blob: ed8349aad64bca78c3132a056fb4959d18d208a9 [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Dean Troyer67787e62012-05-02 11:48:15 -05003# lib/cinder
Dean Troyer6d04fd72012-12-21 11:03:37 -06004# Install and start **Cinder** volume service
Dean Troyer67787e62012-05-02 11:48:15 -05005
6# Dependencies:
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01007#
Dean Troyer67787e62012-05-02 11:48:15 -05008# - functions
Attila Fazekas91b8d132013-01-06 22:40:09 +01009# - DEST, DATA_DIR, STACK_USER must be defined
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010010# - SERVICE_{TENANT_NAME|PASSWORD} must be defined
11# - ``KEYSTONE_TOKEN_FORMAT`` must be defined
Dean Troyer67787e62012-05-02 11:48:15 -050012
13# stack.sh
14# ---------
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010015# - install_cinder
16# - configure_cinder
17# - init_cinder
18# - start_cinder
19# - stop_cinder
20# - cleanup_cinder
Dean Troyer67787e62012-05-02 11:48:15 -050021
Dean Troyer7903b792012-09-13 17:16:12 -050022# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +110023_XTRACE_CINDER=$(set +o | grep xtrace)
Dean Troyer7903b792012-09-13 17:16:12 -050024set +o xtrace
Dean Troyer67787e62012-05-02 11:48:15 -050025
26
27# Defaults
28# --------
29
Mate Lakatb2fdafe2012-11-20 15:52:21 +000030# set up default driver
31CINDER_DRIVER=${CINDER_DRIVER:-default}
john-griffithd0860cc2014-01-23 11:31:10 -070032CINDER_PLUGINS=$TOP_DIR/lib/cinder_plugins
Dean Troyer09718332014-07-03 10:46:57 -050033CINDER_BACKENDS=$TOP_DIR/lib/cinder_backends
john-griffithd0860cc2014-01-23 11:31:10 -070034
35# grab plugin config if specified via cinder_driver
36if [[ -r $CINDER_PLUGINS/$CINDER_DRIVER ]]; then
37 source $CINDER_PLUGINS/$CINDER_DRIVER
38fi
Mate Lakatb2fdafe2012-11-20 15:52:21 +000039
Dean Troyer67787e62012-05-02 11:48:15 -050040# set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050041GITDIR["python-cinderclient"]=$DEST/python-cinderclient
Ivan Kolodyazhny8d0d3112016-05-26 23:41:49 +030042GITDIR["python-brick-cinderclient-ext"]=$DEST/python-brick-cinderclient-ext
Dean Troyer67787e62012-05-02 11:48:15 -050043CINDER_DIR=$DEST/cinder
Dean Troyer6aaad5f2015-02-18 07:09:04 -060044
45# Cinder virtual environment
46if [[ ${USE_VENV} = True ]]; then
47 PROJECT_VENV["cinder"]=${CINDER_DIR}.venv
48 CINDER_BIN_DIR=${PROJECT_VENV["cinder"]}/bin
49else
50 CINDER_BIN_DIR=$(get_python_exec_prefix)
51fi
52
Dean Troyer50ac7922012-09-13 14:02:01 -050053CINDER_STATE_PATH=${CINDER_STATE_PATH:=$DATA_DIR/cinder}
Ian Wienand1f82f432017-10-04 09:51:02 +110054CINDER_AUTH_CACHE_DIR=${CINDER_AUTH_CACHE_DIR:-/var/cache/cinder}
Dean Troyer671c16e2012-12-13 16:22:38 -060055
Dean Troyer50ac7922012-09-13 14:02:01 -050056CINDER_CONF_DIR=/etc/cinder
57CINDER_CONF=$CINDER_CONF_DIR/cinder.conf
Sean McGinnisdaf12742017-03-03 18:09:35 +000058CINDER_UWSGI=$CINDER_BIN_DIR/cinder-wsgi
59CINDER_UWSGI_CONF=$CINDER_CONF_DIR/cinder-api-uwsgi.ini
Dean Troyer671c16e2012-12-13 16:22:38 -060060CINDER_API_PASTE_INI=$CINDER_CONF_DIR/api-paste.ini
Dean Troyer50ac7922012-09-13 14:02:01 -050061
Dean Troyer560346b2012-12-13 17:05:24 -060062# Public facing bits
Sean Daguef3b2f4c2017-04-13 10:11:48 -040063if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -040064 CINDER_SERVICE_PROTOCOL="https"
65fi
Dean Troyer560346b2012-12-13 17:05:24 -060066CINDER_SERVICE_HOST=${CINDER_SERVICE_HOST:-$SERVICE_HOST}
67CINDER_SERVICE_PORT=${CINDER_SERVICE_PORT:-8776}
68CINDER_SERVICE_PORT_INT=${CINDER_SERVICE_PORT_INT:-18776}
69CINDER_SERVICE_PROTOCOL=${CINDER_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL}
Jens Harbottdc7b4292017-09-19 10:52:32 +000070CINDER_SERVICE_LISTEN_ADDRESS=${CINDER_SERVICE_LISTEN_ADDRESS:-$(ipv6_unquote $SERVICE_LISTEN_ADDRESS)}
Dean Troyer560346b2012-12-13 17:05:24 -060071
John Griffithce8e6f62015-05-12 17:28:59 -060072# What type of LVM device should Cinder use for LVM backend
Sean McGinnis486376e2017-09-05 19:56:06 -050073# Defaults to auto, which will do thin provisioning if it's a fresh
74# volume group, otherwise it will do thick. The other valid choices are
75# default, which is thick, or thin, which as the name implies utilizes lvm
76# thin provisioning.
