Statistics
| Branch: | Tag: | Revision:

root / lib / bootstrap.py @ 66e884e1

History | View | Annotate | Download (27.3 kB)

1 a0c9f010 Michael Hanselmann
#
2 a0c9f010 Michael Hanselmann
#
3 a0c9f010 Michael Hanselmann
4 600535f0 Manuel Franceschini
# Copyright (C) 2006, 2007, 2008, 2010 Google Inc.
5 a0c9f010 Michael Hanselmann
#
6 a0c9f010 Michael Hanselmann
# This program is free software; you can redistribute it and/or modify
7 a0c9f010 Michael Hanselmann
# it under the terms of the GNU General Public License as published by
8 a0c9f010 Michael Hanselmann
# the Free Software Foundation; either version 2 of the License, or
9 a0c9f010 Michael Hanselmann
# (at your option) any later version.
10 a0c9f010 Michael Hanselmann
#
11 a0c9f010 Michael Hanselmann
# This program is distributed in the hope that it will be useful, but
12 a0c9f010 Michael Hanselmann
# WITHOUT ANY WARRANTY; without even the implied warranty of
13 a0c9f010 Michael Hanselmann
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 a0c9f010 Michael Hanselmann
# General Public License for more details.
15 a0c9f010 Michael Hanselmann
#
16 a0c9f010 Michael Hanselmann
# You should have received a copy of the GNU General Public License
17 a0c9f010 Michael Hanselmann
# along with this program; if not, write to the Free Software
18 a0c9f010 Michael Hanselmann
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
19 a0c9f010 Michael Hanselmann
# 02110-1301, USA.
20 a0c9f010 Michael Hanselmann
21 a0c9f010 Michael Hanselmann
22 a0c9f010 Michael Hanselmann
"""Functions to bootstrap a new cluster.
23 a0c9f010 Michael Hanselmann

24 a0c9f010 Michael Hanselmann
"""
25 a0c9f010 Michael Hanselmann
26 a0c9f010 Michael Hanselmann
import os
27 a0c9f010 Michael Hanselmann
import os.path
28 a0c9f010 Michael Hanselmann
import re
29 b1b6ea87 Iustin Pop
import logging
30 d693c864 Iustin Pop
import time
31 a0c9f010 Michael Hanselmann
32 a0c9f010 Michael Hanselmann
from ganeti import rpc
33 a0c9f010 Michael Hanselmann
from ganeti import ssh
34 a0c9f010 Michael Hanselmann
from ganeti import utils
35 a0c9f010 Michael Hanselmann
from ganeti import errors
36 a0c9f010 Michael Hanselmann
from ganeti import config
37 a0c9f010 Michael Hanselmann
from ganeti import constants
38 b9eeeb02 Michael Hanselmann
from ganeti import objects
39 a0c9f010 Michael Hanselmann
from ganeti import ssconf
40 a33848a5 Guido Trotter
from ganeti import serializer
41 a5728081 Guido Trotter
from ganeti import hypervisor
42 a721e23a Luca Bigliardi
from ganeti import bdev
43 a744b676 Manuel Franceschini
from ganeti import netutils
44 d367b66c Manuel Franceschini
from ganeti import backend
45 a0c9f010 Michael Hanselmann
46 88b92fe3 Guido Trotter
# ec_id for InitConfig's temporary reservation manager
47 88b92fe3 Guido Trotter
_INITCONF_ECID = "initconfig-ecid"
48 88b92fe3 Guido Trotter
49 e38220e4 Michael Hanselmann
50 531baf8e Iustin Pop
def _InitSSHSetup():
51 a0c9f010 Michael Hanselmann
  """Setup the SSH configuration for the cluster.
52 a0c9f010 Michael Hanselmann

53 a0c9f010 Michael Hanselmann
  This generates a dsa keypair for root, adds the pub key to the
54 a0c9f010 Michael Hanselmann
  permitted hosts and adds the hostkey to its own known hosts.
55 a0c9f010 Michael Hanselmann

56 a0c9f010 Michael Hanselmann
  """
57 a0c9f010 Michael Hanselmann
  priv_key, pub_key, auth_keys = ssh.GetUserFiles(constants.GANETI_RUNAS)
58 a0c9f010 Michael Hanselmann
59 a0c9f010 Michael Hanselmann
  for name in priv_key, pub_key:
60 a0c9f010 Michael Hanselmann
    if os.path.exists(name):
61 a0c9f010 Michael Hanselmann
      utils.CreateBackup(name)
62 a0c9f010 Michael Hanselmann
    utils.RemoveFile(name)
63 a0c9f010 Michael Hanselmann
64 a0c9f010 Michael Hanselmann
  result = utils.RunCmd(["ssh-keygen", "-t", "dsa",
65 a0c9f010 Michael Hanselmann
                         "-f", priv_key,
66 a0c9f010 Michael Hanselmann
                         "-q", "-N", ""])
67 a0c9f010 Michael Hanselmann
  if result.failed:
68 a0c9f010 Michael Hanselmann
    raise errors.OpExecError("Could not generate ssh keypair, error %s" %
69 a0c9f010 Michael Hanselmann
                             result.output)
70 a0c9f010 Michael Hanselmann
71 7a0156dc Luca Bigliardi
  utils.AddAuthorizedKey(auth_keys, utils.ReadFile(pub_key))
72 a0c9f010 Michael Hanselmann
73 a0c9f010 Michael Hanselmann
74 c008906b Michael Hanselmann
def GenerateHmacKey(file_name):
75 c008906b Michael Hanselmann
  """Writes a new HMAC key.
76 c008906b Michael Hanselmann

77 c008906b Michael Hanselmann
  @type file_name: str
78 c008906b Michael Hanselmann
  @param file_name: Path to output file
79 c008906b Michael Hanselmann

80 c008906b Michael Hanselmann
  """
81 43575108 Michael Hanselmann
  utils.WriteFile(file_name, data="%s\n" % utils.GenerateSecret(), mode=0400,
82 43575108 Michael Hanselmann
                  backup=True)
83 43575108 Michael Hanselmann
84 43575108 Michael Hanselmann
85 6b7d5878 Michael Hanselmann
def GenerateClusterCrypto(new_cluster_cert, new_rapi_cert, new_confd_hmac_key,
86 af2ae1c0 Iustin Pop
                          new_cds, rapi_cert_pem=None, cds=None,
87 aeefe835 Iustin Pop
                          nodecert_file=constants.NODED_CERT_FILE,
88 aeefe835 Iustin Pop
                          rapicert_file=constants.RAPI_CERT_FILE,
89 fc0726b9 Michael Hanselmann
                          hmackey_file=constants.CONFD_HMAC_KEY,
90 fc0726b9 Michael Hanselmann
                          cds_file=constants.CLUSTER_DOMAIN_SECRET_FILE):
91 43575108 Michael Hanselmann
  """Updates the cluster certificates, keys and secrets.
92 43575108 Michael Hanselmann

93 43575108 Michael Hanselmann
  @type new_cluster_cert: bool
94 43575108 Michael Hanselmann
  @param new_cluster_cert: Whether to generate a new cluster certificate
95 43575108 Michael Hanselmann
  @type new_rapi_cert: bool
96 43575108 Michael Hanselmann
  @param new_rapi_cert: Whether to generate a new RAPI certificate
97 6b7d5878 Michael Hanselmann
  @type new_confd_hmac_key: bool
98 6b7d5878 Michael Hanselmann
  @param new_confd_hmac_key: Whether to generate a new HMAC key
99 3db3eb2a Michael Hanselmann
  @type new_cds: bool
100 3db3eb2a Michael Hanselmann
  @param new_cds: Whether to generate a new cluster domain secret
101 43575108 Michael Hanselmann
  @type rapi_cert_pem: string
102 43575108 Michael Hanselmann
  @param rapi_cert_pem: New RAPI certificate in PEM format
103 3db3eb2a Michael Hanselmann
  @type cds: string
104 3db3eb2a Michael Hanselmann
  @param cds: New cluster domain secret
105 aeefe835 Iustin Pop
  @type nodecert_file: string
106 aeefe835 Iustin Pop
  @param nodecert_file: optional override of the node cert file path
107 aeefe835 Iustin Pop
  @type rapicert_file: string
108 aeefe835 Iustin Pop
  @param rapicert_file: optional override of the rapi cert file path
109 aeefe835 Iustin Pop
  @type hmackey_file: string
110 aeefe835 Iustin Pop
  @param hmackey_file: optional override of the hmac key file path
111 43575108 Michael Hanselmann

112 43575108 Michael Hanselmann
  """
113 168c1de2 Michael Hanselmann
  # noded SSL certificate
114 aeefe835 Iustin Pop
  cluster_cert_exists = os.path.exists(nodecert_file)
115 43575108 Michael Hanselmann
  if new_cluster_cert or not cluster_cert_exists:
116 43575108 Michael Hanselmann
    if cluster_cert_exists:
117 aeefe835 Iustin Pop
      utils.CreateBackup(nodecert_file)
118 43575108 Michael Hanselmann
119 aeefe835 Iustin Pop
    logging.debug("Generating new cluster certificate at %s", nodecert_file)
120 af2ae1c0 Iustin Pop
    utils.GenerateSelfSignedSslCert(nodecert_file)
121 43575108 Michael Hanselmann
122 6b7d5878 Michael Hanselmann
  # confd HMAC key
123 aeefe835 Iustin Pop
  if new_confd_hmac_key or not os.path.exists(hmackey_file):
124 aeefe835 Iustin Pop
    logging.debug("Writing new confd HMAC key to %s", hmackey_file)
125 aeefe835 Iustin Pop
    GenerateHmacKey(hmackey_file)
126 43575108 Michael Hanselmann
127 43575108 Michael Hanselmann
  # RAPI
128 aeefe835 Iustin Pop
  rapi_cert_exists = os.path.exists(rapicert_file)
129 43575108 Michael Hanselmann
130 43575108 Michael Hanselmann
  if rapi_cert_pem:
131 43575108 Michael Hanselmann
    # Assume rapi_pem contains a valid PEM-formatted certificate and key
132 aeefe835 Iustin Pop
    logging.debug("Writing RAPI certificate at %s", rapicert_file)
133 aeefe835 Iustin Pop
    utils.WriteFile(rapicert_file, data=rapi_cert_pem, backup=True)
134 43575108 Michael Hanselmann
135 43575108 Michael Hanselmann
  elif new_rapi_cert or not rapi_cert_exists:
136 43575108 Michael Hanselmann
    if rapi_cert_exists:
137 aeefe835 Iustin Pop
      utils.CreateBackup(rapicert_file)
138 43575108 Michael Hanselmann
139 aeefe835 Iustin Pop
    logging.debug("Generating new RAPI certificate at %s", rapicert_file)
140 af2ae1c0 Iustin Pop
    utils.GenerateSelfSignedSslCert(rapicert_file)
141 c008906b Michael Hanselmann
142 3db3eb2a Michael Hanselmann
  # Cluster domain secret
143 3db3eb2a Michael Hanselmann
  if cds:
144 fc0726b9 Michael Hanselmann
    logging.debug("Writing cluster domain secret to %s", cds_file)
145 fc0726b9 Michael Hanselmann
    utils.WriteFile(cds_file, data=cds, backup=True)
146 fc0726b9 Michael Hanselmann
147 fc0726b9 Michael Hanselmann
  elif new_cds or not os.path.exists(cds_file):
148 fc0726b9 Michael Hanselmann
    logging.debug("Generating new cluster domain secret at %s", cds_file)
149 fc0726b9 Michael Hanselmann
    GenerateHmacKey(cds_file)
150 3db3eb2a Michael Hanselmann
151 c008906b Michael Hanselmann
152 8f215968 Michael Hanselmann
def _InitGanetiServerSetup(master_name):
153 40a97d80 Michael Hanselmann
  """Setup the necessary configuration for the initial node daemon.
154 40a97d80 Michael Hanselmann

155 40a97d80 Michael Hanselmann
  This creates the nodepass file containing the shared password for
156 600535f0 Manuel Franceschini
  the cluster, generates the SSL certificate and starts the node daemon.
157 600535f0 Manuel Franceschini

158 600535f0 Manuel Franceschini
  @type master_name: str
159 600535f0 Manuel Franceschini
  @param master_name: Name of the master node
160 40a97d80 Michael Hanselmann

161 40a97d80 Michael Hanselmann
  """
162 43575108 Michael Hanselmann
  # Generate cluster secrets
163 3db3eb2a Michael Hanselmann
  GenerateClusterCrypto(True, False, False, False)
164 4a34c5cf Guido Trotter
165 f154a7a3 Michael Hanselmann
  result = utils.RunCmd([constants.DAEMON_UTIL, "start", constants.NODED])
166 a0c9f010 Michael Hanselmann
  if result.failed:
167 a0c9f010 Michael Hanselmann
    raise errors.OpExecError("Could not start the node daemon, command %s"
168 a0c9f010 Michael Hanselmann
                             " had exitcode %s and error %s" %
169 a0c9f010 Michael Hanselmann
                             (result.cmd, result.exit_code, result.output))
170 a0c9f010 Michael Hanselmann
171 5627f375 Michael Hanselmann
  _WaitForNodeDaemon(master_name)
172 5627f375 Michael Hanselmann
173 5627f375 Michael Hanselmann
174 5627f375 Michael Hanselmann
def _WaitForNodeDaemon(node_name):
175 5627f375 Michael Hanselmann
  """Wait for node daemon to become responsive.
176 5627f375 Michael Hanselmann

177 5627f375 Michael Hanselmann
  """
178 d3833ebd Michael Hanselmann
  def _CheckNodeDaemon():
179 5627f375 Michael Hanselmann
    result = rpc.RpcRunner.call_version([node_name])[node_name]
180 d3833ebd Michael Hanselmann
    if result.fail_msg:
181 d3833ebd Michael Hanselmann
      raise utils.RetryAgain()
182 8f215968 Michael Hanselmann
183 d3833ebd Michael Hanselmann
  try:
184 d3833ebd Michael Hanselmann
    utils.Retry(_CheckNodeDaemon, 1.0, 10.0)
185 d3833ebd Michael Hanselmann
  except utils.RetryTimeout:
186 5627f375 Michael Hanselmann
    raise errors.OpExecError("Node daemon on %s didn't answer queries within"
187 5627f375 Michael Hanselmann
                             " 10 seconds" % node_name)
188 5627f375 Michael Hanselmann
189 a0c9f010 Michael Hanselmann
190 0e3baaf3 Iustin Pop
def _InitFileStorage(file_storage_dir):
191 0e3baaf3 Iustin Pop
  """Initialize if needed the file storage.
192 0e3baaf3 Iustin Pop

