Statistics
| Branch: | Tag: | Revision:

root / lib @ 68857643

Name Size
  build
  confd
  http
  hypervisor
  rapi
__init__.py 820 Bytes
asyncnotifier.py 1.9 kB
backend.py 87 kB
bdev.py 63.2 kB
bootstrap.py 22 kB
cli.py 67.9 kB
cmdlib.py 327.7 kB
config.py 47.6 kB
constants.py 22.4 kB
daemon.py 11.3 kB
errors.py 8.8 kB
jqueue.py 41.7 kB
jstore.py 3.8 kB
locking.py 40.3 kB
luxi.py 12.7 kB
mcpu.py 20.2 kB
objects.py 30.2 kB
opcodes.py 19.1 kB
rpc.py 35.2 kB
serializer.py 4.6 kB
ssconf.py 13.5 kB
ssh.py 7.8 kB
storage.py 12.5 kB
utils.py 86.1 kB
workerpool.py 8.9 kB

Latest revisions

# Date Author Comment
68857643 03/17/2010 05:18 pm Michael Hanselmann

utils: Add functions to sign and verify X509 certs using HMAC

Certificates exchanged via an untrusted third party should be
signed to ensure they haven't been modified.

Signed-off-by: Michael Hanselmann <>
Reviewed-by: Iustin Pop <>
3db3eb2a 03/17/2010 05:18 pm Michael Hanselmann

Add cluster domain secret

Information exchanged between different clusters via untrusted
third parties (e.g. for remote instance import/export) must be
signed with a secret shared between all involved clusters to
ensure the third party doesn't modify the information....
c89e6fdf 03/16/2010 04:14 pm Michael Hanselmann

Merge remote branch 'origin/devel-2.1'

  • origin/devel-2.1:
    Improve “gnt-cluster renew-crypto”
    Fix behaviour of gnt-node modify -C no

Signed-off-by: Michael Hanselmann <>
Reviewed-by: Iustin Pop <>
d512e84b 03/16/2010 04:05 pm Michael Hanselmann

Improve “gnt-cluster renew-crypto”

- Report exception text immediately instead of just logging it
- Remove leftover assertion from when it still used “gnt-cluster
modify”

Signed-off-by: Michael Hanselmann <>
Reviewed-by: Iustin Pop <>
8fe9239e 03/16/2010 03:29 pm Iustin Pop

Fix behaviour of gnt-node modify -C no

The current check on whether we require auto_promote or not is wrong, as
we check whether we will have exactly the correct number of master
candidates left. But it is fine if we have more (e.g. when CPS=10 and
mc_remaning=19) than the current number, and in that case we shouldn't...
084aba47 03/15/2010 07:00 pm Michael Hanselmann

Merge remote branch 'origin/devel-2.1'

  • origin/devel-2.1:
    Rightname confd's HMAC key
    Rename SSL_CERT_FILE to NODED_CERT_FILE
    Clarify the error message for ':' in PV names

Conflicts:
lib/bootstrap.py: Trivial
lib/constants.py: Trivial

Signed-off-by: Michael Hanselmann <>...
168c1de2 03/15/2010 06:40 pm Michael Hanselmann

Rename SSL_CERT_FILE to NODED_CERT_FILE

To be consistent with RAPI_CERT_FILE, the rather generic named
“SSL_CERT_FILE” constant is renamed to “NODED_CERT_FILE”. The actual file
name is not changed.

Signed-off-by: Michael Hanselmann <>
Reviewed-by: Iustin Pop <>
6b7d5878 03/15/2010 06:40 pm Michael Hanselmann

Rightname confd's HMAC key

Currently, the ganeti-confd's HMAC key is called “cluster HMAC key” or
simply “HMAC key” everywhere. With the implementation of inter-cluster
instance moves, another HMAC key will be introduced for signing critical
data. They can not be the same, so this patch clarifies the purpose of the...
01b6558a 03/15/2010 06:18 pm Iustin Pop

Clarify the error message for ':' in PV names

As described in issue 93, just saying ':' is not a valid char can be
confusing.

Signed-off-by: Iustin Pop <>
Reviewed-by: Michael Hanselmann <>
b701a5df 03/15/2010 05:50 pm Iustin Pop

Merge remote branch 'origin/devel-2.1'

  • origin/devel-2.1:
    Implement QA tests for disk template changes
    Update instance modify documentation
    Implement conversion from drbd to plain
    Implement conversion from plain to drbd
    Abstract check that an instance is down...

View revisions

Also available in: Atom