gnt_cluster.py 47.8 KB
Newer Older
1
#
Iustin Pop's avatar
Iustin Pop committed
2
3
#

4
# Copyright (C) 2006, 2007, 2010, 2011 Google Inc.
Iustin Pop's avatar
Iustin Pop committed
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
# 02110-1301, USA.

Iustin Pop's avatar
Iustin Pop committed
21
"""Cluster related commands"""
Iustin Pop's avatar
Iustin Pop committed
22

23
# pylint: disable=W0401,W0613,W0614,C0103
24
# W0401: Wildcard import ganeti.cli
25
# W0613: Unused argument, since all functions follow the same API
26
# W0614: Unused import %s from wildcard import (since we need cli)
Iustin Pop's avatar
Iustin Pop committed
27
# C0103: Invalid name gnt-cluster
28

29
import os.path
30
import time
31
import OpenSSL
René Nussbaumer's avatar
René Nussbaumer committed
32
import itertools
Iustin Pop's avatar
Iustin Pop committed
33
34
35

from ganeti.cli import *
from ganeti import opcodes
36
from ganeti import constants
37
from ganeti import errors
38
from ganeti import utils
39
from ganeti import bootstrap
40
from ganeti import ssh
41
from ganeti import objects
42
from ganeti import uidpool
43
from ganeti import compat
René Nussbaumer's avatar
René Nussbaumer committed
44
45
46
47
48
49
50
51
52
53
54
55
56
57
from ganeti import netutils


ON_OPT = cli_option("--on", default=False,
                    action="store_true", dest="on",
                    help="Recover from an EPO")

GROUPS_OPT = cli_option("--groups", default=False,
                    action="store_true", dest="groups",
                    help="Arguments are node groups instead of nodes")

_EPO_PING_INTERVAL = 30 # 30 seconds between pings
_EPO_PING_TIMEOUT = 1 # 1 second
_EPO_REACHABLE_TIMEOUT = 15 * 60 # 15 minutes
Iustin Pop's avatar
Iustin Pop committed
58
59


60
@UsesRPC
Iustin Pop's avatar
Iustin Pop committed
61
62
63
def InitCluster(opts, args):
  """Initialize the cluster.

64
65
66
67
68
69
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain only one element, the desired
      cluster name
  @rtype: int
  @return: the desired exit code
Iustin Pop's avatar
Iustin Pop committed
70
71

  """
72
  if not opts.lvm_storage and opts.vg_name:
73
    ToStderr("Options --no-lvm-storage and --vg-name conflict.")
74
75
76
77
78
79
    return 1

  vg_name = opts.vg_name
  if opts.lvm_storage and not opts.vg_name:
    vg_name = constants.DEFAULT_VG

80
81
82
83
84
85
86
87
  if not opts.drbd_storage and opts.drbd_helper:
    ToStderr("Options --no-drbd-storage and --drbd-usermode-helper conflict.")
    return 1

  drbd_helper = opts.drbd_helper
  if opts.drbd_storage and not opts.drbd_helper:
    drbd_helper = constants.DEFAULT_DRBD_HELPER

88
89
90
91
  master_netdev = opts.master_netdev
  if master_netdev is None:
    master_netdev = constants.DEFAULT_BRIDGE

92
  hvlist = opts.enabled_hypervisors
93
94
  if hvlist is None:
    hvlist = constants.DEFAULT_ENABLED_HYPERVISOR
95
  hvlist = hvlist.split(",")
96

97
  hvparams = dict(opts.hvparams)
98
  beparams = opts.beparams
99
  nicparams = opts.nicparams
100
101

  # prepare beparams dict
102
  beparams = objects.FillDict(constants.BEC_DEFAULTS, beparams)
103
  utils.ForceDictType(beparams, constants.BES_PARAMETER_TYPES)
104

105
106
107
108
  # prepare nicparams dict
  nicparams = objects.FillDict(constants.NICC_DEFAULTS, nicparams)
  utils.ForceDictType(nicparams, constants.NICS_PARAMETER_TYPES)

109
110
111
112
113
114
115
  # prepare ndparams dict
  if opts.ndparams is None:
    ndparams = dict(constants.NDC_DEFAULTS)
  else:
    ndparams = objects.FillDict(constants.NDC_DEFAULTS, opts.ndparams)
    utils.ForceDictType(ndparams, constants.NDS_PARAMETER_TYPES)

116
117
118
119
  # prepare hvparams dict
  for hv in constants.HYPER_TYPES:
    if hv not in hvparams:
      hvparams[hv] = {}
120
    hvparams[hv] = objects.FillDict(constants.HVC_DEFAULTS[hv], hvparams[hv])
121
    utils.ForceDictType(hvparams[hv], constants.HVS_PARAMETER_TYPES)
122

123
124
125
  if opts.candidate_pool_size is None:
    opts.candidate_pool_size = constants.MASTER_POOL_SIZE_DEFAULT

126
127
128
  if opts.mac_prefix is None:
    opts.mac_prefix = constants.DEFAULT_MAC_PREFIX

129
130
131
132
  uid_pool = opts.uid_pool
  if uid_pool is not None:
    uid_pool = uidpool.ParseUidPool(uid_pool)

133
134
135
  if opts.prealloc_wipe_disks is None:
    opts.prealloc_wipe_disks = False

136
137
138
139
  external_ip_setup_script = opts.use_external_mip_script
  if external_ip_setup_script is None:
    external_ip_setup_script = False

