- Kimchi-devel - oVirt List Archives

[V1 0/2] Add Users/Groups to VM
by huoyuxin＠linux.vnet.ibm.com 23 Jul '14

23 Jul '14

From: Yu Xin Huo <huoyuxin(a)linux.vnet.ibm.com> Yu Xin Huo (2): Add users/groups to VM update po po/en_US.po | 9 +++ po/kimchi.pot | 9 +++ po/pt_BR.po | 39 ++++++++----- po/zh_CN.po | 9 +++ ui/css/theme-default/guest-edit.css | 106 +++++++++++++++++++++++++++++++++ ui/images/theme-default/group.png | Bin 0 -> 1703 bytes ui/images/theme-default/user.png | Bin 0 -> 1322 bytes ui/js/src/kimchi.api.js | 28 +++++++++ ui/js/src/kimchi.guest_edit_main.js | 112 ++++++++++++++++++++++++++++++++++- ui/pages/guest-edit.html.tmpl | 33 ++++++++++ 10 files changed, 327 insertions(+), 18 deletions(-) create mode 100644 ui/images/theme-default/group.png create mode 100644 ui/images/theme-default/user.png

4 8

[PATCH 0/2 V2] [Fix BZ#111243 - pkvm 2.1-SP2]
by Rodrigo Trujillo 23 Jul '14

23 Jul '14

V2: - Patch disables vhost feature only in ubuntu 14.04 or lower V1: Patch 1 - Disables vhost feature Patch 2 - Uses/modify SUSE patch from kimchi upstream. Adds SLES and change RHEL version (6.5) in modern distros dict. Modern distros are going to use virtio. Rodrigo Trujillo (2): Disable vhost feature in Ubuntu LE Change modern distro versions src/kimchi/isoinfo.py | 1 + src/kimchi/osinfo.py | 9 ++++++--- src/kimchi/vmtemplate.py | 10 +++++++++- 3 files changed, 16 insertions(+), 4 deletions(-) -- 1.9.3

1 3

[PATCHv3 0/8] Support img based template
by lvroyce0210＠gmail.com 23 Jul '14

23 Jul '14

From: Royce Lv <lvroyce(a)linux.vnet.ibm.com> v2>v3, Clear unused iso link, Adding mockmodel and tests How to test: create a image using: POST /templates {'name':'mytemp', 'disks':[{'base':'a_base_img_path'}]} create a vm using: POST /vms {'template': '/templates/mytemp', 'pool'....} Known issues: 1.This is only available for NFS and dir pool, logical pool in kimchi now adopted raw format which does not suitable for qcow2 img(will fix later). iscsi, scsi pool volume size need to be checked and handled later. So in this version just support dir based pool. 2.Due to template integrity check need be refactored, this check will be added later. Royce Lv (8): Add image probe function Change doc and api specification Change 'cdrom' to a optional param Fix: Prevent iso links filling in osinfo.py Integrate image os probe in vm template create Create volume based on backing store image Update mockmodel of base img vm Add tests for image based template Makefile.am | 1 + contrib/DEBIAN/control.in | 4 +- contrib/kimchi.spec.fedora.in | 2 + contrib/kimchi.spec.suse.in | 2 + docs/API.md | 3 +- docs/README.md | 9 +++-- src/kimchi/API.json | 8 +++- src/kimchi/control/storagevolumes.py | 2 +- src/kimchi/control/templates.py | 2 +- src/kimchi/exception.py | 4 ++ src/kimchi/i18n.py | 8 +++- src/kimchi/imageinfo.py | 66 +++++++++++++++++++++++++++++++ src/kimchi/mockmodel.py | 31 ++++++++++++--- src/kimchi/model/templates.py | 13 +++--- src/kimchi/model/vms.py | 1 + src/kimchi/osinfo.py | 24 +----------- src/kimchi/vmtemplate.py | 76 ++++++++++++++++++++++++------------ tests/test_model.py | 25 ++++++++++++ tests/test_osinfo.py | 8 ---- tests/test_rest.py | 32 ++++++++++++++- tests/test_vmtemplate.py | 2 +- 21 files changed, 244 insertions(+), 79 deletions(-) create mode 100644 src/kimchi/imageinfo.py -- 1.8.3.2

3 18

[PATCH V3 0/4] Authorization: disable non-root user functions in UI
by wenwang＠linux.vnet.ibm.com 23 Jul '14

23 Jul '14

From: Wen Wang <wenwang(a)linux.vnet.ibm.com> V2 -> V3: stored the mode into global _tabMode that can be used for each tab.(Aline) Making the buttons that is not avaiable for non-root users invisible by default and enable when user is admin.(Yu Xin) Fixed css inconsistent under "Storage" tab. Removed the onClick function if the buttons are not avaiable. V1 -> V2: Store "roles" parameter in cookie instead of each tab's mode.(Aline) read only "roles" from cookie instead of roles of each tab(Aline) Minor changes in method of removing "Action" title under network tab (Hongliang Wang) This patch defines user privilege according to different user roles In this release, only two roles are supported: "admin" and "user", conbined with four modes: "admin", "byInstance", "read-only" and "none", each of which has own privileges to different tabs as well as instances. modes are stored in cookie and functions of different roles are protected in the back-end. Wen Wang (4): Add roles into cookie Authorization: remove host/template tabs for non-root users Authorization: remove [+] icon from non-root users view Authorization: Remove actions based on roles ui/css/theme-default/storage.css | 22 ++++--- ui/js/src/kimchi.guest_main.js | 10 ++- ui/js/src/kimchi.login.js | 16 +++-- ui/js/src/kimchi.main.js | 26 +++++-- ui/js/src/kimchi.network.js | 10 +++- ui/js/src/kimchi.storage_main.js | 137 ++++++++++++++++++++----------------- ui/js/src/kimchi.template_main.js | 21 ++++-- ui/pages/tabs/guests.html.tmpl | 4 +- ui/pages/tabs/network.html.tmpl | 6 +- ui/pages/tabs/storage.html.tmpl | 6 +- ui/pages/tabs/templates.html.tmpl | 2 +- 11 files changed, 153 insertions(+), 107 deletions(-)

3 6

[PATCH V3 0/5] vm ticket in backend
by shaohef＠linux.vnet.ibm.com 22 Jul '14

22 Jul '14

From: ShaoHe Feng <shaohef(a)linux.vnet.ibm.com> V2 -> V3: do not make ticket as sub-resource of a VM V1 -> V2: make ticket as sub-resource of a VM A ticket is the credential to access VM. Only who get the ticket can access a VM. test this patch set: set the ticket $ sudo curl -k -u <user>:<password> -H "Content-Type: application/json" -H \ "Accept: application/json" https://localhost:8001/vms/test-vm-8/ \ -X PUT -d '{"ticket": {"passwd": "abcd"}}' get the ticket $ sudo curl -k -u <user>:<password> -H "Content-Type: application/json" -H \ "Accept: application/json" https://localhost:8001/vms/test-vm-8/ ShaoHe Feng (5): vm ticket in backend: update API.md vm ticket in backend: update controller and API.json vm ticket in backend: update model vm ticket in backend: update mockmodel vm ticket in backend: update test case docs/API.md | 7 +++++ src/kimchi/API.json | 16 +++++++++++ src/kimchi/control/vms.py | 3 ++- src/kimchi/i18n.py | 2 ++ src/kimchi/mockmodel.py | 14 ++++++++++ src/kimchi/model/vms.py | 68 +++++++++++++++++++++++++++++++++++++++++++++++ tests/test_model.py | 15 +++++++++++ tests/test_rest.py | 12 +++++++++ 8 files changed, 136 insertions(+), 1 deletion(-) -- 1.9.3

2 7

[PATCH V2] add a base64 safe url encode and decode to js utils
by shaohef＠linux.vnet.ibm.com 22 Jul '14

22 Jul '14

From: ShaoHe Feng <shaohef(a)linux.vnet.ibm.com> V1 -> V2: address zhengsheng's comment. add the base64 wiki to commit message. ShaoHe Feng (1): add a base64 safe url encode and decode to js utils ui/js/src/kimchi.utils.js | 8 ++++++++ 1 file changed, 8 insertions(+) -- 1.9.3

3 4

[RFC]Redirect to login page if user close the browser
by Wen Wang 22 Jul '14

22 Jul '14

Hi all, Now after closing the browser, paste the url you copied from either kimchi or vnc, you can access kimchi or vnc without asking for authentication with login page. I think it's better to redirect user to login page after closing the browser even if they pasted their url used before to enhance the security. Thanks Wang Wen

2 1

[PATCH V2 0/4] Authorization: disable non-root user functions in UI
by wenwang＠linux.vnet.ibm.com 22 Jul '14

22 Jul '14

From: Wen Wang <wenwang(a)linux.vnet.ibm.com> V1 -> V2: Store "roles" parameter in cookie instead of each tab's mode.(Aline) read only "roles" from cookie instead of roles of each tab(Aline) Minor changes in method of removing "Action" title under network tab (Hongliang Wang) This patch defines user privilege according to different user roles In this release, only two roles are supported: "admin" and "user", conbined with four modes: "admin", "byInstance", "read-only" and "none", each of which has own privileges to different tabs as well as instances. modes are stored in cookie and functions of different roles are protected in the back-end. Wen Wang (4): Add roles into cookie Authorization: remove host/template tabs for non-root users Authorization: remove [+] icon from non-root users view Authorization: Remove actions based on roles ui/css/theme-default/storage.css | 18 +++++++++--------- ui/js/src/kimchi.guest_main.js | 4 ++++ ui/js/src/kimchi.login.js | 16 +++++++++------- ui/js/src/kimchi.main.js | 24 ++++++++++++++++-------- ui/js/src/kimchi.network.js | 9 +++++++++ ui/js/src/kimchi.storage_main.js | 11 +++++++++++ 6 files changed, 58 insertions(+), 24 deletions(-)

3 7

[PATCH 0/4] Authorization: disable non-root user functions in UI
by wenwang＠linux.vnet.ibm.com 22 Jul '14

22 Jul '14

From: Wen Wang <wenwang(a)linux.vnet.ibm.com> This patch defines user privilege according to different user roles In this release, only two roles are supported: "admin" and "user", conbined with four modes: "admin", "byInstance", "read-only" and "none", each of which has own privileges to different tabs as well as instances. modes are stored in cookie and functions of different roles are protected in the back-end. Please apply Aline's patches first before this one. Below are the references: (1)[Kimchi-devel] [PATCH 0/4 V2] Let frontend redirect user after logging (2)[Kimchi-devel] [PATCH 0/5 V3] authorization: Backend changes Apply these two patches in order then this UI changes can work Wen Wang (4): Add modes into cookie Authorization: remove host/template tabs for non-root users Authorization: remove [+] icon from non-root users view Authorization: Remove actions based on roles ui/css/theme-default/storage.css | 18 +++++++++--------- ui/js/src/kimchi.guest_main.js | 4 ++++ ui/js/src/kimchi.login.js | 20 +++++++++++++------- ui/js/src/kimchi.main.js | 21 +++++++++++++-------- ui/js/src/kimchi.network.js | 9 +++++++++ ui/js/src/kimchi.storage_main.js | 11 +++++++++++ 6 files changed, 59 insertions(+), 24 deletions(-)

3 14

[PATCH 0/3 WIP] Let frontend redirect user after logging
by alinefm＠linux.vnet.ibm.com 21 Jul '14

21 Jul '14

From: Aline Manera <alinefm(a)linux.vnet.ibm.com> This patch set removes useless files related to former login design and redirect user in frontend after logging - that way frontend can store user information for authorization matters. The patch 2 has 2 problems: 1) the next URL is encoded using base64 So in UI I need to decode it. How do I do that? 2) while using kimchi.cookie.get() to get the lastPage it returns the URL with "" So the redirection fails as it tries to redirect the user to "/#tabs/guests" How do I remove those "" around the cookie value? Any help is welcome! Aline Manera (3): Remove former login design files Remove special console rules from nginx configuration Let frontend redirect user after logging src/kimchi/auth.py | 6 -- src/kimchi/root.py | 19 +----- src/nginx.conf.in | 11 ---- ui/js/src/kimchi.login.js | 73 ++++++++++++++++++++++ ui/js/src/kimchi.login_window.js | 128 --------------------------------------- ui/pages/login-window.html.tmpl | 53 ---------------- ui/pages/login.html.tmpl | 36 ++--------- 7 files changed, 78 insertions(+), 248 deletions(-) create mode 100644 ui/js/src/kimchi.login.js delete mode 100644 ui/js/src/kimchi.login_window.js delete mode 100644 ui/pages/login-window.html.tmpl -- 1.9.3

4 9