§ ½@¾j-’مَh—ddlZddlZddlZddlZddlmZddlmZddlm Z m Z ddlmZddl mZddlmZmZddlmZdd lmZdd lmZejd¦«ZdZd ZdZGd„de¦«ZGd„de¦«ZGd„de¦«Z Gd„d¦«Z!Gd„d¦«Z"Gd„d¦«Z#dS)éN)عOptional)عProcLve)عcpapiعClPwd)عNotSupported)ع ve_config)ع PyLveErrorعPyLve)عconfig)عid_registry)عdomain_lve_sentry_extraz lvectl.lveapiعreselleréécَ—eZdZdS)عNameMapErrorN©ع__name__ع __module__ع__qualname__©َْpy/lveapi.pyrr,َ€€€€€ط€Drrcَ—eZdZdS)عNameMapConfigErrorNrrrrrr0rrrcَ—eZdZdS)عNameMapNotInitializedNrrrrrr4rrrcَJ—eZdZdZefd„Zd„Zd„Zd„Zdd„Z d „Z d d „Zd„ZdS)عNameMapzع Container for backend storing resellers_name<=>resellers_id map As backend store use ve.cfg Usage: >>> name_map = NameMap() >>> name_map.link_xml_node() >>> name_map.id_list() [1001] cَ0—||_d|_d|_dS©N)ع _xml_tag_nameع _xml_nodeع_reseller_id_name_map)عselfعxml_tag_names rع__init__zNameMap.__init__Ds€ط)ˆشطˆŒà%)ˆش"ذ"ذ"rcَN—| ¦«D]\}}||kr|cSŒdSr"©عload_from_node)r&عnameعname_عid_s rعget_idzNameMap.get_idJsB€ط×-ز-ر/ش/ً ً ‰JˆEگ3طکٹ}ˆ}طگ گ گ ًً ً rcَN—| ¦«D]\}}||kr|cSŒdSr"r*)r&r.r-ع_ids rعget_namezNameMap.get_nameOsB€ط×-ز-ر/ش/ً ً ‰JˆEگ3طگcٹzˆzطگگگًً ً rcَ>—d„| ¦«D¦«S)Ncَ—g|]\}}|‘ŒSrr)ع.0ع_r.s rْ z#NameMap.id_list..Us€ذ8ذ8ذ8™کک3گذ8ذ8ذ8rr*©r&s rعid_listzNameMap.id_listTs"€ط8ذ8 $×"5ز"5ر"7ش"7ذ8ر8ش8ذ8rNTcَb—|€d|_| |¦«dS||_d|_dS)aC Initialize NameMap. If xml_node is none, config will be loaded automatically :param use_cache: Bool whether bypass ve.cfg xml cache :param xml_node: !! DEPRECATED PARAM !! this param is left only for compatibility with our old code N)r$ع_load_resellers_map_from_ve_cfgr%)r&عxml_nodeع use_caches rع link_xml_nodezNameMap.link_xml_nodeWsB€ًذà!ˆDŒNط×0ز0°ر;ش;ذ;ذ;ذ;ً&ˆDŒNط)-ˆDش&ذ&ذ&rcَ—g|_| |¬¦«\}}|D]b}| d¦«}t| d¦«¦«}|r'|r%||jvr|j ||f¦«Œc~~dS)zT Fills self._reseller_id_name_map from ve.cfg file :return: ©r=عuserعidN)r%ع_try_get_xml_nodeعgetAttributeعintعappend)r&r=عve_cfgr<عel_r,r.s rr;z'NameMap._load_resellers_map_from_ve_cfgis¦€ً &(ˆش"ط×1ز1¸Iذ1رFشFرˆگطً ?ً ?ˆCط×#ز# Fر+ش+ˆDفگc×&ز& tر,ش,ر-ش-ˆCطً ?کً ? ¨4ش+Eذ Eذ Eطش*×1ز1°3¸°+ر>ش>ذ>ّàطˆFˆFrcَت— tj|¬¦«\}}n.#tj$r}d|_t d¦«|‚d}~wwxYw|| |j¦«fS)Nr@z-Error happened while loading data from ve.cfg)rعget_xml_configعBadVeConfigExceptionr%rعgetElementsByTagNamer#)r&r=rGr<عes rrCzNameMap._try_get_xml_nodeys€€ً ]ف(ش7ہ)ذLرLشLرˆFگHگHّفش-ً ]ً ]ً ]ط)-ˆDش&ف$ذ%TرUشUذ[\ذ\ًّّّّ ]ًّّّگx×4ز4°Tش5GرHشHذHذHs‚›AھAءAc#َPK—|j€|j€td¦«‚|jrc|j |j¦«D]C}| d¦«}t | d¦«¦«}|r|r||fV—ŒD|jr|jD] \}}||fV—ŒdSdS)z? Obtain data from xml node as (name, id_) list NzLName map is not initialized. Use obj.link_xml_node() to get data from configrArB)r$r%rrLr#rDrE)r&rHr,r.s rr+zNameMap.load_from_nodeپsîèè€ًŒ>ذ! dش&@ذ&Hف'ً)Zٌ[ô[ً [àŒ>ً $à”~×:ز:¸4ش;MرNشNً $ً $گط×'ز'¨ر/ش/گفک#×*ز*¨4ر0ش0ر1ش1گطً$کCً$ط ک)گOگOگOّàش%ً à!ش7ً ً ‘ گگTطکCگiگگگگً ً ً ً r)NT)T) rrrع__doc__عLVP_XML_TAG_NAMEr(r/r2r9r>r;rCr+rrrr r 8s®€€€€€ً ً ً%5ً*ً*ً*ً*ًًًً ًًً 9ً9ً9ً.ً.ً.ً.ً$ًًً IًIًIًIً ً ً ً ً rr cَp—eZdZdZd„Zd„Zd d„Zd„Zd„Zd„Z d „Z ed „¦«Zed„¦«Z d„ZdS)عLvpMapzl Container for storing information about lve:lvp mapping In which reseller container stored lve cَ|—t¦«|_i|_i|_d|_t¦«|_dSr")r عname_mapع_id_name_mapع_name_id_mapع_reseller_id_map_panelrع_pwdr8s rr(zLvpMap.__init__›s4€ف™ œ ˆŒ طˆشطˆشط&*ˆش#ف‘G”GˆŒ ˆ ˆ rcَ.—||j|<||j|<dSr")rUrV)r&r,r.s rع_add_mapzLvpMap._add_map¢s"€ط!%ˆشک#رط"%ˆشک$رذذrNcَp— |j |¦«jS#tj$r|cYSwxYwr")rXعget_pw_by_nameعpw_uidrعNoSuchUserException)r&r,عdefaults rr]z LvpMap.pw_uid¦sG€ً ط”9×+ز+¨Dر1ش1ش8ذ8ّفش(ً ً ً طˆNˆNˆNً ّّّs‚!،5´5cَ¦—| |¦«}|پ|S|j€tj¦«|_|j |¦«Sr")r]rWrعget_reseller_id_pairsعget)r&rعuids rع_get_panel_reseller_idzLvpMap._get_panel_reseller_id¬sP€àڈkٹkک(ر#ش#ˆطˆ?طˆJًش&ذ.ف*/ش*Eر*Gش*GˆDش'طش*×.ز.¨xر8ش8ذ8rcَّ—|j |¦«p|j |¦«}|پ|S | |¦«}n#t $rd}YnwxYw|پ| ||¦«|S)z‡ Convert reseller name to an LVE id. It supports resellers without a system account (for Plesk compatibility). N)rTr/rVrbrdrrZ)r&r,rcs rعget_reseller_idzLvpMap.get_reseller_id·s•€ًŒm×"ز" 4ر(ش(ذG¨Dش,=×,Aز,Aہ$ر,Gش,Gˆطˆ?طˆJً ط×-ز-¨dر3ش3ˆCˆCّفً ً ً طˆCˆCˆCً ّّّàˆ?طڈMٹMک$ ر$ش$ذ$طˆ s؛AءAءAcَ*—|j |¦«p|j |¦«}|پ|S t j|¦«j}tj|¦«r| ||¦«nd}n#t$rd}YnwxYw|S)z„ Convert reseller id to reseller name It support resellers without system account (for Plesk compatibilyty) N)rTr2rUrbعpwdعgetpwuidعpw_namerعis_resellerrZعKeyError)r&r.r,s rعget_reseller_namezLvpMap.get_reseller_nameبsھ€ًŒ}×%ز% cر*ش*ذH¨dش.?×.Cز.CہCر.Hش.HˆطذطˆKً ف”< ر$ش$ش,ˆDفش ر&ش&ً ط— ’ کd Cر(ش(ذ(ذ(àگّّفً ً ً طˆDˆDˆDً ّّّàˆs؛ABآBآBc#َشK—ttj¦«¦«}i}|D]N} | |¦«||<Œ#t$r&tjt jd|›d‌¦«YŒKwxYwtjd¬¦«D]\\}}| |¦«}|€$tjt jd|›d‌¦«Œ@| |d¦«}||fV—Œ]dS)zذ This method loops over all user:reseller pairs in control panel and returns appropriate lve_id:lvp_id pairs. THIS METHOD WON'T CHECK IF 'RESELLER LIMITS' IS ENABLED IN ve.cfg z Reseller ْ> still exists in control panel, but absent in /etc/passwd file)عcploginr)عkeylsNْuser r) عsetrع resellersrfrعsyslogعLOG_WARNINGعcpinfor]rb)r&rtع reseller_uidsrrpعlve_idعlvp_ids rع lve_lvp_pairszLvpMap.lve_lvp_pairsغs`èè€ُ‌œر)ش)ر*ش*ˆ طˆ ط!ً Jً JˆHً Jط*.×*>ز*>¸xر*Hش*Hگ کhر'ذ'ّفً Jً Jً Jف” فش&ً)I°Hً)Iً)Iً)IٌJôJًJًJًJً Jُّّّ"'¤ذ4Kذ!Lر!Lش!Lً !ً !رˆGگXط—[’[ ر)ش)ˆFً ˆ~ف” فش&ً)I°ً)Iً)Iً)IٌJôJًJًط"×&ز& x°ر3ش3ˆFطک&گ.ذ ذ ذ ذ ً !ً !sھAء-A3ء2A3c#َ>K—tj¦«D]}|V—ŒdSr")rrt)ع reseller_names rrtzLvpMap.resellersّs6èè€ه"œ_ر.ش.ً ً ˆMطذذذذً ً rcَ—g}tj|¦«}|D]d} tj|¦«j}| |¦«Œ2#t$r&tjtjd|›d‌¦«YŒawxYw|S)z: Obtain from control panel resellers uids rrro) rعreseller_usersrhعgetpwnamr]rFrlrurv)r,عuidsrrAr.s rrxzLvpMap.reseller_uids‎sہ€ً ˆفش-¨dر3ش3ˆط"ً Jً JˆDً Jف”l 4ر(ش(ش/گط—’کCر ش ذ ذ ّفً Jً Jً Jف” فش&ً)I°ً)Iً)Iً)IٌJôJًJًJًJً Jًّّّˆsœ.Aء-A;ء:A;cَV—| |¦«}| |¦«Sr")rmrx)r&rzr}s rعlvp_lve_id_listzLvpMap.lvp_lve_id_lists)€ط×.ز.¨vر6ش6ˆ ط×!ز! -ر0ش0ذ0rr")rrrrOr(rZr]rdrfrmr{عstaticmethodrtrxrƒrrrrRrR–sر€€€€€ًًًًًً&ً&ً&ًًًًً 9ً 9ً 9ًًًً"ًًً&!ً!ً!ً:ً ً ٌ„\ً ًًًٌ„\ًً 1ً1ً1ً1ً1rrRcَr—eZdZdd„Zdefd„Zdd„Zd„Zd„Zd„Z d „Z d „Zd„Zd„Z d „Zd„Zd„Zd„Zd„ZdS)عLveNcَ¸—|p t¦«|_|p t¦«|_|p t ¦«|_t ¦«|_d|_dSr") rعprocr عpyrRعmaprsع_mapped_domain_usersع_lve_lvp_map_cache)r&rˆr‰rٹs rr(zLve.__init__sL€طذ%‌G™IœIˆŒ طگ-‌™œˆŒطگ?‌&™(œ(ˆŒف),©¬ˆش!ً04ˆشذذrعreturncَت‡—|j€Ut|jj ¦«¦«ٹˆfd„|j ¦«D¦«|_|jS)a{lve_id: lvp_id} from ve.cfg, built once per instance. Callers that need a single lookup must use this rather than scanning `lve_id_lvp_id_pairs()`; the scan is O(accounts) and doing it per account is what made `apply all` quadratic. Ncَ(•—i|]\}}||‰vr|nd“ŒS)rr)r5ryrzعenabled_lvp_ids €rْ z#Lve.lve_lvp_map../s=ّ€ً'ً'ً'ل"گFکFً 6¨^ذ#;ذ#;ککہً'ً'ً'r)rŒrsrٹrTr9r{)r&rگs @rعlve_lvp_mapzLve.lve_lvp_map#spّ€ًش"ذ*ف ¤ش!2×!:ز!:ر!<ش!<ر=ش=ˆNً'ً'ً'ً'à&*¤h×&<ز&<ر&>ش&>ً'ٌ'ô'ˆDش#ًش&ذ&rcَ—d|_dS)zBDrop the memoised map after ve.cfg or the panel user list changes.N)rŒr8s rعinvalidate_lve_lvp_mapzLve.invalidate_lve_lvp_map5s€à"&ˆشذذrc#َbK—| ¦« ¦«Ed{V—†dS)a5 Obtain {lve id}:{lvp id} pairs iterator based on ve.cfg config (detect enabled resellers containers) This method (unlike LvpMap.lve_lvp_pairs) will check if reseller is enabled in ve.cfg and return lvp_id=0 for users of reseller with disabled reseller limits N)r’عitemsr8s rعlve_id_lvp_id_pairszLve.lve_id_lvp_id_pairs9s>èè€ً×#ز#ر%ش%×+ز+ر-ش-ذ-ذ-ذ-ذ-ذ-ذ-ذ-ذ-ذ-rcَR—| ¦« |d¦«S)z\ Obtain lvp id based on ve.cfg config (detect enabled resellers containers) r)r’rb)r&rys rعlve2lvpzLve.lve2lvpDs&€ً×زر!ش!×%ز% f¨aر0ش0ذ0rc َ¶—| |d¦«}||kr7|j |¦«r|j ||¦«rdSt d|||¦«||krB||krdn|}t d|||¦«|j ||¦«|j ||d|›d|›d‌¬¦«|||<|j |¦«r]|j ||¦«sBt d ||¦«tj tj d |›d|›d‌¦«d S)avMake sure lve really sits inside its isolation LVP lvp. *kernel_map* is the shared /proc/lve/map snapshot (CLOS-6868); this writes its own effect back into it. *parent_lvp* is where lve belongs when it is NOT isolated -- its reseller LVP, or 0. lvp must already exist; callers create it first. CLOS-7493. Two things this must not do, both of which reported success while leaving the account outside its own aggregate cap: * Trust the map. /proc/lve/map records where an LVE is *meant* to live, not where it is; a row can name lvp while the LVE itself is still at the host LVP. So when the map claims the move is done, confirm it against lvp's own listing -- the kernel's answer. That read is skipped in every other case, and skipped entirely for an LVE that does not exist yet: ordinarily lve is created later by lve_setup, already parented by the mapping this registers. * Trust lve_lvp_move's return code. It returns 0 without touching the LVE when the mapping already names the target (kmod lve_lvp_map_move(): `old_lvp_id == lvp_id` -> return 0), which is exactly the state above. Park the LVE on *parent_lvp* first, so the move back has a mapping change to act on. Measured: the bare move leaves it at /lve, the pair lands it at /lvp/lve. A self-owned reseller that isolates a domain of its own is its own parent (*parent_lvp* == *lve_id*), and parking there would be the same no-op, so it is parked on the host LVP instead. Whether lve_lvp_move should repair that divergence by itself is a question for lve-kmod (CLOS-7468 left it open); until it does, the re-seat is what re-homes such an LVE from here. rFzش>ًًگ5هڈٹذOطک ٌ ,ô ,ً ,àکزذط&¨&ز0ذ0گqگq°jˆHفڈHٹHً!ط"(¨&°(ٌ <ô <ً <àŒG× ز ¨6ر2ش2ذ2طŒ×زطگFطY¨ذYذY¸FذYذYذYً ٌ ô ً ً$ˆ گ6رً Œ7×زکfر%ش%ً ¨d¬i×.Iز.Iب&ذRXر.Yش.Yً فڈIٹIً;طٹ>ک$œ)×0ز0ر2ش2ر3ش3ً ط”Y—]’]‘_”_×(ز(¨°ر3ش3ˆFˆFàˆFطˆŒشکFذ4 Tذ4ذ4ذ4¨Vذ4ذ4ذ4طگQٹ;ˆ;ً ف”کVر$ش$ذ$ط”×#ز# F¨Fر3ش3ذ3ذ3ذ3ّفً ً ً طگگً ًّّّ ˆ;sآ/B5آ5 CأCcَ–‡—tj|¦«} tj|¦«j}tt j|¦«pg¦«}n#t$ri}YnwxYwg}dx}x}}|j Dگ]T} | j s!|dz }t d|¦«Œ+ | | j ¦«} | €'|dz }t d|| j ¦«Œotj|| ¦«}|€(|dz }t d|| j | ¦«Œ®| || j ¦«f¦«Œف#t(t*t,f$r_}t/jt.jd|›d| j ›d |›‌¦«|dz }t d || j |¦«Yd}~گŒNd}~wwxYwt3|j ¦«t3|¦«z } d}|rPt5| ¦«¦«ٹt9ˆfd„tj|¦«piD¦«¦«}|s|s|r t<j}nt<j }t |d|t3|¦«t3|j ¦«| rd | ›d|›d|›d|›d‌ nd|rd |›d‌ndtCd¦«¬¦«|S)uنResolve all domainâ†’docrootâ†’domain_id mappings once. Returns a list of (domain_id, limits_dict) tuples. Callers pass this to _map_domain_lves / apply_domain_lve_limits to avoid redundant resolve_docroot + assign_domain_id calls. Uses cpapi.userdomains() to fetch all domainâ†’docroot pairs in a single file read instead of calling resolve_docroot per domain, which would re-parse the entire userdatadomains file each time. rézeuid %s: domains.json holds a domain entry with no name; skipped, so no per-domain limits come from itNzfuid %s: domain %r from domains.json has no docroot in the panel; its per-domain limits are NOT appliedz‡uid %s: domain %r (docroot %r) has no domain LVE id -- not enabled via enable-domain-limits -- so its per-domain limits are NOT appliedz)Skipping malformed domain entry for user z (name=ْ): z^uid %s: malformed domain entry (name=%r) skipped, so its per-domain limits are NOT applied: %sc3َ$•K—|] }|‰v¯dV—ŒdS)r³Nr)r5عdocrootعpanel_docrootss €rْ z(Lve._build_domain_map..s:ّèè€ً)ً)طط .ذ0ذ0ًط0ذ0ذ0ذ0ً)ً)rzYuid %s: domain map built -- %s of %s configured domain(s) resolved to a domain LVE id%s%sz; z skipped (z stale, z malformed, z not enabled)عz0 registered docroot(s) the panel no longer listszdomain-map-skipped)عextra)"ع _ws_configعload_configrhrirjعdictrعuserdomainsrlعdomainsr,r،عwarningrbع_ws_id_registryع get_domain_idعdebugrFعlimitsعto_dictع ValueErrorع TypeErrorع OverflowErrorrurvعlenrsعvaluesعsumعget_all_entriesعloggingعWARNINGعDEBUGr )r&ryrعusernameعdocroot_by_domainعentriesع skipped_staleعskipped_not_enabledعskipped_tenant_dataعdr¶ع domain_idعexcعskippedعorphaned_registrationsعlevelr·s @rع_build_domain_mapzLve._build_domain_map›sذّ€ُش'¨ر/ش/ˆً #ف”| Fر+ش+ش3ˆHف $¥Uش%6°xر%@ش%@ذ%FہBر Gش Gذذّفً #ً #ً #ط "ذذذً #ًّّّˆً EFذEˆ ذEذ+ذ.Aط”ً> ٌ> ˆAط”6ً ً$ qر(ذ#ف—’ًLطMSٌUôUًUàً5 ط+×/ز/°´ر7ش7گطگ?ً" Qر&گMف—K’Kً@طAGبجٌQôQًQًُ,ش9¸&ہ'رJشJگ طذ$ً(¨1ر,ذ'ف—I’Iً_à ¤¨ٌ1ô1ً1ًط—’ ¨1¬8×+;ز+;ر+=ش+=ذ>ر?ش?ذ?ذ?ّف¥ =ذ9ً ً ً ُ” فش&ً0ہً0ً0طœVً0ً0ط*-ً0ً0ٌ1ô1ً1ً$ qر(ذ#ف—’ًDطEKبQجVذUXٌZôZًZàگگگ‘ًّّّّ ُّّّگf”nر%ش%¨G©¬ر4ˆً@"#ذطً ُ !ذ!2×!9ز!9ر!;ش!;ر<ش<ˆNف%(ً)ً)ً)ً)ف"1ش"Aہ&ر"Iش"Iذ"OبRً)ٌ)ô)ٌ&ô&ذ"ً "ً " ]ً "ذ6Iً "ف”OˆEˆEه”MˆEُ ڈٹطً ط ¥# g،,¤,µ°F´Nر0Cش0Cà5<ً Eً 2گً 2ً 2 Mً 2ً 2ذ;Nً 2ً 2ط"ً 2ً 2ً 2ً 2طBDà%ً .ذYذ'ذYذYذYذYط+-ف)ذ*>ر?ش?ً ٌ Aô Aً Aًˆs7—Eؤ#.EإGإ)AGاGc َP—dx}}|D]ش\}}| |¦«|krt d|||¦«Œ<||vrRt d||| |¦«|¦«|j ||¦«|dz }n=t d|||¦«|j ||¦«|dz }|||<Œص|s|r,t d||||t|¦«¦«|j |¦«dS)uBPlace every domain LVE that belongs to *lve_id* under its user LVP. Uses lve_lvp_move for domain LVEs that already exist in the kernel, and falls back to lve_lvp_map for those that do not yet exist (so the kernel will place them under the correct LVP when lve_setup creates them later). *proc_map* is an lve_idâ†’lvp_id dict (from /proc/lve/map) used to skip mappings that are already correct. Updated in-place so callers see the new state. *domain_map* is a precomputed list from _build_domain_map(). rz)uid %s: domain LVE %s already under lvp%sz0uid %s: moving domain LVE %s from lvp%s to lvp%sr³zAuid %s: pre-registering not-yet-created domain LVE %s under lvp%szYuid %s: mapped domain LVEs under lvp%s -- %s moved, %s pre-registered, %s domain(s) totalN) rbr،rأr‰r£r’r¢rةr‹عadd)r&ryعproc_mapع domain_mapعmovedعpre_registeredr×ع_limitss rع_map_domain_lveszLve._map_domain_lves7sm€ً"#ذ"ˆگط",ً )ً )رˆIگwطڈ|ٹ|کIر&ش&¨&ز0ذ0ف— ’ ذEط )¨Vٌ5ô5ً5ààکHذ$ذ$ه— ’ ذLط )¨X¯\ھ\¸)ر-Dش-DہfٌNôNًNà”×$ز$ V¨Yر7ش7ذ7طک‘ گگُ— ’ ذ]ط )¨Vٌ5ô5ً5à”×#ز# F¨Iر6ش6ذ6ط !ر#گط"(ˆHگYرذطً cگNً cفڈHٹHً*ط+1°6¸5ہ.صRUذV`رRaشRaٌ cô cً càش!×%ز% fر-ش-ذ-ذ-ذ-rcَz—d„|D¦«}|s+t d|t|¦«¦«dS |j |¦«j}n(#t$rtj¦«pddz}YnwxYw|Dگ]´\}}|j ¦«} d|vrt|d¦«p||_n||_d|vr-t|d¦«}|r|tjznd|_ d |vrt|d ¦«|_d |vrt|d ¦«|_d|vrt|d¦«|_d|vrt|d¦«|_d |vr-t|d ¦«} | r| tjznd|_nM#t&t(t*f$r3} t-jt,jd|›d|›d| ›‌¦«Yd} ~ گŒhd} ~ wwxYw|j ||d|›d‌¬¦«t d||||j¦«گŒ¶dS)uêApply per-domain limits from domains.json to each domain LVE. Must be called after lve_set_default() resets all LVEs inside the user LVP to the user's defaults. Each domain LVE is set to its stored limits, or the user's current cpu when unconfigured (cpu=0). CLOS-4024: the kernel rejects lve_lvp_setup when any child has cpu=0 inside a finite-cpu parent, so we never write cpu=0 to the kernel. CLOS-4060: domains with no custom limits are skipped â€” lve_set_default already reset their existing LVEs to user defaults, and non-existing ones will be lazily created by lve_enter under the user's LVP. *domain_map* is a precomputed list from _build_domain_map(). cَ —g|]\}}|¯||f‘ŒSrr)r5rضعls rr7z/Lve.apply_domain_lve_limits..ns%€ذ<ذ<ذ<،D A q¸!ذ<ک!کQکذ<ذ<ذHذOک ¥jش&:ر:ذ:بaًش*àک6گ>گ>ف%(¨°¬ر%6ش%6گH”Nطکfذ$ذ$ف(+¨F°7¬Oر(<ش(<گHش%طکVذ#ذ#ف'*¨6°&¬>ر':ش':گHش$طک6گ>گ>ف),¨V°D¬\ر):ش):گHش&طکVذ#ذ#ف!$ V¨F¤^ر!4ش!4گJà>HذOک ¥jش&:ر:ذ:بaًش&ّّه¥ =ذ9ً ً ً ُ” فش&ً.ہ ً.ً.ط#ً.ً.ط(+ً.ً.ٌ/ô/ً/ًگگگ‘ًّّّّ ًّّّ ŒG×زطک8طR°)ذRذRذRً ٌ ô ً ُ ڈIٹIذKطکi¨°´ٌ Bô Bً Bٌ Bً]/ Bً/ Bs*»Aء"Bء?Bآ%DF(ئ(G2ئ?(G-ا-G2c َز—|j ¦«}|j ¦«rd„t j¦«D¦«}nt ¦«}t dt|¦«|j ¦«¦«dx}}| ¦«Dگ]\}}||vگrB|dkrV|j |¬¦«s;t d||¦«|j |¦«|dz }|j |¬¦«sZt d|||¦«|r|j ||¦«n|j |¦«|dz }| |||¦«r|dz }||jvr/| |¦«}| |||¬¦«گŒ0t d |¦«گŒM| |d¦«|kr«|j |¬¦«s:t d |¦«|j |¦«|dz }t d|| |d¦«|¦«|j ||¦«|||<|dz }گŒt d||¦«d S)uj Load lve_id:lvp_id map to kmod-lve. For users with per-domain isolation configured, builds a nested LVP hierarchy instead of a flat reseller mapping: lvp<0> [lvp] â†گ reseller LVP (if enabled) lvp â†گ user-level LVP with isolation lve â†گ user LVE lve ... â†گ domain LVEs lvp<0> [lvp] â†گ reseller LVP (without isolation) lve â†گ user LVE (flat, existing behaviour) cَ:—h|]}tj|¦«¯|’ŒSr)rءrج)r5rcs rْ z Lve._sync_map..ذs9€ًًًطف"ش2°3ر7ش7ًطًًًrz;sync-map: %s domain-isolated user(s), per-domain support=%sr)rzzTsync-map: uid %s is isolated under reseller lvp%s; creating the missing reseller LVPr³z=sync-map: creating isolation LVP lvp%s for uid %s under lvp%s)rكràz4sync-map: uid %s domain LVEs already mapped this runzsync-map: creating lvp%sz*sync-map: moving lve%s from lvp%s to lvp%sz4sync-map: done -- %s LVP(s) created, %s LVE(s) movedN)rˆrٹr‰عdomains_supportedr»عfind_all_lve_ids_with_configrsr،r¢rةr—ع exist_lvprأعlve_lvp_createعlve_lvp_create2r©r‹rـrنrbr£)r&ع proc_map_dictعisolated_usersعcreated_lvpsع moved_lvesryrzràs rع _sync_mapz Lve._sync_maps2€ً$œ ں ڑ ™œˆ ًŒ7×$ز$ر&ش&ً #ًًف)شFرHشHًٌôˆNˆNُ !™UœUˆNهڈٹذNفگ^ر$ش$ d¤g×&?ز&?ر&Aش&Aٌ Cô Cً Cà$%ذ%ˆگzà"×6ز6ر8ش8ً/ $ٌ/ $‰NˆFگFطکذ'ر'ًکQ’;گ; t¤y×':ز':ہ&ذ':ر'Iش'Iگ;ف—I’IًBطCIب6ٌSôSًSà”G×*ز*¨6ر2ش2ذ2ط Aر%گLً”y×*ز*°&ذ*ر9ش9ً&ف—H’Hذ\ط# V¨Vٌ5ô5ً5àً7طœ×/ز/°¸ر?ش?ذ?ذ?àœ×.ز.¨vر6ش6ذ6ط Aر%گLً×%ز% f¨f°mرDشDً$ط !‘OگJà ش!:ذ:ذ:ط!%×!7ز!7¸ر!?ش!?گJط×)ز)¨&¸=ط5?ً*ٌAôAًAٌAُ—I’IذTذV\ر]ش]ذ]ر]ً!×$ز$ V¨Qر/ش/°6ز9ذ9طœ9×.ز.°fذ.ر=ش=ً*فں ڑ ذ"<¸fرEشEذEطœ×.ز.¨vر6ش6ذ6ط$¨ر)کف—I’IذJط$ m×&7ز&7¸ہر&Bش&BہFٌLôLًLà”G×(ز(¨°ر8ش8ذ8ط,2گM &ر)ط !‘OگJùهڈٹذGطکzٌ +ô +ً +ً +ً +rcَ†— | ¦«dS#t$rt d¦«YdSwxYw)zZ wrapped _sync_map function for prevent error if some cpapi not supported z8sync-map: skipped, the control panel does not support itN)rrr،r¢r8s rعsync_mapzLve.sync_maps[€ً QطڈNٹNرشذذذّفً Qً Qً Qُ ڈHٹHذOرPشPذPذPذPذPً Qّّّs‚ک$A؟AcَL— tj¦«S#t$rYdSwxYw)z^ Check if current panel supported for reseller's limits; :rtype: bool F)rعis_reseller_limits_supportedrr8s rعis_panel_supportedzLve.is_panel_supporteds8€ً فش5ر7ش7ذ7ّفً ً ً طگ5گ5ً ّّّs‚• #¢#cَ¦—t|j ¦«|j ¦«| ¦«f¦«S)zo Check present all needed (kmod-lve, liblve, /proc/lve, panel) for manipulate resellers limits )عallr‰عresellers_supportedrˆrr8s rعreseller_limit_supportedzLve.reseller_limit_supported%sK€ُگD”G×/ز/ر1ش1ط”I×1ز1ر3ش3ط×+ز+ر-ش-ً/ٌ0ô0ً 0rcَ€—t|j ¦«|j ¦«f¦«S)zh Check present all needed (kmod-lve, liblve, /proc/lve) for manipulate resellers limits )rr‰rrˆr8s rعis_lve10zLve.is_lve10-s3€ُگD”G×/ز/ر1ش1°4´9×3Pز3Pر3Rش3RذSرTشTذTr)NNN)rچN)rrrr(r½r’r”r—r™r©r¯rـrنrrrrrrrrrr†r†s$€€€€€ً4ً4ً4ً4ً'کTً'ً'ً'ً'ً$'ً'ً'ً'ً .ً .ً .ً1ً1ً1ً?ً?ً?ًBًًً ZًZًZًx%.ً%.ً%.ًNMBًMBًMBً^`+ً`+ً`+ًD Qً Qً Qًًًً0ً0ً0ًUًUًUًUًUrr†)$rحr«rurhعtypingrعclcommon.clprocrعclcommonrrعclcommon.cpapi.cpapiexceptionsrع clveconfigrعlve_utils.pylve_wrapperr r عwebsiteisolationrr»rrءr ع getLoggerr،rPع LVE_NO_UBCعLVE_NO_MAXENTERع Exceptionrrrr rRr†rrrْr%s#ًً€€€ط € € € ط € € € ط € € € طذذذذذà#ذ#ذ#ذ#ذ#ذ#ط!ذ!ذ!ذ!ذ!ذ!ذ!ذ!ط7ذ7ذ7ذ7ذ7ذ7à ذ ذ ذ ذ ذ à5ذ5ذ5ذ5ذ5ذ5ذ5ذ5à1ذ1ذ1ذ1ذ1ذ1ط;ذ;ذ;ذ;ذ;ذ;ط4ذ4ذ4ذ4ذ4ذ4ً€gشکر(ش(€àذط € ط€ً ً ً ً ً گ9ٌ ô ً ً ً ً ً ً کٌ ô ً ً ً ً ً ً کLٌ ô ً ً[ ً[ ً[ ً[ ً[ ٌ[ ô[ ً[ ً|z1ًz1ًz1ًz1ًz1ٌz1ôz1ًz1ً~\Uً\Uً\Uً\Uً\Uٌ\Uô\Uً\Uً\Uً\Ur