jjb/integration/integration-deploy-openstack-run-test.sh

   1 #!/bin/bash
   2 # Activate robotframework virtualenv
   3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
   4 # script.
   5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
   6 source "${ROBOT_VENV}/bin/activate"
   7 source /tmp/common-functions.sh "${BUNDLEFOLDER}"
   8 # Ensure we fail the job if any steps fail.
   9 set -ex -o pipefail
  10 totaltmr=$(timer)
  11 get_os_deploy
  12
  13 PYTHON="${ROBOT_VENV}/bin/python"
  14 SSH="ssh -t -t"
  15 ADMIN_PASSWORD="admin"
  16 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
  17 #Size of the partition to /opt/stack in control and compute nodes
  18 TMPFS_SIZE=2G
  19 if [ "${ODL_ML2_BRANCH}" == "stable/rocky" ]; then
  20             TMPFS_SIZE=12G
  21 fi
  22 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
  23 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
  24 $PYTHON -m pip install --upgrade urllib3
  25 python "${WORKSPACE}/test/tools/distchanges/changes.py" -d /tmp/distribution_folder \
  26                   -u "${ACTUAL_BUNDLE_URL}" -b "${DISTROBRANCH}" \
  27                   -r "ssh://jenkins-${SILO}@git.opendaylight.org:29418" || true
  28
  29 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
  30 (
  31     cd "${WORKSPACE}/test"
  32     printf "Hash    Author Date                    Commit Date                    Author               Subject\n"
  33     printf "%s\n" "------- ------------------------------ ------------------------------ -------------------- -----------------------------"
  34     git --no-pager log --pretty=format:'%h %<(30)%ad %<(30)%cd %<(20,trunc)%an%d %s' -n20
  35     printf "\n"
  36 )
  37
  38 cat << EOF
  39 #################################################
  40 ##         Deploy Openstack 3-node             ##
  41 #################################################
  42 EOF
  43
  44 # Catch command errors and collect logs.
  45 # This ensures logs are collected when script commands fail rather than simply exiting.
  46 function trap_handler() {
  47     local prog="$0"
  48     local lastline="$1"
  49     local lasterr="$2"
  50     echo "trap_handler: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
  51     echo "trap_handler: command: ${BASH_COMMAND}"
  52     exit 1
  53 } # trap_handler()
  54
  55 trap 'trap_handler ${LINENO} ${$?}' ERR
  56
  57 print_job_parameters
  58
  59 function create_etc_hosts() {
  60     NODE_IP=$1
  61     CTRL_IP=$2
  62     : > "${WORKSPACE}/hosts_file"
  63     for iter in $(seq 1 "${NUM_OPENSTACK_COMPUTE_NODES}"); do
  64         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
  65         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
  66            CONTROL_HNAME=$(${SSH}  "${CTRL_IP}"  "hostname")
  67            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> "${WORKSPACE}/hosts_file"
  68         else
  69            COMPUTE_HNAME=$(${SSH}  "${!COMPUTE_IP}"  "hostname")
  70            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> "${WORKSPACE}/hosts_file"
  71         fi
  72     done
  73
  74     echo "Created the hosts file for ${NODE_IP}:"
  75     cat "${WORKSPACE}/hosts_file"
  76 } # create_etc_hosts()
  77
  78 #function to install Openstack Clients for Testing
  79 #This will pull the latest versions compatiable with the
  80 # openstack release
  81 function install_openstack_clients_in_robot_vm() {
  82     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
  83     local os_plugins
  84     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
  85     for plugin_name in $os_plugins; do
  86         if [ "$plugin_name" == "networking-sfc" ]; then
  87             packages+=("networking-sfc")
  88         fi
  89     done
  90     openstack_version=$(echo "${OPENSTACK_BRANCH}" | cut -d/ -f2)
  91     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
  92     if [ "${openstack_version}" == "master" ]; then
  93        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
  94     fi
  95     for package in ${packages[*]}; do
  96        echo "Get the current support version of the package ${package}"
  97        wget "https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt" -O /tmp/constraints.txt 2>/dev/null
  98        #python openstackclient version in rocky contradicts with version in global-jjb and stops openstackclient installation in rocky. Will be removed based on version change in global-jjb.
  99        sed -i s/python-openstackclient===3.16.2/python-openstackclient===3.14.0/ /tmp/constraints.txt
 100        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
 101        $PYTHON -m pip install --upgrade --no-deps "${package}" --no-cache-dir -c /tmp/constraints.txt
 102        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
 103        $PYTHON -m pip install "${package}" --no-cache-dir -c /tmp/constraints.txt
 104     done
 105
 106     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 107         #networking-l2gw is not officially available in any release yet. Getting the latest stable version.
 108         $PYTHON -m pip install networking-l2gw==11.0.0
 109     fi
 110 }
 111
 112 #Function to install rdo release
 113 # This will help avoiding installing wrong version of packages which causes
 114 # functionality failures
 115 function install_rdo_release() {
 116     local ip=$1
 117     case ${OPENSTACK_BRANCH} in
 118        *rocky*)
 119           ${SSH} "${ip}" "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-rocky/rdo-release-rocky-1.noarch.rpm"
 120           ;;
 121
 122        *queens*)
 123           ${SSH} "${ip}" "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
 124           ;;
 125
 126        master)
 127           ${SSH} "${ip}" "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-rocky/rdo-release-rocky-1.noarch.rpm"
 128           ;;
 129     esac
 130 }
 131
 132 # Involves just setting up the shared directory
 133 function setup_live_migration_control() {
 134     local control_ip=$1
 135     printf "%s:Setup directory Share with NFS" "${control_ip}"
 136     cat > "${WORKSPACE}/setup_live_migration_control.sh" << EOF
 137 sudo mkdir --mode=777 /vm_instances
 138 sudo chown -R jenkins:jenkins /vm_instances
 139 sudo yum install -y nfs-utils
 140 printf "/vm_instances *(rw,no_root_squash)" | sudo tee -a /etc/exports
 141 sudo systemctl start rpcbind nfs-server
 142 sudo exportfs
 143 EOF
 144     scp "${WORKSPACE}/setup_live_migration_control.sh" "${control_ip}:/tmp/setup_live_migration_control.sh"
 145     ssh "${control_ip}" "bash /tmp/setup_live_migration_control.sh"
 146 }
 147
 148 #Fix Problem caused due to new libvirt version in CentOS repo.