77CINDER_LVM_TYPE=${CINDER_LVM_TYPE:-auto}
Dean Troyer09718332014-07-03 10:46:57 -050078
Dean Troyer09718332014-07-03 10:46:57 -050079# Default backends
80# The backend format is type:name where type is one of the supported backend
81# types (lvm, nfs, etc) and name is the identifier used in the Cinder
82# configuration and for the volume type name. Multiple backends are
83# comma-separated.
Dean Troyer311f4872014-12-18 16:31:34 -060084# The old ``CINDER_MULTI_LVM_BACKEND=True`` setting had a default of:
85# CINDER_ENABLED_BACKENDS=${CINDER_ENABLED_BACKENDS:-lvm:lvmdriver-1,lvm:lvmdriver-2}
86CINDER_ENABLED_BACKENDS=${CINDER_ENABLED_BACKENDS:-lvm:lvmdriver-1}
Dean Troyer09718332014-07-03 10:46:57 -050087
Joe D'Andreadfcc3872015-04-29 15:39:17 -040088CINDER_VOLUME_CLEAR=${CINDER_VOLUME_CLEAR:-${CINDER_VOLUME_CLEAR_DEFAULT:-zero}}
89CINDER_VOLUME_CLEAR=$(echo ${CINDER_VOLUME_CLEAR} | tr '[:upper:]' '[:lower:]')
Dean Troyerb7490da2013-03-18 16:07:56 -050090
aojeagarcia61f6caf2018-09-24 12:34:15 +020091# Centos7 and OpenSUSE switched to using LIO and that's all that's supported,
92# although the tgt bits are in EPEL and OpenSUSE we don't want that for CI
93if is_fedora || is_suse; then
Ian Wienanda881b882017-04-19 15:42:34 +100094 CINDER_ISCSI_HELPER=${CINDER_ISCSI_HELPER:-lioadm}
95 if [[ ${CINDER_ISCSI_HELPER} != "lioadm" ]]; then
Lenny Verkhovskyf63ddd62018-02-25 14:48:05 +000096 die "lioadm is the only valid Cinder target_helper config on this platform"
Ian Wienanda881b882017-04-19 15:42:34 +100097 fi
98else
99 CINDER_ISCSI_HELPER=${CINDER_ISCSI_HELPER:-tgtadm}
100fi
Attila Fazekasc70605d2015-01-26 15:44:47 +0100101
Sean McGinnisdaf12742017-03-03 18:09:35 +0000102# Toggle for deploying Cinder under a wsgi server. Legacy mod_wsgi
103# reference should be cleaned up to more accurately refer to uwsgi.
104CINDER_USE_MOD_WSGI=${CINDER_USE_MOD_WSGI:-True}
Dean Troyercc6b4432013-04-08 15:38:03 -0500105
Dean Troyer09718332014-07-03 10:46:57 -0500106# Source the enabled backends
107if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
108 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500109 be_type=${be%%:*}
110 be_name=${be##*:}
111 if [[ -r $CINDER_BACKENDS/${be_type} ]]; then
112 source $CINDER_BACKENDS/${be_type}
Dean Troyer09718332014-07-03 10:46:57 -0500113 fi
114 done
115fi
116
Patrick Eastdddb2c72016-05-03 17:34:00 -0700117# Environment variables to configure the image-volume cache
118CINDER_IMG_CACHE_ENABLED=${CINDER_IMG_CACHE_ENABLED:-True}
119
120# For limits, if left unset, it will use cinder defaults of 0 for unlimited
121CINDER_IMG_CACHE_SIZE_GB=${CINDER_IMG_CACHE_SIZE_GB:-}
122CINDER_IMG_CACHE_SIZE_COUNT=${CINDER_IMG_CACHE_SIZE_COUNT:-}
123
124# Configure which cinder backends will have the image-volume cache, this takes the same
125# form as the CINDER_ENABLED_BACKENDS config option. By default it will
126# enable the cache for all cinder backends.
127CINDER_CACHE_ENABLED_FOR_BACKENDS=${CINDER_CACHE_ENABLED_FOR_BACKENDS:-$CINDER_ENABLED_BACKENDS}
Dean Troyer09718332014-07-03 10:46:57 -0500128
Dean Troyercc6b4432013-04-08 15:38:03 -0500129# Functions
130# ---------
Dean Troyere4fa7212014-01-15 15:04:49 -0600131
132# Test if any Cinder services are enabled
133# is_cinder_enabled
134function is_cinder_enabled {
Clark Boylan902158b2017-05-30 14:11:09 -0700135 [[ ,${DISABLED_SERVICES} =~ ,"cinder" ]] && return 1
Dean Troyere4fa7212014-01-15 15:04:49 -0600136 [[ ,${ENABLED_SERVICES} =~ ,"c-" ]] && return 0
137 return 1
138}
139
Anton Arefiev651cb1a2015-09-01 10:55:20 +0300140# _cinder_cleanup_apache_wsgi() - Remove wsgi files, disable and remove apache vhost file
141function _cinder_cleanup_apache_wsgi {
142 sudo rm -f $(apache_site_config_for osapi-volume)
143}
144
Dean Troyer67787e62012-05-02 11:48:15 -0500145# cleanup_cinder() - Remove residual data files, anything left over from previous
146# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100147function cleanup_cinder {
Sean Dague252f2f52012-12-20 16:41:57 -0500148 # ensure the volume group is cleared up because fails might
149 # leave dead volumes in the group
Attila Fazekasc70605d2015-01-26 15:44:47 +0100150 if [ "$CINDER_ISCSI_HELPER" = "tgtadm" ]; then
Ian Wienandada886d2015-10-07 14:06:26 +1100151 local targets
152 targets=$(sudo tgtadm --op show --mode target)
Attila Fazekasc70605d2015-01-26 15:44:47 +0100153 if [ $? -ne 0 ]; then
154 # If tgt driver isn't running this won't work obviously
155 # So check the response and restart if need be
156 echo "tgtd seems to be in a bad state, restarting..."
