b97825874b
This change defines tools/deploy_rootwrap.sh. It builds neutron-rootwrap config from neutron, neutron-fwaas and functests[1] filters. It's an enabler to run functional tests which requires rootwrap/privsep features. An alternative was to build neutron-rootwrap config from neutron-fwaas and functests filters[1] only. But it implies to add many filters from neutron in functests filters in order to run FWaaS functional tests on the long term. Most of the logic in gate_hook.sh[2] has been removed because it's now done by neutron tools/configure_for_func_testing.sh through configure_for_fwaas_func_testing.sh[3]. post_test_hook.sh changes now neutron permissions in order to allow stack user to run pip install neutron in /opt/stack/new/neutron. This change defines the modules [5][6] to validate that we can run privileged privsep process in functional tests. These modules will be removed when "real" functional tests will be added. [1] neutron_fwaas/tests/contrib/functional-testing.filters [2] neutron_fwaas/tests/contrib/gate_hook.sh [3] tools/configure_for_fwaas_func_testing.sh [4] neutron_fwaas/tests/contrib/post_test_hook.sh [5] neutron_fwaas.privileged.tests.functional.dummy [6] neutron_fwaas.tests.functional.privileged.test_dummy Change-Id: Ie077092c03efca3856c27c581bba5c5b84db3a2a
63 lines
2.0 KiB
Bash
Executable File
63 lines
2.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
set -eu
|
|
|
|
if [ "$#" -ne 3 ]; then
|
|
>&2 echo "Usage: $0 /path/to/neutron_fwaas /path/to/target/etc /path/to/target/bin
|
|
Deploy Neutron FWaaS's rootwrap configuration.
|
|
|
|
Warning: Any existing rootwrap files at the specified etc path will be
|
|
removed by this script.
|
|
|
|
Optional: set OS_SUDO_TESTING=1 to deploy the filters required by
|
|
Neutron's functional testing suite."
|
|
exit 1
|
|
fi
|
|
|
|
OS_SUDO_TESTING=${OS_SUDO_TESTING:-0}
|
|
|
|
neutron_path=${OS_NEUTRON_PATH}
|
|
fwaas_path=$1
|
|
target_etc_path=$2
|
|
target_bin_path=$3
|
|
|
|
src_conf_path=${neutron_path}/etc
|
|
src_conf=${src_conf_path}/rootwrap.conf
|
|
src_rootwrap_path=${src_conf_path}/neutron/rootwrap.d
|
|
|
|
fwaas_src_conf_path=${fwaas_path}/etc
|
|
fwaas_src_rootwrap_path=${fwaas_src_conf_path}/neutron/rootwrap.d
|
|
|
|
dst_conf_path=${target_etc_path}/neutron
|
|
dst_conf=${dst_conf_path}/rootwrap.conf
|
|
dst_rootwrap_path=${dst_conf_path}/rootwrap.d
|
|
|
|
if [[ -d "$dst_rootwrap_path" ]]; then
|
|
rm -rf ${dst_rootwrap_path}
|
|
fi
|
|
mkdir -p -m 755 ${dst_rootwrap_path}
|
|
|
|
cp -p ${src_rootwrap_path}/* ${fwaas_src_rootwrap_path}/* ${dst_rootwrap_path}/
|
|
cp -p ${src_conf} ${dst_conf}
|
|
sed -i "s:^filters_path=.*$:filters_path=${dst_rootwrap_path}:" ${dst_conf}
|
|
sed -i "s:^\(exec_dirs=.*\)$:\1,${target_bin_path}:" ${dst_conf}
|
|
|
|
if [[ "$OS_SUDO_TESTING" = "1" ]]; then
|
|
sed -i 's/use_syslog=False/use_syslog=True/g' ${dst_conf}
|
|
sed -i 's/syslog_log_level=ERROR/syslog_log_level=DEBUG/g' ${dst_conf}
|
|
cp -p ${fwaas_path}/neutron_fwaas/tests/contrib/functional-testing.filters \
|
|
${dst_rootwrap_path}/
|
|
fi
|