Configuration for Testing Live Migration
[releng/builder.git] / jjb / integration / integration-deploy-openstack-run-test.sh
1 #!/bin/bash
2 # Activate robotframework virtualenv
3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
4 # script.
5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
6 source ${ROBOT_VENV}/bin/activate
7 source /tmp/common-functions.sh ${BUNDLEFOLDER}
8
9 PYTHON="${ROBOT_VENV}/bin/python"
10 SSH="ssh -t -t"
11 ADMIN_PASSWORD="admin"
12 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
13
14 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
15 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
16 $PYTHON -m pip install --upgrade urllib3
17 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
18                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
19                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
20
21 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
22 cd ${WORKSPACE}/test
23 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s' -n10
24 cd -
25
26 cat << EOF
27 #################################################
28 ##         Deploy Openstack 3-node             ##
29 #################################################
30 EOF
31
32 # Catch command errors and collect logs.
33 # This ensures logs are collected when script commands fail rather than simply exiting.
34 function trap_handler() {
35     local prog="$0"
36     local lastline="$1"
37     local lasterr="$2"
38     echo "trap_hanlder: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
39     echo "trap_handler: command: ${BASH_COMMAND}"
40     collect_logs
41     exit 1
42 } # trap_handler()
43
44 trap 'trap_handler ${LINENO} ${$?}' ERR
45
46 function print_job_parameters() {
47     cat << EOF
48
49 Job parameters:
50 DISTROBRANCH: ${DISTROBRANCH}
51 DISTROSTREAM: ${DISTROSTREAM}
52 BUNDLE_URL: ${BUNDLE_URL}
53 CONTROLLERFEATURES: ${CONTROLLERFEATURES}
54 CONTROLLERDEBUGMAP: ${CONTROLLERDEBUGMAP}
55 TESTPLAN: ${TESTPLAN}
56 SUITES: ${SUITES}
57 PATCHREFSPEC: ${PATCHREFSPEC}
58 OPENSTACK_BRANCH: ${OPENSTACK_BRANCH}
59 DEVSTACK_HASH: ${DEVSTACK_HASH}
60 ODL_ML2_DRIVER_REPO: ${ODL_ML2_DRIVER_REPO}
61 ODL_ML2_BRANCH: ${ODL_ML2_BRANCH}
62 ODL_ML2_DRIVER_VERSION: ${ODL_ML2_DRIVER_VERSION}
63 ODL_ML2_PORT_BINDING: ${ODL_ML2_PORT_BINDING}
64 DEVSTACK_KUBERNETES_PLUGIN_REPO: ${DEVSTACK_KUBERNETES_PLUGIN_REPO}
65 DEVSTACK_LBAAS_PLUGIN_REPO: ${DEVSTACK_LBAAS_PLUGIN_REPO}
66 DEVSTACK_NETWORKING_SFC_PLUGIN_REPO: ${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO}
67 ODL_ENABLE_L3_FWD: ${ODL_ENABLE_L3_FWD}
68 IPSEC_VXLAN_TUNNELS_ENABLED: ${IPSEC_VXLAN_TUNNELS_ENABLED}
69 PUBLIC_BRIDGE: ${PUBLIC_BRIDGE}
70 ENABLE_HAPROXY_FOR_NEUTRON: ${ENABLE_HAPROXY_FOR_NEUTRON}
71 ENABLE_OS_SERVICES: ${ENABLE_OS_SERVICES}
72 ENABLE_OS_COMPUTE_SERVICES: ${ENABLE_OS_COMPUTE_SERVICES}
73 ENABLE_OS_NETWORK_SERVICES: ${ENABLE_OS_NETWORK_SERVICES}
74 ENABLE_OS_PLUGINS: ${ENABLE_OS_PLUGINS}
75 DISABLE_OS_SERVICES: ${DISABLE_OS_SERVICES}
76 TENANT_NETWORK_TYPE: ${TENANT_NETWORK_TYPE}
77 SECURITY_GROUP_MODE: ${SECURITY_GROUP_MODE}
78 PUBLIC_PHYSICAL_NETWORK: ${PUBLIC_PHYSICAL_NETWORK}
79 ENABLE_NETWORKING_L2GW: ${ENABLE_NETWORKING_L2GW}
80 CREATE_INITIAL_NETWORKS: ${CREATE_INITIAL_NETWORKS}
81 LBAAS_SERVICE_PROVIDER: ${LBAAS_SERVICE_PROVIDER}
82 NUM_OPENSTACK_SITES: ${NUM_OPENSTACK_SITES}
83 ODL_SFC_DRIVER: ${ODL_SFC_DRIVER}
84 ODL_SNAT_MODE: ${ODL_SNAT_MODE}
85
86 EOF
87 }
88
89 print_job_parameters
90
91 function create_etc_hosts() {
92     NODE_IP=$1
93     CTRL_IP=$2
94     : > ${WORKSPACE}/hosts_file
95     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`
96     do
97         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
98         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
99            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
100            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
101         else
102            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
103            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
104         fi
105     done
106
107     echo "Created the hosts file for ${NODE_IP}:"
108     cat ${WORKSPACE}/hosts_file
109 } # create_etc_hosts()
110
111 #function to install Openstack Clients for Testing
112 #This will pull the latest versions compatiable with the
113 # openstack release
114 function install_openstack_clients_in_robot_vm() {
115     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
116     local os_plugins
117     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
118     for plugin_name in $os_plugins; do
119         if [ "$plugin_name" == "networking-sfc" ]; then
120             packages+=("networking-sfc")
121         fi
122     done
123     openstack_version=$(echo ${OPENSTACK_BRANCH} | cut -d/ -f2)
124     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
125     if [ "${openstack_version}" == "master" ]; then
126        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
127     fi
128     for package in ${packages[*]}; do
129        echo "Get the current support version of the package ${package}"
130        wget https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt -O /tmp/constraints.txt 2>/dev/null
131        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
132        $PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt
133        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
134        $PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt
135     done
136
137     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
138         #networking-l2gw is not officially available in any release yet. Gettting the latest stable version.