140
141
142
143
144
145
  try:
    primary_ip_version = int(opts.primary_ip_version)
  except (ValueError, TypeError), err:
    ToStderr("Invalid primary ip version value: %s" % str(err))
    return 1

146
147
148
149
150
151
152
153
  master_netmask = opts.master_netmask
  try:
    if master_netmask is not None:
      master_netmask = int(master_netmask)
  except (ValueError, TypeError), err:
    ToStderr("Invalid master netmask value: %s" % str(err))
    return 1

154
155
156
157
  bootstrap.InitCluster(cluster_name=args[0],
                        secondary_ip=opts.secondary_ip,
                        vg_name=vg_name,
                        mac_prefix=opts.mac_prefix,
158
                        master_netmask=master_netmask,
159
                        master_netdev=master_netdev,
160
                        file_storage_dir=opts.file_storage_dir,
161
                        shared_file_storage_dir=opts.shared_file_storage_dir,
162
163
                        enabled_hypervisors=hvlist,
                        hvparams=hvparams,
164
                        beparams=beparams,
165
                        nicparams=nicparams,
166
                        ndparams=ndparams,
167
                        candidate_pool_size=opts.candidate_pool_size,
168
                        modify_etc_hosts=opts.modify_etc_hosts,
169
                        modify_ssh_setup=opts.modify_ssh_setup,
170
                        maintain_node_health=opts.maintain_node_health,
171
                        drbd_helper=drbd_helper,
172
                        uid_pool=uid_pool,
173
                        default_iallocator=opts.default_iallocator,
174
                        primary_ip_version=primary_ip_version,
175
                        prealloc_wipe_disks=opts.prealloc_wipe_disks,
176
                        use_external_mip_script=external_ip_setup_script,
177
                        )
178
  op = opcodes.OpClusterPostInit()
179
  SubmitOpCode(op, opts=opts)
Iustin Pop's avatar
Iustin Pop committed
180
181
182
  return 0


183
@UsesRPC
Iustin Pop's avatar
Iustin Pop committed
184
185
186
def DestroyCluster(opts, args):
  """Destroy the cluster.

187
188
189
190
191
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code
192

Iustin Pop's avatar
Iustin Pop committed
193
194
  """
  if not opts.yes_do_it:
195
196
    ToStderr("Destroying a cluster is irreversible. If you really want"
             " destroy this cluster, supply the --yes-do-it option.")
Iustin Pop's avatar
Iustin Pop committed
197
198
    return 1

199
  op = opcodes.OpClusterDestroy()
200
  master = SubmitOpCode(op, opts=opts)
Iustin Pop's avatar
Iustin Pop committed
201
202
203
  # if we reached this, the opcode didn't fail; we can proceed to
  # shutdown all the daemons
  bootstrap.FinalizeClusterDestroy(master)
Iustin Pop's avatar
Iustin Pop committed
204
205
206
  return 0


207
208
209
def RenameCluster(opts, args):
  """Rename the cluster.

210
211
212
213
214
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain only one element, the new cluster name
  @rtype: int
  @return: the desired exit code
215
216

  """
217
218
219
220
221
  cl = GetClient()

  (cluster_name, ) = cl.QueryConfigValues(["cluster_name"])

  new_name = args[0]
222
  if not opts.force:
223
224
225
226
227
    usertext = ("This will rename the cluster from '%s' to '%s'. If you are"
                " connected over the network to the cluster name, the"
                " operation is very dangerous as the IP address will be"
                " removed from the node and the change may not go through."
                " Continue?") % (cluster_name, new_name)
228
    if not AskUser(usertext):
229
230
      return 1

231
  op = opcodes.OpClusterRename(name=new_name)
232
233
  result = SubmitOpCode(op, opts=opts, cl=cl)

234
235
  if result:
    ToStdout("Cluster renamed from '%s' to '%s'", cluster_name, result)
236

237
238
239
  return 0


240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
def ActivateMasterIp(opts, args):
  """Activates the master IP.

  """
  op = opcodes.OpClusterActivateMasterIp()
  SubmitOpCode(op)
  return 0


def DeactivateMasterIp(opts, args):
  """Deactivates the master IP.

  """
  if not opts.confirm:
    usertext = ("This will disable the master IP. All the open connections to"
                " the master IP will be closed. To reach the master you will"
                " need to use its node IP."
                " Continue?")
    if not AskUser(usertext):
      return 1

  op = opcodes.OpClusterDeactivateMasterIp()
  SubmitOpCode(op)
  return 0


266
267
268
269
270
271
272
273
274
275
def RedistributeConfig(opts, args):
  """Forces push of the cluster configuration.

  @param opts: the command line options selected by the user
  @type args: list
  @param args: empty list
  @rtype: int
  @return: the desired exit code

  """
276
  op = opcodes.OpClusterRedistConf()
277
278
279
280
  SubmitOrSend(op, opts)
  return 0


Iustin Pop's avatar
Iustin Pop committed
281
282
283
def ShowClusterVersion(opts, args):
  """Write version of ganeti software to the standard output.

284
285
286
287
288
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code
Iustin Pop's avatar
Iustin Pop committed
289
290

  """
291
292
  cl = GetClient()
  result = cl.QueryClusterInfo()
293
294
295
296
297
  ToStdout("Software version: %s", result["software_version"])
  ToStdout("Internode protocol: %s", result["protocol_version"])
  ToStdout("Configuration format: %s", result["config_version"])
  ToStdout("OS api version: %s", result["os_api_version"])
  ToStdout("Export interface: %s", result["export_version"])
Iustin Pop's avatar
Iustin Pop committed
298
299
300
301
302
303
  return 0


def ShowClusterMaster(opts, args):
  """Write name of master node to the standard output.

