syonad/two
2
0
Fork 0
Code Issues 6 Pull requests 1 Projects Releases 9 Packages Wiki Activity Actions

f-25: vms: add iptables gestion

Browse source 
Signed-off-by: GnomeZworc <nicolas.boufidjeline@g3e.fr>
This commit is contained in:
GnomeZworc 2026-04-26 17:37:25 +02:00
commit ebac5afcb6
Signed by: nicolas.boufideline
GPG key ID: 4406BBBF8845D632
3 changed files with 90 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

37
internal/vm/create.go
View file

@ -4,8 +4,10 @@ import (
"fmt"
"strconv"
"git.g3e.fr/syonad/two/internal/iptables"
"git.g3e.fr/syonad/two/internal/metadata"
"git.g3e.fr/syonad/two/internal/netif"
"git.g3e.fr/syonad/two/internal/netns"
"git.g3e.fr/syonad/two/internal/qemu"
"git.g3e.fr/syonad/two/pkg/db/kv"
@ -40,6 +42,21 @@ func StartVM(db *badger.DB, name string) error {
return fmt.Errorf("parse tap_id: %w", err)
}
vmIP, err := kv.GetFromDB(db, "vm/"+name+"/ip")
if err != nil {
return fmt.Errorf("get ip: %w", err)
}
gatewayIP, err := kv.GetFromDB(db, "vm/"+name+"/gateway_ip")
if err != nil {
return fmt.Errorf("get gateway_ip: %w", err)
}
metadataPort, err := kv.GetFromDB(db, "vm/"+name+"/metadata_port")
if err != nil {
return fmt.Errorf("get metadata_port: %w", err)
}
mac, err := kv.GetFromDB(db, "vm/"+name+"/mac")
if err != nil {
return fmt.Errorf("get mac: %w", err)
@ -62,16 +79,6 @@ func StartVM(db *badger.DB, name string) error {
}
cpus, _ := strconv.Atoi(cpusStr)
bindIP, err := kv.GetFromDB(db, "vm/"+name+"/metadata_bind_ip")
if err != nil {
return fmt.Errorf("get metadata_bind_ip: %w", err)
}
bindPort, err := kv.GetFromDB(db, "vm/"+name+"/metadata_bind_port")
if err != nil {
return fmt.Errorf("get metadata_bind_port: %w", err)
}
password, _ := kv.GetFromDB(db, "vm/"+name+"/password")
sshkey, _ := kv.GetFromDB(db, "vm/"+name+"/sshkey")
@ -79,11 +86,17 @@ func StartVM(db *badger.DB, name string) error {
return fmt.Errorf("create tap: %w", err)
}
if err := netns.Call(vpcName, func() error {
return iptables.AddMetadataRedirect(vmIP, gatewayIP, metadataPort)
}); err != nil {
return fmt.Errorf("add metadata redirect: %w", err)
}
if err := metadata.StartMetadata(metadata.NoCloudConfig{
Name: name,
VpcName: vpcName,
BindIP: bindIP,
BindPort: bindPort,
BindIP: gatewayIP,
BindPort: metadataPort,
Password: password,
SSHKEY: sshkey,
}, db, false); err != nil {