Current File : //proc/self/root/proc/self/root/lib/python2.7/site-packages/salt/modules/lxc.pyo
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z m Z d d l! Z d d l" m# Z$ d d l% m& Z& d d l' m( Z( d d l) m* Z+ e
j, e- � Z. i d d
6d d 6Z/ d
Z0 d Z1 d Z2 d Z3 d Z4 d Z5 e6 � Z7 d � Z8 d � Z9 d � Z: d � Z; d � Z< d � Z= d � Z> d � Z? e@ d � ZA d � ZB e@ d � ZC e@ d � ZD d � ZE e@ d � ZF d! � ZG e@ eH d" � ZI d# � ZJ d$ e6 f d% � � YZK d& � ZL e@ e@ e@ e@ e@ e@ e@ e@ eM e@ e@ e@ e@ e@ e@ e@ e@ e@ eH eH e@ e@ e@ e@ d' � ZN e@ d( � ZO e@ d) � ZP d* � ZQ d+ � ZR e@ e@ e@ e@ d, � ZS e@ e@ e@ d- � ZT e@ eM e@ d. � ZU eH e@ e@ d/ � ZV e7 e7 e7 e7 e7 e@ d0 � ZW e@ d1 � ZX eH e@ d2 � ZY e@ e@ eH d3 � ZZ d4 � Z[ eH e@ e@ d5 � Z\ d6 � Z] e@ e@ d7 � Z^ eH e@ d8 � Z_ e j` ja jb e_ d9 � Zc e@ d: � Zd e@ d; � Ze e@ d< � Zf e@ d= � Zg e@ d> � Zh eM e@ d? � Zi e j` ja jb ei d@ � Zj e@ dA � Zk e@ e@ e@ dB � Zl eM e@ dC � Zm e@ dD � Zn e@ dE � Zo e@ dF � Zp e@ dG dH � Zq e@ dI � Zr e@ eM eM e@ e@ e@ eH eH e@ e@ e@ e@ dJ � Zs e@ dK � Zt e@ eH eM e@ eM dL eH e@ eH e@ dM dN � Zu eH eM e@ eM dL eH e@ eH eH dM dO �
Zv eH eM e@ eM dL eH e@ eH eH dM dP �
Zw eH eM e@ eM dL eH e@ eH eH dM dQ �
Zx eH eM e@ eM dL eH e@ eH eH dM dR �
Zy eH eM e@ eM dL eH e@ eH eH dM dS �
Zz dT � Z{ eH eH e@ dU � Z| e j` ja jb e| dV � Z} dW dX � Z~ dY � Z dW eH e@ dZ � Z� e@ d[ � Z� e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ e@ d\ �
Z� e@ e@ d] � Z� e@ d^ � Z� e@ e@ d_ � Z� d S(` uv
Control Linux Containers via Salt
:depends: lxc package for distribution
lxc >= 1.0 (even beta alpha) is required
i ( t absolute_importt print_functiont unicode_literalsN( t CommandExecutionErrort SaltInvocationError( t LooseVersion( t six( t range( t urlparseu listu list_u lsu ls_u lxcu eth0u br0u /lxc.initial_seedu
lxc-attachu /var/lib/lxcc C@ s# t j j j d � r t St d f S( Nu lxc-startuS The lxc execution module cannot be loaded: the lxc-start binary is not in the path.( t saltt utilst patht whicht __virtualname__t False( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt __virtual__D s c C@ s | s t j d t � } n | S( u�
Get the configured lxc root for containers
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.get_root_path
u
lxc.root_path( t __opts__t gett DEFAULT_PATH( R ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
get_root_path] s
c C@ s� d } t j | d � s| t d d � } | d s| t | d � } | t d � k rc t d � � n d j | � t | <q| n t j | d � S(
u�
Return the actual lxc client version
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.version
u lxc.versionu cmd.run_allu lxc-info --versionu retcodeu stdoutu 1.0u LXC should be at least 1.0u {0}N( t __context__R t Nonet __salt__t
_LooseVersionR t format( t kt cversiont ver( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt versiono s
c C@ sW xP g t D] } | j d � r
| ^ q
D]& } t j d | � t j | d � q) Wd S( u4
Clear any lxc variables set in __context__
u lxc.u Clearing __context__['%s']N( R t
startswitht logt tracet popR ( t xt var( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _clear_context� s /c C@ sU d } | d k r d } n | d k r0 d } n d | k rE d } n d j | | � S( u
Ip sortingu 001u 127.0.0.1u 200u ::1u 201u ::u 100u {0}___{1}( R ( t ipt idx( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _ip_sort� s c C@ s\ t j d d � } | sXt � } t � } | j t � yb t d d � } xK | d j � d D]5 } | j d � s_ | j | j � d j
� � q_ q_ WWn t t f k
r� n Xxp t
j t j d i � � D]S \ } } | | k r� | j | � q� t j j d j | � � r� | j | � q� q� Wt | � } d
� } | j d | � | t d <n | S(
u�
Search which bridges are potentially available as LXC bridges
CLI Example:
.. code-block:: bash
salt '*' lxc.search_lxc_bridges
u lxc.bridgesu cmd.run_allu
brctl showu stdouti u i u
ip_interfacesu# /sys/devices/virtual/net/{0}/bridgec S@ s@ d } d | k r d } n d | k r0 d } n d j | | � S( Nu zu lxcu au br0u cu {0}_{1}( R ( t at pref( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt sort_bridges� s t keyN( R R R t sett addt
DEFAULT_BRR t
splitlinesR t splitt stripR R R t iteritemst
__grains__t osR t existsR t listt sort( t bridgest running_bridgest outputt linet ifcR$ R) ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt search_lxc_bridges� s0
(
c C@ s t � d S( u�
Search the first bridge which is potentially available as LXC bridge
CLI Example:
.. code-block:: bash
salt '*' lxc.search_lxc_bridge
i ( R< ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt search_lxc_bridge� s c
K@ s� | s | j d i � } n | s* i } n | j d | j d t j d t d � � � | j d | j d t j d t j d t j d � � � � � | d s� i } n | S( Nu minionu masteru idu master_portu ret_portu 4506( R t
setdefaultR ( t configt kwargs( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _get_salt_config� s"
c 5 @ s � dA k r i � n t j � � � t j j j � | � � t j � j d � j d i � � � } t | t t
j f � s� i } n t | � � dA � � f d � } | dA k r� � d } n d } t
j d d � dB k r� d } n | d � } | s| d
| � n | d d � } | r)| � d
<n | d
dA � } | rK| � d
<n | r^| � d <n | d t � } t | d t � � }
| d g � } | d t � } | d d � }
| d t � } | d dA � } | d dA � } | d dA � } | d dA � } | d dA � } | d d � } | d dA � } | d dA � } | d dA � } | dA k rZg } n | d dA � } | r�| | k r�| j | � n | d dA � } | j d! dA � } | d" d# � } | d$ dA � } | d% dA � } | d& dA � } | d' t � } | d( t � } t | d) i � � � }! | d* t � }" t | t � sQt j j j � } n | j |" t j j j � � }# t | t j j j � s�t j j j � }$ |$ j | � |$ } n dA }% | d% dA � } | d+ dA � }& | d, dA � }' |& r0|& }( | r
|( d- j | � 7}( n |( |# d. <|' dA k r0|' |# d, <q0n x�t | d/ g � � D]q\ }) }* d0 j |) d1 � }+ | j |+ i � }, |% dA k r�|* j d& |, j d& dA � � }% |% r�|# j d& dA � dA } |% |, d& <q�n |* j d2 |, j d2 dA � � }- |- r�|- |, d2 <n |* j d. |* j d+ dA � � }. |. r/|. |, d. <n |* j d" d � }/ |/ rc|, d. c d- j |/ � 7<n x, dC D]$ }0 |0 |* k rj|* |0 |, d, <PqjqjWd, |, k rFt j j j � |, d, <qFqFWdA }% xc g | D] }1 |1 ^ q�D]H }, | |, }2 |% r|2 j d& dA � n d& |2 k r�|2 d& }% dA } q�q�W| r:| |# d2 <n | rM| |# d& <n i }3 | |3 d <|! |3 d) <| d4 d5 � |3 d4 <| |3 d <| |3 d <| |3 d! <x> d6 d7 d8 g D]- }4 | |4 dA � |3 d6 <|3 d6 dA k r�Pq�q�W� |3 d <| |3 d <| |3 d <| |3 d <| |3 d$ <| |3 d
<| |3 d <| |3 d <| |3 d <| |3 d( <| |3 d' <| |3 d9 <| |3 d: <| d; d< � |3 d; <| d= dA � |3 d= <|
|3 d <| |3 d <|
|3 d <| |3 d <| |3 d <x] d> d? d@ g D]L }0 | |0 dA � r�y � |0 |3 |0 <Wqt k
r � |0 |3 |0 <qXq�q�W|3 S(D u�
Interface between salt.cloud.lxc driver and lxc.init
``vm_`` is a mapping of vm opts in the salt.cloud format
as documented for the lxc driver.
This can be used either:
- from the salt cloud driver
- because you find the argument to give easier here
than using directly lxc.init
.. warning::
BE REALLY CAREFUL CHANGING DEFAULTS !!!
IT'S A RETRO COMPATIBLE INTERFACE WITH
THE SALT CLOUD DRIVER (ask kiorky).
name
name of the lxc container to create
pub_key
public key to preseed the minion with.
Can be the keycontent or a filepath
priv_key
private key to preseed the minion with.
Can be the keycontent or a filepath
path
path to the container parent directory (default: /var/lib/lxc)
.. versionadded:: 2015.8.0
profile
:ref:`profile <tutorial-lxc-profiles-container>` selection
network_profile
:ref:`network profile <tutorial-lxc-profiles-network>` selection
nic_opts
per interface settings compatibles with
network profile (ipv4/ipv6/link/gateway/mac/netmask)
eg::
- {'eth0': {'mac': '00:16:3e:01:29:40',
'gateway': None, (default)
'link': 'br0', (default)
'gateway': None, (default)
'netmask': '', (default)
'ip': '22.1.4.25'}}
unconditional_install
given to lxc.bootstrap (see relative doc)
force_install
given to lxc.bootstrap (see relative doc)
config
any extra argument for the salt minion config
dnsservers
list of DNS servers to set inside the container
dns_via_dhcp
do not set the dns servers, let them be set by the dhcp.
autostart
autostart the container at boot time
password
administrative password for the container
bootstrap_delay
delay before launching bootstrap script at Container init
.. warning::
Legacy but still supported options:
from_container
which container we use as a template
when running lxc.clone
image
which template do we use when we
are using lxc.create. This is the default
mode unless you specify something in from_container
backing
which backing store to use.
Values can be: overlayfs, dir(default), lvm, zfs, brtfs
fstype
When using a blockdevice level backing store,
which filesystem to use on
size
When using a blockdevice level backing store,
which size for the filesystem to use on
snapshot
Use snapshot when cloning the container source
vgname
if using LVM: vgname
lvname
if using LVM: lvname
thinpool:
if using LVM: thinpool
ip
ip for the primary nic
mac
mac address for the primary nic
netmask
netmask for the primary nic (24)
= ``vm_.get('netmask', '24')``
bridge
bridge for the primary nic (lxcbr0)
gateway
network gateway for the container
additional_ips
additional ips which will be wired on the main bridge (br0)
which is connected to internet.
Be aware that you may use manual virtual mac addresses
providen by you provider (online, ovh, etc).
This is a list of mappings {ip: '', mac: '', netmask:''}
Set gateway to None and an interface with a gateway
to escape from another interface that eth0.
eg::
- {'mac': '00:16:3e:01:29:40',
'gateway': None, (default)
'link': 'br0', (default)
'netmask': '', (default)
'ip': '22.1.4.25'}
users
administrative users for the container
default: [root] and [root, ubuntu] on ubuntu
default_nic
name of the first interface, you should
really not override this
CLI Example:
.. code-block:: bash
salt '*' lxc.cloud_init_interface foo
u lxc_profileu profilec @ s � j | � j | | � � S( N( R ( R t default( t profilet vm_( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
_cloud_get� s u nameu u osu Ubuntuu ubuntuu imageu templateu backingu diru vgnameu snapshotu autostartu
dnsserversu dns_via_dhcpu passwordu s3cr3tu password_encryptedu fstypeu lvnameu thinpoolu pub_keyu priv_keyu sizeu 20Gu scriptu script_argsu usersu ssh_usernameu network_profileu nic_optsu netmasku 24u pathu bridgeu gatewayu unconditional_installu
force_installu configu default_nicu ipu macu /{0}u ipv4u additional_ipsu eth{0}i u linku hwaddru memoryi u
clone_fromu cloneu from_containeru
bootstrap_urlu bootstrap_argsu bootstrap_shellu shu bootstrap_delayu cpuu cpusetu cpushareN( u Ubuntu( u macu hwaddr( R t copyt deepcopyR R
t
dictupdatet updateR t
isinstancet dictR t string_typest get_container_profileR2 R t boolt Truet appendRA t DEFAULT_NICt odictt OrderedDictR> R t enumerateR t networkt gen_mact KeyError(5 t nameRD R@ t profile_dataRE t default_templatet imaget backingt vgnamet snapshott autostartt
dnsserverst dns_via_dhcpt passwordt password_encryptedt fstypet lvnamet thinpoolt pub_keyt priv_keyt sizet scriptt script_argst userst ssh_usernamet network_profilet nic_optst netmaskR t bridget gatewayt unconditional_installt
force_installR? t default_nict eth0t bnic_optst gwR$ t mact fullipt ixt ioptst ifht ethxt elinkt aipt nmt iR' t ndatat lxc_init_interfacet
clone_from( ( RC RD s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt cloud_init_interface� s, �
"
c K@ s� t | t � r1 | j d d � } t | | | � S| d k rF i } n= t d d j | | � d d d d �} | d k r� i } n t | t � s� t d j | � � � n t j j
j t j
| � � } t j j j t j
| � | � } | S( Nu nameu
config.getu lxc.{1}:{0}RB t mergeu recurseu lxc.{0} must be a dictionary( RJ RK R R t _get_profileR R R R R
t argst clean_kwargsRF RG RH RI ( R* RX R@ t profilenamet
profile_matcht overrides( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� * s$ c K@ s t d | | � } | S( u�
.. versionadded:: 2015.5.0
Gather a pre-configured set of container configuration parameters. If no
arguments are passed, an empty profile is returned.
Profiles can be defined in the minion or master config files, or in pillar
or grains, and are loaded using :mod:`config.get
<salt.modules.config.get>`. The key under which LXC profiles must be
configured is ``lxc.container_profile.profile_name``. An example container
profile would be as follows:
.. code-block:: yaml
lxc.container_profile:
ubuntu:
template: ubuntu
backing: lvm
vgname: lxc
size: 1G
Parameters set in a profile can be overridden by passing additional
container creation arguments (such as the ones passed to :mod:`lxc.create
<salt.modules.lxc.create>`) to this function.
A profile can be defined either as the name of the profile, or a dictionary
of variable names and values. See the :ref:`LXC Tutorial
<tutorial-lxc-profiles>` for more information on how to use LXC profiles.
CLI Example:
.. code-block:: bash
salt-call lxc.get_container_profile centos
salt-call lxc.get_container_profile ubuntu template=ubuntu backing=overlayfs
u container_profile( R� ( RX R@ RC ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyRM I s %c K@ s t d | | � } | S( uy
.. versionadded:: 2015.5.0
Gather a pre-configured set of network configuration parameters. If no
arguments are passed, the following default profile is returned:
.. code-block:: python
{'eth0': {'link': 'br0', 'type': 'veth', 'flags': 'up'}}
Profiles can be defined in the minion or master config files, or in pillar
or grains, and are loaded using :mod:`config.get
<salt.modules.config.get>`. The key under which LXC profiles must be
configured is ``lxc.network_profile``. An example network profile would be
as follows:
.. code-block:: yaml
lxc.network_profile.centos:
eth0:
link: br0
type: veth
flags: up
To disable networking entirely:
.. code-block:: yaml
lxc.network_profile.centos:
eth0:
disable: true
Parameters set in a profile can be overridden by passing additional
arguments to this function.
A profile can be passed either as the name of the profile, or a
dictionary of variable names and values. See the :ref:`LXC Tutorial
<tutorial-lxc-profiles>` for more information on how to use network
profiles.
.. warning::
The ``ipv4``, ``ipv6``, ``gateway``, and ``link`` (bridge) settings in
network profiles will only work if the container doesn't redefine the
network configuration (for example in
``/etc/sysconfig/network-scripts/ifcfg-<interface_name>`` on
RHEL/CentOS, or ``/etc/network/interfaces`` on Debian/Ubuntu/etc.)
CLI Example:
.. code-block:: bash
salt-call lxc.get_network_profile default
u network_profile( R� ( RX R@ RC ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt get_network_profiler s 8c C@ s� t | � } t d � } | | k r2 d j | � St � } xQ t | � | k r� t j d | d � } | | k r> | j t j | � � q> q> Wd j
t | � � S( u>
Return a random subset of cpus for the cpuset config
u status.nprocu 0-{0}i i u ,( t intR R R+ t lent randomt randintR, R t text_typet joint sorted( t cput availt to_sett choice( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
_rand_cpu_str� s
c ' K@ s� | j d d! � } g } | j d i � } | d! k r? i } n | sN g } n t | � } | si i } n | r� t | t j t f � r� t | � } n i } t | k r� i | t <n t j
| � } | j d d! � } | j d d! � } | r_xn t j | � D]Z \ } }
| j
| i � } y t j j j | |
� } Wq� t k
rWt d � � q� Xq� Wn g | D] } | ^ qf}
|
g | D] } | | k r�| ^ q�7}
|
j � t } x%|
D] } | j | i � }
| r�| j | i � n i } | j | i � } | j d |
j d t � � } | r*q�n | j d | j d |
j d |
j d d � � � � } | j d
|
j d
d � � } | j d |
j d d � � } | j d |
j d d � � } | j d
|
j d
d � � } | j d |
j d d � � } t j j j d i | d 6| d 6| j d � d 6d d 6f d i t d 6| d 6| d 6| d 6f d i | d 6| d 6| j d � d 6d d 6f d i | d 6| d 6| j d � d 6t � d 6f d i | d 6| d 6| j d � d 6t j j j � d 6f d i | d 6| d 6| j d d � d 6d! d 6f d i | d 6| d 6| j d d � d 6d! d 6f g � } xg t | j � � D]S } | | } | d rr| d r�| d | d <q�| d r�| d | d <q�qrqrWxB t j | � D]1 \ } } | d r�| j i | d | 6� q�q�Wxy t j |
� D]h \ } } | d k rE| rE| } n | j | | � } | d" k riq n | j i | d j | � 6� q W| s�|
j d d! � } n | d! k r�| r�| j i | d 6� t } q�q�W| d! k r | r | j i | d 6� t } n t | � } x� g | D] } | ^ q D]� } | | } | j d d � }! | j d d � }" d# \ }# }$ | | k r�| | }% |% j d d � }# |% j d d � }$ n |$ r�|" r�|$ }" n |" s�d }" n |" | | d <|# r/|! r/|# | | d <q/q/Wg } xQ t j | � D]@ } x7 | D]/ }& | j t j j j |& | |& f g � � q$WqWt! t" � � t! d � k r�t g | D] } d | k ^ q�k r�t g | D] } d | k ^ q�k r�| j i d d 6� n | S($ u<
Network configuration defaults
network_profile
as for containers, we can either call this function
either with a network_profile dict or network profile name
in the kwargs
nic_opts
overrides or extra nics in the form {nic_name: {set: tings}
u network_profileu nic_optsu gatewayu bridgeu Invalid nic_opts configurationu disableu macu hwaddru u typeu flagsu linku ipv4u ipv6u lxc.network.typeu testu valueu oldu vethu defaultu lxc.network.nameu lxc.network.flagsu upu lxc.network.linku lxc.network.hwaddru lxc.network.ipv4u lxc.network.ipv6u nameu lxc.network.{0}u lxc.network.ipv4.gatewayu 1.0.7u autoN( u typeu flagsu nameu gatewayu macu linku ipv4u ipv6( u u (# R R t
_get_vethsRJ R RL RK R� RQ RF RG R R1 R> R R
RH RI t AttributeErrorR R6 R RR RS R= RU RV R5 t keysRP R RO t
itervaluesR R (' t conf_tuplesR@ t nict retRo t oldt nicpRr Rq t devR� R~ R' t ifst gateway_sett optst old_ift disableRy t type_t flagst linkt ipv4t ipv6t infost infot bundlet dataR* t valt newt ifaceR� t nmact ntypet omact otypet odatat row( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
_network_conf� s
)
!
1%%c K@ sW t j | � } i } xH d d g D]: } | j | d � } | d k r" | | d j | � <q" q" W| j d � } | d k r� t } n | d k r� | r� d | d <q� d | d <n | j d � } | d k r� | d
d
| d <n | j d � } | r| | d
<n | j d � } | j d � } | r3| | d <n | rS| rSt | � | d
<n | S( Nu utsnameu rootfsu lxc.{0}u autostartu keepu 1u lxc.start.autou 0u memoryi u lxc.cgroup.memory.limit_in_bytesu cpusetu lxc.cgroup.cpuset.cpusu cpushareu cpuu lxc.cgroup.cpu.shares( RF RG R R R RO R� ( R@ R� R R� R_ t memoryt cpusett cpushareR� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _get_lxc_default_datam s4
c K@ s� t | � } | s g } n t j | � } g } | sy t | � } x4 t j | � D] \ } } | j i | | 6� qR Wn t d | | � } | j | � | S( u
Return a list of dicts from the salt level configurations
conf_tuples
_LXCConfig compatible list of entries which can contain
- string line
- tuple (lxc config param,value)
- dict of one entry: {lxc config param: value)
only_net
by default we add to the tuples a reflection of both
the real config if avalaible and a certain amount of
default values like the cpu parameters, the memory
and etc.
On the other hand, we also no matter the case reflect
the network configuration computed from the actual config if
available and given values.
if no_default_loads is set, we will only
reflect the network configuration back to the conf tuples
list
R� ( RN RF RG R� R R1 RP R� t extend( R� t only_netR@ R� t default_dataR R� t net_datas( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _config_list� s
c C@ s� t | t � r$ t | j � � } n t j j j � } t j j j � } t } x)| D]!} | r� t | t � r� t | j � � d } n} t | t j
� r| j � } | j d � sU | r� qU qd | k rt
g | j d d � D] } | j � ^ q� � } qn | d d k r+t j j j � } n | d d k rXt } | | | d j � <n | d j � | | d j � <qU W| r�| r�| | t <n | S( uj
Parse the nic setup inside lxc conf tuples back to a dictionary indexed by
network interface
i u #u =i u lxc.network.typeu lxc.network.name( RJ RK R5 t itemsR R
RR RS RO R RL R0 R t tupleR/ R RQ ( t net_datat nicst current_nict no_namest itemt sitemR' ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s.
7"
t
_LXCConfigc B@ sY e Z d Z e j d � Z e j d � Z d � Z d � Z d � Z d � Z
d � Z RS( u
LXC configuration data
u ^(\S+)(\s*)(=)(\s*)(.*)u ^((#.*)|(\s*))$c @ s3 t j | � } | j d d � � _ t | j d d � � } g � _ � j rTt j j
| � j d � � _ t j j � j � r]t j
j j � j � �� } x� t j
j j | j � � D]� } � j j | j � � } | r� j j | d d | d d f � n � j j | j � � } | r� � j j d | d d f � q� q� WWd QXq]n d � _ � f d � } t | � } x* t j | � D] \ } } | | | � q�W� j d � }
t d |
| � } | r�x- | D]" } � j j t | j � � � q�Wn x0 d
g D]% }
| j |
� s� j |
� qqWd S( Nu nameu pathu configi i����u c @ s0 | r, � j | � � j j | | f � n d S( N( t _filter_dataR� RP ( R* R� ( t self( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _replace� s
u lxc.networkR� u lxc.cgroup.memory.limit_in_bytes( RF RG R R RX R R R� R3 R R� t isfileR R
t filest fopent decodet readlinest patternt findallR0 RP t non_interpretable_patternR� R R1 R� R� R� R5 R� ( R� R@ R t fhrR: t matchR� R� R* R� t old_netR� R� R% ( ( R� s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt __init__� s: ") 1
#c C@ s$ d � | j D� } d j | � d S( Nc s@ s1 | ]' } d j | | d r" d n d � Vq d S( u {0[0]}{1}{0[1]}i u = u N( R ( t .0R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr> s u
( R� R� ( R� t chunks( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt as_string
s c C@ sf | j rb | j � } t j j j | j d � �- } | j t j j j | � � | j � Wd QXn d S( Nu w(
R R� R R
R� R� t writet stringutilst to_strt flush( R� t contentt fic( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� s
c C@ s- t j � } | j | j � � | j � | S( N( t tempfilet NamedTemporaryFileR� R� R� ( R� t ntf( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� s
c C@ s] g } g } xA | j D]6 } | d j | � s? | j | � q | j | � q W| | _ | S( uQ
Removes parameters which match the pattern from the config data
i ( R� R RP ( R� R� t removedt filteredt param( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� s ( t __name__t
__module__t __doc__t ret compileR� R� R� R� R� R� R� ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s ' c
@ s2 t t j | j d � � � � t j | � � d � � f d � } | d � } | d � } | d � } | j d d � } x d D] } | j | d � q W| r�t | � j } t d | � } t j
j | � } t j
j j | t d d � � }
d
j | | |
� } t | d | �s�t | d | d
| d | d | | �| r�t j
j d | | � } t t | d | �d d d i | d 6�q�n | S| r.d j | � } t | d | �s*t | d | d
| d | d | | �| r*t j
j d | | � } t t | d | �d d d i | d 6�q*n | Sd S( u�
If the needed base does not exist, then create it, if it does exist
create nothing and return the name of the base lxc container so
it can be cloned.
u profilec @ s8 � j | t � } � j | | � } | t k r4 | S| S( N( R t _marker( R* RB t kw_overrides_matchR� ( t kw_overridesRC ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt select7 s
u templateu imageu vgnameu pathu
cp.cache_fileu
config.getu hash_typeu __base_{0}_{1}_{2}R t templateR[ R] u /devu configt
out_formatu commentedu
lxc.rootfsu
__base_{0}u N( u pathu imageu vgnameu template( RM RF RG R R R t _urlparset schemeR R3 R t basenameR R
t hashutilst get_hashR R4 t createR� t edit_confR� (
R@ R� R� R[ R] R R� t protot img_tart img_namet hash_RX t rootfs( ( R� RC s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _get_base. sH
c < " @ s(
i � d 6i d 6} t t j � � � � | sA � j d � } n | sP t } n i g d 6} | j d � } | d( k r� g } n d g } x* | D]" } | | k r� | j | � q� q� Wt j | � � d( � � f d � } | d � � t � � } t � d � �}! | d � }" |" r |" n
t d
d � }# | d t
� }$ | d
| � } | d t
� }% | d t
� }& | d � }' t | | � }( | d t
� }) | d � }* |# r.|* r.y |# | d <t d � | � }* Wn: t
t f k
r}+ |+ j | d <| r| | d <n | SX| j d � t k r.t
| d <q.n t � d � �}, t }- t }. |, rUn�|* r�t
}. y. t � |* d � | �| j i d d 6� Wnm t
t f k
r�}+ d |+ j k r�| j i d d 6� q�t | d <|+ j | d <| r�| | d <n | Sn Xt d � d | d | d | d � d | d | d! | d" | d# | �
}/ t |/ j d$ d% �}0 |/ j � t |/ j d$ d% �}1 |0 |1 k rHt
}- qHn�t
}. t d | d | d! | d � d | d | d | d" | d# | � }/ |/ j � �� }2 y4 t � d& |2 j d � | �| j i d' d 6� Wnc t
t f k
r}}+ d |+ j k rV| j i d d 6� q~|+ j | d <| rv| | d <n | Sn XWd( QXt j j | � d) � }3 g }0 t j j |3 � r�t |3 d$ d% �}0 n t d* |0 d+ | d | d | d | d! | d" | d# | � }4 |4 r!t |3 d$ d% d, |4 �n t |3 d$ d% �}1 |0 |1 k rHt
}- n t d � d | d | d | d � d | d | d! | d" | d# | �
}/ g }0 t j j |/ j � r�t |/ j d$ d% �}0 n |/ j � t |/ j d$ d% �}1 |0 |1 k r| j i d- d) 6� t
}- n |- rhy t � d � �Wqht
t f k
rd}+ d. j |+ � | d <| r`| | d <n | SXn |, s�|, r�t � d � �d/ k r�y t � d � �Wq�t
t f k
r�}+ d. j |+ � | d <| r�| | d <n | SXn |. rt! � d0 j t" � d � d1 t d2 t �n | j d t
� r |
r d3 }5 |5 d4 d5 j � � g }6 t# � � f d6 � |6 D� � s xc d7 g D]X }7 |7 | k rwt$ � d8 j |7 � d2 t d � d1 t
d9 t
�d: k rw| j |7 � qwqwWx� | D]� } y+ t% � d; | g d � d< |
d= | �}8 Wq�t
t f k
rl}+ d> j | � |+ j }9 | d k r\|9 | d <t | d <qmt& j' |9 � q�Xq�W| j d t
� r | j i d? d@ 6� t$ � dA j |5 � d � d1 t
d9 t
�d: k r dB | d <| dC d@ c dD | d dE 7<t | d <q q q n | j d t
� r4
|
r4
dF }5 |5 dG dH j � � g }6 t# � � f dI � |6 D� � s4
y t( � d � dJ |
dK | �Wn4 t
t f k
r� }+ dL |+ j | d <t | d <q1
X| j i dM dN 6� t$ � dA j |5 � d1 t
d � d9 t
�d: k r1
dO | d <| dC dN c dD | d dE 7<t | d <q1
q4
n |. r_
t! � d0 j t" � d � d2 t �n dP }5 |5 dQ g }6 t# � � f dR � |6 D� � s3 | j d t
� r�
n�|% s�
|' r3 |% r{ yX t) � d& |( d � dS |) dT | dU | dV |& dW | dX | dY | dZ | d[ | d\ | � }: Wn4 t
t f k
rF }+ d] |+ j | d <t | d <q0 X|: sd d^ | d <t | d <q0 | j i d_ d` 6� q3 |' r3 y* t |' t* � d � �da � |( � }: Wn< t
t f k
r� }+ db j |' |+ j � | d <t | d <q0 X|: s dc j |' � | d <t | d <q0 | j i dd j |' � d` 6� q3 n | j d t
� r� |$ r� y t � d � �Wq� t
t f k
r� }+ d. j |+ � | d <t | d <q� Xn t � d � �}; |! |; k r� | j i i |! de 6|; df 6dg 6� n | j d t
� r
dh j � � | d <t
| d <n | r$
| | d <n | S(i uO
Initialize a new container.
This is a partial idempotent function as if it is already provisioned, we
will reset a bit the lxc configuration file but much of the hard work will
be escaped as markers will prevent re-execution of harmful tasks.
name
Name of the container
image
A tar archive to use as the rootfs for the container. Conflicts with
the ``template`` argument.
cpus
Select a random number of cpu cores and assign it to the cpuset, if the
cpuset option is set then this option will be ignored
cpuset
Explicitly define the cpus this container will be bound to
cpushare
cgroups cpu shares
autostart
autostart container on reboot
memory
cgroups memory limit, in MB
.. versionchanged:: 2015.5.0
If no value is passed, no limit is set. In earlier Salt versions,
not passing this value causes a 1024MB memory limit to be set, and
it was necessary to pass ``memory=0`` to set no limit.
gateway
the ipv4 gateway to use
the default does nothing more than lxcutils does
bridge
the bridge to use
the default does nothing more than lxcutils does
network_profile
Network profile to use for the container
.. versionadded:: 2015.5.0
nic_opts
Extra options for network interfaces, will override
``{"eth0": {"hwaddr": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1", "ipv6": "2001:db8::ff00:42:8329"}}``
or
``{"eth0": {"hwaddr": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1/24", "ipv6": "2001:db8::ff00:42:8329"}}``
users
Users for which the password defined in the ``password`` param should
be set. Can be passed as a comma separated list or a python list.
Defaults to just the ``root`` user.
password
Set the initial password for the users defined in the ``users``
parameter
password_encrypted : False
Set to ``True`` to denote a password hash instead of a plaintext
password
.. versionadded:: 2015.5.0
profile
A LXC profile (defined in config or pillar).
This can be either a real profile mapping or a string
to retrieve it in configuration
start
Start the newly-created container
dnsservers
list of dns servers to set in the container, default [] (no setting)
seed
Seed the container with the minion config. Default: ``True``
install
If salt-minion is not already installed, install it. Default: ``True``
config
Optional config parameters. By default, the id is set to
the name of the container.
master
salt master (default to minion's master)
master_port
salt master port (default to minion's master port)
pub_key
Explicit public key to preseed the minion with (optional).
This can be either a filepath or a string representing the key
priv_key
Explicit private key to preseed the minion with (optional).
This can be either a filepath or a string representing the key
approve_key
If explicit preseeding is not used;
Attempt to request key approval from the master. Default: ``True``
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
clone_from
Original from which to use a clone operation to create the container.
Default: ``None``
bootstrap_delay
Delay in seconds between end of container creation and bootstrapping.
Useful when waiting for container to obtain a DHCP lease.
.. versionadded:: 2015.5.0
bootstrap_url
See lxc.bootstrap
bootstrap_shell
See lxc.bootstrap
bootstrap_args
See lxc.bootstrap
force_install
Force installation even if salt-minion is detected,
this is the way to run vendor bootstrap scripts even
if a salt minion is already present in the container
unconditional_install
Run the script even if the container seems seeded
CLI Example:
.. code-block:: bash
salt 'minion' lxc.init name [cpuset=cgroups_cpuset] \
[cpushare=cgroups_cpushare] [memory=cgroups_memory] \
[nic=nic_profile] [profile=lxc_profile] \
[nic_opts=nic_opts] [start=(True|False)] \
[seed=(True|False)] [install=(True|False)] \
[config=minion_config] [approve_key=(True|False) \
[clone_from=original] [autostart=True] \
[priv_key=/path_or_content] [pub_key=/path_or_content] \
[bridge=lxcbr0] [gateway=10.0.3.1] \
[dnsservers[dns1,dns2]] \
[users=[foo]] [password='secret'] \
[password_encrypted=(True|False)]
u nameu changesu network_profileu initu rootc @ s8 � j | t � } � j | | � } | t k r4 | S| S( N( R R� ( R* RB R� R� ( R� RC ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� 9 s
u pathR u vgnameu
config.getu
lxc.vgnameu startu autostartu seedu installu seed_cmdu approve_keyu
clone_fromRC u commentu snapshotu Container clonedu createu already existsu Container already existsu resultRX Rn Ro Rq Rr R_ R� R� R� R� u commentedR? u Container createdNu configR� R� t
lxc_configu Container configuration updatedu Unable to stop container: {0}u runningu rm -f '{0}'t chroot_fallbackt python_shellu /.lxc.initial_passu /lxc.initial_passu /.lxc.{0}.initial_passc
3@ s? | ]5 } t � d j | � d t d � d t �d k Vq d S( u
test -e "{0}"R R t ignore_retcodei N( t retcodeR RO ( R� R! ( RX R ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr>� s u ubuntuu id {0}R i Rl Rb t encryptedu {0}: Failed to set passwordu Password(s) updatedu passwordu" sh -c 'touch "{0}"; test -e "{0}"'u Failed to set password markeri����u . u .u /.lxc.initial_dnsu /lxc.initial_dnsu /lxc.{0}.initial_dnsc
3@ s? | ]5 } t � d j | � d t d � d t �d k Vq d S( u
test -e "{0}"R R R i N( R R RO ( R� R! ( RX R ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr>� s R` t
searchdomainsu Failed to set DNS: u DNS updatedu dnsu Failed to set DNS markeru /.lxc.initial_seedu /lxc.initial_seedc
3@ s? | ]5 } t � d j | � d � d t d t �d k Vq d S( u test -e {0}R R R i N( R R RO ( R� R! ( RX R ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr>! s t approve_keyRg Rh t installRt Rs t bootstrap_delayt
bootstrap_urlt bootstrap_shellt bootstrap_argsu Bootstrap failed: u5 Bootstrap failed, see minion log for more informationu# Container successfully bootstrappedu bootstrapu rootfsu( Bootstrap via seed_cmd '{0}' failed: {1}uI Bootstrap via seed_cmd '{0}' failed, see minion log for more information u8 Container successfully bootstrapped using seed_cmd '{0}'u oldu newu stateu( Container '{0}' successfully initialized(+ RM RF RG R RQ R RP R t stateR RO RA R R R t strerrorR R4 t cloneR� t read_confR R� R� R� RX R3 R� R� R� t stopR t startt runt SEED_MARKERt anyR t set_passwordR t debugt set_dnst bootstrapR� (< RX R? R� R� R� RC Rn Ro R� R_ Rb Rc Rl R` R Rq Rr Rg Rh Rt Rs R R R R R@ R� t changes_dictt changest duserst userR� t bpatht state_pret tvgR] t start_t seedR
t seed_cmdt salt_configR R� t exct
does_existt to_reboott remove_seed_markert cfgt
old_chunksR� t cfilet cpatht new_cfgt gidt gidst default_usert crett msgt resultt
state_post( ( R� RX R RC s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt inite s �
%
%
c K@ s1 t | | | � } | j d | � } t | | � S( u8
Thin wrapper to lxc.init to be used from the saltcloud lxc driver
name
Name of the container
may be None and then guessed from saltcloud mapping
`vm_`
saltcloud mapping defaults for the vm
CLI Example:
.. code-block:: bash
salt '*' lxc.cloud_init foo
u name( R� R R: ( RX RD R@ t init_interface( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
cloud_initm s c C@ s t d d d t �} d | k r1 t d � � n i } t } x� | j � D]� } y | j � \ } } } } } Wn t k
r� qJ n X| s� | d k rJ t } qJ qJ n | j | g � }
|
j i | d 6| d 6| d 6| d 6� qJ W| d
k rt
| | j | g � f g � S| S( u'
.. versionadded:: 2015.5.0
List the available images for LXC's ``download`` template.
dist : None
Filter results to a single Linux distribution
CLI Examples:
.. code-block:: bash
salt myminion lxc.images
salt myminion lxc.images dist=centos
u cmd.run_stdoutu. lxc-create -n __imgcheck -t download -- --listR u DISTu> Unable to run the 'download' template script. Is it installed?u releaseu archu variantu
build_timeN( R RO R R R. R/ t
ValueErrorR> RP R RK R ( t distt outR� t
passed_headerR: t distrot releaset archt variantt
build_timet dist_list( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt images� s4
c C@ sV y t j d � } Wn t k
r' g SXg | D] } | j d � r/ | d ^ q/ Sd S( u�
.. versionadded:: 2015.5.0
List the available LXC template scripts installed on the minion
CLI Examples:
.. code-block:: bash
salt myminion lxc.templates
u /usr/share/lxc/templatesu lxc-i N( R3 t listdirt OSErrorR ( t template_scriptsR! ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt templates� s
c C@ s% t � | d d k r� t | d | �r� | rl t | | d | d | �} | rl t j d | | | � ql n t | d | �} i t d 6i d d 6| d 6d 6St | d | �rd
} | r� | d j t j
| � � 7} n | d j | � 7} t d
| d t �n t
d j | | d � � � d S( Nu retcodei R Ro uV Network changes from applying network profile '%s' to newly-created container '%s':
%su resultu oldu newu stateu lxc-destroyu -P {0}u -n {0}u cmd.retcodeR u2 Container could not be created with cmd '{0}': {1}u stderr( R# R4 t apply_network_profileR R� R RO R R t pipest quoteR R R ( t cmdR� RX Rn R Ro t network_changest c_state( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _after_ignition_network_profile� s. "
c
@ sJ d4 } d j | � } t t j � � � � t j | � � d5 � � f d � } | d � } t | d | �r� t d j | � � � n | d � }
|
r� |
n
t d
d � } | d � } | d
� }
| r� |
r� t d � � n$ t | |
� f � st d � � n | d � pi } | d � } | r7| r7d } n | d � } | d � } | d � } | d d � } | d � } | d6 k r�d5 } d5 } n | d7 k r�d5 } } } n |
r�t d |
� } t
j j t
j j
t j � d d d! � } | | d" <n | rB| d# j t j | � � 7} t
j j | � sBt
j | � qBn | r^| d$ j | � 7} n | rz| d% j | � 7} n | rw| j � } | d& j | � 7} | d8 k r�| r�| d' j | � 7} q�n | d9 k r-| r�| d( j | � 7} n | r| d) j | � 7} n | r-| d* j | � 7} q-n | d: k rw| rU| d+ j | � 7} n | rt| d, j | � 7} qtqwn | r| d- k r�g | D] } | | k r�| ^ q�} | r�t d. j d/ j | � � � � q�n | d0 7} x6 t j | � D]" \ } } | d1 j | | � 7} q�Wn t d2 | d3 t �} t | | | | | | � S(; u�
Create a new container.
name
Name of the container
config
The config file to use for the container. Defaults to system-wide
config (usually in /etc/lxc/lxc.conf).
profile
Profile to use in container creation (see
:mod:`lxc.get_container_profile
<salt.modules.lxc.get_container_profile>`). Values in a profile will be
overridden by the **Container Creation Arguments** listed below.
network_profile
Network profile to use for container
.. versionadded:: 2015.5.0
**Container Creation Arguments**
template
The template to use. For example, ``ubuntu`` or ``fedora``.
For a full list of available templates, check out
the :mod:`lxc.templates <salt.modules.lxc.templates>` function.
Conflicts with the ``image`` argument.
.. note::
The ``download`` template requires the following three parameters
to be defined in ``options``:
* **dist** - The name of the distribution
* **release** - Release name/version
* **arch** - Architecture of the container
The available images can be listed using the :mod:`lxc.images
<salt.modules.lxc.images>` function.
options
Template-specific options to pass to the lxc-create command. These
correspond to the long options (ones beginning with two dashes) that
the template script accepts. For example:
.. code-block:: bash
options='{"dist": "centos", "release": "6", "arch": "amd64"}'
For available template options, refer to the lxc template scripts
which are ususally located under ``/usr/share/lxc/templates``,
or run ``lxc-create -t <template> -h``.
image
A tar archive to use as the rootfs for the container. Conflicts with
the ``template`` argument.
backing
The type of storage to use. Set to ``lvm`` to use an LVM group.
Defaults to filesystem within /var/lib/lxc.
fstype
Filesystem type to use on LVM logical volume
size : 1G
Size of the volume to create. Only applicable if ``backing=lvm``.
vgname : lxc
Name of the LVM volume group in which to create the volume for this
container. Only applicable if ``backing=lvm``.
lvname
Name of the LVM logical volume in which to create the volume for this
container. Only applicable if ``backing=lvm``.
thinpool
Name of a pool volume that will be used for thin-provisioning this
container. Only applicable if ``backing=lvm``.
nic_opts
give extra opts overriding network profile values
path
parent path for the container creation (default: /var/lib/lxc)
zfsroot
Name of the ZFS root in which to create the volume for this container.
Only applicable if ``backing=zfs``. (default: tank/lxc)
.. versionadded:: 2015.8.0
u distu releaseu archu lxc-create -n {0}c @ s8 � j | d � } � j | | � } | d k r4 | S| S( N( R R ( R* RB R� R� ( R� RC ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� Y s
u pathR u Container '{0}' already existsu vgnameu
config.getu
lxc.vgnameu templateu imageu/ Only one of 'template' and 'image' is permittedu> At least one of 'template', 'image', and 'profile' is requiredu optionsu backingu lvmu lvnameu thinpoolu fstypeu sizeu 1Gu zfsrootu diru overlayfsu btrfsu zfsu aufsu
cp.cache_fileu templatesu lxcu salt_tarballu imgtaru -P {0}u -f {0}u -t {0}u -B {0}u --zfsroot {0}u
--lvname {0}u
--vgname {0}u --thinpool {0}u
--fstype {0}u
--fssize {0}u downloadu% Missing params in 'options' dict: {0}u , u --u
--{0} {1}u cmd.run_allR ( u distu releaseu archN( u diru overlayfsu btrfsu zfs( u aufsu diru overlayfsu btrfs( u zfs( u lvm( u diru overlayfs( R RM RF RG R R4 R R R R R3 R R� t dirnameR t __file__RM RN t makedirst lowerR R1 R RR ( RX R? RC Rn Ro R@ t download_template_depsRO R� R R% R] R� R[ t optionsR\ Re Rf Rd Ri t zfsrootR R! t missing_depsR* R� R� ( ( R� RC s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s� d
c
@ s: t t j � � � � t j | � � d � � f d � } | d � } t | d | �ro t d j | � � � n t | d | �t | d | �d k r� t d j | � � � n | d � } | d � } | d k r� t } n | s� d
} n d } | d d
� }
| d k rd }
n t
t � � t
d � k rRd } | d j | | | � 7} n d } | d j | | | � 7} | r�| d j t j
| � � 7} t j j | � s�t j | � q�n | r | j � } | d j | � 7} | d k r |
r| d j |
� 7} qq n t d | d t �} t | | | | | | � S( u�
Create a new container as a clone of another container
name
Name of the container
orig
Name of the original container to be cloned
profile
Profile to use in container cloning (see
:mod:`lxc.get_container_profile
<salt.modules.lxc.get_container_profile>`). Values in a profile will be
overridden by the **Container Cloning Arguments** listed below.
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
**Container Cloning Arguments**
snapshot
Use Copy On Write snapshots (LVM)
size : 1G
Size of the volume to create. Only applicable if ``backing=lvm``.
backing
The type of storage to use. Set to ``lvm`` to use an LVM group.
Defaults to filesystem within /var/lib/lxc.
network_profile
Network profile to use for container
.. versionadded:: 2015.8.0
nic_opts
give extra opts overriding network profile values
.. versionadded:: 2015.8.0
CLI Examples:
.. code-block:: bash
salt '*' lxc.clone myclone orig=orig_container
salt '*' lxc.clone myclone orig=orig_container snapshot=True
c @ s8 � j | d � } � j | | � } | d k r4 | S| S( N( R R ( R* RB R� R� ( R� RC ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s
u pathR u Container '{0}' already existsu stoppedu, Container '{0}' must be stopped to be clonedu backingu snapshotu diru u -su sizeu 1Gu overlayfsu btrfsu 2.0u lxc-copyu {0} -n {1} -N {2}u lxc-cloneu {0} -o {1} -n {2}u -P {0}u -B {0}u -L {0}u cmd.run_allR N( u dir( u diru overlayfsu btrfs( u diru overlayfs( RM RF RG R R4 R R t _ensure_existsR R R R RM RN R3 R RU RV R RR (
RX t origRC Rn Ro R@ R� R R\ R^ Ri RO R� ( ( R� RC s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR � sV 9 c C@ s� d j | � } | r" | d 7} n | r< | t k r< t | Sg } d } | rm | d j t j | � � 7} n | r� | d 7} n t d | d t �} x' | j � D] } | j | j � � q� W| t | <| Sd S( u�
Return a list of the containers available on the minion
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
active
If ``True``, return only active (i.e. running) containers
.. versionadded:: 2015.5.0
CLI Example:
.. code-block:: bash
salt '*' lxc.ls
salt '*' lxc.ls active=True
u lxc.ls{0}u .activeu lxc-lsu -P {0}u --activeu cmd.run_stdoutR N( R R RM RN R R R. R� R/ ( t activet cacheR t
contextvarR� RO R9 R: ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt ls_= s
c C@ s t d | � } | r* i } i } i } n g } g } g } i | d 6| d 6| d 6} x�| D]�} d } | r� | d j t j | � � 7} n | d j | � 7} t d | d t d
d �}
d } xG |
j � D]9 } | j d � }
|
d
d k r� |
d j � } Pq� q� W| s^ | d k r9| j
� | k r9q^ n | rgt | d | �} d } i | | 6} n d } | } | d k r�t | | � | � q^ n | d k r�t | | � | � q^ n | d k r^ t | | � | � q^ q^ q^ W| d k r| j
| | ri n g � S| S( u�
List containers classified by state
extra
Also get per-container specific info. This will change the return data.
Instead of returning a list of containers, a dictionary of containers
and each container's output from :mod:`lxc.info
<salt.modules.lxc.info>`.
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
limit
Return output matching a specific state (**frozen**, **running**, or
**stopped**).
.. versionadded:: 2015.5.0
CLI Examples:
.. code-block:: bash
salt '*' lxc.list
salt '*' lxc.list extra=True
salt '*' lxc.list limit=running
R u runningu stoppedu frozenu lxc-infou -P {0}u -n {0}u cmd.runR t output_loglevelu debugu :i u Stateu statei u updateu appendu STOPPEDu FROZENu RUNNINGN( u Stateu state( R` R RM RN R R R R. R/ R0 RV R� t getattrR ( t extrat limitR t ctnrst stoppedt frozent runningR� t containerRO t c_infoRQ R: t statR� t methodt value( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt list_f s\
%
c C@ sm t | d | �} | | k rQ i t d 6i | d 6| d 6d 6d j | | � d 6S| d k r� d }
| r� |
d
j t j | � � 7}
n |
d j | � 7}
t d |
d
t �n | r� d | k r� | d
j t j | � � 7} n | d j | � 7} i t d 6t d 6| d 6| d 6| d 6| d 6} xJ g | D] } | ^ q0D]/ }
| |
} | t k r@| j |
d � q@q@Wt d | | � } | d d k r�t
d j | | | d � � � n | d k r(d } | r�| d
j t j | � � 7} n | d j | | j � � 7} t d | d
t d d �n t � t | d | �} i | | k d 6i | d 6| d 6d 6} | S( NR u resultu oldu newu stateu Container '{0}' already {1}u commentu lxc-destroyu lxc-stopu -P {0}u
-k -n {0}u cmd.runR u -P u -n {0}u python_shellu redirect_stderru with_communicateu use_vtu stdinu stdoutu cmd.run_allu retcodei uA Error changing state for container '{0}' using command '{1}': {2}u lxc-waitu -n {0} -s {1}t timeouti (
R RO R RM RN R R R� R R R t upperR# ( RO RX t expectedt stdint stdoutt stderrt with_communicatet use_vtR t pret scmdt pkwargsR' R� R� t _cmdoutt rcmdt postR� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
_change_state� sT
c C@ s. t | d | �s* t d j | � � � n d S( u<
Raise an exception if the container does not exist
R u Container '{0}' does not existN( R4 R R ( RX R ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR[ � s c C@ s� t | d | �t | d | �} | d k r> t | d | �S| d k rx | rh t d j | � � � n t | d | �S| d k r� | r� t d j | � � � n t | d | �Sd S( u
If the container is not currently running, start it. This function returns
the state that the container was in before changing
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
R u runningu stoppedu Container '{0}' is not runningu frozenN( R[ R R R R t unfreeze( RX t no_startR Rw ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _ensure_running s c C@ s� t | d | �t | d | �} | d k rG t | d | d | �n t | d | d | �} | | d d <| d k r� t | d <n | S( u�
.. versionadded:: 2015.5.0
Restart the named container. If the container was not running, the
container will merely be started.
name
The name of the container
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
lxc_config
path to a lxc config file
config file will be guessed from container name otherwise
.. versionadded:: 2015.8.0
force : False
If ``True``, the container will be force-stopped instead of gracefully
shut down
CLI Example:
.. code-block:: bash
salt myminion lxc.restart name
R u stoppedt killR u stateu oldu restarted( R[ R R R RO ( RX R R t forcet
orig_stateR� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt restart' s
c K@ s* | j d d � } t | � } | j d d � } d } | sW t j j | | d � } n t j j | � r� | d j t j | � � 7} n | d 7} t
| d | �t | d | �d k r� t d j | � � � n | j d
d � } | j d t
� } t | | d d
d d d d d d | d | d | �S( u�
Start the named container
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
lxc_config
path to a lxc config file
config file will be guessed from container name otherwise
.. versionadded:: 2015.8.0
use_vt
run the command through VT
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.start name
u pathu
lxc_configu lxc-startu configu -f {0}u -dR u frozenu+ Container '{0}' is frozen, use lxc.unfreezeu use_vtu with_communicateu runningRs Rt Rr Ru Rv N( R R R R3 R R� R4 R RM RN R[ R R R R} ( RX R@ R R1 R RO Rv Ru ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR R s,
c C@ s� t | d | �t | d | �} | d k rH | rH t | d | �n d } | ra | d 7} n t | | d d | d | �} | | d d <| S( ua
Stop the named container
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
kill: False
Do not wait for the container to stop, kill all tasks in the container.
Older LXC versions will stop containers like this irrespective of this
argument.
.. versionchanged:: 2015.5.0
Default value changed to ``False``
use_vt
run the command through VT
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.stop name
R u frozenu lxc-stopu -ku stoppedRv u stateu old( R[ R R~ R} ( RX R� R Rv R� RO R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR � s
c K@ s) | j d d � } | j d d � } t | d | �t | d | �} | j d t � } | d k r� | s� t d j | � � � n t | d | �n d } | r� | d j t j | � � 7} n t
| | d d
| d | �} | d k r | r | | d d <t | d
<n t | d | �| d d <| S( u�
Freeze the named container
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
start : False
If ``True`` and the container is stopped, the container will be started
before attempting to freeze.
.. versionadded:: 2015.5.0
use_vt
run the command through VT
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.freeze name
u use_vtu pathR u startu stoppedu Container '{0}' is stoppedu
lxc-freezeu -P {0}u frozenRv u stateu oldu startedu newN( R R R[ R R R R R RM RN R} RO ( RX R@ Rv R R� R& RO R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt freeze� s&
c C@ s� t | d | �t | d | �d k r@ t d j | � � � n d } | rk | d j t j | � � 7} n t | | d d | d | �S( uN
Unfreeze the named container.
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
use_vt
run the command through VT
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.unfreeze name
R u stoppedu Container '{0}' is stoppedu lxc-unfreezeu -P {0}u runningRv ( R[ R R R RM RN R} ( RX R Rv RO ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR~ � s c C@ s] t | d | �| rG t | d | �d k rG t d j | � � � n t d | d d | �S( u
Destroy the named container.
.. warning::
Destroys all data associated with the container.
path
path to the container parent directory (default: /var/lib/lxc)
.. versionadded:: 2015.8.0
stop : False
If ``True``, the container will be destroyed even if it is
running/frozen.
.. versionchanged:: 2015.5.0
Default value changed to ``False``. This more closely matches the
behavior of ``lxc-destroy(1)``, and also makes it less likely that
an accidental command will destroy a running container that was
being used for important things.
CLI Examples:
.. code-block:: bash
salt '*' lxc.destroy foo
salt '*' lxc.destroy foo stop=True
R u stoppedu Container '{0}' is not stoppedu lxc-destroyN( R[ R R R R} R ( RX R R ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt destroy
s
u removec C@ s= | t d | � k } | s9 | t d t d | � k } n | S( u�
Returns whether the named container exists.
path
path to the container parent directory (default: /var/lib/lxc)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.exists name
R R^ ( R` R ( RX R t _exists( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR4 /
s c C@ sL d j | | � } y t | SWn#t k
rCt | d | �sM d t | <qDd } | rx | d j t j | � � 7} n | d j | � 7} t d | d t �} | d d k r� t � t
d
j | � � � n | d j � } d } xM | D]E } | j d � } | d j
� d
k r� | d j � j
� } Pq� q� W| t | <n Xt | S( u�
Returns the state of a container.
path
path to the container parent directory (default: /var/lib/lxc)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.state name
u lxc.state.{0}{1}R u lxc-infou -P {0}u -n {0}u cmd.run_allR u retcodei u& Unable to get state of container '{0}'u stdoutu :u statei N( R R RW R4 R RM RN R R R# R R. R/ RV R0 ( RX R t cachekeyRO R� t c_infosRQ Rj Rk ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR H
s0
c C@ s� t | d | �d } | r; | d j t j | � � 7} n | d j | | � 7} t d | d t �} | d d k r� t d j | � � � n | d
j � S( u:
Returns the value of a cgroup parameter for a container
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.get_parameter container_name memory.limit_in_bytes
R u
lxc-cgroupu -P {0}u -n {0} {1}u cmd.run_allR u retcodei u" Unable to retrieve value for '{0}'u stdout( R[ R RM RN R R R R0 ( RX t parameterR RO R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
get_parameteru
s c C@ s� t | d | �s d Sd } | rA | d j t j | � � 7} n | d j | | | � 7} t d | d t �} | d d k r� t St Sd S(
u'
Set the value of a cgroup parameter for a container.
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.set_parameter name parameter value
R u
lxc-cgroupu -P {0}u -n {0} {1} {2}u cmd.run_allR u retcodei N( R4 R R RM RN R R RO ( RX R� Rm R RO R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
set_parameter�
s c C@ sJ d j | | � } y t | SWn!t k
rAt | d | �t | � } y t j j | | d � } Wn2 t k
r� t j j | t j
| � d � } n Xt j j | � s� t d j | � � � n i } g } t
j j j | � �� } x� | D]� } t
j j j | � } g | j d d � d j � j d d � D] } | j � ^ q4}
t |
� d k r� | j t |
� � q� q� WWd
QXg } d
} xt | D]l \ }
} |
d k r�i | d 6} | j | � q�| s�q�q�|
j d
� r�| | |
j d
d d � <q�q�W| r| | d <n t d � | D� d
� | d <t | d | �| d <g | d <g | d <g | d <g | d <g | d <g | d <g | d <g | d <g | d <d
| d <| | d <| d d k r�y t t | d � � } Wn t t t f k
r d } n Xy t t | d � � } Wn t t t f k
r<d } n X| | } | | d <| | d! <t! | d" d | d# t" �} | j# � d$ j � d | d <t$ | d% d | d# t" �} | d& d k r| d' } t$ | d( d | d# t" �} | d) | d' 7} t
j j% j& | � } n] t$ | d* d | d# t" �} | d& d k rUt
j j% j' | d' � } n t( j) d+ | � i } t
j j% j* d, t+ d- | � | d <t
j j% j, d, t+ d- | � | d <| d | d | d <x� | d D]� } | d. k r| d j | � | d j | � q�t
j j- j. | � rA| d j | � | d j | � q�| d j | � | d j | � q�Wxw | d D]h } | d/ k s�| j d0 � r�| d j | � | d j | � qr| d j | � | d j | � qrWn xP g | D]' } | d k s | j/ d � r�| ^ q�D] }
| |
j0 d1 t1 � qW| t | <n Xt | S(2 u�
Returns information about a container
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.info name
u lxc.info.{0}{1}R u configu" LXC config file {0} does not existu #i i u =i Nu lxc.network.typeu typeu lxc.network.u u nicsc s@ s) | ] } | d d k r | d Vq d S( i u
lxc.rootfsi N( ( R� R! ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr>�
s u rootfsu stateu ipsu
public_ipsu private_ipsu public_ipv4_ipsu public_ipv6_ipsu private_ipv4_ipsu private_ipv6_ipsu ipv4_ipsu ipv6_ipsu sizeu runningu memory.limit_in_bytesu memory.usage_in_bytesu memory_limitu memory_freeu df /R i����u ip link showu retcodeu stdoutu ip addr showu
u ifconfigu. Unable to run ip or ifconfig in container '%s't include_loopbackt interface_datau 127.0.0.1u ::1u fe80R* (2 R R RW R[ R R3 R R� R� R R� R� R R R
R� R� R� t
to_unicodeR/ R0 R� RP R� R R t replacet nextR R� R� t TypeErrorR= t
run_stdoutR R. t run_allRU t _interfaces_ipt _interfaces_ifconfigR t warningt ip_addrsRO t ip_addrs6t cloudt is_public_ipt endswithR6 R& ( RX R R� R1 t conf_fileR� R? t fp_R: R! t compst ifacest currentR* R� Rd t usaget freeRi t ip_cmdt ip_datat address( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� �
s�
%
>
;c C@ s d � } t | t � sI y | j d � } WqI t k
rE | � qI Xn | sY | � n g } x{ | D]s } t | d j | r� d n d � d d j | | f � d t d | d
t d d �} | d
k rf | j | � qf qf W| rt
d j d j | � � � � n t S( u
.. versionchanged:: 2015.5.0
Function renamed from ``set_pass`` to ``set_password``. Additionally,
this function now supports (and defaults to using) a password hash
instead of a plaintext password.
