|
Packit Service |
3880ab |
/* SPDX-License-Identifier: GPL-2.0 */
|
|
Packit Service |
3880ab |
#define _ATFILE_SOURCE
|
|
Packit Service |
3880ab |
#include <sys/types.h>
|
|
Packit Service |
3880ab |
#include <sys/stat.h>
|
|
Packit Service |
3880ab |
#include <sys/wait.h>
|
|
Packit Service |
3880ab |
#include <sys/inotify.h>
|
|
Packit Service |
3880ab |
#include <sys/mount.h>
|
|
Packit Service |
3880ab |
#include <sys/syscall.h>
|
|
Packit Service |
3880ab |
#include <stdio.h>
|
|
Packit Service |
3880ab |
#include <string.h>
|
|
Packit Service |
3880ab |
#include <sched.h>
|
|
Packit Service |
3880ab |
#include <fcntl.h>
|
|
Packit Service |
3880ab |
#include <dirent.h>
|
|
Packit Service |
3880ab |
#include <errno.h>
|
|
Packit Service |
3880ab |
#include <unistd.h>
|
|
Packit Service |
3880ab |
#include <ctype.h>
|
|
Packit Service |
3880ab |
#include <linux/limits.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include <linux/net_namespace.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include "utils.h"
|
|
Packit Service |
3880ab |
#include "list.h"
|
|
Packit Service |
3880ab |
#include "ip_common.h"
|
|
Packit Service |
3880ab |
#include "namespace.h"
|
|
Packit Service |
3880ab |
#include "json_print.h"
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int usage(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"Usage: ip netns list\n"
|
|
Packit Service |
3880ab |
" ip netns add NAME\n"
|
|
Packit Service |
3880ab |
" ip netns attach NAME PID\n"
|
|
Packit Service |
3880ab |
" ip netns set NAME NETNSID\n"
|
|
Packit Service |
3880ab |
" ip [-all] netns delete [NAME]\n"
|
|
Packit Service |
3880ab |
" ip netns identify [PID]\n"
|
|
Packit Service |
3880ab |
" ip netns pids NAME\n"
|
|
Packit Service |
3880ab |
" ip [-all] netns exec [NAME] cmd ...\n"
|
|
Packit Service |
3880ab |
" ip netns monitor\n"
|
|
Packit Service |
3880ab |
" ip netns list-id [target-nsid POSITIVE-INT] [nsid POSITIVE-INT]\n"
|
|
Packit Service |
3880ab |
"NETNSID := auto | POSITIVE-INT\n");
|
|
Packit Service |
3880ab |
exit(-1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* This socket is used to get nsid */
|
|
Packit Service |
3880ab |
static struct rtnl_handle rtnsh = { .fd = -1 };
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int have_rtnl_getnsid = -1;
|
|
Packit Service |
3880ab |
static int saved_netns = -1;
|
|
Packit Service |
3880ab |
static struct link_filter filter;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int ipnetns_accept_msg(struct rtnl_ctrl_data *ctrl,
|
|
Packit Service |
3880ab |
struct nlmsghdr *n, void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct nlmsgerr *err = (struct nlmsgerr *)NLMSG_DATA(n);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (n->nlmsg_type == NLMSG_ERROR &&
|
|
Packit Service |
3880ab |
(err->error == -EOPNOTSUPP || err->error == -EINVAL))
|
|
Packit Service |
3880ab |
have_rtnl_getnsid = 0;
|
|
Packit Service |
3880ab |
else
|
|
Packit Service |
3880ab |
have_rtnl_getnsid = 1;
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int ipnetns_have_nsid(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct {
|
|
Packit Service |
3880ab |
struct nlmsghdr n;
|
|
Packit Service |
3880ab |
struct rtgenmsg g;
|
|
Packit Service |
3880ab |
char buf[1024];
|
|
Packit Service |
3880ab |
} req = {
|
|
Packit Service |
3880ab |
.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtgenmsg)),
|
|
Packit Service |
3880ab |
.n.nlmsg_flags = NLM_F_REQUEST,
|
|
Packit Service |
3880ab |
.n.nlmsg_type = RTM_GETNSID,
|
|
Packit Service |
3880ab |
.g.rtgen_family = AF_UNSPEC,
|
|
Packit Service |
3880ab |
};
|
|
Packit Service |
3880ab |
int fd;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (have_rtnl_getnsid >= 0) {
|
|
Packit Service |
3880ab |
fd = open("/proc/self/ns/net", O_RDONLY);
|
|
Packit Service |
3880ab |
if (fd < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"/proc/self/ns/net: %s. Continuing anyway.\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
have_rtnl_getnsid = 0;
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
addattr32(&req.n, 1024, NETNSA_FD, fd);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (rtnl_send(&rth, &req.n, req.n.nlmsg_len) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"rtnl_send(RTM_GETNSID): %s. Continuing anyway.\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
have_rtnl_getnsid = 0;
|
|
Packit Service |
3880ab |
close(fd);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
rtnl_listen(&rth, ipnetns_accept_msg, NULL);
|
|
Packit Service |
3880ab |
close(fd);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return have_rtnl_getnsid;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int get_netnsid_from_name(const char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct {
|
|
Packit Service |
3880ab |
struct nlmsghdr n;
|
|
Packit Service |
3880ab |
struct rtgenmsg g;
|
|
Packit Service |
3880ab |
char buf[1024];
|
|
Packit Service |
3880ab |
} req = {
|
|
Packit Service |
3880ab |
.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtgenmsg)),
|
|
Packit Service |
3880ab |
.n.nlmsg_flags = NLM_F_REQUEST,
|
|
Packit Service |
3880ab |
.n.nlmsg_type = RTM_GETNSID,
|
|
Packit Service |
3880ab |
.g.rtgen_family = AF_UNSPEC,
|
|
Packit Service |
