Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 1 | #!/usr/bin/env bash |
| 2 | |
Jesse Andrews | 0e7e897 | 2011-10-02 16:36:54 -0400 | [diff] [blame] | 3 | # **stack.sh** is an opinionated openstack developer installation. |
| 4 | |
| 5 | # This script installs and configures *nova*, *glance*, *dashboard* and *keystone* |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 6 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 7 | # FIXME: talk about single or multi-node installs |
| 8 | |
Jesse Andrews | c4b3aab | 2011-09-15 22:54:52 -0700 | [diff] [blame] | 9 | # To keep this script simple we assume you are running on an **Ubuntu 11.04 |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 10 | # Natty** machine. It should work in a VM or physical server. Additionally we |
| 11 | # put the list of *apt* and *pip* dependencies and other configuration files in |
| 12 | # this repo. So start by grabbing this script and the dependencies. |
| 13 | |
Jesse Andrews | 0e7e897 | 2011-10-02 16:36:54 -0400 | [diff] [blame] | 14 | # Learn more and get the most recent version at http://devstack.org |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 15 | |
| 16 | # Sanity Check |
| 17 | # ============ |
| 18 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 19 | # Record the start time. This allows us to print how long this script takes to run. |
termie | 523c405 | 2011-09-28 19:49:40 -0500 | [diff] [blame] | 20 | START_TIME=`python -c "import time; print time.time()"` |
| 21 | |
Jesse Andrews | c4b3aab | 2011-09-15 22:54:52 -0700 | [diff] [blame] | 22 | # Warn users who aren't on natty, but allow them to override check and attempt |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 23 | # installation with ``FORCE=yes ./stack`` |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 24 | if ! grep -q natty /etc/lsb-release; then |
| 25 | echo "WARNING: this script has only been tested on natty" |
| 26 | if [[ "$FORCE" != "yes" ]]; then |
| 27 | echo "If you wish to run this script anyway run with FORCE=yes" |
| 28 | exit 1 |
| 29 | fi |
| 30 | fi |
| 31 | |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 32 | # stack.sh keeps the list of **apt** and **pip** dependencies in external |
Jesse Andrews | 4d28218 | 2011-09-16 11:27:43 -0700 | [diff] [blame] | 33 | # files, along with config templates and other useful files. You can find these |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 34 | # in the ``files`` directory (next to this script). We will reference this |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 35 | # directory using the ``FILES`` variable in this script. |
| 36 | FILES=`pwd`/files |
| 37 | if [ ! -d $FILES ]; then |
| 38 | echo "ERROR: missing devstack/files - did you grab more than just stack.sh?" |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 39 | exit 1 |
| 40 | fi |
| 41 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 42 | # OpenStack is designed to be run as a regular user (Dashboard will fail to run |
| 43 | # as root, since apache refused to startup serve content from root user). If |
| 44 | # stack.sh is run as root, it automatically creates a stack user with |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 45 | # sudo privileges and runs as that user. |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 46 | |
Jesse Andrews | d462295 | 2011-09-28 14:08:26 -0700 | [diff] [blame] | 47 | if [[ $EUID -eq 0 ]]; then |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 48 | echo "You are running this script as root." |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 49 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 50 | # since this script runs as a normal user, we need to give that user |
| 51 | # ability to run sudo |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 52 | apt-get update |
| 53 | apt-get install -y sudo |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 54 | |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 55 | if ! getent passwd | grep -q stack; then |
| 56 | echo "Creating a user called stack" |
Vishvananda Ishaya | cd10164 | 2011-10-01 00:37:27 -0700 | [diff] [blame] | 57 | useradd -U -G sudo -s /bin/bash -m stack |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 58 | fi |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 59 | echo "Giving stack user passwordless sudo priviledges" |
Jesse Andrews | 6e9fae0 | 2011-10-02 08:48:34 -0700 | [diff] [blame] | 60 | echo "stack ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 61 | |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 62 | echo "Copying files to stack user" |
| 63 | cp -r -f `pwd` /home/stack/ |
| 64 | THIS_DIR=$(basename $(dirname $(readlink -f $0))) |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 65 | chown -R stack /home/stack/$THIS_DIR |
Vishvananda Ishaya | c9e3fff | 2011-09-29 10:48:49 -0700 | [diff] [blame] | 66 | echo "Running the script as stack in 3 seconds..." |
| 67 | sleep 3 |
| 68 | exec su -c "cd /home/stack/$THIS_DIR/; bash stack.sh; bash" stack |
| 69 | exit 0 |
Jesse Andrews | d462295 | 2011-09-28 14:08:26 -0700 | [diff] [blame] | 70 | fi |
| 71 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 72 | # So that errors don't compound we exit on any errors so you see only the |
| 73 | # first error that occured. |
| 74 | set -o errexit |
| 75 | |
| 76 | # Print the commands being run so that we can see the command that triggers |
| 77 | # an error. It is also useful for following allowing as the install occurs. |
| 78 | set -o xtrace |
Jesse Andrews | d462295 | 2011-09-28 14:08:26 -0700 | [diff] [blame] | 79 | |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 80 | # Settings |
| 81 | # ======== |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 82 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 83 | # This script is customizable through setting environment variables. If you |
