|
|
"""Example for Cloud Computing Course Master AI / GSD"""
# This script demonstrates how to use libcloud to start an instance in an OpenStack environment.# The script will create start multiple instances splitting up the faafo monolithic application into# a (minimalistic but already scalable) microservice architecture.# Also introduces the concept of different security groups and corresponding frontend/backend# separation.
# Needed if the password should be prompted for:# import getpassimport osimport sys
from libcloud.compute.providers import get_driverfrom libcloud.compute.types import Provider
# For our new Charmed OpenStack private cloud, we need to specify the path to the root# CA certificateimport libcloud.securitylibcloud.security.CA_CERTS_PATH = ['./root-ca.crt']# Disable SSL certificate verification (not recommended for production)# libcloud.security.VERIFY_SSL_CERT = False
# Please use 1-29 as environment variable GROUP_NUMBER to specify your group number.# (will be used for the username, project etc., as coordinated in the lab sessions)
group_number = os.environ.get('GROUP_NUMBER')if group_number is None: sys.exit('Please set the GROUP_NUMBER environment variable to your group number,\n' 'e.g., on Windows:\n' ' "$env:GROUP_NUMBER=0" or "set GROUP_NUMBER=0"\n' 'or on Linux/MacOS:\n' ' "export GROUP_NUMBER=0" or "set GROUP_NUMBER=0"')
# web service endpoint of the private cloud infrastructure# auth_url = 'https://private-cloud.informatik.hs-fulda.de:5000'AUTH_URL = 'https://10.32.4.182:5000'# auth_url = 'https://private-cloud2.informatik.hs-fulda.de:5000'# your username in OpenStackAUTH_USERNAME = 'CloudComp' + str(group_number)print(f'Using username: {AUTH_USERNAME}\n')# your project in OpenStackPROJECT_NAME = 'CloudComp' + str(group_number)# A network in the project the started instance will be attached toPROJECT_NETWORK = 'CloudComp' + str(group_number) + '-net'
# The image to look for and use for the started instance# ubuntu_image_name = "Ubuntu 18.04 - Bionic Beaver - 64-bit - Cloud Based Image"UBUNTU_IMAGE_NAME = "auto-sync/ubuntu-jammy-22.04-amd64-server-20240319-disk1.img"
# The public key to be used for SSH connection, please make sure, that you have the# corresponding private key## id_rsa.pub should look like this (standard sshd pubkey format):# ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw+J...F3w2mleybgT1w== user@HOSTNAME
KEYPAIR_NAME = 'srieger-pub'PUB_KEY_FILE = '~/.ssh/id_rsa.pub'
FLAVOR_NAME = 'm1.small'
# default regionREGION_NAME = 'RegionOne'# domain to use, "default" for local accounts, formerly "hsfulda" for LDAP accounts etc.# domain_name = "default"
def main(): # noqa: C901 pylint: disable=too-many-branches,too-many-statements,too-many-locals,missing-function-docstring ########################################################################### # # get credentials # ###########################################################################
# if "OS_PASSWORD" in os.environ: # auth_password = os.environ["OS_PASSWORD"] # else: # auth_password = getpass.getpass("Enter your OpenStack password:") auth_password = "demo"
########################################################################### # # create connection # ###########################################################################
provider = get_driver(Provider.OPENSTACK) conn = provider(AUTH_USERNAME, auth_password, ex_force_auth_url=AUTH_URL, ex_force_auth_version='3.x_password', ex_tenant_name=PROJECT_NAME, ex_force_service_region=REGION_NAME) # ex_domain_name=domain_name)
########################################################################### # # get image, flavor, network for instance creation # ###########################################################################
images = conn.list_images() image = '' for img in images: if img.name == UBUNTU_IMAGE_NAME: image = img
flavors = conn.list_sizes() flavor = '' for flav in flavors: if flav.name == FLAVOR_NAME: flavor = conn.ex_get_size(flav.id)
networks = conn.ex_list_networks() network = '' for net in networks: if net.name == PROJECT_NETWORK: network = net
########################################################################### # # create keypair dependency # ###########################################################################
print('Checking for existing SSH key pair...') keypair_exists = False for keypair in conn.list_key_pairs(): if keypair.name == KEYPAIR_NAME: keypair_exists = True
if keypair_exists: print('Keypair ' + KEYPAIR_NAME + ' already exists. Skipping import.') else: print('adding keypair...') conn.import_key_pair_from_file(KEYPAIR_NAME, PUB_KEY_FILE)
for keypair in conn.list_key_pairs(): print(keypair)
########################################################################### # # create security group dependency # ###########################################################################
print('Checking for existing worker security group...') security_group_name = 'worker' security_group_exists = False worker_security_group = '' for security_group in conn.ex_list_security_groups(): if security_group.name == security_group_name: worker_security_group = security_group security_group_exists = True
if security_group_exists: print('Worker Security Group ' + worker_security_group.name + ' already exists. ' 'Skipping creation.') else: worker_security_group = conn.ex_create_security_group('worker', 'for services ' 'that run on a worker node') conn.ex_create_security_group_rule(worker_security_group, 'TCP', 22, 22)
print('Checking for existing controller security group...') security_group_name = 'control' security_group_exists = False controller_security_group = '' for security_group in conn.ex_list_security_groups(): if security_group.name == security_group_name: controller_security_group = security_group security_group_exists = True
if security_group_exists: print('Controller Security Group ' + controller_security_group.name + ' already exists. ' 'Skipping creation.') else: controller_security_group = conn.ex_create_security_group('control', 'for services that ' 'run on a control node') conn.ex_create_security_group_rule(controller_security_group, 'TCP', 22, 22) conn.ex_create_security_group_rule(controller_security_group, 'TCP', 80, 80) conn.ex_create_security_group_rule(controller_security_group, 'TCP', 5672, 5672, source_security_group=worker_security_group)
for security_group in conn.ex_list_security_groups(): print(security_group)
########################################################################### # # create app-controller # ###########################################################################
# https://git.openstack.org/cgit/openstack/faafo/plain/contrib/install.sh # is currently broken, hence the "rabbitctl" lines were added in the example # below, see also https://bugs.launchpad.net/faafo/+bug/1679710 # # Thanks to Stefan Friedmann for finding this fix ;) # TODO: still needed for new version of faafo and Ubuntu 22.04?
userdata = '#!/usr/bin/env bash\n' \ 'curl -L -s https://gogs.informatik.hs-fulda.de/srieger/cloud-computing-msc-ai-' \ 'examples/raw/master/faafo/contrib/install.sh | bash -s -- ' \ '-i messaging -i faafo -r api\n' \ 'rabbitmqctl add_user faafo guest\n' \ 'rabbitmqctl set_user_tags faafo administrator\n' \ 'rabbitmqctl set_permissions -p / faafo ".*" ".*" ".*"\n' print('\nUsing cloud-init userdata:\n"' + userdata + '"\n')
print('Starting new app-controller instance and wait until it is running...') instance_controller_1 = conn.create_node(name='app-controller', image=image, size=flavor, networks=[network], ex_keyname=KEYPAIR_NAME, ex_userdata=userdata, ex_security_groups=[controller_security_group])
conn.wait_until_running(nodes=[instance_controller_1], timeout=120, ssh_interface='private_ips')
########################################################################### # # assign app-controller floating ip # ###########################################################################
print('Checking for unused Floating IP...') unused_floating_ip = None for floating_ip in conn.ex_list_floating_ips(): if not floating_ip.node_id: unused_floating_ip = floating_ip break
if not unused_floating_ip: pool = conn.ex_list_floating_ip_pools()[0] print(f'Allocating new Floating IP from pool: {pool}') unused_floating_ip = pool.create_floating_ip()
conn.ex_attach_floating_ip_to_node(instance_controller_1, unused_floating_ip) print(f'Controller Application will be deployed to http://{unused_floating_ip.ip_address}') actual_ip_address = unused_floating_ip.ip_address
########################################################################### # # getting id and ip address of app-controller instance # ###########################################################################
# instance should not have a public ip? floating ips are assigned later instance_controller_1 = conn.ex_get_node_details(instance_controller_1.id) ip_controller = '' if instance_controller_1.public_ips: ip_controller = instance_controller_1.public_ips[0] else: ip_controller = instance_controller_1.private_ips[0]
########################################################################### # # create app-worker-1 # ###########################################################################
userdata = '#!/usr/bin/env bash\n' \ 'curl -L -s https://gogs.informatik.hs-fulda.de/srieger/cloud-computing-msc-ai-' \ 'examples/raw/master/faafo/contrib/install.sh | bash -s -- ' \ f'-i faafo -r worker -e "http://{ip_controller}" -m "amqp://faafo:guest@' \ f'{ip_controller}:5672/\n' print('\nUsing cloud-init userdata:\n"' + userdata + '"\n')
print('Starting new app-worker-1 instance and wait until it is running...') instance_worker_1 = conn.create_node(name='app-worker-1', image=image, size=flavor, networks=[network], ex_keyname=KEYPAIR_NAME, ex_userdata=userdata, ex_security_groups=[worker_security_group])
conn.wait_until_running(nodes=[instance_worker_1], timeout=120, ssh_interface='private_ips')
########################################################################### # # assign app-worker floating ip # ###########################################################################
print('Checking for unused Floating IP...') unused_floating_ip = None for floating_ip in conn.ex_list_floating_ips(): if not floating_ip.node_id: unused_floating_ip = floating_ip break
if not unused_floating_ip: pool = conn.ex_list_floating_ip_pools()[0] print(f'Allocating new Floating IP from pool: {pool}') unused_floating_ip = pool.create_floating_ip()
conn.ex_attach_floating_ip_to_node(instance_worker_1, unused_floating_ip) print(f'The worker will be available for SSH at {unused_floating_ip.ip_address}')
print('\n\n#### Deployment finished\n\n') print('After some minutes, as soon as cloud-init installed required packages and the\n' 'faafo app, (First App Application For OpenStack) fractals demo will be available\n' f'at http://{actual_ip_address}\n')
print('You can use ssh to login to the controller using your private key.\n' f'E.g., "ssh -i ~/.ssh/id_rsa ubuntu@{actual_ip_address}". After login,\n' 'you can list available fractals using "faafo list". To request the generation of\n' 'new fractals, you can use "faafo create". \n' 'You can also see other options to use the faafo example cloud service using ' '"faafo -h".')
if __name__ == '__main__': main()
|
