#!/usr/bin/env bash # Copyright 2014, Rackspace US, Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # (c) 2014, Kevin Carter ## Shell Opts ---------------------------------------------------------------- set -e -u -x ## Vars ---------------------------------------------------------------------- export HTTP_PROXY=${HTTP_PROXY:-""} export HTTPS_PROXY=${HTTPS_PROXY:-""} export ANSIBLE_PACKAGE=${ANSIBLE_PACKAGE:-"ansible==2.1.1.0"} export ANSIBLE_ROLE_FILE=${ANSIBLE_ROLE_FILE:-"ansible-role-requirements.yml"} export SSH_DIR=${SSH_DIR:-"/root/.ssh"} export DEBIAN_FRONTEND=${DEBIAN_FRONTEND:-"noninteractive"} # Set the role fetch mode to any option [galaxy, git-clone] export ANSIBLE_ROLE_FETCH_MODE=${ANSIBLE_ROLE_FETCH_MODE:-galaxy} # This script should be executed from the root directory of the cloned repo cd "$(dirname "${0}")/.." ## Functions ----------------------------------------------------------------- info_block "Checking for required libraries." 2> /dev/null || source scripts/scripts-library.sh ## Main ---------------------------------------------------------------------- info_block "Bootstrapping System with Ansible" # Set the variable to the role file to be the absolute path ANSIBLE_ROLE_FILE="$(readlink -f "${ANSIBLE_ROLE_FILE}")" # Create the ssh dir if needed ssh_key_create # Determine the distribution which the host is running on determine_distro # Install the base packages case ${DISTRO_ID} in centos|rhel) yum check-update yum -y install git python2 curl autoconf gcc-c++ \ python2-devel gcc libffi-devel nc openssl-devel python-requests \ python-pyasn1 pyOpenSSL python-ndg_httpsclient \ python-netaddr python-prettytable python-crypto PyYAML \ python-virtualenv ;; ubuntu) apt-get update DEBIAN_FRONTEND=noninteractive apt-get -y install \ git python-all python-dev curl python2.7-dev build-essential \ libssl-dev libffi-dev netcat python-requests python-openssl python-pyasn1 \ python-netaddr python-prettytable python-crypto python-yaml \ python-virtualenv ;; esac # NOTE(mhayden): Ubuntu 16.04 needs python-ndg-httpsclient for SSL SNI support. # This package is not needed in Ubuntu 14.04 and isn't available # there as a package. if [[ "${DISTRO_ID}" == 'ubuntu' ]] && [[ "${DISTRO_VERSION_ID}" == '16.04' ]]; then DEBIAN_FRONTEND=noninteractive apt-get -y install python-ndg-httpsclient fi # Install pip get_pip # Ensure we use the HTTPS/HTTP proxy with pip if it is specified PIP_OPTS="" if [ -n "$HTTPS_PROXY" ]; then PIP_OPTS="--proxy $HTTPS_PROXY" elif [ -n "$HTTP_PROXY" ]; then PIP_OPTS="--proxy $HTTP_PROXY" fi # Create a Virtualenv for the Ansible runtime PYTHON_EXEC_PATH="$(which python2 || which python)" virtualenv --clear --always-copy --system-site-packages --python="${PYTHON_EXEC_PATH}" /opt/ansible-runtime # Install ansible PIP_OPTS+=" --upgrade" PIP_COMMAND="/opt/ansible-runtime/bin/pip" # When upgrading there will already be a pip.conf file locking pip down to the # repo server, in such cases it may be necessary to use --isolated because the # repo server does not meet the specified requirements. # Ensure we are running the required versions of pip, wheel and setuptools ${PIP_COMMAND} install ${PIP_OPTS} ${PIP_INSTALL_OPTIONS} || ${PIP_COMMAND} install ${PIP_OPTS} --isolated ${PIP_INSTALL_OPTIONS} # Install the required packages for ansible $PIP_COMMAND install $PIP_OPTS -r requirements.txt ${ANSIBLE_PACKAGE} || $PIP_COMMAND install --isolated $PIP_OPTS -r requirements.txt ${ANSIBLE_PACKAGE} # Link the venv installation of Ansible to the local path pushd /usr/local/bin find /opt/ansible-runtime/bin/ -name 'ansible*' -exec ln -sf {} \; popd # If the Ansible plugins are in the old location remove them. [[ -d "/etc/ansible/plugins" ]] && rm -rf "/etc/ansible/plugins" # Update dependent roles if [ -f "${ANSIBLE_ROLE_FILE}" ]; then if [[ "${ANSIBLE_ROLE_FETCH_MODE}" == 'galaxy' ]];then # Pull all required roles. ansible-galaxy install --role-file="${ANSIBLE_ROLE_FILE}" \ --force elif [[ "${ANSIBLE_ROLE_FETCH_MODE}" == 'git-clone' ]];then pushd tests ansible-playbook -i "localhost ansible-connection=local," \ get-ansible-role-requirements.yml \ -e role_file="${ANSIBLE_ROLE_FILE}" popd else echo "Please set the ANSIBLE_ROLE_FETCH_MODE to either of the following options ['galaxy', 'git-clone']" exit 99 fi fi # Copy the OSA Ansible rc file into place if [[ ! -f "/usr/local/bin/openstack-ansible.rc" ]]; then cp scripts/openstack-ansible.rc /usr/local/bin/openstack-ansible.rc fi # Create openstack ansible wrapper tool cat > /usr/local/bin/openstack-ansible < # OpenStack wrapper tool to ease the use of ansible with multiple variable files. export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:${PATH}" function info() { echo -e "\e[0;35m\${@}\e[0m" } # Discover the variable files. VAR1="\$(for i in \$(ls /etc/openstack_deploy/user_*.yml); do echo -ne "-e @\$i "; done)" # Provide information on the discovered variables. info "Variable files: \"\${VAR1}\"" # Run the ansible playbook command. . /usr/local/bin/openstack-ansible.rc && \$(which ansible-playbook) \${VAR1} \$@ EOF # Ensure wrapper tool is executable chmod +x /usr/local/bin/openstack-ansible echo "openstack-ansible script created." echo "System is bootstrapped and ready for use."