| 84 | # want to override a setting you can either:: |
| 85 | # |
| 86 | # export MYSQL_PASS=anothersecret |
| 87 | # ./stack.sh |
| 88 | # |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 89 | # You can also pass options on a single line ``MYSQL_PASS=simple ./stack.sh`` |
| 90 | # |
termie | 197d53d | 2011-09-28 17:18:23 -0700 | [diff] [blame] | 91 | # Additionally, you can put any local variables into a ``localrc`` file, like:: |
| 92 | # |
| 93 | # MYSQL_PASS=anothersecret |
| 94 | # MYSQL_USER=hellaroot |
| 95 | # |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 96 | # We try to have sensible defaults, so you should be able to run ``./stack.sh`` |
| 97 | # in most cases. |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 98 | |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 99 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 100 | # FIXME: TALK ABOUT stackrc and localrc |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 101 | |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 102 | # Import variables |
| 103 | source ./stackrc |
| 104 | |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 105 | # Destination path for installation ``DEST`` |
Anthony Young | e8fed48 | 2011-09-26 19:50:43 -0700 | [diff] [blame] | 106 | DEST=${DEST:-/opt/stack} |
| 107 | sudo mkdir -p $DEST |
| 108 | sudo chown `whoami` $DEST |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 109 | |
Jesse Andrews | 6f3baaf | 2011-09-12 11:59:38 -0700 | [diff] [blame] | 110 | # Set the destination directories for openstack projects |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 111 | NOVA_DIR=$DEST/nova |
| 112 | DASH_DIR=$DEST/dash |
| 113 | GLANCE_DIR=$DEST/glance |
| 114 | KEYSTONE_DIR=$DEST/keystone |
| 115 | NOVACLIENT_DIR=$DEST/python-novaclient |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 116 | OPENSTACKX_DIR=$DEST/openstackx |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 117 | NOVNC_DIR=$DEST/noVNC |
Anthony Young | a841644 | 2011-09-13 20:07:44 -0700 | [diff] [blame] | 118 | |
| 119 | # Specify which services to launch. These generally correspond to screen tabs |
Jesse Andrews | 9b6741e | 2011-10-02 10:01:00 -0700 | [diff] [blame] | 120 | ENABLED_SERVICES=${ENABLED_SERVICES:-g-api,g-reg,key,n-api,n-cpu,n-net,n-sch,n-vnc,dash,mysql,rabbit} |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 121 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 122 | # Nova hypervisor configuration. We default to **kvm** but will drop back to |
| 123 | # **qemu** if we are unable to load the kvm module. Stack.sh can also install |
| 124 | # an **LXC** based system. |
| 125 | LIBVIRT_TYPE=${LIBVIRT_TYPE:-kvm} |
| 126 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 127 | # nova supports pluggable schedulers. ``SimpleScheduler`` should work in most |
| 128 | # cases unless you are working on multi-zone mode. |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 129 | SCHEDULER=${SCHEDULER:-nova.scheduler.simple.SimpleScheduler} |
| 130 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 131 | # Use the first IP unless an explicit is set by ``HOST_IP`` environment variable |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 132 | if [ ! -n "$HOST_IP" ]; then |
Dean Troyer | 2a15a7c | 2011-09-13 13:22:14 -0500 | [diff] [blame] | 133 | HOST_IP=`LC_ALL=C /sbin/ifconfig | grep -m 1 'inet addr:'| cut -d: -f2 | awk '{print $1}'` |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 134 | fi |
| 135 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 136 | # Nova Network Configuration |
| 137 | # -------------------------- |
| 138 | |
Anthony Young | b1bdd5e | 2011-09-20 09:39:50 -0700 | [diff] [blame] | 139 | PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-eth0} |
Jesse Andrews | b5197e4 | 2011-09-26 12:48:31 -0700 | [diff] [blame] | 140 | FIXED_RANGE=${FIXED_RANGE:-10.0.0.0/24} |
| 141 | FIXED_NETWORK_SIZE=${FIXED_NETWORK_SIZE:-256} |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 142 | FLOATING_RANGE=${FLOATING_RANGE:-172.24.4.1/28} |
Jesse Andrews | a72f7ad | 2011-09-25 13:41:22 -0700 | [diff] [blame] | 143 | NET_MAN=${NET_MAN:-FlatDHCPManager} |
Anthony Young | a841644 | 2011-09-13 20:07:44 -0700 | [diff] [blame] | 144 | EC2_DMZ_HOST=${EC2_DMZ_HOST:-$HOST_IP} |
Anthony Young | b1bdd5e | 2011-09-20 09:39:50 -0700 | [diff] [blame] | 145 | FLAT_NETWORK_BRIDGE=${FLAT_NETWORK_BRIDGE:-br100} |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 146 | VLAN_INTERFACE=${VLAN_INTERFACE:-$PUBLIC_INTERFACE} |
| 147 | |
| 148 | # Multi-host is a mode where each compute node runs its own network node. This |
| 149 | # allows network operations and routing for a VM to occur on the server that is |
| 150 | # running the VM - removing a SPOF and bandwidth bottleneck. |
| 151 | MULTI_HOST=${MULTI_HOST:-0} |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 152 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 153 | # If you are using FlatDHCP on multiple hosts, set the ``FLAT_INTERFACE`` |
| 154 | # variable but make sure that the interface doesn't already have an |
| 155 | # ip or you risk breaking things. |
Jesse Andrews | 8ff5dbc | 2011-09-25 22:28:08 -0700 | [diff] [blame] | 156 | FLAT_INTERFACE=${FLAT_INTERFACE:-eth0} |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 157 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 158 | ## FIXME(ja): should/can we check that FLAT_INTERFACE is sane? |
| 159 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 160 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 161 | # MySQL & RabbitMQ |
| 162 | # ---------------- |
| 163 | |
| 164 | # We configure Nova, Dashboard, Glance and Keystone to use MySQL as their |
