1 ### $Id: slices.py 15842 2009-11-22 09:56:13Z anil $
2 ### $URL: https://svn.planet-lab.org/svn/sfa/trunk/sfa/plc/slices.py $
9 from types import StringTypes
10 from sfa.util.namespace import *
11 from sfa.util.rspec import *
12 from sfa.util.specdict import *
13 from sfa.util.faults import *
14 from sfa.util.record import SfaRecord
15 from sfa.util.policy import Policy
16 from sfa.util.record import *
17 from sfa.util.sfaticket import SfaTicket
18 from sfa.util.debug import log
19 from sfa.plc.slices import Slices
20 from sfa.trust.credential import Credential
21 import sfa.plc.peers as peers
22 from sfa.plc.network import *
23 from sfa.plc.api import SfaAPI
24 from sfa.plc.slices import *
27 def __get_registry_objects(slice_xrn, creds, users):
31 hrn, type = urn_to_hrn(slice_xrn)
33 hrn_auth = get_authority(hrn)
35 # Build up objects that an SFA registry would return if SFA
36 # could contact the slice's registry directly
44 site['name'] = 'geni.%s' % hrn_auth
45 site['enabled'] = True
46 site['max_slices'] = 100
49 # Is it okay if this login base is the same as one already at this myplc site?
50 # Do we need uniqueness? Should use hrn_auth instead of just the leaf perhaps?
51 site['login_base'] = get_leaf(hrn_auth)
52 site['abbreviated_name'] = hrn
53 site['max_slivers'] = 1000
54 reg_objects['site'] = site
57 slice['expires'] = int(mktime(Credential(string=creds[0]).get_lifetime().timetuple()))
59 slice['name'] = site['login_base'] + "_" + get_leaf(hrn)
61 slice['description'] = hrn
63 reg_objects['slice_record'] = slice
65 reg_objects['users'] = {}
68 hrn, _ = urn_to_hrn(user['urn'])
69 user['email'] = hrn + "@geni.net"
70 user['first_name'] = hrn
71 user['last_name'] = hrn
72 reg_objects['users'][user['email']] = user
76 def __get_hostnames(nodes):
79 hostnames.append(node.hostname)
84 version['geni_api'] = 1
88 def slice_status(api, slice_xrn, creds):
90 result['geni_urn'] = slice_xrn
91 result['geni_status'] = 'unknown'
92 result['geni_resources'] = {}
95 def create_slice(api, slice_xrn, creds, rspec, users):
97 Create the sliver[s] (slice) at this aggregate.
98 Verify HRN and initialize the slice record in PLC if necessary.
101 reg_objects = __get_registry_objects(slice_xrn, creds, users)
103 hrn, type = urn_to_hrn(slice_xrn)
106 peer = slices.get_peer(hrn)
107 sfa_peer = slices.get_sfa_peer(hrn)
108 registry = api.registries[api.hrn]
109 credential = api.getCredential()
110 site_id, remote_site_id = slices.verify_site(registry, credential, hrn,
111 peer, sfa_peer, reg_objects)
113 slice = slices.verify_slice(registry, credential, hrn, site_id,
114 remote_site_id, peer, sfa_peer, reg_objects)
116 network = Network(api)
118 slice = network.get_slice(api, hrn)
119 current = __get_hostnames(slice.get_nodes())
121 network.addRSpec(rspec, api.config.SFA_AGGREGATE_RSPEC_SCHEMA)
122 request = __get_hostnames(network.nodesWithSlivers())
124 # remove nodes not in rspec
125 deleted_nodes = list(set(current).difference(request))
127 # add nodes from rspec
128 added_nodes = list(set(request).difference(current))
131 api.plshell.UnBindObjectFromPeer(api.plauth, 'slice', slice.id, peer)
133 api.plshell.AddSliceToNodes(api.plauth, slice.name, added_nodes)
134 api.plshell.DeleteSliceFromNodes(api.plauth, slice.name, deleted_nodes)
136 network.updateSliceTags()
139 api.plshell.BindObjectToPeer(api.plauth, 'slice', slice.id, peer,
142 # print network.toxml()
147 def renew_slice(api, xrn, creds, exipration_time):
148 hrn, type = urn_to_hrn(xrn)
149 slicename = hrn_to_pl_slicename(hrn)
150 slices = api.plshell.GetSlices(api.plauth, {'name': slicename}, ['slice_id'])
152 raise RecordNotFound(hrn)
154 slice['expires'] = expiration_time
155 api.plshell.UpdateSlice(api.plauth, slice['slice_id'], slice)
158 def start_slice(api, xrn, creds):
159 hrn, type = urn_to_hrn(xrn)
160 slicename = hrn_to_pl_slicename(hrn)
161 slices = api.plshell.GetSlices(api.plauth, {'name': slicename}, ['slice_id'])
163 raise RecordNotFound(hrn)
164 slice_id = slices[0]['slice_id']
165 slice_tags = api.plshell.GetSliceTags(api.plauth, {'slice_id': slice_id, 'tagname': 'enabled'}, ['slice_tag_id'])
166 # just remove the tag if it exists
168 api.plshell.DeleteSliceTag(api.plauth, slice_tags[0]['slice_tag_id'])
172 def stop_slice(api, xrn, creds):
173 hrn, type = urn_to_hrn(xrn)
174 slicename = hrn_to_pl_slicename(hrn)
175 slices = api.plshell.GetSlices(api.plauth, {'name': slicename}, ['slice_id'])
177 raise RecordNotFound(hrn)
178 slice_id = slices[0]['slice_id']
179 slice_tags = api.plshell.GetSliceTags(api.plauth, {'slice_id': slice_id, 'tagname': 'enabled'})
181 api.plshell.AddSliceTag(api.plauth, slice_id, 'enabled', '0')
182 elif slice_tags[0]['value'] != "0":
183 tag_id = attributes[0]['slice_tag_id']
184 api.plshell.UpdateSliceTag(api.plauth, tag_id, '0')
187 def reset_slice(api, xrn):
188 # XX not implemented at this interface
191 def delete_slice(api, xrn, creds):
192 hrn, type = urn_to_hrn(xrn)
193 slicename = hrn_to_pl_slicename(hrn)
194 slices = api.plshell.GetSlices(api.plauth, {'name': slicename})
199 # determine if this is a peer slice
200 peer = peers.get_peer(api, hrn)
202 api.plshell.UnBindObjectFromPeer(api.plauth, 'slice', slice['slice_id'], peer)
203 api.plshell.DeleteSliceFromNodes(api.plauth, slicename, slice['node_ids'])
205 api.plshell.BindObjectToPeer(api.plauth, 'slice', slice['slice_id'], peer, slice['peer_slice_id'])
208 def get_slices(api, creds):
209 # look in cache first
211 slices = api.cache.get('slices')
216 slices = api.plshell.GetSlices(api.plauth, {'peer_id': None}, ['name'])
217 slice_hrns = [slicename_to_hrn(api.hrn, slice['name']) for slice in slices]
218 slice_urns = [hrn_to_urn(slice_hrn, 'slice') for slice_hrn in slice_hrns]
222 api.cache.add('slices', slice_urns)
226 def get_rspec(api, creds, options):
227 # get slice's hrn from options
228 xrn = options.get('geni_slice_urn', None)
229 hrn, type = urn_to_hrn(xrn)
231 # get hrn of the original caller
232 origin_hrn = options.get('origin_hrn', None)
234 origin_hrn = Credential(string=creds[0]).get_gid_caller().get_hrn()
236 # look in cache first
237 if api.cache and not xrn:
238 rspec = api.cache.get('nodes')
242 network = Network(api)
244 if network.get_slice(api, hrn):
247 rspec = network.toxml()
250 if api.cache and not xrn:
251 api.cache.add('nodes', rspec)
256 def get_ticket(api, xrn, creds, rspec, users):
258 reg_objects = __get_registry_objects(xrn, creds, users)
260 slice_hrn, type = urn_to_hrn(xrn)
262 peer = slices.get_peer(slice_hrn)
263 sfa_peer = slices.get_sfa_peer(slice_hrn)
265 # get the slice record
266 registry = api.registries[api.hrn]
267 credential = api.getCredential()
268 records = registry.resolve(credential, xrn)
270 # similar to create_slice, we must verify that the required records exist
271 # at this aggregate before we can issue a ticket
272 site_id, remote_site_id = slices.verify_site(registry, credential, slice_hrn,
273 peer, sfa_peer, reg_objects)
274 slice = slices.verify_slice(registry, credential, slice_hrn, site_id,
275 remote_site_id, peer, sfa_peer, reg_objects)
277 # make sure we get a local slice record
279 for tmp_record in records:
280 if tmp_record['type'] == 'slice' and \
281 not tmp_record['peer_authority']:
282 record = SliceRecord(dict=tmp_record)
284 raise RecordNotFound(slice_hrn)
287 slivers = Slices(api).get_slivers(slice_hrn)
289 raise SliverDoesNotExist(slice_hrn)
294 'timestamp': int(time.time()),
295 'initscripts': initscripts,
300 object_gid = record.get_gid_object()
301 new_ticket = SfaTicket(subject = object_gid.get_subject())
302 new_ticket.set_gid_caller(api.auth.client_gid)
303 new_ticket.set_gid_object(object_gid)
304 new_ticket.set_issuer(key=api.key, subject=api.hrn)
305 new_ticket.set_pubkey(object_gid.get_pubkey())
306 new_ticket.set_attributes(data)
307 new_ticket.set_rspec(rspec)
308 #new_ticket.set_parent(api.auth.hierarchy.get_auth_ticket(auth_hrn))
312 return new_ticket.save_to_string(save_parents=True)
319 rspec = get_rspec(api, "plc.princeton.sapan", None)
320 #rspec = get_rspec(api, "plc.princeton.coblitz", None)
321 #rspec = get_rspec(api, "plc.pl.sirius", None)
324 f = open(sys.argv[1])
327 create_slice(api, "plc.princeton.sapan", xml)
329 if __name__ == "__main__":