Blame kpatch/kpatch

Packit Service ac8aad
#!/bin/bash
Packit Service ac8aad
#
Packit Service ac8aad
# kpatch hot patch module management script
Packit Service ac8aad
#
Packit Service ac8aad
# Copyright (C) 2014 Seth Jennings <sjenning@redhat.com>
Packit Service ac8aad
# Copyright (C) 2014 Josh Poimboeuf <jpoimboe@redhat.com>
Packit Service ac8aad
#
Packit Service ac8aad
# This program is free software; you can redistribute it and/or
Packit Service ac8aad
# modify it under the terms of the GNU General Public License
Packit Service ac8aad
# as published by the Free Software Foundation; either version 2
Packit Service ac8aad
# of the License, or (at your option) any later version.
Packit Service ac8aad
#
Packit Service ac8aad
# This program is distributed in the hope that it will be useful,
Packit Service ac8aad
# but WITHOUT ANY WARRANTY; without even the implied warranty of
Packit Service ac8aad
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
Packit Service ac8aad
# GNU General Public License for more details.
Packit Service ac8aad
#
Packit Service ac8aad
# You should have received a copy of the GNU General Public License
Packit Service ac8aad
# along with this program; if not, write to the Free Software
Packit Service ac8aad
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA,
Packit Service ac8aad
# 02110-1301, USA.
Packit Service ac8aad
Packit Service ac8aad
# This is the kpatch user script that manages installing, loading, and
Packit Service ac8aad
# displaying information about kernel patch modules installed on the system.
Packit Service ac8aad
Packit Service ac8aad
INSTALLDIR=/var/lib/kpatch
Packit Service ac8aad
SCRIPTDIR="$(readlink -f "$(dirname "$(type -p "$0")")")"
Packit Service da4517
VERSION="0.9.2"
Packit Service ac8aad
POST_ENABLE_WAIT=15	# seconds
Packit Service ac8aad
POST_SIGNAL_WAIT=60	# seconds
Packit Service ac8aad
Packit Service ac8aad
# How many times to try loading the patch if activeness safety check fails.
Packit Service ac8aad
MAX_LOAD_ATTEMPTS=5
Packit Service ac8aad
# How long to wait before retry, in seconds.
Packit Service ac8aad
RETRY_INTERVAL=2
Packit Service ac8aad
Packit Service ac8aad
usage_cmd() {
Packit Service ac8aad
	printf '   %-20s\n      %s\n' "$1" "$2" >&2
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
usage () {
Packit Service ac8aad
	# ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION ATTENTION
Packit Service ac8aad
	# When changing this, please also update the man page.  Thanks!
Packit Service ac8aad
	echo "usage: kpatch <command> [<args>]" >&2
Packit Service ac8aad
	echo >&2
Packit Service ac8aad
	echo "Valid commands:" >&2
Packit Service ac8aad
	usage_cmd "install [-k|--kernel-version=<kernel version>] <module>" "install patch module to be loaded at boot"
Packit Service ac8aad
	usage_cmd "uninstall [-k|--kernel-version=<kernel version>] <module>" "uninstall patch module"
Packit Service ac8aad
	echo >&2
Packit Service ac8aad
	usage_cmd "load --all" "load all installed patch modules into the running kernel"
Packit Service ac8aad
	usage_cmd "load <module>" "load patch module into the running kernel"
Packit Service ec35e6
	usage_cmd "unload --all (UNSUPPORTED)" "unload all patch modules from the running kernel"
Packit Service ec35e6
	usage_cmd "unload <module> (UNSUPPORTED)" "unload patch module from the running kernel"
Packit Service ac8aad
	echo >&2
Packit Service ac8aad
	usage_cmd "info <module>" "show information about a patch module"
