Expose S3 graceful VM suspend/resume API calls

This could be useful for preloaded disposables as (emergency) paused
disposables might hang after hypervisor goes to suspend mode and resumes
from it.

related: QubesOS/qubes-issues#9918

Author: alimirjamali

qubes/api/admin.py

@@ -992,6 +992,22 @@ async def vm_unpause(self):
         self.fire_event_for_permission()
         await self.dest.unpause()
 
+    @qubes.api.method(
+        "admin.vm.Suspend", no_payload=True, scope="local", execute=True
+    )
+    async def vm_suspend(self):
+        self.enforce(not self.arg)
+        self.fire_event_for_permission()
+        await self.dest.suspend()
+
+    @qubes.api.method(
+        "admin.vm.Resume", no_payload=True, scope="local", execute=True
+    )
+    async def vm_resume(self):
+        self.enforce(not self.arg)
+        self.fire_event_for_permission()
+        await self.dest.resume()
+
     @qubes.api.method(
         "admin.vm.Kill", no_payload=True, scope="local", execute=True
     )

qubes/tests/api_admin.py

@@ -1439,6 +1439,17 @@ async def coroutine_mock(*args, **kwargs):
         self.assertIsNone(value)
         func_mock.assert_called_once_with()
 
+    def test_241_suspend(self):
+        func_mock = unittest.mock.Mock()
+
+        async def coroutine_mock(*args, **kwargs):
+            return func_mock(*args, **kwargs)
+
+        self.vm.suspend = coroutine_mock
+        value = self.call_mgmt_func(b"admin.vm.Suspend", b"test-vm1")
+        self.assertIsNone(value)
+        func_mock.assert_called_once_with()
+
     def test_250_unpause(self):
         func_mock = unittest.mock.Mock()
 
@@ -1450,6 +1461,17 @@ async def coroutine_mock(*args, **kwargs):
         self.assertIsNone(value)
         func_mock.assert_called_once_with()
 
+    def test_251_resume(self):
+        func_mock = unittest.mock.Mock()
+
+        async def coroutine_mock(*args, **kwargs):
+            return func_mock(*args, **kwargs)
+
+        self.vm.resume = coroutine_mock
+        value = self.call_mgmt_func(b"admin.vm.Resume", b"test-vm1")
+        self.assertIsNone(value)
+        func_mock.assert_called_once_with()
+
     def test_260_kill(self):
         func_mock = unittest.mock.Mock()