blob: 7313d2508e15532cd857fa2001b4de7a2e84a5cf [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +03003# lib/ironic
4# Functions to control the configuration and operation of the **Ironic** service
5
6# Dependencies:
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01007#
8# - ``functions`` file
9# - ``DEST``, ``DATA_DIR``, ``STACK_USER`` must be defined
10# - ``SERVICE_{TENANT_NAME|PASSWORD}`` must be defined
11# - ``SERVICE_HOST``
12# - ``KEYSTONE_TOKEN_FORMAT`` must be defined
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030013
14# ``stack.sh`` calls the entry points in this order:
15#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010016# - install_ironic
17# - install_ironicclient
18# - init_ironic
19# - start_ironic
20# - stop_ironic
21# - cleanup_ironic
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030022
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040023# Save trace and pipefail settings
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030024XTRACE=$(set +o | grep xtrace)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040025PIPEFAIL=$(set +o | grep pipefail)
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030026set +o xtrace
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040027set +o pipefail
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030028
29# Defaults
30# --------
31
32# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050033GITDIR["python-ironicclient"]=$DEST/python-ironicclient
Sean Dague5cb19062014-11-01 01:37:45 +010034
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030035IRONIC_DIR=$DEST/ironic
Jim Rollenhagenf00766b2014-08-15 01:08:11 +000036IRONIC_PYTHON_AGENT_DIR=$DEST/ironic-python-agent
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040037IRONIC_DATA_DIR=$DATA_DIR/ironic
38IRONIC_STATE_PATH=/var/lib/ironic
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030039IRONIC_AUTH_CACHE_DIR=${IRONIC_AUTH_CACHE_DIR:-/var/cache/ironic}
40IRONIC_CONF_DIR=${IRONIC_CONF_DIR:-/etc/ironic}
41IRONIC_CONF_FILE=$IRONIC_CONF_DIR/ironic.conf
42IRONIC_ROOTWRAP_CONF=$IRONIC_CONF_DIR/rootwrap.conf
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +030043IRONIC_POLICY_JSON=$IRONIC_CONF_DIR/policy.json
44
Adam Gandelmanf303d7e2015-01-06 12:18:03 -080045# Deploy callback timeout can be changed from its default (1800), if required.
46IRONIC_CALLBACK_TIMEOUT=${IRONIC_CALLBACK_TIMEOUT:-}
47
yunhong jiangae9ee6b2014-10-08 07:01:02 -070048# Deploy to hardware platform
49IRONIC_HW_NODE_CPU=${IRONIC_HW_NODE_CPU:-1}
50IRONIC_HW_NODE_RAM=${IRONIC_HW_NODE_RAM:-512}
51IRONIC_HW_NODE_DISK=${IRONIC_HW_NODE_DISK:-10}
52IRONIC_HW_EPHEMERAL_DISK=${IRONIC_HW_EPHEMERAL_DISK:-0}
53# The file is composed of multiple lines, each line includes four field
54# separated by white space: IPMI address, MAC address, IPMI username
55# and IPMI password.
56# An example:
57# 192.168.110.107 00:1e:67:57:50:4c root otc123
58IRONIC_IPMIINFO_FILE=${IRONIC_IPMIINFO_FILE:-$IRONIC_DATA_DIR/hardware_info}
59
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040060# Set up defaults for functional / integration testing
61IRONIC_SCRIPTS_DIR=${IRONIC_SCRIPTS_DIR:-$TOP_DIR/tools/ironic/scripts}
62IRONIC_TEMPLATES_DIR=${IRONIC_TEMPLATES_DIR:-$TOP_DIR/tools/ironic/templates}
Sean Dague53753292014-12-04 19:38:15 -050063IRONIC_BAREMETAL_BASIC_OPS=$(trueorfalse False IRONIC_BAREMETAL_BASIC_OPS)
Devananda van der Veen83eeed02014-04-11 10:08:41 -070064IRONIC_ENABLED_DRIVERS=${IRONIC_ENABLED_DRIVERS:-fake,pxe_ssh,pxe_ipmitool}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040065IRONIC_SSH_USERNAME=${IRONIC_SSH_USERNAME:-`whoami`}
66IRONIC_SSH_KEY_DIR=${IRONIC_SSH_KEY_DIR:-$IRONIC_DATA_DIR/ssh_keys}
67IRONIC_SSH_KEY_FILENAME=${IRONIC_SSH_KEY_FILENAME:-ironic_key}
Adam Gandelman6c749322014-12-02 16:20:50 -080068IRONIC_KEY_FILE=${IRONIC_KEY_FILE:-$IRONIC_SSH_KEY_DIR/$IRONIC_SSH_KEY_FILENAME}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040069IRONIC_SSH_VIRT_TYPE=${IRONIC_SSH_VIRT_TYPE:-virsh}
70IRONIC_TFTPBOOT_DIR=${IRONIC_TFTPBOOT_DIR:-$IRONIC_DATA_DIR/tftpboot}
yunhong jiangae9ee6b2014-10-08 07:01:02 -070071IRONIC_TFTPSERVER_IP=${IRONIC_TFTPSERVER_IP:-$HOST_IP}
Adam Gandelman86765102014-04-14 11:57:13 -070072IRONIC_VM_SSH_PORT=${IRONIC_VM_SSH_PORT:-22}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040073IRONIC_VM_SSH_ADDRESS=${IRONIC_VM_SSH_ADDRESS:-$HOST_IP}
74IRONIC_VM_COUNT=${IRONIC_VM_COUNT:-1}
75IRONIC_VM_SPECS_CPU=${IRONIC_VM_SPECS_CPU:-1}
Adam Gandelmanea335f42014-07-03 17:57:49 -070076IRONIC_VM_SPECS_RAM=${IRONIC_VM_SPECS_RAM:-512}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040077IRONIC_VM_SPECS_DISK=${IRONIC_VM_SPECS_DISK:-10}
David Shrewsbury3e4612b2014-05-01 11:38:21 -040078IRONIC_VM_EPHEMERAL_DISK=${IRONIC_VM_EPHEMERAL_DISK:-0}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +040079IRONIC_VM_EMULATOR=${IRONIC_VM_EMULATOR:-/usr/bin/qemu-system-x86_64}
80IRONIC_VM_NETWORK_BRIDGE=${IRONIC_VM_NETWORK_BRIDGE:-brbm}
81IRONIC_VM_NETWORK_RANGE=${IRONIC_VM_NETWORK_RANGE:-192.0.2.0/24}
82IRONIC_VM_MACS_CSV_FILE=${IRONIC_VM_MACS_CSV_FILE:-$IRONIC_DATA_DIR/ironic_macs.csv}
83IRONIC_AUTHORIZED_KEYS_FILE=${IRONIC_AUTHORIZED_KEYS_FILE:-$HOME/.ssh/authorized_keys}
84
Adam Gandelman8af6fae2014-04-11 17:06:14 -070085# By default, baremetal VMs will console output to file.