139         $PYTHON -m pip install networking-l2gw==11.0.0
140     fi
141 }
142
143 function is_openstack_feature_enabled() {
144     local feature=$1
145     for enabled_feature in $(csv2ssv ${ENABLE_OS_SERVICES})
146     do
147         if [ "${enabled_feature}" == "${feature}" ]; then
148            echo 1
149            return
150         fi
151     done
152     echo 0
153 }
154
155 function fix_libvirt_version_n_cpu_pike() {
156     local ip=$1
157     ${SSH} ${ip} "
158         cd /opt/stack;
159         git clone https://git.openstack.org/openstack/requirements;
160         cd requirements;
161         git checkout stable/pike;
162         sed -i s/libvirt-python===3.5.0/libvirt-python===4.2.0/ upper-constraints.txt
163    "
164 }
165
166 #Function to install rdo release
167 # This will help avoiding installing wrong version of packages which causes
168 # functionality failures
169 function install_rdo_release() {
170     local ip=$1
171     case ${OPENSTACK_BRANCH} in
172        *pike*)
173           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-pike/rdo-release-pike-1.noarch.rpm"
174           ;;
175
176        *queens*)
177           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
178           ;;
179
180        master)
181           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
182           ;;
183     esac
184 }
185
186 # Involves just setting up the shared directory
187 function setup_live_migration_control() {
188     local control_ip=$1
189     printf "${control_ip}:Setup directory Share with NFS"
190     cat > ${WORKSPACE}/setup_live_migration_control.sh << EOF
191 sudo mkdir --mode=777 /vm_instances
192 sudo chown -R jenkins:jenkins /vm_instances
193 sudo yum install -y nfs-utils
194 printf "/vm_instances *(rw,no_root_squash)" | sudo tee -a /etc/exports
195 sudo systemctl start rpcbind nfs-server
196 sudo exportfs
197 EOF
198     scp ${WORKSPACE}/setup_live_migration_control.sh ${control_ip}:/tmp/setup_live_migration_control.sh
199     ssh ${control_ip} "bash /tmp/setup_live_migration_control.sh"
200 }
201
202 # Involves mounting the share and configuring the libvirtd
203 function setup_live_migration_compute() {
204     local compute_ip=$1
205     local control_ip=$2
206     printf "${compute_ip}:Mount Shared directory from ${control_ip}"
207     printf "${compute_ip}:Configure libvirt in listen mode"
208     cat >  ${WORKSPACE}/setup_live_migration_compute.sh << EOF
209 sudo yum install -y libvirt libvirt-devel nfs-utils
210 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tls 0
211 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tcp 1
212 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' auth_tcp '"none"'
213 sudo crudini --verbose  --set --inplace /etc/sysconfig/libvirtd '' LIBVIRTD_ARGS '"--listen"'
214 sudo mkdir --mode=777 -p /var/instances
215 sudo chown -R jenkins:jenkins /var/instances
216 sudo chmod o+x /var/instances
217 sudo systemctl start rpcbind
218 sudo mount -t nfs ${control_ip}:/vm_instances /var/instances
219 sudo mount
220 EOF
221     scp ${WORKSPACE}/setup_live_migration_compute.sh ${compute_ip}:/tmp/setup_live_migration_compute.sh
222     ssh ${compute_ip} "bash /tmp/setup_live_migration_compute.sh"
223 }
224
225 # Add enable_services and disable_services to the local.conf
226 function add_os_services() {
227     local core_services=$1
228     local enable_services=$2
229     local disable_services=$3
230     local local_conf_file_name=$4
231     local enable_network_services=$5
232
233     cat >> ${local_conf_file_name} << EOF
234 enable_service $(csv2ssv "${core_services}")
235 EOF
236     if [ -n "${enable_services}" ]; then
237         cat >> ${local_conf_file_name} << EOF
238 enable_service $(csv2ssv "${enable_services}")
239 EOF
240     fi
241     if [ -n "${disable_services}" ]; then
242         cat >> ${local_conf_file_name} << EOF
243 disable_service $(csv2ssv "${disable_services}")
244 EOF
245     fi
246     if [ -n "${enable_network_services}" ]; then
247         cat >> ${local_conf_file_name} << EOF
248 enable_service $(csv2ssv "${enable_network_services}")
249 EOF
250     fi
251 }
252
253 function create_control_node_local_conf() {
254     HOSTIP=$1
255     MGRIP=$2
256     ODL_OVS_MANAGERS="$3"
257
258     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
259     cat > ${local_conf_file_name} << EOF
260 [[local|localrc]]
261 LOGFILE=stack.sh.log
262 LOG_COLOR=False
263 USE_SYSTEMD=True
264 RECLONE=${RECLONE}
265 # Increase the wait used by stack to poll for services
266 SERVICE_TIMEOUT=120
267
268 disable_all_services
269 EOF
270
271     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
272
273     cat >> ${local_conf_file_name} << EOF
274
275 HOST_IP=${HOSTIP}
276 SERVICE_HOST=\$HOST_IP
277 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
278 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
279
280 ODL_MODE=manual
281 ODL_MGR_IP=${MGRIP}
282 ODL_PORT=${ODL_PORT}
283 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
284 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
285
286 MYSQL_HOST=\$SERVICE_HOST
287 RABBIT_HOST=\$SERVICE_HOST
288 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
289 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
290 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
291
292 ADMIN_PASSWORD=${ADMIN_PASSWORD}
293 DATABASE_PASSWORD=${ADMIN_PASSWORD}
294 RABBIT_PASSWORD=${ADMIN_PASSWORD}
295 SERVICE_TOKEN=${ADMIN_PASSWORD}
296 SERVICE_PASSWORD=${ADMIN_PASSWORD}
297
298 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
299 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
300 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
301 ETCD_PORT=2379
302 EOF
303     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
304         cat >> ${local_conf_file_name} << EOF
305 ENABLE_TENANT_TUNNELS=false
306 EOF
307     fi
308
309     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
310         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
311     fi
312
313     IFS=,
314     for plugin_name in ${ENABLE_OS_PLUGINS}; do
315         if [ "$plugin_name" == "networking-odl" ]; then
316             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
317         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
318             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
319         elif [ "$plugin_name" == "neutron-lbaas" ]; then
320             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
321             IS_LBAAS_PLUGIN_ENABLED="yes"
322         elif [ "$plugin_name" == "networking-sfc" ]; then
323             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
324         else
325             echo "Error: Invalid plugin $plugin_name, unsupported"
326             continue
327         fi
328         cat >> ${local_conf_file_name} << EOF
329
330 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
331 EOF
332     done
333     unset IFS
334
335     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
336         cat >> ${local_conf_file_name} << EOF
337
338 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
339 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
340 EOF
341     fi
342
343     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
344         cat >> ${local_conf_file_name} << EOF
345
346 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
347 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
348 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
349 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
350 EOF
351
352         if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
353            SERVICE_PLUGINS="odl-router_v2"
354         else
355            SERVICE_PLUGINS="odl-router"
356         fi
357         if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
358             SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
359         fi
360         if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
361             SERVICE_PLUGINS+=", lbaasv2"
362         fi
363     fi #check for ODL_ENABLE_L3_FWD
364
365     cat >> ${local_conf_file_name} << EOF
366
367 [[post-config|\$NEUTRON_CONF]]
368 [DEFAULT]
369 service_plugins = ${SERVICE_PLUGINS}
370 log_dir = /opt/stack/logs
371
372 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
373 [agent]