3880ab |
};
|
|
Packit Service |
3880ab |
struct nlmsghdr *answer;
|
|
Packit Service |
3880ab |
struct rtattr *tb[NETNSA_MAX + 1];
|
|
Packit Service |
3880ab |
struct rtgenmsg *rthdr;
|
|
Packit Service |
3880ab |
int len, fd, ret = -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
netns_nsid_socket_init();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fd = netns_get_fd(name);
|
|
Packit Service |
3880ab |
if (fd < 0)
|
|
Packit Service |
3880ab |
return fd;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
addattr32(&req.n, 1024, NETNSA_FD, fd);
|
|
Packit Service |
3880ab |
if (rtnl_talk(&rtnsh, &req.n, &answer) < 0) {
|
|
Packit Service |
3880ab |
close(fd);
|
|
Packit Service |
3880ab |
return -2;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
close(fd);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Validate message and parse attributes */
|
|
Packit Service |
3880ab |
if (answer->nlmsg_type == NLMSG_ERROR)
|
|
Packit Service |
3880ab |
goto out;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
rthdr = NLMSG_DATA(answer);
|
|
Packit Service |
3880ab |
len = answer->nlmsg_len - NLMSG_SPACE(sizeof(*rthdr));
|
|
Packit Service |
3880ab |
if (len < 0)
|
|
Packit Service |
3880ab |
goto out;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
parse_rtattr(tb, NETNSA_MAX, NETNS_RTA(rthdr), len);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[NETNSA_NSID]) {
|
|
Packit Service |
3880ab |
ret = rta_getattr_s32(tb[NETNSA_NSID]);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
out:
|
|
Packit Service |
3880ab |
free(answer);
|
|
Packit Service |
3880ab |
return ret;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
struct nsid_cache {
|
|
Packit Service |
3880ab |
struct hlist_node nsid_hash;
|
|
Packit Service |
3880ab |
struct hlist_node name_hash;
|
|
Packit Service |
3880ab |
int nsid;
|
|
Packit Service |
3880ab |
char name[0];
|
|
Packit Service |
3880ab |
};
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#define NSIDMAP_SIZE 128
|
|
Packit Service |
3880ab |
#define NSID_HASH_NSID(nsid) (nsid & (NSIDMAP_SIZE - 1))
|
|
Packit Service |
3880ab |
#define NSID_HASH_NAME(name) (namehash(name) & (NSIDMAP_SIZE - 1))
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static struct hlist_head nsid_head[NSIDMAP_SIZE];
|
|
Packit Service |
3880ab |
static struct hlist_head name_head[NSIDMAP_SIZE];
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static struct nsid_cache *netns_map_get_by_nsid(int nsid)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct hlist_node *n;
|
|
Packit Service |
3880ab |
uint32_t h;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (nsid < 0)
|
|
Packit Service |
3880ab |
return NULL;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
h = NSID_HASH_NSID(nsid);
|
|
Packit Service |
3880ab |
hlist_for_each(n, &nsid_head[h]) {
|
|
Packit Service |
3880ab |
struct nsid_cache *c = container_of(n, struct nsid_cache,
|
|
Packit Service |
3880ab |
nsid_hash);
|
|
Packit Service |
3880ab |
if (c->nsid == nsid)
|
|
Packit Service |
3880ab |
return c;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return NULL;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
char *get_name_from_nsid(int nsid)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct nsid_cache *c;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (nsid < 0)
|
|
Packit Service |
3880ab |
return NULL;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
netns_nsid_socket_init();
|
|
Packit Service |
3880ab |
netns_map_init();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
c = netns_map_get_by_nsid(nsid);
|
|
Packit Service |
3880ab |
if (c)
|
|
Packit Service |
3880ab |
return c->name;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return NULL;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_map_add(int nsid, const char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct nsid_cache *c;
|
|
Packit Service |
3880ab |
uint32_t h;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (netns_map_get_by_nsid(nsid) != NULL)
|
|
Packit Service |
3880ab |
return -EEXIST;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
c = malloc(sizeof(*c) + strlen(name) + 1);
|
|
Packit Service |
3880ab |
if (c == NULL) {
|
|
Packit Service |
3880ab |
perror("malloc");
|
|
Packit Service |
3880ab |
return -ENOMEM;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
c->nsid = nsid;
|
|
Packit Service |
3880ab |
strcpy(c->name, name);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
h = NSID_HASH_NSID(nsid);
|
|
Packit Service |
3880ab |
hlist_add_head(&c->nsid_hash, &nsid_head[h]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
h = NSID_HASH_NAME(name);
|
|
Packit Service |
3880ab |
hlist_add_head(&c->name_hash, &name_head[h]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void netns_map_del(struct nsid_cache *c)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
hlist_del(&c->name_hash);
|
|
Packit Service |
3880ab |
hlist_del(&c->nsid_hash);
|
|
Packit Service |
3880ab |
free(c);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
void netns_nsid_socket_init(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
if (rtnsh.fd > -1 || !ipnetns_have_nsid())
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (rtnl_open(&rtnsh, 0) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot open rtnetlink\n");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
void netns_map_init(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
static int initialized;
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
int nsid;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (initialized || !ipnetns_have_nsid())
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
dir = opendir(NETNS_RUN_DIR);
|
|
Packit Service |
3880ab |
if (!dir)
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir)) != NULL) {
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, ".") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, "..") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
nsid = get_netnsid_from_name(entry->d_name);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (nsid >= 0)
|
|
Packit Service |
3880ab |
netns_map_add(nsid, entry->d_name);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
initialized = 1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_get_name(int nsid, char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
int id;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (nsid < 0)
|
|
Packit Service |
3880ab |
return -EINVAL;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
dir = opendir(NETNS_RUN_DIR);
|
|
Packit Service |
3880ab |
if (!dir)
|
|
Packit Service |
3880ab |
return -ENOENT;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir)) != NULL) {
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, ".") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, "..") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
id = get_netnsid_from_name(entry->d_name);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (id >= 0 && nsid == id) {
|
|
Packit Service |
3880ab |
strcpy(name, entry->d_name);
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
return -ENOENT;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int print_nsid(struct nlmsghdr *n, void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct rtgenmsg *rthdr = NLMSG_DATA(n);
|
|
Packit Service |
3880ab |
struct rtattr *tb[NETNSA_MAX+1];
|
|
Packit Service |
3880ab |
int len = n->nlmsg_len;
|
|
Packit Service |
3880ab |
FILE *fp = (FILE *)arg;
|
|
Packit Service |
3880ab |
struct nsid_cache *c;
|
|
Packit Service |
3880ab |
char name[NAME_MAX];
|
|
Packit Service |
3880ab |
int nsid, current;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (n->nlmsg_type != RTM_NEWNSID && n->nlmsg_type != RTM_DELNSID)
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
len -= NLMSG_SPACE(sizeof(*rthdr));
|
|
Packit Service |
3880ab |
if (len < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "BUG: wrong nlmsg len %d in %s\n", len,
|
|
Packit Service |
3880ab |
__func__);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
parse_rtattr(tb, NETNSA_MAX, NETNS_RTA(rthdr), len);
|
|
Packit Service |
3880ab |
if (tb[NETNSA_NSID] == NULL) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "BUG: NETNSA_NSID is missing %s\n", __func__);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
open_json_object(NULL);
|
|
Packit Service |
3880ab |
if (n->nlmsg_type == RTM_DELNSID)
|
|
Packit Service |
3880ab |
print_bool(PRINT_ANY, "deleted", "Deleted ", true);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
nsid = rta_getattr_s32(tb[NETNSA_NSID]);
|
|
Packit Service |
3880ab |
if (nsid < 0)
|
|
Packit Service |
3880ab |
print_string(PRINT_FP, NULL, "nsid unassigned ", NULL);
|
|
Packit Service |
3880ab |
else
|
|
Packit Service |
3880ab |
print_int(PRINT_ANY, "nsid", "nsid %d ", nsid);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[NETNSA_CURRENT_NSID]) {
|
|
Packit Service |
3880ab |
current = rta_getattr_s32(tb[NETNSA_CURRENT_NSID]);
|
|
Packit Service |
3880ab |
if (current < 0)
|
|
Packit Service |
3880ab |
print_string(PRINT_FP, NULL,
|
|
Packit Service |
3880ab |
"current-nsid unassigned ", NULL);
|
|
Packit Service |
3880ab |
else
|
|
Packit Service |
3880ab |
print_int(PRINT_ANY, "current-nsid",
|
|
Packit Service |
3880ab |
"current-nsid %d ", current);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
c = netns_map_get_by_nsid(tb[NETNSA_CURRENT_NSID] ? current : nsid);
|
|
Packit Service |
3880ab |
if (c != NULL) {
|
|
Packit Service |
3880ab |
print_string(PRINT_ANY, "name",
|
|
Packit Service |
3880ab |
"(iproute2 netns name: %s)", c->name);
|
|
Packit Service |
3880ab |
netns_map_del(c);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* nsid might not be in cache */
|
|
Packit Service |
3880ab |
if (c == NULL && n->nlmsg_type == RTM_NEWNSID)
|
|
Packit Service |
3880ab |
if (netns_get_name(nsid, name) == 0) {
|
|
Packit Service |
3880ab |
print_string(PRINT_ANY, "name",
|
|
Packit Service |
3880ab |
"(iproute2 netns name: %s)", name);
|
|
Packit Service |
3880ab |
netns_map_add(nsid, name);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_string(PRINT_FP, NULL, "\n", NULL);
|
|
Packit Service |
3880ab |
close_json_object();
|
|
Packit Service |
3880ab |
fflush(fp);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int get_netnsid_from_netnsid(int nsid)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct {
|
|
Packit Service |
3880ab |
struct nlmsghdr n;
|
|
Packit Service |
3880ab |
struct rtgenmsg g;
|
|
Packit Service |
