1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582
|
require 'fog/compute/models/server'
require 'fog/libvirt/models/compute/util/util'
require 'fileutils'
module Fog
module Libvirt
class Compute
class Server < Fog::Compute::Server
include Fog::Libvirt::Util
attr_reader :xml
identity :id, :aliases => 'uuid'
attribute :cpus
attribute :cputime
attribute :firmware
attribute :firmware_features
attribute :secure_boot
attribute :loader_attributes
attribute :os_type
attribute :memory_size
attribute :max_memory_size
attribute :name
attribute :arch
attribute :persistent
attribute :domain_type
attribute :uuid
attribute :autostart
attribute :nics
attribute :volumes
attribute :active
attribute :boot_order
attribute :display
attribute :cpu
attribute :hugepages
attribute :guest_agent
attribute :video
attribute :virtio_rng
attribute :state
# The following attributes are only needed when creating a new vm
#TODO: Add depreciation warning
attr_accessor :iso_dir, :iso_file
attr_accessor :network_interface_type ,:network_nat_network, :network_bridge_name
attr_accessor :volume_format_type, :volume_allocation,:volume_capacity, :volume_name, :volume_pool_name, :volume_template_name, :volume_path
attr_accessor :password
attr_accessor :user_data
# Can be created by passing in :xml => "<xml to create domain/server>"
# or by providing :template_options => {
# :name => "", :cpus => 1, :memory_size => 256 , :volume_template
# }
def initialize(attributes={} )
@xml = attributes.delete(:xml)
verify_boot_order(attributes[:boot_order])
super defaults.merge(attributes)
initialize_nics
initialize_volumes
@user_data = attributes.delete(:user_data)
end
def new?
uuid.nil?
end
def save
raise Fog::Errors::Error.new('Saving an existing server may create a duplicate') unless new?
create_or_clone_volume unless xml or @volumes
create_user_data_iso if user_data
@xml ||= to_xml
self.id = (persistent ? service.define_domain(xml) : service.create_domain(xml)).uuid
reload
rescue => e
raise Fog::Errors::Error.new("Error saving the server: #{e}")
end
def start
return true if active?
action_status = service.vm_action(uuid, :create)
reload
action_status
end
def update_autostart(value)
service.update_autostart(uuid, value)
end
def mac
nics&.first&.mac
end
def disk_path
volumes.first.path if volumes and volumes.first
end
def destroy(options={ :destroy_volumes => false, :flags => ::Libvirt::Domain::UNDEFINE_NVRAM })
poweroff unless stopped?
flags = options.fetch(:flags, ::Libvirt::Domain::UNDEFINE_NVRAM)
if flags.zero?
service.vm_action(uuid, :undefine)
else
# the test driver doesn't support UNDEFINE_NVRAM
if service.uri.driver == 'test'
flags ^= ::Libvirt::Domain::UNDEFINE_NVRAM
end
service.vm_action(uuid, :undefine, flags)
end
volumes.each { |vol| vol.destroy } if options[:destroy_volumes]
true
end
def reboot
action_status = service.vm_action(uuid, :reboot)
reload
action_status
end
def poweroff
action_status = service.vm_action(uuid, :destroy)
reload
action_status
end
def shutdown
action_status = service.vm_action(uuid, :shutdown)
reload
action_status
end
def resume
action_status = service.vm_action(uuid, :resume)
reload
action_status
end
def suspend
action_status = service.vm_action(uuid, :suspend)
reload
action_status
end
def stopped?
state == "shutoff"
end
def ready?
state == "running"
end
#alias methods
alias_method :halt, :poweroff
alias_method :stop, :shutdown
alias_method :active?, :active
alias_method :autostart?, :autostart
def volumes
# lazy loading of volumes
@volumes ||= (@volumes_path || []).map{ |path| service.volumes.all(:path => path).first }.compact
end
def private_ip_address
ip_address(:private)
end
def public_ip_address
ip_address(:public)
end
def ssh(commands)
requires :ssh_ip_address, :username
ssh_options={}
ssh_options[:password] = password unless password.nil?
ssh_options[:proxy]= ssh_proxy unless ssh_proxy.nil?
super(commands, ssh_options)
end
def ssh_proxy
begin
require 'net/ssh/proxy/command'
rescue LoadError
Fog::Logger.warning("'net/ssh' missing, please install and try again.")
exit(1)
end
# if this is a direct connection, we don't need a proxy to be set.
return nil unless connection.uri.ssh_enabled?
user_string= service.uri.user ? "-l #{service.uri.user}" : ""
Net::SSH::Proxy::Command.new("ssh #{user_string} #{service.uri.host} nc %h %p")
end
# Transfers a file
def scp(local_path, remote_path, upload_options = {})
requires :ssh_ip_address, :username
scp_options = {}
scp_options[:password] = password unless self.password.nil?
scp_options[:key_data] = [private_key] if self.private_key
scp_options[:proxy]= ssh_proxy unless self.ssh_proxy.nil?
Fog::SCP.new(ssh_ip_address, username, scp_options).upload(local_path, remote_path, upload_options)
end
# Sets up a new key
def setup(credentials = {})
requires :public_key, :ssh_ip_address, :username
credentials[:proxy]= ssh_proxy unless ssh_proxy.nil?
credentials[:password] = password unless self.password.nil?
credentials[:key_data] = [private_key] if self.private_key
commands = [
%{mkdir .ssh},
# %{passwd -l #{username}}, #Not sure if we need this here
# %{echo "#{Fog::JSON.encode(attributes)}" >> ~/attributes.json}
]
if public_key
commands << %{echo "#{public_key}" >> ~/.ssh/authorized_keys}
end
# wait for domain to be ready
Timeout::timeout(360) do
begin
Timeout::timeout(8) do
Fog::SSH.new(ssh_ip_address, username, credentials.merge(:timeout => 4)).run('pwd')
end
rescue Errno::ECONNREFUSED
sleep(2)
retry
rescue Net::SSH::AuthenticationFailed, Timeout::Error
retry
end
end
Fog::SSH.new(ssh_ip_address, username, credentials).run(commands)
end
def update_display attrs = {}
service.update_display attrs.merge(:uuid => uuid)
reload
end
# can't use deprecate method, as the value is part of the display hash
def vnc_port
Fog::Logger.deprecation("#{self.class} => #vnc_port is deprecated, use #display[:port] instead [light_black](#{caller.first})[/]")
display[:port]
end
def generate_config_iso(user_data, &blk)
Dir.mktmpdir('config') do |wd|
generate_config_iso_in_dir(wd, user_data, &blk)
end
end
def generate_config_iso_in_dir(dir_path, user_data, &blk)
FileUtils.touch(File.join(dir_path, "meta-data"))
File.open(File.join(dir_path, 'user-data'), 'w') { |f| f.write user_data }
isofile = Tempfile.new(['init', '.iso']).path
unless system("genisoimage -output #{isofile} -volid cidata -joliet -rock #{File.join(dir_path, 'user-data')} #{File.join(dir_path, 'meta-data')}")
raise Fog::Errors::Error.new("Couldn't generate cloud-init iso disk with genisoimage.")
end
blk.call(isofile)
end
def create_user_data_iso
generate_config_iso(user_data) do |iso|
vol = service.volumes.create(:name => cloud_init_volume_name, :capacity => "#{File.size(iso)}b", :allocation => "0G")
vol.upload_image(iso)
@iso_file = cloud_init_volume_name
@iso_dir = File.dirname(vol.path) if vol.path
end
end
def cloud_init_volume_name
"#{name}-cloud-init.iso"
end
# rubocop:disable Metrics
def to_xml
builder = Nokogiri::XML::Builder.new do |xml|
xml.domain(:type => domain_type) do
xml.name(name)
xml.memory(memory_size)
if hugepages
xml.memoryBacking do
xml.hugepages
end
end
xml.vcpu(cpus)
os_tags = {}
os_tags[:firmware] = firmware if firmware == 'efi'
xml.os(**os_tags) do
type = xml.type(os_type, :arch => arch)
type[:machine] = "q35" if ["i686", "x86_64"].include?(arch)
boot_order.each do |dev|
xml.boot(:dev => dev)
end
loader_attributes&.each do |key, value|
xml.loader(key => value)
end
if firmware == "efi" && firmware_features&.any?
xml.firmware do
firmware_features.each_pair do |key, value|
xml.feature(:name => key, :enabled => value)
end
end
end
end
xml.features do
xml.acpi
xml.apic
end
unless cpu.empty?
if cpu.dig(:model, :name)
xml.cpu do
xml.model(cpu.dig(:model, :name), :fallback => cpu.dig(:model, :fallback) || "allow")
end
else
xml.cpu(
:mode => cpu.fetch(:mode, "host-passthrough"),
:check => cpu.fetch(:check, "none"),
:migratable => cpu.fetch(:migratable, "on")
)
end
end
xml.clock(:offset => "utc") do
xml.timer(:name => "rtc", :tickpolicy => "catchup")
xml.timer(:name => "pit", :tickpolicy => "delay")
xml.timer(:name => "hpet", :present => "no")
end
xml.devices do
ceph_args = read_ceph_args
volumes.each_with_index do |volume, index|
target_device = "vd#{('a'..'z').to_a[index]}"
if ceph_args && volume.pool_name.include?(ceph_args["libvirt_ceph_pool"])
xml.disk(:type => "network", :device => "disk") do
xml.driver(:name => "qemu", :type => volume.format_type, :cache => "writeback", :discard => "unmap")
xml.source(:protocol => "rbd", :name => volume.path)
ceph_args["monitor"]&.split(",")&.each do |monitor|
xml.host(:name => monitor, :port => ceph_args["port"])
end
xml.auth(:username => ceph_args["auth_username"]) do
if ceph_args.key?("auth_uuid")
xml.secret(:type => "ceph", :uuid => ceph_args["auth_uuid"])
else
xml.secret(:type => "ceph", :usage => ceph_args["auth_usage"])
end
end
xml.target(:dev => target_device, :bus => ceph_args["bus_type"] == "virtio" ? "virtio" : "scsi")
end
else
is_block = volume.path.start_with?("/dev/")
xml.disk(:type => is_block ? "block" : "file", :device => "disk") do
xml.driver(:name => "qemu", :type => volume.format_type)
if is_block
xml.source(:dev => volume.path)
else
xml.source(:file => volume.path)
end
xml.target(:dev => target_device, :bus => "virtio")
end
end
end
if iso_file
xml.disk(:type => "file", :device => "cdrom") do
xml.driver(:name => "qemu", :type => "raw")
xml.source(:file => "#{iso_dir}/#{iso_file}")
xml.target(:dev => "sda", :bus => "scsi")
xml.readonly
xml.address(:type => "drive", :controller => 0, :bus => 0, :unit => 0)
end
end
nics.each do |nic|
xml.interface(:type => nic.type) do
xml.mac(:address => nic.mac) if nic.mac
if nic.type == "bridge"
xml.source(:bridge => nic.bridge)
else
xml.source(:network => nic.network)
end
xml.model(:type => nic.model)
end
end
if guest_agent
xml.channel(:type => "unix") do
xml.target(:type => "virtio", :name => "org.qemu.guest_agent.0")
end
end
xml.rng(:model => "virtio") do
xml.backend(virtio_rng[:backend_path], :model => virtio_rng.fetch(:backend_model, "random"))
end
if arch == "s390x"
xml.controller(:type => "scsi", :index => "0", :model => "virtio-scsi")
xml.console(:type => "pty") do
xml.target(:type => "sclp")
end
xml.memballoon(:model => "virtio")
else
xml.serial(:type => "pty") do
xml.target(:port => 0)
end
xml.console(:type => "pty") do
xml.target(:port => 0)
end
xml.input(:type => "tablet", :bus => "usb")
xml.input(:type => "mouse", :bus => "ps2")
graphics = xml.graphics(:type => display[:type])
if display[:port].empty?
graphics.port = display[:port]
graphics.autoport = "no"
else
graphics.port = -1
graphics.autoport = "yes"
end
graphics.listen = display[:listen] unless display[:listen].empty?
graphics.passwd = display[:password] if display[:password] && !display[:password].empty?
xml.video do
xml.model(video)
end
end
end
end
end
builder.to_xml
end
# rubocop:enable Metrics
private
attr_accessor :volumes_path
def read_ceph_args(path = "/etc/foreman/ceph.conf")
return unless File.file?(path)
args = {}
File.readlines(path).each do |line|
pair = line.strip.split("=")
key = pair[0]
value = pair[1]
args[key] = value
end
args
end
# This retrieves the ip address of the mac address using dhcp_leases
# It returns an array of public and private ip addresses
# Currently only one ip address is returned, but in the future this could be multiple
# if the server has multiple network interface
def addresses(service_arg=service, options={})
ip_address = nil
if (nic = self.nics&.first)
net = service.networks.all(:name => nic.network).first
# Assume the lease expiring last is the current IP address
ip_address = net&.dhcp_leases(nic.mac)&.max_by { |lse| lse["expirytime"] }&.dig("ipaddr")
end
return { :public => [ip_address], :private => [ip_address] }
end
# Locale-friendly removal of non-alpha nums
DOMAIN_CLEANUP_REGEXP = Regexp.compile('[\W_-]')
def ip_address(key)
addresses[key]&.first
end
def initialize_nics
if nics
nics.map! { |nic| nic.is_a?(Hash) ? service.nics.new(nic) : nic }
else
self.nics = [service.nics.new({:type => network_interface_type, :bridge => network_bridge_name, :network => network_nat_network})]
end
end
def initialize_volumes
if attributes[:volumes] && !attributes[:volumes].empty?
@volumes = attributes[:volumes].map { |vol| vol.is_a?(Hash) ? service.volumes.new(vol) : vol }
end
end
def create_or_clone_volume
options = {:name => volume_name || default_volume_name}
# Check if a disk template was specified
if volume_template_name
template_volume = service.volumes.all(:name => volume_template_name).first
raise Fog::Errors::Error.new("Template #{volume_template_name} not found") unless template_volume
begin
volume = template_volume.clone("#{options[:name]}")
rescue => e
raise Fog::Errors::Error.new("Error creating the volume : #{e}")
end
else
# If no template volume was given, let's create our own volume
options[:pool_name] = volume_pool_name if volume_pool_name
options[:format_type] = volume_format_type if volume_format_type
options[:capacity] = volume_capacity if volume_capacity
options[:allocation] = volume_allocation if volume_allocation
begin
volume = service.volumes.create(options)
rescue => e
raise Fog::Errors::Error.new("Error creating the volume : #{e}")
end
end
@volumes.nil? ? @volumes = [volume] : @volumes << volume
end
def default_iso_dir
"/var/lib/libvirt/images"
end
def default_volume_name
"#{name}.#{volume_format_type || 'img'}"
end
def defaults
{
:persistent => true,
:cpus => 1,
:memory_size => 256 * 1024,
:name => randomized_name,
:os_type => "hvm",
:arch => "x86_64",
:domain_type => "kvm",
:autostart => false,
:iso_dir => default_iso_dir,
:network_interface_type => "network",
:network_nat_network => "default",
:network_bridge_name => "br0",
:boot_order => %w[hd cdrom network],
:display => default_display,
:cpu => {},
:hugepages => false,
:guest_agent => true,
:video => {:type => "virtio", :heads => 1},
:virtio_rng => {},
:firmware_features => { "secure-boot" => "no" },
}
end
def verify_boot_order order = []
valid_boot_media = %w[cdrom fd hd network]
if order
order.each do |b|
raise "invalid boot order, possible values are any combination of: #{valid_boot_media.join(', ')}" unless valid_boot_media.include?(b)
end
end
end
def default_display
{:port => '-1', :listen => '127.0.0.1', :type => 'vnc' }
end
end
end
end
end
|