#!/usr/bin/python2 -O # vim: fileencoding=utf-8 # # The Qubes OS Project, https://www.qubes-os.org/ # # Copyright (C) 2015 Joanna Rutkowska # Copyright (C) 2013-2015 Marek Marczykowski-Górecki # # Copyright (C) 2015 Wojtek Porczyk # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program; if not, write to the Free Software Foundation, Inc., # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # ''' This module contains pool implementations backed by file images''' from __future__ import absolute_import import os import os.path import re import subprocess from qubes.storage import Pool, StoragePoolException, Volume BLKSIZE = 512 class FilePool(Pool): ''' File based 'original' disk implementation ''' driver = 'file' def __init__(self, name=None, dir_path=None): super(FilePool, self).__init__(name=name) assert dir_path, "No pool dir_path specified" self.dir_path = os.path.normpath(dir_path) self._volumes = [] def clone(self, source, target): ''' Clones the volume if the `source.pool` if the source is a :py:class:`FileVolume`. ''' if issubclass(FileVolume, source.__class__): raise StoragePoolException('Volumes %s and %s use different pools' % (source.__class__, target.__class__)) if source.volume_type not in ['origin', 'read-write']: return target copy_file(source.vid, target.vid) return target def create(self, volume, source_volume=None): _type = volume.volume_type size = volume.size if _type == 'origin': create_sparse_file(volume.path_origin, size) create_sparse_file(volume.path_cow, size) elif _type in ['read-write'] and source_volume: copy_file(source_volume.path, volume.path) elif _type in ['read-write', 'volatile']: create_sparse_file(volume.path, size) return volume @property def config(self): return { 'name': self.name, 'dir_path': self.dir_path, 'driver': FilePool.driver, } def is_outdated(self, volume): # FIX: Implement or remove this at all? raise NotImplementedError def resize(self, volume, size): ''' Expands volume, throws :py:class:`qubst.storage.StoragePoolException` if given size is less than current_size ''' # pylint: disable=no-self-use _type = volume.volume_type if _type not in ['origin', 'read-write', 'volatile']: raise StoragePoolException('Can not resize a %s volume %s' % (_type, volume.vid)) if size <= volume.size: raise StoragePoolException( 'For your own safety, shrinking of %s is' ' disabled. If you really know what you' ' are doing, use `truncate` on %s manually.' % (volume.name, volume.vid)) if _type == 'origin': path = volume.path_origin elif _type in ['read-write', 'volatile']: path = volume.path with open(path, 'a+b') as fd: fd.truncate(size) p = subprocess.Popen( ['sudo', 'losetup', '--associated', path], stdout=subprocess.PIPE) result = p.communicate() m = re.match(r'^(/dev/loop\d+):\s', result[0]) if m is not None: loop_dev = m.group(1) # resize loop device subprocess.check_call(['sudo', 'losetup', '--set-capacity', loop_dev ]) def remove(self, volume): if volume.volume_type in ['read-write', 'volatile']: _remove_if_exists(volume.path) elif volume.volume_type == 'origin': _remove_if_exists(volume.path) _remove_if_exists(volume.path_cow) def rename(self, volume, old_name, new_name): assert issubclass(volume.__class__, FileVolume) old_dir = os.path.dirname(volume.path) new_dir = os.path.join(os.path.dirname(old_dir), new_name) if not os.path.exists(new_dir): os.makedirs(new_dir) volume.rename_target_dir(old_name, new_name) return volume def commit_template_changes(self, volume): if volume.volume_type != 'origin': return volume if os.path.exists(volume.path_cow): os.rename(volume.path_cow, volume.path_cow + '.old') old_umask = os.umask(002) with open(volume.path_cow, 'w') as f_cow: f_cow.truncate(volume.size) os.umask(old_umask) return volume def destroy(self): pass def setup(self): create_dir_if_not_exists(self.dir_path) appvms_path = os.path.join(self.dir_path, 'appvms') create_dir_if_not_exists(appvms_path) vm_templates_path = os.path.join(self.dir_path, 'vm-templates') create_dir_if_not_exists(vm_templates_path) def start(self, volume): if volume.volume_type == 'volatile': _reset_volume(volume) if volume.volume_type in ['origin', 'snapshot']: _check_path(volume.path_origin) _check_path(volume.path_cow) else: _check_path(volume.path) return volume def stop(self, volume): pass def target_dir(self, vm): """ Returns the path to vmdir depending on the type of the VM. The default QubesOS file storage saves the vm images in three different directories depending on the ``QubesVM`` type: * ``appvms`` for ``QubesAppVm`` or ``QubesHvm`` * ``vm-templates`` for ``QubesTemplateVm`` or ``QubesTemplateHvm`` Args: vm: a QubesVM pool_dir: the root directory of the pool Returns: string (str) absolute path to the directory where the vm files are stored """ # FIX Remove this if we drop the file backend import qubes.vm.templatevm # nopep8 import qubes.vm.dispvm # nopep8 if isinstance(vm, qubes.vm.templatevm.TemplateVM): subdir = 'vm-templates' elif isinstance(vm, qubes.vm.dispvm.DispVM): subdir = 'appvms' return os.path.join(self.dir_path, subdir, vm.template.name + '-dvm') else: subdir = 'appvms' return os.path.join(self.dir_path, subdir, vm.name) def init_volume(self, vm, volume_config): assert 'volume_type' in volume_config, "Volume type missing " \ + str(volume_config) volume_type = volume_config['volume_type'] known_types = { 'read-write': ReadWriteFile, 'read-only': ReadOnlyFile, 'origin': OriginFile, 'snapshot': SnapshotFile, 'volatile': VolatileFile, } if volume_type not in known_types: raise StoragePoolException("Unknown volume type " + volume_type) if volume_type in ['snapshot', 'read-only']: name = volume_config['name'] origin_vm = vm.template while origin_vm.volume_config[name]['volume_type'] == volume_type: origin_vm = origin_vm.template expected_origin_type = { 'snapshot': 'origin', 'read-only': 'read-write', # FIXME: really? }[volume_type] assert origin_vm.volume_config[name]['volume_type'] == \ expected_origin_type origin_pool = vm.app.get_pool(origin_vm.volume_config[name]['pool']) assert isinstance(origin_pool, FilePool), 'Origin volume not a file volume' volume_config['target_dir'] = origin_pool.target_dir(origin_vm) volume_config['size'] = origin_vm.volume_config[name]['size'] else: volume_config['target_dir'] = self.target_dir(vm) volume = known_types[volume_type](**volume_config) self._volumes += [volume] return volume def verify(self, volume): return volume.verify() @property def volumes(self): return self._volumes class FileVolume(Volume): ''' Parent class for the xen volumes implementation which expects a `target_dir` param on initialization. ''' def __init__(self, target_dir, **kwargs): self.target_dir = target_dir assert self.target_dir, "target_dir not specified" super(FileVolume, self).__init__(**kwargs) def _new_dir(self, new_name): ''' Returns a new directory path based on the new_name. This is a helper method for moving file images during vm renaming. ''' old_dir = os.path.dirname(self.path) return os.path.join(os.path.dirname(old_dir), new_name) class SizeMixIn(FileVolume): ''' A mix in which expects a `size` param to be > 0 on initialization and provides a usage property wrapper. ''' def __init__(self, size=0, **kwargs): assert size, 'Empty size provided' assert size > 0, 'Size for volume ' + kwargs['name'] + ' is <=0' super(SizeMixIn, self).__init__(size=int(size), **kwargs) @property def usage(self): ''' Returns the actualy used space ''' return get_disk_usage(self.vid) @property def config(self): ''' return config data for serialization to qubes.xml ''' return {'name': self.name, 'pool': self.pool, 'size': str(self.size), 'volume_type': self.volume_type} class ReadWriteFile(SizeMixIn): ''' Represents a readable & writable file image based volume ''' def __init__(self, **kwargs): super(ReadWriteFile, self).__init__(**kwargs) self.path = os.path.join(self.target_dir, self.name + '.img') self.vid = self.path def rename_target_dir(self, new_name, new_dir): ''' Called by :py:class:`FilePool` when a domain changes it's name ''' # pylint: disable=unused-argument old_path = self.path file_name = os.path.basename(self.path) new_path = os.path.join(new_dir, file_name) os.rename(old_path, new_path) self.target_dir = new_dir self.path = new_path self.vid = self.path def verify(self): ''' Verifies the volume. ''' if not os.path.exists(self.path): raise StoragePoolException('Missing image file: %s' % self.path) class ReadOnlyFile(FileVolume): ''' Represents a readonly file image based volume ''' usage = 0 def __init__(self, size=0, **kwargs): super(ReadOnlyFile, self).__init__(size=int(size), **kwargs) self.path = self.vid def rename_target_dir(self, old_name, new_name): """ Called by :py:class:`FilePool` when a domain changes it's name. Only copies the volume if it belongs to the domain being renamed. Currently if a volume is in a directory named the same as the domain, it's ”owned” by the domain. """ new_dir = self._new_dir(new_name) if os.path.basename(self.target_dir) == old_name: file_name = os.path.basename(self.path) new_path = os.path.join(new_dir, file_name) old_path = self.path os.rename(old_path, new_path) self.target_dir = new_dir self.path = new_path self.vid = self.path def verify(self): ''' Verifies the volume. ''' if not os.path.exists(self.path): raise StoragePoolException('Missing image file: %s' % self.path) class OriginFile(SizeMixIn): ''' Represents a readable, writeable & snapshotable file image based volume. This is used for TemplateVM's ''' script = 'block-origin' def __init__(self, **kwargs): super(OriginFile, self).__init__(**kwargs) self.path_origin = os.path.join(self.target_dir, self.name + '.img') self.path_cow = os.path.join(self.target_dir, self.name + '-cow.img') self.path = '%s:%s' % (self.path_origin, self.path_cow) self.vid = self.path_origin def commit(self): ''' Commit Template changes ''' raise NotImplementedError def rename_target_dir(self, old_name, new_name): ''' Called by :py:class:`FilePool` when a domain changes it's name. ''' # pylint: disable=unused-argument new_dir = self._new_dir(new_name) old_path_origin = self.path_origin old_path_cow = self.path_cow new_path_origin = os.path.join(new_dir, self.name + '.img') new_path_cow = os.path.join(new_dir, self.name + '-cow.img') os.rename(old_path_origin, new_path_origin) os.rename(old_path_cow, new_path_cow) self.target_dir = new_dir self.path_origin = new_path_origin self.path_cow = new_path_cow self.path = '%s:%s' % (self.path_origin, self.path_cow) self.vid = self.path_origin @property def usage(self): result = 0 if os.path.exists(self.path_origin): result += get_disk_usage(self.path_origin) if os.path.exists(self.path_cow): result += get_disk_usage(self.path_cow) return result def verify(self): ''' Verifies the volume. ''' if not os.path.exists(self.path_origin): raise StoragePoolException('Missing image file: %s' % self.path_origin) class SnapshotFile(FileVolume): ''' Represents a readonly snapshot of an :py:class:`OriginFile` volume ''' script = 'block-snapshot' rw = False usage = 0 def __init__(self, name=None, size=None, **kwargs): assert size super(SnapshotFile, self).__init__(name=name, size=int(size), **kwargs) self.path_origin = os.path.join(self.target_dir, name + '.img') self.path_cow = os.path.join(self.target_dir, name + '-cow.img') self.path = '%s:%s' % (self.path_origin, self.path_cow) self.vid = self.path_origin def verify(self): ''' Verifies the volume. ''' if not os.path.exists(self.path_origin): raise StoragePoolException('Missing image file: %s' % self.path_origin) class VolatileFile(SizeMixIn): ''' Represents a readable & writeable file based volume, which will be discarded and recreated at each startup. ''' def __init__(self, **kwargs): super(VolatileFile, self).__init__(**kwargs) self.path = os.path.join(self.target_dir, self.name + '.img') self.vid = self.path def rename_target_dir(self, old_name, new_name): ''' Called by :py:class:`FilePool` when a domain changes it's name. ''' # pylint: disable=unused-argument new_dir = self._new_dir(new_name) _remove_if_exists(self.path) file_name = os.path.basename(self.path) self.target_dir = new_dir new_path = os.path.join(new_dir, file_name) self.path = new_path self.vid = self.path def verify(self): ''' Verifies the volume. ''' pass def create_sparse_file(path, size): ''' Create an empty sparse file ''' if os.path.exists(path): raise IOError("Volume %s already exists", path) parent_dir = os.path.dirname(path) if not os.path.exists(parent_dir): os.makedirs(parent_dir) with open(path, 'a+b') as fh: fh.truncate(size) def get_disk_usage_one(st): '''Extract disk usage of one inode from its stat_result struct. If known, get real disk usage, as written to device by filesystem, not logical file size. Those values may be different for sparse files. :param os.stat_result st: stat result :returns: disk usage ''' try: return st.st_blocks * BLKSIZE except AttributeError: return st.st_size def get_disk_usage(path): '''Get real disk usage of given path (file or directory). When *path* points to directory, then it is evaluated recursively. This function tries estiate real disk usage. See documentation of :py:func:`get_disk_usage_one`. :param str path: path to evaluate :returns: disk usage ''' try: st = os.lstat(path) except OSError: return 0 ret = get_disk_usage_one(st) # if path is not a directory, this is skipped for dirpath, dirnames, filenames in os.walk(path): for name in dirnames + filenames: ret += get_disk_usage_one(os.lstat(os.path.join(dirpath, name))) return ret def create_dir_if_not_exists(path): """ Check if a directory exists in if not create it. This method does not create any parent directories. """ if not os.path.exists(path): os.mkdir(path) def copy_file(source, destination): '''Effective file copy, preserving sparse files etc.''' # We prefer to use Linux's cp, because it nicely handles sparse files assert os.path.exists(source), \ "Missing the source %s to copy from" % source assert not os.path.exists(destination), \ "Destination %s already exists" % destination parent_dir = os.path.dirname(destination) if not os.path.exists(parent_dir): os.makedirs(parent_dir) try: subprocess.check_call(['cp', '--reflink=auto', source, destination]) except subprocess.CalledProcessError: raise IOError('Error while copying {!r} to {!r}'.format(source, destination)) def _remove_if_exists(path): ''' Removes a file if it exist, silently succeeds if file does not exist ''' if os.path.exists(path): os.remove(path) def _check_path(path): ''' Raise an StoragePoolException if ``path`` does not exist''' if not os.path.exists(path): raise StoragePoolException('Missing image file: %s' % path) def _reset_volume(volume): ''' Remove and recreate a volatile volume ''' assert volume.volume_type == 'volatile', "Not a volatile volume" assert volume.size _remove_if_exists(volume.path) with open(volume.path, "w") as f_volatile: f_volatile.truncate(volume.size) return volume