374 minimize_polling=True
375
376 [ml2]
377 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
378 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
379 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
380 path_mtu = 1458
381
382 [[post-config|/etc/neutron/dhcp_agent.ini]]
383 [DEFAULT]
384 force_metadata = True
385 enable_isolated_metadata = True
386 log_dir = /opt/stack/logs
387
388 [[post-config|/etc/nova/nova.conf]]
389 [DEFAULT]
390 force_config_drive = False
391 force_raw_images = False
392 log_dir = /opt/stack/logs
393
394 [scheduler]
395 discover_hosts_in_cells_interval = 30
396 EOF
397
398     echo "Control local.conf created:"
399     cat ${local_conf_file_name}
400 } # create_control_node_local_conf()
401
402 function create_compute_node_local_conf() {
403     HOSTIP=$1
404     SERVICEHOST=$2
405     MGRIP=$3
406     ODL_OVS_MANAGERS="$4"
407
408     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
409     cat > ${local_conf_file_name} << EOF
410 [[local|localrc]]
411 LOGFILE=stack.sh.log
412 LOG_COLOR=False
413 USE_SYSTEMD=True
414 RECLONE=${RECLONE}
415 # Increase the wait used by stack to poll for the nova service on the control node
416 NOVA_READY_TIMEOUT=1800
417
418 disable_all_services
419 EOF
420
421     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
422
423     cat >> ${local_conf_file_name} << EOF
424 HOST_IP=${HOSTIP}
425 SERVICE_HOST=${SERVICEHOST}
426 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
427
428 ODL_MODE=manual
429 ODL_MGR_IP=${MGRIP}
430 ODL_PORT=${ODL_PORT}
431 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
432 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
433
434 Q_HOST=\$SERVICE_HOST
435 MYSQL_HOST=\$SERVICE_HOST
436 RABBIT_HOST=\$SERVICE_HOST
437 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
438 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
439 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
440
441 ADMIN_PASSWORD=${ADMIN_PASSWORD}
442 DATABASE_PASSWORD=${ADMIN_PASSWORD}
443 RABBIT_PASSWORD=${ADMIN_PASSWORD}
444 SERVICE_TOKEN=${ADMIN_PASSWORD}
445 SERVICE_PASSWORD=${ADMIN_PASSWORD}
446 EOF
447
448     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
449         cat >> ${local_conf_file_name} << EOF
450
451 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
452 EOF
453     fi
454
455     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
456         cat >> ${local_conf_file_name} << EOF
457
458 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
459 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
460 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
461 Q_L3_ENABLED=True
462 ODL_L3=${ODL_L3}
463 EOF
464     fi
465
466     cat >> ${local_conf_file_name} << EOF
467
468 [[post-config|/etc/nova/nova.conf]]
469 [api]
470 auth_strategy = keystone
471 [DEFAULT]
472 use_neutron = True
473 force_raw_images = False
474 log_dir = /opt/stack/logs
475 [libvirt]
476 live_migration_uri = qemu+tcp://%s/system
477 virt_type = qemu
478 EOF
479
480     echo "Compute local.conf created:"
481     cat ${local_conf_file_name}
482 } # create_compute_node_local_conf()
483
484 function configure_haproxy_for_neutron_requests() {
485     MGRIP=$1
486     # shellcheck disable=SC2206
487     ODL_IPS=(${2//,/ })
488
489     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
490 sudo systemctl stop firewalld
491 sudo yum -y install policycoreutils-python haproxy
492 EOF
493
494 cat > ${WORKSPACE}/haproxy.cfg << EOF
495 global
496   daemon
497   group  haproxy
498   log  /dev/log local0
499   maxconn  20480
500   pidfile  /tmp/haproxy.pid
501   user  haproxy
502
503 defaults
504   log  global
505   maxconn  4096
506   mode  tcp
507   retries  3
508   timeout  http-request 10s
509   timeout  queue 1m
510   timeout  connect 10s
511   timeout  client 1m
512   timeout  server 1m
513   timeout  check 10s
514
515 listen opendaylight
516   bind ${MGRIP}:8080
517   balance source
518
519 listen opendaylight_rest
520   bind ${MGRIP}:8181
521   balance source
522
523 listen opendaylight_websocket
524   bind ${MGRIP}:8185
525   balance source
526
527 EOF
528
529     odlindex=1
530     for odlip in ${ODL_IPS[*]}; do
531         sed -i "/listen opendaylight$/a server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
532         sed -i "/listen opendaylight_rest$/a server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
533         sed -i "/listen opendaylight_websocket$/a server controller-websocket-${odlindex} ${odlip}:8185 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
534         odlindex=$((odlindex+1))
535     done
536
537
538     echo "Dump haproxy.cfg"
539     cat ${WORKSPACE}/haproxy.cfg
540
541     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
542 sudo chown haproxy:haproxy /tmp/haproxy.cfg
543 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
544 sudo /usr/sbin/semanage permissive -a haproxy_t
545 sudo systemctl restart haproxy
546 sleep 3
547 sudo netstat -tunpl
548 sudo systemctl status haproxy
549 true
550 EOF
551
552     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
553     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
554     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
555     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
556     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
557 } # configure_haproxy_for_neutron_requests()
558
559 # Collect the list of files on the hosts
560 function collect_files() {
561     local -r ip=$1
562     local -r folder=$2
563     finddir=/tmp/finder
564     ${SSH} ${ip} "mkdir -p ${finddir}"
565     ${SSH} ${ip} "sudo find /etc > ${finddir}/find.etc.txt"
566     ${SSH} ${ip} "sudo find /opt/stack > ${finddir}/find.opt.stack.txt"
567     ${SSH} ${ip} "sudo find /var > ${finddir}/find2.txt"
568     ${SSH} ${ip} "sudo find /var > ${finddir}/find.var.txt"
569     ${SSH} ${ip} "sudo tar -cf - -C /tmp finder | xz -T 0 > /tmp/find.tar.xz"
570     scp ${ip}:/tmp/find.tar.xz ${folder}
571     mkdir -p ${finddir}
572     rsync --rsync-path="sudo rsync" --list-only -arvhe ssh ${ip}:/etc/ > ${finddir}/rsync.etc.txt
573     rsync --rsync-path="sudo rsync" --list-only -arvhe ssh ${ip}:/opt/stack/ > ${finddir}/rsync.opt.stack.txt
574     rsync --rsync-path="sudo rsync" --list-only -arvhe ssh ${ip}:/var/ > ${finddir}/rsync.var.txt
575     tar -cf - -C /tmp finder | xz -T 0 > /tmp/rsync.tar.xz
576     cp /tmp/rsync.tar.xz ${folder}
577 }
578
579 # List of extra services to extract from journalctl
580 # Add new services on a separate line, in alpha order, add \ at the end
581 extra_services_cntl=" \
582     dnsmasq.service \
583     httpd.service \
584     libvirtd.service \
585     openvswitch.service \
586     ovs-vswitchd.service \
587     ovsdb-server.service \
588     rabbitmq-server.service \
589 "
590
591 extra_services_cmp=" \
592     libvirtd.service \
593     openvswitch.service \
594     ovs-vswitchd.service \
595     ovsdb-server.service \
596 "
597
598 # Collect the logs for the openstack services
599 # First get all the services started by devstack which would have devstack@ as a prefix
600 # Next get all the extra services
601 function collect_openstack_logs() {
602     local -r ip=${1}
603     local -r folder=${2}
604     local -r node_type=${3}
605     local oslogs="${folder}/oslogs"
606
607     printf "collect_openstack_logs for ${node_type} node: ${ip} into ${oslogs}\n"
608     rm -rf ${oslogs}
609     mkdir -p ${oslogs}
610     # There are always some logs in /opt/stack/logs and this also covers the
611     # pre-queens branches which always use /opt/stack/logs
612     rsync -avhe ssh ${ip}:/opt/stack/logs/* ${oslogs} # rsync to prevent copying of symbolic links
613
614     # Starting with queens break out the logs from journalctl
615     if [ "${OPENSTACK_BRANCH}" = "stable/queens" ]; then
616         cat > ${WORKSPACE}/collect_openstack_logs.sh << EOF
617 extra_services_cntl="${extra_services_cntl}"
618 extra_services_cmp="${extra_services_cmp}"
619
620 function extract_from_journal() {
621     local -r services=\${1}
622     local -r folder=\${2}
623     local -r node_type=\${3}
624     printf "extract_from_journal folder: \${folder}, services: \${services}\n"
625     for service in \${services}; do
626         # strip anything before @ and anything after .
