[pve-devel] applied: [PATCH pmg-api] API2: Network: add vlan-raw-device && vlan-id options

2020-01-28 Thread Thomas Lamprecht
On 1/28/20 11:24 AM, Alexandre Derumier wrote: > Same than pve-manager > > Signed-off-by: Alexandre Derumier > --- > src/PMG/API2/Network.pm | 12 > 1 file changed, 12 insertions(+) > > diff --git a/src/PMG/API2/Network.pm b/src/PMG/API2/Network.pm > index ed6651d..4bf81c2 100644 >

[pve-devel] applied: [PATCH v3 access-control 07/20] API token: add verification method

2020-01-28 Thread Thomas Lamprecht
On 1/21/20 1:54 PM, Fabian Grünbichler wrote: > which checks that the user and token exist and are not expired, and then > generates the string to be matched with the pmxcfs-stored token shadow > config file. > > Signed-off-by: Fabian Grünbichler > --- > > Notes: > requires versioned depende

[pve-devel] applied: [PATCH v3 access-control 06/20] API token: add (shadow) TokenConfig

2020-01-28 Thread Thomas Lamprecht
On 1/21/20 1:54 PM, Fabian Grünbichler wrote: > with the format: > > > > it is just used for token value generation/deletion via the User API, > token value verification will happen over pmxcfs/ipcc. > > Signed-off-by: Fabian Grünbichler > --- > > Notes: > new in v2 > > requires

[pve-devel] applied: [PATCH v3 access-control 04/20] API token: add REs, helpers, parsing + writing

2020-01-28 Thread Thomas Lamprecht
On 1/21/20 1:54 PM, Fabian Grünbichler wrote: > token definitions/references in user.cfg always use the full form of the > token id, consisting of: > > USER@REALM!TOKENID > > token definitions are represented by their own lines prefixed with > 'token', which need to come after the corresponding u

[pve-devel] applied: [PATCH v3 access-control 05/20] API token: add check_token_exist API helper

2020-01-28 Thread Thomas Lamprecht
On 1/21/20 1:54 PM, Fabian Grünbichler wrote: > the helper is modeled after the corresponding user method. > > the 'tokenid' option goes into PVE::AccessControl, since we need it in > multiple API modules. > > Signed-off-by: Fabian Grünbichler > --- > > Notes: > v2->v3: > - use this to

[pve-devel] applied: [PATCH v3 access-control 17/20] API: add group members to group index

2020-01-28 Thread Thomas Lamprecht
On 1/21/20 1:54 PM, Fabian Grünbichler wrote: > Signed-off-by: Fabian Grünbichler > --- > see corresponding patch in pve-manager > > PVE/API2/Group.pm | 7 +++ > 1 file changed, 7 insertions(+) > > diff --git a/PVE/API2/Group.pm b/PVE/API2/Group.pm > index 37f8be2..c463bd6 100644 > --- a/PV

[pve-devel] applied: [PATCH v3 manager 5/9] www: add 'users' columns to Groups model

2020-01-28 Thread Thomas Lamprecht
On 1/21/20 1:54 PM, Fabian Grünbichler wrote: > it's useful information that now gets returned by the API, so might as > well display it. > > Signed-off-by: Fabian Grünbichler > --- > www/manager6/dc/GroupView.js | 6 ++ > www/manager6/form/GroupSelector.js | 8 +++- > 2 files chan

[pve-devel] applied: [PATCH docs] ceph: move ceph docs to own top level chapter

2020-01-28 Thread Thomas Lamprecht
On 4/18/19 11:49 AM, Tim Marx wrote: > This change should help to make the meanwhile extensive documentation > about ceph more visible, therefore ceph now has it's own chapter which > is sorted more reasonable after the storage chapter. The formerly known > "hyper converged infrastructure" chapter

