mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
458074df82
The token now names the console type it was made for: novncd accepts only a VNC page's token and socketiod only a serial page's, so a VNC page's token no longer opens the serial console without the VNC password. A VNC session re-checks every 10 s, as the serial one did, that its user may still open the console; a deactivated user or a removed owner loses it. The check (may_still_open) moves to console.tokens for both daemons.
112 lines
4.8 KiB
Python
112 lines
4.8 KiB
Python
# pylint: disable=no-name-in-module,no-member
|
|
|
|
import functools
|
|
import json
|
|
from pathlib import Path
|
|
|
|
from appsettings.settings import app_settings
|
|
from console import tokens
|
|
from django.conf import settings
|
|
from django.shortcuts import render
|
|
from django.utils.translation import gettext_lazy as _
|
|
from instances.models import Instance
|
|
from instances.utils import can_open_console
|
|
from libvirt import libvirtError
|
|
from vrtManager.connection import CONN_TCP, CONN_TLS
|
|
from vrtManager.instance import wvmInstance
|
|
from vrtManager.util import is_loopback
|
|
|
|
# one file a layout, written by dev/console_layout.py
|
|
LAYOUTS_DIR = Path(__file__).resolve().parent / "layouts"
|
|
|
|
|
|
@functools.cache
|
|
def keyboard_layouts():
|
|
"""The keyboard layouts the VNC console types text with, US first, then
|
|
by name: {id: {"name": ..., "keys": {DOM code: [plain, Shift, AltGr,
|
|
Shift+AltGr]}}}."""
|
|
layouts = {}
|
|
for path in LAYOUTS_DIR.glob("*.json"):
|
|
layout = json.loads(path.read_text())
|
|
layouts[path.stem] = {"name": layout["name"], "keys": layout["keys"]}
|
|
us = layouts.pop("us")
|
|
return {"us": us, **dict(sorted(layouts.items(), key=lambda item: item[1]["name"]))}
|
|
|
|
|
|
def console(request, compute_id, uuid):
|
|
"""The console page of the VM with this UUID on this compute. A console
|
|
that cannot open gets a page that says why, and no console client."""
|
|
instance = Instance.objects.filter(compute_id=compute_id, uuid=uuid).first()
|
|
# Same answer for "no such VM" and "not allowed", so the response
|
|
# does not reveal whether a VM exists.
|
|
if instance is None or not can_open_console(request.user, instance):
|
|
console_error = _("User does not have permission to access console or host/instance not exist")
|
|
return render(request, "console-error.html", {"console_error": console_error}, status=403)
|
|
|
|
try:
|
|
conn = wvmInstance(
|
|
instance.compute.hostname,
|
|
instance.compute.login,
|
|
instance.compute.password,
|
|
instance.compute.type,
|
|
instance.name,
|
|
uuid=instance.uuid,
|
|
)
|
|
console_type = conn.get_console_type()
|
|
console_passwd = conn.get_console_passwd()
|
|
running = conn.instance.isActive()
|
|
# novncd reaches a console that listens on its host's loopback only
|
|
# through SSH (or on this host); the running VM's listener, as novncd sees it
|
|
unreachable = instance.compute.type in (CONN_TCP, CONN_TLS) and bool(
|
|
conn.get_console_socket() or is_loopback(conn.get_console_listener_addr())
|
|
)
|
|
except (libvirtError, ValueError, IndexError):
|
|
running = unreachable = False
|
|
console_type = None
|
|
console_passwd = None
|
|
|
|
if console_type is None:
|
|
console_error = _("Fail to get console. Please check the console configuration of your VM.")
|
|
elif not running: # a shut-off VM has no console to connect to
|
|
console_error = _("The VM is not running: start it to open its console.")
|
|
elif console_type == "vnc" and unreachable:
|
|
console_error = _(
|
|
"This console listens only on its host, which the panel reaches over TCP or TLS. "
|
|
"Let the console listen on all interfaces in the VM's console settings, "
|
|
"or add the host as an SSH host."
|
|
)
|
|
elif console_type == "pty" and not settings.SERIAL_CONSOLE_ENABLED:
|
|
console_error = _(
|
|
"Serial console is disabled on this server. "
|
|
"Please switch VM graphics to VNC or ask an administrator."
|
|
)
|
|
elif console_type not in ("vnc", "pty"):
|
|
console_error = _(
|
|
"Console type '%(type)s' is not supported. Please switch the VM graphics to VNC."
|
|
) % {"type": console_type}
|
|
else:
|
|
console_error = None
|
|
if console_error:
|
|
return render(request, "console-error.html", {"instance": instance, "console_error": console_error})
|
|
|
|
# the console daemons' credential for this page
|
|
token = tokens.sign(compute_id, uuid, request.user.id, console_type)
|
|
if console_type == "pty":
|
|
return render(request, "console-xterm.html", {"instance": instance, "token": token})
|
|
|
|
# how the VNC page starts (Settings > Console); its View menu changes them
|
|
if app_settings.CONSOLE_RESIZE_SESSION == "True":
|
|
resize = "remote"
|
|
elif app_settings.CONSOLE_SCALE == "True":
|
|
resize = "scale"
|
|
else:
|
|
resize = "off"
|
|
vnc = {
|
|
"token": token,
|
|
# without the permission the VNC server asks the user for it
|
|
"password": console_passwd if request.user.has_perm("instances.passwordless_console") else None,
|
|
"resize": resize,
|
|
"clip": app_settings.CONSOLE_CLIP_VIEWPORT == "True",
|
|
"viewOnly": app_settings.CONSOLE_VIEW_ONLY == "True",
|
|
}
|
|
return render(request, "console-vnc.html", {"instance": instance, "vnc": vnc, "layouts": keyboard_layouts()})
|