304
305
306
307
308
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code
Iustin Pop's avatar
Iustin Pop committed
309
310

  """
311
312
  master = bootstrap.GetMaster()
  ToStdout(master)
Iustin Pop's avatar
Iustin Pop committed
313
314
  return 0

315

Guido Trotter's avatar
Guido Trotter committed
316
def _PrintGroupedParams(paramsdict, level=1, roman=False):
317
318
319
320
  """Print Grouped parameters (be, nic, disk) by group.

  @type paramsdict: dict of dicts
  @param paramsdict: {group: {param: value, ...}, ...}
321
322
  @type level: int
  @param level: Level of indention
323
324

  """
325
  indent = "  " * level
326
  for item, val in sorted(paramsdict.items()):
327
328
    if isinstance(val, dict):
      ToStdout("%s- %s:", indent, item)
Guido Trotter's avatar
Guido Trotter committed
329
330
331
      _PrintGroupedParams(val, level=level + 1, roman=roman)
    elif roman and isinstance(val, int):
      ToStdout("%s  %s: %s", indent, item, compat.TryToRoman(val))
332
333
    else:
      ToStdout("%s  %s: %s", indent, item, val)
Iustin Pop's avatar
Iustin Pop committed
334

335

Iustin Pop's avatar
Iustin Pop committed
336
337
338
def ShowClusterConfig(opts, args):
  """Shows cluster information.

339
340
341
342
343
344
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code

Iustin Pop's avatar
Iustin Pop committed
345
  """
346
347
  cl = GetClient()
  result = cl.QueryClusterInfo()
Iustin Pop's avatar
Iustin Pop committed
348

349
  ToStdout("Cluster name: %s", result["name"])
350
  ToStdout("Cluster UUID: %s", result["uuid"])
Iustin Pop's avatar
Iustin Pop committed
351

352
353
354
  ToStdout("Creation time: %s", utils.FormatTime(result["ctime"]))
  ToStdout("Modification time: %s", utils.FormatTime(result["mtime"]))

355
  ToStdout("Master node: %s", result["master"])
Iustin Pop's avatar
Iustin Pop committed
356

357
358
  ToStdout("Architecture (this node): %s (%s)",
           result["architecture"][0], result["architecture"][1])
Iustin Pop's avatar
Iustin Pop committed
359

360
  if result["tags"]:
361
    tags = utils.CommaJoin(utils.NiceSort(result["tags"]))
362
363
364
365
366
  else:
    tags = "(none)"

  ToStdout("Tags: %s", tags)

367
  ToStdout("Default hypervisor: %s", result["default_hypervisor"])
368
369
  ToStdout("Enabled hypervisors: %s",
           utils.CommaJoin(result["enabled_hypervisors"]))
370

371
  ToStdout("Hypervisor parameters:")
372
  _PrintGroupedParams(result["hvparams"])
373

374
  ToStdout("OS-specific hypervisor parameters:")
375
376
  _PrintGroupedParams(result["os_hvp"])

377
378
379
  ToStdout("OS parameters:")
  _PrintGroupedParams(result["osparams"])

380
381
382
  ToStdout("Hidden OSes: %s", utils.CommaJoin(result["hidden_os"]))
  ToStdout("Blacklisted OSes: %s", utils.CommaJoin(result["blacklisted_os"]))

383
  ToStdout("Cluster parameters:")
Guido Trotter's avatar
Guido Trotter committed
384
385
386
  ToStdout("  - candidate pool size: %s",
            compat.TryToRoman(result["candidate_pool_size"],
                              convert=opts.roman_integers))
387
  ToStdout("  - master netdev: %s", result["master_netdev"])
388
  ToStdout("  - master netmask: %s", result["master_netmask"])
389
390
  ToStdout("  - use external master IP address setup script: %s",
           result["use_external_mip_script"])
391
  ToStdout("  - lvm volume group: %s", result["volume_group_name"])
392
393
394
395
396
  if result["reserved_lvs"]:
    reserved_lvs = utils.CommaJoin(result["reserved_lvs"])
  else:
    reserved_lvs = "(none)"
  ToStdout("  - lvm reserved volumes: %s", reserved_lvs)
397
  ToStdout("  - drbd usermode helper: %s", result["drbd_usermode_helper"])
398
  ToStdout("  - file storage path: %s", result["file_storage_dir"])
399
400
  ToStdout("  - shared file storage path: %s",
           result["shared_file_storage_dir"])
401
402
  ToStdout("  - maintenance of node health: %s",
           result["maintain_node_health"])
Guido Trotter's avatar
Guido Trotter committed
403
404
405
  ToStdout("  - uid pool: %s",
            uidpool.FormatUidPool(result["uid_pool"],
                                  roman=opts.roman_integers))
406
  ToStdout("  - default instance allocator: %s", result["default_iallocator"])
407
  ToStdout("  - primary ip version: %d", result["primary_ip_version"])
408
  ToStdout("  - preallocation wipe disks: %s", result["prealloc_wipe_disks"])
409
  ToStdout("  - OS search path: %s", utils.CommaJoin(constants.OS_SEARCH_PATH))
410

411
412
413
  ToStdout("Default node parameters:")
  _PrintGroupedParams(result["ndparams"], roman=opts.roman_integers)

414
  ToStdout("Default instance parameters:")
Guido Trotter's avatar
Guido Trotter committed
415
  _PrintGroupedParams(result["beparams"], roman=opts.roman_integers)
416
417

  ToStdout("Default nic parameters:")
Guido Trotter's avatar
Guido Trotter committed
418
  _PrintGroupedParams(result["nicparams"], roman=opts.roman_integers)
419

Iustin Pop's avatar
Iustin Pop committed
420
421
422
423
424
425
  return 0


def ClusterCopyFile(opts, args):
  """Copy a file from master to some nodes.

