GitLab

avoid warnings from the Frontier library.

look for VMs that need a reload setup.

CH credential.

table instead.

tree mode.

a little bit to avoid a race at the very end of time, when trying to
unregister a sliver from the SA.

Move the expiration test into verifygenicred. Change the invocation to
capture the output so that we can say something useful in the error
response, instead of what we do now which is just tell the user there
is an error.

This call allows a geni user to create a sliver, customise the node,
and then take a snapshot (possibly creating a new image descriptor)
without having to use the Emulab web interface. The API looks like:

  int CreateImage(slice_urn, sliver_urn, imagename, credentials[]);

The slice must be unlocked and the sliver in the ready state. Once
the operation starts, the slice is locked until the backend finishes.
This is something that I might revisit later, but this was the easiest
approach that ensures consistency. 

The imagename is looked up in the current project the node is attached
to. If it does not exists, create it. Then snapshot the node. You can
call this again of course, to take a new snapshot, without having to
provide a new imagename.

The image file is written to the images directory of the project,
which is available to the node via /proj, so the user can get to it
(since the user might not have a local account).

the parent osid, and can be used to select a different image to load,
sau FEDOR15-OPENVZ-STD. Does not work on shared nodes of course.

wildcard the lnk speed, except when the link includes a virtual
node; in this case use 100Mb to avoid consuming all BW on GB links.

This is a bug fix for yesterday's buggy bug fix.

The previous code searched for _all_ privileges, which returned
extraneous results in case of delegation.  We are now more precise
about the locations in the tree we're considering.

from the CH database.

Requires a credential (possibly delegated) with the "readhistory"
privilege.

   ReadHistoryRecords(credential, int index, int count);

where index and count are optional, but to be useful you will want to
track the index and ask for "count" records at a time until you get
back an error saying there are no more to give you. You are limited to
max 100 (the default is 10) time at a time.

The return value is a list of records, where each record is an array
of the data in the aggregate_history table and the manifest. There
might be multiple records if the slice was updated, since there will
be multiple manifests. I won't describe it, you can just print out a
record and see it, it is all pretty obvious.

Add a more general email regular expression for extracting the email
address from the Subject DN in a certificate.