907b14ba9d
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@15461 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2215 lines
68 KiB
Perl
Executable File
2215 lines
68 KiB
Perl
Executable File
#!/usr/bin/env perl
|
|
# IBM(c) 2007 EPL license http://www.eclipse.org/legal/epl-v10.html
|
|
#
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head1 xcatconfig
|
|
|
|
|
|
|
|
This is script is called during the initial installation of xCAT
|
|
It can also be called directly to various parts of the configuration
|
|
root ssh keys, node host keys, credentials database setup or all
|
|
|
|
=cut
|
|
|
|
BEGIN
|
|
{
|
|
$::XCATROOT = $ENV{'XCATROOT'} ? $ENV{'XCATROOT'} : '/opt/xcat';
|
|
$::XCATDIR = $ENV{'XCATDIR'} ? $ENV{'XCATDIR'} : '/etc/xcat';
|
|
}
|
|
|
|
use lib "$::XCATROOT/lib/perl";
|
|
use strict;
|
|
use xCAT::Utils;
|
|
use xCAT::NetworkUtils;
|
|
use Getopt::Long;
|
|
use xCAT::MsgUtils;
|
|
use xCAT::Table;
|
|
use Socket;
|
|
|
|
#-----------------------------------------------------------------------------
|
|
# Main
|
|
|
|
$::progname = "xcatconfig";
|
|
my $args = join ' ', @ARGV;
|
|
$::command = "$0 $args";
|
|
Getopt::Long::Configure("bundling");
|
|
$Getopt::Long::ignorecase = 0;
|
|
|
|
# Default Install dir location
|
|
$::INSTALLDIR = "/install";
|
|
|
|
# Default TFTP dir location
|
|
$::TFTPDIR = "/tftpboot";
|
|
|
|
my $arraysize=@ARGV;
|
|
if ($arraysize ==0) {
|
|
my $msg= "No parameters were supplied on the xcatconfig command. Run xcatconfig -h" ;
|
|
xCAT::MsgUtils->message("E", $msg);
|
|
exit 1;
|
|
}
|
|
|
|
Getopt::Long::Configure("posix_default");
|
|
Getopt::Long::Configure("no_gnu_compat");
|
|
Getopt::Long::Configure("bundling");
|
|
|
|
# parse the options
|
|
if (
|
|
!GetOptions(
|
|
'f|force' => \$::FORCE,
|
|
'i|initinstall' => \$::INITIALINSTALL,
|
|
'u|updateinstall' => \$::UPDATEINSTALL,
|
|
'k|sshkeys' => \$::genSSHRootKeys,
|
|
'm|mgtnode' => \$::setupMNinDB,
|
|
's|sshnodehostkeys' => \$::genSSHNodeHostKeys,
|
|
'c|credentials' => \$::genCredentials,
|
|
'd|database' => \$::initDB,
|
|
'h|help' => \$::HELP,
|
|
'v|version' => \$::VERSION,
|
|
'V|verbose' => \$::VERBOSE,
|
|
'installdir=s' => \$::INSTALLDIR,
|
|
'tftpdir=s' => \$::TFTPDIR,
|
|
)
|
|
)
|
|
{
|
|
&usage;
|
|
exit(1);
|
|
}
|
|
|
|
|
|
# display the usage if -h or --help is specified
|
|
if ($::HELP)
|
|
{
|
|
&usage;
|
|
exit(0);
|
|
}
|
|
|
|
# display the version statement if -v or --verison is specified
|
|
if ($::VERSION)
|
|
{
|
|
my $version = xCAT::Utils->Version();
|
|
$version .= "\n";
|
|
xCAT::MsgUtils->message("I", $version);
|
|
exit 0;
|
|
}
|
|
if ($::FORCE)
|
|
{
|
|
if ( $::INITIALINSTALL
|
|
|| $::UPDATEINSTALL
|
|
|| $::genSSHRootKeys
|
|
|| $::genSSHNodeHostKey
|
|
|| $::genCredentials
|
|
|| $::initDB)
|
|
{
|
|
my $warning =
|
|
" The -f flag includes the function for the -i, -u, -k, -s, -c, -d flags. Do not combine with other flags.\n ";
|
|
xCAT::MsgUtils->message("I", $warning);
|
|
exit 1;
|
|
}
|
|
}
|
|
if (($::INITIALINSTALL) && ($::UPDATEINSTALL))
|
|
{
|
|
my $warning =
|
|
" The -i and -u flags may not be input to the command. Use one or the other. \n ";
|
|
xCAT::MsgUtils->message("I", $warning);
|
|
exit 1;
|
|
}
|
|
|
|
#
|
|
# Display command
|
|
#
|
|
verbose("Running $::command");
|
|
if (xCAT::Utils->isAIX())
|
|
{
|
|
$::osname = 'AIX';
|
|
}
|
|
else
|
|
{
|
|
$::osname = 'Linux';
|
|
}
|
|
|
|
#
|
|
# If the XCATPGPW environment variable is specified,
|
|
# call pgsqlsetup command with -N flag to setup PostgreSQL database.
|
|
# This is a requirement of PCM, it should be done only in install scenario but not update.
|
|
#
|
|
if ($::INITIALINSTALL || $::FORCE)
|
|
{
|
|
if (($::osname eq 'Linux') && $ENV{'XCATPGPW'})
|
|
{
|
|
my $cmd = "XCATPGPW=$ENV{'XCATPGPW'} $::XCATROOT/bin/pgsqlsetup -i -N";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not setup PostgreSQL, falling back to sqlite...");
|
|
$cmd = "rm -f /etc/xcat/cfgloc";
|
|
$outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not fall back to sqlite, where should we go?");
|
|
}
|
|
}
|
|
else
|
|
{
|
|
# Init the database
|
|
$::initDB = 1;
