#!/usr/bin/env bash # # Bootstrap script to configure all nodes. # # This script is intended to be used by vagrant to provision nodes. # To use it, set it as 'PROVISION_SCRIPT' inside your Vagrantfile.custom. # You can use Vagrantfile.custom.example as a template for this. VM=$1 MODE=$2 KOLLA_PATH=$3 export http_proxy= export https_proxy= if [ "$MODE" = 'aio' ]; then # Run registry on port 4000 since it may collide with keystone when doing AIO REGISTRY_PORT=4000 SUPPORT_NODE=operator else REGISTRY_PORT=5000 SUPPORT_NODE=support01 fi REGISTRY_URL="operator.local" REGISTRY=${REGISTRY_URL}:${REGISTRY_PORT} ADMIN_PROTOCOL="http" function _ensure_lsb_release { if [[ -x $(which lsb_release 2>/dev/null) ]]; then return fi if [[ -x $(which apt-get 2>/dev/null) ]]; then apt-get install -y lsb-release elif [[ -x $(which yum 2>/dev/null) ]]; then yum -y install redhat-lsb-core fi } function _is_distro { if [[ -z "$DISTRO" ]]; then _ensure_lsb_release DISTRO=$(lsb_release -si) fi [[ "$DISTRO" == "$1" ]] } function is_ubuntu { _is_distro "Ubuntu" } function is_centos { _is_distro "CentOS" } # Install common packages and do some prepwork. function prep_work { if [[ "$(systemctl is-enabled firewalld)" = "enabled" ]]; then systemctl stop firewalld systemctl disable firewalld fi # This removes the fqdn from /etc/hosts's 127.0.0.1. This name.local will # resolve to the public IP instead of localhost. sed -i -r "s/^(127\.0\.0\.1\s+)(.*) `hostname` (.+)/\1 \3/" /etc/hosts if is_centos; then yum -y install epel-release rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 yum -y install MySQL-python vim-enhanced python-pip python-devel gcc openssl-devel libffi-devel libxml2-devel libxslt-devel elif is_ubuntu; then apt-get update apt-get install -y python-mysqldb python-pip python-dev build-essential libssl-dev libffi-dev libxml2-dev libxslt-dev else echo "Unsupported Distro: $DISTRO" 1>&2 exit 1 fi pip install --upgrade docker-py } # Do some cleanup after the installation of kolla function cleanup { if is_centos; then yum clean all elif is_ubuntu; then apt-get clean else echo "Unsupported Distro: $DISTRO" 1>&2 exit 1 fi } # Install and configure a quick&dirty docker daemon. function install_docker { if is_centos; then cat >/etc/yum.repos.d/docker.repo <<-EOF [dockerrepo] name=Docker Repository baseurl=https://yum.dockerproject.org/repo/main/centos/7 enabled=1 gpgcheck=1 gpgkey=https://yum.dockerproject.org/gpg EOF # Also upgrade device-mapper here because of: # https://github.com/docker/docker/issues/12108 # Upgrade lvm2 to get device-mapper installed yum -y install docker-engine lvm2 device-mapper # Despite it shipping with /etc/sysconfig/docker, Docker is not configured to # load it from it's service file. sed -i -r "s|(ExecStart)=(.+)|\1=/usr/bin/docker daemon --insecure-registry ${REGISTRY} --registry-mirror=http://${REGISTRY}|" /usr/lib/systemd/system/docker.service sed -i 's|^MountFlags=.*|MountFlags=shared|' /usr/lib/systemd/system/docker.service usermod -aG docker vagrant elif is_ubuntu; then apt-key adv --keyserver hkp://pgp.mit.edu:80 --recv-keys 58118E89F3A912897C070ADBF76221572C52609D echo "deb https://apt.dockerproject.org/repo ubuntu-wily main" > /etc/apt/sources.list.d/docker.list apt-get update apt-get install -y docker-engine sed -i -r "s,(ExecStart)=(.+),\1=/usr/bin/docker daemon --insecure-registry ${REGISTRY} --registry-mirror=http://${REGISTRY}|" /lib/systemd/system/docker.service else echo "Unsupported Distro: $DISTRO" 1>&2 exit 1 fi if [[ "${http_proxy}" != "" ]]; then mkdir -p /etc/systemd/system/docker.service.d cat >/etc/systemd/system/docker.service.d/http-proxy.conf <<-EOF [Service] Environment="HTTP_PROXY=${http_proxy}" "HTTPS_PROXY=${https_proxy}" "NO_PROXY=localhost,127.0.0.1,${REGISTRY_URL}" EOF if [[ "$(grep http_ /etc/bashrc)" == "" ]]; then echo "export http_proxy=${http_proxy}" >> /etc/bashrc echo "export https_proxy=${https_proxy}" >> /etc/bashrc fi fi systemctl daemon-reload systemctl enable docker systemctl start docker } function configure_kolla { # Use local docker registry sed -i -r "s,^[# ]*namespace *=.+$,namespace = ${REGISTRY}/lokolla," /etc/kolla/kolla-build.conf sed -i -r "s,^[# ]*push *=.+$,push = True," /etc/kolla/kolla-build.conf sed -i -r "s,^[# ]*docker_registry:.+$,docker_registry: \"${REGISTRY}\"," /etc/kolla/globals.yml sed -i -r "s,^[# ]*docker_namespace:.+$,docker_namespace: \"lokolla\"," /etc/kolla/globals.yml sed -i -r "s,^[# ]*docker_insecure_registry:.+$,docker_insecure_registry: \"True\"," /etc/kolla/globals.yml # Set network interfaces sed -i -r "s,^[# ]*network_interface:.+$,network_interface: \"eth1\"," /etc/kolla/globals.yml sed -i -r "s,^[# ]*neutron_external_interface:.+$,neutron_external_interface: \"eth2\"," /etc/kolla/globals.yml } # Configure the operator node and install some additional packages. function configure_operator { if is_centos; then yum -y install git mariadb elif is_ubuntu; then apt-get install -y git mariadb-client selinux-utils else echo "Unsupported Distro: $DISTRO" 1>&2 exit 1 fi pip install --upgrade "ansible<2" python-openstackclient python-neutronclient tox pip install ${KOLLA_PATH} # Set selinux to permissive if [[ "$(getenforce)" == "Enforcing" ]]; then sed -i -r "s,^SELINUX=.+$,SELINUX=permissive," /etc/selinux/config setenforce permissive fi tox -c ${KOLLA_PATH}/tox.ini -e genconfig cp -r ${KOLLA_PATH}/etc/kolla/ /etc/kolla ${KOLLA_PATH}/tools/generate_passwords.py mkdir -p /usr/share/kolla chown -R vagrant: /etc/kolla /usr/share/kolla configure_kolla # Make sure Ansible uses scp. cat > ~vagrant/.ansible.cfg < /etc/kolla/config/nova/nova-compute.conf <