136 lines
4.4 KiB
Bash
Executable File
136 lines
4.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -xe
|
|
|
|
# Defaults
|
|
FIRST_INTERFACE="$(head -1 vars/aio/eth0)"
|
|
EXTERNAL_INTERFACE="$(head -1 vars/aio/eth2)"
|
|
INTERNAL_IP="$(head -1 vars/aio/eth0-floating-ip)"
|
|
|
|
echo "--- Running Pre-flight Checks ---"
|
|
|
|
# 1. Check if the user is root
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "ERROR: This script must be run as root (use sudo)."
|
|
exit 1
|
|
fi
|
|
|
|
# 2. Check if the network interfaces actually exist
|
|
for iface in "$FIRST_INTERFACE" "$EXTERNAL_INTERFACE"; do
|
|
if ! ip link show "$iface" > /dev/null 2>&1; then
|
|
echo "ERROR: Interface $iface not found. Check your 'ip link' output."
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# 3. Ensure the VIP is NOT pingable (must be free)
|
|
echo "Checking if VIP $INTERNAL_IP is available..."
|
|
if ping -c 1 -W 1 "$INTERNAL_IP" > /dev/null 2>&1; then
|
|
echo "ERROR: VIP $INTERNAL_IP is already responding to pings!"
|
|
echo "Choose an unused IP in the same subnet as $FIRST_INTERFACE."
|
|
exit 1
|
|
fi
|
|
|
|
# 4. Check for enough RAM (Kolla-Ansible usually needs 8GB+ for All-in-One)
|
|
# Use -m (MB) to avoid rounding errors from -g
|
|
TOTAL_RAM_MB=$(free -m | awk '/^Mem:/{print $2}')
|
|
if [ "$TOTAL_RAM_MB" -lt 8192 ]; then
|
|
echo "WARNING: You only have ~$((TOTAL_RAM_MB / 1024))GB of RAM. OpenStack might be very slow or fail to deploy."
|
|
fi
|
|
|
|
echo "--- Pre-flight Checks Passed! Starting Installation ---"
|
|
|
|
|
|
# 1. Install System Dependencies
|
|
dnf install -y git python3-devel libffi-devel gcc openssl-devel python3-libselinux plocate
|
|
|
|
KOLLA_VENV="/opt/ansible-kolla-venv"
|
|
KOLLA_WORKING="/opt/ansible-kolla"
|
|
|
|
mkdir -p "${KOLLA_VENV}" "${KOLLA_WORKING}" /etc/kolla
|
|
|
|
# 2. Virtual Environment Setup
|
|
python3 -m venv "${KOLLA_VENV}"
|
|
source "${KOLLA_VENV}/bin/activate"
|
|
|
|
pip install -U pip
|
|
pip install git+https://opendev.org/openstack/kolla-ansible@stable/2025.2
|
|
|
|
# 3. Configuration Setup
|
|
cp -r "${KOLLA_VENV}/share/kolla-ansible/etc_examples/kolla/"* /etc/kolla/
|
|
|
|
# Change into working dir — all relative paths below are relative to here
|
|
cd "${KOLLA_WORKING}"
|
|
[ ! -f all-in-one ] && cp "${KOLLA_VENV}/share/kolla-ansible/ansible/inventory/all-in-one" .
|
|
|
|
echo "Take your time to set up the config files, then press Enter to continue..."
|
|
read -r
|
|
|
|
# Install Ansible Galaxy roles and generate passwords
|
|
kolla-ansible install-deps
|
|
kolla-genpwd
|
|
|
|
# 4. Patch globals.yml
|
|
GLOBALS_FILENAME="/etc/kolla/globals.yml"
|
|
|
|
# Only uncomments lines that start with '#option:'; will NOT override already-active 'no' values.
|
|
enable_kolla_options() {
|
|
local globals_file="$1"
|
|
shift
|
|
local options=("$@")
|
|
|
|
for option in "${options[@]}"; do
|
|
echo "Enabling ${option}..."
|
|
sed -i "s@^#${option}:.*@${option}: \"yes\"@g" "${globals_file}"
|
|
done
|
|
}
|
|
|
|
sed -i "s@^#openstack_release:.*@openstack_release: \"2025.2\"@g" "${GLOBALS_FILENAME}"
|
|
sed -i "s@^#kolla_base_distro:.*@kolla_base_distro: \"rocky\"@g" "${GLOBALS_FILENAME}"
|
|
sed -i "s@^#network_interface:.*@network_interface: \"${FIRST_INTERFACE}\"@g" "${GLOBALS_FILENAME}"
|
|
sed -i "s@^#neutron_external_interface:.*@neutron_external_interface: \"${EXTERNAL_INTERFACE}\"@g" "${GLOBALS_FILENAME}"
|
|
sed -i "s@^#kolla_internal_vip_address:.*@kolla_internal_vip_address: \"${INTERNAL_IP}\"@g" "${GLOBALS_FILENAME}"
|
|
|
|
SERVICES_TO_ENABLE=(
|
|
"enable_horizon"
|
|
# "enable_neutron_fwaas" # <-- remove or comment this out; retired in 2023
|
|
# "enable_neutron_qos"
|
|
# "enable_cinder"
|
|
"enable_mariadb"
|
|
"enable_valkey"
|
|
# "enable_octavia"
|
|
# "skip_cinder_backend_check"
|
|
# "enable_cinder_backend_nfs"
|
|
# "enable_cinder_backup"
|
|
)
|
|
|
|
enable_kolla_options "${GLOBALS_FILENAME}" "${SERVICES_TO_ENABLE[@]}"
|
|
|
|
# Octavia cert config — only append if Octavia is actually being enabled
|
|
if printf '%s\n' "${SERVICES_TO_ENABLE[@]}" | grep -q '^enable_octavia$'; then
|
|
cat <<EOF >> "${GLOBALS_FILENAME}"
|
|
octavia_certs_country: IL
|
|
octavia_certs_state: Shomron
|
|
octavia_certs_organization: NgTech LTD
|
|
octavia_certs_organizational_unit: Octavia
|
|
EOF
|
|
fi
|
|
|
|
# 5. Deployment
|
|
kolla-ansible bootstrap-servers -i ./all-in-one
|
|
|
|
# Only run octavia-certificates if Octavia is enabled
|
|
if printf '%s\n' "${SERVICES_TO_ENABLE[@]}" | grep -q '^enable_octavia$'; then
|
|
kolla-ansible octavia-certificates -i ./all-in-one
|
|
fi
|
|
|
|
kolla-ansible prechecks -i ./all-in-one
|
|
kolla-ansible deploy -i ./all-in-one
|
|
|
|
# 6. Post-Install (still inside venv)
|
|
pip install python-openstackclient
|
|
kolla-ansible post-deploy -i ./all-in-one
|
|
|
|
echo "Deployment Complete. Credentials located in /etc/kolla/admin-openrc.sh"
|
|
deactivate
|