arif/xcat-core
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
de809309f4
xcat-core/xCAT-server-2.0/sbin/xcatconfig
nott bb240e7708 Allow prompting from certificate setup scripts. 
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@327 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2008-01-25 17:40:04 +00:00

540 lines
16 KiB
Perl
Raw Blame History

#!/usr/bin/perl
# IBM(c) 2007 EPL license http://www.eclipse.org/legal/epl-v10.html
#
#####################################################
#
# This is script is called during the initial installation of xCAT
# It can also be called directly to redo the xcat configuration
#
#####################################################
BEGIN
{
$::XCATROOT = $ENV{'XCATROOT'} ? $ENV{'XCATROOT'} : '/opt/xcat';
$::XCATDIR = $ENV{'XCATDIR'} ? $ENV{'XCATDIR'} : '/etc/xcat';
}
use lib "$::XCATROOT/lib/perl";
use xCAT::Utils;
use Getopt::Long;
use xCAT::MsgUtils;
use Socket;
$::progname = "xcatconfig";
Getopt::Long::Configure("bundling") ;
$Getopt::Long::ignorecase=0;
# parse the options
if(!GetOptions(
'f|force' => \$::FORCE,
'h|help' => \$::HELP,
'v|version' => \$::VERSION,))
{
&usage;
exit(1);
}
# display the usage if -h or --help is specified
if ($::HELP) {
&usage;
exit(0);
}
# display the version statement if -v or --verison is specified
if ($::VERSION)
{
xCAT::MsgUtils->message('I', "$::progname: version 1.0\n");
exit(0);
}
$::osname=`uname`;
chomp $::osname;
if ($::osname eq 'AIX') {
$::arch=`uname -p`;
$::root = "";
} else {
$::arch=`uname -m`;
$::root = "/root";
}
chomp $::arch;
chomp $::root;
#
# Generate ssh keys
#
if ( (! -f "/install/postscripts/hostkeys/ssh_host_key") || $::FORCE){
# create /install/postscripts/.ssh if needed
if ( ! -d "/install/postscripts/hostkeys" ) {
my $cmd = "/bin/mkdir -p /install/postscripts/hostkeys";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not create /install/postscripts/hostkeys directory.\n");
} else {
xCAT::MsgUtils->message('I', "Created /install/postscripts/hostkeys directory.\n");
}
}
if ($::FORCE){
# remove the old keys
my $cmd = "/bin/rm /install/postscripts/hostkeys/ssh_host*";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not remove ssh keys from /install/postscripts/hostkeys directory.\n");
} else {
xCAT::MsgUtils->message('I', "Removed ssh keys from /install/postscripts/hostkeys directory.\n");
}
}
xCAT::MsgUtils->message('I', "Generating SSH1 RSA Key...\n");
my $cmd = "/usr/bin/ssh-keygen -t rsa1 -f /install/postscripts/hostkeys/ssh_host_key -C '' -N ''";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not generate SSH1 RSA key.\n");
}
xCAT::MsgUtils->message('I', "Generating SSH2 RSA Key...\n");
my $cmd = "/usr/bin/ssh-keygen -t rsa -f /install/postscripts/hostkeys/ssh_host_rsa_key -C '' -N ''";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not generate SSH2 RSA key.\n");
}
xCAT::MsgUtils->message('I', "Generating SSH2 DSA Key...\n");
my $cmd = "/usr/bin/ssh-keygen -t dsa -f /install/postscripts/hostkeys/ssh_host_dsa_key -C '' -N ''";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not generate SSH2 DSA key.\n");
}
}
#
# create .ssh dir if needed
#
my $sshdir = "$::root/.ssh";
if ( ! -d $sshdir ) {
my $cmd = "/bin/mkdir -m 700 -p $sshdir";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not create $sshdir directory.\n");
} else {
xCAT::MsgUtils->message('I', "Created $sshdir directory.\n");
}
}
#
# create or modify the -/.ssh/config file
#
my $cfgfile = "$::root/.ssh/config";
if (( -f $cfgfile ) || $::FORCE) {
# it exists - so see if it needs to be updated - ???????? check!!!
# xCAT::MsgUtils->message('I', "Checking for \'StrictHostKeyChecking no\' in $cfgfile.\n");
my $cmd = "/bin/cat $cfgfile | grep 'StrictHostKeyChecking no'";
my $outref = xCAT::Utils->runcmd("$cmd", -1);
if ($::RUNCMD_RC != 0) {
# ok - then add this entry
my $cmd = "/bin/echo StrictHostKeyChecking no >> $cfgfile; chmod 600 $cfgfile";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not update the $cfgfile file.\n");
} else {
xCAT::MsgUtils->message('I', "Added updates to the $cfgfile file.\n");
}
}
} else {
# file doesn't exist so just create it
my $cmd = "/bin/echo StrictHostKeyChecking no > $cfgfile; chmod 600 $cfgfile";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not update the $cfgfile file.\n");
} else {
xCAT::MsgUtils->message('I', "Added updates to the $cfgfile file.\n");
}
}
#
# create /install/postscripts/.ssh if needed
#
if ( ! -d "/install/postscripts/.ssh" ) {
my $cmd = "/bin/mkdir -p /install/postscripts/.ssh";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not create /install/postscripts/.ssh directory.\n");
} else {
xCAT::MsgUtils->message('I', "Created /install/postscripts/.ssh directory.\n");
}
}
#
# Generate id_rsa.pub
#
my $pubfile = "$::root/.ssh/id_rsa.pub";
my $rsafile = "$::root/.ssh/id_rsa";
if (( ! -r $pubfile ) || $::FORCE) {
if ($::FORCE){
# remove the old file
my $cmd = "/bin/rm $::root/.ssh/id_rsa*";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not remove id_rsa files from $::root/.ssh directory.\n");
} else {
xCAT::MsgUtils->message('I', "Removed id_rsa files from $::root/.ssh directory.\n");
}
}
my $cmd = "/usr/bin/ssh-keygen -t rsa -q -b 2048 -N '' -f $rsafile";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not generate $pubfile.\n");
} else {
xCAT::MsgUtils->message('I', "Generated $pubfile.\n");
# copy it
my $cmd = "/bin/cp $pubfile /install/postscripts/.ssh/authorized_keys";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not copy $pubfile to /install/postscripts/.ssh/authorized_keys.\n");
} else {
xCAT::MsgUtils->message('I', "Copied $pubfile to /install/postscripts/.ssh/authorized_keys.\n");
}
}
}
#
# create /var/log/consoles if needed
#
if ( ! -d "/var/log/consoles" ) {
my $cmd = "/bin/mkdir -p /var/log/consoles";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not create /var/log/consoles directory.\n");
} else {
xCAT::MsgUtils->message('I', "Created /var/log/consoles directory.\n");
}
}
# some Linux-only config
if ($::osname eq 'Linux') {
my $changed_exports=0;
#
# add tftpboot to /etc/exports - if needed
#
my $cmd = "/bin/cat /etc/exports | grep '/tftpboot'";
my $outref = xCAT::Utils->runcmd("$cmd", -1);
if ($::RUNCMD_RC != 0)
{
# ok - then add this entry
#SECURITY: this has potential for sharing private host/user keys
my $cmd = "/bin/echo '/tftpboot *(rw,root_squash,sync)' >> /etc/exports";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not update the /etc/exports file.\n");
} else {
xCAT::MsgUtils->message('I', "Added /tftpboot to the /etc/exports file.\n");
$changed_exports++;
}
}
#
# add /install to /etc/exports - if needed
#
my $cmd = "/bin/cat /etc/exports | grep '/install'";
my $outref = xCAT::Utils->runcmd("$cmd", -1);
if ($::RUNCMD_RC != 0)
{
# ok - then add this entry
#SECURITY: this has potential for sharing private host/user keys
my $cmd = "/bin/echo '/install *(ro,no_root_squash,sync)' >> /etc/exports";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not update the /etc/exports file.\n");
} else {
xCAT::MsgUtils->message('I', "Added /install to the /etc/exports file.\n");
$changed_exports++;
}
}
if ($changed_exports) {