157 if is_ubuntu; then
158 restart_service tgt
159 else
160 restart_service tgtd
161 fi
162 targets=$(sudo tgtadm --op show --mode target)
Sean Dague252f2f52012-12-20 16:41:57 -0500163 fi
Sean Dague252f2f52012-12-20 16:41:57 -0500164
Attila Fazekasc70605d2015-01-26 15:44:47 +0100165 if [[ -n "$targets" ]]; then
166 local iqn_list=( $(grep --no-filename -r iqn $SCSI_PERSIST_DIR | sed 's/<target //' | sed 's/>//') )
167 for i in "${iqn_list[@]}"; do
168 echo removing iSCSI target: $i
169 sudo tgt-admin --delete $i
170 done
171 fi
Sean Dague252f2f52012-12-20 16:41:57 -0500172
Attila Fazekasc70605d2015-01-26 15:44:47 +0100173 if is_ubuntu; then
174 stop_service tgt
175 else
176 stop_service tgtd
177 fi
Sean Dague252f2f52012-12-20 16:41:57 -0500178 else
Attila Fazekasc70605d2015-01-26 15:44:47 +0100179 sudo cinder-rtstool get-targets | sudo xargs -rn 1 cinder-rtstool delete
Sean Dague252f2f52012-12-20 16:41:57 -0500180 fi
181
Dean Troyer09718332014-07-03 10:46:57 -0500182 if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Dean Troyere8a35ac2014-07-25 12:37:41 -0500183 local be be_name be_type
Dean Troyer09718332014-07-03 10:46:57 -0500184 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500185 be_type=${be%%:*}
186 be_name=${be##*:}
187 if type cleanup_cinder_backend_${be_type} >/dev/null 2>&1; then
188 cleanup_cinder_backend_${be_type} ${be_name}
Dean Troyer09718332014-07-03 10:46:57 -0500189 fi
190 done
Jérôme Gallarddda2b7a2013-02-22 17:28:10 +0100191 fi
Anton Arefiev651cb1a2015-09-01 10:55:20 +0300192
Sean McGinnisdaf12742017-03-03 18:09:35 +0000193 stop_process "c-api"
194 remove_uwsgi_config "$CINDER_UWSGI_CONF" "$CINDER_UWSGI"
Dean Troyer67787e62012-05-02 11:48:15 -0500195}
196
Thierry Carrez63e17842014-01-10 14:23:03 +0100197# configure_cinder() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +1100198function configure_cinder {
Dean Troyer8421c2b2015-03-16 13:52:19 -0500199 sudo install -d -o $STACK_USER -m 755 $CINDER_CONF_DIR
Thierry Carrez63e17842014-01-10 14:23:03 +0100200
Yalei Wangcecbd1f2015-01-05 17:05:47 +0800201 rm -f $CINDER_CONF
202
Ian Wienandc6782412015-05-14 10:01:53 +1000203 configure_rootwrap cinder
John Griffith4e823ff2012-07-20 13:18:17 -0600204
TommyLike401de4d2017-05-04 17:56:22 +0800205 if [[ -f "$CINDER_DIR/etc/cinder/resource_filters.json" ]]; then
206 cp -p "$CINDER_DIR/etc/cinder/resource_filters.json" "$CINDER_CONF_DIR/resource_filters.json"
207 fi
208
Dean Troyer67787e62012-05-02 11:48:15 -0500209 cp $CINDER_DIR/etc/cinder/api-paste.ini $CINDER_API_PASTE_INI
Dan Prince82dea7c2013-10-16 18:57:15 -0400210
211 inicomment $CINDER_API_PASTE_INI filter:authtoken auth_host
212 inicomment $CINDER_API_PASTE_INI filter:authtoken auth_port
213 inicomment $CINDER_API_PASTE_INI filter:authtoken auth_protocol
Jamie Lennoxbd24a8d2013-09-20 16:26:42 +1000214 inicomment $CINDER_API_PASTE_INI filter:authtoken cafile
Dan Prince82dea7c2013-10-16 18:57:15 -0400215 inicomment $CINDER_API_PASTE_INI filter:authtoken admin_tenant_name
216 inicomment $CINDER_API_PASTE_INI filter:authtoken admin_user
217 inicomment $CINDER_API_PASTE_INI filter:authtoken admin_password
Ian Wienand1f82f432017-10-04 09:51:02 +1100218 inicomment $CINDER_API_PASTE_INI filter:authtoken signing_dir
Dean Troyerbc071bc2012-10-01 14:06:44 -0500219
Ian Wienand1f82f432017-10-04 09:51:02 +1100220 configure_auth_token_middleware $CINDER_CONF cinder $CINDER_AUTH_CACHE_DIR
