vm management

app.py

@@ -431,6 +431,72 @@ def api_disable():
     ha_node_maint(False, node, log)
     return jsonify(ok=True, log=log)
 
+
+# --- VM/CT admin actions API ---
+
+def vm_locked(typ: str, node: str, vmid: int) -> bool:
+    base = f"/nodes/{node}/{typ}/{vmid}"
+    cur = get_json(["pvesh", "get", f"{base}/status/current"]) or {}
+    return bool(cur.get("lock"))
+
+def run_qm_pct(typ: str, vmid: int, subcmd: str) -> subprocess.CompletedProcess:
+    tool = "qm" if typ == "qemu" else "pct"
+    return run([tool, subcmd, str(vmid)])
+
+@app.get("/api/list-all-vmct")
+def api_list_all_vmct():
+    meta = cluster_vmct_meta()
+    nodes = [n.get("node") for n in (api_cluster_data().get("nodes") or []) if n.get("node")]
+    return jsonify({"all": list(meta.values()), "nodes": sorted(set(nodes))})
+
+@app.post("/api/vm-action")
+def api_vm_action():
+    if os.geteuid() != 0:
+        return jsonify(ok=False, error="run as root"), 403
+    data = request.get_json(force=True, silent=True) or {}
+    sid = data.get("sid", "")
+    action = data.get("action", "")
+    target = data.get("target", "")
+
+    meta = cluster_vmct_meta()
+    tup = sid_to_tuple(sid, meta)
+    if not tup:
+        return jsonify(ok=False, error="bad sid"), 400
+    typ, vmid, node = tup
+    if not node:
+        return jsonify(ok=False, error="unknown node"), 400
+
+    if action == "migrate_offline":
+        action = "migrate"
+
+    try:
+        if action == "unlock":
+            if typ != "qemu":
+                return jsonify(ok=False, error="unlock only for qemu"), 400
+            if not vm_locked(typ, node, vmid):
+                return jsonify(ok=True, msg="not locked")
+            r = run(["qm", "unlock", str(vmid)])
+            return jsonify(ok=(r.returncode == 0), stdout=r.stdout, stderr=r.stderr)
+
+        elif action in ("start", "stop", "shutdown"):
+            r = run_qm_pct(typ, vmid, action)
+            return jsonify(ok=(r.returncode == 0), stdout=r.stdout, stderr=r.stderr)
+
+        elif action == "migrate":
+            if not target or target == node:
+                return jsonify(ok=False, error="target required and must differ from source"), 400
+            base = f"/nodes/{node}/{typ}/{vmid}/migrate"
+            cmd = ["pvesh", "create", base, "-target", target, "-online", "0"]
+            res = post_json(cmd)
+            return jsonify(ok=True, result=res or {})
+
+        else:
+            return jsonify(ok=False, error="unknown action"), 400
+
+    except Exception as e:
+        return jsonify(ok=False, error=str(e)), 500
+
+
 if __name__ == "__main__":
     import argparse
     p = argparse.ArgumentParser()
@@ -439,4 +505,4 @@ if __name__ == "__main__":
     args = p.parse_args()
     DEFAULT_NODE = args.node
     host, port = args.bind.split(":")
-    app.run(host=host, port=int(port), debug=False, threaded=True)
+    app.run(host=host, port=int(port), debug=False, threaded=True)

static/main.js

@@ -1,4 +1,5 @@
 // ------ helpers ------
+const tblVmAdmin = document.querySelector("#vm-admin");
 const $ = (q) => document.querySelector(q);
 function safe(v) { return (v === undefined || v === null || v === '') ? '—' : String(v); }
 function ensureArr(a) { return Array.isArray(a) ? a : []; }
@@ -87,6 +88,7 @@ async function doRefresh() {
   const d = await fetchSnapshot();
   renderSnap(d);
   if (!doRefresh.didNonHA) { await renderNonHA(); doRefresh.didNonHA = true; }
+  if (!doRefresh.didAdmin) { await renderVMAdmin(); doRefresh.didAdmin = true; }
 }
 btnRefresh.onclick = doRefresh;
 btnAuto.onclick = () => {
@@ -656,3 +658,66 @@ function renderSnap(d) {
 
 // initial one-shot load (auto refresh OFF by default)
 doRefresh().catch(console.error);
+
+
+// ------ VM Admin API/UI ------
+async function fetchAllVmct() {
+  const r = await fetch('/api/list-all-vmct');
+  return await r.json();
+}
+async function vmAction(sid, action, target) {
+  const body = { sid, action };
+  if (target) body.target = target;
+  const r = await fetch('/api/vm-action', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) });
+  const d = await r.json();
+  if (!d.ok) throw new Error(d.error || 'action failed');
+  return d;
+}
+async function renderVMAdmin() {
+  const data = await fetchAllVmct();
+  const arr = ensureArr(data.all);
+  const nodes = ensureArr(data.nodes);
+  const tbody = document.querySelector('#vm-admin tbody');
+  if (!arr.length) { setRows(tbody, [rowHTML(['No VMs/CTs'])]); return; }
+
+  const rows = arr.map(x => {
+    const sid = safe(x.sid), type = safe(x.type), name = safe(x.name), node = safe(x.node);
+    const st = /running/i.test(x.status || '') ? badge(x.status, 'ok') : badge(x.status || '—', 'dark');
+    const actions = `
+      <div class="btn-group btn-group-sm" role="group">
+        <button class="btn btn-outline-secondary act-unlock">Unlock</button>
+        <button class="btn btn-outline-success act-start">Start</button>
+        <button class="btn btn-outline-warning act-shutdown">Shutdown</button>
+        <button class="btn btn-outline-danger act-stop">Stop</button>
+        <button class="btn btn-outline-primary act-migrate">Migrate (offline)</button>
+      </div>`;
+    const sel = `<select class="form-select form-select-sm target-node" style="min-width:140px">
+      ${nodes.map(n => `<option value="${n}" ${n === x.node ? 'disabled' : ''}>${n}${n === x.node ? ' (src)' : ''}</option>`).join('')}
+    </select>`;
+    return rowHTML([sid, type.toUpperCase(), name, node, st, actions, sel], `data-sid="${sid}"`);
+  });
+
+  setRows(tbody, rows);
+
+  Array.from(tbody.querySelectorAll('tr[data-sid]')).forEach(tr => {
+    const sid = tr.getAttribute('data-sid');
+    const getTarget = () => tr.querySelector('.target-node')?.value || '';
+    const bind = (sel, action, needsTarget = false) => {
+      const btn = tr.querySelector(sel);
+      if (!btn) return;
+      btn.onclick = async () => {
+        btn.disabled = true;
+        try {
+          await vmAction(sid, action, needsTarget ? getTarget() : undefined);
+          await doRefresh();
+        } catch (e) { alert('ERROR: ' + e.message); }
+        btn.disabled = false;
+      };
+    };
+    bind('.act-unlock', 'unlock');
+    bind('.act-start', 'start');
+    bind('.act-stop', 'stop');
+    bind('.act-shutdown', 'shutdown');
+    bind('.act-migrate', 'migrate', true);
+  });
+}

templates/index.html

@@ -65,6 +65,9 @@
       <li class="nav-item" role="presentation">
         <button class="nav-link" data-bs-toggle="tab" data-bs-target="#tab-nonha" type="button">VM/CT (non-HA)</button>
       </li>
+      <li class="nav-item" role="presentation">
+        <button class="nav-link" data-bs-toggle="tab" data-bs-target="#tab-admin" type="button">VM Admin</button>
+      </li>
       <li class="nav-item" role="presentation">
         <button class="nav-link" data-bs-toggle="tab" data-bs-target="#tab-nodes" type="button">Nodes</button>
       </li>
@@ -227,6 +230,33 @@
         </div>
       </div>
 
+      <!-- TAB: VM Admin -->
+      <div class="tab-pane fade" id="tab-admin">
+        <div class="card border-0">
+          <div class="card-body table-responsive">
+            <table class="table table-sm table-striped align-middle table-nowrap" id="vm-admin">
+              <thead>
+                <tr>
+                  <th>SID</th>
+                  <th>Type</th>
+                  <th>Name</th>
+                  <th>Node</th>
+                  <th>Status</th>
+                  <th>Actions</th>
+                  <th>Target (migrate)</th>
+                </tr>
+              </thead>
+              <tbody>
+                <tr>
+                  <td colspan="7" class="text-muted">Loading…</td>
+                </tr>
+              </tbody>
+            </table>
+            <div class="small text-muted">Akcje: Unlock (qm), Start/Stop/Shutdown, Offline migrate.</div>
+          </div>
+        </div>
+      </div>
+
       <!-- TAB: Nodes (expandable) -->
       <div class="tab-pane fade" id="tab-nodes">
         <div class="card border-0">