vnfs/vFW/scripts/v_firewall_install.sh

   1 #!/bin/bash
   2
   3 NEXUS_ARTIFACT_REPO=$(cat /opt/config/nexus_artifact_repo.txt)
   4 DEMO_ARTIFACTS_VERSION=$(cat /opt/config/demo_artifacts_version.txt)
   5 if [[ "$DEMO_ARTIFACTS_VERSION" =~ "SNAPSHOT" ]]; then REPO=snapshots; else REPO=releases; fi
   6 INSTALL_SCRIPT_VERSION=$(cat /opt/config/install_script_version.txt)
   7 CLOUD_ENV=$(cat /opt/config/cloud_env.txt)
   8
   9 # Convert Network CIDR to Netmask
  10 cdr2mask () {
  11         # Number of args to shift, 255..255, first non-255 byte, zeroes
  12         set -- $(( 5 - ($1 / 8) )) 255 255 255 255 $(( (255 << (8 - ($1 % 8))) & 255 )) 0 0 0
  13         [ $1 -gt 1 ] && shift $1 || shift
  14         echo ${1-0}.${2-0}.${3-0}.${4-0}
  15 }
  16
  17 # OpenStack network configuration
  18 if [[ $CLOUD_ENV == "openstack" ]]
  19 then
  20         echo 127.0.0.1 $(hostname) >> /etc/hosts
  21
  22         # Allow remote login as root
  23         mv /root/.ssh/authorized_keys /root/.ssh/authorized_keys.bk
  24         cp /home/ubuntu/.ssh/authorized_keys /root/.ssh
  25
  26         MTU=$(/sbin/ifconfig | grep MTU | sed 's/.*MTU://' | sed 's/ .*//' | sort -n | head -1)
  27
  28         IP=$(cat /opt/config/vfw_private_ip_0.txt)
  29         BITS=$(cat /opt/config/unprotected_private_net_cidr.txt | cut -d"/" -f2)
  30         NETMASK=$(cdr2mask $BITS)
  31         echo "auto eth1" >> /etc/network/interfaces
  32         echo "iface eth1 inet static" >> /etc/network/interfaces
  33         echo "    address $IP" >> /etc/network/interfaces
  34         echo "    netmask $NETMASK" >> /etc/network/interfaces
  35         echo "    mtu $MTU" >> /etc/network/interfaces
  36
  37         IP=$(cat /opt/config/vfw_private_ip_1.txt)
  38         BITS=$(cat /opt/config/protected_private_net_cidr.txt | cut -d"/" -f2)
  39         NETMASK=$(cdr2mask $BITS)
  40         echo "auto eth2" >> /etc/network/interfaces
  41         echo "iface eth2 inet static" >> /etc/network/interfaces
  42         echo "    address $IP" >> /etc/network/interfaces
  43         echo "    netmask $NETMASK" >> /etc/network/interfaces
  44         echo "    mtu $MTU" >> /etc/network/interfaces
  45
  46         IP=$(cat /opt/config/vfw_private_ip_2.txt)
  47         BITS=$(cat /opt/config/onap_private_net_cidr.txt | cut -d"/" -f2)
  48         NETMASK=$(cdr2mask $BITS)
  49         echo "auto eth3" >> /etc/network/interfaces
  50         echo "iface eth3 inet static" >> /etc/network/interfaces
  51         echo "    address $IP" >> /etc/network/interfaces
  52         echo "    netmask $NETMASK" >> /etc/network/interfaces
  53         echo "    mtu $MTU" >> /etc/network/interfaces
  54
  55         ifup eth1
  56         ifup eth2
  57         ifup eth3
  58 fi
  59
  60 # Download required dependencies
  61 echo "deb http://ppa.launchpad.net/openjdk-r/ppa/ubuntu $(lsb_release -c -s) main" >>  /etc/apt/sources.list.d/java.list
  62 echo "deb-src http://ppa.launchpad.net/openjdk-r/ppa/ubuntu $(lsb_release -c -s) main" >>  /etc/apt/sources.list.d/java.list
  63 apt-get update
  64 apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates
  65 pip install jsonschema
  66
  67 # Install fd.io certificate
  68 HOST=nexus.fd.io
  69 PORT=443
  70 TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt"
  71 bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE"
  72
  73 # Download artifacts for virtual firewall
  74 mkdir /opt/honeycomb
  75 cd /opt
  76
  77 unzip -p -j /opt/vfw-scripts-$INSTALL_SCRIPT_VERSION.zip v_firewall_init.sh > /opt/v_firewall_init.sh
  78 unzip -p -j /opt/vfw-scripts-$INSTALL_SCRIPT_VERSION.zip vfirewall.sh > /opt/vfirewall.sh
  79 wget -O sample-distribution-$DEMO_ARTIFACTS_VERSION-hc.tar.gz "${NEXUS_ARTIFACT_REPO}/service/local/artifact/maven/redirect?r=${REPO}&g=org.onap.demo.vnf&a=sample-distribution&c=hc&e=tar.gz&v=$DEMO_ARTIFACTS_VERSION"
  80 wget -O ves-$DEMO_ARTIFACTS_VERSION-demo.tar.gz "${NEXUS_ARTIFACT_REPO}/service/local/artifact/maven/redirect?r=${REPO}&g=org.onap.demo.vnf.ves5&a=ves&c=demo&e=tar.gz&v=$DEMO_ARTIFACTS_VERSION"
  81 wget -O ves_vfw_reporting-$DEMO_ARTIFACTS_VERSION-demo.tar.gz "${NEXUS_ARTIFACT_REPO}/service/local/artifact/maven/redirect?r=${REPO}&g=org.onap.demo.vnf.ves5&a=ves_vfw_reporting&c=demo&e=tar.gz&v=$DEMO_ARTIFACTS_VERSION"
  82
  83 tar -zmxvf ves-$DEMO_ARTIFACTS_VERSION-demo.tar.gz
  84 mv ves-$DEMO_ARTIFACTS_VERSION VES
  85 tar -zmxvf ves_vfw_reporting-$DEMO_ARTIFACTS_VERSION-demo.tar.gz
  86 mv ves_vfw_reporting-$DEMO_ARTIFACTS_VERSION /opt/VES/evel/evel-library/code/VESreporting
  87 tar -zmxvf sample-distribution-$DEMO_ARTIFACTS_VERSION-hc.tar.gz
  88
  89 mv sample-distribution-$DEMO_ARTIFACTS_VERSION honeycomb
  90 sed -i 's/"restconf-binding-address": "127.0.0.1",/"restconf-binding-address": "0.0.0.0",/g' honeycomb/sample-distribution-$DEMO_ARTIFACTS_VERSION/config/honeycomb.json
  91 rm *.tar.gz
  92
  93 chmod +x v_firewall_init.sh
  94 chmod +x vfirewall.sh
  95 chmod +x /opt/VES/evel/evel-library/code/VESreporting/go-client.sh
  96
  97 # Install VPP
  98 export UBUNTU="trusty"
  99 export RELEASE=".stable.1609"
 100 rm /etc/apt/sources.list.d/99fd.io.list
 101 echo "deb [trusted=yes] https://nexus.fd.io/content/repositories/fd.io$RELEASE.ubuntu.$UBUNTU.main/ ./" | sudo tee -a /etc/apt/sources.list.d/99fd.io.list
 102 apt-get update
 103 apt-get install -y vpp vpp-dpdk-dkms vpp-lib vpp-dbg vpp-plugins vpp-dev
 104 sleep 1
 105
 106 # Install VES
 107 cd /opt/VES/evel/evel-library/bldjobs/
 108 make clean
 109 make
 110 sleep 1
 111
 112 # Run instantiation script
 113 cd /opt
 114 mv vfirewall.sh /etc/init.d
 115 update-rc.d vfirewall.sh defaults
 116 ./v_firewall_init.sh