627         # devstack@g-api.service will end as g-api
628         service_="\${service#*@}"
629         service_="\${service_%.*}"
630         sudo journalctl -u "\${service}" > "\${folder}/\${service_}.log"
631     done
632 }
633
634 rm -rf /tmp/oslogs
635 mkdir -p /tmp/oslogs
636 systemctl list-unit-files --all > /tmp/oslogs/systemctl.units.log 2>&1
637 svcs=\$(grep devstack@ /tmp/oslogs/systemctl.units.log | awk '{print \$1}')
638 extract_from_journal "\${svcs}" "/tmp/oslogs"
639 if [ "\${node_type}" = "control" ]; then
640     extract_from_journal "\${extra_services_cntl}" "/tmp/oslogs"
641 else
642     extract_from_journal "\${extra_services_cmp}" "/tmp/oslogs"
643 fi
644 ls -al /tmp/oslogs
645 EOF
646         printf "collect_openstack_logs for ${node_type} node: ${ip} into ${oslogs}, executing script\n"
647         cat ${WORKSPACE}/collect_openstack_logs.sh
648         scp ${WORKSPACE}/collect_openstack_logs.sh ${ip}:/tmp
649         ${SSH} ${ip} "bash /tmp/collect_openstack_logs.sh > /tmp/collect_openstack_logs.log 2>&1"
650         rsync -avhe ssh ${ip}:/tmp/oslogs/* ${oslogs}
651         scp ${ip}:/tmp/collect_openstack_logs.log ${oslogs}
652     fi
653 }
654
655 function collect_logs() {
656     set +e  # We do not want to create red dot just because something went wrong while fetching logs.
657
658     cat > extra_debug.sh << EOF
659 echo -e "/usr/sbin/lsmod | /usr/bin/grep openvswitch\n"
660 /usr/sbin/lsmod | /usr/bin/grep openvswitch
661 echo -e "\nsudo grep ct_ /var/log/openvswitch/ovs-vswitchd.log\n"
662 sudo grep "Datapath supports" /var/log/openvswitch/ovs-vswitchd.log
663 echo -e "\nsudo netstat -punta\n"
664 sudo netstat -punta
665 echo -e "\nsudo getenforce\n"
666 sudo getenforce
667 echo -e "\nsudo systemctl status httpd\n"
668 sudo systemctl status httpd
669 echo -e "\nenv\n"
670 env
671 source /opt/stack/devstack/openrc admin admin
672 echo -e "\nenv after openrc\n"
673 env
674 echo -e "\nsudo du -hs /opt/stack"
675 sudo du -hs /opt/stack
676 echo -e "\nsudo mount"
677 sudo mount
678 echo -e "\ndmesg -T > /tmp/dmesg.log"
679 dmesg -T > /tmp/dmesg.log
680 echo -e "\njournalctl > /tmp/journalctl.log\n"
681 sudo journalctl > /tmp/journalctl.log
682 echo -e "\novsdb-tool -mm show-log > /tmp/ovsdb-tool.log"
683 ovsdb-tool -mm show-log > /tmp/ovsdb-tool.log
684 EOF
685
686     # Since this log collection work is happening before the archive build macro which also
687     # creates the ${WORKSPACE}/archives dir, we have to do it here first.  The mkdir in the
688     # archives build step will essentially be a noop.
689     mkdir -p ${WORKSPACE}/archives
690
691     mv /tmp/changes.txt ${WORKSPACE}/archives
692     mv ${WORKSPACE}/rabbit.txt ${WORKSPACE}/archives
693
694     sleep 5
695     # FIXME: Do not create .tar and gzip before copying.
696     for i in `seq 1 ${NUM_ODL_SYSTEM}`; do
697         CONTROLLERIP=ODL_SYSTEM_${i}_IP
698         echo "collect_logs: for opendaylight controller ip: ${!CONTROLLERIP}"
699         NODE_FOLDER="odl_${i}"
700         mkdir -p ${NODE_FOLDER}
701         echo "Lets's take the karaf thread dump again..."
702         ssh ${!CONTROLLERIP} "sudo ps aux" > ${WORKSPACE}/ps_after.log
703         pid=$(grep org.apache.karaf.main.Main ${WORKSPACE}/ps_after.log | grep -v grep | tr -s ' ' | cut -f2 -d' ')
704         echo "karaf main: org.apache.karaf.main.Main, pid:${pid}"
705         ssh ${!CONTROLLERIP} "jstack ${pid}" > ${WORKSPACE}/karaf_${i}_${pid}_threads_after.log || true
706         echo "killing karaf process..."
707         ${SSH} "${!CONTROLLERIP}" bash -c 'ps axf | grep karaf | grep -v grep | awk '"'"'{print "kill -9 " $1}'"'"' | sh'
708         ${SSH} ${!CONTROLLERIP} "sudo journalctl > /tmp/journalctl.log"
709         scp ${!CONTROLLERIP}:/tmp/journalctl.log ${NODE_FOLDER}
710         ${SSH} ${!CONTROLLERIP} "dmesg -T > /tmp/dmesg.log"
711         scp ${!CONTROLLERIP}:/tmp/dmesg.log ${NODE_FOLDER}
712         ${SSH} ${!CONTROLLERIP} "tar -cf - -C /tmp/${BUNDLEFOLDER} etc | xz -T 0 > /tmp/etc.tar.xz"
713         scp ${!CONTROLLERIP}:/tmp/etc.tar.xz ${NODE_FOLDER}
714         ${SSH} ${!CONTROLLERIP} "cp -r /tmp/${BUNDLEFOLDER}/data/log /tmp/odl_log"
715         ${SSH} ${!CONTROLLERIP} "tar -cf /tmp/odl${i}_karaf.log.tar /tmp/odl_log/*"
716         scp ${!CONTROLLERIP}:/tmp/odl${i}_karaf.log.tar ${NODE_FOLDER}
717         ${SSH} ${!CONTROLLERIP} "tar -cf /tmp/odl${i}_zrpcd.log.tar /tmp/zrpcd.init.log"
718         scp ${!CONTROLLERIP}:/tmp/odl${i}_zrpcd.log.tar ${NODE_FOLDER}
719         tar -xvf ${NODE_FOLDER}/odl${i}_karaf.log.tar -C ${NODE_FOLDER} --strip-components 2 --transform s/karaf/odl${i}_karaf/g
720         grep "ROBOT MESSAGE\| ERROR " ${NODE_FOLDER}/odl${i}_karaf.log > ${NODE_FOLDER}/odl${i}_err.log
721         grep "ROBOT MESSAGE\| ERROR \| WARN \|Exception" \
722             ${NODE_FOLDER}/odl${i}_karaf.log > ${NODE_FOLDER}/odl${i}_err_warn_exception.log
723         # Print ROBOT lines and print Exception lines. For exception lines also print the previous line for context
724         sed -n -e '/ROBOT MESSAGE/P' -e '$!N;/Exception/P;D' ${NODE_FOLDER}/odl${i}_karaf.log > ${NODE_FOLDER}/odl${i}_exception.log
725         rm ${NODE_FOLDER}/odl${i}_karaf.log.tar
726         mv *_threads* ${NODE_FOLDER}
727         mv ps_* ${NODE_FOLDER}
728         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
729     done
730
731     print_job_parameters > ${WORKSPACE}/archives/params.txt
732
733     # Control Node
734     for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
735         OSIP=OPENSTACK_CONTROL_NODE_${i}_IP
736         echo "collect_logs: for openstack control node ip: ${!OSIP}"
737         NODE_FOLDER="control_${i}"
738         mkdir -p ${NODE_FOLDER}
739         scp extra_debug.sh ${!OSIP}:/tmp
740         ${SSH} ${!OSIP} "bash /tmp/extra_debug.sh > /tmp/extra_debug.log 2>&1"
741         scp ${!OSIP}:/etc/dnsmasq.conf ${NODE_FOLDER}
742         scp ${!OSIP}:/etc/keystone/keystone.conf ${NODE_FOLDER}
743         scp ${!OSIP}:/etc/keystone/keystone-uwsgi-admin.ini ${NODE_FOLDER}
744         scp ${!OSIP}:/etc/keystone/keystone-uwsgi-public.ini ${NODE_FOLDER}
745         scp ${!OSIP}:/etc/kuryr/kuryr.conf ${NODE_FOLDER}
746         scp ${!OSIP}:/etc/neutron/dhcp_agent.ini ${NODE_FOLDER}
747         scp ${!OSIP}:/etc/neutron/metadata_agent.ini ${NODE_FOLDER}
748         scp ${!OSIP}:/etc/neutron/neutron.conf ${NODE_FOLDER}
749         scp ${!OSIP}:/etc/neutron/neutron_lbaas.conf ${NODE_FOLDER}
750         scp ${!OSIP}:/etc/neutron/plugins/ml2/ml2_conf.ini ${NODE_FOLDER}