3880ab |
char buf[1024];
|
|
Packit Service |
3880ab |
} req = {
|
|
Packit Service |
3880ab |
.n.nlmsg_len = NLMSG_LENGTH(NLMSG_ALIGN(sizeof(struct rtgenmsg))),
|
|
Packit Service |
3880ab |
.n.nlmsg_flags = NLM_F_REQUEST,
|
|
Packit Service |
3880ab |
.n.nlmsg_type = RTM_GETNSID,
|
|
Packit Service |
3880ab |
.g.rtgen_family = AF_UNSPEC,
|
|
Packit Service |
3880ab |
};
|
|
Packit Service |
3880ab |
struct nlmsghdr *answer;
|
|
Packit Service |
3880ab |
int err;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
netns_nsid_socket_init();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
err = addattr32(&req.n, sizeof(req), NETNSA_NSID, nsid);
|
|
Packit Service |
3880ab |
if (err)
|
|
Packit Service |
3880ab |
return err;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (filter.target_nsid >= 0) {
|
|
Packit Service |
3880ab |
err = addattr32(&req.n, sizeof(req), NETNSA_TARGET_NSID,
|
|
Packit Service |
3880ab |
filter.target_nsid);
|
|
Packit Service |
3880ab |
if (err)
|
|
Packit Service |
3880ab |
return err;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (rtnl_talk(&rtnsh, &req.n, &answer) < 0)
|
|
Packit Service |
3880ab |
return -2;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Validate message and parse attributes */
|
|
Packit Service |
3880ab |
if (answer->nlmsg_type == NLMSG_ERROR)
|
|
Packit Service |
3880ab |
goto err_out;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
new_json_obj(json);
|
|
Packit Service |
3880ab |
err = print_nsid(answer, stdout);
|
|
Packit Service |
3880ab |
delete_json_obj();
|
|
Packit Service |
3880ab |
err_out:
|
|
Packit Service |
3880ab |
free(answer);
|
|
Packit Service |
3880ab |
return err;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_filter_req(struct nlmsghdr *nlh, int reqlen)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
int err;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (filter.target_nsid >= 0) {
|
|
Packit Service |
3880ab |
err = addattr32(nlh, reqlen, NETNSA_TARGET_NSID,
|
|
Packit Service |
3880ab |
filter.target_nsid);
|
|
Packit Service |
3880ab |
if (err)
|
|
Packit Service |
3880ab |
return err;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_list_id(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
int nsid = -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (!ipnetns_have_nsid()) {
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"RTM_GETNSID is not supported by the kernel.\n");
|
|
Packit Service |
3880ab |
return -ENOTSUP;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
filter.target_nsid = -1;
|
|
Packit Service |
3880ab |
while (argc > 0) {
|
|
Packit Service |
3880ab |
if (strcmp(*argv, "target-nsid") == 0) {
|
|
Packit Service |
3880ab |
if (filter.target_nsid >= 0)
|
|
Packit Service |
3880ab |
duparg("target-nsid", *argv);
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (get_integer(&filter.target_nsid, *argv, 0))
|
|
Packit Service |
3880ab |
invarg("\"target-nsid\" value is invalid",
|
|
Packit Service |
3880ab |
*argv);
|
|
Packit Service |
3880ab |
else if (filter.target_nsid < 0)
|
|
Packit Service |
3880ab |
invarg("\"target-nsid\" value should be >= 0",
|
|
Packit Service |
3880ab |
argv[1]);
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "nsid") == 0) {
|
|
Packit Service |
3880ab |
if (nsid >= 0)
|
|
Packit Service |
3880ab |
duparg("nsid", *argv);
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (get_integer(&nsid, *argv, 0))
|
|
Packit Service |
3880ab |
invarg("\"nsid\" value is invalid", *argv);
|
|
Packit Service |
3880ab |
else if (nsid < 0)
|
|
Packit Service |
3880ab |
invarg("\"nsid\" value should be >= 0",
|
|
Packit Service |
3880ab |
argv[1]);
|
|
Packit Service |
3880ab |
} else
|
|
Packit Service |
3880ab |
usage();
|
|
Packit Service |
3880ab |
argc--; argv++;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (nsid >= 0)
|
|
Packit Service |
3880ab |
return get_netnsid_from_netnsid(nsid);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (rtnl_nsiddump_req_filter_fn(&rth, AF_UNSPEC,
|
|
Packit Service |
3880ab |
netns_filter_req) < 0) {
|
|
Packit Service |
3880ab |
perror("Cannot send dump request");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
new_json_obj(json);
|
|
Packit Service |
3880ab |
if (rtnl_dump_filter(&rth, print_nsid, stdout) < 0) {
|
|
Packit Service |
3880ab |
delete_json_obj();
|
|
Packit Service |
3880ab |
fprintf(stderr, "Dump terminated\n");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
delete_json_obj();
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_list(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
int id;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
dir = opendir(NETNS_RUN_DIR);
|
|
Packit Service |
3880ab |
if (!dir)
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
new_json_obj(json);
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir)) != NULL) {
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, ".") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, "..") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
open_json_object(NULL);
|
|
Packit Service |
3880ab |
print_string(PRINT_ANY, "name",
|
|
Packit Service |
3880ab |
"%s", entry->d_name);
|
|
Packit Service |
3880ab |
if (ipnetns_have_nsid()) {
|
|
Packit Service |
3880ab |
id = get_netnsid_from_name(entry->d_name);
|
|
Packit Service |
3880ab |
if (id >= 0)
|
|
Packit Service |
3880ab |
print_int(PRINT_ANY, "id", " (id: %d)", id);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
print_string(PRINT_FP, NULL, "\n", NULL);
|
|
Packit Service |
3880ab |
close_json_object();
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
delete_json_obj();
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int do_switch(void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char *netns = arg;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* we just changed namespaces. clear any vrf association
|
|
Packit Service |
3880ab |
* with prior namespace before exec'ing command
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
vrf_reset();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return netns_switch(netns);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int on_netns_exec(char *nsname, void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char **argv = arg;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
printf("\nnetns: %s\n", nsname);
|
|
Packit Service |
3880ab |
cmd_exec(argv[0], argv, true, do_switch, nsname);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_exec(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
/* Setup the proper environment for apps that are not netns
|
|
Packit Service |
3880ab |
* aware, and execute a program in that environment.
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
if (argc < 1 && !do_all) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No netns name specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if ((argc < 2 && !do_all) || (argc < 1 && do_all)) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No command specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (do_all)
|
|
Packit Service |
3880ab |
return netns_foreach(on_netns_exec, argv);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* ip must return the status of the child,
|
|
Packit Service |
3880ab |
* but do_cmd() will add a minus to this,
|
|
Packit Service |
3880ab |
* so let's add another one here to cancel it.
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
return -cmd_exec(argv[1], argv + 1, !!batch_mode, do_switch, argv[0]);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int is_pid(const char *str)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
int ch;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
for (; (ch = *str); str++) {
|
|
Packit Service |
3880ab |
if (!isdigit(ch))
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
return 1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_pids(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
const char *name;
|
|
Packit Service |
3880ab |
char net_path[PATH_MAX];
|
|
Packit Service |
3880ab |
int netns;
|
|
Packit Service |
3880ab |
struct stat netst;
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (argc < 1) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No netns name specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (argc > 1) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "extra arguments specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
name = argv[0];
|
|
Packit Service |
3880ab |
snprintf(net_path, sizeof(net_path), "%s/%s", NETNS_RUN_DIR, name);
|
|
Packit Service |
3880ab |
netns = open(net_path, O_RDONLY);
|
|
Packit Service |
3880ab |
if (netns < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot open network namespace: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (fstat(netns, &netst) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Stat of netns failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
dir = opendir("/proc/");
|
|
Packit Service |
3880ab |
if (!dir) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Open of /proc failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir))) {
|
|
Packit Service |
3880ab |
char pid_net_path[PATH_MAX];
|
|
Packit Service |
3880ab |
struct stat st;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (!is_pid(entry->d_name))
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
snprintf(pid_net_path, sizeof(pid_net_path), "/proc/%s/ns/net",
|
|
Packit Service |
3880ab |
entry->d_name);
|
|
Packit Service |
3880ab |
if (stat(pid_net_path, &st) != 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if ((st.st_dev == netst.st_dev) &&
|
|
Packit Service |
3880ab |
(st.st_ino == netst.st_ino)) {
|
|
Packit Service |
3880ab |
printf("%s\n", entry->d_name);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int netns_identify_pid(const char *pidstr, char *name, int len)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char net_path[PATH_MAX];
|
|
Packit Service |
3880ab |
int netns;
|
|
Packit Service |
3880ab |
struct stat netst;
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
name[0] = '\0';
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(net_path, sizeof(net_path), "/proc/%s/ns/net", pidstr);
|
|
Packit Service |
3880ab |
netns = open(net_path, O_RDONLY);
|
|
Packit Service |
3880ab |
if (netns < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot open network namespace: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (fstat(netns, &netst) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Stat of netns failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
dir = opendir(NETNS_RUN_DIR);
|
|
Packit Service |
3880ab |
if (!dir) {
|
|
Packit Service |
3880ab |
/* Succeed treat a missing directory as an empty directory */
|
|
Packit Service |
3880ab |
if (errno == ENOENT)
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fprintf(stderr, "Failed to open directory %s:%s\n",
|
|
Packit Service |
3880ab |
NETNS_RUN_DIR, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir))) {
|
|
Packit Service |
3880ab |
char name_path[PATH_MAX];
|
|
Packit Service |
3880ab |
struct stat st;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, ".") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, "..") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(name_path, sizeof(name_path), "%s/%s", NETNS_RUN_DIR,
|
|
Packit Service |
3880ab |
entry->d_name);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (stat(name_path, &st) != 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if ((st.st_dev == netst.st_dev) &&
|
|
Packit Service |
3880ab |
(st.st_ino == netst.st_ino)) {
|
|
Packit Service |
3880ab |
strlcpy(name, entry->d_name, len);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_identify(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
const char *pidstr;
|
|
Packit Service |
3880ab |
char name[256];
|
|
Packit Service |
3880ab |
int rc;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (argc < 1) {
|
|
Packit Service |
3880ab |
pidstr = "self";
|
|
Packit Service |
3880ab |
} else if (argc > 1) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "extra arguments specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
pidstr = argv[0];
|
|
Packit Service |
3880ab |
if (!is_pid(pidstr)) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Specified string '%s' is not a pid\n",
|
|
Packit Service |
3880ab |
pidstr);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
rc = netns_identify_pid(pidstr, name, sizeof(name));
|
|
Packit Service |
3880ab |
if (!rc)
|
|
Packit Service |
3880ab |
printf("%s\n", name);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return rc;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int on_netns_del(char *nsname, void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char netns_path[PATH_MAX];
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(netns_path, sizeof(netns_path), "%s/%s", NETNS_RUN_DIR, nsname);
|
|
Packit Service |
3880ab |
umount2(netns_path, MNT_DETACH);
|
|
Packit Service |
3880ab |
if (unlink(netns_path) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot remove namespace file \"%s\": %s\n",
|
|
Packit Service |
3880ab |
netns_path, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_delete(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
if (argc < 1 && !do_all) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No netns name specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (do_all)
|
|
Packit Service |
3880ab |
return netns_foreach(on_netns_del, NULL);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return on_netns_del(argv[0], NULL);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int create_netns_dir(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
/* Create the base netns directory if it doesn't exist */
|
|
Packit Service |
3880ab |
if (mkdir(NETNS_RUN_DIR, S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH)) {
|
|
Packit Service |
3880ab |
if (errno != EEXIST) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "mkdir %s failed: %s\n",
|
|
Packit Service |
3880ab |
NETNS_RUN_DIR, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Obtain a FD for the current namespace, so we can reenter it later */
|
|
Packit Service |
3880ab |
static void netns_save(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
if (saved_netns != -1)
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
saved_netns = open("/proc/self/ns/net", O_RDONLY | O_CLOEXEC);
|
|
Packit Service |
3880ab |
if (saved_netns == -1) {
|
|
Packit Service |
3880ab |
perror("Cannot open init namespace");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void netns_restore(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
if (saved_netns == -1)
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (setns(saved_netns, CLONE_NEWNET)) {
|
|
Packit Service |
3880ab |
perror("setns");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
close(saved_netns);
|
|
Packit Service |
3880ab |
saved_netns = -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_add(int argc, char **argv, bool create)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
/* This function creates a new network namespace and
|
|
Packit Service |
3880ab |
* a new mount namespace and bind them into a well known
|
|
Packit Service |
3880ab |
* location in the filesystem based on the name provided.
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* If create is true, a new namespace will be created,
|
|
Packit Service |
3880ab |
* otherwise an existing one will be attached to the file.
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* The mount namespace is created so that any necessary
|
|
Packit Service |
3880ab |
* userspace tweaks like remounting /sys, or bind mounting
|
|
Packit Service |
3880ab |
* a new /etc/resolv.conf can be shared between users.
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
char netns_path[PATH_MAX], proc_path[PATH_MAX];
|
|
Packit Service |
3880ab |
const char *name;
|
|
Packit Service |
3880ab |
pid_t pid;
|
|
Packit Service |
3880ab |
int fd;
|
|
Packit Service |
3880ab |
int made_netns_run_dir_mount = 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (create) {
|
|
Packit Service |
3880ab |
if (argc < 1) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No netns name specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
if (argc < 2) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No netns name and PID specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (get_s32(&pid, argv[1], 0) || !pid) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Invalid PID: %s\n", argv[1]);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
name = argv[0];
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(netns_path, sizeof(netns_path), "%s/%s", NETNS_RUN_DIR, name);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (create_netns_dir())
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Make it possible for network namespace mounts to propagate between
|
|
Packit Service |
3880ab |
* mount namespaces. This makes it likely that a unmounting a network
|
|
Packit Service |
3880ab |
* namespace file in one namespace will unmount the network namespace
|
|
Packit Service |
3880ab |
* file in all namespaces allowing the network namespace to be freed
|
|
Packit Service |
3880ab |
* sooner.
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
while (mount("", NETNS_RUN_DIR, "none", MS_SHARED | MS_REC, NULL)) {
|
|
Packit Service |
3880ab |
/* Fail unless we need to make the mount point */
|
|
Packit Service |
3880ab |
if (errno != EINVAL || made_netns_run_dir_mount) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "mount --make-shared %s failed: %s\n",
|
|
Packit Service |
3880ab |
NETNS_RUN_DIR, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Upgrade NETNS_RUN_DIR to a mount point */
|
|
Packit Service |
3880ab |
if (mount(NETNS_RUN_DIR, NETNS_RUN_DIR, "none", MS_BIND | MS_REC, NULL)) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "mount --bind %s %s failed: %s\n",
|
|
Packit Service |
3880ab |
NETNS_RUN_DIR, NETNS_RUN_DIR, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
made_netns_run_dir_mount = 1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Create the filesystem state */
|
|
Packit Service |
3880ab |
fd = open(netns_path, O_RDONLY|O_CREAT|O_EXCL, 0);
|
|
Packit Service |
3880ab |
if (fd < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot create namespace file \"%s\": %s\n",
|
|
Packit Service |
3880ab |
netns_path, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
close(fd);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (create) {
|
|
Packit Service |
3880ab |
netns_save();
|
|
Packit Service |
3880ab |
if (unshare(CLONE_NEWNET) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Failed to create a new network namespace \"%s\": %s\n",
|
|
Packit Service |
3880ab |
name, strerror(errno));
|
|
Packit Service |
3880ab |
goto out_delete;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
strcpy(proc_path, "/proc/self/ns/net");
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
snprintf(proc_path, sizeof(proc_path), "/proc/%d/ns/net", pid);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Bind the netns last so I can watch for it */
|
|
Packit Service |
3880ab |
if (mount(proc_path, netns_path, "none", MS_BIND, NULL) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Bind %s -> %s failed: %s\n",
|
|
Packit Service |
3880ab |
proc_path, netns_path, strerror(errno));
|
|
Packit Service |
3880ab |
goto out_delete;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
netns_restore();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
out_delete:
|
|
Packit Service |
3880ab |
if (create) {
|
|
Packit Service |
3880ab |
netns_restore();
|
|
Packit Service |
3880ab |
netns_delete(argc, argv);
|
|
Packit Service |
3880ab |
} else if (unlink(netns_path) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot remove namespace file \"%s\": %s\n",
|
|
Packit Service |
3880ab |
netns_path, strerror(errno));
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int set_netnsid_from_name(const char *name, int nsid)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct {
|
|
Packit Service |
3880ab |
struct nlmsghdr n;
|
|
Packit Service |
3880ab |
struct rtgenmsg g;
|
|
Packit Service |
3880ab |
char buf[1024];
|
|
Packit Service |
3880ab |
} req = {
|
|
Packit Service |
3880ab |
.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtgenmsg)),
|
|
Packit Service |
3880ab |
.n.nlmsg_flags = NLM_F_REQUEST,
|
|
Packit Service |
3880ab |
.n.nlmsg_type = RTM_NEWNSID,
|
|
Packit Service |
3880ab |
.g.rtgen_family = AF_UNSPEC,
|
|
Packit Service |
3880ab |
};
|
|
Packit Service |
3880ab |
int fd, err = 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
netns_nsid_socket_init();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fd = netns_get_fd(name);
|
|
Packit Service |
3880ab |
if (fd < 0)
|
|
Packit Service |
3880ab |
return fd;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
addattr32(&req.n, 1024, NETNSA_FD, fd);
|
|
Packit Service |
3880ab |
addattr32(&req.n, 1024, NETNSA_NSID, nsid);
|
|
Packit Service |
3880ab |
if (rtnl_talk(&rth, &req.n, NULL) < 0)
|
|
Packit Service |
3880ab |
err = -2;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
close(fd);
|
|
Packit Service |
3880ab |
return err;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_set(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char netns_path[PATH_MAX];
|
|
Packit Service |
3880ab |
const char *name;
|
|
Packit Service |
3880ab |
int netns, nsid;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (argc < 1) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No netns name specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (argc < 2) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "No nsid specified\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
name = argv[0];
|
|
Packit Service |
3880ab |
/* If a negative nsid is specified the kernel will select the nsid. */
|
|
Packit Service |
3880ab |
if (strcmp(argv[1], "auto") == 0)
|
|
Packit Service |
3880ab |
nsid = -1;
|
|
Packit Service |
3880ab |
else if (get_integer(&nsid, argv[1], 0))
|
|
Packit Service |
3880ab |
invarg("Invalid \"netnsid\" value", argv[1]);
|
|
Packit Service |
3880ab |
else if (nsid < 0)
|
|
Packit Service |
3880ab |
invarg("\"netnsid\" value should be >= 0", argv[1]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(netns_path, sizeof(netns_path), "%s/%s", NETNS_RUN_DIR, name);
|
|
Packit Service |
3880ab |
netns = open(netns_path, O_RDONLY | O_CLOEXEC);
|
|
Packit Service |
3880ab |
if (netns < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot open network namespace \"%s\": %s\n",
|
|
Packit Service |
3880ab |
name, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return set_netnsid_from_name(name, nsid);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int netns_monitor(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char buf[4096];
|
|
Packit Service |
3880ab |
struct inotify_event *event;
|
|
Packit Service |
3880ab |
int fd;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fd = inotify_init();
|
|
Packit Service |
3880ab |
if (fd < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "inotify_init failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (create_netns_dir())
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (inotify_add_watch(fd, NETNS_RUN_DIR, IN_CREATE | IN_DELETE) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "inotify_add_watch failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
for (;;) {
|
|
Packit Service |
3880ab |
ssize_t len = read(fd, buf, sizeof(buf));
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (len < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "read failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
for (event = (struct inotify_event *)buf;
|
|
Packit Service |
3880ab |
(char *)event < &buf[len];
|
|
Packit Service |
3880ab |
event = (struct inotify_event *)((char *)event + sizeof(*event) + event->len)) {
|
|
Packit Service |
3880ab |
if (event->mask & IN_CREATE)
|
|
Packit Service |
3880ab |
printf("add %s\n", event->name);
|
|
Packit Service |
3880ab |
if (event->mask & IN_DELETE)
|
|
Packit Service |
3880ab |
printf("delete %s\n", event->name);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int invalid_name(const char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
return !*name || strlen(name) > NAME_MAX ||
|
|
Packit Service |
3880ab |
strchr(name, '/') || !strcmp(name, ".") || !strcmp(name, "..");
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int do_netns(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
netns_nsid_socket_init();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (argc < 1) {
|
|
Packit Service |
3880ab |
netns_map_init();
|
|
Packit Service |
3880ab |
return netns_list(0, NULL);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (!do_all && argc > 1 && invalid_name(argv[1])) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Invalid netns name \"%s\"\n", argv[1]);
|
|
Packit Service |
3880ab |
exit(-1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if ((matches(*argv, "list") == 0) || (matches(*argv, "show") == 0) ||
|
|
Packit Service |
3880ab |
(matches(*argv, "lst") == 0)) {
|
|
Packit Service |
3880ab |
netns_map_init();
|
|
Packit Service |
3880ab |
return netns_list(argc-1, argv+1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if ((matches(*argv, "list-id") == 0)) {
|
|
Packit Service |
3880ab |
netns_map_init();
|
|
Packit Service |
3880ab |
return netns_list_id(argc-1, argv+1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "help") == 0)
|
|
Packit Service |
3880ab |
return usage();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "add") == 0)
|
|
Packit Service |
3880ab |
return netns_add(argc-1, argv+1, true);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "set") == 0)
|
|
Packit Service |
3880ab |
return netns_set(argc-1, argv+1);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "delete") == 0)
|
|
Packit Service |
3880ab |
return netns_delete(argc-1, argv+1);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "identify") == 0)
|
|
Packit Service |
3880ab |
return netns_identify(argc-1, argv+1);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "pids") == 0)
|
|
Packit Service |
3880ab |
return netns_pids(argc-1, argv+1);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "exec") == 0)
|
|
Packit Service |
3880ab |
return netns_exec(argc-1, argv+1);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "monitor") == 0)
|
|
Packit Service |
3880ab |
return netns_monitor(argc-1, argv+1);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "attach") == 0)
|
|
Packit Service |
3880ab |
return netns_add(argc-1, argv+1, false);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fprintf(stderr, "Command \"%s\" is unknown, try \"ip netns help\".\n", *argv);
|
|
Packit Service |
3880ab |
exit(-1);
|
|
Packit Service |
3880ab |
}
|