Removed portions of qubes setup that are now handled within core-agent-linux
This commit is contained in:
Jason Mehring
parent
0e53e2954f
commit
cbe081b7bc
@ -58,26 +58,26 @@ EOF
|
|||||||
chroot "${INSTALLDIR}" locale-gen
|
chroot "${INSTALLDIR}" locale-gen
|
||||||
chroot "${INSTALLDIR}" update-locale LANG=en_US.UTF-8
|
chroot "${INSTALLDIR}" update-locale LANG=en_US.UTF-8
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Update /etc/fstab
|
# # Update /etc/fstab
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
debug "Updating template fstab file..."
|
# #debug "Updating template fstab file..."
|
||||||
cat >> "${INSTALLDIR}/etc/fstab" <<EOF
|
# #cat >> "${INSTALLDIR}/etc/fstab" <<EOF
|
||||||
/dev/mapper/dmroot / ext4 defaults,noatime 1 1
|
#/dev/mapper/dmroot / ext4 defaults,noatime 1 1
|
||||||
/dev/xvdc1 swap swap defaults 0 0
|
#/dev/xvdc1 swap swap defaults 0 0
|
||||||
|
#
|
||||||
/dev/xvdb /rw ext4 noauto,defaults,discard 1 2
|
#/dev/xvdb /rw ext4 noauto,defaults,discard 1 2
|
||||||
/rw/home /home none noauto,bind,defaults 0 0
|
#/rw/home /home none noauto,bind,defaults 0 0
|
||||||
|
#
|
||||||
tmpfs /dev/shm tmpfs defaults 0 0
|
#tmpfs /dev/shm tmpfs defaults 0 0
|
||||||
devpts /dev/pts devpts gid=5,mode=620 0 0
|
#devpts /dev/pts devpts gid=5,mode=620 0 0
|
||||||
proc /proc proc defaults 0 0
|
#proc /proc proc defaults 0 0
|
||||||
sysfs /sys sysfs defaults 0 0
|
#sysfs /sys sysfs defaults 0 0
|
||||||
xen /proc/xen xenfs defaults 0 0
|
#xen /proc/xen xenfs defaults 0 0
|
||||||
|
#
|
||||||
/dev/xvdi /mnt/removable auto noauto,user,rw 0 0
|
#/dev/xvdi /mnt/removable auto noauto,user,rw 0 0
|
||||||
/dev/xvdd /lib/modules ext3 defaults 0 0
|
#/dev/xvdd /lib/modules ext3 defaults 0 0
|
||||||
EOF
|
#EOF
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# --------------------------------------------------------------------------
|
||||||
# Link mtab
|
# Link mtab
|
||||||
@ -85,10 +85,10 @@ EOF
|
|||||||
rm -f "${INSTALLDIR}/etc/mtab"
|
rm -f "${INSTALLDIR}/etc/mtab"
|
||||||
ln -s "../proc/self/mounts" "${INSTALLDIR}/etc/mtab"
|
ln -s "../proc/self/mounts" "${INSTALLDIR}/etc/mtab"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Create modules directory
|
# # Create modules directory
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
mkdir -p "${INSTALLDIR}/lib/modules"
|
# mkdir -p "${INSTALLDIR}/lib/modules"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# --------------------------------------------------------------------------
|
||||||
# Start of Qubes package installation
|
# Start of Qubes package installation
|
||||||
@ -158,30 +158,30 @@ EOF
|
|||||||
# --------------------------------------------------------------------------
|
# --------------------------------------------------------------------------
|
||||||
rm -f "${BUILDCHROOT}/usr/sbin/policy-rc.d"
|
rm -f "${BUILDCHROOT}/usr/sbin/policy-rc.d"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Qubes needs a user named 'user'
|
# # Qubes needs a user named 'user'
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
if chroot "${INSTALLDIR}" id -u 'user' >/dev/null 2>&1; then
|
# if chroot "${INSTALLDIR}" id -u 'user' >/dev/null 2>&1; then
|
||||||
:
|
# :
|
||||||
else
|
# else
|
||||||
chroot "${INSTALLDIR}" groupadd -f user
|
# chroot "${INSTALLDIR}" groupadd -f user
|
||||||
chroot "${INSTALLDIR}" useradd -g user -G dialout,cdrom,floppy,sudo,audio,dip,video,plugdev -m -s /bin/bash user
|
# chroot "${INSTALLDIR}" useradd -g user -G dialout,cdrom,floppy,sudo,audio,dip,video,plugdev -m -s /bin/bash user
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Modules setup
|
# # Modules setup
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
echo "xen_netfront" >> "${INSTALLDIR}/etc/modules"
|
# echo "xen_netfront" >> "${INSTALLDIR}/etc/modules"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Remove `mesg` from root/.profile?
|
# # Remove `mesg` from root/.profile?
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
sed -i -e '/^mesg n/d' "${INSTALLDIR}/root/.profile"
|
# sed -i -e '/^mesg n/d' "${INSTALLDIR}/root/.profile"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Need a xen log directory or xen scripts will fail
|
# # Need a xen log directory or xen scripts will fail
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
mkdir -p -m 0700 "${INSTALLDIR}/var/log/xen"
|
# mkdir -p -m 0700 "${INSTALLDIR}/var/log/xen"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# --------------------------------------------------------------------------
|
||||||
# Copy extra files to installation directory. Contains:
|
# Copy extra files to installation directory. Contains:
|
||||||
@ -189,12 +189,12 @@ EOF
|
|||||||
# --------------------------------------------------------------------------
|
# --------------------------------------------------------------------------
|
||||||
copyTree "qubes-files" "${SCRIPTSDIR}" "${INSTALLDIR}"
|
copyTree "qubes-files" "${SCRIPTSDIR}" "${INSTALLDIR}"
|
||||||
|
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
# Looks like hosts file may contain tabs and qubes will not parse it
|
# # Looks like hosts file may contain tabs and qubes will not parse it
|
||||||
# correctly
|
# # correctly
|
||||||
# --------------------------------------------------------------------------
|
# # --------------------------------------------------------------------------
|
||||||
expand "${INSTALLDIR}/etc/hosts" > "${INSTALLDIR}/etc/hosts.dist"
|
# expand "${INSTALLDIR}/etc/hosts" > "${INSTALLDIR}/etc/hosts.dist"
|
||||||
mv "${INSTALLDIR}/etc/hosts.dist" "${INSTALLDIR}/etc/hosts"
|
# mv "${INSTALLDIR}/etc/hosts.dist" "${INSTALLDIR}/etc/hosts"
|
||||||
|
|
||||||
touch "${INSTALLDIR}/tmp/.prepared_qubes"
|
touch "${INSTALLDIR}/tmp/.prepared_qubes"
|
||||||
fi
|
fi
|
||||||
|
|||||||
@ -40,234 +40,3 @@ user::rw-
|
|||||||
group::r--
|
group::r--
|
||||||
other::r--
|
other::r--
|
||||||
|
|
||||||
# file: etc/xen
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif-bridge
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vtpm-delete
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif2
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vtpm
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/external-device-migrate
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif-route-qubes
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::r-x
|
|
||||||
other::r-x
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/network-nat
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/xen-hotplug-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vtpm-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vtpm-impl
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/locking.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/xen-hotplug-cleanup
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/xen-network-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/block-nbd
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/block
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/hotplugpath.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vtpm-migration.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/network-bridge
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/block-enbd
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif-setup
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif-nat
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vif-route
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vscsi
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/network-route
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/blktap
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/xen-script-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/logging.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/block-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: etc/xen/scripts/vtpm-hotplug-common.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
user::rwx
|
|
||||||
group::---
|
|
||||||
other::---
|
|
||||||
|
|
||||||
# file: .facl
|
|
||||||
# owner: user
|
|
||||||
# group: user
|
|
||||||
user::rwx
|
|
||||||
group::rwx
|
|
||||||
other::rwx
|
|
||||||
|
|
||||||
|
|||||||
@ -1,4 +0,0 @@
|
|||||||
SUBSYSTEM=="cpu", ACTION=="online", PROGRAM="/bin/systemctl try-restart kdump.service"
|
|
||||||
SUBSYSTEM=="cpu", ACTION=="offline", PROGRAM="/bin/systemctl try-restart kdump.service"
|
|
||||||
SUBSYSTEM=="memory", ACTION=="add", PROGRAM="/bin/systemctl try-restart kdump.service"
|
|
||||||
SUBSYSTEM=="memory", ACTION=="remove", PROGRAM="/bin/systemctl try-restart kdump.service"
|
|
||||||
@ -1,94 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# Copyright (c) 2005, XenSource Ltd.
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
. "$dir/block-common.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
|
|
||||||
##
|
|
||||||
# check_blktap_sharing file mode
|
|
||||||
#
|
|
||||||
# Perform the sharing check for the given blktap and mode.
|
|
||||||
#
|
|
||||||
check_blktap_sharing()
|
|
||||||
{
|
|
||||||
local file="$1"
|
|
||||||
local mode="$2"
|
|
||||||
|
|
||||||
local base_path="$XENBUS_BASE_PATH/$XENBUS_TYPE"
|
|
||||||
for dom in $(xenstore-list "$base_path")
|
|
||||||
do
|
|
||||||
for dev in $(xenstore-list "$base_path/$dom")
|
|
||||||
do
|
|
||||||
params=$(xenstore_read_default "$base_path/$dom/$dev/params" "" | cut -d: -f2)
|
|
||||||
if [ "$file" = "$params" ]
|
|
||||||
then
|
|
||||||
|
|
||||||
if [ "$mode" = 'w' ]
|
|
||||||
then
|
|
||||||
if ! same_vm "$dom"
|
|
||||||
then
|
|
||||||
echo 'guest'
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
local m=$(xenstore_read_default "$base_path/$dom/$dev/mode" "")
|
|
||||||
m=$(canonicalise_mode "$m")
|
|
||||||
|
|
||||||
if [ "$m" = 'w' ]
|
|
||||||
then
|
|
||||||
if ! same_vm "$dom"
|
|
||||||
then
|
|
||||||
echo 'guest'
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
done
|
|
||||||
|
|
||||||
echo 'ok'
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
t=$(xenstore_read_default "$XENBUS_PATH/type" 'MISSING')
|
|
||||||
if [ -n "$t" ]
|
|
||||||
then
|
|
||||||
p=$(xenstore_read "$XENBUS_PATH/params")
|
|
||||||
p=${p#tapdisk:}
|
|
||||||
# if we have a ':', chew from head including :
|
|
||||||
if echo $p | grep -q \:
|
|
||||||
then
|
|
||||||
p=${p#*:}
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
# some versions of readlink cannot be passed a regular file
|
|
||||||
if [ -L "$p" ]; then
|
|
||||||
file=$(readlink -f "$p") || fatal "$p link does not exist."
|
|
||||||
else
|
|
||||||
file="$p"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$command" = 'add' ]
|
|
||||||
then
|
|
||||||
[ -e "$file" ] || { fatal $file does not exist; }
|
|
||||||
|
|
||||||
FRONTEND_ID=$(xenstore_read "$XENBUS_PATH/frontend-id")
|
|
||||||
FRONTEND_UUID=$(xenstore_read "/local/domain/$FRONTEND_ID/vm")
|
|
||||||
mode=$(xenstore_read "$XENBUS_PATH/mode")
|
|
||||||
mode=$(canonicalise_mode "$mode")
|
|
||||||
|
|
||||||
if [ "$mode" != '!' ]
|
|
||||||
then
|
|
||||||
result=$(check_blktap_sharing "$file" "$mode")
|
|
||||||
[ "$result" = 'ok' ] || ebusy "$file already in use by other domain"
|
|
||||||
fi
|
|
||||||
|
|
||||||
success
|
|
||||||
fi
|
|
||||||
|
|
||||||
exit 0
|
|
||||||
@ -1,354 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/block-common.sh"
|
|
||||||
|
|
||||||
HOTPLUG_STORE="/var/run/xen-hotplug/${XENBUS_PATH//\//-}"
|
|
||||||
|
|
||||||
expand_dev() {
|
|
||||||
local dev
|
|
||||||
case $1 in
|
|
||||||
/*)
|
|
||||||
dev=$1
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
dev=/dev/$1
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
echo -n $dev
|
|
||||||
}
|
|
||||||
|
|
||||||
find_free_loopback_helper() {
|
|
||||||
local next_devnum=0
|
|
||||||
local busy_devnum
|
|
||||||
while read busy_devnum; do
|
|
||||||
if [ "$next_devnum" != "$busy_devnum" ]; then
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
let next_devnum=$next_devnum+1
|
|
||||||
done
|
|
||||||
echo "/dev/loop${next_devnum}"
|
|
||||||
}
|
|
||||||
|
|
||||||
# Not all distros have "losetup -f"
|
|
||||||
find_free_loopback_dev() {
|
|
||||||
local loopdev
|
|
||||||
loopdev=$(losetup -a | sed -e 's+^/dev/loop++' -e 's/:.*//' | find_free_loopback_helper)
|
|
||||||
if [ -n "$loopdev" ] && [ -b "$loopdev" ]; then
|
|
||||||
echo "$loopdev"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
##
|
|
||||||
# check_sharing device mode
|
|
||||||
#
|
|
||||||
# Check whether the device requested is already in use. To use the device in
|
|
||||||
# read-only mode, it may be in use in read-only mode, but may not be in use in
|
|
||||||
# read-write anywhere at all. To use the device in read-write mode, it must
|
|
||||||
# not be in use anywhere at all.
|
|
||||||
#
|
|
||||||
# Prints one of
|
|
||||||
#
|
|
||||||
# 'local': the device may not be used because it is mounted in the current
|
|
||||||
# (i.e. the privileged domain) in a way incompatible with the
|
|
||||||
# requested mode;
|
|
||||||
# 'guest': the device may not be used because it already mounted by a guest
|
|
||||||
# in a way incompatible with the requested mode; or
|
|
||||||
# 'ok': the device may be used.
|
|
||||||
#
|
|
||||||
check_sharing()
|
|
||||||
{
|
|
||||||
local dev="$1"
|
|
||||||
local mode="$2"
|
|
||||||
|
|
||||||
local devmm=$(device_major_minor "$dev")
|
|
||||||
local file
|
|
||||||
|
|
||||||
if [ "$mode" = 'w' ]
|
|
||||||
then
|
|
||||||
toskip="^$"
|
|
||||||
else
|
|
||||||
toskip="^[^ ]* [^ ]* [^ ]* ro[, ]"
|
|
||||||
fi
|
|
||||||
|
|
||||||
for file in $(cat /proc/mounts | grep -v "$toskip" | cut -f 1 -d ' ')
|
|
||||||
do
|
|
||||||
if [ -e "$file" ]
|
|
||||||
then
|
|
||||||
local d=$(device_major_minor "$file")
|
|
||||||
|
|
||||||
if [ "$d" = "$devmm" ]
|
|
||||||
then
|
|
||||||
echo 'local'
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
local base_path="$XENBUS_BASE_PATH/$XENBUS_TYPE"
|
|
||||||
for dom in $(xenstore-list "$base_path")
|
|
||||||
do
|
|
||||||
for dev in $(xenstore-list "$base_path/$dom")
|
|
||||||
do
|
|
||||||
d=$(xenstore_read_default "$base_path/$dom/$dev/physical-device" "")
|
|
||||||
|
|
||||||
if [ "$d" = "$devmm" ]
|
|
||||||
then
|
|
||||||
if [ "$mode" = 'w' ]
|
|
||||||
then
|
|
||||||
if ! same_vm $dom
|
|
||||||
then
|
|
||||||
echo 'guest'
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
local m=$(xenstore_read_default "$base_path/$dom/$dev/mode" "")
|
|
||||||
m=$(canonicalise_mode "$m")
|
|
||||||
|
|
||||||
if [ "$m" = 'w' ]
|
|
||||||
then
|
|
||||||
if ! same_vm $dom
|
|
||||||
then
|
|
||||||
echo 'guest'
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
done
|
|
||||||
|
|
||||||
echo 'ok'
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# check_device_sharing dev mode