751         scp ${!OSIP}:/etc/neutron/services/loadbalancer/haproxy/lbaas_agent.ini ${NODE_FOLDER}
752         scp ${!OSIP}:/etc/nova/nova.conf ${NODE_FOLDER}
753         scp ${!OSIP}:/etc/nova/nova-api-uwsgi.ini ${NODE_FOLDER}
754         scp ${!OSIP}:/etc/nova/nova_cell1.conf ${NODE_FOLDER}
755         scp ${!OSIP}:/etc/nova/nova-cpu.conf ${NODE_FOLDER}
756         scp ${!OSIP}:/etc/nova/placement-uwsgi.ini ${NODE_FOLDER}
757         scp ${!OSIP}:/etc/openstack/clouds.yaml ${NODE_FOLDER}
758         scp ${!OSIP}:/opt/stack/devstack/.stackenv ${NODE_FOLDER}
759         scp ${!OSIP}:/opt/stack/devstack/nohup.out ${NODE_FOLDER}/stack.log
760         scp ${!OSIP}:/opt/stack/devstack/openrc ${NODE_FOLDER}
761         scp ${!OSIP}:/opt/stack/requirements/upper-constraints.txt ${NODE_FOLDER}
762         scp ${!OSIP}:/opt/stack/tempest/etc/tempest.conf ${NODE_FOLDER}
763         scp ${!OSIP}:/tmp/*.xz ${NODE_FOLDER}
764         scp ${!OSIP}:/tmp/dmesg.log ${NODE_FOLDER}
765         scp ${!OSIP}:/tmp/extra_debug.log ${NODE_FOLDER}
766         scp ${!OSIP}:/tmp/get_devstack.sh.txt ${NODE_FOLDER}
767         scp ${!OSIP}:/tmp/journalctl.log ${NODE_FOLDER}
768         scp ${!OSIP}:/tmp/ovsdb-tool.log ${NODE_FOLDER}
769         collect_files "${!OSIP}" "${NODE_FOLDER}"
770         ${SSH} ${!OSIP} "sudo tar -cf - -C /var/log rabbitmq | xz -T 0 > /tmp/rabbitmq.tar.xz "
771         scp ${!OSIP}:/tmp/rabbitmq.tar.xz ${NODE_FOLDER}
772         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/etc/hosts ${NODE_FOLDER}
773         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/usr/lib/systemd/system/haproxy.service ${NODE_FOLDER}
774         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/audit/audit.log ${NODE_FOLDER}
775         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/httpd/keystone_access.log ${NODE_FOLDER}
776         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/httpd/keystone.log ${NODE_FOLDER}
777         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/messages* ${NODE_FOLDER}
778         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/openvswitch/ovs-vswitchd.log ${NODE_FOLDER}
779         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/openvswitch/ovsdb-server.log ${NODE_FOLDER}
780         collect_openstack_logs "${!OSIP}" "${NODE_FOLDER}" "control"
781         mv local.conf_control_${!OSIP} ${NODE_FOLDER}/local.conf
782         # qdhcp files are created by robot tests and copied into /tmp/qdhcp during the test
783         tar -cf - -C /tmp qdhcp | xz -T 0 > /tmp/qdhcp.tar.xz
784         mv /tmp/qdhcp.tar.xz ${NODE_FOLDER}
785         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
786     done
787
788     # Compute Nodes
789     for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
790         OSIP=OPENSTACK_COMPUTE_NODE_${i}_IP
791         echo "collect_logs: for openstack compute node ip: ${!OSIP}"
792         NODE_FOLDER="compute_${i}"
793         mkdir -p ${NODE_FOLDER}
794         scp extra_debug.sh ${!OSIP}:/tmp
795         ${SSH} ${!OSIP} "bash /tmp/extra_debug.sh > /tmp/extra_debug.log 2>&1"
796         scp ${!OSIP}:/etc/nova/nova.conf ${NODE_FOLDER}
797         scp ${!OSIP}:/etc/nova/nova-cpu.conf ${NODE_FOLDER}
798         scp ${!OSIP}:/etc/openstack/clouds.yaml ${NODE_FOLDER}
799         scp ${!OSIP}:/opt/stack/devstack/.stackenv ${NODE_FOLDER}
800         scp ${!OSIP}:/opt/stack/devstack/nohup.out ${NODE_FOLDER}/stack.log
801         scp ${!OSIP}:/opt/stack/devstack/openrc ${NODE_FOLDER}
802         scp ${!OSIP}:/opt/stack/requirements/upper-constraints.txt ${NODE_FOLDER}
803         scp ${!OSIP}:/tmp/*.xz ${NODE_FOLDER}/
804         scp ${!OSIP}:/tmp/dmesg.log ${NODE_FOLDER}
805         scp ${!OSIP}:/tmp/extra_debug.log ${NODE_FOLDER}
806         scp ${!OSIP}:/tmp/get_devstack.sh.txt ${NODE_FOLDER}
807         scp ${!OSIP}:/tmp/journalctl.log ${NODE_FOLDER}
808         scp ${!OSIP}:/tmp/ovsdb-tool.log ${NODE_FOLDER}
809         collect_files "${!OSIP}" "${NODE_FOLDER}"
810         ${SSH} ${!OSIP} "sudo tar -cf - -C /var/log libvirt | xz -T 0 > /tmp/libvirt.tar.xz "
811         scp ${!OSIP}:/tmp/libvirt.tar.xz ${NODE_FOLDER}
812         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/etc/hosts ${NODE_FOLDER}
813         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/audit/audit.log ${NODE_FOLDER}
814         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/messages* ${NODE_FOLDER}
815         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/nova-agent.log ${NODE_FOLDER}
816         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/openvswitch/ovs-vswitchd.log ${NODE_FOLDER}
817         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/openvswitch/ovsdb-server.log ${NODE_FOLDER}
818         collect_openstack_logs "${!OSIP}" "${NODE_FOLDER}" "compute"
819         mv local.conf_compute_${!OSIP} ${NODE_FOLDER}/local.conf
820         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
821     done
822
823     # Tempest
824     DEVSTACK_TEMPEST_DIR="/opt/stack/tempest"
825     TESTREPO=".stestr"
826     TEMPEST_LOGS_DIR=${WORKSPACE}/archives/tempest
827     # Look for tempest test results in the $TESTREPO dir and copy if found
828     if ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "sudo sh -c '[ -f ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/0 ]'"; then
829         ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "for I in \$(sudo ls ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/ | grep -E '^[0-9]+$'); do sudo sh -c \"${DEVSTACK_TEMPEST_DIR}/.tox/tempest/bin/subunit-1to2 < ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/\${I} >> ${DEVSTACK_TEMPEST_DIR}/subunit_log.txt\"; done"
830         ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "sudo sh -c '${DEVSTACK_TEMPEST_DIR}/.tox/tempest/bin/python ${DEVSTACK_TEMPEST_DIR}/.tox/tempest/lib/python2.7/site-packages/os_testr/subunit2html.py ${DEVSTACK_TEMPEST_DIR}/subunit_log.txt ${DEVSTACK_TEMPEST_DIR}/tempest_results.html'"
831         mkdir -p ${TEMPEST_LOGS_DIR}
832         scp ${OPENSTACK_CONTROL_NODE_1_IP}:${DEVSTACK_TEMPEST_DIR}/tempest_results.html ${TEMPEST_LOGS_DIR}
833         scp ${OPENSTACK_CONTROL_NODE_1_IP}:${DEVSTACK_TEMPEST_DIR}/tempest.log ${TEMPEST_LOGS_DIR}
834     else
835         echo "tempest results not found in ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/0"
836     fi
837 } # collect_logs()
838
839 # Following three functions are debugging helpers when debugging devstack changes.
