/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
/***
This file is part of systemd.
Copyright 2014 Lennart Poettering
systemd is free software; you can redistribute it and/or modify it
under the terms of the GNU Lesser General Public License as published by
the Free Software Foundation; either version 2.1 of the License, or
(at your option) any later version.
systemd is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General Public License
along with systemd; If not, see .
***/
#include
#include
#include "hashmap.h"
#include "utf8.h"
#include "curl-util.h"
#include "import-gpt.h"
typedef struct GptImportFile GptImportFile;
struct GptImportFile {
GptImport *import;
char *url;
char *local;
CURL *curl;
struct curl_slist *request_header;
char *temp_path;
char *final_path;
char *etag;
char *old_etag;
uint64_t content_length;
uint64_t written;
time_t mtime;
bool force_local;
bool done;
int disk_fd;
};
struct GptImport {
sd_event *event;
CurlGlue *glue;
Hashmap *files;
gpt_import_on_finished on_finished;
void *userdata;
bool finished;
};
static GptImportFile *gpt_import_file_unref(GptImportFile *f) {
if (!f)
return NULL;
if (f->import)
curl_glue_remove_and_free(f->import->glue, f->curl);
curl_slist_free_all(f->request_header);
safe_close(f->disk_fd);
free(f->final_path);
if (f->temp_path) {
unlink(f->temp_path);
free(f->temp_path);
}
free(f->url);
free(f->local);
free(f->etag);
free(f->old_etag);
free(f);
return NULL;
}
DEFINE_TRIVIAL_CLEANUP_FUNC(GptImportFile*, gpt_import_file_unref);
static void gpt_import_finish(GptImport *import, int error) {
assert(import);
if (import->finished)
return;
import->finished = true;
if (import->on_finished)
import->on_finished(import, error, import->userdata);
else
sd_event_exit(import->event, error);
}
static void gpt_import_curl_on_finished(CurlGlue *g, CURL *curl, CURLcode result) {
GptImportFile *f = NULL;
struct stat st;
CURLcode code;
long status;
int r;
if (curl_easy_getinfo(curl, CURLINFO_PRIVATE, &f) != CURLE_OK)
return;
if (!f)
return;
f->done = true;
if (result != CURLE_OK) {
log_error("Transfer failed: %s", curl_easy_strerror(result));
r = -EIO;
goto fail;
}
code = curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &status);
if (code != CURLE_OK) {
log_error("Failed to retrieve response code: %s", curl_easy_strerror(code));
r = -EIO;
goto fail;
} else if (status == 304) {
log_info("File unmodified.");
r = 0;
goto fail;
} else if (status >= 300) {
log_error("HTTP request to %s failed with code %li.", f->url, status);
r = -EIO;
goto fail;
} else if (status < 200) {
log_error("HTTP request to %s finished with unexpected code %li.", f->url, status);
r = -EIO;
goto fail;
}
if (f->disk_fd < 0) {
log_error("No data received.");
r = -EIO;
goto fail;
}
if (f->content_length != (uint64_t) -1 &&
f->content_length != f->written) {
log_error("Download truncated.");
r = -EIO;
goto fail;
}
if (f->etag)
(void) fsetxattr(f->disk_fd, "user.etag", f->etag, strlen(f->etag), XATTR_CREATE);
if (f->mtime != 0) {
struct timespec ut[2];
timespec_store(&ut[0], (usec_t) f->mtime * USEC_PER_SEC);
ut[1] = ut[0];
(void) futimens(f->disk_fd, ut);
}
if (fstat(f->disk_fd, &st) < 0) {
r = log_error_errno(errno, "Failed to stat file: %m");
goto fail;
}
/* Mark read-only */
(void) fchmod(f->disk_fd, st.st_mode & 07444);
f->disk_fd = safe_close(f->disk_fd);
assert(f->temp_path);
assert(f->final_path);
r = rename(f->temp_path, f->final_path);
if (r < 0) {
r = log_error_errno(errno, "Failed to move GPT file into place: %m");
goto fail;
}
r = 0;
fail:
gpt_import_finish(f->import, r);
}
static int gpt_import_file_open_disk(GptImportFile *f) {
int r;
assert(f);
if (f->disk_fd >= 0)
return 0;
assert(f->final_path);
if (!f->temp_path) {
r = tempfn_random(f->final_path, &f->temp_path);
if (r < 0)
return log_oom();
}
f->disk_fd = open(f->temp_path, O_CREAT|O_EXCL|O_NOCTTY|O_CLOEXEC|O_WRONLY, 0644);
if (f->disk_fd < 0)
return log_error_errno(errno, "Failed to create %s: %m", f->temp_path);
return 0;
}
static size_t gpt_import_file_write_callback(void *contents, size_t size, size_t nmemb, void *userdata) {
GptImportFile *f = userdata;
size_t sz = size * nmemb;
ssize_t n;
int r;
assert(contents);
assert(f);
r = gpt_import_file_open_disk(f);
if (r < 0)
goto fail;
if (f->written + sz < f->written) {
log_error("File too large, overflow");
r = -EOVERFLOW;
goto fail;
}
if (f->content_length != (uint64_t) -1 &&
f->written + sz > f->content_length) {
log_error("Content length incorrect.");
r = -EFBIG;