86IRONIC_VM_LOG_CONSOLE=${IRONIC_VM_LOG_CONSOLE:-True}
87IRONIC_VM_LOG_DIR=${IRONIC_VM_LOG_DIR:-$IRONIC_DATA_DIR/logs/}
88
Alexander Gordeevf177f722014-03-14 18:44:48 +040089# Use DIB to create deploy ramdisk and kernel.
Sean Dague53753292014-12-04 19:38:15 -050090IRONIC_BUILD_DEPLOY_RAMDISK=$(trueorfalse True IRONIC_BUILD_DEPLOY_RAMDISK)
Alexander Gordeevf177f722014-03-14 18:44:48 +040091# If not use DIB, these files are used as deploy ramdisk/kernel.
92# (The value must be a absolute path)
93IRONIC_DEPLOY_RAMDISK=${IRONIC_DEPLOY_RAMDISK:-}
94IRONIC_DEPLOY_KERNEL=${IRONIC_DEPLOY_KERNEL:-}
95IRONIC_DEPLOY_ELEMENT=${IRONIC_DEPLOY_ELEMENT:-deploy-ironic}
96
Jim Rollenhagen792dc5f2014-08-27 17:03:00 -070097IRONIC_AGENT_KERNEL_URL=${IRONIC_AGENT_KERNEL_URL:-http://tarballs.openstack.org/ironic-python-agent/coreos/files/coreos_production_pxe.vmlinuz}
Jim Rollenhagen4cb0d8c2014-09-11 16:45:58 -070098IRONIC_AGENT_RAMDISK_URL=${IRONIC_AGENT_RAMDISK_URL:-http://tarballs.openstack.org/ironic-python-agent/coreos/files/coreos_production_pxe_image-oem.cpio.gz}
Jim Rollenhagena6a45462014-08-05 18:08:29 +000099
100# Which deploy driver to use - valid choices right now
yunhong jiangfe96ed62014-11-05 03:30:25 -0700101# are 'pxe_ssh', 'pxe_ipmitool', 'agent_ssh' and 'agent_ipmitool'.
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000102IRONIC_DEPLOY_DRIVER=${IRONIC_DEPLOY_DRIVER:-pxe_ssh}
103
Alexander Gordeevf177f722014-03-14 18:44:48 +0400104#TODO(agordeev): replace 'ubuntu' with host distro name getting
105IRONIC_DEPLOY_FLAVOR=${IRONIC_DEPLOY_FLAVOR:-ubuntu $IRONIC_DEPLOY_ELEMENT}
106
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300107# Support entry points installation of console scripts
108IRONIC_BIN_DIR=$(get_python_exec_prefix)
109
110# Ironic connection info. Note the port must be specified.
111IRONIC_SERVICE_PROTOCOL=http
Adam Gandelman4b45fca2014-11-17 09:59:23 -0800112IRONIC_SERVICE_PORT=${IRONIC_SERVICE_PORT:-6385}
113IRONIC_HOSTPORT=${IRONIC_HOSTPORT:-$SERVICE_HOST:$IRONIC_SERVICE_PORT}
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300114
Dean Troyer4237f592014-01-29 16:22:11 -0600115# Tell Tempest this project is present
116TEMPEST_SERVICES+=,ironic
117
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100118# Enable iPXE
Sean Dague53753292014-12-04 19:38:15 -0500119IRONIC_IPXE_ENABLED=$(trueorfalse False IRONIC_IPXE_ENABLED)
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100120IRONIC_HTTP_DIR=${IRONIC_HTTP_DIR:-$IRONIC_DATA_DIR/httpboot}
121IRONIC_HTTP_SERVER=${IRONIC_HTTP_SERVER:-$HOST_IP}
122IRONIC_HTTP_PORT=${IRONIC_HTTP_PORT:-8088}
123
124# get_pxe_boot_file() - Get the PXE/iPXE boot file path
125function get_pxe_boot_file {
126 local relpath=syslinux/pxelinux.0
127 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
128 relpath=ipxe/undionly.kpxe
129 fi
130
131 local pxe_boot_file
132 if is_ubuntu; then
133 pxe_boot_file=/usr/lib/$relpath
134 elif is_fedora || is_suse; then
135 pxe_boot_file=/usr/share/$relpath
136 fi
137
138 echo $pxe_boot_file
139}
140
141# PXE boot image
142IRONIC_PXE_BOOT_IMAGE=${IRONIC_PXE_BOOT_IMAGE:-$(get_pxe_boot_file)}
143
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300144
145# Functions
146# ---------
147
Dean Troyer1023ff72014-01-27 14:56:44 -0600148# Test if any Ironic services are enabled
149# is_ironic_enabled
150function is_ironic_enabled {
151 [[ ,${ENABLED_SERVICES} =~ ,"ir-" ]] && return 0
152 return 1
153}
154
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700155function is_ironic_hardware {
156 is_ironic_enabled && [[ -n "${IRONIC_DEPLOY_DRIVER##*_ssh}" ]] && return 0
157 return 1
158}
159
yunhong jiangfe96ed62014-11-05 03:30:25 -0700160function is_deployed_by_agent {
161 [[ -z "${IRONIC_DEPLOY_DRIVER%%agent*}" ]] && return 0
162 return 1
163}
164
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300165# install_ironic() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100166function install_ironic {
Adam Gandelman6d271482014-08-05 18:12:29 -0700167 # make sure all needed service were enabled
168 for srv in nova glance key; do
169 if ! is_service_enabled "$srv"; then
170 die $LINENO "$srv should be enabled for Ironic."
171 fi
172 done
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300173 git_clone $IRONIC_REPO $IRONIC_DIR $IRONIC_BRANCH
174 setup_develop $IRONIC_DIR
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100175
176 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
177 install_apache_wsgi
178 fi
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300179}
180
181# install_ironicclient() - Collect sources and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100182function install_ironicclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500183 if use_library_from_git "python-ironicclient"; then
184 git_clone_by_name "python-ironicclient"
185 setup_dev_lib "python-ironicclient"
186 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-ironicclient"]}/tools/,/etc/bash_completion.d/}ironic.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100187 else
188 # nothing actually "requires" ironicclient, so force instally from pypi
189 pip_install python-ironicclient
190 fi
Roman Prykhodchenko43e00662013-10-15 17:03:15 +0300191}
192
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100193# _cleanup_ironic_apache_wsgi() - Remove wsgi files, disable and remove apache vhost file
194function _cleanup_ironic_apache_wsgi {
195 sudo rm -rf $IRONIC_HTTP_DIR
196 disable_apache_site ironic
197 sudo rm -f $(apache_site_config_for ironic)
198 restart_apache_server
199}
200
201# _config_ironic_apache_wsgi() - Set WSGI config files of Ironic
202function _config_ironic_apache_wsgi {
203 local ironic_apache_conf=$(apache_site_config_for ironic)
204 sudo cp $FILES/apache-ironic.template $ironic_apache_conf
205 sudo sed -e "
206 s|%PUBLICPORT%|$IRONIC_HTTP_PORT|g;
207 s|%HTTPROOT%|$IRONIC_HTTP_DIR|g;
208 " -i $ironic_apache_conf
209 enable_apache_site ironic
210}
211
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300212# cleanup_ironic() - Remove residual data files, anything left over from previous
213# runs that would need to clean up.
