CT protection mode added

diff --git a/src/PVE/API2/LXC.pm b/src/PVE/API2/LXC.pm
index 4c8da5f91fb2c05b5a3537535253794a444505d9..ed19ea772511ea0e40b304cd7ba52fe36aa90f0e 100644 (file)
--- a/src/PVE/API2/LXC.pm
+++ b/src/PVE/API2/LXC.pm
@@ -463,6 +463,9 @@ __PACKAGE__->register_method({
 
        my $storage_cfg = cfs_read_file("storage.cfg");
 
+       die  "can't remove CT $vmid - protection mode enabled\n"
+           if ($conf->{protection} == 1);
+
        die "unable to remove CT $vmid - used in HA resources\n"
            if PVE::HA::Config::vm_is_ha_managed($vmid);
 

diff --git a/src/PVE/LXC.pm b/src/PVE/LXC.pm
index 7f11ba0a5955b59a801df637a083a204e8706a69..4d741a0ba485260cdd0eb88cc822b4be01422fb0 100644 (file)
--- a/src/PVE/LXC.pm
+++ b/src/PVE/LXC.pm
@@ -176,6 +176,12 @@ my $confdesc = {
        enum => ['shell', 'console', 'tty'],
        default => 'tty',
     },
+    protection => {
+       optional => 1,
+       type => 'boolean',
+       description => "Sets the protection flag of the container. This will prevent the remove operation.",
+       default => 0,
+    },
 };
 
 my $valid_lxc_conf_keys = {
@@ -1101,6 +1107,8 @@ sub update_pct_config {
                next if !$running;
                my $netid = $1;
                PVE::Network::veth_delete("veth${vmid}i$netid");
+           } elsif ($opt eq 'protection') {
+               delete $conf->{$opt};
            } elsif ($opt =~ m/^mp(\d+)$/) {
                delete $conf->{$opt};
                push @nohotplug, $opt;
@@ -1173,6 +1181,8 @@ sub update_pct_config {
            } else {
                update_net($vmid, $conf, $opt, $net, $netid, $rootdir);
            }
+       } elsif ($opt eq 'protection') {
+           $conf->{$opt} = $value ? 1 : 0;
         } elsif ($opt =~ m/^mp(\d+)$/) {
            $conf->{$opt} = $value;
            push @$new_disks, $opt;