qemud.c 51.7 KB
Newer Older
D
Daniel P. Berrange 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
/*
 * qemud.c: daemon start of day, guest process & i/o management
 *
 * Copyright (C) 2006, 2007 Red Hat, Inc.
 * Copyright (C) 2006 Daniel P. Berrange
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307  USA
 *
 * Author: Daniel P. Berrange <berrange@redhat.com>
 */

24 25
#include <config.h>

D
Daniel P. Berrange 已提交
26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
#include <sys/types.h>
#include <sys/wait.h>
#include <sys/stat.h>
#include <unistd.h>
#include <fcntl.h>
#include <paths.h>
#include <limits.h>
#include <sys/socket.h>
#include <sys/un.h>
#include <sys/poll.h>
#include <netinet/in.h>
#include <netdb.h>
#include <stdlib.h>
#include <pwd.h>
#include <stdio.h>
41 42
#include <stdarg.h>
#include <syslog.h>
D
Daniel P. Berrange 已提交
43 44 45
#include <string.h>
#include <errno.h>
#include <getopt.h>
D
Daniel P. Berrange 已提交
46
#include <ctype.h>
D
Daniel P. Berrange 已提交
47 48 49 50 51 52

#include <libvirt/virterror.h>

#include "internal.h"
#include "dispatch.h"
#include "driver.h"
53
#include "conf.h"
54
#include "iptables.h"
D
Daniel P. Berrange 已提交
55

56 57
static int godaemon = 0;
static int verbose = 0;
58 59
static int sigwrite = -1;

60 61 62
static sig_atomic_t sig_errors = 0;
static int sig_lasterrno = 0;

63 64 65
static void sig_handler(int sig) {
    unsigned char sigc = sig;
    int origerrno;
66
    int r;
67 68 69 70 71

    if (sig == SIGCHLD) /* We explicitly waitpid the child later */
        return;

    origerrno = errno;
72 73 74 75 76
    r = write(sigwrite, &sigc, 1);
    if (r == -1) {
        sig_errors++;
        sig_lasterrno = errno;
    }
77
    errno = origerrno;
D
Daniel P. Berrange 已提交
78
}
79 80 81 82 83 84 85 86

static int qemudDispatchSignal(struct qemud_server *server)
{
    unsigned char sigc;
    struct qemud_vm *vm;
    struct qemud_network *network;
    int ret;

87 88 89
    if (read(server->sigread, &sigc, 1) != 1) {
        qemudLog(QEMUD_ERR, "Failed to read from signal pipe: %s",
                 strerror(errno));
90
        return -1;
91 92
    }

93 94 95 96
    ret = 0;

    switch (sigc) {
    case SIGHUP:
97
        qemudLog(QEMUD_INFO, "Reloading configuration on SIGHUP");
98
        ret = qemudScanConfigs(server);
99 100 101 102 103

        if (server->iptables) {
            qemudLog(QEMUD_INFO, "Reloading iptables rules");
            iptablesReloadRules(server->iptables);
        }
104 105 106
        break;

    case SIGINT:
107
    case SIGQUIT:
108
    case SIGTERM:
109
        qemudLog(QEMUD_WARN, "Shutting down on signal %d", sigc);
110 111

        /* shutdown active VMs */
112
        vm = server->vms;
113 114
        while (vm) {
            struct qemud_vm *next = vm->next;
115 116
            if (qemudIsActiveVM(vm))
                qemudShutdownVMDaemon(server, vm);
117 118 119 120
            vm = next;
        }

        /* free inactive VMs */
121
        vm = server->vms;
122 123 124 125 126
        while (vm) {
            struct qemud_vm *next = vm->next;
            qemudFreeVM(vm);
            vm = next;
        }
127 128
        server->vms = NULL;
        server->nactivevms = 0;
129 130 131
        server->ninactivevms = 0;

        /* shutdown active networks */
132
        network = server->networks;
133 134
        while (network) {
            struct qemud_network *next = network->next;
135 136
            if (qemudIsActiveNetwork(network))
                qemudShutdownNetworkDaemon(server, network);
137 138 139 140
            network = next;
        }

        /* free inactive networks */
141
        network = server->networks;
142 143 144 145 146
        while (network) {
            struct qemud_network *next = network->next;
            qemudFreeNetwork(network);
            network = next;
        }
147 148
        server->networks = NULL;
        server->nactivenetworks = 0;
149 150
        server->ninactivenetworks = 0;

151 152 153 154 155 156 157 158 159 160
        server->shutdown = 1;
        break;

    default:
        break;
    }

    return ret;
}

D
Daniel P. Berrange 已提交
161 162
static int qemudSetCloseExec(int fd) {
    int flags;
163 164
    if ((flags = fcntl(fd, F_GETFD)) < 0)
        goto error;
D
Daniel P. Berrange 已提交
165
    flags |= FD_CLOEXEC;
166 167
    if ((fcntl(fd, F_SETFD, flags)) < 0)
        goto error;
D
Daniel P. Berrange 已提交
168
    return 0;
169 170 171
 error:
    qemudLog(QEMUD_ERR, "Failed to set close-on-exec file descriptor flag");
    return -1;
D
Daniel P. Berrange 已提交
172 173 174 175 176
}


static int qemudSetNonBlock(int fd) {
    int flags;
177 178
    if ((flags = fcntl(fd, F_GETFL)) < 0)
        goto error;
D
Daniel P. Berrange 已提交
179
    flags |= O_NONBLOCK;
180 181
    if ((fcntl(fd, F_SETFL, flags)) < 0)
        goto error;
D
Daniel P. Berrange 已提交
182
    return 0;
183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248
 error:
    qemudLog(QEMUD_ERR, "Failed to set non-blocking file descriptor flag");
    return -1;
}

void qemudLog(int priority, const char *fmt, ...)
{
    va_list args;

    va_start(args, fmt);

    if (godaemon) {
        int sysprio = -1;

        switch(priority) {
        case QEMUD_ERR:
            sysprio = LOG_ERR;
            break;
        case QEMUD_WARN:
            sysprio = LOG_WARNING;
            break;
        case QEMUD_INFO:
            if (verbose)
                sysprio = LOG_INFO;
            break;
#ifdef ENABLE_DEBUG
        case QEMUD_DEBUG:
            if (verbose)
                sysprio = LOG_DEBUG;
            break;
#endif
        default:
            break;
        }

        if (sysprio != -1)
            vsyslog(sysprio, fmt, args);
    } else {
        switch(priority) {
        case QEMUD_ERR:
        case QEMUD_WARN:
            vfprintf(stderr, fmt, args);
            fputc('\n', stderr);
            break;

        case QEMUD_INFO:
            if (verbose) {
                vprintf(fmt, args);
                fputc('\n', stdout);
            }
            break;

#ifdef ENABLE_DEBUG
        case QEMUD_DEBUG:
            if (verbose) {
                vprintf(fmt, args);
                fputc('\n', stdout);
            }
            break;
#endif
        default:
            break;
        }
    }

    va_end(args);
D
Daniel P. Berrange 已提交
249 250 251 252 253 254 255 256 257
}

static int qemudGoDaemon(void) {
    int pid = fork();
    switch (pid) {
    case 0:
        {
            int stdinfd = -1;
            int stdoutfd = -1;
258
            int nextpid;
D
Daniel P. Berrange 已提交
259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317

            if ((stdinfd = open(_PATH_DEVNULL, O_RDONLY)) < 0)
                goto cleanup;
            if ((stdoutfd = open(_PATH_DEVNULL, O_WRONLY)) < 0)
                goto cleanup;
            if (dup2(stdinfd, STDIN_FILENO) != STDIN_FILENO)
                goto cleanup;
            if (dup2(stdoutfd, STDOUT_FILENO) != STDOUT_FILENO)
                goto cleanup;
            if (dup2(stdoutfd, STDERR_FILENO) != STDERR_FILENO)
                goto cleanup;
            if (close(stdinfd) < 0)
                goto cleanup;
            stdinfd = -1;
            if (close(stdoutfd) < 0)
                goto cleanup;
            stdoutfd = -1;

            if (setsid() < 0)
                goto cleanup;

            nextpid = fork();
            switch (nextpid) {
            case 0:
                return 0;
            case -1:
                return -1;
            default:
                return nextpid;
            }

        cleanup:
            if (stdoutfd != -1)
                close(stdoutfd);
            if (stdinfd != -1)
                close(stdinfd);
            return -1;

