source: trunk/packages/sipb-xen-www/code/main.py @ 872

Last change on this file since 872 was 869, checked in by quentin, 16 years ago

Support /overlord as an alternate admin path

  • Property svn:executable set to *
File size: 26.2 KB
RevLine 
[113]1#!/usr/bin/python
[205]2"""Main CGI script for web interface"""
[113]3
[205]4import base64
5import cPickle
[113]6import cgi
[205]7import datetime
8import hmac
[770]9import random
[205]10import sha
11import simplejson
12import sys
[118]13import time
[447]14import urllib
[205]15from StringIO import StringIO
[113]16
[205]17def revertStandardError():
18    """Move stderr to stdout, and return the contents of the old stderr."""
19    errio = sys.stderr
20    if not isinstance(errio, StringIO):
[599]21        return ''
[205]22    sys.stderr = sys.stdout
23    errio.seek(0)
24    return errio.read()
25
26def printError():
27    """Revert stderr to stdout, and print the contents of stderr"""
28    if isinstance(sys.stderr, StringIO):
29        print revertStandardError()
30
31if __name__ == '__main__':
32    import atexit
33    atexit.register(printError)
34
[235]35import templates
[113]36from Cheetah.Template import Template
[209]37import validation
[446]38import cache_acls
[578]39from webcommon import InvalidInput, CodeError, State
[209]40import controls
[632]41from getafsgroups import getAfsGroupMembers
[865]42from invirt import database
43from invirt.database import Machine, CDROM, ctx, connect, MachineAccess, Type, Autoinstall
[863]44from invirt.config import structs as config
[113]45
[632]46def pathSplit(path):
47    if path.startswith('/'):
48        path = path[1:]
49    i = path.find('/')
50    if i == -1:
51        i = len(path)
52    return path[:i], path[i:]
53
[235]54class Checkpoint:
55    def __init__(self):
56        self.start_time = time.time()
57        self.checkpoints = []
58
59    def checkpoint(self, s):
60        self.checkpoints.append((s, time.time()))
61
62    def __str__(self):
63        return ('Timing info:\n%s\n' %
64                '\n'.join(['%s: %s' % (d, t - self.start_time) for
65                           (d, t) in self.checkpoints]))
66
67checkpoint = Checkpoint()
68
[447]69def jquote(string):
70    return "'" + string.replace('\\', '\\\\').replace("'", "\\'").replace('\n', '\\n') + "'"
[235]71
[205]72def helppopup(subj):
73    """Return HTML code for a (?) link to a specified help topic"""
[447]74    return ('<span class="helplink"><a href="help?' +
75            cgi.escape(urllib.urlencode(dict(subject=subj, simple='true')))
76            +'" target="_blank" ' +
77            'onclick="return helppopup(' + cgi.escape(jquote(subj)) + ')">(?)</a></span>')
[205]78
79def makeErrorPre(old, addition):
80    if addition is None:
81        return
82    if old:
83        return old[:-6]  + '\n----\n' + str(addition) + '</pre>'
84    else:
85        return '<p>STDERR:</p><pre>' + str(addition) + '</pre>'
[139]86
[864]87Template.database = database
[866]88Template.config = config
[205]89Template.helppopup = staticmethod(helppopup)
90Template.err = None
[139]91
[205]92class JsonDict:
93    """Class to store a dictionary that will be converted to JSON"""
94    def __init__(self, **kws):
95        self.data = kws
96        if 'err' in kws:
97            err = kws['err']
98            del kws['err']
99            self.addError(err)
[139]100
[205]101    def __str__(self):
102        return simplejson.dumps(self.data)
103
104    def addError(self, text):
105        """Add stderr text to be displayed on the website."""
106        self.data['err'] = \
107            makeErrorPre(self.data.get('err'), text)
108
109class Defaults:
110    """Class to store default values for fields."""
111    memory = 256
112    disk = 4.0
113    cdrom = ''
[443]114    autoinstall = ''
[205]115    name = ''
[609]116    description = ''
[515]117    type = 'linux-hvm'
118
[205]119    def __init__(self, max_memory=None, max_disk=None, **kws):
120        if max_memory is not None:
121            self.memory = min(self.memory, max_memory)
122        if max_disk is not None:
123            self.max_disk = min(self.disk, max_disk)
124        for key in kws:
125            setattr(self, key, kws[key])
126
127
128
[209]129DEFAULT_HEADERS = {'Content-Type': 'text/html'}
[205]130
[572]131def invalidInput(op, username, fields, err, emsg):
[153]132    """Print an error page when an InvalidInput exception occurs"""
[572]133    d = dict(op=op, user=username, err_field=err.err_field,
[153]134             err_value=str(err.err_value), stderr=emsg,
135             errorMessage=str(err))
[235]136    return templates.invalid(searchList=[d])
[153]137
[119]138def hasVnc(status):
[133]139    """Does the machine with a given status list support VNC?"""
