mirror of
https://github.com/OpenNebula/one.git
synced 2024-12-22 13:33:52 +03:00
115 lines
4.4 KiB
Ruby
115 lines
4.4 KiB
Ruby
# -------------------------------------------------------------------------- #
|
|
# Copyright 2002-2021, OpenNebula Project, OpenNebula Systems #
|
|
# #
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may #
|
|
# not use this file except in compliance with the License. You may obtain #
|
|
# a copy of the License at #
|
|
# #
|
|
# http://www.apache.org/licenses/LICENSE-2.0 #
|
|
# #
|
|
# Unless required by applicable law or agreed to in writing, software #
|
|
# distributed under the License is distributed on an "AS IS" BASIS, #
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #
|
|
# See the License for the specific language governing permissions and #
|
|
# limitations under the License. #
|
|
#--------------------------------------------------------------------------- #
|
|
|
|
# Holds configuration about sudoers requirements for OpeNebula
|
|
class Sudoers
|
|
|
|
NODECMDS = [:NET, :OVS, :LVM, :LXD, :MEM, :VGPU]
|
|
|
|
attr_accessor :cmds
|
|
|
|
def initialize(lib_location)
|
|
# Commands required to be used as root, without password, by oneadmin
|
|
@cmds = {
|
|
:NET => [
|
|
'ebtables',
|
|
'iptables',
|
|
'ip6tables',
|
|
'ipset',
|
|
'ip link *',
|
|
'ip tuntap *',
|
|
'ip route *',
|
|
'ip neighbour *'
|
|
],
|
|
:LVM => %w[
|
|
lvcreate lvremove lvs vgdisplay lvchange lvscan lvextend
|
|
],
|
|
:OVS => %w[ovs-ofctl ovs-vsctl],
|
|
:CEPH => %w[rbd],
|
|
:LXD => %w[
|
|
/snap/bin/lxc /usr/bin/catfstab mount umount mkdir lsblk losetup
|
|
kpartx qemu-nbd blkid e2fsck resize2fs xfs_growfs rbd-nbd
|
|
xfs_admin tune2fs
|
|
],
|
|
:HA => [
|
|
'systemctl start opennebula-flow',
|
|
'systemctl stop opennebula-flow',
|
|
'systemctl start opennebula-gate',
|
|
'systemctl stop opennebula-gate',
|
|
'systemctl start opennebula-hem',
|
|
'systemctl stop opennebula-hem',
|
|
'systemctl start opennebula-showback.timer',
|
|
'systemctl stop opennebula-showback.timer',
|
|
'service opennebula-flow start',
|
|
'service opennebula-flow stop',
|
|
'service opennebula-gate start',
|
|
'service opennebula-gate stop',
|
|
'service opennebula-hem start',
|
|
'service opennebula-hem stop',
|
|
'arping',
|
|
'ip address *'
|
|
],
|
|
:MARKET => %W[#{lib_location}/sh/create_container_image.sh
|
|
#{lib_location}/sh/create_docker_image.sh ],
|
|
:FIRECRACKER => %w[/usr/bin/jailer
|
|
/usr/sbin/one-clean-firecracker-domain
|
|
/usr/sbin/one-prepare-firecracker-domain],
|
|
:LXC => %w[
|
|
mount umount bindfs losetup qemu-nbd lxc-attach lxc-config
|
|
lxc-create lxc-destroy lxc-info lxc-ls lxc-start lxc-stop
|
|
lxc-console e2fsck resize2fs xfs_growfs rbd-nbd
|
|
],
|
|
:MEM => ['sysctl vm.drop_caches=3 vm.compact_memory=1'],
|
|
:VGPU => %w[/usr/lib/one/sh/vgpu]
|
|
}
|
|
end
|
|
|
|
# Return a list of commands full path
|
|
def aliases
|
|
cmnd_aliases = {}
|
|
|
|
cmds.keys.each do |label|
|
|
cmd_path = []
|
|
|
|
cmds[label].each do |cmd|
|
|
if cmd[0] == '/'
|
|
cmd_path << cmd
|
|
next
|
|
end
|
|
|
|
cmd_parts = cmd.split
|
|
cmd_parts[0] = which(cmd_parts[0])
|
|
|
|
if cmd_parts[0].empty?
|
|
STDERR.puts "command not found: #{cmd}"
|
|
exit 1
|
|
end
|
|
|
|
cmd_path << cmd_parts.join(' ')
|
|
end
|
|
|
|
cmnd_aliases["ONE_#{label}"] = cmd_path
|
|
end
|
|
|
|
cmnd_aliases
|
|
end
|
|
|
|
def which(cmd)
|
|
`which #{cmd} 2>/dev/null`.strip
|
|
end
|
|
|
|
end
|