Update Release Candidate

component/cmake/buildout.cfg

 [buildout]
 extends =
   ../ncurses/buildout.cfg
+  ../openssl/buildout.cfg
 
 parts =
   cmake
@@ -11,5 +12,5 @@ shared = true
 url = https://cmake.org/files/v3.7/cmake-3.7.2.tar.gz
 md5sum = 79bd7e65cd81ea3aa2619484ad6ff25a
 environment =
-  CMAKE_INCLUDE_PATH=${ncurses:location}/include
-  CMAKE_LIBRARY_PATH=${ncurses:location}/lib
+  CMAKE_INCLUDE_PATH=${ncurses:location}/include:${openssl:location}/include
+  CMAKE_LIBRARY_PATH=${ncurses:location}/lib:${openssl:location}/lib

component/golang/buildout.cfg

@@ -68,6 +68,14 @@ md5sum = 6132109d4050da349eadc9f7b0304ef4
 environment-extra =
   GOROOT_BOOTSTRAP=${golang14:location}
 
+[golang1.13]
+<= golang-common
+url = https://dl.google.com/go/go1.13.9.src.tar.gz
+md5sum = 4ad8b04f962be93a32f3021e6f35b3b9
+
+# go1.13 needs go1.4 to bootstrap
+environment-extra =
+  GOROOT_BOOTSTRAP=${golang14:location}
 
 # ---- infrastructure to build Go workspaces / projects ----
 

component/haproxy/buildout.cfg

@@ -13,8 +13,8 @@ parts = haproxy
 [haproxy]
 recipe = slapos.recipe.cmmi
 shared = true
-url = http://www.haproxy.org/download/1.8/src/haproxy-1.8.23.tar.gz
-md5sum = 6c35b83a9969449c4b79783a2119551e
+url = http://www.haproxy.org/download/1.8/src/haproxy-1.8.25.tar.gz
+md5sum = ef2164ca3b1ea9011aa271a8cbe030a4
 configure-command = true
 # If the system is running on Linux 2.6, we use "linux26" as the TARGET,
 # otherwise use "generic".

component/kumo/buildout.cfg

 [buildout]
 extends =
+  ../defaults.cfg
   ../tokyocabinet/buildout.cfg
   ../messagepack/buildout.cfg
   ../openssl/buildout.cfg

component/libmicrohttpd/buildout.cfg

+[buildout]
+extends =
+  ../libiconv/buildout.cfg
+  ../gnutls/buildout.cfg
+  ../curl/buildout.cfg
+
+parts =
+  libmicrohttpd
+
+
+[libmicrohttpd]
+recipe = slapos.recipe.cmmi
+url = https://ftp.gnu.org/gnu/libmicrohttpd/libmicrohttpd-0.9.70.tar.gz
+md5sum = dcd6045ecb4ea18c120afedccbd1da74
+configure-options =
+  --with-libcurl=${curl:location}
+  --with-gnutls=${gnutls:location}
+  --with-libiconv-prefix=${libiconv:location}
+  --without-libintl-prefix

component/libtiff/buildout.cfg

@@ -19,7 +19,7 @@ configure-options =
   --disable-lzma
 patch-options = -p1
 patches =
-  ${:_profile_base_location_}/tiff_4.0.8-3.debian.patch#9f52aed13d6ae864b3fb46372fe97780
+  ${:_profile_base_location_}/debian_4.0.8-2+deb9u5.patch#dc9c9cb7f4f9a00100f908e640895185
 environment =
   CPPFLAGS=-I${libjpeg:location}/include -I${jbigkit:location}/include -I${zlib:location}/include
   LDFLAGS=-L${libjpeg:location}/lib -Wl,-rpath=${libjpeg:location}/lib -L${jbigkit:location}/lib -Wl,-rpath=${jbigkit:location}/lib -L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib

component/proxysql/buildout.cfg

+[buildout]
+extends =
+  ../autoconf/buildout.cfg
+  ../automake/buildout.cfg
+  ../libtool/buildout.cfg
+  ../cmake/buildout.cfg
+  ../openssl/buildout.cfg
+  ../patch/buildout.cfg
+  ../git/buildout.cfg
+  ../openssl/buildout.cfg
+  ../bzip2/buildout.cfg
+  ../perl/buildout.cfg
+  ../gnutls/buildout.cfg
+  ../curl/buildout.cfg
+  ../gnutls/buildout.cfg
+  ../libzip/buildout.cfg
+  ../m4/buildout.cfg
+  ../pcre/buildout.cfg
+  ../jemalloc/buildout.cfg
+  ../libmicrohttpd/buildout.cfg
+
+parts =
+  proxysql
+
+[proxysql]
+recipe = slapos.recipe.cmmi
+version = v2.0.12
+url = https://github.com/sysown/proxysql/archive/${:version}.tar.gz
+md5sum = 70ec17fe73703a25730fdd44b6bc3ef5
+prefix = @@LOCATION@@
+# Patch installation path for SlapOS
+pre-configure =
+  mkdir -p ${:prefix}/bin ${:prefix}/etc/init.d ${:prefix}/lib/systemd/system
+  sed -ri "
+    s#(\s)/usr/bin#\1${:prefix}/bin#g
+    s#(\s)/etc#\1${:prefix}/etc#g
+    s#(\s)/usr/lib#\1${:prefix}/lib#
+    s#(\s)/var/lib#\1${:prefix}/lib#g
+    s#(\s)useradd#\1echo useradd#g
+    s#(\s)systemctl#\1echo systemctl#g
+    s#(\s)chkconfig#\1echo chkconfig#g
+    s#(\s)update-rc.d#\1echo update-rc.d#g" Makefile
+
+configure-command = true
+environment =
+  GIT_VERSION=${:version}
+  PKG_CONFIG_PATH=${openssl:location}/lib/pkgconfig:${gnutls:location}/lib/pkgconfig:${libgcrypt:location}/lib/pkgconfig:${zlib:location}/lib/pkgconfig:${pcre:location}/lib/pkgconfig
+  PATH=${m4:location}/bin:${libtool:location}/bin:${libgcrypt:location}/bin:${curl:location}/bin:${perl:location}/bin:${pkgconfig:location}/bin:${bzip2:location}/bin:${autoconf:location}/bin:${git:location}/bin:${automake:location}/bin:${patch:location}/bin:${cmake:location}/bin:%(PATH)s
+  CXXFLAGS=-I${openssl:location}/include -I${gnutls:location}/include -I${zlib:location}/include
+  CFLAGS=-I${gnutls:location}/include
+  LDFLAGS=-L${openssl:location}/lib -Wl,-rpath -Wl,${gnutls:location}/lib -L${gnutls:location}/lib -Wl,-rpath=${curl:location}/lib -L${libtool:location}/lib -L${zlib:location}/lib -Wl,-rpath -Wl,${zlib:location}/lib -L${curl:location}/lib -L${pcre:location}/lib -L${jemalloc:location}/lib -L${libmicrohttpd:location}/lib
+  CMAKE_INCLUDE_PATH=${openssl:location}/include:${gnutls:location}/include:${curl:location}/include:${pcre:location}/include:${jemalloc:location}/include:${libmicrohttpd:location}/include
+  CMAKE_LIBRARY_PATH=${openssl:location}/lib:${gnutls:location}/lib:${curl:location}/lib:${pcre:location}/lib:${jemalloc:location}/lib:${libmicrohttpd:location}/lib
+  LIBTOOL=libtool
+  ACLOCAL_PATH=${pkgconfig:location}/share/aclocal:${libtool:location}/share/aclocal

component/python-manuel/buildout.cfg

+[buildout]
+extends = ../patch/buildout.cfg
+parts = manuel
+
+[manuel]
+recipe = zc.recipe.egg
+egg = manuel
+find-links = https://github.com/benji-york/manuel/tarball/${:revision}/manuel-${versions:manuel}.tar.gz
+revision = aeea5ce7e853b8dabb815efb83141c6ddeb62904
+
+[versions]
+manuel = 1.10.2.dev0

component/replication-manager/buildout.cfg

+[buildout]
+extends =
+  ../../component/golang/buildout.cfg
+
+parts =
+  gowork
+
+[gowork]
+golang  = ${golang1.13:location}
+install =
+buildflags =  -v --tags server --ldflags "-extldflags 'static' -w -s -X main.GoOS=linux -X main.GoArch=amd64 -X main.Version=2.1 -X main.FullVersion=$FULLVERSION -X main.Build=$(date +%FT%T%z) -X main.WithProvisioning=ON -X main.WithOpenSVC=OFF -X main.WithHaproxy=ON -X main.WithMaxscale=ON  -X main.WithMariadbshardproxy=ON -X  main.WithProxysql=ON -X  main.WithSphinx=ON -X main.WithArbitration=OFF -X main.WithArbitrationClient=ON -X main.WithMonitoring=ON -X main.WithHttp=ON -X main.WithBackup=ON -X main.WithMail=ON -X main.WithEnforce=ON -X main.WithDeprecate=ON"
+
+[gowork.goinstall]
+depends_gitfetch  =
+    ${git.signal18.io_signal18_repman:recipe}
+
+command = set -e
+  . ${gowork:env.sh}
+  cd ${git.signal18.io_signal18_repman:location}
+  export GO111MODULE=on
+  export FULLVERSION=$(git describe --tags)
+  go build ${gowork:buildflags} -o ${gowork:bin}/replication-manager
+  chmod -R u+w .
+# Remove binary files provided with replication manager else testnode will complain with 'libXXX => not found'.
+  rm -f ${git.signal18.io_signal18_repman:location}/share/amd64/darwin/*
+  rm -f ${git.signal18.io_signal18_repman:location}/share/amd64/linux/*
+
+[git.signal18.io_signal18_repman]
+<= go-git-package
+go.importpath = github.com/signal18/replication-manager
+repository =  https://github.com/signal18/replication-manager
+branch = 2.1
+revision = 9167a82c81af8f7be41cf51bc9be8a37dc3d8c03
\ No newline at end of file

component/restic/buildout.cfg

+[buildout]
+extends =
+  ../../component/golang/buildout.cfg
+
+parts =
+  restic
+
+[gowork]
+golang  = ${golang1.13:location}
+
+
+[restic]
+recipe  = plone.recipe.command
+update-command = ${:command}
+stop-on-error = True
+# GO111MODULE=on enables go modules support
+# the chmod is needed as modules are fetched with u-w
+command =
+  . ${gowork:env.sh} &&
+  cd ${git.github.com_restic_restic:location} &&
+  export GO111MODULE=on &&
+  go run build.go -o ${:output} &&
+  chmod -R u+w .
+output = ${gowork:bin}/restic
+location = ${:output}
+
+
+[git.github.com_restic_restic]
+<= go-git-package
+go.importpath = github.com/restic/restic
+repository =  https://github.com/restic/restic
+revision = v0.9.6
\ No newline at end of file

component/rina-tools/buildout.cfg

 [buildout]
 extends =
+  ../defaults.cfg
   ../automake/buildout.cfg
   ../git/buildout.cfg
   ../libtool/buildout.cfg
@@ -7,6 +8,9 @@ extends =
 
 parts = rina-tools
 
+[gcc]
+min_version = 0
+
 [irati-stack]
 recipe = slapos.recipe.build:gitclone
 repository = https://github.com/jmuchemb/irati-stack.git

component/socat/buildout.cfg

 [buildout]
+extends =
+  ../openssl/buildout.cfg
+
 parts =
   socat
 
@@ -7,3 +10,5 @@ recipe = slapos.recipe.cmmi
 url = http://www.dest-unreach.org/socat/download/socat-${:version}.tar.gz
 version = 1.7.3.2
 md5sum = aec3154f7854580cfab0c2d81e910519
+environment =
+  LDFLAGS=-L${openssl:location}/lib -Wl,-rpath=${openssl:location}/lib
\ No newline at end of file

component/sysbench/buildout.cfg

+[buildout]
+extends =
+  ../autoconf/buildout.cfg
+  ../automake/buildout.cfg
+  ../libtool/buildout.cfg
+  ../gettext/buildout.cfg
+  ../m4/buildout.cfg
+  ../mariadb/buildout.cfg
+
+parts =
+  sysbench
+
+[sysbench]
+recipe = slapos.recipe.cmmi
+shared = true
+url = https://github.com/akopytov/sysbench/archive/1.0.19.tar.gz
+md5sum = 2912bfe7238cac7351459019a84e2557
+pre-configure =
+  aclocal -I${pkgconfig:location}/share/aclocal -I${libtool:location}/share/aclocal -I${gettext:location}/share/aclocal
+  ./autogen.sh
+configure-options =
+  --disable-static
+  --with-mysql-includes=${mariadb:location}/include/mysql
+  --with-mysql-libs=${mariadb:location}/lib
+environment =
+  PATH=${m4:location}/bin:${autoconf:location}/bin:${automake:location}/bin:${pkgconfig:location}/bin:${libtool:location}/bin:%(PATH)s
+  CPPFLAGS=-I${gettext:location}/include -I${mariadb:location}/include
+  LDFLAGS=-L${gettext:location}/lib -Wl,-rpath=${gettext:location}/lib -L${mariadb:location}/lib -Wl,-rpath=${mariadb:location}/lib
+  ACLOCAL_PATH=${pkgconfig:location}/share/aclocal:${gettext:location}/share/aclocal:${libtool:location}/share/aclocal
\ No newline at end of file

component/zstd/buildout.cfg

@@ -10,8 +10,8 @@ parts =
 recipe = slapos.recipe.cmmi
 shared = true
 url = https://github.com/facebook/zstd/releases/download/v${:version}/zstd-${:version}.tar.gz
-version = 1.4.4
-md5sum = 487f7ee1562dee7c1c8adf85e2a63df9
+version = 1.4.5
+md5sum = dd0b53631303b8f972dafa6fd34beb0c
 location = @@LOCATION@@
 configure-command = :
 environment =

software/build-rina/software.cfg

@@ -8,9 +8,6 @@ parts =
   template
 download-cache = ${:directory}/download-cache
 
-[gcc]
-min_version = 0
-
 [template]
 recipe = slapos.recipe.template:jinja2
 # XXX: "template.cfg" is hardcoded in instanciation recipe

software/buildout-testing/runTestSuite.in

@@ -4,6 +4,7 @@ import argparse, os, re, subprocess, sys
 from time import gmtime, strftime, time
 from erp5.util import taskdistribution
 from erp5.util.testsuite import SubprocessError, TestSuite
+from pkg_resources import get_distribution
 from zc.buildout.buildout import Buildout
 
 if str is bytes:
@@ -40,17 +41,17 @@ class DummyTestResult:
 class BuildoutTestSuite(TestSuite):
 
   RUN_RE = re.compile(
-    r'Ran (?P<all_tests>\d+) tests with'
-    ' (?P<failures>\d+) failures,'
-    ' (?P<errors>\d+) errors and'
-    ' (?P<skips>\d+) skipped in')
+    br'Ran (?P<all_tests>\d+) tests with'
+    br' (?P<failures>\d+) failures,'
+    br' (?P<errors>\d+) errors and'
+    br' (?P<skips>\d+) skipped in')
 
   def run(self, test):
     start = time()
     try:
       status_dict = self.spawn(os.path.join('bin', 'zope-testrunner'),
         '--test-path', os.path.join(test_dict[test], 'src'))
-    except SubprocessError, e:
+    except SubprocessError as e:
       status_dict = e.status_dict
     end = time()
     status_dict.update(
@@ -93,35 +94,38 @@ def main():
   else:
     test_result = DummyTestResult(list(test_dict))
 
-  fd = os.open('buildout.cfg', os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0666)
+  fd = os.open('buildout.cfg', os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0o666)
   try:
     os.write(fd, str2bytes("""\
 [buildout]
-extends = %s
 develop =%s
-parts = test
+parts = testrunner
 newest = false
+versions = versions
 
 [versions]
 %s
+zope.exceptions = 4.3
+zope.interface = 4.7.2
+zope.testing = 4.7
 
-[bootstrap]
+[testrunner]
 recipe = zc.recipe.egg
-eggs = zc.buildout
-
-[test]
-recipe = zc.recipe.egg
-eggs +=
+eggs =
+  ${:recipe}
+  zope.testing
   zope.testrunner
 scripts =
   zope-testrunner
-""" % (os.path.join(slapos_buildout, 'buildout.cfg'),
-       ''.join('\n  ' + x for x in test_dict.itervalues()),
-       '\n'.join(x + ' =' for x in test_dict))))
+extra-paths =
+  %s
+""" % (''.join('\n  ' + x for x in test_dict.values()),
+       '\n'.join(x + ' =' for x in test_dict),
+       get_distribution('manuel').location,
+       )))
   finally:
     os.close(fd)
-  Buildout('buildout.cfg', {}).install(['bootstrap'])
-  subprocess.check_call((os.path.join('bin', 'buildout'),))
+  Buildout('buildout.cfg', {}).install(None)
 
   test_suite = BuildoutTestSuite(1)
   while 1:

software/buildout-testing/software.cfg

 [buildout]
 extends =
+  ../../component/python-manuel/buildout.cfg
   ../../stack/slapos.cfg
 parts =
   slapos-cookbook
@@ -14,6 +15,7 @@ git-executable = ${git:location}/bin/git
 recipe = zc.recipe.egg
 eggs = erp5.util
   zc.buildout
+  ${manuel:egg}
 scripts = ${:interpreter}
 interpreter = ${:_buildout_section_name_}
 

software/erp5/software-shared.cfg

+[buildout]
+extends = software.cfg
+shared-parts = /opt/slapgrid/shared-parts
+eggs-directory = /opt/slapgrid/shared-eggs
+abi-tag-eggs = true

software/neoppod/software-zodb5.cfg

@@ -6,7 +6,7 @@ eggs += mock
 ZEO-patches =
 
 [versions]
-ZODB = 5.5.1
+ZODB = 5.6.0
 ZEO = 5.2.0
 transaction = 2.4.0
 

software/repman/buildout.hash.cfg

+# THIS IS NOT A BUILDOUT FILE, despite purposedly using a compatible syntax.
+# The only allowed lines here are (regexes):
+# - "^#" comments, copied verbatim
+# - "^[" section beginings, copied verbatim
+# - lines containing an "=" sign which must fit in the following categorie.
+#   - "^\s*filename\s*=\s*path\s*$" where "path" is relative to this file
+#     Copied verbatim.
+#   - "^\s*hashtype\s*=.*" where "hashtype" is one of the values supported
+#     by the re-generation script.
+#     Re-generated.
+# - other lines are copied verbatim
+# Substitution (${...:...}), extension ([buildout] extends = ...) and
+# section inheritance (< = ...) are NOT supported (but you should really
+# not need these here).
+[instance.cfg]
+filename = instance.cfg.in
+md5sum = b41f521b5f7980c64260ed0e5c494450
+
+[instance-repman.cfg]
+_update_hash_filename_ = instance-repman.cfg.jinja2.in
+md5sum = 7dbaace0d7db0e26d582ad17f36ac9cd
+
+[config-toml.in]
+_update_hash_filename_ = templates/config.toml.in
+md5sum = 5cfa75ca5a0048a050c0041dfe541f3d
+
+[config-cluster-toml.in]
+_update_hash_filename_ = templates/cluster-config.toml.in
+md5sum = d2e79a9435082d9420281b4f59a5d464
+
+[nginx.conf.in]
+_update_hash_filename_ = templates/nginx.conf.in
+md5sum = 0eeb24c6aa0760f0d33c4cc2828ddf30
+
+[template-mariadb.cfg]
+_update_hash_filename_ = instance-mariadb.cfg.jinja2.in
+md5sum = 189ccee60d0fb53e29431a45e0816bc1
+
+[template-my-cnf]
+_update_hash_filename_ = templates/my.cnf.in
+md5sum = f3661b788099bb31d71ba6e7d36836d9
+
+[template-mariadb-initial-setup]
+_update_hash_filename_ = templates/mariadb_initial_setup.sql.in
+md5sum = 9be53e2e92333b93e92556b8a01d9c42
+
+[mariadb-init-root-sql]
+_update_hash_filename_ = templates/mariadb_init_root.sql.in
+md5sum = d927b5d36410bb02717d5ca125525785
+
+[init-root-wrapper-in]
+_update_hash_filename_ = templates/init_root_wrapper.in
+md5sum = 83ef59b5afaf4454d368823c33aef9cb
+
+[repman-manager-sh.in]
+_update_hash_filename_ = templates/repman-manager.sh.in
+md5sum = 50503bec392e31126328f51eadc11634
+
+[dbjobs-in]
+_update_hash_filename_ = templates/dbjobs.in
+md5sum = d2ebd2ec55bf8489789a52c808729925
+
+[mysqld-need-start.sh.in]
+_update_hash_filename_ = templates/mysqld-need-start.sh.in
+md5sum = e9bcee5dc1318fe3acda2663472214f5
+
+[proxy-need-start-stop.sh.in]
+_update_hash_filename_ = templates/proxy-need-start-stop.sh.in
+md5sum = 455aaf369bf5141758dc57f2c0e67b08

software/repman/instance-repman-output-schema.json

+{
+  "name": "Output Parameters",
+  "properties": {
+    "backend-url": {
+      "title": "Backend URL",
+      "description": "URL used to connect directly to backend without frontend. Requires IPv6.",
+      "type": "string",
+      "format": "uri"
+    },
+    "url": {
+      "title": "URL",
+      "description": "URL used to connect to the service.",
+      "type": "string",
+      "format": "uri"
+    },
+    "repman-password": {
+      "title": "Repman password",
+      "description": "Password for Replication Manager service.",
+      "type": "string"
+    }
+  }
+}

software/repman/instance.cfg.in

+[buildout]
+parts = switch-softwaretype
+
+eggs-directory = {{ buildout_egg_directory }}
+develop-eggs-directory = {{ buildout_develop_directory }}
+offline = true
+
+
+[switch-softwaretype]
+recipe = slapos.cookbook:switch-softwaretype
+default = template-instance-repman.cfg:rendered
+RootSoftwareInstance = ${:default}
+mariadb = template-instance-mariadb.cfg:rendered
+
+
+[slap-configuration]
+recipe = slapos.cookbook:slapconfiguration.serialised
+computer = ${slap-connection:computer-id}
+partition = ${slap-connection:partition-id}
+url = ${slap-connection:server-url}
+key = ${slap-connection:key-file}
+cert = ${slap-connection:cert-file}
+
+
+[jinja2-template-base]
+recipe  = slapos.recipe.template:jinja2
+mode    = 0644
+extensions = jinja2.ext.do
+rendered= ${buildout:directory}/${:_buildout_section_name_}
+supervisord-lib = {{ supervisord_lib }}
+import-list =
+  file supervisord_lib :supervisord-lib
+context =
+    key slapparameter_dict      slap-configuration:configuration
+    key computer_id             slap-configuration:computer
+    key ipv4_set                slap-configuration:ipv4
+    key ipv6_set                slap-configuration:ipv6
+    raw buildout_directory      {{ buildout_directory }}
+    raw buildout_bin_directory  {{ buildout_bin_directory }}
+    raw eggs_directory          {{ buildout_egg_directory }}
+    raw develop_eggs_directory  {{ buildout_develop_directory }}
+    raw mariadb_location        {{ mariadb_location }}
+    raw supervisord_lib         {{ supervisord_lib }}
+    raw supervisord_conf        {{ supervisord_conf }}
+    raw template_monitor        {{ template_monitor_cfg }}
+
+# program binaries
+    raw bash_bin                {{ bash_location }}/bin/bash
+    raw jq_bin                  {{ jq_location }}/jq
+    raw curl_bin                {{ curl_location }}/bin/curl
+
+    ${:extra-context}
+extra-context =
+
+[template-instance-repman.cfg]
+<= jinja2-template-base
+template= {{ template_repman_cfg }}
+extra-context =
+    raw gowork_bin                  {{ gowork_bin }}
+    raw haproxy_location            {{ haproxy_location }}
+    raw nginx_bin                   {{ nginx_location }}/sbin/nginx
+    raw repman_src_location         {{ repman_src_location }}
+
+# config files
+    raw config_toml_in             {{ config_toml_in }}
+    raw config_cluster_toml_in     {{ config_cluster_toml_in }}
+    raw nginx_conf_in              {{ nginx_conf_in }}
+    raw rsync_location             {{ rsync_location }}
+    raw restic_bin_location        {{ restic_bin_location }}
+    raw sysbench_location          {{ sysbench_location }}
+    raw proxysql_location          {{ proxysql_location }}
+    raw template_repman_manager_sh {{ template_repman_manager_sh }}
+    raw template_proxy_need_stopstart {{ proxy_need_stop_start_template }}
+
+[template-mariadb-parameters]
+bash = {{ bash_location }}
+dash-location = {{ dash_location }}
+gzip-location = {{ gzip_location }}
+mariadb-location = {{ mariadb_location }}
+template-my-cnf = {{ template_my_cnf }}
+template-mariadb-initial-setup = {{ template_mariadb_initial_setup }}
+template-mariadb-init-root = {{ template_init_root_sql }}
+template-init-root-wrapper = {{ template_init_root_wrapper }}
+template-mysqld-wrapper = {{ template_mysqld_wrapper }}
+template-mysqld-need-start = {{ mysqld_start_template }}
+link-binary = {{ dumps(mariadb_link_binary) }}
+check-computer-memory-binary = {{ bin_directory }}/check-computer-memory
+bin-directory = {{ bin_directory }}
+percona-tools-location = {{ percona_toolkit_location }}
+unixodbc-location = {{ unixodbc_location }}
+curl-location = {{ curl_location }}
+dbjobs-template = {{ dbjobs_in }}
+socat-location = {{ socat_location }}
+mroonga-mariadb-install-sql = {{ mroonga_mariadb_install_sql }}
+mroonga-mariadb-plugin-dir = {{ mroonga_mariadb_plugin_dir }}
+groonga-plugins-path = {{ groonga_plugin_dir }}:{{ groonga_mysql_normalizer_plugin_dir }}
+
+[template-instance-mariadb.cfg]
+<= jinja2-template-base
+template = {{ template_mariadb }}
+filename = instance-mariadb.cfg
+extra-context =
+    section parameter_dict template-mariadb-parameters
+
+

software/repman/software.cfg

+[buildout]
+
+extends =
+  buildout.hash.cfg
+  ../../component/restic/buildout.cfg
+  ../../component/replication-manager/buildout.cfg
+  ../../component/mariadb/buildout.cfg
+  ../../component/nginx/buildout.cfg
+  ../../component/haproxy/buildout.cfg
+  ../../component/logrotate/buildout.cfg
+  ../../component/percona-toolkit/buildout.cfg
+  ../../component/gzip/buildout.cfg
+  ../../component/sed/buildout.cfg
+  ../../component/coreutils/buildout.cfg
+  ../../component/grep/buildout.cfg
+  ../../component/sysbench/buildout.cfg
+  ../../component/proxysql/buildout.cfg
+  ../../component/socat/buildout.cfg
+  ../../component/rsync/buildout.cfg
+  ../../stack/supervisord/buildout.cfg
+  ../../stack/monitor/buildout.cfg
+  ../neoppod/software-common.cfg
+
+parts =
+  slapos-cookbook
+  mroonga-mariadb
+  instance.cfg
+  template-mariadb.cfg
+  template-mysqld-wrapper
+  gowork
+
+[instance.cfg]
+recipe = slapos.recipe.template:jinja2
+rendered = ${buildout:directory}/instance.cfg
+template = ${:_profile_base_location_}/${:filename}
+mode = 0644
+context =
+    key bash_location bash:location
+    key bin_directory buildout:bin-directory
+    key config_toml_in config-toml.in:target
+    key config_cluster_toml_in config-cluster-toml.in:target
+    key coreutils_location coreutils:location
+    key curl_location curl:location
+    key buildout_egg_directory buildout:eggs-directory
+    key buildout_develop_directory buildout:develop-eggs-directory
+    key buildout_directory buildout:directory
+    key buildout_bin_directory buildout:bin-directory
+    key dbjobs_in dbjobs-in:target
+    key dash_location dash:location
+    key jq_location jq-binary:location
+    key logrotate_cfg template-logrotate-base:rendered
+    key gowork_bin gowork:bin
+    key gzip_location gzip:location
+    key haproxy_location haproxy:location
+    key template_monitor monitor2-template:rendered
+    key mariadb_link_binary template-mariadb.cfg:link-binary
+    key mariadb_location mariadb:location
+    key mysqld_start_template mysqld-need-start.sh.in:target
+    key mroonga_mariadb_install_sql mroonga-mariadb:install-sql
+    key mroonga_mariadb_plugin_dir mroonga-mariadb:plugin-dir
+    key groonga_plugin_dir groonga:groonga-plugin-dir
+    key groonga_mysql_normalizer_plugin_dir groonga-normalizer-mysql:groonga-plugin-dir
+    key nginx_conf_in nginx.conf.in:target
+    key nginx_location nginx:location
+    key percona_toolkit_location percona-toolkit:location
+    key proxy_need_stop_start_template proxy-need-start-stop.sh.in:target
+    key repman_src_location git.signal18.io_signal18_repman:location
+    key rsync_location rsync:location
+    key restic_bin_location restic:location
+    key socat_location socat:location
+    key supervisord_lib supervisord-library:target
+    key supervisord_conf supervisord-conf:target
+    key template_repman_manager_sh repman-manager-sh.in:target
+    key template_mariadb template-mariadb.cfg:target
+    key template_mariadb_initial_setup template-mariadb-initial-setup:target
+    key template_monitor_cfg monitor2-template:rendered
+    key template_my_cnf template-my-cnf:target
+    key template_mysqld_wrapper template-mysqld-wrapper:rendered
+    key template_init_root_sql mariadb-init-root-sql:target
+    key template_init_root_wrapper init-root-wrapper-in:target
+    key template_repman_cfg instance-repman.cfg:target
+    key unixodbc_location unixodbc:location
+    key sysbench_location sysbench:location
+    key proxysql_location proxysql:location
+
+
+[jq-binary]
+recipe = hexagonit.recipe.download
+url = https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64
+md5sum = 1fffde9f3c7944f063265e9a5e67ae4f
+filename = jq
+mode = 0755
+download-only = true
+
+[download-file]
+recipe  = slapos.recipe.build:download
+url     = ${:_profile_base_location_}/${:_update_hash_filename_}
+destination = ${buildout:directory}/${:_buildout_section_name_}
+
+[config-toml.in]
+<= download-file
+
+[config-cluster-toml.in]
+<= download-file
+
+[instance-repman.cfg]
+<= download-file
+
+[repman-manager-sh.in]
+<= download-file
+
+[template-mariadb.cfg]
+<= download-file
+link-binary =
+  ${coreutils:location}/bin/basename
+  ${coreutils:location}/bin/cat
+  ${coreutils:location}/bin/cp
+  ${coreutils:location}/bin/ls
+  ${coreutils:location}/bin/tr
+  ${coreutils:location}/bin/uname
+  ${gettext:location}/lib/gettext/hostname
+  ${grep:location}/bin/grep
+  ${sed:location}/bin/sed
+  ${mariadb:location}/bin/mysqlbinlog
+
+[template-mariadb-initial-setup]
+<= download-file
+
+[template-my-cnf]
+<= download-file
+
+[mariadb-init-root-sql]
+<= download-file
+
+[init-root-wrapper-in]
+<= download-file
+
+[nginx.conf.in]
+<= download-file
+
+[dbjobs-in]
+<= download-file
+
+[mysqld-need-start.sh.in]
+<= download-file
+
+[proxy-need-start-stop.sh.in]
+<= download-file
+
+# Pin versions of eggs used that are not already pinned by stack/slapos.cfg
+[versions]
+slapos.recipe.template = 4.4
+rubygemsrecipe  = 0.2.2+slapos001

software/repman/software.cfg.json

+{
+  "name": "Replication Manager",
+  "description": "Replication Manager",
+  "serialisation": "xml",
+  "software-type": {
+    "default": {
+      "title": "Default",
+      "serialisation": "json-in-xml",
+      "description": "Replication Manager",
+      "request": "instance-repman-input-schema.json",
+      "response": "instance-repman-output-schema.json",
+      "index": 0
+    }
+  }
+}

software/repman/templates/cluster-config.toml.in

+{% macro setbool(value) -%}
+{% if value in ['true', 'True'] %} true {% else %} false {% endif -%}
+{% endmacro -%}
+[{{ parameter_dict['name'] }}]
+title = "{{ parameter_dict['name'] }}"
+monitoring-save-config = true
+db-servers-hosts = "{{ parameter_dict['db-list'] }}"
+db-servers-prefered-master = "{{ parameter_dict['db-prefered-master'] }}"
+db-servers-credential = "{{ parameter_dict['db-user'] }}:{{ parameter_dict['db-password'] }}"
+replication-credential = "{{ parameter_dict['db-user'] }}:{{ parameter_dict['db-password'] }}"
+monitoring-write-heartbeat-credential="{{ parameter_dict['heartbeat-user'] }}:{{ parameter_dict['heartbeat-password'] }}"
+db-servers-connect-timeout = 1
+slapos-db-partitions = "{{ parameter_dict['partition-list'] }}"
+slapos-proxysql-partitions = "{{ parameter_dict['proxysql-partition'] }}"
+
+proxysql = true
+proxysql-port = {{ parameter_dict['proxy-port'] }}
+proxysql-servers = "{{ parameter_dict['proxysql-servers'] }}"
+proxysql-servers-ipv6 = "{{ parameter_dict['proxysql-servers-ipv6'] }}"
+proxysql-user = "{{ parameter_dict['proxysql-user'] }}"
+proxysql-bootstrap = true
+proxysql-admin-port = {{ parameter_dict['proxy-admin-port'] }}
+proxysql-password = "{{ parameter_dict['password'] }}"
+
+prov-proxy-tags = "{{ parameter_dict['proxy-tags'] }}"
+
+monitoring-scheduler = true
+scheduler-db-servers-logical-backup  = true
+scheduler-db-servers-logical-backup-cron = "0 {{ parameter_dict['logical-backup-cron'] }}"
+scheduler-db-servers-logs   =  true
+scheduler-db-servers-logs-cron = "0 0 23 * * *"
+scheduler-db-servers-logs-table-keep = 4
+scheduler-db-servers-logs-table-rotate  = true
+scheduler-db-servers-logs-table-rotate-cron = "0 0 23 * * *"
+scheduler-db-servers-optimize  = true
+scheduler-db-servers-optimize-cron = "0 0 3 1 * 5"
+scheduler-db-servers-physical-backup = true
+scheduler-db-servers-physical-backup-cron = "0 {{ parameter_dict['physical-backup-cron'] }}"
+backup-physical-type = "mariabackup"
+backup-logical-type = "mysqldump"
+scheduler-db-servers-receiver-ports= "{{ parameter_dict['receiver-port-list'] }}"
+
+prov-proxy-cpu-cores = {{ parameter_dict['proxy-cpu-cores'] }}
+prov-proxy-memory = {{ parameter_dict['proxy-memory'] }}
+prov-db-cpu-cores = {{ parameter_dict['db-cpu-cores'] }}
+prov-db-disk-iops = {{ parameter_dict['db-disk-iops'] }}
+prov-db-memory = {{ parameter_dict['db-memory'] }}
+prov-db-memory-shared-pct = "{{ parameter_dict['db-memory-shared-pct'] }}"
+prov-db-memory-threaded-pct = "{{ parameter_dict['db-memory-threaded-pct'] }}"
+
+test-inject-traffic = true
+# failover
+failover-mode = "{{ parameter_dict['failover-mode'] }}"
+failover-limit = {{ parameter_dict['failover-limit'] }}
+failover-falsepositive-heartbeat = {{ setbool(parameter_dict['failover-falsepositive-heartbeat']) }}
+failover-falsepositive-heartbeat-timeout = {{ parameter_dict['failover-falsepositive-heartbeat-timeout'] }}
+failover-falsepositive-ping-counter = {{ parameter_dict['failover-falsepositive-ping-counter'] }}
+failover-max-slave-delay = {{ parameter_dict['failover-max-slave-delay'] }}
+failover-readonly-state = {{ setbool(parameter_dict['failover-readonly-state']) }}
+failover-restart-unsafe = {{ setbool(parameter_dict['failover-restart-unsafe']) }}
+failover-time-limit = {{ parameter_dict['failover-time-limit'] }}
+#switchover
+switchover-at-equal-gtid = {{ setbool(parameter_dict['switchover-at-equal-gtid']) }}
+switchover-slave-wait-catch = {{ setbool(parameter_dict['switchover-slave-wait-catch']) }}
+switchover-wait-kill = {{ parameter_dict['switchover-wait-kill'] }}
+switchover-wait-trx = {{ parameter_dict['switchover-wait-trx'] }}
+switchover-wait-write-query = {{ parameter_dict['switchover-wait-write-query'] }}
+
+

software/repman/templates/config.toml.in

+{% macro setbool(value) -%}
+{% if value in ['true', 'True'] %} true {% else %} false {% endif -%}
+{% endmacro -%}
+[Default]
+api-bind = "{{ parameter_dict['ipv4'] }}"
+http-bind-address = "{{ parameter_dict['ipv4'] }}"
+http-server = true
+http-session-lifetime = {{ parameter_dict['http-session-lifetime'] }}
+http-refresh-interval = {{ int(parameter_dict['http-refresh-interval'])*1000 }}
+monitoring-save-config = false
+api-https-bind = true
+api-credentials = "{{ parameter_dict['username'] }}:{{ parameter_dict['password'] }}"
+include = "{{ parameter_dict['cluster-d'] }}"
+autorejoin = {{ setbool(parameter_dict['autorejoin']) }}
+autoseed = {{ setbool(parameter_dict['autoseed']) }}
+{% if parameter_dict['autoseed'] in ['true', 'True'] -%}
+autorejoin-logical-backup = true
+{% endif -%}
+db-servers-binary-path = "{{ parameter_dict['mysql-bin-dir'] }}"
+# Database list of hosts to ignore in election
+#db-servers-ignored-hosts =
+# Database hosts list to monitor, IP and port (optional), specified in the host:[port] format and separated by commas
+monitoring-address = "{{ parameter_dict['ipv4'] }}"
+monitoring-wait-retry = 40
+
+#haproxy = true
+#haproxy-binary-path = "{{ parameter_dict['haproxy-bin'] }}"
+# HaProxy input bind address for read (default "0.0.0.0")
+#haproxy-ip-read-bind =
+# HaProxy input bind address for write (default "0.0.0.0")
+#haproxy-ip-write-bind =
+# HaProxy load balance read port to all nodes (default 3307)
+#haproxy-read-port =
+# HaProxy hosts (default "127.0.0.1")
+#haproxy-servers =
+# HaProxy statistics port (default 1988)
+#haproxy-stat-port =
+#HaProxy read-write port to leader (default 3306)
+#haproxy-write-port =
+
+# Use restic to archive and restore backups
+backup = true
+backup-restic = true
+backup-restic-binary-path = "{{ parameter_dict['restic-bin'] }}"
+backup-restic-aws = false
+backup-restic-password = "{{ parameter_dict['password'] }}"
+
+backup-mysqlclient-path = "{{ parameter_dict['mysqlclient-path'] }}"
+backup-mysqlbinlog-path = "{{ parameter_dict['mysqlbinlog-path'] }}"
+backup-mysqldump-path = "{{ parameter_dict['mysqldump-path'] }}"
+
+# Mail configuration
+# Alert email sender (default "mrm@localhost")
+mail-from = "{{ parameter_dict['mail-from'] }}"
+# Alert email SMTP server address, in host:[port] format (default "localhost:25")
+mail-smtp-addr = "{{ parameter_dict['mail-smtp-addr'] }}"
+mail-smtp-password = "{{ parameter_dict['mail-smtp-password'] }}"
+mail-smtp-user = "{{ parameter_dict['mail-smtp-user'] }}"
+# Alert email recipients, separated by commas
+mail-to = "{{ parameter_dict['mail-to'] }}"
+
+prov-orchestrator = "slapos"
+prov-db-tags = "{{ parameter_dict['enabled-tags'] }}"
+
+sysbench-binary-path = "{{ parameter_dict['sysbench-bin'] }}"
+# Number of threads to run benchmark (default 4)
+sysbench-threads = 4
+# Time to run benchmark (default 100)
+sysbench-time = 100
+sysbench-v1 = true
+

software/repman/templates/init_root_wrapper.in

+#!/bin/bash
+
+run_mysql () {
+  {{ mysql_bin }} --defaults-file="{{ mysql_conf }}" \
+  --protocol=socket -uroot -hlocalhost $@
+}
+
+if [ ! -f "{{ init_password_done }}" ]; then
+  for i in {30..0}; do
+    if echo 'SELECT 1' | run_mysql  &> /dev/null; then
+      break
+    fi
+    echo 'MySQL init process in progress...'
+    sleep 1
+  done
+  if [ "$i" = 0 ]; then
+    echo >&2 'MySQL init process failed.'
+    exit 1
+  fi
+  echo "Setting mariabdb root password...";
+  run_mysql  < {{ init_root_sql }} && touch {{ init_password_done }} || exit 1;
+  echo "done"
+fi
+
+# Run mariadb_upgrade when replication is bootstrapped will break replication topology.
+# skip when already upgraded until we have a good solution.
+if [ ! -f "{{ upgrade_done }}" ]; then
+  {{ mysql_update }}
+  if [ $? -eq 0 ]; then
+    touch {{ upgrade_done }};
+  fi
+fi
\ No newline at end of file

software/repman/templates/mariadb_init_root.sql.in

+--  What's done in this file shouldn't be replicated
+--  or products like mysql-fabric won't work
+SET @@SESSION.SQL_LOG_BIN=0;
+
+CREATE USER '{{ parameter_dict["root-user"] }}'@'localhost' IDENTIFIED BY '{{ parameter_dict["password"] }}' ;
+GRANT ALL ON *.* TO '{{ parameter_dict["root-user"] }}'@'localhost' WITH GRANT OPTION ;
+CREATE USER '{{ parameter_dict["root-user"] }}'@'%' IDENTIFIED BY '{{ parameter_dict["password"] }}' ;
+GRANT ALL ON *.* TO '{{ parameter_dict["root-user"] }}'@'%' WITH GRANT OPTION ;
+CREATE USER '{{ parameter_dict["root-user"] }}'@'::' IDENTIFIED BY '{{ parameter_dict["password"] }}' ;
+GRANT ALL ON *.* TO '{{ parameter_dict["root-user"] }}'@'::' WITH GRANT OPTION ;
+
+CREATE USER '{{ parameter_dict["heartbeat-user"] }}'@'localhost' IDENTIFIED BY '{{ parameter_dict["password"] }}' ;
+GRANT ALL ON *.* TO '{{ parameter_dict["heartbeat-user"] }}'@'localhost' WITH GRANT OPTION ;
+CREATE USER '{{ parameter_dict["heartbeat-user"] }}'@'%' IDENTIFIED BY '{{ parameter_dict["password"] }}' ;
+GRANT ALL ON *.* TO '{{ parameter_dict["heartbeat-user"] }}'@'%' WITH GRANT OPTION ;
+
+DROP DATABASE IF EXISTS test ;
+FLUSH PRIVILEGES ;
\ No newline at end of file

software/repman/templates/mariadb_initial_setup.sql.in

+SET @@SESSION.SQL_LOG_BIN=0;
+
+USE mysql;
+{% set mroonga = parameter_dict.get('mroonga', 'ha_mroonga.so') -%}
+{% if mroonga %}
+SOURCE {{ parameter_dict['mroonga-mariadb-install-sql'] }};
+{% endif %}
+DROP FUNCTION IF EXISTS sphinx_snippets;
+#CREATE FUNCTION sphinx_snippets RETURNS STRING SONAME 'ha_sphinx.so';
+
+{% macro database(name, user, password) -%}
+CREATE DATABASE IF NOT EXISTS `{{ name }}`;
+{% if user -%}
+GRANT ALL PRIVILEGES ON `{{ name }}`.* TO `{{ user }}`@`%` IDENTIFIED BY '{{ password }}';
+GRANT ALL PRIVILEGES ON `{{ name }}`.* TO `{{ user }}`@localhost IDENTIFIED BY '{{ password }}';
+GRANT ALL PRIVILEGES ON `{{ name }}`.* TO `{{ user }}`@'::' IDENTIFIED BY '{{ password }}';
+{%- endif %}
+{% endmacro -%}
+
+{% for entry in parameter_dict['database-list'] -%}
+{{   database(entry['name'], entry.get('user'), entry.get('password')) }}
+{% endfor -%}
\ No newline at end of file

software/repman/templates/mysqld-need-start.sh.in

+#!{{ bash_bin }}
+
+curl () {
+  {{ curl_bin }} -k --silent -H "Accept: application/json" "$@"
+}
+
+# TOKEN=$(curl -s -X POST --data '{"username":"{{ username }}","password":"XXXXX"}' {{ repman_url }}/api/login | {{ jq_bin }} -r '.token')
+
+# Checking if mariadb start is needed
+#CODE=$(curl -H "Authorization: Bearer ${TOKEN}" -o /dev/null -w "%{http_code}" {{ repman_url }}/api/clusters/{{ cluster }}/servers/{{ db_host }}/{{ db_port }}/need-start)
+CODE=$(curl -o /dev/null -w "%{http_code}" {{ repman_url }}/api/clusters/{{ cluster }}/servers/{{ db_host }}/{{ db_port }}/need-start)
+
+if [ $CODE -eq 200 ]; then
+  echo "$CODE: Updating mysql configuration..."
+  # update mysql configuration
+  {{ update_config }}
+  echo "$CODE: Starting mariadb service..."
+  # print current status, can be useful for debug...
+  {{ mariadb_controller }} status mariadb
+  {{ mariadb_controller }} start mariadb
+  sleep 5
+  # check again if the service is still up...
+  {{ mariadb_controller }} status mariadb
+fi

software/repman/test/README.md

+Tests for Replication Manager software release

stack/caucase/buildout.cfg

@@ -35,6 +35,6 @@ mode = 0644
 depends = ${caucase-jinja2-library-eggs:eggs}
 
 [versions]
-caucase = 0.9.5
+caucase = 0.9.7
 pem = 17.1.0
 PyJWT = 1.7.1

[Jérome Perrin]

In this release KVM and gitlab are broken ( for what seems to be a buildout bug, because for gitlab a workaround like jerome/slapos@5806ed5c seems to fix ).

@rafael @tomo How should we do when we need to release but master is broken ?

PS: is anybody working on repairing the state on master ? += and extends have always been buggy in buildout, maybe we should apply this gitlab patch and do same in kvm ?

[Rafael Monnerat]

How should we do when we need to release but master is broken ?

It is a bit complex but couldn't it get fixed by who broken it or make a workarround? KVM needs to be stable for a project so, in any case, it should be fixed somehow.

[Thomas Gambier]

How should we do when we need to release but master is broken ?

It's OK to merge on 1.0 branch even if all software are not working. The purpose of merging in 1.0 is to be able to tag and generate a SR in slapos master. We won't generate a SR in slapos master for broken SR for sure.

And of course, master should be fixed in the meantime.

PS: is anybody working on repairing the state on master ? += and extends have always been buggy in buildout, maybe we should apply this gitlab patch and do same in kvm ?

You can have a look at https://www.erp5.com/group_section/forum/buildout--extends-and---cheat-sheet-O0wP6uGjM1