309 lines
		
	
	
		
			13 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			309 lines
		
	
	
		
			13 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
"""Example for Cloud Computing Course Master AI / GSD"""
 | 
						|
 | 
						|
# This script demonstrates how to use libcloud to start an instance in an OpenStack environment.
 | 
						|
# The script will start multiple instances splitting up the faafo monolithic application into
 | 
						|
# a (minimalistic but already scalable) microservice architecture.
 | 
						|
# Also introduces the concept of different security groups and corresponding frontend/backend
 | 
						|
# separation.
 | 
						|
 | 
						|
# Needed if the password should be prompted for:
 | 
						|
# import getpass
 | 
						|
import os
 | 
						|
import sys
 | 
						|
 | 
						|
from libcloud.compute.providers import get_driver
 | 
						|
from libcloud.compute.types import Provider
 | 
						|
 | 
						|
# For our new Charmed OpenStack private cloud, we need to specify the path to the root
 | 
						|
# CA certificate
 | 
						|
import libcloud.security
 | 
						|
libcloud.security.CA_CERTS_PATH = ['./root-ca.crt']
 | 
						|
# Disable SSL certificate verification (not recommended for production)
 | 
						|
# libcloud.security.VERIFY_SSL_CERT = False
 | 
						|
 | 
						|
# Please use 1-29 as environment variable GROUP_NUMBER to specify your group number.
 | 
						|
# (will be used for the username, project etc., as coordinated in the lab sessions)
 | 
						|
 | 
						|
group_number = os.environ.get('GROUP_NUMBER')
 | 
						|
if group_number is None:
 | 
						|
    sys.exit('Please set the GROUP_NUMBER environment variable to your group number,\n'
 | 
						|
             'e.g., on Windows:\n'
 | 
						|
             '  "$env:GROUP_NUMBER=0" or "set GROUP_NUMBER=0"\n'
 | 
						|
             'or on Linux/MacOS:\n'
 | 
						|
             '  "export GROUP_NUMBER=0" or "set GROUP_NUMBER=0"')
 | 
						|
 | 
						|
 | 
						|
# web service endpoint of the private cloud infrastructure
 | 
						|
# auth_url = 'https://private-cloud.informatik.hs-fulda.de:5000'
 | 
						|
# auth_url = 'https://private-cloud2.informatik.hs-fulda.de:5000'
 | 
						|
AUTH_URL = 'https://10.32.4.29:5000'
 | 
						|
# your username in OpenStack
 | 
						|
AUTH_USERNAME = 'CloudComp' + str(group_number)
 | 
						|
print(f'Using username: {AUTH_USERNAME}\n')
 | 
						|
# your project in OpenStack
 | 
						|
PROJECT_NAME = 'CloudComp' + str(group_number)
 | 
						|
# A network in the project the started instance will be attached to
 | 
						|
PROJECT_NETWORK = 'CloudComp' + str(group_number) + '-net'
 | 
						|
 | 
						|
# The image to look for and use for the started instance
 | 
						|
# ubuntu_image_name = "Ubuntu 18.04 - Bionic Beaver - 64-bit - Cloud Based Image"
 | 
						|
#UBUNTU_IMAGE_NAME = "auto-sync/ubuntu-jammy-22.04-amd64-server-20240319-disk1.img"
 | 
						|
UBUNTU_IMAGE_NAME = "ubuntu-22.04-jammy-server-cloud-image-amd64"
 | 
						|
 | 
						|
# The public key to be used for SSH connection, please make sure, that you have the
 | 
						|
# corresponding private key
 | 
						|
#
 | 
						|
# id_rsa.pub should look like this (standard sshd pubkey format):
 | 
						|
# ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw+J...F3w2mleybgT1w== user@HOSTNAME
 | 
						|
KEYPAIR_NAME = 'srieger-pub'
 | 
						|
PUB_KEY_FILE = '~/.ssh/id_rsa.pub'
 | 
						|
 | 
						|
FLAVOR_NAME = 'm1.small'
 | 
						|
 | 
						|
 | 
						|
# default region
 | 
						|
REGION_NAME = 'RegionOne'
 | 
						|
# domain to use, "default" for local accounts, formerly "hsfulda" for LDAP accounts etc.
 | 
						|
# domain_name = "default"
 | 
						|
 | 
						|
 | 
						|
def main():  # noqa: C901 pylint: disable=too-many-branches,too-many-statements,too-many-locals,missing-function-docstring
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # get credentials
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    # if "OS_PASSWORD" in os.environ:
 | 
						|
    #     auth_password = os.environ["OS_PASSWORD"]
 | 
						|
    # else:
 | 
						|
    #     auth_password = getpass.getpass("Enter your OpenStack password:")
 | 
						|
    auth_password = "demo"
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # create connection
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    provider = get_driver(Provider.OPENSTACK)
 | 
						|
    conn = provider(AUTH_USERNAME,
 | 
						|
                    auth_password,
 | 
						|
                    ex_force_auth_url=AUTH_URL,
 | 
						|
                    ex_force_auth_version='3.x_password',
 | 
						|
                    ex_tenant_name=PROJECT_NAME,
 | 
						|
                    ex_force_service_region=REGION_NAME)
 | 
						|
    #               ex_domain_name=domain_name)
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # get image, flavor, network for instance creation
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    images = conn.list_images()
 | 
						|
    image = ''
 | 
						|
    for img in images:
 | 
						|
        if img.name == UBUNTU_IMAGE_NAME:
 | 
						|
            image = img
 | 
						|
 | 
						|
    flavors = conn.list_sizes()
 | 
						|
    flavor = ''
 | 
						|
    for flav in flavors:
 | 
						|
        if flav.name == FLAVOR_NAME:
 | 
						|
            flavor = conn.ex_get_size(flav.id)
 | 
						|
 | 
						|
    networks = conn.ex_list_networks()
 | 
						|
    network = ''
 | 
						|
    for net in networks:
 | 
						|
        if net.name == PROJECT_NETWORK:
 | 
						|
            network = net
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # create keypair dependency
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    print('Checking for existing SSH key pair...')
 | 
						|
    keypair_exists = False
 | 
						|
    for keypair in conn.list_key_pairs():
 | 
						|
        if keypair.name == KEYPAIR_NAME:
 | 
						|
            keypair_exists = True
 | 
						|
 | 
						|
    if keypair_exists:
 | 
						|
        print('Keypair ' + KEYPAIR_NAME + ' already exists. Skipping import.')
 | 
						|
    else:
 | 
						|
        print('adding keypair...')
 | 
						|
        conn.import_key_pair_from_file(KEYPAIR_NAME, PUB_KEY_FILE)
 | 
						|
 | 
						|
    for keypair in conn.list_key_pairs():
 | 
						|
        print(keypair)
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # create security group dependency
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    print('Checking for existing worker security group...')
 | 
						|
    security_group_name = 'worker'
 | 
						|
    security_group_exists = False
 | 
						|
    worker_security_group = ''
 | 
						|
    for security_group in conn.ex_list_security_groups():
 | 
						|
        if security_group.name == security_group_name:
 | 
						|
            worker_security_group = security_group
 | 
						|
            security_group_exists = True
 | 
						|
 | 
						|
    if security_group_exists:
 | 
						|
        print('Worker Security Group ' + worker_security_group.name + ' already exists. '
 | 
						|
              'Skipping creation.')
 | 
						|
    else:
 | 
						|
        worker_security_group = conn.ex_create_security_group('worker', 'for services '
 | 
						|
                                                              'that run on a worker node')
 | 
						|
        conn.ex_create_security_group_rule(worker_security_group, 'TCP', 22, 22)
 | 
						|
 | 
						|
    print('Checking for existing controller security group...')
 | 
						|
    security_group_name = 'control'
 | 
						|
    security_group_exists = False
 | 
						|
    controller_security_group = ''
 | 
						|
    for security_group in conn.ex_list_security_groups():
 | 
						|
        if security_group.name == security_group_name:
 | 
						|
            controller_security_group = security_group
 | 
						|
            security_group_exists = True
 | 
						|
 | 
						|
    if security_group_exists:
 | 
						|
        print('Controller Security Group ' + controller_security_group.name + ' already exists. '
 | 
						|
              'Skipping creation.')
 | 
						|
    else:
 | 
						|
        controller_security_group = conn.ex_create_security_group('control', 'for services that '
 | 
						|
                                                                  'run on a control node')
 | 
						|
        conn.ex_create_security_group_rule(controller_security_group, 'TCP', 22, 22)
 | 
						|
        conn.ex_create_security_group_rule(controller_security_group, 'TCP', 80, 80)
 | 
						|
        conn.ex_create_security_group_rule(controller_security_group, 'TCP', 5672, 5672,
 | 
						|
                                           source_security_group=worker_security_group)
 | 
						|
 | 
						|
    for security_group in conn.ex_list_security_groups():
 | 
						|
        print(security_group)
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # create app-controller
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    # new repo on git-ce.rwth-aachen.de:
 | 
						|
    hsfd_faafo_cloud_init_script = 'https://git-ce.rwth-aachen.de/sebastian.rieger/cloud-computing-msc-ai-examples/-/raw/master/faafo/contrib/install.sh'
 | 
						|
 | 
						|
    userdata = '#!/usr/bin/env bash\n' \
 | 
						|
               f'curl -L -s {hsfd_faafo_cloud_init_script} | bash -s -- ' \
 | 
						|
               '-i messaging -i faafo -r api\n'
 | 
						|
    print('\nUsing cloud-init userdata for controller:\n"' + userdata + '"\n')
 | 
						|
 | 
						|
    print('Starting new app-controller instance and wait until it is running...')
 | 
						|
    instance_controller_1 = conn.create_node(name='app-controller',
 | 
						|
                                             image=image,
 | 
						|
                                             size=flavor,
 | 
						|
                                             networks=[network],
 | 
						|
                                             ex_keyname=KEYPAIR_NAME,
 | 
						|
                                             ex_userdata=userdata,
 | 
						|
                                             ex_security_groups=[controller_security_group])
 | 
						|
 | 
						|
    conn.wait_until_running(nodes=[instance_controller_1], timeout=120, ssh_interface='private_ips')
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # assign app-controller floating ip
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    print('Checking for unused Floating IP...')
 | 
						|
    unused_floating_ip = None
 | 
						|
    for floating_ip in conn.ex_list_floating_ips():
 | 
						|
        if not floating_ip.node_id:
 | 
						|
            unused_floating_ip = floating_ip
 | 
						|
            break
 | 
						|
 | 
						|
    if not unused_floating_ip:
 | 
						|
        pool = conn.ex_list_floating_ip_pools()[0]
 | 
						|
        print(f'Allocating new Floating IP from pool: {pool}')
 | 
						|
        unused_floating_ip = pool.create_floating_ip()
 | 
						|
 | 
						|
    conn.ex_attach_floating_ip_to_node(instance_controller_1, unused_floating_ip)
 | 
						|
    print(f'Controller Application will be deployed to http://{unused_floating_ip.ip_address}')
 | 
						|
    actual_ip_address = unused_floating_ip.ip_address
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # getting id and ip address of app-controller instance
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    # instance should not have a public ip? floating ips are assigned later
 | 
						|
    instance_controller_1 = conn.ex_get_node_details(instance_controller_1.id)
 | 
						|
    ip_controller = ''
 | 
						|
    if instance_controller_1.public_ips:
 | 
						|
        ip_controller = instance_controller_1.public_ips[0]
 | 
						|
    else:
 | 
						|
        ip_controller = instance_controller_1.private_ips[0]
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # create app-worker-1
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    userdata = '#!/usr/bin/env bash\n' \
 | 
						|
               f'curl -L -s {hsfd_faafo_cloud_init_script} | bash -s -- ' \
 | 
						|
               f'-i faafo -r worker -e "http://{ip_controller}" -m "amqp://faafo:guest@' \
 | 
						|
               f'{ip_controller}:5672/"\n'
 | 
						|
    print('\nUsing cloud-init userdata for worker:\n"' + userdata + '"\n')
 | 
						|
 | 
						|
    print('Starting new app-worker-1 instance and wait until it is running...')
 | 
						|
    instance_worker_1 = conn.create_node(name='app-worker-1',
 | 
						|
                                         image=image,
 | 
						|
                                         size=flavor,
 | 
						|
                                         networks=[network],
 | 
						|
                                         ex_keyname=KEYPAIR_NAME,
 | 
						|
                                         ex_userdata=userdata,
 | 
						|
                                         ex_security_groups=[worker_security_group])
 | 
						|
 | 
						|
    conn.wait_until_running(nodes=[instance_worker_1], timeout=120, ssh_interface='private_ips')
 | 
						|
 | 
						|
    ###########################################################################
 | 
						|
    #
 | 
						|
    # assign app-worker floating ip
 | 
						|
    #
 | 
						|
    ###########################################################################
 | 
						|
 | 
						|
    print('Checking for unused Floating IP...')
 | 
						|
    unused_floating_ip = None
 | 
						|
    for floating_ip in conn.ex_list_floating_ips():
 | 
						|
        if not floating_ip.node_id:
 | 
						|
            unused_floating_ip = floating_ip
 | 
						|
            break
 | 
						|
 | 
						|
    if not unused_floating_ip:
 | 
						|
        pool = conn.ex_list_floating_ip_pools()[0]
 | 
						|
        print(f'Allocating new Floating IP from pool: {pool}')
 | 
						|
        unused_floating_ip = pool.create_floating_ip()
 | 
						|
 | 
						|
    conn.ex_attach_floating_ip_to_node(instance_worker_1, unused_floating_ip)
 | 
						|
    print(f'The worker will be available for SSH at {unused_floating_ip.ip_address}')
 | 
						|
 | 
						|
    print('\n\n#### Deployment finished\n\n')
 | 
						|
    print('After some minutes, as soon as cloud-init installed required packages and the\n'
 | 
						|
          'faafo app, (First App Application For OpenStack) fractals demo will be available\n'
 | 
						|
          f'at http://{actual_ip_address}\n')
 | 
						|
 | 
						|
    print('You can use ssh to login to the controller using your private key.\n'
 | 
						|
          f'E.g., "ssh -i ~/.ssh/id_rsa ubuntu@{actual_ip_address}". After login,\n'
 | 
						|
          'you can list available fractals using "faafo list". To request the generation of\n'
 | 
						|
          'new fractals, you can use "faafo create". \n'
 | 
						|
          'You can also see other options to use the faafo example cloud service using '
 | 
						|
          '"faafo -h".')
 | 
						|
 | 
						|
 | 
						|
if __name__ == '__main__':
 | 
						|
    main()
 |