Current File : //lib/python2.7/site-packages/salt/states/lxd_container.pyo
�
���^c
@@ sL d Z d d l m Z m Z m Z d d l m Z d d l m Z d d l j j
Z
d d l m Z d Z
d Z d Z d
Z d Z d � Z e e e e e d
e e e e e e d � Z e e e e e d � Z e e e e e d � Z e e e e e d � Z e e e e e d � Z e e e e d � Z d � Z d � Z d � Z d S( uw
Manage LXD containers.
.. versionadded:: 2019.2.0
.. note:
- `pylxd`_ version 2 is required to let this work,
currently only available via pip.
To install on Ubuntu:
$ apt-get install libssl-dev python-pip
$ pip install -U pylxd
- you need lxd installed on the minion
for the init() and version() methods.
- for the config_get() and config_get() methods
you need to have lxd-client installed.
.. _: https://github.com/lxc/pylxd/blob/master/doc/source/installation.rst
:maintainer: René Jochum <rene@jochums.at>
:maturity: new
:depends: python-pylxd
:platform: Linux
i ( t absolute_importt print_functiont unicode_literals( t CommandExecutionError( t SaltInvocationErrorN( t mapu restructuredtext enu
lxd_containerig in if c C@ s d t k r t St S( u>
Only load if the lxd module is available in __salt__
u lxd.version( t __salt__t __virtualname__t False( ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt __virtual__2 s u x86_64c
C@ s� | d3 k r d g } n | d3 k r- i } n i | d 6| d 6| d 6| d 6| d 6| d 6| d 6| d 6| d
6| d 6|
d 6| d
6| d 6i d 6}
d3 } y& t d | | |
| | d t �} Wn8 t k
r� } t |
t j | � � St k
r� } n X| d3 k r�t d r�d j | � } i | d 6|
d <| t k rb| d } d j | � |
d d <n i | d 6|
d <t
|
| � Sy3 t d | | | | | | | t | |
| | � Wn& t k
r�} t |
t j | � � SXd j | � } i | d 6|
d <| t k rvy t d | | |
| | � Wn& t k
rN} t |
t j | � � SX| d } i d j | � d 6|
d <n t |
| � St t
t j | � � } t t
t j | j � � } t } g } x] | j | � D]L } t d s| j d j | � � | j | � q�| j d j | � � q�Wx] | j | � D]L } t d sh| j d j | � � | j | � q2| j d j | � � q2W| r�t } | |
d d <t | � | _ n t d! | | � \ } } t d" | | | t d � } | rt } |
d j | � n | j t k } t d s[y t d# | � Wq[t k
rW} t |
t j | � � SXn | | k r| t k r�t d r�d$ | d <t
|
d% j | � � S| j d& t � d' | d <q| t k rt d r�d( | d) <t
|
d* j | � � S| j d& t � d+ | d) <qn | t k s(| d3 k r�| r�| r�| r�t d rdd, | d- <t
|
d. j | � � S| j d& t � d/ j | � | d- <t |
d/ j | � � Sn | s�t |
d0 � St d r�t
|
d1 j | � � St |
d2 j t |
d j � � � � S(4 u}
Create the named container if it does not exist
name
The name of the container to be created
running : None
* If ``True``, ensure that the container is running
* If ``False``, ensure that the container is stopped
* If ``None``, do nothing with regards to the running state of the
container
source : None
Can be either a string containing an image alias:
"xenial/amd64"
or an dict with type "image" with alias:
{"type": "image",
"alias": "xenial/amd64"}
or image with "fingerprint":
{"type": "image",
"fingerprint": "SHA-256"}
or image with "properties":
{"type": "image",
"properties": {
"os": "ubuntu",
"release": "14.04",
"architecture": "x86_64"
}}
or none:
{"type": "none"}
or copy:
{"type": "copy",
"source": "my-old-container"}
profiles : ['default']
List of profiles to apply on this container
config :
A config dict or None (None = unset).
Can also be a list:
[{'key': 'boot.autostart', 'value': 1},
{'key': 'security.privileged', 'value': '1'}]
devices :
A device dict or None (None = unset).
architecture : 'x86_64'
Can be one of the following:
* unknown
* i686
* x86_64
* armv7l
* aarch64
* ppc
* ppc64
* ppc64le
* s390x
ephemeral : False
Destroy this container after stop?
restart_on_change : False
Restart the container when we detect changes on the config or
its devices?
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Zertifikate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u defaultu nameu runningu profilesu sourceu configu devicesu architectureu ephemeralu restart_on_changeu remote_addru certu keyu verify_certu changesu lxd.container_gett _rawu testu Would create the container "{0}"u createdu and start it.u Would start the container "{0}"u startedu lxd.container_createu Created the container "{0}"u lxd.container_startu and started it.u Started the container "{0}"u Removed profile "{0}"u Would remove profile "{0}"u Added profile "{0}"u Would add profile "{0}"u lxd.normalize_input_valuesu lxd.sync_config_devicesu lxd.pylxd_save_objectu Would start the containeru. Container "{0}" would get changed and started.t waitu Started the containeru Would stopped the containeru stoppedu. Container "{0}" would get changed and stopped.u Stopped the containeru Would restart the containeru restartedu! Would restart the container "{0}"u" Container "{0}" has been restartedu
No changesu" Container "{0}" would get changed.u {0} changesN( t NoneR t TrueR t _errort sixt text_typeR t __opts__t formatt
_unchangedt _successt setR t profilesR t
differencet appendt discardt addt listt updatet status_codet CONTAINER_STATUS_RUNNINGt startt stopt restartt lent keys( t namet runningt sourceR t configt devicest architecturet ephemeralt restart_on_changet remote_addrt certt keyt verify_certt rett containert et msgt new_profilest old_profilest container_changedt profile_changest kt changest
is_running( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt present9 s i
c C@ sH i | d 6| d 6| d 6| d 6| d 6| d 6i d 6} y& t d | | | | | d t �} WnK t k
r� } t | t j | � � St k
r� } t | d
j | � � SXt d r� i d j | � d
6| d <t
| | d d
� S| r | j t k r | j
d t � n | j d t � d j | � | d d <t | | d d � S( u*
Ensure a LXD container is not present, destroying it if present
name :
The name of the container to destroy
stop :
stop before destroying
default: false
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Zertifikate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u nameu stopu remote_addru certu keyu verify_certu changesu lxd.container_getR
u Container "{0}" not found.u testu" Container "{0}" would get deleted.u removedR u! Container "{0}" has been deleted.u deleted( R R
R R R R R R R R R R R R t delete( R$ R R, R- R. R/ R0 R1 R2 ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt absentk s0 )
c
C@ s� i | d 6| d 6| d 6| d 6| d 6| d 6i d 6} y& t d | | | | | d t �} WnK t k
r� } t | t j | � � St k
r� } t | d
j | � � SX| j t k } | rQ| s� t
| d j | � � St d rd
j | � | d d <t | | d d � S| j
d t � d j | � | d d <t
| | d d � Sn t d r�d j | � | d d <t | | d d � S| j d t � d j | � | d d <t
| | d d � S( u:
Ensure a LXD container is running and restart it if restart is True
name :
The name of the container to start/restart.
restart :
restart the container if it is already started.
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Zertifikate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u nameu restartu remote_addru certu keyu verify_certu changesu lxd.container_getR
u Container "{0}" not foundu& The container "{0}" is already runningu testu! Would restart the container "{0}"u restartedR u Restarted the container "{0}"u Would start the container "{0}"u startedu Started the container "{0}"( R R
R R R R R R R R R R R R! R (
R$ R! R, R- R. R/ R0 R1 R2 R: ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyR% � sB (
c
C@ s� i | d 6| d 6| d 6| d 6| d 6| d 6i d 6} y& t d | | | | | d t �} WnK t k
r� } t | t j | � � St k
r� } t | d
j | � � SX| j t k r� t
| d j | � � S| j t k } | r| rt | d j | � � S| rp| rpt d
rFd j | � | d d <t
| | d d � S| j d t � d j | � | d d <n t d
r�d j | � | d d <t
| | d d � S| j d t � d j | � | d d <t
| | d d � S( u
Ensure a LXD container is frozen, start and freeze it if start is true
name :
The name of the container to freeze
start :
start and freeze it
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Zertifikate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u nameu startu remote_addru certu keyu verify_certu changesu lxd.container_getR
u Container "{0}" not foundu Container "{0}" is alredy frozenuC Container "{0}" is not running and start is False, cannot freeze itu testu3 Would start the container "{0}" and freeze it afteru startedR u Start the container "{0}"u Would freeze the container "{0}"u frozenu Froze the container "{0}"( R R
R R R R R R R t CONTAINER_STATUS_FROZENR R R R R t freeze(
R$ R R, R- R. R/ R0 R1 R2 R: ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt frozen sH (
c C@ sH i | d 6| d 6| d 6| d 6| d 6| d 6i d 6} y& t d | | | | | d t �} WnK t k
r� } t | t j | � � St k
r� } t | d
j | � � SX| j t k r� t
| d j | � � St d rd
j | � | d d <t | | d d � S| j
d | d t � d j | � | d d <t
| | d d � S( u
Ensure a LXD container is stopped, kill it if kill is true else stop it
name :
The name of the container to stop
kill :
kill if true
remote_addr :
An URL to a remote Server, you also have to give cert and key if you
provide remote_addr!
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Zertifikate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
u nameu killu remote_addru certu keyu verify_certu changesu lxd.container_getR
u Container "{0}" not foundu" Container "{0}" is already stoppedu testu Would stop the container "{0}"u stoppedt forceR u Stopped the container "{0}"( R R
R R R R R R R t CONTAINER_STATUS_STOPPEDR R R R ( R$ t killR, R- R. R/ R0 R1 R2 ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt stopped� s. (
c
C@ s i
| d 6| d 6| d 6| d 6| d 6| d 6| d 6| d 6| d 6i d
6}
d } y& t d | | | | | d t �} Wn8 t k
r� } t |
t j | � � St k
r� } n X| d k r� t |
d
j | � � S| d k r� | } n y$ t d | | | | | d t �WnK t k
r6} t |
t j | � � St k
r[} t |
d j | � � SXt
d r�d j | | | � |
d
d <t |
|
d
d � Sy- t d | | | | | | | | | | �
Wn& t k
r�} t |
t j | � � SXd j | | | � |
d
d <t |
|
d
d � S( u Ensure a container is migrated to another host
If the container is running, it either must be shut down
first (use stop_and_start=True) or criu must be installed
on the source and destination machines.
For this operation both certs need to be authenticated,
use :mod:`lxd.authenticate <salt.states.lxd.authenticate`
to authenticate your cert(s).
name :
The container to migrate
remote_addr :
An URL to the destination remote Server
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
cert :
PEM Formatted SSL Zertifikate.
Examples:
~/.config/lxc/client.crt
key :
PEM Formatted SSL Key.
Examples:
~/.config/lxc/client.key
verify_cert : True
Wherever to verify the cert, this is by default True
but in the most cases you want to set it off as LXD
normaly uses self-signed certificates.
src_remote_addr :
An URL to the source remote Server
Examples:
https://myserver.lan:8443
/var/lib/mysocket.sock
stop_and_start:
Stop before migrating and start after
src_cert :
PEM Formatted SSL Zertifikate, if None we copy "cert"
Examples:
~/.config/lxc/client.crt
src_key :
PEM Formatted SSL Key, if None we copy "key"
Examples:
~/.config/lxc/client.key
src_verify_cert :
Wherever to verify the cert, if None we copy "verify_cert"
u nameu remote_addru certu keyu verify_certu src_remote_addru
src_and_startu src_certu src_keyu changesu lxd.container_getR
u) Container "{0}" exists on the destinationu Source Container "{0}" not foundu testu5 Would migrate the container "{0}" from "{1}" to "{2}"u migratedu lxd.container_migrateu0 Migrated the container "{0}" from "{1}" to "{2}"N( R R R
R R R R R R R R R (
R$ R, R- R. R/ t src_remote_addrt stop_and_startt src_certt src_keyt src_verify_certR0 t dest_containerR2 ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt migrated� s\ H
c C@ s1 t | d <| | d <d | k r- i | d <n | S( Nu resultu commentu changes( R
( R0 t success_msg( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyR W s
c C@ s1 d | d <| | d <d | k r- i | d <n | S( Nu resultu commentu changes( R ( R0 R3 ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyR _ s
c C@ s1 t | d <| | d <d | k r- i | d <n | S( Nu resultu commentu changes( R ( R0 t err_msg( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyR g s
( t __doc__t
__future__R R R t salt.exceptionsR R t salt.ext.sixt extR t salt.ext.six.movesR t
__docformat__R R R> RB R R R R
R; R= R% R@ RD RK R R R ( ( ( s= /usr/lib/python2.7/site-packages/salt/states/lxd_container.pyt <module> sf � ( L \ a M �
Mini Shell