blob: a5a608df72fe0b0e33d96cf1eda32d01703f706d [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Mark McClainb05c8762013-07-06 23:29:39 -04003# lib/neutron
Joe Gordon23946052014-01-15 21:42:32 +00004# functions - functions specific to neutron
Mark McClainb05c8762013-07-06 23:29:39 -04005
6# Dependencies:
7# ``functions`` file
8# ``DEST`` must be defined
Stephan Renatuse578eff2013-11-19 13:31:04 +01009# ``STACK_USER`` must be defined
Mark McClainb05c8762013-07-06 23:29:39 -040010
11# ``stack.sh`` calls the entry points in this order:
12#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010013# - install_neutron_agent_packages
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090014# - install_neutronclient
15# - install_neutron
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010016# - install_neutron_third_party
17# - configure_neutron
18# - init_neutron
19# - configure_neutron_third_party
20# - init_neutron_third_party
21# - start_neutron_third_party
22# - create_nova_conf_neutron
YAMAMOTO Takashia1875b12017-02-23 05:44:22 +090023# - configure_neutron_after_post_config
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010024# - start_neutron_service_and_check
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090025# - check_neutron_third_party_integration
yunhong jiang0d6e9922014-10-10 06:12:47 -070026# - start_neutron_agents
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010027# - create_neutron_initial_network
Mark McClainb05c8762013-07-06 23:29:39 -040028#
29# ``unstack.sh`` calls the entry points in this order:
30#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010031# - stop_neutron
yunhong jiang0d6e9922014-10-10 06:12:47 -070032# - stop_neutron_third_party
33# - cleanup_neutron
Mark McClainb05c8762013-07-06 23:29:39 -040034
35# Functions in lib/neutron are classified into the following categories:
36#
37# - entry points (called from stack.sh or unstack.sh)
38# - internal functions
39# - neutron exercises
40# - 3rd party programs
41
42
43# Neutron Networking
44# ------------------
45
46# Make sure that neutron is enabled in ``ENABLED_SERVICES``. If you want
47# to run Neutron on this host, make sure that q-svc is also in
48# ``ENABLED_SERVICES``.
49#
Mark McClainb05c8762013-07-06 23:29:39 -040050# See "Neutron Network Configuration" below for additional variables
51# that must be set in localrc for connectivity across hosts with
52# Neutron.
Mark McClainb05c8762013-07-06 23:29:39 -040053
John Davidge21529a52014-06-30 09:55:11 -040054# Settings
55# --------
56
Mark McClainb05c8762013-07-06 23:29:39 -040057
58# Neutron Network Configuration
59# -----------------------------
60
Sean Daguef3b2f4c2017-04-13 10:11:48 -040061if is_service_enabled tls-proxy; then
Rob Crittenden18d47782014-03-19 17:47:42 -040062 Q_PROTOCOL="https"
63fi
64
65
Mark McClainb05c8762013-07-06 23:29:39 -040066# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050067GITDIR["python-neutronclient"]=$DEST/python-neutronclient
Sean Dague5cb19062014-11-01 01:37:45 +010068
Doug Wiegley93e682c2015-03-03 10:31:30 -070069
Mark McClainb05c8762013-07-06 23:29:39 -040070NEUTRON_DIR=$DEST/neutron
Kyle Mestery20b839f2014-12-08 06:17:27 +000071NEUTRON_FWAAS_DIR=$DEST/neutron-fwaas
Mark McClainb05c8762013-07-06 23:29:39 -040072
73# Support entry points installation of console scripts
74if [[ -d $NEUTRON_DIR/bin/neutron-server ]]; then
75 NEUTRON_BIN_DIR=$NEUTRON_DIR/bin
Sean Dague3bdb9222013-10-22 08:36:16 -040076else
77 NEUTRON_BIN_DIR=$(get_python_exec_prefix)
Mark McClainb05c8762013-07-06 23:29:39 -040078fi
79
80NEUTRON_CONF_DIR=/etc/neutron
81NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf
82export NEUTRON_TEST_CONFIG_FILE=${NEUTRON_TEST_CONFIG_FILE:-"$NEUTRON_CONF_DIR/debug.ini"}
83
Kevin Benton66b361b2017-06-13 00:31:01 -070084# NEUTRON_DEPLOY_MOD_WSGI defines how neutron is deployed, allowed values:
85# - False (default) : Run neutron under Eventlet
86# - True : Run neutron under uwsgi
87# TODO(annp): Switching to uwsgi in next cycle if things turn out to be stable
88# enough
Jens Harbott3492fee2018-11-30 13:57:17 +000089NEUTRON_DEPLOY_MOD_WSGI=$(trueorfalse False NEUTRON_DEPLOY_MOD_WSGI)
Kevin Benton66b361b2017-06-13 00:31:01 -070090
91NEUTRON_UWSGI_CONF=$NEUTRON_CONF_DIR/neutron-api-uwsgi.ini
92
Adam Gandelman7614d212014-08-11 14:27:50 -070093# Agent binaries. Note, binary paths for other agents are set in per-service
94# scripts in lib/neutron_plugins/services/
95AGENT_DHCP_BINARY="$NEUTRON_BIN_DIR/neutron-dhcp-agent"
96AGENT_L3_BINARY=${AGENT_L3_BINARY:-"$NEUTRON_BIN_DIR/neutron-l3-agent"}
97AGENT_META_BINARY="$NEUTRON_BIN_DIR/neutron-metadata-agent"
98
99# Agent config files. Note, plugin-specific Q_PLUGIN_CONF_FILE is set and
100# loaded from per-plugin scripts in lib/neutron_plugins/
101Q_DHCP_CONF_FILE=$NEUTRON_CONF_DIR/dhcp_agent.ini
102Q_L3_CONF_FILE=$NEUTRON_CONF_DIR/l3_agent.ini
Adam Gandelman7614d212014-08-11 14:27:50 -0700103Q_META_CONF_FILE=$NEUTRON_CONF_DIR/metadata_agent.ini
104
Henry Gessau0fc1cc22014-07-06 22:54:34 -0400105# Default name for Neutron database
106Q_DB_NAME=${Q_DB_NAME:-neutron}
Mark McClainb05c8762013-07-06 23:29:39 -0400107# Default Neutron Plugin
Kyle Mestery6d235002013-09-18 20:27:08 +0000108Q_PLUGIN=${Q_PLUGIN:-ml2}
Mark McClainb05c8762013-07-06 23:29:39 -0400109# Default Neutron Port
110Q_PORT=${Q_PORT:-9696}
Rob Crittenden18d47782014-03-19 17:47:42 -0400111# Default Neutron Internal Port when using TLS proxy
112Q_PORT_INT=${Q_PORT_INT:-19696}
Mark McClainb05c8762013-07-06 23:29:39 -0400113# Default Neutron Host
114Q_HOST=${Q_HOST:-$SERVICE_HOST}
Rob Crittenden18d47782014-03-19 17:47:42 -0400115# Default protocol
116Q_PROTOCOL=${Q_PROTOCOL:-$SERVICE_PROTOCOL}
Brian Haley180f5eb2015-06-16 13:14:31 -0400117# Default listen address
Jens Harbottdc7b4292017-09-19 10:52:32 +0000118Q_LISTEN_ADDRESS=${Q_LISTEN_ADDRESS:-$(ipv6_unquote $SERVICE_LISTEN_ADDRESS)}
Mark McClainb05c8762013-07-06 23:29:39 -0400119# Default admin username
120Q_ADMIN_USERNAME=${Q_ADMIN_USERNAME:-neutron}
121# Default auth strategy
122Q_AUTH_STRATEGY=${Q_AUTH_STRATEGY:-keystone}
Mark McClainb05c8762013-07-06 23:29:39 -0400123# RHEL's support for namespaces requires using veths with ovs
124Q_OVS_USE_VETH=${Q_OVS_USE_VETH:-False}
125Q_USE_ROOTWRAP=${Q_USE_ROOTWRAP:-True}
Yuriy Taraday26623952014-07-16 17:41:53 +0400126Q_USE_ROOTWRAP_DAEMON=$(trueorfalse True Q_USE_ROOTWRAP_DAEMON)
Mark McClainb05c8762013-07-06 23:29:39 -0400127# Meta data IP
Jens Harbottdc7b4292017-09-19 10:52:32 +0000128Q_META_DATA_IP=${Q_META_DATA_IP:-$(ipv6_unquote $SERVICE_HOST)}
Mark McClainb05c8762013-07-06 23:29:39 -0400129# Allow Overlapping IP among subnets
130Q_ALLOW_OVERLAPPING_IP=${Q_ALLOW_OVERLAPPING_IP:-True}
Terry Wilsonf06c4432014-05-20 10:54:51 -0500131Q_NOTIFY_NOVA_PORT_STATUS_CHANGES=${Q_NOTIFY_NOVA_PORT_STATUS_CHANGES:-True}
132Q_NOTIFY_NOVA_PORT_DATA_CHANGES=${Q_NOTIFY_NOVA_PORT_DATA_CHANGES:-True}
Aaron Rosencea32b12014-03-04 16:20:14 -0800133VIF_PLUGGING_IS_FATAL=${VIF_PLUGGING_IS_FATAL:-True}
134VIF_PLUGGING_TIMEOUT=${VIF_PLUGGING_TIMEOUT:-300}
Aaron Rosen4540d002013-10-24 13:59:33 -0700135
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900136# The directory which contains files for Q_PLUGIN_EXTRA_CONF_FILES.
