From 4a7e9541ee7f1fecfc693735756c8b25c60cb811 Mon Sep 17 00:00:00 2001
From: Jimmy McCrory <jimmy.mccrory@gmail.com>
Date: Sat, 25 Jun 2016 10:28:22 -0700
Subject: [PATCH] Confirm container destroys

Running the lxc-containers-destroy playbook will, by default, destroy
all containers and container data across the entire deployment.
Include a prompt to ensure that running the playbook was intentional.

Including this playbook within automation can still be done by providing
'force_containers_destroy' as an extra variable.

Change-Id: I534cc97a29018984966ca9a9d934cef4242f2f88
---
 playbooks/lxc-containers-destroy.yml | 10 +++++++++-
 tox.ini                              |  1 +
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/playbooks/lxc-containers-destroy.yml b/playbooks/lxc-containers-destroy.yml
index 1bcac7e69e..bbf3b885fe 100644
--- a/playbooks/lxc-containers-destroy.yml
+++ b/playbooks/lxc-containers-destroy.yml
@@ -1,5 +1,5 @@
 ---
-# Copyright 2014, Rackspace US, Inc.
+# Copyright 2016, Rackspace US, Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -24,6 +24,7 @@
         name: "{{ container_name }}"
         state: "absent"
       delegate_to: "{{ physical_host }}"
+      when: force_containers_destroy | bool
       tags:
         - container-destroy
     - name: Destroy container service directories
@@ -37,5 +38,12 @@
         - "/var/lib/lxc/{{ container_name }}"
         - "{{ lxc_container_directory|default('/var/lib/lxc') }}/{{ container_name }}"
       delegate_to: "{{ physical_host }}"
+      when: force_containers_destroy | bool
       tags:
         - container-directories
+  vars_prompt:
+    - name: "force_containers_destroy"
+      prompt: "Are you sure you want to destroy LXC containers?"
+      default: "no"
+      private: no
+      when: force_containers_destroy is undefined
diff --git a/tox.ini b/tox.ini
index 82907576ab..7685465090 100644
--- a/tox.ini
+++ b/tox.ini
@@ -87,6 +87,7 @@ commands =
     ansible-playbook -i 'localhost ansible-connection=local,' \
       --syntax-check \
       --list-tasks \
+      -e 'force_containers_destroy=yes' \
       {toxinidir}/playbooks/*.yml"
 
 [testenv:inventory]