426
427
428
429
430
431
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain only one element, the path of
      the file to be copied
  @rtype: int
  @return: the desired exit code
Iustin Pop's avatar
Iustin Pop committed
432
433

  """
434
435
  filename = args[0]
  if not os.path.exists(filename):
436
437
    raise errors.OpPrereqError("No such filename '%s'" % filename,
                               errors.ECODE_INVAL)
438

Iustin Pop's avatar
Iustin Pop committed
439
440
441
442
  cl = GetClient()

  cluster_name = cl.QueryConfigValues(["cluster_name"])[0]

443
  results = GetOnlineNodes(nodes=opts.nodes, cl=cl, filter_master=True,
444
445
                           secondary_ips=opts.use_replication_network,
                           nodegroup=opts.nodegroup)
Michael Hanselmann's avatar
Michael Hanselmann committed
446

Iustin Pop's avatar
Iustin Pop committed
447
  srun = ssh.SshRunner(cluster_name=cluster_name)
448
449
  for node in results:
    if not srun.CopyFileToNode(node, filename):
450
      ToStderr("Copy of file %s to node %s failed", filename, node)
451

Iustin Pop's avatar
Iustin Pop committed
452
453
454
455
456
457
  return 0


def RunClusterCommand(opts, args):
  """Run a command on some nodes.

458
459
460
461
462
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain the command to be run and its arguments
  @rtype: int
  @return: the desired exit code
Iustin Pop's avatar
Iustin Pop committed
463
464

  """
Iustin Pop's avatar
Iustin Pop committed
465
  cl = GetClient()
Michael Hanselmann's avatar
Michael Hanselmann committed
466

Iustin Pop's avatar
Iustin Pop committed
467
  command = " ".join(args)
468

469
  nodes = GetOnlineNodes(nodes=opts.nodes, cl=cl, nodegroup=opts.nodegroup)
Iustin Pop's avatar
Iustin Pop committed
470
471
472

  cluster_name, master_node = cl.QueryConfigValues(["cluster_name",
                                                    "master_node"])
473

Iustin Pop's avatar
Iustin Pop committed
474
  srun = ssh.SshRunner(cluster_name=cluster_name)
475

Michael Hanselmann's avatar
Michael Hanselmann committed
476
  # Make sure master node is at list end
477
478
479
480
481
482
  if master_node in nodes:
    nodes.remove(master_node)
    nodes.append(master_node)

  for name in nodes:
    result = srun.Run(name, "root", command)
483
484
485
486
    ToStdout("------------------------------------------------")
    ToStdout("node: %s", name)
    ToStdout("%s", result.output)
    ToStdout("return code = %s", result.exit_code)
487
488

  return 0
Iustin Pop's avatar
Iustin Pop committed
489
490
491
492
493


def VerifyCluster(opts, args):
  """Verify integrity of cluster, performing various test on nodes.

494
495
496
497
498
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code
Iustin Pop's avatar
Iustin Pop committed
499
500

  """
Iustin Pop's avatar
Iustin Pop committed
501
  skip_checks = []
502

503
504
  if opts.skip_nplusone_mem:
    skip_checks.append(constants.VERIFY_NPLUSONE_MEM)
505

506
  cl = GetClient()
507

508
509
510
511
  op = opcodes.OpClusterVerify(verbose=opts.verbose,
                               error_codes=opts.error_codes,
                               debug_simulate_errors=opts.simulate_errors,
                               skip_checks=skip_checks,
512
                               ignore_errors=opts.ignore_errors,
513
514
                               group_name=opts.nodegroup)
  result = SubmitOpCode(op, cl=cl, opts=opts)
515

516
517
518
519
520
  # Keep track of submitted jobs
  jex = JobExecutor(cl=cl, opts=opts)

  for (status, job_id) in result[constants.JOB_IDS_KEY]:
    jex.AddJobId(None, status, job_id)
521

522
  results = jex.GetResults()
523
524
525
526
527
528
529
530
531
532
533
534

  (bad_jobs, bad_results) = \
    map(len,
        # Convert iterators to lists
        map(list,
            # Count errors
            map(compat.partial(itertools.ifilterfalse, bool),
                # Convert result to booleans in a tuple
                zip(*((job_success, len(op_results) == 1 and op_results[0])
                      for (job_success, op_results) in results)))))

  if bad_jobs == 0 and bad_results == 0:
535
    rcode = constants.EXIT_SUCCESS
Guido Trotter's avatar
Guido Trotter committed
536
  else:
537
    rcode = constants.EXIT_FAILURE
538
539
    if bad_jobs > 0:
      ToStdout("%s job(s) failed while verifying the cluster.", bad_jobs)
540
541

  return rcode
Iustin Pop's avatar
Iustin Pop committed
542
543


544
545
546
def VerifyDisks(opts, args):
  """Verify integrity of cluster disks.

547
548
549
550
551
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code
552
553

  """
554
555
  cl = GetClient()

556
  op = opcodes.OpClusterVerifyDisks()
557

558
559
560
561
562
563
564
  result = SubmitOpCode(op, cl=cl, opts=opts)

  # Keep track of submitted jobs
  jex = JobExecutor(cl=cl, opts=opts)

  for (status, job_id) in result[constants.JOB_IDS_KEY]:
    jex.AddJobId(None, status, job_id)
565

566
  retcode = constants.EXIT_SUCCESS
567

568
569
570
571
572
573
574
  for (status, result) in jex.GetResults():
    if not status:
      ToStdout("Job failed: %s", result)
      continue

    ((bad_nodes, instances, missing), ) = result

575
576
    for node, text in bad_nodes.items():
      ToStdout("Error gathering data on node %s: %s",
577
               node, utils.SafeEncode(text[-400:]))
578
      retcode = constants.EXIT_FAILURE
579
      ToStdout("You need to fix these nodes first before fixing instances")
580

581
    for iname in instances:
582
583
      if iname in missing:
        continue
584
      op = opcodes.OpInstanceActivateDisks(instance_name=iname)
585
      try:
586
        ToStdout("Activating disks for instance '%s'", iname)
587
        SubmitOpCode(op, opts=opts, cl=cl)
588
589
590
      except errors.GenericError, err:
        nret, msg = FormatError(err)
        retcode |= nret
591
        ToStderr("Error activating disks for instance %s: %s", iname, msg)
592

593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
    if missing:
      for iname, ival in missing.iteritems():
        all_missing = compat.all(x[0] in bad_nodes for x in ival)
        if all_missing:
          ToStdout("Instance %s cannot be verified as it lives on"
                   " broken nodes", iname)
        else:
          ToStdout("Instance %s has missing logical volumes:", iname)
          ival.sort()
          for node, vol in ival:
            if node in bad_nodes:
              ToStdout("\tbroken node %s /dev/%s", node, vol)
            else:
              ToStdout("\t%s /dev/%s", node, vol)

      ToStdout("You need to replace or recreate disks for all the above"
               " instances if this message persists after fixing broken nodes.")
      retcode = constants.EXIT_FAILURE
611
612
613
614

  return retcode


615
616
617
618
619
620
621
622
623
624
def RepairDiskSizes(opts, args):
  """Verify sizes of cluster disks.

  @param opts: the command line options selected by the user
  @type args: list
  @param args: optional list of instances to restrict check to
  @rtype: int
  @return: the desired exit code

  """
625
  op = opcodes.OpClusterRepairDiskSizes(instances=args)
626
  SubmitOpCode(op, opts=opts)
627
628


629
@UsesRPC
Iustin Pop's avatar
Iustin Pop committed
630
631
632
633
634
635
636
def MasterFailover(opts, args):
  """Failover the master node.

  This command, when run on a non-master node, will cause the current
  master to cease being master, and the non-master to become new
  master.

637
638
639
640
641
642
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code

Iustin Pop's avatar
Iustin Pop committed
643
  """
644
645
646
647
648
649
650
651
652
  if opts.no_voting:
    usertext = ("This will perform the failover even if most other nodes"
                " are down, or if this node is outdated. This is dangerous"
                " as it can lead to a non-consistent cluster. Check the"
                " gnt-cluster(8) man page before proceeding. Continue?")
    if not AskUser(usertext):
      return 1

  return bootstrap.MasterFailover(no_voting=opts.no_voting)
Iustin Pop's avatar
Iustin Pop committed
653
654


Iustin Pop's avatar
Iustin Pop committed
655
656
657
658
659
660
661
662
663
664
665
666
667
668
def MasterPing(opts, args):
  """Checks if the master is alive.

  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code

  """
  try:
    cl = GetClient()
    cl.QueryClusterInfo()
    return 0
669
  except Exception: # pylint: disable=W0703
Iustin Pop's avatar
Iustin Pop committed
670
671
672
    return 1


Iustin Pop's avatar
Iustin Pop committed
673
674
675
def SearchTags(opts, args):
  """Searches the tags on all the cluster.

676
677
678
679
680
681
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain only one element, the tag pattern
  @rtype: int
  @return: the desired exit code

Iustin Pop's avatar
Iustin Pop committed
682
  """
683
  op = opcodes.OpTagsSearch(pattern=args[0])
684
  result = SubmitOpCode(op, opts=opts)
Iustin Pop's avatar
Iustin Pop committed
685
686
687
688
689
  if not result:
    return 1
  result = list(result)
  result.sort()
  for path, tag in result:
690
    ToStdout("%s %s", path, tag)
Iustin Pop's avatar
Iustin Pop committed
691
692


693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
def _ReadAndVerifyCert(cert_filename, verify_private_key=False):
  """Reads and verifies an X509 certificate.

  @type cert_filename: string
  @param cert_filename: the path of the file containing the certificate to
                        verify encoded in PEM format
  @type verify_private_key: bool
  @param verify_private_key: whether to verify the private key in addition to
                             the public certificate
  @rtype: string
  @return: a string containing the PEM-encoded certificate.

