set -o xtrace

unset GREP_OPTIONS

unset LANG

unset LANGUAGE

LC_ALL=en_US.utf8

export LC_ALL

unset `env | grep -E '^OS_' | cut -d = -f 1`

umask 022

PATH=$PATH:/usr/local/bin:/usr/local/sbin:/usr/sbin:/sbin

TOP_DIR=$(cd $(dirname "$0") && pwd)

NOUNSET=${NOUNSET:-}

if [[ -n "$NOUNSET" ]]; then

set -o nounset

DEVSTACK_START_TIME=$(date +%s)

if [[ -r $TOP_DIR/.stackenv ]]; then

rm $TOP_DIR/.stackenv

FILES=$TOP_DIR/files

if [ ! -d $FILES ]; then

set +o xtrace

echo "missing devstack/files"

exit 1

if [ ! -d $TOP_DIR/inc ]; then

set +o xtrace

echo "missing devstack/inc"

exit 1

if [ ! -d $TOP_DIR/lib ]; then

set +o xtrace

echo "missing devstack/lib"

exit 1

if [[ "${POSIXLY_CORRECT}" == "y" ]]; then

set +o xtrace

echo "You are running POSIX compatibility mode, DevStack requires bash 4.2 or newer."

exit 1

if [[ $EUID -eq 0 ]]; then

set +o xtrace

echo "DevStack should be run as a user with sudo permissions, "

echo "not root."

echo "A \"stack\" user configured correctly can be created with:"

echo " $TOP_DIR/tools/create-stack-user.sh"

exit 1

if [[ -n "$VIRTUAL_ENV" ]]; then

set +o xtrace

echo "You appear to be running under a python virtualenv."

echo "DevStack does not support this, as we may break the"

echo "virtualenv you are currently in by modifying "

echo "external system-level components the virtualenv relies on."

echo "We recommend you use a separate virtual-machine if "

echo "you are worried about DevStack taking over your system."

exit 1

if [[ -e $HOME/.no-devstack ]]; then

set +o xtrace

echo "You've marked this host as a no-devstack host, to save yourself from"

echo "running devstack accidentally. If this is in error, please remove the"

echo "~/.no-devstack file"

exit 1

LAST_SPINNER_PID=""

source $TOP_DIR/functions

source $TOP_DIR/lib/stack

GetDistro

rm -f $TOP_DIR/.localrc.auto

extract_localrc_section $TOP_DIR/local.conf $TOP_DIR/localrc $TOP_DIR/.localrc.auto

if [[ ! -r $TOP_DIR/stackrc ]]; then

die $LINENO "missing $TOP_DIR/stackrc - did you grab more than just stack.sh?"

source $TOP_DIR/stackrc

write_devstack_version

SUPPORTED_DISTROS="trixie|bookworm|noble|rhel9|rhel10"

if [[ ! ${DISTRO} =~ $SUPPORTED_DISTROS ]]; then

echo "WARNING: this script has not been tested on $DISTRO"

if [[ "$FORCE" != "yes" ]]; then

die $LINENO "If you wish to run this script anyway run with FORCE=yes"

fi

export_proxy_variables

disable_negated_services

is_package_installed sudo || is_package_installed sudo-ldap || install_package sudo

sudo grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||

echo "#includedir /etc/sudoers.d" | sudo tee -a /etc/sudoers

if [[ -n "$LOG_SUDO" ]]; then

TEMPFILE=`mktemp`

echo "Defaults log_output" > $TEMPFILE

chmod 0440 $TEMPFILE

sudo chown root:root $TEMPFILE

sudo mv $TEMPFILE /etc/sudoers.d/00_logging

TEMPFILE=`mktemp`

echo "$STACK_USER ALL=(root) NOPASSWD:ALL" >$TEMPFILE

echo "Defaults:$STACK_USER secure_path=/sbin:/usr/sbin:/usr/bin:/bin:/usr/local/sbin:/usr/local/bin" >> $TEMPFILE

echo "Defaults:$STACK_USER !requiretty" >> $TEMPFILE

chmod 0440 $TEMPFILE

sudo chown root:root $TEMPFILE

sudo mv $TEMPFILE /etc/sudoers.d/50_stack_sh

if is_ubuntu; then

echo 'APT::Acquire::Retries "20";' | sudo tee /etc/apt/apt.conf.d/80retry >/dev/null

function _install_epel {

}

function _install_rdo {

}

DEST=${DEST:-/opt/stack}

if [[ ! -d $DEST ]]; then

sudo mkdir -p $DEST

safe_chown -R $STACK_USER $DEST

safe_chmod 0755 $DEST

if [[ -n ${LOGDIR:-} ]]; then

sudo mkdir -p $LOGDIR

safe_chown -R $STACK_USER $LOGDIR

safe_chmod 0755 $LOGDIR

DATA_DIR=${DATA_DIR:-${DEST}/data}

if [[ ! -d $DATA_DIR ]]; then

sudo mkdir -p $DATA_DIR

safe_chown -R $STACK_USER $DATA_DIR

safe_chmod 0755 $DATA_DIR

async_init

LOCAL_HOSTNAME=`hostname -s`

if ! grep -Fqwe "$LOCAL_HOSTNAME" /etc/hosts; then

sudo sed -i "s/\(^127.0.0.1.*\)/\1 $LOCAL_HOSTNAME/" /etc/hosts

SKIP_EPEL_INSTALL=$(trueorfalse False SKIP_EPEL_INSTALL)

if [[ $DISTRO == "rhel9" ]]; then

# for CentOS Stream 9 repository

sudo dnf config-manager --set-enabled crb

# for RHEL 9 repository

sudo dnf config-manager --set-enabled codeready-builder-for-rhel-9-x86_64-rpms

# rabbitmq and other packages are provided by RDO repositories.

_install_rdo

# Some distributions (Rocky Linux 9) provide curl-minimal instead of curl,

# it triggers a conflict when devstack wants to install "curl".

# Swap curl-minimal with curl.

if is_package_installed curl-minimal; then

sudo dnf swap -y curl-minimal curl

fi

elif [[ $DISTRO == "rhel10" ]]; then

# for CentOS Stream 10 repository

sudo dnf config-manager --set-enabled crb

# rabbitmq and other packages are provided by RDO repositories.

_install_rdo

elif [[ $DISTRO == "openEuler-22.03" ]]; then

# There are some problem in openEuler. We should fix it first. Some required

# package/action runs before fixup script. So we can't fix there.

#

# 1. the hostname package is not installed by default

# 2. Some necessary packages are in openstack repo, for example liberasurecode-devel

# 3. python3-pip can be uninstalled by `get_pip.py` automaticly.

# 4. Ensure wget installation before use

install_package hostname openstack-release-wallaby wget

uninstall_package python3-pip

# Add yum repository for libvirt7.X

sudo wget https://eur.openeuler.openatom.cn/coprs/g/sig-openstack/Libvirt-7.X/repo/openeuler-22.03_LTS/group_sig-openstack-Libvirt-7.X-openeuler-22.03_LTS.repo -O /etc/yum.repos.d/libvirt7.2.0.repo

install_python

VERBOSE=$(trueorfalse True VERBOSE)

VERBOSE_NO_TIMESTAMP=$(trueorfalse False VERBOSE)

function spinner {

}

function kill_spinner {

}

function echo_summary {

}

function echo_nolog {

echo $@ >&3

}

TIMESTAMP_FORMAT=${TIMESTAMP_FORMAT:-"%F-%H%M%S"}

LOGDAYS=${LOGDAYS:-7}

CURRENT_LOG_TIME=$(date "+$TIMESTAMP_FORMAT")

if [[ -n "$LOGFILE" ]]; then

# Clean up old log files. Append '.*' to the user-specified

# ``LOGFILE`` to match the date in the search template.

LOGFILE_DIR="${LOGFILE%/*}" # dirname

LOGFILE_NAME="${LOGFILE##*/}" # basename

mkdir -p $LOGFILE_DIR

find $LOGFILE_DIR -maxdepth 1 -name $LOGFILE_NAME.\* -mtime +$LOGDAYS -exec rm {} \;

LOGFILE=$LOGFILE.${CURRENT_LOG_TIME}

SUMFILE=$LOGFILE.summary.${CURRENT_LOG_TIME}

# Redirect output according to config

# Set fd 3 to a copy of stdout. So we can set fd 1 without losing

# stdout later.

exec 3>&1

if [[ "$VERBOSE" == "True" ]]; then

_of_args="-v"

if [[ "$VERBOSE_NO_TIMESTAMP" == "True" ]]; then

_of_args="$_of_args --no-timestamp"

fi

# Set fd 1 and 2 to write the log file

exec 1> >( $PYTHON $TOP_DIR/tools/outfilter.py $_of_args -o "${LOGFILE}" ) 2>&1

# Set fd 6 to summary log file

exec 6> >( $PYTHON $TOP_DIR/tools/outfilter.py -o "${SUMFILE}" )

else

# Set fd 1 and 2 to primary logfile

exec 1> >( $PYTHON $TOP_DIR/tools/outfilter.py -o "${LOGFILE}" ) 2>&1

# Set fd 6 to summary logfile and stdout

exec 6> >( $PYTHON $TOP_DIR/tools/outfilter.py -v -o "${SUMFILE}" >&3 )

fi

echo_summary "stack.sh log $LOGFILE"

# Specified logfile name always links to the most recent log

ln -sf $LOGFILE $LOGFILE_DIR/$LOGFILE_NAME

ln -sf $SUMFILE $LOGFILE_DIR/$LOGFILE_NAME.summary

# Set up output redirection without log files

# Set fd 3 to a copy of stdout. So we can set fd 1 without losing

# stdout later.

exec 3>&1

if [[ "$VERBOSE" != "True" ]]; then

# Throw away stdout and stderr

exec 1>/dev/null 2>&1

fi

# Always send summary fd to original stdout

exec 6> >( $PYTHON $TOP_DIR/tools/outfilter.py -v >&3 )

check_path_perm_sanity ${DEST}

trap exit_trap EXIT

function exit_trap {

}

trap err_trap ERR

function err_trap {

}

set -o errexit

uname -a

SSL_BUNDLE_FILE="$DATA_DIR/ca-bundle.pem"

rm -f $SSL_BUNDLE_FILE

source $TOP_DIR/lib/database

source $TOP_DIR/lib/rpc_backend

source $TOP_DIR/lib/host

tune_host

fetch_plugins

run_phase override_defaults

source $TOP_DIR/lib/apache

source $TOP_DIR/lib/tls

source $TOP_DIR/lib/infra

source $TOP_DIR/lib/libraries

source $TOP_DIR/lib/lvm

source $TOP_DIR/lib/horizon

source $TOP_DIR/lib/keystone

source $TOP_DIR/lib/glance

source $TOP_DIR/lib/nova

source $TOP_DIR/lib/placement

source $TOP_DIR/lib/cinder

source $TOP_DIR/lib/swift

source $TOP_DIR/lib/neutron

source $TOP_DIR/lib/ldap

source $TOP_DIR/lib/dstat

source $TOP_DIR/lib/atop

source $TOP_DIR/lib/tcpdump

source $TOP_DIR/lib/etcd3

source $TOP_DIR/lib/os-vif

run_phase source

function read_password {

}

if initialize_database_backends; then

echo "Using $DATABASE_TYPE database backend"

# Last chance for the database password. This must be handled here

# because read_password is not a library function.

read_password DATABASE_PASSWORD "ENTER A PASSWORD TO USE FOR THE DATABASE."

define_database_baseurl

echo "No database enabled"

if is_service_enabled rabbit; then

read_password RABBIT_PASSWORD "ENTER A PASSWORD TO USE FOR RABBIT."

if is_service_enabled keystone; then

# Services authenticate to Identity with servicename/``SERVICE_PASSWORD``

read_password SERVICE_PASSWORD "ENTER A SERVICE_PASSWORD TO USE FOR THE SERVICE AUTHENTICATION."

# Horizon currently truncates usernames and passwords at 20 characters

read_password ADMIN_PASSWORD "ENTER A PASSWORD TO USE FOR HORIZON AND KEYSTONE (20 CHARS OR LESS)."

# Keystone can now optionally install OpenLDAP by enabling the ``ldap``

# service in ``local.conf`` (e.g. ``enable_service ldap``).

# To clean out the Keystone contents in OpenLDAP set ``KEYSTONE_CLEAR_LDAP``

# to ``yes`` (e.g. ``KEYSTONE_CLEAR_LDAP=yes``) in ``local.conf``. To enable the

# Keystone Identity Driver (``keystone.identity.backends.ldap.Identity``)

# set ``KEYSTONE_IDENTITY_BACKEND`` to ``ldap`` (e.g.

# ``KEYSTONE_IDENTITY_BACKEND=ldap``) in ``local.conf``.

# Only request LDAP password if the service is enabled

if is_service_enabled ldap; then

read_password LDAP_PASSWORD "ENTER A PASSWORD TO USE FOR LDAP"

fi

if is_service_enabled s-proxy; then

# We only ask for Swift Hash if we have enabled swift service.

# ``SWIFT_HASH`` is a random unique string for a swift cluster that

# can never change.

read_password SWIFT_HASH "ENTER A RANDOM SWIFT HASH."

if [[ -z "$SWIFT_TEMPURL_KEY" ]] && [[ "$SWIFT_ENABLE_TEMPURLS" == "True" ]]; then

read_password SWIFT_TEMPURL_KEY "ENTER A KEY FOR SWIFT TEMPURLS."

fi

save_stackenv $LINENO

GIT_DEPTH=0 git_clone $REQUIREMENTS_REPO $REQUIREMENTS_DIR $REQUIREMENTS_BRANCH

echo_summary "Installing package prerequisites"

source $TOP_DIR/tools/install_prereqs.sh

if [[ "$OFFLINE" != "True" ]]; then

PYPI_ALTERNATIVE_URL=${PYPI_ALTERNATIVE_URL:-""} $TOP_DIR/tools/install_pip.sh

source $TOP_DIR/tools/fixup_stuff.sh

fixup_all

if [[ "$GLOBAL_VENV" == "True" ]] ; then

# TODO(frickler): find a better solution for this

sudo ln -sf /opt/stack/data/venv/bin/cinder-manage /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/cinder-rtstool /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/glance /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/nova-manage /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/openstack /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/privsep-helper /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/rally /usr/local/bin

sudo ln -sf /opt/stack/data/venv/bin/tox /usr/local/bin

setup_devstack_virtualenv

pip_install -U os-testr

iniset -sudo /etc/systemd/journald.conf "Journal" "RateLimitBurst" "0"

sudo systemctl restart systemd-journald

install_infra

$VIRTUALENV_CMD $DEST/bindep-venv

$DEST/bindep-venv/bin/pip install bindep

export BINDEP_CMD=${DEST}/bindep-venv/bin/bindep

pkgs="$( _get_plugin_bindep_packages )"

if [[ -n "${pkgs}" ]]; then

install_package ${pkgs}

run_phase stack pre-install

set_systemd_override DefaultLimitNOFILE ${ULIMIT_NOFILE}

install_rpc_backend

restart_rpc_backend

if is_service_enabled $DATABASE_BACKENDS; then

install_database

if [ -n "$DATABASE_TYPE" ]; then

install_database_python

if is_service_enabled neutron; then

install_neutron_agent_packages

if is_service_enabled etcd3; then

install_etcd3

if is_service_enabled tls-proxy; then

configure_CA

init_CA

init_cert

install_dstat

echo_summary "Installing OpenStack project source"

install_libs

install_apache_uwsgi

install_keystoneauth

install_keystoneclient

install_glanceclient

install_cinderclient

install_novaclient

if is_service_enabled swift glance horizon; then

install_swiftclient

if is_service_enabled neutron nova horizon; then

install_neutronclient

install_keystonemiddleware

if is_service_enabled keystone; then

if [ "$KEYSTONE_SERVICE_HOST" == "$SERVICE_HOST" ]; then

stack_install_service keystone

configure_keystone

fi

if is_service_enabled swift; then

if is_service_enabled ceilometer; then

install_ceilometermiddleware

fi

stack_install_service swift

configure_swift

# s3api middleware to provide S3 emulation to Swift

if is_service_enabled s3api; then

# Replace the nova-objectstore port by the swift port

S3_SERVICE_PORT=8080

fi

if is_service_enabled g-api n-api; then

# Image catalog service

stack_install_service glance

configure_glance

if is_service_enabled cinder; then

# Block volume service

stack_install_service cinder

configure_cinder

if is_service_enabled neutron; then

# Network service

stack_install_service neutron

if is_service_enabled nova; then

# Compute service

stack_install_service nova

configure_nova

if is_service_enabled placement; then

# placement api

stack_install_service placement

configure_placement

if is_service_enabled placement placement-client; then

if is_service_enabled n-cpu || is_service_enabled n-sch; then

configure_placement_nova_compute

fi

if is_service_enabled horizon; then

# dashboard

stack_install_service horizon

if is_service_enabled tls-proxy; then

fix_system_ca_bundle_path

if is_service_enabled cinder || [[ "$USE_CINDER_FOR_GLANCE" == "True" ]]; then

# os-brick setup required by glance, cinder, and nova

init_os_brick

run_phase stack install

if use_library_from_git "python-openstackclient"; then

git_clone_by_name "python-openstackclient"

setup_dev_lib "python-openstackclient"

pip_install_gr python-openstackclient