build/instack.sh

   1 #!/bin/sh
   2 set -e
   3 declare -i CNT
   4
   5 RDO_RELEASE=kilo
   6
   7 # RDO Manager expects a stack user to exist, this checks for one
   8 # and creates it if you are root
   9 if ! id stack > /dev/null; then
  10     sudo useradd stack;
  11     sudo echo 'stack ALL=(root) NOPASSWD:ALL' | sudo tee -a /etc/sudoers.d/stack
  12     sudo echo 'Defaults:stack !requiretty' | sudo tee -a /etc/sudoers.d/stack
  13     sudo chmod 0440 /etc/sudoers.d/stack
  14     echo 'Added user stack'
  15 fi
  16
  17 # ensure that I can ssh as the stack user
  18 if ! sudo grep "$(cat ~/.ssh/id_rsa.pub)" /home/stack/.ssh/authorized_keys; then
  19     if ! sudo ls -d /home/stack/.ssh/ ; then
  20         sudo mkdir /home/stack/.ssh
  21         sudo chown stack:stack /home/stack/.ssh
  22         sudo chmod 700 /home/stack/.ssh
  23     fi
  24     USER=$(whoami) sudo sh -c "cat ~$USER/.ssh/id_rsa.pub >> /home/stack/.ssh/authorized_keys"
  25     sudo chown stack:stack /home/stack/.ssh/authorized_keys
  26 fi
  27
  28 # clean up stack user previously build instack disk images
  29 ssh -T -o "StrictHostKeyChecking no" stack@localhost "rm -f instack*.qcow2"
  30
  31 # Yum repo setup for building the undercloud
  32 if ! rpm -q epel-release > /dev/null; then
  33     sudo yum install http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
  34 fi
  35
  36 if ! rpm -q rdo-release > /dev/null; then
  37     sudo yum install -y https://rdoproject.org/repos/openstack-${RDO_RELEASE}/rdo-release-${RDO_RELEASE}.rpm
  38 fi
  39
  40 if ! rpm -q rdo-release > /dev/null && [ "$1" != "-master" ]; then
  41     sudo yum install -y https://rdoproject.org/repos/openstack-${RDO_RELEASE}/rdo-release-${RDO_RELEASE}.rpm
  42     sudo rm -rf /etc/yum.repos.d/delorean.repo
  43     sudo rm -rf /etc/yum.repos.d/delorean-current.repo
  44     sudo rm -rf /etc/yum.repos.d/delorean-deps.repo
  45 elif [ "$1" == "-master" ]; then
  46     sudo yum -y install yum-plugin-priorities
  47     sudo yum-config-manager --disable openstack-${RDO_RELEASE}
  48     sudo curl -o /etc/yum.repos.d/delorean.repo http://trunk.rdoproject.org/centos7/current-tripleo/delorean.repo
  49     sudo curl -o /etc/yum.repos.d/delorean-current.repo http://trunk.rdoproject.org/centos7-liberty/current/delorean.repo
  50     sudo sed -i 's/\[delorean\]/\[delorean-current\]/' /etc/yum.repos.d/delorean-current.repo
  51     sudo curl -o /etc/yum.repos.d/delorean-deps.repo http://trunk.rdoproject.org/centos7-liberty/delorean-deps.repo
  52 fi
  53
  54 # ensure the undercloud package is installed so we can build the undercloud
  55 if ! rpm -q instack-undercloud > /dev/null; then
  56     sudo yum install -y instack-undercloud
  57 fi
  58
  59 # ensure openvswitch is installed
  60 if ! rpm -q openvswitch > /dev/null; then
  61     sudo yum install -y openvswitch
  62 fi
  63
  64 # ensure libvirt is installed
  65 if ! rpm -q libvirt-daemon-kvm > /dev/null; then
  66     sudo yum install -y libvirt-daemon-kvm
  67 fi
  68
  69 # ensure that no previous undercloud VMs are running
  70 # and rebuild the bare undercloud VMs
  71 ssh -T -o "StrictHostKeyChecking no" stack@localhost <<EOI
  72 virsh destroy instack 2> /dev/null || echo -n ''
  73 virsh undefine instack 2> /dev/null || echo -n ''
