|
Packit Service |
3880ab |
/*
|
|
Packit Service |
3880ab |
* namespace.c
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* This program is free software; you can redistribute it and/or
|
|
Packit Service |
3880ab |
* modify it under the terms of the GNU General Public License
|
|
Packit Service |
3880ab |
* as published by the Free Software Foundation; either version
|
|
Packit Service |
3880ab |
* 2 of the License, or (at your option) any later version.
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include <sys/statvfs.h>
|
|
Packit Service |
3880ab |
#include <fcntl.h>
|
|
Packit Service |
3880ab |
#include <dirent.h>
|
|
Packit Service |
3880ab |
#include <limits.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include "utils.h"
|
|
Packit Service |
3880ab |
#include "namespace.h"
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void bind_etc(const char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char etc_netns_path[sizeof(NETNS_ETC_DIR) + NAME_MAX];
|
|
Packit Service |
3880ab |
char netns_name[PATH_MAX];
|
|
Packit Service |
3880ab |
char etc_name[PATH_MAX];
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (strlen(name) >= NAME_MAX)
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(etc_netns_path, sizeof(etc_netns_path), "%s/%s", NETNS_ETC_DIR, name);
|
|
Packit Service |
3880ab |
dir = opendir(etc_netns_path);
|
|
Packit Service |
3880ab |
if (!dir)
|
|
Packit Service |
3880ab |
return;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir)) != NULL) {
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, ".") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, "..") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
snprintf(netns_name, sizeof(netns_name), "%s/%s", etc_netns_path, entry->d_name);
|
|
Packit Service |
3880ab |
snprintf(etc_name, sizeof(etc_name), "/etc/%s", entry->d_name);
|
|
Packit Service |
3880ab |
if (mount(netns_name, etc_name, "none", MS_BIND, NULL) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Bind %s -> %s failed: %s\n",
|
|
Packit Service |
3880ab |
netns_name, etc_name, strerror(errno));
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int netns_switch(char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char net_path[PATH_MAX];
|
|
Packit Service |
3880ab |
int netns;
|
|
Packit Service |
3880ab |
unsigned long mountflags = 0;
|
|
Packit Service |
3880ab |
struct statvfs fsstat;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
snprintf(net_path, sizeof(net_path), "%s/%s", NETNS_RUN_DIR, name);
|
|
Packit Service |
3880ab |
netns = open(net_path, O_RDONLY | O_CLOEXEC);
|
|
Packit Service |
3880ab |
if (netns < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot open network namespace \"%s\": %s\n",
|
|
Packit Service |
3880ab |
name, strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (setns(netns, CLONE_NEWNET) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "setting the network namespace \"%s\" failed: %s\n",
|
|
Packit Service |
3880ab |
name, strerror(errno));
|
|
Packit Service |
3880ab |
close(netns);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
close(netns);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (unshare(CLONE_NEWNS) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "unshare failed: %s\n", strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
/* Don't let any mounts propagate back to the parent */
|
|
Packit Service |
3880ab |
if (mount("", "/", "none", MS_SLAVE | MS_REC, NULL)) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "\"mount --make-rslave /\" failed: %s\n",
|
|
Packit Service |
3880ab |
strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Mount a version of /sys that describes the network namespace */
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (umount2("/sys", MNT_DETACH) < 0) {
|
|
Packit Service |
3880ab |
/* If this fails, perhaps there wasn't a sysfs instance mounted. Good. */
|
|
Packit Service |
3880ab |
if (statvfs("/sys", &fsstat) == 0) {
|
|
Packit Service |
3880ab |
/* We couldn't umount the sysfs, we'll attempt to overlay it.
|
|
Packit Service |
3880ab |
* A read-only instance can't be shadowed with a read-write one. */
|
|
Packit Service |
3880ab |
if (fsstat.f_flag & ST_RDONLY)
|
|
Packit Service |
3880ab |
mountflags = MS_RDONLY;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (mount(name, "/sys", "sysfs", mountflags, NULL) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "mount of /sys failed: %s\n",strerror(errno));
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Setup bind mounts for config files in /etc */
|
|
Packit Service |
3880ab |
bind_etc(name);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int netns_get_fd(const char *name)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char pathbuf[PATH_MAX];
|
|
Packit Service |
3880ab |
const char *path, *ptr;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
path = name;
|
|
Packit Service |
3880ab |
ptr = strchr(name, '/');
|
|
Packit Service |
3880ab |
if (!ptr) {
|
|
Packit Service |
3880ab |
snprintf(pathbuf, sizeof(pathbuf), "%s/%s",
|
|
Packit Service |
3880ab |
NETNS_RUN_DIR, name );
|
|
Packit Service |
3880ab |
path = pathbuf;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
return open(path, O_RDONLY);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int netns_foreach(int (*func)(char *nsname, void *arg), void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
DIR *dir;
|
|
Packit Service |
3880ab |
struct dirent *entry;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
dir = opendir(NETNS_RUN_DIR);
|
|
Packit Service |
3880ab |
if (!dir)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while ((entry = readdir(dir)) != NULL) {
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, ".") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (strcmp(entry->d_name, "..") == 0)
|
|
Packit Service |
3880ab |
continue;
|
|
Packit Service |
3880ab |
if (func(entry->d_name, arg))
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
closedir(dir);
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|