[119]140    if status is None:
141        return False
142    for l in status:
143        if l[0] == 'device' and l[1][0] == 'vfb':
144            d = dict(l[1][1:])
145            return 'location' in d
146    return False
147
[572]148def parseCreate(username, state, fields):
[629]149    kws = dict([(kw, fields.getfirst(kw)) for kw in 'name description owner memory disksize vmtype cdrom autoinstall'.split()])
[577]150    validate = validation.Validate(username, state, strict=True, **kws)
[609]151    return dict(contact=username, name=validate.name, description=validate.description, memory=validate.memory,
[572]152                disksize=validate.disksize, owner=validate.owner, machine_type=validate.vmtype,
153                cdrom=getattr(validate, 'cdrom', None),
[629]154                autoinstall=getattr(validate, 'autoinstall', None))
[134]155
[632]156def create(username, state, path, fields):
[205]157    """Handler for create requests."""
158    try:
[572]159        parsed_fields = parseCreate(username, state, fields)
[577]160        machine = controls.createVm(username, state, **parsed_fields)
[205]161    except InvalidInput, err:
[207]162        pass
[205]163    else:
164        err = None
[572]165    state.clear() #Changed global state
[576]166    d = getListDict(username, state)
[205]167    d['err'] = err
168    if err:
169        for field in fields.keys():
170            setattr(d['defaults'], field, fields.getfirst(field))
171    else:
172        d['new_machine'] = parsed_fields['name']
[235]173    return templates.list(searchList=[d])
[205]174
175
[572]176def getListDict(username, state):
[438]177    """Gets the list of local variables used by list.tmpl."""
[535]178    checkpoint.checkpoint('Starting')
[572]179    machines = state.machines
[235]180    checkpoint.checkpoint('Got my machines')
[133]181    on = {}
[119]182    has_vnc = {}
[572]183    xmlist = state.xmlist
[235]184    checkpoint.checkpoint('Got uptimes')
[572]185    can_clone = 'ice3' not in state.xmlist_raw
[136]186    for m in machines:
[535]187        if m not in xmlist:
[144]188            has_vnc[m] = 'Off'
[535]189            m.uptime = None
[136]190        else:
[535]191            m.uptime = xmlist[m]['uptime']
192            if xmlist[m]['console']:
193                has_vnc[m] = True
194            elif m.type.hvm:
195                has_vnc[m] = "WTF?"
196            else:
[536]197                has_vnc[m] = "ParaVM"+helppopup("ParaVM Console")
[572]198    max_memory = validation.maxMemory(username, state)
199    max_disk = validation.maxDisk(username)
[235]200    checkpoint.checkpoint('Got max mem/disk')
[205]201    defaults = Defaults(max_memory=max_memory,
202                        max_disk=max_disk,
[572]203                        owner=username,
[205]204                        cdrom='gutsy-i386')
[235]205    checkpoint.checkpoint('Got defaults')
[424]206    def sortkey(machine):
[572]207        return (machine.owner != username, machine.owner, machine.name)
[424]208    machines = sorted(machines, key=sortkey)
[572]209    d = dict(user=username,
210             cant_add_vm=validation.cantAddVm(username, state),
[205]211             max_memory=max_memory,
[144]212             max_disk=max_disk,
[205]213             defaults=defaults,
[113]214             machines=machines,
[540]215             has_vnc=has_vnc,
216             can_clone=can_clone)
[205]217    return d
[113]218
[632]219def listVms(username, state, path, fields):
[205]220    """Handler for list requests."""
[235]221    checkpoint.checkpoint('Getting list dict')
[572]222    d = getListDict(username, state)
[235]223    checkpoint.checkpoint('Got list dict')
224    return templates.list(searchList=[d])
[438]225
[632]226def vnc(username, state, path, fields):
[119]227    """VNC applet page.
