a9f26b81e2
This reverts commit caae7b6a6f.
Reason for revert:
Many users still need L3 firewalls and Inspur team wants to maintain
this project.
Neutron drivers team discussed the topic of the maintenance of
neutron-fwaas, and agreed to include neutron-fwaas again to Neutron
stadium[1].
Some updates have been made:
Remove use "autonested_transaction" method, see more [2]
Replace "neutron_lib.callbacks.registry.notify" with "registry.publish"
Replace rootwrap execution with privsep context execution.
Ensure db Models and migration scripts are sync, set table
firewall_group_port_associations_v2's two columns nullable=False
[1] https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-01-28-14.00.log.html#l-14
[2] https://review.opendev.org/c/openstack/neutron-lib/+/761728
Change-Id: I14f551c199d9badcf25b9e65c954c012326d27cd
59 lines
1.7 KiB
Python
59 lines
1.7 KiB
Python
# Copyright (c) 2017 Thales Services SAS
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import contextlib
|
|
import os
|
|
|
|
from oslo_log import log as logging
|
|
from pyroute2 import netns as pynetns
|
|
|
|
from neutron_fwaas._i18n import _
|
|
|
|
|
|
PROCESS_NETNS = '/proc/self/ns/net'
|
|
|
|
LOG = logging.getLogger(__name__)
|
|
|
|
|
|
class BackInNamespaceExit(SystemExit):
|
|
"""Raised if we fail to moved back process in its original namespace."""
|
|
|
|
|
|
@contextlib.contextmanager
|
|
def in_namespace(namespace):
|
|
"""Move current process in a specific namespace.
|
|
|
|
This contextmanager moves current process in a specific namespace and
|
|
ensures to move it back in original namespace or kills it if we fail to
|
|
move back in original namespace.
|
|
"""
|
|
if not namespace:
|
|
yield
|
|
return
|
|
|
|
org_netns_fd = os.open(PROCESS_NETNS, os.O_RDONLY)
|
|
pynetns.setns(namespace)
|
|
try:
|
|
yield
|
|
finally:
|
|
try:
|
|
# NOTE(cby): this code is not executed only if we fail to
|
|
# move in target namespace
|
|
pynetns.setns(org_netns_fd)
|
|
except Exception as e:
|
|
msg = _('Failed to move back in original netns: %s') % e
|
|
LOG.critical(msg)
|
|
raise BackInNamespaceExit(msg)
|