137# /etc/neutron is assumed by many of devstack plugins. Do not change.
138_Q_PLUGIN_EXTRA_CONF_PATH=/etc/neutron
139
Mark McClainb05c8762013-07-06 23:29:39 -0400140# List of config file names in addition to the main plugin config file
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900141# To add additional plugin config files, use ``neutron_server_config_add``
142# utility function. For example:
143#
144# ``neutron_server_config_add file1``
145#
146# These config files are relative to ``/etc/neutron``. The above
147# example would specify ``--config-file /etc/neutron/file1`` for
148# neutron server.
Sean Dagueafef8bf2017-03-06 14:07:23 -0500149declare -a -g Q_PLUGIN_EXTRA_CONF_FILES
Mark McClainb05c8762013-07-06 23:29:39 -0400150
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900151# same as Q_PLUGIN_EXTRA_CONF_FILES, but with absolute path.
Sean Dagueafef8bf2017-03-06 14:07:23 -0500152declare -a -g _Q_PLUGIN_EXTRA_CONF_FILES_ABS
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900153
Mark McClainb05c8762013-07-06 23:29:39 -0400154
Dean Troyere2907b42014-02-26 17:35:37 -0600155Q_RR_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf
156if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
157 Q_RR_COMMAND="sudo"
158else
159 NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron)
160 Q_RR_COMMAND="sudo $NEUTRON_ROOTWRAP $Q_RR_CONF_FILE"
Yuriy Taraday26623952014-07-16 17:41:53 +0400161 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
162 Q_RR_DAEMON_COMMAND="sudo $NEUTRON_ROOTWRAP-daemon $Q_RR_CONF_FILE"
163 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400164fi
165
Brian Haleyeea76212014-06-27 11:45:50 -0400166
167# Distributed Virtual Router (DVR) configuration
168# Can be:
Dean Troyer3324f192014-09-18 09:26:39 -0500169# - ``legacy`` - No DVR functionality
170# - ``dvr_snat`` - Controller or single node DVR
171# - ``dvr`` - Compute node in multi-node DVR
172#
Brian Haleyeea76212014-06-27 11:45:50 -0400173Q_DVR_MODE=${Q_DVR_MODE:-legacy}
174if [[ "$Q_DVR_MODE" != "legacy" ]]; then
Brian Haleye43dfdd2017-09-12 16:13:26 -0600175 Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch,l2population
Brian Haleyeea76212014-06-27 11:45:50 -0400176fi
177
Dean Troyere2907b42014-02-26 17:35:37 -0600178# Provider Network Configurations
179# --------------------------------
180
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900181# The following variables control the Neutron ML2 plugins' allocation
182# of tenant networks and availability of provider networks. If these
183# are not configured in ``localrc``, tenant networks will be local to
184# the host (with no remote connectivity), and no physical resources
185# will be available for the allocation of provider networks.
Dean Troyere2907b42014-02-26 17:35:37 -0600186
Attila Fazekas8feaf6c2014-07-27 20:47:04 +0200187# To disable tunnels (GRE or VXLAN) for tenant networks,
188# set to False in ``local.conf``.
189# GRE tunnels are only supported by the openvswitch.
190ENABLE_TENANT_TUNNELS=${ENABLE_TENANT_TUNNELS:-True}
Dean Troyere2907b42014-02-26 17:35:37 -0600191
Richard Theis8906b482016-06-08 10:28:37 -0500192# If using GRE, VXLAN or GENEVE tunnels for tenant networks,
193# specify the range of IDs from which tenant networks are
194# allocated. Can be overridden in ``localrc`` if necessary.
Anant Patil3827dc02014-07-03 21:38:16 +0530195TENANT_TUNNEL_RANGES=${TENANT_TUNNEL_RANGES:-1:1000}
Dean Troyere2907b42014-02-26 17:35:37 -0600196
197# To use VLANs for tenant networks, set to True in localrc. VLANs
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900198# are supported by the ML2 plugins, requiring additional configuration
199# described below.
Dean Troyere2907b42014-02-26 17:35:37 -0600200ENABLE_TENANT_VLANS=${ENABLE_TENANT_VLANS:-False}
201
202# If using VLANs for tenant networks, set in ``localrc`` to specify
203# the range of VLAN VIDs from which tenant networks are
204# allocated. An external network switch must be configured to
205# trunk these VLANs between hosts for multi-host connectivity.
206#
207# Example: ``TENANT_VLAN_RANGE=1000:1999``
208TENANT_VLAN_RANGE=${TENANT_VLAN_RANGE:-}
209
210# If using VLANs for tenant networks, or if using flat or VLAN
211# provider networks, set in ``localrc`` to the name of the physical
212# network, and also configure ``OVS_PHYSICAL_BRIDGE`` for the
213# openvswitch agent or ``LB_PHYSICAL_INTERFACE`` for the linuxbridge
214# agent, as described below.
215#
216# Example: ``PHYSICAL_NETWORK=default``
Kevin Benton1554ade2016-07-22 09:40:19 -0700217PHYSICAL_NETWORK=${PHYSICAL_NETWORK:-public}
Dean Troyere2907b42014-02-26 17:35:37 -0600218
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900219# With the openvswitch agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600220# or if using flat or VLAN provider networks, set in ``localrc`` to
221# the name of the OVS bridge to use for the physical network. The
222# bridge will be created if it does not already exist, but a
223# physical interface must be manually added to the bridge as a
224# port for external connectivity.
225#
226# Example: ``OVS_PHYSICAL_BRIDGE=br-eth1``
Kevin Benton1554ade2016-07-22 09:40:19 -0700227OVS_PHYSICAL_BRIDGE=${OVS_PHYSICAL_BRIDGE:-br-ex}
Dean Troyere2907b42014-02-26 17:35:37 -0600228
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900229# With the linuxbridge agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600230# or if using flat or VLAN provider networks, set in ``localrc`` to
231# the name of the network interface to use for the physical
232# network.
233#
234# Example: ``LB_PHYSICAL_INTERFACE=eth1``
Jens Harbott47f76ac2020-10-29 10:42:38 +0000235if [[ $Q_AGENT == "linuxbridge" && -z ${LB_PHYSICAL_INTERFACE} ]]; then
Nate Johnstonefc04ee2020-11-03 10:04:26 -0500236 default_route_dev=$( (ip route; ip -6 route) | grep ^default | head -n 1 | awk '{print $5}')
Jens Harbott47f76ac2020-10-29 10:42:38 +0000237 die_if_not_set $LINENO default_route_dev "Failure retrieving default route device"
238 LB_PHYSICAL_INTERFACE=$default_route_dev
239fi
Dean Troyere2907b42014-02-26 17:35:37 -0600240
Edgar Magana6f335b92014-07-10 15:42:44 -0700241# When Neutron tunnels are enabled it is needed to specify the
242# IP address of the end point in the local server. This IP is set
243# by default to the same IP address that the HOST IP.
244# This variable can be used to specify a different end point IP address
245# Example: ``TUNNEL_ENDPOINT_IP=1.1.1.1``
246TUNNEL_ENDPOINT_IP=${TUNNEL_ENDPOINT_IP:-$HOST_IP}
247
Dean Troyere2907b42014-02-26 17:35:37 -0600248# With the openvswitch plugin, set to True in ``localrc`` to enable
249# provider GRE tunnels when ``ENABLE_TENANT_TUNNELS`` is False.
250#
251# Example: ``OVS_ENABLE_TUNNELING=True``
252OVS_ENABLE_TUNNELING=${OVS_ENABLE_TUNNELING:-$ENABLE_TENANT_TUNNELS}
253
Tan Lin27a196e2014-10-31 15:44:34 +0800254# Use DHCP agent for providing metadata service in the case of
255# without L3 agent (No Route Agent), set to True in localrc.
256ENABLE_ISOLATED_METADATA=${ENABLE_ISOLATED_METADATA:-False}
257
258# Add a static route as dhcp option, so the request to 169.254.169.254
259# will be able to reach through a route(DHCP agent)
260# This option require ENABLE_ISOLATED_METADATA = True
261ENABLE_METADATA_NETWORK=${ENABLE_METADATA_NETWORK:-False}
Mark McClainb05c8762013-07-06 23:29:39 -0400262# Neutron plugin specific functions
263# ---------------------------------
264
265# Please refer to ``lib/neutron_plugins/README.md`` for details.