        }

    case -1:
        return -1;

    default:
        {
            int got, status = 0;
            /* We wait to make sure the next child forked
               successfully */
            if ((got = waitpid(pid, &status, 0)) < 0 ||
                got != pid ||
                status != 0) {
                return -1;
            }
      
            return pid;
        }
    }
}

318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353
static int qemudWritePidFile(const char *pidFile) {
    int fd;
    FILE *fh;

    if (pidFile[0] == '\0')
        return 0;

    if ((fd = open(pidFile, O_WRONLY|O_CREAT|O_EXCL, 0644)) < 0) {
        qemudLog(QEMUD_ERR, "Failed to open pid file '%s' : %s",
                 pidFile, strerror(errno));
        return -1;
    }

    if (!(fh = fdopen(fd, "w"))) {
        qemudLog(QEMUD_ERR, "Failed to fdopen pid file '%s' : %s",
                 pidFile, strerror(errno));
        close(fd);
        return -1;
    }

    if (fprintf(fh, "%lu\n", (unsigned long)getpid()) < 0) {
        qemudLog(QEMUD_ERR, "Failed to write to pid file '%s' : %s",
                 pidFile, strerror(errno));
        close(fd);
        return -1;
    }

    if (fclose(fh) == EOF) {
        qemudLog(QEMUD_ERR, "Failed to close pid file '%s' : %s",
                 pidFile, strerror(errno));
        return -1;
    }

    return 0;
}

D
Daniel P. Berrange 已提交
354 355 356 357 358 359
static int qemudListenUnix(struct qemud_server *server,
                           const char *path, int readonly) {
    struct qemud_socket *sock = calloc(1, sizeof(struct qemud_socket));
    struct sockaddr_un addr;
    mode_t oldmask;

360 361
    if (!sock) {
        qemudLog(QEMUD_ERR, "Failed to allocate memory for struct qemud_socket");
D
Daniel P. Berrange 已提交
362
        return -1;
363
    }
D
Daniel P. Berrange 已提交
364 365 366 367 368 369

    sock->readonly = readonly;
    sock->next = server->sockets;
    server->sockets = sock;
    server->nsockets++;

370 371 372
    if ((sock->fd = socket(PF_UNIX, SOCK_STREAM, 0)) < 0) {
        qemudLog(QEMUD_ERR, "Failed to create socket: %s",
                 strerror(errno));
D
Daniel P. Berrange 已提交
373
        return -1;
374
    }
D
Daniel P. Berrange 已提交
375

376 377
    if (qemudSetCloseExec(sock->fd) < 0 ||
        qemudSetNonBlock(sock->fd) < 0)
D
Daniel P. Berrange 已提交
378 379 380 381 382 383 384 385 386 387 388 389 390
        return -1;

    memset(&addr, 0, sizeof(addr));
    addr.sun_family = AF_UNIX;
    strncpy(addr.sun_path, path, sizeof(addr.sun_path)-1);
    if (addr.sun_path[0] == '@')
        addr.sun_path[0] = '\0';


    if (readonly)
        oldmask = umask(~(S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH));
    else
        oldmask = umask(~(S_IRUSR | S_IWUSR));
391 392 393
    if (bind(sock->fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
        qemudLog(QEMUD_ERR, "Failed to bind socket to '%s': %s",
                 path, strerror(errno));
D
Daniel P. Berrange 已提交
394
        return -1;
395
    }
D
Daniel P. Berrange 已提交
396 397
    umask(oldmask);

398 399 400
    if (listen(sock->fd, 30) < 0) {
        qemudLog(QEMUD_ERR, "Failed to listen for connections on '%s': %s",
                 path, strerror(errno));
D
Daniel P. Berrange 已提交
401
        return -1;
402
    }
D
Daniel P. Berrange 已提交
403 404 405 406

    return 0;
}

407 408
static int qemudInitPaths(struct qemud_server *server,
                          int sys,
409 410 411
                          char *sockname,
                          char *roSockname,
                          int maxlen) {
412 413 414 415 416 417 418
    const char *paths[] = {
        "libvirt/qemu",                    /* QEMUD_DIR_DOMAINS */
        "libvirt/qemu/autostart",          /* QEMUD_DIR_AUTO_DOMAINS */
        "libvirt/qemu/networks",           /* QEMUD_DIR_NETWORKS */
        "libvirt/qemu/networks/autostart", /* QEMUD_DIR_AUTO_NETWORKS */
    };

419
    uid_t uid;
420 421 422
    struct passwd *pw;
    char base[PATH_MAX] = SYSCONF_DIR "/";
    int i;
423 424

    uid = geteuid();
D
Daniel P. Berrange 已提交
425 426

    if (sys) {
427 428 429 430 431 432
        if (uid != 0) {
            qemudLog(QEMUD_ERR, "You must run the daemon as root to use system mode");
            return -1;
        }

        if (snprintf(sockname, maxlen, "%s/run/libvirt/qemud-sock", LOCAL_STATE_DIR) >= maxlen)
433 434
            goto snprintf_error;

D
Daniel P. Berrange 已提交
435 436
        unlink(sockname);

437
        if (snprintf(roSockname, maxlen, "%s/run/libvirt/qemud-sock-ro", LOCAL_STATE_DIR) >= maxlen)
438
            goto snprintf_error;
D
Daniel P. Berrange 已提交
439

440
        unlink(roSockname);
D
Daniel P. Berrange 已提交
441
    } else {
442
        if (!(pw = getpwuid(uid))) {
443
            qemudLog(QEMUD_ERR, "Failed to find user record for uid '%d': %s",
444
                     uid, strerror(errno));
D
Daniel P. Berrange 已提交
445 446 447
            return -1;
        }

448
        if (snprintf(sockname, maxlen, "@%s/.libvirt/qemud-sock", pw->pw_dir) >= maxlen)
449 450
            goto snprintf_error;

451
        if (snprintf(base, PATH_MAX, "%s/.", pw->pw_dir) >= PATH_MAX)
452
            goto snprintf_error;
453
    }
454

455 456
    for (i = 0; i < QEMUD_N_CONFIG_DIRS; i++)
        if (snprintf(server->configDirs[i], PATH_MAX, "%s%s", base, paths[i]) >= PATH_MAX)
457 458
            goto snprintf_error;

D
Daniel P. Berrange 已提交
459
    return 0;
460 461

 snprintf_error:
462
    qemudLog(QEMUD_ERR, "Resulting path to long for buffer in qemudInitPaths()");
463
    return -1;
D
Daniel P. Berrange 已提交
464 465
}

466
static struct qemud_server *qemudInitialize(int sys, int sigread) {
D
Daniel P. Berrange 已提交
467
    struct qemud_server *server;
468 469
    char sockname[PATH_MAX];
    char roSockname[PATH_MAX];
D
Daniel P. Berrange 已提交
470

471 472
    if (!(server = calloc(1, sizeof(struct qemud_server)))) {
        qemudLog(QEMUD_ERR, "Failed to allocate struct qemud_server");
D
Daniel P. Berrange 已提交
473
        return NULL;
474
    }
D
Daniel P. Berrange 已提交
475 476 477

    /* We don't have a dom-0, so start from 1 */
    server->nextvmid = 1;
478
    server->sigread = sigread;
D
Daniel P. Berrange 已提交
479

480
    roSockname[0] = '\0';
481

482
    if (qemudInitPaths(server, sys, sockname, roSockname, PATH_MAX) < 0)
483
        goto cleanup;
D
Daniel P. Berrange 已提交
484

485 486 487 488 489
    server->configDir           = server->configDirs[QEMUD_DIR_CONFIG];
    server->autostartDir        = server->configDirs[QEMUD_DIR_AUTOSTART];
    server->networkConfigDir    = server->configDirs[QEMUD_DIR_NETWORK_CONFIG];
    server->networkAutostartDir = server->configDirs[QEMUD_DIR_NETWORK_AUTOSTART];

