261 lines
14 KiB
YAML
261 lines
14 KiB
YAML
# Written expecting APT based packaging, however would be trivial to
|
|
# extend another packaging system
|
|
---
|
|
- name: "Update Package Cache"
|
|
local_action: apt update_cache=yes
|
|
- name: "Install packages"
|
|
local_action: apt name={{ item }}
|
|
with_items: required_packages_ubuntu
|
|
# Step required for Ubuntu 14.10
|
|
- name: "Install 14.10 packages"
|
|
local_action: apt name={{ item }}
|
|
with_items:
|
|
- pxelinux
|
|
when: ansible_distribution_version|version_compare('14.10', '>=')
|
|
- name: "Install testing packages"
|
|
local_action: apt name={{ item }}
|
|
with_items:
|
|
- libvirt-bin
|
|
- qemu-utils
|
|
- qemu-kvm
|
|
- sgabios
|
|
when: testing == true
|
|
- name: "Ensuring /opt/stack is present"
|
|
local_action: file name=/opt/stack state=directory owner=root group=root
|
|
# This won't be necessary in the long run, however until a suitable version
|
|
# lands upstream, it is required.
|
|
- name: "Retrieving latest known os_ironic.py file"
|
|
local_action: get_url url={{ latest_os_ironic_url }} dest=/opt/stack/ansible/lib/ansible/modules/extras/cloud/os_ironic.py
|
|
- name: "Retrieving latest known os_ironic_node.py file"
|
|
local_action: get_url url={{ latest_os_ironic_node_url }} dest=/opt/stack/ansible/lib/ansible/modules/extras/cloud/os_ironic_node.py
|
|
- name: "Downloading Ironic"
|
|
local_action: command git clone https://git.openstack.org/openstack/ironic chdir=/opt/stack creates=/opt/stack/ironic
|
|
- name: "Ironic - checking out master branch"
|
|
local_action: command git checkout -f master chdir=/opt/stack/ironic
|
|
- name: "Ironic - resetting master branch"
|
|
local_action: command git reset --hard master chdir=/opt/stack/ironic
|
|
- name: "Ironic - resyncing to current master branch"
|
|
local_action: command git pull --ff-only chdir=/opt/stack/ironic/
|
|
# As of 20150302 155728 has merged. Leaving code present but commented out for future
|
|
# cases where we need to apply a specific patch at this time.
|
|
# - name: "Ironic - Downloading PXE support for IPA"
|
|
# local_action: command git fetch https://review.openstack.org/openstack/ironic refs/changes/28/155728/16 chdir=/opt/stack/ironic
|
|
#- name: "Ironic - Checking out PXE support for IPA"
|
|
# local_action: command git checkout FETCH_HEAD chdir=/opt/stack/ironic
|
|
### End comment out
|
|
# TODO: The pip installation of python-ironicclient is disabled in order to
|
|
# support rev 158520.
|
|
#- name: "Install ironic client"
|
|
# local_action: pip name=python-ironicclient state=present
|
|
- name: "python-ironicclient - Retrieving library from git.openstack.org"
|
|
local_action: command git clone https://review.openstack.org/openstack/python-ironicclient chdir=/opt/stack creates=/opt/stack/python-ironicclient
|
|
- name: "python-ironicclient - Checking out master branch"
|
|
local_action: command git checkout -f master chdir=/opt/stack/python-ironicclient
|
|
- name: "python-ironicclient - Resetting local repository"
|
|
local_action: command git reset --hard master chdir=/opt/stack/python-ironicclient
|
|
- name: "python-ironicclient - Resyncing local repository"
|
|
local_action: command git pull --ff-only chdir=/opt/stack/python-ironicclient
|
|
# This patch is https://review.openstack.org/#/c/158520/ which adds support
|
|
# for use of node names instead of UUIDs. We don't presently utilize this
|
|
# but it can be supported at some point.
|
|
- name: "python-ironicclient - Downloading patch for logical names in Ironic"
|
|
local_action: command git fetch https://review.openstack.org/openstack/python-ironicclient refs/changes/20/158520/1 chdir=/opt/stack/python-ironicclient
|
|
- name: "python-ironicclient - Checking out patch."
|
|
local_action: command git checkout FETCH_HEAD chdir=/opt/stack/python-ironicclient
|
|
- name: "python-ironicclient - Installing patched python-ironicclient library."
