oooq-warp.sh

#!/bin/bash
# Wrap OS of the given active user with the centos7 box and oooq
set -ue

# Internal env vars, only used to run a container wrapper
CPU=${CPU:-0}
MEM=${MEM:-0}

# Defines global env defaults in the wrapper container
RAMFS=${RAMFS:-false}
TEARDOWN=${TEARDOWN:-true}
# non_root_user et al
USER=${USER:-bogdando}
# Known paths to bind-mount git repos (to clone or pick up from a local path)
OOOQE_BRANCH=${OOOQE_BRANCH:-master}
OOOQE_FORK=${OOOQE_FORK:-openstack}
OOOQ_BRANCH=${OOOQ_BRANCH:-master}
OOOQ_FORK=${OOOQ_FORK:-openstack}
# oooq venv pre-created in the container
VPATH=/var/tmp/Envs
LIBGUESTFS_BACKEND=${LIBGUESTFS_BACKEND:-direct}
LIBGUESTFS_BACKEND_SETTINGS=${LIBGUESTFS_BACKEND_SETTINGS:-force_tcg}
# Known work paths inside of the container
OOOQ_WORKPATH=/var/tmp/oooq
OOOQE_WORKPATH=/var/tmp/oooq-extras
SCRIPTS_WORKPATH=/var/tmp/scripts
GERRITKEY=${GERRITKEY:-/home/${USER}/.ssh/id_ed25519}

set +xe
uid=$(id -u $USER)
if [ $? -ne 0 ]; then
  uid=0
  USER=donkey
fi
gid=$(id -g $USER) || gid=1000
set -e

KEYSMOUNTS="-v ${GERRITKEY}:/var/tmp/.ssh/gerrit/id_ed25519:ro -v ${GERRITKEY}.pub:/var/tmp/.ssh/gerrit/id_ed25519.pub:ro"
if [ "${USER}" = "donkey" ]; then
  UMOUNTS="-e UMOUNTS=donkeys ${KEYSMOUNTS}"
else
  UMOUNTS="-v /etc/subuid:/etc/subuid:ro -v /etc/passwd:/etc/passwd:ro -v /etc/group:/etc/group:ro -v /etc/shadow:/etc/shadow:ro -v /etc/sudoers:/etc/sudoers:ro"
  UMOUNTS="${UMOUNTS} -v /home/${USER}/.ssh/authorized_keys:/var/tmp/.ssh/authorized_keys ${KEYSMOUNTS}"
fi

host_kvm_gid=$(cut -d: -f3 <(getent group kvm))
host_libvirt_gid=$(cut -d: -f3 <(getent group libvirt))
host_docker_gid=$(cut -d: -f3 <(getent group docker))

if [ "${OOOQE_PATH:-}" -a -d "${OOOQE_PATH:-/tmp}" ]; then
  MOUNT_EXTRAS="-v ${OOOQE_PATH}:${OOOQE_WORKPATH}"
  OOOQE_PATH=$OOOQE_WORKPATH
fi

if [ "${OOOQ_PATH:-}" -a -d "${OOOQ_PATH:-/tmp}" ]; then
  MOUNT_QUICKSTART="-v ${OOOQ_PATH}:${OOOQ_WORKPATH}"
  OOOQ_PATH=$OOOQ_WORKPATH
fi

if [ "${IMAGECACHEBACKUP:-}" -a -d "${IMAGECACHEBACKUP:-/tmp}" ]; then
  MOUNT_IMAGECACHEBACKUP="-v ${IMAGECACHEBACKUP}:${IMAGECACHEBACKUP}:ro"
fi

# FIXME: UC cannot differentiate nor take non existing working_dir in quickstart.
# We have to use the common path /tmp for wirthost and UC because of that
# unfortunate reason. If/once fixed, make working_dir like /tmp/.quickstart at
# virthost, and whatever else non-ephemeral for undercloud VM. Until then,
# UC may not survive the VM reboot nicely (all artifacts produced by quickstart
# will be gone)
IMAGECACHE_REAL=/var/cache/tripleo-quickstart/images
if [ "${RAMFS}" = "true" ]; then
  echo "Using /tmp for images cache and working dir, all stored in RAM."
  echo "WARNING: With RAMFS=true, it may eat a lot of memory, USE WITH CAUTION!"
  echo
  echo "If you want an environment persisted after the container exited/node rebooted,"
  echo "use an existing (non /tmp) host path for LWD."
  echo "And remember to save-state.sh manually by the real host path LWD."
  echo "The saved state will be auto-picked up by the entry point, when starting new container."
  echo "WARNING: UC cannot persist its /tmp working dir though. So do not reboot it"
  echo "but suspend/resume/snapshot/revert VM instead!"
  echo
  WORKSPACE=/tmp
  MOUNT_IMAGECACHE="-v /tmp:${IMAGECACHE_REAL}"
elif [ "${IMAGECACHE:-}" -a -d "${IMAGECACHE:-/tmp}" -a "${IMAGECACHE:-}" != "/home/$USER" ]; then
  MOUNT_IMAGECACHE="-v ${IMAGECACHE}:${IMAGECACHE_REAL}"
else
  echo "Using ephemeral cache for images ${IMAGECACHE_REAL} instead"
  echo "NOTE: IMAGECACHE cannot take the current user's \$HOME path!"
  echo
fi

