 98f4028142
			
		
	
	
		98f4028142
		
	
	
	
	
		
			
			Also cleanup stale vifs using "xm network-detach ... -f" Fix iptables rules to support not only first vif of VM
		
			
				
	
	
		
			270 lines
		
	
	
		
			11 KiB
		
	
	
	
		
			Python
		
	
	
		
			Executable File
		
	
	
	
	
			
		
		
	
	
			270 lines
		
	
	
		
			11 KiB
		
	
	
	
		
			Python
		
	
	
		
			Executable File
		
	
	
	
	
| #!/usr/bin/python2.6
 | |
| #
 | |
| # The Qubes OS Project, http://www.qubes-os.org
 | |
| #
 | |
| # Copyright (C) 2010  Joanna Rutkowska <joanna@invisiblethingslab.com>
 | |
| # Copyright (C) 2010  Rafal Wojtczuk  <rafal@invisiblethingslab.com>
 | |
| #
 | |
| # This program is free software; you can redistribute it and/or
 | |
| # modify it under the terms of the GNU General Public License
 | |
| # as published by the Free Software Foundation; either version 2
 | |
| # of the License, or (at your option) any later version.
 | |
| #
 | |
| # This program is distributed in the hope that it will be useful,
 | |
| # but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
| # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
| # GNU General Public License for more details.
 | |
| #
 | |
| # You should have received a copy of the GNU General Public License
 | |
| # along with this program; if not, write to the Free Software
 | |
| # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 | |
| #
 | |
| #
 | |
| 
 | |
| from qubes.qubes import QubesVmCollection
 | |
| from qubes.qubes import QubesException
 | |
| from optparse import OptionParser
 | |
| import subprocess
 | |
| import socket
 | |
| import errno
 | |
| import dbus
 | |
| import time
 | |
| import os
 | |
| import os.path
 | |
| 
 | |
| qubes_guid_path = "/usr/bin/qubes_guid"
 | |
| qubes_clipd_path = "/usr/bin/qclipd"
 | |
| qrexec_client_path = "/usr/lib/qubes/qrexec_client"
 | |
| notify_object = None
 | |
| 
 | |
| # how long (in sec) to wait for VMs to shutdown
 | |
| # before killing them (when used with --wait option)
 | |
| shutdown_counter_max =  30
 | |
| 
 | |
| def tray_notify(str, label, timeout = 3000):
 | |
|     notify_object.Notify("Qubes", 0, label.icon, "Qubes", str, [], [], timeout, dbus_interface="org.freedesktop.Notifications")
 | |
| 
 | |
| def tray_notify_error(str, timeout = 3000):
 | |
|     notify_object.Notify("Qubes", 0, "dialog-error", "Qubes", str, [], [], timeout, dbus_interface="org.freedesktop.Notifications")
 | |
| 
 | |
| def actually_execute(domid, cmd, options):
 | |
|     args = [qrexec_client_path, "-d", domid, cmd]
 | |
|     if options.localcmd is not None:
 | |
|         args += [ "-l", options.localcmd]
 | |
|     if options.passio and not options.run_on_all_running:
 | |
|         os.execv(qrexec_client_path, args)
 | |
|         exit(1)
 | |
|     args += ["-e"]
 | |
|     subprocess.call(args)
 | |
| 
 | |
| def start_guid(vm, options):
 | |
|     if options.verbose:
 | |
|         print "--> Starting Qubes GUId..."
 | |
|     xid = vm.get_xid()
 | |
| 
 | |
|     retcode = subprocess.call ([qubes_guid_path, "-d", str(xid), "-c", vm.label.color, "-i", vm.label.icon, "-l", str(vm.label.index)])
 | |
|     if (retcode != 0) :
 | |
|         print "ERROR: Cannot start qubes_guid!"
 | |
|         if options.tray:
 | |
|             tray_notify_error ("ERROR: Cannot start qubes_guid!")
 | |
|         exit (1)
 | |
| 
 | |
|     if options.verbose:
 | |
|         print "--> Waiting for qubes-session..."
 | |
| 
 | |
|     subprocess.call([qrexec_client_path, "-d", str(xid), "user:echo $$ >> /tmp/qubes-session-waiter; [ ! -f /tmp/qubes-session-env ] && exec sleep 365d"])
 | |
| 
 | |
| 
 | |
| def vm_run_cmd(vm, cmd, options):
 | |
|     if options.shutdown:
 | |
|         if options.verbose:
 | |
|             print "Shutting down VM: '{0}'...".format(vm.name)
 | |
|         subprocess.call (["/usr/sbin/xm", "shutdown", vm.name])
 | |
|         return
 | |
| 
 | |
|     if options.pause:
 | |
|         if options.verbose:
 | |
|             print "Pausing VM: '{0}'...".format(vm.name)
 | |
|         subprocess.call (["/usr/sbin/xm", "pause", vm.name])
 | |
|         return
 | |
| 
 | |
|     if options.unpause:
 | |
|         if options.verbose:
 | |
|             print "UnPausing VM: '{0}'...".format(vm.name)
 | |
|         subprocess.call (["/usr/sbin/xm", "unpause", vm.name])
 | |
|         return
 | |
| 
 | |
|     if options.verbose:
 | |
|         print "Running command on VM: '{0}'...".format(vm.name)
 | |
| 
 | |
|     if not vm.is_running():
 | |
|         if not options.auto:
 | |
|             print "VM '{0}' is not running. Please start it first or use the '--auto' switch".format(vm.name)
 | |
|             exit (1)
 | |
|     	try:
 | |
|             if options.verbose:
 | |
|                 print "Starting the VM '{0}'...".format(vm.name)
 | |
|             if options.tray:
 | |
|                 tray_notify ("Starting the '{0}' VM...".format(vm.name), label=vm.label)
 | |
|             xid = vm.start(verbose=options.verbose)
 | |
| 
 | |
|         except (IOError, OSError, QubesException) as err:
 | |
|             print "ERROR: {0}".format(err)
 | |
|             if options.tray:
 | |
|                 tray_notify_error ("Error while starting the '{0}' VM: {1}".format(vm.name, err))
 | |
|             exit (1)
 | |
|         except (MemoryError) as err:
 | |
|             print "ERROR: {0}".format(err)
 | |
|             print "Close one or more running VMs and try again."
 | |
|             if options.tray:
 | |
|                 subprocess.call(["kdialog", "--error", "Not enough memory to start '{0}' VM! Close one or more running VMs and try again.".format(vm.name)])
 | |
|             exit (1)
 | |
| 
 | |
|         if os.getenv("DISPLAY") is not None:
 | |
|             start_guid(vm, options)
 | |
| 
 | |
|         actually_execute(str(xid), cmd, options);
 | |
| 
 | |
|     else: # VM already running...
 | |
|         xid = vm.get_xid()
 | |
|         if os.getenv("DISPLAY") is not None and not os.path.isfile("/var/run/qubes/guid_running.{0}".format(xid)):
 | |
|             start_guid(vm, options)
 | |
|         actually_execute(str(xid), cmd, options);
 | |
| 
 | |
| def main():
 | |
|     usage = "usage: %prog [options] [<vm-name>] [<cmd>]"
 | |
|     parser = OptionParser (usage)
 | |
|     parser.add_option ("-q", "--quiet", action="store_false", dest="verbose", default=True)
 | |
|     parser.add_option ("-a", "--auto", action="store_true", dest="auto", default=False,
 | |
|                        help="Auto start the VM if not running")
 | |
|     parser.add_option ("-u", "--user", action="store", dest="user", default="user",
 | |
|                        help="Run command in a VM as a specified user")
 | |
|     parser.add_option ("--tray", action="store_true", dest="tray", default=False,
 | |
|                        help="Use tray notifications instead of stdout" )
 | |
|  
 | |
|     parser.add_option ("--all", action="store_true", dest="run_on_all_running", default=False,
 | |
|                       help="Run command on all currently running VMs (or all paused, in case of --unpause)")
 | |
| 
 | |
|     parser.add_option ("--exclude", action="append", dest="exclude_list",
 | |
|                        help="When --all is used: exclude this VM name (might be repeated)")
 | |
| 
 | |
|     parser.add_option ("--wait", action="store_true", dest="wait_for_shutdown", default=False,
 | |
|                       help="Wait for the VM(s) to shutdown")
 | |
| 
 | |
|     parser.add_option ("--shutdown", action="store_true", dest="shutdown", default=False,
 | |
|                       help="Do 'xm shutdown' for the VM(s) (can be combined this with --all and --wait)")
 | |
| 
 | |
|     parser.add_option ("--pause", action="store_true", dest="pause", default=False,
 | |
|                       help="Do 'xm pause' for the VM(s) (can be combined this with --all and --wait)")
 | |
| 
 | |
|     parser.add_option ("--unpause", action="store_true", dest="unpause", default=False,
 | |
|                       help="Do 'xm unpause' for the VM(s) (can be combined this with --all and --wait)")
 | |
| 
 | |
|     parser.add_option ("--pass_io", action="store_true", dest="passio", default=False,
 | |
|                       help="Pass stdin/stdout/stderr from remote program")
 | |
| 
 | |
|     parser.add_option ("--localcmd", action="store", dest="localcmd", default=None,
 | |
|                       help="With --pass_io, pass stdin/stdout/stderr to the given program")
 | |
| 
 | |
|     parser.add_option ("--force", action="store_true", dest="force", default=False,
 | |
|                       help="Force operation, even if may damage other VMs (eg shutdown of NetVM)")
 | |
| 
 | |
|     (options, args) = parser.parse_args ()
 | |
| 
 | |
| 
 | |
|     if (options.shutdown or options.pause or options.unpause):
 | |
|         takes_cmd_argument = False
 | |
|     else:
 | |
|         takes_cmd_argument = True
 | |
| 
 | |
|     if options.run_on_all_running:
 | |
|         if len(args) < 1 and takes_cmd_argument:
 | |
|             parser.error ("You must provide a command to execute on all the VMs.")
 | |
|         if len(args) > 1 or ((not takes_cmd_argument) and len(args) > 0):
 | |
|             parser.error ("To many arguments...")
 | |
|         cmdstr = args[0] if takes_cmd_argument else None
 | |
|     else:
 | |
|         if len (args) < 1 and not takes_cmd_argument:
 | |
|             parser.error ("You must specify the VM name to shutdown/pause/unpause.")
 | |
|         if len (args) < 2 and takes_cmd_argument:
 | |
|             parser.error ("You must specify the VM name and the command to execute in the VM.")
 | |
|         if len (args) > 2 or ((not takes_cmd_argument) and len(args) > 1):
 | |
|             parser.error ("To many arguments...")
 | |
|         vmname = args[0]
 | |
|         cmdstr = args[1] if takes_cmd_argument else None
 | |
| 
 | |
|     if options.tray:
 | |
|         global notify_object
 | |
|         notify_object = dbus.SessionBus().get_object("org.freedesktop.Notifications", "/org/freedesktop/Notifications")
 | |
| 
 | |
|     qvm_collection = QubesVmCollection()
 | |
|     qvm_collection.lock_db_for_reading()
 | |
|     qvm_collection.load()
 | |
|     qvm_collection.unlock_db()
 | |
| 
 | |
|     vms_list = []
 | |
|     if options.run_on_all_running:
 | |
|         all_vms = [vm for vm in qvm_collection.values()]
 | |
|         for vm in all_vms:
 | |
|             if options.exclude_list is not None and vm.name in options.exclude_list:
 | |
|                 continue
 | |
|             if vm.qid == 0:
 | |
|                 continue
 | |
|             if (options.unpause and vm.is_paused()) or (not options.unpause and  vm.is_running()):
 | |
|                 vms_list.append (vm)
 | |
|     else:
 | |
|         vm = qvm_collection.get_vm_by_name(vmname)
 | |
|         if vm is None:
 | |
|             print "A VM with the name '{0}' does not exist in the system!".format(vmname)
 | |
|             exit(1)
 | |
|         vms_list.append(vm)
 | |
|     
 | |
|         # If stopping NetVM - stop connected VMs too
 | |
|         if options.shutdown and vm.is_netvm():
 | |
|             connected_vms =  [vm for vm in qvm_collection.get_vms_connected_to(vm.qid) if vm.is_running()]
 | |
|             if connected_vms and not options.force:
 | |
|                 print "ERROR: There are other VMs connected to this VM, "
 | |
|                 print "       shutdown them first or use --force option"
 | |
|                 print "VMs list: " + str([vm.name for vm in connected_vms])
 | |
|                 exit(1)
 | |
| 
 | |
|     if takes_cmd_argument:
 | |
|         cmd = "{user}:{cmd}".format(user=options.user, cmd=cmdstr)
 | |
|     else:
 | |
|         cmd = None
 | |
| 
 | |
|     for vm in vms_list:
 | |
|         vm_run_cmd(vm, cmd, options)
 | |
| 
 | |
| 
 | |
|     if options.wait_for_shutdown:
 | |
|         if options.verbose:
 | |
|             print "Waiting for the VM(s) to shutdown..."
 | |
|         shutdown_counter = 0
 | |
| 
 | |
|         while len (vms_list):
 | |
|             if options.verbose:
 | |
|                 print "Waiting for VMs: ", [vm.name for vm in vms_list] 
 | |
|             for vm in vms_list:
 | |
|                 if not vm.is_running():
 | |
|                     vms_list.remove (vm)
 | |
|                 if shutdown_counter > shutdown_counter_max:
 | |
|                     # kill the VM
 | |
|                     if options.verbose:
 | |
|                         print "Killing the (apparently hanging) VM '{0}'...".format(vm.name)
 | |
|                     vm.force_shutdown()
 | |
|                     #vms_list.remove(vm)
 | |
| 
 | |
|             shutdown_counter += 1
 | |
|             time.sleep (1)
 | |
|         exit (0) # there is no point in executing the other daemons in the case of --wait
 | |
| 
 | |
|     retcode = subprocess.call([qubes_clipd_path])
 | |
|     if retcode != 0:
 | |
|         print "ERROR: Cannot start qclipd!"
 | |
|         if options.tray:
 | |
|             tray_notify ("ERROR: Cannot start the Qubes Clipboard Notifier!")
 | |
| 
 | |
| 
 | |
| main()
 |