228
229    Note that due to same-domain restrictions, the applet connects to
230    the webserver, which needs to forward those requests to the xen
231    server.  The Xen server runs another proxy that (1) authenticates
232    and (2) finds the correct port for the VM.
233
234    You might want iptables like:
235
[205]236    -t nat -A PREROUTING -s ! 18.181.0.60 -i eth1 -p tcp -m tcp \
[438]237      --dport 10003 -j DNAT --to-destination 18.181.0.60:10003
[205]238    -t nat -A POSTROUTING -d 18.181.0.60 -o eth1 -p tcp -m tcp \
[438]239      --dport 10003 -j SNAT --to-source 18.187.7.142
[205]240    -A FORWARD -d 18.181.0.60 -i eth1 -o eth1 -p tcp -m tcp \
241      --dport 10003 -j ACCEPT
[145]242
243    Remember to enable iptables!
244    echo 1 > /proc/sys/net/ipv4/ip_forward
[119]245    """
[572]246    machine = validation.Validate(username, state, machine_id=fields.getfirst('machine_id')).machine
[438]247
[118]248    TOKEN_KEY = "0M6W0U1IXexThi5idy8mnkqPKEq1LtEnlK/pZSn0cDrN"
249
250    data = {}
[572]251    data["user"] = username
[205]252    data["machine"] = machine.name
253    data["expires"] = time.time()+(5*60)
254    pickled_data = cPickle.dumps(data)
[118]255    m = hmac.new(TOKEN_KEY, digestmod=sha)
[205]256    m.update(pickled_data)
257    token = {'data': pickled_data, 'digest': m.digest()}
[118]258    token = cPickle.dumps(token)
259    token = base64.urlsafe_b64encode(token)
[797]260    host = controls.listHost(machine)
261    if host:
[863]262        port = 10003 + [h.hostname for h in config.hosts].index(host)
[797]263    else:
264        port = 5900 # dummy
[438]265
[209]266    status = controls.statusInfo(machine)
[152]267    has_vnc = hasVnc(status)
[438]268
[572]269    d = dict(user=username,
[152]270             on=status,
271             has_vnc=has_vnc,
[113]272             machine=machine,
[581]273             hostname=state.environ.get('SERVER_NAME', 'localhost'),
[667]274             port=port,
[113]275             authtoken=token)
[235]276    return templates.vnc(searchList=[d])
[113]277
[252]278def getHostname(nic):
[438]279    """Find the hostname associated with a NIC.
280
281    XXX this should be merged with the similar logic in DNS and DHCP.
282    """
[252]283    if nic.hostname and '.' in nic.hostname:
284        return nic.hostname
285    elif nic.machine:
[863]286        return nic.machine.name + '.' + config.dns.domains[0]
[252]287    else:
288        return None
289
290
[133]291def getNicInfo(data_dict, machine):
[145]292    """Helper function for info, get data on nics for a machine.
293
294    Modifies data_dict to include the relevant data, and returns a list
295    of (key, name) pairs to display "name: data_dict[key]" to the user.
296    """
[133]297    data_dict['num_nics'] = len(machine.nics)
[227]298    nic_fields_template = [('nic%s_hostname', 'NIC %s Hostname'),
[133]299                           ('nic%s_mac', 'NIC %s MAC Addr'),
300                           ('nic%s_ip', 'NIC %s IP'),
301                           ]
302    nic_fields = []
303    for i in range(len(machine.nics)):
304        nic_fields.extend([(x % i, y % i) for x, y in nic_fields_template])
[227]305        if not i:
[252]306            data_dict['nic%s_hostname' % i] = getHostname(machine.nics[i])
[133]307        data_dict['nic%s_mac' % i] = machine.nics[i].mac_addr
308        data_dict['nic%s_ip' % i] = machine.nics[i].ip
309    if len(machine.nics) == 1:
310        nic_fields = [(x, y.replace('NIC 0 ', '')) for x, y in nic_fields]
311    return nic_fields
312
313def getDiskInfo(data_dict, machine):
[145]314    """Helper function for info, get data on disks for a machine.
315
316    Modifies data_dict to include the relevant data, and returns a list
317    of (key, name) pairs to display "name: data_dict[key]" to the user.
318    """
[133]319    data_dict['num_disks'] = len(machine.disks)
320    disk_fields_template = [('%s_size', '%s size')]
321    disk_fields = []
322    for disk in machine.disks:
323        name = disk.guest_device_name
[438]324        disk_fields.extend([(x % name, y % name) for x, y in
[205]325                            disk_fields_template])
[211]326        data_dict['%s_size' % name] = "%0.1f GiB" % (disk.size / 1024.)