Hirofumi Ichihara36daecd2015-07-23 17:50:40 +0900266if [ -f $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN ]; then
267 source $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN
268fi
Mark McClainb05c8762013-07-06 23:29:39 -0400269
Emilien Macchi40546f72013-09-24 15:10:25 +0200270# Agent metering service plugin functions
271# -------------------------------------------
272
273# Hardcoding for 1 service plugin for now
274source $TOP_DIR/lib/neutron_plugins/services/metering
275
Sean M. Collins2a242512016-05-03 09:03:09 -0400276# L3 Service functions
277source $TOP_DIR/lib/neutron_plugins/services/l3
Slawek Kaplonskif758b602021-10-06 12:02:22 +0200278
279# Additional Neutron service plugins
Slawek Kaplonski7f6d9282021-10-27 16:40:30 +0200280source $TOP_DIR/lib/neutron_plugins/services/placement
Slawek Kaplonskif758b602021-10-06 12:02:22 +0200281source $TOP_DIR/lib/neutron_plugins/services/trunk
Slawek Kaplonskif9a896c2021-10-27 16:50:11 +0200282source $TOP_DIR/lib/neutron_plugins/services/qos
Slawek Kaplonskif758b602021-10-06 12:02:22 +0200283
Mark McClainb05c8762013-07-06 23:29:39 -0400284# Use security group or not
285if has_neutron_plugin_security_group; then
286 Q_USE_SECGROUP=${Q_USE_SECGROUP:-True}
287else
288 Q_USE_SECGROUP=False
289fi
290
Dean Troyere2907b42014-02-26 17:35:37 -0600291# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +1100292_XTRACE_NEUTRON=$(set +o | grep xtrace)
Dean Troyere2907b42014-02-26 17:35:37 -0600293set +o xtrace
294
295
Mark McClainb05c8762013-07-06 23:29:39 -0400296# Functions
297# ---------
298
Adam Gandelman7614d212014-08-11 14:27:50 -0700299function _determine_config_server {
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900300 if [[ "$Q_PLUGIN_EXTRA_CONF_PATH" != '' ]]; then
301 if [[ "$Q_PLUGIN_EXTRA_CONF_PATH" = "$_Q_PLUGIN_EXTRA_CONF_PATH" ]]; then
302 deprecated "Q_PLUGIN_EXTRA_CONF_PATH is deprecated"
303 else
304 die $LINENO "Q_PLUGIN_EXTRA_CONF_PATH is deprecated"
305 fi
306 fi
307 if [[ ${#Q_PLUGIN_EXTRA_CONF_FILES[@]} > 0 ]]; then
308 deprecated "Q_PLUGIN_EXTRA_CONF_FILES is deprecated. Use neutron_server_config_add instead."
309 fi
310 for cfg_file in ${Q_PLUGIN_EXTRA_CONF_FILES[@]}; do
311 _Q_PLUGIN_EXTRA_CONF_FILES_ABS+=($_Q_PLUGIN_EXTRA_CONF_PATH/$cfg_file)
312 done
313
Adam Gandelman7614d212014-08-11 14:27:50 -0700314 local cfg_file
315 local opts="--config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900316 for cfg_file in ${_Q_PLUGIN_EXTRA_CONF_FILES_ABS[@]}; do
Tom Patzig73467042016-04-19 17:02:34 +0200317 opts+=" --config-file $cfg_file"
Adam Gandelman7614d212014-08-11 14:27:50 -0700318 done
319 echo "$opts"
320}
321
Adam Gandelman7614d212014-08-11 14:27:50 -0700322function _determine_config_l3 {
Angus Leesa1c70f22016-05-31 14:43:14 +1000323 local opts="--config-file $NEUTRON_CONF --config-file $Q_L3_CONF_FILE"
Adam Gandelman7614d212014-08-11 14:27:50 -0700324 echo "$opts"
325}
326
327# For services and agents that require it, dynamically construct a list of
328# --config-file arguments that are passed to the binary.
329function determine_config_files {
330 local opts=""
331 case "$1" in
332 "neutron-server") opts="$(_determine_config_server)" ;;
Adam Gandelman7614d212014-08-11 14:27:50 -0700333 "neutron-l3-agent") opts="$(_determine_config_l3)" ;;
334 esac
335 if [ -z "$opts" ] ; then
336 die $LINENO "Could not determine config files for $1."
337 fi
338 echo "$opts"
339}
340
Sean M. Collins2a242512016-05-03 09:03:09 -0400341# configure_mutnauq()
Mark McClainb05c8762013-07-06 23:29:39 -0400342# Set common config for all neutron server and agents.
Sean M. Collins2a242512016-05-03 09:03:09 -0400343function configure_mutnauq {
Mark McClainb05c8762013-07-06 23:29:39 -0400344 _configure_neutron_common
Brant Knudson2dd110c2015-03-14 12:39:14 -0500345 iniset_rpc_backend neutron $NEUTRON_CONF
Mark McClainb05c8762013-07-06 23:29:39 -0400346
Emilien Macchi40546f72013-09-24 15:10:25 +0200347 if is_service_enabled q-metering; then
348 _configure_neutron_metering
349 fi
Stephen Ma9b38eb22014-04-02 02:13:09 +0000350 if is_service_enabled q-agt q-svc; then
Mark McClainb05c8762013-07-06 23:29:39 -0400351 _configure_neutron_service
352 fi
353 if is_service_enabled q-agt; then
354 _configure_neutron_plugin_agent
355 fi
356 if is_service_enabled q-dhcp; then
357 _configure_neutron_dhcp_agent
358 fi
359 if is_service_enabled q-l3; then
360 _configure_neutron_l3_agent
361 fi
362 if is_service_enabled q-meta; then
363 _configure_neutron_metadata_agent
364 fi
365
Brian Haleyeea76212014-06-27 11:45:50 -0400366 if [[ "$Q_DVR_MODE" != "legacy" ]]; then
367 _configure_dvr
368 fi
Dina Belova58adaa62014-07-11 18:18:12 +0400369 if is_service_enabled ceilometer; then
370 _configure_neutron_ceilometer_notifications
371 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400372
Lucas Alvares Gomes1d468d42020-06-09 14:35:52 +0100373 if [[ $Q_AGENT == "ovn" ]]; then
374 configure_ovn
Lucas Alvares Gomes1d468d42020-06-09 14:35:52 +0100375 configure_ovn_plugin
376 fi
377
Slawek Kaplonskif758b602021-10-06 12:02:22 +0200378 # Configure Neutron's advanced services
Slawek Kaplonski7f6d9282021-10-27 16:40:30 +0200379 if is_service_enabled q-placement neutron-placement; then
380 configure_placement_extension
381 fi
Slawek Kaplonskif758b602021-10-06 12:02:22 +0200382 if is_service_enabled q-trunk neutron-trunk; then
383 configure_trunk_extension
384 fi
Slawek Kaplonskif9a896c2021-10-27 16:50:11 +0200385 if is_service_enabled q-qos neutron-qos; then
386 configure_qos
387 if is_service_enabled q-l3 neutron-l3; then
388 configure_l3_agent_extension_fip_qos
389 configure_l3_agent_extension_gateway_ip_qos
390 fi
391 fi
Slawek Kaplonskif758b602021-10-06 12:02:22 +0200392
armando-migliaccioe155b892015-06-12 08:55:02 -0700393 iniset $NEUTRON_CONF DEFAULT api_workers "$API_WORKERS"
Armando Migliaccio06f2ea22017-02-02 16:47:00 -0800394 # devstack is not a tool for running uber scale OpenStack
395 # clouds, therefore running without a dedicated RPC worker
396 # for state reports is more than adequate.