 149 #The libvirt-python 3.10 does not support all the new API exposed
 150 #This fix will force devstack to use latest libvirt-python
 151 #from pypi.org (latest version as of 06-Dec-2018)
 152 function fix_libvirt_python_build() {
 153     local ip=$1
 154     ${SSH} "${ip}" "
 155         cd /opt/stack;
 156         git clone https://git.openstack.org/openstack/requirements;
 157         cd requirements;
 158         git checkout ${ODL_ML2_BRANCH};
 159         sed -i s/libvirt-python===3.10.0/libvirt-python===4.10.0/ upper-constraints.txt
 160         "
 161 }
 162
 163 # Involves mounting the share and configuring the libvirtd
 164 function setup_live_migration_compute() {
 165     local compute_ip=$1
 166     local control_ip=$2
 167     printf "%s:Mount Shared directory from ${control_ip}" "${compute_ip}"
 168     printf "%s:Configure libvirt in listen mode" "${compute_ip}"
 169     cat > "${WORKSPACE}/setup_live_migration_compute.sh" << EOF
 170 sudo yum install -y libvirt libvirt-devel nfs-utils
 171 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tls 0
 172 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tcp 1
 173 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' auth_tcp '"none"'
 174 sudo crudini --verbose  --set --inplace /etc/sysconfig/libvirtd '' LIBVIRTD_ARGS '"--listen"'
 175 sudo mkdir --mode=777 -p /var/instances
 176 sudo chown -R jenkins:jenkins /var/instances
 177 sudo chmod o+x /var/instances
 178 sudo systemctl start rpcbind
 179 sudo mount -t nfs ${control_ip}:/vm_instances /var/instances
 180 sudo mount
 181 EOF
 182     scp "${WORKSPACE}/setup_live_migration_compute.sh" "${compute_ip}:/tmp/setup_live_migration_compute.sh"
 183     ssh "${compute_ip}" "bash /tmp/setup_live_migration_compute.sh"
 184 }
 185
 186 # Add enable_services and disable_services to the local.conf
 187 function add_os_services() {
 188     local core_services=$1
 189     local enable_services=$2
 190     local disable_services=$3
 191     local local_conf_file_name=$4
 192     local enable_network_services=$5
 193
 194     cat >> "${local_conf_file_name}" << EOF
 195 enable_service $(csv2ssv "${core_services}")
 196 EOF
 197     if [ -n "${enable_services}" ]; then
 198         cat >> "${local_conf_file_name}" << EOF
 199 enable_service $(csv2ssv "${enable_services}")
 200 EOF
 201     fi
 202     if [ -n "${disable_services}" ]; then
 203         cat >> "${local_conf_file_name}" << EOF
 204 disable_service $(csv2ssv "${disable_services}")
 205 EOF
 206     fi
 207     if [ -n "${enable_network_services}" ]; then
 208         cat >> "${local_conf_file_name}" << EOF
 209 enable_service $(csv2ssv "${enable_network_services}")
 210 EOF
 211     fi
 212 }
 213
 214 function create_control_node_local_conf() {
 215     HOSTIP=$1
 216     MGRIP=$2
 217     ODL_OVS_MANAGERS="$3"
 218
 219     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
 220     cat > "${local_conf_file_name}" << EOF
 221 [[local|localrc]]
 222 LOGFILE=stack.sh.log
 223 LOG_COLOR=False
 224 USE_SYSTEMD=True
 225 RECLONE=${RECLONE}
 226 # Increase the wait used by stack to poll for services
 227 SERVICE_TIMEOUT=120
 228
 229 disable_all_services
 230 EOF
 231
 232     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
 233
 234     cat >> "${local_conf_file_name}" << EOF
 235
 236 HOST_IP=${HOSTIP}
 237 SERVICE_HOST=\$HOST_IP
 238 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 239 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
 240
 241 ODL_MODE=manual
 242 ODL_MGR_IP=${MGRIP}
 243 ODL_PORT=${ODL_PORT}
 244 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 245 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 246
 247 MYSQL_HOST=\$SERVICE_HOST
 248 RABBIT_HOST=\$SERVICE_HOST
 249 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 250 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 251 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 252
 253 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 254 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 255 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 256 SERVICE_TOKEN=${ADMIN_PASSWORD}
 257 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 258
 259 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
 260 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 261 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 262 ETCD_PORT=2379
 263 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 264 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 265 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
 266 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 267 EOF
 268     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
 269         cat >> "${local_conf_file_name}" << EOF
 270 ENABLE_TENANT_TUNNELS=false
 271 EOF
 272     fi
 273
 274     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 275         echo "ODL_V2DRIVER=True" >> "${local_conf_file_name}"
 276     fi
 277     IFS=,
 278     for plugin_name in ${ENABLE_OS_PLUGINS}; do
 279         if [ "$plugin_name" == "networking-odl" ]; then
 280             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
 281         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
 282             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
 283         elif [ "$plugin_name" == "neutron-lbaas" ]; then
 284             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 285             IS_LBAAS_PLUGIN_ENABLED="yes"
 286         elif [ "$plugin_name" == "networking-sfc" ]; then
 287             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 288             IS_SFC_PLUGIN_ENABLED="yes"
 289         else
 290             echo "Error: Invalid plugin $plugin_name, unsupported"
 291             continue
 292         fi
 293         cat >> "${local_conf_file_name}" << EOF
 294
 295 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
 296 EOF
 297     done
 298     unset IFS
 299
 300     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 301         cat >> "${local_conf_file_name}" << EOF
 302
 303 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
 304 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
 305 EOF
 306     fi
 307
 308     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 309        SERVICE_PLUGINS="odl-router_v2"
 310     else
 311        SERVICE_PLUGINS="odl-router"
 312     fi
 313     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 314         SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
 315     fi
 316     if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
 317         SERVICE_PLUGINS+=", lbaasv2"
 318     fi
 319     if [ "${IS_SFC_PLUGIN_ENABLED}" == "yes" ]; then
 320         SERVICE_PLUGINS+=", networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin"
 321     fi
 322
 323     cat >> "${local_conf_file_name}" << EOF
 324
 325 [[post-config|\$NEUTRON_CONF]]
 326 [DEFAULT]
 327 service_plugins = ${SERVICE_PLUGINS}
 328 log_dir = /opt/stack/logs
 329
 330 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
 331 [agent]
 332 minimize_polling=True
 333
 334 [ml2]
 335 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
 336 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
 337 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
 338 path_mtu = 1458
 339 EOF
 340     if [ "${ENABLE_GRE_TYPE_DRIVERS}" == "yes" ]; then
 341         cat >> "${local_conf_file_name}" << EOF
 342 type_drivers = local,flat,vlan,gre,vxlan
 343 [ml2_type_gre]
 344 tunnel_id_ranges = 1:1000
 345 EOF
 346     fi
 347     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 348         cat >> "${local_conf_file_name}" << EOF
 349
 350 [ml2_odl]
 351 enable_dhcp_service = True
 352 EOF
 353     fi
 354
 355     cat >> "${local_conf_file_name}" << EOF
 356
 357 [ml2_odl]
 358 # Trigger n-odl full sync every 30 secs.
