Compare commits
24 Commits
a794bb3887
...
rs
| Author | SHA1 | Date | |
|---|---|---|---|
| 9532bab15f | |||
| 6e1cb57e03 | |||
| 3f2549c746 | |||
| 91eb83d6e1 | |||
| 5924705b24 | |||
| 0f9679d91e | |||
| 7325ee1c0c | |||
| 4a12e1ba8f | |||
| 2df68d3fca | |||
| 5fd3a9d925 | |||
| 6bf1d1ccf2 | |||
| 5ab8b74041 | |||
| 7b62140d2a | |||
| 650c913930 | |||
| d69f2f27ee | |||
| 12bfa6cfd6 | |||
| 898c43b954 | |||
| 1555419549 | |||
| 3f2cd997a0 | |||
| 86d85f014c | |||
| 69cc01db9b | |||
| 3c7d56ae48 | |||
| 8506f8807d | |||
| 8e86579004 |
@ -1 +1,10 @@
|
|||||||
Dockerfile
|
Dockerfile
|
||||||
|
modd.*
|
||||||
|
tmp/**/*
|
||||||
|
dist/*
|
||||||
|
go.work
|
||||||
|
go.work.sum
|
||||||
|
modd.*conf
|
||||||
|
test-initrd*
|
||||||
|
test-initrd/**/*
|
||||||
|
target
|
||||||
|
|||||||
7
.gitignore
vendored
7
.gitignore
vendored
@ -1 +1,8 @@
|
|||||||
.*.sw[po]
|
.*.sw[po]
|
||||||
|
/dist
|
||||||
|
/qemu.pid
|
||||||
|
/test-initrd.cpio
|
||||||
|
/tmp
|
||||||
|
/go.work
|
||||||
|
/go.work.sum
|
||||||
|
/target
|
||||||
|
|||||||
634
Cargo.lock
generated
Normal file
634
Cargo.lock
generated
Normal file
@ -0,0 +1,634 @@
|
|||||||
|
# This file is automatically @generated by Cargo.
|
||||||
|
# It is not intended for manual editing.
|
||||||
|
version = 4
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "addr2line"
|
||||||
|
version = "0.24.2"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1"
|
||||||
|
dependencies = [
|
||||||
|
"gimli",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "adler2"
|
||||||
|
version = "2.0.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "aho-corasick"
|
||||||
|
version = "1.1.3"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916"
|
||||||
|
dependencies = [
|
||||||
|
"memchr",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "anstream"
|
||||||
|
version = "0.6.19"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "301af1932e46185686725e0fad2f8f2aa7da69dd70bf6ecc44d6b703844a3933"
|
||||||
|
dependencies = [
|
||||||
|
"anstyle",
|
||||||
|
"anstyle-parse",
|
||||||
|
"anstyle-query",
|
||||||
|
"anstyle-wincon",
|
||||||
|
"colorchoice",
|
||||||
|
"is_terminal_polyfill",
|
||||||
|
"utf8parse",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "anstyle"
|
||||||
|
version = "1.0.11"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "862ed96ca487e809f1c8e5a8447f6ee2cf102f846893800b20cebdf541fc6bbd"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "anstyle-parse"
|
||||||
|
version = "0.2.7"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
|
||||||
|
dependencies = [
|
||||||
|
"utf8parse",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "anstyle-query"
|
||||||
|
version = "1.1.3"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "6c8bdeb6047d8983be085bab0ba1472e6dc604e7041dbf6fcd5e71523014fae9"
|
||||||
|
dependencies = [
|
||||||
|
"windows-sys 0.59.0",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "anstyle-wincon"
|
||||||
|
version = "3.0.9"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "403f75924867bb1033c59fbf0797484329750cfbe3c4325cd33127941fabc882"
|
||||||
|
dependencies = [
|
||||||
|
"anstyle",
|
||||||
|
"once_cell_polyfill",
|
||||||
|
"windows-sys 0.59.0",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "backtrace"
|
||||||
|
version = "0.3.75"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "6806a6321ec58106fea15becdad98371e28d92ccbc7c8f1b3b6dd724fe8f1002"
|
||||||
|
dependencies = [
|
||||||
|
"addr2line",
|
||||||
|
"cfg-if",
|
||||||
|
"libc",
|
||||||
|
"miniz_oxide",
|
||||||
|
"object",
|
||||||
|
"rustc-demangle",
|
||||||
|
"windows-targets",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "bitflags"
|
||||||
|
version = "2.9.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "1b8e56985ec62d17e9c1001dc89c88ecd7dc08e47eba5ec7c29c7b5eeecde967"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "bytes"
|
||||||
|
version = "1.10.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "cfg-if"
|
||||||
|
version = "1.0.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "9555578bc9e57714c812a1f84e4fc5b4d21fcb063490c624de019f7464c91268"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "cfg_aliases"
|
||||||
|
version = "0.2.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "colorchoice"
|
||||||
|
version = "1.0.4"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "either"
|
||||||
|
version = "1.15.0"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "env_filter"
|
||||||
|
version = "0.1.3"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "186e05a59d4c50738528153b83b0b0194d3a29507dfec16eccd4b342903397d0"
|
||||||
|
dependencies = [
|
||||||
|
"log",
|
||||||
|
"regex",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "env_logger"
|
||||||
|
version = "0.11.8"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "13c863f0904021b108aa8b2f55046443e6b1ebde8fd4a15c399893aae4fa069f"
|
||||||
|
dependencies = [
|
||||||
|
"anstream",
|
||||||
|
"anstyle",
|
||||||
|
"env_filter",
|
||||||
|
"jiff",
|
||||||
|
"log",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "equivalent"
|
||||||
|
version = "1.0.2"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "eyre"
|
||||||
|
version = "0.6.12"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "7cd915d99f24784cdc19fd37ef22b97e3ff0ae756c7e492e9fbfe897d61e2aec"
|
||||||
|
dependencies = [
|
||||||
|
"indenter",
|
||||||
|
"once_cell",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "gimli"
|
||||||
|
version = "0.31.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "hashbrown"
|
||||||
|
version = "0.15.4"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "5971ac85611da7067dbfcabef3c70ebb5606018acd9e2a3903a0da507521e0d5"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "indenter"
|
||||||
|
version = "0.3.3"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "ce23b50ad8242c51a442f3ff322d56b02f08852c77e4c0b4d3fd684abc89c683"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "indexmap"
|
||||||
|
version = "2.9.0"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "cea70ddb795996207ad57735b50c5982d8844f38ba9ee5f1aedcfb708a2aa11e"
|
||||||
|
dependencies = [
|
||||||
|
"equivalent",
|
||||||
|
"hashbrown",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "init"
|
||||||
|
version = "2.1.0"
|
||||||
|
dependencies = [
|
||||||
|
"env_logger",
|
||||||
|
"eyre",
|
||||||
|
"itertools",
|
||||||
|
"libc",
|
||||||
|
"log",
|
||||||
|
"nix",
|
||||||
|
"regex",
|
||||||
|
"serde",
|
||||||
|
"serde_json",
|
||||||
|
"serde_yaml",
|
||||||
|
"shell-escape",
|
||||||
|
"termios",
|
||||||
|
"tokio",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "is_terminal_polyfill"
|
||||||
|
version = "1.70.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "itertools"
|
||||||
|
version = "0.14.0"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
|
||||||
|
dependencies = [
|
||||||
|
"either",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "itoa"
|
||||||
|
version = "1.0.15"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "jiff"
|
||||||
|
version = "0.2.15"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "be1f93b8b1eb69c77f24bbb0afdf66f54b632ee39af40ca21c4365a1d7347e49"
|
||||||
|
dependencies = [
|
||||||
|
"jiff-static",
|
||||||
|
"log",
|
||||||
|
"portable-atomic",
|
||||||
|
"portable-atomic-util",
|
||||||
|
"serde",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "jiff-static"
|
||||||
|
version = "0.2.15"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "03343451ff899767262ec32146f6d559dd759fdadf42ff0e227c7c48f72594b4"
|
||||||
|
dependencies = [
|
||||||
|
"proc-macro2",
|
||||||
|
"quote",
|
||||||
|
"syn",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "libc"
|
||||||
|
version = "0.2.173"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "d8cfeafaffdbc32176b64fb251369d52ea9f0a8fbc6f8759edffef7b525d64bb"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "log"
|
||||||
|
version = "0.4.27"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "memchr"
|
||||||
|
version = "2.7.5"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "32a282da65faaf38286cf3be983213fcf1d2e2a58700e808f83f4ea9a4804bc0"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "miniz_oxide"
|
||||||
|
version = "0.8.9"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
|
||||||
|
dependencies = [
|
||||||
|
"adler2",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "mio"
|
||||||
|
version = "1.0.4"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "78bed444cc8a2160f01cbcf811ef18cac863ad68ae8ca62092e8db51d51c761c"
|
||||||
|
dependencies = [
|
||||||
|
"libc",
|
||||||
|
"wasi",
|
||||||
|
"windows-sys 0.59.0",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "nix"
|
||||||
|
version = "0.30.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
|
||||||
|
dependencies = [
|
||||||
|
"bitflags",
|
||||||
|
"cfg-if",
|
||||||
|
"cfg_aliases",
|
||||||
|
"libc",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "object"
|
||||||
|
version = "0.36.7"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87"
|
||||||
|
dependencies = [
|
||||||
|
"memchr",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "once_cell"
|
||||||
|
version = "1.21.3"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "once_cell_polyfill"
|
||||||
|
version = "1.70.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "a4895175b425cb1f87721b59f0f286c2092bd4af812243672510e1ac53e2e0ad"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "pin-project-lite"
|
||||||
|
version = "0.2.16"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "portable-atomic"
|
||||||
|
version = "1.11.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "f84267b20a16ea918e43c6a88433c2d54fa145c92a811b5b047ccbe153674483"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "portable-atomic-util"
|
||||||
|
version = "0.2.4"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "d8a2f0d8d040d7848a709caf78912debcc3f33ee4b3cac47d73d1e1069e83507"
|
||||||
|
dependencies = [
|
||||||
|
"portable-atomic",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "proc-macro2"
|
||||||
|
version = "1.0.95"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778"
|
||||||
|
dependencies = [
|
||||||
|
"unicode-ident",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "quote"
|
||||||
|
version = "1.0.40"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d"
|
||||||
|
dependencies = [
|
||||||
|
"proc-macro2",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "regex"
|
||||||
|
version = "1.11.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191"
|
||||||
|
dependencies = [
|
||||||
|
"aho-corasick",
|
||||||
|
"memchr",
|
||||||
|
"regex-automata",
|
||||||
|
"regex-syntax",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "regex-automata"
|
||||||
|
version = "0.4.9"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908"
|
||||||
|
dependencies = [
|
||||||
|
"aho-corasick",
|
||||||
|
"memchr",
|
||||||
|
"regex-syntax",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "regex-syntax"
|
||||||
|
version = "0.8.5"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "rustc-demangle"
|
||||||
|
version = "0.1.25"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "989e6739f80c4ad5b13e0fd7fe89531180375b18520cc8c82080e4dc4035b84f"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "ryu"
|
||||||
|
version = "1.0.20"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "serde"
|
||||||
|
version = "1.0.219"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
|
||||||
|
dependencies = [
|
||||||
|
"serde_derive",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "serde_derive"
|
||||||
|
version = "1.0.219"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
|
||||||
|
dependencies = [
|
||||||
|
"proc-macro2",
|
||||||
|
"quote",
|
||||||
|
"syn",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "serde_json"
|
||||||
|
version = "1.0.140"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373"
|
||||||
|
dependencies = [
|
||||||
|
"itoa",
|
||||||
|
"memchr",
|
||||||
|
"ryu",
|
||||||
|
"serde",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "serde_yaml"
|
||||||
|
version = "0.9.34+deprecated"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
|
||||||
|
dependencies = [
|
||||||
|
"indexmap",
|
||||||
|
"itoa",
|
||||||
|
"ryu",
|
||||||
|
"serde",
|
||||||
|
"unsafe-libyaml",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "shell-escape"
|
||||||
|
version = "0.1.5"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "45bb67a18fa91266cc7807181f62f9178a6873bfad7dc788c42e6430db40184f"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "signal-hook-registry"
|
||||||
|
version = "1.4.5"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "9203b8055f63a2a00e2f593bb0510367fe707d7ff1e5c872de2f537b339e5410"
|
||||||
|
dependencies = [
|
||||||
|
"libc",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "socket2"
|
||||||
|
version = "0.5.10"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678"
|
||||||
|
dependencies = [
|
||||||
|
"libc",
|
||||||
|
"windows-sys 0.52.0",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "syn"
|
||||||
|
version = "2.0.103"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "e4307e30089d6fd6aff212f2da3a1f9e32f3223b1f010fb09b7c95f90f3ca1e8"
|
||||||
|
dependencies = [
|
||||||
|
"proc-macro2",
|
||||||
|
"quote",
|
||||||
|
"unicode-ident",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "termios"
|
||||||
|
version = "0.3.3"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "411c5bf740737c7918b8b1fe232dca4dc9f8e754b8ad5e20966814001ed0ac6b"
|
||||||
|
dependencies = [
|
||||||
|
"libc",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "tokio"
|
||||||
|
version = "1.45.1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "75ef51a33ef1da925cea3e4eb122833cb377c61439ca401b770f54902b806779"
|
||||||
|
dependencies = [
|
||||||
|
"backtrace",
|
||||||
|
"bytes",
|
||||||
|
"libc",
|
||||||
|
"mio",
|
||||||
|
"pin-project-lite",
|
||||||
|
"signal-hook-registry",
|
||||||
|
"socket2",
|
||||||
|
"tokio-macros",
|
||||||
|
"windows-sys 0.52.0",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "tokio-macros"
|
||||||
|
version = "2.5.0"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8"
|
||||||
|
dependencies = [
|
||||||
|
"proc-macro2",
|
||||||
|
"quote",
|
||||||
|
"syn",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "unicode-ident"
|
||||||
|
version = "1.0.18"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "unsafe-libyaml"
|
||||||
|
version = "0.2.11"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "utf8parse"
|
||||||
|
version = "0.2.2"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "wasi"
|
||||||
|
version = "0.11.1+wasi-snapshot-preview1"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows-sys"
|
||||||
|
version = "0.52.0"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
|
||||||
|
dependencies = [
|
||||||
|
"windows-targets",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows-sys"
|
||||||
|
version = "0.59.0"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
|
||||||
|
dependencies = [
|
||||||
|
"windows-targets",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows-targets"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
|
||||||
|
dependencies = [
|
||||||
|
"windows_aarch64_gnullvm",
|
||||||
|
"windows_aarch64_msvc",
|
||||||
|
"windows_i686_gnu",
|
||||||
|
"windows_i686_gnullvm",
|
||||||
|
"windows_i686_msvc",
|
||||||
|
"windows_x86_64_gnu",
|
||||||
|
"windows_x86_64_gnullvm",
|
||||||
|
"windows_x86_64_msvc",
|
||||||
|
]
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_aarch64_gnullvm"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_aarch64_msvc"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_i686_gnu"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_i686_gnullvm"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_i686_msvc"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_x86_64_gnu"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_x86_64_gnullvm"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
|
||||||
|
|
||||||
|
[[package]]
|
||||||
|
name = "windows_x86_64_msvc"
|
||||||
|
version = "0.52.6"
|
||||||
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||||
|
checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
|
||||||
26
Cargo.toml
Normal file
26
Cargo.toml
Normal file
@ -0,0 +1,26 @@
|
|||||||
|
[package]
|
||||||
|
name = "init"
|
||||||
|
version = "2.1.0"
|
||||||
|
edition = "2024"
|
||||||
|
|
||||||
|
[profile.release]
|
||||||
|
strip = true
|
||||||
|
panic = "abort"
|
||||||
|
opt-level = "z"
|
||||||
|
lto = true
|
||||||
|
codegen-units = 1
|
||||||
|
|
||||||
|
[dependencies]
|
||||||
|
libc = { version = "0.2", default-features = false }
|
||||||
|
env_logger = "0.11.3"
|
||||||
|
eyre = "0.6.12"
|
||||||
|
itertools = "0.14.0"
|
||||||
|
log = "0.4.21"
|
||||||
|
nix = { version = "0.30.1", features = ["feature", "reboot"] }
|
||||||
|
regex = "1.11.1"
|
||||||
|
serde = { version = "1.0.198", features = ["derive"] }
|
||||||
|
serde_json = "1.0.116"
|
||||||
|
serde_yaml = "0.9.34"
|
||||||
|
shell-escape = "0.1.5"
|
||||||
|
tokio = { version = "1.38.0", features = ["rt", "net", "fs", "process", "io-std", "io-util", "sync", "macros"] }
|
||||||
|
termios = "0.3.3"
|
||||||
42
Dockerfile
42
Dockerfile
@ -1,19 +1,37 @@
|
|||||||
# ------------------------------------------------------------------------
|
from rust:1.87.0-alpine as rust
|
||||||
from mcluseau/golang-builder:1.15.5 as build
|
|
||||||
|
run apk add --no-cache git musl-dev libudev-zero-dev # pkgconfig cryptsetup-dev lvm2-dev clang-dev clang-static
|
||||||
|
|
||||||
|
workdir /src
|
||||||
|
copy . .
|
||||||
|
run --mount=type=cache,id=novit-rs,target=/usr/local/cargo/registry \
|
||||||
|
--mount=type=cache,id=novit-rs-target,sharing=private,target=/src/target \
|
||||||
|
cargo build --release && cp target/release/init /
|
||||||
|
|
||||||
# ------------------------------------------------------------------------
|
# ------------------------------------------------------------------------
|
||||||
from alpine:3.12
|
from alpine:3.22.0 as initrd
|
||||||
|
|
||||||
env busybox_v=1.28.1-defconfig-multiarch \
|
|
||||||
arch=x86_64
|
|
||||||
|
|
||||||
run apk add --update curl
|
|
||||||
|
|
||||||
workdir /layer
|
workdir /layer
|
||||||
|
|
||||||
add build-layer /
|
run . /etc/os-release \
|
||||||
run /build-layer
|
&& wget -O- https://dl-cdn.alpinelinux.org/alpine/v${VERSION_ID%.*}/releases/x86_64/alpine-minirootfs-${VERSION_ID}-x86_64.tar.gz |tar zxv
|
||||||
|
|
||||||
copy --from=build /go/bin/initrd /layer/init
|
run apk add --no-cache --update -p . musl coreutils \
|
||||||
|
lvm2 lvm2-extra lvm2-dmeventd udev cryptsetup \
|
||||||
|
e2fsprogs lsblk openssh-server \
|
||||||
|
&& rm -rf usr/share/apk var/cache/apk etc/motd
|
||||||
|
|
||||||
entrypoint ["sh","-c","find |cpio -H newc -o |base64"]
|
copy etc/sshd_config etc/ssh/sshd_config
|
||||||
|
|
||||||
|
copy --from=rust /init init
|
||||||
|
run cd bin && for cmd in init-version connect-boot bootstrap init-input; do ln -s ../init $cmd; done
|
||||||
|
|
||||||
|
# check viability
|
||||||
|
run chroot . init-version
|
||||||
|
|
||||||
|
run find |cpio -H newc -o >/initrd
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
from alpine:3.22.0
|
||||||
|
copy --from=initrd /initrd /
|
||||||
|
entrypoint ["base64","/initrd"]
|
||||||
|
|||||||
5
Dockerfile.build
Normal file
5
Dockerfile.build
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
from rust:1.77.1-alpine as rust
|
||||||
|
|
||||||
|
run apk add --no-cache musl-dev
|
||||||
|
run apk add --no-cache musl lvm2 lvm2-extra lvm2-dmeventd udev cryptsetup e2fsprogs btrfs-progs lsblk
|
||||||
|
|
||||||
2
Dockerfile.test
Normal file
2
Dockerfile.test
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
from alpine:3.19.0
|
||||||
|
run apk add --no-cache musl lvm2 lvm2-extra lvm2-dmeventd udev cryptsetup e2fsprogs btrfs-progs lsblk
|
||||||
140
apply-config.go
Normal file
140
apply-config.go
Normal file
@ -0,0 +1,140 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"os"
|
||||||
|
"path/filepath"
|
||||||
|
"strconv"
|
||||||
|
"strings"
|
||||||
|
"syscall"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
yaml "gopkg.in/yaml.v2"
|
||||||
|
|
||||||
|
"novit.tech/direktil/pkg/config/apply"
|
||||||
|
)
|
||||||
|
|
||||||
|
var loopOffset = 0
|
||||||
|
|
||||||
|
func applyConfig(cfgPath string, bootMounted bool) (cfg *configV1) {
|
||||||
|
cfgBytes, err := os.ReadFile(cfgPath)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to read %s: %v", cfgPath, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
cfg = &configV1{}
|
||||||
|
if err := yaml.Unmarshal(cfgBytes, cfg); err != nil {
|
||||||
|
fatal("failed to load config: ", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
// mount layers
|
||||||
|
if len(cfg.Layers) == 0 {
|
||||||
|
fatal("no layers configured!")
|
||||||
|
}
|
||||||
|
|
||||||
|
layersInMemory := paramBool("layers-in-mem", false)
|
||||||
|
|
||||||
|
log.Info().Strs("layers", cfg.Layers).Bool("in-memory", layersInMemory).Msg("mounting layers")
|
||||||
|
|
||||||
|
const layersInMemDir = "/layers-in-mem"
|
||||||
|
if layersInMemory {
|
||||||
|
mkdir(layersInMemDir, 0700)
|
||||||
|
mount("layers-mem", layersInMemDir, "tmpfs", 0, "")
|
||||||
|
}
|
||||||
|
|
||||||
|
lowers := make([]string, len(cfg.Layers))
|
||||||
|
for i, layer := range cfg.Layers {
|
||||||
|
log := log.With().Str("layer", layer).Logger()
|
||||||
|
|
||||||
|
path := layerPath(layer)
|
||||||
|
|
||||||
|
info, err := os.Stat(path)
|
||||||
|
if err != nil {
|
||||||
|
fatal(err)
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Int64("size", info.Size()).Msg("layer found")
|
||||||
|
|
||||||
|
if layersInMemory {
|
||||||
|
log.Info().Msg("copying to memory")
|
||||||
|
targetPath := filepath.Join(layersInMemDir, layer)
|
||||||
|
cp(path, targetPath)
|
||||||
|
path = targetPath
|
||||||
|
}
|
||||||
|
|
||||||
|
dir := "/layers/" + layer
|
||||||
|
|
||||||
|
lowers[i] = dir
|
||||||
|
|
||||||
|
mountSquahfs(path, dir)
|
||||||
|
}
|
||||||
|
|
||||||
|
// prepare system root
|
||||||
|
mount("mem", "/changes", "tmpfs", 0, "")
|
||||||
|
|
||||||
|
mkdir("/changes/workdir", 0755)
|
||||||
|
mkdir("/changes/upperdir", 0755)
|
||||||
|
|
||||||
|
mount("overlay", "/system", "overlay", rootMountFlags,
|
||||||
|
"lowerdir="+strings.Join(lowers, ":")+",upperdir=/changes/upperdir,workdir=/changes/workdir")
|
||||||
|
|
||||||
|
// make root rshared (default in systemd, required by Kubernetes 1.10+)
|
||||||
|
// equivalent to "mount --make-rshared /"
|
||||||
|
// see kernel's Documentation/sharedsubtree.txt (search rshared)
|
||||||
|
if err := syscall.Mount("", "/system", "", syscall.MS_SHARED|syscall.MS_REC, ""); err != nil {
|
||||||
|
fatalf("FATAL: mount --make-rshared / failed: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
if bootMounted {
|
||||||
|
if layersInMemory {
|
||||||
|
if err := syscall.Unmount("/boot", 0); err != nil {
|
||||||
|
log.Warn().Err(err).Msg("failed to unmount /boot")
|
||||||
|
time.Sleep(2 * time.Second)
|
||||||
|
}
|
||||||
|
|
||||||
|
} else {
|
||||||
|
mount("/boot", "/system/boot", "", syscall.MS_BIND, "")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// - write files
|
||||||
|
apply.Files(cfg.Files, "/system")
|
||||||
|
|
||||||
|
// - groups
|
||||||
|
for _, group := range cfg.Groups {
|
||||||
|
logEvt := log.Info().Str("group", group.Name)
|
||||||
|
|
||||||
|
opts := make([]string, 0)
|
||||||
|
opts = append(opts /* chroot */, "/system", "groupadd", "-r")
|
||||||
|
if group.Gid != 0 {
|
||||||
|
opts = append(opts, "-g", strconv.Itoa(group.Gid))
|
||||||
|
logEvt.Int("gid", group.Gid)
|
||||||
|
}
|
||||||
|
opts = append(opts, group.Name)
|
||||||
|
|
||||||
|
logEvt.Msg("creating group")
|
||||||
|
run("chroot", opts...)