490 491
    if (qemudListenUnix(server, sockname, 0) < 0)
        goto cleanup;
492

493
    if (roSockname[0] != '\0' && qemudListenUnix(server, roSockname, 1) < 0)
D
Daniel P. Berrange 已提交
494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524
        goto cleanup;

    if (qemudScanConfigs(server) < 0) {
        goto cleanup;
    }

    return server;

 cleanup:
    if (server) {
        struct qemud_socket *sock = server->sockets;
        while (sock) {
            close(sock->fd);
            sock = sock->next;
        }

        free(server);
    }
    return NULL;
}


static int qemudDispatchServer(struct qemud_server *server, struct qemud_socket *sock) {
    int fd;
    struct sockaddr_storage addr;
    unsigned int addrlen = sizeof(addr);
    struct qemud_client *client;

    if ((fd = accept(sock->fd, (struct sockaddr *)&addr, &addrlen)) < 0) {
        if (errno == EAGAIN)
            return 0;
525
        qemudLog(QEMUD_ERR, "Failed to accept connection: %s", strerror(errno));
D
Daniel P. Berrange 已提交
526 527 528
        return -1;
    }

529 530
    if (qemudSetCloseExec(fd) < 0 ||
        qemudSetNonBlock(fd) < 0) {
D
Daniel P. Berrange 已提交
531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546
        close(fd);
        return -1;
    }

    client = calloc(1, sizeof(struct qemud_client));
    client->fd = fd;
    client->readonly = sock->readonly;

    client->next = server->clients;
    server->clients = client;
    server->nclients++;

    return 0;
}


547 548
static int
qemudExec(struct qemud_server *server, char **argv,
549
          int *retpid, int *outfd, int *errfd) {
550
    int pid, null;
D
Daniel P. Berrange 已提交
551 552 553
    int pipeout[2] = {-1,-1};
    int pipeerr[2] = {-1,-1};

554 555 556
    if ((null = open(_PATH_DEVNULL, O_RDONLY)) < 0) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR, "cannot open %s : %s",
                         _PATH_DEVNULL, strerror(errno));
D
Daniel P. Berrange 已提交
557 558 559
        goto cleanup;
    }

560 561 562 563
    if ((outfd != NULL && pipe(pipeout) < 0) ||
        (errfd != NULL && pipe(pipeerr) < 0)) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR, "cannot create pipe : %s",
                         strerror(errno));
D
Daniel P. Berrange 已提交
564 565 566 567
        goto cleanup;
    }

    if ((pid = fork()) < 0) {
568 569
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR, "cannot fork child process : %s",
                         strerror(errno));
D
Daniel P. Berrange 已提交
570 571 572 573
        goto cleanup;
    }

    if (pid) { /* parent */
574 575 576 577
        close(null);
        if (outfd) {
            close(pipeout[1]);
            qemudSetNonBlock(pipeout[0]);
578
            qemudSetCloseExec(pipeout[0]);
579 580 581 582 583
            *outfd = pipeout[0];
        }
        if (errfd) {
            close(pipeerr[1]);
            qemudSetNonBlock(pipeerr[0]);
584
            qemudSetCloseExec(pipeerr[0]);
585 586 587 588 589 590 591
            *errfd = pipeerr[0];
        }
        *retpid = pid;
        return 0;
    }

    /* child */
D
Daniel P. Berrange 已提交
592

593 594 595
    if (pipeout[0] > 0 && close(pipeout[0]) < 0)
        _exit(1);
    if (pipeerr[0] > 0 && close(pipeerr[0]) < 0)
D
Daniel P. Berrange 已提交
596 597
        _exit(1);

598 599 600 601 602 603 604
    if (dup2(null, STDIN_FILENO) < 0)
        _exit(1);
    if (dup2(pipeout[1] > 0 ? pipeout[1] : null, STDOUT_FILENO) < 0)
        _exit(1);
    if (dup2(pipeerr[1] > 0 ? pipeerr[1] : null, STDERR_FILENO) < 0)
        _exit(1);

605 606 607 608 609
    close(null);
    if (pipeout[1] > 0)
        close(pipeout[1]);
    if (pipeerr[1] > 0)
        close(pipeerr[1]);
610 611 612 613 614 615

    execvp(argv[0], argv);

    _exit(1);

    return 0;
D
Daniel P. Berrange 已提交
616 617

 cleanup:
618
    if (pipeerr[0] > 0)
619 620 621 622 623 624 625
        close(pipeerr[0]);
    if (pipeerr[1] > 0)
        close(pipeerr[1]);
    if (pipeout[0] > 0)
        close(pipeout[0]);
    if (pipeout[1] > 0)
        close(pipeout[1]);
626 627 628 629 630
    if (null > 0)
        close(null);
    return -1;
}

D
Daniel P. Berrange 已提交
631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837
/* Return -1 for error, 1 to continue reading and 0 for success */
typedef int qemudHandlerMonitorOutput(struct qemud_server *server,
                                      struct qemud_vm *vm,
                                      const char *output,
                                      int fd);

static int
qemudReadMonitorOutput(struct qemud_server *server,
                       struct qemud_vm *vm,
                       int fd,
                       char *buffer,
                       int buflen,
                       qemudHandlerMonitorOutput func,
                       const char *what)
{
#define MONITOR_TIMEOUT 3000

    int got = 0;

   /* Consume & discard the initial greeting */
    while (got < (buflen-1)) {
        int ret;

        ret = read(fd, buffer+got, buflen-got-1);
        if (ret == 0) {
            qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                             "End-of-file while reading %s startup output", what);
            return -1;
        }
        if (ret < 0) {
            struct pollfd pfd = { .fd = fd, .events = POLLIN };
            if (errno != EAGAIN &&
                errno != EINTR) {
                qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                                 "Failure while reading %s startup output: %s",
                                 what, strerror(errno));
                return -1;
            }

            ret = poll(&pfd, 1, MONITOR_TIMEOUT);
            if (ret == 0) {
                qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                                 "Timed out while reading %s startup output", what);
                return -1;
            } else if (ret == -1) {
                if (errno != EINTR) {
                    qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                                     "Failure while reading %s startup output: %s",
                                     what, strerror(errno));
                    return -1;
                }
            } else if (pfd.revents & POLLHUP) {
                qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                                 "End-of-file while reading %s startup output", what);
                return -1;
            } else if (pfd.revents != POLLIN) {
                qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                                 "Failure while reading %s startup output", what);
                return -1;
            }
        } else {
            got += ret;
            buffer[got] = '\0';
            if ((ret = func(server, vm, buffer, fd)) != 1)
                return ret;
        }
    }

    qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                     "Out of space while reading %s startup output", what);
    return -1;

#undef MONITOR_TIMEOUT
}

static int
qemudCheckMonitorPrompt(struct qemud_server *server ATTRIBUTE_UNUSED,
                        struct qemud_vm *vm,
                        const char *output,
                        int fd)
{
    if (strstr(output, "(qemu) ") == NULL)
        return 1; /* keep reading */

    vm->monitor = fd;

    return 0;
}

static int qemudOpenMonitor(struct qemud_server *server, struct qemud_vm *vm, const char *monitor) {
    int monfd;
    char buffer[1024];
    int ret = -1;

    if (!(monfd = open(monitor, O_RDWR))) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "Unable to open monitor path %s", monitor);
        return -1;
    }
    if (qemudSetCloseExec(monfd) < 0) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "Unable to set monitor close-on-exec flag");
        goto error;
    }
    if (qemudSetNonBlock(monfd) < 0) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "Unable to put monitor into non-blocking mode");
        goto error;
    }

    ret = qemudReadMonitorOutput(server, vm, monfd,
                                 buffer, sizeof(buffer),
                                 qemudCheckMonitorPrompt,
                                 "monitor");
 error:
    close(monfd);
    return ret;
}

static int qemudExtractMonitorPath(const char *haystack, char *path, int pathmax) {
    static const char needle[] = "char device redirected to";
    char *tmp;

    if (!(tmp = strstr(haystack, needle)))
        return -1;

    strncpy(path, tmp+sizeof(needle), pathmax-1);
    path[pathmax-1] = '\0';

    while (*path) {
        /*
         * The monitor path ends at first whitespace char
         * so lets search for it & NULL terminate it there
         */
        if (isspace(*path)) {
            *path = '\0';
            return 0;
        }
        path++;
    }

