4 from routes import Mapper
9 from invirt import database
10 from invirt.config import structs as config
12 class RemConfFS(routefs.RouteFS):
14 RemConfFS creates a filesytem for configuring remctl, like this:
22 The machine list and the acls are drawn from a database.
25 def __init__(self, *args, **kw):
26 """Initialize the filesystem and set it to allow_other access besides
27 the user who mounts the filesystem (i.e. root)
29 super(RemConfFS, self).__init__(*args, **kw)
30 self.lasttime = time()
31 self.fuse_args.add("allow_other", True)
33 openlog('sipb-xen-remconffs ', LOG_PID, LOG_DAEMON)
35 syslog(LOG_DEBUG, 'Init complete.')
39 m.connect('', controller='getroot')
40 m.connect('acl', controller='getmachines')
41 m.connect('acl/:machine', controller='getacl')
42 m.connect('conf', controller='getconf')
45 def getroot(self, **kw):
46 return ['acl', 'conf']
48 def getacl(self, machine, **kw):
49 """Build the ACL file for a machine
51 machine = database.Machine.get_by(name=machine)
52 users = [acl.user for acl in machine.acl]
53 return "\n".join(map(self.userToPrinc, users)
54 + ['include /etc/remctl/acl/web',
57 def getconf(self, **kw):
58 """Build the master conf file, with all machines
60 return '\n'.join("control %s /usr/sbin/sipb-xen-remote-proxy-control"
61 " /etc/remctl/remconffs/acl/%s"
62 % (machine_name, machine_name)
63 for machine_name in self.getmachines())+'\n'
65 def getmachines(self, **kw):
66 """Get the list of VMs in the database, clearing the cache if it's
67 older than 15 seconds"""
68 if time() - self.lasttime > 15:
69 self.lasttime = time()
70 database.clear_cache()
71 return [machine.name for machine in database.session.query(database.Machine).all()]
73 def userToPrinc(self, user):
74 """Convert Kerberos v4-style names to v5-style and append a default
75 realm if none is specified
78 (princ, realm) = user.split('@')
81 realm = config.authn[0].realm
83 return princ.replace('.', '/') + '@' + realm
85 if __name__ == '__main__':
87 routefs.main(RemConfFS)