X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Fmachine%2Fmachinectl.c;h=7bb7086056a051e6d2dadce399753bd77111133d;hp=7500d5c1c3b416513d809c6a5c0212fd162307b1;hb=4f8f66cb4236783cd3cbee97fefc9aaa8469ac08;hpb=a1da85830bfaa77b9eb9c54693e5573559c97e50 diff --git a/src/machine/machinectl.c b/src/machine/machinectl.c index 7500d5c1c..7bb708605 100644 --- a/src/machine/machinectl.c +++ b/src/machine/machinectl.c @@ -19,15 +19,16 @@ along with systemd; If not, see . ***/ +#include #include #include #include #include #include #include +#include #include "sd-bus.h" - #include "log.h" #include "util.h" #include "macro.h" @@ -39,6 +40,7 @@ #include "unit-name.h" #include "cgroup-show.h" #include "cgroup-util.h" +#include "ptyfwd.h" static char **arg_property = NULL; static bool arg_all = false; @@ -46,13 +48,9 @@ static bool arg_full = false; static bool arg_no_pager = false; static const char *arg_kill_who = NULL; static int arg_signal = SIGTERM; -static enum transport { - TRANSPORT_NORMAL, - TRANSPORT_SSH, -} arg_transport = TRANSPORT_NORMAL; static bool arg_ask_password = true; +static BusTransport arg_transport = BUS_TRANSPORT_LOCAL; static char *arg_host = NULL; -static char *arg_user = NULL; static void pager_open_if_enabled(void) { @@ -86,36 +84,27 @@ static int list_machines(sd_bus *bus, char **args, unsigned n) { return r; } - if (on_tty()) - printf("%-32s %-9s %-16s\n", "MACHINE", "CONTAINER", "SERVICE"); + printf("%-32s %-9s %-16s\n", "MACHINE", "CONTAINER", "SERVICE"); r = sd_bus_message_enter_container(reply, SD_BUS_TYPE_ARRAY, "(ssso)"); if (r < 0) - goto fail; + return bus_log_parse_error(r); while ((r = sd_bus_message_read(reply, "(ssso)", &name, &class, &service, &object)) > 0) { - if (r < 0) - goto fail; - printf("%-32s %-9s %-16s\n", name, class, service); k++; } if (r < 0) - goto fail; + return bus_log_parse_error(r); r = sd_bus_message_exit_container(reply); if (r < 0) - goto fail; + return bus_log_parse_error(r); - if (on_tty()) - printf("\n%u machines listed.\n", k); + printf("\n%u machines listed.\n", k); return 0; - -fail: - log_error("Failed to parse reply: %s", strerror(-r)); - return -EIO; } static int show_scope_cgroup(sd_bus *bus, const char *unit, pid_t leader) { @@ -129,34 +118,30 @@ static int show_scope_cgroup(sd_bus *bus, const char *unit, pid_t leader) { assert(bus); assert(unit); - if (arg_transport == TRANSPORT_SSH) + if (arg_transport == BUS_TRANSPORT_REMOTE) return 0; path = unit_dbus_path_from_name(unit); if (!path) return log_oom(); - r = sd_bus_call_method( + r = sd_bus_get_property( bus, "org.freedesktop.systemd1", path, - "org.freedesktop.DBus.Properties", - "Get", + "org.freedesktop.systemd1.Scope", + "ControlGroup", &error, &reply, - "ss", - "org.freedesktop.systemd1.Scope", - "ControlGroup"); + "s"); if (r < 0) { log_error("Failed to query ControlGroup: %s", bus_error_message(&error, -r)); return r; } - r = sd_bus_message_read(reply, "v", "s", &cgroup); - if (r < 0) { - log_error("Failed to parse reply: %s", strerror(-r)); - return r; - } + r = sd_bus_message_read(reply, "s", &cgroup); + if (r < 0) + return bus_log_parse_error(r); if (isempty(cgroup)) return 0; @@ -179,12 +164,12 @@ static int show_scope_cgroup(sd_bus *bus, const char *unit, pid_t leader) { } typedef struct MachineStatusInfo { - const char *name; + char *name; sd_id128_t id; - const char *class; - const char *service; - const