1 require 'whitelist_update'
3 class Container < ArvadosModel
6 include CommonApiTemplate
7 include WhitelistUpdate
9 serialize :environment, Hash
10 serialize :mounts, Hash
11 serialize :runtime_constraints, Hash
12 serialize :command, Array
14 before_validation :fill_field_defaults, :if => :new_record?
15 before_validation :set_timestamps
16 validates :command, :container_image, :output_path, :cwd, :priority, :presence => true
17 validate :validate_state_change
18 validate :validate_change
19 validate :validate_lock
20 after_validation :assign_auth
21 after_save :handle_completed
23 has_many :container_requests, :foreign_key => :container_uuid, :class_name => 'ContainerRequest', :primary_key => :uuid
24 belongs_to :auth, :class_name => 'ApiClientAuthorization', :foreign_key => :auth_uuid, :primary_key => :uuid
26 api_accessible :user, extend: :common do |t|
28 t.add :container_image
40 t.add :runtime_constraints
46 # Supported states for a container
51 (Running = 'Running'),
52 (Complete = 'Complete'),
53 (Cancelled = 'Cancelled')
58 Queued => [Locked, Cancelled],
59 Locked => [Queued, Running, Cancelled],
60 Running => [Complete, Cancelled]
68 if [Queued, Locked, Running].include? self.state
69 # Update the priority of this container to the maximum priority of any of
70 # its committed container requests and save the record.
71 self.priority = ContainerRequest.
72 where(container_uuid: uuid,
73 state: ContainerRequest::Committed).
81 if self.state == Queued
90 def fill_field_defaults
92 self.environment ||= {}
93 self.runtime_constraints ||= {}
99 def permission_to_create
100 current_user.andand.is_admin
103 def permission_to_update
104 current_user.andand.is_admin
108 if self.state_changed? and self.state == Running
109 self.started_at ||= db_current_time
112 if self.state_changed? and [Complete, Cancelled].include? self.state
113 self.finished_at ||= db_current_time
121 permitted.push(:owner_uuid, :command, :container_image, :cwd,
122 :environment, :mounts, :output_path, :priority,
123 :runtime_constraints)
128 permitted.push :priority
131 permitted.push :priority, :progress
132 if self.state_changed?
133 permitted.push :started_at
137 if self.state_was == Running
138 permitted.push :finished_at, :output, :log, :exit_code
144 permitted.push :finished_at, :output, :log
146 permitted.push :finished_at
150 # The state_transitions check will add an error message for this
154 check_update_whitelist permitted
158 # If the Container is already locked by someone other than the
159 # current api_client_auth, disallow all changes -- except
160 # priority, which needs to change to reflect max(priority) of
161 # relevant ContainerRequests.
162 if locked_by_uuid_was
163 if locked_by_uuid_was != Thread.current[:api_client_authorization].uuid
164 check_update_whitelist [:priority]
168 if [Locked, Running].include? self.state
169 # If the Container was already locked, locked_by_uuid must not
170 # changes. Otherwise, the current auth gets the lock.
171 need_lock = locked_by_uuid_was || Thread.current[:api_client_authorization].uuid
176 # The caller can provide a new value for locked_by_uuid, but only
177 # if it's exactly what we expect. This allows a caller to perform
178 # an update like {"state":"Unlocked","locked_by_uuid":null}.
179 if self.locked_by_uuid_changed?
180 if self.locked_by_uuid != need_lock
181 return errors.add :locked_by_uuid, "can only change to #{need_lock}"
184 self.locked_by_uuid = need_lock
188 if self.auth_uuid_changed?
189 return errors.add :auth_uuid, 'is readonly'
191 if not [Locked, Running].include? self.state
193 self.auth.andand.update_attributes(expires_at: db_current_time)
200 cr = ContainerRequest.
201 where('container_uuid=? and priority>0', self.uuid).
202 order('priority desc').
205 return errors.add :auth_uuid, "cannot be assigned because priority <= 0"
207 self.auth = ApiClientAuthorization.
208 create!(user_id: User.find_by_uuid(cr.modified_by_user_uuid).id,
213 # This container is finished so finalize any associated container requests
214 # that are associated with this container.
215 if self.state_changed? and [Complete, Cancelled].include? self.state
216 act_as_system_user do
217 # Notify container requests associated with this container
218 ContainerRequest.where(container_uuid: uuid,
219 :state => ContainerRequest::Committed).each do |cr|
220 cr.container_completed!
223 # Try to cancel any outstanding container requests made by this container.
224 ContainerRequest.where(requesting_container_uuid: uuid,
225 :state => ContainerRequest::Committed).each do |cr|