950 lines
55 KiB
XML
950 lines
55 KiB
XML
<?xml version="1.0" encoding="UTF-8" ?>
|
|
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
|
|
targetNamespace="http://aif-ng.io/"
|
|
xmlns="http://aif-ng.io/"
|
|
xmlns:aif="http://aif-ng.io/"
|
|
elementFormDefault="qualified"
|
|
attributeFormDefault="unqualified">
|
|
|
|
<xs:simpleType name="t_diskdev">
|
|
<xs:restriction base="xs:string">
|
|
<xs:pattern value="(/dev/([A-Za-z0-9_]+/)?[A-Za-z0-9_]+[0-9]?|auto)"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_diskfmt">
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="gpt"/>
|
|
<xs:enumeration value="bios"/>
|
|
<xs:enumeration value="dos"/>
|
|
<xs:enumeration value="msdos"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_disksize">
|
|
<xs:restriction base="xs:string">
|
|
<xs:pattern value="[-|+]?\s*([0-9]+)\s*(%|((k|Ki)|[MGTPEZY]i?)?B?|)\s*"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_lvsize">
|
|
<!-- This is *basically* t_disksize except we don't want +/-. -->
|
|
<!-- If no suffix is provided, we assume the size is in *extents* instead of sectors like above. -->
|
|
<xs:restriction base="xs:string">
|
|
<xs:pattern value="\s*([0-9]+)\s*(%|((k|Ki)|[MGTPEZY]i?)?B?|)\s*"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_pesize">
|
|
<!-- This is *basically* t_lvsize except we don't allow percentages. -->
|
|
<!-- If no suffix is provided, we assume the size is in sectors
|
|
UNLESS it's "0", which means use the default (which I *think* is dynamically generated). -->
|
|
<xs:restriction base="xs:string">
|
|
<xs:pattern value="\s*([0-9]+)\s*(((k|Ki)|[MGTPEZY]i?)?B?|)\s*"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_fstype">
|
|
<xs:union>
|
|
<xs:simpleType>
|
|
<!-- parted names -->
|
|
<!-- ', '.join(sorted(list(dict(vars(parted.filesystem))['fileSystemType'].keys()))) -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="affs0"/>
|
|
<xs:enumeration value="affs1"/>
|
|
<xs:enumeration value="affs2"/>
|
|
<xs:enumeration value="affs3"/>
|
|
<xs:enumeration value="affs4"/>
|
|
<xs:enumeration value="affs5"/>
|
|
<xs:enumeration value="affs6"/>
|
|
<xs:enumeration value="affs7"/>
|
|
<xs:enumeration value="amufs"/>
|
|
<xs:enumeration value="amufs0"/>
|
|
<xs:enumeration value="amufs1"/>
|
|
<xs:enumeration value="amufs2"/>
|
|
<xs:enumeration value="amufs3"/>
|
|
<xs:enumeration value="amufs4"/>
|
|
<xs:enumeration value="amufs5"/>
|
|
<xs:enumeration value="apfs1"/>
|
|
<xs:enumeration value="apfs2"/>
|
|
<xs:enumeration value="asfs"/>
|
|
<xs:enumeration value="btrfs"/>
|
|
<xs:enumeration value="ext2"/>
|
|
<xs:enumeration value="ext3"/>
|
|
<xs:enumeration value="ext4"/>
|
|
<xs:enumeration value="fat16"/>
|
|
<xs:enumeration value="fat32"/>
|
|
<xs:enumeration value="hfs"/>
|
|
<xs:enumeration value="hfs+"/>
|
|
<xs:enumeration value="hfsx"/>
|
|
<xs:enumeration value="hp-ufs"/>
|
|
<xs:enumeration value="jfs"/>
|
|
<xs:enumeration value="linux-swap(v0)"/>
|
|
<xs:enumeration value="linux-swap(v1)"/>
|
|
<xs:enumeration value="nilfs2"/>
|
|
<xs:enumeration value="ntfs"/>
|
|
<xs:enumeration value="reiserfs"/>