397 iniset $NEUTRON_CONF DEFAULT rpc_state_report_workers 0
Mark McClainb05c8762013-07-06 23:29:39 -0400398}
399
Ian Wienandaee18c72014-02-21 15:35:08 +1100400function create_nova_conf_neutron {
Lucas Alvares Gomese6385932018-06-28 11:00:28 +0100401 local conf=${1:-$NOVA_CONF}
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400402 iniset $conf neutron auth_type "password"
Jens Harbott32c00892019-04-10 10:33:39 +0000403 iniset $conf neutron auth_url "$KEYSTONE_SERVICE_URI"
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400404 iniset $conf neutron username "$Q_ADMIN_USERNAME"
405 iniset $conf neutron password "$SERVICE_PASSWORD"
406 iniset $conf neutron user_domain_name "$SERVICE_DOMAIN_NAME"
407 iniset $conf neutron project_name "$SERVICE_PROJECT_NAME"
408 iniset $conf neutron project_domain_name "$SERVICE_DOMAIN_NAME"
409 iniset $conf neutron auth_strategy "$Q_AUTH_STRATEGY"
410 iniset $conf neutron region_name "$REGION_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400411
Matt Riedemann925c2562015-08-25 13:40:25 -0700412 # optionally set options in nova_conf
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400413 neutron_plugin_create_nova_conf $conf
Mark McClainb05c8762013-07-06 23:29:39 -0400414
Mark McClainb05c8762013-07-06 23:29:39 -0400415 if is_service_enabled q-meta; then
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400416 iniset $conf neutron service_metadata_proxy "True"
Mark McClainb05c8762013-07-06 23:29:39 -0400417 fi
Aaron Rosencea32b12014-03-04 16:20:14 -0800418
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400419 iniset $conf DEFAULT vif_plugging_is_fatal "$VIF_PLUGGING_IS_FATAL"
420 iniset $conf DEFAULT vif_plugging_timeout "$VIF_PLUGGING_TIMEOUT"
Mark McClainb05c8762013-07-06 23:29:39 -0400421}
422
Sean M. Collins2a242512016-05-03 09:03:09 -0400423# create_mutnauq_accounts() - Set up common required neutron accounts
Mark McClainb05c8762013-07-06 23:29:39 -0400424
425# Tenant User Roles
426# ------------------------------------------------------------------
427# service neutron admin # if enabled
428
429# Migrated from keystone_data.sh
Sean M. Collins2a242512016-05-03 09:03:09 -0400430function create_mutnauq_accounts {
Kevin Benton66b361b2017-06-13 00:31:01 -0700431 local neutron_url
432 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
433 neutron_url=$Q_PROTOCOL://$SERVICE_HOST/networking/
434 else
435 neutron_url=$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/
436 fi
437
Mark McClainb05c8762013-07-06 23:29:39 -0400438 if [[ "$ENABLED_SERVICES" =~ "q-svc" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100439
Jamie Lennox85ff5322015-01-28 14:28:01 +1000440 create_service_user "neutron"
Bartosz Górski0abde392014-02-28 14:15:19 +0100441
Sean Dague985e9582016-02-10 07:25:24 -0500442 get_or_create_service "neutron" "network" "Neutron Service"
Matt Riedemannae4578b2016-04-23 01:45:40 +0000443 get_or_create_endpoint \
Sean Dague985e9582016-02-10 07:25:24 -0500444 "network" \
Kevin Benton66b361b2017-06-13 00:31:01 -0700445 "$REGION_NAME" "$neutron_url"
Mark McClainb05c8762013-07-06 23:29:39 -0400446 fi
447}
448
Sean M. Collins2a242512016-05-03 09:03:09 -0400449# init_mutnauq() - Initialize databases, etc.
450function init_mutnauq {
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200451 recreate_database $Q_DB_NAME
Clark Boylan633dbc32017-06-14 12:09:21 -0700452 time_start "dbsync"
Salvatore Orlandodd649882013-08-05 08:56:17 -0700453 # Run Neutron db migrations
454 $NEUTRON_BIN_DIR/neutron-db-manage --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE upgrade head
Clark Boylan633dbc32017-06-14 12:09:21 -0700455 time_stop "dbsync"
Mark McClainb05c8762013-07-06 23:29:39 -0400456}
457
Sean M. Collins2a242512016-05-03 09:03:09 -0400458# install_mutnauq() - Collect source and prepare
459function install_mutnauq {
Doug Wiegley86561c32016-02-10 18:37:21 -0700460 # Install neutron-lib from git so we make sure we're testing
461 # the latest code.
462 if use_library_from_git "neutron-lib"; then
463 git_clone_by_name "neutron-lib"
464 setup_dev_lib "neutron-lib"
465 fi
466
Mark McClainb05c8762013-07-06 23:29:39 -0400467 git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH
468 setup_develop $NEUTRON_DIR
Lucas Alvares Gomes1d468d42020-06-09 14:35:52 +0100469
470 if [[ $Q_AGENT == "ovn" ]]; then
471 install_ovn
472 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400473}
474
Mark McClainb05c8762013-07-06 23:29:39 -0400475# install_neutron_agent_packages() - Collect source and prepare
YAMAMOTO Takashic74315e2016-07-21 17:49:43 +0900476function install_neutron_agent_packages_mutnauq {
Robert Li72b3e442014-07-17 15:04:52 -0400477 # radvd doesn't come with the OS. Install it if the l3 service is enabled.
478 if is_service_enabled q-l3; then
479 install_package radvd
480 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400481 # install packages that are specific to plugin agent(s)
482 if is_service_enabled q-agt q-dhcp q-l3; then
483 neutron_plugin_install_agent_packages
484 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400485}
486
YAMAMOTO Takashia1875b12017-02-23 05:44:22 +0900487# Finish neutron configuration
488function configure_neutron_after_post_config {
489 if [[ $Q_SERVICE_PLUGIN_CLASSES != '' ]]; then
490 iniset $NEUTRON_CONF DEFAULT service_plugins $Q_SERVICE_PLUGIN_CLASSES
491 fi
492}
493
Lucas Alvares Gomes1d468d42020-06-09 14:35:52 +0100494# Start running OVN processes
495function start_ovn_services {
496 if [[ $Q_AGENT == "ovn" ]]; then
497 init_ovn
498 start_ovn
499 if [[ "$OVN_L3_CREATE_PUBLIC_NETWORK" == "True" ]]; then
500 if [[ "$NEUTRON_CREATE_INITIAL_NETWORKS" != "True" ]]; then
501 echo "OVN_L3_CREATE_PUBLIC_NETWORK=True is being ignored "
502 echo "because NEUTRON_CREATE_INITIAL_NETWORKS is set to False"
503 else
504 create_public_bridge
505 fi
506 fi
507 fi
508}
509
Sean Dague0eebeb42017-08-30 14:16:58 -0400510# Start running processes
Ian Wienandaee18c72014-02-21 15:35:08 +1100511function start_neutron_service_and_check {
Rob Crittenden18d47782014-03-19 17:47:42 -0400512 local service_port=$Q_PORT
513 local service_protocol=$Q_PROTOCOL
Ian Wienand7ae97292016-02-16 14:50:53 +1100514 local cfg_file_options
Kevin Benton66b361b2017-06-13 00:31:01 -0700515 local neutron_url
Ian Wienand7ae97292016-02-16 14:50:53 +1100516
517 cfg_file_options="$(determine_config_files neutron-server)"
518
Rob Crittenden18d47782014-03-19 17:47:42 -0400519 if is_service_enabled tls-proxy; then
520 service_port=$Q_PORT_INT
521 service_protocol="http"
522 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400523 # Start the Neutron service
Kevin Benton66b361b2017-06-13 00:31:01 -0700524 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
525 enable_service neutron-api
Ian Wienand312517d2018-06-22 22:23:29 +1000526 run_process neutron-api "$(which uwsgi) --procname-prefix neutron-api --ini $NEUTRON_UWSGI_CONF"
Kevin Benton66b361b2017-06-13 00:31:01 -0700527 neutron_url=$Q_PROTOCOL://$Q_HOST/networking/
528 enable_service neutron-rpc-server
529 run_process neutron-rpc-server "$NEUTRON_BIN_DIR/neutron-rpc-server $cfg_file_options"
530 else
531 run_process q-svc "$NEUTRON_BIN_DIR/neutron-server $cfg_file_options"
532 neutron_url=$service_protocol://$Q_HOST:$service_port
533 # Start proxy if enabled
534 if is_service_enabled tls-proxy; then
535 start_tls_proxy neutron '*' $Q_PORT $Q_HOST $Q_PORT_INT
536 fi
537 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400538 echo "Waiting for Neutron to start..."