| 165 | # database server. While they share a single server, each has their own |
| 166 | # database and tables. |
| 167 | |
| 168 | # By default this script will install and configure MySQL. If you want to |
| 169 | # use an existing server, you can pass in the user/password/host parameters. |
| 170 | # You will need to send the same ``MYSQL_PASS`` to every host if you are doing |
| 171 | # a multi-node devstack installation. |
Anthony Young | 320412b | 2011-09-14 02:39:10 -0700 | [diff] [blame] | 172 | MYSQL_USER=${MYSQL_USER:-root} |
Jesse Andrews | fa418f6 | 2011-10-02 09:30:54 -0700 | [diff] [blame] | 173 | MYSQL_PASS=${MYSQL_PASS:-`openssl rand -hex 12`} |
Anthony Young | a841644 | 2011-09-13 20:07:44 -0700 | [diff] [blame] | 174 | MYSQL_HOST=${MYSQL_HOST:-localhost} |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 175 | |
Anthony Young | a841644 | 2011-09-13 20:07:44 -0700 | [diff] [blame] | 176 | # don't specify /db in this string, so we can use it for multiple services |
Anthony Young | fdaf21a | 2011-09-13 20:11:42 -0700 | [diff] [blame] | 177 | BASE_SQL_CONN=${BASE_SQL_CONN:-mysql://$MYSQL_USER:$MYSQL_PASS@$MYSQL_HOST} |
Anthony Young | a841644 | 2011-09-13 20:07:44 -0700 | [diff] [blame] | 178 | |
| 179 | # Rabbit connection info |
| 180 | RABBIT_HOST=${RABBIT_HOST:-localhost} |
Jesse Andrews | 53ed387 | 2011-10-02 14:28:17 -0400 | [diff] [blame] | 181 | RABBIT_PASSWORD=${RABBIT_PASSWORD:-`openssl rand -hex 12`} |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 182 | |
Anthony Young | 377aae6 | 2011-09-14 09:55:31 -0700 | [diff] [blame] | 183 | # Glance connection info. Note the port must be specified. |
Anthony Young | b1bdd5e | 2011-09-20 09:39:50 -0700 | [diff] [blame] | 184 | GLANCE_HOSTPORT=${GLANCE_HOSTPORT:-$HOST_IP:9292} |
Anthony Young | 377aae6 | 2011-09-14 09:55:31 -0700 | [diff] [blame] | 185 | |
Jesse Andrews | 782b991 | 2011-10-02 16:53:21 -0400 | [diff] [blame] | 186 | # Keystone |
| 187 | # -------- |
| 188 | |
Jesse Andrews | b96871e | 2011-10-02 09:02:46 -0700 | [diff] [blame] | 189 | # Service Token - Openstack components need to have an admin token |
| 190 | # to validate user tokens. |
| 191 | SERVICE_TOKEN=${SERVICE_TOKEN:-`uuidgen`} |
Jesse Andrews | 89358af | 2011-10-02 14:11:17 -0400 | [diff] [blame] | 192 | ADMIN_PASSWORD=${ADMIN_PASSWORD:-`openssl rand -hex 12`} |
Jesse Andrews | b96871e | 2011-10-02 09:02:46 -0700 | [diff] [blame] | 193 | |
Jesse Andrews | 53ed387 | 2011-10-02 14:28:17 -0400 | [diff] [blame] | 194 | |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 195 | # Install Packages |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 196 | # ================ |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 197 | # |
| 198 | # Openstack uses a fair number of other projects. |
| 199 | |
Jesse Andrews | 2caf8fd | 2011-09-12 16:15:11 -0700 | [diff] [blame] | 200 | |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 201 | # install apt requirements |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 202 | sudo apt-get install -y -q `cat $FILES/apts/* | cut -d\# -f1 | grep -Ev "mysql-server|rabbitmq-server"` |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 203 | |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 204 | # install python requirements |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 205 | sudo PIP_DOWNLOAD_CACHE=/var/cache/pip pip install `cat $FILES/pips/*` |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 206 | |
Jesse Andrews | d61db85 | 2011-09-16 14:13:17 -0700 | [diff] [blame] | 207 | # git clone only if directory doesn't exist already. Since ``DEST`` might not |
| 208 | # be owned by the installation user, we create the directory and change the |
| 209 | # ownership to the proper user. |
Jesse Andrews | 6163257 | 2011-09-12 17:40:00 -0700 | [diff] [blame] | 210 | function git_clone { |
| 211 | if [ ! -d $2 ]; then |
Jesse Andrews | d61db85 | 2011-09-16 14:13:17 -0700 | [diff] [blame] | 212 | sudo mkdir $2 |
| 213 | sudo chown `whoami` $2 |
Jesse Andrews | 6163257 | 2011-09-12 17:40:00 -0700 | [diff] [blame] | 214 | git clone $1 $2 |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 215 | cd $2 |
Anthony Young | 303233e | 2011-09-26 13:12:57 -0700 | [diff] [blame] | 216 | # This checkout syntax works for both branches and tags |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 217 | git checkout $3 |
Jesse Andrews | 6163257 | 2011-09-12 17:40:00 -0700 | [diff] [blame] | 218 | fi |
| 219 | } |
| 220 | |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 221 | # compute service |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 222 | git_clone $NOVA_REPO $NOVA_DIR $NOVA_BRANCH |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 223 | # image catalog service |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 224 | git_clone $GLANCE_REPO $GLANCE_DIR $GLANCE_BRANCH |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 225 | # unified auth system (manages accounts/tokens) |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 226 | git_clone $KEYSTONE_REPO $KEYSTONE_DIR $KEYSTONE_BRANCH |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 227 | # a websockets/html5 or flash powered VNC console for vm instances |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 228 | git_clone $NOVNC_REPO $NOVNC_DIR $NOVNC_BRANCH |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 229 | # django powered web control panel for openstack |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 230 | git_clone $DASH_REPO $DASH_DIR $DASH_BRANCH $DASH_TAG |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 231 | # python client library to nova that dashboard (and others) use |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 232 | git_clone $NOVACLIENT_REPO $NOVACLIENT_DIR $NOVACLIENT_BRANCH |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 