Packit Service ac8aad
	echo >&2
Packit Service ac8aad
	usage_cmd "list" "list installed patch modules"
Packit Service ac8aad
	echo >&2
Packit Service ac8aad
	usage_cmd "signal" "signal/poke any process stalling the current patch transition"
Packit Service ac8aad
	echo >&2
Packit Service ac8aad
	usage_cmd "version" "display the kpatch version"
Packit Service ac8aad
	exit 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
warn() {
Packit Service ac8aad
	echo "kpatch: $*" >&2
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
die() {
Packit Service ac8aad
	warn "$@"
Packit Service ac8aad
	exit 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ec35e6
confirm_prompt() {
Packit Service ec35e6
	local prompt="$1"
Packit Service ec35e6
	local answer
Packit Service ec35e6
	while true; do
Packit Service ec35e6
		read -rp "$prompt [Y/N] " answer
Packit Service ec35e6
		[[ $answer == 'Y' || $answer == 'y' ]] && return 0
Packit Service ec35e6
		[[ $answer == 'N' || $answer == 'n' ]] && return 1
Packit Service ec35e6
	done
Packit Service ec35e6
}
Packit Service ec35e6
Packit Service ac8aad
__find_module () {
Packit Service ac8aad
	MODULE="$1"
Packit Service ac8aad
	[[ -f "$MODULE" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	MODULE="$INSTALLDIR/$(uname -r)/$1"
Packit Service ac8aad
	[[ -f "$MODULE" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	return 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
mod_name () {
Packit Service ac8aad
	MODNAME="$(basename "$1")"
Packit Service ac8aad
	MODNAME="${MODNAME%.ko}"
Packit Service ac8aad
	MODNAME="${MODNAME//-/_}"
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
find_module () {
Packit Service ac8aad
	arg="$1"
Packit Service ac8aad
	if [[ "$arg" =~ \.ko ]]; then
Packit Service ac8aad
		__find_module "$arg" || return 1
Packit Service ac8aad
		mod_name "$MODULE"
Packit Service ac8aad
		return
Packit Service ac8aad
	else
Packit Service ac8aad
		for i in "$INSTALLDIR/$(uname -r)"/*; do
Packit Service ac8aad
			mod_name "$i"
Packit Service ac8aad
			if [[ "$MODNAME" == "$arg" ]]; then
Packit Service ac8aad
				MODULE="$i"
Packit Service ac8aad
				return
Packit Service ac8aad
			fi
Packit Service ac8aad
		done
Packit Service ac8aad
	fi
Packit Service ac8aad
Packit Service ac8aad
	return 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
find_core_module() {
Packit Service ac8aad
	COREMOD="$SCRIPTDIR"/../kmod/core/kpatch.ko
Packit Service ac8aad
	[[ -f "$COREMOD" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	COREMOD="/usr/local/lib/kpatch/$(uname -r)/kpatch.ko"
Packit Service ac8aad
	[[ -f "$COREMOD" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	COREMOD="/usr/lib/kpatch/$(uname -r)/kpatch.ko"
Packit Service ac8aad
	[[ -f "$COREMOD" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	COREMOD="/usr/local/lib/modules/$(uname -r)/extra/kpatch/kpatch.ko"
Packit Service ac8aad
	[[ -f "$COREMOD" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	COREMOD="/usr/lib/modules/$(uname -r)/extra/kpatch/kpatch.ko"
Packit Service ac8aad
	[[ -f "$COREMOD" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	return 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
core_loaded () {
Packit Service da4517
	grep -q -e "T klp_enable_patch" -e "T kpatch_register" /proc/kallsyms
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
get_module_name () {
Packit Service ac8aad
	readelf -p .gnu.linkonce.this_module "$1" | grep '\[.*\]' | awk '{print $3}'
