installers/full_install_osm.sh

   1 #!/bin/bash
   2 #   Copyright 2016 Telefónica Investigación y Desarrollo S.A.U.
   3 #
   4 #   Licensed under the Apache License, Version 2.0 (the "License");
   5 #   you may not use this file except in compliance with the License.
   6 #   You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 #   Unless required by applicable law or agreed to in writing, software
  11 #   distributed under the License is distributed on an "AS IS" BASIS,
  12 #   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 #   See the License for the specific language governing permissions and
  14 #   limitations under the License.
  15
  16 function usage(){
  17     echo -e "usage: $0 [OPTIONS]"
  18     echo -e "Install OSM from binaries or source code (by default, from binaries)"
  19     echo -e "  OPTIONS"
  20     echo -e "     -r <repo>:      use specified repository name for osm packages"
  21     echo -e "     -R <release>:   use specified release for osm binaries (deb packages, lxd images, ...)"
  22     echo -e "     -u <repo base>: use specified repository url for osm packages"
  23     echo -e "     -k <repo key>:  use specified repository public key url"
  24     echo -e "     -b <refspec>:   install OSM from source code using a specific branch (master, v2.0, ...) or tag"
  25     echo -e "                     -b master          (main dev branch)"
  26     echo -e "                     -b v2.0            (v2.0 branch)"
  27     echo -e "                     -b tags/v1.1.0     (a specific tag)"
  28     echo -e "                     ..."
  29     echo -e "     -s <stack name> user defined stack name, default is osm"
  30     echo -e "     -H <VCA host>   use specific juju host controller IP"
  31     echo -e "     -S <VCA secret> use VCA/juju secret key"
  32     echo -e "     -P <VCA pubkey> use VCA/juju public key file"
  33     echo -e "     -C <VCA cacert> use VCA/juju CA certificate file"
  34     echo -e "     -A <VCA apiproxy> use VCA/juju API proxy"
  35     echo -e "     --vimemu:       additionally deploy the VIM emulator as a docker container"
  36     echo -e "     --elk_stack:    additionally deploy an ELK docker stack for event logging"
  37     echo -e "     --pm_stack:     additionally deploy a Prometheus+Grafana stack for performance monitoring (PM)"
  38     echo -e "     -m <MODULE>:    install OSM but only rebuild the specified docker images (LW-UI, NBI, LCM, RO, MON, POL, KAFKA, MONGO, PROMETHEUS, KEYSTONE-DB, NONE)"
  39     echo -e "     -o <ADDON>:     ONLY (un)installs one of the addons (vimemu, elk_stack, pm_stack)"
  40     echo -e "     -D <devops path> use local devops installation path"
  41     echo -e "     -w <work dir>   Location to store runtime installation"
  42     echo -e "     -t <docker tag> specify osm docker tag (default is latest)"
  43     echo -e "     --nolxd:        do not install and configure LXD, allowing unattended installations (assumes LXD is already installed and confifured)"
  44     echo -e "     --nodocker:     do not install docker, do not initialize a swarm (assumes docker is already installed and a swarm has been initialized)"
  45     echo -e "     --nojuju:       do not juju, assumes already installed"
  46     echo -e "     --nodockerbuild:do not build docker images (use existing locally cached images)"
  47     echo -e "     --nohostports:  do not expose docker ports to host (useful for creating multiple instances of osm on the same host)"
  48     echo -e "     --nohostclient: do not install the osmclient"
  49     echo -e "     --uninstall:    uninstall OSM: remove the containers and delete NAT rules"
  50     echo -e "     --source:       install OSM from source code using the latest stable tag"
  51     echo -e "     --develop:      (deprecated, use '-b master') install OSM from source code using the master branch"
  52     echo -e "     --soui:         install classic build of OSM (Rel THREE v3.1, based on LXD containers, with SO and UI)"
  53     echo -e "     --lxdimages:    (only for Rel THREE with --soui) download lxd images from OSM repository instead of creating them from scratch"
  54     echo -e "     --pullimages:   pull/run osm images from docker.io/opensourcemano"
  55     echo -e "     -l <lxd_repo>:  (only for Rel THREE with --soui) use specified repository url for lxd images"
  56     echo -e "     -p <path>:      (only for Rel THREE with --soui) use specified repository path for lxd images"
  57 #    echo -e "     --reconfigure:  reconfigure the modules (DO NOT change NAT rules)"
  58     echo -e "     --nat:          (only for Rel THREE with --soui) install only NAT rules"
  59     echo -e "     --noconfigure:  (only for Rel THREE with --soui) DO NOT install osmclient, DO NOT install NAT rules, DO NOT configure modules"
  60 #    echo -e "     --update:       update to the latest stable release or to the latest commit if using a specific branch"
  61     echo -e "     --showopts:     print chosen options and exit (only for debugging)"
  62     echo -e "     -y:             do not prompt for confirmation, assumes yes"
  63     echo -e "     -h / --help:    print this help"
  64 }
  65
  66 #Uninstall OSM: remove containers
  67 function uninstall(){
  68     echo -e "\nUninstalling OSM"
  69     if [ $RC_CLONE ] || [ -n "$TEST_INSTALLER" ]; then
  70         $OSM_DEVOPS/jenkins/host/clean_container RO
  71         $OSM_DEVOPS/jenkins/host/clean_container VCA
  72         $OSM_DEVOPS/jenkins/host/clean_container MON
  73         $OSM_DEVOPS/jenkins/host/clean_container SO
  74         #$OSM_DEVOPS/jenkins/host/clean_container UI
  75     else
  76         lxc stop RO && lxc delete RO
  77         lxc stop VCA && lxc delete VCA
  78         lxc stop MON && lxc delete MON
  79         lxc stop SO-ub && lxc delete SO-ub
  80     fi
  81     echo -e "\nDeleting imported lxd images if they exist"
  82     lxc image show osm-ro &>/dev/null && lxc image delete osm-ro
  83     lxc image show osm-vca &>/dev/null && lxc image delete osm-vca
  84     lxc image show osm-soui &>/dev/null && lxc image delete osm-soui
  85     return 0
  86 }
  87
  88 # takes a juju/accounts.yaml file and returns the password specific
  89 # for a controller. I wrote this using only bash tools to minimize
  90 # additions of other packages
  91 function parse_juju_password {
  92    password_file="${HOME}/.local/share/juju/accounts.yaml"
  93    local controller_name=$1
  94    local s='[[:space:]]*' w='[a-zA-Z0-9_-]*' fs=$(echo @|tr @ '\034')
  95    sed -ne "s|^\($s\):|\1|" \
  96         -e "s|^\($s\)\($w\)$s:$s[\"']\(.*\)[\"']$s\$|\1$fs\2$fs\3|p" \
  97         -e "s|^\($s\)\($w\)$s:$s\(.*\)$s\$|\1$fs\2$fs\3|p" $password_file |
  98    awk -F$fs -v controller=$controller_name '{
  99       indent = length($1)/2;
 100       vname[indent] = $2;
 101       for (i in vname) {if (i > indent) {delete vname[i]}}
 102       if (length($3) > 0) {
 103          vn=""; for (i=0; i<indent; i++) {vn=(vn)(vname[i])("_")}
 104          if (match(vn,controller) && match($2,"password")) {
 105              printf("%s",$3);
 106          }
 107       }
 108    }'
 109 }
 110
 111 function generate_secret() {
 112     head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32
 113 }
 114
 115 function remove_volumes() {
 116     stack=$1
 117     volumes="mongo_db mon_db osm_packages ro_db"
 118     for volume in $volumes; do
 119         sg docker -c "docker volume rm ${stack}_${volume}"
 120     done
 121 }
 122
 123 function remove_network() {
 124     stack=$1
 125     sg docker -c "docker network rm net${stack}"
 126 }
 127
 128 function remove_stack() {
 129     stack=$1
 130     if sg docker -c "docker stack ps ${stack}" ; then
 131         echo -e "\nRemoving stack ${stack}" && sg docker -c "docker stack rm ${stack}"
 132         COUNTER=0
 133         result=1
 134         while [ ${COUNTER} -lt 30 ]; do
 135             result=$(sg docker -c "docker stack ps ${stack}" | wc -l)
 136             #echo "Dockers running: $result"
 137             if [ "${result}" == "0" ]; then
 138                 break
 139             fi
 140             let COUNTER=COUNTER+1
 141             sleep 1
 142         done
 143         if [ "${result}" == "0" ]; then
 144             echo "All dockers of the stack ${stack} were removed"
 145         else
 146             FATAL "Some dockers of the stack ${stack} could not be removed. Could not clean it."
 147         fi
 148         sleep 5
 149     fi
 150 }
 151
 152 #Uninstall lightweight OSM: remove dockers
 153 function uninstall_lightweight() {
 154     if [ -n "$INSTALL_ONLY" ]; then
 155         if [ -n "$INSTALL_ELK" ]; then
 156             echo -e "\nUninstalling OSM ELK stack"
 157             remove_stack osm_elk
 158             $WORKDIR_SUDO rm -rf $OSM_DOCKER_WORK_DIR/osm_elk
 159         fi
 160         if [ -n "$INSTALL_PERFMON" ]; then
 161             echo -e "\nUninstalling OSM Performance Monitoring stack"
 162             remove_stack osm_metrics
 163             $WORKDIR_SUDO rm -rf $OSM_DOCKER_WORK_DIR/osm_metrics
 164         fi
 165     else
 166         echo -e "\nUninstalling OSM"
 167         remove_stack $OSM_STACK_NAME
 168         remove_stack osm_elk
 169         remove_stack osm_metrics
 170         echo "Now osm docker images and volumes will be deleted"
 171         newgrp docker << EONG
 172         docker image rm ${DOCKER_USER}/ro:${OSM_DOCKER_TAG}
 173         docker image rm ${DOCKER_USER}/lcm:${OSM_DOCKER_TAG}
 174         docker image rm ${DOCKER_USER}/light-ui:${OSM_DOCKER_TAG}
 175         docker image rm ${DOCKER_USER}/keystone:${OSM_DOCKER_TAG}
 176         docker image rm ${DOCKER_USER}/nbi:${OSM_DOCKER_TAG}
 177         docker image rm ${DOCKER_USER}/mon:${OSM_DOCKER_TAG}
 178         docker image rm ${DOCKER_USER}/pol:${OSM_DOCKER_TAG}
 179         docker image rm ${DOCKER_USER}/osmclient:${OSM_DOCKER_TAG}
 180 EONG
 181         remove_volumes $OSM_STACK_NAME
 182         remove_network $OSM_STACK_NAME
 183         echo "Removing $OSM_DOCKER_WORK_DIR"
 184         $WORKDIR_SUDO rm -rf $OSM_DOCKER_WORK_DIR
 185         sg lxd -c "juju destroy-controller --destroy-all-models --yes $OSM_STACK_NAME"
 186     fi
 187     echo "Some docker images will be kept in case they are used by other docker stacks"
 188     echo "To remove them, just run 'docker image prune' in a terminal"
 189     return 0
 190 }
 191
 192 #Configure NAT rules, based on the current IP addresses of containers
 193 function nat(){
 194     echo -e "\nChecking required packages: iptables-persistent"
 195     dpkg -l iptables-persistent &>/dev/null || ! echo -e "    Not installed.\nInstalling iptables-persistent requires root privileges" || \
 196     sudo DEBIAN_FRONTEND=noninteractive apt-get -yq install iptables-persistent
 197     echo -e "\nConfiguring NAT rules"
 198     echo -e "   Required root privileges"
 199     sudo $OSM_DEVOPS/installers/nat_osm
 200 }
 201
 202 function FATAL(){
 203     echo "FATAL error: Cannot install OSM due to \"$1\""
 204     exit 1
 205 }
 206
 207 #Update RO, SO and UI:
 208 function update(){
 209     echo -e "\nUpdating components"
 210
 211     echo -e "     Updating RO"
 212     CONTAINER="RO"
 213     MDG="RO"
 214     INSTALL_FOLDER="/opt/openmano"
 215     echo -e "     Fetching the repo"
 216     lxc exec $CONTAINER -- git -C $INSTALL_FOLDER fetch --all
 217     BRANCH=""
 218     BRANCH=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER status -sb | head -n1 | sed -n 's/^## \(.*\).*/\1/p'|awk '{print $1}' |sed 's/\(.*\)\.\.\..*/\1/'`
 219     [ -z "$BRANCH" ] && FATAL "Could not find the current branch in use in the '$MDG'"
 220     CURRENT=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER status |head -n1`
 221     CURRENT_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-parse HEAD`
 222     echo "         FROM: $CURRENT ($CURRENT_COMMIT_ID)"
 223     # COMMIT_ID either was  previously set with -b option, or is an empty string
 224     CHECKOUT_ID=$COMMIT_ID
 225     [ -z "$CHECKOUT_ID" ] && [ "$BRANCH" == "HEAD" ] && CHECKOUT_ID="tags/$LATEST_STABLE_DEVOPS"
 226     [ -z "$CHECKOUT_ID" ] && [ "$BRANCH" != "HEAD" ] && CHECKOUT_ID="$BRANCH"
 227     if [[ $CHECKOUT_ID == "tags/"* ]]; then
 228         REMOTE_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-list -n 1 $CHECKOUT_ID`
 229     else
 230         REMOTE_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-parse origin/$CHECKOUT_ID`
 231     fi
 232     echo "         TO: $CHECKOUT_ID ($REMOTE_COMMIT_ID)"
 233     if [ "$CURRENT_COMMIT_ID" == "$REMOTE_COMMIT_ID" ]; then
 234         echo "         Nothing to be done."
 235     else
 236         echo "         Update required."
 237         lxc exec $CONTAINER -- service osm-ro stop
 238         lxc exec $CONTAINER -- git -C /opt/openmano stash
 239         lxc exec $CONTAINER -- git -C /opt/openmano pull --rebase
 240         lxc exec $CONTAINER -- git -C /opt/openmano checkout $CHECKOUT_ID
 241         lxc exec $CONTAINER -- git -C /opt/openmano stash pop
 242         lxc exec $CONTAINER -- /opt/openmano/database_utils/migrate_mano_db.sh
 243         lxc exec $CONTAINER -- service osm-ro start
 244     fi
 245     echo
 246
 247     echo -e "     Updating SO and UI"
 248     CONTAINER="SO-ub"
 249     MDG="SO"
 250     INSTALL_FOLDER=""   # To be filled in
 251     echo -e "     Fetching the repo"
 252     lxc exec $CONTAINER -- git -C $INSTALL_FOLDER fetch --all
 253     BRANCH=""
 254     BRANCH=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER status -sb | head -n1 | sed -n 's/^## \(.*\).*/\1/p'|awk '{print $1}' |sed 's/\(.*\)\.\.\..*/\1/'`
 255     [ -z "$BRANCH" ] && FATAL "Could not find the current branch in use in the '$MDG'"
 256     CURRENT=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER status |head -n1`
 257     CURRENT_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-parse HEAD`
 258     echo "         FROM: $CURRENT ($CURRENT_COMMIT_ID)"
 259     # COMMIT_ID either was  previously set with -b option, or is an empty string
 260     CHECKOUT_ID=$COMMIT_ID
 261     [ -z "$CHECKOUT_ID" ] && [ "$BRANCH" == "HEAD" ] && CHECKOUT_ID="tags/$LATEST_STABLE_DEVOPS"
 262     [ -z "$CHECKOUT_ID" ] && [ "$BRANCH" != "HEAD" ] && CHECKOUT_ID="$BRANCH"
 263     if [[ $CHECKOUT_ID == "tags/"* ]]; then
 264         REMOTE_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-list -n 1 $CHECKOUT_ID`
 265     else
 266         REMOTE_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-parse origin/$CHECKOUT_ID`
 267     fi
 268     echo "         TO: $CHECKOUT_ID ($REMOTE_COMMIT_ID)"
 269     if [ "$CURRENT_COMMIT_ID" == "$REMOTE_COMMIT_ID" ]; then
 270         echo "         Nothing to be done."
 271     else
 272         echo "         Update required."
 273         # Instructions to be added
 274         # lxc exec SO-ub -- ...
 275     fi
 276     echo
 277     echo -e "Updating MON Container"
 278     CONTAINER="MON"
 279     MDG="MON"
 280     INSTALL_FOLDER="/root/MON"
 281     echo -e "     Fetching the repo"
 282     lxc exec $CONTAINER -- git -C $INSTALL_FOLDER fetch --all
 283     BRANCH=""
 284     BRANCH=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER status -sb | head -n1 | sed -n 's/^## \(.*\).*/\1/p'|awk '{print $1}' |sed 's/\(.*\)\.\.\..*/\1/'`
 285     [ -z "$BRANCH" ] && FATAL "Could not find the current branch in use in the '$MDG'"
 286     CURRENT=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER status |head -n1`
 287     CURRENT_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-parse HEAD`
 288     echo "         FROM: $CURRENT ($CURRENT_COMMIT_ID)"
 289     # COMMIT_ID either was  previously set with -b option, or is an empty string
 290     CHECKOUT_ID=$COMMIT_ID
 291     [ -z "$CHECKOUT_ID" ] && [ "$BRANCH" == "HEAD" ] && CHECKOUT_ID="tags/$LATEST_STABLE_DEVOPS"
 292     [ -z "$CHECKOUT_ID" ] && [ "$BRANCH" != "HEAD" ] && CHECKOUT_ID="$BRANCH"
 293     if [[ $CHECKOUT_ID == "tags/"* ]]; then
 294         REMOTE_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-list -n 1 $CHECKOUT_ID`
 295     else
 296         REMOTE_COMMIT_ID=`lxc exec $CONTAINER -- git -C $INSTALL_FOLDER rev-parse origin/$CHECKOUT_ID`
 297     fi
 298     echo "         TO: $CHECKOUT_ID ($REMOTE_COMMIT_ID)"
 299     if [ "$CURRENT_COMMIT_ID" == "$REMOTE_COMMIT_ID" ]; then
 300         echo "         Nothing to be done."
 301     else
 302         echo "         Update required."
 303     fi
 304     echo
 305 }
 306
 307 function so_is_up() {
 308     if [ -n "$1" ]; then
 309         SO_IP=$1
 310     else
 311         SO_IP=`lxc list SO-ub -c 4|grep eth0 |awk '{print $2}'`
 312     fi
 313     time=0
 314     step=5
 315     timelength=300
 316     while [ $time -le $timelength ]
 317     do
 318         if [[ `curl -k -X GET   https://$SO_IP:8008/api/operational/vcs/info \
 319                 -H 'accept: application/vnd.yang.data+json' \
 320                 -H 'authorization: Basic YWRtaW46YWRtaW4=' \
 321                 -H 'cache-control: no-cache' 2> /dev/null | jq  '.[].components.component_info[] | select(.component_name=="RW.Restconf")' 2>/dev/null | grep "RUNNING" | wc -l` -eq 1 ]]
 322         then
 323             echo "RW.Restconf running....SO is up"
 324             return 0
 325         fi
 326
 327         sleep $step
 328         echo -n "."
 329         time=$((time+step))
 330     done
 331
 332     FATAL "OSM Failed to startup. SO failed to startup"
 333 }
 334
 335 function vca_is_up() {
 336     if [[ `lxc exec VCA -- juju status | grep "osm" | wc -l` -eq 1 ]]; then
 337             echo "VCA is up and running"
 338             return 0
 339     fi
 340
 341     FATAL "OSM Failed to startup. VCA failed to startup"
 342 }
 343
 344 function mon_is_up() {
 345     if [[ `curl http://$RO_IP:9090/openmano/ | grep "works" | wc -l` -eq 1 ]]; then
 346             echo "MON is up and running"
 347             return 0
 348     fi
 349
 350     FATAL "OSM Failed to startup. MON failed to startup"
 351 }
 352
 353 function ro_is_up() {
 354     if [ -n "$1" ]; then
 355         RO_IP=$1
 356     else
 357         RO_IP=`lxc list RO -c 4|grep eth0 |awk '{print $2}'`
 358     fi
 359     time=0
 360     step=2
 361     timelength=20
 362     while [ $time -le $timelength ]; do
 363         if [[ `curl http://$RO_IP:9090/openmano/ | grep "works" | wc -l` -eq 1 ]]; then
 364             echo "RO is up and running"
 365             return 0
 366         fi
 367         sleep $step
 368         echo -n "."
 369         time=$((time+step))
 370     done
 371
 372     FATAL "OSM Failed to startup. RO failed to startup"
 373 }
 374
 375
 376 function configure_RO(){
 377     . $OSM_DEVOPS/installers/export_ips
 378     echo -e "       Configuring RO"
 379     lxc exec RO -- sed -i -e "s/^\#\?log_socket_host:.*/log_socket_host: $SO_CONTAINER_IP/g" /etc/osm/openmanod.cfg
 380     lxc exec RO -- service osm-ro restart
 381
 382     ro_is_up
 383
 384     lxc exec RO -- openmano tenant-delete -f osm >/dev/null
 385     lxc exec RO -- openmano tenant-create osm > /dev/null
 386     lxc exec RO -- sed -i '/export OPENMANO_TENANT=osm/d' .bashrc
 387     lxc exec RO -- sed -i '$ i export OPENMANO_TENANT=osm' .bashrc
 388     lxc exec RO -- sh -c 'echo "export OPENMANO_TENANT=osm" >> .bashrc'
 389 }
 390
 391 function configure_VCA(){
 392     echo -e "       Configuring VCA"
 393     JUJU_PASSWD=$(generate_secret)
 394     echo -e "$JUJU_PASSWD\n$JUJU_PASSWD" | lxc exec VCA -- juju change-user-password
 395 }
 396
 397 function configure_SOUI(){
 398     . $OSM_DEVOPS/installers/export_ips
 399     JUJU_CONTROLLER_IP=`lxc exec VCA -- lxc list -c 4 |grep eth0 |awk '{print $2}'`
 400     RO_TENANT_ID=`lxc exec RO -- openmano tenant-list osm |awk '{print $1}'`
 401
 402     echo -e " Configuring MON"
 403     #Information to be added about SO socket for logging
 404
 405     echo -e "       Configuring SO"
 406     sudo route add -host $JUJU_CONTROLLER_IP gw $VCA_CONTAINER_IP
 407     sudo ip route add 10.44.127.0/24 via $VCA_CONTAINER_IP
 408     sudo sed -i "$ i route add -host $JUJU_CONTROLLER_IP gw $VCA_CONTAINER_IP" /etc/rc.local
 409     sudo sed -i "$ i ip route add 10.44.127.0/24 via $VCA_CONTAINER_IP" /etc/rc.local
 410     # make journaling persistent
 411     lxc exec SO-ub -- mkdir -p /var/log/journal
 412     lxc exec SO-ub -- systemd-tmpfiles --create --prefix /var/log/journal
 413     lxc exec SO-ub -- systemctl restart systemd-journald
 414
 415     echo RIFT_EXTERNAL_ADDRESS=$DEFAULT_IP | lxc exec SO-ub -- tee -a /usr/rift/etc/default/launchpad
 416
 417     lxc exec SO-ub -- systemctl restart launchpad
 418
 419     so_is_up $SO_CONTAINER_IP
 420
 421     #delete existing config agent (could be there on reconfigure)
 422     curl -k --request DELETE \
 423       --url https://$SO_CONTAINER_IP:8008/api/config/config-agent/account/osmjuju \
 424       --header 'accept: application/vnd.yang.data+json' \
 425       --header 'authorization: Basic YWRtaW46YWRtaW4=' \
 426       --header 'cache-control: no-cache' \
 427       --header 'content-type: application/vnd.yang.data+json' &> /dev/null
 428
 429     result=$(curl -k --request POST \
 430       --url https://$SO_CONTAINER_IP:8008/api/config/config-agent \
 431       --header 'accept: application/vnd.yang.data+json' \
 432       --header 'authorization: Basic YWRtaW46YWRtaW4=' \
 433       --header 'cache-control: no-cache' \
 434       --header 'content-type: application/vnd.yang.data+json' \
 435       --data '{"account": [ { "name": "osmjuju", "account-type": "juju", "juju": { "ip-address": "'$JUJU_CONTROLLER_IP'", "port": "17070", "user": "admin", "secret": "'$JUJU_PASSWD'" }  }  ]}')
 436     [[ $result =~ .*success.* ]] || FATAL "Failed config-agent configuration: $result"
 437
 438     #R1/R2 config line
 439     #result=$(curl -k --request PUT \
 440     #  --url https://$SO_CONTAINER_IP:8008/api/config/resource-orchestrator \
 441     #  --header 'accept: application/vnd.yang.data+json' \
 442     #  --header 'authorization: Basic YWRtaW46YWRtaW4=' \
 443     #  --header 'cache-control: no-cache' \
 444     #  --header 'content-type: application/vnd.yang.data+json' \
 445     #  --data '{ "openmano": { "host": "'$RO_CONTAINER_IP'", "port": "9090", "tenant-id": "'$RO_TENANT_ID'" }, "name": "osmopenmano", "account-type": "openmano" }')
 446
 447     result=$(curl -k --request PUT \
 448       --url https://$SO_CONTAINER_IP:8008/api/config/project/default/ro-account/account \
 449       --header 'accept: application/vnd.yang.data+json' \
 450       --header 'authorization: Basic YWRtaW46YWRtaW4=' \
 451       --header 'cache-control: no-cache'   \
 452       --header 'content-type: application/vnd.yang.data+json' \
 453       --data '{"rw-ro-account:account": [ { "openmano": { "host": "'$RO_CONTAINER_IP'", "port": "9090", "tenant-id": "'$RO_TENANT_ID'"}, "name": "osmopenmano", "ro-account-type": "openmano" }]}')
 454     [[ $result =~ .*success.* ]] || FATAL "Failed resource-orchestrator configuration: $result"
 455
 456     result=$(curl -k --request PATCH \
 457       --url https://$SO_CONTAINER_IP:8008/v2/api/config/openidc-provider-config/rw-ui-client/redirect-uri \
 458       --header 'accept: application/vnd.yang.data+json' \
 459       --header 'authorization: Basic YWRtaW46YWRtaW4=' \
 460       --header 'cache-control: no-cache'   \
 461       --header 'content-type: application/vnd.yang.data+json' \
 462       --data '{"redirect-uri": "https://'$DEFAULT_IP':8443/callback" }')
 463     [[ $result =~ .*success.* ]] || FATAL "Failed redirect-uri configuration: $result"
 464
 465     result=$(curl -k --request PATCH \
 466       --url https://$SO_CONTAINER_IP:8008/v2/api/config/openidc-provider-config/rw-ui-client/post-logout-redirect-uri \
 467       --header 'accept: application/vnd.yang.data+json' \
 468       --header 'authorization: Basic YWRtaW46YWRtaW4=' \
 469       --header 'cache-control: no-cache'   \
 470       --header 'content-type: application/vnd.yang.data+json' \
 471       --data '{"post-logout-redirect-uri": "https://'$DEFAULT_IP':8443/?api_server=https://'$DEFAULT_IP'" }')
 472     [[ $result =~ .*success.* ]] || FATAL "Failed post-logout-redirect-uri configuration: $result"
 473
 474     lxc exec SO-ub -- tee /etc/network/interfaces.d/60-rift.cfg <<EOF
 475 auto lo:1
 476 iface lo:1 inet static
 477         address  $DEFAULT_IP
 478         netmask 255.255.255.255
 479 EOF
 480     lxc exec SO-ub ifup lo:1
 481 }
 482
 483 #Configure RO, VCA, and SO with the initial configuration:
 484 #  RO -> tenant:osm, logs to be sent to SO
 485 #  VCA -> juju-password
 486 #  SO -> route to Juju Controller, add RO account, add VCA account
 487 function configure(){
 488     #Configure components
 489     echo -e "\nConfiguring components"
 490     configure_RO
 491     configure_VCA
 492     configure_SOUI
 493 }
 494
 495 function install_lxd() {
 496     sudo apt-get update
 497     sudo apt-get install -y lxd
 498     newgrp lxd
 499     lxd init --auto
 500     lxd waitready
 501     lxc network create lxdbr0 ipv4.address=auto ipv4.nat=true ipv6.address=none ipv6.nat=false
 502     DEFAULT_INTERFACE=$(route -n | awk '$1~/^0.0.0.0/ {print $8}')
 503     DEFAULT_MTU=$(ip addr show $DEFAULT_INTERFACE | perl -ne 'if (/mtu\s(\d+)/) {print $1;}')
 504     lxc profile device set default eth0 mtu $DEFAULT_MTU
 505     #sudo systemctl stop lxd-bridge
 506     #sudo systemctl --system daemon-reload
 507     #sudo systemctl enable lxd-bridge
 508     #sudo systemctl start lxd-bridge
 509 }
 510
 511 function ask_user(){
 512     # ask to the user and parse a response among 'y', 'yes', 'n' or 'no'. Case insensitive
 513     # Params: $1 text to ask;   $2 Action by default, can be 'y' for yes, 'n' for no, other or empty for not allowed
 514     # Return: true(0) if user type 'yes'; false (1) if user type 'no'
 515     read -e -p "$1" USER_CONFIRMATION
 516     while true ; do
 517         [ -z "$USER_CONFIRMATION" ] && [ "$2" == 'y' ] && return 0
 518         [ -z "$USER_CONFIRMATION" ] && [ "$2" == 'n' ] && return 1
 519         [ "${USER_CONFIRMATION,,}" == "yes" ] || [ "${USER_CONFIRMATION,,}" == "y" ] && return 0
 520         [ "${USER_CONFIRMATION,,}" == "no" ]  || [ "${USER_CONFIRMATION,,}" == "n" ] && return 1
 521         read -e -p "Please type 'yes' or 'no': " USER_CONFIRMATION
 522     done
 523 }
 524
 525 function launch_container_from_lxd(){
 526     export OSM_MDG=$1
 527     OSM_load_config
 528     export OSM_BASE_IMAGE=$2
 529     if ! container_exists $OSM_BUILD_CONTAINER; then
 530         CONTAINER_OPTS=""
 531         [[ "$OSM_BUILD_CONTAINER_PRIVILEGED" == yes ]] && CONTAINER_OPTS="$CONTAINER_OPTS -c security.privileged=true"
 532         [[ "$OSM_BUILD_CONTAINER_ALLOW_NESTED" == yes ]] && CONTAINER_OPTS="$CONTAINER_OPTS -c security.nesting=true"
 533         create_container $OSM_BASE_IMAGE $OSM_BUILD_CONTAINER $CONTAINER_OPTS
 534         wait_container_up $OSM_BUILD_CONTAINER
 535     fi
 536 }
 537
 538 function install_osmclient(){
 539     CLIENT_RELEASE=${RELEASE#"-R "}
 540     CLIENT_REPOSITORY_KEY="OSM%20ETSI%20Release%20Key.gpg"
 541     CLIENT_REPOSITORY=${REPOSITORY#"-r "}
 542     CLIENT_REPOSITORY_BASE=${REPOSITORY_BASE#"-u "}
 543     key_location=$CLIENT_REPOSITORY_BASE/$CLIENT_RELEASE/$CLIENT_REPOSITORY_KEY
 544     curl $key_location | sudo apt-key add -
 545     sudo add-apt-repository -y "deb [arch=amd64] $CLIENT_REPOSITORY_BASE/$CLIENT_RELEASE $CLIENT_REPOSITORY osmclient"
 546     sudo apt-get update
 547     sudo apt-get install -y python-pip
 548     sudo -H LC_ALL=C pip install -U pip
 549     sudo -H LC_ALL=C python -m pip install python-magic
 550     sudo apt-get install -y python-osmclient
 551     #sed 's,OSM_SOL005=[^$]*,OSM_SOL005=True,' -i ${HOME}/.bashrc
 552     #echo 'export OSM_HOSTNAME=localhost' >> ${HOME}/.bashrc
 553     #echo 'export OSM_SOL005=True' >> ${HOME}/.bashrc
 554     [ -z "$INSTALL_LIGHTWEIGHT" ] && export OSM_HOSTNAME=`lxc list | awk '($2=="SO-ub"){print $6}'`
 555     [ -z "$INSTALL_LIGHTWEIGHT" ] && export OSM_RO_HOSTNAME=`lxc list | awk '($2=="RO"){print $6}'`
 556     echo -e "\nOSM client installed"
 557     if [ -z "$INSTALL_LIGHTWEIGHT" ]; then
 558         echo -e "You might be interested in adding the following OSM client env variables to your .bashrc file:"
 559         echo "     export OSM_HOSTNAME=${OSM_HOSTNAME}"
 560         echo "     export OSM_RO_HOSTNAME=${OSM_RO_HOSTNAME}"
 561     else
 562         echo -e "OSM client assumes that OSM host is running in localhost (127.0.0.1)."
 563         echo -e "In case you want to interact with a different OSM host, you will have to configure this env variable in your .bashrc file:"
 564         echo "     export OSM_HOSTNAME=<OSM_host>"
 565     fi
 566     return 0
 567 }
 568
 569 function install_from_lxdimages(){
 570     LXD_RELEASE=${RELEASE#"-R "}
 571     if [ -n "$LXD_REPOSITORY_PATH" ]; then
 572         LXD_IMAGE_DIR="$LXD_REPOSITORY_PATH"
 573     else
 574         LXD_IMAGE_DIR="$(mktemp -d -q --tmpdir "osmimages.XXXXXX")"
 575         trap 'rm -rf "$LXD_IMAGE_DIR"' EXIT
 576     fi
 577     echo -e "\nDeleting previous lxd images if they exist"
 578     lxc image show osm-ro &>/dev/null && lxc image delete osm-ro
 579     lxc image show osm-vca &>/dev/null && lxc image delete osm-vca
 580     lxc image show osm-soui &>/dev/null && lxc image delete osm-soui
 581     echo -e "\nImporting osm-ro"
 582     [ -z "$LXD_REPOSITORY_PATH" ] && wget -O $LXD_IMAGE_DIR/osm-ro.tar.gz $LXD_REPOSITORY_BASE/$LXD_RELEASE/osm-ro.tar.gz
 583     lxc image import $LXD_IMAGE_DIR/osm-ro.tar.gz --alias osm-ro
 584     rm -f $LXD_IMAGE_DIR/osm-ro.tar.gz
 585     echo -e "\nImporting osm-vca"
 586     [ -z "$LXD_REPOSITORY_PATH" ] && wget -O $LXD_IMAGE_DIR/osm-vca.tar.gz $LXD_REPOSITORY_BASE/$LXD_RELEASE/osm-vca.tar.gz
 587     lxc image import $LXD_IMAGE_DIR/osm-vca.tar.gz --alias osm-vca
 588     rm -f $LXD_IMAGE_DIR/osm-vca.tar.gz
 589     echo -e "\nImporting osm-soui"
 590     [ -z "$LXD_REPOSITORY_PATH" ] && wget -O $LXD_IMAGE_DIR/osm-soui.tar.gz $LXD_REPOSITORY_BASE/$LXD_RELEASE/osm-soui.tar.gz
 591     lxc image import $LXD_IMAGE_DIR/osm-soui.tar.gz --alias osm-soui
 592     rm -f $LXD_IMAGE_DIR/osm-soui.tar.gz
 593     launch_container_from_lxd RO osm-ro
 594     ro_is_up && track RO
 595     launch_container_from_lxd VCA osm-vca
 596     vca_is_up && track VCA
 597     launch_container_from_lxd MON osm-mon
 598     mon_is_up && track MON
 599     launch_container_from_lxd SO osm-soui
 600     #so_is_up && track SOUI
 601     track SOUI
 602 }
 603
 604 function install_docker_ce() {
 605     # installs and configures Docker CE
 606     echo "Installing Docker CE ..."
 607     sudo apt-get -qq update
 608     sudo apt-get install -y apt-transport-https ca-certificates software-properties-common
 609     curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
 610     sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
 611     sudo apt-get -qq update
 612     sudo apt-get install -y docker-ce
 613     echo "Adding user to group 'docker'"
 614     sudo groupadd -f docker
 615     sudo usermod -aG docker $USER
 616     sleep 2
 617     sudo service docker restart
 618     echo "... restarted Docker service"
 619     sg docker -c "docker version" || FATAL "Docker installation failed"
 620     echo "... Docker CE installation done"
 621     return 0
 622 }
 623
 624 function install_docker_compose() {
 625     # installs and configures docker-compose
 626     echo "Installing Docker Compose ..."
 627     sudo curl -L https://github.com/docker/compose/releases/download/1.18.0/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
 628     sudo chmod +x /usr/local/bin/docker-compose
 629     echo "... Docker Compose installation done"
 630 }
 631
 632 function install_juju() {
 633     echo "Installing juju"
 634     sudo snap install juju --classic --channel=2.5/stable
 635     [ -z "$INSTALL_NOLXD" ] && sudo dpkg-reconfigure -p medium lxd
 636     echo "Finished installation of juju"
 637     return 0
 638 }
 639
 640 function juju_createcontroller() {
 641     if ! juju show-controller $OSM_STACK_NAME &> /dev/null; then
 642         # Not found created, create the controller
 643         sg lxd -c "juju bootstrap --bootstrap-series=xenial localhost $OSM_STACK_NAME"
 644     fi
 645     [ $(juju controllers | awk "/^${OSM_STACK_NAME}[\*| ]/{print $1}"|wc -l) -eq 1 ] || FATAL "Juju installation failed"
 646 }
 647
 648 function juju_createproxy() {
 649     if ! sudo iptables -t nat -C PREROUTING -p tcp -m tcp --dport 17070 -j DNAT --to-destination $OSM_VCA_HOST; then
 650         sudo iptables -t nat -A PREROUTING -p tcp -m tcp --dport 17070 -j DNAT --to-destination $OSM_VCA_HOST
 651         sudo netfilter-persistent save
 652     fi
 653 }
 654
 655 function generate_docker_images() {
 656     echo "Pulling and generating docker images"
 657     _build_from=$COMMIT_ID
 658     [ -z "$_build_from" ] && _build_from="master"
 659
 660     echo "OSM Docker images generated from $_build_from"
 661
 662     BUILD_ARGS+=(--build-arg REPOSITORY="$REPOSITORY")
 663     BUILD_ARGS+=(--build-arg RELEASE="$RELEASE")
 664     BUILD_ARGS+=(--build-arg REPOSITORY_KEY="$REPOSITORY_KEY")
 665     BUILD_ARGS+=(--build-arg REPOSITORY_BASE="$REPOSITORY_BASE")
 666
 667     if [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q KAFKA ; then
 668         sg docker -c "docker pull wurstmeister/zookeeper" || FATAL "cannot get zookeeper docker image"
 669         sg docker -c "docker pull wurstmeister/kafka:${KAFKA_TAG}" || FATAL "cannot get kafka docker image"
 670     fi
 671
 672     if [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q MONGO ; then
 673         sg docker -c "docker pull mongo" || FATAL "cannot get mongo docker image"
 674     fi
 675
 676     if [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q PROMETHEUS ; then
 677         sg docker -c "docker pull prom/prometheus:${PROMETHEUS_TAG}" || FATAL "cannot get prometheus docker image"
 678     fi
 679
 680     if [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q NBI || echo $TO_REBUILD | grep -q KEYSTONE-DB ; then
 681         sg docker -c "docker pull mariadb:${KEYSTONEDB_TAG}" || FATAL "cannot get keystone-db docker image"
 682     fi
 683
 684     if [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q RO ; then
 685         sg docker -c "docker pull mysql:5" || FATAL "cannot get mysql docker image"
 686     fi
 687
 688     if [ -n "$PULL_IMAGES" ]; then
 689         sg docker -c "docker pull ${DOCKER_USER}/mon:${OSM_DOCKER_TAG}" || FATAL "cannot pull MON docker image"
 690     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q MON ; then
 691         git -C ${LWTEMPDIR} clone https://osm.etsi.org/gerrit/osm/MON
 692         git -C ${LWTEMPDIR}/MON checkout ${COMMIT_ID}
 693         sg docker -c "docker build ${LWTEMPDIR}/MON -f ${LWTEMPDIR}/MON/docker/Dockerfile -t ${DOCKER_USER}/mon --no-cache" || FATAL "cannot build MON docker image"
 694     fi
 695
 696     if [ -n "$PULL_IMAGES" ]; then
 697         sg docker -c "docker pull ${DOCKER_USER}/pol:${OSM_DOCKER_TAG}" || FATAL "cannot pull POL docker image"
 698     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q POL ; then
 699         git -C ${LWTEMPDIR} clone https://osm.etsi.org/gerrit/osm/POL
 700         git -C ${LWTEMPDIR}/POL checkout ${COMMIT_ID}
 701         sg docker -c "docker build ${LWTEMPDIR}/POL -f ${LWTEMPDIR}/POL/docker/Dockerfile -t ${DOCKER_USER}/pol --no-cache" || FATAL "cannot build POL docker image"
 702     fi
 703
 704     if [ -n "$PULL_IMAGES" ]; then
 705         sg docker -c "docker pull ${DOCKER_USER}/nbi:${OSM_DOCKER_TAG}" || FATAL "cannot pull NBI docker image"
 706         sg docker -c "docker pull ${DOCKER_USER}/keystone:${OSM_DOCKER_TAG}" || FATAL "cannot pull KEYSTONE docker image"
 707     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q NBI ; then
 708         git -C ${LWTEMPDIR} clone https://osm.etsi.org/gerrit/osm/NBI
 709         git -C ${LWTEMPDIR}/NBI checkout ${COMMIT_ID}
 710         sg docker -c "docker build ${LWTEMPDIR}/NBI -f ${LWTEMPDIR}/NBI/Dockerfile.local -t ${DOCKER_USER}/nbi --no-cache" || FATAL "cannot build NBI docker image"
 711         sg docker -c "docker build ${LWTEMPDIR}/NBI/keystone -f ${LWTEMPDIR}/NBI/keystone/Dockerfile -t ${DOCKER_USER}/keystone --no-cache" || FATAL "cannot build KEYSTONE docker image"
 712     fi
 713
 714     if [ -n "$PULL_IMAGES" ]; then
 715         sg docker -c "docker pull ${DOCKER_USER}/ro:${OSM_DOCKER_TAG}" || FATAL "cannot pull RO docker image"
 716     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q RO ; then
 717         git -C ${LWTEMPDIR} clone https://osm.etsi.org/gerrit/osm/RO
 718         git -C ${LWTEMPDIR}/RO checkout ${COMMIT_ID}
 719         sg docker -c "docker build ${LWTEMPDIR}/RO -f ${LWTEMPDIR}/RO/docker/Dockerfile-local -t ${DOCKER_USER}/ro --no-cache" || FATAL "cannot build RO docker image"
 720     fi
 721
 722     if [ -n "$PULL_IMAGES" ]; then
 723         sg docker -c "docker pull ${DOCKER_USER}/lcm:${OSM_DOCKER_TAG}" || FATAL "cannot pull LCM RO docker image"
 724     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q LCM ; then
 725         git -C ${LWTEMPDIR} clone https://osm.etsi.org/gerrit/osm/LCM
 726         git -C ${LWTEMPDIR}/LCM checkout ${COMMIT_ID}
 727         sg docker -c "docker build ${LWTEMPDIR}/LCM -f ${LWTEMPDIR}/LCM/Dockerfile.local -t ${DOCKER_USER}/lcm --no-cache" || FATAL "cannot build LCM docker image"
 728     fi
 729
 730     if [ -n "$PULL_IMAGES" ]; then
 731         sg docker -c "docker pull ${DOCKER_USER}/light-ui:${OSM_DOCKER_TAG}" || FATAL "cannot pull light-ui docker image"
 732     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q LW-UI ; then
 733         git -C ${LWTEMPDIR} clone https://osm.etsi.org/gerrit/osm/LW-UI
 734         git -C ${LWTEMPDIR}/LW-UI checkout ${COMMIT_ID}
 735         sg docker -c "docker build ${LWTEMPDIR}/LW-UI -f ${LWTEMPDIR}/LW-UI/docker/Dockerfile -t ${DOCKER_USER}/light-ui --no-cache" || FATAL "cannot build LW-UI docker image"
 736     fi
 737
 738     if [ -n "$PULL_IMAGES" ]; then
 739         sg docker -c "docker pull ${DOCKER_USER}/osmclient:${OSM_DOCKER_TAG}" || FATAL "cannot pull osmclient docker image"
 740     elif [ -z "$TO_REBUILD" ] || echo $TO_REBUILD | grep -q LW-osmclient; then
 741         sg docker -c "docker build -t ${DOCKER_USER}/osmclient ${BUILD_ARGS[@]} -f $OSM_DEVOPS/docker/osmclient ."
 742     fi
 743     echo "Finished generation of docker images"
 744 }
 745
 746 function cmp_overwrite() {
 747     file1="$1"
 748     file2="$2"
 749     if ! $(cmp "${file1}" "${file2}" >/dev/null 2>&1); then
 750         if [ -f "${file2}" ]; then
 751             ask_user "The file ${file2} already exists. Overwrite (y/N)? " n && cp -b ${file1} ${file2}
 752         else
 753             cp -b ${file1} ${file2}
 754         fi
 755     fi
 756 }
 757
 758
 759 function generate_docker_env_files() {
 760     echo "Doing a backup of existing env files"
 761     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/keystone-db.env{,~}
 762     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/keystone.env{,~}
 763     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/lcm.env{,~}
 764     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/lwui.env{,~}
 765     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/mon.env{,~}
 766     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/nbi.env{,~}
 767     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/pol.env{,~}
 768     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/ro-db.env{,~}
 769     $WORKDIR_SUDO cp $OSM_DOCKER_WORK_DIR/ro.env{,~}
 770
 771     echo "Generating docker env files"
 772     # Docker-compose
 773     $WORKDIR_SUDO cp -b ${OSM_DEVOPS}/installers/docker/docker-compose.yaml $OSM_DOCKER_WORK_DIR/docker-compose.yaml
 774
 775     # Prometheus
 776     $WORKDIR_SUDO cp -b ${OSM_DEVOPS}/installers/docker/prometheus.yml $OSM_DOCKER_WORK_DIR/prometheus.yml
 777
 778     # LCM
 779     if [ ! -f $OSM_DOCKER_WORK_DIR/lcm.env ]; then
 780         echo "OSMLCM_DATABASE_COMMONKEY=${OSM_DATABASE_COMMONKEY}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lcm.env
 781     fi
 782
 783     if ! grep -Fq "OSMLCM_VCA_HOST" $OSM_DOCKER_WORK_DIR/lcm.env; then
 784         echo "OSMLCM_VCA_HOST=${OSM_VCA_HOST}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lcm.env
 785     else
 786         $WORKDIR_SUDO sed -i "s|OSMLCM_VCA_HOST.*|OSMLCM_VCA_HOST=$OSM_VCA_HOST|g" $OSM_DOCKER_WORK_DIR/lcm.env
 787     fi
 788
 789     if ! grep -Fq "OSMLCM_VCA_SECRET" $OSM_DOCKER_WORK_DIR/lcm.env; then
 790         echo "OSMLCM_VCA_SECRET=${OSM_VCA_SECRET}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lcm.env
 791     else
 792         $WORKDIR_SUDO sed -i "s|OSMLCM_VCA_SECRET.*|OSMLCM_VCA_SECRET=$OSM_VCA_SECRET|g" $OSM_DOCKER_WORK_DIR/lcm.env
 793     fi
 794
 795     if ! grep -Fq "OSMLCM_VCA_PUBKEY" $OSM_DOCKER_WORK_DIR/lcm.env; then
 796         echo "OSMLCM_VCA_PUBKEY=\"${OSM_VCA_PUBKEY}\"" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lcm.env
 797     else
 798         $WORKDIR_SUDO sed -i "s|OSMLCM_VCA_PUBKEY.*|OSMLCM_VCA_PUBKEY=\"${OSM_VCA_PUBKEY}\"|g" $OSM_DOCKER_WORK_DIR/lcm.env
 799     fi
 800
 801     #if ! grep -Fq "OSMLCM_VCA_CACERT" $OSM_DOCKER_WORK_DIR/lcm.env; then
 802     #    echo "OSMLCM_VCA_CACERT=\"${OSM_VCA_CACERT}\"" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lcm.env
 803     #else
 804     #    $WORKDIR_SUDO sed -i "s|OSMLCM_VCA_CACERT.*|OSMLCM_VCA_CACERT=\"${OSM_VCA_CACERT}\"|g" $OSM_DOCKER_WORK_DIR/lcm.env
 805     #fi
 806
 807     if ! grep -Fq "OSMLCM_VCA_APIPROXY" $OSM_DOCKER_WORK_DIR/lcm.env; then
 808         echo "OSMLCM_VCA_APIPROXY=${OSM_VCA_APIPROXY}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lcm.env
 809     else
 810         $WORKDIR_SUDO sed -i "s|OSMLCM_VCA_APIPROXY.*|OSMLCM_VCA_APIPROXY=${OSM_VCA_APIPROXY}|g" $OSM_DOCKER_WORK_DIR/lcm.env
 811     fi
 812
 813     # RO
 814     MYSQL_ROOT_PASSWORD=$(generate_secret)
 815     if [ ! -f $OSM_DOCKER_WORK_DIR/ro-db.env ]; then
 816         echo "MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}" |$WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/ro-db.env
 817     fi
 818     if [ ! -f $OSM_DOCKER_WORK_DIR/ro.env ]; then
 819         echo "RO_DB_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}" |$WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/ro.env
 820     fi
 821
 822     # Keystone
 823     KEYSTONE_DB_PASSWORD=$(generate_secret)
 824     SERVICE_PASSWORD=$(generate_secret)
 825     if [ ! -f $OSM_DOCKER_WORK_DIR/keystone-db.env ]; then
 826         echo "MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}" |$WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/keystone-db.env
 827     fi
 828     if [ ! -f $OSM_DOCKER_WORK_DIR/keystone.env ]; then
 829         echo "ROOT_DB_PASSWORD=${MYSQL_ROOT_PASSWORD}" |$WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/keystone.env
 830         echo "KEYSTONE_DB_PASSWORD=${KEYSTONE_DB_PASSWORD}" |$WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/keystone.env
 831         echo "SERVICE_PASSWORD=${SERVICE_PASSWORD}" |$WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/keystone.env
 832     fi
 833
 834     # NBI
 835     if [ ! -f $OSM_DOCKER_WORK_DIR/nbi.env ]; then
 836         echo "OSMNBI_AUTHENTICATION_SERVICE_PASSWORD=${SERVICE_PASSWORD}" |$WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/nbi.env
 837         echo "OSMNBI_DATABASE_COMMONKEY=${OSM_DATABASE_COMMONKEY}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/nbi.env
 838     fi
 839
 840     # MON
 841     if [ ! -f $OSM_DOCKER_WORK_DIR/mon.env ]; then
 842         echo "OSMMON_DATABASE_COMMONKEY=${OSM_DATABASE_COMMONKEY}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/mon.env
 843         echo "OSMMON_SQL_DATABASE_URI=mysql://root:${MYSQL_ROOT_PASSWORD}@mysql:3306/mon" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/mon.env
 844     fi
 845
 846     if ! grep -Fq "OS_NOTIFIER_URI" $OSM_DOCKER_WORK_DIR/mon.env; then
 847         echo "OS_NOTIFIER_URI=http://${DEFAULT_IP}:8662" |$WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/mon.env
 848     else
 849         $WORKDIR_SUDO sed -i "s|OS_NOTIFIER_URI.*|OS_NOTIFIER_URI=http://$DEFAULT_IP:8662|g" $OSM_DOCKER_WORK_DIR/mon.env
 850     fi
 851
 852     if ! grep -Fq "OSMMON_VCA_HOST" $OSM_DOCKER_WORK_DIR/mon.env; then
 853         echo "OSMMON_VCA_HOST=${OSM_VCA_HOST}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/mon.env
 854     else
 855         $WORKDIR_SUDO sed -i "s|OSMMON_VCA_HOST.*|OSMMON_VCA_HOST=$OSM_VCA_HOST|g" $OSM_DOCKER_WORK_DIR/mon.env
 856     fi
 857
 858     if ! grep -Fq "OSMMON_VCA_SECRET" $OSM_DOCKER_WORK_DIR/mon.env; then
 859         echo "OSMMON_VCA_SECRET=${OSM_VCA_SECRET}" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/mon.env
 860     else
 861         $WORKDIR_SUDO sed -i "s|OSMMON_VCA_SECRET.*|OSMMON_VCA_SECRET=$OSM_VCA_SECRET|g" $OSM_DOCKER_WORK_DIR/mon.env
 862     fi
 863
 864     # POL
 865     if [ ! -f $OSM_DOCKER_WORK_DIR/pol.env ]; then
 866         echo "OSMPOL_SQL_DATABASE_URI=mysql://root:${MYSQL_ROOT_PASSWORD}@mysql:3306/pol" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/pol.env
 867     fi
 868
 869     # LW-UI
 870     if [ ! -f $OSM_DOCKER_WORK_DIR/lwui.env ]; then
 871         echo "OSMUI_SQL_DATABASE_URI=mysql://root:${MYSQL_ROOT_PASSWORD}@mysql:3306/lwui" | $WORKDIR_SUDO tee -a $OSM_DOCKER_WORK_DIR/lwui.env
 872     fi
 873
 874     echo "Finished generation of docker env files"
 875 }
 876
 877 function generate_osmclient_script () {
 878     echo "docker run -ti --network net${OSM_STACK_NAME} ${DOCKER_USER}/osmclient:${OSM_DOCKER_TAG}" | $WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/osm
 879     $WORKDIR_SUDO chmod +x "$OSM_DOCKER_WORK_DIR/osm"
 880     echo "osmclient sidecar container can be found at: $OSM_DOCKER_WORK_DIR/osm"
 881 }
 882
 883 function init_docker_swarm() {
 884     if [ "${DEFAULT_MTU}" != "1500" ]; then
 885       DOCKER_NETS=`sg docker -c "docker network list" | awk '{print $2}' | egrep -v "^ID$" | paste -d " " -s`
 886       DOCKER_GW_NET=`sg docker -c "docker network inspect ${DOCKER_NETS}" | grep Subnet | awk -F\" '{print $4}' | egrep "^172" | sort -u | tail -1 |  awk -F\. '{if ($2 != 255) print $1"."$2+1"."$3"."$4; else print "-1";}'`
 887       sg docker -c "docker network create --subnet ${DOCKER_GW_NET} --opt com.docker.network.bridge.name=docker_gwbridge --opt com.docker.network.bridge.enable_icc=false --opt com.docker.network.bridge.enable_ip_masquerade=true --opt com.docker.network.driver.mtu=${DEFAULT_MTU} docker_gwbridge"
 888     fi
 889     sg docker -c "docker swarm init --advertise-addr ${DEFAULT_IP}"
 890     return 0
 891 }
 892
 893 function create_docker_network() {
 894     echo "creating network"
 895     sg docker -c "docker network create --driver=overlay --attachable --opt com.docker.network.driver.mtu=${DEFAULT_MTU} net${OSM_STACK_NAME}"
 896     echo "creating network DONE"
 897 }
 898
 899 function deploy_lightweight() {
 900
 901     echo "Deploying lightweight build"
 902     OSM_NBI_PORT=9999
 903     OSM_RO_PORT=9090
 904     OSM_KEYSTONE_PORT=5000
 905     OSM_UI_PORT=80
 906     OSM_MON_PORT=8662
 907     OSM_PROM_PORT=9090
 908     OSM_PROM_HOSTPORT=9091
 909     [ -n "$INSTALL_ELK" ] && OSM_ELK_PORT=5601
 910     [ -n "$INSTALL_PERFMON" ] && OSM_PM_PORT=3000
 911
 912     if [ -n "$NO_HOST_PORTS" ]; then
 913         OSM_PORTS+=(OSM_NBI_PORTS=$OSM_NBI_PORT)
 914         OSM_PORTS+=(OSM_RO_PORTS=$OSM_RO_PORT)
 915         OSM_PORTS+=(OSM_KEYSTONE_PORTS=$OSM_KEYSTONE_PORT)
 916         OSM_PORTS+=(OSM_UI_PORTS=$OSM_UI_PORT)
 917         OSM_PORTS+=(OSM_MON_PORTS=$OSM_MON_PORT)
 918         OSM_PORTS+=(OSM_PROM_PORTS=$OSM_PROM_PORT)
 919         [ -n "$INSTALL_PERFMON" ] && OSM_PORTS+=(OSM_PM_PORTS=$OSM_PM_PORT)
 920         [ -n "$INSTALL_ELK" ] && OSM_PORTS+=(OSM_ELK_PORTS=$OSM_ELK_PORT)
 921     else
 922         OSM_PORTS+=(OSM_NBI_PORTS=$OSM_NBI_PORT:$OSM_NBI_PORT)
 923         OSM_PORTS+=(OSM_RO_PORTS=$OSM_RO_PORT:$OSM_RO_PORT)
 924         OSM_PORTS+=(OSM_KEYSTONE_PORTS=$OSM_KEYSTONE_PORT:$OSM_KEYSTONE_PORT)
 925         OSM_PORTS+=(OSM_UI_PORTS=$OSM_UI_PORT:$OSM_UI_PORT)
 926         OSM_PORTS+=(OSM_MON_PORTS=$OSM_MON_PORT:$OSM_MON_PORT)
 927         OSM_PORTS+=(OSM_PROM_PORTS=$OSM_PROM_HOSTPORT:$OSM_PROM_PORT)
 928         [ -n "$INSTALL_PERFMON" ] && OSM_PORTS+=(OSM_PM_PORTS=$OSM_PM_PORT:$OSM_PM_PORT)
 929         [ -n "$INSTALL_ELK" ] && OSM_PORTS+=(OSM_ELK_PORTS=$OSM_ELK_PORT:$OSM_ELK_PORT)
 930     fi
 931     echo "export ${OSM_PORTS[@]}" | $WORKDIR_SUDO tee $OSM_DOCKER_WORK_DIR/osm_ports.sh
 932     echo "export OSM_NETWORK=net${OSM_STACK_NAME}" | $WORKDIR_SUDO tee --append $OSM_DOCKER_WORK_DIR/osm_ports.sh
 933     echo "export TAG=${OSM_DOCKER_TAG}" | $WORKDIR_SUDO tee --append $OSM_DOCKER_WORK_DIR/osm_ports.sh
 934     echo "export DOCKER_USER=${DOCKER_USER}" | $WORKDIR_SUDO tee --append $OSM_DOCKER_WORK_DIR/osm_ports.sh
 935     echo "export KAFKA_TAG=${KAFKA_TAG}" | $WORKDIR_SUDO tee --append $OSM_DOCKER_WORK_DIR/osm_ports.sh
 936     echo "export PROMETHEUS_TAG=${PROMETHEUS_TAG}" | $WORKDIR_SUDO tee --append $OSM_DOCKER_WORK_DIR/osm_ports.sh
 937     echo "export KEYSTONEDB_TAG=${KEYSTONEDB_TAG}" | $WORKDIR_SUDO tee --append $OSM_DOCKER_WORK_DIR/osm_ports.sh
 938
 939     pushd $OSM_DOCKER_WORK_DIR
 940     sg docker -c ". ./osm_ports.sh; docker stack deploy -c $OSM_DOCKER_WORK_DIR/docker-compose.yaml $OSM_STACK_NAME"
 941     popd
 942
 943     echo "Finished deployment of lightweight build"
 944 }
 945
 946 function deploy_elk() {
 947     echo "Pulling docker images for ELK"
 948     sg docker -c "docker pull docker.elastic.co/elasticsearch/elasticsearch-oss:${ELASTIC_VERSION}" || FATAL "cannot get elasticsearch docker image"
 949     sg docker -c "docker pull docker.elastic.co/beats/metricbeat:${ELASTIC_VERSION}" || FATAL "cannot get metricbeat docker image"
 950     sg docker -c "docker pull docker.elastic.co/beats/filebeat:${ELASTIC_VERSION}" || FATAL "cannot get filebeat docker image"
 951     sg docker -c "docker pull docker.elastic.co/kibana/kibana-oss:${ELASTIC_VERSION}" || FATAL "cannot get kibana docker image"
 952     sg docker -c "docker pull bobrik/curator:${ELASTIC_CURATOR_VERSION}" || FATAL "cannot get curator docker image"
 953     echo "Finished pulling elk docker images"
 954     $WORKDIR_SUDO mkdir -p "$OSM_DOCKER_WORK_DIR/osm_elk"
 955     $WORKDIR_SUDO cp -b ${OSM_DEVOPS}/installers/docker/osm_elk/* $OSM_DOCKER_WORK_DIR/osm_elk
 956     remove_stack osm_elk
 957     echo "Deploying ELK stack"
 958     sg docker -c "OSM_NETWORK=net${OSM_STACK_NAME} docker stack deploy -c $OSM_DOCKER_WORK_DIR/osm_elk/docker-compose.yml osm_elk"
 959     echo "Waiting for ELK stack to be up and running"
 960     time=0
 961     step=5
 962     timelength=40
 963     elk_is_up=1
 964     while [ $time -le $timelength ]; do
 965         if [[ $(curl -f -XGET http://127.0.0.1:5601/status -I 2>/dev/null | grep "HTTP/1.1 200 OK" | wc -l ) -eq 1 ]]; then
 966             elk_is_up=0
 967             break
 968         fi
 969         sleep $step
 970         time=$((time+step))
 971     done
 972     if [ $elk_is_up -eq 0 ]; then
 973         echo "ELK is up and running. Trying to create index pattern..."