233 | # openstackx is a collection of extensions to openstack.compute & nova |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 234 | # that is *deprecated*. The code is being moved into python-novaclient & nova. |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 235 | git_clone $OPENSTACKX_REPO $OPENSTACKX_DIR $OPENSTACKX_BRANCH |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 236 | |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 237 | # Initialization |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 238 | # ============== |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 239 | |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 240 | |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 241 | # setup our checkouts so they are installed into python path |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 242 | # allowing ``import nova`` or ``import glance.client`` |
Dean Troyer | 0017c8f | 2011-09-13 15:37:50 -0500 | [diff] [blame] | 243 | cd $NOVA_DIR; sudo python setup.py develop |
Jesse Andrews | 18d350d | 2011-09-12 21:46:12 -0700 | [diff] [blame] | 244 | cd $NOVACLIENT_DIR; sudo python setup.py develop |
| 245 | cd $KEYSTONE_DIR; sudo python setup.py develop |
| 246 | cd $GLANCE_DIR; sudo python setup.py develop |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 247 | cd $OPENSTACKX_DIR; sudo python setup.py develop |
Jesse Andrews | 18d350d | 2011-09-12 21:46:12 -0700 | [diff] [blame] | 248 | cd $DASH_DIR/django-openstack; sudo python setup.py develop |
| 249 | cd $DASH_DIR/openstack-dashboard; sudo python setup.py develop |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 250 | |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 251 | # Add a useful screenrc. This isn't required to run openstack but is we do |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 252 | # it since we are going to run the services in screen for simple |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 253 | cp $FILES/screenrc ~/.screenrc |
Jesse Andrews | 6f3baaf | 2011-09-12 11:59:38 -0700 | [diff] [blame] | 254 | |
Jesse Andrews | 6edd17f | 2011-09-15 22:19:42 -0700 | [diff] [blame] | 255 | ## TODO: update current user to allow sudo for all commands in files/sudo/* |
Jesse Andrews | dfcd200 | 2011-09-13 13:17:22 -0700 | [diff] [blame] | 256 | |
Anthony Young | a09ae2f | 2011-09-15 23:11:29 -0700 | [diff] [blame] | 257 | # Rabbit |
| 258 | # --------- |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 259 | |
Anthony Young | a09ae2f | 2011-09-15 23:11:29 -0700 | [diff] [blame] | 260 | if [[ "$ENABLED_SERVICES" =~ "rabbit" ]]; then |
| 261 | # Install and start rabbitmq-server |
Anthony Young | 093eeb0 | 2011-09-15 23:17:44 -0700 | [diff] [blame] | 262 | sudo apt-get install -y -q rabbitmq-server |
Jesse Andrews | 53ed387 | 2011-10-02 14:28:17 -0400 | [diff] [blame] | 263 | # change the rabbit password since the default is "guest" |
| 264 | sudo rabbitmqctl change_password guest $RABBIT_PASSWORD |
Anthony Young | a09ae2f | 2011-09-15 23:11:29 -0700 | [diff] [blame] | 265 | fi |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 266 | |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 267 | # Mysql |
| 268 | # --------- |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 269 | |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 270 | if [[ "$ENABLED_SERVICES" =~ "mysql" ]]; then |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 271 | |
| 272 | # Seed configuration with mysql password so that apt-get install doesn't |
| 273 | # prompt us for a password upon install. |
| 274 | cat <<MYSQL_PRESEED | sudo debconf-set-selections |
| 275 | mysql-server-5.1 mysql-server/root_password password $MYSQL_PASS |
| 276 | mysql-server-5.1 mysql-server/root_password_again password $MYSQL_PASS |
| 277 | mysql-server-5.1 mysql-server/start_on_boot boolean true |
| 278 | MYSQL_PRESEED |
| 279 | |
Anthony Young | a09ae2f | 2011-09-15 23:11:29 -0700 | [diff] [blame] | 280 | # Install and start mysql-server |
Anthony Young | 093eeb0 | 2011-09-15 23:17:44 -0700 | [diff] [blame] | 281 | sudo apt-get -y -q install mysql-server |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 282 | # Update the DB to give user ‘$MYSQL_USER’@’%’ full control of the all databases: |
| 283 | sudo mysql -uroot -p$MYSQL_PASS -e "GRANT ALL PRIVILEGES ON *.* TO '$MYSQL_USER'@'%' identified by '$MYSQL_PASS';" |
| 284 | |
| 285 | # Edit /etc/mysql/my.cnf to change ‘bind-address’ from localhost (127.0.0.1) to any (0.0.0.0) and restart the mysql service: |
| 286 | sudo sed -i 's/127.0.0.1/0.0.0.0/g' /etc/mysql/my.cnf |
| 287 | sudo service mysql restart |
| 288 | fi |
| 289 | |
| 290 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 291 | # Dashboard |
| 292 | # --------- |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 293 | |
| 294 | # Setup the django dashboard application to serve via apache/wsgi |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 295 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 296 | if [[ "$ENABLED_SERVICES" =~ "dash" ]]; then |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 297 | |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 298 | # Dash currently imports quantum even if you aren't using it. Instead |
| 299 | # of installing quantum we can create a simple module that will pass the |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 300 | # initial imports |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 301 | mkdir -p $DASH_DIR/openstack-dashboard/quantum || true |
| 302 | touch $DASH_DIR/openstack-dashboard/quantum/__init__.py |
| 303 | touch $DASH_DIR/openstack-dashboard/quantum/client.py |
| 304 | |
| 305 | |
| 306 | # ``local_settings.py`` is used to override dashboard default settings. |
| 307 | cp $FILES/dash_settings.py $DASH_DIR/openstack-dashboard/local/local_settings.py |
Jesse Andrews | 1c1d150 | 2011-09-12 19:29:56 -0700 | [diff] [blame] | 308 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 309 | cd $DASH_DIR/openstack-dashboard |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 310 | dashboard/manage.py syncdb |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 311 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 312 | # create an empty directory that apache uses as docroot |
| 313 | sudo mkdir -p $DASH_DIR/.blackhole |
Jesse Andrews | 1c1d150 | 2011-09-12 19:29:56 -0700 | [diff] [blame] | 314 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 315 | ## Configure apache's 000-default to run dashboard |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 316 | sudo cp $FILES/000-default.template /etc/apache2/sites-enabled/000-default |
Jesse Andrews | 8f3e28c | 2011-09-27 18:26:27 -0700 | [diff] [blame] | 317 | sudo sed -e "s,%USER%,$USER,g" -i /etc/apache2/sites-enabled/000-default |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 318 | sudo sed -e "s,%DASH_DIR%,$DASH_DIR,g" -i /etc/apache2/sites-enabled/000-default |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 319 | fi |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 320 | |
Anthony Young | 3859f73 | 2011-09-14 02:33:43 -0700 | [diff] [blame] | 321 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 322 | # Glance |
| 323 | # ------ |
| 324 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 325 | if [[ "$ENABLED_SERVICES" =~ "g-reg" ]]; then |
Anthony Young | c835762 | 2011-09-20 10:38:06 -0700 | [diff] [blame] | 326 | GLANCE_IMAGE_DIR=$DEST/glance/images |
Anthony Young | a531b77 | 2011-09-20 09:59:54 -0700 | [diff] [blame] | 327 | # Delete existing images |
| 328 | rm -rf $GLANCE_IMAGE_DIR |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 329 | |
Anthony Young | a531b77 | 2011-09-20 09:59:54 -0700 | [diff] [blame] | 330 | # Use local glance directories |
| 331 | mkdir -p $GLANCE_IMAGE_DIR |
| 332 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 333 | # (re)create glance database |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 334 | mysql -u$MYSQL_USER -p$MYSQL_PASS -e 'DROP DATABASE IF EXISTS glance;' |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 335 | mysql -u$MYSQL_USER -p$MYSQL_PASS -e 'CREATE DATABASE glance;' |
| 336 | # Copy over our glance-registry.conf |
| 337 | GLANCE_CONF=$GLANCE_DIR/etc/glance-registry.conf |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 338 | cp $FILES/glance-registry.conf $GLANCE_CONF |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 339 | sudo sed -e "s,%SQL_CONN%,$BASE_SQL_CONN/glance,g" -i $GLANCE_CONF |
Jesse Andrews | b96871e | 2011-10-02 09:02:46 -0700 | [diff] [blame] | 340 | sudo sed -e "s,%SERVICE_TOKEN%,$SERVICE_TOKEN,g" -i $GLANCE_CONF |
Anthony Young | a531b77 | 2011-09-20 09:59:54 -0700 | [diff] [blame] | 341 | sudo sed -e "s,%DEST%,$DEST,g" -i $GLANCE_CONF |
Anthony Young | f12d3ab | 2011-09-20 00:33:51 -0700 | [diff] [blame] | 342 | |
| 343 | GLANCE_API_CONF=$GLANCE_DIR/etc/glance-api.conf |
| 344 | cp $FILES/glance-api.conf $GLANCE_API_CONF |
Anthony Young | a531b77 | 2011-09-20 09:59:54 -0700 | [diff] [blame] | 345 | sudo sed -e "s,%DEST%,$DEST,g" -i $GLANCE_API_CONF |
Jesse Andrews | b96871e | 2011-10-02 09:02:46 -0700 | [diff] [blame] | 346 | sudo sed -e "s,%SERVICE_TOKEN%,$SERVICE_TOKEN,g" -i $GLANCE_API_CONF |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 347 | fi |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 348 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 349 | # Nova |
| 350 | # ---- |
| 351 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 352 | # We are going to use the sample http middleware configuration from the keystone |
| 353 | # project to launch nova. This paste config adds the configuration required |
| 354 | # for nova to validate keystone tokens - except we need to switch the config |
| 355 | # to use our admin token instead (instead of the token from their sample data). |
Jesse Andrews | 9f20f51 | 2011-10-02 09:18:03 -0700 | [diff] [blame] | 356 | sudo sed -e "s,999888777666,$SERVICE_TOKEN,g" -i $KEYSTONE_DIR/examples/paste/nova-api-paste.ini |
Jesse Andrews | ba23cc7 | 2011-09-11 03:22:13 -0700 | [diff] [blame] | 357 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 358 | if [[ "$ENABLED_SERVICES" =~ "n-cpu" ]]; then |
Jesse Andrews | dfcd200 | 2011-09-13 13:17:22 -0700 | [diff] [blame] | 359 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 360 | # Virtualization Configuration |
| 361 | # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| 362 | |
| 363 | # attempt to load modules: network block device - used to manage qcow images |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 364 | sudo modprobe nbd || true |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 365 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 366 | # Check for kvm (hardware based virtualization). If unable to load kvm, |
| 367 | # set the libvirt type to qemu. Note: many systems come with hardware |
| 368 | # virtualization disabled in BIOS. |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 369 | if [[ "$LIBVIRT_TYPE" -eq "kvm" ]]; then |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 370 | sudo modprobe kvm || true |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 371 | if [ ! -e /dev/kvm ]; then |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 372 | echo "WARNING: Switching to QEMU" |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 373 | LIBVIRT_TYPE=qemu |
| 374 | fi |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 375 | fi |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 376 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 377 | # Install and configure **LXC** if specified. LXC is another approach to |
| 378 | # splitting a system into many smaller parts. LXC uses cgroups and chroot |
| 379 | # to simulate multiple systems. |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 380 | if [[ "$LIBVIRT_TYPE" -eq "lxc" ]]; then |
Jesse Andrews | 8cfd8b6 | 2011-10-02 13:17:31 -0400 | [diff] [blame] | 381 | sudo apt-get install lxc -y |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 382 | # lxc requires cgroups to be configured on /cgroup |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 383 | sudo mkdir -p /cgroup |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 384 | if ! grep -q cgroup /etc/fstab; then |
Jesse Andrews | c315ebf | 2011-10-02 13:25:33 -0400 | [diff] [blame] | 385 | echo none /cgroup cgroup cpuacct,memory,devices,cpu,freezer,blkio 0 0 | sudo tee -a /etc/fstab |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 386 | fi |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 387 | sudo mount /cgroup |
Jesse Andrews | c6d3042 | 2011-10-02 13:11:28 -0400 | [diff] [blame] | 388 | fi |
| 389 | |
Jesse Andrews | e30432f | 2011-09-16 14:54:48 -0700 | [diff] [blame] | 390 | # User needs to be member of libvirtd group for nova-compute to use libvirt. |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 391 | sudo usermod -a -G libvirtd `whoami` |
| 392 | # if kvm wasn't running before we need to restart libvirt to enable it |
| 393 | sudo /etc/init.d/libvirt-bin restart |
| 394 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 395 | |
| 396 | # Instance Storage |
| 397 | # ~~~~~~~~~~~~~~~~ |
| 398 | |
| 399 | # Nova stores each instance in its own directory. |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 400 | mkdir -p $NOVA_DIR/instances |
| 401 | |
| 402 | # if there is a partition labeled nova-instances use it (ext filesystems |
| 403 | # can be labeled via e2label) |
| 404 | ## FIXME: if already mounted this blows up... |
| 405 | if [ -L /dev/disk/by-label/nova-instances ]; then |
| 406 | sudo mount -L nova-instances $NOVA_DIR/instances |
| 407 | sudo chown -R `whoami` $NOVA_DIR/instances |
| 408 | fi |
| 409 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 410 | # Clean out the instances directory. |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 411 | rm -rf $NOVA_DIR/instances/* |
Jesse Andrews | dfcd200 | 2011-09-13 13:17:22 -0700 | [diff] [blame] | 412 | fi |
| 413 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 414 | if [[ "$ENABLED_SERVICES" =~ "n-net" ]]; then |
| 415 | # delete traces of nova networks from prior runs |
Anthony Young | 09fde81 | 2011-09-20 02:23:54 -0700 | [diff] [blame] | 416 | sudo killall dnsmasq || true |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 417 | rm -rf $NOVA_DIR/networks |
| 418 | mkdir -p $NOVA_DIR/networks |
| 419 | fi |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 420 | |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 421 | function add_nova_flag { |
| 422 | echo "$1" >> $NOVA_DIR/bin/nova.conf |
| 423 | } |
| 424 | |
| 425 | # (re)create nova.conf |
| 426 | rm -f $NOVA_DIR/bin/nova.conf |
| 427 | add_nova_flag "--verbose" |
| 428 | add_nova_flag "--nodaemon" |
Jesse Andrews | 8ff5dbc | 2011-09-25 22:28:08 -0700 | [diff] [blame] | 429 | add_nova_flag "--scheduler_driver=$SCHEDULER" |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 430 | add_nova_flag "--dhcpbridge_flagfile=$NOVA_DIR/bin/nova.conf" |
| 431 | add_nova_flag "--network_manager=nova.network.manager.$NET_MAN" |
| 432 | add_nova_flag "--my_ip=$HOST_IP" |
Anthony Young | b1bdd5e | 2011-09-20 09:39:50 -0700 | [diff] [blame] | 433 | add_nova_flag "--public_interface=$PUBLIC_INTERFACE" |
| 434 | add_nova_flag "--vlan_interface=$VLAN_INTERFACE" |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 435 | add_nova_flag "--sql_connection=$BASE_SQL_CONN/nova" |
| 436 | add_nova_flag "--libvirt_type=$LIBVIRT_TYPE" |
Anthony Young | 2f14020 | 2011-09-26 13:02:40 -0700 | [diff] [blame] | 437 | add_nova_flag "--osapi_extensions_path=$OPENSTACKX_DIR/extensions" |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 438 | add_nova_flag "--vncproxy_url=http://$HOST_IP:6080" |
| 439 | add_nova_flag "--vncproxy_wwwroot=$NOVNC_DIR/" |
| 440 | add_nova_flag "--api_paste_config=$KEYSTONE_DIR/examples/paste/nova-api-paste.ini" |
| 441 | add_nova_flag "--image_service=nova.image.glance.GlanceImageService" |
| 442 | add_nova_flag "--ec2_dmz_host=$EC2_DMZ_HOST" |
| 443 | add_nova_flag "--rabbit_host=$RABBIT_HOST" |
Jesse Andrews | 53ed387 | 2011-10-02 14:28:17 -0400 | [diff] [blame] | 444 | add_nova_flag "--rabbit_password=$RABBIT_PASSWORD" |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 445 | add_nova_flag "--glance_api_servers=$GLANCE_HOSTPORT" |
Anthony Young | b1bdd5e | 2011-09-20 09:39:50 -0700 | [diff] [blame] | 446 | add_nova_flag "--flat_network_bridge=$FLAT_NETWORK_BRIDGE" |
Jesse Andrews | d1879c5 | 2011-09-16 16:28:13 -0700 | [diff] [blame] | 447 | if [ -n "$FLAT_INTERFACE" ]; then |
| 448 | add_nova_flag "--flat_interface=$FLAT_INTERFACE" |
| 449 | fi |
| 450 | if [ -n "$MULTI_HOST" ]; then |
| 451 | add_nova_flag "--multi_host=$MULTI_HOST" |
| 452 | fi |
| 453 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 454 | # Nova Database |
| 455 | # ~~~~~~~~~~~~~ |
| 456 | |
| 457 | # All nova components talk to a central database. We will need to do this step |
| 458 | # only once for an entire cluster. |
| 459 | |
Anthony Young | a074800 | 2011-09-16 21:37:36 -0700 | [diff] [blame] | 460 | if [[ "$ENABLED_SERVICES" =~ "mysql" ]]; then |
| 461 | # (re)create nova database |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 462 | mysql -u$MYSQL_USER -p$MYSQL_PASS -e 'DROP DATABASE IF EXISTS nova;' |
Anthony Young | a074800 | 2011-09-16 21:37:36 -0700 | [diff] [blame] | 463 | mysql -u$MYSQL_USER -p$MYSQL_PASS -e 'CREATE DATABASE nova;' |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 464 | |
