^?(` b d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
mc mZ d dlmZ d dlmZ d dlmZ d dlmZmZmZmZmZm Z d dl Z d dl Z d dl Z d dl Z d dl!m"Z" d dl#m$Z$m%Z%m&Z&m'Z' d dl(m)Z) d d l*m+Z+ d d
l,m-Z- d d l.m/Z/m0Z0 d d l1m2Z2 d d
l3m4Z4 d dl5m6Z6m7Z7m8Z8 d dl9m:Z:m;Z; d dl mZ>m?Z?m@Z@ d dlAmBZBmCZC d dlDmEZF d dlDmGZH d dlImJZJ dZKdZLdZMdZNdZOdZPdZQd ZRd ZS eTejU V d d ZWd ZX e&e"jY sdZZdZ[n e?eW ZZ e=eZ! Z[ G d" d#e Z\d$e\fd%Z]d& Z^d' Z_d( Z`d) Zad* Zbd+ Zcd,e)fd-Zddd.Zed/ Zfd0d1d0d2d d3d d4d5Zgd3Zhd6d1d d d d d d d5Zig d7Zjd8akdaldamd9and9aoi apd9aqd9ard9asd9atd9aud9avd9awd:axd9ayd9azd9a{d; Z|d< Z}d= Z~dd>Zd? Zd@ Z e p e ZddAZdB ZdC ZdD ZddEZdF Ze j dG ZdHe\fdIZdJ ZddKZdL ZdM ZddNZdO ZdP ZdQ ZdReTdSefdTZdU ZdV ZdWeeeTf fdXZdY Zdd[Zd\ Zdd]Zdd^Zd_ Zd` Zda ZddbZddcZdd Zde Zdf ZddgZdh Zi adiZdjZddkZdl ZdmeTd$efdnZd$efdoZ G dp dqe ZdmeTd$dfdrZddsZdt Zdu Zdv Zdw Zddyedzed{eTd$efd|Zd} Zd~ ZddZefdZddZd Zd Zd Zd ZddZd Zd Zd$eeef fdZddZd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd ZddZd ZddZddZddZdeded$eeT fdZd Zd Zd Zd Zd ZddZd Zd Zd ZddZd Zd Zd Zdadadadadad ZddZd ZddZd Zd Zd Zd Zd Zd Zd Zd Zd ZddZd Zd Z dS ) N)range)partial)PAGESIZE)DictListOptionalTextTuple TypedDict)Feature)adminsget_main_username_by_uidis_panel_feature_supportedreseller_users)
EncodingError) acquire_lock)detect_panelclass) reseller_limits_disabled_post reseller_limits_enabled_post) exec_utility)get_subprocess_logger)BadVeConfigExceptionget_xml_configsave_xml)LockFailedExceptionsetup_global_lock)LVP_XML_TAG_NAMELveNameMapPyLve
PyLveError)create_dir_securewrite_file_via_tempfile)config) id_registry)LvdErrorz%/usr/bin/getcontrolpaneluserspackagesz
/proc/cpuinfoi'
VE_DEFAULTFz /bin/umountz"/etc/container/exclude_mounts.confmultisingle PYLVE_DEBUGplesk_id)debug)pyc \ e Zd ZU eez ed< eed< eed< eed< eed< eed< eed< dS ) LiblveSettingsls_cpuls_cpusls_io ls_enters
ls_memory_phyls_nprocls_iopsN)__name__
__module__ __qualname__intstr__annotations__ py/lvectllib.pyr/ r/ M sY #I
LLL JJJNNNMMM
LLLLLr> r/ returnc D dddddddd}| | |S )Nr )r0 r1 r2 r3 r4 r5 r6 )update)kwargsdefaultss r? create_liblve_settingsrE W s< H
OOF Or> c t t r t j S g S )zRaw kernel LVP list (/proc/lve/resellers), including per-user
domain-isolation LVPs. Reserved for isolation-aware internals; reseller-
management code MUST iterate reseller_lvp_list() instead.)lvereseller_limit_supportedproc lvp_id_listr= r> r? lvp_listrK e s1 ##%% &x##%%%
Ir> c B t t j S )u Per-user domain-isolation LVP ids (lvp).
The kernel registers an LVP named lvp in /proc/lve/resellers for every
user that has per-domain isolation allowed/enabled (a marker in the
websiteisolation config), even when the user has 0 registered domains.
These are not resellers — they are maintained by the isolation feature —
so reseller-management code must never treat them as reseller LVPs.
This is the single source of truth for "is this kernel LVP an isolation
LVP"; it mirrors the same find_all_lve_ids_with_config() signal that
lveapi uses to build the nested LVP/LVE hierarchy. Note this is broader
than _is_domain_isolated_user(), which additionally requires >= 1 domain:
the kernel LVP exists on the marker alone (see CLOS-4513).
Disk-only: callable from non-lvectl entrypoints (cloudlinux-packages,
clsummary) that do not initialize pylve, so this MUST NOT make a kernel
call. ws_config.find_all_lve_ids_with_config() reads /etc/container/lvd_ids
and returns [] when the directory is absent, which covers both "kernel
does not support domains" and "no isolation configured" without needing
lve_kapi_ver().
) frozenset ws_config find_all_lve_ids_with_configr= r> r? _isolation_lvp_idsrP n s , Y;== > >>r> c " | t v S )zKTrue if lvp_id is a per-user domain-isolation LVP (see _isolation_lvp_ids).)rP lvp_ids r? is_isolation_lvprT s ')) ))r> c T t fdt D S )aG Kernel reseller LVPs, excluding per-user domain-isolation LVPs.
Use this everywhere reseller-management code enumerates resellers (destroy
all, apply all, remove absent resellers, list-reseller, package limits,
summaries). Centralizing the phantom-isolation-LVP filter here means a new
reseller command cannot reintroduce the CLOS-4370/4390/4419/4513 class of
bug as long as it iterates this function instead of the raw lvp_list().
Backward compatible: on kernels without domain support the isolation set is
empty, so the result equals lvp_list().
c g | ]}|v| S r= r= ).0rS isolations r?
z%reseller_lvp_list.. s# G G GvvY/F/FF/F/F/Fr> )rP rK )rX s @r? reseller_lvp_listrZ s. #$$I G G G G G G GGr> c n t } | | S )zf
Get list of resellers with activated reseller limits
:return: list of pairs (name, uid)
)r
link_xml_nodeload_from_node)name_maps r? get_active_resellersr_ s1 yyH " " $ $$r> c 6 | d t D v S )z]
Check whether giver reseller has activated reseller limits or not
:return: bool
c 3 K | ] \ }}|V
d S Nr= )rW nameuids r? z,is_active_reseller_limits.. s& J JidCT J J J J J Jr> )r_
reseller_names r? is_active_reseller_limitsrh s%
J J3G3I3I J J J JJr> ec t j s| t r t ddt | g nt | t
j d dS )a"
Since cPanel user can corrupt config file for some user with wrong encodings,
we want to notify him that he should fix encoding problems with the link to documentation.
Print error message and exit with code 1 or raise given exception if it isn't cPanel.
:return: None
r( ERROR N) cldetectlib is_cpanelJSON json_formatr; printsysexitri s r? raise_cpanel_encoding_errorru sg " " G c!ff% ' ' ' ' aHQKKKKKr> c h t | dS # t $ r t dd Y dS w xY w)az
~~~~~~~~~~~~~~~~~~
!!! DEPRECATED !!!
~~~~~~~~~~~~~~~~~~
Please, use setup_global_lock instead if possible
Wrapper over setup_global_lock. If lock cannot be set,
it will write message and close app
The only reason why it is here is legacy function
check_result_and_exit that we use in TWO places
:type write: bool
:return: Nothing
rl zcan`t get lockN)r r check_result_and_exit)writes r? get_global_lockry sP 3% 3 3 3 a!12222223s 11c | dt j fvrJt rt t dd| g nt d| t
j | d S d S )Nr rk zlvectl: zlvectl: Error: )errnoENOSYSro rp MULTI_FORMATrq rr rs )resultmessages r? rw rw st
a%, ''' / w0D70D0D&E F F F F -G-- . . . ('r> rl i )cpuncpuioepmempmemnprociopsd )r r r r r r r r falsec
| a d S rb )ro ) json_flags r? set_jsonr s DDDr> c
| a d S rb )
BYTES_FLAG)
bytes_flags r? set_bytesr s JJJr> c t rt dk rd} n t dk rd} nt dk rd} nd} g dg dg dg d d
| }t r1| d d z }|d | d
gz ||d z S |S )N noiops_88 64)IDSPEEDPMEMVMEMEPNPROCIO)r r r r r r r IOPS)r r r r r )r r r r r rl CPU)NOIOPS LVE_VERSIONro index)versionfields speed_idxs r?
get_fieldsr $ s
+"" BBB
B
B
B
;
;
;
,
,
,
F CLL))A- z z"eW,vijj/AAB Mr> c | 3t j } | d t d | d an| at }|st d t ad S )Nr zget_lve_version failedzinit_lve() failed.)clcommonget_lve_version RuntimeErrorr pylve
initializeliblve_settings lve_settings)lve_ver
lve_statuss r? initr : s} *,, 1: 788 8 aj !!##J 1/000((**LLLr> c t j d } | dS t j | S # t
t f$ r<}t dt | t j
d Y d}~dS d}~ww xY w)z-Get cpu information from environment veriableCPU_DATANz.Invalid environment variable 'CPU_DATA' formatrl ) osenvirongetjsonloads TypeError
ValueErrorrq r; rr rs )packed_cpu_datari s r? _get_cpu_data_from_envr P s jnnZ00O tz/*** z "
@#a&&III s 9 B
1BBc i } i }d} t t dd 5 }|D ]}| s|| d| < |dz }i }&t | d dk r\| d d || d d < d || d d < d
d
d
n # 1 swxY w Y n<# t
$ r/ t
d t d t j d Y nw xY w|| d
d gS )zF
Parse /proc/cpuinfo
return [NumProc, frequency in MHZ]
r rutf-8encodingrI rl : r Nzlvectl: Error: Can`t open .proc0zcpu MHz) openCPUINFOstriplensplitIOErrorrq rr rs )cpuinfoprocinfonprocsflines r? get_cpu_datar ] s GH
F
'3
1
1
1 BQ
B
Bzz||
B/7GO6OO, #aZF !HH4::c??++q00?Czz#q?Q?W?W?Y?YC !3!9!9!;!;< c J t | } t }t |d }t j d| }|`t | dd }||dz k r|dz }|dk r't t t dz |z S dS dS )zd
Try converting cpu limit from SPEED in percentage of one CORE format to
kernel format.
r z\d+(?:\.\d+)?%$N%r r ) r; r r: r r floatreplacer r )r r r percents r? convert_from_speed_percentr s
t99DH x{ Dh)400G S"--.. TCZ SjG Q;;u[C /' 9::;; ;t 4r> c t | } t }t |d }t |d }t j dt j }| | }|| d }t | d }| dk r|dz }|||z k r||z }|dk r't t |t z |z S dS ) zQ
Try converting cpu limit from SPEED in mhz/gzh format to kernel format.
r rl z,(?P\d+(?:\.\d+)?)(?Pmhz|ghz)+$NsuffixfreqGHZi ) r; r r: r r compile
IGNORECASEr groupupperr r )r r r cpu_freqpatternr r r s r? convert_from_speed_hzr s t99DH x{ DXa[!!HjH"-XXG MM$ E X&&U[[(()) <<>>U " "$;D (T/ ! !d?D !88uTK /( :;;<< < 4r> c > t | pt | S )z}
Try converting cpu limit value from either SPEED limit format
(percentage of CORE or mhz/ghz) to kernel format.
)r r )r s r? convert_from_speedr s$ #4(( ' & &r> c z t | | }||S t | }||S t | }||S dS )z
Convert different variants of cpu limit to kmod ver 8 variant
:param data: Value in old CPU format or SPEED with % or mhz/ghz.
:param lncpu: Limit in old NCPU format.
:return: CPU limit in kmod ver 8+ format or None for bad format
N)r r r )r r from_cpufrom_speed_percent
from_speed_hzs r? convert_to_kernel_formatr sV $D%00H3D99%!!)$//M 4r> c p t }t |d }t | } d| v rOdt t t t | d |z z S t t t t | |z S )zm
convert speed to old cpu format
args: cpu limit in speed value
return: old cpu limit format
r *)r r: r; r lstrip)speedr r s r? speed_to_old_cpur s H E JJE
e||SU3u||C'8'8#9#9U#B C CDDEEEE s5Uu,--.. / //r> c # K t t } t || n2# t $ r% t j t
j d| d w xY w |V t | dS # t | w xY w)zF
Run subprocess in lve with pseudo-random id and given limits
z Unable to setup lve with id z-, something is wrong, check dmesg for detailsN)r r get_available_lve_id lve_setupr! syslog LOG_ALERT lve_destroy)settingslve_ids r?
temporary_lver
s
'
'
)
)F
))))
f& )Vv )V )V )V W W W
"
&!!!!!&!!!!s A /BB% % Cr c R t }t | d | d |_ | d |_ | d |_ | d |_ | d |_ t t j
d| d z t z |_ |S )
a
Just a nice user-friendly constructor of liblve_settings object
You can pass the following ls_cpu and ls_cpus values:
- in percents of one core (just ls_cpu='75%', ls_cpus will be ignored)
- in old 'CPU' format (two arguments, ls_cpu and ls_cpus required, both int)
r0 r1 r r2 r3 r5 r6 g ?r4 )
r r r r0 r2 r3 r5 r6 r: mathceilr r4 )r ss r? make_liblve_settingsr s A'(:(9BUVVVAHw AG;'AK*%AJ#AI$)B/)B$BX$MNNOOAO Hr> c t | d }|s.| d }t j | j }t | S )Niduser)r; getAttributepwdgetpwnampw_uidr: )ve_lve_elementuser_uid user_names r? get_ve_lve_user_uidr sV >..t4455H 2"//77 < **1 x==r> c dt |d i}| t k rt |d |d< || | t t j | dS )a
Print output in json as:
{"status": "ERROR/OK", "msg": "Some Message", "ext1": "foo", "ext2": "bar"}
where "status" and "msg" field are mandatory
:param str error_type: Either MULTI_ERROR or SINGLE_ERROR
:param list data: List with a status string and a message string
:param dict extensions: Some additional fields for the final json object
:return: None
statusr rl msgN)r; r} rB rq r dumps)
error_typer
extensionsr~ s r? rp rp sl DG
%F\!!DG u
j!!! $*V
r> c t t | d d ||< d S # t t
t f$ rp || ||< | | }| dt || | j
| Y d S # t $ r Y Y d S w xY ww xY w)Nr limit) r:
ve_defaultgetElementsByTagNamer r
IndexErrorr
createElement setAttributer; appendChild Exception)xml ve_defaultsve_cfgvaldefaultnodes r? check_def_valuer1 / s z > >s C CA F S ST[ \ \]] C
I . "3< C##C(( '#gcl"3"3444 COD ! ! ! ! ! ! DDD
s+ AA A C(B;;
C
C C
Cc * fd| j D S )Nc ^ g | ])}t |t j |j k '|*S r= )
isinstancer+ ElementtagName)rW _tags r? rY z"xml_filter_tag..= s7 Z Z Z!*Q *D*D ZVYIYIYAIYIYIYr> )
childNodes)r0 r8 s `r? xml_filter_tagr: < s Z Z Z Zt Z Z ZZr> c t | | D ]9}|| | s|| | |k r6|c S d S rb )r: hasAttributer )r0 r8 attrattr_val
child_nodes r? xml_filter_firstr@ @ sn $T3//
J$;$;D$A$A J$;$;D$A$AX$M$M r> c p t | || }|t | | S )N)r0 r8 r= )r@ r& r )r0 r8 r= filtered_child_nodes r? get_child_tag_atrrrC I s; *#DIII"ll + +D 1 11r> c x t | | d }| |t | dS )z
Find in children nodes node with tag and setup attribute
insted el.getElementsByTagName not search recursiveli in tree
r N)r: r( r; )r0 r8 r= r. first_child_nodes r? set_child_tag_atrrrF P s;
&dC003!!$C11111r> c t \ aadS # t $ rg} t r%t t dt | g n t t | t j
d Y d} ~ dS d} ~ ww xY w)zLoad config from ve.cfgrk rl N) r r- ve_lveconfigr ro rp r} r; rq rr rs rt s r? _load_config_wrapperrI Y s
- / / wA&7 8 8 8 8 #a&&MMM s
BA BBrS lvp_defaultsc z da | s"t t d d at S |r!t
d at S t t t dt | }|r | d d anPt t d r t
t ant t d d at S # t $ r@ t r't! dddg t# j d nt' d
Y nw xY wt S ) zLoad default limits
:param int lvp_id: lvp id
:param bool lvp_defaults: load reseller's default limits instead of global
:return: dict with default limits
truerD r r cloneNoder( WARNINGz default section error in ve.cfgrl z(warning: default section error in ve.cfg)ubcr: rH r$ LVE_DEFAULTr- r' LVP_DEFAULTr@ r r; r% hasattrrM r& ro rp rr rs rq )rS rJ defaults_root_nodes r? _load_default_limitsrT h s8 C> ' jAA!DJ --j99J -l > > > )-N!O P P P HQKKKK < = = = > s #C) "C) B C) )AD32D3c | t d t t t t t
t fD S )Nc 3 " K | ]
}|d k V dS )r Nr= )rW xs r? re z._all_config_elements_loaded.. s& jj1qBwjjjjjjr> )allve_lveve_lvp
ve_package ve_binaryve_enter_by_nameve_cfg_versionr= r> r? _all_config_elements_loadedr_ s. jjYHXZh ijjj j jjr> c t d at d at t at j j t t d } t | dk r | d a n9t
d a t t t d at d }t | dk r t! |d j j ndadS ) z$Load all config elements from ve.cfgrG packagez
enter-by-namer binaryr rl N)rH r% rY r[ r rZ rG mapr^ r\ r r] r- r' r) r\ r:
firstChild nodeValuer^ )enter_by_name_elemscfg_version_elemss r? _load_config_elementsrh s
.
.u
5
5F 229==J
.
./?
@
@FG""<000&;;OLL
!##.q1!//@@ !1222 55h??I %99)DDGJK\G]G]`aGaGaS*1-8BCCCghNNNr> default_limitsc 0 i a t t t t t | } |d t d d d }t |t d t d< n# t t t f$ r t | d t d t d< t d }| dt | d t | n# t $ r Y nw xY wY nw xY w t! t d d d t d
< n# t t t f$ r | d
t d
< t d }| d t | d
t | n# t $ r Y nw xY wY nw xY w |d t" d k r
|d
n |d
d
t$ i |d |d |d t' dS )z~Create ve_defaults dict with default values for all limits
:param dict default_limits: default limits for lve or lvp
)r+ r, r- r/ r )r. r r r# r other
maxentryprocsr r r )r. r/ r r r N)r, r r1 r$ r- r% r r r r& r r' r( r; r) r* r: r MEM_DEFAULT_CL5_check_defaults_for_nones)ri
check_def_valr r r s r? _load_ve_defaultsrq s K M Mf
//66q9FFwOO 5e;vCV W W W E
I . 5nU6KS^_eSf g g g E""5)) #nU&;"<"<=== " "3 ' ' ' ' D
? ? H H K X XYh i i j j D
I . *4 0 D
!
!'
*
*
^D-A)B)BCCC " "2 & & & & D
MdQ
%
%% )ABBBBMf Mg Mf so AB BED0/E0
D=:E<D==EEAF A*H);HH)
H# H)"H##H)(H)c t D ]^\ } }|d| d}t rt dd|g n"t j | d t j d _dS )z*Check that all default values are not NoneNzERROR: Incorrect z default valuer( rk
rl )r, itemsro rp rr stderrrx rs )keyvalueerr_msgs r? ro ro s "''))
U 9c999 - '7!3 4 4 4 4 J ^^^ , , , r> Tc t t | | }|st st t | dS )z
:param bool lvp_defaults: load reseller's default limits instead of global
:param int lvp_id: lvp id to load customise defaults
N)rI rT r_ rh rq )rS rJ load_config_elementsri s r? get_XML_cfgr{ sW )&,??N #>#@#@ n%%%%%r> c t t || d }||| < |S # t t t f$ r t || cY S w xY w)Nr# r8 r= )r: rC r r& r )r. elr,
setup_datarw s r? check_valuer sm %&rsAAABB
3
I . % % %;s#$$$$$%s %( ,AAc t j }| | | }t || dS )a5
This function is a pure workaround for our ugly globals-based API which
should be fixed partially with LU-496, because there is no clean way
to retrieve reseller's data from ve.cfg without touching globals
:param reseller: reseller name
:return: Nothing. It just updates some globals
rz N)lveapir r\ get_idr{ )resellerxml_config_load_elementsr^ reseller_ids r? _load_resellers_xml_datar sN ~ H //(++K 2JKKKKKKr> c
t j t a Kt }|v r | v r fd}nt j r| t
j | }d|j d}t |d 5 }|
}ddd n # 1 swxY w Y n# t $ r d}Y nw xY wd|vr#t j t j
d | d
fd }t D ]n} || r]t d | t t }
t! t# t% | d
d |
} | t d
< n # t& t( t* f$ r Y nw xY wt d| t t t, dk r t d| t t n
dt d< t! t% | dd } | t d< n # t& t( t* f$ r Y nw xY wt d| t t t d| t t t d| t t ndS dS )a
Put limit values that will be applied later in a global variable `setup_ve`.
:param plan_id: package
:param reseller:
If reseller is None we only inherit from admin packages.
In that case we ignore all tags in ve.cfg with a "reseller" attribute.
Nc h | d k o| d k S Nr r r )r~ plan_idr s r? is_needed_planz*prepare_setup_data..is_needed_plan: s1 t,,7cBOOJ z"/usr/local/directadmin/data/users/z
/user.confr r r zpackage=customzPackage for user with id z is incorrect, please recover it using Note from https://docs.cloudlinux.com/cloudlinux_os_components/#installation-enabling-and-disablingc b | d k o| d S r r r~ r s r? r z*prepare_setup_data..is_needed_planQ s/ t,,7[PZ@[@[<[[r> r r r# r} r r rL r r rk rl r r r r )copyr, r get_reseller_packages_maprm is_dar getpwuidpw_namer readr* r r r[ r r: r rC r r& r rO )
r r r res_pkg_dictr user_pwdfilenamer textr~ r r r s
`` r? prepare_setup_datar ' s. ;''J022 H $<$<LYaLbAbAb
d
d
d
d
d
d
d ""
v'9 "|F 3 3H `HDT ` ` `H h999 (Q vvxx( ( ( ( ( ( ( ( ( ( ( ( ( ( ( DDD
$4//M (tF t t t
\
\
\
\
\ A AB ~b!!
A#FB ZHH 67I"RW^e7f7f7fns t t tuuC(+Ju%%"J : DD"k:>>>6MM r;
CCCC()Ju% /o V V VWWB')Jt$$"J : DGRjAAAFB Z@@@FB Z@@@q H A AsZ 0B7
B+ B7 +B//B7 2B/3B7 7 CC(8E!!E;:E;
)G77HHc 6 t j t d| gt j t j 5 }| |j dk cd d d S # 1 swxY w Y d S # t $ r t ddt d| d Y d S w xY w)Nz-l)stdoutru r zfailed to run "z -l ")
subprocessPopenUMOUNTPIPE communicate
returncodeOSErrorrw )pathrI s r?
umount_dirr o s
I
T4 ? ?
( ?a'
( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( I I I b"GF"G"G"G"G"GHHHHHHIs4 3A. A! A. !A%%A. (A%)A. .&BBc R t j t sdS g } t t dd 5 }|D ]?}| }|r'| t j | @ ddd n # 1 swxY w Y n(# t $ r t ddt Y nw xY w| sdS t j t j t ddd 5 }d |
D }ddd n # 1 swxY w Y n'# t t f$ r t dd Y nw xY wd
}t | D ]=}d }|D ]1} | D ],}
|
| } | rt# | p|} n-2|s dS >dS ) zy
Unmount all paths from /proc/mounts that match regular expressions from /etc/container/exclude_mounts.conf file
Nr r r r zfailed to read z /proc/mountsc B g | ] }| d S )rl )r )rW ms r? rY z"prepare_mounts.. s$ :::qaggiil:::r> z failed to parse /proc/mounts
F)r r isfileEXCLUDE_MOUNTS_CONFr r appendr r r rw unshare CLONE_NEWNS readlinesr& r searchr ) reg_exp_listconfr r r mountsATTEMPTSr7 errormountreg_expr s r? prepare_mountsr } s 7>>- . . LK
%sW
=
=
= =
=
='')) = ''
7(;(;<<<
= = = = = = = = = = = = = = = =
K K K b"I4G"I"IJJJJJK OG'(((B
.#
8
8
8 ;A::AKKMM:::F ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; B B B b"@AAAAABH
8__ E'
NN5)) &u - - 6EE EE sl B AB B BB BB "CC(D1 : D% D1 %D))D1 ,D)-D1 1!EEc d} t j | dd n # t $ r t d| Y nw xY wt t
d dS ) zI
Start LVE engine and initialize default mount namespace for LVE
z,/bin/mount --make-rprivate / >/dev/null 2>&1Tz /bin/bash)shell
executablezError: failed to executez Can`t init lve default settingsrx N)r callr rq r r lve_start) MOUNT_CMDs r? r r s ?I5 +FFFFF 5 5 5
()444445 OO =O>>>>>s 99c H t | d| d| dS )zs
Create LVE container for given ID
:type lve_id: int
:type ignore_error: bool
:return: Nothing
z!lvectl: Can`t create lve with id ; error code {code}rx ignore_errorN)r
lve_create)r r s r? r r s>
V ^ ^ ^ ^". 0 0 0 0 0r> c H t | d| d| dS )zs
Create LVP container for given ID
:type lvp_id: int
:type ignore_error: bool
:return: Nothing
z!lvectl: Can`t create lvp with id r r N)r lve_lvp_create)rS r s r?
lvp_creater s>
!bV!b!b!b&2 4 4 4 4 4r> c N t d } g }t D ]}t j | s| d| 9| d| t |d| d | | |S )N lvectllibrR z=destroy_lvp_all: lvp %s n(cascaded with its parent), skippingz*destroy_lvp_all: destroying LVP with id %s"lvectl: Can`t destroy lvp with id r r ) r rK rG rI exist_lvpr, r lve_lvp_destroyr )loggerdestroyed_listrS s r? destroy_lvp_allr s
";
/
/FN ** & &x!!!00 LLXZ` a a a A6JJJ
f&h6&h&h&h j j j f%%%% r> c t d }| dk rt d S | d| t | d| d d S )Nr rX z&lvp_destroy: destroying LVP with id %sr r r )r r r, r r )rS r s r? lvp_destroyr sz
";
/
/F
LL96BBB &"dv"d"d"d f f f f fr> c t d }d| d}d| d}d}| dk rt rt t }t t
t j dk rVt j D ]6}| d | t
||
d }7nd }nt j | s=t j rTt j
| 5| d | t
| |
d }n!t j | sd }|r!t rt t d
g d S d S t rt t" d|g d S t% d| d S )Nr zCan't remove lve z from kernel - error code -3zCan`t destroy lve with id r FrX r z*lve_destroy all: destroying LVE with id %sr Tz&lve_destroy: destroying LVE with id %sOKWARNz warning: )r rG rH boolr r listrI lve_id_listr, r check_inside_listresellers_supporteddetect_inside_lvpro rp
SINGLE_FORMATr} rq )r r cant_remove_msgcant_destroy_msg destroyedid_s r? r r s
";
/
/FO6OOOOQFQQQI
' ' ) ) 0 _ . .//I tCH((**++ , ,q 0 0x++--
!
! I3OOO-=>>>
!
II 8 % %f - - --// 47H4N4Nv4V4V4b LLA6 J J J OOF, c 0 |r.t j | st | t j 5 t j d t t d t _
t t d t _ t t d t _ t t d t _
t t d t _ t dk rHt t d t _ t t d t _ t d
k r$t t d t _ |rS| d k r&t& |t d
| nut& |t d| d nN| d k r"t& t d n&t& | t d| d nJ# t. $ r=}t1 ddt3 | z dz t3 | z Y d }~nd }~ww xY wd d d d S # 1 swxY w Y d S )Nr r r r r r rm r r r r r %Can`t setup default settings for LVP r zCan`t setup lvp with id r z Can`t setup default settingszCan`t setup lve with id rl zCan`t setup lve z. RuntimeWarning excepted: )rG rI r r warningscatch_warningsfilterwarningsr: r r r2 r0 r1 ls_memoryr3 r r4 r5 r6 r lve_set_default
lve_lvp_setupr RuntimeWarningrw r; )r rS rws r? r r s
ch((00 6 " " p p ((( p!$Z%5!6!6L "%j&7"8"8L #&z&'9#:#:L %(E):%;%;L "%(D)9%:%:L "Q-0F1C-D-D *(+Jw,?(@(@ %Q'*:f+='>'> $
lQ;;)) 6f^d6f6f * h h h h '' 6nQW6n6n6n ( p p p p1%%l3I61J 6I;;J JJc d}d}t }t d t }|a t |t rL || d }|sd}n# t $ r d}Y nw xY w || d }|sd}n# t $ r d}Y nw xY w||fS )z
Get pair of package, reseller for lve_id
:param lve_id: lve_id, UID with package, reseller
:return: tuple of (package, reseller); Both can be None
N
list-usersr ra )packages_usersGetControlPanelUsersr4 dictKeyError)r ra r old_packages_users temp_packages r? "get_package_and_reseller_by_lve_idr 7 s GH' &&& "L'N,%% #F+J7H
HHH "6*95G
GGG H s# A
A A A3 3 BBz+/var/run/cloudlinux/effective-normal-limitsz;/opt/cloudlinux/flags/enabled-flags.d/burstable-limits.flagc t t j t sdS t j t
}t j | s2t j | }t |ddd| n(# t $ r}t d| d| d}~ww xY wt t
d }|5 | ri }n t j t
rDt t
dd 5 }t j | }ddd n # 1 swxY w Y ni }nZ# t j $ r }t d
t
d| d}~wt $ r }t d t
d| d}~ww xY w| t" t% t j | t
d n1# t $ r$}t d t
d| Y d}~nd}~ww xY wddd dS # 1 swxY w Y dS )
ai
Save calculated effective normal limits for an LVE to a cache file.
The cache file is stored in /var/run (tmpfs) for faster operations.
It disappears on reboot, but lvectl apply all runs in the lvectl systemd service anyway,
so the file will always reappear if the service functions normally.
If additional speed is desired, consider replacing the standard JSON lib
with a faster one like rapidjson or orjson.
:param reset: If True, recreate the cache file from scratch with data available in the dict,
instead of updating it, defaults to False
:type reset: bool, optional
Ni r z#Error: failed to create the folder : z.lockr utf8r z=Error: failed to parse the effective normal limit cache file z>4 5 5 (<==
w}}]++ G '//-88K mUAq+ F F F
HMHHQHHIII
(+?(F(F(FGG n n !
7>>"677 * 2C&III ?X+/9X+>+>(? ? ? ? ? ? ? ? ? ? ? ? ? ? ? (*$'
qVjqqnoqqrrr
pUippmnppqqq
7888 n #DJ/?$@$@BVX] ^ ^ ^ ^ n n n lQellijll m m m m m m m m n)n n n n n n n n n n n n n n n n n ns A5B
C(B>>C H-&;E!E6 EE E E
EH-F( E;;
F(F##F(( H-(G/.H-/
H 9HH-H H--H14H1c > t t t | < dS )a
Cache the calculated effective normal limits for an LVE to a dictionary.
setup_data is a global dict that contains the LVE configuration last applied.
Holds only one entry - during operations like lvectl apply all, we enter this
function repeatedly with setup_data containing info for one processed LVE each time.
These limits can be used by the Burstable Limits components
to set/reset burst or normal limits without having to go
through effective limit calculation or invoking lvectl as a middleman.
Comparing the cached limits to current active limits (in kernel)
also shows whether or not the LVE has burst limits active at the moment.
This function gets called in lve_apply, which means it also runs within:
* lvectl apply all
* lvectl apply-many
* lvectl set
* and others, that also call lve_apply
:param lve_id: LVE ID for which the limits are being saved.
:type lve_id: int
N)r r r; r s r? cache_effective_limitsr
s 0 ,6CKK(((r> r c | dk s t j sdS | t t j vrdS t
t j | S )u0 Return True if the user has at least one isolated domain registered.
CLOS-4370: the per-domain branch in lve_apply only does meaningful work
when the user has at least one docroot in the lvd-map. A bare marker
file from ``lvectl allow-domain-limits`` (with no ``enable-domain-limits``
follow-up) or a 0-row hashtable left behind by ``lvd_map_remove`` after
the last ``disable-domain-limits`` both leave the per-uid file in place,
so existence alone is not enough — we must also check that the
hashtable actually has entries.
r F) rG r- domains_supportedsetrN rO r ws_id_registryget_all_entriesr s r? _is_domain_isolated_userr s^ {{#&2244{u
S?AABBBBu .v66 7 77r> c t j st S t j S )u8 Collect all known domain LVE IDs from the on-disk registries.
Domain LVEs (created by lvdctl set) appear in /proc/lve/list at root
level, but lve_apply() must not process them as regular users — their
limits are managed by apply_domain_lve_limits() inside the
domain-isolated-user branch.
)rG r- r r
r get_all_domain_idsr= r> r? _get_all_domain_lve_idsr s2 6 # # % % uu , . ..r> c e Zd ZdZdS )DomainLveIdErrorz>Raised when lvectl set/delete/destroy targets a domain LVE ID.N)r7 r8 r9 __doc__r= r> r? r r s HHHHr> r c | dk s t j sdS t }|sdS t j }| |k s| |v rt
d| d| d dS )a Refuse to operate on domain LVE IDs from lvectl set/delete/destroy.
Domain LVEs are managed exclusively by lvdctl; lvectl operations
on them corrupt the domain configuration or create phantom entries
in ve.cfg.
The check only activates when at least one domain LVE is registered,
so existing customers without domain isolation see no change in
behaviour.
r NzLVE ID z is in the domain LVE range (>= zV) or is a registered domain LVE. Domain limits must be managed via lvdctl, not lvectl.)rG r- r r r min_idr )r
domain_ids
min_domain_ids r? _reject_if_domain_lve_idr s {{#&2244{(**J ")++M
&J"6"6
Ef
E
Em
E
E
E
#7"6r> c z t } dk rt d t |c}a t dk rt | d}||}n1|rt nt
} t
t fd| d }|dk rR | d }n# t t f$ r d}Y nw xY w | d }n# t t f$ r d}Y nw xY w|t || t d
|t t }
t t |d d
|
t d < n # t t" t$ f$ r Y nw xY wt d t d t d < t d|t t t& dk r t d|t t n
dt d< t) t |dd
t d< n # t t" t$ f$ r Y nw xY wt d|t t t d|t t t d|t t n't || t& dk r
dt d< |s:t+ dk rt- rt/ t/ t0 } t0 t0 j | t: t> d t0 | dS # tB tD tF f$ r0} tI j$ tH j% d d | Y d} ~ dS d} ~ ww xY wt/ | dS dS ) a
Aplly limits to LVE lve_id
:param lve_id: lve id
:type lve_id: int
:param plan_id: package for user with lve_id. deprecated
:type plan_id: string
:param result: if True = don't apply limits. only create setup_data with actual limits
:type result: boolean
:param reseller: if True = plan_id is resellers plan. deprecated
:type reseller: boolean
:param out_node: node with limits for lve_id
:type out_node: xml_node
:param lvp_id: reseller container id; host container if 0
r useridr rR Nc , t | k S )Nr r )r0 r s r? zlve_apply.. s 34 H H HF R r> ra r r r r r# r} r r rL r rk rl r r r r )r r r
domain_mapr r z1lve_apply: skipping per-domain isolation for uid=r )&r r r- r{ rZ rY nextfilter NameErrorr r r r, r r rC r r& r rO r: r
r r rG _build_domain_map_map_domain_lvesrI rc r r r apply_domain_lve_limitsr r& r! r LOG_WARNING)
r r r~ r out_noderS r new_packages_usersr~ node_listr r$ excs
` r? lve_applyr0 s' $ (
{{ Xv...-;=O*N
||6""""
B
$0FF&
RRRRT] ^ ^
{{ (0;GG8$ GGG )&1*=HH8$ HHH
~7X6666 FB Z@@ 89KBTY`g9h9h9hpu v v vJu J 2 D e $ +E 2Ju D"k:666 &== r;
; ; ; ; !Ju "#5bgO#\#\#\ ] ]Jt J 2 D GRj999FB Z888FB Z8888 7XfEEEE '>> !Ju - v&&& Q;;3F;;;
fV , , , , f
! 2 26 : :
$$VSX\\^^
$SSS%%flDtlrDtDt%uuu++Fz+JJJJJXz2
&WWWRUWW
fV , , , , , ,A - -sa B B('B(,B; ;CC)D/ /E E ='G% %G?>G?BM N%5%N N%c h t | t | dz
g }t | dS )zt
Print data with the last column 30 symbols wide.
Useful for printing data that contains package names.
rl wide_indicesN_format_fieldsr rq r formatted_strings r? _pprintr8 s s9
&fCKK!O;LMMM
r> c t | t | dz
t | dz
g }t | dS )z
Print data with the two last columns 30 symbols wide.
Useful for printing full data of every user with package name
and reseller name.
r rl r2 Nr4 r6 s r? _pprint_fr: | sO &&kkAos6{{Q7
r> c H t | dg }t | dS )zb
Print data with the first column 30 symbols wide.
Useful for printing packages data.
r r2 N)r5 rq r6 s r? _pprint_pr< s.
&fA3???
r> c j t | dt | dz
g }t | dS )z
Print data with the first and last columns 30 symbols wide.
Useful for printing data with user names and package names.
r rl r2 Nr4 r6 s r? _pprint_rr> s;
&fAs6{{Q;OPPP
r> r r3 widthc g }t | D ]J\ }}t | }||v r| |d| 3| |d Kd | S )aK
Helper function to format fields
based on specified indices for wide columns.
Args:
fields: The fields to format.
wide_indices: List of indices in the fields that should be wide.
width: The width of the wide columns.
Returns:
A formatted string with specified fields widened.
>z>8r ) enumerater; r join)r r3 r@ formatted_fieldsr field field_strs r? r5 r5 s !&)) 7 7 uJJ L # #y$;5$;$;$; < < < < # #y$5$5 6 6 6 6
77# $ $$r> c t | } t | t o| d }| dd } | rt | } | dz } nd} |rd| n| } | S )z
Convert pmem or vmem limits to bytes value
:param value: pmem or vmem limits in kbytes value
:return: bytes value of limit
r r i r )r; r4
startswithr r: )rw was_changeds r? _pmem_vmem_to_bytes_valuerK s
JJE UC((BU-=-=c-B-BK MM#r " "E E
& 1KKKKEE Lr> c d}d}t | t r!| d r | dd } d} t | }n# t $ r Y dS w xY w|rd}|dz dz } | d k r| | d
}n
| |dz d }|S ) z
Convert amount of RAM to M format
:param string value: amount of memory in KB
:rtype: string
:return: amount of memory in MB like "1234M"
r Fr rl NTr r r MK)r4 r; rI r: r )rw r~ rJ vs r? _mb_memrP s FK% %"2"23"7"7 abb JJ rr
ETME qyy$E$$$$AE$$$ Ms A
AA0r/ c .
t
d dz
d<
fd} |d dk rt |d nd}d }|t |d t | t |d t | |d t | |d t |d t |d
t |d t |d |d
g }t }|||z
}t
r)d fd|D } d| dg}n | | | fd|D |S )z^
Generate header and default package data either as print to stdout or as json string
r r c 0 | d S )Nr r )rv rD s r? get_dataz _formatter..get_data s ||C$$$r> r c L t rt | nt | S rb r rK rP rw s r? convert_mem_limitsz&_formatter..convert_mem_limits s! 3=Q(///75>>Qr> r r r r r r r ) r r r NCPUr r r r r r PACKAGEN,c 3 R K | ]!}d | d |d d V "dS )r ":"r NrT rW r
fields_maps r? re z _formatter.. sE KKq:A::*..B"7"7:::KKKKKKr> {}c < g | ]} |d S r rT r_ s r? rY z _formatter.. s' 888A*..B''888r> )r, r r r; r ro rD ) printer
default_iddefault_package more_fieldsrU _cpurY resr r rD r` s @@r?
_formatterrk s !!H uo,HUO% % % % % 1920E0E HHUOO , , ,2DR R R 3xx#7#74yy#hhv&6&6"7"7&&xx'7'788993GYGYZbZbchZiZiGjGjCkCk((4..!!C0A0A,B,B#hhW[nnJ]J]HHV$$%%/ J
C
\\F + :xxKKKKFKKKKK D}}}o888888899 Jr> c fd}|S )aA
Generate inner function with closured fields names and printer function
:param list fields: List of strings that represent names of fields in final output
:param callable printer: Function to format and print data for every entry
:rtype: callable
:return: function to format data for every user
c dt | d }t | d }|dk rd}t dk rt |d n5|t |d nt d t || t j t t | ||d
fd }d
}t | d< t |d d< t |d d< t | |d d< t | |d d< t |d d< t |d d< t |d d< t |d d< t rt | d< n|d< |t rdndd< n|d< dd v r?dt t d d dz z d< nt d dz d< d d< t t d d< g }t r)d fd D }d | d g}n fd D |S )!z
:param string user: Find and format data for this User ID
:rtype: list
:return: List of given user's statistics data line or empty list
r ra r Nrl r" F)r r T)r r r~ c t | t t | k r dt t | z nt | S )Nr )r; r )rv r s r?
check_changedz7_user_formatter..wrapper..check_changed3 sP 14T#Y 3zRUCWCW1W1W3Z_----]`aefiaj]k]k kr> c L t rt | nt | S rb rW rX s r? rY z<_user_formatter..wrapper..convert_mem_limits6 ! 7AU,U333wu~~ Ur> r r r r r vmemr r r r N/Ar r r r\ c 3 Z K | ]%}d | d| d V &dS )r r^ NlowerrW r r s r? re z3_user_formatter..wrapper..T sC IIQ 8 8 8d17799o 8 8 8IIIIIIr> ra rb c D g | ] }| S r= ru rw s r? rY z4_user_formatter..wrapper..W s% 666!d17799o666r> )r r^ r r r{ r r r0 r; ro _normalize_strr: r r rD )
r ra r ro rY rj r r r re s
@r? wrapperz _user_formatter..wrapper s5 &y1!$'
3 r>>H Q
w 6 6 6 6 6# )ERRRRR 7777 w : : : :y$$$(4HHHH l l l l l V V V YYT
--..//U ==0011V --mmF.C.CDDEEV --mmE.B.BCCDDV t,,--T
t,,--T
MM' 2 233W
==0011V & ,W 5 5DOO %DO (, 4uu"D 'D $u+ #c$u+*<* r= )r re rz s `` r? _user_formatterr{ s0 D D D D D DJ Nr> c t t d | | rt d| n#|t d| nt d n# t $ r Y nw xY wdg}t t | }t |z }t
| }t D ]}| || z
}t r*t dd
| z d z d S d S )
Nr r list-reseller-usersr" r[ rh {"data":[r\ ]}) r{ r r* rk r8 r r{ r ro rq rD )r r rh r~ r formatterr s r? paneluserslimitsr ^ s MMM
\*** & 6 2 2 2 2
! !6 J J J J J . . .