Ian Wienandaee18c72014-02-21 15:35:08 +1100214function cleanup_ironic {
lokesh683ed9e2014-11-10 15:07:59 +0530215 sudo rm -rf $IRONIC_AUTH_CACHE_DIR $IRONIC_CONF_DIR
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300216}
217
Adam Gandelman6d271482014-08-05 18:12:29 -0700218# configure_ironic_dirs() - Create all directories required by Ironic and
219# associated services.
220function configure_ironic_dirs {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300221 if [[ ! -d $IRONIC_CONF_DIR ]]; then
222 sudo mkdir -p $IRONIC_CONF_DIR
223 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100224
225 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
226 sudo mkdir -p $IRONIC_HTTP_DIR
227 sudo chown -R $STACK_USER:$LIBVIRT_GROUP $IRONIC_HTTP_DIR
228 fi
229
Adam Gandelman6d271482014-08-05 18:12:29 -0700230 sudo mkdir -p $IRONIC_DATA_DIR
231 sudo mkdir -p $IRONIC_STATE_PATH
232 sudo mkdir -p $IRONIC_TFTPBOOT_DIR
233 sudo chown -R $STACK_USER $IRONIC_DATA_DIR $IRONIC_STATE_PATH
234 sudo chown -R $STACK_USER:$LIBVIRT_GROUP $IRONIC_TFTPBOOT_DIR
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100235 mkdir -p $IRONIC_TFTPBOOT_DIR/pxelinux.cfg
236
237 if [ ! -f $IRONIC_PXE_BOOT_IMAGE ]; then
238 die $LINENO "PXE boot file $IRONIC_PXE_BOOT_IMAGE not found."
Adam Gandelman6d271482014-08-05 18:12:29 -0700239 fi
240
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100241 cp $IRONIC_PXE_BOOT_IMAGE $IRONIC_TFTPBOOT_DIR
Adam Gandelman6d271482014-08-05 18:12:29 -0700242}
243
244# configure_ironic() - Set config files, create data dirs, etc
245function configure_ironic {
246 configure_ironic_dirs
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300247 sudo chown $STACK_USER $IRONIC_CONF_DIR
248
249 # Copy over ironic configuration file and configure common parameters.
250 cp $IRONIC_DIR/etc/ironic/ironic.conf.sample $IRONIC_CONF_FILE
251 iniset $IRONIC_CONF_FILE DEFAULT debug True
252 inicomment $IRONIC_CONF_FILE DEFAULT log_file
253 iniset $IRONIC_CONF_FILE DEFAULT sql_connection `database_connection_url ironic`
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400254 iniset $IRONIC_CONF_FILE DEFAULT state_path $IRONIC_STATE_PATH
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300255 iniset $IRONIC_CONF_FILE DEFAULT use_syslog $SYSLOG
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300256 # Configure Ironic conductor, if it was enabled.
257 if is_service_enabled ir-cond; then
258 configure_ironic_conductor
259 fi
260
261 # Configure Ironic API, if it was enabled.
262 if is_service_enabled ir-api; then
263 configure_ironic_api
264 fi
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400265
Adam Gandelmanab592932014-06-06 15:12:32 -0700266 # Format logging
267 if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
268 setup_colorized_logging $IRONIC_CONF_FILE DEFAULT
269 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100270
271 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]]; then
272 _config_ironic_apache_wsgi
273 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300274}
275
276# configure_ironic_api() - Is used by configure_ironic(). Performs
277# API specific configuration.
Ian Wienandaee18c72014-02-21 15:35:08 +1100278function configure_ironic_api {
Roman Prykhodchenkoc48c3122013-10-01 17:19:05 +0300279 iniset $IRONIC_CONF_FILE DEFAULT auth_strategy keystone
280 iniset $IRONIC_CONF_FILE DEFAULT policy_file $IRONIC_POLICY_JSON
Yuki Nishiwakid5323972015-02-17 19:00:23 +0900281
282 # TODO(Yuki Nishiwaki): This is a temporary work-around until Ironic is fixed(bug#1422632).
283 # These codes need to be changed to use the function of configure_auth_token_middleware
284 # after Ironic conforms to the new auth plugin.
285 iniset $IRONIC_CONF_FILE keystone_authtoken identity_uri $KEYSTONE_AUTH_URI
286 iniset $IRONIC_CONF_FILE keystone_authtoken auth_uri $KEYSTONE_SERVICE_URI/v2.0
287 iniset $IRONIC_CONF_FILE keystone_authtoken admin_user ironic
288 iniset $IRONIC_CONF_FILE keystone_authtoken admin_password $SERVICE_PASSWORD
289 iniset $IRONIC_CONF_FILE keystone_authtoken admin_tenant_name $SERVICE_TENANT_NAME
290 iniset $IRONIC_CONF_FILE keystone_authtoken cafile $SSL_BUNDLE_FILE
291 iniset $IRONIC_CONF_FILE keystone_authtoken signing_dir $IRONIC_AUTH_CACHE_DIR/api
292
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300293 iniset_rpc_backend ironic $IRONIC_CONF_FILE DEFAULT
Adam Gandelman4b45fca2014-11-17 09:59:23 -0800294 iniset $IRONIC_CONF_FILE api port $IRONIC_SERVICE_PORT
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300295
296 cp -p $IRONIC_DIR/etc/ironic/policy.json $IRONIC_POLICY_JSON
297}
298
299# configure_ironic_conductor() - Is used by configure_ironic().
300# Sets conductor specific settings.
