proxmox-scripts/vm/extract_acl.py

#!/usr/bin/env python3

import json
import subprocess
import sys

def extract_acls(vmid_min, vmid_max, output_file, remove_acl=False, append=False):
    print("Fetching ACLs...")

    if not append:
        with open(output_file, "w") as f:
            f.write("")

    result = subprocess.run(
        ["pveum", "acl", "list", "--output-format=json"],
        capture_output=True,
        text=True
    )

    acls = json.loads(result.stdout)

    def process_acl(acl_entry):
        path = acl_entry["path"]
        role = acl_entry["roleid"]
        user = acl_entry["ugid"]

        if "/vms/" in path:
            vmid = int(path.split("/vms/")[1])
            if vmid_min <= vmid <= vmid_max:
                print(f"Processing VMID: {vmid} (Path: {path}, Role: {role}, User: {user})")

                with open(output_file, "a") as f:
                    f.write(f"{path} {user} {role}\n")

                if (remove_acl):
                    subprocess.run(["pveum", "acl", "delete", path, "--users", users, "--roles", roles])

    for acl_entry in acls:
        process_acl(acl_entry)

    print(f"ACLs extracted and saved to {output_file}")


def main():
    if len(sys.argv) < 4:
        print("Usage: extract_acls.py <vmid_min> <vmid_max> <output_file> --remove --append")
        sys.exit(1)

    vmid_min = int(sys.argv[1])
    vmid_max = int(sys.argv[2])
    output_file = sys.argv[3]
    remove_acl = "--remove" in sys.argv
    append = "--append" in sys.argv

    extract_acls(vmid_min, vmid_max, output_file, remove_acl, append)


if __name__ == "__main__":
    main()