840 # Keeping them for now so we can simply call them when needed.
841 ctrlhn=""
842 comp1hn=""
843 comp2hn=""
844 function get_hostnames () {
845     set +e
846     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
847     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
848     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
849     ctrlhn=$(${SSH} ${ctrlip} "hostname")
850     comp1hn=$(${SSH} ${comp1ip} "hostname")
851     comp2hn=$(${SSH} ${comp2ip} "hostname")
852     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
853     set -e
854 }
855
856 function check_firewall() {
857     set +e
858     echo $-
859     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
860     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
861     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
862
863     echo "check_firewall on control"
864     ${SSH} ${ctrlip} "
865         sudo systemctl status firewalld
866         sudo systemctl -l status iptables
867         sudo iptables --line-numbers -nvL
868     " || true
869     echo "check_firewall on compute 1"
870     ${SSH} ${comp1ip} "
871         sudo systemctl status firewalld
872         sudo systemctl -l status iptables
873         sudo iptables --line-numbers -nvL
874     " || true
875     echo "check_firewall on compute 2"
876     ${SSH} ${comp2ip} "
877         sudo systemctl status firewalld
878         sudo systemctl -l status iptables
879         sudo iptables --line-numbers -nvL
880     " || true
881 }
882
883 function get_service () {
884     set +e
885     local iter=$1
886     #local idx=$2
887     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
888     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
889
890     #if [ ${idx} -eq 1 ]; then
891         if [ ${iter} -eq 1 ] || [ ${iter} -gt 16 ]; then
892             curl http://${ctrlip}:5000
893             curl http://${ctrlip}:35357
894             curl http://${ctrlip}/identity
895             ${SSH} ${ctrlip} "
896                 source /opt/stack/devstack/openrc admin admin;
897                 env
898                 openstack configuration show --unmask;
899                 openstack service list
900                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
901                 openstack hypervisor list;
902             " || true
903             check_firewall
904         fi
905     #fi
906     set -e
907 }
908
909 # Check if rabbitmq is ready by looking for a pid in it's status.
910 # The function returns the status of the grep command which callers can check.
911 function is_rabbitmq_ready() {
912     local -r ip=${1}
913     local grepfor="nova_cell1"
914     rm -f rabbit.txt
915     ${SSH} ${ip} "sudo rabbitmqctl list_vhosts" > rabbit.txt
916     grep ${grepfor} rabbit.txt
917 }
918
919 # retry the given command ($3) until success for a number of iterations ($1)
920 # sleeping ($2) between tries.
921 function retry() {
922     local -r -i max_tries=${1}
923     local -r -i sleep_time=${2}
924     local -r cmd=${3}
925     local -i retries=1
926     local -i rc=1
927     while true; do
928         echo "retry ${cmd}: attempt: ${retries}"
929         ${cmd}
930         rc=$?
931         if ((${rc} == 0)); then
932             break;
933         else
934             if ((${retries} == ${max_tries})); then
935                 break
936             else
937                 ((retries++))
938                 sleep ${sleep_time}
939             fi
940         fi
941     done
942     return ${rc}
943 }
944
945 # if we are using the new netvirt impl, as determined by the feature name
946 # odl-netvirt-openstack (note: old impl is odl-ovsdb-openstack) then we
947 # want PROVIDER_MAPPINGS to be used -- this should be fixed if we want to support
948 # external networks in legacy netvirt
949 if [[ ${CONTROLLERFEATURES} == *"odl-netvirt-openstack"* ]]; then
950   ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
951 else
952   ODL_PROVIDER_MAPPINGS=
953 fi
954
955 # if we are using the old netvirt impl, as determined by the feature name
956 # odl-ovsdb-openstack (note: new impl is odl-netvirt-openstack) then we
957 # want ODL_L3 to be True.  New impl wants it False
958 if [[ ${CONTROLLERFEATURES} == *"odl-ovsdb-openstack"* ]]; then
959     ODL_L3=True
960 else
961     ODL_L3=False
962 fi
963
964 RECLONE=False
965 ODL_PORT=8181
966
967 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
968 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
969 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
970 # collect performance stats
971 CORE_OS_CONTROL_SERVICES="dstat"
972 # Glance
973 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
974 # Keystone
975 CORE_OS_CONTROL_SERVICES+=",key"
976 # Nova - services to support libvirt
977 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
978 # ODL - services to connect to ODL
979 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
980 # Additional services
981 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
982
983 # collect performance stats
984 CORE_OS_COMPUTE_SERVICES="dstat"
985 # computes only need nova and odl
986 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
987
988 cat > ${WORKSPACE}/disable_firewall.sh << EOF
989 sudo systemctl stop firewalld
990 # Open these ports to match the tutorial vms
991 # http/https (80/443), samba (445), netbios (137,138,139)
992 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
993 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
994 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
995 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
996 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
997 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
998 sudo iptables-save > /etc/sysconfig/iptables
999 sudo systemctl restart iptables
1000 sudo iptables --line-numbers -nvL
1001 true
1002 EOF
1003
1004 cat > ${WORKSPACE}/get_devstack.sh << EOF
1005 sudo systemctl stop firewalld
1006 sudo yum install bridge-utils python-pip -y
1007 #sudo systemctl stop  NetworkManager
1008 #Disable NetworkManager and kill dhclient and dnsmasq
1009 sudo systemctl stop NetworkManager
1010 sudo killall dhclient
1011 sudo killall dnsmasq
1012 #Workaround for mysql failure
1013 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
1014 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
1015 sudo mv /tmp/hosts /etc/hosts
1016 sudo mkdir /opt/stack
1017 echo "Create RAM disk for /opt/stack"
1018 sudo mount -t tmpfs -o size=2G tmpfs /opt/stack
1019 sudo chmod 777 /opt/stack
1020 cd /opt/stack
1021 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
1022 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
1023 cd devstack
1024 if [ -n "${DEVSTACK_HASH}" ]; then
1025     echo "git checkout ${DEVSTACK_HASH}"
1026     git checkout ${DEVSTACK_HASH}
1027 fi
1028 echo "workaround: Restore NEUTRON_CREATE_INITIAL_NETWORKS flag"
1029 if [ "${OPENSTACK_BRANCH}" == "stable/queens" ]; then
1030     git config --local user.email jenkins@opendaylight.org
1031     git config --local user.name jenkins
1032     git fetch https://git.openstack.org/openstack-dev/devstack refs/changes/99/550499/1 && git cherry-pick FETCH_HEAD
1033 fi
1034 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
1035 echo
1036 echo "workaround: adjust wait from 60s to 1800s (30m)"
1037 sed -i 's/wait_for_compute 60/wait_for_compute 1800/g' /opt/stack/devstack/lib/nova
1038 # TODO: modify sleep 1 to sleep 60, search wait_for_compute, then first sleep 1
1039 # that would just reduce the number of logs in the compute stack.log
1040
1041 echo "workaround: do not upgrade openvswitch"
1042 sudo yum install -y yum-plugin-versionlock
1043 sudo yum versionlock add openvswitch
1044
1045 #Install qemu-img command in Control Node for Pike
1046 echo "Install qemu-img application"
1047 sudo yum install -y qemu-img
1048 EOF
1049
1050 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
1051 sudo nova-manage cell_v2 map_cell0
1052 sudo nova-manage cell_v2 simple_cell_setup
1053 sudo nova-manage db sync
1054 sudo nova-manage cell_v2 discover_hosts
1055 EOF
1056
1057 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
1058 compute_index=1
1059 odl_index=1
1060 os_node_list=()
1061 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
1062 ha_proxy_index=${os_interval}
1063
1064 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
1065     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1066         echo "Configure HAProxy"
1067         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
1068         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
1069         odl_index=$(((i - 1) * 3 + 1))
1070         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
1071         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
1072         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
1073         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