Sean Dague442e4e92015-06-24 13:24:02 -0400539
Kevin Benton66b361b2017-06-13 00:31:01 -0700540 local testcmd="wget ${ssl_ca} --no-proxy -q -O- $neutron_url"
Sean Dague442e4e92015-06-24 13:24:02 -0400541 test_with_retry "$testcmd" "Neutron did not start" $SERVICE_TIMEOUT
Mark McClainb05c8762013-07-06 23:29:39 -0400542}
543
Russell Bryant09b94602015-06-08 15:25:43 -0400544# Control of the l2 agent is separated out to make it easier to test partial
545# upgrades (everything upgraded except the L2 agent)
Sean M. Collins2a242512016-05-03 09:03:09 -0400546function start_mutnauq_l2_agent {
Davanum Srinivas59756e92015-09-23 17:42:54 -0400547 run_process q-agt "$AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
Nachi Ueno584750f2013-07-15 18:22:21 -0700548
Kahou Leid663e292015-10-24 12:18:57 -0700549 if is_provider_network && [[ $Q_AGENT == "openvswitch" ]]; then
Zhongyue Luo56b7efb2014-12-16 11:36:49 +0800550 sudo ovs-vsctl --no-wait -- --may-exist add-port $OVS_PHYSICAL_BRIDGE $PUBLIC_INTERFACE
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400551 sudo ip link set $OVS_PHYSICAL_BRIDGE up
552 sudo ip link set br-int up
553 sudo ip link set $PUBLIC_INTERFACE up
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700554 if is_ironic_hardware; then
555 for IP in $(ip addr show dev $PUBLIC_INTERFACE | grep ' inet ' | awk '{print $2}'); do
556 sudo ip addr del $IP dev $PUBLIC_INTERFACE
557 sudo ip addr add $IP dev $OVS_PHYSICAL_BRIDGE
558 done
gong yong sheng348c6ac2015-06-23 14:03:47 +0800559 sudo ip route replace $FIXED_RANGE via $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700560 fi
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400561 fi
Russell Bryant09b94602015-06-08 15:25:43 -0400562}
563
Sean M. Collins2a242512016-05-03 09:03:09 -0400564function start_mutnauq_other_agents {
Angus Leesa1c70f22016-05-31 14:43:14 +1000565 run_process q-dhcp "$AGENT_DHCP_BINARY --config-file $NEUTRON_CONF --config-file $Q_DHCP_CONF_FILE"
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400566
YAMAMOTO Takashi6839d422017-10-17 12:58:18 +0900567 run_process q-l3 "$AGENT_L3_BINARY $(determine_config_files neutron-l3-agent)"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700568
Angus Leesa1c70f22016-05-31 14:43:14 +1000569 run_process q-meta "$AGENT_META_BINARY --config-file $NEUTRON_CONF --config-file $Q_META_CONF_FILE"
Davanum Srinivas59756e92015-09-23 17:42:54 -0400570 run_process q-metering "$AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400571}
572
Russell Bryant09b94602015-06-08 15:25:43 -0400573# Start running processes, including screen
574function start_neutron_agents {
575 # Start up the neutron agents if enabled
Sean M. Collins2a242512016-05-03 09:03:09 -0400576 start_mutnauq_l2_agent
577 start_mutnauq_other_agents
Russell Bryant09b94602015-06-08 15:25:43 -0400578}
579
Sean M. Collins2a242512016-05-03 09:03:09 -0400580function stop_mutnauq_l2_agent {
Russell Bryant09b94602015-06-08 15:25:43 -0400581 stop_process q-agt
582}
583
Sean Dague0eebeb42017-08-30 14:16:58 -0400584# stop_mutnauq_other() - Stop running processes
Sean M. Collins2a242512016-05-03 09:03:09 -0400585function stop_mutnauq_other {
Mark McClainb05c8762013-07-06 23:29:39 -0400586 if is_service_enabled q-dhcp; then
Chris Dent36891dc2015-02-03 16:22:44 +0000587 stop_process q-dhcp
Mark McClainb05c8762013-07-06 23:29:39 -0400588 pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }')
589 [ ! -z "$pid" ] && sudo kill -9 $pid
590 fi
Chris Dent36891dc2015-02-03 16:22:44 +0000591
Kevin Benton66b361b2017-06-13 00:31:01 -0700592 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
593 stop_process neutron-rpc-server
594 stop_process neutron-api
595 else
596 stop_process q-svc
597 fi
Li Maa15d9de2016-01-19 19:11:51 +0800598
599 if is_service_enabled q-l3; then
600 sudo pkill -f "radvd -C $DATA_DIR/neutron/ra"
601 stop_process q-l3
602 fi
Chris Dent36891dc2015-02-03 16:22:44 +0000603
Mark McClainb05c8762013-07-06 23:29:39 -0400604 if is_service_enabled q-meta; then
Jakub Libosvar1f763282014-01-28 23:01:38 +0100605 sudo pkill -9 -f neutron-ns-metadata-proxy || :
Chris Dent36891dc2015-02-03 16:22:44 +0000606 stop_process q-meta
Mark McClainb05c8762013-07-06 23:29:39 -0400607 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900608
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900609 if is_service_enabled q-metering; then
610 neutron_metering_stop
611 fi
Li Ma50120fa2015-12-13 10:41:34 +0800612
613 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
614 sudo pkill -9 -f $NEUTRON_ROOTWRAP-daemon || :
615 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400616}
617
Russell Bryant09b94602015-06-08 15:25:43 -0400618# stop_neutron() - Stop running processes (non-screen)
Sean M. Collins2a242512016-05-03 09:03:09 -0400619function stop_mutnauq {
620 stop_mutnauq_other
621 stop_mutnauq_l2_agent
Lucas Alvares Gomes1d468d42020-06-09 14:35:52 +0100622
623 if [[ $Q_AGENT == "ovn" ]]; then
624 stop_ovn
625 fi
Russell Bryant09b94602015-06-08 15:25:43 -0400626}
627
Sean M. Collins00e16a92015-02-20 11:45:21 -0500628# _move_neutron_addresses_route() - Move the primary IP to the OVS bridge
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600629# on startup, or back to the public interface on cleanup. If no IP is
630# configured on the interface, just add it as a port to the OVS bridge.
Sean M. Collins00e16a92015-02-20 11:45:21 -0500631function _move_neutron_addresses_route {
632 local from_intf=$1
633 local to_intf=$2
634 local add_ovs_port=$3
Brian Haleya0d1b012015-11-16 17:30:48 -0500635 local del_ovs_port=$4
636 local af=$5
Sean M. Collins00e16a92015-02-20 11:45:21 -0500637
638 if [[ -n "$from_intf" && -n "$to_intf" ]]; then
639 # Remove the primary IP address from $from_intf and add it to $to_intf,
640 # along with the default route, if it exists. Also, when called
641 # on configure we will also add $from_intf as a port on $to_intf,
642 # assuming it is an OVS bridge.
643
Matt McEuene24707b2016-07-11 08:37:59 -0500644 local IP_REPLACE=""
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600645 local IP_DEL=""
Shinobu KINJOf95315b2015-11-07 10:21:08 +0900646 local IP_UP=""
Ian Wienandada886d2015-10-07 14:06:26 +1100647 local DEFAULT_ROUTE_GW
Andreas Scheuring92e6b1a2017-04-26 13:40:42 +0200648 DEFAULT_ROUTE_GW=$(ip -f $af r | awk "/default.+$from_intf\s/ { print \$3; exit }")
Sean M. Collins00e16a92015-02-20 11:45:21 -0500649 local ADD_OVS_PORT=""
Brian Haleya0d1b012015-11-16 17:30:48 -0500650 local DEL_OVS_PORT=""
Sean M. Collins17398a32016-05-11 18:24:46 +0000651 local ARP_CMD=""
Sean M. Collins00e16a92015-02-20 11:45:21 -0500652
Brian Haleybb9caea2015-11-16 17:18:42 -0500653 IP_BRD=$(ip -f $af a s dev $from_intf scope global primary | grep inet | awk '{ print $2, $3, $4; exit }')
Adam Kacmarsky11298a02015-06-26 14:49:47 -0600654
Sean M. Collins00e16a92015-02-20 11:45:21 -0500655 if [ "$DEFAULT_ROUTE_GW" != "" ]; then
Sean M. Collins59e86a32015-11-09 11:06:39 -0500656 ADD_DEFAULT_ROUTE="sudo ip -f $af r replace default via $DEFAULT_ROUTE_GW dev $to_intf"
Sean M. Collins00e16a92015-02-20 11:45:21 -0500657 fi
658
659 if [[ "$add_ovs_port" == "True" ]]; then
Raman Budnydb02bbf2015-03-31 13:09:09 +0300660 ADD_OVS_PORT="sudo ovs-vsctl --may-exist add-port $to_intf $from_intf"
Sean M. Collins00e16a92015-02-20 11:45:21 -0500661 fi
662
Brian Haleya0d1b012015-11-16 17:30:48 -0500663 if [[ "$del_ovs_port" == "True" ]]; then
664 DEL_OVS_PORT="sudo ovs-vsctl --if-exists del-port $from_intf $to_intf"
665 fi
666
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600667 if [[ "$IP_BRD" != "" ]]; then
Brian Haley94510212015-09-02 15:40:04 -0400668 IP_DEL="sudo ip addr del $IP_BRD dev $from_intf"
Matt McEuene24707b2016-07-11 08:37:59 -0500669 IP_REPLACE="sudo ip addr replace $IP_BRD dev $to_intf"
Shinobu KINJOf95315b2015-11-07 10:21:08 +0900670 IP_UP="sudo ip link set $to_intf up"
Sean M. Collins6d4843e2016-05-12 16:14:26 -0400671 if [[ "$af" == "inet" ]]; then
672 IP=$(echo $IP_BRD | awk '{ print $1; exit }' | grep -o -E '(.*)/' | cut -d "/" -f1)
Rodolfo Alonso Hernandezca486c52020-06-25 18:22:28 +0000673 ARP_CMD="sudo arping -A -c 3 -w 5 -I $to_intf $IP "
Sean M. Collins6d4843e2016-05-12 16:14:26 -0400674 fi
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600675 fi
676
Brian Haleya0d1b012015-11-16 17:30:48 -0500677 # The add/del OVS port calls have to happen either before or
678 # after the address is moved in order to not leave it orphaned.