Dan Prince82dea7c2013-10-16 18:57:15 -0400221
Ben Nemec03997942013-08-10 09:56:16 -0500222 iniset $CINDER_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Dean Troyer09718332014-07-03 10:46:57 -0500223
Lenny Verkhovskyf63ddd62018-02-25 14:48:05 +0000224 iniset $CINDER_CONF DEFAULT target_helper "$CINDER_ISCSI_HELPER"
Joe Gordon23d6d502015-03-06 15:24:22 -0800225 iniset $CINDER_CONF database connection `database_connection_url cinder`
Dean Troyer67787e62012-05-02 11:48:15 -0500226 iniset $CINDER_CONF DEFAULT api_paste_config $CINDER_API_PASTE_INI
Joe Gordona58382a2013-02-20 12:45:02 -0800227 iniset $CINDER_CONF DEFAULT rootwrap_config "$CINDER_CONF_DIR/rootwrap.conf"
Dan Prince9f22f072013-01-28 09:53:38 -0500228 iniset $CINDER_CONF DEFAULT osapi_volume_extension cinder.api.contrib.standard_extensions
Brian Haley180f5eb2015-06-16 13:14:31 -0400229 iniset $CINDER_CONF DEFAULT osapi_volume_listen $CINDER_SERVICE_LISTEN_ADDRESS
Dean Troyer50ac7922012-09-13 14:02:01 -0500230 iniset $CINDER_CONF DEFAULT state_path $CINDER_STATE_PATH
Joe Gordon23d6d502015-03-06 15:24:22 -0800231 iniset $CINDER_CONF oslo_concurrency lock_path $CINDER_STATE_PATH
Michał Dulko9ee14262016-06-03 15:34:50 +0200232 iniset $CINDER_CONF DEFAULT my_ip "$HOST_IP"
John Griffith4e823ff2012-07-20 13:18:17 -0600233
Sean McGinnis32712712017-09-22 07:49:15 -0500234 iniset $CINDER_CONF key_manager backend cinder.keymgr.conf_key_mgr.ConfKeyManager
lkuchlancb8256f2017-08-30 07:36:11 +0300235 iniset $CINDER_CONF key_manager fixed_key $(openssl rand -hex 16)
Kaitlin Farra5b72b02016-01-26 22:46:13 -0500236
Dean Troyer09718332014-07-03 10:46:57 -0500237 if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Dean Troyere8a35ac2014-07-25 12:37:41 -0500238 local enabled_backends=""
239 local default_name=""
240 local be be_name be_type
Dean Troyer09718332014-07-03 10:46:57 -0500241 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500242 be_type=${be%%:*}
243 be_name=${be##*:}
244 if type configure_cinder_backend_${be_type} >/dev/null 2>&1; then
245 configure_cinder_backend_${be_type} ${be_name}
Dean Troyer09718332014-07-03 10:46:57 -0500246 fi
Dean Troyera25922b2014-08-28 09:29:47 -0500247 if [[ -z "$default_name" ]]; then
248 default_name=$be_name
Dean Troyer09718332014-07-03 10:46:57 -0500249 fi
Dean Troyere8a35ac2014-07-25 12:37:41 -0500250 enabled_backends+=$be_name,
Sean McGinnis29ec2822017-05-30 14:21:39 -0500251
252 iniset $CINDER_CONF $be_name volume_clear $CINDER_VOLUME_CLEAR
253
Dean Troyer09718332014-07-03 10:46:57 -0500254 done
255 iniset $CINDER_CONF DEFAULT enabled_backends ${enabled_backends%,*}
Matt Riedemann6a4aa782014-07-25 13:35:53 -0700256 if [[ -n "$default_name" ]]; then
257 iniset $CINDER_CONF DEFAULT default_volume_type ${default_name}
Dean Troyer09718332014-07-03 10:46:57 -0500258 fi
Patrick Eastdddb2c72016-05-03 17:34:00 -0700259 configure_cinder_image_volume_cache
Dean Troyer09718332014-07-03 10:46:57 -0500260 fi
261
Matt Riedemann31c7d5c2018-07-23 09:25:08 -0400262 if is_service_enabled c-bak; then
263 # NOTE(mriedem): The default backup driver uses swift and if we're
264 # on a subnode we might not know if swift is enabled, but chances are
265 # good that it is on the controller so configure the backup service
266 # to use it. If we want to configure the backup service to use
267 # a non-swift driver, we'll likely need environment variables.