  """
  try:
    pem = utils.ReadFile(cert_filename)
  except IOError, err:
    raise errors.X509CertError(cert_filename,
                               "Unable to read certificate: %s" % str(err))

  try:
    OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM, pem)
  except Exception, err:
    raise errors.X509CertError(cert_filename,
                               "Unable to load certificate: %s" % str(err))

  if verify_private_key:
    try:
      OpenSSL.crypto.load_privatekey(OpenSSL.crypto.FILETYPE_PEM, pem)
    except Exception, err:
      raise errors.X509CertError(cert_filename,
                                 "Unable to load private key: %s" % str(err))

  return pem


def _RenewCrypto(new_cluster_cert, new_rapi_cert, #pylint: disable=R0911
                 rapi_cert_filename, new_spice_cert, spice_cert_filename,
                 spice_cacert_filename, new_confd_hmac_key, new_cds,
                 cds_filename, force):
732
733
734
735
736
737
738
739
  """Renews cluster certificates, keys and secrets.

  @type new_cluster_cert: bool
  @param new_cluster_cert: Whether to generate a new cluster certificate
  @type new_rapi_cert: bool
  @param new_rapi_cert: Whether to generate a new RAPI certificate
  @type rapi_cert_filename: string
  @param rapi_cert_filename: Path to file containing new RAPI certificate
740
741
742
743
744
745
746
  @type new_spice_cert: bool
  @param new_spice_cert: Whether to generate a new SPICE certificate
  @type spice_cert_filename: string
  @param spice_cert_filename: Path to file containing new SPICE certificate
  @type spice_cacert_filename: string
  @param spice_cacert_filename: Path to file containing the certificate of the
                                CA that signed the SPICE certificate
747
748
  @type new_confd_hmac_key: bool
  @param new_confd_hmac_key: Whether to generate a new HMAC key
Michael Hanselmann's avatar
Michael Hanselmann committed
749
750
751
752
  @type new_cds: bool
  @param new_cds: Whether to generate a new cluster domain secret
  @type cds_filename: string
  @param cds_filename: Path to file containing new cluster domain secret
753
754
755
756
757
  @type force: bool
  @param force: Whether to ask user for confirmation

  """
  if new_rapi_cert and rapi_cert_filename:
758
    ToStderr("Only one of the --new-rapi-certificate and --rapi-certificate"
759
760
761
             " options can be specified at the same time.")
    return 1

Michael Hanselmann's avatar
Michael Hanselmann committed
762
763
764
765
766
767
  if new_cds and cds_filename:
    ToStderr("Only one of the --new-cluster-domain-secret and"
             " --cluster-domain-secret options can be specified at"
             " the same time.")
    return 1

768
769
770
771
  if new_spice_cert and (spice_cert_filename or spice_cacert_filename):
    ToStderr("When using --new-spice-certificate, the --spice-certificate"
             " and --spice-ca-certificate must not be used.")
    return 1
772

773
774
775
776
  if bool(spice_cacert_filename) ^ bool(spice_cert_filename):
    ToStderr("Both --spice-certificate and --spice-ca-certificate must be"
             " specified.")
    return 1
777

778
779
780
781
782
783
784
785
786
787
  rapi_cert_pem, spice_cert_pem, spice_cacert_pem = (None, None, None)
  try:
    if rapi_cert_filename:
      rapi_cert_pem = _ReadAndVerifyCert(rapi_cert_filename, True)
    if spice_cert_filename:
      spice_cert_pem = _ReadAndVerifyCert(spice_cert_filename, True)
      spice_cacert_pem = _ReadAndVerifyCert(spice_cacert_filename)
  except errors.X509CertError, err:
    ToStderr("Unable to load X509 certificate from %s: %s", err[0], err[1])
    return 1
788

Michael Hanselmann's avatar
Michael Hanselmann committed
789
790
791
  if cds_filename:
    try:
      cds = utils.ReadFile(cds_filename)
792
    except Exception, err: # pylint: disable=W0703
Michael Hanselmann's avatar
Michael Hanselmann committed
793
794
795
796
797
798
      ToStderr("Can't load new cluster domain secret from %s: %s" %
               (cds_filename, str(err)))
      return 1
  else:
    cds = None

799
800
801
802
803
804
805
806
  if not force:
    usertext = ("This requires all daemons on all nodes to be restarted and"
                " may take some time. Continue?")
    if not AskUser(usertext):
      return 1

  def _RenewCryptoInner(ctx):
    ctx.feedback_fn("Updating certificates and keys")
807
808
809
    bootstrap.GenerateClusterCrypto(new_cluster_cert,
                                    new_rapi_cert,
                                    new_spice_cert,
810
                                    new_confd_hmac_key,
Michael Hanselmann's avatar
Michael Hanselmann committed
811
812
                                    new_cds,
                                    rapi_cert_pem=rapi_cert_pem,
813
814
                                    spice_cert_pem=spice_cert_pem,
                                    spice_cacert_pem=spice_cacert_pem,
Michael Hanselmann's avatar
Michael Hanselmann committed
815
                                    cds=cds)
816
817
818
819

    files_to_copy = []

    if new_cluster_cert:
820
      files_to_copy.append(constants.NODED_CERT_FILE)
821
822
823
824

    if new_rapi_cert or rapi_cert_pem:
      files_to_copy.append(constants.RAPI_CERT_FILE)

825
826
827
828
    if new_spice_cert or spice_cert_pem:
      files_to_copy.append(constants.SPICE_CERT_FILE)
      files_to_copy.append(constants.SPICE_CACERT_FILE)

829
830
    if new_confd_hmac_key:
      files_to_copy.append(constants.CONFD_HMAC_KEY)
831

Michael Hanselmann's avatar
Michael Hanselmann committed
832
833
834
    if new_cds or cds:
      files_to_copy.append(constants.CLUSTER_DOMAIN_SECRET_FILE)

835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
    if files_to_copy:
      for node_name in ctx.nonmaster_nodes:
        ctx.feedback_fn("Copying %s to %s" %
                        (", ".join(files_to_copy), node_name))
        for file_name in files_to_copy:
          ctx.ssh.CopyFileToNode(node_name, file_name)

  RunWhileClusterStopped(ToStdout, _RenewCryptoInner)

  ToStdout("All requested certificates and keys have been replaced."
           " Running \"gnt-cluster verify\" now is recommended.")

  return 0


def RenewCrypto(opts, args):
  """Renews cluster certificates, keys and secrets.

  """
  return _RenewCrypto(opts.new_cluster_cert,
                      opts.new_rapi_cert,
                      opts.rapi_cert,
857
858
859
                      opts.new_spice_cert,
                      opts.spice_cert,
                      opts.spice_cacert,
860
                      opts.new_confd_hmac_key,
Michael Hanselmann's avatar
Michael Hanselmann committed
861
862
                      opts.new_cluster_domain_secret,
                      opts.cluster_domain_secret,
863
864
865
                      opts.force)


866
867
868
def SetClusterParams(opts, args):
  """Modify the cluster.

869
870
871
872
873
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should be an empty list
  @rtype: int
  @return: the desired exit code
874
875

  """
876
  if not (not opts.lvm_storage or opts.vg_name or
877
          not opts.drbd_storage or opts.drbd_helper or
878
          opts.enabled_hypervisors or opts.hvparams or
879
          opts.beparams or opts.nicparams or opts.ndparams or
880
          opts.candidate_pool_size is not None or
881
          opts.uid_pool is not None or
882
883
          opts.maintain_node_health is not None or
          opts.add_uids is not None or
884
          opts.remove_uids is not None or
885
          opts.default_iallocator is not None or
886
          opts.reserved_lvs is not None or
887
          opts.master_netdev is not None or
888
          opts.master_netmask is not None or
889
          opts.use_external_mip_script is not None or
890
          opts.prealloc_wipe_disks is not None):
891
    ToStderr("Please give at least one of the parameters.")
892
893
894
895
    return 1

  vg_name = opts.vg_name
  if not opts.lvm_storage and opts.vg_name:
896
    ToStderr("Options --no-lvm-storage and --vg-name conflict.")
897
    return 1
898
899
900

  if not opts.lvm_storage:
    vg_name = ""
901

902
903
904
905
906
907
908
909
  drbd_helper = opts.drbd_helper
  if not opts.drbd_storage and opts.drbd_helper:
    ToStderr("Options --no-drbd-storage and --drbd-usermode-helper conflict.")
    return 1

  if not opts.drbd_storage:
    drbd_helper = ""

910
911
912
913
  hvlist = opts.enabled_hypervisors
  if hvlist is not None:
    hvlist = hvlist.split(",")

914
915
  # a list of (name, dict) we can pass directly to dict() (or [])
  hvparams = dict(opts.hvparams)
Iustin Pop's avatar
Iustin Pop committed
916
  for hv_params in hvparams.values():
917
    utils.ForceDictType(hv_params, constants.HVS_PARAMETER_TYPES)
918
919

  beparams = opts.beparams
920
  utils.ForceDictType(beparams, constants.BES_PARAMETER_TYPES)
921

922
923
924
  nicparams = opts.nicparams
  utils.ForceDictType(nicparams, constants.NICS_PARAMETER_TYPES)

925
926
927
  ndparams = opts.ndparams
  if ndparams is not None:
    utils.ForceDictType(ndparams, constants.NDS_PARAMETER_TYPES)
928

929
930
  mnh = opts.maintain_node_health

931
932
933
934
  uid_pool = opts.uid_pool
  if uid_pool is not None:
    uid_pool = uidpool.ParseUidPool(uid_pool)

935
936
937
938
939
940
941
942
  add_uids = opts.add_uids
  if add_uids is not None:
    add_uids = uidpool.ParseUidPool(add_uids)

  remove_uids = opts.remove_uids
  if remove_uids is not None:
    remove_uids = uidpool.ParseUidPool(remove_uids)

943
944
945
946
947
948
  if opts.reserved_lvs is not None:
    if opts.reserved_lvs == "":
      opts.reserved_lvs = []
    else:
      opts.reserved_lvs = utils.UnescapeAndSplit(opts.reserved_lvs, sep=",")

949
950
951
952
953
954
955
  if opts.master_netmask is not None:
    try:
      opts.master_netmask = int(opts.master_netmask)
    except ValueError:
      ToStderr("The --master-netmask option expects an int parameter.")
      return 1

956
957
  ext_ip_script = opts.use_external_mip_script

958
  op = opcodes.OpClusterSetParams(vg_name=vg_name,
959
                                  drbd_helper=drbd_helper,
960
961
                                  enabled_hypervisors=hvlist,
                                  hvparams=hvparams,
962
                                  os_hvp=None,
963
                                  beparams=beparams,
964
                                  nicparams=nicparams,
965
                                  ndparams=ndparams,
966
                                  candidate_pool_size=opts.candidate_pool_size,
967
                                  maintain_node_health=mnh,
968
969
                                  uid_pool=uid_pool,
                                  add_uids=add_uids,
970
                                  remove_uids=remove_uids,
971
                                  default_iallocator=opts.default_iallocator,
972
                                  prealloc_wipe_disks=opts.prealloc_wipe_disks,
973
                                  master_netdev=opts.master_netdev,
974
                                  master_netmask=opts.master_netmask,
975
976
977
                                  reserved_lvs=opts.reserved_lvs,
                                  use_external_mip_script=ext_ip_script,
                                  )
978
  SubmitOpCode(op, opts=opts)
979
980
981
  return 0


982
983
984
def QueueOps(opts, args):
  """Queue operations.

985
986
987
988
989
990
  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain only one element, the subcommand
  @rtype: int
  @return: the desired exit code

991
992
993
994
995
996
997
998
999
  """
  command = args[0]
  client = GetClient()
  if command in ("drain", "undrain"):
    drain_flag = command == "drain"
    client.SetQueueDrainFlag(drain_flag)
  elif command == "info":
    result = client.QueryConfigValues(["drain_flag"])
    if result[0]:
1000
      val = "set"
1001
    else:
1002
1003
      val = "unset"
    ToStdout("The drain flag is %s" % val)
1004
  else:
1005
1006
    raise errors.OpPrereqError("Command '%s' is not valid." % command,
                               errors.ECODE_INVAL)
1007

1008
1009
  return 0

1010

1011
1012
1013
1014
1015
1016
1017
def _ShowWatcherPause(until):
  if until is None or until < time.time():
    ToStdout("The watcher is not paused.")
  else:
    ToStdout("The watcher is paused until %s.", time.ctime(until))


1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
def WatcherOps(opts, args):
  """Watcher operations.

  @param opts: the command line options selected by the user
  @type args: list
  @param args: should contain only one element, the subcommand
  @rtype: int
  @return: the desired exit code

  """
  command = args[0]
  client = GetClient()

  if command == "continue":
    client.SetWatcherPause(None)
1033
    ToStdout("The watcher is no longer paused.")
1034
1035
1036

  elif command == "pause":
    if len(args) < 2:
1037
      raise errors.OpPrereqError("Missing pause duration", errors.ECODE_INVAL)
1038

1039
1040
    result = client.SetWatcherPause(time.time() + ParseTimespec(args[1]))
    _ShowWatcherPause(result)
1041
1042
1043

  elif command == "info":
    result = client.QueryConfigValues(["watcher_pause"])
1044
    _ShowWatcherPause(result[0])
1045
1046

  else:
1047
1048
    raise errors.OpPrereqError("Command '%s' is not valid." % command,
                               errors.ECODE_INVAL)
1049
1050
1051
1052

  return 0


René Nussbaumer's avatar
René Nussbaumer committed
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
def _OobPower(opts, node_list, power):
  """Puts the node in the list to desired power state.

  @param opts: The command line options selected by the user
  @param node_list: The list of nodes to operate on
  @param power: True if they should be powered on, False otherwise
  @return: The success of the operation (none failed)

  """
  if power:
    command = constants.OOB_POWER_ON
  else:
    command = constants.OOB_POWER_OFF

  op = opcodes.OpOobCommand(node_names=node_list,
                            command=command,
                            ignore_status=True,
1070
1071
                            timeout=opts.oob_timeout,
                            power_delay=opts.power_delay)
René Nussbaumer's avatar
René Nussbaumer committed
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
  result = SubmitOpCode(op, opts=opts)
  errs = 0
  for node_result in result:
    (node_tuple, data_tuple) = node_result
    (_, node_name) = node_tuple
    (data_status, _) = data_tuple
    if data_status != constants.RS_NORMAL:
      assert data_status != constants.RS_UNAVAIL
      errs += 1
      ToStderr("There was a problem changing power for %s, please investigate",
               node_name)

  if errs > 0:
    return False

  return True


def _InstanceStart(opts, inst_list, start):
  """Puts the instances in the list to desired state.

  @param opts: The command line options selected by the user
  @param inst_list: The list of instances to operate on
  @param start: True if they should be started, False for shutdown
  @return: The success of the operation (none failed)

  """
  if start:
    opcls = opcodes.OpInstanceStartup
    text_submit, text_success, text_failed = ("startup", "started", "starting")
  else:
1103
1104
    opcls = compat.partial(opcodes.OpInstanceShutdown,
                           timeout=opts.shutdown_timeout)
René Nussbaumer's avatar
René Nussbaumer committed
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
    text_submit, text_success, text_failed = ("shutdown", "stopped", "stopping")

  jex = JobExecutor(opts=opts)

  for inst in inst_list:
    ToStdout("Submit %s of instance %s", text_submit, inst)
    op = opcls(instance_name=inst)
    jex.QueueJob(inst, op)

  results = jex.GetResults()
  bad_cnt = len([1 for (success, _) in results if not success])

  if bad_cnt == 0:
    ToStdout("All instances have been %s successfully", text_success)
  else:
    ToStderr("There were errors while %s instances:\n"
             "%d error(s) out of %d instance(s)", text_failed, bad_cnt,
             len(results))
    return False

  return True


class _RunWhenNodesReachableHelper:
  """Helper class to make shared internal state sharing easier.

  @ivar success: Indicates if all action_cb calls were successful

  """
René Nussbaumer's avatar
René Nussbaumer committed
1134
  def __init__(self, node_list, action_cb, node2ip, port, feedback_fn,
René Nussbaumer's avatar
René Nussbaumer committed
1135
1136
1137
1138
1139
1140