Matt McEuene24707b2016-07-11 08:37:59 -0500679 $DEL_OVS_PORT; $IP_DEL; $IP_REPLACE; $IP_UP; $ADD_OVS_PORT; $ADD_DEFAULT_ROUTE; $ARP_CMD
Sean M. Collins00e16a92015-02-20 11:45:21 -0500680 fi
681}
682
Slawek Kaplonskib1a89eb2021-08-26 21:42:32 +0200683# _configure_public_network_connectivity() - Configures connectivity to the
684# external network using $PUBLIC_INTERFACE or NAT on the single interface
685# machines
686function _configure_public_network_connectivity {
687 # If we've given a PUBLIC_INTERFACE to take over, then we assume
688 # that we can own the whole thing, and privot it into the OVS
689 # bridge. If we are not, we're probably on a single interface
690 # machine, and we just setup NAT so that fixed guests can get out.
691 if [[ -n "$PUBLIC_INTERFACE" ]]; then
692 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" True False "inet"
693
694 if [[ $(ip -f inet6 a s dev "$PUBLIC_INTERFACE" | grep -c 'global') != 0 ]]; then
695 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" False False "inet6"
696 fi
697 else
698 for d in $default_v4_route_devs; do
699 sudo iptables -t nat -A POSTROUTING -o $d -s $FLOATING_RANGE -j MASQUERADE
700 done
701 fi
702}
703
Sean M. Collins2a242512016-05-03 09:03:09 -0400704# cleanup_mutnauq() - Remove residual data files, anything left over from previous
Mark McClainb05c8762013-07-06 23:29:39 -0400705# runs that a clean run would need to clean up
Sean M. Collins2a242512016-05-03 09:03:09 -0400706function cleanup_mutnauq {
Sean M. Collins00e16a92015-02-20 11:45:21 -0500707
Yalei Wang316b3482015-07-15 21:00:31 +0800708 if [[ -n "$OVS_PHYSICAL_BRIDGE" ]]; then
Brian Haleya0d1b012015-11-16 17:30:48 -0500709 _move_neutron_addresses_route "$OVS_PHYSICAL_BRIDGE" "$PUBLIC_INTERFACE" False True "inet"
Adam Kacmarsky11298a02015-06-26 14:49:47 -0600710
Yalei Wang316b3482015-07-15 21:00:31 +0800711 if [[ $(ip -f inet6 a s dev "$OVS_PHYSICAL_BRIDGE" | grep -c 'global') != 0 ]]; then
Sean M. Collins790266f2015-11-11 13:36:35 -0500712 # ip(8) wants the prefix length when deleting
713 local v6_gateway
714 v6_gateway=$(ip -6 a s dev $OVS_PHYSICAL_BRIDGE | grep $IPV6_PUBLIC_NETWORK_GATEWAY | awk '{ print $2 }')
715 sudo ip -6 addr del $v6_gateway dev $OVS_PHYSICAL_BRIDGE
Brian Haleya0d1b012015-11-16 17:30:48 -0500716 _move_neutron_addresses_route "$OVS_PHYSICAL_BRIDGE" "$PUBLIC_INTERFACE" False False "inet6"
Yalei Wang316b3482015-07-15 21:00:31 +0800717 fi
Sean M. Collins00e16a92015-02-20 11:45:21 -0500718
Yalei Wang316b3482015-07-15 21:00:31 +0800719 if is_provider_network && is_ironic_hardware; then
720 for IP in $(ip addr show dev $OVS_PHYSICAL_BRIDGE | grep ' inet ' | awk '{print $2}'); do
721 sudo ip addr del $IP dev $OVS_PHYSICAL_BRIDGE
722 sudo ip addr add $IP dev $PUBLIC_INTERFACE
723 done
724 sudo route del -net $FIXED_RANGE gw $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
725 fi
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700726 fi
727
Mark McClainb05c8762013-07-06 23:29:39 -0400728 if is_neutron_ovs_base_plugin; then
729 neutron_ovs_base_cleanup
730 fi
731
Sean M. Collins7bc2af72015-06-08 12:36:30 -0400732 if [[ $Q_AGENT == "linuxbridge" ]]; then
733 neutron_lb_cleanup
734 fi
735
Mark McClainb05c8762013-07-06 23:29:39 -0400736 # delete all namespaces created by neutron
Doug Wiegley7e40c642016-08-20 16:32:14 +0000737 for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|fip|snat)-[0-9a-f-]*'); do
Mark McClainb05c8762013-07-06 23:29:39 -0400738 sudo ip netns delete ${ns}
739 done
Lucas Alvares Gomes1d468d42020-06-09 14:35:52 +0100740
741 if [[ $Q_AGENT == "ovn" ]]; then
742 cleanup_ovn
743 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400744}
745
Doug Wiegley93e682c2015-03-03 10:31:30 -0700746
Maru Newby952fd902015-01-30 22:27:12 +0000747function _create_neutron_conf_dir {
Mark McClainb05c8762013-07-06 23:29:39 -0400748 # Put config files in ``NEUTRON_CONF_DIR`` for everyone to find
Dean Troyer8421c2b2015-03-16 13:52:19 -0500749 sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR
Maru Newby952fd902015-01-30 22:27:12 +0000750}
751
752# _configure_neutron_common()
753# Set common config for all neutron server and agents.
754# This MUST be called before other ``_configure_neutron_*`` functions.
755function _configure_neutron_common {
756 _create_neutron_conf_dir
Mark McClainb05c8762013-07-06 23:29:39 -0400757
Martin Hickey30d5fae2015-11-10 13:44:15 +0000758 # Uses oslo config generator to generate core sample configuration files
759 (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh)
760
761 cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF
Mark McClainb05c8762013-07-06 23:29:39 -0400762
Jerry Zhao296c1e32015-08-07 20:43:54 -0400763 Q_POLICY_FILE=$NEUTRON_CONF_DIR/policy.json
Jerry Zhao296c1e32015-08-07 20:43:54 -0400764
765 # allow neutron user to administer neutron to match neutron account
Akihiro Motoki80769c52018-11-23 05:18:40 +0900766 # NOTE(amotoki): This is required for nova works correctly with neutron.
767 if [ -f $NEUTRON_DIR/etc/policy.json ]; then
768 cp $NEUTRON_DIR/etc/policy.json $Q_POLICY_FILE
769 sed -i 's/"context_is_admin": "role:admin"/"context_is_admin": "role:admin or user_name:neutron"/g' $Q_POLICY_FILE
770 else
771 echo '{"context_is_admin": "role:admin or user_name:neutron"}' > $Q_POLICY_FILE
772 fi
Jerry Zhao296c1e32015-08-07 20:43:54 -0400773
Mark McClainb05c8762013-07-06 23:29:39 -0400774 # Set plugin-specific variables ``Q_DB_NAME``, ``Q_PLUGIN_CLASS``.
775 # For main plugin config file, set ``Q_PLUGIN_CONF_PATH``, ``Q_PLUGIN_CONF_FILENAME``.
Mark McClainb05c8762013-07-06 23:29:39 -0400776 neutron_plugin_configure_common
777
sbauzae2c4ee22013-08-29 17:29:46 +0200778 if [[ "$Q_PLUGIN_CONF_PATH" == '' || "$Q_PLUGIN_CONF_FILENAME" == '' || "$Q_PLUGIN_CLASS" == '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400779 die $LINENO "Neutron plugin not set.. exiting"
780 fi
781
782 # If needed, move config file from ``$NEUTRON_DIR/etc/neutron`` to ``NEUTRON_CONF_DIR``
783 mkdir -p /$Q_PLUGIN_CONF_PATH
784 Q_PLUGIN_CONF_FILE=$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME
Hirofumi Ichihara97cc85b2015-09-08 13:51:01 +0900785 # NOTE(hichihara): Some neutron vendor plugins were already decomposed and
786 # there is no config file in Neutron tree. They should prepare the file in each plugin.
