+++ /dev/null
-#!/usr/bin/python
-
-import getafsgroups
-import re
-import string
-from sipb_xen_database import Machine, NIC
-from webcommon import InvalidInput, g
-
-MAX_MEMORY_TOTAL = 512
-MAX_MEMORY_SINGLE = 256
-MIN_MEMORY_SINGLE = 16
-MAX_DISK_TOTAL = 50
-MAX_DISK_SINGLE = 50
-MIN_DISK_SINGLE = 0.1
-MAX_VMS_TOTAL = 10
-MAX_VMS_ACTIVE = 4
-
-def getMachinesByOwner(user, machine=None):
- """Return the machines owned by the same as a machine.
-
- If the machine is None, return the machines owned by the same
- user.
- """
- if machine:
- owner = machine.owner
- else:
- owner = user
- return Machine.select_by(owner=owner)
-
-def maxMemory(user, machine=None, on=True):
- """Return the maximum memory for a machine or a user.
-
- If machine is None, return the memory available for a new
- machine. Else, return the maximum that machine can have.
-
- on is whether the machine should be turned on. If false, the max
- memory for the machine to change to, if it is left off, is
- returned.
- """
- if not on:
- return MAX_MEMORY_SINGLE
- machines = getMachinesByOwner(user, machine)
- active_machines = [x for x in machines if g.uptimes[x]]
- mem_usage = sum([x.memory for x in active_machines if x != machine])
- return min(MAX_MEMORY_SINGLE, MAX_MEMORY_TOTAL-mem_usage)
-
-def maxDisk(user, machine=None):
- machines = getMachinesByOwner(user, machine)
- disk_usage = sum([sum([y.size for y in x.disks])
- for x in machines if x != machine])
- return min(MAX_DISK_SINGLE, MAX_DISK_TOTAL-disk_usage/1024.)
-
-def cantAddVm(user):
- machines = getMachinesByOwner(user)
- active_machines = [x for x in machines if g.uptimes[x]]
- if len(machines) >= MAX_VMS_TOTAL:
- return 'You have too many VMs to create a new one.'
- if len(active_machines) >= MAX_VMS_ACTIVE:
- return ('You already have the maximum number of VMs turned on. '
- 'To create more, turn one off.')
- return False
-
-def validAddVm(user):
- reason = cantAddVm(user)
- if reason:
- raise InvalidInput('create', True, reason)
- return True
-
-def haveAccess(user, machine):
- """Return whether a user has administrative access to a machine"""
- if user == 'moo':
- return True
- if user in (machine.administrator, machine.owner):
- return True
- if getafsgroups.checkAfsGroup(user, machine.administrator,
- 'athena.mit.edu'): #XXX Cell?
- return True
- if not getafsgroups.notLockerOwner(user, machine.owner):
- return True
- return owns(user, machine)
-
-def owns(user, machine):
- """Return whether a user owns a machine"""
- if user == 'moo':
- return True
- return not getafsgroups.notLockerOwner(user, machine.owner)
-
-def validMachineName(name):
- """Check that name is valid for a machine name"""
- if not name:
- return False
- charset = string.ascii_letters + string.digits + '-_'
- if name[0] in '-_' or len(name) > 22:
- return False
- for x in name:
- if x not in charset:
- return False
- return True
-
-def validMemory(user, memory, machine=None, on=True):
- """Parse and validate limits for memory for a given user and machine.
-
- on is whether the memory must be valid after the machine is
- switched on.
- """
- try:
- memory = int(memory)
- if memory < MIN_MEMORY_SINGLE:
- raise ValueError
- except ValueError:
- raise InvalidInput('memory', memory,
- "Minimum %s MiB" % MIN_MEMORY_SINGLE)
- if memory > maxMemory(user, machine, on):
- raise InvalidInput('memory', memory,
- 'Maximum %s MiB for %s' % (maxMemory(user, machine),
- user))
- return memory
-
-def validDisk(user, disk, machine=None):
- """Parse and validate limits for disk for a given user and machine."""
- try:
- disk = float(disk)
- if disk > maxDisk(user, machine):
- raise InvalidInput('disk', disk,
- "Maximum %s G" % maxDisk(user, machine))
- disk = int(disk * 1024)
- if disk < MIN_DISK_SINGLE * 1024:
- raise ValueError
- except ValueError:
- raise InvalidInput('disk', disk,
- "Minimum %s GiB" % MIN_DISK_SINGLE)
- return disk
-
-def testMachineId(user, machine_id, exists=True):
- """Parse, validate and check authorization for a given user and machine.
-
- If exists is False, don't check that it exists.
- """
- if machine_id is None:
- raise InvalidInput('machine_id', machine_id,
- "Must specify a machine ID.")
- try:
- machine_id = int(machine_id)
- except ValueError:
- raise InvalidInput('machine_id', machine_id, "Must be an integer.")
- machine = Machine.get(machine_id)
- if exists and machine is None:
- raise InvalidInput('machine_id', machine_id, "Does not exist.")
- if machine is not None and not haveAccess(user, machine):
- raise InvalidInput('machine_id', machine_id,
- "You do not have access to this machine.")
- return machine
-
-def testAdmin(user, admin, machine):
- if admin in (None, machine.administrator):
- return None
- if admin == user:
- return admin
- if getafsgroups.checkAfsGroup(user, admin, 'athena.mit.edu'):
- return admin
- if getafsgroups.checkAfsGroup(user, 'system:'+admin,
- 'athena.mit.edu'):
- return 'system:'+admin
- return admin
-
-def testOwner(user, owner, machine=None):
- if owner == user or machine is not None and owner == machine.owner:
- return owner
- if owner is None:
- raise InvalidInput('owner', owner, "Owner must be specified")
- value = getafsgroups.notLockerOwner(user, owner)
- if not value:
- return owner
- raise InvalidInput('owner', owner, value)
-
-def testContact(user, contact, machine=None):
- if contact in (None, machine.contact):
- return None
- if not re.match("^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$", contact, re.I):
- raise InvalidInput('contact', contact, "Not a valid email.")
- return contact
-
-def testDisk(user, disksize, machine=None):
- return disksize
-
-def testName(user, name, machine=None):
- if name in (None, machine.name):
- return None
- if not Machine.select_by(name=name):
- return name
- raise InvalidInput('name', name, "Name is already taken.")
-
-def testHostname(user, hostname, machine):
- for nic in machine.nics:
- if hostname == nic.hostname:
- return hostname
- # check if doesn't already exist
- if NIC.select_by(hostname=hostname):
- raise InvalidInput('hostname', hostname,
- "Already exists")
- if not re.match("^[A-Z0-9-]{1,22}$", hostname, re.I):
- raise InvalidInput('hostname', hostname, "Not a valid hostname; "
- "must only use number, letters, and dashes.")
- return hostname
projects / invirt/packages/invirt-web.git / blobdiff