|
|
}
|
|
}
|
|
}
|
|
# To support AIX INUCLIENTS, to support the scenario where the user needs to install xCAT rpms
|
|
# into the INUCLIENT=1 environment, such as AIX diskless node(installing xCAT in AIX NIM SPOT),
|
|
# or alternative disk installation.
|
|
#
|
|
|
|
if (($::osname eq 'AIX') && ($ENV{'INUCLIENTS'} == 1))
|
|
{
|
|
# INUCLIENTS is configured, add xcatconfig to /etc/inittab
|
|
my $cmd = "/usr/sbin/lsitab xcatconfig > /dev/null 2>&1";
|
|
my $rc = system("$cmd") >>8;
|
|
if ($rc != 0)
|
|
{
|
|
# add new entry
|
|
my $flag;
|
|
if ($::INITIALINSTALL)
|
|
{
|
|
$flag = "-i";
|
|
}
|
|
|
|
if ($::UPDATEINSTALL)
|
|
{
|
|
$flag = "-u";
|
|
}
|
|
|
|
if ($::initDB)
|
|
{
|
|
$flag = "-d";
|
|
}
|
|
|
|
my $mkcmd = qq~/usr/sbin/mkitab "xcatconfig:2:once:$::XCATROOT/sbin/xcatconfig $flag > /dev/console 2>&1"~;
|
|
system("$mkcmd");
|
|
}
|
|
exit(0);
|
|
}
|
|
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
$::arch = `uname -p`;
|
|
#$::root = "";
|
|
$::root = xCAT::Utils->getHomeDir();
|
|
}
|
|
else
|
|
{
|
|
$::arch = `uname -m`;
|
|
$::root = "/root";
|
|
}
|
|
chomp $::arch;
|
|
chomp $::root;
|
|
|
|
|
|
|
|
#
|
|
# Generate ssh host keys for the nodes
|
|
#
|
|
#
|
|
if (xCAT::Utils->isMN()) {
|
|
if ($::FORCE || $::genSSHNodeHostKeys || $::INITIALINSTALL || $::UPDATEINSTALL )
|
|
{
|
|
&genSSHNodeHostKey;
|
|
}
|
|
}
|
|
#
|
|
# gen root's ssh keys, if needed and copy to appropriate directories to
|
|
# be used during install
|
|
#
|
|
if ($::INITIALINSTALL || $::FORCE || $::genSSHRootKeys)
|
|
{
|
|
&genSSHRootKeys; # gen new rsa ssh key for root
|
|
}
|
|
|
|
#
|
|
# Update /etc/profile on AIX
|
|
#
|
|
if (($::INITIALINSTALL) ||($::UPDATEINSTALL))
|
|
{
|
|
my $profname = "/etc/profile";
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
my $cmd = qq~cat $profname | grep "XCATROOT"~;
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0) # no xcat paths in the /etc/profile
|
|
{
|
|
|
|
# make back up file
|
|
my $cpcmd = qq~/bin/cp -p $profname $profname.orig~;
|
|
my $outref = xCAT::Utils->runcmd("$cpcmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not copy $profname.");
|
|
}
|
|
|
|
# add xCAT paths
|
|
my $eccmd =
|
|
qq~echo '# xCAT setup\nXCATROOT=$::XCATROOT\nPATH=\$XCATROOT/bin:\$XCATROOT/sbin:\$XCATROOT/share/xcat/tools:\$PATH\nMANPATH=\$XCATROOT/share/man:\$MANPATH\nexport XCATROOT PATH MANPATH' >>$profname~;
|
|
$outref = xCAT::Utils->runcmd("$eccmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not update $profname.");
|
|
}
|
|
} else { # xcat path is there, maybe need to add /share/xcat/tools
|
|
my $cmd = qq~cat $profname | grep "/share/xcat/tools"~;
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0) # no tools paths in the /etc/profile
|
|
{
|
|
my $eccmd =
|
|
qq~echo 'PATH=\$XCATROOT/share/xcat/tools:\$PATH\nexport MANPATH' >>$profname~;
|
|
$outref = xCAT::Utils->runcmd("$eccmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not update $profname.");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($::INITIALINSTALL || $::FORCE || $::UPDATEINSTALL)
|
|
{
|
|
|
|
#
|
|
# For all MNs create /var/log/consoles if needed
|
|
# Conserver won't start without it
|
|
#
|
|
if (!-d "/var/log/consoles")
|
|
{
|
|
my $cmd = "/bin/mkdir -p /var/log/consoles";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create /var/log/consoles directory.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created /var/log/consoles directory.");
|
|
}
|
|
}
|
|
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
if ($::INITIALINSTALL) { # do only on install
|
|
xCAT::Utils->setupAIXconserver($::VERBOSE);
|
|
}
|
|
&setupAIXIPMITool;
|
|
|
|
# Add the xcatd subsystem to the AIX
|
|
no strict 'refs';
|
|
my $mkssys_cmd =
|
|
"mkssys -p $::XCATROOT/sbin/xcatd -s xcatd -u 0 -S -n 15 -f 15 -a \"-f\"";
|
|
system($mkssys_cmd);
|
|
use strict;
|
|
|
|
# if not Update, add to inittab
|
|
# breaks HAMS to add on update
|
|
if (! $::UPDATEINSTALL) {
|
|
# for AIX systems add xcatd to the /etc/inittab file
|
|
# add xcatd entry if one does not exist
|
|
my $rcmd = "/bin/cat /etc/inittab | grep 'xcatd'";
|
|
my $outref = xCAT::Utils->runcmd("$rcmd", -1);
|
|
if ($::RUNCMD_RC != 0) {
|
|
my $mkitab_cmd =
|
|
"mkitab \"xcatd:2:once:$::XCATROOT/sbin/restartxcatd > /dev/console 2>&1\" > /dev/null 2>&1";
|
|
xCAT::Utils->runcmd("$mkitab_cmd", 0);
|
|
if ($::RUNCMD_RC != 0) {
|
|
xCAT::MsgUtils->message('E', "Could not set up inittab.");
|
|
}
|
|
}
|
|
}
|
|
|
|
# add AIX needed exports
|
|
&setupAIXexports;
|
|
|
|
}
|
|
|
|
else # for Linux
|
|
{
|
|
&setupLinuxexports; # add Linux exports
|
|
|
|
}
|
|
} # end install,update or force
|
|
|
|
#
|
|
# set up the certificates for xcatd, gen new ones if requested or do not exist
|
|
#
|
|
if ($::INITIALINSTALL || $::UPDATEINSTALL || $::FORCE || $::genCredentials)
|
|
{
|
|
&genCredentials;
|
|
}
|
|
|
|
#
|
|
# Setup database
|
|
#
|
|
if ($::INITIALINSTALL || $::UPDATEINSTALL || $::FORCE || $::initDB)
|
|
{
|
|
&initDB;
|
|
}
|
|
|
|
#
|
|
# set up syslog
|
|
#
|
|
# use postscript to set up syslog
|
|
if ($::INITIALINSTALL || $::FORCE || $::UPDATEINSTALL)
|
|
{
|
|
my $cmd = "$::INSTALLDIR/postscripts/syslog";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not set up syslog.");
|
|
}
|
|
else
|
|
{
|
|
verbose("syslog has been set up.");
|
|
}
|
|
}
|
|
|
|
|
|
#
|
|
|
|
#
|
|
# start xcatd
|
|
#
|
|
if ($::INITIALINSTALL || $::FORCE || $::UPDATEINSTALL || $::genCredentials)
|
|
{
|
|
my $xcmd;
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
$xcmd = "$::XCATROOT/sbin/restartxcatd";
|
|
}
|
|
else
|
|
{
|
|
$xcmd = "/etc/init.d/xcatd restart";
|
|
}
|
|
system($xcmd);
|
|
}
|
|
|
|
# more config needed after xcatd start
|
|
if ($::INITIALINSTALL || $::FORCE)
|
|
{
|
|
&startnamedonboot;
|
|
my $cmd;
|
|
if ($::osname eq 'Linux') {
|
|
#Zap the almost certainly wrong pxelinux.cfg file
|
|
if (-f "$::TFTPDIR/pxelinux.cfg/default")
|
|
{
|
|
$cmd = "/bin/rm $::TFTPDIR/pxelinux.cfg/default";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not remove $::TFTPDIR/pxelinux.cfg/default");
|
|
}
|
|
else
|
|
{
|
|
verbose("Removed $::TFTPDIR/pxelinux.cfg/default.");
|
|
}
|
|
}
|
|
|
|
# makenetworks and setup http
|
|
&makenetworks;
|
|
&setuphttp;
|
|
|
|
# chkconfig dhcpd on
|
|
system("chkconfig dhcpd on");
|
|
|
|
|
|
# Turn off selinux on RedHat
|
|
if (-f "/etc/redhat-release")
|
|
{
|
|
my $rc=xCAT::Utils->isSELINUX();
|
|
if ($rc != 0)
|
|
{
|
|
xCAT::MsgUtils->message('W', "SELINUX is not disabled, disabling it now...");
|
|
# Disable selinux for running system
|
|
my $cmd = "echo 0 > /selinux/enforce";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to disable SELINUX.");
|
|
}
|
|
# Disable selinux through reboots
|
|
my $cmd = "sed -i 's/^SELINUX=.*\$/SELINUX=disabled/' /etc/selinux/config";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to disable SELINUX.");
|
|
}
|
|
}
|
|
}
|
|
|
|
# Configure static ip addresses on the network interfaces
|
|
# This does not make too much sense, comment it out,
|
|
# should be done manually or through DHCP
|
|
#if (-f "$::INSTALLDIR/postscripts/hardeths")
|
|
#{
|
|
# my $cmd = "$::INSTALLDIR/postscripts/hardeths";
|
|
# my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
# if ($::RUNCMD_RC != 0)
|
|
# {
|
|
# xCAT::MsgUtils->message('E', "Failed to configure static ip addresses");
|
|
# }
|
|
#}
|
|
|
|
# Setup ntp server
|
|
if (-f "/etc/ntp.conf")
|
|
{
|
|
my $cmd = "echo 'driftfile /var/lib/ntp/drift' > /etc/ntp.conf; echo 'disable auth' >> /etc/ntp.conf; echo 'restrict 127.0.0.1' >> /etc/ntp.conf; echo 'server 127.127.1.0' >> /etc/ntp.conf; echo 'fudge 127.127.1.0 stratum 10' >> /etc/ntp.conf";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to update /etc/ntp.conf");
|
|
}
|
|
|
|
my $ntpserv;
|
|
if (-f "/etc/redhat-release")
|
|
{
|
|
$ntpserv = "ntpd";
|
|
}
|
|
else
|
|
{
|
|
$ntpserv = "ntp";
|
|
}
|
|
$cmd = "service $ntpserv restart";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to start ntp service");
|
|
}
|
|
if (-f "/sbin/chkconfig")
|
|
{
|
|
$cmd = "chkconfig $ntpserv on";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to enable ntp service on every boot");
|
|
}
|
|
}
|
|
}
|
|
|
|
# Disable firewall
|
|
my $fwserv;
|
|
if(-f "/etc/SuSE-release")
|
|
{
|
|
$fwserv = "SuSEfirewall2_setup";
|
|
}
|
|
elsif(-f "/etc/redhat-release")
|
|
{
|
|
$fwserv = "iptables";
|
|
}
|
|
else
|
|
{
|
|
#Ubuntu: FIXME
|
|
}
|
|
if($fwserv)
|
|
{
|
|
my $cmd = "service $fwserv stop";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to stop firewall");
|
|
}
|
|
$cmd = "chkconfig $fwserv off";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Failed to disable firewall on boot");
|
|
}
|
|
}
|
|
|
|
# Enable ip forwarding. In most cases,
|
|
# the MN itself will act as the default gateway for the compute nodes,
|
|
# ip forwarding is required for a network gateway
|
|
xCAT::NetworkUtils->setup_ip_forwarding(1);
|
|
|
|
# Enable ipv6 forwarding,
|
|
# only if there are IPv6 networks in the networks table
|
|
my $ipv6net = 0;
|
|
my $ntab = xCAT::Table->new('networks');
|
|
if ($ntab)
|
|
{
|
|
foreach my $enet (@{$ntab->getAllEntries()})
|
|
{
|
|
if ($enet->{'net'} =~ /:/)
|
|
{
|
|
$ipv6net = 1;
|
|
}
|
|
}
|
|
$ntab->close();
|
|
}
|
|
if ($ipv6net)
|
|
{
|
|
xCAT::NetworkUtils->setup_ipv6_forwarding(1);
|
|
}
|
|
|
|
|
|
my $linux_note =
|
|
"xCAT is now running, it is recommended to tabedit networks \nand set a dynamic ip address range on any networks where nodes \nare to be discovered. Then, run makedhcp -n to create a new dhcpd \nconfiguration file, and \/etc\/init.d\/dhcpd restart. Either examine sample \nconfiguration templates, or write your own, or specify a value per \nnode with nodeadd or tabedit.";
|
|
xCAT::MsgUtils->message('I', $linux_note);
|
|
|
|
} else { #AIX
|
|
# makenetworks
|
|
&makenetworks;
|
|
|
|
my $AIX_note =
|
|
"xCAT is now running.";
|
|
xCAT::MsgUtils->message('I', $AIX_note);
|
|
}
|
|
|
|
} #End - more - Linux-only config
|
|
|
|
# Run mknb to put xCAT-genesis-scripts-x86_64 and xCAT-genesis-base-x86_64 together and in /tftpboot
|
|
if (($::INITIALINSTALL || $::UPDATEINSTALL) && $::osname eq 'Linux') {
|
|
&mknb;
|
|
}
|
|
|
|
END
|
|
{
|
|
# Remove xcatconfig itself from the inittab
|
|
|
|
if (($::osname eq 'AIX') && ($ENV{'INUCLIENTS'} != 1))
|
|
{
|
|
my $cmd = "/usr/sbin/lsitab xcatconfig > /dev/null 2>&1";
|
|
my $rc = system("$cmd") >>8;
|
|
if ($rc == 0)
|
|
{
|
|
my $rmcmd = '/usr/sbin/rmitab xcatconfig';
|
|
system("$rmcmd");
|
|
}
|
|
}
|
|
}
|
|
# if xcatconfig -m request to setup the management node in the database
|
|
if ($::setupMNinDB) {
|
|
&setupMNinDB;
|
|
}
|
|
exit;
|
|
|
|
#####################################
|
|
# subroutines
|
|
#####################################
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 usage
|
|
|
|
Displays message for -h option
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub usage
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'I',
|
|
"Usage:\nxcatconfig - Performs basic xCAT setup operations on an xCAT management node. This command should not be run on an xCAT Service Node, unless you are making it a Management Node.\n"
|
|
);
|
|
xCAT::MsgUtils->message(
|
|
'I',
|
|
"xcatconfig [-h|--help]\nxcatconfig [-v|--version]\nxcatconfig [-f|--force] [-V|--verbose]\nxcatconfig [-i|--initinstall] [-V|--verbose]\nxcatconfig [-u|--updateinstall] [-V|--verbose]\nxcatconfig [-k|--sshkeys] [-s|--sshnodehostkeys] [-c|--credentials] [-d|database] [-m|mgtnode] [-V|--verbose]"
|
|
);
|
|
}
|
|
|
|
sub verbose
|
|
{
|
|
if (!$::VERBOSE) { return; }
|
|
my $msg = shift;
|
|
xCAT::MsgUtils->message("I", $msg);
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 genSSHRootKeys
|
|
|
|
Will generate a new ssh rsa key for the root user, if it does not exist or if requested by the input -k flag.
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub genSSHRootKeys
|
|
|
|
{
|
|
|
|
#
|
|
# create /.ssh dir if needed
|
|
#
|
|
my $sshdir = "$::root/.ssh";
|
|
if (!-d $sshdir)
|
|
{
|
|
my $cmd = "/bin/mkdir -m 700 -p $sshdir";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not create $sshdir directory.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created $sshdir directory.");
|
|
}
|
|
}
|
|
|
|
#
|
|
# create or modify the -/.ssh/config file
|
|
#
|
|
my $cfgfile = "$::root/.ssh/config";
|
|
if (-f $cfgfile)
|
|
{
|
|
|
|
# it exists - so see if it needs to be updated
|
|
my $cmd = "/bin/cat $cfgfile | grep 'StrictHostKeyChecking no'";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
|
|
# ok - then add this entry
|
|
my $cmd =
|
|
"/bin/echo StrictHostKeyChecking no >> $cfgfile; chmod 600 $cfgfile";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not update the $cfgfile file.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I',
|
|
"Added updates to the $cfgfile file.");
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
|
|
# file doesn't exist so just create it
|
|
my $cmd =
|
|
"/bin/echo StrictHostKeyChecking no > $cfgfile; chmod 600 $cfgfile";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not update the $cfgfile file.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I', "Added updates to the $cfgfile file.");
|
|
}
|
|
}
|
|
|
|
#
|
|
# create /install/postscripts/_ssh if needed
|
|
#
|
|
if (!-d "$::INSTALLDIR/postscripts/_ssh")
|
|
{
|
|
my $cmd = "/bin/mkdir -m 755 -p $::INSTALLDIR/postscripts/_ssh";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create $::INSTALLDIR/postscripts/_ssh directory.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created $::INSTALLDIR/postscripts/_ssh directory.");
|
|
}
|
|
}
|
|
|
|
#need to gen a new rsa key for root ssh, if Force, genkey or does not exist
|
|
my $pubfile = "$::root/.ssh/id_rsa.pub";
|
|
my $rsafile = "$::root/.ssh/id_rsa";
|
|
|
|
# if exists, and generated new then
|
|
# need to remove the old files
|
|
if ((-r $pubfile) && ($::FORCE || $::genSSHRootKeys))
|
|
{
|
|
|
|
my $cmd = "/bin/rm $::root/.ssh/id_rsa*";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not remove id_rsa files from $::root/.ssh directory.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I',
|
|
"Removed id_rsa files from $::root/.ssh directory.");
|
|
}
|
|
}
|
|
|
|
# ssh key does not exist, gen a new one else leave alone
|
|
if (!-r $pubfile)
|
|
{
|
|
my $cmd = "/usr/bin/ssh-keygen -t rsa -q -b 2048 -N '' -f $rsafile";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not generate $pubfile.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I', "Generated $pubfile.");
|
|
|
|
}
|
|
}
|
|
|
|
# copy authorized_keys for install on node
|
|
if (-r $pubfile)
|
|
{
|
|
my $cmd =
|
|
"/bin/cp -p $pubfile $::INSTALLDIR/postscripts/_ssh/authorized_keys ";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'E',
|
|
"Could not copy $pubfile to $::INSTALLDIR/postscripts/_ssh/authorized_keys."
|
|
);
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'I',
|
|
"Copied $pubfile to $::INSTALLDIR/postscripts/_ssh/authorized_keys."
|
|
);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'E',
|
|
"Could not copy $pubfile to $::INSTALLDIR/postscripts/_ssh/authorized_keys,because $pubfile does not exist."
|
|
);
|
|
}
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 genSSHNodeHostKey
|
|
|
|
If node private node hostkeys do not exist in either directory or force option
|
|
or generate host key option, we need to generate them
|
|
These keys are installed on the nodes in /etc/ssh directory and allow the
|
|
node to ssh without password node to node.
|
|
They are store in /etc/xcat/hostkeys on the MN.
|
|
This also includes some migration to /install/postscripts/hostkeys
|
|
for the install process
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub genSSHNodeHostKey
|
|
|
|
{
|
|
|
|
my $hostkey = "$::INSTALLDIR/postscripts/hostkeys/ssh_host_rsa_key";
|
|
my $hostkey2 = "/etc/xcat/hostkeys/ssh_host_rsa_key";
|
|
if ((!-r $hostkey) && (!-r $hostkey2)) # if they do not exist
|
|
{
|
|
|
|
#create directories /etc/xcat/hostkeys and /install/postscripts/hostkeys
|
|
if (!-d "$::INSTALLDIR/postscripts/hostkeys") # dir for public keys
|
|
{
|
|
my $cmd = "/bin/mkdir -m 755 -p $::INSTALLDIR/postscripts/hostkeys";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'E',
|
|
"Could not create $::INSTALLDIR/postscripts/hostkeys directory."
|
|
);
|
|
}
|
|
}
|
|
if (!-d "/etc/xcat/hostkeys") # directory for public/private keys
|
|
{
|
|
my $cmd = "/bin/mkdir -p /etc/xcat/hostkeys";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create /etc/xcat/hostkeys directory.");
|
|
}
|
|
}
|
|
|
|
# remove the old keys
|
|
if (-r $hostkey)
|
|
{
|
|
my $cmd = "/bin/rm $::INSTALLDIR/postscripts/hostkeys/ssh_host*";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'I',
|
|
"Could not remove ssh keys from $::INSTALLDIR/postscripts/hostkeys directory. They may not exist."
|
|
);
|
|
}
|
|
}
|
|
|
|
# remove the old keys
|
|
if (-r $hostkey2)
|
|
{
|
|
my $cmd = "/bin/rm /etc/xcat/hostkeys/ssh_host*";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'I',
|
|
"Could not remove ssh keys from /etc/xcat/hostkeys directory. They may not exist."
|
|
);
|
|
}
|
|
}
|
|
|
|
#
|
|
# generate new hostkeys
|
|
#
|
|
xCAT::MsgUtils->message('I', "Generating new node hostkeys...");
|
|
xCAT::MsgUtils->message('I', "Generating SSH1 RSA Key...");
|
|
my $cmd =
|
|
"/usr/bin/ssh-keygen -t rsa1 -f /etc/xcat/hostkeys/ssh_host_key -C '' -N ''";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not generate SSH1 RSA key.");
|
|
}
|
|
|
|
xCAT::MsgUtils->message('I', "Generating SSH2 RSA Key...");
|
|
$cmd =
|
|
"/usr/bin/ssh-keygen -t rsa -f /etc/xcat/hostkeys/ssh_host_rsa_key -C '' -N ''";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not generate SSH2 RSA key.");
|
|
}
|
|
|
|
xCAT::MsgUtils->message('I', "Generating SSH2 DSA Key...");
|
|
$cmd =
|
|
"/usr/bin/ssh-keygen -t dsa -f /etc/xcat/hostkeys/ssh_host_dsa_key -C '' -N ''";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not generate SSH2 DSA key.");
|
|
}
|
|
|
|
# copy the public keys to install directory
|
|
$cmd =
|
|
"/bin/cp /etc/xcat/hostkeys/*.pub $::INSTALLDIR/postscripts/hostkeys/.";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "$cmd not successful.");
|
|
}
|
|
else
|
|
{
|
|
verbose("$cmd is successful");
|
|
}
|
|
}
|
|
else
|
|
{ # keys exist and not a request to regenerate
|
|
# so if private keys are in /install ( some migration)
|
|
# move old hostkeys keys if they exist in /install, to the
|
|
# new directory /etc/xcat/hostkeys & remove private keys from /install
|
|
if (-f "$::INSTALLDIR/postscripts/hostkeys/ssh_host_rsa_key")
|
|
{
|
|
|
|
# copy all keys to /etc/xcat/hostkeys directory
|
|
my $cmd =
|
|
"/bin/cp -p $::INSTALLDIR/postscripts/hostkeys/* /etc/xcat/hostkeys/.";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "$cmd not successful.");
|
|
}
|
|
|
|
# remove private keys from install dir, leave the public keys
|
|
if (-f "$::INSTALLDIR/postscripts/hostkeys/ssh_host_dsa_key")
|
|
{
|
|
my $cmd =
|
|
"/bin/rm $::INSTALLDIR/postscripts/hostkeys/ssh_host_dsa_key";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "$cmd not successful.");
|
|
}
|
|
}
|
|
if (-f "$::INSTALLDIR/postscripts/hostkeys/ssh_host_key")
|
|
{
|
|
my $cmd = "/bin/rm $::INSTALLDIR/postscripts/hostkeys/ssh_host_key";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "$cmd not successful.");
|
|
}
|
|
}
|
|
if (-f "$::INSTALLDIR/postscripts/hostkeys/ssh_host_rsa_key")
|
|
{
|
|
my $cmd =
|
|
"/bin/rm $::INSTALLDIR/postscripts/hostkeys/ssh_host_rsa_key";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "$cmd not successful.");
|
|
}
|
|
}
|
|
}
|
|
|
|
# so if no public key in /install/postscripts/hostkeys
|
|
# copy the /etc/xcat/hostkeys
|
|
# public keys to /install/postscripts/hostkeys
|
|
if (!(-f "$::INSTALLDIR/postscripts/hostkeys/ssh_host_rsa_key.pub"))
|
|
{
|
|
|
|
# rm any files
|
|
my $cmd = "/bin/rm $::INSTALLDIR/postscripts/hostkeys/*";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"$cmd not successful. Files may not exist.");
|
|
}
|
|
else
|
|
{
|
|
verbose("$cmd is successful");
|
|
}
|
|
|
|
# copy the public keys to install directory
|
|
$cmd =
|
|
"/bin/cp /etc/xcat/hostkeys/*.pub $::INSTALLDIR/postscripts/hostkeys/.";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "$cmd not successful.");
|
|
}
|
|
else
|
|
{
|
|
verbose("$cmd is successful");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
# is_lsb_ubuntu return value indicates whether system appears to be Ubuntu.
|
|
# Using required /etc/lsb-release file, instead of optional lsb_release command.
|
|
|
|
sub is_lsb_ubuntu
|
|
{
|
|
if (open(my $relfile, "<", "/etc/lsb-release")) {
|
|
my @text = <$relfile>;
|
|
close($relfile);
|
|
chomp(@text);
|
|
my $distrib_id = '';
|
|
|
|
foreach (@text) {
|
|
if ( $_ =~ /^\s*DISTRIB_ID=(.*)$/ ) {
|
|
$distrib_id = $1; # last DISTRIB_ID value in file used
|
|
}
|
|
}
|
|
|
|
if ( $distrib_id =~ /^(Ubuntu|"Ubuntu")\s*$/ ) {
|
|
return 1; # return "true"
|
|
}
|
|
}
|
|
|
|
return 0; # return "false"
|
|
}
|
|
|
|
sub is_debian
|
|
{
|
|
if ( -e "/etc/debian_version" && -e "/etc/issue"){
|
|
open(my $relfile, "<", "/etc/issue");
|
|
my $line = <$relfile>;
|
|
close($relfile);
|
|
if ( $line =~ /debian.*/i ){
|
|
return 1;
|
|
}
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
# on Ubuntu need to painstakingly compare /etc/localtime with files under
|
|
# /usr/share/zoneinfo since /etc/localtime # isn't always a symbolic link
|
|
sub discover_timezone_ubuntu
|
|
{
|
|
my $localtime = "/etc/localtime";
|
|
my $zoneinfo = "/usr/share/zoneinfo";
|
|
|
|
my $zone_result = `find $zoneinfo -type f -exec cmp -s $localtime {} \\; -print | grep -v posix | grep -v SystemV`;
|
|
|
|
my @zones = split /\n/, $zone_result;
|
|
|
|
$zones[0] =~ s/$zoneinfo\///;
|
|
|
|
return $zones[0];
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 initDB
|
|
|
|
Will initialize the DB if it does not already exist, also updates with
|
|
new data needed or database changes during xCAT update install.
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub initDB
|
|
|
|
{
|
|
|
|
my $hname = `hostname`;
|
|
chomp $hname;
|
|
|
|
# some values common to both AIX & Linux
|
|
my $xcatport = "3001";
|
|
my $xcatiport = "3002";
|
|
my $tftpdir = "$::TFTPDIR";
|
|
my $installdir = "$::INSTALLDIR";
|
|
my $master;
|
|
$master = xCAT::NetworkUtils->getipaddr($hname);
|
|
if (!$master) {
|
|
xCAT::MsgUtils->message("E", "Hostname resolution for $hname failed, setting the site.master to NORESOLUTION for now, after the xCAT installation is finished, fix this hostname resolution problem, change the site.master to the correct value and then resart xcatd.");
|
|
$master = "NORESOLUTION";
|
|
}
|
|
# get forwarders which are the nameserver entries in /etc/resolv.conf
|
|
# don't use if the address is this machine (Management Node)
|
|
my $forwarders;
|
|
# find out the names for the Management Node
|
|
my @MNnodeinfo = xCAT::NetworkUtils->determinehostname;
|
|
my $MNnodename = pop @MNnodeinfo; # hostname
|
|
my @MNnodeipaddr = @MNnodeinfo; # ipaddresses
|
|
|
|
my @names;
|
|
my @tmpnames =
|
|
xCAT::Utils->runcmd(
|
|
"/bin/grep ^[^#]*nameserver /etc/resolv.conf | awk '{print \$2}'", -1);
|
|
foreach my $ip (@tmpnames) {
|
|
if (!grep(/$ip/, @MNnodeipaddr))
|
|
{ # if not the MN
|
|
push @names,$ip; # add it as a forwarder
|
|
}
|
|
}
|
|
if (@names)
|
|
{
|
|
$forwarders = join(',', @names);
|
|
}
|
|
|
|
# for policy table
|
|
# get hostname from the /etc/xcat/cert/server-cert.pem
|
|
my $MNname;
|
|
if ( -e ("/etc/xcat/cert/server-cert.pem")) {
|
|
my $cmd ="grep Subject /etc/xcat/cert/server-cert.pem";
|
|
my $result = xCAT::Utils->runcmd($cmd, 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message("E", "Error from $cmd.\n MN policy not created.");
|
|
|
|
}
|
|
(my $subject,my $mname) = split /CN=/ , $result;
|
|
($MNname, my $endstuff) = split /Subject/, $mname;
|
|
$MNname =~ s/\s*//g;
|
|
}
|
|
|
|
# set value based on OS
|
|
my ($domain, $timezone);
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
my ($name, $rest) = split('\.', $hname);
|
|
if ($rest)
|
|
{
|
|
($domain = $hname) =~ s/^.*?\.//;
|
|
}
|
|
else
|
|
{
|
|
$domain = "";
|
|
}
|
|
|
|
$timezone = $ENV{'TZ'};
|
|
}
|
|
else # linux
|
|
{
|
|
$domain = `hostname -d`;
|
|
my $tz;
|
|
if (-f "/etc/redhat-release")
|
|
{
|
|
|
|
# on Redhat look for "ZONE"
|
|
$tz =
|
|
`grep ^ZONE /etc/sysconfig/clock|cut -d= -f 2|sed -e 's/"//g'`;
|
|
}
|
|
elsif ( is_lsb_ubuntu() || is_debian() )
|
|
{
|
|
$tz = discover_timezone_ubuntu;
|
|
}
|
|
else
|
|
{
|
|
|
|
# on SuSE look for "TIMEZONE"
|
|
$tz =
|
|
`grep ^TIMEZONE /etc/sysconfig/clock|cut -d= -f 2|sed -e 's/"//g'`;
|
|
}
|
|
$timezone = $tz;
|
|
}
|
|
|
|
chomp $timezone;
|
|
chomp $master;
|
|
chomp $domain;
|
|
|
|
# create basic site definition, if they do not exist reset request
|
|
if ( ((!-r "/etc/xcat/site.sqlite") && (!-r "/etc/xcat/cfgloc"))
|
|
|| $::FORCE
|
|
|| $::initDB)
|
|
{
|
|
my $chtabcmds;
|
|
my $confdir = "/etc/xcat";
|
|
my $syncdir = "/var/xcat/syncfiles";
|
|
my $nodesyncdir = "/var/xcat/node/syncfiles";
|
|
$chtabcmds = "$::XCATROOT/sbin/chtab key=blademaxp site.value=64;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=domain site.value=$domain;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=fsptimeout site.value=0;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=installdir site.value=$installdir;";
|
|
if ($::osname eq 'Linux')
|
|
{
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=ipmimaxp site.value=64;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=ipmiretries site.value=3;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=ipmitimeout site.value=2;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=consoleondemand site.value=no;";
|
|
}
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=master site.value=$master;";
|
|
if ($forwarders) {
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=forwarders site.value=$forwarders;";
|
|
}
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=nameservers site.value=$master;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=maxssh site.value=8;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=ppcmaxp site.value=64;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=ppcretry site.value=3;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=ppctimeout site.value=0;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=powerinterval site.value=0;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=syspowerinterval site.value=0;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=sharedtftp site.value=1;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=SNsyncfiledir site.value=$syncdir;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=nodesyncfiledir site.value=$nodesyncdir;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=tftpdir site.value=$tftpdir;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=xcatdport site.value=$xcatport;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=xcatiport site.value=$xcatiport;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=xcatconfdir site.value=$confdir;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=timezone site.value=\"$timezone\";";
|
|
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=useNmapfromMN site.value=no;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=enableASMI site.value=no;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=db2installloc site.value=\/mntdb2;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=databaseloc site.value=\/var\/lib;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=sshbetweennodes site.value=ALLGROUPS;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=dnshandler site.value=ddns;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=vsftp site.value=n;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=cleanupxcatpost site.value=no;";
|
|
$chtabcmds .= "$::XCATROOT/sbin/chtab key=dhcplease site.value=43200;";
|
|
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=useSSHonAIX site.value=yes;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=useNFSv4onAIX site.value=no;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab key=consoleondemand site.value=yes;";
|
|
}
|
|
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not create site definition.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Updated cluster site definition.");
|
|
}
|
|
}
|
|
|
|
# create default postscript list in postscripts table
|
|
# if it does not exist, or request reset
|
|
|
|
if ( ((!-r "/etc/xcat/postscripts.sqlite") && (!-r "/etc/xcat/cfgloc"))
|
|
|| $::FORCE
|
|
|| $::initDB)
|
|
{
|
|
|
|
# For Linux check to see if otherpkgs in the postscripts table
|
|
# if it is do not change it, otherwise put in postbootscripts
|
|
my $chtabcmds = "";
|
|
my $otherpkgsprocessed = 0;
|
|
my $otherpkgsexist;
|
|
if ($::osname eq 'Linux') {
|
|
$otherpkgsexist = &checkotherpkgs;
|
|
# 0 = does not exist
|
|
# 1 = exists in postscripts
|
|
# 2 = exists in postbootscripts
|
|
|
|
# if otherpkgs does not exist or we are initializing the DB
|
|
# put in postbootscripts
|
|
if (($otherpkgsexist == 0) || ($::initDB))
|
|
{
|
|
$chtabcmds =
|
|
"$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postbootscripts='otherpkgs';";
|
|
$otherpkgsprocessed = 1;