 359 maintenance_interval = 30
 360
 361 [[post-config|/etc/neutron/dhcp_agent.ini]]
 362 [DEFAULT]
 363 force_metadata = True
 364 enable_isolated_metadata = True
 365 log_dir = /opt/stack/logs
 366
 367 [[post-config|/etc/nova/nova.conf]]
 368 [scheduler]
 369 discover_hosts_in_cells_interval = 30
 370
 371 [DEFAULT]
 372 force_config_drive = False
 373 force_raw_images = False
 374 log_dir = /opt/stack/logs
 375
 376 EOF
 377
 378     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 379         cat >> "${local_conf_file_name}" << EOF
 380 use_neutron = True
 381 force_raw_images = False
 382 log_dir = /opt/stack/logs
 383 [libvirt]
 384 live_migration_uri = qemu+tcp://%s/system
 385 virt_type = qemu
 386 EOF
 387     fi
 388
 389     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 390         echo "Combo local.conf created:"
 391     else
 392         echo "Control local.conf created:"
 393     fi
 394     cat "${local_conf_file_name}"
 395 } # create_control_node_local_conf()
 396
 397 function create_compute_node_local_conf() {
 398     HOSTIP=$1
 399     SERVICEHOST=$2
 400     MGRIP=$3
 401     ODL_OVS_MANAGERS="$4"
 402
 403     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
 404     cat > "${local_conf_file_name}" << EOF
 405 [[local|localrc]]
 406 LOGFILE=stack.sh.log
 407 LOG_COLOR=False
 408 USE_SYSTEMD=True
 409 RECLONE=${RECLONE}
 410 # Increase the wait used by stack to poll for the nova service on the control node
 411 NOVA_READY_TIMEOUT=1800
 412
 413 disable_all_services
 414 EOF
 415
 416     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
 417
 418     cat >> "${local_conf_file_name}" << EOF
 419 HOST_IP=${HOSTIP}
 420 SERVICE_HOST=${SERVICEHOST}
 421 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 422
 423 ODL_MODE=manual
 424 ODL_MGR_IP=${MGRIP}
 425 ODL_PORT=${ODL_PORT}
 426 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 427 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 428
 429 Q_HOST=\$SERVICE_HOST
 430 MYSQL_HOST=\$SERVICE_HOST
 431 RABBIT_HOST=\$SERVICE_HOST
 432 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 433 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 434 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 435
 436 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 437 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 438 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 439 SERVICE_TOKEN=${ADMIN_PASSWORD}
 440 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 441
 442 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 443 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 444 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 445 EOF
 446
 447     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
 448         cat >> "${local_conf_file_name}" << EOF
 449
 450 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
 451 EOF
 452     fi
 453
 454     cat >> "${local_conf_file_name}" << EOF
 455
 456 [[post-config|/etc/nova/nova.conf]]
 457 [api]
 458 auth_strategy = keystone
 459 [DEFAULT]
 460 use_neutron = True
 461 force_raw_images = False
 462 log_dir = /opt/stack/logs
 463 [libvirt]
 464 live_migration_uri = qemu+tcp://%s/system
 465 virt_type = qemu
 466 EOF
 467
 468     echo "Compute local.conf created:"
 469     cat "${local_conf_file_name}"
 470 } # create_compute_node_local_conf()
 471
 472 function configure_haproxy_for_neutron_requests() {
 473     local -r haproxy_ip=$1
 474     # shellcheck disable=SC2206
 475     local -r odl_ips=(${2//,/ })
 476
 477     cat > "${WORKSPACE}/install_ha_proxy.sh" << EOF
 478 sudo systemctl stop firewalld
 479 sudo yum -y install policycoreutils-python haproxy
 480 EOF
 481
 482     cat > "${WORKSPACE}/haproxy.cfg" << EOF
 483 global
 484   daemon
 485   group  haproxy
 486   log  /dev/log local0 debug
 487   maxconn  20480
 488   pidfile  /tmp/haproxy.pid
 489   ssl-default-bind-ciphers  !SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES
 490   ssl-default-bind-options  no-sslv3 no-tlsv10
 491   stats  socket /var/lib/haproxy/stats mode 600 level user
 492   stats  timeout 2m
 493   user  haproxy
 494
 495 defaults
 496   log  global
 497   option  log-health-checks
 498   maxconn  4096
 499   mode  tcp
 500   retries  3
 501   timeout  http-request 10s
 502   timeout  queue 2m
 503   timeout  connect 5s
 504   timeout  client 5s
 505   timeout  server 5s
 506
 507 listen opendaylight
 508   bind ${haproxy_ip}:8181 transparent
 509   mode http
 510   http-request set-header X-Forwarded-Proto https if { ssl_fc }
 511   http-request set-header X-Forwarded-Proto http if !{ ssl_fc }
 512   option httpchk GET /diagstatus
 513   option httplog
 514 EOF
 515
 516     odlindex=1
 517     for odlip in ${odl_ips[*]}; do
 518         echo "  server opendaylight-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" >> "${WORKSPACE}/haproxy.cfg"
 519         odlindex=$((odlindex+1))
 520     done
 521
 522     cat >> "${WORKSPACE}/haproxy.cfg" << EOF
 523
 524 listen opendaylight_ws
 525   bind ${haproxy_ip}:8185 transparent
 526   mode http
 527   timeout tunnel 3600s
 528   option httpchk GET /data-change-event-subscription/neutron:neutron/neutron:ports/datastore=OPERATIONAL/scope=SUBTREE HTTP/1.1\r\nHost:\ ws.opendaylight.org\r\nConnection:\ Upgrade\r\nUpgrade:\ websocket\r\nSec-WebSocket-Key:\ haproxy\r\nSec-WebSocket-Version:\ 13\r\nSec-WebSocket-Protocol:\ echo-protocol
 529   http-check expect status 101
 530 EOF
 531
 532     odlindex=1