|
|
<xs:enumeration value="sun-ufs"/>
|
|
<xs:enumeration value="swsusp"/>
|
|
<xs:enumeration value="udf"/>
|
|
<xs:enumeration value="xfs"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
<xs:simpleType>
|
|
<!-- https://en.wikipedia.org/wiki/GUID_Partition_Table#Partition_type_GUIDs -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:pattern value="[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:union>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_part_flags">
|
|
<xs:union>
|
|
<xs:simpleType>
|
|
<!-- parted.partition.partitionFlag -->
|
|
<xs:restriction base="xs:string">
|
|
<xs:enumeration value="atvrecv"/>
|
|
<xs:enumeration value="bios_grub"/>
|
|
<xs:enumeration value="boot"/>
|
|
<xs:enumeration value="diag"/>
|
|
<xs:enumeration value="esp"/>
|
|
<xs:enumeration value="hidden"/>
|
|
<xs:enumeration value="hp-service"/>
|
|
<xs:enumeration value="irst"/>
|
|
<xs:enumeration value="lba"/>
|
|
<xs:enumeration value="legacy_boot"/>
|
|
<xs:enumeration value="lvm"/>
|
|
<xs:enumeration value="msftdata"/>
|
|
<xs:enumeration value="msftres"/>
|
|
<xs:enumeration value="palo"/>
|
|
<xs:enumeration value="prep"/>
|
|
<xs:enumeration value="raid"/>
|
|
<xs:enumeration value="root"/>
|
|
<xs:enumeration value="swap"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
<xs:simpleType>
|
|
<!-- These deviate from the parted flags (and in the case of the gpt_* ones, have no parted
|
|
equivalent it seems).
|
|
fdisk's "e(x)pert mode" has numerical GUID identifers for these ("Attrs").
|
|
Details on these are at:
|
|
https://en.wikipedia.org/wiki/GUID_Partition_Table#Partition_entries_(LBA_2%E2%80%9333)
|
|
|
|
BD_PART_FLAGS = BlockDev.PartFlag(-1)
|
|
BD_PART_FLAGS_FRIENDLY = dict(zip(BD_PART_FLAGS.value_nicks, BD_PART_FLAGS.value_names))
|
|
sorted(list(BD_PART_FLAGS_FRIENDLY.keys()))
|
|
-->
|
|
<xs:restriction base="xs:string">
|
|
<xs:enumeration value="apple_tv_recovery"/>
|
|
<xs:enumeration value="cpalo"/>
|
|
<xs:enumeration value="gpt_hidden"/><!-- No parted equivalent -->
|
|
<xs:enumeration value="gpt_no_automount"/><!-- No parted equivalent -->
|
|
<xs:enumeration value="gpt_read_only"/><!-- No parted equivalent -->
|
|
<xs:enumeration value="gpt_system_part"/><!-- No parted equivalent -->
|
|
<xs:enumeration value="hpservice"/>
|
|
<xs:enumeration value="msft_data"/>
|
|
<xs:enumeration value="msft_reserved"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:union>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_iface_name">
|
|
<xs:restriction base="xs:token">
|
|
<!-- https://github.com/systemd/systemd/blob/master/src/udev/udev-builtin-net_id.c.
|
|
I have no idea if this will work. TODO: simplify, validate in-code. -->
|
|
<xs:pattern
|
|
value="(auto|((en|sl|wl|ww)(b[0-9]+|c[a-z0-9]|o[0-9]+(n.*(d.*)?)?|s[0-9]+(f.*)?([nd].*)?|x([A-Fa-f0-9]:){5}[A-Fa-f0-9]|(P.*)?p[0-9]+s[0-9]+(([fnd].*)|u.*)?)))"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_address_ip4">
|
|
<xs:restriction base="xs:string">
|
|
<!-- This is a REALLY LAZY regex. Matching IPv4 in regex is ugly as heck, so we do that in-code.
