lxcsu-internal to call capsh with --user=<slicename>

[lxc-userspace.git] / lxcsu

diff --git a/lxcsu b/lxcsu
old mode 100644 (file)
new mode 100755 (executable)
index 229cb33..742fc83
--- a/lxcsu
+++ b/lxcsu
@@ -1,88 +1,27 @@
 #!/usr/bin/python
 
-
-import setns
 import os
 import sys
 
-#from optparse import OptionParser
-
-drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module'.split(',')
-
-"""
-parser = OptionParser()
-parser.add_option("-n", "--net",
-                  action="store_true", dest="netns", default=False,
-                  help="Enter network namespace")
-parser.add_option("-m", "--mnt",
-                  action="store_true", dest="mntns", default=False,
-                  help="Enter mount namespace")
-parser.add_option("-p", "--pid",
-                  action="store_true", dest="pidns", default=False,
-                  help="Enter pid namespace")
-
-(options, args) = parser.parse_args()
-"""
-args = sys.argv[1:]
-
-try:
-       slice_name = args[0]
-except IndexError:
-       print "You must specify a vm name"
-       exit(1)
-
-try:
-       cmd = 'grep %s /proc/*/cgroup | grep freezer'%slice_name
-       output = os.popen(cmd).readlines()
-except:
-       print "Error finding slice %s"%slice_name
-       exit(1)
-
-slice_spec = None
-for e in output:
-       try:
-               l = e.rstrip()
-               path = l.split(':')[0]  
-               comp = l.rsplit(':')[-1]
-               slice_name_check = comp.rsplit('/')[-1]
-
-               if (slice_name_check == slice_name):
-                       slice_path = path
-                       pid = slice_path.split('/')[2]
-                       cmdline = open('/proc/%s/cmdline'%pid).read().rstrip('\n\x00')
-                       if (cmdline == '/sbin/init'):
-                               slice_spec = slice_path
-                               break
-       except:
-               break
-
-if (not slice_spec or not pid):
-    print "Not started: %s"%slice_name
-    exit(1)
-
-# Enter cgroups
-try:
-    for subsystem in ['cpuset','memory','blkio']:
-        open('/sys/fs/cgroup/%s/libvirt/tasks'%subsystem,'w').write(pid)
-except:
-    print "Error assigning resources: %s"%slice_name
-    exit(1)
+from argparse import ArgumentParser
 
-r1 = setns.chcontext('/proc/%s/ns/utc'%pid)
-r2 = setns.chcontext('/proc/%s/ns/ipc'%pid)
-path = '/proc/%s/ns/net'%pid
-r3 = setns.chcontext(path)
+LXCSU_INTERNAL='/usr/sbin/lxcsu-internal'
 
-open('/proc/lxcsu','w').write(pid)
-open('/proc/pidsu','w').write(pid)
+def main ():
+    parser = ArgumentParser()
+    parser.add_argument ("slice_name")
+    parser.add_argument ("command_to_run",nargs="*")
 
+    options = parser.parse_args()
+    slice_name=options.slice_name
+    commands = options.command_to_run
+    if (not commands):
+        commands = ['/bin/sh']
 
 
-pid = os.fork()
+    exec_args = [LXCSU_INTERNAL,slice_name,'--','-c']
+    exec_args+=commands
+    os.execv(LXCSU_INTERNAL,exec_args)
 
-cap_args = map(lambda c:'--drop='+c, drop_capabilities)
-    
-if (pid == 0):
-    os.execv('/usr/sbin/capsh',cap_args+['--']+args[1:])
-else:
-    os.waitpid(pid,0)
+if __name__ == '__main__':
+    main()