Current File : //lib/python2.7/site-packages/salt/modules/lxd.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l m Z d d l Z d d l Z d d l
m Z d d l m
Z
d d l m Z d d l j j Z d d l m Z d d l m Z y5 d d l Z e Z d d l Z e j e j j � Wn e k
re Z n Xd d l Z e j e � Z! d
Z" d Z# i d d
6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6Z$ d Z% d Z& i Z' d � Z( e j) j* j+ j, d � d! � � Z- d" � Z. e j) j* j+ j, d � d# d d d d d d d$ � � Z0 e j) j* j+ j, d � e j) j* j+ j, d% � d& � � � Z1 e j) j* j+ j, d � e j) j* j+ j, d% � d' � � � Z2 d d d e d( � Z3 d) � Z4 e d* � Z5 e d d d e d+ � Z6 d d d d e e d d d e e d, � Z7 d d d d e e d- � Z8 d d d e d. � Z9 d d d e d/ � Z: d d d d e d0 � Z; d d d e d1 � Z< d2 e d d d e d3 � Z= d d d e d4 � Z> d d d e d5 � Z? d d d e d6 � Z@ e d d d e d d d d d7 � ZA d d d e d8 � ZB d d d e d9 � ZC d d d e d: � ZD d d d e d; � ZE d< d d d e d= � ZF d d d e d> � ZG e e d d d d? d d d e d@ �
ZH e d d d d d d e dA � ZI d d d e dB � ZJ e d d d e dC � ZK d d d d d d e dD � ZL d d d e e dE � ZM d d d e dF � ZN d d d e dG � ZO d d d e dH � ZP d d d e dI � ZQ d d d e dJ � ZR d< d d d e dK � ZS d d d e dL � ZT e d d d e dM � ZU d d d e e dN � ZV d d d e e dO � ZW d d d e dP � ZX d d d e d e e e dQ � ZY d d d e d e e e dR � ZZ d d d e d e d? e dS � Z[ e d d d e dT � Z\ dU d d d e dV � Z] d d d e dW � Z^ d d d e dX � Z_ d d d d e dY � Z` d d d e dZ � Za d d d e d[ � Zb d\ � Zc e d] � Zd d^ � Ze d_ � Zf d` � Zg d d d e da � Zh db � Zi e r�d d lj Z ek e j dc � swdd e j jl f de � � YZm em e j _m n y d df ln mo Zo Wn! e k
r�d df lp mo Zo n Xdg eo jq f dh � � YZq eq eo _q n d S(i uJ
Module for managing the LXD daemon and its containers.
.. versionadded:: 2019.2.0
`LXD(1)`__ is a container "hypervisor". This execution module provides
several functions to help manage it and its containers.
.. note:
- `pylxd(2)`__ version >=2.2.5 is required to let this work,
currently only available via pip.
To install on Ubuntu:
$ apt-get install libssl-dev python-pip
$ pip install -U pylxd
- you need lxd installed on the minion
for the init() and version() methods.
- for the config_get() and config_get() methods
you need to have lxd-client installed.
.. __: https://linuxcontainers.org/lxd/
.. __: https://github.com/lxc/pylxd/blob/master/doc/source/installation.rst
:maintainer: René Jochum <rene@jochums.at>
:maturity: new
:depends: python-pylxd
:platform: Linux
i ( t absolute_importt print_functiont unicode_literalsN( t datetime( t LooseVersion( t CommandExecutionError( t SaltInvocationError( t map( t zipu restructuredtext enu 2.2.5u 0u unknownu 1u i686u 2u x86_64u 3u armv7lu 4u aarch64u 5u ppcu 6u ppc64u 7u ppc64leu 8u s390xig u lxdc C@ sH t r> t t � � t t � k r: t d j t � t � f St St d f S( Nuf The lxd execution module cannot be loaded: pylxd "{0}" is not supported, you need at least pylxd "{1}"uT The lxd execution module cannot be loaded: the pylxd python module is not available.( t HAS_PYLXDR t
pylxd_versiont _pylxd_minimal_versiont Falset formatt __virtualname__( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt __virtual__Y s
c C@ s t d d � S( ut
Returns the actual lxd version.
CLI Example:
.. code-block:: bash
salt '*' lxd.version
u cmd.runu
lxd --version( t __salt__( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt versionr s c C@ s t j S( u|
Returns the actual pylxd version.
