blob: a0a93d5debbffdae79d9f3b614b73db8bc8f739a [file] [log] [blame]
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +03001# lib/ironic
2# Functions to control the configuration and operation of the **Ironic** service
3
4# Dependencies:
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01005#
6# - ``functions`` file
7# - ``DEST``, ``DATA_DIR``, ``STACK_USER`` must be defined
8# - ``SERVICE_{TENANT_NAME|PASSWORD}`` must be defined
9# - ``SERVICE_HOST``
10# - ``KEYSTONE_TOKEN_FORMAT`` must be defined
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030011
12# ``stack.sh`` calls the entry points in this order:
13#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010014# - install_ironic
15# - install_ironicclient
16# - init_ironic
17# - start_ironic
18# - stop_ironic
19# - cleanup_ironic
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030020
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040021# Save trace and pipefail settings
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030022XTRACE=$(set +o | grep xtrace)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040023PIPEFAIL=$(set +o | grep pipefail)
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030024set +o xtrace
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040025set +o pipefail
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030026
27# Defaults
28# --------
29
30# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050031GITDIR["python-ironicclient"]=$DEST/python-ironicclient
Sean Dague5cb19062014-11-01 01:37:45 +010032
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030033IRONIC_DIR=$DEST/ironic
Jim Rollenhagenf00766b2014-08-15 01:08:11 +000034IRONIC_PYTHON_AGENT_DIR=$DEST/ironic-python-agent
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040035IRONIC_DATA_DIR=$DATA_DIR/ironic
36IRONIC_STATE_PATH=/var/lib/ironic
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030037IRONIC_AUTH_CACHE_DIR=${IRONIC_AUTH_CACHE_DIR:-/var/cache/ironic}
38IRONIC_CONF_DIR=${IRONIC_CONF_DIR:-/etc/ironic}
39IRONIC_CONF_FILE=$IRONIC_CONF_DIR/ironic.conf
40IRONIC_ROOTWRAP_CONF=$IRONIC_CONF_DIR/rootwrap.conf
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030041IRONIC_POLICY_JSON=$IRONIC_CONF_DIR/policy.json
42
yunhong jiangae9ee6b2014-10-08 07:01:02 -070043# Deploy to hardware platform
44IRONIC_HW_NODE_CPU=${IRONIC_HW_NODE_CPU:-1}
45IRONIC_HW_NODE_RAM=${IRONIC_HW_NODE_RAM:-512}
46IRONIC_HW_NODE_DISK=${IRONIC_HW_NODE_DISK:-10}
47IRONIC_HW_EPHEMERAL_DISK=${IRONIC_HW_EPHEMERAL_DISK:-0}
48# The file is composed of multiple lines, each line includes four field
49# separated by white space: IPMI address, MAC address, IPMI username
50# and IPMI password.
51# An example:
52# 192.168.110.107 00:1e:67:57:50:4c root otc123
53IRONIC_IPMIINFO_FILE=${IRONIC_IPMIINFO_FILE:-$IRONIC_DATA_DIR/hardware_info}
54
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040055# Set up defaults for functional / integration testing
56IRONIC_SCRIPTS_DIR=${IRONIC_SCRIPTS_DIR:-$TOP_DIR/tools/ironic/scripts}
57IRONIC_TEMPLATES_DIR=${IRONIC_TEMPLATES_DIR:-$TOP_DIR/tools/ironic/templates}
58IRONIC_BAREMETAL_BASIC_OPS=$(trueorfalse False $IRONIC_BAREMETAL_BASIC_OPS)
Devananda van der Veen83eeed02014-04-11 10:08:41 -070059IRONIC_ENABLED_DRIVERS=${IRONIC_ENABLED_DRIVERS:-fake,pxe_ssh,pxe_ipmitool}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040060IRONIC_SSH_USERNAME=${IRONIC_SSH_USERNAME:-`whoami`}
61IRONIC_SSH_KEY_DIR=${IRONIC_SSH_KEY_DIR:-$IRONIC_DATA_DIR/ssh_keys}
62IRONIC_SSH_KEY_FILENAME=${IRONIC_SSH_KEY_FILENAME:-ironic_key}
63IRONIC_KEY_FILE=$IRONIC_SSH_KEY_DIR/$IRONIC_SSH_KEY_FILENAME
64IRONIC_SSH_VIRT_TYPE=${IRONIC_SSH_VIRT_TYPE:-virsh}
65IRONIC_TFTPBOOT_DIR=${IRONIC_TFTPBOOT_DIR:-$IRONIC_DATA_DIR/tftpboot}
yunhong jiangae9ee6b2014-10-08 07:01:02 -070066IRONIC_TFTPSERVER_IP=${IRONIC_TFTPSERVER_IP:-$HOST_IP}
Adam Gandelman86765102014-04-14 11:57:13 -070067IRONIC_VM_SSH_PORT=${IRONIC_VM_SSH_PORT:-22}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040068IRONIC_VM_SSH_ADDRESS=${IRONIC_VM_SSH_ADDRESS:-$HOST_IP}
69IRONIC_VM_COUNT=${IRONIC_VM_COUNT:-1}
70IRONIC_VM_SPECS_CPU=${IRONIC_VM_SPECS_CPU:-1}
Adam Gandelmanea335f42014-07-03 17:57:49 -070071IRONIC_VM_SPECS_RAM=${IRONIC_VM_SPECS_RAM:-512}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040072IRONIC_VM_SPECS_DISK=${IRONIC_VM_SPECS_DISK:-10}
David Shrewsbury3e4612b2014-05-01 11:38:21 -040073IRONIC_VM_EPHEMERAL_DISK=${IRONIC_VM_EPHEMERAL_DISK:-0}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040074IRONIC_VM_EMULATOR=${IRONIC_VM_EMULATOR:-/usr/bin/qemu-system-x86_64}
75IRONIC_VM_NETWORK_BRIDGE=${IRONIC_VM_NETWORK_BRIDGE:-brbm}
76IRONIC_VM_NETWORK_RANGE=${IRONIC_VM_NETWORK_RANGE:-192.0.2.0/24}
77IRONIC_VM_MACS_CSV_FILE=${IRONIC_VM_MACS_CSV_FILE:-$IRONIC_DATA_DIR/ironic_macs.csv}
78IRONIC_AUTHORIZED_KEYS_FILE=${IRONIC_AUTHORIZED_KEYS_FILE:-$HOME/.ssh/authorized_keys}
79
Adam Gandelman8af6fae2014-04-11 17:06:14 -070080# By default, baremetal VMs will console output to file.
