JimV-C/jimvn.install.sh

#!/usr/bin/env bash
#
# JimV-N
#
# Copyright (C) 2017 JimV <james.iter.cn@gmail.com>
#
# Author: James Iter <james.iter.cn@gmail.com>
#
#  This script will help you automatically installed JimV-N.
#

export SHOW_WARNING_VTX=false

ARGS=`getopt -o h --long host:,token:,version:,help -n 'INSTALL.sh' -- "$@"`

eval set -- "${ARGS}"

while true
do
    case "$1" in
        --host)
            export HOST=$2
            shift 2
            ;;
        --token)
            export TOKEN=$2
            shift 2
            ;;
        --version)
            export JIMV_VERSION=$2
            shift 2
            ;;
        -h|--help)
            echo 'INSTALL.sh [-h|--help|--version] {--host,--token}'
            exit 0
            ;;
        --)
            shift
            break
            ;;
        *)
            echo "Internal error!"
            exit 1
            ;;
    esac
done

function check_precondition() {
    source /etc/os-release
    case ${ID} in
    centos|fedora|rhel)
        if [[ ${VERSION_ID} -lt 7 ]]; then
            echo "系统版本号必须大于等于 7，检测到当前的系统版本号为 ${VERSION_ID}."
	        exit 1
        fi
        ;;
    *)
        echo "系统发行版 ${ID} 未被支持，请手动完成安装。"
	    exit 1
        ;;
    esac

    if [[ `egrep -c '(vmx|svm)' /proc/cpuinfo` -eq 0 ]]; then
        export SHOW_WARNING_VTX=true
    fi

    if [[ ! ${JIMV_VERSION} ]] || [[ ${#JIMV_VERSION} -eq 0 ]]; then
        export JIMV_VERSION='master'
    fi

    if [[ ! ${HOST} ]] || [[ ${#HOST} -eq 0 ]]; then
        echo "你需要指定参数 '--host'"
        exit 1
    fi

    if [[ ! ${TOKEN} ]] || [[ ${#TOKEN} -eq 0 ]]; then
        echo "你需要指定参数 '--token'"
        exit 1
    fi

    yum install epel-release -y
    yum install jq net-tools bind-utils -y
    yum install redis -y

    # 代替语句 ifconfig | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0.1'
    SERVER_IP=`hostname -I`; export SERVER_IP=${SERVER_IP%% *}
    export SERVER_NETMASK=`ifconfig | grep ${SERVER_IP} | grep -Eo 'netmask ?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*'`
    export GATEWAY=`route -n | grep '^0.0.0.0' | awk '{ print $2; }'`
    export DNS1=`nslookup 127.0.0.1 | grep Server | grep -Eo '([0-9]*\.){3}[0-9]*'`
    export NIC=`ifconfig | grep ${SERVER_IP} -B 1 | head -1 | cut -d ':' -f 1`
    export NODE_ID=`python -c "with open('/etc/machine-id', 'r') as f: _str = f.read().strip(); import string; import hashlib; m = hashlib.md5(); m.update(_str); print int(string.atoi(m.hexdigest(), 16).__str__()[:16])"`

    JOIN_RESPONSE=`curl http://${HOST}/api/misc/_join/${NODE_ID}/${TOKEN}`

    export REDIS_HOST=`echo ${JOIN_RESPONSE} | jq -r '.data.redis_host'`
    export REDIS_PORT=`echo ${JOIN_RESPONSE} | jq -r '.data.redis_port'`
    export REDIS_PSWD=`echo ${JOIN_RESPONSE} | jq -r '.data.redis_password'`
    export VM_NETWORK=`echo ${JOIN_RESPONSE} | jq -r '.data.vm_network'`
    export VM_NETWORK_MANAGE=`echo ${JOIN_RESPONSE} | jq -r '.data.vm_manage_network'`

    if [[ ! ${REDIS_HOST} ]] || [[ ${#REDIS_HOST} -eq 0 ]] || [[ ${REDIS_HOST} == null ]]; then
        echo "请确认到 ${HOST} 的连通性，或 /etc/machine-id 与集群中其它节点冲突。"
        echo "详情: ${JOIN_RESPONSE}"
        exit 1
    fi

    if [[ ! ${REDIS_PORT} ]] || [[ ${#REDIS_PORT} -eq 0 ]] || [[ ${REDIS_HOST} == null ]]; then
        echo "请确认到 ${HOST} 的连通性，或 /etc/machine-id 与集群中其它节点冲突。"
        echo "详情: ${JOIN_RESPONSE}"
        exit 1
    fi

    if [[ ! ${REDIS_PSWD} ]] || [[ ${#REDIS_PSWD} -eq 0 ]] || [[ ${REDIS_HOST} == null ]]; then
        echo "请确认到 ${HOST} 的连通性，或 /etc/machine-id 与集群中其它节点冲突。"
        echo "详情: ${JOIN_RESPONSE}"
        exit 1
    fi

    if [[ ! ${VM_NETWORK} ]] || [[ ${#VM_NETWORK} -eq 0 ]] || [[ ${REDIS_HOST} == null ]]; then
        echo "请确认到 ${HOST} 的连通性，或 /etc/machine-id 与集群中其它节点冲突。"
        echo "详情: ${JOIN_RESPONSE}"
        exit 1
    fi

    if [[ ! ${VM_NETWORK_MANAGE} ]] || [[ ${#VM_NETWORK_MANAGE} -eq 0 ]] || [[ ${REDIS_HOST} == null ]]; then
        echo "请确认到 ${HOST} 的连通性，或 /etc/machine-id 与集群中其它节点冲突。"
        echo "详情: ${JOIN_RESPONSE}"
        exit 1
    fi

    REDIS_RESPONSE='x_'`redis-cli -h ${REDIS_HOST} -a ${REDIS_PSWD} -p ${REDIS_PORT} --raw ping`

    if [[ ${REDIS_RESPONSE} != 'x_PONG' ]]; then
        echo "Redis 连接失败，请检查参数 --host, --token 是否正确。"
        exit 1
    fi
}

function custom_repository_origin() {
    mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
    mv /etc/yum.repos.d/epel.repo /etc/yum.repos.d/epel.repo.backup
    mv /etc/yum.repos.d/epel-testing.repo /etc/yum.repos.d/epel-testing.repo.backup
    curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
    curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
    sed -i '/aliyuncs/d' /etc/yum.repos.d/*.repo
    yum clean all
    yum makecache
}

function clear_up_environment() {
    systemctl stop firewalld
    systemctl disable firewalld
    systemctl stop NetworkManager
    systemctl disable NetworkManager

    sed -i 's@SELINUX=enforcing@SELINUX=disabled@g' /etc/sysconfig/selinux
    sed -i 's@SELINUX=enforcing@SELINUX=disabled@g' /etc/selinux/config
    setenforce 0
}

function install_libvirt_and_libguestfish() {
    # 安装 libvirt
    cat > /etc/yum.repos.d/JimV.repo << EOF
[JimV]
name=JimV - \$basearch
baseurl=http://repo.jimv.cn/centos/7/os/\$basearch
        http://repo.jimv.io/centos/7/os/\$basearch
        http://repo.iit.im/centos/7/os/\$basearch
failovermethod=priority
enabled=1
gpgcheck=0
gpgkey=https://repo.jimv.cn/RPM-GPG-KEY-JIMV-114EA591
EOF

    uname -m | grep -q 'x86_64'  && echo 'centos' >/etc/yum/vars/contentdir || echo 'altarch' >/etc/yum/vars/contentdir
    yum install centos-release-qemu-ev -y
    yum install jimv-node -y
    yum install librbd1-10.2.5 -y
}

function tune_linux_kernel_parameters() {
    sed -i '/^net.ipv4.ip_local_port_range/d' /etc/sysctl.conf
    echo 'net.ipv4.ip_local_port_range = 15900 20000' >> /etc/sysctl.conf
    sysctl -p
}

function handle_ssh_client_config() {
    # 关闭 SSH 服务器端 Key 校验
    sed -i 's@.*StrictHostKeyChecking.*@StrictHostKeyChecking no@' /etc/ssh/ssh_config
}

function handle_net_bonding_bridge() {
    # 参考地址: https://access.redhat.com/documentation/zh-cn/red_hat_enterprise_linux/7/html/networking_guide/
cat > /etc/sysconfig/network-scripts/ifcfg-${VM_NETWORK} << EOF
DEVICE=${VM_NETWORK}
NAME=${VM_NETWORK}
TYPE=Bridge
BOOTPROTO=static
ONBOOT=yes
DELAY=0
IPADDR=${SERVER_IP}
NETMASK=${SERVER_NETMASK}
GATEWAY=${GATEWAY}
DNS1=${DNS1}
DNS2=8.8.8.8
IPV6INIT=no
EOF

cat > /etc/sysconfig/network-scripts/ifcfg-bond0 << EOF
DEVICE=bond0
NAME=bond0
TYPE=Bond
BRIDGE=${VM_NETWORK}
BONDING_MASTER=yes
ONBOOT=yes
BOOTPROTO=none
BONDING_OPTS="mode=balance-alb xmit_hash_policy=layer3+4"
EOF

cat > /etc/sysconfig/network-scripts/ifcfg-${NIC} << EOF
DEVICE=${NIC}
NAME=${NIC}
TYPE=Ethernet
BOOTPROTO=none
ONBOOT=yes
MASTER=bond0
SLAVE=yes
EOF

    /etc/init.d/network restart
}

function create_network_bridge_in_libvirt() {

cat > /etc/libvirt/qemu/networks/${VM_NETWORK}.xml << EOF
<network>
    <uuid>the_uuid</uuid>
    <name>${VM_NETWORK}</name>
    <forward mode="bridge"/>
    <bridge name="${VM_NETWORK}"/>
</network>
EOF

    sed -i "s@the_uuid@`uuidgen`@" /etc/libvirt/qemu/networks/${VM_NETWORK}.xml

    # 去除默认的 default 网络定义
    rm -f /etc/libvirt/qemu/networks/default.xml /etc/libvirt/qemu/networks/autostart/default.xml

    # 使其随服务自动创建
    cd /etc/libvirt/qemu/networks/autostart/
    ln -s ../${VM_NETWORK}.xml ${VM_NETWORK}.xml
}

function start_libvirtd() {
    systemctl stop dnsmasq
    systemctl disable dnsmasq
    systemctl enable libvirtd
    systemctl start libvirtd
}

function generate_config_file() {
    sed -i "s/\"redis_host\".*$/\"redis_host\": \"${REDIS_HOST}\",/" /etc/jimvn.conf
    sed -i "s/\"redis_password\".*$/\"redis_password\": \"${REDIS_PSWD}\",/" /etc/jimvn.conf
    sed -i "s/\"redis_port\".*$/\"redis_port\": \"${REDIS_PORT}\",/" /etc/jimvn.conf
}

function start_JimVN() {
    systemctl start jimvn.service
    systemctl enable jimvn.service
}

function display_summary_information() {
    echo
    echo "=== 信息汇总"
    echo "==========="
    echo

    if [[ ${SHOW_WARNING_VTX} = true ]]; then
        echo "警告：请检查 CPU 是否开启 VT 技术。未开启 VT 技术的计算节点，将以 QEMU 模式运行虚拟机。"
        echo
    fi

    echo "已经通过 'systemctl enable jimvn.service' 把 JimV-N 注册为随系统启动的服务。"
    echo "您还可以通过命令 'systemctl [start|stop|status] jimvn.service' 来管理本机的 JimV-N。"
    echo
}

function deploy() {
    check_precondition
    custom_repository_origin
    clear_up_environment
    install_libvirt_and_libguestfish
    tune_linux_kernel_parameters
    handle_ssh_client_config
    handle_net_bonding_bridge
    create_network_bridge_in_libvirt
    start_libvirtd
    generate_config_file
    start_JimVN
    display_summary_information
}

deploy