toft-puppet 0.0.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/Gemfile +3 -0
- data/Gemfile.lock +62 -0
- data/Rakefile +121 -0
- data/features/checker.feature +14 -0
- data/features/chef.feature +70 -0
- data/features/command.feature +20 -0
- data/features/node.feature +41 -0
- data/features/puppet.feature +40 -0
- data/features/step_definitions/centos/checks.rb +9 -0
- data/features/step_definitions/checker.rb +15 -0
- data/features/step_definitions/chef.rb +43 -0
- data/features/step_definitions/command.rb +28 -0
- data/features/step_definitions/node.rb +65 -0
- data/features/step_definitions/puppet.rb +7 -0
- data/features/support/env.rb +25 -0
- data/fixtures/chef/attributes.json +9 -0
- data/fixtures/chef/cookbooks/test/attributes/default.rb +4 -0
- data/fixtures/chef/cookbooks/test/recipes/attribute.rb +19 -0
- data/fixtures/chef/cookbooks/test/recipes/default.rb +4 -0
- data/fixtures/chef/cookbooks/test/recipes/role.rb +4 -0
- data/fixtures/chef/roles/test.rb +3 -0
- data/fixtures/puppet/conf/fileserver.conf +3 -0
- data/fixtures/puppet/conf/puppet.conf +15 -0
- data/fixtures/puppet/conf/puppet_exec.conf +9 -0
- data/fixtures/puppet/conf/puppet_fileserver.conf +8 -0
- data/fixtures/puppet/conf/puppet_modules.conf +7 -0
- data/fixtures/puppet/conf/puppet_template.conf +8 -0
- data/fixtures/puppet/manifests/fileserver/conf/test_fileserver +1 -0
- data/fixtures/puppet/manifests/nodes/test_node.pp +26 -0
- data/fixtures/puppet/manifests/site.pp +1 -0
- data/fixtures/puppet/manifests/templates/template_test +2 -0
- data/fixtures/puppet/manifests/test.pp +8 -0
- data/fixtures/puppet/manifests/test_fileserver.pp +14 -0
- data/fixtures/puppet/manifests/test_install.pp +5 -0
- data/fixtures/puppet/manifests/test_module.pp +5 -0
- data/fixtures/puppet/manifests/test_service.pp +11 -0
- data/fixtures/puppet/manifests/test_template.pp +12 -0
- data/fixtures/puppet/modules/test_module/manifests/init.pp +8 -0
- data/lib/toft.rb +39 -0
- data/lib/toft/chef/chef_attributes.rb +29 -0
- data/lib/toft/chef/chef_runner.rb +77 -0
- data/lib/toft/command_executor.rb +16 -0
- data/lib/toft/file_checker.rb +47 -0
- data/lib/toft/node.rb +243 -0
- data/lib/toft/node_controller.rb +32 -0
- data/lib/toft/puppet/puppet_runner.rb +38 -0
- data/lib/toft/version.rb +3 -0
- data/scripts/bin/centos/lxc-prepare-host +172 -0
- data/scripts/bin/centos/provision_vagrant +11 -0
- data/scripts/bin/share/install-chef-ubuntu.sh +19 -0
- data/scripts/bin/share/lxc-create-centos-image +60 -0
- data/scripts/bin/ubuntu/lxc-create-ubuntu-image +77 -0
- data/scripts/bin/ubuntu/lxc-prepare-host +199 -0
- data/scripts/bin/ubuntu/provision_vagrant +9 -0
- data/scripts/lxc-templates/files/rc.local +38 -0
- data/scripts/lxc-templates/lxc-centos-6 +279 -0
- data/scripts/lxc-templates/lxc-lenny +255 -0
- data/scripts/lxc-templates/lxc-lucid +313 -0
- data/scripts/lxc-templates/lxc-natty +237 -0
- data/spec/fixtures/illegal_syntax.json +1 -0
- data/spec/spec_helper.rb +6 -0
- data/spec/toft/chef/chef_attributes_spec.rb +39 -0
- data/spec/toft/chef/chef_runner_spec.rb +34 -0
- data/spec/toft/node_spec.rb +18 -0
- data/spec/toft/puppet/puppet_runner_spec.rb +26 -0
- metadata +234 -0
@@ -0,0 +1,255 @@
|
|
1
|
+
#!/bin/bash
|
2
|
+
|
3
|
+
echo "Creating lenny node..."
|
4
|
+
|
5
|
+
configure_ubuntu()
|
6
|
+
{
|
7
|
+
rootfs=$1
|
8
|
+
hostname=$2
|
9
|
+
|
10
|
+
# disable selinux in ubuntu
|
11
|
+
mkdir -p $rootfs/selinux
|
12
|
+
echo 0 > $rootfs/selinux/enforce
|
13
|
+
|
14
|
+
# add host root ssh access
|
15
|
+
mkdir $rootfs/root/.ssh
|
16
|
+
chmod 0600 $rootfs/root/.ssh
|
17
|
+
cat <<-EOF > $rootfs/root/.ssh/authorized_keys
|
18
|
+
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCguB7XL3ARzLZYLsIMZe4UUO371m+H5C6V8MhtmSlgXtgHDo7eZhNSm5zCeoyGd32OKeLxuxCCEkXfDDF1aa2a6twcASE3pmWNdnBS7auiOH4P7g+eQ4Aw9v7DdESbIVgHF/NDiAEFFdmApYNM3oCX2FhEVNVKxkkIokUr4axYFJzmJ6Xoi5Sd8JtPC85FZVXqDucZDnHQlOcCkbSo0UOmsWQGwtu8eUHoDeUG0dB8ntb9xlBeLctdrAPhuFYCX8IfFkdcakkzv61ETPbKE6g9wdTDC/TEep7/AHGYmarziRnwKiVOL1jnE1coOJLqy8wOC3dKGmRZy9D4sTc+FRV root insecure public key
|
19
|
+
EOF
|
20
|
+
|
21
|
+
cp /usr/lib/lxc/templates/files/rc.local $rootfs/etc/rc.local
|
22
|
+
|
23
|
+
# set the hostname
|
24
|
+
cat <<EOF > $rootfs/etc/hostname
|
25
|
+
$hostname
|
26
|
+
EOF
|
27
|
+
# set minimal hosts
|
28
|
+
cat <<EOF > $rootfs/etc/hosts
|
29
|
+
127.0.0.1 localhost $hostname
|
30
|
+
EOF
|
31
|
+
|
32
|
+
cat <<EOF > $rootfs/etc/inittab
|
33
|
+
id:3:initdefault:
|
34
|
+
si::sysinit:/etc/init.d/rcS
|
35
|
+
l0:0:wait:/etc/init.d/rc 0
|
36
|
+
l1:1:wait:/etc/init.d/rc 1
|
37
|
+
l2:2:wait:/etc/init.d/rc 2
|
38
|
+
l3:3:wait:/etc/init.d/rc 3
|
39
|
+
l4:4:wait:/etc/init.d/rc 4
|
40
|
+
l5:5:wait:/etc/init.d/rc 5
|
41
|
+
l6:6:wait:/etc/init.d/rc 6
|
42
|
+
# Normally not reached, but fallthrough in case of emergency.
|
43
|
+
z6:6:respawn:/sbin/sulogin
|
44
|
+
1:2345:respawn:/sbin/getty 38400 console
|
45
|
+
c1:12345:respawn:/sbin/getty 38400 tty1 linux
|
46
|
+
c2:12345:respawn:/sbin/getty 38400 tty2 linux
|
47
|
+
c3:12345:respawn:/sbin/getty 38400 tty3 linux
|
48
|
+
c4:12345:respawn:/sbin/getty 38400 tty4 linux
|
49
|
+
EOF
|
50
|
+
|
51
|
+
# reconfigure some services
|
52
|
+
if [ -z "$LANG" ]; then
|
53
|
+
chroot $rootfs locale-gen en_US.UTF-8
|
54
|
+
chroot $rootfs update-locale LANG=en_US.UTF-8
|
55
|
+
else
|
56
|
+
chroot $rootfs locale-gen $LANG
|
57
|
+
chroot $rootfs update-locale LANG=$LANG
|
58
|
+
fi
|
59
|
+
|
60
|
+
echo "Set root password to 'root'"
|
61
|
+
echo "root:root" | chroot $rootfs chpasswd
|
62
|
+
|
63
|
+
return 0
|
64
|
+
}
|
65
|
+
|
66
|
+
copy_ubuntu()
|
67
|
+
{
|
68
|
+
cache=$1
|
69
|
+
arch=$2
|
70
|
+
rootfs=$3
|
71
|
+
|
72
|
+
# make a local copy of the miniubuntu
|
73
|
+
echo "Extracting rootfs image to $rootfs ..."
|
74
|
+
mkdir $rootfs
|
75
|
+
tar zxf $cache/lenny-$arch.tar.gz -C $rootfs || return 1
|
76
|
+
return 0
|
77
|
+
}
|
78
|
+
|
79
|
+
install_ubuntu()
|
80
|
+
{
|
81
|
+
cache="/var/cache/lxc"
|
82
|
+
rootfs=$1
|
83
|
+
mkdir -p /var/lock/subsys/
|
84
|
+
(
|
85
|
+
flock -n -x 200
|
86
|
+
if [ $? -ne 0 ]; then
|
87
|
+
echo "Cache repository is busy."
|
88
|
+
return 1
|
89
|
+
fi
|
90
|
+
|
91
|
+
arch=$(arch)
|
92
|
+
if [ "$arch" == "x86_64" ]; then
|
93
|
+
arch=amd64
|
94
|
+
fi
|
95
|
+
|
96
|
+
if [ "$arch" == "i686" ]; then
|
97
|
+
arch=i386
|
98
|
+
fi
|
99
|
+
|
100
|
+
echo "Checking image cache in $cache/rootfs-$arch ... "
|
101
|
+
if [ ! -e "$cache/rootfs-$arch" ]; then
|
102
|
+
if [ $? -ne 0 ]; then
|
103
|
+
echo "Failed to download 'ubuntu base'"
|
104
|
+
return 1
|
105
|
+
fi
|
106
|
+
fi
|
107
|
+
|
108
|
+
copy_ubuntu $cache $arch $rootfs
|
109
|
+
if [ $? -ne 0 ]; then
|
110
|
+
echo "Failed to copy rootfs"
|
111
|
+
return 1
|
112
|
+
fi
|
113
|
+
|
114
|
+
return 0
|
115
|
+
|
116
|
+
) 200>/var/lock/subsys/lxc
|
117
|
+
|
118
|
+
return $?
|
119
|
+
}
|
120
|
+
|
121
|
+
copy_configuration()
|
122
|
+
{
|
123
|
+
path=$1
|
124
|
+
rootfs=$2
|
125
|
+
name=$3
|
126
|
+
|
127
|
+
cat <<EOF >> $path/config
|
128
|
+
lxc.utsname = $name
|
129
|
+
|
130
|
+
lxc.tty = 4
|
131
|
+
lxc.pts = 1024
|
132
|
+
lxc.rootfs = $rootfs
|
133
|
+
lxc.mount = $path/fstab
|
134
|
+
|
135
|
+
lxc.cgroup.devices.deny = a
|
136
|
+
# /dev/null and zero
|
137
|
+
lxc.cgroup.devices.allow = c 1:3 rwm
|
138
|
+
lxc.cgroup.devices.allow = c 1:5 rwm
|
139
|
+
# consoles
|
140
|
+
lxc.cgroup.devices.allow = c 5:1 rwm
|
141
|
+
lxc.cgroup.devices.allow = c 5:0 rwm
|
142
|
+
lxc.cgroup.devices.allow = c 4:0 rwm
|
143
|
+
lxc.cgroup.devices.allow = c 4:1 rwm
|
144
|
+
# /dev/{,u}random
|
145
|
+
lxc.cgroup.devices.allow = c 1:9 rwm
|
146
|
+
lxc.cgroup.devices.allow = c 1:8 rwm
|
147
|
+
lxc.cgroup.devices.allow = c 136:* rwm
|
148
|
+
lxc.cgroup.devices.allow = c 5:2 rwm
|
149
|
+
# rtc
|
150
|
+
lxc.cgroup.devices.allow = c 254:0 rwm
|
151
|
+
EOF
|
152
|
+
|
153
|
+
cat <<EOF > $path/fstab
|
154
|
+
proc $rootfs/proc proc nodev,noexec,nosuid 0 0
|
155
|
+
devpts $rootfs/dev/pts devpts defaults 0 0
|
156
|
+
sysfs $rootfs/sys sysfs defaults 0 0
|
157
|
+
EOF
|
158
|
+
|
159
|
+
if [ $? -ne 0 ]; then
|
160
|
+
echo "Failed to add configuration"
|
161
|
+
return 1
|
162
|
+
fi
|
163
|
+
|
164
|
+
return 0
|
165
|
+
}
|
166
|
+
|
167
|
+
clean()
|
168
|
+
{
|
169
|
+
cache="/var/cache/lxc"
|
170
|
+
|
171
|
+
if [ ! -e $cache ]; then
|
172
|
+
exit 0
|
173
|
+
fi
|
174
|
+
|
175
|
+
# lock, so we won't purge while someone is creating a repository
|
176
|
+
(
|
177
|
+
flock -n -x 200
|
178
|
+
if [ $? != 0 ]; then
|
179
|
+
echo "Cache repository is busy."
|
180
|
+
exit 1
|
181
|
+
fi
|
182
|
+
|
183
|
+
echo -n "Purging the download cache..."
|
184
|
+
rm --preserve-root --one-file-system -rf $cache && echo "Done." || exit 1
|
185
|
+
exit 0
|
186
|
+
|
187
|
+
) 200>/var/lock/subsys/lxc
|
188
|
+
}
|
189
|
+
|
190
|
+
usage()
|
191
|
+
{
|
192
|
+
cat <<EOF
|
193
|
+
$1 -h|--help -p|--path=<path> --clean
|
194
|
+
EOF
|
195
|
+
return 0
|
196
|
+
}
|
197
|
+
|
198
|
+
options=$(getopt -o hp:n:c -l help,path:,name:,clean -- "$@")
|
199
|
+
if [ $? -ne 0 ]; then
|
200
|
+
usage $(basename $0)
|
201
|
+
exit 1
|
202
|
+
fi
|
203
|
+
eval set -- "$options"
|
204
|
+
|
205
|
+
while true
|
206
|
+
do
|
207
|
+
case "$1" in
|
208
|
+
-h|--help) usage $0 && exit 0;;
|
209
|
+
-p|--path) path=$2; shift 2;;
|
210
|
+
-n|--name) name=$2; shift 2;;
|
211
|
+
-c|--clean) clean=$2; shift 2;;
|
212
|
+
--) shift 1; break ;;
|
213
|
+
*) break ;;
|
214
|
+
esac
|
215
|
+
done
|
216
|
+
|
217
|
+
if [ ! -z "$clean" -a -z "$path" ]; then
|
218
|
+
clean || exit 1
|
219
|
+
exit 0
|
220
|
+
fi
|
221
|
+
|
222
|
+
if [ -z "$path" ]; then
|
223
|
+
echo "'path' parameter is required"
|
224
|
+
exit 1
|
225
|
+
fi
|
226
|
+
|
227
|
+
if [ "$(id -u)" != "0" ]; then
|
228
|
+
echo "This script should be run as 'root'"
|
229
|
+
exit 1
|
230
|
+
fi
|
231
|
+
|
232
|
+
rootfs=$path/rootfs
|
233
|
+
|
234
|
+
install_ubuntu $rootfs
|
235
|
+
if [ $? -ne 0 ]; then
|
236
|
+
echo "failed to install ubuntu"
|
237
|
+
exit 1
|
238
|
+
fi
|
239
|
+
|
240
|
+
configure_ubuntu $rootfs $name
|
241
|
+
if [ $? -ne 0 ]; then
|
242
|
+
echo "failed to configure ubuntu for a container"
|
243
|
+
exit 1
|
244
|
+
fi
|
245
|
+
|
246
|
+
copy_configuration $path $rootfs $name
|
247
|
+
if [ $? -ne 0 ]; then
|
248
|
+
echo "failed write configuration file"
|
249
|
+
exit 1
|
250
|
+
fi
|
251
|
+
|
252
|
+
if [ ! -z $clean ]; then
|
253
|
+
clean || exit 1
|
254
|
+
exit 0
|
255
|
+
fi
|
@@ -0,0 +1,313 @@
|
|
1
|
+
#!/bin/bash
|
2
|
+
|
3
|
+
echo "Creating lucid node..."
