 done
195 fi
Sean Dague252f2f52012-12-20 16:41:57 -0500196
Attila Fazekasc70605d2015-01-26 15:44:47 +0100197 if is_ubuntu; then
198 stop_service tgt
199 else
200 stop_service tgtd
201 fi
Sean Dague252f2f52012-12-20 16:41:57 -0500202 else
Attila Fazekasc70605d2015-01-26 15:44:47 +0100203 sudo cinder-rtstool get-targets | sudo xargs -rn 1 cinder-rtstool delete
Sean Dague252f2f52012-12-20 16:41:57 -0500204 fi
205
Dean Troyer09718332014-07-03 10:46:57 -0500206 if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Dean Troyere8a35ac2014-07-25 12:37:41 -0500207 local be be_name be_type
Dean Troyer09718332014-07-03 10:46:57 -0500208 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500209 be_type=${be%%:*}
210 be_name=${be##*:}
211 if type cleanup_cinder_backend_${be_type} >/dev/null 2>&1; then
212 cleanup_cinder_backend_${be_type} ${be_name}
Dean Troyer09718332014-07-03 10:46:57 -0500213 fi
214 done
Jérôme Gallarddda2b7a2013-02-22 17:28:10 +0100215 fi
Anton Arefiev651cb1a2015-09-01 10:55:20 +0300216
Hironori Shiina01a84d22021-01-11 13:42:46 -0500217 if is_service_enabled c-bak && [[ -n "$CINDER_BACKUP_DRIVER" ]]; then
218 if type cleanup_cinder_backup_$CINDER_BACKUP_DRIVER >/dev/null 2>&1; then
219 cleanup_cinder_backup_$CINDER_BACKUP_DRIVER
220 fi
221 fi
222
Sean McGinnisdaf12742017-03-03 18:09:35 +0000223 stop_process "c-api"
224 remove_uwsgi_config "$CINDER_UWSGI_CONF" "$CINDER_UWSGI"
Dean Troyer67787e62012-05-02 11:48:15 -0500225}
226
Thierry Carrez63e17842014-01-10 14:23:03 +0100227# configure_cinder() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +1100228function configure_cinder {
Dean Troyer8421c2b2015-03-16 13:52:19 -0500229 sudo install -d -o $STACK_USER -m 755 $CINDER_CONF_DIR
Thierry Carrez63e17842014-01-10 14:23:03 +0100230
Yalei Wangcecbd1f2015-01-05 17:05:47 +0800231 rm -f $CINDER_CONF
232
Ian Wienandc6782412015-05-14 10:01:53 +1000233 configure_rootwrap cinder
John Griffith4e823ff2012-07-20 13:18:17 -0600234
TommyLike401de4d2017-05-04 17:56:22 +0800235 if [[ -f "$CINDER_DIR/etc/cinder/resource_filters.json" ]]; then
236 cp -p "$CINDER_DIR/etc/cinder/resource_filters.json" "$CINDER_CONF_DIR/resource_filters.json"
237 fi
238
Dean Troyer67787e62012-05-02 11:48:15 -0500239 cp $CINDER_DIR/etc/cinder/api-paste.ini $CINDER_API_PASTE_INI
Dan Prince82dea7c2013-10-16 18:57:15 -0400240
241 inicomment $CINDER_API_PASTE_INI filter:authtoken auth_host
242 inicomment $CINDER_API_PASTE_INI filter:authtoken auth_port
243 inicomment $CINDER_API_PASTE_INI filter:authtoken auth_protocol
