[proxmox-backup.git] / src / bin / proxmox-backup-api.rs

use anyhow::{bail, Error};
use futures::*;
use http::request::Parts;
use http::Response;
use hyper::{Body, StatusCode};
use hyper::header;

use proxmox::try_block;
use proxmox::api::RpcEnvironmentType;
use proxmox::tools::fs::CreateOptions;

use proxmox_rest_server::{daemon, ApiConfig, RestServer};

use proxmox_backup::server::auth::default_api_auth;
use proxmox_backup::auth_helpers::*;
use proxmox_backup::config;

fn main() {
    proxmox_backup::tools::setup_safe_path_env();

    if let Err(err) = pbs_runtime::main(run()) {
        eprintln!("Error: {}", err);
        std::process::exit(-1);
    }
}

fn get_index(
    _auth_id: Option<String>,
    _language: Option<String>,
    _api: &ApiConfig,
    _parts: Parts,
) -> Response<Body> {

    let index = "<center><h1>Proxmox Backup API Server</h1></center>";

    Response::builder()
        .status(StatusCode::OK)
        .header(header::CONTENT_TYPE, "text/html")
        .body(index.into())
        .unwrap()
}

async fn run() -> Result<(), Error> {
    if let Err(err) = syslog::init(
        syslog::Facility::LOG_DAEMON,
        log::LevelFilter::Info,
        Some("proxmox-backup-api")) {
        bail!("unable to inititialize syslog - {}", err);
    }

    config::create_configdir()?;

    config::update_self_signed_cert(false)?;

    proxmox_backup::server::create_run_dir()?;

    proxmox_backup::rrd::create_rrdb_dir()?;
    proxmox_backup::server::jobstate::create_jobstate_dir()?;
    proxmox_backup::tape::create_tape_status_dir()?;
    proxmox_backup::tape::create_drive_state_dir()?;
    proxmox_backup::tape::create_changer_state_dir()?;
    proxmox_backup::tape::create_drive_lock_dir()?;

    if let Err(err) = generate_auth_key() {
        bail!("unable to generate auth key - {}", err);
    }
    let _ = private_auth_key(); // load with lazy_static

    if let Err(err) = generate_csrf_key() {
        bail!("unable to generate csrf key - {}", err);
    }
    let _ = csrf_secret(); // load with lazy_static

    let mut config = ApiConfig::new(
        pbs_buildcfg::JS_DIR,
        &proxmox_backup::api2::ROUTER,
        RpcEnvironmentType::PRIVILEGED,
        default_api_auth(),
        get_index,
    )?;

    let backup_user = pbs_config::backup_user()?;
    let mut commando_sock = proxmox_rest_server::CommandoSocket::new(proxmox_rest_server::our_ctrl_sock(), backup_user.gid);

    let dir_opts = CreateOptions::new().owner(backup_user.uid).group(backup_user.gid);
    let file_opts = CreateOptions::new().owner(backup_user.uid).group(backup_user.gid);

    config.enable_file_log(
        pbs_buildcfg::API_ACCESS_LOG_FN,
        Some(dir_opts.clone()),
        Some(file_opts.clone()),
        &mut commando_sock,
    )?;

    config.enable_auth_log(
        pbs_buildcfg::API_AUTH_LOG_FN,
        Some(dir_opts.clone()),
        Some(file_opts.clone()),
        &mut commando_sock,
    )?;


    let rest_server = RestServer::new(config);
    proxmox_rest_server::init_worker_tasks(pbs_buildcfg::PROXMOX_BACKUP_LOG_DIR_M!().into(), file_opts.clone())?;

    // http server future:
    let server = daemon::create_daemon(
        ([127,0,0,1], 82).into(),
        move |listener| {
            let incoming = hyper::server::conn::AddrIncoming::from_listener(listener)?;

            Ok(async {
                daemon::systemd_notify(daemon::SystemdNotify::Ready)?;

                hyper::Server::builder(incoming)
                    .serve(rest_server)
                    .with_graceful_shutdown(proxmox_rest_server::shutdown_future())
                    .map_err(Error::from)
                    .await
            })
        },
        "proxmox-backup.service",
    );

    proxmox_rest_server::write_pid(pbs_buildcfg::PROXMOX_BACKUP_API_PID_FN)?;

    let init_result: Result<(), Error> = try_block!({
        proxmox_rest_server::register_task_control_commands(&mut commando_sock)?;
        commando_sock.spawn()?;
        proxmox_rest_server::catch_shutdown_signal()?;
        proxmox_rest_server::catch_reload_signal()?;
        Ok(())
    });

    if let Err(err) = init_result {
        bail!("unable to start daemon - {}", err);
    }

    server.await?;
    log::info!("server shutting down, waiting for active workers to complete");
    proxmox_rest_server::last_worker_future().await?;

    log::info!("done - exit server");

    Ok(())
}
Commit	Line	Data
f7d4e4b5	1	use anyhow::{bail, Error};
e76ac3a4	2	use futures::*;
7fa9a37c DM	3	use http::request::Parts;
	4	use http::Response;
	5	use hyper::{Body, StatusCode};
	6	use hyper::header;
e76ac3a4	7
9ea4bce4	8	use proxmox::try_block;
a2479cfa	9	use proxmox::api::RpcEnvironmentType;
fd6d2438	10	use proxmox::tools::fs::CreateOptions;
e76ac3a4	11
b9700a9f	12	use proxmox_rest_server::{daemon, ApiConfig, RestServer};
8bca935f	13
b9700a9f	14	use proxmox_backup::server::auth::default_api_auth;
6c30068e	15	use proxmox_backup::auth_helpers::*;
a8f268af	16	use proxmox_backup::config;
886e5ce8	17
d973aa82	18	fn main() {
ac7513e3 DM	19	proxmox_backup::tools::setup_safe_path_env();
ac7513e3 DM	20
d420962f	21	if let Err(err) = pbs_runtime::main(run()) {
aa5a4060 DM	22	eprintln!("Error: {}", err);
	23	std::process::exit(-1);
	24	}
	25	}
	26
7fa9a37c DM	27	fn get_index(
	28	_auth_id: Option<String>,
	29	_language: Option<String>,
	30	_api: &ApiConfig,
	31	_parts: Parts,
	32	) -> Response<Body> {
	33
	34	let index = "<center><h1>Proxmox Backup API Server</h1></center>";
	35
	36	Response::builder()
	37	.status(StatusCode::OK)
	38	.header(header::CONTENT_TYPE, "text/html")
	39	.body(index.into())
	40	.unwrap()
	41	}
	42
e76ac3a4	43	async fn run() -> Result<(), Error> {
d96d8273 DM	44	if let Err(err) = syslog::init(
	45	syslog::Facility::LOG_DAEMON,
	46	log::LevelFilter::Info,
	47	Some("proxmox-backup-api")) {
aa5a4060	48	bail!("unable to inititialize syslog - {}", err);
a8f268af DM	49	}
	50
	51	config::create_configdir()?;
d96d8273	52
22be470d DM	53	config::update_self_signed_cert(false)?;
22be470d DM	54
6c76aa43	55	proxmox_backup::server::create_run_dir()?;
78bf2923	56
eaeda365	57	proxmox_backup::rrd::create_rrdb_dir()?;
1298618a	58	proxmox_backup::server::jobstate::create_jobstate_dir()?;
cafd51bf	59	proxmox_backup::tape::create_tape_status_dir()?;
cd44fb8d DM	60	proxmox_backup::tape::create_drive_state_dir()?;
cd44fb8d DM	61	proxmox_backup::tape::create_changer_state_dir()?;
a0cd0f9c	62	proxmox_backup::tape::create_drive_lock_dir()?;
eaeda365	63