81IRONIC_VM_LOG_CONSOLE=${IRONIC_VM_LOG_CONSOLE:-True}
82IRONIC_VM_LOG_DIR=${IRONIC_VM_LOG_DIR:-$IRONIC_DATA_DIR/logs/}
83
Alexander Gordeevf177f722014-03-14 18:44:48 +040084# Use DIB to create deploy ramdisk and kernel.
85IRONIC_BUILD_DEPLOY_RAMDISK=`trueorfalse True $IRONIC_BUILD_DEPLOY_RAMDISK`
86# If not use DIB, these files are used as deploy ramdisk/kernel.
87# (The value must be a absolute path)
88IRONIC_DEPLOY_RAMDISK=${IRONIC_DEPLOY_RAMDISK:-}
89IRONIC_DEPLOY_KERNEL=${IRONIC_DEPLOY_KERNEL:-}
90IRONIC_DEPLOY_ELEMENT=${IRONIC_DEPLOY_ELEMENT:-deploy-ironic}
91
Jim Rollenhagen792dc5f2014-08-27 17:03:00 -070092IRONIC_AGENT_KERNEL_URL=${IRONIC_AGENT_KERNEL_URL:-http://tarballs.openstack.org/ironic-python-agent/coreos/files/coreos_production_pxe.vmlinuz}
Jim Rollenhagen4cb0d8c2014-09-11 16:45:58 -070093IRONIC_AGENT_RAMDISK_URL=${IRONIC_AGENT_RAMDISK_URL:-http://tarballs.openstack.org/ironic-python-agent/coreos/files/coreos_production_pxe_image-oem.cpio.gz}
Jim Rollenhagena6a45462014-08-05 18:08:29 +000094
95# Which deploy driver to use - valid choices right now
yunhong jiangae9ee6b2014-10-08 07:01:02 -070096# are 'pxe_ssh', 'pxe_ipmitool' and 'agent_ssh'.
Jim Rollenhagena6a45462014-08-05 18:08:29 +000097IRONIC_DEPLOY_DRIVER=${IRONIC_DEPLOY_DRIVER:-pxe_ssh}
98
Alexander Gordeevf177f722014-03-14 18:44:48 +040099#TODO(agordeev): replace 'ubuntu' with host distro name getting
100IRONIC_DEPLOY_FLAVOR=${IRONIC_DEPLOY_FLAVOR:-ubuntu $IRONIC_DEPLOY_ELEMENT}
101
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300102# Support entry points installation of console scripts
103IRONIC_BIN_DIR=$(get_python_exec_prefix)
104
105# Ironic connection info. Note the port must be specified.
106IRONIC_SERVICE_PROTOCOL=http
107IRONIC_HOSTPORT=${IRONIC_HOSTPORT:-$SERVICE_HOST:6385}
108
Dean Troyer4237f592014-01-29 16:22:11 -0600109# Tell Tempest this project is present
110TEMPEST_SERVICES+=,ironic
111
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100112# Enable iPXE
113IRONIC_IPXE_ENABLED=$(trueorfalse False $IRONIC_IPXE_ENABLED)
114IRONIC_HTTP_DIR=${IRONIC_HTTP_DIR:-$IRONIC_DATA_DIR/httpboot}
115IRONIC_HTTP_SERVER=${IRONIC_HTTP_SERVER:-$HOST_IP}
116IRONIC_HTTP_PORT=${IRONIC_HTTP_PORT:-8088}
117
118# get_pxe_boot_file() - Get the PXE/iPXE boot file path
119function get_pxe_boot_file {
120 local relpath=syslinux/pxelinux.0
121 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
122 relpath=ipxe/undionly.kpxe
123 fi
124
125 local pxe_boot_file
126 if is_ubuntu; then
127 pxe_boot_file=/usr/lib/$relpath
128 elif is_fedora || is_suse; then
129 pxe_boot_file=/usr/share/$relpath
130 fi
131
132 echo $pxe_boot_file
133}
134
135# PXE boot image
136IRONIC_PXE_BOOT_IMAGE=${IRONIC_PXE_BOOT_IMAGE:-$(get_pxe_boot_file)}
137
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300138
139# Functions
140# ---------
141
Dean Troyer1023ff72014-01-27 14:56:44 -0600142# Test if any Ironic services are enabled
143# is_ironic_enabled
144function is_ironic_enabled {
145 [[ ,${ENABLED_SERVICES} =~ ,"ir-" ]] && return 0
146 return 1
147}
148
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700149function is_ironic_hardware {
150 is_ironic_enabled && [[ -n "${IRONIC_DEPLOY_DRIVER##*_ssh}" ]] && return 0
151 return 1
152}
153
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300154# install_ironic() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100155function install_ironic {
Adam Gandelman6d271482014-08-05 18:12:29 -0700156 # make sure all needed service were enabled
157 for srv in nova glance key; do
158 if ! is_service_enabled "$srv"; then
159 die $LINENO "$srv should be enabled for Ironic."