goto fail;
}
n = write(f->disk_fd, contents, sz);
if (n < 0) {
log_error_errno(errno, "Failed to write file: %m");
goto fail;
}
if ((size_t) n < sz) {
log_error("Short write");
r = -EIO;
goto fail;
}
f->written += sz;
return sz;
fail:
gpt_import_finish(f->import, r);
return 0;
}
static size_t gpt_import_file_header_callback(void *contents, size_t size, size_t nmemb, void *userdata) {
GptImportFile *f = userdata;
size_t sz = size * nmemb;
_cleanup_free_ char *length = NULL, *last_modified = NULL;
char *etag;
int r;
assert(contents);
assert(f);
r = curl_header_strdup(contents, sz, "ETag:", &etag);
if (r < 0) {
log_oom();
goto fail;
}
if (r > 0) {
free(f->etag);
f->etag = etag;
if (streq_ptr(f->old_etag, f->etag)) {
log_info("Image already up to date. Finishing.");
gpt_import_finish(f->import, 0);
return sz;
}
return sz;
}
r = curl_header_strdup(contents, sz, "Content-Length:", &length);
if (r < 0) {
log_oom();
goto fail;
}
if (r > 0) {
(void) safe_atou64(length, &f->content_length);
return sz;
}
r = curl_header_strdup(contents, sz, "Last-Modified:", &last_modified);
if (r < 0) {
log_oom();
goto fail;
}
if (r > 0) {
(void) curl_parse_http_time(last_modified, &f->mtime);
return sz;
}
return sz;
fail:
gpt_import_finish(f->import, r);
return 0;
}
static int gpt_import_file_begin(GptImportFile *f) {
int r;
assert(f);
assert(!f->curl);
log_info("Getting %s.", f->url);
r = curl_glue_make(&f->curl, f->url, f);
if (r < 0)
return r;
if (f->old_etag) {
const char *hdr;
hdr = strappenda("If-None-Match: ", f->old_etag);
f->request_header = curl_slist_new(hdr, NULL);
if (!f->request_header)
return -ENOMEM;
if (curl_easy_setopt(f->curl, CURLOPT_HTTPHEADER, f->request_header) != CURLE_OK)
return -EIO;
}
if (curl_easy_setopt(f->curl, CURLOPT_WRITEFUNCTION, gpt_import_file_write_callback) != CURLE_OK)
return -EIO;
if (curl_easy_setopt(f->curl, CURLOPT_WRITEDATA, f) != CURLE_OK)
return -EIO;
if (curl_easy_setopt(f->curl, CURLOPT_HEADERFUNCTION, gpt_import_file_header_callback) != CURLE_OK)
return -EIO;
if (curl_easy_setopt(f->curl, CURLOPT_HEADERDATA, f) != CURLE_OK)
return -EIO;
r = curl_glue_add(f->import->glue, f->curl);
if (r < 0)
return r;
return 0;
}
int gpt_import_new(GptImport **import, sd_event *event, gpt_import_on_finished on_finished, void *userdata) {
_cleanup_(gpt_import_unrefp) GptImport *i = NULL;
int r;
assert(import);
i = new0(GptImport, 1);
if (!i)
return -ENOMEM;
i->on_finished = on_finished;
i->userdata = userdata;
if (event)
i->event = sd_event_ref(event);
else {
r = sd_event_default(&i->event);
if (r < 0)
return r;
}
r = curl_glue_new(&i->glue, i->event);
if (r < 0)
return r;
i->glue->on_finished = gpt_import_curl_on_finished;
i->glue->userdata = i;
*import = i;
i = NULL;
return 0;
}
GptImport* gpt_import_unref(GptImport *import) {
GptImportFile *f;
if (!import)
return NULL;
while ((f = hashmap_steal_first(import->files)))
gpt_import_file_unref(f);
hashmap_free(import->files);
curl_glue_unref(import->glue);
sd_event_unref(import->event);
free(import);
return NULL;
}
int gpt_import_cancel(GptImport *import, const char *url) {
GptImportFile *f;
assert(import);
assert(url);
f = hashmap_remove(import->files, url);
if (!f)
return 0;
gpt_import_file_unref(f);
return 1;
}
int gpt_import_pull(GptImport *import, const char *url, const char *local, bool force_local) {
_cleanup_(gpt_import_file_unrefp) GptImportFile *f = NULL;
char etag[LINE_MAX];
ssize_t n;
int r;
assert(import);
assert(gpt_url_is_valid(url));
assert(machine_name_is_valid(local));
if (hashmap_get(import->files, url))
return -EEXIST;
r = hashmap_ensure_allocated(&import->files, &string_hash_ops);
if (r < 0)
return r;
f = new0(GptImportFile, 1);
if (!f)
return -ENOMEM;
f->import = import;
f->disk_fd = -1;
f->content_length = (uint64_t) -1;
f->url = strdup(url);
if (!f->url)
return -ENOMEM;
f->local = strdup(local);
if (!f->local)
return -ENOMEM;
f->final_path = strjoin("/var/lib/container/", local, ".gpt", NULL);
if (!f->final_path)
return -ENOMEM;
n = getxattr(f->final_path, "user.etag", etag, sizeof(etag));
if (n > 0) {
f->old_etag = strndup(etag, n);
if (!f->old_etag)
return -ENOMEM;
}
r = hashmap_put(import->files, f->url, f);
if (r < 0)
return r;
r = gpt_import_file_begin(f);
if (r < 0) {
gpt_import_cancel(import, f->url);
f = NULL;
return r;
}
f = NULL;
return 0;
}
bool gpt_url_is_valid(const char *url) {
if (isempty(url))
return false;
if (!startswith(url, "http://") &&
!startswith(url, "https://"))
return false;
return ascii_is_valid(url);
}