]> git.proxmox.com Git - pve-container.git/blobdiff - src/PVE/API2/LXC.pm
fix #1532: add target-storage support to migration
[pve-container.git] / src / PVE / API2 / LXC.pm
index 05cfbad7b3750df8110d5436765cb57bd2d80900..61eaaf7c24df37d6650989549924fed69a89efee 100644 (file)
@@ -36,6 +36,18 @@ BEGIN {
     }
 }
 
+my $check_storage_access_migrate = sub {
+    my ($rpcenv, $authuser, $storecfg, $storage, $node) = @_;
+
+    PVE::Storage::storage_check_enabled($storecfg, $storage, $node);
+
+    $rpcenv->check($authuser, "/storage/$storage", ['Datastore.AllocateSpace']);
+
+    my $scfg = PVE::Storage::storage_config($storecfg, $storage);
+    die "storage '$storage' does not support CT rootdirs\n"
+       if !$scfg->{content}->{rootdir};
+};
+
 __PACKAGE__->register_method ({
     subclass => "PVE::API2::LXC::Config",
     path => '{vmid}/config',
@@ -1091,6 +1103,7 @@ __PACKAGE__->register_method({
                description => "Target node.",
                completion => \&PVE::Cluster::complete_migration_target,
            }),
+           'target-storage' => get_standard_option('pve-targetstorage'),
            online => {
                type => 'boolean',
                description => "Use online/live migration.",
@@ -1149,6 +1162,25 @@ __PACKAGE__->register_method({
                if !$param->{online} && !$param->{restart};
        }
 
+       if (my $targetstorage = delete $param->{'target-storage'}) {
+           my $storecfg = PVE::Storage::config();
+           my $storagemap = eval { PVE::JSONSchema::parse_idmap($targetstorage, 'pve-storage-id') };
+           raise_param_exc({ targetstorage => "failed to parse storage map: $@" })
+               if $@;
+
+           $rpcenv->check_vm_perm($authuser, $vmid, undef, ['VM.Config.Disk'])
+               if !defined($storagemap->{identity});
+
+           foreach my $target_sid (values %{$storagemap->{entries}}) {
+               $check_storage_access_migrate->($rpcenv, $authuser, $storecfg, $target_sid, $target);
+           }
+
+           $check_storage_access_migrate->($rpcenv, $authuser, $storecfg, $storagemap->{default}, $target)
+               if $storagemap->{default};
+
+           $param->{storagemap} = $storagemap;
+       }
+
        if (PVE::HA::Config::vm_is_ha_managed($vmid) && $rpcenv->{type} ne 'ha') {
 
            my $hacmd = sub {
@@ -1513,20 +1545,13 @@ __PACKAGE__->register_method({
            $newconf->{lock} = 'create';
 
            # delete all snapshot related config options
-           delete $newconf->{snapshots};
-           delete $newconf->{parent};
-           delete $newconf->{snaptime};
-           delete $newconf->{snapstate};
+           delete $newconf->@{qw(snapshots parent snaptime snapstate)};
 
            delete $newconf->{pending};
            delete $newconf->{template};
-           if ($param->{hostname}) {
-               $newconf->{hostname} = $param->{hostname};
-           }
 
-           if ($param->{description}) {
-               $newconf->{description} = $param->{description};
-           }
+           $newconf->{hostname} = $param->{hostname} if $param->{hostname};
+           $newconf->{description} = $param->{description} if $param->{description};
 
            $lock_and_reload->($newid, sub {
                PVE::LXC::Config->write_config($newid, $newconf);
@@ -1820,39 +1845,45 @@ __PACKAGE__->register_method({
     method => 'POST',
     protected => 1,
     proxyto => 'node',
-    description => "Move a rootfs-/mp-volume to a different storage",
+    description => "Move a rootfs-/mp-volume to a different storage or to a different container.",
     permissions => {
        description => "You need 'VM.Config.Disk' permissions on /vms/{vmid}, " .
-           "and 'Datastore.AllocateSpace' permissions on the storage.",
-       check =>
-       [ 'and',
-         ['perm', '/vms/{vmid}', [ 'VM.Config.Disk' ]],
-         ['perm', '/storage/{storage}', [ 'Datastore.AllocateSpace' ]],
-       ],
+           "and 'Datastore.AllocateSpace' permissions on the storage. To move ".
+           "a volume to another container, you need the permissions on the ".
+           "target container as well.",
+       check => ['perm', '/vms/{vmid}', [ 'VM.Config.Disk' ]],
     },
     parameters => {
        additionalProperties => 0,
        properties => {
            node => get_standard_option('pve-node'),
            vmid => get_standard_option('pve-vmid', { completion => \&PVE::LXC::complete_ctid }),
+           'target-vmid' => get_standard_option('pve-vmid', {
+               completion => \&PVE::LXC::complete_ctid,
+               optional => 1,
+           }),
            volume => {
                type => 'string',
-               enum => [ PVE::LXC::Config->valid_volume_keys() ],
+               #TODO: check how to handle unused mount points as the mp parameter is not configured
+               enum => [ PVE::LXC::Config->valid_volume_keys_with_unused() ],
                description => "Volume which will be moved.",
            },
            storage => get_standard_option('pve-storage-id', {
                description => "Target Storage.",
                completion => \&PVE::Storage::complete_storage_enabled,
+               optional => 1,
            }),
            delete => {
                type => 'boolean',
-               description => "Delete the original volume after successful copy. By default the original is kept as an unused volume entry.",
+               description => "Delete the original volume after successful copy. By default the " .
+                   "original is kept as an unused volume entry.",
                optional => 1,
                default => 0,
            },
            digest => {
                type => 'string',
-               description => 'Prevent changes if current configuration file has different SHA1 digest. This can be used to prevent concurrent modifications.',
+               description => 'Prevent changes if current configuration file has different SHA1 " .
+                   "digest. This can be used to prevent concurrent modifications.',
                maxLength => 40,
                optional => 1,
            },
@@ -1863,6 +1894,21 @@ __PACKAGE__->register_method({
                minimum => '0',
                default => 'clone limit from datacenter or storage config',
            },
+           'target-volume' => {
+               type => 'string',
+               description => "The config key the volume will be moved to. Default is the " .
+                   "source volume key.",
+               enum => [PVE::LXC::Config->valid_volume_keys_with_unused()],
+               optional => 1,
+           },
+           'target-digest' => {
+               type => 'string',
+               description => 'Prevent changes if current configuration file of the target " .
+                   "container has a different SHA1 digest. This can be used to prevent " .
+                   "concurrent modifications.',
+               maxLength => 40,
+               optional => 1,
+           },
        },
     },
     returns => {
@@ -1877,34 +1923,59 @@ __PACKAGE__->register_method({
 
        my $vmid = extract_param($param, 'vmid');
 
+       my $target_vmid = extract_param($param, 'target-vmid');
+
        my $storage = extract_param($param, 'storage');
 
        my $mpkey = extract_param($param, 'volume');
 
+       my $target_mpkey = extract_param($param, 'target-volume') // $mpkey;
+
+       my $digest = extract_param($param, 'digest');
+
+       my $target_digest = extract_param($param, 'target-digest');
+
        my $lockname = 'disk';
 
        my ($mpdata, $old_volid);
 
-       PVE::LXC::Config->lock_config($vmid, sub {
-           my $conf = PVE::LXC::Config->load_config($vmid);
-           PVE::LXC::Config->check_lock($conf);
+       die "either set storage or target-vmid, but not both\n"
+           if $storage && $target_vmid;
 
-           die "cannot move volumes of a running container\n" if PVE::LXC::check_running($vmid);
+       my $storecfg = PVE::Storage::config();
 
-           $mpdata = PVE::LXC::Config->parse_volume($mpkey, $conf->{$mpkey});
-           $old_volid = $mpdata->{volume};
+       my $move_to_storage_checks = sub {
+           PVE::LXC::Config->lock_config($vmid, sub {
+               my $conf = PVE::LXC::Config->load_config($vmid);
+               PVE::LXC::Config->check_lock($conf);
 
-           die "you can't move a volume with snapshots and delete the source\n"
-               if $param->{delete} && PVE::LXC::Config->is_volume_in_use_by_snapshots($conf, $old_volid);
+               die "cannot move volumes of a running container\n"
+                   if PVE::LXC::check_running($vmid);
 
-           PVE::Tools::assert_if_modified($param->{digest}, $conf->{digest});
+               if ($mpkey =~ m/^unused\d+$/) {
+                   die "cannot move volume '$mpkey', only configured volumes can be moved to ".
+                       "another storage\n";
+               }
 
-           PVE::LXC::Config->set_lock($vmid, $lockname);
-       });
+               $mpdata = PVE::LXC::Config->parse_volume($mpkey, $conf->{$mpkey});
+               $old_volid = $mpdata->{volume};
 
-       my $realcmd = sub {
+               die "you can't move a volume with snapshots and delete the source\n"
+                   if $param->{delete} && PVE::LXC::Config->is_volume_in_use_by_snapshots($conf, $old_volid);
+
+               PVE::Tools::assert_if_modified($digest, $conf->{digest});
+
+               PVE::LXC::Config->set_lock($vmid, $lockname);
+           });
+       };
+
+       my $storage_realcmd = sub {
            eval {
-               PVE::Cluster::log_msg('info', $authuser, "move volume CT $vmid: move --volume $mpkey --storage $storage");
+               PVE::Cluster::log_msg(
+                   'info',
+                   $authuser,
+                   "move volume CT $vmid: move --volume $mpkey --storage $storage"
+               );
 
                my $conf = PVE::LXC::Config->load_config($vmid);
                my $storage_cfg = PVE::Storage::config();
@@ -1915,8 +1986,20 @@ __PACKAGE__->register_method({
                    PVE::Storage::activate_volumes($storage_cfg, [ $old_volid ]);
                    my $bwlimit = extract_param($param, 'bwlimit');
                    my $source_storage = PVE::Storage::parse_volume_id($old_volid);
-                   my $movelimit = PVE::Storage::get_bandwidth_limit('move', [$source_storage, $storage], $bwlimit);
-                   $new_volid = PVE::LXC::copy_volume($mpdata, $vmid, $storage, $storage_cfg, $conf, undef, $movelimit);
+                   my $movelimit = PVE::Storage::get_bandwidth_limit(
+                       'move',
+                       [$source_storage, $storage],
+                       $bwlimit
+                   );
+                   $new_volid = PVE::LXC::copy_volume(
+                       $mpdata,
+                       $vmid,
+                       $storage,
+                       $storage_cfg,
+                       $conf,
+                       undef,
+                       $movelimit
+                   );
                    if (PVE::LXC::Config->is_template($conf)) {
                        PVE::Storage::activate_volumes($storage_cfg, [ $new_volid ]);
                        my $template_volid = PVE::Storage::vdisk_create_base($storage_cfg, $new_volid);
@@ -1930,7 +2013,10 @@ __PACKAGE__->register_method({
                        $conf = PVE::LXC::Config->load_config($vmid);
                        PVE::Tools::assert_if_modified($digest, $conf->{digest});
 
-                       $conf->{$mpkey} = PVE::LXC::Config->print_ct_mountpoint($mpdata, $mpkey eq 'rootfs');
+                       $conf->{$mpkey} = PVE::LXC::Config->print_ct_mountpoint(
+                           $mpdata,
+                           $mpkey eq 'rootfs'
+                       );
 
                        PVE::LXC::Config->add_unused_volume($conf, $old_volid) if !$param->{delete};
 
@@ -1972,15 +2058,199 @@ __PACKAGE__->register_method({
            warn $@ if $@;
            die $err if $err;
        };
-       my $task = eval {
-           $rpcenv->fork_worker('move_volume', $vmid, $authuser, $realcmd);
+
+       my $load_and_check_reassign_configs = sub {
+           my $vmlist = PVE::Cluster::get_vmlist()->{ids};
+
+           die "Cannot move to/from 'rootfs'\n" if $mpkey eq "rootfs" || $target_mpkey eq "rootfs";
+
+           if ($mpkey =~ m/^unused\d+$/ && $target_mpkey !~ m/^unused\d+$/) {
+               die "Moving an unused volume to a used one is not possible\n";
+           }
+           die "could not find CT ${vmid}\n" if !exists($vmlist->{$vmid});
+           die "could not find CT ${target_vmid}\n" if !exists($vmlist->{$target_vmid});
+
+           my $source_node = $vmlist->{$vmid}->{node};
+           my $target_node = $vmlist->{$target_vmid}->{node};
+
+           die "Both containers need to be on the same node ($source_node != $target_node)\n"
+               if $source_node ne $target_node;
+
+           my $source_conf = PVE::LXC::Config->load_config($vmid);
+           PVE::LXC::Config->check_lock($source_conf);
+           my $target_conf = PVE::LXC::Config->load_config($target_vmid);
+           PVE::LXC::Config->check_lock($target_conf);
+
+           die "Can't move volumes from or to template CT\n"
+               if ($source_conf->{template} || $target_conf->{template});
+
+           if ($digest) {
+               eval { PVE::Tools::assert_if_modified($digest, $source_conf->{digest}) };
+               die "Container ${vmid}: $@" if $@;
+           }
+
+           if ($target_digest) {
+               eval { PVE::Tools::assert_if_modified($target_digest, $target_conf->{digest}) };
+               die "Container ${target_vmid}: $@" if $@;
+           }
+
+           die "volume '${mpkey}' for container '$vmid' does not exist\n"
+               if !defined($source_conf->{$mpkey});
+
+           die "Target volume key '${target_mpkey}' is already in use for container '$target_vmid'\n"
+               if exists $target_conf->{$target_mpkey};
+
+           my $drive = PVE::LXC::Config->parse_volume(
+               $mpkey,
+               $source_conf->{$mpkey},
+           );
+
+           my $source_volid = $drive->{volume};
+
+           die "Volume '${mpkey}' has no associated image\n"
+               if !$source_volid;
+           die "Cannot move volume used by a snapshot to another container\n"
+               if PVE::LXC::Config->is_volume_in_use_by_snapshots($source_conf, $source_volid);
+           die "Storage does not support moving of this disk to another container\n"
+               if !PVE::Storage::volume_has_feature($storecfg, 'rename', $source_volid);
+           die "Cannot move a bindmount or device mount to another container\n"
+               if $drive->{type} ne "volume";
+           die "Cannot move volume to another container while the source is running - detach first\n"
+               if PVE::LXC::check_running($vmid) && $mpkey !~ m/^unused\d+$/;
+
+           my $repl_conf = PVE::ReplicationConfig->new();
+           if ($repl_conf->check_for_existing_jobs($target_vmid, 1)) {
+               my ($storeid, undef) = PVE::Storage::parse_volume_id($source_volid);
+               my $format = (PVE::Storage::parse_volname($storecfg, $source_volid))[6];
+
+               die "Cannot move volume on storage '$storeid' to a replicated container - missing replication support\n"
+                   if !PVE::Storage::storage_can_replicate($storecfg, $storeid, $format);
+           }
+
+           return ($source_conf, $target_conf, $drive);
        };
-       if (my $err = $@) {
-           eval { PVE::LXC::Config->remove_lock($vmid, $lockname) };
-           warn $@ if $@;
-           die $err;
+
+       my $logfunc = sub {
+           my ($msg) = @_;
+           print STDERR "$msg\n";
+       };
+
+       my $volume_reassignfn = sub {
+           return PVE::LXC::Config->lock_config($vmid, sub {
+               return PVE::LXC::Config->lock_config($target_vmid, sub {
+                   my ($source_conf, $target_conf, $drive) = &$load_and_check_reassign_configs();
+                   my $source_volid = $drive->{volume};
+
+                   my $target_unused = $target_mpkey =~ m/^unused\d+$/;
+
+                   print "moving volume '$mpkey' from container '$vmid' to '$target_vmid'\n";
+
+                   my ($storage, $source_volname) = PVE::Storage::parse_volume_id($source_volid);
+
+                   my $fmt = (PVE::Storage::parse_volname($storecfg, $source_volid))[6];
+
+                   my $new_volid = PVE::Storage::rename_volume(
+                       $storecfg,
+                       $source_volid,
+                       $target_vmid,
+                   );
+
+                   $drive->{volume} = $new_volid;
+
+                   delete $source_conf->{$mpkey};
+                   print "removing volume '${mpkey}' from container '${vmid}' config\n";
+                   PVE::LXC::Config->write_config($vmid, $source_conf);
+
+                   my $drive_string;
+
+                   if ($target_unused) {
+                       $drive_string = $new_volid;
+                   } else {
+                       $drive_string = PVE::LXC::Config->print_volume($target_mpkey, $drive);
+                   }
+
+                   if ($target_unused) {
+                       $target_conf->{$target_mpkey} = $drive_string;
+                   } else {
+                       my $running = PVE::LXC::check_running($target_vmid);
+                       my $param = { $target_mpkey => $drive_string };
+                       my $errors = PVE::LXC::Config->update_pct_config(
+                           $target_vmid,
+                           $target_conf,
+                           $running,
+                           $param
+                       );
+
+                       foreach my $key (keys %$errors) {
+                           $rpcenv->warn($errors->{$key});
+                       }
+                   }
+
+                   PVE::LXC::Config->write_config($target_vmid, $target_conf);
+                   $target_conf = PVE::LXC::Config->load_config($target_vmid);
+
+                   PVE::LXC::update_lxc_config($target_vmid, $target_conf) if !$target_unused;
+                   print "target container '$target_vmid' updated with '$target_mpkey'\n";
+
+                   # remove possible replication snapshots
+                   if (PVE::Storage::volume_has_feature($storecfg,'replicate', $source_volid)) {
+                       eval {
+                           PVE::Replication::prepare(
+                               $storecfg,
+                               [$new_volid],
+                               undef,
+                               1,
+                               undef,
+                               $logfunc,
+                           )
+                       };
+                       if (my $err = $@) {
+                           $rpcenv->warn("Failed to remove replication snapshots on volume ".
+                               "'${target_mpkey}'. Manual cleanup could be necessary. " .
+                               "Error: ${err}\n");
+                       }
+                   }
+               });
+           });
+       };
+
+       if ($target_vmid && $storage) {
+           my $msg = "either set 'storage' or 'target-vmid', but not both";
+           raise_param_exc({ 'target-vmid' => $msg, 'storage' => $msg });
+       } elsif ($target_vmid) {
+           $rpcenv->check_vm_perm($authuser, $target_vmid, undef, ['VM.Config.Disk'])
+               if $authuser ne 'root@pam';
+
+           if ($vmid eq $target_vmid) {
+               my $msg = "must be different than source VMID to move disk to another container";
+               raise_param_exc({ 'target-vmid' => $msg });
+           }
+
+           my (undef, undef, $drive) = &$load_and_check_reassign_configs();
+           my $storeid = PVE::Storage::parse_volume_id($drive->{volume});
+           $rpcenv->check($authuser, "/storage/$storeid", ['Datastore.AllocateSpace']);
+           return $rpcenv->fork_worker(
+               'move_volume',
+               "${vmid}-${mpkey}>${target_vmid}-${target_mpkey}",
+               $authuser,
+               $volume_reassignfn
+           );
+       } elsif ($storage) {
+           $rpcenv->check($authuser, "/storage/$storage", ['Datastore.AllocateSpace']);
+           &$move_to_storage_checks();
+           my $task = eval {
+               $rpcenv->fork_worker('move_volume', $vmid, $authuser, $storage_realcmd);
+           };
+           if (my $err = $@) {
+               eval { PVE::LXC::Config->remove_lock($vmid, $lockname) };
+               warn $@ if $@;
+               die $err;
+           }
+           return $task;
+       } else {
+           my $msg = "both 'storage' and 'target-vmid' missing, either needs to be set";
+           raise_param_exc({ 'target-vmid' => $msg, 'storage' => $msg });
        }
-       return $task;
   }});
 
 __PACKAGE__->register_method({