aboutgitcodebugslistschat
path: root/pasta.c
diff options
context:
space:
mode:
authorDavid Gibson <david@gibson.dropbear.id.au>2022-09-12 22:24:05 +1000
committerStefano Brivio <sbrivio@redhat.com>2022-09-13 05:31:51 +0200
commitfc1be3d5ab4863c173796fe23f4ed00984d6ce8a (patch)
treebd404098878ebdf9c02f5f1d62fc382c087118db /pasta.c
parente8b19a4bd2eed33b1497482ffd693785c73ebaeb (diff)
downloadpasst-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.tar
passt-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.tar.gz
passt-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.tar.bz2
passt-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.tar.lz
passt-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.tar.xz
passt-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.tar.zst
passt-fc1be3d5ab4863c173796fe23f4ed00984d6ce8a.zip
Clean up and rename conf_ns_open()
conf_ns_open() opens file descriptors for the namespaces pasta needs, but it doesnt really have anything to do with configuration any more. For better clarity, move it to pasta.c and rename it pasta_open_ns(). This makes the symmetry between it and pasta_start_ns() more clear, since these represent the two basic ways that pasta can operate, either attaching to an existing namespace/process or spawning a new one. Since its no longer validating options, the errors it could return shouldn't cause a usage message. Just exit directly with an error instead. Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Diffstat (limited to 'pasta.c')
-rw-r--r--pasta.c66
1 files changed, 66 insertions, 0 deletions
diff --git a/pasta.c b/pasta.c
index 0bdb655..0fd45e4 100644
--- a/pasta.c
+++ b/pasta.c
@@ -20,6 +20,7 @@
#include <stdio.h>
#include <string.h>
#include <errno.h>
+#include <libgen.h>
#include <limits.h>
#include <stdlib.h>
#include <stdint.h>
@@ -102,6 +103,71 @@ netns:
}
/**
+ * ns_check() - Check if we can enter configured namespaces
+ * @arg: Execution context
+ *
+ * Return: 0
+ */
+static int ns_check(void *arg)
+{
+ struct ctx *c = (struct ctx *)arg;
+
+ if ((!c->netns_only && setns(c->pasta_userns_fd, CLONE_NEWUSER)) ||
+ setns(c->pasta_netns_fd, CLONE_NEWNET))
+ c->pasta_userns_fd = c->pasta_netns_fd = -1;
+
+ return 0;
+
+}
+
+/**
+ * pasta_open_ns() - Open network, user namespaces descriptors
+ * @c: Execution context
+ * @userns: --userns argument, can be an empty string
+ * @netns: network namespace path
+ *
+ * Return: 0 on success, negative error code otherwise
+ */
+void pasta_open_ns(struct ctx *c, const char *userns, const char *netns)
+{
+ int ufd = -1, nfd = -1;
+
+ nfd = open(netns, O_RDONLY | O_CLOEXEC);
+ if (nfd < 0) {
+ err("Couldn't open network namespace %s", netns);
+ exit(EXIT_FAILURE);
+ }
+
+ if (!c->netns_only && *userns) {
+ ufd = open(userns, O_RDONLY | O_CLOEXEC);
+ if (ufd < 0) {
+ close(nfd);
+ err("Couldn't open user namespace %s", userns);
+ exit(EXIT_FAILURE);
+ }
+ }
+
+ c->pasta_netns_fd = nfd;
+ c->pasta_userns_fd = ufd;
+
+ NS_CALL(ns_check, c);
+
+ if (c->pasta_netns_fd < 0) {
+ err("Couldn't switch to pasta namespaces");
+ exit(EXIT_FAILURE);
+ }
+
+ if (!c->no_netns_quit) {
+ char buf[PATH_MAX] = { 0 };
+
+ strncpy(buf, netns, PATH_MAX - 1);
+ strncpy(c->netns_base, basename(buf), PATH_MAX - 1);
+ strncpy(buf, netns, PATH_MAX - 1);
+ strncpy(c->netns_dir, dirname(buf), PATH_MAX - 1);
+ }
+}
+
+/**
* struct pasta_setup_ns_arg - Argument for pasta_setup_ns()
* @c: Execution context
* @euid: Effective UID of caller