Falk Reimann22f747b2015-08-28 12:40:19 +0200268 iniset $CINDER_CONF DEFAULT backup_swift_url "$SWIFT_SERVICE_PROTOCOL://$SERVICE_HOST:$SWIFT_DEFAULT_BIND_PORT/v1/AUTH_"
Attila Fazekas29834742014-03-09 18:36:42 +0100269 fi
270
Gordon Chung2bfbc772013-08-09 10:55:12 -0400271 if is_service_enabled ceilometer; then
Matt Riedemann45da7772017-03-05 13:07:39 -0500272 iniset $CINDER_CONF oslo_messaging_notifications driver "messagingv2"
Gordon Chung2bfbc772013-08-09 10:55:12 -0400273 fi
274
Dean Troyer560346b2012-12-13 17:05:24 -0600275 if is_service_enabled tls-proxy; then
Sean McGinnisdaf12742017-03-03 18:09:35 +0000276 if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
277 # Set the service port for a proxy to take the original
278 if [ "$CINDER_USE_MOD_WSGI" == "True" ]; then
279 iniset $CINDER_CONF DEFAULT osapi_volume_listen_port $CINDER_SERVICE_PORT_INT
Jens Harbott411c34d2017-08-29 14:40:26 +0000280 iniset $CINDER_CONF oslo_middleware enable_proxy_headers_parsing True
Sean McGinnisdaf12742017-03-03 18:09:35 +0000281 else
282 iniset $CINDER_CONF DEFAULT osapi_volume_listen_port $CINDER_SERVICE_PORT_INT
283 iniset $CINDER_CONF DEFAULT public_endpoint $CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT
284 iniset $CINDER_CONF DEFAULT osapi_volume_base_URL $CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT
285 fi
286 fi
Dean Troyer560346b2012-12-13 17:05:24 -0600287 fi
288
Dean Troyer4d3049e2012-11-06 20:38:14 -0600289 if [ "$SYSLOG" != "False" ]; then
290 iniset $CINDER_CONF DEFAULT use_syslog True
291 fi
292
Brant Knudson2dd110c2015-03-14 12:39:14 -0500293 iniset_rpc_backend cinder $CINDER_CONF
Gary Kottonf71bf192012-08-06 11:15:36 -0400294
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700295 # Format logging
Sean Dague9751be62016-04-05 12:08:57 -0400296 setup_logging $CINDER_CONF $CINDER_USE_MOD_WSGI
Mate Lakatb2fdafe2012-11-20 15:52:21 +0000297
Sean McGinnisdaf12742017-03-03 18:09:35 +0000298 write_uwsgi_config "$CINDER_UWSGI_CONF" "$CINDER_UWSGI" "/volume"
Anton Arefiev651cb1a2015-09-01 10:55:20 +0300299
john-griffithd0860cc2014-01-23 11:31:10 -0700300 if [[ -r $CINDER_PLUGINS/$CINDER_DRIVER ]]; then
301 configure_cinder_driver
Mate Lakatb2fdafe2012-11-20 15:52:21 +0000302 fi
Ian Wienand0db17132013-06-26 22:31:48 +1000303
Dean Troyer05bd7b82014-09-16 17:25:33 -0500304 iniset $CINDER_CONF DEFAULT osapi_volume_workers "$API_WORKERS"
Rob Crittenden18d47782014-03-19 17:47:42 -0400305
Matthew Treinish1fa65362017-06-23 22:32:37 +0000306 iniset $CINDER_CONF DEFAULT glance_api_servers "$GLANCE_URL"
Sean Daguef3b2f4c2017-04-13 10:11:48 -0400307 if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400308 iniset $CINDER_CONF DEFAULT glance_protocol https
Rob Crittenden4b109292014-10-21 18:17:48 -0400309 iniset $CINDER_CONF DEFAULT glance_ca_certificates_file $SSL_BUNDLE_FILE
Rob Crittenden18d47782014-03-19 17:47:42 -0400310 fi
311
Flavio Percoco22c695f2016-05-11 12:49:07 -0500312 if [ "$GLANCE_V1_ENABLED" != "True" ]; then
313 iniset $CINDER_CONF DEFAULT glance_api_version 2
314 fi
315
Gyorgy Szombathelyic04ac032017-05-23 16:52:35 +0200316 # Set nova credentials (used for os-assisted-snapshots)
317 configure_auth_token_middleware $CINDER_CONF nova $CINDER_AUTH_CACHE_DIR nova
318 iniset $CINDER_CONF nova region_name "$REGION_NAME"
Marian Horban7159b4b2015-10-22 15:47:49 -0400319 iniset $CINDER_CONF DEFAULT graceful_shutdown_timeout "$SERVICE_GRACEFUL_SHUTDOWN_TIMEOUT"
Mehdi Abaakouk52b10742016-12-01 16:11:17 +0100320
Davanum Srinivasc0d16c22017-05-19 10:23:46 -0400321 if [[ ! -z "$CINDER_COORDINATION_URL" ]]; then
322 iniset $CINDER_CONF coordination backend_url "$CINDER_COORDINATION_URL"
323 elif is_service_enabled etcd3; then
Davanum Srinivas27367be2017-11-28 08:20:48 -0500324 iniset $CINDER_CONF coordination backend_url "etcd3+http://${SERVICE_HOST}:$ETCD_PORT"
Mehdi Abaakouk52b10742016-12-01 16:11:17 +0100325 fi
Dean Troyer67787e62012-05-02 11:48:15 -0500326}
327
Dean Troyer671c16e2012-12-13 16:22:38 -0600328# create_cinder_accounts() - Set up common required cinder accounts
329
330# Tenant User Roles
331# ------------------------------------------------------------------
332# service cinder admin # if enabled
333
334# Migrated from keystone_data.sh
Ian Wienandaee18c72014-02-21 15:35:08 +1100335function create_cinder_accounts {
Dean Troyer671c16e2012-12-13 16:22:38 -0600336 # Cinder
337 if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100338
Jamie Lennoxe8bc2b82015-02-10 20:38:56 +1100339 create_service_user "cinder"
Bartosz Górski0abde392014-02-28 14:15:19 +0100340
Eric Friedcda2cb52017-10-10 11:49:06 -0500341 # block-storage is the official service type