# restart nfs
my $cmd = "/sbin/service nfs restart";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
my $cmd = "/sbin/chkconfig nfs on";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not enable NFS.\n");
} else {
xCAT::MsgUtils->message('I', "NFS has been restarted.\n");
}
}
} # - some Linux-only config
#
# create basic site definition
#
my $hname = `hostname`;
chomp $hname;
# some values common to both AIX & Linux
my $xcatport = "3001";
my $xcatiport = "3002";
my $installdir = "/install";
my ($name, $aliases, $addrtype, $length, @addrs) = gethostbyname($hname);
my $master = inet_ntoa($addrs[0]);
# set value based on OS
my ($domain, $timezone);
if ($::osname eq 'AIX') {
($domain = $hname) =~ s/^.*?\.//;
$timezone = $ENV{'TZ'};
} else {
$domain = `hostname -d`;
my $tz;
if ( -f "/etc/redhat-release") {
# on Redhat look for "ZONE"
$tz = `grep ^ZONE /etc/sysconfig/clock|cut -d= -f 2|sed -e 's/"//g'`;
} else {
# on SuSE look for "TIMEZONE"
$tz = `grep ^TIMEZONE /etc/sysconfig/clock|cut -d= -f 2|sed -e 's/"//g'`;
}
$timezone = $tz;
}
chomp $timezone;
chomp $master;
chomp $domain;
# create basic site definition
if (( ! -r "/etc/xcat/site.sqlite" ) || $::FORCE){
my $chtabcmds;
$chtabcmds = "$::XCATROOT/sbin/chtab key=xcatdport site.value=$xcatport;";
$chtabcmds .= "$::XCATROOT/sbin/chtab key=xcatiport site.value=$xcatiport;";
$chtabcmds .= "$::XCATROOT/sbin/chtab key=installdir site.value=$installdir;";
$chtabcmds .= "$::XCATROOT/sbin/chtab key=master site.value=$master;";
$chtabcmds .= "$::XCATROOT/sbin/chtab key=domain site.value=$domain;";
$chtabcmds .= "$::XCATROOT/sbin/chtab key=timezone site.value=$timezone";
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not create site definition.\n");
} else {
xCAT::MsgUtils->message('I', "Updated cluster site definition.\n");
}
}
# create basic policy definition.
if (( ! -r "/etc/xcat/policy.sqlite" ) || $::FORCE) {
my $chtabcmds;
if ($::osname eq 'AIX' ) {
$chtabcmds = "$::XCATROOT/sbin/chtab priority=1 policy.name=root policy.rule=allow";
} else {
$chtabcmds = "$::XCATROOT/sbin/chtab priority=1 policy.name=root policy.rule=allow;";
$chtabcmds .= "$::XCATROOT/sbin/chtab priority=2 policy.commands=getbmcconfig policy.rule=allow;";
$chtabcmds .= "$::XCATROOT/sbin/chtab priority=3 policy.commands=nextdestiny policy.rule=allow;";
$chtabcmds .= "$::XCATROOT/sbin/chtab priority=4 policy.commands=getdestiny policy.rule=allow";
}
my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not create policy definition.\n");
} else {
xCAT::MsgUtils->message('I', "Created policy definition.\n");
}
}
#
# set up the certificates for xcatd
#
if (( ! -d "/etc/xcat/ca" ) || $::FORCE) {
xCAT::MsgUtils->message('I', "\nSetting up basic certificates. Respond with a \'y\' when prompted.\n\n");
my $cmd = "$::XCATROOT/share/xcat/scripts/setup-xcat-ca.sh 'xCAT CA'";
xCAT::MsgUtils->message('I', "Running $cmd\n");
my $rc = system($cmd);
if ($rc >> 8)
{
xCAT::MsgUtils->message('E', "Could not create xCAT certificate in /etc/xcat/ca.\n");
} else {
xCAT::MsgUtils->message('I', "Created xCAT certificate.\n");
}
}
if (( ! -d "/etc/xcat/cert" ) || $::FORCE) {
my $cmd = "$::XCATROOT/share/xcat/scripts/setup-server-cert.sh $hname";
xCAT::MsgUtils->message('I', "Running $cmd\n");
my $rc = system($cmd);
if ($rc >> 8)
{
xCAT::MsgUtils->message('E', "Could not create xCAT certificate in /etc/xcat/cert.\n");
} else {
xCAT::MsgUtils->message('I', "Created xCAT certificate.\n");
}
}
if ( ( ! -r "$::root/.xcat/client-key.pem") || $::FORCE){
my $cmd = "$::XCATROOT/share/xcat/scripts/setup-local-client.sh root";
xCAT::MsgUtils->message('I', "Running $cmd\n");
my $rc = system($cmd);
if ($rc >> 8)
{
xCAT::MsgUtils->message('E', "Could not create xCAT certificate in /.xcat/client-key.pem.\n");
} else {
xCAT::MsgUtils->message('I', "Created xCAT certificate.\n");
}
}
#
# if this is a re-config then stop the xcatd processes
#
if ($::FORCE) {
my @xpids = xCAT::Utils->runcmd("ps -ef\|grep \"xcatd\"", 0);
xCAT::MsgUtils->message('I', "Stopping xcatd processes....\n");
foreach $ps (@xpids)
{
$ps =~ s/^\s+//; # strip any leading spaces
my ($uid, $pid, $ppid, $desc) = split /\s+/, $ps;
# if $ps contains "grep" then it's not one of the daemon processes
if ( $ps !~/grep/)
{
# print "pid=$pid\n";
my $cmd = "/bin/kill -9 $pid";
xCAT::Utils->runcmd($cmd, 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not stop xcatd process $pid.\n");
}
}
}
}
#
# start xcatd
#
xCAT::MsgUtils->message('I', "Starting xcatd.....\n");
my $xcmd;
if ($::osname eq 'AIX') {
$xcmd = "$::XCATROOT/sbin/xcatd &";
} else {
$xcmd = "/etc/init.d/xcatd start";
}
my $outref = xCAT::Utils->runcmd("$xcmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not start xcatd.\n");
}
# more - Linux-only config
if ($::osname eq 'Linux') {
#Zap the almost certainly wrong pxelinux.cfg file
if ( -f "/tftpboot/pxelinux.cfg/default") {
$cmd = "/bin/rm /tftpboot/pxelinux.cfg/default";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not remove /tftpboot/pxelinux.cfg/default\n");
} else {
xCAT::MsgUtils->message('I', "Removed /tftpboot/pxelinux.cfg/default.\n");
}
}
# run mknb
if ($::arch eq "x86_64") {
my $cmd = "$::XCATROOT/sbin/mknb x86_64";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "The mknb command returned error: $::RUNCMD_RC.\n");
} else {
xCAT::MsgUtils->message('I', "The mknb command was run with no error.\n");
}
}
# run makenetworks
my $cmd = "$::XCATROOT/sbin/makenetworks";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "The makenetworks command returned error: $::RUNCMD_RC.\n");
} else {
xCAT::MsgUtils->message('I', "The makenetworks command was run with no error.\n")
}
# set the nameserver in the site table
my @names = xCAT::Utils->runcmd("/bin/grep nameserver /etc/resolv.conf | cut -d' ' -f 2", 0);
my $ns = join(',',@names);
my $cmd = "$::XCATROOT/sbin/chtab key=nameservers site.value=$ns";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "The chtab command returned error: $::RUNCMD_RC.\n");
} else {
xCAT::MsgUtils->message('I', "Updated the site definition with the value of the nameserver.\n");
}
# restart httpd
my $cmd = "/sbin/service httpd restart";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not restart httpd.\n");
} else {
xCAT::MsgUtils->message('I', "httpd has been restarted.\n");
}
# enable httpd
my $cmd = "/sbin/chkconfig httpd on";
my $outref = xCAT::Utils->runcmd("$cmd", 0);
if ($::RUNCMD_RC != 0)
{
xCAT::MsgUtils->message('E', "Could not enable httpd.\n");
} else {
xCAT::MsgUtils->message('I', "httpd has been enabled.\n");
}
my $linux_note= "xCAT is now installed, it is recommended to tabedit networks \nand set a dynamic ip address range on any networks where nodes \nare to be discovered. Then, run makedhcp -n to create a new dhcpd \nconfiguration file, and \/etc\/init.d\/dhcpd restart. Either examine sample \nconfiguration templates, or write your own, or specify a value per \nnode with nodeadd or tabedit.\n";
xCAT::MsgUtils->message('I', $linux_note);
} #End - more - Linux-only config
exit;
#####################################
# subroutines
#####################################
sub usage {
xCAT::MsgUtils->message('I', "Usage:\n");
xCAT::MsgUtils->message('I', "xcatconfig - Performs basic xCAT configuration on an xCAT management node.\n\n");
xCAT::MsgUtils->message('I', " xcatconfig [-h|--help] [-f|--force]\n\n");
}
Reference in New Issue View Git Blame Copy Permalink