 533     for odlip in ${odl_ips[*]}; do
 534         echo "  server opendaylight-ws-${odlindex} ${odlip}:8185 check fall 3 inter 1000 rise 2" >> "${WORKSPACE}/haproxy.cfg"
 535         odlindex=$((odlindex+1))
 536     done
 537
 538     echo "Dump haproxy.cfg"
 539     cat "${WORKSPACE}/haproxy.cfg"
 540
 541     cat > "${WORKSPACE}/deploy_ha_proxy.sh" << EOF
 542 sudo chown haproxy:haproxy /tmp/haproxy.cfg
 543 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
 544 sudo /usr/sbin/semanage permissive -a haproxy_t
 545 sudo systemctl restart haproxy
 546 sleep 3
 547 sudo netstat -tunpl
 548 sudo systemctl status haproxy
 549 true
 550 EOF
 551
 552     scp "${WORKSPACE}/install_ha_proxy.sh" "${haproxy_ip}:/tmp"
 553     ${SSH} "${haproxy_ip}" "sudo bash /tmp/install_ha_proxy.sh"
 554     scp "${WORKSPACE}/haproxy.cfg" "${haproxy_ip}:/tmp"
 555     scp "${WORKSPACE}/deploy_ha_proxy.sh" "${haproxy_ip}:/tmp"
 556     ${SSH} "${haproxy_ip}" "sudo bash /tmp/deploy_ha_proxy.sh"
 557 } # configure_haproxy_for_neutron_requests()
 558
 559 # Following three functions are debugging helpers when debugging devstack changes.
 560 # Keeping them for now so we can simply call them when needed.
 561 ctrlhn=""
 562 comp1hn=""
 563 comp2hn=""
 564 function get_hostnames () {
 565     set +e
 566     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 567     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 568     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
 569     ctrlhn=$(${SSH} "${ctrlip}" "hostname")
 570     comp1hn=$(${SSH} "${comp1ip}" "hostname")
 571     comp2hn=$(${SSH} "${comp2ip}" "hostname")
 572     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
 573     set -e
 574 }
 575
 576 function check_firewall() {
 577     set +e
 578     echo $-
 579     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 580     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 581     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
 582
 583     echo "check_firewall on control"
 584     ${SSH} "${ctrlip}" "
 585         sudo systemctl status firewalld
 586         sudo systemctl -l status iptables
 587         sudo iptables --line-numbers -nvL
 588     " || true
 589     echo "check_firewall on compute 1"
 590     ${SSH} "${comp1ip}" "
 591         sudo systemctl status firewalld
 592         sudo systemctl -l status iptables
 593         sudo iptables --line-numbers -nvL
 594     " || true
 595     echo "check_firewall on compute 2"
 596     ${SSH} "${comp2ip}" "
 597         sudo systemctl status firewalld
 598         sudo systemctl -l status iptables
 599         sudo iptables --line-numbers -nvL
 600     " || true
 601 }
 602
 603 function get_service () {
 604     set +e
 605     local iter=$1
 606     #local idx=$2
 607     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 608     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 609
 610     #if [ ${idx} -eq 1 ]; then
 611         if [ "${iter}" -eq 1 ] || [ "${iter}" -gt 16 ]; then
 612             curl "http://${ctrlip}:5000"
 613             curl "http://${ctrlip}:35357"
 614             curl "http://${ctrlip}/identity"
 615             ${SSH} "${ctrlip}" "
 616                 source /opt/stack/devstack/openrc admin admin;
 617                 env
 618                 openstack configuration show --unmask;
 619                 openstack service list
 620                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
 621                 openstack hypervisor list;
 622             " || true
 623             check_firewall
 624         fi
 625     #fi
 626     set -e
 627 }
 628
 629 # Check if rabbitmq is ready by looking for a pid in it's status.
 630 # The function returns the status of the grep command which callers can check.
 631 function is_rabbitmq_ready() {
 632     local -r ip=${1}
 633     local grepfor="nova_cell1"
 634     rm -f rabbit.txt
 635     ${SSH} "${ip}" "sudo rabbitmqctl list_vhosts" > rabbit.txt
 636     grep "${grepfor}" rabbit.txt
 637 }
 638
 639 # retry the given command ($3) until success for a number of iterations ($1)
 640 # sleeping ($2) between tries.
 641 function retry() {
 642     local -r -i max_tries=${1}
 643     local -r -i sleep_time=${2}
 644     local -r cmd=${3}
 645     local -i retries=1
 646     local -i rc=1
 647     while true; do
 648         echo "retry ${cmd}: attempt: ${retries}"
 649         ${cmd}
 650         rc=$?
 651         # shellcheck disable=SC2004
 652         if ((${rc} == 0)); then
 653             break;
 654         else
 655             # shellcheck disable=SC2004
 656             if ((${retries} == ${max_tries})); then
 657                 break
 658             else
 659                 ((retries++))
 660                 sleep "${sleep_time}"
 661             fi
 662         fi
 663     done
 664     return ${rc}
 665 }
 666
 667 function install_ovs() {
 668     local -r node=${1}
 669     local -r rpm_path=${2}
 670
 671     if [ "${OVS_INSTALL:0:1}" = "v" ]; then
 672        # An OVS version was given, so we build it ourselves from OVS git repo.
 673        # Only on the first node though, consecutive nodes will use RPMs
 674        # built for the first one.
 675        [ ! -d "${rpm_path}" ] && mkdir -p "${rpm_path}" && build_ovs "${node}" "${OVS_INSTALL}" "${rpm_path}"
 676        # Install OVS from path
 677        install_ovs_from_path "${node}" "${rpm_path}"
 678     elif [ "${OVS_INSTALL:0:4}" = "http" ]; then
 679        # Otherwise, install from rpm repo directly.
