mirror of
https://dev.lirent.ru/Vatrog/vm-automation-signaling.git
synced 2026-06-25 20:36:36 +03:00
48 lines
2.0 KiB
C
48 lines
2.0 KiB
C
|
#ifndef VMSIGD_H
|
||
|
|
#define VMSIGD_H
|
||
|
|
#include <stdint.h>
|
||
|
|
|
||
|
|
/* vmsigd.h — private config model of the vmsig daemon.
|
||
|
|
*
|
||
|
|
* The daemon owns the /dev/shm/vmsig discovery namespace and serves a unix-socket control
|
||
|
|
* plane over the signaling layer for the VMs discovered there. Its only policy is a COARSE
|
||
|
|
* admission grant per uid (SISC: signaling is not a fine-grained access broker — the control
|
||
|
|
* enforces per-user caps behind the grant). Entitlements are expressed in vmid terms and
|
||
|
|
* translated to an endpoint_mask at connect time against the live slot map. */
|
||
|
|
|
||
|
|
#define VMSIGD_MAX_GRANTS 64
|
||
|
|
#define VMSIGD_MAX_VMIDS 64
|
||
|
|
#define VMSIGD_PATH_MAX 256
|
||
|
|
|
||
|
|
typedef struct {
|
||
|
|
uint32_t uid;
|
||
|
|
int all_vms; /* `vmids = *` */
|
||
|
|
uint32_t vmids[VMSIGD_MAX_VMIDS];
|
||
|
|
int nvmids;
|
||
|
|
uint32_t cap_mask; /* VMSIG_CAP_* (from `caps =` keywords) */
|
||
|
|
uint32_t arb_prio;
|
||
|
|
} vmsigd_grant_rule;
|
||
|
|
|
||
|
|
typedef struct {
|
||
|
|
char socket[VMSIGD_PATH_MAX]; /* control listener ('@' => abstract) */
|
||
|
|
char watch[VMSIGD_PATH_MAX]; /* discovery dir (/dev/shm/vmsig) */
|
||
|
|
char pve_conf[VMSIGD_PATH_MAX]; /* /etc/pve/qemu-server */
|
||
|
|
char qmp_dir[VMSIGD_PATH_MAX]; /* /var/run/qemu-server */
|
||
|
|
char slots[VMSIGD_PATH_MAX]; /* slot persistence ("" => off) */
|
||
|
|
vmsigd_grant_rule grants[VMSIGD_MAX_GRANTS];
|
||
|
|
int ngrants;
|
||
|
|
} vmsigd_config;
|
||
|
|
|
||
|
|
/* Populate with built-in defaults. */
|
||
|
|
void vmsigd_config_defaults(vmsigd_config* c);
|
||
|
|
|
||
|
|
/* Parse the INI-ish config (globals + repeated [grant uid=N] stanzas) over the defaults
|
||
|
|
* already in `c`. Unknown keys are ignored. Returns 0, or -1 on open/usage error. */
|
||
|
|
int vmsigd_config_parse_file(vmsigd_config* c, const char* path);
|
||
|
|
int vmsigd_config_parse_buf (vmsigd_config* c, const char* buf); /* same, from memory (tests) */
|
||
|
|
|
||
|
|
/* Translate a comma/space-separated cap keyword list to a VMSIG_CAP_* mask. */
|
||
|
|
uint32_t vmsigd_caps_from_str(const char* s);
|
||
|
|
|
||
|
|
#endif /* VMSIGD_H */
|