templates/lxc-download.in

   1 #!/bin/sh
   2
   3 # Client script for LXC container images.
   4 #
   5 # Copyright © 2014 Stéphane Graber <stgraber@ubuntu.com>
   6 #
   7 #  This library is free software; you can redistribute it and/or
   8 #  modify it under the terms of the GNU Lesser General Public
   9 #  License as published by the Free Software Foundation; either
  10 #  version 2.1 of the License, or (at your option) any later version.
  11
  12 #  This library is distributed in the hope that it will be useful,
  13 #  but WITHOUT ANY WARRANTY; without even the implied warranty of
  14 #  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15 #  Lesser General Public License for more details.
  16
  17 #  You should have received a copy of the GNU Lesser General Public
  18 #  License along with this library; if not, write to the Free Software
  19 #  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301
  20 #  USA
  21
  22 set -eu
  23
  24 LOCALSTATEDIR="@LOCALSTATEDIR@"
  25 LXC_HOOK_DIR="@LXCHOOKDIR@"
  26 LXC_TEMPLATE_CONFIG="@LXCTEMPLATECONFIG@"
  27
  28 # Defaults
  29 DOWNLOAD_ARCH=
  30 DOWNLOAD_BUILD=
  31 DOWNLOAD_COMPAT_LEVEL=2
  32 DOWNLOAD_DIST=
  33 DOWNLOAD_FLUSH_CACHE="false"
  34 DOWNLOAD_FORCE_CACHE="false"
  35 DOWNLOAD_INTERACTIVE="false"
  36 DOWNLOAD_KEYID="0xBAEFF88C22F6E216"
  37 DOWNLOAD_KEYSERVER="hkp://pool.sks-keyservers.net"
  38 DOWNLOAD_LIST_IMAGES="false"
  39 DOWNLOAD_MODE="system"
  40 DOWNLOAD_READY_GPG="false"
  41 DOWNLOAD_RELEASE=
  42 DOWNLOAD_SERVER="images.linuxcontainers.org"
  43 DOWNLOAD_SHOW_GPG_WARNING="true"
  44 DOWNLOAD_SHOW_HTTP_WARNING="true"
  45 DOWNLOAD_TARGET="system"
  46 DOWNLOAD_URL=
  47 DOWNLOAD_USE_CACHE="false"
  48 DOWNLOAD_VALIDATE="true"
  49 DOWNLOAD_VARIANT="default"
  50
  51 LXC_MAPPED_GID=
  52 LXC_MAPPED_UID=
  53 LXC_NAME=
  54 LXC_PATH=
  55 LXC_ROOTFS=
  56
  57 # Deal with GPG over http proxy
  58 if [ -n "${http_proxy:-}" ]; then
  59     DOWNLOAD_KEYSERVER="hkp://p80.pool.sks-keyservers.net:80"
  60 fi
  61
  62 # Make sure the usual locations are in PATH
  63 export PATH=$PATH:/usr/sbin:/usr/bin:/sbin:/bin
  64
  65 # Some useful functions
  66 cleanup() {
  67     if [ -d "$DOWNLOAD_TEMP" ]; then
  68         rm -Rf $DOWNLOAD_TEMP
  69     fi
  70 }
  71
  72 wget_wrapper() {
  73     for i in $(seq 3); do
  74         if wget $@; then
  75             return 0
  76         fi
  77     done
  78
  79     return 1
  80 }
  81
  82 download_file() {
  83     if ! wget_wrapper -T 30 -q https://${DOWNLOAD_SERVER}/$1 -O $2 >/dev/null 2>&1; then
  84         if ! wget_wrapper -T 30 -q http://${DOWNLOAD_SERVER}/$1 -O $2 >/dev/null 2>&1; then
  85             if [ "$3" = "noexit" ]; then
  86                 return 1
  87             else
  88                 echo "ERROR: Failed to download http://${DOWNLOAD_SERVER}/$1" 1>&2
  89                 exit 1
  90             fi
  91         elif [ "$DOWNLOAD_SHOW_HTTP_WARNING" = "true" ]; then
  92             DOWNLOAD_SHOW_HTTP_WARNING="false"
  93             echo "WARNING: Failed to download the file over HTTPs." 1>&2
  94             echo -n "         The file was instead download over HTTP. " 1>&2
  95             echo "A server replay attack may be possible!" 1>&2
