Class: Simp::Cli::Commands::Bootstrap

Inherits:
Simp::Cli
  • Object
show all
Defined in:
lib/simp/cli/commands/bootstrap.rb

Constant Summary

Constants inherited from Simp::Cli

VERSION

Class Method Summary collapse

Methods inherited from Simp::Cli

help, menu

Class Method Details

.ensure_running(port = nil) ⇒ Object

Ensure the puppetserver is running ca on the specified port. Used ensure the puppetserver service is running.



37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
 
# File 'lib/simp/cli/commands/bootstrap.rb', line 37

def self.ensure_running(port = nil)
  if port == nil
    port = `puppet config print ca_port`.strip
  end
  begin
    running = (%x{curl -sS --cert /var/lib/puppet/ssl/certs/`hostname`.pem --key /var/lib/puppet/ssl/private_keys/`hostname`.pem -k -H "Accept: s" https://localhost:#{port}/production/certificate_revocation_list/ca 2>&1} =~ /CRL/)
    unless running
      system('puppet resource service puppetserver ensure="running" enable=true > /dev/null 2>&1 &')
      stages = %w{. o O @ *}
      rest = 0.4
      timeout = 5

      Timeout::timeout(timeout*60) {
        while not running do
          running = (%x{curl -sS --cert /var/lib/puppet/ssl/certs/`hostname`.pem --key /var/lib/puppet/ssl/private_keys/`hostname`.pem -k -H "Accept: s" https://localhost:#{port}/production/certificate_revocation_list/ca 2>&1} =~ /CRL/)
          stages.each{ |x|
            $stdout.flush
            print "Waiting for Puppet Server to Start  " + x + "\r"
            sleep(rest)
          }
        end
      }
      $stdout.flush
      puts
    end
  rescue Timeout::Error
    fail("The Puppet Server did not start within #{timeout} minutes. Please start puppetserver by hand and inspect any issues.")
  end
end

.run(args = []) ⇒ Object 



121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
 
# File 'lib/simp/cli/commands/bootstrap.rb', line 121

def self.run(args = [])
  super

  bootstrap_start_time = Time.now

  # Set us up to use the SIMP environment. Be careful to preserve the
  # existing 'production' environment if one exists.
  environment_path = '/etc/puppet/environments'
  simp_env = "#{environment_path}/simp"

  fail("Could not find the environment path at #{environment_path}") unless File.exist?(environment_path)

  Dir.chdir(environment_path) do
    fail("Could not find a 'simp' installation at #{simp_env}") unless File.exist?(simp_env)

    if File.exist?('production')
      if File.symlink?('production')
        unless File.readlink('production') == 'simp'
          FileUtils.mv('production',"pre_simp_production_#{bootstrap_start_time.to_i}")
        end
      else
          FileUtils.mv('production',"pre_simp_production_#{bootstrap_start_time.to_i}")
      end
    end

    FileUtils.ln_s('simp','production') unless File.exist?('production')
  end

  linecounts = Array.new

  # Open log file
  logfilepath = File.expand_path('~/.simp/simp_bootstrap.log')
  FileUtils.mkpath(File.dirname(logfilepath)) unless File.exists?(logfilepath)
  @logfile = File.open(logfilepath, 'w')

  # Define the puppet command call and the run command options
  pupcmd = "/usr/bin/puppet agent --pluginsync --onetime --no-daemonize --no-show_diff --verbose --no-splay --masterport=8150 --ca_port=8150"
  pupruns = [
    'pki,stunnel,concat',
    'firstrun,concat',
    'rsync,concat,apache,iptables',
    'user',
    'group'
  ]

  # Print intro
  system('clear')
  puts
  puts "*** Starting SIMP Bootstrap ***"
  puts "   If this runs quickly, something wrong happened. To debug the problem,"
  puts "   run 'puppet agent --test' by hand or read the log. The log can be found"
  puts "   at '#{@logfile.path}'."
  puts

  # Kill all puppet processes and stop specific services
  puts "Killing all Puppet processes, httpd and removing Puppet ssl certs.\n\n" if @verbose
  system("pkill -9 -f puppetmasterd >& /dev/null")
  system("pkill -9 -f puppet >& /dev/null")
  system('pkill -f pserver_tmp')
  system("puppet resource service puppetserver ensure=stopped >& /dev/null")
  system("puppet resource service httpd ensure=stopped >& /dev/null")
  FileUtils.rm_rf(Dir.glob('/var/lib/puppet/ssl'))
  FileUtils.rm_f(Dir.glob('/var/run/puppet/*'))
  FileUtils.touch('/.autorelabel')

  puts "*** Starting the Puppetmaster ***"
  puts

  FileUtils.mkdir_p('/var/lib/puppet/pserver_tmp')
  FileUtils.chown('puppet','puppet','/var/lib/puppet/pserver_tmp')
  system(%{puppet resource simp_file_line puppetserver path='/etc/sysconfig/puppetserver' match='^JAVA_ARGS' line='JAVA_ARGS="-Xms2g -Xmx2g -XX:MaxPermSize=256m -Djava.io.tmpdir=/var/lib/puppet/pserver_tmp"' 2>&1 > /dev/null})
  system(%{puppet resource simp_file_line puppetserver path='/etc/puppetserver/conf.d/webserver.conf' match='^\\s*ssl-host' line='    ssl-host = 0.0.0.0' 2>&1 > /dev/null})
  system(%{puppet resource simp_file_line puppetserver path='/etc/puppetserver/conf.d/webserver.conf' match='^\\s*ssl-port' line='    ssl-port = 8150' 2>&1 > /dev/null})

  puts

  puts "Beginning Puppet agent runs ..."
  pupruns.each do |puprun|
    puts "... with tag#{puprun.include?(',') ? 's' : ''} '#{puprun}'"
    linecounts << track_output("#{pupcmd} --tags #{puprun} 2> /dev/null", '8150')
  end

  puts

  if Facter.value(:selinux) && !Facter.value(:selinux_current_mode).nil? && (Facter.value(:selinux_current_mode) != "disabled")
    puts 'Relabeling filesystem for selinux...'
    @logfile.puts('Relabeling filesystem for selinux.')
    system("fixfiles -f relabel >> #{@logfile.path} 2>&1")
  end

  puts "*** Running Puppet Finalization ***"
  puts

  # First run of puppet without tags will configure puppetserver, causing
  # a refresh of the puppetserver service.
  track_output("#{pupcmd}",'8150')

  # From this point on, run puppet without specifying the masterport since
  # puppetserver is configured.
  pupcmd = "puppet agent --pluginsync --onetime --no-daemonize --no-show_diff --verbose --no-splay"

  # Run puppet agent up to 3X to get slapd running (unless it already is)
  # If this fails, LDAP is probably not configured right
  i = 0
  while (i < 3) && !system('/bin/ps -C slapd >& /dev/null') do
    # No longer running puppet against 8150.
    track_output("#{pupcmd}")
    i = i + 1
  end
  if (i == 3) && $use_ldap
    puts "   \033[1mWarning\033[0m: It does not look like LDAP was properly configured to start."
    puts "   Please check your configuration."
  else
    # At this point, we should be connected to LDAP properly.
    # Run puppet up to 3 additional times if we can't verify that we're actually connected!
    j = 0
    while (j < 3) && !system('getent group administrators >& /dev/null') do
      track_output("#{pupcmd}")
      j = j + 1
    end
    if j == 3
      puts "   \033[1mWarning\033[0m: Could not find the administrators group."
      puts "   Please check your configuration."
    end
    puts "Puppet Finalization - Done!"
  end

  # Clean up the leftover puppetserver process (if any)
  begin
    pserver_proc = %x{netstat -tlpn}.split("\n").select{|x| x =~ /\d:8150/}
    unless pserver_proc.empty?
      pserver_pid = pserver_proc.first.split.last.split('/').first.to_i
      Process.kill('KILL',pserver_pid)
    end
  rescue Exception => e
    puts e
    puts "The Puppet Server process running on port 8150 could not be killed. Please check your configuration!"
  end

  # Print closing banner
  puts
  puts "*** SIMP Bootstrap Complete! ***"
  puts "Duration of complete bootstrap: #{Time.now - bootstrap_start_time} seconds" if @verbose

  if !system('ps -C httpd 2>&1 > /dev/null') && (linecounts.include?(-1) || (linecounts.uniq.length < linecounts.length))
    puts "   \033[1mWarning\033[0m: Primitive checks indicate there may have been issues."
    puts "   Check '#{@logfile.path}' for details."
    puts "   Please run 'puppet agent -t' by hand to debug your configuration."
  else
    puts
    puts "You should \033[1mreboot\033[0m your system to ensure consistency at this point."
  end
  puts
end

.track_output(command, port = nil) ⇒ Object

Track a running process by following its STDOUT output Prints a ‘#’ for each line of output returns -1 if error occured, otherwise the line count if PTY.spawn succeeded



70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
 
# File 'lib/simp/cli/commands/bootstrap.rb', line 70

def self.track_output(command, port = nil)
  ensure_running(port)
  successful = true

  @logfile.print '#' * 80
  @logfile.puts("\nStarting #{command}\n")

  start_time = Time.now
  linecount = 0
  if @track
    print 'Track => '
    begin
      ::PTY.spawn("#{command}") do |read, write, pid|
        begin
          read.each do |line|
            print '#'
            @logfile.puts(line)
            linecount += 1
          end
        rescue Errno::EIO
        end
      end
    rescue PTY::ChildExited => e
      print '!!!'
      @logfile.puts("Child exited unexpectedly:\n\t#{e.message}")
      successful = false
    rescue
      # If we don't have a PTY, just run the command.
      @logfile.puts "Running without a PTY!"
      output = %x{#{command}}
      @logfile.puts output
      linecount = output.split("\n").length
      successful = false if $? != 0
    end
  else # don't track
    print "Running, please wait ... "
    $stdout.flush
    output = %x{#{command}}
    @logfile.puts output
    linecount = output.split("\n").length
    successful = false if $? != 0
  end
  puts " Done!"
  @logfile.puts("\n#{command} - Done!")
  end_time = Time.now
  puts "Duration of Puppet run: #{end_time - start_time} seconds" if @verbose
  @logfile.puts("Duration of Puppet run: #{end_time - start_time} seconds")

  return successful ? linecount : -1
end