|
||||||
|
}
|
||||||
|
|
||||||
|
// - user
|
||||||
|
for _, user := range cfg.Users {
|
||||||
|
logEvt := log.Info().Str("user", user.Name)
|
||||||
|
|
||||||
|
opts := make([]string, 0)
|
||||||
|
opts = append(opts /* chroot */, "/system", "useradd", "-r")
|
||||||
|
if user.Gid != 0 {
|
||||||
|
opts = append(opts, "-g", strconv.Itoa(user.Gid))
|
||||||
|
logEvt.Int("gid", user.Gid)
|
||||||
|
}
|
||||||
|
if user.Uid != 0 {
|
||||||
|
opts = append(opts, "-u", strconv.Itoa(user.Uid))
|
||||||
|
logEvt.Int("uid", user.Uid)
|
||||||
|
}
|
||||||
|
opts = append(opts, user.Name)
|
||||||
|
|
||||||
|
logEvt.Msg("creating user")
|
||||||
|
run("chroot", opts...)
|
||||||
|
}
|
||||||
|
|
||||||
|
return
|
||||||
|
}
|
||||||
56
ask-secret.go
Normal file
56
ask-secret.go
Normal file
@ -0,0 +1,56 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bufio"
|
||||||
|
"bytes"
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"os"
|
||||||
|
"sync"
|
||||||
|
"sync/atomic"
|
||||||
|
)
|
||||||
|
|
||||||
|
var (
|
||||||
|
inputTTYs = new(sync.Map)
|
||||||
|
askingSecret atomic.Bool
|
||||||
|
)
|
||||||
|
|
||||||
|
func registerInput(in *tty) { inputTTYs.Store(in, in) }
|
||||||
|
func unregiterInput(in *tty) { inputTTYs.Delete(in) }
|
||||||
|
|
||||||
|
func askSecret(prompt string) (s []byte) {
|
||||||
|
err := func() (err error) {
|
||||||
|
askingSecret.Store(true)
|
||||||
|
defer askingSecret.Store(false)
|
||||||
|
|
||||||
|
inputTTYs.Range(func(k, v any) (con bool) { v.(*tty).EchoOff(); return true })
|
||||||
|
defer inputTTYs.Range(func(k, v any) (con bool) { v.(*tty).Restore(); return true })
|
||||||
|
|
||||||
|
var (
|
||||||
|
in io.Reader = stdin
|
||||||
|
out io.Writer = stdout
|
||||||
|
)
|
||||||
|
|
||||||
|
if stdin == nil {
|
||||||
|
in = os.Stdin
|
||||||
|
out = os.Stdout
|
||||||
|
}
|
||||||
|
|
||||||
|
out.Write([]byte(prompt + ": "))
|
||||||
|
|
||||||
|
s, err = bufio.NewReader(in).ReadBytes('\n')
|
||||||
|
if err != nil {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
fmt.Println()
|
||||||
|
s = bytes.TrimRight(s, "\r\n")
|
||||||
|
return
|
||||||
|
}()
|
||||||
|
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to read from stdin: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
return
|
||||||
|
}
|
||||||
59
auth.go
Normal file
59
auth.go
Normal file
@ -0,0 +1,59 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bytes"
|
||||||
|
"errors"
|
||||||
|
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
"golang.org/x/crypto/ssh"
|
||||||
|
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
)
|
||||||
|
|
||||||
|
var (
|
||||||
|
auths []config.Auth
|
||||||
|
)
|
||||||
|
|
||||||
|
func localAuth() bool {
|
||||||
|
sec := askSecret("password")
|
||||||
|
|
||||||
|
for _, auth := range auths {
|
||||||
|
if auth.Password == "" {
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
if config.CheckPassword(auth.Password, sec) {
|
||||||
|
log.Info().Msgf("login with auth %q", auth.Name)
|
||||||
|
return true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
|
||||||
|
func sshCheckPubkey(conn ssh.ConnMetadata, key ssh.PublicKey) (*ssh.Permissions, error) {
|
||||||
|
keyBytes := key.Marshal()
|
||||||
|
|
||||||
|
for _, auth := range auths {
|
||||||
|
if auth.SSHKey == "" {
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
allowedKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(auth.SSHKey))
|
||||||
|
if err != nil {
|
||||||
|
log.Warn().Err(err).Str("user", auth.Name).Str("key", auth.SSHKey).Msg("SSH public key is invalid")
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
if bytes.Equal(allowedKey.Marshal(), keyBytes) {
|
||||||
|
log.Info().Str("user", auth.Name).Msg("ssh: accepting public key")
|
||||||
|
return &ssh.Permissions{
|
||||||
|
Extensions: map[string]string{
|
||||||
|
"pubkey-fp": ssh.FingerprintSHA256(key),
|
||||||
|
},
|
||||||
|
}, nil
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return nil, errors.New("no matching public key")
|
||||||
|
}
|
||||||
104
boot-v2.go
Normal file
104
boot-v2.go
Normal file
@ -0,0 +1,104 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"os"
|
||||||
|
"os/exec"
|
||||||
|
"syscall"
|
||||||
|
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
"gopkg.in/yaml.v3"
|
||||||
|
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
)
|
||||||
|
|
||||||
|
func bootV2() {
|
||||||
|
log.Info().Msg("-- boot v2 --")
|
||||||
|
|
||||||
|
kernelVersion := unameRelease()
|
||||||
|
log.Info().Str("version", kernelVersion).Msg("Linux")
|
||||||
|
|
||||||
|
cfg := &config.Config{}
|
||||||
|
|
||||||
|
{
|
||||||
|
f, err := os.Open("/config.yaml")
|
||||||
|
if err != nil {
|
||||||
|
fatal("failed to open /config.yaml: ", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
err = yaml.NewDecoder(f).Decode(cfg)
|
||||||
|
f.Close()
|
||||||
|
|
||||||
|
if err != nil {
|
||||||
|
fatal("failed to parse /config.yaml: ", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Msg("config loaded")
|
||||||
|
|
||||||
|
if cfg.AntiPhishingCode != "" {
|
||||||
|
log.Info().Str("anti-phishing-code", cfg.AntiPhishingCode).Send()
|
||||||
|
}
|
||||||
|
|
||||||
|
auths = cfg.Auths
|
||||||
|
|
||||||
|
// mount kernel modules
|
||||||
|
if cfg.Modules == "" {
|
||||||
|
log.Warn().Msg("NOT mounting modules (\"modules:\" not specified)")
|
||||||
|
} else {
|
||||||
|
log.Info().Str("from", cfg.Modules).Msg("mounting modules")
|
||||||
|
mountSquahfs(cfg.Modules, "/modules")
|
||||||
|
|
||||||
|
modulesSourcePath := "/modules/lib/modules/" + kernelVersion
|
||||||
|
if _, err := os.Stat(modulesSourcePath); err != nil {
|
||||||
|
fatal("invalid modules dir: ", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
os.MkdirAll("/lib/modules", 0755)
|
||||||
|
if err := os.Symlink(modulesSourcePath, "/lib/modules/"+kernelVersion); err != nil {
|
||||||
|
fatal("failed to symlink modules: ", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// devices init
|
||||||
|
log.Info().Msg("starting udevd")
|
||||||
|
err := exec.Command("udevd").Start()
|
||||||
|
if err != nil {
|
||||||
|
fatal("failed to start udevd: ", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Msg("udevadm triggers")
|
||||||
|
run("udevadm", "trigger", "-c", "add", "-t", "devices")
|
||||||
|
run("udevadm", "trigger", "-c", "add", "-t", "subsystems")
|
||||||
|
|
||||||
|
log.Info().Msg("udevadm settle")
|
||||||
|
run("udevadm", "settle")
|
||||||
|
|
||||||
|
// networks
|
||||||
|
setupNetworks(cfg)
|
||||||
|
|
||||||
|
// Wireguard VPN
|
||||||
|
// TODO startVPN()
|
||||||
|
|
||||||
|
// SSH service
|
||||||
|
startSSH(cfg)
|
||||||
|
|
||||||
|
// dmcrypt blockdevs
|
||||||
|
setupCrypt(cfg.PreLVMCrypt, map[string]string{})
|
||||||
|
|
||||||
|
// LVM
|
||||||
|
setupLVM(cfg)
|
||||||
|
|
||||||
|
// bootstrap the system
|
||||||
|
bootstrap(cfg)
|
||||||
|
|
||||||
|
// finalize
|
||||||
|
finalizeBoot()
|
||||||
|
}
|
||||||
|
|
||||||
|
func finalizeBoot() {
|
||||||
|
// switch root
|
||||||
|
log.Info().Msg("switching root")
|
||||||
|
err := syscall.Exec("/sbin/switch_root", []string{"switch_root",
|
||||||
|
"-c", "/dev/console", "/system", "/sbin/init"}, os.Environ())
|
||||||
|
fatal("switch_root failed: ", err)
|
||||||
|
}
|
||||||
192
bootstrap.go
Normal file
192
bootstrap.go
Normal file
@ -0,0 +1,192 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bytes"
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"net/http"
|
||||||
|
"os"
|
||||||
|
"path/filepath"
|
||||||
|
"strings"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
)
|
||||||
|
|
||||||
|
func bootstrap(cfg *config.Config) {
|
||||||
|
if cfg.Bootstrap.Dev == "" {
|
||||||
|
fatalf("bootstrap device not defined!")
|
||||||
|
}
|
||||||
|
|
||||||
|
const bsDir = "/bootstrap"
|
||||||
|
os.MkdirAll(bsDir, 0700)
|
||||||
|
|
||||||
|
run("mount", cfg.Bootstrap.Dev, bsDir)
|
||||||
|
|
||||||
|
baseDir := filepath.Join(bsDir, bootVersion)
|
||||||
|
sysCfgPath := filepath.Join(baseDir, "config.yaml")
|
||||||
|
|
||||||
|
if _, err := os.Stat(sysCfgPath); os.IsNotExist(err) {
|
||||||
|
log.Warn().Msgf("bootstrap %q does not exist", bootVersion)
|
||||||
|
|
||||||
|
seed := cfg.Bootstrap.Seed
|
||||||
|
if seed == "" {
|
||||||
|
fatalf("boostrap seed not defined, admin required")
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Str("from", seed).Msgf("seeding bootstrap")
|
||||||
|
|
||||||
|
err = os.MkdirAll(baseDir, 0700)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to create bootstrap dir: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
bootstrapFile := filepath.Join(baseDir, "bootstrap.tar")
|
||||||
|
|
||||||
|
err = func() (err error) {
|
||||||
|
var resp *http.Response
|
||||||
|
|
||||||
|
start := time.Now()
|
||||||
|
for time.Since(start) <= time.Minute {
|
||||||
|
resp, err = http.Get(seed)
|
||||||
|
if err == nil {
|
||||||
|
break
|
||||||
|
}
|
||||||
|
time.Sleep(time.Second)
|
||||||
|
}
|
||||||
|
if err != nil {
|
||||||
|
return fmt.Errorf("failed to fetch bootstrap")
|
||||||
|
}
|
||||||
|
|
||||||
|
if resp.StatusCode != http.StatusOK {
|
||||||
|
err = fmt.Errorf("bad HTTP status: %s", resp.Status)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
defer resp.Body.Close()
|
||||||
|
|
||||||
|
out, err := os.Create(bootstrapFile)
|
||||||
|
if err != nil {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
defer out.Close()
|
||||||
|
|
||||||
|
_, err = io.Copy(out, resp.Body)
|
||||||
|
|
||||||
|
return
|
||||||
|
}()
|
||||||
|
|
||||||
|
if err != nil {
|
||||||
|
fatalf("seeding failed: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Msg("unpacking bootstrap file")
|
||||||
|
run("tar", "xvf", bootstrapFile, "-C", baseDir)
|
||||||
|
}
|
||||||
|
|
||||||
|
layersDir = baseDir
|
||||||
|
layersOverride["modules"] = "/modules.sqfs"
|
||||||
|
sysCfg := applyConfig(sysCfgPath, false)
|
||||||
|
|
||||||
|
// load requested modules
|
||||||
|
for _, mod := range sysCfg.Modules {
|
||||||
|
log.Info().Str("module", mod).Msg("loading module")
|
||||||
|
run("modprobe", mod)
|
||||||
|
}
|
||||||
|
|
||||||
|
// localy-generated assets dir
|
||||||
|
localGenDir := filepath.Join(bsDir, "local-gen")
|
||||||
|
|
||||||
|
// vpns are v2+
|
||||||
|
for _, vpn := range sysCfg.VPNs {
|
||||||
|
setupVPN(vpn, localGenDir)
|
||||||
|
}
|
||||||
|
|
||||||
|
// mounts are v2+
|
||||||
|
for _, mount := range sysCfg.Mounts {
|
||||||
|
log.Info().Str("source", mount.Dev).Str("target", mount.Path).Msg("mount")
|
||||||
|
|
||||||
|
path := filepath.Join("/system", mount.Path)
|
||||||
|
|
||||||
|
os.MkdirAll(path, 0755)
|
||||||
|
|
||||||
|
args := []string{mount.Dev, path}
|
||||||
|
if mount.Type != "" {
|
||||||
|
args = append(args, "-t", mount.Type)
|
||||||
|
}
|
||||||
|
if mount.Options != "" {
|
||||||
|
args = append(args, "-o", mount.Options)
|
||||||
|
}
|
||||||
|
|
||||||
|
run("mount", args...)
|
||||||
|
}
|
||||||
|
|
||||||
|
// setup root user
|
||||||
|
if ph := sysCfg.RootUser.PasswordHash; ph != "" {
|
||||||
|
log.Info().Msg("setting root's password")
|
||||||
|
setUserPass("root", ph)
|
||||||
|
}
|
||||||
|
if ak := sysCfg.RootUser.AuthorizedKeys; len(ak) != 0 {
|
||||||
|
log.Info().Msg("setting root's authorized keys")
|
||||||
|
setAuthorizedKeys(ak)
|
||||||
|
}
|
||||||
|
|
||||||
|
// update-ca-certificates
|
||||||
|
log.Info().Msg("updating CA certificates")
|
||||||
|
run("chroot", "/system", "update-ca-certificates")
|
||||||
|
}
|
||||||
|
|
||||||
|
func setUserPass(user, passwordHash string) {
|
||||||
|
const fpath = "/system/etc/shadow"
|
||||||
|
|
||||||
|
ba, err := os.ReadFile(fpath)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to read shadow: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
lines := bytes.Split(ba, []byte{'\n'})
|
||||||
|
|
||||||
|
buf := new(bytes.Buffer)
|
||||||
|
for _, line := range lines {
|
||||||
|
line := string(line)
|
||||||
|
p := strings.Split(line, ":")
|
||||||
|
if len(p) < 2 || p[0] != user {
|
||||||
|
buf.WriteString(line)
|
||||||
|
buf.WriteByte('\n')
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
p[1] = passwordHash
|
||||||
|
line = strings.Join(p, ":")
|
||||||
|
|
||||||
|
buf.WriteString(line)
|
||||||
|
buf.WriteByte('\n')
|
||||||
|
}
|
||||||
|
|
||||||
|
err = os.WriteFile(fpath, buf.Bytes(), 0600)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to write shadow: %v", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func setAuthorizedKeys(ak []string) {
|
||||||
|
buf := new(bytes.Buffer)
|
||||||
|
for _, k := range ak {
|
||||||
|
buf.WriteString(k)
|
||||||
|
buf.WriteByte('\n')
|
||||||
|
}
|
||||||
|
|
||||||
|
const sshDir = "/system/root/.ssh"
|
||||||
|
err := os.MkdirAll(sshDir, 0700)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to create %s: %v", sshDir, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
err = os.WriteFile(filepath.Join(sshDir, "authorized_keys"), buf.Bytes(), 0600)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to write authorized keys: %v", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
27
build-init
Executable file
27
build-init
Executable file
@ -0,0 +1,27 @@
|
|||||||
|
set -ex
|
||||||
|
|
||||||
|
which podman &>/dev/null && docker=podman || docker=docker
|
||||||
|
|
||||||
|
mkdir -p empty
|
||||||
|
$docker build -t nv-rs-build --network=host -f Dockerfile.build empty
|
||||||
|
|
||||||
|
case $1 in
|
||||||
|
release)
|
||||||
|
opts=--release
|
||||||
|
bindir=target/release
|
||||||
|
;;
|
||||||
|
"")
|
||||||
|
bindir=target/debug
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo >&2 "invalid arg: $1"
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
$docker run --rm -i --net=host --user=$UID \
|
||||||
|
nv-rs-build \
|
||||||
|
cargo build $opts
|
||||||
|
|
||||||
|
mkdir -p dist
|
||||||
|
cp $bindir/init dist/
|
||||||
@ -1,14 +1,6 @@
|
|||||||
#! /bin/sh
|
#! /bin/sh
|
||||||
set -ex
|
set -ex
|
||||||
|
|
||||||
mkdir dev
|
|
||||||
mknod dev/null -m 0666 c 1 3
|
mknod dev/null -m 0666 c 1 3
|
||||||
mknod dev/tty -m 0666 c 5 0
|
mknod dev/tty -m 0666 c 5 0
|
||||||
mknod dev/console -m 0600 c 5 1
|
mknod dev/console -m 0600 c 5 1
|
||||||
|
|
||||||
mkdir sys proc bin sbin usr usr/bin usr/sbin
|
|
||||||
|
|
||||||
curl -L -o bin/busybox https://busybox.net/downloads/binaries/$busybox_v/busybox-$arch
|
|
||||||
chmod +x bin/busybox
|
|
||||||
|
|
||||||
chroot . /bin/busybox --install -s
|
|
||||||
|
|||||||
9
build.rs
Normal file
9
build.rs
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
use std::process::Command;
|
||||||
|
fn main() {
|
||||||
|
let output = Command::new("git")
|
||||||
|
.args(&["rev-parse", "HEAD"])
|
||||||
|
.output()
|
||||||
|
.unwrap();
|
||||||
|
let git_commit = String::from_utf8(output.stdout).unwrap();
|
||||||
|
println!("cargo:rustc-env=GIT_COMMIT={}", git_commit);
|
||||||
|
}
|
||||||
45
colorio/colorio.go
Normal file
45
colorio/colorio.go
Normal file
@ -0,0 +1,45 @@
|
|||||||
|
package colorio
|
||||||
|
|
||||||
|
import "io"
|
||||||
|
|
||||||
|
var (
|
||||||
|
Reset = []byte("\033[0m")
|
||||||
|
Bold = []byte("\033[1m")
|
||||||
|
Dim = []byte("\033[2m")
|
||||||
|
Underlined = []byte("\033[4m")
|
||||||
|
Blink = []byte("\033[5m")
|
||||||
|
Reverse = []byte("\033[7m")
|
||||||
|
Hidden = []byte("\033[8m")
|
||||||
|
)
|
||||||
|
|
||||||
|
type writer struct {
|
||||||
|
before []byte
|
||||||
|
after []byte
|
||||||
|
w io.Writer
|
||||||
|
}
|
||||||
|
|
||||||
|
func NewWriter(color []byte, w io.Writer) io.Writer {
|
||||||
|
return writer{
|
||||||
|
before: color,
|
||||||
|
after: Reset,
|
||||||
|
w: w,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (w writer) Write(ba []byte) (n int, err error) {
|
||||||
|
b := make([]byte, len(w.before)+len(ba)+len(w.after))
|
||||||
|
copy(b, w.before)
|
||||||
|
copy(b[len(w.before):], ba)
|
||||||
|
copy(b[len(w.before)+len(ba):], w.after)
|
||||||
|
|
||||||
|
n, err = w.w.Write(b)
|
||||||
|
|
||||||
|
n -= len(w.before)
|
||||||
|
if n < 0 {
|
||||||
|
n = 0
|
||||||
|
} else if n > len(ba) {
|
||||||
|
n = len(ba)
|
||||||
|
}
|
||||||
|
|
||||||
|
return
|
||||||
|
}
|
||||||
21
colorio/colorio_test.go
Normal file
21
colorio/colorio_test.go
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
package colorio
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bytes"
|
||||||
|
"fmt"
|
||||||
|
"testing"
|
||||||
|
)
|
||||||
|
|
||||||
|
func TestWriter(t *testing.T) {
|
||||||
|
buf := new(bytes.Buffer)
|
||||||
|
|
||||||
|
w := NewWriter(Bold, buf)
|
||||||
|
|
||||||
|
buf.WriteByte('{')
|
||||||
|
fmt.Fprintln(w, "hello")
|
||||||
|
buf.WriteByte('}')
|
||||||
|
|
||||||
|
if s, exp := buf.String(), "{"+string(Bold)+"hello\n"+string(Reset)+"}"; s != exp {
|
||||||
|
t.Errorf("%q != %q", s, exp)
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -1,10 +1,7 @@
|
|||||||
package main
|
package main
|
||||||
|
|
||||||
import (
|
import (
|
||||||
nconfig "novit.nc/direktil/pkg/config"
|
nconfig "novit.tech/direktil/pkg/config"
|
||||||
)
|
)
|
||||||
|
|
||||||
type config struct {
|
type configV1 = nconfig.Config
|
||||||
Layers []string `yaml:"layers"`
|
|
||||||
Files []nconfig.FileDef `yaml:"files"`
|
|
||||||
}
|
|
||||||
|
|||||||
1
debug/bootstrap
Symbolic link
1
debug/bootstrap
Symbolic link
@ -0,0 +1 @@
|
|||||||
|
../target/debug/init
|
||||||
1
debug/connect-boot
Symbolic link
1
debug/connect-boot
Symbolic link
@ -0,0 +1 @@
|
|||||||
|
../target/debug/init
|
||||||
1
debug/init
Symbolic link
1
debug/init
Symbolic link
@ -0,0 +1 @@
|
|||||||
|
../target/debug/init
|
||||||
1
debug/init-version
Symbolic link
1
debug/init-version
Symbolic link
@ -0,0 +1 @@
|
|||||||
|
../target/debug/init
|
||||||
8
etc/sshd_config
Normal file
8
etc/sshd_config
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
KbdInteractiveAuthentication no
|
||||||
|
PasswordAuthentication no
|
||||||
|
UsePAM no
|
||||||
|
|
||||||
|
PubkeyAuthentication yes
|
||||||
|
|
||||||
|
PermitRootLogin yes
|
||||||
|
AllowUsers root
|
||||||
22
filter.go
Normal file
22
filter.go
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
func filter[T any](values []T, accept func(T) bool) []T {
|
||||||
|
r := make([]T, 0, len(values))
|
||||||
|
|
||||||
|
for _, v := range values {
|
||||||
|
if accept(v) {
|
||||||
|
r = append(r, v)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return r
|
||||||
|
}
|
||||||
|
|
||||||
|
func contains[T any](values []T, accept func(T) bool) bool {
|
||||||
|
for _, v := range values {
|
||||||
|
if accept(v) {
|
||||||
|
return true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return false
|
||||||
|
}
|
||||||
13
filter_test.go
Normal file
13
filter_test.go
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"fmt"
|
||||||
|
"testing"
|
||||||
|
)
|
||||||
|
|
||||||
|
func TestFilter(t*testing.T) {
|
||||||
|
a := filter([]string{"a","b","c"}, func(v string) bool { return v != "b" })
|
||||||
|
if fmt.Sprint(a) != "[a c]" {
|
||||||
|
t.Errorf("bad result: %v", a)
|
||||||
|
}
|
||||||
|
}
|
||||||
37
go.mod
37
go.mod
@ -1,10 +1,35 @@
|
|||||||
module novit.nc/direktil/initrd
|
module novit.tech/direktil/initrd
|
||||||
|
|
||||||
require (
|
require (
|
||||||
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68 // indirect
|
github.com/creack/pty v1.1.24
|
||||||
golang.org/x/term v0.0.0-20201117132131-f5c789dd3221
|
github.com/freddierice/go-losetup/v2 v2.0.1
|
||||||
gopkg.in/yaml.v2 v2.3.0
|
github.com/jochenvg/go-udev v0.0.0-20240801134859-b65ed646224b
|
||||||
novit.nc/direktil/pkg v0.0.0-20191211161950-96b0448b84c2
|
github.com/pkg/term v1.1.0
|
||||||
|
github.com/rs/zerolog v1.34.0
|
||||||
|
golang.org/x/crypto v0.38.0
|
||||||
|
golang.org/x/sys v0.33.0
|
||||||
|
golang.org/x/term v0.32.0
|
||||||
|
golang.zx2c4.com/wireguard/wgctrl v0.0.0-20241231184526-a9ab2273dd10
|
||||||
|
gopkg.in/yaml.v2 v2.4.0
|
||||||
|
gopkg.in/yaml.v3 v3.0.1
|
||||||
|
novit.tech/direktil/pkg v0.0.0-20240415130406-0d2e181a4ed6
|
||||||
)
|
)
|
||||||
|
|
||||||
go 1.13
|
require (
|
||||||
|
github.com/cavaliergopher/cpio v1.0.1 // indirect
|
||||||
|
github.com/google/go-cmp v0.7.0 // indirect
|
||||||
|
github.com/jkeiser/iter v0.0.0-20200628201005-c8aa0ae784d1 // indirect
|
||||||
|
github.com/josharian/native v1.1.0 // indirect
|
||||||
|
github.com/mattn/go-colorable v0.1.14 // indirect
|
||||||
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
||||||
|
github.com/mdlayher/genetlink v1.3.2 // indirect
|
||||||
|
github.com/mdlayher/netlink v1.7.2 // indirect
|
||||||
|
github.com/mdlayher/socket v0.5.1 // indirect
|
||||||
|
golang.org/x/net v0.40.0 // indirect
|
||||||
|
golang.org/x/sync v0.14.0 // indirect
|
||||||
|
golang.zx2c4.com/wireguard v0.0.0-20250521234502-f333402bd9cb // indirect
|
||||||
|
)
|
||||||
|
|
||||||
|
go 1.23.1
|
||||||
|
|
||||||
|
toolchain go1.24.3
|
||||||
|
|||||||
121
go.sum
121
go.sum
@ -1,21 +1,104 @@
|
|||||||
github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
|
github.com/cavaliergopher/cpio v1.0.1 h1:KQFSeKmZhv0cr+kawA3a0xTQCU4QxXF1vhU7P7av2KM=
|
||||||
github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
|
github.com/cavaliergopher/cpio v1.0.1/go.mod h1:pBdaqQjnvXxdS/6CvNDwIANIFSP0xRKI16PX4xejRQc=
|
||||||
github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
|
github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=
|
||||||
github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
|
github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
|
||||||
github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
|
github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
|
||||||
github.com/ulikunitz/xz v0.5.6/go.mod h1:2bypXElzHzzJZwzH67Y6wb67pO62Rzfn7BSiF4ABRW8=
|
github.com/freddierice/go-losetup/v2 v2.0.1 h1:wPDx/Elu9nDV8y/CvIbEDz5Xi5Zo80y4h7MKbi3XaAI=
|
||||||
golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 h1:YyJpGZS1sBuBCzLAR1VEpK193GlqGZbnPFnPV/5Rsb4=
|
github.com/freddierice/go-losetup/v2 v2.0.1/go.mod h1:TEyBrvlOelsPEhfWD5rutNXDmUszBXuFnwT1kIQF4J8=
|
||||||
golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
|
||||||
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68 h1:nxC68pudNYkKU6jWhgrqdreuFiOQWj1Fs7T3VrH4Pjw=
|
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
|
||||||
|
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
|
||||||
|
github.com/jkeiser/iter v0.0.0-20200628201005-c8aa0ae784d1 h1:smvLGU3obGU5kny71BtE/ibR0wIXRUiRFDmSn0Nxz1E=
|
||||||
|
github.com/jkeiser/iter v0.0.0-20200628201005-c8aa0ae784d1/go.mod h1:fP/NdyhRVOv09PLRbVXrSqHhrfQypdZwgE2L4h2U5C8=
|
||||||
|
github.com/jochenvg/go-udev v0.0.0-20240801134859-b65ed646224b h1:Pzf7tldbCVqwl3NnOnTamEWdh/rL41fsoYCn2HdHgRA=
|
||||||
|
github.com/jochenvg/go-udev v0.0.0-20240801134859-b65ed646224b/go.mod h1:IBDUGq30U56w969YNPomhMbRje1GrhUsCh7tHdwgLXA=
|
||||||
|
github.com/josharian/native v1.1.0 h1:uuaP0hAbW7Y4l0ZRQ6C9zfb7Mg1mbFKry/xzDAfmtLA=
|
||||||
|
github.com/josharian/native v1.1.0/go.mod h1:7X/raswPFr05uY3HiLlYeyQntB6OO7E/d2Cu7qoaN2w=
|
||||||
|
github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
|
||||||
|
github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
|
||||||
|
github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
|
||||||
|
github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
|
||||||
|
github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
|
||||||
|
github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
|
||||||
|
github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
|
||||||
|
github.com/mdlayher/genetlink v1.3.2 h1:KdrNKe+CTu+IbZnm/GVUMXSqBBLqcGpRDa0xkQy56gw=
|
||||||
|
github.com/mdlayher/genetlink v1.3.2/go.mod h1:tcC3pkCrPUGIKKsCsp0B3AdaaKuHtaxoJRz3cc+528o=
|
||||||
|
github.com/mdlayher/netlink v1.7.2 h1:/UtM3ofJap7Vl4QWCPDGXY8d3GIY2UGSDbK+QWmY8/g=
|
||||||
|
github.com/mdlayher/netlink v1.7.2/go.mod h1:xraEF7uJbxLhc5fpHL4cPe221LI2bdttWlU+ZGLfQSw=
|
||||||
|
github.com/mdlayher/socket v0.5.1 h1:VZaqt6RkGkt2OE9l3GcC6nZkqD3xKeQLyfleW/uBcos=
|
||||||
|
github.com/mdlayher/socket v0.5.1/go.mod h1:TjPLHI1UgwEv5J1B5q0zTZq12A/6H7nKmtTanQE37IQ=
|
||||||
|
github.com/mikioh/ipaddr v0.0.0-20190404000644-d465c8ab6721 h1:RlZweED6sbSArvlE924+mUcZuXKLBHA35U7LN621Bws=
|
||||||
|
github.com/mikioh/ipaddr v0.0.0-20190404000644-d465c8ab6721/go.mod h1:Ickgr2WtCLZ2MDGd4Gr0geeCH5HybhRJbonOgQpvSxc=
|
||||||
|
github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
|
||||||
|
github.com/pkg/term v1.1.0 h1:xIAAdCMh3QIAy+5FrE8Ad8XoDhEU4ufwbaSozViP9kk=
|
||||||
|
github.com/pkg/term v1.1.0/go.mod h1:E25nymQcrSllhX42Ok8MRm1+hyBdHY0dCeiKZ9jpNGw=
|
||||||
|
github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg=
|
||||||
|
github.com/rs/xid v1.6.0/go.mod h1:7XoLgs4eV+QndskICGsho+ADou8ySMSjJKDIan90Nz0=
|
||||||
|
github.com/rs/zerolog v1.31.0/go.mod h1:/7mN4D5sKwJLZQ2b/znpjC3/GQWY/xaDXUM0kKWRHss=
|
||||||
|
github.com/rs/zerolog v1.34.0 h1:k43nTLIwcTVQAncfCw4KZ2VY6ukYoZaBPNOE8txlOeY=
|
||||||
|
github.com/rs/zerolog v1.34.0/go.mod h1:bJsvje4Z08ROH4Nhs5iH600c3IkWhwp44iRc54W6wYQ=
|
||||||
|
github.com/ulikunitz/xz v0.5.11/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
|
||||||
|
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
|
||||||
|
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
|
||||||
|
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
|
||||||
|
golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
|
||||||
|
golang.org/x/crypto v0.38.0 h1:jt+WWG8IZlBnVbomuhg2Mdq0+BBQaHbtqHEFEigjUV8=
|
||||||
|
golang.org/x/crypto v0.38.0/go.mod h1:MvrbAqul58NNYPKnOra203SB9vpuZW0e+RRZV+Ggqjw=
|
||||||
|
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
|
||||||
|
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
|
||||||
|
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||||
|
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
|
||||||
|
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
|
||||||
|
golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
|
||||||
|
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
|
||||||
|
golang.org/x/net v0.40.0 h1:79Xs7wF06Gbdcg4kdCCIQArK11Z1hr5POQ6+fIYHNuY=
|
||||||
|
golang.org/x/net v0.40.0/go.mod h1:y0hY0exeL2Pku80/zKK7tpntoX23cqL3Oa6njdgRtds=
|
||||||
|
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||||
|
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||||
|
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||||
|
golang.org/x/sync v0.14.0 h1:woo0S4Yywslg6hp4eUFjTVOyKt0RookbpAHG4c1HmhQ=
|
||||||
|
golang.org/x/sync v0.14.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
|
||||||
|
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
|
||||||
|
golang.org/x/sys v0.0.0-20200909081042-eff7692f9009/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||||
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||||
golang.org/x/term v0.0.0-20201117132131-f5c789dd3221 h1:/ZHdbVpdR/jk3g30/d4yUL0JU9kksj8+F/bnQUVLGDM=
|
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
|
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||||
|
golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
|
||||||
|
golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
|
||||||
|
golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
|
||||||
|
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
|
||||||
|
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
|
||||||
|
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
|
||||||
|
golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
|
||||||
|
golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
|
||||||
|
golang.org/x/term v0.32.0 h1:DR4lr0TjUs3epypdhTOkMmuF5CDFJ/8pOnbzMZPQ7bg=
|
||||||
|
golang.org/x/term v0.32.0/go.mod h1:uZG1FhGx848Sqfsq4/DlJr3xGGsYMu/L5GW4abiaEPQ=
|
||||||
|
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
|
||||||
|
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
|
||||||
|
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
|
||||||
|
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
|
||||||
|
golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
|
||||||
|
golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
|
||||||
|
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
|
||||||
|
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
|
||||||
|
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
|
||||||
|
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
|
||||||
|
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||||
|
golang.zx2c4.com/wireguard v0.0.0-20250521234502-f333402bd9cb h1:whnFRlWMcXI9d+ZbWg+4sHnLp52d5yiIPUxMBSt4X9A=
|
||||||
|
golang.zx2c4.com/wireguard v0.0.0-20250521234502-f333402bd9cb/go.mod h1:rpwXGsirqLqN2L0JDJQlwOboGHmptD5ZD6T2VmcqhTw=
|
||||||
|
golang.zx2c4.com/wireguard/wgctrl v0.0.0-20241231184526-a9ab2273dd10 h1:3GDAcqdIg1ozBNLgPy4SLT84nfcBjr6rhGtXYtrkWLU=
|
||||||
|
golang.zx2c4.com/wireguard/wgctrl v0.0.0-20241231184526-a9ab2273dd10/go.mod h1:T97yPqesLiNrOYxkwmhMI0ZIlJDm+p0PMR8eRVeR5tQ=
|
||||||
|
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
|
||||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||||
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
|
gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
|
||||||
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
|
||||||
gopkg.in/yaml.v2 v2.2.4 h1:/eiJrUcujPVeJ3xlSWaiNi3uSVmDGBK1pDHUHAnao1I=
|
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
|
||||||
gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
|
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
||||||
gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
|
novit.tech/direktil/pkg v0.0.0-20240415130406-0d2e181a4ed6 h1:D0TN5GyZ4d88ILpgVZgcZ62027lW8/LLnQSpQyN2yOw=
|
||||||
gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
|
novit.tech/direktil/pkg v0.0.0-20240415130406-0d2e181a4ed6/go.mod h1:zjezU6tELE880oYHs/WAauGBupKIEQQ7KqWTB69RW10=
|
||||||
novit.nc/direktil/pkg v0.0.0-20191211161950-96b0448b84c2 h1:LN3K19gAJ1GamJXkzXAQmjbl8xCV7utqdxTTrM89MMc=
|
|
||||||
novit.nc/direktil/pkg v0.0.0-20191211161950-96b0448b84c2/go.mod h1:zwTVO6U0tXFEaga73megQIBK7yVIKZJVePaIh/UtdfU=
|
|
||||||
|
|||||||
26
losetup.go
Normal file
26
losetup.go
Normal file
@ -0,0 +1,26 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"syscall"
|
||||||
|
|
||||||
|
"github.com/freddierice/go-losetup/v2"
|
||||||
|
)
|
||||||
|
|
||||||
|
var loDevices = map[string]losetup.Device{}
|
||||||
|
|
||||||
|
func losetupAttach(file string) losetup.Device {
|
||||||
|
if _, ok := loDevices[file]; !ok {
|
||||||
|
dev, err := losetup.Attach(file, 0, true)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to attach %q to a loop device: %v", file, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
loDevices[file] = dev
|
||||||
|
}
|
||||||
|
return loDevices[file]
|
||||||
|
}
|
||||||
|
|
||||||
|
func mountSquahfs(source, target string) {
|
||||||
|
dev := losetupAttach(source)
|
||||||
|
mount(dev.Path(), target, "squashfs", syscall.MS_RDONLY, "")
|
||||||
|
}
|
||||||
410
lvm.go
Normal file
410
lvm.go
Normal file
@ -0,0 +1,410 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bytes"
|
||||||
|
"io/fs"
|
||||||
|
"os"
|
||||||
|
"os/exec"
|
||||||
|
"path/filepath"
|
||||||
|
"sort"
|
||||||
|
"strconv"
|
||||||
|
"syscall"
|
||||||
|
|
||||||
|
udev "github.com/jochenvg/go-udev"
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
|
||||||
|
"novit.tech/direktil/initrd/lvm"
|
||||||
|
)
|
||||||
|
|
||||||
|
func sortedKeys[T any](m map[string]T) (keys []string) {
|
||||||
|
keys = make([]string, 0, len(m))
|
||||||
|
for k := range m {
|
||||||
|
keys = append(keys, k)
|
||||||
|
}
|
||||||
|
sort.Strings(keys)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
func setupLVM(cfg *config.Config) {
|
||||||
|
if len(cfg.LVM) == 0 {
|
||||||
|
log.Info().Msg("no LVM VG configured.")
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
// [dev] = filesystem
|
||||||
|
// eg: [/dev/sda1] = ext4
|
||||||
|
createdDevs := map[string]string{}
|
||||||
|
|
||||||
|
run("pvscan")
|
||||||
|
run("vgscan", "--mknodes")
|
||||||
|
|
||||||
|
for _, vg := range cfg.LVM {
|
||||||
|
setupVG(vg)
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, vg := range cfg.LVM {
|
||||||
|
setupLVs(vg, createdDevs)
|
||||||
|
}
|
||||||
|
|
||||||
|
run("vgchange", "--sysinit", "-a", "ly")
|
||||||
|
|
||||||
|
setupCrypt(cfg.Crypt, createdDevs)
|
||||||
|
|
||||||
|
devs := make([]string, 0, len(createdDevs))
|
||||||
|
for k := range createdDevs {
|
||||||
|
devs = append(devs, k)
|
||||||
|
}
|
||||||
|
sort.Strings(devs)
|
||||||
|
|
||||||
|
for _, dev := range devs {
|
||||||
|
setupFS(dev, createdDevs[dev])
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func setupVG(vg config.LvmVG) {
|
||||||
|
pvs := lvm.PVSReport{}
|
||||||
|
err := runJSON(&pvs, "pvs", "--reportformat", "json")
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to list LVM PVs: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
vgExists := false
|
||||||
|
devNeeded := vg.PVs.N
|
||||||
|
for _, pv := range pvs.PVs() {
|
||||||
|
if pv.VGName == vg.VG {
|
||||||
|
vgExists = true
|
||||||
|
devNeeded--
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
log := log.With().Str("vg", vg.VG).Logger()
|
||||||
|
|
||||||
|
if devNeeded <= 0 {
|
||||||
|
log.Info().Msg("LVM VG has all its devices")
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
if vgExists {
|
||||||
|
log.Info().Msgf("LVM VG misses %d devices", devNeeded)
|
||||||
|
} else {
|
||||||
|
log.Info().Msg("LVM VG does not exists, creating")
|
||||||
|
}
|
||||||
|
|
||||||
|
devNames := make([]NameAliases, 0)
|
||||||
|
{
|
||||||
|
devRefs := map[uint64]*NameAliases{}
|
||||||
|
|
||||||
|
enum := new(udev.Udev).NewEnumerate()
|
||||||
|
enum.AddMatchSubsystem("block")
|
||||||
|
|
||||||
|
devs, err := enum.Devices()
|
||||||
|
if err != nil {
|
||||||
|
fatal("udev enumeration failed")
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, dev := range devs {
|
||||||
|
num := dev.Devnum()
|
||||||
|
|
||||||
|
n := dev.PropertyValue("DEVNAME")
|
||||||
|
idx := len(devNames)
|
||||||
|
devNames = append(devNames, nameAlias(n))
|
||||||
|
|
||||||
|
ref := uint64(num.Major())<<8 | uint64(num.Minor())
|
||||||
|
devRefs[ref] = &devNames[idx]
|
||||||
|
}
|
||||||
|
|
||||||
|
err = filepath.Walk("/dev", func(n string, fi fs.FileInfo, err error) error {
|
||||||
|
if fi.Mode().Type() == os.ModeDevice {
|
||||||
|
stat := fi.Sys().(*syscall.Stat_t)
|
||||||
|
ref := stat.Rdev
|
||||||
|
if na := devRefs[ref]; na != nil {
|
||||||
|
na.AddAlias(n)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return err
|
||||||
|
})
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to walk /dev: %v", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, dev := range devNames {
|
||||||
|
log.Info().Str("name", dev.Name).Any("aliases", dev.Aliases).Msg("found block device")
|
||||||
|
}
|
||||||
|
|
||||||
|
m := regexpSelectN(vg.PVs.N, vg.PVs.Regexps, devNames)
|
||||||
|
if len(m) == 0 {
|
||||||
|
log.Error().Strs("regexps", vg.PVs.Regexps).Msg("no device match the regexps")
|
||||||
|
fatalf("failed to setup VG %s", vg.VG)
|
||||||
|
}
|
||||||
|
|
||||||
|
if vgExists {
|
||||||
|
log.Info().Strs("devices", m).Msg("LVM VG: extending")
|
||||||
|
run("vgextend", append([]string{vg.VG}, m...)...)
|
||||||
|
devNeeded -= len(m)
|
||||||
|
} else {
|
||||||
|
log.Info().Strs("devices", m).Msg("LVM VG: creating")
|
||||||
|
run("vgcreate", append([]string{vg.VG}, m...)...)
|
||||||
|
devNeeded -= len(m)
|
||||||
|
}
|
||||||
|
|
||||||
|
if devNeeded > 0 {
|
||||||
|
fatalf("VG %s does not have enough devices (%d missing)", vg.VG, devNeeded)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func setupLVs(vg config.LvmVG, createdDevs map[string]string) {
|
||||||
|
lvsRep := lvm.LVSReport{}
|
||||||
|
err := runJSON(&lvsRep, "lvs", "--reportformat", "json")
|
||||||
|
if err != nil {
|
||||||
|
fatalf("lvs failed: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
lvs := lvsRep.LVs()
|
||||||
|
|
||||||
|
defaults := vg.Defaults
|
||||||
|
|
||||||
|
for idx, lv := range vg.LVs {
|
||||||
|
log := log.With().Str("vg", vg.VG).Str("lv", lv.Name).Logger()
|
||||||
|
|
||||||
|
if contains(lvs, func(v lvm.LV) bool {
|
||||||
|
return v.VGName == vg.VG && v.Name == lv.Name
|
||||||
|
}) {
|
||||||
|
log.Info().Msg("LV exists")
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Msg("LV does not exist")
|
||||||
|
|
||||||
|
if lv.Raid == nil {
|
||||||
|
lv.Raid = defaults.Raid
|
||||||
|
}
|
||||||
|
|
||||||
|
args := make([]string, 0)
|
||||||
|
|
||||||
|
if lv.Name == "" {
|
||||||
|
fatalf("LV[%d] has no name", idx)
|
||||||
|
}
|
||||||
|
args = append(args, vg.VG, "--name", lv.Name)
|
||||||
|
|
||||||
|
if lv.Size != "" && lv.Extents != "" {
|
||||||
|
fatalf("LV has both size and extents defined!")
|
||||||
|
} else if lv.Size == "" && lv.Extents == "" {
|
||||||
|
fatalf("LV does not have size or extents defined!")
|
||||||
|
} else if lv.Size != "" {
|
||||||
|
args = append(args, "-L", lv.Size)
|
||||||
|
} else /* if lv.Extents != "" */ {
|
||||||
|
args = append(args, "-l", lv.Extents)
|
||||||
|
}
|
||||||
|
|
||||||
|
if raid := lv.Raid; raid != nil {
|
||||||
|
if raid.Mirrors != 0 {
|
||||||
|
args = append(args, "--mirrors", strconv.Itoa(raid.Mirrors))
|
||||||
|
}
|
||||||
|
if raid.Stripes != 0 {
|
||||||
|
args = append(args, "--stripes", strconv.Itoa(raid.Stripes))
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Strs("args", args).Msg("LV: creating")
|
||||||
|
run("lvcreate", args...)
|
||||||
|
|
||||||
|
dev := "/dev/" + vg.VG + "/" + lv.Name
|
||||||
|
zeroDevStart(dev)
|
||||||
|
|
||||||
|
fs := lv.FS
|
||||||
|
if fs == "" {
|
||||||
|
fs = vg.Defaults.FS
|
||||||
|
}
|
||||||
|
createdDevs[dev] = fs
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func zeroDevStart(dev string) {
|
||||||
|
f, err := os.OpenFile(dev, os.O_WRONLY, 0600)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to open %s: %v", dev, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
_, err = f.Write(make([]byte, 8192))
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to zero the beginning of %s: %v", dev, err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
var cryptDevs = map[string]bool{}
|
||||||
|
|
||||||
|
func setupCrypt(devSpecs []config.CryptDev, createdDevs map[string]string) {
|
||||||
|
var password []byte
|
||||||
|
passwordVerified := false
|
||||||
|
|
||||||
|
// flat, expanded devices to open
|
||||||
|
devNames := make([]config.CryptDev, 0, len(devSpecs))
|
||||||
|
|
||||||
|
for _, devSpec := range devSpecs {
|
||||||
|
if devSpec.Dev == "" && devSpec.Prefix == "" {
|
||||||
|
fatalf("crypt: name %q: no dev or match set", devSpec.Name)
|
||||||
|
}
|
||||||
|
if devSpec.Dev != "" && devSpec.Prefix != "" {
|
||||||
|
fatalf("crypt: name %q: both dev (%q) and match (%q) are set", devSpec.Name, devSpec.Dev, devSpec.Prefix)
|
||||||
|
}
|
||||||
|
|
||||||
|
if devSpec.Dev != "" {
|
||||||
|
// already flat
|
||||||
|
devNames = append(devNames, devSpec)
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
matches, err := filepath.Glob(devSpec.Prefix + "*")
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to search for device matches: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, m := range matches {
|
||||||
|
suffix := m[len(devSpec.Prefix):]
|
||||||
|
|
||||||
|
devNames = append(devNames, config.CryptDev{Dev: m, Name: devSpec.Name + suffix})
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, devName := range devNames {
|
||||||
|
name, dev := devName.Name, devName.Dev
|
||||||
|
|
||||||
|
if name == "" {
|
||||||
|
name = filepath.Base(dev)
|
||||||
|
}
|
||||||
|
|
||||||
|
if cryptDevs[name] {
|
||||||
|
fatalf("duplicate crypt device name: %s", name)
|
||||||
|
}
|
||||||
|
cryptDevs[name] = true
|
||||||
|
|
||||||
|
retryOpen:
|
||||||
|
if len(password) == 0 {
|
||||||
|
password = askSecret("crypt password")
|
||||||
|
|
||||||
|
if len(password) == 0 {
|
||||||
|
fatalf("empty password given")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
fs := createdDevs[dev]
|
||||||
|
delete(createdDevs, dev)
|
||||||
|
|
||||||
|
tgtDev := "/dev/mapper/" + name
|
||||||
|
|
||||||
|
needFormat := !devInitialized(dev)
|
||||||
|
if needFormat {
|
||||||
|
if !passwordVerified {
|
||||||
|
retry:
|
||||||
|
p2 := askSecret("verify crypt password")
|
||||||
|
|
||||||
|
eq := bytes.Equal(password, p2)
|
||||||
|
|
||||||
|
for i := range p2 {
|
||||||
|
p2[i] = 0
|
||||||
|
}
|
||||||
|
|
||||||
|
if !eq {
|
||||||
|
log.Error().Msg("passwords don't match")
|
||||||
|
goto retry
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Str("dev", dev).Msg("formatting encrypted device")
|
||||||
|
cmd := exec.Command("cryptsetup", "luksFormat", dev, "--key-file=-")
|
||||||
|
cmd.Stdin = bytes.NewBuffer(password)
|
||||||
|
cmd.Stdout = stdout
|
||||||
|
cmd.Stderr = stderr
|
||||||
|
err := cmd.Run()
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed luksFormat: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
createdDevs[tgtDev] = fs
|
||||||
|
}
|
||||||
|
|
||||||
|
if len(password) == 0 {
|
||||||
|
password = askSecret("crypt password")
|
||||||
|
|
||||||
|
if len(password) == 0 {
|
||||||
|
fatalf("empty password given")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Str("name", name).Str("dev", dev).Msg("openning encrypted device")
|
||||||
|
cmd := exec.Command("cryptsetup", "open", dev, name, "--key-file=-")
|
||||||
|
cmd.Stdin = bytes.NewBuffer(password)
|
||||||
|
cmd.Stdout = stdout
|
||||||
|
cmd.Stderr = stderr
|
||||||
|
err := cmd.Run()
|
||||||
|
if err != nil {
|
||||||
|
// maybe the password is wrong
|
||||||
|
for i := range password {
|
||||||
|
password[i] = 0
|
||||||
|
}
|
||||||
|
password = password[:0]
|
||||||
|
passwordVerified = false
|
||||||
|
goto retryOpen
|
||||||
|
}
|
||||||
|
|
||||||
|
if needFormat {
|
||||||
|
zeroDevStart(tgtDev)
|
||||||
|
}
|
||||||
|
|
||||||
|
passwordVerified = true
|
||||||
|
}
|
||||||
|
|
||||||
|
for i := range password {
|
||||||
|
password[i] = 0
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func devInitialized(dev string) bool {
|
||||||
|
f, err := os.Open(dev)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to open %s: %v", dev, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
ba := make([]byte, 8192)
|
||||||
|
_, err = f.Read(ba)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to read %s: %v", dev, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, b := range ba {
|
||||||
|
if b != 0 {
|
||||||
|
return true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
|
||||||
|
func setupFS(dev, fs string) {
|
||||||
|
if devInitialized(dev) {
|
||||||
|
log.Info().Str("dev", dev).Msg("device already formatted")
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
if fs == "" {
|
||||||
|
fs = "ext4"
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Str("dev", dev).Str("fs", fs).Msg("formatting device")
|
||||||
|
args := make([]string, 0)
|
||||||
|
|
||||||
|
switch fs {
|
||||||
|
case "btrfs":
|
||||||
|
args = append(args, "-f")
|
||||||
|
case "ext4":
|
||||||
|
args = append(args, "-F")
|
||||||
|
}
|
||||||
|
|
||||||
|
run("mkfs."+fs, append(args, dev)...)
|
||||||
|
}
|
||||||
19
lvm/lv.go
Normal file
19
lvm/lv.go
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
package lvm
|
||||||
|
|
||||||
|
type LVSReport struct {
|
||||||
|
Report []struct {
|
||||||
|
LV []LV `json:"lv"`
|
||||||
|
} `json:"report"`
|
||||||
|
}
|
||||||
|
|
||||||
|
type LV struct {
|
||||||
|
Name string `json:"lv_name"`
|
||||||
|
VGName string `json:"vg_name"`
|
||||||
|
}
|
||||||
|
|
||||||
|
func (r LVSReport) LVs() (ret []LV) {
|
||||||
|
for _, rep := range r.Report {
|
||||||
|
ret = append(ret, rep.LV...)
|
||||||
|
}
|
||||||
|
return
|
||||||
|
}
|
||||||
19
lvm/pv.go
Normal file
19
lvm/pv.go
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
package lvm
|
||||||
|
|
||||||
|
type PVSReport struct {
|
||||||
|
Report []struct {
|
||||||
|
PV []PV `json:"pv"`
|
||||||
|
} `json:"report"`
|
||||||
|
}
|
||||||
|
|
||||||
|
type PV struct {
|
||||||
|
Name string `json:"pv_name"`
|
||||||
|
VGName string `json:"vg_name"`
|
||||||
|
}
|
||||||
|
|
||||||
|
func (r PVSReport) PVs() (ret []PV) {
|
||||||
|
for _, rep := range r.Report {
|
||||||
|
ret = append(ret, rep.PV...)
|
||||||
|
}
|
||||||
|
return
|
||||||
|
}
|
||||||
274
main.go
274
main.go
@ -3,24 +3,25 @@ package main
|
|||||||
import (
|
import (
|
||||||
"fmt"
|
"fmt"
|
||||||
"io"
|
"io"
|
||||||
"io/ioutil"
|
|
||||||
"log"
|
|
||||||
"os"
|
"os"
|
||||||
"os/exec"
|
"os/exec"
|
||||||
"path/filepath"
|
"path/filepath"
|
||||||
"runtime"
|
"runtime"
|
||||||
"strings"
|
|
||||||
"syscall"
|
"syscall"
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
|
"github.com/pkg/term/termios"
|
||||||
|
"github.com/rs/zerolog"
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
"golang.org/x/term"
|
"golang.org/x/term"
|
||||||
yaml "gopkg.in/yaml.v2"
|
|
||||||
"novit.nc/direktil/pkg/sysfs"
|
"novit.tech/direktil/initrd/colorio"
|
||||||
|
"novit.tech/direktil/initrd/shio"
|
||||||
)
|
)
|
||||||
|
|
||||||
const (
|
const (
|
||||||
// VERSION is the current version of init
|
// VERSION is the current version of init
|
||||||
VERSION = "Direktil init v1.0"
|
VERSION = "Direktil init v2.0"
|
||||||
|
|
||||||
rootMountFlags = 0
|
rootMountFlags = 0
|
||||||
bootMountFlags = syscall.MS_NOEXEC | syscall.MS_NODEV | syscall.MS_NOSUID | syscall.MS_RDONLY
|
bootMountFlags = syscall.MS_NOEXEC | syscall.MS_NODEV | syscall.MS_NOSUID | syscall.MS_RDONLY
|
||||||
@ -29,197 +30,170 @@ const (
|
|||||||
|
|
||||||
var (
|
var (
|
||||||
bootVersion string
|
bootVersion string
|
||||||
|
|
||||||
|
stdin,
|
||||||
|
stdinPipe = newPipe()
|
||||||
|
stdout = shio.New()
|
||||||
|
stderr = colorio.NewWriter(colorio.Bold, stdout)
|
||||||
)
|
)
|
||||||
|
|
||||||
|
func newPipe() (io.ReadCloser, io.WriteCloser) {
|
||||||
|
return io.Pipe()
|
||||||
|
}
|
||||||
|
|
||||||
func main() {
|
func main() {
|
||||||
|
log.Logger = log.Output(zerolog.ConsoleWriter{Out: os.Stderr})
|
||||||
|
|
||||||
|
registerInput(newTTY(os.Stdin.Fd()))
|
||||||
|
|
||||||
|
switch baseName := filepath.Base(os.Args[0]); baseName {
|
||||||
|
case "init":
|
||||||
|
runInit()
|
||||||
|
default:
|
||||||
|
log.Fatal().Msgf("unknown sub-command: %q", baseName)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func runInit() {
|
||||||
|
if len(os.Args) > 1 && os.Args[1] == "hello" {
|
||||||
|
fmt.Println("hello world!")
|
||||||
|
os.Exit(0)
|
||||||
|
}
|
||||||
|
|
||||||
runtime.LockOSThread()
|
runtime.LockOSThread()
|
||||||
|
|
||||||
log.Print("Welcome to ", VERSION)
|
// move log to shio
|
||||||
|
go io.Copy(os.Stdout, stdout.NewReader())
|
||||||
|
log.Logger = log.Output(zerolog.ConsoleWriter{Out: stderr})
|
||||||
|
|
||||||
|
// check the PID is 1
|
||||||
|
if pid := os.Getpid(); pid != 1 {
|
||||||
|
log.Fatal().Int("pid", pid).Msg("init must be PID 1")
|
||||||
|
}
|
||||||
|
|
||||||
|
// copy os.Stdin to my stdin pipe
|
||||||
|
go io.Copy(stdinPipe, os.Stdin)
|
||||||
|
|
||||||
|
log.Info().Msg("Welcome to " + VERSION)
|
||||||
|
|
||||||
// essential mounts
|
// essential mounts
|
||||||
mount("none", "/proc", "proc", 0, "")
|
mount("none", "/proc", "proc", 0, "")
|
||||||
mount("none", "/sys", "sysfs", 0, "")
|
mount("none", "/sys", "sysfs", 0, "")
|
||||||
mount("none", "/dev", "devtmpfs", 0, "")
|
mount("none", "/dev", "devtmpfs", 0, "")
|
||||||
|
mount("none", "/dev/pts", "devpts", 0, "gid=5,mode=620")
|
||||||
|
|
||||||
// get the "boot version"
|
// get the "boot version"
|
||||||
bootVersion = param("version", "current")
|
bootVersion = param("version", "current")
|
||||||
log.Printf("booting system %q", bootVersion)
|
log.Info().Msgf("booting system %q", bootVersion)
|
||||||
|
|
||||||
// find and mount /boot
|
os.Setenv("PATH", "/usr/bin:/bin:/usr/sbin:/sbin")
|
||||||
bootMatch := param("boot", "")
|
|
||||||
bootMounted := false
|
|
||||||
if bootMatch != "" {
|
|
||||||
bootFS := param("boot.fs", "vfat")
|
|
||||||
for i := 0; ; i++ {
|
|
||||||
devNames := sysfs.DeviceByProperty("block", bootMatch)
|
|
||||||
|
|
||||||
if len(devNames) == 0 {
|
_, err := os.Stat("/config.yaml")
|
||||||
if i > 30 {
|
|
||||||
fatal("boot partition not found after 30s")
|
|
||||||
}
|
|
||||||
log.Print("boot partition not found, retrying")
|
|
||||||
time.Sleep(1 * time.Second)
|
|
||||||
continue
|
|
||||||
}
|
|
||||||
|
|
||||||
devFile := filepath.Join("/dev", devNames[0])
|
|
||||||
|
|
||||||
log.Print("boot partition found: ", devFile)
|
|
||||||
|
|
||||||
mount(devFile, "/boot", bootFS, bootMountFlags, "")
|
|
||||||
bootMounted = true
|
|
||||||
break
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
log.Print("Assuming /boot is already populated.")
|
|
||||||
}
|
|
||||||
|
|
||||||
// load config
|
|
||||||
cfgPath := param("config", "/boot/config.yaml")
|
|
||||||
|
|
||||||
cfgBytes, err := ioutil.ReadFile(cfgPath)
|
|
||||||
if err != nil {
|
if err != nil {
|
||||||
fatalf("failed to read %s: %v", cfgPath, err)
|
log.Error().Err(err).Msg("config not found")
|
||||||
|
fatal()
|
||||||
}
|
}
|
||||||
|
|
||||||
cfg := &config{}
|
bootV2()
|
||||||
if err := yaml.Unmarshal(cfgBytes, cfg); err != nil {
|
|
||||||
fatal("failed to load config: ", err)
|
|
||||||
}
|
|
||||||
|
|
||||||
// mount layers
|
|
||||||
if len(cfg.Layers) == 0 {
|
|
||||||
fatal("no layers configured!")
|
|
||||||
}
|
|
||||||
|
|
||||||
log.Printf("wanted layers: %q", cfg.Layers)
|
|
||||||
|
|
||||||
layersInMemory := paramBool("layers-in-mem", false)
|
|
||||||
|
|
||||||
const layersInMemDir = "/layers-in-mem"
|
|
||||||
if layersInMemory {
|
|
||||||
mkdir(layersInMemDir, 0700)
|
|
||||||
mount("layers-mem", layersInMemDir, "tmpfs", 0, "")
|
|
||||||
}
|
|
||||||
|
|
||||||
lowers := make([]string, len(cfg.Layers))
|
|
||||||
for i, layer := range cfg.Layers {
|
|
||||||
path := layerPath(layer)
|
|
||||||
|
|
||||||
info, err := os.Stat(path)
|
|
||||||
if err != nil {
|
|
||||||
fatal(err)
|
|
||||||
}
|
|
||||||
|
|
||||||
log.Printf("layer %s found (%d bytes)", layer, info.Size())
|
|
||||||
|
|
||||||
if layersInMemory {
|
|
||||||
log.Print(" copying to memory...")
|
|
||||||
targetPath := filepath.Join(layersInMemDir, layer)
|
|
||||||
cp(path, targetPath)
|
|
||||||
path = targetPath
|
|
||||||
}
|
|
||||||
|
|
||||||
dir := "/layers/" + layer
|
|
||||||
|
|
||||||
lowers[i] = dir
|
|
||||||
|
|
||||||
loopDev := fmt.Sprintf("/dev/loop%d", i)
|
|
||||||
losetup(loopDev, path)
|
|
||||||
|
|
||||||
mount(loopDev, dir, "squashfs", layerMountFlags, "")
|
|
||||||
}
|
|
||||||
|
|
||||||
// prepare system root
|
|
||||||
mount("mem", "/changes", "tmpfs", 0, "")
|
|
||||||
|
|
||||||
mkdir("/changes/workdir", 0755)
|
|
||||||
mkdir("/changes/upperdir", 0755)
|
|
||||||
|
|
||||||
mount("overlay", "/system", "overlay", rootMountFlags,
|
|
||||||
"lowerdir="+strings.Join(lowers, ":")+",upperdir=/changes/upperdir,workdir=/changes/workdir")
|
|
||||||
|
|
||||||
if bootMounted {
|
|
||||||
if layersInMemory {
|
|
||||||
if err := syscall.Unmount("/boot", 0); err != nil {
|
|
||||||
log.Print("WARNING: failed to unmount /boot: ", err)
|
|
||||||
time.Sleep(2 * time.Second)
|
|
||||||
}
|
|
||||||
|
|
||||||
} else {
|
|
||||||
mount("/boot", "/system/boot", "", syscall.MS_BIND, "")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
// - write configuration
|
|
||||||
log.Print("writing /config.yaml")
|
|
||||||
if err := ioutil.WriteFile("/system/config.yaml", cfgBytes, 0600); err != nil {
|
|
||||||
fatal("failed: ", err)
|
|
||||||
}
|
|
||||||
|
|
||||||
// - write files
|
|
||||||
for _, fileDef := range cfg.Files {
|
|
||||||
log.Print("writing ", fileDef.Path)
|
|
||||||
|
|
||||||
filePath := filepath.Join("/system", fileDef.Path)
|
|
||||||
|
|
||||||
ioutil.WriteFile(filePath, []byte(fileDef.Content), fileDef.Mode)
|
|
||||||
}
|
|
||||||
|
|
||||||
// clean zombies
|
|
||||||
cleanZombies()
|
|
||||||
|
|
||||||
// switch root
|
|
||||||
log.Print("switching root")
|
|
||||||
err = syscall.Exec("/sbin/switch_root", []string{"switch_root",
|
|
||||||
"-c", "/dev/console", "/system", "/sbin/init"}, os.Environ())
|
|
||||||
fatal("switch_root failed: ", err)
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
var (
|
||||||
|
layersDir = "/boot/current/layers/"
|
||||||
|
layersOverride = map[string]string{}
|
||||||
|
)
|
||||||
|
|
||||||
func layerPath(name string) string {
|
func layerPath(name string) string {
|
||||||
return fmt.Sprintf("/boot/%s/layers/%s.fs", bootVersion, name)
|
if override, ok := layersOverride[name]; ok {
|
||||||
|
return override
|
||||||
|
}
|
||||||
|
return filepath.Join(layersDir, name+".fs")
|
||||||
}
|
}
|
||||||
|
|
||||||
func fatal(v ...interface{}) {
|
func fatal(v ...interface{}) {
|
||||||
log.Print("*** FATAL ***")
|
log.Error().Msg("*** FATAL ***")
|
||||||
log.Print(v...)
|
log.Error().Msg(fmt.Sprint(v...))
|
||||||
die()
|
die()
|
||||||
}
|
}
|
||||||
|
|
||||||
func fatalf(pattern string, v ...interface{}) {
|
func fatalf(pattern string, v ...interface{}) {
|
||||||
log.Print("*** FATAL ***")
|
log.Error().Msg("*** FATAL ***")
|
||||||
log.Printf(pattern, v...)
|
log.Error().Msgf(pattern, v...)
|
||||||
die()
|
die()
|
||||||
}
|
}
|
||||||
|
|
||||||
func die() {
|
func die() {
|
||||||
fmt.Println("\nwill reboot in 1 minute; press r to reboot now, o to power off")
|
log.Logger = log.Output(zerolog.ConsoleWriter{Out: os.Stderr})
|
||||||
|
|
||||||
|
stdout.Close()
|
||||||
|
stdin.Close()
|
||||||
|
stdinPipe.Close()
|
||||||
|
|
||||||
|
stdin = nil
|
||||||
|
|
||||||
|
mainLoop:
|
||||||
|
for {
|
||||||
|
termios.Tcdrain(os.Stdin.Fd())
|
||||||
|
termios.Tcdrain(os.Stdout.Fd())
|
||||||
|
termios.Tcdrain(os.Stderr.Fd())
|
||||||
|
|
||||||
|
fmt.Print("\nr to reboot, o to power off, s to get a shell: ")
|
||||||
|
|
||||||
|
// TODO flush stdin (first char lost here?)
|
||||||
deadline := time.Now().Add(time.Minute)
|
deadline := time.Now().Add(time.Minute)
|
||||||
|
|
||||||
term.MakeRaw(int(os.Stdin.Fd())) // disable line buffering
|
|
||||||
os.Stdin.SetReadDeadline(deadline)
|
os.Stdin.SetReadDeadline(deadline)
|
||||||
|
|
||||||
b := []byte{0}
|
term.MakeRaw(int(os.Stdin.Fd()))
|
||||||
for {
|
termios.Tcflush(os.Stdin.Fd(), termios.TCIFLUSH)
|
||||||
|
|
||||||
|
b := make([]byte, 1)
|
||||||
_, err := os.Stdin.Read(b)
|
_, err := os.Stdin.Read(b)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
break
|
log.Error().Err(err).Msg("failed to read from stdin")
|
||||||
|
time.Sleep(5 * time.Second)
|
||||||
|
syscall.Reboot(syscall.LINUX_REBOOT_CMD_RESTART)
|
||||||
}
|
}
|
||||||
|
fmt.Println()
|
||||||
|
|
||||||
switch b[0] {
|
switch b[0] {
|
||||||
case 'o':
|
case 'o':
|
||||||
|
run("sync")
|
||||||
syscall.Reboot(syscall.LINUX_REBOOT_CMD_POWER_OFF)
|
syscall.Reboot(syscall.LINUX_REBOOT_CMD_POWER_OFF)
|
||||||
case 'r':
|
case 'r':
|
||||||
|
run("sync")
|
||||||
syscall.Reboot(syscall.LINUX_REBOOT_CMD_RESTART)
|
syscall.Reboot(syscall.LINUX_REBOOT_CMD_RESTART)
|
||||||
}
|
case 's':
|
||||||
|
for _, sh := range []string{"bash", "ash", "sh", "busybox"} {
|
||||||
|
fullPath, err := exec.LookPath(sh)
|
||||||
|
if err != nil {
|
||||||
|
continue
|
||||||
}
|
}
|
||||||
|
|
||||||
syscall.Reboot(syscall.LINUX_REBOOT_CMD_RESTART)
|
args := make([]string, 0)
|
||||||
}
|
if sh == "busybox" {
|
||||||
|
args = append(args, "sh")
|
||||||
|
}
|
||||||
|
|
||||||
func losetup(dev, file string) {
|
if !localAuth() {
|
||||||
run("/sbin/losetup", dev, file)
|
continue mainLoop
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd := exec.Command(fullPath, args...)
|
||||||
|
cmd.Env = os.Environ()
|
||||||
|
cmd.Stdin = os.Stdin
|
||||||
|
cmd.Stdout = os.Stdout
|
||||||
|
cmd.Stderr = os.Stderr
|
||||||
|
err = cmd.Run()
|
||||||
|
if err != nil {
|
||||||
|
fmt.Println("shell failed:", err)
|
||||||
|
}
|
||||||
|
continue mainLoop
|
||||||
|
}
|
||||||
|
log.Error().Msg("failed to find a shell!")
|
||||||
|
|
||||||
|
default:
|
||||||
|
log.Error().Msgf("unknown choice: %q", string(b))
|
||||||
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
func run(cmd string, args ...string) {
|
func run(cmd string, args ...string) {
|
||||||
@ -242,7 +216,7 @@ func mount(source, target, fstype string, flags uintptr, data string) {
|
|||||||
if err := syscall.Mount(source, target, fstype, flags, data); err != nil {
|
if err := syscall.Mount(source, target, fstype, flags, data); err != nil {
|
||||||
fatalf("mount %q %q -t %q -o %q failed: %v", source, target, fstype, data, err)
|
fatalf("mount %q %q -t %q -o %q failed: %v", source, target, fstype, data, err)
|
||||||
}
|
}
|
||||||
log.Printf("mounted %q", target)
|
log.Info().Str("target", target).Msg("mounted")
|
||||||
}
|
}
|
||||||
|
|
||||||
func cp(srcPath, dstPath string) {
|
func cp(srcPath, dstPath string) {
|
||||||
|
|||||||
18
modd.conf
18
modd.conf
@ -1,6 +1,14 @@
|
|||||||
go.??? *.go {
|
modd.conf {}
|
||||||
prep: go test ./...
|
|
||||||
prep: dockb -t dkl-initrd .
|
**/*.rs Cargo.* {
|
||||||
prep: docker run dkl-initrd | docker exec -i dls sh -c "base64 -d >/var/lib/direktil/dist/initrd/1.0.7 && rm -rfv /var/lib/direktil/cache/*"
|
prep: cargo test
|
||||||
prep: curl -H'Autorization: Bearer adm1n' localhost:7606/hosts/m1/boot.iso >/tmp/m1-boot.iso
|
prep: cargo build
|
||||||
|
prep: debug/init-version
|
||||||
|
}
|
||||||
|
|
||||||
|
target/debug/init Dockerfile {
|
||||||
|
prep: docker build --network host -t novit-initrd-gen .
|
||||||
|
prep: docker run --net=host --rm novit-initrd-gen |base64 -d >dist/initrd.new
|
||||||
|
prep: mv dist/initrd.new dist/initrd
|
||||||
|
prep: ls -sh dist/initrd
|
||||||
}
|
}
|
||||||
|
|||||||
10
modd.test.conf
Normal file
10
modd.test.conf
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
modd.test.conf {}
|
||||||
|
|
||||||
|
dist/initrd dist/cpiocat dist/testconf test-initrd/**/* {
|
||||||
|
prep: dist/testconf test-initrd/config.yaml
|
||||||
|
prep: cp -f dist/initrd test-initrd.cpio
|
||||||
|
prep: cd test-initrd && cat ../dist/initrd | ../dist/cpiocat * |lz4 -l9v >../test-initrd.cpio.new
|
||||||
|
prep: mv test-initrd.cpio.new test-initrd.cpio
|
||||||
|
prep: if lz4cat test-initrd.cpio | cpio -t 2>&1 |grep bytes.of.junk; then echo "bad cpio archive"; exit 1; fi
|
||||||
|
prep: kill $(<qemu.pid)
|
||||||
|
}
|
||||||
87
network.go
Normal file
87
network.go
Normal file
@ -0,0 +1,87 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"os/exec"
|
||||||
|
"strings"
|
||||||
|
|
||||||
|
udev "github.com/jochenvg/go-udev"
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
)
|
||||||
|
|
||||||
|
func setupNetworks(cfg *config.Config) {
|
||||||
|
if len(cfg.Networks) == 0 {
|
||||||
|
log.Info().Msg("no networks configured.")
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
type Iface struct {
|
||||||
|
Name string
|
||||||
|
AliasOf string
|
||||||
|
}
|
||||||
|
|
||||||
|
ifaces := make([]NameAliases, 0)
|
||||||
|
{
|
||||||
|
enum := new(udev.Udev).NewEnumerate()
|
||||||
|
enum.AddMatchSubsystem("net")
|
||||||
|
|
||||||
|
devs, err := enum.Devices()
|
||||||
|
if err != nil {
|
||||||
|
fatal("udev enumeration failed")
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, dev := range devs {
|
||||||
|
iface := nameAliases(dev.Sysname(),
|
||||||
|
dev.PropertyValue("INTERFACE"),
|
||||||
|
dev.PropertyValue("ID_NET_NAME"),
|
||||||
|
dev.PropertyValue("ID_NET_NAME_PATH"),
|
||||||
|
dev.PropertyValue("ID_NET_NAME_MAC"),
|
||||||
|
dev.PropertyValue("ID_NET_NAME_SLOT"),
|
||||||
|
)
|
||||||
|
log.Info().Str("name", iface.Name).Any("aliases", iface.Aliases).Msg("found network device")
|
||||||
|
ifaces = append(ifaces, iface)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
assigned := map[string]bool{}
|
||||||
|
|
||||||
|
for _, network := range cfg.Networks {
|
||||||
|
log := log.With().Str("network", network.Name).Logger()
|
||||||
|
log.Info().Msg("setting up network")
|
||||||
|
|
||||||
|
unassigned := filter(ifaces, func(iface NameAliases) bool {
|
||||||
|
return !assigned[iface.Name]
|
||||||
|
})
|
||||||
|
|
||||||
|
// assign envvars
|
||||||
|
envvars := make([]string, 0, 1+len(network.Interfaces))
|
||||||
|
envvars = append(envvars, "PATH=/bin:/sbin:/usr/bin:/usr/sbin")
|
||||||
|
|
||||||
|
for _, match := range network.Interfaces {
|
||||||
|
envvar := new(strings.Builder)
|
||||||
|
envvar.WriteString(match.Var)
|
||||||
|
envvar.WriteByte('=')
|
||||||
|
for i, m := range regexpSelectN(match.N, match.Regexps, unassigned) {
|
||||||
|
assigned[m] = true
|
||||||
|
|
||||||
|
if i != 0 {
|
||||||
|
envvar.WriteByte(' ')
|
||||||
|
}
|
||||||
|
envvar.WriteString(m)
|
||||||
|
}
|
||||||
|
|
||||||
|
envvars = append(envvars, envvar.String())
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Strs("env", envvars).Msg("running script")
|
||||||
|
|
||||||
|
cmd := exec.Command("/bin/sh", "-c", network.Script)
|
||||||
|
cmd.Env = envvars
|
||||||
|
cmd.Stdout = stdout
|
||||||
|
cmd.Stderr = stderr
|
||||||
|
if err := cmd.Run(); err != nil {
|
||||||
|
fatal("failed to setup network: ", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -1,12 +1,12 @@
|
|||||||
package main
|
package main
|
||||||
|
|
||||||
import (
|
import (
|
||||||
"io/ioutil"
|
"os"
|
||||||
"strings"
|
"strings"
|
||||||
)
|
)
|
||||||
|
|
||||||
func param(name, defaultValue string) (value string) {
|
func param(name, defaultValue string) (value string) {
|
||||||
ba, err := ioutil.ReadFile("/proc/cmdline")
|
ba, err := os.ReadFile("/proc/cmdline")
|
||||||
if err != nil {
|
if err != nil {
|
||||||
fatal("could not read /proc/cmdline: ", err)
|
fatal("could not read /proc/cmdline: ", err)
|
||||||
}
|
}
|
||||||
|
|||||||
65
regexp.go
Normal file
65
regexp.go
Normal file
@ -0,0 +1,65 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"regexp"
|
||||||
|
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
)
|
||||||
|
|
||||||
|
type NameAliases struct {
|
||||||
|
Name string
|
||||||
|
Aliases []string
|
||||||
|
}
|
||||||
|
|
||||||
|
func nameAlias(name string) NameAliases {
|
||||||
|
return NameAliases{Name: name, Aliases: []string{name}}
|
||||||
|
}
|
||||||
|
func nameAliases(name string, aliases ...string) NameAliases {
|
||||||
|
na := NameAliases{Name: name, Aliases: make([]string, 0, len(aliases)+1)}
|
||||||
|
na.Aliases = append(na.Aliases, name)
|
||||||
|
for _, alias := range aliases {
|
||||||
|
na.AddAlias(alias)
|
||||||
|
}
|
||||||
|
|
||||||
|
return na
|
||||||
|
}
|
||||||
|
func (na *NameAliases) AddAlias(alias string) {
|
||||||
|
if alias == "" {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
if contains(na.Aliases, func(s string) bool { return s == alias }) {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
na.Aliases = append(na.Aliases, alias)
|
||||||
|
}
|
||||||
|
|
||||||
|
func regexpSelectN(n int, regexps []string, nameAliases []NameAliases) (matches []string) {
|
||||||
|
matches = make([]string, 0)
|
||||||
|
|
||||||
|
res := make([]*regexp.Regexp, 0, len(regexps))
|
||||||
|
for _, reStr := range regexps {
|
||||||
|
re, err := regexp.Compile(reStr)
|
||||||
|
if err != nil {
|
||||||
|
log.Warn().Err(err).Str("regexp", reStr).Msg("invalid regexp, ignored")
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
res = append(res, re)
|
||||||
|
}
|
||||||
|
|
||||||
|
nameAliasesLoop:
|
||||||
|
for _, item := range nameAliases {
|
||||||
|
if len(matches) == n {
|
||||||
|
break
|
||||||
|
}
|
||||||
|
for _, re := range res {
|
||||||
|
for _, alias := range item.Aliases {
|
||||||
|
if re.MatchString(alias) {
|
||||||
|
matches = append(matches, item.Name)
|
||||||
|
continue nameAliasesLoop
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return
|
||||||
|
}
|
||||||
2
run-docker
Executable file
2
run-docker
Executable file
@ -0,0 +1,2 @@
|
|||||||
|
docker build -t nv-initrd-test -f Dockerfile.test empty
|
||||||
|
docker run -d --name nv-initrd-test -it --privileged -v $PWD:/src --workdir /src/test-initrd nv-initrd-test
|
||||||
20
run-test.sh
Executable file
20
run-test.sh
Executable file
@ -0,0 +1,20 @@
|
|||||||
|
#! /bin/sh
|
||||||
|
|
||||||
|
disk1=tmp/test-vda.qcow2
|
||||||
|
disk2=tmp/test-vdb.qcow2
|
||||||
|
|
||||||
|
if ! [ -e $disk1 ]; then
|
||||||
|
qemu-img create -f qcow2 $disk1 10G
|
||||||
|
fi
|
||||||
|
if ! [ -e $disk2 ]; then
|
||||||
|
qemu-img create -f qcow2 $disk2 10G
|
||||||
|
fi
|
||||||
|
|
||||||
|
exec qemu-system-x86_64 -pidfile qemu.pid \
|
||||||
|
-kernel test-kernel -initrd test-initrd.cpio \
|
||||||
|
-smp 2 -m 2048 \
|
||||||
|
-netdev bridge,br=novit,id=eth0 -device virtio-net-pci,netdev=eth0 \
|
||||||
|
-drive file=$disk1,if=virtio \
|
||||||
|
-drive file=$disk2,if=virtio \
|
||||||
|
-nographic -serial mon:stdio -append 'console=ttyS0'
|
||||||
|
# -display curses
|
||||||
18
run.go
Normal file
18
run.go
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"encoding/json"
|
||||||
|
"os/exec"
|
||||||
|
)
|
||||||
|
|
||||||
|
func runJSON(v interface{}, cmd string, args ...string) (err error) {
|
||||||
|
c := exec.Command(cmd, args...)
|
||||||
|
c.Stderr = stderr
|
||||||
|
ba, err := c.Output()
|
||||||
|
if err != nil {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
err = json.Unmarshal(ba, v)
|
||||||
|
return
|
||||||
|
}
|
||||||
118
shio/shio.go
Normal file
118
shio/shio.go
Normal file
@ -0,0 +1,118 @@
|
|||||||
|
// Shared IO
|
||||||
|
package shio
|
||||||
|
|
||||||
|
import (
|
||||||
|
"io"
|
||||||
|
"sync"
|
||||||
|
|
||||||
|
"novit.tech/direktil/initrd/colorio"
|
||||||
|
)
|
||||||
|
|
||||||
|
type ShIO struct {
|
||||||
|
buf []byte
|
||||||
|
closed bool
|
||||||
|
cond *sync.Cond
|
||||||
|
hideInput bool
|
||||||
|
}
|
||||||
|
|
||||||
|
func New() *ShIO {
|
||||||
|
return NewWithCap(1024)
|
||||||
|
}
|
||||||
|
func NewWithCap(capacity int) *ShIO {
|
||||||
|
return NewWithBytes(make([]byte, 0, capacity))
|
||||||
|
}
|
||||||
|
func NewWithBytes(content []byte) *ShIO {
|
||||||
|
return &ShIO{
|
||||||
|
buf: content,
|
||||||
|
cond: sync.NewCond(&sync.Mutex{}),
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
var (
|
||||||
|
_ io.WriteCloser = New()
|
||||||
|
)
|
||||||
|
|
||||||
|
func (s *ShIO) Write(data []byte) (n int, err error) {
|
||||||
|
s.cond.L.Lock()
|
||||||
|
defer s.cond.L.Unlock()
|
||||||
|
|
||||||
|
if s.closed {
|
||||||
|
err = io.EOF
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
if s.hideInput {
|
||||||
|
s.buf = append(s.buf, colorio.Reset...)
|
||||||
|
}
|
||||||
|
|
||||||
|
s.buf = append(s.buf, data...)
|
||||||
|
n = len(data)
|
||||||
|
|
||||||
|
if s.hideInput {
|
||||||
|
s.buf = append(s.buf, colorio.Hidden...)
|
||||||
|
}
|
||||||
|
|
||||||
|
s.cond.Broadcast()
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
func (s *ShIO) HideInput() {
|
||||||
|
s.cond.L.Lock()
|
||||||
|
defer s.cond.L.Unlock()
|
||||||
|
|
||||||
|
if s.closed {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
s.buf = append(s.buf, colorio.Hidden...)
|
||||||
|
s.hideInput = true
|
||||||
|
}
|
||||||
|
func (s *ShIO) ShowInput() {
|
||||||
|
s.cond.L.Lock()
|
||||||
|
defer s.cond.L.Unlock()
|
||||||
|
|
||||||
|
if s.closed {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
s.buf = append(s.buf, colorio.Reset...)
|
||||||
|
s.hideInput = false
|
||||||
|
}
|
||||||
|
|
||||||
|
func (s *ShIO) Close() (err error) {
|
||||||
|
s.cond.L.Lock()
|
||||||
|
defer s.cond.L.Unlock()
|
||||||
|
|
||||||
|
s.closed = true
|
||||||
|
|
||||||
|
s.cond.Broadcast()
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
func (s *ShIO) NewReader() io.Reader {
|
||||||
|
return &shioReader{s, 0}
|
||||||
|
}
|
||||||
|
|
||||||
|
type shioReader struct {
|
||||||
|
in *ShIO
|
||||||
|
pos int
|
||||||
|
}
|
||||||
|
|
||||||
|
func (r *shioReader) Read(ba []byte) (n int, err error) {
|
||||||
|
r.in.cond.L.Lock()
|
||||||
|
defer r.in.cond.L.Unlock()
|
||||||
|
|
||||||
|
for r.pos == len(r.in.buf) && !r.in.closed {
|
||||||
|
r.in.cond.Wait()
|
||||||
|
}
|
||||||
|
|
||||||
|
if r.pos == len(r.in.buf) && r.in.closed {
|
||||||
|
err = io.EOF
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
n = copy(ba, r.in.buf[r.pos:])
|
||||||
|
r.pos += n
|
||||||
|
|
||||||
|
return
|
||||||
|
}
|
||||||
52
shio/shio_test.go
Normal file
52
shio/shio_test.go
Normal file
@ -0,0 +1,52 @@
|
|||||||
|
package shio
|
||||||
|
|
||||||
|
import (
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"os"
|
||||||
|
"sync"
|
||||||
|
"time"
|
||||||
|
)
|
||||||
|
|
||||||
|
func Example_output() {
|
||||||
|
done := false
|
||||||
|
defer func() { done = true }()
|
||||||
|
go func() {
|
||||||
|
time.Sleep(time.Second)
|
||||||
|
if !done {
|
||||||
|
panic("timeout")
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
shio := NewWithCap(3)
|
||||||
|
|
||||||
|
r1 := shio.NewReader()
|
||||||
|
|
||||||
|
// read as you write
|
||||||
|
wg := new(sync.WaitGroup)
|
||||||
|
wg.Add(1)
|
||||||
|
go func() {
|
||||||
|
defer wg.Done()
|
||||||
|
io.Copy(os.Stdout, r1)
|
||||||
|
fmt.Println("-- r1 done --")
|
||||||
|
}()
|
||||||
|
|
||||||
|
fmt.Fprintln(shio, "hello1")
|
||||||
|
fmt.Fprintln(shio, "hello2")
|
||||||
|
shio.Close()
|
||||||
|
|
||||||
|
wg.Wait()
|
||||||
|
|
||||||
|
// read after close
|
||||||
|
r2 := shio.NewReader()
|
||||||
|
io.Copy(os.Stdout, r2)
|
||||||
|
fmt.Println("-- r2 done --")
|
||||||
|
|
||||||
|
// Output:
|
||||||
|
// hello1
|
||||||
|
// hello2
|
||||||
|
// -- r1 done --
|
||||||
|
// hello1
|
||||||
|
// hello2
|
||||||
|
// -- r2 done --
|
||||||
|
}
|
||||||
1
src/bootstrap.rs
Normal file
1
src/bootstrap.rs
Normal file
@ -0,0 +1 @@
|
|||||||
|
pub mod config;
|
||||||
158
src/bootstrap/config.rs
Normal file
158
src/bootstrap/config.rs
Normal file
@ -0,0 +1,158 @@
|
|||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct Config {
|
||||||
|
pub anti_phishing_code: String,
|
||||||
|
|
||||||
|
pub keymap: Option<String>,
|
||||||
|
pub modules: Option<String>,
|
||||||
|
|
||||||
|
pub auths: Vec<Auth>,
|
||||||
|
|
||||||
|
pub networks: Vec<Network>,
|
||||||
|
|
||||||
|
#[serde(default)]
|
||||||
|
pub ssh: SSHServer,
|
||||||
|
|
||||||
|
#[serde(default)]
|
||||||
|
pub pre_lvm_crypt: Vec<CryptDev>,
|
||||||
|
#[serde(default)]
|
||||||
|
pub lvm: Vec<LvmVG>,
|
||||||
|
#[serde(default)]
|
||||||
|
pub crypt: Vec<CryptDev>,
|
||||||
|
|
||||||
|
pub bootstrap: Bootstrap,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct Auth {
|
||||||
|
pub name: String,
|
||||||
|
#[serde(rename = "sshKey")]
|
||||||
|
pub ssh_key: String,
|
||||||
|
pub password: String,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct Network {
|
||||||
|
pub name: String,
|
||||||
|
pub interfaces: Vec<NetworkInterface>,
|
||||||
|
pub script: String,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct NetworkInterface {
|
||||||
|
pub var: String,
|
||||||
|
pub n: usize,
|
||||||
|
pub regexps: Vec<String>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct SSHServer {
|
||||||
|
pub listen: String,
|
||||||
|
pub keys: SSHKeys,
|
||||||
|
}
|
||||||
|
impl Default for SSHServer {
|
||||||
|
fn default() -> Self {
|
||||||
|
Self {
|
||||||
|
listen: "[::]:22".to_string(),
|
||||||
|
keys: SSHKeys::default(),
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct SSHKeys {
|
||||||
|
dsa: Option<String>,
|
||||||
|
rsa: Option<String>,
|
||||||
|
ecdsa: Option<String>,
|
||||||
|
ed25519: Option<String>,
|
||||||
|
}
|
||||||
|
impl SSHKeys {
|
||||||
|
pub fn iter(&self) -> impl Iterator<Item = &str> {
|
||||||
|
[
|
||||||
|
self.dsa.iter(),
|
||||||
|
self.rsa.iter(),
|
||||||
|
self.ecdsa.iter(),
|
||||||
|
self.ed25519.iter(),
|
||||||
|
]
|
||||||
|
.into_iter()
|
||||||
|
.flatten()
|
||||||
|
.map(String::as_str)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
impl Default for SSHKeys {
|
||||||
|
fn default() -> Self {
|
||||||
|
Self {
|
||||||
|
dsa: Some("id_dsa".to_string()),
|
||||||
|
rsa: Some("id_rsa".to_string()),
|
||||||
|
ecdsa: Some("id_ecdsa".to_string()),
|
||||||
|
ed25519: Some("id_ed25519".to_string()),
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct LvmVG {
|
||||||
|
vg: String,
|
||||||
|
pvs: LvmPV,
|
||||||
|
|
||||||
|
#[serde(default)]
|
||||||
|
defaults: LvmLVDefaults,
|
||||||
|
|
||||||
|
lvs: Vec<LvmLV>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct LvmLVDefaults {
|
||||||
|
#[serde(default = "default_fs")]
|
||||||
|
fs: String,
|
||||||
|
raid: Option<Raid>,
|
||||||
|
}
|
||||||
|
impl Default for LvmLVDefaults {
|
||||||
|
fn default() -> Self {
|
||||||
|
Self {
|
||||||
|
fs: default_fs(),
|
||||||
|
raid: None,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
fn default_fs() -> String {
|
||||||
|
"ext4".to_string()
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct LvmLV {
|
||||||
|
name: String,
|
||||||
|
#[serde(skip_serializing_if = "Option::is_none")]
|
||||||
|
fs: Option<String>,
|
||||||
|
#[serde(skip_serializing_if = "Option::is_none")]
|
||||||
|
raid: Option<Raid>,
|
||||||
|
#[serde(skip_serializing_if = "Option::is_none")]
|
||||||
|
size: Option<String>,
|
||||||
|
#[serde(skip_serializing_if = "Option::is_none")]
|
||||||
|
extents: Option<String>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct LvmPV {
|
||||||
|
n: i16,
|
||||||
|
regexps: Vec<String>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct CryptDev {
|
||||||
|
name: String,
|
||||||
|
dev: Option<String>,
|
||||||
|
prefix: Option<String>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct Raid {
|
||||||
|
mirrors: Option<u8>,
|
||||||
|
stripes: Option<u8>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct Bootstrap {
|
||||||
|
dev: String,
|
||||||
|
seed: String,
|
||||||
|
}
|
||||||
5
src/cmd.rs
Normal file
5
src/cmd.rs
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
pub mod bootstrap;
|
||||||
|
pub mod connect_boot;
|
||||||
|
pub mod init;
|
||||||
|
pub mod init_input;
|
||||||
|
pub mod version;
|
||||||
0
src/cmd/bootstrap.rs
Normal file
0
src/cmd/bootstrap.rs
Normal file
0
src/cmd/connect_boot.rs
Normal file
0
src/cmd/connect_boot.rs
Normal file
233
src/cmd/init.rs
Normal file
233
src/cmd/init.rs
Normal file
@ -0,0 +1,233 @@
|
|||||||
|
use eyre::{format_err, Result};
|
||||||
|
use log::{error, info, warn};
|
||||||
|
use std::os::unix::fs::symlink;
|
||||||
|
use tokio::{fs, process::Command};
|
||||||
|
|
||||||
|
use crate::{bootstrap::config::Config, cmd::version::version_string};
|
||||||
|
|
||||||
|
mod dmcrypt;
|
||||||
|
mod networks;
|
||||||
|
mod sshd;
|
||||||
|
|
||||||
|
pub async fn run() {
|
||||||
|
if std::process::id() != 1 {
|
||||||
|
error!("init must run as PID 1, not {}", std::process::id());
|
||||||
|
std::process::exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
unsafe {
|
||||||
|
use std::env;
|
||||||
|
env::set_var("PATH", "/bin:/sbin:/usr/bin:/usr/sbin");
|
||||||
|
env::set_var("HOME", "/root");
|
||||||
|
}
|
||||||
|
|
||||||
|
info!("Welcome to {}", version_string());
|
||||||
|
|
||||||
|
let uname = nix::sys::utsname::uname().expect("uname should work");
|
||||||
|
let kernel_version = uname.release().to_string_lossy();
|
||||||
|
info!("Linux version {kernel_version}");
|
||||||
|
|
||||||
|
let cfg: Config = retry(async || {
|
||||||
|
let cfg = (fs::read("config.yaml").await)
|
||||||
|
.map_err(|e| format_err!("failed to read config: {e}"))?;
|
||||||
|
serde_yaml::from_slice(cfg.as_slice())
|
||||||
|
.map_err(|e| format_err!("failed to parse config: {e}"))
|
||||||
|
})
|
||||||
|
.await;
|
||||||
|
|
||||||
|
info!("config loaded");
|
||||||
|
info!("anti-phishing-code: {}", cfg.anti_phishing_code);
|
||||||
|
|
||||||
|
// mount basic filesystems
|
||||||
|
mount("none", "/proc", "proc", None).await;
|
||||||
|
mount("none", "/sys", "sysfs", None).await;
|
||||||
|
mount("none", "/dev", "devtmpfs", None).await;
|
||||||
|
mount("none", "/dev/pts", "devpts", Some("gid=5,mode=620")).await;
|
||||||
|
|
||||||
|
// mount modules
|
||||||
|
if let Some(ref modules) = cfg.modules {
|
||||||
|
retry_or_ignore(async || {
|
||||||
|
info!("mounting modules");
|
||||||
|
mount(modules, "/modules", "squashfs", None).await;
|
||||||
|
|
||||||
|
fs::create_dir_all("/lib/modules").await?;
|
||||||
|
let modules_path = &format!("/modules/lib/modules/{kernel_version}");
|
||||||
|
|
||||||
|
if !std::fs::exists(modules_path)? {
|
||||||
|
return Err(format_err!(
|
||||||
|
"invalid modules package: {modules_path} should exist"
|
||||||
|
));
|
||||||
|
}
|
||||||
|
|
||||||
|
symlink(modules_path, format!("/lib/modules/{kernel_version}"))?;
|
||||||
|
Ok(())
|
||||||
|
})
|
||||||
|
.await;
|
||||||
|
} else {
|
||||||
|
warn!("modules NOT mounted (not configured)");
|
||||||
|
}
|
||||||
|
|
||||||
|
// open input channels
|
||||||
|
tokio::spawn(crate::input::answer_requests_from_stdin());
|
||||||
|
tokio::spawn(crate::input::answer_requests_from_socket());
|
||||||
|
|
||||||
|
// init devices
|
||||||
|
info!("initializing devices");
|
||||||
|
start_daemon("udevd", &[]).await;
|
||||||
|
|
||||||
|
exec("udevadm", &["trigger", "-c", "add", "-t", "devices"]).await;
|
||||||
|
exec("udevadm", &["trigger", "-c", "add", "-t", "subsystems"]).await;
|
||||||
|
exec("udevadm", &["settle"]).await;
|
||||||
|
|
||||||
|
// networks
|
||||||
|
networks::setup(&cfg).await;
|
||||||
|
|
||||||
|
// Wireguard VPN
|
||||||
|
// TODO startVPN()
|
||||||
|
|
||||||
|
// SSH service
|
||||||
|
sshd::start(&cfg).await;
|
||||||
|
|
||||||
|
// dmcrypt blockdevs
|
||||||
|
dmcrypt::setup(&cfg).await;
|
||||||
|
// TODO setupCrypt(cfg.PreLVMCrypt, map[string]string{});
|
||||||
|
|
||||||
|
// LVM
|
||||||
|
// TODO setupLVM(cfg);
|
||||||
|
|
||||||
|
// bootstrap the system
|
||||||
|
// TODO bootstrap(cfg);
|
||||||
|
|
||||||
|
// finalize
|
||||||
|
// TODO finalizeBoot();
|
||||||
|
|
||||||
|
exec_shell().await;
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn mount(src: &str, dst: &str, fstype: &str, opts: Option<&str>) {
|
||||||
|
if let Err(e) = fs::create_dir_all(dst).await {
|
||||||
|
error!("failed to create dir {dst}: {e}");
|
||||||
|
}
|
||||||
|
|
||||||
|
let mut args = vec![src, dst, "-t", fstype];
|
||||||
|
if let Some(opts) = opts {
|
||||||
|
args.extend(["-o", opts]);
|
||||||
|
}
|
||||||
|
exec("mount", &args).await;
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn start_daemon(prog: &str, args: &[&str]) {
|
||||||
|
let (cmd_str, mut cmd) = cmd_str(prog, args);
|
||||||
|
retry_or_ignore(async || {
|
||||||
|
info!("starting as daemon: {cmd_str}");
|
||||||
|
cmd.spawn()?;
|
||||||
|
Ok(())
|
||||||
|
})
|
||||||
|
.await;
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn exec(prog: &str, args: &[&str]) {
|
||||||
|
let (cmd_str, mut cmd) = cmd_str(prog, args);
|
||||||
|
retry_or_ignore(async || {
|
||||||
|
info!("# {cmd_str}");
|
||||||
|
let s = cmd.status().await?;
|
||||||
|
if s.success() {
|
||||||
|
Ok(())
|
||||||
|
} else {
|
||||||
|
Err(format_err!("command failed: {s}"))
|
||||||
|
}
|
||||||
|
})
|
||||||
|
.await;
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn input_line() -> String {
|
||||||
|
use tokio::io::{stdin, AsyncBufReadExt, BufReader};
|
||||||
|
let mut stdin = BufReader::new(stdin()).lines();
|
||||||
|
let Ok(line) = stdin.next_line().await else {
|
||||||
|
panic!("unable to read a line");
|
||||||
|
};
|
||||||
|
line.expect("stdin should not the closed")
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn retry_or_ignore(mut action: impl AsyncFnMut() -> Result<()>) {
|
||||||
|
loop {
|
||||||
|
match action().await {
|
||||||
|
Ok(_) => return,
|
||||||
|
Err(e) => {
|
||||||
|
error!("{e}");
|
||||||
|
|
||||||
|
loop {
|
||||||
|
eprint!("[r]etry, [i]gnore, or [s]hell? ");
|
||||||
|
|
||||||
|
match input_line().await.trim() {
|
||||||
|
"r" => break,
|
||||||
|
"i" => return,
|
||||||
|
"s" => {
|
||||||
|
exec_shell().await;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
v => {
|
||||||
|
eprintln!("invalid choice: {v:?}");
|
||||||
|
}
|
||||||
|
};
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn retry<T>(mut action: impl AsyncFnMut() -> Result<T>) -> T {
|
||||||
|
loop {
|
||||||
|
match action().await {
|
||||||
|
Ok(v) => return v,
|
||||||
|
Err(e) => {
|
||||||
|
error!("{e}");
|
||||||
|
|
||||||
|
loop {
|
||||||
|
eprint!("[r]etry, or [s]hell? ");
|
||||||
|
|
||||||
|
match input_line().await.trim() {
|
||||||
|
"r" => break,
|
||||||
|
"s" => {
|
||||||
|
exec_shell().await;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
v => {
|
||||||
|
eprintln!("invalid choice: {v:?}");
|
||||||
|
}
|
||||||
|
};
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn exec_shell() {
|
||||||
|
let mut child = match Command::new("ash").spawn() {
|
||||||
|
Ok(c) => c,
|
||||||
|
Err(e) => {
|
||||||
|
error!("failed to exec shell: {e}");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
let _ = child.wait().await;
|
||||||
|
}
|
||||||
|
|
||||||
|
fn cmd_str(prog: &str, args: &[&str]) -> (String, Command) {
|
||||||
|
use std::borrow::Cow;
|
||||||
|
|
||||||
|
let mut buf = String::new();
|
||||||
|
|
||||||
|
buf.push_str(&shell_escape::escape(Cow::Borrowed(prog)));
|
||||||
|
|
||||||
|
for &arg in args {
|
||||||
|
buf.push(' ');
|
||||||
|
buf.push_str(&shell_escape::escape(Cow::Borrowed(arg)));
|
||||||
|
}
|
||||||
|
|
||||||
|
let mut cmd = Command::new(prog);
|
||||||
|
cmd.args(args);
|
||||||
|
|
||||||
|
(buf, cmd)
|
||||||
|
}
|
||||||
10
src/cmd/init/dmcrypt.rs
Normal file
10
src/cmd/init/dmcrypt.rs
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
use super::{retry_or_ignore, Config};
|
||||||
|
use crate::input;
|
||||||
|
|
||||||
|
pub async fn setup(cfg: &Config) {
|
||||||
|
let resp = input::read_line("input something: ").await;
|
||||||
|
println!("user response: {resp}");
|
||||||
|
let resp = input::read_password("input password: ").await;
|
||||||
|
println!("user response: {resp}");
|
||||||
|
// TODO
|
||||||
|
}
|
||||||
94
src/cmd/init/networks.rs
Normal file
94
src/cmd/init/networks.rs
Normal file
@ -0,0 +1,94 @@
|
|||||||
|
use itertools::Itertools;
|
||||||
|
use log::{info, warn};
|
||||||
|
use std::collections::BTreeSet as Set;
|
||||||
|
use tokio::process::Command;
|
||||||
|
|
||||||
|
use super::{format_err, retry_or_ignore, Config, Result};
|
||||||
|
use crate::{
|
||||||
|
bootstrap::config,
|
||||||
|
udev,
|
||||||
|
utils::{select_n_by_regex, NameAliases},
|
||||||
|
};
|
||||||
|
|
||||||
|
pub async fn setup(cfg: &Config) {
|
||||||
|
if cfg.networks.is_empty() {
|
||||||
|
warn!("no networks configured");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
let mut assigned = Set::new();
|
||||||
|
|
||||||
|
for net in &cfg.networks {
|
||||||
|
retry_or_ignore(async || setup_network(net, &mut assigned).await).await;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn setup_network(net: &config::Network, assigned: &mut Set<String>) -> Result<()> {
|
||||||
|
info!("setting up network {}", net.name);
|
||||||
|
|
||||||
|
let netdevs = get_interfaces()?
|
||||||
|
.filter(|dev| !assigned.contains(dev.name()))
|
||||||
|
.collect::<Vec<_>>();
|
||||||
|
|
||||||
|
for dev in &netdevs {
|
||||||
|
info!(
|
||||||
|
"- available network device: {}, aliases [{}]",
|
||||||
|
dev.name(),
|
||||||
|
dev.aliases().join(", ")
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
let mut cmd = Command::new("ash");
|
||||||
|
cmd.arg("-c");
|
||||||
|
cmd.arg(&net.script);
|
||||||
|
|
||||||
|
let mut selected = Vec::new();
|
||||||
|
|
||||||
|
for iface in &net.interfaces {
|
||||||
|
let var = &iface.var;
|
||||||
|
|
||||||
|
let netdevs = netdevs.iter().filter(|na| !assigned.contains(na.name()));
|
||||||
|
let if_names = select_n_by_regex(iface.n, &iface.regexps, netdevs);
|
||||||
|
|
||||||
|
if if_names.is_empty() {
|
||||||
|
return Err(format_err!("- no interface match for {var:?}"));
|
||||||
|
}
|
||||||
|
|
||||||
|
let value = if_names.join(" ");
|
||||||
|
info!("- {var}={value}");
|
||||||
|
cmd.env(var, value);
|
||||||
|
|
||||||
|
selected.extend(if_names);
|
||||||
|
}
|
||||||
|
|
||||||
|
info!("- running script");
|
||||||
|
let status = cmd.status().await?;
|
||||||
|
if !status.success() {
|
||||||
|
return Err(format_err!("setup script failed: {status}"));
|
||||||
|
}
|
||||||
|
|
||||||
|
assigned.extend(selected);
|
||||||
|
Ok(())
|
||||||
|
}
|
||||||
|
|
||||||
|
fn get_interfaces() -> Result<impl Iterator<Item = NameAliases>> {
|
||||||
|
Ok(udev::get_devices("net")?.into_iter().map(|dev| {
|
||||||
|
let mut na = NameAliases::new(dev.sysname().to_string());
|
||||||
|
|
||||||
|
for (property, value) in dev.properties() {
|
||||||
|
if [
|
||||||
|
"INTERFACE",
|
||||||
|
"ID_NET_NAME",
|
||||||
|
"ID_NET_NAME_PATH",
|
||||||
|
"ID_NET_NAME_MAC",
|
||||||
|
"ID_NET_NAME_SLOT",
|
||||||
|
]
|
||||||
|
.contains(&property)
|
||||||
|
{
|
||||||
|
na.push(value.to_string());
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
na
|
||||||
|
}))
|
||||||
|
}
|
||||||
86
src/cmd/init/sshd.rs
Normal file
86
src/cmd/init/sshd.rs
Normal file
@ -0,0 +1,86 @@
|
|||||||
|
use log::{info, warn};
|
||||||
|
use std::fs;
|
||||||
|
use std::io::Write;
|
||||||
|
use std::os::unix::fs::PermissionsExt;
|
||||||
|
use std::process::Stdio;
|
||||||
|
use tokio::net;
|
||||||
|
use tokio::process::Command;
|
||||||
|
|
||||||
|
use super::{retry_or_ignore, Config};
|
||||||
|
|
||||||
|
pub async fn start(cfg: &Config) {
|
||||||
|
retry_or_ignore(async || {
|
||||||
|
info!("ssh: writing authorized keys");
|
||||||
|
|
||||||
|
let ssh_dir = "/root/.ssh";
|
||||||
|
let authorized_keys = format!("{ssh_dir}/authorized_keys");
|
||||||
|
|
||||||
|
fs::create_dir_all(ssh_dir)?;
|
||||||
|
fs::set_permissions(ssh_dir, fs::Permissions::from_mode(0o700))?;
|
||||||
|
|
||||||
|
let mut ak = Vec::new();
|
||||||
|
|
||||||
|
for auth in &cfg.auths {
|
||||||
|
writeln!(ak, "{} {}", auth.ssh_key, auth.name)?;
|
||||||
|
}
|
||||||
|
|
||||||
|
fs::write(authorized_keys, ak)?;
|
||||||
|
Ok(())
|
||||||
|
})
|
||||||
|
.await;
|
||||||
|
|
||||||
|
retry_or_ignore(async || {
|
||||||
|
let mut sshd_args = Vec::new();
|
||||||
|
|
||||||
|
sshd_args.extend(["-i", "-E", "/var/log/sshd.log"]);
|
||||||
|
|
||||||
|
for key_path in cfg.ssh.keys.iter() {
|
||||||
|
if !fs::exists(key_path).is_ok_and(|b| b) {
|
||||||
|
info!("ssh: host key not found (ignored): {key_path}");
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
sshd_args.extend(["-h", key_path]);
|
||||||
|
}
|
||||||
|
|
||||||
|
let sshd_args = sshd_args.into_iter().map(String::from).collect();
|
||||||
|
|
||||||
|
// don't pre-start sshd as it should rarely be useful at this stage, use inetd-style.
|
||||||
|
let listen_addr = cfg.ssh.listen.clone();
|
||||||
|
info!("ssh: starting listener on {listen_addr}");
|
||||||
|
|
||||||
|
let listener = net::TcpListener::bind(listen_addr).await?;
|
||||||
|
|
||||||
|
tokio::spawn(handle_ssh_connections(listener, sshd_args));
|
||||||
|
|
||||||
|
Ok(())
|
||||||
|
})
|
||||||
|
.await;
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn handle_ssh_connections(listener: net::TcpListener, sshd_args: Vec<String>) {
|
||||||
|
loop {
|
||||||
|
let (stream, remote) = match listener.accept().await {
|
||||||
|
Ok(v) => v,
|
||||||
|
Err(e) => {
|
||||||
|
warn!("ssh: listener stopped: {e}");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
info!("ssh: new connection from {remote}");
|
||||||
|
|
||||||
|
use std::os::unix::io::{AsRawFd, FromRawFd};
|
||||||
|
let fd = stream.as_raw_fd();
|
||||||
|
|
||||||
|
let mut cmd = Command::new("/usr/sbin/sshd");
|
||||||
|
cmd.args(&sshd_args);
|
||||||
|
|
||||||
|
cmd.stdin(unsafe { Stdio::from_raw_fd(fd) });
|
||||||
|
cmd.stdout(unsafe { Stdio::from_raw_fd(fd) });
|
||||||
|
cmd.stderr(Stdio::null());
|
||||||
|
|
||||||
|
if let Err(e) = cmd.spawn() {
|
||||||
|
warn!("ssh: failed to start server: {e}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
11
src/cmd/init_input.rs
Normal file
11
src/cmd/init_input.rs
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
use crate::input;
|
||||||
|
|
||||||
|
pub async fn run() {
|
||||||
|
tokio::spawn(async {
|
||||||
|
if let Err(e) = input::forward_requests_from_socket().await {
|
||||||
|
eprintln!("failed to forwards requests from socket: {e}");
|
||||||
|
std::process::exit(1);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
input::answer_requests_from_stdin().await;
|
||||||
|
}
|
||||||
12
src/cmd/version.rs
Normal file
12
src/cmd/version.rs
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
pub fn run() {
|
||||||
|
println!("{}", version_string());
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn version_string() -> String {
|
||||||
|
format!(
|
||||||
|
"Direktil {} v{} (git commit {})",
|
||||||
|
env!("CARGO_PKG_NAME"),
|
||||||
|
env!("CARGO_PKG_VERSION"),
|
||||||
|
env!("GIT_COMMIT")
|
||||||
|
)
|
||||||
|
}
|
||||||
227
src/input.rs
Normal file
227
src/input.rs
Normal file
@ -0,0 +1,227 @@
|
|||||||
|
use log::warn;
|
||||||
|
use std::fmt::Display;
|
||||||
|
use std::sync::{Arc, LazyLock};
|
||||||
|
use tokio::io::{self, AsyncBufReadExt, AsyncWriteExt, BufReader};
|
||||||
|
use tokio::net;
|
||||||
|
use tokio::sync::{oneshot, watch, Mutex};
|
||||||
|
|
||||||
|
pub async fn read_line(prompt: impl Display) -> String {
|
||||||
|
read(prompt, false).await
|
||||||
|
}
|
||||||
|
|
||||||
|
pub async fn read_password(prompt: impl Display) -> String {
|
||||||
|
read(prompt, true).await
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Clone, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct InputRequest {
|
||||||
|
prompt: String,
|
||||||
|
hide: bool,
|
||||||
|
}
|
||||||
|
|
||||||
|
pub type Reply = Arc<Mutex<Option<oneshot::Sender<String>>>>;
|
||||||
|
|
||||||
|
static REQ: LazyLock<Mutex<watch::Sender<Option<(InputRequest, Reply)>>>> = LazyLock::new(|| {
|
||||||
|
let (tx, _) = watch::channel(None);
|
||||||
|
Mutex::new(tx)
|
||||||
|
});
|
||||||
|
static READ_MUTEX: Mutex<()> = Mutex::const_new(());
|
||||||
|
|
||||||
|
async fn read(prompt: impl Display, hide_input: bool) -> String {
|
||||||
|
let _read_lock = READ_MUTEX.lock();
|
||||||
|
|
||||||
|
let req = InputRequest {
|
||||||
|
prompt: prompt.to_string(),
|
||||||
|
hide: hide_input,
|
||||||
|
};
|
||||||
|
|
||||||
|
let (tx, rx) = oneshot::channel();
|
||||||
|
let reply = Arc::new(Mutex::new(Some(tx)));
|
||||||
|
|
||||||
|
REQ.lock().await.send_replace(Some((req, reply)));
|
||||||
|
|
||||||
|
let input = rx.await.expect("reply sender should not be closed");
|
||||||
|
|
||||||
|
REQ.lock().await.send_replace(None);
|
||||||
|
|
||||||
|
input
|
||||||
|
}
|
||||||
|
|
||||||
|
pub async fn answer_requests_from_stdin() {
|
||||||
|
let mut stdin = BufReader::new(io::stdin()).lines();
|
||||||
|
let mut stdout = io::stdout();
|
||||||
|
|
||||||
|
let mut current_req = REQ.lock().await.subscribe();
|
||||||
|
current_req.mark_changed();
|
||||||
|
|
||||||
|
loop {
|
||||||
|
// TODO check is stdin has been closed (using C-c is enough for now)
|
||||||
|
(current_req.changed().await).expect("input request should not close");
|
||||||
|
|
||||||
|
let Some((req, reply)) = current_req.borrow_and_update().clone() else {
|
||||||
|
continue;
|
||||||
|
};
|
||||||
|
|
||||||
|
// handle hide
|
||||||
|
let mut saved_termios = None;
|
||||||
|
if req.hide {
|
||||||
|
match termios::Termios::from_fd(0) {
|
||||||
|
Ok(mut tio) => {
|
||||||
|
saved_termios = Some(tio.clone());
|
||||||
|
tio.c_lflag &= !termios::ECHO;
|
||||||
|
if let Err(e) = termios::tcsetattr(0, termios::TCSAFLUSH, &tio) {
|
||||||
|
warn!("password will be echoed! Failed to set pty attrs: {e}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
Err(e) => {
|
||||||
|
warn!("password will be echoed! Failed to get pty attrs: {e}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// print the prompt and wait for user input
|
||||||
|
stdout.write_all(req.prompt.as_bytes()).await.unwrap();
|
||||||
|
stdout.flush().await.unwrap();
|
||||||
|
|
||||||
|
tokio::select!(
|
||||||
|
r = stdin.next_line() => {
|
||||||
|
let Ok(Some(line)) = r else {
|
||||||
|
warn!("stdin closed");
|
||||||
|
return;
|
||||||
|
};
|
||||||
|
|
||||||
|
if let Some(tx) = reply.lock().await.take() {
|
||||||
|
let _ = tx.send(line);
|
||||||
|
}
|
||||||
|
|
||||||
|
if saved_termios.is_some() {
|
||||||
|
// final '\n' is hidden too so fix it
|
||||||
|
stdout.write_all(b"\n").await.unwrap();
|
||||||
|
stdout.flush().await.unwrap();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
_ = current_req.changed() => {
|
||||||
|
// reply came from somewhere else
|
||||||
|
stdout.write_all(b"<answered>\n").await.unwrap();
|
||||||
|
stdout.flush().await.unwrap();
|
||||||
|
|
||||||
|
current_req.mark_changed();
|
||||||
|
}
|
||||||
|
);
|
||||||
|
|
||||||
|
// restore term if input was hidden
|
||||||
|
if let Some(tio) = saved_termios {
|
||||||
|
if let Err(e) = termios::tcsetattr(0, termios::TCSAFLUSH, &tio) {
|
||||||
|
warn!("failed to restore pty attrs: {e}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
const SOCKET_PATH: &str = "/run/init.sock";
|
||||||
|
|
||||||
|
pub async fn answer_requests_from_socket() {
|
||||||
|
let Ok(listener) = net::UnixListener::bind(SOCKET_PATH)
|
||||||
|
.inspect_err(|e| warn!("failed start input socket listener: {e}"))
|
||||||
|
else {
|
||||||
|
return;
|
||||||
|
};
|
||||||
|
|
||||||
|
loop {
|
||||||
|
let Ok((conn, _)) = (listener.accept())
|
||||||
|
.await
|
||||||
|
.inspect_err(|e| warn!("input socket listener failed: {e}"))
|
||||||
|
else {
|
||||||
|
return;
|
||||||
|
};
|
||||||
|
|
||||||
|
tokio::spawn(handle_connection(conn));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async fn handle_connection(conn: net::UnixStream) {
|
||||||
|
let mut current_req = REQ.lock().await.subscribe();
|
||||||
|
current_req.mark_changed();
|
||||||
|
|
||||||
|
let (rd, mut wr) = io::split(conn);
|
||||||
|
let mut rd = BufReader::new(rd).lines();
|
||||||
|
|
||||||
|
loop {
|
||||||
|
(current_req.changed().await).expect("input request should not close");
|
||||||
|
let Some((req, reply)) = current_req.borrow_and_update().clone() else {
|
||||||
|
if wr.write_all(b"null\n").await.is_err() {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
if wr.flush().await.is_err() {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
continue;
|
||||||
|
};
|
||||||
|
|
||||||
|
{
|
||||||
|
let mut buf = serde_json::to_vec(&req).unwrap();
|
||||||
|
buf.push(b'\n');
|
||||||
|
|
||||||
|
if (wr.write_all(&buf).await).is_err() {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
if wr.flush().await.is_err() {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
tokio::select!(
|
||||||
|
r = rd.next_line() => {
|
||||||
|
let Ok(Some(line)) = r else {
|
||||||
|
return; // closed
|
||||||
|
};
|
||||||
|
|
||||||
|
if let Some(tx) = reply.lock().await.take() {
|
||||||
|
let _ = tx.send(line);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
_ = current_req.changed() => {
|
||||||
|
// reply came from somewhere else
|
||||||
|
current_req.mark_changed();
|
||||||
|
}
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
pub async fn forward_requests_from_socket() -> eyre::Result<()> {
|
||||||
|
let stream = net::UnixStream::connect(SOCKET_PATH).await?;
|
||||||
|
|
||||||
|
let (rd, mut wr) = io::split(stream);
|
||||||
|
let mut rd = BufReader::new(rd).lines();
|
||||||
|
|
||||||
|
let mut line = rd.next_line().await?;
|
||||||
|
|
||||||
|
loop {
|
||||||
|
let Some(req) = line else {
|
||||||
|
return Ok(());
|
||||||
|
};
|
||||||
|
|
||||||
|
let req: Option<InputRequest> = serde_json::from_str(&req)?;
|
||||||
|
|
||||||
|
let Some(req) = req else {
|
||||||
|
// request answered from somewhere else
|
||||||
|
REQ.lock().await.send_replace(None);
|
||||||
|
line = rd.next_line().await?;
|
||||||
|
continue;
|
||||||
|
};
|
||||||
|
|
||||||
|
tokio::select!(
|
||||||
|
mut r = read(req.prompt, req.hide) => {
|
||||||
|
r.push('\n');
|
||||||
|
wr.write_all(r.as_bytes()).await?;
|
||||||
|
wr.flush().await?;
|
||||||
|
|
||||||
|
line = rd.next_line().await?;
|
||||||
|
}
|
||||||
|
l = rd.next_line() => {
|
||||||
|
line = l?;
|
||||||
|
}
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
7
src/lib.rs
Normal file
7
src/lib.rs
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
pub mod bootstrap;
|
||||||
|
pub mod cmd;
|
||||||
|
pub mod lsblk;
|
||||||
|
pub mod lvm;
|
||||||
|
pub mod udev;
|
||||||
|
pub mod utils;
|
||||||
|
pub mod input;
|
||||||
27
src/lsblk.rs
Normal file
27
src/lsblk.rs
Normal file
@ -0,0 +1,27 @@
|
|||||||
|
use std::io;
|
||||||
|
use std::process::Command;
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct Report {
|
||||||
|
pub blockdevices: Vec<BlockDev>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct BlockDev {
|
||||||
|
pub name: String,
|
||||||
|
#[serde(rename = "maj:min")]
|
||||||
|
pub maj_min: String,
|
||||||
|
pub rm: bool,
|
||||||
|
pub size: String,
|
||||||
|
pub ro: bool,
|
||||||
|
#[serde(rename = "type")]
|
||||||
|
pub dev_type: String,
|
||||||
|
pub mountpoints: Vec<Option<String>>,
|
||||||
|
#[serde(default)]
|
||||||
|
pub children: Vec<BlockDev>,
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn report() -> io::Result<Report> {
|
||||||
|
let output = Command::new("lsblk").arg("--json").output()?;
|
||||||
|
Ok(serde_json::from_slice(output.stdout.as_slice()).unwrap())
|
||||||
|
}
|
||||||
84
src/lvm.rs
Normal file
84
src/lvm.rs
Normal file
@ -0,0 +1,84 @@
|
|||||||
|
use std::io;
|
||||||
|
use std::process::Command;
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
struct Report {
|
||||||
|
report: Vec<ReportObj>,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, serde::Deserialize, serde::Serialize)]
|
||||||
|
#[serde(untagged)]
|
||||||
|
enum ReportObj {
|
||||||
|
PV { pv: Vec<PV> },
|
||||||
|
VG { vg: Vec<VG> },
|
||||||
|
LV { lv: Vec<LV> },
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, Clone, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct PV {
|
||||||
|
pub pv_name: String,
|
||||||
|
pub vg_name: String,
|
||||||
|
pub pv_fmt: String,
|
||||||
|
pub pv_attr: String,
|
||||||
|
pub pv_size: String,
|
||||||
|
pub pv_free: String,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, Clone, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct VG {
|
||||||
|
pub vg_name: String,
|
||||||
|
pub pv_count: String,
|
||||||
|
pub lv_count: String,
|
||||||
|
pub snap_count: String,
|
||||||
|
pub vg_attr: String,
|
||||||
|
pub vg_size: String,
|
||||||
|
pub vg_free: String,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, Clone, serde::Deserialize, serde::Serialize)]
|
||||||
|
pub struct LV {
|
||||||
|
lv_name: String,
|
||||||
|
vg_name: String,
|
||||||
|
lv_attr: String,
|
||||||
|
lv_size: String,
|
||||||
|
pool_lv: String,
|
||||||
|
origin: String,
|
||||||
|
data_percent: String,
|
||||||
|
metadata_percent: String,
|
||||||
|
move_pv: String,
|
||||||
|
mirror_log: String,
|
||||||
|
copy_percent: String,
|
||||||
|
convert_lv: String,
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn pvs() -> io::Result<Vec<PV>> {
|
||||||
|
report_cmd("pvs", |o| match o {
|
||||||
|
ReportObj::PV { pv } => Some(pv),
|
||||||
|
_ => None,
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn vgs() -> io::Result<Vec<VG>> {
|
||||||
|
report_cmd("vgs", |o| match o {
|
||||||
|
ReportObj::VG { vg } => Some(vg),
|
||||||
|
_ => None,
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn lvs() -> io::Result<Vec<LV>> {
|
||||||
|
report_cmd("lvs", |o| match o {
|
||||||
|
ReportObj::LV { lv } => Some(lv),
|
||||||
|
_ => None,
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
|
fn report_cmd<T>(cmd: &str, find: fn(ReportObj) -> Option<Vec<T>>) -> io::Result<Vec<T>> {
|
||||||
|
let output = Command::new(cmd).arg("--reportformat=json").output()?;
|
||||||
|
let report: Report = serde_json::from_slice(output.stdout.as_slice()).unwrap();
|
||||||
|
Ok(report
|
||||||
|
.report
|
||||||
|
.into_iter()
|
||||||
|
.filter_map(find)
|
||||||
|
.flatten()
|
||||||
|
.collect())
|
||||||
|
}
|
||||||
75
src/main.rs
Normal file
75
src/main.rs
Normal file
@ -0,0 +1,75 @@
|
|||||||
|
use eyre::Result;
|
||||||
|
use log::error;
|
||||||
|
use std::env;
|
||||||
|
use std::io::Write;
|
||||||
|
use std::process::exit;
|
||||||
|
|
||||||
|
use init::cmd;
|
||||||
|
|
||||||
|
#[tokio::main(flavor = "current_thread")]
|
||||||
|
async fn main() -> Result<()> {
|
||||||
|
let mut log_builder = env_logger::builder();
|
||||||
|
|
||||||
|
let call_name = env::args().next().unwrap_or("init".into());
|
||||||
|
let call_name = (call_name.rsplit_once('/').map(|(_, n)| n)).unwrap_or(call_name.as_str());
|
||||||
|
|
||||||
|
if call_name == "init" {
|
||||||
|
let mut lw = LogWriter::new();
|
||||||
|
lw.push(std::io::stderr());
|
||||||
|
lw.push(std::fs::File::create("/var/log/init.log")?);
|
||||||
|
|
||||||
|
log_builder.target(env_logger::Target::Pipe(Box::new(lw)));
|
||||||
|
}
|
||||||
|
|
||||||
|
log_builder
|
||||||
|
.format_timestamp_millis()
|
||||||
|
.format_target(false)
|
||||||
|
.filter_level(log::LevelFilter::Info)
|
||||||
|
.write_style(env_logger::WriteStyle::Always)
|
||||||
|
.init();
|
||||||
|
|
||||||
|
match call_name {
|
||||||
|
"init" => cmd::init::run().await,
|
||||||
|
"init-version" => cmd::version::run(),
|
||||||
|
"init-input" => cmd::init_input::run().await,
|
||||||
|
|
||||||
|
_ => {
|
||||||
|
error!("invalid call name: {call_name:?}");
|
||||||
|
exit(1);
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
Ok(())
|
||||||
|
}
|
||||||
|
|
||||||
|
struct LogWriter {
|
||||||
|
targets: Vec<Box<dyn Write + Send + 'static>>,
|
||||||
|
}
|
||||||
|
|
||||||
|
impl LogWriter {
|
||||||
|
pub fn new() -> Self {
|
||||||
|
Self {
|
||||||
|
targets: Vec::new(),
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn push<W: Write + Send + 'static>(&mut self, w: W) {
|
||||||
|
self.targets.push(Box::new(w));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl Write for LogWriter {
|
||||||
|
fn write(&mut self, buf: &[u8]) -> std::io::Result<usize> {
|
||||||
|
for target in self.targets.iter_mut() {
|
||||||
|
target.write_all(buf)?;
|
||||||
|
}
|
||||||
|
Ok(buf.len())
|
||||||
|
}
|
||||||
|
|
||||||
|
fn flush(&mut self) -> std::io::Result<()> {
|
||||||
|
for target in self.targets.iter_mut() {
|
||||||
|
target.flush()?;
|
||||||
|
}
|
||||||
|
Ok(())
|
||||||
|
}
|
||||||
|
}
|
||||||
65
src/udev.rs
Normal file
65
src/udev.rs
Normal file
@ -0,0 +1,65 @@
|
|||||||
|
use eyre::Result;
|
||||||
|
use log::error;
|
||||||
|
|
||||||
|
pub struct Device {
|
||||||
|
sysname: String,
|
||||||
|
output: String,
|
||||||
|
}
|
||||||
|
|
||||||
|
impl Device {
|
||||||
|
pub fn sysname(&self) -> &str {
|
||||||
|
self.sysname.as_str()
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn properties(&self) -> impl Iterator<Item = (&str, &str)> {
|
||||||
|
self.output
|
||||||
|
.lines()
|
||||||
|
.filter_map(|line| line.strip_prefix("E: ")?.split_once('='))
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn get_devices(class: &str) -> Result<Vec<Device>> {
|
||||||
|
let mut devices = Vec::new();
|
||||||
|
|
||||||
|
// none of libudev and udev crates were able to list network devices.
|
||||||
|
// falling back to manual sysfs scanning :(
|
||||||
|
//
|
||||||
|
// Even when given a syspath,
|
||||||
|
// - udev crate failed to see all properties;
|
||||||
|
// - libudev crate segfaulted on the second property (SYSNUM ok, then segfault).
|
||||||
|
// falling back to parsing udevadm output :(
|
||||||
|
//
|
||||||
|
// The best fix would be to check what's wrong with udev crate.
|
||||||
|
|
||||||
|
let entries = std::fs::read_dir(format!("/sys/class/{class}"))?;
|
||||||
|
for entry in entries {
|
||||||
|
let Ok(entry) = entry else {
|
||||||
|
continue;
|
||||||
|
};
|
||||||
|
|
||||||
|
let path = entry.path();
|
||||||
|
let path = path.to_string_lossy();
|
||||||
|
|
||||||
|
let output = std::process::Command::new("udevadm")
|
||||||
|
.args(&["info", &format!("--path={path}")])
|
||||||
|
.stderr(std::process::Stdio::piped())
|
||||||
|
.output()?;
|
||||||
|
|
||||||
|
if !output.status.success() {
|
||||||
|
error!("udevadm fail for {path}");
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
|
let output = String::from_utf8_lossy(&output.stdout);
|
||||||
|
|
||||||
|
let name = entry.file_name();
|
||||||
|
let dev = Device {
|
||||||
|
sysname: name.to_string_lossy().to_string(),
|
||||||
|
output: output.into_owned(),
|
||||||
|
};
|
||||||
|
|
||||||
|
devices.push(dev);
|
||||||
|
}
|
||||||
|
|
||||||
|
Ok(devices)
|
||||||
|
}
|
||||||
61
src/utils.rs
Normal file
61
src/utils.rs
Normal file
@ -0,0 +1,61 @@
|
|||||||
|
use log::error;
|
||||||
|
use std::collections::BTreeSet as Set;
|
||||||
|
|
||||||
|
pub struct NameAliases {
|
||||||
|
name: String,
|
||||||
|
aliases: Set<String>,
|
||||||
|
}
|
||||||
|
|
||||||
|
impl NameAliases {
|
||||||
|
pub fn new(name: String) -> Self {
|
||||||
|
Self {
|
||||||
|
name,
|
||||||
|
aliases: Set::new(),
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn name(&self) -> &str {
|
||||||
|
self.name.as_str()
|
||||||
|
}
|
||||||
|
pub fn aliases(&self) -> impl Iterator<Item = &str> {
|
||||||
|
self.aliases.iter().map(|s| s.as_str())
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn iter(&self) -> impl Iterator<Item = &str> {
|
||||||
|
std::iter::once(self.name()).chain(self.aliases())
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn push(&mut self, alias: String) {
|
||||||
|
if self.name == alias {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
self.aliases.insert(alias);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
pub fn select_n_by_regex<'t>(
|
||||||
|
n: usize,
|
||||||
|
regexs: &Vec<String>,
|
||||||
|
nas: impl Iterator<Item = &'t NameAliases>,
|
||||||
|
) -> Vec<String> {
|
||||||
|
// compile regexs
|
||||||
|
let regexs: Vec<_> = (regexs.iter())
|
||||||
|
.filter_map(|re| {
|
||||||
|
regex::Regex::new(re)
|
||||||
|
.inspect_err(|e| error!("invalid regex ignored: {re:?}: {e}"))
|
||||||
|
.ok()
|
||||||
|
})
|
||||||
|
.collect();
|
||||||
|
|
||||||
|
let matching = |name| regexs.iter().any(|re| re.is_match(name));
|
||||||
|
|
||||||
|
let nas = nas
|
||||||
|
.filter(|na| na.iter().any(matching))
|
||||||
|
.map(|na| na.name().to_string());
|
||||||
|
|
||||||
|
if n <= 0 {
|
||||||
|
nas.collect()
|
||||||
|
} else {
|
||||||
|
nas.take(n).collect()
|
||||||
|
}
|
||||||
|
}
|
||||||
281
ssh.go
Normal file
281
ssh.go
Normal file
@ -0,0 +1,281 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"encoding/binary"
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"net"
|
||||||
|
"os"
|
||||||
|
"os/exec"
|
||||||
|
"sync"
|
||||||
|
"syscall"
|
||||||
|
"time"
|
||||||
|
"unsafe"
|
||||||
|
|
||||||
|
"github.com/creack/pty"
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
"golang.org/x/crypto/ssh"
|
||||||
|
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
)
|
||||||
|
|
||||||
|
func startSSH(cfg *config.Config) {
|
||||||
|
sshConfig := &ssh.ServerConfig{
|
||||||
|
PublicKeyCallback: sshCheckPubkey,
|
||||||
|
}
|
||||||
|
|
||||||
|
hostKeyLoaded := false
|
||||||
|
|
||||||
|
for _, format := range []string{"rsa", "dsa", "ecdsa", "ed25519"} {
|
||||||
|
log := log.With().Str("format", format).Logger()
|
||||||
|
|
||||||
|
pkBytes, err := os.ReadFile("/id_" + format)
|
||||||
|
if err != nil {
|
||||||
|
log.Error().Err(err).Msg("ssh: failed to load host key")
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
pk, err := ssh.ParsePrivateKey(pkBytes)
|
||||||
|
if err != nil {
|
||||||
|
log.Error().Err(err).Msg("ssh: failed to parse host key")
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
sshConfig.AddHostKey(pk)
|
||||||
|
hostKeyLoaded = true
|
||||||
|
|
||||||
|
log.Info().Msg("ssh: loaded host key")
|
||||||
|
}
|
||||||
|
|
||||||
|
if !hostKeyLoaded {
|
||||||
|
fatalf("ssh: failed to load any host key")
|
||||||
|
}
|
||||||
|
|
||||||
|
sshBind := ":22" // TODO configurable
|
||||||
|
listener, err := net.Listen("tcp", sshBind)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("ssh: failed to listen on %s: %v", sshBind, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Info().Str("bind-address", sshBind).Msg("SSH server listening")
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
for {
|
||||||
|
conn, err := listener.Accept()
|
||||||
|
if err != nil {
|
||||||
|
log.Info().Err(err).Msg("ssh: accept conn failed")
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
go sshHandleConn(conn, sshConfig)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func sshHandleConn(conn net.Conn, sshConfig *ssh.ServerConfig) {
|
||||||
|
sshConn, chans, reqs, err := ssh.NewServerConn(conn, sshConfig)
|
||||||
|
|
||||||
|
if err != nil {
|
||||||
|
log.Error().Err(err).Msg("ssh: handshake failed")
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
remoteAddr := sshConn.User() + "@" + sshConn.RemoteAddr().String()
|
||||||
|
log.Info().Str("remote", remoteAddr).Msg("ssh: new connection")
|
||||||
|
|
||||||
|
go sshHandleReqs(reqs)
|
||||||
|
go sshHandleChannels(remoteAddr, chans)
|
||||||
|
}
|
||||||
|
|
||||||
|
func sshHandleReqs(reqs <-chan *ssh.Request) {
|
||||||
|
for req := range reqs {
|
||||||
|
switch req.Type {
|
||||||
|
case "keepalive@openssh.com":
|
||||||
|
req.Reply(true, nil)
|
||||||
|
|
||||||
|
default:
|
||||||
|
log.Info().Str("type", req.Type).Msg("ssh: discarding request")
|
||||||
|
req.Reply(false, nil)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func sshHandleChannels(remoteAddr string, chans <-chan ssh.NewChannel) {
|
||||||
|
for newChannel := range chans {
|
||||||
|
if t := newChannel.ChannelType(); t != "session" {
|
||||||
|
newChannel.Reject(ssh.UnknownChannelType, fmt.Sprintf("unknown channel type: %s", t))
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
channel, requests, err := newChannel.Accept()
|
||||||
|
if err != nil {
|
||||||
|
log.Error().Err(err).Msg("ssh: failed to accept channel")
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
go sshHandleChannel(remoteAddr, channel, requests)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func sshHandleChannel(remoteAddr string, channel ssh.Channel, requests <-chan *ssh.Request) {
|
||||||
|
var (
|
||||||
|
ptyF, ttyF *os.File
|
||||||
|
termEnv string
|
||||||
|
)
|
||||||
|
|
||||||
|
defer func() {
|
||||||
|
if ptyF != nil {
|
||||||
|
ptyF.Close()
|
||||||
|
}
|
||||||
|
if ttyF != nil {
|
||||||
|
ttyF.Close()
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
var once sync.Once
|
||||||
|
closeCh := func() {
|
||||||
|
channel.Close()
|
||||||
|
}
|
||||||
|
|
||||||
|
for req := range requests {
|
||||||
|
switch req.Type {
|
||||||
|
case "exec":
|
||||||
|
command := string(req.Payload[4 : req.Payload[3]+4])
|
||||||
|
switch command {
|
||||||
|
case "init":
|
||||||
|
if ptyF == nil {
|
||||||
|
go func() {
|
||||||
|
channel.Stderr().Write([]byte("\033[5m\033[31;1m\n\nWARNING: no TTY requested, passwords will be echoed!\n\n\033[0m"))
|
||||||
|
time.Sleep(3 * time.Second)
|
||||||
|
io.Copy(channel, stdout.NewReader())
|
||||||
|
once.Do(closeCh)
|
||||||
|
}()
|
||||||
|
go func() {
|
||||||
|
io.Copy(stdinPipe, channel)
|
||||||
|
once.Do(closeCh)
|
||||||
|
}()
|
||||||
|
|
||||||
|
} else {
|
||||||
|
stdinTTY := newTTY(ptyF.Fd())
|
||||||
|
if askingSecret.Load() {
|
||||||
|
stdinTTY.EchoOff()
|
||||||
|
}
|
||||||
|
registerInput(stdinTTY)
|
||||||
|
defer unregiterInput(stdinTTY)
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
io.Copy(ttyF, stdout.NewReader())
|
||||||
|
once.Do(closeCh)
|
||||||
|
}()
|
||||||
|
go func() {
|
||||||
|
io.Copy(stdinPipe, ttyF)
|
||||||
|
once.Do(closeCh)
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
req.Reply(true, nil)
|
||||||
|
|
||||||
|
case "bootstrap":
|
||||||
|
// extract a new bootstrap package
|
||||||
|
os.MkdirAll("/bootstrap/current", 0750)
|
||||||
|
|
||||||
|
cmd := exec.Command("/bin/tar", "xv", "-C", "/bootstrap/current")
|
||||||
|
cmd.Stdin = channel
|
||||||
|
cmd.Stdout = channel
|
||||||
|
cmd.Stderr = channel.Stderr()
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
cmd.Run()
|
||||||
|
closeCh()
|
||||||
|
}()
|
||||||
|
|
||||||
|
req.Reply(true, nil)
|
||||||
|
|
||||||
|
default:
|
||||||
|
req.Reply(false, nil)
|
||||||
|
}
|
||||||
|
|
||||||
|
case "shell":
|
||||||
|
cmd := exec.Command("/bin/ash")
|
||||||
|
cmd.Env = []string{"TERM=" + termEnv}
|
||||||
|
cmd.Stdin = ttyF
|
||||||
|
cmd.Stdout = ttyF
|
||||||
|
cmd.Stderr = ttyF
|
||||||
|
cmd.SysProcAttr = &syscall.SysProcAttr{
|
||||||
|
Setctty: true,
|
||||||
|
Setsid: true,
|
||||||
|
Pdeathsig: syscall.SIGKILL,
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd.Start()
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
cmd.Wait()
|
||||||
|
ptyF.Close()
|
||||||
|
ptyF = nil
|
||||||
|
ttyF.Close()
|
||||||
|
ttyF = nil
|
||||||
|
}()
|
||||||
|
|
||||||
|
req.Reply(true, nil)
|
||||||
|
|
||||||
|
case "pty-req":
|
||||||
|
if ptyF != nil || ttyF != nil {
|
||||||
|
req.Reply(false, nil)
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
var err error
|
||||||
|
ptyF, ttyF, err = pty.Open()
|
||||||
|
if err != nil {
|
||||||
|
log.Error().Err(err).Msg("ssh: PTY open failed")
|
||||||
|
req.Reply(false, nil)
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
|
||||||
|
termLen := req.Payload[3]
|
||||||
|
termEnv = string(req.Payload[4 : termLen+4])
|
||||||
|
w, h := sshParseDims(req.Payload[termLen+4:])
|
||||||
|
sshSetWinsize(ptyF.Fd(), w, h)
|
||||||
|
|
||||||
|
req.Reply(true, nil)
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
io.Copy(channel, ptyF)
|
||||||
|
once.Do(closeCh)
|
||||||
|
}()
|
||||||
|
go func() {
|
||||||
|
io.Copy(ptyF, channel)
|
||||||
|
once.Do(closeCh)
|
||||||
|
}()
|
||||||
|
|
||||||
|
case "window-change":
|
||||||
|
w, h := sshParseDims(req.Payload)
|
||||||
|
sshSetWinsize(ptyF.Fd(), w, h)
|
||||||
|
// no response
|
||||||
|
|
||||||
|
default:
|
||||||
|
req.Reply(false, nil)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func sshParseDims(b []byte) (uint32, uint32) {
|
||||||
|
w := binary.BigEndian.Uint32(b)
|
||||||
|
h := binary.BigEndian.Uint32(b[4:])
|
||||||
|
return w, h
|
||||||
|
}
|
||||||
|
|
||||||
|
// SetWinsize sets the size of the given pty.
|
||||||
|
func sshSetWinsize(fd uintptr, w, h uint32) {
|
||||||
|
// Winsize stores the Height and Width of a terminal.
|
||||||
|
type Winsize struct {
|
||||||
|
Height uint16
|
||||||
|
Width uint16
|
||||||
|
x uint16 // unused
|
||||||
|
y uint16 // unused
|
||||||
|
}
|
||||||
|
|
||||||
|
ws := &Winsize{Width: uint16(w), Height: uint16(h)}
|
||||||
|
syscall.Syscall(syscall.SYS_IOCTL, fd, uintptr(syscall.TIOCSWINSZ), uintptr(unsafe.Pointer(ws)))
|
||||||
|
}
|
||||||
88
test-initrd/config.yaml
Normal file
88
test-initrd/config.yaml
Normal file
@ -0,0 +1,88 @@
|
|||||||
|
---
|
||||||
|
# early system configuration
|
||||||
|
anti_phishing_code: "direktil<3"
|
||||||
|
|
||||||
|
modules: /modules.sqfs
|
||||||
|
|
||||||
|
auths:
|
||||||
|
- name: novit
|
||||||
|
sshKey: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICkpbU6sf4t0f6XAv9DuW3XH5iLM0AI5rc8PT2jwea1N
|
||||||
|
password: bXlzZWVk:HMSxrg1cYphaPuUYUbtbl/htep/tVYYIQAuvkNMVpw0 # mypass
|
||||||
|
|
||||||
|
networks:
|
||||||
|
- name: loopback
|
||||||
|
interfaces: [ { var: iface, n: 1, regexps: [ "^lo$" ] } ]
|
||||||
|
script: |
|
||||||
|
ip a add 127.0.0.1/8 dev lo
|
||||||
|
ip a add ::1/128 dev lo
|
||||||
|
ip li set lo up
|
||||||
|
- name: main
|
||||||
|
interfaces:
|
||||||
|
- var: iface
|
||||||
|
n: 1
|
||||||
|
regexps:
|
||||||
|
- eth.*
|
||||||
|
- veth.*
|
||||||
|
- eno.*
|
||||||
|
- enp.*
|
||||||
|
script: |
|
||||||
|
ip li set $iface up
|
||||||
|
udhcpc -i $iface -b -t1 -T1 -A5 ||
|
||||||
|
ip a add 2001:41d0:306:168f::1337:2eed/64 dev $iface
|
||||||
|
|
||||||
|
pre_lvm_crypt:
|
||||||
|
- dev: /dev/vda
|
||||||
|
name: sys0
|
||||||
|
- dev: /dev/vdb
|
||||||
|
name: sys1
|
||||||
|
|
||||||
|
lvm:
|
||||||
|
- vg: storage
|
||||||
|
pvs:
|
||||||
|
n: 2
|
||||||
|
regexps:
|
||||||
|
- /dev/mapper/sys[01]
|
||||||
|
# to match full disks
|
||||||
|
#- /dev/nvme[0-9]+n[0-9]+
|
||||||
|
#- /dev/vd[a-z]+
|
||||||
|
#- /dev/sd[a-z]+
|
||||||
|
#- /dev/hd[a-z]+
|
||||||
|
# to match partitions:
|
||||||
|
#- /dev/nvme[0-9]+n[0-9]+p[0-9]+
|
||||||
|
#- /dev/vd[a-z]+[0-9]+
|
||||||
|
#- /dev/sd[a-z]+[0-9]+
|
||||||
|
#- /dev/hd[a-z]+[0-9]+
|
||||||
|
|
||||||
|
defaults:
|
||||||
|
fs: ext4
|
||||||
|
raid:
|
||||||
|
mirrors: 1
|
||||||
|
|
||||||
|
lvs:
|
||||||
|
- name: bootstrap
|
||||||
|
size: 2g
|
||||||
|
|
||||||
|
- name: varlog
|
||||||
|
extents: 10%FREE
|
||||||
|
# size: 10g
|
||||||
|
|
||||||
|
- name: podman
|
||||||
|
extents: 10%FREE
|
||||||
|
# size: 10g
|
||||||
|
|
||||||
|
- name: dls
|
||||||
|
extents: 100%FREE
|
||||||
|
# size: 10g
|
||||||
|
|
||||||
|
#crypt:
|
||||||
|
#- dev: /dev/storage/bootstrap
|
||||||
|
#- dev: /dev/storage/dls
|
||||||
|
|
||||||
|
bootstrap:
|
||||||
|
#dev: /dev/mapper/bootstrap
|
||||||
|
dev: /dev/storage/bootstrap
|
||||||
|
# TODO seed: https://direktil.novit.io/bootstraps/dls-crypt
|
||||||
|
seed: http://192.168.10.254:7606/hosts/m1/bootstrap.tar
|
||||||
|
# TODO seed_sign_key: "..."
|
||||||
|
# TODO load_and_close: true
|
||||||
|
|
||||||
2
test-initrd/env
Normal file
2
test-initrd/env
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
gateway=192.168.1.1/24
|
||||||
|
address=192.168.1.27/24
|
||||||
9
test-initrd/id_ecdsa
Normal file
9
test-initrd/id_ecdsa
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
-----BEGIN OPENSSH PRIVATE KEY-----
|
||||||
|
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAaAAAABNlY2RzYS
|
||||||
|
1zaGEyLW5pc3RwMjU2AAAACG5pc3RwMjU2AAAAQQSlevO48OA0/yB8zTP1naijVU3wsB0c
|
||||||
|
4s6Jc/8y7YwNq51/SlieeGeRFcCSke5Z67rNX2JFiv+tsGQB6TczZm/6AAAAqDU5b2c1OW
|
||||||
|
9nAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKV687jw4DT/IHzN
|
||||||
|
M/WdqKNVTfCwHRzizolz/zLtjA2rnX9KWJ54Z5EVwJKR7lnrus1fYkWK/62wZAHpNzNmb/
|
||||||
|
oAAAAhANenGXlP1ZPgcyb/+O57MbpGDOZS4e7UNiyvkD8I3hNnAAAACW53cmtAbndyawEC
|
||||||
|
AwQFBg==
|
||||||
|
-----END OPENSSH PRIVATE KEY-----
|
||||||
7
test-initrd/id_ed25519
Normal file
7
test-initrd/id_ed25519
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
-----BEGIN OPENSSH PRIVATE KEY-----
|
||||||
|
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
|
||||||
|
QyNTUxOQAAACCCMX0zm3Fi7vXWevHuJvzU30l5F06NAC2qloUewVSoDQAAAJDnq/y456v8
|
||||||
|
uAAAAAtzc2gtZWQyNTUxOQAAACCCMX0zm3Fi7vXWevHuJvzU30l5F06NAC2qloUewVSoDQ
|
||||||
|
AAAEDXYq507MsjSN34Qw87guf3d5D4Dt2IrF788CeBcYSNe4IxfTObcWLu9dZ68e4m/NTf
|
||||||
|
SXkXTo0ALaqWhR7BVKgNAAAACW53cmtAbndyawECAwQ=
|
||||||
|
-----END OPENSSH PRIVATE KEY-----
|
||||||
38
test-initrd/id_rsa
Normal file
38
test-initrd/id_rsa
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
-----BEGIN OPENSSH PRIVATE KEY-----
|
||||||
|
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn
|
||||||
|
NhAAAAAwEAAQAAAYEAy6Ppr/tBiVYsBYiteGwMPI+B2BSBn+CP36ZiKsx6IX+9E0/nGKgC
|
||||||
|
khwWFfrmIzS2EIm+iIv7YT3sXsqcO96au2ewh77m5xUFIrqie5c13leNeOn+Xhy++v0705
|
||||||
|
irYUuBVRbWukpQjhOrp0eqvBzOdlUoo2r7aF95rrMboAsIWh5gTTnVCXDSEQiHsvEGjs7T
|
||||||
|
ytOXQ6zmYTECYEkk/wUWja7WNP8UZiaPuU20Hso8g7kHSthKEudUDFs7E/yx+na0AYCnfE
|
||||||
|
UR6oxIbHH2ldgpnX7lTv5YhHVvNnqTIBQhmLTHrT/67N2z5AvdFC8T2UsrWs+3ebsdXb0o
|
||||||
|
Kzx81+N9OpPxj93ehLznncuCCgAedye5Xm760SOaU1T2b3f0bEhhsVCMI39mPExeZ2wtnd
|
||||||
|
g+Tmrqn3r59vb3iEYfJqvgLCTJ5L1BcFUTfulg7GfhfNvgBmgiiRTUC2G0SrV1tM84vsE7
|
||||||
|
JyyTcJaXr0X+tUgsXoUqnlX53OEw7ABskWvZ0m0fAAAFiBu7krYbu5K2AAAAB3NzaC1yc2
|
||||||
|
EAAAGBAMuj6a/7QYlWLAWIrXhsDDyPgdgUgZ/gj9+mYirMeiF/vRNP5xioApIcFhX65iM0
|
||||||
|
thCJvoiL+2E97F7KnDvemrtnsIe+5ucVBSK6onuXNd5XjXjp/l4cvvr9O9OYq2FLgVUW1r
|
||||||
|
pKUI4Tq6dHqrwcznZVKKNq+2hfea6zG6ALCFoeYE051Qlw0hEIh7LxBo7O08rTl0Os5mEx
|
||||||
|
AmBJJP8FFo2u1jT/FGYmj7lNtB7KPIO5B0rYShLnVAxbOxP8sfp2tAGAp3xFEeqMSGxx9p
|
||||||
|
XYKZ1+5U7+WIR1bzZ6kyAUIZi0x60/+uzds+QL3RQvE9lLK1rPt3m7HV29KCs8fNfjfTqT
|
||||||
|
8Y/d3oS8553LggoAHncnuV5u+tEjmlNU9m939GxIYbFQjCN/ZjxMXmdsLZ3YPk5q6p96+f
|
||||||
|
b294hGHyar4CwkyeS9QXBVE37pYOxn4Xzb4AZoIokU1AthtEq1dbTPOL7BOycsk3CWl69F
|
||||||
|
/rVILF6FKp5V+dzhMOwAbJFr2dJtHwAAAAMBAAEAAAGBAJ0rDBBjtkgd9unqfCAmHCedht
|
||||||
|
RTt1vCgKhXjQqFOHmkUjSWhcD04s8L2EvskjR32VDYTvKqP0Dk/wqGC6D1hKzBMXEDeMi+
|
||||||
|
43DTZNZIdS3+mtTInCbcvtWOHt+HxDXahZ47e0zaUGPncKMx3+dBwGN6BFxkFFeQ4KRh3h
|
||||||
|
9ehHqxWRghW3fm2GqHD9yew7XykWnIdsWnq0M2BSR1L5WXwrllSDQs7vyMJH8bJrpg0eXE
|
||||||
|
J4mvdzQx0B+dRfJ+JIsvkwvieAPb6sPmSgY47moP0xhbvs7/1UxPEY0Q2FpjQALQ0CnIC2
|
||||||
|
LRHvGb7NJEX/ASDy/s1CNlk5ro/iht28wh0Iq8iqqpRkgKyhYsr8+QChs6oxcbx2xPRVy4
|
||||||
|
NOBMLW6ppjIQO3rE79zPrp9tTmew5iQ4V58+DqhAZxeI4A6YZE98rAvRREqnT6HVmqtfHl
|
||||||
|
gPMlrSDw1I8ZN8QT1dD1sMbi4Ud0eHdg1xLUpJ3dStgN45yhBiWuR2x4Jbn8ayeZwJmQAA
|
||||||
|
AMA971gUyqrb7D6oFerzx3prijJoZOLE1Zluo3Q9Ise4KgDZ66QDE7mQRzSEniZcy77mSt
|
||||||
|
VOhjVmI5CXREbpdGU6LxJujIAm4pKwyVEV8XVAzII6s4He5QUBxiLYWHDro3bOSmOZ50tk
|
||||||
|
WBTO7llCR5FGbi7iJ1CP0C+CXRSaH8ug8Xqd0HBzTB2nXTGJNyx9lBwLY837VcdUIRrr+7
|
||||||
|
QzVD/BQ/v+Ch21Ck0kMtLCv+lrXAeowsK89ExDp4HqMnOHnT0AAADBAObxbkJeoXfkmV7e
|
||||||
|
0nAyQ/IDTs3Zlm3517mTzvc7j2o0qJQty+9pLD60S5s0VUpQpgeT3LzXRZ2eZlq3FcWsRa
|
||||||
|
HyiovF6L5OUik1gVc/QiP+x6QSLdFi/ROHRT7DZFQ+1/bquGgVsoEVZJPDz7NJvBPLYwmj
|
||||||
|
EGRZeKWVjIcDLSGq6fek9aTFUe7bcDCHx+QuovxeFWncmTNYC7jaYMff6DtHjokLgsyOzF
|
||||||
|
FjYEC9wFVrEz+9oegDxatiJpWJN1zTWwAAAMEA4bwhyUDs0oyQ+16xpdd4f8PYfQ0HoLow
|
||||||
|
ckvWCNS2Xmpnbe+dYqqRw7mchnYj4uXvhi391LwWTea5bQ78Hj+DnMugOLmmcHuFAbkxeL
|
||||||
|
9x97iCIUrli5wawGfJgwPiGJlATUVz9Y3BOcg+uBmQ9qGR6wdI6N+zuu/54gGzW2gVanYs
|
||||||
|
Gs0JH+C+afZ2yitUuGXDIVlYdgjESIszdK0wNGzZ4HDleFVhK3jFiK1CHHBb89Tbmd6fMZ
|
||||||
|
NWpcpue2AYSUyNAAAADXRlc3RAbm92aXQuaW8BAgMEBQ==
|
||||||
|
-----END OPENSSH PRIVATE KEY-----
|
||||||
BIN
test-initrd/modules.sqfs
Normal file
BIN
test-initrd/modules.sqfs
Normal file
Binary file not shown.
BIN
test-kernel
Normal file
BIN
test-kernel
Normal file
Binary file not shown.
19
tools/cpiocat/main.go
Normal file
19
tools/cpiocat/main.go
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"flag"
|
||||||
|
"fmt"
|
||||||
|
"os"
|
||||||
|
|
||||||
|
"novit.tech/direktil/pkg/cpiocat"
|
||||||
|
)
|
||||||
|
|
||||||
|
func main() {
|
||||||
|
flag.Parse()
|
||||||
|
|
||||||
|
err := cpiocat.Append(os.Stdout, os.Stdin, flag.Args())
|
||||||
|
if err != nil {
|
||||||
|
fmt.Fprintln(os.Stderr, err.Error())
|
||||||
|
os.Exit(1)
|
||||||
|
}
|
||||||
|
}
|
||||||
37
tools/testconf/main.go
Normal file
37
tools/testconf/main.go
Normal file
@ -0,0 +1,37 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bytes"
|
||||||
|
"flag"
|
||||||
|
"fmt"
|
||||||
|
"os"
|
||||||
|
|
||||||
|
"gopkg.in/yaml.v3"
|
||||||
|
config "novit.tech/direktil/pkg/bootstrapconfig"
|
||||||
|
)
|
||||||
|
|
||||||
|
func main() {
|
||||||
|
flag.Parse()
|
||||||
|
|
||||||
|
for _, arg := range flag.Args() {
|
||||||
|
fmt.Println("testing", arg)
|
||||||
|
|
||||||
|
cfgBytes, err := os.ReadFile(arg)
|
||||||
|
fail(err)
|
||||||
|
|
||||||
|
cfg := config.Config{}
|
||||||
|
|
||||||
|
dec := yaml.NewDecoder(bytes.NewBuffer(cfgBytes))
|
||||||
|
dec.KnownFields(true)
|
||||||
|
|
||||||
|
err = dec.Decode(&cfg)
|
||||||
|
fail(err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func fail(err error) {
|
||||||
|
if err != nil {
|
||||||
|
fmt.Fprintln(os.Stderr, err.Error())
|
||||||
|
os.Exit(1)
|
||||||
|
}
|
||||||
|
}
|
||||||
35
tty.go
Normal file
35
tty.go
Normal file
@ -0,0 +1,35 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"golang.org/x/sys/unix"
|
||||||
|
)
|
||||||
|
|
||||||
|
type tty struct {
|
||||||
|
fd int
|
||||||
|
termios *unix.Termios
|
||||||
|
}
|
||||||
|
|
||||||
|
func newTTY(fd uintptr) *tty {
|
||||||
|
termios, _ := unix.IoctlGetTermios(int(fd), unix.TCGETS)
|
||||||
|
return &tty{int(fd), termios}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (t *tty) EchoOff() {
|
||||||
|
if t.termios == nil {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
newState := *t.termios
|
||||||
|
newState.Lflag &^= unix.ECHO
|
||||||
|
newState.Lflag |= unix.ICANON | unix.ISIG
|
||||||
|
newState.Iflag |= unix.ICRNL
|
||||||
|
unix.IoctlSetTermios(t.fd, unix.TCSETS, &newState)
|
||||||
|
}
|
||||||
|
|
||||||
|
func (t *tty) Restore() {
|
||||||
|
if t.termios == nil {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
unix.IoctlSetTermios(t.fd, unix.TCSETS, t.termios)
|
||||||
|
}
|
||||||
20
uname.go
Normal file
20
uname.go
Normal file
@ -0,0 +1,20 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import "syscall"
|
||||||
|
|
||||||
|
func unameRelease() string {
|
||||||
|
uname := &syscall.Utsname{}
|
||||||
|
if err := syscall.Uname(uname); err != nil {
|
||||||
|
fatalf("failed to get kernel version: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
ba := make([]byte, 0, len(uname.Release))
|
||||||
|
for _, c := range uname.Release {
|
||||||
|
if c == 0 {
|
||||||
|
break
|
||||||
|
}
|
||||||
|
ba = append(ba, byte(c))
|
||||||
|
}
|
||||||
|
|
||||||
|
return string(ba)
|
||||||
|
}
|
||||||
137
vpn.go
Normal file
137
vpn.go
Normal file
@ -0,0 +1,137 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"net"
|
||||||
|
"os"
|
||||||
|
"path/filepath"
|
||||||
|
|
||||||
|
"github.com/rs/zerolog/log"
|
||||||
|
"golang.zx2c4.com/wireguard/wgctrl"
|
||||||
|
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
||||||
|
|
||||||
|
"novit.tech/direktil/pkg/config"
|
||||||
|
)
|
||||||
|
|
||||||
|
func setupVPN(vpn config.VPNDef, localGenDir string) {
|
||||||
|
log := log.With().Str("vpn", vpn.Name).Logger()
|
||||||
|
|
||||||
|
log.Info().Msg("VPN: setting up")
|
||||||
|
|
||||||
|
vpnDir := filepath.Join(localGenDir, vpn.Name)
|
||||||
|
os.MkdirAll(vpnDir, 0750)
|
||||||
|
|
||||||
|
logMsg := log.Info()
|
||||||
|
if vpn.ListenPort != nil {
|
||||||
|
logMsg.Int("ListenPort", *vpn.ListenPort)
|
||||||
|
}
|
||||||
|
|
||||||
|
// public/private key
|
||||||
|
keyFile := filepath.Join(vpnDir, "key")
|
||||||
|
keyBytes, err := os.ReadFile(keyFile)
|
||||||
|
if os.IsNotExist(err) {
|
||||||
|
key, err := wgtypes.GeneratePrivateKey()
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to generate VPN key: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
keyBytes = []byte(key.String())
|
||||||
|
|
||||||
|
os.WriteFile(keyFile, keyBytes, 0600)
|
||||||
|
} else if err != nil {
|
||||||
|
fatalf("failed to read VPN key: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
key, err := wgtypes.ParseKey(string(keyBytes))
|
||||||
|
if err != nil {
|
||||||
|
fatalf("bad VPN key: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
logMsg.Stringer("PublicKey", key.PublicKey())
|
||||||
|
|
||||||
|
// pre-shared key
|
||||||
|
pskeyFile := filepath.Join(vpnDir, "pskey")
|
||||||
|
pskeyBytes, err := os.ReadFile(pskeyFile)
|
||||||
|
if os.IsNotExist(err) {
|
||||||
|
key, err := wgtypes.GenerateKey()
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to generate VPN pre-shared key: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
pskeyBytes = []byte(key.String())
|
||||||
|
|
||||||
|
os.WriteFile(pskeyFile, pskeyBytes, 0600)
|
||||||
|
} else if err != nil {
|
||||||
|
fatalf("failed to read VPN pre-shared key: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
pskey, err := wgtypes.ParseKey(string(pskeyBytes))
|
||||||
|
if err != nil {
|
||||||
|
fatalf("bad VPN pre-shared key: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
{
|
||||||
|
keyStr := key.String()
|
||||||
|
logMsg.Str("PresharedKey", keyStr[0:4]+"..."+keyStr[len(keyStr)-4:])
|
||||||
|
}
|
||||||
|
|
||||||
|
// setup interface
|
||||||
|
cfg := wgtypes.Config{
|
||||||
|
PrivateKey: &key,
|
||||||
|
ListenPort: vpn.ListenPort,
|
||||||
|
Peers: make([]wgtypes.PeerConfig, 0, len(vpn.Peers)),
|
||||||
|
}
|
||||||
|
|
||||||
|
for idx, vpnPeer := range vpn.Peers {
|
||||||
|
vpnPeer := vpnPeer
|
||||||
|
|
||||||
|
wgPeer := wgtypes.PeerConfig{
|
||||||
|
Endpoint: vpnPeer.Endpoint,
|
||||||
|
AllowedIPs: make([]net.IPNet, 0, len(vpnPeer.AllowedIPs)),
|
||||||
|
|
||||||
|
PersistentKeepaliveInterval: &vpnPeer.KeepAlive,
|
||||||
|
}
|
||||||
|
|
||||||
|
if vpnPeer.WithPreSharedKey {
|
||||||
|
wgPeer.PresharedKey = &pskey
|
||||||
|
}
|
||||||
|
|
||||||
|
pubkey, err := wgtypes.ParseKey(vpnPeer.PublicKey)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("bad VPN peer[%d] public key: %v", idx, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
wgPeer.PublicKey = pubkey
|
||||||
|
|
||||||
|
for _, ipnetStr := range vpnPeer.AllowedIPs {
|
||||||
|
_, ipnet, err := net.ParseCIDR(ipnetStr)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("bad IP/net: %q: %v", ipnetStr, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
wgPeer.AllowedIPs = append(wgPeer.AllowedIPs, *ipnet)
|
||||||
|
}
|
||||||
|
|
||||||
|
cfg.Peers = append(cfg.Peers, wgPeer)
|
||||||
|
}
|
||||||
|
|
||||||
|
wg, err := wgctrl.New()
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to setup WireGuard client: %v", err)
|
||||||
|
}
|
||||||
|
defer wg.Close()
|
||||||
|
|
||||||
|
log.Info().Strs("ips", vpn.IPs).Msg("VPN: creating interface")
|
||||||
|
run("ip", "link", "add", vpn.Name, "type", "wireguard")
|
||||||
|
|
||||||
|
for _, ip := range vpn.IPs {
|
||||||
|
run("ip", "addr", "add", ip, "dev", vpn.Name)
|
||||||
|
}
|
||||||
|
|
||||||
|
logMsg.Msg("VPN: configuring interface")
|
||||||
|
err = wg.ConfigureDevice(vpn.Name, cfg)
|
||||||
|
if err != nil {
|
||||||
|
fatalf("failed to setup VPN %s: %v", vpn.Name, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
run("ip", "link", "set", vpn.Name, "up")
|
||||||
|
}
|
||||||
24
zombies.go
24
zombies.go
@ -1,24 +0,0 @@
|
|||||||
package main
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"syscall"
|
|
||||||
)
|
|
||||||
|
|
||||||
func cleanZombies() {
|
|
||||||
var wstatus syscall.WaitStatus
|
|
||||||
|
|
||||||
for {
|
|
||||||
pid, err := syscall.Wait4(-1, &wstatus, 0, nil)
|
|
||||||
switch err {
|
|
||||||
case nil:
|
|
||||||
log.Printf("collected PID %v", pid)
|
|
||||||
|
|
||||||
case syscall.ECHILD:
|
|
||||||
return
|
|
||||||
|
|
||||||
default:
|
|
||||||
log.Printf("unknown error: %v", err)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Reference in New Issue
Block a user