193 0e3baaf3 Iustin Pop
  @param file_storage_dir: the user-supplied value
194 0e3baaf3 Iustin Pop
  @return: either empty string (if file storage was disabled at build
195 0e3baaf3 Iustin Pop
      time) or the normalized path to the storage directory
196 0e3baaf3 Iustin Pop

197 0e3baaf3 Iustin Pop
  """
198 0e3baaf3 Iustin Pop
  if not constants.ENABLE_FILE_STORAGE:
199 0e3baaf3 Iustin Pop
    return ""
200 0e3baaf3 Iustin Pop
201 0e3baaf3 Iustin Pop
  file_storage_dir = os.path.normpath(file_storage_dir)
202 0e3baaf3 Iustin Pop
203 0e3baaf3 Iustin Pop
  if not os.path.isabs(file_storage_dir):
204 0e3baaf3 Iustin Pop
    raise errors.OpPrereqError("The file storage directory you passed is"
205 0e3baaf3 Iustin Pop
                               " not an absolute path.", errors.ECODE_INVAL)
206 0e3baaf3 Iustin Pop
207 0e3baaf3 Iustin Pop
  if not os.path.exists(file_storage_dir):
208 0e3baaf3 Iustin Pop
    try:
209 0e3baaf3 Iustin Pop
      os.makedirs(file_storage_dir, 0750)
210 0e3baaf3 Iustin Pop
    except OSError, err:
211 0e3baaf3 Iustin Pop
      raise errors.OpPrereqError("Cannot create file storage directory"
212 0e3baaf3 Iustin Pop
                                 " '%s': %s" % (file_storage_dir, err),
213 0e3baaf3 Iustin Pop
                                 errors.ECODE_ENVIRON)
214 0e3baaf3 Iustin Pop
215 0e3baaf3 Iustin Pop
  if not os.path.isdir(file_storage_dir):
216 0e3baaf3 Iustin Pop
    raise errors.OpPrereqError("The file storage directory '%s' is not"
217 0e3baaf3 Iustin Pop
                               " a directory." % file_storage_dir,
218 0e3baaf3 Iustin Pop
                               errors.ECODE_ENVIRON)
219 0e3baaf3 Iustin Pop
  return file_storage_dir
220 0e3baaf3 Iustin Pop
221 0e3baaf3 Iustin Pop
222 a721e23a Luca Bigliardi
#pylint: disable-msg=R0913
223 ec0652ad Guido Trotter
def InitCluster(cluster_name, mac_prefix,
224 ce735215 Guido Trotter
                master_netdev, file_storage_dir, candidate_pool_size,
225 b6a30b0d Guido Trotter
                secondary_ip=None, vg_name=None, beparams=None,
226 6204ee71 Renรฉ Nussbaumer
                nicparams=None, ndparams=None, hvparams=None,
227 6204ee71 Renรฉ Nussbaumer
                enabled_hypervisors=None, modify_etc_hosts=True,
228 6204ee71 Renรฉ Nussbaumer
                modify_ssh_setup=True, maintain_node_health=False,
229 6204ee71 Renรฉ Nussbaumer
                drbd_helper=None, uid_pool=None, default_iallocator=None,
230 3d914585 Renรฉ Nussbaumer
                primary_ip_version=None, prealloc_wipe_disks=False):
231 a0c9f010 Michael Hanselmann
  """Initialise the cluster.
232 a0c9f010 Michael Hanselmann

233 ce735215 Guido Trotter
  @type candidate_pool_size: int
234 ce735215 Guido Trotter
  @param candidate_pool_size: master candidate pool size
235 ce735215 Guido Trotter

236 a0c9f010 Michael Hanselmann
  """
237 ce735215 Guido Trotter
  # TODO: complete the docstring
238 a0c9f010 Michael Hanselmann
  if config.ConfigWriter.IsCluster():
239 debac808 Iustin Pop
    raise errors.OpPrereqError("Cluster is already initialised",
240 debac808 Iustin Pop
                               errors.ECODE_STATE)
241 a0c9f010 Michael Hanselmann
242 b119bccb Guido Trotter
  if not enabled_hypervisors:
243 b119bccb Guido Trotter
    raise errors.OpPrereqError("Enabled hypervisors list must contain at"
244 debac808 Iustin Pop
                               " least one member", errors.ECODE_INVAL)
245 b119bccb Guido Trotter
  invalid_hvs = set(enabled_hypervisors) - constants.HYPER_TYPES
246 b119bccb Guido Trotter
  if invalid_hvs:
247 b119bccb Guido Trotter
    raise errors.OpPrereqError("Enabled hypervisors contains invalid"
248 debac808 Iustin Pop
                               " entries: %s" % invalid_hvs,
249 debac808 Iustin Pop
                               errors.ECODE_INVAL)
250 b119bccb Guido Trotter
251 a0c9f010 Michael Hanselmann
252 2f20d07b Manuel Franceschini
  ipcls = None
253 2f20d07b Manuel Franceschini
  if primary_ip_version == constants.IP4_VERSION:
254 2f20d07b Manuel Franceschini
    ipcls = netutils.IP4Address
255 2f20d07b Manuel Franceschini
  elif primary_ip_version == constants.IP6_VERSION:
256 2f20d07b Manuel Franceschini
    ipcls = netutils.IP6Address
257 2f20d07b Manuel Franceschini
  else:
258 2f20d07b Manuel Franceschini
    raise errors.OpPrereqError("Invalid primary ip version: %d." %
259 2f20d07b Manuel Franceschini
                               primary_ip_version)
260 2f20d07b Manuel Franceschini
261 2f20d07b Manuel Franceschini
  hostname = netutils.GetHostname(family=ipcls.family)
262 2f20d07b Manuel Franceschini
  if not ipcls.IsValid(hostname.ip):
263 2f20d07b Manuel Franceschini
    raise errors.OpPrereqError("This host's IP (%s) is not a valid IPv%d"
264 2f20d07b Manuel Franceschini
                               " address." % (hostname.ip, primary_ip_version))
265 2f20d07b Manuel Franceschini
266 2f20d07b Manuel Franceschini
  if ipcls.IsLoopback(hostname.ip):
267 8b312c1d Manuel Franceschini
    raise errors.OpPrereqError("This host's IP (%s) resolves to a loopback"
268 8b312c1d Manuel Franceschini
                               " address. Please fix DNS or %s." %
269 debac808 Iustin Pop
                               (hostname.ip, constants.ETC_HOSTS),
270 debac808 Iustin Pop
                               errors.ECODE_ENVIRON)
271 a0c9f010 Michael Hanselmann
272 2f20d07b Manuel Franceschini
  if not ipcls.Own(hostname.ip):
273 a0c9f010 Michael Hanselmann
    raise errors.OpPrereqError("Inconsistency: this host's name resolves"
274 a0c9f010 Michael Hanselmann
                               " to %s,\nbut this ip address does not"
275 7c4c22f5 Manuel Franceschini
                               " belong to this host" %
276 debac808 Iustin Pop
                               hostname.ip, errors.ECODE_ENVIRON)
277 a0c9f010 Michael Hanselmann
278 2f20d07b Manuel Franceschini
  clustername = netutils.GetHostname(name=cluster_name, family=ipcls.family)
279 a0c9f010 Michael Hanselmann
280 2f20d07b Manuel Franceschini
  if netutils.TcpPing(clustername.ip, constants.DEFAULT_NODED_PORT, timeout=5):
281 7c4c22f5 Manuel Franceschini
    raise errors.OpPrereqError("Cluster IP already active",
282 debac808 Iustin Pop
                               errors.ECODE_NOTUNIQUE)
283 a0c9f010 Michael Hanselmann
284 2f20d07b Manuel Franceschini
  if not secondary_ip:
285 2f20d07b Manuel Franceschini
    if primary_ip_version == constants.IP6_VERSION:
286 2f20d07b Manuel Franceschini
      raise errors.OpPrereqError("When using a IPv6 primary address, a valid"
287 7c4c22f5 Manuel Franceschini
                                 " IPv4 address must be given as secondary",
288 7c4c22f5 Manuel Franceschini
                                 errors.ECODE_INVAL)
289 b9eeeb02 Michael Hanselmann
    secondary_ip = hostname.ip
290 a0c9f010 Michael Hanselmann
291 2f20d07b Manuel Franceschini
  if not netutils.IP4Address.IsValid(secondary_ip):
292 2f20d07b Manuel Franceschini
    raise errors.OpPrereqError("Secondary IP address (%s) has to be a valid"
293 2f20d07b Manuel Franceschini
                               " IPv4 address." % secondary_ip,
294 2f20d07b Manuel Franceschini
                               errors.ECODE_INVAL)
295 2f20d07b Manuel Franceschini
296 2f20d07b Manuel Franceschini
  if not netutils.IP4Address.Own(secondary_ip):
297 2f20d07b Manuel Franceschini
    raise errors.OpPrereqError("You gave %s as secondary IP,"
298 2f20d07b Manuel Franceschini
                               " but it does not belong to this host." %
299 2f20d07b Manuel Franceschini
                               secondary_ip, errors.ECODE_ENVIRON)
300 2f20d07b Manuel Franceschini
301 a0c9f010 Michael Hanselmann
  if vg_name is not None:
302 a0c9f010 Michael Hanselmann
    # Check if volume group is valid
303 a0c9f010 Michael Hanselmann
    vgstatus = utils.CheckVolumeGroupSize(utils.ListVolumeGroups(), vg_name,
304 a0c9f010 Michael Hanselmann
                                          constants.MIN_VG_SIZE)
305 a0c9f010 Michael Hanselmann
    if vgstatus:
306 a0c9f010 Michael Hanselmann
      raise errors.OpPrereqError("Error: %s\nspecify --no-lvm-storage if"
307 debac808 Iustin Pop
                                 " you are not using lvm" % vgstatus,
308 debac808 Iustin Pop
                                 errors.ECODE_INVAL)
309 a0c9f010 Michael Hanselmann
310 a721e23a Luca Bigliardi
  if drbd_helper is not None:
311 a721e23a Luca Bigliardi
    try:
312 a721e23a Luca Bigliardi
      curr_helper = bdev.BaseDRBD.GetUsermodeHelper()
313 a721e23a Luca Bigliardi
    except errors.BlockDeviceError, err:
314 a721e23a Luca Bigliardi
      raise errors.OpPrereqError("Error while checking drbd helper"
315 a721e23a Luca Bigliardi
                                 " (specify --no-drbd-storage if you are not"
316 a721e23a Luca Bigliardi
                                 " using drbd): %s" % str(err),
317 a721e23a Luca Bigliardi
                                 errors.ECODE_ENVIRON)
318 a721e23a Luca Bigliardi
    if drbd_helper != curr_helper:
319 a721e23a Luca Bigliardi
      raise errors.OpPrereqError("Error: requiring %s as drbd helper but %s"
320 a721e23a Luca Bigliardi
                                 " is the current helper" % (drbd_helper,
321 a721e23a Luca Bigliardi
                                                             curr_helper),
322 a721e23a Luca Bigliardi
                                 errors.ECODE_INVAL)
323 a721e23a Luca Bigliardi
324 0e3baaf3 Iustin Pop
  file_storage_dir = _InitFileStorage(file_storage_dir)
325 a0c9f010 Michael Hanselmann
326 a0c9f010 Michael Hanselmann
  if not re.match("^[0-9a-z]{2}:[0-9a-z]{2}:[0-9a-z]{2}$", mac_prefix):
327 debac808 Iustin Pop
    raise errors.OpPrereqError("Invalid mac prefix given '%s'" % mac_prefix,
328 debac808 Iustin Pop
                               errors.ECODE_INVAL)
329 a0c9f010 Michael Hanselmann
330 a0c9f010 Michael Hanselmann
  result = utils.RunCmd(["ip", "link", "show", "dev", master_netdev])
331 a0c9f010 Michael Hanselmann
  if result.failed:
332 a0c9f010 Michael Hanselmann
    raise errors.OpPrereqError("Invalid master netdev given (%s): '%s'" %
333 a0c9f010 Michael Hanselmann
                               (master_netdev,
334 debac808 Iustin Pop
                                result.output.strip()), errors.ECODE_INVAL)
335 a0c9f010 Michael Hanselmann
336 9dae41ad Guido Trotter
  dirs = [(constants.RUN_GANETI_DIR, constants.RUN_DIRS_MODE)]
337 9dae41ad Guido Trotter
  utils.EnsureDirs(dirs)
338 9dae41ad Guido Trotter
339 a5728081 Guido Trotter
  utils.ForceDictType(beparams, constants.BES_PARAMETER_TYPES)
340 b6a30b0d Guido Trotter
  utils.ForceDictType(nicparams, constants.NICS_PARAMETER_TYPES)
341 b6a30b0d Guido Trotter
  objects.NIC.CheckParameterSyntax(nicparams)
342 b6a30b0d Guido Trotter
343 6204ee71 Renรฉ Nussbaumer
  if ndparams is not None:
344 6204ee71 Renรฉ Nussbaumer
    utils.ForceDictType(ndparams, constants.NDS_PARAMETER_TYPES)
345 6204ee71 Renรฉ Nussbaumer
  else:
346 6204ee71 Renรฉ Nussbaumer
    ndparams = dict(constants.NDC_DEFAULTS)
347 6204ee71 Renรฉ Nussbaumer
348 a5728081 Guido Trotter
  # hvparams is a mapping of hypervisor->hvparams dict
349 a5728081 Guido Trotter
  for hv_name, hv_params in hvparams.iteritems():
350 a5728081 Guido Trotter
    utils.ForceDictType(hv_params, constants.HVS_PARAMETER_TYPES)
351 a5728081 Guido Trotter
    hv_class = hypervisor.GetHypervisor(hv_name)
352 a5728081 Guido Trotter
    hv_class.CheckParameterSyntax(hv_params)
353 d4b72030 Guido Trotter
354 a0c9f010 Michael Hanselmann
  # set up ssh config and /etc/hosts
355 13998ef2 Michael Hanselmann
  sshline = utils.ReadFile(constants.SSH_HOST_RSA_PUB)
356 a0c9f010 Michael Hanselmann
  sshkey = sshline.split(" ")[1]
357 a0c9f010 Michael Hanselmann
358 b86a6bcd Guido Trotter
  if modify_etc_hosts:
359 ea8ac9c9 Renรฉ Nussbaumer
    utils.AddHostToEtcHosts(hostname.name, hostname.ip)
360 b86a6bcd Guido Trotter
361 b989b9d9 Ken Wehr
  if modify_ssh_setup:
362 b989b9d9 Ken Wehr
    _InitSSHSetup()
363 a0c9f010 Michael Hanselmann
364 bf4af505 Apollon Oikonomopoulos
  if default_iallocator is not None:
365 bf4af505 Apollon Oikonomopoulos
    alloc_script = utils.FindFile(default_iallocator,
366 bf4af505 Apollon Oikonomopoulos
                                  constants.IALLOCATOR_SEARCH_PATH,
367 bf4af505 Apollon Oikonomopoulos
                                  os.path.isfile)
368 bf4af505 Apollon Oikonomopoulos
    if alloc_script is None:
369 bf4af505 Apollon Oikonomopoulos
      raise errors.OpPrereqError("Invalid default iallocator script '%s'"
370 bf4af505 Apollon Oikonomopoulos
                                 " specified" % default_iallocator,
371 bf4af505 Apollon Oikonomopoulos
                                 errors.ECODE_INVAL)
372 bf4af505 Apollon Oikonomopoulos
373 430b923c Iustin Pop
  now = time.time()
374 430b923c Iustin Pop
375 a0c9f010 Michael Hanselmann
  # init of cluster config file
376 b9eeeb02 Michael Hanselmann
  cluster_config = objects.Cluster(
377 b9eeeb02 Michael Hanselmann
    serial_no=1,
378 b9eeeb02 Michael Hanselmann
    rsahostkeypub=sshkey,
379 b9eeeb02 Michael Hanselmann
    highest_used_port=(constants.FIRST_DRBD_PORT - 1),
380 b9eeeb02 Michael Hanselmann
    mac_prefix=mac_prefix,
381 b9eeeb02 Michael Hanselmann
    volume_group_name=vg_name,
382 b9eeeb02 Michael Hanselmann
    tcpudp_port_pool=set(),
383 f6bd6e98 Michael Hanselmann
    master_node=hostname.name,
384 f6bd6e98 Michael Hanselmann
    master_ip=clustername.ip,
385 f6bd6e98 Michael Hanselmann
    master_netdev=master_netdev,
386 f6bd6e98 Michael Hanselmann
    cluster_name=clustername.name,
387 f6bd6e98 Michael Hanselmann
    file_storage_dir=file_storage_dir,
388 ea3a925f Alexander Schreiber
    enabled_hypervisors=enabled_hypervisors,
389 4ef7f423 Guido Trotter
    beparams={constants.PP_DEFAULT: beparams},
390 b6a30b0d Guido Trotter
    nicparams={constants.PP_DEFAULT: nicparams},
391 6204ee71 Renรฉ Nussbaumer
    ndparams=ndparams,
392 ea3a925f Alexander Schreiber
    hvparams=hvparams,
393 ce735215 Guido Trotter
    candidate_pool_size=candidate_pool_size,
394 022c3a0b Guido Trotter
    modify_etc_hosts=modify_etc_hosts,
395 b989b9d9 Ken Wehr
    modify_ssh_setup=modify_ssh_setup,
396 39b0f0c2 Balazs Lecz
    uid_pool=uid_pool,
397 430b923c Iustin Pop
    ctime=now,
398 430b923c Iustin Pop
    mtime=now,
399 3953242f Iustin Pop
    maintain_node_health=maintain_node_health,
400 a721e23a Luca Bigliardi
    drbd_usermode_helper=drbd_helper,
401 bf4af505 Apollon Oikonomopoulos
    default_iallocator=default_iallocator,
402 2f20d07b Manuel Franceschini
    primary_ip_family=ipcls.family,
403 3d914585 Renรฉ Nussbaumer
    prealloc_wipe_disks=prealloc_wipe_disks,
404 b9eeeb02 Michael Hanselmann
    )
405 b9eeeb02 Michael Hanselmann
  master_node_config = objects.Node(name=hostname.name,
406 b9eeeb02 Michael Hanselmann
                                    primary_ip=hostname.ip,
407 b9222f32 Guido Trotter
                                    secondary_ip=secondary_ip,
408 c044f32c Guido Trotter
                                    serial_no=1,
409 c044f32c Guido Trotter
                                    master_candidate=True,
410 af64c0ea Iustin Pop
                                    offline=False, drained=False,
411 435e4bd6 Michael Hanselmann
                                    ctime=now, mtime=now,
412 c044f32c Guido Trotter
                                    )
413 9e1333b9 Guido Trotter
  InitConfig(constants.CONFIG_VERSION, cluster_config, master_node_config)
414 d367b66c Manuel Franceschini
  cfg = config.ConfigWriter(offline=True)
415 9e1333b9 Guido Trotter
  ssh.WriteKnownHostsFile(cfg, constants.SSH_KNOWN_HOSTS_FILE)
416 a4eae71f Michael Hanselmann
  cfg.Update(cfg.GetClusterInfo(), logging.error)
417 d367b66c Manuel Franceschini
  backend.WriteSsconfFiles(cfg.GetSsconfValues())
418 d367b66c Manuel Franceschini
419 d367b66c Manuel Franceschini
  # set up the inter-node password and certificate
420 d367b66c Manuel Franceschini
  _InitGanetiServerSetup(hostname.name)
421 827f753e Guido Trotter
422 b3f1cf6f Iustin Pop
  # start the master ip
423 b3f1cf6f Iustin Pop
  # TODO: Review rpc call from bootstrap
424 b726aff0 Iustin Pop
  # TODO: Warn on failed start master
425 3583908a Guido Trotter
  rpc.RpcRunner.call_node_start_master(hostname.name, True, False)
426 b3f1cf6f Iustin Pop
427 b1b6ea87 Iustin Pop
428 02f99608 Oleksiy Mishchenko
def InitConfig(version, cluster_config, master_node_config,
429 02f99608 Oleksiy Mishchenko
               cfg_file=constants.CLUSTER_CONF_FILE):
430 7b3a8fb5 Iustin Pop
  """Create the initial cluster configuration.
431 7b3a8fb5 Iustin Pop

432 7b3a8fb5 Iustin Pop
  It will contain the current node, which will also be the master
433 7b3a8fb5 Iustin Pop
  node, and no instances.
434 7b3a8fb5 Iustin Pop

435 7b3a8fb5 Iustin Pop
  @type version: int
436 c41eea6e Iustin Pop
  @param version: configuration version
437 c41eea6e Iustin Pop
  @type cluster_config: L{objects.Cluster}
438 c41eea6e Iustin Pop
  @param cluster_config: cluster configuration
439 c41eea6e Iustin Pop
  @type master_node_config: L{objects.Node}
440 c41eea6e Iustin Pop
  @param master_node_config: master node configuration
441 c41eea6e Iustin Pop
  @type cfg_file: string
442 c41eea6e Iustin Pop
  @param cfg_file: configuration file path
443 c41eea6e Iustin Pop

444 7b3a8fb5 Iustin Pop
  """
445 88b92fe3 Guido Trotter
  uuid_generator = config.TemporaryReservationManager()
446 88b92fe3 Guido Trotter
  cluster_config.uuid = uuid_generator.Generate([], utils.NewUUID,
447 88b92fe3 Guido Trotter
                                                _INITCONF_ECID)
448 88b92fe3 Guido Trotter
  master_node_config.uuid = uuid_generator.Generate([], utils.NewUUID,
449 88b92fe3 Guido Trotter
                                                    _INITCONF_ECID)
450 7b3a8fb5 Iustin Pop
  nodes = {
451 7b3a8fb5 Iustin Pop
    master_node_config.name: master_node_config,
452 7b3a8fb5 Iustin Pop
    }
453 88b92fe3 Guido Trotter
  default_nodegroup = objects.NodeGroup(
454 88b92fe3 Guido Trotter
    uuid=uuid_generator.Generate([], utils.NewUUID, _INITCONF_ECID),
455 88b92fe3 Guido Trotter
    name="default",
456 88b92fe3 Guido Trotter
    members=[master_node_config.name],
457 88b92fe3 Guido Trotter
    )
458 88b92fe3 Guido Trotter
  nodegroups = {
459 88b92fe3 Guido Trotter
    default_nodegroup.uuid: default_nodegroup,
460 88b92fe3 Guido Trotter
    }
461 d693c864 Iustin Pop
  now = time.time()
462 7b3a8fb5 Iustin Pop
  config_data = objects.ConfigData(version=version,
463 7b3a8fb5 Iustin Pop
                                   cluster=cluster_config,
464 88b92fe3 Guido Trotter
                                   nodegroups=nodegroups,
465 7b3a8fb5 Iustin Pop
                                   nodes=nodes,
466 7b3a8fb5 Iustin Pop
                                   instances={},
467 d693c864 Iustin Pop
                                   serial_no=1,
468 d693c864 Iustin Pop
                                   ctime=now, mtime=now)
469 a33848a5 Guido Trotter
  utils.WriteFile(cfg_file,
470 a33848a5 Guido Trotter
                  data=serializer.Dump(config_data.ToDict()),
471 a33848a5 Guido Trotter
                  mode=0600)
472 02f99608 Oleksiy Mishchenko
473 02f99608 Oleksiy Mishchenko
474 140aa4a8 Iustin Pop
def FinalizeClusterDestroy(master):
475 140aa4a8 Iustin Pop
  """Execute the last steps of cluster destroy
476 140aa4a8 Iustin Pop

477 140aa4a8 Iustin Pop
  This function shuts down all the daemons, completing the destroy
478 140aa4a8 Iustin Pop
  begun in cmdlib.LUDestroyOpcode.
479 140aa4a8 Iustin Pop

480 140aa4a8 Iustin Pop
  """
481 b989b9d9 Ken Wehr
  cfg = config.ConfigWriter()
482 b989b9d9 Ken Wehr
  modify_ssh_setup = cfg.GetClusterInfo().modify_ssh_setup
483 781de953 Iustin Pop
  result = rpc.RpcRunner.call_node_stop_master(master, True)
484 3cebe102 Michael Hanselmann
  msg = result.fail_msg
485 6c00d19a Iustin Pop
  if msg:
486 099c52ad Iustin Pop
    logging.warning("Could not disable the master role: %s", msg)
487 b989b9d9 Ken Wehr
  result = rpc.RpcRunner.call_node_leave_cluster(master, modify_ssh_setup)
488 3cebe102 Michael Hanselmann
  msg = result.fail_msg
489 0623d351 Iustin Pop
  if msg:
490 0623d351 Iustin Pop
    logging.warning("Could not shutdown the node daemon and cleanup"
491 0623d351 Iustin Pop
                    " the node: %s", msg)
492 140aa4a8 Iustin Pop
493 140aa4a8 Iustin Pop
494 87622829 Iustin Pop
def SetupNodeDaemon(cluster_name, node, ssh_key_check):
495 827f753e Guido Trotter
  """Add a node to the cluster.
496 827f753e Guido Trotter

497 b1b6ea87 Iustin Pop
  This function must be called before the actual opcode, and will ssh
498 b1b6ea87 Iustin Pop
  to the remote node, copy the needed files, and start ganeti-noded,
499 b1b6ea87 Iustin Pop
  allowing the master to do the rest via normal rpc calls.
500 827f753e Guido Trotter

501 87622829 Iustin Pop
  @param cluster_name: the cluster name
502 87622829 Iustin Pop
  @param node: the name of the new node
503 87622829 Iustin Pop
  @param ssh_key_check: whether to do a strict key check
504 827f753e Guido Trotter

505 827f753e Guido Trotter
  """
506 b43dcc5a Manuel Franceschini
  family = ssconf.SimpleStore().GetPrimaryIPFamily()
507 b43dcc5a Manuel Franceschini
  sshrunner = ssh.SshRunner(cluster_name,
508 b43dcc5a Manuel Franceschini
                            ipv6=family==netutils.IP6Address.family)
509 5557b04c Michael Hanselmann
510 168c1de2 Michael Hanselmann
  noded_cert = utils.ReadFile(constants.NODED_CERT_FILE)
511 2438c157 Michael Hanselmann
  rapi_cert = utils.ReadFile(constants.RAPI_CERT_FILE)
512 6b7d5878 Michael Hanselmann
  confd_hmac_key = utils.ReadFile(constants.CONFD_HMAC_KEY)
513 5557b04c Michael Hanselmann
514 827f753e Guido Trotter
  # in the base64 pem encoding, neither '!' nor '.' are valid chars,
515 827f753e Guido Trotter
  # so we use this to detect an invalid certificate; as long as the
516 827f753e Guido Trotter
  # cert doesn't contain this, the here-document will be correctly
517 77b076ca Guido Trotter
  # parsed by the shell sequence below. HMAC keys are hexadecimal strings,
518 77b076ca Guido Trotter
  # so the same restrictions apply.
519 6b7d5878 Michael Hanselmann
  for content in (noded_cert, rapi_cert, confd_hmac_key):
520 77b076ca Guido Trotter
    if re.search('^!EOF\.', content, re.MULTILINE):
521 77b076ca Guido Trotter
      raise errors.OpExecError("invalid SSL certificate or HMAC key")
522 5557b04c Michael Hanselmann
523 5557b04c Michael Hanselmann
  if not noded_cert.endswith("\n"):
524 5557b04c Michael Hanselmann
    noded_cert += "\n"
525 2438c157 Michael Hanselmann
  if not rapi_cert.endswith("\n"):
526 2438c157 Michael Hanselmann
    rapi_cert += "\n"
527 6b7d5878 Michael Hanselmann
  if not confd_hmac_key.endswith("\n"):
528 6b7d5878 Michael Hanselmann
    confd_hmac_key += "\n"
529 827f753e Guido Trotter
530 b43dcc5a Manuel Franceschini
  bind_address = constants.IP4_ADDRESS_ANY
531 b43dcc5a Manuel Franceschini
  if family == netutils.IP6Address.family:
532 b43dcc5a Manuel Franceschini
    bind_address = constants.IP6_ADDRESS_ANY
533 b43dcc5a Manuel Franceschini
534 827f753e Guido Trotter
  # set up inter-node password and certificate and restarts the node daemon
535 827f753e Guido Trotter
  # and then connect with ssh to set password and start ganeti-noded
536 827f753e Guido Trotter
  # note that all the below variables are sanitized at this point,
537 827f753e Guido Trotter
  # either by being constants or by the checks above
538 9294514d Renรฉ Nussbaumer
  sshrunner.CopyFileToNode(node, constants.NODED_CERT_FILE)
539 9294514d Renรฉ Nussbaumer
  sshrunner.CopyFileToNode(node, constants.RAPI_CERT_FILE)
540 9294514d Renรฉ Nussbaumer
  sshrunner.CopyFileToNode(node, constants.CONFD_HMAC_KEY)
541 31684f84 Renรฉ Nussbaumer
  mycommand = ("%s stop-all; %s start %s -b '%s'" % (constants.DAEMON_UTIL,
542 31684f84 Renรฉ Nussbaumer
                                                     constants.DAEMON_UTIL,
543 31684f84 Renรฉ Nussbaumer
                                                     constants.NODED,
544 31684f84 Renรฉ Nussbaumer
                                                     bind_address))
545 827f753e Guido Trotter
546 c4b6c29c Michael Hanselmann
  result = sshrunner.Run(node, 'root', mycommand, batch=False,
547 c4b6c29c Michael Hanselmann
                         ask_key=ssh_key_check,
548 9294514d Renรฉ Nussbaumer
                         use_cluster_key=True,
549 c4b6c29c Michael Hanselmann
                         strict_host_check=ssh_key_check)
550 827f753e Guido Trotter
  if result.failed:
551 827f753e Guido Trotter
    raise errors.OpExecError("Remote command on node %s, error: %s,"
552 827f753e Guido Trotter
                             " output: %s" %
553 827f753e Guido Trotter
                             (node, result.fail_reason, result.output))
554 827f753e Guido Trotter
555 5627f375 Michael Hanselmann
  _WaitForNodeDaemon(node)
556 5627f375 Michael Hanselmann
557 b1b6ea87 Iustin Pop
558 8e2524c3 Guido Trotter
def MasterFailover(no_voting=False):
559 b1b6ea87 Iustin Pop
  """Failover the master node.
560 b1b6ea87 Iustin Pop

561 b1b6ea87 Iustin Pop
  This checks that we are not already the master, and will cause the
562 b1b6ea87 Iustin Pop
  current master to cease being master, and the non-master to become
563 b1b6ea87 Iustin Pop
  new master.
564 b1b6ea87 Iustin Pop

565 8e2524c3 Guido Trotter
  @type no_voting: boolean
566 8e2524c3 Guido Trotter
  @param no_voting: force the operation without remote nodes agreement
567 8e2524c3 Guido Trotter
                      (dangerous)
568 8e2524c3 Guido Trotter

569 b1b6ea87 Iustin Pop
  """
570 8135a2db Iustin Pop
  sstore = ssconf.SimpleStore()
571 b1b6ea87 Iustin Pop
572 8135a2db Iustin Pop
  old_master, new_master = ssconf.GetMasterAndMyself(sstore)
573 8135a2db Iustin Pop
  node_list = sstore.GetNodeList()
574 8135a2db Iustin Pop
  mc_list = sstore.GetMasterCandidates()
575 b1b6ea87 Iustin Pop
576 b1b6ea87 Iustin Pop
  if old_master == new_master:
577 b1b6ea87 Iustin Pop
    raise errors.OpPrereqError("This commands must be run on the node"
578 b1b6ea87 Iustin Pop
                               " where you want the new master to be."
579 b1b6ea87 Iustin Pop
                               " %s is already the master" %
580 debac808 Iustin Pop
                               old_master, errors.ECODE_INVAL)
581 d5927e48 Iustin Pop
582 8135a2db Iustin Pop
  if new_master not in mc_list:
583 8135a2db Iustin Pop
    mc_no_master = [name for name in mc_list if name != old_master]
584 8135a2db Iustin Pop
    raise errors.OpPrereqError("This node is not among the nodes marked"
585 8135a2db Iustin Pop
                               " as master candidates. Only these nodes"
586 8135a2db Iustin Pop
                               " can become masters. Current list of"
587 8135a2db Iustin Pop
                               " master candidates is:\n"
588 debac808 Iustin Pop
                               "%s" % ('\n'.join(mc_no_master)),
589 debac808 Iustin Pop
                               errors.ECODE_STATE)
590 8135a2db Iustin Pop
591 8e2524c3 Guido Trotter
  if not no_voting:
592 8e2524c3 Guido Trotter
    vote_list = GatherMasterVotes(node_list)
593 8e2524c3 Guido Trotter
594 8e2524c3 Guido Trotter
    if vote_list:
595 8e2524c3 Guido Trotter
      voted_master = vote_list[0][0]
596 8e2524c3 Guido Trotter
      if voted_master is None:
597 8e2524c3 Guido Trotter
        raise errors.OpPrereqError("Cluster is inconsistent, most nodes did"
598 debac808 Iustin Pop
                                   " not respond.", errors.ECODE_ENVIRON)
599 8e2524c3 Guido Trotter
      elif voted_master != old_master:
600 8e2524c3 Guido Trotter
        raise errors.OpPrereqError("I have a wrong configuration, I believe"
601 8e2524c3 Guido Trotter
                                   " the master is %s but the other nodes"
602 8e2524c3 Guido Trotter
                                   " voted %s. Please resync the configuration"
603 8e2524c3 Guido Trotter
                                   " of this node." %
604 debac808 Iustin Pop
                                   (old_master, voted_master),
605 debac808 Iustin Pop
                                   errors.ECODE_STATE)
606 b1b6ea87 Iustin Pop
  # end checks
607 b1b6ea87 Iustin Pop
608 b1b6ea87 Iustin Pop
  rcode = 0
609 b1b6ea87 Iustin Pop
610 d5927e48 Iustin Pop
  logging.info("Setting master to %s, old master: %s", new_master, old_master)
611 b1b6ea87 Iustin Pop
612 21004460 Iustin Pop
  try:
613 21004460 Iustin Pop
    # instantiate a real config writer, as we now know we have the
614 21004460 Iustin Pop
    # configuration data
615 eb180fe2 Iustin Pop
    cfg = config.ConfigWriter(accept_foreign=True)
616 21004460 Iustin Pop
617 21004460 Iustin Pop
    cluster_info = cfg.GetClusterInfo()
618 21004460 Iustin Pop
    cluster_info.master_node = new_master
619 21004460 Iustin Pop
    # this will also regenerate the ssconf files, since we updated the
620 21004460 Iustin Pop
    # cluster info
621 21004460 Iustin Pop
    cfg.Update(cluster_info, logging.error)
622 21004460 Iustin Pop
  except errors.ConfigurationError, err:
623 21004460 Iustin Pop
    logging.error("Error while trying to set the new master: %s",
624 21004460 Iustin Pop
                  str(err))
625 21004460 Iustin Pop
    return 1
626 21004460 Iustin Pop
627 21004460 Iustin Pop
  # if cfg.Update worked, then it means the old master daemon won't be
628 21004460 Iustin Pop
  # able now to write its own config file (we rely on locking in both
629 21004460 Iustin Pop
  # backend.UploadFile() and ConfigWriter._Write(); hence the next
630 21004460 Iustin Pop
  # step is to kill the old master
631 21004460 Iustin Pop
632 21004460 Iustin Pop
  logging.info("Stopping the master daemon on node %s", old_master)
633 21004460 Iustin Pop
634 781de953 Iustin Pop
  result = rpc.RpcRunner.call_node_stop_master(old_master, True)
635 3cebe102 Michael Hanselmann
  msg = result.fail_msg
636 6c00d19a Iustin Pop
  if msg:
637 d5927e48 Iustin Pop
    logging.error("Could not disable the master role on the old master"
638 6c00d19a Iustin Pop
                 " %s, please disable manually: %s", old_master, msg)
639 b1b6ea87 Iustin Pop
640 21004460 Iustin Pop
  logging.info("Checking master IP non-reachability...")
641 21004460 Iustin Pop
642 425f0f54 Iustin Pop
  master_ip = sstore.GetMasterIP()
643 425f0f54 Iustin Pop
  total_timeout = 30
644 d23ef431 Michael Hanselmann
  # Here we have a phase where no master should be running
645 425f0f54 Iustin Pop
  def _check_ip():
646 a744b676 Manuel Franceschini
    if netutils.TcpPing(master_ip, constants.DEFAULT_NODED_PORT):
647 425f0f54 Iustin Pop
      raise utils.RetryAgain()
648 425f0f54 Iustin Pop
649 425f0f54 Iustin Pop
  try:
650 425f0f54 Iustin Pop
    utils.Retry(_check_ip, (1, 1.5, 5), total_timeout)
651 425f0f54 Iustin Pop
  except utils.RetryTimeout:
652 425f0f54 Iustin Pop
    logging.warning("The master IP is still reachable after %s seconds,"
653 425f0f54 Iustin Pop
                    " continuing but activating the master on the current"
654 425f0f54 Iustin Pop
                    " node will probably fail", total_timeout)
655 b1b6ea87 Iustin Pop
656 21004460 Iustin Pop
  logging.info("Starting the master daemons on the new master")
657 d5927e48 Iustin Pop
658 3583908a Guido Trotter
  result = rpc.RpcRunner.call_node_start_master(new_master, True, no_voting)
659 3cebe102 Michael Hanselmann
  msg = result.fail_msg
660 b726aff0 Iustin Pop
  if msg:
661 d5927e48 Iustin Pop
    logging.error("Could not start the master role on the new master"
662 b726aff0 Iustin Pop
                  " %s, please check: %s", new_master, msg)
663 b1b6ea87 Iustin Pop
    rcode = 1
664 b1b6ea87 Iustin Pop
665 21004460 Iustin Pop
  logging.info("Master failed over from %s to %s", old_master, new_master)
666 b1b6ea87 Iustin Pop
  return rcode
667 d7cdb55d Iustin Pop
668 d7cdb55d Iustin Pop
669 8eb148ae Iustin Pop
def GetMaster():
670 8eb148ae Iustin Pop
  """Returns the current master node.
671 8eb148ae Iustin Pop

672 8eb148ae Iustin Pop
  This is a separate function in bootstrap since it's needed by
673 8eb148ae Iustin Pop
  gnt-cluster, and instead of importing directly ssconf, it's better
674 8eb148ae Iustin Pop
  to abstract it in bootstrap, where we do use ssconf in other
675 8eb148ae Iustin Pop
  functions too.
676 8eb148ae Iustin Pop

677 8eb148ae Iustin Pop
  """
678 8eb148ae Iustin Pop
  sstore = ssconf.SimpleStore()
679 8eb148ae Iustin Pop
680 8eb148ae Iustin Pop
  old_master, _ = ssconf.GetMasterAndMyself(sstore)
681 8eb148ae Iustin Pop
682 8eb148ae Iustin Pop
  return old_master
683 8eb148ae Iustin Pop
684 8eb148ae Iustin Pop
685 d7cdb55d Iustin Pop
def GatherMasterVotes(node_list):
686 d7cdb55d Iustin Pop
  """Check the agreement on who is the master.
687 d7cdb55d Iustin Pop

688 d7cdb55d Iustin Pop
  This function will return a list of (node, number of votes), ordered
689 d7cdb55d Iustin Pop
  by the number of votes. Errors will be denoted by the key 'None'.
690 d7cdb55d Iustin Pop

691 d7cdb55d Iustin Pop
  Note that the sum of votes is the number of nodes this machine
692 d7cdb55d Iustin Pop
  knows, whereas the number of entries in the list could be different
693 d7cdb55d Iustin Pop
  (if some nodes vote for another master).
694 d7cdb55d Iustin Pop

695 d7cdb55d Iustin Pop
  We remove ourselves from the list since we know that (bugs aside)
696 d7cdb55d Iustin Pop
  since we use the same source for configuration information for both
697 d7cdb55d Iustin Pop
  backend and boostrap, we'll always vote for ourselves.
698 d7cdb55d Iustin Pop

699 d7cdb55d Iustin Pop
  @type node_list: list
700 d7cdb55d Iustin Pop
  @param node_list: the list of nodes to query for master info; the current
701 5bbd3f7f Michael Hanselmann
      node will be removed if it is in the list
702 d7cdb55d Iustin Pop
  @rtype: list
703 d7cdb55d Iustin Pop
  @return: list of (node, votes)
704 d7cdb55d Iustin Pop

705 d7cdb55d Iustin Pop
  """
706 b705c7a6 Manuel Franceschini
  myself = netutils.Hostname.GetSysName()
707 d7cdb55d Iustin Pop
  try:
708 d7cdb55d Iustin Pop
    node_list.remove(myself)
709 d7cdb55d Iustin Pop
  except ValueError:
710 d7cdb55d Iustin Pop
    pass
711 d7cdb55d Iustin Pop
  if not node_list:
712 d7cdb55d Iustin Pop
    # no nodes left (eventually after removing myself)
713 d7cdb55d Iustin Pop
    return []
714 d7cdb55d Iustin Pop
  results = rpc.RpcRunner.call_master_info(node_list)
715 d7cdb55d Iustin Pop
  if not isinstance(results, dict):
716 d7cdb55d Iustin Pop
    # this should not happen (unless internal error in rpc)
717 d7cdb55d Iustin Pop
    logging.critical("Can't complete rpc call, aborting master startup")
718 d7cdb55d Iustin Pop
    return [(None, len(node_list))]
719 d7cdb55d Iustin Pop
  votes = {}
720 d7cdb55d Iustin Pop
  for node in results:
721 781de953 Iustin Pop
    nres = results[node]
722 2a52a064 Iustin Pop
    data = nres.payload
723 3cebe102 Michael Hanselmann
    msg = nres.fail_msg
724 2a52a064 Iustin Pop
    fail = False
725 2a52a064 Iustin Pop
    if msg:
726 2a52a064 Iustin Pop
      logging.warning("Error contacting node %s: %s", node, msg)
727 2a52a064 Iustin Pop
      fail = True
728 d8e0caa6 Manuel Franceschini
    # for now we accept both length 3 and 4 (data[3] is primary ip version)
729 2a52a064 Iustin Pop
    elif not isinstance(data, (tuple, list)) or len(data) < 3:
730 2a52a064 Iustin Pop
      logging.warning("Invalid data received from node %s: %s", node, data)
731 2a52a064 Iustin Pop
      fail = True
732 2a52a064 Iustin Pop
    if fail:
733 d7cdb55d Iustin Pop
      if None not in votes:
734 d7cdb55d Iustin Pop
        votes[None] = 0
735 d7cdb55d Iustin Pop
      votes[None] += 1
736 d7cdb55d Iustin Pop
      continue
737 781de953 Iustin Pop
    master_node = data[2]
738 d7cdb55d Iustin Pop
    if master_node not in votes:
739 d7cdb55d Iustin Pop
      votes[master_node] = 0
740 d7cdb55d Iustin Pop
    votes[master_node] += 1
741 d7cdb55d Iustin Pop
742 d7cdb55d Iustin Pop
  vote_list = [v for v in votes.items()]
743 d7cdb55d Iustin Pop
  # sort first on number of votes then on name, since we want None
744 d7cdb55d Iustin Pop
  # sorted later if we have the half of the nodes not responding, and
745 d7cdb55d Iustin Pop
  # half voting all for the same master
746 d7cdb55d Iustin Pop
  vote_list.sort(key=lambda x: (x[1], x[0]), reverse=True)
747 d7cdb55d Iustin Pop
748 d7cdb55d Iustin Pop
  return vote_list