|
|
local_action: command pip install -I --force-reinstall /opt/stack/python-ironicclient
|
|
when: skip_install is not defined
|
|
- name: "proliantutils - Install from pip"
|
|
local_action: pip name=proliantutils state=present
|
|
when: skip_install is not defined
|
|
# TODO: The next package is installed via git and then manyally installed
|
|
# as the os_ironic and os_ironic_node are under active development and
|
|
# may require features that have not yet been released in shade.
|
|
# TODO: If the portion below remains for any period of time, it should
|
|
# be converted to an include... or consider converting to the integrated
|
|
# git module.
|
|
- name: "Shade - Retrieving library from git.openstack.org"
|
|
local_action: command git clone https://review.openstack.org/openstack-infra/shade chdir=/opt/stack creates=/opt/stack/shade
|
|
- name: "Shade - Checking out master branch"
|
|
local_action: command git checkout -f master chdir=/opt/stack/shade
|
|
- name: "Shade - Resetting local repository"
|
|
local_action: command git reset --hard master chdir=/opt/stack/shade
|
|
- name: "Shade - Resyncing local repository"
|
|
local_action: command git pull --ff-only chdir=/opt/stack/shade
|
|
- name: "Shade - Installing patched shade library."
|
|
local_action: command pip install -I --force-reinstall /opt/stack/shade
|
|
when: skip_install is not defined
|
|
- name: "Include diskimage-builder installation"
|
|
include: dib_install.yml
|
|
when: create_image_via_dib == true
|
|
- name: "Starting MySQL"
|
|
local_action: service name=mysql state=started
|
|
- name: "Starting rabbitmq-server"
|
|
local_action: service name=rabbitmq-server state=started
|
|
- name: "RabbitMQ - Testing if hostname is defined firsts in /etc/hosts"
|
|
local_action: command grep -i "127.0.0.1*.{{ ansible_hostname }}\ localhost" /etc/hosts
|
|
ignore_errors: yes
|
|
register: test_grep_fix_hostname
|
|
- name: "RabbitMQ - Fixing /etc/hosts"
|
|
local_action: command sed -i 's/localhost/{{ ansible_hostname }} localhost/' /etc/hosts
|
|
when: test_grep_fix_hostname.rc != 0
|
|
- name: "Ensuring guest user is removed from rabbitmq"
|
|
local_action: rabbitmq_user user=guest state=absent force=yes
|
|
- name: "Creating Ironic user in RabbitMQ"
|
|
local_action: rabbitmq_user user=ironic password={{ ironic_db_password }} force=yes state=present configure_priv=.* write_priv=.* read_priv=.*
|
|
no_log: true
|
|
- name: "MySQL - Creating DB"
|
|
local_action: mysql_db login_user=root login_password={{ mysql_password }} name=ironic state=present encoding=utf8
|
|
register: test_created_db
|
|
no_log: True
|
|
- name: "MySQL - Creating user for Ironic"
|
|
local_action: mysql_user login_user=root login_password={{ mysql_password }} name=ironic password={{ ironic_db_password }} priv=ironic.*:ALL state=present
|
|
no_log: True
|
|
- name: "Install Ironic using pip"
|
|
local_action: pip name=/opt/stack/ironic state=latest
|
|
when: skip_install is not defined
|
|
- name: "Ensure /etc/ironic exists"
|
|
local_action: file name=/etc/ironic state=directory
|
|
- name: "Place Ironic Config file"
|
|
local_action: template src=ironic.conf.j2 dest=/etc/ironic/ironic.conf
|
|
- name: "Place Ironic IPA Agent PXE configuration file"
|
|
local_action: template src=agent_config.template.j2 dest=/etc/ironic/agent_config.template
|
|
- name: "Copy policy.json to /etc/ironic"
|
|
local_action: copy src=/opt/stack/ironic/etc/ironic/policy.json dest=/etc/ironic/
|
|
- name: "Creating Ironic DB Schema"
|
|
local_action: command ironic-dbsync --config-file /etc/ironic/ironic.conf create_schema
|
|
when: test_created_db.changed == true
|
|
