git.onelab.eu Git - build.git/blob - vbuild-init-vserver.sh

1 #!/bin/bash

2 # -*-shell-*-

4 #shopt -s huponexit

6 COMMAND=$(basename $0)

7 DIRNAME=$(dirname $0)

9 # pkgs parsing utilities

10 PATH=$(dirname $0):$PATH export PATH

11 . build.common

13 DEFAULT_FCDISTRO=f14

14 DEFAULT_PLDISTRO=planetlab

15 DEFAULT_PERSONALITY=linux64

16 DEFAULT_IFNAME=eth0

18 COMMAND_VBUILD="vbuild-init-vserver.sh"

19 COMMAND_MYPLC="vtest-init-vserver.sh"

21 function failure () {

22 echo "$COMMAND : Bailing out"

23 exit 1

24 }

26 # overwrite vserver's internal yum config from what is in

27 # .distributions/<distrib>/yum/yum.conf and /yum.repos.d

29 function configure_yum_in_vserver () {

30 set -x

31 set -e

32 trap failure ERR INT

34 vserver=$1; shift

35 fcdistro=$1; shift

36 pldistro=$1; shift

38 templates=/etc/vservers/.distributions/${fcdistro}

39 if [ -f ${templates}/yum/yum.conf ] ; then

40 echo "Initializing yum.conf in $vserver from ${templates}/yum"

41 sed -e "s!@YUMETCDIR@!/etc!g;

42 s!@YUMCACHEDIR@!/var/cache/yum!g;

43 s!@YUMLOGDIR@!/var/log!g;

44 s!@YUMLOCKDIR@!/var/lock!g;

45 " ${templates}/yum/yum.conf > /vservers/$vserver/etc/yum.conf

47 # post process the various @...@ variables from this yum.conf file.

48 else

49 echo "Using $fcdistro default for yum.conf"

50 fi

52 if [ -d ${templates}/yum.repos.d ] ; then

53 echo "Initializing yum.repos.d in $vserver from ${templates}/yum.repos.d"

54 rm -rf /vservers/$vserver/etc/yum.repos.d

55 tar -C ${templates} -cf - yum.repos.d | tar -C /vservers/$vserver/etc -xvf -

56 else

57 echo "Cannot initialize yum.repos.d in $vserver"

58 fi

60 # for using vtest-init-vserver.sh as a general-purpose vserver creation wrapper

61 # just mention 'none' as the repo url

62 if [ -n "$MYPLC_MODE" -a "$REPO_URL" != "none" ] ; then

63 if [ ! -d /vservers/$vserver/etc/yum.repos.d ] ; then

64 echo "WARNING : cannot create myplc repo"

65 else

66 # exclude kernel from fedora repos

67 yumexclude=$(pl_plcyumexclude $fcdistro $pldistro $DIRNAME)

68 for repo in /vservers/$vserver/etc/yum.repos.d/* ; do

69 [ -f $repo ] && yumconf_exclude $repo "exclude=$yumexclude"

70 done

71 # the build repo is not signed at this stage

72 cat > /vservers/$vserver/etc/yum.repos.d/myplc.repo <<EOF

73 [myplc]

74 name= MyPLC

75 baseurl=$REPO_URL

76 enabled=1

77 gpgcheck=0

78 EOF

79 fi

80 fi

81 }

83 # return yum or debootstrap

84 function package_method () {

85 fcdistro=$1; shift

86 case $fcdistro in

87 f[0-9]*|centos[0-9]*|sl[0-9]*) echo yum ;;

88 squeeze|wheezy|oneiric|precise|quantal) echo debootstrap ;;

89 *) echo Unknown distro $fcdistro ;;

90 esac

91 }

93 # need to specify the right mirror for debian variants like ubuntu and the like

94 function debian_mirror () {

95 fcdistro=$1; shift

96 case $fcdistro in

97 squeeze|wheezy)

98 echo http://ftp2.fr.debian.org/debian/ ;;

99 oneiric|precise|quantal)

100 echo http://mir1.ovh.net/ubuntu/ubuntu/ ;;

101 *) echo unknown distro $fcdistro; exit 1;;

102 esac

103 }

104

105

106

107 # return arch from debian distro and personality

108 function canonical_arch () {

109 personality=$1; shift

110 fcdistro=$1; shift

111 case $(package_method $fcdistro) in

112 yum)

113 case $personality in *32) echo i386 ;; *64) echo x86_64 ;; *) echo Unknown-arch-1 ;; esac ;;

114 debootstrap)

115 case $personality in *32) echo i386 ;; *64) echo amd64 ;; *) echo Unknown-arch-2 ;; esac ;;

116 *)

117 echo Unknown-arch-3 ;;

118 esac

119 }

120

121 # the new test framework creates /timestamp in /vservers/<name> *before* populating it

122 function almost_empty () {

123 dir="$1"; shift ;

124 # non existing is fine

125 [ ! -d $dir ] && return 0;

126 # need to have at most one file

127 count=$(cd $dir; ls | wc -l); [ $count -le 1 ];

128 }

129

130 function setup_vserver () {

131

132 set -x

133 set -e

134 trap failure ERR INT

135

136 vserver=$1; shift

137 fcdistro=$1; shift

138 pldistro=$1; shift

139 personality=$1; shift

140

141 # check that this is a new one - see above

142 almost_empty /vservers/$vserver || {

143 echo "$COMMAND : vserver $vserver seems to exist - bailing out"

144 exit 1

145 }

146

147 pkg_method=$(package_method $fcdistro)

148 case $pkg_method in

149 yum)

150 build_options="-m yum -- -d $fcdistro"

151 ;;

152 debootstrap)

153 arch=$(canonical_arch $personality $fcdistro)

154 debmirror=$(debian_mirror $fcdistro)

155 build_options="-m debootstrap -- -d $fcdistro -m $debmirror -- --arch $arch"

156 ;;

157 *)

158 build_options="undefined-package_method" ;;

159 esac

160

161 # create it

162 # try to work around the vserver issue:

163 # vc_ctx_migrate: No such process

164 # rpm-fake.so: failed to initialize communication with resolver

165 for i in $(seq 20) ; do

166 $personality vserver $VERBOSE $vserver build $VSERVER_OPTIONS $build_options && break || true

167 echo "* ${i}-th attempt to 'vserver build' failed - waiting for 3 seconds"

168 sleep 3

169 done

170 # check success - not enough to check for the directory, let's assume /etc/ in image

171 [ -d /vservers/$vserver/etc ]

172

173 if [ ! -z "$personality" ] ; then

174 if [ -f "/etc/vservers/$vserver/personality" ] ; then

175 registered_personality=$(grep $personality /etc/vservers/$vserver/personality | wc -l)

176 else

177 registered_personality=0

178 fi

179 if [ $registered_personality -eq 0 -a "$personality" != "linux64" ] ; then

180 echo $personality >> /etc/vservers/$vserver/personality

181 fi

182 fi

183

184 BCAPFILE=/etc/vservers/$vserver/bcapabilities

185 touch $BCAPFILE

186 if [ -n "$VBUILD_MODE" ] ; then

187 ### capabilities required for a build vserver

188 # set up appropriate vserver capabilities to mount, mknod and IPC_LOCK

189 grep -q ^CAP_SYS_ADMIN $BCAPFILE || echo CAP_SYS_ADMIN >> $BCAPFILE

190 grep -q ^CAP_MKNOD $BCAPFILE || echo CAP_MKNOD >> $BCAPFILE

191 grep -q ^CAP_IPC_LOCK $BCAPFILE || echo CAP_IPC_LOCK >> $BCAPFILE

192 # useful for f16 guests that use set_cap_file

193 grep -q ^CAP_SETFCAP $BCAPFILE || echo CAP_SETFCAP >> $BCAPFILE

194 else

195 ### capabilities required for a myplc vserver

196 # for /etc/plc.d/gpg - need to init /dev/random

197 grep -q ^CAP_MKNOD $BCAPFILE || echo CAP_MKNOD >> $BCAPFILE

198 grep -q ^CAP_NET_BIND_SERVICE $BCAPFILE || echo CAP_NET_BIND_SERVICE >> $BCAPFILE

199 # useful for f16 guests that use set_cap_file

200 grep -q ^CAP_SETFCAP $BCAPFILE || echo CAP_SETFCAP >> $BCAPFILE

201 fi

202

203 # Set persistent for the network context

204 # Thierry: Daniel's kernels come with single_ip turned off by default, let's make this explicit

205 echo "persistent,lback_allow,~single_ip" > /etc/vservers/$vserver/nflags

206

207 # Set cflags

208 echo -e "persistent\n~info_init" > /etc/vservers/$vserver/cflags

209

210 # Enable cgroup

211 mkdir /etc/vservers/$vserver/cgroup

212

213 # Set the init style of your vserver to plain for f16 and higher

214 # not working with f16 anyways, systemd requires 2.6.36 to work

215 case $fcdistro in

216 f1[5-9]) echo plain > /etc/vservers/$vserver/apps/init/style ;;

217 esac

218

219 if [ "$pkg_method" = "yum" ] ; then

220 $personality vyum $vserver -- -y install yum

221 # ditto

222 for i in $(seq 20) ; do

223 $personality vserver $VERBOSE $vserver pkgmgmt internalize && break || true

224 echo "* ${i}-th attempt to 'vserver pkgmgmt internalize' failed - waiting for 3 seconds"

225 sleep 3

226 done

227 fi

228

229 # turns out that with wheezy at least, at this point we're getting

230 # /vservers/<vs>/var/run -> /run

231 # /vservers/<vs>/var/lock -> /run/lock

232 # trying to fix this with relative links does not appear to work fine

233 # when trying to vserver start we're then getting

234 # + exec /usr/sbin/vspace --mount --fs --new -- /usr/sbin/vserver ----nonamespace debuild09 start

235 # fakerunlevel: open("/var/run/utmp"): No such file or directory

236 # so instead we bluntly create empty dirs and hope for the best

237 if [ "$pkg_method" = "debootstrap" ] ; then

238 [ -h /vservers/$vserver/var/run ] && [ ! -d /vservers/$vserver/var/run ] && \

239 # { rm -f /vservers/$vserver/var/run ; ln -s ../run /vservers/$vserver/var/run ; }

240 { rm -f /vservers/$vserver/var/run ; mkdir /vservers/$vserver/var/run ; }

241 [ -h /vservers/$vserver/var/lock ] && [ ! -d /vservers/$vserver/var/lock ] && \

242 # { rm -f /vservers/$vserver/var/lock ; ln -s ../run/lock /vservers/$vserver/var/lock ; }

243 { rm -f /vservers/$vserver/var/lock ; mkdir /vservers/$vserver/var/lock ; }

244 fi

245

246 # start the vserver so we can do the following operations

247 # redirect out/err to protect against the vserver's init sequence getting stalled

248 # mostly used for f10 vservers created remotely through ssh

249 $personality vserver $VERBOSE $vserver start >& /dev/null

250

251 if [ "$pkg_method" == "yum" ] ; then

252 $personality vserver $VERBOSE $vserver exec sh -c "rm -f /var/lib/rpm/__db*"

253

254 # run the host rpmdb_dump and restore with the guest rpmdb_load

255 function translate_rpm_hashes () {

256 set -x

257 set -e

258 local personality="$1"; shift

259 local vserver="$1"; shift

260 # need to have utilities installed

261 type -p file

262 type -p awk

263 type -p cut

264 guest_dir=/var/lib/rpm

265 host_dir=/vservers/$vserver/$guest_dir

266 files=$(cd $host_dir ; file * | grep Hash | cut -d: -f 1)

267 for file in $files; do

268 (cd $host_dir && mv $file ${file}-foreign)

269 /usr/lib/rpm/rpmdb_dump $host_dir/${file}-foreign | $personality vserver $VERBOSE $vserver exec /usr/lib/rpm/rpmdb_load $guest_dir/$file

270 done

271 $personality vserver $VERBOSE $vserver exec rpm --rebuilddb

272 return 0

273 }

274

275 # try the simple way, if that fails try to cross fix the rpm hashes

276 $personality vserver $VERBOSE $vserver exec rpm --rebuilddb || translate_rpm_hashes $personality $vserver

277 fi

278

279 # check if the vserver kernel is using VSERVER_DEVICE (vdevmap) support

280 need_vdevmap=$(grep "CONFIG_VSERVER_DEVICE=y" /boot/config-$(uname -r) | wc -l)

281

282 if [ $need_vdevmap -eq 1 ] ; then

283 ctx=$(cat /etc/vservers/$vserver/context)

284 vdevmap --set --xid $ctx --open --create --target /dev/null

285 vdevmap --set --xid $ctx --open --create --target /dev/root

286 fi

287

288 # minimal config in the vserver for yum to work

289 [ "$pkg_method" = "yum" ] && configure_yum_in_vserver $vserver $fcdistro $pldistro

290

291 # set up resolv.conf

292 cp /etc/resolv.conf /vservers/$vserver/etc/resolv.conf

293 # and /etc/hosts for at least localhost

294 [ -f /vservers/$vserver/etc/hosts ] || echo "127.0.0.1 localhost localhost.localdomain" > /vservers/$vserver/etc/hosts

295

296 }

297

298 function devel_or_vtest_tools () {

299

300 set -x

301 set -e

302 trap failure ERR INT

303

304 vserver=$1; shift

305 fcdistro=$1; shift

306 pldistro=$1; shift

307 personality=$1; shift

308

309 pkg_method=$(package_method $fcdistro)

310

311 pkgsfile=$(pl_locateDistroFile $DIRNAME $pldistro $PREINSTALLED)

312

313 ### install individual packages, then groups

314 # get target arch - use uname -i here (we want either x86_64 or i386)

315 vserver_arch=$($personality vserver $vserver exec uname -i)

316 # on debian systems we get arch through the 'arch' command

317 [ "$vserver_arch" = "unknown" ] && vserver_arch=$($personality vserver $vserver exec arch)

318

319 packages=$(pl_getPackages -a $vserver_arch $fcdistro $pldistro $pkgsfile)

320 groups=$(pl_getGroups -a $vserver_arch $fcdistro $pldistro $pkgsfile)

321

322 case "$pkg_method" in

323 yum)

324 [ -n "$packages" ] && $personality vserver $vserver exec yum -y install $packages

325 for group_plus in $groups; do

326 group=$(echo $group_plus | sed -e "s,+++, ,g")

327 $personality vserver $vserver exec yum -y groupinstall "$group"

328 done

329 # store current rpm list in /init-vserver.rpms in case we need to check the contents

330 $personality vserver $vserver exec rpm -aq > /vservers/$vserver/init-vserver.rpms

331 ;;

332 debootstrap)

333 $personality vserver $vserver exec apt-get update

334 # handle this one firt off to be sure

335 $personality vserver $vserver exec apt-get install -y locales

336 # all in a single batch

337 [ -n "$packages" ] && $personality vserver $vserver exec apt-get install -y --ignore-missing $packages || :

338 # of course, on ubuntu apt-get --ignore-missing .. does not ignore missing packages !

339 # check it up a bit

340 for package in $packages ; do

341 if $personality vserver $vserver exec dpkg -l $package >& /dev/null ; then

342 echo "==========(debian) package $package OK (1)"

343 else

344 # try to install it individually - so this is for ubuntu

345 $personality vserver $vserver exec apt-get install -y $package || :

346 # still not there ?

347 if $personality vserver $vserver exec dpkg -l $package >& /dev/null ; then

348 echo "==========(debian) package $package OK (2)"

349 else

350 echo "==========(debian) package $package MISSING - ignored"

351 fi

352 fi

353 done

354 ### xxx todo install groups with apt..

355 ;;

356 *)

357 echo "unknown pkg_method $pkg_method"

358 ;;

359 esac

360

361 return 0

362 }

363

364 function post_install () {

365 if [ -n "$VBUILD_MODE" ] ; then

366 post_install_vbuild "$@"

367 else

368 post_install_myplc "$@"

369 fi

370 # setup localtime from the host

371 vserver=$1; shift

372 cp /etc/localtime /vservers/$vserver/etc/localtime

373 }

374

375 function post_install_vbuild () {

376

377 set -x

378 set -e

379 trap failure ERR INT

380

381 vserver=$1; shift

382 personality=$1; shift

383

384 ### From myplc-devel-native.spec

385 # be careful to backslash $ in this, otherwise it's the root context that's going to do the evaluation

386 cat << EOF | $personality vserver $VERBOSE $vserver exec bash -x

387 # set up /dev/loop* in vserver

388 for i in \$(seq 0 255) ; do

389 mknod -m 640 /dev/loop\$i b 7 \$i

390 done

391

392 # create symlink for /dev/fd

393 [ ! -e "/dev/fd" ] && ln -s /proc/self/fd /dev/fd

394

395 # modify /etc/rpm/macros to not use /sbin/new-kernel-pkg

396 sed -i 's,/sbin/new-kernel-pkg:,,' /etc/rpm/macros

397 if [ -h "/sbin/new-kernel-pkg" ] ; then

398 filename=\$(readlink -f /sbin/new-kernel-pkg)

399 if [ "\$filename" == "/sbin/true" ] ; then

400 echo "WARNING: /sbin/new-kernel-pkg symlinked to /sbin/true"

401 echo "\tmost likely /etc/rpm/macros has /sbin/new-kernel-pkg declared in _netsharedpath."

402 echo "\tPlease remove /sbin/new-kernel-pkg from _netsharedpath and reintall mkinitrd."

403 exit 1

404 fi

405 fi

406

407 # customize root's prompt

408 cat << PROFILE > /root/.profile

409 export PS1="[$vserver] \\w # "

410 PROFILE

411

412 uid=2000

413 gid=2000

414

415 # add a "build" user to the system

416 builduser=\$(grep "^build:" /etc/passwd | wc -l)

417 if [ \$builduser -eq 0 ] ; then

418 groupadd -o -g \$gid build;

419 useradd -o -c 'Automated Build' -u \$uid -g \$gid -n -M -s /bin/bash build;

420 fi

421

422 # Allow build user to build certain RPMs as root

423 if [ -f /etc/sudoers ] ; then

424 buildsudo=\$(grep "^build.*ALL=(ALL).*NOPASSWD:.*ALL" /etc/sudoers | wc -l)

425 if [ \$buildsudo -eq 0 ] ; then

426 echo "build ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers

427 fi

428 sed -i 's,^Defaults.*requiretty,#Defaults requiretty,' /etc/sudoers

429 fi

430 #

431 EOF

432

433 }

434

435 function post_install_myplc () {

436 set -x

437 set -e

438 trap failure ERR INT

439

440 vserver=$1; shift

441 personality=$1; shift

442

443 # be careful to backslash $ in this, otherwise it's the root context that's going to do the evaluation

444 cat << EOF | $personality vserver $VERBOSE $vserver exec bash -x

445

446 # create /etc/sysconfig/network if missing

447 [ -f /etc/sysconfig/network ] || echo NETWORKING=yes > /etc/sysconfig/network

448

449 # create symlink for /dev/fd

450 [ ! -e "/dev/fd" ] && ln -s /proc/self/fd /dev/fd

451

452 # turn off regular crond, as plc invokes plc_crond

453 chkconfig crond off

454

455 # take care of loginuid in /etc/pam.d

456 sed -i "s,#*$.*loginuid.*$,#\1," /etc/pam.d/*

457

458 # customize root's prompt

459 cat << PROFILE > /root/.profile

460 export PS1="[$vserver] \\w # "

461 PROFILE

462

463 EOF

464 }

465

466 # parses ifconfig's output to find out ip address and mask

467 # will then be passed to vserver as e.g. --interface 138.96.250.126/255.255.0.0

468 # default is to use lo, that's enough for local mirrors

469 # use -i eth0 in case your fedora mirror is on a separate box on the network

470 function vserverIfconfig () {

471 ifname=$1; shift

472 local result=""

473 line=$(ifconfig $ifname 2> /dev/null | grep 'inet addr')

474 if [ -n "$line" ] ; then

475 set $line

476 for word in "$@" ; do

477 addr=$(echo $word | sed -e s,[aA][dD][dD][rR]:,,)

478 mask=$(echo $word | sed -e s,[mM][aA][sS][kK]:,,)

479 if [ "$word" != "$addr" ] ; then

480 result="${addr}"

481 elif [ "$word" != "$mask" ] ; then

482 result="${result}/${mask}"

483 fi

484 done

485 fi

486 if [ -z "$result" ] ; then

487 echo "vserverIfconfig failed to locate $ifname"

488 exit 1

489 else

490 echo $result

491 fi

492 }

493

494 function usage () {

495 set +x

496 echo "Usage: $COMMAND_VBUILD [options] vserver-name [ -- vserver-options ]"

497 echo "Usage: $COMMAND_MYPLC [options] vserver-name repo-url [ -- vserver-options ]"

498 echo "Requirements: you need to have a vserver-compliant kernel,"

499 echo " as well as the util-vserver RPM installed"

500 echo "Description:"

501 echo " This command creates a fresh vserver instance, for building, or running, myplc"

502 echo "Supported options"

503 echo " -f fcdistro - for creating the root filesystem - defaults to $DEFAULT_FCDISTRO"

504 echo " -d pldistro - defaults to $DEFAULT_PLDISTRO"

505 echo " -p personality - defaults to $DEFAULT_PERSONALITY"

506 echo " -i ifname: determines ip and netmask attached to ifname, and passes it to the vserver"

507 echo " -r : set apps/init/mark to default so the vserver restart upon reboot"

508 echo " -v : verbose - passes -v to calls to vserver"

509 echo "vserver-options"

510 echo " all args after the optional -- are passed to vserver <name> build <options>"

511 echo " typical usage is e.g. --interface eth0:200.150.100.10/24"

512 echo "With $COMMAND_MYPLC you can give 'none' as the URL, in which case"

513 echo " myplc.repo does not get created"

514 exit 1

515 }

516

517 ### parse args and

518 function main () {

519

520 set -e

521 trap failure ERR INT

522

523 case "$COMMAND" in

524 $COMMAND_VBUILD)

525 VBUILD_MODE=true ;;

526 $COMMAND_MYPLC)

527 MYPLC_MODE=true;;

528 *)

529 usage ;;

530 esac

531

532 VERBOSE=

533 RESISTANT=""

534 IFNAME=""

535 VSERVER_OPTIONS=""

536

537 # the set of preinstalled packages - depends on vbuild or vtest

538 if [ -n "$VBUILD_MODE" ] ; then

539 PREINSTALLED=devel.pkgs

540 else

541 PREINSTALLED=vtest.pkgs

542 fi

543 while getopts "f:d:p:P:i:rv" opt ; do

544 case $opt in

545 f) fcdistro=$OPTARG;;

546 d) pldistro=$OPTARG;;

547 p) personality=$OPTARG;;

548 P) PREINSTALLED=$OPTARG;;

549 i) IFNAME=$OPTARG;;

550 r) RESISTANT="true";;

551 v) VERBOSE="-v" ;;

552 *) usage ;;

553 esac

554 done

555

556 shift $(($OPTIND - 1))

557

558 # parse fixed arguments

559 [[ -z "$@" ]] && usage

560 vserver=$1 ; shift

561 if [ -n "$MYPLC_MODE" ] ; then

562 [[ -z "$@" ]] && usage

563 REPO_URL=$1 ; shift

564 fi

565

566 # parse vserver options

567 if [[ -n "$@" ]] ; then

568 if [ "$1" == "--" ] ; then

569 shift

570 VSERVER_OPTIONS="$@"

571 else

572 usage

573 fi

574 fi

575

576 # with new util-vserver, it is mandatory to provide an IP even for building

577 if [ -n "$VBUILD_MODE" ] ; then

578 [ -z "$IFNAME" ] && IFNAME=$DEFAULT_IFNAME

579 fi

580 if [ -n "$IFNAME" ] ; then

581 localip=$(vserverIfconfig $IFNAME)

582 VSERVER_OPTIONS="$VSERVER_OPTIONS --interface $localip"

583 fi

584

585 [ -z "$fcdistro" ] && fcdistro=$DEFAULT_FCDISTRO

586 [ -z "$pldistro" ] && pldistro=$DEFAULT_PLDISTRO

587 [ -z "$personality" ] && personality=$DEFAULT_PERSONALITY

588

589 setup_vserver $vserver $fcdistro $pldistro $personality

590 devel_or_vtest_tools $vserver $fcdistro $pldistro $personality

591 post_install $vserver $personality

592

593 # Start Vserver automatically on boot

594 [ -n "$RESISTANt" ] && echo "default" > /etc/vservers/$vserver/apps/init/mark

595

596 echo $COMMAND Done

597 }

598

599 main "$@"