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
init_sysfs_var() {
Packit Service ac8aad
	# If the kernel is configured with CONFIG_LIVEPATCH, use that.
Packit Service ac8aad
	# Otherwise, use the kpatch core module (kpatch.ko).
Packit Service ac8aad
	if [[ -e /sys/kernel/livepatch ]] ; then
Packit Service ac8aad
		# livepatch ABI
Packit Service ac8aad
		SYSFS="/sys/kernel/livepatch"
Packit Service ac8aad
Packit Service ac8aad
	elif [[ -e /sys/kernel/kpatch/patches ]] ; then
Packit Service ac8aad
		# kpatch pre-0.4 ABI
Packit Service ac8aad
		SYSFS="/sys/kernel/kpatch/patches"
Packit Service ac8aad
Packit Service ac8aad
	else
Packit Service ac8aad
		# kpatch 0.4 ABI
Packit Service ac8aad
		SYSFS="/sys/kernel/kpatch"
Packit Service ac8aad
	fi
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
verify_module_checksum () {
Packit Service ac8aad
	modname="$(get_module_name "$1")"
Packit Service ac8aad
	[[ -z "$modname" ]] && return 1
Packit Service ac8aad
Packit Service ac8aad
	checksum="$(readelf -p .kpatch.checksum "$1" 2>&1 | grep '\[.*\]' | awk '{print $3}')"
Packit Service ac8aad
Packit Service ac8aad
	# Fail checksum match only if both exist and diverge
Packit Service da4517
	if [[ -n "$checksum" ]] && [[ -e "$SYSFS/${modname}/checksum" ]] ; then
Packit Service ac8aad
		sysfs_checksum="$(cat "$SYSFS/${modname}/checksum")"
Packit Service ac8aad
		[[ "$checksum" == "$sysfs_checksum" ]] || return 1
Packit Service ac8aad
	fi
Packit Service ac8aad
Packit Service ac8aad
	return 0
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
in_transition() {
Packit Service ac8aad
	local moddir="$SYSFS/$1"
Packit Service ac8aad
	[[ $(cat "$moddir/transition" 2>/dev/null) == "1" ]] && return 0
Packit Service ac8aad
	return 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
is_stalled() {
Packit Service ac8aad
	local module="$1"
Packit Service ac8aad
	local pid="$2"
Packit Service ac8aad
	local patch_enabled
Packit Service ac8aad
	local patch_state
Packit Service ac8aad
Packit Service ac8aad
	patch_enabled="$(cat "$SYSFS/$module/enabled" 2>/dev/null)"
Packit Service ac8aad
	patch_state="$(cat "/proc/$pid/patch_state" 2>/dev/null)"
Packit Service ac8aad
Packit Service ac8aad
	# No patch transition in progress
Packit Service ac8aad
	[[ "$patch_state" == "-1" ]] && return 1
Packit Service ac8aad
Packit Service ac8aad
	[[ -z "$patch_enabled" ]] || [[ -z "$patch_state" ]] && return 1
Packit Service ac8aad
Packit Service ac8aad
	# Stalls can be determined if the process state does not match
Packit Service ac8aad
	# the transition target (ie, "enabled" and "patched", "disabled"
Packit Service ac8aad
	# and "unpatched").  The state value enumerations match, so we
Packit Service ac8aad
	# can just compare them directly:
Packit Service ac8aad
	[[ "$patch_enabled" != "$patch_state" ]] && return 0
Packit Service ac8aad
	return 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
get_transition_patch() {
Packit Service ac8aad
	local module
Packit Service ac8aad
	local modname
Packit Service ac8aad
	for module in "$SYSFS"/*; do
Packit Service ac8aad
		modname=$(basename "$module")
Packit Service ac8aad
		if in_transition "$modname" ; then
Packit Service ac8aad
			echo "$modname"
Packit Service ac8aad
			return
Packit Service ac8aad
		fi
Packit Service ac8aad
	done
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
show_stalled_processes() {
Packit Service ac8aad
	local module
Packit Service ac8aad
	local proc_task
Packit Service ac8aad
	local tid
Packit Service ac8aad
Packit Service ac8aad
	module=$(get_transition_patch)
Packit Service ac8aad
	[[ -z "$module" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	echo ""
Packit Service ac8aad
	echo "Stalled processes:"
Packit Service ac8aad
	for proc_task in /proc/[0-9]*/task/[0-9]*; do
Packit Service ac8aad
		tid=${proc_task#*/task/}
Packit Service da4517
		is_stalled "$module" "$tid" && echo -e "$tid $(cat "$proc_task"/comm 2>/dev/null)\nstack:\n$(cat "$proc_task"/stack 2>/dev/null)"
Packit Service ac8aad
	done
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
signal_stalled_processes() {
Packit Service ac8aad
	local module
Packit Service ac8aad
	local proc_task
Packit Service ac8aad
	local tid
Packit Service ac8aad
Packit Service ac8aad
	module=$(get_transition_patch)
Packit Service ac8aad
	[[ -z "$module" ]] && return
Packit Service ac8aad
Packit Service ac8aad
	if [[ -e "/sys/kernel/livepatch/$module/signal" ]] ; then
Packit Service da4517
		echo "signaling stalled process(es):"
Packit Service ac8aad
		echo 1 > "/sys/kernel/livepatch/$module/signal"
Packit Service ac8aad
	fi
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
wait_for_patch_transition() {
Packit Service ac8aad
	local module="$1"
Packit Service ac8aad
	local i
Packit Service ac8aad
Packit Service ac8aad
	in_transition "$module" || return 0
Packit Service ac8aad
Packit Service ac8aad
	echo "waiting (up to $POST_ENABLE_WAIT seconds) for patch transition to complete..."
