From e5a812082ae033afb1eed82c0f2df3d0f6bdc93f Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Wed, 17 Apr 2024 08:53:20 +0200 Subject: Adding upstream version 2.1.6. Signed-off-by: Daniel Baumann --- tools/Makefile.am | 165 +++ tools/attrd_updater.8.inc | 5 + tools/attrd_updater.c | 520 ++++++++++ tools/cibadmin.8.inc | 5 + tools/cibadmin.c | 954 ++++++++++++++++++ tools/cibsecret.in | 440 ++++++++ tools/cluster-clean.in | 99 ++ tools/cluster-helper.in | 201 ++++ tools/cluster-init.in | 537 ++++++++++ tools/crm_attribute.8.inc | 5 + tools/crm_attribute.c | 883 ++++++++++++++++ tools/crm_diff.8.inc | 5 + tools/crm_diff.c | 399 ++++++++ tools/crm_error.8.inc | 5 + tools/crm_error.c | 175 ++++ tools/crm_failcount.in | 294 ++++++ tools/crm_master.in | 92 ++ tools/crm_mon.8.inc | 17 + tools/crm_mon.c | 2287 ++++++++++++++++++++++++++++++++++++++++++ tools/crm_mon.h | 78 ++ tools/crm_mon.service.in | 17 + tools/crm_mon.upstart.in | 35 + tools/crm_mon_curses.c | 490 +++++++++ tools/crm_node.8.inc | 5 + tools/crm_node.c | 601 +++++++++++ tools/crm_report.in | 481 +++++++++ tools/crm_resource.8.inc | 5 + tools/crm_resource.c | 2182 ++++++++++++++++++++++++++++++++++++++++ tools/crm_resource.h | 121 +++ tools/crm_resource_ban.c | 505 ++++++++++ tools/crm_resource_print.c | 818 +++++++++++++++ tools/crm_resource_runtime.c | 2178 ++++++++++++++++++++++++++++++++++++++++ tools/crm_rule.8.inc | 8 + tools/crm_rule.c | 227 +++++ tools/crm_shadow.8.inc | 5 + tools/crm_shadow.c | 1322 ++++++++++++++++++++++++ tools/crm_simulate.8.inc | 8 + tools/crm_simulate.c | 587 +++++++++++ tools/crm_standby.in | 158 +++ tools/crm_ticket.8.inc | 5 + tools/crm_ticket.c | 1007 +++++++++++++++++++ tools/crm_verify.8.inc | 5 + tools/crm_verify.c | 285 ++++++ tools/crmadmin.8.inc | 5 + tools/crmadmin.c | 275 +++++ tools/fix-manpages | 33 + tools/iso8601.8.inc | 5 + tools/iso8601.c | 282 ++++++ tools/pcmk_simtimes.in | 159 +++ tools/report.collector.in | 885 ++++++++++++++++ tools/report.common.in | 890 ++++++++++++++++ tools/stonith_admin.8.inc | 5 + tools/stonith_admin.c | 674 +++++++++++++ 53 files changed, 21434 insertions(+) create mode 100644 tools/Makefile.am create mode 100644 tools/attrd_updater.8.inc create mode 100644 tools/attrd_updater.c create mode 100644 tools/cibadmin.8.inc create mode 100644 tools/cibadmin.c create mode 100644 tools/cibsecret.in create mode 100755 tools/cluster-clean.in create mode 100755 tools/cluster-helper.in create mode 100755 tools/cluster-init.in create mode 100644 tools/crm_attribute.8.inc create mode 100644 tools/crm_attribute.c create mode 100644 tools/crm_diff.8.inc create mode 100644 tools/crm_diff.c create mode 100644 tools/crm_error.8.inc create mode 100644 tools/crm_error.c create mode 100755 tools/crm_failcount.in create mode 100755 tools/crm_master.in create mode 100644 tools/crm_mon.8.inc create mode 100644 tools/crm_mon.c create mode 100644 tools/crm_mon.h create mode 100644 tools/crm_mon.service.in create mode 100644 tools/crm_mon.upstart.in create mode 100644 tools/crm_mon_curses.c create mode 100644 tools/crm_node.8.inc create mode 100644 tools/crm_node.c create mode 100644 tools/crm_report.in create mode 100644 tools/crm_resource.8.inc create mode 100644 tools/crm_resource.c create mode 100644 tools/crm_resource.h create mode 100644 tools/crm_resource_ban.c create mode 100644 tools/crm_resource_print.c create mode 100644 tools/crm_resource_runtime.c create mode 100644 tools/crm_rule.8.inc create mode 100644 tools/crm_rule.c create mode 100644 tools/crm_shadow.8.inc create mode 100644 tools/crm_shadow.c create mode 100644 tools/crm_simulate.8.inc create mode 100644 tools/crm_simulate.c create mode 100755 tools/crm_standby.in create mode 100644 tools/crm_ticket.8.inc create mode 100644 tools/crm_ticket.c create mode 100644 tools/crm_verify.8.inc create mode 100644 tools/crm_verify.c create mode 100644 tools/crmadmin.8.inc create mode 100644 tools/crmadmin.c create mode 100644 tools/fix-manpages create mode 100644 tools/iso8601.8.inc create mode 100644 tools/iso8601.c create mode 100644 tools/pcmk_simtimes.in create mode 100644 tools/report.collector.in create mode 100644 tools/report.common.in create mode 100644 tools/stonith_admin.8.inc create mode 100644 tools/stonith_admin.c (limited to 'tools') diff --git a/tools/Makefile.am b/tools/Makefile.am new file mode 100644 index 0000000..36bd3ae --- /dev/null +++ b/tools/Makefile.am @@ -0,0 +1,165 @@ +# +# Copyright 2004-2023 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# +include $(top_srcdir)/mk/common.mk +include $(top_srcdir)/mk/man.mk + +if BUILD_SYSTEMD +systemdsystemunit_DATA = crm_mon.service +endif + +noinst_HEADERS = crm_mon.h crm_resource.h + +pcmkdir = $(datadir)/$(PACKAGE) +pcmk_DATA = report.common report.collector + +sbin_SCRIPTS = crm_report crm_standby crm_master crm_failcount +if BUILD_CIBSECRETS +sbin_SCRIPTS += cibsecret +endif +noinst_SCRIPTS = cluster-clean \ + cluster-init \ + cluster-helper \ + pcmk_simtimes + +EXTRA_DIST = attrd_updater.8.inc \ + cibadmin.8.inc \ + crm_attribute.8.inc \ + crm_diff.8.inc \ + crm_error.8.inc \ + crm_mon.8.inc \ + crm_node.8.inc \ + crm_resource.8.inc \ + crm_rule.8.inc \ + crm_shadow.8.inc \ + crm_simulate.8.inc \ + crm_ticket.8.inc \ + crm_verify.8.inc \ + crmadmin.8.inc \ + fix-manpages \ + iso8601.8.inc \ + stonith_admin.8.inc + +sbin_PROGRAMS = attrd_updater \ + cibadmin \ + crmadmin \ + crm_simulate \ + crm_attribute \ + crm_diff \ + crm_error \ + crm_mon \ + crm_node \ + crm_resource \ + crm_rule \ + crm_shadow \ + crm_verify \ + crm_ticket \ + iso8601 \ + stonith_admin + +## SOURCES + +# A few tools are just thin wrappers around crm_attribute. +# This makes their help get updated when crm_attribute changes +# (see mk/common.mk). +MAN8DEPS = crm_attribute + +crmadmin_SOURCES = crmadmin.c +crmadmin_LDADD = $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la \ + $(top_builddir)/lib/pacemaker/libpacemaker.la + +crm_error_SOURCES = crm_error.c +crm_error_LDADD = $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +cibadmin_SOURCES = cibadmin.c +cibadmin_LDADD = $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_shadow_SOURCES = crm_shadow.c +crm_shadow_LDADD = $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_node_SOURCES = crm_node.c +crm_node_LDADD = $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_simulate_SOURCES = crm_simulate.c + +crm_simulate_LDADD = $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_diff_SOURCES = crm_diff.c +crm_diff_LDADD = $(top_builddir)/lib/common/libcrmcommon.la + +crm_mon_SOURCES = crm_mon.c crm_mon_curses.c +crm_mon_LDADD = $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/fencing/libstonithd.la \ + $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la \ + $(CURSESLIBS) + +crm_verify_SOURCES = crm_verify.c +crm_verify_LDADD = $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_attribute_SOURCES = crm_attribute.c +crm_attribute_LDADD = $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_resource_SOURCES = crm_resource.c \ + crm_resource_ban.c \ + crm_resource_print.c \ + crm_resource_runtime.c +crm_resource_LDADD = $(top_builddir)/lib/pengine/libpe_rules.la \ + $(top_builddir)/lib/fencing/libstonithd.la \ + $(top_builddir)/lib/lrmd/liblrmd.la \ + $(top_builddir)/lib/services/libcrmservice.la \ + $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_rule_SOURCES = crm_rule.c +crm_rule_LDADD = $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/pengine/libpe_rules.la \ + $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +iso8601_SOURCES = iso8601.c +iso8601_LDADD = $(top_builddir)/lib/common/libcrmcommon.la + +attrd_updater_SOURCES = attrd_updater.c +attrd_updater_LDADD = $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +crm_ticket_SOURCES = crm_ticket.c +crm_ticket_LDADD = $(top_builddir)/lib/pengine/libpe_rules.la \ + $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +stonith_admin_SOURCES = stonith_admin.c +stonith_admin_LDADD = $(top_builddir)/lib/pacemaker/libpacemaker.la \ + $(top_builddir)/lib/cib/libcib.la \ + $(top_builddir)/lib/pengine/libpe_status.la \ + $(top_builddir)/lib/fencing/libstonithd.la \ + $(top_builddir)/lib/common/libcrmcommon.la + +CLEANFILES = $(man8_MANS) diff --git a/tools/attrd_updater.8.inc b/tools/attrd_updater.8.inc new file mode 100644 index 0000000..780e6a4 --- /dev/null +++ b/tools/attrd_updater.8.inc @@ -0,0 +1,5 @@ +[synopsis] +attrd_updater {-n | -P } [options] + +/node attributes/ +.SH OPTIONS diff --git a/tools/attrd_updater.c b/tools/attrd_updater.c new file mode 100644 index 0000000..60e4cc7 --- /dev/null +++ b/tools/attrd_updater.c @@ -0,0 +1,520 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include + +#include +#include + +#include +#include +#include +#include +#include +#include + +#include + +#include + +#define SUMMARY "query and update Pacemaker node attributes" + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +GError *error = NULL; +bool printed_values = false; + +struct { + char command; + gchar *attr_dampen; + gchar *attr_name; + gchar *attr_pattern; + gchar *attr_node; + gchar *attr_set; + char *attr_value; + uint32_t attr_options; + gboolean query_all; + gboolean quiet; +} options = { + .attr_options = pcmk__node_attr_none, + .command = 'Q', +}; + +static gboolean +command_cb (const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&options.attr_value, optarg); + + if (pcmk__str_any_of(option_name, "--update-both", "-B", NULL)) { + options.command = 'B'; + } else if (pcmk__str_any_of(option_name, "--delete", "-D", NULL)) { + options.command = 'D'; + } else if (pcmk__str_any_of(option_name, "--query", "-Q", NULL)) { + options.command = 'Q'; + } else if (pcmk__str_any_of(option_name, "--refresh", "-R", NULL)) { + options.command = 'R'; + } else if (pcmk__str_any_of(option_name, "--update", "-U", "-v", NULL)) { + options.command = 'U'; + } else if (pcmk__str_any_of(option_name, "--update-delay", "-Y", NULL)) { + options.command = 'Y'; + } + + return TRUE; +} + +static gboolean +private_cb (const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_private); + return TRUE; +} + +static gboolean +section_cb (const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (pcmk__str_any_of(optarg, "nodes", "forever", NULL)) { + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_perm); + } else if (pcmk__str_any_of(optarg, "status", "reboot", NULL)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_perm); + } else { + g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_USAGE, "Unknown value for --lifetime: %s", + optarg); + return FALSE; + } + + return TRUE; +} + +static gboolean +attr_set_type_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-z", "--utilization", NULL)) { + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_utilization); + } + + return TRUE; +} + +static gboolean +wait_cb (const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (pcmk__str_eq(optarg, "no", pcmk__str_none)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local | pcmk__node_attr_sync_cluster); + return TRUE; + } else if (pcmk__str_eq(optarg, PCMK__VALUE_LOCAL, pcmk__str_none)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local | pcmk__node_attr_sync_cluster); + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local); + return TRUE; + } else if (pcmk__str_eq(optarg, PCMK__VALUE_CLUSTER, pcmk__str_none)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local | pcmk__node_attr_sync_cluster); + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_sync_cluster); + return TRUE; + } else { + g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "--wait= must be one of 'no', 'local', 'cluster'"); + return FALSE; + } +} + +#define INDENT " " + +static GOptionEntry required_entries[] = { + { "name", 'n', 0, G_OPTION_ARG_STRING, &options.attr_name, + "The attribute's name", + "NAME" }, + + { "pattern", 'P', 0, G_OPTION_ARG_STRING, &options.attr_pattern, + "Operate on all attributes matching this pattern\n" + INDENT "(with -B, -D, -U, or -Y)", + "PATTERN" + }, + + { NULL } +}; + +static GOptionEntry command_entries[] = { + { "update", 'U', 0, G_OPTION_ARG_CALLBACK, command_cb, + "Update attribute's value in pacemaker-attrd. If this causes the value\n" + INDENT "to change, it will also be updated in the cluster configuration.", + "VALUE" }, + + { "update-both", 'B', 0, G_OPTION_ARG_CALLBACK, command_cb, + "Update attribute's value and time to wait (dampening) in\n" + INDENT "pacemaker-attrd. If this causes the value or dampening to change,\n" + INDENT "the attribute will also be written to the cluster configuration,\n" + INDENT "so be aware that repeatedly changing the dampening reduces its\n" + INDENT "effectiveness.\n" + INDENT "Requires -d/--delay", + "VALUE" }, + + { "update-delay", 'Y', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Update attribute's dampening in pacemaker-attrd. If this causes\n" + INDENT "the dampening to change, the attribute will also be written\n" + INDENT "to the cluster configuration, so be aware that repeatedly\n" + INDENT "changing the dampening reduces its effectiveness.\n" + INDENT "Requires -d/--delay", + NULL }, + + { "query", 'Q', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Query the attribute's value from pacemaker-attrd", + NULL }, + + { "delete", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Unset attribute from pacemaker-attrd. At the moment, there is no way\n" + INDENT "to remove an attribute. This option will instead set its value\n" + INDENT "to the empty string.", + NULL }, + + { "refresh", 'R', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "(Advanced) Force the pacemaker-attrd daemon to resend all current\n" + INDENT "values to the CIB", + NULL }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "delay", 'd', 0, G_OPTION_ARG_STRING, &options.attr_dampen, + "The time to wait (dampening) in seconds for further changes\n" + INDENT "before sending to the CIB", + "SECONDS" }, + + { "set", 's', 0, G_OPTION_ARG_STRING, &options.attr_set, + "(Advanced) The attribute set in which to place the value", + "SET" }, + + { "node", 'N', 0, G_OPTION_ARG_STRING, &options.attr_node, + "Set the attribute for the named node (instead of the local one)", + "NODE" }, + + { "all", 'A', 0, G_OPTION_ARG_NONE, &options.query_all, + "Show values of the attribute for all nodes (query only)", + NULL }, + + { "lifetime", 'l', 0, G_OPTION_ARG_CALLBACK, section_cb, + "(Not yet implemented) Lifetime of the node attribute (silently\n" + INDENT "ignored by cluster)", + "SECTION" }, + + { "private", 'p', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, private_cb, + "If this creates a new attribute, never write the attribute to CIB", + NULL }, + + { "wait", 'W', 0, G_OPTION_ARG_CALLBACK, wait_cb, + "Wait for some event to occur before returning. Values are 'no' (wait\n" + INDENT "only for the attribute daemon to acknowledge the request),\n" + INDENT "'local' (wait until the change has propagated to where a local\n" + INDENT "query will return the request value, or the value set by a\n" + INDENT "later request), or 'cluster' (wait until the change has propagated\n" + INDENT "to where a query anywhere on the cluster will return the requested\n" + INDENT "value, or the value set by a later request). Default is 'no'.", + "UNTIL" }, + + { "utilization", 'z', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, attr_set_type_cb, + "When creating a new attribute, create it as a node utilization attribute\n" + INDENT "instead of an instance attribute. If the attribute already exists,\n" + INDENT "its existing type (utilization vs. instance) will be used regardless.\n" + INDENT "(with -B, -U, -Y)", + NULL }, + + { NULL } +}; + +static GOptionEntry deprecated_entries[] = { + { "quiet", 'q', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &options.quiet, + NULL, + NULL }, + + { "update", 'v', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, command_cb, + NULL, + NULL }, + + { "section", 'S', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, section_cb, + NULL, + NULL }, + + { NULL } +}; + +static int send_attrd_query(pcmk__output_t *out, const char *attr_name, const char *attr_node, + gboolean query_all); +static int send_attrd_update(char command, const char *attr_node, const char *attr_name, + const char *attr_value, const char *attr_set, + const char *attr_dampen, uint32_t attr_options); + +static bool +pattern_used_correctly(void) +{ + /* --pattern can only be used with: + * -B (update-both), -D (delete), -U (update), or -Y (update-delay) + */ + return options.command == 'B' || options.command == 'D' || options.command == 'U' || options.command == 'Y'; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + + pcmk__add_arg_group(context, "required", "Required Arguments:", + "Show required arguments", required_entries); + pcmk__add_arg_group(context, "command", "Command:", + "Show command options (mutually exclusive)", command_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + pcmk__add_arg_group(context, "deprecated", "Deprecated Options:", + "Show deprecated options", deprecated_entries); + + return context; +} + +int +main(int argc, char **argv) +{ + int rc = pcmk_rc_ok; + crm_exit_t exit_code = CRM_EX_OK; + + pcmk__output_t *out = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + GOptionContext *context = build_arg_context(args, &output_group); + gchar **processed_args = pcmk__cmdline_preproc(argv, "dlnsvBNUS"); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("attrd_updater", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + if (args->version) { + out->version(out, false); + goto done; + } + + if (options.attr_pattern) { + if (options.attr_name) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error: --name and --pattern cannot be used at the same time"); + goto done; + } + + if (!pattern_used_correctly()) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error: pattern can only be used with delete or update"); + goto done; + } + + g_free(options.attr_name); + options.attr_name = options.attr_pattern; + options.attr_options |= pcmk__node_attr_pattern; + } + + if (options.command != 'R' && options.attr_name == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Command requires --name or --pattern argument"); + goto done; + } else if ((options.command == 'B'|| options.command == 'Y') && options.attr_dampen == NULL) { + out->info(out, "Warning: '%c' command given without required --delay", options.command); + } + + pcmk__register_lib_messages(out); + + if (options.command == 'Q') { + int rc = send_attrd_query(out, options.attr_name, options.attr_node, options.query_all); + exit_code = pcmk_rc2exitc(rc); + } else { + /* @TODO We don't know whether the specified node is a Pacemaker Remote + * node or not, so we can't set pcmk__node_attr_remote when appropriate. + * However, it's not a big problem, because pacemaker-attrd will learn + * and remember a node's "remoteness". + */ + int rc = send_attrd_update(options.command, options.attr_node, + options.attr_name, options.attr_value, + options.attr_set, options.attr_dampen, + options.attr_options); + exit_code = pcmk_rc2exitc(rc); + } + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + g_free(options.attr_dampen); + g_free(options.attr_name); + g_free(options.attr_node); + g_free(options.attr_set); + free(options.attr_value); + + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + + pcmk__unregister_formats(); + crm_exit(exit_code); +} + +/*! + * \brief Print the attribute values in a pacemaker-attrd XML query reply + * + * \param[in,out] out Output object + * \param[in] reply List of attribute name/value pairs + * + * \return true if any values were printed + */ +static void +print_attrd_values(pcmk__output_t *out, const GList *reply) +{ + for (const GList *iter = reply; iter != NULL; iter = iter->next) { + const pcmk__attrd_query_pair_t *pair = iter->data; + + out->message(out, "attribute", NULL, NULL, pair->name, pair->value, + pair->node); + printed_values = true; + } +} + +static void +attrd_event_cb(pcmk_ipc_api_t *attrd_api, enum pcmk_ipc_event event_type, + crm_exit_t status, void *event_data, void *user_data) +{ + pcmk__output_t *out = (pcmk__output_t *) user_data; + pcmk__attrd_api_reply_t *reply = event_data; + + if (event_type != pcmk_ipc_event_reply || status != CRM_EX_OK) { + return; + } + + /* Print the values from the reply. */ + if (reply->reply_type == pcmk__attrd_reply_query) { + print_attrd_values(out, reply->data.pairs); + } +} + +/*! + * \brief Submit a query to pacemaker-attrd and print reply + * + * \param[in,out] out Output object + * \param[in] attr_name Name of attribute to be affected by request + * \param[in] attr_node Name of host to query for (or NULL for localhost) + * \param[in] query_all If TRUE, ignore attr_node and query all nodes + * + * \return Standard Pacemaker return code + */ +static int +send_attrd_query(pcmk__output_t *out, const char *attr_name, + const char *attr_node, gboolean query_all) +{ + uint32_t options = pcmk__node_attr_none; + pcmk_ipc_api_t *attrd_api = NULL; + int rc = pcmk_rc_ok; + + // Create attrd IPC object + rc = pcmk_new_ipc_api(&attrd_api, pcmk_ipc_attrd); + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, + "Could not connect to attrd: %s", pcmk_rc_str(rc)); + return ENOTCONN; + } + + pcmk_register_ipc_callback(attrd_api, attrd_event_cb, out); + + // Connect to attrd (without main loop) + rc = pcmk_connect_ipc(attrd_api, pcmk_ipc_dispatch_sync); + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, + "Could not connect to attrd: %s", pcmk_rc_str(rc)); + pcmk_free_ipc_api(attrd_api); + return rc; + } + + /* Decide which node(s) to query */ + if (query_all == TRUE) { + options |= pcmk__node_attr_query_all; + } + + rc = pcmk__attrd_api_query(attrd_api, attr_node, attr_name, options); + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, "Could not query value of %s: %s (%d)", + attr_name, pcmk_strerror(rc), rc); + } else if (!printed_values) { + rc = pcmk_rc_schema_validation; + g_set_error(&error, PCMK__RC_ERROR, rc, + "Could not query value of %s: attribute does not exist", attr_name); + } + + pcmk_disconnect_ipc(attrd_api); + pcmk_free_ipc_api(attrd_api); + + return rc; +} + +static int +send_attrd_update(char command, const char *attr_node, const char *attr_name, + const char *attr_value, const char *attr_set, + const char *attr_dampen, uint32_t attr_options) +{ + int rc = pcmk_rc_ok; + + switch (command) { + case 'B': + rc = pcmk__attrd_api_update(NULL, attr_node, attr_name, attr_value, + attr_dampen, attr_set, NULL, + attr_options | pcmk__node_attr_value | pcmk__node_attr_delay); + break; + + case 'D': + rc = pcmk__attrd_api_delete(NULL, attr_node, attr_name, attr_options); + break; + + case 'R': + rc = pcmk__attrd_api_refresh(NULL, attr_node); + break; + + case 'U': + rc = pcmk__attrd_api_update(NULL, attr_node, attr_name, attr_value, + NULL, attr_set, NULL, + attr_options | pcmk__node_attr_value); + break; + + case 'Y': + rc = pcmk__attrd_api_update(NULL, attr_node, attr_name, NULL, + attr_dampen, attr_set, NULL, + attr_options | pcmk__node_attr_delay); + break; + } + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, "Could not update %s=%s: %s (%d)", + attr_name, attr_value, pcmk_rc_str(rc), rc); + } + + return rc; +} diff --git a/tools/cibadmin.8.inc b/tools/cibadmin.8.inc new file mode 100644 index 0000000..bfd969b --- /dev/null +++ b/tools/cibadmin.8.inc @@ -0,0 +1,5 @@ +[=synopsis] +cibadmin [options] + +/query and edit the Pacemaker configuration/ +.SH OPTIONS diff --git a/tools/cibadmin.c b/tools/cibadmin.c new file mode 100644 index 0000000..f80afae --- /dev/null +++ b/tools/cibadmin.c @@ -0,0 +1,954 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#define SUMMARY "query and edit the Pacemaker configuration" + +#define INDENT " " + +enum cibadmin_section_type { + cibadmin_section_all = 0, + cibadmin_section_scope, + cibadmin_section_xpath, +}; + +static int request_id = 0; + +static cib_t *the_cib = NULL; +static GMainLoop *mainloop = NULL; +static crm_exit_t exit_code = CRM_EX_OK; + +static struct { + const char *cib_action; + int cmd_options; + enum cibadmin_section_type section_type; + char *cib_section; + char *validate_with; + gint message_timeout_sec; + enum pcmk__acl_render_how acl_render_mode; + gchar *cib_user; + gchar *dest_node; + gchar *input_file; + gchar *input_xml; + gboolean input_stdin; + bool delete_all; + gboolean allow_create; + gboolean force; + gboolean get_node_path; + gboolean local; + gboolean no_children; + gboolean sync_call; + + /* @COMPAT: For "-!" version option. Not advertised nor marked as + * deprecated, but accepted. + */ + gboolean extended_version; + + //! \deprecated + gboolean no_bcast; +} options; + +int do_init(void); +static int do_work(xmlNode *input, xmlNode **output); +void cibadmin_op_callback(xmlNode *msg, int call_id, int rc, xmlNode *output, + void *user_data); + +static void +print_xml_output(xmlNode * xml) +{ + char *buffer; + + if (!xml) { + return; + } else if (xml->type != XML_ELEMENT_NODE) { + return; + } + + if (pcmk_is_set(options.cmd_options, cib_xpath_address)) { + const char *id = crm_element_value(xml, XML_ATTR_ID); + + if (pcmk__str_eq((const char *)xml->name, "xpath-query", pcmk__str_casei)) { + xmlNode *child = NULL; + + for (child = xml->children; child; child = child->next) { + print_xml_output(child); + } + + } else if (id) { + printf("%s\n", id); + } + + } else { + buffer = dump_xml_formatted(xml); + fprintf(stdout, "%s", pcmk__s(buffer, "\n")); + free(buffer); + } +} + +// Upgrade requested but already at latest schema +static void +report_schema_unchanged(void) +{ + const char *err = pcmk_rc_str(pcmk_rc_schema_unchanged); + + crm_info("Upgrade unnecessary: %s\n", err); + printf("Upgrade unnecessary: %s\n", err); + exit_code = CRM_EX_OK; +} + +/*! + * \internal + * \brief Check whether the current CIB action is dangerous + * \return true if \p options.cib_action is dangerous, or false otherwise + */ +static inline bool +cib_action_is_dangerous(void) +{ + return options.no_bcast || options.delete_all + || pcmk__str_any_of(options.cib_action, + PCMK__CIB_REQUEST_UPGRADE, + PCMK__CIB_REQUEST_ERASE, + NULL); +} + +/*! + * \internal + * \brief Determine whether the given CIB scope is valid for \p cibadmin + * + * \param[in] scope Scope to validate + * + * \return true if \p scope is valid, or false otherwise + * \note An invalid scope applies the operation to the entire CIB. + */ +static inline bool +scope_is_valid(const char *scope) +{ + return pcmk__str_any_of(scope, + XML_CIB_TAG_CONFIGURATION, + XML_CIB_TAG_NODES, + XML_CIB_TAG_RESOURCES, + XML_CIB_TAG_CONSTRAINTS, + XML_CIB_TAG_CRMCONFIG, + XML_CIB_TAG_RSCCONFIG, + XML_CIB_TAG_OPCONFIG, + XML_CIB_TAG_ACLS, + XML_TAG_FENCING_TOPOLOGY, + XML_CIB_TAG_TAGS, + XML_CIB_TAG_ALERTS, + XML_CIB_TAG_STATUS, + NULL); +} + +static gboolean +command_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + options.delete_all = false; + + if (pcmk__str_any_of(option_name, "-u", "--upgrade", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_UPGRADE; + + } else if (pcmk__str_any_of(option_name, "-Q", "--query", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_QUERY; + + } else if (pcmk__str_any_of(option_name, "-E", "--erase", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_ERASE; + + } else if (pcmk__str_any_of(option_name, "-B", "--bump", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_BUMP; + + } else if (pcmk__str_any_of(option_name, "-C", "--create", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_CREATE; + + } else if (pcmk__str_any_of(option_name, "-M", "--modify", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_MODIFY; + + } else if (pcmk__str_any_of(option_name, "-P", "--patch", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_APPLY_PATCH; + + } else if (pcmk__str_any_of(option_name, "-R", "--replace", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_REPLACE; + + } else if (pcmk__str_any_of(option_name, "-D", "--delete", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_DELETE; + + } else if (pcmk__str_any_of(option_name, "-d", "--delete-all", NULL)) { + options.cib_action = PCMK__CIB_REQUEST_DELETE; + options.delete_all = true; + + } else if (pcmk__str_any_of(option_name, "-a", "--empty", NULL)) { + options.cib_action = "empty"; + pcmk__str_update(&options.validate_with, optarg); + + } else if (pcmk__str_any_of(option_name, "-5", "--md5-sum", NULL)) { + options.cib_action = "md5-sum"; + + } else if (pcmk__str_any_of(option_name, "-6", "--md5-sum-versioned", + NULL)) { + options.cib_action = "md5-sum-versioned"; + + } else { + // Should be impossible + return FALSE; + } + + return TRUE; +} + +static gboolean +show_access_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + if (pcmk__str_eq(optarg, "auto", pcmk__str_null_matches)) { + options.acl_render_mode = pcmk__acl_render_default; + + } else if (g_strcmp0(optarg, "namespace") == 0) { + options.acl_render_mode = pcmk__acl_render_namespace; + + } else if (g_strcmp0(optarg, "text") == 0) { + options.acl_render_mode = pcmk__acl_render_text; + + } else if (g_strcmp0(optarg, "color") == 0) { + options.acl_render_mode = pcmk__acl_render_color; + + } else { + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "Invalid value '%s' for option '%s'", + optarg, option_name); + return FALSE; + } + return TRUE; +} + +static gboolean +section_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + if (pcmk__str_any_of(option_name, "-o", "--scope", NULL)) { + options.section_type = cibadmin_section_scope; + + } else if (pcmk__str_any_of(option_name, "-A", "--xpath", NULL)) { + options.section_type = cibadmin_section_xpath; + + } else { + // Should be impossible + return FALSE; + } + + pcmk__str_update(&options.cib_section, optarg); + return TRUE; +} + +static GOptionEntry command_entries[] = { + { "upgrade", 'u', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Upgrade the configuration to the latest syntax", NULL }, + + { "query", 'Q', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Query the contents of the CIB", NULL }, + + { "erase", 'E', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Erase the contents of the whole CIB", NULL }, + + { "bump", 'B', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Increase the CIB's epoch value by 1", NULL }, + + { "create", 'C', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Create an object in the CIB (will fail if object already exists)", + NULL }, + + { "modify", 'M', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Find object somewhere in CIB's XML tree and update it (fails if object " + "does not exist unless -c is also specified)", + NULL }, + + { "patch", 'P', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Supply an update in the form of an XML diff (see crm_diff(8))", NULL }, + + { "replace", 'R', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Recursively replace an object in the CIB", NULL }, + + { "delete", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Delete first object matching supplied criteria (for example, " + "<" XML_ATTR_OP " " XML_ATTR_ID "=\"rsc1_op1\" " + XML_ATTR_NAME "=\"monitor\"/>).\n" + INDENT "The XML element name and all attributes must match in order for " + "the element to be deleted.", + NULL }, + + { "delete-all", 'd', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + command_cb, + "When used with --xpath, remove all matching objects in the " + "configuration instead of just the first one", + NULL }, + + { "empty", 'a', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, + command_cb, + "Output an empty CIB. Accepts an optional schema name argument to use as " + "the " XML_ATTR_VALIDATION " value.\n" + INDENT "If no schema is given, the latest will be used.", + "[schema]" }, + + { "md5-sum", '5', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Calculate the on-disk CIB digest", NULL }, + + { "md5-sum-versioned", '6', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + command_cb, "Calculate an on-the-wire versioned CIB digest", NULL }, + + { NULL } +}; + +static GOptionEntry data_entries[] = { + /* @COMPAT: These arguments should be last-wins. We can have an enum option + * that stores the input type, along with a single string option that stores + * the XML string for --xml-text, filename for --xml-file, or NULL for + * --xml-pipe. + */ + { "xml-text", 'X', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, + &options.input_xml, "Retrieve XML from the supplied string", "value" }, + + { "xml-file", 'x', G_OPTION_FLAG_NONE, G_OPTION_ARG_FILENAME, + &options.input_file, "Retrieve XML from the named file", "value" }, + + { "xml-pipe", 'p', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.input_stdin, "Retrieve XML from stdin", NULL }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "force", 'f', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.force, + "Force the action to be performed", NULL }, + + { "timeout", 't', G_OPTION_FLAG_NONE, G_OPTION_ARG_INT, + &options.message_timeout_sec, + "Time (in seconds) to wait before declaring the operation failed", + "value" }, + + { "user", 'U', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.cib_user, + "Run the command with permissions of the named user (valid only for the " + "root and " CRM_DAEMON_USER " accounts)", "value" }, + + { "sync-call", 's', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.sync_call, "Wait for call to complete before returning", NULL }, + + { "local", 'l', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.local, + "Command takes effect locally (should be used only for queries)", NULL }, + + { "scope", 'o', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, section_cb, + "Limit scope of operation to specific section of CIB\n" + INDENT "Valid values: " XML_CIB_TAG_CONFIGURATION ", " XML_CIB_TAG_NODES + ", " XML_CIB_TAG_RESOURCES ", " XML_CIB_TAG_CONSTRAINTS + ", " XML_CIB_TAG_CRMCONFIG ", " XML_CIB_TAG_RSCCONFIG ",\n" + INDENT " " XML_CIB_TAG_OPCONFIG ", " XML_CIB_TAG_ACLS + ", " XML_TAG_FENCING_TOPOLOGY ", " XML_CIB_TAG_TAGS + ", " XML_CIB_TAG_ALERTS ", " XML_CIB_TAG_STATUS "\n" + INDENT "If both --scope/-o and --xpath/-a are specified, the last one to " + "appear takes effect", + "value" }, + + { "xpath", 'A', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, section_cb, + "A valid XPath to use instead of --scope/-o\n" + INDENT "If both --scope/-o and --xpath/-a are specified, the last one to " + "appear takes effect", + "value" }, + + { "node-path", 'e', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.get_node_path, + "When performing XPath queries, return paths of any matches found\n" + INDENT "(for example, " + "\"/" XML_TAG_CIB "/" XML_CIB_TAG_CONFIGURATION + "/" XML_CIB_TAG_RESOURCES "/" XML_CIB_TAG_INCARNATION + "[@" XML_ATTR_ID "='dummy-clone']" + "/" XML_CIB_TAG_RESOURCE "[@" XML_ATTR_ID "='dummy']\")", + NULL }, + + { "show-access", 'S', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, + show_access_cb, + "Whether to use syntax highlighting for ACLs (with -Q/--query and " + "-U/--user)\n" + INDENT "Allowed values: 'color' (default for terminal), 'text' (plain text, " + "default for non-terminal),\n" + INDENT " 'namespace', or 'auto' (use default value)\n" + INDENT "Default value: 'auto'", + "[value]" }, + + { "allow-create", 'c', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.allow_create, + "(Advanced) Allow target of --modify/-M to be created if it does not " + "exist", + NULL }, + + { "no-children", 'n', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.no_children, + "(Advanced) When querying an object, do not include its children in the " + "result", + NULL }, + + { "node", 'N', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.dest_node, + "(Advanced) Send command to the specified host", "value" }, + + // @COMPAT: Deprecated + { "no-bcast", 'b', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, + &options.no_bcast, "deprecated", NULL }, + + // @COMPAT: Deprecated + { "host", 'h', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_STRING, + &options.dest_node, "deprecated", NULL }, + + { NULL } +}; + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args) +{ + const char *desc = NULL; + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + // @COMPAT: Deprecated + { "extended-version", '!', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, + &options.extended_version, "deprecated", NULL }, + + { NULL } + }; + + desc = "Examples:\n\n" + "Query the configuration from the local node:\n\n" + "\t# cibadmin --query --local\n\n" + "Query just the cluster options configuration:\n\n" + "\t# cibadmin --query --scope " XML_CIB_TAG_CRMCONFIG "\n\n" + "Query all '" XML_RSC_ATTR_TARGET_ROLE "' settings:\n\n" + "\t# cibadmin --query --xpath " + "\"//" XML_CIB_TAG_NVPAIR + "[@" XML_NVPAIR_ATTR_NAME "='" XML_RSC_ATTR_TARGET_ROLE"']\"" + "\n\n" + "Remove all '" XML_RSC_ATTR_MANAGED "' settings:\n\n" + "\t# cibadmin --delete-all --xpath " + "\"//" XML_CIB_TAG_NVPAIR + "[@" XML_NVPAIR_ATTR_NAME "='" XML_RSC_ATTR_MANAGED "']\"\n\n" + "Remove the resource named 'old':\n\n" + "\t# cibadmin --delete --xml-text " + "'<" XML_CIB_TAG_RESOURCE " " XML_ATTR_ID "=\"old\"/>'\n\n" + "Remove all resources from the configuration:\n\n" + "\t# cibadmin --replace --scope " XML_CIB_TAG_RESOURCES + " --xml-text '<" XML_CIB_TAG_RESOURCES "/>'\n\n" + "Replace complete configuration with contents of " + "$HOME/pacemaker.xml:\n\n" + "\t# cibadmin --replace --xml-file $HOME/pacemaker.xml\n\n" + "Replace " XML_CIB_TAG_CONSTRAINTS " section of configuration with " + "contents of $HOME/constraints.xml:\n\n" + "\t# cibadmin --replace --scope " XML_CIB_TAG_CONSTRAINTS + " --xml-file $HOME/constraints.xml\n\n" + "Increase configuration version to prevent old configurations from " + "being loaded accidentally:\n\n" + "\t# cibadmin --modify --xml-text " + "'<" XML_TAG_CIB " " XML_ATTR_GENERATION_ADMIN + "=\"" XML_ATTR_GENERATION_ADMIN "++\"/>'\n\n" + "Edit the configuration with your favorite $EDITOR:\n\n" + "\t# cibadmin --query > $HOME/local.xml\n\n" + "\t# $EDITOR $HOME/local.xml\n\n" + "\t# cibadmin --replace --xml-file $HOME/local.xml\n\n" + "Assuming terminal, render configuration in color (green for " + "writable, blue for readable, red for\n" + "denied) to visualize permissions for user tony:\n\n" + "\t# cibadmin --show-access=color --query --user tony | less -r\n\n" + "SEE ALSO:\n" + " crm(8), pcs(8), crm_shadow(8), crm_diff(8)\n"; + + context = pcmk__build_arg_context(args, NULL, NULL, ""); + g_option_context_set_description(context, desc); + + pcmk__add_main_args(context, extra_prog_entries); + + pcmk__add_arg_group(context, "commands", "Commands:", "Show command help", + command_entries); + pcmk__add_arg_group(context, "data", "Data:", "Show data help", + data_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +int +main(int argc, char **argv) +{ + int rc = pcmk_rc_ok; + const char *source = NULL; + xmlNode *output = NULL; + xmlNode *input = NULL; + gchar *acl_cred = NULL; + + GError *error = NULL; + + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "ANSUXhotx"); + GOptionContext *context = build_arg_context(args); + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + if (g_strv_length(processed_args) > 1) { + gchar *help = g_option_context_get_help(context, TRUE, NULL); + GString *extra = g_string_sized_new(128); + + for (int lpc = 1; processed_args[lpc] != NULL; lpc++) { + if (extra->len > 0) { + g_string_append_c(extra, ' '); + } + g_string_append(extra, processed_args[lpc]); + } + + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "non-option ARGV-elements: %s\n\n%s", extra->str, help); + g_free(help); + g_string_free(extra, TRUE); + goto done; + } + + if (args->version || options.extended_version) { + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + /* FIXME: When cibadmin is converted to use formatted output, this can + * be replaced by out->version with the appropriate boolean flag. + * + * options.extended_version is deprecated and will be removed in a + * future release. + */ + pcmk__cli_help(options.extended_version? '!' : 'v'); + } + + /* At LOG_ERR, stderr for CIB calls is rather verbose. Several lines like + * + * (func@file:line) error: CIB failures + * + * In cibadmin we explicitly output the XML portion without the prefixes. So + * we default to LOG_CRIT. + */ + pcmk__cli_init_logging("cibadmin", 0); + set_crm_log_level(LOG_CRIT); + + if (args->verbosity > 0) { + cib__set_call_options(options.cmd_options, crm_system_name, + cib_verbose); + + for (int i = 0; i < args->verbosity; i++) { + crm_bump_log_level(argc, argv); + } + } + + if (options.cib_action == NULL) { + // @COMPAT: Create a default command if other tools have one + gchar *help = g_option_context_get_help(context, TRUE, NULL); + + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must specify a command option\n\n%s", help); + g_free(help); + goto done; + } + + if (strcmp(options.cib_action, "empty") == 0) { + // Output an empty CIB + char *buf = NULL; + + output = createEmptyCib(1); + crm_xml_add(output, XML_ATTR_VALIDATION, options.validate_with); + buf = dump_xml_formatted(output); + fprintf(stdout, "%s", pcmk__s(buf, "\n")); + free(buf); + goto done; + } + + if (cib_action_is_dangerous() && !options.force) { + exit_code = CRM_EX_UNSAFE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "The supplied command is considered dangerous. To prevent " + "accidental destruction of the cluster, the --force flag " + "is required in order to proceed."); + goto done; + } + + if (options.message_timeout_sec < 1) { + // Set default timeout + options.message_timeout_sec = 30; + } + + if (options.section_type == cibadmin_section_xpath) { + // Enable getting section by XPath + cib__set_call_options(options.cmd_options, crm_system_name, + cib_xpath); + + } else if (options.section_type == cibadmin_section_scope) { + if (!scope_is_valid(options.cib_section)) { + // @COMPAT: Consider requiring --force to proceed + fprintf(stderr, + "Invalid value '%s' for '--scope'. Operation will apply " + "to the entire CIB.\n", options.cib_section); + } + } + + if (options.allow_create) { + // Allow target of --modify/-M to be created if it does not exist + cib__set_call_options(options.cmd_options, crm_system_name, + cib_can_create); + } + + if (options.delete_all) { + // With cibadmin_section_xpath, remove all matching objects + cib__set_call_options(options.cmd_options, crm_system_name, + cib_multiple); + } + + if (options.get_node_path) { + /* Enable getting node path of XPath query matches. + * Meaningful only if options.section_type == cibadmin_section_xpath. + */ + cib__set_call_options(options.cmd_options, crm_system_name, + cib_xpath_address); + } + + if (options.local) { + // Configure command to take effect only locally + cib__set_call_options(options.cmd_options, crm_system_name, + cib_scope_local); + } + + // @COMPAT: Deprecated option + if (options.no_bcast) { + // Configure command to take effect only locally and not to broadcast + cib__set_call_options(options.cmd_options, crm_system_name, + cib_inhibit_bcast|cib_scope_local); + } + + if (options.no_children) { + // When querying an object, don't include its children in the result + cib__set_call_options(options.cmd_options, crm_system_name, + cib_no_children); + } + + if (options.sync_call + || (options.acl_render_mode != pcmk__acl_render_none)) { + /* Wait for call to complete before returning. + * + * The ACL render modes work only with sync calls due to differences in + * output handling between sync/async. It shouldn't matter to the user + * whether the call is synchronous; for a CIB query, we have to wait for + * the result in order to display it in any case. + */ + cib__set_call_options(options.cmd_options, crm_system_name, + cib_sync_call); + } + + if (options.input_file != NULL) { + input = filename2xml(options.input_file); + source = options.input_file; + + } else if (options.input_xml != NULL) { + input = string2xml(options.input_xml); + source = "input string"; + + } else if (options.input_stdin) { + source = "STDIN"; + input = stdin2xml(); + + } else if (options.acl_render_mode != pcmk__acl_render_none) { + char *username = pcmk__uid2username(geteuid()); + bool required = pcmk_acl_required(username); + + free(username); + + if (required) { + if (options.force) { + fprintf(stderr, "The supplied command can provide skewed" + " result since it is run under user that also" + " gets guarded per ACLs on their own right." + " Continuing since --force flag was" + " provided.\n"); + + } else { + exit_code = CRM_EX_UNSAFE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "The supplied command can provide skewed result " + "since it is run under user that also gets guarded " + "per ACLs in their own right. To accept the risk " + "of such a possible distortion (without even " + "knowing it at this time), use the --force flag."); + goto done; + } + } + + if (options.cib_user == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "The supplied command requires -U user specified."); + goto done; + } + + /* We already stopped/warned ACL-controlled users about consequences. + * + * Note: acl_cred takes ownership of options.cib_user here. + * options.cib_user is set to NULL so that the CIB is obtained as the + * user running the cibadmin command. The CIB must be obtained as a user + * with full permissions in order to show the CIB correctly annotated + * for the options.cib_user's permissions. + */ + acl_cred = options.cib_user; + options.cib_user = NULL; + } + + if (input != NULL) { + crm_log_xml_debug(input, "[admin input]"); + + } else if (source != NULL) { + exit_code = CRM_EX_CONFIG; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Couldn't parse input from %s.", source); + goto done; + } + + if (strcmp(options.cib_action, "md5-sum") == 0) { + char *digest = NULL; + + if (input == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Please supply XML to process with -X, -x, or -p"); + goto done; + } + + digest = calculate_on_disk_digest(input); + fprintf(stderr, "Digest: "); + fprintf(stdout, "%s\n", pcmk__s(digest, "")); + free(digest); + goto done; + + } else if (strcmp(options.cib_action, "md5-sum-versioned") == 0) { + char *digest = NULL; + const char *version = NULL; + + if (input == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Please supply XML to process with -X, -x, or -p"); + goto done; + } + + version = crm_element_value(input, XML_ATTR_CRM_VERSION); + digest = calculate_xml_versioned_digest(input, FALSE, TRUE, version); + fprintf(stderr, "Versioned (%s) digest: ", version); + fprintf(stdout, "%s\n", pcmk__s(digest, "")); + free(digest); + goto done; + } + + rc = do_init(); + if (rc != pcmk_ok) { + rc = pcmk_legacy2rc(rc); + exit_code = pcmk_rc2exitc(rc); + + crm_err("Init failed, could not perform requested operations: %s", + pcmk_rc_str(rc)); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Init failed, could not perform requested operations: %s", + pcmk_rc_str(rc)); + goto done; + } + + rc = do_work(input, &output); + if (rc > 0) { + /* wait for the reply by creating a mainloop and running it until + * the callbacks are invoked... + */ + request_id = rc; + + the_cib->cmds->register_callback(the_cib, request_id, + options.message_timeout_sec, FALSE, + NULL, "cibadmin_op_callback", + cibadmin_op_callback); + + mainloop = g_main_loop_new(NULL, FALSE); + + crm_trace("%s waiting for reply from the local CIB", crm_system_name); + + crm_info("Starting mainloop"); + g_main_loop_run(mainloop); + + } else if ((rc == -pcmk_err_schema_unchanged) + && (strcmp(options.cib_action, + PCMK__CIB_REQUEST_UPGRADE) == 0)) { + report_schema_unchanged(); + + } else if (rc < 0) { + rc = pcmk_legacy2rc(rc); + crm_err("Call failed: %s", pcmk_rc_str(rc)); + fprintf(stderr, "Call failed: %s\n", pcmk_rc_str(rc)); + + if (rc == pcmk_rc_schema_validation) { + if (strcmp(options.cib_action, PCMK__CIB_REQUEST_UPGRADE) == 0) { + xmlNode *obj = NULL; + int version = 0; + + if (the_cib->cmds->query(the_cib, NULL, &obj, + options.cmd_options) == pcmk_ok) { + update_validation(&obj, &version, 0, TRUE, FALSE); + } + free_xml(obj); + + } else if (output) { + validate_xml_verbose(output); + } + } + exit_code = pcmk_rc2exitc(rc); + } + + if ((output != NULL) + && (options.acl_render_mode != pcmk__acl_render_none)) { + + xmlDoc *acl_evaled_doc; + rc = pcmk__acl_annotate_permissions(acl_cred, output->doc, &acl_evaled_doc); + if (rc == pcmk_rc_ok) { + xmlChar *rendered = NULL; + + rc = pcmk__acl_evaled_render(acl_evaled_doc, + options.acl_render_mode, &rendered); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_CONFIG; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not render evaluated access: %s", + pcmk_rc_str(rc)); + goto done; + } + printf("%s\n", (char *) rendered); + free(rendered); + + } else { + exit_code = CRM_EX_CONFIG; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not evaluate access per request (%s, error: %s)", + acl_cred, pcmk_rc_str(rc)); + goto done; + } + + } else if (output != NULL) { + print_xml_output(output); + } + + crm_trace("%s exiting normally", crm_system_name); + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + g_free(options.cib_user); + g_free(options.dest_node); + g_free(options.input_file); + g_free(options.input_xml); + free(options.cib_section); + free(options.validate_with); + + g_free(acl_cred); + free_xml(input); + free_xml(output); + + rc = cib__clean_up_connection(&the_cib); + if (exit_code == CRM_EX_OK) { + exit_code = pcmk_rc2exitc(rc); + } + + pcmk__output_and_clear_error(&error, NULL); + crm_exit(exit_code); +} + +static int +do_work(xmlNode *input, xmlNode **output) +{ + /* construct the request */ + the_cib->call_timeout = options.message_timeout_sec; + if ((strcmp(options.cib_action, PCMK__CIB_REQUEST_REPLACE) == 0) + && pcmk__str_eq(crm_element_name(input), XML_TAG_CIB, pcmk__str_casei)) { + xmlNode *status = pcmk_find_cib_element(input, XML_CIB_TAG_STATUS); + + if (status == NULL) { + create_xml_node(input, XML_CIB_TAG_STATUS); + } + } + + crm_trace("Passing \"%s\" to variant_op...", options.cib_action); + return cib_internal_op(the_cib, options.cib_action, options.dest_node, + options.cib_section, input, output, + options.cmd_options, options.cib_user); +} + +int +do_init(void) +{ + int rc = pcmk_ok; + + the_cib = cib_new(); + rc = the_cib->cmds->signon(the_cib, crm_system_name, cib_command); + if (rc != pcmk_ok) { + crm_err("Could not connect to the CIB: %s", pcmk_strerror(rc)); + fprintf(stderr, "Could not connect to the CIB: %s\n", + pcmk_strerror(rc)); + } + + return rc; +} + +void +cibadmin_op_callback(xmlNode * msg, int call_id, int rc, xmlNode * output, void *user_data) +{ + rc = pcmk_legacy2rc(rc); + exit_code = pcmk_rc2exitc(rc); + + if (rc == pcmk_rc_schema_unchanged) { + report_schema_unchanged(); + + } else if (rc != pcmk_rc_ok) { + crm_warn("Call %s failed: %s " CRM_XS " rc=%d", + options.cib_action, pcmk_rc_str(rc), rc); + fprintf(stderr, "Call %s failed: %s\n", + options.cib_action, pcmk_rc_str(rc)); + print_xml_output(output); + + } else if ((strcmp(options.cib_action, PCMK__CIB_REQUEST_QUERY) == 0) + && (output == NULL)) { + crm_err("Query returned no output"); + crm_log_xml_err(msg, "no output"); + + } else if (output == NULL) { + crm_info("Call passed"); + + } else { + crm_info("Call passed"); + print_xml_output(output); + } + + if (call_id == request_id) { + g_main_loop_quit(mainloop); + + } else { + crm_info("Message was not the response we were looking for (%d vs. %d)", + call_id, request_id); + } +} diff --git a/tools/cibsecret.in b/tools/cibsecret.in new file mode 100644 index 0000000..4569863 --- /dev/null +++ b/tools/cibsecret.in @@ -0,0 +1,440 @@ +#!@BASH_PATH@ + +# Copyright 2011-2020 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +# cibsecret +# +# Manage the secrets directory (by default, /var/lib/pacemaker/lrm/secrets). +# Secrets are ASCII files, holding one value per file: +# // + +# These constants must track crm_exit_t values +CRM_EX_OK=0 +CRM_EX_ERROR=1 +CRM_EX_NOT_INSTALLED=5 +CRM_EX_USAGE=64 +CRM_EX_UNAVAILABLE=69 +CRM_EX_OSFILE=72 +CRM_EX_CONFIG=78 +CRM_EX_DIGEST=104 +CRM_EX_NOSUCH=105 +CRM_EX_EXISTS=108 + +LRM_CIBSECRETS="@LRM_CIBSECRETS_DIR@" + +PROG="$(basename "$0")" +SSH_OPTS="-o StrictHostKeyChecking=no" +MAGIC="lrm://" + +usage() { + cat <] [] + +Options: + --help Show this message, then exit + --version Display version information, then exit + -C Don't read or write the CIB + +Commands and their parameters: + set + Set the value of a sensitive resource parameter. + + get + Display the locally stored value of a sensitive resource parameter. + + check + Verify that the locally stored value of a sensitive resource parameter + matches its locally stored MD5 hash. + + stash + Make a non-sensitive resource parameter that is already in the CIB + sensitive (move its value to a locally stored and protected file). + This may not be used with -C. + + unstash + Make a sensitive resource parameter that is already in the CIB + non-sensitive (move its value from the locally stored file to the CIB). + This may not be used with -C. + + delete + Remove a sensitive resource parameter value. + + sync + Copy all locally stored secrets to all other nodes. + +This command manages sensitive resource parameter values that should not be +stored directly in Pacemaker's Cluster Information Base (CIB). Such values +are handled by storing a special string directly in the CIB that tells +Pacemaker to look in a separate, protected file for the actual value. + +The secret files are not encrypted, but protected by file system permissions +such that only root can read or modify them. + +Since the secret files are stored locally, they must be synchronized across all +cluster nodes. This command handles the synchronization using (in order of +preference) pssh, pdsh, or ssh, so one of those must be installed. Before +synchronizing, this command will ping the cluster nodes to determine which are +alive, using fping if it is installed, otherwise the ping command. Installing +fping is strongly recommended for better performance. + +Known limitations: + + This command can only be run from full cluster nodes (not Pacemaker Remote + nodes). + + Changes are not atomic, so the cluster may use different values while a + change is in progress. To avoid problems, it is recommended to put the + cluster in maintenance mode when making changes with this command. + + Changes in secret values do not trigger an agent reload or restart of the + affected resource, since they do not change the CIB. If a response is + desired before the next cluster recheck interval, any CIB change (such as + setting a node attribute) will trigger it. + + If any node is down when changes to secrets are made, or a new node is + later added to the cluster, it may have different values when it joins the + cluster, before "$PROG sync" is run. To avoid this, it is recommended to + run the sync command (from another node) before starting Pacemaker on the + node. + +Examples: + + $PROG set ipmi_node1 passwd SecreT_PASS + + $PROG get ipmi_node1 passwd + + $PROG check ipmi_node1 passwd + + $PROG stash ipmi_node2 passwd + + $PROG sync +EOF + exit "$1" +} + +check_usage() { + case "$1" in + set) [ "$2" -ne 4 ] && [ "$2" -ne 3 ] && usage 1 ;; + get) [ "$2" -ne 3 ] && usage 1 ;; + check) [ "$2" -ne 3 ] && usage 1 ;; + stash) [ "$2" -ne 3 ] && usage 1 ;; + unstash) [ "$2" -ne 3 ] && usage 1 ;; + delete) [ "$2" -ne 3 ] && usage 1 ;; + sync) [ "$2" -ne 1 ] && usage 1 ;; + --help) usage $CRM_EX_OK ;; + --version) crm_attribute --version; exit $? ;; + *) usage $CRM_EX_USAGE ;; + esac +} + +fatal() { + rc=$1 + shift + echo "ERROR: $*" + exit $rc +} + +warn() { + echo "WARNING: $*" +} + +info() { + echo "INFO: $*" +} + +check_env() { + which md5sum >/dev/null 2>&1 || + fatal $CRM_EX_NOT_INSTALLED "please install md5sum to run $PROG" + if which pssh >/dev/null 2>&1; then + rsh=pssh_fun + rcp_to_from=pscp_fun + + # -q is a SUSE patch not present in upstream pssh + PSSH_QUIET_OPTION="" + pssh -q 2>&1|grep "no such option: -q" > /dev/null || + PSSH_QUIET_OPTION="-q" + elif which pdsh >/dev/null 2>&1; then + rsh=pdsh_fun + rcp_to_from=pdcp_fun + elif which ssh >/dev/null 2>&1; then + rsh=ssh_fun + rcp_to_from=scp_fun + else + fatal $CRM_EX_NOT_INSTALLED "please install pssh, pdsh, or ssh to run $PROG" + fi + ps -ef | grep '[p]acemaker-controld' >/dev/null || + fatal $CRM_EX_UNAVAILABLE "pacemaker not running? $PROG needs pacemaker" +} + +# This must be called (and return success) before calling $rsh or $rcp_to_from +get_live_peers() { + # Get local node name + GLP_LOCAL_NODE="$(crm_node -n)" + [ $? -eq 0 ] || fatal $CRM_EX_UNAVAILABLE "couldn't get local node name" + + # Get a list of all other cluster nodes + GLP_ALL_PEERS="$(crmadmin -N -q)" + [ $? -eq 0 ] || fatal $CRM_EX_UNAVAILABLE "couldn't determine cluster nodes" + GLP_ALL_PEERS="$(echo "$GLP_ALL_PEERS" | grep -v "^${GLP_LOCAL_NODE}$")" + + # Make a list of those that respond to pings + if [ "$(id -u)" = "0" ] && which fping >/dev/null 2>&1; then + LIVE_NODES=$(fping -a $GLP_ALL_PEERS 2>/dev/null) + else + LIVE_NODES="" + for GLP_NODE in $GLP_ALL_PEERS; do \ + ping -c 2 -q "$GLP_NODE" >/dev/null 2>&1 && + LIVE_NODES="$LIVE_NODES $GLP_NODE" + done + fi + + # Warn the user about any that didn't respond to pings + GLP_DOWN="$( (for GLP_NODE in $LIVE_NODES $GLP_ALL_PEERS; do echo "$GLP_NODE"; done) | sort | uniq -u)" + if [ "$(echo "$GLP_DOWN" | wc -w)" = "1" ]; then + warn "node $GLP_DOWN is down" + warn "you'll need to update it using \"$PROG sync\" later" + elif [ -n "$GLP_DOWN" ]; then + warn "nodes $(echo "$GLP_DOWN" | tr '\n' ' ')are down" + warn "you'll need to update them using \"$PROG sync\" later" + fi + + if [ "$LIVE_NODES" = "" ]; then + info "no other nodes live" + return 1 + fi + return 0 +} + +pssh_fun() { + pssh $PSSH_QUIET_OPTION -i -H "$LIVE_NODES" -x "$SSH_OPTS" -- "$@" +} + +pscp_fun() { + PSCP_DEST="$1" + shift + pscp $PSSH_QUIET_OPTION -H "$LIVE_NODES" -x "-pr" -x "$SSH_OPTS" -- "$@" "$PSCP_DEST" +} + +pdsh_fun() { + PDSH_NODES=$(echo "$LIVE_NODES" | tr '[:space:]' ',') + export PDSH_SSH_ARGS_APPEND="$SSH_OPTS" + pdsh -w "$PDSH_NODES" -- "$@" +} + +pdcp_fun() { + PDCP_DEST="$1" + shift + PDCP_NODES=$(echo "$LIVE_NODES" | tr '[:space:]' ',') + export PDSH_SSH_ARGS_APPEND="$SSH_OPTS" + pdcp -pr -w "$PDCP_NODES" -- "$@" "$PDCP_DEST" +} + +ssh_fun() { + for SSH_NODE in $LIVE_NODES; do + ssh $SSH_OPTS "$SSH_NODE" -- "$@" || return + done +} + +scp_fun() { + SCP_DEST="$1" + shift + for SCP_NODE in $LIVE_NODES; do + scp -pqr $SSH_OPTS "$@" "$SCP_NODE:$SCP_DEST" || return + done +} + +# TODO: this procedure should be replaced with csync2 +# provided that csync2 has already been configured +sync_files() { + get_live_peers || return + if [ "$cmd" != "delete" ]; then + info "syncing $LRM_CIBSECRETS to $(echo "$LIVE_NODES" | tr '\n' ' ') ..." + else + info "deleting $LRM_CIBSECRETS from $(echo "$LIVE_NODES" | tr '\n' ' ') ..." + fi + $rsh rm -rf "$LRM_CIBSECRETS" && + $rsh mkdir -p "$(dirname "$LRM_CIBSECRETS")" && + $rcp_to_from "$(dirname "$LRM_CIBSECRETS")" "$LRM_CIBSECRETS" +} + +sync_one() { + SO_FILE="$1" + get_live_peers || return + if [ "$cmd" != "delete" ]; then + info "syncing $SO_FILE to $(echo "$LIVE_NODES" | tr '\n' ' ') ..." + else + info "deleting $SO_FILE from $(echo "$LIVE_NODES" | tr '\n' ' ') ..." + fi + $rsh mkdir -p "$(dirname "$SO_FILE")" && + if [ -f "$SO_FILE" ]; then + $rcp_to_from "$(dirname "$SO_FILE")" "$SO_FILE" "${SO_FILE}.sign" + else + $rsh rm -f "$SO_FILE" "${SO_FILE}.sign" + fi +} + +is_secret() { + # assume that the secret is in the CIB if we cannot talk to cib + [ "$NO_CRM" ] || test "$1" = "$MAGIC" +} + +check_cib_rsc() { + CCR_OUT="$($NO_CRM crm_resource -r "$1" -W 2>&1)" || fatal $CRM_EX_NOSUCH "$CCR_OUT" +} + +get_cib_param() { + GCP_RSC="$1" + GCP_PARAM="$2" + $NO_CRM crm_resource -r "$GCP_RSC" -g "$GCP_PARAM" 2>/dev/null +} + +set_cib_param() { + SET_RSC="$1" + SET_PARAM="$2" + SET_VAL="$3" + $NO_CRM crm_resource -r "$SET_RSC" -p "$SET_PARAM" -v "$SET_VAL" 2>/dev/null +} + +remove_cib_param() { + RM_RSC="$1" + RM_PARAM="$2" + $NO_CRM crm_resource -r "$RM_RSC" -d "$RM_PARAM" 2>/dev/null +} + +localfiles() { + LF_CMD="$1" + LF_RSC="$2" + LF_PARAM="$3" + LF_VALUE="$4" + LF_FILE="$LRM_CIBSECRETS/$LF_RSC/$LF_PARAM" + case "$LF_CMD" in + get) + cat "$LF_FILE" 2>/dev/null + true + ;; + + getsum) + cat "${LF_FILE}.sign" 2>/dev/null + true + ;; + + set) + LF_SUM="$(printf %s "$LF_VALUE" | md5sum)" || + fatal $CRM_EX_ERROR "md5sum failed to produce hash for resource $LF_RSC parameter $LF_PARAM" + LF_SUM="$(echo "$LF_SUM" | awk '{print $1}')" + mkdir -p "$(dirname "$LF_FILE")" && + echo "$LF_VALUE" > "$LF_FILE" && + echo "$LF_SUM" > "${LF_FILE}.sign" && + sync_one "$LF_FILE" + ;; + + remove) + rm -f "$LF_FILE" "${LF_FILE}.sign" + sync_one "$LF_FILE" + ;; + esac +} + +cibsecret_set() { + CS_VALUE="$1" + + if [ "$2" -ne 4 ]; then + read -p "Enter value: " CS_VALUE + fi + + check_cib_rsc "$rsc" + CIBSET_CURRENT="$(get_cib_param "$rsc" "$param")" + [ -z "$NO_CRM" ] && + [ ! -z "$CIBSET_CURRENT" ] && + [ "$CIBSET_CURRENT" != "$MAGIC" ] && + [ "$CIBSET_CURRENT" != "$CS_VALUE" ] && + fatal $CRM_EX_CONFIG "CIB value <$CIBSET_CURRENT> different for $rsc parameter $param; please delete it first" + localfiles set "$rsc" "$param" "$CS_VALUE" && + set_cib_param "$rsc" "$param" "$MAGIC" +} + +cibsecret_check() { + check_cib_rsc "$rsc" + is_secret "$(get_cib_param "$rsc" "$param")" || + fatal $CRM_EX_CONFIG "resource $rsc parameter $param not set as secret, nothing to check" + CSC_LOCAL_SUM="$(localfiles getsum "$rsc" "$param")" + [ "$CSC_LOCAL_SUM" ] || + fatal $CRM_EX_OSFILE "no MD5 hash for resource $rsc parameter $param" + CSC_LOCAL_VALUE="$(localfiles get "$rsc" "$param")" + CSC_CALC_SUM="$(printf "%s" "$CSC_LOCAL_VALUE" | md5sum | awk '{print $1}')" + [ "$CSC_CALC_SUM" = "$CSC_LOCAL_SUM" ] || + fatal $CRM_EX_DIGEST "MD5 hash mismatch for resource $rsc parameter $param" +} + +cibsecret_get() { + cibsecret_check + localfiles get "$rsc" "$param" +} + +cibsecret_delete() { + check_cib_rsc "$rsc" + localfiles remove "$rsc" "$param" && remove_cib_param "$rsc" "$param" +} + +cibsecret_stash() { + [ "$NO_CRM" ] && fatal $CRM_EX_USAGE "no access to Pacemaker, stash not supported" + check_cib_rsc "$rsc" + CIBSTASH_CURRENT="$(get_cib_param "$rsc" "$param")" + [ "$CIBSTASH_CURRENT" = "" ] && + fatal $CRM_EX_NOSUCH "nothing to stash for resource $rsc parameter $param" + is_secret "$CIBSTASH_CURRENT" && + fatal $CRM_EX_EXISTS "resource $rsc parameter $param already set as secret, nothing to stash" + cibsecret_set "$CIBSTASH_CURRENT" 4 +} + +cibsecret_unstash() { + [ "$NO_CRM" ] && fatal $CRM_EX_USAGE "no access to Pacemaker, unstash not supported" + UNSTASH_LOCAL_VALUE="$(localfiles get "$rsc" "$param")" + [ "$UNSTASH_LOCAL_VALUE" = "" ] && + fatal $CRM_EX_NOSUCH "nothing to unstash for resource $rsc parameter $param" + check_cib_rsc "$rsc" + is_secret "$(get_cib_param "$rsc" "$param")" || + warn "resource $rsc parameter $param not set as secret, but we have local value so proceeding anyway" + localfiles remove "$rsc" "$param" && + set_cib_param "$rsc" "$param" "$UNSTASH_LOCAL_VALUE" +} + +cibsecret_sync() { + sync_files +} + +# Grab arguments +if [ "$1" = "-C" ]; then + NO_CRM=':' + shift +fi +cmd="$1" +rsc="$2" +param="$3" +value="$4" + +# Ensure we have everything we need +check_usage "$cmd" $# +check_env +umask 0077 + +# for dirname() function (@TODO why are we replacing dirname?) +. "@OCF_ROOT_DIR@/lib/heartbeat/ocf-shellfuncs" + +"cibsecret_$cmd" "$value" $# +rc=$? + +if [ $rc -ne 0 ]; then + fatal $CRM_EX_ERROR "$cmd(): failed with rc: $rc" +fi + +# vim: set expandtab tabstop=8 softtabstop=4 shiftwidth=4 textwidth=80: diff --git a/tools/cluster-clean.in b/tools/cluster-clean.in new file mode 100755 index 0000000..4b75edf --- /dev/null +++ b/tools/cluster-clean.in @@ -0,0 +1,99 @@ +#!@BASH_PATH@ +# +# Copyright 2011-2023 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +hosts= +group= +kill=0 +while true; do + case "$1" in + -x) set -x; shift;; + -w) for h in $2; do + hosts="$hosts -w $h"; + done + shift; shift;; + -g) group=$2; shift; shift;; + --kill) kill=1; shift;; + --kill-only) kill=2; shift;; + "") break;; + *) echo "unknown option: $1"; exit 1;; + esac +done + +if [ x"$group" = x -a x"$hosts" = x ]; then + group=$CTS_GROUP +fi + +if [ x"$hosts" != x ]; then + echo `date` ": Cleaning up hosts:" + target=$hosts +elif [ x"$group" != x ]; then + echo `date` ": Cleaning up group: $group" + target="-g $group" +else + echo "You didn't specify any nodes to clean up" + exit 1 +fi +cluster-helper --list bullet $target + +if [ $kill != 0 ]; then + echo "Cleaning processes" + + # Bah. Force systemd to actually look at the process and realize it's dead + cluster-helper $target -- "service corosync stop" &> /dev/null & + cluster-helper $target -- "service pacemaker stop" &> /dev/null & + + cluster-helper $target -- "killall -q -9 corosync pacemakerd pacemaker-attrd pacemaker-based pacemaker-controld pacemaker-execd pacemaker-fenced pacemaker-remoted pacemaker-schedulerd dlm_controld gfs_controld" &> /dev/null + cluster-helper $target -- 'kill -9 `pidof valgrind`' &> /dev/null + + if [ $kill == 2 ]; then + exit 0 + fi +fi + +#logrotate -f $cluster_rotate +echo "Cleaning files" + +log_files="" +log_files="$log_files 'messages*'" +log_files="$log_files 'localmessages*'" +log_files="$log_files 'cluster*.log'" +log_files="$log_files 'corosync.log*'" +log_files="$log_files 'pacemaker.log*'" +log_files="$log_files '*.journal'" +log_files="$log_files '*.journal~'" +log_files="$log_files 'secure-*'" + +state_files="" +state_files="$state_files 'cib.xml*'" +state_files="$state_files 'valgrind-*'" +state_files="$state_files 'cib-*'" +state_files="$state_files 'core.*'" +state_files="$state_files 'cts.*'" +state_files="$state_files 'pe*.bz2'" +state_files="$state_files 'fdata-*'" + +for f in $log_files; do + cluster-helper $target -- "find /var/log -name '$f' -exec rm -f \{\} \;" +done + +for f in $state_files; do + cluster-helper $target -- "find /var/lib -name '$f' -exec rm -f \{\} \;" +done + +cluster-helper $target -- "find /dev/shm -name 'qb-*' -exec rm -f \{\} \;" +cluster-helper $target -- "find @CRM_BLACKBOX_DIR@ -name '*-*' -exec rm -f \{\} \;" +cluster-helper $target -- "find /tmp -name '*.valgrind' -exec rm -f \{\} \;" + +cluster-helper $target -- 'service rsyslog restart' > /dev/null 2>&1 +cluster-helper $target -- 'systemctl restart systemd-journald.socket' > /dev/null 2>&1 +cluster-helper $target -- logger -i -p daemon.info __clean_logs__ + +#touch $cluster_log +echo `date` ": Clean complete" diff --git a/tools/cluster-helper.in b/tools/cluster-helper.in new file mode 100755 index 0000000..d8dac6e --- /dev/null +++ b/tools/cluster-helper.in @@ -0,0 +1,201 @@ +#!@BASH_PATH@ +# +# Copyright 2011-2023 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +hosts= +group=$cluster_name +user=root +pdsh=`which pdsh 2>/dev/null` +ssh=`which qarsh 2>/dev/null` +scp=`which qacp 2>/dev/null` +command=list +format=oneline +replace="{}" + +if [ x$ssh = "x" ]; then + ssh=ssh + scp=scp +fi + +function helptext() { + echo "cluster-helper - A tool for running commands on multiple hosts" + echo "" + echo "Attempt to use pdsh, qarsh, or ssh (in that order) to execute commands" + echo "on multiple hosts" + echo "" + echo "DSH groups can be configured and specified with -g instead of listing" + echo "the individual hosts every time" + echo "" + echo "Usage: cluster-helper [options] [command]" + echo "" + echo "Options:" + echo "--ssh Force the use of ssh instead of qarsh even if it available" + echo "-g, --group Specify the group to operate on/with" + echo "-w, --host Specify a host to operate on/with. May be specified multiple times" + echo "-f, --format Specifiy the output format When listing hosts or group contents" + echo " Allowed values: [oneline], long, short, pdsh, bullet" + echo "" + echo "" + echo "Commands:" + echo "--list format List the contents of a group in the specified format" + echo "--add name Add supplied (-w) hosts to the named group" + echo "--create name Create the named group with the supplied (-w) hosts" + echo "--run, -- Treat all subsequent arguments as a command to perform on" + echo " the specified command on the hosts or group" + echo "--xargs Run the supplied command having replaced any occurrences" + echo " of {} with the node name" + echo "" + echo "--copy file(s) host:file Pass subsequent arguments to scp or qacp" + echo " Any occurrences of {} are replaced with the node name" + echo "--key Install an ssh key" + echo "" + exit $1 +} + +while true ; do + case "$1" in + --help|-h|-\?) helptext 0;; + -x) set -x; shift;; + --ssh) ssh="ssh"; scp="scp"; pdsh=""; shift;; + -g|--group) group="$2"; shift; shift;; + -w|--host) for h in $2; do + hosts="$hosts $h"; + done + shift; shift;; + -f|--format) format=$2; shift; shift;; + -I) replace=$2; shift; shift;; + --list|list) format=$2; command=list; shift; shift;; + --add|add) command=group-add; shift;; + --create|create) group="$2", command=group-create; shift; shift;; + --run|run) command=run; shift;; + --copy|copy) command=copy; shift; break ;; + --key|key) command=key; shift; break ;; + --xargs) command=xargs; shift; break ;; + --) command=run; shift; break ;; + "") break;; + *) helptext 1;; + esac +done + +if [ x"$group" = x -a x"$hosts" = x ]; then + group=$CTS_GROUP +fi + +function expand() { + fmt=$1 + if [ x$group != x -a -f ~/.dsh/group/$group ]; then + hosts=`cat ~/.dsh/group/$group` + elif [ x$group != x ]; then + echo "Unknown group: $group" >&2 + exit 1 + fi + + if [ "x$hosts" != x -a $fmt = oneline ]; then + echo $hosts + + elif [ "x$hosts" != x -a $fmt = short ]; then + ( for h in $hosts; do + echo $h | sed 's:\..*::' + done ) | tr '\n' ' ' + echo "" + + elif [ "x$hosts" != x -a $fmt = pdsh ]; then + ( for h in $hosts; do + echo "-w $h" + done ) | tr '\n' ' ' + echo "" + + elif [ "x$hosts" != x -a $fmt = long ]; then + for h in $hosts; do + echo $h + done + + elif [ "x$hosts" != x -a $fmt = bullet ]; then + for h in $hosts; do + echo " * $h" + done + + elif [ "x$hosts" != x ]; then + echo "Unknown format: $fmt" >&2 + fi +} + +if [ $command = list ]; then + expand $format + +elif [ $command = key ]; then + hosts=`expand oneline` + for h in $hosts; do + ssh-copy-id root@$h + done + +elif [ $command = group-create ]; then + + f=`mktemp` + mkdir -p ~/.dsh/group + + if [ -f ~/.dsh/group/$group ]; then + echo "Overwriting existing group $group" + fi + + for h in $hosts; do + echo $h >> $f + done + + echo "Creating group $group in ~/.dsh/group" + sort -u $f > ~/.dsh/group/$group + rm -f $f + +elif [ $command = group-add ]; then + if [ x$group = x ]; then + echo "Please specify a group to append to" + exit 1 + fi + + f=`mktemp` + mkdir -p ~/.dsh/group + + if [ -f ~/.dsh/group/$group ]; then + cat ~/.dsh/group/$group > $f + fi + + for h in $hosts; do + echo $h >> $f + done + + echo "Appending hosts to group $group in ~/.dsh/group" + sort -u $f > ~/.dsh/group/$group + rm -f $f + +elif [ $command = run ]; then + if [ x$pdsh != x ]; then + hosts=`expand pdsh` + $pdsh -l $user $hosts -- $* + + else + hosts=`expand oneline` + for n in $hosts; do + $ssh -l $user $n -- $* < /dev/null + done + if [ x"$hosts" = x ]; then + echo "No hosts specified" + fi + fi +elif [ $command = copy ]; then + hosts=`expand oneline` + for n in $hosts; do + $scp `echo $* | sed 's@'$replace'@'$n'@'` + done + +elif [ $command = xargs ]; then + hosts=`expand oneline` + for n in $hosts; do + eval `echo $* | sed 's@'$replace'@'$n'@'` + done +fi diff --git a/tools/cluster-init.in b/tools/cluster-init.in new file mode 100755 index 0000000..1485c81 --- /dev/null +++ b/tools/cluster-init.in @@ -0,0 +1,537 @@ +#!@BASH_PATH@ +# +# Copyright 2011-2023 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +accept_defaults=0 +do_raw=0 +ETCHOSTS=0 +nodelist=0 +limit=0 + +pkgs="corosync xinetd nmap abrt-cli fence-agents perl-TimeDate gdb" + +transport="multicast" +inaddr_any="no" + +INSTALL= +cs_conf= +fence_conf= + +dsh_group=0 +if [ ! -z $cluster_name ]; then + cluster=$cluster_name +else + cluster=dummy0 +fi + +# Corosync Settings +cs_port=666 + +# Settings that work great on nXX +join=60 +#token=3000 +consensus=1500 + +# Official settings +join=2000 +token=5000 +consensus=2500 + +# Testing +join=1000 +consensus=7500 +do_debug=off + +function ip_for_node() { + ping -c 1 $1 | grep "bytes from" | head -n 1 | sed -e 's/.*bytes from//' -e 's/: icmp.*//' | awk '{print $NF}' | sed 's:(::' | sed 's:)::' +# if [ $do_raw = 1 ]; then +# echo $1 +# else +# #host $1 | grep "has address" | head -n 1 | awk '{print $NF}' | sed 's:(::' | sed 's:)::' +# fi +} +function id_for_node() { + ip_for_node $* | tr '.' ' ' | awk '{print $4}' +} +function name_for_node() { + echo $1 | awk -F. '{print $1}' +} + +function helptext() { + echo "cluster-init - Configure cluster communication for the infrastructures supported by Pacemaker" + echo "" + echo "-g, --group Specify the group to operate on/with" + echo "-w, --host Specify a host to operate on/with. May be specified multiple times" + echo "-r, --raw-ip Supplied nodes were listed as their IP addresses" + echo "" + echo "-c, --corosync configure for corosync" + echo "-C, --nodelist configure for corosync with a node list" + echo "-u, --unicast configure point-to-point communication instead of multicast" + echo "" + echo "-I, --install Install packages" + echo "" + echo "-d, --debug Enable debug logging for the cluster" + echo "--hosts Copy the local /etc/hosts file to all nodes" + echo "-e, --extra list Whitespace separated list of extra packages to install" + echo "-l, --limit N Use the first N hosts from the named group" + echo " Extra packages to install" + exit $1 +} + +host_input="" +while true; do + case "$1" in + -g) cluster=$2; + shift; shift;; + -w|--host) + for h in $2; do + host_input="$host_input -w $h"; + done + shift; shift;; + -w) host_input="$host_input -w $2" + shift; shift;; + -r|--raw-ip) do_raw=1; shift;; + + -d|--debug) do_debug=on; shift;; + + -I|--install) INSTALL=Yes; shift;; + --hosts) ETCHOSTS=1; shift;; + + -c|--corosync) CTYPE=corosync; shift;; + -C|--nodelist) CTYPE=corosync; nodelist=1; shift;; + -u|--unicast) nodelist=1; transport=udpu; inaddr_any="yes"; shift;; + -e|--extra) pkgs="$pkgs $2"; shift; shift;; + -t|--test) pkgs="$pkgs valgrind"; shift;; + -l|--limit) limit=$2; shift; shift;; + + r*[0-9]) + rhel=`echo $1 | sed -e s/rhel// -e s/-// -e s/r//` + pkgs="$pkgs qarsh-server"; + case $rhel in + 7) CTYPE=corosync;; + esac + shift + ;; + + f*[0-9][0-9]) + CTYPE=corosync; + shift + ;; + + -y|--yes|--defaults) accept_defaults=1; shift;; + -x) set -x; shift;; + -\?|--help) helptext 0; shift;; + "") break;; + *) echo "unknown option: $1"; exit 1;; + esac +done + +if [ ! -z $cluster ]; then + host_input="-g $cluster" + # use the last digit present in the variable (if any) + dsh_group=`echo $cluster | sed 's/[^0-9][^0-9]*//g;s/.*\([0-9]\)$/\1/'` +fi + +if [ -z $dsh_group ]; then + dsh_group=1 +fi + +if [ x = "x$host_input" -a x = "x$cluster" ]; then + if [ -d $HOME/.dsh/group ]; then + read -p "Please specify a dsh group you'd like to configure as a cluster? [] " -t 60 cluster + else + read -p "Please specify a whitespace delimetered list of nodes you'd like to configure as a cluster? [] " -t 60 host_list + + for h in $2; do + host_input="$host_input -w $h"; + done + fi +fi + +if [ -z "$host_input" ]; then + echo "You didn't specify any nodes or groups to configure" + exit 1 +fi + +if [ $limit -gt 0 ]; then + echo "Using only the first $limit hosts in $cluster group" + host_list=`cluster-helper --list bullet $host_input | head -n $limit | tr '\n*' ' '` +else + host_list=`cluster-helper --list short $host_input` +fi +num_hosts=`echo $host_list | wc -w` + +if [ $num_hosts -gt 9 ]; then + cs_port=66 +fi + +for h in $host_list; do + ping -c 1 -q $h + if [ $? != 0 ]; then + echo "Using long names..." + host_list=`cluster-helper --list long $host_input` + break + fi +done + +if [ -z $CTYPE ]; then + echo "" + read -p "Where should Pacemaker obtain membership and quorum from? [corosync] (corosync) " -t 60 CTYPE +fi + +case $CTYPE in + corosync) cs_conf="@PCMK__COROSYNC_CONF@" ;; +esac + +function get_defaults() +{ + if [ -z $SSH ]; then + SSH="No" + fi + + if [ -z $SELINUX ]; then + SELINUX="No" + fi + + if [ -z $IPTABLES ]; then + IPTABLES="Yes" + fi + + if [ -z $DOMAIN ]; then + DOMAIN="No" + fi + if [ -z $INSTALL ]; then + INSTALL="Yes" + fi + if [ -z $DATE ]; then + DATE="No" + fi +} + +get_defaults +if [ $accept_defaults = 0 ]; then + echo "" + read -p "Shall I install an ssh key to cluster nodes? [$SSH] " -t 60 SSH + echo "" + echo "SELinux prevent many things, including password-less ssh logins" + read -p "Shall I disable selinux? [$SELINUX] " -t 60 SELINUX + echo "" + echo "Incorrectly configured firewalls will prevent corosync from starting up" + read -p "Shall I disable iptables? [$IPTABLES] " -t 60 IPTABLES + + echo "" + read -p "Shall I install/update the relevant packages? [$INSTALL] " -t 60 INSTALL + + echo "" + read -p "Shall I sync the date/time? [$DATE] " -t 60 DATE +fi +get_defaults + +echo "" +echo "Detecting possible fencing options" +if [ -e /etc/cluster/fence_xvm.key ]; then + echo "* Found fence_xvm" + fence_conf=/etc/cluster/fence_xvm.key + pkgs="$pkgs fence-virt" +fi + +if [ ! -z ${OS_AUTH_URL} ]; then + echo "* Found openstack credentials" + fence_conf=/sbin/fence_openstack + pkgs="$pkgs python-novaclient" +fi +echo "" +echo "Beginning cluster configuration" +echo "" + +case $SSH in + [Yy][Ee][Ss]|[Yy]) + for host in $host_list; do + echo "Installing our ssh key on ${host}" + ssh-copy-id root@${host} >/dev/null 2>&1 + # Fix selinux labeling + ssh -l root ${host} -- restorecon -R -v . + done + ;; +esac + +case $DATE in + [Yy][Ee][Ss]|[Yy]) + for host in $host_list; do + echo "Setting time on ${host}" + scp /etc/localtime root@${host}:/etc + now=`date +%s` + ssh -l root ${host} -- date -s @$now + echo "" + done + ;; +esac + +init=`mktemp` +cat<<-END>$init +verbose=0 +pkgs="$pkgs" + +lhost=\`uname -n\` +lshort=\`echo \$lhost | awk -F. '{print \$1}'\` + +log() { + printf "%-10s \$*\n" "\$lshort:" 1>&2 +} + +debug() { + if [ \$verbose -gt 0 ]; then + log "Debug: \$*" + fi +} + +info() { + log "\$*" +} + +warning() { + log "WARN: \$*" +} + +fatal() { + log "ERROR: \$*" + exit 1 +} + +case $SELINUX in + [Yy][Ee][Ss]|[Yy]) + sed -i.sed "s/enforcing/disabled/g" /etc/selinux/config + ;; +esac + +case $IPTABLES in + [Yy][Ee][Ss]|[Yy]|"") + service iptables stop + chkconfig iptables off + service firewalld stop + chkconfig firewalld off + ;; +esac + +case $DOMAIN in + [Nn][Oo]|"") + ;; + *.*) + if + ! grep domain /etc/resolv.conf + then + sed -i.sed "s/nameserver/domain\ $DOMAIN\\\nnameserver/g" /etc/resolv.conf + fi + ;; + *) echo "Unknown domain: $DOMAIN";; +esac + +case $INSTALL in + [Yy][Ee][Ss]|[Yy]|"") + info Installing cluster software + yum install -y $pkgs pacemaker + ;; +esac + +info "Configuring services" +chkconfig xinetd on +service xinetd start &>/dev/null + +chkconfig corosync off &> /dev/null +mkdir -p /etc/cluster + +info "Turning on core files" +grep -q "unlimited" /etc/bashrc +if [ $? = 1 ]; then + sed -i.sed "s/bashrc/bashrc\\\nulimit\ -c\ unlimited/g" /etc/bashrc +fi + +function patch_cs_config() { + test $num_hosts != 2 + two_node=$? + + priority="info" + if [ $do_debug = 1 ]; then + priority="debug" + fi + + ssh -l root ${host} -- sed -i.sed "s/.*mcastaddr:.*/mcastaddr:\ 226.94.1.1/g" $cs_conf + ssh -l root ${host} -- sed -i.sed "s/.*mcastport:.*/mcastport:\ $cs_port$dsh_group/g" $cs_conf + ssh -l root ${host} -- sed -i.sed "s/.*bindnetaddr:.*/bindnetaddr:\ $ip/g" $cs_conf + ssh -l root ${host} -- sed -i.sed "s/.*syslog_facility:.*/syslog_facility:\ daemon/g" $cs_conf + ssh -l root ${host} -- sed -i.sed "s/.*logfile_priority:.*/logfile_priority:\ $priority/g" $cs_conf + + if [ ! -z $token ]; then + ssh -l root ${host} -- sed -i.sed "s/.*token:.*/token:\ $token/g" $cs_conf + fi + if [ ! -z $consensus ]; then + ssh -l root ${host} -- sed -i.sed "s/.*consensus:.*/consensus:\ $consensus/g" $cs_conf + fi + if [ ! -z $join ]; then + ssh -l root ${host} -- sed -i.sed "s/^join:.*/join:\ $join/g" $cs_conf + ssh -l root ${host} -- sed -i.sed "s/\\\Wjoin:.*/join:\ $join/g" $cs_conf + fi + + ssh -l root ${host} -- grep -q "corosync_votequorum" $cs_conf 2>&1 > /dev/null + if [ $? -eq 0 ]; then + ssh -l root ${host} -- sed -i.sed "s/\\\Wexpected_votes:.*/expected_votes:\ $num_hosts/g" $cs_conf + ssh -l root ${host} -- sed -i.sed "s/\\\Wtwo_node:.*/two_node:\ $two_node/g" $cs_conf + else + printf "%-10s Wrong quorum provider: installing $cs_conf for corosync instead\n" ${host} + create_cs_config + fi +} + +function create_cs_config() { + cs_tmp=/tmp/cs_conf.$$ + test $num_hosts != 2 + two_node=$? + + # Base config + priority="info" + if [ $do_debug = 1 ]; then + priority="debug" + fi + + cat <<-END >$cs_tmp +# Please read the corosync.conf.5 manual page +totem { + version: 2 + + # cypto_cipher and crypto_hash: Used for mutual node authentication. + # If you choose to enable this, then do remember to create a shared + # secret with "corosync-keygen". + crypto_cipher: none + crypto_hash: none + + # Assign a fixed node id + nodeid: $id + + # Disable encryption + secauth: off + + transport: $transport + inaddr_any: $inaddr_any + + # interface: define at least one interface to communicate + # over. If you define more than one interface stanza, you must + # also set rrp_mode. + interface { + # Rings must be consecutively numbered, starting at 0. + ringnumber: 0 + + # This is normally the *network* address of the + # interface to bind to. This ensures that you can use + # identical instances of this configuration file + # across all your cluster nodes, without having to + # modify this option. + bindnetaddr: $ip + + # However, if you have multiple physical network + # interfaces configured for the same subnet, then the + # network address alone is not sufficient to identify + # the interface Corosync should bind to. In that case, + # configure the *host* address of the interface + # instead: + # bindnetaddr: 192.168.1.1 + # When selecting a multicast address, consider RFC + # 2365 (which, among other things, specifies that + # 239.255.x.x addresses are left to the discretion of + # the network administrator). Do not reuse multicast + # addresses across multiple Corosync clusters sharing + # the same network. + + # Corosync uses the port you specify here for UDP + # messaging, and also the immediately preceding + # port. Thus if you set this to 5405, Corosync sends + # messages over UDP ports 5405 and 5404. + mcastport: $cs_port$dsh_group + + # Time-to-live for cluster communication packets. The + # number of hops (routers) that this ring will allow + # itself to pass. Note that multicast routing must be + # specifically enabled on most network routers. + ttl: 1 + mcastaddr: 226.94.1.1 + } +} + +logging { + debug: off + fileline: off + to_syslog: yes + to_stderr: no + syslog_facility: daemon + timestamp: on + to_logfile: yes + logfile: /var/log/corosync.log + logfile_priority: $priority +} + +amf { + mode: disabled +} + +quorum { + provider: corosync_votequorum + expected_votes: $num_hosts + votes: 1 + two_node: $two_node + wait_for_all: 0 + last_man_standing: 0 + auto_tie_breaker: 0 +} +END + scp -q $cs_tmp root@${host}:$cs_conf + rm -f $cs_tmp +} + +for host in $host_list; do + echo "" + echo "" + echo "* Configuring $host" + + cs_short_host=`name_for_node $host` + ip=`ip_for_node $host` + id=`id_for_node $host` + + echo $ip | grep -qis NXDOMAIN + if [ $? = 0 ]; then + echo "Couldn't find resolve $host to an IP address" + exit 1 + fi + + if [ `uname -n` = $host ]; then + bash $init + else + cat $init | ssh -l root -T $host -- "cat > $init; bash $init" + fi + + if [ "x$fence_conf" != x ]; then + if [ -e $fence_conf ]; then + scp $fence_conf root@${host}:$fence_conf + fi + fi + + if [ $ETCHOSTS = 1 ]; then + scp /etc/hosts root@${host}:/etc/hosts + fi + + ssh -l root ${host} -- grep -q "token:" $cs_conf 2>&1 > /dev/null + new_config=$? + new_config=1 + + if [ $new_config = 0 ]; then + printf "%-10s Updating $cs_conf\n" ${host}: + patch_cs_config + else + printf "%-10s Installing $cs_conf\n" ${host}: + create_cs_config + fi +done diff --git a/tools/crm_attribute.8.inc b/tools/crm_attribute.8.inc new file mode 100644 index 0000000..2be8253 --- /dev/null +++ b/tools/crm_attribute.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crm_attribute -n [options] + +/and node attributes/ +.SH OPTIONS diff --git a/tools/crm_attribute.c b/tools/crm_attribute.c new file mode 100644 index 0000000..358b150 --- /dev/null +++ b/tools/crm_attribute.c @@ -0,0 +1,883 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include + +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#define SUMMARY "crm_attribute - query and update Pacemaker cluster options and node attributes" + +GError *error = NULL; +crm_exit_t exit_code = CRM_EX_OK; +uint64_t cib_opts = cib_sync_call; + +PCMK__OUTPUT_ARGS("attribute", "const char *", "const char *", "const char *", + "const char *", "const char *") +static int +attribute_text(pcmk__output_t *out, va_list args) +{ + const char *scope = va_arg(args, const char *); + const char *instance = va_arg(args, const char *); + const char *name = va_arg(args, const char *); + const char *value = va_arg(args, const char *); + const char *host G_GNUC_UNUSED = va_arg(args, const char *); + + if (out->quiet) { + if (value != NULL) { + pcmk__formatted_printf(out, "%s\n", value); + } + } else { + out->info(out, "%s%s %s%s %s%s value=%s", + scope ? "scope=" : "", scope ? scope : "", + instance ? "id=" : "", instance ? instance : "", + name ? "name=" : "", name ? name : "", + value ? value : "(null)"); + } + + return pcmk_rc_ok; +} + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static pcmk__message_entry_t fmt_functions[] = { + { "attribute", "text", attribute_text }, + + { NULL, NULL, NULL } +}; + +struct { + char command; + gchar *attr_default; + gchar *attr_id; + gchar *attr_name; + uint32_t attr_options; + gchar *attr_pattern; + char *attr_value; + char *dest_node; + gchar *dest_uname; + gboolean inhibit; + gchar *set_name; + char *set_type; + gchar *type; + gboolean promotion_score; +} options = { + .command = 'G', + .promotion_score = FALSE +}; + +#define INDENT " " + +static gboolean +delete_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.command = 'D'; + pcmk__str_update(&options.attr_value, NULL); + return TRUE; +} + +static gboolean +promotion_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + char *score_name = NULL; + + options.promotion_score = TRUE; + + if (options.attr_name) { + g_free(options.attr_name); + } + + score_name = pcmk_promotion_score_name(optarg); + if (score_name != NULL) { + options.attr_name = g_strdup(score_name); + free(score_name); + } else { + options.attr_name = NULL; + } + + return TRUE; +} + +static gboolean +update_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.command = 'u'; + pcmk__str_update(&options.attr_value, optarg); + return TRUE; +} + +static gboolean +utilization_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (options.type) { + g_free(options.type); + } + + options.type = g_strdup(XML_CIB_TAG_NODES); + pcmk__str_update(&options.set_type, XML_TAG_UTILIZATION); + return TRUE; +} + +static gboolean +value_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.command = 'G'; + pcmk__str_update(&options.attr_value, NULL); + return TRUE; +} + +static gboolean +wait_cb (const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (pcmk__str_eq(optarg, "no", pcmk__str_none)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local | pcmk__node_attr_sync_cluster); + return TRUE; + } else if (pcmk__str_eq(optarg, PCMK__VALUE_LOCAL, pcmk__str_none)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local | pcmk__node_attr_sync_cluster); + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local); + return TRUE; + } else if (pcmk__str_eq(optarg, PCMK__VALUE_CLUSTER, pcmk__str_none)) { + pcmk__clear_node_attr_flags(options.attr_options, pcmk__node_attr_sync_local | pcmk__node_attr_sync_cluster); + pcmk__set_node_attr_flags(options.attr_options, pcmk__node_attr_sync_cluster); + return TRUE; + } else { + g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "--wait= must be one of 'no', 'local', 'cluster'"); + return FALSE; + } +} + +static GOptionEntry selecting_entries[] = { + { "id", 'i', 0, G_OPTION_ARG_STRING, &options.attr_id, + "(Advanced) Operate on instance of specified attribute with this\n" + INDENT "XML ID", + "XML_ID" + }, + + { "name", 'n', 0, G_OPTION_ARG_STRING, &options.attr_name, + "Operate on attribute or option with this name. For queries, this\n" + INDENT "is optional, in which case all matching attributes will be\n" + INDENT "returned.", + "NAME" + }, + + { "pattern", 'P', 0, G_OPTION_ARG_STRING, &options.attr_pattern, + "Operate on all attributes matching this pattern\n" + INDENT "(with -v, -D, or -G)", + "PATTERN" + }, + + { "promotion", 'p', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, promotion_cb, + "Operate on node attribute used as promotion score for specified\n" + INDENT "resource, or resource given in OCF_RESOURCE_INSTANCE environment\n" + INDENT "variable if none is specified; this also defaults -l/--lifetime\n" + INDENT "to reboot (normally invoked from an OCF resource agent)", + "RESOURCE" + }, + + { "set-name", 's', 0, G_OPTION_ARG_STRING, &options.set_name, + "(Advanced) Operate on instance of specified attribute that is\n" + INDENT "within set with this XML ID", + "NAME" + }, + + { NULL } +}; + +static GOptionEntry command_entries[] = { + { "delete", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, delete_cb, + "Delete the attribute/option", + NULL + }, + + { "query", 'G', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, value_cb, + "Query the current value of the attribute/option.\n" + INDENT "See also: -n, -P", + NULL + }, + + { "update", 'v', 0, G_OPTION_ARG_CALLBACK, update_cb, + "Update the value of the attribute/option", + "VALUE" + }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "default", 'd', 0, G_OPTION_ARG_STRING, &options.attr_default, + "(Advanced) Default value to display if none is found in configuration", + "VALUE" + }, + + { "lifetime", 'l', 0, G_OPTION_ARG_STRING, &options.type, + "Lifetime of the node attribute.\n" + INDENT "Valid values: reboot, forever", + "LIFETIME" + }, + + { "node", 'N', 0, G_OPTION_ARG_STRING, &options.dest_uname, + "Set a node attribute for named node (instead of a cluster option).\n" + INDENT "See also: -l", + "NODE" + }, + + { "type", 't', 0, G_OPTION_ARG_STRING, &options.type, + "Which part of the configuration to update/delete/query the option in.\n" + INDENT "Valid values: crm_config, rsc_defaults, op_defaults, tickets", + "SECTION" + }, + + { "wait", 'W', 0, G_OPTION_ARG_CALLBACK, wait_cb, + "Wait for some event to occur before returning. Values are 'no' (wait\n" + INDENT "only for the attribute daemon to acknowledge the request),\n" + INDENT "'local' (wait until the change has propagated to where a local\n" + INDENT "query will return the request value, or the value set by a\n" + INDENT "later request), or 'cluster' (wait until the change has propagated\n" + INDENT "to where a query anywhere on the cluster will return the requested\n" + INDENT "value, or the value set by a later request). Default is 'no'.\n" + INDENT "(with -N, and one of -D or -u)", + "UNTIL" }, + + { "utilization", 'z', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, utilization_cb, + "Set an utilization attribute for the node.", + NULL + }, + + { "inhibit-policy-engine", '!', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &options.inhibit, + NULL, NULL + }, + + { NULL } +}; + +static GOptionEntry deprecated_entries[] = { + { "attr-id", 0, G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_STRING, &options.attr_id, + NULL, NULL + }, + + { "attr-name", 0, G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_STRING, &options.attr_name, + NULL, NULL + }, + + { "attr-value", 0, G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, update_cb, + NULL, NULL + }, + + { "delete-attr", 0, G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, delete_cb, + NULL, NULL + }, + + { "get-value", 0, G_OPTION_FLAG_HIDDEN|G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, value_cb, + NULL, NULL + }, + + { "node-uname", 'U', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_STRING, &options.dest_uname, + NULL, NULL + }, + + { NULL } +}; + +static void +get_node_name_from_local(void) +{ + char *hostname = pcmk_hostname(); + + g_free(options.dest_uname); + + /* This silliness is so that dest_uname is always a glib-managed + * string so we know how to free it later. pcmk_hostname returns + * a newly allocated string via strdup. + */ + options.dest_uname = g_strdup(hostname); + free(hostname); +} + +static int +send_attrd_update(char command, const char *attr_node, const char *attr_name, + const char *attr_value, const char *attr_set, + const char *attr_dampen, uint32_t attr_options) +{ + int rc = pcmk_rc_ok; + uint32_t opts = attr_options; + + switch (command) { + case 'D': + rc = pcmk__attrd_api_delete(NULL, attr_node, attr_name, opts); + break; + + case 'u': + rc = pcmk__attrd_api_update(NULL, attr_node, attr_name, + attr_value, NULL, attr_set, NULL, + opts | pcmk__node_attr_value); + break; + } + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, "Could not update %s=%s: %s (%d)", + attr_name, attr_value, pcmk_rc_str(rc), rc); + } + + return rc; +} + +struct delete_data_s { + pcmk__output_t *out; + cib_t *cib; +}; + +static int +delete_attr_on_node(xmlNode *child, void *userdata) +{ + struct delete_data_s *dd = (struct delete_data_s *) userdata; + + const char *attr_name = crm_element_value(child, XML_NVPAIR_ATTR_NAME); + int rc = pcmk_rc_ok; + + if (!pcmk__str_eq(attr_name, options.attr_pattern, pcmk__str_regex)) { + return pcmk_rc_ok; + } + + rc = cib__delete_node_attr(dd->out, dd->cib, cib_opts, options.type, + options.dest_node, options.set_type, + options.set_name, options.attr_id, + attr_name, options.attr_value, NULL); + + if (rc == ENXIO) { + rc = pcmk_rc_ok; + } + + return rc; +} + +static int +command_delete(pcmk__output_t *out, cib_t *cib) +{ + int rc = pcmk_rc_ok; + + xmlNode *result = NULL; + bool use_pattern = options.attr_pattern != NULL; + + /* See the comment in command_query regarding xpath and regular expressions. */ + if (use_pattern) { + struct delete_data_s dd = { out, cib }; + + rc = cib__get_node_attrs(out, cib, options.type, options.dest_node, + options.set_type, options.set_name, NULL, NULL, + NULL, &result); + + if (rc != pcmk_rc_ok) { + goto done_deleting; + } + + rc = pcmk__xe_foreach_child(result, NULL, delete_attr_on_node, &dd); + + if (rc != pcmk_rc_ok) { + goto done_deleting; + } + + } else { + rc = cib__delete_node_attr(out, cib, cib_opts, options.type, options.dest_node, + options.set_type, options.set_name, options.attr_id, + options.attr_name, options.attr_value, NULL); + } + +done_deleting: + free_xml(result); + + if (rc == ENXIO) { + /* Nothing to delete... + * which means it's not there... + * which is what the admin wanted + */ + rc = pcmk_rc_ok; + } + + return rc; +} + +struct update_data_s { + pcmk__output_t *out; + cib_t *cib; + int is_remote_node; +}; + +static int +update_attr_on_node(xmlNode *child, void *userdata) +{ + struct update_data_s *ud = (struct update_data_s *) userdata; + + const char *attr_name = crm_element_value(child, XML_NVPAIR_ATTR_NAME); + + if (!pcmk__str_eq(attr_name, options.attr_pattern, pcmk__str_regex)) { + return pcmk_rc_ok; + } + + return cib__update_node_attr(ud->out, ud->cib, cib_opts, options.type, + options.dest_node, options.set_type, + options.set_name, options.attr_id, + attr_name, options.attr_value, NULL, + ud->is_remote_node ? "remote" : NULL); +} + +static int +command_update(pcmk__output_t *out, cib_t *cib, int is_remote_node) +{ + int rc = pcmk_rc_ok; + + xmlNode *result = NULL; + bool use_pattern = options.attr_pattern != NULL; + + CRM_LOG_ASSERT(options.type != NULL); + CRM_LOG_ASSERT(options.attr_name != NULL); + CRM_LOG_ASSERT(options.attr_value != NULL); + + /* See the comment in command_query regarding xpath and regular expressions. */ + if (use_pattern) { + struct update_data_s ud = { out, cib, is_remote_node }; + + rc = cib__get_node_attrs(out, cib, options.type, options.dest_node, + options.set_type, options.set_name, NULL, NULL, + NULL, &result); + + if (rc != pcmk_rc_ok) { + goto done_updating; + } + + rc = pcmk__xe_foreach_child(result, NULL, update_attr_on_node, &ud); + + if (rc != pcmk_rc_ok) { + goto done_updating; + } + + } else { + rc = cib__update_node_attr(out, cib, cib_opts, options.type, + options.dest_node, options.set_type, + options.set_name, options.attr_id, + options.attr_name, options.attr_value, + NULL, is_remote_node ? "remote" : NULL); + } + +done_updating: + free_xml(result); + return rc; +} + +struct output_data_s { + pcmk__output_t *out; + bool use_pattern; + bool did_output; +}; + +static int +output_one_attribute(xmlNode *node, void *userdata) +{ + struct output_data_s *od = (struct output_data_s *) userdata; + + const char *name = crm_element_value(node, XML_NVPAIR_ATTR_NAME); + const char *value = crm_element_value(node, XML_NVPAIR_ATTR_VALUE); + const char *host = crm_element_value(node, PCMK__XA_ATTR_NODE_NAME); + + const char *type = options.type; + const char *attr_id = options.attr_id; + + if (od->use_pattern && !pcmk__str_eq(name, options.attr_pattern, pcmk__str_regex)) { + return pcmk_rc_ok; + } + + od->out->message(od->out, "attribute", type, attr_id, name, value, host); + od->did_output = true; + crm_info("Read %s='%s' %s%s", + pcmk__s(name, ""), pcmk__s(value, ""), + options.set_name ? "in " : "", options.set_name ? options.set_name : ""); + + return pcmk_rc_ok; +} + +static int +command_query(pcmk__output_t *out, cib_t *cib) +{ + int rc = pcmk_rc_ok; + + xmlNode *result = NULL; + bool use_pattern = options.attr_pattern != NULL; + + /* libxml2 doesn't support regular expressions in xpath queries (which is how + * cib__get_node_attrs -> find_attr finds attributes). So instead, we'll just + * find all the attributes for a given node here by passing NULL for attr_id + * and attr_name, and then later see if they match the given pattern. + */ + if (use_pattern) { + rc = cib__get_node_attrs(out, cib, options.type, options.dest_node, + options.set_type, options.set_name, NULL, + NULL, NULL, &result); + } else { + rc = cib__get_node_attrs(out, cib, options.type, options.dest_node, + options.set_type, options.set_name, options.attr_id, + options.attr_name, NULL, &result); + } + + if (rc == ENXIO && options.attr_default) { + /* Make static analysis happy */ + const char *type = options.type; + const char *attr_id = options.attr_id; + const char *attr_name = options.attr_name; + const char *attr_default = options.attr_default; + const char *dest_uname = options.dest_uname; + + out->message(out, "attribute", type, attr_id, attr_name, attr_default, + dest_uname); + rc = pcmk_rc_ok; + + } else if (rc != pcmk_rc_ok) { + // Don't do anything. + + } else if (xml_has_children(result)) { + struct output_data_s od = { out, use_pattern, false }; + + pcmk__xe_foreach_child(result, NULL, output_one_attribute, &od); + + if (!od.did_output) { + rc = ENXIO; + } + + } else { + struct output_data_s od = { out, use_pattern, false }; + output_one_attribute(result, &od); + } + + free_xml(result); + return rc; +} + +static void +set_type(void) +{ + if (options.type == NULL) { + if (options.promotion_score) { + // Updating a promotion score node attribute + options.type = g_strdup(XML_CIB_TAG_STATUS); + + } else if (options.dest_uname != NULL) { + // Updating some other node attribute + options.type = g_strdup(XML_CIB_TAG_NODES); + + } else { + // Updating cluster options + options.type = g_strdup(XML_CIB_TAG_CRMCONFIG); + } + + } else if (pcmk__str_eq(options.type, "reboot", pcmk__str_casei)) { + options.type = g_strdup(XML_CIB_TAG_STATUS); + + } else if (pcmk__str_eq(options.type, "forever", pcmk__str_casei)) { + options.type = g_strdup(XML_CIB_TAG_NODES); + } +} + +static bool +use_attrd(void) +{ + /* Only go through the attribute manager for transient attributes, and + * then only if we're not using a file as the CIB. + */ + return pcmk__str_eq(options.type, XML_CIB_TAG_STATUS, pcmk__str_casei) && + getenv("CIB_file") == NULL && getenv("CIB_shadow") == NULL; +} + +static bool +try_ipc_update(void) +{ + return use_attrd() && (options.command == 'D' || options.command == 'u'); +} + +static bool +pattern_used_correctly(void) +{ + /* --pattern can only be used with: + * -G (query), -v (update), or -D (delete) + */ + return options.command == 'G' || options.command == 'u' || options.command == 'D'; +} + +static bool +delete_used_correctly(void) +{ + return options.command != 'D' || options.attr_name != NULL || options.attr_pattern != NULL; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'q', 0, G_OPTION_ARG_NONE, &(args->quiet), + "Print only the value on stdout", + NULL }, + + { "quiet", 'Q', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &(args->quiet), + NULL, NULL + }, + + { NULL } + }; + + const char *description = "Examples:\n\n" + "Add new node attribute called 'location' with the value of 'office' for host 'myhost':\n\n" + "\tcrm_attribute --node myhost --name location --update office\n\n" + "Query the value of the 'location' node attribute for host 'myhost':\n\n" + "\tcrm_attribute --node myhost --name location --query\n\n" + "Change the value of the 'location' node attribute for host 'myhost':\n\n" + "\tcrm_attribute --node myhost --name location --update backoffice\n\n" + "Delete the 'location' node attribute for host 'myhost':\n\n" + "\tcrm_attribute --node myhost --name location --delete\n\n" + "Query the value of the 'cluster-delay' cluster option:\n\n" + "\tcrm_attribute --type crm_config --name cluster-delay --query\n\n" + "Query value of the 'cluster-delay' cluster option and print only the value:\n\n" + "\tcrm_attribute --type crm_config --name cluster-delay --query --quiet\n\n"; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + pcmk__add_main_args(context, extra_prog_entries); + g_option_context_set_description(context, description); + + pcmk__add_arg_group(context, "selections", "Selecting attributes:", + "Show selecting options", selecting_entries); + pcmk__add_arg_group(context, "command", "Commands:", + "Show command options", command_entries); + pcmk__add_arg_group(context, "additional", "Additional options:", + "Show additional options", addl_entries); + pcmk__add_arg_group(context, "deprecated", "Deprecated Options:", + "Show deprecated options", deprecated_entries); + + return context; +} + +int +main(int argc, char **argv) +{ + cib_t *the_cib = NULL; + int is_remote_node = 0; + + int rc = pcmk_rc_ok; + + pcmk__output_t *out = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "NPUdilnpstv"); + GOptionContext *context = build_arg_context(args, &output_group); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_attribute", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + pcmk__register_lib_messages(out); + pcmk__register_messages(out, fmt_functions); + + if (args->version) { + out->version(out, false); + goto done; + } + + out->quiet = args->quiet; + + if (options.promotion_score && options.attr_name == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "-p/--promotion must be called from an OCF resource agent " + "or with a resource ID specified"); + goto done; + } + + if (options.inhibit) { + crm_warn("Inhibiting notifications for this update"); + cib__set_call_options(cib_opts, crm_system_name, cib_inhibit_notify); + } + + the_cib = cib_new(); + rc = the_cib->cmds->signon(the_cib, crm_system_name, cib_command); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not connect to the CIB: %s", pcmk_rc_str(rc)); + goto done; + } + + set_type(); + + // Use default node if not given (except for cluster options and tickets) + if (!pcmk__strcase_any_of(options.type, XML_CIB_TAG_CRMCONFIG, XML_CIB_TAG_TICKETS, + NULL)) { + /* If we are being called from a resource agent via the cluster, + * the correct local node name will be passed as an environment + * variable. Otherwise, we have to ask the cluster. + */ + const char *target = pcmk__node_attr_target(options.dest_uname); + + if (target != NULL) { + g_free(options.dest_uname); + options.dest_uname = g_strdup(target); + } else if (getenv("CIB_file") != NULL && options.dest_uname == NULL) { + get_node_name_from_local(); + } + + if (options.dest_uname == NULL) { + char *node_name = NULL; + + rc = pcmk__query_node_name(out, 0, &node_name, 0); + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + free(node_name); + goto done; + } + options.dest_uname = g_strdup(node_name); + free(node_name); + } + + rc = query_node_uuid(the_cib, options.dest_uname, &options.dest_node, &is_remote_node); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not map name=%s to a UUID", options.dest_uname); + goto done; + } + } + + if (!delete_used_correctly()) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error: must specify attribute name or pattern to delete"); + goto done; + } + + if (options.attr_pattern) { + if (options.attr_name) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error: --name and --pattern cannot be used at the same time"); + goto done; + } + + if (!pattern_used_correctly()) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error: pattern can only be used with delete, query, or update"); + goto done; + } + + g_free(options.attr_name); + options.attr_name = options.attr_pattern; + options.attr_options |= pcmk__node_attr_pattern; + } + + if (is_remote_node) { + options.attr_options |= pcmk__node_attr_remote; + } + + if (pcmk__str_eq(options.set_type, XML_TAG_UTILIZATION, pcmk__str_none)) { + options.attr_options |= pcmk__node_attr_utilization; + } + + if (try_ipc_update() && + (send_attrd_update(options.command, options.dest_uname, options.attr_name, + options.attr_value, options.set_name, NULL, options.attr_options) == pcmk_rc_ok)) { + crm_info("Update %s=%s sent via pacemaker-attrd", + options.attr_name, ((options.command == 'D')? "" : options.attr_value)); + + } else if (options.command == 'D') { + rc = command_delete(out, the_cib); + + } else if (options.command == 'u') { + rc = command_update(out, the_cib, is_remote_node); + + } else { + rc = command_query(out, the_cib); + } + + if (rc == ENOTUNIQ) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Please choose from one of the matches below and supply the 'id' with --attr-id"); + + } else if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error performing operation: %s", pcmk_strerror(rc)); + } + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + free(options.attr_default); + g_free(options.attr_id); + g_free(options.attr_name); + free(options.attr_value); + free(options.dest_node); + g_free(options.dest_uname); + g_free(options.set_name); + free(options.set_type); + g_free(options.type); + + cib__clean_up_connection(&the_cib); + + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + + pcmk__unregister_formats(); + return crm_exit(exit_code); +} diff --git a/tools/crm_diff.8.inc b/tools/crm_diff.8.inc new file mode 100644 index 0000000..4229cbf --- /dev/null +++ b/tools/crm_diff.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crm_diff original_xml operation [options] + +/as a patch/ +.SH OPTIONS diff --git a/tools/crm_diff.c b/tools/crm_diff.c new file mode 100644 index 0000000..efe2fcf --- /dev/null +++ b/tools/crm_diff.c @@ -0,0 +1,399 @@ +/* + * Copyright 2005-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include + +#define SUMMARY "Compare two Pacemaker configurations (in XML format) to produce a custom diff-like output, " \ + "or apply such an output as a patch" + +struct { + gboolean apply; + gboolean as_cib; + gboolean no_version; + gboolean raw_1; + gboolean raw_2; + gboolean use_stdin; + char *xml_file_1; + char *xml_file_2; +} options; + +gboolean new_string_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean original_string_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean patch_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); + +static GOptionEntry original_xml_entries[] = { + { "original", 'o', 0, G_OPTION_ARG_STRING, &options.xml_file_1, + "XML is contained in the named file", + "FILE" }, + { "original-string", 'O', 0, G_OPTION_ARG_CALLBACK, original_string_cb, + "XML is contained in the supplied string", + "STRING" }, + + { NULL } +}; + +static GOptionEntry operation_entries[] = { + { "new", 'n', 0, G_OPTION_ARG_STRING, &options.xml_file_2, + "Compare the original XML to the contents of the named file", + "FILE" }, + { "new-string", 'N', 0, G_OPTION_ARG_CALLBACK, new_string_cb, + "Compare the original XML with the contents of the supplied string", + "STRING" }, + { "patch", 'p', 0, G_OPTION_ARG_CALLBACK, patch_cb, + "Patch the original XML with the contents of the named file", + "FILE" }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "cib", 'c', 0, G_OPTION_ARG_NONE, &options.as_cib, + "Compare/patch the inputs as a CIB (includes versions details)", + NULL }, + { "stdin", 's', 0, G_OPTION_ARG_NONE, &options.use_stdin, + "", + NULL }, + { "no-version", 'u', 0, G_OPTION_ARG_NONE, &options.no_version, + "Generate the difference without versions details", + NULL }, + + { NULL } +}; + +gboolean +new_string_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.raw_2 = TRUE; + pcmk__str_update(&options.xml_file_2, optarg); + return TRUE; +} + +gboolean +original_string_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.raw_1 = TRUE; + pcmk__str_update(&options.xml_file_1, optarg); + return TRUE; +} + +gboolean +patch_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.apply = TRUE; + pcmk__str_update(&options.xml_file_2, optarg); + return TRUE; +} + +static void +print_patch(xmlNode *patch) +{ + char *buffer = dump_xml_formatted(patch); + + printf("%s", pcmk__s(buffer, "\n")); + free(buffer); + fflush(stdout); +} + +// \return Standard Pacemaker return code +static int +apply_patch(xmlNode *input, xmlNode *patch, gboolean as_cib) +{ + xmlNode *output = copy_xml(input); + int rc = xml_apply_patchset(output, patch, as_cib); + + rc = pcmk_legacy2rc(rc); + if (rc != pcmk_rc_ok) { + fprintf(stderr, "Could not apply patch: %s\n", pcmk_rc_str(rc)); + free_xml(output); + return rc; + } + + if (output != NULL) { + const char *version; + char *buffer; + + print_patch(output); + + version = crm_element_value(output, XML_ATTR_CRM_VERSION); + buffer = calculate_xml_versioned_digest(output, FALSE, TRUE, version); + crm_trace("Digest: %s", pcmk__s(buffer, "\n")); + free(buffer); + free_xml(output); + } + return pcmk_rc_ok; +} + +static void +log_patch_cib_versions(xmlNode *patch) +{ + int add[] = { 0, 0, 0 }; + int del[] = { 0, 0, 0 }; + + const char *fmt = NULL; + const char *digest = NULL; + + xml_patch_versions(patch, add, del); + fmt = crm_element_value(patch, "format"); + digest = crm_element_value(patch, XML_ATTR_DIGEST); + + if (add[2] != del[2] || add[1] != del[1] || add[0] != del[0]) { + crm_info("Patch: --- %d.%d.%d %s", del[0], del[1], del[2], fmt); + crm_info("Patch: +++ %d.%d.%d %s", add[0], add[1], add[2], digest); + } +} + +static void +strip_patch_cib_version(xmlNode *patch, const char **vfields, size_t nvfields) +{ + int format = 1; + + crm_element_value_int(patch, "format", &format); + if (format == 2) { + xmlNode *version_xml = find_xml_node(patch, "version", FALSE); + + if (version_xml) { + free_xml(version_xml); + } + + } else { + int i = 0; + + const char *tags[] = { + XML_TAG_DIFF_REMOVED, + XML_TAG_DIFF_ADDED, + }; + + for (i = 0; i < PCMK__NELEM(tags); i++) { + xmlNode *tmp = NULL; + int lpc; + + tmp = find_xml_node(patch, tags[i], FALSE); + if (tmp) { + for (lpc = 0; lpc < nvfields; lpc++) { + xml_remove_prop(tmp, vfields[lpc]); + } + + tmp = find_xml_node(tmp, XML_TAG_CIB, FALSE); + if (tmp) { + for (lpc = 0; lpc < nvfields; lpc++) { + xml_remove_prop(tmp, vfields[lpc]); + } + } + } + } + } +} + +// \return Standard Pacemaker return code +static int +generate_patch(xmlNode *object_1, xmlNode *object_2, const char *xml_file_2, + gboolean as_cib, gboolean no_version) +{ + xmlNode *output = NULL; + int rc = pcmk_rc_ok; + + pcmk__output_t *logger_out = NULL; + int out_rc = pcmk_rc_no_output; + int temp_rc = pcmk_rc_no_output; + + const char *vfields[] = { + XML_ATTR_GENERATION_ADMIN, + XML_ATTR_GENERATION, + XML_ATTR_NUMUPDATES, + }; + + rc = pcmk__log_output_new(&logger_out); + CRM_CHECK(rc == pcmk_rc_ok, return rc); + + /* If we're ignoring the version, make the version information + * identical, so it isn't detected as a change. */ + if (no_version) { + int lpc; + + for (lpc = 0; lpc < PCMK__NELEM(vfields); lpc++) { + crm_copy_xml_element(object_1, object_2, vfields[lpc]); + } + } + + xml_track_changes(object_2, NULL, object_2, FALSE); + if(as_cib) { + xml_calculate_significant_changes(object_1, object_2); + } else { + xml_calculate_changes(object_1, object_2); + } + crm_log_xml_debug(object_2, (xml_file_2? xml_file_2: "target")); + + output = xml_create_patchset(0, object_1, object_2, NULL, FALSE); + + pcmk__output_set_log_level(logger_out, LOG_INFO); + out_rc = pcmk__xml_show_changes(logger_out, object_2); + + xml_accept_changes(object_2); + + if (output == NULL) { + goto done; // rc == pcmk_rc_ok + } + + /* pcmk_rc_error means there's non-empty diff. + * @COMPAT: Choose a more descriptive return code, like one that maps to + * CRM_EX_DIGEST? + */ + rc = pcmk_rc_error; + + patchset_process_digest(output, object_1, object_2, as_cib); + + if (as_cib) { + log_patch_cib_versions(output); + + } else if (no_version) { + strip_patch_cib_version(output, vfields, PCMK__NELEM(vfields)); + } + + pcmk__output_set_log_level(logger_out, LOG_NOTICE); + temp_rc = logger_out->message(logger_out, "xml-patchset", output); + out_rc = pcmk__output_select_rc(out_rc, temp_rc); + + print_patch(output); + free_xml(output); + +done: + logger_out->finish(logger_out, pcmk_rc2exitc(out_rc), true, NULL); + pcmk__output_free(logger_out); + + return rc; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args) { + GOptionContext *context = NULL; + + const char *description = "Examples:\n\n" + "Obtain the two different configuration files by running cibadmin on the two cluster setups to compare:\n\n" + "\t# cibadmin --query > cib-old.xml\n\n" + "\t# cibadmin --query > cib-new.xml\n\n" + "Calculate and save the difference between the two files:\n\n" + "\t# crm_diff --original cib-old.xml --new cib-new.xml > patch.xml\n\n" + "Apply the patch to the original file:\n\n" + "\t# crm_diff --original cib-old.xml --patch patch.xml > updated.xml\n\n" + "Apply the patch to the running cluster:\n\n" + "\t# cibadmin --patch -x patch.xml\n"; + + context = pcmk__build_arg_context(args, NULL, NULL, NULL); + g_option_context_set_description(context, description); + + pcmk__add_arg_group(context, "xml", "Original XML:", + "Show original XML options", original_xml_entries); + pcmk__add_arg_group(context, "operation", "Operation:", + "Show operation options", operation_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +int +main(int argc, char **argv) +{ + xmlNode *object_1 = NULL; + xmlNode *object_2 = NULL; + + crm_exit_t exit_code = CRM_EX_OK; + GError *error = NULL; + + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "nopNO"); + GOptionContext *context = build_arg_context(args); + + int rc = pcmk_rc_ok; + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_diff", args->verbosity); + + if (args->version) { + g_strfreev(processed_args); + pcmk__free_arg_context(context); + /* FIXME: When crm_diff is converted to use formatted output, this can go. */ + pcmk__cli_help('v'); + } + + if (options.apply && options.no_version) { + fprintf(stderr, "warning: -u/--no-version ignored with -p/--patch\n"); + } else if (options.as_cib && options.no_version) { + fprintf(stderr, "error: -u/--no-version incompatible with -c/--cib\n"); + exit_code = CRM_EX_USAGE; + goto done; + } + + if (options.raw_1) { + object_1 = string2xml(options.xml_file_1); + + } else if (options.use_stdin) { + fprintf(stderr, "Input first XML fragment:"); + object_1 = stdin2xml(); + + } else if (options.xml_file_1 != NULL) { + object_1 = filename2xml(options.xml_file_1); + } + + if (options.raw_2) { + object_2 = string2xml(options.xml_file_2); + + } else if (options.use_stdin) { + fprintf(stderr, "Input second XML fragment:"); + object_2 = stdin2xml(); + + } else if (options.xml_file_2 != NULL) { + object_2 = filename2xml(options.xml_file_2); + } + + if (object_1 == NULL) { + fprintf(stderr, "Could not parse the first XML fragment\n"); + exit_code = CRM_EX_DATAERR; + goto done; + } + if (object_2 == NULL) { + fprintf(stderr, "Could not parse the second XML fragment\n"); + exit_code = CRM_EX_DATAERR; + goto done; + } + + if (options.apply) { + rc = apply_patch(object_1, object_2, options.as_cib); + } else { + rc = generate_patch(object_1, object_2, options.xml_file_2, options.as_cib, options.no_version); + } + exit_code = pcmk_rc2exitc(rc); + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + free(options.xml_file_1); + free(options.xml_file_2); + free_xml(object_1); + free_xml(object_2); + + pcmk__output_and_clear_error(&error, NULL); + crm_exit(exit_code); +} diff --git a/tools/crm_error.8.inc b/tools/crm_error.8.inc new file mode 100644 index 0000000..7ef0440 --- /dev/null +++ b/tools/crm_error.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crm_error [options] -- [...] + +/Pacemaker error code/ +.SH OPTIONS diff --git a/tools/crm_error.c b/tools/crm_error.c new file mode 100644 index 0000000..8911eae --- /dev/null +++ b/tools/crm_error.c @@ -0,0 +1,175 @@ +/* + * Copyright 2012-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include +#include +#include +#include +#include + +#include + +#include + +#define SUMMARY "crm_error - display name or description of a Pacemaker error code" + +struct { + gboolean with_name; + gboolean do_list; + enum pcmk_result_type result_type; // How to interpret result codes +} options = { + .result_type = pcmk_result_legacy, +}; + +static gboolean +result_type_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + if (pcmk__str_any_of(option_name, "--exit", "-X", NULL)) { + options.result_type = pcmk_result_exitcode; + } else if (pcmk__str_any_of(option_name, "--rc", "-r", NULL)) { + options.result_type = pcmk_result_rc; + } + + return TRUE; +} + +static GOptionEntry entries[] = { + { "name", 'n', 0, G_OPTION_ARG_NONE, &options.with_name, + "Show error's name with its description (useful for looking for sources " + "of the error in source code)", + NULL }, + { "list", 'l', 0, G_OPTION_ARG_NONE, &options.do_list, + "Show all known errors (enabled by default if no rc is specified)", + NULL }, + { "exit", 'X', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, result_type_cb, + "Interpret as exit code rather than legacy function return value", + NULL }, + { "rc", 'r', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, result_type_cb, + "Interpret as return code rather than legacy function return value", + NULL }, + + { NULL } +}; + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + context = pcmk__build_arg_context(args, "text (default), xml", group, + "[-- [...]]"); + pcmk__add_main_args(context, entries); + return context; +} + +int +main(int argc, char **argv) +{ + crm_exit_t exit_code = CRM_EX_OK; + int rc = pcmk_rc_ok; + + pcmk__output_t *out = NULL; + + GError *error = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, NULL); + GOptionContext *context = build_arg_context(args, &output_group); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_error", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error creating output format %s: %s", args->output_ty, + pcmk_rc_str(rc)); + goto done; + } + + if (g_strv_length(processed_args) < 2) { + // If no result codes were specified, list them all + options.do_list = TRUE; + } + + if (args->version) { + out->version(out, false); + goto done; + } + + pcmk__register_lib_messages(out); + + if (options.do_list) { + uint32_t flags = pcmk_rc_disp_code|pcmk_rc_disp_desc; + + if (options.with_name) { + flags = pcmk__set_flags_as(__func__, __LINE__, LOG_TRACE, + "pcmk_rc_disp_flags", + "pcmk__list_result_codes", flags, + pcmk_rc_disp_name, "pcmk_rc_disp_name"); + } + pcmk__list_result_codes(out, options.result_type, flags); + + } else { + uint32_t flags = pcmk_rc_disp_desc; + + // For text output, print only "[name -] description" by default + if (args->verbosity > 0) { + flags = pcmk__set_flags_as(__func__, __LINE__, LOG_TRACE, + "pcmk_rc_disp_flags", + "pcmk__show_result_code", flags, + pcmk_rc_disp_code, "pcmk_rc_disp_code"); + } + + if (options.with_name) { + flags = pcmk__set_flags_as(__func__, __LINE__, LOG_TRACE, + "pcmk_rc_disp_flags", + "pcmk__show_result_code", flags, + pcmk_rc_disp_name, "pcmk_rc_disp_name"); + } + + /* Skip #1 because that's the program name. */ + for (int lpc = 1; processed_args[lpc] != NULL; lpc++) { + int code = 0; + + if (pcmk__str_eq(processed_args[lpc], "--", pcmk__str_none)) { + continue; + } + pcmk__scan_min_int(processed_args[lpc], &code, INT_MIN); + pcmk__show_result_code(out, code, options.result_type, flags); + } + } + + done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + pcmk__unregister_formats(); + crm_exit(exit_code); +} diff --git a/tools/crm_failcount.in b/tools/crm_failcount.in new file mode 100755 index 0000000..f70fe78 --- /dev/null +++ b/tools/crm_failcount.in @@ -0,0 +1,294 @@ +#!@BASH_PATH@ +# +# Copyright 2009-2018 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +USAGE_TEXT="Usage: crm_failcount [] +Common options: + --help Display this text, then exit + --version Display version information, then exit + -V, --verbose Specify multiple times to increase debug output + -q, --quiet Print only the value (if querying) + +Commands: + -G, --query Query the current value of the resource's fail count + -D, --delete Delete resource's recorded failures + +Additional Options: + -r, --resource=value Name of the resource to use (required) + -n, --operation=value Name of operation to use (instead of all operations) + -I, --interval=value If operation is specified, its interval + -N, --node=value Use failcount on named node (instead of local node)" + + +HELP_TEXT="crm_failcount - Query or delete resource fail counts + +$USAGE_TEXT" + +# These constants must track crm_exit_t values +CRM_EX_OK=0 +CRM_EX_USAGE=64 +CRM_EX_NOSUCH=105 + +exit_usage() { + if [ $# -gt 0 ]; then + echo "error:" "$@" >&2 + fi + echo + echo "$USAGE_TEXT" + exit $CRM_EX_USAGE +} + +warn() { + echo "warning:" "$@" >&2 +} + +interval_re() { + echo "^[[:blank:]]*([0-9]+)[[:blank:]]*(${1})[[:blank:]]*$" +} + +# This function should follow crm_get_interval() as closely as possible +parse_interval() { + INT_S="$1" + + INT_8601RE="^P(([0-9]+)Y)?(([0-9]+)M)?(([0-9]+)D)?T?(([0-9]+)H)?(([0-9]+)M)?(([0-9]+)S)?$" + + if [[ $INT_S =~ $(interval_re "") ]]; then + echo $(( ${BASH_REMATCH[1]} * 1000 )) + + elif [[ $INT_S =~ $(interval_re "s|sec") ]]; then + echo $(( ${BASH_REMATCH[1]} * 1000 )) + + elif [[ $INT_S =~ $(interval_re "ms|msec") ]]; then + echo "${BASH_REMATCH[1]}" + + elif [[ $INT_S =~ $(interval_re "m|min") ]]; then + echo $(( ${BASH_REMATCH[1]} * 60000 )) + + elif [[ $INT_S =~ $(interval_re "h|hr") ]]; then + echo $(( ${BASH_REMATCH[1]} * 3600000 )) + + elif [[ $INT_S =~ $(interval_re "us|usec") ]]; then + echo $(( ${BASH_REMATCH[1]} / 1000 )) + + elif [[ $INT_S =~ ^P([0-9]+)W$ ]]; then + echo $(( ${BASH_REMATCH[1]} * 604800000 )) + + elif [[ $INT_S =~ $INT_8601RE ]]; then + echo $(( ( ${BASH_REMATCH[2]:-0} * 31536000000 ) \ + + ( ${BASH_REMATCH[4]:-0} * 2592000000 ) \ + + ( ${BASH_REMATCH[6]:-0} * 86400000 ) \ + + ( ${BASH_REMATCH[8]:-0} * 3600000 ) \ + + ( ${BASH_REMATCH[10]:-0} * 60000 ) \ + + ( ${BASH_REMATCH[12]:-0} * 1000 ) )) + + else + warn "Unrecognized interval, using 0" + echo "0" + fi +} + +query_single_attr() { + QSR_TARGET="$1" + QSR_ATTR="$2" + + crm_attribute $VERBOSE --quiet --query -t status -d 0 \ + -N "$QSR_TARGET" -n "$QSR_ATTR" +} + +query_attr_sum() { + QAS_TARGET="$1" + QAS_PREFIX="$2" + + # Build xpath to match all transient node attributes with prefix + QAS_XPATH="/cib/status/node_state[@uname='${QAS_TARGET}']" + QAS_XPATH="${QAS_XPATH}/transient_attributes/instance_attributes" + QAS_XPATH="${QAS_XPATH}/nvpair[starts-with(@name,'$QAS_PREFIX')]" + + # Query attributes that match xpath + # @TODO We ignore stderr because we don't want "no results" to look + # like an error, but that also makes $VERBOSE pointless. + QAS_ALL=$(cibadmin --query --sync-call --local \ + --xpath="$QAS_XPATH" 2>/dev/null) + QAS_EX=$? + + # "No results" is not an error + if [ $QAS_EX -ne $CRM_EX_OK ] && [ $QAS_EX -ne $CRM_EX_NOSUCH ]; then + echo "error: could not query CIB for fail counts" >&2 + exit $QAS_EX + fi + + # Extract the attribute values (one per line) from the output + QAS_VALUE=$(echo "$QAS_ALL" | sed -n -e \ + 's/.*.*/\1/p') + + # Sum the values + QAS_SUM=0 + for i in 0 $QAS_VALUE; do + if [ "$i" = "INFINITY" ]; then + QAS_SUM="INFINITY" + break + else + QAS_SUM=$(($QAS_SUM + $i)) + fi + done + if [ "$QAS_SUM" = "INFINITY" ]; then + echo $QAS_SUM + elif [ "$QAS_SUM" -ge 1000000 ]; then + echo "INFINITY" + else + echo $QAS_SUM + fi +} + +query_failcount() { + QF_TARGET="$1" + QF_RESOURCE="$2" + QF_OPERATION="$3" + QF_INTERVAL="$4" + + QF_ATTR_RSC="fail-count-${QF_RESOURCE}" + + if [ -n "$QF_OPERATION" ]; then + QF_ATTR_DISPLAY="${QF_ATTR_RSC}#${QF_OPERATION}_${QF_INTERVAL}" + QF_COUNT=$(query_single_attr "$QF_TARGET" "$QF_ATTR_DISPLAY") + else + QF_ATTR_DISPLAY="$QF_ATTR_RSC" + QF_COUNT=$(query_attr_sum "$QF_TARGET" "${QF_ATTR_RSC}#") + fi + + # @COMPAT attributes set < 1.1.17: + # If we didn't find any per-operation failcount, + # check whether there is a legacy per-resource failcount. + if [ "$QF_COUNT" = "0" ]; then + QF_COUNT=$(query_single_attr "$QF_TARGET" "$QF_ATTR_RSC") + if [ "$QF_COUNT" != "0" ]; then + QF_ATTR_DISPLAY="$QF_ATTR_RSC" + fi + fi + + # Echo result (comparable to crm_attribute, for backward compatibility) + if [ -n "$QUIET" ]; then + echo $QF_COUNT + else + echo "scope=status name=$QF_ATTR_DISPLAY value=$QF_COUNT" + fi +} + +clear_failcount() { + CF_TARGET="$1" + CF_RESOURCE="$2" + CF_OPERATION="$3" + CF_INTERVAL="$4" + + if [ -n "$CF_OPERATION" ]; then + CF_OPERATION="-n $CF_OPERATION -I ${CF_INTERVAL}ms" + fi + crm_resource $QUIET $VERBOSE --cleanup \ + -N "$CF_TARGET" -r "$CF_RESOURCE" $CF_OPERATION +} + +QUIET="" +VERBOSE="" + +command="" +resource="" +operation="" +interval="0" +target=$(crm_node -n 2>/dev/null) + +SHORTOPTS="qDGQVN:U:v:i:l:r:n:I:" + +LONGOPTS_COMMON="help,version,verbose,quiet" +LONGOPTS_COMMANDS="query,delete" +LONGOPTS_OTHER="resource:,node:,operation:,interval:" +LONGOPTS_COMPAT="delete-attr,get-value,resource-id:,uname:,lifetime:,attr-value:,attr-id:" + +LONGOPTS="$LONGOPTS_COMMON,$LONGOPTS_COMMANDS,$LONGOPTS_OTHER,$LONGOPTS_COMPAT" + +TEMP=$(@GETOPT_PATH@ -o $SHORTOPTS --long $LONGOPTS -n crm_failcount -- "$@") +if [ $? -ne 0 ]; then + exit_usage +fi +eval set -- "$TEMP" # Quotes around $TEMP are essential + +while true ; do + case "$1" in + --help) + echo "$HELP_TEXT" + exit $CRM_EX_OK + ;; + --version) + crm_attribute --version + exit $? + ;; + -q|-Q|--quiet) + QUIET="--quiet" + shift + ;; + -V|--verbose) + VERBOSE="$VERBOSE $1" + shift + ;; + -G|--query|--get-value) + command="--query" + shift + ;; + -D|--delete|--delete-attr) + command="--delete" + shift + ;; + -r|--resource|--resource-id) + resource="$2" + shift 2 + ;; + -n|--operation) + operation="$2" + shift 2 + ;; + -I|--interval) + interval="$2" + shift 2 + ;; + -N|--node|-U|--uname) + target="$2" + shift 2 + ;; + -v|--attr-value) + if [ "$2" = "0" ]; then + command="--delete" + else + warn "ignoring deprecated option '$1' with nonzero value" + fi + shift 2 + ;; + -i|--attr-id|-l|--lifetime) + warn "ignoring deprecated option '$1'" + shift 2 + ;; + --) + shift + break + ;; + *) + exit_usage "unknown option '$1'" + ;; + esac +done + +[ -n "$command" ] || exit_usage "must specify a command" +[ -n "$resource" ] || exit_usage "resource name required" +[ -n "$target" ] || exit_usage "node name required" + +interval=$(parse_interval $interval) + +if [ "$command" = "--query" ]; then + query_failcount "$target" "$resource" "$operation" "$interval" +else + clear_failcount "$target" "$resource" "$operation" "$interval" +fi diff --git a/tools/crm_master.in b/tools/crm_master.in new file mode 100755 index 0000000..a4769f4 --- /dev/null +++ b/tools/crm_master.in @@ -0,0 +1,92 @@ +#!@BASH_PATH@ +# +# Copyright 2009-2021 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +USAGE_TEXT="Usage: crm_master [] + +This command is deprecated. Use crm_attribute with the --promotion option +instead." + +exit_usage() { + if [ $# -gt 0 ]; then + echo "error:" "$@" >&2 + fi + echo + echo "$USAGE_TEXT" + exit 1 +} + +SHORTOPTS_DEPRECATED="U:Q" +LONGOPTS_DEPRECATED="uname:,get-value,delete-attr,attr-value:,attr-id:" +SHORTOPTS="VqGv:DN:l:i:r:" +LONGOPTS="help,version,verbose,quiet,query,update:,delete,node:,lifetime:,id:,resource:" + +TEMP=$(@GETOPT_PATH@ -o ${SHORTOPTS}${SHORTOPTS_DEPRECATED} \ + --long ${LONGOPTS},${LONGOPTS_DEPRECATED} \ + -n crm_master -- "$@") +if [ $? -ne 0 ]; then + exit_usage +fi + +eval set -- "$TEMP" # Quotes around $TEMP are essential + +# Explicitly set the (usual default) lifetime, so the attribute gets set as a +# node attribute and not a cluster property. +options="--lifetime forever" + +while true ; do + case "$1" in + --help) + echo "crm_master - Query, update, or delete a resource's promotion score" + echo + echo "$USAGE_TEXT" + exit 0 + ;; + --version) + crm_attribute --version + exit 0 + ;; + --verbose|-V|--quiet|-q|--query|-G|--delete|-D) + options="$options $1" + shift + ;; + --update|-v|--node|-N|--lifetime|-l|--id|-i) + options="$options $1 $2" + shift + shift + ;; + -r|--resource) + OCF_RESOURCE_INSTANCE=$2; + shift + shift + ;; + --get-value|--delete-attr|-Q) # deprecated + options="$options $1" + shift + ;; + --uname|-U|--attr-value|--attr-id) # deprecated + options="$options $1 $2" + shift + shift + ;; + --) + shift + break + ;; + *) + exit_usage "unknown option '$1'" + ;; + esac +done + +if [ -z "$OCF_RESOURCE_INSTANCE" ]; then + exit_usage "No resource specified" +fi + +crm_attribute -n master-$OCF_RESOURCE_INSTANCE $options diff --git a/tools/crm_mon.8.inc b/tools/crm_mon.8.inc new file mode 100644 index 0000000..4bc2d82 --- /dev/null +++ b/tools/crm_mon.8.inc @@ -0,0 +1,17 @@ +[synopsis] +crm_mon [options] + +/number of different formats/ +.SH OPTIONS + +/less descriptive in output./ +.SH NOTES + +/period specification./ +.SH OUTPUT CONTROL + +/command line arguments./ +.SH TIME SPECIFICATION + +/or --exclude=list./ +.SH INTERACTIVE USE diff --git a/tools/crm_mon.c b/tools/crm_mon.c new file mode 100644 index 0000000..c20766c --- /dev/null +++ b/tools/crm_mon.c @@ -0,0 +1,2287 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include + +#include + +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include // pcmk__ends_with_ext() +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include + +#include "crm_mon.h" + +#define SUMMARY "Provides a summary of cluster's current state.\n\n" \ + "Outputs varying levels of detail in a number of different formats." + +/* + * Definitions indicating which items to print + */ + +static uint32_t show; +static uint32_t show_opts = pcmk_show_pending; + +/* + * Definitions indicating how to output + */ + +static mon_output_format_t output_format = mon_output_unset; + +/* other globals */ +static GIOChannel *io_channel = NULL; +static GMainLoop *mainloop = NULL; +static guint reconnect_timer = 0; +static mainloop_timer_t *refresh_timer = NULL; + +static enum pcmk_pacemakerd_state pcmkd_state = pcmk_pacemakerd_state_invalid; +static cib_t *cib = NULL; +static stonith_t *st = NULL; +static xmlNode *current_cib = NULL; + +static GError *error = NULL; +static pcmk__common_args_t *args = NULL; +static pcmk__output_t *out = NULL; +static GOptionContext *context = NULL; +static gchar **processed_args = NULL; + +static time_t last_refresh = 0; +volatile crm_trigger_t *refresh_trigger = NULL; + +static enum pcmk__fence_history fence_history = pcmk__fence_history_none; + +int interactive_fence_level = 0; + +static pcmk__supported_format_t formats[] = { +#if CURSES_ENABLED + CRM_MON_SUPPORTED_FORMAT_CURSES, +#endif + PCMK__SUPPORTED_FORMAT_HTML, + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +PCMK__OUTPUT_ARGS("crm-mon-disconnected", "const char *", + "enum pcmk_pacemakerd_state") +static int +crm_mon_disconnected_default(pcmk__output_t *out, va_list args) +{ + return pcmk_rc_no_output; +} + +PCMK__OUTPUT_ARGS("crm-mon-disconnected", "const char *", + "enum pcmk_pacemakerd_state") +static int +crm_mon_disconnected_html(pcmk__output_t *out, va_list args) +{ + const char *desc = va_arg(args, const char *); + enum pcmk_pacemakerd_state state = + (enum pcmk_pacemakerd_state) va_arg(args, int); + + if (out->dest != stdout) { + out->reset(out); + } + + pcmk__output_create_xml_text_node(out, "span", "Not connected to CIB"); + + if (desc != NULL) { + pcmk__output_create_xml_text_node(out, "span", ": "); + pcmk__output_create_xml_text_node(out, "span", desc); + } + + if (state != pcmk_pacemakerd_state_invalid) { + const char *state_s = pcmk__pcmkd_state_enum2friendly(state); + + pcmk__output_create_xml_text_node(out, "span", " ("); + pcmk__output_create_xml_text_node(out, "span", state_s); + pcmk__output_create_xml_text_node(out, "span", ")"); + } + + out->finish(out, CRM_EX_DISCONNECT, true, NULL); + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("crm-mon-disconnected", "const char *", + "enum pcmk_pacemakerd_state") +static int +crm_mon_disconnected_text(pcmk__output_t *out, va_list args) +{ + const char *desc = va_arg(args, const char *); + enum pcmk_pacemakerd_state state = + (enum pcmk_pacemakerd_state) va_arg(args, int); + int rc = pcmk_rc_ok; + + if (out->dest != stdout) { + out->reset(out); + } + + if (state != pcmk_pacemakerd_state_invalid) { + rc = out->info(out, "Not connected to CIB%s%s (%s)", + (desc != NULL)? ": " : "", pcmk__s(desc, ""), + pcmk__pcmkd_state_enum2friendly(state)); + } else { + rc = out->info(out, "Not connected to CIB%s%s", + (desc != NULL)? ": " : "", pcmk__s(desc, "")); + } + + out->finish(out, CRM_EX_DISCONNECT, true, NULL); + return rc; +} + +PCMK__OUTPUT_ARGS("crm-mon-disconnected", "const char *", + "enum pcmk_pacemakerd_state") +static int +crm_mon_disconnected_xml(pcmk__output_t *out, va_list args) +{ + const char *desc = va_arg(args, const char *); + enum pcmk_pacemakerd_state state = + (enum pcmk_pacemakerd_state) va_arg(args, int); + const char *state_s = NULL; + + if (out->dest != stdout) { + out->reset(out); + } + + if (state != pcmk_pacemakerd_state_invalid) { + state_s = pcmk_pacemakerd_api_daemon_state_enum2text(state); + } + + pcmk__output_create_xml_node(out, "crm-mon-disconnected", + XML_ATTR_DESC, desc, + "pacemakerd-state", state_s, + NULL); + + out->finish(out, CRM_EX_DISCONNECT, true, NULL); + return pcmk_rc_ok; +} + +static pcmk__message_entry_t fmt_functions[] = { + { "crm-mon-disconnected", "default", crm_mon_disconnected_default }, + { "crm-mon-disconnected", "html", crm_mon_disconnected_html }, + { "crm-mon-disconnected", "text", crm_mon_disconnected_text }, + { "crm-mon-disconnected", "xml", crm_mon_disconnected_xml }, + { NULL, NULL, NULL }, +}; + +/* Define exit codes for monitoring-compatible output + * For nagios plugins, the possibilities are + * OK=0, WARN=1, CRIT=2, and UNKNOWN=3 + */ +#define MON_STATUS_WARN CRM_EX_ERROR +#define MON_STATUS_CRIT CRM_EX_INVALID_PARAM +#define MON_STATUS_UNKNOWN CRM_EX_UNIMPLEMENT_FEATURE + +#define RECONNECT_MSECS 5000 + +struct { + guint reconnect_ms; + enum mon_exec_mode exec_mode; + gboolean fence_connect; + gboolean print_pending; + gboolean show_bans; + gboolean watch_fencing; + char *pid_file; + char *external_agent; + char *external_recipient; + char *neg_location_prefix; + char *only_node; + char *only_rsc; + GSList *user_includes_excludes; + GSList *includes_excludes; +} options = { + .reconnect_ms = RECONNECT_MSECS, + .exec_mode = mon_exec_unset, + .fence_connect = TRUE, +}; + +static crm_exit_t clean_up(crm_exit_t exit_code); +static void crm_diff_update(const char *event, xmlNode * msg); +static void clean_up_on_connection_failure(int rc); +static int mon_refresh_display(gpointer user_data); +static int setup_cib_connection(void); +static int setup_fencer_connection(void); +static int setup_api_connections(void); +static void mon_st_callback_event(stonith_t * st, stonith_event_t * e); +static void mon_st_callback_display(stonith_t * st, stonith_event_t * e); +static void refresh_after_event(gboolean data_updated, gboolean enforce); + +static uint32_t +all_includes(mon_output_format_t fmt) { + if (fmt == mon_output_monitor || fmt == mon_output_plain || fmt == mon_output_console) { + return ~pcmk_section_options; + } else { + return pcmk_section_all; + } +} + +static uint32_t +default_includes(mon_output_format_t fmt) { + switch (fmt) { + case mon_output_monitor: + case mon_output_plain: + case mon_output_console: + case mon_output_html: + case mon_output_cgi: + return pcmk_section_summary + |pcmk_section_nodes + |pcmk_section_resources + |pcmk_section_failures; + + case mon_output_xml: + return all_includes(fmt); + + default: + return 0; + } +} + +struct { + const char *name; + uint32_t bit; +} sections[] = { + { "attributes", pcmk_section_attributes }, + { "bans", pcmk_section_bans }, + { "counts", pcmk_section_counts }, + { "dc", pcmk_section_dc }, + { "failcounts", pcmk_section_failcounts }, + { "failures", pcmk_section_failures }, + { PCMK__VALUE_FENCING, pcmk_section_fencing_all }, + { "fencing-failed", pcmk_section_fence_failed }, + { "fencing-pending", pcmk_section_fence_pending }, + { "fencing-succeeded", pcmk_section_fence_worked }, + { "maint-mode", pcmk_section_maint_mode }, + { "nodes", pcmk_section_nodes }, + { "operations", pcmk_section_operations }, + { "options", pcmk_section_options }, + { "resources", pcmk_section_resources }, + { "stack", pcmk_section_stack }, + { "summary", pcmk_section_summary }, + { "tickets", pcmk_section_tickets }, + { "times", pcmk_section_times }, + { NULL } +}; + +static uint32_t +find_section_bit(const char *name) { + for (int i = 0; sections[i].name != NULL; i++) { + if (pcmk__str_eq(sections[i].name, name, pcmk__str_casei)) { + return sections[i].bit; + } + } + + return 0; +} + +static gboolean +apply_exclude(const gchar *excludes, GError **error) { + char **parts = NULL; + gboolean result = TRUE; + + parts = g_strsplit(excludes, ",", 0); + for (char **s = parts; *s != NULL; s++) { + uint32_t bit = find_section_bit(*s); + + if (pcmk__str_eq(*s, "all", pcmk__str_none)) { + show = 0; + } else if (pcmk__str_eq(*s, PCMK__VALUE_NONE, pcmk__str_none)) { + show = all_includes(output_format); + } else if (bit != 0) { + show &= ~bit; + } else { + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "--exclude options: all, attributes, bans, counts, dc, " + "failcounts, failures, fencing, fencing-failed, " + "fencing-pending, fencing-succeeded, maint-mode, nodes, " + PCMK__VALUE_NONE ", operations, options, resources, " + "stack, summary, tickets, times"); + result = FALSE; + break; + } + } + g_strfreev(parts); + return result; +} + +static gboolean +apply_include(const gchar *includes, GError **error) { + char **parts = NULL; + gboolean result = TRUE; + + parts = g_strsplit(includes, ",", 0); + for (char **s = parts; *s != NULL; s++) { + uint32_t bit = find_section_bit(*s); + + if (pcmk__str_eq(*s, "all", pcmk__str_none)) { + show = all_includes(output_format); + } else if (pcmk__starts_with(*s, "bans")) { + show |= pcmk_section_bans; + if (options.neg_location_prefix != NULL) { + free(options.neg_location_prefix); + options.neg_location_prefix = NULL; + } + + if (strlen(*s) > 4 && (*s)[4] == ':') { + options.neg_location_prefix = strdup(*s+5); + } + } else if (pcmk__str_any_of(*s, "default", "defaults", NULL)) { + show |= default_includes(output_format); + } else if (pcmk__str_eq(*s, PCMK__VALUE_NONE, pcmk__str_none)) { + show = 0; + } else if (bit != 0) { + show |= bit; + } else { + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "--include options: all, attributes, bans[:PREFIX], counts, dc, " + "default, failcounts, failures, fencing, fencing-failed, " + "fencing-pending, fencing-succeeded, maint-mode, nodes, " + PCMK__VALUE_NONE ", operations, options, resources, " + "stack, summary, tickets, times"); + result = FALSE; + break; + } + } + g_strfreev(parts); + return result; +} + +static gboolean +apply_include_exclude(GSList *lst, GError **error) { + gboolean rc = TRUE; + GSList *node = lst; + + while (node != NULL) { + char *s = node->data; + + if (pcmk__starts_with(s, "--include=")) { + rc = apply_include(s+10, error); + } else if (pcmk__starts_with(s, "-I=")) { + rc = apply_include(s+3, error); + } else if (pcmk__starts_with(s, "--exclude=")) { + rc = apply_exclude(s+10, error); + } else if (pcmk__starts_with(s, "-U=")) { + rc = apply_exclude(s+3, error); + } + + if (rc != TRUE) { + break; + } + + node = node->next; + } + + return rc; +} + +static gboolean +user_include_exclude_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + char *s = crm_strdup_printf("%s=%s", option_name, optarg); + + options.user_includes_excludes = g_slist_append(options.user_includes_excludes, s); + return TRUE; +} + +static gboolean +include_exclude_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + char *s = crm_strdup_printf("%s=%s", option_name, optarg); + + options.includes_excludes = g_slist_append(options.includes_excludes, s); + return TRUE; +} + +static gboolean +as_cgi_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&args->output_ty, "html"); + output_format = mon_output_cgi; + options.exec_mode = mon_exec_one_shot; + return TRUE; +} + +static gboolean +as_html_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&args->output_dest, optarg); + pcmk__str_update(&args->output_ty, "html"); + output_format = mon_output_html; + umask(S_IWGRP | S_IWOTH); // World-readable HTML + return TRUE; +} + +static gboolean +as_simple_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&args->output_ty, "text"); + output_format = mon_output_monitor; + options.exec_mode = mon_exec_one_shot; + return TRUE; +} + +static gboolean +as_xml_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&args->output_ty, "xml"); + output_format = mon_output_legacy_xml; + return TRUE; +} + +static gboolean +fence_history_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (optarg == NULL) { + interactive_fence_level = 2; + } else { + pcmk__scan_min_int(optarg, &interactive_fence_level, 0); + } + + switch (interactive_fence_level) { + case 3: + options.fence_connect = TRUE; + fence_history = pcmk__fence_history_full; + return include_exclude_cb("--include", PCMK__VALUE_FENCING, data, + err); + + case 2: + options.fence_connect = TRUE; + fence_history = pcmk__fence_history_full; + return include_exclude_cb("--include", PCMK__VALUE_FENCING, data, + err); + + case 1: + options.fence_connect = TRUE; + fence_history = pcmk__fence_history_full; + return include_exclude_cb("--include", "fencing-failed,fencing-pending", data, err); + + case 0: + options.fence_connect = FALSE; + fence_history = pcmk__fence_history_none; + return include_exclude_cb("--exclude", PCMK__VALUE_FENCING, data, + err); + + default: + g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "Fence history must be 0-3"); + return FALSE; + } +} + +static gboolean +group_by_node_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + show_opts |= pcmk_show_rscs_by_node; + return TRUE; +} + +static gboolean +hide_headers_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + return user_include_exclude_cb("--exclude", "summary", data, err); +} + +static gboolean +inactive_resources_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + show_opts |= pcmk_show_inactive_rscs; + return TRUE; +} + +static gboolean +no_curses_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&args->output_ty, "text"); + output_format = mon_output_plain; + return TRUE; +} + +static gboolean +print_brief_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + show_opts |= pcmk_show_brief; + return TRUE; +} + +static gboolean +print_detail_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + show_opts |= pcmk_show_details; + return TRUE; +} + +static gboolean +print_description_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + show_opts |= pcmk_show_description; + return TRUE; +} + +static gboolean +print_timing_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + show_opts |= pcmk_show_timing; + return user_include_exclude_cb("--include", "operations", data, err); +} + +static gboolean +reconnect_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + int rc = crm_get_msec(optarg); + + if (rc == -1) { + g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "Invalid value for -i: %s", optarg); + return FALSE; + } else { + options.reconnect_ms = crm_parse_interval_spec(optarg); + + if (options.exec_mode != mon_exec_daemonized) { + // Reconnect interval applies to daemonized too, so don't override + options.exec_mode = mon_exec_update; + } + } + + return TRUE; +} + +/*! + * \internal + * \brief Enable one-shot mode + * + * \param[in] option_name Name of option being parsed (ignored) + * \param[in] optarg Value to be parsed (ignored) + * \param[in] data User data (ignored) + * \param[out] err Where to store error (ignored) + */ +static gboolean +one_shot_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **err) +{ + options.exec_mode = mon_exec_one_shot; + return TRUE; +} + +/*! + * \internal + * \brief Enable daemonized mode + * + * \param[in] option_name Name of option being parsed (ignored) + * \param[in] optarg Value to be parsed (ignored) + * \param[in] data User data (ignored) + * \param[out] err Where to store error (ignored) + */ +static gboolean +daemonize_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **err) +{ + options.exec_mode = mon_exec_daemonized; + return TRUE; +} + +static gboolean +show_attributes_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + return user_include_exclude_cb("--include", "attributes", data, err); +} + +static gboolean +show_bans_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (optarg != NULL) { + char *s = crm_strdup_printf("bans:%s", optarg); + gboolean rc = user_include_exclude_cb("--include", s, data, err); + free(s); + return rc; + } else { + return user_include_exclude_cb("--include", "bans", data, err); + } +} + +static gboolean +show_failcounts_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + return user_include_exclude_cb("--include", "failcounts", data, err); +} + +static gboolean +show_operations_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + return user_include_exclude_cb("--include", "failcounts,operations", data, err); +} + +static gboolean +show_tickets_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + return user_include_exclude_cb("--include", "tickets", data, err); +} + +static gboolean +use_cib_file_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + setenv("CIB_file", optarg, 1); + options.exec_mode = mon_exec_one_shot; + return TRUE; +} + +#define INDENT " " + +/* *INDENT-OFF* */ +static GOptionEntry addl_entries[] = { + { "interval", 'i', 0, G_OPTION_ARG_CALLBACK, reconnect_cb, + "Update frequency (default is 5 seconds)", + "TIMESPEC" }, + + { "one-shot", '1', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + one_shot_cb, + "Display the cluster status once and exit", + NULL }, + + { "daemonize", 'd', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + daemonize_cb, + "Run in the background as a daemon.\n" + INDENT "Requires at least one of --output-to and --external-agent.", + NULL }, + + { "pid-file", 'p', 0, G_OPTION_ARG_FILENAME, &options.pid_file, + "(Advanced) Daemon pid file location", + "FILE" }, + + { "external-agent", 'E', 0, G_OPTION_ARG_FILENAME, &options.external_agent, + "A program to run when resource operations take place", + "FILE" }, + + { "external-recipient", 'e', 0, G_OPTION_ARG_STRING, &options.external_recipient, + "A recipient for your program (assuming you want the program to send something to someone).", + "RCPT" }, + + { "watch-fencing", 'W', 0, G_OPTION_ARG_NONE, &options.watch_fencing, + "Listen for fencing events. For use with --external-agent.", + NULL }, + + { "xml-file", 'x', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, use_cib_file_cb, + NULL, + NULL }, + + { NULL } +}; + +static GOptionEntry display_entries[] = { + { "include", 'I', 0, G_OPTION_ARG_CALLBACK, user_include_exclude_cb, + "A list of sections to include in the output.\n" + INDENT "See `Output Control` help for more information.", + "SECTION(s)" }, + + { "exclude", 'U', 0, G_OPTION_ARG_CALLBACK, user_include_exclude_cb, + "A list of sections to exclude from the output.\n" + INDENT "See `Output Control` help for more information.", + "SECTION(s)" }, + + { "node", 0, 0, G_OPTION_ARG_STRING, &options.only_node, + "When displaying information about nodes, show only what's related to the given\n" + INDENT "node, or to all nodes tagged with the given tag", + "NODE" }, + + { "resource", 0, 0, G_OPTION_ARG_STRING, &options.only_rsc, + "When displaying information about resources, show only what's related to the given\n" + INDENT "resource, or to all resources tagged with the given tag", + "RSC" }, + + { "group-by-node", 'n', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, group_by_node_cb, + "Group resources by node", + NULL }, + + { "inactive", 'r', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, inactive_resources_cb, + "Display inactive resources", + NULL }, + + { "failcounts", 'f', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_failcounts_cb, + "Display resource fail counts", + NULL }, + + { "operations", 'o', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_operations_cb, + "Display resource operation history", + NULL }, + + { "timing-details", 't', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_timing_cb, + "Display resource operation history with timing details", + NULL }, + + { "tickets", 'c', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_tickets_cb, + "Display cluster tickets", + NULL }, + + { "fence-history", 'm', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, fence_history_cb, + "Show fence history:\n" + INDENT "0=off, 1=failures and pending (default without option),\n" + INDENT "2=add successes (default without value for option),\n" + INDENT "3=show full history without reduction to most recent of each flavor", + "LEVEL" }, + + { "neg-locations", 'L', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, show_bans_cb, + "Display negative location constraints [optionally filtered by id prefix]", + NULL }, + + { "show-node-attributes", 'A', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_attributes_cb, + "Display node attributes", + NULL }, + + { "hide-headers", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, hide_headers_cb, + "Hide all headers", + NULL }, + + { "show-detail", 'R', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_detail_cb, + "Show more details (node IDs, individual clone instances)", + NULL }, + + { "show-description", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_description_cb, + "Show resource descriptions", + NULL }, + + { "brief", 'b', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_brief_cb, + "Brief output", + NULL }, + + { "pending", 'j', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &options.print_pending, + "Display pending state if 'record-pending' is enabled", + NULL }, + + { NULL } +}; + +static GOptionEntry deprecated_entries[] = { + { "as-html", 'h', G_OPTION_FLAG_FILENAME, G_OPTION_ARG_CALLBACK, as_html_cb, + "Write cluster status to the named HTML file.\n" + INDENT "Use --output-as=html --output-to=FILE instead.", + "FILE" }, + + { "as-xml", 'X', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, as_xml_cb, + "Write cluster status as XML to stdout. This will enable one-shot mode.\n" + INDENT "Use --output-as=xml instead.", + NULL }, + + { "simple-status", 's', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + as_simple_cb, + "Display the cluster status once as a simple one line output\n" + INDENT "(suitable for nagios)", + NULL }, + + { "disable-ncurses", 'N', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, no_curses_cb, + "Disable the use of ncurses.\n" + INDENT "Use --output-as=text instead.", + NULL }, + + { "web-cgi", 'w', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, as_cgi_cb, + "Web mode with output suitable for CGI (preselected when run as *.cgi).\n" + INDENT "Use --output-as=html --html-cgi instead.", + NULL }, + + { NULL } +}; +/* *INDENT-ON* */ + +/* Reconnect to the CIB and fencing agent after reconnect_ms has passed. This sounds + * like it would be more broadly useful, but only ever happens after a disconnect via + * mon_cib_connection_destroy. + */ +static gboolean +reconnect_after_timeout(gpointer data) +{ +#if CURSES_ENABLED + if (output_format == mon_output_console) { + clear(); + refresh(); + } +#endif + + out->transient(out, "Reconnecting..."); + if (setup_api_connections() == pcmk_rc_ok) { + // Trigger redrawing the screen (needs reconnect_timer == 0) + reconnect_timer = 0; + refresh_after_event(FALSE, TRUE); + return G_SOURCE_REMOVE; + } + + out->message(out, "crm-mon-disconnected", + "Latest connection attempt failed", pcmkd_state); + + reconnect_timer = g_timeout_add(options.reconnect_ms, + reconnect_after_timeout, NULL); + return G_SOURCE_REMOVE; +} + +/* Called from various places when we are disconnected from the CIB or from the + * fencing agent. If the CIB connection is still valid, this function will also + * attempt to sign off and reconnect. + */ +static void +mon_cib_connection_destroy(gpointer user_data) +{ + const char *msg = "Connection to the cluster lost"; + + pcmkd_state = pcmk_pacemakerd_state_invalid; + + /* No crm-mon-disconnected message for console; a working implementation + * is not currently worth the effort + */ + out->transient(out, "%s", msg); + + out->message(out, "crm-mon-disconnected", msg, pcmkd_state); + + if (refresh_timer != NULL) { + /* we'll trigger a refresh after reconnect */ + mainloop_timer_stop(refresh_timer); + } + if (reconnect_timer) { + /* we'll trigger a new reconnect-timeout at the end */ + g_source_remove(reconnect_timer); + reconnect_timer = 0; + } + + /* the client API won't properly reconnect notifications if they are still + * in the table - so remove them + */ + stonith_api_delete(st); + st = NULL; + + if (cib) { + cib->cmds->signoff(cib); + reconnect_timer = g_timeout_add(options.reconnect_ms, + reconnect_after_timeout, NULL); + } +} + +/* Signal handler installed into the mainloop for normal program shutdown */ +static void +mon_shutdown(int nsig) +{ + clean_up(CRM_EX_OK); +} + +#if CURSES_ENABLED +static volatile sighandler_t ncurses_winch_handler; + +/* Signal handler installed the regular way (not into the main loop) for when + * the screen is resized. Commonly, this happens when running in an xterm and + * the user changes its size. + */ +static void +mon_winresize(int nsig) +{ + static int not_done; + int lines = 0, cols = 0; + + if (!not_done++) { + if (ncurses_winch_handler) + /* the original ncurses WINCH signal handler does the + * magic of retrieving the new window size; + * otherwise, we'd have to use ioctl or tgetent */ + (*ncurses_winch_handler) (SIGWINCH); + getmaxyx(stdscr, lines, cols); + resizeterm(lines, cols); + /* Alert the mainloop code we'd like the refresh_trigger to run next + * time the mainloop gets around to checking. + */ + mainloop_set_trigger((crm_trigger_t *) refresh_trigger); + } + not_done--; +} +#endif + +static int +setup_fencer_connection(void) +{ + int rc = pcmk_ok; + + if (options.fence_connect && st == NULL) { + st = stonith_api_new(); + } + + if (!options.fence_connect || st == NULL || st->state != stonith_disconnected) { + return rc; + } + + rc = st->cmds->connect(st, crm_system_name, NULL); + if (rc == pcmk_ok) { + crm_trace("Setting up stonith callbacks"); + if (options.watch_fencing) { + st->cmds->register_notification(st, T_STONITH_NOTIFY_DISCONNECT, + mon_st_callback_event); + st->cmds->register_notification(st, T_STONITH_NOTIFY_FENCE, mon_st_callback_event); + } else { + st->cmds->register_notification(st, T_STONITH_NOTIFY_DISCONNECT, + mon_st_callback_display); + st->cmds->register_notification(st, T_STONITH_NOTIFY_HISTORY, mon_st_callback_display); + } + } else { + stonith_api_delete(st); + st = NULL; + } + + return rc; +} + +static int +setup_cib_connection(void) +{ + int rc = pcmk_rc_ok; + + CRM_CHECK(cib != NULL, return EINVAL); + + if (cib->state != cib_disconnected) { + // Already connected with notifications registered for CIB updates + return rc; + } + + rc = cib__signon_query(out, &cib, ¤t_cib); + + if (rc == pcmk_rc_ok) { + rc = pcmk_legacy2rc(cib->cmds->set_connection_dnotify(cib, + mon_cib_connection_destroy)); + if (rc == EPROTONOSUPPORT) { + out->err(out, + "CIB client does not support connection loss " + "notifications; crm_mon will be unable to reconnect after " + "connection loss"); + rc = pcmk_rc_ok; + } + + if (rc == pcmk_rc_ok) { + cib->cmds->del_notify_callback(cib, T_CIB_DIFF_NOTIFY, + crm_diff_update); + rc = pcmk_legacy2rc(cib->cmds->add_notify_callback(cib, + T_CIB_DIFF_NOTIFY, crm_diff_update)); + } + + if (rc != pcmk_rc_ok) { + if (rc == EPROTONOSUPPORT) { + out->err(out, + "CIB client does not support CIB diff " + "notifications"); + } else { + out->err(out, "CIB diff notification setup failed"); + } + + out->err(out, "Cannot monitor CIB changes; exiting"); + cib__clean_up_connection(&cib); + stonith_api_delete(st); + st = NULL; + } + } + return rc; +} + +/* This is used to set up the fencing options after the interactive UI has been stared. + * fence_history_cb can't be used because it builds up a list of includes/excludes that + * then have to be processed with apply_include_exclude and that could affect other + * things. + */ +static void +set_fencing_options(int level) +{ + switch (level) { + case 3: + options.fence_connect = TRUE; + fence_history = pcmk__fence_history_full; + show |= pcmk_section_fencing_all; + break; + + case 2: + options.fence_connect = TRUE; + fence_history = pcmk__fence_history_full; + show |= pcmk_section_fencing_all; + break; + + case 1: + options.fence_connect = TRUE; + fence_history = pcmk__fence_history_full; + show |= pcmk_section_fence_failed | pcmk_section_fence_pending; + break; + + default: + interactive_fence_level = 0; + options.fence_connect = FALSE; + fence_history = pcmk__fence_history_none; + show &= ~pcmk_section_fencing_all; + break; + } +} + +static int +setup_api_connections(void) +{ + int rc = pcmk_rc_ok; + + CRM_CHECK(cib != NULL, return EINVAL); + + if (cib->state != cib_disconnected) { + return rc; + } + + if (cib->variant == cib_native) { + rc = pcmk__pacemakerd_status(out, crm_system_name, + options.reconnect_ms / 2, false, + &pcmkd_state); + if (rc != pcmk_rc_ok) { + return rc; + } + + switch (pcmkd_state) { + case pcmk_pacemakerd_state_running: + case pcmk_pacemakerd_state_remote: + case pcmk_pacemakerd_state_shutting_down: + /* Fencer and CIB may still be available while shutting down or + * running on a Pacemaker Remote node + */ + break; + default: + // Fencer and CIB are definitely unavailable + return ENOTCONN; + } + + setup_fencer_connection(); + } + + rc = setup_cib_connection(); + return rc; +} + +#if CURSES_ENABLED +static const char * +get_option_desc(char c) +{ + const char *desc = "No help available"; + + for (GOptionEntry *entry = display_entries; entry != NULL; entry++) { + if (entry->short_name == c) { + desc = entry->description; + break; + } + } + return desc; +} + +#define print_option_help(out, option, condition) \ + curses_formatted_printf(out, "%c %c: \t%s\n", ((condition)? '*': ' '), option, get_option_desc(option)); + +/* This function is called from the main loop when there is something to be read + * on stdin, like an interactive user's keystroke. All it does is read the keystroke, + * set flags (or show the page showing which keystrokes are valid), and redraw the + * screen. It does not do anything with connections to the CIB or fencing agent + * agent what would happen in mon_refresh_display. + */ +static gboolean +detect_user_input(GIOChannel *channel, GIOCondition condition, gpointer user_data) +{ + int c; + gboolean config_mode = FALSE; + + while (1) { + + /* Get user input */ + c = getchar(); + + switch (c) { + case 'm': + interactive_fence_level++; + if (interactive_fence_level > 3) { + interactive_fence_level = 0; + } + + set_fencing_options(interactive_fence_level); + break; + case 'c': + show ^= pcmk_section_tickets; + break; + case 'f': + show ^= pcmk_section_failcounts; + break; + case 'n': + show_opts ^= pcmk_show_rscs_by_node; + break; + case 'o': + show ^= pcmk_section_operations; + if (!pcmk_is_set(show, pcmk_section_operations)) { + show_opts &= ~pcmk_show_timing; + } + break; + case 'r': + show_opts ^= pcmk_show_inactive_rscs; + break; + case 'R': + show_opts ^= pcmk_show_details; +#ifdef PCMK__COMPAT_2_0 + // Keep failed action output the same as 2.0.x + show_opts |= pcmk_show_failed_detail; +#endif + break; + case 't': + show_opts ^= pcmk_show_timing; + if (pcmk_is_set(show_opts, pcmk_show_timing)) { + show |= pcmk_section_operations; + } + break; + case 'A': + show ^= pcmk_section_attributes; + break; + case 'L': + show ^= pcmk_section_bans; + break; + case 'D': + /* If any header is shown, clear them all, otherwise set them all */ + if (pcmk_any_flags_set(show, pcmk_section_summary)) { + show &= ~pcmk_section_summary; + } else { + show |= pcmk_section_summary; + } + /* Regardless, we don't show options in console mode. */ + show &= ~pcmk_section_options; + break; + case 'b': + show_opts ^= pcmk_show_brief; + break; + case 'j': + show_opts ^= pcmk_show_pending; + break; + case '?': + config_mode = TRUE; + break; + default: + /* All other keys just redraw the screen. */ + goto refresh; + } + + if (!config_mode) + goto refresh; + + clear(); + refresh(); + + curses_formatted_printf(out, "%s", "Display option change mode\n"); + print_option_help(out, 'c', pcmk_is_set(show, pcmk_section_tickets)); + print_option_help(out, 'f', pcmk_is_set(show, pcmk_section_failcounts)); + print_option_help(out, 'n', pcmk_is_set(show_opts, pcmk_show_rscs_by_node)); + print_option_help(out, 'o', pcmk_is_set(show, pcmk_section_operations)); + print_option_help(out, 'r', pcmk_is_set(show_opts, pcmk_show_inactive_rscs)); + print_option_help(out, 't', pcmk_is_set(show_opts, pcmk_show_timing)); + print_option_help(out, 'A', pcmk_is_set(show, pcmk_section_attributes)); + print_option_help(out, 'L', pcmk_is_set(show, pcmk_section_bans)); + print_option_help(out, 'D', !pcmk_is_set(show, pcmk_section_summary)); +#ifdef PCMK__COMPAT_2_0 + print_option_help(out, 'R', pcmk_any_flags_set(show_opts, pcmk_show_details & ~pcmk_show_failed_detail)); +#else + print_option_help(out, 'R', pcmk_any_flags_set(show_opts, pcmk_show_details)); +#endif + print_option_help(out, 'b', pcmk_is_set(show_opts, pcmk_show_brief)); + print_option_help(out, 'j', pcmk_is_set(show_opts, pcmk_show_pending)); + curses_formatted_printf(out, "%d m: \t%s\n", interactive_fence_level, get_option_desc('m')); + curses_formatted_printf(out, "%s", "\nToggle fields via field letter, type any other key to return\n"); + } + +refresh: + refresh_after_event(FALSE, TRUE); + + return TRUE; +} +#endif // CURSES_ENABLED + +// Basically crm_signal_handler(SIGCHLD, SIG_IGN) plus the SA_NOCLDWAIT flag +static void +avoid_zombies(void) +{ + struct sigaction sa; + + memset(&sa, 0, sizeof(struct sigaction)); + if (sigemptyset(&sa.sa_mask) < 0) { + crm_warn("Cannot avoid zombies: %s", pcmk_rc_str(errno)); + return; + } + sa.sa_handler = SIG_IGN; + sa.sa_flags = SA_RESTART|SA_NOCLDWAIT; + if (sigaction(SIGCHLD, &sa, NULL) < 0) { + crm_warn("Cannot avoid zombies: %s", pcmk_rc_str(errno)); + } +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'Q', 0, G_OPTION_ARG_NONE, &(args->quiet), + "Be less descriptive in output.", + NULL }, + + { NULL } + }; + +#if CURSES_ENABLED + const char *fmts = "console (default), html, text, xml, none"; +#else + const char *fmts = "text (default), html, xml, none"; +#endif // CURSES_ENABLED + const char *desc = NULL; + + desc = "Notes:\n\n" + "If this program is called as crm_mon.cgi, --output-as=html and\n" + "--html-cgi are automatically added to the command line\n" + "arguments.\n\n" + + "Time Specification:\n\n" + "The TIMESPEC in any command line option can be specified in many\n" + "different formats. It can be an integer number of seconds, a\n" + "number plus units (us/usec/ms/msec/s/sec/m/min/h/hr), or an ISO\n" + "8601 period specification.\n\n" + + "Output Control:\n\n" + "By default, a particular set of sections are written to the\n" + "output destination. The default varies based on the output\n" + "format: XML includes all sections by default, while other output\n" + "formats include less. This set can be modified with the --include\n" + "and --exclude command line options. Each option may be passed\n" + "multiple times, and each can specify a comma-separated list of\n" + "sections. The options are applied to the default set, in order\n" + "from left to right as they are passed on the command line. For a\n" + "list of valid sections, pass --include=list or --exclude=list.\n\n" + + "Interactive Use:\n\n" +#if CURSES_ENABLED + "When run interactively, crm_mon can be told to hide and show\n" + "various sections of output. To see a help screen explaining the\n" + "options, press '?'. Any key stroke aside from those listed will\n" + "cause the screen to refresh.\n\n" +#else + "The local installation of Pacemaker was built without support for\n" + "interactive (console) mode. A curses library must be available at\n" + "build time to support interactive mode.\n\n" +#endif // CURSES_ENABLED + + "Examples:\n\n" +#if CURSES_ENABLED + "Display the cluster status on the console with updates as they\n" + "occur:\n\n" + "\tcrm_mon\n\n" +#endif // CURSES_ENABLED + + "Display the cluster status once and exit:\n\n" + "\tcrm_mon -1\n\n" + + "Display the cluster status, group resources by node, and include\n" + "inactive resources in the list:\n\n" + "\tcrm_mon --group-by-node --inactive\n\n" + + "Start crm_mon as a background daemon and have it write the\n" + "cluster status to an HTML file:\n\n" + "\tcrm_mon --daemonize --output-as html " + "--output-to /path/to/docroot/filename.html\n\n" + + "Display the cluster status as XML:\n\n" + "\tcrm_mon --output-as xml\n\n"; + + context = pcmk__build_arg_context(args, fmts, group, NULL); + pcmk__add_main_args(context, extra_prog_entries); + g_option_context_set_description(context, desc); + + pcmk__add_arg_group(context, "display", "Display Options:", + "Show display options", display_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + pcmk__add_arg_group(context, "deprecated", "Deprecated Options:", + "Show deprecated options", deprecated_entries); + + return context; +} + +/* If certain format options were specified, we want to set some extra + * options. We can just process these like they were given on the + * command line. + */ +static void +add_output_args(void) { + GError *err = NULL; + + if (output_format == mon_output_plain) { + if (!pcmk__force_args(context, &err, "%s --text-fancy", g_get_prgname())) { + g_propagate_error(&error, err); + clean_up(CRM_EX_USAGE); + } + } else if (output_format == mon_output_cgi) { + if (!pcmk__force_args(context, &err, "%s --html-cgi", g_get_prgname())) { + g_propagate_error(&error, err); + clean_up(CRM_EX_USAGE); + } + } else if (output_format == mon_output_xml) { + if (!pcmk__force_args(context, &err, "%s --xml-simple-list --xml-substitute", g_get_prgname())) { + g_propagate_error(&error, err); + clean_up(CRM_EX_USAGE); + } + } else if (output_format == mon_output_legacy_xml) { + output_format = mon_output_xml; + if (!pcmk__force_args(context, &err, "%s --xml-legacy --xml-substitute", g_get_prgname())) { + g_propagate_error(&error, err); + clean_up(CRM_EX_USAGE); + } + } +} + +/*! + * \internal + * \brief Set output format based on \p --output-as arguments and mode arguments + * + * When the deprecated output format arguments (\p --as-cgi, \p --as-html, + * \p --simple-status, \p --as-xml) are parsed, callback functions set + * \p output_format (and the umask if appropriate). If none of the deprecated + * arguments were specified, this function does the same based on the current + * \p --output-as arguments and the \p --one-shot and \p --daemonize arguments. + * + * \param[in,out] args Command line arguments + */ +static void +reconcile_output_format(pcmk__common_args_t *args) +{ + if (output_format != mon_output_unset) { + /* One of the deprecated arguments was used, and we're finished. Note + * that this means the deprecated arguments take precedence. + */ + return; + } + + if (pcmk__str_eq(args->output_ty, "none", pcmk__str_none)) { + output_format = mon_output_none; + + } else if (pcmk__str_eq(args->output_ty, "html", pcmk__str_none)) { + output_format = mon_output_html; + umask(S_IWGRP | S_IWOTH); // World-readable HTML + + } else if (pcmk__str_eq(args->output_ty, "xml", pcmk__str_none)) { + output_format = mon_output_xml; + +#if CURSES_ENABLED + } else if (pcmk__str_eq(args->output_ty, "console", + pcmk__str_null_matches)) { + /* Console is the default format if no conflicting options are given. + * + * Use text output instead if one of the following conditions is met: + * * We've requested daemonized or one-shot mode (console output is + * incompatible with modes other than mon_exec_update) + * * We requested the version, which is effectively one-shot + * * We specified a non-stdout output destination (console mode is + * compatible only with stdout) + */ + if ((options.exec_mode == mon_exec_daemonized) + || (options.exec_mode == mon_exec_one_shot) + || args->version + || !pcmk__str_eq(args->output_dest, "-", pcmk__str_null_matches)) { + + pcmk__str_update(&args->output_ty, "text"); + output_format = mon_output_plain; + } else { + pcmk__str_update(&args->output_ty, "console"); + output_format = mon_output_console; + crm_enable_stderr(FALSE); + } +#endif // CURSES_ENABLED + + } else if (pcmk__str_eq(args->output_ty, "text", pcmk__str_null_matches)) { + /* Text output was explicitly requested, or it's the default because + * curses is not enabled + */ + pcmk__str_update(&args->output_ty, "text"); + output_format = mon_output_plain; + } + + // Otherwise, invalid format. Let pcmk__output_new() throw an error. +} + +/*! + * \internal + * \brief Set execution mode to the output format's default if appropriate + * + * \param[in,out] args Command line arguments + */ +static void +set_default_exec_mode(const pcmk__common_args_t *args) +{ + if (output_format == mon_output_console) { + /* Update is the only valid mode for console, but set here instead of + * reconcile_output_format() for isolation and consistency + */ + options.exec_mode = mon_exec_update; + + } else if (options.exec_mode == mon_exec_unset) { + // Default to one-shot mode for all other formats + options.exec_mode = mon_exec_one_shot; + + } else if ((options.exec_mode == mon_exec_update) + && pcmk__str_eq(args->output_dest, "-", + pcmk__str_null_matches)) { + // If not using console format, update mode cannot be used with stdout + options.exec_mode = mon_exec_one_shot; + } +} + +static void +clean_up_on_connection_failure(int rc) +{ + if (output_format == mon_output_monitor) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "CLUSTER CRIT: Connection to cluster failed: %s", + pcmk_rc_str(rc)); + clean_up(MON_STATUS_CRIT); + } else if (rc == ENOTCONN) { + if (pcmkd_state == pcmk_pacemakerd_state_remote) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Error: remote-node not connected to cluster"); + } else { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Error: cluster is not available on this node"); + } + } else { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Connection to cluster failed: %s", pcmk_rc_str(rc)); + } + + clean_up(pcmk_rc2exitc(rc)); +} + +static void +one_shot(void) +{ + int rc = pcmk__status(out, cib, fence_history, show, show_opts, + options.only_node, options.only_rsc, + options.neg_location_prefix, + output_format == mon_output_monitor, 0); + + if (rc == pcmk_rc_ok) { + clean_up(pcmk_rc2exitc(rc)); + } else { + clean_up_on_connection_failure(rc); + } +} + +static void +exit_on_invalid_cib(void) +{ + if (cib != NULL) { + return; + } + + // Shouldn't really be possible + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Invalid CIB source"); + clean_up(CRM_EX_ERROR); +} + +int +main(int argc, char **argv) +{ + int rc = pcmk_rc_ok; + GOptionGroup *output_group = NULL; + + args = pcmk__new_common_args(SUMMARY); + context = build_arg_context(args, &output_group); + pcmk__register_formats(output_group, formats); + + options.pid_file = strdup("/tmp/ClusterMon.pid"); + pcmk__cli_init_logging("crm_mon", 0); + + // Avoid needing to wait for subprocesses forked for -E/--external-agent + avoid_zombies(); + + if (pcmk__ends_with_ext(argv[0], ".cgi")) { + output_format = mon_output_cgi; + options.exec_mode = mon_exec_one_shot; + } + + processed_args = pcmk__cmdline_preproc(argv, "ehimpxEILU"); + + fence_history_cb("--fence-history", "1", NULL, NULL); + + /* Set an HTML title regardless of what format we will eventually use. This can't + * be done in add_output_args. That function is called after command line + * arguments are processed in the next block, which means it'll override whatever + * title the user provides. Doing this here means the user can give their own + * title on the command line. + */ + if (!pcmk__force_args(context, &error, "%s --html-title \"Cluster Status\"", + g_get_prgname())) { + return clean_up(CRM_EX_USAGE); + } + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + return clean_up(CRM_EX_USAGE); + } + + for (int i = 0; i < args->verbosity; i++) { + crm_bump_log_level(argc, argv); + } + + if (!args->version) { + if (args->quiet) { + include_exclude_cb("--exclude", "times", NULL, NULL); + } + + if (options.watch_fencing) { + fence_history_cb("--fence-history", "0", NULL, NULL); + options.fence_connect = TRUE; + } + + /* create the cib-object early to be able to do further + * decisions based on the cib-source + */ + cib = cib_new(); + + exit_on_invalid_cib(); + + switch (cib->variant) { + case cib_native: + // Everything (fencer, CIB, pcmkd status) should be available + break; + + case cib_file: + // Live fence history is not meaningful + fence_history_cb("--fence-history", "0", NULL, NULL); + + /* Notifications are unsupported; nothing to monitor + * @COMPAT: Let setup_cib_connection() handle this by exiting? + */ + options.exec_mode = mon_exec_one_shot; + break; + + case cib_remote: + // We won't receive any fencing updates + fence_history_cb("--fence-history", "0", NULL, NULL); + break; + + default: + /* something is odd */ + exit_on_invalid_cib(); + break; + } + + if ((options.exec_mode == mon_exec_daemonized) + && !options.external_agent + && pcmk__str_eq(args->output_dest, "-", pcmk__str_null_matches)) { + + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "--daemonize requires at least one of --output-to " + "(with value not set to '-') and --external-agent"); + return clean_up(CRM_EX_USAGE); + } + } + + reconcile_output_format(args); + set_default_exec_mode(args); + add_output_args(); + + /* output_format MUST NOT BE CHANGED AFTER THIS POINT. */ + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + return clean_up(CRM_EX_ERROR); + } + + /* If we had a valid format for pcmk__output_new(), output_format should be + * set by now. + */ + CRM_ASSERT(output_format != mon_output_unset); + + if (options.exec_mode == mon_exec_daemonized) { + if (!options.external_agent && (output_format == mon_output_none)) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + "--daemonize requires --external-agent if used with " + "--output-as=none"); + return clean_up(CRM_EX_USAGE); + } + crm_enable_stderr(FALSE); + cib_delete(cib); + cib = NULL; + pcmk__daemonize(crm_system_name, options.pid_file); + cib = cib_new(); + exit_on_invalid_cib(); + } + + show = default_includes(output_format); + + /* Apply --include/--exclude flags we used internally. There's no error reporting + * here because this would be a programming error. + */ + apply_include_exclude(options.includes_excludes, &error); + + /* And now apply any --include/--exclude flags the user gave on the command line. + * These are done in a separate pass from the internal ones because we want to + * make sure whatever the user specifies overrides whatever we do. + */ + if (!apply_include_exclude(options.user_includes_excludes, &error)) { + return clean_up(CRM_EX_USAGE); + } + + /* Sync up the initial value of interactive_fence_level with whatever was set with + * --include/--exclude= options. + */ + if (pcmk_all_flags_set(show, pcmk_section_fencing_all)) { + interactive_fence_level = 3; + } else if (pcmk_is_set(show, pcmk_section_fence_worked)) { + interactive_fence_level = 2; + } else if (pcmk_any_flags_set(show, pcmk_section_fence_failed | pcmk_section_fence_pending)) { + interactive_fence_level = 1; + } else { + interactive_fence_level = 0; + } + + pcmk__register_lib_messages(out); + crm_mon_register_messages(out); + pe__register_messages(out); + stonith__register_messages(out); + + // Messages internal to this file, nothing curses-specific + pcmk__register_messages(out, fmt_functions); + + if (args->version) { + out->version(out, false); + return clean_up(CRM_EX_OK); + } + + /* Extra sanity checks when in CGI mode */ + if (output_format == mon_output_cgi) { + if (cib->variant == cib_file) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, "CGI mode used with CIB file"); + return clean_up(CRM_EX_USAGE); + } else if (options.external_agent != NULL) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, "CGI mode cannot be used with --external-agent"); + return clean_up(CRM_EX_USAGE); + } else if (options.exec_mode == mon_exec_daemonized) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, "CGI mode cannot be used with -d"); + return clean_up(CRM_EX_USAGE); + } + } + + if (output_format == mon_output_xml) { + show_opts |= pcmk_show_inactive_rscs | pcmk_show_timing; + } + + if ((output_format == mon_output_html || output_format == mon_output_cgi) && + out->dest != stdout) { + pcmk__html_add_header("meta", "http-equiv", "refresh", "content", + pcmk__itoa(options.reconnect_ms / 1000), NULL); + } + +#ifdef PCMK__COMPAT_2_0 + // Keep failed action output the same as 2.0.x + show_opts |= pcmk_show_failed_detail; +#endif + + crm_info("Starting %s", crm_system_name); + + cib__set_output(cib, out); + + if (options.exec_mode == mon_exec_one_shot) { + one_shot(); + } + + out->message(out, "crm-mon-disconnected", + "Waiting for initial connection", pcmkd_state); + do { + out->transient(out, "Connecting to cluster..."); + rc = setup_api_connections(); + + if (rc != pcmk_rc_ok) { + if ((rc == ENOTCONN) || (rc == ECONNREFUSED)) { + out->transient(out, "Connection failed. Retrying in %ums...", + options.reconnect_ms); + } + + // Give some time to view all output even if we won't retry + pcmk__sleep_ms(options.reconnect_ms); +#if CURSES_ENABLED + if (output_format == mon_output_console) { + clear(); + refresh(); + } +#endif + } + } while ((rc == ENOTCONN) || (rc == ECONNREFUSED)); + + if (rc != pcmk_rc_ok) { + clean_up_on_connection_failure(rc); + } + + set_fencing_options(interactive_fence_level); + mon_refresh_display(NULL); + + mainloop = g_main_loop_new(NULL, FALSE); + + mainloop_add_signal(SIGTERM, mon_shutdown); + mainloop_add_signal(SIGINT, mon_shutdown); +#if CURSES_ENABLED + if (output_format == mon_output_console) { + ncurses_winch_handler = crm_signal_handler(SIGWINCH, mon_winresize); + if (ncurses_winch_handler == SIG_DFL || + ncurses_winch_handler == SIG_IGN || ncurses_winch_handler == SIG_ERR) + ncurses_winch_handler = NULL; + + io_channel = g_io_channel_unix_new(STDIN_FILENO); + g_io_add_watch(io_channel, G_IO_IN, detect_user_input, NULL); + } +#endif + + /* When refresh_trigger->trigger is set to TRUE, call mon_refresh_display. In + * this file, that is anywhere mainloop_set_trigger is called. + */ + refresh_trigger = mainloop_add_trigger(G_PRIORITY_LOW, mon_refresh_display, NULL); + + g_main_loop_run(mainloop); + g_main_loop_unref(mainloop); + + if (io_channel != NULL) { + g_io_channel_shutdown(io_channel, TRUE, NULL); + } + + crm_info("Exiting %s", crm_system_name); + + return clean_up(CRM_EX_OK); +} + +static int +send_custom_trap(const char *node, const char *rsc, const char *task, int target_rc, int rc, + int status, const char *desc) +{ + pid_t pid; + + /*setenv needs chars, these are ints */ + char *rc_s = pcmk__itoa(rc); + char *status_s = pcmk__itoa(status); + char *target_rc_s = pcmk__itoa(target_rc); + + crm_debug("Sending external notification to '%s' via '%s'", options.external_recipient, options.external_agent); + + if(rsc) { + setenv("CRM_notify_rsc", rsc, 1); + } + if (options.external_recipient) { + setenv("CRM_notify_recipient", options.external_recipient, 1); + } + setenv("CRM_notify_node", node, 1); + setenv("CRM_notify_task", task, 1); + setenv("CRM_notify_desc", desc, 1); + setenv("CRM_notify_rc", rc_s, 1); + setenv("CRM_notify_target_rc", target_rc_s, 1); + setenv("CRM_notify_status", status_s, 1); + + pid = fork(); + if (pid == -1) { + crm_perror(LOG_ERR, "notification fork() failed."); + } + if (pid == 0) { + /* crm_debug("notification: I am the child. Executing the nofitication program."); */ + execl(options.external_agent, options.external_agent, NULL); + exit(CRM_EX_ERROR); + } + + crm_trace("Finished running custom notification program '%s'.", options.external_agent); + free(target_rc_s); + free(status_s); + free(rc_s); + return 0; +} + +static int +handle_rsc_op(xmlNode *xml, void *userdata) +{ + const char *node_id = (const char *) userdata; + int rc = -1; + int status = -1; + int target_rc = -1; + gboolean notify = TRUE; + + char *rsc = NULL; + char *task = NULL; + const char *desc = NULL; + const char *magic = NULL; + const char *id = NULL; + const char *node = NULL; + + xmlNode *n = xml; + xmlNode * rsc_op = xml; + + if(strcmp((const char*)xml->name, XML_LRM_TAG_RSC_OP) != 0) { + pcmk__xe_foreach_child(xml, NULL, handle_rsc_op, (void *) node_id); + return pcmk_rc_ok; + } + + id = pe__xe_history_key(rsc_op); + + magic = crm_element_value(rsc_op, XML_ATTR_TRANSITION_MAGIC); + if (magic == NULL) { + /* non-change */ + return pcmk_rc_ok; + } + + if (!decode_transition_magic(magic, NULL, NULL, NULL, &status, &rc, + &target_rc)) { + crm_err("Invalid event %s detected for %s", magic, id); + return pcmk_rc_ok; + } + + if (parse_op_key(id, &rsc, &task, NULL) == FALSE) { + crm_err("Invalid event detected for %s", id); + goto bail; + } + + node = crm_element_value(rsc_op, XML_LRM_ATTR_TARGET); + + while (n != NULL && !pcmk__str_eq(XML_CIB_TAG_STATE, TYPE(n), pcmk__str_casei)) { + n = n->parent; + } + + if(node == NULL && n) { + node = crm_element_value(n, XML_ATTR_UNAME); + } + + if (node == NULL && n) { + node = ID(n); + } + + if (node == NULL) { + node = node_id; + } + + if (node == NULL) { + crm_err("No node detected for event %s (%s)", magic, id); + goto bail; + } + + /* look up where we expected it to be? */ + desc = pcmk_rc_str(pcmk_rc_ok); + if ((status == PCMK_EXEC_DONE) && (target_rc == rc)) { + crm_notice("%s of %s on %s completed: %s", task, rsc, node, desc); + if (rc == PCMK_OCF_NOT_RUNNING) { + notify = FALSE; + } + + } else if (status == PCMK_EXEC_DONE) { + desc = services_ocf_exitcode_str(rc); + crm_warn("%s of %s on %s failed: %s", task, rsc, node, desc); + + } else { + desc = pcmk_exec_status_str(status); + crm_warn("%s of %s on %s failed: %s", task, rsc, node, desc); + } + + if (notify && options.external_agent) { + send_custom_trap(node, rsc, task, target_rc, rc, status, desc); + } + + bail: + free(rsc); + free(task); + return pcmk_rc_ok; +} + +/* This function is just a wrapper around mainloop_set_trigger so that it can be + * called from a mainloop directly. It's simply another way of ensuring the screen + * gets redrawn. + */ +static gboolean +mon_trigger_refresh(gpointer user_data) +{ + mainloop_set_trigger((crm_trigger_t *) refresh_trigger); + return FALSE; +} + +static int +handle_op_for_node(xmlNode *xml, void *userdata) +{ + const char *node = crm_element_value(xml, XML_ATTR_UNAME); + + if (node == NULL) { + node = ID(xml); + } + + handle_rsc_op(xml, (void *) node); + return pcmk_rc_ok; +} + +static void +crm_diff_update_v2(const char *event, xmlNode * msg) +{ + xmlNode *change = NULL; + xmlNode *diff = get_message_xml(msg, F_CIB_UPDATE_RESULT); + + for (change = pcmk__xml_first_child(diff); change != NULL; + change = pcmk__xml_next(change)) { + const char *name = NULL; + const char *op = crm_element_value(change, XML_DIFF_OP); + const char *xpath = crm_element_value(change, XML_DIFF_PATH); + xmlNode *match = NULL; + const char *node = NULL; + + if(op == NULL) { + continue; + + } else if(strcmp(op, "create") == 0) { + match = change->children; + + } else if(strcmp(op, "move") == 0) { + continue; + + } else if(strcmp(op, "delete") == 0) { + continue; + + } else if(strcmp(op, "modify") == 0) { + match = first_named_child(change, XML_DIFF_RESULT); + if(match) { + match = match->children; + } + } + + if(match) { + name = (const char *)match->name; + } + + crm_trace("Handling %s operation for %s %p, %s", op, xpath, match, name); + if(xpath == NULL) { + /* Version field, ignore */ + + } else if(name == NULL) { + crm_debug("No result for %s operation to %s", op, xpath); + CRM_ASSERT(strcmp(op, "delete") == 0 || strcmp(op, "move") == 0); + + } else if(strcmp(name, XML_TAG_CIB) == 0) { + pcmk__xe_foreach_child(first_named_child(match, XML_CIB_TAG_STATUS), + NULL, handle_op_for_node, NULL); + + } else if(strcmp(name, XML_CIB_TAG_STATUS) == 0) { + pcmk__xe_foreach_child(match, NULL, handle_op_for_node, NULL); + + } else if(strcmp(name, XML_CIB_TAG_STATE) == 0) { + node = crm_element_value(match, XML_ATTR_UNAME); + if (node == NULL) { + node = ID(match); + } + handle_rsc_op(match, (void *) node); + + } else if(strcmp(name, XML_CIB_TAG_LRM) == 0) { + node = ID(match); + handle_rsc_op(match, (void *) node); + + } else if(strcmp(name, XML_LRM_TAG_RESOURCES) == 0) { + char *local_node = pcmk__xpath_node_id(xpath, "lrm"); + + handle_rsc_op(match, local_node); + free(local_node); + + } else if(strcmp(name, XML_LRM_TAG_RESOURCE) == 0) { + char *local_node = pcmk__xpath_node_id(xpath, "lrm"); + + handle_rsc_op(match, local_node); + free(local_node); + + } else if(strcmp(name, XML_LRM_TAG_RSC_OP) == 0) { + char *local_node = pcmk__xpath_node_id(xpath, "lrm"); + + handle_rsc_op(match, local_node); + free(local_node); + + } else { + crm_trace("Ignoring %s operation for %s %p, %s", op, xpath, match, name); + } + } +} + +static void +crm_diff_update_v1(const char *event, xmlNode * msg) +{ + /* Process operation updates */ + xmlXPathObject *xpathObj = xpath_search(msg, + "//" F_CIB_UPDATE_RESULT "//" XML_TAG_DIFF_ADDED + "//" XML_LRM_TAG_RSC_OP); + int lpc = 0, max = numXpathResults(xpathObj); + + for (lpc = 0; lpc < max; lpc++) { + xmlNode *rsc_op = getXpathResult(xpathObj, lpc); + + handle_rsc_op(rsc_op, NULL); + } + freeXpathObject(xpathObj); +} + +static void +crm_diff_update(const char *event, xmlNode * msg) +{ + int rc = -1; + static bool stale = FALSE; + gboolean cib_updated = FALSE; + xmlNode *diff = get_message_xml(msg, F_CIB_UPDATE_RESULT); + + out->progress(out, false); + + if (current_cib != NULL) { + rc = xml_apply_patchset(current_cib, diff, TRUE); + + switch (rc) { + case -pcmk_err_diff_resync: + case -pcmk_err_diff_failed: + crm_notice("[%s] Patch aborted: %s (%d)", event, pcmk_strerror(rc), rc); + free_xml(current_cib); current_cib = NULL; + break; + case pcmk_ok: + cib_updated = TRUE; + break; + default: + crm_notice("[%s] ABORTED: %s (%d)", event, pcmk_strerror(rc), rc); + free_xml(current_cib); current_cib = NULL; + } + } + + if (current_cib == NULL) { + crm_trace("Re-requesting the full cib"); + cib->cmds->query(cib, NULL, ¤t_cib, cib_scope_local | cib_sync_call); + } + + if (options.external_agent) { + int format = 0; + crm_element_value_int(diff, "format", &format); + switch(format) { + case 1: + crm_diff_update_v1(event, msg); + break; + case 2: + crm_diff_update_v2(event, msg); + break; + default: + crm_err("Unknown patch format: %d", format); + } + } + + if (current_cib == NULL) { + if(!stale) { + out->info(out, "--- Stale data ---"); + } + stale = TRUE; + return; + } + + stale = FALSE; + refresh_after_event(cib_updated, FALSE); +} + +static int +mon_refresh_display(gpointer user_data) +{ + int rc = pcmk_rc_ok; + + last_refresh = time(NULL); + + if (output_format == mon_output_none) { + return G_SOURCE_REMOVE; + } + + if (fence_history == pcmk__fence_history_full && + !pcmk_all_flags_set(show, pcmk_section_fencing_all) && + output_format != mon_output_xml) { + fence_history = pcmk__fence_history_reduced; + } + + // Get an up-to-date pacemakerd status for the cluster summary + if (cib->variant == cib_native) { + pcmk__pacemakerd_status(out, crm_system_name, options.reconnect_ms / 2, + false, &pcmkd_state); + } + + if (out->dest != stdout) { + out->reset(out); + } + + rc = pcmk__output_cluster_status(out, st, cib, current_cib, pcmkd_state, + fence_history, show, show_opts, + options.only_node,options.only_rsc, + options.neg_location_prefix, + output_format == mon_output_monitor); + + if (output_format == mon_output_monitor && rc != pcmk_rc_ok) { + clean_up(MON_STATUS_WARN); + return G_SOURCE_REMOVE; + } else if (rc == pcmk_rc_schema_validation) { + clean_up(CRM_EX_CONFIG); + return G_SOURCE_REMOVE; + } + + if (out->dest != stdout) { + out->finish(out, CRM_EX_OK, true, NULL); + } + + return G_SOURCE_CONTINUE; +} + +/* This function is called for fencing events (see setup_fencer_connection() for + * which ones) when --watch-fencing is used on the command line + */ +static void +mon_st_callback_event(stonith_t * st, stonith_event_t * e) +{ + if (st->state == stonith_disconnected) { + /* disconnect cib as well and have everything reconnect */ + mon_cib_connection_destroy(NULL); + } else if (options.external_agent) { + char *desc = stonith__event_description(e); + + send_custom_trap(e->target, NULL, e->operation, pcmk_ok, e->result, 0, desc); + free(desc); + } +} + +/* Cause the screen to be redrawn (via mainloop_set_trigger) when various conditions are met: + * + * - If the last update occurred more than reconnect_ms ago (defaults to 5s, but + * can be changed via the -i command line option), or + * - After every 10 CIB updates, or + * - If it's been 2s since the last update + * + * This function sounds like it would be more broadly useful, but it is only called when a + * fencing event is received or a CIB diff occurrs. + */ +static void +refresh_after_event(gboolean data_updated, gboolean enforce) +{ + static int updates = 0; + time_t now = time(NULL); + + if (data_updated) { + updates++; + } + + if(refresh_timer == NULL) { + refresh_timer = mainloop_timer_add("refresh", 2000, FALSE, mon_trigger_refresh, NULL); + } + + if (reconnect_timer > 0) { + /* we will receive a refresh request after successful reconnect */ + mainloop_timer_stop(refresh_timer); + return; + } + + /* as we're not handling initial failure of fencer-connection as + * fatal give it a retry here + * not getting here if cib-reconnection is already on the way + */ + setup_fencer_connection(); + + if (enforce || + ((now - last_refresh) > (options.reconnect_ms / 1000)) || + updates >= 10) { + mainloop_set_trigger((crm_trigger_t *) refresh_trigger); + mainloop_timer_stop(refresh_timer); + updates = 0; + + } else { + mainloop_timer_start(refresh_timer); + } +} + +/* This function is called for fencing events (see setup_fencer_connection() for + * which ones) when --watch-fencing is NOT used on the command line + */ +static void +mon_st_callback_display(stonith_t * st, stonith_event_t * e) +{ + if (st->state == stonith_disconnected) { + /* disconnect cib as well and have everything reconnect */ + mon_cib_connection_destroy(NULL); + } else { + out->progress(out, false); + refresh_after_event(TRUE, FALSE); + } +} + +/* + * De-init ncurses, disconnect from the CIB manager, disconnect fencing, + * deallocate memory and show usage-message if requested. + * + * We don't actually return, but nominally returning crm_exit_t allows a usage + * like "return clean_up(exit_code);" which helps static analysis understand the + * code flow. + */ +static crm_exit_t +clean_up(crm_exit_t exit_code) +{ + /* Quitting crm_mon is much more complicated than it ought to be. */ + + /* (1) Close connections, free things, etc. */ + cib__clean_up_connection(&cib); + stonith_api_delete(st); + free(options.neg_location_prefix); + free(options.only_node); + free(options.only_rsc); + free(options.pid_file); + g_slist_free_full(options.includes_excludes, free); + + g_strfreev(processed_args); + + /* (2) If this is abnormal termination and we're in curses mode, shut down + * curses first. Any messages displayed to the screen before curses is shut + * down will be lost because doing the shut down will also restore the + * screen to whatever it looked like before crm_mon was started. + */ + if (((error != NULL) || (exit_code == CRM_EX_USAGE)) + && (output_format == mon_output_console) + && (out != NULL)) { + + out->finish(out, exit_code, false, NULL); + pcmk__output_free(out); + out = NULL; + } + + /* (3) If this is a command line usage related failure, print the usage + * message. + */ + if (exit_code == CRM_EX_USAGE && (output_format == mon_output_console || output_format == mon_output_plain)) { + char *help = g_option_context_get_help(context, TRUE, NULL); + + fprintf(stderr, "%s", help); + g_free(help); + } + + pcmk__free_arg_context(context); + + /* (4) If this is any kind of error, print the error out and exit. Make + * sure to handle situations both before and after formatted output is + * set up. We want errors to appear formatted if at all possible. + */ + if (error != NULL) { + if (out != NULL) { + out->err(out, "%s: %s", g_get_prgname(), error->message); + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } else { + fprintf(stderr, "%s: %s\n", g_get_prgname(), error->message); + } + + g_clear_error(&error); + crm_exit(exit_code); + } + + /* (5) Print formatted output to the screen if we made it far enough in + * crm_mon to be able to do so. + */ + if (out != NULL) { + if (options.exec_mode != mon_exec_daemonized) { + out->finish(out, exit_code, true, NULL); + } + + pcmk__output_free(out); + pcmk__unregister_formats(); + } + + crm_exit(exit_code); +} diff --git a/tools/crm_mon.h b/tools/crm_mon.h new file mode 100644 index 0000000..a505f50 --- /dev/null +++ b/tools/crm_mon.h @@ -0,0 +1,78 @@ +/* + * Copyright 2019-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#ifndef CRM_MON__H +#define CRM_MON__H + +#include + +#include + +#include +#include +#include + +/* + * The man pages for both curses and ncurses suggest inclusion of "curses.h". + * We believe the following to be acceptable and portable. + */ + +# if defined(HAVE_LIBNCURSES) || defined(HAVE_LIBCURSES) +# if defined(HAVE_NCURSES_H) && !defined(HAVE_INCOMPATIBLE_PRINTW) +# include +# define CURSES_ENABLED 1 +# elif defined(HAVE_NCURSES_NCURSES_H) && !defined(HAVE_INCOMPATIBLE_PRINTW) +# include +# define CURSES_ENABLED 1 +# elif defined(HAVE_CURSES_H) && !defined(HAVE_INCOMPATIBLE_PRINTW) +# include +# define CURSES_ENABLED 1 +# elif defined(HAVE_CURSES_CURSES_H) && !defined(HAVE_INCOMPATIBLE_PRINTW) +# include +# define CURSES_ENABLED 1 +# else +# define CURSES_ENABLED 0 +# endif +# else +# define CURSES_ENABLED 0 +# endif + +typedef enum mon_output_format_e { + mon_output_unset, + mon_output_none, + mon_output_monitor, + mon_output_plain, + mon_output_console, + mon_output_xml, + mon_output_legacy_xml, + mon_output_html, + mon_output_cgi +} mon_output_format_t; + +enum mon_exec_mode { + mon_exec_unset, + mon_exec_daemonized, + mon_exec_one_shot, + mon_exec_update, +}; + +void crm_mon_register_messages(pcmk__output_t *out); + +#if CURSES_ENABLED +pcmk__output_t *crm_mon_mk_curses_output(char **argv); +void curses_formatted_printf(pcmk__output_t *out, const char *format, ...) G_GNUC_PRINTF(2, 3); +void curses_formatted_vprintf(pcmk__output_t *out, const char *format, va_list args) G_GNUC_PRINTF(2, 0); +void curses_indented_printf(pcmk__output_t *out, const char *format, ...) G_GNUC_PRINTF(2, 3); +void curses_indented_vprintf(pcmk__output_t *out, const char *format, va_list args) G_GNUC_PRINTF(2, 0); + +extern GOptionEntry crm_mon_curses_output_entries[]; +#define CRM_MON_SUPPORTED_FORMAT_CURSES { "console", crm_mon_mk_curses_output, crm_mon_curses_output_entries } +#endif + +#endif diff --git a/tools/crm_mon.service.in b/tools/crm_mon.service.in new file mode 100644 index 0000000..7ae6649 --- /dev/null +++ b/tools/crm_mon.service.in @@ -0,0 +1,17 @@ +[Unit] +Description=Daemon for pacemaker monitor +Documentation=man:crm_mon +After=pacemaker.service + +[Service] +Type=forking +EnvironmentFile=-@CONFIGDIR@/crm_mon +ExecStart=@sbindir@/crm_mon $OPTIONS +Restart=always + +# crm_perror() writes directly to stderr, so ignore it here to avoid +# double-logging with the wrong format +StandardError=null + +[Install] +WantedBy=multi-user.target diff --git a/tools/crm_mon.upstart.in b/tools/crm_mon.upstart.in new file mode 100644 index 0000000..eb4c956 --- /dev/null +++ b/tools/crm_mon.upstart.in @@ -0,0 +1,35 @@ +# crm_mon - Daemon for pacemaker monitor +# +# + +kill timeout 3600 +respawn +respawn limit 10 3600 + +expect fork + +env prog=crm_mon +env sysconf=@CONFIGDIR@/crm_mon +env rpm_lockdir=@localstatedir@/lock/subsys +env deb_lockdir=@localstatedir@/lock + + +script + [ -f "$sysconf" ] && . "$sysconf" + exec $prog $OPTIONS +end script + +post-start script + [ -f "$sysconf" ] && . "$sysconf" + [ -z "$LOCK_FILE" -a -d "$rpm_lockdir" ] && LOCK_FILE="$rpm_lockdir/$prog" + [ -z "$LOCK_FILE" -a -d "$deb_lockdir" ] && LOCK_FILE="$deb_lockdir/$prog" + touch "$LOCK_FILE" +end script + +post-stop script + [ -f "$sysconf" ] && . "$sysconf" + [ -z "$LOCK_FILE" -a -d "$rpm_lockdir" ] && LOCK_FILE="$rpm_lockdir/$prog" + [ -z "$LOCK_FILE" -a -d "$deb_lockdir" ] && LOCK_FILE="$deb_lockdir/$prog" + rm -f "$LOCK_FILE" +end script + diff --git a/tools/crm_mon_curses.c b/tools/crm_mon_curses.c new file mode 100644 index 0000000..769c7c9 --- /dev/null +++ b/tools/crm_mon_curses.c @@ -0,0 +1,490 @@ +/* + * Copyright 2019-2022 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU Lesser General Public License + * version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY. + */ + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "crm_mon.h" + +#if CURSES_ENABLED + +GOptionEntry crm_mon_curses_output_entries[] = { + { NULL } +}; + +typedef struct curses_list_data_s { + unsigned int len; + char *singular_noun; + char *plural_noun; +} curses_list_data_t; + +typedef struct private_data_s { + GQueue *parent_q; +} private_data_t; + +static void +curses_free_priv(pcmk__output_t *out) { + private_data_t *priv = NULL; + + if (out == NULL || out->priv == NULL) { + return; + } + + priv = out->priv; + + g_queue_free(priv->parent_q); + free(priv); + out->priv = NULL; +} + +static bool +curses_init(pcmk__output_t *out) { + private_data_t *priv = NULL; + + CRM_ASSERT(out != NULL); + + /* If curses_init was previously called on this output struct, just return. */ + if (out->priv != NULL) { + return true; + } else { + out->priv = calloc(1, sizeof(private_data_t)); + if (out->priv == NULL) { + return false; + } + + priv = out->priv; + } + + priv->parent_q = g_queue_new(); + + initscr(); + cbreak(); + noecho(); + + return true; +} + +static void +curses_finish(pcmk__output_t *out, crm_exit_t exit_status, bool print, void **copy_dest) { + CRM_ASSERT(out != NULL); + + echo(); + nocbreak(); + endwin(); +} + +static void +curses_reset(pcmk__output_t *out) { + CRM_ASSERT(out != NULL); + + curses_free_priv(out); + curses_init(out); +} + +static void +curses_subprocess_output(pcmk__output_t *out, int exit_status, + const char *proc_stdout, const char *proc_stderr) { + CRM_ASSERT(out != NULL); + + if (proc_stdout != NULL) { + printw("%s\n", proc_stdout); + } + + if (proc_stderr != NULL) { + printw("%s\n", proc_stderr); + } + + clrtoeol(); + refresh(); +} + +/* curses_version is defined in curses.h, so we can't use that name here. + * This function is empty because we create a text object instead of a console + * object if version is requested, so this is never called. + */ +static void +curses_ver(pcmk__output_t *out, bool extended) { + CRM_ASSERT(out != NULL); +} + +G_GNUC_PRINTF(2, 3) +static void +curses_error(pcmk__output_t *out, const char *format, ...) { + va_list ap; + + CRM_ASSERT(out != NULL); + + /* Informational output does not get indented, to separate it from other + * potentially indented list output. + */ + va_start(ap, format); + vw_printw(stdscr, format, ap); + va_end(ap); + + /* Add a newline. */ + addch('\n'); + + clrtoeol(); + refresh(); + sleep(2); +} + +G_GNUC_PRINTF(2, 3) +static int +curses_info(pcmk__output_t *out, const char *format, ...) { + va_list ap; + + CRM_ASSERT(out != NULL); + + if (out->is_quiet(out)) { + return pcmk_rc_no_output; + } + + /* Informational output does not get indented, to separate it from other + * potentially indented list output. + */ + va_start(ap, format); + vw_printw(stdscr, format, ap); + va_end(ap); + + /* Add a newline. */ + addch('\n'); + + clrtoeol(); + refresh(); + return pcmk_rc_ok; +} + +static void +curses_output_xml(pcmk__output_t *out, const char *name, const char *buf) { + CRM_ASSERT(out != NULL); + curses_indented_printf(out, "%s", buf); +} + +G_GNUC_PRINTF(4, 5) +static void +curses_begin_list(pcmk__output_t *out, const char *singular_noun, const char *plural_noun, + const char *format, ...) { + private_data_t *priv = NULL; + curses_list_data_t *new_list = NULL; + va_list ap; + + CRM_ASSERT(out != NULL && out->priv != NULL); + priv = out->priv; + + /* Empty formats can be used to create a new level of indentation, but without + * displaying some sort of list header. In that case we need to not do any of + * this stuff. vw_printw will act weird if told to print a NULL. + */ + if (format != NULL) { + va_start(ap, format); + + curses_indented_vprintf(out, format, ap); + printw(":\n"); + + va_end(ap); + } + + new_list = calloc(1, sizeof(curses_list_data_t)); + new_list->len = 0; + pcmk__str_update(&new_list->singular_noun, singular_noun); + pcmk__str_update(&new_list->plural_noun, plural_noun); + + g_queue_push_tail(priv->parent_q, new_list); +} + +G_GNUC_PRINTF(3, 4) +static void +curses_list_item(pcmk__output_t *out, const char *id, const char *format, ...) { + va_list ap; + + CRM_ASSERT(out != NULL); + + va_start(ap, format); + + if (id != NULL) { + curses_indented_printf(out, "%s: ", id); + vw_printw(stdscr, format, ap); + } else { + curses_indented_vprintf(out, format, ap); + } + + addch('\n'); + va_end(ap); + + out->increment_list(out); +} + +static void +curses_increment_list(pcmk__output_t *out) { + private_data_t *priv = NULL; + gpointer tail; + + CRM_ASSERT(out != NULL && out->priv != NULL); + priv = out->priv; + + tail = g_queue_peek_tail(priv->parent_q); + CRM_ASSERT(tail != NULL); + ((curses_list_data_t *) tail)->len++; +} + +static void +curses_end_list(pcmk__output_t *out) { + private_data_t *priv = NULL; + curses_list_data_t *node = NULL; + + CRM_ASSERT(out != NULL && out->priv != NULL); + priv = out->priv; + + node = g_queue_pop_tail(priv->parent_q); + + if (node->singular_noun != NULL && node->plural_noun != NULL) { + if (node->len == 1) { + curses_indented_printf(out, "%d %s found\n", node->len, node->singular_noun); + } else { + curses_indented_printf(out, "%d %s found\n", node->len, node->plural_noun); + } + } + + free(node); +} + +static bool +curses_is_quiet(pcmk__output_t *out) { + CRM_ASSERT(out != NULL); + return out->quiet; +} + +static void +curses_spacer(pcmk__output_t *out) { + CRM_ASSERT(out != NULL); + addch('\n'); +} + +static void +curses_progress(pcmk__output_t *out, bool end) { + CRM_ASSERT(out != NULL); + + if (end) { + printw(".\n"); + } else { + addch('.'); + } +} + +static void +curses_prompt(const char *prompt, bool do_echo, char **dest) +{ + int rc = OK; + + CRM_ASSERT(prompt != NULL && dest != NULL); + + /* This is backwards from the text version of this function on purpose. We + * disable echo by default in curses_init, so we need to enable it here if + * asked for. + */ + if (do_echo) { + rc = echo(); + } + + if (rc == OK) { + printw("%s: ", prompt); + + if (*dest != NULL) { + free(*dest); + } + + *dest = calloc(1, 1024); + /* On older systems, scanw is defined as taking a char * for its first argument, + * while newer systems rightly want a const char *. Accomodate both here due + * to building with -Werror. + */ + rc = scanw((NCURSES_CONST char *) "%1023s", *dest); + addch('\n'); + } + + if (rc < 1) { + free(*dest); + *dest = NULL; + } + + if (do_echo) { + noecho(); + } +} + +pcmk__output_t * +crm_mon_mk_curses_output(char **argv) { + pcmk__output_t *retval = calloc(1, sizeof(pcmk__output_t)); + + if (retval == NULL) { + return NULL; + } + + retval->fmt_name = "console"; + retval->request = pcmk__quote_cmdline(argv); + + retval->init = curses_init; + retval->free_priv = curses_free_priv; + retval->finish = curses_finish; + retval->reset = curses_reset; + + retval->register_message = pcmk__register_message; + retval->message = pcmk__call_message; + + retval->subprocess_output = curses_subprocess_output; + retval->version = curses_ver; + retval->err = curses_error; + retval->info = curses_info; + retval->transient = curses_info; + retval->output_xml = curses_output_xml; + + retval->begin_list = curses_begin_list; + retval->list_item = curses_list_item; + retval->increment_list = curses_increment_list; + retval->end_list = curses_end_list; + + retval->is_quiet = curses_is_quiet; + retval->spacer = curses_spacer; + retval->progress = curses_progress; + retval->prompt = curses_prompt; + + return retval; +} + +G_GNUC_PRINTF(2, 0) +void +curses_formatted_vprintf(pcmk__output_t *out, const char *format, va_list args) { + vw_printw(stdscr, format, args); + + clrtoeol(); + refresh(); +} + +G_GNUC_PRINTF(2, 3) +void +curses_formatted_printf(pcmk__output_t *out, const char *format, ...) { + va_list ap; + + va_start(ap, format); + curses_formatted_vprintf(out, format, ap); + va_end(ap); +} + +G_GNUC_PRINTF(2, 0) +void +curses_indented_vprintf(pcmk__output_t *out, const char *format, va_list args) { + int level = 0; + private_data_t *priv = NULL; + + CRM_ASSERT(out != NULL && out->priv != NULL); + + priv = out->priv; + + level = g_queue_get_length(priv->parent_q); + + for (int i = 0; i < level; i++) { + printw(" "); + } + + if (level > 0) { + printw("* "); + } + + curses_formatted_vprintf(out, format, args); +} + +G_GNUC_PRINTF(2, 3) +void +curses_indented_printf(pcmk__output_t *out, const char *format, ...) { + va_list ap; + + va_start(ap, format); + curses_indented_vprintf(out, format, ap); + va_end(ap); +} + +PCMK__OUTPUT_ARGS("maint-mode", "unsigned long long int") +static int +cluster_maint_mode_console(pcmk__output_t *out, va_list args) { + unsigned long long flags = va_arg(args, unsigned long long); + + if (pcmk_is_set(flags, pe_flag_maintenance_mode)) { + curses_formatted_printf(out, "\n *** Resource management is DISABLED ***\n"); + curses_formatted_printf(out, " The cluster will not attempt to start, stop or recover services\n"); + return pcmk_rc_ok; + } else if (pcmk_is_set(flags, pe_flag_stop_everything)) { + curses_formatted_printf(out, "\n *** Resource management is DISABLED ***\n"); + curses_formatted_printf(out, " The cluster will keep all resources stopped\n"); + return pcmk_rc_ok; + } else { + return pcmk_rc_no_output; + } +} + +PCMK__OUTPUT_ARGS("cluster-status", "pe_working_set_t *", + "enum pcmk_pacemakerd_state", "crm_exit_t", + "stonith_history_t *", "enum pcmk__fence_history", "uint32_t", + "uint32_t", "const char *", "GList *", "GList *") +static int +cluster_status_console(pcmk__output_t *out, va_list args) { + int rc = pcmk_rc_no_output; + + clear(); + rc = pcmk__cluster_status_text(out, args); + refresh(); + return rc; +} + +PCMK__OUTPUT_ARGS("stonith-event", "stonith_history_t *", "bool", "bool", + "const char *", "uint32_t") +static int +stonith_event_console(pcmk__output_t *out, va_list args) +{ + stonith_history_t *event = va_arg(args, stonith_history_t *); + bool full_history = va_arg(args, int); + bool completed_only G_GNUC_UNUSED = va_arg(args, int); + const char *succeeded = va_arg(args, const char *); + uint32_t show_opts = va_arg(args, uint32_t); + + gchar *desc = stonith__history_description(event, full_history, succeeded, + show_opts); + + + curses_indented_printf(out, "%s\n", desc); + g_free(desc); + return pcmk_rc_ok; +} + +static pcmk__message_entry_t fmt_functions[] = { + { "cluster-status", "console", cluster_status_console }, + { "maint-mode", "console", cluster_maint_mode_console }, + { "stonith-event", "console", stonith_event_console }, + + { NULL, NULL, NULL } +}; + +#endif + +void +crm_mon_register_messages(pcmk__output_t *out) { +#if CURSES_ENABLED + pcmk__register_messages(out, fmt_functions); +#endif +} diff --git a/tools/crm_node.8.inc b/tools/crm_node.8.inc new file mode 100644 index 0000000..84cef12 --- /dev/null +++ b/tools/crm_node.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crm_node [command] [options] + +/level node information/ +.SH OPTIONS diff --git a/tools/crm_node.c b/tools/crm_node.c new file mode 100644 index 0000000..ac2a190 --- /dev/null +++ b/tools/crm_node.c @@ -0,0 +1,601 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#define SUMMARY "crm_node - Tool for displaying low-level node information" + +struct { + gboolean corosync; + gboolean dangerous_cmd; + gboolean force_flag; + char command; + int nodeid; + char *target_uname; +} options = { + .command = '\0', + .force_flag = FALSE +}; + +gboolean command_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean name_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean remove_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); + +static GMainLoop *mainloop = NULL; +static crm_exit_t exit_code = CRM_EX_OK; + +#define INDENT " " + +static GOptionEntry command_entries[] = { + { "cluster-id", 'i', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display this node's cluster id", + NULL }, + { "list", 'l', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display all known members (past and present) of this cluster", + NULL }, + { "name", 'n', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the name used by the cluster for this node", + NULL }, + { "partition", 'p', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the members of this partition", + NULL }, + { "quorum", 'q', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display a 1 if our partition has quorum, 0 if not", + NULL }, + { "name-for-id", 'N', 0, G_OPTION_ARG_CALLBACK, name_cb, + "Display the name used by the cluster for the node with the specified ID", + "ID" }, + { "remove", 'R', 0, G_OPTION_ARG_CALLBACK, remove_cb, + "(Advanced) Remove the (stopped) node with the specified name from Pacemaker's\n" + INDENT "configuration and caches (the node must already have been removed from\n" + INDENT "the underlying cluster stack configuration", + "NAME" }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "force", 'f', 0, G_OPTION_ARG_NONE, &options.force_flag, + NULL, + NULL }, +#if SUPPORT_COROSYNC + /* Unused and deprecated */ + { "corosync", 'C', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &options.corosync, + NULL, + NULL }, +#endif + + // @TODO add timeout option for when IPC replies are needed + + { NULL } +}; + +gboolean +command_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_eq("-i", option_name, pcmk__str_casei) || pcmk__str_eq("--cluster-id", option_name, pcmk__str_casei)) { + options.command = 'i'; + } else if (pcmk__str_eq("-l", option_name, pcmk__str_casei) || pcmk__str_eq("--list", option_name, pcmk__str_casei)) { + options.command = 'l'; + } else if (pcmk__str_eq("-n", option_name, pcmk__str_casei) || pcmk__str_eq("--name", option_name, pcmk__str_casei)) { + options.command = 'n'; + } else if (pcmk__str_eq("-p", option_name, pcmk__str_casei) || pcmk__str_eq("--partition", option_name, pcmk__str_casei)) { + options.command = 'p'; + } else if (pcmk__str_eq("-q", option_name, pcmk__str_casei) || pcmk__str_eq("--quorum", option_name, pcmk__str_casei)) { + options.command = 'q'; + } else { + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "Unknown param passed to command_cb: %s\n", option_name); + return FALSE; + } + + return TRUE; +} + +gboolean +name_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.command = 'N'; + pcmk__scan_min_int(optarg, &(options.nodeid), 0); + return TRUE; +} + +gboolean +remove_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (optarg == NULL) { + crm_err("-R option requires an argument"); + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "-R option requires an argument"); + return FALSE; + } + + options.command = 'R'; + options.dangerous_cmd = TRUE; + pcmk__str_update(&options.target_uname, optarg); + return TRUE; +} + +static gint +sort_node(gconstpointer a, gconstpointer b) +{ + const pcmk_controld_api_node_t *node_a = a; + const pcmk_controld_api_node_t *node_b = b; + + return pcmk__numeric_strcasecmp((node_a->uname? node_a->uname : ""), + (node_b->uname? node_b->uname : "")); +} + +static void +controller_event_cb(pcmk_ipc_api_t *controld_api, + enum pcmk_ipc_event event_type, crm_exit_t status, + void *event_data, void *user_data) +{ + pcmk_controld_api_reply_t *reply = event_data; + + switch (event_type) { + case pcmk_ipc_event_disconnect: + if (exit_code == CRM_EX_DISCONNECT) { // Unexpected + fprintf(stderr, "error: Lost connection to controller\n"); + } + goto done; + break; + + case pcmk_ipc_event_reply: + break; + + default: + return; + } + + if (status != CRM_EX_OK) { + fprintf(stderr, "error: Bad reply from controller: %s\n", + crm_exit_str(status)); + goto done; + } + + // Parse desired info from reply and display to user + switch (options.command) { + case 'i': + if (reply->reply_type != pcmk_controld_reply_info) { + fprintf(stderr, + "error: Unknown reply type %d from controller\n", + reply->reply_type); + goto done; + } + if (reply->data.node_info.id == 0) { + fprintf(stderr, + "error: Controller reply did not contain node ID\n"); + exit_code = CRM_EX_PROTOCOL; + goto done; + } + printf("%d\n", reply->data.node_info.id); + break; + + case 'n': + case 'N': + if (reply->reply_type != pcmk_controld_reply_info) { + fprintf(stderr, + "error: Unknown reply type %d from controller\n", + reply->reply_type); + goto done; + } + if (reply->data.node_info.uname == NULL) { + fprintf(stderr, "Node is not known to cluster\n"); + exit_code = CRM_EX_NOHOST; + goto done; + } + printf("%s\n", reply->data.node_info.uname); + break; + + case 'q': + if (reply->reply_type != pcmk_controld_reply_info) { + fprintf(stderr, + "error: Unknown reply type %d from controller\n", + reply->reply_type); + goto done; + } + printf("%d\n", reply->data.node_info.have_quorum); + if (!(reply->data.node_info.have_quorum)) { + exit_code = CRM_EX_QUORUM; + goto done; + } + break; + + case 'l': + case 'p': + if (reply->reply_type != pcmk_controld_reply_nodes) { + fprintf(stderr, + "error: Unknown reply type %d from controller\n", + reply->reply_type); + goto done; + } + reply->data.nodes = g_list_sort(reply->data.nodes, sort_node); + for (GList *node_iter = reply->data.nodes; + node_iter != NULL; node_iter = node_iter->next) { + + pcmk_controld_api_node_t *node = node_iter->data; + const char *uname = (node->uname? node->uname : ""); + const char *state = (node->state? node->state : ""); + + if (options.command == 'l') { + printf("%lu %s %s\n", + (unsigned long) node->id, uname, state); + + // i.e. CRM_NODE_MEMBER, but we don't want to include cluster.h + } else if (!strcmp(state, "member")) { + printf("%s ", uname); + } + } + if (options.command == 'p') { + printf("\n"); + } + break; + + default: + fprintf(stderr, "internal error: Controller reply not expected\n"); + exit_code = CRM_EX_SOFTWARE; + goto done; + } + + // Success + exit_code = CRM_EX_OK; +done: + pcmk_disconnect_ipc(controld_api); + pcmk_quit_main_loop(mainloop, 10); +} + +static void +run_controller_mainloop(uint32_t nodeid, bool list_nodes) +{ + pcmk_ipc_api_t *controld_api = NULL; + int rc; + + // Set disconnect exit code to handle unexpected disconnects + exit_code = CRM_EX_DISCONNECT; + + // Create controller IPC object + rc = pcmk_new_ipc_api(&controld_api, pcmk_ipc_controld); + if (rc != pcmk_rc_ok) { + fprintf(stderr, "error: Could not connect to controller: %s\n", + pcmk_rc_str(rc)); + return; + } + pcmk_register_ipc_callback(controld_api, controller_event_cb, NULL); + + // Connect to controller + rc = pcmk_connect_ipc(controld_api, pcmk_ipc_dispatch_main); + if (rc != pcmk_rc_ok) { + fprintf(stderr, "error: Could not connect to controller: %s\n", + pcmk_rc_str(rc)); + exit_code = pcmk_rc2exitc(rc); + return; + } + + if (list_nodes) { + rc = pcmk_controld_api_list_nodes(controld_api); + } else { + rc = pcmk_controld_api_node_info(controld_api, nodeid); + } + if (rc != pcmk_rc_ok) { + fprintf(stderr, "error: Could not ping controller: %s\n", + pcmk_rc_str(rc)); + pcmk_disconnect_ipc(controld_api); + exit_code = pcmk_rc2exitc(rc); + return; + } + + // Run main loop to get controller reply via controller_event_cb() + mainloop = g_main_loop_new(NULL, FALSE); + g_main_loop_run(mainloop); + g_main_loop_unref(mainloop); + mainloop = NULL; + pcmk_free_ipc_api(controld_api); +} + +static void +print_node_name(void) +{ + // Check environment first (i.e. when called by resource agent) + const char *name = getenv("OCF_RESKEY_" CRM_META "_" XML_LRM_ATTR_TARGET); + + if (name != NULL) { + printf("%s\n", name); + exit_code = CRM_EX_OK; + return; + + } else { + /* Otherwise ask the controller. + * FIXME: Use pcmk__query_node_name() after conversion to formatted + * output. + */ + run_controller_mainloop(0, false); + } +} + +static int +cib_remove_node(long id, const char *name) +{ + int rc; + cib_t *cib = NULL; + xmlNode *node = NULL; + xmlNode *node_state = NULL; + + crm_trace("Removing %s from the CIB", name); + + if(name == NULL && id == 0) { + return -ENOTUNIQ; + } + + node = create_xml_node(NULL, XML_CIB_TAG_NODE); + node_state = create_xml_node(NULL, XML_CIB_TAG_STATE); + + crm_xml_add(node, XML_ATTR_UNAME, name); + crm_xml_add(node_state, XML_ATTR_UNAME, name); + if (id > 0) { + crm_xml_set_id(node, "%ld", id); + crm_xml_add(node_state, XML_ATTR_ID, ID(node)); + } + + cib = cib_new(); + cib->cmds->signon(cib, crm_system_name, cib_command); + + rc = cib->cmds->remove(cib, XML_CIB_TAG_NODES, node, cib_sync_call); + if (rc != pcmk_ok) { + printf("Could not remove %s[%ld] from " XML_CIB_TAG_NODES ": %s", + name, id, pcmk_strerror(rc)); + } + rc = cib->cmds->remove(cib, XML_CIB_TAG_STATUS, node_state, cib_sync_call); + if (rc != pcmk_ok) { + printf("Could not remove %s[%ld] from " XML_CIB_TAG_STATUS ": %s", + name, id, pcmk_strerror(rc)); + } + + cib__clean_up_connection(&cib); + return rc; +} + +static int +controller_remove_node(const char *node_name, long nodeid) +{ + pcmk_ipc_api_t *controld_api = NULL; + int rc; + + // Create controller IPC object + rc = pcmk_new_ipc_api(&controld_api, pcmk_ipc_controld); + if (rc != pcmk_rc_ok) { + fprintf(stderr, "error: Could not connect to controller: %s\n", + pcmk_rc_str(rc)); + return ENOTCONN; + } + + // Connect to controller (without main loop) + rc = pcmk_connect_ipc(controld_api, pcmk_ipc_dispatch_sync); + if (rc != pcmk_rc_ok) { + fprintf(stderr, "error: Could not connect to controller: %s\n", + pcmk_rc_str(rc)); + pcmk_free_ipc_api(controld_api); + return rc; + } + + rc = pcmk_ipc_purge_node(controld_api, node_name, nodeid); + if (rc != pcmk_rc_ok) { + fprintf(stderr, + "error: Could not clear node from controller's cache: %s\n", + pcmk_rc_str(rc)); + } + + pcmk_free_ipc_api(controld_api); + return pcmk_rc_ok; +} + +static int +tools_remove_node_cache(const char *node_name, long nodeid, const char *target) +{ + int rc = -1; + crm_ipc_t *conn = NULL; + xmlNode *cmd = NULL; + + conn = crm_ipc_new(target, 0); + if (!conn) { + return -ENOTCONN; + } + if (!crm_ipc_connect(conn)) { + crm_perror(LOG_ERR, "Connection to %s failed", target); + crm_ipc_destroy(conn); + return -ENOTCONN; + } + + crm_trace("Removing %s[%ld] from the %s membership cache", + node_name, nodeid, target); + + if(pcmk__str_eq(target, T_ATTRD, pcmk__str_casei)) { + cmd = create_xml_node(NULL, __func__); + + crm_xml_add(cmd, F_TYPE, T_ATTRD); + crm_xml_add(cmd, F_ORIG, crm_system_name); + + crm_xml_add(cmd, PCMK__XA_TASK, PCMK__ATTRD_CMD_PEER_REMOVE); + + pcmk__xe_add_node(cmd, node_name, nodeid); + + } else { // Fencer or pacemakerd + cmd = create_request(CRM_OP_RM_NODE_CACHE, NULL, NULL, target, + crm_system_name, NULL); + if (nodeid > 0) { + crm_xml_set_id(cmd, "%ld", nodeid); + } + crm_xml_add(cmd, XML_ATTR_UNAME, node_name); + } + + rc = crm_ipc_send(conn, cmd, 0, 0, NULL); + crm_debug("%s peer cache cleanup for %s (%ld): %d", + target, node_name, nodeid, rc); + + if (rc > 0) { + // @TODO Should this be done just once after all the rest? + rc = cib_remove_node(nodeid, node_name); + } + + if (conn) { + crm_ipc_close(conn); + crm_ipc_destroy(conn); + } + free_xml(cmd); + return rc > 0 ? 0 : rc; +} + +static void +remove_node(const char *target_uname) +{ + int rc; + int d = 0; + long nodeid = 0; + const char *node_name = NULL; + char *endptr = NULL; + const char *daemons[] = { + "stonith-ng", + T_ATTRD, + CRM_SYSTEM_MCP, + }; + + // Check whether node was specified by name or numeric ID + errno = 0; + nodeid = strtol(target_uname, &endptr, 10); + if ((errno != 0) || (endptr == target_uname) || (*endptr != '\0') + || (nodeid <= 0)) { + // It's not a positive integer, so assume it's a node name + nodeid = 0; + node_name = target_uname; + } + + rc = controller_remove_node(node_name, nodeid); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + return; + } + + for (d = 0; d < PCMK__NELEM(daemons); d++) { + if (tools_remove_node_cache(node_name, nodeid, daemons[d])) { + crm_err("Failed to connect to %s to remove node '%s'", + daemons[d], target_uname); + exit_code = CRM_EX_ERROR; + return; + } + } + exit_code = CRM_EX_OK; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup *group) { + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'Q', 0, G_OPTION_ARG_NONE, &(args->quiet), + "Be less descriptive in output.", + NULL }, + + { NULL } + }; + + context = pcmk__build_arg_context(args, NULL, &group, NULL); + + /* Add the -q option, which cannot be part of the globally supported options + * because some tools use that flag for something else. + */ + pcmk__add_main_args(context, extra_prog_entries); + + pcmk__add_arg_group(context, "commands", "Commands:", + "Show command help", command_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +int +main(int argc, char **argv) +{ + GError *error = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "NR"); + GOptionContext *context = build_arg_context(args, output_group); + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_node", args->verbosity); + + if (args->version) { + g_strfreev(processed_args); + pcmk__free_arg_context(context); + /* FIXME: When crm_node is converted to use formatted output, this can go. */ + pcmk__cli_help('v'); + } + + if (options.command == 0) { + char *help = g_option_context_get_help(context, TRUE, NULL); + + fprintf(stderr, "%s", help); + g_free(help); + exit_code = CRM_EX_USAGE; + goto done; + } + + if (options.dangerous_cmd && options.force_flag == FALSE) { + fprintf(stderr, "The supplied command is considered dangerous." + " To prevent accidental destruction of the cluster," + " the --force flag is required in order to proceed.\n"); + exit_code = CRM_EX_USAGE; + goto done; + } + + switch (options.command) { + case 'n': + print_node_name(); + break; + case 'R': + remove_node(options.target_uname); + break; + case 'i': + case 'q': + case 'N': + /* FIXME: Use pcmk__query_node_name() after conversion to formatted + * output + */ + run_controller_mainloop(options.nodeid, false); + break; + case 'l': + case 'p': + run_controller_mainloop(0, true); + break; + default: + break; + } + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + pcmk__output_and_clear_error(&error, NULL); + return crm_exit(exit_code); +} diff --git a/tools/crm_report.in b/tools/crm_report.in new file mode 100644 index 0000000..1818879 --- /dev/null +++ b/tools/crm_report.in @@ -0,0 +1,481 @@ +#!/bin/sh +# +# Copyright 2010-2019 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +TEMP=`@GETOPT_PATH@ \ + -o hv?xl:f:t:n:T:L:p:c:dSCu:D:MVse: \ + --long help,corosync,cts:,cts-log:,dest:,node:,nodes:,from:,to:,sos-mode,logfile:,as-directory,single-node,cluster:,user:,max-depth:,version,features,rsh: \ + -n 'crm_report' -- "$@"` +# The quotes around $TEMP are essential +eval set -- "$TEMP" + +progname=$(basename "$0") +rsh="ssh -T" +tests="" +nodes="" +compress=1 +cluster="any" +ssh_user="root" +search_logs=1 +sos_mode=0 +report_data=`dirname $0` +maxdepth=5 + +extra_logs="" +sanitize_patterns="passw.*" +log_patterns="CRIT: ERROR:" + +usage() { +cat< "$l_base/$HALOG_F" + fi + + for node in $nodes; do + cat <$l_base/.env +LABEL="$label" +REPORT_HOME="$r_base" +REPORT_MASTER="$host" +REPORT_TARGET="$node" +LOG_START=$start +LOG_END=$end +REMOVE=1 +SANITIZE="$sanitize_patterns" +CLUSTER=$cluster +LOG_PATTERNS="$log_patterns" +EXTRA_LOGS="$extra_logs" +SEARCH_LOGS=$search_logs +SOS_MODE=$sos_mode +verbose=$verbose +maxdepth=$maxdepth +EOF + + if [ $host = $node ]; then + cat <>$l_base/.env +REPORT_HOME="$l_base" +EOF + cat $l_base/.env $report_data/report.common $report_data/report.collector > $l_base/collector + bash $l_base/collector + else + cat $l_base/.env $report_data/report.common $report_data/report.collector \ + | $rsh -l $ssh_user $node -- "mkdir -p $r_base; cat > $r_base/collector; bash $r_base/collector" | (cd $l_base && tar mxf -) + fi + done + + analyze $l_base > $l_base/$ANALYSIS_F + if [ -f $l_base/$HALOG_F ]; then + node_events $l_base/$HALOG_F > $l_base/$EVENTS_F + fi + + for node in $nodes; do + cat $l_base/$node/$ANALYSIS_F >> $l_base/$ANALYSIS_F + if [ -s $l_base/$node/$EVENTS_F ]; then + cat $l_base/$node/$EVENTS_F >> $l_base/$EVENTS_F + elif [ -s $l_base/$HALOG_F ]; then + awk "\$4==\"$nodes\"" $l_base/$EVENTS_F >> $l_base/$n/$EVENTS_F + fi + done + + log " " + if [ $compress = 1 ]; then + fname=`shrink $l_base` + rm -rf $l_base + log "Collected results are available in $fname" + log " " + log "Please create a bug entry at" + log " @BUG_URL@" + log "Include a description of your problem and attach this tarball" + log " " + log "Thank you for taking time to create this report." + else + log "Collected results are available in $l_base" + fi + log " " +} + +# +# check if files have same content in the cluster +# +cibdiff() { + d1=$(dirname $1) + d2=$(dirname $2) + + if [ -f "$d1/RUNNING" ] && [ ! -f "$d2/RUNNING" ]; then + DIFF_OK=0 + elif [ -f "$d1/STOPPED" ] && [ ! -f "$d2/STOPPED" ]; then + DIFF_OK=0 + else + DIFF_OK=1 + fi + + if [ $DIFF_OK -eq 1 ]; then + if which crm_diff > /dev/null 2>&1; then + crm_diff -c -n $1 -o $2 + else + info "crm_diff(8) not found, cannot diff CIBs" + fi + else + echo "can't compare cibs from running and stopped systems" + fi +} + +diffcheck() { + [ -f "$1" ] || { + echo "$1 does not exist" + return 1 + } + [ -f "$2" ] || { + echo "$2 does not exist" + return 1 + } + case $(basename "$1") in + $CIB_F) cibdiff $1 $2 ;; + *) diff -u $1 $2 ;; + esac +} + +# +# remove duplicates if files are same, make links instead +# +consolidate() { + for n in $nodes; do + if [ -f $1/$2 ]; then + rm $1/$n/$2 + else + mv $1/$n/$2 $1 + fi + ln -s ../$2 $1/$n + done +} + +analyze_one() { + rc=0 + node0="" + for n in $nodes; do + if [ "$node0" ]; then + diffcheck $1/$node0/$2 $1/$n/$2 + rc=$(($rc+$?)) + else + node0=$n + fi + done + return $rc +} + +analyze() { + flist="$MEMBERSHIP_F $CIB_F $CRM_MON_F $SYSINFO_F" + for f in $flist; do + printf "Diff $f... " + ls $1/*/$f >/dev/null 2>&1 || { + echo "no $1/*/$f :/" + continue + } + if analyze_one $1 $f; then + echo "OK" + [ "$f" != $CIB_F ] && consolidate $1 $f + else + echo "" + fi + done +} + +do_cts() { + test_sets=`echo $tests | tr ',' ' '` + for test_set in $test_sets; do + + start_time=0 + start_test=`echo $test_set | tr '-' ' ' | awk '{print $1}'` + + end_time=0 + end_test=`echo $test_set | tr '-' ' ' | awk '{print $2}'` + + if [ x$end_test = x ]; then + msg="Extracting test $start_test" + label="CTS-$start_test-`date +"%b-%d-%Y"`" + end_test=`expr $start_test + 1` + else + msg="Extracting tests $start_test to $end_test" + label="CTS-$start_test-$end_test-`date +"%b-%d-%Y"`" + end_test=`expr $end_test + 1` + fi + + if [ $start_test = 0 ]; then + start_pat="BEGINNING [0-9].* TESTS" + else + start_pat="Running test.*\[ *$start_test\]" + fi + + if [ x$ctslog = x ]; then + ctslog=`findmsg 1 "$start_pat"` + + if [ x$ctslog = x ]; then + fatal "No CTS control file detected" + else + log "Using CTS control file: $ctslog" + fi + fi + + line=`grep -n "$start_pat" $ctslog | tail -1 | sed 's/:.*//'` + if [ ! -z "$line" ]; then + start_time=`linetime $ctslog $line` + fi + + line=`grep -n "Running test.*\[ *$end_test\]" $ctslog | tail -1 | sed 's/:.*//'` + if [ ! -z "$line" ]; then + end_time=`linetime $ctslog $line` + fi + + if [ -z "$nodes" ]; then + nodes=`grep CTS: $ctslog | grep -v debug: | grep " \* " | sed s:.*\\\*::g | sort -u | tr '\\n' ' '` + log "Calculated node list: $nodes" + fi + + if [ $end_time -lt $start_time ]; then + debug "Test didn't complete, grabbing everything up to now" + end_time=`date +%s` + fi + + if [ $start_time != 0 ];then + log "$msg (`time2str $start_time` to `time2str $end_time`)" + collect_data $label $start_time $end_time $ctslog + else + fatal "$msg failed: not found" + fi + done +} + +node_names_from_xml() { + awk ' + /uname/ { + for( i=1; i<=NF; i++ ) + if( $i~/^uname=/ ) { + sub("uname=.","",$i); + sub("\".*","",$i); + print $i; + next; + } + } + ' | tr '\n' ' ' +} + +getnodes() { + cluster="$1" + + # 1. Live (cluster nodes or Pacemaker Remote nodes) + # TODO: This will not detect Pacemaker Remote nodes unless they + # have ever had a permanent node attribute set, because it only + # searches the nodes section. It should also search the config + # for resources that create Pacemaker Remote nodes. + cib_nodes=$(cibadmin -Ql -o nodes 2>/dev/null) + if [ $? -eq 0 ]; then + debug "Querying CIB for nodes" + echo "$cib_nodes" | node_names_from_xml + return + fi + + # 2. Saved + if [ -f "@CRM_CONFIG_DIR@/cib.xml" ]; then + debug "Querying on-disk CIB for nodes" + grep "node " "@CRM_CONFIG_DIR@/cib.xml" | node_names_from_xml + return + fi + + # 3. logs + # TODO: Look for something like crm_update_peer +} + +if [ $compress -eq 1 ]; then + require_tar +fi + +if [ "x$tests" != "x" ]; then + do_cts + +elif [ "x$start_time" != "x" ]; then + masterlog="" + + if [ -z "$sanitize_patterns" ]; then + log "WARNING: The tarball produced by this program may contain" + log " sensitive information such as passwords." + log "" + log "We will attempt to remove such information if you use the" + log "-p option. For example: -p \"pass.*\" -p \"user.*\"" + log "" + log "However, doing this may reduce the ability for the recipients" + log "to diagnose issues and generally provide assistance." + log "" + log "IT IS YOUR RESPONSIBILITY TO PROTECT SENSITIVE DATA FROM EXPOSURE" + log "" + fi + + # If user didn't specify a cluster stack, make a best guess if possible. + if [ -z "$cluster" ] || [ "$cluster" = "any" ]; then + cluster=$(get_cluster_type) + fi + + # If user didn't specify node(s), make a best guess if possible. + if [ -z "$nodes" ]; then + nodes=`getnodes $cluster` + if [ -n "$nodes" ]; then + log "Calculated node list: $nodes" + else + fatal "Cannot determine nodes; specify --nodes or --single-node" + fi + fi + + if + echo $nodes | grep -qs $host + then + debug "We are a cluster node" + else + debug "We are a log master" + masterlog=`findmsg 1 "pacemaker-controld\\|CTS"` + fi + + + if [ -z $end_time ]; then + end_time=`perl -e 'print time()'` + fi + label="pcmk-`date +"%a-%d-%b-%Y"`" + log "Collecting data from $nodes (`time2str $start_time` to `time2str $end_time`)" + collect_data $label $start_time $end_time $masterlog +else + fatal "Not sure what to do, no tests or time ranges to extract" +fi + +# vim: set expandtab tabstop=8 softtabstop=4 shiftwidth=4 textwidth=80: diff --git a/tools/crm_resource.8.inc b/tools/crm_resource.8.inc new file mode 100644 index 0000000..a92fac6 --- /dev/null +++ b/tools/crm_resource.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crm_resource | [options] + +/Pacemaker cluster resources/ +.SH OPTIONS diff --git a/tools/crm_resource.c b/tools/crm_resource.c new file mode 100644 index 0000000..f351c26 --- /dev/null +++ b/tools/crm_resource.c @@ -0,0 +1,2182 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include + +#define SUMMARY "crm_resource - perform tasks related to Pacemaker cluster resources" + +enum rsc_command { + cmd_none = 0, // No command option given (yet) + cmd_ban, + cmd_cleanup, + cmd_clear, + cmd_colocations, + cmd_cts, + cmd_delete, + cmd_delete_param, + cmd_digests, + cmd_execute_agent, + cmd_fail, + cmd_get_param, + cmd_get_property, + cmd_list_active_ops, + cmd_list_agents, + cmd_list_all_ops, + cmd_list_alternatives, + cmd_list_instances, + cmd_list_providers, + cmd_list_resources, + cmd_list_standards, + cmd_locate, + cmd_metadata, + cmd_move, + cmd_query_raw_xml, + cmd_query_xml, + cmd_refresh, + cmd_restart, + cmd_set_param, + cmd_set_property, + cmd_wait, + cmd_why, +}; + +struct { + enum rsc_command rsc_cmd; // crm_resource command to perform + + // Infrastructure that given command needs to work + gboolean require_cib; // Whether command requires CIB IPC + int cib_options; // Options to use with CIB IPC calls + gboolean require_crmd; // Whether command requires controller IPC + gboolean require_dataset; // Whether command requires populated data set + gboolean require_resource; // Whether command requires resource specified + gboolean require_node; // Whether command requires node specified + int find_flags; // Flags to use when searching for resource + + // Command-line option values + gchar *rsc_id; // Value of --resource + gchar *rsc_type; // Value of --resource-type + gboolean force; // --force was given + gboolean clear_expired; // --expired was given + gboolean recursive; // --recursive was given + gboolean promoted_role_only; // --promoted was given + gchar *host_uname; // Value of --node + gchar *interval_spec; // Value of --interval + gchar *move_lifetime; // Value of --lifetime + gchar *operation; // Value of --operation + const char *attr_set_type; // Instance, meta, utilization, or element attribute + gchar *prop_id; // --nvpair (attribute XML ID) + char *prop_name; // Attribute name + gchar *prop_set; // --set-name (attribute block XML ID) + gchar *prop_value; // --parameter-value (attribute value) + int timeout_ms; // Parsed from --timeout value + char *agent_spec; // Standard and/or provider and/or agent + gchar *xml_file; // Value of (deprecated) --xml-file + int check_level; // Optional value of --validate or --force-check + + // Resource configuration specified via command-line arguments + gboolean cmdline_config; // Resource configuration was via arguments + char *v_agent; // Value of --agent + char *v_class; // Value of --class + char *v_provider; // Value of --provider + GHashTable *cmdline_params; // Resource parameters specified + + // Positional command-line arguments + gchar **remainder; // Positional arguments as given + GHashTable *override_params; // Resource parameter values that override config +} options = { + .attr_set_type = XML_TAG_ATTR_SETS, + .check_level = -1, + .cib_options = cib_sync_call, + .require_cib = TRUE, + .require_dataset = TRUE, + .require_resource = TRUE, +}; + +#if 0 +// @COMPAT @TODO enable this at next backward compatibility break +#define SET_COMMAND(cmd) do { \ + if (options.rsc_cmd != cmd_none) { \ + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_USAGE, \ + "Only one command option may be specified"); \ + return FALSE; \ + } \ + options.rsc_cmd = (cmd); \ + } while (0) +#else +#define SET_COMMAND(cmd) do { \ + if (options.rsc_cmd != cmd_none) { \ + reset_options(); \ + } \ + options.rsc_cmd = (cmd); \ + } while (0) +#endif + +gboolean agent_provider_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean attr_set_type_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean class_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean cleanup_refresh_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean delete_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean expired_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean list_agents_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean list_providers_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean list_standards_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean list_alternatives_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean metadata_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean option_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean fail_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean flag_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean get_param_prop_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean list_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean set_delete_param_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean set_prop_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean timeout_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean validate_or_force_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean restart_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean digests_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error); +gboolean wait_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean why_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); + +static crm_exit_t exit_code = CRM_EX_OK; +static pcmk__output_t *out = NULL; +static pcmk__common_args_t *args = NULL; + +// Things that should be cleaned up on exit +static GError *error = NULL; +static GMainLoop *mainloop = NULL; +static cib_t *cib_conn = NULL; +static pcmk_ipc_api_t *controld_api = NULL; +static pe_working_set_t *data_set = NULL; + +#define MESSAGE_TIMEOUT_S 60 + +#define INDENT " " + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +// Clean up and exit +static crm_exit_t +bye(crm_exit_t ec) +{ + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, ec, true, NULL); + pcmk__output_free(out); + } + pcmk__unregister_formats(); + + if (cib_conn != NULL) { + cib_t *save_cib_conn = cib_conn; + + cib_conn = NULL; // Ensure we can't free this twice + cib__clean_up_connection(&save_cib_conn); + } + + if (controld_api != NULL) { + pcmk_ipc_api_t *save_controld_api = controld_api; + + controld_api = NULL; // Ensure we can't free this twice + pcmk_free_ipc_api(save_controld_api); + } + + if (mainloop != NULL) { + g_main_loop_unref(mainloop); + mainloop = NULL; + } + + pe_free_working_set(data_set); + data_set = NULL; + crm_exit(ec); + return ec; +} + +static void +quit_main_loop(crm_exit_t ec) +{ + exit_code = ec; + if (mainloop != NULL) { + GMainLoop *mloop = mainloop; + + mainloop = NULL; // Don't re-enter this block + pcmk_quit_main_loop(mloop, 10); + g_main_loop_unref(mloop); + } +} + +static gboolean +resource_ipc_timeout(gpointer data) +{ + // Start with newline because "Waiting for ..." message doesn't have one + if (error != NULL) { + g_clear_error(&error); + } + + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_TIMEOUT, + _("Aborting because no messages received in %d seconds"), MESSAGE_TIMEOUT_S); + + quit_main_loop(CRM_EX_TIMEOUT); + return FALSE; +} + +static void +controller_event_callback(pcmk_ipc_api_t *api, enum pcmk_ipc_event event_type, + crm_exit_t status, void *event_data, void *user_data) +{ + switch (event_type) { + case pcmk_ipc_event_disconnect: + if (exit_code == CRM_EX_DISCONNECT) { // Unexpected + crm_info("Connection to controller was terminated"); + } + quit_main_loop(exit_code); + break; + + case pcmk_ipc_event_reply: + if (status != CRM_EX_OK) { + out->err(out, "Error: bad reply from controller: %s", + crm_exit_str(status)); + pcmk_disconnect_ipc(api); + quit_main_loop(status); + } else { + if ((pcmk_controld_api_replies_expected(api) == 0) + && mainloop && g_main_loop_is_running(mainloop)) { + out->info(out, "... got reply (done)"); + crm_debug("Got all the replies we expected"); + pcmk_disconnect_ipc(api); + quit_main_loop(CRM_EX_OK); + } else { + out->info(out, "... got reply"); + } + } + break; + + default: + break; + } +} + +static void +start_mainloop(pcmk_ipc_api_t *capi) +{ + unsigned int count = pcmk_controld_api_replies_expected(capi); + + if (count > 0) { + out->info(out, "Waiting for %u %s from the controller", + count, pcmk__plural_alt(count, "reply", "replies")); + exit_code = CRM_EX_DISCONNECT; // For unexpected disconnects + mainloop = g_main_loop_new(NULL, FALSE); + g_timeout_add(MESSAGE_TIMEOUT_S * 1000, resource_ipc_timeout, NULL); + g_main_loop_run(mainloop); + } +} + +static int +compare_id(gconstpointer a, gconstpointer b) +{ + return strcmp((const char *)a, (const char *)b); +} + +static GList * +build_constraint_list(xmlNode *root) +{ + GList *retval = NULL; + xmlNode *cib_constraints = NULL; + xmlXPathObjectPtr xpathObj = NULL; + int ndx = 0; + + cib_constraints = pcmk_find_cib_element(root, XML_CIB_TAG_CONSTRAINTS); + xpathObj = xpath_search(cib_constraints, "//" XML_CONS_TAG_RSC_LOCATION); + + for (ndx = 0; ndx < numXpathResults(xpathObj); ndx++) { + xmlNode *match = getXpathResult(xpathObj, ndx); + retval = g_list_insert_sorted(retval, (gpointer) ID(match), compare_id); + } + + freeXpathObject(xpathObj); + return retval; +} + +/* short option letters still available: eEJkKXyYZ */ + +static GOptionEntry query_entries[] = { + { "list", 'L', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, list_cb, + "List all cluster resources with status", + NULL }, + { "list-raw", 'l', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, list_cb, + "List IDs of all instantiated resources (individual members\n" + INDENT "rather than groups etc.)", + NULL }, + { "list-cts", 'c', G_OPTION_FLAG_HIDDEN|G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, list_cb, + NULL, + NULL }, + { "list-operations", 'O', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, list_cb, + "List active resource operations, optionally filtered by\n" + INDENT "--resource and/or --node", + NULL }, + { "list-all-operations", 'o', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, list_cb, + "List all resource operations, optionally filtered by\n" + INDENT "--resource and/or --node", + NULL }, + { "list-standards", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + list_standards_cb, + "List supported standards", + NULL }, + { "list-ocf-providers", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + list_providers_cb, + "List all available OCF providers", + NULL }, + { "list-agents", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, + list_agents_cb, + "List all agents available for the named standard and/or provider", + "STD:PROV" }, + { "list-ocf-alternatives", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, + list_alternatives_cb, + "List all available providers for the named OCF agent", + "AGENT" }, + { "show-metadata", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, + metadata_cb, + "Show the metadata for the named class:provider:agent", + "SPEC" }, + { "query-xml", 'q', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Show XML configuration of resource (after any template expansion)", + NULL }, + { "query-xml-raw", 'w', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Show XML configuration of resource (before any template expansion)", + NULL }, + { "get-parameter", 'g', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, get_param_prop_cb, + "Display named parameter for resource (use instance attribute\n" + INDENT "unless --element, --meta, or --utilization is specified)", + "PARAM" }, + { "get-property", 'G', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, get_param_prop_cb, + "Display named property of resource ('class', 'type', or 'provider') " + "(requires --resource)", + "PROPERTY" }, + { "locate", 'W', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Show node(s) currently running resource", + NULL }, + { "constraints", 'a', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Display the location and colocation constraints that apply to a\n" + INDENT "resource, and if --recursive is specified, to the resources\n" + INDENT "directly or indirectly involved in those colocations.\n" + INDENT "If the named resource is part of a group, or a clone or\n" + INDENT "bundle instance, constraints for the collective resource\n" + INDENT "will be shown unless --force is given.", + NULL }, + { "stack", 'A', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Equivalent to --constraints --recursive", + NULL }, + { "why", 'Y', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, why_cb, + "Show why resources are not running, optionally filtered by\n" + INDENT "--resource and/or --node", + NULL }, + + { NULL } +}; + +static GOptionEntry command_entries[] = { + { "validate", 0, G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, + validate_or_force_cb, + "Validate resource configuration by calling agent's validate-all\n" + INDENT "action. The configuration may be specified either by giving an\n" + INDENT "existing resource name with -r, or by specifying --class,\n" + INDENT "--agent, and --provider arguments, along with any number of\n" + INDENT "--option arguments. An optional LEVEL argument can be given\n" + INDENT "to control the level of checking performed.", + "LEVEL" }, + { "cleanup", 'C', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, cleanup_refresh_cb, + "If resource has any past failures, clear its history and fail\n" + INDENT "count. Optionally filtered by --resource, --node, --operation\n" + INDENT "and --interval (otherwise all). --operation and --interval\n" + INDENT "apply to fail counts, but entire history is always clear, to\n" + INDENT "allow current state to be rechecked. If the named resource is\n" + INDENT "part of a group, or one numbered instance of a clone or bundled\n" + INDENT "resource, the clean-up applies to the whole collective resource\n" + INDENT "unless --force is given.", + NULL }, + { "refresh", 'R', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, cleanup_refresh_cb, + "Delete resource's history (including failures) so its current state\n" + INDENT "is rechecked. Optionally filtered by --resource and --node\n" + INDENT "(otherwise all). If the named resource is part of a group, or one\n" + INDENT "numbered instance of a clone or bundled resource, the refresh\n" + INDENT "applies to the whole collective resource unless --force is given.", + NULL }, + { "set-parameter", 'p', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, set_delete_param_cb, + "Set named parameter for resource (requires -v). Use instance\n" + INDENT "attribute unless --element, --meta, or --utilization is " + "specified.", + "PARAM" }, + { "delete-parameter", 'd', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, set_delete_param_cb, + "Delete named parameter for resource. Use instance attribute\n" + INDENT "unless --element, --meta or, --utilization is specified.", + "PARAM" }, + { "set-property", 'S', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, set_prop_cb, + "Set named property of resource ('class', 'type', or 'provider') " + "(requires -r, -t, -v)", + "PROPERTY" }, + + { NULL } +}; + +static GOptionEntry location_entries[] = { + { "move", 'M', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Create a constraint to move resource. If --node is specified,\n" + INDENT "the constraint will be to move to that node, otherwise it\n" + INDENT "will be to ban the current node. Unless --force is specified\n" + INDENT "this will return an error if the resource is already running\n" + INDENT "on the specified node. If --force is specified, this will\n" + INDENT "always ban the current node.\n" + INDENT "Optional: --lifetime, --promoted. NOTE: This may prevent the\n" + INDENT "resource from running on its previous location until the\n" + INDENT "implicit constraint expires or is removed with --clear.", + NULL }, + { "ban", 'B', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Create a constraint to keep resource off a node.\n" + INDENT "Optional: --node, --lifetime, --promoted.\n" + INDENT "NOTE: This will prevent the resource from running on the\n" + INDENT "affected node until the implicit constraint expires or is\n" + INDENT "removed with --clear. If --node is not specified, it defaults\n" + INDENT "to the node currently running the resource for primitives\n" + INDENT "and groups, or the promoted instance of promotable clones with\n" + INDENT "promoted-max=1 (all other situations result in an error as\n" + INDENT "there is no sane default).", + NULL }, + { "clear", 'U', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, flag_cb, + "Remove all constraints created by the --ban and/or --move\n" + INDENT "commands. Requires: --resource. Optional: --node, --promoted,\n" + INDENT "--expired. If --node is not specified, all constraints created\n" + INDENT "by --ban and --move will be removed for the named resource. If\n" + INDENT "--node and --force are specified, any constraint created by\n" + INDENT "--move will be cleared, even if it is not for the specified\n" + INDENT "node. If --expired is specified, only those constraints whose\n" + INDENT "lifetimes have expired will be removed.", + NULL }, + { "expired", 'e', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, expired_cb, + "Modifies the --clear argument to remove constraints with\n" + INDENT "expired lifetimes.", + NULL }, + { "lifetime", 'u', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.move_lifetime, + "Lifespan (as ISO 8601 duration) of created constraints (with\n" + INDENT "-B, -M) see https://en.wikipedia.org/wiki/ISO_8601#Durations)", + "TIMESPEC" }, + { "promoted", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.promoted_role_only, + "Limit scope of command to promoted role (with -B, -M, -U). For\n" + INDENT "-B and -M, previously promoted instances may remain\n" + INDENT "active in the unpromoted role.", + NULL }, + + // Deprecated since 2.1.0 + { "master", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, + &options.promoted_role_only, + "Deprecated: Use --promoted instead", NULL }, + + { NULL } +}; + +static GOptionEntry advanced_entries[] = { + { "delete", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, delete_cb, + "(Advanced) Delete a resource from the CIB. Required: -t", + NULL }, + { "fail", 'F', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, fail_cb, + "(Advanced) Tell the cluster this resource has failed", + NULL }, + { "restart", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, restart_cb, + "(Advanced) Tell the cluster to restart this resource and\n" + INDENT "anything that depends on it", + NULL }, + { "wait", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, wait_cb, + "(Advanced) Wait until the cluster settles into a stable state", + NULL }, + { "digests", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, digests_cb, + "(Advanced) Show parameter hashes that Pacemaker uses to detect\n" + INDENT "configuration changes (only accurate if there is resource\n" + INDENT "history on the specified node). Required: --resource, --node.\n" + INDENT "Optional: any NAME=VALUE parameters will be used to override\n" + INDENT "the configuration (to see what the hash would be with those\n" + INDENT "changes).", + NULL }, + { "force-demote", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + validate_or_force_cb, + "(Advanced) Bypass the cluster and demote a resource on the local\n" + INDENT "node. Unless --force is specified, this will refuse to do so if\n" + INDENT "the cluster believes the resource is a clone instance already\n" + INDENT "running on the local node.", + NULL }, + { "force-stop", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + validate_or_force_cb, + "(Advanced) Bypass the cluster and stop a resource on the local node", + NULL }, + { "force-start", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + validate_or_force_cb, + "(Advanced) Bypass the cluster and start a resource on the local\n" + INDENT "node. Unless --force is specified, this will refuse to do so if\n" + INDENT "the cluster believes the resource is a clone instance already\n" + INDENT "running on the local node.", + NULL }, + { "force-promote", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, + validate_or_force_cb, + "(Advanced) Bypass the cluster and promote a resource on the local\n" + INDENT "node. Unless --force is specified, this will refuse to do so if\n" + INDENT "the cluster believes the resource is a clone instance already\n" + INDENT "running on the local node.", + NULL }, + { "force-check", 0, G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, + validate_or_force_cb, + "(Advanced) Bypass the cluster and check the state of a resource on\n" + INDENT "the local node. An optional LEVEL argument can be given\n" + INDENT "to control the level of checking performed.", + "LEVEL" }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "node", 'N', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.host_uname, + "Node name", + "NAME" }, + { "recursive", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.recursive, + "Follow colocation chains when using --set-parameter or --constraints", + NULL }, + { "resource-type", 't', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.rsc_type, + "Resource XML element (primitive, group, etc.) (with -D)", + "ELEMENT" }, + { "parameter-value", 'v', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.prop_value, + "Value to use with -p", + "PARAM" }, + { "meta", 'm', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, attr_set_type_cb, + "Use resource meta-attribute instead of instance attribute\n" + INDENT "(with -p, -g, -d)", + NULL }, + { "utilization", 'z', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, attr_set_type_cb, + "Use resource utilization attribute instead of instance attribute\n" + INDENT "(with -p, -g, -d)", + NULL }, + { "element", 0, G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, attr_set_type_cb, + "Use resource element attribute instead of instance attribute\n" + INDENT "(with -p, -g, -d)", + NULL }, + { "operation", 'n', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.operation, + "Operation to clear instead of all (with -C -r)", + "OPERATION" }, + { "interval", 'I', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.interval_spec, + "Interval of operation to clear (default 0) (with -C -r -n)", + "N" }, + { "class", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, class_cb, + "The standard the resource agent conforms to (for example, ocf).\n" + INDENT "Use with --agent, --provider, --option, and --validate.", + "CLASS" }, + { "agent", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, agent_provider_cb, + "The agent to use (for example, IPaddr). Use with --class,\n" + INDENT "--provider, --option, and --validate.", + "AGENT" }, + { "provider", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, agent_provider_cb, + "The vendor that supplies the resource agent (for example,\n" + INDENT "heartbeat). Use with --class, --agent, --option, and --validate.", + "PROVIDER" }, + { "option", 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, option_cb, + "Specify a device configuration parameter as NAME=VALUE (may be\n" + INDENT "specified multiple times). Use with --validate and without the\n" + INDENT "-r option.", + "PARAM" }, + { "set-name", 's', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.prop_set, + "(Advanced) XML ID of attributes element to use (with -p, -d)", + "ID" }, + { "nvpair", 'i', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.prop_id, + "(Advanced) XML ID of nvpair element to use (with -p, -d)", + "ID" }, + { "timeout", 'T', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, timeout_cb, + "(Advanced) Abort if command does not finish in this time (with\n" + INDENT "--restart, --wait, --force-*)", + "N" }, + { "force", 'f', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.force, + "Force the action to be performed. See help for individual commands for\n" + INDENT "additional behavior.", + NULL }, + { "xml-file", 'x', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_FILENAME, &options.xml_file, + NULL, + "FILE" }, + { "host-uname", 'H', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_STRING, &options.host_uname, + NULL, + "HOST" }, + + { NULL } +}; + +static void +reset_options(void) { + options.require_crmd = FALSE; + options.require_node = FALSE; + + options.require_cib = TRUE; + options.require_dataset = TRUE; + options.require_resource = TRUE; + + options.find_flags = 0; +} + +gboolean +agent_provider_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.cmdline_config = TRUE; + options.require_resource = FALSE; + + if (pcmk__str_eq(option_name, "--provider", pcmk__str_casei)) { + pcmk__str_update(&options.v_provider, optarg); + } else { + pcmk__str_update(&options.v_agent, optarg); + } + + return TRUE; +} + +gboolean +attr_set_type_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-m", "--meta", NULL)) { + options.attr_set_type = XML_TAG_META_SETS; + } else if (pcmk__str_any_of(option_name, "-z", "--utilization", NULL)) { + options.attr_set_type = XML_TAG_UTILIZATION; + } else if (pcmk__str_eq(option_name, "--element", pcmk__str_casei)) { + options.attr_set_type = ATTR_SET_ELEMENT; + } + return TRUE; +} + +gboolean +class_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + pcmk__str_update(&options.v_class, optarg); + options.cmdline_config = TRUE; + options.require_resource = FALSE; + return TRUE; +} + +gboolean +cleanup_refresh_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-C", "--cleanup", NULL)) { + SET_COMMAND(cmd_cleanup); + } else { + SET_COMMAND(cmd_refresh); + } + + options.require_resource = FALSE; + if (getenv("CIB_file") == NULL) { + options.require_crmd = TRUE; + } + options.find_flags = pe_find_renamed|pe_find_anon; + return TRUE; +} + +gboolean +delete_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + SET_COMMAND(cmd_delete); + options.require_dataset = FALSE; + options.find_flags = pe_find_renamed|pe_find_any; + return TRUE; +} + +gboolean +expired_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.clear_expired = TRUE; + options.require_resource = FALSE; + return TRUE; +} + +static void +get_agent_spec(const gchar *optarg) +{ + options.require_cib = FALSE; + options.require_dataset = FALSE; + options.require_resource = FALSE; + pcmk__str_update(&options.agent_spec, optarg); +} + +gboolean +list_agents_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + SET_COMMAND(cmd_list_agents); + get_agent_spec(optarg); + return TRUE; +} + +gboolean +list_providers_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + SET_COMMAND(cmd_list_providers); + get_agent_spec(optarg); + return TRUE; +} + +gboolean +list_standards_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + SET_COMMAND(cmd_list_standards); + options.require_cib = FALSE; + options.require_dataset = FALSE; + options.require_resource = FALSE; + return TRUE; +} + +gboolean +list_alternatives_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error) +{ + SET_COMMAND(cmd_list_alternatives); + get_agent_spec(optarg); + return TRUE; +} + +gboolean +metadata_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + SET_COMMAND(cmd_metadata); + get_agent_spec(optarg); + return TRUE; +} + +gboolean +option_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + char *name = NULL; + char *value = NULL; + + if (pcmk__scan_nvpair(optarg, &name, &value) != 2) { + return FALSE; + } + if (options.cmdline_params == NULL) { + options.cmdline_params = pcmk__strkey_table(free, free); + } + g_hash_table_replace(options.cmdline_params, name, value); + return TRUE; +} + +gboolean +fail_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + SET_COMMAND(cmd_fail); + options.require_crmd = TRUE; + options.require_node = TRUE; + return TRUE; +} + +gboolean +flag_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-U", "--clear", NULL)) { + SET_COMMAND(cmd_clear); + options.find_flags = pe_find_renamed|pe_find_anon; + } else if (pcmk__str_any_of(option_name, "-B", "--ban", NULL)) { + SET_COMMAND(cmd_ban); + options.find_flags = pe_find_renamed|pe_find_anon; + } else if (pcmk__str_any_of(option_name, "-M", "--move", NULL)) { + SET_COMMAND(cmd_move); + options.find_flags = pe_find_renamed|pe_find_anon; + } else if (pcmk__str_any_of(option_name, "-q", "--query-xml", NULL)) { + SET_COMMAND(cmd_query_xml); + options.find_flags = pe_find_renamed|pe_find_any; + } else if (pcmk__str_any_of(option_name, "-w", "--query-xml-raw", NULL)) { + SET_COMMAND(cmd_query_raw_xml); + options.find_flags = pe_find_renamed|pe_find_any; + } else if (pcmk__str_any_of(option_name, "-W", "--locate", NULL)) { + SET_COMMAND(cmd_locate); + options.find_flags = pe_find_renamed|pe_find_anon; + + } else if (pcmk__str_any_of(option_name, "-a", "--constraints", NULL)) { + SET_COMMAND(cmd_colocations); + options.find_flags = pe_find_renamed|pe_find_anon; + + } else if (pcmk__str_any_of(option_name, "-A", "--stack", NULL)) { + SET_COMMAND(cmd_colocations); + options.find_flags = pe_find_renamed|pe_find_anon; + options.recursive = TRUE; + } + + return TRUE; +} + +gboolean +get_param_prop_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-g", "--get-parameter", NULL)) { + SET_COMMAND(cmd_get_param); + } else { + SET_COMMAND(cmd_get_property); + } + + pcmk__str_update(&options.prop_name, optarg); + options.find_flags = pe_find_renamed|pe_find_any; + return TRUE; +} + +gboolean +list_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-c", "--list-cts", NULL)) { + SET_COMMAND(cmd_cts); + } else if (pcmk__str_any_of(option_name, "-L", "--list", NULL)) { + SET_COMMAND(cmd_list_resources); + } else if (pcmk__str_any_of(option_name, "-l", "--list-raw", NULL)) { + SET_COMMAND(cmd_list_instances); + } else if (pcmk__str_any_of(option_name, "-O", "--list-operations", NULL)) { + SET_COMMAND(cmd_list_active_ops); + } else { + SET_COMMAND(cmd_list_all_ops); + } + + options.require_resource = FALSE; + return TRUE; +} + +gboolean +set_delete_param_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "-p", "--set-parameter", NULL)) { + SET_COMMAND(cmd_set_param); + } else { + SET_COMMAND(cmd_delete_param); + } + + pcmk__str_update(&options.prop_name, optarg); + options.find_flags = pe_find_renamed|pe_find_any; + return TRUE; +} + +gboolean +set_prop_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + SET_COMMAND(cmd_set_property); + options.require_dataset = FALSE; + pcmk__str_update(&options.prop_name, optarg); + options.find_flags = pe_find_renamed|pe_find_any; + return TRUE; +} + +gboolean +timeout_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.timeout_ms = crm_get_msec(optarg); + return TRUE; +} + +gboolean +validate_or_force_cb(const gchar *option_name, const gchar *optarg, + gpointer data, GError **error) +{ + SET_COMMAND(cmd_execute_agent); + if (options.operation) { + g_free(options.operation); + } + options.operation = g_strdup(option_name + 2); // skip "--" + options.find_flags = pe_find_renamed|pe_find_anon; + if (options.override_params == NULL) { + options.override_params = pcmk__strkey_table(free, free); + } + + if (optarg != NULL) { + if (pcmk__scan_min_int(optarg, &options.check_level, 0) != pcmk_rc_ok) { + g_set_error(error, G_OPTION_ERROR, CRM_EX_INVALID_PARAM, + _("Invalid check level setting: %s"), optarg); + return FALSE; + } + } + + return TRUE; +} + +gboolean +restart_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + SET_COMMAND(cmd_restart); + options.find_flags = pe_find_renamed|pe_find_anon; + return TRUE; +} + +gboolean +digests_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + SET_COMMAND(cmd_digests); + options.find_flags = pe_find_renamed|pe_find_anon; + if (options.override_params == NULL) { + options.override_params = pcmk__strkey_table(free, free); + } + options.require_node = TRUE; + options.require_dataset = TRUE; + return TRUE; +} + +gboolean +wait_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + SET_COMMAND(cmd_wait); + options.require_resource = FALSE; + options.require_dataset = FALSE; + return TRUE; +} + +gboolean +why_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + SET_COMMAND(cmd_why); + options.require_resource = FALSE; + options.find_flags = pe_find_renamed|pe_find_anon; + return TRUE; +} + +static int +ban_or_move(pcmk__output_t *out, pe_resource_t *rsc, const char *move_lifetime) +{ + int rc = pcmk_rc_ok; + pe_node_t *current = NULL; + unsigned int nactive = 0; + + CRM_CHECK(rsc != NULL, return EINVAL); + + current = pe__find_active_requires(rsc, &nactive); + + if (nactive == 1) { + rc = cli_resource_ban(out, options.rsc_id, current->details->uname, move_lifetime, NULL, + cib_conn, options.cib_options, options.promoted_role_only); + + } else if (pcmk_is_set(rsc->flags, pe_rsc_promotable)) { + int count = 0; + GList *iter = NULL; + + current = NULL; + for(iter = rsc->children; iter; iter = iter->next) { + pe_resource_t *child = (pe_resource_t *)iter->data; + enum rsc_role_e child_role = child->fns->state(child, TRUE); + + if (child_role == RSC_ROLE_PROMOTED) { + count++; + current = pe__current_node(child); + } + } + + if(count == 1 && current) { + rc = cli_resource_ban(out, options.rsc_id, current->details->uname, move_lifetime, NULL, + cib_conn, options.cib_options, options.promoted_role_only); + + } else { + rc = EINVAL; + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("Resource '%s' not moved: active in %d locations (promoted in %d).\n" + "To prevent '%s' from running on a specific location, " + "specify a node." + "To prevent '%s' from being promoted at a specific " + "location, specify a node and the --promoted option."), + options.rsc_id, nactive, count, options.rsc_id, options.rsc_id); + } + + } else { + rc = EINVAL; + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("Resource '%s' not moved: active in %d locations.\n" + "To prevent '%s' from running on a specific location, " + "specify a node."), + options.rsc_id, nactive, options.rsc_id); + } + + return rc; +} + +static void +cleanup(pcmk__output_t *out, pe_resource_t *rsc, pe_node_t *node) +{ + int rc = pcmk_rc_ok; + + if (options.force == FALSE) { + rsc = uber_parent(rsc); + } + + crm_debug("Erasing failures of %s (%s requested) on %s", + rsc->id, options.rsc_id, (options.host_uname? options.host_uname: "all nodes")); + rc = cli_resource_delete(controld_api, options.host_uname, rsc, options.operation, + options.interval_spec, TRUE, data_set, options.force); + + if ((rc == pcmk_rc_ok) && !out->is_quiet(out)) { + // Show any reasons why resource might stay stopped + cli_resource_check(out, rsc, node); + } + + if (rc == pcmk_rc_ok) { + start_mainloop(controld_api); + } +} + +static int +clear_constraints(pcmk__output_t *out, xmlNodePtr *cib_xml_copy) +{ + GList *before = NULL; + GList *after = NULL; + GList *remaining = NULL; + GList *ele = NULL; + pe_node_t *dest = NULL; + int rc = pcmk_rc_ok; + + if (!out->is_quiet(out)) { + before = build_constraint_list(data_set->input); + } + + if (options.clear_expired) { + rc = cli_resource_clear_all_expired(data_set->input, cib_conn, options.cib_options, + options.rsc_id, options.host_uname, + options.promoted_role_only); + + } else if (options.host_uname) { + dest = pe_find_node(data_set->nodes, options.host_uname); + if (dest == NULL) { + rc = pcmk_rc_node_unknown; + if (!out->is_quiet(out)) { + g_list_free(before); + } + return rc; + } + rc = cli_resource_clear(options.rsc_id, dest->details->uname, NULL, + cib_conn, options.cib_options, TRUE, options.force); + + } else { + rc = cli_resource_clear(options.rsc_id, NULL, data_set->nodes, + cib_conn, options.cib_options, TRUE, options.force); + } + + if (!out->is_quiet(out)) { + rc = cib_conn->cmds->query(cib_conn, NULL, cib_xml_copy, cib_scope_local | cib_sync_call); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, + _("Could not get modified CIB: %s\n"), pcmk_strerror(rc)); + g_list_free(before); + free_xml(*cib_xml_copy); + *cib_xml_copy = NULL; + return rc; + } + + data_set->input = *cib_xml_copy; + cluster_status(data_set); + + after = build_constraint_list(data_set->input); + remaining = pcmk__subtract_lists(before, after, (GCompareFunc) strcmp); + + for (ele = remaining; ele != NULL; ele = ele->next) { + out->info(out, "Removing constraint: %s", (char *) ele->data); + } + + g_list_free(before); + g_list_free(after); + g_list_free(remaining); + } + + return rc; +} + +static int +delete(void) +{ + int rc = pcmk_rc_ok; + xmlNode *msg_data = NULL; + + if (options.rsc_type == NULL) { + rc = ENXIO; + g_set_error(&error, PCMK__RC_ERROR, rc, + _("You need to specify a resource type with -t")); + return rc; + } + + msg_data = create_xml_node(NULL, options.rsc_type); + crm_xml_add(msg_data, XML_ATTR_ID, options.rsc_id); + + rc = cib_conn->cmds->remove(cib_conn, XML_CIB_TAG_RESOURCES, msg_data, + options.cib_options); + rc = pcmk_legacy2rc(rc); + free_xml(msg_data); + return rc; +} + +static int +list_agents(pcmk__output_t *out, const char *agent_spec) +{ + int rc = pcmk_rc_ok; + char *provider = strchr(agent_spec, ':'); + lrmd_t *lrmd_conn = NULL; + lrmd_list_t *list = NULL; + + rc = lrmd__new(&lrmd_conn, NULL, NULL, 0); + if (rc != pcmk_rc_ok) { + goto error; + } + + if (provider) { + *provider++ = 0; + } + + rc = lrmd_conn->cmds->list_agents(lrmd_conn, &list, agent_spec, provider); + + if (rc > 0) { + rc = out->message(out, "agents-list", list, agent_spec, provider); + } else { + rc = pcmk_rc_error; + } + +error: + if (rc != pcmk_rc_ok) { + if (provider == NULL) { + g_set_error(&error, PCMK__RC_ERROR, rc, + _("No agents found for standard '%s'"), agent_spec); + } else { + g_set_error(&error, PCMK__RC_ERROR, rc, + _("No agents found for standard '%s' and provider '%s'"), + agent_spec, provider); + } + } + + lrmd_api_delete(lrmd_conn); + return rc; +} + +static int +list_providers(pcmk__output_t *out, const char *agent_spec) +{ + int rc; + const char *text = NULL; + lrmd_t *lrmd_conn = NULL; + lrmd_list_t *list = NULL; + + rc = lrmd__new(&lrmd_conn, NULL, NULL, 0); + if (rc != pcmk_rc_ok) { + goto error; + } + + switch (options.rsc_cmd) { + case cmd_list_alternatives: + rc = lrmd_conn->cmds->list_ocf_providers(lrmd_conn, agent_spec, &list); + + if (rc > 0) { + rc = out->message(out, "alternatives-list", list, agent_spec); + } else { + rc = pcmk_rc_error; + } + + text = "OCF providers"; + break; + case cmd_list_standards: + rc = lrmd_conn->cmds->list_standards(lrmd_conn, &list); + + if (rc > 0) { + rc = out->message(out, "standards-list", list); + } else { + rc = pcmk_rc_error; + } + + text = "standards"; + break; + case cmd_list_providers: + rc = lrmd_conn->cmds->list_ocf_providers(lrmd_conn, agent_spec, &list); + + if (rc > 0) { + rc = out->message(out, "providers-list", list, agent_spec); + } else { + rc = pcmk_rc_error; + } + + text = "OCF providers"; + break; + default: + g_set_error(&error, PCMK__RC_ERROR, pcmk_rc_error, "Bug"); + lrmd_api_delete(lrmd_conn); + return pcmk_rc_error; + } + +error: + if (rc != pcmk_rc_ok) { + if (agent_spec != NULL) { + rc = ENXIO; + g_set_error(&error, PCMK__RC_ERROR, rc, + _("No %s found for %s"), text, agent_spec); + + } else { + rc = ENXIO; + g_set_error(&error, PCMK__RC_ERROR, rc, + _("No %s found"), text); + } + } + + lrmd_api_delete(lrmd_conn); + return rc; +} + +static int +populate_working_set(xmlNodePtr *cib_xml_copy) +{ + int rc = pcmk_rc_ok; + + if (options.xml_file != NULL) { + *cib_xml_copy = filename2xml(options.xml_file); + if (*cib_xml_copy == NULL) { + rc = pcmk_rc_cib_corrupt; + } + } else { + rc = cib_conn->cmds->query(cib_conn, NULL, cib_xml_copy, cib_scope_local | cib_sync_call); + rc = pcmk_legacy2rc(rc); + } + + if (rc == pcmk_rc_ok) { + data_set = pe_new_working_set(); + if (data_set == NULL) { + rc = ENOMEM; + } else { + pe__set_working_set_flags(data_set, + pe_flag_no_counts|pe_flag_no_compat); + data_set->priv = out; + rc = update_working_set_xml(data_set, cib_xml_copy); + } + } + + if (rc != pcmk_rc_ok) { + free_xml(*cib_xml_copy); + *cib_xml_copy = NULL; + return rc; + } + + cluster_status(data_set); + return pcmk_rc_ok; +} + +static int +refresh(pcmk__output_t *out) +{ + int rc = pcmk_rc_ok; + const char *router_node = options.host_uname; + int attr_options = pcmk__node_attr_none; + + if (options.host_uname) { + pe_node_t *node = pe_find_node(data_set->nodes, options.host_uname); + + if (pe__is_guest_or_remote_node(node)) { + node = pe__current_node(node->details->remote_rsc); + if (node == NULL) { + rc = ENXIO; + g_set_error(&error, PCMK__RC_ERROR, rc, + _("No cluster connection to Pacemaker Remote node %s detected"), + options.host_uname); + return rc; + } + router_node = node->details->uname; + attr_options |= pcmk__node_attr_remote; + } + } + + if (controld_api == NULL) { + out->info(out, "Dry run: skipping clean-up of %s due to CIB_file", + options.host_uname? options.host_uname : "all nodes"); + rc = pcmk_rc_ok; + return rc; + } + + crm_debug("Re-checking the state of all resources on %s", options.host_uname?options.host_uname:"all nodes"); + + rc = pcmk__attrd_api_clear_failures(NULL, options.host_uname, NULL, + NULL, NULL, NULL, attr_options); + + if (pcmk_controld_api_reprobe(controld_api, options.host_uname, + router_node) == pcmk_rc_ok) { + start_mainloop(controld_api); + } + + return rc; +} + +static void +refresh_resource(pcmk__output_t *out, pe_resource_t *rsc, pe_node_t *node) +{ + int rc = pcmk_rc_ok; + + if (options.force == FALSE) { + rsc = uber_parent(rsc); + } + + crm_debug("Re-checking the state of %s (%s requested) on %s", + rsc->id, options.rsc_id, (options.host_uname? options.host_uname: "all nodes")); + rc = cli_resource_delete(controld_api, options.host_uname, rsc, NULL, 0, + FALSE, data_set, options.force); + + if ((rc == pcmk_rc_ok) && !out->is_quiet(out)) { + // Show any reasons why resource might stay stopped + cli_resource_check(out, rsc, node); + } + + if (rc == pcmk_rc_ok) { + start_mainloop(controld_api); + } +} + +static int +set_property(void) +{ + int rc = pcmk_rc_ok; + xmlNode *msg_data = NULL; + + if (pcmk__str_empty(options.rsc_type)) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("Must specify -t with resource type")); + rc = ENXIO; + return rc; + + } else if (pcmk__str_empty(options.prop_value)) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("Must supply -v with new value")); + rc = ENXIO; + return rc; + } + + CRM_LOG_ASSERT(options.prop_name != NULL); + + msg_data = create_xml_node(NULL, options.rsc_type); + crm_xml_add(msg_data, XML_ATTR_ID, options.rsc_id); + crm_xml_add(msg_data, options.prop_name, options.prop_value); + + rc = cib_conn->cmds->modify(cib_conn, XML_CIB_TAG_RESOURCES, msg_data, + options.cib_options); + rc = pcmk_legacy2rc(rc); + free_xml(msg_data); + + return rc; +} + +static int +show_metadata(pcmk__output_t *out, const char *agent_spec) +{ + int rc = pcmk_rc_ok; + char *standard = NULL; + char *provider = NULL; + char *type = NULL; + char *metadata = NULL; + lrmd_t *lrmd_conn = NULL; + + rc = lrmd__new(&lrmd_conn, NULL, NULL, 0); + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__RC_ERROR, rc, + _("Could not create executor connection")); + lrmd_api_delete(lrmd_conn); + return rc; + } + + rc = crm_parse_agent_spec(agent_spec, &standard, &provider, &type); + rc = pcmk_legacy2rc(rc); + + if (rc == pcmk_rc_ok) { + rc = lrmd_conn->cmds->get_metadata(lrmd_conn, standard, + provider, type, + &metadata, 0); + rc = pcmk_legacy2rc(rc); + + if (metadata) { + out->output_xml(out, "metadata", metadata); + free(metadata); + } else { + /* We were given a validly formatted spec, but it doesn't necessarily + * match up with anything that exists. Use ENXIO as the return code + * here because that maps to an exit code of CRM_EX_NOSUCH, which + * probably is the most common reason to get here. + */ + rc = ENXIO; + g_set_error(&error, PCMK__RC_ERROR, rc, + _("Metadata query for %s failed: %s"), + agent_spec, pcmk_rc_str(rc)); + } + } else { + rc = ENXIO; + g_set_error(&error, PCMK__RC_ERROR, rc, + _("'%s' is not a valid agent specification"), agent_spec); + } + + lrmd_api_delete(lrmd_conn); + return rc; +} + +static void +validate_cmdline_config(void) +{ + // Cannot use both --resource and command-line resource configuration + if (options.rsc_id != NULL) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("--resource cannot be used with --class, --agent, and --provider")); + + // Not all commands support command-line resource configuration + } else if (options.rsc_cmd != cmd_execute_agent) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("--class, --agent, and --provider can only be used with " + "--validate and --force-*")); + + // Not all of --class, --agent, and --provider need to be given. Not all + // classes support the concept of a provider. Check that what we were given + // is valid. + } else if (pcmk__str_eq(options.v_class, "stonith", pcmk__str_none)) { + if (options.v_provider != NULL) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("stonith does not support providers")); + + } else if (stonith_agent_exists(options.v_agent, 0) == FALSE) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("%s is not a known stonith agent"), options.v_agent ? options.v_agent : ""); + } + + } else if (resources_agent_exists(options.v_class, options.v_provider, options.v_agent) == FALSE) { + g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, + _("%s:%s:%s is not a known resource"), + options.v_class ? options.v_class : "", + options.v_provider ? options.v_provider : "", + options.v_agent ? options.v_agent : ""); + } + + if (error != NULL) { + return; + } + + if (options.cmdline_params == NULL) { + options.cmdline_params = pcmk__strkey_table(free, free); + } + options.require_resource = FALSE; + options.require_dataset = FALSE; + options.require_cib = FALSE; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'Q', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &(args->quiet), + "Be less descriptive in output.", + NULL }, + { "resource", 'r', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, &options.rsc_id, + "Resource ID", + "ID" }, + { G_OPTION_REMAINING, 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING_ARRAY, &options.remainder, + NULL, + NULL }, + + { NULL } + }; + + const char *description = "Examples:\n\n" + "List the available OCF agents:\n\n" + "\t# crm_resource --list-agents ocf\n\n" + "List the available OCF agents from the linux-ha project:\n\n" + "\t# crm_resource --list-agents ocf:heartbeat\n\n" + "Move 'myResource' to a specific node:\n\n" + "\t# crm_resource --resource myResource --move --node altNode\n\n" + "Allow (but not force) 'myResource' to move back to its original " + "location:\n\n" + "\t# crm_resource --resource myResource --clear\n\n" + "Stop 'myResource' (and anything that depends on it):\n\n" + "\t# crm_resource --resource myResource --set-parameter target-role " + "--meta --parameter-value Stopped\n\n" + "Tell the cluster not to manage 'myResource' (the cluster will not " + "attempt to start or stop the\n" + "resource under any circumstances; useful when performing maintenance " + "tasks on a resource):\n\n" + "\t# crm_resource --resource myResource --set-parameter is-managed " + "--meta --parameter-value false\n\n" + "Erase the operation history of 'myResource' on 'aNode' (the cluster " + "will 'forget' the existing\n" + "resource state, including any errors, and attempt to recover the" + "resource; useful when a resource\n" + "had failed permanently and has been repaired by an administrator):\n\n" + "\t# crm_resource --resource myResource --cleanup --node aNode\n\n"; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + g_option_context_set_description(context, description); + + /* Add the -Q option, which cannot be part of the globally supported options + * because some tools use that flag for something else. + */ + pcmk__add_main_args(context, extra_prog_entries); + + pcmk__add_arg_group(context, "queries", "Queries:", + "Show query help", query_entries); + pcmk__add_arg_group(context, "commands", "Commands:", + "Show command help", command_entries); + pcmk__add_arg_group(context, "locations", "Locations:", + "Show location help", location_entries); + pcmk__add_arg_group(context, "advanced", "Advanced:", + "Show advanced option help", advanced_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +int +main(int argc, char **argv) +{ + xmlNode *cib_xml_copy = NULL; + pe_resource_t *rsc = NULL; + pe_node_t *node = NULL; + int rc = pcmk_rc_ok; + + GOptionGroup *output_group = NULL; + gchar **processed_args = NULL; + GOptionContext *context = NULL; + + /* + * Parse command line arguments + */ + + args = pcmk__new_common_args(SUMMARY); + processed_args = pcmk__cmdline_preproc(argv, "GHINSTdginpstuvx"); + context = build_arg_context(args, &output_group); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_resource", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, _("Error creating output format %s: %s"), + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + pe__register_messages(out); + crm_resource_register_messages(out); + lrmd__register_messages(out); + pcmk__register_lib_messages(out); + + out->quiet = args->quiet; + + crm_log_args(argc, argv); + + /* + * Validate option combinations + */ + + // If the user didn't explicitly specify a command, list resources + if (options.rsc_cmd == cmd_none) { + options.rsc_cmd = cmd_list_resources; + options.require_resource = FALSE; + } + + // --expired without --clear/-U doesn't make sense + if (options.clear_expired && (options.rsc_cmd != cmd_clear)) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, _("--expired requires --clear or -U")); + goto done; + } + + if ((options.remainder != NULL) && (options.override_params != NULL)) { + // Commands that use positional arguments will create override_params + for (gchar **s = options.remainder; *s; s++) { + char *name = calloc(1, strlen(*s)); + char *value = calloc(1, strlen(*s)); + int rc = sscanf(*s, "%[^=]=%s", name, value); + + if (rc == 2) { + g_hash_table_replace(options.override_params, name, value); + + } else { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Error parsing '%s' as a name=value pair"), + argv[optind]); + free(value); + free(name); + goto done; + } + } + + } else if (options.remainder != NULL) { + gchar **strv = NULL; + gchar *msg = NULL; + int i = 1; + int len = 0; + + for (gchar **s = options.remainder; *s; s++) { + len++; + } + + CRM_ASSERT(len > 0); + + /* Add 1 for the strv[0] string below, and add another 1 for the NULL + * at the end of the array so g_strjoinv knows when to stop. + */ + strv = calloc(len+2, sizeof(char *)); + strv[0] = strdup("non-option ARGV-elements:\n"); + + for (gchar **s = options.remainder; *s; s++) { + strv[i] = crm_strdup_printf("[%d of %d] %s\n", i, len, *s); + i++; + } + + strv[i] = NULL; + + exit_code = CRM_EX_USAGE; + msg = g_strjoinv("", strv); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "%s", msg); + g_free(msg); + + /* Don't try to free the last element, which is just NULL. */ + for(i = 0; i < len+1; i++) { + free(strv[i]); + } + free(strv); + + goto done; + } + + if (pcmk__str_eq(args->output_ty, "xml", pcmk__str_none)) { + /* Kind of a hack to display XML lists using a real tag instead of . This just + * saves from having to write custom messages to build the lists around all these things + */ + switch (options.rsc_cmd) { + case cmd_execute_agent: + case cmd_list_resources: + case cmd_query_xml: + case cmd_query_raw_xml: + case cmd_list_active_ops: + case cmd_list_all_ops: + case cmd_colocations: + pcmk__force_args(context, &error, "%s --xml-simple-list --xml-substitute", g_get_prgname()); + break; + + default: + pcmk__force_args(context, &error, "%s --xml-substitute", g_get_prgname()); + break; + } + } else if (pcmk__str_eq(args->output_ty, "text", pcmk__str_null_matches)) { + if ((options.rsc_cmd == cmd_colocations) || + options.rsc_cmd == cmd_list_resources) { + pcmk__force_args(context, &error, "%s --text-fancy", g_get_prgname()); + } + } + + if (args->version) { + out->version(out, false); + goto done; + } + + if (options.cmdline_config) { + /* A resource configuration was given on the command line. Sanity-check + * the values and set error if they don't make sense. + */ + validate_cmdline_config(); + if (error != NULL) { + exit_code = CRM_EX_USAGE; + goto done; + } + + } else if (options.cmdline_params != NULL) { + // @COMPAT @TODO error out here when we can break backward compatibility + g_hash_table_destroy(options.cmdline_params); + options.cmdline_params = NULL; + } + + if (options.require_resource && (options.rsc_id == NULL)) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Must supply a resource id with -r")); + goto done; + } + if (options.require_node && (options.host_uname == NULL)) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Must supply a node name with -N")); + goto done; + } + + /* + * Set up necessary connections + */ + + if (options.find_flags && options.rsc_id) { + options.require_dataset = TRUE; + } + + // Establish a connection to the CIB if needed + if (options.require_cib) { + cib_conn = cib_new(); + if ((cib_conn == NULL) || (cib_conn->cmds == NULL)) { + exit_code = CRM_EX_DISCONNECT; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Could not create CIB connection")); + goto done; + } + rc = cib_conn->cmds->signon(cib_conn, crm_system_name, cib_command); + rc = pcmk_legacy2rc(rc); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Could not connect to the CIB: %s"), pcmk_rc_str(rc)); + goto done; + } + } + + /* Populate working set from XML file if specified or CIB query otherwise */ + if (options.require_dataset) { + rc = populate_working_set(&cib_xml_copy); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + goto done; + } + } + + // If command requires that resource exist if specified, find it + if (options.find_flags && options.rsc_id) { + rsc = pe_find_resource_with_flags(data_set->resources, options.rsc_id, + options.find_flags); + if (rsc == NULL) { + exit_code = CRM_EX_NOSUCH; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Resource '%s' not found"), options.rsc_id); + goto done; + } + + /* The --ban, --clear, --move, and --restart commands do not work with + * instances of clone resourcs. + */ + if (strchr(options.rsc_id, ':') != NULL && pe_rsc_is_clone(rsc->parent) && + (options.rsc_cmd == cmd_ban || options.rsc_cmd == cmd_clear || + options.rsc_cmd == cmd_move || options.rsc_cmd == cmd_restart)) { + exit_code = CRM_EX_INVALID_PARAM; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Cannot operate on clone resource instance '%s'"), options.rsc_id); + goto done; + } + } + + // If user supplied a node name, check whether it exists + if ((options.host_uname != NULL) && (data_set != NULL)) { + node = pe_find_node(data_set->nodes, options.host_uname); + + if (node == NULL) { + exit_code = CRM_EX_NOSUCH; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Node '%s' not found"), options.host_uname); + goto done; + } + } + + // Establish a connection to the controller if needed + if (options.require_crmd) { + rc = pcmk_new_ipc_api(&controld_api, pcmk_ipc_controld); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Error connecting to the controller: %s"), pcmk_rc_str(rc)); + goto done; + } + pcmk_register_ipc_callback(controld_api, controller_event_callback, + NULL); + rc = pcmk_connect_ipc(controld_api, pcmk_ipc_dispatch_main); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Error connecting to the controller: %s"), pcmk_rc_str(rc)); + goto done; + } + } + + /* + * Handle requested command + */ + + switch (options.rsc_cmd) { + case cmd_list_resources: { + GList *all = NULL; + all = g_list_prepend(all, (gpointer) "*"); + rc = out->message(out, "resource-list", data_set, + pcmk_show_inactive_rscs | pcmk_show_rsc_only | pcmk_show_pending, + true, all, all, false); + g_list_free(all); + + if (rc == pcmk_rc_no_output) { + rc = ENXIO; + } + break; + } + + case cmd_list_instances: + rc = out->message(out, "resource-names-list", data_set->resources); + + if (rc != pcmk_rc_ok) { + rc = ENXIO; + } + + break; + + case cmd_list_standards: + case cmd_list_providers: + case cmd_list_alternatives: + rc = list_providers(out, options.agent_spec); + break; + + case cmd_list_agents: + rc = list_agents(out, options.agent_spec); + break; + + case cmd_metadata: + rc = show_metadata(out, options.agent_spec); + break; + + case cmd_restart: + /* We don't pass data_set because rsc needs to stay valid for the + * entire lifetime of cli_resource_restart(), but it will reset and + * update the working set multiple times, so it needs to use its own + * copy. + */ + rc = cli_resource_restart(out, rsc, node, options.move_lifetime, + options.timeout_ms, cib_conn, + options.cib_options, options.promoted_role_only, + options.force); + break; + + case cmd_wait: + rc = wait_till_stable(out, options.timeout_ms, cib_conn); + break; + + case cmd_execute_agent: + if (options.cmdline_config) { + exit_code = cli_resource_execute_from_params(out, NULL, + options.v_class, options.v_provider, options.v_agent, + options.operation, options.cmdline_params, + options.override_params, options.timeout_ms, + args->verbosity, options.force, options.check_level); + } else { + exit_code = cli_resource_execute(rsc, options.rsc_id, + options.operation, options.override_params, + options.timeout_ms, cib_conn, data_set, + args->verbosity, options.force, options.check_level); + } + goto done; + + case cmd_digests: + node = pe_find_node(data_set->nodes, options.host_uname); + if (node == NULL) { + rc = pcmk_rc_node_unknown; + } else { + rc = pcmk__resource_digests(out, rsc, node, + options.override_params); + } + break; + + case cmd_colocations: + rc = out->message(out, "locations-and-colocations", rsc, data_set, + options.recursive, (bool) options.force); + break; + + case cmd_cts: + rc = pcmk_rc_ok; + g_list_foreach(data_set->resources, (GFunc) cli_resource_print_cts, out); + cli_resource_print_cts_constraints(data_set); + break; + + case cmd_fail: + rc = cli_resource_fail(controld_api, options.host_uname, + options.rsc_id, data_set); + if (rc == pcmk_rc_ok) { + start_mainloop(controld_api); + } + break; + + case cmd_list_active_ops: + rc = cli_resource_print_operations(options.rsc_id, + options.host_uname, TRUE, + data_set); + break; + + case cmd_list_all_ops: + rc = cli_resource_print_operations(options.rsc_id, + options.host_uname, FALSE, + data_set); + break; + + case cmd_locate: { + GList *nodes = cli_resource_search(rsc, options.rsc_id, data_set); + rc = out->message(out, "resource-search-list", nodes, options.rsc_id); + g_list_free_full(nodes, free); + break; + } + + case cmd_query_xml: + rc = cli_resource_print(rsc, data_set, true); + break; + + case cmd_query_raw_xml: + rc = cli_resource_print(rsc, data_set, false); + break; + + case cmd_why: + if ((options.host_uname != NULL) && (node == NULL)) { + rc = pcmk_rc_node_unknown; + } else { + rc = out->message(out, "resource-reasons-list", + data_set->resources, rsc, node); + } + break; + + case cmd_clear: + rc = clear_constraints(out, &cib_xml_copy); + break; + + case cmd_move: + if (options.host_uname == NULL) { + rc = ban_or_move(out, rsc, options.move_lifetime); + } else { + rc = cli_resource_move(rsc, options.rsc_id, options.host_uname, + options.move_lifetime, cib_conn, + options.cib_options, data_set, + options.promoted_role_only, + options.force); + } + + if (rc == EINVAL) { + exit_code = CRM_EX_USAGE; + goto done; + } + + break; + + case cmd_ban: + if (options.host_uname == NULL) { + rc = ban_or_move(out, rsc, options.move_lifetime); + } else if (node == NULL) { + rc = pcmk_rc_node_unknown; + } else { + rc = cli_resource_ban(out, options.rsc_id, node->details->uname, + options.move_lifetime, NULL, cib_conn, + options.cib_options, + options.promoted_role_only); + } + + if (rc == EINVAL) { + exit_code = CRM_EX_USAGE; + goto done; + } + + break; + + case cmd_get_property: + rc = out->message(out, "property-list", rsc, options.prop_name); + if (rc == pcmk_rc_no_output) { + rc = ENXIO; + } + + break; + + case cmd_set_property: + rc = set_property(); + break; + + case cmd_get_param: { + unsigned int count = 0; + GHashTable *params = NULL; + pe_node_t *current = rsc->fns->active_node(rsc, &count, NULL); + bool free_params = true; + const char* value = NULL; + + if (count > 1) { + out->err(out, "%s is active on more than one node," + " returning the default value for %s", rsc->id, + pcmk__s(options.prop_name, "unspecified property")); + current = NULL; + } + + crm_debug("Looking up %s in %s", options.prop_name, rsc->id); + + if (pcmk__str_eq(options.attr_set_type, XML_TAG_ATTR_SETS, pcmk__str_none)) { + params = pe_rsc_params(rsc, current, data_set); + free_params = false; + + value = g_hash_table_lookup(params, options.prop_name); + + } else if (pcmk__str_eq(options.attr_set_type, XML_TAG_META_SETS, pcmk__str_none)) { + params = pcmk__strkey_table(free, free); + get_meta_attributes(params, rsc, current, data_set); + + value = g_hash_table_lookup(params, options.prop_name); + + } else if (pcmk__str_eq(options.attr_set_type, ATTR_SET_ELEMENT, pcmk__str_none)) { + + value = crm_element_value(rsc->xml, options.prop_name); + free_params = false; + + } else { + params = pcmk__strkey_table(free, free); + pe__unpack_dataset_nvpairs(rsc->xml, XML_TAG_UTILIZATION, NULL, params, + NULL, FALSE, data_set); + + value = g_hash_table_lookup(params, options.prop_name); + } + + rc = out->message(out, "attribute-list", rsc, options.prop_name, value); + if (free_params) { + g_hash_table_destroy(params); + } + + break; + } + + case cmd_set_param: + if (pcmk__str_empty(options.prop_value)) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("You need to supply a value with the -v option")); + goto done; + } + + /* coverity[var_deref_model] False positive */ + rc = cli_resource_update_attribute(rsc, options.rsc_id, + options.prop_set, + options.attr_set_type, + options.prop_id, + options.prop_name, + options.prop_value, + options.recursive, cib_conn, + options.cib_options, + options.force); + break; + + case cmd_delete_param: + /* coverity[var_deref_model] False positive */ + rc = cli_resource_delete_attribute(rsc, options.rsc_id, + options.prop_set, + options.attr_set_type, + options.prop_id, + options.prop_name, cib_conn, + options.cib_options, + options.force); + break; + + case cmd_cleanup: + if (rsc == NULL) { + rc = cli_cleanup_all(controld_api, options.host_uname, + options.operation, options.interval_spec, + data_set); + if (rc == pcmk_rc_ok) { + start_mainloop(controld_api); + } + } else { + cleanup(out, rsc, node); + } + break; + + case cmd_refresh: + if (rsc == NULL) { + rc = refresh(out); + } else { + refresh_resource(out, rsc, node); + } + break; + + case cmd_delete: + rc = delete(); + break; + + default: + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Unimplemented command: %d"), (int) options.rsc_cmd); + goto done; + } + + /* Convert rc into an exit code. */ + if (rc != pcmk_rc_ok && rc != pcmk_rc_no_output) { + exit_code = pcmk_rc2exitc(rc); + } + + /* + * Clean up and exit + */ + +done: + /* When we get here, exit_code has been set one of two ways - either at one of + * the spots where there's a "goto done" (which itself could have happened either + * directly or by calling pcmk_rc2exitc), or just up above after any of the break + * statements. + * + * Thus, we can use just exit_code here to decide what to do. + */ + if (exit_code != CRM_EX_OK && exit_code != CRM_EX_USAGE) { + if (error != NULL) { + char *msg = crm_strdup_printf("%s\nError performing operation: %s", + error->message, crm_exit_str(exit_code)); + g_clear_error(&error); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "%s", msg); + free(msg); + } else { + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + _("Error performing operation: %s"), crm_exit_str(exit_code)); + } + } + + g_free(options.host_uname); + g_free(options.interval_spec); + g_free(options.move_lifetime); + g_free(options.operation); + g_free(options.prop_id); + free(options.prop_name); + g_free(options.prop_set); + g_free(options.prop_value); + g_free(options.rsc_id); + g_free(options.rsc_type); + free(options.agent_spec); + free(options.v_agent); + free(options.v_class); + free(options.v_provider); + g_free(options.xml_file); + g_strfreev(options.remainder); + + if (options.override_params != NULL) { + g_hash_table_destroy(options.override_params); + } + + /* options.cmdline_params does not need to be destroyed here. See the + * comments in cli_resource_execute_from_params. + */ + + g_strfreev(processed_args); + g_option_context_free(context); + + return bye(exit_code); +} diff --git a/tools/crm_resource.h b/tools/crm_resource.h new file mode 100644 index 0000000..dcd6c3d --- /dev/null +++ b/tools/crm_resource.h @@ -0,0 +1,121 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU Lesser General Public License + * version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include + +#include + +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include + +#define ATTR_SET_ELEMENT "attr_set_element" + +typedef struct node_info_s { + const char *node_name; + bool promoted; +} node_info_t; + +enum resource_check_flags { + rsc_remain_stopped = (1 << 0), + rsc_unpromotable = (1 << 1), + rsc_unmanaged = (1 << 2), + rsc_locked = (1 << 3), + rsc_node_health = (1 << 4), +}; + +typedef struct resource_checks_s { + pe_resource_t *rsc; // Resource being checked + uint32_t flags; // Group of enum resource_check_flags + const char *lock_node; // Node that resource is shutdown-locked to, if any +} resource_checks_t; + +resource_checks_t *cli_check_resource(pe_resource_t *rsc, char *role_s, char *managed); + +/* ban */ +int cli_resource_prefer(pcmk__output_t *out, const char *rsc_id, const char *host, + const char *move_lifetime, cib_t * cib_conn, int cib_options, + gboolean promoted_role_only); +int cli_resource_ban(pcmk__output_t *out, const char *rsc_id, const char *host, + const char *move_lifetime, GList *allnodes, cib_t * cib_conn, + int cib_options, gboolean promoted_role_only); +int cli_resource_clear(const char *rsc_id, const char *host, GList *allnodes, + cib_t * cib_conn, int cib_options, bool clear_ban_constraints, gboolean force); +int cli_resource_clear_all_expired(xmlNode *root, cib_t *cib_conn, int cib_options, + const char *rsc, const char *node, gboolean promoted_role_only); + +/* print */ +void cli_resource_print_cts(pe_resource_t * rsc, pcmk__output_t *out); +void cli_resource_print_cts_constraints(pe_working_set_t * data_set); + +int cli_resource_print(pe_resource_t *rsc, pe_working_set_t *data_set, bool expanded); +int cli_resource_print_operations(const char *rsc_id, const char *host_uname, + bool active, pe_working_set_t * data_set); + +/* runtime */ +int cli_resource_check(pcmk__output_t *out, pe_resource_t *rsc, + pe_node_t *node); +int cli_resource_fail(pcmk_ipc_api_t *controld_api, const char *host_uname, + const char *rsc_id, pe_working_set_t *data_set); +GList *cli_resource_search(pe_resource_t *rsc, const char *requested_name, + pe_working_set_t *data_set); +int cli_resource_delete(pcmk_ipc_api_t *controld_api, const char *host_uname, + const pe_resource_t *rsc, const char *operation, + const char *interval_spec, bool just_failures, + pe_working_set_t *data_set, gboolean force); +int cli_cleanup_all(pcmk_ipc_api_t *controld_api, const char *node_name, + const char *operation, const char *interval_spec, + pe_working_set_t *data_set); +int cli_resource_restart(pcmk__output_t *out, pe_resource_t *rsc, + const pe_node_t *node, const char *move_lifetime, + int timeout_ms, cib_t *cib, int cib_options, + gboolean promoted_role_only, gboolean force); +int cli_resource_move(const pe_resource_t *rsc, const char *rsc_id, + const char *host_name, const char *move_lifetime, + cib_t *cib, int cib_options, pe_working_set_t *data_set, + gboolean promoted_role_only, gboolean force); +crm_exit_t cli_resource_execute_from_params(pcmk__output_t *out, const char *rsc_name, + const char *rsc_class, const char *rsc_prov, + const char *rsc_type, const char *rsc_action, + GHashTable *params, GHashTable *override_hash, + int timeout_ms, int resource_verbose, + gboolean force, int check_level); +crm_exit_t cli_resource_execute(pe_resource_t *rsc, const char *requested_name, + const char *rsc_action, GHashTable *override_hash, + int timeout_ms, cib_t *cib, pe_working_set_t *data_set, + int resource_verbose, gboolean force, int check_level); + +int cli_resource_update_attribute(pe_resource_t *rsc, const char *requested_name, + const char *attr_set, const char *attr_set_type, + const char *attr_id, const char *attr_name, + const char *attr_value, gboolean recursive, + cib_t *cib, int cib_options, gboolean force); +int cli_resource_delete_attribute(pe_resource_t *rsc, const char *requested_name, + const char *attr_set, const char *attr_set_type, + const char *attr_id, const char *attr_name, + cib_t *cib, int cib_options, gboolean force); + +int update_working_set_xml(pe_working_set_t *data_set, xmlNode **xml); +int wait_till_stable(pcmk__output_t *out, int timeout_ms, cib_t * cib); + +bool resource_is_running_on(pe_resource_t *rsc, const char *host); + +void crm_resource_register_messages(pcmk__output_t *out); diff --git a/tools/crm_resource_ban.c b/tools/crm_resource_ban.c new file mode 100644 index 0000000..b1edac8 --- /dev/null +++ b/tools/crm_resource_ban.c @@ -0,0 +1,505 @@ +/* + * Copyright 2004-2021 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include + +static char * +parse_cli_lifetime(pcmk__output_t *out, const char *move_lifetime) +{ + char *later_s = NULL; + crm_time_t *now = NULL; + crm_time_t *later = NULL; + crm_time_t *duration = NULL; + + if (move_lifetime == NULL) { + return NULL; + } + + duration = crm_time_parse_duration(move_lifetime); + if (duration == NULL) { + out->err(out, "Invalid duration specified: %s\n" + "Please refer to https://en.wikipedia.org/wiki/ISO_8601#Durations " + "for examples of valid durations", move_lifetime); + return NULL; + } + + now = crm_time_new(NULL); + later = crm_time_add(now, duration); + if (later == NULL) { + out->err(out, "Unable to add %s to current time\n" + "Please report to " PACKAGE_BUGREPORT " as possible bug", + move_lifetime); + crm_time_free(now); + crm_time_free(duration); + return NULL; + } + + crm_time_log(LOG_INFO, "now ", now, + crm_time_log_date | crm_time_log_timeofday | crm_time_log_with_timezone); + crm_time_log(LOG_INFO, "later ", later, + crm_time_log_date | crm_time_log_timeofday | crm_time_log_with_timezone); + crm_time_log(LOG_INFO, "duration", duration, crm_time_log_date | crm_time_log_timeofday); + later_s = crm_time_as_string(later, crm_time_log_date | crm_time_log_timeofday | crm_time_log_with_timezone); + out->info(out, "Migration will take effect until: %s", later_s); + + crm_time_free(duration); + crm_time_free(later); + crm_time_free(now); + return later_s; +} + +static const char * +promoted_role_name(void) +{ + /* This is a judgment call for what string to use. @TODO Ideally we'd + * use the legacy string if the DC only supports that, and the new one + * otherwise. Basing it on --enable-compat-2.0 is a decent guess. + */ +#ifdef PCMK__COMPAT_2_0 + return RSC_ROLE_PROMOTED_LEGACY_S; +#else + return RSC_ROLE_PROMOTED_S; +#endif +} + +// \return Standard Pacemaker return code +int +cli_resource_ban(pcmk__output_t *out, const char *rsc_id, const char *host, + const char *move_lifetime, GList *allnodes, cib_t * cib_conn, + int cib_options, gboolean promoted_role_only) +{ + char *later_s = NULL; + int rc = pcmk_rc_ok; + xmlNode *fragment = NULL; + xmlNode *location = NULL; + + if(host == NULL) { + GList *n = allnodes; + for(; n && rc == pcmk_rc_ok; n = n->next) { + pe_node_t *target = n->data; + + rc = cli_resource_ban(out, rsc_id, target->details->uname, move_lifetime, + NULL, cib_conn, cib_options, promoted_role_only); + } + return rc; + } + + later_s = parse_cli_lifetime(out, move_lifetime); + if(move_lifetime && later_s == NULL) { + return EINVAL; + } + + fragment = create_xml_node(NULL, XML_CIB_TAG_CONSTRAINTS); + + location = create_xml_node(fragment, XML_CONS_TAG_RSC_LOCATION); + crm_xml_set_id(location, "cli-ban-%s-on-%s", rsc_id, host); + + out->info(out, "WARNING: Creating rsc_location constraint '%s' with a " + "score of -INFINITY for resource %s on %s.\n\tThis will " + "prevent %s from %s on %s until the constraint is removed " + "using the clear option or by editing the CIB with an " + "appropriate tool\n\tThis will be the case even if %s " + "is the last node in the cluster", + ID(location), rsc_id, host, rsc_id, + (promoted_role_only? "being promoted" : "running"), + host, host); + + crm_xml_add(location, XML_LOC_ATTR_SOURCE, rsc_id); + if(promoted_role_only) { + crm_xml_add(location, XML_RULE_ATTR_ROLE, promoted_role_name()); + } else { + crm_xml_add(location, XML_RULE_ATTR_ROLE, RSC_ROLE_STARTED_S); + } + + if (later_s == NULL) { + /* Short form */ + crm_xml_add(location, XML_CIB_TAG_NODE, host); + crm_xml_add(location, XML_RULE_ATTR_SCORE, CRM_MINUS_INFINITY_S); + + } else { + xmlNode *rule = create_xml_node(location, XML_TAG_RULE); + xmlNode *expr = create_xml_node(rule, XML_TAG_EXPRESSION); + + crm_xml_set_id(rule, "cli-ban-%s-on-%s-rule", rsc_id, host); + crm_xml_add(rule, XML_RULE_ATTR_SCORE, CRM_MINUS_INFINITY_S); + crm_xml_add(rule, XML_RULE_ATTR_BOOLEAN_OP, "and"); + + crm_xml_set_id(expr, "cli-ban-%s-on-%s-expr", rsc_id, host); + crm_xml_add(expr, XML_EXPR_ATTR_ATTRIBUTE, CRM_ATTR_UNAME); + crm_xml_add(expr, XML_EXPR_ATTR_OPERATION, "eq"); + crm_xml_add(expr, XML_EXPR_ATTR_VALUE, host); + crm_xml_add(expr, XML_EXPR_ATTR_TYPE, "string"); + + expr = create_xml_node(rule, "date_expression"); + crm_xml_set_id(expr, "cli-ban-%s-on-%s-lifetime", rsc_id, host); + crm_xml_add(expr, "operation", "lt"); + crm_xml_add(expr, "end", later_s); + } + + crm_log_xml_notice(fragment, "Modify"); + rc = cib_conn->cmds->modify(cib_conn, XML_CIB_TAG_CONSTRAINTS, fragment, + cib_options); + rc = pcmk_legacy2rc(rc); + + free_xml(fragment); + free(later_s); + return rc; +} + +// \return Standard Pacemaker return code +int +cli_resource_prefer(pcmk__output_t *out,const char *rsc_id, const char *host, + const char *move_lifetime, cib_t * cib_conn, int cib_options, + gboolean promoted_role_only) +{ + char *later_s = parse_cli_lifetime(out, move_lifetime); + int rc = pcmk_rc_ok; + xmlNode *location = NULL; + xmlNode *fragment = NULL; + + if(move_lifetime && later_s == NULL) { + return EINVAL; + } + + if(cib_conn == NULL) { + free(later_s); + return ENOTCONN; + } + + fragment = create_xml_node(NULL, XML_CIB_TAG_CONSTRAINTS); + + location = create_xml_node(fragment, XML_CONS_TAG_RSC_LOCATION); + crm_xml_set_id(location, "cli-prefer-%s", rsc_id); + + crm_xml_add(location, XML_LOC_ATTR_SOURCE, rsc_id); + if(promoted_role_only) { + crm_xml_add(location, XML_RULE_ATTR_ROLE, promoted_role_name()); + } else { + crm_xml_add(location, XML_RULE_ATTR_ROLE, RSC_ROLE_STARTED_S); + } + + if (later_s == NULL) { + /* Short form */ + crm_xml_add(location, XML_CIB_TAG_NODE, host); + crm_xml_add(location, XML_RULE_ATTR_SCORE, CRM_INFINITY_S); + + } else { + xmlNode *rule = create_xml_node(location, XML_TAG_RULE); + xmlNode *expr = create_xml_node(rule, XML_TAG_EXPRESSION); + + crm_xml_set_id(rule, "cli-prefer-rule-%s", rsc_id); + crm_xml_add(rule, XML_RULE_ATTR_SCORE, CRM_INFINITY_S); + crm_xml_add(rule, XML_RULE_ATTR_BOOLEAN_OP, "and"); + + crm_xml_set_id(expr, "cli-prefer-expr-%s", rsc_id); + crm_xml_add(expr, XML_EXPR_ATTR_ATTRIBUTE, CRM_ATTR_UNAME); + crm_xml_add(expr, XML_EXPR_ATTR_OPERATION, "eq"); + crm_xml_add(expr, XML_EXPR_ATTR_VALUE, host); + crm_xml_add(expr, XML_EXPR_ATTR_TYPE, "string"); + + expr = create_xml_node(rule, "date_expression"); + crm_xml_set_id(expr, "cli-prefer-lifetime-end-%s", rsc_id); + crm_xml_add(expr, "operation", "lt"); + crm_xml_add(expr, "end", later_s); + } + + crm_log_xml_info(fragment, "Modify"); + rc = cib_conn->cmds->modify(cib_conn, XML_CIB_TAG_CONSTRAINTS, fragment, + cib_options); + rc = pcmk_legacy2rc(rc); + + free_xml(fragment); + free(later_s); + return rc; +} + +/* Nodes can be specified two different ways in the CIB, so we have two different + * functions to try clearing out any constraints on them: + * + * (1) The node could be given by attribute=/value= in an expression XML node. + * That's what resource_clear_node_in_expr handles. That XML looks like this: + * + * + * + * + * + * + * + * + * (2) The mode could be given by node= in an rsc_location XML node. That's + * what resource_clear_node_in_location handles. That XML looks like this: + * + * + * + * \return Standard Pacemaker return code + */ +static int +resource_clear_node_in_expr(const char *rsc_id, const char *host, cib_t * cib_conn, + int cib_options) +{ + int rc = pcmk_rc_ok; + char *xpath_string = NULL; + +#define XPATH_FMT \ + "//" XML_CONS_TAG_RSC_LOCATION "[@" XML_ATTR_ID "='cli-prefer-%s']" \ + "[" XML_TAG_RULE \ + "[@" XML_ATTR_ID "='cli-prefer-rule-%s']" \ + "/" XML_TAG_EXPRESSION \ + "[@" XML_EXPR_ATTR_ATTRIBUTE "='#uname' " \ + "and @" XML_EXPR_ATTR_VALUE "='%s']" \ + "]" + + xpath_string = crm_strdup_printf(XPATH_FMT, rsc_id, rsc_id, host); + + rc = cib_conn->cmds->remove(cib_conn, xpath_string, NULL, cib_xpath | cib_options); + if (rc == -ENXIO) { + rc = pcmk_rc_ok; + } else { + rc = pcmk_legacy2rc(rc); + } + + free(xpath_string); + return rc; +} + +// \return Standard Pacemaker return code +static int +resource_clear_node_in_location(const char *rsc_id, const char *host, cib_t * cib_conn, + int cib_options, bool clear_ban_constraints, gboolean force) +{ + int rc = pcmk_rc_ok; + xmlNode *fragment = NULL; + xmlNode *location = NULL; + + fragment = create_xml_node(NULL, XML_CIB_TAG_CONSTRAINTS); + + if (clear_ban_constraints == TRUE) { + location = create_xml_node(fragment, XML_CONS_TAG_RSC_LOCATION); + crm_xml_set_id(location, "cli-ban-%s-on-%s", rsc_id, host); + } + + location = create_xml_node(fragment, XML_CONS_TAG_RSC_LOCATION); + crm_xml_set_id(location, "cli-prefer-%s", rsc_id); + if (force == FALSE) { + crm_xml_add(location, XML_CIB_TAG_NODE, host); + } + + crm_log_xml_info(fragment, "Delete"); + rc = cib_conn->cmds->remove(cib_conn, XML_CIB_TAG_CONSTRAINTS, fragment, cib_options); + if (rc == -ENXIO) { + rc = pcmk_rc_ok; + } else { + rc = pcmk_legacy2rc(rc); + } + + free_xml(fragment); + return rc; +} + +// \return Standard Pacemaker return code +int +cli_resource_clear(const char *rsc_id, const char *host, GList *allnodes, cib_t * cib_conn, + int cib_options, bool clear_ban_constraints, gboolean force) +{ + int rc = pcmk_rc_ok; + + if(cib_conn == NULL) { + return ENOTCONN; + } + + if (host) { + rc = resource_clear_node_in_expr(rsc_id, host, cib_conn, cib_options); + + /* rc does not tell us whether the previous operation did anything, only + * whether it failed or not. Thus, as long as it did not fail, we need + * to try the second clear method. + */ + if (rc == pcmk_rc_ok) { + rc = resource_clear_node_in_location(rsc_id, host, cib_conn, + cib_options, clear_ban_constraints, + force); + } + + } else { + GList *n = allnodes; + + /* Iterate over all nodes, attempting to clear the constraint from each. + * On the first error, abort. + */ + for(; n; n = n->next) { + pe_node_t *target = n->data; + + rc = cli_resource_clear(rsc_id, target->details->uname, NULL, + cib_conn, cib_options, clear_ban_constraints, + force); + if (rc != pcmk_rc_ok) { + break; + } + } + } + + return rc; +} + +static void +build_clear_xpath_string(GString *buf, const xmlNode *constraint_node, + const char *rsc, const char *node, + bool promoted_role_only) +{ + const char *cons_id = ID(constraint_node); + const char *cons_rsc = crm_element_value(constraint_node, + XML_LOC_ATTR_SOURCE); + GString *rsc_role_substr = NULL; + + CRM_ASSERT(buf != NULL); + g_string_truncate(buf, 0); + + if (!pcmk__starts_with(cons_id, "cli-ban-") + && !pcmk__starts_with(cons_id, "cli-prefer-")) { + return; + } + + g_string_append(buf, "//" XML_CONS_TAG_RSC_LOCATION); + + if ((node != NULL) || (rsc != NULL) || promoted_role_only) { + g_string_append_c(buf, '['); + + if (node != NULL) { + pcmk__g_strcat(buf, "@" XML_CIB_TAG_NODE "='", node, "'", NULL); + + if (promoted_role_only || (rsc != NULL)) { + g_string_append(buf, " and "); + } + } + + if ((rsc != NULL) && promoted_role_only) { + rsc_role_substr = g_string_sized_new(64); + pcmk__g_strcat(rsc_role_substr, + "@" XML_LOC_ATTR_SOURCE "='", rsc, "' " + "and @" XML_RULE_ATTR_ROLE "='", + promoted_role_name(), "'", NULL); + + } else if (rsc != NULL) { + rsc_role_substr = g_string_sized_new(64); + pcmk__g_strcat(rsc_role_substr, + "@" XML_LOC_ATTR_SOURCE "='", rsc, "'", NULL); + + } else if (promoted_role_only) { + rsc_role_substr = g_string_sized_new(64); + pcmk__g_strcat(rsc_role_substr, + "@" XML_RULE_ATTR_ROLE "='", promoted_role_name(), + "'", NULL); + } + + if (rsc_role_substr != NULL) { + g_string_append(buf, rsc_role_substr->str); + } + g_string_append_c(buf, ']'); + } + + if (node != NULL) { + g_string_append(buf, "|//" XML_CONS_TAG_RSC_LOCATION); + + if (rsc_role_substr != NULL) { + pcmk__g_strcat(buf, "[", rsc_role_substr, "]", NULL); + } + pcmk__g_strcat(buf, + "/" XML_TAG_RULE "[" XML_TAG_EXPRESSION + "[@" XML_EXPR_ATTR_ATTRIBUTE "='" CRM_ATTR_UNAME "' " + "and @" XML_EXPR_ATTR_VALUE "='", node, "']]", NULL); + } + + g_string_append(buf, "//" PCMK_XE_DATE_EXPRESSION "[@" XML_ATTR_ID "='"); + if (pcmk__starts_with(cons_id, "cli-ban-")) { + pcmk__g_strcat(buf, cons_id, "-lifetime']", NULL); + + } else { // starts with "cli-prefer-" + pcmk__g_strcat(buf, + "cli-prefer-lifetime-end-", cons_rsc, "']", NULL); + } + + if (rsc_role_substr != NULL) { + g_string_free(rsc_role_substr, TRUE); + } +} + +// \return Standard Pacemaker return code +int +cli_resource_clear_all_expired(xmlNode *root, cib_t *cib_conn, int cib_options, + const char *rsc, const char *node, gboolean promoted_role_only) +{ + GString *buf = NULL; + xmlXPathObject *xpathObj = NULL; + xmlNode *cib_constraints = NULL; + crm_time_t *now = crm_time_new(NULL); + int i; + int rc = pcmk_rc_ok; + + cib_constraints = pcmk_find_cib_element(root, XML_CIB_TAG_CONSTRAINTS); + xpathObj = xpath_search(cib_constraints, "//" XML_CONS_TAG_RSC_LOCATION); + + for (i = 0; i < numXpathResults(xpathObj); i++) { + xmlNode *constraint_node = getXpathResult(xpathObj, i); + xmlNode *date_expr_node = NULL; + crm_time_t *end = NULL; + + if (buf == NULL) { + buf = g_string_sized_new(1024); + } + + build_clear_xpath_string(buf, constraint_node, rsc, node, + promoted_role_only); + if (buf->len == 0) { + continue; + } + + date_expr_node = get_xpath_object((const char *) buf->str, + constraint_node, LOG_DEBUG); + if (date_expr_node == NULL) { + continue; + } + + /* And then finally, see if the date expression is expired. If so, + * clear the constraint. + */ + end = crm_time_new(crm_element_value(date_expr_node, "end")); + + if (crm_time_compare(now, end) == 1) { + xmlNode *fragment = NULL; + xmlNode *location = NULL; + + fragment = create_xml_node(NULL, XML_CIB_TAG_CONSTRAINTS); + location = create_xml_node(fragment, XML_CONS_TAG_RSC_LOCATION); + crm_xml_set_id(location, "%s", ID(constraint_node)); + crm_log_xml_info(fragment, "Delete"); + + rc = cib_conn->cmds->remove(cib_conn, XML_CIB_TAG_CONSTRAINTS, + fragment, cib_options); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + goto done; + } + + free_xml(fragment); + } + + crm_time_free(end); + } + +done: + if (buf != NULL) { + g_string_free(buf, TRUE); + } + freeXpathObject(xpathObj); + crm_time_free(now); + return rc; +} diff --git a/tools/crm_resource_print.c b/tools/crm_resource_print.c new file mode 100644 index 0000000..c1be53c --- /dev/null +++ b/tools/crm_resource_print.c @@ -0,0 +1,818 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include + +#include +#include +#include +#include + +#define cons_string(x) x?x:"NA" +static int +print_constraint(xmlNode *xml_obj, void *userdata) +{ + pe_working_set_t *data_set = (pe_working_set_t *) userdata; + pcmk__output_t *out = data_set->priv; + xmlNode *lifetime = NULL; + const char *id = crm_element_value(xml_obj, XML_ATTR_ID); + + if (id == NULL) { + return pcmk_rc_ok; + } + + // @COMPAT lifetime is deprecated + lifetime = first_named_child(xml_obj, "lifetime"); + if (pe_evaluate_rules(lifetime, NULL, data_set->now, NULL) == FALSE) { + return pcmk_rc_ok; + } + + if (!pcmk__str_eq(XML_CONS_TAG_RSC_DEPEND, crm_element_name(xml_obj), pcmk__str_casei)) { + return pcmk_rc_ok; + } + + out->info(out, "Constraint %s %s %s %s %s %s %s", + crm_element_name(xml_obj), + cons_string(crm_element_value(xml_obj, XML_ATTR_ID)), + cons_string(crm_element_value(xml_obj, XML_COLOC_ATTR_SOURCE)), + cons_string(crm_element_value(xml_obj, XML_COLOC_ATTR_TARGET)), + cons_string(crm_element_value(xml_obj, XML_RULE_ATTR_SCORE)), + cons_string(crm_element_value(xml_obj, XML_COLOC_ATTR_SOURCE_ROLE)), + cons_string(crm_element_value(xml_obj, XML_COLOC_ATTR_TARGET_ROLE))); + + return pcmk_rc_ok; +} + +void +cli_resource_print_cts_constraints(pe_working_set_t * data_set) +{ + pcmk__xe_foreach_child(pcmk_find_cib_element(data_set->input, XML_CIB_TAG_CONSTRAINTS), + NULL, print_constraint, data_set); +} + +void +cli_resource_print_cts(pe_resource_t * rsc, pcmk__output_t *out) +{ + const char *host = NULL; + bool needs_quorum = TRUE; + const char *rtype = crm_element_value(rsc->xml, XML_ATTR_TYPE); + const char *rprov = crm_element_value(rsc->xml, XML_AGENT_ATTR_PROVIDER); + const char *rclass = crm_element_value(rsc->xml, XML_AGENT_ATTR_CLASS); + pe_node_t *node = pe__current_node(rsc); + + if (pcmk__str_eq(rclass, PCMK_RESOURCE_CLASS_STONITH, pcmk__str_casei)) { + needs_quorum = FALSE; + } else { + // @TODO check requires in resource meta-data and rsc_defaults + } + + if (node != NULL) { + host = node->details->uname; + } + + out->info(out, "Resource: %s %s %s %s %s %s %s %s %d %lld %#.16llx", + crm_element_name(rsc->xml), rsc->id, + rsc->clone_name ? rsc->clone_name : rsc->id, rsc->parent ? rsc->parent->id : "NA", + rprov ? rprov : "NA", rclass, rtype, host ? host : "NA", needs_quorum, rsc->flags, + rsc->flags); + + g_list_foreach(rsc->children, (GFunc) cli_resource_print_cts, out); +} + +// \return Standard Pacemaker return code +int +cli_resource_print_operations(const char *rsc_id, const char *host_uname, + bool active, pe_working_set_t * data_set) +{ + pcmk__output_t *out = data_set->priv; + int rc = pcmk_rc_no_output; + GList *ops = find_operations(rsc_id, host_uname, active, data_set); + + if (!ops) { + return rc; + } + + out->begin_list(out, NULL, NULL, "Resource Operations"); + rc = pcmk_rc_ok; + + for (GList *lpc = ops; lpc != NULL; lpc = lpc->next) { + xmlNode *xml_op = (xmlNode *) lpc->data; + out->message(out, "node-and-op", data_set, xml_op); + } + + out->end_list(out); + return rc; +} + +// \return Standard Pacemaker return code +int +cli_resource_print(pe_resource_t *rsc, pe_working_set_t *data_set, bool expanded) +{ + pcmk__output_t *out = data_set->priv; + uint32_t show_opts = pcmk_show_pending; + GList *all = NULL; + + all = g_list_prepend(all, (gpointer) "*"); + + out->begin_list(out, NULL, NULL, "Resource Config"); + out->message(out, crm_map_element_name(rsc->xml), show_opts, rsc, all, all); + out->message(out, "resource-config", rsc, !expanded); + out->end_list(out); + + g_list_free(all); + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("attribute-list", "pe_resource_t *", "const char *", "const char *") +static int +attribute_list_default(pcmk__output_t *out, va_list args) { + pe_resource_t *rsc = va_arg(args, pe_resource_t *); + const char *attr = va_arg(args, char *); + const char *value = va_arg(args, const char *); + + if (value != NULL) { + out->begin_list(out, NULL, NULL, "Attributes"); + out->list_item(out, attr, "%s", value); + out->end_list(out); + return pcmk_rc_ok; + } else { + out->err(out, "Attribute '%s' not found for '%s'", attr, rsc->id); + } + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("agent-status", "int", "const char *", "const char *", "const char *", + "const char *", "const char *", "crm_exit_t", "const char *") +static int +agent_status_default(pcmk__output_t *out, va_list args) { + int status = va_arg(args, int); + const char *action = va_arg(args, const char *); + const char *name = va_arg(args, const char *); + const char *class = va_arg(args, const char *); + const char *provider = va_arg(args, const char *); + const char *type = va_arg(args, const char *); + crm_exit_t rc = va_arg(args, crm_exit_t); + const char *exit_reason = va_arg(args, const char *); + + if (status == PCMK_EXEC_DONE) { + /* Operation [for ] ([:]:) + * returned ([: ]) + */ + out->info(out, "Operation %s%s%s (%s%s%s:%s) returned %d (%s%s%s)", + action, + ((name == NULL)? "" : " for "), ((name == NULL)? "" : name), + class, + ((provider == NULL)? "" : ":"), + ((provider == NULL)? "" : provider), + type, (int) rc, services_ocf_exitcode_str((int) rc), + ((exit_reason == NULL)? "" : ": "), + ((exit_reason == NULL)? "" : exit_reason)); + } else { + /* Operation [for ] ([:]:) + * could not be executed ([: ]) + */ + out->err(out, + "Operation %s%s%s (%s%s%s:%s) could not be executed (%s%s%s)", + action, + ((name == NULL)? "" : " for "), ((name == NULL)? "" : name), + class, + ((provider == NULL)? "" : ":"), + ((provider == NULL)? "" : provider), + type, pcmk_exec_status_str(status), + ((exit_reason == NULL)? "" : ": "), + ((exit_reason == NULL)? "" : exit_reason)); + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("agent-status", "int", "const char *", "const char *", "const char *", + "const char *", "const char *", "crm_exit_t", "const char *") +static int +agent_status_xml(pcmk__output_t *out, va_list args) { + int status = va_arg(args, int); + const char *action G_GNUC_UNUSED = va_arg(args, const char *); + const char *name G_GNUC_UNUSED = va_arg(args, const char *); + const char *class G_GNUC_UNUSED = va_arg(args, const char *); + const char *provider G_GNUC_UNUSED = va_arg(args, const char *); + const char *type G_GNUC_UNUSED = va_arg(args, const char *); + crm_exit_t rc = va_arg(args, crm_exit_t); + const char *exit_reason = va_arg(args, const char *); + + char *exit_str = pcmk__itoa(rc); + char *status_str = pcmk__itoa(status); + + pcmk__output_create_xml_node(out, "agent-status", + "code", exit_str, + "message", services_ocf_exitcode_str((int) rc), + "execution_code", status_str, + "execution_message", pcmk_exec_status_str(status), + "reason", exit_reason, + NULL); + + free(exit_str); + free(status_str); + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("attribute-list", "pe_resource_t *", "const char *", "const char *") +static int +attribute_list_text(pcmk__output_t *out, va_list args) { + pe_resource_t *rsc = va_arg(args, pe_resource_t *); + const char *attr = va_arg(args, char *); + const char *value = va_arg(args, const char *); + + if (value != NULL) { + pcmk__formatted_printf(out, "%s\n", value); + return pcmk_rc_ok; + } else { + out->err(out, "Attribute '%s' not found for '%s'", attr, rsc->id); + } + return pcmk_rc_ok; +} +PCMK__OUTPUT_ARGS("override", "const char *", "const char *", "const char *") +static int +override_default(pcmk__output_t *out, va_list args) { + const char *rsc_name = va_arg(args, const char *); + const char *name = va_arg(args, const char *); + const char *value = va_arg(args, const char *); + + if (rsc_name == NULL) { + out->list_item(out, NULL, "Overriding the cluster configuration with '%s' = '%s'", + name, value); + } else { + out->list_item(out, NULL, "Overriding the cluster configuration for '%s' with '%s' = '%s'", + rsc_name, name, value); + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("override", "const char *", "const char *", "const char *") +static int +override_xml(pcmk__output_t *out, va_list args) { + const char *rsc_name = va_arg(args, const char *); + const char *name = va_arg(args, const char *); + const char *value = va_arg(args, const char *); + + xmlNodePtr node = pcmk__output_create_xml_node(out, "override", + "name", name, + "value", value, + NULL); + + if (rsc_name != NULL) { + crm_xml_add(node, "rsc", rsc_name); + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("property-list", "pe_resource_t *", "const char *") +static int +property_list_default(pcmk__output_t *out, va_list args) { + pe_resource_t *rsc = va_arg(args, pe_resource_t *); + const char *attr = va_arg(args, char *); + + const char *value = crm_element_value(rsc->xml, attr); + + if (value != NULL) { + out->begin_list(out, NULL, NULL, "Properties"); + out->list_item(out, attr, "%s", value); + out->end_list(out); + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("property-list", "pe_resource_t *", "const char *") +static int +property_list_text(pcmk__output_t *out, va_list args) { + pe_resource_t *rsc = va_arg(args, pe_resource_t *); + const char *attr = va_arg(args, const char *); + + const char *value = crm_element_value(rsc->xml, attr); + + if (value != NULL) { + pcmk__formatted_printf(out, "%s\n", value); + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-agent-action", "int", "const char *", "const char *", + "const char *", "const char *", "const char *", "GHashTable *", + "crm_exit_t", "int", "const char *", "const char *", "const char *") +static int +resource_agent_action_default(pcmk__output_t *out, va_list args) { + int verbose = va_arg(args, int); + + const char *class = va_arg(args, const char *); + const char *provider = va_arg(args, const char *); + const char *type = va_arg(args, const char *); + const char *rsc_name = va_arg(args, const char *); + const char *action = va_arg(args, const char *); + GHashTable *overrides = va_arg(args, GHashTable *); + crm_exit_t rc = va_arg(args, crm_exit_t); + int status = va_arg(args, int); + const char *exit_reason = va_arg(args, const char *); + const char *stdout_data = va_arg(args, const char *); + const char *stderr_data = va_arg(args, const char *); + + if (overrides) { + GHashTableIter iter; + const char *name = NULL; + const char *value = NULL; + + out->begin_list(out, NULL, NULL, "overrides"); + + g_hash_table_iter_init(&iter, overrides); + while (g_hash_table_iter_next(&iter, (gpointer *) &name, (gpointer *) &value)) { + out->message(out, "override", rsc_name, name, value); + } + + out->end_list(out); + } + + out->message(out, "agent-status", status, action, rsc_name, class, provider, + type, rc, exit_reason); + + /* hide output for validate-all if not in verbose */ + if (verbose == 0 && pcmk__str_eq(action, "validate-all", pcmk__str_casei)) { + return pcmk_rc_ok; + } + + if (stdout_data || stderr_data) { + xmlNodePtr doc = NULL; + + if (stdout_data != NULL) { + doc = string2xml(stdout_data); + } + if (doc != NULL) { + out->output_xml(out, "command", stdout_data); + xmlFreeNode(doc); + } else { + out->subprocess_output(out, rc, stdout_data, stderr_data); + } + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-agent-action", "int", "const char *", "const char *", + "const char *", "const char *", "const char *", "GHashTable *", + "crm_exit_t", "int", "const char *", "const char *", "const char *") +static int +resource_agent_action_xml(pcmk__output_t *out, va_list args) { + int verbose G_GNUC_UNUSED = va_arg(args, int); + + const char *class = va_arg(args, const char *); + const char *provider = va_arg(args, const char *); + const char *type = va_arg(args, const char *); + const char *rsc_name = va_arg(args, const char *); + const char *action = va_arg(args, const char *); + GHashTable *overrides = va_arg(args, GHashTable *); + crm_exit_t rc = va_arg(args, crm_exit_t); + int status = va_arg(args, int); + const char *exit_reason = va_arg(args, const char *); + const char *stdout_data = va_arg(args, const char *); + const char *stderr_data = va_arg(args, const char *); + + xmlNodePtr node = pcmk__output_xml_create_parent(out, "resource-agent-action", + "action", action, + "class", class, + "type", type, + NULL); + + if (rsc_name) { + crm_xml_add(node, "rsc", rsc_name); + } + + if (provider) { + crm_xml_add(node, "provider", provider); + } + + if (overrides) { + GHashTableIter iter; + const char *name = NULL; + const char *value = NULL; + + out->begin_list(out, NULL, NULL, "overrides"); + + g_hash_table_iter_init(&iter, overrides); + while (g_hash_table_iter_next(&iter, (gpointer *) &name, (gpointer *) &value)) { + out->message(out, "override", rsc_name, name, value); + } + + out->end_list(out); + } + + out->message(out, "agent-status", status, action, rsc_name, class, provider, + type, rc, exit_reason); + + if (stdout_data || stderr_data) { + xmlNodePtr doc = NULL; + + if (stdout_data != NULL) { + doc = string2xml(stdout_data); + } + if (doc != NULL) { + out->output_xml(out, "command", stdout_data); + xmlFreeNode(doc); + } else { + out->subprocess_output(out, rc, stdout_data, stderr_data); + } + } + + pcmk__output_xml_pop_parent(out); + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-check-list", "resource_checks_t *") +static int +resource_check_list_default(pcmk__output_t *out, va_list args) { + resource_checks_t *checks = va_arg(args, resource_checks_t *); + + const pe_resource_t *parent = pe__const_top_resource(checks->rsc, false); + + if (checks->flags == 0) { + return pcmk_rc_no_output; + } + + out->begin_list(out, NULL, NULL, "Resource Checks"); + + if (pcmk_is_set(checks->flags, rsc_remain_stopped)) { + out->list_item(out, "check", "Configuration specifies '%s' should remain stopped", + parent->id); + } + + if (pcmk_is_set(checks->flags, rsc_unpromotable)) { + out->list_item(out, "check", "Configuration specifies '%s' should not be promoted", + parent->id); + } + + if (pcmk_is_set(checks->flags, rsc_unmanaged)) { + out->list_item(out, "check", "Configuration prevents cluster from stopping or starting unmanaged '%s'", + parent->id); + } + + if (pcmk_is_set(checks->flags, rsc_locked)) { + out->list_item(out, "check", "'%s' is locked to node %s due to shutdown", + parent->id, checks->lock_node); + } + + if (pcmk_is_set(checks->flags, rsc_node_health)) { + out->list_item(out, "check", + "'%s' cannot run on unhealthy nodes due to " + PCMK__OPT_NODE_HEALTH_STRATEGY "='%s'", + parent->id, + pe_pref(checks->rsc->cluster->config_hash, + PCMK__OPT_NODE_HEALTH_STRATEGY)); + } + + out->end_list(out); + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-check-list", "resource_checks_t *") +static int +resource_check_list_xml(pcmk__output_t *out, va_list args) { + resource_checks_t *checks = va_arg(args, resource_checks_t *); + + const pe_resource_t *parent = pe__const_top_resource(checks->rsc, false); + + xmlNodePtr node = pcmk__output_create_xml_node(out, "check", + "id", parent->id, + NULL); + + if (pcmk_is_set(checks->flags, rsc_remain_stopped)) { + pcmk__xe_set_bool_attr(node, "remain_stopped", true); + } + + if (pcmk_is_set(checks->flags, rsc_unpromotable)) { + pcmk__xe_set_bool_attr(node, "promotable", false); + } + + if (pcmk_is_set(checks->flags, rsc_unmanaged)) { + pcmk__xe_set_bool_attr(node, "unmanaged", true); + } + + if (pcmk_is_set(checks->flags, rsc_locked)) { + crm_xml_add(node, "locked-to", checks->lock_node); + } + + if (pcmk_is_set(checks->flags, rsc_node_health)) { + pcmk__xe_set_bool_attr(node, "unhealthy", true); + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-search-list", "GList *", "const char *") +static int +resource_search_list_default(pcmk__output_t *out, va_list args) +{ + GList *nodes = va_arg(args, GList *); + const char *requested_name = va_arg(args, const char *); + + bool printed = false; + int rc = pcmk_rc_no_output; + + if (!out->is_quiet(out) && nodes == NULL) { + out->err(out, "resource %s is NOT running", requested_name); + return rc; + } + + for (GList *lpc = nodes; lpc != NULL; lpc = lpc->next) { + node_info_t *ni = (node_info_t *) lpc->data; + + if (!printed) { + out->begin_list(out, NULL, NULL, "Nodes"); + printed = true; + rc = pcmk_rc_ok; + } + + if (out->is_quiet(out)) { + out->list_item(out, "node", "%s", ni->node_name); + } else { + const char *role_text = ""; + + if (ni->promoted) { +#ifdef PCMK__COMPAT_2_0 + role_text = " " RSC_ROLE_PROMOTED_LEGACY_S; +#else + role_text = " " RSC_ROLE_PROMOTED_S; +#endif + } + out->list_item(out, "node", "resource %s is running on: %s%s", + requested_name, ni->node_name, role_text); + } + } + + if (printed) { + out->end_list(out); + } + + return rc; +} + +PCMK__OUTPUT_ARGS("resource-search-list", "GList *", "const char *") +static int +resource_search_list_xml(pcmk__output_t *out, va_list args) +{ + GList *nodes = va_arg(args, GList *); + const char *requested_name = va_arg(args, const char *); + + pcmk__output_xml_create_parent(out, "nodes", + "resource", requested_name, + NULL); + + for (GList *lpc = nodes; lpc != NULL; lpc = lpc->next) { + node_info_t *ni = (node_info_t *) lpc->data; + xmlNodePtr sub_node = pcmk__output_create_xml_text_node(out, "node", ni->node_name); + + if (ni->promoted) { + crm_xml_add(sub_node, "state", "promoted"); + } + } + + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-reasons-list", "GList *", "pe_resource_t *", + "pe_node_t *") +static int +resource_reasons_list_default(pcmk__output_t *out, va_list args) +{ + GList *resources = va_arg(args, GList *); + pe_resource_t *rsc = va_arg(args, pe_resource_t *); + pe_node_t *node = va_arg(args, pe_node_t *); + + const char *host_uname = (node == NULL)? NULL : node->details->uname; + + out->begin_list(out, NULL, NULL, "Resource Reasons"); + + if ((rsc == NULL) && (host_uname == NULL)) { + GList *lpc = NULL; + GList *hosts = NULL; + + for (lpc = resources; lpc != NULL; lpc = lpc->next) { + pe_resource_t *rsc = (pe_resource_t *) lpc->data; + rsc->fns->location(rsc, &hosts, TRUE); + + if (hosts == NULL) { + out->list_item(out, "reason", "Resource %s is not running", rsc->id); + } else { + out->list_item(out, "reason", "Resource %s is running", rsc->id); + } + + cli_resource_check(out, rsc, NULL); + g_list_free(hosts); + hosts = NULL; + } + + } else if ((rsc != NULL) && (host_uname != NULL)) { + if (resource_is_running_on(rsc, host_uname)) { + out->list_item(out, "reason", "Resource %s is running on host %s", + rsc->id, host_uname); + } else { + out->list_item(out, "reason", "Resource %s is not running on host %s", + rsc->id, host_uname); + } + + cli_resource_check(out, rsc, node); + + } else if ((rsc == NULL) && (host_uname != NULL)) { + const char* host_uname = node->details->uname; + GList *allResources = node->details->allocated_rsc; + GList *activeResources = node->details->running_rsc; + GList *unactiveResources = pcmk__subtract_lists(allResources, activeResources, (GCompareFunc) strcmp); + GList *lpc = NULL; + + for (lpc = activeResources; lpc != NULL; lpc = lpc->next) { + pe_resource_t *rsc = (pe_resource_t *) lpc->data; + out->list_item(out, "reason", "Resource %s is running on host %s", + rsc->id, host_uname); + cli_resource_check(out, rsc, node); + } + + for(lpc = unactiveResources; lpc != NULL; lpc = lpc->next) { + pe_resource_t *rsc = (pe_resource_t *) lpc->data; + out->list_item(out, "reason", "Resource %s is assigned to host %s but not running", + rsc->id, host_uname); + cli_resource_check(out, rsc, node); + } + + g_list_free(allResources); + g_list_free(activeResources); + g_list_free(unactiveResources); + + } else if ((rsc != NULL) && (host_uname == NULL)) { + GList *hosts = NULL; + + rsc->fns->location(rsc, &hosts, TRUE); + out->list_item(out, "reason", "Resource %s is %srunning", + rsc->id, (hosts? "" : "not ")); + cli_resource_check(out, rsc, NULL); + g_list_free(hosts); + } + + out->end_list(out); + return pcmk_rc_ok; +} + +PCMK__OUTPUT_ARGS("resource-reasons-list", "GList *", "pe_resource_t *", + "pe_node_t *") +static int +resource_reasons_list_xml(pcmk__output_t *out, va_list args) +{ + GList *resources = va_arg(args, GList *); + pe_resource_t *rsc = va_arg(args, pe_resource_t *); + pe_node_t *node = va_arg(args, pe_node_t *); + + const char *host_uname = (node == NULL)? NULL : node->details->uname; + + xmlNodePtr xml_node = pcmk__output_xml_create_parent(out, "reason", NULL); + + if ((rsc == NULL) && (host_uname == NULL)) { + GList *lpc = NULL; + GList *hosts = NULL; + + pcmk__output_xml_create_parent(out, "resources", NULL); + + for (lpc = resources; lpc != NULL; lpc = lpc->next) { + pe_resource_t *rsc = (pe_resource_t *) lpc->data; + + rsc->fns->location(rsc, &hosts, TRUE); + + pcmk__output_xml_create_parent(out, "resource", + "id", rsc->id, + "running", pcmk__btoa(hosts != NULL), + NULL); + + cli_resource_check(out, rsc, NULL); + pcmk__output_xml_pop_parent(out); + g_list_free(hosts); + hosts = NULL; + } + + pcmk__output_xml_pop_parent(out); + + } else if ((rsc != NULL) && (host_uname != NULL)) { + if (resource_is_running_on(rsc, host_uname)) { + crm_xml_add(xml_node, "running_on", host_uname); + } + + cli_resource_check(out, rsc, node); + + } else if ((rsc == NULL) && (host_uname != NULL)) { + const char* host_uname = node->details->uname; + GList *allResources = node->details->allocated_rsc; + GList *activeResources = node->details->running_rsc; + GList *unactiveResources = pcmk__subtract_lists(allResources, activeResources, (GCompareFunc) strcmp); + GList *lpc = NULL; + + pcmk__output_xml_create_parent(out, "resources", NULL); + + for (lpc = activeResources; lpc != NULL; lpc = lpc->next) { + pe_resource_t *rsc = (pe_resource_t *) lpc->data; + + pcmk__output_xml_create_parent(out, "resource", + "id", rsc->id, + "running", "true", + "host", host_uname, + NULL); + + cli_resource_check(out, rsc, node); + pcmk__output_xml_pop_parent(out); + } + + for(lpc = unactiveResources; lpc != NULL; lpc = lpc->next) { + pe_resource_t *rsc = (pe_resource_t *) lpc->data; + + pcmk__output_xml_create_parent(out, "resource", + "id", rsc->id, + "running", "false", + "host", host_uname, + NULL); + + cli_resource_check(out, rsc, node); + pcmk__output_xml_pop_parent(out); + } + + pcmk__output_xml_pop_parent(out); + g_list_free(allResources); + g_list_free(activeResources); + g_list_free(unactiveResources); + + } else if ((rsc != NULL) && (host_uname == NULL)) { + GList *hosts = NULL; + + rsc->fns->location(rsc, &hosts, TRUE); + crm_xml_add(xml_node, "running", pcmk__btoa(hosts != NULL)); + cli_resource_check(out, rsc, NULL); + g_list_free(hosts); + } + + return pcmk_rc_ok; +} + +static void +add_resource_name(pe_resource_t *rsc, pcmk__output_t *out) { + if (rsc->children == NULL) { + out->list_item(out, "resource", "%s", rsc->id); + } else { + g_list_foreach(rsc->children, (GFunc) add_resource_name, out); + } +} + +PCMK__OUTPUT_ARGS("resource-names-list", "GList *") +static int +resource_names(pcmk__output_t *out, va_list args) { + GList *resources = va_arg(args, GList *); + + if (resources == NULL) { + out->err(out, "NO resources configured\n"); + return pcmk_rc_no_output; + } + + out->begin_list(out, NULL, NULL, "Resource Names"); + g_list_foreach(resources, (GFunc) add_resource_name, out); + out->end_list(out); + return pcmk_rc_ok; +} + +static pcmk__message_entry_t fmt_functions[] = { + { "agent-status", "default", agent_status_default }, + { "agent-status", "xml", agent_status_xml }, + { "attribute-list", "default", attribute_list_default }, + { "attribute-list", "text", attribute_list_text }, + { "override", "default", override_default }, + { "override", "xml", override_xml }, + { "property-list", "default", property_list_default }, + { "property-list", "text", property_list_text }, + { "resource-agent-action", "default", resource_agent_action_default }, + { "resource-agent-action", "xml", resource_agent_action_xml }, + { "resource-check-list", "default", resource_check_list_default }, + { "resource-check-list", "xml", resource_check_list_xml }, + { "resource-search-list", "default", resource_search_list_default }, + { "resource-search-list", "xml", resource_search_list_xml }, + { "resource-reasons-list", "default", resource_reasons_list_default }, + { "resource-reasons-list", "xml", resource_reasons_list_xml }, + { "resource-names-list", "default", resource_names }, + + { NULL, NULL, NULL } +}; + +void +crm_resource_register_messages(pcmk__output_t *out) { + pcmk__register_messages(out, fmt_functions); +} diff --git a/tools/crm_resource_runtime.c b/tools/crm_resource_runtime.c new file mode 100644 index 0000000..f25dbbc --- /dev/null +++ b/tools/crm_resource_runtime.c @@ -0,0 +1,2178 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include + +static GList * +build_node_info_list(const pe_resource_t *rsc) +{ + GList *retval = NULL; + + for (const GList *iter = rsc->children; iter != NULL; iter = iter->next) { + const pe_resource_t *child = (const pe_resource_t *) iter->data; + + for (const GList *iter2 = child->running_on; + iter2 != NULL; iter2 = iter2->next) { + + const pe_node_t *node = (const pe_node_t *) iter2->data; + node_info_t *ni = calloc(1, sizeof(node_info_t)); + + ni->node_name = node->details->uname; + ni->promoted = pcmk_is_set(rsc->flags, pe_rsc_promotable) && + child->fns->state(child, TRUE) == RSC_ROLE_PROMOTED; + + retval = g_list_prepend(retval, ni); + } + } + + return retval; +} + +GList * +cli_resource_search(pe_resource_t *rsc, const char *requested_name, + pe_working_set_t *data_set) +{ + GList *retval = NULL; + const pe_resource_t *parent = pe__const_top_resource(rsc, false); + + if (pe_rsc_is_clone(rsc)) { + retval = build_node_info_list(rsc); + + /* The anonymous clone children's common ID is supplied */ + } else if (pe_rsc_is_clone(parent) + && !pcmk_is_set(rsc->flags, pe_rsc_unique) + && rsc->clone_name + && pcmk__str_eq(requested_name, rsc->clone_name, pcmk__str_casei) + && !pcmk__str_eq(requested_name, rsc->id, pcmk__str_casei)) { + + retval = build_node_info_list(parent); + + } else if (rsc->running_on != NULL) { + for (GList *iter = rsc->running_on; iter != NULL; iter = iter->next) { + pe_node_t *node = (pe_node_t *) iter->data; + node_info_t *ni = calloc(1, sizeof(node_info_t)); + ni->node_name = node->details->uname; + ni->promoted = (rsc->fns->state(rsc, TRUE) == RSC_ROLE_PROMOTED); + + retval = g_list_prepend(retval, ni); + } + } + + return retval; +} + +// \return Standard Pacemaker return code +static int +find_resource_attr(pcmk__output_t *out, cib_t * the_cib, const char *attr, + const char *rsc, const char *attr_set_type, const char *set_name, + const char *attr_id, const char *attr_name, char **value) +{ + int rc = pcmk_rc_ok; + xmlNode *xml_search = NULL; + GString *xpath = NULL; + const char *xpath_base = NULL; + + if(value) { + *value = NULL; + } + + if(the_cib == NULL) { + return ENOTCONN; + } + + xpath_base = pcmk_cib_xpath_for(XML_CIB_TAG_RESOURCES); + if (xpath_base == NULL) { + crm_err(XML_CIB_TAG_RESOURCES " CIB element not known (bug?)"); + return ENOMSG; + } + + xpath = g_string_sized_new(1024); + pcmk__g_strcat(xpath, + xpath_base, "//*[@" XML_ATTR_ID "=\"", rsc, "\"]", NULL); + + if (attr_set_type != NULL) { + pcmk__g_strcat(xpath, "/", attr_set_type, NULL); + if (set_name != NULL) { + pcmk__g_strcat(xpath, "[@" XML_ATTR_ID "=\"", set_name, "\"]", + NULL); + } + } + + g_string_append(xpath, "//" XML_CIB_TAG_NVPAIR "["); + if (attr_id != NULL) { + pcmk__g_strcat(xpath, "@" XML_ATTR_ID "=\"", attr_id, "\"", NULL); + } + + if (attr_name != NULL) { + if (attr_id != NULL) { + g_string_append(xpath, " and "); + } + pcmk__g_strcat(xpath, "@" XML_NVPAIR_ATTR_NAME "=\"", attr_name, "\"", + NULL); + } + g_string_append_c(xpath, ']'); + + rc = the_cib->cmds->query(the_cib, (const char *) xpath->str, &xml_search, + cib_sync_call | cib_scope_local | cib_xpath); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + goto done; + } + + crm_log_xml_debug(xml_search, "Match"); + if (xml_has_children(xml_search)) { + xmlNode *child = NULL; + + rc = ENOTUNIQ; + out->info(out, "Multiple attributes match name=%s", attr_name); + + for (child = pcmk__xml_first_child(xml_search); child != NULL; + child = pcmk__xml_next(child)) { + out->info(out, " Value: %s \t(id=%s)", + crm_element_value(child, XML_NVPAIR_ATTR_VALUE), ID(child)); + } + + out->spacer(out); + + } else if(value) { + pcmk__str_update(value, crm_element_value(xml_search, attr)); + } + + done: + g_string_free(xpath, TRUE); + free_xml(xml_search); + return rc; +} + +/* PRIVATE. Use the find_matching_attr_resources instead. */ +static void +find_matching_attr_resources_recursive(pcmk__output_t *out, GList/* */ ** result, + pe_resource_t * rsc, const char * rsc_id, + const char * attr_set, const char * attr_set_type, + const char * attr_id, const char * attr_name, + cib_t * cib, const char * cmd, int depth) +{ + int rc = pcmk_rc_ok; + char *lookup_id = clone_strip(rsc->id); + char *local_attr_id = NULL; + + /* visit the children */ + for(GList *gIter = rsc->children; gIter; gIter = gIter->next) { + find_matching_attr_resources_recursive(out, result, (pe_resource_t*)gIter->data, + rsc_id, attr_set, attr_set_type, + attr_id, attr_name, cib, cmd, depth+1); + /* do it only once for clones */ + if(pe_clone == rsc->variant) { + break; + } + } + + rc = find_resource_attr(out, cib, XML_ATTR_ID, lookup_id, attr_set_type, + attr_set, attr_id, attr_name, &local_attr_id); + /* Post-order traversal. + * The root is always on the list and it is the last item. */ + if((0 == depth) || (pcmk_rc_ok == rc)) { + /* push the head */ + *result = g_list_append(*result, rsc); + } + + free(local_attr_id); + free(lookup_id); +} + + +/* The result is a linearized pre-ordered tree of resources. */ +static GList/**/ * +find_matching_attr_resources(pcmk__output_t *out, pe_resource_t * rsc, + const char * rsc_id, const char * attr_set, + const char * attr_set_type, const char * attr_id, + const char * attr_name, cib_t * cib, const char * cmd, + gboolean force) +{ + int rc = pcmk_rc_ok; + char *lookup_id = NULL; + char *local_attr_id = NULL; + GList * result = NULL; + /* If --force is used, update only the requested resource (clone or primitive). + * Otherwise, if the primitive has the attribute, use that. + * Otherwise use the clone. */ + if(force == TRUE) { + return g_list_append(result, rsc); + } + if(rsc->parent && pe_clone == rsc->parent->variant) { + int rc = pcmk_rc_ok; + char *local_attr_id = NULL; + rc = find_resource_attr(out, cib, XML_ATTR_ID, rsc_id, attr_set_type, + attr_set, attr_id, attr_name, &local_attr_id); + free(local_attr_id); + + if(rc != pcmk_rc_ok) { + rsc = rsc->parent; + out->info(out, "Performing %s of '%s' on '%s', the parent of '%s'", + cmd, attr_name, rsc->id, rsc_id); + } + return g_list_append(result, rsc); + } else if(rsc->parent == NULL && rsc->children && pe_clone == rsc->variant) { + pe_resource_t *child = rsc->children->data; + + if(child->variant == pe_native) { + lookup_id = clone_strip(child->id); /* Could be a cloned group! */ + rc = find_resource_attr(out, cib, XML_ATTR_ID, lookup_id, attr_set_type, + attr_set, attr_id, attr_name, &local_attr_id); + + if(rc == pcmk_rc_ok) { + rsc = child; + out->info(out, "A value for '%s' already exists in child '%s', performing %s on that instead of '%s'", + attr_name, lookup_id, cmd, rsc_id); + } + + free(local_attr_id); + free(lookup_id); + } + return g_list_append(result, rsc); + } + /* If the resource is a group ==> children inherit the attribute if defined. */ + find_matching_attr_resources_recursive(out, &result, rsc, rsc_id, attr_set, + attr_set_type, attr_id, attr_name, + cib, cmd, 0); + return result; +} + +// \return Standard Pacemaker return code +int +cli_resource_update_attribute(pe_resource_t *rsc, const char *requested_name, + const char *attr_set, const char *attr_set_type, + const char *attr_id, const char *attr_name, + const char *attr_value, gboolean recursive, + cib_t *cib, int cib_options, gboolean force) +{ + pcmk__output_t *out = rsc->cluster->priv; + int rc = pcmk_rc_ok; + + char *found_attr_id = NULL; + + GList/**/ *resources = NULL; + const char *top_id = pe__const_top_resource(rsc, false)->id; + + if ((attr_id == NULL) && !force) { + find_resource_attr(out, cib, XML_ATTR_ID, top_id, NULL, NULL, NULL, + attr_name, NULL); + } + + if (pcmk__str_eq(attr_set_type, XML_TAG_ATTR_SETS, pcmk__str_casei)) { + if (!force) { + rc = find_resource_attr(out, cib, XML_ATTR_ID, top_id, + XML_TAG_META_SETS, attr_set, attr_id, + attr_name, &found_attr_id); + if ((rc == pcmk_rc_ok) && !out->is_quiet(out)) { + out->err(out, + "WARNING: There is already a meta attribute " + "for '%s' called '%s' (id=%s)", + top_id, attr_name, found_attr_id); + out->err(out, + " Delete '%s' first or use the force option " + "to override", found_attr_id); + } + free(found_attr_id); + if (rc == pcmk_rc_ok) { + return ENOTUNIQ; + } + } + resources = g_list_append(resources, rsc); + + } else if (pcmk__str_eq(attr_set_type, ATTR_SET_ELEMENT, pcmk__str_none)) { + crm_xml_add(rsc->xml, attr_name, attr_value); + CRM_ASSERT(cib != NULL); + rc = cib->cmds->replace(cib, XML_CIB_TAG_RESOURCES, rsc->xml, + cib_options); + rc = pcmk_legacy2rc(rc); + if (rc == pcmk_rc_ok) { + out->info(out, "Set attribute: name=%s value=%s", + attr_name, attr_value); + } + return rc; + + } else { + resources = find_matching_attr_resources(out, rsc, requested_name, + attr_set, attr_set_type, + attr_id, attr_name, cib, + "update", force); + } + + /* If the user specified attr_set or attr_id, the intent is to modify a + * single resource, which will be the last item in the list. + */ + if ((attr_set != NULL) || (attr_id != NULL)) { + GList *last = g_list_last(resources); + + resources = g_list_remove_link(resources, last); + g_list_free(resources); + resources = last; + } + + for (GList *iter = resources; iter != NULL; iter = iter->next) { + char *lookup_id = NULL; + char *local_attr_set = NULL; + const char *rsc_attr_id = attr_id; + const char *rsc_attr_set = attr_set; + + xmlNode *xml_top = NULL; + xmlNode *xml_obj = NULL; + found_attr_id = NULL; + + rsc = (pe_resource_t *) iter->data; + + lookup_id = clone_strip(rsc->id); /* Could be a cloned group! */ + rc = find_resource_attr(out, cib, XML_ATTR_ID, lookup_id, attr_set_type, + attr_set, attr_id, attr_name, &found_attr_id); + + switch (rc) { + case pcmk_rc_ok: + crm_debug("Found a match for name=%s: id=%s", + attr_name, found_attr_id); + rsc_attr_id = found_attr_id; + break; + + case ENXIO: + if (rsc_attr_set == NULL) { + local_attr_set = crm_strdup_printf("%s-%s", lookup_id, + attr_set_type); + rsc_attr_set = local_attr_set; + } + if (rsc_attr_id == NULL) { + found_attr_id = crm_strdup_printf("%s-%s", + rsc_attr_set, attr_name); + rsc_attr_id = found_attr_id; + } + + xml_top = create_xml_node(NULL, crm_element_name(rsc->xml)); + crm_xml_add(xml_top, XML_ATTR_ID, lookup_id); + + xml_obj = create_xml_node(xml_top, attr_set_type); + crm_xml_add(xml_obj, XML_ATTR_ID, rsc_attr_set); + break; + + default: + free(lookup_id); + free(found_attr_id); + g_list_free(resources); + return rc; + } + + xml_obj = crm_create_nvpair_xml(xml_obj, rsc_attr_id, attr_name, + attr_value); + if (xml_top == NULL) { + xml_top = xml_obj; + } + + crm_log_xml_debug(xml_top, "Update"); + + rc = cib->cmds->modify(cib, XML_CIB_TAG_RESOURCES, xml_top, + cib_options); + rc = pcmk_legacy2rc(rc); + if (rc == pcmk_rc_ok) { + out->info(out, "Set '%s' option: id=%s%s%s%s%s value=%s", + lookup_id, found_attr_id, + ((rsc_attr_set == NULL)? "" : " set="), + pcmk__s(rsc_attr_set, ""), + ((attr_name == NULL)? "" : " name="), + pcmk__s(attr_name, ""), attr_value); + } + + free_xml(xml_top); + + free(lookup_id); + free(found_attr_id); + free(local_attr_set); + + if (recursive + && pcmk__str_eq(attr_set_type, XML_TAG_META_SETS, + pcmk__str_casei)) { + GList *lpc = NULL; + static bool need_init = true; + + if (need_init) { + need_init = false; + pcmk__unpack_constraints(rsc->cluster); + pe__clear_resource_flags_on_all(rsc->cluster, + pe_rsc_detect_loop); + } + + /* We want to set the attribute only on resources explicitly + * colocated with this one, so we use rsc->rsc_cons_lhs directly + * rather than the with_this_colocations() method. + */ + pe__set_resource_flags(rsc, pe_rsc_detect_loop); + for (lpc = rsc->rsc_cons_lhs; lpc != NULL; lpc = lpc->next) { + pcmk__colocation_t *cons = (pcmk__colocation_t *) lpc->data; + + crm_debug("Checking %s %d", cons->id, cons->score); + if (!pcmk_is_set(cons->dependent->flags, pe_rsc_detect_loop) + && (cons->score > 0)) { + crm_debug("Setting %s=%s for dependent resource %s", + attr_name, attr_value, cons->dependent->id); + cli_resource_update_attribute(cons->dependent, + cons->dependent->id, NULL, + attr_set_type, NULL, + attr_name, attr_value, + recursive, cib, cib_options, + force); + } + } + } + } + g_list_free(resources); + return rc; +} + +// \return Standard Pacemaker return code +int +cli_resource_delete_attribute(pe_resource_t *rsc, const char *requested_name, + const char *attr_set, const char *attr_set_type, + const char *attr_id, const char *attr_name, + cib_t *cib, int cib_options, gboolean force) +{ + pcmk__output_t *out = rsc->cluster->priv; + int rc = pcmk_rc_ok; + GList/**/ *resources = NULL; + + if ((attr_id == NULL) && !force) { + find_resource_attr(out, cib, XML_ATTR_ID, + pe__const_top_resource(rsc, false)->id, NULL, + NULL, NULL, attr_name, NULL); + } + + if (pcmk__str_eq(attr_set_type, XML_TAG_META_SETS, pcmk__str_casei)) { + resources = find_matching_attr_resources(out, rsc, requested_name, + attr_set, attr_set_type, + attr_id, attr_name, cib, + "delete", force); + + } else if (pcmk__str_eq(attr_set_type, ATTR_SET_ELEMENT, pcmk__str_none)) { + xml_remove_prop(rsc->xml, attr_name); + CRM_ASSERT(cib != NULL); + rc = cib->cmds->replace(cib, XML_CIB_TAG_RESOURCES, rsc->xml, + cib_options); + rc = pcmk_legacy2rc(rc); + if (rc == pcmk_rc_ok) { + out->info(out, "Deleted attribute: %s", attr_name); + } + return rc; + + } else { + resources = g_list_append(resources, rsc); + } + + for (GList *iter = resources; iter != NULL; iter = iter->next) { + char *lookup_id = NULL; + xmlNode *xml_obj = NULL; + char *found_attr_id = NULL; + const char *rsc_attr_id = attr_id; + + rsc = (pe_resource_t *) iter->data; + + lookup_id = clone_strip(rsc->id); + rc = find_resource_attr(out, cib, XML_ATTR_ID, lookup_id, attr_set_type, + attr_set, attr_id, attr_name, &found_attr_id); + switch (rc) { + case pcmk_rc_ok: + break; + + case ENXIO: + free(lookup_id); + rc = pcmk_rc_ok; + continue; + + default: + free(lookup_id); + g_list_free(resources); + return rc; + } + + if (rsc_attr_id == NULL) { + rsc_attr_id = found_attr_id; + } + + xml_obj = crm_create_nvpair_xml(NULL, rsc_attr_id, attr_name, NULL); + crm_log_xml_debug(xml_obj, "Delete"); + + CRM_ASSERT(cib); + rc = cib->cmds->remove(cib, XML_CIB_TAG_RESOURCES, xml_obj, + cib_options); + rc = pcmk_legacy2rc(rc); + + if (rc == pcmk_rc_ok) { + out->info(out, "Deleted '%s' option: id=%s%s%s%s%s", + lookup_id, found_attr_id, + ((attr_set == NULL)? "" : " set="), + pcmk__s(attr_set, ""), + ((attr_name == NULL)? "" : " name="), + pcmk__s(attr_name, "")); + } + + free(lookup_id); + free_xml(xml_obj); + free(found_attr_id); + } + g_list_free(resources); + return rc; +} + +// \return Standard Pacemaker return code +static int +send_lrm_rsc_op(pcmk_ipc_api_t *controld_api, bool do_fail_resource, + const char *host_uname, const char *rsc_id, pe_working_set_t *data_set) +{ + pcmk__output_t *out = data_set->priv; + const char *router_node = host_uname; + const char *rsc_api_id = NULL; + const char *rsc_long_id = NULL; + const char *rsc_class = NULL; + const char *rsc_provider = NULL; + const char *rsc_type = NULL; + bool cib_only = false; + pe_resource_t *rsc = pe_find_resource(data_set->resources, rsc_id); + + if (rsc == NULL) { + out->err(out, "Resource %s not found", rsc_id); + return ENXIO; + + } else if (rsc->variant != pe_native) { + out->err(out, "We can only process primitive resources, not %s", rsc_id); + return EINVAL; + } + + rsc_class = crm_element_value(rsc->xml, XML_AGENT_ATTR_CLASS); + rsc_provider = crm_element_value(rsc->xml, XML_AGENT_ATTR_PROVIDER), + rsc_type = crm_element_value(rsc->xml, XML_ATTR_TYPE); + if ((rsc_class == NULL) || (rsc_type == NULL)) { + out->err(out, "Resource %s does not have a class and type", rsc_id); + return EINVAL; + } + + { + pe_node_t *node = pe_find_node(data_set->nodes, host_uname); + + if (node == NULL) { + out->err(out, "Node %s not found", host_uname); + return pcmk_rc_node_unknown; + } + + if (!(node->details->online)) { + if (do_fail_resource) { + out->err(out, "Node %s is not online", host_uname); + return ENOTCONN; + } else { + cib_only = true; + } + } + if (!cib_only && pe__is_guest_or_remote_node(node)) { + node = pe__current_node(node->details->remote_rsc); + if (node == NULL) { + out->err(out, "No cluster connection to Pacemaker Remote node %s detected", + host_uname); + return ENOTCONN; + } + router_node = node->details->uname; + } + } + + if (rsc->clone_name) { + rsc_api_id = rsc->clone_name; + rsc_long_id = rsc->id; + } else { + rsc_api_id = rsc->id; + } + if (do_fail_resource) { + return pcmk_controld_api_fail(controld_api, host_uname, router_node, + rsc_api_id, rsc_long_id, + rsc_class, rsc_provider, rsc_type); + } else { + return pcmk_controld_api_refresh(controld_api, host_uname, router_node, + rsc_api_id, rsc_long_id, rsc_class, + rsc_provider, rsc_type, cib_only); + } +} + +/*! + * \internal + * \brief Get resource name as used in failure-related node attributes + * + * \param[in] rsc Resource to check + * + * \return Newly allocated string containing resource's fail name + * \note The caller is responsible for freeing the result. + */ +static inline char * +rsc_fail_name(const pe_resource_t *rsc) +{ + const char *name = (rsc->clone_name? rsc->clone_name : rsc->id); + + return pcmk_is_set(rsc->flags, pe_rsc_unique)? strdup(name) : clone_strip(name); +} + +// \return Standard Pacemaker return code +static int +clear_rsc_history(pcmk_ipc_api_t *controld_api, const char *host_uname, + const char *rsc_id, pe_working_set_t *data_set) +{ + int rc = pcmk_rc_ok; + + /* Erase the resource's entire LRM history in the CIB, even if we're only + * clearing a single operation's fail count. If we erased only entries for a + * single operation, we might wind up with a wrong idea of the current + * resource state, and we might not re-probe the resource. + */ + rc = send_lrm_rsc_op(controld_api, false, host_uname, rsc_id, data_set); + if (rc != pcmk_rc_ok) { + return rc; + } + + crm_trace("Processing %d mainloop inputs", + pcmk_controld_api_replies_expected(controld_api)); + while (g_main_context_iteration(NULL, FALSE)) { + crm_trace("Processed mainloop input, %d still remaining", + pcmk_controld_api_replies_expected(controld_api)); + } + return rc; +} + +// \return Standard Pacemaker return code +static int +clear_rsc_failures(pcmk__output_t *out, pcmk_ipc_api_t *controld_api, + const char *node_name, const char *rsc_id, const char *operation, + const char *interval_spec, pe_working_set_t *data_set) +{ + int rc = pcmk_rc_ok; + const char *failed_value = NULL; + const char *failed_id = NULL; + const char *interval_ms_s = NULL; + GHashTable *rscs = NULL; + GHashTableIter iter; + + /* Create a hash table to use as a set of resources to clean. This lets us + * clean each resource only once (per node) regardless of how many failed + * operations it has. + */ + rscs = pcmk__strkey_table(NULL, NULL); + + // Normalize interval to milliseconds for comparison to history entry + if (operation) { + interval_ms_s = crm_strdup_printf("%u", + crm_parse_interval_spec(interval_spec)); + } + + for (xmlNode *xml_op = pcmk__xml_first_child(data_set->failed); + xml_op != NULL; + xml_op = pcmk__xml_next(xml_op)) { + + failed_id = crm_element_value(xml_op, XML_LRM_ATTR_RSCID); + if (failed_id == NULL) { + // Malformed history entry, should never happen + continue; + } + + // No resource specified means all resources match + if (rsc_id) { + pe_resource_t *fail_rsc = pe_find_resource_with_flags(data_set->resources, + failed_id, + pe_find_renamed|pe_find_anon); + + if (!fail_rsc || !pcmk__str_eq(rsc_id, fail_rsc->id, pcmk__str_casei)) { + continue; + } + } + + // Host name should always have been provided by this point + failed_value = crm_element_value(xml_op, XML_ATTR_UNAME); + if (!pcmk__str_eq(node_name, failed_value, pcmk__str_casei)) { + continue; + } + + // No operation specified means all operations match + if (operation) { + failed_value = crm_element_value(xml_op, XML_LRM_ATTR_TASK); + if (!pcmk__str_eq(operation, failed_value, pcmk__str_casei)) { + continue; + } + + // Interval (if operation was specified) defaults to 0 (not all) + failed_value = crm_element_value(xml_op, XML_LRM_ATTR_INTERVAL_MS); + if (!pcmk__str_eq(interval_ms_s, failed_value, pcmk__str_casei)) { + continue; + } + } + + g_hash_table_add(rscs, (gpointer) failed_id); + } + + g_hash_table_iter_init(&iter, rscs); + while (g_hash_table_iter_next(&iter, (gpointer *) &failed_id, NULL)) { + crm_debug("Erasing failures of %s on %s", failed_id, node_name); + rc = clear_rsc_history(controld_api, node_name, failed_id, data_set); + if (rc != pcmk_rc_ok) { + return rc; + } + } + g_hash_table_destroy(rscs); + return rc; +} + +// \return Standard Pacemaker return code +static int +clear_rsc_fail_attrs(const pe_resource_t *rsc, const char *operation, + const char *interval_spec, const pe_node_t *node) +{ + int rc = pcmk_rc_ok; + int attr_options = pcmk__node_attr_none; + char *rsc_name = rsc_fail_name(rsc); + + if (pe__is_guest_or_remote_node(node)) { + attr_options |= pcmk__node_attr_remote; + } + + rc = pcmk__attrd_api_clear_failures(NULL, node->details->uname, rsc_name, + operation, interval_spec, NULL, + attr_options); + free(rsc_name); + return rc; +} + +// \return Standard Pacemaker return code +int +cli_resource_delete(pcmk_ipc_api_t *controld_api, const char *host_uname, + const pe_resource_t *rsc, const char *operation, + const char *interval_spec, bool just_failures, + pe_working_set_t *data_set, gboolean force) +{ + pcmk__output_t *out = data_set->priv; + int rc = pcmk_rc_ok; + pe_node_t *node = NULL; + + if (rsc == NULL) { + return ENXIO; + + } else if (rsc->children) { + + for (const GList *lpc = rsc->children; lpc != NULL; lpc = lpc->next) { + const pe_resource_t *child = (const pe_resource_t *) lpc->data; + + rc = cli_resource_delete(controld_api, host_uname, child, operation, + interval_spec, just_failures, data_set, force); + if (rc != pcmk_rc_ok) { + return rc; + } + } + return pcmk_rc_ok; + + } else if (host_uname == NULL) { + GList *lpc = NULL; + GList *nodes = g_hash_table_get_values(rsc->known_on); + + if(nodes == NULL && force) { + nodes = pcmk__copy_node_list(data_set->nodes, false); + + } else if(nodes == NULL && rsc->exclusive_discover) { + GHashTableIter iter; + pe_node_t *node = NULL; + + g_hash_table_iter_init(&iter, rsc->allowed_nodes); + while (g_hash_table_iter_next(&iter, NULL, (void**)&node)) { + if(node->weight >= 0) { + nodes = g_list_prepend(nodes, node); + } + } + + } else if(nodes == NULL) { + nodes = g_hash_table_get_values(rsc->allowed_nodes); + } + + for (lpc = nodes; lpc != NULL; lpc = lpc->next) { + node = (pe_node_t *) lpc->data; + + if (node->details->online) { + rc = cli_resource_delete(controld_api, node->details->uname, rsc, + operation, interval_spec, just_failures, + data_set, force); + } + if (rc != pcmk_rc_ok) { + g_list_free(nodes); + return rc; + } + } + + g_list_free(nodes); + return pcmk_rc_ok; + } + + node = pe_find_node(data_set->nodes, host_uname); + + if (node == NULL) { + out->err(out, "Unable to clean up %s because node %s not found", + rsc->id, host_uname); + return ENODEV; + } + + if (!node->details->rsc_discovery_enabled) { + out->err(out, "Unable to clean up %s because resource discovery disabled on %s", + rsc->id, host_uname); + return EOPNOTSUPP; + } + + if (controld_api == NULL) { + out->err(out, "Dry run: skipping clean-up of %s on %s due to CIB_file", + rsc->id, host_uname); + return pcmk_rc_ok; + } + + rc = clear_rsc_fail_attrs(rsc, operation, interval_spec, node); + if (rc != pcmk_rc_ok) { + out->err(out, "Unable to clean up %s failures on %s: %s", + rsc->id, host_uname, pcmk_rc_str(rc)); + return rc; + } + + if (just_failures) { + rc = clear_rsc_failures(out, controld_api, host_uname, rsc->id, operation, + interval_spec, data_set); + } else { + rc = clear_rsc_history(controld_api, host_uname, rsc->id, data_set); + } + if (rc != pcmk_rc_ok) { + out->err(out, "Cleaned %s failures on %s, but unable to clean history: %s", + rsc->id, host_uname, pcmk_strerror(rc)); + } else { + out->info(out, "Cleaned up %s on %s", rsc->id, host_uname); + } + return rc; +} + +// \return Standard Pacemaker return code +int +cli_cleanup_all(pcmk_ipc_api_t *controld_api, const char *node_name, + const char *operation, const char *interval_spec, + pe_working_set_t *data_set) +{ + pcmk__output_t *out = data_set->priv; + int rc = pcmk_rc_ok; + int attr_options = pcmk__node_attr_none; + const char *display_name = node_name? node_name : "all nodes"; + + if (controld_api == NULL) { + out->info(out, "Dry run: skipping clean-up of %s due to CIB_file", + display_name); + return rc; + } + + if (node_name) { + pe_node_t *node = pe_find_node(data_set->nodes, node_name); + + if (node == NULL) { + out->err(out, "Unknown node: %s", node_name); + return ENXIO; + } + if (pe__is_guest_or_remote_node(node)) { + attr_options |= pcmk__node_attr_remote; + } + } + + rc = pcmk__attrd_api_clear_failures(NULL, node_name, NULL, operation, + interval_spec, NULL, attr_options); + if (rc != pcmk_rc_ok) { + out->err(out, "Unable to clean up all failures on %s: %s", + display_name, pcmk_rc_str(rc)); + return rc; + } + + if (node_name) { + rc = clear_rsc_failures(out, controld_api, node_name, NULL, + operation, interval_spec, data_set); + if (rc != pcmk_rc_ok) { + out->err(out, "Cleaned all resource failures on %s, but unable to clean history: %s", + node_name, pcmk_strerror(rc)); + return rc; + } + } else { + for (GList *iter = data_set->nodes; iter; iter = iter->next) { + pe_node_t *node = (pe_node_t *) iter->data; + + rc = clear_rsc_failures(out, controld_api, node->details->uname, NULL, + operation, interval_spec, data_set); + if (rc != pcmk_rc_ok) { + out->err(out, "Cleaned all resource failures on all nodes, but unable to clean history: %s", + pcmk_strerror(rc)); + return rc; + } + } + } + + out->info(out, "Cleaned up all resources on %s", display_name); + return rc; +} + +static void +check_role(resource_checks_t *checks) +{ + const char *role_s = g_hash_table_lookup(checks->rsc->meta, + XML_RSC_ATTR_TARGET_ROLE); + + if (role_s == NULL) { + return; + } + switch (text2role(role_s)) { + case RSC_ROLE_STOPPED: + checks->flags |= rsc_remain_stopped; + break; + + case RSC_ROLE_UNPROMOTED: + if (pcmk_is_set(pe__const_top_resource(checks->rsc, false)->flags, + pe_rsc_promotable)) { + checks->flags |= rsc_unpromotable; + } + break; + + default: + break; + } +} + +static void +check_managed(resource_checks_t *checks) +{ + const char *managed_s = g_hash_table_lookup(checks->rsc->meta, + XML_RSC_ATTR_MANAGED); + + if ((managed_s != NULL) && !crm_is_true(managed_s)) { + checks->flags |= rsc_unmanaged; + } +} + +static void +check_locked(resource_checks_t *checks) +{ + if (checks->rsc->lock_node != NULL) { + checks->flags |= rsc_locked; + checks->lock_node = checks->rsc->lock_node->details->uname; + } +} + +static bool +node_is_unhealthy(pe_node_t *node) +{ + switch (pe__health_strategy(node->details->data_set)) { + case pcmk__health_strategy_none: + break; + + case pcmk__health_strategy_no_red: + if (pe__node_health(node) < 0) { + return true; + } + break; + + case pcmk__health_strategy_only_green: + if (pe__node_health(node) <= 0) { + return true; + } + break; + + case pcmk__health_strategy_progressive: + case pcmk__health_strategy_custom: + /* @TODO These are finite scores, possibly with rules, and possibly + * combining with other scores, so attributing these as a cause is + * nontrivial. + */ + break; + } + return false; +} + +static void +check_node_health(resource_checks_t *checks, pe_node_t *node) +{ + if (node == NULL) { + GHashTableIter iter; + bool allowed = false; + bool all_nodes_unhealthy = true; + + g_hash_table_iter_init(&iter, checks->rsc->allowed_nodes); + while (g_hash_table_iter_next(&iter, NULL, (void **) &node)) { + allowed = true; + if (!node_is_unhealthy(node)) { + all_nodes_unhealthy = false; + break; + } + } + if (allowed && all_nodes_unhealthy) { + checks->flags |= rsc_node_health; + } + + } else if (node_is_unhealthy(node)) { + checks->flags |= rsc_node_health; + } +} + +int +cli_resource_check(pcmk__output_t *out, pe_resource_t *rsc, pe_node_t *node) +{ + resource_checks_t checks = { .rsc = rsc }; + + check_role(&checks); + check_managed(&checks); + check_locked(&checks); + check_node_health(&checks, node); + + return out->message(out, "resource-check-list", &checks); +} + +// \return Standard Pacemaker return code +int +cli_resource_fail(pcmk_ipc_api_t *controld_api, const char *host_uname, + const char *rsc_id, pe_working_set_t *data_set) +{ + crm_notice("Failing %s on %s", rsc_id, host_uname); + return send_lrm_rsc_op(controld_api, true, host_uname, rsc_id, data_set); +} + +static GHashTable * +generate_resource_params(pe_resource_t *rsc, pe_node_t *node, + pe_working_set_t *data_set) +{ + GHashTable *params = NULL; + GHashTable *meta = NULL; + GHashTable *combined = NULL; + GHashTableIter iter; + char *key = NULL; + char *value = NULL; + + combined = pcmk__strkey_table(free, free); + + params = pe_rsc_params(rsc, node, data_set); + if (params != NULL) { + g_hash_table_iter_init(&iter, params); + while (g_hash_table_iter_next(&iter, (gpointer *) & key, (gpointer *) & value)) { + g_hash_table_insert(combined, strdup(key), strdup(value)); + } + } + + meta = pcmk__strkey_table(free, free); + get_meta_attributes(meta, rsc, node, data_set); + if (meta != NULL) { + g_hash_table_iter_init(&iter, meta); + while (g_hash_table_iter_next(&iter, (gpointer *) & key, (gpointer *) & value)) { + char *crm_name = crm_meta_name(key); + + g_hash_table_insert(combined, crm_name, strdup(value)); + } + g_hash_table_destroy(meta); + } + + return combined; +} + +bool resource_is_running_on(pe_resource_t *rsc, const char *host) +{ + bool found = true; + GList *hIter = NULL; + GList *hosts = NULL; + + if (rsc == NULL) { + return false; + } + + rsc->fns->location(rsc, &hosts, TRUE); + for (hIter = hosts; host != NULL && hIter != NULL; hIter = hIter->next) { + pe_node_t *node = (pe_node_t *) hIter->data; + + if (pcmk__strcase_any_of(host, node->details->uname, node->details->id, NULL)) { + crm_trace("Resource %s is running on %s\n", rsc->id, host); + goto done; + } + } + + if (host != NULL) { + crm_trace("Resource %s is not running on: %s\n", rsc->id, host); + found = false; + + } else if(host == NULL && hosts == NULL) { + crm_trace("Resource %s is not running\n", rsc->id); + found = false; + } + + done: + g_list_free(hosts); + return found; +} + +/*! + * \internal + * \brief Create a list of all resources active on host from a given list + * + * \param[in] host Name of host to check whether resources are active + * \param[in] rsc_list List of resources to check + * + * \return New list of resources from list that are active on host + */ +static GList * +get_active_resources(const char *host, GList *rsc_list) +{ + GList *rIter = NULL; + GList *active = NULL; + + for (rIter = rsc_list; rIter != NULL; rIter = rIter->next) { + pe_resource_t *rsc = (pe_resource_t *) rIter->data; + + /* Expand groups to their members, because if we're restarting a member + * other than the first, we can't otherwise tell which resources are + * stopping and starting. + */ + if (rsc->variant == pe_group) { + active = g_list_concat(active, + get_active_resources(host, rsc->children)); + } else if (resource_is_running_on(rsc, host)) { + active = g_list_append(active, strdup(rsc->id)); + } + } + return active; +} + +static void dump_list(GList *items, const char *tag) +{ + int lpc = 0; + GList *item = NULL; + + for (item = items; item != NULL; item = item->next) { + crm_trace("%s[%d]: %s", tag, lpc, (char*)item->data); + lpc++; + } +} + +static void display_list(pcmk__output_t *out, GList *items, const char *tag) +{ + GList *item = NULL; + + for (item = items; item != NULL; item = item->next) { + out->info(out, "%s%s", tag, (const char *)item->data); + } +} + +/*! + * \internal + * \brief Upgrade XML to latest schema version and use it as working set input + * + * This also updates the working set timestamp to the current time. + * + * \param[in,out] data_set Working set instance to update + * \param[in,out] xml XML to use as input + * + * \return Standard Pacemaker return code + * \note On success, caller is responsible for freeing memory allocated for + * data_set->now. + * \todo This follows the example of other callers of cli_config_update() + * and returns ENOKEY ("Required key not available") if that fails, + * but perhaps pcmk_rc_schema_validation would be better in that case. + */ +int +update_working_set_xml(pe_working_set_t *data_set, xmlNode **xml) +{ + if (cli_config_update(xml, NULL, FALSE) == FALSE) { + return ENOKEY; + } + data_set->input = *xml; + data_set->now = crm_time_new(NULL); + return pcmk_rc_ok; +} + +/*! + * \internal + * \brief Update a working set's XML input based on a CIB query + * + * \param[in] data_set Data set instance to initialize + * \param[in] cib Connection to the CIB manager + * + * \return Standard Pacemaker return code + * \note On success, caller is responsible for freeing memory allocated for + * data_set->input and data_set->now. + */ +static int +update_working_set_from_cib(pcmk__output_t *out, pe_working_set_t * data_set, + cib_t *cib) +{ + xmlNode *cib_xml_copy = NULL; + int rc = pcmk_rc_ok; + + rc = cib->cmds->query(cib, NULL, &cib_xml_copy, cib_scope_local | cib_sync_call); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + out->err(out, "Could not obtain the current CIB: %s (%d)", pcmk_strerror(rc), rc); + return rc; + } + rc = update_working_set_xml(data_set, &cib_xml_copy); + if (rc != pcmk_rc_ok) { + out->err(out, "Could not upgrade the current CIB XML"); + free_xml(cib_xml_copy); + return rc; + } + + return rc; +} + +// \return Standard Pacemaker return code +static int +update_dataset(cib_t *cib, pe_working_set_t * data_set, bool simulate) +{ + char *pid = NULL; + char *shadow_file = NULL; + cib_t *shadow_cib = NULL; + int rc = pcmk_rc_ok; + + pcmk__output_t *out = data_set->priv; + + pe_reset_working_set(data_set); + pe__set_working_set_flags(data_set, pe_flag_no_counts|pe_flag_no_compat); + rc = update_working_set_from_cib(out, data_set, cib); + if (rc != pcmk_rc_ok) { + return rc; + } + + if(simulate) { + bool prev_quiet = false; + + pid = pcmk__getpid_s(); + shadow_cib = cib_shadow_new(pid); + shadow_file = get_shadow_file(pid); + + if (shadow_cib == NULL) { + out->err(out, "Could not create shadow cib: '%s'", pid); + rc = ENXIO; + goto done; + } + + rc = write_xml_file(data_set->input, shadow_file, FALSE); + + if (rc < 0) { + out->err(out, "Could not populate shadow cib: %s (%d)", pcmk_strerror(rc), rc); + goto done; + } + + rc = shadow_cib->cmds->signon(shadow_cib, crm_system_name, cib_command); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + out->err(out, "Could not connect to shadow cib: %s (%d)", pcmk_strerror(rc), rc); + goto done; + } + + pcmk__schedule_actions(data_set->input, + pe_flag_no_counts|pe_flag_no_compat, data_set); + + prev_quiet = out->is_quiet(out); + out->quiet = true; + pcmk__simulate_transition(data_set, shadow_cib, NULL); + out->quiet = prev_quiet; + + rc = update_dataset(shadow_cib, data_set, false); + + } else { + cluster_status(data_set); + } + + done: + /* Do not free data_set->input here, we need rsc->xml to be valid later on */ + cib_delete(shadow_cib); + free(pid); + + if(shadow_file) { + unlink(shadow_file); + free(shadow_file); + } + + return rc; +} + +static int +max_delay_for_resource(pe_working_set_t * data_set, pe_resource_t *rsc) +{ + int delay = 0; + int max_delay = 0; + + if(rsc && rsc->children) { + GList *iter = NULL; + + for(iter = rsc->children; iter; iter = iter->next) { + pe_resource_t *child = (pe_resource_t *)iter->data; + + delay = max_delay_for_resource(data_set, child); + if(delay > max_delay) { + double seconds = delay / 1000.0; + crm_trace("Calculated new delay of %.1fs due to %s", seconds, child->id); + max_delay = delay; + } + } + + } else if(rsc) { + char *key = crm_strdup_printf("%s_%s_0", rsc->id, RSC_STOP); + pe_action_t *stop = custom_action(rsc, key, RSC_STOP, NULL, TRUE, FALSE, data_set); + const char *value = g_hash_table_lookup(stop->meta, XML_ATTR_TIMEOUT); + long long result_ll; + + if ((pcmk__scan_ll(value, &result_ll, -1LL) == pcmk_rc_ok) + && (result_ll >= 0) && (result_ll <= INT_MAX)) { + max_delay = (int) result_ll; + } else { + max_delay = -1; + } + pe_free_action(stop); + } + + return max_delay; +} + +static int +max_delay_in(pe_working_set_t * data_set, GList *resources) +{ + int max_delay = 0; + GList *item = NULL; + + for (item = resources; item != NULL; item = item->next) { + int delay = 0; + pe_resource_t *rsc = pe_find_resource(data_set->resources, (const char *)item->data); + + delay = max_delay_for_resource(data_set, rsc); + + if(delay > max_delay) { + double seconds = delay / 1000.0; + crm_trace("Calculated new delay of %.1fs due to %s", seconds, rsc->id); + max_delay = delay; + } + } + + return 5 + (max_delay / 1000); +} + +#define waiting_for_starts(d, r, h) ((d != NULL) || \ + (!resource_is_running_on((r), (h)))) + +/*! + * \internal + * \brief Restart a resource (on a particular host if requested). + * + * \param[in,out] out Output object + * \param[in,out] rsc The resource to restart + * \param[in] node Node to restart resource on (NULL for all) + * \param[in] move_lifetime If not NULL, how long constraint should + * remain in effect (as ISO 8601 string) + * \param[in] timeout_ms Consider failed if actions do not complete + * in this time (specified in milliseconds, + * but a two-second granularity is actually + * used; if 0, it will be calculated based on + * the resource timeout) + * \param[in,out] cib Connection to the CIB manager + * \param[in] cib_options Group of enum cib_call_options flags to + * use with CIB calls + * \param[in] promoted_role_only If true, limit to promoted instances + * \param[in] force If true, apply only to requested instance + * if part of a collective resource + * + * \return Standard Pacemaker return code (exits on certain failures) + */ +int +cli_resource_restart(pcmk__output_t *out, pe_resource_t *rsc, + const pe_node_t *node, const char *move_lifetime, + int timeout_ms, cib_t *cib, int cib_options, + gboolean promoted_role_only, gboolean force) +{ + int rc = pcmk_rc_ok; + int lpc = 0; + int before = 0; + int step_timeout_s = 0; + int sleep_interval = 2; + int timeout = timeout_ms / 1000; + + bool stop_via_ban = false; + char *rsc_id = NULL; + char *lookup_id = NULL; + char *orig_target_role = NULL; + + GList *list_delta = NULL; + GList *target_active = NULL; + GList *current_active = NULL; + GList *restart_target_active = NULL; + + pe_working_set_t *data_set = NULL; + pe_resource_t *parent = uber_parent(rsc); + + bool running = false; + const char *id = rsc->clone_name ? rsc->clone_name : rsc->id; + const char *host = node ? node->details->uname : NULL; + + /* If the implicit resource or primitive resource of a bundle is given, operate on the + * bundle itself instead. + */ + if (pe_rsc_is_bundled(rsc)) { + rsc = parent->parent; + } + + running = resource_is_running_on(rsc, host); + + if (pe_rsc_is_clone(parent) && !running) { + if (pe_rsc_is_unique_clone(parent)) { + lookup_id = strdup(rsc->id); + } else { + lookup_id = clone_strip(rsc->id); + } + + rsc = parent->fns->find_rsc(parent, lookup_id, node, pe_find_any|pe_find_current); + free(lookup_id); + running = resource_is_running_on(rsc, host); + } + + if (!running) { + if (host) { + out->err(out, "%s is not running on %s and so cannot be restarted", id, host); + } else { + out->err(out, "%s is not running anywhere and so cannot be restarted", id); + } + return ENXIO; + } + + rsc_id = strdup(rsc->id); + + if (pe_rsc_is_unique_clone(parent)) { + lookup_id = strdup(rsc->id); + } else { + lookup_id = clone_strip(rsc->id); + } + + if (host) { + if (pe_rsc_is_clone(rsc) || pe_bundle_replicas(rsc)) { + stop_via_ban = true; + } else if (pe_rsc_is_clone(parent)) { + stop_via_ban = true; + free(lookup_id); + lookup_id = strdup(parent->id); + } + } + + /* + grab full cib + determine originally active resources + disable or ban + poll cib and watch for affected resources to get stopped + without --timeout, calculate the stop timeout for each step and wait for that + if we hit --timeout or the service timeout, re-enable or un-ban, report failure and indicate which resources we couldn't take down + if everything stopped, re-enable or un-ban + poll cib and watch for affected resources to get started + without --timeout, calculate the start timeout for each step and wait for that + if we hit --timeout or the service timeout, report (different) failure and indicate which resources we couldn't bring back up + report success + + Optimizations: + - use constraints to determine ordered list of affected resources + - Allow a --no-deps option (aka. --force-restart) + */ + + data_set = pe_new_working_set(); + if (data_set == NULL) { + crm_perror(LOG_ERR, "Could not allocate working set"); + rc = ENOMEM; + goto done; + } + + data_set->priv = out; + rc = update_dataset(cib, data_set, false); + + if(rc != pcmk_rc_ok) { + out->err(out, "Could not get new resource list: %s (%d)", pcmk_strerror(rc), rc); + goto done; + } + + restart_target_active = get_active_resources(host, data_set->resources); + current_active = get_active_resources(host, data_set->resources); + + dump_list(current_active, "Origin"); + + if (stop_via_ban) { + /* Stop the clone or bundle instance by banning it from the host */ + out->quiet = true; + rc = cli_resource_ban(out, lookup_id, host, move_lifetime, NULL, cib, + cib_options, promoted_role_only); + + } else { + /* Stop the resource by setting target-role to Stopped. + * Remember any existing target-role so we can restore it later + * (though it only makes any difference if it's Unpromoted). + */ + + find_resource_attr(out, cib, XML_NVPAIR_ATTR_VALUE, lookup_id, NULL, NULL, + NULL, XML_RSC_ATTR_TARGET_ROLE, &orig_target_role); + rc = cli_resource_update_attribute(rsc, rsc_id, NULL, XML_TAG_META_SETS, + NULL, XML_RSC_ATTR_TARGET_ROLE, + RSC_STOPPED, FALSE, cib, cib_options, + force); + } + if(rc != pcmk_rc_ok) { + out->err(out, "Could not set target-role for %s: %s (%d)", rsc_id, pcmk_strerror(rc), rc); + if (current_active != NULL) { + g_list_free_full(current_active, free); + current_active = NULL; + } + if (restart_target_active != NULL) { + g_list_free_full(restart_target_active, free); + restart_target_active = NULL; + } + goto done; + } + + rc = update_dataset(cib, data_set, true); + if(rc != pcmk_rc_ok) { + out->err(out, "Could not determine which resources would be stopped"); + goto failure; + } + + target_active = get_active_resources(host, data_set->resources); + dump_list(target_active, "Target"); + + list_delta = pcmk__subtract_lists(current_active, target_active, (GCompareFunc) strcmp); + out->info(out, "Waiting for %d resources to stop:", g_list_length(list_delta)); + display_list(out, list_delta, " * "); + + step_timeout_s = timeout / sleep_interval; + while (list_delta != NULL) { + before = g_list_length(list_delta); + if(timeout_ms == 0) { + step_timeout_s = max_delay_in(data_set, list_delta) / sleep_interval; + } + + /* We probably don't need the entire step timeout */ + for(lpc = 0; (lpc < step_timeout_s) && (list_delta != NULL); lpc++) { + sleep(sleep_interval); + if(timeout) { + timeout -= sleep_interval; + crm_trace("%ds remaining", timeout); + } + rc = update_dataset(cib, data_set, FALSE); + if(rc != pcmk_rc_ok) { + out->err(out, "Could not determine which resources were stopped"); + goto failure; + } + + if (current_active != NULL) { + g_list_free_full(current_active, free); + current_active = NULL; + } + current_active = get_active_resources(host, data_set->resources); + g_list_free(list_delta); + list_delta = NULL; + list_delta = pcmk__subtract_lists(current_active, target_active, (GCompareFunc) strcmp); + dump_list(current_active, "Current"); + dump_list(list_delta, "Delta"); + } + + crm_trace("%d (was %d) resources remaining", g_list_length(list_delta), before); + if(before == g_list_length(list_delta)) { + /* aborted during stop phase, print the contents of list_delta */ + out->err(out, "Could not complete shutdown of %s, %d resources remaining", rsc_id, g_list_length(list_delta)); + display_list(out, list_delta, " * "); + rc = ETIME; + goto failure; + } + + } + + if (stop_via_ban) { + rc = cli_resource_clear(lookup_id, host, NULL, cib, cib_options, true, force); + + } else if (orig_target_role) { + rc = cli_resource_update_attribute(rsc, rsc_id, NULL, XML_TAG_META_SETS, + NULL, XML_RSC_ATTR_TARGET_ROLE, + orig_target_role, FALSE, cib, + cib_options, force); + free(orig_target_role); + orig_target_role = NULL; + } else { + rc = cli_resource_delete_attribute(rsc, rsc_id, NULL, XML_TAG_META_SETS, + NULL, XML_RSC_ATTR_TARGET_ROLE, cib, + cib_options, force); + } + + if(rc != pcmk_rc_ok) { + out->err(out, "Could not unset target-role for %s: %s (%d)", rsc_id, pcmk_strerror(rc), rc); + goto done; + } + + if (target_active != NULL) { + g_list_free_full(target_active, free); + target_active = NULL; + } + target_active = restart_target_active; + list_delta = pcmk__subtract_lists(target_active, current_active, (GCompareFunc) strcmp); + out->info(out, "Waiting for %d resources to start again:", g_list_length(list_delta)); + display_list(out, list_delta, " * "); + + step_timeout_s = timeout / sleep_interval; + while (waiting_for_starts(list_delta, rsc, host)) { + before = g_list_length(list_delta); + if(timeout_ms == 0) { + step_timeout_s = max_delay_in(data_set, list_delta) / sleep_interval; + } + + /* We probably don't need the entire step timeout */ + for (lpc = 0; (lpc < step_timeout_s) && waiting_for_starts(list_delta, rsc, host); lpc++) { + + sleep(sleep_interval); + if(timeout) { + timeout -= sleep_interval; + crm_trace("%ds remaining", timeout); + } + + rc = update_dataset(cib, data_set, false); + if(rc != pcmk_rc_ok) { + out->err(out, "Could not determine which resources were started"); + goto failure; + } + + if (current_active != NULL) { + g_list_free_full(current_active, free); + current_active = NULL; + } + + /* It's OK if dependent resources moved to a different node, + * so we check active resources on all nodes. + */ + current_active = get_active_resources(NULL, data_set->resources); + g_list_free(list_delta); + list_delta = pcmk__subtract_lists(target_active, current_active, (GCompareFunc) strcmp); + dump_list(current_active, "Current"); + dump_list(list_delta, "Delta"); + } + + if(before == g_list_length(list_delta)) { + /* aborted during start phase, print the contents of list_delta */ + out->err(out, "Could not complete restart of %s, %d resources remaining", rsc_id, g_list_length(list_delta)); + display_list(out, list_delta, " * "); + rc = ETIME; + goto failure; + } + + } + + rc = pcmk_rc_ok; + goto done; + + failure: + if (stop_via_ban) { + cli_resource_clear(lookup_id, host, NULL, cib, cib_options, true, force); + } else if (orig_target_role) { + cli_resource_update_attribute(rsc, rsc_id, NULL, XML_TAG_META_SETS, NULL, + XML_RSC_ATTR_TARGET_ROLE, orig_target_role, + FALSE, cib, cib_options, force); + free(orig_target_role); + } else { + cli_resource_delete_attribute(rsc, rsc_id, NULL, XML_TAG_META_SETS, + NULL, XML_RSC_ATTR_TARGET_ROLE, cib, + cib_options, force); + } + +done: + if (list_delta != NULL) { + g_list_free(list_delta); + } + if (current_active != NULL) { + g_list_free_full(current_active, free); + } + if (target_active != NULL && (target_active != restart_target_active)) { + g_list_free_full(target_active, free); + } + if (restart_target_active != NULL) { + g_list_free_full(restart_target_active, free); + } + free(rsc_id); + free(lookup_id); + pe_free_working_set(data_set); + return rc; +} + +static inline bool +action_is_pending(const pe_action_t *action) +{ + if (pcmk_any_flags_set(action->flags, pe_action_optional|pe_action_pseudo) + || !pcmk_is_set(action->flags, pe_action_runnable) + || pcmk__str_eq("notify", action->task, pcmk__str_casei)) { + return false; + } + return true; +} + +/*! + * \internal + * \brief Check whether any actions in a list are pending + * + * \param[in] actions List of actions to check + * + * \return true if any actions in the list are pending, otherwise false + */ +static bool +actions_are_pending(const GList *actions) +{ + for (const GList *action = actions; action != NULL; action = action->next) { + const pe_action_t *a = (const pe_action_t *) action->data; + + if (action_is_pending(a)) { + crm_notice("Waiting for %s (flags=%#.8x)", a->uuid, a->flags); + return true; + } + } + return false; +} + +static void +print_pending_actions(pcmk__output_t *out, GList *actions) +{ + GList *action; + + out->info(out, "Pending actions:"); + for (action = actions; action != NULL; action = action->next) { + pe_action_t *a = (pe_action_t *) action->data; + + if (!action_is_pending(a)) { + continue; + } + + if (a->node) { + out->info(out, "\tAction %d: %s\ton %s", + a->id, a->uuid, pe__node_name(a->node)); + } else { + out->info(out, "\tAction %d: %s", a->id, a->uuid); + } + } +} + +/* For --wait, timeout (in seconds) to use if caller doesn't specify one */ +#define WAIT_DEFAULT_TIMEOUT_S (60 * 60) + +/* For --wait, how long to sleep between cluster state checks */ +#define WAIT_SLEEP_S (2) + +/*! + * \internal + * \brief Wait until all pending cluster actions are complete + * + * This waits until either the CIB's transition graph is idle or a timeout is + * reached. + * + * \param[in,out] out Output object + * \param[in] timeout_ms Consider failed if actions do not complete in + * this time (specified in milliseconds, but + * one-second granularity is actually used; if 0, a + * default will be used) + * \param[in,out] cib Connection to the CIB manager + * + * \return Standard Pacemaker return code + */ +int +wait_till_stable(pcmk__output_t *out, int timeout_ms, cib_t * cib) +{ + pe_working_set_t *data_set = NULL; + int rc = pcmk_rc_ok; + int timeout_s = timeout_ms? ((timeout_ms + 999) / 1000) : WAIT_DEFAULT_TIMEOUT_S; + time_t expire_time = time(NULL) + timeout_s; + time_t time_diff; + bool printed_version_warning = out->is_quiet(out); // i.e. don't print if quiet + + data_set = pe_new_working_set(); + if (data_set == NULL) { + return ENOMEM; + } + + do { + + /* Abort if timeout is reached */ + time_diff = expire_time - time(NULL); + if (time_diff > 0) { + crm_info("Waiting up to %lld seconds for cluster actions to complete", (long long) time_diff); + } else { + print_pending_actions(out, data_set->actions); + pe_free_working_set(data_set); + return ETIME; + } + if (rc == pcmk_rc_ok) { /* this avoids sleep on first loop iteration */ + sleep(WAIT_SLEEP_S); + } + + /* Get latest transition graph */ + pe_reset_working_set(data_set); + rc = update_working_set_from_cib(out, data_set, cib); + if (rc != pcmk_rc_ok) { + pe_free_working_set(data_set); + return rc; + } + pcmk__schedule_actions(data_set->input, + pe_flag_no_counts|pe_flag_no_compat, data_set); + + if (!printed_version_warning) { + /* If the DC has a different version than the local node, the two + * could come to different conclusions about what actions need to be + * done. Warn the user in this case. + * + * @TODO A possible long-term solution would be to reimplement the + * wait as a new controller operation that would be forwarded to the + * DC. However, that would have potential problems of its own. + */ + const char *dc_version = g_hash_table_lookup(data_set->config_hash, + "dc-version"); + + if (!pcmk__str_eq(dc_version, PACEMAKER_VERSION "-" BUILD_VERSION, pcmk__str_casei)) { + out->info(out, "warning: wait option may not work properly in " + "mixed-version cluster"); + printed_version_warning = true; + } + } + + } while (actions_are_pending(data_set->actions)); + + pe_free_working_set(data_set); + return rc; +} + +static const char * +get_action(const char *rsc_action) { + const char *action = NULL; + + if (pcmk__str_eq(rsc_action, "validate", pcmk__str_casei)) { + action = "validate-all"; + + } else if (pcmk__str_eq(rsc_action, "force-check", pcmk__str_casei)) { + action = "monitor"; + + } else if (pcmk__strcase_any_of(rsc_action, "force-start", "force-stop", + "force-demote", "force-promote", NULL)) { + action = rsc_action+6; + } else { + action = rsc_action; + } + + return action; +} + +/*! + * \brief Set up environment variables as expected by resource agents + * + * When the cluster executes resource agents, it adds certain environment + * variables (directly or via resource meta-attributes) expected by some + * resource agents. Add the essential ones that many resource agents expect, so + * the behavior is the same for command-line execution. + * + * \param[in,out] params Resource parameters that will be passed to agent + * \param[in] timeout_ms Action timeout (in milliseconds) + * \param[in] check_level OCF check level + * \param[in] verbosity Verbosity level + */ +static void +set_agent_environment(GHashTable *params, int timeout_ms, int check_level, + int verbosity) +{ + g_hash_table_insert(params, strdup("CRM_meta_timeout"), + crm_strdup_printf("%d", timeout_ms)); + + g_hash_table_insert(params, strdup(XML_ATTR_CRM_VERSION), + strdup(CRM_FEATURE_SET)); + + if (check_level >= 0) { + char *level = crm_strdup_printf("%d", check_level); + + setenv("OCF_CHECK_LEVEL", level, 1); + free(level); + } + + setenv("HA_debug", (verbosity > 0)? "1" : "0", 1); + if (verbosity > 1) { + setenv("OCF_TRACE_RA", "1", 1); + } + + /* A resource agent using the standard ocf-shellfuncs library will not print + * messages to stderr if it doesn't have a controlling terminal (e.g. if + * crm_resource is called via script or ssh). This forces it to do so. + */ + setenv("OCF_TRACE_FILE", "/dev/stderr", 0); +} + +/*! + * \internal + * \brief Apply command-line overrides to resource parameters + * + * \param[in,out] params Parameters to be passed to agent + * \param[in] overrides Parameters to override (or NULL if none) + */ +static void +apply_overrides(GHashTable *params, GHashTable *overrides) +{ + if (overrides != NULL) { + GHashTableIter iter; + char *name = NULL; + char *value = NULL; + + g_hash_table_iter_init(&iter, overrides); + while (g_hash_table_iter_next(&iter, (gpointer *) &name, + (gpointer *) &value)) { + g_hash_table_replace(params, strdup(name), strdup(value)); + } + } +} + +crm_exit_t +cli_resource_execute_from_params(pcmk__output_t *out, const char *rsc_name, + const char *rsc_class, const char *rsc_prov, + const char *rsc_type, const char *rsc_action, + GHashTable *params, GHashTable *override_hash, + int timeout_ms, int resource_verbose, gboolean force, + int check_level) +{ + const char *class = rsc_class; + const char *action = get_action(rsc_action); + crm_exit_t exit_code = CRM_EX_OK; + svc_action_t *op = NULL; + + // If no timeout was provided, use the same default as the cluster + if (timeout_ms == 0) { + timeout_ms = crm_get_msec(CRM_DEFAULT_OP_TIMEOUT_S); + } + + set_agent_environment(params, timeout_ms, check_level, resource_verbose); + apply_overrides(params, override_hash); + + op = services__create_resource_action(rsc_name? rsc_name : "test", + rsc_class, rsc_prov, rsc_type, action, + 0, timeout_ms, params, 0); + if (op == NULL) { + out->err(out, "Could not execute %s using %s%s%s:%s: %s", + action, rsc_class, (rsc_prov? ":" : ""), + (rsc_prov? rsc_prov : ""), rsc_type, strerror(ENOMEM)); + g_hash_table_destroy(params); + return CRM_EX_OSERR; + } + + if (pcmk__str_eq(rsc_class, PCMK_RESOURCE_CLASS_SERVICE, pcmk__str_casei)) { + class = resources_find_service_class(rsc_type); + } + if (!pcmk__strcase_any_of(class, PCMK_RESOURCE_CLASS_OCF, + PCMK_RESOURCE_CLASS_LSB, NULL)) { + services__format_result(op, CRM_EX_UNIMPLEMENT_FEATURE, PCMK_EXEC_ERROR, + "Manual execution of the %s standard is " + "unsupported", pcmk__s(class, "unspecified")); + } + + if (op->rc != PCMK_OCF_UNKNOWN) { + exit_code = op->rc; + goto done; + } + + services_action_sync(op); + + // Map results to OCF codes for consistent reporting to user + { + enum ocf_exitcode ocf_code = services_result2ocf(class, action, op->rc); + + // Cast variable instead of function return to keep compilers happy + exit_code = (crm_exit_t) ocf_code; + } + +done: + out->message(out, "resource-agent-action", resource_verbose, rsc_class, + rsc_prov, rsc_type, rsc_name, rsc_action, override_hash, + exit_code, op->status, services__exit_reason(op), + op->stdout_data, op->stderr_data); + services_action_free(op); + return exit_code; +} + +crm_exit_t +cli_resource_execute(pe_resource_t *rsc, const char *requested_name, + const char *rsc_action, GHashTable *override_hash, + int timeout_ms, cib_t * cib, pe_working_set_t *data_set, + int resource_verbose, gboolean force, int check_level) +{ + pcmk__output_t *out = data_set->priv; + crm_exit_t exit_code = CRM_EX_OK; + const char *rid = NULL; + const char *rtype = NULL; + const char *rprov = NULL; + const char *rclass = NULL; + GHashTable *params = NULL; + + if (pcmk__strcase_any_of(rsc_action, "force-start", "force-demote", + "force-promote", NULL)) { + if(pe_rsc_is_clone(rsc)) { + GList *nodes = cli_resource_search(rsc, requested_name, data_set); + if(nodes != NULL && force == FALSE) { + out->err(out, "It is not safe to %s %s here: the cluster claims it is already active", + rsc_action, rsc->id); + out->err(out, "Try setting target-role=Stopped first or specifying " + "the force option"); + return CRM_EX_UNSAFE; + } + + g_list_free_full(nodes, free); + } + } + + if(pe_rsc_is_clone(rsc)) { + /* Grab the first child resource in the hope it's not a group */ + rsc = rsc->children->data; + } + + if(rsc->variant == pe_group) { + out->err(out, "Sorry, the %s option doesn't support group resources", rsc_action); + return CRM_EX_UNIMPLEMENT_FEATURE; + } else if (rsc->variant == pe_container || pe_rsc_is_bundled(rsc)) { + out->err(out, "Sorry, the %s option doesn't support bundled resources", rsc_action); + return CRM_EX_UNIMPLEMENT_FEATURE; + } + + rclass = crm_element_value(rsc->xml, XML_AGENT_ATTR_CLASS); + rprov = crm_element_value(rsc->xml, XML_AGENT_ATTR_PROVIDER); + rtype = crm_element_value(rsc->xml, XML_ATTR_TYPE); + + params = generate_resource_params(rsc, NULL /* @TODO use local node */, + data_set); + + if (timeout_ms == 0) { + timeout_ms = pe_get_configured_timeout(rsc, get_action(rsc_action), data_set); + } + + rid = pe_rsc_is_anon_clone(rsc->parent)? requested_name : rsc->id; + + exit_code = cli_resource_execute_from_params(out, rid, rclass, rprov, rtype, rsc_action, + params, override_hash, timeout_ms, + resource_verbose, force, check_level); + return exit_code; +} + +// \return Standard Pacemaker return code +int +cli_resource_move(const pe_resource_t *rsc, const char *rsc_id, + const char *host_name, const char *move_lifetime, cib_t *cib, + int cib_options, pe_working_set_t *data_set, + gboolean promoted_role_only, gboolean force) +{ + pcmk__output_t *out = data_set->priv; + int rc = pcmk_rc_ok; + unsigned int count = 0; + pe_node_t *current = NULL; + pe_node_t *dest = pe_find_node(data_set->nodes, host_name); + bool cur_is_dest = false; + + if (dest == NULL) { + return pcmk_rc_node_unknown; + } + + if (promoted_role_only && !pcmk_is_set(rsc->flags, pe_rsc_promotable)) { + const pe_resource_t *p = pe__const_top_resource(rsc, false); + + if (pcmk_is_set(p->flags, pe_rsc_promotable)) { + out->info(out, "Using parent '%s' for move instead of '%s'.", rsc->id, rsc_id); + rsc_id = p->id; + rsc = p; + + } else { + out->info(out, "Ignoring --promoted option: %s is not promotable", + rsc_id); + promoted_role_only = FALSE; + } + } + + current = pe__find_active_requires(rsc, &count); + + if (pcmk_is_set(rsc->flags, pe_rsc_promotable)) { + unsigned int promoted_count = 0; + pe_node_t *promoted_node = NULL; + + for (const GList *iter = rsc->children; iter; iter = iter->next) { + const pe_resource_t *child = (const pe_resource_t *) iter->data; + enum rsc_role_e child_role = child->fns->state(child, TRUE); + + if (child_role == RSC_ROLE_PROMOTED) { + rsc = child; + promoted_node = pe__current_node(child); + promoted_count++; + } + } + if (promoted_role_only || (promoted_count != 0)) { + count = promoted_count; + current = promoted_node; + } + + } + + if (count > 1) { + if (pe_rsc_is_clone(rsc)) { + current = NULL; + } else { + return pcmk_rc_multiple; + } + } + + if (current && (current->details == dest->details)) { + cur_is_dest = true; + if (force) { + crm_info("%s is already %s on %s, reinforcing placement with location constraint.", + rsc_id, promoted_role_only?"promoted":"active", + pe__node_name(dest)); + } else { + return pcmk_rc_already; + } + } + + /* Clear any previous prefer constraints across all nodes. */ + cli_resource_clear(rsc_id, NULL, data_set->nodes, cib, cib_options, false, force); + + /* Clear any previous ban constraints on 'dest'. */ + cli_resource_clear(rsc_id, dest->details->uname, data_set->nodes, cib, + cib_options, TRUE, force); + + /* Record an explicit preference for 'dest' */ + rc = cli_resource_prefer(out, rsc_id, dest->details->uname, move_lifetime, + cib, cib_options, promoted_role_only); + + crm_trace("%s%s now prefers %s%s", + rsc->id, (promoted_role_only? " (promoted)" : ""), + pe__node_name(dest), force?"(forced)":""); + + /* only ban the previous location if current location != destination location. + * it is possible to use -M to enforce a location without regard of where the + * resource is currently located */ + if (force && !cur_is_dest) { + /* Ban the original location if possible */ + if(current) { + (void)cli_resource_ban(out, rsc_id, current->details->uname, move_lifetime, + NULL, cib, cib_options, promoted_role_only); + + } else if(count > 1) { + out->info(out, "Resource '%s' is currently %s in %d locations. " + "One may now move to %s", + rsc_id, (promoted_role_only? "promoted" : "active"), + count, pe__node_name(dest)); + out->info(out, "To prevent '%s' from being %s at a specific location, " + "specify a node.", + rsc_id, (promoted_role_only? "promoted" : "active")); + + } else { + crm_trace("Not banning %s from its current location: not active", rsc_id); + } + } + + return rc; +} diff --git a/tools/crm_rule.8.inc b/tools/crm_rule.8.inc new file mode 100644 index 0000000..2b6ac89 --- /dev/null +++ b/tools/crm_rule.8.inc @@ -0,0 +1,8 @@ +[synopsis] +crm_rule mode [options] + +/state of rules/ +.SH OPTIONS + +/multiple times/ +.SH NOTICE diff --git a/tools/crm_rule.c b/tools/crm_rule.c new file mode 100644 index 0000000..5cdc118 --- /dev/null +++ b/tools/crm_rule.c @@ -0,0 +1,227 @@ +/* + * Copyright 2019-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include +#include +#include + +#include + +#define SUMMARY "evaluate rules from the Pacemaker configuration" + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +enum crm_rule_mode { + crm_rule_mode_none, + crm_rule_mode_check +}; + +struct { + char *date; + char *input_xml; + enum crm_rule_mode mode; + gchar **rules; +} options = { + .mode = crm_rule_mode_none +}; + +static gboolean mode_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); + +static GOptionEntry mode_entries[] = { + { "check", 'c', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, mode_cb, + "Check whether a rule is in effect", + NULL }, + + { NULL } +}; + +static GOptionEntry data_entries[] = { + { "xml-text", 'X', 0, G_OPTION_ARG_STRING, &options.input_xml, + "Use argument for XML (or stdin if '-')", + NULL }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "date", 'd', 0, G_OPTION_ARG_STRING, &options.date, + "Whether the rule is in effect on a given date", + NULL }, + { "rule", 'r', 0, G_OPTION_ARG_STRING_ARRAY, &options.rules, + "The ID of the rule to check (may be specified multiple times)", + NULL }, + + { NULL } +}; + +static gboolean +mode_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (strcmp(option_name, "c")) { + options.mode = crm_rule_mode_check; + } + + return TRUE; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + + pcmk__add_arg_group(context, "modes", "Modes (mutually exclusive):", + "Show modes of operation", mode_entries); + pcmk__add_arg_group(context, "data", "Data:", + "Show data options", data_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +int +main(int argc, char **argv) +{ + crm_time_t *rule_date = NULL; + xmlNode *input = NULL; + + int rc = pcmk_rc_ok; + crm_exit_t exit_code = CRM_EX_OK; + + GError *error = NULL; + + pcmk__output_t *out = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + GOptionContext *context = build_arg_context(args, &output_group); + gchar **processed_args = pcmk__cmdline_preproc(argv, "drX"); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_rule", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + pcmk__register_lib_messages(out); + + if (args->version) { + out->version(out, false); + goto done; + } + + /* Check command line arguments before opening a connection to + * the CIB manager or doing anything else important. + */ + switch(options.mode) { + case crm_rule_mode_check: + if (options.rules == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "--check requires use of --rule="); + goto done; + } + + break; + + default: + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "No mode operation given"); + goto done; + break; + } + + /* Set up some defaults. */ + rule_date = crm_time_new(options.date); + if (rule_date == NULL) { + if (options.date != NULL) { + exit_code = CRM_EX_DATAERR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Invalid date specified: '%s'", options.date); + + } else { + // Should never happen + exit_code = CRM_EX_OSERR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "No --date given and can't determine current date"); + } + goto done; + } + + // Parse the input XML specified by the command-line options, if any + if (pcmk__str_eq(options.input_xml, "-", pcmk__str_casei)) { + input = stdin2xml(); + + if (input == NULL) { + exit_code = CRM_EX_DATAERR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Couldn't parse input from STDIN\n"); + goto done; + } + } else if (options.input_xml != NULL) { + input = string2xml(options.input_xml); + + if (input == NULL) { + exit_code = CRM_EX_DATAERR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Couldn't parse input string: %s\n", options.input_xml); + goto done; + } + } + + /* Now do whichever operation mode was asked for. There's only one at the + * moment so this looks a little silly, but I expect there will be more + * modes in the future. + */ + switch(options.mode) { + case crm_rule_mode_check: + rc = pcmk__check_rules(out, input, rule_date, + (const char **) options.rules); + exit_code = pcmk_rc2exitc(rc); + break; + + default: + break; + } + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + crm_time_free(rule_date); + free_xml(input); + + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + + pcmk__unregister_formats(); + return crm_exit(exit_code); +} diff --git a/tools/crm_shadow.8.inc b/tools/crm_shadow.8.inc new file mode 100644 index 0000000..4c15a95 --- /dev/null +++ b/tools/crm_shadow.8.inc @@ -0,0 +1,5 @@ +[=synopsis] +crm_shadow | [options] + +/for side effects./ +.SH OPTIONS diff --git a/tools/crm_shadow.c b/tools/crm_shadow.c new file mode 100644 index 0000000..ef69502 --- /dev/null +++ b/tools/crm_shadow.c @@ -0,0 +1,1322 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include + +#include +#include +#include +#include + +#include +#include +#include +#include + +#include +#include +#include +#include + +#include +#include + +#define SUMMARY "perform Pacemaker configuration changes in a sandbox\n\n" \ + "This command sets up an environment in which " \ + "configuration tools (cibadmin,\n" \ + "crm_resource, etc.) work offline instead of against a " \ + "live cluster, allowing\n" \ + "changes to be previewed and tested for side effects." + +#define INDENT " " + +enum shadow_command { + shadow_cmd_none = 0, + shadow_cmd_which, + shadow_cmd_display, + shadow_cmd_diff, + shadow_cmd_file, + shadow_cmd_create, + shadow_cmd_create_empty, + shadow_cmd_commit, + shadow_cmd_delete, + shadow_cmd_edit, + shadow_cmd_reset, + shadow_cmd_switch, +}; + +/*! + * \internal + * \enum shadow_disp_flags + * \brief Bit flags to control which fields of shadow CIB info are displayed + * + * \note Ignored for XML output. + */ +enum shadow_disp_flags { + shadow_disp_instance = (1 << 0), + shadow_disp_file = (1 << 1), + shadow_disp_content = (1 << 2), + shadow_disp_diff = (1 << 3), +}; + +static crm_exit_t exit_code = CRM_EX_OK; + +static struct { + enum shadow_command cmd; + int cmd_options; + char *instance; + gboolean force; + gboolean batch; + gboolean full_upload; + gchar *validate_with; +} options = { + .cmd_options = cib_sync_call, +}; + +/*! + * \internal + * \brief Display an instruction to the user + * + * \param[in,out] out Output object + * \param[in] ... Message arguments + * + * \return Standard Pacemaker return code + * + * \note The variadic message arguments are of the following format: + * -# Instructional message + */ +PCMK__OUTPUT_ARGS("instruction", "const char *") +static int +instruction_default(pcmk__output_t *out, va_list args) +{ + const char *msg = va_arg(args, const char *); + + if (msg == NULL) { + return pcmk_rc_no_output; + } + return out->info(out, "%s", msg); +} + +/*! + * \internal + * \brief Display an instruction to the user + * + * \param[in,out] out Output object + * \param[in] ... Message arguments + * + * \return Standard Pacemaker return code + * + * \note The variadic message arguments are of the following format: + * -# Instructional message + */ +PCMK__OUTPUT_ARGS("instruction", "const char *") +static int +instruction_xml(pcmk__output_t *out, va_list args) +{ + const char *msg = va_arg(args, const char *); + + if (msg == NULL) { + return pcmk_rc_no_output; + } + pcmk__output_create_xml_text_node(out, "instruction", msg); + return pcmk_rc_ok; +} + +/*! + * \internal + * \brief Display information about a shadow CIB instance + * + * \param[in,out] out Output object + * \param[in] ... Message arguments + * + * \return Standard Pacemaker return code + * + * \note The variadic message arguments are of the following format: + * -# Instance name (can be \p NULL) + * -# Shadow file name (can be \p NULL) + * -# Shadow file content (can be \p NULL) + * -# Patchset containing the changes in the shadow CIB (can be \p NULL) + * -# Group of \p shadow_disp_flags indicating which fields to display + */ +PCMK__OUTPUT_ARGS("shadow", "const char *", "const char *", "xmlNodePtr", + "xmlNodePtr", "enum shadow_disp_flags") +static int +shadow_default(pcmk__output_t *out, va_list args) +{ + const char *instance = va_arg(args, const char *); + const char *filename = va_arg(args, const char *); + xmlNodePtr content = va_arg(args, xmlNodePtr); + xmlNodePtr diff = va_arg(args, xmlNodePtr); + enum shadow_disp_flags flags = (enum shadow_disp_flags) va_arg(args, int); + + int rc = pcmk_rc_no_output; + + if (pcmk_is_set(flags, shadow_disp_instance)) { + rc = out->info(out, "Instance: %s", pcmk__s(instance, "")); + } + if (pcmk_is_set(flags, shadow_disp_file)) { + rc = out->info(out, "File name: %s", pcmk__s(filename, "")); + } + if (pcmk_is_set(flags, shadow_disp_content)) { + rc = out->info(out, "Content:"); + + if (content != NULL) { + char *buf = pcmk__trim(dump_xml_formatted_with_text(content)); + + if (!pcmk__str_empty(buf)) { + out->info(out, "%s", buf); + } + free(buf); + + } else { + out->info(out, ""); + } + } + if (pcmk_is_set(flags, shadow_disp_diff)) { + rc = out->info(out, "Diff:"); + + if (diff != NULL) { + out->message(out, "xml-patchset", diff); + } else { + out->info(out, ""); + } + } + + return rc; +} + +/*! + * \internal + * \brief Display information about a shadow CIB instance + * + * \param[in,out] out Output object + * \param[in] ... Message arguments + * + * \return Standard Pacemaker return code + * + * \note The variadic message arguments are of the following format: + * -# Instance name (can be \p NULL) + * -# Shadow file name (can be \p NULL) + * -# Shadow file content (can be \p NULL) + * -# Patchset containing the changes in the shadow CIB (can be \p NULL) + * -# Group of \p shadow_disp_flags indicating which fields to display + */ +PCMK__OUTPUT_ARGS("shadow", "const char *", "const char *", "xmlNodePtr", + "xmlNodePtr", "enum shadow_disp_flags") +static int +shadow_text(pcmk__output_t *out, va_list args) +{ + if (!out->is_quiet(out)) { + return shadow_default(out, args); + + } else { + const char *instance = va_arg(args, const char *); + const char *filename = va_arg(args, const char *); + xmlNodePtr content = va_arg(args, xmlNodePtr); + xmlNodePtr diff = va_arg(args, xmlNodePtr); + enum shadow_disp_flags flags = (enum shadow_disp_flags) va_arg(args, int); + + int rc = pcmk_rc_no_output; + bool quiet_orig = out->quiet; + + /* We have to disable quiet mode for the "xml-patchset" message if we + * call it, so we might as well do so for this whole section. + */ + out->quiet = false; + + if (pcmk_is_set(flags, shadow_disp_instance) && (instance != NULL)) { + rc = out->info(out, "%s", instance); + } + if (pcmk_is_set(flags, shadow_disp_file) && (filename != NULL)) { + rc = out->info(out, "%s", filename); + } + if (pcmk_is_set(flags, shadow_disp_content) && (content != NULL)) { + char *buf = pcmk__trim(dump_xml_formatted_with_text(content)); + + rc = out->info(out, "%s", pcmk__trim(buf)); + free(buf); + } + if (pcmk_is_set(flags, shadow_disp_diff) && (diff != NULL)) { + rc = out->message(out, "xml-patchset", diff); + } + + out->quiet = quiet_orig; + return rc; + } +} + +/*! + * \internal + * \brief Display information about a shadow CIB instance + * + * \param[in,out] out Output object + * \param[in] ... Message arguments + * + * \return Standard Pacemaker return code + * + * \note The variadic message arguments are of the following format: + * -# Instance name (can be \p NULL) + * -# Shadow file name (can be \p NULL) + * -# Shadow file content (can be \p NULL) + * -# Patchset containing the changes in the shadow CIB (can be \p NULL) + * -# Group of \p shadow_disp_flags indicating which fields to display + * (ignored) + */ +PCMK__OUTPUT_ARGS("shadow", "const char *", "const char *", "xmlNodePtr", + "xmlNodePtr", "enum shadow_disp_flags") +static int +shadow_xml(pcmk__output_t *out, va_list args) +{ + const char *instance = va_arg(args, const char *); + const char *filename = va_arg(args, const char *); + xmlNodePtr content = va_arg(args, xmlNodePtr); + xmlNodePtr diff = va_arg(args, xmlNodePtr); + enum shadow_disp_flags flags G_GNUC_UNUSED = + (enum shadow_disp_flags) va_arg(args, int); + + pcmk__output_xml_create_parent(out, "shadow", + "instance", instance, + "file", filename, + NULL); + + if (content != NULL) { + char *buf = dump_xml_formatted_with_text(content); + + out->output_xml(out, "content", buf); + free(buf); + } + + if (diff != NULL) { + out->message(out, "xml-patchset", diff); + } + + pcmk__output_xml_pop_parent(out); + return pcmk_rc_ok; +} + +static const pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static const pcmk__message_entry_t fmt_functions[] = { + { "instruction", "default", instruction_default }, + { "instruction", "xml", instruction_xml }, + { "shadow", "default", shadow_default }, + { "shadow", "text", shadow_text }, + { "shadow", "xml", shadow_xml }, + + { NULL, NULL, NULL } +}; + +/*! + * \internal + * \brief Set the error when \p --force is not passed with a dangerous command + * + * \param[in] reason Why command is dangerous + * \param[in] for_shadow If true, command is dangerous to the shadow file. + * Otherwise, command is dangerous to the active + * cluster. + * \param[in] show_mismatch If true and the supplied shadow instance is not + * the same as the active shadow instance, report + * this + * \param[out] error Where to store error + */ +static void +set_danger_error(const char *reason, bool for_shadow, bool show_mismatch, + GError **error) +{ + const char *active = getenv("CIB_shadow"); + char *full = NULL; + + if (show_mismatch + && !pcmk__str_eq(active, options.instance, pcmk__str_null_matches)) { + + full = crm_strdup_printf("%s.\nAdditionally, the supplied shadow " + "instance (%s) is not the same as the active " + "one (%s)", + reason, options.instance, active); + reason = full; + } + + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "%s%sTo prevent accidental destruction of the %s, the --force " + "flag is required in order to proceed.", + pcmk__s(reason, ""), ((reason != NULL)? ".\n" : ""), + (for_shadow? "shadow file" : "cluster")); + free(full); +} + +/*! + * \internal + * \brief Get the active shadow instance from the environment + * + * This sets \p options.instance to the value of the \p CIB_shadow env variable. + * + * \param[out] error Where to store error + */ +static int +get_instance_from_env(GError **error) +{ + int rc = pcmk_rc_ok; + + pcmk__str_update(&options.instance, getenv("CIB_shadow")); + if (options.instance == NULL) { + rc = ENXIO; + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "No active shadow configuration defined"); + } + return rc; +} + +/*! + * \internal + * \brief Validate that the shadow file does or does not exist, as appropriate + * + * \param[in] filename Absolute path of shadow file + * \param[in] should_exist Whether the shadow file is expected to exist + * \param[out] error Where to store error + * + * \return Standard Pacemaker return code + */ +static int +check_file_exists(const char *filename, bool should_exist, GError **error) +{ + struct stat buf; + + if (!should_exist && (stat(filename, &buf) == 0)) { + char *reason = crm_strdup_printf("A shadow instance '%s' already " + "exists", options.instance); + + exit_code = CRM_EX_CANTCREAT; + set_danger_error(reason, true, false, error); + free(reason); + return EEXIST; + } + + if (should_exist && (stat(filename, &buf) < 0)) { + // @COMPAT: Use pcmk_rc2exitc(errno)? + exit_code = CRM_EX_NOSUCH; + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not access shadow instance '%s': %s", + options.instance, strerror(errno)); + return errno; + } + + return pcmk_rc_ok; +} + +/*! + * \internal + * \brief Connect to the "real" (non-shadow) CIB + * + * \param[out] real_cib Where to store CIB connection + * \param[out] error Where to store error + * + * \return Standard Pacemaker return code + */ +static int +connect_real_cib(cib_t **real_cib, GError **error) +{ + int rc = pcmk_rc_ok; + + *real_cib = cib_new_no_shadow(); + if (*real_cib == NULL) { + rc = ENOMEM; + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not create a CIB connection object"); + return rc; + } + + rc = (*real_cib)->cmds->signon(*real_cib, crm_system_name, cib_command); + rc = pcmk_legacy2rc(rc); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not connect to CIB: %s", pcmk_rc_str(rc)); + } + return rc; +} + +/*! + * \internal + * \brief Query the "real" (non-shadow) CIB and store the result + * + * \param[out] output Where to store query output + * \param[out] error Where to store error + * + * \return Standard Pacemaker return code + */ +static int +query_real_cib(xmlNode **output, GError **error) +{ + cib_t *real_cib = NULL; + int rc = connect_real_cib(&real_cib, error); + + if (rc != pcmk_rc_ok) { + goto done; + } + + rc = real_cib->cmds->query(real_cib, NULL, output, options.cmd_options); + rc = pcmk_legacy2rc(rc); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not query the non-shadow CIB: %s", pcmk_rc_str(rc)); + } + +done: + cib_delete(real_cib); + return rc; +} + +/*! + * \internal + * \brief Read XML from the given file + * + * \param[in] filename Path of input file + * \param[out] output Where to store XML read from \p filename + * \param[out] error Where to store error + * + * \return Standard Pacemaker return code + */ +static int +read_xml(const char *filename, xmlNode **output, GError **error) +{ + int rc = pcmk_rc_ok; + + *output = filename2xml(filename); + if (*output == NULL) { + rc = pcmk_rc_no_input; + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not parse XML from input file '%s'", filename); + } + return rc; +} + +/*! + * \internal + * \brief Write the shadow XML to a file + * + * \param[in,out] xml Shadow XML + * \param[in] filename Name of destination file + * \param[in] reset Whether the write is a reset (for logging only) + * \param[out] error Where to store error + */ +static int +write_shadow_file(xmlNode *xml, const char *filename, bool reset, + GError **error) +{ + int rc = write_xml_file(xml, filename, FALSE); + + if (rc < 0) { + rc = pcmk_legacy2rc(rc); + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not %s the shadow instance '%s': %s", + reset? "reset" : "create", options.instance, + pcmk_rc_str(rc)); + return rc; + } + return pcmk_rc_ok; +} + +/*! + * \internal + * \brief Create a shell prompt based on the given shadow instance name + * + * \return Newly created prompt + * + * \note The caller is responsible for freeing the return value using \p free(). + */ +static inline char * +get_shadow_prompt(void) +{ + return crm_strdup_printf("shadow[%.40s] # ", options.instance); +} + +/*! + * \internal + * \brief Set up environment variables for a shadow instance + * + * \param[in,out] out Output object + * \param[in] do_switch If true, switch to an existing instance (logging + * only) + * \param[out] error Where to store error + */ +static void +shadow_setup(pcmk__output_t *out, bool do_switch, GError **error) +{ + const char *active = getenv("CIB_shadow"); + const char *prompt = getenv("PS1"); + const char *shell = getenv("SHELL"); + char *new_prompt = get_shadow_prompt(); + + if (pcmk__str_eq(active, options.instance, pcmk__str_none) + && pcmk__str_eq(new_prompt, prompt, pcmk__str_none)) { + // CIB_shadow and prompt environment variables are already set up + goto done; + } + + if (!options.batch && (shell != NULL)) { + out->info(out, "Setting up shadow instance"); + setenv("PS1", new_prompt, 1); + setenv("CIB_shadow", options.instance, 1); + + out->message(out, "instruction", + "Press Ctrl+D to exit the crm_shadow shell"); + + if (pcmk__str_eq(shell, "(^|/)bash$", pcmk__str_regex)) { + execl(shell, shell, "--norc", "--noprofile", NULL); + } else { + execl(shell, shell, NULL); + } + + exit_code = pcmk_rc2exitc(errno); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Failed to launch shell '%s': %s", + shell, pcmk_rc_str(errno)); + + } else { + char *msg = NULL; + const char *prefix = "A new shadow instance was created. To begin " + "using it"; + + if (do_switch) { + prefix = "To switch to the named shadow instance"; + } + + msg = crm_strdup_printf("%s, enter the following into your shell:\n" + "\texport CIB_shadow=%s", + prefix, options.instance); + out->message(out, "instruction", msg); + free(msg); + } + +done: + free(new_prompt); +} + +/*! + * \internal + * \brief Remind the user to clean up the shadow environment + * + * \param[in,out] out Output object + */ +static void +shadow_teardown(pcmk__output_t *out) +{ + const char *active = getenv("CIB_shadow"); + const char *prompt = getenv("PS1"); + + if (pcmk__str_eq(active, options.instance, pcmk__str_none)) { + char *our_prompt = get_shadow_prompt(); + + if (pcmk__str_eq(prompt, our_prompt, pcmk__str_none)) { + out->message(out, "instruction", + "Press Ctrl+D to exit the crm_shadow shell"); + + } else { + out->message(out, "instruction", + "Remember to unset the CIB_shadow variable by " + "entering the following into your shell:\n" + "\tunset CIB_shadow"); + } + free(our_prompt); + } +} + +/*! + * \internal + * \brief Commit the shadow file contents to the active cluster + * + * \param[out] error Where to store error + */ +static void +commit_shadow_file(GError **error) +{ + char *filename = NULL; + cib_t *real_cib = NULL; + + xmlNodePtr input = NULL; + xmlNodePtr section_xml = NULL; + const char *section = NULL; + + int rc = pcmk_rc_ok; + + if (!options.force) { + const char *reason = "The commit command overwrites the active cluster " + "configuration"; + + exit_code = CRM_EX_USAGE; + set_danger_error(reason, false, true, error); + return; + } + + filename = get_shadow_file(options.instance); + if (check_file_exists(filename, true, error) != pcmk_rc_ok) { + goto done; + } + + if (connect_real_cib(&real_cib, error) != pcmk_rc_ok) { + goto done; + } + + if (read_xml(filename, &input, error) != pcmk_rc_ok) { + goto done; + } + + section_xml = input; + + if (!options.full_upload) { + section = XML_CIB_TAG_CONFIGURATION; + section_xml = first_named_child(input, section); + } + + rc = real_cib->cmds->replace(real_cib, section, section_xml, + options.cmd_options); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not commit shadow instance '%s' to the CIB: %s", + options.instance, pcmk_rc_str(rc)); + } + +done: + free(filename); + cib_delete(real_cib); + free_xml(input); +} + +/*! + * \internal + * \brief Create a new empty shadow instance + * + * \param[in,out] out Output object + * \param[out] error Where to store error + * + * \note If \p --force is given, we try to write the file regardless of whether + * it already exists. + */ +static void +create_shadow_empty(pcmk__output_t *out, GError **error) +{ + char *filename = get_shadow_file(options.instance); + xmlNode *output = NULL; + + if (!options.force + && (check_file_exists(filename, false, error) != pcmk_rc_ok)) { + goto done; + } + + output = createEmptyCib(0); + crm_xml_add(output, XML_ATTR_VALIDATION, options.validate_with); + out->info(out, "Created new %s configuration", + crm_element_value(output, XML_ATTR_VALIDATION)); + + if (write_shadow_file(output, filename, false, error) != pcmk_rc_ok) { + goto done; + } + shadow_setup(out, false, error); + +done: + free(filename); + free_xml(output); +} + +/*! + * \internal + * \brief Create a shadow instance based on the active CIB + * + * \param[in,out] out Output object + * \param[in] reset If true, overwrite the given existing shadow instance. + * Otherwise, create a new shadow instance with the given + * name. + * \param[out] error Where to store error + * + * \note If \p --force is given, we try to write the file regardless of whether + * it already exists. + */ +static void +create_shadow_from_cib(pcmk__output_t *out, bool reset, GError **error) +{ + char *filename = get_shadow_file(options.instance); + xmlNode *output = NULL; + + if (!options.force) { + if (reset) { + /* @COMPAT: Reset is dangerous to the shadow file, but to preserve + * compatibility we can't require --force unless there's a mismatch. + * At a compatibility break, call set_danger_error() with for_shadow + * and show_mismatch set to true. + */ + const char *local = getenv("CIB_shadow"); + + if (!pcmk__str_eq(local, options.instance, pcmk__str_null_matches)) { + exit_code = CRM_EX_USAGE; + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "The supplied shadow instance (%s) is not the same " + "as the active one (%s).\n" + "To prevent accidental destruction of the shadow " + "file, the --force flag is required in order to " + "proceed.", + options.instance, local); + goto done; + } + } + + if (check_file_exists(filename, reset, error) != pcmk_rc_ok) { + goto done; + } + } + + if (query_real_cib(&output, error) != pcmk_rc_ok) { + goto done; + } + + if (write_shadow_file(output, filename, reset, error) != pcmk_rc_ok) { + goto done; + } + shadow_setup(out, false, error); + +done: + free(filename); + free_xml(output); +} + +/*! + * \internal + * \brief Delete the shadow file + * + * \param[in,out] out Output object + * \param[out] error Where to store error + */ +static void +delete_shadow_file(pcmk__output_t *out, GError **error) +{ + char *filename = NULL; + + if (!options.force) { + const char *reason = "The delete command removes the specified shadow " + "file"; + + exit_code = CRM_EX_USAGE; + set_danger_error(reason, true, true, error); + return; + } + + filename = get_shadow_file(options.instance); + + if ((unlink(filename) < 0) && (errno != ENOENT)) { + exit_code = pcmk_rc2exitc(errno); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not remove shadow instance '%s': %s", + options.instance, strerror(errno)); + } else { + shadow_teardown(out); + } + free(filename); +} + +/*! + * \internal + * \brief Open the shadow file in a text editor + * + * \param[out] error Where to store error + * + * \note The \p EDITOR environment variable must be set. + */ +static void +edit_shadow_file(GError **error) +{ + char *filename = NULL; + const char *editor = NULL; + + if (get_instance_from_env(error) != pcmk_rc_ok) { + return; + } + + filename = get_shadow_file(options.instance); + if (check_file_exists(filename, true, error) != pcmk_rc_ok) { + goto done; + } + + editor = getenv("EDITOR"); + if (editor == NULL) { + exit_code = CRM_EX_NOT_CONFIGURED; + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "No value for EDITOR defined"); + goto done; + } + + execlp(editor, "--", filename, NULL); + exit_code = CRM_EX_OSFILE; + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not invoke EDITOR (%s %s): %s", + editor, filename, strerror(errno)); + +done: + free(filename); +} + +/*! + * \internal + * \brief Show the contents of the active shadow instance + * + * \param[in,out] out Output object + * \param[out] error Where to store error + */ +static void +show_shadow_contents(pcmk__output_t *out, GError **error) +{ + char *filename = NULL; + + if (get_instance_from_env(error) != pcmk_rc_ok) { + return; + } + + filename = get_shadow_file(options.instance); + + if (check_file_exists(filename, true, error) == pcmk_rc_ok) { + xmlNode *output = NULL; + bool quiet_orig = out->quiet; + + if (read_xml(filename, &output, error) != pcmk_rc_ok) { + goto done; + } + + out->quiet = true; + out->message(out, "shadow", + options.instance, NULL, output, NULL, shadow_disp_content); + out->quiet = quiet_orig; + + free_xml(output); + } + +done: + free(filename); +} + +/*! + * \internal + * \brief Show the changes in the active shadow instance + * + * \param[in,out] out Output object + * \param[out] error Where to store error + */ +static void +show_shadow_diff(pcmk__output_t *out, GError **error) +{ + char *filename = NULL; + xmlNodePtr old_config = NULL; + xmlNodePtr new_config = NULL; + xmlNodePtr diff = NULL; + pcmk__output_t *logger_out = NULL; + bool quiet_orig = out->quiet; + int rc = pcmk_rc_ok; + + if (get_instance_from_env(error) != pcmk_rc_ok) { + return; + } + + filename = get_shadow_file(options.instance); + if (check_file_exists(filename, true, error) != pcmk_rc_ok) { + goto done; + } + + if (query_real_cib(&old_config, error) != pcmk_rc_ok) { + goto done; + } + + if (read_xml(filename, &new_config, error) != pcmk_rc_ok) { + goto done; + } + xml_track_changes(new_config, NULL, new_config, false); + xml_calculate_changes(old_config, new_config); + diff = xml_create_patchset(0, old_config, new_config, NULL, false); + + rc = pcmk__log_output_new(&logger_out); + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(error, PCMK__EXITC_ERROR, exit_code, + "Could not create logger object: %s", pcmk_rc_str(rc)); + goto done; + } + pcmk__output_set_log_level(logger_out, LOG_INFO); + rc = pcmk__xml_show_changes(logger_out, new_config); + logger_out->finish(logger_out, pcmk_rc2exitc(rc), true, NULL); + pcmk__output_free(logger_out); + + xml_accept_changes(new_config); + + out->quiet = true; + out->message(out, "shadow", + options.instance, NULL, NULL, diff, shadow_disp_diff); + out->quiet = quiet_orig; + + if (diff != NULL) { + /* @COMPAT: Exit with CRM_EX_DIGEST? This is not really an error; we + * just want to indicate that there are differences (as the diff command + * does). + */ + exit_code = CRM_EX_ERROR; + } + +done: + free(filename); + free_xml(old_config); + free_xml(new_config); + free_xml(diff); +} + +/*! + * \internal + * \brief Show the absolute path of the active shadow instance + * + * \param[in,out] out Output object + * \param[out] error Where to store error + */ +static void +show_shadow_filename(pcmk__output_t *out, GError **error) +{ + if (get_instance_from_env(error) == pcmk_rc_ok) { + char *filename = get_shadow_file(options.instance); + bool quiet_orig = out->quiet; + + out->quiet = true; + out->message(out, "shadow", + options.instance, filename, NULL, NULL, shadow_disp_file); + out->quiet = quiet_orig; + + free(filename); + } +} + +/*! + * \internal + * \brief Show the active shadow instance + * + * \param[in,out] out Output object + * \param[out] error Where to store error + */ +static void +show_shadow_instance(pcmk__output_t *out, GError **error) +{ + if (get_instance_from_env(error) == pcmk_rc_ok) { + bool quiet_orig = out->quiet; + + out->quiet = true; + out->message(out, "shadow", + options.instance, NULL, NULL, NULL, shadow_disp_instance); + out->quiet = quiet_orig; + } +} + +/*! + * \internal + * \brief Switch to the given shadow instance + * + * \param[in,out] out Output object + * \param[out] error Where to store error + */ +static void +switch_shadow_instance(pcmk__output_t *out, GError **error) +{ + char *filename = NULL; + + filename = get_shadow_file(options.instance); + if (check_file_exists(filename, true, error) == pcmk_rc_ok) { + shadow_setup(out, true, error); + } + free(filename); +} + +static gboolean +command_cb(const gchar *option_name, const gchar *optarg, gpointer data, + GError **error) +{ + if (pcmk__str_any_of(option_name, "-w", "--which", NULL)) { + options.cmd = shadow_cmd_which; + + } else if (pcmk__str_any_of(option_name, "-p", "--display", NULL)) { + options.cmd = shadow_cmd_display; + + } else if (pcmk__str_any_of(option_name, "-d", "--diff", NULL)) { + options.cmd = shadow_cmd_diff; + + } else if (pcmk__str_any_of(option_name, "-F", "--file", NULL)) { + options.cmd = shadow_cmd_file; + + } else if (pcmk__str_any_of(option_name, "-c", "--create", NULL)) { + options.cmd = shadow_cmd_create; + + } else if (pcmk__str_any_of(option_name, "-e", "--create-empty", NULL)) { + options.cmd = shadow_cmd_create_empty; + + } else if (pcmk__str_any_of(option_name, "-C", "--commit", NULL)) { + options.cmd = shadow_cmd_commit; + + } else if (pcmk__str_any_of(option_name, "-D", "--delete", NULL)) { + options.cmd = shadow_cmd_delete; + + } else if (pcmk__str_any_of(option_name, "-E", "--edit", NULL)) { + options.cmd = shadow_cmd_edit; + + } else if (pcmk__str_any_of(option_name, "-r", "--reset", NULL)) { + options.cmd = shadow_cmd_reset; + + } else if (pcmk__str_any_of(option_name, "-s", "--switch", NULL)) { + options.cmd = shadow_cmd_switch; + + } else { + // Should be impossible + return FALSE; + } + + // optarg may be NULL and that's okay + pcmk__str_update(&options.instance, optarg); + return TRUE; +} + +static GOptionEntry query_entries[] = { + { "which", 'w', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Indicate the active shadow copy", NULL }, + + { "display", 'p', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the contents of the active shadow copy", NULL }, + + { "diff", 'd', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the changes in the active shadow copy", NULL }, + + { "file", 'F', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the location of the active shadow copy file", NULL }, + + { NULL } +}; + +static GOptionEntry command_entries[] = { + { "create", 'c', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, command_cb, + "Create the named shadow copy of the active cluster configuration", + "name" }, + + { "create-empty", 'e', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, + command_cb, + "Create the named shadow copy with an empty cluster configuration.\n" + INDENT "Optional: --validate-with", "name" }, + + { "commit", 'C', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, command_cb, + "Upload the contents of the named shadow copy to the cluster", "name" }, + + { "delete", 'D', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, command_cb, + "Delete the contents of the named shadow copy", "name" }, + + { "edit", 'E', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Edit the contents of the active shadow copy with your favorite $EDITOR", + NULL }, + + { "reset", 'r', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, command_cb, + "Recreate named shadow copy from the active cluster configuration", + "name" }, + + { "switch", 's', G_OPTION_FLAG_NONE, G_OPTION_ARG_CALLBACK, command_cb, + "(Advanced) Switch to the named shadow copy", "name" }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "force", 'f', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.force, + "(Advanced) Force the action to be performed", NULL }, + + { "batch", 'b', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.batch, + "(Advanced) Don't spawn a new shell", NULL }, + + { "all", 'a', G_OPTION_FLAG_NONE, G_OPTION_ARG_NONE, &options.full_upload, + "(Advanced) Upload entire CIB, including status, with --commit", NULL }, + + { "validate-with", 'v', G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING, + &options.validate_with, + "(Advanced) Create an older configuration version", NULL }, + + { NULL } +}; + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) +{ + const char *desc = NULL; + GOptionContext *context = NULL; + + desc = "Examples:\n\n" + "Create a blank shadow configuration:\n\n" + "\t# crm_shadow --create-empty myShadow\n\n" + "Create a shadow configuration from the running cluster\n\n" + "\t# crm_shadow --create myShadow\n\n" + "Display the current shadow configuration:\n\n" + "\t# crm_shadow --display\n\n" + "Discard the current shadow configuration (named myShadow):\n\n" + "\t# crm_shadow --delete myShadow --force\n\n" + "Upload current shadow configuration (named myShadow) to running " + "cluster:\n\n" + "\t# crm_shadow --commit myShadow\n\n"; + + context = pcmk__build_arg_context(args, "text (default), xml", group, + "|"); + g_option_context_set_description(context, desc); + + pcmk__add_arg_group(context, "queries", "Queries:", + "Show query help", query_entries); + pcmk__add_arg_group(context, "commands", "Commands:", + "Show command help", command_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +int +main(int argc, char **argv) +{ + int rc = pcmk_rc_ok; + pcmk__output_t *out = NULL; + + GError *error = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "CDcersv"); + GOptionContext *context = build_arg_context(args, &output_group); + + crm_log_preinit(NULL, argc, argv); + + pcmk__register_formats(output_group, formats); + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Error creating output format %s: %s", args->output_ty, + pcmk_rc_str(rc)); + goto done; + } + + if (g_strv_length(processed_args) > 1) { + gchar *help = g_option_context_get_help(context, TRUE, NULL); + GString *extra = g_string_sized_new(128); + + for (int lpc = 1; processed_args[lpc] != NULL; lpc++) { + if (extra->len > 0) { + g_string_append_c(extra, ' '); + } + g_string_append(extra, processed_args[lpc]); + } + + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "non-option ARGV-elements: %s\n\n%s", extra->str, help); + g_free(help); + g_string_free(extra, TRUE); + goto done; + } + + if (args->version) { + out->version(out, false); + goto done; + } + + pcmk__register_messages(out, fmt_functions); + + if (options.cmd == shadow_cmd_none) { + // @COMPAT: Create a default command if other tools have one + gchar *help = g_option_context_get_help(context, TRUE, NULL); + + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must specify a query or command option\n\n%s", help); + g_free(help); + goto done; + } + + pcmk__cli_init_logging("crm_shadow", args->verbosity); + + if (args->verbosity > 0) { + cib__set_call_options(options.cmd_options, crm_system_name, + cib_verbose); + } + + // Run the command + switch (options.cmd) { + case shadow_cmd_commit: + commit_shadow_file(&error); + break; + case shadow_cmd_create: + create_shadow_from_cib(out, false, &error); + break; + case shadow_cmd_create_empty: + create_shadow_empty(out, &error); + break; + case shadow_cmd_reset: + create_shadow_from_cib(out, true, &error); + break; + case shadow_cmd_delete: + delete_shadow_file(out, &error); + break; + case shadow_cmd_diff: + show_shadow_diff(out, &error); + break; + case shadow_cmd_display: + show_shadow_contents(out, &error); + break; + case shadow_cmd_edit: + edit_shadow_file(&error); + break; + case shadow_cmd_file: + show_shadow_filename(out, &error); + break; + case shadow_cmd_switch: + switch_shadow_instance(out, &error); + break; + case shadow_cmd_which: + show_shadow_instance(out, &error); + break; + default: + // Should never reach this point + break; + } + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + pcmk__output_and_clear_error(&error, out); + + free(options.instance); + g_free(options.validate_with); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + + crm_exit(exit_code); +} diff --git a/tools/crm_simulate.8.inc b/tools/crm_simulate.8.inc new file mode 100644 index 0000000..8f37f5b --- /dev/null +++ b/tools/crm_simulate.8.inc @@ -0,0 +1,8 @@ +[synopsis] +crm_simulate [options] + +/response to events/ +.SH OPTIONS + +/only essential output/ +.SH OPERATION SPECIFICATION diff --git a/tools/crm_simulate.c b/tools/crm_simulate.c new file mode 100644 index 0000000..932c5bd --- /dev/null +++ b/tools/crm_simulate.c @@ -0,0 +1,587 @@ +/* + * Copyright 2009-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include + +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#define SUMMARY "crm_simulate - simulate a Pacemaker cluster's response to events" + +struct { + char *dot_file; + char *graph_file; + gchar *input_file; + pcmk_injections_t *injections; + unsigned int flags; + gchar *output_file; + long long repeat; + gboolean store; + gchar *test_dir; + char *use_date; + char *xml_file; +} options = { + .flags = pcmk_sim_show_pending | pcmk_sim_sanitized, + .repeat = 1 +}; + +uint32_t section_opts = 0; +char *temp_shadow = NULL; +crm_exit_t exit_code = CRM_EX_OK; + +#define INDENT " " + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static gboolean +all_actions_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_all_actions; + return TRUE; +} + +static gboolean +attrs_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + section_opts |= pcmk_section_attributes; + return TRUE; +} + +static gboolean +failcounts_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + section_opts |= pcmk_section_failcounts | pcmk_section_failures; + return TRUE; +} + +static gboolean +in_place_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.store = TRUE; + options.flags |= pcmk_sim_process | pcmk_sim_simulate; + return TRUE; +} + +static gboolean +live_check_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (options.xml_file) { + free(options.xml_file); + } + + options.xml_file = NULL; + options.flags &= ~pcmk_sim_sanitized; + return TRUE; +} + +static gboolean +node_down_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->node_down = g_list_append(options.injections->node_down, g_strdup(optarg)); + return TRUE; +} + +static gboolean +node_fail_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->node_fail = g_list_append(options.injections->node_fail, g_strdup(optarg)); + return TRUE; +} + +static gboolean +node_up_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + pcmk__simulate_node_config = true; + options.injections->node_up = g_list_append(options.injections->node_up, g_strdup(optarg)); + return TRUE; +} + +static gboolean +op_fail_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process | pcmk_sim_simulate; + options.injections->op_fail = g_list_append(options.injections->op_fail, g_strdup(optarg)); + return TRUE; +} + +static gboolean +op_inject_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->op_inject = g_list_append(options.injections->op_inject, g_strdup(optarg)); + return TRUE; +} + +static gboolean +pending_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_show_pending; + return TRUE; +} + +static gboolean +process_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process; + return TRUE; +} + +static gboolean +quorum_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + pcmk__str_update(&options.injections->quorum, optarg); + return TRUE; +} + +static gboolean +save_dotfile_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process; + pcmk__str_update(&options.dot_file, optarg); + return TRUE; +} + +static gboolean +save_graph_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process; + pcmk__str_update(&options.graph_file, optarg); + return TRUE; +} + +static gboolean +show_scores_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process | pcmk_sim_show_scores; + return TRUE; +} + +static gboolean +simulate_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process | pcmk_sim_simulate; + return TRUE; +} + +static gboolean +ticket_activate_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->ticket_activate = g_list_append(options.injections->ticket_activate, g_strdup(optarg)); + return TRUE; +} + +static gboolean +ticket_grant_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->ticket_grant = g_list_append(options.injections->ticket_grant, g_strdup(optarg)); + return TRUE; +} + +static gboolean +ticket_revoke_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->ticket_revoke = g_list_append(options.injections->ticket_revoke, g_strdup(optarg)); + return TRUE; +} + +static gboolean +ticket_standby_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.injections->ticket_standby = g_list_append(options.injections->ticket_standby, g_strdup(optarg)); + return TRUE; +} + +static gboolean +utilization_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.flags |= pcmk_sim_process | pcmk_sim_show_utilization; + return TRUE; +} + +static gboolean +watchdog_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + pcmk__str_update(&options.injections->watchdog, optarg); + return TRUE; +} + +static gboolean +xml_file_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + pcmk__str_update(&options.xml_file, optarg); + options.flags |= pcmk_sim_sanitized; + return TRUE; +} + +static gboolean +xml_pipe_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + pcmk__str_update(&options.xml_file, "-"); + options.flags |= pcmk_sim_sanitized; + return TRUE; +} + +static GOptionEntry operation_entries[] = { + { "run", 'R', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, process_cb, + "Process the supplied input and show what actions the cluster will take in response", + NULL }, + { "simulate", 'S', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, simulate_cb, + "Like --run, but also simulate taking those actions and show the resulting new status", + NULL }, + { "in-place", 'X', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, in_place_cb, + "Like --simulate, but also store the results back to the input file", + NULL }, + { "show-attrs", 'A', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, attrs_cb, + "Show node attributes", + NULL }, + { "show-failcounts", 'c', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, failcounts_cb, + "Show resource fail counts", + NULL }, + { "show-scores", 's', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_scores_cb, + "Show allocation scores", + NULL }, + { "show-utilization", 'U', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, utilization_cb, + "Show utilization information", + NULL }, + { "profile", 'P', 0, G_OPTION_ARG_FILENAME, &options.test_dir, + "Process all the XML files in the named directory to create profiling data", + "DIR" }, + { "repeat", 'N', 0, G_OPTION_ARG_INT, &options.repeat, + "With --profile, repeat each test N times and print timings", + "N" }, + /* Deprecated */ + { "pending", 'j', G_OPTION_FLAG_NO_ARG|G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, pending_cb, + "Display pending state if 'record-pending' is enabled", + NULL }, + + { NULL } +}; + +static GOptionEntry synthetic_entries[] = { + { "node-up", 'u', 0, G_OPTION_ARG_CALLBACK, node_up_cb, + "Simulate bringing a node online", + "NODE" }, + { "node-down", 'd', 0, G_OPTION_ARG_CALLBACK, node_down_cb, + "Simulate taking a node offline", + "NODE" }, + { "node-fail", 'f', 0, G_OPTION_ARG_CALLBACK, node_fail_cb, + "Simulate a node failing", + "NODE" }, + { "op-inject", 'i', 0, G_OPTION_ARG_CALLBACK, op_inject_cb, + "Generate a failure for the cluster to react to in the simulation.\n" + INDENT "See `Operation Specification` help for more information.", + "OPSPEC" }, + { "op-fail", 'F', 0, G_OPTION_ARG_CALLBACK, op_fail_cb, + "If the specified task occurs during the simulation, have it fail with return code ${rc}.\n" + INDENT "The transition will normally stop at the failed action.\n" + INDENT "Save the result with --save-output and re-run with --xml-file.\n" + INDENT "See `Operation Specification` help for more information.", + "OPSPEC" }, + { "set-datetime", 't', 0, G_OPTION_ARG_STRING, &options.use_date, + "Set date/time (ISO 8601 format, see https://en.wikipedia.org/wiki/ISO_8601)", + "DATETIME" }, + { "quorum", 'q', 0, G_OPTION_ARG_CALLBACK, quorum_cb, + "Set to '1' (or 'true') to indicate cluster has quorum", + "QUORUM" }, + { "watchdog", 'w', 0, G_OPTION_ARG_CALLBACK, watchdog_cb, + "Set to '1' (or 'true') to indicate cluster has an active watchdog device", + "DEVICE" }, + { "ticket-grant", 'g', 0, G_OPTION_ARG_CALLBACK, ticket_grant_cb, + "Simulate granting a ticket", + "TICKET" }, + { "ticket-revoke", 'r', 0, G_OPTION_ARG_CALLBACK, ticket_revoke_cb, + "Simulate revoking a ticket", + "TICKET" }, + { "ticket-standby", 'b', 0, G_OPTION_ARG_CALLBACK, ticket_standby_cb, + "Simulate making a ticket standby", + "TICKET" }, + { "ticket-activate", 'e', 0, G_OPTION_ARG_CALLBACK, ticket_activate_cb, + "Simulate activating a ticket", + "TICKET" }, + + { NULL } +}; + +static GOptionEntry artifact_entries[] = { + { "save-input", 'I', 0, G_OPTION_ARG_FILENAME, &options.input_file, + "Save the input configuration to the named file", + "FILE" }, + { "save-output", 'O', 0, G_OPTION_ARG_FILENAME, &options.output_file, + "Save the output configuration to the named file", + "FILE" }, + { "save-graph", 'G', 0, G_OPTION_ARG_CALLBACK, save_graph_cb, + "Save the transition graph (XML format) to the named file", + "FILE" }, + { "save-dotfile", 'D', 0, G_OPTION_ARG_CALLBACK, save_dotfile_cb, + "Save the transition graph (DOT format) to the named file", + "FILE" }, + { "all-actions", 'a', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, all_actions_cb, + "Display all possible actions in DOT graph (even if not part of transition)", + NULL }, + + { NULL } +}; + +static GOptionEntry source_entries[] = { + { "live-check", 'L', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, live_check_cb, + "Connect to CIB manager and use the current CIB contents as input", + NULL }, + { "xml-file", 'x', 0, G_OPTION_ARG_CALLBACK, xml_file_cb, + "Retrieve XML from the named file", + "FILE" }, + { "xml-pipe", 'p', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, xml_pipe_cb, + "Retrieve XML from stdin", + NULL }, + + { NULL } +}; + +static int +setup_input(pcmk__output_t *out, const char *input, const char *output, + GError **error) +{ + int rc = pcmk_rc_ok; + xmlNode *cib_object = NULL; + char *local_output = NULL; + + if (input == NULL) { + /* Use live CIB */ + rc = cib__signon_query(out, NULL, &cib_object); + if (rc != pcmk_rc_ok) { + // cib__signon_query() outputs any relevant error + return rc; + } + + } else if (pcmk__str_eq(input, "-", pcmk__str_casei)) { + cib_object = filename2xml(NULL); + + } else { + cib_object = filename2xml(input); + } + + if (pcmk_find_cib_element(cib_object, XML_CIB_TAG_STATUS) == NULL) { + create_xml_node(cib_object, XML_CIB_TAG_STATUS); + } + + if (cli_config_update(&cib_object, NULL, FALSE) == FALSE) { + free_xml(cib_object); + return pcmk_rc_transform_failed; + } + + if (validate_xml(cib_object, NULL, FALSE) != TRUE) { + free_xml(cib_object); + return pcmk_rc_schema_validation; + } + + if (output == NULL) { + char *pid = pcmk__getpid_s(); + + local_output = get_shadow_file(pid); + temp_shadow = strdup(local_output); + output = local_output; + free(pid); + } + + rc = write_xml_file(cib_object, output, FALSE); + free_xml(cib_object); + cib_object = NULL; + + if (rc < 0) { + rc = pcmk_legacy2rc(rc); + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_CANTCREAT, + "Could not create '%s': %s", output, pcmk_rc_str(rc)); + return rc; + } else { + setenv("CIB_file", output, 1); + free(local_output); + return pcmk_rc_ok; + } +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'Q', 0, G_OPTION_ARG_NONE, &(args->quiet), + "Display only essential output", + NULL }, + + { NULL } + }; + + const char *description = "Operation Specification:\n\n" + "The OPSPEC in any command line option is of the form\n" + "${resource}_${task}_${interval_in_ms}@${node}=${rc}\n" + "(memcached_monitor_20000@bart.example.com=7, for example).\n" + "${rc} is an OCF return code. For more information on these\n" + "return codes, refer to https://clusterlabs.org/pacemaker/doc/2.1/Pacemaker_Administration/html/agents.html#ocf-return-codes\n\n" + "Examples:\n\n" + "Pretend a recurring monitor action found memcached stopped on node\n" + "fred.example.com and, during recovery, that the memcached stop\n" + "action failed:\n\n" + "\tcrm_simulate -LS --op-inject memcached:0_monitor_20000@bart.example.com=7 " + "--op-fail memcached:0_stop_0@fred.example.com=1 --save-output /tmp/memcached-test.xml\n\n" + "Now see what the reaction to the stop failed would be:\n\n" + "\tcrm_simulate -S --xml-file /tmp/memcached-test.xml\n\n"; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + pcmk__add_main_args(context, extra_prog_entries); + g_option_context_set_description(context, description); + + pcmk__add_arg_group(context, "operations", "Operations:", + "Show operations options", operation_entries); + pcmk__add_arg_group(context, "synthetic", "Synthetic Cluster Events:", + "Show synthetic cluster event options", synthetic_entries); + pcmk__add_arg_group(context, "artifact", "Artifact Options:", + "Show artifact options", artifact_entries); + pcmk__add_arg_group(context, "source", "Data Source:", + "Show data source options", source_entries); + + return context; +} + +int +main(int argc, char **argv) +{ + int rc = pcmk_rc_ok; + pe_working_set_t *data_set = NULL; + pcmk__output_t *out = NULL; + + GError *error = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "bdefgiqrtuwxDFGINOP"); + GOptionContext *context = build_arg_context(args, &output_group); + + options.injections = calloc(1, sizeof(pcmk_injections_t)); + if (options.injections == NULL) { + rc = ENOMEM; + goto done; + } + + /* This must come before g_option_context_parse_strv. */ + options.xml_file = strdup("-"); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_simulate", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + fprintf(stderr, "Error creating output format %s: %s\n", + args->output_ty, pcmk_rc_str(rc)); + exit_code = CRM_EX_ERROR; + goto done; + } + + if (pcmk__str_eq(args->output_ty, "text", pcmk__str_null_matches) && + !pcmk_is_set(options.flags, pcmk_sim_show_scores) && + !pcmk_is_set(options.flags, pcmk_sim_show_utilization)) { + pcmk__force_args(context, &error, "%s --text-fancy", g_get_prgname()); + } else if (pcmk__str_eq(args->output_ty, "xml", pcmk__str_none)) { + pcmk__force_args(context, &error, "%s --xml-simple-list --xml-substitute", g_get_prgname()); + } + + pe__register_messages(out); + pcmk__register_lib_messages(out); + + out->quiet = args->quiet; + + if (args->version) { + out->version(out, false); + goto done; + } + + if (args->verbosity > 0) { + options.flags |= pcmk_sim_verbose; + +#ifdef PCMK__COMPAT_2_0 + /* Redirect stderr to stdout so we can grep the output */ + close(STDERR_FILENO); + dup2(STDOUT_FILENO, STDERR_FILENO); +#endif + } + + data_set = pe_new_working_set(); + if (data_set == NULL) { + rc = ENOMEM; + g_set_error(&error, PCMK__RC_ERROR, rc, "Could not allocate working set"); + goto done; + } + + if (pcmk_is_set(options.flags, pcmk_sim_show_scores)) { + pe__set_working_set_flags(data_set, pe_flag_show_scores); + } + if (pcmk_is_set(options.flags, pcmk_sim_show_utilization)) { + pe__set_working_set_flags(data_set, pe_flag_show_utilization); + } + pe__set_working_set_flags(data_set, pe_flag_no_compat); + + if (options.test_dir != NULL) { + data_set->priv = out; + pcmk__profile_dir(options.test_dir, options.repeat, data_set, options.use_date); + rc = pcmk_rc_ok; + goto done; + } + + rc = setup_input(out, options.xml_file, + options.store? options.xml_file : options.output_file, + &error); + if (rc != pcmk_rc_ok) { + goto done; + } + + rc = pcmk__simulate(data_set, out, options.injections, options.flags, section_opts, + options.use_date, options.input_file, options.graph_file, + options.dot_file); + + done: + pcmk__output_and_clear_error(&error, NULL); + + /* There sure is a lot to free in options. */ + free(options.dot_file); + free(options.graph_file); + g_free(options.input_file); + g_free(options.output_file); + g_free(options.test_dir); + free(options.use_date); + free(options.xml_file); + + pcmk_free_injections(options.injections); + pcmk__free_arg_context(context); + g_strfreev(processed_args); + + if (data_set) { + pe_free_working_set(data_set); + } + + fflush(stderr); + + if (temp_shadow) { + unlink(temp_shadow); + free(temp_shadow); + } + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + } + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + + pcmk__unregister_formats(); + crm_exit(exit_code); +} diff --git a/tools/crm_standby.in b/tools/crm_standby.in new file mode 100755 index 0000000..0911b9d --- /dev/null +++ b/tools/crm_standby.in @@ -0,0 +1,158 @@ +#!@BASH_PATH@ +# +# Copyright 2009-2018 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +USAGE_TEXT="Usage: crm_standby [options] + +Common options: + --help Display this text, then exit + --version Display version information, then exit + -V, --verbose Specify multiple times to increase debug output + -q, --quiet Print only the standby status (if querying) + +Commands: + -G, --query Query the current value of standby mode (on/off) + -v, --update=VALUE Update the value of standby mode (on/off) + -D, --delete Let standby mode use default value + +Additional Options: + -N, --node=NODE Operate on the named node instead of the current one + -l, --lifetime=VALUE Until when should the setting take effect + (valid values: reboot, forever) + -i, --id=VALUE (Advanced) XML ID used to identify standby attribute" + +HELP_TEXT="crm_standby - Query, enable, or disable standby mode for a node + +Nodes in standby mode may not host cluster resources. + +$USAGE_TEXT +" + +exit_usage() { + if [ $# -gt 0 ]; then + echo "error:" "$@" >&2 + fi + echo + echo "$USAGE_TEXT" + exit 1 +} + +op="" +options="" +lifetime=0 +target="" + +SHORTOPTS_DEPRECATED="U:Q" +LONGOPTS_DEPRECATED="uname:,get-value,delete-attr,attr-value:,attr-id:" +SHORTOPTS="VqGv:DN:l:i:" +LONGOPTS="help,version,verbose,quiet,query,update:,delete,node:,lifetime:,id:" + +TEMP=$(@GETOPT_PATH@ -o ${SHORTOPTS}${SHORTOPTS_DEPRECATED} \ + --long ${LONGOPTS},${LONGOPTS_DEPRECATED} \ + -n crm_standby -- "$@") +if [ $? -ne 0 ]; then + exit_usage +fi + +eval set -- "$TEMP" # Quotes around $TEMP are essential + +while true ; do + case "$1" in + --help) + echo "$HELP_TEXT" + exit 0 + ;; + --version) + crm_attribute --version + exit 0 + ;; + -q|--quiet|-V|--verbose|-Q) + options="$options $1" + shift + ;; + -N|--node|-U|--uname) + target="$2" + shift + shift + ;; + -G|--query|--get-value) + options="$options --query" + op=g + shift + ;; + -v|--update|--attr-value) + options="$options --update $2" + op=u + shift + shift + ;; + -D|--delete|--delete-attr) + options="$options --delete" + op=d + shift + ;; + -l|--lifetime) + options="$options --lifetime $2" + lifetime=1 + shift + shift + ;; + -i|--id|--attr-id) + options="$options --id $2" + shift + shift + ;; + --) + shift + break + ;; + *) + exit_usage "unknown option '$1'" + ;; + esac +done + +# It's important to call cluster commands only after arguments are processed, +# so --version and --help work without problems even if those commands don't. +if [ "$target" = "" ]; then + target=$(crm_node -n) +fi + +options="-N $target -n standby $options" +if [ x$op = x ]; then + options="$options -G"; op=g +fi + +# If the user didn't explicitly specify a lifetime ... +if [ $lifetime -eq 0 ]; then + case $op in + g) + # For query, report the forever entry if one exists, otherwise + # report the reboot entry if one exists, otherwise report off. + crm_attribute $options -l forever >/dev/null 2>&1 + if [ $? -eq 0 ]; then + options="$options -l forever" + else + options="$options -l reboot -d off" + fi + ;; + u) + # For update, default to updating the forever entry. + options="$options -l forever" + ;; + d) + # For delete, default to deleting both forever and reboot entries. + crm_attribute $options -l forever + crm_attribute $options -l reboot + exit 0 + ;; + esac +fi + +crm_attribute $options diff --git a/tools/crm_ticket.8.inc b/tools/crm_ticket.8.inc new file mode 100644 index 0000000..5ae5124 --- /dev/null +++ b/tools/crm_ticket.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crm_ticket | [options] + +/and deleted./ +.SH OPTIONS diff --git a/tools/crm_ticket.c b/tools/crm_ticket.c new file mode 100644 index 0000000..c451e8a --- /dev/null +++ b/tools/crm_ticket.c @@ -0,0 +1,1007 @@ +/* + * Copyright 2012-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include + +#include + +#include +#include +#include + +#include +#include +#include +#include + +#include +#include +#include +#include + +#include +#include +#include +#include + +#include + +GError *error = NULL; + +#define SUMMARY "Perform tasks related to cluster tickets\n\n" \ + "Allows ticket attributes to be queried, modified and deleted." + +struct { + gchar *attr_default; + gchar *attr_id; + char *attr_name; + char *attr_value; + gboolean force; + char *get_attr_name; + gboolean quiet; + gchar *set_name; + char ticket_cmd; + gchar *ticket_id; + gchar *xml_file; +} options = { + .ticket_cmd = 'S' +}; + +GList *attr_delete; +GHashTable *attr_set; +bool modified = false; +int cib_options = cib_sync_call; + +#define INDENT " " + +static gboolean +attr_value_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&options.attr_value, optarg); + + if (!options.attr_name || !options.attr_value) { + return TRUE; + } + + g_hash_table_insert(attr_set, strdup(options.attr_name), strdup(options.attr_value)); + pcmk__str_update(&options.attr_name, NULL); + pcmk__str_update(&options.attr_value, NULL); + + modified = true; + + return TRUE; +} + +static gboolean +command_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (pcmk__str_any_of(option_name, "--info", "-l", NULL)) { + options.ticket_cmd = 'l'; + } else if (pcmk__str_any_of(option_name, "--details", "-L", NULL)) { + options.ticket_cmd = 'L'; + } else if (pcmk__str_any_of(option_name, "--raw", "-w", NULL)) { + options.ticket_cmd = 'w'; + } else if (pcmk__str_any_of(option_name, "--query-xml", "-q", NULL)) { + options.ticket_cmd = 'q'; + } else if (pcmk__str_any_of(option_name, "--constraints", "-c", NULL)) { + options.ticket_cmd = 'c'; + } else if (pcmk__str_any_of(option_name, "--cleanup", "-C", NULL)) { + options.ticket_cmd = 'C'; + } + + return TRUE; +} + +static gboolean +delete_attr_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + attr_delete = g_list_append(attr_delete, strdup(optarg)); + modified = true; + return TRUE; +} + +static gboolean +get_attr_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&options.get_attr_name, optarg); + options.ticket_cmd = 'G'; + return TRUE; +} + +static gboolean +grant_standby_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + if (pcmk__str_any_of(option_name, "--grant", "-g", NULL)) { + g_hash_table_insert(attr_set, strdup("granted"), strdup("true")); + modified = true; + } else if (pcmk__str_any_of(option_name, "--revoke", "-r", NULL)) { + g_hash_table_insert(attr_set, strdup("granted"), strdup("false")); + modified = true; + } else if (pcmk__str_any_of(option_name, "--standby", "-s", NULL)) { + g_hash_table_insert(attr_set, strdup("standby"), strdup("true")); + modified = true; + } else if (pcmk__str_any_of(option_name, "--activate", "-a", NULL)) { + g_hash_table_insert(attr_set, strdup("standby"), strdup("false")); + modified = true; + } + + return TRUE; +} + +static gboolean +set_attr_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **err) { + pcmk__str_update(&options.attr_name, optarg); + + if (!options.attr_name || !options.attr_value) { + return TRUE; + } + + g_hash_table_insert(attr_set, strdup(options.attr_name), strdup(options.attr_value)); + pcmk__str_update(&options.attr_name, NULL); + pcmk__str_update(&options.attr_value, NULL); + + modified = true; + + return TRUE; +} + +static GOptionEntry query_entries[] = { + { "info", 'l', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the information of ticket(s)", + NULL }, + + { "details", 'L', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the details of ticket(s)", + NULL }, + + { "raw", 'w', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the IDs of ticket(s)", + NULL }, + + { "query-xml", 'q', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Query the XML of ticket(s)", + NULL }, + + { "constraints", 'c', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the rsc_ticket constraints that apply to ticket(s)", + NULL }, + + { NULL } +}; + +static GOptionEntry command_entries[] = { + { "grant", 'g', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, grant_standby_cb, + "Grant a ticket to this cluster site", + NULL }, + + { "revoke", 'r', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, grant_standby_cb, + "Revoke a ticket from this cluster site", + NULL }, + + { "standby", 's', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, grant_standby_cb, + "Tell this cluster site this ticket is standby", + NULL }, + + { "activate", 'a', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, grant_standby_cb, + "Tell this cluster site this ticket is active", + NULL }, + + { NULL } +}; + +static GOptionEntry advanced_entries[] = { + { "get-attr", 'G', 0, G_OPTION_ARG_CALLBACK, get_attr_cb, + "Display the named attribute for a ticket", + "ATTRIBUTE" }, + + { "set-attr", 'S', 0, G_OPTION_ARG_CALLBACK, set_attr_cb, + "Set the named attribute for a ticket", + "ATTRIBUTE" }, + + { "delete-attr", 'D', 0, G_OPTION_ARG_CALLBACK, delete_attr_cb, + "Delete the named attribute for a ticket", + "ATTRIBUTE" }, + + { "cleanup", 'C', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Delete all state of a ticket at this cluster site", + NULL }, + + { NULL} +}; + +static GOptionEntry addl_entries[] = { + { "attr-value", 'v', 0, G_OPTION_ARG_CALLBACK, attr_value_cb, + "Attribute value to use with -S", + "VALUE" }, + + { "default", 'd', 0, G_OPTION_ARG_STRING, &options.attr_default, + "(Advanced) Default attribute value to display if none is found\n" + INDENT "(for use with -G)", + "VALUE" }, + + { "force", 'f', 0, G_OPTION_ARG_NONE, &options.force, + "(Advanced) Force the action to be performed", + NULL }, + + { "ticket", 't', 0, G_OPTION_ARG_STRING, &options.ticket_id, + "Ticket ID", + "ID" }, + + { "xml-file", 'x', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_STRING, &options.xml_file, + NULL, + NULL }, + + { NULL } +}; + +static GOptionEntry deprecated_entries[] = { + { "set-name", 'n', 0, G_OPTION_ARG_STRING, &options.set_name, + "(Advanced) ID of the instance_attributes object to change", + "ID" }, + + { "nvpair", 'i', 0, G_OPTION_ARG_STRING, &options.attr_id, + "(Advanced) ID of the nvpair object to change/delete", + "ID" }, + + { "quiet", 'Q', 0, G_OPTION_ARG_NONE, &options.quiet, + "Print only the value on stdout", + NULL }, + + { NULL } +}; + +static pe_ticket_t * +find_ticket(gchar *ticket_id, pe_working_set_t * data_set) +{ + return g_hash_table_lookup(data_set->tickets, ticket_id); +} + +static void +print_date(time_t time) +{ + int lpc = 0; + char date_str[26]; + + asctime_r(localtime(&time), date_str); + for (; lpc < 26; lpc++) { + if (date_str[lpc] == '\n') { + date_str[lpc] = 0; + } + } + fprintf(stdout, "'%s'", date_str); +} + +static void +print_ticket(pe_ticket_t * ticket, bool raw, bool details) +{ + if (raw) { + fprintf(stdout, "%s\n", ticket->id); + return; + } + + fprintf(stdout, "%s\t%s %s", + ticket->id, ticket->granted ? "granted" : "revoked", + ticket->standby ? "[standby]" : " "); + + if (details && g_hash_table_size(ticket->state) > 0) { + GHashTableIter iter; + const char *name = NULL; + const char *value = NULL; + int lpc = 0; + + fprintf(stdout, " ("); + + g_hash_table_iter_init(&iter, ticket->state); + while (g_hash_table_iter_next(&iter, (void **)&name, (void **)&value)) { + if (lpc > 0) { + fprintf(stdout, ", "); + } + fprintf(stdout, "%s=", name); + if (pcmk__str_any_of(name, "last-granted", "expires", NULL)) { + long long time_ll; + + pcmk__scan_ll(value, &time_ll, 0); + print_date((time_t) time_ll); + } else { + fprintf(stdout, "%s", value); + } + lpc++; + } + + fprintf(stdout, ")\n"); + + } else { + if (ticket->last_granted > -1) { + fprintf(stdout, " last-granted="); + print_date(ticket->last_granted); + } + fprintf(stdout, "\n"); + } + + return; +} + +static void +print_ticket_list(pe_working_set_t * data_set, bool raw, bool details) +{ + GHashTableIter iter; + pe_ticket_t *ticket = NULL; + + g_hash_table_iter_init(&iter, data_set->tickets); + + while (g_hash_table_iter_next(&iter, NULL, (void **)&ticket)) { + print_ticket(ticket, raw, details); + } +} + +static int +find_ticket_state(cib_t * the_cib, gchar *ticket_id, xmlNode ** ticket_state_xml) +{ + int rc = pcmk_rc_ok; + xmlNode *xml_search = NULL; + + GString *xpath = NULL; + + CRM_ASSERT(ticket_state_xml != NULL); + *ticket_state_xml = NULL; + + xpath = g_string_sized_new(1024); + g_string_append(xpath, + "/" XML_TAG_CIB "/" XML_CIB_TAG_STATUS + "/" XML_CIB_TAG_TICKETS); + + if (ticket_id != NULL) { + pcmk__g_strcat(xpath, + "/" XML_CIB_TAG_TICKET_STATE + "[@" XML_ATTR_ID "=\"", ticket_id, "\"]", NULL); + } + + rc = the_cib->cmds->query(the_cib, (const char *) xpath->str, &xml_search, + cib_sync_call | cib_scope_local | cib_xpath); + rc = pcmk_legacy2rc(rc); + g_string_free(xpath, TRUE); + + if (rc != pcmk_rc_ok) { + return rc; + } + + crm_log_xml_debug(xml_search, "Match"); + if (xml_has_children(xml_search)) { + if (ticket_id) { + fprintf(stdout, "Multiple ticket_states match ticket_id=%s\n", ticket_id); + } + *ticket_state_xml = xml_search; + } else { + *ticket_state_xml = xml_search; + } + return rc; +} + +static int +find_ticket_constraints(cib_t * the_cib, gchar *ticket_id, xmlNode ** ticket_cons_xml) +{ + int rc = pcmk_rc_ok; + xmlNode *xml_search = NULL; + + GString *xpath = NULL; + const char *xpath_base = NULL; + + CRM_ASSERT(ticket_cons_xml != NULL); + *ticket_cons_xml = NULL; + + xpath_base = pcmk_cib_xpath_for(XML_CIB_TAG_CONSTRAINTS); + if (xpath_base == NULL) { + crm_err(XML_CIB_TAG_CONSTRAINTS " CIB element not known (bug?)"); + return -ENOMSG; + } + + xpath = g_string_sized_new(1024); + pcmk__g_strcat(xpath, xpath_base, "/" XML_CONS_TAG_RSC_TICKET, NULL); + + if (ticket_id != NULL) { + pcmk__g_strcat(xpath, + "[@" XML_TICKET_ATTR_TICKET "=\"", ticket_id, "\"]", + NULL); + } + + rc = the_cib->cmds->query(the_cib, (const char *) xpath->str, &xml_search, + cib_sync_call | cib_scope_local | cib_xpath); + rc = pcmk_legacy2rc(rc); + g_string_free(xpath, TRUE); + + if (rc != pcmk_rc_ok) { + return rc; + } + + crm_log_xml_debug(xml_search, "Match"); + *ticket_cons_xml = xml_search; + + return rc; +} + +static int +dump_ticket_xml(cib_t * the_cib, gchar *ticket_id) +{ + int rc = pcmk_rc_ok; + xmlNode *state_xml = NULL; + + rc = find_ticket_state(the_cib, ticket_id, &state_xml); + + if (state_xml == NULL) { + return rc; + } + + fprintf(stdout, "State XML:\n"); + if (state_xml) { + char *state_xml_str = NULL; + + state_xml_str = dump_xml_formatted(state_xml); + fprintf(stdout, "\n%s", pcmk__s(state_xml_str, "\n")); + free_xml(state_xml); + free(state_xml_str); + } + + return rc; +} + +static int +dump_constraints(cib_t * the_cib, gchar *ticket_id) +{ + int rc = pcmk_rc_ok; + xmlNode *cons_xml = NULL; + char *cons_xml_str = NULL; + + rc = find_ticket_constraints(the_cib, ticket_id, &cons_xml); + + if (cons_xml == NULL) { + return rc; + } + + cons_xml_str = dump_xml_formatted(cons_xml); + fprintf(stdout, "Constraints XML:\n\n%s", + pcmk__s(cons_xml_str, "\n")); + free_xml(cons_xml); + free(cons_xml_str); + + return rc; +} + +static int +get_ticket_state_attr(gchar *ticket_id, const char *attr_name, const char **attr_value, + pe_working_set_t * data_set) +{ + pe_ticket_t *ticket = NULL; + + CRM_ASSERT(attr_value != NULL); + *attr_value = NULL; + + ticket = g_hash_table_lookup(data_set->tickets, ticket_id); + if (ticket == NULL) { + return ENXIO; + } + + *attr_value = g_hash_table_lookup(ticket->state, attr_name); + if (*attr_value == NULL) { + return ENXIO; + } + + return pcmk_rc_ok; +} + +static void +ticket_warning(gchar *ticket_id, const char *action) +{ + GString *warning = g_string_sized_new(1024); + const char *word = NULL; + + CRM_ASSERT(action != NULL); + + if (strcmp(action, "grant") == 0) { + pcmk__g_strcat(warning, + "This command cannot help you verify whether '", + ticket_id, + "' has been already granted elsewhere.\n", NULL); + word = "to"; + + } else { + pcmk__g_strcat(warning, + "Revoking '", ticket_id, "' can trigger the specified " + "'loss-policy'(s) relating to '", ticket_id, "'.\n\n" + "You can check that with:\n" + "crm_ticket --ticket ", ticket_id, " --constraints\n\n" + "Otherwise before revoking '", ticket_id, "', " + "you may want to make '", ticket_id, "' " + "standby with:\n" + "crm_ticket --ticket ", ticket_id, " --standby\n\n", + NULL); + word = "from"; + } + + pcmk__g_strcat(warning, + "If you really want to ", action, " '", ticket_id, "' ", + word, " this site now, and you know what you are doing,\n" + "please specify --force.", NULL); + + fprintf(stdout, "%s\n", (const char *) warning->str); + + g_string_free(warning, TRUE); +} + +static bool +allow_modification(gchar *ticket_id) +{ + const char *value = NULL; + GList *list_iter = NULL; + + if (options.force) { + return true; + } + + if (g_hash_table_lookup_extended(attr_set, "granted", NULL, (gpointer *) & value)) { + if (crm_is_true(value)) { + ticket_warning(ticket_id, "grant"); + return false; + + } else { + ticket_warning(ticket_id, "revoke"); + return false; + } + } + + for(list_iter = attr_delete; list_iter; list_iter = list_iter->next) { + const char *key = (const char *)list_iter->data; + + if (pcmk__str_eq(key, "granted", pcmk__str_casei)) { + ticket_warning(ticket_id, "revoke"); + return false; + } + } + + return true; +} + +static int +modify_ticket_state(gchar * ticket_id, cib_t * cib, pe_working_set_t * data_set) +{ + int rc = pcmk_rc_ok; + xmlNode *xml_top = NULL; + xmlNode *ticket_state_xml = NULL; + bool found = false; + + GList *list_iter = NULL; + GHashTableIter hash_iter; + + char *key = NULL; + char *value = NULL; + + pe_ticket_t *ticket = NULL; + + rc = find_ticket_state(cib, ticket_id, &ticket_state_xml); + if (rc == pcmk_rc_ok) { + crm_debug("Found a match state for ticket: id=%s", ticket_id); + xml_top = ticket_state_xml; + found = true; + + } else if (rc != ENXIO) { + return rc; + + } else if (g_hash_table_size(attr_set) == 0){ + return pcmk_rc_ok; + + } else { + xmlNode *xml_obj = NULL; + + xml_top = create_xml_node(NULL, XML_CIB_TAG_STATUS); + xml_obj = create_xml_node(xml_top, XML_CIB_TAG_TICKETS); + ticket_state_xml = create_xml_node(xml_obj, XML_CIB_TAG_TICKET_STATE); + crm_xml_add(ticket_state_xml, XML_ATTR_ID, ticket_id); + } + + for(list_iter = attr_delete; list_iter; list_iter = list_iter->next) { + const char *key = (const char *)list_iter->data; + xml_remove_prop(ticket_state_xml, key); + } + + ticket = find_ticket(ticket_id, data_set); + + g_hash_table_iter_init(&hash_iter, attr_set); + while (g_hash_table_iter_next(&hash_iter, (gpointer *) & key, (gpointer *) & value)) { + crm_xml_add(ticket_state_xml, key, value); + + if (pcmk__str_eq(key, "granted", pcmk__str_casei) + && (ticket == NULL || ticket->granted == FALSE) + && crm_is_true(value)) { + + char *now = pcmk__ttoa(time(NULL)); + + crm_xml_add(ticket_state_xml, "last-granted", now); + free(now); + } + } + + if (found && (attr_delete != NULL)) { + crm_log_xml_debug(xml_top, "Replace"); + rc = cib->cmds->replace(cib, XML_CIB_TAG_STATUS, ticket_state_xml, cib_options); + rc = pcmk_legacy2rc(rc); + + } else { + crm_log_xml_debug(xml_top, "Update"); + rc = cib->cmds->modify(cib, XML_CIB_TAG_STATUS, xml_top, cib_options); + rc = pcmk_legacy2rc(rc); + } + + free_xml(xml_top); + return rc; +} + +static int +delete_ticket_state(gchar *ticket_id, cib_t * cib) +{ + xmlNode *ticket_state_xml = NULL; + + int rc = pcmk_rc_ok; + + rc = find_ticket_state(cib, ticket_id, &ticket_state_xml); + + if (rc == ENXIO) { + return pcmk_rc_ok; + + } else if (rc != pcmk_rc_ok) { + return rc; + } + + crm_log_xml_debug(ticket_state_xml, "Delete"); + + rc = cib->cmds->remove(cib, XML_CIB_TAG_STATUS, ticket_state_xml, cib_options); + rc = pcmk_legacy2rc(rc); + + if (rc == pcmk_rc_ok) { + fprintf(stdout, "Cleaned up %s\n", ticket_id); + } + + free_xml(ticket_state_xml); + return rc; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args) { + GOptionContext *context = NULL; + + const char *description = "Examples:\n\n" + "Display the info of tickets:\n\n" + "\tcrm_ticket --info\n\n" + "Display the detailed info of tickets:\n\n" + "\tcrm_ticket --details\n\n" + "Display the XML of 'ticketA':\n\n" + "\tcrm_ticket --ticket ticketA --query-xml\n\n" + "Display the rsc_ticket constraints that apply to 'ticketA':\n\n" + "\tcrm_ticket --ticket ticketA --constraints\n\n" + "Grant 'ticketA' to this cluster site:\n\n" + "\tcrm_ticket --ticket ticketA --grant\n\n" + "Revoke 'ticketA' from this cluster site:\n\n" + "\tcrm_ticket --ticket ticketA --revoke\n\n" + "Make 'ticketA' standby (the cluster site will treat a granted\n" + "'ticketA' as 'standby', and the dependent resources will be\n" + "stopped or demoted gracefully without triggering loss-policies):\n\n" + "\tcrm_ticket --ticket ticketA --standby\n\n" + "Activate 'ticketA' from being standby:\n\n" + "\tcrm_ticket --ticket ticketA --activate\n\n" + "Get the value of the 'granted' attribute for 'ticketA':\n\n" + "\tcrm_ticket --ticket ticketA --get-attr granted\n\n" + "Set the value of the 'standby' attribute for 'ticketA':\n\n" + "\tcrm_ticket --ticket ticketA --set-attr standby --attr-value true\n\n" + "Delete the 'granted' attribute for 'ticketA':\n\n" + "\tcrm_ticket --ticket ticketA --delete-attr granted\n\n" + "Erase the operation history of 'ticketA' at this cluster site,\n" + "causing the cluster site to 'forget' the existing ticket state:\n\n" + "\tcrm_ticket --ticket ticketA --cleanup\n\n"; + + context = pcmk__build_arg_context(args, NULL, NULL, NULL); + g_option_context_set_description(context, description); + + pcmk__add_arg_group(context, "queries", "Queries:", + "Show queries", query_entries); + pcmk__add_arg_group(context, "commands", "Commands:", + "Show command options", command_entries); + pcmk__add_arg_group(context, "advanced", "Advanced Options:", + "Show advanced options", advanced_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + pcmk__add_arg_group(context, "deprecated", "Deprecated Options:", + "Show deprecated options", deprecated_entries); + + return context; +} + +int +main(int argc, char **argv) +{ + pe_working_set_t *data_set = NULL; + xmlNode *cib_xml_copy = NULL; + + cib_t *cib_conn = NULL; + crm_exit_t exit_code = CRM_EX_OK; + int rc = pcmk_rc_ok; + + pcmk__common_args_t *args = NULL; + GOptionContext *context = NULL; + gchar **processed_args = NULL; + + attr_set = pcmk__strkey_table(free, free); + attr_delete = NULL; + + args = pcmk__new_common_args(SUMMARY); + context = build_arg_context(args); + processed_args = pcmk__cmdline_preproc(argv, "dintvxCDGS"); + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_ticket", args->verbosity); + + if (args->version) { + g_strfreev(processed_args); + pcmk__free_arg_context(context); + /* FIXME: When crm_ticket is converted to use formatted output, this can go. */ + pcmk__cli_help('v'); + } + + data_set = pe_new_working_set(); + if (data_set == NULL) { + crm_perror(LOG_CRIT, "Could not allocate working set"); + exit_code = CRM_EX_OSERR; + goto done; + } + pe__set_working_set_flags(data_set, pe_flag_no_counts|pe_flag_no_compat); + + cib_conn = cib_new(); + if (cib_conn == NULL) { + exit_code = CRM_EX_DISCONNECT; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Could not connect to the CIB manager"); + goto done; + } + + rc = cib_conn->cmds->signon(cib_conn, crm_system_name, cib_command); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Could not connect to the CIB: %s", + pcmk_rc_str(rc)); + goto done; + } + + if (options.xml_file != NULL) { + cib_xml_copy = filename2xml(options.xml_file); + + } else { + rc = cib_conn->cmds->query(cib_conn, NULL, &cib_xml_copy, cib_scope_local | cib_sync_call); + rc = pcmk_legacy2rc(rc); + + if (rc != pcmk_rc_ok) { + exit_code = pcmk_rc2exitc(rc); + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Could not get local CIB: %s", + pcmk_rc_str(rc)); + goto done; + } + } + + if (!cli_config_update(&cib_xml_copy, NULL, FALSE)) { + exit_code = CRM_EX_CONFIG; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not update local CIB to latest schema version"); + goto done; + } + + data_set->input = cib_xml_copy; + data_set->now = crm_time_new(NULL); + + cluster_status(data_set); + + /* For recording the tickets that are referenced in rsc_ticket constraints + * but have never been granted yet. */ + pcmk__unpack_constraints(data_set); + + if (options.ticket_cmd == 'l' || options.ticket_cmd == 'L' || options.ticket_cmd == 'w') { + bool raw = false; + bool details = false; + + if (options.ticket_cmd == 'L') { + details = true; + } else if (options.ticket_cmd == 'w') { + raw = true; + } + + if (options.ticket_id) { + pe_ticket_t *ticket = find_ticket(options.ticket_id, data_set); + + if (ticket == NULL) { + exit_code = CRM_EX_NOSUCH; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "No such ticket '%s'", options.ticket_id); + goto done; + } + print_ticket(ticket, raw, details); + + } else { + print_ticket_list(data_set, raw, details); + } + + } else if (options.ticket_cmd == 'q') { + rc = dump_ticket_xml(cib_conn, options.ticket_id); + exit_code = pcmk_rc2exitc(rc); + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not query ticket XML: %s", pcmk_rc_str(rc)); + } + + } else if (options.ticket_cmd == 'c') { + rc = dump_constraints(cib_conn, options.ticket_id); + exit_code = pcmk_rc2exitc(rc); + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not show ticket constraints: %s", pcmk_rc_str(rc)); + } + + } else if (options.ticket_cmd == 'G') { + const char *value = NULL; + + if (options.ticket_id == NULL) { + exit_code = CRM_EX_NOSUCH; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply ticket ID with -t"); + goto done; + } + + rc = get_ticket_state_attr(options.ticket_id, options.get_attr_name, &value, data_set); + if (rc == pcmk_rc_ok) { + fprintf(stdout, "%s\n", value); + } else if (rc == ENXIO && options.attr_default) { + fprintf(stdout, "%s\n", options.attr_default); + rc = pcmk_rc_ok; + } + exit_code = pcmk_rc2exitc(rc); + + } else if (options.ticket_cmd == 'C') { + if (options.ticket_id == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply ticket ID with -t"); + goto done; + } + + if (options.force == FALSE) { + pe_ticket_t *ticket = NULL; + + ticket = find_ticket(options.ticket_id, data_set); + if (ticket == NULL) { + exit_code = CRM_EX_NOSUCH; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "No such ticket '%s'", options.ticket_id); + goto done; + } + + if (ticket->granted) { + ticket_warning(options.ticket_id, "revoke"); + exit_code = CRM_EX_INSUFFICIENT_PRIV; + goto done; + } + } + + rc = delete_ticket_state(options.ticket_id, cib_conn); + exit_code = pcmk_rc2exitc(rc); + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not clean up ticket: %s", pcmk_rc_str(rc)); + } + + } else if (modified) { + if (options.ticket_id == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply ticket ID with -t"); + goto done; + } + + if (options.attr_value + && (pcmk__str_empty(options.attr_name))) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply attribute name with -S for -v %s", options.attr_value); + goto done; + } + + if (options.attr_name + && (pcmk__str_empty(options.attr_value))) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply attribute value with -v for -S %s", options.attr_value); + goto done; + } + + if (!allow_modification(options.ticket_id)) { + exit_code = CRM_EX_INSUFFICIENT_PRIV; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Ticket modification not allowed"); + goto done; + } + + rc = modify_ticket_state(options.ticket_id, cib_conn, data_set); + exit_code = pcmk_rc2exitc(rc); + + if (rc != pcmk_rc_ok) { + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Could not modify ticket: %s", pcmk_rc_str(rc)); + } + + } else if (options.ticket_cmd == 'S') { + /* Correct usage was handled in the "if (modified)" block above, so + * this is just for reporting usage errors + */ + + if (pcmk__str_empty(options.attr_name)) { + // We only get here if ticket_cmd was left as default + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Must supply a command"); + goto done; + } + + if (options.ticket_id == NULL) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply ticket ID with -t"); + goto done; + } + + if (pcmk__str_empty(options.attr_value)) { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Must supply value with -v for -S %s", options.attr_name); + goto done; + } + + } else { + exit_code = CRM_EX_USAGE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Unknown command: %c", options.ticket_cmd); + } + + done: + if (attr_set) { + g_hash_table_destroy(attr_set); + } + attr_set = NULL; + + if (attr_delete) { + g_list_free_full(attr_delete, free); + } + attr_delete = NULL; + + pe_free_working_set(data_set); + data_set = NULL; + + cib__clean_up_connection(&cib_conn); + + g_strfreev(processed_args); + pcmk__free_arg_context(context); + g_free(options.attr_default); + g_free(options.attr_id); + free(options.attr_name); + free(options.attr_value); + free(options.get_attr_name); + g_free(options.set_name); + g_free(options.ticket_id); + g_free(options.xml_file); + + pcmk__output_and_clear_error(&error, NULL); + + crm_exit(exit_code); +} diff --git a/tools/crm_verify.8.inc b/tools/crm_verify.8.inc new file mode 100644 index 0000000..27b0a55 --- /dev/null +++ b/tools/crm_verify.8.inc @@ -0,0 +1,5 @@ +[=synopsis] +crm_verify [] + +/reported as warnings./ +.SH OPTIONS diff --git a/tools/crm_verify.c b/tools/crm_verify.c new file mode 100644 index 0000000..43b09da --- /dev/null +++ b/tools/crm_verify.c @@ -0,0 +1,285 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include +#include +#include +#include + +#include +#include +#include + +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include + +const char *SUMMARY = "Check a Pacemaker configuration for errors\n\n" + "Check the well-formedness of a complete Pacemaker XML configuration,\n" + "its conformance to the configured schema, and the presence of common\n" + "misconfigurations. Problems reported as errors must be fixed before the\n" + "cluster will work properly. It is left to the administrator to decide\n" + "whether to fix problems reported as warnings."; + +struct { + char *cib_save; + gboolean use_live_cib; + char *xml_file; + gboolean xml_stdin; + char *xml_string; +} options; + +static GOptionEntry data_entries[] = { + { "live-check", 'L', 0, G_OPTION_ARG_NONE, + &options.use_live_cib, "Check the configuration used by the running cluster", + NULL }, + { "xml-file", 'x', 0, G_OPTION_ARG_FILENAME, + &options.xml_file, "Check the configuration in the named file", + "FILE" }, + { "xml-pipe", 'p', 0, G_OPTION_ARG_NONE, + &options.xml_stdin, "Check the configuration piped in via stdin", + NULL }, + { "xml-text", 'X', 0, G_OPTION_ARG_STRING, + &options.xml_string, "Check the configuration in the supplied string", + "XML" }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "save-xml", 'S', G_OPTION_FLAG_NONE, G_OPTION_ARG_FILENAME, + &options.cib_save, "Save verified XML to named file (most useful with -L)", + "FILE" }, + + { NULL } +}; + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + const char *description = "Examples:\n\n" + "Check the consistency of the configuration in the running cluster:\n\n" + "\tcrm_verify --live-check\n\n" + "Check the consistency of the configuration in a given file and " + "produce verbose output:\n\n" + "\tcrm_verify --xml-file file.xml --verbose\n\n"; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + g_option_context_set_description(context, description); + + pcmk__add_arg_group(context, "data", "Data sources:", + "Show data options", data_entries); + pcmk__add_arg_group(context, "additional", "Additional options:", + "Show additional options", addl_entries); + + return context; +} + +int +main(int argc, char **argv) +{ + xmlNode *cib_object = NULL; + xmlNode *status = NULL; + + pe_working_set_t *data_set = NULL; + const char *xml_tag = NULL; + + int rc = pcmk_rc_ok; + crm_exit_t exit_code = CRM_EX_OK; + + GError *error = NULL; + + pcmk__output_t *out = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "xSX"); + GOptionContext *context = build_arg_context(args, &output_group); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crm_verify", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + if (args->version) { + out->version(out, false); + goto done; + } + + pcmk__register_lib_messages(out); + + crm_info("=#=#=#=#= Getting XML =#=#=#=#="); + + if (options.use_live_cib) { + crm_info("Reading XML from: live cluster"); + rc = cib__signon_query(out, NULL, &cib_object); + + if (rc != pcmk_rc_ok) { + // cib__signon_query() outputs any relevant error + goto done; + } + + } else if (options.xml_file != NULL) { + cib_object = filename2xml(options.xml_file); + if (cib_object == NULL) { + rc = ENODATA; + g_set_error(&error, PCMK__RC_ERROR, rc, "Couldn't parse input file: %s", options.xml_file); + goto done; + } + + } else if (options.xml_string != NULL) { + cib_object = string2xml(options.xml_string); + if (cib_object == NULL) { + rc = ENODATA; + g_set_error(&error, PCMK__RC_ERROR, rc, "Couldn't parse input string: %s", options.xml_string); + goto done; + } + } else if (options.xml_stdin) { + cib_object = stdin2xml(); + if (cib_object == NULL) { + rc = ENODATA; + g_set_error(&error, PCMK__RC_ERROR, rc, "Couldn't parse input from STDIN."); + goto done; + } + + } else { + rc = ENODATA; + g_set_error(&error, PCMK__RC_ERROR, rc, + "No configuration source specified. Use --help for usage information."); + goto done; + } + + xml_tag = crm_element_name(cib_object); + if (!pcmk__str_eq(xml_tag, XML_TAG_CIB, pcmk__str_casei)) { + rc = EBADMSG; + g_set_error(&error, PCMK__RC_ERROR, rc, + "This tool can only check complete configurations (i.e. those starting with )."); + goto done; + } + + if (options.cib_save != NULL) { + write_xml_file(cib_object, options.cib_save, FALSE); + } + + status = pcmk_find_cib_element(cib_object, XML_CIB_TAG_STATUS); + if (status == NULL) { + create_xml_node(cib_object, XML_CIB_TAG_STATUS); + } + + if (validate_xml(cib_object, NULL, FALSE) == FALSE) { + pcmk__config_err("CIB did not pass schema validation"); + free_xml(cib_object); + cib_object = NULL; + + } else if (cli_config_update(&cib_object, NULL, FALSE) == FALSE) { + crm_config_error = TRUE; + free_xml(cib_object); + cib_object = NULL; + out->err(out, "The cluster will NOT be able to use this configuration.\n" + "Please manually update the configuration to conform to the %s syntax.", + xml_latest_schema()); + } + + data_set = pe_new_working_set(); + if (data_set == NULL) { + rc = errno; + crm_perror(LOG_CRIT, "Unable to allocate working set"); + goto done; + } + data_set->priv = out; + + /* Process the configuration to set crm_config_error/crm_config_warning. + * + * @TODO Some parts of the configuration are unpacked only when needed (for + * example, action configuration), so we aren't necessarily checking those. + */ + if (cib_object != NULL) { + unsigned long long flags = pe_flag_no_counts|pe_flag_no_compat; + + if ((status == NULL) && !options.use_live_cib) { + // No status available, so do minimal checks + flags |= pe_flag_check_config; + } + pcmk__schedule_actions(cib_object, flags, data_set); + } + pe_free_working_set(data_set); + + if (crm_config_error) { + rc = pcmk_rc_schema_validation; + + if (args->verbosity > 0) { + g_set_error(&error, PCMK__RC_ERROR, rc, + "Errors found during check: config not valid"); + } else { + g_set_error(&error, PCMK__RC_ERROR, rc, + "Errors found during check: config not valid\n-V may provide more details"); + } + + } else if (crm_config_warning) { + rc = pcmk_rc_schema_validation; + + if (args->verbosity > 0) { + g_set_error(&error, PCMK__RC_ERROR, rc, + "Warnings found during check: config may not be valid"); + } else { + g_set_error(&error, PCMK__RC_ERROR, rc, + "Warnings found during check: config may not be valid\n-V may provide more details"); + } + } + + done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + free(options.cib_save); + free(options.xml_file); + free(options.xml_string); + + if (exit_code == CRM_EX_OK) { + exit_code = pcmk_rc2exitc(rc); + } + + pcmk__output_and_clear_error(&error, NULL); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + + pcmk__unregister_formats(); + crm_exit(exit_code); +} diff --git a/tools/crmadmin.8.inc b/tools/crmadmin.8.inc new file mode 100644 index 0000000..ab5efbe --- /dev/null +++ b/tools/crmadmin.8.inc @@ -0,0 +1,5 @@ +[synopsis] +crmadmin [options] [node] + +/the Pacemaker controller/ +.SH OPTIONS diff --git a/tools/crmadmin.c b/tools/crmadmin.c new file mode 100644 index 0000000..0b400ae --- /dev/null +++ b/tools/crmadmin.c @@ -0,0 +1,275 @@ +/* + * Copyright 2004-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include // atoi() + +#include // gboolean, GMainLoop, etc. +#include // xmlNode + +#include + +#include +#include + +#define SUMMARY "query and manage the Pacemaker controller" + +static enum { + cmd_none, + cmd_health, + cmd_whois_dc, + cmd_list_nodes, + cmd_pacemakerd_health, +} command = cmd_none; + +struct { + gboolean health; + gint timeout; + char *optarg; + char *ipc_name; + gboolean bash_export; +} options = { + .optarg = NULL, + .ipc_name = NULL, + .bash_export = FALSE +}; + +gboolean command_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); + +static GOptionEntry command_options[] = { + { "status", 'S', 0, G_OPTION_ARG_CALLBACK, command_cb, + "Display the status of the specified node." + "\n Result is state of node's internal finite state" + "\n machine, which can be useful for debugging", + "NODE" + }, + { "pacemakerd", 'P', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the status of local pacemakerd." + "\n Result is the state of the sub-daemons watched" + "\n by pacemakerd.", + NULL + }, + { "dc_lookup", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the uname of the node co-ordinating the cluster." + "\n This is an internal detail rarely useful to" + "\n administrators except when deciding on which" + "\n node to examine the logs.", + NULL + }, + { "nodes", 'N', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, command_cb, + "Display the uname of all member nodes [optionally filtered by type (comma-separated)]" + "\n Types: all (default), cluster, guest, remote", + "TYPE" + }, + { "health", 'H', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &options.health, + NULL, + NULL + }, + + { NULL } +}; + +static GOptionEntry additional_options[] = { + { "timeout", 't', 0, G_OPTION_ARG_CALLBACK, command_cb, + "Time to wait before declaring the operation" + "\n failed", + "TIMESPEC" + }, + { "bash-export", 'B', 0, G_OPTION_ARG_NONE, &options.bash_export, + "Display nodes as shell commands of the form 'export uname=uuid'" + "\n (valid with -N/--nodes)", + }, + { "ipc-name", 'i', 0, G_OPTION_ARG_STRING, &options.ipc_name, + "Name to use for ipc instead of 'crmadmin' (with -P/--pacemakerd).", + "NAME" + }, + + { NULL } +}; + +gboolean +command_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) +{ + if (!strcmp(option_name, "--status") || !strcmp(option_name, "-S")) { + command = cmd_health; + crm_trace("Option %c => %s", 'S', optarg); + } + + if (!strcmp(option_name, "--pacemakerd") || !strcmp(option_name, "-P")) { + command = cmd_pacemakerd_health; + } + + if (!strcmp(option_name, "--dc_lookup") || !strcmp(option_name, "-D")) { + command = cmd_whois_dc; + } + + if (!strcmp(option_name, "--nodes") || !strcmp(option_name, "-N")) { + command = cmd_list_nodes; + } + + if (!strcmp(option_name, "--timeout") || !strcmp(option_name, "-t")) { + options.timeout = crm_parse_interval_spec(optarg); + if (errno == EINVAL) { + return FALSE; + } + return TRUE; + } + + pcmk__str_update(&options.optarg, optarg); + return TRUE; +} + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + const char *description = "Notes:\n\n" + "Time Specification:\n\n" + "The TIMESPEC in any command line option can be specified in many different\n" + "formats. It can be just an integer number of seconds, a number plus units\n" + "(ms/msec/us/usec/s/sec/m/min/h/hr), or an ISO 8601 period specification.\n\n" + "Report bugs to " PCMK__BUG_URL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'q', 0, G_OPTION_ARG_NONE, &(args->quiet), + "Display only the essential query information", + NULL }, + + { NULL } + }; + + context = pcmk__build_arg_context(args, "text (default), xml", group, NULL); + g_option_context_set_description(context, description); + + /* Add the -q option, which cannot be part of the globally supported options + * because some tools use that flag for something else. + */ + pcmk__add_main_args(context, extra_prog_entries); + + pcmk__add_arg_group(context, "command", "Commands:", + "Show command options", command_options); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", additional_options); + return context; +} + +int +main(int argc, char **argv) +{ + crm_exit_t exit_code = CRM_EX_OK; + int rc; + int argerr = 0; + + GError *error = NULL; + + pcmk__output_t *out = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "itKNS"); + GOptionContext *context = build_arg_context(args, &output_group); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("crmadmin", args->verbosity); + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + pcmk__register_lib_messages(out); + + out->quiet = args->quiet; + + if (!pcmk__force_args(context, &error, "%s --xml-simple-list --xml-substitute", g_get_prgname())) { + goto done; + } + + if (args->version) { + out->version(out, false); + goto done; + } + + if (options.health) { + out->err(out, "Cluster-wide health option not supported"); + ++argerr; + } + + if (command == cmd_none) { + out->err(out, "error: Must specify a command option"); + ++argerr; + } + + if (argerr) { + char *help = g_option_context_get_help(context, TRUE, NULL); + + out->err(out, "%s", help); + g_free(help); + exit_code = CRM_EX_USAGE; + goto done; + } + + switch (command) { + case cmd_health: + rc = pcmk__controller_status(out, options.optarg, + (unsigned int) options.timeout); + break; + case cmd_pacemakerd_health: + rc = pcmk__pacemakerd_status(out, options.ipc_name, + (unsigned int) options.timeout, true, + NULL); + break; + case cmd_list_nodes: + rc = pcmk__list_nodes(out, options.optarg, options.bash_export); + break; + case cmd_whois_dc: + rc = pcmk__designated_controller(out, + (unsigned int) options.timeout); + break; + case cmd_none: + rc = pcmk_rc_error; + break; + } + + if (rc != pcmk_rc_ok) { + out->err(out, "error: Command failed: %s", pcmk_rc_str(rc)); + exit_code = pcmk_rc2exitc(rc); + } + +done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + pcmk__unregister_formats(); + return crm_exit(exit_code); +} diff --git a/tools/fix-manpages b/tools/fix-manpages new file mode 100644 index 0000000..f1f6f0d --- /dev/null +++ b/tools/fix-manpages @@ -0,0 +1,33 @@ +# Because tools/*.8.inc include a synopsis, the following line removes +# a redundant Usage: header from the man page and the couple lines after +# it. +/.SS "Usage:"/,+3d + +# The tools/*.8.inc files also include some additional section headers +# on a per-tool basis. These section headers will get printed out as +# .SH lines, but then the header from the --help-all output will also +# get turned into groff. For instance, the following will be in the +# man page for NOTES: +# +# .SH NOTES +# .PP +# Notes: +# .PP +# +# The following block looks for any of those additional headers. The +# 'n' command puts the next line in the pattern space, the two 'N' +# commands append the next two lines, and then the 'd' command deletes +# them. So basically, this just deletes +# +# .PP +# Notes: +# .PP +# +# This leaves the --help-all output looking good and removes redundant +# stuff from the man page. Feel free to add additional headers here. +# Not all tools will have all headers. +/.SH NOTES\|.SH INTERACTIVE USE\|.SH OPERATION SPECIFICATION\|.SH OUTPUT CONTROL\|.SH TIME SPECIFICATION/{ n +N +N +d +} diff --git a/tools/iso8601.8.inc b/tools/iso8601.8.inc new file mode 100644 index 0000000..faa7f76 --- /dev/null +++ b/tools/iso8601.8.inc @@ -0,0 +1,5 @@ +[synopsis] +iso8601 [options] + +/dates and times/ +.SH OPTIONS diff --git a/tools/iso8601.c b/tools/iso8601.c new file mode 100644 index 0000000..e53bca0 --- /dev/null +++ b/tools/iso8601.c @@ -0,0 +1,282 @@ +/* + * Copyright 2005-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include +#include +#include +#include +#include /* CRM_ASSERT */ +#include + +#define SUMMARY "Display and parse ISO 8601 dates and times" + +struct { + char *date_time_s; + gchar *duration_s; + gchar *expected_s; + gchar *period_s; + int print_options; +} options; + +#define INDENT " " + +static gboolean +date_now_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "--now", "-n", NULL)) { + pcmk__str_update(&options.date_time_s, "now"); + } else if (pcmk__str_any_of(option_name, "--date", "-d", NULL)) { + pcmk__str_update(&options.date_time_s, optarg); + } + + return TRUE; +} + +static gboolean +modifier_cb(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + if (pcmk__str_any_of(option_name, "--seconds", "-s", NULL)) { + options.print_options |= crm_time_seconds; + } else if (pcmk__str_any_of(option_name, "--epoch", "-S", NULL)) { + options.print_options |= crm_time_epoch; + } else if (pcmk__str_any_of(option_name, "--local", "-L", NULL)) { + options.print_options |= crm_time_log_with_timezone; + } else if (pcmk__str_any_of(option_name, "--ordinal", "-O", NULL)) { + options.print_options |= crm_time_ordinal; + } else if (pcmk__str_any_of(option_name, "--week", "-W", NULL)) { + options.print_options |= crm_time_weeks; + } + + return TRUE; +} + +static GOptionEntry command_entries[] = { + { "now", 'n', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, date_now_cb, + "Display the current date/time", + NULL }, + + { "date", 'd', 0, G_OPTION_ARG_CALLBACK, date_now_cb, + "Parse an ISO 8601 date/time (for example,\n" + INDENT "'2019-09-24 00:30:00 +01:00' or '2019-040')", + "DATE" }, + + { "period", 'p', 0, G_OPTION_ARG_STRING, &options.period_s, + "Parse an ISO 8601 period (interval) with start time (for example,\n" + INDENT "'2005-040/2005-043')", + "PERIOD" }, + + { "duration", 'D', 0, G_OPTION_ARG_STRING, &options.duration_s, + "Parse an ISO 8601 duration (for example, 'P1M')", + "DURATION" }, + + { "expected", 'E', 0, G_OPTION_ARG_STRING, &options.expected_s, + "Exit with error status if result does not match this text.\n" + INDENT "Requires: -n or -d", + "TEXT" }, + + { NULL } +}; + +static GOptionEntry modifier_entries[] = { + { "seconds", 's', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, modifier_cb, + "Show result as a seconds since 0000-001 00:00:00Z", + NULL }, + + { "epoch", 'S', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, modifier_cb, + "Show result as a seconds since EPOCH (1970-001 00:00:00Z)", + NULL }, + + { "local", 'L', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, modifier_cb, + "Show result as a 'local' date/time", + NULL }, + + { "ordinal", 'O', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, modifier_cb, + "Show result as an 'ordinal' date/time", + NULL }, + + { "week", 'W', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, modifier_cb, + "Show result as an 'calendar week' date/time", + NULL }, + + { NULL } +}; + +static void +log_time_period(int log_level, crm_time_period_t * dtp, int flags) +{ + char *start = crm_time_as_string(dtp->start, flags); + char *end = crm_time_as_string(dtp->end, flags); + + CRM_ASSERT(start != NULL && end != NULL); + do_crm_log(log_level, "Period: %s to %s", start, end); + free(start); + free(end); +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args) { + GOptionContext *context = NULL; + + const char *description = "For more information on the ISO 8601 standard, see " \ + "https://en.wikipedia.org/wiki/ISO_8601"; + + context = pcmk__build_arg_context(args, NULL, NULL, NULL); + g_option_context_set_description(context, description); + + pcmk__add_arg_group(context, "commands", "Commands:", + "Show command options", command_entries); + pcmk__add_arg_group(context, "modifiers", "Output modifiers:", + "Show output modifiers", modifier_entries); + + return context; +} + +int +main(int argc, char **argv) +{ + crm_exit_t exit_code = CRM_EX_OK; + crm_time_t *duration = NULL; + crm_time_t *date_time = NULL; + + GError *error = NULL; + + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + GOptionContext *context = build_arg_context(args); + gchar **processed_args = pcmk__cmdline_preproc(argv, "dpDE"); + + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("iso8601", args->verbosity); + + if (args->version) { + g_strfreev(processed_args); + pcmk__free_arg_context(context); + /* FIXME: When iso8601 is converted to use formatted output, this can go. */ + pcmk__cli_help('v'); + } + + if (pcmk__str_eq("now", options.date_time_s, pcmk__str_casei)) { + date_time = crm_time_new(NULL); + + if (date_time == NULL) { + exit_code = CRM_EX_SOFTWARE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Internal error: couldn't determine 'now'!"); + goto done; + } + + crm_time_log(LOG_TRACE, "Current date/time", date_time, + crm_time_ordinal | crm_time_log_date | crm_time_log_timeofday); + crm_time_log(LOG_STDOUT, "Current date/time", date_time, + options.print_options | crm_time_log_date | crm_time_log_timeofday); + + } else if (options.date_time_s) { + date_time = crm_time_new(options.date_time_s); + + if (date_time == NULL) { + exit_code = CRM_EX_INVALID_PARAM; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Invalid date/time specified: %s", options.date_time_s); + goto done; + } + + crm_time_log(LOG_TRACE, "Date", date_time, + crm_time_ordinal | crm_time_log_date | crm_time_log_timeofday); + crm_time_log(LOG_STDOUT, "Date", date_time, + options.print_options | crm_time_log_date | crm_time_log_timeofday); + } + + if (options.duration_s) { + duration = crm_time_parse_duration(options.duration_s); + + if (duration == NULL) { + exit_code = CRM_EX_INVALID_PARAM; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Invalid duration specified: %s", options.duration_s); + goto done; + } + + crm_time_log(LOG_TRACE, "Duration", duration, crm_time_log_duration); + crm_time_log(LOG_STDOUT, "Duration", duration, + options.print_options | crm_time_log_duration); + } + + if (options.period_s) { + crm_time_period_t *period = crm_time_parse_period(options.period_s); + + if (period == NULL) { + exit_code = CRM_EX_INVALID_PARAM; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Invalid interval specified: %s", options.period_s); + goto done; + } + + log_time_period(LOG_TRACE, period, + options.print_options | crm_time_log_date | crm_time_log_timeofday); + log_time_period(LOG_STDOUT, period, + options.print_options | crm_time_log_date | crm_time_log_timeofday); + crm_time_free_period(period); + } + + if (date_time && duration) { + crm_time_t *later = crm_time_add(date_time, duration); + + if (later == NULL) { + exit_code = CRM_EX_SOFTWARE; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, + "Unable to calculate ending time of %s plus %s", + options.date_time_s, options.duration_s); + goto done; + } + + crm_time_log(LOG_TRACE, "Duration ends at", later, + crm_time_ordinal | crm_time_log_date | crm_time_log_timeofday); + crm_time_log(LOG_STDOUT, "Duration ends at", later, + options.print_options | crm_time_log_date | crm_time_log_timeofday | + crm_time_log_with_timezone); + + if (options.expected_s) { + char *dt_s = crm_time_as_string(later, + options.print_options | crm_time_log_date | + crm_time_log_timeofday); + if (!pcmk__str_eq(options.expected_s, dt_s, pcmk__str_casei)) { + exit_code = CRM_EX_ERROR; + goto done; + } + free(dt_s); + } + crm_time_free(later); + + } else if (date_time && options.expected_s) { + char *dt_s = crm_time_as_string(date_time, + options.print_options | crm_time_log_date | crm_time_log_timeofday); + + if (!pcmk__str_eq(options.expected_s, dt_s, pcmk__str_casei)) { + exit_code = CRM_EX_ERROR; + goto done; + } + free(dt_s); + } + +done: + crm_time_free(date_time); + crm_time_free(duration); + + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + free(options.date_time_s); + g_free(options.duration_s); + g_free(options.expected_s); + g_free(options.period_s); + + pcmk__output_and_clear_error(&error, NULL); + crm_exit(exit_code); +} diff --git a/tools/pcmk_simtimes.in b/tools/pcmk_simtimes.in new file mode 100644 index 0000000..c8b0af6 --- /dev/null +++ b/tools/pcmk_simtimes.in @@ -0,0 +1,159 @@ +#!@PYTHON@ +""" Timing comparisons for crm_simulate profiling output +""" + +__copyright__ = "Copyright 2019-2023 the Pacemaker project contributors" +__license__ = "GNU General Public License version 2 or later (GPLv2+) WITHOUT ANY WARRANTY" + +import io +import re +import sys +import errno +import argparse +import os + +# These imports allow running from a source checkout after running `make`. +# Note that while this doesn't necessarily mean it will successfully run tests, +# but being able to see --help output can be useful. +if os.path.exists("@abs_top_srcdir@/python"): + sys.path.insert(0, "@abs_top_srcdir@/python") + +if os.path.exists("@abs_top_builddir@/python") and "@abs_top_builddir@" != "@abs_top_srcdir@": + sys.path.insert(0, "@abs_top_builddir@/python") + +from pacemaker.exitstatus import ExitStatus + +DESC = """Compare timings from crm_simulate profiling output""" + +BEFORE_HELP = """Output of "crm_simulate --profile cts/scheduler --repeat " from earlier Pacemaker build""" + +# line like: * Testing cts/scheduler/xml/1360.xml ... 0.07 secs +PATTERN = r"""^\s*\*\s+Testing\s+.*/([^/]+)\.xml\s+\.+\s+([.0-9]+)\s+secs\s*$""" + +def parse_args(argv=sys.argv): + """ Parse command-line arguments """ + + parser = argparse.ArgumentParser(description=DESC) + + parser.add_argument('-V', '--verbose', action='count', + help='Increase verbosity') + + parser.add_argument('-p', '--threshold-percent', type=float, default=0, + help="Don't show tests with less than this percentage difference in times") + + parser.add_argument('-s', '--threshold-seconds', type=float, default=0, + help="Don't show tests with less than this seconds difference in times") + + parser.add_argument('-S', '--sort', choices=['test', 'before', 'after', 'diff', 'percent'], + default='test', help="Sort results by this column") + + parser.add_argument('-r', '--reverse', action='store_true', + help="Sort results in descending order") + + parser.add_argument('before_file', metavar='BEFORE', + type=argparse.FileType('r'), + help=BEFORE_HELP) + + parser.add_argument('after_file', metavar='AFTER', + type=argparse.FileType('r'), + help='Output of same command from later Pacemaker build') + + return parser.parse_args(argv[1:]) + + +def extract_times(infile): + """ Extract test names and times into hash table from file """ + + result = {} + for line in infile: + match = re.search(PATTERN, line) + if match is not None: + result[match.group(1)] = match.group(2) + return result + + +def compare_test(test, before, after, args): + """ Compare one test's timings """ + + try: + before_time = float(before[test]) + except KeyError: + if args.verbose > 0: + print("No previous test " + test + " to compare") + return None + + after_time = float(after[test]) + + time_diff = after_time - before_time + time_diff_percent = (time_diff / before_time) * 100 + + if ((abs(time_diff) >= args.threshold_seconds) + and (abs(time_diff_percent) >= args.threshold_percent)): + return { 'test': test, + 'before': before_time, + 'after': after_time, + 'diff': time_diff, + 'percent': time_diff_percent + } + return None + +def sort_diff(result): + """ Sort two test results by time difference """ + + global sort_field + + return result[sort_field] + + +def print_results(results, sort_reverse): + """ Output the comparison results """ + + if results == []: + return + + # Sort and print test differences + results.sort(reverse=sort_reverse, key=sort_diff) + for result in results: + print("%-40s %6.2fs vs %6.2fs (%+.2fs = %+6.2f%%)" % (result['test'], + result['before'], result['after'], result['diff'], + result['percent'])) + + # Print average differences + diff_total = sum(d['diff'] for d in results) + percent_total = sum(d['percent'] for d in results) + nresults = len(results) + print("\nAverages: %+.2fs %+6.2f%%" % ((diff_total / nresults), + (percent_total / nresults))) + + +if __name__ == "__main__": + + global sort_field + + try: + args = parse_args() + if args.verbose is None: + args.verbose = 0 + + before = extract_times(args.before_file) + after = extract_times(args.after_file) + sort_field = args.sort + + # Build a list of test differences + results = [] + for test in after.keys(): + result = compare_test(test, before, after, args) + if result is not None: + results = results + [ result ] + + print_results(results, sort_reverse=args.reverse) + + except KeyboardInterrupt: + pass + except IOError as e: + if e.errno != errno.EPIPE: + raise + + sys.exit(ExitStatus.OK) + +# vim: set filetype=python expandtab tabstop=4 softtabstop=4 shiftwidth=4 textwidth=120: diff --git a/tools/report.collector.in b/tools/report.collector.in new file mode 100644 index 0000000..315b785 --- /dev/null +++ b/tools/report.collector.in @@ -0,0 +1,885 @@ +# +# Originally based on hb_report +# Copyright 2007 Dejan Muhamedagic +# Later changes copyright 2010-2018 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +if + echo $REPORT_HOME | grep -qs '^/' +then + debug "Using full path to working directory: $REPORT_HOME" +else + REPORT_HOME="$HOME/$REPORT_HOME" + debug "Canonicalizing working directory path: $REPORT_HOME" +fi + +detect_host + +# +# find files newer than a and older than b +# +isnumber() { + echo "$*" | grep -qs '^[0-9][0-9]*$' +} + +touchfile() { + t=`mktemp` && + perl -e "\$file=\"$t\"; \$tm=$1;" -e 'utime $tm, $tm, $file;' && + echo $t +} + +find_files_clean() { + [ -z "$from_stamp" ] || rm -f "$from_stamp" + [ -z "$to_stamp" ] || rm -f "$to_stamp" + from_stamp="" + to_stamp="" +} + +find_files() { + dirs= + from_time=$2 + to_time=$3 + for d in $1; do + if [ -d $d ]; then + dirs="$dirs $d" + fi + done + + if [ x"$dirs" = x ]; then + return + fi + + isnumber "$from_time" && [ "$from_time" -gt 0 ] || { + warning "sorry, can't find files in [ $1 ] based on time if you don't supply time" + return + } + trap find_files_clean 0 + if ! from_stamp=`touchfile $from_time`; then + warning "sorry, can't create temporary file for find_files" + return + fi + findexp="-newer $from_stamp" + if isnumber "$to_time" && [ "$to_time" -gt 0 ]; then + if ! to_stamp=`touchfile $to_time`; then + warning "sorry, can't create temporary file for find_files" + find_files_clean + return + fi + findexp="$findexp ! -newer $to_stamp" + fi + find $dirs -type f $findexp + find_files_clean + trap "" 0 +} + +# +# check permissions of files/dirs +# +pl_checkperms() { + perl -e ' + # check permissions and ownership + # uid and gid are numeric + # everything must match exactly + # no error checking! (file should exist, etc) + ($filename, $perms, $in_uid, $in_gid) = @ARGV; + ($mode,$uid,$gid) = (stat($filename))[2,4,5]; + $p=sprintf("%04o", $mode & 07777); + $p ne $perms and exit(1); + $uid ne $in_uid and exit(1); + $gid ne $in_gid and exit(1); + ' $* +} + +num_id() { + getent $1 $2 | awk -F: '{print $3}' +} + +chk_id() { + [ "$2" ] && return 0 + echo "$1: id not found" + return 1 +} + +check_perms() { + while read type f p uid gid; do + if [ ! -e "$f" ]; then + echo "$f doesn't exist" + continue + elif [ ! -$type "$f" ]; then + echo "$f has wrong type" + continue + fi + n_uid=`num_id passwd $uid` + chk_id "$uid" "$n_uid" || continue + n_gid=`num_id group $gid` + chk_id "$gid" "$n_gid" || continue + pl_checkperms $f $p $n_uid $n_gid || { + echo "wrong permissions or ownership for $f:" + ls -ld $f + } + done +} + +# +# coredumps +# +findbinary() { + random_binary=`which cat 2>/dev/null` # suppose we are lucky + binary=`gdb $random_binary $1 < /dev/null 2>/dev/null | + grep 'Core was generated' | awk '{print $5}' | + sed "s/^.//;s/[.':]*$//"` + if [ x = x"$binary" ]; then + debug "Could not detect the program name for core $1 from the gdb output; will try with file(1)" + binary=$(file $1 | awk '/from/{ + for( i=1; i<=NF; i++ ) + if( $i == "from" ) { + print $(i+1) + break + } + }') + binary=`echo $binary | tr -d "'"` + binary=$(echo $binary | tr -d '`') + if [ "$binary" ]; then + binary=`which $binary 2>/dev/null` + fi + fi + if [ x = x"$binary" ]; then + warning "Could not find the program path for core $1" + return + fi + fullpath=`which $binary 2>/dev/null` + if [ x = x"$fullpath" ]; then + if [ -x $CRM_DAEMON_DIR/$binary ]; then + echo $CRM_DAEMON_DIR/$binary + debug "Found the program at $CRM_DAEMON_DIR/$binary for core $1" + else + warning "Could not find the program path for core $1" + fi + else + echo $fullpath + debug "Found the program at $fullpath for core $1" + fi +} + +getbt() { + which gdb > /dev/null 2>&1 || { + warning "Please install gdb to get backtraces" + return + } + for corefile; do + absbinpath=`findbinary $corefile` + [ x = x"$absbinpath" ] && continue + echo "====================== start backtrace ======================" + ls -l $corefile + # Summary first... + gdb -batch -n -quiet -ex ${BT_OPTS:-"thread apply all bt"} -ex quit \ + $absbinpath $corefile 2>/dev/null + echo "====================== start detail ======================" + # Now the unreadable details... + gdb -batch -n -quiet -ex ${BT_OPTS:-"thread apply all bt full"} -ex quit \ + $absbinpath $corefile 2>/dev/null + echo "======================= end backtrace =======================" + done +} + +dump_status_and_config() { + crm_mon -1 2>&1 | grep -v '^Last upd' > $target/$CRM_MON_F + cibadmin -Ql 2>/dev/null > $target/${CIB_F}.live +} + +getconfig() { + cluster=$1; shift; + target=$1; shift; + + for cf in $*; do + if [ -e "$cf" ]; then + cp -a "$cf" $target/ + fi + done + + if is_running pacemaker-controld; then + dump_status_and_config + crm_node -p > "$target/$MEMBERSHIP_F" 2>&1 + echo "$host" > $target/RUNNING + + elif is_running pacemaker-remoted; then + dump_status_and_config + echo "$host" > $target/RUNNING + + # Pre-2.0.0 daemon name in case we're collecting on a mixed-version cluster + elif is_running pacemaker_remoted; then + dump_status_and_config + echo "$host" > $target/RUNNING + + else + echo "$host" > $target/STOPPED + fi +} + +get_readable_cib() { + target="$1"; shift; + + if [ -f "$target/$CIB_F" ]; then + crm_verify -V -x "$target/$CIB_F" >"$target/$CRM_VERIFY_F" 2>&1 + if which crm >/dev/null 2>&1 ; then + CIB_file="$target/$CIB_F" crm configure show >"$target/$CIB_TXT_F" 2>&1 + elif which pcs >/dev/null 2>&1 ; then + pcs config -f "$target/$CIB_F" >"$target/$CIB_TXT_F" 2>&1 + fi + fi +} + +# +# remove values of sensitive attributes +# +# this is not proper xml parsing, but it will work under the +# circumstances +sanitize_xml_attrs() { + sed $( + for patt in $SANITIZE; do + echo "-e /name=\"$patt\"/s/value=\"[^\"]*\"/value=\"****\"/" + done + ) +} + +sanitize_hacf() { + awk ' + $1=="stonith_host"{ for( i=5; i<=NF; i++ ) $i="****"; } + {print} + ' +} + +sanitize_one_clean() { + [ -z "$tmp" ] || rm -f "$tmp" + tmp="" + [ -z "$ref" ] || rm -f "$ref" + ref="" +} + +sanitize() { + file=$1 + compress="" + if [ -z "$SANITIZE" ]; then + return + fi + echo $file | grep -qs 'gz$' && compress=gzip + echo $file | grep -qs 'bz2$' && compress=bzip2 + if [ "$compress" ]; then + decompress="$compress -dc" + else + compress=cat + decompress=cat + fi + trap sanitize_one_clean 0 + tmp=`mktemp` + ref=`mktemp` + if [ -z "$tmp" -o -z "$ref" ]; then + sanitize_one_clean + fatal "cannot create temporary files" + fi + touch -r $file $ref # save the mtime + if [ "`basename $file`" = ha.cf ]; then + sanitize_hacf + else + $decompress | sanitize_xml_attrs | $compress + fi < $file > $tmp + mv $tmp $file + # note: cleaning $tmp up is still needed even after it's renamed + # because its temp directory is still there. + + touch -r $ref $file + sanitize_one_clean + trap "" 0 +} + +# +# get some system info +# +distro() { + if + which lsb_release >/dev/null 2>&1 + then + lsb_release -d | sed -e 's/^Description:\s*//' + debug "Using lsb_release for distribution info" + return + fi + + relf=`ls /etc/debian_version 2>/dev/null` || + relf=`ls /etc/slackware-version 2>/dev/null` || + relf=`ls -d /etc/*-release 2>/dev/null` && { + for f in $relf; do + test -f $f && { + echo "`ls $f` `cat $f`" + debug "Found `echo $relf | tr '\n' ' '` distribution release file(s)" + return + } + done + } + warning "No lsb_release, no /etc/*-release, no /etc/debian_version: no distro information" +} + +pkg_ver() { + if which dpkg >/dev/null 2>&1 ; then + pkg_mgr="deb" + elif which rpm >/dev/null 2>&1 ; then + pkg_mgr="rpm" + elif which pkg_info >/dev/null 2>&1 ; then + pkg_mgr="pkg_info" + elif which pkginfo >/dev/null 2>&1 ; then + pkg_mgr="pkginfo" + else + warning "Unknown package manager" + return + fi + debug "The package manager is: $pkg_mgr" + echo "The package manager is: $pkg_mgr" + + echo "Installed packages:" + case $pkg_mgr in + deb) + dpkg-query -f '${Package} ${Version} ${Architecture}\n' -W | sort + echo + for pkg in $*; do + if dpkg-query -W $pkg 2>/dev/null ; then + debug "Verifying installation of: $pkg" + echo "Verifying installation of: $pkg" + debsums -s $pkg 2>/dev/null + fi + done + ;; + rpm) + rpm -qa --qf '%{name} %{version}-%{release} - %{distribution} %{arch}\n' | sort + echo + for pkg in $*; do + if rpm -q $pkg >/dev/null 2>&1 ; then + debug "Verifying installation of: $pkg" + echo "Verifying installation of: $pkg" + rpm --verify $pkg 2>&1 + fi + done + ;; + pkg_info) + pkg_info + ;; + pkginfo) + pkginfo | awk '{print $3}' # format? + ;; + esac +} + +getbacktraces() { + debug "Looking for backtraces: $*" + flist=$( + for f in `find_files "$CRM_CORE_DIRS" $1 $2`; do + bf=`basename $f` + test `expr match $bf core` -gt 0 && + echo $f + done) + if [ "$flist" ]; then + for core in $flist; do + log "Found core file: `ls -al $core`" + done + + # Make a copy of them in case we need more data later + # Luckily they compress well + mkdir cores >/dev/null 2>&1 + cp -a $flist cores/ + shrink cores + rm -rf cores + + # Now get as much as we can from them automagically + for f in $flist; do + getbt $f + done + fi +} + +getpeinputs() { + if [ -n "$PE_STATE_DIR" ]; then + flist=$( + find_files "$PE_STATE_DIR" "$1" "$2" | sed "s,`dirname $PE_STATE_DIR`/,,g" + ) + if [ "$flist" ]; then + (cd $(dirname "$PE_STATE_DIR") && tar cf - $flist) | (cd "$3" && tar xf -) + debug "found `echo $flist | wc -w` scheduler input files in $PE_STATE_DIR" + fi + fi +} + +getblackboxes() { + flist=$( + find_files $BLACKBOX_DIR $1 $2 + ) + + for bb in $flist; do + bb_short=`basename $bb` + qb-blackbox $bb > $3/${bb_short}.blackbox 2>&1 + info "Extracting contents of blackbox: $bb_short" + done +} + +# +# some basic system info and stats +# +sys_info() { + cluster=$1; shift + echo "Platform: `uname`" + echo "Kernel release: `uname -r`" + echo "Architecture: `uname -m`" + if [ `uname` = Linux ]; then + echo "Distribution: `distro`" + fi + + echo + cibadmin --version 2>&1 | head -1 + cibadmin -! 2>&1 + case $cluster in + corosync) + /usr/sbin/corosync -v 2>&1 | head -1 + ;; + esac + + # Cluster glue version hash (if available) + stonith -V 2>/dev/null + + # Resource agents version hash + echo "resource-agents: `grep 'Build version:' /usr/lib/ocf/resource.d/heartbeat/.ocf-shellfuncs`" + + echo + pkg_ver $* +} + +sys_stats() { + set -x + uname -n + uptime + ps axf + ps auxw + top -b -n 1 + ifconfig -a + ip addr list + netstat -i + arp -an + test -d /proc && { + cat /proc/cpuinfo + } + lsscsi + lspci + lsblk + mount + df + set +x +} + +dlm_dump() { + if which dlm_tool >/dev/null 2>&1 ; then + if is_running dlm_controld; then + echo "--- Lockspace overview:" + dlm_tool ls -n + + echo "---Lockspace history:" + dlm_tool dump + + echo "---Lockspace status:" + dlm_tool status + dlm_tool status -v + + echo "---Lockspace config:" + dlm_tool dump_config + + dlm_tool log_plock + + dlm_tool ls | grep name | + while read X N ; do + echo "--- Lockspace $N:" + dlm_tool lockdump "$N" + dlm_tool lockdebug -svw "$N" + done + fi + fi +} + +drbd_info() { + test -f /proc/drbd && { + echo "--- /proc/drbd:" + cat /proc/drbd 2>&1 + echo + } + + if which drbdadm >/dev/null 2>&1; then + echo "--- drbdadm dump:" + if [ -z "$SANITIZE"]; then + drbdadm dump 2>&1 + else + drbdadm dump 2>&1 | sed "s/\(shared-secret[ ]*\"\)[^\"]*\";/\1****\";/" + fi + echo + + echo "--- drbdadm status:" + drbdadm status 2>&1 + echo + + echo "--- drbdadm show-gi:" + for res in $(drbdsetup status | grep -e ^\\S | awk '{ print $1 }'); do + echo "$res:" + drbdadm show-gi $res 2>&1 + echo + done + fi + + if which drbd-overview >/dev/null 2>&1; then + echo "--- drbd-overview:" + drbd-overview 2>&1 + echo + fi + + if which drbdsetup >/dev/null 2>&1; then + echo "--- drbdsetup status:" + drbdsetup status --verbose --statistics 2>&1 + echo + + echo "--- drbdsetup events2:" + drbdsetup events2 --timestamps --statistics --now 2>&1 + echo + fi +} + +iscfvarset() { + test "`getcfvar $1 $2`" +} + +iscfvartrue() { + getcfvar $1 $2 $3 | grep -E -qsi "^(true|y|yes|on|1)" +} + +iscfvarfalse() { + getcfvar $1 $2 $3 | grep -E -qsi "^(false|n|no|off|0)" +} + +find_syslog() { + priority="$1" + + # Always include system logs (if we can find them) + msg="Mark:pcmk:`perl -e 'print time()'`" + logger -p "$priority" "$msg" >/dev/null 2>&1 + + # Force buffer flush + killall -HUP rsyslogd >/dev/null 2>&1 + + sleep 2 # Give syslog time to catch up in case it's busy + findmsg 1 "$msg" +} + +get_logfiles_cs() { + if [ ! -f "$cf_file" ]; then + return + fi + + debug "Reading $cf_type log settings from $cf_file" + + # The default value of to_syslog is yes. + if ! iscfvarfalse $cf_type to_syslog "$cf_file"; then + facility_cs=$(getcfvar $cf_type syslog_facility "$cf_file") + if [ -z "$facility_cs" ]; then + facility_cs="daemon" + fi + + find_syslog "$facility_cs.info" + fi + if [ "$SOS_MODE" = "1" ]; then + return + fi + + if iscfvartrue $cf_type to_logfile "$cf_file"; then + logfile=$(getcfvar $cf_type logfile "$cf_file") + if [ -f "$logfile" ]; then + debug "Log settings found for cluster type $cf_type: $logfile" + echo "$logfile" + fi + fi +} + +get_logfiles() { + cf_type=$1 + cf_file="$2" + + case $cf_type in + corosync) get_logfiles_cs;; + esac + + . @CONFIGDIR@/pacemaker + + facility="$PCMK_logfacility" + if [ -z "$facility" ]; then + facility="daemon" + fi + if [ "$facility" != "$facility_cs" ]&&[ "$facility" != none ]; then + find_syslog "$facility.notice" + fi + if [ "$SOS_MODE" = "1" ]; then + return + fi + + logfile="$PCMK_logfile" + if [ "$logfile" != none ]; then + if [ -z "$logfile" ]; then + for logfile in "@CRM_LOG_DIR@/pacemaker.log" "/var/log/pacemaker.log"; do + if [ -f "$logfile" ]; then + debug "Log settings not found for Pacemaker, assuming $logfile" + echo "$logfile" + break + fi + done + + elif [ -f "$logfile" ]; then + debug "Log settings found for Pacemaker: $logfile" + echo "$logfile" + fi + fi + + # Look for detail logs: + + # - initial pacemakerd logs and tracing might go to a different file + pattern="Starting Pacemaker" + + # - make sure we get something from the scheduler + pattern="$pattern\\|Calculated transition" + + # - cib and pacemaker-execd updates + # (helpful on non-DC nodes and when cluster has been up for a long time) + pattern="$pattern\\|cib_perform_op\\|process_lrm_event" + + # - pacemaker_remote might use a different file + pattern="$pattern\\|pacemaker[-_]remoted:" + + findmsg 3 "$pattern" +} + +essential_files() { + cat< /dev/null 2>&1 + if [ $? -eq 0 ]; then + cl_have_journald=1 + else + cl_have_journald=0 + fi + + cl_lognames="$CL_LOGFILES" + if [ $cl_have_journald -eq 1 ]; then + cl_lognames="$cl_lognames journalctl" + fi + cl_lognames=$(trim "$cl_lognames") + if [ -z "$cl_lognames" ]; then + return + fi + + # YYYY-MM-DD HH:MM:SS + cl_start_ymd=$(date -d @${CL_START} +"%F %T") + cl_end_ymd=$(date -d @${CL_END} +"%F %T") + + debug "Gathering logs from $cl_start_ymd to $cl_end_ymd:" + debug " $cl_lognames" + + # Remove our temporary file if we get interrupted here + trap '[ -z "$cl_pattfile" ] || rm -f "$cl_pattfile"' 0 + + # Create a temporary file with patterns to grep for + cl_pattfile=$(mktemp) || fatal "cannot create temporary files" + for cl_pattern in $LOG_PATTERNS; do + echo "$cl_pattern" + done > $cl_pattfile + + echo "Log pattern matches from $REPORT_TARGET:" > $ANALYSIS_F + if [ -n "$CL_LOGFILES" ]; then + for cl_logfile in $CL_LOGFILES; do + cl_extract="$(basename $cl_logfile).extract.txt" + + if [ ! -f "$cl_logfile" ]; then + # Not a file + continue + + elif [ -f "$cl_extract" ]; then + # We already have it + continue + fi + + dumplogset "$cl_logfile" $LOG_START $LOG_END > "$cl_extract" + sanitize "$cl_extract" + + grep -f "$cl_pattfile" "$cl_extract" >> $ANALYSIS_F + done + fi + + # Collect systemd logs if present + if [ $cl_have_journald -eq 1 ]; then + journalctl --since "$cl_start_ymd" --until "$cl_end_ymd" > journal.log + grep -f "$cl_pattfile" journal.log >> $ANALYSIS_F + fi + + rm -f $cl_pattfile + trap "" 0 +} + +require_tar + +debug "Initializing $REPORT_TARGET subdir" +if [ "$REPORT_MASTER" != "$REPORT_TARGET" ]; then + if [ -e $REPORT_HOME/$REPORT_TARGET ]; then + warning "Directory $REPORT_HOME/$REPORT_TARGET already exists, using /tmp/$$/$REPORT_TARGET instead" + REPORT_HOME=/tmp/$$ + fi +fi + +mkdir -p $REPORT_HOME/$REPORT_TARGET +cd $REPORT_HOME/$REPORT_TARGET + +case $CLUSTER in + any) cluster=`get_cluster_type`;; + *) cluster=$CLUSTER;; +esac + +cluster_cf=`find_cluster_cf $cluster` + +# If cluster stack is still "any", this might be a Pacemaker Remote node, +# so don't complain in that case. +if [ -z "$cluster_cf" ] && [ $cluster != "any" ]; then + warning "Could not determine the location of your cluster configuration" +fi + +if [ "$SEARCH_LOGS" = "1" ]; then + logfiles=$(get_logfiles "$cluster" "$cluster_cf" | sort -u) +fi +logfiles="$(trim "$logfiles $EXTRA_LOGS")" + +if [ -z "$logfiles" ]; then + which journalctl > /dev/null 2>&1 + if [ $? -eq 0 ]; then + info "Systemd journal will be only log collected" + else + info "No logs will be collected" + fi + info "No log files found or specified with --logfile /some/path" +fi + +debug "Config: $cluster ($cluster_cf) $logfiles" + +sys_info $cluster $PACKAGES > $SYSINFO_F +essential_files $cluster | check_perms > $PERMISSIONS_F 2>&1 +getconfig $cluster "$REPORT_HOME/$REPORT_TARGET" "$cluster_cf" "$CRM_CONFIG_DIR/$CIB_F" "/etc/drbd.conf" "/etc/drbd.d" "/etc/booth" + +getpeinputs $LOG_START $LOG_END $REPORT_HOME/$REPORT_TARGET +getbacktraces $LOG_START $LOG_END > $REPORT_HOME/$REPORT_TARGET/$BT_F +getblackboxes $LOG_START $LOG_END $REPORT_HOME/$REPORT_TARGET + +case $cluster in + corosync) + if is_running corosync; then + corosync-blackbox >corosync-blackbox-live.txt 2>&1 +# corosync-fplay > corosync-blackbox.txt + tool=`pickfirst corosync-objctl corosync-cmapctl` + case $tool in + *objctl) $tool -a > corosync.dump 2>/dev/null;; + *cmapctl) $tool > corosync.dump 2>/dev/null;; + esac + corosync-quorumtool -s -i > corosync.quorum 2>&1 + fi + ;; +esac + +dc=`crm_mon -1 2>/dev/null | awk '/Current DC/ {print $3}'` +if [ "$REPORT_TARGET" = "$dc" ]; then + echo "$REPORT_TARGET" > DC +fi + +dlm_dump > $DLM_DUMP_F 2>&1 +sys_stats > $SYSSTATS_F 2>&1 +drbd_info > $DRBD_INFO_F 2>&1 + +debug "Sanitizing files: $SANITIZE" +# +# replace sensitive info with '****' +# +cf="" +if [ ! -z "$cluster_cf" ]; then + cf=`basename $cluster_cf` +fi +for f in "$cf" "$CIB_F" "$CIB_F.live" pengine/*; do + if [ -f "$f" ]; then + sanitize "$f" + fi +done + +# For convenience, generate human-readable version of CIB and any XML errors +# in it (AFTER sanitizing, so we don't need to sanitize this output). +# sosreport does this itself, so we do not need to when run by sosreport. +if [ "$SOS_MODE" != "1" ]; then + get_readable_cib "$REPORT_HOME/$REPORT_TARGET" +fi + +collect_logs "$LOG_START" "$LOG_END" $logfiles + +# Purge files containing no information +for f in `ls -1`; do + if [ -d "$f" ]; then + continue + elif [ ! -s "$f" ]; then + case $f in + *core*) log "Detected empty core file: $f";; + *) debug "Removing empty file: `ls -al $f`" + rm -f $f + ;; + esac + fi +done + +# Parse for events +for l in $logfiles; do + b="$(basename $l).extract.txt" + node_events "$b" > $EVENTS_F + + # Link the first logfile to a standard name if it doesn't yet exist + if [ -e "$b" -a ! -e "$HALOG_F" ]; then + ln -s "$b" "$HALOG_F" + fi +done + +if [ -e $REPORT_HOME/.env ]; then + debug "Localhost: $REPORT_MASTER $REPORT_TARGET" + +elif [ "$REPORT_MASTER" != "$REPORT_TARGET" ]; then + debug "Streaming report back to $REPORT_MASTER" + (cd $REPORT_HOME && tar cf - $REPORT_TARGET) + if [ "$REMOVE" = "1" ]; then + cd + rm -rf $REPORT_HOME + fi +fi + +# vim: set expandtab tabstop=8 softtabstop=4 shiftwidth=4 textwidth=80: diff --git a/tools/report.common.in b/tools/report.common.in new file mode 100644 index 0000000..aa90c05 --- /dev/null +++ b/tools/report.common.in @@ -0,0 +1,890 @@ +# +# Originally based on hb_report +# Copyright 2007 Dejan Muhamedagic +# Later changes copyright 2010-2022 the Pacemaker project contributors +# +# The version control history for this file may have further details. +# +# This source code is licensed under the GNU General Public License version 2 +# or later (GPLv2+) WITHOUT ANY WARRANTY. +# + +host=`uname -n` +shorthost=`echo $host | sed s:\\\\..*::` +if [ -z $verbose ]; then + verbose=0 +fi + +# Target Files +EVENTS_F=events.txt +ANALYSIS_F=analysis.txt +HALOG_F=cluster-log.txt +BT_F=backtraces.txt +SYSINFO_F=sysinfo.txt +SYSSTATS_F=sysstats.txt +DLM_DUMP_F=dlm_dump.txt +CRM_MON_F=crm_mon.txt +MEMBERSHIP_F=members.txt +CRM_VERIFY_F=crm_verify.txt +PERMISSIONS_F=permissions.txt +CIB_F=cib.xml +CIB_TXT_F=cib.txt +DRBD_INFO_F=drbd_info.txt + +EVENT_PATTERNS=" +state do_state_transition +membership pcmk_peer_update.*(lost|memb): +quorum (crmd|pacemaker-controld).*crm_update_quorum +pause Process.pause.detected +resources (lrmd|pacemaker-execd).*rsc:(start|stop) +stonith te_fence_node|fenced.*(requests|(Succeeded|Failed).to.|result=) +start_stop shutdown.decision|Corosync.Cluster.Engine|corosync.*Initializing.transport|Executive.Service.RELEASE|crm_shutdown:.Requesting.shutdown|pcmk_shutdown:.Shutdown.complete +" + +# superset of all packages of interest on all distros +# (the package manager will be used to validate the installation +# of any of these packages that are installed) +PACKAGES="pacemaker pacemaker-libs pacemaker-cluster-libs libpacemaker3 +pacemaker-remote pacemaker-pygui pacemaker-pymgmt pymgmt-client +corosync corosynclib libcorosync4 +resource-agents cluster-glue-libs cluster-glue libglue2 ldirectord +ocfs2-tools ocfs2-tools-o2cb ocfs2console +ocfs2-kmp-default ocfs2-kmp-pae ocfs2-kmp-xen ocfs2-kmp-debug ocfs2-kmp-trace +drbd drbd-kmp-xen drbd-kmp-pae drbd-kmp-default drbd-kmp-debug drbd-kmp-trace +drbd-pacemaker drbd-utils drbd-bash-completion drbd-xen +lvm2 lvm2-clvm cmirrord +libdlm libdlm2 libdlm3 +hawk ruby lighttpd +kernel-default kernel-pae kernel-xen +glibc +" + +# Potential locations of system log and cluster daemon logs +SYSLOGS=" + /var/log/* + /var/logs/* + /var/syslog/* + /var/adm/* + /var/log/ha/* + /var/log/cluster/* + /var/log/pacemaker/* +" + +# Whether pacemaker-remoted was found (0 = yes, 1 = no, -1 = haven't looked yet) +REMOTED_STATUS=-1 + +# +# keep the user posted +# +record() { + if [ x != x"$REPORT_HOME" -a -d "${REPORT_HOME}/$shorthost" ]; then + rec="${REPORT_HOME}/$shorthost/report.out" + + elif [ x != x"${l_base}" -a -d "${l_base}" ]; then + rec="${l_base}/report.summary" + + else + rec="/dev/null" + fi + printf "%-10s $*\n" "$shorthost:" 2>&1 >> "${rec}" +} + +log() { + printf "%-10s $*\n" "$shorthost:" 1>&2 + record "$*" +} + +debug() { + if [ $verbose -gt 0 ]; then + log "Debug: $*" + else + record "Debug: $*" + fi +} + +info() { + log "$*" +} + +warning() { + log "WARN: $*" +} + +fatal() { + log "ERROR: $*" + exit 1 +} + +require_tar() { + which tar >/dev/null 2>&1 + if [ $? -ne 0 ]; then + fatal "Required program 'tar' not found, please install and re-run" + fi +} + +# check if process of given substring in its name does exist; +# only look for processes originated by user 0 (by UID), "@CRM_DAEMON_USER@" +# or effective user running this script, and/or group 0 (by GID), +# "@CRM_DAEMON_GROUP@" or one of the groups the effective user belongs to +# (there's no business in probing any other processes) +is_running() { + ps -G "0 $(getent group '@CRM_DAEMON_GROUP@' 2>/dev/null | cut -d: -f3) $(id -G)" \ + -u "0 @CRM_DAEMON_USER@ $(id -u)" -f \ + | grep -Eqs $(echo "$1" | sed -e 's/^\(.\)/[\1]/') +} + +has_remoted() { + if [ $REMOTED_STATUS -eq -1 ]; then + REMOTED_STATUS=1 + if which pacemaker-remoted >/dev/null 2>&1; then + REMOTED_STATUS=0 + # Check for pre-2.0.0 daemon name in case we have mixed-version cluster + elif which pacemaker_remoted >/dev/null 2>&1; then + REMOTED_STATUS=0 + elif [ -x "@sbindir@/pacemaker-remoted" ]; then + REMOTED_STATUS=0 + elif [ -x "@sbindir@/pacemaker_remoted" ]; then + REMOTED_STATUS=0 + else + # @TODO: the binary might be elsewhere, + # but a global search is too expensive + for d in /{usr,opt}/{local/,}{s,}bin; do + if [ -x "${d}/pacemaker-remoted" ]; then + REMOTED_STATUS=0 + elif [ -x "${d}/pacemaker_remoted" ]; then + REMOTED_STATUS=0 + fi + done + fi + fi + return $REMOTED_STATUS +} + +# found_dir +found_dir() { + echo "$2" + info "Pacemaker $1 found in: $2" +} + +detect_daemon_dir() { + info "Searching for where Pacemaker daemons live... this may take a while" + + for d in \ + {/usr,/usr/local,/opt/local,@exec_prefix@}/{libexec,lib64,lib}/pacemaker + do + # pacemaker and pacemaker-cts packages can install to daemon directory, + # so check for a file from each + if [ -e $d/pacemaker-schedulerd ] || [ -e $d/cts-exec-helper ]; then + found_dir "daemons" "$d" + return + fi + done + + # Pacemaker Remote nodes don't need to install daemons + if has_remoted; then + info "Pacemaker daemons not found (this appears to be a Pacemaker Remote node)" + return + fi + + for f in $(find / -maxdepth $maxdepth -type f -name pacemaker-schedulerd -o -name cts-exec-helper); do + d=$(dirname "$f") + found_dir "daemons" "$d" + return + done + + fatal "Pacemaker daemons not found (nonstandard installation?)" +} + +detect_cib_dir() { + d="${local_state_dir}/lib/pacemaker/cib" + if [ -f "$d/cib.xml" ]; then + found_dir "config files" "$d" + return + fi + + # Pacemaker Remote nodes don't need a CIB + if has_remoted; then + info "Pacemaker config not found (this appears to be a Pacemaker Remote node)" + return + fi + + info "Searching for where Pacemaker keeps config information... this may take a while" + # TODO: What about false positives where someone copied the CIB? + for f in $(find / -maxdepth $maxdepth -type f -name cib.xml); do + d=$(dirname $f) + found_dir "config files" "$d" + return + done + + warning "Pacemaker config not found (nonstandard installation?)" +} + +detect_state_dir() { + if [ -n "$CRM_CONFIG_DIR" ]; then + # Assume new layout + # $local_state_dir/lib/pacemaker/(cib,pengine,blackbox,cores) + dirname "$CRM_CONFIG_DIR" + + # Pacemaker Remote nodes might not have a CRM_CONFIG_DIR + elif [ -d "$local_state_dir/lib/pacemaker" ]; then + echo $local_state_dir/lib/pacemaker + fi +} + +detect_pe_dir() { + config_root="$1" + + d="$config_root/pengine" + if [ -d "$d" ]; then + found_dir "scheduler inputs" "$d" + return + fi + + if has_remoted; then + info "Pacemaker scheduler inputs not found (this appears to be a Pacemaker Remote node)" + return + fi + + info "Searching for where Pacemaker keeps scheduler inputs... this may take a while" + for d in $(find / -maxdepth $maxdepth -type d -name pengine); do + found_dir "scheduler inputs" "$d" + return + done + + fatal "Pacemaker scheduler inputs not found (nonstandard installation?)" +} + +detect_host() { + local_state_dir=@localstatedir@ + + if [ -d $local_state_dir/run ]; then + CRM_STATE_DIR=$local_state_dir/run/crm + else + info "Searching for where Pacemaker keeps runtime data... this may take a while" + for d in `find / -maxdepth $maxdepth -type d -name run`; do + local_state_dir=`dirname $d` + CRM_STATE_DIR=$d/crm + break + done + info "Found: $CRM_STATE_DIR" + fi + debug "Machine runtime directory: $local_state_dir" + debug "Pacemaker runtime data located in: $CRM_STATE_DIR" + + CRM_DAEMON_DIR=$(detect_daemon_dir) + CRM_CONFIG_DIR=$(detect_cib_dir) + config_root=$(detect_state_dir) + + # Older versions had none + BLACKBOX_DIR=$config_root/blackbox + debug "Pacemaker blackboxes (if any) located in: $BLACKBOX_DIR" + + PE_STATE_DIR=$(detect_pe_dir "$config_root") + + CRM_CORE_DIRS="" + for d in $config_root/cores $local_state_dir/lib/corosync; do + if [ -d $d ]; then + CRM_CORE_DIRS="$CRM_CORE_DIRS $d" + fi + done + debug "Core files located under: $CRM_CORE_DIRS" +} + +time2str() { + perl -e "use POSIX; print strftime('%x %X',localtime($1));" +} + +get_time() { + perl -e "\$time=\"$*\";" -e ' + $unix_tm = 0; + eval "use Date::Parse"; + if (index($time, ":") < 0) { + } elsif (!$@) { + $unix_tm = str2time($time); + } else { + eval "use Date::Manip"; + if (!$@) { + $unix_tm = UnixDate(ParseDateString($time), "%s"); + } + } + if ($unix_tm != "") { + print int($unix_tm); + } else { + print ""; + } + ' +} + +get_time_syslog() { + awk '{print $1,$2,$3}' +} + +get_time_legacy() { + awk '{print $2}' | sed 's/_/ /' +} + +get_time_iso8601() { + awk '{print $1}' +} + +get_time_format_for_string() { + l="$*" + t=$(get_time `echo $l | get_time_syslog`) + if [ "x$t" != x ]; then + echo syslog + return + fi + + t=$(get_time `echo $l | get_time_iso8601`) + if [ "x$t" != x ]; then + echo iso8601 + return + fi + + t=$(get_time `echo $l | get_time_legacy`) + if [ "x$t" != x ]; then + echo legacy + return + fi +} + +get_time_format() { + t=0 l="" func="" + trycnt=10 + while [ $trycnt -gt 0 ] && read l; do + func=$(get_time_format_for_string $l) + if [ "x$func" != x ]; then + break + fi + trycnt=$(($trycnt-1)) + done + #debug "Logfile uses the $func time format" + echo $func +} + +get_time_from_line() { + GTFL_FORMAT="$1" + shift + if [ "$GTFL_FORMAT" = "" ]; then + GTFL_FORMAT=$(get_time_format_for_string "$@") + fi + case $GTFL_FORMAT in + syslog|legacy|iso8601) + get_time $(echo "$@" | get_time_${GTFL_FORMAT}) + ;; + *) + warning "Unknown time format in: $@" + ;; + esac +} + +get_first_time() { + l="" + format=$1 + while read l; do + ts=$(get_time_from_line "$format" "$l") + if [ "x$ts" != x ]; then + echo "$ts" + return + fi + done +} + +get_last_time() { + l="" + best=`date +%s` # Now + format=$1 + while read l; do + ts=$(get_time_from_line "$format" "$l") + if [ "x$ts" != x ]; then + best=$ts + fi + done + echo $best +} + +linetime() { + get_time_from_line "" $(tail -n +$2 $1 | grep -a ":[0-5][0-9]:" | head -n 1) +} + +# +# findmsg +# +# Print the names of up to system logs that contain , +# ordered by most recently modified. +# +findmsg() { + max=$1 + pattern="$2" + found=0 + + # List all potential system logs ordered by most recently modified. + candidates=$(ls -1td $SYSLOGS 2>/dev/null) + if [ -z "$candidates" ]; then + debug "No system logs found to search for pattern \'$pattern\'" + return + fi + + # Portable way to handle files with spaces in their names. + SAVE_IFS=$IFS + IFS=" +" + + # Check each log file for matches. + logfiles="" + for f in $candidates; do + local cat="" + + # We only care about readable files with something in them. + if [ ! -f "$f" ] || [ ! -r "$f" ] || [ ! -s "$f" ] ; then + continue + fi + + cat=$(find_decompressor "$f") + + # We want to avoid grepping through potentially huge binary logs such + # as lastlog. However, control characters sometimes find their way into + # text logs, so we use a heuristic of more than 256 nonprintable + # characters in the file's first kilobyte. + if [ $($cat "$f" 2>/dev/null | head -c 1024 | tr -d '[:print:][:space:]' | wc -c) -gt 256 ] + then + continue + fi + + # Our patterns are ASCII, so we can use LC_ALL="C" to speed up grep + $cat "$f" 2>/dev/null | LC_ALL="C" grep -q -e "$pattern" + if [ $? -eq 0 ]; then + + # Add this file to the list of hits + # (using newline as separator to handle spaces in names). + if [ -z "$logfiles" ]; then + logfiles="$f" + else + logfiles="$logfiles +$f" + fi + + # If we have enough hits, print them and return. + found=$(($found+1)) + if [ $found -ge $max ]; then + break + fi + fi + done 2>/dev/null + IFS=$SAVE_IFS + if [ -z "$logfiles" ]; then + debug "Pattern \'$pattern\' not found in any system logs" + else + debug "Pattern \'$pattern\' found in: [ $logfiles ]" + echo "$logfiles" + fi +} + +node_events() { + if [ -e $1 ]; then + Epatt=`echo "$EVENT_PATTERNS" | + while read title p; do [ -n "$p" ] && echo -n "|$p"; done | + sed 's/.//' + ` + grep -E "$Epatt" $1 + fi +} + +pickfirst() { + for x; do + which $x >/dev/null 2>&1 && { + echo $x + return 0 + } + done + return 1 +} + +shrink() { + olddir=$PWD + dir=`dirname $1` + base=`basename $1` + + target=$1.tar + tar_options="cf" + + variant=`pickfirst bzip2 gzip xz false` + case $variant in + bz*) + tar_options="jcf" + target="$target.bz2" + ;; + gz*) + tar_options="zcf" + target="$target.gz" + ;; + xz*) + tar_options="Jcf" + target="$target.xz" + ;; + *) + warning "Could not find a compression program, the resulting tarball may be huge" + ;; + esac + + if [ -e $target ]; then + fatal "Destination $target already exists, specify an alternate name with --dest" + fi + + cd $dir >/dev/null 2>&1 + tar $tar_options $target $base >/dev/null 2>&1 + if [ $? -ne 0 ]; then + fatal "Could not archive $base, please investigate and collect manually" + fi + cd $olddir >/dev/null 2>&1 + + echo $target +} + +findln_by_time() { + local logf=$1 + local tm=$2 + local first=1 + + # Some logs can be massive (over 1,500,000,000 lines have been seen in the wild) + # Even just 'wc -l' on these files can take 10+ minutes + + local fileSize=`ls -lh "$logf" | awk '{ print $5 }' | grep -ie G` + if [ x$fileSize != x ]; then + warning "$logf is ${fileSize} in size and could take many hours to process. Skipping." + return + fi + + local last=`wc -l < $logf` + while [ $first -le $last ]; do + mid=$((($last+$first)/2)) + trycnt=10 + while [ $trycnt -gt 0 ]; do + tmid=`linetime $logf $mid` + [ "$tmid" ] && break + warning "cannot extract time: $logf:$mid; will try the next one" + trycnt=$(($trycnt-1)) + # shift the whole first-last segment + first=$(($first-1)) + last=$(($last-1)) + mid=$((($last+$first)/2)) + done + if [ -z "$tmid" ]; then + warning "giving up on log..." + return + fi + if [ $tmid -gt $tm ]; then + last=$(($mid-1)) + elif [ $tmid -lt $tm ]; then + first=$(($mid+1)) + else + break + fi + done + echo $mid +} + +dumplog() { + local logf=$1 + local from_line=$2 + local to_line=$3 + [ "$from_line" ] || + return + tail -n +$from_line $logf | + if [ "$to_line" ]; then + head -$(($to_line-$from_line+1)) + else + cat + fi +} + +# +# find log/set of logs which are interesting for us +# +# +# find log slices +# + +find_decompressor() { + case $1 in + *bz2) echo "bzip2 -dc" ;; + *gz) echo "gzip -dc" ;; + *xz) echo "xz -dc" ;; + *) echo "cat" ;; + esac +} + +# +# check if the log contains a piece of our segment +# +is_our_log() { + local logf=$1 + local from_time=$2 + local to_time=$3 + + local cat=`find_decompressor $logf` + local format=`$cat $logf | get_time_format` + local first_time=`$cat $logf | head -10 | get_first_time $format` + local last_time=`$cat $logf | tail -10 | get_last_time $format` + + if [ x = "x$first_time" -o x = "x$last_time" ]; then + warning "Skipping bad logfile '$1': Could not determine log dates" + return 0 # skip (empty log?) + fi + if [ $from_time -gt $last_time ]; then + # we shouldn't get here anyway if the logs are in order + return 2 # we're past good logs; exit + fi + if [ $from_time -ge $first_time ]; then + return 3 # this is the last good log + fi + # have to go further back + if [ x = "x$to_time" -o $to_time -ge $first_time ]; then + return 1 # include this log + else + return 0 # don't include this log + fi +} +# +# go through archived logs (timewise backwards) and see if there +# are lines belonging to us +# (we rely on untouched log files, i.e. that modify time +# hasn't been changed) +# +arch_logs() { + local logf=$1 + local from_time=$2 + local to_time=$3 + + # look for files such as: ha-log-20090308 or + # ha-log-20090308.gz (.bz2) or ha-log.0, etc + ls -t $logf $logf*[0-9z] 2>/dev/null | + while read next_log; do + is_our_log $next_log $from_time $to_time + case $? in + 0) ;; # noop, continue + 1) echo $next_log # include log and continue + debug "Found log $next_log" + ;; + 2) break;; # don't go through older logs! + 3) echo $next_log # include log and continue + debug "Found log $next_log" + break + ;; # don't go through older logs! + esac + done +} + +# +# print part of the log +# +drop_tmp_file() { + [ -z "$tmp" ] || rm -f "$tmp" +} + +print_logseg() { + local logf=$1 + local from_time=$2 + local to_time=$3 + + # uncompress to a temp file (if necessary) + local cat=`find_decompressor $logf` + if [ "$cat" != "cat" ]; then + tmp=`mktemp` + $cat $logf > $tmp + trap drop_tmp_file 0 + sourcef=$tmp + else + sourcef=$logf + tmp="" + fi + + if [ "$from_time" = 0 ]; then + FROM_LINE=1 + else + FROM_LINE=`findln_by_time $sourcef $from_time` + fi + if [ -z "$FROM_LINE" ]; then + warning "couldn't find line for time $from_time; corrupt log file?" + return + fi + + TO_LINE="" + if [ "$to_time" != 0 ]; then + TO_LINE=`findln_by_time $sourcef $to_time` + if [ -z "$TO_LINE" ]; then + warning "couldn't find line for time $to_time; corrupt log file?" + return + fi + if [ $FROM_LINE -lt $TO_LINE ]; then + dumplog $sourcef $FROM_LINE $TO_LINE + log "Including segment [$FROM_LINE-$TO_LINE] from $logf" + else + debug "Empty segment [$FROM_LINE-$TO_LINE] from $logf" + fi + else + dumplog $sourcef $FROM_LINE $TO_LINE + log "Including all logs after line $FROM_LINE from $logf" + fi + drop_tmp_file + trap "" 0 +} + +# +# find log/set of logs which are interesting for us +# +dumplogset() { + local logf=$1 + local from_time=$2 + local to_time=$3 + + local logf_set=`arch_logs $logf $from_time $to_time` + if [ x = "x$logf_set" ]; then + return + fi + + local num_logs=`echo "$logf_set" | wc -l` + local oldest=`echo $logf_set | awk '{print $NF}'` + local newest=`echo $logf_set | awk '{print $1}'` + local mid_logfiles=`echo $logf_set | awk '{for(i=NF-1; i>1; i--) print $i}'` + + # the first logfile: from $from_time to $to_time (or end) + # logfiles in the middle: all + # the last logfile: from beginning to $to_time (or end) + case $num_logs in + 1) print_logseg $newest $from_time $to_time;; + *) + print_logseg $oldest $from_time 0 + for f in $mid_logfiles; do + `find_decompressor $f` $f + debug "including complete $f logfile" + done + print_logseg $newest 0 $to_time + ;; + esac +} + +# cut out a stanza +getstanza() { + awk -v name="$1" ' + !in_stanza && NF==2 && /^[a-z][a-z]*[[:space:]]*{/ { # stanza start + if ($1 == name) + in_stanza = 1 + } + in_stanza { print } + in_stanza && NF==1 && $1 == "}" { exit } + ' +} +# supply stanza in $1 and variable name in $2 +# (stanza is optional) +getcfvar() { + cf_type=$1; shift; + cf_var=$1; shift; + cf_file=$* + + [ -f "$cf_file" ] || return + case $cf_type in + corosync) + sed 's/#.*//' < $cf_file | + if [ $# -eq 2 ]; then + getstanza "$cf_var" + shift 1 + else + cat + fi | + awk -v varname="$cf_var" ' + NF==2 && match($1,varname":$")==1 { print $2; exit; } + ' + ;; + esac +} + +pickfirst() { + for x; do + which $x >/dev/null 2>&1 && { + echo $x + return 0 + } + done + return 1 +} + +# +# figure out the cluster type, depending on the process list +# and existence of configuration files +# +get_cluster_type() { + if is_running corosync; then + tool=`pickfirst corosync-objctl corosync-cmapctl` + case $tool in + *objctl) quorum=`$tool -a | grep quorum.provider | sed 's/.*=\s*//'`;; + *cmapctl) quorum=`$tool | grep quorum.provider | sed 's/.*=\s*//'`;; + esac + stack="corosync" + + # Now we're guessing... + + # TODO: Technically these could be anywhere :-/ + elif [ -f "@PCMK__COROSYNC_CONF@" ]; then + stack="corosync" + + else + # We still don't know. This might be a Pacemaker Remote node, + # or the configuration might be in a nonstandard location. + stack="any" + fi + + debug "Detected the '$stack' cluster stack" + echo $stack +} + +find_cluster_cf() { + case $1 in + corosync) + best_size=0 + best_file="" + + # TODO: Technically these could be anywhere :-/ + for cf in "@PCMK__COROSYNC_CONF@"; do + if [ -f $cf ]; then + size=`wc -l $cf | awk '{print $1}'` + if [ $size -gt $best_size ]; then + best_size=$size + best_file=$cf + fi + fi + done + if [ -z "$best_file" ]; then + debug "Looking for corosync configuration file. This may take a while..." + for f in `find / -maxdepth $maxdepth -type f -name corosync.conf`; do + best_file=$f + break + done + fi + debug "Located corosync config file: $best_file" + echo "$best_file" + ;; + any) + # Cluster type is undetermined. Don't complain, because this + # might be a Pacemaker Remote node. + ;; + *) + warning "Unknown cluster type: $1" + ;; + esac +} + +# +# check for the major prereq for a) parameter parsing and b) +# parsing logs +# +t=`get_time "12:00"` +if [ "$t" = "" ]; then + fatal "please install the perl Date::Parse module (perl-DateTime-Format-DateParse on Fedora/Red Hat)" +fi + +# Override any locale settings so collected output is in a common language +LC_ALL="C" +export LC_ALL + +# vim: set expandtab tabstop=8 softtabstop=4 shiftwidth=4 textwidth=80: diff --git a/tools/stonith_admin.8.inc b/tools/stonith_admin.8.inc new file mode 100644 index 0000000..681ed1f --- /dev/null +++ b/tools/stonith_admin.8.inc @@ -0,0 +1,5 @@ +[=synopsis] +stonith_admin [] + +/Access the Pacemaker fencing API/ +.SH OPTIONS diff --git a/tools/stonith_admin.c b/tools/stonith_admin.c new file mode 100644 index 0000000..1077de7 --- /dev/null +++ b/tools/stonith_admin.c @@ -0,0 +1,674 @@ +/* + * Copyright 2009-2023 the Pacemaker project contributors + * + * The version control history for this file may have further details. + * + * This source code is licensed under the GNU General Public License version 2 + * or later (GPLv2+) WITHOUT ANY WARRANTY. + */ + +#include + +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include + +#include +#include + +#define SUMMARY "stonith_admin - Access the Pacemaker fencing API" + +char action = 0; + +struct { + gboolean as_nodeid; + gboolean broadcast; + gboolean cleanup; + gboolean installed; + gboolean metadata; + gboolean registered; + gboolean validate_cfg; + stonith_key_value_t *devices; + stonith_key_value_t *params; + int fence_level; + int timeout ; + int tolerance; + int delay; + char *agent; + char *confirm_host; + char *fence_host; + char *history; + char *last_fenced; + char *query; + char *reboot_host; + char *register_dev; + char *register_level; + char *targets; + char *terminate; + char *unfence_host; + char *unregister_dev; + char *unregister_level; +} options = { + .timeout = 120, + .delay = 0 +}; + +gboolean add_env_params(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean add_stonith_device(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean add_stonith_params(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean add_tolerance(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); +gboolean set_tag(const gchar *option_name, const gchar *optarg, gpointer data, GError **error); + +#define INDENT " " + +/* *INDENT-OFF* */ +static GOptionEntry defn_entries[] = { + { "register", 'R', 0, G_OPTION_ARG_STRING, &options.register_dev, + "Register the named stonith device. Requires: --agent.\n" + INDENT "Optional: --option, --env-option.", + "DEVICE" }, + { "deregister", 'D', 0, G_OPTION_ARG_STRING, &options.unregister_dev, + "De-register the named stonith device.", + "DEVICE" }, + { "register-level", 'r', 0, G_OPTION_ARG_STRING, &options.register_level, + "Register a stonith level for the named target,\n" + INDENT "specified as one of NAME, @PATTERN, or ATTR=VALUE.\n" + INDENT "Requires: --index and one or more --device entries.", + "TARGET" }, + { "deregister-level", 'd', 0, G_OPTION_ARG_STRING, &options.unregister_level, + "Unregister a stonith level for the named target,\n" + INDENT "specified as for --register-level. Requires: --index", + "TARGET" }, + + { NULL } +}; + +static GOptionEntry query_entries[] = { + { "list", 'l', 0, G_OPTION_ARG_STRING, &options.terminate, + "List devices that can terminate the specified host.\n" + INDENT "Optional: --timeout", + "HOST" }, + { "list-registered", 'L', 0, G_OPTION_ARG_NONE, &options.registered, + "List all registered devices. Optional: --timeout.", + NULL }, + { "list-installed", 'I', 0, G_OPTION_ARG_NONE, &options.installed, + "List all installed devices. Optional: --timeout.", + NULL }, + { "list-targets", 's', 0, G_OPTION_ARG_STRING, &options.targets, + "List the targets that can be fenced by the\n" + INDENT "named device. Optional: --timeout.", + "DEVICE" }, + { "metadata", 'M', 0, G_OPTION_ARG_NONE, &options.metadata, + "Show agent metadata. Requires: --agent.\n" + INDENT "Optional: --timeout.", + NULL }, + { "query", 'Q', 0, G_OPTION_ARG_STRING, &options.query, + "Check the named device's status. Optional: --timeout.", + "DEVICE" }, + { "history", 'H', 0, G_OPTION_ARG_STRING, &options.history, + "Show last successful fencing operation for named node\n" + INDENT "(or '*' for all nodes). Optional: --timeout, --cleanup,\n" + INDENT "--quiet (show only the operation's epoch timestamp),\n" + INDENT "--verbose (show all recorded and pending operations),\n" + INDENT "--broadcast (update history from all nodes available).", + "NODE" }, + { "last", 'h', 0, G_OPTION_ARG_STRING, &options.last_fenced, + "Indicate when the named node was last fenced.\n" + INDENT "Optional: --as-node-id.", + "NODE" }, + { "validate", 'K', 0, G_OPTION_ARG_NONE, &options.validate_cfg, + "Validate a fence device configuration.\n" + INDENT "Requires: --agent. Optional: --option, --env-option,\n" + INDENT "--quiet (print no output, only return status).", + NULL }, + + { NULL } +}; + +static GOptionEntry fence_entries[] = { + { "fence", 'F', 0, G_OPTION_ARG_STRING, &options.fence_host, + "Fence named host. Optional: --timeout, --tolerance, --delay.", + "HOST" }, + { "unfence", 'U', 0, G_OPTION_ARG_STRING, &options.unfence_host, + "Unfence named host. Optional: --timeout, --tolerance, --delay.", + "HOST" }, + { "reboot", 'B', 0, G_OPTION_ARG_STRING, &options.reboot_host, + "Reboot named host. Optional: --timeout, --tolerance, --delay.", + "HOST" }, + { "confirm", 'C', 0, G_OPTION_ARG_STRING, &options.confirm_host, + "Tell cluster that named host is now safely down.", + "HOST", }, + + { NULL } +}; + +static GOptionEntry addl_entries[] = { + { "cleanup", 'c', 0, G_OPTION_ARG_NONE, &options.cleanup, + "Cleanup wherever appropriate. Requires --history.", + NULL }, + { "broadcast", 'b', 0, G_OPTION_ARG_NONE, &options.broadcast, + "Broadcast wherever appropriate.", + NULL }, + { "agent", 'a', 0, G_OPTION_ARG_STRING, &options.agent, + "The agent to use (for example, fence_xvm;\n" + INDENT "with --register, --metadata, --validate).", + "AGENT" }, + { "option", 'o', 0, G_OPTION_ARG_CALLBACK, add_stonith_params, + "Specify a device configuration parameter as NAME=VALUE\n" + INDENT "(may be specified multiple times; with --register,\n" + INDENT "--validate).", + "PARAM" }, + { "env-option", 'e', 0, G_OPTION_ARG_CALLBACK, add_env_params, + "Specify a device configuration parameter with the\n" + INDENT "specified name, using the value of the\n" + INDENT "environment variable of the same name prefixed with\n" + INDENT "OCF_RESKEY_ (may be specified multiple times;\n" + INDENT "with --register, --validate).", + "PARAM" }, + { "tag", 'T', 0, G_OPTION_ARG_CALLBACK, set_tag, + "Identify fencing operations in logs with the specified\n" + INDENT "tag; useful when multiple entities might invoke\n" + INDENT "stonith_admin (used with most commands).", + "TAG" }, + { "device", 'v', 0, G_OPTION_ARG_CALLBACK, add_stonith_device, + "Device ID (with --register-level, device to associate with\n" + INDENT "a given host and level; may be specified multiple times)" +#if SUPPORT_CIBSECRETS + "\n" INDENT "(with --validate, name to use to load CIB secrets)" +#endif + ".", + "DEVICE" }, + { "index", 'i', 0, G_OPTION_ARG_INT, &options.fence_level, + "The stonith level (1-9) (with --register-level,\n" + INDENT "--deregister-level).", + "LEVEL" }, + { "timeout", 't', 0, G_OPTION_ARG_INT, &options.timeout, + "Operation timeout in seconds (default 120;\n" + INDENT "used with most commands).", + "SECONDS" }, + { "delay", 'y', 0, G_OPTION_ARG_INT, &options.delay, + "Apply a fencing delay in seconds. Any static/random delays from\n" + INDENT "pcmk_delay_base/max will be added, otherwise all\n" + INDENT "disabled with the value -1\n" + INDENT "(default 0; with --fence, --reboot, --unfence).", + "SECONDS" }, + { "as-node-id", 'n', 0, G_OPTION_ARG_NONE, &options.as_nodeid, + "(Advanced) The supplied node is the corosync node ID\n" + INDENT "(with --last).", + NULL }, + { "tolerance", 0, 0, G_OPTION_ARG_CALLBACK, add_tolerance, + "(Advanced) Do nothing if an equivalent --fence request\n" + INDENT "succeeded less than this many seconds earlier\n" + INDENT "(with --fence, --unfence, --reboot).", + "SECONDS" }, + + { NULL } +}; +/* *INDENT-ON* */ + +static pcmk__supported_format_t formats[] = { + PCMK__SUPPORTED_FORMAT_HTML, + PCMK__SUPPORTED_FORMAT_NONE, + PCMK__SUPPORTED_FORMAT_TEXT, + PCMK__SUPPORTED_FORMAT_XML, + { NULL, NULL, NULL } +}; + +static const int st_opts = st_opt_sync_call | st_opt_allow_suicide; + +static char *name = NULL; + +gboolean +add_env_params(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + char *key = crm_strdup_printf("OCF_RESKEY_%s", optarg); + const char *env = getenv(key); + gboolean retval = TRUE; + + if (env == NULL) { + g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "Invalid option: -e %s", optarg); + retval = FALSE; + } else { + crm_info("Got: '%s'='%s'", optarg, env); + options.params = stonith_key_value_add(options.params, optarg, env); + } + + free(key); + return retval; +} + +gboolean +add_stonith_device(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.devices = stonith_key_value_add(options.devices, NULL, optarg); + return TRUE; +} + +gboolean +add_tolerance(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + options.tolerance = crm_get_msec(optarg) / 1000; + return TRUE; +} + +gboolean +add_stonith_params(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + char *name = NULL; + char *value = NULL; + int rc = 0; + gboolean retval = TRUE; + + crm_info("Scanning: -o %s", optarg); + + rc = pcmk__scan_nvpair(optarg, &name, &value); + + if (rc != 2) { + rc = pcmk_legacy2rc(rc); + g_set_error(error, PCMK__RC_ERROR, rc, "Invalid option: -o %s: %s", optarg, pcmk_rc_str(rc)); + retval = FALSE; + } else { + crm_info("Got: '%s'='%s'", name, value); + options.params = stonith_key_value_add(options.params, name, value); + } + + free(name); + free(value); + return retval; +} + +gboolean +set_tag(const gchar *option_name, const gchar *optarg, gpointer data, GError **error) { + free(name); + name = crm_strdup_printf("%s.%s", crm_system_name, optarg); + return TRUE; +} + +static GOptionContext * +build_arg_context(pcmk__common_args_t *args, GOptionGroup **group) { + GOptionContext *context = NULL; + + GOptionEntry extra_prog_entries[] = { + { "quiet", 'q', 0, G_OPTION_ARG_NONE, &(args->quiet), + "Be less descriptive in output.", + NULL }, + + { NULL } + }; + + context = pcmk__build_arg_context(args, "text (default), html, xml", group, NULL); + + /* Add the -q option, which cannot be part of the globally supported options + * because some tools use that flag for something else. + */ + pcmk__add_main_args(context, extra_prog_entries); + + pcmk__add_arg_group(context, "definition", "Device Definition Commands:", + "Show device definition help", defn_entries); + pcmk__add_arg_group(context, "queries", "Queries:", + "Show query help", query_entries); + pcmk__add_arg_group(context, "fence", "Fencing Commands:", + "Show fence help", fence_entries); + pcmk__add_arg_group(context, "additional", "Additional Options:", + "Show additional options", addl_entries); + return context; +} + +// \return Standard Pacemaker return code +static int +request_fencing(stonith_t *st, const char *target, const char *command, + GError **error) +{ + char *reason = NULL; + int rc = pcmk__request_fencing(st, target, command, name, + options.timeout * 1000, + options.tolerance * 1000, + options.delay, &reason); + + if (rc != pcmk_rc_ok) { + const char *rc_str = pcmk_rc_str(rc); + const char *what = (strcmp(command, "on") == 0)? "unfence" : "fence"; + + // If reason is identical to return code string, don't display it twice + if (pcmk__str_eq(rc_str, reason, pcmk__str_none)) { + free(reason); + reason = NULL; + } + + g_set_error(error, PCMK__RC_ERROR, rc, + "Couldn't %s %s: %s%s%s%s", + what, target, rc_str, + ((reason == NULL)? "" : " ("), + ((reason == NULL)? "" : reason), + ((reason == NULL)? "" : ")")); + } + free(reason); + return rc; +} + +int +main(int argc, char **argv) +{ + int rc = 0; + crm_exit_t exit_code = CRM_EX_OK; + bool no_connect = false; + bool required_agent = false; + + char *target = NULL; + const char *device = NULL; + stonith_t *st = NULL; + + GError *error = NULL; + + pcmk__output_t *out = NULL; + + GOptionGroup *output_group = NULL; + pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY); + gchar **processed_args = pcmk__cmdline_preproc(argv, "adehilorstvyBCDFHQRTU"); + GOptionContext *context = build_arg_context(args, &output_group); + + pcmk__register_formats(output_group, formats); + if (!g_option_context_parse_strv(context, &processed_args, &error)) { + exit_code = CRM_EX_USAGE; + goto done; + } + + pcmk__cli_init_logging("stonith_admin", args->verbosity); + + if (name == NULL) { + name = strdup(crm_system_name); + } + + rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv); + if (rc != pcmk_rc_ok) { + exit_code = CRM_EX_ERROR; + g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s", + args->output_ty, pcmk_rc_str(rc)); + goto done; + } + + stonith__register_messages(out); + + if (args->version) { + out->version(out, false); + goto done; + } + + if (options.validate_cfg) { + required_agent = true; + no_connect = true; + action = 'K'; + } + + if (options.installed) { + no_connect = true; + action = 'I'; + } + + if (options.registered) { + action = 'L'; + } + + if (options.register_dev != NULL) { + required_agent = true; + action = 'R'; + device = options.register_dev; + } + + if (options.query != NULL) { + action = 'Q'; + device = options.query; + } + + if (options.unregister_dev != NULL) { + action = 'D'; + device = options.unregister_dev; + } + + if (options.targets != NULL) { + action = 's'; + device = options.targets; + } + + if (options.terminate != NULL) { + action = 'L'; + target = options.terminate; + } + + if (options.metadata) { + no_connect = true; + required_agent = true; + action = 'M'; + } + + if (options.reboot_host != NULL) { + no_connect = true; + action = 'B'; + target = options.reboot_host; + crm_log_args(argc, argv); + } + + if (options.fence_host != NULL) { + no_connect = true; + action = 'F'; + target = options.fence_host; + crm_log_args(argc, argv); + } + + if (options.unfence_host != NULL) { + no_connect = true; + action = 'U'; + target = options.unfence_host; + crm_log_args(argc, argv); + } + + if (options.confirm_host != NULL) { + action = 'C'; + target = options.confirm_host; + crm_log_args(argc, argv); + } + + if (options.last_fenced != NULL) { + action = 'h'; + target = options.last_fenced; + } + + if (options.history != NULL) { + action = 'H'; + target = options.history; + } + + if (options.register_level != NULL) { + action = 'r'; + target = options.register_level; + } + + if (options.unregister_level != NULL) { + action = 'd'; + target = options.unregister_level; + } + + if (action == 0) { + char *help = g_option_context_get_help(context, TRUE, NULL); + + out->err(out, "%s", help); + g_free(help); + exit_code = CRM_EX_USAGE; + goto done; + } + + if (required_agent && options.agent == NULL) { + char *help = g_option_context_get_help(context, TRUE, NULL); + + out->err(out, "Please specify an agent to query using -a,--agent [value]"); + out->err(out, "%s", help); + g_free(help); + exit_code = CRM_EX_USAGE; + goto done; + } + + out->quiet = args->quiet; + + st = stonith_api_new(); + if (st == NULL) { + rc = -ENOMEM; + } else if (!no_connect) { + rc = st->cmds->connect(st, name, NULL); + } + if (rc < 0) { + out->err(out, "Could not connect to fencer: %s", pcmk_strerror(rc)); + exit_code = CRM_EX_DISCONNECT; + goto done; + } + + switch (action) { + case 'I': + rc = pcmk__fence_installed(out, st, options.timeout*1000); + if (rc != pcmk_rc_ok) { + out->err(out, "Failed to list installed devices: %s", pcmk_strerror(rc)); + } + + break; + + case 'L': + rc = pcmk__fence_registered(out, st, target, options.timeout*1000); + if (rc != pcmk_rc_ok) { + out->err(out, "Failed to list registered devices: %s", pcmk_strerror(rc)); + } + + break; + + case 'Q': + rc = st->cmds->monitor(st, st_opts, device, options.timeout); + if (rc != pcmk_rc_ok) { + rc = st->cmds->list(st, st_opts, device, NULL, options.timeout); + } + rc = pcmk_legacy2rc(rc); + break; + + case 's': + rc = pcmk__fence_list_targets(out, st, device, options.timeout*1000); + if (rc != pcmk_rc_ok) { + out->err(out, "Couldn't list targets: %s", pcmk_strerror(rc)); + } + + break; + + case 'R': + rc = st->cmds->register_device(st, st_opts, device, NULL, options.agent, + options.params); + rc = pcmk_legacy2rc(rc); + if (rc != pcmk_rc_ok) { + out->err(out, "Can't register device %s using agent %s: %s", + device, options.agent, pcmk_rc_str(rc)); + } + break; + + case 'D': + rc = st->cmds->remove_device(st, st_opts, device); + rc = pcmk_legacy2rc(rc); + if (rc != pcmk_rc_ok) { + out->err(out, "Can't unregister device %s: %s", + device, pcmk_rc_str(rc)); + } + break; + + case 'd': + rc = pcmk__fence_unregister_level(st, target, options.fence_level); + if (rc != pcmk_rc_ok) { + out->err(out, "Can't unregister topology level %d for %s: %s", + options.fence_level, target, pcmk_rc_str(rc)); + } + break; + + case 'r': + rc = pcmk__fence_register_level(st, target, options.fence_level, options.devices); + if (rc != pcmk_rc_ok) { + out->err(out, "Can't register topology level %d for %s: %s", + options.fence_level, target, pcmk_rc_str(rc)); + } + break; + + case 'M': + rc = pcmk__fence_metadata(out, st, options.agent, options.timeout*1000); + if (rc != pcmk_rc_ok) { + out->err(out, "Can't get fence agent meta-data: %s", + pcmk_rc_str(rc)); + } + + break; + + case 'C': + rc = st->cmds->confirm(st, st_opts, target); + rc = pcmk_legacy2rc(rc); + break; + + case 'B': + rc = request_fencing(st, target, "reboot", &error); + break; + + case 'F': + rc = request_fencing(st, target, "off", &error); + break; + + case 'U': + rc = request_fencing(st, target, "on", &error); + break; + + case 'h': + rc = pcmk__fence_last(out, target, options.as_nodeid); + break; + + case 'H': + rc = pcmk__fence_history(out, st, target, options.timeout*1000, args->verbosity, + options.broadcast, options.cleanup); + break; + + case 'K': + device = options.devices ? options.devices->key : NULL; + rc = pcmk__fence_validate(out, st, options.agent, device, options.params, + options.timeout*1000); + break; + } + + crm_info("Command returned: %s (%d)", pcmk_rc_str(rc), rc); + exit_code = pcmk_rc2exitc(rc); + + done: + g_strfreev(processed_args); + pcmk__free_arg_context(context); + + pcmk__output_and_clear_error(&error, out); + + if (out != NULL) { + out->finish(out, exit_code, true, NULL); + pcmk__output_free(out); + } + pcmk__unregister_formats(); + free(name); + stonith_key_value_freeall(options.params, 1, 1); + + if (st != NULL) { + st->cmds->disconnect(st); + stonith_api_delete(st); + } + + return exit_code; +} -- cgit v1.2.3