Ian Wienandaee18c72014-02-21 15:35:08 +1100301function configure_ironic_conductor {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300302 cp $IRONIC_DIR/etc/ironic/rootwrap.conf $IRONIC_ROOTWRAP_CONF
Lucas Alvares Gomes279295c2014-01-14 11:37:51 +0000303 cp -r $IRONIC_DIR/etc/ironic/rootwrap.d $IRONIC_CONF_DIR
Dean Troyerb52caa32014-07-25 13:04:13 -0500304 local ironic_rootwrap=$(get_rootwrap_location ironic)
305 local rootwrap_isudoer_cmd="$ironic_rootwrap $IRONIC_CONF_DIR/rootwrap.conf *"
Adam Gandelman3f2a7b72014-04-14 16:14:33 -0700306
307 # Set up the rootwrap sudoers for ironic
Dean Troyerb52caa32014-07-25 13:04:13 -0500308 local tempfile=`mktemp`
309 echo "$STACK_USER ALL=(root) NOPASSWD: $rootwrap_isudoer_cmd" >$tempfile
310 chmod 0440 $tempfile
311 sudo chown root:root $tempfile
312 sudo mv $tempfile /etc/sudoers.d/ironic-rootwrap
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300313
Alexander Gordeeva67cb1a2014-03-04 18:38:33 +0400314 iniset $IRONIC_CONF_FILE DEFAULT rootwrap_config $IRONIC_ROOTWRAP_CONF
Devananda van der Veen83eeed02014-04-11 10:08:41 -0700315 iniset $IRONIC_CONF_FILE DEFAULT enabled_drivers $IRONIC_ENABLED_DRIVERS
Adam Gandelman4b45fca2014-11-17 09:59:23 -0800316 iniset $IRONIC_CONF_FILE conductor api_url $IRONIC_SERVICE_PROTOCOL://$HOST_IP:$IRONIC_SERVICE_PORT
Adam Gandelmanf303d7e2015-01-06 12:18:03 -0800317 if [[ -n "$IRONIC_CALLBACK_TIMEOUT" ]]; then
318 iniset $IRONIC_CONF_FILE conductor deploy_callback_timeout $IRONIC_CALLBACK_TIMEOUT
319 fi
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700320 iniset $IRONIC_CONF_FILE pxe tftp_server $IRONIC_TFTPSERVER_IP
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400321 iniset $IRONIC_CONF_FILE pxe tftp_root $IRONIC_TFTPBOOT_DIR
322 iniset $IRONIC_CONF_FILE pxe tftp_master_path $IRONIC_TFTPBOOT_DIR/master_images
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700323 if [[ "$IRONIC_VM_LOG_CONSOLE" == "True" ]] ; then
324 iniset $IRONIC_CONF_FILE pxe pxe_append_params "nofb nomodeset vga=normal console=ttyS0"
325 fi
yunhong jiangfe96ed62014-11-05 03:30:25 -0700326 if is_deployed_by_agent; then
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000327 if [[ "$SWIFT_ENABLE_TEMPURLS" == "True" ]] ; then
328 iniset $IRONIC_CONF_FILE glance swift_temp_url_key $SWIFT_TEMPURL_KEY
329 else
330 die $LINENO "SWIFT_ENABLE_TEMPURLS must be True to use agent_ssh driver in Ironic."
331 fi
Jim Rollenhagen74b28bc2014-10-29 14:15:22 -0700332 iniset $IRONIC_CONF_FILE glance swift_endpoint_url http://${HOST_IP}:${SWIFT_DEFAULT_BIND_PORT:-8080}
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000333 iniset $IRONIC_CONF_FILE glance swift_api_version v1
Adam Gandelmanab50c702014-10-22 13:21:22 -0700334 local tenant_id=$(get_or_create_project $SERVICE_TENANT_NAME)
335 iniset $IRONIC_CONF_FILE glance swift_account AUTH_${tenant_id}
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000336 iniset $IRONIC_CONF_FILE glance swift_container glance
337 iniset $IRONIC_CONF_FILE glance swift_temp_url_duration 3600
338 iniset $IRONIC_CONF_FILE agent heartbeat_timeout 30
339 if [[ "$IRONIC_VM_LOG_CONSOLE" == "True" ]] ; then
Jay Faulkner7f8a27d2014-11-24 11:12:20 -0800340 iniset $IRONIC_CONF_FILE agent agent_pxe_append_params "nofb nomodeset vga=normal console=ttyS0 systemd.journald.forward_to_console=yes"
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000341 fi
342 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100343
344 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
345 local pxebin=`basename $IRONIC_PXE_BOOT_IMAGE`
346 iniset $IRONIC_CONF_FILE pxe ipxe_enabled True
347 iniset $IRONIC_CONF_FILE pxe pxe_config_template '\$pybasedir/drivers/modules/ipxe_config.template'
348 iniset $IRONIC_CONF_FILE pxe pxe_bootfile_name $pxebin
349 iniset $IRONIC_CONF_FILE pxe http_root $IRONIC_HTTP_DIR
350 iniset $IRONIC_CONF_FILE pxe http_url "http://$IRONIC_HTTP_SERVER:$IRONIC_HTTP_PORT"
351 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300352}
353
354# create_ironic_cache_dir() - Part of the init_ironic() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100355function create_ironic_cache_dir {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300356 # Create cache dir
357 sudo mkdir -p $IRONIC_AUTH_CACHE_DIR/api
358 sudo chown $STACK_USER $IRONIC_AUTH_CACHE_DIR/api
359 rm -f $IRONIC_AUTH_CACHE_DIR/api/*
360 sudo mkdir -p $IRONIC_AUTH_CACHE_DIR/registry
361 sudo chown $STACK_USER $IRONIC_AUTH_CACHE_DIR/registry
362 rm -f $IRONIC_AUTH_CACHE_DIR/registry/*
363}
364
365# create_ironic_accounts() - Set up common required ironic accounts
366
367# Tenant User Roles
368# ------------------------------------------------------------------
369# service ironic admin # if enabled
Ian Wienandaee18c72014-02-21 15:35:08 +1100370function create_ironic_accounts {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300371
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300372 # Ironic
373 if [[ "$ENABLED_SERVICES" =~ "ir-api" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100374 # Get ironic user if exists
375
David Shrewsburycdfcd4b2015-02-11 16:07:40 -0800376 # NOTE(Shrews): This user MUST have admin level privileges!
377 create_service_user "ironic" "admin"
Bartosz Górski0abde392014-02-28 14:15:19 +0100378
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300379 if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100380
Dean Troyerb52caa32014-07-25 13:04:13 -0500381 local ironic_service=$(get_or_create_service "ironic" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100382 "baremetal" "Ironic baremetal provisioning service")
Dean Troyerb52caa32014-07-25 13:04:13 -0500383 get_or_create_endpoint $ironic_service \
Bartosz Górski0abde392014-02-28 14:15:19 +0100384 "$REGION_NAME" \
385 "$IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT" \
386 "$IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT" \
387 "$IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300388 fi
389 fi
390}
391
392
393# init_ironic() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100394function init_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300395 # (Re)create ironic database
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200396 recreate_database ironic
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300397
398 # Migrate ironic database
Dmitry Tantsur0c6a6542014-06-02 20:19:33 +0200399 $IRONIC_BIN_DIR/ironic-dbsync --config-file=$IRONIC_CONF_FILE
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300400
401 create_ironic_cache_dir
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300402}
403
Adam Gandelman22ec45e2014-10-16 17:41:22 -0700404# _ironic_bm_vm_names() - Generates list of names for baremetal VMs.