Packit Service ac8aad
	for (( i=0; i
Packit Service ac8aad
		if ! in_transition "$module" ; then
Packit Service ac8aad
			echo "transition complete ($i seconds)"
Packit Service ac8aad
			return 0
Packit Service ac8aad
		fi
Packit Service ac8aad
		sleep 1s
Packit Service ac8aad
	done
Packit Service ac8aad
Packit Service da4517
	echo "patch transition has stalled!"
Packit Service ac8aad
	signal_stalled_processes
Packit Service ac8aad
Packit Service ac8aad
	echo "waiting (up to $POST_SIGNAL_WAIT seconds) for patch transition to complete..."
Packit Service ac8aad
	for (( i=0; i
Packit Service ac8aad
		if ! in_transition "$module" ; then
Packit Service ac8aad
			echo "transition complete ($i seconds)"
Packit Service ac8aad
			return 0
Packit Service ac8aad
		fi
Packit Service ac8aad
		sleep 1s
Packit Service ac8aad
	done
Packit Service ac8aad
Packit Service ac8aad
	return 1
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
load_module () {
Packit Service ac8aad
	local module="$1"
Packit Service ac8aad
Packit Service ac8aad
	if ! core_loaded; then
Packit Service ac8aad
		if modprobe -q kpatch; then
Packit Service ac8aad
			echo "loaded core module"
Packit Service ac8aad
		else
Packit Service ac8aad
			find_core_module || die "can't find core module"
Packit Service ac8aad
			echo "loading core module: $COREMOD"
Packit Service ac8aad
			insmod "$COREMOD" || die "failed to load core module"
Packit Service ac8aad
		fi
Packit Service ac8aad
Packit Service ac8aad
		# Now that the core module has been loaded, set $SYSFS to the
Packit Service ac8aad
		# correct value based on the loaded core module's ABI.
Packit Service ac8aad
		init_sysfs_var
Packit Service ac8aad
	fi
Packit Service ac8aad
Packit Service ac8aad
	local modname
Packit Service ac8aad
	modname="$(get_module_name "$module")"
Packit Service ac8aad
	local moddir="$SYSFS/$modname"
Packit Service ac8aad
	if [[ -d "$moddir" ]] ; then
Packit Service ac8aad
		if [[ "$(cat "${moddir}/enabled")" -eq 0 ]]; then
Packit Service ac8aad
			if verify_module_checksum "$module"; then # same checksum
Packit Service ac8aad
				echo "module already loaded, re-enabling"
Packit Service ac8aad
				echo 1 > "${moddir}/enabled" || die "failed to re-enable module $modname"
Packit Service ac8aad
				if ! wait_for_patch_transition "$modname" ; then
Packit Service da4517
					show_stalled_processes
Packit Service ac8aad
					echo "module $modname did not complete its transition, disabling..."
