143 lines
		
	
	
		
			5.3 KiB
		
	
	
	
		
			Python
		
	
	
		
			Executable File
		
	
	
	
	
			
		
		
	
	
			143 lines
		
	
	
		
			5.3 KiB
		
	
	
	
		
			Python
		
	
	
		
			Executable File
		
	
	
	
	
| #!/usr/bin/python2
 | |
| # -*- encoding: utf8 -*-
 | |
| #
 | |
| # The Qubes OS Project, http://www.qubes-os.org
 | |
| #
 | |
| # Copyright (C) 2011  Marek Marczykowski <marmarek@mimuw.edu.pl>
 | |
| #
 | |
| # This program is free software; you can redistribute it and/or
 | |
| # modify it under the terms of the GNU General Public License
 | |
| # as published by the Free Software Foundation; either version 2
 | |
| # of the License, or (at your option) any later version.
 | |
| #
 | |
| # This program is distributed in the hope that it will be useful,
 | |
| # but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
| # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
| # GNU General Public License for more details.
 | |
| #
 | |
| # You should have received a copy of the GNU General Public License
 | |
| # along with this program; if not, write to the Free Software
 | |
| # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 | |
| #
 | |
| #
 | |
| 
 | |
| from qubes.qubes import QubesVmCollection
 | |
| from qubes.qubes import QubesException
 | |
| from optparse import OptionParser
 | |
| import subprocess
 | |
| import os
 | |
| import time
 | |
| import glob
 | |
| import sys
 | |
| 
 | |
| def main():
 | |
|     usage = "usage: %prog [options] <template-name>"
 | |
|     parser = OptionParser (usage)
 | |
|     parser.add_option ("--force", action="store_true", dest="force", default=False,
 | |
|             help="Do not prompt for confirmation")
 | |
| 
 | |
|     (options, args) = parser.parse_args ()
 | |
|     if (len (args) != 1):
 | |
|         parser.error ("You must specify TemplateVM name!")
 | |
|     vmname = args[0]
 | |
| 
 | |
|     if hasattr(os, "geteuid") and os.geteuid() != 0:
 | |
|         print >> sys.stderr, "ERROR: This tool must be run as root!"
 | |
|         exit(1)
 | |
| 
 | |
|     qvm_collection = QubesVmCollection()
 | |
|     qvm_collection.lock_db_for_reading()
 | |
|     qvm_collection.load()
 | |
|     qvm_collection.unlock_db()
 | |
| 
 | |
|     vm = qvm_collection.get_vm_by_name(vmname)
 | |
|     if vm is None:
 | |
|         print >> sys.stderr, "A VM with the name '{0}' does not exist in the system.".format(vmname)
 | |
|         exit(1)
 | |
| 
 | |
|     if not vm.is_template():
 | |
|         print >> sys.stderr, "A VM '{0}' is not template.".format(vmname)
 | |
|         exit(1)
 | |
| 
 | |
|     if vm.is_running():
 | |
|         print >> sys.stderr, "You must stop VM first."
 | |
|         exit(1)
 | |
| 
 | |
|     oldcow_img = vm.rootcow_img + '.old'
 | |
|     oldcow_stat = os.stat(oldcow_img)
 | |
|     oldcow_time_str = time.strftime("%F %T", time.gmtime(oldcow_stat.st_mtime))
 | |
| 
 | |
|     root_stat = os.stat(vm.root_img)
 | |
|     old_dmdev = "/dev/mapper/snapshot-{0:x}:{1}-{2:x}:{3}".format(
 | |
|         root_stat[2], root_stat[1],
 | |
|         oldcow_stat[2], oldcow_stat[1])
 | |
| 
 | |
|     snapshots = glob.glob('/dev/mapper/snapshot-{0:x}:{1}-*'.format(root_stat[2], root_stat[1]))
 | |
|     snapshot_present = False
 | |