- name: "Upgrading Ironic DB Schema"
|
|
local_action: command ironic-dbsync --config-file /etc/ironic/ironic.conf upgrade
|
|
when: test_created_db.changed == false
|
|
- name: "Creating an ironic service group"
|
|
local_action: group name=ironic
|
|
- name: "Creating an ironic service user"
|
|
local_action: user name=ironic group=ironic
|
|
- name: "Adding ironic user to libvirtd group"
|
|
local_action: user name=ironic group=libvirtd append=yes
|
|
when: testing == true
|
|
- name: "Placing services"
|
|
local_action: template src=init_template.j2 dest=/etc/init/{{item.service_name}}.conf owner=root group=root
|
|
with_items:
|
|
- { service_name: 'ironic-api', username: 'ironic', args: '--config-file /etc/ironic/ironic.conf'}
|
|
- { service_name: 'ironic-conductor', username: 'ironic', args: '--config-file /etc/ironic/ironic.conf'}
|
|
- name: "Start ironic-conductor"
|
|
local_action: service name=ironic-conductor state=started
|
|
- name: "Start ironic-api"
|
|
local_action: service name=ironic-api state=started
|
|
- name: "Start ironic-conductor"
|
|
local_action: service name=ironic-conductor state=restarted
|
|
- name: "Start ironic-api"
|
|
local_action: service name=ironic-api state=reloaded
|
|
- name: "Setting up PXE and iPXE folders"
|
|
local_action: file name={{item}} owner=ironic group=ironic state=directory
|
|
with_items:
|
|
- /tftpboot
|
|
- /tftpboot/pxelinux.cfg
|
|
- "{{ http_boot_folder }}"
|
|
- name: "Placing tftpd map-file"
|
|
local_action: copy src=tftpboot-map-file dest=/tftpboot/map-file owner=ironic group=ironic
|
|
# TODO: This should not be shell, fix.
|
|
- name: "Disable tftpd-hpa by setting it to manual start"
|
|
local_action: shell echo "manual" > /etc/init/tftpd-hpa.override
|
|
- name: "Disable service tftpd-hpa"
|
|
local_action: service name=tftpd-hpa state=stopped enabled=no
|
|
- name: "Placing pxelinux.0 (pre-14.10)"
|
|
local_action: copy src=/usr/lib/syslinux/pxelinux.0 dest=/tftpboot
|
|
when: ansible_distribution_version|version_compare('14.10', '<')
|
|
- name: "Placing pxelinux.0 (>=14.10)"
|
|
local_action: copy src=/usr/lib/PXELINUX/pxelinux.0 dest=/tftpboot
|
|
when: ansible_distribution_version|version_compare('14.10', '>=')
|
|
- name: "Place boot.ipxe helper script to HTTP root"
|
|
local_action: copy src=boot.ipxe dest=/httpboot/boot.ipxe
|
|
- name: "Place tftp config file"
|
|
local_action: copy src=xinetd.tftp dest=/etc/xinetd.d/tftp
|
|
- name: "Copy iPXE image into place"
|
|
local_action: copy src=/usr/lib/ipxe/undionly.kpxe dest=/tftpboot/
|
|
- name: "Deploy dnsmasq configuration file"
|
|
local_action: template src=dnsmasq.conf.j2 dest=/etc/dnsmasq.conf
|
|
|
|
# NOTE(Shrews) When testing, we want to use our custom dnsmasq.conf file,
|
|
# not the one supplied by libvirt. And the libvirt started dnsmasq processes
|
|
# are not controlled by upstart, so we need to manually kill those.
|
|
- name: "Looking for libvirt dnsmasq config"
|
|
local_action: stat path=/etc/dnsmasq.d/libvirt-bin
|
|
register: test_libvirt_dnsmasq
|
|
- name: "Disabling libvirt dnsmasq config"
|
|
local_action: command mv /etc/dnsmasq.d/libvirt-bin /etc/dnsmasq.d/libvirt-bin~
|
|
when: test_libvirt_dnsmasq == true and testing == true
|
|
- name: "Stopping existing libvirt dnsmasq processes"
|
|
local_action: command killall -w dnsmasq
|
|
when: testing == true
|
|
# NOTE(Shrews) We need to enable ip forwarding for the libvirt bridge to
|
|
# operate properly with dnsmasq. This should be done before starting dnsmasq.
|
|
- name: "Enabling IP forwarding in sysctl"
|
|
local_action: sysctl name="net.ipv4.ip_forward" value=1 sysctl_set=yes state=present reload=yes