Jamie Lennoxbd24a8d2013-09-20 16:26:42 +1000244 inicomment $CINDER_API_PASTE_INI filter:authtoken cafile
Dan Prince82dea7c2013-10-16 18:57:15 -0400245 inicomment $CINDER_API_PASTE_INI filter:authtoken admin_tenant_name
246 inicomment $CINDER_API_PASTE_INI filter:authtoken admin_user
247 inicomment $CINDER_API_PASTE_INI filter:authtoken admin_password
Ian Wienand1f82f432017-10-04 09:51:02 +1100248 inicomment $CINDER_API_PASTE_INI filter:authtoken signing_dir
Dean Troyerbc071bc2012-10-01 14:06:44 -0500249
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100250 configure_keystone_authtoken_middleware $CINDER_CONF cinder
Dan Prince82dea7c2013-10-16 18:57:15 -0400251
Ben Nemec03997942013-08-10 09:56:16 -0500252 iniset $CINDER_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Dean Troyer09718332014-07-03 10:46:57 -0500253
Lenny Verkhovskyf63ddd62018-02-25 14:48:05 +0000254 iniset $CINDER_CONF DEFAULT target_helper "$CINDER_ISCSI_HELPER"
Joe Gordon23d6d502015-03-06 15:24:22 -0800255 iniset $CINDER_CONF database connection `database_connection_url cinder`
Dean Troyer67787e62012-05-02 11:48:15 -0500256 iniset $CINDER_CONF DEFAULT api_paste_config $CINDER_API_PASTE_INI
Joe Gordona58382a2013-02-20 12:45:02 -0800257 iniset $CINDER_CONF DEFAULT rootwrap_config "$CINDER_CONF_DIR/rootwrap.conf"
Dan Prince9f22f072013-01-28 09:53:38 -0500258 iniset $CINDER_CONF DEFAULT osapi_volume_extension cinder.api.contrib.standard_extensions
Brian Haley180f5eb2015-06-16 13:14:31 -0400259 iniset $CINDER_CONF DEFAULT osapi_volume_listen $CINDER_SERVICE_LISTEN_ADDRESS
Dean Troyer50ac7922012-09-13 14:02:01 -0500260 iniset $CINDER_CONF DEFAULT state_path $CINDER_STATE_PATH
Joe Gordon23d6d502015-03-06 15:24:22 -0800261 iniset $CINDER_CONF oslo_concurrency lock_path $CINDER_STATE_PATH
Ghanshyam Mannd331fa72019-07-29 10:42:24 +0000262 if [[ $SERVICE_IP_VERSION == 6 ]]; then
263 iniset $CINDER_CONF DEFAULT my_ip "$HOST_IPV6"
264 else
265 iniset $CINDER_CONF DEFAULT my_ip "$HOST_IP"
266 fi
Sean McGinnis32712712017-09-22 07:49:15 -0500267 iniset $CINDER_CONF key_manager backend cinder.keymgr.conf_key_mgr.ConfKeyManager
lkuchlancb8256f2017-08-30 07:36:11 +0300268 iniset $CINDER_CONF key_manager fixed_key $(openssl rand -hex 16)
Kaitlin Farra5b72b02016-01-26 22:46:13 -0500269
Lee Yarwoodfc417172020-12-23 10:52:20 +0000270 # Avoid RPC timeouts in slow CI and test environments by doubling the
271 # default response timeout set by RPC clients. See bug #1873234 for more
272 # details and example failures.
273 iniset $CINDER_CONF DEFAULT rpc_response_timeout 120
274
Dean Troyer09718332014-07-03 10:46:57 -0500275 if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Dean Troyere8a35ac2014-07-25 12:37:41 -0500276 local enabled_backends=""
277 local default_name=""
278 local be be_name be_type
Dean Troyer09718332014-07-03 10:46:57 -0500279 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500280 be_type=${be%%:*}
281 be_name=${be##*:}
282 if type configure_cinder_backend_${be_type} >/dev/null 2>&1; then
283 configure_cinder_backend_${be_type} ${be_name}
Dean Troyer09718332014-07-03 10:46:57 -0500284 fi
Dean Troyera25922b2014-08-28 09:29:47 -0500285 if [[ -z "$default_name" ]]; then
286 default_name=$be_name
Dean Troyer09718332014-07-03 10:46:57 -0500287 fi
Dean Troyere8a35ac2014-07-25 12:37:41 -0500288 enabled_backends+=$be_name,
Dean Troyer09718332014-07-03 10:46:57 -0500289 done
290 iniset $CINDER_CONF DEFAULT enabled_backends ${enabled_backends%,*}
Matt Riedemann6a4aa782014-07-25 13:35:53 -0700291 if [[ -n "$default_name" ]]; then
292 iniset $CINDER_CONF DEFAULT default_volume_type ${default_name}
Dean Troyer09718332014-07-03 10:46:57 -0500293 fi
Patrick Eastdddb2c72016-05-03 17:34:00 -0700294 configure_cinder_image_volume_cache
Dean Troyer09718332014-07-03 10:46:57 -0500295 fi
296
Hironori Shiina01a84d22021-01-11 13:42:46 -0500297 if is_service_enabled c-bak && [[ -n "$CINDER_BACKUP_DRIVER" ]]; then
298 if type configure_cinder_backup_$CINDER_BACKUP_DRIVER >/dev/null 2>&1; then
299 configure_cinder_backup_$CINDER_BACKUP_DRIVER
300 else
301 die "configure_cinder_backup_$CINDER_BACKUP_DRIVER doesn't exist in $CINDER_BACKUPS/$CINDER_BACKUP_DRIVER"
302 fi
Attila Fazekas29834742014-03-09 18:36:42 +0100303 fi
304
Gordon Chung2bfbc772013-08-09 10:55:12 -0400305 if is_service_enabled ceilometer; then
Matt Riedemann45da7772017-03-05 13:07:39 -0500306 iniset $CINDER_CONF oslo_messaging_notifications driver "messagingv2"
Gordon Chung2bfbc772013-08-09 10:55:12 -0400307 fi
308
Dean Troyer560346b2012-12-13 17:05:24 -0600309 if is_service_enabled tls-proxy; then
Sean McGinnisdaf12742017-03-03 18:09:35 +0000310 if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
311 # Set the service port for a proxy to take the original
312 if [ "$CINDER_USE_MOD_WSGI" == "True" ]; then
313 iniset $CINDER_CONF DEFAULT osapi_volume_listen_port $CINDER_SERVICE_PORT_INT
Jens Harbott411c34d2017-08-29 14:40:26 +0000314 iniset $CINDER_CONF oslo_middleware enable_proxy_headers_parsing True
Sean McGinnisdaf12742017-03-03 18:09:35 +0000315 else
316 iniset $CINDER_CONF DEFAULT osapi_volume_listen_port $CINDER_SERVICE_PORT_INT
317 iniset $CINDER_CONF DEFAULT public_endpoint $CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT
318 iniset $CINDER_CONF DEFAULT osapi_volume_base_URL $CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT
319 fi
320 fi
Dean Troyer560346b2012-12-13 17:05:24 -0600321 fi
322
Dean Troyer4d3049e2012-11-06 20:38:14 -0600323 if [ "$SYSLOG" != "False" ]; then
324 iniset $CINDER_CONF DEFAULT use_syslog True
325 fi
326
Brant Knudson2dd110c2015-03-14 12:39:14 -0500327 iniset_rpc_backend cinder $CINDER_CONF
Gary Kottonf71bf192012-08-06 11:15:36 -0400328
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700329 # Format logging
Sean Dague9751be62016-04-05 12:08:57 -0400330 setup_logging $CINDER_CONF $CINDER_USE_MOD_WSGI
