#!/usr/bin/env bash

# Copyright 2014, Rackspace US, Inc.

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

#

# (c) 2014, Kevin Carter <kevin.carter@rackspace.com>

## Shell Opts ----------------------------------------------------------------

set -e -u -x

## Vars ----------------------------------------------------------------------

export HTTP_PROXY=${HTTP_PROXY:-""}

export HTTPS_PROXY=${HTTPS_PROXY:-""}

# The Ansible version used for testing

export ANSIBLE_PACKAGE=${ANSIBLE_PACKAGE:-"ansible-core==2.19.6"}

export ANSIBLE_ROLE_FILE=${ANSIBLE_ROLE_FILE:-"ansible-role-requirements.yml"}

export ANSIBLE_COLLECTION_FILE=${ANSIBLE_COLLECTION_FILE:-"ansible-collection-requirements.yml"}

export USER_COLLECTION_FILE=${USER_COLLECTION_FILE:-"user-collection-requirements.yml"}

export USER_ANSIBLE_REQUIREMENTS_FILE=${USER_ANSIBLE_REQUIREMENTS_FILE:-"${OSA_CONFIG_DIR:-/etc/openstack_deploy}/user-ansible-venv-requirements.txt"}

export USER_ROLE_FILE=${USER_ROLE_FILE:-"user-role-requirements.yml"}

export SSH_DIR=${SSH_DIR:-"/root/.ssh"}

export DEBIAN_FRONTEND=${DEBIAN_FRONTEND:-"noninteractive"}

# check whether to install the ARA callback plugin

export SETUP_ARA=${SETUP_ARA:-"false"}

# Use pip opts to add options to the pip install command.

# This can be used to tell it which index to use, etc.

export PIP_OPTS=${PIP_OPTS:-""}

export OSA_WRAPPER_BIN="${OSA_WRAPPER_BIN:-scripts/openstack-ansible.sh}"

# This script should be executed from the root directory of the cloned repo

cd "$(dirname "${0}")/.."

## Functions -----------------------------------------------------------------

info_block "Checking for required libraries." 2> /dev/null ||

source scripts/scripts-library.sh

## Main ----------------------------------------------------------------------

info_block "Bootstrapping System with Ansible"

# Store the clone repo root location

export OSA_CLONE_DIR="$(pwd)"

# Set the variable to the role file to be the absolute path

ANSIBLE_ROLE_FILE="$(readlink -f "${ANSIBLE_ROLE_FILE}")"

ANSIBLE_COLLECTION_FILE="$(readlink -f "${ANSIBLE_COLLECTION_FILE}")"

OSA_INVENTORY_PATH="$(readlink -f inventory)"

OSA_ANSIBLE_PYTHON_INTERPRETER="auto"

# Create the ssh dir if needed

ssh_key_create

# Determine the distribution which the host is running on

determine_distro

# Install the python interpreters

case ${DISTRO_FAMILY} in

*"rhel"*)

dnf -y install python3 python3-devel python3-libselinux

;;

*"debian"*)

apt-get update

DEBIAN_FRONTEND=noninteractive apt-get -y install \

python3 python3-dev \

python3-minimal python3-apt \

python3-venv

;;

esac

# Install the base packages

case ${DISTRO_FAMILY} in

*"rhel"*)

dnf -y install \

git-core /usr/bin/curl gcc gcc-c++ nc \

systemd-devel pkgconf \

openssl-devel libffi-devel \

rsync wget

;;

*"debian"*)

apt-get update

DEBIAN_FRONTEND=noninteractive apt-get -y install \

git-core curl gcc \

libssl-dev libffi-dev \

libsystemd-dev pkg-config \

wget sudo

;;

esac

# Ensure we use the HTTPS/HTTP proxy with pip if it is specified

if [ -n "$HTTPS_PROXY" ]; then

PIP_OPTS+=" --proxy $HTTPS_PROXY"

elif [ -n "$HTTP_PROXY" ]; then

PIP_OPTS+=" --proxy $HTTP_PROXY"

fi

if [ -f "${USER_ANSIBLE_REQUIREMENTS_FILE}" ]; then

PIP_OPTS+=" --requirement $USER_ANSIBLE_REQUIREMENTS_FILE"

fi

PYTHON_EXEC_PATH="${PYTHON_EXEC_PATH:-$(which python3)}"

# Obtain the SHA of the upper-constraints to use for the ansible runtime venv

TOX_CONSTRAINTS_SHA=$(awk '/requirements_git_install_branch:/ {print $2}' inventory/group_vars/all/source_git.yml)

# if we are in CI, grab the u-c file from the locally cached repo, otherwise download

TOX_CONSTRAINTS_PATH="/opt/ansible-runtime-constraints-${TOX_CONSTRAINTS_SHA}.txt"

if [[ -z "${ZUUL_SRC_PATH+defined}" || ! -d "${ZUUL_SRC_PATH:-''}" ]]; then

wget ${TOX_CONSTRAINTS_FILE:-"https://opendev.org/openstack/requirements/raw/${TOX_CONSTRAINTS_SHA}/upper-constraints.txt"} -O ${TOX_CONSTRAINTS_PATH}

else

git --git-dir=${ZUUL_SRC_PATH}/opendev.org/openstack/requirements/.git show ${TOX_CONSTRAINTS_SHA}:upper-constraints.txt > ${TOX_CONSTRAINTS_PATH}

fi

export TOX_CONSTRAINTS_FILE="file://${TOX_CONSTRAINTS_PATH}"

if [[ -z "${SKIP_OSA_RUNTIME_VENV_BUILD+defined}" ]]; then

build_ansible_runtime_venv

fi

# Install and export the ARA callback plugin

if [ "${SETUP_ARA}" == "true" ]; then

setup_ara

fi

# Get current code version (this runs at the root of OSA clone)

export CURRENT_OSA_VERSION=$(cd /tmp; /opt/ansible-runtime/bin/python -c "from importlib.metadata import version; print(version('openstack-ansible'))")

# Ensure that Ansible binaries run from the venv

pushd /opt/ansible-runtime/bin

for ansible_bin in $(ls -1 ansible* openstack-ansible-*); do

if [ "${ansible_bin}" == "ansible" ] || [ "${ansible_bin}" == "ansible-playbook" ]; then

# For the 'ansible' and 'ansible-playbook' commands we want to use our wrapper

ln -sf /usr/local/bin/openstack-ansible /usr/local/bin/${ansible_bin}

else

# For any other commands, we want to link directly to the binary

ln -sf /opt/ansible-runtime/bin/${ansible_bin} /usr/local/bin/${ansible_bin}

fi

done

popd

# Write the OSA Ansible rc file

sed "s|OSA_INVENTORY_PATH|${OSA_INVENTORY_PATH}|g" scripts/openstack-ansible.rc > /usr/local/bin/openstack-ansible.rc

sed -i "s|OSA_ANSIBLE_PYTHON_INTERPRETER|${OSA_ANSIBLE_PYTHON_INTERPRETER}|g" /usr/local/bin/openstack-ansible.rc

sed -i "s|OSA_ANSIBLE_FORKS|${ANSIBLE_FORKS}|g" /usr/local/bin/openstack-ansible.rc

# Create openstack ansible wrapper tool

cp -v ${OSA_WRAPPER_BIN} /usr/local/bin/openstack-ansible

# Mark the current OSA git repo clone directory, so we don't need to compute it every time.

sed -i "s|OSA_CLONE_DIR|${OSA_CLONE_DIR}|g" /usr/local/bin/openstack-ansible

# Mark the current OSA version in the wrapper, so we don't need to compute it every time.

sed -i "s|CURRENT_OSA_VERSION|${CURRENT_OSA_VERSION}|g" /usr/local/bin/openstack-ansible

# Create an auto-completion script

if [ -d /etc/bash_completion.d ]; then

cp -v scripts/bash-completion /etc/bash_completion.d/openstack-ansible

fi

# Ensure wrapper tool is executable

chmod +x /usr/local/bin/openstack-ansible

echo "openstack-ansible wrapper created."

# If the Ansible plugins are in the old location remove them.

[[ -d "/etc/ansible/plugins" ]] && rm -rf "/etc/ansible/plugins"

# Update dependent roles

# NOTE(cloudnull): When bootstrapping we don't want ansible to interact

# with our plugins by default. This change will force

# ansible to ignore our plugins during this process.

export ANSIBLE_LIBRARY="${OSA_CLONE_DIR}/playbooks/library"

export ANSIBLE_LOOKUP_PLUGINS="/dev/null"

export ANSIBLE_FILTER_PLUGINS="/dev/null"

export ANSIBLE_ACTION_PLUGINS="/dev/null"

export ANSIBLE_CALLBACK_PLUGINS="/dev/null"

export ANSIBLE_CALLBACKS_ENABLED="/dev/null"

export ANSIBLE_TEST_PLUGINS="/dev/null"

export ANSIBLE_VARS_PLUGINS="/dev/null"

export ANSIBLE_STRATEGY_PLUGINS="/dev/null"

export ANSIBLE_CONFIG="none-ansible.cfg"

export ANSIBLE_COLLECTIONS_PATH="/etc/ansible"

export ANSIBLE_TRANSPORT="smart"

export ANSIBLE_STRATEGY="linear"

export LC_ALL="${LC_ALL:-C.UTF-8}"

pushd scripts

if ([ -f "${ANSIBLE_COLLECTION_FILE}" ] || [ -f "${USER_COLLECTION_FILE}" ]) && [[ -z "${SKIP_OSA_COLLECTION_CLONE+defined}" ]]; then

/opt/ansible-runtime/bin/ansible-playbook get-ansible-collection-requirements.yml \

-e collection_file="${ANSIBLE_COLLECTION_FILE}" -e user_collection_file="${USER_COLLECTION_FILE}"

fi

if ([ -f "${ANSIBLE_ROLE_FILE}" ] || [ -f "${USER_ROLE_FILE}" ]) && [[ -z "${SKIP_OSA_ROLE_CLONE+defined}" ]]; then

/opt/ansible-runtime/bin/ansible-playbook get-ansible-role-requirements.yml \

-e role_file="${ANSIBLE_ROLE_FILE}" -e user_role_file="${USER_ROLE_FILE}"

fi

popd

unset ANSIBLE_LIBRARY

unset ANSIBLE_LOOKUP_PLUGINS

unset ANSIBLE_FILTER_PLUGINS

unset ANSIBLE_ACTION_PLUGINS

unset ANSIBLE_CALLBACK_PLUGINS

unset ANSIBLE_CALLBACKS_ENABLED

unset ANSIBLE_TEST_PLUGINS

unset ANSIBLE_VARS_PLUGINS

unset ANSIBLE_STRATEGY_PLUGINS

unset ANSIBLE_CONFIG

unset ANSIBLE_COLLECTIONS_PATH

unset ANSIBLE_TRANSPORT

unset ANSIBLE_STRATEGY

echo "System is bootstrapped and ready for use."