 680        install_ovs_from_repo "${node}" "${OVS_INSTALL}"
 681     else
 682        echo "Expected either an OVS version git tag or a repo http url"
 683        exit 1
 684     fi
 685 }
 686
 687 ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
 688 RECLONE=False
 689 ODL_PORT=8181
 690
 691 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
 692 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
 693 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
 694 # collect performance stats
 695 CORE_OS_CONTROL_SERVICES="dstat"
 696 # Glance
 697 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
 698 # Keystone
 699 CORE_OS_CONTROL_SERVICES+=",key"
 700 # Nova - services to support libvirt
 701 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
 702 # ODL - services to connect to ODL
 703 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
 704 # Additional services
 705 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
 706
 707 # collect performance stats
 708 CORE_OS_COMPUTE_SERVICES="dstat"
 709 # computes only need nova and odl
 710 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
 711
 712 cat > "${WORKSPACE}/disable_firewall.sh" << EOF
 713 sudo systemctl stop firewalld
 714 # Open these ports to match the tutorial vms
 715 # http/https (80/443), samba (445), netbios (137,138,139)
 716 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
 717 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
 718 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
 719 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
 720 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
 721 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
 722 sudo iptables-save > /etc/sysconfig/iptables
 723 sudo systemctl restart iptables
 724 sudo iptables --line-numbers -nvL
 725 true
 726 EOF
 727
 728 #For SFC Tests a larger partition is required for creating instances with Ubuntu
 729 if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 730    TMPFS_SIZE=12G
 731 fi
 732 cat > "${WORKSPACE}/get_devstack.sh" << EOF
 733 sudo systemctl stop firewalld
 734 sudo yum install bridge-utils python-pip -y
 735 #sudo systemctl stop  NetworkManager
 736 #Disable NetworkManager and kill dhclient and dnsmasq
 737 sudo systemctl stop NetworkManager
 738 sudo killall dhclient
 739 sudo killall dnsmasq
 740 #Workaround for mysql failure
 741 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
 742 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
 743 sudo mv /tmp/hosts /etc/hosts
 744 sudo mkdir /opt/stack
 745 echo "Create RAM disk for /opt/stack"
 746 sudo mount -t tmpfs -o size=${TMPFS_SIZE} tmpfs /opt/stack
 747 sudo chmod 777 /opt/stack
 748 cd /opt/stack
 749 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
 750 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
 751 cd devstack
 752 if [ -n "${DEVSTACK_HASH}" ]; then
 753     echo "git checkout ${DEVSTACK_HASH}"
 754     git checkout ${DEVSTACK_HASH}
 755 fi
 756 wget https://raw.githubusercontent.com/shague/odl_tools/master/fix-logging.patch.txt -O /tmp/fix-logging.patch.txt
 757 patch --verbose -p1 -i /tmp/fix-logging.patch.txt
 758 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
 759 echo
 760
 761 echo "workaround: do not upgrade openvswitch"
 762 sudo yum install -y yum-plugin-versionlock
 763 sudo yum versionlock add openvswitch
 764 EOF
 765
 766 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
 767 sudo nova-manage cell_v2 map_cell0
 768 sudo nova-manage cell_v2 simple_cell_setup
 769 sudo nova-manage db sync
 770 sudo nova-manage cell_v2 discover_hosts
 771 EOF
 772
 773 cat > "${WORKSPACE}/workaround_networking_sfc.sh" << EOF
 774 cd /opt/stack
 775 git clone https://git.openstack.org/openstack/networking-sfc
 776 cd networking-sfc
 777 git checkout ${OPENSTACK_BRANCH}
 778 git checkout master -- devstack/plugin.sh
 779 EOF
 780
 781 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
 782 compute_index=1
 783 os_node_list=()
 784
 785 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
 786     echo "Configure HAProxy"
 787     ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_1_IP
 788     ODL_IP_PARAM1=ODL_SYSTEM_1_IP
 789     ODL_IP_PARAM2=ODL_SYSTEM_2_IP
 790     ODL_IP_PARAM3=ODL_SYSTEM_3_IP
 791     ODLMGRIP=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
 792     ODL_OVS_MGRS="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
 793     configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS}"
 794 else
 795     ODL_IP_PARAM=ODL_SYSTEM_1_IP
 796     ODLMGRIP=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
 797     ODL_OVS_MGRS="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
 798 fi
 799
 800 os_ip_list=()
 801 for i in $(seq 1 "${NUM_OPENSTACK_CONTROL_NODES}"); do
 802     cip=OPENSTACK_CONTROL_NODE_${i}_IP
 803     ip=${!cip}
 804     os_ip_list+=("${ip}")
 805 done
 806
 807 for i in $(seq 1 "${NUM_OPENSTACK_COMPUTE_NODES}"); do
 808     cip=OPENSTACK_COMPUTE_NODE_${i}_IP
 809     ip=${!cip}
 810     os_ip_list+=("${ip}")
 811 done
 812
 813 for i in "${!os_ip_list[@]}"; do
 814     ip=${os_ip_list[i]}
 815     tcpdump_start "${i}" "${ip}" "port 6653"
 816 done
 817
 818
 819 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
 820
 821 for i in $(seq 1 "${NUM_OPENSTACK_CONTROL_NODES}"); do
 822     CONTROLIP="OPENSTACK_CONTROL_NODE_${i}_IP"
 823     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
 824     scp "${WORKSPACE}/disable_firewall.sh" "${!CONTROLIP}":/tmp
 825     ${SSH} "${!CONTROLIP}" "sudo bash /tmp/disable_firewall.sh"
 826     create_etc_hosts "${!CONTROLIP}"
 827     scp "${WORKSPACE}/hosts_file" "${!CONTROLIP}":/tmp/hosts
 828     scp "${WORKSPACE}/get_devstack.sh" "${!CONTROLIP}":/tmp
 829     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
 830     # affecting the stacking.
 831     # Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
 832     # In Queens the neutron new libs are used and do not have the following options from Pike and earlier:
 833     # Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS could be used for the flat_networks
 834     # and Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS could be used for the ml2_type_vlan
 835     ${SSH} "${!CONTROLIP}" "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 836     ssh "${!CONTROLIP}" "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
 837     ssh "${!CONTROLIP}" "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
 838     #Workaround for networking-sfc to configure the paramaters in neutron.conf if the
 839     # services used are neutron-api, neutron-dhcp etc instead of q-agt.