405function _ironic_bm_vm_names {
406 local idx
407 local num_vms=$(($IRONIC_VM_COUNT - 1))
408 for idx in $(seq 0 $num_vms); do
409 echo "baremetal${IRONIC_VM_NETWORK_BRIDGE}_${idx}"
410 done
411}
412
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300413# start_ironic() - Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100414function start_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300415 # Start Ironic API server, if enabled.
416 if is_service_enabled ir-api; then
417 start_ironic_api
418 fi
419
420 # Start Ironic conductor, if enabled.
421 if is_service_enabled ir-cond; then
422 start_ironic_conductor
423 fi
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100424
425 # Start Apache if iPXE is enabled
426 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
427 restart_apache_server
428 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300429}
430
431# start_ironic_api() - Used by start_ironic().
432# Starts Ironic API server.
Ian Wienandaee18c72014-02-21 15:35:08 +1100433function start_ironic_api {
Chris Dent2f27a0e2014-09-09 13:46:02 +0100434 run_process ir-api "$IRONIC_BIN_DIR/ironic-api --config-file=$IRONIC_CONF_FILE"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300435 echo "Waiting for ir-api ($IRONIC_HOSTPORT) to start..."
Adam Gandelman4b45fca2014-11-17 09:59:23 -0800436 if ! timeout $SERVICE_TIMEOUT sh -c "while ! wget --no-proxy -q -O- $IRONIC_SERVICE_PROTOCOL://$IRONIC_HOSTPORT; do sleep 1; done"; then
Sean Dague101b4242013-10-22 08:47:11 -0400437 die $LINENO "ir-api did not start"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300438 fi
439}
440
441# start_ironic_conductor() - Used by start_ironic().
442# Starts Ironic conductor.
Ian Wienandaee18c72014-02-21 15:35:08 +1100443function start_ironic_conductor {
Chris Dent2f27a0e2014-09-09 13:46:02 +0100444 run_process ir-cond "$IRONIC_BIN_DIR/ironic-conductor --config-file=$IRONIC_CONF_FILE"
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300445 # TODO(romcheg): Find a way to check whether the conductor has started.
446}
447
448# stop_ironic() - Stop running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100449function stop_ironic {
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300450 # Kill the Ironic screen windows
451 screen -S $SCREEN_NAME -p ir-api -X kill
452 screen -S $SCREEN_NAME -p ir-cond -X kill
Lucas Alvares Gomes5851e5f2014-08-19 10:01:45 +0100453
454 # Cleanup the WSGI files
455 if [[ "$IRONIC_IPXE_ENABLED" == "True" ]] ; then
456 _cleanup_ironic_apache_wsgi
457 fi
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300458}
459
Adam Gandelman6d271482014-08-05 18:12:29 -0700460function create_ovs_taps {
461 local ironic_net_id=$(neutron net-list | grep private | get_field 1)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400462
Adam Gandelman6d271482014-08-05 18:12:29 -0700463 # Work around: No netns exists on host until a Neutron port is created. We
464 # need to create one in Neutron to know what netns to tap into prior to the
465 # first node booting.
466 local port_id=$(neutron port-create private | grep " id " | get_field 2)
467
468 # intentional sleep to make sure the tag has been set to port
469 sleep 10
470
Haomeng, Wang7b5c4e62014-12-28 03:15:14 +0000471 if [[ "$Q_USE_NAMESPACE" = "True" ]]; then
472 local tapdev=$(sudo ip netns exec qdhcp-${ironic_net_id} ip link list | grep " tap" | cut -d':' -f2 | cut -b2-)
473 else
474 local tapdev=$(sudo ip link list | grep " tap" | cut -d':' -f2 | cut -b2-)
475 fi
Adam Gandelman6d271482014-08-05 18:12:29 -0700476 local tag_id=$(sudo ovs-vsctl show |grep ${tapdev} -A1 -m1 | grep tag | cut -d':' -f2 | cut -b2-)
477
478 # make sure veth pair is not existing, otherwise delete its links
479 sudo ip link show ovs-tap1 && sudo ip link delete ovs-tap1
480 sudo ip link show brbm-tap1 && sudo ip link delete brbm-tap1
481 # create veth pair for future interconnection between br-int and brbm
482 sudo ip link add brbm-tap1 type veth peer name ovs-tap1
483 sudo ip link set dev brbm-tap1 up
484 sudo ip link set dev ovs-tap1 up
485
486 sudo ovs-vsctl -- --if-exists del-port ovs-tap1 -- add-port br-int ovs-tap1 tag=$tag_id
487 sudo ovs-vsctl -- --if-exists del-port brbm-tap1 -- add-port $IRONIC_VM_NETWORK_BRIDGE brbm-tap1
488
489 # Remove the port needed only for workaround.
490 neutron port-delete $port_id
Adam Gandelmancec97922014-07-29 18:43:18 -0700491
492 # Finally, share the fixed tenant network across all tenants. This allows the host
493 # to serve TFTP to a single network namespace via the tap device created above.
494 neutron net-update $ironic_net_id --shared true
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400495}
496
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400497function create_bridge_and_vms {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400498 # Call libvirt setup scripts in a new shell to ensure any new group membership
499 sudo su $STACK_USER -c "$IRONIC_SCRIPTS_DIR/setup-network"
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700500 if [[ "$IRONIC_VM_LOG_CONSOLE" == "True" ]] ; then
Dean Troyerb52caa32014-07-25 13:04:13 -0500501 local log_arg="$IRONIC_VM_LOG_DIR"
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700502 else
Dean Troyerb52caa32014-07-25 13:04:13 -0500503 local log_arg=""
Adam Gandelman8af6fae2014-04-11 17:06:14 -0700504 fi
Adam Gandelman22ec45e2014-10-16 17:41:22 -0700505 local vm_name
506 for vm_name in $(_ironic_bm_vm_names); do
507 sudo su $STACK_USER -c "$IRONIC_SCRIPTS_DIR/create-node $vm_name \
508 $IRONIC_VM_SPECS_CPU $IRONIC_VM_SPECS_RAM $IRONIC_VM_SPECS_DISK \
509 amd64 $IRONIC_VM_NETWORK_BRIDGE $IRONIC_VM_EMULATOR \
510 $log_arg" >> $IRONIC_VM_MACS_CSV_FILE
511 done
Adam Gandelman6d271482014-08-05 18:12:29 -0700512 create_ovs_taps
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400513}
514
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800515function wait_for_nova_resources {
Adam Gandelman0c99e2f2014-12-09 14:44:24 -0800516 # After nodes have been enrolled, we need to wait for both ironic and
517 # nova's periodic tasks to populate the resource tracker with available
518 # nodes and resources. Wait up to 2 minutes for a given resource before
519 # timing out.