char *scope; - const char *root_directory; + char *class; + char *service; + char *scope; + char *root_directory; pid_t leader; usec_t timestamp; } MachineStatusInfo; @@ -240,204 +225,89 @@ static void print_machine_status_info(sd_bus *bus, MachineStatusInfo *i) { } } -static int status_property_machine(const char *name, sd_bus_message *property, MachineStatusInfo *i) { - char type; - const char *contents; - int r; - - assert(name); - assert(property); - assert(i); - - r = sd_bus_message_peek_type(property, &type, &contents); - if (r < 0) { - log_error("Could not determine type of message: %s", strerror(-r)); - return r; - } - - switch (type) { - - case SD_BUS_TYPE_STRING: { - const char *s; - - sd_bus_message_read_basic(property, type, &s); - - if (!isempty(s)) { - if (streq(name, "Name")) - i->name = s; - else if (streq(name, "Class")) - i->class = s; - else if (streq(name, "Service")) - i->service = s; - else if (streq(name, "Scope")) - i->scope = s; - else if (streq(name, "RootDirectory")) - i->root_directory = s; - } - break; - } - - case SD_BUS_TYPE_UINT32: { - uint32_t u; - - sd_bus_message_read_basic(property, type, &u); - - if (streq(name, "Leader")) - i->leader = (pid_t) u; - - break; - } - - case SD_BUS_TYPE_UINT64: { - uint64_t u; - - sd_bus_message_read_basic(property, type, &u); - - if (streq(name, "Timestamp")) - i->timestamp = (usec_t) u; - - break; - } - - case SD_BUS_TYPE_ARRAY: { - if (streq(contents, "y") && streq(name, "Id")) { - const void *v; - size_t n; - - sd_bus_message_read_array(property, SD_BUS_TYPE_BYTE, &v, &n); - if (n == 0) - i->id = SD_ID128_NULL; - else if (n == 16) - memcpy(&i->id, v, n); - } - - break; - } - } - - return 0; -} - -static int print_property(const char *name, sd_bus_message *reply) { - assert(name); - assert(reply); - - if (arg_property && !strv_find(arg_property, name)) - return 0; - - if (bus_generic_print_property(name, reply, arg_all) > 0) - return 0; - - if (arg_all) - printf("%s=[unprintable]\n", name); - - return 0; -} +static int show_info(const char *verb, sd_bus *bus, const char *path, bool *new_line) { + + static const struct bus_properties_map map[] = { + { "Name", "s", NULL, offsetof(MachineStatusInfo, name) }, + { "Class", "s", NULL, offsetof(MachineStatusInfo, class) }, + { "Service", "s", NULL, offsetof(MachineStatusInfo, service) }, + { "Scope", "s", NULL, offsetof(MachineStatusInfo, scope) }, + { "RootDirectory", "s", NULL, offsetof(MachineStatusInfo, root_directory) }, + { "Leader", "u", NULL, offsetof(MachineStatusInfo, leader) }, + { "Timestamp", "t", NULL, offsetof(MachineStatusInfo, timestamp) }, + { "Id", "ay", bus_map_id128, offsetof(MachineStatusInfo, id) }, + {} + }; -static int show_one(const char *verb, sd_bus *bus, const char *path, bool show_properties, bool *new_line) { - _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; - _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL; + MachineStatusInfo info = {}; int r; - MachineStatusInfo machine_info = {}; assert(path); assert(new_line); - r = sd_bus_call_method( - bus, - "org.freedesktop.machine1", - path, - "org.freedesktop.DBus.Properties", - "GetAll", - &error, - &reply, - "s", ""); + r = bus_map_all_properties(bus, + "org.freedesktop.machine1", + path, + map, + &info); if (r < 0) { - log_error("Could not get properties: %s", bus_error_message(&error, -r)); + log_error("Could not get