160 fi
161 done
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300162 git_clone $IRONIC_REPO $IRONIC_DIR $IRONIC_BRANCH
163 setup_develop $IRONIC_DIR
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100164
165 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
166 install_apache_wsgi
167 fi
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300168}
169
170# install_ironicclient() - Collect sources and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100171function install_ironicclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500172 if use_library_from_git "python-ironicclient"; then
173 git_clone_by_name "python-ironicclient"
174 setup_dev_lib "python-ironicclient"
175 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-ironicclient"]}/tools/,/etc/bash_completion.d/}ironic.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100176 else
177 # nothing actually "requires" ironicclient, so force instally from pypi
178 pip_install python-ironicclient
179 fi
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300180}
181
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100182# _cleanup_ironic_apache_wsgi() - Remove wsgi files, disable and remove apache vhost file
183function _cleanup_ironic_apache_wsgi {
184 sudo rm -rf $IRONIC_HTTP_DIR
185 disable_apache_site ironic
186 sudo rm -f $(apache_site_config_for ironic)
187 restart_apache_server
188}
189
190# _config_ironic_apache_wsgi() - Set WSGI config files of Ironic
191function _config_ironic_apache_wsgi {
192 local ironic_apache_conf=$(apache_site_config_for ironic)
193 sudo cp $FILES/apache-ironic.template $ironic_apache_conf
194 sudo sed -e "
195 s|%PUBLICPORT%|$IRONIC_HTTP_PORT|g;
196 s|%HTTPROOT%|$IRONIC_HTTP_DIR|g;
197 " -i $ironic_apache_conf
198 enable_apache_site ironic
199}
200
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300201# cleanup_ironic() - Remove residual data files, anything left over from previous
202# runs that would need to clean up.
Ian Wienandaee18c72014-02-21 15:35:08 +1100203function cleanup_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300204 sudo rm -rf $IRONIC_AUTH_CACHE_DIR
205}
206
Adam Gandelman6d271482014-08-05 18:12:29 -0700207# configure_ironic_dirs() - Create all directories required by Ironic and
208# associated services.
209function configure_ironic_dirs {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300210 if [[ ! -d $IRONIC_CONF_DIR ]]; then
211 sudo mkdir -p $IRONIC_CONF_DIR
212 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100213
214 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
215 sudo mkdir -p $IRONIC_HTTP_DIR
216 sudo chown -R $STACK_USER:$LIBVIRT_GROUP $IRONIC_HTTP_DIR
217 fi
218
Adam Gandelman6d271482014-08-05 18:12:29 -0700219 sudo mkdir -p $IRONIC_DATA_DIR
220 sudo mkdir -p $IRONIC_STATE_PATH
221 sudo mkdir -p $IRONIC_TFTPBOOT_DIR
222 sudo chown -R $STACK_USER $IRONIC_DATA_DIR $IRONIC_STATE_PATH
223 sudo chown -R $STACK_USER:$LIBVIRT_GROUP $IRONIC_TFTPBOOT_DIR
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100224 mkdir -p $IRONIC_TFTPBOOT_DIR/pxelinux.cfg
225
226 if [ ! -f $IRONIC_PXE_BOOT_IMAGE ]; then
227 die $LINENO "PXE boot file $IRONIC_PXE_BOOT_IMAGE not found."
Adam Gandelman6d271482014-08-05 18:12:29 -0700228 fi
229
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100230 cp $IRONIC_PXE_BOOT_IMAGE $IRONIC_TFTPBOOT_DIR
Adam Gandelman6d271482014-08-05 18:12:29 -0700231}
232
233# configure_ironic() - Set config files, create data dirs, etc
234function configure_ironic {
235 configure_ironic_dirs
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300236 sudo chown $STACK_USER $IRONIC_CONF_DIR
237
238 # Copy over ironic configuration file and configure common parameters.
239 cp $IRONIC_DIR/etc/ironic/ironic.conf.sample $IRONIC_CONF_FILE
240 iniset $IRONIC_CONF_FILE DEFAULT debug True
241 inicomment $IRONIC_CONF_FILE DEFAULT log_file
242 iniset $IRONIC_CONF_FILE DEFAULT sql_connection `database_connection_url ironic`
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400243 iniset $IRONIC_CONF_FILE DEFAULT state_path $IRONIC_STATE_PATH
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300244 iniset $IRONIC_CONF_FILE DEFAULT use_syslog $SYSLOG
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300245 # Configure Ironic conductor, if it was enabled.
246 if is_service_enabled ir-cond; then
247 configure_ironic_conductor
248 fi
249
250 # Configure Ironic API, if it was enabled.
251 if is_service_enabled ir-api; then
252 configure_ironic_api
253 fi
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400254
Adam Gandelmanab592932014-06-06 15:12:32 -0700255 # Format logging
256 if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
257 setup_colorized_logging $IRONIC_CONF_FILE DEFAULT
258 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100259
260 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]]; then
261 _config_ironic_apache_wsgi
262 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300263}
264
265# configure_ironic_api() - Is used by configure_ironic(). Performs
266# API specific configuration.
Ian Wienandaee18c72014-02-21 15:35:08 +1100267function configure_ironic_api {
Roman Prykhodchenkoc48c3122013-10-01 17:19:05 +0300268 iniset $IRONIC_CONF_FILE DEFAULT auth_strategy keystone
269 iniset $IRONIC_CONF_FILE DEFAULT policy_file $IRONIC_POLICY_JSON
Brant Knudson05952372014-09-19 17:22:22 -0500270 configure_auth_token_middleware $IRONIC_CONF_FILE ironic $IRONIC_AUTH_CACHE_DIR/api
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300271 iniset_rpc_backend ironic $IRONIC_CONF_FILE DEFAULT
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300272
273 cp -p $IRONIC_DIR/etc/ironic/policy.json $IRONIC_POLICY_JSON
274}
275
276# configure_ironic_conductor() - Is used by configure_ironic().
277# Sets conductor specific settings.
Ian Wienandaee18c72014-02-21 15:35:08 +1100278function configure_ironic_conductor {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300279 cp $IRONIC_DIR/etc/ironic/rootwrap.conf $IRONIC_ROOTWRAP_CONF
Lucas Alvares Gomes279295c2014-01-14 11:37:51 +0000280 cp -r $IRONIC_DIR/etc/ironic/rootwrap.d $IRONIC_CONF_DIR
Dean Troyerb52caa32014-07-25 13:04:13 -0500281 local ironic_rootwrap=$(get_rootwrap_location ironic)
282 local rootwrap_isudoer_cmd="$ironic_rootwrap $IRONIC_CONF_DIR/rootwrap.conf *"
Adam Gandelman3f2a7b72014-04-14 16:14:33 -0700283
284 # Set up the rootwrap sudoers for ironic
Dean Troyerb52caa32014-07-25 13:04:13 -0500285 local tempfile=`mktemp`
286 echo "$STACK_USER ALL=(root) NOPASSWD: $rootwrap_isudoer_cmd" >$tempfile
287 chmod 0440 $tempfile
288 sudo chown root:root $tempfile
289 sudo mv $tempfile /etc/sudoers.d/ironic-rootwrap
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300290
Alexander Gordeeva67cb1a2014-03-04 18:38:33 +0400291 iniset $IRONIC_CONF_FILE DEFAULT rootwrap_config $IRONIC_ROOTWRAP_CONF
Devananda van der Veen83eeed02014-04-11 10:08:41 -0700292 iniset $IRONIC_CONF_FILE DEFAULT enabled_drivers $IRONIC_ENABLED_DRIVERS
Adam Gandelmand3011982014-03-24 13:55:34 -0700293 iniset $IRONIC_CONF_FILE conductor api_url http://$HOST_IP:6385
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700294 iniset $IRONIC_CONF_FILE pxe tftp_server $IRONIC_TFTPSERVER_IP
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400295 iniset $IRONIC_CONF_FILE pxe tftp_root $IRONIC_TFTPBOOT_DIR
296 iniset $IRONIC_CONF_FILE pxe tftp_master_path $IRONIC_TFTPBOOT_DIR/master_images
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700297 if [[ "$IRONIC_VM_LOG_CONSOLE" == "True" ]] ; then
298 iniset $IRONIC_CONF_FILE pxe pxe_append_params "nofb nomodeset vga=normal console=ttyS0"
299 fi
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000300 if [[ "$IRONIC_DEPLOY_DRIVER" == "agent_ssh" ]] ; then
301 if [[ "$SWIFT_ENABLE_TEMPURLS" == "True" ]] ; then
302 iniset $IRONIC_CONF_FILE glance swift_temp_url_key $SWIFT_TEMPURL_KEY
303 else
304 die $LINENO "SWIFT_ENABLE_TEMPURLS must be True to use agent_ssh driver in Ironic."
305 fi
Jim Rollenhagen74b28bc2014-10-29 14:15:22 -0700306 iniset $IRONIC_CONF_FILE glance swift_endpoint_url http://${HOST_IP}:${SWIFT_DEFAULT_BIND_PORT:-8080}
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000307 iniset $IRONIC_CONF_FILE glance swift_api_version v1
Adam Gandelmanab50c702014-10-22 13:21:22 -0700308 local tenant_id=$(get_or_create_project $SERVICE_TENANT_NAME)
309 iniset $IRONIC_CONF_FILE glance swift_account AUTH_${tenant_id}
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000310 iniset $IRONIC_CONF_FILE glance swift_container glance
311 iniset $IRONIC_CONF_FILE glance swift_temp_url_duration 3600
312 iniset $IRONIC_CONF_FILE agent heartbeat_timeout 30
313 if [[ "$IRONIC_VM_LOG_CONSOLE" == "True" ]] ; then
314 iniset $IRONIC_CONF_FILE agent agent_pxe_append_params "nofb nomodeset vga=normal console=ttyS0"
315 fi
316 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100317
318 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
319 local pxebin=`basename $IRONIC_PXE_BOOT_IMAGE`
320 iniset $IRONIC_CONF_FILE pxe ipxe_enabled True
321 iniset $IRONIC_CONF_FILE pxe pxe_config_template '\$pybasedir/drivers/modules/ipxe_config.template'
322 iniset $IRONIC_CONF_FILE pxe pxe_bootfile_name $pxebin
323 iniset $IRONIC_CONF_FILE pxe http_root $IRONIC_HTTP_DIR
324 iniset $IRONIC_CONF_FILE pxe http_url "http://$IRONIC_HTTP_SERVER:$IRONIC_HTTP_PORT"
325 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300326}
327
328# create_ironic_cache_dir() - Part of the init_ironic() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100329function create_ironic_cache_dir {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300330 # Create cache dir
331 sudo mkdir -p $IRONIC_AUTH_CACHE_DIR/api
332 sudo chown $STACK_USER $IRONIC_AUTH_CACHE_DIR/api
333 rm -f $IRONIC_AUTH_CACHE_DIR/api/*
334 sudo mkdir -p $IRONIC_AUTH_CACHE_DIR/registry
335 sudo chown $STACK_USER $IRONIC_AUTH_CACHE_DIR/registry
336 rm -f $IRONIC_AUTH_CACHE_DIR/registry/*
337}
338
339# create_ironic_accounts() - Set up common required ironic accounts
340
341# Tenant User Roles
342# ------------------------------------------------------------------
343# service ironic admin # if enabled
Ian Wienandaee18c72014-02-21 15:35:08 +1100344function create_ironic_accounts {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300345
Dean Troyerb52caa32014-07-25 13:04:13 -0500346 local service_tenant=$(openstack project list | awk "/ $SERVICE_TENANT_NAME / { print \$2 }")
347 local admin_role=$(openstack role list | awk "/ admin / { print \$2 }")
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300348
349 # Ironic
350 if [[ "$ENABLED_SERVICES" =~ "ir-api" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100351 # Get ironic user if exists
352
Dean Troyerb52caa32014-07-25 13:04:13 -0500353 local ironic_user=$(get_or_create_user "ironic" \
354 "$SERVICE_PASSWORD" $service_tenant)
355 get_or_add_user_role $admin_role $ironic_user $service_tenant
Bartosz Górski0abde392014-02-28 14:15:19 +0100356
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300357 if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100358
Dean Troyerb52caa32014-07-25 13:04:13 -0500359 local ironic_service=$(get_or_create_service "ironic" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100360 "baremetal" "Ironic baremetal provisioning service")
Dean Troyerb52caa32014-07-25 13:04:13 -0500361 get_or_create_endpoint $ironic_service \
Bartosz Górski0abde392014-02-28 14:15:19 +0100362 "$REGION_NAME" \
363 "$IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT" \
364 "$IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT" \
365 "$IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300366 fi
367 fi
368}
369
370
371# init_ironic() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100372function init_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300373 # (Re)create ironic database
374 recreate_database ironic utf8
375
376 # Migrate ironic database
Dmitry Tantsur0c6a6542014-06-02 20:19:33 +0200377 $IRONIC_BIN_DIR/ironic-dbsync --config-file=$IRONIC_CONF_FILE
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300378
379 create_ironic_cache_dir
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300380}
381
Adam Gandelman22ec45e2014-10-16 17:41:22 -0700382# _ironic_bm_vm_names() - Generates list of names for baremetal VMs.