|
|
}
|
|
# if already processed otherpkgs or it is in postbootscripts attr
|
|
# then don't put otherpkgs in the postscripts attribute
|
|
# else it was in postscripts attribute so leave it there.
|
|
if (($otherpkgsprocessed == 1) || ($otherpkgsexist == 2))
|
|
{
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postscripts='syslog,remoteshell,syncfiles';";
|
|
}
|
|
else
|
|
{ # put otherpkgs in postscripts attr
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postscripts='syslog,remoteshell,otherpkgs,syncfiles';";
|
|
}
|
|
# add servicenode default
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab node=service postscripts.postscripts='servicenode'";
|
|
|
|
}
|
|
if ($::osname eq 'AIX') { # we don't use otherpkgs on AIX
|
|
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postscripts='syslog,remoteshell,syncfiles';";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab node=service postscripts.postscripts='servicenode'";
|
|
|
|
}
|
|
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create postscripts definition.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created postscripts definition.");
|
|
}
|
|
}
|
|
|
|
# create or reset basic policy table definitions
|
|
if ( ((!-r "/etc/xcat/policy.sqlite") && (!-r "/etc/xcat/cfgloc"))
|
|
|| $::FORCE
|
|
|| $::initDB)
|
|
{
|
|
my $chtabcmds;
|
|
if ($::osname eq 'AIX')
|
|
{
|
|
$chtabcmds =
|
|
"$::XCATROOT/sbin/chtab priority=1 policy.name=root policy.rule=allow;";
|
|
if (defined($MNname)){
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=1.2 policy.name=$MNname policy.rule=trusted;";
|
|
}
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.4 policy.commands=getpostscript policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.6 policy.commands=syncfiles policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=2.3 policy.commands=lsxcatd policy.rule=allow;";
|
|
}
|
|
else # linux
|
|
{
|
|
$chtabcmds =
|
|
"$::XCATROOT/sbin/chtab priority=1 policy.name=root policy.rule=allow;";
|
|
if (defined($MNname)){
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=1.2 policy.name=$MNname policy.rule=trusted;";
|
|
}
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=2 policy.commands=getbmcconfig policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=2.1 policy.commands=remoteimmsetup policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=2.3 policy.commands=lsxcatd policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=3 policy.commands=nextdestiny policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4 policy.commands=getdestiny policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.4 policy.commands=getpostscript policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.6 policy.commands=syncfiles policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.7 policy.commands=litefile policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.8 policy.commands=litetree policy.rule=allow;";
|
|
}
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not create policy definition.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created policy definition.");
|
|
}
|
|
}
|
|
|
|
# update install processing
|
|
if ($::UPDATEINSTALL)
|
|
{
|
|
# setup Management Node policy to trusted
|
|
my $chtabcmds;
|
|
$chtabcmds =
|
|
"$::XCATROOT/sbin/chtab priority=1.2 policy.name=$MNname policy.rule=trusted;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=2.3 policy.commands=lsxcatd policy.rule=allow;";
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not update policy.name=$hname rule.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Updated policy definition for MN.");
|
|
}
|
|
# add statelite policies on update for Linux
|
|
if ($::osname eq 'Linux') {
|
|
$chtabcmds =
|
|
"$::XCATROOT/sbin/chtab priority=4.7 policy.commands=litefile policy.rule=allow;";
|
|
$chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab priority=4.8 policy.commands=litetree policy.rule=allow;";
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not create statelite policy.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created statelite policy definition.");
|
|
}
|
|
}
|
|
|
|
# For Linux check to see if otherpkgs is in the postscripts table
|
|
# if it is do not change it, otherwise put in postbootscripts
|
|
# 0 = does not exist
|
|
# 1 = exists in postscripts
|
|
# 2 = exists in postbootscripts
|
|
my $otherpkgsexist;
|
|
$chtabcmds ="";
|
|
if ($::osname eq 'Linux') {
|
|
$otherpkgsexist = &checkotherpkgs;
|
|
if (($otherpkgsexist == 1) || ($otherpkgsexist == 2)) {
|
|
# otherpkgs already in postscripts or in postbootscripts
|
|
# just add syncfiles
|
|
$chtabcmds = "$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postscripts+='syncfiles'";
|
|
}
|
|
else
|
|
{ # otherpkgs does not exist
|
|
# put in postbootscripts
|
|
$chtabcmds = "$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postbootscripts+='otherpkgs';";
|
|
}
|
|
} else { # AIX , no otherpkgs just add syncfiles
|
|
$chtabcmds = "$::XCATROOT/sbin/chtab node=xcatdefaults postscripts.postscripts+='syncfiles'";
|
|
}
|
|
|
|
if ($chtabcmds ne "") {
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not update postscripts definition.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Updated postscripts definition.");
|
|
}
|
|
}
|
|
|
|
# remove any xcatdefaults node in nodelist
|
|
# leave to cleanup from previous bug
|
|
my $rmdefault="$::XCATROOT/sbin/chtab -d node=xcatdefaults nodelist";
|
|
$outref = xCAT::Utils->runcmd("$rmdefault", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',"Could not remove xcatdefaults.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Removed xcatdefaults.");
|
|
}
|
|
|
|
# switch from bind.pm to ddns.pm
|
|
# give a warning message for the first time
|
|
my $cmds = "XCATBYPASS=Y $::XCATROOT/sbin/tabdump site 2>/dev/null |grep dnshandler";
|
|
$outref = xCAT::Utils->runcmd("$cmds", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
# set site.dnshandler
|
|
$cmds = "$::XCATROOT/sbin/chtab key=dnshandler site.value=ddns;";
|
|
$outref = xCAT::Utils->runcmd("$cmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',"Could not set ddns as dnshandler.");
|
|
}
|
|
}
|
|
|
|
}
|
|
# remove xcatserver,xcatclient
|
|
# from the postscripts. They are now called by servicenode
|
|
&cleanupPSTable;
|
|
|
|
} # end initial DB install setup
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 check for otherpkgs
|
|
|
|
Check to see if other pkgs exists in postscripts table.
|
|
If it does not we will be putting it in postbootscripts
|
|
return exist_flag
|
|
|
|
exist_flag = 0 does not exist
|
|
exist_flag = 1 exists in postscripts
|
|
exist_flag = 2 exists in postbootscripts
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub checkotherpkgs
|
|
{
|
|
my $otherpkgsexist = 0;
|
|
my $postscriptstab = xCAT::Table->new('postscripts');
|
|
my $attr = "xcatdefaults";
|
|
my @values;
|
|
if ($postscriptstab)
|
|
{
|
|
my $ref = $postscriptstab->getAttribs({node => $attr}, 'postscripts');
|
|
if ($ref)
|
|
{
|
|
@values = $ref->{postscripts};
|
|
if (grep(/otherpkgs/, @values))
|
|
{
|
|
$otherpkgsexist = 1;
|
|
}
|
|
}
|
|
if ($otherpkgsexist == 0)
|
|
{
|
|
|
|
# check postbootscripts
|
|
my $ref = $postscriptstab->getAttribs({node => $attr}, 'postbootscripts');
|
|
if ($ref)
|
|
{
|
|
@values = $ref->{postscripts};
|
|
if (grep(/otherpkgs/, @values))
|
|
{
|
|
$otherpkgsexist = 2;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return $otherpkgsexist;
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 genCredentials
|
|
|
|
Will generate the xCAT credential, if new install or requested to
|
|
regenerate.
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub genCredentials
|
|
|
|
{
|
|
my $hname = `hostname`;
|
|
chomp $hname;
|
|
if ((!-d "/etc/xcat/ca") || $::FORCE || $::genCredentials)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'I',
|
|
"\nSetting up basic certificates. Respond with a \'y\' when prompted.\n"
|
|
);
|
|
my $cmd =
|
|
"echo 'y\ny\ny\ny' |$::XCATROOT/share/xcat/scripts/setup-xcat-ca.sh 'xCAT CA'";
|
|
verbose("Running $cmd");
|
|
my $rc = system($cmd);
|
|
if ($rc >> 8)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create xCAT certificate in /etc/xcat/ca.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I', "Created xCAT certificate.");
|
|
}
|
|
}
|
|
|
|
# copy to postscript directory just non-sensitive files
|
|
my $cmd = "/bin/rm -rf $::INSTALLDIR/postscripts/ca >/dev/null 2>&1";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
$cmd = "/bin/mkdir -m 755 -p $::INSTALLDIR/postscripts/ca";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create $::INSTALLDIR/postscripts/ca directory.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created $::INSTALLDIR/postscripts/ca directory.");
|
|
}
|
|
$cmd = "/bin/cp -p /etc/xcat/ca/ca-cert.pem $::INSTALLDIR/postscripts/ca/ca-cert.pem";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'E',
|
|
"$cmd failed"
|
|
);
|
|
}
|
|
else
|
|
{
|
|
verbose "$cmd succeeded.";
|
|
}
|
|
|
|
if ((!-d "/etc/xcat/cert") || $::FORCE || $::genCredentials)
|
|
{
|
|
my $cmd =
|
|
"echo 'y\ny\ny\ny' |$::XCATROOT/share/xcat/scripts/setup-server-cert.sh $hname";
|
|
verbose("Running $cmd");
|
|
my $rc = system($cmd);
|
|
if ($rc >> 8)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create xCAT certificate in /etc/xcat/cert.");
|
|
}
|
|
else
|
|
{
|
|
if ($::genCredentials) { # if just generating new credentials
|
|
xCAT::MsgUtils->message('I', "Created xCAT certificate.");
|
|
my $chtabcmds =
|
|
"$::XCATROOT/sbin/chtab priority=1.2 policy.name=$hname policy.rule=trusted;";
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not create policy definition.$chtabcmds.");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
# copy to postscript directory, no longer use cert directory
|
|
$cmd = "/bin/rm -rf $::INSTALLDIR/postscripts/cert >/dev/null 2>&1";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
|
|
if ((!-r "$::root/.xcat/client-key.pem") || $::FORCE || $::genCredentials)
|
|
{
|
|
|
|
my $cmd =
|
|
"echo 'y\ny\ny\ny' |$::XCATROOT/share/xcat/scripts/setup-local-client.sh root";
|
|
verbose("Running $cmd");
|
|
my $rc = system($cmd);
|
|
if ($rc >> 8)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create xCAT certificate in /.xcat/client-key.pem.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I', "Created xCAT certificate.");
|
|
}
|
|
}
|
|
|
|
# copy to postscript directory
|
|
$cmd = "/bin/rm -rf $::INSTALLDIR/postscripts/_xcat >/dev/null 2>&1";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
$cmd = "/bin/mkdir -m 755 -p $::INSTALLDIR/postscripts/_xcat";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not create $::INSTALLDIR/postscripts/_xcat directory.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Created $::INSTALLDIR/postscripts/_xcat directory.");
|
|
}
|
|
$cmd = "/bin/cp -p $::root/.xcat/ca.pem $::INSTALLDIR/postscripts/_xcat/ca.pem";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'E',
|
|
"Could not copy $::root/.xcat/ca.pem to $::INSTALLDIR/postscripts/_xcat directory."
