6 from types import StringTypes
8 from sfa.util.faults import *
9 from sfa.util.xrn import get_authority, hrn_to_urn, urn_to_hrn
10 from sfa.util.plxrn import slicename_to_hrn, hrn_to_pl_slicename
11 from sfa.util.rspec import *
12 from sfa.util.specdict import *
13 from sfa.util.record import SfaRecord
14 from sfa.util.policy import Policy
15 from sfa.util.record import *
16 from sfa.util.sfaticket import SfaTicket
17 from sfa.plc.slices import Slices
18 from sfa.trust.credential import Credential
19 import sfa.plc.peers as peers
20 from sfa.plc.network import *
21 from sfa.plc.api import SfaAPI
22 from sfa.plc.slices import *
23 from sfa.util.version import version_core
24 from sfa.util.sfatime import utcparse
27 return version_core({'interface':'aggregate',
30 def __get_registry_objects(slice_xrn, creds, users):
34 hrn, type = urn_to_hrn(slice_xrn)
36 hrn_auth = get_authority(hrn)
38 # Build up objects that an SFA registry would return if SFA
39 # could contact the slice's registry directly
43 # dont allow special characters in the site login base
44 #only_alphanumeric = re.compile('[^a-zA-Z0-9]+')
45 #login_base = only_alphanumeric.sub('', hrn_auth[:20]).lower()
46 slicename = hrn_to_pl_slicename(hrn)
47 login_base = slicename.split('_')[0]
51 site['name'] = 'geni.%s' % login_base
52 site['enabled'] = True
53 site['max_slices'] = 100
56 # Is it okay if this login base is the same as one already at this myplc site?
57 # Do we need uniqueness? Should use hrn_auth instead of just the leaf perhaps?
58 site['login_base'] = login_base
59 site['abbreviated_name'] = login_base
60 site['max_slivers'] = 1000
61 reg_objects['site'] = site
65 extime = Credential(string=creds[0]).get_expiration()
66 # If the expiration time is > 60 days from now, set the expiration time to 60 days from now
67 if extime > datetime.datetime.utcnow() + datetime.timedelta(days=60):
68 extime = datetime.datetime.utcnow() + datetime.timedelta(days=60)
69 slice['expires'] = int(time.mktime(extime.timetuple()))
71 slice['name'] = hrn_to_pl_slicename(hrn)
73 slice['description'] = hrn
75 reg_objects['slice_record'] = slice
77 reg_objects['users'] = {}
80 hrn, _ = urn_to_hrn(user['urn'])
81 user['email'] = hrn_to_pl_slicename(hrn) + "@geni.net"
82 user['first_name'] = hrn
83 user['last_name'] = hrn
84 reg_objects['users'][user['email']] = user
88 def __get_hostnames(nodes):
91 hostnames.append(node.hostname)
94 def slice_status(api, slice_xrn, creds):
95 hrn, type = urn_to_hrn(slice_xrn)
96 # find out where this slice is currently running
98 slicename = hrn_to_pl_slicename(hrn)
100 slices = api.plshell.GetSlices(api.plauth, [slicename], ['node_ids','person_ids','name','expires'])
102 raise Exception("Slice %s not found (used %s as slicename internally)" % slice_xrn, slicename)
105 nodes = api.plshell.GetNodes(api.plauth, slice['node_ids'],
106 ['hostname', 'boot_state', 'last_contact'])
107 api.logger.info(slice)
108 api.logger.info(nodes)
111 result['geni_urn'] = slice_xrn
112 result['geni_status'] = 'unknown'
113 result['pl_login'] = slice['name']
114 result['pl_expires'] = datetime.datetime.fromtimestamp(slice['expires']).ctime()
120 res['pl_hostname'] = node['hostname']
121 res['pl_boot_state'] = node['boot_state']
122 res['pl_last_contact'] = node['last_contact']
123 if not node['last_contact'] is None:
124 res['pl_last_contact'] = datetime.datetime.fromtimestamp(node['last_contact']).ctime()
126 res['geni_status'] = 'unknown'
127 res['geni_error'] = ''
129 resources.append(res)
131 result['geni_resources'] = resources
134 def create_slice(api, slice_xrn, creds, rspec, users):
