1
0
mirror of https://github.com/OpenNebula/one.git synced 2024-12-22 13:33:52 +03:00
one/share/sudoers/sudoers.rb
2019-09-30 15:15:42 +02:00

88 lines
3.2 KiB
Ruby

# -------------------------------------------------------------------------- #
# Copyright 2002-2019, OpenNebula Project, OpenNebula Systems #
# #
# Licensed under the Apache License, Version 2.0 (the "License"); you may #
# not use this file except in compliance with the License. You may obtain #
# a copy of the License at #
# #
# http://www.apache.org/licenses/LICENSE-2.0 #
# #
# Unless required by applicable law or agreed to in writing, software #
# distributed under the License is distributed on an "AS IS" BASIS, #
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #
# See the License for the specific language governing permissions and #
# limitations under the License. #
#--------------------------------------------------------------------------- #
# Holds configuration about sudoers requirements for OpeNebula
class Sudoers
NODECMDS = [:NET, :OVS, :LVM, :LXD]
attr_accessor :cmds
def initialize(lib_location)
# Commands required to be used as root, without password, by oneadmin
@cmds = {
:NET => %w[ebtables iptables ip6tables ip ipset],
:LVM => %w[
lvcreate lvremove lvs vgdisplay lvchange lvscan lvextend
],
:OVS => %w[ovs-ofctl ovs-vsctl],
:CEPH => %w[rbd],
:LXD => %w[
/snap/bin/lxc /usr/bin/catfstab mount umount mkdir lsblk losetup
kpartx qemu-nbd blkid e2fsck resize2fs xfs_growfs rbd-nbd
xfs_admin tune2fs
],
:HA => [
'systemctl start opennebula-flow',
'systemctl stop opennebula-flow',
'systemctl start opennebula-gate',
'systemctl stop opennebula-gate',
'service opennebula-flow start',
'service opennebula-flow stop',
'service opennebula-gate start',
'service opennebula-gate stop',
'arping'
],
:MARKET => %W[#{lib_location}/sh/create_container_image.sh]
}
end
# Return a list of commands full path
def aliases
cmnd_aliases = {}
cmds.keys.each do |label|
cmd_path = []
cmds[label].each do |cmd|
if cmd[0] == '/'
cmd_path << cmd
next
end
cmd_parts = cmd.split
cmd_parts[0] = which(cmd_parts[0])
if cmd_parts[0].empty?
STDERR.puts "command not found: #{cmd}"
exit 1
end
cmd_path << cmd_parts.join(' ')
end
cmnd_aliases["ONE_#{label}"] = cmd_path
end
cmnd_aliases
end
def which(cmd)
`which #{cmd} 2>/dev/null`.strip
end
end