|
|
);
|
|
}
|
|
else
|
|
{
|
|
verbose "Copied $::root/.xcat/ca.pem to $::INSTALLDIR/postscripts/_xcat directory.";
|
|
}
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 setupAIXIPMITool
|
|
|
|
Set AIX IPMI Tool
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub setupAIXIPMITool
|
|
|
|
{
|
|
if (!-f "/usr/bin/ipmitool")
|
|
{
|
|
my $cmd = "ln -sf /opt/freeware/bin/ipmitool /usr/bin/ipmitool";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message(
|
|
'E',
|
|
"Could not ln -sf /opt/freeware/bin/ipmitool /usr/bin/ipmitool."
|
|
);
|
|
}
|
|
else
|
|
{
|
|
verbose("ln -sf /opt/freeware/bin/ipmitool /usr/bin/ipmitool.");
|
|
}
|
|
}
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 setupAIXexports
|
|
|
|
Set AIX exports
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub setupAIXexports
|
|
|
|
{
|
|
# check if /install/postscripts is exported
|
|
my $lsnfsexpcmd =
|
|
"/usr/sbin/lsnfsexp -d $::INSTALLDIR/postscripts 2>&1";
|
|
my $outref = xCAT::Utils->runcmd("$lsnfsexpcmd", -1);
|
|
if (($::RUNCMD_RC != 0) || ($outref !~ /-vers=3:4/))
|
|
{
|
|
|
|
# if not exported for both NFS version 3 and version 4,
|
|
# make sure it is exported with -vers=3:4
|
|
my $rmnfsexpcmd = "/usr/sbin/rmnfsexp -d $::INSTALLDIR/postscripts 2>&1";
|
|
xCAT::Utils->runcmd("$rmnfsexpcmd", -1);
|
|
|
|
my $mknfsexpcmd =
|
|
"mknfsexp -d $::INSTALLDIR/postscripts '-B' -v '3,4' -t 'ro'";
|
|
my $outref2 = xCAT::Utils->runcmd("$mknfsexpcmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not export directory $::INSTALLDIR/postscripts.");
|
|
}
|
|
}
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 setupLinuxexports
|
|
|
|
Set Linux exports
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
sub setupLinuxexports
|
|
{
|
|
my $changed_exports = 0;
|
|
|
|
#
|
|
# add tftpboot to /etc/exports - if needed
|
|
#
|
|
|
|
my $cmd = "/bin/cat /etc/exports | grep '$::TFTPDIR'";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
|
|
# ok - then add this entry
|
|
#SECURITY: this has potential for sharing private host/user keys
|
|
my $cmd =
|
|
"/bin/echo '$::TFTPDIR *(rw,no_root_squash,sync,no_subtree_check)' >> /etc/exports";
|
|
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not update the /etc/exports file.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Added $::TFTPDIR to the /etc/exports file.");
|
|
$changed_exports++;
|
|
}
|
|
}
|
|
|
|
#
|
|
# add /install to /etc/exports - if needed
|
|
#
|
|
|
|
$cmd = "/bin/cat /etc/exports | grep '$::INSTALLDIR'";
|
|
$outref = xCAT::Utils->runcmd("$cmd", -1);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
|
|
# ok - then add this entry
|
|
#SECURITY: this has potential for sharing private host/user keys
|
|
my $cmd =
|
|
"/bin/echo '$::INSTALLDIR *(rw,no_root_squash,sync,no_subtree_check)' >> /etc/exports";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not update the /etc/exports file.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Added $::INSTALLDIR to the /etc/exports file.");
|
|
$changed_exports++;
|
|
}
|
|
}
|
|
|
|
if ($changed_exports)
|
|
{
|
|
|
|
# restart nfs
|
|
my $cmd = "/sbin/service nfs restart";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not restart NFS.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I', "NFS has been restarted.");
|
|
}
|
|
|
|
$cmd = "/sbin/chkconfig nfs on";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not enable NFS.");
|
|
}
|
|
else
|
|
{
|
|
verbose("NFS has been enabled.");
|
|
}
|
|
$cmd = "/usr/sbin/exportfs -a";
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Error with $cmd.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Ran $cmd.");
|
|
}
|
|
}
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 mknb
|
|
|
|
Creates a network boot root image on Linux
|
|
Run mknb to put xCAT-genesis-scripts-x86_64 and xCAT-genesis-base-x86_64 together and in /tftpboot
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
sub mknb
|
|
{
|
|
# The xCAT-genesis-scripts.spec file touches /etc/xcat/genesis-scripts-updated so we know to run
|
|
# mknb here.
|
|
if ($::arch eq "x86_64" && (-f '/etc/xcat/genesis-scripts-updated') ) {
|
|
unlink '/etc/xcat/genesis-scripts-updated';
|
|
my $cmd = "$::XCATROOT/sbin/mknb $::arch";
|
|
xCAT::MsgUtils->message('I', "Running '$cmd', triggered by the installation/update of xCAT-genesis-scripts-x86_64 ...");
|
|
#my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
system($cmd);
|
|
if ($? != 0) {
|
|
my $rc = $? >> 8;
|
|
xCAT::MsgUtils->message('E', "The 'mknb $::arch' command returned error code: $rc.");
|
|
}
|
|
else {
|
|
xCAT::MsgUtils->message('I', "The 'mknb $::arch' command completed successfully.");
|
|
}
|
|
}
|
|
}
|
|
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 makenetworks
|
|
|
|
Runs makenetworks on AIX and Linux
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
sub makenetworks
|
|
{
|
|
|
|
# run makenetworks
|
|
my $cmd = "XCATBYPASS=Y $::XCATROOT/sbin/makenetworks";
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
verbose("The makenetworks command returned error: $::RUNCMD_RC");
|
|
}
|
|
else
|
|
{
|
|
verbose("The makenetworks command was run with no error.");
|
|
}
|
|
|
|
|
|
}
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 setuphttp
|
|
|
|
initializes http on Linux
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
sub setuphttp
|
|
{
|
|
|
|
my $cmd;
|
|
# restart httpd
|
|
if (-e "/etc/init.d/apache2")
|
|
{ #for sles/ubuntu
|
|
$cmd = "/etc/init.d/apache2 stop; /etc/init.d/apache2 start";
|
|
}
|
|
else
|
|
{
|
|
$cmd = "/etc/init.d/httpd stop; /etc/init.d/httpd start";
|
|
}
|
|
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not restart httpd.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message('I', "httpd has been restarted.");
|
|
}
|
|
|
|
# enable httpd
|
|
if (-e "/etc/init.d/apache2")
|
|
{
|
|
if (is_lsb_ubuntu() || is_debian() )
|
|
{ # for ubuntu
|
|
$cmd = "/usr/sbin/update-rc.d apache2 enable";
|
|
}
|
|
else
|
|
{ # for sles
|
|
$cmd = "/sbin/chkconfig apache2 on";
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$cmd = "/sbin/chkconfig httpd on";
|
|
}
|
|
$outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not enable httpd.");
|
|
}
|
|
else
|
|
{
|
|
verbose("httpd has been enabled.");
|
|
}
|
|
}
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 cleanupPSTable
|
|
|
|
Any line in the postscripts table that has the following
|
|
entry will have xcatserver,xcatclient remove because they
|
|
are not called by servicenode
|
|
|
|
..."servicenode,xcatserver,xcatclient.."...
|
|
becomes
|
|
..."servicenode,.."...
|
|
|
|
|
|
Any line in the postscripts table that has aixremoteshell,
|
|
aixremoteshell will be replaced by remoteshell unless it is
|
|
already on the line. remoteshell now calls aixremoteshell, if on an
|
|
AIX node.