136 Create the sliver[s] (slice) at this aggregate.
137 Verify HRN and initialize the slice record in PLC if necessary.
140 reg_objects = __get_registry_objects(slice_xrn, creds, users)
142 hrn, type = urn_to_hrn(slice_xrn)
145 peer = slices.get_peer(hrn)
146 sfa_peer = slices.get_sfa_peer(hrn)
147 registry = api.registries[api.hrn]
148 credential = api.getCredential()
149 site_id, remote_site_id = slices.verify_site(registry, credential, hrn,
150 peer, sfa_peer, reg_objects)
152 slice_record = slices.verify_slice(registry, credential, hrn, site_id,
153 remote_site_id, peer, sfa_peer, reg_objects)
155 network = Network(api)
157 slice = network.get_slice(api, hrn)
158 slice.peer_id = slice_record['peer_slice_id']
159 current = __get_hostnames(slice.get_nodes())
161 network.addRSpec(rspec, api.config.SFA_AGGREGATE_RSPEC_SCHEMA)
162 request = __get_hostnames(network.nodesWithSlivers())
164 # remove nodes not in rspec
165 deleted_nodes = list(set(current).difference(request))
167 # add nodes from rspec
168 added_nodes = list(set(request).difference(current))
172 api.plshell.UnBindObjectFromPeer(api.plauth, 'slice', slice.id, peer)
174 api.plshell.AddSliceToNodes(api.plauth, slice.name, added_nodes)
175 api.plshell.DeleteSliceFromNodes(api.plauth, slice.name, deleted_nodes)
177 network.updateSliceTags()
181 api.plshell.BindObjectToPeer(api.plauth, 'slice', slice.id, peer,
184 # print network.toxml()
189 def renew_slice(api, xrn, creds, expiration_time):
190 hrn, type = urn_to_hrn(xrn)
191 slicename = hrn_to_pl_slicename(hrn)
192 slices = api.plshell.GetSlices(api.plauth, {'name': slicename}, ['slice_id'])
194 raise RecordNotFound(hrn)
196 requested_time = utcparse(expiration_time)
197 record = {'expires': int(time.mktime(requested_time.timetuple()))}
198 api.plshell.UpdateSlice(api.plauth, slice['slice_id'], record)
201 def start_slice(api, xrn, creds):
202 hrn, type = urn_to_hrn(xrn)
203 slicename = hrn_to_pl_slicename(hrn)
204 slices = api.plshell.GetSlices(api.plauth, {'name': slicename}, ['slice_id'])
206 raise RecordNotFound(hrn)
207 slice_id = slices[0]['slice_id']
208 slice_tags = api.plshell.GetSliceTags(api.plauth, {'slice_id': slice_id, 'tagname': 'enabled'}, ['slice_tag_id'])
209 # just remove the tag if it exists
211 api.plshell.DeleteSliceTag(api.plauth, slice_tags[0]['slice_tag_id'])
215 def stop_slice(api, xrn, creds):
216 hrn, type = urn_to_hrn(xrn)
217 slicename = hrn_to_pl_slicename(hrn)
218 slices = api.plshell.GetSlices(api.plauth, {'name': slicename}, ['slice_id'])
220 raise RecordNotFound(hrn)
221 slice_id = slices[0]['slice_id']
222 slice_tags = api.plshell.GetSliceTags(api.plauth, {'slice_id': slice_id, 'tagname': 'enabled'})
224 api.plshell.AddSliceTag(api.plauth, slice_id, 'enabled', '0')
225 elif slice_tags[0]['value'] != "0":
226 tag_id = attributes[0]['slice_tag_id']
227 api.plshell.UpdateSliceTag(api.plauth, tag_id, '0')
230 def reset_slice(api, xrn):
231 # XX not implemented at this interface
234 def delete_slice(api, xrn, creds):
235 hrn, type = urn_to_hrn(xrn)
236 slicename = hrn_to_pl_slicename(hrn)
237 slices = api.plshell.GetSlices(api.plauth, {'name': slicename})
242 # determine if this is a peer slice
243 peer = peers.get_peer(api, hrn)
246 api.plshell.UnBindObjectFromPeer(api.plauth, 'slice', slice['slice_id'], peer)
247 api.plshell.DeleteSliceFromNodes(api.plauth, slicename, slice['node_ids'])
250 api.plshell.BindObjectToPeer(api.plauth, 'slice', slice['slice_id'], peer, slice['peer_slice_id'])
253 def get_slices(api, creds):
254 # look in cache first
256 slices = api.cache.get('slices')
261 slices = api.plshell.GetSlices(api.plauth, {'peer_id': None}, ['name'])
262 slice_hrns = [slicename_to_hrn(api.hrn, slice['name']) for slice in slices]
263 slice_urns = [hrn_to_urn(slice_hrn, 'slice') for slice_hrn in slice_hrns]
267 api.cache.add('slices', slice_urns)
271 def get_rspec(api, creds, options):
272 # get slice's hrn from options
273 xrn = options.get('geni_slice_urn', '')
274 hrn, type = urn_to_hrn(xrn)
276 # look in cache first
277 if api.cache and not xrn:
278 rspec = api.cache.get('nodes')
282 network = Network(api)
284 if network.get_slice(api, hrn):
287 rspec = network.toxml()
290 if api.cache and not xrn:
291 api.cache.add('nodes', rspec)
296 def get_ticket(api, xrn, creds, rspec, users):
298 reg_objects = __get_registry_objects(xrn, creds, users)
300 slice_hrn, type = urn_to_hrn(xrn)
302 peer = slices.get_peer(slice_hrn)
303 sfa_peer = slices.get_sfa_peer(slice_hrn)
305 # get the slice record
306 registry = api.registries[api.hrn]
307 credential = api.getCredential()
308 records = registry.Resolve(xrn, credential)
310 # similar to create_slice, we must verify that the required records exist
311 # at this aggregate before we can issue a ticket
312 site_id, remote_site_id = slices.verify_site(registry, credential, slice_hrn,
313 peer, sfa_peer, reg_objects)
314 slice = slices.verify_slice(registry, credential, slice_hrn, site_id,
315 remote_site_id, peer, sfa_peer, reg_objects)
317 # make sure we get a local slice record
319 for tmp_record in records:
320 if tmp_record['type'] == 'slice' and \
321 not tmp_record['peer_authority']:
322 record = SliceRecord(dict=tmp_record)
324 raise RecordNotFound(slice_hrn)
327 slivers = Slices(api).get_slivers(slice_hrn)
329 raise SliverDoesNotExist(slice_hrn)
334 'timestamp': int(time.time()),
335 'initscripts': initscripts,
340 object_gid = record.get_gid_object()
341 new_ticket = SfaTicket(subject = object_gid.get_subject())
342 new_ticket.set_gid_caller(api.auth.client_gid)
343 new_ticket.set_gid_object(object_gid)
344 new_ticket.set_issuer(key=api.key, subject=api.hrn)
345 new_ticket.set_pubkey(object_gid.get_pubkey())
346 new_ticket.set_attributes(data)
347 new_ticket.set_rspec(rspec)
348 #new_ticket.set_parent(api.auth.hierarchy.get_auth_ticket(auth_hrn))
352 return new_ticket.save_to_string(save_parents=True)
359 rspec = get_rspec(api, "plc.princeton.sapan", None)
360 #rspec = get_rspec(api, "plc.princeton.coblitz", None)
361 #rspec = get_rspec(api, "plc.pl.sirius", None)
364 f = open(sys.argv[1])
367 create_slice(api, "plc.princeton.sapan", xml)
369 if __name__ == "__main__":