Martin Hickey30d5fae2015-11-10 13:44:15 +0000787 if [ -f "$NEUTRON_DIR/$Q_PLUGIN_CONF_FILE.sample" ]; then
788 cp "$NEUTRON_DIR/$Q_PLUGIN_CONF_FILE.sample" /$Q_PLUGIN_CONF_FILE
789 elif [ -f $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE ]; then
Hirofumi Ichihara97cc85b2015-09-08 13:51:01 +0900790 cp $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE /$Q_PLUGIN_CONF_FILE
791 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400792
Ihar Hrachyshkab816e5d2014-07-21 13:53:50 +0200793 iniset $NEUTRON_CONF database connection `database_connection_url $Q_DB_NAME`
Mark McClainb05c8762013-07-06 23:29:39 -0400794 iniset $NEUTRON_CONF DEFAULT state_path $DATA_DIR/neutron
salvatoree4e535b2014-10-29 18:22:46 +0100795 iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG
Brian Haley180f5eb2015-06-16 13:14:31 -0400796 iniset $NEUTRON_CONF DEFAULT bind_host $Q_LISTEN_ADDRESS
Martin Hickey30d5fae2015-11-10 13:44:15 +0000797 iniset $NEUTRON_CONF oslo_concurrency lock_path $DATA_DIR/neutron/lock
798
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300799 # NOTE(freerunner): Need to adjust Region Name for nova in multiregion installation
800 iniset $NEUTRON_CONF nova region_name $REGION_NAME
801
Joe Gordonbee5c502013-08-30 13:48:08 -0400802 if [ "$VIRT_DRIVER" = 'fake' ]; then
803 # Disable arbitrary limits
804 iniset $NEUTRON_CONF quotas quota_network -1
805 iniset $NEUTRON_CONF quotas quota_subnet -1
806 iniset $NEUTRON_CONF quotas quota_port -1
807 iniset $NEUTRON_CONF quotas quota_security_group -1
808 iniset $NEUTRON_CONF quotas quota_security_group_rule -1
809 fi
810
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700811 # Format logging
Sean Dague9751be62016-04-05 12:08:57 -0400812 setup_logging $NEUTRON_CONF
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700813
Kevin Benton66b361b2017-06-13 00:31:01 -0700814 if is_service_enabled tls-proxy && [ "$NEUTRON_DEPLOY_MOD_WSGI" == "False" ]; then
Rob Crittenden18d47782014-03-19 17:47:42 -0400815 # Set the service port for a proxy to take the original
816 iniset $NEUTRON_CONF DEFAULT bind_port "$Q_PORT_INT"
Jens Harbott411c34d2017-08-29 14:40:26 +0000817 iniset $NEUTRON_CONF oslo_middleware enable_proxy_headers_parsing True
Rob Crittenden18d47782014-03-19 17:47:42 -0400818 fi
819
Mark McClainb05c8762013-07-06 23:29:39 -0400820 _neutron_setup_rootwrap
821}
822
Ian Wienandaee18c72014-02-21 15:35:08 +1100823function _configure_neutron_dhcp_agent {
Mark McClainb05c8762013-07-06 23:29:39 -0400824
Martin Hickey30d5fae2015-11-10 13:44:15 +0000825 cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $Q_DHCP_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400826
Ben Nemec03997942013-08-10 09:56:16 -0500827 iniset $Q_DHCP_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Sean Dague78801c12016-08-04 14:10:07 -0400828 # make it so we have working DNS from guests
829 iniset $Q_DHCP_CONF_FILE DEFAULT dnsmasq_local_resolv True
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -0700830 iniset $Q_DHCP_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400831 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -0700832 iniset $Q_DHCP_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400833 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400834
Tan Lin27a196e2014-10-31 15:44:34 +0800835 if ! is_service_enabled q-l3; then
836 if [[ "$ENABLE_ISOLATED_METADATA" = "True" ]]; then
837 iniset $Q_DHCP_CONF_FILE DEFAULT enable_isolated_metadata $ENABLE_ISOLATED_METADATA
838 iniset $Q_DHCP_CONF_FILE DEFAULT enable_metadata_network $ENABLE_METADATA_NETWORK
839 else
840 if [[ "$ENABLE_METADATA_NETWORK" = "True" ]]; then
841 die "$LINENO" "Enable isolated metadata is a must for metadata network"
842 fi
843 fi
844 fi
845
Mark McClainb05c8762013-07-06 23:29:39 -0400846 _neutron_setup_interface_driver $Q_DHCP_CONF_FILE
847
xurong000379977ef31d02016-07-05 11:09:40 +0800848 neutron_plugin_configure_dhcp_agent $Q_DHCP_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400849}
850
Mark McClainb05c8762013-07-06 23:29:39 -0400851
Ian Wienandaee18c72014-02-21 15:35:08 +1100852function _configure_neutron_metadata_agent {
Martin Hickey30d5fae2015-11-10 13:44:15 +0000853 cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $Q_META_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400854
Ben Nemec03997942013-08-10 09:56:16 -0500855 iniset $Q_META_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Brian Haleyefc51682017-11-10 00:50:48 -0500856 iniset $Q_META_CONF_FILE DEFAULT nova_metadata_host $Q_META_DATA_IP
Armando Migliaccio06f2ea22017-02-02 16:47:00 -0800857 iniset $Q_META_CONF_FILE DEFAULT metadata_workers $API_WORKERS
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -0700858 iniset $Q_META_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400859 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -0700860 iniset $Q_META_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400861 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400862}
863
Dina Belova58adaa62014-07-11 18:18:12 +0400864function _configure_neutron_ceilometer_notifications {
Matt Riedemann45da7772017-03-05 13:07:39 -0500865 iniset $NEUTRON_CONF oslo_messaging_notifications driver messagingv2
Dina Belova58adaa62014-07-11 18:18:12 +0400866}
867
Ian Wienandaee18c72014-02-21 15:35:08 +1100868function _configure_neutron_metering {
Emilien Macchi40546f72013-09-24 15:10:25 +0200869 neutron_agent_metering_configure_common
870 neutron_agent_metering_configure_agent
871}
872
Brian Haleyeea76212014-06-27 11:45:50 -0400873function _configure_dvr {
874 iniset $NEUTRON_CONF DEFAULT router_distributed True
875 iniset $Q_L3_CONF_FILE DEFAULT agent_mode $Q_DVR_MODE
876}
877
878
Mark McClainb05c8762013-07-06 23:29:39 -0400879# _configure_neutron_plugin_agent() - Set config files for neutron plugin agent
880# It is called when q-agt is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +1100881function _configure_neutron_plugin_agent {
Mark McClainb05c8762013-07-06 23:29:39 -0400882 # Specify the default root helper prior to agent configuration to
883 # ensure that an agent's configuration can override the default
884 iniset /$Q_PLUGIN_CONF_FILE agent root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400885 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
886 iniset /$Q_PLUGIN_CONF_FILE agent root_helper_daemon "$Q_RR_DAEMON_COMMAND"
887 fi
Ben Nemec03997942013-08-10 09:56:16 -0500888 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -0400889
890 # Configure agent for plugin
891 neutron_plugin_configure_plugin_agent
892}
893
894# _configure_neutron_service() - Set config files for neutron service
895# It is called when q-svc is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +1100896function _configure_neutron_service {
Mark McClainb05c8762013-07-06 23:29:39 -0400897 Q_API_PASTE_FILE=$NEUTRON_CONF_DIR/api-paste.ini
Mark McClainb05c8762013-07-06 23:29:39 -0400898 cp $NEUTRON_DIR/etc/api-paste.ini $Q_API_PASTE_FILE
Kevin Benton08a5fcc2014-07-18 16:06:12 -0700899
Mark McClainb05c8762013-07-06 23:29:39 -0400900 # Update either configuration file with plugin
901 iniset $NEUTRON_CONF DEFAULT core_plugin $Q_PLUGIN_CLASS
902
Ben Nemec03997942013-08-10 09:56:16 -0500903 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Chris Dent74a85b02015-04-22 18:02:39 +0000904 iniset $NEUTRON_CONF oslo_policy policy_file $Q_POLICY_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400905 iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips $Q_ALLOW_OVERLAPPING_IP
906
907 iniset $NEUTRON_CONF DEFAULT auth_strategy $Q_AUTH_STRATEGY
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100908 configure_keystone_authtoken_middleware $NEUTRON_CONF $Q_ADMIN_USERNAME
Mark McClainb05c8762013-07-06 23:29:39 -0400909
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +0900910 # Configuration for neutron notifications to nova.