    /*
     * We found a path, but didn't find any whitespace,
     * so it must be still incomplete - we should at
     * least see a \n
     */
    return -1;
}

static int
qemudOpenMonitorPath(struct qemud_server *server,
                     struct qemud_vm *vm,
                     const char *output,
                     int fd ATTRIBUTE_UNUSED)
{
    char monitor[PATH_MAX];

    if (qemudExtractMonitorPath(output, monitor, sizeof(monitor)) < 0)
        return 1; /* keep reading */

    return qemudOpenMonitor(server, vm, monitor);
}

static int qemudWaitForMonitor(struct qemud_server *server, struct qemud_vm *vm) {
    char buffer[1024]; /* Plenty of space to get startup greeting */

    return qemudReadMonitorOutput(server, vm, vm->stderr,
                                  buffer, sizeof(buffer),
                                  qemudOpenMonitorPath,
                                  "PTY");
}

static int qemudNextFreeVNCPort(struct qemud_server *server ATTRIBUTE_UNUSED) {
    int i;

    for (i = 5900 ; i < 6000 ; i++) {
        int fd;
        int reuse = 1;
        struct sockaddr_in addr;
        addr.sin_family = AF_INET;
        addr.sin_port = htons(i);
        addr.sin_addr.s_addr = htonl(INADDR_ANY);
        fd = socket(PF_INET, SOCK_STREAM, 0);
        if (fd < 0)
            return -1;

        if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (void*)&reuse, sizeof(reuse)) < 0) {
            close(fd);
            break;
        }

        if (bind(fd, (struct sockaddr*)&addr, sizeof(addr)) == 0) {
            /* Not in use, lets grab it */
            close(fd);
            return i;
        }
        close(fd);

        if (errno == EADDRINUSE) {
            /* In use, try next */
            continue;
        }
        /* Some other bad failure, get out.. */
        break;
    }
    return -1;
}
838 839 840 841 842 843

int qemudStartVMDaemon(struct qemud_server *server,
                       struct qemud_vm *vm) {
    char **argv = NULL;
    int i, ret = -1;

844 845 846 847 848 849
    if (qemudIsActiveVM(vm)) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "VM is already active");
        return -1;
    }

D
Daniel P. Berrange 已提交
850 851 852 853 854 855 856 857 858
    if (vm->def->vncPort < 0) {
        int port = qemudNextFreeVNCPort(server);
        if (port < 0) {
            qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                             "Unable to find an unused VNC port");
            return -1;
        }
        vm->def->vncActivePort = port;
    } else
859
        vm->def->vncActivePort = vm->def->vncPort;
860 861 862 863

    if (qemudBuildCommandLine(server, vm, &argv) < 0)
        return -1;

864
    if (qemudExec(server, argv, &vm->pid, &vm->stdout, &vm->stderr) == 0) {
865
        vm->id = server->nextvmid++;
D
Daniel P. Berrange 已提交
866
        vm->state = QEMUD_STATE_RUNNING;
867 868 869 870 871

        server->ninactivevms--;
        server->nactivevms++;
        server->nvmfds += 2;

872
        ret = 0;
D
Daniel P. Berrange 已提交
873 874 875 876 877

        if (qemudWaitForMonitor(server, vm) < 0) {
            qemudShutdownVMDaemon(server, vm);
            ret = -1;
        }
878
    }
879 880 881 882 883 884 885 886 887 888

    if (vm->tapfds) {
        for (i = 0; vm->tapfds[i] != -1; i++) {
            close(vm->tapfds[i]);
            vm->tapfds[i] = -1;
        }
        free(vm->tapfds);
        vm->tapfds = NULL;
        vm->ntapfds = 0;
    }
D
Daniel P. Berrange 已提交
889
  
890
    for (i = 0 ; argv[i] ; i++)
D
Daniel P. Berrange 已提交
891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937
        free(argv[i]);
    free(argv);

    return ret;
}


static void qemudDispatchClientFailure(struct qemud_server *server, struct qemud_client *client) {
    struct qemud_client *tmp = server->clients;
    struct qemud_client *prev = NULL;
    while (tmp) {
        if (tmp == client) {
            if (prev == NULL)
                server->clients = client->next;
            else
                prev->next = client->next;
            server->nclients--;
            break;
        }
        prev = tmp;
        tmp = tmp->next;
    }
    close(client->fd);
    free(client);
}


static int qemudDispatchClientRequest(struct qemud_server *server, struct qemud_client *client) {
    if (qemudDispatch(server,
                      client,
                      &client->incoming,
                      &client->outgoing) < 0) {
        return -1;
    }

    client->outgoingSent = 0;
    client->tx = 1;
    client->incomingReceived = 0;

    return 0;
}

static int qemudClientRead(struct qemud_server *server,
                           struct qemud_client *client,
                           char *buf, size_t want) {
    int ret;
    if ((ret = read(client->fd, buf, want)) <= 0) {
938
        qemudDebug("Plain read error %d", ret);
D
Daniel P. Berrange 已提交
939 940 941 942
        if (!ret || errno != EAGAIN)
            qemudDispatchClientFailure(server, client);
        return -1;
    }
943
    qemudDebug("Plain data read %d", ret);
D
Daniel P. Berrange 已提交
944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967
    return ret;
}

static void qemudDispatchClientRead(struct qemud_server *server, struct qemud_client *client) {
    char *data = (char *)&client->incoming;
    unsigned int got = client->incomingReceived;
    int want;
    int ret;

 restart:
    if (got >= sizeof(struct qemud_packet_header)) {
        want = sizeof(struct qemud_packet_header) + client->incoming.header.dataSize - got;
    } else {
        want = sizeof(struct qemud_packet_header) - got;
    }

    if ((ret = qemudClientRead(server, client, data+got, want)) < 0) {
        return;
    }
    got += ret;
    client->incomingReceived += ret;

    /* If we've finished header, move onto body */
    if (client->incomingReceived == sizeof(struct qemud_packet_header)) {
968
        qemudDebug("Type %d, data %d",
D
Daniel P. Berrange 已提交
969 970 971 972
                    client->incoming.header.type,
                    client->incoming.header.dataSize);
        /* Client lied about dataSize */
        if (client->incoming.header.dataSize > sizeof(union qemud_packet_data)) {
973
            qemudDebug("Bogus data size %u", client->incoming.header.dataSize);
D
Daniel P. Berrange 已提交
974 975 976 977
            qemudDispatchClientFailure(server, client);
            return;
        }
        if (client->incoming.header.dataSize) {
978
            qemudDebug("- Restarting recv to process body (%d bytes)",
D
Daniel P. Berrange 已提交
979 980 981 982 983 984 985 986 987
                        client->incoming.header.dataSize);
            goto restart;
        }
    }