342 get_or_create_service "cinder" "block-storage" "Cinder Volume Service"
Sean McGinnisdaf12742017-03-03 18:09:35 +0000343 if [ "$CINDER_USE_MOD_WSGI" == "False" ]; then
344 get_or_create_endpoint \
Eric Friedcda2cb52017-10-10 11:49:06 -0500345 "block-storage" \
346 "$REGION_NAME" \
Monty Taylor69057d42018-05-01 05:57:21 -0500347 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v3/\$(project_id)s"
Eric Friedcda2cb52017-10-10 11:49:06 -0500348
Sean McGinnisdaf12742017-03-03 18:09:35 +0000349 get_or_create_service "cinderv2" "volumev2" "Cinder Volume Service V2"
350 get_or_create_endpoint \
351 "volumev2" \
352 "$REGION_NAME" \
353 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v2/\$(project_id)s"
Alex Meade06c7a442016-04-01 13:18:32 -0400354
Sean McGinnisdaf12742017-03-03 18:09:35 +0000355 get_or_create_service "cinderv3" "volumev3" "Cinder Volume Service V3"
356 get_or_create_endpoint \
357 "volumev3" \
358 "$REGION_NAME" \
359 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST:$CINDER_SERVICE_PORT/v3/\$(project_id)s"
360 else
361 get_or_create_endpoint \
Eric Friedcda2cb52017-10-10 11:49:06 -0500362 "block-storage" \
363 "$REGION_NAME" \
Monty Taylor69057d42018-05-01 05:57:21 -0500364 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST/volume/v3/\$(project_id)s"
Eric Friedcda2cb52017-10-10 11:49:06 -0500365
Sean McGinnisdaf12742017-03-03 18:09:35 +0000366 get_or_create_service "cinderv2" "volumev2" "Cinder Volume Service V2"
367 get_or_create_endpoint \
368 "volumev2" \
369 "$REGION_NAME" \
370 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST/volume/v2/\$(project_id)s"
371
372 get_or_create_service "cinderv3" "volumev3" "Cinder Volume Service V3"
373 get_or_create_endpoint \
374 "volumev3" \
375 "$REGION_NAME" \
376 "$CINDER_SERVICE_PROTOCOL://$CINDER_SERVICE_HOST/volume/v3/\$(project_id)s"
377 fi
Patrick Eastdddb2c72016-05-03 17:34:00 -0700378
379 configure_cinder_internal_tenant
Dean Troyer671c16e2012-12-13 16:22:38 -0600380 fi
381}
382
Ian Wienand1f82f432017-10-04 09:51:02 +1100383# create_cinder_cache_dir() - Part of the init_cinder() process
384function create_cinder_cache_dir {
385 # Create cache dir
386 sudo install -d -o $STACK_USER $CINDER_AUTH_CACHE_DIR
387 rm -f $CINDER_AUTH_CACHE_DIR/*
388}
389
Dean Troyer67787e62012-05-02 11:48:15 -0500390# init_cinder() - Initialize database and volume group
Ian Wienandaee18c72014-02-21 15:35:08 +1100391function init_cinder {
Terry Wilson428af5a2012-11-01 16:12:39 -0400392 if is_service_enabled $DATABASE_BACKENDS; then
Dean Troyerf03bafe2013-02-12 10:58:28 -0600393 # (Re)create cinder database
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200394 recreate_database cinder
Dean Troyer67787e62012-05-02 11:48:15 -0500395
Clark Boylan633dbc32017-06-14 12:09:21 -0700396 time_start "dbsync"
Dean Troyerf03bafe2013-02-12 10:58:28 -0600397 # Migrate cinder database
Einst Crazy4f55c2d2016-05-04 08:14:01 +0000398 $CINDER_BIN_DIR/cinder-manage --config-file $CINDER_CONF db sync
Clark Boylan633dbc32017-06-14 12:09:21 -0700399 time_stop "dbsync"
Dean Troyer67787e62012-05-02 11:48:15 -0500400 fi
401
Dean Troyer09718332014-07-03 10:46:57 -0500402 if is_service_enabled c-vol && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Dean Troyere8a35ac2014-07-25 12:37:41 -0500403 local be be_name be_type
Dean Troyer09718332014-07-03 10:46:57 -0500404 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500405 be_type=${be%%:*}
406 be_name=${be##*:}
407 if type init_cinder_backend_${be_type} >/dev/null 2>&1; then
Maru Newbyc070a3d2015-01-27 17:44:44 +0000408 # Always init the default volume group for lvm.
409 if [[ "$be_type" == "lvm" ]]; then
410 init_default_lvm_volume_group
411 fi
Dean Troyere8a35ac2014-07-25 12:37:41 -0500412 init_cinder_backend_${be_type} ${be_name}
Vincent Untz0230aa82012-06-14 08:51:01 +0200413 fi
Dean Troyer09718332014-07-03 10:46:57 -0500414 done
Dean Troyer67787e62012-05-02 11:48:15 -0500415 fi
Dean Troyerbc071bc2012-10-01 14:06:44 -0500416
Dean Troyer09718332014-07-03 10:46:57 -0500417 mkdir -p $CINDER_STATE_PATH/volumes
Ian Wienand1f82f432017-10-04 09:51:02 +1100418 create_cinder_cache_dir
Dean Troyer67787e62012-05-02 11:48:15 -0500419}
420
421# install_cinder() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100422function install_cinder {
Dean Troyer67787e62012-05-02 11:48:15 -0500423 git_clone $CINDER_REPO $CINDER_DIR $CINDER_BRANCH
Sean Dague4bf9d7a2013-04-01 16:41:39 -0400424 setup_develop $CINDER_DIR
Ian Wienanda881b882017-04-19 15:42:34 +1000425 if [[ "$CINDER_ISCSI_HELPER" == "tgtadm" ]]; then
426 install_package tgt