[pve-devel] [PATCH firewall] logging: Add missing logmsg for inbound rules

2020-01-28 Thread Christian Ebner
Signed-off-by: Christian Ebner --- src/PVE/Firewall.pm | 1 + 1 file changed, 1 insertion(+) diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm index 255bb9a..d22b15a 100644 --- a/src/PVE/Firewall.pm +++ b/src/PVE/Firewall.pm @@ -2491,6 +2491,7 @@ sub enable_host_firewall { $rule->{i

[pve-devel] [PATCH qemu-server 5/5] hotplug_pending: allow partial fast plugging

2020-01-28 Thread Oguz Bektas
adds a loop after the main fastplug loop, to check if any of the options are partially fast pluggable. these are defined in $partial_fast_plug_option our first use case is the fstrim_cloned_disks option of the qemu-guest-agent Signed-off-by: Oguz Bektas --- PVE/QemuConfig.pm | 7 +++ PVE/

[pve-devel] [PATCH qemu-server 2/5] use helper functions from GuestHelpers

2020-01-28 Thread Oguz Bektas
removes safe_string_ne and safe_num_ne code which is now shared in GuestHelpers. also change all the calls Signed-off-by: Oguz Bektas --- PVE/QemuServer.pm | 82 ++- 1 file changed, 31 insertions(+), 51 deletions(-) diff --git a/PVE/QemuServer.pm b/PV

[pve-devel] [PATCH container 3/5] use helper functions from GuestHelpers

2020-01-28 Thread Oguz Bektas
remove safe_string_ne and safe_num_ne code which is now shared in GuestHelpers. also change all the calls. Signed-off-by: Oguz Bektas --- src/PVE/LXC.pm | 36 1 file changed, 8 insertions(+), 28 deletions(-) diff --git a/src/PVE/LXC.pm b/src/PVE/LXC.pm index

[pve-devel] [PATCH guest-common 1/5] guesthelpers: move/add safe comparison functions from lxc and qemu

2020-01-28 Thread Oguz Bektas
move the safe_string_ne and safe_num_ne functions to guesthelpers to remove duplicate code. add the new safe_boolean_ne and typesafe_ne helper functions Signed-off-by: Oguz Bektas --- these will be used in the partial fast plug function in this series PVE/GuestHelpers.pm | 49

[pve-devel] [PATCH guest-common 4/5] abstractconfig: add partial_fast_plug

2020-01-28 Thread Oguz Bektas
allows partial fast plugging of functions as defined in the $partial_fast_plug_option in qemuserver (and possibly lxc later on) Signed-off-by: Oguz Bektas --- PVE/AbstractConfig.pm | 44 +++ 1 file changed, 44 insertions(+) diff --git a/PVE/AbstractConfig

[pve-devel] applied: [manager] Protect the user's tfa key setting.

2020-01-28 Thread Thomas Lamprecht
On 1/17/20 2:48 PM, Wolfgang Link wrote: > If oath or U2F is set, it should not be possible to change it > in the GUI on the user edit window. > It disables the second factor, but leave the tfa key behind > in the file tfa.cfg. > The key in the tfa.cfg file is a problem when the user tries to recre

[pve-devel] [PATCH proxmox-widget-toolkit] add vlan interface support

2020-01-28 Thread Alexandre Derumier
vlan-raw-device && vlan-id field are only enabled if interface name is different than interfaceX.Y I have added a listener on iface, to enable them live if user want a custom name for vlan interface Signed-off-by: Alexandre Derumier --- Toolkit.js | 8 ++ Utils.js| 2

[pve-devel] [PATCH pmg-api] API2: Network: add vlan-raw-device && vlan-id options

2020-01-28 Thread Alexandre Derumier
Same than pve-manager Signed-off-by: Alexandre Derumier --- src/PMG/API2/Network.pm | 12 1 file changed, 12 insertions(+) diff --git a/src/PMG/API2/Network.pm b/src/PMG/API2/Network.pm index ed6651d..4bf81c2 100644 --- a/src/PMG/API2/Network.pm +++ b/src/PMG/API2/Network.pm @@ -11