]>
git.proxmox.com Git - mirror_lxc.git/blob - src/lxc/utils.h
2 * lxc: linux Container library
4 * (C) Copyright IBM Corp. 2007, 2008
7 * Daniel Lezcano <daniel.lezcano at free.fr>
9 * This library is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU Lesser General Public
11 * License as published by the Free Software Foundation; either
12 * version 2.1 of the License, or (at your option) any later version.
14 * This library is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * Lesser General Public License for more details.
19 * You should have received a copy of the GNU Lesser General Public
20 * License along with this library; if not, write to the Free Software
21 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
26 /* Properly support loop devices on 32bit systems. */
27 #define _FILE_OFFSET_BITS 64
30 #include <linux/loop.h>
31 #include <linux/types.h>
35 #include <sys/syscall.h>
36 #include <sys/types.h>
40 #include "file_utils.h"
41 #include "initutils.h"
43 #include "string_utils.h"
45 #ifdef HAVE_LINUX_MEMFD_H
46 #include <linux/memfd.h>
49 /* returns 1 on success, 0 if there were any failures */
50 extern int lxc_rmdir_onedev(const char *path
, const char *exclude
);
51 extern int get_u16(unsigned short *val
, const char *arg
, int base
);
52 extern int mkdir_p(const char *dir
, mode_t mode
);
53 extern char *get_rundir(void);
55 /* Define getline() if missing from the C library */
58 #include <../include/getline.h>
62 #if !defined(__NR_setns) && !defined(__NR_set_ns)
63 #if defined(__x86_64__)
64 #define __NR_setns 308
65 #elif defined(__i386__)
66 #define __NR_setns 346
67 #elif defined(__arm__)
68 #define __NR_setns 375
69 #elif defined(__aarch64__)
70 #define __NR_setns 375
71 #elif defined(__powerpc__)
72 #define __NR_setns 350
73 #elif defined(__s390__)
74 #define __NR_setns 339
78 /* Define setns() if missing from the C library */
80 static inline int setns(int fd
, int nstype
)
83 return syscall(__NR_setns
, fd
, nstype
);
84 #elif defined(__NR_set_ns)
85 return syscall(__NR_set_ns
, fd
, nstype
);
93 /* Define sethostname() if missing from the C library */
94 #ifndef HAVE_SETHOSTNAME
95 static inline int sethostname(const char *name
, size_t len
)
97 #ifdef __NR_sethostname
98 return syscall(__NR_sethostname
, name
, len
);
106 /* Define unshare() if missing from the C library */
108 static inline int unshare(int flags
)
111 return syscall(__NR_unshare
, flags
);
118 extern int unshare(int);
121 /* Define signalfd() if missing from the C library */
122 #ifdef HAVE_SYS_SIGNALFD_H
123 # include <sys/signalfd.h>
125 /* assume kernel headers are too old */
127 struct signalfd_siginfo
137 uint32_t ssi_overrun
;
148 # ifndef __NR_signalfd4
149 /* assume kernel headers are too old */
151 # define __NR_signalfd4 327
153 # define __NR_signalfd4 289
155 # define __NR_signalfd4 313
157 # define __NR_signalfd4 322
159 # define __NR_signalfd4 355
160 # elif __mips__ && _MIPS_SIM == _ABIO32
161 # define __NR_signalfd4 4324