  96         fi
  97     fi
  98 }
  99
 100 download_sig() {
 101     if ! download_file $1 $2 noexit; then
 102         if [ "$DOWNLOAD_VALIDATE" = "true" ]; then
 103             if [ "$3" = "normal" ]; then
 104                 echo "ERROR: Failed to download http://${DOWNLOAD_SERVER}/$1" 1>&2
 105                 exit 1
 106             else
 107                 return 1
 108             fi
 109         else
 110             return 0
 111         fi
 112     fi
 113 }
 114
 115 gpg_setup() {
 116     if [ "$DOWNLOAD_VALIDATE" = "false" ]; then
 117         return
 118     fi
 119
 120     if [ "$DOWNLOAD_READY_GPG" = "true" ]; then
 121         return
 122     fi
 123
 124     echo "Setting up the GPG keyring"
 125
 126     mkdir -p "$DOWNLOAD_TEMP/gpg"
 127     chmod 700 "$DOWNLOAD_TEMP/gpg"
 128     export GNUPGHOME="$DOWNLOAD_TEMP/gpg"
 129
 130     success=
 131     for i in $(seq 3); do
 132         if gpg --keyserver $DOWNLOAD_KEYSERVER \
 133             --recv-keys ${DOWNLOAD_KEYID} >/dev/null 2>&1; then
 134             success=1
 135             break
 136         fi
 137     done
 138
 139     if [ -z "$success" ]; then
 140         echo "ERROR: Unable to fetch GPG key from keyserver."
 141         exit 1
 142     fi
 143
 144     DOWNLOAD_READY_GPG="true"
 145 }
 146
 147 gpg_validate() {
 148     if [ "$DOWNLOAD_VALIDATE" = "false" ]; then
 149         if [ "$DOWNLOAD_SHOW_GPG_WARNING" = "true" ]; then
 150             echo "WARNING: Running without gpg validation!" 1>&2
 151         fi
 152         DOWNLOAD_SHOW_GPG_WARNING="false"
 153         return 0
 154     fi
 155
 156     if ! gpg --verify $1 >/dev/zero 2>&1; then
 157         echo "ERROR: Invalid signature for $1" 1>&2
 158         exit 1
 159     fi
 160 }
 161
 162 in_userns() {
 163     [ -e /proc/self/uid_map ] || { echo no; return; }
 164     while read line; do
 165         fields=$(echo $line | awk '{ print $1 " " $2 " " $3 }')
 166         [ "$fields" = "0 0 4294967295" ] && { echo no; return; } || true
 167         echo $fields | grep -q " 0 1$" && { echo userns-root; return; } || true
 168     done < /proc/self/uid_map
 169
 170     [ "$(cat /proc/self/uid_map)" = "$(cat /proc/1/uid_map)" ] && \
 171         { echo userns-root; return; }
 172     echo yes
 173 }
 174
 175 relevant_file() {
 176     FILE_PATH="${LXC_CACHE_PATH}/$1"
 177     if [ -e "${FILE_PATH}-${DOWNLOAD_MODE}" ]; then
 178         FILE_PATH="${FILE_PATH}-${DOWNLOAD_MODE}"
 179     fi
 180     if [ -e "$FILE_PATH.${DOWNLOAD_COMPAT_LEVEL}" ]; then
 181         FILE_PATH="${FILE_PATH}.${DOWNLOAD_COMPAT_LEVEL}"
 182     fi
 183
 184     echo $FILE_PATH
 185 }
 186
 187 usage() {
 188     cat <<EOF
 189 LXC container image downloader
 190
 191 Required arguments:
 192 [ -d | --dist <distribution> ]: The name of the distribution
 193 [ -r | --release <release> ]: Release name/version
 194 [ -a | --arch <architecture> ]: Architecture of the container
 195
 196 Optional arguments:
 197 [ -h | --help ]: This help message
 198 [ -l | --list ]: List all available images
 199 [ --variant <variant> ]: Variant of the image (default: "default")
 200 [ --server <server> ]: Image server (default: "images.linuxcontainers.org")
 201 [ --keyid <keyid> ]: GPG keyid (default: 0x...)