383function _ironic_bm_vm_names {
384 local idx
385 local num_vms=$(($IRONIC_VM_COUNT - 1))
386 for idx in $(seq 0 $num_vms); do
387 echo "baremetal${IRONIC_VM_NETWORK_BRIDGE}_${idx}"
388 done
389}
390
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300391# start_ironic() - Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100392function start_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300393 # Start Ironic API server, if enabled.
394 if is_service_enabled ir-api; then
395 start_ironic_api
396 fi
397
398 # Start Ironic conductor, if enabled.
399 if is_service_enabled ir-cond; then
400 start_ironic_conductor
401 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100402
403 # Start Apache if iPXE is enabled
404 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
405 restart_apache_server
406 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300407}
408
409# start_ironic_api() - Used by start_ironic().
410# Starts Ironic API server.
Ian Wienandaee18c72014-02-21 15:35:08 +1100411function start_ironic_api {
Chris Dent2f27a0e2014-09-09 13:46:02 +0100412 run_process ir-api "$IRONIC_BIN_DIR/ironic-api --config-file=$IRONIC_CONF_FILE"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300413 echo "Waiting for ir-api ($IRONIC_HOSTPORT) to start..."
JUN JIE NAN0aa85342013-09-13 15:47:09 +0800414 if ! timeout $SERVICE_TIMEOUT sh -c "while ! wget --no-proxy -q -O- http://$IRONIC_HOSTPORT; do sleep 1; done"; then
Sean Dague101b4242013-10-22 08:47:11 -0400415 die $LINENO "ir-api did not start"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300416 fi
417}
418
419# start_ironic_conductor() - Used by start_ironic().
420# Starts Ironic conductor.
Ian Wienandaee18c72014-02-21 15:35:08 +1100421function start_ironic_conductor {
Chris Dent2f27a0e2014-09-09 13:46:02 +0100422 run_process ir-cond "$IRONIC_BIN_DIR/ironic-conductor --config-file=$IRONIC_CONF_FILE"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300423 # TODO(romcheg): Find a way to check whether the conductor has started.
424}
425
426# stop_ironic() - Stop running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100427function stop_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300428 # Kill the Ironic screen windows
429 screen -S $SCREEN_NAME -p ir-api -X kill
430 screen -S $SCREEN_NAME -p ir-cond -X kill
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100431
432 # Cleanup the WSGI files
433 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
434 _cleanup_ironic_apache_wsgi
435 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300436}
437
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400438function is_ironic {
439 if ( is_service_enabled ir-cond && is_service_enabled ir-api ); then
440 return 0
441 fi
442 return 1
443}
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300444
Adam Gandelman6d271482014-08-05 18:12:29 -0700445function create_ovs_taps {
446 local ironic_net_id=$(neutron net-list | grep private | get_field 1)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400447
Adam Gandelman6d271482014-08-05 18:12:29 -0700448 # Work around: No netns exists on host until a Neutron port is created. We
449 # need to create one in Neutron to know what netns to tap into prior to the
450 # first node booting.
451 local port_id=$(neutron port-create private | grep " id " | get_field 2)
452
453 # intentional sleep to make sure the tag has been set to port
454 sleep 10
455
456 local tapdev=$(sudo ip netns exec qdhcp-${ironic_net_id} ip link list | grep tap | cut -d':' -f2 | cut -b2-)
457 local tag_id=$(sudo ovs-vsctl show |grep ${tapdev} -A1 -m1 | grep tag | cut -d':' -f2 | cut -b2-)
458
459 # make sure veth pair is not existing, otherwise delete its links
460 sudo ip link show ovs-tap1 && sudo ip link delete ovs-tap1
461 sudo ip link show brbm-tap1 && sudo ip link delete brbm-tap1
462 # create veth pair for future interconnection between br-int and brbm
463 sudo ip link add brbm-tap1 type veth peer name ovs-tap1
464 sudo ip link set dev brbm-tap1 up
465 sudo ip link set dev ovs-tap1 up
466
467 sudo ovs-vsctl -- --if-exists del-port ovs-tap1 -- add-port br-int ovs-tap1 tag=$tag_id
468 sudo ovs-vsctl -- --if-exists del-port brbm-tap1 -- add-port $IRONIC_VM_NETWORK_BRIDGE brbm-tap1
469
470 # Remove the port needed only for workaround.
471 neutron port-delete $port_id
Adam Gandelmancec97922014-07-29 18:43:18 -0700472
473 # Finally, share the fixed tenant network across all tenants. This allows the host
474 # to serve TFTP to a single network namespace via the tap device created above.
475 neutron net-update $ironic_net_id --shared true
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400476}
477
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400478function create_bridge_and_vms {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400479 # Call libvirt setup scripts in a new shell to ensure any new group membership
480 sudo su $STACK_USER -c "$IRONIC_SCRIPTS_DIR/setup-network"
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700481 if [[ "$IRONIC_VM_LOG_CONSOLE" == "True" ]] ; then
Dean Troyerb52caa32014-07-25 13:04:13 -0500482 local log_arg="$IRONIC_VM_LOG_DIR"
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700483 else
Dean Troyerb52caa32014-07-25 13:04:13 -0500484 local log_arg=""
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700485 fi
Adam Gandelman22ec45e2014-10-16 17:41:22 -0700486 local vm_name
487 for vm_name in $(_ironic_bm_vm_names); do
488 sudo su $STACK_USER -c "$IRONIC_SCRIPTS_DIR/create-node $vm_name \
489 $IRONIC_VM_SPECS_CPU $IRONIC_VM_SPECS_RAM $IRONIC_VM_SPECS_DISK \
490 amd64 $IRONIC_VM_NETWORK_BRIDGE $IRONIC_VM_EMULATOR \
491 $log_arg" >> $IRONIC_VM_MACS_CSV_FILE
492 done
Adam Gandelman6d271482014-08-05 18:12:29 -0700493 create_ovs_taps
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400494}
495
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700496function enroll_nodes {
Dean Troyerb52caa32014-07-25 13:04:13 -0500497 local chassis_id=$(ironic chassis-create -d "ironic test chassis" | grep " uuid " | get_field 2)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400498 local idx=0
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000499
500 if [[ "$IRONIC_DEPLOY_DRIVER" == "pxe_ssh" ]] ; then
501 local _IRONIC_DEPLOY_KERNEL_KEY=pxe_deploy_kernel
502 local _IRONIC_DEPLOY_RAMDISK_KEY=pxe_deploy_ramdisk
503 elif [[ "$IRONIC_DEPLOY_DRIVER" == "agent_ssh" ]] ; then
504 local _IRONIC_DEPLOY_KERNEL_KEY=deploy_kernel
505 local _IRONIC_DEPLOY_RAMDISK_KEY=deploy_ramdisk
506 fi
507
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700508 if ! is_ironic_hardware; then
509 local ironic_node_cpu=$IRONIC_VM_SPECS_CPU
510 local ironic_node_ram=$IRONIC_VM_SPECS_RAM
511 local ironic_node_disk=$IRONIC_VM_SPECS_DISK
512 local ironic_ephemeral_disk=$IRONIC_VM_EPHEMERAL_DISK
513 local ironic_hwinfo_file=$IRONIC_VM_MACS_CSV_FILE
514 local node_options="\
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000515 -i $_IRONIC_DEPLOY_KERNEL_KEY=$IRONIC_DEPLOY_KERNEL_ID \
516 -i $_IRONIC_DEPLOY_RAMDISK_KEY=$IRONIC_DEPLOY_RAMDISK_ID \
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400517 -i ssh_virt_type=$IRONIC_SSH_VIRT_TYPE \
518 -i ssh_address=$IRONIC_VM_SSH_ADDRESS \
519 -i ssh_port=$IRONIC_VM_SSH_PORT \
520 -i ssh_username=$IRONIC_SSH_USERNAME \
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700521 -i ssh_key_filename=$IRONIC_SSH_KEY_DIR/$IRONIC_SSH_KEY_FILENAME"
522 else
523 local ironic_node_cpu=$IRONIC_HW_NODE_CPU
524 local ironic_node_ram=$IRONIC_HW_NODE_RAM
525 local ironic_node_disk=$IRONIC_HW_NODE_DISK
526 local ironic_ephemeral_disk=$IRONIC_HW_EPHEMERAL_DISK
527 if [[ -z "${IRONIC_DEPLOY_DRIVER##*_ipmitool}" ]]; then
528 local ironic_hwinfo_file=$IRONIC_IPMIINFO_FILE
529 fi
530 fi
531
532 while read hardware_info; do
533 if ! is_ironic_hardware; then
534 local mac_address=$hardware_info
535 elif [[ -z "${IRONIC_DEPLOY_DRIVER##*_ipmitool}" ]]; then
536 local ipmi_address=$(echo $hardware_info |awk '{print $1}')
537 local mac_address=$(echo $hardware_info |awk '{print $2}')
538 local ironic_ipmi_username=$(echo $hardware_info |awk '{print $3}')
539 local ironic_ipmi_passwd=$(echo $hardware_info |awk '{print $4}')
540 # Currently we require all hardware platform have same CPU/RAM/DISK info
541 # in future, this can be enhanced to support different type, and then
542 # we create the bare metal flavor with minimum value
543 local node_options="-i ipmi_address=$ipmi_address -i ipmi_password=$ironic_ipmi_passwd\
544 -i ipmi_username=$ironic_ipmi_username"
545 fi
546
547 local node_id=$(ironic node-create --chassis_uuid $chassis_id \
548 --driver $IRONIC_DEPLOY_DRIVER \
549 -p cpus=$ironic_node_cpu\
550 -p memory_mb=$ironic_node_ram\
551 -p local_gb=$ironic_node_disk\
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400552 -p cpu_arch=x86_64 \
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700553 $node_options \
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400554 | grep " uuid " | get_field 2)
555
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700556 ironic port-create --address $mac_address --node_uuid $node_id
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400557
558 idx=$((idx+1))
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700559 done < $ironic_hwinfo_file
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400560
561 # create the nova flavor
Adam Gandelman29c3d632014-07-17 12:53:21 -0700562 # NOTE(adam_g): Attempting to use an autogenerated UUID for flavor id here uncovered
563 # bug (LP: #1333852) in Trove. This can be changed to use an auto flavor id when the
564 # bug is fixed in Juno.
