setup.sh

#!/bin/bash
#
# Copyright (c) 2017-2019 Intel Corporation
#
# SPDX-License-Identifier: Apache-2.0
#

set -o errexit
set -o nounset
set -o pipefail

cidir=$(dirname "$0")
source /etc/os-release || source /usr/lib/os-release
source "${cidir}/lib.sh"

arch=$("${cidir}"/kata-arch.sh -d)
INSTALL_KATA="${INSTALL_KATA:-yes}"
CI=${CI:-false}

# values indicating whether related intergration tests have been supported
CRIO="${CRIO:-yes}"
CRI_CONTAINERD="${CRI_CONTAINERD:-no}"
KUBERNETES="${KUBERNETES:-yes}"
OPENSHIFT="${OPENSHIFT:-yes}"
TEST_CGROUPSV2="${TEST_CGROUPSV2:-false}"

setup_distro_env() {
	local setup_type="$1"
	[ -z "$setup_type" ] && die "need setup type"

	local script

	echo "Set up environment ($setup_type)"

	if [[ "$ID" =~ ^opensuse.*$ ]]; then
		script="${cidir}/setup_env_opensuse.sh"
	else
		script="${cidir}/setup_env_${ID}.sh"
	fi

	[ -n "$script" ] || die "Failed to determine distro setup script"
	[ -e "$script" ] || die "Unrecognised distribution: ${ID}"

	bash -f "${script}" "${setup_type}"

	sudo systemctl start haveged
}

install_docker() {
	if [ "${TEST_CGROUPSV2}" == "true" ]; then
		info "Docker won't be installed: testing cgroups V2"
		return
	fi

	if ! command -v docker >/dev/null; then
		"${cidir}/../cmd/container-manager/manage_ctr_mgr.sh" docker install
	fi
	# If on CI, check that docker version is the one defined
	# in versions.yaml. If there is a different version installed,
	# install the correct version..
	docker_version=$(get_version "externals.docker.version")
	docker_version=${docker_version/v/}
	docker_version=${docker_version/-*/}

	sudo systemctl restart docker

	if ( ! sudo docker version | grep -q "$docker_version" ) && [ "$CI" == true ]; then
		"${cidir}/../cmd/container-manager/manage_ctr_mgr.sh" docker install -f
	fi
}

enable_nested_virtualization() {
	case "$arch" in
	x86_64 | s390x)
		kvm_arch="kvm"
		[ ${arch} == "x86_64" ] && kvm_arch="kvm_intel"
		if [ "$CI" == true ] && grep -q "N" /sys/module/$kvm_arch/parameters/nested 2>/dev/null; then
			echo "enable Nested Virtualization"
			sudo modprobe -r $kvm_arch
			sudo modprobe $kvm_arch nested=1
			if grep -q "N" /sys/module/$kvm_arch/parameters/nested 2>/dev/null; then
				die "Failed to find or enable Nested virtualization"
			fi
		fi
		;;
	aarch64 | ppc64le)
		info "CI running in bare machine"
		;;
	*)
		die "Unsupported architecture: $arch"
		;;
	esac
}

install_kata() {
	if [ "${INSTALL_KATA}" == "yes" ]; then
		echo "Install Kata sources"
		bash -f ${cidir}/install_kata.sh
	fi
}

install_extra_tools() {
	echo "Install CNI plugins"
	bash -f "${cidir}/install_cni_plugins.sh"

	# load arch-specific lib file
	if [ -f "${cidir}/${arch}/lib_setup_${arch}.sh" ]; then
		source "${cidir}/${arch}/lib_setup_${arch}.sh"
	fi

	# Do not install immediately kubernetes on Fedora as
	# first we will run Openshift with its correspondent CRI-O
	# version and then we will install kubernetes with its
	# correspondent CRI-O version in order to not break the
	# compatibility matrix
	if [ "$ID" == "fedora" ]; then
		export KUBERNETES="no"
	fi

	[ "${CRIO}" = "yes" ] &&
		echo "Install CRI-O" &&
		bash -f "${cidir}/install_crio.sh" &&
		bash -f "${cidir}/configure_crio_for_kata.sh" ||
		echo "CRI-O not installed"

	[ "${CRI_CONTAINERD}" = "yes" ] &&
		echo "Install cri-containerd" &&
		bash -f "${cidir}/install_cri_containerd.sh" &&
		bash -f "${cidir}/configure_containerd_for_kata.sh" ||
		echo "containerd not installed"

	[ "${KUBERNETES}" = "yes" ] &&
		echo "Install Kubernetes" &&
		bash -f "${cidir}/install_kubernetes.sh" ||
		echo "Kubernetes not installed"

	[ "${OPENSHIFT}" = "yes" ] &&
		echo "Install Openshift" &&
		bash -f "${cidir}/install_openshift.sh" ||
		echo "Openshift not installed"
}

main() {
	local setup_type="default"

	# Travis only needs a very basic setup
	set +o nounset
	[ "$TRAVIS" = "true" ] && setup_type="minimal"
	set -o nounset

	[ "$setup_type" = "default" ] && bash -f "${cidir}/install_go.sh" -p -f

	setup_distro_env "$setup_type"

	[ "$setup_type" = "minimal" ] && info "finished minimal setup" && exit 0

	install_docker
	enable_nested_virtualization
	install_kata
	install_extra_tools
	echo "Disable systemd-journald rate limit"
	sudo crudini --set /etc/systemd/journald.conf Journal RateLimitInterval 0s
	sudo crudini --set /etc/systemd/journald.conf Journal RateLimitBurst 0
	sudo systemctl restart systemd-journald

	echo "Drop caches"
	sync
	sudo -E PATH=$PATH bash -c "echo 3 > /proc/sys/vm/drop_caches"

	if [ "$ID" == rhel ]; then
		major_version=$(echo $VERSION_ID | cut -d '.' -f1)
		if [ "${major_version}" == "7" ]; then
			sudo -E PATH=$PATH bash -c "echo 1 > /proc/sys/fs/may_detach_mounts"
		fi
	fi
}

main $*