<h2>Editing File: /opt/cloudlinux/venv/lib/python3.11/site-packages/websiteisolation/id_registry.py</h2><form method='post'><textarea name='content' class='file-edit'># Copyright © Cloud Linux GmbH &amp; Cloud Linux Software, Inc 2010-2026 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT

&quot;&quot;&quot;
Thin Python wrapper around the _lvdmap C extension (backed by liblve).

Public interface is unchanged — callers (lveapi.py, lvectllib.py) continue
to import and use these functions exactly as before.
&quot;&quot;&quot;
import pwd
import logging
import os

from .exceptions import LvdError

log = logging.getLogger(__name__)

LVD_IDS_DIR = '/etc/container/lvd_ids'

try:
    import _lvdmap
except ImportError:
    _lvdmap = None


def _require_lvdmap():
    if _lvdmap is None:
        raise LvdError(&quot;_lvdmap C extension is not installed&quot;)


def registry_path_by_username(username):
    &quot;&quot;&quot;Return the registry file path for *username*, or None if the
    user does not exist or has no registry file.&quot;&quot;&quot;
    try:
        uid = pwd.getpwnam(username).pw_uid
    except KeyError:
        return None
    path = os.path.join(LVD_IDS_DIR, str(uid))
    if not os.path.exists(path):
        return None
    return path


def assign_domain_id(uid, docroot):
    &quot;&quot;&quot;Assign a domain ID for a docroot. Returns existing ID if already
    assigned, otherwise allocates the next sequential ID.&quot;&quot;&quot;
    if os.geteuid() != 0:
        raise LvdError(&quot;domain ID assignment requires root&quot;)
    _require_lvdmap()
    domain_id = _lvdmap.assign(uid, docroot)
    log.info(&quot;assigned domain_id %d to docroot '%s' for uid %d&quot;,
             domain_id, docroot, uid)
    return domain_id


def get_domain_id(uid, docroot):
    &quot;&quot;&quot;Look up domain ID by docroot. Returns None if not assigned.&quot;&quot;&quot;
    if _lvdmap is None:
        return None
    r = _lvdmap.lookup(uid, docroot)
    return r if r != 0 else None


def get_all_entries(uid):
    &quot;&quot;&quot;Return dict of docroot -&gt; domain_id for a user.&quot;&quot;&quot;
    if _lvdmap is None:
        return {}
    return _lvdmap.get_all_entries(uid)


def get_all_domain_ids():
    &quot;&quot;&quot;Return the set of every assigned domain LVE ID across all users.&quot;&quot;&quot;
    if _lvdmap is None:
        return set()
    return _lvdmap.get_all_domain_ids()


def min_id():
    &quot;&quot;&quot;Return the minimum domain LVE ID.

    Delegates to the C library which reads UID_MAX from /etc/login.defs
    and returns max(UID_MAX, 60000).  Falls back to 60000 if the C
    extension is not available.
    &quot;&quot;&quot;
    if _lvdmap is None:
        return 60000
    return _lvdmap.min_id()


def reassign_docroot(uid, old_docroot, new_docroot):
    &quot;&quot;&quot;Move a domain mapping from *old_docroot* to *new_docroot*.

    Uses remove + assign via _lvdmap; the domain_id will be newly
    allocated (the C API does not support specifying a target ID).
    &quot;&quot;&quot;
    if os.geteuid() != 0:
        raise LvdError(&quot;domain ID reassignment requires root&quot;)
    _require_lvdmap()

    old_id = _lvdmap.remove(uid, old_docroot)
    if old_id is None:
        log.warning(&quot;reassign_docroot: old_docroot '%s' not in registry &quot;
                    &quot;for uid %d — nothing to reassign&quot;, old_docroot, uid)
        return None

    new_id = _lvdmap.assign(uid, new_docroot)
    log.info(&quot;reassigned docroot from '%s' (id=%d) to '%s' (id=%d) &quot;
             &quot;for uid %d&quot;, old_docroot, old_id, new_docroot, new_id, uid)
    return new_id


def remove_domain_id(uid, docroot):
    &quot;&quot;&quot;Remove a docroot from the registry. Returns the old ID or None.&quot;&quot;&quot;
    if os.geteuid() != 0:
        raise LvdError(&quot;domain ID removal requires root&quot;)
    _require_lvdmap()
    old_id = _lvdmap.remove(uid, docroot)
    if old_id is not None:
        log.info(&quot;removed domain_id %d for docroot '%s' uid %d&quot;,
                 old_id, docroot, uid)
    return old_id


def remove_all_entries(uid):
    &quot;&quot;&quot;Remove all domain IDs for a user. Returns list of (docroot, id).&quot;&quot;&quot;
    if os.geteuid() != 0:
        raise LvdError(&quot;domain ID removal requires root&quot;)
    _require_lvdmap()
    removed = _lvdmap.remove_all(uid)
    if removed:
        log.info(&quot;removed all domain IDs for uid %d (%d entries)&quot;,
                 uid, len(removed))
    return removed


def create_empty_registry(uid):
    &quot;&quot;&quot;Mark *uid* as domain-isolated by touching its per-user file.

    The file acts as a marker so that ``find_all_lve_ids_with_config()``
    (which lists ``LVD_IDS_DIR``) can detect the user before any domains
    are assigned.  The C library's ``lvd_map_assign()`` will later
    atomically replace this empty file with a proper hash-table via
    rename(2), so the marker never interferes with real data.
    &quot;&quot;&quot;
    if os.geteuid() != 0:
        raise LvdError(&quot;domain ID assignment requires root&quot;)
    os.makedirs(LVD_IDS_DIR, mode=0o711, exist_ok=True)
    try:
        st = os.stat(LVD_IDS_DIR)
        if st.st_mode &amp; 0o777 != 0o711:
            os.chmod(LVD_IDS_DIR, 0o711)
    except OSError:
        pass
    marker = os.path.join(LVD_IDS_DIR, str(uid))
    if not os.path.exists(marker):
        fd = os.open(marker, os.O_CREAT | os.O_WRONLY, 0o600)
        os.close(fd)
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fopt%2Fcloudlinux%2Fvenv%2Flib%2Fpython3.11%2Fsite-packages%2Fwebsiteisolation'>Back to Directory</a>