| 465 | # (re)create nova database |
Anthony Young | a074800 | 2011-09-16 21:37:36 -0700 | [diff] [blame] | 466 | $NOVA_DIR/bin/nova-manage db sync |
| 467 | |
| 468 | # create a small network |
termie | 197d53d | 2011-09-28 17:18:23 -0700 | [diff] [blame] | 469 | $NOVA_DIR/bin/nova-manage network create private $FIXED_RANGE 1 $FIXED_NETWORK_SIZE |
Anthony Young | a074800 | 2011-09-16 21:37:36 -0700 | [diff] [blame] | 470 | |
| 471 | # create some floating ips |
| 472 | $NOVA_DIR/bin/nova-manage floating create $FLOATING_RANGE |
| 473 | fi |
| 474 | |
| 475 | |
Jesse Andrews | e8d9cd8 | 2011-09-13 15:16:26 -0700 | [diff] [blame] | 476 | # Keystone |
| 477 | # -------- |
| 478 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 479 | if [[ "$ENABLED_SERVICES" =~ "key" ]]; then |
| 480 | # (re)create keystone database |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 481 | mysql -u$MYSQL_USER -p$MYSQL_PASS -e 'DROP DATABASE IF EXISTS keystone;' |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 482 | mysql -u$MYSQL_USER -p$MYSQL_PASS -e 'CREATE DATABASE keystone;' |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 483 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 484 | # FIXME (anthony) keystone should use keystone.conf.example |
| 485 | KEYSTONE_CONF=$KEYSTONE_DIR/etc/keystone.conf |
Jesse Andrews | bf3868d | 2011-09-16 11:31:16 -0700 | [diff] [blame] | 486 | cp $FILES/keystone.conf $KEYSTONE_CONF |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 487 | sudo sed -e "s,%SQL_CONN%,$BASE_SQL_CONN/keystone,g" -i $KEYSTONE_CONF |
Anthony Young | e8fed48 | 2011-09-26 19:50:43 -0700 | [diff] [blame] | 488 | sudo sed -e "s,%DEST%,$DEST,g" -i $KEYSTONE_CONF |
Anthony Young | 3a09312 | 2011-09-13 19:01:45 +0000 | [diff] [blame] | 489 | |
Jesse Andrews | cbe98d5 | 2011-10-02 17:47:32 -0400 | [diff] [blame] | 490 | # keystone_data.sh creates our admin user and our ``SERVICE_TOKEN``. |
Anthony Young | ec21d93 | 2011-09-16 16:05:55 -0700 | [diff] [blame] | 491 | KEYSTONE_DATA=$KEYSTONE_DIR/bin/keystone_data.sh |
| 492 | cp $FILES/keystone_data.sh $KEYSTONE_DATA |
| 493 | sudo sed -e "s,%HOST_IP%,$HOST_IP,g" -i $KEYSTONE_DATA |
Jesse Andrews | b96871e | 2011-10-02 09:02:46 -0700 | [diff] [blame] | 494 | sudo sed -e "s,%SERVICE_TOKEN%,$SERVICE_TOKEN,g" -i $KEYSTONE_DATA |
Jesse Andrews | 89358af | 2011-10-02 14:11:17 -0400 | [diff] [blame] | 495 | sudo sed -e "s,%ADMIN_PASSWORD%,$ADMIN_PASSWORD,g" -i $KEYSTONE_DATA |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 496 | # initialize keystone with default users/endpoints |
Anthony Young | ec21d93 | 2011-09-16 16:05:55 -0700 | [diff] [blame] | 497 | BIN_DIR=$KEYSTONE_DIR/bin bash $KEYSTONE_DATA |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 498 | fi |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 499 | |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 500 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 501 | # Launch Services |
| 502 | # =============== |
Jesse Andrews | 30f68e9 | 2011-09-13 00:59:54 -0700 | [diff] [blame] | 503 | |
Jesse Andrews | 1c1d150 | 2011-09-12 19:29:56 -0700 | [diff] [blame] | 504 | # nova api crashes if we start it with a regular screen command, |
| 505 | # so send the start command by forcing text into the window. |
Jesse Andrews | dfcd200 | 2011-09-13 13:17:22 -0700 | [diff] [blame] | 506 | # Only run the services specified in ``ENABLED_SERVICES`` |
| 507 | |
Jesse Andrews | 1f71760 | 2011-09-16 15:18:53 -0700 | [diff] [blame] | 508 | # our screen helper to launch a service in a hidden named screen |
Jesse Andrews | 1c1d150 | 2011-09-12 19:29:56 -0700 | [diff] [blame] | 509 | function screen_it { |
Jesse Andrews | 1f71760 | 2011-09-16 15:18:53 -0700 | [diff] [blame] | 510 | NL=`echo -ne '\015'` |
Anthony Young | 292e46d | 2011-09-13 11:28:56 -0700 | [diff] [blame] | 511 | if [[ "$ENABLED_SERVICES" =~ "$1" ]]; then |
| 512 | screen -S nova -X screen -t $1 |
| 513 | screen -S nova -p $1 -X stuff "$2$NL" |
| 514 | fi |
Jesse Andrews | 1c1d150 | 2011-09-12 19:29:56 -0700 | [diff] [blame] | 515 | } |
| 516 | |
Jesse Andrews | a16e5e9 | 2011-09-16 16:30:55 -0700 | [diff] [blame] | 517 | # create a new named screen to run processes in |
| 518 | screen -d -m -S nova -t nova |
| 519 | sleep 1 |
| 520 | |
Jesse Andrews | 644b8e8 | 2011-10-02 17:50:41 -0400 | [diff] [blame] | 521 | # launch the glance registery service |
Anthony Young | d000b22 | 2011-09-19 14:46:53 -0700 | [diff] [blame] | 522 | if [[ "$ENABLED_SERVICES" =~ "g-reg" ]]; then |
| 523 | screen_it g-reg "cd $GLANCE_DIR; bin/glance-registry --config-file=etc/glance-registry.conf" |
| 524 | fi |
| 525 | |
Jesse Andrews | 644b8e8 | 2011-10-02 17:50:41 -0400 | [diff] [blame] | 526 | # launch the glance api and wait for it to answer before continuing |
Anthony Young | d000b22 | 2011-09-19 14:46:53 -0700 | [diff] [blame] | 527 | if [[ "$ENABLED_SERVICES" =~ "g-api" ]]; then |
| 528 | screen_it g-api "cd $GLANCE_DIR; bin/glance-api --config-file=etc/glance-api.conf" |
| 529 | while ! wget -q -O- http://$GLANCE_HOSTPORT; do |
| 530 | echo "Waiting for g-api ($GLANCE_HOSTPORT) to start..." |
| 531 | sleep 1 |
| 532 | done |
| 533 | fi |
| 534 | |
Jesse Andrews | 644b8e8 | 2011-10-02 17:50:41 -0400 | [diff] [blame] | 535 | # launch the keystone and wait for it to answer before continuing |
Anthony Young | d000b22 | 2011-09-19 14:46:53 -0700 | [diff] [blame] | 536 | if [[ "$ENABLED_SERVICES" =~ "key" ]]; then |
Anthony Young | f33796e | 2011-09-22 00:14:12 -0700 | [diff] [blame] | 537 | screen_it key "cd $KEYSTONE_DIR && $KEYSTONE_DIR/bin/keystone --config-file $KEYSTONE_CONF -d" |
Anthony Young | d000b22 | 2011-09-19 14:46:53 -0700 | [diff] [blame] | 538 | while ! wget -q -O- http://127.0.0.1:5000; do |