 202 [ --keyserver <keyserver> ]: GPG keyserver to use
 203 [ --no-validate ]: Disable GPG validation (not recommended)
 204 [ --flush-cache ]: Flush the local copy (if present)
 205 [ --force-cache ]; Force the use of the local copy even if expired
 206
 207 LXC internal arguments (do not pass manually!):
 208 [ --name <name> ]: The container name
 209 [ --path <path> ]: The path to the container
 210 [ --rootfs <rootfs> ]: The path to the container's rootfs
 211 [ --mapped-uid <map> ]: A uid map (user namespaces)
 212 [ --mapped-gid <map> ]: A gid map (user namespaces)
 213 EOF
 214     return 0
 215 }
 216
 217 options=$(getopt -o d:r:a:hl -l dist:,release:,arch:,help,list,variant:,\
 218 server:,keyid:,keyserver:,no-validate,flush-cache,force-cache,name:,path:,\
 219 rootfs:,mapped-uid:,mapped-gid: -- "$@")
 220
 221 if [ $? -ne 0 ]; then
 222     usage
 223     exit 1
 224 fi
 225 eval set -- "$options"
 226
 227 while :; do
 228     case "$1" in
 229         -h|--help)          usage && exit 1;;
 230         -l|--list)          DOWNLOAD_LIST_IMAGES="true"; shift 1;;
 231         -d|--dist)          DOWNLOAD_DIST=$2; shift 2;;
 232         -r|--release)       DOWNLOAD_RELEASE=$2; shift 2;;
 233         -a|--arch)          DOWNLOAD_ARCH=$2; shift 2;;
 234         --variant)          DOWNLOAD_VARIANT=$2; shift 2;;
 235         --server)           DOWNLOAD_SERVER=$2; shift 2;;
 236         --keyid)            DOWNLOAD_KEYID=$2; shift 2;;
 237         --keyserver)        DOWNLOAD_KEYSERVER=$2; shift 2;;
 238         --no-validate)      DOWNLOAD_VALIDATE="false"; shift 1;;
 239         --flush-cache)      DOWNLOAD_FLUSH_CACHE="true"; shift 1;;
 240         --force-cache)      DOWNLOAD_FORCE_CACHE="true"; shift 1;;
 241         --name)             LXC_NAME=$2; shift 2;;
 242         --path)             LXC_PATH=$2; shift 2;;
 243         --rootfs)           LXC_ROOTFS=$2; shift 2;;
 244         --mapped-uid)       LXC_MAPPED_UID=$2; shift 2;;
 245         --mapped-gid)       LXC_MAPPED_GID=$2; shift 2;;
 246         *)                  break;;
 247     esac
 248 done
 249
 250 # Check for required binaries
 251 for bin in tar xz wget; do
 252     if ! type $bin >/dev/null 2>&1; then
 253         echo "ERROR: Missing required tool: $bin" 1>&2
 254         exit 1
 255     fi
 256 done
 257
 258 # Check for GPG
 259 if [ "$DOWNLOAD_VALIDATE" = "true" ]; then
 260     if ! type gpg >/dev/null 2>&1; then
 261         echo "ERROR: Missing recommended tool: gpg" 1>&2
 262         echo "You can workaround this by using --no-validate." 1>&2
 263         exit 1
 264     fi
 265 fi
 266
 267 # Check that we have all variables we need
 268 if [ -z "$LXC_NAME" ] || [ -z "$LXC_PATH" ] || [ -z "$LXC_ROOTFS" ]; then
 269     echo "ERROR: Not running through LXC." 1>&2
 270     exit 1
 271 fi
 272
 273 USERNS=$(in_userns)
 274
 275 if [ "$USERNS" != "no" ]; then