Set the password of one or more system users inside containers
users
Comma-separated list (or python list) of users to change password
password
Password to set for the specified user(s)
encrypted : True
If true, ``password`` must be a password hash. Set to ``False`` to set
a plaintext password (not recommended).
.. versionadded:: 2015.5.0
path
path to the container parent directory
default: /var/lib/lxc (system)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.set_pass container-name root '$6$uJ2uAyLU$KoI67t8As/0fXtJOPcHKGXmUpcoYUcVR2K6x93walnShTCQvjRwq25yIkiCBOqgbfdKQSFnAo28/ek6716vEV1'
salt '*' lxc.set_pass container-name root foo encrypted=False
c S@ s t d � � d S( Nu# Invalid input for 'users' parameter( R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _bad_user_inputf s u ,u chpasswd{0}u -eu Rr u :R R R Ra u quieti u5 Password change failed for the following user(s): {0}u , ( RJ R5 R/ R� R R R� R RO RP R ( RX Rl Rb R
R R� t failed_usersR" R8 ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR B s0 $
u set_passc @ s� t | d | �t | � } t j j | | d � } t j j | � s^ t d j | � � � n i g d 6g d 6g d 6� i � d 6t d 6d d
6} t j
j j | d � ��} g } xN | D]F } | s� q� n x1 | D]) }
| j
|
j � | |
j � f � q� Wq� Wd | d
<g } t j
j j | j � � } x� | j � D]� }
|
j d
� s`|
j � rv| j
|
d g � q>|
j d � }
|
j d � } | j � d j |
� j � f } | | k r>| j
| � q>q>Wx | D]� \ } } t } x� t | � D]� \ } }
|
d | k r�t } | | f | | <d j |
d � j � | j � k r�� d j
i |
d |
d 6i | | 6f � Pq�q�q�W| s�| | f | k r�| j
| | f � n � d j
i | | 6� q�q�Wg } | rJxi | D]X }
xO | D]G } |
d j | � r.|
| k r.| j
|
� q�� d j
| � q�Wq�Wn | } d }
xR | D]J \ } } | s�|
d j | � 7}
q]|
d j | j � | j � � 7}
q]W|
| k } t j j � j d � } | rrt j
j j d j | | � d � �# } | j t j
j j |
� � Wd QXt j
j j | d � �# } | j t j
j j |
� � Wd QXd | d
<t | d <n Wd QXt � f d � � D� � s�i | d <n | S( uz
Edit LXC configuration options
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.update_lxc_conf ubuntu \
lxc_conf="[{'network.ipv4.ip':'10.0.3.5'}]" \
lxc_conf_unset="['lxc.utsname']"
R u configu% Configuration file {0} does not existu editedu addedu removedu changesu resultu u commentu ru lxc.conf is up to dateu #u =i i u {0}
u
{0} = {1}
u %Y-%m-%d_%H-%M-%Su {0}.{1}u wNu Updatedc 3@ s | ] } � | Vq d S( N( ( R� R! ( R ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr>� s ( R[ R R3 R R� R4 R R RO R R
R� R� RP R0 R� R� t readR. R R/ R R RT t datetimet nowt strftimeR� R� R ( RX t lxc_conft lxc_conf_unsetR R1 t
lxc_conf_pR� R� t filtered_lxc_confR� t conft linest orig_configR: t indexR� R* R� t matchedR% t
dest_lxc_conft optt conf_changedt chronot wfic( ( R s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt update_lxc_conf� s�
! %
#
& '""
c C@ sL | d" k r d d g } nE t | t � s` y | j d � } Wq` t k
r\ t d � � q` Xn | d" k ru g } nE t | t � s� y | j d � } Wq� t k
r� t d � � q� Xn g | D] } d j | � ^ q� } | j g | D] } d j | � ^ q� � d j | � d } t d � } d
j | � } d j d d d
d d d d | d d d d d | d d g � } t
| d j | � d | d | d t �} | d d k r�t
| d j | � d | d t �} n t
| d j | � d | d t �| d d k rHd j | � }
| d r9|
d! j | d � 7}
n t |
� � n t S(# u�
.. versionchanged:: 2015.5.0
The ``dnsservers`` and ``searchdomains`` parameters can now be passed
as a comma-separated list.
Update /etc/resolv.confo
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.set_dns ubuntu "['8.8.8.8', '4.4.4.4']"
u 8.8.8.8u 4.4.4.4u ,u( Invalid input for 'dnsservers' parameteru+ Invalid input for 'searchdomains' parameteru nameserver {0}u
search {0}u
u test.random_hashu /sbin/{0}_dns.shu #!/usr/bin/env bashu if [ -h /etc/resolv.conf ];thenuO if [ "x$(readlink /etc/resolv.conf)" = "x../run/resolvconf/resolv.conf" ];thenu# if [ ! -d /run/resolvconf/ ];thenu mkdir -p /run/resolvconfu fiu0 cat > /etc/resolvconf/resolv.conf.d/head <<EOFu EOFu u fiu fiu cat > /etc/resolv.conf <<EOFu tee {0}R Rr R u retcodei u sh -c "chmod +x {0};{0}"u+ sh -c 'if [ -f "{0}" ];then rm -f "{0}";fi'u6 Unable to write to /etc/resolv.conf in container '{0}'u stderru : {0}N(
R RJ R5 R/ R� R R R� R� R R� RO R ( RX R` R R R! t dnst rstrRj t
DNS_SCRIPTR8 t error( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR � sn
")
c
C@ ss d j | | � } t j | d � } | d k s7 | rot d � } d j | � } t j d � } t | d j | � d | d | d t �} | d d
k r� t | d j | � d | d t �} n t d j | � � � t | d
j | � d | d t d t �| d d
k rFd j | � } | d rF| d j | d � 7} qFn | d d k ro| d t | <} qon | S( u�
Determine if systemD is running
path
path to the container parent
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt '*' lxc.running_systemd ubuntu
u lxc.systemd.test.{0}{1}u test.random_hashu /sbin/{0}_testsystemd.shu) #!/usr/bin/env bash
set -x
if ! command -v systemctl 1>/dev/null 2>/dev/null;then exit 2;fi
for i in \
/run/systemd/journal/dev-log\
/run/systemd/journal/flushed\
/run/systemd/journal/kernel-seqnum\
/run/systemd/journal/socket\
/run/systemd/journal/stdout\
/var/run/systemd/journal/dev-log\
/var/run/systemd/journal/flushed\
/var/run/systemd/journal/kernel-seqnum\
/var/run/systemd/journal/socket\
/var/run/systemd/journal/stdout\
;do\
if test -e ${i};then exit 0;fi
done
if test -d /var/systemd/system;then exit 0;fi
exit 2
u tee {0}R Rr R u retcodei u sh -c "chmod +x {0};{0}"u# lxc {0} failed to copy initd testeru+ sh -c 'if [ -f "{0}" ];then rm -f "{0}";fi'R uT Unable to determine if the container '{0}' was running systemd, assmuming it is not.u stderru : {0}i N( i i (
R R R R R t textwrapt dedentR� RO R (
RX R^ R R R� R� Rj t _scriptR8 R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt running_systemdN s>
c C@ sA y# t | d d | d t �d } Wn t k
r< d } n X| S( u'
Get the operational state of a systemd based container
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.systemd_running_state ubuntu
u systemctl is-system-runningR R u stdoutu ( R� RO R ( RX R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt systemd_running_state� s
c C@ s: t | d | �} | d k r" t S| d k r2 d St Sd S( u
Test if a systemd container is fully started
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.test_sd_started_state ubuntu
R u initializingu startingu N( u initializingu starting( R� R R RO ( RX R t qstate( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt test_sd_started_state� s c C@ sJ y) t | d d | d t �d d k } Wn t f k
rE d } n X| S( ui
Test if a non systemd container is fully started
For now, it consists only to test if the container is attachable
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.test_bare_started_state ubuntu
u lsR R u retcodei N( R� RO R R ( RX R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt test_bare_started_state� s
i, c C@ s2 t | d | �s* t d j | � � � n t | d | �d k sZ t d j | � � � n t } t | d | �r� t } t j } n t } t j
} t j � } | | } t j � } | | d | �} x< t j � | k r| rt j d � | | d | �} q� W| d k r(| d | � t } n | } | S( u�
Check that the system has fully inited
This is actually very important for systemD based containers
see https://github.com/saltstack/salt/issues/23847
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion lxc.wait_started ubuntu
R u Container {0} does does existsu runningu Container {0} is not runningg333333�?uT Assuming %s is started, although we failed to detect that is fully started correctlyN( R4 R R R R R� R� R R� R� R t timet sleepR RO ( RX R Ro R� t test_startedt loggerR� t expiret started( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt wait_started� s4
c C@ sk d } t | d d | d t �} | ra t | d d | �} d | k rQ d } qg t | d � n d } | S( Ni u which salt-minionR R u ps auxu salt-minioni u* salt-call --local service.stop salt-minion( R RO R� ( RX R R� t
has_miniont processes( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _needs_install"
s c
C@ s� t | d | �|
d0 k rd y$ t j d | |
� t j |
� Wqd t k
r` t j d � qd Xn t | d | �}
|
s� d0 S| r� d | k r� | d 7} q� n d } | s� d } n t | d | �} | s� | S| s� t | d | �} n t } t
| d j t � d | d t d
t �d k } t
j � } | rF| rFt } nIt } t d | d
| d | d | d | d | �} | s�| s�| rn| ret d � } d j | � } d j | � } t | | d | d t �d d k r�t j d | | � t St d d | � } d j | � } t | | | d | �t | d j | � d | d t �} t | | d t j j | d � d | �t | | d t j j | d � d | �t | | d t j j | d! � d | �| j | � } d" j | | j d# d$ � | � } t j d% | | � t
| | d& d' d | d( t �d k } t | d) j | � d | d
t d t �qt } n� t j j | d � } | d* } t | | d d+ d | �t | | d t j j | d � d | �t | | d t j j | d! � d | �t | d, d | d t �t } t j | � | d- k rEt | d | �n | d. k rdt | d | �n | r�t | d/ j t � d | d t �n | S(1 u
Install and configure salt in a container.
config
Minion configuration options. By default, the ``master`` option is set
to the target host's master.
approve_key
Request a pre-approval of the generated minion key. Requires
that the salt-master be configured to either auto-accept all keys or
expect a signing request from the target host. Default: ``True``
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
pub_key
Explicit public key to pressed the minion with (optional).
This can be either a filepath or a string representing the key
priv_key
Explicit private key to pressed the minion with (optional).
This can be either a filepath or a string representing the key
bootstrap_delay
Delay in seconds between end of container creation and bootstrapping.
Useful when waiting for container to obtain a DHCP lease.
.. versionadded:: 2015.5.0
bootstrap_url
url, content or filepath to the salt bootstrap script
bootstrap_args
salt bootstrap script arguments
bootstrap_shell
shell to execute the script into
install
Whether to attempt a full installation of salt-minion if needed.
force_install
Force installation even if salt-minion is detected,
this is the way to run vendor bootstrap scripts even
if a salt minion is already present in the container
unconditional_install
Run the script even if the container seems seeded
CLI Examples:
.. code-block:: bash
salt 'minion' lxc.bootstrap container_name [config=config_data] \
[approve_key=(True|False)] [install=(True|False)]
R u LXC %s: bootstrap_delay: %si u {0}u -c {0}u -c {0}u shu
test -e '{0}'R R i u
seed.mkconfigt tmpt id_R Rg Rh u test.random_hashu /var/tmp/.c_{0}u install -m 0700 -d {0}R u retcodeu tmpdir %s creation failed %su config.gather_bootstrap_scriptR u /sbin/{0}_bootstrap.shu sh -c "chmod +x {0}"u configu minionu privkeyu
minion.pemu pubkeyu
minion.pubu {0} {2} {1}u 'u ''u Running %s in LXC container '%s'Ra u infoRv u+ sh -c 'if [ -f "{0}" ];then rm -f "{0}";fi'u pki_diru /etc/salt/minionu, salt-call --local service.enable salt-minionu stoppedu frozenu touch '{0}'N( R� R R R� R� R� R� R� R� RO R R R R� t mkdtempR R R� R� t copy_toR3 R R� R� R R? t
minion_configR t shutilt rmtreeR R� ( RX R? R R
Rg Rh R Rt Rs R R R R Rj R� t
needs_installt seededR� R� t cfg_filesR� t configdirRO t bs_Rj R8 R� t pki_dir( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR 7
s� I
c C@ s� d j | | � } y t | SWn� t k
r� t | d | �t j d | � d } | ry | d j t j | � � 7} n | d j | � 7} t d | d t d d
d t
�d k } | t | <n Xt | S(
u9
Return True if the named container can be attached to via the lxc-attach
command
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt 'minion' lxc.attachable ubuntu
u lxc.attachable{0}{1}R u* Checking if LXC container %s is attachableu
lxc-attachu -P {0}u# --clear-env -n {0} -- /usr/bin/envu cmd.retcodeR Ra u quietR i ( R R RW R[ R R RM RN R R RO ( RX R R� RO R8 ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
attachable s
u debugu http_proxy,https_proxy,no_proxyc
C@ s� t | d | �}
z� y� t | d | �r� t d | | d | d t d t d | d | d | d | d | d
|
d | d | � } nr | s� t d
j | � � � n t | d | �j d � } t d t d <t d | | d | d | d | d
|
�} Wn t
k
r � n XWd t | d | �} | r�|
d k rS| d k rSt | d | �q�|
d k r�| d k r�t | d t
d | �q�n X| d k r�| S| | Sd S( u�
Common logic for lxc.run functions
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
R u container_resource.runt container_typet exec_driverR9 R Rr R Ra R Rv t keep_envu {0} is not attachable.u rootfsu cmd.runu cmd.run_chroot.funcu cmd.run_chrootNu stoppedu frozenR u all( Nu all( R R� R R
t EXEC_DRIVERR R R� R R t ExceptionR R� RO R ( RX RO R9 R t preserve_stateRr R Ra Rv R R R R� R� R� R t new_state( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _run' sP
c C@ sO t | | d | d d d | d | d | d | d | d | d | d
|
d | � S(
u�
.. versionadded:: 2015.8.0
Run :mod:`cmd.run <salt.modules.cmdmod.run>` within a container
.. warning::
Many shell builtins do not work, failing with stderr similar to the
following:
.. code-block:: bash
lxc_container: No such file or directory - failed to exec 'command'
The same error will be displayed in stderr if the command being run
does not exist. If no output is returned using this function, try using
:mod:`lxc.run_stderr <salt.modules.lxc.run_stderr>` or
:mod:`lxc.run_all <salt.modules.lxc.run_all>`.
name
Name of the container in which to run the command
cmd
Command to run
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
no_start : False
If the container is not running, don't start it
preserve_state : True
After running the command, return the container to its previous state
stdin : None
Standard input to be used for the command
output_loglevel : debug
Level at which to log the output from the command. Set to ``quiet`` to
suppress logging.
use_vt : False
Use SaltStack's utils.vt to stream output to console. Assumes
``output=all``.
chroot_fallback
if the container is not running, try to run the command using chroot
default: false
keep_env : http_proxy,https_proxy,no_proxy
A list of env vars to preserve. May be passed as commma-delimited list.
CLI Example:
.. code-block:: bash
salt myminion lxc.run mycontainer 'ifconfig -a'
R R9 R R� Rr R Ra Rv R R R� N( R� R ( RX RO R R� Rr R Ra Rv R R R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR n s Jc C@ sO t | | d | d d d | d | d | d | d | d | d
| d |
d | � S(
u�
.. versionadded:: 2015.5.0
Run :mod:`cmd.run_stdout <salt.modules.cmdmod.run_stdout>` within a container
.. warning::
Many shell builtins do not work, failing with stderr similar to the
following:
.. code-block:: bash
lxc_container: No such file or directory - failed to exec 'command'
The same error will be displayed in stderr if the command being run
does not exist. If no output is returned using this function, try using
:mod:`lxc.run_stderr <salt.modules.lxc.run_stderr>` or
:mod:`lxc.run_all <salt.modules.lxc.run_all>`.
name
Name of the container in which to run the command
cmd
Command to run
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
no_start : False
If the container is not running, don't start it
preserve_state : True
After running the command, return the container to its previous state
stdin : None
Standard input to be used for the command
output_loglevel : debug
Level at which to log the output from the command. Set to ``quiet`` to
suppress logging.
use_vt : False
Use SaltStack's utils.vt to stream output to console
``output=all``.
keep_env : http_proxy,https_proxy,no_proxy
A list of env vars to preserve. May be passed as commma-delimited list.
chroot_fallback
if the container is not running, try to run the command using chroot
default: false
CLI Example:
.. code-block:: bash
salt myminion lxc.run_stdout mycontainer 'ifconfig -a'
R R9 u stdoutR R� Rr R Ra Rv R R R� ( R� ( RX RO R R� Rr R Ra Rv R R R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s Jc C@ sO t | | d | d d d | d | d | d | d | d | d
| d |
d | � S(
u�
.. versionadded:: 2015.5.0
Run :mod:`cmd.run_stderr <salt.modules.cmdmod.run_stderr>` within a container
.. warning::
Many shell builtins do not work, failing with stderr similar to the
following:
.. code-block:: bash
lxc_container: No such file or directory - failed to exec 'command'
The same error will be displayed if the command being run does not
exist.
name
Name of the container in which to run the command
cmd
Command to run
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
no_start : False
If the container is not running, don't start it
preserve_state : True
After running the command, return the container to its previous state
stdin : None
Standard input to be used for the command
output_loglevel : debug
Level at which to log the output from the command. Set to ``quiet`` to
suppress logging.
use_vt : False
Use SaltStack's utils.vt to stream output to console
``output=all``.
keep_env : http_proxy,https_proxy,no_proxy
A list of env vars to preserve. May be passed as commma-delimited list.
chroot_fallback
if the container is not running, try to run the command using chroot
default: false
CLI Example:
.. code-block:: bash
salt myminion lxc.run_stderr mycontainer 'ip addr show'
R R9 u stderrR R� Rr R Ra Rv R R R� ( R� ( RX RO R R� Rr R Ra Rv R R R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
run_stderr s Hc C@ sO t | | d d d | d | d | d | d | d | d | d
| d |
d | � S(
u�
.. versionadded:: 2015.5.0
Run :mod:`cmd.retcode <salt.modules.cmdmod.retcode>` within a container
.. warning::
Many shell builtins do not work, failing with stderr similar to the
following:
.. code-block:: bash
lxc_container: No such file or directory - failed to exec 'command'
The same error will be displayed in stderr if the command being run
does not exist. If the retcode is nonzero and not what was expected,
try using :mod:`lxc.run_stderr <salt.modules.lxc.run_stderr>`
or :mod:`lxc.run_all <salt.modules.lxc.run_all>`.
name
Name of the container in which to run the command
cmd
Command to run
no_start : False
If the container is not running, don't start it
preserve_state : True
After running the command, return the container to its previous state
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
stdin : None
Standard input to be used for the command
output_loglevel : debug
Level at which to log the output from the command. Set to ``quiet`` to
suppress logging.
use_vt : False
Use SaltStack's utils.vt to stream output to console
``output=all``.
keep_env : http_proxy,https_proxy,no_proxy
A list of env vars to preserve. May be passed as commma-delimited list.
chroot_fallback
if the container is not running, try to run the command using chroot
default: false
CLI Example:
.. code-block:: bash
salt myminion lxc.retcode mycontainer 'ip addr show'
R9 u retcodeR R R� Rr R Ra Rv R R R� ( R� ( RX RO R R� Rr R Ra Rv R R R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR w s Jc C@ sO t | | d d d | d | d | d | d | d | d | d
| d |
d | � S(
u�
.. versionadded:: 2015.5.0
Run :mod:`cmd.run_all <salt.modules.cmdmod.run_all>` within a container
.. note::
While the command is run within the container, it is initiated from the
host. Therefore, the PID in the return dict is from the host, not from
the container.
.. warning::
Many shell builtins do not work, failing with stderr similar to the
following:
.. code-block:: bash
lxc_container: No such file or directory - failed to exec 'command'
The same error will be displayed in stderr if the command being run
does not exist.
name
Name of the container in which to run the command
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
cmd
Command to run
no_start : False
If the container is not running, don't start it
preserve_state : True
After running the command, return the container to its previous state
stdin : None
Standard input to be used for the command
output_loglevel : debug
Level at which to log the output from the command. Set to ``quiet`` to
suppress logging.
use_vt : False
Use SaltStack's utils.vt to stream output to console
``output=all``.
keep_env : http_proxy,https_proxy,no_proxy
A list of env vars to preserve. May be passed as commma-delimited list.
chroot_fallback
if the container is not running, try to run the command using chroot
default: false
CLI Example:
.. code-block:: bash
salt myminion lxc.run_all mycontainer 'ip addr show'
R9 u allR R� Rr R Ra Rv R R R R� ( R� ( RX RO R R� Rr R Ra Rv R R R R� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s Nc C@ sO t | d j | � d t d t �} y | j � d SWn t k
rJ d SXd S( u9
Get the MD5 checksum of a file from a container
u md5sum "{0}"R R i N( R� R RO R/ t
IndexErrorR ( RX R R9 ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt _get_md5- s
c C@ sH t | d t d | �t d | | | d t d | d t d | d | �S( u�
.. versionchanged:: 2015.8.0
Function renamed from ``lxc.cp`` to ``lxc.copy_to`` for consistency
with other container types. ``lxc.cp`` will continue to work, however.
For versions 2015.2.x and earlier, use ``lxc.cp``.
Copy a file or directory from the host into a container
name
Container name
source
File to be copied to the container
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
dest
Destination on the container. Must be an absolute path.
.. versionchanged:: 2015.5.0
If the destination is a directory, the file will be copied into
that directory.
overwrite : False
Unless this option is set to ``True``, then if a file exists at the
location specified by the ``dest`` argument, an error will be raised.
.. versionadded:: 2015.8.0
makedirs : False
Create the parent directory on the container if it does not already
exist.
.. versionadded:: 2015.5.0
CLI Example:
.. code-block:: bash
salt 'minion' lxc.copy_to /tmp/foo /root/foo
salt 'minion' lxc.cp /tmp/foo /root/foo
R R u container_resource.copy_toR� R� t overwriteRU ( R� RO R R
R� ( RX t sourcet destR� RU R ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� ; s 0u cpu simplec
C@ sh g } i } t j j j | d � �.} x$t j j j | j � � D]} d | k rh | j | � qC n | j d � } d j | d � j
� } d } | j
� j d � r| j
� j d � } | d j
� } d j | d � j
� } | j i i | d 6| d 6| d j
� 6� qC | j i | | d j
� 6� | | | d j
� <qC WWd QX| d k rd| S| S(
u
Read in an LXC configuration file. By default returns a simple, unsorted
dict, but can also return a more detailed structure including blank lines
and comments.
out_format:
set to 'simple' if you need the old and unsupported behavior.
This won't support the multiple lxc values (eg: multiple network nics)
CLI Examples:
.. code-block:: bash
salt 'minion' lxc.read_conf /etc/lxc/mycontainer.conf
salt 'minion' lxc.read_conf /etc/lxc/mycontainer.conf out_format=commented
u ru =i u #u valueu commenti Nu simple(
R R
R� R� R� R� R� RP R/ R� R0 R R (
R� R� t
ret_commentedt
ret_simpleR� R: R� Rm t commentt vcomps( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR z s, "
c C@ s� t | t � s t d � � n d } x8| D]0} t | t j t j f � rY | | 7} q+ t | t � r+ x� t | j � � D]� } d
} t | | t j t j t j t
f � r� d j | d j | | � f � } nc t | | t � r7d j | | | d f � } d | | k r7d j | | | d f � } q7n | r{ | | 7} | d 7} q{ q{ Wq+ q+ Wt
j j j | d � �# } | j t
j j j | � � Wd
QXi S( u
Write out an LXC configuration file
This is normally only used internally. The format of the data structure
must match that which is returned from ``lxc.read_conf()``, with
``out_format`` set to ``commented``.
An example might look like:
.. code-block:: python
[
{'lxc.utsname': '$CONTAINER_NAME'},
'# This is a commented line\n',
'\n',
{'lxc.mount': '$CONTAINER_FSTAB'},
{'lxc.rootfs': {'comment': 'This is another test',
'value': 'This is another test'}},
'\n',
{'lxc.network.type': 'veth'},
{'lxc.network.flags': 'up'},
{'lxc.network.link': 'br0'},
{'lxc.network.mac': '$CONTAINER_MACADDR'},
{'lxc.network.ipv4': '$CONTAINER_IPADDR'},
{'lxc.network.name': '$CONTAINER_DEVICENAME'},
]
CLI Example:
.. code-block:: bash
salt 'minion' lxc.write_conf /etc/lxc/mycontainer.conf \
out_format=commented
u& Configuration must be passed as a listu u = u {0}u valueu commentu # u
u wN( RJ R5 R R R� RL RK R� R t
integer_typest floatR� R R R
R� R� R� R� R� ( R� R� R� R: R* t out_lineR� ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt
write_conf� s. #
% #
"c K@ s- g } y t | d | �} Wn t k
r5 g } n X| sE g } n t j | � } g } x� | | g D]� } i } xf g | D] }
|
^ q~ D]K } | j d � r� q� n | j d � r� | | | | <| j | d � q� q� W| rh | j | � qh qh Wt j j
j � } x� | D]� }
|
j d t
� } | j | t j j
j � � } xG |
D]? } | j d d � } i d d 6j | | � } |
| | | <qMWqWg } | r�t | d t i t
d 6| d
6�} | r�| j | � q�n x� | D]� } t | t � s | j | � q�q�x� t | j � � D]� } | | } | rI| j d � rIq n t } xX t t | � � D]D } | | } | | k rbt } | j i | | | 6� | | =qbqbW| s | j i | | 6� q q Wq�Wx7 | D]/ } x& | D] } | j i | | | 6� q�Wq�W| r| St | | � t | | � S( u�
Edit an LXC configuration file. If a setting is already present inside the
file, its value will be replaced. If it does not exist, it will be appended
to the end of the file. Comments and blank lines will be kept in-tact if
they already exist in the file.
out_format:
Set to simple if you need backward compatibility (multiple items for a
simple key is not supported)
read_only:
return only the edited configuration without applying it
to the underlying lxc configuration file
lxc_config:
List of dict containning lxc configuration items
For network configuration, you also need to add the device it belongs
to, otherwise it will default to eth0.
Also, any change to a network parameter will result in the whole
network reconfiguration to avoid mismatchs, be aware of that !
After the file is edited, its contents will be returned. By default, it
will be returned in ``simple`` format, meaning an unordered dict (which
may not represent the actual file order). Passing in an ``out_format`` of
``commented`` will return a data structure which accurately represents the
order and content of the file.
CLI Example:
.. code-block:: bash
salt 'minion' lxc.edit_conf /etc/lxc/mycontainer.conf \
out_format=commented lxc.network.type=veth
salt 'minion' lxc.edit_conf /etc/lxc/mycontainer.conf \
out_format=commented \
lxc_config="[{'lxc.network.name': 'eth0', \
'lxc.network.ipv4': '1.2.3.4'},
{'lxc.network.name': 'eth2', \
'lxc.network.ipv4': '1.2.3.5',\
'lxc.network.gateway': '1.2.3.1'}]"
R� u __u lxc.network.u lxc.network.nameu u macu hwaddrR� u network_profileu nic_optsN( R R� RF RG R R R RP R R
RR RS R RQ R> R� R� RO R� RJ RK R5 R� R R R� R� ( R� R� t read_onlyR R@ R� R� t
net_configt lxc_kwst
net_paramsR' t kwargRo t paramsR� t dev_optsR� R� t net_changesR: R* R� t foundR{ t kw( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � st ,
c C@ s& i t d 6i d 6d j | � d 6} t | d | �} | r� t | d | �d k r� y t | d | �Wq� t t f k
r� } d j | � | d <t | d <| SXn | rt | d | �d k ry t | d | �Wqt t f k
r} d j | � | d <t | d <| SXn d | d | <| S( u�
Reboot a container.
path
path to the container parent
default: /var/lib/lxc (system default)
.. versionadded:: 2015.8.0
CLI Examples:
.. code-block:: bash
salt 'minion' lxc.reboot myvm
u resultu changesu {0} rebootedu commentR u runningu Unable to stop container: {0}u rebooted( RO R R4 R R R R R R ( RX R R� R+ R* ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt rebootW s(
c
@ s~ i } t |
� } t j j | | d � }
i | d 6d j | � d 6t d 6| d 6} t t j � � � � t j | � � d � � f d � } | d k r� | r� t
} n |
d k r� | d |
� }
n d }
| s� | d
| � } n t j j |
� rzt |
d d �} t
j j j d
| f d
| f d |
f d | f d | f d | f d | f d | f d | f d | f g
� } | r�| | d <n t
j j j � } x6 t j | � D]% \ } } | d k r�| | | <q�q�Wt d | | � } | rt |
d d d | �n t |
d d �} | | k rzd j | � | d <t | d |
�d k rwt | d |
�} | d | d <qwqzn | S( u�
Reconfigure a container.
This only applies to a few property
name
Name of the container.
utsname
utsname of the container.
.. versionadded:: 2016.3.0
rootfs
rootfs of the container.
.. versionadded:: 2016.3.0
cpu
Select a random number of cpu cores and assign it to the cpuset, if the
cpuset option is set then this option will be ignored
cpuset
Explicitly define the cpus this container will be bound to
cpushare
cgroups cpu shares.
autostart
autostart container on reboot
memory
cgroups memory limit, in MB.
(0 for nolimit, None for old default 1024MB)
gateway
the ipv4 gateway to use
the default does nothing more than lxcutils does
bridge
the bridge to use
the default does nothing more than lxcutils does
nic
Network interfaces profile (defined in config or pillar).
nic_opts
Extra options for network interfaces, will override
``{"eth0": {"mac": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1", "ipv6": "2001:db8::ff00:42:8329"}}``
or
``{"eth0": {"mac": "aa:bb:cc:dd:ee:ff", "ipv4": "10.1.1.1/24", "ipv6": "2001:db8::ff00:42:8329"}}``
path
path to the container parent
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt-call -lall mc_lxc_fork.reconfigure foobar nic_opts="{'eth1': {'mac': '00:16:3e:dd:ee:44'}}" memory=4
u configu nameu config for {0} up to dateu commentu resultu changesc @ s8 � j | t � } � j | | � } | t k r4 | S| S( N( R R� ( R* RB R� R� ( R� RC ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyR� � s
u autostartu keepu utsnameR� u commentedu rootfsu cpuu gatewayu cpusetu cpushareu network_profileu nic_optsu bridgeu memoryR� R u {0} lxc config updatedR u runningN( R R3 R R� R RO RM RF RG R RQ R4 R R R
RR RS R R1 R� R� R R ( RX R� R� R� R� RC Rn Ro Rq Rr R_ t utsnameR R R@ R R1 R� R� R/ t make_kwR� R* R� R2 R� R6 ( ( R� RC s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt reconfigure s\ J
c C@ sd t | � } t j j | | d � } g } t j j j | d � �% } x | D] } | j | � qL WWd QXt d | d | � } | j
d � }
i } x0 t d |
d | d | � D] } | j | � q� W| r� t
| d
d | �n g }
t j j j | d � �% } x | D] } |
j | � q
WWd QXd } x0 t j | |
d
d d d �D] } | | 7} qLW| S( u�
.. versionadded:: 2015.5.0
Apply a network profile to a container
network_profile
profile name or default values (dict)
nic_opts
values to override in defaults (dict)
indexed by nic card names
path
path to the container parent
.. versionadded:: 2015.8.0
CLI Examples:
.. code-block:: bash
salt 'minion' lxc.apply_network_profile web1 centos
salt 'minion' lxc.apply_network_profile web1 centos \
nic_opts="{'eth0': {'mac': 'xx:xx:xx:xx:xx:xx'}}"
salt 'minion' lxc.apply_network_profile web1 \
"{'eth0': {'mac': 'xx:xx:xx:xx:xx:yy'}}"
nic_opts="{'eth0': {'mac': 'xx:xx:xx:xx:xx:xx'}}"
The special case to disable use of ethernet nics:
.. code-block:: bash
salt 'minion' lxc.apply_network_profile web1 centos \
"{eth0: {disable: true}}"
u configu rNRX R u lxc.networkR� Rn Ro R� u commentedu t fromfileu beforet tofileu after( R R3 R R� R R
R� R� RP R� R� R� RI R� t difflibt unified_diff( RX Rn Ro R R1 t cfgpatht beforeR� R: t lxcconfigR� t network_paramsR� t aftert diff( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyRL s4 $
c C@ s� | t d d d | � k r3 t d j | � � � n t d d j | � � j d � } g | D]7 } t j d | � d k r\ | j d � d
j � ^ q\ d } | S(
u�
Returns a container pid.
Throw an exception if the container isn't running.
CLI Example:
.. code-block:: bash
salt '*' lxc.get_pid name
Rd u runningR u1 Container {0} is not running, can't determine PIDu cmd.runu lxc-info -n {0}u
u \s*PIDu :i i N( Rn R R R R/ R� R� R R0 ( RX R R� R: t pid( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt get_pidI s
"Hc C@ sv t | d | �} xJ t r^ d d j d � t d � D� � } | t d � j � k r Pq q Wt d d � s~ t d � � n t d
d j | � � s� t d j | � � � n t d d
� s� t d d
� n t d d j | � � rt d d j | � � n t d d j | � d j | � � d t d d j d | d | � � k } | rut d j d | d | � � � n t d d j d | � � d k r�t d j | � � � n t d d j | � � d k r�t d j | � � � n d t d d j d | d | d | � � k } | s;t d! j d | d | � � � n t d d j | � � | d# k rrt d" | | � n d# S($ u�
Add a veth to a container.
Note : this function doesn't update the container config, just add the interface at runtime
name
Name of the container
interface_name
Name of the interface in the container
bridge
Name of the bridge to attach the interface to (facultative)
CLI Examples:
.. code-block:: bash
salt '*' lxc.add_veth container_name eth1 br1
salt '*' lxc.add_veth container_name eth1
R u vethu c s@ s( | ] } t j t j t j � Vq d S( N( R� R� t stringt ascii_uppercaset digits( R� t _( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pys <genexpr>v s i u network.interfacesu file.directory_existsu /var/run/u; Directory /var/run required for lxc.add_veth doesn't existsu file.file_existsu /proc/{0}/ns/netu< Proc file for container {0} network namespace doesn't existsu /var/run/netnsu
file.mkdiru file.is_linku /var/run/netns/{0}u file.removeu file.symlinki u cmd.retcodeu1 ip netns exec {netns} ip address list {interface}t netnst interfaceu3 Interface {interface} already exists in {container}Ri u4 ip link add name {veth} type veth peer name {veth}_ct vethu& Error while creating the veth pair {0}u ip link set dev {0} upu* Error while bringing up host-side veth {0}u@ ip link set dev {veth}_c netns {container} name {interface_name}t interface_nameu> Error while attaching the veth {veth} to container {container}u bridge.addifN( R RO R� R R R� R R R ( RX R Rq R R t random_vetht interface_existst attached( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt add_veth[ sH ## " (� R� t
__future__R R R R� RF R R� R t loggingR� R3 RM R� R� R� R� t salt.utils.argsR t salt.utils.cloudt salt.utils.datat salt.utils.dictupdatet salt.utils.filest salt.utils.functoolst salt.utils.hashutilst salt.utils.networkt salt.utils.odictt salt.utils.patht salt.utils.stringutilst salt.exceptionsR R t salt.configt salt.utils.versionsR R t salt.extR t salt.ext.six.movesR t salt.ext.six.moves.urllib.parseR R� t getLoggerR� R t __func_alias__R
RQ R- R R� R t objectR� R R R R# R& R< R= RA R R� R� RM R� R� R� R� R R� R� R� R RO R: R< RG RK RR R� R R` Rn R} R[ R� R� R R R� R~ R� R
t functoolst alias_functiont removeR4 R R� R� R� R t set_passR� R R� R� R� R� R� R� R R� R� R R� R� R R� R� R� t cpR R� R� R R RL R R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/lxc.pyt <module> s�
4 � 9 ) < � &' "R 8 � � 3 & � v)[ 8
+ 6, 1 ' - �B g`M 3 � ' = P P N P R < , A n ) wF
Mini Shell