b7f0cf7d82
Provide an API for use QubesDB.watch() inside of qubesd. Fixes QubesOS/qubes-issues#2940
190 lines
5.7 KiB
Python
190 lines
5.7 KiB
Python
#
|
|
# The Qubes OS Project, https://www.qubes-os.org/
|
|
#
|
|
# Copyright (C) 2010-2015 Joanna Rutkowska <joanna@invisiblethingslab.com>
|
|
# Copyright (C) 2013-2015 Marek Marczykowski-Górecki
|
|
# <marmarek@invisiblethingslab.com>
|
|
# Copyright (C) 2014-2015 Wojtek Porczyk <woju@invisiblethingslab.com>
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License along
|
|
# with this program; if not, write to the Free Software Foundation, Inc.,
|
|
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
#
|
|
|
|
''' This module contains the AdminVM implementation '''
|
|
|
|
import libvirt
|
|
import qubes
|
|
import qubes.exc
|
|
import qubes.vm
|
|
|
|
class AdminVM(qubes.vm.BaseVM):
|
|
'''Dom0'''
|
|
|
|
dir_path = None
|
|
|
|
name = qubes.property('name',
|
|
default='dom0', setter=qubes.property.forbidden)
|
|
|
|
label = qubes.property('label',
|
|
setter=qubes.vm.setter_label,
|
|
saver=(lambda self, prop, value: 'label-{}'.format(value.index)),
|
|
doc='''Colourful label assigned to VM. This is where the colour of the
|
|
padlock is set.''')
|
|
|
|
qid = qubes.property('qid',
|
|
default=0, setter=qubes.property.forbidden)
|
|
|
|
uuid = qubes.property('uuid',
|
|
default='00000000-0000-0000-0000-000000000000',
|
|
setter=qubes.property.forbidden)
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
super().__init__(*args, **kwargs)
|
|
|
|
self._qdb_connection = None
|
|
self._libvirt_domain = None
|
|
|
|
if not self.app.vmm.offline_mode:
|
|
self.start_qdb_watch('dom0')
|
|
|
|
def __str__(self):
|
|
return self.name
|
|
|
|
def __lt__(self, other):
|
|
# order dom0 before anything
|
|
return self.name != other.name
|
|
|
|
@property
|
|
def attached_volumes(self):
|
|
return []
|
|
|
|
@property
|
|
def xid(self):
|
|
'''Always ``0``.
|
|
|
|
.. seealso:
|
|
:py:attr:`qubes.vm.qubesvm.QubesVM.xid`
|
|
'''
|
|
return 0
|
|
|
|
@property
|
|
def libvirt_domain(self):
|
|
'''Libvirt object for dom0.
|
|
|
|
.. seealso:
|
|
:py:attr:`qubes.vm.qubesvm.QubesVM.libvirt_domain`
|
|
'''
|
|
if self._libvirt_domain is None:
|
|
self._libvirt_domain = self.app.vmm.libvirt_conn.lookupByID(0)
|
|
return self._libvirt_domain
|
|
|
|
@staticmethod
|
|
def is_running():
|
|
'''Always :py:obj:`True`.
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.is_running`
|
|
'''
|
|
return True
|
|
|
|
@staticmethod
|
|
def get_power_state():
|
|
'''Always ``'Running'``.
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.get_power_state`
|
|
'''
|
|
return 'Running'
|
|
|
|
@staticmethod
|
|
def get_mem():
|
|
'''Get current memory usage of Dom0.
|
|
|
|
Unit is KiB.
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.get_mem`
|
|
'''
|
|
|
|
# return psutil.virtual_memory().total/1024
|
|
with open('/proc/meminfo') as file:
|
|
for line in file:
|
|
if line.startswith('MemTotal:'):
|
|
return int(line.split(':')[1].strip().split()[0])
|
|
raise NotImplementedError()
|
|
|
|
def get_mem_static_max(self):
|
|
'''Get maximum memory available to Dom0.
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.get_mem_static_max`
|
|
'''
|
|
if self.app.vmm.offline_mode:
|
|
# default value passed on xen cmdline
|
|
return 4096
|
|
else:
|
|
try:
|
|
return self.app.vmm.libvirt_conn.getInfo()[1]
|
|
except libvirt.libvirtError as e:
|
|
self.log.warning('Failed to get memory limit for dom0: %s', e)
|
|
return 4096
|
|
|
|
def verify_files(self):
|
|
'''Always :py:obj:`True`
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.verify_files`
|
|
''' # pylint: disable=no-self-use
|
|
return True
|
|
|
|
def start(self, start_guid=True, notify_function=None,
|
|
mem_required=None):
|
|
'''Always raises an exception.
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.start`
|
|
''' # pylint: disable=unused-argument,arguments-differ
|
|
raise qubes.exc.QubesVMError(self, 'Cannot start Dom0 fake domain!')
|
|
|
|
def suspend(self):
|
|
'''Does nothing.
|
|
|
|
.. seealso:
|
|
:py:meth:`qubes.vm.qubesvm.QubesVM.suspend`
|
|
'''
|
|
raise qubes.exc.QubesVMError(self, 'Cannot suspend Dom0 fake domain!')
|
|
|
|
@property
|
|
def icon_path(self):
|
|
return None
|
|
|
|
@property
|
|
def untrusted_qdb(self):
|
|
'''QubesDB handle for this domain.'''
|
|
if self._qdb_connection is None:
|
|
import qubesdb # pylint: disable=import-error
|
|
self._qdb_connection = qubesdb.QubesDB(self.name)
|
|
return self._qdb_connection
|
|
|
|
|
|
# def __init__(self, **kwargs):
|
|
# super(QubesAdminVm, self).__init__(qid=0, name="dom0", netid=0,
|
|
# dir_path=None,
|
|
# private_img = None,
|
|
# template = None,
|
|
# maxmem = 0,
|
|
# vcpus = 0,
|
|
# label = defaults["template_label"],
|
|
# **kwargs)
|