Attila Fazekas501aaeb2017-12-11 12:01:32 +0100427 elif [[ "$CINDER_ISCSI_HELPER" == "lioadm" ]]; then
Eric Harney363acd92019-03-04 17:50:47 -0500428 if [[ ${DISTRO} == "bionic" ]]; then
whoami-rajatf28c75f2019-03-13 23:41:05 +0530429 # TODO(frickler): Workaround for https://launchpad.net/bugs/1819819
430 sudo mkdir -p /etc/target
431
Eric Harney363acd92019-03-04 17:50:47 -0500432 install_package targetcli-fb
433 else
434 install_package targetcli
435 fi
Attila Fazekasc70605d2015-01-26 15:44:47 +0100436 fi
Dean Troyer253a1a32013-04-01 18:23:22 -0500437}
Sean Dague4bf9d7a2013-04-01 16:41:39 -0400438
Dean Troyer253a1a32013-04-01 18:23:22 -0500439# install_cinderclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100440function install_cinderclient {
Ivan Kolodyazhny8d0d3112016-05-26 23:41:49 +0300441 if use_library_from_git "python-brick-cinderclient-ext"; then
442 git_clone_by_name "python-brick-cinderclient-ext"
443 setup_dev_lib "python-brick-cinderclient-ext"
444 fi
445
Sean Daguee08ab102014-11-13 17:09:28 -0500446 if use_library_from_git "python-cinderclient"; then
447 git_clone_by_name "python-cinderclient"
448 setup_dev_lib "python-cinderclient"
449 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-cinderclient"]}/tools/,/etc/bash_completion.d/}cinder.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100450 fi
Dean Troyer67787e62012-05-02 11:48:15 -0500451}
452
Steve Baker18225d92013-04-14 12:48:41 -0700453# apply config.d approach for cinder volumes directory
Ian Wienandaee18c72014-02-21 15:35:08 +1100454function _configure_tgt_for_config_d {
Steve Baker18225d92013-04-14 12:48:41 -0700455 if [[ ! -d /etc/tgt/stack.d/ ]]; then
456 sudo ln -sf $CINDER_STATE_PATH/volumes /etc/tgt/stack.d
Jordan Pittiera263e7d2016-01-07 19:40:44 +0100457 fi
458 if ! grep -q "include /etc/tgt/stack.d/*" /etc/tgt/targets.conf; then
Steve Baker18225d92013-04-14 12:48:41 -0700459 echo "include /etc/tgt/stack.d/*" | sudo tee -a /etc/tgt/targets.conf
Mate Lakata39caac2012-09-03 15:45:53 +0100460 fi
461}
462
Sean Dague0eebeb42017-08-30 14:16:58 -0400463# start_cinder() - Start running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100464function start_cinder {
Rob Crittenden18d47782014-03-19 17:47:42 -0400465 local service_port=$CINDER_SERVICE_PORT
466 local service_protocol=$CINDER_SERVICE_PROTOCOL
Sean McGinnisdaf12742017-03-03 18:09:35 +0000467 local cinder_url
Eric Harney8ea86602017-08-02 11:40:41 -0400468 if is_service_enabled tls-proxy && [ "$CINDER_USE_MOD_WSGI" == "False" ]; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400469 service_port=$CINDER_SERVICE_PORT_INT
470 service_protocol="http"
471 fi
Attila Fazekasc70605d2015-01-26 15:44:47 +0100472 if [ "$CINDER_ISCSI_HELPER" = "tgtadm" ]; then
473 if is_service_enabled c-vol; then
474 # Delete any old stack.conf
475 sudo rm -f /etc/tgt/conf.d/stack.conf
476 _configure_tgt_for_config_d
477 if is_ubuntu; then
478 sudo service tgt restart
Dirk Mueller6bc089f2015-06-01 12:39:12 +0200479 elif is_suse; then
480 # NOTE(dmllr): workaround restart bug
481 # https://bugzilla.suse.com/show_bug.cgi?id=934642
482 stop_service tgtd
483 start_service tgtd
Attila Fazekasc70605d2015-01-26 15:44:47 +0100484 else
Dirk Mueller6bc089f2015-06-01 12:39:12 +0200485 restart_service tgtd
Attila Fazekasc70605d2015-01-26 15:44:47 +0100486 fi
487 # NOTE(gfidente): ensure tgtd is running in debug mode
488 sudo tgtadm --mode system --op update --name debug --value on
Dean Troyer67787e62012-05-02 11:48:15 -0500489 fi
490 fi
491
Sean McGinnisdaf12742017-03-03 18:09:35 +0000492 if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
493 if [ "$CINDER_USE_MOD_WSGI" == "False" ]; then
Clark Boylan2dfca042017-05-25 14:57:19 -0700494 run_process c-api "$CINDER_BIN_DIR/cinder-api --config-file $CINDER_CONF"
Sean McGinnisdaf12742017-03-03 18:09:35 +0000495 cinder_url=$service_protocol://$SERVICE_HOST:$service_port
Jens Harbott52609c62017-08-28 11:49:28 +0000496 # Start proxy if tls enabled
497 if is_service_enabled tls-proxy; then
498 start_tls_proxy cinder '*' $CINDER_SERVICE_PORT $CINDER_SERVICE_HOST $CINDER_SERVICE_PORT_INT
Sean McGinnisdaf12742017-03-03 18:09:35 +0000499 fi
500 else
Davanum Srinivasaceb27e2017-08-17 08:59:59 -0400501 run_process "c-api" "$CINDER_BIN_DIR/uwsgi --procname-prefix cinder-api --ini $CINDER_UWSGI_CONF"
Sean McGinnisdaf12742017-03-03 18:09:35 +0000502 cinder_url=$service_protocol://$SERVICE_HOST/volume/v3
Clark Boylan2dfca042017-05-25 14:57:19 -0700503 fi
Sean McGinnisdaf12742017-03-03 18:09:35 +0000504 fi
Eli Qiao4af6eea2017-02-28 15:13:02 +0800505
Sean McGinnisdaf12742017-03-03 18:09:35 +0000506 echo "Waiting for Cinder API to start..."