[133]327    return disk_fields
328
[632]329def command(username, state, path, fields):
[205]330    """Handler for running commands like boot and delete on a VM."""
[207]331    back = fields.getfirst('back')
[205]332    try:
[572]333        d = controls.commandResult(username, state, fields)
[207]334        if d['command'] == 'Delete VM':
335            back = 'list'
[205]336    except InvalidInput, err:
[207]337        if not back:
[205]338            raise
[572]339        print >> sys.stderr, err
[261]340        result = err
[205]341    else:
342        result = 'Success!'
[207]343        if not back:
[235]344            return templates.command(searchList=[d])
[207]345    if back == 'list':
[572]346        state.clear() #Changed global state
[576]347        d = getListDict(username, state)
[207]348        d['result'] = result
[235]349        return templates.list(searchList=[d])
[207]350    elif back == 'info':
[572]351        machine = validation.Validate(username, state, machine_id=fields.getfirst('machine_id')).machine
[588]352        return ({'Status': '303 See Other',
[633]353                 'Location': 'info?machine_id=%d' % machine.machine_id},
[407]354                "You shouldn't see this message.")
[205]355    else:
[261]356        raise InvalidInput('back', back, 'Not a known back page.')
[205]357
[572]358def modifyDict(username, state, fields):
[438]359    """Modify a machine as specified by CGI arguments.
360
361    Return a list of local variables for modify.tmpl.
362    """
[177]363    olddisk = {}
[161]364    transaction = ctx.current.create_transaction()
365    try:
[609]366        kws = dict([(kw, fields.getfirst(kw)) for kw in 'machine_id owner admin contact name description memory vmtype disksize'.split()])
[572]367        validate = validation.Validate(username, state, **kws)
368        machine = validate.machine
[161]369        oldname = machine.name
[153]370
[572]371        if hasattr(validate, 'memory'):
372            machine.memory = validate.memory
[438]373
[572]374        if hasattr(validate, 'vmtype'):
375            machine.type = validate.vmtype
[440]376
[572]377        if hasattr(validate, 'disksize'):
378            disksize = validate.disksize
[177]379            disk = machine.disks[0]
380            if disk.size != disksize:
381                olddisk[disk.guest_device_name] = disksize
382                disk.size = disksize
383                ctx.current.save(disk)
[438]384
[446]385        update_acl = False
[572]386        if hasattr(validate, 'owner') and validate.owner != machine.owner:
387            machine.owner = validate.owner
[446]388            update_acl = True
[572]389        if hasattr(validate, 'name'):
[586]390            machine.name = validate.name
[609]391        if hasattr(validate, 'description'):
392            machine.description = validate.description
[572]393        if hasattr(validate, 'admin') and validate.admin != machine.administrator:
394            machine.administrator = validate.admin
[446]395            update_acl = True
[572]396        if hasattr(validate, 'contact'):
397            machine.contact = validate.contact
[438]398
[161]399        ctx.current.save(machine)
[446]400        if update_acl:
[572]401            print >> sys.stderr, machine, machine.administrator
[446]402            cache_acls.refreshMachine(machine)
[161]403        transaction.commit()
404    except:
405        transaction.rollback()
[163]406        raise
[177]407    for diskname in olddisk:
[209]408        controls.resizeDisk(oldname, diskname, str(olddisk[diskname]))
[572]409    if hasattr(validate, 'name'):
410        controls.renameMachine(machine, oldname, validate.name)
411    return dict(user=username,
412                command="modify",
[205]413                machine=machine)
[438]414
[632]415def modify(username, state, path, fields):
[205]416    """Handler for modifying attributes of a machine."""
417    try:
[572]418        modify_dict = modifyDict(username, state, fields)
[205]419    except InvalidInput, err:
[207]420        result = None
[572]421        machine = validation.Validate(username, state, machine_id=fields.getfirst('machine_id')).machine
[205]422    else:
423        machine = modify_dict['machine']
[209]424        result = 'Success!'
[205]425        err = None
[585]426    info_dict = infoDict(username, state, machine)
[205]427    info_dict['err'] = err
428    if err:
429        for field in fields.keys():
430            setattr(info_dict['defaults'], field, fields.getfirst(field))
[207]431    info_dict['result'] = result
[235]432    return templates.info(searchList=[info_dict])
[161]433
[438]434
[632]435def helpHandler(username, state, path, fields):
[145]436    """Handler for help messages."""
[139]437    simple = fields.getfirst('simple')
438    subjects = fields.getlist('subject')
[438]439
[536]440    help_mapping = {'ParaVM Console': """
[432]441ParaVM machines do not support local console access over VNC.  To
442access the serial console of these machines, you can SSH with Kerberos
[863]443to console.%s, using the name of the machine as your
444username.""" % config.dns.domains[0],
[536]445                    'HVM/ParaVM': """
[139]446HVM machines use the virtualization features of the processor, while
447ParaVM machines use Xen's emulation of virtualization features.  You
448want an HVM virtualized machine.""",
[536]449                    'CPU Weight': """
[205]450Don't ask us!  We're as mystified as you are.""",
[536]451                    'Owner': """
[205]452The owner field is used to determine <a
[536]453href="help?subject=Quotas">quotas</a>.  It must be the name of a
[205]454locker that you are an AFS administrator of.  In particular, you or an
455AFS group you are a member of must have AFS rlidwka bits on the
[432]456locker.  You can check who administers the LOCKER locker using the
457commands 'attach LOCKER; fs la /mit/LOCKER' on Athena.)  See also <a
[536]458href="help?subject=Administrator">administrator</a>.""",
459                    'Administrator': """
[205]460The administrator field determines who can access the console and
461power on and off the machine.  This can be either a user or a moira
462group.""",
[536]463                    'Quotas': """
[408]464Quotas are determined on a per-locker basis.  Each locker may have a
[205]465maximum of 512 megabytes of active ram, 50 gigabytes of disk, and 4
[309]466active machines.""",
[536]467                    'Console': """
[309]468<strong>Framebuffer:</strong> At a Linux boot prompt in your VM, try
469setting <tt>fb=false</tt> to disable the framebuffer.  If you don't,
470your machine will run just fine, but the applet's display of the
471console will suffer artifacts.
472"""
[536]473                    }
[438]474
[187]475    if not subjects:
[205]476        subjects = sorted(help_mapping.keys())
[438]477
[572]478    d = dict(user=username,
[139]479             simple=simple,
480             subjects=subjects,
[205]481             mapping=help_mapping)
[438]482
[235]483    return templates.help(searchList=[d])
[133]484
[438]485
[632]486def badOperation(u, s, p, e):
[438]487    """Function called when accessing an unknown URI."""
[607]488    return ({'Status': '404 Not Found'}, 'Invalid operation.')
[205]489
[579]490def infoDict(username, state, machine):
[438]491    """Get the variables used by info.tmpl."""
[209]492    status = controls.statusInfo(machine)
[235]493    checkpoint.checkpoint('Getting status info')
[133]494    has_vnc = hasVnc(status)
495    if status is None:
496        main_status = dict(name=machine.name,
497                           memory=str(machine.memory))
[205]498        uptime = None
499        cputime = None
[133]500    else:
501        main_status = dict(status[1:])
[662]502        main_status['host'] = controls.listHost(machine)
[167]503        start_time = float(main_status.get('start_time', 0))
504        uptime = datetime.timedelta(seconds=int(time.time()-start_time))
505        cpu_time_float = float(main_status.get('cpu_time', 0))
506        cputime = datetime.timedelta(seconds=int(cpu_time_float))
[235]507    checkpoint.checkpoint('Status')
[133]508    display_fields = """name uptime memory state cpu_weight on_reboot
509     on_poweroff on_crash on_xend_start on_xend_stop bootloader""".split()
510    display_fields = [('name', 'Name'),
[609]511                      ('description', 'Description'),
[133]512                      ('owner', 'Owner'),
[187]513                      ('administrator', 'Administrator'),
[133]514                      ('contact', 'Contact'),
[136]515                      ('type', 'Type'),
[133]516                      'NIC_INFO',
517                      ('uptime', 'uptime'),
518                      ('cputime', 'CPU usage'),
[662]519                      ('host', 'Hosted on'),
[133]520                      ('memory', 'RAM'),
521                      'DISK_INFO',
522                      ('state', 'state (xen format)'),
[536]523                      ('cpu_weight', 'CPU weight'+helppopup('CPU Weight')),
[133]524                      ('on_reboot', 'Action on VM reboot'),
525                      ('on_poweroff', 'Action on VM poweroff'),
526                      ('on_crash', 'Action on VM crash'),
527                      ('on_xend_start', 'Action on Xen start'),
528                      ('on_xend_stop', 'Action on Xen stop'),
529                      ('bootloader', 'Bootloader options'),
530                      ]
531    fields = []
532    machine_info = {}
[147]533    machine_info['name'] = machine.name
[609]534    machine_info['description'] = machine.description
[136]535    machine_info['type'] = machine.type.hvm and 'HVM' or 'ParaVM'
[133]536    machine_info['owner'] = machine.owner
[187]537    machine_info['administrator'] = machine.administrator
[133]538    machine_info['contact'] = machine.contact
539
540    nic_fields = getNicInfo(machine_info, machine)
541    nic_point = display_fields.index('NIC_INFO')
[438]542    display_fields = (display_fields[:nic_point] + nic_fields +
[205]543                      display_fields[nic_point+1:])
[133]544
545    disk_fields = getDiskInfo(machine_info, machine)
546    disk_point = display_fields.index('DISK_INFO')
[438]547    display_fields = (display_fields[:disk_point] + disk_fields +
[205]548                      display_fields[disk_point+1:])
[438]549
[211]550    main_status['memory'] += ' MiB'
[133]551    for field, disp in display_fields:
[167]552        if field in ('uptime', 'cputime') and locals()[field] is not None:
[133]553            fields.append((disp, locals()[field]))
[147]554        elif field in machine_info:
555            fields.append((disp, machine_info[field]))
[133]556        elif field in main_status:
557            fields.append((disp, main_status[field]))
558        else:
559            pass
560            #fields.append((disp, None))
[235]561
562    checkpoint.checkpoint('Got fields')
563
564
[572]565    max_mem = validation.maxMemory(machine.owner, state, machine, False)
[235]566    checkpoint.checkpoint('Got mem')
[566]567    max_disk = validation.maxDisk(machine.owner, machine)
[209]568    defaults = Defaults()
[609]569    for name in 'machine_id name description administrator owner memory contact'.split():
[205]570        setattr(defaults, name, getattr(machine, name))
[516]571    defaults.type = machine.type.type_id
[205]572    defaults.disk = "%0.2f" % (machine.disks[0].size/1024.)
[235]573    checkpoint.checkpoint('Got defaults')
[572]574    d = dict(user=username,
[133]575             on=status is not None,
576             machine=machine,
[205]577             defaults=defaults,
[133]578             has_vnc=has_vnc,
579             uptime=str(uptime),
580             ram=machine.memory,
[144]581             max_mem=max_mem,
582             max_disk=max_disk,
[536]583             owner_help=helppopup("Owner"),
[133]584             fields = fields)
[205]585    return d
[113]586
[632]587def info(username, state, path, fields):
[205]588    """Handler for info on a single VM."""
[572]589    machine = validation.Validate(username, state, machine_id=fields.getfirst('machine_id')).machine
[579]590    d = infoDict(username, state, machine)
[235]591    checkpoint.checkpoint('Got infodict')
592    return templates.info(searchList=[d])
[205]593
[632]594def unauthFront(_, _2, _3, fields):
[510]595    """Information for unauth'd users."""
596    return templates.unauth(searchList=[{'simple' : True}])
597
[867]598def admin(username, state, path, fields):
[633]599    if path == '':
600        return ({'Status': '303 See Other',
[867]601                 'Location': 'admin/'},
[633]602                "You shouldn't see this message.")
[868]603    if not username in getAfsGroupMembers(config.web.adminacl, 'athena.mit.edu'):
[867]604        raise InvalidInput('username', username,
[868]605                           'Not in admin group %s.' % config.web.adminacl)
[867]606    newstate = State(username, isadmin=True)
[632]607    newstate.environ = state.environ
608    return handler(username, newstate, path, fields)
609
610def throwError(_, __, ___, ____):
[598]611    """Throw an error, to test the error-tracing mechanisms."""
[602]612    raise RuntimeError("test of the emergency broadcast system")
[598]613
[113]614mapping = dict(list=listVms,
615               vnc=vnc,
[133]616               command=command,
617               modify=modify,
[113]618               info=info,
[139]619               create=create,
[510]620               help=helpHandler,
[598]621               unauth=unauthFront,
[867]622               admin=admin,
[869]623               overlord=admin,
[598]624               errortest=throwError)
[113]625
[205]626def printHeaders(headers):
[438]627    """Print a dictionary as HTTP headers."""
[205]628    for key, value in headers.iteritems():
629        print '%s: %s' % (key, value)
630    print
631
[598]632def send_error_mail(subject, body):
633    import subprocess
[205]634
[863]635    to = config.web.errormail
[598]636    mail = """To: %s
[863]637From: root@%s
[598]638Subject: %s
639
640%s
[863]641""" % (to, config.web.hostname, subject, body)
[598]642    p = subprocess.Popen(['/usr/sbin/sendmail', to], stdin=subprocess.PIPE)
643    p.stdin.write(mail)
644    p.stdin.close()
645    p.wait()
646
[603]647def show_error(op, username, fields, err, emsg, traceback):
648    """Print an error page when an exception occurs"""
649    d = dict(op=op, user=username, fields=fields,
650             errorMessage=str(err), stderr=emsg, traceback=traceback)
651    details = templates.error_raw(searchList=[d])
[627]652    if username not in ('price', 'ecprice', 'andersk'): #add yourself at will
653        send_error_mail('xvm error on %s for %s: %s' % (op, username, err),
654                        details)
[603]655    d['details'] = details
656    return templates.error(searchList=[d])
657
[572]658def getUser(environ):
[205]659    """Return the current user based on the SSL environment variables"""
[629]660    return environ.get('REMOTE_USER', None)
[205]661
[632]662def handler(username, state, path, fields):
663    operation, path = pathSplit(path)
664    if not operation:
665        operation = 'list'
666    print 'Starting', operation
667    fun = mapping.get(operation, badOperation)
668    return fun(username, state, path, fields)
669
[579]670class App:
671    def __init__(self, environ, start_response):
672        self.environ = environ
673        self.start = start_response
[205]674
[579]675        self.username = getUser(environ)
676        self.state = State(self.username)
[581]677        self.state.environ = environ
[205]678
[634]679        random.seed() #sigh
680
[579]681    def __iter__(self):
[632]682        start_time = time.time()
[864]683        database.clear_cache()
[600]684        sys.stderr = StringIO()
[579]685        fields = cgi.FieldStorage(fp=self.environ['wsgi.input'], environ=self.environ)
686        operation = self.environ.get('PATH_INFO', '')
687        if not operation:
[633]688            self.start("301 Moved Permanently", [('Location', './')])
[579]689            return
690        if self.username is None:
691            operation = 'unauth'
692
693        try:
694            checkpoint.checkpoint('Before')
[632]695            output = handler(self.username, self.state, operation, fields)
[579]696            checkpoint.checkpoint('After')
697
698            headers = dict(DEFAULT_HEADERS)
699            if isinstance(output, tuple):
700                new_headers, output = output
701                headers.update(new_headers)
702            e = revertStandardError()
703            if e:
[693]704                if hasattr(output, 'addError'):
705                    output.addError(e)
706                else:
707                    # This only happens on redirects, so it'd be a pain to get
708                    # the message to the user.  Maybe in the response is useful.
709                    output = output + '\n\nstderr:\n' + e
[579]710            output_string =  str(output)
711            checkpoint.checkpoint('output as a string')
712        except Exception, err:
713            if not fields.has_key('js'):
714                if isinstance(err, InvalidInput):
715                    self.start('200 OK', [('Content-Type', 'text/html')])
716                    e = revertStandardError()
[603]717                    yield str(invalidInput(operation, self.username, fields,
718                                           err, e))
[579]719                    return
[602]720            import traceback
721            self.start('500 Internal Server Error',
722                       [('Content-Type', 'text/html')])
723            e = revertStandardError()
[603]724            s = show_error(operation, self.username, fields,
[602]725                           err, e, traceback.format_exc())
726            yield str(s)
727            return
[587]728        status = headers.setdefault('Status', '200 OK')
729        del headers['Status']
730        self.start(status, headers.items())
[579]731        yield output_string
[535]732        if fields.has_key('timedebug'):
[579]733            yield '<pre>%s</pre>' % cgi.escape(str(checkpoint))
[209]734
[579]735def constructor():
[863]736    connect()
[579]737    return App
[535]738
[579]739def main():
740    from flup.server.fcgi_fork import WSGIServer
741    WSGIServer(constructor()).run()
[535]742
[579]743if __name__ == '__main__':
744    main()
Note: See TracBrowser for help on using the repository browser.