Mate Lakatb2fdafe2012-11-20 15:52:21 +0000331
Sean McGinnisdaf12742017-03-03 18:09:35 +0000332 write_uwsgi_config "$CINDER_UWSGI_CONF" "$CINDER_UWSGI" "/volume"
Anton Arefiev651cb1a2015-09-01 10:55:20 +0300333
john-griffithd0860cc2014-01-23 11:31:10 -0700334 if [[ -r $CINDER_PLUGINS/$CINDER_DRIVER ]]; then
335 configure_cinder_driver
Mate Lakatb2fdafe2012-11-20 15:52:21 +0000336 fi
Ian Wienand0db17132013-06-26 22:31:48 +1000337
Dean Troyer05bd7b82014-09-16 17:25:33 -0500338 iniset $CINDER_CONF DEFAULT osapi_volume_workers "$API_WORKERS"
Rob Crittenden18d47782014-03-19 17:47:42 -0400339
Matthew Treinish1fa65362017-06-23 22:32:37 +0000340 iniset $CINDER_CONF DEFAULT glance_api_servers "$GLANCE_URL"
Sean Daguef3b2f4c2017-04-13 10:11:48 -0400341 if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400342 iniset $CINDER_CONF DEFAULT glance_protocol https
Rob Crittenden4b109292014-10-21 18:17:48 -0400343 iniset $CINDER_CONF DEFAULT glance_ca_certificates_file $SSL_BUNDLE_FILE
Rob Crittenden18d47782014-03-19 17:47:42 -0400344 fi
345
Gyorgy Szombathelyic04ac032017-05-23 16:52:35 +0200346 # Set nova credentials (used for os-assisted-snapshots)
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100347 configure_keystone_authtoken_middleware $CINDER_CONF nova nova
Gyorgy Szombathelyic04ac032017-05-23 16:52:35 +0200348 iniset $CINDER_CONF nova region_name "$REGION_NAME"
Marian Horban7159b4b2015-10-22 15:47:49 -0400349 iniset $CINDER_CONF DEFAULT graceful_shutdown_timeout "$SERVICE_GRACEFUL_SHUTDOWN_TIMEOUT"
Mehdi Abaakouk52b10742016-12-01 16:11:17 +0100350
Davanum Srinivasc0d16c22017-05-19 10:23:46 -0400351 if [[ ! -z "$CINDER_COORDINATION_URL" ]]; then
352 iniset $CINDER_CONF coordination backend_url "$CINDER_COORDINATION_URL"
353 elif is_service_enabled etcd3; then
Davanum Srinivas27367be2017-11-28 08:20:48 -0500354 iniset $CINDER_CONF coordination backend_url "etcd3+http://${SERVICE_HOST}:$ETCD_PORT"
Mehdi Abaakouk52b10742016-12-01 16:11:17 +0100355 fi
Dean Troyer67787e62012-05-02 11:48:15 -0500356}
357
Dean Troyer671c16e2012-12-13 16:22:38 -0600358# create_cinder_accounts() - Set up common required cinder accounts
359
360# Tenant User Roles
361# ------------------------------------------------------------------
362# service cinder admin # if enabled
363
364# Migrated from keystone_data.sh
Ian Wienandaee18c72014-02-21 15:35:08 +1100365function create_cinder_accounts {
Dean Troyer671c16e2012-12-13 16:22:38 -0600366 # Cinder
367 if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100368
Jamie Lennoxe8bc2b82015-02-10 20:38:56 +1100369 create_service_user "cinder"
Bartosz Górski0abde392014-02-28 14:15:19 +0100370
Eric Friedcda2cb52017-10-10 11:49:06 -0500371 # block-storage is the official service type
372 get_or_create_service "cinder" "block-storage" "Cinder Volume Service"
Sean McGinnisdaf12742017-03-03 18:09:35 +0000373 if [ "$CINDER_USE_MOD_WSGI" == "False" ]; then
374 get_or_create_endpoint \
Eric Friedcda2cb52017-10-10 11:49:06 -0500375 "block-storage" \
376 "$REGION_NAME" \
Monty Taylor69057d42018-05-01 05:57:21 -0500377 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v3/\$(project_id)s"
Eric Friedcda2cb52017-10-10 11:49:06 -0500378
Sean McGinnisdaf12742017-03-03 18:09:35 +0000379 get_or_create_service "cinderv2" "volumev2" "Cinder Volume Service V2"