1074         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
1075         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
1076     else
1077         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
1078         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
1079         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
1080     fi
1081 done
1082
1083 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
1084
1085 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
1086     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
1087     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
1088     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
1089     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
1090     create_etc_hosts ${!CONTROLIP}
1091     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
1092     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
1093     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
1094     # affecting the stacking.
1095     #Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
1096     #Workaround Comment out creating initial Networks in lib/neutron
1097     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
1098     if [ "${ODL_ML2_BRANCH}" == "stable/queens" ]; then
1099        ssh ${!CONTROLIP} "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
1100        ssh ${!CONTROLIP} "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
1101     fi
1102     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
1103     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
1104     echo "Install rdo release to avoid incompatible Package versions"
1105     install_rdo_release ${!CONTROLIP}
1106     setup_live_migration_control ${!CONTROLIP}
1107     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
1108     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
1109     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
1110     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
1111     os_node_list+=("${!CONTROLIP}")
1112 done
1113
1114 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
1115 # if needed.
1116 # Let the control node get started to avoid a race condition where the computes start and try to access
1117 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
1118 # compute exits and does not attempt to restart.
1119 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
1120 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
1121 # one of the following errors is seen in the compute n-cpu.log:
1122 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
1123 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
1124 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
1125 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
1126 if [ ${NUM_OPENSTACK_COMPUTE_NODES} -gt 0 ]; then
1127     WAIT_FOR_RABBITMQ_MINUTES=60
1128     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
1129     set +e
1130     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
1131     rc=$?
1132     set -e
1133     if ((${rc} == 0)); then
1134       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
1135     else
1136       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
1137       collect_logs
1138       exit 1
1139     fi
1140 fi
1141
1142 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
1143     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
1144     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
1145     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
1146     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
1147     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
1148     scp ${WORKSPACE}/disable_firewall.sh "${!COMPUTEIP}:/tmp"
1149     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
1150     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
1151     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
1152     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
1153     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
1154     if [ "${ODL_ML2_BRANCH}" == "stable/pike" ]; then
1155         echo "Updating requirements for ${ODL_ML2_BRANCH}"
1156         echo "Workaround for libvirt-python failing installation"
1157         echo "Modify upper-constraints to use libvirt-python 4.2.0"
1158         fix_libvirt_version_n_cpu_pike ${!COMPUTEIP}
1159     fi
1160     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
1161     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
1162     echo "Install rdo release to avoid incompatible Package versions"
1163     install_rdo_release ${!COMPUTEIP}
1164     setup_live_migration_compute ${!COMPUTEIP} ${!CONTROLIP}
1165     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${COMPUTEIP}"
1166     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
1167     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
1168     os_node_list+=("${!COMPUTEIP}")
1169 done
1170
1171 echo "nodelist: ${os_node_list[*]}"
1172
1173 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
1174 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
1175 # the status polling.
1176 cat > ${WORKSPACE}/check_stacking.sh << EOF
1177 > /tmp/stack_progress
1178 ps -ef | grep "stack.sh" | grep -v grep
1179 ret=\$?
1180 if [ \${ret} -eq 1 ]; then
1181     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
1182     if [ \$? -eq 0 ]; then
1183         echo "Stacking Complete" > /tmp/stack_progress
1184     else
1185         echo "Stacking Failed" > /tmp/stack_progress
1186     fi
1187 elif [ \${ret} -eq 0 ]; then
1188     echo "Still Stacking" > /tmp/stack_progress
1189 fi
1190 EOF
1191
1192 # devstack debugging
1193 # get_hostnames
1194
1195 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
1196 iteration=0
1197 in_progress=1
1198 while [ ${in_progress} -eq 1 ]; do
1199     iteration=$(($iteration + 1))
1200     for index in "${!os_node_list[@]}"; do
1201         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
1202         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
1203         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
1204         scp ${os_node_list[index]}:/tmp/stack_progress .
1205         cat stack_progress
1206         stacking_status=`cat stack_progress`
1207         # devstack debugging
1208         # get_service "${iteration}" "${index}"
1209         if [ "$stacking_status" == "Still Stacking" ]; then
1210             continue
1211         elif [ "$stacking_status" == "Stacking Failed" ]; then
1212             echo "node $index ${os_node_list[index]}: stacking has failed"
1213             collect_logs
1214             exit 1
1215         elif [ "$stacking_status" == "Stacking Complete" ]; then
1216             echo "node $index ${os_node_list[index]}: stacking complete"
1217             unset 'os_node_list[index]'
1218             if  [ ${#os_node_list[@]} -eq 0 ]; then
1219                 in_progress=0
1220             fi
1221         fi
1222     done
1223     echo "sleep for a minute before the next check"
1224     sleep 60
1225     if [ ${iteration} -eq 60 ]; then
1226         echo "stacking has failed - took longer than 60m"
1227         collect_logs
1228         exit 1
1229     fi
1230 done
1231
1232 # Further configuration now that stacking is complete.
1233 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
1234 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
1235     echo "Configure the Control Node"
1236     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
1237     # Gather Compute IPs for the site
1238     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
1239         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
1240         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
1241         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
1242     done
1243
1244     echo "sleep for 60s and print hypervisor-list"
1245     sleep 60
1246     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
1247     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
1248     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
1249     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
1250     # is one less than the total number of openstack systems
1251     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
1252         expected_num_hypervisors=1
1253     else
1254         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
1255     fi
1256     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
1257     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
1258         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
1259         collect_logs
1260         exit 1
1261     fi
1262
1263     # upgrading pip, urllib3 and httplib2 so that tempest tests can be run on openstack control node
1264     # this needs to happen after devstack runs because it seems devstack is pulling in specific versions
1265     # of these libs that are not working for tempest.