507 if ! wait_for_service $SERVICE_TIMEOUT $cinder_url; then
508 die $LINENO "c-api did not start"
Dean Troyer09718332014-07-03 10:46:57 -0500509 fi
510
Dean Troyer3159a822014-08-27 14:13:58 -0500511 run_process c-sch "$CINDER_BIN_DIR/cinder-scheduler --config-file $CINDER_CONF"
512 run_process c-bak "$CINDER_BIN_DIR/cinder-backup --config-file $CINDER_CONF"
513 run_process c-vol "$CINDER_BIN_DIR/cinder-volume --config-file $CINDER_CONF"
John Griffithe6d4fe52013-07-15 17:35:54 -0600514
515 # NOTE(jdg): For cinder, startup order matters. To ensure that repor_capabilities is received
516 # by the scheduler start the cinder-volume service last (or restart it) after the scheduler
517 # has started. This is a quick fix for lp bug/1189595
Dean Troyer67787e62012-05-02 11:48:15 -0500518}
519
Dean Troyer699a29f2012-09-10 14:10:27 -0500520# stop_cinder() - Stop running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100521function stop_cinder {
Sean McGinnisdaf12742017-03-03 18:09:35 +0000522 stop_process c-api
Sean Dague0eebeb42017-08-30 14:16:58 -0400523 stop_process c-bak
524 stop_process c-sch
525 stop_process c-vol
Dean Troyer67787e62012-05-02 11:48:15 -0500526}
Dean Troyer7903b792012-09-13 17:16:12 -0500527
Dean Troyer09718332014-07-03 10:46:57 -0500528# create_volume_types() - Create Cinder's configured volume types
529function create_volume_types {
530 # Create volume types
531 if is_service_enabled c-api && [[ -n "$CINDER_ENABLED_BACKENDS" ]]; then
Jamie Lennox494f7cd2015-05-29 08:33:03 +0000532 local be be_name
Dean Troyer09718332014-07-03 10:46:57 -0500533 for be in ${CINDER_ENABLED_BACKENDS//,/ }; do
Dean Troyere8a35ac2014-07-25 12:37:41 -0500534 be_name=${be##*:}
Ivan Kolodyazhny165199e2017-11-06 18:17:39 +0200535 # NOTE (e0ne): openstack client doesn't work with cinder in noauth mode
536 if is_service_enabled keystone; then
537 openstack --os-region-name="$REGION_NAME" volume type create --property volume_backend_name="${be_name}" ${be_name}
538 else
539 # TODO (e0ne): use openstack client once it will support cinder in noauth mode:
540 # https://bugs.launchpad.net/python-cinderclient/+bug/1755279
541 local cinder_url
542 cinder_url=$CINDER_SERVICE_PROTOCOL://$SERVICE_HOST:$CINDER_SERVICE_PORT/v3
543 OS_USER_ID=$OS_USERNAME OS_PROJECT_ID=$OS_PROJECT_NAME cinder --os-auth-type noauth --os-endpoint=$cinder_url type-create ${be_name}
544 OS_USER_ID=$OS_USERNAME OS_PROJECT_ID=$OS_PROJECT_NAME cinder --os-auth-type noauth --os-endpoint=$cinder_url type-key ${be_name} set volume_backend_name=${be_name}
545 fi
Dean Troyer09718332014-07-03 10:46:57 -0500546 done
547 fi
548}
549
550# Compatibility for Grenade
551
552function create_cinder_volume_group {
553 # During a transition period Grenade needs to have this function defined
554 # It is effectively a no-op in the Grenade 'target' use case
555 :
556}
557
Patrick Eastdddb2c72016-05-03 17:34:00 -0700558function configure_cinder_internal_tenant {
559 # Re-use the Cinder service account for simplicity.
560 iniset $CINDER_CONF DEFAULT cinder_internal_tenant_project_id $(get_or_create_project $SERVICE_PROJECT_NAME)
561 iniset $CINDER_CONF DEFAULT cinder_internal_tenant_user_id $(get_or_create_user "cinder")
562}
563
564function configure_cinder_image_volume_cache {
565 # Expect CINDER_CACHE_ENABLED_FOR_BACKENDS to be a list of backends
566 # similar to CINDER_ENABLED_BACKENDS with NAME:TYPE where NAME will
567 # be the backend specific configuration stanza in cinder.conf.
568 for be in ${CINDER_CACHE_ENABLED_FOR_BACKENDS//,/ }; do
569 local be_name=${be##*:}
570
571 iniset $CINDER_CONF $be_name image_volume_cache_enabled $CINDER_IMG_CACHE_ENABLED
572
573 if [[ -n $CINDER_IMG_CACHE_SIZE_GB ]]; then
574 iniset $CINDER_CONF $be_name image_volume_cache_max_size_gb $CINDER_IMG_CACHE_SIZE_GB
575 fi
576
577 if [[ -n $CINDER_IMG_CACHE_SIZE_COUNT ]]; then
578 iniset $CINDER_CONF $be_name image_volume_cache_max_count $CINDER_IMG_CACHE_SIZE_COUNT
579 fi
580 done
581}
582
Dean Troyercc6b4432013-04-08 15:38:03 -0500583
Dean Troyer7903b792012-09-13 17:16:12 -0500584# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +1100585$_XTRACE_CINDER
Sean Dague584d90e2013-03-29 14:34:53 -0400586
Adam Spiers6a5aa7c2013-10-24 11:27:02 +0100587# Tell emacs to use shell-script-mode
588## Local variables:
589## mode: shell-script
590## End: