docker/Keystone/scripts/start.sh

   1 #!/bin/bash
   2
   3 DB_EXISTS=""
   4 DB_NOT_EMPTY=""
   5
   6 max_attempts=120
   7 function wait_db(){
   8     db_host=$1
   9     db_port=$2
  10     attempt=0
  11     echo "Wait until $max_attempts seconds for MySQL mano Server ${db_host}:${db_port} "
  12     while ! mysqladmin ping -h"$db_host" -P"$db_port" --silent; do
  13         #wait 120 sec
  14         if [ $attempt -ge $max_attempts ]; then
  15             echo
  16             echo "Can not connect to database ${db_host}:${db_port} during $max_attempts sec"
  17             return 1
  18         fi
  19         attempt=$[$attempt+1]
  20         echo -n "."
  21         sleep 1
  22     done
  23     return 0
  24 }
  25
  26 function is_db_created() {
  27     db_host=$1
  28     db_port=$2
  29     db_user=$3
  30     db_pswd=$4
  31     db_name=$5
  32
  33     if mysqlshow -h"$db_host" -P"$db_port" -u"$db_user" -p"$db_pswd" | grep -v Wildcard | grep -q $db_name; then
  34         echo "DB $db_name exists"
  35         return 0
  36     else
  37         echo "DB $db_name does not exist"
  38         return 1
  39     fi
  40 }
  41
  42 wait_db "$DB_HOST" "$DB_PORT" || exit 1
  43
  44 is_db_created "$DB_HOST" "$DB_PORT" "$ROOT_DB_USER" "$ROOT_DB_PASSWORD" "keystone" && DB_EXISTS="Y"
  45
  46 if [ -z $DB_EXISTS ]; then
  47     mysql -h"$DB_HOST" -P"$DB_PORT" -u"$ROOT_DB_USER" -p"$ROOT_DB_PASSWORD" --default_character_set utf8 -e "CREATE DATABASE keystone"
  48     mysql -h"$DB_HOST" -P"$DB_PORT" -u"$ROOT_DB_USER" -p"$ROOT_DB_PASSWORD" --default_character_set utf8 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '$KEYSTONE_DB_PASSWORD'"
  49     mysql -h"$DB_HOST" -P"$DB_PORT" -u"$ROOT_DB_USER" -p"$ROOT_DB_PASSWORD" --default_character_set utf8 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '$KEYSTONE_DB_PASSWORD'"
  50 else
  51     if [ $(mysql -h"$DB_HOST" -P"$DB_PORT" -u"$ROOT_DB_USER" -p"$ROOT_DB_PASSWORD" --default_character_set utf8 -sse "SELECT COUNT(*) FROM keystone;") -gt 0 ]; then
  52         echo "DB keystone is empty"
  53         DB_NOT_EMPTY="y"
  54     fi
  55 fi
  56
  57 # Setting Keystone database connection
  58 sed -i "721s%.*%connection = mysql+pymysql://keystone:$KEYSTONE_DB_PASSWORD@$DB_HOST:$DB_PORT/keystone%" /etc/keystone/keystone.conf
  59
  60 # Setting Keystone tokens
  61 sed -i "2934s%.*%provider = fernet%" /etc/keystone/keystone.conf
  62
  63 # Populate Keystone database
  64 if [ -z $DB_EXISTS ] || [ -z $DB_NOT_EMPTY ]; then
  65     su -s /bin/sh -c "keystone-manage db_sync" keystone
  66 fi
  67
  68 # Initialize Fernet key repositories
  69 keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
  70 keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
  71
  72 # Bootstrap Keystone service
  73 if [ -z $DB_EXISTS ] || [ -z $DB_NOT_EMPTY ]; then
  74     keystone-manage bootstrap \
  75         --bootstrap-username "$ADMIN_USERNAME" \
  76         --bootstrap-password "$ADMIN_PASSWORD" \
  77         --bootstrap-project "$ADMIN_PROJECT" \
  78         --bootstrap-admin-url "http://$KEYSTONE_HOST:5000/v3/" \
  79         --bootstrap-internal-url "http://$KEYSTONE_HOST:5000/v3/" \
  80         --bootstrap-public-url "http://$KEYSTONE_HOST:5000/v3/" \
  81         --bootstrap-region-id "$REGION_ID"
  82 fi
  83
  84 # Restart Apache Service
  85 service apache2 restart
  86
  87 cat << EOF >> setup_env
  88 export OS_PROJECT_DOMAIN_NAME=default
  89 export OS_USER_DOMAIN_NAME=default
  90 export OS_PROJECT_NAME=$ADMIN_PROJECT
  91 export OS_USERNAME=$ADMIN_USERNAME
  92 export OS_PASSWORD=$ADMIN_PASSWORD
  93 export OS_AUTH_URL=http://$KEYSTONE_HOST:5000/v3
  94 export OS_IDENTITY_API_VERSION=3
  95 export OS_IMAGE_API_VERSION=2
  96 EOF
  97
  98 source setup_env
  99
 100 # Create NBI User
 101 if [ -z $DB_EXISTS ] || [ -z $DB_NOT_EMPTY ]; then
 102     openstack user create --domain default --password "$SERVICE_PASSWORD" "$SERVICE_USERNAME"
 103     openstack project create --domain default --description "Service Project" "$SERVICE_PROJECT"
 104     openstack role add --project "$SERVICE_PROJECT" --user "$SERVICE_USER" admin
 105     openstack role delete _member_
 106 fi
 107
 108 while ps -ef | grep -v grep | grep -q apache2
 109 do
 110     sleep 60
 111 done
 112
 113 # Only reaches this point if apache2 stops running
 114 # When this happens exits with error code
 115 exit 1