/* * libifupdown/execute.c * Purpose: execution of individual commands * * Copyright (c) 2020 Ariadne Conill * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * This software is provided 'as is' and without any warranty, express or * implied. In no event shall the authors be liable for any damages arising * from the use of this software. */ #include #include #include #include #include #include #include #include #include #include #include #include #include "libifupdown/execute.h" #define SHELL "/bin/sh" #if defined(__linux__) # include #endif /* POSIX compatible fallback using waitpid(2) and usleep(3) */ static inline bool lif_process_monitor_busyloop(pid_t child, int timeout_sec, int *status) { int ticks = 0; while (ticks < timeout_sec * 20) { /* Ugly hack: most executors finish very quickly, * so give them a chance to finish before sleeping. */ usleep(50); if (waitpid(child, status, WNOHANG) == child) return true; usleep(49950); ticks++; } return false; } #if defined(__linux__) && defined(__NR_pidfd_open) /* TODO: remove this wrapper once musl and glibc gain pidfd_open() directly. */ static inline int lif_pidfd_open(pid_t pid, unsigned int flags) { return syscall(__NR_pidfd_open, pid, flags); } static inline bool lif_process_monitor_procdesc(pid_t child, int timeout_sec, int *status) { int pidfd = lif_pidfd_open(child, 0); /* pidfd_open() not available, fall back to busyloop */ if (pidfd == -1 && errno == ENOSYS) return lif_process_monitor_busyloop(child, timeout_sec, status); struct pollfd pfd = { .fd = pidfd, .events = POLLIN, }; if (poll(&pfd, 1, timeout_sec * 1000) < 1) return false; waitpid(child, status, 0); close(pidfd); return true; } #endif static inline bool lif_process_monitor(const char *cmdbuf, pid_t child, int timeout_sec) { int status; #if defined(__linux__) && defined(__NR_pidfd_open) if (lif_process_monitor_procdesc(child, timeout_sec, &status)) return WIFEXITED(status) && WEXITSTATUS(status) == 0; #else if (lif_process_monitor_busyloop(child, timeout_sec, &status)) return WIFEXITED(status) && WEXITSTATUS(status) == 0; #endif fprintf(stderr, "execution of '%s': timeout after %d seconds\n", cmdbuf, timeout_sec); kill(child, SIGKILL); waitpid(child, &status, 0); return false; } bool lif_execute_fmt(const struct lif_execute_opts *opts, char *const envp[], const char *fmt, ...) { char cmdbuf[4096]; va_list va; va_start(va, fmt); vsnprintf(cmdbuf, sizeof cmdbuf, fmt, va); va_end(va); pid_t child; char *argv[] = { SHELL, "-c", cmdbuf, NULL }; if (opts->verbose) puts(cmdbuf); if (opts->mock) return true; if (posix_spawn(&child, SHELL, NULL, NULL, argv, envp) != 0) { fprintf(stderr, "execute '%s': %s\n", cmdbuf, strerror(errno)); return false; } return lif_process_monitor(cmdbuf, child, opts->timeout); } bool lif_execute_fmt_with_result(const struct lif_execute_opts *opts, char *buf, size_t bufsize, char *const envp[], const char *fmt, ...) { char cmdbuf[4096]; va_list va; va_start(va, fmt); vsnprintf(cmdbuf, sizeof cmdbuf, fmt, va); va_end(va); pid_t child; char *argv[] = { SHELL, "-c", cmdbuf, NULL }; if (opts->verbose) puts(cmdbuf); if (opts->mock) return true; int pipefds[2]; if (pipe(pipefds) < 0) { fprintf(stderr, "execute '%s': %s\n", cmdbuf, strerror(errno)); return false; } posix_spawn_file_actions_t file_actions; posix_spawn_file_actions_init(&file_actions); posix_spawn_file_actions_addclose(&file_actions, pipefds[0]); posix_spawn_file_actions_adddup2(&file_actions, pipefds[1], 1); posix_spawn_file_actions_addclose(&file_actions, pipefds[1]); if (posix_spawn(&child, SHELL, &file_actions, NULL, argv, envp) != 0) { fprintf(stderr, "execute '%s': %s\n", cmdbuf, strerror(errno)); return false; } posix_spawn_file_actions_destroy(&file_actions); close(pipefds[1]); struct pollfd pfd = { .fd = pipefds[0], .events = POLLIN }; if (poll(&pfd, 1, -1) < 1) goto no_result; if (read(pipefds[0], buf, bufsize) < 0) { fprintf(stderr, "reading from pipe: %s\n", strerror(errno)); return false; } no_result: return lif_process_monitor(cmdbuf, child, opts->timeout); } bool lif_file_is_executable(const char *path) { struct stat st; if (stat(path, &st)) return false; if (!S_ISREG(st.st_mode)) return false; return !access(path, X_OK); } bool lif_maybe_run_executor(const struct lif_execute_opts *opts, char *const envp[], const char *executor, const char *phase, const char *lifname) { if (opts->verbose) fprintf(stderr, "ifupdown: %s: attempting to run %s executor for phase %s\n", lifname, executor, phase); char pathbuf[4096]; snprintf(pathbuf, sizeof pathbuf, "%s/%s", opts->executor_path, executor); if (!lif_file_is_executable(pathbuf)) return true; return lif_execute_fmt(opts, envp, "%s", pathbuf); } bool lif_maybe_run_executor_with_result(const struct lif_execute_opts *opts, char *const envp[], const char *executor, char *buf, size_t bufsize, const char *phase, const char *lifname) { if (opts->verbose) fprintf(stderr, "ifupdown: %s: attempting to run %s executor for phase %s\n", lifname, executor, phase); char pathbuf[4096]; snprintf(pathbuf, sizeof pathbuf, "%s/%s", opts->executor_path, executor); if (!lif_file_is_executable(pathbuf)) return true; return lif_execute_fmt_with_result(opts, buf, bufsize, envp, "%s", pathbuf); }