properties: %s", strerror(-r)); return r; } - if (*new_line) printf("\n"); - *new_line = true; - r = sd_bus_message_enter_container(reply, SD_BUS_TYPE_ARRAY, "{sv}"); - if (r < 0) - goto fail; + print_machine_status_info(bus, &info); - while ((r = sd_bus_message_enter_container(reply, SD_BUS_TYPE_DICT_ENTRY, "sv")) > 0) { - const char *name; - const char *contents; + free(info.name); + free(info.class); + free(info.service); + free(info.scope); + free(info.root_directory); - if (r < 0) - goto fail; - - r = sd_bus_message_read_basic(reply, SD_BUS_TYPE_STRING, &name); - if (r < 0) - goto fail; - - r = sd_bus_message_peek_type(reply, NULL, &contents); - if (r < 0) - goto fail; - - r = sd_bus_message_enter_container(reply, SD_BUS_TYPE_VARIANT, contents); - if (r < 0) - goto fail; + return r; +} - if (show_properties) - r = print_property(name, reply); - else - r = status_property_machine(name, reply, &machine_info); - if (r < 0) - goto fail; +static int show_properties(sd_bus *bus, const char *path, bool *new_line) { + int r; - r = sd_bus_message_exit_container(reply); - if (r < 0) - goto fail; + if (*new_line) + printf("\n"); - r = sd_bus_message_exit_container(reply); - if (r < 0) - goto fail; - } - if (r < 0) - goto fail; + *new_line = true; - r = sd_bus_message_exit_container(reply); + r = bus_print_all_properties(bus, "org.freedesktop.machine1", path, arg_property, arg_all); if (r < 0) - goto fail; - - if (!show_properties) - print_machine_status_info(bus, &machine_info); - - return 0; + log_error("Could not get properties: %s", strerror(-r)); -fail: - log_error("Failed to parse reply: %s", strerror(-r)); - return -EIO; + return r; } static int show(sd_bus *bus, char **args, unsigned n) { _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL; - int r, ret = 0; + int r = 0; unsigned i; - bool show_properties, new_line = false; + bool properties, new_line = false; assert(bus); assert(args); - show_properties = !strstr(args[0], "status"); + properties = !strstr(args[0], "status"); pager_open_if_enabled(); - if (show_properties && n <= 1) { + if (properties && n <= 1) { - /* If no argument is specified inspect the manager + /* If no argument is specified, inspect the manager * itself */ - - return show_one(args[0], bus, "/org/freedesktop/machine1", show_properties, &new_line); + r = show_properties(bus, "/org/freedesktop/machine1", &new_line); + if (r < 0) { + log_error("Failed to query properties: %s", strerror(-r)); + return r; + } } for (i = 1; i < n; i++) { @@ -458,17 +328,16 @@ static int show(sd_bus *bus, char **args, unsigned n) { } r = sd_bus_message_read(reply, "o", &path); - if (r < 0) { - log_error("Failed to parse reply: %s", strerror(-r)); - return -EIO; - } + if (r < 0) + return bus_log_parse_error(r); - r = show_one(args[0], bus, path, show_properties, &new_line); - if (r != 0) - ret = r; + if (properties) + r = show_properties(bus, path, &new_line); + else + r = show_info(args[0], bus, path, &new_line); } - return ret; + return r; } static int kill_machine(sd_bus *bus, char **args, unsigned n) { @@ -528,26 +397,253 @@ static int terminate_machine(sd_bus *bus, char **args, unsigned n) { return 0; } +static int openpt_in_namespace(pid_t pid, int flags) { + _cleanup_close_ int nsfd = -1, rootfd = -1; + _cleanup_close_pipe_ int sock[2] = { -1, -1 }; + union { + struct cmsghdr cmsghdr; + uint8_t buf[CMSG_SPACE(sizeof(int))]; + } control = {}; + struct msghdr mh = { + .msg_control = &control, + .msg_controllen = sizeof(control), + }; + struct cmsghdr *cmsg; + int master = -1, r; + char *ns, *root; + pid_t child; + siginfo_t si; + + ns = procfs_file_alloca(pid, "ns/mnt"); + + nsfd = open(ns, O_RDONLY|O_NOCTTY|O_CLOEXEC); + if (nsfd < 0) + return -errno; + + root = procfs_file_alloca(pid, "root"); + + rootfd = open(root, O_RDONLY|O_NOCTTY|O_CLOEXEC|O_DIRECTORY); + if (rootfd < 0) + return -errno; + + if (socketpair(AF_UNIX, SOCK_DGRAM, 0, sock) < 0) + return -errno; + + child = fork(); + if (child < 0) + return -errno; + + if (child == 0) { + close_nointr_nofail(sock[0]); + sock[0] = -1; + + r = setns(nsfd, CLONE_NEWNS); + if (r < 0) + _exit(EXIT_FAILURE); + + if (fchdir(rootfd) < 0) + _exit(EXIT_FAILURE); + + if (chroot(".") < 0) + _exit(EXIT_FAILURE); + + master = posix_openpt(flags); + if (master < 0) + _exit(EXIT_FAILURE); + + cmsg = CMSG_FIRSTHDR(&mh); + cmsg->cmsg_level = SOL_SOCKET; + cmsg->cmsg_type = SCM_RIGHTS; + cmsg->cmsg_len = CMSG_LEN(sizeof(int)); + memcpy(CMSG_DATA(cmsg), &master, sizeof(int)); + + mh.msg_controllen = cmsg->cmsg_len; + + r = sendmsg(sock[1], &mh, MSG_NOSIGNAL); + close_nointr_nofail(master); + if (r < 0) + _exit(EXIT_FAILURE); + + _exit(EXIT_SUCCESS); + } + + close_nointr_nofail(sock[1]); + sock[1] = -1; + + if (recvmsg(sock[0], &mh, MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) < 0) + return -errno; + + for (cmsg = CMSG_FIRSTHDR(&mh); cmsg; cmsg = CMSG_NXTHDR(&mh, cmsg)) + if (cmsg->cmsg_level == SOL_SOCKET && cmsg->cmsg_type == SCM_RIGHTS) { + int *fds; + unsigned n_fds; + + fds = (int*) CMSG_DATA(cmsg); + n_fds = (cmsg->cmsg_len - CMSG_LEN(0)) / sizeof(int); + + if (n_fds != 1) { + close_many(fds, n_fds); + return -EIO; + } + + master = fds[0]; + } + + r = wait_for_terminate(child, &si); + if (r < 0 || si.si_code != CLD_EXITED || si.si_status != EXIT_SUCCESS || master < 0) { + + if (master >= 0) + close_nointr_nofail(master); + + return r < 0 ? r : -EIO; + } + + return master; +} + +static int login_machine(sd_bus *bus, char **args, unsigned n) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL, *reply2 = NULL, *reply3 = NULL; + _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL; + _cleanup_bus_unref_ sd_bus *container_bus = NULL; + _cleanup_close_ int master = -1; + _cleanup_free_ char *getty = NULL; + const char *path, *pty, *p; + uint32_t leader; + sigset_t mask; + int r; + + assert(bus); + assert(args); + + if (arg_transport != BUS_TRANSPORT_LOCAL) { + log_error("Login only support on local machines."); + return -ENOTSUP; + } + + r = sd_bus_call_method( + bus, + "org.freedesktop.machine1", + "/org/freedesktop/machine1", + "org.freedesktop.machine1.Manager", + "GetMachine", + &error, + &reply, + "s", args[1]); + if (r < 0) { + log_error("Could not get path to machine: %s", bus_error_message(&error, -r)); + return r; + } + + r = sd_bus_message_read(reply, "o", &path); + if (r < 0) + return bus_log_parse_error(r); + + r = sd_bus_get_property( + bus, + "org.freedesktop.machine1", + path, + "org.freedesktop.machine1.Machine", + "Leader", + &error, + &reply2, + "u"); + if (r < 0) { + log_error("Failed to retrieve PID of leader: %s", strerror(-r)); + return r; + } + + r = sd_bus_message_read(reply2, "u", &leader); + if (r < 0) + return bus_log_parse_error(r); + + master = openpt_in_namespace(leader, O_RDWR|O_NOCTTY|O_CLOEXEC|O_NDELAY); + if (master < 0) { + log_error("Failed to acquire pseudo tty: %s", strerror(-master)); + return master; + } + + pty = ptsname(master); + if (!pty) { + log_error("Failed to get pty name: %m"); + return -errno; + } + + p = startswith(pty, "/dev/pts/"); + if (!p) { + log_error("Invalid pty name %s.", pty); + return -EIO; + } + + r = sd_bus_open_system_container(args[1], &container_bus); + if (r < 0) { + log_error("Failed to get container bus: %s", strerror(-r)); + return r; + } + + getty = strjoin("container-getty@", p, ".service", NULL); + if (!getty) + return log_oom(); + + if (unlockpt(master) < 0) { + log_error("Failed to unlock tty: %m"); + return -errno; + } + + r = sd_bus_call_method(container_bus, + "org.freedesktop.systemd1", + "/org/freedesktop/systemd1", + "org.freedesktop.systemd1.Manager", + "StartUnit", + &error, &reply3, + "ss", getty, "replace"); + if (r < 0) { + log_error("Failed to start getty service: %s", bus_error_message(&error, r)); + return r; + } + + container_bus = sd_bus_unref(container_bus); + + assert_se(sigemptyset(&mask) == 0); + sigset_add_many(&mask, SIGWINCH, SIGTERM, SIGINT, -1); + assert_se(sigprocmask(SIG_BLOCK, &mask, NULL) == 0); + + log_info("Connected to container %s. Press ^] three times within 1s to exit session.", args[1]); + + r = process_pty(master, &mask, 0, 0); + if (r < 0) { + log_error("Failed to process pseudo tty: %s", strerror(-r)); + return r; + } + + fputc('\n', stdout); + + log_info("Connection to container %s terminated.", args[1]); + + return 0; +} + static int help(void) { printf("%s [OPTIONS...] {COMMAND} ...\n\n" "Send control commands to or query the virtual machine and container registration manager.\n\n" " -h --help Show this help\n" " --version Show package version\n" + " --no-pager Do not pipe output into a pager\n" + " --no-ask-password Don't prompt for password\n" + " -H --host=[USER@]HOST Operate on remote host\n" + " -M --machine=CONTAINER Operate on local container\n" " -p --property=NAME Show only properties by this name\n" " -a --all Show all properties, including empty ones\n" - " --kill-who=WHO Who to send signal to\n" " -l --full Do not ellipsize output\n" - " -s --signal=SIGNAL Which signal to send\n" - " --no-ask-password Don't prompt for password\n" - " -H --host=[USER@]HOST Show information for remote host\n" - " --no-pager Do not pipe output into a pager\n\n" + " --kill-who=WHO Who to send signal to\n" + " -s --signal=SIGNAL Which signal to send\n\n" "Commands:\n" " list List running VMs and containers\n" - " status [NAME...] Show VM/container status\n" - " show [NAME...] Show properties of one or more VMs/containers\n" - " terminate [NAME...] Terminate one or more VMs/containers\n" - " kill [NAME...] Send signal to processes of a VM/container\n", + " status NAME... Show VM/container status\n" + " show NAME... Show properties of one or more VMs/containers\n" + " terminate NAME... Terminate one or more VMs/containers\n" + " kill NAME... Send signal to processes of a VM/container\n" + " login NAME Get a login prompt on a container\n", program_invocation_short_name); return 0; @@ -572,45 +668,38 @@ static int parse_argv(int argc, char *argv[]) { { "kill-who", required_argument, NULL, ARG_KILL_WHO }, { "signal", required_argument, NULL, 's' }, { "host", required_argument, NULL, 'H' }, - { "privileged", no_argument, NULL, 'P' }, + { "machine", required_argument, NULL, 'M' }, { "no-ask-password", no_argument, NULL, ARG_NO_ASK_PASSWORD }, - { NULL, 0, NULL, 0 } + {} }; - int c; + int c, r; assert(argc >= 0); assert(argv); - while ((c = getopt_long(argc, argv, "hp:als:H:P", options, NULL)) >= 0) { + while ((c = getopt_long(argc, argv, "hp:als:H:M:", options, NULL)) >= 0) { switch (c) { case 'h': - help(); - return 0; + return help(); case ARG_VERSION: puts(PACKAGE_STRING); puts(SYSTEMD_FEATURES); return 0; - case 'p': { - char **l; - - l = strv_append(arg_property, optarg); - if (!l) - return -ENOMEM; - - strv_free(arg_property); - arg_property = l; + case 'p': + r = strv_extend(&arg_property, optarg); + if (r < 0) + return log_oom(); /* If the user asked for a particular * property, show it to him, even if it is * empty. */ arg_all = true; break; - } case 'a': arg_all = true; @@ -641,23 +730,27 @@ static int parse_argv(int argc, char *argv[]) { break; case 'H': - arg_transport = TRANSPORT_SSH; - parse_user_at_host(optarg, &arg_user, &arg_host); + arg_transport = BUS_TRANSPORT_REMOTE; + arg_host = optarg; + break; + + case 'M': + arg_transport = BUS_TRANSPORT_CONTAINER; + arg_host = optarg; break; case '?': return -EINVAL; default: - log_error("Unknown option code %c", c); - return -EINVAL; + assert_not_reached("Unhandled option"); } } return 1; } -static int machinectl_main(sd_bus *bus, int argc, char *argv[], const int r) { +static int machinectl_main(sd_bus *bus, int argc, char *argv[]) { static const struct { const char* verb; @@ -674,6 +767,7 @@ static int machinectl_main(sd_bus *bus, int argc, char *argv[], const int r) { { "show", MORE, 1, show }, { "terminate", MORE, 2, terminate_machine }, { "kill", MORE, 2, kill_machine }, + { "login", MORE, 2, login_machine }, }; int left; @@ -685,7 +779,7 @@ static int machinectl_main(sd_bus *bus, int argc, char *argv[], const int r) { left = argc - optind; if (left <= 0) - /* Special rule: no arguments means "list-sessions" */ + /* Special rule: no arguments means "list" */ i = 0; else { if (streq(argv[optind], "help")) { @@ -733,48 +827,33 @@ static int machinectl_main(sd_bus *bus, int argc, char *argv[], const int r) { assert_not_reached("Unknown comparison operator."); } - if (r < 0) { - log_error("Failed to get D-Bus connection: %s", strerror(-r)); - return -EIO; - } - return verbs[i].dispatch(bus, argv + optind, left); } int main(int argc, char*argv[]) { - int r, retval = EXIT_FAILURE; _cleanup_bus_unref_ sd_bus *bus = NULL; + int r; setlocale(LC_ALL, ""); log_parse_environment(); log_open(); r = parse_argv(argc, argv); - if (r < 0) - goto finish; - else if (r == 0) { - retval = EXIT_SUCCESS; + if (r <= 0) goto finish; - } - if (arg_transport == TRANSPORT_NORMAL) - r = sd_bus_open_system(&bus); - else if (arg_transport == TRANSPORT_SSH) - r = bus_connect_system_ssh(arg_host, &bus); - else - assert_not_reached("Uh, invalid transport..."); + r = bus_open_transport(arg_transport, arg_host, false, &bus); if (r < 0) { - retval = EXIT_FAILURE; + log_error("Failed to create bus connection: %s", strerror(-r)); goto finish; } - r = machinectl_main(bus, argc, argv, r); - retval = r < 0 ? EXIT_FAILURE : r; + r = machinectl_main(bus, argc, argv); finish: - strv_free(arg_property); - pager_close(); - return retval; + strv_free(arg_property); + + return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS; }