tyler/proxmox-backup
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
5,610 Commits 2 Branches 54 Tags 14 MiB
e3619d4101
Commit Graph

300 Commits

Author SHA1 Message Date
Dietmar Maurer
e3619d4101 moved tape_job.rs to pbs_config workspace 2021-09-07 12:40:15 +02:00
Dietmar Maurer
5839c469c1 move tape_encryption_keys.rs to pbs_config workspace 2021-09-07 10:37:08 +02:00
Dietmar Maurer
bbdda58b35 moved key_derivation.rs from pbs_datastore to pbs-config/src/key_config.rs 
Also moved pbs-datastore/src/crypt_config.rs to pbs-tools/src/crypt_config.rs.
We do not want to depend on pbs-api-types there, so I use [u8;32] instead of
Fingerprint.
 2021-09-07 10:12:17 +02:00
Dietmar Maurer
aad2d162ab move media_pool config to pbs_config workspace 2021-09-06 08:56:04 +02:00
Dietmar Maurer
1ce8e905ea move drive config to pbs_config workspace 
Also moved the tape type definitions to pbs_api_types.
 2021-09-03 09:10:18 +02:00
Dietmar Maurer
6afdda8832 move remote config into pbs-config workspace 2021-09-02 14:25:15 +02:00
Dietmar Maurer
2121174827 start new pbs-config workspace 
moved src/config/domains.rs
 2021-09-02 12:58:20 +02:00
Wolfgang Bumiller
4c1b776168 another import cleanup 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-09-01 14:46:01 +02:00
Wolfgang Bumiller
6c76aa434d split proxmox-file-restore into its own crate 
This also moves a couple of required utilities such as
logrotate and some file descriptor methods to pbs-tools.

Note that the logrotate usage and run-dir handling should be
improved to work as a regular user as this *should* (IMHO)
be a regular unprivileged command (including running
qemu given the kvm privileges...)

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-09-01 12:23:29 +02:00
Wolfgang Bumiller
b2065dc7d2 cleanup proxmox_backup::backup module 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-08-30 14:14:04 +02:00
Dietmar Maurer
97dfc62f0d remote config: derive and use Updater 
Defined a new struct RemoteConfig (without name and password). This makes it
possible to bas64-encode the pasword in the config, but still allow plain
passwords with the API.
 2021-08-30 12:48:45 +02:00
Dietmar Maurer
e4a5c072b4 openid cleanup: derive and use Updater 2021-08-30 09:48:53 +02:00
Wolfgang Bumiller
a37c8d2431 use ApiType trait 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-08-25 10:43:58 +02:00
Dietmar Maurer
a8a20e9210 use new api updater features 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-08-25 10:43:58 +02:00
Dietmar Maurer
efe96ec039 tape: compute next-media-label for each tape backup job 2021-08-04 09:59:12 +02:00
Dietmar Maurer
68e77657e6 datastore config: cleanup code (use flatten attribute) 2021-07-23 12:43:33 +02:00
Dietmar Maurer
a301c362e3 add helpers to write configuration files 2021-07-20 18:54:23 +02:00
Dietmar Maurer
7526d86419 use new atomic_open_or_create_file 
Factor out open_backup_lockfile() method to acquire locks owned by
user backup with permission 0660.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-07-20 18:54:23 +02:00
Wolfgang Bumiller
2b7f8dd5ea move client to pbs-client subcrate 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-07-19 12:58:43 +02:00
Dominik Csapak
934de1d691 config: acl: add PRIV_REALM_ALLOCATE 
will be used for realm creation/update/deletion

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
 2021-07-09 15:36:54 +02:00
Wolfgang Bumiller
770a36e53a add pbs-tools subcrate 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-07-06 15:10:37 +02:00
Wolfgang Bumiller
85beb7d875 tree-wide: switch to using mod.rs 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-07-06 12:04:52 +02:00
Wolfgang Bumiller
af06decd1b split out pbs-buildcfg module 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-07-06 12:00:14 +02:00
Stoiko Ivanov
4d8bd03668 config: acme: make validation_delay crate public 
we need the setting in acme::plugin.

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
 2021-07-03 21:44:13 +02:00
Fabian Grünbichler
26a3450f19 openid: move helper from config to api2 
it's not really needed in the config module, and this makes it easier to
disable the proxmox-openid dependency linkage as a stop-gap measure.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2021-07-03 01:52:01 +02:00
Dietmar Maurer
fda19dcc6f fix CachedUserInfo by using a shared memory version counter 2021-06-30 08:54:30 +02:00
Dietmar Maurer
3b7b1dfb8e api: add openid redirect/login API 2021-06-30 08:54:30 +02:00
Dietmar Maurer
d8a47ec649 cleanup user/token is_active() check 2021-06-30 08:54:30 +02:00
Dietmar Maurer
252cd3b781 implement new helper is_active_user_id() 2021-06-30 08:54:30 +02:00
Dietmar Maurer
0decd11efb cli: add CLI to manage openid realms. 2021-06-30 08:54:30 +02:00
Dietmar Maurer
0219ba2cc5 check_acl_path: add /access/domains and /access/openid 2021-06-30 08:54:30 +02:00
Dietmar Maurer
bbff6c4968 config: new domains.cfg to configure openid realm 
Or other realmy types...
 2021-06-30 08:54:30 +02:00
Dietmar Maurer
b90036dadd cleanup: factor out config::datastore::lock_config() 2021-06-04 09:04:14 +02:00
Fabian Grünbichler
3e3b505cc8 reorder serde usage/derive 
this is deprecated with rustc 1.52+, and will become a hard error at
some point:

https://github.com/rust-lang/rust/issues/79202

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2021-05-31 14:53:08 +02:00
Wolfgang Bumiller
1d781c5b20 update proxmox-http dependency 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-05-17 11:29:24 +02:00
Fabian Grünbichler
4229633d98 move ProxyConfig to proxmox_http 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2021-05-17 10:31:27 +02:00
Dietmar Maurer
440472cb32 correctly set apt proxy configuration 2021-05-12 12:19:24 +02:00
Thomas Lamprecht
f09f4d5fd5 config: acme: rust format 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-11 17:35:54 +02:00
Thomas Lamprecht
38b4f9b534 config: acme: fall-back to the "default" account 
syncs behavior with both, the displayed state in the PBS
web-interface, and the behavior of PVE/PMG.

Without this a standard setup would result in a Error like:
> TASK ERROR: no acme client configured

which was pretty confusing, as the actual error was something else
(no account configured), and the web-interface showed "default" as
selected account, so a user had no idea what actually was wrong and
how to fix it.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-11 17:33:07 +02:00
Thomas Lamprecht
ea1458923e manager: acme plugin: auto-complete available DNS challenge types 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-10 15:55:49 +02:00
Thomas Lamprecht
e857f1fae8 completion: ACME plugin type: comment out http type for now, not useful 
It may make sense in the future, e.g., if the built-in standalone
type is not enough, e.g., as HTTP**s**, HTTP 2 or even QUIC (HTTP 3)
is wanted in some setups, but for now there's no scenario where one
would profit from adding a new HTTP plugin, especially as it requires
the `data` property to be set, which makes no sense..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-10 15:50:08 +02:00
Thomas Lamprecht
be1163acfe config: acme: drop now unused foreach_dns_plugin 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-10 14:41:44 +02:00
Thomas Lamprecht
d308dc8af7 acme: use proxmox-acme-plugins and load schema from there 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-10 14:41:12 +02:00
Dylan Whyte
72e311c6b2 fix 3296: add http_proxy to node config, and provide a cli 
Signed-off-by: Dylan Whyte <d.whyte@proxmox.com>
Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>
 2021-05-10 08:37:46 +02:00
Dietmar Maurer
39c5db7f0f move basic ACME types into src/api2/types/acme.rs 
And rename AccountName into AcmeAccountName.
 2021-05-04 11:32:18 +02:00
Dietmar Maurer
426847e1ce node config cleanups 2021-05-04 09:29:31 +02:00
Wolfgang Bumiller
79b902d512 add node config 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-05-04 09:29:31 +02:00
Wolfgang Bumiller
cb67ecaddb add acme config 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-05-04 07:43:43 +02:00
Wolfgang Bumiller
3df77ef5da config::acl: make /system/certificates a valid path 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-04-29 12:08:00 +02:00
Thomas Lamprecht
0216f56241 config: tfa: drop now unused schema::Updatable 
was used in a macro expansion, now handled otherwise

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-04-15 12:35:11 +02:00