 840     # Can be removed if the patch https://review.openstack.org/#/c/596287/ gets merged
 841     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 842        scp "${WORKSPACE}/workaround_networking_sfc.sh" "${!CONTROLIP}":/tmp/
 843        ssh "${!CONTROLIP}" "bash -x /tmp/workaround_networking_sfc.sh"
 844     fi
 845     create_control_node_local_conf "${!CONTROLIP}" ${ODLMGRIP} "${ODL_OVS_MGRS}"
 846     scp "${WORKSPACE}/local.conf_control_${!CONTROLIP}" "${!CONTROLIP}":/opt/stack/devstack/local.conf
 847     echo "Install rdo release to avoid incompatible Package versions"
 848     install_rdo_release "${!CONTROLIP}"
 849     setup_live_migration_control "${!CONTROLIP}"
 850     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 851         setup_live_migration_compute "${!CONTROLIP}" "${!CONTROLIP}"
 852     fi
 853     [ -n "${OVS_INSTALL}" ] && install_ovs "${!CONTROLIP}" /tmp/ovs_rpms
 854     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 855         # This should be really done by networking-odl devstack plugin,
 856         # but in the meantime do it ourselves
 857         ssh "${!CONTROLIP}" "sudo ovs-vsctl set Open_vSwitch . external_ids:of-tunnel=true"
 858     fi
 859     fix_libvirt_python_build "${!CONTROLIP}"
 860     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
 861     # Workaround: fixing boneheaded polkit issue, to be removed later
 862     ssh "${!CONTROLIP}" "sudo bash -c 'echo deltarpm=0 >> /etc/yum.conf && yum -y update polkit'"
 863     ssh "${!CONTROLIP}" "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 864     ssh "${!CONTROLIP}" "ps -ef | grep stack.sh"
 865     ssh "${!CONTROLIP}" "ls -lrt /opt/stack/devstack/nohup.out"
 866     os_node_list+=("${!CONTROLIP}")
 867 done
 868
 869 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
 870 # if needed.
 871 # Let the control node get started to avoid a race condition where the computes start and try to access
 872 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
 873 # compute exits and does not attempt to restart.
 874 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
 875 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
 876 # one of the following errors is seen in the compute n-cpu.log:
 877 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
 878 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
 879 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
 880 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
 881 if [ "${NUM_OPENSTACK_COMPUTE_NODES}" -gt 0 ]; then
 882     WAIT_FOR_RABBITMQ_MINUTES=60
 883     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
 884     set +e
 885     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
 886     rc=$?
 887     set -e
 888     # shellcheck disable=SC2004
 889     if ((${rc} == 0)); then
 890       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
 891     else
 892       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
 893       exit 1
 894     fi
 895 fi
 896
 897 for i in $(seq 1 "${NUM_OPENSTACK_COMPUTE_NODES}"); do
 898     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
 899     CONTROLIP=OPENSTACK_CONTROL_NODE_1_IP
 900     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
 901     scp "${WORKSPACE}/disable_firewall.sh" "${!COMPUTEIP}:/tmp"
 902     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
 903     create_etc_hosts "${!COMPUTEIP}" "${!CONTROLIP}"
 904     scp "${WORKSPACE}/hosts_file" "${!COMPUTEIP}":/tmp/hosts
 905     scp "${WORKSPACE}/get_devstack.sh" "${!COMPUTEIP}":/tmp
 906     ${SSH} "${!COMPUTEIP}" "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 907     create_compute_node_local_conf "${!COMPUTEIP}" "${!CONTROLIP}" "${ODLMGRIP}" "${ODL_OVS_MGRS}"
 908     scp "${WORKSPACE}"/local.conf_compute_"${!COMPUTEIP}" "${!COMPUTEIP}":/opt/stack/devstack/local.conf
 909     echo "Install rdo release to avoid incompatible Package versions"
 910     install_rdo_release "${!COMPUTEIP}"
 911     setup_live_migration_compute "${!COMPUTEIP}" "${!CONTROLIP}"
 912     [ -n "${OVS_INSTALL}" ] && install_ovs "${!COMPUTEIP}" /tmp/ovs_rpms
 913     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 914         # This should be really done by networking-odl devstack plugin,
 915         # but in the meantime do it ourselves
 916         ssh "${!COMPUTEIP}" "sudo ovs-vsctl set Open_vSwitch . external_ids:of-tunnel=true"
 917     fi
 918     fix_libvirt_python_build "${!COMPUTEIP}"
 919     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
 920     ssh "${!COMPUTEIP}" "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 921     ssh "${!COMPUTEIP}" "ps -ef | grep stack.sh"
 922     os_node_list+=("${!COMPUTEIP}")
 923 done
 924
 925 echo "nodelist: ${os_node_list[*]}"
 926
 927 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
 928 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
 929 # the status polling.
 930 cat > "${WORKSPACE}/check_stacking.sh" << EOF
 931 > /tmp/stack_progress
 932 ps -ef | grep "stack.sh" | grep -v grep
 933 ret=\$?
 934 if [ \${ret} -eq 1 ]; then
 935     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
 936     if [ \$? -eq 0 ]; then
 937         echo "Stacking Complete" > /tmp/stack_progress
 938     else
 939         echo "Stacking Failed" > /tmp/stack_progress
 940     fi
 941 elif [ \${ret} -eq 0 ]; then
 942     echo "Still Stacking" > /tmp/stack_progress
 943 fi
 944 EOF
 945
 946 # devstack debugging
 947 # get_hostnames
 948
 949 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
 950 iteration=0
 951 in_progress=1
 952 while [ ${in_progress} -eq 1 ]; do
 953     # shellcheck disable=SC2004
 954     iteration=$(($iteration + 1))
 955     for index in "${!os_node_list[@]}"; do
 956         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
 957         scp "${WORKSPACE}/check_stacking.sh" "${os_node_list[index]}:/tmp"
 958         ${SSH} "${os_node_list[index]}" "bash /tmp/check_stacking.sh"
 959         scp "${os_node_list[index]}":/tmp/stack_progress .
