PSARC 2015/110 OpenStack service updates for Juno PSARC 2014/302 oslo.messaging - OpenStack RPC and notifications PSARC 2014/303 concurrent.futures - high-level Python interface for asynchronous execution PSARC 2014/304 networkx - Python module for complex networks PSARC 2014/305 taskflow - Python module for task execution PSARC 2014/329 pycadf - Python interface for CADF (cloud auditing) PSARC 2014/330 posix_ipc - POSIX IPC primitives for Python PSARC 2014/331 oauthlib - Python implementation of OAuth request-signing logic PSARC 2015/058 oslo - OpenStack common libraries (context, db, i18n, middleware, serialization, utils, vmware) PSARC 2015/059 glance_store - Glance storage library PSARC 2015/060 ipaddr - an IPv4/IPv6 manipulation library in Python PSARC 2015/061 simplegeneric - single-dispatch generic Python functions PSARC 2015/062 wsme - Web Services Made Easy PSARC 2015/063 retrying - General purpose Python retrying library PSARC 2015/065 osprofiler - an OpenStack cross-project profiling library PSARC 2015/066 OpenStack client for Sahara (Hadoop as a Service) PSARC 2015/067 keystonemiddleware - Middleware for OpenStack Identity PSARC 2015/068 pyScss - Compiler for the SCSS flavor of the Sass language PSARC 2015/069 django-pyscss - pyScss support for Django PSARC 2015/073 barbicanclient - OpenStack client for Barbican (Key Management) PSARC 2015/074 pysendfile - Python interface to sendfile PSARC 2015/097 ldappool - a connection pool for python-ldap PSARC 2015/098 rfc3986 - URI reference validation module for Python PSARC 2015/102 iniparse - python .ini file parsing module 20667775 OpenStack service updates for Juno (Umbrella) 17511386 sqlalchemy-migrate should lose its bypass-gen tags once sqlalchemy is in the CBE 18293987 /usr/bin/alembic should be shipped 18293992 boto's demo scripts aren't delivered executable 18377642 py.test has a requirement on py 18615101 Horizon should prevent network, subnet, and port names with hyphens in them 18772068 instance failed to launch with NoValidHost but no reason 18887457 openstack shouldn't deliver .po files 18905324 hostname.xml should set config/ignore_dhcp_hostname = true 18961031 Duplicate names for role-create and user-create are allowed 19015363 Users should not be allowed to attempt to create volumes when quota exceed 19044301 boto's dependencies need work 19050335 user appears logged in but unauthorised after horizon reboot 19065699 cinderclient-34 lost in recent upgrade 19131218 solaris.css: 'Delete Interface' button in Router pop-up menu broken 19131507 solaris.css: 'Project Limits' section of Launch Instance pop-up menu broken 19144215 Instance manipulation buttons greyed out after all instances terminated 19249066 heat stack-preview doesn't appear to do anything 19313272 Need bottom slidebar in horizon for small browser windows 19439030 'nova migration-list' returns python error 19462265 The Python module oslo.messaging should be added to Userland 19462397 The Python module futures should be added to Userland 19476604 The Python module networkx should be added to Userland 19476953 The Python module taskflow should be added to Userland 19519227 The Python module pycadf should be added to Userland 19582394 The Python module posix_ipc should be added to Userland 19596691 instance failed to launch, cinder hit resource busy in stmfadm 19598430 The Python module oauthlib should be added to Userland 19649055 FC connection fails when the target_lun is assigned 0 19815780 nova package should have dependencies on brand-solaris and brand-solaris-kz 19883623 Image snapshots are missing 'instance_uuid' property 19887874 horizon should set up apache log rotation 19888859 six should enable its tests now. 19987962 Cinder lists additional volumes attached to instance with linuxy device names 20027791 horizon should be migrated to Apache 2.4 20046570 rabbitmq & rad-evs-controller should be added to group package 20052466 remove _ai_health_check() from driver.py now that 18857274 is integrated 20164815 The Python module django-pyscss should be added to Userland 20173049 The Python module retrying should be added to Userland 20174489 The Python module WSME should be added to Userland 20176001 The Python module keystonemiddleware should be added to Userland 20182039 The Python module pysendfile should be added to Userland 20200162 The Python module pyScss should be added to Userland 20222184 horizon doesn't send start request on shutdown instance 20312312 The Python module python-saharaclient should be added to Userland 20388250 problem in SERVICE/GLANCE 20433402 The fix for 20388250 is incomplete 20514287 wrong vnic label name used for dhcp vnic in evs 20596802 The Python module oslo.middleware should be added to Userland 20596803 The Python module barbicanclient should be added to Userland 20596804 The Python module oslo.context should be added to Userland 20596805 The Python module iniparse should be added to Userland 20596806 The Python module oslo.vmware should be added to Userland 20596807 The Python module osprofiler should be added to Userland 20596808 The Python module oslo.i18n should be added to Userland 20596809 The Python module oslo.utils should be added to Userland 20596811 The Python module ipaddr should be added to Userland 20596812 The Python module glance_store should be added to Userland 20596813 The Python module oslo.serialization should be added to Userland 20596814 The Python module oslo.db should be added to Userland 20596815 The Python module simplegeneric should be added to Userland 20602690 The Python module ldappool should be added to Userland 20602722 The Python module rfc3986 should be added to Userland 20638369 compilemessages.py requires GNU msgfmt without calling gmsgfmt 20715741 cinder 2014.2.2 20715742 glance 2014.2.2 20715743 heat 2014.2.2 20715744 horizon 2014.2.2 20715745 keystone 2014.2.2 20715746 neutron 2014.2.2 20715747 nova 2014.2.2 20715748 swift 2.2.2 20715749 alembic 0.7.4 20715750 amqp 1.4.6 20715751 boto 2.34.0 20715752 ceilometerclient 1.0.12 20715753 cinderclient 1.1.1 20715754 cliff 1.9.0 20715756 django 1.4.19 20739229 Update django to 1.4.20 20715757 django_compressor 1.4 20715758 django_openstack_auth 1.1.9 20715759 eventlet 0.15.2 20715761 glanceclient 0.15.0 20715762 greenlet 0.4.5 20715763 heatclient 0.2.12 20715764 keystoneclient 1.0.0 20715765 kombu 3.0.7 20715766 mysql 1.2.5 20715767 netaddr 0.7.13 20715769 netifaces 0.10.4 20715770 neutronclient 2.3.10 20715771 novaclient 2.20.0 20715772 oslo.config 1.6.0 20715773 py 1.4.26 20715774 pyflakes 0.8.1 20715775 pytest 2.6.4 20715776 pytz 2014.10 20715777 requests 2.6.0 20715778 simplejson 3.6.5 20715779 six 1.9.0 20715780 sqlalchemy-migrate 0.9.1 20715781 sqlalchemy 0.9.8 20715782 stevedore 1.2.0 20715783 swiftclient 2.3.1 20715784 tox 1.8.1 20715785 troveclient 1.0.8 20715786 virtualenv 12.0.7 20715787 websockify 0.6.0 20739215 problem in PYTHON-MOD/DJANGO 20739295 problem in PYTHON-MOD/DJANGO 20816861 zone-vnc-console instance goes in to maintenance 20829672 support flat network type in neutron

     1

#!/usr/bin/python2.6

     2

     3

# Copyright (c) 2014, 2015, Oracle and/or its affiliates. All rights reserved.

     4

#

     5

#    Licensed under the Apache License, Version 2.0 (the "License"); you may

     6

#    not use this file except in compliance with the License. You may obtain

     7

#    a copy of the License at

     8

#

     9

#         http://www.apache.org/licenses/LICENSE-2.0

    10

#

    11

#    Unless required by applicable law or agreed to in writing, software

    12

#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT

    13

#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the

    14

#    License for the specific language governing permissions and limitations

    15

#    under the License.

    16

    17

import os

    18

import re

    19

import sys

    20

    21

import netaddr

    22

import smf_include

    23

    24

from subprocess import CalledProcessError, Popen, PIPE, check_call

    25

    26

    27

def set_hostmodel(value):

    28

    cmd = ["/usr/sbin/ipadm", "show-prop", "-p", "hostmodel",

    29

           "-co", "current", "ipv4"]

    30

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

    31

    output, error = p.communicate()

    32

    if p.returncode != 0:

    33

        print "failed to retrieve hostmodel ipadm property"

    34

        return False

    35

    if output.strip() == value:

    36

        return True

    37

    cmd = ["/usr/sbin/ipadm", "set-prop", "-t", "-p", "hostmodel=%s" % value,

    38

           "ipv4"]

    39

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

    40

    output, error = p.communicate()

    41

    if p.returncode != 0:

    42

        print "failed to set ipadm hostmodel property to %s" % value

    43

        return False

    44

    return True

    45

    46

    47

def start():

    48

    # verify paths are valid

    49

    for f in sys.argv[2:4]:

    50

        if not os.path.exists(f) or not os.access(f, os.R_OK):

    51

            print '%s does not exist or is not readable' % f

    52

            return smf_include.SMF_EXIT_ERR_CONFIG

    53

    54

    # System-wide forwarding (either ipv4 or ipv6 or both) must be enabled

    55

    # before neutron-l3-agent can be started.

    56

    cmd = ["/usr/sbin/ipadm", "show-prop", "-c", "-p", "forwarding",

    57

           "-o", "current", "ipv4"]

    58

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

    59

    output, error = p.communicate()

    60

    if p.returncode != 0:

    61

        print "failed to determine if IPv4 forwarding is enabled or not"

    62

        return smf_include.SMF_EXIT_ERR_FATAL

    63

    v4fwding = "on" in output

    64

    65

    cmd = ["/usr/sbin/ipadm", "show-prop", "-c", "-p", "forwarding",

    66

           "-o", "current", "ipv6"]

    67

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

    68

    output, error = p.communicate()

    69

    if p.returncode != 0:

    70

        print "failed to determine if IPv6 forwarding is enabled or not"

    71

        return smf_include.SMF_EXIT_ERR_FATAL

    72

    v6fwding = "on" in output

    73

    74

    if not any((v4fwding, v6fwding)):

    75

        print "System-wide IPv4 or IPv6 (or both) forwarding must be " \

    76

              "enabled before enabling neutron-l3-agent"

    77

        return smf_include.SMF_EXIT_ERR_CONFIG

    78

    79

    # set the hostmodel property if necessary

    80

    if not set_hostmodel("src-priority"):

    81

        return smf_include.SMF_EXIT_ERR_FATAL

    82

    83

    cmd = "/usr/lib/neutron/neutron-l3-agent --config-file %s " \

    84

        "--config-file %s" % tuple(sys.argv[2:4])

    85

    smf_include.smf_subprocess(cmd)

    86

    87

    88

def remove_ipfilter_rules(version):

    89

    # remove IP Filter rules added by neutron-l3-agent

    90

    cmd = ["/usr/bin/pfexec", "/usr/sbin/ipfstat", "-io"]

    91

    if version == 6:

    92

        cmd.insert(2, "-6")

    93

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

    94

    output, error = p.communicate()

    95

    if p.returncode != 0:

    96

        print "failed to retrieve IP Filter rules"

    97

        return smf_include.SMF_EXIT_ERR_FATAL

    98

    99

    ipfilters = output.splitlines()

   100

    # L3 agent IP Filter rules are of the form

   101

    # block in quick on l3i64cbb496_a_0 from ... to pool/15417332

   102

    prog = re.compile('on l3i[0-9A-Fa-f\_]{10}_0')

   103

    ippool_names = []

   104

    for ipf in ipfilters:

   105

        if not prog.search(ipf):

   106

            continue

   107

        # capture the IP pool name

   108

        if 'pool/' in ipf:

   109

            ippool_names.append(ipf.split('pool/')[1])

   110

   111

        try:

   112

            # remove the IP Filter rule

   113

            p = Popen(["echo", ipf], stdout=PIPE)

   114

            cmd = ["/usr/bin/pfexec", "/usr/sbin/ipf", "-r", "-f", "-"]

   115

            if version == 6:

   116

                cmd.insert(2, "-6")

   117

            check_call(cmd, stdin=p.stdout)

   118

        except CalledProcessError as err:

   119

            print "failed to remove IP Filter rule %s: %s" % (ipf, err)

   120

            return smf_include.SMF_EXIT_ERR_FATAL

   121

   122

    # remove IP Pools added by neutron-l3-agent

   123

    for ippool_name in ippool_names:

   124

        try:

   125

            check_call(["/usr/bin/pfexec", "/usr/sbin/ippool", "-R",

   126

                        "-m", ippool_name, "-t", "tree"])

   127

        except CalledProcessError as err:

   128

            print "failed to remove IP Pool %s: %s" % (ippool_name, err)

   129

            return smf_include.SMF_EXIT_ERR_FATAL

   130

    return smf_include.SMF_EXIT_OK

   131

   132

   133

def stop():

   134

    try:

   135

        # first kill the SMF contract

   136

        check_call(["/usr/bin/pkill", "-c", sys.argv[2]])

   137

    except CalledProcessError as err:

   138

        print "failed to kill the SMF contract: %s" % (err)

   139

        return smf_include.SMF_EXIT_ERR_FATAL

   140

   141

    # We need to first remove the IP filter rules and then remove

   142

    # the IP interfaces on which the rules were applied.

   143

   144

    # remove IPv4 Filter rules added by neutron-l3-agent

   145

    rv = remove_ipfilter_rules(4)

   146

    if rv != smf_include.SMF_EXIT_OK:

   147

        return rv

   148

   149

    # remove IPv6 Filter rules added by neutron-l3-agent

   150

    rv = remove_ipfilter_rules(6)

   151

    if rv != smf_include.SMF_EXIT_OK:

   152

        return rv

   153

   154

    # remove IP NAT rules added by neutron-l3-agent

   155

    cmd = ["/usr/bin/pfexec", "/usr/sbin/ipnat", "-lR"]

   156

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

   157

    output, error = p.communicate()

   158

    if p.returncode != 0:

   159

        print "failed to retrieve IP NAT rules"

   160

        return smf_include.SMF_EXIT_ERR_FATAL

   161

   162

    ipnat_rules = output.splitlines()

   163

    # L3 agent IP NAT rules are of the form

   164

    # bimap l3e64ccc496_a_0 .... OR

   165

    # rdr l3iedf345cc96_a_0 ....

   166

    prog = re.compile('l3[ie][0-9A-Fa-f\_]{10}_0')

   167

    for ipnat_rule in ipnat_rules:

   168

        if not prog.search(ipnat_rule):

   169

            continue

   170

        # remove the IP NAT rule

   171

        try:

   172

            p = Popen(["echo", ipnat_rule], stdout=PIPE)

   173

            check_call(["/usr/bin/pfexec", "/usr/sbin/ipnat", "-r", "-f", "-"],

   174

                       stdin=p.stdout)

   175

        except CalledProcessError as err:

   176

            print "failed to remove IP NAT rule %s: %s" % (ipnat_rule, err)

   177

            return smf_include.SMF_EXIT_ERR_FATAL

   178

   179

    # remove VNICs associated with L3 agent

   180

    cmd = ["/usr/sbin/ipadm", "show-if", "-p", "-o", "ifname"]

   181

    p = Popen(cmd, stdout=PIPE, stderr=PIPE)

   182

    output, error = p.communicate()

   183

    if p.returncode != 0:

   184

        print "failed to retrieve IP interface names"

   185

        return smf_include.SMF_EXIT_ERR_CONFIG

   186

   187

    ifnames = output.splitlines()

   188

    # L3 agent datalinks are always 15 characters in length. They start

   189

    # with either 'l3i' or 'l3e', end with '_0', and in between they are

   190

    # hexadecimal digits.

   191

    prog = re.compile('l3[ie][0-9A-Fa-f\_]{10}_0')

   192

    for ifname in ifnames:

   193

        if not prog.search(ifname):

   194

            continue

   195

        try:

   196

            # first remove the IP

   197

            check_call(["/usr/bin/pfexec", "/usr/sbin/ipadm", "delete-ip",

   198

                        ifname])

   199

            # next remove the VNIC

   200

            check_call(["/usr/bin/pfexec", "/usr/sbin/dladm", "delete-vnic",

   201

                        ifname])

   202

        except CalledProcessError as err:

   203

            print "failed to remove datalinks used by L3 agent: %s" % (err)

   204

            return smf_include.SMF_EXIT_ERR_FATAL

   205

   206

    # finally reset the hostmodel property

   207

    if not set_hostmodel("weak"):

   208

        return smf_include.SMF_EXIT_ERR_FATAL

   209

    return smf_include.SMF_EXIT_OK

   210

   211

if __name__ == "__main__":

   212

    os.putenv("LC_ALL", "C")

   213

    smf_include.smf_main()