|
|
|
|
...,"syslog,aixremoteshell,syncfiles",,,
|
|
becomes
|
|
...,"syslog,remoteshell,syncfiles",,,
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
sub cleanupPSTable
|
|
{
|
|
my $rc=0;
|
|
my $tab;
|
|
if ($tab = xCAT::Table->new("postscripts")) {
|
|
my @tableentries = $tab->getAllAttribs('node','postscripts');
|
|
foreach my $entry (@tableentries) {
|
|
my $changeit=0;
|
|
my $node=$entry->{'node'};
|
|
my $pslist=$entry->{'postscripts'}; # get list of postscripts on the line
|
|
if ($pslist) {
|
|
my $servicenode=0;
|
|
my $aixremoteshell=0;
|
|
my $remoteshell=0;
|
|
my $newpslist ="\'";
|
|
my @ps= split(",", $pslist);
|
|
# now check is servicenode and xcatclient and/or xcatserver on the line
|
|
foreach my $pscript (@ps) {
|
|
# check for aixremoteshell, need to replace with remoteshell
|
|
if ($pscript =~ /(^|\|)aixremoteshell($|\|)/i) {
|
|
$aixremoteshell=1;
|
|
}
|
|
if ($pscript =~ /(^|\|)remoteshell($|\|)/i) {
|
|
$remoteshell=1;
|
|
}
|
|
if ($pscript =~ /(^|\|)servicenode($|\|)/i) { # found servicenode ps
|
|
$newpslist .=$pscript;
|
|
$newpslist .=",";
|
|
$servicenode=1;
|
|
} else{ # process rest of ps list
|
|
# if servicenode and aixremoteshell not found on the line go
|
|
# to the next line
|
|
if (($servicenode == 0) && ($aixremoteshell ==0)) {
|
|
$newpslist .=$pscript;
|
|
$newpslist .=",";
|
|
|
|
} else {
|
|
# servicenode found, do not keep xcatserver/xcatclient or
|
|
# aixremoteshell, and no remoteshell replace with remoteshell
|
|
if (($aixremoteshell == 1) && ($remoteshell == 0)) {
|
|
$newpslist .="remoteshell,";
|
|
$changeit=1; # had to replace aixremoteshell
|
|
next;
|
|
}
|
|
# if already put in remoteshell, then skip any more
|
|
# occurances of remoteshell on the line
|
|
if (($aixremoteshell == 1) && ($remoteshell == 1)) {
|
|
next;
|
|
}
|
|
if (($pscript =~ /(^|\|)xcatserver($|\|)/i) ||($pscript =~ /(^|\|)xcatclient($|\|)/i)) {
|
|
$changeit=1; # had to remove xcatserver/xcatclient
|
|
next;
|
|
} else {
|
|
$newpslist .=$pscript;
|
|
$newpslist .=",";
|
|
}
|
|
} # end servicenode processing
|
|
}
|
|
}
|
|
chop $newpslist;
|
|
$newpslist .="\'";
|
|
if ($changeit == 1) { # we had to modify the line
|
|
my $chtabcmds .=
|
|
"$::XCATROOT/sbin/chtab node=$node postscripts.postscripts=$newpslist;";
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E',
|
|
"Could not modify postscripts definition for $node.");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message("E", " Could not open the postscripts table\n");
|
|
return 1;
|
|
}
|
|
|
|
return $rc
|
|
}
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 setupMNinDB
|
|
|
|
Will add/replace the management node to the noderes table with group=__mgmtnode
|
|
Will add/replace the management node to the servicenode tble with group=__mgmtnode
|
|
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
sub setupMNinDB
|
|
{
|
|
my $mnname = `hostname`;
|
|
chomp $mnname;
|
|
$mnname && $mnname =~ s/\..*//; # strip off domain
|
|
|
|
# check to see if MN already defined in the nodelist
|
|
|
|
my $defined = 0;
|
|
my $cmds="XCATBYPASS=Y $::XCATROOT/sbin/tabdump nodelist | grep __mgmtnode";
|
|
my $output = xCAT::Utils->runcmd("$cmds", -1);
|
|
if ($::RUNCMD_RC == 0) # found a management node defined
|
|
{
|
|
my $chtabcmds;
|
|
my @mn = split(",", $output);
|
|
$mn[0] =~ s/"//g; # remove the quotes
|
|
if ($mn[0] ne $mnname) { # does not match current host name,delete it
|
|
$chtabcmds = "$::XCATROOT/sbin/chtab -d node=$mn[0] nodelist;";
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not run $chtabcmds.");
|
|
return;
|
|
}
|
|
} else { # it is defined and good
|
|
xCAT::MsgUtils->message('I', "$mnname already defined in the nodelist table.");
|
|
$defined=1;
|
|
}
|
|
}
|
|
# now add with the new name , if not already there
|
|
if ($defined ==0) {
|
|
my $chtabcmds = "$::XCATROOT/sbin/chtab node=$mnname nodelist.groups=__mgmtnode;";
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not add $mnname to the noderes table.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Added $mnname to the noderes table.");
|
|
}
|
|
|
|
}
|
|
# now add to the servicenode table with default settings
|
|
# check to see if MN already defined in the servicenode table
|
|
my $cmds="XCATBYPASS=Y $::XCATROOT/sbin/tabdump servicenode | grep __mgmtnode";
|
|
my $output = xCAT::Utils->runcmd("$cmds", -1);
|
|
if ($::RUNCMD_RC != 0) # no management node defined
|
|
{
|
|
# add to the servicenode table
|
|
my $chtabcmds;
|
|
if (xCAT::Utils->isLinux()) {
|
|
# always setup tftp
|
|
$chtabcmds=
|
|
"$::XCATROOT/sbin/chtab node=__mgmtnode servicenode.tftpserver=yes ";
|
|
# check setting of site.vsftp to see if we want to setup ftp
|
|
$cmds="XCATBYPASS=Y $::XCATROOT/sbin/tabdump site | grep vsftp";
|
|
$output = xCAT::Utils->runcmd("$cmds", -1);
|
|
if ($::RUNCMD_RC == 0){ # vsftp defined
|
|
# check the setting to see if we want ftp
|
|
my @vals = split(',', $output);
|
|
if ($vals[1] && ($vals[1] !~ /0|NO|No|no|N|n/ )) { # setup ftp
|
|
$chtabcmds .= " servicenode.ftpserver=yes ";
|
|
}
|
|
}
|
|
} else { # AIX, don't define any services just add the MN node
|
|
$chtabcmds =
|
|
"$::XCATROOT/sbin/chtab node=__mgmtnode servicenode.ftpserver=no;";
|
|
}
|
|
|
|
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message('E', "Could not add $mnname to the servicenode table.");
|
|
}
|
|
else
|
|
{
|
|
verbose("Added $mnname to the servicenode table table.");
|
|
}
|
|
|
|
} else { # it was already defined in the servicenode table
|
|
xCAT::MsgUtils->message('I', "$mnname was already defined in the servicenode table.");
|
|
|
|
}
|
|
return;
|
|
}
|
|
#-----------------------------------------------------------------------------
|
|
|
|
=head3 startnamedonboot
|
|
|
|
Configure named to start on boot
|
|
|
|
=cut
|
|
|
|
#-----------------------------------------------------------------------------
|
|
sub startnamedonboot
|
|
{
|
|
# start named on boot
|
|
if (xCAT::Utils->isAIX())
|
|
{
|
|
#/etc/inittab
|
|
my $cmd = "/usr/sbin/lsitab named > /dev/null 2>&1";
|
|
my $rc = system("$cmd") >>8;
|
|
if ($rc != 0)
|
|
{
|
|
#add new entry
|
|
my $mkcmd = qq~/usr/sbin/mkitab "named:2:once:/usr/sbin/named > /dev/console 2>&1"~;
|
|
system("$mkcmd");
|
|
|
|
xCAT::MsgUtils->message("I", "named has been enabled on boot.");
|
|
}
|
|
}
|
|
else
|
|
{
|
|
#chkconfig
|
|
my $serv = "named";
|
|
my $cmd = "/sbin/chkconfig $serv on";
|
|
if ( is_lsb_ubuntu() || is_debian() ){
|
|
$serv = "bind9";
|
|
$cmd = "update-rc.d $serv enable";
|
|
}
|
|
my $outref = xCAT::Utils->runcmd("$cmd", 0);
|
|
if ($::RUNCMD_RC != 0)
|
|
{
|
|
xCAT::MsgUtils->message("E", "Could not enable $serv.");
|
|
}
|
|
else
|
|
{
|
|
xCAT::MsgUtils->message("I", "$serv has been enabled on boot.");
|
|
}
|
|
}
|
|
}
|