 960         cat stack_progress
 961         stacking_status=$(cat stack_progress)
 962         # devstack debugging
 963         # get_service "${iteration}" "${index}"
 964         if [ "$stacking_status" == "Still Stacking" ]; then
 965             continue
 966         elif [ "$stacking_status" == "Stacking Failed" ]; then
 967             echo "node $index ${os_node_list[index]}: stacking has failed"
 968             exit 1
 969         elif [ "$stacking_status" == "Stacking Complete" ]; then
 970             echo "node $index ${os_node_list[index]}: stacking complete"
 971             unset 'os_node_list[index]'
 972             if  [ ${#os_node_list[@]} -eq 0 ]; then
 973                 in_progress=0
 974             fi
 975         fi
 976     done
 977     echo "sleep for a minute before the next check"
 978     sleep 60
 979     if [ ${iteration} -eq 60 ]; then
 980         echo "stacking has failed - took longer than 60m"
 981         exit 1
 982     fi
 983 done
 984
 985 # Further configuration now that stacking is complete.
 986 echo "Configure the Control Node"
 987 CONTROLIP=OPENSTACK_CONTROL_NODE_1_IP
 988 # Gather Compute IPs for the site
 989 for i in $(seq 1 "${NUM_OPENSTACK_COMPUTE_NODES}"); do
 990     IP_VAR=OPENSTACK_COMPUTE_NODE_${i}_IP
 991     COMPUTE_IPS[$((i-1))]=${!IP_VAR}
 992 done
 993
 994 echo "sleep for 60s and print hypervisor-list"
 995 sleep 60
 996 ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
 997 # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
 998 # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
 999 # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
1000 # is one less than the total number of openstack systems
1001 if [ "${NUM_OPENSTACK_SYSTEM}" -eq 1 ]; then
1002     expected_num_hypervisors=1
1003 else
1004     expected_num_hypervisors=${NUM_OPENSTACK_COMPUTE_NODES}
1005     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
1006         expected_num_hypervisors=$((expected_num_hypervisors + 1))
1007     fi
1008 fi
1009 num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
1010 if ! [ "${num_hypervisors}" ] || ! [ "${num_hypervisors}" -eq ${expected_num_hypervisors} ]; then
1011     echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
1012     exit 1
1013 fi
1014
1015 # External Network
1016 echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
1017 # FIXME Should there be a unique gateway IP and devstack index for each site?
1018 devstack_index=1
1019 for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
1020     # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
1021     ${SSH} "$ip" "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
1022     ${SSH} "$ip" "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
1023 done
1024
1025 # ipsec support
1026 if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
1027     # shellcheck disable=SC2206
1028     ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
1029     for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
1030         for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
1031             KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
1032             KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
1033             ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
1034             ip1=${ALL_NODES[$inx_ip1]}
1035             ip2=${ALL_NODES[$inx_ip2]}
1036             ${SSH} "$ip1" "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1037             ${SSH} "$ip1" "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1038             ${SSH} "$ip1" "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1039             ${SSH} "$ip1" "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1040
1041             ${SSH} "$ip2" "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1042             ${SSH} "$ip2" "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1043             ${SSH} "$ip2" "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1044             ${SSH} "$ip2" "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1045         done
1046     done
1047
1048     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
1049         echo "ip xfrm configuration for node $ip:"
1050         ${SSH} "$ip" "sudo ip xfrm policy list"
1051         ${SSH} "$ip" "sudo ip xfrm state list"
1052     done
1053 fi
1054
1055 # Control Node - PUBLIC_BRIDGE will act as the external router
1056 # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
1057 EXTNET_GATEWAY_IP="10.10.10.250"
1058 EXTNET_INTERNET_IP="10.9.9.9"
1059 EXTNET_PNF_IP="10.10.10.253"
1060 ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
1061
1062 # Control Node - external net PNF simulation
1063 ${SSH} ${!CONTROLIP} "
1064     sudo ip netns add pnf_ns;
1065     sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
1066     sudo ip link set pnf_veth1 netns pnf_ns;
1067     sudo ip link set pnf_veth0 up;
1068     sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
1069     sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
1070 "
1071
1072 # Control Node - external net internet address simulation
1073 ${SSH} ${!CONTROLIP} "
1074     sudo ip tuntap add dev internet_tap mode tap;
1075     sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
1076 "
1077
1078 # Computes
1079 compute_index=1
1080 for compute_ip in ${COMPUTE_IPS[*]}; do
1081     # Tunnel from controller to compute
1082     COMPUTEPORT=compute$(( compute_index++ ))_vxlan
1083     ${SSH} ${!CONTROLIP} "
1084         sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
1085     "
1086     # Tunnel from compute to controller
1087     CONTROLPORT="control_vxlan"
1088     ${SSH} "$compute_ip" "
1089         sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
1090     "
1091 done
1092
1093 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1094     odlmgrip=OPENSTACK_HAPROXY_1_IP
1095     HA_PROXY_IP=${!odlmgrip}
1096     HA_PROXY_1_IP=${!odlmgrip}
1097     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1098     HA_PROXY_2_IP=${!odlmgrip2}
1099     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1100     HA_PROXY_3_IP=${!odlmgrip3}
1101 else
1102     HA_PROXY_IP=${ODL_SYSTEM_IP}
1103     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1104     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1105     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1106 fi
1107
1108 get_test_suites SUITES
1109
1110 #install all client versions required for this job testing
1111 install_openstack_clients_in_robot_vm
1112
1113 # TODO: run openrc on control node and then scrape the vars from it
1114 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1115 cat > /tmp/os_netvirt_client_rc << EOF
1116 export OS_USERNAME=admin
1117 export OS_PASSWORD=admin
1118 export OS_PROJECT_NAME=admin
1119 export OS_USER_DOMAIN_NAME=default
1120 export OS_PROJECT_DOMAIN_NAME=default
1121 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1122 export OS_IDENTITY_API_VERSION=3
1123 export OS_IMAGE_API_VERSION=2
1124 export OS_TENANT_NAME=admin
1125 unset OS_CLOUD
1126 EOF
1127
1128 source /tmp/os_netvirt_client_rc
1129
1130 echo "Get all versions before executing robot"
1131 echo "openstack --version"
1132 command -v openstack
1133 openstack --version
1134 echo "nova --version"
1135 command -v nova
1136 nova --version
1137 echo "neutron --version"
1138 command -v neutron
1139 neutron --version
1140
1141 stacktime=$(timer "$totaltmr")
1142 printf "Stacking elapsed time: %s\n" "${stacktime}"
1143
1144 echo "Starting Robot test suites ${SUITES} ..."
1145 # please add robot -v arguments on a single line and alphabetized
1146 suite_num=0
1147 # ${TESTOPTIONS}, ${SUITES} are space-separated parameters and should not be quoted.
