2 ##############################################################################
3 # Copyright (c) 2015 Tim Rozet (Red Hat), Dan Radez (Red Hat) and others.
5 # All rights reserved. This program and the accompanying materials
6 # are made available under the terms of the Apache License, Version 2.0
7 # which accompanies this distribution, and is available at
8 # http://www.apache.org/licenses/LICENSE-2.0
9 ##############################################################################
11 # Deploy script to install provisioning server for OPNFV Apex
12 # author: Dan Radez (dradez@redhat.com)
13 # author: Tim Rozet (trozet@redhat.com)
15 # Based on RDO Manager http://www.rdoproject.org
20 reset=$(tput sgr0 || echo "")
21 blue=$(tput setaf 4 || echo "")
22 red=$(tput setaf 1 || echo "")
23 green=$(tput setaf 2 || echo "")
27 ntp_server="pool.ntp.org"
28 net_isolation_enabled="TRUE"
34 declare -A deploy_options_array
35 declare -a performance_options
38 SSH_OPTIONS=(-o StrictHostKeyChecking=no -o GlobalKnownHostsFile=/dev/null -o UserKnownHostsFile=/dev/null -o LogLevel=error)
40 CONFIG=${CONFIG:-'/var/opt/opnfv'}
41 RESOURCES=${RESOURCES:-"$CONFIG/images"}
42 LIB=${LIB:-"$CONFIG/lib"}
43 OPNFV_NETWORK_TYPES="admin_network private_network public_network storage_network"
49 # Netmap used to map networks to OVS bridge names
50 NET_MAP['admin_network']="br-admin"
51 NET_MAP['private_network']="br-private"
52 NET_MAP['public_network']="br-public"
53 NET_MAP['storage_network']="br-storage"
54 ext_net_type="interface"
59 $LIB/common-functions.sh
60 $LIB/utility-functions.sh
61 $LIB/installer/onos/onos_gw_mac_update.sh
63 for lib_file in ${lib_files[@]}; do
64 if ! source $lib_file; then
65 echo -e "${red}ERROR: Failed to source $lib_file${reset}"
71 ##translates yaml into variables
72 ##params: filename, prefix (ex. "config_")
73 ##usage: parse_yaml opnfv_ksgen_settings.yml "config_"
76 local s='[[:space:]]*' w='[a-zA-Z0-9_]*' fs=$(echo @|tr @ '\034')
77 sed -ne "s|^\($s\)\($w\)$s:$s\"\(.*\)\"$s\$|\1$fs\2$fs\3|p" \
78 -e "s|^\($s\)\($w\)$s:$s\(.*\)$s\$|\1$fs\2$fs\3|p" $1 |
80 indent = length($1)/2;
82 for (i in vname) {if (i > indent) {delete vname[i]}}
84 vn=""; for (i=0; i<indent; i++) {vn=(vn)(vname[i])("_")}
85 printf("%s%s%s=%s\n", "'$prefix'",vn, $2, $3);
90 ##checks if prefix exists in string
91 ##params: string, prefix
92 ##usage: contains_prefix "deploy_setting_launcher=1" "deploy_setting"
96 if echo $mystr | grep -E "^$prefix.*$" > /dev/null; then
102 ##parses variable from a string with '='
103 ##and removes global prefix
104 ##params: string, prefix
105 ##usage: parse_setting_var 'deploy_myvar=2' 'deploy_'
106 parse_setting_var() {
109 if echo $mystr | grep -E "^.+\=" > /dev/null; then
110 echo $(echo $mystr | grep -Eo "^.+\=" | tr -d '=' | sed 's/^'"$prefix"'//')
115 ##parses value from a string with '='
117 ##usage: parse_setting_value
118 parse_setting_value() {
120 echo $(echo $mystr | grep -Eo "\=.*$" | tr -d '=')
123 ##parses network settings yaml into globals
124 parse_network_settings() {
126 if output=$(python3.4 -B $LIB/python/apex-python-utils.py parse-net-settings -s $NETSETS -i $net_isolation_enabled -e $CONFIG/network-environment.yaml); then
127 echo -e "${blue}${output}${reset}"
130 echo -e "${red}ERROR: Failed to parse network settings file $NETSETS ${reset}"
135 ##parses deploy settings yaml into globals
136 parse_deploy_settings() {
138 if output=$(python3.4 -B $LIB/python/apex-python-utils.py parse-deploy-settings -f $DEPLOY_SETTINGS_FILE); then
139 echo -e "${blue}${output}${reset}"
142 echo -e "${red}ERROR: Failed to parse deploy settings file $DEPLOY_SETTINGS_FILE ${reset}"
147 ##parses baremetal yaml settings into compatible json
148 ##writes the json to $CONFIG/instackenv_tmp.json
150 ##usage: parse_inventory_file
151 parse_inventory_file() {
152 local inventory=$(parse_yaml $INVENTORY_FILE)
154 local node_prefix="node"
159 # detect number of nodes
160 for entry in $inventory; do
161 if echo $entry | grep -Eo "^nodes_node[0-9]+_" > /dev/null; then
162 this_node=$(echo $entry | grep -Eo "^nodes_node[0-9]+_")
163 if [[ "$inventory_list" != *"$this_node"* ]]; then
164 inventory_list+="$this_node "
169 inventory_list=$(echo $inventory_list | sed 's/ $//')
171 for node in $inventory_list; do
175 node_total=$node_count
177 if [[ "$node_total" -lt 5 && "$ha_enabled" == "True" ]]; then
178 echo -e "${red}ERROR: You must provide at least 5 nodes for HA baremetal deployment${reset}"
180 elif [[ "$node_total" -lt 2 ]]; then
181 echo -e "${red}ERROR: You must provide at least 2 nodes for non-HA baremetal deployment${reset}"
185 eval $(parse_yaml $INVENTORY_FILE) || {
186 echo "${red}Failed to parse inventory.yaml. Aborting.${reset}"
196 for node in $inventory_list; do
200 \"pm_password\": \"$(eval echo \${${node}ipmi_pass})\",
201 \"pm_type\": \"$(eval echo \${${node}pm_type})\",
203 \"$(eval echo \${${node}mac_address})\"
205 \"cpu\": \"$(eval echo \${${node}cpus})\",
206 \"memory\": \"$(eval echo \${${node}memory})\",
207 \"disk\": \"$(eval echo \${${node}disk})\",
208 \"arch\": \"$(eval echo \${${node}arch})\",
209 \"pm_user\": \"$(eval echo \${${node}ipmi_user})\",
210 \"pm_addr\": \"$(eval echo \${${node}ipmi_ip})\",
211 \"capabilities\": \"$(eval echo \${${node}capabilities})\"
213 instackenv_output+=${node_output}
214 if [ $node_count -lt $node_total ]; then
215 instackenv_output+=" },"
217 instackenv_output+=" }"
225 #Copy instackenv.json to undercloud for baremetal
226 echo -e "{blue}Parsed instackenv JSON:\n${instackenv_output}${reset}"
227 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
228 cat > instackenv.json << EOF
234 ##verify internet connectivity
236 function verify_internet {
237 if ping -c 2 $ping_site > /dev/null; then
238 if ping -c 2 www.google.com > /dev/null; then
239 echo "${blue}Internet connectivity detected${reset}"
242 echo "${red}Internet connectivity detected, but DNS lookup failed${reset}"
246 echo "${red}No internet connectivity detected${reset}"
251 ##download dependencies if missing and configure host
253 function configure_deps {
254 if ! verify_internet; then
255 echo "${red}Will not download dependencies${reset}"
259 # verify ip forwarding
260 if sysctl net.ipv4.ip_forward | grep 0; then
261 sudo sysctl -w net.ipv4.ip_forward=1
262 sudo sh -c "echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf"
265 # ensure no dhcp server is running on jumphost
266 if ! sudo systemctl status dhcpd | grep dead; then
267 echo "${red}WARN: DHCP Server detected on jumphost, disabling...${reset}"
268 sudo systemctl stop dhcpd
269 sudo systemctl disable dhcpd
272 # ensure networks are configured
273 systemctl status libvirtd || systemctl start libvirtd
274 systemctl status openvswitch || systemctl start openvswitch
276 # If flat we only use admin network
277 if [[ "$net_isolation_enabled" == "FALSE" ]]; then
278 virsh_enabled_networks="admin_network"
279 enabled_network_list="admin_network"
280 # For baremetal we only need to create/attach Undercloud to admin and public
281 elif [ "$virtual" == "FALSE" ]; then
282 virsh_enabled_networks="admin_network public_network"
284 virsh_enabled_networks=$enabled_network_list
287 # ensure default network is configured correctly
288 libvirt_dir="/usr/share/libvirt/networks"
289 virsh net-list --all | grep default || virsh net-define ${libvirt_dir}/default.xml
290 virsh net-list --all | grep -E "default\s+active" > /dev/null || virsh net-start default
291 virsh net-list --all | grep -E "default\s+active\s+yes" > /dev/null || virsh net-autostart --network default
293 if [[ -z "$virtual" || "$virtual" == "FALSE" ]]; then
294 for network in ${OPNFV_NETWORK_TYPES}; do
295 echo "${blue}INFO: Creating Virsh Network: $network & OVS Bridge: ${NET_MAP[$network]}${reset}"
296 ovs-vsctl list-br | grep "^${NET_MAP[$network]}$" > /dev/null || ovs-vsctl add-br ${NET_MAP[$network]}
297 virsh net-list --all | grep $network > /dev/null || (cat > ${libvirt_dir}/apex-virsh-net.xml && virsh net-define ${libvirt_dir}/apex-virsh-net.xml) << EOF
299 <name>$network</name>
300 <forward mode='bridge'/>
301 <bridge name='${NET_MAP[$network]}'/>
302 <virtualport type='openvswitch'/>
305 if ! (virsh net-list --all | grep $network > /dev/null); then
306 echo "${red}ERROR: unable to create network: ${network}${reset}"
309 rm -f ${libvirt_dir}/apex-virsh-net.xml &> /dev/null;
310 virsh net-list | grep -E "$network\s+active" > /dev/null || virsh net-start $network
311 virsh net-list | grep -E "$network\s+active\s+yes" > /dev/null || virsh net-autostart --network $network
314 echo -e "${blue}INFO: Bridges set: ${reset}"
317 # bridge interfaces to correct OVS instances for baremetal deployment
318 for network in ${enabled_network_list}; do
319 if [[ "$network" != "admin_network" && "$network" != "public_network" ]]; then
322 this_interface=$(eval echo \${${network}_bridged_interface})
323 # check if this a bridged interface for this network
324 if [[ ! -z "$this_interface" || "$this_interface" != "none" ]]; then
325 if ! attach_interface_to_ovs ${NET_MAP[$network]} ${this_interface} ${network}; then
326 echo -e "${red}ERROR: Unable to bridge interface ${this_interface} to bridge ${NET_MAP[$network]} for enabled network: ${network}${reset}"
329 echo -e "${blue}INFO: Interface ${this_interface} bridged to bridge ${NET_MAP[$network]} for enabled network: ${network}${reset}"
332 echo "${red}ERROR: Unable to determine interface to bridge to for enabled network: ${network}${reset}"
337 for network in ${OPNFV_NETWORK_TYPES}; do
338 echo "${blue}INFO: Creating Virsh Network: $network${reset}"
339 virsh net-list --all | grep $network > /dev/null || (cat > ${libvirt_dir}/apex-virsh-net.xml && virsh net-define ${libvirt_dir}/apex-virsh-net.xml) << EOF
341 <name>$network</name>
342 <bridge name='${NET_MAP[$network]}'/>
345 if ! (virsh net-list --all | grep $network > /dev/null); then
346 echo "${red}ERROR: unable to create network: ${network}${reset}"
349 rm -f ${libvirt_dir}/apex-virsh-net.xml &> /dev/null;
350 virsh net-list | grep -E "$network\s+active" > /dev/null || virsh net-start $network
351 virsh net-list | grep -E "$network\s+active\s+yes" > /dev/null || virsh net-autostart --network $network
354 echo -e "${blue}INFO: Bridges set: ${reset}"
358 echo -e "${blue}INFO: virsh networks set: ${reset}"
361 # ensure storage pool exists and is started
362 virsh pool-list --all | grep default > /dev/null || virsh pool-define-as --name default dir --target /var/lib/libvirt/images
363 virsh pool-list | grep -Eo "default\s+active" > /dev/null || (virsh pool-autostart default; virsh pool-start default)
365 if ! egrep '^flags.*(vmx|svm)' /proc/cpuinfo > /dev/null; then
366 echo "${red}virtualization extensions not found, kvm kernel module insertion may fail.\n \
367 Are you sure you have enabled vmx in your bios or hypervisor?${reset}"
370 if ! lsmod | grep kvm > /dev/null; then modprobe kvm; fi
371 if ! lsmod | grep kvm_intel > /dev/null; then modprobe kvm_intel; fi
373 if ! lsmod | grep kvm > /dev/null; then
374 echo "${red}kvm kernel modules not loaded!${reset}"
379 if [ ! -e ~/.ssh/id_rsa.pub ]; then
380 ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
383 echo "${blue}All dependencies installed and running${reset}"
386 ##verify vm exists, an has a dhcp lease assigned to it
388 function setup_undercloud_vm {
389 if ! virsh list --all | grep undercloud > /dev/null; then
390 undercloud_nets="default admin_network"
391 if [[ $enabled_network_list =~ "public_network" ]]; then
392 undercloud_nets+=" public_network"
394 define_vm undercloud hd 30 "$undercloud_nets" 4 12288
396 ### this doesn't work for some reason I was getting hangup events so using cp instead
397 #virsh vol-upload --pool default --vol undercloud.qcow2 --file $CONFIG/stack/undercloud.qcow2
398 #2015-12-05 12:57:20.569+0000: 8755: info : libvirt version: 1.2.8, package: 16.el7_1.5 (CentOS BuildSystem <http://bugs.centos.org>, 2015-11-03-13:56:46, worker1.bsys.centos.org)
399 #2015-12-05 12:57:20.569+0000: 8755: warning : virKeepAliveTimerInternal:143 : No response from client 0x7ff1e231e630 after 6 keepalive messages in 35 seconds
400 #2015-12-05 12:57:20.569+0000: 8756: warning : virKeepAliveTimerInternal:143 : No response from client 0x7ff1e231e630 after 6 keepalive messages in 35 seconds
401 #error: cannot close volume undercloud.qcow2
402 #error: internal error: received hangup / error event on socket
403 #error: Reconnected to the hypervisor
405 local undercloud_dst=/var/lib/libvirt/images/undercloud.qcow2
406 cp -f $RESOURCES/undercloud.qcow2 $undercloud_dst
408 # resize Undercloud machine
409 echo "Checking if Undercloud needs to be resized..."
410 undercloud_size=$(LIBGUESTFS_BACKEND=direct virt-filesystems --long -h --all -a $undercloud_dst |grep device | grep -Eo "[0-9\.]+G" | sed -n 's/\([0-9][0-9]*\).*/\1/p')
411 if [ "$undercloud_size" -lt 30 ]; then
412 qemu-img resize /var/lib/libvirt/images/undercloud.qcow2 +25G
413 LIBGUESTFS_BACKEND=direct virt-resize --expand /dev/sda1 $RESOURCES/undercloud.qcow2 $undercloud_dst
414 LIBGUESTFS_BACKEND=direct virt-customize -a $undercloud_dst --run-command 'xfs_growfs -d /dev/sda1 || true'
415 new_size=$(LIBGUESTFS_BACKEND=direct virt-filesystems --long -h --all -a $undercloud_dst |grep filesystem | grep -Eo "[0-9\.]+G" | sed -n 's/\([0-9][0-9]*\).*/\1/p')
416 if [ "$new_size" -lt 30 ]; then
417 echo "Error resizing Undercloud machine, disk size is ${new_size}"
420 echo "Undercloud successfully resized"
423 echo "Skipped Undercloud resize, upstream is large enough"
427 echo "Found Undercloud VM, using existing VM"
430 # if the VM is not running update the authkeys and start it
431 if ! virsh list | grep undercloud > /dev/null; then
432 echo "Injecting ssh key to Undercloud VM"
433 LIBGUESTFS_BACKEND=direct virt-customize -a $undercloud_dst --run-command "mkdir -p /root/.ssh/" \
434 --upload ~/.ssh/id_rsa.pub:/root/.ssh/authorized_keys \
435 --run-command "chmod 600 /root/.ssh/authorized_keys && restorecon /root/.ssh/authorized_keys" \
436 --run-command "cp /root/.ssh/authorized_keys /home/stack/.ssh/" \
437 --run-command "chown stack:stack /home/stack/.ssh/authorized_keys && chmod 600 /home/stack/.ssh/authorized_keys"
438 virsh start undercloud
441 sleep 10 # let undercloud get started up
443 # get the undercloud VM IP
445 echo -n "${blue}Waiting for Undercloud's dhcp address${reset}"
446 undercloud_mac=$(virsh domiflist undercloud | grep default | awk '{ print $5 }')
447 while ! $(arp -e | grep ${undercloud_mac} > /dev/null) && [ $CNT -gt 0 ]; do
452 UNDERCLOUD=$(arp -e | grep ${undercloud_mac} | awk {'print $1'})
454 if [ -z "$UNDERCLOUD" ]; then
455 echo "\n\nCan't get IP for Undercloud. Can Not Continue."
458 echo -e "${blue}\rUndercloud VM has IP $UNDERCLOUD${reset}"
462 echo -en "${blue}\rValidating Undercloud VM connectivity${reset}"
463 while ! ping -c 1 $UNDERCLOUD > /dev/null && [ $CNT -gt 0 ]; do
468 if [ "$CNT" -eq 0 ]; then
469 echo "Failed to contact Undercloud. Can Not Continue"
473 while ! ssh -T ${SSH_OPTIONS[@]} "root@$UNDERCLOUD" "echo ''" 2>&1> /dev/null && [ $CNT -gt 0 ]; do
478 if [ "$CNT" -eq 0 ]; then
479 echo "Failed to connect to Undercloud. Can Not Continue"
483 # extra space to overwrite the previous connectivity output
484 echo -e "${blue}\r ${reset}"
486 ssh -T ${SSH_OPTIONS[@]} "root@$UNDERCLOUD" "if ! ip a s eth2 | grep ${public_network_provisioner_ip} > /dev/null; then ip a a ${public_network_provisioner_ip}/${public_network_cidr##*/} dev eth2; ip link set up dev eth2; fi"
488 # ssh key fix for stack user
489 ssh -T ${SSH_OPTIONS[@]} "root@$UNDERCLOUD" "restorecon -r /home/stack"
492 ##Create virtual nodes in virsh
493 ##params: vcpus, ramsize
494 function setup_virtual_baremetal {
499 elif [ -z "$2" ]; then
506 #start by generating the opening json for instackenv.json
507 cat > $CONFIG/instackenv-virt.json << EOF
512 # next create the virtual machines and add their definitions to the file
513 if [ "$ha_enabled" == "False" ]; then
514 # 1 controller + computes
515 # zero based so just pass compute count
516 vm_index=$VM_COMPUTES
518 # 3 controller + computes
519 # zero based so add 2 to compute count
520 vm_index=$((2+$VM_COMPUTES))
523 for i in $(seq 0 $vm_index); do
524 if ! virsh list --all | grep baremetal${i} > /dev/null; then
525 define_vm baremetal${i} network 41 'admin_network' $vcpus $ramsize
526 for n in private_network public_network storage_network; do
527 if [[ $enabled_network_list =~ $n ]]; then
529 virsh attach-interface --domain baremetal${i} --type network --source $n --model rtl8139 --config
533 echo "Found Baremetal ${i} VM, using existing VM"
535 #virsh vol-list default | grep baremetal${i} 2>&1> /dev/null || virsh vol-create-as default baremetal${i}.qcow2 41G --format qcow2
536 mac=$(virsh domiflist baremetal${i} | grep admin_network | awk '{ print $5 }')
538 cat >> $CONFIG/instackenv-virt.json << EOF
540 "pm_addr": "192.168.122.1",
542 "pm_password": "INSERT_STACK_USER_PRIV_KEY",
543 "pm_type": "pxe_ssh",
548 "memory": "$ramsize",
555 #truncate the last line to remove the comma behind the bracket
556 tail -n 1 $CONFIG/instackenv-virt.json | wc -c | xargs -I {} truncate $CONFIG/instackenv-virt.json -s -{}
558 #finally reclose the bracket and close the instackenv.json file
559 cat >> $CONFIG/instackenv-virt.json << EOF
563 "host-ip": "192.168.122.1",
564 "power_manager": "nova.virt.baremetal.virtual_power_driver.VirtualPowerManager",
566 "ssh-key": "INSERT_STACK_USER_PRIV_KEY",
570 #Overwrite the tripleo-inclubator domain.xml with our own, keeping a backup.
571 if [ ! -f /usr/share/tripleo/templates/domain.xml.bak ]; then
572 /usr/bin/mv -f /usr/share/tripleo/templates/domain.xml /usr/share/tripleo/templates/domain.xml.bak
575 /usr/bin/cp -f $LIB/installer/domain.xml /usr/share/tripleo/templates/domain.xml
578 ##Create virtual nodes in virsh
579 ##params: name - String: libvirt name for VM
580 ## bootdev - String: boot device for the VM
581 ## disksize - Number: size of the disk in GB
582 ## ovs_bridges: - List: list of ovs bridges
583 ## vcpus - Number of VCPUs to use (defaults to 4)
584 ## ramsize - Size of RAM for VM in MB (defaults to 8192)
585 function define_vm () {
591 elif [ -z "$6" ]; then
599 # Create the libvirt storage volume
600 if virsh vol-list default | grep ${1}.qcow2 2>&1> /dev/null; then
601 volume_path=$(virsh vol-path --pool default ${1}.qcow2 || echo "/var/lib/libvirt/images/${1}.qcow2")
602 echo "Volume ${1} exists. Deleting Existing Volume $volume_path"
603 virsh vol-dumpxml ${1}.qcow2 --pool default > /dev/null || echo '' #ok for this to fail
605 virsh vol-delete ${1}.qcow2 --pool default
607 virsh vol-create-as default ${1}.qcow2 ${3}G --format qcow2
608 volume_path=$(virsh vol-path --pool default ${1}.qcow2)
609 if [ ! -f $volume_path ]; then
610 echo "$volume_path Not created successfully... Aborting"
615 /usr/libexec/openstack-tripleo/configure-vm --name $1 \
617 --image "$volume_path" \
622 --libvirt-nic-driver virtio \
623 --baremetal-interface $4
626 ##Copy over the glance images and instackenv json file
628 function configure_undercloud {
629 local controller_nic_template compute_nic_template
631 echo "Copying configuration files to Undercloud"
632 if [[ "$net_isolation_enabled" == "TRUE" ]]; then
633 echo -e "${blue}Network Environment set for Deployment: ${reset}"
634 cat /tmp/network-environment.yaml
635 scp ${SSH_OPTIONS[@]} /tmp/network-environment.yaml "stack@$UNDERCLOUD":
637 # check for ODL L3/ONOS
638 if [ "${deploy_options_array['sdn_l3']}" == 'True' ]; then
642 if ! controller_nic_template=$(python3.4 -B $LIB/python/apex-python-utils.py nic-template -t $CONFIG/nics-controller.yaml.jinja2 -n "$enabled_network_list" -e $ext_net_type -af $ip_addr_family); then
643 echo -e "${red}ERROR: Failed to generate controller NIC heat template ${reset}"
647 if ! compute_nic_template=$(python3.4 -B $LIB/python/apex-python-utils.py nic-template -t $CONFIG/nics-compute.yaml.jinja2 -n "$enabled_network_list" -e $ext_net_type -af $ip_addr_family); then
648 echo -e "${red}ERROR: Failed to generate compute NIC heat template ${reset}"
651 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" << EOI
653 cat > nics/controller.yaml << EOF
654 $controller_nic_template
656 cat > nics/compute.yaml << EOF
657 $compute_nic_template
662 # ensure stack user on Undercloud machine has an ssh key
663 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" "if [ ! -e ~/.ssh/id_rsa.pub ]; then ssh-keygen -t rsa -N '' -f ~/.ssh/id_rsa; fi"
665 if [ "$virtual" == "TRUE" ]; then
667 # copy the Undercloud VM's stack user's pub key to
668 # root's auth keys so that Undercloud can control
669 # vm power on the hypervisor
670 ssh ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" "cat /home/stack/.ssh/id_rsa.pub" >> /root/.ssh/authorized_keys
672 DEPLOY_OPTIONS+=" --libvirt-type qemu"
673 INSTACKENV=$CONFIG/instackenv-virt.json
675 # upload instackenv file to Undercloud for virtual deployment
676 scp ${SSH_OPTIONS[@]} $INSTACKENV "stack@$UNDERCLOUD":instackenv.json
679 # allow stack to control power management on the hypervisor via sshkey
680 # only if this is a virtual deployment
681 if [ "$virtual" == "TRUE" ]; then
682 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
683 while read -r line; do
684 stack_key=\${stack_key}\\\\\\\\n\${line}
685 done < <(cat ~/.ssh/id_rsa)
686 stack_key=\$(echo \$stack_key | sed 's/\\\\\\\\n//')
687 sed -i 's~INSERT_STACK_USER_PRIV_KEY~'"\$stack_key"'~' instackenv.json
691 # copy stack's ssh key to this users authorized keys
692 ssh -T ${SSH_OPTIONS[@]} "root@$UNDERCLOUD" "cat /home/stack/.ssh/id_rsa.pub" >> ~/.ssh/authorized_keys
694 # disable requiretty for sudo
695 ssh -T ${SSH_OPTIONS[@]} "root@$UNDERCLOUD" "sed -i 's/Defaults\s*requiretty//'" /etc/sudoers
697 # configure undercloud on Undercloud VM
698 echo "Running undercloud configuration."
699 echo "Logging undercloud configuration to undercloud:/home/stack/apex-undercloud-install.log"
700 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" << EOI
701 if [[ "$net_isolation_enabled" == "TRUE" ]]; then
702 sed -i 's/#local_ip/local_ip/' undercloud.conf
703 sed -i 's/#network_gateway/network_gateway/' undercloud.conf
704 sed -i 's/#network_cidr/network_cidr/' undercloud.conf
705 sed -i 's/#dhcp_start/dhcp_start/' undercloud.conf
706 sed -i 's/#dhcp_end/dhcp_end/' undercloud.conf
707 sed -i 's/#inspection_iprange/inspection_iprange/' undercloud.conf
708 sed -i 's/#undercloud_debug/undercloud_debug/' undercloud.conf
710 openstack-config --set undercloud.conf DEFAULT local_ip ${admin_network_provisioner_ip}/${admin_network_cidr##*/}
711 openstack-config --set undercloud.conf DEFAULT network_gateway ${admin_network_provisioner_ip}
712 openstack-config --set undercloud.conf DEFAULT network_cidr ${admin_network_cidr}
713 openstack-config --set undercloud.conf DEFAULT dhcp_start ${admin_network_dhcp_range%%,*}
714 openstack-config --set undercloud.conf DEFAULT dhcp_end ${admin_network_dhcp_range##*,}
715 openstack-config --set undercloud.conf DEFAULT inspection_iprange ${admin_network_introspection_range}
716 openstack-config --set undercloud.conf DEFAULT undercloud_debug false
720 sudo sed -i '/CephClusterFSID:/c\\ CephClusterFSID: \\x27$(cat /proc/sys/kernel/random/uuid)\\x27' /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
721 sudo sed -i '/CephMonKey:/c\\ CephMonKey: \\x27'"\$(ceph-authtool --gen-print-key)"'\\x27' /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
722 sudo sed -i '/CephAdminKey:/c\\ CephAdminKey: \\x27'"\$(ceph-authtool --gen-print-key)"'\\x27' /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
724 # we assume that packages will not need to be updated with undercloud install
725 # and that it will be used only to configure the undercloud
726 # packages updates would need to be handled manually with yum update
727 sudo cp -f /usr/share/diskimage-builder/elements/yum/bin/install-packages /usr/share/diskimage-builder/elements/yum/bin/install-packages.bak
728 cat << 'EOF' | sudo tee /usr/share/diskimage-builder/elements/yum/bin/install-packages > /dev/null
733 openstack undercloud install &> apex-undercloud-install.log || {
734 # cat the undercloud install log incase it fails
735 echo "ERROR: openstack undercloud install has failed. Dumping Log:"
736 cat apex-undercloud-install.log
741 sudo systemctl restart openstack-glance-api
742 sudo systemctl restart openstack-nova-conductor
743 sudo systemctl restart openstack-nova-compute
745 sudo sed -i '/num_engine_workers/c\num_engine_workers = 2' /etc/heat/heat.conf
746 sudo sed -i '/#workers\s=/c\workers = 2' /etc/heat/heat.conf
747 sudo systemctl restart openstack-heat-engine
748 sudo systemctl restart openstack-heat-api
750 # WORKAROUND: must restart the above services to fix sync problem with nova compute manager
751 # TODO: revisit and file a bug if necessary. This should eventually be removed
752 # as well as glance api problem
753 echo -e "${blue}INFO: Sleeping 15 seconds while services come back from restart${reset}"
758 ##preping it for deployment and launch the deploy
760 function undercloud_prep_overcloud_deploy {
761 if [[ "${#deploy_options_array[@]}" -eq 0 || "${deploy_options_array['sdn_controller']}" == 'opendaylight' ]]; then
762 if [ "${deploy_options_array['sdn_l3']}" == 'True' ]; then
763 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/opendaylight_l3.yaml"
764 elif [ "${deploy_options_array['sfc']}" == 'True' ]; then
765 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/opendaylight_sfc.yaml"
766 elif [ "${deploy_options_array['vpn']}" == 'True' ]; then
767 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/opendaylight_sdnvpn.yaml"
769 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/opendaylight.yaml"
771 SDN_IMAGE=opendaylight
772 if [ "${deploy_options_array['sfc']}" == 'True' ]; then
774 if [ ! -f $RESOURCES/overcloud-full-${SDN_IMAGE}.qcow2 ]; then
775 echo "${red} $RESOURCES/overcloud-full-${SDN_IMAGE}.qcow2 is required to execute an SFC deployment."
776 echo "Please install the opnfv-apex-opendaylight-sfc package to provide this overcloud image for deployment.${reset}"
780 elif [ "${deploy_options_array['sdn_controller']}" == 'opendaylight-external' ]; then
781 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/opendaylight-external.yaml"
782 SDN_IMAGE=opendaylight
783 elif [ "${deploy_options_array['sdn_controller']}" == 'onos' ]; then
784 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/onos.yaml"
786 elif [ "${deploy_options_array['sdn_controller']}" == 'opencontrail' ]; then
787 echo -e "${red}ERROR: OpenContrail is currently unsupported...exiting${reset}"
789 elif [[ -z "${deploy_options_array['sdn_controller']}" || "${deploy_options_array['sdn_controller']}" == 'False' ]]; then
790 echo -e "${blue}INFO: SDN Controller disabled...will deploy nosdn scenario${reset}"
791 SDN_IMAGE=opendaylight
793 echo "${red}Invalid sdn_controller: ${deploy_options_array['sdn_controller']}${reset}"
794 echo "${red}Valid choices are opendaylight, opendaylight-external, onos, opencontrail, False, or null${reset}"
798 # Make sure the correct overcloud image is available
799 if [ ! -f $RESOURCES/overcloud-full-${SDN_IMAGE}.qcow2 ]; then
800 echo "${red} $RESOURCES/overcloud-full-${SDN_IMAGE}.qcow2 is required to execute your deployment."
801 echo "Both ONOS and OpenDaylight are currently deployed from this image."
802 echo "Please install the opnfv-apex package to provide this overcloud image for deployment.${reset}"
806 echo "Copying overcloud image to Undercloud"
807 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" "rm -f overcloud-full.qcow2"
808 scp ${SSH_OPTIONS[@]} $RESOURCES/overcloud-full-${SDN_IMAGE}.qcow2 "stack@$UNDERCLOUD":overcloud-full.qcow2
810 # Push performance options to subscript to modify per-role images as needed
811 for option in "${performance_options[@]}" ; do
812 echo -e "${blue}Setting performance option $option${reset}"
813 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" "bash build_perf_image.sh $option"
816 # Add performance deploy options if they have been set
817 if [ ! -z "${deploy_options_array['performance']}" ]; then
818 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/numa.yaml"
821 # make sure ceph is installed
822 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml"
824 # scale compute nodes according to inventory
825 total_nodes=$(ssh -T ${SSH_OPTIONS[@]} "root@$UNDERCLOUD" "cat /home/stack/instackenv.json | grep -c memory")
827 # check if HA is enabled
828 if [[ "$ha_enabled" == "True" ]]; then
829 DEPLOY_OPTIONS+=" --control-scale 3"
830 compute_nodes=$((total_nodes - 3))
831 DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/puppet-pacemaker.yaml"
833 compute_nodes=$((total_nodes - 1))
836 if [ "$compute_nodes" -le 0 ]; then
837 echo -e "${red}ERROR: Invalid number of compute nodes: ${compute_nodes}. Check your inventory file.${reset}"
840 echo -e "${blue}INFO: Number of compute nodes set for deployment: ${compute_nodes}${reset}"
841 DEPLOY_OPTIONS+=" --compute-scale ${compute_nodes}"
844 if [[ "$net_isolation_enabled" == "TRUE" ]]; then
845 #DEPLOY_OPTIONS+=" -e /usr/share/openstack-tripleo-heat-templates/environments/network-isolation.yaml"
846 DEPLOY_OPTIONS+=" -e network-environment.yaml"
849 if [[ "$ha_enabled" == "True" ]] || [[ "$net_isolation_enabled" == "TRUE" ]]; then
850 DEPLOY_OPTIONS+=" --ntp-server $ntp_server"
853 if [[ ! "$virtual" == "TRUE" ]]; then
854 DEPLOY_OPTIONS+=" --control-flavor control --compute-flavor compute"
856 DEPLOY_OPTIONS+=" -e virtual-environment.yaml"
859 DEPLOY_OPTIONS+=" -e opnfv-environment.yaml"
861 echo -e "${blue}INFO: Deploy options set:\n${DEPLOY_OPTIONS}${reset}"
863 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
864 if [ "$debug" == 'TRUE' ]; then
865 LIBGUESTFS_BACKEND=direct virt-customize -a overcloud-full.qcow2 --root-password password:opnfvapex
870 echo "Uploading overcloud glance images"
871 openstack overcloud image upload
873 bash -x set_perf_images.sh ${performance_roles[@]}
875 echo "Configuring undercloud and discovering nodes"
876 openstack baremetal import --json instackenv.json
877 openstack baremetal configure boot
878 #if [[ -z "$virtual" ]]; then
879 # openstack baremetal introspection bulk start
881 echo "Configuring flavors"
882 for flavor in baremetal control compute; do
883 echo -e "${blue}INFO: Updating flavor: \${flavor}${reset}"
884 if openstack flavor list | grep \${flavor}; then
885 openstack flavor delete \${flavor}
887 openstack flavor create --id auto --ram 4096 --disk 39 --vcpus 1 \${flavor}
888 if ! openstack flavor list | grep \${flavor}; then
889 echo -e "${red}ERROR: Unable to create flavor \${flavor}${reset}"
892 openstack flavor set --property "cpu_arch"="x86_64" --property "capabilities:boot_option"="local" baremetal
893 openstack flavor set --property "cpu_arch"="x86_64" --property "capabilities:boot_option"="local" --property "capabilities:profile"="control" control
894 openstack flavor set --property "cpu_arch"="x86_64" --property "capabilities:boot_option"="local" --property "capabilities:profile"="compute" compute
895 echo "Configuring nameserver on ctlplane network"
896 neutron subnet-update \$(neutron subnet-list | grep -v id | grep -v \\\\-\\\\- | awk {'print \$2'}) --dns-nameserver 8.8.8.8
897 echo "Executing overcloud deployment, this should run for an extended period without output."
898 sleep 60 #wait for Hypervisor stats to check-in to nova
899 # save deploy command so it can be used for debugging
900 cat > deploy_command << EOF
901 openstack overcloud deploy --templates $DEPLOY_OPTIONS --timeout 90
905 if [ "$interactive" == "TRUE" ]; then
906 if ! prompt_user "Overcloud Deployment"; then
907 echo -e "${blue}INFO: User requests exit${reset}"
912 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
914 openstack overcloud deploy --templates $DEPLOY_OPTIONS --timeout 90
915 if ! heat stack-list | grep CREATE_COMPLETE 1>/dev/null; then
916 $(typeset -f debug_stack)
922 if [ "$debug" == 'TRUE' ]; then
923 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
925 echo "Keystone Endpoint List:"
926 keystone endpoint-list
927 echo "Keystone Service List"
928 keystone service-list
929 cinder quota-show \$(openstack project list | grep admin | awk {'print \$2'})
934 ##Post configuration after install
936 function configure_post_install {
937 local opnfv_attach_networks ovs_ip ip_range net_cidr tmp_ip
938 opnfv_attach_networks="admin_network public_network"
940 echo -e "${blue}INFO: Post Install Configuration Running...${reset}"
942 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
945 echo "Configuring Neutron external network"
946 neutron net-create external --router:external=True --tenant-id \$(keystone tenant-get service | grep id | awk '{ print \$4 }')
947 neutron subnet-create --name external-net --tenant-id \$(keystone tenant-get service | grep id | awk '{ print \$4 }') --disable-dhcp external --gateway ${public_network_gateway} --allocation-pool start=${public_network_floating_ip_range%%,*},end=${public_network_floating_ip_range##*,} ${public_network_cidr}
950 echo -e "${blue}INFO: Checking if OVS bridges have IP addresses...${reset}"
951 for network in ${opnfv_attach_networks}; do
952 ovs_ip=$(find_ip ${NET_MAP[$network]})
954 if [ -n "$ovs_ip" ]; then
955 echo -e "${blue}INFO: OVS Bridge ${NET_MAP[$network]} has IP address ${ovs_ip}${reset}"
957 echo -e "${blue}INFO: OVS Bridge ${NET_MAP[$network]} missing IP, will configure${reset}"
958 # use last IP of allocation pool
959 eval "ip_range=\${${network}_usable_ip_range}"
960 ovs_ip=${ip_range##*,}
961 eval "net_cidr=\${${network}_cidr}"
962 sudo ip addr add ${ovs_ip}/${net_cidr##*/} dev ${NET_MAP[$network]}
963 sudo ip link set up ${NET_MAP[$network]}
964 tmp_ip=$(find_ip ${NET_MAP[$network]})
965 if [ -n "$tmp_ip" ]; then
966 echo -e "${blue}INFO: OVS Bridge ${NET_MAP[$network]} IP set: ${tmp_ip}${reset}"
969 echo -e "${red}ERROR: Unable to set OVS Bridge ${NET_MAP[$network]} with IP: ${ovs_ip}${reset}"
975 # for virtual, we NAT public network through Undercloud
976 if [ "$virtual" == "TRUE" ]; then
977 if ! configure_undercloud_nat ${public_network_cidr}; then
978 echo -e "${red}ERROR: Unable to NAT undercloud with external net: ${public_network_cidr}${reset}"
981 echo -e "${blue}INFO: Undercloud VM has been setup to NAT Overcloud public network${reset}"
985 # for sfc deployments we need the vxlan workaround
986 if [ "${deploy_options_array['sfc']}" == 'True' ]; then
987 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
990 for node in \$(nova list | grep -Eo "[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+"); do
991 ssh -T ${SSH_OPTIONS[@]} "heat-admin@\$node" <<EOF
992 sudo ifconfig br-int up
993 sudo ip route add 123.123.123.0/24 dev br-int
999 # Collect deployment logs
1000 ssh -T ${SSH_OPTIONS[@]} "stack@$UNDERCLOUD" <<EOI
1001 mkdir -p ~/deploy_logs
1002 rm -rf deploy_logs/*
1005 for node in \$(nova list | grep -Eo "[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+"); do
1006 ssh -T ${SSH_OPTIONS[@]} "heat-admin@\$node" <<EOF
1007 sudo cp /var/log/messages /home/heat-admin/messages.log
1008 sudo chown heat-admin /home/heat-admin/messages.log
1010 scp ${SSH_OPTIONS[@]} heat-admin@\$node:/home/heat-admin/messages.log ~/deploy_logs/\$node.messages.log
1011 if [ "$debug" == "TRUE" ]; then
1012 nova list --ip \$node
1013 echo "---------------------------"
1014 echo "-----/var/log/messages-----"
1015 echo "---------------------------"
1016 cat ~/deploy_logs/\$node.messages.log
1017 echo "---------------------------"
1018 echo "----------END LOG----------"
1019 echo "---------------------------"
1021 ssh -T ${SSH_OPTIONS[@]} "heat-admin@\$node" <<EOF
1022 sudo rm -f /home/heat-admin/messages.log
1026 # Print out the dashboard URL
1028 echo "Overcloud dashboard available at http://\$(heat output-show overcloud PublicVip | sed 's/"//g')/dashboard"
1034 echo -e "Usage:\n$0 [arguments] \n"
1035 echo -e " -d|--deploy-settings : Full path to deploy settings yaml file. Optional. Defaults to null"
1036 echo -e " -i|--inventory : Full path to inventory yaml file. Required only for baremetal"
1037 echo -e " -n|--net-settings : Full path to network settings file. Optional."
1038 echo -e " -p|--ping-site : site to use to verify IP connectivity. Optional. Defaults to 8.8.8.8"
1039 echo -e " -v|--virtual : Virtualize overcloud nodes instead of using baremetal."
1040 echo -e " --flat : disable Network Isolation and use a single flat network for the underlay network."
1041 echo -e " --no-post-config : disable Post Install configuration."
1042 echo -e " --debug : enable debug output."
1043 echo -e " --interactive : enable interactive deployment mode which requires user to confirm steps of deployment."
1044 echo -e " --virtual-cpus : Number of CPUs to use per Overcloud VM in a virtual deployment (defaults to 4)."
1045 echo -e " --virtual-ram : Amount of RAM to use per Overcloud VM in GB (defaults to 8)."
1048 ##translates the command line parameters into variables
1049 ##params: $@ the entire command line is passed
1050 ##usage: parse_cmd_line() "$@"
1052 echo -e "\n\n${blue}This script is used to deploy the Apex Installer and Provision OPNFV Target System${reset}\n\n"
1053 echo "Use -h to display help"
1056 while [ "${1:0:1}" = "-" ]
1063 -d|--deploy-settings)
1064 DEPLOY_SETTINGS_FILE=$2
1065 echo "Deployment Configuration file: $2"
1074 echo "Network Settings Configuration file: $2"
1079 echo "Using $2 as the ping site"
1084 echo "Executing a Virtual Deployment"
1088 net_isolation_enabled="FALSE"
1089 echo "Underlay Network Isolation Disabled: using flat configuration"
1094 echo "Post install configuration disabled"
1099 echo "Enable debug output"
1104 echo "Interactive mode enabled"
1109 echo "Number of CPUs per VM set to $VM_CPUS"
1114 echo "Amount of RAM per VM set to $VM_RAM"
1117 --virtual-computes )
1119 echo "Virtual Compute nodes set to $VM_COMPUTES"
1129 if [[ ! -z "$NETSETS" && "$net_isolation_enabled" == "FALSE" ]]; then
1130 echo -e "${red}INFO: Single flat network requested. Only admin_network settings will be used!${reset}"
1131 elif [[ -z "$NETSETS" ]]; then
1132 echo -e "${red}ERROR: You must provide a network_settings file with -n.${reset}"
1136 if [[ -n "$virtual" && -n "$INVENTORY_FILE" ]]; then
1137 echo -e "${red}ERROR: You should not specify an inventory with virtual deployments${reset}"
1141 if [[ -z "$DEPLOY_SETTINGS_FILE" || ! -f "$DEPLOY_SETTINGS_FILE" ]]; then
1142 echo -e "${red}ERROR: Deploy Settings: ${DEPLOY_SETTINGS_FILE} does not exist! Exiting...${reset}"
1146 if [[ ! -z "$NETSETS" && ! -f "$NETSETS" ]]; then
1147 echo -e "${red}ERROR: Network Settings: ${NETSETS} does not exist! Exiting...${reset}"
1151 if [[ ! -z "$INVENTORY_FILE" && ! -f "$INVENTORY_FILE" ]]; then
1152 echo -e "{$red}ERROR: Inventory File: ${INVENTORY_FILE} does not exist! Exiting...${reset}"
1156 if [[ -z "$virtual" && -z "$INVENTORY_FILE" ]]; then
1157 echo -e "${red}ERROR: You must specify an inventory file for baremetal deployments! Exiting...${reset}"
1161 if [[ "$net_isolation_enabled" == "FALSE" && "$post_config" == "TRUE" ]]; then
1162 echo -e "${blue}INFO: Post Install Configuration will be skipped. It is not supported with --flat${reset}"
1171 # Make sure jinja2 is installed
1172 easy_install-3.4 jinja2 > /dev/null
1174 echo -e "${blue}INFO: Parsing network settings file...${reset}"
1175 parse_network_settings
1176 if ! configure_deps; then
1177 echo -e "${red}Dependency Validation Failed, Exiting.${reset}"
1180 if [ -n "$DEPLOY_SETTINGS_FILE" ]; then
1181 echo -e "${blue}INFO: Parsing deploy settings file...${reset}"
1182 parse_deploy_settings
1185 if [ "$virtual" == "TRUE" ]; then
1186 setup_virtual_baremetal $VM_CPUS $VM_RAM
1187 elif [ -n "$INVENTORY_FILE" ]; then
1188 parse_inventory_file
1190 configure_undercloud
1191 undercloud_prep_overcloud_deploy
1192 if [ "$post_config" == "TRUE" ]; then
1193 if ! configure_post_install; then
1194 echo -e "${red}ERROR:Post Install Configuration Failed, Exiting.${reset}"
1197 echo -e "${blue}INFO: Post Install Configuration Complete${reset}"
1200 if [[ "${deploy_options_array['sdn_controller']}" == 'onos' ]]; then
1201 if ! onos_update_gw_mac ${public_network_cidr} ${public_network_gateway}; then
1202 echo -e "${red}ERROR:ONOS Post Install Configuration Failed, Exiting.${reset}"
1205 echo -e "${blue}INFO: ONOS Post Install Configuration Complete${reset}"