 276     if [ "$USERNS" = "yes" ]; then
 277         if [ -z "$LXC_MAPPED_UID" ] || [ "$LXC_MAPPED_UID" = "-1" ]; then
 278             echo "ERROR: In a user namespace without a map." 1>&2
 279             exit 1
 280         fi
 281         DOWNLOAD_MODE="user"
 282         DOWNLOAD_TARGET="user"
 283     else
 284         DOWNLOAD_MODE="user"
 285         DOWNLOAD_TARGET="system"
 286     fi
 287 fi
 288
 289 if [ -z "$DOWNLOAD_DIST" ] || [ -z "$DOWNLOAD_RELEASE" ] || \
 290    [ -z "$DOWNLOAD_ARCH" ]; then
 291     DOWNLOAD_INTERACTIVE="true"
 292 fi
 293
 294 # Trap all exit signals
 295 trap cleanup EXIT HUP INT TERM
 296
 297 if ! type mktemp >/dev/null 2>&1; then
 298     DOWNLOAD_TEMP=/tmp/lxc-download.$$
 299     mkdir -p $DOWNLOAD_TEMP
 300 else
 301     DOWNLOAD_TEMP=$(mktemp -d)
 302 fi
 303
 304 # Simply list images
 305 if [ "$DOWNLOAD_LIST_IMAGES" = "true" ] || \
 306    [ "$DOWNLOAD_INTERACTIVE" = "true" ]; then
 307     # Initialize GPG
 308     gpg_setup
 309
 310     # Grab the index
 311     DOWNLOAD_INDEX_PATH=/meta/1.0/index-${DOWNLOAD_MODE}
 312
 313     echo "Downloading the image index"
 314     if ! download_file ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL} \
 315          ${DOWNLOAD_TEMP}/index noexit ||
 316        ! download_sig ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL}.asc \
 317             ${DOWNLOAD_TEMP}/index.asc noexit; then
 318         download_file ${DOWNLOAD_INDEX_PATH} ${DOWNLOAD_TEMP}/index normal
 319         download_sig  ${DOWNLOAD_INDEX_PATH}.asc \
 320             ${DOWNLOAD_TEMP}/index.asc normal
 321     fi
 322
 323     gpg_validate ${DOWNLOAD_TEMP}/index.asc
 324
 325     # Parse it
 326     echo ""
 327     echo "---"
 328     printf "DIST\tRELEASE\tARCH\tVARIANT\tBUILD\n"
 329     echo "---"
 330     while read line; do
 331         # Basic CSV parser
 332         OLD_IFS=$IFS
 333         IFS=";"
 334         set -- $line
 335         IFS=$OLD_IFS
 336
 337         [ -n "$DOWNLOAD_DIST" ] && [ "$1" != "$DOWNLOAD_DIST" ] && continue
 338         [ -n "$DOWNLOAD_RELEASE" ] && [ "$2" != "$DOWNLOAD_RELEASE" ] && continue
 339         [ -n "$DOWNLOAD_ARCH" ] && [ "$3" != "$DOWNLOAD_ARCH" ] && continue
 340         [ -n "$DOWNLOAD_VARIANT" ] && [ "$4" != "$DOWNLOAD_VARIANT" ] && continue
 341         [ -z "$5" ] || [ -z "$6" ] && continue
 342
 343         printf "$1\t$2\t$3\t$4\t$5\n"
 344     done < ${DOWNLOAD_TEMP}/index
 345     echo "---"
 346
 347     if [ "$DOWNLOAD_LIST_IMAGES" = "true" ]; then
 348         exit 1
 349     fi
 350
 351     # Interactive mode
 352     echo ""
 353
 354     if [ -z "$DOWNLOAD_DIST" ]; then
 355         echo -n "Distribution: "
 356         read DOWNLOAD_DIST
 357     fi
 358
 359     if [ -z "$DOWNLOAD_RELEASE" ]; then
 360         echo -n "Release: "
 361         read DOWNLOAD_RELEASE
 362     fi
 363
 364     if [ -z "$DOWNLOAD_ARCH" ]; then
