Rlj< d Z ddlZddlZddlZddlmZmZ ddlmZ ddl Z
n
# e $ r dZ
Y nw xY w e Z dZ
G d de Z G d d ZdS )
u pylve C-binding wrapper and related types.
This module wraps the pylve C extension (PyLve, PyLveError) and lives
outside lveapi deliberately: websiteisolation.* is imported by lveapi at
the top level, so any websiteisolation sub-module that needs PyLve or
PyLveError must not import from lveapi — that would form a cycle.
Placing these types here breaks the cycle; lveapi re-exports them for
backward compatibility.
N)ProcLve LIMIT_LVP_ID)uid_maxic e Zd ZdS )
PyLveErrorN)__name__
__module__ __qualname__ N/opt/cloudlinux/venv/lib64/python3.11/site-packages/lve_utils/pylve_wrapper.pyr r # s Dr r c e Zd ZdZed Zd Zd Zd Ze dddfd Z
d
Z d Z d Z
d
Zd Zd Zed ZeefdZej d ZdS )PyLvezA
Wrapper for generate traceback with pretty descriptions
c Z t | t o| t j k o| dk S )Nr )
isinstanceinterrnoENOSYS)codes r
_code_is_errorzPyLve._code_is_error+ s) $$$L%, )>L419Lr c t | j j r5d fdt D }d| d}nt }|S )N, c d g | ],}| d | dt | -S )_=)
startswithgetattr).0attrarg_vars r
z%PyLve._arg_to_str..2 sF iiiTXTcTcdgThThiD3377D1133iiir z)r _pylveliblve_settingsjoindirstr)selfr liblve_settings_attr arg_var_strs ` r
_arg_to_strzPyLve._arg_to_str/ sr gt{ : ; ; '#'99iiiiG iii$ $ M5ILLLKK g,,Kr c | d j }| d j } ||i |} | }|r= j r6t j j ||i |} | }||j |j d
t t j
| fd| D z d} j dk r t! j j di | j dk r j |s |r |j di |} t+ | |S ) Nerr_msg ignore_errorr c J g | ] \ }}| d | S )r )r+ )r kvr( s r
r! z&PyLve._wrapped_fun..H s9 X X XA1 < .funT s& $4$T;D;;;F;; ;r r )r( rF rQ s `` r
_wrap_codezPyLve._wrap_codeS s' < < < < < <
r Tg?r c || _ | j dk rt d | _ d| _ d| _ d| _ || _ || _ t | _ || _
| j | _ | j j
| _
| | j j | _ | j j | _ | | j j | _ | | j j | _ | j j | _ | | j j | _ | | j j | _ | | j j | _ | | j j | _ | | j j | _ t3 |d r| | j j | _ | | j j | _ | | j j | _ | | j j | _ | | j | _ t3 |d r&| | j j | _ d S d S )Nr6 rD z/Error code {code}; {module}.{fun_name}({args_})zBDEBUG [lvectl]: call {module}.{fun_name}({args_}) with code {code}Flve_lvp_createlve_lvp_create2) r@
__import__rD r8 rB r. r# r9 r _procr< lve_get_api_version api_version
initializerR lve_startr$
lve_create lve_destroylve_infolve_set_default lve_setup
lve_enter_pidlve_enter_pid_flags
lve_leave_pidhasattrrT lve_lvp_destroy lve_lvp_map lve_lvp_move
lve_lvp_setuprU )r( pylveretry
retry_tymer@ s r
__init__zPyLve.__init__X s,
:?? ' 4 4DN$U!"f ! YY
% ;::<< +0 )>?? #{ : //$+*@AA ??4;+BCC ,
#t{/J K K )>?? !__T[-F G G#'??4;3R#S#S !__T[-F G G 5* + + E"&//$+2L"M"MD #'??4;3N#O#OD #t{/F G GD $ 0H I ID "& 1C!D!DD 5+ , , P#'??4;3N#O#OD P Pr c , t | j d S )zB
Check in pylve binding reseller limits supported
rT )rd r# )r( s r
resellers_supportedzPyLve.resellers_supported{ s t{$4555r c x t | j d sdS | j \ }}||fdk S )a
Check if per-domain limits via hierarchical LVP (lve_lvp_create2) are
supported by both the installed library and the running kernel module.
liblve and lve-kmod may be at different versions when one is updated
without rebooting. lve_lvp_create2 requires kernel module API >= 1.7.
After pylve.initialize(), lve_kapi_ver() returns the API version that
kapi_init() negotiated with the running kernel.
rU F)r5 )rd r# lve_kapi_ver)r(
kapi_major
kapi_minors r
domains_supportedzPyLve.domains_supported sF t{$566 5!%!9!9!;!;
JJ'611r c T | | dS # t $ r Y dS w xY w)zD
Check if lve exists in kernel
:rtype: bool
TF)r^ OSError)r( lve_ids r
lve_existszPyLve.lve_exists s@
MM& ! ! !4 55 s
''c H | j |d D ]d}| }t |d d d t k rt |d c S en # t
t t f$ r Y dS w xY wdS )u| Current CPU limit of lvp, or None if it cannot be read.
liblve exposes no lve_lvp_info() binding (the kernel does implement
the ioctl), so the only way to see an LVP's own limits without
changing them is /proc/lve/resellers/lvp/list, where they are
carried in the LIMIT_LVP_ID row — the row `lvectl list-domains`
prints as `limit`, and the same row lve_lvp_setup writes. Column 1
is lCPU, in the same hundredths-of-a-percent units as
liblve_settings.ls_cpu.
Split on whitespace, not on tabs: some rows carry a spurious empty
cell after the id (26 tab-separated cells against the header's 25),
and str.split() collapses it so every row aligns to the header.
:param int lvp_id: top level container ID.
:return: int CPU limit, or None when the row is absent or unparsable.
F)lvp_idwithout_limitsr ,r5 N)rW linessplitr r rv
IndexError
ValueError)r( rz linefieldss r
_lvp_cpu_limitzPyLve._lvp_cpu_limit s $
((u(MM
*
* vays++B/00L@@ vay>>))) A
* Z0 44 ts A?B B B B c |dk r| j || S | | |j k r+ | | j j ||d S i }t }| j | D ]} | | }|||< |j pt d }||j k rZ| | }t ||j |_ | || | | # t $ r Y w xY w| | j j } | ||d }
| j | D ]i}||v r:|| } ||vr| || | | || @| || | j|
S )a~
Wrapper for lve_lvp_setup.
When a LVP's limits change (reseller or domain-isolated user),
we must iterate over child LVEs, temporarily reduce any that
exceed the new parent limit, set the LVP, then restore the
original child limits.
This is needed because the kernel does not update child LVE
limits when the parent LVP limit changes (KMODLVE-79) and
rejects the call when any child exceeds the new parent limit.
:param int lvp_id: top level container ID, 0 by default;
:param settings: liblve_settings instance.
:return: 0 or errno value
r Tr. inf)r# rh r ls_cpurR setrW lve_id_listr^ floatminr` addrv _invalidate_child_cpu) r( rz settingsreal_lve_settingsreduced_childrenrw
real_settings child_cpu
temp_settings_lve_lvp_setupresultreals r
rh zPyLve.lve_lvp_setup s " Q;;;,,VX>> >2 v & &(/ 9 9=4??4;#<==t
#% #j,,V44 F
$
f 5 5
,9!&) * 0 @E%LL x..$(MM&$9$9M+.y(/+J+JM(NN6=999$((000
)BCC tDDD j,,V44
>
>F***(0!111..vtXFFFvt,,,,
vt}}V'<'<====
s BD..
D;:D;c | | }|j |j k r
|j |_ n t d|j dz
|_ | || dS )a Force the kernel to re-apply a child's CPU cgroup value.
Sets CPU to a value different from the child's current lve_limits
so that the subsequent lve_setup with the real value is not
treated as a no-op by lve_resources_setup().
r5 N)r^ r maxr` )r( rw r parent_settingsbumps r
r zPyLve._invalidate_child_cpu sd }}V$$ ;/0 0 0)0DKK a !7!!;<O-- 3 EEE 2D 2D 2 2 2 2s )N)r r r
__doc__ staticmethodr r+ rM rR
_pylve_modulerl rn rt rx r rh r r UID_MAX
MAX_LVE_IDr
contextlibcontextmanagerr r r r
r r ' sD M M \M 4
+$3a !P !P !P !PF6 6 6 2 2 2 :b b bH % % % \" *1z P P P P: 3 3 3 3 3r r )r r r r: clcommon.clprocr r clcommon.clfuncr ri r ImportErrorr r r r r r r r
r s 1 1 1 1 1 1 1 1 # # # # # #!!!!! MMM '))
y3 y3 y3 y3 y3 y3 y3 y3 y3 y3s # --