|
|
||||||
#
|
|
||||||
# Perform the sharing check for the given physical device and mode.
|
|
||||||
#
|
|
||||||
check_device_sharing()
|
|
||||||
{
|
|
||||||
local dev="$1"
|
|
||||||
local mode=$(canonicalise_mode "$2")
|
|
||||||
local result
|
|
||||||
|
|
||||||
if [ "x$mode" = 'x!' ]
|
|
||||||
then
|
|
||||||
return 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
result=$(check_sharing "$dev" "$mode")
|
|
||||||
|
|
||||||
if [ "$result" != 'ok' ]
|
|
||||||
then
|
|
||||||
do_ebusy "Device $dev is mounted " "$mode" "$result"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# check_device_sharing file dev mode
|
|
||||||
#
|
|
||||||
# Perform the sharing check for the given file mounted through the given
|
|
||||||
# loopback interface, in the given mode.
|
|
||||||
#
|
|
||||||
check_file_sharing()
|
|
||||||
{
|
|
||||||
local file="$1"
|
|
||||||
local dev="$2"
|
|
||||||
local mode="$3"
|
|
||||||
|
|
||||||
result=$(check_sharing "$dev" "$mode")
|
|
||||||
|
|
||||||
if [ "$result" != 'ok' ]
|
|
||||||
then
|
|
||||||
do_ebusy "File $file is loopback-mounted through $dev,
|
|
||||||
which is mounted " "$mode" "$result"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# do_ebusy prefix mode result
|
|
||||||
#
|
|
||||||
# Helper function for check_device_sharing check_file_sharing, calling ebusy
|
|
||||||
# with an error message constructed from the given prefix, mode, and result
|
|
||||||
# from a call to check_sharing.
|
|
||||||
#
|
|
||||||
do_ebusy()
|
|
||||||
{
|
|
||||||
local prefix="$1"
|
|
||||||
local mode="$2"
|
|
||||||
local result="$3"
|
|
||||||
|
|
||||||
if [ "$result" = 'guest' ]
|
|
||||||
then
|
|
||||||
dom='a guest '
|
|
||||||
when='now'
|
|
||||||
else
|
|
||||||
dom='the privileged '
|
|
||||||
when='by a guest'
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$mode" = 'w' ]
|
|
||||||
then
|
|
||||||
m1=''
|
|
||||||
m2=''
|
|
||||||
else
|
|
||||||
m1='read-write '
|
|
||||||
m2='read-only '
|
|
||||||
fi
|
|
||||||
|
|
||||||
release_lock "block"
|
|
||||||
ebusy \
|
|
||||||
"${prefix}${m1}in ${dom}domain,
|
|
||||||
and so cannot be mounted ${m2}${when}."
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
t=$(xenstore_read_default "$XENBUS_PATH/type" 'MISSING')
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
add)
|
|
||||||
phys=$(xenstore_read_default "$XENBUS_PATH/physical-device" 'MISSING')
|
|
||||||
if [ "$phys" != 'MISSING' ]
|
|
||||||
then
|
|
||||||
# Depending upon the hotplug configuration, it is possible for this
|
|
||||||
# script to be called twice, so just bail.
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "$t" ]
|
|
||||||
then
|
|
||||||
p=$(xenstore_read "$XENBUS_PATH/params")
|
|
||||||
mode=$(xenstore_read "$XENBUS_PATH/mode")
|
|
||||||
echo $p > "$HOTPLUG_STORE-params"
|
|
||||||
echo $mode > "$HOTPLUG_STORE-mode"
|
|
||||||
echo $t > "$HOTPLUG_STORE-type"
|
|
||||||
fi
|
|
||||||
FRONTEND_ID=$(xenstore_read "$XENBUS_PATH/frontend-id")
|
|
||||||
FRONTEND_UUID=$(xenstore_read_default \
|
|
||||||
"/local/domain/$FRONTEND_ID/vm" 'unknown')
|
|
||||||
|
|
||||||
case $t in
|
|
||||||
phy)
|
|
||||||
dev=$(expand_dev $p)
|
|
||||||
|
|
||||||
if [ -L "$dev" ]
|
|
||||||
then
|
|
||||||
dev=$(readlink -f "$dev") || fatal "$dev link does not exist."
|
|
||||||
fi
|
|
||||||
test -e "$dev" || fatal "$dev does not exist."
|
|
||||||
test -b "$dev" || fatal "$dev is not a block device."
|
|
||||||
|
|
||||||
claim_lock "block"
|
|
||||||
check_device_sharing "$dev" "$mode"
|
|
||||||
write_dev "$dev"
|
|
||||||
release_lock "block"
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
|
|
||||||
file)
|
|
||||||
# Canonicalise the file, for sharing check comparison, and the mode
|
|
||||||
# for ease of use here.
|
|
||||||
file=$(readlink -f "$p") || fatal "$p does not exist."
|
|
||||||
test -f "$file" || fatal "$file does not exist."
|
|
||||||
mode=$(canonicalise_mode "$mode")
|
|
||||||
|
|
||||||
claim_lock "block"
|
|
||||||
|
|
||||||
# Avoid a race with the remove if the path has been deleted, or
|
|
||||||
# otherwise changed from "InitWait" state e.g. due to a timeout
|
|
||||||
xenbus_state=$(xenstore_read_default "$XENBUS_PATH/state" 'unknown')
|
|
||||||
if [ "$xenbus_state" != '2' ]
|
|
||||||
then
|
|
||||||
release_lock "block"
|
|
||||||
fatal "Path closed or removed during hotplug add: $XENBUS_PATH state: $xenbus_state"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$mode" = 'w' ] && ! stat "$file" -c %A | grep -q w
|
|
||||||
then
|
|
||||||
release_lock "block"
|
|
||||||
ebusy \
|
|
||||||
"File $file is read-only, and so I will not
|
|
||||||
mount it read-write in a guest domain."
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "x$mode" != 'x!' ]
|
|
||||||
then
|
|
||||||
inode=$(stat -c '%i' "$file")
|
|
||||||
dev=$(stat -c '%D' "$file")
|
|
||||||
if [ -z "$inode" ] || [ -z "$dev" ]
|
|
||||||
then
|
|
||||||
fatal "Unable to lookup $file: dev: $dev inode: $inode"
|
|
||||||
fi
|
|
||||||
|
|
||||||
shared_list=$(losetup -j "$file" | head -n 1 | cut -d : -f 1)
|
|
||||||
for dev in "$shared_list"
|
|
||||||
do
|
|
||||||
if [ -n "$dev" ]
|
|
||||||
then
|
|
||||||
check_file_sharing "$file" "$dev" "$mode"
|
|
||||||
loopdev="$dev"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -z "$loopdev" ]; then
|
|
||||||
loopdev=$(losetup -f 2>/dev/null || find_free_loopback_dev)
|
|
||||||
if [ "$loopdev" = '' ]
|
|
||||||
then
|
|
||||||
release_lock "block"
|
|
||||||
fatal 'Failed to find an unused loop device'
|
|
||||||
fi
|
|
||||||
|
|
||||||
if LANG=C losetup -h 2>&1 | grep read-only >/dev/null
|
|
||||||
then
|
|
||||||
roflag="-$mode"; roflag="${roflag#-w}"; roflag="${roflag#-!}"
|
|
||||||
else
|
|
||||||
roflag=''
|
|
||||||
fi
|
|
||||||
do_or_die losetup $roflag "$loopdev" "$file"
|
|
||||||
fi
|
|
||||||
xenstore_write "$XENBUS_PATH/node" "$loopdev"
|
|
||||||
echo $loopdev > "$HOTPLUG_STORE-node"
|
|
||||||
write_dev "$loopdev"
|
|
||||||
release_lock "block"
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
|
|
||||||
"")
|
|
||||||
claim_lock "block"
|
|
||||||
success
|
|
||||||
release_lock "block"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
;;
|
|
||||||
|
|
||||||
remove)
|
|
||||||
t=$(cat $HOTPLUG_STORE-type)
|
|
||||||
case $t in
|
|
||||||
phy)
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
|
|
||||||
file)
|
|
||||||
claim_lock "block"
|
|
||||||
node=$(cat "$HOTPLUG_STORE-node")
|
|
||||||
losetup -d "$node"
|
|
||||||
release_lock "block"
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
|
|
||||||
"")
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
;;
|
|
||||||
|
|
||||||
esac
|
|
||||||
|
|
||||||
# If we've reached here, $t is neither phy nor file, so fire a helper script.
|
|
||||||
[ -x ${XEN_SCRIPT_DIR}/block-"$t" ] && \
|
|
||||||
${XEN_SCRIPT_DIR}/block-"$t" "$command" $node
|
|
||||||
@ -1,125 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
|
|
||||||
if [ "$command" != "add" ] &&
|
|
||||||
[ "$command" != "remove" ]
|
|
||||||
then
|
|
||||||
log err "Invalid command: $command"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
XENBUS_PATH="${XENBUS_PATH:?}"
|
|
||||||
|
|
||||||
|
|
||||||
ebusy()
|
|
||||||
{
|
|
||||||
xenstore_write "$XENBUS_PATH/hotplug-error" "$*" \
|
|
||||||
"$XENBUS_PATH/hotplug-status" busy
|
|
||||||
log err "$@"
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# Print the given device's major and minor numbers, written in hex and
|
|
||||||
# separated by a colon.
|
|
||||||
device_major_minor()
|
|
||||||
{
|
|
||||||
stat -L -c %t:%T "$1"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# Write physical-device = MM,mm to the store, where MM and mm are the major
|
|
||||||
# and minor numbers of device respectively.
|
|
||||||
#
|
|
||||||
# @param device The device from which major and minor numbers are read, which
|
|
||||||
# will be written into the store.
|
|
||||||
#
|
|
||||||
write_dev() {
|
|
||||||
local mm
|
|
||||||
|
|
||||||
mm=$(device_major_minor "$1")
|
|
||||||
|
|
||||||
if [ -z $mm ]
|
|
||||||
then
|
|
||||||
fatal "Backend device does not exist"
|
|
||||||
fi
|
|
||||||
|
|
||||||
xenstore_write "$XENBUS_PATH/physical-device" "$mm"
|
|
||||||
|
|
||||||
success
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# canonicalise_mode mode
|
|
||||||
#
|
|
||||||
# Takes the given mode, which may be r, w, ro, rw, w!, or rw!, or variations
|
|
||||||
# thereof, and canonicalises them to one of
|
|
||||||
#
|
|
||||||
# 'r': perform checks for a new read-only mount;
|
|
||||||
# 'w': perform checks for a read-write mount; or
|
|
||||||
# '!': perform no checks at all.
|
|
||||||
#
|
|
||||||
canonicalise_mode()
|
|
||||||
{
|
|
||||||
local mode="$1"
|
|
||||||
|
|
||||||
if ! expr index "$mode" 'w' >/dev/null
|
|
||||||
then
|
|
||||||
echo 'r'
|
|
||||||
elif ! expr index "$mode" '!' >/dev/null
|
|
||||||
then
|
|
||||||
echo 'w'
|
|
||||||
else
|
|
||||||
echo '!'
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
same_vm()
|
|
||||||
{
|
|
||||||
local otherdom="$1"
|
|
||||||
# Note that othervm can be MISSING here, because Xend will be racing with
|
|
||||||
# the hotplug scripts -- the entries in /local/domain can be removed by
|
|
||||||
# Xend before the hotplug scripts have removed the entry in
|
|
||||||
# /local/domain/0/backend/. In this case, we want to pretend that the
|
|
||||||
# VM is the same as FRONTEND_UUID, because that way the 'sharing' will be
|
|
||||||
# allowed.
|
|
||||||
local othervm=$(xenstore_read_default "/local/domain/$otherdom/vm" \
|
|
||||||
"$FRONTEND_UUID")
|
|
||||||
local target=$(xenstore_read_default "/local/domain/$FRONTEND_ID/target" \
|
|
||||||
"-1")
|
|
||||||
local otarget=$(xenstore_read_default "/local/domain/$otherdom/target" \
|
|
||||||
"-1")
|
|
||||||
local otvm=$(xenstore_read_default "/local/domain/$otarget/vm" \
|
|
||||||
"-1")
|
|
||||||
otvm=${otvm%-1}
|
|
||||||
othervm=${othervm%-1}
|
|
||||||
local frontend_uuid=${FRONTEND_UUID%-1}
|
|
||||||
|
|
||||||
[ "$frontend_uuid" = "$othervm" -o "$target" = "$otherdom" -o "$frontend_uuid" = "$otvm" ]
|
|
||||||
}
|
|
||||||
|
|
||||||
@ -1,27 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# Usage: block-enbd [bind server ctl_port |unbind node]
|
|
||||||
#
|
|
||||||
# The node argument to unbind is the name of the device node we are to
|
|
||||||
# unbind.
|
|
||||||
#
|
|
||||||
# This assumes you're running a correctly configured server at the other end!
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/block-common.sh"
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
add)
|
|
||||||
for dev in /dev/nd*; do
|
|
||||||
if nbd-client $2:$3 $dev; then
|
|
||||||
write_dev $dev
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
exit 1
|
|
||||||
;;
|
|
||||||
remove)
|
|
||||||
nbd-client -d $2
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
@ -1,27 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# Usage: block-nbd [bind server ctl_port |unbind node]
|
|
||||||
#
|
|
||||||
# The node argument to unbind is the name of the device node we are to
|
|
||||||
# unbind.
|
|
||||||
#
|
|
||||||
# This assumes you're running a correctly configured server at the other end!
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/block-common.sh"
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
add)
|
|
||||||
for dev in /dev/nbd*; do
|
|
||||||
if nbd-client $2 $3 $dev; then
|
|
||||||
write_dev $dev
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
exit 1
|
|
||||||
;;
|
|
||||||
remove)
|
|
||||||
nbd-client -d $2
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
@ -1,98 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# Copyright (c) 2005 IBM Corporation
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
set -x
|
|
||||||
|
|
||||||
# This script is called by XenD for migration of external devices
|
|
||||||
# It does not handle the migration of those devices itself, but
|
|
||||||
# passes the requests on to further applications
|
|
||||||
# It handles the low-level command line parsing and some of the
|
|
||||||
# synchronization
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/logging.sh"
|
|
||||||
|
|
||||||
|
|
||||||
function ext_dev_migrate_usage() {
|
|
||||||
cat <<EOF
|
|
||||||
Pass the following command line parameters to the script:
|
|
||||||
|
|
||||||
-step <n> : n-th migration step
|
|
||||||
-host <host> : the destination host
|
|
||||||
-domname <domain name> : name of the domain that is migrating
|
|
||||||
-type <device type> : the type of device that is migrating
|
|
||||||
-subtype <dev. subtype>: the subtype of the device
|
|
||||||
-recover : indicates recovery request; an error
|
|
||||||
occurred during migration
|
|
||||||
-help : display this help screen
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
|
|
||||||
# Parse the command line paramters. The following parameters must be
|
|
||||||
# passed as the first ones in the sequence:
|
|
||||||
# -step [required]
|
|
||||||
# -host [required]
|
|
||||||
# -domname [required]
|
|
||||||
# -type [required]
|
|
||||||
# -subtype [optional]
|
|
||||||
# -recover [optional]
|
|
||||||
# The remaining ones will be passed to the called function.
|
|
||||||
function evaluate_params()
|
|
||||||
{
|
|
||||||
local step host domname typ recover filename func stype
|
|
||||||
stype=""
|
|
||||||
while [ $# -ge 1 ]; do
|
|
||||||
case "$1" in
|
|
||||||
-step) step=$2; shift; shift;;
|
|
||||||
-host) host=$2; shift; shift;;
|
|
||||||
-domname) domname=$2; shift; shift;;
|
|
||||||
-type) typ=$2; shift; shift;;
|
|
||||||
-subtype) stype=$2; shift; shift;;
|
|
||||||
-recover) recover=1; shift;;
|
|
||||||
-help) ext_dev_migrate_usage; exit 0;;
|
|
||||||
*) break;;
|
|
||||||
esac
|
|
||||||
done
|
|
||||||
|
|
||||||
if [ "$step" = "" -o \
|
|
||||||
"$host" = "" -o \
|
|
||||||
"$typ" = "" -o \
|
|
||||||
"$domname" = "" ]; then
|
|
||||||
echo "Error: Parameter(s) missing (-step/-host/-type/-domname)" 1>&2
|
|
||||||
echo "" 1>&2
|
|
||||||
echo "$0 -help for usage." 1>&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
filename="$dir/$typ$stype-migration.sh"
|
|
||||||
if [ ! -r $filename ]; then
|
|
||||||
echo "Error: Could not find script '$filename'"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
. "$filename"
|
|
||||||
|
|
||||||
if [ "$recover" = "1" ]; then
|
|
||||||
func="$typ"_recover
|
|
||||||
eval $func $host $domname $step $*
|
|
||||||
else
|
|
||||||
func="$typ"_migration_step
|
|
||||||
eval $func $host $domname $step $*
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
evaluate_params "$@"
|
|
||||||
@ -1,10 +0,0 @@
|
|||||||
SBINDIR="/usr/sbin"
|
|
||||||
BINDIR="/usr/bin"
|
|
||||||
LIBEXEC="/usr/lib/xen/bin"
|
|
||||||
LIBDIR="/usr/lib64"
|
|
||||||
SHAREDIR="/usr/share"
|
|
||||||
PRIVATE_BINDIR="/usr/lib64/xen/bin"
|
|
||||||
XENFIRMWAREDIR="/usr/lib/xen/boot"
|
|
||||||
XEN_CONFIG_DIR="/etc/xen"
|
|
||||||
XEN_SCRIPT_DIR="/etc/xen/scripts"
|
|
||||||
XEN_LOCK_DIR="/var/lock"
|
|
||||||
@ -1,110 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
#
|
|
||||||
# Serialisation
|
|
||||||
#
|
|
||||||
|
|
||||||
LOCK_SLEEPTIME=1
|
|
||||||
LOCK_SPINNING_RETRIES=5
|
|
||||||
LOCK_RETRIES=100
|
|
||||||
LOCK_BASEDIR=/var/run/xen-hotplug
|
|
||||||
|
|
||||||
|
|
||||||
claim_lock()
|
|
||||||
{
|
|
||||||
local lockdir="$LOCK_BASEDIR/$1"
|
|
||||||
mkdir -p "$LOCK_BASEDIR"
|
|
||||||
_claim_lock "$lockdir"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
release_lock()
|
|
||||||
{
|
|
||||||
_release_lock "$LOCK_BASEDIR/$1"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# This function will be redefined in xen-hotplug-common.sh.
|
|
||||||
sigerr() {
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
_claim_lock()
|
|
||||||
{
|
|
||||||
local lockdir="$1"
|
|
||||||
local owner=$(_lock_owner "$lockdir")
|
|
||||||
local retries=0
|
|
||||||
|
|
||||||
while [ $retries -lt $LOCK_RETRIES ]
|
|
||||||
do
|
|
||||||
mkdir "$lockdir" 2>/dev/null && trap "_release_lock $lockdir; sigerr" ERR &&
|
|
||||||
_update_lock_info "$lockdir" && return
|
|
||||||
|
|
||||||
local new_owner=$(_lock_owner "$lockdir")
|
|
||||||
if [ "$new_owner" != "$owner" ]
|
|
||||||
then
|
|
||||||
owner="$new_owner"
|
|
||||||
retries=0
|
|
||||||
else
|
|
||||||
local pid=$(echo $owner | cut -d : -f 1)
|
|
||||||
if [ -n "$pid" -a "$pid" != "unknown" -a ! -f "/proc/$pid/status" ]
|
|
||||||
then
|
|
||||||
_release_lock $lockdir
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ $retries -gt $LOCK_SPINNING_RETRIES ]
|
|
||||||
then
|
|
||||||
sleep $LOCK_SLEEPTIME
|
|
||||||
else
|
|
||||||
sleep 0
|
|
||||||
fi
|
|
||||||
retries=$(($retries + 1))
|
|
||||||
done
|
|
||||||
_steal_lock "$lockdir"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
_release_lock()
|
|
||||||
{
|
|
||||||
trap sigerr ERR
|
|
||||||
rm -rf "$1" 2>/dev/null || true
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
_steal_lock()
|
|
||||||
{
|
|
||||||
local lockdir="$1"
|
|
||||||
local owner=$(cat "$lockdir/owner" 2>/dev/null || echo "unknown")
|
|
||||||
log err "Forced to steal lock on $lockdir from $owner!"
|
|
||||||
_release_lock "$lockdir"
|
|
||||||
_claim_lock "$lockdir"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
_lock_owner()
|
|
||||||
{
|
|
||||||
cat "$1/owner" 2>/dev/null || echo "unknown"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
_update_lock_info()
|
|
||||||
{
|
|
||||||
echo "$$: $0" >"$1/owner"
|
|
||||||
}
|
|
||||||
@ -1,22 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
log() {
|
|
||||||
local level="$1"
|
|
||||||
shift
|
|
||||||
logger -p "daemon.$level" -- "$0:" "$@" || echo "$0 $@" >&2
|
|
||||||
}
|
|
||||||
@ -1,337 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# Default Xen network start/stop script.
|
|
||||||
# Xend calls a network script when it starts.
|
|
||||||
# The script name to use is defined in ${XEN_CONFIG_DIR}/xend-config.sxp
|
|
||||||
# in the network-script field.
|
|
||||||
#
|
|
||||||
# This script creates a bridge (default ${netdev}), adds a device
|
|
||||||
# (defaults to the device on the default gateway route) to it, copies
|
|
||||||
# the IP addresses from the device to the bridge and adjusts the routes
|
|
||||||
# accordingly.
|
|
||||||
#
|
|
||||||
# If all goes well, this should ensure that networking stays up.
|
|
||||||
# However, some configurations are upset by this, especially
|
|
||||||
# NFS roots. If the bridged setup does not meet your needs,
|
|
||||||
# configure a different script, for example using routing instead.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
#
|
|
||||||
# network-bridge (start|stop|status) {VAR=VAL}*
|
|
||||||
#
|
|
||||||
# Vars:
|
|
||||||
#
|
|
||||||
# bridge The bridge to use (default ${netdev}).
|
|
||||||
# netdev The interface to add to the bridge (default gateway device).
|
|
||||||
# antispoof Whether to use iptables to prevent spoofing (default no).
|
|
||||||
#
|
|
||||||
# Internal Vars:
|
|
||||||
# pdev="p${netdev}"
|
|
||||||
# tdev=tmpbridge
|
|
||||||
#
|
|
||||||
# start:
|
|
||||||
# Creates the bridge as tdev
|
|
||||||
# Copies the IP and MAC addresses from pdev to bridge
|
|
||||||
# Renames netdev to be pdev
|
|
||||||
# Renames tdev to bridge
|
|
||||||
# Enslaves pdev to bridge
|
|
||||||
#
|
|
||||||
# stop:
|
|
||||||
# Removes pdev from the bridge
|
|
||||||
# Transfers addresses, routes from bridge to pdev
|
|
||||||
# Renames bridge to tdev
|
|
||||||
# Renames pdev to netdev
|
|
||||||
# Deletes tdev
|
|
||||||
#
|
|
||||||
# status:
|
|
||||||
# Print addresses, interfaces, routes
|
|
||||||
#
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/logging.sh"
|
|
||||||
. "$dir/xen-script-common.sh"
|
|
||||||
. "$dir/xen-network-common.sh"
|
|
||||||
. "$dir/locking.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
evalVariables "$@"
|
|
||||||
|
|
||||||
is_network_root () {
|
|
||||||
local rootfs=$(awk '{ if ($1 !~ /^[ \t]*#/ && $2 == "/") { print $3; }}' /etc/mtab)
|
|
||||||
local rootopts=$(awk '{ if ($1 !~ /^[ \t]*#/ && $2 == "/") { print $4; }}' /etc/mtab)
|
|
||||||
|
|
||||||
[[ "$rootfs" =~ "^nfs" ]] || [[ "$rootopts" =~ "_netdev" ]] && has_nfsroot=1 || has_nfsroot=0
|
|
||||||
if [ $has_nfsroot -eq 1 ]; then
|
|
||||||
local bparms=$(cat /proc/cmdline)
|
|
||||||
for p in $bparms; do
|
|
||||||
local ipaddr=$(echo $p | awk /nfsroot=/'{ print substr($1,9,index($1,":")-9) }')
|
|
||||||
if [ "$ipaddr" != "" ]; then
|
|
||||||
local nfsdev=$(ip route get $ipaddr | awk /$ipaddr/'{ print $3 }')
|
|
||||||
[[ "$nfsdev" == "$netdev" ]] && return 0 || return 1
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
fi
|
|
||||||
return 1
|
|
||||||
}
|
|
||||||
|
|
||||||
find_alt_device () {
|
|
||||||
local interf=$1
|
|
||||||
local prefix=${interf%[[:digit:]]}
|
|
||||||
local ifs=$(ip link show | grep " $prefix" |\
|
|
||||||
awk '{ printf ("%s",substr($2,1,length($2)-1)) }' |\
|
|
||||||
sed s/$interf//)
|
|
||||||
echo "$ifs"
|
|
||||||
}
|
|
||||||
|
|
||||||
netdev=${netdev:-$(ip route list 0.0.0.0/0 | \
|
|
||||||
sed 's/.*dev \([a-z]\+[0-9]\+\).*$/\1/')}
|
|
||||||
if is_network_root ; then
|
|
||||||
altdevs=$(find_alt_device $netdev)
|
|
||||||
for netdev in $altdevs; do break; done
|
|
||||||
if [ -z "$netdev" ]; then
|
|
||||||
[ -x /usr/bin/logger ] && /usr/bin/logger "network-bridge: bridging not supported on network root; not starting"
|
|
||||||
exit
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
netdev=${netdev:-eth0}
|
|
||||||
bridge=${bridge:-${netdev}}
|
|
||||||
antispoof=${antispoof:-no}
|
|
||||||
|
|
||||||
pdev="p${netdev}"
|
|
||||||
tdev=tmpbridge
|
|
||||||
|
|
||||||
get_ip_info() {
|
|
||||||
addr_pfx=`ip addr show dev $1 | egrep '^ *inet' | sed -e 's/ *inet //' -e 's/ .*//'`
|
|
||||||
gateway=`ip route show dev $1 | fgrep default | sed 's/default via //'`
|
|
||||||
}
|
|
||||||
|
|
||||||
do_ifup() {
|
|
||||||
if [ $1 != "${netdev}" ] || ! ifup $1 ; then
|
|
||||||
if [ -n "$addr_pfx" ] ; then
|
|
||||||
# use the info from get_ip_info()
|
|
||||||
ip addr flush $1
|
|
||||||
ip addr add ${addr_pfx} dev $1
|
|
||||||
fi
|
|
||||||
ip link set dev $1 up
|
|
||||||
[ -n "$gateway" ] && ip route add default via ${gateway}
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Usage: transfer_addrs src dst
|
|
||||||
# Copy all IP addresses (including aliases) from device $src to device $dst.
|
|
||||||
transfer_addrs () {
|
|
||||||
local src=$1
|
|
||||||
local dst=$2
|
|
||||||
# Don't bother if $dst already has IP addresses.
|
|
||||||
if ip addr show dev ${dst} | egrep -q '^ *inet ' ; then
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
# Address lines start with 'inet' and have the device in them.
|
|
||||||
# Replace 'inet' with 'ip addr add' and change the device name $src
|
|
||||||
# to 'dev $src'.
|
|
||||||
ip addr show dev ${src} | egrep '^ *inet ' | sed -e "
|
|
||||||
s/inet/ip addr add/
|
|
||||||
s@\([0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+/[0-9]\+\)@\1@
|
|
||||||
s/${src}/dev ${dst} label ${dst}/
|
|
||||||
s/secondary//
|
|
||||||
" | sh -e
|
|
||||||
# Remove automatic routes on destination device
|
|
||||||
ip route list | sed -ne "
|
|
||||||
/dev ${dst}\( \|$\)/ {
|
|
||||||
s/^/ip route del /
|
|
||||||
p
|
|
||||||
}" | sh -e
|
|
||||||
}
|
|
||||||
|
|
||||||
# Usage: transfer_routes src dst
|
|
||||||
# Get all IP routes to device $src, delete them, and
|
|
||||||
# add the same routes to device $dst.
|
|
||||||
# The original routes have to be deleted, otherwise adding them
|
|
||||||
# for $dst fails (duplicate routes).
|
|
||||||
transfer_routes () {
|
|
||||||
local src=$1
|
|
||||||
local dst=$2
|
|
||||||
# List all routes and grep the ones with $src in.
|
|
||||||
# Stick 'ip route del' on the front to delete.
|
|
||||||
# Change $src to $dst and use 'ip route add' to add.
|
|
||||||
ip route list | sed -ne "
|
|
||||||
/dev ${src}\( \|$\)/ {
|
|
||||||
h
|
|
||||||
s/^/ip route del /
|
|
||||||
P
|
|
||||||
g
|
|
||||||
s/${src}/${dst}/
|
|
||||||
s/^/ip route add /
|
|
||||||
P
|
|
||||||
d
|
|
||||||
}" | sh -e
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# link_exists interface
|
|
||||||
#
|
|
||||||
# Returns 0 if the interface named exists (whether up or down), 1 otherwise.
|
|
||||||
#
|
|
||||||
link_exists()
|
|
||||||
{
|
|
||||||
if ip link show "$1" >/dev/null 2>/dev/null
|
|
||||||
then
|
|
||||||
return 0
|
|
||||||
else
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Set the default forwarding policy for $dev to drop.