1148  # shellcheck disable=SC2086
1149 for suite in ${SUITES}; do
1150     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1151     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1152     (( suite_num = suite_num + 1 ))
1153     suite_index="$(printf %02d "${suite_num}")"
1154     suite_name="$(basename "${suite}" | cut -d. -f1)"
1155     log_name="${suite_index}_${suite_name}"
1156     robot -N "${log_name}" \
1157     -c critical -e exclude -e "skip_if_${DISTROSTREAM}" \
1158     --log "log_${log_name}.html" --report "report_${log_name}.html" --output "output_${log_name}.xml" \
1159     --removekeywords wuks \
1160     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1161     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1162     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1163     -v BUNDLEFOLDER:"${BUNDLEFOLDER}" \
1164     -v BUNDLE_URL:"${ACTUAL_BUNDLE_URL}" \
1165     -v CMP_INSTANCES_SHARED_PATH:/var/instances \
1166     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1167     -v CONTROLLER_USER:"${USER}" \
1168     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1169     -v ENABLE_ITM_DIRECT_TUNNELS:"${ENABLE_ITM_DIRECT_TUNNELS}" \
1170     -v HA_PROXY_IP:"${HA_PROXY_IP}" \
1171     -v HA_PROXY_1_IP:"${HA_PROXY_1_IP}" \
1172     -v HA_PROXY_2_IP:"${HA_PROXY_2_IP}" \
1173     -v HA_PROXY_3_IP:"${HA_PROXY_3_IP}" \
1174     -v JDKVERSION:"${JDKVERSION}" \
1175     -v JENKINS_WORKSPACE:"${WORKSPACE}" \
1176     -v NEXUSURL_PREFIX:"${NEXUSURL_PREFIX}" \
1177     -v NUM_ODL_SYSTEM:"${NUM_ODL_SYSTEM}" \
1178     -v NUM_OS_SYSTEM:"${NUM_OPENSTACK_SYSTEM}" \
1179     -v NUM_TOOLS_SYSTEM:"${NUM_TOOLS_SYSTEM}" \
1180     -v ODL_SNAT_MODE:"${ODL_SNAT_MODE}" \
1181     -v ODL_STREAM:"${DISTROSTREAM}" \
1182     -v ODL_SYSTEM_IP:"${ODL_SYSTEM_IP}" \
1183     -v ODL_SYSTEM_1_IP:"${ODL_SYSTEM_1_IP}" \
1184     -v ODL_SYSTEM_2_IP:"${ODL_SYSTEM_2_IP}" \
1185     -v ODL_SYSTEM_3_IP:"${ODL_SYSTEM_3_IP}" \
1186     -v ODL_SYSTEM_4_IP:"${ODL_SYSTEM_4_IP}" \
1187     -v ODL_SYSTEM_5_IP:"${ODL_SYSTEM_5_IP}" \
1188     -v ODL_SYSTEM_6_IP:"${ODL_SYSTEM_6_IP}" \
1189     -v ODL_SYSTEM_7_IP:"${ODL_SYSTEM_7_IP}" \
1190     -v ODL_SYSTEM_8_IP:"${ODL_SYSTEM_8_IP}" \
1191     -v ODL_SYSTEM_9_IP:"${ODL_SYSTEM_9_IP}" \
1192     -v OS_CONTROL_NODE_IP:"${OPENSTACK_CONTROL_NODE_1_IP}" \
1193     -v OS_CONTROL_NODE_1_IP:"${OPENSTACK_CONTROL_NODE_1_IP}" \
1194     -v OS_CONTROL_NODE_2_IP:"${OPENSTACK_CONTROL_NODE_2_IP}" \
1195     -v OS_CONTROL_NODE_3_IP:"${OPENSTACK_CONTROL_NODE_3_IP}" \
1196     -v OPENSTACK_BRANCH:"${OPENSTACK_BRANCH}" \
1197     -v OS_COMPUTE_1_IP:"${OPENSTACK_COMPUTE_NODE_1_IP}" \
1198     -v OS_COMPUTE_2_IP:"${OPENSTACK_COMPUTE_NODE_2_IP}" \
1199     -v OS_COMPUTE_3_IP:"${OPENSTACK_COMPUTE_NODE_3_IP}" \
1200     -v OS_COMPUTE_4_IP:"${OPENSTACK_COMPUTE_NODE_4_IP}" \
1201     -v OS_COMPUTE_5_IP:"${OPENSTACK_COMPUTE_NODE_5_IP}" \
1202     -v OS_COMPUTE_6_IP:"${OPENSTACK_COMPUTE_NODE_6_IP}" \
1203     -v OPENSTACK_TOPO:"${OPENSTACK_TOPO}" \
1204     -v OS_USER:"${USER}" \
1205     -v PUBLIC_PHYSICAL_NETWORK:"${PUBLIC_PHYSICAL_NETWORK}" \
1206     -v SECURITY_GROUP_MODE:"${SECURITY_GROUP_MODE}" \
1207     -v TOOLS_SYSTEM_IP:"${TOOLS_SYSTEM_1_IP}" \
1208     -v TOOLS_SYSTEM_1_IP:"${TOOLS_SYSTEM_1_IP}" \
1209     -v TOOLS_SYSTEM_2_IP:"${TOOLS_SYSTEM_2_IP}" \
1210     -v TOOLS_SYSTEM_3_IP:"${TOOLS_SYSTEM_3_IP}" \
1211     -v USER_HOME:"${HOME}" \
1212     -v WORKSPACE:/tmp \
1213     ${TESTOPTIONS} ${suite} || true
1214 done
1215 #rebot exit codes seem to be different
1216 rebot --output "${WORKSPACE}/output.xml" --log log_full.html --report report.html -N openstack output_*.xml || true
1217
1218 echo "Examining the files in data/log and checking file size"
1219 # shellcheck disable=SC2029
1220 ssh "${ODL_SYSTEM_IP}" "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1221 # shellcheck disable=SC2029
1222 ssh "${ODL_SYSTEM_IP}" "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1223
1224 echo "Tests Executed"
1225 printf "Total elapsed time: %s, stacking time: %s\n" "$(timer "$totaltmr")" "${stacktime}"
1226 true  # perhaps Jenkins is testing last exit code
1227 # vim: ts=4 sw=4 sts=4 et ft=sh :