docker/firstboot/start_docker_agents.sh

   1 #!/bin/bash
   2 set -eux
   3
   4 /sbin/setenforce 0
   5 /sbin/modprobe ebtables
   6
   7 # CentOS sets ptmx to 000. Withoutit being 666, we can't use Cinder volumes
   8 chmod 666 /dev/pts/ptmx
   9
  10 # We need hostname -f to return in a centos container for the puppet hook
  11 HOSTNAME=$(hostname)
  12 echo "127.0.0.1 $HOSTNAME.localdomain $HOSTNAME" >> /etc/hosts
  13
  14 # update docker for local insecure registry(optional)
  15 # Note: This is different for different docker versions
  16 # For older docker versions < 1.4.x use commented line
  17 #echo "OPTIONS='--insecure-registry $docker_registry'" >> /etc/sysconfig/docker
  18 #echo "ADD_REGISTRY='--registry-mirror $docker_registry'" >> /etc/sysconfig/docker
  19
  20 # Local docker registry 1.8
  21 # NOTE(mandre) $docker_namespace_is_registry is not a bash variable but is
  22 # a place holder for text replacement done via heat
  23 if [ "$docker_namespace_is_registry" = True ]; then
  24     /usr/bin/systemctl stop docker.service
  25     # if namespace is used with local registry, trim all namespacing
  26     trim_var=$docker_registry
  27     registry_host="${trim_var%%/*}"
  28     /bin/sed -i -r "s/^[# ]*INSECURE_REGISTRY *=.+$/INSECURE_REGISTRY='--insecure-registry $registry_host'/" /etc/sysconfig/docker
  29     /usr/bin/systemctl start --no-block docker.service
  30 fi
  31
  32 /usr/bin/docker pull $agent_image &
  33 DOCKER_PULL_PID=$!
  34
  35 mkdir -p /var/lib/etc-data/json-config #FIXME: this should be a docker data container
  36
  37 # NOTE(flaper87): Heat Agent required mounts
  38 AGENT_COMMAND_MOUNTS="-v /var/lib/etc-data:/var/lib/etc-data \
  39                       -v /run:/run \
  40                       -v /etc:/host/etc \
  41                       -v /usr/bin/atomic:/usr/bin/atomic \
  42                       -v /var/lib/dhclient:/var/lib/dhclient \
  43                       -v /var/lib/cloud:/var/lib/cloud \
  44                       -v /var/lib/heat-cfntools:/var/lib/heat-cfntools \
  45                       -v /etc/sysconfig/docker:/etc/sysconfig/docker \
  46                       -v /etc/sysconfig/network-scripts:/etc/sysconfig/network-scripts \
  47                       -v /var/lib/os-collect-config:/var/lib/os-collect-config \
  48                       -v /var/lib/os-apply-config-deployments:/var/lib/os-apply-config-deployments \
  49                       -v /var/lib/heat-config:/var/lib/heat-config \
  50                       -v /usr/lib64/libseccomp.so.2:/usr/lib64/libseccomp.so.2"
  51
  52
  53 # NOTE(flaper87): Some of these commands may not be present depending on the
  54 # atomic version.
  55 for docker_cmd in docker docker-current docker-latest; do
  56     if [ -f "/usr/bin/$docker_cmd" ]; then
  57         AGENT_COMMAND_MOUNTS+=" -v /usr/bin/$docker_cmd:/usr/bin/$docker_cmd"
  58     fi
  59 done
  60
  61 # heat-docker-agents service
  62 cat <<EOF > /etc/systemd/system/heat-docker-agents.service
  63
  64 [Unit]
  65 Description=Heat Docker Agent Container
  66 After=docker.service
  67 Requires=docker.service
  68
  69 [Service]
  70 User=root
  71 Restart=on-failure
  72 ExecStartPre=-/usr/bin/docker kill heat-agents
  73 ExecStartPre=-/usr/bin/docker rm heat-agents
  74 ExecStart=/usr/bin/docker run --name heat-agents --privileged --net=host \
  75     $AGENT_COMMAND_MOUNTS \
  76     --entrypoint=/usr/bin/os-collect-config $agent_image
  77 ExecStop=/usr/bin/docker stop heat-agents
  78
  79 [Install]
  80 WantedBy=multi-user.target
  81
  82 EOF
  83
  84 # enable and start heat-docker-agents
  85 chmod 0640 /etc/systemd/system/heat-docker-agents.service
  86 /usr/bin/systemctl enable heat-docker-agents.service
  87 /usr/bin/systemctl start --no-block heat-docker-agents.service
  88
  89 # Disable NetworkManager and let the ifup/down scripts work properly.
  90 /usr/bin/systemctl disable NetworkManager
  91 /usr/bin/systemctl stop NetworkManager
  92
  93 # Atomic's root partition & logical volume defaults to 3G.  In order to launch
  94 # larger VMs, we need to enlarge the root logical volume and scale down the
  95 # docker_pool logical volume. We are allocating 80% of the disk space for
  96 # vm data and the remaining 20% for docker images.
  97 ATOMIC_ROOT='/dev/mapper/atomicos-root'
  98 ROOT_DEVICE=`pvs -o vg_name,pv_name --no-headings | grep atomicos | awk '{ print $2}'`
  99
 100 growpart $( echo "${ROOT_DEVICE}" | sed -r 's/([^0-9]*)([0-9]+)/\1 \2/' )
 101 pvresize "${ROOT_DEVICE}"
 102 lvresize -l +80%FREE "${ATOMIC_ROOT}"
 103 xfs_growfs "${ATOMIC_ROOT}"
 104
 105 cat <<EOF > /etc/sysconfig/docker-storage-setup
 106 GROWPART=true
 107 AUTO_EXTEND_POOL=yes
 108 POOL_AUTOEXTEND_PERCENT=30
 109 POOL_AUTOEXTEND_THRESHOLD=70
 110 EOF
 111
 112 wait $DOCKER_PULL_PID