520 local resource=$1
521 local expected_count=$2
522 echo_summary "Waiting 2 minutes for Nova resource tracker to pick up $resource >= $expected_count"
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800523 for i in $(seq 1 120); do
Adam Gandelman0c99e2f2014-12-09 14:44:24 -0800524 if [ $(nova hypervisor-stats | grep " $resource " | get_field 2) -ge $expected_count ]; then
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800525 return 0
526 fi
527 sleep 1
528 done
Adam Gandelman0c99e2f2014-12-09 14:44:24 -0800529 die $LINENO "Timed out waiting for Nova hypervisor-stats $resource >= $expected_count"
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800530}
531
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700532function enroll_nodes {
Dean Troyerb52caa32014-07-25 13:04:13 -0500533 local chassis_id=$(ironic chassis-create -d "ironic test chassis" | grep " uuid " | get_field 2)
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000534
535 if [[ "$IRONIC_DEPLOY_DRIVER" == "pxe_ssh" ]] ; then
536 local _IRONIC_DEPLOY_KERNEL_KEY=pxe_deploy_kernel
537 local _IRONIC_DEPLOY_RAMDISK_KEY=pxe_deploy_ramdisk
yunhong jiangfe96ed62014-11-05 03:30:25 -0700538 elif is_deployed_by_agent; then
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000539 local _IRONIC_DEPLOY_KERNEL_KEY=deploy_kernel
540 local _IRONIC_DEPLOY_RAMDISK_KEY=deploy_ramdisk
541 fi
542
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700543 if ! is_ironic_hardware; then
544 local ironic_node_cpu=$IRONIC_VM_SPECS_CPU
545 local ironic_node_ram=$IRONIC_VM_SPECS_RAM
546 local ironic_node_disk=$IRONIC_VM_SPECS_DISK
547 local ironic_ephemeral_disk=$IRONIC_VM_EPHEMERAL_DISK
548 local ironic_hwinfo_file=$IRONIC_VM_MACS_CSV_FILE
549 local node_options="\
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000550 -i $_IRONIC_DEPLOY_KERNEL_KEY=$IRONIC_DEPLOY_KERNEL_ID \
551 -i $_IRONIC_DEPLOY_RAMDISK_KEY=$IRONIC_DEPLOY_RAMDISK_ID \
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400552 -i ssh_virt_type=$IRONIC_SSH_VIRT_TYPE \
553 -i ssh_address=$IRONIC_VM_SSH_ADDRESS \
554 -i ssh_port=$IRONIC_VM_SSH_PORT \
555 -i ssh_username=$IRONIC_SSH_USERNAME \
Adam Gandelmand4a6e352014-12-11 14:53:17 -0800556 -i ssh_key_filename=$IRONIC_KEY_FILE"
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700557 else
558 local ironic_node_cpu=$IRONIC_HW_NODE_CPU
559 local ironic_node_ram=$IRONIC_HW_NODE_RAM
560 local ironic_node_disk=$IRONIC_HW_NODE_DISK
561 local ironic_ephemeral_disk=$IRONIC_HW_EPHEMERAL_DISK
562 if [[ -z "${IRONIC_DEPLOY_DRIVER##*_ipmitool}" ]]; then
563 local ironic_hwinfo_file=$IRONIC_IPMIINFO_FILE
564 fi
565 fi
566
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800567 local total_nodes=0
Adam Gandelman0c99e2f2014-12-09 14:44:24 -0800568 local total_cpus=0
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700569 while read hardware_info; do
570 if ! is_ironic_hardware; then
571 local mac_address=$hardware_info
572 elif [[ -z "${IRONIC_DEPLOY_DRIVER##*_ipmitool}" ]]; then
573 local ipmi_address=$(echo $hardware_info |awk '{print $1}')
574 local mac_address=$(echo $hardware_info |awk '{print $2}')
575 local ironic_ipmi_username=$(echo $hardware_info |awk '{print $3}')
576 local ironic_ipmi_passwd=$(echo $hardware_info |awk '{print $4}')
577 # Currently we require all hardware platform have same CPU/RAM/DISK info
578 # in future, this can be enhanced to support different type, and then
579 # we create the bare metal flavor with minimum value
580 local node_options="-i ipmi_address=$ipmi_address -i ipmi_password=$ironic_ipmi_passwd\
581 -i ipmi_username=$ironic_ipmi_username"
Yuiko Takadab7d5bf62014-11-20 18:23:06 +0900582 node_options+=" -i $_IRONIC_DEPLOY_KERNEL_KEY=$IRONIC_DEPLOY_KERNEL_ID"
583 node_options+=" -i $_IRONIC_DEPLOY_RAMDISK_KEY=$IRONIC_DEPLOY_RAMDISK_ID"
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700584 fi
585
586 local node_id=$(ironic node-create --chassis_uuid $chassis_id \
587 --driver $IRONIC_DEPLOY_DRIVER \
588 -p cpus=$ironic_node_cpu\
589 -p memory_mb=$ironic_node_ram\
590 -p local_gb=$ironic_node_disk\
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400591 -p cpu_arch=x86_64 \
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700592 $node_options \
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400593 | grep " uuid " | get_field 2)
594
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700595 ironic port-create --address $mac_address --node_uuid $node_id
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400596
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800597 total_nodes=$((total_nodes+1))
Adam Gandelman0c99e2f2014-12-09 14:44:24 -0800598 total_cpus=$((total_cpus+$ironic_node_cpu))
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700599 done < $ironic_hwinfo_file
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400600
601 # create the nova flavor
Adam Gandelman29c3d632014-07-17 12:53:21 -0700602 # NOTE(adam_g): Attempting to use an autogenerated UUID for flavor id here uncovered
603 # bug (LP: #1333852) in Trove. This can be changed to use an auto flavor id when the
604 # bug is fixed in Juno.
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700605 local adjusted_disk=$(($ironic_node_disk - $ironic_ephemeral_disk))
606 nova flavor-create --ephemeral $ironic_ephemeral_disk baremetal 551 $ironic_node_ram $adjusted_disk $ironic_node_cpu
Adam Gandelman29c3d632014-07-17 12:53:21 -0700607
Yuiko Takadab7d5bf62014-11-20 18:23:06 +0900608 nova flavor-key baremetal set "cpu_arch"="x86_64"
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800609
610 if [ "$VIRT_DRIVER" == "ironic" ]; then
Adam Gandelman0c99e2f2014-12-09 14:44:24 -0800611 wait_for_nova_resources "count" $total_nodes
612 wait_for_nova_resources "vcpus" $total_cpus
Adam Gandelmanc78e4672014-12-01 11:24:37 -0800613 fi
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400614}
615
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700616function configure_iptables {
617 # enable tftp natting for allowing connections to HOST_IP's tftp server
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400618 sudo modprobe nf_conntrack_tftp
619 sudo modprobe nf_nat_tftp
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700620 # nodes boot from TFTP and callback to the API server listening on $HOST_IP
621 sudo iptables -I INPUT -d $HOST_IP -p udp --dport 69 -j ACCEPT || true
Adam Gandelman4b45fca2014-11-17 09:59:23 -0800622 sudo iptables -I INPUT -d $HOST_IP -p tcp --dport $IRONIC_SERVICE_PORT -j ACCEPT || true
yunhong jiangfe96ed62014-11-05 03:30:25 -0700623 if is_deployed_by_agent; then
Jim Rollenhagen74b28bc2014-10-29 14:15:22 -0700624 # agent ramdisk gets instance image from swift
625 sudo iptables -I INPUT -d $HOST_IP -p tcp --dport ${SWIFT_DEFAULT_BIND_PORT:-8080} -j ACCEPT || true
626 fi
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700627}
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400628
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700629function configure_tftpd {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400630 # stop tftpd and setup serving via xinetd
631 stop_service tftpd-hpa || true
632 [ -f /etc/init/tftpd-hpa.conf ] && echo "manual" | sudo tee /etc/init/tftpd-hpa.override
633 sudo cp $IRONIC_TEMPLATES_DIR/tftpd-xinetd.template /etc/xinetd.d/tftp
634 sudo sed -e "s|%TFTPBOOT_DIR%|$IRONIC_TFTPBOOT_DIR|g" -i /etc/xinetd.d/tftp
635
636 # setup tftp file mapping to satisfy requests at the root (booting) and
637 # /tftpboot/ sub-dir (as per deploy-ironic elements)
638 echo "r ^([^/]) $IRONIC_TFTPBOOT_DIR/\1" >$IRONIC_TFTPBOOT_DIR/map-file
639 echo "r ^(/tftpboot/) $IRONIC_TFTPBOOT_DIR/\2" >>$IRONIC_TFTPBOOT_DIR/map-file
640
641 chmod -R 0755 $IRONIC_TFTPBOOT_DIR
642 restart_service xinetd
643}
644
645function configure_ironic_ssh_keypair {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400646 if [[ ! -d $HOME/.ssh ]]; then
647 mkdir -p $HOME/.ssh
648 chmod 700 $HOME/.ssh
649 fi
Adam Gandelman6c749322014-12-02 16:20:50 -0800650 if [[ ! -e $IRONIC_KEY_FILE ]]; then
651 if [[ ! -d $(dirname $IRONIC_KEY_FILE) ]]; then
652 mkdir -p $(dirname $IRONIC_KEY_FILE)
653 fi
654 echo -e 'n\n' | ssh-keygen -q -t rsa -P '' -f $IRONIC_KEY_FILE
655 fi
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400656 cat $IRONIC_KEY_FILE.pub | tee -a $IRONIC_AUTHORIZED_KEYS_FILE
657}
658
659function ironic_ssh_check {
Dean Troyerb52caa32014-07-25 13:04:13 -0500660 local key_file=$1
661 local floating_ip=$2
662 local port=$3
663 local default_instance_user=$4
664 local active_timeout=$5
665 if ! timeout $active_timeout sh -c "while ! ssh -p $port -o StrictHostKeyChecking=no -i $key_file ${default_instance_user}@$floating_ip echo success; do sleep 1; done"; then
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400666 die $LINENO "server didn't become ssh-able!"
667 fi
668}
669
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400670function configure_ironic_auxiliary {
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400671 configure_ironic_ssh_keypair
Adam Gandelman6c749322014-12-02 16:20:50 -0800672 ironic_ssh_check $IRONIC_KEY_FILE $IRONIC_VM_SSH_ADDRESS $IRONIC_VM_SSH_PORT $IRONIC_SSH_USERNAME 10
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400673}
674
Jim Rollenhagenf00766b2014-08-15 01:08:11 +0000675function build_ipa_coreos_ramdisk {
676 echo "Building ironic-python-agent deploy ramdisk"
677 local kernel_path=$1
678 local ramdisk_path=$2
679 git_clone $IRONIC_PYTHON_AGENT_REPO $IRONIC_PYTHON_AGENT_DIR $IRONIC_PYTHON_AGENT_BRANCH
680 cd $IRONIC_PYTHON_AGENT_DIR
681 imagebuild/coreos/build_coreos_image.sh
682 cp imagebuild/coreos/UPLOAD/coreos_production_pxe_image-oem.cpio.gz $ramdisk_path
683 cp imagebuild/coreos/UPLOAD/coreos_production_pxe.vmlinuz $kernel_path
684 sudo rm -rf UPLOAD
685 cd -
686}
687
Alexander Gordeevf177f722014-03-14 18:44:48 +0400688# build deploy kernel+ramdisk, then upload them to glance
Dean Troyerb52caa32014-07-25 13:04:13 -0500689# this function sets ``IRONIC_DEPLOY_KERNEL_ID``, ``IRONIC_DEPLOY_RAMDISK_ID``
Alexander Gordeevf177f722014-03-14 18:44:48 +0400690function upload_baremetal_ironic_deploy {
Dean Troyerb52caa32014-07-25 13:04:13 -0500691 declare -g IRONIC_DEPLOY_KERNEL_ID IRONIC_DEPLOY_RAMDISK_ID
Adam Gandelman6d271482014-08-05 18:12:29 -0700692 echo_summary "Creating and uploading baremetal images for ironic"
693
694 # install diskimage-builder
Steve Bakercbfb3ae2014-05-05 16:06:47 +1200695 if [[ $(type -P ramdisk-image-create) == "" ]]; then
696 pip_install diskimage_builder
697 fi
Alexander Gordeevf177f722014-03-14 18:44:48 +0400698
699 if [ -z "$IRONIC_DEPLOY_KERNEL" -o -z "$IRONIC_DEPLOY_RAMDISK" ]; then
yunhong jiangfe96ed62014-11-05 03:30:25 -0700700 local IRONIC_DEPLOY_KERNEL_PATH=$TOP_DIR/files/ir-deploy-$IRONIC_DEPLOY_DRIVER.kernel
701 local IRONIC_DEPLOY_RAMDISK_PATH=$TOP_DIR/files/ir-deploy-$IRONIC_DEPLOY_DRIVER.initramfs
