2014-11-13 14:38:41 +01:00
|
|
|
#!/usr/bin/python2 -O
|
2015-01-19 18:03:23 +01:00
|
|
|
# vim: fileencoding=utf-8
|
2016-06-16 14:11:50 +02:00
|
|
|
#
|
|
|
|
# The Qubes OS Project, http://www.qubes-os.org
|
|
|
|
#
|
|
|
|
# Copyright (C) 2014-2016 Wojtek Porczyk <woju@invisiblethingslab.com>
|
|
|
|
# Copyright (C) 2016 Marek Marczykowski <marmarek@invisiblethingslab.com>)
|
|
|
|
# Copyright (C) 2016 Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>
|
|
|
|
#
|
|
|
|
# This program is free software; you can redistribute it and/or modify
|
|
|
|
# it under the terms of the GNU General Public License as published by
|
|
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
|
|
# (at your option) any later version.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License along
|
|
|
|
# with this program; if not, write to the Free Software Foundation, Inc.,
|
|
|
|
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
|
|
#
|
|
|
|
''' This module contains the AppVM implementation '''
|
2014-11-13 14:38:41 +01:00
|
|
|
|
2016-07-12 18:03:14 +02:00
|
|
|
import copy
|
|
|
|
|
2015-09-17 12:08:03 +02:00
|
|
|
import qubes.events
|
2014-11-13 14:38:41 +01:00
|
|
|
import qubes.vm.qubesvm
|
2016-04-15 13:09:50 +02:00
|
|
|
from qubes.config import defaults
|
|
|
|
|
2014-11-13 14:38:41 +01:00
|
|
|
|
|
|
|
class AppVM(qubes.vm.qubesvm.QubesVM):
|
2014-11-13 18:10:27 +01:00
|
|
|
'''Application VM'''
|
2014-12-29 12:46:16 +01:00
|
|
|
|
2016-04-15 13:09:50 +02:00
|
|
|
template = qubes.VMProperty('template',
|
|
|
|
load_stage=4,
|
|
|
|
vmclass=qubes.vm.templatevm.TemplateVM,
|
|
|
|
ls_width=31,
|
|
|
|
doc='Template, on which this AppVM is based.')
|
2014-12-29 12:46:16 +01:00
|
|
|
|
2016-07-12 18:03:14 +02:00
|
|
|
def __init__(self, app, xml, template=None, **kwargs):
|
2016-04-15 13:09:50 +02:00
|
|
|
self.volume_config = {
|
|
|
|
'root': {
|
|
|
|
'name': 'root',
|
|
|
|
'pool': 'default',
|
2016-07-12 18:03:14 +02:00
|
|
|
'snap_on_start': True,
|
|
|
|
'save_on_stop': False,
|
|
|
|
'rw': False,
|
2016-04-27 17:16:34 +02:00
|
|
|
'internal': True
|
2016-04-15 13:09:50 +02:00
|
|
|
},
|
|
|
|
'private': {
|
|
|
|
'name': 'private',
|
|
|
|
'pool': 'default',
|
2016-07-12 18:03:14 +02:00
|
|
|
'snap_on_start': False,
|
|
|
|
'save_on_stop': True,
|
|
|
|
'rw': True,
|
|
|
|
'source': None,
|
2016-04-15 13:09:50 +02:00
|
|
|
'size': defaults['private_img_size'],
|
2016-04-27 17:16:34 +02:00
|
|
|
'internal': True
|
2016-04-15 13:09:50 +02:00
|
|
|
},
|
|
|
|
'volatile': {
|
|
|
|
'name': 'volatile',
|
|
|
|
'pool': 'default',
|
|
|
|
'size': defaults['root_img_size'],
|
2016-07-12 18:03:14 +02:00
|
|
|
'internal': True,
|
|
|
|
'rw': True,
|
2016-04-15 13:09:50 +02:00
|
|
|
},
|
|
|
|
'kernel': {
|
|
|
|
'name': 'kernel',
|
|
|
|
'pool': 'linux-kernel',
|
2016-07-12 18:03:14 +02:00
|
|
|
'snap_on_start': True,
|
|
|
|
'rw': False,
|
2016-04-27 17:16:34 +02:00
|
|
|
'internal': True
|
2016-04-15 13:09:50 +02:00
|
|
|
}
|
|
|
|
}
|
2016-07-12 18:03:14 +02:00
|
|
|
|
|
|
|
if template is not None:
|
|
|
|
# template is only passed if the AppVM is created, in other cases we
|
|
|
|
# don't need to patch the volume_config because the config is
|
|
|
|
# coming from XML, already as we need it
|
|
|
|
|
|
|
|
for name, conf in self.volume_config.items():
|
|
|
|
tpl_volume = template.volumes[name]
|
|
|
|
|
|
|
|
conf['size'] = tpl_volume.size
|
|
|
|
conf['pool'] = tpl_volume.pool
|
|
|
|
|
|
|
|
has_source = ('source' in conf and conf['source'] is not None)
|
|
|
|
is_snapshot = 'snap_on_start' in conf and conf['snap_on_start']
|
|
|
|
if is_snapshot and not has_source:
|
|
|
|
if tpl_volume.source is not None:
|
|
|
|
conf['source'] = tpl_volume.source
|
|
|
|
else:
|
|
|
|
conf['source'] = tpl_volume.vid
|
|
|
|
|
|
|
|
for name, config in template.volume_config.items():
|
|
|
|
# in case the template vm has more volumes add them to own
|
|
|
|
# config
|
|
|
|
if name not in self.volume_config:
|
|
|
|
self.volume_config[name] = copy.deepcopy(config)
|
|
|
|
if 'vid' in self.volume_config[name]:
|
|
|
|
del self.volume_config[name]['vid']
|
|
|
|
|
|
|
|
super(AppVM, self).__init__(app, xml, **kwargs)
|
|
|
|
if not hasattr(template, 'template') and template is not None:
|
|
|
|
self.template = template
|
|
|
|
if 'source' not in self.volume_config['root']:
|
|
|
|
msg = 'missing source for root volume'
|
|
|
|
raise qubes.exc.QubesException(msg)
|
2014-12-29 12:46:16 +01:00
|
|
|
|
2016-03-14 22:16:52 +01:00
|
|
|
@qubes.events.handler('domain-load')
|
2015-09-17 12:08:03 +02:00
|
|
|
def on_domain_loaded(self, event):
|
2016-06-16 14:11:50 +02:00
|
|
|
''' When domain is loaded assert that this vm has a template.
|
|
|
|
''' # pylint: disable=unused-argument
|
2014-12-29 12:46:16 +01:00
|
|
|
assert self.template
|