|
|
when: testing == true
|
|
# NOTE(Shrews) Ubuntu packaging+apparmor issue prevents libvirt from loading
|
|
# the ROM from /usr/share/misc.
|
|
- name: "Looking for sgabios in /usr/share/qemu"
|
|
local_action: stat path=/usr/share/qemu/sgabios.bin
|
|
register: test_sgabios_qemu
|
|
- name: "Looking for sgabios in /usr/share/misc"
|
|
local_action: stat path=/usr/share/misc/sgabios.bin
|
|
register: test_sgabios_misc
|
|
- name: "Place sgabios.bin"
|
|
local_action: command cp /usr/share/misc/sgabios.bin /usr/share/qemu/sgabios.bin
|
|
when: test_sgabios_qemu == false and test_sgabios_misc == true and testing == true
|
|
|
|
- name: "Deploying nginx configuration file for serving HTTP requests"
|
|
local_action: template src=nginx.conf.j2 dest=/etc/nginx/nginx.conf
|
|
- name: "Ensuring dnsmasq is running"
|
|
local_action: service name={{ item }} state=started
|
|
with_items:
|
|
- xinetd
|
|
- dnsmasq
|
|
- nginx
|
|
- name: "Sending services a reload signal"
|
|
local_action: service name={{ item }} state=reloaded
|
|
with_items:
|
|
- xinetd
|
|
- nginx
|
|
- name: "Sending services a force-reload signal"
|
|
local_action: command /etc/init.d/dnsmasq force-reload
|
|
# Similar logic to below can be utilized to retrieve files
|
|
- name: "Determine if folder exists, else create and populate folder."
|
|
local_action: stat path=/tftpboot/master_images
|
|
register: test_master_images
|
|
- name: "Create master_images folder"
|
|
local_action: file name=/tftpboot/master_images state=directory owner=ironic group=ironic
|
|
when: test_master_images.stat.exists == false
|
|
# This is overly complex, however get_url will always re-retrieve the file
|
|
# if it already exists, and this is to prevent that behavior.
|
|
- name: "Test if CoreOS kernel is present"
|
|
local_action: stat path={{ http_boot_folder }}/coreos_production_pxe.vmlinuz
|
|
register: test_core_os_kernel_present
|
|
- name: "Download CoreOS kernel"
|
|
local_action: get_url url=http://tarballs.openstack.org/ironic-python-agent/coreos/files/coreos_production_pxe.vmlinuz dest={{ http_boot_folder }}/coreos_production_pxe.vmlinuz
|
|
when: test_core_os_kernel_present.stat.exists == false
|
|
- name: "Test if CoreOS image is present"
|
|
local_action: stat path={{ http_boot_folder }}/coreos_production_pxe_image-oem.cpio.gz
|
|
register: test_core_os_image_present
|
|
- name: "Download CoreOS image"
|
|
local_action: get_url url=http://tarballs.openstack.org/ironic-python-agent/coreos/files/coreos_production_pxe_image-oem.cpio.gz dest={{ http_boot_folder }}/coreos_production_pxe_image-oem.cpio.gz
|
|
when: test_core_os_image_present.stat.exists == false
|
|
- name: "Test if Ubuntu 14.04 server cloud amd64 is present"
|
|
local_action: stat path={{ deploy_image }}
|
|
register: test_os_image_present
|
|
# TODO(Julia) This needs to be entirely variablized and made a toggable setting, or auto-discovered?
|
|
# Anything better!
|
|
- name: "Download Ubuntu image"
|
|
local_action: get_url url=http://cloud-images.ubuntu.com/releases/trusty/release/ubuntu-14.04-server-cloudimg-amd64.tar.gz dest=/httpboot/ubuntu-14.04-server-cloudimg-amd64.tar.gz
|
|
when: test_os_image_present.stat.exists == false and create_image_via_dib == false
|
|
- name: "Extract Ubuntu image"
|
|
local_action: command tar -xvzf ubuntu-14.04-server-cloudimg-amd64.tar.gz chdir=/httpboot creates=/httpboot/trusty-server-cloudimg-amd64.img
|
|
when: test_os_image_present.stat.exists == false and create_image_via_dib == false
|
|
- name: "Creating bootable image"
|
|
include: create_bootable_image.yml
|
|
when: test_os_image_present.stat.exists == false and transform_boot_image == true and create_image_via_dib == false
|
|
- name: "Creating image via disk imae builder"
|
|
include: create_dib_image.yml
|
|
when: test_os_image_present.stat.exists == false and transform_boot_image == false and create_image_via_dib == true
|