Alexander Gordeevf177f722014-03-14 18:44:48 +0400702 else
Dean Troyerb52caa32014-07-25 13:04:13 -0500703 local IRONIC_DEPLOY_KERNEL_PATH=$IRONIC_DEPLOY_KERNEL
704 local IRONIC_DEPLOY_RAMDISK_PATH=$IRONIC_DEPLOY_RAMDISK
Alexander Gordeevf177f722014-03-14 18:44:48 +0400705 fi
706
707 if [ ! -e "$IRONIC_DEPLOY_RAMDISK_PATH" -o ! -e "$IRONIC_DEPLOY_KERNEL_PATH" ]; then
708 # files don't exist, need to build them
709 if [ "$IRONIC_BUILD_DEPLOY_RAMDISK" = "True" ]; then
710 # we can build them only if we're not offline
711 if [ "$OFFLINE" != "True" ]; then
yunhong jiangfe96ed62014-11-05 03:30:25 -0700712 if is_deployed_by_agent; then
Jim Rollenhagenf00766b2014-08-15 01:08:11 +0000713 build_ipa_coreos_ramdisk $IRONIC_DEPLOY_KERNEL_PATH $IRONIC_DEPLOY_RAMDISK_PATH
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000714 else
Steve Bakercbfb3ae2014-05-05 16:06:47 +1200715 ramdisk-image-create $IRONIC_DEPLOY_FLAVOR \
yunhong jiangfe96ed62014-11-05 03:30:25 -0700716 -o $TOP_DIR/files/ir-deploy-$IRONIC_DEPLOY_DRIVER
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000717 fi
Alexander Gordeevf177f722014-03-14 18:44:48 +0400718 else
719 die $LINENO "Deploy kernel+ramdisk files don't exist and cannot be build in OFFLINE mode"
720 fi
721 else
yunhong jiangfe96ed62014-11-05 03:30:25 -0700722 if is_deployed_by_agent; then
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000723 # download the agent image tarball
Jim Rollenhagen792dc5f2014-08-27 17:03:00 -0700724 wget "$IRONIC_AGENT_KERNEL_URL" -O $IRONIC_DEPLOY_KERNEL_PATH
725 wget "$IRONIC_AGENT_RAMDISK_URL" -O $IRONIC_DEPLOY_RAMDISK_PATH
Jim Rollenhagena6a45462014-08-05 18:08:29 +0000726 else
727 die $LINENO "Deploy kernel+ramdisk files don't exist and their building was disabled explicitly by IRONIC_BUILD_DEPLOY_RAMDISK"
728 fi
Alexander Gordeevf177f722014-03-14 18:44:48 +0400729 fi
730 fi
731
Adam Gandelman6d271482014-08-05 18:12:29 -0700732 local token=$(keystone token-get | grep ' id ' | get_field 2)
733 die_if_not_set $LINENO token "Keystone fail to get token"
734
Alexander Gordeevf177f722014-03-14 18:44:48 +0400735 # load them into glance
Steve Martinelli8d3ac2d2014-08-02 23:47:15 -0400736 IRONIC_DEPLOY_KERNEL_ID=$(openstack \
737 --os-token $token \
738 --os-url http://$GLANCE_HOSTPORT \
739 image create \
740 $(basename $IRONIC_DEPLOY_KERNEL_PATH) \
741 --public --disk-format=aki \
Jim Rollenhagen722284f2014-08-15 18:04:02 +0000742 --container-format=aki \
Alexander Gordeevf177f722014-03-14 18:44:48 +0400743 < $IRONIC_DEPLOY_KERNEL_PATH | grep ' id ' | get_field 2)
Steve Martinelli8d3ac2d2014-08-02 23:47:15 -0400744 IRONIC_DEPLOY_RAMDISK_ID=$(openstack \
745 --os-token $token \
746 --os-url http://$GLANCE_HOSTPORT \
747 image create \
748 $(basename $IRONIC_DEPLOY_RAMDISK_PATH) \
749 --public --disk-format=ari \
Jim Rollenhagen722284f2014-08-15 18:04:02 +0000750 --container-format=ari \
Alexander Gordeevf177f722014-03-14 18:44:48 +0400751 < $IRONIC_DEPLOY_RAMDISK_PATH | grep ' id ' | get_field 2)
752}
753
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400754function prepare_baremetal_basic_ops {
Adam Gandelman03546402014-12-05 16:49:12 -0800755 if ! is_ironic_hardware; then
756 configure_ironic_auxiliary
757 fi
Adam Gandelman6d271482014-08-05 18:12:29 -0700758 upload_baremetal_ironic_deploy
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700759 if ! is_ironic_hardware; then
760 create_bridge_and_vms
761 fi
762 enroll_nodes
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400763 configure_tftpd
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700764 configure_iptables
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400765}
766
767function cleanup_baremetal_basic_ops {
768 rm -f $IRONIC_VM_MACS_CSV_FILE
769 if [ -f $IRONIC_KEY_FILE ]; then
Dean Troyerb52caa32014-07-25 13:04:13 -0500770 local key=$(cat $IRONIC_KEY_FILE.pub)
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400771 # remove public key from authorized_keys
Dean Troyerb52caa32014-07-25 13:04:13 -0500772 grep -v "$key" $IRONIC_AUTHORIZED_KEYS_FILE > temp && mv temp $IRONIC_AUTHORIZED_KEYS_FILE
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400773 chmod 0600 $IRONIC_AUTHORIZED_KEYS_FILE
774 fi
775 sudo rm -rf $IRONIC_DATA_DIR $IRONIC_STATE_PATH
Adam Gandelman22ec45e2014-10-16 17:41:22 -0700776
777 local vm_name
778 for vm_name in $(_ironic_bm_vm_names); do
779 sudo su $STACK_USER -c "$IRONIC_SCRIPTS_DIR/cleanup-node $vm_name $IRONIC_VM_NETWORK_BRIDGE"
780 done
781
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400782 sudo rm -rf /etc/xinetd.d/tftp /etc/init/tftpd-hpa.override
783 restart_service xinetd
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700784 sudo iptables -D INPUT -d $HOST_IP -p udp --dport 69 -j ACCEPT || true
Adam Gandelman4b45fca2014-11-17 09:59:23 -0800785 sudo iptables -D INPUT -d $HOST_IP -p tcp --dport $IRONIC_SERVICE_PORT -j ACCEPT || true
yunhong jiangfe96ed62014-11-05 03:30:25 -0700786 if is_deployed_by_agent; then
Jim Rollenhagen74b28bc2014-10-29 14:15:22 -0700787 # agent ramdisk gets instance image from swift
788 sudo iptables -D INPUT -d $HOST_IP -p tcp --dport ${SWIFT_DEFAULT_BIND_PORT:-8080} -j ACCEPT || true
789 fi
Adam Gandelmanc1f0db22014-04-14 13:21:22 -0700790 sudo rmmod nf_conntrack_tftp || true
791 sudo rmmod nf_nat_tftp || true
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400792}
793
794# Restore xtrace + pipefail
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300795$XTRACE
Alexander Gordeev06fb29c2014-01-31 18:02:07 +0400796$PIPEFAIL
Roman Prykhodchenkoce696b62013-08-09 10:40:45 +0300797
Adam Spiers6a5aa7c2013-10-24 11:27:02 +0100798# Tell emacs to use shell-script-mode
799## Local variables:
800## mode: shell-script
801## End: