]>
git.proxmox.com Git - pve-storage.git/blob - PVE/Storage/CIFSPlugin.pm
1 package PVE
::Storage
::CIFSPlugin
;
6 use PVE
::Tools
qw(run_command);
9 use PVE
::Storage
::Plugin
;
10 use PVE
::JSONSchema
qw(get_standard_option);
12 use base
qw(PVE::Storage::Plugin);
14 # CIFS helper functions
17 my ($server, $share, $mountpoint, $mountdata) = @_;
19 $server = "[$server]" if Net
::IP
::ip_is_ipv6
($server);
20 my $source = "//${server}/$share";
21 $mountdata = PVE
::ProcFSTools
::parse_proc_mounts
() if !$mountdata;
23 return $mountpoint if grep {
25 $_->[0] =~ m
|^\Q
$source\E/?$| &&
26 $_->[1] eq $mountpoint
31 sub cifs_cred_file_name
{
33 return "/etc/pve/priv/storage/${storeid}.pw";
36 sub cifs_delete_credentials
{
39 if (my $cred_file = get_cred_file
($storeid)) {
40 unlink($cred_file) or warn "removing cifs credientials '$cred_file' failed: $!\n";
44 sub cifs_set_credentials
{
45 my ($password, $storeid) = @_;
47 my $cred_file = cifs_cred_file_name
($storeid);
48 mkdir "/etc/pve/priv/storage";
50 PVE
::Tools
::file_set_contents
($cred_file, "password=$password\n");
58 my $cred_file = cifs_cred_file_name
($storeid);
62 } elsif (-e
"/etc/pve/priv/${storeid}.cred") {
63 # FIXME: remove fallback with 7.0 by doing a rename on upgrade from 6.x
64 return "/etc/pve/priv/${storeid}.cred";
70 my ($server, $share, $mountpoint, $storeid, $smbver, $user, $domain) = @_;
72 $server = "[$server]" if Net
::IP
::ip_is_ipv6
($server);
73 my $source = "//${server}/$share";
75 my $cmd = ['/bin/mount', '-t', 'cifs', $source, $mountpoint, '-o', 'soft', '-o'];
77 if (my $cred_file = get_cred_file
($storeid)) {
78 push @$cmd, "username=$user", '-o', "credentials=$cred_file";
79 push @$cmd, '-o', "domain=$domain" if defined($domain);
81 push @$cmd, 'guest,username=guest';
84 push @$cmd, '-o', defined($smbver) ?
"vers=$smbver" : "vers=3.0";
86 run_command
($cmd, errmsg
=> "mount error");
97 content
=> [ { images
=> 1, rootdir
=> 1, vztmpl
=> 1, iso
=> 1,
98 backup
=> 1, snippets
=> 1}, { images
=> 1 }],
99 format
=> [ { raw
=> 1, qcow2
=> 1, vmdk
=> 1 } , 'raw' ],
106 description
=> "CIFS share.",
110 description
=> "Password for accessing the share/datastore.",
115 description
=> "CIFS domain.",
121 description
=> "SMB protocol version",
123 enum
=> ['2.0', '2.1', '3.0'],
131 path
=> { fixed
=> 1 },
132 server
=> { fixed
=> 1 },
133 share
=> { fixed
=> 1 },
134 nodes
=> { optional
=> 1 },
135 disable
=> { optional
=> 1 },
136 maxfiles
=> { optional
=> 1 },
137 'prune-backups' => { optional
=> 1 },
138 content
=> { optional
=> 1 },
139 format
=> { optional
=> 1 },
140 username
=> { optional
=> 1 },
141 password
=> { optional
=> 1},
142 domain
=> { optional
=> 1},
143 smbversion
=> { optional
=> 1},
144 mkdir => { optional
=> 1 },
145 bwlimit
=> { optional
=> 1 },
151 my ($class, $sectionId, $config, $create, $skipSchemaCheck) = @_;
153 $config->{path
} = "/mnt/pve/$sectionId" if $create && !$config->{path
};
155 return $class->SUPER::check_config
($sectionId, $config, $create, $skipSchemaCheck);
158 # Storage implementation
161 my ($class, $storeid, $scfg, %param) = @_;
163 if (defined($param{password
})) {
164 cifs_set_credentials
($param{password
}, $storeid);
165 if (!exists($scfg->{username
})) {
166 warn "ignoring password parameter\n";
169 cifs_delete_credentials
($storeid);
176 my ($class, $storeid, $scfg, %param) = @_;
178 return if !exists($param{password
});
180 if (defined($param{password
})) {
181 cifs_set_credentials
($param{password
}, $storeid);
182 if (!exists($scfg->{username
})) {
183 warn "ignoring password parameter\n";
186 cifs_delete_credentials
($storeid);
193 my ($class, $storeid, $scfg) = @_;
195 cifs_delete_credentials
($storeid);
201 my ($class, $storeid, $scfg, $cache) = @_;
203 $cache->{mountdata
} = PVE
::ProcFSTools
::parse_proc_mounts
()
204 if !$cache->{mountdata
};
206 my $path = $scfg->{path
};
207 my $server = $scfg->{server
};
208 my $share = $scfg->{share
};
211 if !cifs_is_mounted
($server, $share, $path, $cache->{mountdata
});
213 return $class->SUPER::status
($storeid, $scfg, $cache);
216 sub activate_storage
{
217 my ($class, $storeid, $scfg, $cache) = @_;
219 $cache->{mountdata
} = PVE
::ProcFSTools
::parse_proc_mounts
()
220 if !$cache->{mountdata
};
222 my $path = $scfg->{path
};
223 my $server = $scfg->{server
};
224 my $share = $scfg->{share
};
226 if (!cifs_is_mounted
($server, $share, $path, $cache->{mountdata
})) {
228 mkpath
$path if !(defined($scfg->{mkdir}) && !$scfg->{mkdir});
230 die "unable to activate storage '$storeid' - " .
231 "directory '$path' does not exist\n" if ! -d
$path;
233 cifs_mount
($server, $share, $path, $storeid, $scfg->{smbversion
},
234 $scfg->{username
}, $scfg->{domain
});
237 $class->SUPER::activate_storage
($storeid, $scfg, $cache);
240 sub deactivate_storage
{
241 my ($class, $storeid, $scfg, $cache) = @_;
243 $cache->{mountdata
} = PVE
::ProcFSTools
::parse_proc_mounts
()
244 if !$cache->{mountdata
};
246 my $path = $scfg->{path
};
247 my $server = $scfg->{server
};
248 my $share = $scfg->{share
};
250 if (cifs_is_mounted
($server, $share, $path, $cache->{mountdata
})) {
251 my $cmd = ['/bin/umount', $path];
252 run_command
($cmd, errmsg
=> 'umount error');
256 sub check_connection
{
257 my ($class, $storeid, $scfg) = @_;
259 my $servicename = '//'.$scfg->{server
}.'/'.$scfg->{share
};
261 my $cmd = ['/usr/bin/smbclient', $servicename, '-d', '0', '-m'];
263 push @$cmd, $scfg->{smbversion
} ?
"smb".int($scfg->{smbversion
}) : 'smb3';
265 if (my $cred_file = get_cred_file
($storeid)) {
266 push @$cmd, '-U', $scfg->{username
}, '-A', $cred_file;
267 push @$cmd, '-W', $scfg->{domain
} if defined($scfg->{domain
});
269 push @$cmd, '-U', 'Guest','-N';
271 push @$cmd, '-c', 'echo 1 0';
274 my $out = sub { $out_str .= shift };
276 eval { run_command
($cmd, timeout
=> 10, outfunc
=> $out, errfunc
=> sub {}) };
279 die "$out_str\n" if defined($out_str) &&
280 ($out_str =~ m/NT_STATUS_ACCESS_DENIED/);
287 sub get_volume_notes
{
289 PVE
::Storage
::DirPlugin
::get_volume_notes
($class, @_);
291 sub update_volume_notes
{
293 PVE
::Storage
::DirPlugin
::update_volume_notes
($class, @_);