 974         #Create index pattern
 975         curl -f -XPOST -H "Content-Type: application/json" -H "kbn-xsrf: anything" \
 976           "http://127.0.0.1:5601/api/saved_objects/index-pattern/filebeat-*" \
 977           -d"{\"attributes\":{\"title\":\"filebeat-*\",\"timeFieldName\":\"@timestamp\"}}" 2>/dev/null
 978         #Make it the default index
 979         curl -f -XPOST -H "Content-Type: application/json" -H "kbn-xsrf: anything" \
 980           "http://127.0.0.1:5601/api/kibana/settings/defaultIndex" \
 981           -d"{\"value\":\"filebeat-*\"}" 2>/dev/null
 982     else
 983         echo "Cannot connect to Kibana to create index pattern."
 984         echo "Once Kibana is running, you can use the following instructions to create index pattern:"
 985         echo 'curl -f -XPOST -H "Content-Type: application/json" -H "kbn-xsrf: anything" \
 986           "http://127.0.0.1:5601/api/saved_objects/index-pattern/filebeat-*" \
 987           -d"{\"attributes\":{\"title\":\"filebeat-*\",\"timeFieldName\":\"@timestamp\"}}"'
 988         echo 'curl -XPOST -H "Content-Type: application/json" -H "kbn-xsrf: anything" \
 989           "http://127.0.0.1:5601/api/kibana/settings/defaultIndex" \
 990           -d"{\"value\":\"filebeat-*\"}"'
 991     fi
 992     echo "Finished deployment of ELK stack"
 993     return 0
 994 }
 995
 996 function deploy_perfmon() {
 997     echo "Pulling docker images for PM (Grafana)"
 998     sg docker -c "docker pull grafana/grafana" || FATAL "cannot get grafana docker image"
 999     echo "Finished pulling PM docker images"
1000     $WORKDIR_SUDO mkdir -p $OSM_DOCKER_WORK_DIR/osm_metrics
1001     $WORKDIR_SUDO cp -b ${OSM_DEVOPS}/installers/docker/osm_metrics/*.yml $OSM_DOCKER_WORK_DIR/osm_metrics
1002     $WORKDIR_SUDO cp -b ${OSM_DEVOPS}/installers/docker/osm_metrics/*.json $OSM_DOCKER_WORK_DIR/osm_metrics
1003     remove_stack osm_metrics
1004     echo "Deploying PM stack (Grafana)"
1005     sg docker -c "OSM_NETWORK=net${OSM_STACK_NAME} docker stack deploy -c $OSM_DOCKER_WORK_DIR/osm_metrics/docker-compose.yml osm_metrics"
1006     echo "Finished deployment of PM stack"
1007     return 0
1008 }
1009
1010 function install_lightweight() {
1011     [ "${OSM_STACK_NAME}" == "osm" ] || OSM_DOCKER_WORK_DIR="$OSM_WORK_DIR/stack/$OSM_STACK_NAME"
1012     [ ! -d "$OSM_DOCKER_WORK_DIR" ] && $WORKDIR_SUDO mkdir -p $OSM_DOCKER_WORK_DIR
1013
1014     track checkingroot
1015     [ "$USER" == "root" ] && FATAL "You are running the installer as root. The installer is prepared to be executed as a normal user with sudo privileges."
1016     track noroot
1017     [ -z "$ASSUME_YES" ] && ! ask_user "The installation will configure LXD, install juju, install docker CE and init a docker swarm, as pre-requirements. Do you want to proceed (Y/n)? " y && echo "Cancelled!" && exit 1
1018     track proceed
1019     echo "Installing lightweight build of OSM"
1020     LWTEMPDIR="$(mktemp -d -q --tmpdir "installosmlight.XXXXXX")"
1021     trap 'rm -rf "${LWTEMPDIR}"' EXIT
1022     DEFAULT_IF=`route -n |awk '$1~/^0.0.0.0/ {print $8}'`
1023     [ -z "$DEFAULT_IF" ] && FATAL "Not possible to determine the interface with the default route 0.0.0.0"
1024     DEFAULT_IP=`ip -o -4 a |grep ${DEFAULT_IF}|awk '{split($4,a,"/"); print a[1]}'`
1025     [ -z "$DEFAULT_IP" ] && FATAL "Not possible to determine the IP address of the interface with the default route"
1026     DEFAULT_MTU=$(ip addr show ${DEFAULT_IF} | perl -ne 'if (/mtu\s(\d+)/) {print $1;}')
1027
1028     # if no host is passed in, we need to install lxd/juju, unless explicilty asked not to
1029     if [ -z "$OSM_VCA_HOST" ] && [ -z "$INSTALL_NOLXD" ]; then
1030         need_packages_lw="lxd snapd"
1031         echo -e "Checking required packages: $need_packages_lw"
1032         dpkg -l $need_packages_lw &>/dev/null \
1033           || ! echo -e "One or several required packages are not installed. Updating apt cache requires root privileges." \
1034           || sudo apt-get update \
1035           || FATAL "failed to run apt-get update"
1036         dpkg -l $need_packages_lw &>/dev/null \
1037           || ! echo -e "Installing $need_packages_lw requires root privileges." \
1038           || sudo apt-get install -y $need_packages_lw \
1039           || FATAL "failed to install $need_packages_lw"
1040     fi
1041     track prereqok
1042     [ -z "$INSTALL_NOJUJU" ] && install_juju
1043
1044     track juju_install
1045     if [ -z "$OSM_VCA_HOST" ]; then
1046         juju_createcontroller
1047         OSM_VCA_HOST=`sg lxd -c "juju show-controller $OSM_STACK_NAME"|grep api-endpoints|awk -F\' '{print $2}'|awk -F\: '{print $1}'`
1048         [ -z "$OSM_VCA_HOST" ] && FATAL "Cannot obtain juju controller IP address"
1049     fi
1050     track juju_controller
1051     if [ -z "$OSM_VCA_SECRET" ]; then
1052         OSM_VCA_SECRET=$(parse_juju_password $OSM_STACK_NAME)
1053         [ -z "$OSM_VCA_SECRET" ] && FATAL "Cannot obtain juju secret"
1054     fi
1055     if [ -z "$OSM_VCA_PUBKEY" ]; then
1056         OSM_VCA_PUBKEY=$(cat $HOME/.local/share/juju/ssh/juju_id_rsa.pub)
1057         [ -z "$OSM_VCA_PUBKEY" ] && FATAL "Cannot obtain juju public key"
1058     fi
1059     #if [ -z "$OSM_VCA_CACERT" ]; then
1060         #OSM_VCA_CACERT=$(juju controllers --format json | jq -r '.controllers["osm"]["ca-cert"]' | grep -v "\-\-\-\-\-.*CERTIFICATE\-\-\-\-\-")
1061     #    [ -z "$OSM_VCA_CACERT" ] && FATAL "Cannot obtain juju CA certificate"
1062     #fi
1063     if [ -z "$OSM_VCA_APIPROXY" ]; then
1064         OSM_VCA_APIPROXY=$DEFAULT_IP
1065         [ -z "$OSM_VCA_APIPROXY" ] && FATAL "Cannot obtain juju api proxy"
1066     fi
1067     juju_createproxy
1068
1069     if [ -z "$OSM_DATABASE_COMMONKEY" ]; then
1070         OSM_DATABASE_COMMONKEY=$(generate_secret)
1071         [ -z "OSM_DATABASE_COMMONKEY" ] && FATAL "Cannot generate common db secret"
1072     fi
1073
1074     track juju
1075     [ -n "$INSTALL_NODOCKER" ] || install_docker_ce
1076     track docker_ce
1077     #install_docker_compose
1078     [ -n "$INSTALL_NODOCKER" ] || init_docker_swarm
1079     track docker_swarm
1080     [ -z "$DOCKER_NOBUILD" ] && generate_docker_images
1081     track docker_build
1082     generate_docker_env_files
1083
1084     # remove old stack
1085     remove_stack $OSM_STACK_NAME
1086     create_docker_network
1087     deploy_lightweight
1088     generate_osmclient_script
1089     track docker_deploy
1090     [ -n "$INSTALL_VIMEMU" ] && install_vimemu && track vimemu
1091     [ -n "$INSTALL_ELK" ] && deploy_elk && track elk
1092     [ -n "$INSTALL_PERFMON" ] && deploy_perfmon && track perfmon
1093     [ -z "$INSTALL_NOHOSTCLIENT" ] && install_osmclient
1094     track osmclient
1095     wget -q -O- https://osm-download.etsi.org/ftp/osm-6.0-six/README2.txt &> /dev/null
1096     track end
1097     return 0
1098 }
1099
1100 function install_vimemu() {
1101     echo "\nInstalling vim-emu"
1102     EMUTEMPDIR="$(mktemp -d -q --tmpdir "installosmvimemu.XXXXXX")"
1103     trap 'rm -rf "${EMUTEMPDIR}"' EXIT
1104     # clone vim-emu repository (attention: branch is currently master only)
1105     echo "Cloning vim-emu repository ..."
1106     git clone https://osm.etsi.org/gerrit/osm/vim-emu.git $EMUTEMPDIR
1107     # build vim-emu docker
1108     echo "Building vim-emu Docker container..."
1109
1110     sg docker -c "docker build -t vim-emu-img -f $EMUTEMPDIR/Dockerfile --no-cache $EMUTEMPDIR/" || FATAL "cannot build vim-emu-img docker image"
1111     # start vim-emu container as daemon
1112     echo "Starting vim-emu Docker container 'vim-emu' ..."
1113     if [ -n "$INSTALL_LIGHTWEIGHT" ]; then
1114         # in lightweight mode, the emulator needs to be attached to netOSM
1115         sg docker -c "docker run --name vim-emu -t -d --restart always --privileged --pid='host' --network=net${OSM_STACK_NAME} -v /var/run/docker.sock:/var/run/docker.sock vim-emu-img python examples/osm_default_daemon_topology_2_pop.py"
1116     else
1117         # classic build mode
1118         sg docker -c "docker run --name vim-emu -t -d --restart always --privileged --pid='host' -v /var/run/docker.sock:/var/run/docker.sock vim-emu-img python examples/osm_default_daemon_topology_2_pop.py"
1119     fi
1120     echo "Waiting for 'vim-emu' container to start ..."
1121     sleep 5
1122     export VIMEMU_HOSTNAME=$(sg docker -c "docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' vim-emu")
1123     echo "vim-emu running at ${VIMEMU_HOSTNAME} ..."
1124     # print vim-emu connection info
1125     echo -e "\nYou might be interested in adding the following vim-emu env variables to your .bashrc file:"
1126     echo "     export VIMEMU_HOSTNAME=${VIMEMU_HOSTNAME}"
1127     echo -e "To add the emulated VIM to OSM you should do:"
1128     echo "     osm vim-create --name emu-vim1 --user username --password password --auth_url http://${VIMEMU_HOSTNAME}:6001/v2.0 --tenant tenantName --account_type openstack"
1129 }
1130
1131 function dump_vars(){
1132     echo "DEVELOP=$DEVELOP"
1133     echo "INSTALL_FROM_SOURCE=$INSTALL_FROM_SOURCE"
1134     echo "UNINSTALL=$UNINSTALL"
1135     echo "NAT=$NAT"
1136     echo "UPDATE=$UPDATE"
1137     echo "RECONFIGURE=$RECONFIGURE"
1138     echo "TEST_INSTALLER=$TEST_INSTALLER"
1139     echo "INSTALL_VIMEMU=$INSTALL_VIMEMU"
1140     echo "INSTALL_LXD=$INSTALL_LXD"
1141     echo "INSTALL_FROM_LXDIMAGES=$INSTALL_FROM_LXDIMAGES"
1142     echo "LXD_REPOSITORY_BASE=$LXD_REPOSITORY_BASE"
1143     echo "LXD_REPOSITORY_PATH=$LXD_REPOSITORY_PATH"
1144     echo "INSTALL_LIGHTWEIGHT=$INSTALL_LIGHTWEIGHT"
1145     echo "INSTALL_ONLY=$INSTALL_ONLY"
1146     echo "INSTALL_ELK=$INSTALL_ELK"
1147     echo "INSTALL_PERFMON=$INSTALL_PERFMON"
1148     echo "TO_REBUILD=$TO_REBUILD"
1149     echo "INSTALL_NOLXD=$INSTALL_NOLXD"
1150     echo "INSTALL_NODOCKER=$INSTALL_NODOCKER"
1151     echo "INSTALL_NOJUJU=$INSTALL_NOJUJU"
1152     echo "RELEASE=$RELEASE"
1153     echo "REPOSITORY=$REPOSITORY"
1154     echo "REPOSITORY_BASE=$REPOSITORY_BASE"
1155     echo "REPOSITORY_KEY=$REPOSITORY_KEY"
1156     echo "NOCONFIGURE=$NOCONFIGURE"
1157     echo "OSM_DEVOPS=$OSM_DEVOPS"
1158     echo "OSM_VCA_HOST=$OSM_VCA_HOST"
1159     echo "OSM_VCA_SECRET=$OSM_VCA_SECRET"
1160     echo "OSM_VCA_PUBKEY=$OSM_VCA_PUBKEY"
1161     echo "NO_HOST_PORTS=$NO_HOST_PORTS"
1162     echo "DOCKER_NOBUILD=$DOCKER_NOBUILD"
1163     echo "WORKDIR_SUDO=$WORKDIR_SUDO"
1164     echo "OSM_WORK_DIR=$OSM_STACK_NAME"
1165     echo "OSM_DOCKER_TAG=$OSM_DOCKER_TAG"
1166     echo "DOCKER_USER=$DOCKER_USER"
1167     echo "OSM_STACK_NAME=$OSM_STACK_NAME"
1168     echo "PULL_IMAGES=$PULL_IMAGES"
1169     echo "SHOWOPTS=$SHOWOPTS"
1170     echo "Install from specific refspec (-b): $COMMIT_ID"
1171 }
1172
1173 function track(){
1174     ctime=`date +%s`
1175     duration=$((ctime - SESSION_ID))
1176     url="http://www.woopra.com/track/ce?project=osm.etsi.org&cookie=${SESSION_ID}"
1177     #url="${url}&ce_campaign_name=${CAMPAIGN_NAME}"
1178     event_name="bin"
1179     [ -z "$INSTALL_LIGHTWEIGHT" ] && [ -n "$INSTALL_FROM_SOURCE" ] && event_name="binsrc"
1180     [ -z "$INSTALL_LIGHTWEIGHT" ] && [ -n "$INSTALL_FROM_LXDIMAGES" ] && event_name="lxd"
1181     [ -n "$INSTALL_LIGHTWEIGHT" ] && event_name="lw"
1182     event_name="${event_name}_$1"
1183     url="${url}&event=${event_name}&ce_duration=${duration}"
1184     wget -q -O /dev/null $url
1185 }
1186
1187 UNINSTALL=""
1188 DEVELOP=""
1189 NAT=""
1190 UPDATE=""
1191 RECONFIGURE=""
1192 TEST_INSTALLER=""
1193 INSTALL_LXD=""
1194 SHOWOPTS=""
1195 COMMIT_ID=""
1196 ASSUME_YES=""
1197 INSTALL_FROM_SOURCE=""
1198 RELEASE="ReleaseSIX"
1199 REPOSITORY="stable"
1200 INSTALL_VIMEMU=""
1201 INSTALL_FROM_LXDIMAGES=""
1202 LXD_REPOSITORY_BASE="https://osm-download.etsi.org/repository/osm/lxd"
1203 LXD_REPOSITORY_PATH=""
1204 INSTALL_LIGHTWEIGHT="y"
1205 INSTALL_ONLY=""
1206 INSTALL_ELK=""
1207 INSTALL_PERFMON=""
1208 TO_REBUILD=""
1209 INSTALL_NOLXD=""
1210 INSTALL_NODOCKER=""
1211 INSTALL_NOJUJU=""
1212 INSTALL_NOHOSTCLIENT=""
1213 NOCONFIGURE=""
1214 RELEASE_DAILY=""
1215 SESSION_ID=`date +%s`
1216 OSM_DEVOPS=
1217 OSM_VCA_HOST=
1218 OSM_VCA_SECRET=
1219 OSM_VCA_PUBKEY=
1220 OSM_STACK_NAME=osm
1221 NO_HOST_PORTS=""
1222 DOCKER_NOBUILD=""
1223 REPOSITORY_KEY="OSM%20ETSI%20Release%20Key.gpg"
1224 REPOSITORY_BASE="https://osm-download.etsi.org/repository/osm/debian"
1225 WORKDIR_SUDO=sudo
1226 OSM_WORK_DIR="/etc/osm"
1227 OSM_DOCKER_WORK_DIR="/etc/osm/docker"
1228 OSM_DOCKER_TAG=latest
1229 DOCKER_USER=opensourcemano
1230 PULL_IMAGES="y"
1231 KAFKA_TAG=2.11-1.0.2
1232 PROMETHEUS_TAG=v2.4.3
1233 KEYSTONEDB_TAG=10
1234 OSM_DATABASE_COMMONKEY=
1235 ELASTIC_VERSION=6.4.2
1236 ELASTIC_CURATOR_VERSION=5.5.4
1237
1238 while getopts ":hy-:b:r:k:u:R:l:p:D:o:m:H:S:s:w:t:U:P:A:" o; do
1239     case "${o}" in
1240         h)
1241             usage && exit 0
1242             ;;
1243         b)
1244             COMMIT_ID=${OPTARG}
1245             PULL_IMAGES=""
1246             ;;
1247         r)
1248             REPOSITORY="${OPTARG}"
1249             REPO_ARGS+=(-r "$REPOSITORY")
1250             ;;
1251         R)
1252             RELEASE="${OPTARG}"
1253             REPO_ARGS+=(-R "$RELEASE")
1254             ;;
1255         k)
1256             REPOSITORY_KEY="${OPTARG}"
1257             REPO_ARGS+=(-k "$REPOSITORY_KEY")
1258             ;;
1259         u)
1260             REPOSITORY_BASE="${OPTARG}"
1261             REPO_ARGS+=(-u "$REPOSITORY_BASE")
1262             ;;
1263         U)
1264             DOCKER_USER="${OPTARG}"
1265             ;;
1266         l)
1267             LXD_REPOSITORY_BASE="${OPTARG}"
1268             ;;
1269         p)
1270             LXD_REPOSITORY_PATH="${OPTARG}"
1271             ;;
1272         D)
1273             OSM_DEVOPS="${OPTARG}"
1274             ;;
1275         s)
1276             OSM_STACK_NAME="${OPTARG}"
1277             ;;
1278         H)
1279             OSM_VCA_HOST="${OPTARG}"
1280             ;;
1281         S)
1282             OSM_VCA_SECRET="${OPTARG}"
1283             ;;
1284         P)
1285             OSM_VCA_PUBKEY=$(cat ${OPTARG})
1286             ;;
1287         A)
1288             OSM_VCA_APIPROXY="${OPTARG}"
1289             ;;
1290         w)
1291             # when specifying workdir, do not use sudo for access
1292             WORKDIR_SUDO=
1293             OSM_WORK_DIR="${OPTARG}"
1294             ;;
1295         t)
1296             OSM_DOCKER_TAG="${OPTARG}"
1297             ;;
1298         o)
1299             INSTALL_ONLY="y"
1300             [ "${OPTARG}" == "vimemu" ] && INSTALL_VIMEMU="y" && continue
1301             [ "${OPTARG}" == "elk_stack" ] && INSTALL_ELK="y" && continue
1302             [ "${OPTARG}" == "pm_stack" ] && INSTALL_PERFMON="y" && continue
1303             ;;
1304         m)
1305             [ "${OPTARG}" == "LW-UI" ] && TO_REBUILD="$TO_REBUILD LW-UI" && continue
1306             [ "${OPTARG}" == "NBI" ] && TO_REBUILD="$TO_REBUILD NBI" && continue
1307             [ "${OPTARG}" == "LCM" ] && TO_REBUILD="$TO_REBUILD LCM" && continue
1308             [ "${OPTARG}" == "RO" ] && TO_REBUILD="$TO_REBUILD RO" && continue
1309             [ "${OPTARG}" == "MON" ] && TO_REBUILD="$TO_REBUILD MON" && continue
1310             [ "${OPTARG}" == "POL" ] && TO_REBUILD="$TO_REBUILD POL" && continue
1311             [ "${OPTARG}" == "KAFKA" ] && TO_REBUILD="$TO_REBUILD KAFKA" && continue
1312             [ "${OPTARG}" == "MONGO" ] && TO_REBUILD="$TO_REBUILD MONGO" && continue
1313             [ "${OPTARG}" == "PROMETHEUS" ] && TO_REBUILD="$TO_REBUILD PROMETHEUS" && continue
1314             [ "${OPTARG}" == "KEYSTONE-DB" ] && TO_REBUILD="$TO_REBUILD KEYSTONE-DB" && continue
1315             [ "${OPTARG}" == "NONE" ] && TO_REBUILD="$TO_REBUILD NONE" && continue
1316             ;;
1317         -)
1318             [ "${OPTARG}" == "help" ] && usage && exit 0
1319             [ "${OPTARG}" == "source" ] && INSTALL_FROM_SOURCE="y" && PULL_IMAGES="" && continue
1320             [ "${OPTARG}" == "develop" ] && DEVELOP="y" && continue
1321             [ "${OPTARG}" == "uninstall" ] && UNINSTALL="y" && continue
1322             [ "${OPTARG}" == "nat" ] && NAT="y" && continue
1323             [ "${OPTARG}" == "update" ] && UPDATE="y" && continue
1324             [ "${OPTARG}" == "reconfigure" ] && RECONFIGURE="y" && continue
1325             [ "${OPTARG}" == "test" ] && TEST_INSTALLER="y" && continue
1326             [ "${OPTARG}" == "lxdinstall" ] && INSTALL_LXD="y" && continue
1327             [ "${OPTARG}" == "nolxd" ] && INSTALL_NOLXD="y" && continue
1328             [ "${OPTARG}" == "nodocker" ] && INSTALL_NODOCKER="y" && continue
1329             [ "${OPTARG}" == "lxdimages" ] && INSTALL_FROM_LXDIMAGES="y" && continue
1330             [ "${OPTARG}" == "lightweight" ] && INSTALL_LIGHTWEIGHT="y" && continue
1331             [ "${OPTARG}" == "soui" ] && INSTALL_LIGHTWEIGHT="" && RELEASE="-R ReleaseTHREE" && REPOSITORY="-r stable" && continue
1332             [ "${OPTARG}" == "vimemu" ] && INSTALL_VIMEMU="y" && continue
1333             [ "${OPTARG}" == "elk_stack" ] && INSTALL_ELK="y" && continue
1334             [ "${OPTARG}" == "pm_stack" ] && INSTALL_PERFMON="y" && continue
1335             [ "${OPTARG}" == "noconfigure" ] && NOCONFIGURE="y" && continue
1336             [ "${OPTARG}" == "showopts" ] && SHOWOPTS="y" && continue
1337             [ "${OPTARG}" == "daily" ] && RELEASE_DAILY="y" && continue
1338             [ "${OPTARG}" == "nohostports" ] && NO_HOST_PORTS="y" && continue
1339             [ "${OPTARG}" == "nojuju" ] && INSTALL_NOJUJU="y" && continue
1340             [ "${OPTARG}" == "nodockerbuild" ] && DOCKER_NOBUILD="y" && continue
1341             [ "${OPTARG}" == "nohostclient" ] && INSTALL_NOHOSTCLIENT="y" && continue
1342             [ "${OPTARG}" == "pullimages" ] && continue
1343             echo -e "Invalid option: '--$OPTARG'\n" >&2
1344             usage && exit 1
1345             ;;
1346         \?)
1347             echo -e "Invalid option: '-$OPTARG'\n" >&2
1348             usage && exit 1
1349             ;;
1350         y)
1351             ASSUME_YES="y"
1352             ;;
1353         *)
1354             usage && exit 1
1355             ;;
1356     esac
1357 done
1358
1359 [ -n "$INSTALL_FROM_LXDIMAGES" ] && [ -n "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible options: --lxd can only be used with --soui"
1360 [ -n "$NAT" ] && [ -n "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible options: --nat can only be used with --soui"
1361 [ -n "$NOCONFIGURE" ] && [ -n "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible options: --noconfigure can only be used with --soui"
1362 [ -n "$RELEASE_DAILY" ] && [ -n "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible options: --daily can only be used with --soui"
1363 [ -n "$INSTALL_NOLXD" ] && [ -z "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible option: --nolxd cannot be used with --soui"
1364 [ -n "$INSTALL_NODOCKER" ] && [ -z "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible option: --nodocker cannot be used with --soui"
1365 [ -n "$TO_REBUILD" ] && [ -z "$INSTALL_LIGHTWEIGHT" ] && FATAL "Incompatible option: -m cannot be used with --soui"
1366 [ -n "$TO_REBUILD" ] && [ "$TO_REBUILD" != " NONE" ] && echo $TO_REBUILD | grep -q NONE && FATAL "Incompatible option: -m NONE cannot be used with other -m options"
1367
1368 if [ -n "$SHOWOPTS" ]; then
1369     dump_vars
1370     exit 0
1371 fi
1372
1373 [ -n "$RELEASE_DAILY" ] && echo -e "\nInstalling from daily build repo" && RELEASE="-R ReleaseTHREE-daily" && REPOSITORY="-r testing" && COMMIT_ID="master"
1374
1375 # if develop, we force master
1376 [ -z "$COMMIT_ID" ] && [ -n "$DEVELOP" ] && COMMIT_ID="master"
1377
1378 need_packages="git jq wget curl tar"
1379 echo -e "Checking required packages: $need_packages"
1380 dpkg -l $need_packages &>/dev/null \
1381   || ! echo -e "One or several required packages are not installed. Updating apt cache requires root privileges." \
1382   || sudo apt-get update \
1383   || FATAL "failed to run apt-get update"
1384 dpkg -l $need_packages &>/dev/null \
1385   || ! echo -e "Installing $need_packages requires root privileges." \
1386   || sudo apt-get install -y $need_packages \
1387   || FATAL "failed to install $need_packages"
1388
1389 if [ -z "$OSM_DEVOPS" ]; then
1390     if [ -n "$TEST_INSTALLER" ]; then
1391         echo -e "\nUsing local devops repo for OSM installation"
1392         OSM_DEVOPS="$(dirname $(realpath $(dirname $0)))"
1393     else
1394         echo -e "\nCreating temporary dir for OSM installation"
1395         OSM_DEVOPS="$(mktemp -d -q --tmpdir "installosm.XXXXXX")"
1396         trap 'rm -rf "$OSM_DEVOPS"' EXIT
1397
1398         git clone https://osm.etsi.org/gerrit/osm/devops.git $OSM_DEVOPS
1399
1400         if [ -z "$COMMIT_ID" ]; then
1401             echo -e "\nGuessing the current stable release"
1402             LATEST_STABLE_DEVOPS=`git -C $OSM_DEVOPS tag -l v[0-9].* | sort -V | tail -n1`
1403             [ -z "$LATEST_STABLE_DEVOPS" ] && echo "Could not find the current latest stable release" && exit 0
1404
1405             echo "Latest tag in devops repo: $LATEST_STABLE_DEVOPS"
1406             COMMIT_ID="tags/$LATEST_STABLE_DEVOPS"
1407         else
1408             echo -e "\nDEVOPS Using commit $COMMIT_ID"
1409         fi
1410         git -C $OSM_DEVOPS checkout $COMMIT_ID
1411     fi
1412 fi
1413
1414 OSM_JENKINS="$OSM_DEVOPS/jenkins"
1415 . $OSM_JENKINS/common/all_funcs
1416
1417 [ -n "$INSTALL_LIGHTWEIGHT" ] && [ -n "$UNINSTALL" ] && uninstall_lightweight && echo -e "\nDONE" && exit 0
1418 [ -n "$UNINSTALL" ] && uninstall && echo -e "\nDONE" && exit 0
1419 [ -n "$NAT" ] && nat && echo -e "\nDONE" && exit 0
1420 [ -n "$UPDATE" ] && update && echo -e "\nDONE" && exit 0
1421 [ -n "$RECONFIGURE" ] && configure && echo -e "\nDONE" && exit 0
1422 [ -n "$INSTALL_ONLY" ] && [ -n "$INSTALL_ELK" ] && deploy_elk
1423 [ -n "$INSTALL_ONLY" ] && [ -n "$INSTALL_PERFMON" ] && deploy_perfmon
1424 [ -n "$INSTALL_ONLY" ] && [ -n "$INSTALL_VIMEMU" ] && install_vimemu
1425 [ -n "$INSTALL_ONLY" ] && echo -e "\nDONE" && exit 0
1426
1427 #Installation starts here
1428 wget -q -O- https://osm-download.etsi.org/ftp/osm-6.0-six/README.txt &> /dev/null
1429 track start
1430
1431 [ -n "$INSTALL_LIGHTWEIGHT" ] && install_lightweight && echo -e "\nDONE" && exit 0
1432 echo -e "\nInstalling OSM from refspec: $COMMIT_ID"
1433 if [ -n "$INSTALL_FROM_SOURCE" ] && [ -z "$ASSUME_YES" ]; then
1434     ! ask_user "The installation will take about 75-90 minutes. Continue (Y/n)? " y && echo "Cancelled!" && exit 1
1435 fi
1436
1437 echo -e "Checking required packages: lxd"
1438 lxd --version &>/dev/null || FATAL "lxd not present, exiting."
1439 [ -n "$INSTALL_LXD" ] && echo -e "\nInstalling and configuring lxd" && install_lxd
1440
1441 # use local devops for containers
1442 export OSM_USE_LOCAL_DEVOPS=true
1443 if [ -n "$INSTALL_FROM_SOURCE" ]; then #install from source
1444     echo -e "\nCreating the containers and building from source ..."
1445     $OSM_DEVOPS/jenkins/host/start_build RO --notest checkout $COMMIT_ID || FATAL "RO container build failed (refspec: '$COMMIT_ID')"
1446     ro_is_up && track RO
1447     $OSM_DEVOPS/jenkins/host/start_build VCA || FATAL "VCA container build failed"
1448     vca_is_up && track VCA
1449     $OSM_DEVOPS/jenkins/host/start_build MON || FATAL "MON install failed"
1450     mon_is_up && track MON
1451     $OSM_DEVOPS/jenkins/host/start_build SO checkout $COMMIT_ID || FATAL "SO container build failed (refspec: '$COMMIT_ID')"
1452     $OSM_DEVOPS/jenkins/host/start_build UI checkout $COMMIT_ID || FATAL "UI container build failed (refspec: '$COMMIT_ID')"
1453     #so_is_up && track SOUI
1454     track SOUI
1455 elif [ -n "$INSTALL_FROM_LXDIMAGES" ]; then #install from LXD images stored in OSM repo
1456     echo -e "\nInstalling from lxd images ..."
1457     install_from_lxdimages
1458 else #install from binaries
1459     echo -e "\nCreating the containers and installing from binaries ..."
1460     $OSM_DEVOPS/jenkins/host/install RO ${REPO_ARGS[@]} || FATAL "RO install failed"
1461     ro_is_up && track RO
1462     $OSM_DEVOPS/jenkins/host/start_build VCA || FATAL "VCA install failed"
1463     vca_is_up && track VCA
1464     $OSM_DEVOPS/jenkins/host/install MON || FATAL "MON build failed"
1465     mon_is_up && track MON
1466     $OSM_DEVOPS/jenkins/host/install SO ${REPO_ARGS[@]} || FATAL "SO install failed"
1467     $OSM_DEVOPS/jenkins/host/install UI ${REPO_ARGS[@]} || FATAL "UI install failed"
1468     #so_is_up && track SOUI
1469     track SOUI
1470 fi
1471
1472 #Install iptables-persistent and configure NAT rules
1473 [ -z "$NOCONFIGURE" ] && nat
1474
1475 #Configure components
1476 [ -z "$NOCONFIGURE" ] && configure
1477
1478 #Install osmclient
1479 [ -z "$NOCONFIGURE" ] && install_osmclient
1480
1481 #Install vim-emu (optional)
1482 [ -n "$INSTALL_VIMEMU" ] && install_docker_ce && install_vimemu
1483
1484 wget -q -O- https://osm-download.etsi.org/ftp/osm-6.0-six/README2.txt &> /dev/null
1485 track end
1486 echo -e "\nDONE"