162 # elif __mips__ && _MIPS_SIM == _ABI64
163 # define __NR_signalfd4 5283
164 # elif __mips__ && _MIPS_SIM == _ABIN32
165 # define __NR_signalfd4 6287
169 # ifndef __NR_signalfd
170 /* assume kernel headers are too old */
172 # define __NR_signalfd 321
174 # define __NR_signalfd 282
176 # define __NR_signalfd 305
178 # define __NR_signalfd 316
180 # define __NR_signalfd 349
181 # elif __mips__ && _MIPS_SIM == _ABIO32
182 # define __NR_signalfd 4317
183 # elif __mips__ && _MIPS_SIM == _ABI64
184 # define __NR_signalfd 5276
185 # elif __mips__ && _MIPS_SIM == _ABIN32
186 # define __NR_signalfd 6280
190 static inline int signalfd(int fd
, const sigset_t
*mask
, int flags
)
194 retval
= syscall (__NR_signalfd4
, fd
, mask
, _NSIG
/ 8, flags
);
195 if (errno
== ENOSYS
&& flags
== 0)
196 retval
= syscall (__NR_signalfd
, fd
, mask
, _NSIG
/ 8);
201 #ifndef HAVE_MEMFD_CREATE
202 static inline int memfd_create(const char *name
, unsigned int flags
) {
203 #ifndef __NR_memfd_create
205 #define __NR_memfd_create 356
206 #elif defined __x86_64__
207 #define __NR_memfd_create 319
208 #elif defined __arm__
209 #define __NR_memfd_create 385
210 #elif defined __aarch64__
211 #define __NR_memfd_create 279
212 #elif defined __s390__
213 #define __NR_memfd_create 350
214 #elif defined __powerpc__
215 #define __NR_memfd_create 360
216 #elif defined __sparc__
217 #define __NR_memfd_create 348
218 #elif defined __blackfin__
219 #define __NR_memfd_create 390
220 #elif defined __ia64__
221 #define __NR_memfd_create 1340
222 #elif defined _MIPS_SIM
223 #if _MIPS_SIM == _MIPS_SIM_ABI32
224 #define __NR_memfd_create 4354
226 #if _MIPS_SIM == _MIPS_SIM_NABI32
227 #define __NR_memfd_create 6318
229 #if _MIPS_SIM == _MIPS_SIM_ABI64
230 #define __NR_memfd_create 5314
234 #ifdef __NR_memfd_create
235 return syscall(__NR_memfd_create
, name
, flags
);
242 extern int memfd_create(const char *name
, unsigned int flags
);
245 static inline int lxc_set_cloexec(int fd
)
247 return fcntl(fd
, F_SETFD
, FD_CLOEXEC
);
250 /* Struct to carry child pid from lxc_popen() to lxc_pclose().
251 * Not an opaque struct to allow direct access to the underlying FILE *
252 * (i.e., struct lxc_popen_FILE *file; fgets(buf, sizeof(buf), file->f))
253 * without additional wrappers.
255 struct lxc_popen_FILE
{
261 /* popen(command, "re") replacement that restores default signal mask
262 * via sigprocmask(2) (unblocks all signals) after fork(2) but prior to calling exec(3).
263 * In short, popen(command, "re") does pipe() + fork() + exec()
264 * while lxc_popen(command) does pipe() + fork() + sigprocmask() + exec().
265 * Returns pointer to struct lxc_popen_FILE, that should be freed with lxc_pclose().
266 * On error returns NULL.
268 extern struct lxc_popen_FILE
*lxc_popen(const char *command
);
270 /* pclose() replacement to be used on struct lxc_popen_FILE *,
271 * returned by lxc_popen().
272 * Waits for associated process to terminate, returns its exit status and
273 * frees resources, pointed to by struct lxc_popen_FILE *.
275 extern int lxc_pclose(struct lxc_popen_FILE
*fp
);
278 * wait on a child we forked
280 extern int wait_for_pid(pid_t pid
);
281 extern int lxc_wait_for_pid_status(pid_t pid
);
284 #define SHA_DIGEST_LENGTH 20
285 extern int sha1sum_file(char *fnam
, unsigned char *md_value
);
288 /* initialize rand with urandom */
289 extern int randseed(bool);
291 /* are we unprivileged with respect to our namespaces */
292 inline static bool am_guest_unpriv(void) {
293 return geteuid() != 0;
296 /* are we unprivileged with respect to init_user_ns */
297 inline static bool am_host_unpriv(void)
300 uid_t user
, host
, count
;
306 /* Now: are we in a user namespace? Because then we're also
309 f
= fopen("/proc/self/uid_map", "r");
314 ret
= fscanf(f
, "%u %u %u", &user
, &host
, &count
);
320 if (user
!= 0 || host
!= 0 || count
!= UINT32_MAX
)
326 * parse /proc/self/uid_map to find what @orig maps to
328 extern uid_t
get_ns_uid(uid_t orig
);
330 * parse /proc/self/gid_map to find what @orig maps to
332 extern gid_t
get_ns_gid(gid_t orig
);
334 extern bool dir_exists(const char *path
);
336 #define FNV1A_64_INIT ((uint64_t)0xcbf29ce484222325ULL)
337 extern uint64_t fnv_64a_buf(void *buf
, size_t len
, uint64_t hval
);
339 extern bool is_shared_mountpoint(const char *path
);
340 extern int detect_shared_rootfs(void);
341 extern bool detect_ramfs_rootfs(void);
342 extern char *on_path(const char *cmd
, const char *rootfs
);
343 extern bool cgns_supported(void);
344 extern char *choose_init(const char *rootfs
);
345 extern bool switch_to_ns(pid_t pid
, const char *ns
);
346 extern char *get_template_path(const char *t
);
347 extern int safe_mount(const char *src
, const char *dest
, const char *fstype
,
348 unsigned long flags
, const void *data
,
350 extern int lxc_mount_proc_if_needed(const char *rootfs
);
351 extern int open_devnull(void);
352 extern int set_stdfds(int fd
);
353 extern int null_stdfds(void);
354 extern int lxc_preserve_ns(const int pid
, const char *ns
);
356 /* Check whether a signal is blocked by a process. */
357 extern bool task_blocks_signal(pid_t pid
, int signal
);
359 /* Switch to a new uid and gid.
360 * If LXC_INVALID_{G,U}ID is passed then the set{g,u}id() will not be called.
362 extern bool lxc_switch_uid_gid(uid_t uid
, gid_t gid
);
363 extern bool lxc_setgroups(int size
, gid_t list
[]);
365 /* Find an unused loop device and associate it with source. */
366 extern int lxc_prepare_loop_dev(const char *source
, char *loop_dev
, int flags
);
368 /* Clear all mounts on a given node.
369 * >= 0 successfully cleared. The number returned is the number of umounts
371 * < 0 error umounting. Return -errno.
373 extern int lxc_unstack_mountpoint(const char *path
, bool lazy
);
376 * run_command runs a command and collect it's std{err,out} output in buf.
378 * @param[out] buf The buffer where the commands std{err,out] output will be
379 * read into. If no output was produced, buf will be memset
381 * @param[in] buf_size The size of buf. This function will reserve one byte for
383 * @param[in] child_fn The function to be run in the child process. This
384 * function must exec.
385 * @param[in] args Arguments to be passed to child_fn.
387 extern int run_command(char *buf
, size_t buf_size
, int (*child_fn
)(void *),
390 /* Concatenate all passed-in strings into one path. Do not fail. If any piece
391 * is not prefixed with '/', add a '/'.
393 __attribute__((sentinel
)) extern char *must_concat(const char *first
, ...);
394 __attribute__((sentinel
)) extern char *must_make_path(const char *first
, ...);
395 __attribute__((sentinel
)) extern char *must_append_path(char *first
, ...);
397 /* return copy of string @entry; do not fail. */
398 extern char *must_copy_string(const char *entry
);
400 /* Re-alllocate a pointer, do not fail */
401 extern void *must_realloc(void *orig
, size_t sz
);
403 extern bool lxc_nic_exists(char *nic
);
405 static inline uint64_t lxc_getpagesize(void)
409 pgsz
= sysconf(_SC_PAGESIZE
);
416 /* If n is not a power of 2 this function will return the next power of 2
417 * greater than that number. Note that this function always returns the *next*
418 * power of 2 *greater* that number not the *nearest*. For example, passing 1025
419 * as argument this function will return 2048 although the closest power of 2
421 * If the caller passes in 0 they will receive 0 in return since this is invalid
422 * input and 0 is not a power of 2.
424 extern uint64_t lxc_find_next_power2(uint64_t n
);
426 static inline pid_t
lxc_raw_gettid(void)
429 return syscall(SYS_gettid
);
431 return lxc_raw_getpid();
435 /* Set a signal the child process will receive after the parent has died. */
436 extern int lxc_set_death_signal(int signal
);
437 extern int fd_cloexec(int fd
, bool cloexec
);
438 extern int recursive_destroy(char *dirname
);
440 #endif /* __LXC_UTILS_H */