  74 virsh destroy baremetal_0 2> /dev/null || echo -n ''
  75 virsh undefine baremetal_0 2> /dev/null || echo -n ''
  76 virsh destroy baremetal_1 2> /dev/null || echo -n ''
  77 virsh undefine baremetal_1 2> /dev/null || echo -n ''
  78 instack-virt-setup
  79 EOI
  80
  81 # attach undercloud to the underlay network for
  82 # baremetal installations
  83 #if ! ovs-vsctl show | grep brbm; then
  84 #    ovs-vsctl add-port brbm em2
  85 #fi
  86
  87 # let dhcp happen so we can get the ip
  88 # just wait instead of checking until we see an address
  89 # because there may be a previous lease that needs
  90 # to be cleaned up
  91 sleep 5
  92
  93 # get the undercloud ip address
  94 UNDERCLOUD=$(grep instack /var/lib/libvirt/dnsmasq/default.leases | awk '{print $3}' | head -n 1)
  95
  96 # ensure that we can ssh to the undercloud
  97 CNT=10
  98 while ! ssh -T -o "StrictHostKeyChecking no" "root@$UNDERCLOUD" "echo ''" > /dev/null && [ $CNT -gt 0 ]; do
  99     echo -n "."
 100     sleep 3
 101     CNT=CNT-1
 102 done
 103 # TODO fail if CNT=0
 104
 105 # yum repo, triple-o package and ssh key setup for the undercloud
 106 ssh -T -o "StrictHostKeyChecking no" "root@$UNDERCLOUD" <<EOI
 107 if ! rpm -q epel-release > /dev/null; then
 108     yum install http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
 109 fi
 110
 111 curl -o /etc/yum.repos.d/delorean.repo http://trunk.rdoproject.org/centos7/current-tripleo/delorean.repo
 112 curl -o /etc/yum.repos.d/delorean-current.repo http://trunk.rdoproject.org/centos7-liberty/current/delorean.repo
 113 sed -i 's/\\[delorean\\]/\\[delorean-current\\]/' /etc/yum.repos.d/delorean-current.repo
 114 echo "\\nincludepkgs=diskimage-builder,openstack-heat,instack,instack-undercloud,openstack-ironic,openstack-ironic-inspector,os-cloud-config,python-ironic-inspector-client,python-tripleoclient,tripleo-common,openstack-tripleo-heat-templates,openstack-tripleo-image-elements,openstack-tripleo-puppet-elements,openstack-tuskar-ui-extras,openstack-puppet-modules" >> /etc/yum.repos.d/delorean-current.repo
 115 curl -o /etc/yum.repos.d/delorean-deps.repo http://trunk.rdoproject.org/centos7-liberty/delorean-deps.repo
 116 yum install -y python-tripleoclient
 117 cp /root/.ssh/authorized_keys /home/stack/.ssh/authorized_keys
 118 chown stack:stack /home/stack/.ssh/authorized_keys
 119 EOI
 120
 121 # install undercloud on Undercloud VM
 122 ssh -o "StrictHostKeyChecking no" "stack@$UNDERCLOUD" "openstack undercloud install"
 123
 124 # make a copy of instack VM's definitions, and disk image
 125 # it must be stopped to make a copy of its disk image
 126 ssh -T -o "StrictHostKeyChecking no" stack@localhost <<EOI
 127 echo "Shuttind down instack to take snapshot"
 128 virsh shutdown instack
 129
 130 echo "Waiting for instack VM to shutdown"
 131 CNT=20
 132 while virsh list | grep instack > /dev/null && [ $CNT -gt 0 ]; do
 133     echo -n "."
 134     sleep 5
 135     CNT=CNT-1
 136 done
 137 if virsh list | grep instack > /dev/null; then
 138     echo "instack failed to shutdown for copy"
 139     exit 1
 140 fi
 141
 142 echo "\nCopying instack disk image and starting instack VM."
 143 virsh dumpxml baremetal_0 > baremetal_0.xml
 144 virsh dumpxml baremetal_1 > baremetal_1.xml
 145 cp -f /var/lib/libvirt/images/instack.qcow2 .
 146 virsh dumpxml instack > instack.xml
 147 #virsh vol-dumpxml instack.qcow2 --pool default > instack.qcow2.xml
 148 virsh net-dumpxml brbm > brbm.xml
 149 virsh start instack
 150 EOI
 151
 152 # copy off the instack artifacts
 153 echo "Copying instack files to build directory"
 154 scp -o "StrictHostKeyChecking no" stack@localhost:baremetal_0.xml .
 155 scp -o "StrictHostKeyChecking no" stack@localhost:baremetal_1.xml .
 156 scp -o "StrictHostKeyChecking no" stack@localhost:instack.xml .
 157 scp -o "StrictHostKeyChecking no" stack@localhost:brbm.xml .
 158 scp -o "StrictHostKeyChecking no" stack@localhost:instack.qcow2 .
 159
 160
 161 # start the instack VM back up to continue installation
 162 echo "Waiting for instack VM to start"
 163 CNT=10
 164 while ! ping -c 1 "$UNDERCLOUD" > /dev/null  && [ $CNT -gt 0 ]; do
 165     echo -n "."
 166     sleep 5
 167     CNT=CNT-1
 168 done
 169 CNT=10
 170 while ! ssh -T -o "StrictHostKeyChecking no" "root@$UNDERCLOUD" "echo ''" > /dev/null && [ $CNT -gt 0 ]; do
 171     echo -n "."
 172     sleep 3
 173     CNT=CNT-1
 174 done
 175
 176 # inject the already downloaded cloud image so it's not downloaded again
 177 echo "Copying CentOS Cache to instack VM"
 178 ssh -o "StrictHostKeyChecking no" "stack@$UNDERCLOUD" "mkdir .cache"
 179 ssh -T -o "StrictHostKeyChecking no" stack@localhost "scp -r -o 'StrictHostKeyChecking no' /home/stack/.cache/image-create/CentOS-7-x86_64-GenericCloud* \"stack@$UNDERCLOUD\":.cache/"
 180
 181 # build the overcloud images
 182 echo "Building overcloud images"
 183 ssh -T -o "StrictHostKeyChecking no" "stack@$UNDERCLOUD" <<EOI
 184 export DIB_YUM_REPO_CONF="/etc/yum.repos.d/delorean.repo /etc/yum.repos.d/delorean-current.repo /etc/yum.repos.d/delorean-deps.repo"
 185 openstack overcloud image build --all
 186 EOI
 187
 188 # copy off the built images
 189 echo "Copying overcloud images"
 190 if [ ! -d stack ]; then mkdir stack; fi
 191 IMAGES="deploy-ramdisk-ironic.initramfs deploy-ramdisk-ironic.kernel"
 192 #IMAGES+=" ironic-python-agent.initramfs ironic-python-agent.kernel ironic-python-agent.vmlinuz"
 193 IMAGES+=" overcloud-full.initrd overcloud-full.qcow2  overcloud-full.vmlinuz"
 194 IMAGES+=" fedora-user.qcow2 instackenv.json"
 195
 196 for i in $IMAGES; do
 197 scp -o "StrictHostKeyChecking no" stack@$UNDERCLOUD:$i stack/
 198 done
 199
 200 # move and Sanitize private keys from instack.json file
 201 mv stack/instackenv.json instackenv-virt.json
 202 sed -i '/pm_password/c\      "pm_password": "INSERT_STACK_USER_PRIV_KEY",' instackenv-virt.json
 203 sed -i '/ssh-key/c\      "ssh-key": "INSERT_STACK_USER_PRIV_KEY",' instackenv-virt.json
 204
 205 # clean up the VMs
 206 ssh -T -o "StrictHostKeyChecking no" stack@localhost <<EOI
 207 virsh destroy instack 2> /dev/null || echo -n ''
 208 virsh undefine instack 2> /dev/null || echo -n ''
 209 virsh destroy baremetal_0 2> /dev/null || echo -n ''
 210 virsh undefine baremetal_0 2> /dev/null || echo -n ''
 211 virsh destroy baremetal_1 2> /dev/null || echo -n ''
 212 virsh undefine baremetal_1 2> /dev/null || echo -n ''
 213 EOI
 214