1266     ${SSH} ${!CONTROLIP} "sudo pip install --upgrade pip"
1267     ${SSH} ${!CONTROLIP} "sudo pip install urllib3 --upgrade"
1268     ${SSH} ${!CONTROLIP} "sudo pip install httplib2 --upgrade"
1269
1270     # Gather Compute IPs for the site
1271     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
1272         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
1273         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
1274         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
1275     done
1276
1277     # External Network
1278     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
1279     # FIXME Should there be a unique gateway IP and devstack index for each site?
1280     devstack_index=1
1281     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
1282         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
1283         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
1284         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
1285     done
1286
1287     # ipsec support
1288     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
1289         # shellcheck disable=SC2206
1290         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
1291         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
1292             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
1293                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
1294                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
1295                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
1296                 ip1=${ALL_NODES[$inx_ip1]}
1297                 ip2=${ALL_NODES[$inx_ip2]}
1298                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1299                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1300                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1301                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1302
1303                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1304                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1305                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1306                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1307             done
1308         done
1309
1310         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
1311             echo "ip xfrm configuration for node $ip:"
1312             ${SSH} $ip "sudo ip xfrm policy list"
1313             ${SSH} $ip "sudo ip xfrm state list"
1314         done
1315     fi
1316
1317     # Control Node - PUBLIC_BRIDGE will act as the external router
1318     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
1319     EXTNET_GATEWAY_IP="10.10.10.250"
1320     EXTNET_INTERNET_IP="10.9.9.9"
1321     EXTNET_PNF_IP="10.10.10.253"
1322     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
1323
1324     # Control Node - external net PNF simulation
1325     ${SSH} ${!CONTROLIP} "
1326         sudo ip netns add pnf_ns;
1327         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
1328         sudo ip link set pnf_veth1 netns pnf_ns;
1329         sudo ip link set pnf_veth0 up;
1330         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
1331         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
1332     "
1333
1334     # Control Node - external net internet address simulation
1335     ${SSH} ${!CONTROLIP} "
1336         sudo ip tuntap add dev internet_tap mode tap;
1337         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
1338     "
1339
1340     # Computes
1341     compute_index=1
1342     for compute_ip in ${COMPUTE_IPS[*]}; do
1343         # Tunnel from controller to compute
1344         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
1345         ${SSH} ${!CONTROLIP} "
1346             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
1347         "
1348         # Tunnel from compute to controller
1349         CONTROLPORT="control_vxlan"
1350         ${SSH} $compute_ip "
1351             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
1352         "
1353     done
1354 done
1355
1356 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1357     odlmgrip=OPENSTACK_HAPROXY_1_IP
1358     HA_PROXY_IP=${!odlmgrip}
1359     HA_PROXY_1_IP=${!odlmgrip}
1360     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1361     HA_PROXY_2_IP=${!odlmgrip2}
1362     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1363     HA_PROXY_3_IP=${!odlmgrip3}
1364 else
1365     HA_PROXY_IP=${ODL_SYSTEM_IP}
1366     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1367     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1368     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1369 fi
1370
1371 echo "Locating test plan to use..."
1372 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
1373 if [ ! -f "${testplan_filepath}" ]; then
1374     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
1375 fi
1376
1377 echo "Changing the testplan path..."
1378 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
1379 cat testplan.txt
1380
1381 # Use the testplan if specific SUITES are not defined.
1382 if [ -z "${SUITES}" ]; then
1383     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
1384 else
1385     newsuites=""
1386     workpath="${WORKSPACE}/test/csit/suites"
1387     for suite in ${SUITES}; do
1388         fullsuite="${workpath}/${suite}"
1389         if [ -z "${newsuites}" ]; then
1390             newsuites+=${fullsuite}
1391         else
1392             newsuites+=" "${fullsuite}
1393         fi
1394     done
1395     SUITES=${newsuites}
1396 fi
1397
1398 #install all client versions required for this job testing
1399 install_openstack_clients_in_robot_vm
1400
1401 # TODO: run openrc on control node and then scrape the vars from it
1402 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1403 cat > /tmp/os_netvirt_client_rc << EOF
1404 export OS_USERNAME=admin
1405 export OS_PASSWORD=admin
1406 export OS_PROJECT_NAME=admin
1407 export OS_USER_DOMAIN_NAME=default
1408 export OS_PROJECT_DOMAIN_NAME=default
1409 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1410 export OS_IDENTITY_API_VERSION=3
1411 export OS_IMAGE_API_VERSION=2
1412 export OS_TENANT_NAME=admin
1413 unset OS_CLOUD
1414 EOF
1415
1416 source /tmp/os_netvirt_client_rc
1417
1418 echo "Get all versions before executing pybot"
1419 echo "openstack --version"
1420 which openstack
1421 openstack --version
1422 echo "nova --version"
1423 which nova
1424 nova --version
1425 echo "neutron --version"
1426 which neutron
1427 neutron --version
1428
1429 echo "Starting Robot test suites ${SUITES} ..."
1430 # please add pybot -v arguments on a single line and alphabetized
1431 suite_num=0
1432 for suite in ${SUITES}; do
1433     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1434     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1435     let "suite_num = suite_num + 1"
1436     suite_index="$(printf %02d ${suite_num})"
1437     suite_name="$(basename ${suite} | cut -d. -f1)"
1438     log_name="${suite_index}_${suite_name}"
1439     pybot -N ${log_name} \
1440     -c critical -e exclude -e skip_if_${DISTROSTREAM} \
1441     --log log_${log_name}.html --report None --output output_${log_name}.xml \
1442     --removekeywords wuks \
1443     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1444     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1445     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1446     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
1447     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
1448     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1449     -v CONTROLLER_USER:${USER} \
1450     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1451     -v HA_PROXY_IP:${HA_PROXY_IP} \
1452     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
1453     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
1454     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
1455     -v JDKVERSION:${JDKVERSION} \
1456     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
1457     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
1458     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
1459     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
1460     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
1461     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
1462     -v ODL_ENABLE_L3_FWD:${ODL_ENABLE_L3_FWD} \
1463     -v ODL_STREAM:${DISTROSTREAM} \
1464     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
1465     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
1466     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
1467     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
1468     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
1469     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
1470     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
1471     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
1472     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
1473     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
1474     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1475     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1476     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1477     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1478     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1479     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1480     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1481     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1482     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1483     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1484     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1485     -v CMP_INSTANCES_SHARED_PATH:/var/instances \
1486     -v OS_USER:${USER} \
1487     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1488     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1489     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1490     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1491     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1492     -v USER_HOME:${HOME} \
1493     -v WORKSPACE:/tmp \
1494     ${TESTOPTIONS} ${suite} || true
1495 done
1496 #rebot exit codes seem to be different
1497 rebot --output ${WORKSPACE}/output.xml --log log_full.html --report None -N openstack output_*.xml || true
1498
1499 echo "Examining the files in data/log and checking file size"
1500 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1501 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1502
1503 echo "Tests Executed"
1504 collect_logs
1505
1506 true  # perhaps Jenkins is testing last exit code
1507 # vim: ts=4 sw=4 sts=4 et ft=sh :