380 get_or_create_endpoint \
381 "volumev2" \
382 "$REGION_NAME" \
383 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v2/\$(project_id)s"
Alex Meade06c7a442016-04-01 13:18:32 -0400384
Sean McGinnisdaf12742017-03-03 18:09:35 +0000385 get_or_create_service "cinderv3" "volumev3" "Cinder Volume Service V3"
386 get_or_create_endpoint \
387 "volumev3" \
388 "$REGION_NAME" \
389 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v3/\$(project_id)s"
390 else
391 get_or_create_endpoint \
Eric Friedcda2cb52017-10-10 11:49:06 -0500392 "block-storage" \
393 "$REGION_NAME" \
Monty Taylor69057d42018-05-01 05:57:21 -0500394 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST/volume/v3/\$(project_id)s"
Eric Friedcda2cb52017-10-10 11:49:06 -0500395
Sean McGinnisdaf12742017-03-03 18:09:35 +0000396 get_or_create_service "cinderv2" "volumev2" "Cinder Volume Service V2"
397 get_or_create_endpoint \
398 "volumev2" \
399 "$REGION_NAME" \
400 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST/volume/v2/\$(project_id)s"
401
402 get_or_create_service "cinderv3" "volumev3" "Cinder Volume Service V3"
403 get_or_create_endpoint \
404 "volumev3" \
405 "$REGION_NAME" \
406 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST/volume/v3/\$(project_id)s"
407 fi
Patrick Eastdddb2c72016-05-03 17:34:00 -0700408
409 configure_cinder_internal_tenant
Dean Troyer671c16e2012-12-13 16:22:38 -0600410 fi
411}
412
Dean Troyer67787e62012-05-02 11:48:15 -0500413# init_cinder() - Initialize database and volume group
Ian Wienandaee18c72014-02-21 15:35:08 +1100414function init_cinder {
Terry Wilson428af5a2012-11-01 16:12:39 -0400415 if is_service_enabled $DATABASE_BACKENDS; then
Dean Troyerf03bafe2013-02-12 10:58:28 -0600416 # (Re)create cinder database
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200417 recreate_database cinder
Dean Troyer67787e62012-05-02 11:48:15 -0500418
Clark Boylan633dbc32017-06-14 12:09:21 -0700419 time_start "dbsync"
Dean Troyerf03bafe2013-02-12 10:58:28 -0600420 # Migrate cinder database
Einst Crazy4f55c2d2016-05-04 08:14:01 +0000421 $CINDER_BIN_DIR/cinder-manage --config-file $CINDER_CONF db sync
Clark Boylan633dbc32017-06-14 12:09:21 -0700422 time_stop "dbsync"
Dean Troyer67787e62012-05-02 11:48:15 -0500423 fi
424
Dean Troyer09718332014-07-03 10:46:57 -0500425 if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Dean Troyere8a35ac2014-07-25 12:37:41 -0500426 local be be_name be_type
Dean Troyer09718332014-07-03 10:46:57 -0500427 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500428 be_type=${be%%:*}
429 be_name=${be##*:}
430 if type init_cinder_backend_${be_type} >/dev/null 2>&1; then
Maru Newbyc070a3d2015-01-27 17:44:44 +0000431 # Always init the default volume group for lvm.
432 if [[ "$be_type" == "lvm" ]]; then
433 init_default_lvm_volume_group
434 fi
Dean Troyere8a35ac2014-07-25 12:37:41 -0500435 init_cinder_backend_${be_type} ${be_name}
Vincent Untz0230aa82012-06-14 08:51:01 +0200436 fi
Dean Troyer09718332014-07-03 10:46:57 -0500437 done
Dean Troyer67787e62012-05-02 11:48:15 -0500438 fi
Dean Troyerbc071bc2012-10-01 14:06:44 -0500439
Hironori Shiina01a84d22021-01-11 13:42:46 -0500440 if is_service_enabled c-bak && [[ -n "$CINDER_BACKUP_DRIVER" ]]; then
441 if type init_cinder_backup_$CINDER_BACKUP_DRIVER >/dev/null 2>&1; then
442 init_cinder_backup_$CINDER_BACKUP_DRIVER
443 fi
444 fi
445
Dean Troyer09718332014-07-03 10:46:57 -0500446 mkdir -p $CINDER_STATE_PATH/volumes
Dean Troyer67787e62012-05-02 11:48:15 -0500447}
448
449# install_cinder() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100450function install_cinder {
Dean Troyer67787e62012-05-02 11:48:15 -0500451 git_clone $CINDER_REPO $CINDER_DIR $CINDER_BRANCH
Sean Dague4bf9d7a2013-04-01 16:41:39 -0400452 setup_develop $CINDER_DIR
Ian Wienanda881b882017-04-19 15:42:34 +1000453 if [[ "$CINDER_ISCSI_HELPER" == "tgtadm" ]]; then
454 install_package tgt
Attila Fazekas501aaeb2017-12-11 12:01:32 +0100455 elif [[ "$CINDER_ISCSI_HELPER" == "lioadm" ]]; then
Xinliang Liub0667072020-06-28 08:55:28 +0000456 if is_ubuntu; then
whoami-rajatf28c75f2019-03-13 23:41:05 +0530457 # TODO(frickler): Workaround for https://launchpad.net/bugs/1819819
458 sudo mkdir -p /etc/target
459
Eric Harney363acd92019-03-04 17:50:47 -0500460 install_package targetcli-fb
461 else
462 install_package targetcli
463 fi
Attila Fazekasc70605d2015-01-26 15:44:47 +0100464 fi
Dean Troyer253a1a32013-04-01 18:23:22 -0500465}
Sean Dague4bf9d7a2013-04-01 16:41:39 -0400466
Dean Troyer253a1a32013-04-01 18:23:22 -0500467# install_cinderclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100468function install_cinderclient {
Ivan Kolodyazhny8d0d3112016-05-26 23:41:49 +0300469 if use_library_from_git "python-brick-cinderclient-ext"; then
470 git_clone_by_name "python-brick-cinderclient-ext"
471 setup_dev_lib "python-brick-cinderclient-ext"
472 fi
473
Sean Daguee08ab102014-11-13 17:09:28 -0500474 if use_library_from_git "python-cinderclient"; then
475 git_clone_by_name "python-cinderclient"
476 setup_dev_lib "python-cinderclient"
477 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-cinderclient"]}/tools/,/etc/bash_completion.d/}cinder.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100478 fi
Dean Troyer67787e62012-05-02 11:48:15 -0500479}
480
Steve Baker18225d92013-04-14 12:48:41 -0700481# apply config.d approach for cinder volumes directory
Ian Wienandaee18c72014-02-21 15:35:08 +1100482function _configure_tgt_for_config_d {
Steve Baker18225d92013-04-14 12:48:41 -0700483 if [[ ! -d /etc/tgt/stack.d/ ]]; then
484 sudo ln -sf $CINDER_STATE_PATH/volumes /etc/tgt/stack.d
Jordan Pittiera263e7d2016-01-07 19:40:44 +0100485 fi
486 if ! grep -q "include /etc/tgt/stack.d/*" /etc/tgt/targets.conf; then
Steve Baker18225d92013-04-14 12:48:41 -0700487 echo "include /etc/tgt/stack.d/*" | sudo tee -a /etc/tgt/targets.conf
Mate Lakata39caac2012-09-03 15:45:53 +0100488 fi
489}
490
Sean Dague0eebeb42017-08-30 14:16:58 -0400491# start_cinder() - Start running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100492function start_cinder {
Rob Crittenden18d47782014-03-19 17:47:42 -0400493 local service_port=$CINDER_SERVICE_PORT
494 local service_protocol=$CINDER_SERVICE_PROTOCOL
Sean McGinnisdaf12742017-03-03 18:09:35 +0000495 local cinder_url
Eric Harney8ea86602017-08-02 11:40:41 -0400496 if is_service_enabled tls-proxy && [ "$CINDER_USE_MOD_WSGI" == "False" ]; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400497 service_port=$CINDER_SERVICE_PORT_INT
498 service_protocol="http"
499 fi
Attila Fazekasc70605d2015-01-26 15:44:47 +0100500 if [ "$CINDER_ISCSI_HELPER" = "tgtadm" ]; then