 365         echo -n "Architecture: "
 366         read DOWNLOAD_ARCH
 367     fi
 368
 369     echo ""
 370 fi
 371
 372 # Setup the cache
 373 if [ "$DOWNLOAD_TARGET" = "system" ]; then
 374     LXC_CACHE_BASE="$LOCALSTATEDIR/cache/lxc/"
 375 else
 376     LXC_CACHE_BASE="$HOME/.cache/lxc/"
 377 fi
 378
 379 LXC_CACHE_PATH="$LXC_CACHE_BASE/download/$DOWNLOAD_DIST"
 380 LXC_CACHE_PATH="$LXC_CACHE_PATH/$DOWNLOAD_RELEASE/$DOWNLOAD_ARCH/"
 381 LXC_CACHE_PATH="$LXC_CACHE_PATH/$DOWNLOAD_VARIANT"
 382
 383 if [ -d "$LXC_CACHE_PATH" ]; then
 384     if [ "$DOWNLOAD_FLUSH_CACHE" = "true" ]; then
 385         echo "Flushing the cache..."
 386         rm -Rf $LXC_CACHE_PATH
 387     elif [ "$DOWNLOAD_FORCE_CACHE" = "true" ]; then
 388         DOWNLOAD_USE_CACHE="true"
 389     else
 390         DOWNLOAD_USE_CACHE="true"
 391         if [ -e "$(relevant_file expiry)" ]; then
 392             if [ "$(cat $(relevant_file expiry))" -lt $(date +%s) ]; then
 393                 echo "The cached copy has expired, re-downloading..."
 394                 DOWNLOAD_USE_CACHE="false"
 395             fi
 396         fi
 397     fi
 398 fi
 399
 400 # Download what's needed
 401 if [ "$DOWNLOAD_USE_CACHE" = "false" ]; then
 402     # Initialize GPG
 403     gpg_setup
 404
 405     # Grab the index
 406     DOWNLOAD_INDEX_PATH=/meta/1.0/index-${DOWNLOAD_MODE}
 407
 408     echo "Downloading the image index"
 409     if ! download_file ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL} \
 410          ${DOWNLOAD_TEMP}/index noexit ||
 411        ! download_sig ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL}.asc \
 412             ${DOWNLOAD_TEMP}/index.asc noexit; then
 413         download_file ${DOWNLOAD_INDEX_PATH} ${DOWNLOAD_TEMP}/index normal
 414         download_sig  ${DOWNLOAD_INDEX_PATH}.asc \
 415             ${DOWNLOAD_TEMP}/index.asc normal
 416     fi
 417
 418     gpg_validate ${DOWNLOAD_TEMP}/index.asc
 419
 420     # Parse it
 421     while read line; do
 422         # Basic CSV parser
 423         OLD_IFS=$IFS
 424         IFS=";"
 425         set -- $line
 426         IFS=$OLD_IFS
 427
 428         if [ "$1" != "$DOWNLOAD_DIST" ] || \
 429            [ "$2" != "$DOWNLOAD_RELEASE" ] || \
 430            [ "$3" != "$DOWNLOAD_ARCH" ] || \
 431            [ "$4" != "$DOWNLOAD_VARIANT" ] || \
 432            [ -z "$6" ]; then
 433             continue
 434         fi
 435
 436         DOWNLOAD_BUILD=$5
 437         DOWNLOAD_URL=$6
 438         break
 439     done < ${DOWNLOAD_TEMP}/index
 440
 441     if [ -z "$DOWNLOAD_URL" ]; then
 442         echo "ERROR: Couldn't find a matching image." 1>&1
 443         exit 1
 444     fi
 445
 446     if [ -d "$LXC_CACHE_PATH" ] && [ -f "$LXC_CACHE_PATH/build_id" ] && \
 447        [ "$(cat $LXC_CACHE_PATH/build_id)" = "$DOWNLOAD_BUILD" ]; then
 448         echo "The cache is already up to date."
 449         echo "Using image from local cache"
 450     else
 451         # Download the actual files
 452         echo "Downloading the rootfs"
 453         download_file $DOWNLOAD_URL/rootfs.tar.xz \
 454             ${DOWNLOAD_TEMP}/rootfs.tar.xz normal
 455         download_sig  $DOWNLOAD_URL/rootfs.tar.xz.asc \
 456              ${DOWNLOAD_TEMP}/rootfs.tar.xz.asc normal
 457         gpg_validate ${DOWNLOAD_TEMP}/rootfs.tar.xz.asc
 458
 459         echo "Downloading the metadata"
 460         download_file $DOWNLOAD_URL/meta.tar.xz \
 461             ${DOWNLOAD_TEMP}/meta.tar.xz normal
 462         download_sig  $DOWNLOAD_URL/meta.tar.xz.asc \
 463             ${DOWNLOAD_TEMP}/meta.tar.xz.asc normal
 464         gpg_validate ${DOWNLOAD_TEMP}/meta.tar.xz.asc
 465
 466         if [ -d $LXC_CACHE_PATH ]; then
 467             rm -Rf $LXC_CACHE_PATH
 468         fi
 469         mkdir -p $LXC_CACHE_PATH
 470         mv ${DOWNLOAD_TEMP}/rootfs.tar.xz $LXC_CACHE_PATH
 471         if ! tar Jxf ${DOWNLOAD_TEMP}/meta.tar.xz -C $LXC_CACHE_PATH; then
 472             echo "ERROR: Invalid rootfs tarball." 2>&1
 473             exit 1
 474         fi
 475
 476         echo $DOWNLOAD_BUILD > $LXC_CACHE_PATH/build_id
 477
 478         if [ -n "$LXC_MAPPED_UID" ] && [ "$LXC_MAPPED_UID" != "-1" ]; then
 479             chown -R $LXC_MAPPED_UID $LXC_CACHE_BASE >/dev/null 2>&1 || true
 480         fi
 481         if [ -n "$LXC_MAPPED_GID" ] && [ "$LXC_MAPPED_GID" != "-1" ]; then
 482             chgrp -R $LXC_MAPPED_GID $LXC_CACHE_BASE >/dev/null 2>&1 || true
 483         fi
 484         echo "The image cache is now ready"
 485     fi
 486 else
 487     echo "Using image from local cache"
 488 fi
 489
 490 # Unpack the rootfs
 491 echo "Unpacking the rootfs"
 492
 493 EXCLUDES=""
 494 excludelist=$(relevant_file excludes)
 495 if [ -f "${excludelist}" ]; then
 496     while read line; do
 497         EXCLUDES="$EXCLUDES --exclude=$line"
 498     done < $excludelist
 499 fi
 500
 501 tar  --anchored ${EXCLUDES} --numeric-owner -xpJf \
 502     ${LXC_CACHE_PATH}/rootfs.tar.xz -C ${LXC_ROOTFS}
 503
 504 mkdir -p ${LXC_ROOTFS}/dev/pts/
 505
 506 # Setup the configuration
 507 configfile=$(relevant_file config)
 508 fstab=$(relevant_file fstab)
 509 if [ ! -e $configfile ]; then
 510     echo "ERROR: meta tarball is missing the configuration file" 1>&2
 511     exit 1
 512 fi
 513
 514 ## Extract all the network config entries
 515 sed -i -e "/lxc.network/{w ${LXC_PATH}/config-network" -e "d}" \
 516     ${LXC_PATH}/config
 517
 518 ## Extract any other config entry
 519 sed -i -e "/lxc./{w ${LXC_PATH}/config-auto" -e "d}" ${LXC_PATH}/config
 520
 521 ## Append the defaults
 522 echo "" >> ${LXC_PATH}/config
 523 echo "# Distribution configuration" >> ${LXC_PATH}/config
 524 cat $configfile >> ${LXC_PATH}/config
 525
 526 ## Add the container-specific config
 527 echo "" >> ${LXC_PATH}/config
 528 echo "# Container specific configuration" >> ${LXC_PATH}/config
 529 if [ -e "${LXC_PATH}/config-auto" ]; then
 530     cat ${LXC_PATH}/config-auto >> ${LXC_PATH}/config
 531     rm ${LXC_PATH}/config-auto
 532 fi
 533 if [ -e "$fstab" ]; then
 534     echo "lxc.mount = ${LXC_PATH}/fstab" >> ${LXC_PATH}/config
 535 fi
 536 echo "lxc.utsname = ${LXC_NAME}" >> ${LXC_PATH}/config
 537
 538 ## Re-add the previously removed network config
 539 if [ -e "${LXC_PATH}/config-network" ]; then
 540     echo "" >> ${LXC_PATH}/config
 541     echo "# Network configuration" >> ${LXC_PATH}/config
 542     cat ${LXC_PATH}/config-network >> ${LXC_PATH}/config
 543     rm ${LXC_PATH}/config-network
 544 fi
 545
 546 TEMPLATE_FILES="${LXC_PATH}/config"
 547
 548 # Setup the fstab
 549 if [ -e $fstab ]; then
 550     cp ${fstab} ${LXC_PATH}/fstab
 551     TEMPLATE_FILES="$TEMPLATE_FILES ${LXC_PATH}/fstab"
 552 fi
 553
 554 # Look for extra templates
 555 if [ -e "$(relevant_file templates)" ]; then
 556     while read line; do
 557         fullpath=${LXC_ROOTFS}/$line
 558         [ ! -e "$fullpath" ] && continue
 559         TEMPLATE_FILES="$TEMPLATE_FILES $fullpath"
 560     done < $(relevant_file templates)
 561 fi
 562
 563 # Replace variables in all templates
 564 for file in $TEMPLATE_FILES; do
 565     [ ! -f "$file" ] && continue
 566
 567     sed -i "s#LXC_NAME#$LXC_NAME#g" $file
 568     sed -i "s#LXC_PATH#$LXC_PATH#g" $file
 569     sed -i "s#LXC_ROOTFS#$LXC_ROOTFS#g" $file
 570     sed -i "s#LXC_TEMPLATE_CONFIG#$LXC_TEMPLATE_CONFIG#g" $file
 571     sed -i "s#LXC_HOOK_DIR#$LXC_HOOK_DIR#g" $file
 572 done
 573
 574 if [ -n "$LXC_MAPPED_UID" ] && [ "$LXC_MAPPED_UID" != "-1" ]; then
 575     chown $LXC_MAPPED_UID $LXC_PATH/config $LXC_PATH/fstab >/dev/null 2>&1 || true
 576 fi
 577 if [ -n "$LXC_MAPPED_GID" ] && [ "$LXC_MAPPED_GID" != "-1" ]; then
 578     chgrp $LXC_MAPPED_GID $LXC_PATH/config $LXC_PATH/fstab >/dev/null 2>&1 || true
 579 fi
 580
 581 if [ -e "$(relevant_file create-message)" ]; then
 582     echo ""
 583     echo "---"
 584     cat "$(relevant_file create-message)"
 585 fi
 586
 587 exit 0