39a90ca6	64	if let Err(err) = generate_auth_key() {
aa5a4060	65	bail!("unable to generate auth key - {}", err);
8d04280b	66	}
d01e2420	67	let _ = private_auth_key(); // load with lazy_static
8d04280b	68
39a90ca6	69	if let Err(err) = generate_csrf_key() {
aa5a4060	70	bail!("unable to generate csrf key - {}", err);
39a90ca6	71	}
d01e2420	72	let _ = csrf_secret(); // load with lazy_static
39a90ca6	73
fd6d2438	74	let mut config = ApiConfig::new(
af06decd	75	pbs_buildcfg::JS_DIR,
26858dba SR	76	&proxmox_backup::api2::ROUTER,
	77	RpcEnvironmentType::PRIVILEGED,
	78	default_api_auth(),
7fa9a37c	79	get_index,
26858dba	80	)?;
eaeda365	81
fd6d2438	82	let backup_user = pbs_config::backup_user()?;
b9700a9f	83	let mut commando_sock = proxmox_rest_server::CommandoSocket::new(proxmox_rest_server::our_ctrl_sock(), backup_user.gid);
a68768cf	84
fd6d2438 DM	85	let dir_opts = CreateOptions::new().owner(backup_user.uid).group(backup_user.gid);
	86	let file_opts = CreateOptions::new().owner(backup_user.uid).group(backup_user.gid);
	87
	88	config.enable_file_log(
	89	pbs_buildcfg::API_ACCESS_LOG_FN,
36b7085e DM	90	Some(dir_opts.clone()),
	91	Some(file_opts.clone()),
	92	&mut commando_sock,
	93	)?;
	94
	95	config.enable_auth_log(
	96	pbs_buildcfg::API_AUTH_LOG_FN,
0a33fba4 DM	97	Some(dir_opts.clone()),
0a33fba4 DM	98	Some(file_opts.clone()),
fd6d2438 DM	99	&mut commando_sock,
fd6d2438 DM	100	)?;
8e7e2223	101
36b7085e	102
9bc17e8d	103	let rest_server = RestServer::new(config);
b9700a9f	104	proxmox_rest_server::init_worker_tasks(pbs_buildcfg::PROXMOX_BACKUP_LOG_DIR_M!().into(), file_opts.clone())?;
886e5ce8	105
5e7bc50a	106	// http server future:
a690ecac WB	107	let server = daemon::create_daemon(
a690ecac WB	108	([127,0,0,1], 82).into(),
d2654200	109	move \|listener\| {
6f0565fa DC	110	let incoming = hyper::server::conn::AddrIncoming::from_listener(listener)?;
6f0565fa DC	111
d2654200 DM	112	Ok(async {
	113	daemon::systemd_notify(daemon::SystemdNotify::Ready)?;
	114
	115	hyper::Server::builder(incoming)
083ff3fd	116	.serve(rest_server)
fd6d2438	117	.with_graceful_shutdown(proxmox_rest_server::shutdown_future())
083ff3fd	118	.map_err(Error::from)
d2654200 DM	119	.await
d2654200 DM	120	})
5e7bc50a	121	},
d7c6ad60	122	"proxmox-backup.service",
083ff3fd	123	);
5e7bc50a	124
b9700a9f	125	proxmox_rest_server::write_pid(pbs_buildcfg::PROXMOX_BACKUP_API_PID_FN)?;
d98c9a7a	126
e76ac3a4	127	let init_result: Result<(), Error> = try_block!({
b9700a9f	128	proxmox_rest_server::register_task_control_commands(&mut commando_sock)?;
a68768cf	129	commando_sock.spawn()?;
fd1b65cc DM	130	proxmox_rest_server::catch_shutdown_signal()?;
fd1b65cc DM	131	proxmox_rest_server::catch_reload_signal()?;
e76ac3a4 WB	132	Ok(())
e76ac3a4 WB	133	});
e3f41f21	134
e76ac3a4 WB	135	if let Err(err) = init_result {
	136	bail!("unable to start daemon - {}", err);
	137	}
d607b886	138
083ff3fd	139	server.await?;
a546a8a0	140	log::info!("server shutting down, waiting for active workers to complete");
fd6d2438	141	proxmox_rest_server::last_worker_future().await?;
e3f41f21	142
e76ac3a4	143	log::info!("done - exit server");
eaeda365	144
aa5a4060	145	Ok(())
d8d978eb	146	}