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700565 local adjusted_disk=$(($ironic_node_disk - $ironic_ephemeral_disk))
566 nova flavor-create --ephemeral $ironic_ephemeral_disk baremetal 551 $ironic_node_ram $adjusted_disk $ironic_node_cpu
Adam Gandelman29c3d632014-07-17 12:53:21 -0700567
Lucas Alvares Gomescd7cfef2014-05-26 14:58:37 +0100568 # TODO(lucasagomes): Remove the 'baremetal:deploy_kernel_id'
569 # and 'baremetal:deploy_ramdisk_id' parameters
570 # from the flavor after the completion of
571 # https://blueprints.launchpad.net/ironic/+spec/add-node-instance-info
Alexander Gordeevf177f722014-03-14 18:44:48 +0400572 nova flavor-key baremetal set "cpu_arch"="x86_64" "baremetal:deploy_kernel_id"="$IRONIC_DEPLOY_KERNEL_ID" "baremetal:deploy_ramdisk_id"="$IRONIC_DEPLOY_RAMDISK_ID"
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400573}
574
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700575function configure_iptables {
576 # enable tftp natting for allowing connections to HOST_IP's tftp server
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400577 sudo modprobe nf_conntrack_tftp
578 sudo modprobe nf_nat_tftp
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700579 # nodes boot from TFTP and callback to the API server listening on $HOST_IP
580 sudo iptables -I INPUT -d $HOST_IP -p udp --dport 69 -j ACCEPT || true
Jim Rollenhagen74b28bc2014-10-29 14:15:22 -0700581 sudo iptables -I INPUT -d $HOST_IP -p tcp --dport $IRONIC_HOSTPORT -j ACCEPT || true
582 if [ "$IRONIC_DEPLOY_DRIVER" == "agent_ssh" ]; then
583 # agent ramdisk gets instance image from swift
584 sudo iptables -I INPUT -d $HOST_IP -p tcp --dport ${SWIFT_DEFAULT_BIND_PORT:-8080} -j ACCEPT || true
585 fi
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700586}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400587
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700588function configure_tftpd {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400589 # stop tftpd and setup serving via xinetd
590 stop_service tftpd-hpa || true
591 [ -f /etc/init/tftpd-hpa.conf ] && echo "manual" | sudo tee /etc/init/tftpd-hpa.override
592 sudo cp $IRONIC_TEMPLATES_DIR/tftpd-xinetd.template /etc/xinetd.d/tftp
593 sudo sed -e "s|%TFTPBOOT_DIR%|$IRONIC_TFTPBOOT_DIR|g" -i /etc/xinetd.d/tftp
594
595 # setup tftp file mapping to satisfy requests at the root (booting) and
596 # /tftpboot/ sub-dir (as per deploy-ironic elements)
597 echo "r ^([^/]) $IRONIC_TFTPBOOT_DIR/\1" >$IRONIC_TFTPBOOT_DIR/map-file
598 echo "r ^(/tftpboot/) $IRONIC_TFTPBOOT_DIR/\2" >>$IRONIC_TFTPBOOT_DIR/map-file
599
600 chmod -R 0755 $IRONIC_TFTPBOOT_DIR
601 restart_service xinetd
602}
603
604function configure_ironic_ssh_keypair {
605 # Generating ssh key pair for stack user
606 if [[ ! -d $IRONIC_SSH_KEY_DIR ]]; then
607 mkdir -p $IRONIC_SSH_KEY_DIR
608 fi
609 if [[ ! -d $HOME/.ssh ]]; then
610 mkdir -p $HOME/.ssh
611 chmod 700 $HOME/.ssh
612 fi
613 echo -e 'n\n' | ssh-keygen -q -t rsa -P '' -f $IRONIC_KEY_FILE
614 cat $IRONIC_KEY_FILE.pub | tee -a $IRONIC_AUTHORIZED_KEYS_FILE
615}
616
617function ironic_ssh_check {
Dean Troyerb52caa32014-07-25 13:04:13 -0500618 local key_file=$1
619 local floating_ip=$2
620 local port=$3
621 local default_instance_user=$4
622 local active_timeout=$5
623 if ! timeout $active_timeout sh -c "while ! ssh -p $port -o StrictHostKeyChecking=no -i $key_file ${default_instance_user}@$floating_ip echo success; do sleep 1; done"; then
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400624 die $LINENO "server didn't become ssh-able!"
625 fi
626}
627
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400628function configure_ironic_auxiliary {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400629 configure_ironic_ssh_keypair
Adam Gandelman86765102014-04-14 11:57:13 -0700630 ironic_ssh_check $IRONIC_SSH_KEY_DIR/$IRONIC_SSH_KEY_FILENAME $IRONIC_VM_SSH_ADDRESS $IRONIC_VM_SSH_PORT $IRONIC_SSH_USERNAME 10
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400631}
632
Jim Rollenhagenf00766b2014-08-15 01:08:11 +0000633function build_ipa_coreos_ramdisk {
634 echo "Building ironic-python-agent deploy ramdisk"
635 local kernel_path=$1
636 local ramdisk_path=$2
637 git_clone $IRONIC_PYTHON_AGENT_REPO $IRONIC_PYTHON_AGENT_DIR $IRONIC_PYTHON_AGENT_BRANCH
638 cd $IRONIC_PYTHON_AGENT_DIR
639 imagebuild/coreos/build_coreos_image.sh
640 cp imagebuild/coreos/UPLOAD/coreos_production_pxe_image-oem.cpio.gz $ramdisk_path
641 cp imagebuild/coreos/UPLOAD/coreos_production_pxe.vmlinuz $kernel_path
642 sudo rm -rf UPLOAD
643 cd -
644}
645
Alexander Gordeevf177f722014-03-14 18:44:48 +0400646# build deploy kernel+ramdisk, then upload them to glance
Dean Troyerb52caa32014-07-25 13:04:13 -0500647# this function sets ``IRONIC_DEPLOY_KERNEL_ID``, ``IRONIC_DEPLOY_RAMDISK_ID``
Alexander Gordeevf177f722014-03-14 18:44:48 +0400648function upload_baremetal_ironic_deploy {
Dean Troyerb52caa32014-07-25 13:04:13 -0500649 declare -g IRONIC_DEPLOY_KERNEL_ID IRONIC_DEPLOY_RAMDISK_ID
Adam Gandelman6d271482014-08-05 18:12:29 -0700650 echo_summary "Creating and uploading baremetal images for ironic"
651
652 # install diskimage-builder
Steve Bakercbfb3ae2014-05-05 16:06:47 +1200653 if [[ $(type -P ramdisk-image-create) == "" ]]; then
654 pip_install diskimage_builder
655 fi
Alexander Gordeevf177f722014-03-14 18:44:48 +0400656
657 if [ -z "$IRONIC_DEPLOY_KERNEL" -o -z "$IRONIC_DEPLOY_RAMDISK" ]; then
Dean Troyerb52caa32014-07-25 13:04:13 -0500658 local IRONIC_DEPLOY_KERNEL_PATH=$TOP_DIR/files/ir-deploy.kernel
659 local IRONIC_DEPLOY_RAMDISK_PATH=$TOP_DIR/files/ir-deploy.initramfs
Alexander Gordeevf177f722014-03-14 18:44:48 +0400660 else
Dean Troyerb52caa32014-07-25 13:04:13 -0500661 local IRONIC_DEPLOY_KERNEL_PATH=$IRONIC_DEPLOY_KERNEL
662 local IRONIC_DEPLOY_RAMDISK_PATH=$IRONIC_DEPLOY_RAMDISK
Alexander Gordeevf177f722014-03-14 18:44:48 +0400663 fi
664
665 if [ ! -e "$IRONIC_DEPLOY_RAMDISK_PATH" -o ! -e "$IRONIC_DEPLOY_KERNEL_PATH" ]; then
666 # files don't exist, need to build them
667 if [ "$IRONIC_BUILD_DEPLOY_RAMDISK" = "True" ]; then
668 # we can build them only if we're not offline
669 if [ "$OFFLINE" != "True" ]; then
Jim Rollenhagenf00766b2014-08-15 01:08:11 +0000670 if [ "$IRONIC_DEPLOY_DRIVER" == "agent_ssh" ]; then
671 build_ipa_coreos_ramdisk $IRONIC_DEPLOY_KERNEL_PATH $IRONIC_DEPLOY_RAMDISK_PATH
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000672 else
Steve Bakercbfb3ae2014-05-05 16:06:47 +1200673 ramdisk-image-create $IRONIC_DEPLOY_FLAVOR \
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000674 -o $TOP_DIR/files/ir-deploy
675 fi
Alexander Gordeevf177f722014-03-14 18:44:48 +0400676 else
677 die $LINENO "Deploy kernel+ramdisk files don't exist and cannot be build in OFFLINE mode"
678 fi
679 else
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000680 if [ "$IRONIC_DEPLOY_DRIVER" == "agent_ssh" ]; then
681 # download the agent image tarball
Jim Rollenhagen792dc5f2014-08-27 17:03:00 -0700682 wget "$IRONIC_AGENT_KERNEL_URL" -O $IRONIC_DEPLOY_KERNEL_PATH
683 wget "$IRONIC_AGENT_RAMDISK_URL" -O $IRONIC_DEPLOY_RAMDISK_PATH
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000684 else
685 die $LINENO "Deploy kernel+ramdisk files don't exist and their building was disabled explicitly by IRONIC_BUILD_DEPLOY_RAMDISK"
686 fi
Alexander Gordeevf177f722014-03-14 18:44:48 +0400687 fi
688 fi
689
Adam Gandelman6d271482014-08-05 18:12:29 -0700690 local token=$(keystone token-get | grep ' id ' | get_field 2)
691 die_if_not_set $LINENO token "Keystone fail to get token"
692
Alexander Gordeevf177f722014-03-14 18:44:48 +0400693 # load them into glance
Steve Martinelli8d3ac2d2014-08-02 23:47:15 -0400694 IRONIC_DEPLOY_KERNEL_ID=$(openstack \
695 --os-token $token \
696 --os-url http://$GLANCE_HOSTPORT \
697 image create \
698 $(basename $IRONIC_DEPLOY_KERNEL_PATH) \
699 --public --disk-format=aki \
Jim Rollenhagen722284f2014-08-15 18:04:02 +0000700 --container-format=aki \
Alexander Gordeevf177f722014-03-14 18:44:48 +0400701 < $IRONIC_DEPLOY_KERNEL_PATH | grep ' id ' | get_field 2)
Steve Martinelli8d3ac2d2014-08-02 23:47:15 -0400702 IRONIC_DEPLOY_RAMDISK_ID=$(openstack \
703 --os-token $token \
704 --os-url http://$GLANCE_HOSTPORT \
705 image create \
706 $(basename $IRONIC_DEPLOY_RAMDISK_PATH) \
707 --public --disk-format=ari \
Jim Rollenhagen722284f2014-08-15 18:04:02 +0000708 --container-format=ari \
Alexander Gordeevf177f722014-03-14 18:44:48 +0400709 < $IRONIC_DEPLOY_RAMDISK_PATH | grep ' id ' | get_field 2)
710}
711
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400712function prepare_baremetal_basic_ops {
Adam Gandelman6d271482014-08-05 18:12:29 -0700713 upload_baremetal_ironic_deploy
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700714 if ! is_ironic_hardware; then
715 create_bridge_and_vms
716 fi
717 enroll_nodes
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400718 configure_tftpd
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700719 configure_iptables
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700720 if ! is_ironic_hardware; then
721 configure_ironic_auxiliary
722 fi
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400723}
724
725function cleanup_baremetal_basic_ops {
726 rm -f $IRONIC_VM_MACS_CSV_FILE
727 if [ -f $IRONIC_KEY_FILE ]; then
Dean Troyerb52caa32014-07-25 13:04:13 -0500728 local key=$(cat $IRONIC_KEY_FILE.pub)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400729 # remove public key from authorized_keys
Dean Troyerb52caa32014-07-25 13:04:13 -0500730 grep -v "$key" $IRONIC_AUTHORIZED_KEYS_FILE > temp && mv temp $IRONIC_AUTHORIZED_KEYS_FILE
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400731 chmod 0600 $IRONIC_AUTHORIZED_KEYS_FILE
732 fi
733 sudo rm -rf $IRONIC_DATA_DIR $IRONIC_STATE_PATH
Adam Gandelman22ec45e2014-10-16 17:41:22 -0700734
735 local vm_name
736 for vm_name in $(_ironic_bm_vm_names); do
737 sudo su $STACK_USER -c "$IRONIC_SCRIPTS_DIR/cleanup-node $vm_name $IRONIC_VM_NETWORK_BRIDGE"
738 done
739
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400740 sudo rm -rf /etc/xinetd.d/tftp /etc/init/tftpd-hpa.override
741 restart_service xinetd
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700742 sudo iptables -D INPUT -d $HOST_IP -p udp --dport 69 -j ACCEPT || true
743 sudo iptables -D INPUT -d $HOST_IP -p tcp --dport 6385 -j ACCEPT || true
Jim Rollenhagen74b28bc2014-10-29 14:15:22 -0700744 if [ "$IRONIC_DEPLOY_DRIVER" == "agent_ssh" ]; then
745 # agent ramdisk gets instance image from swift
746 sudo iptables -D INPUT -d $HOST_IP -p tcp --dport ${SWIFT_DEFAULT_BIND_PORT:-8080} -j ACCEPT || true
747 fi
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700748 sudo rmmod nf_conntrack_tftp || true
749 sudo rmmod nf_nat_tftp || true
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400750}
751
752# Restore xtrace + pipefail
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300753$XTRACE
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400754$PIPEFAIL
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300755
Adam Spiers6a5aa7c2013-10-24 11:27:02 +0100756# Tell emacs to use shell-script-mode
757## Local variables:
758## mode: shell-script
759## End: