XXX: iscsi and other stuff to get cinder to work

Author: hertrste

modules/compute/nova.nix

@@ -184,9 +184,24 @@ in
             user = "nova";
           };
         };
+        "/etc/systemd/system/tgtd.service" = {
+          "C+" = {
+            user = "root";
+            group = "root";
+            mode = "0600";
+            argument = "${pkgs.tgt}/etc/systemd/system/tgtd.service";
+          };
+        };
       };
     };
 
+    services.openiscsi = {
+      enable = true;
+      name = "iqn.iscsi.${config.networking.hostName}";
+    };
+
+    environment.systemPackages = [ pkgs.tgt ];
+
     systemd.services.nova-compute = {
       description = "OpenStack Nova Scheduler Daemon";
       after = [
@@ -200,6 +215,9 @@ in
           sudo
           nova_env
           qemu
+          util-linux
+          lvm2
+          tgt
         ]
         ++ cfg.extraPkgs;
       environment.PYTHONPATH = "${nova_env}/${pkgs.python3.sitePackages}";

modules/controller/cinder.nix

@@ -16,6 +16,7 @@ let
     transport_url = rabbit://openstack:openstack@controller
     auth_strategy = keystone
     my_ip = controller
+    verify_glance_signatures = disabled
 
     [database]
     connection = mysql+pymysql://cinder:cinder@controller/cinder

modules/storage/cinder-storage-node.nix

@@ -51,6 +51,7 @@ let
     state_path = /var/lib/cinder
     rootwrap_config = ${rootwrapConf}
     glance_api_servers = http://controller:9292
+    verify_glance_signatures = disabled
 
     [database]
     connection = mysql+pymysql://cinder:cinder@controller/cinder
@@ -74,6 +75,7 @@ let
     volume_group = cinder-volumes
     volume_backend_name = lvm
     lvm_type = default
+    target_protocol = iscsi
   '';
 in
 {
@@ -181,10 +183,13 @@ in
       path = with pkgs; [
         cinder_env
         lvm2
+        tgt
+        qemu-utils
         # sudo must be in the path and only sudo in /run/wrappers has the
         # correct owner and rights
         "/run/wrappers"
       ];
+      environment.PYTHONPATH = "${cinder_env}/${pkgs.python3.sitePackages}";
       wantedBy = [ "multi-user.target" ];
       serviceConfig = {
         User = "cinder";

modules/testing/default.nix

@@ -47,6 +47,9 @@ in
         url = "https://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img";
         hash = "sha256-B+RKc+VMlNmIAoUVQDwe12IFXgG4OnZ+3zwrOH94zgA=";
       };
+      image_raw = pkgs.runCommand "" { } ''
+        ${pkgs.qemu-utils}/bin/qemu-img convert -O raw ${image} $out
+      '';
     in
     {
       imports = [ common ];
@@ -86,8 +89,11 @@ in
               --dns-nameserver 8.8.4.4 --gateway 192.168.44.1 \
               --subnet-range 192.168.44.0/24 provider
 
-            openstack image create --disk-format qcow2 --container-format bare --public --file ${image} cirros
+            openstack image create --disk-format raw --container-format bare --public --file ${image_raw} cirros
             openstack flavor create --public m1.nano --id auto --ram 256 --disk 0 --vcpus 1
+            openstack volume qos create --consumer "front-end" --property "total_iops_sec=20000" iops
+            openstack volume qos associate iops __DEFAULT__
+            openstack volume create --image cirros --size 1 --bootable vol
 
             openstack security group rule create --proto icmp default
             openstack security group rule create --proto tcp --dst-port 22 default