|
4
|
+
|
5
|
+
configure_ubuntu()
|
6
|
+
{
|
7
|
+
rootfs=$1
|
8
|
+
hostname=$2
|
9
|
+
|
10
|
+
# disable selinux in ubuntu
|
11
|
+
mkdir -p $rootfs/selinux
|
12
|
+
echo 0 > $rootfs/selinux/enforce
|
13
|
+
|
14
|
+
# add host root ssh access
|
15
|
+
mkdir $rootfs/root/.ssh
|
16
|
+
chmod 0600 $rootfs/root/.ssh
|
17
|
+
cat <<-EOF > $rootfs/root/.ssh/authorized_keys
|
18
|
+
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCguB7XL3ARzLZYLsIMZe4UUO371m+H5C6V8MhtmSlgXtgHDo7eZhNSm5zCeoyGd32OKeLxuxCCEkXfDDF1aa2a6twcASE3pmWNdnBS7auiOH4P7g+eQ4Aw9v7DdESbIVgHF/NDiAEFFdmApYNM3oCX2FhEVNVKxkkIokUr4axYFJzmJ6Xoi5Sd8JtPC85FZVXqDucZDnHQlOcCkbSo0UOmsWQGwtu8eUHoDeUG0dB8ntb9xlBeLctdrAPhuFYCX8IfFkdcakkzv61ETPbKE6g9wdTDC/TEep7/AHGYmarziRnwKiVOL1jnE1coOJLqy8wOC3dKGmRZy9D4sTc+FRV root insecure public key
|
19
|
+
EOF
|
20
|
+
|
21
|
+
cp /usr/lib/lxc/templates/files/rc.local $rootfs/etc/rc.local
|
22
|
+
|
23
|
+
# set the hostname
|
24
|
+
cat <<EOF > $rootfs/etc/hostname
|
25
|
+
$hostname
|
26
|
+
EOF
|
27
|
+
# set minimal hosts
|
28
|
+
cat <<EOF > $rootfs/etc/hosts
|
29
|
+
127.0.0.1 localhost $hostname
|
30
|
+
EOF
|
31
|
+
|
32
|
+
# provide the lxc service
|
33
|
+
cat <<EOF > $rootfs/etc/init/lxc.conf
|
34
|
+
# fake some events needed for correct startup other services
|
35
|
+
|
36
|
+
description "Container Upstart"
|
37
|
+
|
38
|
+
start on startup
|
39
|
+
|
40
|
+
script
|
41
|
+
rm -rf /var/run/*.pid
|
42
|
+
rm -rf /var/run/network/*
|
43
|
+
/sbin/initctl emit stopped JOB=udevtrigger --no-wait
|
44
|
+
/sbin/initctl emit started JOB=udev --no-wait
|
45
|
+
end script
|
46
|
+
EOF
|
47
|
+
|
48
|
+
# fix buggus runlevel with sshd
|
49
|
+
cat <<EOF > $rootfs/etc/init/ssh.conf
|
50
|
+
# ssh - OpenBSD Secure Shell server
|
51
|
+
#
|
52
|
+
# The OpenSSH server provides secure shell access to the system.
|
53
|
+
|
54
|
+
description "OpenSSH server"
|
55
|
+
|
56
|
+
start on filesystem
|
57
|
+
stop on runlevel [!2345]
|
58
|
+
|
59
|
+
expect fork
|
60
|
+
respawn
|
61
|
+
respawn limit 10 5
|
62
|
+
umask 022
|
63
|
+
# replaces SSHD_OOM_ADJUST in /etc/default/ssh
|
64
|
+
oom never
|
65
|
+
|
66
|
+
pre-start script
|
67
|
+
test -x /usr/sbin/sshd || { stop; exit 0; }
|
68
|
+
test -e /etc/ssh/sshd_not_to_be_run && { stop; exit 0; }
|
69
|
+
test -c /dev/null || { stop; exit 0; }
|
70
|
+
|
71
|
+
mkdir -p -m0755 /var/run/sshd
|
72
|
+
end script
|
73
|
+
|
74
|
+
# if you used to set SSHD_OPTS in /etc/default/ssh, you can change the
|
75
|
+
# 'exec' line here instead
|
76
|
+
exec /usr/sbin/sshd
|
77
|
+
EOF
|
78
|
+
|
79
|
+
cat <<EOF > $rootfs/etc/init/console.conf
|
80
|
+
# console - getty
|
81
|
+
#
|
82
|
+
# This service maintains a console on tty1 from the point the system is
|
83
|
+
# started until it is shut down again.
|
84
|
+
|
85
|
+
start on stopped rc RUNLEVEL=[2345]
|
86
|
+
stop on runlevel [!2345]
|
87
|
+
|
88
|
+
respawn
|
89
|
+
exec /sbin/getty -8 38400 /dev/console
|
90
|
+
EOF
|
91
|
+
|
92
|
+
cat <<EOF > $rootfs/lib/init/fstab
|
93
|
+
# /lib/init/fstab: lxc system fstab
|
94
|
+
none /spu spufs gid=spu,optional 0 0
|
95
|
+
none /tmp none defaults 0 0
|
96
|
+
none /var/lock tmpfs nodev,noexec,nosuid,showthrough 0 0
|
97
|
+
none /lib/init/rw tmpfs mode=0755,nosuid,optional 0 0
|
98
|
+
EOF
|
99
|
+
|
100
|
+
# reconfigure some services
|
101
|
+
if [ -z "$LANG" ]; then
|
102
|
+
chroot $rootfs locale-gen en_US.UTF-8
|
103
|
+
chroot $rootfs update-locale LANG=en_US.UTF-8
|
104
|
+
else
|
105
|
+
chroot $rootfs locale-gen $LANG
|
106
|
+
chroot $rootfs update-locale LANG=$LANG
|
107
|
+
fi
|
108
|
+
|
109
|
+
# remove pointless services in a container
|
110
|
+
chroot $rootfs /usr/sbin/update-rc.d -f ondemand remove
|
111
|
+
|
112
|
+
chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls u*.conf); do mv $f $f.orig; done'
|
113
|
+
chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls tty[2-9].conf); do mv $f $f.orig; done'
|
114
|
+
chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls plymouth*.conf); do mv $f $f.orig; done'
|
115
|
+
chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls hwclock*.conf); do mv $f $f.orig; done'
|
116
|
+
chroot $rootfs /bin/bash -c 'cd /etc/init; for f in $(ls module*.conf); do mv $f $f.orig; done'
|
117
|
+
|
118
|
+
echo "Set root password to 'root'"
|
119
|
+
echo "root:root" | chroot $rootfs chpasswd
|
120
|
+
|
121
|
+
return 0
|
122
|
+
}
|
123
|
+
|
124
|
+
copy_ubuntu()
|
125
|
+
{
|
126
|
+
cache=$1
|
127
|
+
arch=$2
|
128
|
+
rootfs=$3
|
129
|
+
|
130
|
+
# make a local copy of the miniubuntu
|
131
|
+
echo "Extracting rootfs image to $rootfs ..."
|
132
|
+
mkdir $rootfs
|
133
|
+
tar zxf $cache/lucid-$arch.tar.gz -C $rootfs || return 1
|
134
|
+
return 0
|
135
|
+
}
|
136
|
+
|
137
|
+
install_ubuntu()
|
138
|
+
{
|
139
|
+
cache="/var/cache/lxc"
|
140
|
+
rootfs=$1
|
141
|
+
mkdir -p /var/lock/subsys/
|
142
|
+
(
|
143
|
+
flock -n -x 200
|
144
|
+
if [ $? -ne 0 ]; then
|
145
|
+
echo "Cache repository is busy."
|
146
|
+
return 1
|
147
|
+
fi
|
148
|
+
|
149
|
+
arch=$(arch)
|
150
|
+
if [ "$arch" == "x86_64" ]; then
|
151
|
+
arch=amd64
|
152
|
+
fi
|
153
|
+
|
154
|
+
if [ "$arch" == "i686" ]; then
|
155
|
+
arch=i386
|
156
|
+
fi
|
157
|
+
|
158
|
+
echo "Checking image cache in $cache/rootfs-$arch ... "
|
159
|
+
if [ ! -e "$cache/rootfs-$arch" ]; then
|
160
|
+
if [ $? -ne 0 ]; then
|
161
|
+
echo "Failed to download 'ubuntu base'"
|
162
|
+
return 1
|
163
|
+
fi
|
164
|
+
fi
|
165
|
+
|
166
|
+
copy_ubuntu $cache $arch $rootfs
|
167
|
+
if [ $? -ne 0 ]; then
|
168
|
+
echo "Failed to copy rootfs"
|
169
|
+
return 1
|
170
|
+
fi
|
171
|
+
|
172
|
+
return 0
|
173
|
+
|
174
|
+
) 200>/var/lock/subsys/lxc
|
175
|
+
|
176
|
+
return $?
|
177
|
+
}
|
178
|
+
|
179
|
+
copy_configuration()
|
180
|
+
{
|
181
|
+
path=$1
|
182
|
+
rootfs=$2
|
183
|
+
name=$3
|
184
|
+
|
185
|
+
cat <<EOF >> $path/config
|
186
|
+
lxc.utsname = $name
|
187
|
+
|
188
|
+
lxc.tty = 4
|
189
|
+
lxc.pts = 1024
|
190
|
+
lxc.rootfs = $rootfs
|
191
|
+
lxc.mount = $path/fstab
|
192
|
+
|
193
|
+
lxc.cgroup.devices.deny = a
|
194
|
+
# /dev/null and zero
|
195
|
+
lxc.cgroup.devices.allow = c 1:3 rwm
|
196
|
+
lxc.cgroup.devices.allow = c 1:5 rwm
|
197
|
+
# consoles
|
198
|
+
lxc.cgroup.devices.allow = c 5:1 rwm
|
199
|
+
lxc.cgroup.devices.allow = c 5:0 rwm
|
200
|
+
lxc.cgroup.devices.allow = c 4:0 rwm
|
201
|
+
lxc.cgroup.devices.allow = c 4:1 rwm
|
202
|
+
# /dev/{,u}random
|
203
|
+
lxc.cgroup.devices.allow = c 1:9 rwm
|
204
|
+
lxc.cgroup.devices.allow = c 1:8 rwm
|
205
|
+
lxc.cgroup.devices.allow = c 136:* rwm
|
206
|
+
lxc.cgroup.devices.allow = c 5:2 rwm
|
207
|
+
# rtc
|
208
|
+
lxc.cgroup.devices.allow = c 254:0 rwm
|
209
|
+
EOF
|
210
|
+
|
211
|
+
cat <<EOF > $path/fstab
|
212
|
+
proc $rootfs/proc proc nodev,noexec,nosuid 0 0
|
213
|
+
devpts $rootfs/dev/pts devpts defaults 0 0
|
214
|
+
sysfs $rootfs/sys sysfs defaults 0 0
|
215
|
+
EOF
|
216
|
+
|
217
|
+
if [ $? -ne 0 ]; then
|
218
|
+
echo "Failed to add configuration"
|
219
|
+
return 1
|
220
|
+
fi
|
221
|
+
|
222
|
+
return 0
|
223
|
+
}
|
224
|
+
|
225
|
+
clean()
|
226
|
+
{
|
227
|
+
cache="/var/cache/lxc"
|
228
|
+
|
229
|
+
if [ ! -e $cache ]; then
|
230
|
+
exit 0
|
231
|
+
fi
|
232
|
+
|
233
|
+
# lock, so we won't purge while someone is creating a repository
|
234
|
+
(
|
235
|
+
flock -n -x 200
|
236
|
+
if [ $? != 0 ]; then
|
237
|
+
echo "Cache repository is busy."
|
238
|
+
exit 1
|
239
|
+
fi
|
240
|
+
|
241
|
+
echo -n "Purging the download cache..."
|
242
|
+
rm --preserve-root --one-file-system -rf $cache && echo "Done." || exit 1
|
243
|
+
exit 0
|
244
|
+
|
245
|
+
) 200>/var/lock/subsys/lxc
|
246
|
+
}
|
247
|
+
|
248
|
+
usage()
|
249
|
+
{
|
250
|
+
cat <<EOF
|
251
|
+
$1 -h|--help -p|--path=<path> --clean
|
252
|
+
EOF
|
253
|
+
return 0
|
254
|
+
}
|
255
|
+
|
256
|
+
options=$(getopt -o hp:n:c -l help,path:,name:,clean -- "$@")
|
257
|
+
if [ $? -ne 0 ]; then
|
258
|
+
usage $(basename $0)
|
259
|
+
exit 1
|
260
|
+
fi
|
261
|
+
eval set -- "$options"
|
262
|
+
|
263
|
+
while true
|
264
|
+
do
|
265
|
+
case "$1" in
|
266
|
+
-h|--help) usage $0 && exit 0;;
|
267
|
+
-p|--path) path=$2; shift 2;;
|
268
|
+
-n|--name) name=$2; shift 2;;
|
269
|
+
-c|--clean) clean=$2; shift 2;;
|
270
|
+
--) shift 1; break ;;
|
271
|
+
*) break ;;
|
272
|
+
esac
|
273
|
+
done
|
274
|
+
|
275
|
+
if [ ! -z "$clean" -a -z "$path" ]; then
|
276
|
+
clean || exit 1
|
277
|
+
exit 0
|
278
|
+
fi
|
279
|
+
|
280
|
+
if [ -z "$path" ]; then
|
281
|
+
echo "'path' parameter is required"
|
282
|
+
exit 1
|
283
|
+
fi
|
284
|
+
|
285
|
+
if [ "$(id -u)" != "0" ]; then
|
286
|
+
echo "This script should be run as 'root'"
|
287
|
+
exit 1
|
288
|
+
fi
|
289
|
+
|
290
|
+
rootfs=$path/rootfs
|
291
|
+
|
292
|
+
install_ubuntu $rootfs
|
293
|
+
if [ $? -ne 0 ]; then
|
294
|
+
echo "failed to install ubuntu"
|
295
|
+
exit 1
|
296
|
+
fi
|
297
|
+
|
298
|
+
configure_ubuntu $rootfs $name
|
299
|
+
if [ $? -ne 0 ]; then
|
300
|
+
echo "failed to configure ubuntu for a container"
|
301
|
+
exit 1
|
302
|
+
fi
|
303
|
+
|
304
|
+
copy_configuration $path $rootfs $name
|
305
|
+
if [ $? -ne 0 ]; then
|
306
|
+
echo "failed write configuration file"
|
307
|
+
exit 1
|
308
|
+
fi
|
309
|
+
|
310
|
+
if [ ! -z $clean ]; then
|
311
|
+
clean || exit 1
|
312
|
+
exit 0
|
313
|
+
fi
|