CLI Example:
.. code-block:: bash
salt '*' lxd.pylxd_version
( t pylxdt __version__( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR
� s u dirc
C@ sV d j | � } | d k r1 | d j | � } n | d k rS | d j | � } n | d k ru | d j | � } n | d k r� | d j | � } n | d k r� | d j | � } n | d k r� | d j | � } n y t d | � } Wn4 t k
r%} t d j | t j | � � � � n Xd
| k rRt | | j d
� d � � n | S(
u
Calls lxd init --auto -- opts
storage_backend :
Storage backend to use (zfs or dir, default: dir)
trust_password :
Password required to add new clients
network_address : None
Address to bind LXD to (default: none)
network_port : None
Port to bind LXD to (Default: 8443)
storage_create_device : None
Setup device based storage using this DEVICE
storage_create_loop : None
Setup loop based storage with this SIZE in GB
storage_pool : None
Storage pool to use or create
CLI Examples:
To listen on all IPv4/IPv6 Addresses:
.. code-block:: bash
salt '*' lxd.init dir PaSsW0rD [::]
To not listen on Network:
.. code-block:: bash
salt '*' lxd.init
u' lxd init --auto --storage-backend="{0}"u --trust-password="{0}"u --network-address="{0}"u --network-port="{0}"u --storage-create-device="{0}"u --storage-create-loop="{0}"u --storage-pool="{0}"u cmd.runu% Failed to call: '{0}', error was: {1}u error:i N( R
t NoneR t
ValueErrorR t sixt text_typet index(
t storage_backendt trust_passwordt network_addresst network_portt storage_create_devicet storage_create_loopt storage_poolt cmdt outputt e( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt init� s4 +
u lxcc C@ s^ d j | | � } t d | � } d | k rN t | | j d � d � � n d j | � f S( ug
Set an LXD daemon config option
CLI Examples:
To listen on IPv4 and IPv6 port 8443,
you can omit the :8443 its the default:
.. code-block:: bash
salt '*' lxd.config_set core.https_address [::]:8443
To set the server trust password:
.. code-block:: bash
salt '*' lxd.config_set core.trust_password blah
u lxc config set "{0}" "{1}"u cmd.runu error:i u$ Config value "{0}" successfully set.( R
R R R ( t keyt valueR R! ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt
config_set� s c C@ sO d j | � } t d | � } d | k rK t | | j d � d � � n | S( u�
Get an LXD daemon config option
key :
The key of the config value to retrieve
CLI Examples:
.. code-block:: bash
salt '*' lxd.config_get core.https_address
u lxc config get "{0}"u cmd.runu error:i ( R
R R R ( R$ R R! ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt
config_get
s c C@ s d j t j | � t j | � t j | � t j | � f � } | t k ri t j d j | � � t | Sy;| d k s� | d k r� t j d � t j � } n| j
d � r� t j | � } n� | d k s� | d k r� t d � � n t j
j | � } t j
j | � } t j
j | � s6t d j | � � � n t j
j | � s`t d j | � � � n t j d j | | | | � � t j d
| d | | f d | � } Wn_ t j j k
r�t d
j | � � � n4 t k
r} t d j | t j | � � � � n X| t | <| S( uj
Get an pyxld client, this is not ment to be runned over the CLI.
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
See the `requests-docs`_ for the SSL stuff.
.. _requests-docs: http://docs.python-requests.org/en/master/user/advanced/#ssl-cert-verification
# noqa
u |u3 Returning the client "{0}" from our connection poolu /var/lib/lxd/unix.socketu* Trying to connect to the local unix socketu /u: You have to give a Cert and Key file for remote endpoints.uV You have given an invalid cert path: "{0}", the file does not exists or is not a file.uU You have given an invalid key path: "{0}", the file does not exists or is not a file.uN Trying to connecto to "{0}" with cert "{1}", key "{2}" and verify_cert "{3!s}"t endpointt certt verifyu Failed to connect to '{0}'uR Failed to connect to "{0}", looks like the SSL verification failed, error was: {1}N( t joinR R t _connection_poolt logt debugR
R R t Clientt
startswithR t ost patht
expandusert isfilet
exceptionst ClientConnectionFailedR t TypeError( t remote_addrR) R$ t verify_certt pool_keyt clientR" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt pylxd_client_get* sX $
c C@ sC y | j � Wn. t j j k
r> } t t j | � � � n Xt S( u� Saves an object (profile/image/container) and
translate its execpetion on failure
obj :
The object to save
This is an internal method, no CLI Example.
( t saveR R5 t LXDAPIExceptionR R R t True( t objR" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt pylxd_save_object� s
c C@ sk t | | | | � } | j r" t Sy | j | � Wn. t j j k
rc } t t j | � � � n X| j S( u
Authenticate with a remote LXDaemon.
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
password :
The password of the remote.
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.authenticate https://srv01:8443 <yourpass> ~/.config/lxc/client.crt ~/.config/lxc/client.key false
See the `requests-docs`_ for the SSL stuff.
.. _requests-docs: http://docs.python-requests.org/en/master/user/advanced/#ssl-cert-verification
# noqa
(
R< t trustedR? t authenticateR R5 R> R R R ( R8 t passwordR) R$ R9 R; R" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyRC � s + c C@ sQ t | | | | � } | j j � } | rD g | D] } | j ^ q1 St t | � S( u,
Lists containers
list_names : False
Only return a list of names when True
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
Full dict with all available informations:
.. code-block:: bash
salt '*' lxd.container_list
For a list of names:
.. code-block:: bash
salt '*' lxd.container_list true
# See: https://github.com/lxc/pylxd/blob/master/doc/source/containers.rst#container-attributes
# noqa
( R< t
containerst allt nameR t _pylxd_model_to_dict( t
list_namesR8 R) R$ R9 R; RE t c( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_list� s
4c
C@ s� | d k r d g } n | d k r- i } n | d k rB i } n t | | |
| � }
t | t t t f � s~ t d � � n | t k r� t d j | | � � � n t | t j
� r� i d d 6| d 6} n t | | � \ } } yJ |
j j
i | d 6t | d 6| d 6| d
6| d 6| d 6d
| �} Wn. t j j k
r]} t t j | � � � n X| sr| j � d S| r�x0 t j | � D] \ } } t | | | � q�Wn | r�| St | � S( u�
Create a container
name :
The name of the container
source :
Can be either a string containing an image alias:
"xenial/amd64"
or an dict with type "image" with alias:
{"type": "image",
"alias": "xenial/amd64"}
or image with "fingerprint":
{"type": "image",
"fingerprint": "SHA-256"}
or image with "properties":
{"type": "image",
"properties": {
"os": "ubuntu",
"release": "14.04",
"architecture": "x86_64"
}}
or none:
{"type": "none"}
or copy:
{"type": "copy",
"source": "my-old-container"}
profiles : ['default']
List of profiles to apply on this container
config :
A config dict or None (None = unset).
Can also be a list:
[{'key': 'boot.autostart', 'value': 1},
{'key': 'security.privileged', 'value': '1'}]
devices :
A device dict or None (None = unset).
architecture : 'x86_64'
Can be one of the following:
* unknown
* i686
* x86_64
* armv7l
* aarch64
* ppc
* ppc64
* ppc64le
* s390x
ephemeral : False
Destroy this container after stop?
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
_raw : False
Return the raw pyxld object or a dict?
CLI Examples:
.. code-block:: bash
salt '*' lxd.container_create test xenial/amd64
# See: https://github.com/lxc/lxd/blob/master/doc/rest-api.md#post-1
u defaultu/ 'profiles' must be formatted as list/tuple/set.u8 Unknown architecture '{0}' given for the container '{1}'u imageu typeu aliasu nameu architectureu profilesu sourceu configu ephemeralt waitu operationN( R R< t
isinstancet listt tuplet setR t _architecturesR
R t string_typest normalize_input_valuesRE t createR R5 R> R R t jsont iteritemst container_device_addRH ( RG t sourcet profilest configt devicest architecturet ephemeralRL R8 R) R$ R9 t _rawR; t containerR" t dnt dargs( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_create sP a
c
C@ s� t | | | | � } | d k r= | j j � } | r� | Sn\ g } y | j j | � g } Wn, t j j k
r� t d j | � � � n X| r� | d Sg } x3 | D]+ } | j
t | j t
| � f g � � q� W| S( u� Gets a container from the LXD
name :
The name of the container to get.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
_raw :
Return the pylxd object, this is internal and by states in use.
u Container '{0}' not foundi N( R< R RE RF t getR R5 R> R R
t appendt dictRG RH (
RG R8 R) R$ R9 R^ R; RE t infosR_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt
container_get� s$ #
c C@ s2 t | | | | | d t �} | j d t � t S( u�
Delete a container
name :
Name of the container to delete
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ RL ( Rg R? t delete( RG R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_delete� s !c C@ sb t | | | | | d t �} | j t k rE t d j | � � � n | j | d t �t | � S( u
Rename a container
name :
Name of the container to Rename
newname :
The new name of the contianer
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u) Can't rename the running container '{0}'.RL ( Rg R? t status_codet CONTAINER_STATUS_RUNNINGR R
t renameRH ( RG t newnameR8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_rename" s $c C@ s t | | | | � } | d k r3 | j j � } nH y | j j | � g } Wn, t j j k
rz t d j | � � � n Xg } x| | D]t } i } | j
� } | j t | j
t g t | � D]* }
|
j d � s� |
t | |
� f ^ q� � f g � � q� W| S( u�
Get container state
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u Container '{0}' not foundu _N( R< R RE RF Rc R R5 R> R R
t stateRd Re RG t dirR0 t getattr( RG R8 R) R$ R9 R; RE t statesR_ Ro t k( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_stateS s&
;c C@ s8 t | | | | | d t �} | j d t � t | � S( u�
Start a container
name :
Name of the container to start
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ RL ( Rg R? t startRH ( RG R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_start� s !i c C@ s> t | | | | | d t �} | j | | d t �t | � S( u�
Stop a container
name :
Name of the container to stop
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ RL ( Rg R? t stopRH ( RG t timeoutt forceR8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_stop� s !c C@ s8 t | | | | | d t �} | j d t � t | � S( u�
Restart a container
name :
Name of the container to restart
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ RL ( Rg R? t restartRH ( RG R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_restart� s !c C@ s8 t | | | | | d t �} | j d t � t | � S( u�
Freeze a container
name :
Name of the container to freeze
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ RL ( Rg R? t freezeRH ( RG R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_freeze s !c C@ s8 t | | | | | d t �} | j d t � t | � S( u�
Unfreeze a container
name :
Name of the container to unfreeze
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ RL ( Rg R? t unfreezeRH ( RG R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_unfreeze/ s !c
C@ s� | d k r | } n | d k r* | } n | d k r? | } n t | | | | | d t �}
t | | | | � } xK |
j D]@ } y | j j | � Wq| t j j k
r� t d � � q| Xq| W|
j
t k }
| r� |
r� |
j d t � n y/ |
j
| d t �} |
j | _ | j � Wn. t j j k
rM} t t j | � � � n X|
j d t � | r}|
r}| j d t � n t | � S( u5 Migrate a container.
If the container is running, it either must be shut down
first (use stop_and_start=True) or criu must be installed
on the source and destination machines.
For this operation both certs need to be authenticated,
use :mod:`lxd.authenticate <salt.modules.lxd.authenticate`
to authenticate your cert(s).
name :
Name of the container to migrate
stop_and_start :
Stop the container on the source and start it on dest
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
# Authorize
salt '*' lxd.authenticate https://srv01:8443 <yourpass> ~/.config/lxc/client.crt ~/.config/lxc/client.key false
salt '*' lxd.authenticate https://srv02:8443 <yourpass> ~/.config/lxc/client.crt ~/.config/lxc/client.key false
# Migrate phpmyadmin from srv01 to srv02
salt '*' lxd.container_migrate phpmyadmin stop_and_start=true remote_addr=https://srv02:8443 cert=~/.config/lxc/client.crt key=~/.config/lxc/client.key verify_cert=False src_remote_addr=https://srv01:8443
# noqa
R^ u8 not all the profiles from the source exist on the targetRL N( R Rg R? R< RY Rc R R5 R> R Rj Rk Rw t migrateR= R R R Rh Ru RH ( RG t stop_and_startR8 R) R$ R9 t src_remote_addrt src_certt src_keyt src_verify_certR_ t dest_clientt pnamet was_runningt dest_containerR" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_migrateW s: @ c C@ s. t | | | | | d t �} t | d | � S( u
Get a container config value
name :
Name of the container
config_key :
The config key to retrieve
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u config( Rg R? t _get_property_dict_item( RG t
config_keyR8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_config_get� s $c C@ s1 t | | | | | d t �} t | d | | � S( u0
Set a container config value
name :
Name of the container
config_key :
The config key to set
config_value :
The config value to set
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u config( Rg R? t _set_property_dict_item( RG R� t config_valueR8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_config_set� s 'c C@ s. t | | | | | d t �} t | d | � S( u
Delete a container config value
name :
Name of the container
config_key :
The config key to delete
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u config( Rg R? t _delete_property_dict_item( RG R� R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_config_delete s $c C@ s. t | | | | | d t �} t | d | � S( u�
Get a container device
name :
Name of the container
device_name :
The device name to retrieve
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u devices( Rg R? R� ( RG t device_nameR8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_device_getK s $u diskc K@ s; t | | | | | d t �} | | d <t | d | | � S( uV
Add a container device
name :
Name of the container
device_name :
The device name to add
device_type :
Type of the device
** kwargs :
Additional device args
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u typeu devices( Rg R? R� ( RG R� t device_typeR8 R) R$ R9 t kwargsR_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyRW v s
,
c C@ s. t | | | | | d t �} t | d | � S( u�
Delete a container device
name :
Name of the container
device_name :
The device name to delete
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
R^ u devices( Rg R? R� ( RG R� R8 R) R$ R9 R_ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_device_delete� s $u basec
C@ s� t j | � } | j d � s0 d j | � } n t | | |
| | d t �}
t j j | � } t j j | � s� | j
d � d k r� t d | d | �} | s� t d j | � � � n t j j | � s� t d � � n | } q� n | j
t j j � } | st j j } n t j j | � s<t d
j | � � � n t j j | � rd| rdt d � � n y) t } |
j j t j j | d � � WnV t j j k
r�n@ t j j k
r�} t j | � j
d
� d k r�t } q�n Xt j j | � r�| r�t j j | t j j | � � } | s�t } y |
j j t j j | � � Wn_ t j j k
rjt } nC t j j k
r�} t j | � j
d � d k r�t } q�� n X| r�t d � � q�q�n | d k s�| d k s�| d k rLt j | � } | d k rt | j � } n | d k r1| j } n | d k rL| j! } qLn t" j# j j$ | d � �2 } |
j j% | | j& � d | d | d | �Wd QXt St j j | � s�t d � � n | j' t j � r�t( t j j) | � � } n� | r�t( | � } n� y/ |
j j t j j t j j) | � d � � Wnh t j j k
rGnR t j j k
r�} t j | � j
d
� d k r�t } t( | � } t } q�n X| s�t d � � n g } xU t j* | � D]D \ } } } t j j | | | j+ t j j � � } | j, | � q�W|
j- d d g | � | } | } | } xSt j* | � D]B\ } } } t j j | | | j+ t j j � � } x| D] } t j j | | � } t j j | | � } | d k s�| d k s�| d k r7t j | � } | d k rt | j � } n | d k r | j } n | d k r7| j! } q7n t" j# j j$ | d � �2 } |
j j% | | j& � d | d | d | �Wd QXq�WqEWt S( u�
Put a file into a container
name :
Name of the container
src :
The source file or directory
dst :
The destination file or directory
recursive :
Decent into src directory
overwrite :
Replace destination if it exists
mode :
Set file mode to octal number
uid :
Set file uid (owner)
gid :
Set file gid (group)
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
salt '*' lxd.container_file_put <container name> /var/tmp/foo /var/tmp/
u 0u 0{0}R^ u ://i u
cp.cache_filet saltenvu File '{0}' not foundu File path must be absolute.u No such file or directory '{0}'uG Cannot copy overwriting a directory without recursive flag set to true!u .u Is a directoryu not foundu) Destination exists and overwrite is falseu rbt modet uidt gidNu$ Source is neither file nor directoryu mkdiru -p(. R R R0 R
Rg R? R1 R2 R3 t isabst findR R t rstript sept existsR t isdirR t filesRc R+ R R5 t NotFoundR> R4 t basenameR t statt octt st_modet st_uidt st_gidt saltt utilst fopent putt readt endswitht lent dirnamet walkt lstripRd t execute( RG t srct dstt recursivet overwriteR� R� R� R� R8 R) R$ R9 R_ t cached_filet dst_is_directoryt whyt foundR� t src_fpt idxt dstdirsR2 t _R� t dstdirt set_modet set_uidt set_gidt src_namet dst_name( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_file_put� s� M #
! $ /
( (
$ !c C@ sM | d
k r? t j | � } | j d � s? d j | � } q? n t | | | | |
d t �} t j j | � } t j j
| � s� t d � � n t j j | � r� t j j
| t j j | � � } n- t j j t j j | � � s� t d � � n t j j | � r>| st d � � n t j j | � szt d � � qzn< t j j | � } t j j | � szt d j | � � � n t j j j | d � � }
|
j | j j | � � Wd
QX| r�t j | | � n | s�| d k r�t | � } n d } | s| d k rt | � } n d } | d k s3| d k rIt j | | | � n t S( u�
Get a file from a container
name :
Name of the container
src :
The source file or directory
dst :
The destination file or directory
mode :
Set file mode to octal number
uid :
Set file uid (owner)
gid :
Set file gid (group)
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u 0u 0{0}R^ u File path must be absolute.u/ Parent directory for destination doesn't exist.u* Destination exists and overwrite is false.u% Destination exists but is not a file.u No such file or directory '{0}'u wbNi����( R R R R0 R
Rg R? R1 R2 R3 R� R R� R+ R� R� R� R4 R R� R� R� R� t writeRc t chmodt intt chown( RG R� R� R� R� R� R� R8 R) R$ R9 R_ t dst_patht df( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_file_get� sL 7 $ c
C@ s t | | | | | d t �} yr | j | � } i } t | d � sk t d d d | d d | d � } n$ t d | j d | j d | j � } Wn= t j j
k
r� } t d d d d d t j | � � } n Xt
| d � d k r� t | d <n
t | d <| S(
u�
Execute a command list on a container.
name :
Name of the container
cmd :
Command to be executed (as a list)
Example :
'["ls", "-l"]'
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
salt '*' lxd.container_execute <container name> '["ls", "-l"]'
R^ u exit_codet exit_codei t stdoutt stderri u u result( Rg R? R� t hasattrRe R� R� R� R R5 R� R R R� R (
RG R R8 R) R$ R9 R_ t resultt
saltresultR" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt container_execute, s( .
(
c C@ sQ t | | | | � } | j j � } | rD g | D] } | j ^ q1 St t | � S( u� Lists all profiles from the LXD.
list_names :
Return a list of names instead of full blown dicts.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
.. code-block:: bash
salt '*' lxd.profile_list true --out=json
salt '*' lxd.profile_list --out=json
( R< RY RF RG R RH ( RI R8 R) R$ R9 R; RY t p( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_list} s
)c C@ s� t | | | | � } t | | � \ } } y | j j | | | � } Wn. t j j k
rv }
t t j |
� � � n X| d k r� | | _ t | � n t
| � S( u� Creates a profile.
name :
The name of the profile to get.
config :
A config dict or None (None = unset).
Can also be a list:
[{'key': 'boot.autostart', 'value': 1},
{'key': 'security.privileged', 'value': '1'}]
devices :
A device dict or None (None = unset).
description :
A description string or None (None = unset).
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.profile_create autostart config="{boot.autostart: 1, boot.autostart.delay: 2, boot.autostart.priority: 1}"
$ salt '*' lxd.profile_create shared_mounts devices="{shared_mount: {type: 'disk', source: '/home/shared', path: '/home/shared'}}"
See the `lxd-docs`_ for the details about the config and devices dicts.
.. _lxd-docs: https://github.com/lxc/lxd/blob/master/doc/rest-api.md#post-10
# noqa
N( R< RS RY RT R R5 R> R R R R t descriptionRA RH ( RG RZ R[ R� R8 R) R$ R9 R; t profileR" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_create� s ;
c C@ st t | | | | � } d } y | j j | � } Wn, t j j k
r_ t d j | � � � n X| rj | St | � S( u� Gets a profile from the LXD
name :
The name of the profile to get.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
_raw :
Return the pylxd object, this is internal and by states in use.
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.profile_get autostart
u Profile '{0}' not foundN(
R< R RY Rc R R5 R> R R
RH ( RG R8 R) R$ R9 R^ R; R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_get� s )c C@ s, t | | | | | d t �} | j � t S( u� Deletes a profile.
name :
The name of the profile to delete.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_delete shared_mounts
R^ ( R� R? Rh ( RG R8 R) R$ R9 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_delete6 s &
c C@ s. t | | | | | d t �} t | d | � S( u� Get a profile config item.
name :
The name of the profile to get the config item from.
config_key :
The key for the item to retrieve.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_config_get autostart boot.autostart
R^ u config( R� R? R� ( RG R� R8 R) R$ R9 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_config_geti s ) c C@ s1 t | | | | | d t �} t | d | | � S( u Set a profile config item.
name :
The name of the profile to set the config item to.
config_key :
The items key.
config_value :
Its items value.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_config_set autostart boot.autostart 0
R^ u config( R� R? R� ( RG R� R� R8 R) R$ R9 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_config_set� s - c C@ s. t | | | | | d t �} t | d | � S( u Delete a profile config item.
name :
The name of the profile to delete the config item.
config_key :
The config key for the value to retrieve.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_config_delete autostart boot.autostart.delay
R^ u config( R� R? R� ( RG R� R8 R) R$ R9 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_config_delete� s ) c C@ s. t | | | | | d t �} t | d | � S( u� Get a profile device.
name :
The name of the profile to get the device from.
device_name :
The name of the device to retrieve.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_device_get default eth0
R^ u devices( R� R? R� ( RG R� R8 R) R$ R9 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_device_get s ) c K@ sn t | | | | | d t �} | | d <x0 t j | � D] \ } }
t j |
� | | <q8 Wt | d | | � S( u Set a profile device.
name :
The name of the profile to set the device to.
device_name :
The name of the device to set.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_device_set autostart eth1 nic nictype=bridged parent=lxdbr0
# noqa
R^ u typeu devices( R� R? R RV R R� ( RG R� R� R8 R) R$ R9 R� R� Rs t v( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_device_setE s -
c C@ s. t | | | | | d t �} t | d | � S( u� Delete a profile device.
name :
The name of the profile to delete the device.
device_name :
The name of the device to delete.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Example:
.. code-block:: bash
$ salt '*' lxd.profile_device_delete autostart eth1
# noqa
R^ u devices( R� R? R� ( RG R� R8 R) R$ R9 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt profile_device_delete� s , c C@ sE t | | | | � } | j j � } | r8 d � | D� St t | � S( u Lists all images from the LXD.
list_aliases :
Return a dict with the fingerprint as key and
a list of aliases as value instead.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.image_list true --out=json
$ salt '*' lxd.image_list --out=json
c S@ s6 i | ], } g | j D] } | d ^ q | j � q S( u name( t aliasest fingerprint( t .0t it a( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pys
<dictcomp>� s ( R< t imagesRF R RH ( t list_aliasesR8 R) R$ R9 R; R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt
image_list� s
)c C@ st t | | | | � } d } y | j j | � } Wn, t j j k
r_ t d j | � � � n X| rj | St | � S( u� Get an image by its fingerprint
fingerprint :
The fingerprint of the image to retrieve
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
_raw : False
Return the raw pylxd object or a dict of it?
CLI Examples:
..code-block:: bash
$ salt '*' lxd.image_get <fingerprint>
u& Image with fingerprint '{0}' not foundN(
R< R R� Rc R R5 R> R R
RH ( R� R8 R) R$ R9 R^ R; t image( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_get� s -c C@ st t | | | | � } d } y | j j | � } Wn, t j j k
r_ t d j | � � � n X| rj | St | � S( u� Get an image by an alias
alias :
The alias of the image to retrieve
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
_raw : False
Return the raw pylxd object or a dict of it?
CLI Examples:
..code-block:: bash
$ salt '*' lxd.image_get_by_alias xenial/amd64
u Image with alias '{0}' not foundN(
R< R R� t get_by_aliasR R5 R> R R
RH ( t aliasR8 R) R$ R9 R^ R; R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_get_by_alias1
s -c C@ s& t | | | | | � } | j � t S( u� Delete an image by an alias or fingerprint
name :
The alias or fingerprint of the image to delete,
can be a obj for the states.
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
..code-block:: bash
$ salt '*' lxd.image_delete xenial/amd64
( t
_verify_imageRh R? ( R� R8 R) R$ R9 ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_deleten
s +
c
C@ s� | d k r g } n t | | | | � }
y% |
j j | | d | d | �} Wn. t j j k
r } t t j | � � � n Xx | D] } t
| | � q� W| r� | St | � S( u~ Create an image from simplestreams
server :
Simplestreams server URI
alias :
The alias of the image to retrieve
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
aliases : []
List of aliases to append to the copied image
public : False
Make this image public available
auto_update : False
Should LXD auto update that image?
_raw : False
Return the raw pylxd object or a dict of the image?
CLI Examples:
..code-block:: bash
$ salt '*' lxd.image_from_simplestreams "https://cloud-images.ubuntu.com/releases" "trusty/amd64" aliases='["t", "trusty/amd64"]' auto_update=True
# noqa
t publict auto_updateN( R R< R� t create_from_simplestreamsR R5 R> R R R t image_alias_addRH (
t serverR� R8 R) R$ R9 R� R� R� R^ R; R� R" ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_from_simplestreams�
s ?
c
C@ s� | d k r g } n t | | | | � } y" | j j | d | d | �}
Wn. t j j k
r| } t t j | � � � n Xx | D] } t
|
| � q� W| r� |
St |
� S( u Create an image from an url
url :
The URL from where to download the image
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
aliases : []
List of aliases to append to the copied image
public : False
Make this image public available
auto_update : False
Should LXD auto update that image?
_raw : False
Return the raw pylxd object or a dict of the image?
CLI Examples:
..code-block:: bash
$ salt '*' lxd.image_from_url https://dl.stgraber.org/lxd aliases='["busybox-amd64"]'
# noqa
R� R� N( R R< R� t create_from_urlR R5 R> R R R R� RH (
t urlR8 R) R$ R9 R� R� R� R^ R; R� R" R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_from_url�
s ;
c C@ s� | d k r g } n t d | d | �} d }
t j j j | d � � } | j � }
Wd QXt | | | | � } y" | j j |
d | d t
�}
Wn. t j j
k
r� } t t j | � � � n Xx | D] } t |
| � q� W| r� |
St |
� S( u� Create an image from a file
filename :
The filename of the rootfs
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
aliases : []
List of aliases to append to the copied image
public : False
Make this image public available
saltenv : base
The saltenv to use for salt:// copies
_raw : False
Return the raw pylxd object or a dict of the image?
CLI Examples:
..code-block:: bash
$ salt '*' lxd.image_from_file salt://lxd/files/busybox.tar.xz aliases=["busybox-amd64"]
# noqa
u
cp.cache_fileR� t u r+bNR� RL ( R R R� R� R� R� R� R< R� RT R? R R5 R> R R R R� RH ( t filenameR8 R) R$ R9 R� R� R� R^ R� t datat fpR; R� R" R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_from_fileE s ; "
c
C@ s� | d k r g } n t j d j | | | � � d }
y" t | | | | | d t �}
Wn/ t k
r� t | | | | | d t �}
n Xt | | | | � } |
j | d |
d | d t �} x | D] } t
| | � q� W| r� | St | � S( uD Copy an image from another LXD instance
source :
An alias or a fingerprint of the source.
src_remote_addr :
An URL to the source remote daemon
Examples:
https://mysourceserver.lan:8443
src_cert :
PEM Formatted SSL Certificate for the source
Examples:
~/.config/lxc/client.crt
src_key :
PEM Formatted SSL Key for the source
Examples:
~/.config/lxc/client.key
src_verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
remote_addr :
Address of the destination daemon
Examples:
https://mydestserver.lan:8443
cert :
PEM Formatted SSL Certificate for the destination
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key for the destination
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
aliases : []
List of aliases to append to the copied image
public : None
Make this image public available, None = copy source
auto_update : None
Wherever to auto-update from the original source, None = copy source
_raw : False
Return the raw pylxd object or a dict of the destination image?
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.image_copy_lxd xenial/amd64 https://srv01:8443 ~/.config/lxc/client.crt ~/.config/lxc/client.key false https://srv02:8443 ~/.config/lxc/client.crt ~/.config/lxc/client.key false aliases="['xenial/amd64']"
# noqa
u2 Trying to copy the image "{0}" from "{1}" to "{2}"R^ R� R� RL N( R R- R. R
R� R? R R� R< t copyR� RH ( RX R� R� R� R� R8 R) R$ R9 R� R� R� R^ t src_imageR� t
dest_imageR� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_copy_lxd� s, T
u c C@ sT t | | | | | � } x% | j D] } | d | k r" t Sq" W| j | | � t S( uC Create an alias on the given image
image :
An image alias, a fingerprint or a image object
alias :
The alias to add
description :
Description of the alias
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.image_alias_add xenial/amd64 x "Short version of xenial/amd64"
# noqa
u name( R� R� R? t add_alias( R� R� R� R8 R) R$ R9 t
alias_info( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� s 3c C@ sH t | | | | | � } y | j | � Wn t j j k
rC t SXt S( u' Delete an alias (this is currently not restricted to the image)
image :
An image alias, a fingerprint or a image object
alias :
The alias to delete
remote_addr :
An URL to a remote Server, you also have to give cert and key if
you provide remote_addr and its a TCP Address!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.image_alias_add xenial/amd64 x "Short version of xenial/amd64"
# noqa
( R� t delete_aliasR R5 R> R R? ( R� R� R8 R) R$ R9 ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt image_alias_deleteS s /c C@ s� t | | | | | d t �} | r0 | g } n i } xK | D]C } | j i g | j j � D] } i | j d 6^ q\ | j 6� q= W| S( u�
Get all snapshots for a container
container :
The name of the container to get.
remote_addr :
An URL to a remote server. The 'cert' and 'key' fields must also be
provided if 'remote_addr' is defined.
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Verify the ssl certificate. Default: True
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.snapshots_all test-container
R^ u name( Rg R? t updatet snapshotsRF RG ( R_ R8 R) R$ R9 RE t rett contRJ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt
snapshots_all� s $
5c C@ s� t | | | | | d t �} | s< t j � j d � } n | j j | � x= t | � j | � D]& } | j d � | k rb i | d 6Sqb Wi t d 6S( u
Create a snapshot for a container
container :
The name of the container to get.
name :
The name of the snapshot.
remote_addr :
An URL to a remote server. The 'cert' and 'key' fields must also be
provided if 'remote_addr' is defined.
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Verify the ssl certificate. Default: True
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.snapshots_create test-container test-snapshot
R^ u %Y%m%d%H%M%Su name(
Rg R? R t nowt strftimeR RT R Rc R ( R_ RG R8 R) R$ R9 R
RJ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt snapshots_create� s ( c C@ sw t | | | | | d t �} y; x4 | j j � D]# } | j | k r1 | j � t Sq1 WWn t j j k
rr n Xt S( u
Delete a snapshot for a container
container :
The name of the container to get.
name :
The name of the snapshot.
remote_addr :
An URL to a remote server. The 'cert' and 'key' fields must also be
provided if 'remote_addr' is defined.
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Verify the ssl certificate. Default: True
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.snapshots_delete test-container test-snapshot
R^ (
Rg R? R RF RG Rh R R5 R> R ( R_ RG R8 R) R$ R9 R
t s( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt snapshots_delete� s (
c C@ s. t | | | | | d t �} | j j | � S( u
Get information about snapshot for a container
container :
The name of the container to get.
name :
The name of the snapshot.
remote_addr :
An URL to a remote server. The 'cert' and 'key' fields must also be
provided if 'remote_addr' is defined.
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Certificate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Verify the ssl certificate. Default: True
CLI Examples:
.. code-block:: bash
$ salt '*' lxd.snapshots_get test-container test-snapshot
R^ ( Rg R? R Rc ( R_ RG R8 R) R$ R9 ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt
snapshots_get/
s (c C@ s1 t | t � rQ | rH d | d k rH d | d k rH d � | D� } qQ i } n t | t j � rr t d � � n t | t j � r� t d � � n | d k r� x3 t j | � D] \ } } t j | � | | <q� Wn | d k r'xC | D]8 } x/ t j | | � D] \ } } | | | | <qWq� Wn | | f S( u
normalize config input so returns can be put into mongodb, which doesn't like `.`
This is not meant to be used on the commandline.
CLI Examples:
.. code-block:: bash
salt '*' lxd.normalize_input_values config={} devices={}
u keyi u valuec S@ s! i | ] } | d | d � q S( u valueu key( ( R� t d( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pys
<dictcomp>q
s u3 config can't be a string, validate your YAML input.u4 devices can't be a string, validate your YAML input.N( RM RN R RR R R RV R ( RZ R[ Rs R� R` ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyRS a
s(
c
C@ sw i } | d k r i } n t t t t t j | j � � t t j | j � � � � � } t | j � � } t t t t t j | j
j � � t t j | j
j � � � � � | _
t | j
j � � } i } x� | j | � D]w } | j d � s� | j d � r q� n | s9d j
| | j
| � | | <| j
| =q� d j
| | j
| � | | <q� Wx� | j | � D]� } | j d � sj| j d � r�qjn | | | j
| k rj| s�d j
| | | | j
| � | | <| | | j
| <qd j
| | | | j
| � | | <qjqjWx� | j | � D]x } | j d � s$| j d � rNq$n | s�d j
| | | � | | <| | | j
| <q$d j
| | | � | | <q$W| r�| | d <n | d k r�i } n t | j j � � } t | j � � }
i } xb | j |
� D]Q } | d
k r qn | sCd j
| � | | <| j | =qd j
| � | | <qWx� t j | j � D]� \ } } | d
k r�qmn | | k r�qmn | | | k rm| s�d
j
| � | | <| | | j | <q�d j
| � | | <qmqmWxi |
j | � D]X } | d
k r qn | sId j
| � | | <| | | j | <qd j
| � | | <qW| rs| | d <n | S( u� Syncs the given config and devices with the object
(a profile or a container)
returns a changes dict with all changes made.
obj :
The object to sync with / or just test with.
newconfig:
The new config to check with the obj.
newdevices:
The new devices to check with the obj.
test:
Wherever to not change anything and give "Would change" message.
u volatile.u image.u- Removed config key "{0}", its value was "{1}"u- Would remove config key "{0} with value "{1}"u6 Changed config key "{0}" to "{1}", its value was "{2}"uB Would change config key "{0}" to "{1}", its current value is "{2}"u Added config key "{0}" = "{1}"u" Would add config key "{0}" = "{1}"u configu rootu Removed device "{0}"u Would remove device "{0}"u Changed device "{0}"u Would change device "{0}"u Added device "{0}"u Would add device "{0}"u devicesN( R Re RN R R R R t keyst valuesRP RZ t
differenceR0 R
t intersectionR[ RV (
R@ t newconfigt
newdevicest testt changest cckt ockt config_changesRs t dkt ndkt devices_changesR� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt sync_config_devices�
s� ! '
%
c C@ s� t | | � } | d k r� | d } | d k rz d | k rL t d � � n | d d k rz d | k rz t d � � qz n x- | j � D] } | j d � r� | | =q� q� W| | | <n t j | � | | <t | � t | � S(
u� Sets the dict item key of the attr from obj.
Basicaly it does getattr(obj, prop)[key] = value.
For the disk device we added some checks to make
device changes on the CLI saver.
u devicesu typeu disku pathu path must be given as parameteru /u sourceu! source must be given as parameteru __( Rq R R R0 R R RA RH ( R@ t propR$ R% t attrR� Rs ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� , s"
c C@ s; t | | � } | | k r3 t d j | � � � n | | S( Nu '{0}' doesn't exists( Rq R R
( R@ R% R$ R& ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� S s
c C@ sH t | | � } | | k r3 t d j | � � � n | | =t | � t S( Nu '{0}' doesn't exists( Rq R R
RA R? ( R@ R% R$ R& ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� ] s
c C@ s� t | t j � ru | } d } y" t | | | | | d t �} Wq� t k
rq t | | | | | d t �} q� Xn' t | d � s� t d j | � � � n | S( NR^ u fingerprintu Invalid image '{0}'(
RM R RR R R� R? R R� R� R
( R� R8 R) R$ R9 RG ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� j s
c C@ sI i } x< | j j � D]+ } t | | � r t | | � | | <q q W| S( u) Translates a plyxd model object to a dict( t __attributes__R R� Rq ( R@ t
marshalledR$ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyRH � s
u NotFoundR� c B@ s e Z d Z RS( u0 An exception raised when an object is not found.( t __name__t
__module__t __doc__( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� � s ( t Containert FilesManagerc B@ s e Z d d d d � Z RS( c C@ s� i } | d k r^ t | t � r0 t | � } n! | j d � sQ d j | � } n | | d <n | d k r� t j | � | d <n | d k r� t j | � | d <n | j j j
| j j j
j d i | d 6d | d | � } | j d
k S( Nu 0u 0{0}u
X-LXD-modeu X-LXD-uidu X-LXD-gidt paramsu pathR� t headersi� ( R RM R� R� R0 R
R R t _clientt apiRE t
_containerRG R� t postRj ( t selft filepathR� R� R� R� R/ t response( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR� � s
N( R) R* R R� ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyR- � s (r R+ t
__future__R R R R1 R t salt.utils.decorators.pathR� t salt.utils.filest salt.utils.versionsR t salt.exceptionsR R t salt.ext.sixt extR t salt.ext.six.movesR R R R? R t urllib3t disable_warningsR5 t InsecureRequestWarningt ImportErrorR t loggingt getLoggerR) R- t
__docformat__R RQ Rk R R, R R� t
decoratorsR2 t whichR R
R R# R& R' R< RA RC RK Rb Rg Ri Rn Rt Rv Rz R| R~ R� R� R� R� R� R� RW R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R R� R R R R R RS R$ R� R� R� R� RH t pylxd.exceptionsR� R> R� t pylxd.containerR, t pylxd.models.containerR- ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxd.pyt <module>! s�
! T$#$ m <; �;'0;' '''( d)/,*4, � mP1 L825964><2 9 9 / M J T s 9 81661 * � '
Mini Shell