|
|
This is just a gatekeeper. -->
|
|
<xs:pattern value="(dhcp|[0-9.]{7,15}/[0-9]{1,2})"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_address_ip6">
|
|
<xs:restriction base="xs:string">
|
|
<!-- This is a REALLY LAZY regex. Matching IPv6 in regex is ugly as heck, so we do that in-code.
|
|
This is just a gatekeeper. -->
|
|
<xs:pattern value="(dhcp6|slaac|([A-Za-z0-9:]+)/[0-9]+)"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_resolver_addr">
|
|
<xs:restriction base="xs:string">
|
|
<!-- This is a REALLY LAZY regex. Matching IPv4/IPv6 in regex is ugly as heck, so we do that in-code.
|
|
This is just a gatekeeper. -->
|
|
<xs:pattern value="([0-9.]{7,15}|[A-Za-z0-9:]+)"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_netproto">
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="both"/>
|
|
<xs:enumeration value="ipv4"/>
|
|
<xs:enumeration value="ipv6"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_netprov">
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="netctl"/>
|
|
<xs:enumeration value="nm"/>
|
|
<xs:enumeration value="systemd"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:complexType name="t_iface">
|
|
<xs:sequence>
|
|
<xs:choice maxOccurs="unbounded">
|
|
<xs:element name="addresses" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="ipv4">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="address" type="aif:t_address_ip4"
|
|
minOccurs="1" maxOccurs="unbounded"/>
|
|
</xs:sequence>
|
|
<xs:attribute name="gateway" type="aif:t_address_ip4" use="optional"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="ipv6">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="address" type="aif:t_address_ip6"
|
|
minOccurs="1" maxOccurs="unbounded"/>
|
|
</xs:sequence>
|
|
<xs:attribute name="gateway" type="aif:t_address_ip6" use="optional"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="resolvers" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="resolver" minOccurs="1" maxOccurs="unbounded"
|
|
type="aif:t_resolver_addr"/>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:choice>
|
|
</xs:sequence>
|
|
<xs:attribute name="device" type="aif:t_iface_name" use="required"/>
|
|
<xs:attribute name="defroute" type="xs:boolean" use="optional" default="false"/>
|
|
</xs:complexType>
|
|
|
|
<xs:simpleType name="t_mac_addr">
|
|
<xs:restriction base="xs:token">
|
|
<!-- EUI48[RFC7043§3] (previously MAC48[RFC7042§2.1]) -->
|
|
<xs:pattern value="([A-Fa-f0-9]{2}[:-]?){5}[A-Fa-f0-9]{2}"/>
|
|
<!-- EUI64[RFC7043§4, RFC4291§2.5.1] -->
|
|
<xs:pattern value="([A-Fa-f0-9]{2}[:-]?){3}[Ff]{3}[FfEe][:-]?([A-Fa-f0-9]{2}[:-]?){2}[A-Fa-f0-9]{2}"/>
|
|
<xs:pattern value="([A-Fa-f0-9]{2}[:-]?){3}[A-Fa-f0-9]{4}[:-]?([A-Fa-f0-9]{2}[:-]?){2}[A-Fa-f0-9]{2}"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<!-- TODO: "enterprise" WPA2 (add'l details)? WPA3? -->
|
|
<xs:complexType name="t_wifi_crypto">
|
|
<xs:all>
|
|
<xs:element name="type" minOccurs="1" maxOccurs="1" default="wpa2">
|
|
<xs:simpleType>
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="wep"/>
|
|
<xs:enumeration value="wpa"/>
|
|
<xs:enumeration value="wpa2"/>
|
|
<!-- <xs:enumeration value="wpa3"/> -->
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:element>
|
|
<!-- "mode" only valid for WPA2 -->
|
|
<xs:element name="mode" minOccurs="0" maxOccurs="1" default="personal">
|
|
<xs:simpleType>
|
|
<xs:restriction base="xs:token">
|
|
<!-- PSK -->
|
|
<xs:enumeration value="personal"/>
|
|
<!-- RADIUS -->
|
|
<xs:enumeration value="enterprise"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:element>
|
|
<xs:element name="creds" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:simpleContent>
|
|
<xs:extension base="xs:token">
|
|
<xs:attribute name="type" use="optional" default="psk">
|
|
<xs:simpleType>
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="psk"/>
|
|
<xs:enumeration value="radius"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:attribute>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:all>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="t_iface_wifi">
|
|
<xs:complexContent>
|
|
<xs:extension base="aif:t_iface">
|
|
<xs:sequence>
|
|
<xs:element name="encryption" type="aif:t_wifi_crypto" minOccurs="0" maxOccurs="1"/>
|
|
</xs:sequence>
|
|
<xs:attribute name="essid" type="xs:string" use="required"/>
|
|
<xs:attribute name="bssid" type="xs:string" use="optional"/>
|
|
</xs:extension>
|
|
</xs:complexContent>
|
|
</xs:complexType>
|
|
|
|
<xs:simpleType name="t_scripturi">
|
|
<xs:restriction base="xs:anyURI">
|
|
<xs:pattern value="(https?|ftps?|file)://.+"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_posixUserGroup">
|
|
<!-- https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_437
|
|
https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_282
|
|
https://unix.stackexchange.com/a/435120/284004 -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:pattern value="[a-z_]([a-z0-9_-]{0,31}|[a-z0-9_-]{0,30}$)"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_shadowhash">
|
|
<!-- http://man7.org/linux/man-pages/man3/crypt.3.html#NOTES -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:pattern value="($1)?($[a-zA-Z0-9./]{1,16})$[a-zA-Z0-9./]{22}"/><!-- md5 -->
|
|
<xs:pattern value="($2[abxy]?)?($[0-9]+)$[a-zA-Z0-9./]{53}"/><!-- Blowfish -->
|
|
<xs:pattern value="($5)?($[a-zA-Z0-9./]{1,16})$[a-zA-Z0-9./]{43}"/><!-- sha256 -->
|
|
<xs:pattern value="($6)?($[a-zA-Z0-9./]{1,16})$[a-zA-Z0-9./]{86}"/><!-- sha512 -->
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_pacuri">
|
|
<!-- xs:anyURI is too permissive. -->
|
|
<!-- <xs:restriction base="xs:anyURI"> -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:pattern value="(file|https?)://.+"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_bootloaders">
|
|
<!-- TODO: expand?
|
|
https://wiki.archlinux.org/index.php/Category:Boot_loaders
|
|
https://wiki.archlinux.org/index.php/Arch_boot_process#Boot_loader -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="grub"/>
|
|
<xs:enumeration value="systemd"/>
|
|
<xs:enumeration value="syslinux"/>
|
|
<xs:enumeration value="lilo"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_authselect">
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="basic"/>
|
|
<xs:enumeration value="digest"/>
|
|
<xs:enumeration value="none"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:complexType name="t_cmdopts">
|
|
<xs:simpleContent>
|
|
<xs:extension base="xs:string">
|
|
<xs:attribute name="name" use="required" type="xs:token"/>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
|
|
<!-- TODO: "swap" shouldn't be here. Split off into a different type. -->
|
|
<xs:simpleType name="t_filepath">
|
|
<xs:restriction base="xs:string">
|
|
<xs:pattern value="((/[^/]+)+/?|swap)"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_raid_meta">
|
|
<!-- Warn about 1.x used for non-aware bootloaders in manual... 0.90 should be used in that case. -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="0"/><!-- Same as 0.90 -->
|
|
<xs:enumeration value="0.90"/><!-- Same as 0 -->
|
|
<xs:enumeration value="1"/><!-- Same as 1.2, default -->
|
|
<xs:enumeration value="1.0"/>
|
|
<xs:enumeration value="1.1"/>
|
|
<xs:enumeration value="1.2"/><!-- Same as 1, default -->
|
|
<xs:enumeration value="default"/><!-- Same as 1, 1.2 -->
|
|
<xs:enumeration value="ddf"/>
|
|
<xs:enumeration value="imsm"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_raid_levels">
|
|
<xs:restriction base="xs:integer">
|
|
<xs:enumeration value="0"/>
|
|
<xs:enumeration value="1"/>
|
|
<xs:enumeration value="4"/>
|
|
<xs:enumeration value="5"/>
|
|
<xs:enumeration value="6"/>
|
|
<xs:enumeration value="10"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_raid_layout">
|
|
<!-- mdadm(8), "layout=" option -->
|
|
<!-- We don't need to cook in the "faulty" levels. -->
|
|
<xs:restriction base="xs:token">
|
|
<xs:pattern
|
|
value="((left|right)-a?symmetric(-6)?|[lr][as]|parity-(fir|la)st|ddf-(zero|N)-restart|ddf-N-continue|parity-first-6|[nof][0-9]+|none)"/>
|
|
<xs:whiteSpace value="collapse"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="t_nonempty">
|
|
<xs:restriction base="xs:token">
|
|
<xs:minLength value="1"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
|
|
<xs:complexType name="t_nixpass">
|
|
<xs:choice minOccurs="1" maxOccurs="1">
|
|
<xs:element name="passwordPlain" type="t_nonempty"/>
|
|
<xs:element name="passwordHash">
|
|
<xs:complexType>
|
|
<xs:simpleContent>
|
|
<xs:extension base="aif:t_shadowhash">
|
|
<xs:attribute name="hashType" use="optional" default="(detect)">
|
|
<xs:simpleType>
|
|
<xs:restriction base="aif:t_nonempty">
|
|
<xs:enumeration value="md5"/>
|
|
<xs:enumeration value="bcrypt"/><!-- "blowfish" in crypt(3) -->
|
|
<xs:enumeration value="sha256"/>
|
|
<xs:enumeration value="sha512"/>
|
|
<xs:enumeration value="(detect)"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:attribute>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:choice>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="t_provscript">
|
|
<xs:simpleContent>
|
|
<xs:extension base="aif:t_scripturi">
|
|
<xs:attribute name="user" type="aif:t_nonempty" use="optional"/>
|
|
<xs:attribute name="password" type="aif:t_nonempty" use="optional"/>
|
|
<xs:attribute name="realm" type="aif:t_nonempty" use="optional"/>
|
|
<xs:attribute name="authtype" type="aif:t_authselect" use="optional" default="none"/>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
|
|
<!-- ROOT -->
|
|
<xs:element name="aif">
|
|
<xs:complexType>
|
|
<xs:all>
|
|
<!-- BEGIN STORAGE -->
|
|
<xs:element name="storage" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:all>
|
|
<!-- BEGIN BLOCKDEVICES -->
|
|
<xs:element name="blockDevices" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="disk" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="part" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="0" maxOccurs="1">
|
|
<xs:element name="partitionFlag" minOccurs="1"
|
|
maxOccurs="unbounded"
|
|
type="aif:t_part_flags"/>
|
|
</xs:sequence>
|
|
<xs:attribute name="id" type="xs:ID"
|
|
use="required"/>
|
|
<xs:attribute name="name" type="aif:t_nonempty"
|
|
use="optional"/>
|
|
<xs:attribute name="label" type="aif:t_nonempty"
|
|
use="optional"/>
|
|
<xs:attribute name="start" type="aif:t_disksize"
|
|
use="required"/>
|
|
<xs:attribute name="stop" type="aif:t_disksize"
|
|
use="required"/>
|
|
<xs:attribute name="fsType" type="aif:t_fstype"
|
|
use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
<xs:attribute name="id" type="xs:ID" use="required"/>
|
|
<xs:attribute name="device" type="aif:t_diskdev" use="required"/>
|
|
<xs:attribute name="diskFormat" type="aif:t_diskfmt" use="required"/>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_diskdev">
|
|
<xs:selector xpath="aif:disk"/>
|
|
<xs:field xpath="@device"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END DISK -->
|
|
<!-- BEGIN FILESYSTEMS -->
|
|
<xs:element name="fileSystems" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="fs" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="opt" minOccurs="0" maxOccurs="unbounded"
|
|
type="aif:t_cmdopts"/>
|
|
</xs:sequence>
|
|
<xs:attribute name="id" type="xs:ID" use="required"/>
|
|
<xs:attribute name="source" type="xs:IDREF" use="required"/>
|
|
<!-- We validate this in-code because there's way too many and
|
|
it's way too variable per-host. -->
|
|
<xs:attribute name="type" type="aif:t_nonempty" use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END FILESYSTEMS -->
|
|
<!-- BEGIN LUKS -->
|
|
<xs:element name="luks" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<!-- TODO: add support for custom flags/opts? -->
|
|
<xs:element name="luksDev" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="secrets" minOccurs="1"
|
|
maxOccurs="10">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="passphrase" minOccurs="0"
|
|
maxOccurs="unbounded"
|
|
type="aif:t_nonempty"/>
|
|
<!-- TODO: support URI to *read* bytes from? -->
|
|
<xs:element name="keyFile" minOccurs="0"
|
|
maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:simpleContent>
|
|
<xs:extension base="aif:t_filepath">
|
|
<xs:attribute name="size"
|
|
type="xs:positiveInteger"
|
|
use="optional"/>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
<xs:attribute name="id" type="xs:ID" use="required"/>
|
|
<xs:attribute name="name" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="source" type="xs:IDREF" use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_luks_name">
|
|
<xs:selector xpath="aif:luksDev"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
<!-- END LUKS -->
|
|
<!-- BEGIN LVM -->
|
|
<xs:element name="lvm" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="volumeGroup" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:all>
|
|
<xs:element name="physicalVolumes" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="pv" minOccurs="1"
|
|
maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:attribute name="id" type="xs:ID"
|
|
use="required"/>
|
|
<xs:attribute name="source" type="xs:IDREF"
|
|
use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="logicalVolumes" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="lv" minOccurs="1"
|
|
maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="0"
|
|
maxOccurs="unbounded">
|
|
<xs:element name="pvMember" minOccurs="1"
|
|
maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:attribute name="source"
|
|
use="required"
|
|
type="xs:IDREF"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
<xs:attribute name="id" type="xs:ID"
|
|
use="required"/>
|
|
<xs:attribute name="name" type="aif:t_nonempty"
|
|
use="required"/>
|
|
<xs:attribute name="size" type="aif:t_lvsize"
|
|
use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:all>
|
|
<xs:attribute name="id" type="xs:ID" use="required"/>
|
|
<xs:attribute name="name" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="extentSize" type="aif:t_pesize" use="optional"
|
|
default="0"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_vg_names">
|
|
<xs:selector xpath="aif:volumeGroup"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
<xs:unique name="uniq_vg_lv">
|
|
<xs:selector xpath=".//aif:lv"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
<xs:unique name="uniq_vg_pv">
|
|
<xs:selector xpath=".//aif:pv"/>
|
|
<xs:field xpath="@source"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
<!-- END LVM -->
|
|
<!-- BEGIN MDADM -->
|
|
<xs:element name="mdadm" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="array" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="member" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:attribute name="source" type="xs:IDREF"
|
|
use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
<xs:attribute name="id" use="required" type="xs:ID"/>
|
|
<xs:attribute name="name" use="required" type="aif:t_nonempty"/>
|
|
<xs:attribute name="meta" use="optional" default="1.2"
|
|
type="aif:t_raid_meta"/>
|
|
<xs:attribute name="level" use="required" type="aif:t_raid_levels"/>
|
|
<!-- KB *only*. -->
|
|
<!-- Can be pretty important!
|
|
https://www.zdnet.com/article/chunks-the-hidden-key-to-raid-performance/ -->
|
|
<xs:attribute name="chunkSize" use="optional" type="xs:positiveInteger"
|
|
default="512"/>
|
|
<xs:attribute name="layout" use="optional" type="aif:t_raid_layout"
|
|
default="none"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_array_name">
|
|
<xs:selector xpath="aif:array"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
<!-- END MDADM -->
|
|
<!-- BEGIN MOUNTPOINTS -->
|
|
<xs:element name="mountPoints" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="mount" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="0" maxOccurs="unbounded">
|
|
<xs:element name="opt" minOccurs="1" maxOccurs="unbounded"
|
|
type="aif:t_cmdopts"/>
|
|
</xs:sequence>
|
|
<xs:attribute name="source" type="xs:IDREF" use="required"/>
|
|
<xs:attribute name="target" type="aif:t_filepath" use="required"/>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_mnts_src">
|
|
<xs:selector xpath="aif:mount"/>
|
|
<xs:field xpath="@source"/>
|
|
</xs:unique>
|
|
<xs:unique name="uniq_mnts_tgt">
|
|
<xs:selector xpath="aif:mount"/>
|
|
<xs:field xpath="@target"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END MOUNTPOINTS -->
|
|
</xs:all>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END STORAGE -->
|
|
<!-- BEGIN NETWORK -->
|
|
<!-- TODO: make network optional? -->
|
|
<xs:element name="network" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:choice minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="ethernet" type="aif:t_iface" minOccurs="0" maxOccurs="unbounded"/>
|
|
<xs:element name="wireless" type="aif:t_iface_wifi" minOccurs="0" maxOccurs="unbounded">
|
|
</xs:element>
|
|
</xs:choice>
|
|
<!-- It's nearly impossible to validate FQDNs/hostnames in XSD, so we do it in-code. -->
|
|
<xs:attribute name="hostname" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="provider" type="aif:t_netprov" use="optional" default="netctl"/>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_iface_eth">
|
|
<xs:selector xpath="aif:ethernet"/>
|
|
<xs:field xpath="@device"/>
|
|
</xs:unique>
|
|
<xs:unique name="uniq_iface_wlan">
|
|
<xs:selector xpath="aif:wireless"/>
|
|
<xs:field xpath="@device"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
<!-- END NETWORK -->
|
|
<!-- BEGIN SYSTEM -->
|
|
<xs:element name="system" maxOccurs="1" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:all>
|
|
<xs:element name="rootPassword" minOccurs="0" maxOccurs="1"
|
|
type="aif:t_nixpass"/>
|
|
<xs:element name="locales" minOccurs="1" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence minOccurs="1" maxOccurs="unbounded">
|
|
<xs:element name="locale" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:simpleContent>
|
|
<xs:extension base="xs:token">
|
|
<xs:attribute name="name" type="aif:t_nonempty" use="required"/>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="users" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="user" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="password" minOccurs="0" maxOccurs="1"
|
|
type="aif:t_nixpass"/>
|
|
<xs:element name="xGroup" minOccurs="0" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:attribute name="name" type="aif:t_posixUserGroup"
|
|
use="required"/>
|
|
<xs:attribute name="create" type="xs:boolean" use="optional"
|
|
default="0"/>
|
|
<xs:attribute name="gid" type="xs:positiveInteger"/>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_grp">
|
|
<xs:selector xpath="aif:xGroup"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
<xs:attribute name="name" type="aif:t_posixUserGroup" use="required"/>
|
|
<xs:attribute name="home" type="aif:t_filepath" use="optional"/>
|
|
<xs:attribute name="uid" type="xs:positiveInteger" use="optional"/>
|
|
<xs:attribute name="group" type="aif:t_posixUserGroup" use="optional"/>
|
|
<xs:attribute name="gid" type="xs:positiveInteger" use="optional"/>
|
|
<xs:attribute name="comment" type="aif:t_nonempty" use="optional"/>
|
|
<xs:attribute name="sudo" type="xs:boolean" use="optional" default="0"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_usr">
|
|
<xs:selector xpath="aif:user"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
<xs:element name="services" minOccurs="0" maxOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="service" minOccurs="1" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:simpleContent>
|
|
<xs:extension base="aif:t_nonempty">
|
|
<xs:attribute name="status" type="xs:boolean" use="required"/>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_svc">
|
|
<xs:selector xpath="aif:service"/>
|
|
<xs:field xpath="@name"/>
|
|
<xs:field xpath="@status"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:all>
|
|
<!-- timezone and kbd/xkbd are validated in-code. -->
|
|
<xs:attribute name="timezone" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="chrootPath" type="aif:t_filepath" use="required"/>
|
|
<xs:attribute name="kbd" type="aif:t_nonempty" use="optional" default="us"/>
|
|
<xs:attribute name="xkbd" type="aif:t_nonempty" use="optional" default="us"/>
|
|
<xs:attribute name="reboot" type="xs:boolean" use="optional" default="0"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END SYSTEM -->
|
|
<!-- BEGIN PACMAN -->
|
|
<xs:element name="pacman" maxOccurs="1" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="repos" maxOccurs="1" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="repo" maxOccurs="unbounded" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:attribute name="name" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="enabled" type="xs:boolean" use="required"/>
|
|
<xs:attribute name="sigLevel" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="mirror" type="aif:t_pacuri" use="required"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_repo">
|
|
<xs:selector xpath="aif:repo"/>
|
|
<xs:field xpath="@name"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
<xs:element name="mirrorList" maxOccurs="1" minOccurs="0">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="mirror" type="aif:t_pacuri" maxOccurs="unbounded"
|
|
minOccurs="1"/>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="software" maxOccurs="1" minOccurs="0">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="package" maxOccurs="unbounded" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:simpleContent>
|
|
<xs:extension base="aif:t_nonempty">
|
|
<xs:attribute name="repo" type="aif:t_nonempty" use="optional"/>
|
|
</xs:extension>
|
|
</xs:simpleContent>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
<xs:unique name="uniq_mirror">
|
|
<xs:selector xpath="aif:mirrorList"/>
|
|
<xs:field xpath="mirror"/>
|
|
</xs:unique>
|
|
<xs:unique name="uniq_pkg">
|
|
<xs:selector xpath="aif:software"/>
|
|
<xs:field xpath="package"/>
|
|
</xs:unique>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
<xs:attribute name="command" type="aif:t_nonempty" use="optional" default="pacman -S"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END PACMAN -->
|
|
<!-- BEGIN BOOTLOADER -->
|
|
<xs:element name="bootloader" maxOccurs="1" minOccurs="1">
|
|
<xs:complexType>
|
|
<xs:attribute name="type" type="aif:t_bootloaders" use="required"/>
|
|
<xs:attribute name="target" type="aif:t_nonempty" use="required"/>
|
|
<xs:attribute name="efi" type="xs:boolean" use="optional" default="1"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END BOOTLOADER -->
|
|
<!--- BEGIN SCRIPTS -->
|
|
<xs:element name="scripts" maxOccurs="1" minOccurs="0">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="pre" minOccurs="0" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="script" minOccurs="1" maxOccurs="unbounded"
|
|
type="aif:t_provscript"/>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="post" minOccurs="0" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="script" minOccurs="1" maxOccurs="unbounded"
|
|
type="aif:t_provscript"/>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<xs:element name="pkg" minOccurs="0" maxOccurs="unbounded">
|
|
<xs:complexType>
|
|
<xs:sequence>
|
|
<xs:element name="script" minOccurs="1" maxOccurs="unbounded"
|
|
type="aif:t_provscript"/>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
<!-- END SCRIPTS -->
|
|
</xs:all>
|
|
<xs:attribute name="version" type="aif:t_nonempty" use="optional" default="master"/>
|
|
</xs:complexType>
|
|
</xs:element>
|
|
</xs:schema>
|