Packit Service ac8aad
					echo 0 > "${moddir}/enabled" || die "failed to disable module $modname"
Packit Service ac8aad
					wait_for_patch_transition "$modname"
Packit Service ac8aad
					die "error: failed to re-enable module $modname (transition stalled), patch disabled"
Packit Service ac8aad
				fi
Packit Service ac8aad
				return
Packit Service ac8aad
			else
Packit Service ac8aad
				die "error: cannot re-enable patch module $modname, cannot verify checksum match"
Packit Service ac8aad
			fi
Packit Service ac8aad
		else
Packit Service da4517
			echo "module named $modname already loaded and enabled"
Packit Service ac8aad
		fi
Packit Service da4517
	else
Packit Service da4517
		echo "loading patch module: $module"
Packit Service da4517
		local i=0
Packit Service da4517
		while true; do
Packit Service da4517
			out="$(LC_ALL=C insmod "$module" 2>&1)"
Packit Service da4517
			[[ -z "$out" ]] && break
Packit Service da4517
			echo "$out" 1>&2
Packit Service da4517
			[[ ! "$out" =~ "Device or resource busy" ]] &&
Packit Service da4517
				die "failed to load module $module"
Packit Service ac8aad
Packit Service da4517
			# "Device or resource busy" means the activeness safety check
Packit Service da4517
			# failed.  Retry in a few seconds.
Packit Service da4517
			i=$((i+1))
Packit Service da4517
			if [[ $i -eq $MAX_LOAD_ATTEMPTS ]]; then
Packit Service da4517
				die "failed to load module $module"
Packit Service da4517
				break
Packit Service da4517
			else
Packit Service da4517
				warn "retrying..."
Packit Service da4517
				sleep $RETRY_INTERVAL
Packit Service da4517
			fi
Packit Service da4517
		done
Packit Service da4517
	fi
Packit Service 4c50fd
Packit Service ac8aad
	if ! wait_for_patch_transition "$modname" ; then
Packit Service da4517
		show_stalled_processes
Packit Service ac8aad
		echo "module $modname did not complete its transition, unloading..."
Packit Service ac8aad
		unload_module "$modname"
Packit Service ac8aad
		die "error: failed to load module $modname (transition stalled)"
Packit Service ac8aad
	fi
Packit Service ac8aad
Packit Service ac8aad
	return 0
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
disable_patch () {
Packit Service ac8aad
	local modname="$1"
Packit Service ac8aad
Packit Service ac8aad
	local enabled="$SYSFS/$modname/enabled"
Packit Service da4517
	if ! [[ -e "$enabled" ]]; then
Packit Service da4517
	    warn "patch module $modname is not loaded"
Packit Service da4517
	    return 1
Packit Service da4517
	fi
Packit Service ac8aad
Packit Service ac8aad
	if [[ "$(cat "$enabled")" -eq 1 ]]; then
Packit Service ac8aad
		echo "disabling patch module: $modname"
Packit Service ac8aad
		local i=0
Packit Service ac8aad
		while true; do
Packit Service ac8aad
			out="$(export LC_ALL=C; sh -c "echo 0 > $enabled" 2>&1)"
Packit Service ac8aad
			[[ -z "$out" ]] && break
Packit Service ac8aad
			echo "$out" 1>&2
Packit Service ac8aad
			if [[ ! "$out" =~ "Device or resource busy" ]]; then
Packit Service da4517
				return 1
Packit Service ac8aad
			fi
Packit Service ac8aad
Packit Service ac8aad
			# "Device or resource busy" means the activeness safety check
Packit Service ac8aad
			# failed.  Retry in a few seconds.
Packit Service ac8aad
			i=$((i+1))
Packit Service ac8aad
			if [[ $i -eq $MAX_LOAD_ATTEMPTS ]]; then
Packit Service da4517
				return 1
Packit Service ac8aad
			else
Packit Service ac8aad
				warn "retrying..."