501 if is_service_enabled c-vol; then
502 # Delete any old stack.conf
503 sudo rm -f /etc/tgt/conf.d/stack.conf
504 _configure_tgt_for_config_d
505 if is_ubuntu; then
506 sudo service tgt restart
Dirk Mueller6bc089f2015-06-01 12:39:12 +0200507 elif is_suse; then
508 # NOTE(dmllr): workaround restart bug
509 # https://bugzilla.suse.com/show_bug.cgi?id=934642
510 stop_service tgtd
511 start_service tgtd
Attila Fazekasc70605d2015-01-26 15:44:47 +0100512 else
Dirk Mueller6bc089f2015-06-01 12:39:12 +0200513 restart_service tgtd
Attila Fazekasc70605d2015-01-26 15:44:47 +0100514 fi
515 # NOTE(gfidente): ensure tgtd is running in debug mode
516 sudo tgtadm --mode system --op update --name debug --value on
Dean Troyer67787e62012-05-02 11:48:15 -0500517 fi
518 fi
519
Sean McGinnisdaf12742017-03-03 18:09:35 +0000520 if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
521 if [ "$CINDER_USE_MOD_WSGI" == "False" ]; then
Clark Boylan2dfca042017-05-25 14:57:19 -0700522 run_process c-api "$CINDER_BIN_DIR/cinder-api --config-file $CINDER_CONF"
Sean McGinnisdaf12742017-03-03 18:09:35 +0000523 cinder_url=$service_protocol://$SERVICE_HOST:$service_port
Jens Harbott52609c62017-08-28 11:49:28 +0000524 # Start proxy if tls enabled
525 if is_service_enabled tls-proxy; then
526 start_tls_proxy cinder '*' $CINDER_SERVICE_PORT $CINDER_SERVICE_HOST $CINDER_SERVICE_PORT_INT
Sean McGinnisdaf12742017-03-03 18:09:35 +0000527 fi
528 else
Ian Wienand312517d2018-06-22 22:23:29 +1000529 run_process "c-api" "$(which uwsgi) --procname-prefix cinder-api --ini $CINDER_UWSGI_CONF"
Sean McGinnisdaf12742017-03-03 18:09:35 +0000530 cinder_url=$service_protocol://$SERVICE_HOST/volume/v3
Clark Boylan2dfca042017-05-25 14:57:19 -0700531 fi
Sean McGinnisdaf12742017-03-03 18:09:35 +0000532 fi
Eli Qiao4af6eea2017-02-28 15:13:02 +0800533
Sean McGinnisdaf12742017-03-03 18:09:35 +0000534 echo "Waiting for Cinder API to start..."
535 if ! wait_for_service $SERVICE_TIMEOUT $cinder_url; then
536 die $LINENO "c-api did not start"
Dean Troyer09718332014-07-03 10:46:57 -0500537 fi
538
Dean Troyer3159a822014-08-27 14:13:58 -0500539 run_process c-sch "$CINDER_BIN_DIR/cinder-scheduler --config-file $CINDER_CONF"
540 run_process c-bak "$CINDER_BIN_DIR/cinder-backup --config-file $CINDER_CONF"
541 run_process c-vol "$CINDER_BIN_DIR/cinder-volume --config-file $CINDER_CONF"
John Griffithe6d4fe52013-07-15 17:35:54 -0600542
543 # NOTE(jdg): For cinder, startup order matters. To ensure that repor_capabilities is received
544 # by the scheduler start the cinder-volume service last (or restart it) after the scheduler
545 # has started. This is a quick fix for lp bug/1189595
Dean Troyer67787e62012-05-02 11:48:15 -0500546}
547
Dean Troyer699a29f2012-09-10 14:10:27 -0500548# stop_cinder() - Stop running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100549function stop_cinder {
Sean McGinnisdaf12742017-03-03 18:09:35 +0000550 stop_process c-api
Sean Dague0eebeb42017-08-30 14:16:58 -0400551 stop_process c-bak
552 stop_process c-sch
553 stop_process c-vol
Dean Troyer67787e62012-05-02 11:48:15 -0500554}
Dean Troyer7903b792012-09-13 17:16:12 -0500555
Dean Troyer09718332014-07-03 10:46:57 -0500556# create_volume_types() - Create Cinder's configured volume types
557function create_volume_types {
558 # Create volume types
