core-admin/qvm-tools/qvm-usb

#!/usr/bin/python2
# -*- encoding: utf8 -*-
#
# The Qubes OS Project, http://www.qubes-os.org
#
# Copyright (C) 2010  Marek Marczykowski <marmarek@invisiblethingslab.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
#

from qubes.qubes import QubesVmCollection, QubesException
from qubes.qubesutils import usb_list,usb_attach,usb_detach,usb_detach_all,usb_check_attached
from optparse import OptionParser
import sys
import os

def main():
    usage = "usage: %prog -l [options]\n"\
            "usage: %prog -a [options] <vm-name> <device-vm-name>:<device>\n"\
            "usage: %prog -d [options] <device-vm-name>:<device>\n"\
            "List/set VM USB devices."
#            "usage: %prog -d [options] <vm-name>\n"\

    parser = OptionParser (usage)
    parser.add_option ("-l", "--list", action="store_true", dest="do_list", default=False)
    parser.add_option ("-a", "--attach", action="store_true", dest="do_attach", default=False)
    parser.add_option ("-d", "--detach", action="store_true", dest="do_detach", default=False)
#    parser.add_option ("-f", "--frontend", dest="frontend", 
#                        help="Specify device id at destination VM [default: first unused]")
    parser.add_option ("--no-auto-detach", dest="auto_detach", action="store_false", default=True,
                        help="Fail when device already connected to other VM")
    parser.add_option ("--force-root", action="store_true", dest="force_root", default=False,
                       help="Force to run, even with root privileges")

    (options, args) = parser.parse_args ()

    if hasattr(os, "geteuid") and os.geteuid() == 0:
        if not options.force_root:
            print >> sys.stderr, "*** Running this tool as root is strongly discouraged, this will lead you in permissions problems."
            print >> sys.stderr, "Retry as unprivileged user."
            print >> sys.stderr, "... or use --force-root to continue anyway."
            exit(1)

    if options.do_list + options.do_attach + options.do_detach > 1:
        print >> sys.stderr, "Only one of -l -a -d is allowed!"
        exit (1)

    qvm_collection = QubesVmCollection()
    qvm_collection.lock_db_for_reading()
    qvm_collection.load()
    qvm_collection.unlock_db()

    if options.do_attach:
        if (len (args) != 2):
            parser.error ("You must provide vm name and device!")
        vm = qvm_collection.get_vm_by_name(args[0])
        if vm is None:
            parser.error ("Invalid VM name: %s" % args[0])

        # FIXME: here we assume that device is always in form "domain:dev",
        # which can be changed in the future
        if args[1].find(":") < 0:
            parser.error("Invalid device syntax: %s" % args[1])
        backend_vm = qvm_collection.get_vm_by_name(args[1].split(":")[0])
        if backend_vm is None:
            parser.error("No such VM: {}".format(args[1].split(":")[0]))
        dev_list = usb_list(qvm_collection, vm=backend_vm)
        if not args[1] in dev_list.keys():
            parser.error("Invalid device name: %s" % args[1])
        dev = dev_list[args[1]]
        assert backend_vm is not None

        kwargs = {}
#        if options.frontend:
#            kwargs['frontend'] = options.frontend
        kwargs['auto_detach'] = options.auto_detach
        try:
            usb_attach(qvm_collection, vm, dev, **kwargs)
        except QubesException as e:
            print >> sys.stderr, "ERROR: %s" % str(e)
            sys.exit(1)
    elif options.do_detach:
        if (len (args) < 1):
            parser.error ("You must provide device or vm name!")
        if len(args) > 1:
            parser.error ("Too many parameters")
        # Check if provided name is VM
        vm = qvm_collection.get_vm_by_name(args[0])
        if vm is not None:
            #kwargs = {}
            #if options.frontend:
            #    kwargs['frontend'] = options.frontend
            #    usb_detach(vm, **kwargs)
            #else:
            usb_detach_all(qvm_collection, vm)
        else:
            # Maybe usbvm:device?

            # FIXME: nasty copy-paste from attach code half a page above
            # FIXME: here we assume that device is always in form "domain:dev",
            # which can be changed in the future
            if args[0].find(":") < 0:
                parser.error("Invalid device syntax: %s" % args[0])
            backend_vm = qvm_collection.get_vm_by_name(args[0].split(":")[0])
            if backend_vm is None:
                parser.error("No such VM: {}".format(args[0].split(":")[0]))
            dev_list = usb_list(qvm_collection, vm=backend_vm)
            if not args[0] in dev_list.keys():
                parser.error("Invalid device name: %s" % args[0])
            dev = dev_list[args[0]]
            attached_to = usb_check_attached(qvm_collection, dev)
            if attached_to is None:
                print >> sys.stderr, "WARNING: Device not connected to any VM"
                exit(0)
            usb_detach(qvm_collection, attached_to, dev)
    else:
        if len(args) > 0:
            parser.error("Too many parameters")
        # do_list
        for dev in usb_list(qvm_collection).values():
            attached_to = dev['connected-to']
            attached_to_str = ""
            if attached_to:
                attached_to_str = " (attached to %s)" % (attached_to.name)
            print "%s\t%s%s" % (dev['name'], dev['desc'], attached_to_str)
        exit (0)

main()