|     for dev in snapshots:
 | |
|         if dev == old_dmdev:
 | |
|             snapshot_present = True
 | |
|         else:
 | |
|             print >> sys.stderr, "ERROR: You must shutdown all VMs running system older/newer than last good one."
 | |
|             exit(1)
 | |
| 
 | |
|     root_blocks = os.path.getsize(vm.root_img)/512
 | |
|     if not snapshot_present:
 | |
|         p = subprocess.Popen (["/etc/xen/scripts/block-snapshot", "prepare",
 | |
|             "snapshot", "{0}:{1}".format(vm.root_img, oldcow_img)],
 | |
|             stdout=subprocess.PIPE)
 | |
|         result = p.communicate()
 | |
|         if result[0].strip() != old_dmdev:
 | |
|             print >> sys.stderr, "ERROR: Cannot create snapshot device ({0} != {1})".format(
 | |
|                     result[0].strip(), old_dmdev)
 | |
|             exit(1)
 | |
| 
 | |
| 
 | |
|     print "INFO: Reverting template changes done at {0}".format(oldcow_time_str)
 | |
|     if not options.force:
 | |
|         prompt = raw_input ("Do you want to proceed? [y/N] ")
 | |
|         if not (prompt == "y" or prompt == "Y"):
 | |
|             exit (0)
 | |
| 
 | |
|     p = subprocess.Popen(["/sbin/dmsetup", "table", old_dmdev], stdout=subprocess.PIPE)
 | |
|     result = p.communicate()
 | |
|     dm_table = result[0]
 | |
|     dm_table_elements = dm_table.split(' ')
 | |
|     if dm_table_elements[2] != 'snapshot':
 | |
|         print >> sys.stderr, "ERROR: Unexpected device-mapper type ({0}). Template changes reverting already running".format(dm_table_elements[2])
 | |
|         exit(1)
 | |
| 
 | |
|     dm_table_elements[2] = 'snapshot-merge'
 | |
|     dm_table = ' '.join(dm_table_elements)
 | |
|     subprocess.check_call(["/sbin/dmsetup", "reload", old_dmdev, "--table", dm_table])
 | |
|     # Reload new table into LIVE slot
 | |
|     subprocess.check_call(["/sbin/dmsetup", "suspend", old_dmdev])
 | |
|     subprocess.check_call(["/sbin/dmsetup", "resume", old_dmdev])
 | |
|     # Wait to snapshot merge completed
 | |
|     while True:
 | |
|         p = subprocess.Popen(["/sbin/dmsetup", "status", old_dmdev], stdout=subprocess.PIPE)
 | |
|         result = p.communicate()
 | |
|         status_details = result[0].split(' ')
 | |
|         blocks_used = status_details[3].split('/')[0]
 | |
|         if int(blocks_used) == int(status_details[4]):
 | |
|             break
 | |
|         print "\r-> Reverting template changes: {0} of {1} left".format(blocks_used, root_blocks),
 | |
|         time.sleep(1)
 | |
|     print "\r-> Reverting template changes: done                  ".format(blocks_used, root_blocks)
 | |
| 
 | |
|     dm_table_elements[2] = 'snapshot'
 | |
|     dm_table = ' '.join(dm_table_elements)
 | |
|     subprocess.check_call(["/sbin/dmsetup", "reload", old_dmdev, "--table", dm_table])
 | |
|     # Reload new table into LIVE slot
 | |
|     subprocess.check_call(["/sbin/dmsetup", "suspend", old_dmdev])
 | |
|     subprocess.check_call(["/sbin/dmsetup", "resume", old_dmdev])
 | |
| 
 | |
|     subprocess.check_call(["/etc/xen/scripts/block-snapshot", "cleanup",
 | |
|             "snapshot", old_dmdev])
 | |
| 
 | |
|     os.rename(oldcow_img, vm.rootcow_img)
 | |
|     exit(0)
 | |
| 
 | |
| 
 | |
| main()
 | 