559 if is_service_enabled c-api && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Jamie Lennox494f7cd2015-05-29 08:33:03 +0000560 local be be_name
Dean Troyer09718332014-07-03 10:46:57 -0500561 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500562 be_name=${be##*:}
Ivan Kolodyazhny165199e2017-11-06 18:17:39 +0200563 # NOTE (e0ne): openstack client doesn't work with cinder in noauth mode
564 if is_service_enabled keystone; then
565 openstack --os-region-name="$REGION_NAME" volume type create --property volume_backend_name="${be_name}" ${be_name}
566 else
567 # TODO (e0ne): use openstack client once it will support cinder in noauth mode:
568 # https://bugs.launchpad.net/python-cinderclient/+bug/1755279
569 local cinder_url
570 cinder_url=$CINDER_SERVICE_PROTOCOL://$SERVICE_HOST:$CINDER_SERVICE_PORT/v3
571 OS_USER_ID=$OS_USERNAME OS_PROJECT_ID=$OS_PROJECT_NAME cinder --os-auth-type noauth --os-endpoint=$cinder_url type-create ${be_name}
572 OS_USER_ID=$OS_USERNAME OS_PROJECT_ID=$OS_PROJECT_NAME cinder --os-auth-type noauth --os-endpoint=$cinder_url type-key ${be_name} set volume_backend_name=${be_name}
573 fi
Dean Troyer09718332014-07-03 10:46:57 -0500574 done
Dan Smithb4bba2f2021-02-04 23:24:17 +0000575
576 # Increase quota for the service project if glance is using cinder,
577 # since it's likely to occasionally go above the default 10 in parallel
578 # test execution.
579 if [[ "$USE_CINDER_FOR_GLANCE" == "True" ]]; then
580 openstack --os-region-name="$REGION_NAME" \
581 quota set --volumes 50 "$SERVICE_PROJECT_NAME"
582 fi
Dean Troyer09718332014-07-03 10:46:57 -0500583 fi
584}
585
586# Compatibility for Grenade
587
588function create_cinder_volume_group {
589 # During a transition period Grenade needs to have this function defined
590 # It is effectively a no-op in the Grenade 'target' use case
591 :
592}
593
Patrick Eastdddb2c72016-05-03 17:34:00 -0700594function configure_cinder_internal_tenant {
595 # Re-use the Cinder service account for simplicity.
596 iniset $CINDER_CONF DEFAULT cinder_internal_tenant_project_id $(get_or_create_project $SERVICE_PROJECT_NAME)
597 iniset $CINDER_CONF DEFAULT cinder_internal_tenant_user_id $(get_or_create_user "cinder")
598}
599
600function configure_cinder_image_volume_cache {
601 # Expect CINDER_CACHE_ENABLED_FOR_BACKENDS to be a list of backends
602 # similar to CINDER_ENABLED_BACKENDS with NAME:TYPE where NAME will
603 # be the backend specific configuration stanza in cinder.conf.
604 for be in ${CINDER_CACHE_ENABLED_FOR_BACKENDS//,/ }; do
605 local be_name=${be##*:}
606
607 iniset $CINDER_CONF $be_name image_volume_cache_enabled $CINDER_IMG_CACHE_ENABLED
608
609 if [[ -n $CINDER_IMG_CACHE_SIZE_GB ]]; then
610 iniset $CINDER_CONF $be_name image_volume_cache_max_size_gb $CINDER_IMG_CACHE_SIZE_GB
611 fi
612
613 if [[ -n $CINDER_IMG_CACHE_SIZE_COUNT ]]; then
614 iniset $CINDER_CONF $be_name image_volume_cache_max_count $CINDER_IMG_CACHE_SIZE_COUNT
615 fi
616 done
617}
618
Dean Troyercc6b4432013-04-08 15:38:03 -0500619
Dean Troyer7903b792012-09-13 17:16:12 -0500620# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +1100621$_XTRACE_CINDER
Sean Dague584d90e2013-03-29 14:34:53 -0400622
Adam Spiers6a5aa7c2013-10-24 11:27:02 +0100623# Tell emacs to use shell-script-mode
624## Local variables:
625## mode: shell-script
626## End: