858 lines
33 KiB
Python
858 lines
33 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright (c) 2011 OpenStack, LLC.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
"""
|
|
Handles all processes within the Guest VM, considering it as a Platform
|
|
|
|
The :py:class:`GuestManager` class is a :py:class:`nova.manager.Manager` that
|
|
handles RPC calls relating to Platform specific operations.
|
|
|
|
**Related Flags**
|
|
|
|
"""
|
|
|
|
import os
|
|
import re
|
|
import time
|
|
import uuid
|
|
|
|
from datetime import date
|
|
from sqlalchemy import create_engine
|
|
from sqlalchemy import exc
|
|
from sqlalchemy import interfaces
|
|
from sqlalchemy.sql.expression import text
|
|
|
|
from reddwarf import db
|
|
from reddwarf.common.exception import ProcessExecutionError
|
|
from reddwarf.common import cfg
|
|
from reddwarf.common import utils
|
|
from reddwarf.guestagent import query
|
|
from reddwarf.guestagent.db import models
|
|
from reddwarf.guestagent import pkg
|
|
from reddwarf.instance import models as rd_models
|
|
from reddwarf.openstack.common import log as logging
|
|
from reddwarf.openstack.common.gettextutils import _
|
|
|
|
|
|
ADMIN_USER_NAME = "os_admin"
|
|
LOG = logging.getLogger(__name__)
|
|
FLUSH = text(query.FLUSH)
|
|
|
|
ENGINE = None
|
|
MYSQLD_ARGS = None
|
|
PREPARING = False
|
|
UUID = False
|
|
|
|
ORIG_MYCNF = "/etc/mysql/my.cnf"
|
|
FINAL_MYCNF = "/var/lib/mysql/my.cnf"
|
|
TMP_MYCNF = "/tmp/my.cnf.tmp"
|
|
DBAAS_MYCNF = "/etc/dbaas/my.cnf/my.cnf.%dM"
|
|
MYSQL_BASE_DIR = "/var/lib/mysql"
|
|
|
|
CONF = cfg.CONF
|
|
INCLUDE_MARKER_OPERATORS = {
|
|
True: ">=",
|
|
False: ">"
|
|
}
|
|
|
|
|
|
def generate_random_password():
|
|
return str(uuid.uuid4())
|
|
|
|
|
|
def get_auth_password():
|
|
pwd, err = utils.execute_with_timeout(
|
|
"sudo",
|
|
"awk",
|
|
"/password\\t=/{print $3; exit}",
|
|
"/etc/mysql/my.cnf")
|
|
if err:
|
|
LOG.error(err)
|
|
raise RuntimeError("Problem reading my.cnf! : %s" % err)
|
|
return pwd.strip()
|
|
|
|
|
|
def get_engine():
|
|
"""Create the default engine with the updated admin user"""
|
|
#TODO(rnirmal):Based on permissions issues being resolved we may revert
|
|
#url = URL(drivername='mysql', host='localhost',
|
|
# query={'read_default_file': '/etc/mysql/my.cnf'})
|
|
global ENGINE
|
|
if ENGINE:
|
|
return ENGINE
|
|
#ENGINE = create_engine(name_or_url=url)
|
|
pwd = get_auth_password()
|
|
ENGINE = create_engine("mysql://%s:%s@localhost:3306" %
|
|
(ADMIN_USER_NAME, pwd.strip()),
|
|
pool_recycle=7200, echo=True,
|
|
listeners=[KeepAliveConnection()])
|
|
return ENGINE
|
|
|
|
|
|
def load_mysqld_options():
|
|
try:
|
|
out, err = utils.execute("/usr/sbin/mysqld", "--print-defaults",
|
|
run_as_root=True)
|
|
arglist = re.split("\n", out)[1].split()
|
|
args = {}
|
|
for item in arglist:
|
|
if "=" in item:
|
|
key, value = item.split("=")
|
|
args[key.lstrip("--")] = value
|
|
else:
|
|
args[item.lstrip("--")] = None
|
|
return args
|
|
except ProcessExecutionError as e:
|
|
return None
|
|
|
|
|
|
class MySqlAppStatus(object):
|
|
"""
|
|
Answers the question "what is the status of the MySQL application on
|
|
this box?" The answer can be that the application is not installed, or
|
|
the state of the application is determined by calling a series of
|
|
commands.
|
|
|
|
This class also handles saving and load the status of the MySQL application
|
|
in the database.
|
|
The status is updated whenever the update() method is called, except
|
|
if the state is changed to building or restart mode using the
|
|
"begin_mysql_install" and "begin_mysql_restart" methods.
|
|
The building mode persists in the database while restarting mode does
|
|
not (so if there is a Python Pete crash update() will set the status to
|
|
show a failure).
|
|
These modes are exited and functionality to update() returns when
|
|
end_install_or_restart() is called, at which point the status again
|
|
reflects the actual status of the MySQL app.
|
|
"""
|
|
|
|
_instance = None
|
|
|
|
def __init__(self):
|
|
if self._instance is not None:
|
|
raise RuntimeError("Cannot instantiate twice.")
|
|
self.status = self._load_status()
|
|
self.restart_mode = False
|
|
|
|
def begin_mysql_install(self):
|
|
"""Called right before MySQL is prepared."""
|
|
self.set_status(rd_models.ServiceStatuses.BUILDING)
|
|
|
|
def begin_mysql_restart(self):
|
|
"""Called before restarting MySQL."""
|
|
self.restart_mode = True
|
|
|
|
def end_install_or_restart(self):
|
|
"""Called after MySQL is installed or restarted.
|
|
|
|
Updates the database with the actual MySQL status.
|
|
"""
|
|
LOG.info("Ending install or restart.")
|
|
self.restart_mode = False
|
|
real_status = self._get_actual_db_status()
|
|
LOG.info("Updating status to %s" % real_status)
|
|
self.set_status(real_status)
|
|
|
|
@classmethod
|
|
def get(cls):
|
|
if not cls._instance:
|
|
cls._instance = MySqlAppStatus()
|
|
return cls._instance
|
|
|
|
def _get_actual_db_status(self):
|
|
global MYSQLD_ARGS
|
|
try:
|
|
out, err = utils.execute_with_timeout(
|
|
"/usr/bin/mysqladmin",
|
|
"ping", run_as_root=True)
|
|
LOG.info("Service Status is RUNNING.")
|
|
return rd_models.ServiceStatuses.RUNNING
|
|
except ProcessExecutionError as e:
|
|
LOG.error("Process execution ")
|
|
try:
|
|
out, err = utils.execute_with_timeout("/bin/ps", "-C",
|
|
"mysqld", "h")
|
|
pid = out.split()[0]
|
|
# TODO(rnirmal): Need to create new statuses for instances
|
|
# where the mysql service is up, but unresponsive
|
|
LOG.info("Service Status is BLOCKED.")
|
|
return rd_models.ServiceStatuses.BLOCKED
|
|
except ProcessExecutionError as e:
|
|
if not MYSQLD_ARGS:
|
|
MYSQLD_ARGS = load_mysqld_options()
|
|
pid_file = MYSQLD_ARGS.get('pid_file',
|
|
'/var/run/mysqld/mysqld.pid')
|
|
if os.path.exists(pid_file):
|
|
LOG.info("Service Status is CRASHED.")
|
|
return rd_models.ServiceStatuses.CRASHED
|
|
else:
|
|
LOG.info("Service Status is SHUTDOWN.")
|
|
return rd_models.ServiceStatuses.SHUTDOWN
|
|
|
|
@property
|
|
def is_mysql_installed(self):
|
|
"""
|
|
True if MySQL app should be installed and attempts to ascertain
|
|
its status won't result in nonsense.
|
|
"""
|
|
return (self.status is not None and
|
|
self.status != rd_models.ServiceStatuses.BUILDING and
|
|
self.status != rd_models.ServiceStatuses.FAILED)
|
|
|
|
@property
|
|
def _is_mysql_restarting(self):
|
|
return self.restart_mode
|
|
|
|
@property
|
|
def is_mysql_running(self):
|
|
"""True if MySQL is running."""
|
|
return (self.status is not None and
|
|
self.status == rd_models.ServiceStatuses.RUNNING)
|
|
|
|
@staticmethod
|
|
def _load_status():
|
|
"""Loads the status from the database."""
|
|
id = CONF.guest_id
|
|
return rd_models.InstanceServiceStatus.find_by(instance_id=id)
|
|
|
|
def set_status(self, status):
|
|
"""Changes the status of the MySQL app in the database."""
|
|
db_status = self._load_status()
|
|
db_status.set_status(status)
|
|
db_status.save()
|
|
self.status = status
|
|
|
|
def update(self):
|
|
"""Find and report status of MySQL on this machine.
|
|
|
|
The database is update and the status is also returned.
|
|
"""
|
|
if self.is_mysql_installed and not self._is_mysql_restarting:
|
|
LOG.info("Determining status of MySQL app...")
|
|
status = self._get_actual_db_status()
|
|
self.set_status(status)
|
|
else:
|
|
LOG.info("MySQL is not installed or is in restart mode, so for "
|
|
"now we'll skip determining the status of MySQL on this "
|
|
"box.")
|
|
|
|
def wait_for_real_status_to_change_to(self, status, max_time,
|
|
update_db=False):
|
|
"""
|
|
Waits the given time for the real status to change to the one
|
|
specified. Does not update the publicly viewable status Unless
|
|
"update_db" is True.
|
|
"""
|
|
WAIT_TIME = 3
|
|
waited_time = 0
|
|
while(waited_time < max_time):
|
|
time.sleep(WAIT_TIME)
|
|
waited_time += WAIT_TIME
|
|
LOG.info("Waiting for MySQL status to change to %s..." % status)
|
|
actual_status = self._get_actual_db_status()
|
|
LOG.info("MySQL status was %s after %d seconds."
|
|
% (actual_status, waited_time))
|
|
if actual_status == status:
|
|
if update_db:
|
|
self.set_status(actual_status)
|
|
return True
|
|
LOG.error("Time out while waiting for MySQL app status to change!")
|
|
return False
|
|
|
|
|
|
class LocalSqlClient(object):
|
|
"""A sqlalchemy wrapper to manage transactions"""
|
|
|
|
def __init__(self, engine, use_flush=True):
|
|
self.engine = engine
|
|
self.use_flush = use_flush
|
|
|
|
def __enter__(self):
|
|
self.conn = self.engine.connect()
|
|
self.trans = self.conn.begin()
|
|
return self.conn
|
|
|
|
def __exit__(self, type, value, traceback):
|
|
if self.trans:
|
|
if type is not None: # An error occurred
|
|
self.trans.rollback()
|
|
else:
|
|
if self.use_flush:
|
|
self.conn.execute(FLUSH)
|
|
self.trans.commit()
|
|
self.conn.close()
|
|
|
|
def execute(self, t, **kwargs):
|
|
try:
|
|
return self.conn.execute(t, kwargs)
|
|
except:
|
|
self.trans.rollback()
|
|
self.trans = None
|
|
raise
|
|
|
|
|
|
class MySqlAdmin(object):
|
|
"""Handles administrative tasks on the MySQL database."""
|
|
|
|
def _associate_dbs(self, user):
|
|
"""Internal. Given a MySQLUser, populate its databases attribute."""
|
|
LOG.debug("Associating dbs to user %s" % user.name)
|
|
with LocalSqlClient(get_engine()) as client:
|
|
q = query.Query()
|
|
q.columns = ["grantee", "table_schema"]
|
|
q.tables = ["information_schema.SCHEMA_PRIVILEGES"]
|
|
q.group = ["grantee", "table_schema"]
|
|
q.where = ["privilege_type != 'USAGE'"]
|
|
t = text(str(q))
|
|
db_result = client.execute(t)
|
|
for db in db_result:
|
|
LOG.debug("\t db: %s" % db)
|
|
if db['grantee'] == "'%s'@'%%'" % (user.name):
|
|
mysql_db = models.MySQLDatabase()
|
|
mysql_db.name = db['table_schema']
|
|
user.databases.append(mysql_db.serialize())
|
|
|
|
def change_passwords(self, users):
|
|
"""Change the passwords of one or more existing users."""
|
|
LOG.debug("Changing the password of some users.""")
|
|
LOG.debug("Users is %s" % users)
|
|
with LocalSqlClient(get_engine()) as client:
|
|
for item in users:
|
|
LOG.debug("\tUser: %s" % item)
|
|
user_dict = {'_name': item['name'],
|
|
'_password': item['password'],
|
|
}
|
|
user = models.MySQLUser()
|
|
user.deserialize(user_dict)
|
|
LOG.debug("\tDeserialized: %s" % user.__dict__)
|
|
uu = query.UpdateUser(user.name, clear=user.password)
|
|
t = text(str(uu))
|
|
client.execute(t)
|
|
|
|
def create_database(self, databases):
|
|
"""Create the list of specified databases"""
|
|
with LocalSqlClient(get_engine()) as client:
|
|
for item in databases:
|
|
mydb = models.MySQLDatabase()
|
|
mydb.deserialize(item)
|
|
cd = query.CreateDatabase(mydb.name,
|
|
mydb.character_set,
|
|
mydb.collate)
|
|
t = text(str(cd))
|
|
client.execute(t)
|
|
|
|
def create_user(self, users):
|
|
"""Create users and grant them privileges for the
|
|
specified databases"""
|
|
host = "%"
|
|
with LocalSqlClient(get_engine()) as client:
|
|
for item in users:
|
|
user = models.MySQLUser()
|
|
user.deserialize(item)
|
|
# TODO(cp16net):Should users be allowed to create users
|
|
# 'os_admin' or 'debian-sys-maint'
|
|
g = query.Grant(user=user.name, host=host,
|
|
clear=user.password)
|
|
t = text(str(g))
|
|
client.execute(t)
|
|
for database in user.databases:
|
|
mydb = models.MySQLDatabase()
|
|
mydb.deserialize(database)
|
|
g = query.Grant(permissions='ALL', database=mydb.name,
|
|
user=user.name, host=host,
|
|
clear=user.password)
|
|
t = text(str(g))
|
|
client.execute(t)
|
|
|
|
def delete_database(self, database):
|
|
"""Delete the specified database"""
|
|
with LocalSqlClient(get_engine()) as client:
|
|
mydb = models.MySQLDatabase()
|
|
mydb.deserialize(database)
|
|
dd = query.DropDatabase(mydb.name)
|
|
t = text(str(dd))
|
|
client.execute(t)
|
|
|
|
def delete_user(self, user):
|
|
"""Delete the specified users"""
|
|
with LocalSqlClient(get_engine()) as client:
|
|
mysql_user = models.MySQLUser()
|
|
mysql_user.deserialize(user)
|
|
du = query.DropUser(mysql_user.name)
|
|
t = text(str(du))
|
|
client.execute(t)
|
|
|
|
def enable_root(self):
|
|
"""Enable the root user global access and/or reset the root password"""
|
|
host = "%"
|
|
user = models.MySQLUser()
|
|
user.name = "root"
|
|
user.password = generate_random_password()
|
|
with LocalSqlClient(get_engine()) as client:
|
|
try:
|
|
cu = query.CreateUser(user.name, host=host)
|
|
t = text(str(cu))
|
|
client.execute(t, **cu.keyArgs)
|
|
except exc.OperationalError as err:
|
|
# Ignore, user is already created, just reset the password
|
|
# TODO(rnirmal): More fine grained error checking later on
|
|
LOG.debug(err)
|
|
with LocalSqlClient(get_engine()) as client:
|
|
uu = query.UpdateUser(user.name, host=host,
|
|
clear=user.password)
|
|
t = text(str(uu))
|
|
client.execute(t)
|
|
g = query.Grant(permissions="ALL", user=user.name, host=host,
|
|
grant_option=True, clear=user.password)
|
|
t = text(str(g))
|
|
client.execute(t)
|
|
return user.serialize()
|
|
|
|
def get_user(self, username):
|
|
user = self._get_user(username)
|
|
if not user:
|
|
return None
|
|
return user.serialize()
|
|
|
|
def _get_user(self, username):
|
|
"""Return a single user matching the criteria"""
|
|
user = models.MySQLUser()
|
|
user.name = username
|
|
with LocalSqlClient(get_engine()) as client:
|
|
q = query.Query()
|
|
q.columns = ['User', 'Password']
|
|
q.tables = ['mysql.user']
|
|
q.where = ["Host != 'localhost'",
|
|
"User = '%s'" % username,
|
|
]
|
|
q.order = ['User']
|
|
t = text(str(q))
|
|
result = client.execute(t).fetchall()
|
|
LOG.debug("Result: %s" % result)
|
|
if len(result) != 1:
|
|
return None
|
|
found_user = result[0]
|
|
user.password = found_user['Password']
|
|
self._associate_dbs(user)
|
|
return user
|
|
|
|
def grant_access(self, username, databases):
|
|
"""Give a user permission to use a given database."""
|
|
user = self._get_user(username)
|
|
with LocalSqlClient(get_engine()) as client:
|
|
for database in databases:
|
|
g = query.Grant(permissions='ALL', database=database,
|
|
user=user.name, host='%', hashed=user.password)
|
|
t = text(str(g))
|
|
client.execute(t)
|
|
|
|
def is_root_enabled(self):
|
|
"""Return True if root access is enabled; False otherwise."""
|
|
with LocalSqlClient(get_engine()) as client:
|
|
t = text(query.ROOT_ENABLED)
|
|
result = client.execute(t)
|
|
LOG.debug("result = " + str(result))
|
|
return result.rowcount != 0
|
|
|
|
def list_databases(self, limit=None, marker=None, include_marker=False):
|
|
"""List databases the user created on this mysql instance"""
|
|
LOG.debug(_("---Listing Databases---"))
|
|
databases = []
|
|
with LocalSqlClient(get_engine()) as client:
|
|
# If you have an external volume mounted at /var/lib/mysql
|
|
# the lost+found directory will show up in mysql as a database
|
|
# which will create errors if you try to do any database ops
|
|
# on it. So we remove it here if it exists.
|
|
q = query.Query()
|
|
q.columns = [
|
|
'schema_name as name',
|
|
'default_character_set_name as charset',
|
|
'default_collation_name as collation',
|
|
]
|
|
q.tables = ['information_schema.schemata']
|
|
q.where = ["schema_name NOT IN ("
|
|
"'mysql', 'information_schema', "
|
|
"'lost+found', '#mysql50#lost+found'"
|
|
")"]
|
|
q.order = ['schema_name ASC']
|
|
if limit:
|
|
q.limit = limit + 1
|
|
if marker:
|
|
q.where.append("schema_name %s '%s'" %
|
|
(INCLUDE_MARKER_OPERATORS[include_marker],
|
|
marker))
|
|
t = text(str(q))
|
|
database_names = client.execute(t)
|
|
next_marker = None
|
|
LOG.debug(_("database_names = %r") % database_names)
|
|
for count, database in enumerate(database_names):
|
|
if count >= limit:
|
|
break
|
|
LOG.debug(_("database = %s ") % str(database))
|
|
mysql_db = models.MySQLDatabase()
|
|
mysql_db.name = database[0]
|
|
next_marker = mysql_db.name
|
|
mysql_db.character_set = database[1]
|
|
mysql_db.collate = database[2]
|
|
databases.append(mysql_db.serialize())
|
|
LOG.debug(_("databases = ") + str(databases))
|
|
if database_names.rowcount <= limit:
|
|
next_marker = None
|
|
return databases, next_marker
|
|
|
|
def list_users(self, limit=None, marker=None, include_marker=False):
|
|
"""List users that have access to the database"""
|
|
LOG.debug(_("---Listing Users---"))
|
|
users = []
|
|
with LocalSqlClient(get_engine()) as client:
|
|
mysql_user = models.MySQLUser()
|
|
q = query.Query()
|
|
q.columns = ['User']
|
|
q.tables = ['mysql.user']
|
|
q.where = ["host != 'localhost'"]
|
|
q.order = ['User']
|
|
if marker:
|
|
q.where.append("User %s '%s'" %
|
|
(INCLUDE_MARKER_OPERATORS[include_marker],
|
|
marker))
|
|
if limit:
|
|
q.limit = limit + 1
|
|
t = text(str(q))
|
|
result = client.execute(t)
|
|
next_marker = None
|
|
LOG.debug("result = " + str(result))
|
|
for count, row in enumerate(result):
|
|
if count >= limit:
|
|
break
|
|
LOG.debug("user = " + str(row))
|
|
mysql_user = models.MySQLUser()
|
|
mysql_user.name = row['User']
|
|
self._associate_dbs(mysql_user)
|
|
next_marker = row['User']
|
|
users.append(mysql_user.serialize())
|
|
if result.rowcount <= limit:
|
|
next_marker = None
|
|
LOG.debug("users = " + str(users))
|
|
|
|
return users, next_marker
|
|
|
|
def revoke_access(self, username, database):
|
|
"""Give a user permission to use a given database."""
|
|
user = self._get_user(username)
|
|
with LocalSqlClient(get_engine()) as client:
|
|
r = query.Revoke(database=database, user=user.name, host='%',
|
|
hashed=user.password)
|
|
t = text(str(r))
|
|
client.execute(t)
|
|
|
|
def list_access(self, username):
|
|
"""Show all the databases to which the user has more than
|
|
USAGE granted."""
|
|
user = self._get_user(username)
|
|
return user.databases
|
|
|
|
|
|
class KeepAliveConnection(interfaces.PoolListener):
|
|
"""
|
|
A connection pool listener that ensures live connections are returned
|
|
from the connecction pool at checkout. This alleviates the problem of
|
|
MySQL connections timeing out.
|
|
"""
|
|
|
|
def checkout(self, dbapi_con, con_record, con_proxy):
|
|
"""Event triggered when a connection is checked out from the pool"""
|
|
try:
|
|
try:
|
|
dbapi_con.ping(False)
|
|
except TypeError:
|
|
dbapi_con.ping()
|
|
except dbapi_con.OperationalError, ex:
|
|
if ex.args[0] in (2006, 2013, 2014, 2045, 2055):
|
|
raise exc.DisconnectionError()
|
|
else:
|
|
raise
|
|
|
|
|
|
class MySqlApp(object):
|
|
"""Prepares DBaaS on a Guest container."""
|
|
|
|
TIME_OUT = 1000
|
|
MYSQL_PACKAGE_VERSION = "mysql-server-5.5"
|
|
|
|
def __init__(self, status):
|
|
""" By default login with root no password for initial setup. """
|
|
self.state_change_wait_time = CONF.state_change_wait_time
|
|
self.status = status
|
|
|
|
def _create_admin_user(self, client, password):
|
|
"""
|
|
Create a os_admin user with a random password
|
|
with all privileges similar to the root user
|
|
"""
|
|
localhost = "localhost"
|
|
cu = query.CreateUser(ADMIN_USER_NAME, host=localhost)
|
|
t = text(str(cu))
|
|
client.execute(t, **cu.keyArgs)
|
|
uu = query.UpdateUser(ADMIN_USER_NAME, host=localhost, clear=password)
|
|
t = text(str(uu))
|
|
client.execute(t)
|
|
g = query.Grant(permissions='ALL', user=ADMIN_USER_NAME,
|
|
host=localhost, grant_option=True, clear=password)
|
|
t = text(str(g))
|
|
client.execute(t)
|
|
|
|
@staticmethod
|
|
def _generate_root_password(client):
|
|
""" Generate and set a random root password and forget about it. """
|
|
localhost = "localhost"
|
|
uu = query.UpdateUser("root", host=localhost,
|
|
clear=generate_random_password())
|
|
t = text(str(uu))
|
|
client.execute(t)
|
|
|
|
def install_and_secure(self, memory_mb):
|
|
"""Prepare the guest machine with a secure mysql server installation"""
|
|
LOG.info(_("Preparing Guest as MySQL Server"))
|
|
|
|
#TODO(tim.simpson): Check that MySQL is not already installed.
|
|
self.status.begin_mysql_install()
|
|
self._install_mysql()
|
|
LOG.info(_("Generating root password..."))
|
|
admin_password = generate_random_password()
|
|
|
|
engine = create_engine("mysql://root:@localhost:3306", echo=True)
|
|
with LocalSqlClient(engine) as client:
|
|
self._generate_root_password(client)
|
|
self._remove_anonymous_user(client)
|
|
self._remove_remote_root_access(client)
|
|
self._create_admin_user(client, admin_password)
|
|
|
|
self.stop_mysql()
|
|
self._write_mycnf(memory_mb, admin_password)
|
|
self.start_mysql()
|
|
|
|
self.status.end_install_or_restart()
|
|
LOG.info(_("Dbaas install_and_secure complete."))
|
|
|
|
def _install_mysql(self):
|
|
"""Install mysql server. The current version is 5.1"""
|
|
LOG.debug(_("Installing mysql server"))
|
|
pkg.pkg_install(self.MYSQL_PACKAGE_VERSION, self.TIME_OUT)
|
|
LOG.debug(_("Finished installing mysql server"))
|
|
#TODO(rnirmal): Add checks to make sure the package got installed
|
|
|
|
def _enable_mysql_on_boot(self):
|
|
'''
|
|
# This works in Debian Squeeze, but Ubuntu Precise has other plans.
|
|
# Use update-rc.d to enable or disable mysql at boot.
|
|
# update-rc.d is idempotent; any substitute method should be, too.
|
|
flag = "enable" if enabled else "disable"
|
|
LOG.info("Setting mysql to '%s' in rc.d" % flag)
|
|
utils.execute_with_timeout("sudo", "update-rc.d", "mysql", flag)
|
|
'''
|
|
LOG.info("Enabling mysql on boot.")
|
|
conf = "/etc/init/mysql.conf"
|
|
command = "sudo sed -i '/^manual$/d' %(conf)s"
|
|
command = command % locals()
|
|
utils.execute_with_timeout(command, with_shell=True)
|
|
|
|
def _disable_mysql_on_boot(self):
|
|
LOG.info("Disabling mysql on boot.")
|
|
conf = "/etc/init/mysql.conf"
|
|
command = '''sudo sh -c "echo manual >> %(conf)s"'''
|
|
command = command % locals()
|
|
utils.execute_with_timeout(command, with_shell=True)
|
|
|
|
def stop_mysql(self, update_db=False, do_not_start_on_reboot=False):
|
|
LOG.info(_("Stopping mysql..."))
|
|
if do_not_start_on_reboot:
|
|
self._disable_mysql_on_boot()
|
|
utils.execute_with_timeout("sudo", "/etc/init.d/mysql", "stop")
|
|
if not self.status.wait_for_real_status_to_change_to(
|
|
rd_models.ServiceStatuses.SHUTDOWN,
|
|
self.state_change_wait_time, update_db):
|
|
LOG.error(_("Could not stop MySQL!"))
|
|
self.status.end_install_or_restart()
|
|
raise RuntimeError("Could not stop MySQL!")
|
|
|
|
def _remove_anonymous_user(self, client):
|
|
t = text(query.REMOVE_ANON)
|
|
client.execute(t)
|
|
|
|
def _remove_remote_root_access(self, client):
|
|
t = text(query.REMOVE_ROOT)
|
|
client.execute(t)
|
|
|
|
def restart(self):
|
|
try:
|
|
self.status.begin_mysql_restart()
|
|
self.stop_mysql()
|
|
self.start_mysql()
|
|
finally:
|
|
self.status.end_install_or_restart()
|
|
|
|
def _replace_mycnf_with_template(self, template_path, original_path):
|
|
LOG.debug("replacing the mycnf with template")
|
|
LOG.debug("template_path(%s) original_path(%s)"
|
|
% (template_path, original_path))
|
|
if os.path.isfile(template_path):
|
|
utils.execute_with_timeout(
|
|
"sudo", "mv", original_path,
|
|
"%(name)s.%(date)s" % {'name': original_path,
|
|
'date': date.today().isoformat()})
|
|
utils.execute_with_timeout("sudo", "cp", template_path,
|
|
original_path)
|
|
|
|
def _write_temp_mycnf_with_admin_account(self, original_file_path,
|
|
temp_file_path, password):
|
|
utils.execute_with_timeout("sudo", "chmod", "0711", MYSQL_BASE_DIR)
|
|
mycnf_file = open(original_file_path, 'r')
|
|
tmp_file = open(temp_file_path, 'w')
|
|
for line in mycnf_file:
|
|
tmp_file.write(line)
|
|
if "[client]" in line:
|
|
tmp_file.write("user\t\t= %s\n" % ADMIN_USER_NAME)
|
|
tmp_file.write("password\t= %s\n" % password)
|
|
mycnf_file.close()
|
|
tmp_file.close()
|
|
|
|
def wipe_ib_logfiles(self):
|
|
"""Destroys the iblogfiles.
|
|
|
|
If for some reason the selected log size in the conf changes from the
|
|
current size of the files MySQL will fail to start, so we delete the
|
|
files to be safe.
|
|
"""
|
|
LOG.info(_("Wiping ib_logfiles..."))
|
|
for index in range(2):
|
|
try:
|
|
utils.execute_with_timeout("sudo", "rm", "%s/ib_logfile%d"
|
|
% (MYSQL_BASE_DIR, index))
|
|
except ProcessExecutionError as pe:
|
|
# On restarts, sometimes these are wiped. So it can be a race
|
|
# to have MySQL start up before it's restarted and these have
|
|
# to be deleted. That's why its ok if they aren't found.
|
|
LOG.error("Could not delete logfile!")
|
|
LOG.error(pe)
|
|
if "No such file or directory" not in str(pe):
|
|
raise
|
|
|
|
def _write_mycnf(self, update_memory_mb, admin_password):
|
|
"""
|
|
Install the set of mysql my.cnf templates from dbaas-mycnf package.
|
|
The package generates a template suited for the current
|
|
container flavor. Update the os_admin user and password
|
|
to the my.cnf file for direct login from localhost
|
|
"""
|
|
LOG.info(_("Writing my.cnf templates."))
|
|
if admin_password is None:
|
|
admin_password = get_auth_password()
|
|
|
|
# As of right here, the admin_password contains the password to be
|
|
# applied to the my.cnf file, whether it was there before (and we
|
|
# passed it in) or we generated a new one just now (because we didn't
|
|
# find it).
|
|
|
|
LOG.debug(_("Installing my.cnf templates"))
|
|
pkg.pkg_install("dbaas-mycnf", self.TIME_OUT)
|
|
|
|
LOG.info(_("Replacing my.cnf with template."))
|
|
template_path = DBAAS_MYCNF % update_memory_mb
|
|
|
|
# replace my.cnf with template.
|
|
self._replace_mycnf_with_template(template_path, ORIG_MYCNF)
|
|
|
|
LOG.info(_("Writing new temp my.cnf."))
|
|
self._write_temp_mycnf_with_admin_account(ORIG_MYCNF, TMP_MYCNF,
|
|
admin_password)
|
|
# permissions work-around
|
|
LOG.info(_("Moving tmp into final."))
|
|
utils.execute_with_timeout("sudo", "mv", TMP_MYCNF, FINAL_MYCNF)
|
|
LOG.info(_("Removing original my.cnf."))
|
|
utils.execute_with_timeout("sudo", "rm", ORIG_MYCNF)
|
|
LOG.info(_("Symlinking final my.cnf."))
|
|
utils.execute_with_timeout("sudo", "ln", "-s", FINAL_MYCNF, ORIG_MYCNF)
|
|
self.wipe_ib_logfiles()
|
|
|
|
def start_mysql(self, update_db=False):
|
|
LOG.info(_("Starting mysql..."))
|
|
# This is the site of all the trouble in the restart tests.
|
|
# Essentially what happens is thaty mysql start fails, but does not
|
|
# die. It is then impossible to kill the original, so
|
|
|
|
self._enable_mysql_on_boot()
|
|
|
|
try:
|
|
utils.execute_with_timeout("sudo", "/etc/init.d/mysql", "start")
|
|
except ProcessExecutionError:
|
|
# If it won't start, but won't die either, kill it by hand so we
|
|
# don't let a rouge process wander around.
|
|
try:
|
|
utils.execute_with_timeout("sudo", "pkill", "-9", "mysql")
|
|
except ProcessExecutionError, p:
|
|
LOG.error("Error killing stalled mysql start command.")
|
|
LOG.error(p)
|
|
# There's nothing more we can do...
|
|
raise RuntimeError("Can't start MySQL!")
|
|
|
|
if not self.status.wait_for_real_status_to_change_to(
|
|
rd_models.ServiceStatuses.RUNNING,
|
|
self.state_change_wait_time, update_db):
|
|
LOG.error(_("Start up of MySQL failed!"))
|
|
self.status.end_install_or_restart()
|
|
raise RuntimeError("Could not start MySQL!")
|
|
|
|
def start_mysql_with_conf_changes(self, updated_memory_mb):
|
|
LOG.info(_("Starting mysql with conf changes to memory(%s)...")
|
|
% updated_memory_mb)
|
|
LOG.info(_("inside the guest - self.status.is_mysql_running(%s)...")
|
|
% self.status.is_mysql_running)
|
|
if self.status.is_mysql_running:
|
|
LOG.error(_("Cannot execute start_mysql_with_conf_changes because "
|
|
"MySQL state == %s!") % self.status)
|
|
raise RuntimeError("MySQL not stopped.")
|
|
LOG.info(_("Initiating config."))
|
|
self._write_mycnf(updated_memory_mb, None)
|
|
self.start_mysql(True)
|
|
|
|
def is_installed(self):
|
|
#(cp16net) could raise an exception, does it need to be handled here?
|
|
version = pkg.pkg_version(self.MYSQL_PACKAGE_VERSION)
|
|
return not version is None
|
|
|
|
|
|
class Interrogator(object):
|
|
def get_filesystem_volume_stats(self, fs_path):
|
|
out, err = utils.execute_with_timeout(
|
|
"stat",
|
|
"-f",
|
|
"-t",
|
|
fs_path)
|
|
if err:
|
|
LOG.err(err)
|
|
raise RuntimeError("Filesystem not found (%s) : %s"
|
|
% (fs_path, err))
|
|
stats = out.split()
|
|
output = {}
|
|
output['block_size'] = int(stats[4])
|
|
output['total_blocks'] = int(stats[6])
|
|
output['free_blocks'] = int(stats[7])
|
|
output['total'] = int(stats[6]) * int(stats[4])
|
|
output['free'] = int(stats[7]) * int(stats[4])
|
|
output['used'] = int(output['total']) - int(output['free'])
|
|
return output
|