+K
[
9
9
9F
\\K
'F ''I " "))D//! 5
kCHHV , ,,t3444445 5s AA
A%$A%c t d g } t D ]6\ }}| t | |d |d f 7| S )z@Get list of tuples[lve_id, reseller, package] from control panelr r ra )r r rt r r: )r~ str_uidpayloads r? paneluserslistr y sj &&&
F * 0 0 2 2 O O
s7||WZ%8'):LMNNNN Mr> c ddl m} i }t d t t || < t d | t |S )zBGet dict of pairs[provider, list[package_name]] from control panelr )DEFAULT_PROVIDER
list-packageslist-resellers-packages)
clveconfigr r r r keysrB )r packagess r? panelpackagesdictr sp ,+++++H )))!%n&9&9&;&;! c T t t d t t ddg } t ddgz }t |t }t D ]}| || z
} t r*t dd | z dz d S d S )
z]
Implements lvectl all-user-list command
:return: None, prints result to stdout
r r[ RESELLERr~ )re r r\ r N)
r{ r rk r: r r{ r ro rq rD )r~ r r r s r? all_users_limitsr s MMM &&&
:/F
G
G
GF
\\Y
3
3F :::I " "))D//! 5
kCHHV , ,,t3444445 5r> c t j dk r8d t D fd| D } | S )z
Filtering DirectAdmin's admins for `lvectl apply all` command
:param ve_dict: dict with LVE
:return: filtering dict
DirectAdminc @ g | ]}t j | j S r= )r r r )rW r s r? rY z(_filtering_da_admins.. s% III#,t,,3IIIr> c $ i | ] \ }}|v ||
S r= r= )rW rv rw uids_da_adminss r?
z(_filtering_da_admins.. s) ]]]*#u3nC\C\3C\C\C\r> )rm getCPNamer
rt )ve_dictr s @r? _filtering_da_adminsr sV -//IIIII]]]]
]]] Nr> c
t t t }| rHt j j
fdt D }n# t $ r i }Y nw xY w| du rt }t }n't }t j
| }i }|D ]}|d d|t | < |D ]}||vrd d d||< t | dk rjt! | }|D ]X}||vrd }n|| d }|| }t# | } t | dk r|| d d||< P|d d||< Y|S )Nc $ i | ] \ }}|v ||
S r= r= )rW krO cfg_lvp_id_lists r? r z&prepare_apply_data.. s) _ _ _1!J^J^q!J^J^J^r> TrR )r0 r r r r0 )r r r rG rc r^ id_listrt r* rZ rK rY rI r r r r guess_reseller_by_package) rS packages_users_r. r r r0 r rd pkg resellersr s @r? prepare_apply_datar s ~.. ` !g . 6 6 8 8O _ _ _ _0D0D0F0F _ _ _O ~~ ** (&&f&55 G _ _FJY]<^<^#488899 ? ? '+ > >GFO O !! 'w//" B BC'!! s|F+!#&C1#66I9~~!!)-IaL I I )-D A A Ns A,A0 0 A?>A?c t \ } }t t j }| D ]}| |d dk r| | 2||v r/t | | | t j
d 5 t || | d | | d d d d n # 1 swxY w Y t d t rt d }t t j }| D ]j}t | r| | (||v r/t | | | t% || t j | }t j }t* j | D ]} t1 j | j }||v r/t | | | | |d |k r)t j ||d| d | d
t || l|D ],}t | rt | -|D ] }t | d S )
Nr Tr r0 r r, r r Can`t move lve_id= to lvp_id=r r r r ) _get_lve_ve_dict_and_lvp_mapr
rG rI r r r discardr r- context_ignore_errorr0 rH r rJ rT r r &_create_if_necessary_and_configure_lvprc get_reseller_namer cpapir r r r lve_lvp_move)
lve_ve_dict lve_lvp_mapremaning_alive_lvesr lvp_ve_dictremaining_alive_lvpsrS rg kernel_mappingr s
r? lve_destroy_and_recreate_allr s ; = = K ch 2 2 4 455 ""$$ ??61 % % * * ' ' / / / ( ( ( OOF # # # ' ' / / /
V
(
(d
(
;
; $V,V4$V,Z8
Q
##%% ,*(.. "38#7#7#9#9 : : "&&(( A AF ''
$,,V444---%%f---$,,V444 2; G G G G 5 5f = =M X\\^^N 55mDD
A
A d++2 000OOF+++'//777!%%fa00F::F'' eV e e e e e (
-@@@@@
A + * *F ''
! !& ) ) ) ) & s +D
D D c t \ } }t }t j d 5 | D ]K}||v r| |d dk r*t || | d | | d L d d d n # 1 swxY w Y t d t sd S t d } t j
}| D ]}t | rt | | t j | }t j | D ]T}t% j | j }t+ | rt j
| s t. || nUt j
|| s5t. | t. || | |d |k r)t j ||d | d
| d nC| |d |k r)t j ||d | d
| d t ||
Vd S )NTr r r0 r r r rR r r r r r ) r r rG r- r r r r0 rH r rI rc rT r r r r r r r r r r r lve_lvp_create2r r r ) r r domain_lve_idsr r lvp_id_rg r lve_id_s r?
lve_apply_allr 9 s> 799G[,..N $ $$ $ 7 7 j j llnn j jF '' vq))Q..&76?6+BWU[_]gMhiiii jj j j j j j j j j j j j j j j Q ' ' ) ) &&GX\\^^N<<>> ,> ,> G $ $ .w@@@ 11'::
N11-@@ > >Dl4((/G'00
x)))99 <))'7;;;; 33GWEE <))'222))'7;;; "%%gq11W<<F'' gW g g g g g ( "%%gq11W<<F'' gW g g g g g (
W} = = = = == > ,> ,>s A!B..B25B2c t t d t } t r&t t ni }| |fS )Nr )r{ r r rG rH r lve_id_lvp_id_pairs)r r s r? r r s_ MMM &&&$&&K585Q5Q5S5S[$s..00111Y[K ##r> c t |dd t || | d | | d | t |d t d| d S )
NTF)rS rJ rz r0 r )r r, r rS )rS rz r )r rS )r{ r0 )r rS s r? r r s{ vDuMMMM
V vv. vz2
vE::::
Qv&&&&&&r> c ` t d t | t D ]}t | | k rt j | }t j | }t | D ]U} t j | j }n# t $ r Y )w xY wt | r||vr| | V|dd D ]}t d| t j | 3# t $ rQ t j | rt | | | Y w xY wt/ | |j | t5 t6 t d |D ]}t9 | t | dS | dk rdS | t; t= j v rdS t j | sdS t j | }|dd D ]}t d| t j | 3# t $ rQ t j | rt | | | Y w xY wt/ | t d |D ]}t9 | dS )u Remove reseller from ve.cfg and from procfs.
CLOS-4419: idempotent for orphan kernel LVPs. When no
block is present, the function falls through
to a recovery branch that distinguishes three states:
* domain-isolated user — kernel LVP is legitimately maintained by
_sync_map for the per-domain isolation feature; do not destroy.
* already clean — neither block nor kernel LVP exist; return True
so disable_reseller_limits reports OK instead of WARNING.
* true orphan — block missing but kernel LVP exists with no
isolation marker; destroy the LVP and re-parent any mapped
LVEs to the host LVP.
TrR r Nr F)!ry r{ rZ r rG rI map_lve_id_listrc r r r r r r rT r r r r r-
lve_existsr remover
parentNode removeChildr r- r0 r
rN rO r )rS r~ usersrg usernamerd r s r? _remove_resellerr so Dv 4 4 b 1 1 1V ; ;H,,V44E" G 5 5f = =M *= 9 9
&
& ,x007CC H #C(( &S-=-=LL%%% (
)
)""1f---)L(((( ) ) )v((00 0///LL((((()
M % %b ) ) ) V q ! ! ! !
"
"&!!!! v & & & &44g >>> u 8 V , , t
H $ $V , ,E( ! !
1f%%% ! L ! ! !v ((
(''' LL ! q & 4s8 B))
B65B6
D AE:9E:J AK87K8c t j | t | }t j | s t | | nW|rUt j | | s5t | t | | t j
}| | d | k r)t j
| | d| d| d t j | D ]7}| |d | k rt | | 8dS )a Enable per-domain LVE isolation for the given user.
Creates an empty id_registry file (marking the user as domain-isolated),
creates lvp (nested under the user's reseller LVP if any), and
moves lve under it. Analogous to set-reseller for reseller limits.
Any existing domain IDs in the registry are pre-mapped to lvp via
lve_lvp_map so that subsequent lve_setup calls will place domain LVEs
under the correct LVP automatically.
rR r r r r r N)r create_empty_registryrG lve2lvprI r r r r r rc r r- r r valuesr )r
parent_lvpr domain_ids r? enable_domain_isolationr sm (000V$$J 8 V , , 2
fj1111 2CH 6 6vz J J 2
f%%%
fj111X\\^^N&!$$.. FYYYFYYY
$3F;;BBDD 1 1 i + +v 5 5 fi 0 0 01 1r> c t j | sdS t | }t j | D ] }t
|| t j }| | d | k rt
|| t j
| D ];}t j | rt
| back to the parent LVP (reseller or root), destroys
domain LVEs, destroys lvp, and removes the id_registry file.
Analogous to remove-reseller for reseller limits.
rR Nr )rG rI r r r r r rc r r r r r r r remove_all_entries)r r child_lver r s r? disable_domain_isolationr ) s' 8 V , , V$$J X--f55 2 2
:y1111X\\^^N&!$$..
:v... $3F;;BBDD ' ' 8 % %i 0 0 ' OOI & & &%f-----r> c ^ t j | | }t t j }| | | k r t j | | t j
| | dS )av Register a single domain LVE under the user's LVP.
Assigns a domain ID for *docroot* in the per-user registry, then
pre-maps it to *owner_uid*'s LVP so that lve_setup will place the
domain LVE under the correct LVP when it is first created.
Also records the domain name in ``~/.lve/domains.json`` so we can obtain list of
enabled domains for user.
N)
r assign_domain_idr{ rG rI rc r r- r rN LvdConfigr add_domain_by_docroot) owner_uiddocrootr proc_maps r? enable_domain_lver F s / 7CCIMMMx||~~H||I )++ 9i000
Y''==gFFFFFr> c t j | | }|t t j | rX t | n<# t $ r/}t j t j d| d| Y d}~nd}~ww xY wt j
| | t j
| | dS )zUnregister a single domain LVE and remove its registry entry.
Destroys the kernel LVE (if it exists) and removes *docroot* from
the per-user domain ID registry. Also removes the corresponding
domain from ``~/.lve/domains.json``.
Nz*disable_domain_lve: failed to destroy lve r )r
get_domain_idr{ rG r- r r r! r r+ remove_domain_idrN r r remove_domain_by_docroot)r r r r/ s r? disable_domain_lver X s ,Y@@I
6 Y ' ' 9
9 ****
9
9
9
f 0 8%. 8 825 8 89 9 9 9 9 9 9 9
9 ' 7;;;
Y''@@IIIIIs A! !
B+%BBc t | rt j | dS t r+t ddd| g t j d dS t d| dS )z&Disable reseller limits and call hooksr" r( rN z no configuration found for LVP r z(warning: no configuration found for LVP N)r r throw_eventro rp rr rs rq )rg rS s r? disable_reseller_limitsr m s G%1=IIIIII G )-Wv-W-W!X Y Y Y HRLLLLL EVEE F F F F Fr> c t | t d t d}t D ]}t | | k rkd}t | t
| |j | t t t t | |sFt r+t ddd| g t j d d S t! d| d S d S ) NTFr r( rN z no configuration found for VE r z'warning: no configuration found for VE )r ry r{ rY r r r r r r r- r0 ro rp rr rs rq )r Deletedr~ s r?
lve_deleter z s V$$$DMMMG b 1 1 1V ; ;G v M % %b ) ) ) V MMM f F F )-Vf-V-V!W X X X HRLLLLL DFDD E E E E E F Fr> c t j d s?t rt dddg nt d t
j d d S d S )N/proc/lve/enterr( rN zenter by name not supportedz$warning: enter by name not supportedr )r r r ro rp rq rr rs r= r> r? lve_enter_checkr sd
7>>+ , , : )-J!K L L L L 8 9 9 9 r> c t | | z }t ddd 5 }| | d d d d S # 1 swxY w Y d S # t $ r Y d S w xY w)Nr wr r )r r r rx r* )signrb r r s r? enter_applyr s
V\\^^#
#S7
;
;
; q
GGCLLL
s4 )A) A A) A A) #A $A) )
A76A7c N t t rTd} d}t D ]2}| d }|r| d|z dz z
} d}'| d|z dz z
} 3| dz
} t | d S t d t D ]$}t | d %d S ) Nr Tr r Fz,"r Binaries)r{ ro r\ r rq )r~ firstr~ r s r?
list_binariesr s MMM + , ,B??6**D
,#*s** $+++$
f
j + +B "//&)) * * * * + +r> c | t t D ]%} t d| d &d S )N+r )r{ r\ r r )r~ s r?
load_binariesr sC MMM 2 2C 0011112 2r> c t t ddd 5 } | D ]}t d| d d d n # 1 swxY w Y t d S )Nr r r r -)r r r r )r r s r? reload_binariesr s
w 7 7 7 #1 # #D T " " " " ## # # # # # # # # # # # # # # OOOOOs AA Ac t d t t d}t D ]i}| d | k rNd}t d| |j | t t t j|sEt rt ddd| g nt d| t j d d S d S )
NTFr r r( rN zno configuration found for z$warning: no configuration found for r )ry r r{ r\ r r r r r r- ro rp rq rr rs )rb deletedr~ s r?
del_binaryr s DMMMG
??6 " "f , ,G V $ $ $ M % %b ) ) ) V MMM C )-S6-S-S!T U U U U AAA B B B r> c t d t t D ] }| d | k r d S t d| t
d }| d| t | t t
t d S )NTr r rb ) ry r{ r\ r r r- r' r( r] r) r )rb r~ bin_xmls r?
set_binaryr s DMMM
??6 " "f , , FF -V ""8,,G ((( ))) VMMMMMr> c R |rt }n|rt }nt } fd|D d }n# t $ r Y dS w xY w|rR d D ]G}|dk rt |dd }nt ||d }|r|j | HdS t t d z
}|D ]} | dk r\t |
d dk r6| vr1|
d d d | < dt |
| dk r5| vr1|
| d d | < |rt d dS t d dS )
a
Set given lve or package to default values for given parameters
:param dict set_data: Arguments of lvectl call
:param bool package_flag: Should we delete package or lve with given id
:param callable is_needed: Function that takes xml element and set_data dict and returns
whether current xml element contains info about needed ID from set_data
c , g | ]} | |S r= r= )rW ri is_neededset_datas r? rY z#lve_set_default.. s*
8
8
8A1h!7!7
8a
8
8
8r> r N set-defaultr rk rl r# ve_id)r[ rZ rY r& r@ r r r
LIMITS_LIST_NAMEr r% r plan_deleter )
r package_flagr rS r r~ tag_nto_keepr# s
` ` r? r r s DD
DDD
8
8
8
8
8
8
8
8
;
]+ , ,Dt||$R/BB$Rw77
, ((+++"##h}&==G Z Z D==S!8!8!A!A B BQ F FH$$"$"9"9'"B"B1"E"R"RSb"c"c
((//
0
01
4
4H$$"$"9"9%"@"@"C"P"PQX"Y"Y &HW%&&&&&8G$%%%%%s 05
AAc |dv rdS t | }|dv rdS t | }n# t $ r g }Y nw xY w||v rdS dS )a
Checks is uid owned by reseller
:param uid: uid for check
:param reseller_name: Reseller name, None treats as root
:return: True - valid reseller/user pair, False - else
Special case:
if reseller_name is None (root) - always valid
)NrootT)r
rs F)r r r* )rd rg r reseller_users_lists r? _check_reseller_user_pairr s &&t (,,H?""u! ,] ; ; ! ! ! ! &&&t 5s - <<c
r |dk r!| d dk rt | d |dk r0| dd }| d }t || sdS t d |rN|| d k rBt j | rt |d ntt | nc|dk rMt r4t t j | d nt | t n# t $ r Y nw xY w t | d }t | }|r|d nd}t || n# t $ r
t aY nw xY w| d dk rd}d
}d | v rt# | d|| d
| v rt% | d
} n
t d
} d}
d| v r*t' | d | } | t d k rd}
|rt( } nt* } | D ]<}
||
| r,t, D ]+}|| v r# |dk rt/ |
dd| | nt/ |
|d| | A# t0 t2 t4 f$ r |dk r|
}nt | | | k }|s| d r|dk rDt6 d }| dt= | | nCt6 | }| dt= | | |
| Y 'w xY w-| dd stA t6 d}|rN|| d k rBt j | rt |d ntt | nc|dk rMt r4t t j | d nt | tC | d | <>|s| d r|rtD nd}t6 | }
|rZ|
dt= | |
d| d |
tF nr| d r4|
dtI j% | d j& n)|
dt= | d t, D ]}|| v r|dk r|
}nt | | | k }|s| d r|dk rDt6 d }| dt= | | nCt6 | }| dt= | | |
| d}tN D ] }|j( ) |
| d} |s t6 j* |
| dd stA t6 |rt j | }t |d tC | d | tV |tV , d t | t j- . | }t j- / | D ]3}t j0 1 || tC || 4|rte j3 | ngt r4t t j | d nt | tC | d nt, D ]}|| v r|dk rHtF 4 d d dt= | | TtF 4 | d dt= | | | dd stA t6 t | tC | d | dS )Nr r rg FT)rS rJ rR r r" c 6 t | |d k S )Nr r r r~ r s r? is_needed_userz lve_set..is_needed_useri s &b999Xg=NN Nr> r )r r rS r r r r rk rl r# savezskip-update-cfgrG r r z
save-username)5r r r ry rG rI r r{ rH r r r* r r r r, r r r: r rZ rY r rF r r& r r- r' r( r; r) r r0 r r$ r r r r[ r insertBefore lastChildr lve_inforc r lvp_lve_id_listr- r r r r% )r rS rg r ra r r has_ver r cpu_is_different
setted_cpuel_listr~ rv is_differentr0 el_nameaddedel2enables_reseller_limitsr s r? lve_setr" ; s {{x(A-- '!2333
{{ _d;;
'"( ?? 5D
#&HW --- 8 f % % ' vD 9 9 9 9 9
v & & & & & 155773855hw6GHHIIIII 6""""
! !'!23-g66 #,49Q<<"7X66666 ! ! !
!A O O O H $ $ H5N[a b b b b X ())EE 'E H 1(5/5QQQJZ ...#( GG G - - B ~b(++ ,
+ 5 5Ch5 "d{{ 22wQYZ]Q^ _ _ _ _ 22sGXc] S S S *J B 5 5 5 "e||/? 0:#(3-/O + 5x/? 5#&$;;+1+?+?+H+HD$($5$5oc(SV-FXFX$Y$Y$Y$Y+1+?+?+D+DD$($5$5gc(3->P>P$Q$Q$Q "t 4 4 4 5
', ||$5u== % V$$$
/f(9 9 9x))&11 3#6EEEEE $622222q[[S%A%A%C%C[ sx'A'A(7BS'T'TUUUUU v....(7+F;;;;; ? -(7+ ? -*0;&&eG%%g..B
Bc&kk222(8999z****<<00 BOOFCL'9J,K,K,STTTTOOD#hw.?*@*@AAA'
-
-(??e||'7 (2#(3-'G # -x'7 - $;;#)#7#7#@#@D - -oc(3->P>P Q Q Q Q#)#7#7#<#>>>>* U0 c
r t d t d}|rd }nd }d| v rt | d| t D ]} ||| rt D ]U}|| v rM |dk rC| d d d
t | | nB| | d d t | | # t t t f$ r |dk rDt d }| d
t | | nCt | }| d t | | |
| Y Qw xY wWt j rRt! | d d
| d }| t$ t | d}|s~d
}t d }| d| d |r$| d| d | d }t j r>t! || d }| t$ t | t D ]}|| v r|dk rDt d }| d
t | | nCt | }| d t | | |
| t j
| t) t t t+ | d| v rt- | d } n
t. d } d| v rt1 | d | | d< |r| d nd }
t3 | d |
d S )NTFc ~ | d |d k o | d |d k S )Nr r r rg r r s r? r z'package_set_ext..is_needed_plan
s= %%')::wrz?Z?Z^fgv^w?w
r> c l | d |d k o| d S )Nr r r r r s r? r z'package_set_ext..is_needed_plan!
s3 ??4((HW,==abooV`FaFaBa ar> r )r r r rk r rl r# rg r r ra r r r r r r" )ry r{ r r[ r r% r( r; r r& r r- r' r) rm is_plesk_plesk_get_package_idr XML_PLESK_IDr r copy_package_settings_to_cpanelr: r, r
plan_apply) r r% has_packager r~ rv r0 r+ package_resellerr r s r? r& r&
s= DMMMK b
b b b t~NNNN >"h ' ' '
-
-(?? - $;; 3 3G < - - - $;;#)#7#7#@#@D - -oc(3->P>P Q Q Q Q#)#7#7#<#.i
s" adx 00DQqTW_ r> r N)r list_domain_packages_with_idr% r&
StopIteration)r ra panelr packs `` r? r- r- a
s
E1133HF D D D D D
Aw tts (A
A A c h t } t d t }| a |S )z
Retrives resellers to packages map from panel using /usr/bin/getcontrolpaneluserspackages
:return: Dictionary:
{ 'reseller1' -> ['pack1', 'pack2'], 'reseller2' -> ['pack'] }
r )r r r )packages_users_copyreseller_packages_maps r? r r q
s6 )--//2333 *(N r> c | d }| d }t }||v r ||| v rt | d dS dS )z
Set reseller package limits
:param set_data: input data dictionary
:return: True - limits was set succesfully
False - supplied provider has no supplied package
rg r Tr$ F)r r& )r rg package_namer; s r? reseller_package_setr>
s^ _-MG$L 5 7 7---,BWXeBf2f2fd3333t 5r> c | d }t j sdS d| }t j | sdS t |dd 5 }| }ddd n # 1 swxY w Y |dd }i }|D ]}| d r| d }|d
dd
} |d d k r |d || < | t v r| | | d
rd|vr dS dD ]2} | |v r,t j || }
|
p t | || < 3t! || rdS t# |t$ } t D ](} | | } d| d| d}
| |
)t) d
| |d dS )zA
Copy package limits from ve.cfg to cpanel packages data
r Nz/var/cpanel/packages/r r r lve_=r r rl DEFAULT_PACKAGE_EXTENSIONSrG )r r rr rs i )rm rn r r r r r rI r r r r r r memory_to_pager, is_limits_equalscreate_cpanel_limitsr[ r r# rD )r ra package_pathr cpanel_package_datanew_cpanel_package_dataold_cpanel_datar
line_parts
limit_namememory_page_value cpanel_data limit_value
limit_lines r? r/ r/
sz w G " " 4744L
7>>, ' '
lC' 2 2 2 ,a kkmm, , , , , , , , , , , , , , , 1!!! 4O $ ??6 " " 5 ++C00J#A ..vr::@@BBJ!} )).8m
+ ---'..t444 ??0 1 1 e46G6G FF- W W
( ( ( 7
8S T T *;*V{:?VOJ '22 'w
;;K& 3 3
!*- 8J88888
&&z2222BGG$; < A;c | D ]/}|dv r | | || k r dS # t $ r Y dS w xY wdS )zC
check if new set of limits for package are equals to used
)r r FT)r r )
old_limits
new_limitsrv s r? rE rE
sy # # # #*S/11 uu 2 555 4s 3
AAc i }|D ]h}| d | k rKt D ]B} |dk rQt | d d d ||< n|dv rpt t j t | | d d ||< nPt | | d d ||< !# t t t f$ r d||< Y @w xY wj|S ) z
create limits for cpanel package file
use data from ve.cfg:
limit = limit if found in ve.cfg or DEFAULT
return dict
r r rk r rl )r rr r r# rB ) r r r; r% r r page_to_memoryr: r r& r )
package_id xml_packages result_datar~ r# s r? rF rF
s K 3 3
??4 J . .)
3
33 }}-0 3 3G < .is_needed_package
s. ??4((G3WBOOJ c h | d k o| d k S r r )r~ r rg s r? r[ z&plan_delete..is_needed_package
s1 ??4((G3d
8S8SWd8d dr> r r( rN z no configuration found for plan r z)warning: no configuration found for plan )ry r{ r[ r r r r- r r r ro rp rr rs rq r )r rg r r[ r~ resellers_listr s `` r? r r
s DMMMG X X X X X X e e e e e e R G M % %b ) ) ) V E
I 6w ? ?N>""a'' *!,#GX... I Hw H HI
HRLLLL GgGG H H HOOOOOr> c ( t | | d S )Nrf )r )r rg s r? reseller_plan_deleter_ s }555555r> c t | | d d S # t t f$ r) |dk r
t
| nt
| dz dcY S w xY w)Nr r# r r r )r; r% r r r& r, )r~ rv s r?
get_xml_limitra s S2**3//2??HHIII
# S S S#&%<<{3 C8HC8O5R5R5RRRRSs := 7A76A7c d }| dS t j d| i } ||dd }| d }||dz | S )z
Normalize string for JSON output.
Example:
- Input string: -_&[{}]'"`te\s/t
- Output string: -_&[{}]'"`te\\s/t\a
:param data_str: String for normalize
:return: Normalied string
c ^ d}t | D ]\ }}||k r|dz
}||k r|c S dS )z
Get the index of the specified occurrence of character in string
:param input_string: String
:param char_to_search: Character to search
:param ordinal: Required occurence number
:return: Char index
r rl r )rC ) input_stringchar_to_searchordinalcountidxchs r? _get_char_indexz'_normalize_str.._get_char_index- sR .. GC^##
G## JJJrr> Nr; r rl )r r rfind)data_strrj json_strtrd_idxlast_idxs r? ry ry $ sl $ tz5(+,,H ohQ//G~~c""H GaK( ))r> c D nrt nt d fd }|S )a
Generate inner function with closured fields names, is_reseller flag and printer function
:param list fields: List of strings that represent names of fields in final output
:param boolean is_reseller: Format output with info about reseller or not
:param callable printer: Function to format and print data for every entry
:rtype: callable
:return: function to format data for every user
Nc
<
r4t t j t d< fd}n fd}t j t t rt n d< d } |d d< t
dk r |d d < t D ]^} || rOt |d
}|d k r|nt t d
d
< t t t |d t d
dz d< t t | d d d d< n# t t f$ r Y nw xY w |t |d d < |t |d d< t |d d< t |d d< t |d d< ` d d dz d< t t! d d < g }t r)d fd D }d| dg}n fd D |S ) a
:param string package_name: Find and format data for this package name
:param string reseller_name: reseller name, owner of supplied package
:rtype: list
:return: List of giver package's statistics data line or empty list
r c h | d k o| d k S r r )r~ r= rg s r? r[ z>_package_formatter..wrapper..is_needed_packagef s2 #rt'<'<<m Q[A\A\`mAmmr> c b | d k o| d S r r )r~ r= s r? r[ z>_package_formatter..wrapper..is_needed_packagej s/ #rt'<'<<`R__U_E`E`A``r> r c L t rt | nt | S rb rW rX s r? rY z?_package_formatter..wrapper..convert_mem_limitsq rq r> r rr r r r r r r r r rk r rl r r r r Nr\ c 3 v K | ]3}d | d | d d V 4dS )r r^ rs Nr rv rw s r? re z6_package_formatter..wrapper.. sM TT C C Cdhhqwwyy%&@&@ C C CTTTTTTr> ra rb c ` g | ]*} | d +S rd rw rw s r? rY z7_package_formatter..wrapper.. s/ >>>!dhhqwwyy"-->>>r> )r r r, ro ry r r[ ra r; r r: r% r r& r r r rD ) r= rg r[ rY r~ r rj r r r r% re s `` @r? rz z#_package_formatter..wrapperX s,
* $] 3 3 39[))D ,D
n
n
n
n
n
n
n
a
a
a
a
a 9[))D59K^L111|T
V V V *)$u+66V ??--d6l;;DL 9 9B $$
9%b&11(- uu[=P9Q9QV #$<!"e,,CV 4E4E%G %G %GJM%N ! !W
!$S//88;HH YY& & " "DJJ #J/ D 1 1-F2K2K L LV 1 1-E2J2J K KV *2t 4 4T
-b' : :W
,R 8 8V 88G $ K3 .DM*4=99::U @88TTTTVTTTTTD ===/CC G>>>>v>>> ? ?
s ;A FFFrb )r> r< )r r% re rz s ``` r? _package_formatterry K sO !,gg{2Y))PYG< < < < < < < <z Nr> c t t d t } t d t }t t
t }t t dt
}| D ]}| || z
}t dk r#t t dt
}|
D ]M\ }}t j r|dk r |D ]+}t dk r| ||| z
} | || z
},Nt r*t d d
| z d z d S d S ) Nr r rf Fr% re rl Tadminr r\ r )r{ r r r rk r< DEFAULT_PACKAGEry r r^ rt rm r ro rq rD )r reseller_packagesr~ r ra rg
packages_listreseller_packages r? get_packages_listr s MMM ))) ""$$H2333&++--
o
>
>
>F":< c t t d dg} t | z }t t t
}t
|d }t D ]\ }}|D ]}| ||| z
}t r*t dd | z dz d S d S ) Nr r r{ Tr$ r r\ r ) r{ r r rk r< r~ ry r rt ro rq rD )rh r r~ r rg r r s r? get_resellers_packages_listr s MMM2333 ,K
\\K
'F
o
>
>
>F"6t<<(> A A$
} - A A ii 0-@@ @FF A 5
kCHHV , ,,t3444445 5r> c V t t d t } t d t }dg}t |z }t t t | }t |dt }| D ]}| || z
}t |d }| D ]\ }}|D ]} | || | z
}t r*t d d
| z d z d S d S ) Nr r r )rf rh Fr| Tr$ z
{"data": [r\ r )
r{ r r r r rk r> r~ ry rt ro rq rD )
r r rh r r~ r ra rg r r s
r? get_all_packages_listr sP MMM ))) ""$$H2333&++-- ,K
\\K
'F
o;
W
W
WF"6uiPPPI % %))G$$$"6t<< c i }| D ]}|||< |S )z
Converts package list to internal format
:param package_list: Package list. Example: ['BusinessPackage', 'Package2']
:return: Package list as dictionary. Example: {'BusinessPackage': 'BusinessPackage', 'Package2': 'Package2'}
r= ) package_listpackages_users_dictra s r? _convert_packages_listr s- / /'.G$$ r> list-allc f | dvrdS | dv r|dk rdS ddl m}m}m}m}m}m}m} | dk rxt D |t | d t | d
d ia n # t $ r |ddd ia Y n w xY w || \ }
} n# t $ r dx}
} Y nw xY w|| |
d ia d S | d k r| ||| ia d S | d
k r1t ! | } t | a t a nt a d S | dk r"t | a t ant a d S | dk rt
| at a d S | dk r t || }
|
a|
a nt a d S | dk rt
| at a d S n1# t" $ r}t% | Y d}~nd}~wt& $ r Y nw xY wdS )a
Parse output from GET_CP_PACKAGE_SCRIPT and get package and lve relations
:param option: option for GET_CP_PACKAGE_SCRIPT.
Option is one from the following possible values: 'userid', 'package', 'list-packages', 'list-resellers-packages'
:type option: string
:param lve_package_id: lve_id or package_name
:type lve_package_id: string or int
:param reseller:
:type reseller: string
)r r ra r r r r} F)r ra r r )admin_packagesget_reseller_usersget_uids_list_by_packagelist_all
list_usersreseller_package_by_uidresellers_packagesr Nra r )ra r Tr r r r} r )clcommon.cpapir r r r r r r cached_usersr r r cached_list_packagesr cached_resellers_packagescached_reseller_userscached_defaultr ru r )optionlve_package_idr r r r r r r r rg ra r reseller_users_dictri s r? r r s & V V Vu
&&&>R+?+?u P
X 'W&'3N'CI'N(4^(DZ(P) )&NN W W W&4"RT6U6U%VNNNW1-D-D^-T-T*M77! 1 1 1.00MGGG1 #1gS`2a2a!bt
y
,.F.F~W_.`.` aN4
&
& $+ -~ / / !7 !E!E'5$$ "64
0
0
0 )0!3!3!5!5,:)) ";4
|
#
#
# )z|| )N4
,
,
, %,&8&8&B&B# )<%!4 "74
z
!
! %!) +N4 ' ' '#A&&&&&&&&
5s
F )A F A40F 3A44F 8B F BF B
F $F :5F 1&F F 9$F F
F.
F
F.-F.c F t t t S )z2
Retrieves panel users count
:return:
)r r r r= r> r? get_panel_users_countr n s
~ r> c t d t d| | r/t | D ]#}t t | | | "d S d S )Nr ra r" )r r r0 r: )r r rd s r? r0 r0 x sm &&&IwBBB <!'* < c | D ]}| dd }| }|D ]E}t | dk r0 t | }t | 5# t $ r Y Aw xY wFd S Nrs r r )r r r r r: r r*
users_listr r r s r? destroy_manyr s ||D$$
""$$ DD Q t99D %%%% D s A88
BBc t t t n# t $ r Y nw xY w| D ]}| dd }| }|D ]E}t
| dk r0 t | }t | 5# t $ r Y Aw xY wFd S r ) r{ r r* r r r r r: r0 r s r?
apply_manyr s MMM
||D$$
""$$ DD Q t99D dOOOO D s
,, B&&
B32B3c
t t | t | |d| d| d d S )Nz Can`t put proccess with pid z in lve r r )r lve_enter_pid_flagsr: )r pidflagss r? limit_pidr sR F SXXuYsYYFYYY r> c ^ t t | d| d S )Nz Can`t release process with pid r )r
lve_leave_pidr: )r s r? release_pidr s0 C*QC*Q*QRRRRRr> c h t t t t t t
t t dS )Nr- rH r$ rY r, r[ rO r] r r= r> r? get_globalsr s( l$ [$S 0 2 2 2r> c * g }t }t d t }| a | D ]&\ }}|D ] }| |k r| |g '|S )Nr )r r r rt extend)ra r
pkg_users_oldr rg r package_name_in_keys r? r r s H"''))M2333&++--"''))N ):(?(?(A(A 1 1$
}#0 1 1 --- 000 1 Or> c ~ t j t j dd }|rt j | rxt
|| \ }}|dk rad| }t rt dd|g d
S d| }t j
| d t j | d
S d
S d
S d
S ) z
Call Endurance's custom script
:param args: list of arguments for pass to Endurance's custom script
:return: None
ENDURANCE_CUSTOM_SCRIPTrA ) separatorr z0Error while executing Endurance's custom script
r( rk zerror: rs N)
rm get_param_from_fileCL_CONFIG_FILEr r r r ro rp rr ru rx rs )argsendurance_custom_scriptret_codestd_outr err_messages r? call_endurance_custom_scriptr s * =k>X>WHK M M M
#27>>2I#J#J
# ()@$ G G' q==T7TTG
#Ggw%788888 1 1 1
K!3!3!3444"""""
#
#
#
# =r> c t r)t t | t j z S t | S )a
Convert page value to human-readable value or bytes, depending on BYTES_FLAG;
E.g.
>>> _page_to_memory_or_bytes(1233254) # BYTES_FLAG=False
'100M'
>>> _page_to_memory_or_bytes(1233254) # BYTES_FLAG=True
654321
:type value: int
:rtype: str | int
)r r: r mmapr rP rX s r? _page_to_memory_or_bytesr s5 15 .//000 5>>r> c g } t t j }t t D ]m} t j | }||vr| | <# t t t f$ r | | Y jw xY w| D ]}t | dS )zV
Remove from LVE all resellers, which are absent from panel
:return: None
N) r rG rc r r{ rK r r r r r r )reseller_id_list_for_deletecpapi_resellers_listlve_reseller_idlve_reseller_namereseller_id_for_deletes r? remove_absent_resellersr s #% 1 1 3 344MMM#:: @ @ @ # 9 9/ J J (<<<+22?CCC'7+ @ @ @ ' . . ? ? ? ? ? @ #> 1 1 /00001 1s
8B,B54B5c |t | dS |r~t j | 5 t j | }| | }|||_ | ddd n # 1 swxY w Y t j | }n# t $ r Y dS w xY wt j | }d}||vr$|r"||v r || }t j | || |t t j || rt | t j | | } | t j }
|
| d | k rt | | t | } t | | dS dS dS dS )ai Update LVD domain config, docroot-to-ID mapping, and kernel LVEs.
Called after a control-panel hook detects a domain rename,
document-root change, or user rename.
Two modes of operation:
**Single-domain** (*domain* is given):
1. Rename domain in ~/.lve/domains.json (if *old_domain* given).
Uses privilege drop so files stay user-owned.
2. Ensure the current docroot has a domain_id in the registry.
If *old_docroot* is given, removes the old mapping and assigns
a new domain_id for the new docroot.
3. Destroy the old domain LVE in the kernel (if it existed).
4. Map the new domain_id to the user's LVP and re-apply limits
from domains.json so that per-domain limits keep working.
**All domains** (*domain* is ``None``):
Iterates every domain in the user's ``domains.json``, detects
stale registry entries whose docroot no longer matches (e.g.
after a user rename shifted the home directory), and performs
the single-domain reassignment for each one.
Args:
uid: numeric user ID.
domain: current (possibly renamed) domain name. When ``None``,
all domains from the user's config are checked.
old_domain: previous domain name if it was renamed.
old_docroot: previous document root path if it changed.
N)rc rR r r# )_regenerate_all_domainsrN user_contextr r find_domainrc r resolve_docrootr* r r reassign_docrootrG rI r r r r rc r r r( r* ) rd domain
old_domain old_docrootr$ entryr registry
old_domain_id
new_domain_idr r$ s r? regenerate_domainsr
s6 > ~ $$$
#C
(
( (--c22F&&J&77E #
+F33 -c22HMh G;(22 $[ 1M +Cg F F F S_ 8 % %mC % @ @ - m , , ,&4S'BB
$ X\\^^N !!-33s::!!#}555 ..s33J ' '
' C C C C C ! __
% $s$ AB B
B
B* *
B87B8c " t j | }|sdS t j | }nD# t
t f$ r0}t j t j d| d| Y d}~dS d}~ww xY wt }|j
D ]p} | t j |j
0# t
$ r4}t j t j d|j
d| Y d}~id}~ww xY wt | D ]a\ }}||v r
t ;t j || rt& | t j | | bd}|D ]@} | |v rt j | | }t t& | | d}A|r?t :t | }
t | |
dS dS dS )
a Synchronise the domain-ID registry with current docroots.
Compares docroots currently reported by the control panel against
the docroots stored in the registry. Orphaned entries (docroots
no longer valid) are removed and their kernel LVEs destroyed;
missing entries (current docroots not yet registered) get a fresh
domain ID assigned and mapped to the user's LVP.
Nz6regenerate-domains: failed to load LVD config for uid r z7regenerate-domains: cannot resolve docroot for domain 'z': rR FTr# )r r rN r r r& r r r+ r
domainsaddr rc r rt rG rI r r r r r r r( r* ) rd r r$ r/ current_docrootsr old_drr changeddrr$ s r? r r \
s -c22H $))#.. g
f(.!$. .(+. . / / / uu ? ? ? !:5:!F!F G G G G ? ? ? M&,>).> >8;> >
?
?
?
?
?
?
?
? ?
"(.."2"2 3 3 5 5 % % % ?**9S*AA i ( ( ('V4444G
>> "3C<< ? c9 - - - @3?**3//
##CJ#?????@ @??s- : A; %A66A;,C
D
*C<<Dc 2 t } t j rt j } t j D ]\ }}|| v r
t j
| # t $ rz t | n[# t $ rN t j | t | n# t $ r Y nw xY wY nw xY wY w xY wdS )zM
Remove from LVE all users, which absent in system
:return: None
N)r
rG r- r r r rI rc rt r r r r r! r )r r rS s r? remove_absent_usersr
s. #uuN
v !! =':<< (,,....00 ^ # # L
''''
F%%f---OOF++++! D
sZ ;B
DB65D6
D9C;:D;
D DD D D
DDD)Frb )r )NN)r FT)T)NNN)NFNNr )r? )rQ r/ N)r@ N)FN)r r N(
contextlibr r{ r r
r r r r r rr r r xml.dom.minidomdomminidomr+ builtinsr functoolsr r typingr r r r r
r r r rm r clcommon.constr r r
r r r clcommon.cpapi.cpapiexceptionsr
clcommon.lockr clcontrollibr cleventsr r cllimits.libr cllvectl.logr clveconfig.ve_configr r r clveconfig.ve_lockr r r r r r r! secureior" r# websiteisolationr$ rN r% r websiteisolation.exceptionsr& GET_CP_PACKAGE_SCRIPTr r r~ r r r r} r r: r r IS_DEBUGr. LVEr rG r/ rE rK rP rT rZ r_ rh ru ry rw rP rn rQ r r ro r r r r r- rH r$ rY rZ r, r[ rO r] r\ r^ r r r r r r r r r r r r r contextmanagerr
r r rp r1 r: r@ rC rF rI r rT r_ rh r; rq ro r{ r r r r r r r r r r r r r r r r r r
r r
r r* r r r0 r8 r: r< r> tupler r5 rK rP rk r{ r r r r r r r r r r r r r r r r r r r r r r r r r r r r" r( r& r- r r> r/ rE rF r r_ ra ry ry r r r r r r r r r r r r0 r r r r r r r r r r r r r= r> r? r s
? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?
" " " " " " g g g g g g g g g g g g 8 8 8 8 8 8 & & & & & & * * * * * * P P P P P P P P % % % % % % . . . . . . O O O O O O O O O O E E E E E E E E D D D D D D D D D D D D D D ? ? ? ? ? ? ? ? 0 0 0 0 0 0 : : : : : : 0 0 0 0 0 0 @
:
3rz~~mQ// 0 0 !!'+.. E
CC E ! ! !E
#---C Y ? ? ?2* * *
H
H
H % % %K K K= $3 3 3 3*
ONN
,+ + + +,
1 1 1D &%''9<<>> , $ * * 0 0 0 " " "(
>
& &
[ [ [ 2 2 22 2 2 & &D & & & &Rk k k"i "i "iJ3 d38n 3 3 3 3 l
&
&
&
& % % % L L L L EA EA EA EAP I I I ! ! !H
?
?
? 0 0 0 0 4 4 4 4 4 f f f!1 !1 !1J"p "p "p "pJ! ! ! N D Z >n >n >n >nB6 6 688S 8T 8 8 8 8$
/
/
/
/
/I I I I Iy I I I
S
T
6s- s- s- s-l
% %5 % %S %# % % % %6 , 6! ! ! !H %, N N N Nf5 5 5 56 $5 5 5( ". . . .bJ J J \C> C> C>L$eD$J&7 $ $ $ $
'
'
'
'n n nb!1 !1 !1H. . .:G G G$J J J* G G GF F F,
+ + +(2 2 2 *
+& +& +& +&\ F D5 5 5 52H5 H5 H5 H5V
C
#
(3-
! ! ! *+S +S +S\ <& & & &R6 6 6S S S$* $* $*NJ J J J\5 5 5:5 5 5&6 6 64 ! t t t tn < < < <
( S S S2 2 2$
"# # #2 "1 1 14BD BD BD BDJ1@ 1@ 1@h r>