File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/lxc.cpython-310.pyc
Back
o ;j@L � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlmZ ddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl m Z m Z ddl!m"Z" e�#e$�Z%ddd�Z&d Z'd Z(d Z)d Z*d Z+dZ,e-� Z.dd� Z/dd� Z0dd� Z1dd� Z2dd� Z3dd� Z4dd � Z5d d � Z6d�d d �Z7d!d"� Z8d�d#d$�Z9d�d%d&�Z:d'd(� Z;d�d)d*�Z<d+d,� Z=d�d.d/�Z>d0d1� Z?G d2d3� d3�Z@d4d5� ZA 6 - - d�d7d8�ZBd�d9d:�ZCd�d;d<�ZDd=d>� ZEd?d@� ZF d�dAdB�ZGd�dCdD�ZHd�dEdF�ZId�dGdH�ZJe.e.e.e.e.dfdIdJ�ZKd�dKdL�ZLd�dMdN�ZMd�dOdP�ZNdQdR� ZOd�dSdT�ZPdUdV� ZQd�dWdX�ZRd�dYdZ�ZSejTjU�VeSd[�ZWd�d\d]�ZXd�d^d_�ZYd�d`da�ZZd�dbdc�Z[d�ddde�Z\d�dfdg�Z]ejTjU�Ve]dh�Z^d�didj�Z_d�dkdl�Z`d�dmdn�Zad�dodp�Zbd�dqdr�Zcd�dsdt�Zdd�dvdw�Zed�dxdy�Zf 6 6 - - d�dzd{�Zgd�d|d}�Zh - 6 6 ~ - - d�d�d��Zi - 6 6 ~ - - - d�d�d��Zj - 6 6 ~ - - - d�d�d��Zk - 6 6 ~ - - - d�d�d��Zl - 6 6 ~ - - - d�d�d��Zm - 6 6 ~ - - - d�d�d��Znd�d�� Zod�d�d��ZpejTjU�Vepd��Zqd�d�d��Zrd�d�� Zs d�d�d��Ztd�d�d��Zu d�d�d��Zvd�d�d��Zwd�d�d��Zxd�d�d��ZydS )�zv Control Linux Containers via Salt :depends: lxc package for distribution lxc >= 1.0 (even beta alpha) is required � N)� OrderedDict)�CommandExecutionError�SaltInvocationError)�Version�list�ls)�list_�ls_�lxc�eth0�br0�/lxc.initial_seed� lxc-attachz /var/lib/lxcc C s t jj�d�r tS dS )N� lxc-start)FzSThe lxc execution module cannot be loaded: the lxc-start binary is not in the path.)�salt�utils�path�which�__virtualname__� r r �D/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/lxc.py� __virtual__7 s r c C s | st �dt�} | S )z� Get the configured lxc root for containers .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.get_root_path z lxc.root_path)�__opts__�get� DEFAULT_PATH�r r r r � get_root_pathT s r c C sZ d} t �| d�s'td d�}|d s't|d �}|td�k r"td��|� t | < t �| d�S ) z� Return the actual lxc client version .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.version z lxc.versionN� cmd.run_allzlxc-info --version�retcode�stdoutz1.0zLXC should be at least 1.0)� __context__r �__salt__r r )�kZcversion�verr r r �versionf s r$ c C s0 dd� t D �D ]} t�d| � t �| d� qdS )z4 Clear any lxc variables set in __context__ c S s g | ] }|� d �r|�qS )�lxc.�� startswith��.0�xr r r � <listcomp>� s z"_clear_context.<locals>.<listcomp>zClearing __context__['%s']N)r �logZtrace�pop)�varr r r �_clear_context~ s �r/ c C s8 d}| dkrd}| dkrd}nd| v rd}|� d| � �S ) z Ip sortingZ001� 127.0.0.1Z200�::1Z201z::Z100Z___r )�ip�idxr r r �_ip_sort� s r4 c C s� t �dd�} | s|t� } t� }| �t� z%td d�}|d �� dd� D ]}|�d�s6|�|�� d � � � q$W n t t fyC Y nw t �d i �� � D ] \}}||v rZ| �|� qLtj�d |� d ��ri| �|� qLt| �} d d � }| j|d� | t d< | S )z� Search which bridges are potentially available as LXC bridges CLI Example: .. code-block:: bash salt '*' lxc.search_lxc_bridges z lxc.bridgesNr z brctl showr � � r Z ip_interfacesz/sys/devices/virtual/net/z/bridgec S s, d}d| v r d}nd| krd}|� d| � �S )N�zr �ar �c�_r )r8 Zprefr r r � sort_bridges� s z(search_lxc_bridges.<locals>.sort_bridges��key)r r �set�add� DEFAULT_BRr! � splitlinesr' �split�stripr r � __grains__�items�osr �existsr �sort)ZbridgesZrunning_bridges�output�lineZifcr2 r; r r r �search_lxc_bridges� s4 ��� � rK c C s t � d S )z� Search the first bridge which is potentially available as LXC bridge CLI Example: .. code-block:: bash salt '*' lxc.search_lxc_bridge r )rK r r r r �search_lxc_bridge� s rL c K sr | s|� di �} | s i } | �d|� dt� dtd ��� | �d|� dt� dt� dt� d����� | d s7i } | S )N�minionZmaster�idZ master_portZret_portZ4506)r � setdefaultr )�config�kwargsr r r �_get_salt_config� s" ���rR c 4 s� �du ri �t ����tjj��|��t ���d��di ���}t|tt ff�s*i }t |�� dD� �fdd� }| du r>�d } d}t �dd�d v rJd }|d �}|sU|d |� |d d�}|r`|� d < |dd�}|rk|� d< |rq|� d < |dd�} t |dd��} |dg �} |dd�} |dd�} |dd�}|dd�}|dd�}|dd�}|d d�}|d d�}|d d �}|d d�}|d!d�}|d"d�}|du r�g }|d#d�}|r�||vr�|� |� |d$d�}|�d%d�}|d&d'�}|d(d�} |d)d�} |d*d�} |d+d�} |d,d�} t|d-i �fi ���}!|d.t�}"t|t��st� }|�|"t� �}#t|t��s-t� }$|$�|� |$}d}%|d)d�} |d/d�}&|d0d�}'|&�rZ|&}(|�rM|(d1|� �7 }(|(|#d2< |'du�rZ|'|#d0< t|d3g ��D ]�\})}*d4|)d5 � �}+|�|+i �},|%du �r�|*�d*|,�d*d��}%|%�r�|#�d*d� d} |%|,d*< |*�d6|,�d6d��}-|-�r�|-|,d6< |*�d2|*�d/d��}.|.�r�|.|,d2< |*�d&d�}/|/�r�|,d2 d1|/� �7 < d7D ]}0|0|*v �r�|*|0 |,d0< n�q�d0|,v�r�tjj�� |,d0< �qad}%d8d9� |D �D ]},||, }1|%�r |1�d*d� d*|1v �r |1d* }%d} �q�| �r| |#d6< | �r| |#d*< i }2| |2d< |!|2d-< |d:d;�|2d:< ||2d < ||2d < ||2d%< d<D ]}3||3d�|2d=< |2d= du�rL n�q:� |2d< | |2d< | |2d< ||2d< | |2d(< ||2d< ||2d < ||2d< ||2d< | |2d,< | |2d+< ||2d>< ||2d?< |d@dA�|2d@< |dBd�|2dB< | |2d< ||2d"< | |2d< ||2d< ||2d$< dCD ]$}0||0d��r�z �|0 |2|0< W �q� t�y� � |0 |2|0< Y �q�w �q�|2S )Ea� Interface between salt.cloud.lxc driver and lxc.init ``vm_`` is a mapping of vm opts in the salt.cloud format as documented for the lxc driver. This can be used either: - from the salt cloud driver - because you find the argument to give easier here than using directly lxc.init .. warning:: BE REALLY CAREFUL CHANGING DEFAULTS !!! IT'S A RETRO COMPATIBLE INTERFACE WITH THE SALT CLOUD DRIVER (ask kiorky). name name of the lxc container to create pub_key public key to preseed the minion with. Can be the keycontent or a filepath priv_key private key to preseed the minion with. Can be the keycontent or a filepath path path to the container parent directory (default: /var/lib/lxc) .. versionadded:: 2015.8.0 profile :ref:`profile <tutorial-lxc-profiles-container>` selection network_profile :ref:`network profile <tutorial-lxc-profiles-network>` selection nic_opts per interface settings compatibles with network profile (ipv4/ipv6/link/gateway/mac/netmask) eg:: - {'eth0': {'mac': '00:16:3e:01:29:40', 'gateway': None, (default) 'link': 'br0', (default) 'gateway': None, (default) 'netmask': '', (default) 'ip': '22.1.4.25'}} unconditional_install given to lxc.bootstrap (see relative doc) force_install given to lxc.bootstrap (see relative doc) config any extra argument for the salt minion config dnsservers list of DNS servers to set inside the container dns_via_dhcp do not set the dns servers, let them be set by the dhcp. autostart autostart the container at boot time password administrative password for the container bootstrap_delay delay before launching bootstrap script at Container init .. warning:: Legacy but still supported options: from_container which container we use as a template when running lxc.clone image which template do we use when we are using lxc.create. This is the default mode unless you specify something in from_container backing which backing store to use. Values can be: overlayfs, dir(default), lvm, zfs, brtfs fstype When using a blockdevice level backing store, which filesystem to use on size When using a blockdevice level backing store, which size for the filesystem to use on snapshot Use snapshot when cloning the container source vgname if using LVM: vgname lvname if using LVM: lvname thinpool: if using LVM: thinpool ip ip for the primary nic mac mac address for the primary nic netmask netmask for the primary nic (24) = ``vm_.get('netmask', '24')`` bridge bridge for the primary nic (lxcbr0) gateway network gateway for the container additional_ips additional ips which will be wired on the main bridge (br0) which is connected to internet. Be aware that you may use manual virtual mac addresses providen by you provider (online, ovh, etc). This is a list of mappings {ip: '', mac: '', netmask:''} Set gateway to None and an interface with a gateway to escape from another interface that eth0. eg:: - {'mac': '00:16:3e:01:29:40', 'gateway': None, (default) 'link': 'br0', (default) 'netmask': '', (default) 'ip': '22.1.4.25'} users administrative users for the container default: [root] and [root, ubuntu] on ubuntu default_nic name of the first interface, you should really not override this CLI Example: .. code-block:: bash salt '*' lxc.cloud_init_interface foo NZ lxc_profile�profilec s �� | � � | |��S �N)r )r" �default�rS �vm_r r � _cloud_getu s z(cloud_init_interface.<locals>._cloud_get�name� rF )ZUbuntu�ubuntu�image�template�backing�dir�vgname�snapshotF� autostartT� dnsservers� dns_via_dhcp�passwordZs3cr3t�password_encrypted�fstype�lvname�thinpool�pub_key�priv_key�sizeZ20G�script� script_args�users� ssh_username�network_profile�nic_opts�netmaskZ24r �bridge�gateway�unconditional_install� force_installrP � default_nicr2 �mac�/�ipv4Zadditional_ipsZethr5 �link)ry �hwaddrc S � g | ]}|�qS r r �r) r8 r r r r+ � � z(cloud_init_interface.<locals>.<listcomp>�memoryr )� clone_from�cloneZfrom_containerr� � bootstrap_url�bootstrap_args�bootstrap_shell�sh�bootstrap_delay)�cpu�cpuset�cpusharerT )�copy�deepcopyr r � dictupdate�updater � isinstance�dict�str�get_container_profilerD �bool�appendrR � DEFAULT_NICr rO � enumerater- �network�gen_mac�KeyError)4rY rW rQ Z profile_datarX Zdefault_templater\ r^ r` ra rb rc rd re rf rg rh ri rj rk rl rm rn ro rp rq rr rs r rt ru rv rw rP rx r Z bnic_optsZgwr2 ry ZfullipZixZioptsZifh�ethxZelinkZaipZnm�i�ndataZlxc_init_interfacer� r rV r �cloud_init_interface� s4 � � �� ��r� c K s� t |t�r|�dd �}t| |fi |��S |d u ri }ntd d| � d|� �d dd�}|d u r0i }t |t�s=td| � d���tjjj di t � |���}tjj � t � |�|�}|S ) NrY � config.getr% �:Zrecurse)rU �mergez must be a dictionaryr )r� r� r- � _get_profiler! r r r �argsZ clean_kwargsr� r� r� r� )r= rY rQ Z profilename� profile_matchZ overridesr r r r� s" � �r� c K � t d| fi |��}|S )a� .. versionadded:: 2015.5.0 Gather a pre-configured set of container configuration parameters. If no arguments are passed, an empty profile is returned. Profiles can be defined in the minion or master config files, or in pillar or grains, and are loaded using :mod:`config.get <salt.modules.config.get>`. The key under which LXC profiles must be configured is ``lxc.container_profile.profile_name``. An example container profile would be as follows: .. code-block:: yaml lxc.container_profile: ubuntu: template: ubuntu backing: lvm vgname: lxc size: 1G Parameters set in a profile can be overridden by passing additional container creation arguments (such as the ones passed to :mod:`lxc.create <salt.modules.lxc.create>`) to this function. A profile can be defined either as the name of the profile, or a dictionary of variable names and values. See the :ref:`LXC Tutorial <tutorial-lxc-profiles>` for more information on how to use LXC profiles. CLI Example: .. code-block:: bash salt-call lxc.get_container_profile centos salt-call lxc.get_container_profile ubuntu template=ubuntu backing=overlayfs Zcontainer_profile�r� �rY rQ rS r r r r� 4 s %r� c K r� )ay .. versionadded:: 2015.5.0 Gather a pre-configured set of network configuration parameters. If no arguments are passed, the following default profile is returned: .. code-block:: python {'eth0': {'link': 'br0', 'type': 'veth', 'flags': 'up'}} Profiles can be defined in the minion or master config files, or in pillar or grains, and are loaded using :mod:`config.get <salt.modules.config.get>`. The key under which LXC profiles must be configured is ``lxc.network_profile``. An example network profile would be as follows: .. code-block:: yaml lxc.network_profile.centos: eth0: link: br0 type: veth flags: up To disable networking entirely: .. code-block:: yaml lxc.network_profile.centos: eth0: disable: true Parameters set in a profile can be overridden by passing additional arguments to this function. A profile can be passed either as the name of the profile, or a dictionary of variable names and values. See the :ref:`LXC Tutorial <tutorial-lxc-profiles>` for more information on how to use network profiles. .. warning:: The ``ipv4``, ``ipv6``, ``gateway``, and ``link`` (bridge) settings in network profiles will only work if the container doesn't redefine the network configuration (for example in ``/etc/sysconfig/network-scripts/ifcfg-<interface_name>`` on RHEL/CentOS, or ``/etc/network/interfaces`` on Debian/Ubuntu/etc.) CLI Example: .. code-block:: bash salt-call lxc.get_network_profile default rq r� r� r r r �get_network_profile] s 8r� c C sv t | �} td � }| |k rd|� �S t� }t|�| k r4t�d|d �}||vr.|�t|�� t|�| k sd�t |��S )z> Return a random subset of cpus for the cpuset config z status.nprocz0-r r5 �,) �intr! r> �len�random�randintr? r� �join�sorted)r� ZavailZto_set�choicer r r � _rand_cpu_str� s �r� c % s |� dd�}g }|� di �}|du ri }| sg } t| �}|s i }|r/t|tftf�r/t|�� ni � t� vr9i � t< t�|�}|� dd�}|� dd�}|rp|� � D ] \}} � � |i �} z t j j�| | �} W qP tyo td��w dd� � D �} | � fd d�|D �7 } | �� d } | D �]L}� � |i �} |r�|� |i �ni } |� |i �}| � d | � d d ��}|r�q�| � d | � d | � d | � d d����}| � d| � dd��}| � d| � dd��}| � d| � dd��}| � d| � dd��}| � d| � dd��}td| ||� d�dd�fdd |||d�fd| ||� d�dd�fd| ||� d�t� d�fd| ||� d�t j j�� d�fd | ||� d d�dd�fd | ||� d d�dd�fg�}t|�� �D ]$}|| }|d �rx|d �rm|d |d < �qU|d! �rx|d! |d < �qU|� � D ]\}}|d �r�|�||d i� �q~| � � D ]&\}}|dk�r�|�r�|}| � ||�}|d"v �r��q�|�d#|� �|i� �q�|�s�| � dd�}|du�r�| �s�|�d$|i� d%} q�|du�r�| �s�|�d$|i� d%} t|�} d&d� | D �D ]K} | | } | � dd�} | � dd�} d'\}!}"| |v �r || }#|#� dd�}!|#� dd�}"|"�r'| �s'|"} | �s,d} | | | d< |!�r>| �s>|!| | d< �q�g }| �� D ]}|D ]}$|�t|$||$ fg�� �qJ�qFtt � �td(�k�r�d%d)d� |D �v�r�d%d*d� |D �v �r�|�d$d+i� |S ),a< Network configuration defaults network_profile as for containers, we can either call this function either with a network_profile dict or network profile name in the kwargs nic_opts overrides or extra nics in the form {nic_name: {set: tings} rq Nrr ru rt z Invalid nic_opts configurationc S r~ r r r r r r r+ � r� z!_network_conf.<locals>.<listcomp>c � g | ]}|� vr|�qS r r r �Znicpr r r+ � � F�disablery r} rZ �type�flagsr| r{ �ipv6�lxc.network.type�veth)�test�value�oldrU �lxc.network.namezlxc.network.flagsZupzlxc.network.linkzlxc.network.hwaddr�lxc.network.ipv4zlxc.network.ipv6r� r� r� rU )r� r� rY ru ry r| r{ r� � lxc.network.�lxc.network.ipv4.gatewayTc S r~ r r r r r r r+ U r� )rZ rZ z1.0.7c S � g | ]}d |v �qS )r� r r r r r r+ r � c S r� )r� r r r r r r+ s r� �auto) r � _get_vethsr� r� r� r� r� r� r� r- rE rO r r r� r� �AttributeErrorr rH r rL r� r� r �keysr� �valuesr r$ )%� conf_tuplesrQ Znic�retrr r� ru rt �devr� r� �ifsZ gateway_set�optsZold_ifr� ry �type_r� r| r{ r� �infos�infoZbundle�datar= �val�newZifacer� ZnmacZntypeZomacZotype�odata�rowr r� r � _network_conf� s* � ��� ��� �� �� �� ����A � � � � �r� c K s� t �| �} i }dD ]}| �|d �}|d ur ||d|� �< q | �d�}|d u r(d}|dkr7|r3d|d< nd|d< | �d �}|d urH|d d |d < | �d �}|rS||d < | �d�}| �d�}|rc||d< |rm|smt|�|d < |S )N)�utsname�rootfsr% rb T�keep�1zlxc.start.auto�0r� i � lxc.cgroup.memory.limit_in_bytesr� zlxc.cgroup.cpuset.cpusr� r� zlxc.cgroup.cpu.shares)r� r� r r� ) rQ r� r" r� rb r� r� r� r� r r r �_get_lxc_default_datay s6 � r� Fc K sp t |�}| sg } t�|�}g }|s(tdi |��}|�� D ] \}}|�||i� q tdd| i|��}|�|� |S )a Return a list of dicts from the salt level configurations conf_tuples _LXCConfig compatible list of entries which can contain - string line - tuple (lxc config param,value) - dict of one entry: {lxc config param: value) only_net by default we add to the tuples a reflection of both the real config if avalaible and a certain amount of default values like the cpu parameters, the memory and etc. On the other hand, we also no matter the case reflect the network configuration computed from the actual config if available and given values. if no_default_loads is set, we will only reflect the network configuration back to the conf tuples list r� Nr )r� r� r� r� rE r� r� �extend)r� �only_netrQ r� � default_datar" r� � net_datasr r r � _config_list� s r� c C s� t | t�r t| �� �} t� }t� }d}| D ]Y}|r't |t�r't|�� �d }n"t |t�rI|�� }|�d�s7|s8qd|v rItdd� |� dd�D ��}|d dkrRt� }|d d krbd }|||d �� < |d �� ||d �� < q|rw|rw||t < |S ) zj Parse the nic setup inside lxc conf tuples back to a dictionary indexed by network interface Tr �#�=c s s � | ]}|� � V qd S rT �rC r r r r � <genexpr>� � � z _get_veths.<locals>.<genexpr>r5 r� r� F) r� r� r rE r r� rC r' �tuplerB r� )Znet_data�nicsZ current_nicZno_names�itemZsitemr r r r� � s. r� c @ sL e Zd ZdZe�d�Ze�d�Zdd� Zdd� Z dd � Z d d � Z d d � Z dS )� _LXCConfigz LXC configuration data z^(\S+)(\s*)(=)(\s*)(.*)z^((#.*)|(\s*))$c s� t �|�}|�dd �� _t|�dd ��}g � _� jr�tj� |� jd�� _tj� � j�rt j j �� j��D}t j j�|�� �D ]2}� j�|�� �}|rY� j�|d d |d d f� � j�|�� �}|ro� j�d|d d f� q=W d � n1 szw Y nd � _� fdd�}td i |��}|�� D ] \}} ||| � q�� �d �} td d | i|��} | r�| D ] } � j�t| �� �� q�d D ] } |�| �sˈ �| � q�d S ) NrY r rP r ���rZ c s& |r� � | � � j�| |f� d S d S rT )� _filter_datar� r� )r= r� ��selfr r �_replace s �z%_LXCConfig.__init__.<locals>._replace� lxc.networkr� )r� r ) r� r� r- rY r r r� rF r r� �isfiler r �files�fopen�decode� readlines�pattern�findallrC r� �non_interpretable_patternr� rE r� r� r� r )r� rQ r ZfhrrJ �matchr� r� r= r� �old_netr� r� r3 r r� r �__init__� sD �� �� ��z_LXCConfig.__init__c C s dd� | j D �}d�|�d S )Nc s s( � | ]}d � ||d r dnd�V qdS )z{0[0]}{1}{0[1]}r � = rZ N)�format)r) r� r r r r� s � � �z'_LXCConfig.as_string.<locals>.<genexpr>� )r� r� )r� �chunksr r r � as_string s �z_LXCConfig.as_stringc C sf | j r1| �� }tjj�| j d��}|�tjj�|�� |� � W d � d S 1 s*w Y d S d S )N�w) r r r r r� r� �write� stringutils�to_str�flush)r� �content�ficr r r r s "��z_LXCConfig.writec C s" t �� }|�| �� � |�� |S rT )�tempfileZNamedTemporaryFiler r r )r� Zntfr r r r & s z_LXCConfig.tempfilec C sB g }g }| j D ]}|d �|�s|�|� q|�|� q|| _ |S )zQ Removes parameters which match the pattern from the config data r )r� r' r� )r� r� �removed�filtered�paramr r r r� . s z_LXCConfig._filter_dataN) �__name__� __module__� __qualname__�__doc__�re�compiler� r� r� r r r r� r r r r r� � s & r� c s� t t�| �d����t�| �� d� �fdd� }|d�}|d�}|d�}| �dd�}d D ]}| �|d� q+|r�tj�|�j}t d |�}t j � |�} t jj�|t d d ��} d |� d| � d| � �} t| |d�s�t| f||||d�| �� |r�t j �d|| �} tt| |d�d fddid| i�� | S |r�d |� �} t| |d�s�t| f||||d�| �� |r�t j �d|| �} tt| |d�d fddid| i�� | S dS )z� If the needed base does not exist, then create it, if it does exist create nothing and return the name of the base lxc container so it can be cloned. rS Nc �( � � | t�}�� | |�}|tu r|S |S rT �r- �_marker�r= rU Zkw_overrides_matchr� �� kw_overridesrS r r �selectF � z_get_base.<locals>.selectr] r\ r` r )r r\ r` r] � cp.cache_filer� Z hash_typeZ__base_r: r )r] r\ r r` z/devrP � out_format� commented� lxc.rootfsrZ rT )r� r� r� r r- �urllib�parse�urlparse�schemer! rF r �basenamer r Z hashutilsZget_hashrG �creater� � edit_confr� ) rQ r r] r\ r` r r �proto�img_tarZimg_nameZhash_rY r� r r r � _get_base= sp � ������ ������r( Tc < s> �i d�}t t�����|s��d�}|st}dg i}|�d�} | du r&g } dg} | D ] } | | vr6| �| � q+t�|�� d^� �fdd� } | d��t��} t��d �}!| d �}"|"rZ|"ntd d �}#| d d�}$| d| �} | dd�}%| dd�}&| d�}'t |fi |��}(| dd�})| d�}*|#r�|*s�z|#|d < t d_d�i|��}*W n! t t fy� }+ z|+j |d< | r�||d< |W Y d}+~+S d}+~+ww |�d�dur�d|d< t��d �},d}-d}.|,rאn/|*�rTd}.zt�|*fd�i|�� | �ddi� W n; t t f�y+ }+ z,d |+j v �r | �dd i� nd|d < |+j |d< | �r||d< |W Y d}+~+S W Y d}+~+nd}+~+ww t�|||�|| |||d � }/t|/jd d!�}0|/�� t|/jd d!�}1|0|1k�rSd}-n�d}.t|||�||| ||d"� }/|/�� �\}2zt�f|2j�d#�|�� | �dd$i� W n> t t f�y� }+ z/d |+j v �r�| �dd i� n|+j |d< | �r�||d< |W Y d}+~+W d � S W Y d}+~+nd}+~+ww W d � n 1 �s�w Y tj�| �d%�}3g }0tj�|3��r�t|3d d!�}0t|0|||||||d&�}4|4�r�t|3d |4d'� t|3d d!�}1|0|1k�rd}-t�|||�|| |||d � }/g }0tj�|/j��r%t|/jd d!�}0|/�� t|/jd d!�}1|0|1k�r>| �d%d(i� d}-|-�rozt��d � W n% t t f�yn }+ zd)|+� �|d< | �rb||d< |W Y d}+~+S d}+~+ww |,�r~|,�r�t��d �d*k�r�zt ��d � W n% t t f�y� }+ zd)|+� �|d< | �r�||d< |W Y d}+~+S d}+~+ww |.�r�t �d+t � d,��ddd-� |�d d��rv| �rvd.}5|5d/d0�� d1�g}6t ��fd2d3�|6D ���svd4D ] }7|7| v�r�t �d5|7� �d�ddd6�d7k�r�| �|7� �q�| D ]@} z t!�| g�| | d8�}8W �q t t f�y@ }+ z"| � d9�|+j }9| dk�r0|9|d< d|d < nt"�#|9� W Y d}+~+�q d}+~+ww |�d d��rv| �d:d;i� t �d<�$|5��ddd=�d7k�rvd>|d< | d? d: d@|d dA 7 < d|d < |�d d��r�| �r�dB}5|5dCdD�� dE�g}6t ��fdFd3�|6D ���s�z t%��| |dG� W n t t f�y� }+ zdH|+j |d< d|d < W Y d}+~+n3d}+~+ww | �dIdJi� t �d<�$|5�d�ddK�d7k�r�dL|d< | d? dI d@|d dA 7 < d|d < |.�r t �d+t � d,��ddM� dN}5|5dOg}6t ��fdPd3�|6D ���s|�d d��sn�|%�s!|'�r�|%�rlzt&�|(�|)|||&||||||dQ� }:W n t t f�yW }+ zdR|+j |d< d|d < W Y d}+~+nhd}+~+ww |:�sddS|d< d|d < nW| �dTdUi� nO|'�r�zt|' t'��d �dV �|(�}:W n" t t f�y� }+ zdW�$|'|+j �|d< d|d < W Y d}+~+n d}+~+ww |:�s�dX�$|'�|d< d|d < n | �dTdY�$|'�i� |�d d��r�|$�s�zt��d � W n t t f�y� }+ zd)|+� �|d< d|d < W Y d}+~+nd}+~+ww t��d �};|!|;k�r| �dZ|!|;d[�i� |�d d��rd\�� d]�|d< d|d < | �r ||d< |S )`aO Initialize a new container. This is a partial idempotent function as if it is already provisioned, we will reset a bit the lxc configuration file but much of the hard work will be escaped as markers will prevent re-execution of harmful tasks. name Name of the container image A tar archive to use as the rootfs for the container. Conflicts with the ``template`` argument. cpus Select a random number of cpu cores and assign it to the cpuset, if the cpuset option is set then this option will be ignored cpuset Explicitly define the cpus this container will be bound to cpushare cgroups cpu shares autostart autostart container on reboot memory cgroups memory limit, in MB .. versionchanged:: 2015.5.0 If no value is passed, no limit is set. In earlier Salt versions, not passing this value causes a 1024MB memory limit to be set, and it was necessary to pass ``memory=0`` to set no limit. gateway the ipv4 gateway to use the default does nothing more than lxcutils does bridge the bridge to use the default does nothing more than lxcutils does network_profile Network profile to use for the container .. versionadded:: 2015.5.0 nic_opts Extra options for network interfaces, will override ``{"eth0": {"hwaddr": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1", "ipv6": "2001:db8::ff00:42:8329"}}`` or ``{"eth0": {"hwaddr": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1/24", "ipv6": "2001:db8::ff00:42:8329"}}`` users Users for which the password defined in the ``password`` param should be set. Can be passed as a comma separated list or a python list. Defaults to just the ``root`` user. password Set the initial password for the users defined in the ``users`` parameter password_encrypted : False Set to ``True`` to denote a password hash instead of a plaintext password .. versionadded:: 2015.5.0 profile A LXC profile (defined in config or pillar). This can be either a real profile mapping or a string to retrieve it in configuration start Start the newly-created container dnsservers list of dns servers to set in the container, default [] (no setting) seed Seed the container with the minion config. Default: ``True`` install If salt-minion is not already installed, install it. Default: ``True`` config Optional config parameters. By default, the id is set to the name of the container. master salt master (default to minion's master) master_port salt master port (default to minion's master port) pub_key Explicit public key to preseed the minion with (optional). This can be either a filepath or a string representing the key priv_key Explicit private key to preseed the minion with (optional). This can be either a filepath or a string representing the key approve_key If explicit preseeding is not used; Attempt to request key approval from the master. Default: ``True`` path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 clone_from Original from which to use a clone operation to create the container. Default: ``None`` bootstrap_delay Delay in seconds between end of container creation and bootstrapping. Useful when waiting for container to obtain a DHCP lease. .. versionadded:: 2015.5.0 bootstrap_url See lxc.bootstrap bootstrap_shell See lxc.bootstrap bootstrap_args See lxc.bootstrap force_install Force installation even if salt-minion is detected, this is the way to run vendor bootstrap scripts even if a salt minion is already present in the container unconditional_install Run the script even if the container seems seeded CLI Example: .. code-block:: bash salt 'minion' lxc.init name [cpuset=cgroups_cpuset] \ [cpushare=cgroups_cpushare] [memory=cgroups_memory] \ [nic=nic_profile] [profile=lxc_profile] \ [nic_opts=nic_opts] [start=(True|False)] \ [seed=(True|False)] [install=(True|False)] \ [config=minion_config] [approve_key=(True|False) \ [clone_from=original] [autostart=True] \ [priv_key=/path_or_content] [pub_key=/path_or_content] \ [bridge=lxcbr0] [gateway=10.0.3.1] \ [dnsservers[dns1,dns2]] \ [users=[foo]] [password='secret'] \ [password_encrypted=(True|False)] )rY �changesrq �initN�rootc r rT r r r r r r Q r zinit.<locals>.selectr r r` r� � lxc.vgname�startTrb �seed�install�seed_cmd� approve_keyr� rS �commentr) ra Fr$ zContainer clonedzalready existszContainer already exists�result) rY rq rr rt r ru rb r� r� r� r �r ) rq rr r� r rt ru rb r� r� )rP rS zContainer createdrP )r� r� rq rr rt r� r� r� �r � lxc_configz Container configuration updated�Unable to stop container: �runningzrm -f '�')r �chroot_fallback� python_shellz/.lxc.initial_passz/lxc.initial_passz/.lxc.z .initial_passc 3 �. � | ]}t � d |� d�d�dd�dkV qdS �z test -e "�"T�r: r �ignore_retcoder N�r r( �rY r r r r� � � � � �� �zinit.<locals>.<genexpr>)r[ zid )r; r r: r@ r )ro r re � encryptedz: Failed to set passwordre zPassword(s) updatedz"sh -c 'touch "{0}"; test -e "{0}"'�r r: r@ z Failed to set password markerr� z. �.z/.lxc.initial_dnsz/lxc.initial_dnsz/lxc.z .initial_dnsc 3 r< r= rA r( rB r r r� ; rC )r rc � searchdomainszFailed to set DNS: �dnsz DNS updatedr? zFailed to set DNS marker�r r; z/.lxc.initial_seedr c 3 s, � | ]}t � d |� ��ddd�dkV qdS )ztest -e TrE r NrA r( rB r r r� b s � ��� �) rP r r1 rj rk r/ rw rv r� r� r� r� zBootstrap failed: z5Bootstrap failed, see minion log for more information� bootstrapz#Container successfully bootstrappedr� z&Bootstrap via seed_cmd '{}' failed: {}zHBootstrap via seed_cmd '{}' failed, see minion log for more information z7Container successfully bootstrapped using seed_cmd '{}'�state�r� r� � Container 'z' successfully initializedrT r )(r� r� r� r r� r� r rK r! rR r( r r �strerrorrG r� r� � read_confr r r r$ rY rF r� r� r% �stopr- �run� SEED_MARKER�anyr � set_passwordr, �debugr� �set_dnsrJ r� )<rY rP r� r� r� rS rq rr r� rb re rf ro rc rG rt ru rj rk rw rv r� r� r� r� rQ r� Z changes_dictr) Zdusers�userr �bpathZ state_pre�tvgr` �start_r. r/ r0 Z salt_configr1 r� �exc� does_existZ to_rebootZremove_seed_markerZcfg� old_chunksr �cfile�cpath�new_cfg�gid�gidsZ default_user�cret�msgr3 Z state_postr )r rY r rS r r* | s� ? � �� ��� � �� � ��� � � � �� �� � � �� � � �� �� � ����� � � ���� ����� �� �� r* c K s. t | |fi |��}|�d| �} t| fi |��S )a8 Thin wrapper to lxc.init to be used from the saltcloud lxc driver name Name of the container may be None and then guessed from saltcloud mapping `vm_` saltcloud mapping defaults for the vm CLI Example: .. code-block:: bash salt '*' lxc.cloud_init foo rY )r� r- r* )rY rW rQ Zinit_interfacer r r � cloud_init� s re c C s� t d ddd�}d|vrtd��i }d}|�� D ]0}z |�� \}}}}} W n ty. Y qw |s8|dkr7d}q|�|g �} | �|||| d�� q| d urXt| |�| g �fg�S |S ) a' .. versionadded:: 2015.5.0 List the available images for LXC's ``download`` template. dist : None Filter results to a single Linux distribution CLI Examples: .. code-block:: bash salt myminion lxc.images salt myminion lxc.images dist=centos �cmd.run_stdoutz.lxc-create -n __imgcheck -t download -- --listT)r@ ZDISTz>Unable to run the 'download' template script. Is it installed?F)�release�arch�variant� build_timeN) r! r rA rB � ValueErrorrO r� r� r ) �dist�outr� Z passed_headerrJ Zdistrorg rh ri rj Z dist_listr r r �images� s< �� � �� rn c C s4 zt �d�} W n ty g Y S w dd� | D �S )z� .. versionadded:: 2015.5.0 List the available LXC template scripts installed on the minion CLI Examples: .. code-block:: bash salt myminion lxc.templates z/usr/share/lxc/templatesc S s" g | ] }|� d �r|dd� �qS )zlxc-� Nr& r( r r r r+ � " z templates.<locals>.<listcomp>)rF �listdir�OSError)Ztemplate_scriptsr r r � templates s �rs c C s� t � |d dkr1t||d�r1|r#t||||d�}|r#t�d|||� t||d�}dd |d�d�S t||d�rTd } |rE| d t�|�� �7 } | d |� �7 } td | d d� t d� | |d ���)Nr r r )r rr zVNetwork changes from applying network profile '%s' to newly-created container '%s': %sTrL �r3 rK � lxc-destroy� -P � -n � cmd.retcodeF�r; z0Container could not be created with cmd '{}': {}�stderr) r/ rG �apply_network_profiler, r� rK �shlex�quoter! r r� )�cmdr� rY rq r rr Znetwork_changes�c_stater r r � _after_ignition_network_profile s4 �� ��r� c s� d}d| � �}t t�����t�|�� d8� �fdd� }|d�} t| | d�r-td| � d ���|d �} | r5| ntd d �} |d �} |d�} | rK| rKtd��t| | �f�sVtd��|d�p[i �|d�}| rf|sfd}|d�}|d�}|d�}|dd�}|d�}|dv r�d}d}|dv r�d } } }| r�td | �}tj � tj � t j �d d d �} |�d < | r�|d!t�| �� �7 }tj �| �s�t�| � |r�|d"|� �7 }| r�|d#| � �7 }|�r&|�� }|d$|� �7 }|d%v r�|r�|d&|� �7 }|d'v �r |r�|d(|� �7 }| �r|d)| � �7 }|�r |d*|� �7 }|d+v�r&|�r |d,|� �7 }|�r&|d-|� �7 }��r\| d.k�rD�fd/d0�|D �}|�rDtd1�d2� |����|d37 }��� D ]\}}|d3|� d4|� �7 }�qLtd5 |d6d7�}t||| || |�S )9a� Create a new container. name Name of the container config The config file to use for the container. Defaults to system-wide config (usually in /etc/lxc/lxc.conf). profile Profile to use in container creation (see :mod:`lxc.get_container_profile <salt.modules.lxc.get_container_profile>`). Values in a profile will be overridden by the **Container Creation Arguments** listed below. network_profile Network profile to use for container .. versionadded:: 2015.5.0 **Container Creation Arguments** template The template to use. For example, ``ubuntu`` or ``fedora``. For a full list of available templates, check out the :mod:`lxc.templates <salt.modules.lxc.templates>` function. Conflicts with the ``image`` argument. .. note:: The ``download`` template requires the following three parameters to be defined in ``options``: * **dist** - The name of the distribution * **release** - Release name/version * **arch** - Architecture of the container The available images can be listed using the :mod:`lxc.images <salt.modules.lxc.images>` function. options Template-specific options to pass to the lxc-create command. These correspond to the long options (ones beginning with two dashes) that the template script accepts. For example: .. code-block:: bash options='{"dist": "centos", "release": "6", "arch": "amd64"}' For available template options, refer to the lxc template scripts which are usually located under ``/usr/share/lxc/templates``, or run ``lxc-create -t <template> -h``. image A tar archive to use as the rootfs for the container. Conflicts with the ``template`` argument. backing The type of storage to use. Set to ``lvm`` to use an LVM group. Defaults to filesystem within /var/lib/lxc. fstype Filesystem type to use on LVM logical volume size : 1G Size of the volume to create. Only applicable if ``backing=lvm``. vgname : lxc Name of the LVM volume group in which to create the volume for this container. Only applicable if ``backing=lvm``. lvname Name of the LVM logical volume in which to create the volume for this container. Only applicable if ``backing=lvm``. thinpool Name of a pool volume that will be used for thin-provisioning this container. Only applicable if ``backing=lvm``. nic_opts give extra opts overriding network profile values path parent path for the container creation (default: /var/lib/lxc) zfsroot Name of the ZFS root in which to create the volume for this container. Only applicable if ``backing=zfs``. (default: tank/lxc) .. versionadded:: 2015.8.0 )rl rg rh zlxc-create -n Nc �( � � | d �}�� | |�}|d u r|S |S rT �r- r r r r r � s zcreate.<locals>.selectr r rM �' already existsr` r� r, r] r\ z/Only one of 'template' and 'image' is permittedz>At least one of 'template', 'image', and 'profile' is required�optionsr^ �lvmrh ri rg rl �1G�zfsroot)r_ � overlayfs�btrfs�zfs)Zaufsr_ r� r� r rs r Z salt_tarballZimgtarrv � -f z -t � -B )r� z --zfsroot )r� z --lvname z --vgname z --thinpool �r_ r� z --fstype z --fssize �downloadc r� r r r( )r� r r r+ � r� zcreate.<locals>.<listcomp>z$Missing params in 'options' dict: {}�, z --r6 r Fry rT )r� r� r� rG r r! r rS rF r r� �dirnamer �__file__r| r} �makedirs�lowerr� rE r� )rY rP rS rq rr rQ Zdownload_template_depsr~ r r rY r` r] r\ r^ rh ri rg rl r� r' Z missing_depsr= r� r� r )r r� rS r r$ 7 s� a � � �� �r$ c s� t t�����t�|�� d � �fdd� }|d�}t| |d�r&td| � d���t||d� t||d�dkr<td|� d ���|d �}|d �} |d v rJd } | sOd} nd} |dd�} |dv r\d} tt� �td�krud} | d| � d|� d| � �7 } nd} | d| � d|� d| � �7 } |r�| dt � |�� �7 } t j �|�s�t � |� |r�|�� }| d|� �7 } |d vr�| r�| d | � �7 } td | d d �} t| | | |||�S )!a� Create a new container as a clone of another container name Name of the container orig Name of the original container to be cloned profile Profile to use in container cloning (see :mod:`lxc.get_container_profile <salt.modules.lxc.get_container_profile>`). Values in a profile will be overridden by the **Container Cloning Arguments** listed below. path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 **Container Cloning Arguments** snapshot Use Copy On Write snapshots (LVM) size : 1G Size of the volume to create. Only applicable if ``backing=lvm``. backing The type of storage to use. Set to ``lvm`` to use an LVM group. Defaults to filesystem within /var/lib/lxc. network_profile Network profile to use for container .. versionadded:: 2015.8.0 nic_opts give extra opts overriding network profile values .. versionadded:: 2015.8.0 CLI Examples: .. code-block:: bash salt '*' lxc.clone myclone orig=orig_container salt '*' lxc.clone myclone orig=orig_container snapshot=True Nc r� rT r� r r r r r 5 r zclone.<locals>.selectr r rM r� �stoppedz ' must be stopped to be clonedr^ ra )r_ FrZ z-srl r� )r_ r� r� z2.0zlxc-copyr6 rw z -N z lxc-clonez -o rv r� r� z -L r ry rT )r� r� r� rG r �_ensure_existsrK r r$ r| r} rF r r� r� r! r� ) rY �origrS rq rr rQ r r r^ ra rl r~ r� r r r r� � sL 3 �r� c C s� d|� �}| r |d7 }|r|t v rt | S g }d}|r%|dt�|�� �7 }| r+|d7 }td |dd�}|�� D ] }|�|�� � q7|t |< |S ) a� Return a list of the containers available on the minion path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 active If ``True``, return only active (i.e. running) containers .. versionadded:: 2015.5.0 CLI Example: .. code-block:: bash salt '*' lxc.ls salt '*' lxc.ls active=True zlxc.lsz.activezlxc-lsrv z --activerf Fry )r r| r} r! rA r� rB )Zactive�cacher Z contextvarr� r~ rI rJ r r r r l s r c C s\ t |d�}| ri }i }i }ng }g }g }|||d�}|D ]�}d} |r,| dt�|�� �7 } | d|� �7 } td | ddd �} d } | �� D ]} | �d �} | d d v rW| d �� } nqB| rd|d ure| �� |kreq | rtt||d�}d}||i}nd}|}| dkr�t ||�|� q | dkr�t ||�|� q | dkr�t ||�|� q q |d ur�|� || r�i �S g �S |S )a� List containers classified by state extra Also get per-container specific info. This will change the return data. Instead of returning a list of containers, a dictionary of containers and each container's output from :mod:`lxc.info <salt.modules.lxc.info>`. path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 limit Return output matching a specific state (**frozen**, **running**, or **stopped**). .. versionadded:: 2015.5.0 CLI Examples: .. code-block:: bash salt '*' lxc.list salt '*' lxc.list extra=True salt '*' lxc.list limit=running r )r8 r� �frozen�lxc-inforv rw �cmd.runFrU )r; �output_loglevelNr� r )�StaterK r5 r� r� ZSTOPPEDZFROZENZRUNNING) r r| r} r! rA rB rC r� r� �getattrr )�extra�limitr Zctnrsr� r� r8 r� � containerr~ �c_infor rJ �statr� �methodr� r r r r � sV � �r c C s� t ||d�} | |krd||d�d|� d|� �d�S | dkr:d} |r+| d t�|�� �7 } | d |� �7 } td | d d � |rJd | vrJ| d t�|�� �7 } | d|� �7 } d d||||d�} dd� | D �D ]} | | } | tu rq| �| d � qatd | fi | ��}|d dkr�td�|| |d ���|d ur�d}|r�|d t�|�� �7 }|d|� d|�� � �7 }td |d dd� t � t ||d�}||k| |d�d�}|S ) Nr TrL rM z ' already )r3 rK r2 ru �lxc-stoprv z -k -n r� Fry rw )r; �redirect_stderr�with_communicate�use_vt�stdinr c S r~ r r r r r r r+ r� z!_change_state.<locals>.<listcomp>r r r z>Error changing state for container '{}' using command '{}': {}r zlxc-waitz -s � )r; �timeoutrt ) rK r| r} r! r r- r r� �upperr/ )r~ rY �expectedr� r rz r� r� r �preZscmdZpkwargsr� r� Z_cmdoutZrcmdZpostr� r r r � _change_state� sX � � � �� r� c C s t | |d�std| � d���dS )z< Raise an exception if the container does not exist r rM z' does not existN)rG r rB r r r r� + s �r� c C s� t | |d� t| |d�}|dkrt| |d�S |dkr*|r$td| � d���t| |d�S |dkr>|r8td| � d���t| |d�S dS )a If the container is not currently running, start it. This function returns the state that the container was in before changing path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 r r8 r� rM z' is not runningr� N)r� rK r- r �unfreeze)rY �no_startr r� r r r �_ensure_running3 s �r� c C s\ t | |d� t| |d�}|dkrt| ||d� t| ||d�}||d d< |dkr,d|d< |S ) a� .. versionadded:: 2015.5.0 Restart the named container. If the container was not running, the container will merely be started. name The name of the container path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 lxc_config path to a lxc config file config file will be guessed from container name otherwise .. versionadded:: 2015.8.0 force : False If ``True``, the container will be force-stopped instead of gracefully shut down CLI Example: .. code-block:: bash salt myminion lxc.restart name r r� )�killr )r r6 rK r� TZ restarted)r� rK rP r- )rY r r6 �force� orig_stater� r r r �restartN s r� c K s� |� dd�}t|�}|� dd�}d}|s tj�|| d�}tj�|�r,|dt�|�� �7 }|d7 }t| |d� t | |d�d krFt d | � d ���|� d d�}|� d d�}t || dddd|||d� S )a� Start the named container path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 lxc_config path to a lxc config file config file will be guessed from container name otherwise .. versionadded:: 2015.8.0 use_vt run the command through VT .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.start name r Nr6 r rP r� z -dr r� rM z ' is frozen, use lxc.unfreezer� r� Fr8 )r rz r� r� r r� ) r r rF r r� rG r| r} r� rK r r� )rY rQ r r_ r6 r~ r� r� r r r r- y s2 �r- c C sb t | |d� t| |d�}|dkr|st| |d� d}|r |d7 }t|| d||d�}||d d< |S ) aa Stop the named container path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 kill: False Do not wait for the container to stop, kill all tasks in the container. Older LXC versions will stop containers like this irrespective of this argument. .. versionchanged:: 2015.5.0 Default value changed to ``False`` use_vt run the command through VT .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.stop name r r� r� z -kr� �r� r rK r� )r� rK r� r� )rY r� r r� r� r~ r� r r r rP � s rP c K s� |� dd�}|� dd�}t| |d� t| |d�}|� dd�}|dkr2|s,td| � d ���t| |d� d }|r@|d t�|�� �7 }t|| d ||d �}|dkrY|rY||d d< d|d< t| |d�|d d< |S )a� Freeze the named container path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 start : False If ``True`` and the container is stopped, the container will be started before attempting to freeze. .. versionadded:: 2015.5.0 use_vt run the command through VT .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.freeze name r� Nr r r- Fr� rM � ' is stoppedz lxc-freezerv r� r� rK r� T�startedr� )r r� rK r r- r| r} r� )rY rQ r� r r� rZ r~ r� r r r �freeze� s$ r� c C sZ t | |d� t| |d�dkrtd| � d���d}|r$|dt�|�� �7 }t|| d||d�S ) aN Unfreeze the named container. path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 use_vt run the command through VT .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.unfreeze name r r� rM r� z lxc-unfreezerv r8 )r r� )r� rK r r| r} r� )rY r r� r~ r r r r� s r� c C s@ t | |d� |st| |d�dkrtd| � d���td| d|d�S )a Destroy the named container. .. warning:: Destroys all data associated with the container. path path to the container parent directory (default: /var/lib/lxc) .. versionadded:: 2015.8.0 stop : False If ``True``, the container will be destroyed even if it is running/frozen. .. versionchanged:: 2015.5.0 Default value changed to ``False``. This more closely matches the behavior of ``lxc-destroy(1)``, and also makes it less likely that an accidental command will destroy a running container that was being used for important things. CLI Examples: .. code-block:: bash salt '*' lxc.destroy foo salt '*' lxc.destroy foo stop=True r r� rM z' is not stoppedru N)r� rK r r� )rY rP r r r r �destroy* s r� �removec C s& | t |d�v }|s| t d|d�v }|S )z� Returns whether the named container exists. path path to the container parent directory (default: /var/lib/lxc) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.exists name r F)r� r )r )rY r �_existsr r r rG R s rG c C s� d| � |� �}zt | W S ty~ t| |d�s dt |< n[d}|r,|dt�|�� �7 }|d| � �7 }td |dd �}|d d krLt� td | � d ���|d �� }d}|D ]}|� d�}|d � � dkro|d � � � � } nqV|t |< Y t | S Y t | S w )z� Returns the state of a container. path path to the container parent directory (default: /var/lib/lxc) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.state name z lxc.state.r Nr� rv rw r Fry r r z"Unable to get state of container 'r9 r r� rK r5 ) r r� rG r| r} r! r/ r rA rB r� rC ) rY r �cachekeyr~ r� Zc_infosr r� r� r r r rK j s: � � ��rK c C st t | |d� d}|r|dt�|�� �7 }|d| � d|� �7 }td |dd�}|d d kr4td |� d ���|d �� S )a: Returns the value of a cgroup parameter for a container path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.get_parameter container_name memory.limit_in_bytes r � lxc-cgrouprv rw r6 r Fry r r z Unable to retrieve value for 'r9 r )r� r| r} r! r rC )rY � parameterr r~ r� r r r � get_parameter� s r� c C sj t | |d�sdS d}|r|dt�|�� �7 }|d| � d|� d|� �7 }td |dd �}|d d kr3dS d S ) a' Set the value of a cgroup parameter for a container. path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.set_parameter name parameter value r Nr� rv rw r6 r Fry r r T)rG r| r} r! )rY r� r� r r~ r� r r r � set_parameter� s r� c C s� d| � |� �}zt | W S t�yV t| |d� t|�}z tj�|| d�}W n ty; tj�|t| �d�}Y nw tj� |�sJt d|� d���i }g }t j j �|��4}|D ])}t j j�|�}dd� |�dd �d �� �d d �D �} t| �d kr�|�t| �� qXW d � n1 s�w Y g } i } |D ]#\} } | dkr�d| i} | �| � q�| s�q�| �d�r�| | | �ddd �< q�| r�| |d< tdd� |D �d �|d< t| |d�|d< g |d< g |d< g |d< g |d< g |d< g |d < g |d < g |d < g |d < d |d < ||d< |d d!k�r:z tt| d"��}W n t t t f�y d }Y nw z tt| d#��}W n t t t f�y9 d }Y nw || }||d$< ||d%< t | d&|d'd(�}|� � d) �� d |d < t | d*|d'd(�}|d+ d k�r�|d, }t | d-|d'd(�}|d.|d, 7 }t j j!�"|�}n!t | d/|d'd(�}|d+ d k�r�t j j!�#|d, �}nt$�%d0| � i }t j j!j&d1|d2�|d < t j j!j'd1|d2�|d < |d |d |d< |d D ]>}|d3k�r�|d �|� |d �|� �q�t j j(�)|��r�|d �|� |d �|� �q�|d �|� |d �|� �q�|d D ],}|d4k�s|�d5��r*|d �|� |d �|� �q |d �|� |d �|� �q d6d� |D �D ] } || j*t+d7� �qA|t |< Y t | S w )8z� Returns information about a container path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.info name z lxc.info.r rP zLXC config file � does not existc S s g | ]}|� � �qS r r� r( r r r r+ � r� zinfo.<locals>.<listcomp>r� r5 r r� � Nr� r� r� rZ r� c s s$ � | ] }|d dkr|d V qdS )r r r5 Nr r( r r r r� s �" zinfo.<locals>.<genexpr>r� rK �ipsZ public_ipsZ private_ipsZpublic_ipv4_ipsZpublic_ipv6_ipsZprivate_ipv4_ipsZprivate_ipv6_ipsZipv4_ipsZipv6_ipsrl r8 zmemory.limit_in_byteszmemory.usage_in_bytesZ memory_limitZ memory_freezdf /FrI r� z ip link showr r z ip addr showr� Zifconfigz.Unable to run ip or ifconfig in container '%s'T)Zinclude_loopbackZinterface_datar0 r1 Zfe80c S s" g | ] }|d ks |� d �r|�qS )r� )�endswithr( r r r r+ M rp r< ),r r� r� r rF r r� r� r� r� r r r r� r� r � to_unicoderB rC r� r� r� r' �replace�nextrK r� r� � TypeErrorrk � run_stdoutrA �run_allr� Z_interfaces_ipZ_interfaces_ifconfigr, �warningZip_addrsZ ip_addrs6ZcloudZ is_public_iprH r4 )rY r r� r_ � conf_filer� rP �fp_rJ �compsZifaces�currentr= r� r� �usage�freerl Zip_cmdZip_data�addressr r r r� � s� � & �� � ��� � � �r� c C s� dd� }t |t�s z|�d�}W n ty |� Y nw |s"|� g }|D ]"}t| d�|r0dnd�d�||f�d|d d d �}|d krH|�|� q&|rUtd �d�|����d S )a .. versionchanged:: 2015.5.0 Function renamed from ``set_pass`` to ``set_password``. Additionally, this function now supports (and defaults to using) a password hash instead of a plaintext password. Set the password of one or more system users inside containers users Comma-separated list (or python list) of users to change password password Password to set for the specified user(s) encrypted : True If true, ``password`` must be a password hash. Set to ``False`` to set a plaintext password (not recommended). .. versionadded:: 2015.5.0 path path to the container parent directory default: /var/lib/lxc (system) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.set_pass container-name root '$6$uJ2uAyLU$KoI67t8As/0fXtJOPcHKGXmUpcoYUcVR2K6x93walnShTCQvjRwq25yIkiCBOqgbfdKQSFnAo28/ek6716vEV1' salt '*' lxc.set_pass container-name root foo encrypted=False c S s t d��)Nz#Invalid input for 'users' parameter)r r r r r �_bad_user_inputx s z%set_password.<locals>._bad_user_inputr� z chpasswd{}z -erZ r� FT�quiet)r� r; r r: r� r z4Password change failed for the following user(s): {}r� ) r� r rB r� r r� r� r� r ) rY ro re rD r r� Z failed_usersrW r3 r r r rT S s< % � � ���rT �set_passc s� t | |d� t|�}tj�|| d�}tj�|�s td|� d���g g g d�� � ddd�}tjj � |d ���}}g }|D ]} | s?q:| D ]} |� | � � | | � � f� qAq:d |d < g } tjj �|�� �} | �� D ]1} | �d �sp| � � sx| � | dg� qe| �d �} | �d�}|� � d �| �� � f}|| vr�| � |� qe|D ]]\}}d}t| dd� �D ]6\}} | d |kr�d}||f| |< d �| dd� �� � |� � kr݈ d � | d | dd� i||if� nq�|s�||f| vr�| � ||f� � d � ||i� q�g }|�r#| D ]#} |D ] }| d �|��s| |v�r|� | � �q� d � |� �qq�n| }d} |D ] \}}|�s9| |� d�7 } �q)| |� � � d|� � � d�7 } �q)| | k}tj�� �d�}|�r�tjj � |� d|� �d��}|�tjj �| �� W d � n 1 �s{w Y tjj � |d��}|�tjj �| �� W d � n 1 �s�w Y d|d < d|d< W d � n 1 �s�w Y t� fd d �� D ���s�i |d < |S ) az Edit LXC configuration options path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.update_lxc_conf ubuntu \ lxc_conf="[{'network.ipv4.ip':'10.0.3.5'}]" \ lxc_conf_unset="['lxc.utsname']" r rP zConfiguration file r� )�edited�addedr TrZ )r) r3 r2 �rzlxc.conf is up to dater2 r� r� r FNr5 r� r� r r� r� z%Y-%m-%d_%H-%M-%SrF r ZUpdatedr3 c 3 s � | ]}� | V qd S rT r r( �r) r r r� � r� z"update_lxc_conf.<locals>.<genexpr>r) )r� r rF r r� rG r r r r� r� r� rC r r� �readrA r' rB r- r� �datetime�now�strftimer r rS )rY Zlxc_confZlxc_conf_unsetr r_ Z lxc_conf_pr� r Zfiltered_lxc_confr� �conf�linesZ orig_configrJ �indexr� r= r� Zmatchedr3 Z dest_lxc_conf�optZ conf_changedZchronoZwficr r� r �update_lxc_conf� s� � � &� ��� � �� �=r� c C s~ |du r ddg}nt |t�s!z|�d�}W n ty td��w |du r(g }nt |t�s@z|�d�}W n ty? td��w dd� |D �}|�d d� |D �� d �|�d }td � }d |� d �}d �ddddddd|ddddd|ddg�}t| d|� �||dd �}|d d kr�t| d � |�|dd �}t| d!� |�|dd � |d d kr�d"| � d#�} |d$ r�| d%� |d$ �7 } t | ��dS )&a� .. versionchanged:: 2015.5.0 The ``dnsservers`` and ``searchdomains`` parameters can now be passed as a comma-separated list. Update /etc/resolv.confo path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.set_dns ubuntu "['8.8.8.8', '4.4.4.4']" Nz8.8.8.8z4.4.4.4r� z(Invalid input for 'dnsservers' parameterz+Invalid input for 'searchdomains' parameterc S � g | ]}d |� ��qS )z nameserver r r( r r r r+ � zset_dns.<locals>.<listcomp>c S r� )zsearch r r( r r r r+ ! r� r� �test.random_hash�/sbin/z_dns.shz#!/usr/bin/env bashz if [ -h /etc/resolv.conf ];thenzO if [ "x$(readlink /etc/resolv.conf)" = "x../run/resolvconf/resolv.conf" ];thenz# if [ ! -d /run/resolvconf/ ];thenz mkdir -p /run/resolvconfz fiz0 cat > /etc/resolvconf/resolv.conf.d/head <<EOFZEOFrZ z fi�fiz cat > /etc/resolv.conf <<EOF�tee T�r r� r; r r �sh -c "chmod +x {0};{0}"rI �+sh -c 'if [ -f "{0}" ];then rm -f "{0}";fi'z2Unable to write to /etc/resolv.conf in container 'r9 rz �: {}) r� r rB r� r r� r� r! r� r� r ) rY rc rG r rH �rstrrm Z DNS_SCRIPTr3 �errorr r r rV � s| � � ��� �� rV c C s� d| � |� �}t �|d�}|du s|s|td � }d|� d�}t�d�}t| d|� �||dd �}|d d krAt| d �|�|dd �}ntd| � d���t| d�|�|ddd� |d d krmd�| �} |d rm| d�|d �7 } |d dv r||d t |< }|S )z� Determine if systemD is running path path to the container parent .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' lxc.running_systemd ubuntu zlxc.systemd.test.Nr� r� z_testsystemd.sha) #!/usr/bin/env bash set -x if ! command -v systemctl 1>/dev/null 2>/dev/null;then exit 2;fi for i in \ /run/systemd/journal/dev-log\ /run/systemd/journal/flushed\ /run/systemd/journal/kernel-seqnum\ /run/systemd/journal/socket\ /run/systemd/journal/stdout\ /var/run/systemd/journal/dev-log\ /var/run/systemd/journal/flushed\ /var/run/systemd/journal/kernel-seqnum\ /var/run/systemd/journal/socket\ /var/run/systemd/journal/stdout\ ;do\ if test -e ${i};then exit 0;fi done if test -d /var/systemd/system;then exit 0;fi exit 2 r� Tr� r r r� rI zlxc z failed to copy initd testerr� �r r@ r; zSUnable to determine if the container '{}' was running systemd, assmuming it is not.rz r� )r r� )r r r! �textwrap�dedentr� r� r ) rY r� r r" r� r� rm �_scriptr3 r� r r r �running_systemd` sF �� �� � r� c C s4 z t | d|dd�d }W |S ty d}Y |S w )a' Get the operational state of a systemd based container path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.systemd_running_state ubuntu zsystemctl is-system-runningT�r r@ r rZ �r� r �rY r r� r r r �systemd_running_state� s �� ��r� c C s( t | |d�}|dv r dS |dkrdS dS )a Test if a systemd container is fully started path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.test_sd_started_state ubuntu r )Z initializingZstartingFrZ NT)r� )rY r Zqstater r r �test_sd_started_state� s r� c C s: zt | d|dd�d dk}W |S tfy d}Y |S w )ah Test if a non systemd container is fully started For now, it consists only to test if the container is attachable path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.test_bare_started_state ubuntu r Tr� r r Nr� r� r r r �test_bare_started_state� s ��r� �, c C s� t | |d�std| � d���t| |d�dks td| � d���d}t| |d�r,t}tj}nt}tj}t � � }|| }t � � }|| |d�}t � � |k r^|s^t � d� || |d�}t � � |k r^|rK|du rk|d | � d }|S |}|S ) a� Check that the system has fully inited This is actually very important for systemD based containers see https://github.com/saltstack/salt/issues/23847 path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion lxc.wait_started ubuntu r � Container z does does existsr8 z is not runningFg333333�?NzTAssuming %s is started, although we failed to detect that is fully started correctlyT) rG r rK r� r� r, r� r� rU �time�sleep) rY r r� r� Z test_started�loggerr� Zexpirer� r r r � wait_started� s6 ���r c C sL d}t | d|dd�}|r"t| d|d�}d|vrd}|S t | d � |S d}|S ) Nr zwhich salt-minionTr� zps auxr z salt-minionr5 z*salt-call --local service.stop salt-minion)r r� )rY r r� Z has_minionZ processesr r r �_needs_install2 s ��r c C s2 t | | d� | dur'zt�d| | � t�| � W n ty& t�d� Y nw t| | d�} | s1dS | r<d| vr;| d7 } nd} | sBd} t| | d�}|sL|S |sUt| | d�}nd }t| d t � d �| d d d �d k}t � � }|rr|srd }|S d}t d ||| |||d�}|s�|s�|�r.|�r+t d � }d|� �}d|� �}t | || dd�d d kr�t�d||� dS t d |d�}d|� d�}t| ||| d� t | d|� d �| d d�}t| |d tj�|d �| d� t| |d tj�|d �| d� t| |d! tj�|d"�| d� | �|�} d#�| | �d d$�|�}t�d%|| � t| |d&| d d'�d k}t | d(�|�| d d d)� nAd}n>tj�|d �}|d* }t| |d d+| d� t| |d tj�|d �| d� t| |d! tj�|d"�| d� t| d,| dd� d }t�|� |d-k�r}t| | d� n |d.k�r�t | | d� |�r�t| d/t � d �| dd� |S )0a Install and configure salt in a container. config Minion configuration options. By default, the ``master`` option is set to the target host's master. approve_key Request a pre-approval of the generated minion key. Requires that the salt-master be configured to either auto-accept all keys or expect a signing request from the target host. Default: ``True`` path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 pub_key Explicit public key to pressed the minion with (optional). This can be either a filepath or a string representing the key priv_key Explicit private key to pressed the minion with (optional). This can be either a filepath or a string representing the key bootstrap_delay Delay in seconds between end of container creation and bootstrapping. Useful when waiting for container to obtain a DHCP lease. .. versionadded:: 2015.5.0 bootstrap_url url, content or filepath to the salt bootstrap script bootstrap_args salt bootstrap script arguments bootstrap_shell shell to execute the script into install Whether to attempt a full installation of salt-minion if needed. force_install Force installation even if salt-minion is detected, this is the way to run vendor bootstrap scripts even if a salt minion is already present in the container unconditional_install Run the script even if the container seems seeded CLI Examples: .. code-block:: bash salt 'minion' lxc.bootstrap container_name [config=config_data] \ [approve_key=(True|False)] [install=(True|False)] r NzLXC %s: bootstrap_delay: %s� z{0}z -c {0}z-c {0}r� Tz test -e 'r9 rE r Fz seed.mkconfig)�tmpZid_r1 rj rk r� z /var/tmp/.c_zinstall -m 0700 -d rI r z tmpdir %s creation failed %sz config.gather_bootstrap_script)rJ r� z _bootstrap.shzsh -c "chmod +x r> rP rM Zprivkeyz minion.pemZpubkeyz minion.pubz {0} {2} {1}z''z Running %s in LXC container '%s'r� )r� r r� r� r� �pki_dirz/etc/salt/minionz,salt-call --local service.enable salt-minionr� r� ztouch ') r r, r� r� r� r� r� r r rR r Zmkdtempr! r� r� �copy_torF r r� r� r� r rP � minion_configrQ �shutil�rmtreerP r� ) rY rP r1 r/ rj rk r� rw rv r r� r� r� r� r� Z needs_installZseededr r� Z cfg_filesr� Z configdirr~ Zbs_rm r3 r r r r r rJ D s K � � ��� g�� � � � � � ���� � �� rJ c C s� d| � |� �}zt | W S tyJ t| |d� t�d| � d}|r-|dt�|�� �7 }|d| � d�7 }td |d d d d �d k}|t |< Y t | S w )a9 Return True if the named container can be attached to via the lxc-attach command path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt 'minion' lxc.attachable ubuntu zlxc.attachabler z*Checking if LXC container %s is attachabler rv z --clear-env -n z -- /usr/bin/envrx Fr� T)r; r� r@ r )r r� r� r, rU r| r} r! )rY r r� r~ r3 r r r � attachable' s& ��� �r rU � http_proxy,https_proxy,no_proxyc C sB t | | d�} zft| | d�r!td | || tt|||||| || d� }n$| s*t| � d���t| | d��d�}td td< td |||||| d �}W t | | d�}|rl| d kr]|d kr]t | | d� n:| d krl|d krlt | d | d � n*t | | d�}|r�| d kr�|d kr�t | | d� w | d kr�|d kr�t | d | d � w w w w |dv r�|S || S )z� Common logic for lxc.run functions path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 r zcontainer_resource.run) r �container_type� exec_driverrI r� r� r; r� r@ r� �keep_envz is not attachable.r� r� zcmd.run_chroot.funczcmd.run_chroot)r� r; r� r@ r� r� T)r- r )N�all) rK r r! r � EXEC_DRIVERr r� r r rP r� )rY r~ rI r� �preserve_stater� r; r� r� r r@ r: r r� r� r� Z new_stater r r �_runN sb � �� � ��r c C �" t | ||d||||||| | | d� S )a� .. versionadded:: 2015.8.0 Run :mod:`cmd.run <salt.modules.cmdmod.run>` within a container .. warning:: Many shell builtins do not work, failing with stderr similar to the following: .. code-block:: bash lxc_container: No such file or directory - failed to exec 'command' The same error will be displayed in stderr if the command being run does not exist. If no output is returned using this function, try using :mod:`lxc.run_stderr <salt.modules.lxc.run_stderr>` or :mod:`lxc.run_all <salt.modules.lxc.run_all>`. name Name of the container in which to run the command cmd Command to run path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 no_start : False If the container is not running, don't start it preserve_state : True After running the command, return the container to its previous state stdin : None Standard input to be used for the command output_loglevel : debug Level at which to log the output from the command. Set to ``quiet`` to suppress logging. use_vt : False Use SaltStack's utils.vt to stream output to console. Assumes ``output=all``. chroot_fallback if the container is not running, try to run the command using chroot default: false keep_env : http_proxy,https_proxy,no_proxy A list of env vars to preserve. May be passed as commma-delimited list. CLI Example: .. code-block:: bash salt myminion lxc.run mycontainer 'ifconfig -a' N� r rI r� r r� r; r� r� r@ r: r �r � rY r~ r� r r� r; r� r� r r@ r: r r r r rQ � � K�rQ c C r )a� .. versionadded:: 2015.5.0 Run :mod:`cmd.run_stdout <salt.modules.cmdmod.run_stdout>` within a container .. warning:: Many shell builtins do not work, failing with stderr similar to the following: .. code-block:: bash lxc_container: No such file or directory - failed to exec 'command' The same error will be displayed in stderr if the command being run does not exist. If no output is returned using this function, try using :mod:`lxc.run_stderr <salt.modules.lxc.run_stderr>` or :mod:`lxc.run_all <salt.modules.lxc.run_all>`. name Name of the container in which to run the command cmd Command to run path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 no_start : False If the container is not running, don't start it preserve_state : True After running the command, return the container to its previous state stdin : None Standard input to be used for the command output_loglevel : debug Level at which to log the output from the command. Set to ``quiet`` to suppress logging. use_vt : False Use SaltStack's utils.vt to stream output to console ``output=all``. keep_env : http_proxy,https_proxy,no_proxy A list of env vars to preserve. May be passed as commma-delimited list. chroot_fallback if the container is not running, try to run the command using chroot default: false CLI Example: .. code-block:: bash salt myminion lxc.run_stdout mycontainer 'ifconfig -a' r r r r r r r r� � r r� c C r )a� .. versionadded:: 2015.5.0 Run :mod:`cmd.run_stderr <salt.modules.cmdmod.run_stderr>` within a container .. warning:: Many shell builtins do not work, failing with stderr similar to the following: .. code-block:: bash lxc_container: No such file or directory - failed to exec 'command' The same error will be displayed if the command being run does not exist. name Name of the container in which to run the command cmd Command to run path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 no_start : False If the container is not running, don't start it preserve_state : True After running the command, return the container to its previous state stdin : None Standard input to be used for the command output_loglevel : debug Level at which to log the output from the command. Set to ``quiet`` to suppress logging. use_vt : False Use SaltStack's utils.vt to stream output to console ``output=all``. keep_env : http_proxy,https_proxy,no_proxy A list of env vars to preserve. May be passed as commma-delimited list. chroot_fallback if the container is not running, try to run the command using chroot default: false CLI Example: .. code-block:: bash salt myminion lxc.run_stderr mycontainer 'ip addr show' rz r r r r r r � run_stderrO s I�r c C s" t | |d|||||||| | | d� S )a� .. versionadded:: 2015.5.0 Run :mod:`cmd.retcode <salt.modules.cmdmod.retcode>` within a container .. warning:: Many shell builtins do not work, failing with stderr similar to the following: .. code-block:: bash lxc_container: No such file or directory - failed to exec 'command' The same error will be displayed in stderr if the command being run does not exist. If the retcode is nonzero and not what was expected, try using :mod:`lxc.run_stderr <salt.modules.lxc.run_stderr>` or :mod:`lxc.run_all <salt.modules.lxc.run_all>`. name Name of the container in which to run the command cmd Command to run no_start : False If the container is not running, don't start it preserve_state : True After running the command, return the container to its previous state path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 stdin : None Standard input to be used for the command output_loglevel : debug Level at which to log the output from the command. Set to ``quiet`` to suppress logging. use_vt : False Use SaltStack's utils.vt to stream output to console ``output=all``. keep_env : http_proxy,https_proxy,no_proxy A list of env vars to preserve. May be passed as commma-delimited list. chroot_fallback if the container is not running, try to run the command using chroot default: false CLI Example: .. code-block:: bash salt myminion lxc.retcode mycontainer 'ip addr show' r ) rI r r� r r� r; r� r� r@ r: r r r r r r r � r r c C s" t | |d|||||||| | | d� S )a� .. versionadded:: 2015.5.0 Run :mod:`cmd.run_all <salt.modules.cmdmod.run_all>` within a container .. note:: While the command is run within the container, it is initiated from the host. Therefore, the PID in the return dict is from the host, not from the container. .. warning:: Many shell builtins do not work, failing with stderr similar to the following: .. code-block:: bash lxc_container: No such file or directory - failed to exec 'command' The same error will be displayed in stderr if the command being run does not exist. name Name of the container in which to run the command path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 cmd Command to run no_start : False If the container is not running, don't start it preserve_state : True After running the command, return the container to its previous state stdin : None Standard input to be used for the command output_loglevel : debug Level at which to log the output from the command. Set to ``quiet`` to suppress logging. use_vt : False Use SaltStack's utils.vt to stream output to console ``output=all``. keep_env : http_proxy,https_proxy,no_proxy A list of env vars to preserve. May be passed as commma-delimited list. chroot_fallback if the container is not running, try to run the command using chroot default: false CLI Example: .. code-block:: bash salt myminion lxc.run_all mycontainer 'ip addr show' r ) rI r� r r� r; r� r� r r@ r: r r r r r r r� s O�r� c C s< t | d|� d�ddd�}z|�� d W S ty Y dS w )z9 Get the MD5 checksum of a file from a container zmd5sum "r> T)r: r@ r N)r� rB � IndexError)rY r rI r r r �_get_md5e s � �r c C s* t | d|d� td | ||t|t||d�S )a� .. versionchanged:: 2015.8.0 Function renamed from ``lxc.cp`` to ``lxc.copy_to`` for consistency with other container types. ``lxc.cp`` will continue to work, however. For versions 2015.2.x and earlier, use ``lxc.cp``. Copy a file or directory from the host into a container name Container name source File to be copied to the container path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 dest Destination on the container. Must be an absolute path. .. versionchanged:: 2015.5.0 If the destination is a directory, the file will be copied into that directory. overwrite : False Unless this option is set to ``True``, then if a file exists at the location specified by the ``dest`` argument, an error will be raised. .. versionadded:: 2015.8.0 makedirs : False Create the parent directory on the container if it does not already exist. .. versionadded:: 2015.5.0 CLI Example: .. code-block:: bash salt 'minion' lxc.copy_to /tmp/foo /root/foo salt 'minion' lxc.cp /tmp/foo /root/foo T)r� r zcontainer_resource.copy_to)r r r � overwriter� )r� r! r r )rY �source�destr r� r r r r r s s 0�r �cp�simplec C s g }i }t jj�| d��q}t jj�|�� �D ]_}d|vr"|�|� q|�d�}d� |dd� �� � }d}|� � � d�rb|� � �d�} | d � � }d� | dd� �� � }|�|d � � ||d�i� q|�|d � � |i� |||d � � < qW d � n1 s�w Y |dkr�|S |S ) a Read in an LXC configuration file. By default returns a simple, unsorted dict, but can also return a more detailed structure including blank lines and comments. out_format: set to 'simple' if you need the old and unsupported behavior. This won't support the multiple lxc values (eg: multiple network nics) CLI Examples: .. code-block:: bash salt 'minion' lxc.read_conf /etc/lxc/mycontainer.conf salt 'minion' lxc.read_conf /etc/lxc/mycontainer.conf out_format=commented r� r� r5 Nr� r )r� r2 r ) r r r� r� r� r� r� r� rB r� rC r' ) r� r Z ret_commentedZ ret_simpler� rJ r� r� r2 Zvcompsr r r rO � s0 �� �rO c C s. t |t�s td��d}|D ]d}t |ttff�r ||7 }q t |t�rqt|�� �D ]I}d}t || ttftftf�rCd�||| � f�}n#t || t�rfd�||| d f�}d|| v rfd�||| d f�}|rp||7 }|d7 }q'q t j j � | d ��}|� t j j�|�� W d � i S 1 s�w Y i S ) a Write out an LXC configuration file This is normally only used internally. The format of the data structure must match that which is returned from ``lxc.read_conf()``, with ``out_format`` set to ``commented``. An example might look like: .. code-block:: python [ {'lxc.utsname': '$CONTAINER_NAME'}, '# This is a commented line\n', '\n', {'lxc.mount': '$CONTAINER_FSTAB'}, {'lxc.rootfs': {'comment': 'This is another test', 'value': 'This is another test'}}, '\n', {'lxc.network.type': 'veth'}, {'lxc.network.flags': 'up'}, {'lxc.network.link': 'br0'}, {'lxc.network.mac': '$CONTAINER_MACADDR'}, {'lxc.network.ipv4': '$CONTAINER_IPADDR'}, {'lxc.network.name': '$CONTAINER_DEVICENAME'}, ] CLI Example: .. code-block:: bash salt 'minion' lxc.write_conf /etc/lxc/mycontainer.conf \ out_format=commented z&Configuration must be passed as a listrZ Nr� r� r2 z # r� r )r� r r r� r� r� r� �floatr� r r r� r� r r r )r� r� r rJ r= Zout_liner� r r r � write_conf� s8 # � � ��r c K s g }zt | |d�}W n ty g }Y nw |sg }t�|�}g }||g D ],}i } dd� |D �D ]} | �d�r9q1| �d�rJ|| | | < |�| d� q1| rR|�| � q&t� } |D ](} | �dt �} | � | t� �}| D ]}|� dd�}d d i�||�}| | ||< qiqXg }| r�t |fd d it | d ���}|r�|� |� |D ]D}t|t�s�|�|� q�t|�� �D ]0}|| }|r�|�d�r�q�d}|D ]}||v r�d }|�||| i� ||= q�|s�|�||i� q�q�|D ]}|D ] } |�| || i� q�q�|r�|S t| |� t | |�S )a� Edit an LXC configuration file. If a setting is already present inside the file, its value will be replaced. If it does not exist, it will be appended to the end of the file. Comments and blank lines will be kept in-tact if they already exist in the file. out_format: Set to simple if you need backward compatibility (multiple items for a simple key is not supported) read_only: return only the edited configuration without applying it to the underlying lxc configuration file lxc_config: List of dict containning lxc configuration items For network configuration, you also need to add the device it belongs to, otherwise it will default to eth0. Also, any change to a network parameter will result in the whole network reconfiguration to avoid mismatchs, be aware of that ! After the file is edited, its contents will be returned. By default, it will be returned in ``simple`` format, meaning an unordered dict (which may not represent the actual file order). Passing in an ``out_format`` of ``commented`` will return a data structure which accurately represents the order and content of the file. CLI Example: .. code-block:: bash salt 'minion' lxc.edit_conf /etc/lxc/mycontainer.conf \ out_format=commented lxc.network.type=veth salt 'minion' lxc.edit_conf /etc/lxc/mycontainer.conf \ out_format=commented \ lxc_config="[{'lxc.network.name': 'eth0', \ 'lxc.network.ipv4': '1.2.3.4'}, {'lxc.network.name': 'eth2', \ 'lxc.network.ipv4': '1.2.3.5',\ 'lxc.network.gateway': '1.2.3.1'}]" r4 c S r~ r r r r r r r+ X r� z edit_conf.<locals>.<listcomp>�__r� Nr� rZ r} ry r� T)rq rr F)rO � Exceptionr� r� r' r- r� r r r� rO r� r� r� r� r� r r� r )r� r Z read_onlyr6 rQ r� r� Z net_configZlxc_kwsZ net_params�kwargrr �paramsr� Zdev_optsr r� Z net_changesrJ r= r� �found�kwr r r r% s� * � � � ���� ��� � r% c C s� di | � d�d�}t | |d�}|rCt| |d�dkrCzt| |d� W n! ttfyB } zd|� �|d< d|d < |W Y d }~S d }~ww |rwt| |d�dkrwzt| |d� W n! ttfyv } zd|� �|d< d|d < |W Y d }~S d }~ww d |d | < |S ) z� Reboot a container. path path to the container parent default: /var/lib/lxc (system default) .. versionadded:: 2015.8.0 CLI Examples: .. code-block:: bash salt 'minion' lxc.reboot myvm Tz rebooted)r3 r) r2 r r8 r7 r2 Fr3 NZrebootedr) )rG rK rP r r r- )rY r r� r\ r[ r r r �reboot� s, ���� r' c s� i }t | �}tj�|| d�} | d| � d�d|d�}tt�����t�|�� d � �fdd� }|dur5|s5t}| dur?|d | �} nd } | sH|d | �} tj�| �r�t | d d �}t d | fd| fd | fd|fd| fd|fd|fd|fd|fd|fg �}|r|||d< t � }|� � D ] \}}|dur�|||< q�t d d|i|��}|r�t | d |d� t | d d �}||kr�| � d�|d< t| | d�d kr�t| | d�}|d |d < |S ) a� Reconfigure a container. This only applies to a few property name Name of the container. utsname utsname of the container. .. versionadded:: 2016.3.0 rootfs rootfs of the container. .. versionadded:: 2016.3.0 cpu Select a random number of cpu cores and assign it to the cpuset, if the cpuset option is set then this option will be ignored cpuset Explicitly define the cpus this container will be bound to cpushare cgroups cpu shares. autostart autostart container on reboot memory cgroups memory limit, in MB. (0 for nolimit, None for old default 1024MB) gateway the ipv4 gateway to use the default does nothing more than lxcutils does bridge the bridge to use the default does nothing more than lxcutils does nic Network interfaces profile (defined in config or pillar). nic_opts Extra options for network interfaces, will override ``{"eth0": {"mac": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1", "ipv6": "2001:db8::ff00:42:8329"}}`` or ``{"eth0": {"mac": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1/24", "ipv6": "2001:db8::ff00:42:8329"}}`` path path to the container parent .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt-call -lall mc_lxc_fork.reconfigure foobar nic_opts="{'eth1': {'mac': '00:16:3e:dd:ee:44'}}" memory=4 rP z config for z up to dateT)rY r2 r3 r) Nc r rT r r r r r r r zreconfigure.<locals>.selectrb r� r� r r4 r� r� ru r� r� rq rr rt r� r� r5 z lxc config updatedr2 r r8 r3 rT r )r rF r r� r� r� r� r� rG rO r rE r� r% rK r' )rY r� r� r� r� rS rq rr rt ru rb r� r� r rQ r) r_ r� r r] Zmake_kwr& r= r� r` r rc r r r � reconfigure� sd L � ��� r( c C s t |�}tj�|| d�}g }tjj�|d��}|D ]}|�|� qW d � n1 s+w Y t | |d�} | � d�} i } t | ||d�D ]} | � | � qD| rXt |fddi| �� g } tjj�|d��}|D ]}| �|� qeW d � n1 sww Y d }tj|| d d d �D ]}||7 }q�|S ) a� .. versionadded:: 2015.5.0 Apply a network profile to a container network_profile profile name or default values (dict) nic_opts values to override in defaults (dict) indexed by nic card names path path to the container parent .. versionadded:: 2015.8.0 CLI Examples: .. code-block:: bash salt 'minion' lxc.apply_network_profile web1 centos salt 'minion' lxc.apply_network_profile web1 centos \ nic_opts="{'eth0': {'mac': 'xx:xx:xx:xx:xx:xx'}}" salt 'minion' lxc.apply_network_profile web1 \ "{'eth0': {'mac': 'xx:xx:xx:xx:xx:yy'}}" nic_opts="{'eth0': {'mac': 'xx:xx:xx:xx:xx:xx'}}" The special case to disable use of ethernet nics: .. code-block:: bash salt 'minion' lxc.apply_network_profile web1 centos \ "{eth0: {disable: true}}" rP r� NrB r� )r� rq rr r r rZ �before�after)�fromfile�tofile)r rF r r� r r r� r� r� r� r� r� r� r% �difflibZ unified_diff)rY rq rr r r_ Zcfgpathr) r� rJ Z lxcconfigr� Znetwork_paramsr r* �diffr r r r{ @ s6 $ � � � � � r{ c C sN | t d|d�vrtd| � d���td d| � ���d�}dd � |D �d }|S ) z� Returns a container pid. Throw an exception if the container isn't running. CLI Example: .. code-block:: bash salt '*' lxc.get_pid name r8 )r� r r� z$ is not running, can't determine PIDr� z lxc-info -n r� c S s. g | ]}t �d |�dur|�d�d �� �qS )z\s*PIDNr� r5 )r r� rB rC )r) rJ r r r r+ � s �zget_pid.<locals>.<listcomp>r )r r r! rB )rY r r� �pidr r r �get_pid� s ���r0 c C s� t | |d�} dd�dd� td�D �� }|td � �� vr nqtd d �s*td ��td d |� d��s<td| � d���td d�sHtd d� td d| � ��rZtd d| � �� td d |� d�d| � �� dtd dj| |d��k}|r�tdj|| d ���td d j|d ��dkr�td |� ���td d |� d!��dkr�td"|� ���dtd d#j|| |d$��k}|s�td%j|| d&���td d| � �� |d'ur�td( ||� d'S d'S ))a� Add a veth to a container. Note : this function doesn't update the container config, just add the interface at runtime name Name of the container interface_name Name of the interface in the container bridge Name of the bridge to attach the interface to (facultative) CLI Examples: .. code-block:: bash salt '*' lxc.add_veth container_name eth1 br1 salt '*' lxc.add_veth container_name eth1 r Tr� rZ c s s" � | ] }t �tjtj �V qd S rT )r� r� �string�ascii_uppercase�digits)r) r: r r r r� � s � �zadd_veth.<locals>.<genexpr>� znetwork.interfaceszfile.directory_existsz /var/run/z;Directory /var/run required for lxc.add_veth doesn't existszfile.file_existsz/proc/z/ns/netzProc file for container z! network namespace doesn't existsz/var/run/netnsz file.mkdirz file.is_linkz/var/run/netns/z file.removez file.symlinkr rx z1ip netns exec {netns} ip address list {interface})Znetns� interfacez3Interface {interface} already exists in {container})r5 r� z4ip link add name {veth} type veth peer name {veth}_c)r� z#Error while creating the veth pair zip link set dev z upz'Error while bringing up host-side veth z@ip link set dev {veth}_c netns {container} name {interface_name})r� r� �interface_namez>Error while attaching the veth {veth} to container {container})r� r� Nz bridge.addif)r0 r� �ranger! r� r r� )rY r6 rt r r/ Z random_vethZinterface_existsZattachedr r r �add_veth� sv �� � � �������������r8 rT )NF)NNNNNNNNTNNNNNNNNNFFNNNN)NNNN)NNN)NTN)FNN)FN)NNF)NN)TN)Nr� ) NTTNNNFFNNNN) NFTNTrU FNFNr ) FTNTrU FNFFr )FFN)r )r FN) NNNNNNNNNNNNN)zr r� r� r- �loggingrF r� r r| r r1 r r� r� � urllib.parser � collectionsr Z salt.configr Zsalt.utils.argsZsalt.utils.cloudZsalt.utils.dataZsalt.utils.dictupdateZsalt.utils.filesZsalt.utils.functoolsZsalt.utils.hashutilsZsalt.utils.networkZsalt.utils.pathZsalt.utils.stringutilsZsalt.exceptionsr r Zsalt.utils.versionsr � getLoggerr r, Z__func_alias__r r� r@ rR r r �objectr r r r$ r/ r4 rK rL rR r� r� r� r� r� r� r� r� r� r� r( r* re rn rs r� r$ r� r r r� r� r� r� r- rP r� r� r� r � functoolsZalias_functionr� rG rK r� r� r� rT r� r� rV r� r� r� r� r r rJ r r rQ r� r r r� r r r rO r r% r' r( r{ r0 r8 r r r r �<module> s� 1 5 )< Q &'"UA � A 4" � I m )V � D + 8, / % - F ` d R 3 � d* �L �_ �_ �] �_ �` = +A � p( � B
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings