Vh ddlmZmZmZeZdZdZdZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlZ ddlZdZddlmZdd lmZdd lmZmZd d d ddd ddd dZddddddddddddd id ddd!d"d#d$ddd%d&d#d'd(Zgd)d*ggd+gd,gd-gd)d.Zgd/gd0gd1d2Zd3d4d5d6d7d8d9Zd:Z d;Z!Gd<d=e"Z#d>Z$e%d?k(re$yy#e$rdZYwxYw)@)absolute_importdivisionprint_functiona module: lxc_container short_description: Manage LXC Containers description: - Management of LXC containers. author: "Kevin Carter (@cloudnull)" extends_documentation_fragment: - community.general.attributes attributes: check_mode: support: none diff_mode: support: none options: name: description: - Name of a container. type: str required: true backing_store: choices: - dir - lvm - loop - btrfs - overlayfs - zfs description: - Backend storage type for the container. type: str default: dir template: description: - Name of the template to use within an LXC create. type: str default: ubuntu template_options: description: - Template options when building the container. type: str config: description: - Path to the LXC configuration file. type: path lv_name: description: - Name of the logical volume, defaults to the container name. - If not specified, it defaults to E(CONTAINER_NAME). type: str vg_name: description: - If backend store is lvm, specify the name of the volume group. type: str default: lxc thinpool: description: - Use LVM thin pool called TP. type: str fs_type: description: - Create fstype TYPE. type: str default: ext4 fs_size: description: - File system Size. type: str default: 5G directory: description: - Place rootfs directory under DIR. type: path zfs_root: description: - Create zfs under given zfsroot. type: str container_command: description: - Run a command within a container. type: str lxc_path: description: - Place container under E(PATH). type: path container_log: description: - Enable a container log for host actions to the container. type: bool default: false container_log_level: choices: - Info - info - INFO - Error - error - ERROR - Debug - debug - DEBUG description: - Set the log level for a container where O(container_log) was set. type: str required: false default: INFO clone_name: description: - Name of the new cloned server. - This is only used when state is clone. type: str clone_snapshot: description: - Create a snapshot a container when cloning. - This is not supported by all container storage backends. - Enabling this may fail if the backing store does not support snapshots. type: bool default: false archive: description: - Create an archive of a container. - This will create a tarball of the running container. type: bool default: false archive_path: description: - Path the save the archived container. - If the path does not exist the archive method will attempt to create it. type: path archive_compression: choices: - gzip - bzip2 - none description: - Type of compression to use when creating an archive of a running container. type: str default: gzip state: choices: - started - stopped - restarted - absent - frozen - clone description: - Define the state of a container. - If you clone a container using O(clone_name) the newly cloned container created in a stopped state. - The running container will be stopped while the clone operation is happening and upon completion of the clone the original container state will be restored. type: str default: started container_config: description: - A list of C(key=value) options to use when configuring a container. type: list elements: str requirements: - 'lxc >= 2.0 # OS package' - 'python3 >= 3.5 # OS Package' - 'python3-lxc # OS Package' notes: - Containers must have a unique name. If you attempt to create a container with a name that already exists in the users namespace the module will simply return as "unchanged". - The O(container_command) can be used with any state except V(absent). If used with state V(stopped) the container will be V(started), the command executed, and then the container V(stopped) again. Likewise if O(state=stopped) and the container does not exist it will be first created, V(started), the command executed, and then V(stopped). If you use a C(|) in the variable you can use common script formatting within the variable itself. The O(container_command) option will always execute as C(bash). When using O(container_command), a log file is created in the C(/tmp/) directory which contains both C(stdout) and C(stderr) of any command executed. - If O(archive=true) the system will attempt to create a compressed tarball of the running container. The O(archive) option supports LVM backed containers and will create a snapshot of the running container when creating the archive. - If your distro does not have a package for C(python3-lxc), which is a requirement for this module, it can be installed from source at U(https://github.com/lxc/python3-lxc) or installed using C(pip install lxc). a! - name: Create a started container community.general.lxc_container: name: test-container-started container_log: true template: ubuntu state: started template_options: --release trusty - name: Create a stopped container community.general.lxc_container: name: test-container-stopped container_log: true template: ubuntu state: stopped template_options: --release trusty - name: Create a frozen container community.general.lxc_container: name: test-container-frozen container_log: true template: ubuntu state: frozen template_options: --release trusty container_command: | echo 'hello world.' | tee /opt/started-frozen # Create filesystem container, configure it, and archive it, and start it. - name: Create filesystem container community.general.lxc_container: name: test-container-config backing_store: dir container_log: true template: ubuntu state: started archive: true archive_compression: none container_config: - "lxc.aa_profile=unconfined" - "lxc.cgroup.devices.allow=a *:* rmw" template_options: --release trusty # Create an lvm container, run a complex command in it, add additional # configuration to it, create an archive of it, and finally leave the container # in a frozen state. The container archive will be compressed using bzip2 - name: Create a frozen lvm container community.general.lxc_container: name: test-container-lvm container_log: true template: ubuntu state: frozen backing_store: lvm template_options: --release trusty container_command: | apt-get update apt-get install -y vim lxc-dev echo 'hello world.' | tee /opt/started if [[ -f "/opt/started" ]]; then echo 'hello world.' | tee /opt/found-started fi container_config: - "lxc.aa_profile=unconfined" - "lxc.cgroup.devices.allow=a *:* rmw" archive: true archive_compression: bzip2 register: lvm_container_info - name: Debug info on container "test-container-lvm" ansible.builtin.debug: var: lvm_container_info - name: Run a command in a container and ensure it is in a "stopped" state. community.general.lxc_container: name: test-container-started state: stopped container_command: | echo 'hello world.' | tee /opt/stopped - name: Run a command in a container and ensure it is in a "frozen" state. community.general.lxc_container: name: test-container-stopped state: frozen container_command: | echo 'hello world.' | tee /opt/frozen - name: Start a container community.general.lxc_container: name: test-container-stopped state: started - name: Run a command in a container and then restart it community.general.lxc_container: name: test-container-started state: restarted container_command: | echo 'hello world.' | tee /opt/restarted - name: Run a complex command within a "running" container community.general.lxc_container: name: test-container-started container_command: | apt-get update apt-get install -y curl wget vim apache2 echo 'hello world.' | tee /opt/started if [[ -f "/opt/started" ]]; then echo 'hello world.' | tee /opt/found-started fi # Create an archive of an existing container, save the archive to a defined # path and then destroy it. - name: Archive container community.general.lxc_container: name: test-container-started state: absent archive: true archive_path: /opt/archives # Create a container using overlayfs, create an archive of it, create a # snapshot clone of the container and and finally leave the container # in a frozen state. The container archive will be compressed using gzip. - name: Create an overlayfs container archive and clone it community.general.lxc_container: name: test-container-overlayfs container_log: true template: ubuntu state: started backing_store: overlayfs template_options: --release trusty clone_snapshot: true clone_name: test-container-overlayfs-clone-snapshot archive: true archive_compression: gzip register: clone_container_info - name: Debug info on container "test-container" ansible.builtin.debug: var: clone_container_info - name: Clone a container using snapshot community.general.lxc_container: name: test-container-overlayfs-clone-snapshot backing_store: overlayfs clone_name: test-container-overlayfs-clone-snapshot2 clone_snapshot: true - name: Create a new container and clone it community.general.lxc_container: name: test-container-new-archive backing_store: dir clone_name: test-container-new-archive-clone - name: Archive and clone a container then destroy it community.general.lxc_container: name: test-container-new-archive state: absent clone_name: test-container-new-archive-destroyed-clone archive: true archive_compression: gzip - name: Start a cloned container. community.general.lxc_container: name: test-container-new-archive-destroyed-clone state: started - name: Destroy a container community.general.lxc_container: name: '{{ item }}' state: absent with_items: - test-container-stopped - test-container-started - test-container-frozen - test-container-lvm - test-container-config - test-container-overlayfs - test-container-overlayfs-clone - test-container-overlayfs-clone-snapshot - test-container-overlayfs-clone-snapshot2 - test-container-new-archive - test-container-new-archive-clone - test-container-new-archive-destroyed-clone a lxc_container: description: Container information. returned: success type: complex contains: name: description: Name of the LXC container. returned: success type: str sample: test_host init_pid: description: Pid of the LXC init process. returned: success type: int sample: 19786 interfaces: description: List of the container's network interfaces. returned: success type: list sample: ["eth0", "lo"] ips: description: List of IPs. returned: success type: list sample: ["10.0.3.3"] state: description: Resulting state of the container. returned: success type: str sample: "running" archive: description: Resulting state of the container. returned: success, when archive is true type: str sample: "/tmp/test-container-config.tar" clone: description: If the container was cloned. returned: success, when clone_name is specified type: bool sample: true NTF) AnsibleModule)BOOLEANS_FALSE)to_textto_bytesztar.tgzz-czf) extensionargumentztar.bz2z-cjftarz-cf)gzipbzip2none variablesz--configz --templatez--bdevz --lxcpathz--lvnamez--vgnamez --thinpoolz--fstypez--fssizez--dirz --zfsroot) configtemplate backing_storelxc_pathlv_namevg_namethinpoolfs_typefs_size directoryzfs_rootz--backingstorage--namez --newname)rrrname clone_namez--backingstorez--origz--new)variables-lxc-copyvariables-lxc-clone)createclone)rrrrrr)rrrrrr)rrrr)rrrrrr)dirlvmbtrfsloop overlayfszfs)infoINFOInfo)errorERRORError)debugDEBUGDebug)r*r-r0_started_stopped _restarted _destroyed_frozen_clone)startedstopped restartedabsentfrozenr"z#!/usr/bin/env bash pushd "$(getent passwd $(whoami)|cut -f6 -d':')" if [[ -f ".bashrc" ]];then source .bashrc unset HOSTNAME fi popd # User defined command %(container_command)s c:tjd\}}tj|d} |j t t d|izd|j|jtj|tddtjtjd d d }tjtjd d d } tj|g|| j|j|jtj|y#|jwxYw#|j|jtj|wxYw)a)Write out a script onto a target. This method should be backward compatible with Python when executing from within the container. :param command: command to run, this can be a script and can use spacing with newlines as separation. :type command: ``str`` zlxc-attach-script)prefixwbcontainer_commandsurrogate_or_stricterrors0700zlxc-attach-script-lograbzlxc-attach-script-err)stdoutstderrN)tempfilemkstemposfdopenwriter ATTACH_TEMPLATEflushclosechmodint subprocessPopen communicateremove)commandfd script_filef stdout_file stderr_files s/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/lxc_container.py create_scriptr^)sC!((0CDR "dA ,?+IIRghi    HH[#fa.)))H,,4KLQOQUVK))H,,4KLQOQUVK  M  +-  +1  (  +s5E1'E#E #7FceZdZdZdZedZed&dZedZdZ dZ d Z d Z d Z d Zd ZdZd'dZdZdZd'dZd(dZd(dZd(dZd(dZdZdZdZdZ d)dZdZdZdZ dZ!d Z"d!Z#d"Z$d#Z%d$Z&d%Z'y)*LxcContainerManagementc(||_|jjd|_d|_d|_|jjd|_|jjd|_|j|_d|_ d|_ y)zManagement of LXC containers via Ansible. :param module: Processed Ansible Module. :type module: ``object`` stateFNrr) moduleparamsrb state_changelxc_vgrcontainer_nameget_container_bind container archive_info clone_info)selfrcs r]__init__zLxcContainerManagement.__init__Vs|  [[''0 !  **:6 "kk008002 cBtj|jS)N)r)lxc Containerrgrls r]rhz)LxcContainerManagement.get_container_bindfs}}$"5"566rnc|t|jd\}}t|}t|dk7r|dz }|S)zReturn a rounded floating point number. :param num: Number to round up. :type: ``float`` :returns: Rounded up number. :rtype: ``int`` .r)strsplitrR)numparts r]_roundupzLxcContainerManagement._roundupis<HNN3' T#h t9> 1HC rnNcTtfdtj|DS)zCheck if a container exists. :param container_name: Name of the container. :type: ``str`` :returns: True or False if the container is found. :rtype: ``bol`` c3(K|] }|k( ywN).0crgs r] z;LxcContainerManagement._container_exists..sZ11&Zs) config_path)anyrplist_containersrgrs` r]_container_existsz(LxcContainerManagement._container_existsxs"Z0C0CPX0YZZZrnc|jD]9\}}|jt||jt|;|S)alReturn a command list with all found options. :param variables_dict: Pre-parsed optional variables used from a seed command. :type variables_dict: ``dict`` :param build_command: Command to run. :type build_command: ``list`` :returns: list of command options. :rtype: ``list`` )itemsappendrv)variables_dict build_commandkeyvalues r]_add_variablesz%LxcContainerManagement._add_variablessL)..0 -JC  S *  U , -rncx|j}t|jjdD]}|j |dt j ddg}|jDcic]:\}}|jj||vr||jj|<}}}|Scc}}w)zReturn a dict of all variables as found within the module. :param variables: Hash of all variables to find. :type variables: ``dict`` rN)copyLXC_BACKING_STORErcrdpoprunionr)rlrv false_valueskresults r] _get_varsz LxcContainerManagement._get_varssNN$ "4;;#5#5o#FG #A MM!T " #&++T2J7 ") 1{{!!!$L8 t{{!!!$ $    s2?B6c |jjd}|sy|jj}t |d5}t |j djd}ddd|Dcgc]}|jdd }}d}|D]\}} |j}| j} |d | d } tjd |z} D]|} | j| s| jdd \} }d j|j}|j| }| |k7r|d z }| |vrd}|j|| d}|j!| |r|j#}|dk7r|jj%t |d5}|j'Dcgc]}t)|dc}dddd|_|dk(r|j-y|dk(r+|j-|jj/yyy#1swYxYwcc}wcc}w#1swYoxYw)zConfigure an LXC container. Write new configuration values to the lxc config file. This will stop the container if it is running write the new options and then restart the container upon completion. container_configFrbrArBTN=ruz =  z %s(\s+)?= r9r?runningr<)rcrdriconfig_file_nameopenrread splitlinesrwstriprecompilematchjoinindexinsertr _get_statestop writelinesr re_container_startupfreeze)rl_container_configcontainer_config_filerZriparsed_options config_changerr new_entrykeyre option_linedummy_value config_value line_indexcontainer_statelines r]_configzLxcContainerManagement._configsD!KK../AB  $ ? ? ' . `!&qvvx8MNYYZ^_  `4EEa!''#q/EE ( 3JC))+CKKME'*E2IJJ|c12E/ 3 ;;{+$/$5$5c1$=ME6#&88FLLN#;L!1!7!7 !DJ ,"a $,<<,0M,33J J 3!%  '' 2+ 30 "oo/O)+##%+T2 ja Wghtht4IJhi j!%D )+'') H,'')%%'- ; ` `F@i j js/+H06H=.I>I I0H:IIc|j}|dk7r!d|_|jjd}|jj d}|sd}|jj dd}|g}|j |jtd|| }|jjd r|jd n-|jjd d k(r|jd |jj|\}}}|dk7rGdtjj|z}|j|||dj!|yd|_|dk(r|jj#y|dk(r4|jj#|jj%y)aClone a new LXC container from an existing container. This method will clone an existing container to a new container using the `clone_name` variable as the new container name. The method will create a container if the container `name` does not exist. Note that cloning a container will ensure that the original container is "stopped" before the clone can be done. Because this operation can require a state change the method will return the original container to its prior state upon completion of the clone. Once the clone is complete the new container will be left in a stopped state. r9Trzlxc-copyr z lxc-cloner"rrrclone_snapshotz --snapshotrr'rzFailed executing %s.rerrrcmsgrWrr<)rrerirrc get_bin_pathrrLXC_COMMAND_MAPrdr run_commandrKpathbasenamefailurerstartr) rlr clone_vars clone_cmdrr return_datarmessages r]_container_create_clonez.LxcContainerManagement._container_create_clones"//+ i ' $D  NN   !* KK,,Z8 .J 00dCI  ++>>)'2:>*( ,  ;;  . /   .[[   0K ?   .#{{66}EK 7,rww/?/? /JJG LLBGSXX!6  !%D )+$$&  !H,$$&%%'rnc|jjddd|jdg}|j|j t dd|}|jj d r tjd k7rtjd }n6tjjd stjd d }|jd tjj|d|jzd|jj j!dj#g|jj d}|r)|j%d|t'j(|z }|jj+|\}}}|d k7r'd}|j-|||dj|yd|_y#t$rtjd }Y)wxYw)aCreate a new LXC container. This method will build and execute a shell command to build the container. It would have been nice to simply use the lxc python library however at the time this was written the python library, in both py2 and py3 didn't support some of the more advanced container create processes. These missing processes mainly revolve around backing LXC containers with block devices. z lxc-createTrz--quietr!rrr container_logrHOMEz /var/log/lxc/z --logfilez lxc-%s.logz --logprioritycontainer_log_leveltemplate_optionsz--zFailed executing lxc-create.rrN)rcrrgrrrrdrKgetuidgetenvrisdirmakedirsOSErrorextendrgetupperrshlexrwrrre)rlrlog_pathrrrrrs r]_createzLxcContainerManagement._create's KK $ $\4 8 d))  ++>>)(3K@*( ,  ;;  o . -99;!#!yy0H77==9 O4.H   lT-@-@@  ""&&)%' "  ;;--.@A    & U[[)9: :M#{{66}EK 74G LLBGSXXm5L  !%D 7 -99V, -s2A#GG?>G?c|jj|jj|jt |jj |j dS)zlReturns a dict of container information. :returns: container data :rtype: ``dict`` ) interfacesipsrbinit_pidr)riget_interfacesget_ipsrrRrrgrrs r]_container_dataz&LxcContainerManagement._container_datagsS..779>>))+__&DNN334''   rncL|jj}|rd|_|S)zUnfreeze a container. :returns: True or False based on if the container was unfrozen. :rtype: ``bol`` T)riunfreezere)rlrs r] _unfreezez LxcContainerManagement._unfreezevs&>>**,  $D rnc|j|j|jr-t|jj j StdS)zReturn the state of a container. If the container is not found the state returned is "absent" :returns: state of a container as a lower case string. :rtype: ``str`` rr;)rrgrrvrirblowerrrs r]rz!LxcContainerManagement._get_statesI  ! !1D1Dt}} ! ]t~~++,224 48}rnc|jjd}|rc|j}|dk(r|jn|dk(r|j |j j t|d|_yy)zExecute a shell command.r@r<r9TN) rcrdrrrri attach_waitr^re)rlr@rs r]_execute_commandz'LxcContainerManagement._execute_commandsq!KK../BC "oo/O(*  I-'') NN & &}6G H $D  rnc^|j|_t|D]M}|jdk(ry|jj d|_t jdO|j|jd|jzdd|jzy)zEnsure a container is started. :param timeout: Time before the destroy operation is abandoned. :type timeout: ``int`` rTru Failed to start container [ %s ]pThe container [ %s ] failed to start. Check to lxc is available and that the container is in a functional state. lxc_containerr,rrN) rhrirangerrretimesleeprrrgrltimeoutrs r]rz)LxcContainerManagement._container_startups0027^ E I- NN " $D  JJqM  ..04t7J7JJ //0  rncf|jjdrd|ji|_yy)rCreate a compressed archive of a container. This will store archive_info in as self.archive_info archiveN)rcrd_container_create_tarrjrrs r]_check_archivez%LxcContainerManagement._check_archives3 ;;  i (4557!D  )rnc|jjd}|r?|j||jsd|j i|_yddi|_yy)rrrclonedFN)rcrdrrrrk)rlrs r] _check_clonez#LxcContainerManagement._check_clones^ [['' 5 ))dmm)\d::<# e# rnct|D]}|j|j|jsy|j |j |j dk7r!d|_|jj|jjrd|_tjd|j|jd|jzdd|jzy) zEnsure a container is destroyed. :param timeout: Time before the destroy operation is abandoned. :type timeout: ``int`` rr9Truz"Failed to destroy container [ %s ]zyThe container [ %s ] failed to be destroyed. Check that lxc is available and that the container is in a functional state.rN)rrrgrrrrrerirdestroyrrrrrs r]r5z!LxcContainerManagement._destroyeds7^ E))9L9LW[WdWd)e    !     I-$(!##%~~%%'$(! JJqM% ( LL"224 "&"5"56)+/+>+>?  rnc"|j|d|j|j|jr|j |j |j }|dk(rnX|dk(r"|jjd|_ n1|j|jjd|_ |j|jy|j|dz }|j|y)zEnsure a container is frozen. If the container does not exist the container will be created. :param count: number of times this command has been called by itself. :type count: ``int`` r<countmethodrrTruN) check_countrrgrrrrrirrerrrrr6rlr rs r]r6zLxcContainerManagement._frozens uX6  ! !1D1Dt}} ! ]  ! ! # LLN"oo/O(* I-%%'$(!'')%%'$(!    !     LLN QJE LL rnc|j|d|j|j|jr|j |j |j dk7r!|jjd|_ |j|j|jy|j|dz }|j|y)zEnsure a container is restarted. If the container does not exist the container will be created. :param count: number of times this command has been called by itself. :type count: ``int`` restartrrr9TruN)r rrgrrrrrirrerrrrr4rlr s r]r4z!LxcContainerManagement._restarteds uY7  ! !1D1Dt}} ! ]  ! ! # LLN I-##%$(!  # # %    !     LLN QJE OOE "rnc|j|d|j|j|jru|j |j |j dk7r!|jjd|_ |j|jy|j|dz }|j|y)zEnsure a container is stopped. If the container does not exist the container will be created. :param count: number of times this command has been called by itself. :type count: ``int`` rrrr9TruN)r rrgrrrrrirrerrrr3rs r]r3zLxcContainerManagement._stopped=s uV4  ! !1D1Dt}} ! ]  ! ! # LLN I-##%$(!    !     LLN QJE MM% rnc8|j|d|j|j|jr|j }|dk(rnc|dk(r|j nM|j s=|j|jd|jzdd|jz |j|j|j|jy |j|dz }|j|y ) zEnsure a container is started. If the container does not exist the container will be created. :param count: number of times this command has been called by itself. :type count: ``int`` rrrrr<rrurrN)r rrgrrrrrrrrrrrr2r s r]r2zLxcContainerManagement._started[s uW5  ! !1D1Dt}} ! ]"oo/O)+ H, ,,. "&"6"6"8$&*&9&9:"$($7$78   ! ! # LLN    !     LLN QJE MM% rnc|jjdddg}|jj|\}}}|dk7r%|j||ddj |yt |j S) z0Return the name of the Volume Group used in LXC.z lxc-configTzlxc.bdev.lvm.vgrz%Failed to read LVM VG from LXC configrrN)rcrrrrrvr)rlrrvgrs r] _get_lxc_vgz"LxcContainerManagement._get_lxc_vgs} KK $ $\4 8  kk--m< B 7 LL;/  rxxz? "rnc|j}|jjddg}|jj|\}}}|dk7r$|j ||ddj ||j Dcgc]}|jc}dd}|Dcgc]}|d|k(s |dc}Scc}wcc}w) z(Return a list of all lv in a current vg.lvsTrzFailed to get list of LVsrrruN)rrcrrrrrrw) rlrrrrGrrall_lvmslv_entrys r] _lvm_lv_listz#LxcContainerManagement._lvm_lv_lists    KK $ $UD 1 ++11-@FC 7 LL//  (.'8'8':;!AGGI;AB?,4J r8I JJ<JsC) C7Ccd|ddg}|jj|\}}}|dk7r'|j||d|zdj||j Dcgc]}|j c}dd }|Dcgc]}|j d s|}}|dj} t| d | d fScc}wcc}w) zReturn the available size of a given VG. :param vg_name: Name of volume. :type vg_name: ``str`` :returns: size and measurement of an LV :type: ``tuple`` vgdisplay--unitsgrzfailed to read vg %srrruNFree) rcrrrrr startswithrwfloat) rlrrrrGrrvg_infofree_pe_free_pes r]_get_vg_free_pez&LxcContainerManagement._get_vg_free_pes      ++11-@FC 7 LL*W4/  '-&7&7&9:1779:12>%>f)=1>>1:##%Xb\"HRL00;>s$CC C c"|j}tjj||}d|ddg}|jj |\}}}|dk7r'|j ||d|zdj||jDcgc]}|jc}dd } | Dcgc]}|jd s|} }| dj} |jt| d | d fScc}wcc}w) zReturn the available size of a given LV. :param lv_name: Name of volume. :type lv_name: ``str`` :returns: size and measurement of an LV :type: ``tuple`` lvdisplayrrrzfailed to read lv %srrruNzLV Sizerr ) rrKrrrcrrrrr!rwrzr") rlrrlvrrrGrrlv_infor%r$s r] _get_lv_sizez#LxcContainerManagement._get_lv_sizes    WW\\"g &      ++11-@FC 7 LL*R//  '-&7&7&9:1779:12>&B!!,,y*AABB1+##%}}U72;/0'"+==;BsD5D  D c |j}|j|\}}|t|kr d|d|d|d}|jdd||jj d d d |d t jj||d |zg}|jj|\} } } | dk7r|j| | d|d|d|yy)a.Create an LVM snapshot. :param source_lv: Name of lv to snapshot :type source_lv: ``str`` :param snapshot_name: Name of lv snapshot :type snapshot_name: ``str`` :param snapshot_size_gb: Size of snapshot to create :type snapshot_size_gb: ``int`` )rzSnapshot size [ z ] is > greater than [ z ] on volume group [ z ]z#Not enough space to create snapshotr,rrlvcreateTz-nz-sz-L%sgrzFailed to Create LVM snapshot /z --> rrrN) rr&r"rrcrrKrrr) rl source_lv snapshot_namesnapshot_size_gbr free_space measurementrrrrGrs r]_lvm_snapshot_createz+LxcContainerManagement._lvm_snapshot_creates   "&"6"6r"6"B K ./ /.z2?  LL;   KK $ $Z 6    GGLLY ' & &  ++11-@FC 7 LL9m5   rnc |j}|jjddd|d||g}|jj|\}}}|dk7r|j ||d|d|d|y y ) zmount an lv. :param lv_name: name of the logical volume to mount :type lv_name: ``str`` :param mount_point: path on the file system that is mounted. :type mount_point: ``str`` mountTz/dev/r0rzfailed to mountlvm lv  to r1N)rrcrrr)rlr mount_pointrrrrGrs r] _lvm_lv_mountz$LxcContainerManagement._lvm_lv_mounts    KK $ $Wd 3 (  ++11-@FC 7 LL7K1   rnctjtdd}|jjd}tj j |stj||jjd}t|}tj j||jd|d}|jjddd tj j|z|d |dg}|jj|\}} } tj||d k7r$|j| |d d j||S)zCreate an archive of a given ``source_dir`` to ``output_path``. :param source_dir: Path to the directory to be archived. :type source_dir: ``str`` 0077rE archive_patharchive_compressionrtr r Tz--directory=%sr rzfailed to create tar archiverr)rKumaskrRrcrdrrrLXC_COMPRESSION_MAPrrgrrealpathrr) rl source_dir old_umaskr?r@compression_type archive_namerrrGrs r] _create_tarz"LxcContainerManagement._create_tar,s=HHS^, {{)).9 ww}}\* KK %"kk001FG./BC GGLL##  [ )   KK $ $UD 1 rww// ; ; Z (    ++11  FC  7 LL2/  rnc |j}|jjddd|d|g}|jj|\}}}|dk7r+|j ||d|d|dj |y y ) zmRemove an LV. :param lv_name: The name of the logical volume :type lv_name: ``str`` lvremoveTz-fr0rzFailed to remove LVM LV rrN)rrcrrrr)rlrrrrrGrs r]_lvm_lv_removez%LxcContainerManagement._lvm_lv_remove]s    KK $ $Z 6 7 # ++11-@FC 7 LL797C/   rnc |jd}d|vr |j|jd|D]}tjj |}|j jddd||g}|j j|\}}}|dk7sg|j||ddj| y ) a Sync the container directory to the temp directory. :param container_path: path to the container container :type container_path: ``str`` :param temp_dir: path to the temporary local working directory :type temp_dir: ``str`` :r'rsyncTz-aHAXrzfailed to perform archiverrN) rwrrrKrdirnamercrrrr) rlcontainer_pathtemp_dirfs_pathsfs_pathrrrGrs r] _rsync_dataz"LxcContainerManagement._rsync_datass"'', ( " LL 4 5 Gggoog.G (($7 M #kk55OBQw 3HH]3  rnc|jjdd|g}|jj|\}}}|dk7r(|j||d|zdj |yy)zUnmount a file system. :param mount_point: path on the file system that is mounted. :type mount_point: ``str`` umountTrzfailed to unmount [ %s ]rrN)rcrrrr)rlr;rrrGrs r]_unmountzLxcContainerManagement._unmountsu KK $ $Xt 4  ++11-@FC 7 LL.</   rnc |jjdddddd|d|d|g}|jj|\}}}|dk7r!|j||d |d |d |d | yy)a2mount an lv. :param lowerdir: name/path of the lower directory :type lowerdir: ``str`` :param upperdir: name/path of the upper directory :type upperdir: ``str`` :param mount_point: path on the file system that is mounted. :type mount_point: ``str`` r9Tz-tr'z-oz lowerdir=z ,upperdir=rzfailed to mount overlayfs:rMr:z -- Command: r1N)rcrrr)rllowerdirupperdirr;rrrGrs r]_overlayfs_mountz'LxcContainerManagement._overlayfs_mounts KK $ $Wd 3 + xB    ++11-@FC 7 LL; G   rnctj}tjj ||j }|j jd}|jtjj tjd}|jd}tjj |d}d|j z}|j} |dvr:|dk(r|j jn|j j|j|||r||jvrtjj|stj ||j#|j \} } |j%|j || |j'|| nH|j)d |zd d |zn-|r+|j+dd d\} } |j-| | |d|_|j1||s|r|j3||r|j5||dk(rH|jdk(r|j j7n|j j9t;j<|S#|s|r|j3||r|j5||dk(rH|jdk(r|j j7n|j j9t;j<|wxYw)aCreate a tar archive from an LXC container. The process is as follows: * Stop or Freeze the container * Create temporary dir * Copy container and config to temporary directory * If LVM backed: * Create LVM snapshot of LV backing the container * Mount the snapshot to tmpdir/rootfs * Restore the state of the container * Create tar of tmpdir * Clean up z lxc.rootfsdevr'rootfsz%s_lxc_snapshot)r9r<r)r)r2r3r4)rr;zsnapshot [ %s ] already existsruzaThe snapshot [ %s ] already exists. Please clean up old snapshot of containers before continuing.r1rMN)rYrZr;T)rDr<)rImkdtemprKrrrgriget_config_itemr!seprrrrTrexistsrr+r7r<rrwr[rerHrWrKrrshutilrmtree) rlrQwork_dir lxc_rootfs block_backedoverlayfs_backedr;r3rsizer6rYrZs r]rz,LxcContainerManagement._container_create_tars ##%77<<$*=*=>^^33LA ",,RWW\\"&&%-HI &00=ggll8X6 *D,?,?? //+C $&;;"i/NN))+NN'')   Z 2 (9(9(;;77>>+6 K0)-(9(9 $ 3 3):)%D+--"&"5"5&3)-.&& -$/' LL<}LP+,!"%/%5%5c%:12%>"(%%%% +&!%D ##x#8/ k*##M2)+??$0NN++-NN((* MM( #!/ k*##M2)+??$0NN++-NN((* MM( #s(E J<   rnc <|jjdi|y)zReturn a Failure when running an Ansible command. :param error: ``str`` Error that occurred. :param rc: ``int`` Return code while executing an Ansible command. :param msg: ``str`` Message to report. Nr~)rc fail_json)rlkwargss r]rzLxcContainerManagement.failure9s  ''rncVt|t|j}||j}|jr|j |j|j r|j |j |jj|j|y)zRun the main method.)changedrN) getattrLXC_ANSIBLE_STATESrbrrjupdaterkrc exit_jsonre)rlactionoutcomes r]runzLxcContainerManagement.runCs1$**=>&&(    NN4,, - ?? NN4?? + %%!  rnr})<)r))(__name__ __module__ __qualname__rmrh staticmethodrzrrrrrrrrrrrrrr5r6r4r3r2rrr&r+r7r<rHrKrTrWr[rr rrvr~rnr]r`r`Us 7  [["(7(rCJ>%@     % 2 "#J# J#B!<)!V#$K&1:>@/0*X2/b,"H(6g$R( rnr`chttd2idtdddtdddtdttj d d td d td dtdddtd dtdddtdddtd dtd dtd dtd dttt j ddtd dtdd d!td"d#d$tt jDcgc] }|D]}| c}}d%d&td d'td"d(d)td"d#d*td d+tttj d,d#d)dd*gfg-}ts|jd./|jds|jd|jd<t|0}|jy1cc}}w)3zAnsible Main module.rrvT)typerequiredrubuntu)r~defaultrr#)r~choicesrr)r~rrrrprrext4r5Grrrrrbr8)rrr@rlist)r~elementsrboolFrr*rrfalserr?r@r ) argument_specsupports_check_mode required_ifz;The `lxc` module is not importable. Check the requirements.)r)rcNr~)rdictrrkeysrqLXC_LOGGING_LEVELSvaluesrBHAS_LXCrlrdr`rv)rnrc lxc_manages r]mainrVsT T   T .3356T "T "#T ()T 01T 67T >?T FGT LMT RST XYT ^/4467!_T f#gT l"mT tuT |!%$6$=$=$?KqKAKK!}T DET J KT RST Z[T `!%05578!aT j" ~. / oZFx M   == ##)==#8 i 'v6JNNKLsH.__main__)& __future__rrrr~ __metaclass__ DOCUMENTATIONEXAMPLESRETURNrKos.pathrrcrSrIrrrpr ImportErroransible.module_utils.basicr)ansible.module_utils.parsing.convert_boolr+ansible.module_utils.common.text.convertersrr rBrrrrqrNr^objectr`rryr~rnr]rsA@ n `u n) V   G4DI     (  $%#!!$!! #  "0#!%  .#!!  !!N     !0 % ( (   )X~ V~ B hV zFq(GsC CC