    /* If we've finished body, dispatch the request */
    if (ret == want) {
        if (qemudDispatchClientRequest(server, client) < 0)
            qemudDispatchClientFailure(server, client);
988
        qemudDebug("Dispatch");
D
Daniel P. Berrange 已提交
989 990 991 992 993 994 995 996 997
    }
}


static int qemudClientWrite(struct qemud_server *server,
                           struct qemud_client *client,
                           char *buf, size_t want) {
    int ret;
    if ((ret = write(client->fd, buf, want)) < 0) {
998
        qemudDebug("Plain write error %d", ret);
D
Daniel P. Berrange 已提交
999 1000 1001 1002
        if (errno != EAGAIN)
            qemudDispatchClientFailure(server, client);
        return -1;
    }
1003
    qemudDebug("Plain data write %d", ret);
D
Daniel P. Berrange 已提交
1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016
    return ret;
}


static void qemudDispatchClientWrite(struct qemud_server *server, struct qemud_client *client) {
    char *data = (char *)&client->outgoing;
    int sent = client->outgoingSent;
    int todo = sizeof(struct qemud_packet_header) + client->outgoing.header.dataSize - sent;
    int ret;
    if ((ret = qemudClientWrite(server, client, data+sent, todo)) < 0) {
        return;
    }
    client->outgoingSent += ret;
1017
    qemudDebug("Done %d %d", todo, ret);
D
Daniel P. Berrange 已提交
1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039
    if (todo == ret)
        client->tx = 0;
}

static int qemudVMData(struct qemud_server *server ATTRIBUTE_UNUSED,
                       struct qemud_vm *vm, int fd) {
    char buf[4096];
    if (vm->pid < 0)
        return 0;

    for (;;) {
        int ret = read(fd, buf, sizeof(buf)-1);
        if (ret < 0) {
            if (errno == EAGAIN)
                return 0;
            return -1;
        }
        if (ret == 0) {
            return 0;
        }
        buf[ret] = '\0';

1040
        qemudDebug("[%s]", buf);
D
Daniel P. Berrange 已提交
1041 1042 1043
    }
}

1044
static void
1045
qemudNetworkIfaceDisconnect(struct qemud_server *server,
1046 1047
                            struct qemud_vm *vm ATTRIBUTE_UNUSED,
                            struct qemud_vm_net_def *net) {
1048 1049 1050 1051 1052 1053 1054 1055 1056 1057
    struct qemud_network *network;
    if (net->type != QEMUD_NET_NETWORK)
        return;

    if (!(network = qemudFindNetworkByName(server, net->dst.network.name))) {
        return;
    } else if (network->bridge[0] == '\0') {
        return;
    }

1058
    iptablesRemovePhysdevForward(server->iptables, net->dst.network.ifname);
1059 1060
}

D
Daniel P. Berrange 已提交
1061
int qemudShutdownVMDaemon(struct qemud_server *server, struct qemud_vm *vm) {
1062
    struct qemud_vm_net_def *net;
D
Daniel P. Berrange 已提交
1063

1064
    if (!qemudIsActiveVM(vm))
D
Daniel P. Berrange 已提交
1065 1066
        return 0;

1067
    qemudLog(QEMUD_INFO, "Shutting down VM '%s'", vm->def->name);
D
Daniel P. Berrange 已提交
1068

1069
    kill(vm->pid, SIGTERM);
D
Daniel P. Berrange 已提交
1070

1071 1072 1073 1074 1075 1076 1077 1078 1079
    qemudVMData(server, vm, vm->stdout);
    qemudVMData(server, vm, vm->stderr);
    close(vm->stdout);
    close(vm->stderr);
    if (vm->monitor != -1)
        close(vm->monitor);
    vm->stdout = -1;
    vm->stderr = -1;
    vm->monitor = -1;
D
Daniel P. Berrange 已提交
1080 1081
    server->nvmfds -= 2;

1082
    net = vm->def->nets;
1083 1084 1085 1086 1087 1088
    while (net) {
        if (net->type == QEMUD_NET_NETWORK)
            qemudNetworkIfaceDisconnect(server, vm, net);
        net = net->next;
    }

D
Daniel P. Berrange 已提交
1089 1090 1091
    if (waitpid(vm->pid, NULL, WNOHANG) != vm->pid) {
        kill(vm->pid, SIGKILL);
        if (waitpid(vm->pid, NULL, 0) != vm->pid) {
1092
            qemudLog(QEMUD_WARN, "Got unexpected pid, damn");
D
Daniel P. Berrange 已提交
1093 1094 1095 1096
        }
    }

    vm->pid = -1;
1097
    vm->id = -1;
D
Daniel P. Berrange 已提交
1098
    vm->state = QEMUD_STATE_STOPPED;
1099 1100 1101 1102 1103 1104

    if (vm->newDef) {
        qemudFreeVMDef(vm->def);
        vm->def = vm->newDef;
        vm->newDef = NULL;
    }
D
Daniel P. Berrange 已提交
1105

1106 1107 1108
    server->nactivevms--;
    server->ninactivevms++;

D
Daniel P. Berrange 已提交
1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125
    return 0;
}

static int qemudDispatchVMLog(struct qemud_server *server, struct qemud_vm *vm, int fd) {
    if (qemudVMData(server, vm, fd) < 0)
        if (qemudShutdownVMDaemon(server, vm) < 0)
            return -1;
    return 0;
}

static int qemudDispatchVMFailure(struct qemud_server *server, struct qemud_vm *vm,
                                  int fd ATTRIBUTE_UNUSED) {
    if (qemudShutdownVMDaemon(server, vm) < 0)
        return -1;
    return 0;
}

1126 1127 1128 1129 1130
static int
qemudBuildDnsmasqArgv(struct qemud_server *server,
                      struct qemud_network *network,
                      char ***argv) {
    int i, len;
1131
    char buf[PATH_MAX];
1132 1133 1134 1135 1136 1137 1138 1139
    struct qemud_dhcp_range_def *range;

    len =
        1 + /* dnsmasq */
        1 + /* --keep-in-foreground */
        1 + /* --bind-interfaces */
        2 + /* --pid-file "" */
        2 + /* --conf-file "" */
1140
        /*2 + *//* --interface virbr0 */
1141 1142
        2 + /* --except-interface lo */
        2 + /* --listen-address 10.0.0.1 */
1143
        1 + /* --dhcp-leasefile=path */
1144
        (2 * network->def->nranges) + /* --dhcp-range 10.0.0.2,10.0.0.254 */
1145 1146
        1;  /* NULL */

1147
    if (!(*argv = calloc(len, sizeof(char *))))
1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167
        goto no_memory;

#define APPEND_ARG(v, n, s) do {     \
        if (!((v)[(n)] = strdup(s))) \
            goto no_memory;          \
    } while (0)

    i = 0;

    APPEND_ARG(*argv, i++, "dnsmasq");

    APPEND_ARG(*argv, i++, "--keep-in-foreground");
    APPEND_ARG(*argv, i++, "--bind-interfaces");

    APPEND_ARG(*argv, i++, "--pid-file");
    APPEND_ARG(*argv, i++, "");

    APPEND_ARG(*argv, i++, "--conf-file");
    APPEND_ARG(*argv, i++, "");

1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179
    /*
     * XXX does not actually work, due to some kind of
     * race condition setting up ipv6 addresses on the
     * interface. A sleep(10) makes it work, but that's
     * clearly not practical
     *
     * APPEND_ARG(*argv, i++, "--interface");
     * APPEND_ARG(*argv, i++, network->def->bridge);
     */
    APPEND_ARG(*argv, i++, "--listen-address");
    APPEND_ARG(*argv, i++, network->def->ipAddress);

1180 1181 1182
    APPEND_ARG(*argv, i++, "--except-interface");
    APPEND_ARG(*argv, i++, "lo");

1183 1184 1185 1186 1187 1188 1189 1190
    /*
     * NB, dnsmasq command line arg bug means we need to
     * use a single arg '--dhcp-leasefile=path' rather than
     * two separate args in '--dhcp-leasefile path' style
     */
    snprintf(buf, sizeof(buf), "--dhcp-leasefile=%s/lib/libvirt/dhcp-%s.leases",
             LOCAL_STATE_DIR, network->def->name);
    APPEND_ARG(*argv, i++, buf);
1191

1192
    range = network->def->ranges;
1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224
    while (range) {
        snprintf(buf, sizeof(buf), "%s,%s",
                 range->start, range->end);

        APPEND_ARG(*argv, i++, "--dhcp-range");
        APPEND_ARG(*argv, i++, buf);

        range = range->next;
    }

#undef APPEND_ARG

    return 0;

 no_memory:
    if (argv) {
        for (i = 0; (*argv)[i]; i++)
            free((*argv)[i]);
        free(*argv);
    }
    qemudReportError(server, VIR_ERR_NO_MEMORY, "dnsmasq argv");
    return -1;
}


static int
dhcpStartDhcpDaemon(struct qemud_server *server,
                    struct qemud_network *network)
{
    char **argv;
    int ret, i;

1225
    if (network->def->ipAddress[0] == '\0') {
1226 1227 1228 1229 1230 1231 1232 1233 1234
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "cannot start dhcp daemon without IP address for server");
        return -1;
    }

    argv = NULL;
    if (qemudBuildDnsmasqArgv(server, network, &argv) < 0)
        return -1;

1235
    ret = qemudExec(server, argv, &network->dnsmasqPid, NULL, NULL);
1236 1237 1238 1239 1240 1241 1242

    for (i = 0; argv[i]; i++)
        free(argv[i]);
    free(argv);

    return ret;
}
D
Daniel P. Berrange 已提交
1243

1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254
static int
qemudAddIptablesRules(struct qemud_server *server,
                      struct qemud_network *network) {
    int err;

    if (!server->iptables && !(server->iptables = iptablesContextNew())) {
        qemudReportError(server, VIR_ERR_NO_MEMORY, "iptables support");
        return 1;
    }

    /* allow bridging from the bridge interface itself */
1255
    if ((err = iptablesAddPhysdevForward(server->iptables, network->bridge))) {
1256 1257 1258 1259 1260 1261
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "failed to add iptables rule to allow bridging from '%s' : %s\n",
                         network->bridge, strerror(err));
        goto err1;
    }

1262 1263
    /* allow DHCP requests through to dnsmasq */
    if ((err = iptablesAddTcpInput(server->iptables, network->bridge, 67))) {
1264
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1265
                         "failed to add iptables rule to allow DHCP requests from '%s' : %s\n",
1266 1267 1268 1269
                         network->bridge, strerror(err));
        goto err2;
    }

1270
    if ((err = iptablesAddUdpInput(server->iptables, network->bridge, 67))) {
1271
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1272
                         "failed to add iptables rule to allow DHCP requests from '%s' : %s\n",
1273 1274 1275 1276
                         network->bridge, strerror(err));
        goto err3;
    }

1277 1278
    /* allow DNS requests through to dnsmasq */
    if ((err = iptablesAddTcpInput(server->iptables, network->bridge, 53))) {
1279
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1280 1281
                         "failed to add iptables rule to allow DNS requests from '%s' : %s\n",
                         network->bridge, strerror(err));
1282 1283 1284
        goto err4;
    }

1285
    if ((err = iptablesAddUdpInput(server->iptables, network->bridge, 53))) {
1286
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1287
                         "failed to add iptables rule to allow DNS requests from '%s' : %s\n",
1288 1289 1290 1291
                         network->bridge, strerror(err));
        goto err5;
    }

1292 1293 1294 1295 1296 1297
    /* The remaining rules are only needed for IP forwarding */
    if (!network->def->forward)
        return 1;

    /* allow forwarding packets from the bridge interface */
    if ((err = iptablesAddInterfaceForward(server->iptables, network->bridge, network->def->forwardDev))) {
1298
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1299
                         "failed to add iptables rule to allow forwarding from '%s' : %s\n",
1300 1301 1302 1303
                         network->bridge, strerror(err));
        goto err6;
    }

1304 1305
    /* allow forwarding packets to the bridge interface if they are part of an existing connection */
    if ((err = iptablesAddStateForward(server->iptables, network->bridge, network->def->forwardDev))) {
1306
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1307
                         "failed to add iptables rule to allow forwarding to '%s' : %s\n",
1308 1309 1310 1311
                         network->bridge, strerror(err));
        goto err7;
    }

1312 1313
    /* enable masquerading */
    if ((err = iptablesAddNonBridgedMasq(server->iptables, network->def->forwardDev))) {
1314
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
1315 1316
                         "failed to add iptables rule to enable masquerading : %s\n",
                         strerror(err));
1317 1318 1319 1320 1321 1322
        goto err8;
    }

    return 1;

 err8:
1323
    iptablesRemoveStateForward(server->iptables, network->bridge, network->def->forwardDev);
1324
 err7:
1325
    iptablesRemoveInterfaceForward(server->iptables, network->bridge, network->def->forwardDev);
1326
 err6:
1327
    iptablesRemoveUdpInput(server->iptables, network->bridge, 53);
1328
 err5:
1329
    iptablesRemoveTcpInput(server->iptables, network->bridge, 53);
1330
 err4:
1331
    iptablesRemoveUdpInput(server->iptables, network->bridge, 67);
1332
 err3:
1333
    iptablesRemoveTcpInput(server->iptables, network->bridge, 67);
1334
 err2:
1335
    iptablesRemovePhysdevForward(server->iptables, network->bridge);
1336 1337 1338 1339 1340 1341 1342
 err1:
    return 0;
}

static void
qemudRemoveIptablesRules(struct qemud_server *server,
                         struct qemud_network *network) {
1343 1344 1345 1346 1347
    if (network->def->forward) {
        iptablesRemoveNonBridgedMasq(server->iptables, network->def->forwardDev);
        iptablesRemoveStateForward(server->iptables, network->bridge, network->def->forwardDev);
        iptablesRemoveInterfaceForward(server->iptables, network->bridge, network->def->forwardDev);
    }
1348 1349 1350 1351 1352
    iptablesRemoveUdpInput(server->iptables, network->bridge, 53);
    iptablesRemoveTcpInput(server->iptables, network->bridge, 53);
    iptablesRemoveUdpInput(server->iptables, network->bridge, 67);
    iptablesRemoveTcpInput(server->iptables, network->bridge, 67);
    iptablesRemovePhysdevForward(server->iptables, network->bridge);
1353 1354 1355 1356 1357 1358 1359
}

static int
qemudEnableIpForwarding(void)
{
#define PROC_IP_FORWARD "/proc/sys/net/ipv4/ip_forward"

1360
    int fd, ret;
1361

1362 1363 1364 1365 1366
    if ((fd = open(PROC_IP_FORWARD, O_WRONLY|O_TRUNC)) == -1)
        return 0;

    if (write(fd, "1\n", 2) < 0)
        ret = 0;
1367

1368
    close (fd);
1369

1370
    return 1;
1371 1372 1373 1374

#undef PROC_IP_FORWARD
}

1375 1376
int qemudStartNetworkDaemon(struct qemud_server *server,
                            struct qemud_network *network) {
1377 1378 1379
    const char *name;
    int err;

1380
    if (qemudIsActiveNetwork(network)) {
1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "network is already active");
        return -1;
    }

    if (!server->brctl && (err = brInit(&server->brctl))) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "cannot initialize bridge support: %s", strerror(err));
        return -1;
    }

1392 1393
    if (network->def->bridge[0] == '\0' ||
        strchr(network->def->bridge, '%')) {
1394 1395
        name = "vnet%d";
    } else {
1396
        name = network->def->bridge;
1397 1398 1399 1400 1401 1402 1403 1404
    }

    if ((err = brAddBridge(server->brctl, name, network->bridge, sizeof(network->bridge)))) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "cannot create bridge '%s' : %s", name, strerror(err));
        return -1;
    }

1405 1406
    if (network->def->ipAddress[0] &&
        (err = brSetInetAddress(server->brctl, network->bridge, network->def->ipAddress))) {
1407 1408
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "cannot set IP address on bridge '%s' to '%s' : %s\n",
1409
                         network->bridge, network->def->ipAddress, strerror(err));
1410 1411 1412
        goto err_delbr;
    }

1413 1414
    if (network->def->netmask[0] &&
        (err = brSetInetNetmask(server->brctl, network->bridge, network->def->netmask))) {
1415 1416
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "cannot set netmask on bridge '%s' to '%s' : %s\n",
1417
                         network->bridge, network->def->netmask, strerror(err));
1418 1419 1420
        goto err_delbr;
    }

1421
    if (network->def->ipAddress[0] &&
1422 1423 1424 1425 1426 1427 1428
        (err = brSetInterfaceUp(server->brctl, network->bridge, 1))) {
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "failed to bring the bridge '%s' up : %s\n",
                         network->bridge, strerror(err));
        goto err_delbr;
    }

1429
    if (!qemudAddIptablesRules(server, network))
1430 1431
        goto err_delbr1;

1432 1433
    if (network->def->forward &&
        !qemudEnableIpForwarding()) {
1434 1435 1436 1437 1438
        qemudReportError(server, VIR_ERR_INTERNAL_ERROR,
                         "failed to enable IP forwarding : %s\n", strerror(err));
        goto err_delbr2;
    }

1439
    if (network->def->ranges &&
1440
        dhcpStartDhcpDaemon(server, network) < 0)
1441
        goto err_delbr2;
1442

1443 1444
    network->active = 1;

1445 1446 1447
    server->ninactivenetworks--;
    server->nactivenetworks++;

1448
    return 0;
1449

1450 1451 1452
 err_delbr2:
    qemudRemoveIptablesRules(server, network);

1453
 err_delbr1:
1454
    if (network->def->ipAddress[0] &&
1455
        (err = brSetInterfaceUp(server->brctl, network->bridge, 0))) {
1456 1457
        qemudLog(QEMUD_WARN, "Failed to bring down bridge '%s' : %s",
                 network->bridge, strerror(err));
1458 1459
    }

1460 1461
 err_delbr:
    if ((err = brDeleteBridge(server->brctl, network->bridge))) {
1462 1463
        qemudLog(QEMUD_WARN, "Failed to delete bridge '%s' : %s\n",
                 network->bridge, strerror(err));
1464 1465 1466
    }

    return -1;
1467 1468 1469 1470 1471
}


int qemudShutdownNetworkDaemon(struct qemud_server *server,
                               struct qemud_network *network) {
1472 1473
    int err;

1474 1475
    qemudLog(QEMUD_INFO, "Shutting down network '%s'", network->def->name);

1476
    if (!qemudIsActiveNetwork(network))
1477 1478
        return 0;

1479 1480 1481
    if (network->dnsmasqPid > 0)
        kill(network->dnsmasqPid, SIGTERM);

1482 1483
    qemudRemoveIptablesRules(server, network);

1484
    if (network->def->ipAddress[0] &&
1485
        (err = brSetInterfaceUp(server->brctl, network->bridge, 0))) {
1486 1487
        qemudLog(QEMUD_WARN, "Failed to bring down bridge '%s' : %s\n",
                 network->bridge, strerror(err));
1488 1489 1490
    }

    if ((err = brDeleteBridge(server->brctl, network->bridge))) {
1491 1492
        qemudLog(QEMUD_WARN, "Failed to delete bridge '%s' : %s\n",
                 network->bridge, strerror(err));
1493 1494
    }

1495 1496 1497 1498
    if (network->dnsmasqPid > 0 &&
        waitpid(network->dnsmasqPid, NULL, WNOHANG) != network->dnsmasqPid) {
        kill(network->dnsmasqPid, SIGKILL);
        if (waitpid(network->dnsmasqPid, NULL, 0) != network->dnsmasqPid)
1499
            qemudLog(QEMUD_WARN, "Got unexpected pid for dnsmasq\n");
1500 1501
    }

1502
    network->bridge[0] = '\0';
1503
    network->dnsmasqPid = -1;
1504 1505
    network->active = 0;

1506 1507 1508 1509 1510 1511
    if (network->newDef) {
        qemudFreeNetworkDef(network->def);
        network->def = network->newDef;
        network->newDef = NULL;
    }

1512 1513 1514
    server->nactivenetworks--;
    server->ninactivenetworks++;

1515 1516 1517 1518
    return 0;
}


D
Daniel P. Berrange 已提交
1519 1520 1521
static int qemudDispatchPoll(struct qemud_server *server, struct pollfd *fds) {
    struct qemud_socket *sock = server->sockets;
    struct qemud_client *client = server->clients;
1522
    struct qemud_vm *vm;
1523
    struct qemud_network *network;
D
Daniel P. Berrange 已提交
1524 1525 1526
    int ret = 0;
    int fd = 0;

1527 1528 1529 1530 1531 1532
    if (fds[fd++].revents && qemudDispatchSignal(server) < 0)
        return -1;

    if (server->shutdown)
        return 0;

1533
    vm = server->vms;
D
Daniel P. Berrange 已提交
1534 1535 1536 1537 1538 1539
    while (vm) {
        struct qemud_vm *next = vm->next;
        int failed = 0,
            stdoutfd = vm->stdout,
            stderrfd = vm->stderr;

1540 1541 1542 1543 1544
        if (!qemudIsActiveVM(vm)) {
            vm = next;
            continue;
        }

D
Daniel P. Berrange 已提交
1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572
        if (stdoutfd != -1) {
            if (fds[fd].revents) {
                if (fds[fd].revents == POLLIN) {
                    if (qemudDispatchVMLog(server, vm, fds[fd].fd) < 0)
                        failed = 1;
                } else {
                    if (qemudDispatchVMFailure(server, vm, fds[fd].fd) < 0)
                        failed = 1;
                }
            }
            fd++;
        }
        if (stderrfd != -1) {
            if (!failed) {
                if (fds[fd].revents) {
                    if (fds[fd].revents == POLLIN) {
                        if (qemudDispatchVMLog(server, vm, fds[fd].fd) < 0)
                            failed = 1;
                    } else {
                        if (qemudDispatchVMFailure(server, vm, fds[fd].fd) < 0)
                            failed = 1;
                    }
                }
            }
            fd++;
        }
        vm = next;
        if (failed)
1573
            ret = -1; /* FIXME: the daemon shouldn't exit on failure here */
D
Daniel P. Berrange 已提交
1574
    }
D
Daniel P. Berrange 已提交
1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597
    while (client) {
        struct qemud_client *next = client->next;
        if (fds[fd].revents) {
            qemudDebug("Poll data normal");
            if (fds[fd].revents == POLLOUT)
                qemudDispatchClientWrite(server, client);
            else if (fds[fd].revents == POLLIN)
                qemudDispatchClientRead(server, client);
            else
                qemudDispatchClientFailure(server, client);
        }
        fd++;
        client = next;
    }
    while (sock) {
        struct qemud_socket *next = sock->next;
        /* FIXME: the daemon shouldn't exit on error here */
        if (fds[fd].revents)
            if (qemudDispatchServer(server, sock) < 0)
                return -1;
        fd++;
        sock = next;
    }
D
Daniel P. Berrange 已提交
1598 1599 1600

    /* Cleanup any VMs which shutdown & dont have an associated
       config file */
1601
    vm = server->vms;
D
Daniel P. Berrange 已提交
1602
    while (vm) {
1603 1604 1605 1606 1607 1608
        struct qemud_vm *next = vm->next;

        if (!qemudIsActiveVM(vm) && !vm->configFile[0])
            qemudRemoveInactiveVM(server, vm);

        vm = next;
D
Daniel P. Berrange 已提交
1609 1610
    }

1611
    /* Cleanup any networks too */
1612
    network = server->networks;
1613
    while (network) {
1614 1615 1616 1617 1618 1619
        struct qemud_network *next = network->next;

        if (!qemudIsActiveNetwork(network) && !network->configFile[0])
            qemudRemoveInactiveNetwork(server, network);

        network = next;
1620 1621
    }

D
Daniel P. Berrange 已提交
1622 1623 1624 1625 1626 1627 1628 1629 1630
    return ret;
}

static void qemudPreparePoll(struct qemud_server *server, struct pollfd *fds) {
    int  fd = 0;
    struct qemud_socket *sock;
    struct qemud_client *client;
    struct qemud_vm *vm;

1631 1632 1633 1634
    fds[fd].fd = server->sigread;
    fds[fd].events = POLLIN;
    fd++;

1635 1636 1637
    for (vm = server->vms ; vm ; vm = vm->next) {
        if (!qemudIsActiveVM(vm))
            continue;
D
Daniel P. Berrange 已提交
1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648
        if (vm->stdout != -1) {
            fds[fd].fd = vm->stdout;
            fds[fd].events = POLLIN | POLLERR | POLLHUP;
            fd++;
        }
        if (vm->stderr != -1) {
            fds[fd].fd = vm->stderr;
            fds[fd].events = POLLIN | POLLERR | POLLHUP;
            fd++;
        }
    }
D
Daniel P. Berrange 已提交
1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663
    for (client = server->clients ; client ; client = client->next) {
        fds[fd].fd = client->fd;
        /* Refuse to read more from client if tx is pending to
           rate limit */
        if (client->tx)
            fds[fd].events = POLLOUT | POLLERR | POLLHUP;
        else
            fds[fd].events = POLLIN | POLLERR | POLLHUP;
        fd++;
    }
    for (sock = server->sockets ; sock ; sock = sock->next) {
        fds[fd].fd = sock->fd;
        fds[fd].events = POLLIN;
        fd++;
    }
D
Daniel P. Berrange 已提交
1664 1665 1666 1667 1668
}



static int qemudOneLoop(struct qemud_server *server, int timeout) {
1669
    int nfds = server->nsockets + server->nclients + server->nvmfds + 1; /* server->sigread */
D
Daniel P. Berrange 已提交
1670 1671 1672
    struct pollfd fds[nfds];
    int thistimeout = -1;
    int ret;
1673
    sig_atomic_t errors;
D
Daniel P. Berrange 已提交
1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689

    /* If we have no clients or vms, then timeout after
       30 seconds, letting daemon exit */
    if (timeout > 0 &&
        !server->nclients &&
        !server->nactivevms)
        thistimeout = timeout;

    qemudPreparePoll(server, fds);

 retry:

    if ((ret = poll(fds, nfds, thistimeout * 1000)) < 0) {
        if (errno == EINTR) {
            goto retry;
        }
1690 1691
        qemudLog(QEMUD_ERR, "Error polling on file descriptors: %s",
                 strerror(errno));
D
Daniel P. Berrange 已提交
1692 1693 1694 1695
        return -1;
    }

    /* Must have timed out */
1696 1697
    if (ret == 0) {
        qemudLog(QEMUD_INFO, "Timed out while polling on file descriptors");
D
Daniel P. Berrange 已提交
1698
        return -1;
1699
    }
D
Daniel P. Berrange 已提交
1700

1701 1702 1703 1704 1705 1706 1707 1708 1709 1710
    /* Check for any signal handling errors and log them. */
    errors = sig_errors;
    if (errors) {
        sig_errors -= errors;
        qemudLog (QEMUD_ERR,
                  "Signal handler reported %d errors: last error: %s",
                  errors, strerror (sig_lasterrno));
        return -1;
    }

D
Daniel P. Berrange 已提交
1711 1712 1713 1714 1715 1716 1717 1718 1719
    if (qemudDispatchPoll(server, fds) < 0)
        return -1;

    return 0;
}

static int qemudRunLoop(struct qemud_server *server, int timeout) {
    int ret;

1720
    while ((ret = qemudOneLoop(server, timeout)) == 0 && !server->shutdown)
D
Daniel P. Berrange 已提交
1721 1722 1723 1724 1725 1726
        ;

    return ret == -1 ? -1 : 0;
}

static void qemudCleanup(struct qemud_server *server) {
1727 1728
    struct qemud_socket *sock;

1729
    close(server->sigread);
1730 1731

    sock = server->sockets;
D
Daniel P. Berrange 已提交
1732
    while (sock) {
1733
        struct qemud_socket *next = sock->next;
D
Daniel P. Berrange 已提交
1734
        close(sock->fd);
1735 1736
        free(sock);
        sock = next;
D
Daniel P. Berrange 已提交
1737
    }
1738

1739 1740
    if (server->brctl)
        brShutdown(server->brctl);
1741 1742
    if (server->iptables)
        iptablesContextFree(server->iptables);
1743

D
Daniel P. Berrange 已提交
1744 1745 1746 1747 1748 1749 1750 1751
    free(server);
}

#define MAX_LISTEN 5
int main(int argc, char **argv) {
    int sys = 0;
    int timeout = -1;
    struct qemud_server *server;
1752 1753
    struct sigaction sig_action;
    int sigpipe[2];
1754 1755
    char *pid_file = NULL;
    int ret = 1;
D
Daniel P. Berrange 已提交
1756 1757 1758 1759 1760 1761

    struct option opts[] = {
        { "verbose", no_argument, &verbose, 1},
        { "daemon", no_argument, &godaemon, 1},
        { "system", no_argument, &sys, 1},
        { "timeout", required_argument, 0, 't'},
1762
        { "pid-file", required_argument, 0, 'p'},
D
Daniel P. Berrange 已提交
1763 1764 1765 1766 1767 1768 1769 1770
        {0, 0, 0, 0}
    };

    while (1) {
        int optidx = 0;
        int c;
        char *tmp;

1771
        c = getopt_long(argc, argv, "vsdt:p:", opts, &optidx);
D
Daniel P. Berrange 已提交
1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797

        if (c == -1) {
            break;
        }

        switch (c) {
        case 0:
            /* Got one of the flags */
            break;
        case 'v':
            verbose = 1;
            break;
        case 'd':
            godaemon = 1;
            break;
        case 's':
            sys = 1;
            break;

        case 't':
            timeout = strtol(optarg, &tmp, 10);
            if (!tmp)
                timeout = -1;
            if (timeout <= 0)
                timeout = -1;
            break;
1798 1799 1800 1801 1802

        case 'p':
            pid_file = strdup(optarg);
            break;

D
Daniel P. Berrange 已提交
1803 1804 1805 1806 1807 1808 1809 1810 1811
        case '?':
            return 2;
            break;

        default:
            abort();
        }
    }

1812 1813 1814
    if (godaemon)
        openlog("libvirt-qemud", 0, 0);

1815 1816
    if (pipe(sigpipe) < 0 ||
        qemudSetNonBlock(sigpipe[0]) < 0 ||
1817 1818 1819
        qemudSetNonBlock(sigpipe[1]) < 0) {
        qemudLog(QEMUD_ERR, "Failed to create pipe: %s",
                 strerror(errno));
1820
        goto error1;
1821
    }
1822 1823 1824 1825 1826 1827 1828 1829 1830

    sigwrite = sigpipe[1];

    sig_action.sa_handler = sig_handler;
    sig_action.sa_flags = 0;
    sigemptyset(&sig_action.sa_mask);

    sigaction(SIGHUP, &sig_action, NULL);
    sigaction(SIGINT, &sig_action, NULL);
1831
    sigaction(SIGQUIT, &sig_action, NULL);
1832 1833 1834 1835 1836
    sigaction(SIGTERM, &sig_action, NULL);
    sigaction(SIGCHLD, &sig_action, NULL);

    sig_action.sa_handler = SIG_IGN;
    sigaction(SIGPIPE, &sig_action, NULL);
D
Daniel P. Berrange 已提交
1837 1838 1839

    if (godaemon) {
        int pid = qemudGoDaemon();
1840 1841 1842
        if (pid < 0) {
            qemudLog(QEMUD_ERR, "Failed to fork as daemon: %s",
                     strerror(errno));
1843
            goto error1;
1844
        }
D
Daniel P. Berrange 已提交
1845
        if (pid > 0)
1846 1847 1848 1849
            goto out;

        if (qemudWritePidFile(pid_file ? pid_file : QEMUD_PID_FILE) < 0)
            goto error1;
D
Daniel P. Berrange 已提交
1850 1851
    }

1852 1853 1854 1855
    if (!(server = qemudInitialize(sys, sigpipe[0]))) {
        ret = 2;
        goto error2;
    }
D
Daniel P. Berrange 已提交
1856 1857 1858 1859 1860

    qemudRunLoop(server, timeout);

    qemudCleanup(server);

1861 1862
    close(sigwrite);

1863 1864 1865
    if (godaemon)
        closelog();

1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877
 out:
    ret = 0;

 error2:
    if (godaemon)
        unlink(pid_file ? pid_file : QEMUD_PID_FILE);

 error1:
    if (pid_file)
        free(pid_file);

    return ret;
D
Daniel P. Berrange 已提交
1878 1879 1880 1881 1882 1883 1884 1885 1886 1887
}

/*
 * Local variables:
 *  indent-tabs-mode: nil
 *  c-indent-level: 4
 *  c-basic-offset: 4
 *  tab-width: 4
 * End:
 */