| 539 | echo "Waiting for keystone to start..." |
| 540 | sleep 1 |
| 541 | done |
| 542 | fi |
| 543 | |
Jesse Andrews | 644b8e8 | 2011-10-02 17:50:41 -0400 | [diff] [blame] | 544 | # launch the nova-api and wait for it to answer before continuing |
Anthony Young | d000b22 | 2011-09-19 14:46:53 -0700 | [diff] [blame] | 545 | if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then |
Anthony Young | 9bf3d76 | 2011-09-20 09:51:16 -0700 | [diff] [blame] | 546 | screen_it n-api "cd $NOVA_DIR && $NOVA_DIR/bin/nova-api" |
Anthony Young | d000b22 | 2011-09-19 14:46:53 -0700 | [diff] [blame] | 547 | while ! wget -q -O- http://127.0.0.1:8774; do |
| 548 | echo "Waiting for nova-api to start..." |
| 549 | sleep 1 |
| 550 | done |
| 551 | fi |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 552 | # Launching nova-compute should be as simple as running ``nova-compute`` but |
| 553 | # have to do a little more than that in our script. Since we add the group |
Jesse Andrews | 1f71760 | 2011-09-16 15:18:53 -0700 | [diff] [blame] | 554 | # ``libvirtd`` to our user in this script, when nova-compute is run it is |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 555 | # within the context of our original shell (so our groups won't be updated). |
Jesse Andrews | 1f71760 | 2011-09-16 15:18:53 -0700 | [diff] [blame] | 556 | # We can send the command nova-compute to the ``newgrp`` command to execute |
| 557 | # in a specific context. |
Anthony Young | 9bf3d76 | 2011-09-20 09:51:16 -0700 | [diff] [blame] | 558 | screen_it n-cpu "cd $NOVA_DIR && echo $NOVA_DIR/bin/nova-compute | newgrp libvirtd" |
| 559 | screen_it n-net "cd $NOVA_DIR && $NOVA_DIR/bin/nova-network" |
| 560 | screen_it n-sch "cd $NOVA_DIR && $NOVA_DIR/bin/nova-scheduler" |
Anthony Young | 527e341 | 2011-09-27 15:05:37 -0700 | [diff] [blame] | 561 | screen_it n-vnc "cd $NOVNC_DIR && ./utils/nova-wsproxy.py 6080 --web ." |
Anthony Young | 9bf3d76 | 2011-09-20 09:51:16 -0700 | [diff] [blame] | 562 | screen_it dash "cd $DASH_DIR && sudo /etc/init.d/apache2 restart; sudo tail -f /var/log/apache2/error.log" |
Jesse Andrews | 75a3765 | 2011-09-12 17:09:08 -0700 | [diff] [blame] | 563 | |
Jesse Andrews | d74257d | 2011-09-13 01:24:50 -0700 | [diff] [blame] | 564 | # Install Images |
| 565 | # ============== |
Jesse Andrews | e49b8bd | 2011-09-12 18:08:04 -0700 | [diff] [blame] | 566 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 567 | if [[ "$ENABLED_SERVICES" =~ "g-reg" ]]; then |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 568 | # Downloads a tty image (ami/aki/ari style), then extracts it. Upon extraction |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 569 | # we upload to glance with the glance cli tool. |
Jesse Andrews | 543d7d4 | 2011-09-16 14:16:36 -0700 | [diff] [blame] | 570 | if [ ! -f $FILES/tty.tgz ]; then |
| 571 | wget -c http://images.ansolabs.com/tty.tgz -O $FILES/tty.tgz |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 572 | fi |
Jesse Andrews | e49b8bd | 2011-09-12 18:08:04 -0700 | [diff] [blame] | 573 | |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 574 | # extract ami-tty/image, aki-tty/image & ari-tty/image |
Jesse Andrews | 543d7d4 | 2011-09-16 14:16:36 -0700 | [diff] [blame] | 575 | mkdir -p $FILES/images |
Jesse Andrews | 74e965f | 2011-09-16 14:19:46 -0700 | [diff] [blame] | 576 | tar -zxf $FILES/tty.tgz -C $FILES/images |
Anthony Young | 70dc5e0 | 2011-09-15 16:52:43 -0700 | [diff] [blame] | 577 | |
Jesse Andrews | 644b8e8 | 2011-10-02 17:50:41 -0400 | [diff] [blame] | 578 | # add a debugging images to glance |
Jesse Andrews | a5e5f2a | 2011-10-02 21:07:08 -0400 | [diff] [blame^] | 579 | RVAL=`glance add -A $SERVICE_TOKEN name="tty-kernel" is_public=true container_format=aki disk_format=aki < $FILES/images/aki-tty/image` |
| 580 | KERNEL_ID=`echo $RVAL | cut -d":" -f2 | tr -d " "` |
| 581 | RVAL=`glance add -A $SERVICE_TOKEN name="tty-ramdisk" is_public=true container_format=ari disk_format=ari < $FILES/images/ari-tty/image` |
| 582 | RAMDISK_ID=`echo $RVAL | cut -d":" -f2 | tr -d " "` |
Jesse Andrews | 014e913 | 2011-10-02 19:23:22 -0400 | [diff] [blame] | 583 | glance add -A $SERVICE_TOKEN name="tty" is_public=true container_format=ami disk_format=ami kernel_id=$KERNEL_ID ramdisk_id=$RAMDISK_ID < $FILES/images/ami-tty/image |
Jesse Andrews | e49b8bd | 2011-09-12 18:08:04 -0700 | [diff] [blame] | 584 | fi |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 585 | |
| 586 | # Using the cloud |
| 587 | # =============== |
| 588 | |
| 589 | # If you installed the dashboard on this server, then you should be able |
root | 40a3700 | 2011-09-20 18:06:14 +0000 | [diff] [blame] | 590 | # to access the site using your browser. |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 591 | if [[ "$ENABLED_SERVICES" =~ "dash" ]]; then |
| 592 | echo "dashboard is now available at http://$HOST_IP/" |
| 593 | fi |
| 594 | |
| 595 | # If keystone is present, you can point nova cli to this server |
| 596 | if [[ "$ENABLED_SERVICES" =~ "key" ]]; then |
| 597 | echo "keystone is serving at http://$HOST_IP:5000/v2.0/" |
| 598 | echo "examples on using novaclient command line is in exercise.sh" |
Jesse Andrews | 89358af | 2011-10-02 14:11:17 -0400 | [diff] [blame] | 599 | echo "the default users are: admin and demo" |
| 600 | echo "the password: $ADMIN_PASSWORD" |
Jesse Andrews | 2485906 | 2011-09-15 21:28:23 -0700 | [diff] [blame] | 601 | fi |
termie | 523c405 | 2011-09-28 19:49:40 -0500 | [diff] [blame] | 602 | |
| 603 | # Summary |
| 604 | # ======= |
| 605 | |
| 606 | # End our timer and give a timing summary |
| 607 | END_TIME=`python -c "import time; print time.time()"` |
| 608 | ELAPSED=`python -c "print $END_TIME - $START_TIME"` |
| 609 | echo "stack.sh completed in $ELAPSED seconds." |