if [ "${LWD:-}" -a -d "${LWD:-/tmp}" -a "${LWD:-}" != "/home/$USER" -a "${LWD:-}" != "$IMAGECACHE" ]; then
  MOUNT_LWD="-v ${LWD}:${LWD}:shared"
else
  echo "Not bind-mounting local working dir LWD ${LWD:-}"
  echo "NOTE: it cannot take the current user's \$HOME path or share IMAGECACHE dir"
  LWD=/home/$USER
  echo "Using ephemeral LWD ${LWD} instead"
  echo
fi

if [ "${WORKSPACE:-}" -a -d "${WORKSPACE:-/tmp}" -a "${WORKSPACE:-}" != "/home/$USER" -a "${WORKSPACE:-}" != "$IMAGECACHE" ]; then
  MOUNT_WORKSPACE="-v ${WORKSPACE}:${WORKSPACE}:shared"
else
  echo "Not bind-mounting working dir WORKSPACE ${WORKSPACE:-}"
  echo "NOTE: it cannot take the current user's \$HOME path or share IMAGECACHE dir"
  WORKSPACE=$LWD
  echo "Using LWD as WORKSPACE instead"
  echo
fi

if [ "$RAMFS" != "false" ]; then
  KNOWN_PATHS="$LWD $WORKSPACE /home/${USER}/.ssh"
else
  KNOWN_PATHS="$LWD $WORKSPACE /home/${USER}/.ssh $IMAGECACHE $IMAGECACHE_REAL"
fi

set -x

docker run -it --rm --privileged \
  --cpus=1 --cpu-shares=${CPU} \
  --memory-swappiness=0 --memory=${MEM} \
  --net=host --pid=host --uts=host --ipc=host \
  -e RELEASE=${RELEASE:-master} \
  -e RAMFS=${RAMFS} \
  -e PATH="${OOOQ_WORKPATH}:${LWD}:${PATH}" \
  -e KNOWN_PATHS="${KNOWN_PATHS}" \
  -e USER=${USER} \
  -e WORKSPACE=${WORKSPACE} \
  -e OPT_WORKDIR=${LWD} \
  -e LWD=${LWD} \
  -e IMAGECACHE=${IMAGECACHE_REAL} \
  -e IMAGECACHEBACKUP=${IMAGECACHEBACKUP:-} \
  -e OOOQ_PATH=${OOOQ_PATH:-} \
  -e OOOQE_PATH=${OOOQE_PATH:-} \
  -e VPATH=${VPATH} \
  -e HOME=/home/${USER} \
  -e TEARDOWN=${TEARDOWN} \
  -e OOOQE_BRANCH=${OOOQE_BRANCH} \
  -e OOOQE_FORK=${OOOQE_FORK} \
  -e LIBGUESTFS_BACKEND=${LIBGUESTFS_BACKEND} \
  -e LIBGUESTFS_BACKEND_SETTINGS=${LIBGUESTFS_BACKEND_SETTINGS} \
  -e SUPERMIN_KERNEL=${SUPERMIN_KERNEL:-} \
  -e SUPERMIN_MODULES=${SUPERMIN_MODULES:-} \
  -e SUPERMIN_KERNEL_VERSION=${SUPERMIN_KERNEL_VERSION:-} \
  -e HOST_BREXT_IP=${HOST_BREXT_IP:-} \
  -e SCRIPTS_WORKPATH=${SCRIPTS_WORKPATH} \
  -e OOOQ_WORKPATH=${OOOQ_WORKPATH} \
  -e OOOQE_WORKPATH=${OOOQE_WORKPATH} \
  -e LOG_LEVEL=${LOG_LEVEL:--v} \
  -e ANSIBLE_TIMEOUT=${ANSIBLE_TIMEOUT:-900} \
  -e ANSIBLE_FORKS=${ANSIBLE_FORKS:-20} \
  -e ANSIBLE_PYTHON_INTERPRETER=${VPATH}/oooq/bin/python \
  -e DOCKERGID="${host_docker_gid}" \
  -e LIBVIRTGID="${host_libvirt_gid}" \
  -e KVMGID="${host_kvm_gid}" \
  -v /etc/docker:/etc/docker:ro \
  -v /var/lib/libvirt:/var/lib/libvirt \
  -v /run/libvirt:/run/libvirt \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /etc/libvirt/libvirtd.conf:/etc/libvirt/libvirtd.conf:ro \
  -v /dev:/dev \
  -v /sys/fs/cgroup:/sys/fs/cgroup \
  -v /lib/modules:/lib/modules:ro \
  -v config:/home/${USER}/.config/openstack \
  -v zuul:/var/lib/zuul \
  -v reproduce:/var/tmp/reproduce \
  ${MOUNT_IMAGECACHE:-} \
  ${MOUNT_QUICKSTART:-} \
  ${MOUNT_EXTRAS:-} \
  ${MOUNT_IMAGECACHEBACKUP:-} \
  ${MOUNT_WORKSPACE:-} \
  ${MOUNT_LWD:-} \
  ${UMOUNTS:-} \
  -v ${PWD}/ansible.cfg:${OOOQ_WORKPATH}/ansible.cfg:ro \
  -v ${PWD}/entry.sh:/usr/local/sbin/entry.sh:ro \
  -v ${PWD}/save-state.sh:/usr/local/sbin/save-state.sh:ro \
  -v ${PWD}:${SCRIPTS_WORKPATH}:ro \
  -v /boot:/boot:ro \
  -u ${uid}:${gid} --group-add ${host_libvirt_gid} \
  --group-add ${host_docker_gid} \
  --group-add ${host_kvm_gid} \
  --entrypoint /usr/local/sbin/entry.sh \
  --name runner bogdando/oooq-runner:0.4 \
  ${@:-}