407 lines
12 KiB
Go
407 lines
12 KiB
Go
// This package implements a provisioner for Packer that executes a
|
|
// saltstack state within the remote machine
|
|
package saltmasterless
|
|
|
|
import (
|
|
"bytes"
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/hashicorp/packer/common"
|
|
"github.com/hashicorp/packer/helper/config"
|
|
"github.com/hashicorp/packer/packer"
|
|
"github.com/hashicorp/packer/template/interpolate"
|
|
)
|
|
|
|
const DefaultTempConfigDir = "/tmp/salt"
|
|
const DefaultStateTreeDir = "/srv/salt"
|
|
const DefaultPillarRootDir = "/srv/pillar"
|
|
|
|
type Config struct {
|
|
common.PackerConfig `mapstructure:",squash"`
|
|
|
|
// If true, run the salt-bootstrap script
|
|
SkipBootstrap bool `mapstructure:"skip_bootstrap"`
|
|
BootstrapArgs string `mapstructure:"bootstrap_args"`
|
|
|
|
DisableSudo bool `mapstructure:"disable_sudo"`
|
|
|
|
// Custom state to run instead of highstate
|
|
CustomState string `mapstructure:"custom_state"`
|
|
|
|
// Local path to the minion config
|
|
MinionConfig string `mapstructure:"minion_config"`
|
|
|
|
// Local path to the minion grains
|
|
GrainsFile string `mapstructure:"grains_file"`
|
|
|
|
// Local path to the salt state tree
|
|
LocalStateTree string `mapstructure:"local_state_tree"`
|
|
|
|
// Local path to the salt pillar roots
|
|
LocalPillarRoots string `mapstructure:"local_pillar_roots"`
|
|
|
|
// Remote path to the salt state tree
|
|
RemoteStateTree string `mapstructure:"remote_state_tree"`
|
|
|
|
// Remote path to the salt pillar roots
|
|
RemotePillarRoots string `mapstructure:"remote_pillar_roots"`
|
|
|
|
// Where files will be copied before moving to the /srv/salt directory
|
|
TempConfigDir string `mapstructure:"temp_config_dir"`
|
|
|
|
// Don't exit packer if salt-call returns an error code
|
|
NoExitOnFailure bool `mapstructure:"no_exit_on_failure"`
|
|
|
|
// Set the logging level for the salt-call run
|
|
LogLevel string `mapstructure:"log_level"`
|
|
|
|
// Arguments to pass to salt-call
|
|
SaltCallArgs string `mapstructure:"salt_call_args"`
|
|
|
|
// Command line args passed onto salt-call
|
|
CmdArgs string ""
|
|
|
|
ctx interpolate.Context
|
|
}
|
|
|
|
type Provisioner struct {
|
|
config Config
|
|
}
|
|
|
|
func (p *Provisioner) Prepare(raws ...interface{}) error {
|
|
err := config.Decode(&p.config, &config.DecodeOpts{
|
|
Interpolate: true,
|
|
InterpolateContext: &p.config.ctx,
|
|
InterpolateFilter: &interpolate.RenderFilter{
|
|
Exclude: []string{},
|
|
},
|
|
}, raws...)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if p.config.TempConfigDir == "" {
|
|
p.config.TempConfigDir = DefaultTempConfigDir
|
|
}
|
|
|
|
var errs *packer.MultiError
|
|
|
|
// require a salt state tree
|
|
err = validateDirConfig(p.config.LocalStateTree, "local_state_tree", true)
|
|
if err != nil {
|
|
errs = packer.MultiErrorAppend(errs, err)
|
|
}
|
|
|
|
err = validateDirConfig(p.config.LocalPillarRoots, "local_pillar_roots", false)
|
|
if err != nil {
|
|
errs = packer.MultiErrorAppend(errs, err)
|
|
}
|
|
|
|
err = validateFileConfig(p.config.MinionConfig, "minion_config", false)
|
|
if err != nil {
|
|
errs = packer.MultiErrorAppend(errs, err)
|
|
}
|
|
|
|
if p.config.MinionConfig != "" && (p.config.RemoteStateTree != "" || p.config.RemotePillarRoots != "") {
|
|
errs = packer.MultiErrorAppend(errs,
|
|
errors.New("remote_state_tree and remote_pillar_roots only apply when minion_config is not used"))
|
|
}
|
|
|
|
err = validateFileConfig(p.config.GrainsFile, "grains_file", false)
|
|
if err != nil {
|
|
errs = packer.MultiErrorAppend(errs, err)
|
|
}
|
|
|
|
// build the command line args to pass onto salt
|
|
var cmd_args bytes.Buffer
|
|
|
|
if p.config.CustomState == "" {
|
|
cmd_args.WriteString(" state.highstate")
|
|
} else {
|
|
cmd_args.WriteString(" state.sls ")
|
|
cmd_args.WriteString(p.config.CustomState)
|
|
}
|
|
|
|
if p.config.MinionConfig == "" {
|
|
// pass --file-root and --pillar-root if no minion_config is supplied
|
|
if p.config.RemoteStateTree != "" {
|
|
cmd_args.WriteString(" --file-root=")
|
|
cmd_args.WriteString(p.config.RemoteStateTree)
|
|
} else {
|
|
cmd_args.WriteString(" --file-root=")
|
|
cmd_args.WriteString(DefaultStateTreeDir)
|
|
}
|
|
if p.config.RemotePillarRoots != "" {
|
|
cmd_args.WriteString(" --pillar-root=")
|
|
cmd_args.WriteString(p.config.RemotePillarRoots)
|
|
} else {
|
|
cmd_args.WriteString(" --pillar-root=")
|
|
cmd_args.WriteString(DefaultPillarRootDir)
|
|
}
|
|
}
|
|
|
|
if !p.config.NoExitOnFailure {
|
|
cmd_args.WriteString(" --retcode-passthrough")
|
|
}
|
|
|
|
if p.config.LogLevel == "" {
|
|
cmd_args.WriteString(" -l info")
|
|
} else {
|
|
cmd_args.WriteString(" -l ")
|
|
cmd_args.WriteString(p.config.LogLevel)
|
|
}
|
|
|
|
if p.config.SaltCallArgs != "" {
|
|
cmd_args.WriteString(" ")
|
|
cmd_args.WriteString(p.config.SaltCallArgs)
|
|
}
|
|
|
|
p.config.CmdArgs = cmd_args.String()
|
|
|
|
if errs != nil && len(errs.Errors) > 0 {
|
|
return errs
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) Provision(ui packer.Ui, comm packer.Communicator) error {
|
|
var err error
|
|
var src, dst string
|
|
|
|
ui.Say("Provisioning with Salt...")
|
|
if !p.config.SkipBootstrap {
|
|
cmd := &packer.RemoteCmd{
|
|
// Fallback on wget if curl failed for any reason (such as not being installed)
|
|
Command: fmt.Sprintf("curl -L https://bootstrap.saltstack.com -o /tmp/install_salt.sh || wget -O /tmp/install_salt.sh https://bootstrap.saltstack.com"),
|
|
}
|
|
ui.Message(fmt.Sprintf("Downloading saltstack bootstrap to /tmp/install_salt.sh"))
|
|
if err = cmd.StartWithUi(comm, ui); err != nil {
|
|
return fmt.Errorf("Unable to download Salt: %s", err)
|
|
}
|
|
cmd = &packer.RemoteCmd{
|
|
Command: fmt.Sprintf("%s /tmp/install_salt.sh %s", p.sudo("sh"), p.config.BootstrapArgs),
|
|
}
|
|
ui.Message(fmt.Sprintf("Installing Salt with command %s", cmd.Command))
|
|
if err = cmd.StartWithUi(comm, ui); err != nil {
|
|
return fmt.Errorf("Unable to install Salt: %s", err)
|
|
}
|
|
}
|
|
|
|
ui.Message(fmt.Sprintf("Creating remote temporary directory: %s", p.config.TempConfigDir))
|
|
if err := p.createDir(ui, comm, p.config.TempConfigDir); err != nil {
|
|
return fmt.Errorf("Error creating remote temporary directory: %s", err)
|
|
}
|
|
|
|
if p.config.MinionConfig != "" {
|
|
ui.Message(fmt.Sprintf("Uploading minion config: %s", p.config.MinionConfig))
|
|
src = p.config.MinionConfig
|
|
dst = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "minion"))
|
|
if err = p.uploadFile(ui, comm, dst, src); err != nil {
|
|
return fmt.Errorf("Error uploading local minion config file to remote: %s", err)
|
|
}
|
|
|
|
// move minion config into /etc/salt
|
|
ui.Message(fmt.Sprintf("Make sure directory %s exists", "/etc/salt"))
|
|
if err := p.createDir(ui, comm, "/etc/salt"); err != nil {
|
|
return fmt.Errorf("Error creating remote salt configuration directory: %s", err)
|
|
}
|
|
src = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "minion"))
|
|
dst = "/etc/salt/minion"
|
|
if err = p.moveFile(ui, comm, dst, src); err != nil {
|
|
return fmt.Errorf("Unable to move %s/minion to /etc/salt/minion: %s", p.config.TempConfigDir, err)
|
|
}
|
|
}
|
|
|
|
if p.config.GrainsFile != "" {
|
|
ui.Message(fmt.Sprintf("Uploading grains file: %s", p.config.GrainsFile))
|
|
src = p.config.GrainsFile
|
|
dst = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "grains"))
|
|
if err = p.uploadFile(ui, comm, dst, src); err != nil {
|
|
return fmt.Errorf("Error uploading local grains file to remote: %s", err)
|
|
}
|
|
|
|
// move grains file into /etc/salt
|
|
ui.Message(fmt.Sprintf("Make sure directory %s exists", "/etc/salt"))
|
|
if err := p.createDir(ui, comm, "/etc/salt"); err != nil {
|
|
return fmt.Errorf("Error creating remote salt configuration directory: %s", err)
|
|
}
|
|
src = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "grains"))
|
|
dst = "/etc/salt/grains"
|
|
if err = p.moveFile(ui, comm, dst, src); err != nil {
|
|
return fmt.Errorf("Unable to move %s/grains to /etc/salt/grains: %s", p.config.TempConfigDir, err)
|
|
}
|
|
}
|
|
|
|
ui.Message(fmt.Sprintf("Uploading local state tree: %s", p.config.LocalStateTree))
|
|
src = p.config.LocalStateTree
|
|
dst = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "states"))
|
|
if err = p.uploadDir(ui, comm, dst, src, []string{".git"}); err != nil {
|
|
return fmt.Errorf("Error uploading local state tree to remote: %s", err)
|
|
}
|
|
|
|
// move state tree from temporary directory
|
|
src = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "states"))
|
|
if p.config.RemoteStateTree != "" {
|
|
dst = p.config.RemoteStateTree
|
|
} else {
|
|
dst = DefaultStateTreeDir
|
|
}
|
|
if err = p.removeDir(ui, comm, dst); err != nil {
|
|
return fmt.Errorf("Unable to clear salt tree: %s", err)
|
|
}
|
|
if err = p.moveFile(ui, comm, dst, src); err != nil {
|
|
return fmt.Errorf("Unable to move %s/states to %s: %s", p.config.TempConfigDir, dst, err)
|
|
}
|
|
|
|
if p.config.LocalPillarRoots != "" {
|
|
ui.Message(fmt.Sprintf("Uploading local pillar roots: %s", p.config.LocalPillarRoots))
|
|
src = p.config.LocalPillarRoots
|
|
dst = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "pillar"))
|
|
if err = p.uploadDir(ui, comm, dst, src, []string{".git"}); err != nil {
|
|
return fmt.Errorf("Error uploading local pillar roots to remote: %s", err)
|
|
}
|
|
|
|
// move pillar root from temporary directory
|
|
src = filepath.ToSlash(filepath.Join(p.config.TempConfigDir, "pillar"))
|
|
if p.config.RemotePillarRoots != "" {
|
|
dst = p.config.RemotePillarRoots
|
|
} else {
|
|
dst = DefaultPillarRootDir
|
|
}
|
|
if err = p.removeDir(ui, comm, dst); err != nil {
|
|
return fmt.Errorf("Unable to clear pillar root: %s", err)
|
|
}
|
|
if err = p.moveFile(ui, comm, dst, src); err != nil {
|
|
return fmt.Errorf("Unable to move %s/pillar to %s: %s", p.config.TempConfigDir, dst, err)
|
|
}
|
|
}
|
|
|
|
ui.Message(fmt.Sprintf("Running: salt-call --local %s", p.config.CmdArgs))
|
|
cmd := &packer.RemoteCmd{Command: p.sudo(fmt.Sprintf("salt-call --local %s", p.config.CmdArgs))}
|
|
if err = cmd.StartWithUi(comm, ui); err != nil || cmd.ExitStatus != 0 {
|
|
if err == nil {
|
|
err = fmt.Errorf("Bad exit status: %d", cmd.ExitStatus)
|
|
}
|
|
|
|
return fmt.Errorf("Error executing salt-call: %s", err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) Cancel() {
|
|
// Just hard quit. It isn't a big deal if what we're doing keeps
|
|
// running on the other side.
|
|
os.Exit(0)
|
|
}
|
|
|
|
// Prepends sudo to supplied command if config says to
|
|
func (p *Provisioner) sudo(cmd string) string {
|
|
if p.config.DisableSudo {
|
|
return cmd
|
|
}
|
|
|
|
return "sudo " + cmd
|
|
}
|
|
|
|
func validateDirConfig(path string, name string, required bool) error {
|
|
if required == true && path == "" {
|
|
return fmt.Errorf("%s cannot be empty", name)
|
|
} else if required == false && path == "" {
|
|
return nil
|
|
}
|
|
info, err := os.Stat(path)
|
|
if err != nil {
|
|
return fmt.Errorf("%s: path '%s' is invalid: %s", name, path, err)
|
|
} else if !info.IsDir() {
|
|
return fmt.Errorf("%s: path '%s' must point to a directory", name, path)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func validateFileConfig(path string, name string, required bool) error {
|
|
if required == true && path == "" {
|
|
return fmt.Errorf("%s cannot be empty", name)
|
|
} else if required == false && path == "" {
|
|
return nil
|
|
}
|
|
info, err := os.Stat(path)
|
|
if err != nil {
|
|
return fmt.Errorf("%s: path '%s' is invalid: %s", name, path, err)
|
|
} else if info.IsDir() {
|
|
return fmt.Errorf("%s: path '%s' must point to a file", name, path)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) uploadFile(ui packer.Ui, comm packer.Communicator, dst, src string) error {
|
|
f, err := os.Open(src)
|
|
if err != nil {
|
|
return fmt.Errorf("Error opening: %s", err)
|
|
}
|
|
defer f.Close()
|
|
|
|
if err = comm.Upload(dst, f, nil); err != nil {
|
|
return fmt.Errorf("Error uploading %s: %s", src, err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) moveFile(ui packer.Ui, comm packer.Communicator, dst, src string) error {
|
|
ui.Message(fmt.Sprintf("Moving %s to %s", src, dst))
|
|
cmd := &packer.RemoteCmd{Command: fmt.Sprintf(p.sudo("mv %s %s"), src, dst)}
|
|
if err := cmd.StartWithUi(comm, ui); err != nil || cmd.ExitStatus != 0 {
|
|
if err == nil {
|
|
err = fmt.Errorf("Bad exit status: %d", cmd.ExitStatus)
|
|
}
|
|
|
|
return fmt.Errorf("Unable to move %s to %s: %s", src, dst, err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) createDir(ui packer.Ui, comm packer.Communicator, dir string) error {
|
|
ui.Message(fmt.Sprintf("Creating directory: %s", dir))
|
|
cmd := &packer.RemoteCmd{
|
|
Command: fmt.Sprintf("mkdir -p '%s'", dir),
|
|
}
|
|
if err := cmd.StartWithUi(comm, ui); err != nil {
|
|
return err
|
|
}
|
|
if cmd.ExitStatus != 0 {
|
|
return fmt.Errorf("Non-zero exit status.")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) removeDir(ui packer.Ui, comm packer.Communicator, dir string) error {
|
|
ui.Message(fmt.Sprintf("Removing directory: %s", dir))
|
|
cmd := &packer.RemoteCmd{
|
|
Command: fmt.Sprintf("rm -rf '%s'", dir),
|
|
}
|
|
if err := cmd.StartWithUi(comm, ui); err != nil {
|
|
return err
|
|
}
|
|
if cmd.ExitStatus != 0 {
|
|
return fmt.Errorf("Non-zero exit status.")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (p *Provisioner) uploadDir(ui packer.Ui, comm packer.Communicator, dst, src string, ignore []string) error {
|
|
if err := p.createDir(ui, comm, dst); err != nil {
|
|
return err
|
|
}
|
|
|
|
// Make sure there is a trailing "/" so that the directory isn't
|
|
// created on the other side.
|
|
if src[len(src)-1] != '/' {
|
|
src = src + "/"
|
|
}
|
|
return comm.UploadDir(dst, src, ignore)
|
|
}
|