catborise 1f9347e148 fix(instances): a new VM and each clone get a VNC password of their own ... Since the VM create became a job (6f0c7300) every new VM was defined with no VNC password, and a clone copied its source's password (or its lack of one) exactly: every clone of a template shared it. Computes listen for VNC on all their addresses (dev/libvirt-bootstrap.sh), so anyone who could reach a compute's VNC ports opened any of these consoles directly, without the panel; the README's firewall rule was the only guard. The create job asks for create.py's random 8-character password again, and a clone's VNC graphics get a new random one. The console page sends the password to a user with passwordless_console, which the user create form now ticks by default next to change_password; a user without it is asked for the password, as the permission intends. Existing VMs keep their settings. Live create, clone and VM page tests pass on a TCP compute.		2026-11-06 20:00:43 +03:00
..
api	refactor: the API's serializers and the new VM form no longer need models	2026-11-06 13:46:27 +03:00
migrations	refactor: the API's serializers and the new VM form no longer need models	2026-11-06 13:46:27 +03:00
templates	feat(jobs): deleting a VM is a job that recovery finishes	2026-11-06 09:49:31 +03:00
templatetags	chore: remove files nothing uses	2026-11-06 10:53:43 +03:00
tests	fix(instances): a new VM and each clone get a VNC password of their own	2026-11-06 20:00:43 +03:00
__init__.py	chore: remove code nothing uses	2026-11-06 10:53:37 +03:00
addresses.py	feat(webvirtcloud): a request waiting on a host holds one thread, not a worker	2026-11-02 21:19:01 +03:00
apps.py	format python code with black	2022-11-02 08:54:35 +03:00
forms.py	refactor: the API's serializers and the new VM form no longer need models	2026-11-06 13:46:27 +03:00
jobs.py	fix(instances): a new VM and each clone get a VNC password of their own	2026-11-06 20:00:43 +03:00
models.py	refactor: the API's serializers and the new VM form no longer need models	2026-11-06 13:46:27 +03:00
report.py	perf: the Logs and VM report downloads are written row by row	2026-11-05 18:58:13 +03:00
states.py	feat(instances): the Power tab shows the VM's state and where each action takes it	2026-11-03 19:22:52 +03:00
urls.py	chore: remove code nothing uses	2026-11-06 10:53:37 +03:00
utils.py	fix(instances): recording a migration holds the ownership lock	2026-11-05 18:58:13 +03:00
views.py	fix(instances): a VM list poll for a host id that is not a number is 404	2026-11-06 13:46:27 +03:00