|
|
||||||
# Allow forwarding to the bridge.
|
|
||||||
antispoofing () {
|
|
||||||
iptables -P FORWARD DROP
|
|
||||||
iptables -F FORWARD
|
|
||||||
iptables -A FORWARD -m physdev --physdev-in ${pdev} -j ACCEPT
|
|
||||||
}
|
|
||||||
|
|
||||||
# Usage: show_status dev bridge
|
|
||||||
# Print ifconfig and routes.
|
|
||||||
show_status () {
|
|
||||||
local dev=$1
|
|
||||||
local bridge=$2
|
|
||||||
|
|
||||||
echo '============================================================'
|
|
||||||
ip addr show ${dev}
|
|
||||||
ip addr show ${bridge}
|
|
||||||
echo ' '
|
|
||||||
brctl show ${bridge}
|
|
||||||
echo ' '
|
|
||||||
ip route list
|
|
||||||
echo ' '
|
|
||||||
route -n
|
|
||||||
echo '============================================================'
|
|
||||||
}
|
|
||||||
|
|
||||||
op_start () {
|
|
||||||
if [ "${bridge}" = "null" ] ; then
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ `brctl show | wc -l` != 1 ]; then
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
if link_exists "$pdev"; then
|
|
||||||
# The device is already up.
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
claim_lock "network-bridge"
|
|
||||||
|
|
||||||
create_bridge ${tdev}
|
|
||||||
|
|
||||||
preiftransfer ${netdev}
|
|
||||||
transfer_addrs ${netdev} ${tdev}
|
|
||||||
# Remember slaves for bonding interface.
|
|
||||||
if [ -e /sys/class/net/${netdev}/bonding/slaves ]; then
|
|
||||||
slaves=`cat /sys/class/net/${netdev}/bonding/slaves`
|
|
||||||
fi
|
|
||||||
# Remember the IP details for do_ifup.
|
|
||||||
get_ip_info ${netdev}
|
|
||||||
if ! ifdown ${netdev}; then
|
|
||||||
ip link set ${netdev} down
|
|
||||||
ip addr flush ${netdev}
|
|
||||||
fi
|
|
||||||
ip link set ${netdev} name ${pdev}
|
|
||||||
ip link set ${tdev} name ${bridge}
|
|
||||||
|
|
||||||
setup_physical_bridge_port ${pdev}
|
|
||||||
|
|
||||||
# Restore slaves
|
|
||||||
if [ -n "${slaves}" ]; then
|
|
||||||
ip link set ${pdev} up
|
|
||||||
ifenslave ${pdev} ${slaves}
|
|
||||||
fi
|
|
||||||
add_to_bridge2 ${bridge} ${pdev}
|
|
||||||
do_ifup ${bridge}
|
|
||||||
|
|
||||||
if [ ${antispoof} = 'yes' ] ; then
|
|
||||||
antispoofing
|
|
||||||
fi
|
|
||||||
|
|
||||||
release_lock "network-bridge"
|
|
||||||
}
|
|
||||||
|
|
||||||
op_stop () {
|
|
||||||
if [ "${bridge}" = "null" ]; then
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
if ! link_exists "$bridge"; then
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
if ! [ -e "/sys/class/net/${bridge}/brif/${pdev}" ]; then
|
|
||||||
# $bridge is not a bridge to which pdev is enslaved
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
claim_lock "network-bridge"
|
|
||||||
|
|
||||||
transfer_addrs ${bridge} ${pdev}
|
|
||||||
if ! ifdown ${bridge}; then
|
|
||||||
get_ip_info ${bridge}
|
|
||||||
fi
|
|
||||||
ip link set ${pdev} down
|
|
||||||
ip addr flush ${bridge}
|
|
||||||
|
|
||||||
brctl delif ${bridge} ${pdev}
|
|
||||||
ip link set ${bridge} down
|
|
||||||
|
|
||||||
ip link set ${bridge} name ${tdev}
|
|
||||||
ip link set ${pdev} name ${netdev}
|
|
||||||
do_ifup ${netdev}
|
|
||||||
|
|
||||||
brctl delbr ${tdev}
|
|
||||||
|
|
||||||
release_lock "network-bridge"
|
|
||||||
}
|
|
||||||
|
|
||||||
# adds $dev to $bridge but waits for $dev to be in running state first
|
|
||||||
add_to_bridge2() {
|
|
||||||
local bridge=$1
|
|
||||||
local dev=$2
|
|
||||||
local maxtries=10
|
|
||||||
|
|
||||||
echo -n "Waiting for ${dev} to negotiate link."
|
|
||||||
ip link set ${dev} up
|
|
||||||
for i in `seq ${maxtries}` ; do
|
|
||||||
if ifconfig ${dev} | grep -q RUNNING ; then
|
|
||||||
break
|
|
||||||
else
|
|
||||||
echo -n '.'
|
|
||||||
sleep 1
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
if [ ${i} -eq ${maxtries} ] ; then echo -n '(link isnt in running state)' ; fi
|
|
||||||
echo
|
|
||||||
|
|
||||||
add_to_bridge ${bridge} ${dev}
|
|
||||||
}
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
start)
|
|
||||||
op_start
|
|
||||||
;;
|
|
||||||
|
|
||||||
stop)
|
|
||||||
op_stop
|
|
||||||
;;
|
|
||||||
|
|
||||||
status)
|
|
||||||
show_status ${netdev} ${bridge}
|
|
||||||
;;
|
|
||||||
|
|
||||||
*)
|
|
||||||
echo "Unknown command: $command" >&2
|
|
||||||
echo 'Valid commands are: start, stop, status' >&2
|
|
||||||
exit 1
|
|
||||||
esac
|
|
||||||
@ -1,124 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# Default Xen network start/stop script when using NAT.
|
|
||||||
# Xend calls a network script when it starts.
|
|
||||||
# The script name to use is defined in ${XEN_CONFIG_DIR}/xend-config.sxp
|
|
||||||
# in the network-script field.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
#
|
|
||||||
# network-nat (start|stop|status) {VAR=VAL}*
|
|
||||||
#
|
|
||||||
# Vars:
|
|
||||||
#
|
|
||||||
# netdev The gateway interface (default eth0).
|
|
||||||
# antispoof Whether to use iptables to prevent spoofing (default no).
|
|
||||||
# dhcp Whether to alter the local DHCP configuration (default no).
|
|
||||||
#
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/hotplugpath.sh"
|
|
||||||
. "$dir/xen-script-common.sh"
|
|
||||||
. "$dir/xen-network-common.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
evalVariables "$@"
|
|
||||||
|
|
||||||
netdev=${netdev:-eth0}
|
|
||||||
# antispoofing not yet implemented
|
|
||||||
antispoof=${antispoof:-no}
|
|
||||||
|
|
||||||
# turn on dhcp feature by default if dhcpd is installed
|
|
||||||
if [ -f /etc/dhcpd.conf ]
|
|
||||||
then
|
|
||||||
dhcp=${dhcp:-yes}
|
|
||||||
else
|
|
||||||
dhcp=${dhcp:-no}
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
if [ "$dhcp" != 'no' ]
|
|
||||||
then
|
|
||||||
dhcpd_conf_file=$(find_dhcpd_conf_file)
|
|
||||||
dhcpd_init_file=$(find_dhcpd_init_file)
|
|
||||||
if [ -z "$dhcpd_conf_file" ] || [ -z "$dhcpd_init_file" ]
|
|
||||||
then
|
|
||||||
echo 'Failed to find dhcpd configuration or init file.' >&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
domain_name=`cat /etc/resolv.conf | grep -v "#" | grep -E 'search|domain' -i | tail -n 1 | awk '{ print $2 }'`
|
|
||||||
nameserver=`cat /etc/resolv.conf | grep -v "#" | grep "nameserver" -i -m 1 | awk '{ print $2 }'`
|
|
||||||
|
|
||||||
function dhcp_start()
|
|
||||||
{
|
|
||||||
if ! grep -q "subnet 10.0.0.0" "$dhcpd_conf_file"
|
|
||||||
then
|
|
||||||
echo >>"$dhcpd_conf_file" "subnet 10.0.0.0 netmask 255.255.0.0 {\
|
|
||||||
option domain-name \"$domain_name\";\
|
|
||||||
option domain-name-servers $nameserver; }"
|
|
||||||
fi
|
|
||||||
|
|
||||||
"$dhcpd_init_file" restart
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
function dhcp_stop()
|
|
||||||
{
|
|
||||||
local tmpfile=$(mktemp)
|
|
||||||
grep -v "subnet 10.0.0.0" "$dhcpd_conf_file" >"$tmpfile"
|
|
||||||
if diff "$tmpfile" "$dhcpd_conf_file" >&/dev/null
|
|
||||||
then
|
|
||||||
rm "$tmpfile"
|
|
||||||
else
|
|
||||||
mv "$tmpfile" "$dhcpd_conf_file"
|
|
||||||
fi
|
|
||||||
|
|
||||||
"$dhcpd_init_file" restart
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
op_start() {
|
|
||||||
echo 1 >/proc/sys/net/ipv4/ip_forward
|
|
||||||
iptables -t nat -A POSTROUTING -o ${netdev} -j MASQUERADE
|
|
||||||
[ "$dhcp" != 'no' ] && dhcp_start
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
op_stop() {
|
|
||||||
[ "$dhcp" != 'no' ] && dhcp_stop
|
|
||||||
iptables -t nat -D POSTROUTING -o ${netdev} -j MASQUERADE
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
show_status() {
|
|
||||||
echo '============================================================'
|
|
||||||
ifconfig
|
|
||||||
echo ' '
|
|
||||||
ip route list
|
|
||||||
echo ' '
|
|
||||||
route -n
|
|
||||||
echo '============================================================'
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
start)
|
|
||||||
op_start
|
|
||||||
;;
|
|
||||||
|
|
||||||
stop)
|
|
||||||
op_stop
|
|
||||||
;;
|
|
||||||
|
|
||||||
status)
|
|
||||||
show_status
|
|
||||||
;;
|
|
||||||
|
|
||||||
*)
|
|
||||||
echo "Unknown command: $command" >&2
|
|
||||||
echo 'Valid commands are: start, stop, status' >&2
|
|
||||||
exit 1
|
|
||||||
esac
|
|
||||||
@ -1,28 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# Default Xen network start/stop script.
|
|
||||||
# Xend calls a network script when it starts.
|
|
||||||
# The script name to use is defined in ${XEN_CONFIG_DIR}/xend-config.sxp
|
|
||||||
# in the network-script field.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
#
|
|
||||||
# network-route (start|stop|status) {VAR=VAL}*
|
|
||||||
#
|
|
||||||
# Vars:
|
|
||||||
#
|
|
||||||
# netdev The gateway interface (default eth0).
|
|
||||||
# antispoof Whether to use iptables to prevent spoofing (default yes).
|
|
||||||
#
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/hotplugpath.sh"
|
|
||||||
. "$dir/xen-script-common.sh"
|
|
||||||
|
|
||||||
evalVariables "$@"
|
|
||||||
|
|
||||||
netdev=${netdev:-eth0}
|
|
||||||
|
|
||||||
echo 1 >/proc/sys/net/ipv4/ip_forward
|
|
||||||
echo 1 >/proc/sys/net/ipv4/conf/${netdev}/proxy_arp
|
|
||||||
@ -1,108 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# ${XEN_SCRIPT_DIR}/vif-bridge
|
|
||||||
#
|
|
||||||
# Script for configuring a vif in bridged mode.
|
|
||||||
# The hotplugging system will call this script if it is specified either in
|
|
||||||
# the device configuration given to Xend, or the default Xend configuration
|
|
||||||
# in ${XEN_CONFIG_DIR}/xend-config.sxp. If the script is specified in
|
|
||||||
# neither of those places, then this script is the default.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
# vif-bridge (add|remove|online|offline)
|
|
||||||
#
|
|
||||||
# Environment vars:
|
|
||||||
# vif vif interface name (required).
|
|
||||||
# XENBUS_PATH path to this device's details in the XenStore (required).
|
|
||||||
#
|
|
||||||
# Read from the store:
|
|
||||||
# bridge bridge to add the vif to (optional). Defaults to searching for the
|
|
||||||
# bridge itself.
|
|
||||||
# ip list of IP networks for the vif, space-separated (optional).
|
|
||||||
#
|
|
||||||
# up:
|
|
||||||
# Enslaves the vif interface to the bridge and adds iptables rules
|
|
||||||
# for its ip addresses (if any).
|
|
||||||
#
|
|
||||||
# down:
|
|
||||||
# Removes the vif interface from the bridge and removes the iptables
|
|
||||||
# rules for its ip addresses (if any).
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/vif-common.sh"
|
|
||||||
|
|
||||||
bridge=${bridge:-}
|
|
||||||
bridge=$(xenstore_read_default "$XENBUS_PATH/bridge" "$bridge")
|
|
||||||
|
|
||||||
if [ -z "$bridge" ]
|
|
||||||
then
|
|
||||||
bridge=$(brctl show | cut -d "
|
|
||||||
" -f 2 | cut -f 1)
|
|
||||||
|
|
||||||
if [ -z "$bridge" ]
|
|
||||||
then
|
|
||||||
fatal "Could not find bridge, and none was specified"
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
#
|
|
||||||
# Old style bridge setup with netloop, used to have a bridge name
|
|
||||||
# of xenbrX, enslaving pethX and vif0.X, and then configuring
|
|
||||||
# eth0.
|
|
||||||
#
|
|
||||||
# New style bridge setup does not use netloop, so the bridge name
|
|
||||||
# is ethX and the physical device is enslaved pethX
|
|
||||||
#
|
|
||||||
# So if...
|
|
||||||
#
|
|
||||||
# - User asks for xenbrX
|
|
||||||
# - AND xenbrX doesn't exist
|
|
||||||
# - AND there is a ethX device which is a bridge
|
|
||||||
#
|
|
||||||
# ..then we translate xenbrX to ethX
|
|
||||||
#
|
|
||||||
# This lets old config files work without modification
|
|
||||||
#
|
|
||||||
if [ ! -e "/sys/class/net/$bridge" ] && [ -z "${bridge##xenbr*}" ]
|
|
||||||
then
|
|
||||||
if [ -e "/sys/class/net/eth${bridge#xenbr}/bridge" ]
|
|
||||||
then
|
|
||||||
bridge="eth${bridge#xenbr}"
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
RET=0
|
|
||||||
ip link show $bridge 1>/dev/null 2>&1 || RET=1
|
|
||||||
if [ "$RET" -eq 1 ]
|
|
||||||
then
|
|
||||||
fatal "Could not find bridge device $bridge"
|
|
||||||
fi
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
online)
|
|
||||||
setup_virtual_bridge_port "$dev"
|
|
||||||
mtu="`ip link show $bridge | awk '/mtu/ { print $5 }'`"
|
|
||||||
if [ -n "$mtu" ] && [ "$mtu" -gt 0 ]
|
|
||||||
then
|
|
||||||
ip link set $dev mtu $mtu || :
|
|
||||||
fi
|
|
||||||
add_to_bridge "$bridge" "$dev"
|
|
||||||
;;
|
|
||||||
|
|
||||||
offline)
|
|
||||||
do_without_error brctl delif "$bridge" "$dev"
|
|
||||||
do_without_error ifconfig "$dev" down
|
|
||||||
;;
|
|
||||||
|
|
||||||
add)
|
|
||||||
setup_virtual_bridge_port "$dev"
|
|
||||||
add_to_bridge "$bridge" "$dev"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
log debug "Successful vif-bridge $command for $dev, bridge $bridge."
|
|
||||||
if [ "$type_if" = vif -a "$command" = "online" ]
|
|
||||||
then
|
|
||||||
success
|
|
||||||
fi
|
|
||||||
@ -1,190 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
. "$dir/xen-network-common.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
|
|
||||||
if [ "$command" != "online" ] &&
|
|
||||||
[ "$command" != "offline" ] &&
|
|
||||||
[ "$command" != "add" ] &&
|
|
||||||
[ "$command" != "remove" ]
|
|
||||||
then
|
|
||||||
log err "Invalid command: $command"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
# Parameters may be read from the environment, the command line arguments, and
|
|
||||||
# the store, with overriding in that order. The environment is given by the
|
|
||||||
# driver, the command line is given by the Xend global configuration, and
|
|
||||||
# store details are given by the per-domain or per-device configuration.
|
|
||||||
|
|
||||||
evalVariables "$@"
|
|
||||||
|
|
||||||
# Older versions of Xen do not pass in the type as an argument,
|
|
||||||
# so the default value is vif.
|
|
||||||
: ${type_if:=vif}
|
|
||||||
|
|
||||||
case "$type_if" in
|
|
||||||
vif)
|
|
||||||
dev=$vif
|
|
||||||
;;
|
|
||||||
tap)
|
|
||||||
dev=$INTERFACE
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
log err "unknown interface type $type_if"
|
|
||||||
exit 1
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
online | offline)
|
|
||||||
test "$type_if" != vif && exit 0
|
|
||||||
;;
|
|
||||||
add | remove)
|
|
||||||
test "$type_if" != tap && exit 0
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
|
|
||||||
if [ "$type_if" = vif ]; then
|
|
||||||
# Check presence of compulsory args.
|
|
||||||
XENBUS_PATH="${XENBUS_PATH:?}"
|
|
||||||
dev="${dev:?}"
|
|
||||||
|
|
||||||
vifname=$(xenstore_read_default "$XENBUS_PATH/vifname" "")
|
|
||||||
if [ "$vifname" ]
|
|
||||||
then
|
|
||||||
if [ "$command" == "online" ] && ! ip link show "$vifname" >&/dev/null
|
|
||||||
then
|
|
||||||
do_or_die ip link set "$dev" name "$vifname"
|
|
||||||
fi
|
|
||||||
dev="$vifname"
|
|
||||||
fi
|
|
||||||
elif [ "$type_if" = tap ]; then
|
|
||||||
# Check presence of compulsory args.
|
|
||||||
: ${INTERFACE:?}
|
|
||||||
|
|
||||||
# Get xenbus_path from device name.
|
|
||||||
# The name is built like that: "tap${domid}.${devid}".
|
|
||||||
dev_=${dev#tap}
|
|
||||||
domid=${dev_%.*}
|
|
||||||
devid=${dev_#*.}
|
|
||||||
|
|
||||||
XENBUS_PATH="/local/domain/0/backend/vif/$domid/$devid"
|
|
||||||
fi
|
|
||||||
|
|
||||||
ip=${ip:-}
|
|
||||||
ip=$(xenstore_read_default "$XENBUS_PATH/ip" "$ip")
|
|
||||||
|
|
||||||
frob_iptable()
|
|
||||||
{
|
|
||||||
if [ "$command" == "online" ]
|
|
||||||
then
|
|
||||||
local c="-I"
|
|
||||||
else
|
|
||||||
local c="-D"
|
|
||||||
fi
|
|
||||||
|
|
||||||
iptables "$c" FORWARD -m physdev --physdev-is-bridged --physdev-in "$dev" \
|
|
||||||
"$@" -j ACCEPT 2>/dev/null &&
|
|
||||||
iptables "$c" FORWARD -m physdev --physdev-is-bridged --physdev-out "$dev" \
|
|
||||||
-j ACCEPT 2>/dev/null
|
|
||||||
|
|
||||||
if [ "$command" == "online" -a $? -ne 0 ]
|
|
||||||
then
|
|
||||||
log err "iptables setup failed. This may affect guest networking."
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# Add or remove the appropriate entries in the iptables. With antispoofing
|
|
||||||
# turned on, we have to explicitly allow packets to the interface, regardless
|
|
||||||
# of the ip setting. If ip is set, then we additionally restrict the packets
|
|
||||||
# to those coming from the specified networks, though we allow DHCP requests
|
|
||||||
# as well.
|
|
||||||
#
|
|
||||||
handle_iptable()
|
|
||||||
{
|
|
||||||
# Check for a working iptables installation. Checking for the iptables
|
|
||||||
# binary is not sufficient, because the user may not have the appropriate
|
|
||||||
# modules installed. If iptables is not working, then there's no need to do
|
|
||||||
# anything with it, so we can just return.
|
|
||||||
if ! iptables -L -n >&/dev/null
|
|
||||||
then
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
claim_lock "iptables"
|
|
||||||
|
|
||||||
if [ "$ip" != "" ]
|
|
||||||
then
|
|
||||||
local addr
|
|
||||||
for addr in $ip
|
|
||||||
do
|
|
||||||
frob_iptable -s "$addr"
|
|
||||||
done
|
|
||||||
|
|
||||||
# Always allow the domain to talk to a DHCP server.
|
|
||||||
frob_iptable -p udp --sport 68 --dport 67
|
|
||||||
else
|
|
||||||
# No IP addresses have been specified, so allow anything.
|
|
||||||
frob_iptable
|
|
||||||
fi
|
|
||||||
|
|
||||||
release_lock "iptables"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# ip_of interface
|
|
||||||
#
|
|
||||||
# Print the IP address currently in use at the given interface, or nothing if
|
|
||||||
# the interface is not up.
|
|
||||||
#
|
|
||||||
ip_of()
|
|
||||||
{
|
|
||||||
ip addr show "$1" | awk "/^.*inet.*$1\$/{print \$2}" | sed -n '1 s,/.*,,p'
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# dom0_ip
|
|
||||||
#
|
|
||||||
# Print the IP address of the interface in dom0 through which we are routing.
|
|
||||||
# This is the IP address on the interface specified as "netdev" as a parameter
|
|
||||||
# to these scripts, or eth0 by default. This function will call fatal if no
|
|
||||||
# such interface could be found.
|
|
||||||
#
|
|
||||||
dom0_ip()
|
|
||||||
{
|
|
||||||
local nd=${netdev:-eth0}
|
|
||||||
local result=$(ip_of "$nd")
|
|
||||||
if [ -z "$result" ]
|
|
||||||
then
|
|
||||||
fatal
|
|
||||||
"$netdev is not up. Bring it up or specify another interface with " \
|
|
||||||
"netdev=<if> as a parameter to $0."
|
|
||||||
fi
|
|
||||||
echo "$result"
|
|
||||||
}
|
|
||||||
@ -1,192 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# ${XEN_SCRIPT_DIR}/vif-nat
|
|
||||||
#
|
|
||||||
# Script for configuring a vif in routed-nat mode.
|
|
||||||
# The hotplugging system will call this script if it is specified either in
|
|
||||||
# the device configuration given to Xend, or the default Xend configuration
|
|
||||||
# in ${XEN_CONFIG_DIR}/xend-config.sxp. If the script is specified in
|
|
||||||
# neither of those places, then vif-bridge is the default.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
# vif-nat (add|remove|online|offline)
|
|
||||||
#
|
|
||||||
# Environment vars:
|
|
||||||
# dev vif interface name (required).
|
|
||||||
# XENBUS_PATH path to this device's details in the XenStore (required).
|
|
||||||
#
|
|
||||||
# Parameters:
|
|
||||||
# dhcp Whether to alter the local DHCP configuration to include this
|
|
||||||
# new host (default no).
|
|
||||||
#
|
|
||||||
# Read from the store:
|
|
||||||
# ip list of IP networks for the vif, space-separated (default given in
|
|
||||||
# this script).
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/vif-common.sh"
|
|
||||||
|
|
||||||
# turn on dhcp feature by default if dhcpd is installed
|
|
||||||
if [ -f /etc/dhcpd.conf ]
|
|
||||||
then
|
|
||||||
dhcp=${dhcp:-yes}
|
|
||||||
else
|
|
||||||
dhcp=${dhcp:-no}
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$dhcp" != 'no' ]
|
|
||||||
then
|
|
||||||
dhcpd_conf_file=$(find_dhcpd_conf_file)
|
|
||||||
dhcpd_init_file=$(find_dhcpd_init_file)
|
|
||||||
dhcpd_arg_file=$(find_dhcpd_arg_file)
|
|
||||||
if [ -z "$dhcpd_conf_file" ] || [ -z "$dhcpd_init_file" ] || [ -z "$dhcpd_arg_file" ]
|
|
||||||
then
|
|
||||||
echo 'Failed to find dhcpd configuration or init or args file.' >&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
domid=$(xenstore_read "$XENBUS_PATH/frontend-id")
|
|
||||||
vifid=$(xenstore_read "$XENBUS_PATH/handle")
|
|
||||||
vifid=$(( $vifid + 1 ))
|
|
||||||
|
|
||||||
|
|
||||||
ip_from_dom()
|
|
||||||
{
|
|
||||||
local domid1=$(( $domid / 256 ))
|
|
||||||
local domid2=$(( $domid % 256 ))
|
|
||||||
|
|
||||||
echo "10.$domid1.$domid2.$vifid/16"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
routing_ip()
|
|
||||||
{
|
|
||||||
echo $(echo $1 | awk -F. '{print $1"."$2"."$3"."$4 + 127}')
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
dotted_quad()
|
|
||||||
{
|
|
||||||
echo\
|
|
||||||
$(( ($1 & 0xFF000000) >> 24))\
|
|
||||||
.$(( ($1 & 0x00FF0000) >> 16))\
|
|
||||||
.$(( ($1 & 0x0000FF00) >> 8 ))\
|
|
||||||
.$(( $1 & 0x000000FF ))
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
if [ "$ip" = "" ]
|
|
||||||
then
|
|
||||||
ip=$(ip_from_dom)
|
|
||||||
fi
|
|
||||||
|
|
||||||
router_ip=$(routing_ip "$ip")
|
|
||||||
|
|
||||||
# Split the given IP/bits pair.
|
|
||||||
vif_ip=`echo ${ip} | awk -F/ '{print $1}'`
|
|
||||||
|
|
||||||
hostname=$(xenstore_read "$XENBUS_PATH/domain" | tr -- '_.:/+' '-----')
|
|
||||||
if [ "$vifid" != "1" ]
|
|
||||||
then
|
|
||||||
hostname="$hostname-$vifid"
|
|
||||||
fi
|
|
||||||
|
|
||||||
dhcparg_remove_entry()
|
|
||||||
{
|
|
||||||
local tmpfile=$(mktemp)
|
|
||||||
sed -e "s/${dev} //" "$dhcpd_arg_file" >"$tmpfile"
|
|
||||||
if diff "$tmpfile" "$dhcpd_arg_file" >/dev/null
|
|
||||||
then
|
|
||||||
rm "$tmpfile"
|
|
||||||
else
|
|
||||||
mv "$tmpfile" "$dhcpd_arg_file"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
dhcparg_add_entry()
|
|
||||||
{
|
|
||||||
dhcparg_remove_entry
|
|
||||||
local tmpfile=$(mktemp)
|
|
||||||
# handle Red Hat, SUSE, and Debian styles, with or without quotes
|
|
||||||
sed -e 's/^DHCPDARGS="*\([^"]*\)"*/DHCPDARGS="\1'"${dev} "'"/' \
|
|
||||||
"$dhcpd_arg_file" >"$tmpfile" && mv "$tmpfile" "$dhcpd_arg_file"
|
|
||||||
sed -e 's/^DHCPD_INTERFACE="*\([^"]*\)"*/DHCPD_INTERFACE="\1'"${dev} "'"/' \
|
|
||||||
"$dhcpd_arg_file" >"$tmpfile" && mv "$tmpfile" "$dhcpd_arg_file"
|
|
||||||
sed -e 's/^INTERFACES="*\([^"]*\)"*/INTERFACES="\1'"${dev} "'"/' \
|
|
||||||
"$dhcpd_arg_file" >"$tmpfile" && mv "$tmpfile" "$dhcpd_arg_file"
|
|
||||||
rm -f "$tmpfile"
|
|
||||||
}
|
|
||||||
|
|
||||||
dhcp_remove_entry()
|
|
||||||
{
|
|
||||||
local tmpfile=$(mktemp)
|
|
||||||
grep -v "host $hostname" "$dhcpd_conf_file" >"$tmpfile"
|
|
||||||
if diff "$tmpfile" "$dhcpd_conf_file" >/dev/null
|
|
||||||
then
|
|
||||||
rm "$tmpfile"
|
|
||||||
else
|
|
||||||
mv "$tmpfile" "$dhcpd_conf_file"
|
|
||||||
fi
|
|
||||||
dhcparg_remove_entry
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
dhcp_up()
|
|
||||||
{
|
|
||||||
claim_lock "vif-nat-dhcp"
|
|
||||||
dhcp_remove_entry
|
|
||||||
mac=$(xenstore_read "$XENBUS_PATH/mac")
|
|
||||||
echo >>"$dhcpd_conf_file" \
|
|
||||||
"host $hostname { hardware ethernet $mac; fixed-address $vif_ip; option routers $router_ip; option host-name \"$hostname\"; }"
|
|
||||||
dhcparg_add_entry
|
|
||||||
release_lock "vif-nat-dhcp"
|
|
||||||
"$dhcpd_init_file" restart || true
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
dhcp_down()
|
|
||||||
{
|
|
||||||
claim_lock "vif-nat-dhcp"
|
|
||||||
dhcp_remove_entry
|
|
||||||
release_lock "vif-nat-dhcp"
|
|
||||||
"$dhcpd_init_file" restart || true # We need to ignore failure because
|
|
||||||
# ISC dhcpd 3 borks if there is nothing
|
|
||||||
# for it to do, which is the case if
|
|
||||||
# the outgoing interface is not
|
|
||||||
# configured to offer leases and there
|
|
||||||
# are no vifs.
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
online)
|
|
||||||
if ip route | grep -q "dev ${dev}"
|
|
||||||
then
|
|
||||||
log debug "${dev} already up"
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
do_or_die ip link set "${dev}" up arp on
|
|
||||||
do_or_die ip addr add "$router_ip" dev "${dev}"
|
|
||||||
do_or_die ip route add "$vif_ip" dev "${dev}" src "$router_ip"
|
|
||||||
echo 1 >/proc/sys/net/ipv4/conf/${dev}/proxy_arp
|
|
||||||
[ "$dhcp" != 'no' ] && dhcp_up
|
|
||||||
;;
|
|
||||||
offline)
|
|
||||||
[ "$dhcp" != 'no' ] && dhcp_down
|
|
||||||
do_without_error ifconfig "${dev}" down
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
|
|
||||||
handle_iptable
|
|
||||||
|
|
||||||
log debug "Successful vif-nat $command for ${dev}."
|
|
||||||
if [ "$command" = "online" ]
|
|
||||||
then
|
|
||||||
success
|
|
||||||
fi
|
|
||||||
@ -1,56 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# ${XEN_SCRIPT_DIR}/vif-route
|
|
||||||
#
|
|
||||||
# Script for configuring a vif in routed mode.
|
|
||||||
# The hotplugging system will call this script if it is specified either in
|
|
||||||
# the device configuration given to Xend, or the default Xend configuration
|
|
||||||
# in ${XEN_CONFIG_DIR}/xend-config.sxp. If the script is specified in
|
|
||||||
# neither of those places, then vif-bridge is the default.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
# vif-route (add|remove|online|offline)
|
|
||||||
#
|
|
||||||
# Environment vars:
|
|
||||||
# dev vif interface name (required).
|
|
||||||
# XENBUS_PATH path to this device's details in the XenStore (required).
|
|
||||||
#
|
|
||||||
# Read from the store:
|
|
||||||
# ip list of IP networks for the vif, space-separated (default given in
|
|
||||||
# this script).
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "${dir}/vif-common.sh"
|
|
||||||
|
|
||||||
main_ip=$(dom0_ip)
|
|
||||||
|
|
||||||
case "${command}" in
|
|
||||||
online)
|
|
||||||
ifconfig ${dev} ${main_ip} netmask 255.255.255.255 up
|
|
||||||
echo 1 >/proc/sys/net/ipv4/conf/${dev}/proxy_arp
|
|
||||||
ipcmd='add'
|
|
||||||
cmdprefix=''
|
|
||||||
;;
|
|
||||||
offline)
|
|
||||||
do_without_error ifdown ${dev}
|
|
||||||
ipcmd='del'
|
|
||||||
cmdprefix='do_without_error'
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
if [ "${ip}" ] ; then
|
|
||||||
# If we've been given a list of IP addresses, then add routes from dom0 to
|
|
||||||
# the guest using those addresses.
|
|
||||||
for addr in ${ip} ; do
|
|
||||||
${cmdprefix} ip route ${ipcmd} ${addr} dev ${dev} src ${main_ip}
|
|
||||||
done
|
|
||||||
fi
|
|
||||||
|
|
||||||
handle_iptable
|
|
||||||
|
|
||||||
log debug "Successful vif-route ${command} for ${dev}."
|
|
||||||
if [ "${command}" = "online" ]
|
|
||||||
then
|
|
||||||
success
|
|
||||||
fi
|
|
||||||
@ -1,65 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#============================================================================
|
|
||||||
# /etc/xen/vif-route-qubes
|
|
||||||
#
|
|
||||||
# Script for configuring a vif in routed mode.
|
|
||||||
# The hotplugging system will call this script if it is specified either in
|
|
||||||
# the device configuration given to Xend, or the default Xend configuration
|
|
||||||
# in /etc/xen/xend-config.sxp. If the script is specified in neither of those
|
|
||||||
# places, then vif-bridge is the default.
|
|
||||||
#
|
|
||||||
# Usage:
|
|
||||||
# vif-route (add|remove|online|offline)
|
|
||||||
#
|
|
||||||
# Environment vars:
|
|
||||||
# vif vif interface name (required).
|
|
||||||
# XENBUS_PATH path to this device's details in the XenStore (required).
|
|
||||||
#
|
|
||||||
# Read from the store:
|
|
||||||
# ip list of IP networks for the vif, space-separated (default given in
|
|
||||||
# this script).
|
|
||||||
#============================================================================
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/vif-common.sh"
|
|
||||||
|
|
||||||
#main_ip=$(dom0_ip)
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
online)
|
|
||||||
ifconfig ${vif} up
|
|
||||||
echo 1 >/proc/sys/net/ipv4/conf/${vif}/proxy_arp
|
|
||||||
ipcmd='add'
|
|
||||||
iptables_cmd='-I PREROUTING 1'
|
|
||||||
cmdprefix=''
|
|
||||||
;;
|
|
||||||
offline)
|
|
||||||
do_without_error ifdown ${vif}
|
|
||||||
ipcmd='del'
|
|
||||||
iptables_cmd='-D PREROUTING'
|
|
||||||
cmdprefix='do_without_error'
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
domid=${vif/vif/}
|
|
||||||
domid=${domid/.*/}
|
|
||||||
# metric must be possitive, but prefer later interface
|
|
||||||
# 32752 is max XID aka domid
|
|
||||||
metric=$[ 32752 - $domid ]
|
|
||||||
|
|
||||||
if [ "${ip}" ] ; then
|
|
||||||
# If we've been given a list of IP addresses, then add routes from dom0 to
|
|
||||||
# the guest using those addresses.
|
|
||||||
for addr in ${ip} ; do
|
|
||||||
${cmdprefix} ip route ${ipcmd} ${addr} dev ${vif} metric $metric
|
|
||||||
done
|
|
||||||
${cmdprefix} iptables -t raw $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
|
|
||||||
back_ip=`xenstore-read qubes-netvm-gateway`
|
|
||||||
${cmdprefix} ip addr ${ipcmd} ${back_ip}/32 dev ${vif}
|
|
||||||
fi
|
|
||||||
|
|
||||||
log debug "Successful vif-route-qubes $command for $vif."
|
|
||||||
if [ "$command" = "online" ]
|
|
||||||
then
|
|
||||||
success
|
|
||||||
fi
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
if test "$script"
|
|
||||||
then
|
|
||||||
exec $script $*
|
|
||||||
else
|
|
||||||
exec /etc/xen/scripts/vif-bridge $*
|
|
||||||
fi
|
|
||||||
|
|
||||||
@ -1,46 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
. "$dir/xen-network-common.sh"
|
|
||||||
|
|
||||||
bridge=$(xenstore_read_default "$XENBUS_PATH/bridge" "$bridge")
|
|
||||||
if [ -z "$bridge" ]
|
|
||||||
then
|
|
||||||
nr_bridges=$(($(brctl show | cut -f 1 | grep -v "^$" | wc -l) - 1))
|
|
||||||
if [ "$nr_bridges" != 1 ]
|
|
||||||
then
|
|
||||||
fatal "no bridge specified, and don't know which one to use ($nr_bridges found)"
|
|
||||||
fi
|
|
||||||
bridge=$(brctl show | cut -d "
|
|
||||||
" -f 2 | cut -f 1)
|
|
||||||
fi
|
|
||||||
|
|
||||||
command="$1"
|
|
||||||
shift
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
"online")
|
|
||||||
if [ "$bridge" != "-" ]
|
|
||||||
then
|
|
||||||
setup_virtual_bridge_port "$vif"
|
|
||||||
add_to_bridge "$bridge" "$vif"
|
|
||||||
else
|
|
||||||
# Just let the normal udev rules for interfaces handle it.
|
|
||||||
true
|
|
||||||
fi
|
|
||||||
success
|
|
||||||
;;
|
|
||||||
|
|
||||||
"add")
|
|
||||||
success
|
|
||||||
;;
|
|
||||||
|
|
||||||
"remove")
|
|
||||||
;;
|
|
||||||
|
|
||||||
*)
|
|
||||||
echo "Unknown command: $command"
|
|
||||||
echo 'Valid commands are: add, remove, online'
|
|
||||||
exit 1
|
|
||||||
esac
|
|
||||||
@ -1,22 +0,0 @@
|
|||||||
#!/bin/sh
|
|
||||||
#
|
|
||||||
# Copyright (c) 2007, FUJITSU Limited
|
|
||||||
# Based on the block scripts code.
|
|
||||||
#
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
add)
|
|
||||||
success
|
|
||||||
;;
|
|
||||||
remove)
|
|
||||||
# TODO
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
exit 0
|
|
||||||
@ -1,22 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/vtpm-hotplug-common.sh"
|
|
||||||
|
|
||||||
vtpm_fatal_error=0
|
|
||||||
|
|
||||||
case "$command" in
|
|
||||||
add)
|
|
||||||
vtpm_create_instance
|
|
||||||
;;
|
|
||||||
remove)
|
|
||||||
vtpm_remove_instance
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
if [ $vtpm_fatal_error -eq 0 ]; then
|
|
||||||
log debug "Successful vTPM operation '$command'."
|
|
||||||
success
|
|
||||||
else
|
|
||||||
fatal "Error while executing vTPM operation '$command'."
|
|
||||||
fi
|
|
||||||
@ -1,448 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 IBM Corporation
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/logging.sh"
|
|
||||||
. "$dir/locking.sh"
|
|
||||||
|
|
||||||
VTPMDB="/var/vtpm/vtpm.db"
|
|
||||||
|
|
||||||
#In the vtpm-impl file some commands should be defined:
|
|
||||||
# vtpm_create, vtpm_setup, vtpm_start, etc. (see below)
|
|
||||||
if [ -r "$dir/vtpm-impl.alt" ]; then
|
|
||||||
. "$dir/vtpm-impl.alt"
|
|
||||||
elif [ -r "$dir/vtpm-impl" ]; then
|
|
||||||
. "$dir/vtpm-impl"
|
|
||||||
else
|
|
||||||
function vtpm_create () {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
function vtpm_setup() {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
function vtpm_start() {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
function vtpm_suspend() {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
function vtpm_resume() {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
function vtpm_delete() {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
function vtpm_migrate() {
|
|
||||||
echo "Error: vTPM migration accross machines not implemented."
|
|
||||||
}
|
|
||||||
function vtpm_migrate_local() {
|
|
||||||
echo "Error: local vTPM migration not supported"
|
|
||||||
}
|
|
||||||
function vtpm_migrate_recover() {
|
|
||||||
true
|
|
||||||
}
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
#Find the instance number for the vtpm given the name of the domain
|
|
||||||
# Parameters
|
|
||||||
# - vmname : the name of the vm
|
|
||||||
# Return value
|
|
||||||
# Returns '0' if instance number could not be found, otherwise
|
|
||||||
# it returns the instance number in the variable 'instance'
|
|
||||||
function vtpmdb_find_instance () {
|
|
||||||
local vmname ret instance
|
|
||||||
vmname=$1
|
|
||||||
ret=0
|
|
||||||
|
|
||||||
instance=$(cat $VTPMDB | \
|
|
||||||
awk -vvmname=$vmname \
|
|
||||||
'{ \
|
|
||||||
if ( 1 != index($1,"#")) { \
|
|
||||||
if ( $1 == vmname ) { \
|
|
||||||
print $2; \
|
|
||||||
exit; \
|
|
||||||
} \
|
|
||||||
} \
|
|
||||||
}')
|
|
||||||
if [ "$instance" != "" ]; then
|
|
||||||
ret=$instance
|
|
||||||
fi
|
|
||||||
echo "$ret"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# Check whether a particular instance number is still available
|
|
||||||
# returns "0" if it is not available, "1" otherwise.
|
|
||||||
function vtpmdb_is_free_instancenum () {
|
|
||||||
local instance instances avail i
|
|
||||||
instance=$1
|
|
||||||
avail=1
|
|
||||||
#Allowed instance number range: 1-255
|
|
||||||
if [ $instance -eq 0 -o $instance -gt 255 ]; then
|
|
||||||
avail=0
|
|
||||||
else
|
|
||||||
instances=$(cat $VTPMDB | \
|
|
||||||
awk \
|
|
||||||
'{ \
|
|
||||||
if (1 != index($1,"#")) { \
|
|
||||||
printf("%s ",$2); \
|
|
||||||
} \
|
|
||||||
}')
|
|
||||||
for i in $instances; do
|
|
||||||
if [ $i -eq $instance ]; then
|
|
||||||
avail=0
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
fi
|
|
||||||
echo "$avail"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# Get an available instance number given the database
|
|
||||||
# Returns an unused instance number
|
|
||||||
function vtpmdb_get_free_instancenum () {
|
|
||||||
local ctr instances don found
|
|
||||||
instances=$(cat $VTPMDB | \
|
|
||||||
awk \
|
|
||||||
'{ \
|
|
||||||
if (1 != index($1,"#")) { \
|
|
||||||
printf("%s ",$2); \
|
|
||||||
} \
|
|
||||||
}')
|
|
||||||
ctr=1
|
|
||||||
don=0
|
|
||||||
while [ $don -eq 0 ]; do
|
|
||||||
found=0
|
|
||||||
for i in $instances; do
|
|
||||||
if [ $i -eq $ctr ]; then
|
|
||||||
found=1;
|
|
||||||
break;
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
if [ $found -eq 0 ]; then
|
|
||||||
don=1
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
let ctr=ctr+1
|
|
||||||
done
|
|
||||||
echo "$ctr"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# Add a domain name and instance number to the DB file
|
|
||||||
function vtpmdb_add_instance () {
|
|
||||||
local res vmname inst
|
|
||||||
vmname=$1
|
|
||||||
inst=$2
|
|
||||||
|
|
||||||
if [ ! -f $VTPMDB ]; then
|
|
||||||
echo "#Database for VM to vTPM association" > $VTPMDB
|
|
||||||
echo "#1st column: domain name" >> $VTPMDB
|
|
||||||
echo "#2nd column: TPM instance number" >> $VTPMDB
|
|
||||||
fi
|
|
||||||
res=$(vtpmdb_validate_entry $vmname $inst)
|
|
||||||
if [ $res -eq 0 ]; then
|
|
||||||
echo "$vmname $inst" >> $VTPMDB
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
#Validate whether an entry is the same as passed to this
|
|
||||||
#function
|
|
||||||
function vtpmdb_validate_entry () {
|
|
||||||
local res rc vmname inst
|
|
||||||
rc=0
|
|
||||||
vmname=$1
|
|
||||||
inst=$2
|
|
||||||
|
|
||||||
res=$(cat $VTPMDB | \
|
|
||||||
awk -vvmname=$vmname \
|
|
||||||
-vinst=$inst \
|
|
||||||
'{ \
|
|
||||||
if ( 1 == index($1,"#")) {\
|
|
||||||
} else \
|
|
||||||
if ( $1 == vmname && \
|
|
||||||
$2 == inst) { \
|
|
||||||
printf("1"); \
|
|
||||||
exit; \
|
|
||||||
} else \
|
|
||||||
if ( $1 == vmname || \
|
|
||||||
$2 == inst) { \
|
|
||||||
printf("2"); \
|
|
||||||
exit; \
|
|
||||||
} \
|
|
||||||
}')
|
|
||||||
|
|
||||||
if [ "$res" == "1" ]; then
|
|
||||||
rc=1
|
|
||||||
elif [ "$res" == "2" ]; then
|
|
||||||
rc=2
|
|
||||||
fi
|
|
||||||
echo "$rc"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
#Remove an entry from the vTPM database given its domain name
|
|
||||||
#and instance number
|
|
||||||
function vtpmdb_remove_entry () {
|
|
||||||
local vmname instance VTPMDB_TMP
|
|
||||||
vmname=$1
|
|
||||||
instance=$2
|
|
||||||
VTPMDB_TMP="$VTPMDB".tmp
|
|
||||||
|
|
||||||
$(cat $VTPMDB | \
|
|
||||||
awk -vvmname=$vmname \
|
|
||||||
'{ \
|
|
||||||
if ( $1 != vmname ) { \
|
|
||||||
print $0; \
|
|
||||||
} \
|
|
||||||
'} > $VTPMDB_TMP)
|
|
||||||
if [ -e $VTPMDB_TMP ]; then
|
|
||||||
mv -f $VTPMDB_TMP $VTPMDB
|
|
||||||
vtpm_delete $instance
|
|
||||||
else
|
|
||||||
log err "Error creating temporary file '$VTPMDB_TMP'."
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# Find the reason for the creation of this device:
|
|
||||||
# Returns 'resume' or 'create'
|
|
||||||
function vtpm_get_create_reason () {
|
|
||||||
local resume
|
|
||||||
resume=$(xenstore_read $XENBUS_PATH/resume)
|
|
||||||
if [ "$resume" == "True" ]; then
|
|
||||||
echo "resume"
|
|
||||||
else
|
|
||||||
echo "create"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
#Create a vTPM instance
|
|
||||||
# If no entry in the TPM database is found, the instance is
|
|
||||||
# created and an entry added to the database.
|
|
||||||
function vtpm_create_instance () {
|
|
||||||
local res instance domname reason uuid
|
|
||||||
uuid=$(xenstore_read "$XENBUS_PATH"/uuid)
|
|
||||||
reason=$(vtpm_get_create_reason)
|
|
||||||
|
|
||||||
claim_lock vtpmdb
|
|
||||||
|
|
||||||
instance="0"
|
|
||||||
|
|
||||||
if [ "$uuid" != "" ]; then
|
|
||||||
instance=$(vtpmdb_find_instance $uuid)
|
|
||||||
fi
|
|
||||||
if [ "$instance" == "0" ]; then
|
|
||||||
domname=$(xenstore_read "$XENBUS_PATH"/domain)
|
|
||||||
instance=$(vtpmdb_find_instance $domname)
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$instance" == "0" -a "$reason" != "create" ]; then
|
|
||||||
release_lock vtpmdb
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$instance" == "0" ]; then
|
|
||||||
#Try to give the preferred instance to the domain
|
|
||||||
instance=$(xenstore_read "$XENBUS_PATH"/pref_instance)
|
|
||||||
if [ "$instance" != "" ]; then
|
|
||||||
res=$(vtpmdb_is_free_instancenum $instance)
|
|
||||||
if [ $res -eq 0 ]; then
|
|
||||||
instance=$(vtpmdb_get_free_instancenum)
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
instance=$(vtpmdb_get_free_instancenum)
|
|
||||||
fi
|
|
||||||
|
|
||||||
vtpm_create $instance
|
|
||||||
|
|
||||||
if [ $vtpm_fatal_error -eq 0 ]; then
|
|
||||||
if [ "$uuid" != "" ]; then
|
|
||||||
vtpmdb_add_instance $uuid $instance
|
|
||||||
else
|
|
||||||
vtpmdb_add_instance $domname $instance
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
if [ "$reason" == "resume" ]; then
|
|
||||||
vtpm_resume $instance
|
|
||||||
else
|
|
||||||
vtpm_start $instance
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
release_lock vtpmdb
|
|
||||||
|
|
||||||
xenstore_write $XENBUS_PATH/instance $instance
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
#Remove an instance when a VM is terminating or suspending.
|
|
||||||
#Since it is assumed that the VM will appear again, the
|
|
||||||
#entry is kept in the VTPMDB file.
|
|
||||||
function vtpm_remove_instance () {
|
|
||||||
local instance reason domname uuid
|
|
||||||
#Stop script execution quietly if path does not exist (anymore)
|
|
||||||
xenstore-exists "$XENBUS_PATH"/domain
|
|
||||||
uuid=$(xenstore_read "$XENBUS_PATH"/uuid)
|
|
||||||
|
|
||||||
claim_lock vtpmdb
|
|
||||||
|
|
||||||
instance="0"
|
|
||||||
|
|
||||||
if [ "$uuid" != "" ]; then
|
|
||||||
instance=$(vtpmdb_find_instance $uuid)
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$instance" == "0" ]; then
|
|
||||||
domname=$(xenstore_read "$XENBUS_PATH"/domain)
|
|
||||||
instance=$(vtpmdb_find_instance $domname)
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ "$instance" != "0" ]; then
|
|
||||||
vtpm_suspend $instance
|
|
||||||
fi
|
|
||||||
|
|
||||||
release_lock vtpmdb
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
#Remove an entry in the VTPMDB file given the domain's name
|
|
||||||
#1st parameter: The name of the domain
|
|
||||||
function vtpm_delete_instance () {
|
|
||||||
local instance
|
|
||||||
|
|
||||||
claim_lock vtpmdb
|
|
||||||
|
|
||||||
instance=$(vtpmdb_find_instance $1)
|
|
||||||
if [ "$instance" != "0" ]; then
|
|
||||||
vtpmdb_remove_entry $1 $instance
|
|
||||||
fi
|
|
||||||
|
|
||||||
release_lock vtpmdb
|
|
||||||
}
|
|
||||||
|
|
||||||
# Determine whether the given address is local to this machine
|
|
||||||
# Return values:
|
|
||||||
# "-1" : the given machine name is invalid
|
|
||||||
# "0" : this is not an address of this machine
|
|
||||||
# "1" : this is an address local to this machine
|
|
||||||
function vtpm_isLocalAddress() {
|
|
||||||
local addr res
|
|
||||||
addr=$(ping $1 -c 1 | \
|
|
||||||
awk '{ print substr($3,2,length($3)-2); exit }')
|
|
||||||
if [ "$addr" == "" ]; then
|
|
||||||
echo "-1"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
res=$(ifconfig | grep "inet addr" | \
|
|
||||||
awk -vaddr=$addr \
|
|
||||||
'{ \
|
|
||||||
if ( addr == substr($2, 6)) {\
|
|
||||||
print "1"; \
|
|
||||||
} \
|
|
||||||
}' \
|
|
||||||
)
|
|
||||||
if [ "$res" == "" ]; then
|
|
||||||
echo "0"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
echo "1"
|
|
||||||
}
|
|
||||||
|
|
||||||
# Perform a migration step. This function differentiates between migration
|
|
||||||
# to the local host or to a remote machine.
|
|
||||||
# Parameters:
|
|
||||||
# 1st: destination host to migrate to
|
|
||||||
# 2nd: name of the domain to migrate
|
|
||||||
# 3rd: the migration step to perform
|
|
||||||
function vtpm_migration_step() {
|
|
||||||
local res=$(vtpm_isLocalAddress $1)
|
|
||||||
if [ "$res" == "0" ]; then
|
|
||||||
vtpm_migrate $1 $2 $3
|
|
||||||
else
|
|
||||||
vtpm_migrate_local
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Recover from migration due to an error. This function differentiates
|
|
||||||
# between migration to the local host or to a remote machine.
|
|
||||||
# Parameters:
|
|
||||||
# 1st: destination host the migration was going to
|
|
||||||
# 2nd: name of the domain that was to be migrated
|
|
||||||
# 3rd: the last successful migration step that was done
|
|
||||||
function vtpm_recover() {
|
|
||||||
local res
|
|
||||||
res=$(vtpm_isLocalAddress $1)
|
|
||||||
if [ "$res" == "0" ]; then
|
|
||||||
vtpm_migrate_recover $1 $2 $3
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
#Determine the domain id given a domain's name.
|
|
||||||
#1st parameter: name of the domain
|
|
||||||
#return value: domain id or -1 if domain id could not be determined
|
|
||||||
function vtpm_domid_from_name () {
|
|
||||||
local id name ids
|
|
||||||
ids=$(xenstore-list /local/domain)
|
|
||||||
for id in $ids; do
|
|
||||||
name=$(xenstore-read /local/domain/$id/name)
|
|
||||||
if [ "$name" == "$1" ]; then
|
|
||||||
echo "$id"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
echo "-1"
|
|
||||||
}
|
|
||||||
|
|
||||||
#Determine the virtual TPM's instance number using the domain ID.
|
|
||||||
#1st parm: domain ID
|
|
||||||
function vtpm_uuid_by_domid() {
|
|
||||||
echo $(xenstore-read /local/domain/0/backend/vtpm/$1/0/uuid)
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# Determine the vTPM's UUID by the name of the VM
|
|
||||||
function vtpm_uuid_from_vmname() {
|
|
||||||
local domid=$(vtpm_domid_from_name $1)
|
|
||||||
if [ "$domid" != "-1" ]; then
|
|
||||||
echo $(vtpm_uuid_by_domid $domid)
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
echo ""
|
|
||||||
}
|
|
||||||
|
|
||||||
#Add a virtual TPM instance number and its associated domain name
|
|
||||||
#to the VTPMDB file and activate usage of this virtual TPM instance
|
|
||||||
#by writing the instance number into the xenstore
|
|
||||||
#1st parm: name of virtual machine
|
|
||||||
#2nd parm: instance of associated virtual TPM
|
|
||||||
function vtpm_add_and_activate() {
|
|
||||||
local domid=$(vtpm_domid_from_name $1)
|
|
||||||
local vtpm_uuid=$(vtpm_uuid_from_vmname $1)
|
|
||||||
if [ "$vtpm_uuid" != "" -a "$domid" != "-1" ]; then
|
|
||||||
vtpmdb_add_instance $vtpm_uuid $2
|
|
||||||
xenstore-write backend/vtpm/$domid/0/instance $2
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
@ -1,18 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# This scripts must be called the following way:
|
|
||||||
# vtpm-delete <vtpm uuid>
|
|
||||||
# or
|
|
||||||
# vtpm-delete --vmname <vm name>
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/vtpm-common.sh"
|
|
||||||
|
|
||||||
if [ "$1" == "--vmname" ]; then
|
|
||||||
vtpm_uuid=$(vtpm_uuid_from_vmname $2)
|
|
||||||
if [ "$vtpm_uuid" != "" ];then
|
|
||||||
vtpm_delete_instance $vtpm_uuid
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
vtpm_delete_instance $1
|
|
||||||
fi
|
|
||||||
@ -1,35 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 IBM Corporation
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
|
|
||||||
findCommand "$@"
|
|
||||||
if [ "$command" != "online" ] &&
|
|
||||||
[ "$command" != "offline" ] &&
|
|
||||||
[ "$command" != "add" ] &&
|
|
||||||
[ "$command" != "remove" ]
|
|
||||||
then
|
|
||||||
log err "Invalid command: $command"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
XENBUS_PATH="${XENBUS_PATH:?}"
|
|
||||||
|
|
||||||
. "$dir/vtpm-common.sh"
|
|
||||||
@ -1,208 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# ===================================================================
|
|
||||||
#
|
|
||||||
# Copyright (c) 2005, Intel Corp.
|
|
||||||
# All rights reserved.
|
|
||||||
#
|
|
||||||
# Redistribution and use in source and binary forms, with or without
|
|
||||||
# modification, are permitted provided that the following conditions
|
|
||||||
# are met:
|
|
||||||
#
|
|
||||||
# * Redistributions of source code must retain the above copyright
|
|
||||||
# notice, this list of conditions and the following disclaimer.
|
|
||||||
# * Redistributions in binary form must reproduce the above
|
|
||||||
# copyright notice, this list of conditions and the following
|
|
||||||
# disclaimer in the documentation and/or other materials provided
|
|
||||||
# with the distribution.
|
|
||||||
# * Neither the name of Intel Corporation nor the names of its
|
|
||||||
# contributors may be used to endorse or promote products derived
|
|
||||||
# from this software without specific prior written permission.
|
|
||||||
#
|
|
||||||
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
||||||
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
||||||
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
||||||
# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
||||||
# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
||||||
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
||||||
# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
||||||
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
||||||
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
||||||
# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
||||||
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
||||||
# OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
||||||
# ===================================================================
|
|
||||||
|
|
||||||
# | SRC | TAG | CMD SIZE | ORD |mtype|strt
|
|
||||||
TPM_CMD_OPEN=\\x00\\x00\\x00\\x00\\x01\\xc1\\x00\\x00\\x00\\x11\\x01\\x00\\x00\\x01\\x01\\x01
|
|
||||||
TPM_CMD_RESM=\\x00\\x00\\x00\\x00\\x01\\xc1\\x00\\x00\\x00\\x11\\x01\\x00\\x00\\x01\\x01\\x02
|
|
||||||
TPM_CMD_CLOS=\\x00\\x00\\x00\\x00\\x01\\xc1\\x00\\x00\\x00\\x0e\\x01\\x00\\x00\\x02
|
|
||||||
TPM_CMD_DELE=\\x00\\x00\\x00\\x00\\x01\\xc1\\x00\\x00\\x00\\x0e\\x01\\x00\\x00\\x03
|
|
||||||
|
|
||||||
TPM_TYPE_PVM=\\x01
|
|
||||||
TPM_TYPE_HVM=\\x02
|
|
||||||
|
|
||||||
TPM_SUCCESS=00000000
|
|
||||||
|
|
||||||
TX_VTPM_MANAGER=/var/vtpm/fifos/from_console.fifo
|
|
||||||
RX_VTPM_MANAGER=/var/vtpm/fifos/to_console.fifo
|
|
||||||
|
|
||||||
VTPM_MIG=/usr/bin/vtpm_migrator
|
|
||||||
|
|
||||||
# -------------------- Helpers for binary streams -----------
|
|
||||||
|
|
||||||
function str_to_hex32() {
|
|
||||||
printf "%0.8x" $1
|
|
||||||
}
|
|
||||||
|
|
||||||
function hex32_to_bin() {
|
|
||||||
local inst=$(str_to_hex32 $1);
|
|
||||||
|
|
||||||
local n1=`echo $inst | sed 's/\(..\)....../\\\\x\1/'`
|
|
||||||
local n2=`echo $inst | sed 's/..\(..\)..../\\\\x\1/'`
|
|
||||||
local n3=`echo $inst | sed 's/....\(..\)../\\\\x\1/'`
|
|
||||||
local n4=`echo $inst | sed 's/......\(..\)/\\\\x\1/'`
|
|
||||||
|
|
||||||
echo "$n1$n2$n3$n4"
|
|
||||||
}
|
|
||||||
|
|
||||||
function vtpm_manager_cmd() {
|
|
||||||
local cmd=$1;
|
|
||||||
local inst=$2;
|
|
||||||
local inst_bin=$(hex32_to_bin $inst);
|
|
||||||
|
|
||||||
claim_lock vtpm_mgr
|
|
||||||
|
|
||||||
#send cmd to vtpm_manager
|
|
||||||
printf "$cmd$inst_bin" > $TX_VTPM_MANAGER
|
|
||||||
|
|
||||||
#recv response
|
|
||||||
set +e
|
|
||||||
local resp_hex=`dd skip=10 bs=1 count=4 if=$RX_VTPM_MANAGER 2> /dev/null | xxd -ps`
|
|
||||||
set -e
|
|
||||||
|
|
||||||
release_lock vtpm_mgr
|
|
||||||
|
|
||||||
#return whether the command was successful
|
|
||||||
if [ $resp_hex -ne $TPM_SUCCESS ]; then
|
|
||||||
vtpm_fatal_error=1
|
|
||||||
false
|
|
||||||
else
|
|
||||||
true
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Helper to get vm type to pass to vtpm_manager open/resume
|
|
||||||
function vtpm_get_type() {
|
|
||||||
local inst=$(xenstore_read $XENBUS_PATH/frontend-id)
|
|
||||||
local vm=$(xenstore_read /local/domain/$inst/vm)
|
|
||||||
if [ "$vm" != "" ]; then
|
|
||||||
local ostype=$(xenstore-read $vm/image/ostype)
|
|
||||||
if [ "$ostype" == "hvm" ]; then
|
|
||||||
echo $TPM_TYPE_HVM;
|
|
||||||
else
|
|
||||||
echo $TPM_TYPE_PVM;
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# ------------------ Command handlers -----------------
|
|
||||||
|
|
||||||
# Create new vtpm instance & set it up for use
|
|
||||||
function vtpm_create () {
|
|
||||||
# Creation is handled implicitly by the manager on first setup
|
|
||||||
# so just set it up for use
|
|
||||||
$(vtpm_start $1)
|
|
||||||
}
|
|
||||||
|
|
||||||
# Setup vtpm instance for use.
|
|
||||||
function vtpm_start() {
|
|
||||||
local vmtype=$(vtpm_get_type);
|
|
||||||
$(vtpm_manager_cmd $TPM_CMD_OPEN$vmtype $1)
|
|
||||||
}
|
|
||||||
|
|
||||||
function vtpm_resume() {
|
|
||||||
local vmtype=$(vtpm_get_type);
|
|
||||||
$(vtpm_manager_cmd $TPM_CMD_RESM$vmtype $1)
|
|
||||||
}
|
|
||||||
|
|
||||||
# Reset the vtpm AKA clear PCRs
|
|
||||||
function vtpm_reset() {
|
|
||||||
#not used by current implemenation
|
|
||||||
true
|
|
||||||
}
|
|
||||||
|
|
||||||
# Shutdown the vtpm while the vm is down
|
|
||||||
# This could be a suspend of shutdown
|
|
||||||
# we cannot distinquish, so save the state
|
|
||||||
# and decide on startup if we should keep is
|
|
||||||
function vtpm_suspend() {
|
|
||||||
$(vtpm_manager_cmd $TPM_CMD_CLOS $1)
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
function vtpm_delete() {
|
|
||||||
local inst=$1
|
|
||||||
if $(vtpm_manager_cmd $TPM_CMD_DELE $inst); then
|
|
||||||
rm -f /var/vtpm/vtpm_dm_$1.data
|
|
||||||
true
|
|
||||||
else
|
|
||||||
vtpm_fatal_error=1
|
|
||||||
false
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Perform a migration step. This function differentiates between migration
|
|
||||||
# to the local host or to a remote machine.
|
|
||||||
# Parameters:
|
|
||||||
# 1st: destination host to migrate to
|
|
||||||
# 2nd: name of the domain to migrate
|
|
||||||
# 3rd: the migration step to perform
|
|
||||||
function vtpm_migrate() {
|
|
||||||
local instance res
|
|
||||||
|
|
||||||
instance=$(vtpmdb_find_instance $2)
|
|
||||||
if [ "$instance" == "" ]; then
|
|
||||||
log err "VTPM Migratoin failed. Unable to translation of domain name"
|
|
||||||
echo "Error: VTPM Migration failed while looking up instance number"
|
|
||||||
fi
|
|
||||||
|
|
||||||
case "$3" in
|
|
||||||
0)
|
|
||||||
#Incicate migration supported
|
|
||||||
echo "0"
|
|
||||||
;;
|
|
||||||
|
|
||||||
1)
|
|
||||||
# Get Public Key from Destination
|
|
||||||
# Call vtpm_manager's migration part 1
|
|
||||||
claim_lock vtpm_mgr
|
|
||||||
$VTPM_MIG $1 $2 $instance $3
|
|
||||||
release_lock vtpm_mgr
|
|
||||||
;;
|
|
||||||
|
|
||||||
2)
|
|
||||||
# Call manager's migration step 2 and send result to destination
|
|
||||||
# If successful remove from db
|
|
||||||
claim_lock vtpm_mgr
|
|
||||||
$VTPM_MIG $1 $2 $instance $3
|
|
||||||
release_lock vtpm_mgr
|
|
||||||
;;
|
|
||||||
|
|
||||||
3)
|
|
||||||
if `ps x | grep "$VTPM_MIG $1"`; then
|
|
||||||
log err "VTPM Migration failed to complete."
|
|
||||||
echo "Error: VTPM Migration failed to complete."
|
|
||||||
fi
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
function vtpm_migrate_recover() {
|
|
||||||
echo "Error: Recovery not supported yet"
|
|
||||||
}
|
|
||||||
|
|
||||||
function vtpm_migrate_local() {
|
|
||||||
echo "Error: local vTPM migration not supported"
|
|
||||||
}
|
|
||||||
@ -1,19 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 IBM Corporation
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/vtpm-common.sh"
|
|
||||||
@ -1,45 +0,0 @@
|
|||||||
#! /bin/bash
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/xen-hotplug-common.sh"
|
|
||||||
|
|
||||||
# Claim the lock protecting ${XEN_SCRIPT_DIR}/block. This stops a race whereby
|
|
||||||
# paths in the store would disappear underneath that script as it attempted to
|
|
||||||
# read from the store checking for device sharing.
|
|
||||||
# Any other scripts that do similar things will have to have their lock
|
|
||||||
# claimed too.
|
|
||||||
# This is pretty horrible, but there's not really a nicer way of solving this.
|
|
||||||
claim_lock "block"
|
|
||||||
|
|
||||||
# split backend/DEVCLASS/VMID/DEVID on slashes
|
|
||||||
path_array=( ${XENBUS_PATH//\// } )
|
|
||||||
# get /vm/UUID path
|
|
||||||
vm=$(xenstore_read_default "/local/domain/${path_array[2]}/vm" "")
|
|
||||||
# construct /vm/UUID/device/DEVCLASS/DEVID
|
|
||||||
if [ "$vm" != "" ]; then
|
|
||||||
vm_dev="$vm/device/${path_array[1]}/${path_array[3]}"
|
|
||||||
|
|
||||||
# if the vm path does not exist and the device class is 'vbd' then we may have
|
|
||||||
# a tap2 device
|
|
||||||
$(xenstore-read "$vm_dev" 2>/dev/null) || \
|
|
||||||
{
|
|
||||||
if [ "${path_array[1]}" = "vbd" ]; then
|
|
||||||
vm_dev="$vm/device/tap2/${path_array[3]}"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
else
|
|
||||||
vm_dev=
|
|
||||||
fi
|
|
||||||
|
|
||||||
# remove device frontend store entries
|
|
||||||
xenstore-rm -t \
|
|
||||||
$(xenstore-read "$XENBUS_PATH/frontend" 2>/dev/null) 2>/dev/null || true
|
|
||||||
|
|
||||||
# remove device backend store entries
|
|
||||||
xenstore-rm -t "$XENBUS_PATH" 2>/dev/null || true
|
|
||||||
xenstore-rm -t "error/$XENBUS_PATH" 2>/dev/null || true
|
|
||||||
|
|
||||||
# remove device path from /vm/UUID
|
|
||||||
[ "$vm_dev" != "" ] && xenstore-rm -t "$vm_dev" 2>/dev/null || true
|
|
||||||
|
|
||||||
release_lock "block"
|
|
||||||
@ -1,102 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
|
|
||||||
dir=$(dirname "$0")
|
|
||||||
. "$dir/hotplugpath.sh"
|
|
||||||
. "$dir/logging.sh"
|
|
||||||
. "$dir/xen-script-common.sh"
|
|
||||||
. "$dir/locking.sh"
|
|
||||||
|
|
||||||
exec 2>>/var/log/xen/xen-hotplug.log
|
|
||||||
|
|
||||||
export PATH="${BINDIR}:${SBINDIR}:${LIBEXEC}:${PRIVATE_BINDIR}:/sbin:/bin:/usr/bin:/usr/sbin:$PATH"
|
|
||||||
export LANG="POSIX"
|
|
||||||
unset $(set | grep ^LC_ | cut -d= -f1)
|
|
||||||
|
|
||||||
fatal() {
|
|
||||||
_xenstore_write "$XENBUS_PATH/hotplug-error" "$*" \
|
|
||||||
"$XENBUS_PATH/hotplug-status" error
|
|
||||||
log err "$@"
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
success() {
|
|
||||||
# Tell DevController that backend is "connected"
|
|
||||||
xenstore_write "$XENBUS_PATH/hotplug-status" connected
|
|
||||||
}
|
|
||||||
|
|
||||||
do_or_die() {
|
|
||||||
"$@" || fatal "$@ failed"
|
|
||||||
}
|
|
||||||
|
|
||||||
do_without_error() {
|
|
||||||
"$@" 2>/dev/null || log debug "$@ failed"
|
|
||||||
}
|
|
||||||
|
|
||||||
sigerr() {
|
|
||||||
fatal "$0 failed; error detected."
|
|
||||||
}
|
|
||||||
|
|
||||||
trap sigerr ERR
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# xenstore_read <path>+
|
|
||||||
#
|
|
||||||
# Read each of the given paths, returning each result on a separate line, or
|
|
||||||
# exit this script if any of the paths is missing.
|
|
||||||
#
|
|
||||||
xenstore_read() {
|
|
||||||
local v=$(xenstore-read "$@" || true)
|
|
||||||
[ "$v" != "" ] || fatal "xenstore-read $@ failed."
|
|
||||||
echo "$v"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# xenstore_read_default <path> <default>
|
|
||||||
#
|
|
||||||
# Read the given path, returning the value there or the given default if the
|
|
||||||
# path is not present.
|
|
||||||
#
|
|
||||||
xenstore_read_default() {
|
|
||||||
xenstore-read "$1" 2>/dev/null || echo "$2"
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
##
|
|
||||||
# _xenstore_write (<path> <value>)+
|
|
||||||
#
|
|
||||||
# Write each of the key/value pairs to the store.
|
|
||||||
#
|
|
||||||
_xenstore_write() {
|
|
||||||
log debug "Writing $@ to xenstore."
|
|
||||||
xenstore-write "$@"
|
|
||||||
}
|
|
||||||
|
|
||||||
##
|
|
||||||
# xenstore_write (<path> <value>)+
|
|
||||||
#
|
|
||||||
# Write each of the key/value pairs to the store, and exit this script if any
|
|
||||||
# such writing fails.
|
|
||||||
#
|
|
||||||
xenstore_write() {
|
|
||||||
_xenstore_write "$@" || fatal "Writing $@ to xenstore failed."
|
|
||||||
}
|
|
||||||
|
|
||||||
log debug "$@" "XENBUS_PATH=$XENBUS_PATH"
|
|
||||||
@ -1,141 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
|
|
||||||
# Gentoo doesn't have ifup/ifdown, so we define appropriate alternatives.
|
|
||||||
|
|
||||||
# Other platforms just use ifup / ifdown directly.
|
|
||||||
|
|
||||||
##
|
|
||||||
# preiftransfer
|
|
||||||
#
|
|
||||||
# @param $1 The current name for the physical device, which is also the name
|
|
||||||
# that the virtual device will take once the physical device has
|
|
||||||
# been renamed.
|
|
||||||
|
|
||||||
if ! which ifup >/dev/null 2>/dev/null
|
|
||||||
then
|
|
||||||
preiftransfer()
|
|
||||||
{
|
|
||||||
true
|
|
||||||
}
|
|
||||||
ifup()
|
|
||||||
{
|
|
||||||
false
|
|
||||||
}
|
|
||||||
ifdown()
|
|
||||||
{
|
|
||||||
false
|
|
||||||
}
|
|
||||||
else
|
|
||||||
preiftransfer()
|
|
||||||
{
|
|
||||||
true
|
|
||||||
}
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
first_file()
|
|
||||||
{
|
|
||||||
t="$1"
|
|
||||||
shift
|
|
||||||
for file in $@
|
|
||||||
do
|
|
||||||
if [ "$t" "$file" ]
|
|
||||||
then
|
|
||||||
echo "$file"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
}
|
|
||||||
|
|
||||||
find_dhcpd_conf_file()
|
|
||||||
{
|
|
||||||
first_file -f /etc/dhcp3/dhcpd.conf /etc/dhcpd.conf
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
find_dhcpd_init_file()
|
|
||||||
{
|
|
||||||
first_file -x /etc/init.d/{dhcp3-server,dhcp,dhcpd}
|
|
||||||
}
|
|
||||||
|
|
||||||
find_dhcpd_arg_file()
|
|
||||||
{
|
|
||||||
first_file -f /etc/sysconfig/dhcpd /etc/defaults/dhcp /etc/default/dhcp3-server
|
|
||||||
}
|
|
||||||
|
|
||||||
# configure interfaces which act as pure bridge ports:
|
|
||||||
_setup_bridge_port() {
|
|
||||||
local dev="$1"
|
|
||||||
local virtual="$2"
|
|
||||||
|
|
||||||
# take interface down ...
|
|
||||||
ip link set ${dev} down
|
|
||||||
|
|
||||||
if [ $virtual -ne 0 ] ; then
|
|
||||||
# Initialise a dummy MAC address. We choose the numerically
|
|
||||||
# largest non-broadcast address to prevent the address getting
|
|
||||||
# stolen by an Ethernet bridge for STP purposes.
|
|
||||||
# (FE:FF:FF:FF:FF:FF)
|
|
||||||
ip link set ${dev} address fe:ff:ff:ff:ff:ff || true
|
|
||||||
fi
|
|
||||||
|
|
||||||
# ... and configure it
|
|
||||||
ip addr flush ${dev}
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_physical_bridge_port() {
|
|
||||||
_setup_bridge_port $1 0
|
|
||||||
}
|
|
||||||
setup_virtual_bridge_port() {
|
|
||||||
_setup_bridge_port $1 1
|
|
||||||
}
|
|
||||||
|
|
||||||
# Usage: create_bridge bridge
|
|
||||||
create_bridge () {
|
|
||||||
local bridge=$1
|
|
||||||
|
|
||||||
# Don't create the bridge if it already exists.
|
|
||||||
if [ ! -e "/sys/class/net/${bridge}/bridge" ]; then
|
|
||||||
brctl addbr ${bridge}
|
|
||||||
brctl stp ${bridge} off
|
|
||||||
brctl setfd ${bridge} 0
|
|
||||||
# Setting these to zero stops guest<->LAN traffic
|
|
||||||
# traversing the bridge from hitting the *tables
|
|
||||||
# rulesets. guest<->host traffic still gets processed
|
|
||||||
# by the host's iptables rules so this isn't a hole
|
|
||||||
sysctl -q -w "net.bridge.bridge-nf-call-arptables=0"
|
|
||||||
sysctl -q -w "net.bridge.bridge-nf-call-ip6tables=0"
|
|
||||||
sysctl -q -w "net.bridge.bridge-nf-call-iptables=0"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Usage: add_to_bridge bridge dev
|
|
||||||
add_to_bridge () {
|
|
||||||
local bridge=$1
|
|
||||||
local dev=$2
|
|
||||||
|
|
||||||
# Don't add $dev to $bridge if it's already on a bridge.
|
|
||||||
if [ -e "/sys/class/net/${bridge}/brif/${dev}" ]; then
|
|
||||||
ip link set ${dev} up || true
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
brctl addif ${bridge} ${dev}
|
|
||||||
ip link set ${dev} up
|
|
||||||
}
|
|
||||||
|
|
||||||
@ -1,44 +0,0 @@
|
|||||||
#
|
|
||||||
# Copyright (c) 2005 XenSource Ltd.
|
|
||||||
#
|
|
||||||
# This library is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2.1 of the GNU Lesser General Public
|
|
||||||
# License as published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# This library is distributed in the hope that it will be useful,
|
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
||||||
# Lesser General Public License for more details.
|
|
||||||
#
|
|
||||||
# You should have received a copy of the GNU Lesser General Public
|
|
||||||
# License along with this library; if not, write to the Free Software
|
|
||||||
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
||||||
#
|
|
||||||
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
|
|
||||||
evalVariables()
|
|
||||||
{
|
|
||||||
for arg in "$@"
|
|
||||||
do
|
|
||||||
if expr 'index' "$arg" '=' '>' '1' >/dev/null
|
|
||||||
then
|
|
||||||
eval "$arg"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
findCommand()
|
|
||||||
{
|
|
||||||
for arg in "$@"
|
|
||||||
do
|
|
||||||
if ! expr 'index' "$arg" '=' >/dev/null
|
|
||||||
then
|
|
||||||
command="$arg"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
}
|
|
||||||
Loading…
Reference in New Issue
Block a user