Packit Service ac8aad
				sleep $RETRY_INTERVAL
Packit Service ac8aad
			fi
Packit Service ac8aad
		done
Packit Service ac8aad
	fi
Packit Service da4517
}
Packit Service da4517
Packit Service da4517
disable_patch_strict () {
Packit Service da4517
	local modname="$1"
Packit Service da4517
Packit Service da4517
	disable_patch "$modname" || die "failed to disable module $modname"
Packit Service ac8aad
Packit Service ac8aad
	if ! wait_for_patch_transition "$modname" ; then
Packit Service ac8aad
		die "transition stalled for $modname"
Packit Service ac8aad
	fi
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service da4517
remove_module () {
Packit Service da4517
	echo "unloading patch module: $1"
Packit Service da4517
	# ignore any error here because rmmod can fail if the module used
Packit Service da4517
	# KPATCH_FORCE_UNSAFE.
Packit Service da4517
	rmmod "$1" 2> /dev/null || return 0
Packit Service da4517
}
Packit Service da4517
Packit Service ac8aad
unload_module () {
Packit Service ac8aad
	PATCH="${1//-/_}"
Packit Service ac8aad
	PATCH="${PATCH%.ko}"
Packit Service da4517
	disable_patch_strict "$PATCH"
Packit Service da4517
	remove_module "$PATCH"
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
get_module_version() {
Packit Service ac8aad
	MODVER="$(modinfo -F vermagic "$1")" || return 1
Packit Service ac8aad
	MODVER="${MODVER/ */}"
Packit Service ac8aad
}
Packit Service ac8aad
Packit Service ac8aad
unset MODULE
Packit Service ac8aad
Packit Service ac8aad
# Initialize the $SYSFS var.  This only works if the core module has been
Packit Service ac8aad
# loaded.  Otherwise, the value of $SYSFS doesn't matter at this point anyway,
Packit Service ac8aad
# and we'll have to call this function again after loading it.
Packit Service ac8aad
init_sysfs_var
Packit Service ac8aad
Packit Service ac8aad
[[ "$#" -lt 1 ]] && usage
Packit Service ec35e6
Packit Service ec35e6
# RHEL-specific support options
Packit Service ec35e6
case "$1" in
Packit Service ec35e6
"force")
Packit Service ec35e6
	# For scripting purposes, support "kpatch force unload".
Packit Service ec35e6
	# Shift out the "force" to avoid the user-prompt check below.
Packit Service ec35e6
	shift
Packit Service ec35e6
	;;
Packit Service ec35e6
"unload")
Packit Service ec35e6
	confirm_prompt "WARNING: Red Hat doesn't support unloading of kpatches, continue anyway?" || exit 1
Packit Service ec35e6
	;;
Packit Service ec35e6
esac
Packit Service ec35e6
Packit Service ac8aad
case "$1" in
Packit Service ac8aad
"load")
Packit Service ac8aad
	[[ "$#" -ne 2 ]] && usage
Packit Service ac8aad
	case "$2" in
Packit Service ac8aad
	"--all")
Packit Service ac8aad
		for i in "$INSTALLDIR/$(uname -r)"/*.ko; do
Packit Service ac8aad
			[[ -e "$i" ]] || continue
Packit Service ac8aad
			load_module "$i" || die "failed to load module $i"
Packit Service ac8aad
		done
Packit Service ac8aad
		;;
Packit Service ac8aad
	*)
Packit Service ac8aad
		PATCH="$2"
Packit Service ac8aad
		find_module "$PATCH" || die "can't find $PATCH"
Packit Service ac8aad
		load_module "$MODULE" || die "failed to load module $PATCH"
Packit Service ac8aad
		;;
Packit Service ac8aad
	esac
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"unload")
Packit Service ac8aad
	[[ "$#" -ne 2 ]] && usage
Packit Service ac8aad
	case "$2" in
Packit Service ac8aad
	"--all")
Packit Service da4517
		# Versions of linux < 5.1 livepatching require patches to be
Packit Service da4517
		# disabled in the inverse order in which they were enabled.
Packit Service da4517
		while true; do
Packit Service da4517
			nr_disabled=0
Packit Service da4517
			for module in "$SYSFS"/*; do
Packit Service da4517
				modname="$(basename "$module")"
Packit Service da4517
Packit Service da4517
				[[ -e "$module" ]] || continue
Packit Service da4517
				disable_patch "$modname" || continue
Packit Service da4517
				if ! wait_for_patch_transition "$modname" ; then
Packit Service da4517
				    warn "transition stalled for $modname"
Packit Service da4517
				    continue
Packit Service da4517
				fi
Packit Service da4517
				remove_module "$modname"
Packit Service da4517
				nr_disabled=$((nr_disabled + 1))
Packit Service da4517
			done
Packit Service da4517
			if [ $nr_disabled -eq 0 ]; then
Packit Service da4517
				break
Packit Service da4517
			fi
Packit Service da4517
		done
Packit Service da4517
Packit Service da4517
		nr_remaining=0
Packit Service ac8aad
		for module in "$SYSFS"/*; do
Packit Service da4517
			modname="$(basename "$module")"
Packit Service da4517
Packit Service ac8aad
			[[ -e "$module" ]] || continue
Packit Service da4517
			nr_remaining=$((nr_remaining + 1))
Packit Service da4517
			warn "failed to unload module $modname"
Packit Service ac8aad
		done
Packit Service da4517
Packit Service da4517
		if [ $nr_remaining -gt 0 ]; then
Packit Service da4517
			exit 1
Packit Service da4517
		fi
Packit Service ac8aad
		;;
Packit Service ac8aad
	*)
Packit Service ac8aad
		unload_module "$(basename "$2")" || die "failed to unload module $2"
Packit Service ac8aad
		;;
Packit Service ac8aad
	esac
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"install")
Packit Service ac8aad
	KVER="$(uname -r)"
Packit Service ac8aad
	shift
Packit Service ac8aad
	options="$(getopt -o k: -l "kernel-version:" -- "$@")" || die "getopt failed"
Packit Service ac8aad
	eval set -- "$options"
Packit Service ac8aad
	while [[ $# -gt 0 ]]; do
Packit Service ac8aad
		case "$1" in
Packit Service ac8aad
		-k|--kernel-version)
Packit Service ac8aad
			KVER="$2"
Packit Service ac8aad
			shift
Packit Service ac8aad
			;;
Packit Service ac8aad
		--)
Packit Service ac8aad
			[[ -z "$2" ]] && die "no module file specified"
Packit Service ac8aad
			PATCH="$2"
Packit Service ac8aad
			;;
Packit Service ac8aad
		esac
Packit Service ac8aad
		shift
Packit Service ac8aad
	done
Packit Service ac8aad
Packit Service ac8aad
	[[ ! -e "$PATCH" ]] && die "$PATCH doesn't exist"
Packit Service ac8aad
	[[ "${PATCH: -3}" == ".ko" ]] || die "$PATCH isn't a .ko file"
Packit Service ac8aad
Packit Service ac8aad
	get_module_version "$PATCH" || die "modinfo failed"
Packit Service ac8aad
	[[ "$KVER" != "$MODVER" ]] && die "invalid module version $MODVER for kernel $KVER"
Packit Service ac8aad
Packit Service ac8aad
	[[ -e "$INSTALLDIR/$KVER/$(basename "$PATCH")" ]] && die "$PATCH is already installed"
Packit Service ac8aad
Packit Service ac8aad
	echo "installing $PATCH ($KVER)"
Packit Service ac8aad
	mkdir -p "$INSTALLDIR/$KVER" || die "failed to create install directory"
Packit Service ac8aad
	cp -f "$PATCH" "$INSTALLDIR/$KVER" || die "failed to install module $PATCH"
Packit Service da4517
	command -v systemctl > /dev/null 2>&1 && systemctl enable kpatch.service
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"uninstall")
Packit Service ac8aad
	KVER="$(uname -r)"
Packit Service ac8aad
	shift
Packit Service ac8aad
	options="$(getopt -o k: -l "kernel-version:" -- "$@")" || die "getopt failed"
Packit Service ac8aad
	eval set -- "$options"
Packit Service ac8aad
	while [[ $# -gt 0 ]]; do
Packit Service ac8aad
		case "$1" in
Packit Service ac8aad
		-k|--kernel-version)
Packit Service ac8aad
			KVER="$2"
Packit Service ac8aad
			shift
Packit Service ac8aad
			;;
Packit Service ac8aad
		--)
Packit Service ac8aad
			[[ -z "$2" ]] && die "no module file specified"
Packit Service ac8aad
			PATCH="$2"
Packit Service ac8aad
			[[ "$PATCH" != "$(basename "$PATCH")" ]] && die "please supply patch module name without path"
Packit Service ac8aad
			;;
Packit Service ac8aad
		esac
Packit Service ac8aad
		shift
Packit Service ac8aad
	done
Packit Service ac8aad
Packit Service ac8aad
	MODULE="$INSTALLDIR/$KVER/$PATCH"
Packit Service ac8aad
	if [[ ! -f "$MODULE" ]]; then
Packit Service ac8aad
		mod_name "$PATCH"
Packit Service ac8aad
		PATCHNAME="$MODNAME"
Packit Service ac8aad
		for i in "$INSTALLDIR/$KVER"/*; do
Packit Service ac8aad
			mod_name "$i"
Packit Service ac8aad
			if [[ "$MODNAME" == "$PATCHNAME" ]]; then
Packit Service ac8aad
				MODULE="$i"
Packit Service ac8aad
				break
Packit Service ac8aad
			fi
Packit Service ac8aad
		done
Packit Service ac8aad
	fi
Packit Service ac8aad
Packit Service ac8aad
	[[ ! -e "$MODULE" ]] && die "$PATCH is not installed for kernel $KVER"
Packit Service ac8aad
	
Packit Service ac8aad
Packit Service ac8aad
	echo "uninstalling $PATCH ($KVER)"
Packit Service ac8aad
	rm -f "$MODULE" || die "failed to uninstall module $PATCH"
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"list")
Packit Service ac8aad
	[[ "$#" -ne 1 ]] && usage
Packit Service ac8aad
	echo "Loaded patch modules:"
Packit Service ac8aad
	for module in "$SYSFS"/*; do
Packit Service ac8aad
		if [[ -e "$module" ]]; then
Packit Service ac8aad
			modname=$(basename "$module")
Packit Service ac8aad
			if [[ "$(cat "$module/enabled" 2>/dev/null)" -eq 1 ]]; then
Packit Service ac8aad
				in_transition "$modname" && state="enabling..." \
Packit Service ac8aad
							 || state="enabled"
Packit Service ac8aad
			else
Packit Service ac8aad
				in_transition "$modname" && state="disabling..." \
Packit Service ac8aad
							 || state="disabled"
Packit Service ac8aad
			fi
Packit Service ac8aad
			echo "$modname [$state]"
Packit Service ac8aad
		fi
Packit Service ac8aad
	done
Packit Service ac8aad
	show_stalled_processes
Packit Service ac8aad
	echo ""
Packit Service ac8aad
	echo "Installed patch modules:"
Packit Service ac8aad
	for kdir in "$INSTALLDIR"/*; do
Packit Service ac8aad
		[[ -e "$kdir" ]] || continue
Packit Service ac8aad
		for module in "$kdir"/*.ko; do
Packit Service ac8aad
			[[ -e "$module" ]] || continue
Packit Service ac8aad
			mod_name "$module"
Packit Service ac8aad
			echo "$MODNAME ($(basename "$kdir"))"
Packit Service ac8aad
		done
Packit Service ac8aad
	done
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"info")
Packit Service ac8aad
	[[ "$#" -ne 2 ]] && usage
Packit Service ac8aad
	PATCH="$2"
Packit Service ac8aad
	find_module "$PATCH" || die "can't find $PATCH"
Packit Service ac8aad
	echo "Patch information for $PATCH:"
Packit Service ac8aad
	modinfo "$MODULE" || die "failed to get info for module $PATCH"
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"signal")
Packit Service ac8aad
	[[ "$#" -ne 1 ]] && usage
Packit Service ac8aad
	signal_stalled_processes
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"help"|"-h"|"--help")
Packit Service ac8aad
	usage
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
"version"|"-v"|"--version")
Packit Service ac8aad
	echo "$VERSION"
Packit Service ac8aad
	;;
Packit Service ac8aad
Packit Service ac8aad
*)
Packit Service ac8aad
	echo "subcommand $1 not recognized"
Packit Service ac8aad
	usage
Packit Service ac8aad
	;;
Packit Service ac8aad
esac