package xCAT_plugin::remoteimmsetup; use strict; use xCAT::SvrUtils qw/sendmsg/; use xCAT::SLP; use xCAT::NetworkUtils; use xCAT::SSHInteract; use xCAT::MacMap; use xCAT_plugin::bmcconfig; my $defaultbladeuser; my $defaultbladepass; my $currentbladepass; my $currentbladeuser; my $mpahash; sub handled_commands { return { slpdiscover => "slpdiscover", }; }; my $callback; my $docmd; my %doneaddrs; my %ip4neigh; my %ip6neigh; my %flexchassismap; my %flexchassisuuid; my %nodebymp; my %passwordmap; my %chassisbyuuid; my %searchmacs; my %researchmacs; my $macmap; sub get_mac_for_addr { my $neigh; my $addr = shift; if ($addr =~ /:/) { get_ipv6_neighbors(); return $ip6neigh{$addr}; } else { get_ipv4_neighbors(); return $ip4neigh{$addr}; } } sub get_ipv4_neighbors { #TODO: something less 'hacky' my @ipdata = `ip -4 neigh`; %ip6neigh=(); foreach (@ipdata) { if (/^(\S*)\s.*lladdr\s*(\S*)\s/) { $ip4neigh{$1}=$2; } } } sub get_ipv6_neighbors { #TODO: something less 'hacky' my @ipdata = `ip -6 neigh`; %ip6neigh=(); foreach (@ipdata) { if (/^(\S*)\s.*lladdr\s*(\S*)\s/) { $ip6neigh{$1}=$2; } } } sub process_request { my $request = shift; $callback = shift; $docmd = shift; my $client; if ($request->{'_xcat_clienthost'}) { $client = $request->{'_xcat_clienthost'}->[0]; } unless ($client) { return; } } sub setupIMM { my $node = shift; my %args = @_; my $slpdata = $args{slpdata}; my $ipmitab = xCAT::Table->new('ipmi',-create=>1); my $ient = $ipmitab->getNodeAttribs($node,[qw/bmc bmcid/],prefetchcache=>1); my $newaddr; if ($ient) { my $bmcid=$ient->{bmcid}; if ($bmcid and $slpdata->{macaddress} =~ /$bmcid/) { sendmsg("The IMM has been configured (ipmi.bmcid). Skipped.",$callback, $node); return; } #skip configuration, we already know this one $newaddr = $ient->{bmc}; } my @ips=(); my $autolla=0; if ($newaddr and not $newaddr =~ /^fe80:.*%.*/) { @ips = xCAT::NetworkUtils::getipaddr($newaddr,GetAllAddresses=>1); } else { if ($args{curraddr} =~ /^fe80:.*%.*/) { #if SLP were able to glean an LLA out of this, let's just roll with that result $ipmitab->setNodeAttribs($node,{bmc=>$args{curraddr}}); $autolla=1; } } if (not scalar @ips and not $autolla) { sendmsg(":Cannot find the IP attribute for bmc",$callback,$node); return; } my $targips; if (scalar(@ips)) { $targips = join(',',@ips); } elsif ($autolla) { $targips=$args{curraddr}; } sendmsg(":Configuration of ".$node."[$targips] commencing, configuration may take a few minutes to take effect",$callback); my $child = fork(); if ($child) { return; } unless (defined $child) { die "error spawining process" } #ok, with all ip addresses in hand, time to enable IPMI and set all the ip addresses (still static only, TODO: dhcp my $ssh = new xCAT::SSHInteract(-username=>$args{username}, -password=>$args{password}, -host=>$args{curraddr}, -nokeycheck=>1, -output_record_separator=>"\r", Timeout=>15, Errmode=>'return', Prompt=>'/> $/'); if ($ssh and $ssh->atprompt) { #we are in and good to issue commands $ssh->cmd("accseccfg -pe 0 -rc 0 -ci 0 -lf 0 -lp 0"); #disable the more insane password rules, this isn't by and large a human used interface $ssh->cmd("users -1 -n ".$args{username}." -p ".$args{password}." -a super"); #this gets ipmi going foreach my $ip (@ips) { if ($ip =~ /:/) { $ssh->cmd("ifconfig eth0 -ipv6static enable -i6 $ip"); } else { (my $sip,my $mask,my $gw) = xCAT_plugin::bmcconfig::net_parms($ip); my $cmd = "ifconfig eth0 -c static -i $ip -s $mask"; if ($gw) { $cmd .= " -g $gw"; } $ssh->cmd($cmd); } } $ssh->close(); $ipmitab->setNodeAttribs($node,{bmcid=>$slpdata->{macaddress}}); } exit(0); } sub configure_hosted_elements { my $cmm = shift; my $uuid=$flexchassisuuid{$cmm}; my $node; my $immdata; my $slot; my $user = $passwordmap{$cmm}->{username}; my $pass = $passwordmap{$cmm}->{password}; foreach $immdata (values %{$flexchassismap{$uuid}}) { $slot=$immdata->{attributes}->{slot}->[0]; if ($node = $nodebymp{$cmm}->{$slot}) { my $addr = $immdata->{peername}; #todo, use sockaddr and remove the 427 port from it instead? if ($addr =~ /^fe80/) { #Link local address requires scope index $addr .= "%".$immdata->{scopeid}; } if ($doneaddrs{$node}) { next; } $doneaddrs{$node}=1; setupIMM($node,slpdata=>$immdata,curraddr=>$addr,username=>$user,password=>$pass); } else { sendmsg(": Ignoring target in bay $slot, no node found with mp.mpa/mp.id matching",$callback,$cmm); } } while (wait() > 0) {} } sub setup_cmm_pass { my $nodename = shift; my $localuser=$defaultbladeuser; my $localpass=$defaultbladepass; if ($mpahash->{$nodename}) { if ($mpahash->{$nodename}->{username}) { $localuser = $mpahash->{$nodename}->{username}; } if ($mpahash->{$nodename}->{password}) { $localpass = $mpahash->{$nodename}->{password}; } } $passwordmap{$nodename}->{username}=$localuser; $passwordmap{$nodename}->{password}=$localpass; } sub do_blade_setup { my $data = shift; my %args = @_; my $addr = $args{curraddr}; my $nodename = $data->{nodename}; my $localuser=$passwordmap{$nodename}->{username}; my $localpass=$passwordmap{$nodename}->{password}; if (not $localpass or $localpass eq "PASSW0RD") { sendmsg([1,":Password for blade must be specified in either mpa or passwd tables, and it must not be PASSW0RD"],$callback,$nodename); return 0; } require xCAT_plugin::blade; my @cmds; my %exargs; if ($args{pass2}) { @cmds = qw/initnetwork=*/; %exargs = ( nokeycheck=>1 ); #still not at the 'right' ip, so the known hosts shouldn't be bothered } else { @cmds = qw/snmpcfg=enable sshcfg=enable textid=*/; # initnetwork=*/; defer initnetwork until after chassis members have been configured %exargs = ( curruser=>$currentbladeuser, currpass=>$currentbladepass ); } my $result; $@=""; my $rc = eval { $result = xCAT_plugin::blade::clicmds( $nodename, $localuser, $localpass, $nodename, 0, curraddr=>$addr, %exargs, cmds=>\@cmds ); 1; }; my $errmsg=$@; if ($errmsg) { if ($errmsg =~ /Incorrect Password/) { sendmsg([1,"Failed to set up Management module due to Incorrect Password (You may try the environment variables XCAT_CURRENTUSER and/or XCAT_CURRENTPASS to try a different value)"],$callback,$nodename); }else { sendmsg([1,"Failed to set up Management module due to $errmsg"],$callback,$nodename); } return 0; } if ($result) { if ($result->[0]) { if ($result->[2] =~ /Incorrect Password/) { sendmsg([1,"Failed to set up Management module due to Incorrect Password (You may try the environment variables XCAT_CURRENTUSER and/or XCAT_CURRENTPASS to try a different value)"],$callback,$nodename); return 0; } my $errors = $result->[2]; if (ref $errors) { foreach my $error (@$errors) { sendmsg([$result->[0],$error],$callback,$nodename); } } else { sendmsg([$result->[0],$result->[2]],$callback,$nodename); } return 0; } } return $rc; } 1;