Switch from suse to sles distro naming.

This is for clarity. Robotest doesn't presently offer openSUSE as a
target distro, but it does offer SLES. `suse` aliases are retained for
backwards compatibility, but may eventually be removed or point to
openSUSE images.

Furthermore, sles requires specifying the service pack -- to accommodate
that we may want to test on different service packs.

assets/terraform/gce/bootstrap/sles.sh

@@ -0,0 +1,164 @@
+#!/bin/bash
+#
+# Copyright 2020 Gravitational, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+#
+# VM bootstrap script for SuSE
+#
+set -o errexit
+set -o errtrace
+set -o xtrace
+set -o nounset
+set -o pipefail
+
+rm -f /var/lib/bootstrap_*
+touch /var/lib/bootstrap_started
+trap exit_handler EXIT
+
+etcd_device_name=sdb
+etcd_dir=/var/lib/gravity/planet/etcd
+DIR="$(cd "$(dirname "$${BASH_SOURCE[0]}")" >/dev/null && pwd)"
+
+function exit_handler {
+  if [[ $? -ne 0 ]]; then
+    touch -f /var/lib/bootstrap_failed
+  else
+    touch -f /var/lib/bootstrap_complete
+  fi
+}
+
+function secure-ssh {
+  local sshd_config=/etc/ssh/sshd_config
+  cp $sshd_config $sshd_config.old
+  (grep -qE '(\#?)\WPasswordAuthentication' $sshd_config && \
+    sed -re 's/^(\#?)\W*(PasswordAuthentication)([[:space:]]+)yes/\2\3no/' -i $sshd_config) || \
+    echo 'PasswordAuthentication no' >> $sshd_config
+  (grep -qE '(\#?)\WChallengeResponseAuthentication' $sshd_config && \
+    sed -re 's/^(\#?)\W*(ChallengeResponseAuthentication)([[:space:]]+)yes/\2\3no/' -i $sshd_config) || \
+    echo 'ChallengeResponseAuthentication no' >> $sshd_config
+  systemctl reload sshd
+}
+
+function setup-user {
+  local service_uid=$(id ${os_user} -u 2>/dev/null || true)
+  local service_gid=$(id ${os_user} -g 2>/dev/null || true)
+
+  if [ -z "$service_gid" ]; then
+    service_gid=1000
+    (groupadd --system --non-unique --gid $service_gid ${os_user} 2>/dev/null; err=$?; if (( $err != 9 )); then exit $err; fi) || true
+  fi
+
+  if [ -z "$service_uid" ]; then
+    service_uid=1000
+    useradd --system --non-unique -g $service_gid -u $service_uid ${os_user}
+  fi
+
+  if [ ! -d "/home/${os_user}/.ssh" ]; then
+    mkdir -p /home/${os_user}/.ssh
+    echo "${ssh_pub_key}" | tee /home/${os_user}/.ssh/authorized_keys
+    chmod 0700 /home/${os_user}/.ssh
+    chmod 0600 /home/${os_user}/.ssh/authorized_keys
+  fi
+
+  chown -R $service_uid:$service_gid /home/${os_user}
+  sed -i.bak 's/Defaults    requiretty/#Defaults    requiretty/g' /etc/sudoers
+}
+
+mkdir -p $etcd_dir /var/lib/data
+
+secure-ssh
+setup-user
+
+function install-aws-cli {
+  # suse-cloud/sles-15-sp1-v20200415 has no python, but offers python3.
+  # suse-cloud/sles-12-sp5-v20200227 has both, but it's python3 < 3.5 and is
+  # incompatible with awscli.
+  if command -v python; then
+    local python=$(command -v  python)
+  elif command -v python3; then
+    local python=$(command -v python3)
+  else
+    echo "No python available."
+    exit 2
+  fi
+  curl https://bootstrap.pypa.io/get-pip.py | $python -
+  $python -m pip install --upgrade awscli
+}
+
+install-aws-cli
+
+mkdir -p /var/lib/gravity/planet/etcd /var/lib/data
+
+if ! grep -qs "$etcd_dir" /proc/mounts; then
+  mkfs.ext4 -F /dev/$etcd_device_name
+  sed -i.bak "/$etcd_device_name/d" /etc/fstab
+  echo -e "/dev/$etcd_device_name\t$etcd_dir\text4\tdefaults\t0\t2" >> /etc/fstab
+  mount $etcd_dir
+fi
+
+# grow-root-fs expands '/' to use all available space on the device.
+#
+# The GCP sles-12-sp5-v20200610 image doesn't recognize extra space in drives
+# by default, and limits the '/' partition to 10G without this kick. This doesn't
+# affect suse-cloud/sles-15-sp1-v20200415.
+#
+# See https://cloud.google.com/compute/docs/disks/add-persistent-disk#resize_partitions
+function grow-root-fs {
+
+  local root_fs_dev=$(findmnt --noheadings -o SOURCE /) # e.g. /dev/sda3
+  local root_fs_dev_name=$(lsblk --noheadings -o kname $root_fs_dev) # e.g. sda3
+  local partition_number=$(cat /sys/class/block/$root_fs_dev_name/partition) # e.g. 3
+  local parent_dev_name=$(lsblk --noheadings -o pkname $root_fs_dev) # e.g. sda
+  local parent_dev=/dev/$parent_dev_name # e.g. /dev/sda
+
+  local root_fs_size_bytes=$(sudo blockdev --getsize64 $root_fs_dev)
+  local root_fs_size_gb=$((root_fs_size_bytes >> 30))
+  local expected=${root_partition_size} # from terraform
+
+  if [ $root_fs_size_gb -lt $expected ]; then
+    echo "Root filesystem looks smaller than expected."
+    echo "Filesystem utilization:"
+    df -h
+    growpart $parent_dev $partition_number
+    xfs_growfs /
+    echo "Filesystem utilization after grow:"
+    df -h
+  fi
+}
+
+grow-root-fs
+
+## Setup modules / sysctls
+# Load required kernel modules
+modules="br_netfilter overlay ebtable_filter ip_tables iptable_filter iptable_nat"
+for module in $modules; do
+  modprobe $module || true
+done
+# Store the modules into a file so that the modules will be auto-reloaded
+# on reboot
+echo '' > /etc/modules-load.d/telekube.conf
+for module in $modules; do
+  echo $module >> /etc/modules-load.d/telekube.conf
+done
+
+# Make changes permanent
+cat > /etc/sysctl.d/50-telekube.conf <<EOF
+net.ipv4.ip_forward=1
+net.bridge.bridge-nf-call-iptables=1
+net.ipv4.tcp_keepalive_time=60
+net.ipv4.tcp_keepalive_intvl=60
+net.ipv4.tcp_keepalive_probes=5
+EOF
+sysctl -p /etc/sysctl.d/50-telekube.conf

assets/terraform/gce/bootstrap/suse.sh

@@ -0,0 +1 @@
+sles.sh

assets/terraform/gce/os.tf

@@ -34,9 +34,15 @@ variable "oss" {
     "debian:10"     = "debian-cloud/debian-10-buster-v20200805"
     "debian:latest" = "debian-cloud/debian-10-buster-v20200805"
 
+    # suse is an alias of sles for backwards compatibility, may be removed in 3.0
     "suse:12"       = "suse-cloud/sles-12-sp5-v20200916"
     "suse:15"       = "suse-cloud/sles-15-sp2-v20201014"
     "suse:latest"   = "suse-cloud/sles-15-sp2-v20201014"
+
+    "sles:12-sp5"   = "suse-cloud/sles-12-sp5-v20200916"
+    "sles:12"       = "suse-cloud/sles-12-sp5-v20200916"
+    "sles:15-sp2"   = "suse-cloud/sles-15-sp2-v20201014"
+    "sles:15"       = "suse-cloud/sles-15-sp2-v20201014"
   }
 }
 

infra/gravity/terraform.go

@@ -193,6 +193,7 @@ func makeDynamicParams(baseConfig ProvisionerConfig) (*cloudDynamicParams, error
 			"debian": "robotest",
 			"redhat": "redhat",
 			"centos": "centos",
+			"sles":   "robotest",
 			"suse":   "robotest",
 		},
 		constants.AWS: {

infra/terraform/config.go

@@ -96,7 +96,7 @@ type Config struct {
 	// GCE defines Google Compute Engine connection parameters
 	GCE *gce.Config
 	// OS specified the OS distribution
-	OS string `json:"os" yaml:"os" validate:"required,eq=ubuntu|eq=redhat|eq=centos|eq=debian|eq=suse"`
+	OS string `json:"os" yaml:"os" validate:"required,eq=ubuntu|eq=redhat|eq=centos|eq=debian|eq=sles|eq=suse"`
 	// ScriptPath is the path to the terraform script or directory for provisioning
 	ScriptPath string `json:"script_path" validate:"required"`
 	// NumNodes defines the capacity of the cluster to provision