Terry Wilsonf06c4432014-05-20 10:54:51 -0500911 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES
912 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES
Jamie Lennoxdc757dd2015-03-09 14:48:09 +1100913
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100914 configure_keystone_authtoken_middleware $NEUTRON_CONF nova nova
Aaron Rosencea32b12014-03-04 16:20:14 -0800915
Mark McClainb05c8762013-07-06 23:29:39 -0400916 # Configure plugin
917 neutron_plugin_configure_service
918}
919
920# Utility Functions
921#------------------
922
Isaku Yamahata9e136b42013-12-16 15:52:03 +0900923# _neutron_service_plugin_class_add() - add service plugin class
Ian Wienandaee18c72014-02-21 15:35:08 +1100924function _neutron_service_plugin_class_add {
Isaku Yamahata9e136b42013-12-16 15:52:03 +0900925 local service_plugin_class=$1
926 if [[ $Q_SERVICE_PLUGIN_CLASSES == '' ]]; then
927 Q_SERVICE_PLUGIN_CLASSES=$service_plugin_class
928 elif [[ ! ,${Q_SERVICE_PLUGIN_CLASSES}, =~ ,${service_plugin_class}, ]]; then
929 Q_SERVICE_PLUGIN_CLASSES="$Q_SERVICE_PLUGIN_CLASSES,$service_plugin_class"
930 fi
931}
932
Ihar Hrachyshkaf511c362017-03-07 06:31:49 +0000933# _neutron_ml2_extension_driver_add_old() - add ML2 extension driver
934function _neutron_ml2_extension_driver_add_old {
935 local extension=$1
936 if [[ $Q_ML2_PLUGIN_EXT_DRIVERS == '' ]]; then
937 Q_ML2_PLUGIN_EXT_DRIVERS=$extension
938 elif [[ ! ,${Q_ML2_PLUGIN_EXT_DRIVERS}, =~ ,${extension}, ]]; then
939 Q_ML2_PLUGIN_EXT_DRIVERS="$Q_ML2_PLUGIN_EXT_DRIVERS,$extension"
940 fi
941}
942
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900943# mutnauq_server_config_add() - add server config file
944function mutnauq_server_config_add {
945 _Q_PLUGIN_EXTRA_CONF_FILES_ABS+=($1)
946}
947
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +0100948# _neutron_deploy_rootwrap_filters() - deploy rootwrap filters to $Q_CONF_ROOTWRAP_D (owned by root).
949function _neutron_deploy_rootwrap_filters {
gong yong sheng3d6eaae2015-09-15 15:00:29 +0800950 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
951 return
952 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +0100953 local srcdir=$1
Dean Troyer8421c2b2015-03-16 13:52:19 -0500954 sudo install -d -o root -m 755 $Q_CONF_ROOTWRAP_D
955 sudo install -o root -m 644 $srcdir/etc/neutron/rootwrap.d/* $Q_CONF_ROOTWRAP_D/
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +0100956}
957
Mark McClainb05c8762013-07-06 23:29:39 -0400958# _neutron_setup_rootwrap() - configure Neutron's rootwrap
Ian Wienandaee18c72014-02-21 15:35:08 +1100959function _neutron_setup_rootwrap {
Mark McClainb05c8762013-07-06 23:29:39 -0400960 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
961 return
962 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400963 # Wipe any existing ``rootwrap.d`` files first
964 Q_CONF_ROOTWRAP_D=$NEUTRON_CONF_DIR/rootwrap.d
965 if [[ -d $Q_CONF_ROOTWRAP_D ]]; then
966 sudo rm -rf $Q_CONF_ROOTWRAP_D
967 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +0100968
969 _neutron_deploy_rootwrap_filters $NEUTRON_DIR
970
Mark McClainb05c8762013-07-06 23:29:39 -0400971 # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d``
972 # location moved in newer versions, prefer new location
973 if test -r $NEUTRON_DIR/etc/neutron/rootwrap.conf; then
Dean Troyer8421c2b2015-03-16 13:52:19 -0500974 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400975 else
Dean Troyer8421c2b2015-03-16 13:52:19 -0500976 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400977 fi
978 sudo sed -e "s:^filters_path=.*$:filters_path=$Q_CONF_ROOTWRAP_D:" -i $Q_RR_CONF_FILE
Robert Li2c5d4622015-04-21 15:48:22 -0400979 sudo sed -e 's:^exec_dirs=\(.*\)$:exec_dirs=\1,/usr/local/bin:' -i $Q_RR_CONF_FILE
980
Mark McClainb05c8762013-07-06 23:29:39 -0400981 # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap
982 ROOTWRAP_SUDOER_CMD="$NEUTRON_ROOTWRAP $Q_RR_CONF_FILE *"
Yuriy Taraday26623952014-07-16 17:41:53 +0400983 ROOTWRAP_DAEMON_SUDOER_CMD="$NEUTRON_ROOTWRAP-daemon $Q_RR_CONF_FILE"
Mark McClainb05c8762013-07-06 23:29:39 -0400984
985 # Set up the rootwrap sudoers for neutron
986 TEMPFILE=`mktemp`
Stephan Renatuse578eff2013-11-19 13:31:04 +0100987 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_SUDOER_CMD" >$TEMPFILE
Yuriy Taraday26623952014-07-16 17:41:53 +0400988 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_DAEMON_SUDOER_CMD" >>$TEMPFILE
Mark McClainb05c8762013-07-06 23:29:39 -0400989 chmod 0440 $TEMPFILE
990 sudo chown root:root $TEMPFILE
991 sudo mv $TEMPFILE /etc/sudoers.d/neutron-rootwrap
992
993 # Update the root_helper
994 iniset $NEUTRON_CONF agent root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400995 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
996 iniset $NEUTRON_CONF agent root_helper_daemon "$Q_RR_DAEMON_COMMAND"
997 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400998}
999
Ian Wienandaee18c72014-02-21 15:35:08 +11001000function _neutron_setup_interface_driver {
Mark McClainb05c8762013-07-06 23:29:39 -04001001
1002 # ovs_use_veth needs to be set before the plugin configuration
1003 # occurs to allow plugins to override the setting.
1004 iniset $1 DEFAULT ovs_use_veth $Q_OVS_USE_VETH
1005
1006 neutron_plugin_setup_interface_driver $1
1007}
Mark McClainb05c8762013-07-06 23:29:39 -04001008# Functions for Neutron Exercises
1009#--------------------------------
1010
Ian Wienandaee18c72014-02-21 15:35:08 +11001011function delete_probe {
Mark McClainb05c8762013-07-06 23:29:39 -04001012 local from_net="$1"
1013 net_id=`_get_net_id $from_net`
1014 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}'`
1015 neutron-debug --os-tenant-name admin --os-username admin probe-delete $probe_id
1016}
1017
Ian Wienandaee18c72014-02-21 15:35:08 +11001018function _get_net_id {
Brian Haley4bc42c72017-11-07 15:22:00 -05001019 openstack --os-cloud devstack-admin --os-region-name="$REGION_NAME" --os-project-name admin --os-username admin --os-password $ADMIN_PASSWORD network list | grep $1 | awk '{print $2}'
Mark McClainb05c8762013-07-06 23:29:39 -04001020}
1021
Ian Wienandaee18c72014-02-21 15:35:08 +11001022function _get_probe_cmd_prefix {
Mark McClainb05c8762013-07-06 23:29:39 -04001023 local from_net="$1"
1024 net_id=`_get_net_id $from_net`
1025 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}' | head -n 1`
1026 echo "$Q_RR_COMMAND ip netns exec qprobe-$probe_id"
1027}
1028
Mark McClainb05c8762013-07-06 23:29:39 -04001029# ssh check
Ian Wienandaee18c72014-02-21 15:35:08 +11001030function _ssh_check_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -04001031 local from_net=$1
1032 local key_file=$2
1033 local ip=$3
1034 local user=$4
1035 local timeout_sec=$5
1036 local probe_cmd = ""
1037 probe_cmd=`_get_probe_cmd_prefix $from_net`
Sean Dague442e4e92015-06-24 13:24:02 -04001038 local testcmd="$probe_cmd ssh -o StrictHostKeyChecking=no -i $key_file ${user}@$ip echo success"
1039 test_with_retry "$testcmd" "server $ip didn't become ssh-able" $timeout_sec
Mark McClainb05c8762013-07-06 23:29:39 -04001040}
1041
Slawek Kaplonskifaed11d2021-11-18 10:36:57 +01001042function plugin_agent_add_l2_agent_extension {
1043 local l2_agent_extension=$1
1044 if [[ -z "$L2_AGENT_EXTENSIONS" ]]; then
1045 L2_AGENT_EXTENSIONS=$l2_agent_extension
1046 elif [[ ! ,${L2_AGENT_EXTENSIONS}, =~ ,${l2_agent_extension}, ]]; then
1047 L2_AGENT_EXTENSIONS+=",$l2_agent_extension"
1048 fi
1049}
1050
Mark McClainb05c8762013-07-06 23:29:39 -04001051# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +11001052$_XTRACE_NEUTRON
Mark McClainb05c8762013-07-06 23:29:39 -04001053
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01001054# Tell emacs to use shell-script-mode
1055## Local variables:
1056## mode: shell-script
1057## End: