mirror of https://github.com/kubernetes/kops.git
151 lines
4.3 KiB
Bash
151 lines
4.3 KiB
Bash
#!/bin/bash
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
|
|
NODEUP_URL_AMD64=nodeup-amd64-1,nodeup-amd64-2
|
|
NODEUP_HASH_AMD64=833723369ad345a88dd85d61b1e77336d56e61b864557ded71b92b6e34158e6a
|
|
NODEUP_URL_ARM64=nodeup-arm64-1,nodeup-arm64-2
|
|
NODEUP_HASH_ARM64=e525c28a65ff0ce4f95f9e730195b4e67fdcb15ceb1f36b5ad6921a8a4490c71
|
|
|
|
export AWS_REGION=eu-west-1
|
|
|
|
|
|
echo "http_proxy=http://example.com:80" >> /etc/environment
|
|
echo "https_proxy=http://example.com:80" >> /etc/environment
|
|
echo "no_proxy=" >> /etc/environment
|
|
echo "NO_PROXY=" >> /etc/environment
|
|
while read in; do export $in; done < /etc/environment
|
|
case `cat /proc/version` in
|
|
*[Dd]ebian*)
|
|
echo "Acquire::http::Proxy \"${http_proxy}\";" > /etc/apt/apt.conf.d/30proxy ;;
|
|
*[Uu]buntu*)
|
|
echo "Acquire::http::Proxy \"${http_proxy}\";" > /etc/apt/apt.conf.d/30proxy ;;
|
|
*[Rr]ed[Hh]at*)
|
|
echo "proxy=${http_proxy}" >> /etc/yum.conf ;;
|
|
esac
|
|
echo "DefaultEnvironment=\"http_proxy=${http_proxy}\" \"https_proxy=${http_proxy}\" \"NO_PROXY=${no_proxy}\" \"no_proxy=${no_proxy}\"" >> /etc/systemd/system.conf
|
|
systemctl daemon-reload
|
|
systemctl daemon-reexec
|
|
|
|
|
|
sysctl -w net.core.rmem_max=16777216 || true
|
|
sysctl -w net.core.wmem_max=16777216 || true
|
|
sysctl -w net.ipv4.tcp_rmem='4096 87380 16777216' || true
|
|
sysctl -w net.ipv4.tcp_wmem='4096 87380 16777216' || true
|
|
|
|
|
|
function ensure-install-dir() {
|
|
INSTALL_DIR="/opt/kops"
|
|
# On ContainerOS, we install under /var/lib/toolbox; /opt is ro and noexec
|
|
if [[ -d /var/lib/toolbox ]]; then
|
|
INSTALL_DIR="/var/lib/toolbox/kops"
|
|
fi
|
|
mkdir -p ${INSTALL_DIR}/bin
|
|
mkdir -p ${INSTALL_DIR}/conf
|
|
cd ${INSTALL_DIR}
|
|
}
|
|
|
|
# Retry a download until we get it. args: name, sha, urls
|
|
download-or-bust() {
|
|
local -r file="$1"
|
|
local -r hash="$2"
|
|
local -r urls=( $(split-commas "$3") )
|
|
|
|
if [[ -f "${file}" ]]; then
|
|
if ! validate-hash "${file}" "${hash}"; then
|
|
rm -f "${file}"
|
|
else
|
|
return 0
|
|
fi
|
|
fi
|
|
|
|
while true; do
|
|
for url in "${urls[@]}"; do
|
|
commands=(
|
|
"curl -f --compressed -Lo "${file}" --connect-timeout 20 --retry 6 --retry-delay 10"
|
|
"wget --compression=auto -O "${file}" --connect-timeout=20 --tries=6 --wait=10"
|
|
"curl -f -Lo "${file}" --connect-timeout 20 --retry 6 --retry-delay 10"
|
|
"wget -O "${file}" --connect-timeout=20 --tries=6 --wait=10"
|
|
)
|
|
for cmd in "${commands[@]}"; do
|
|
echo "Attempting download with: ${cmd} {url}"
|
|
if ! (${cmd} "${url}"); then
|
|
echo "== Download failed with ${cmd} =="
|
|
continue
|
|
fi
|
|
if ! validate-hash "${file}" "${hash}"; then
|
|
echo "== Hash validation of ${url} failed. Retrying. =="
|
|
rm -f "${file}"
|
|
else
|
|
echo "== Downloaded ${url} (SHA256 = ${hash}) =="
|
|
return 0
|
|
fi
|
|
done
|
|
done
|
|
|
|
echo "All downloads failed; sleeping before retrying"
|
|
sleep 60
|
|
done
|
|
}
|
|
|
|
validate-hash() {
|
|
local -r file="$1"
|
|
local -r expected="$2"
|
|
local actual
|
|
|
|
actual=$(sha256sum ${file} | awk '{ print $1 }') || true
|
|
if [[ "${actual}" != "${expected}" ]]; then
|
|
echo "== ${file} corrupted, hash ${actual} doesn't match expected ${expected} =="
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
function split-commas() {
|
|
echo $1 | tr "," "\n"
|
|
}
|
|
|
|
function download-release() {
|
|
case "$(uname -m)" in
|
|
x86_64*|i?86_64*|amd64*)
|
|
NODEUP_URL="${NODEUP_URL_AMD64}"
|
|
NODEUP_HASH="${NODEUP_HASH_AMD64}"
|
|
;;
|
|
aarch64*|arm64*)
|
|
NODEUP_URL="${NODEUP_URL_ARM64}"
|
|
NODEUP_HASH="${NODEUP_HASH_ARM64}"
|
|
;;
|
|
*)
|
|
echo "Unsupported host arch: $(uname -m)" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
cd ${INSTALL_DIR}/bin
|
|
download-or-bust nodeup "${NODEUP_HASH}" "${NODEUP_URL}"
|
|
|
|
chmod +x nodeup
|
|
|
|
echo "Running nodeup"
|
|
# We can't run in the foreground because of https://github.com/docker/docker/issues/23793
|
|
( cd ${INSTALL_DIR}/bin; ./nodeup --install-systemd-unit --conf=${INSTALL_DIR}/conf/kube_env.yaml --v=8 )
|
|
}
|
|
|
|
####################################################################################
|
|
|
|
/bin/systemd-machine-id-setup || echo "failed to set up ensure machine-id configured"
|
|
|
|
echo "== nodeup node config starting =="
|
|
ensure-install-dir
|
|
|
|
cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
|
|
CloudProvider: aws
|
|
InstanceGroupName: testIG
|
|
InstanceGroupRole: ControlPlane
|
|
NodeupConfigHash: soFi0PS8cYVnHNTGuj1Fv1d8Q71M6D9Mgo/fjlPSkB0=
|
|
|
|
__EOF_KUBE_ENV
|
|
|
|
download-release
|
|
echo "== nodeup node config done =="
|