1 {-| Implementation of the runtime configuration details.
7 Copyright (C) 2011, 2012 Google Inc.
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful, but
15 WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
40 import Control.Exception
42 import qualified Data.Map as M
44 import System.FilePath
46 import System.IO.Error
47 import System.Posix.Types
48 import System.Posix.User
51 import qualified Ganeti.Constants as C
52 import Ganeti.BasicTypes
54 data GanetiDaemon = GanetiMasterd
58 deriving (Show, Enum, Bounded, Eq, Ord)
60 data MiscGroup = DaemonsGroup
62 deriving (Show, Enum, Bounded, Eq, Ord)
64 data GanetiGroup = DaemonGroup GanetiDaemon
65 | ExtraGroup MiscGroup
66 deriving (Show, Eq, Ord)
68 type RuntimeEnts = (M.Map GanetiDaemon UserID, M.Map GanetiGroup GroupID)
70 -- | Returns the daemon name for a given daemon.
71 daemonName :: GanetiDaemon -> String
72 daemonName GanetiMasterd = C.masterd
73 daemonName GanetiNoded = C.noded
74 daemonName GanetiRapi = C.rapi
75 daemonName GanetiConfd = C.confd
77 -- | Returns the configured user name for a daemon.
78 daemonUser :: GanetiDaemon -> String
79 daemonUser GanetiMasterd = C.masterdUser
80 daemonUser GanetiNoded = C.nodedUser
81 daemonUser GanetiRapi = C.rapiUser
82 daemonUser GanetiConfd = C.confdUser
84 -- | Returns the configured group for a daemon.
85 daemonGroup :: GanetiGroup -> String
86 daemonGroup (DaemonGroup GanetiMasterd) = C.masterdGroup
87 daemonGroup (DaemonGroup GanetiNoded) = C.nodedGroup
88 daemonGroup (DaemonGroup GanetiRapi) = C.rapiGroup
89 daemonGroup (DaemonGroup GanetiConfd) = C.confdGroup
90 daemonGroup (ExtraGroup DaemonsGroup) = C.daemonsGroup
91 daemonGroup (ExtraGroup AdminGroup) = C.adminGroup
93 -- | Returns the log file for a daemon.
94 daemonLogFile :: GanetiDaemon -> FilePath
95 daemonLogFile GanetiConfd = C.daemonsLogfilesGanetiConfd
96 daemonLogFile _ = error "Unimplemented"
98 -- | Returns the pid file name for a daemon.
99 daemonPidFile :: GanetiDaemon -> FilePath
100 daemonPidFile daemon = C.runGanetiDir </> daemonName daemon <.> "pid"
102 -- | All groups list. A bit hacking, as we can't enforce it's complete
104 allGroups :: [GanetiGroup]
105 allGroups = map DaemonGroup [minBound..maxBound] ++
106 map ExtraGroup [minBound..maxBound]
108 ignoreDoesNotExistErrors :: IO a -> IO (Result a)
109 ignoreDoesNotExistErrors value = do
110 result <- tryJust (\e -> if isDoesNotExistError e
113 return $ eitherToResult result
115 -- | Computes the group/user maps.
116 getEnts :: IO (Result RuntimeEnts)
118 users <- mapM (\daemon -> do
119 entry <- ignoreDoesNotExistErrors .
120 getUserEntryForName .
122 return (entry >>= \e -> return (daemon, userID e))
123 ) [minBound..maxBound]
124 groups <- mapM (\group -> do
125 entry <- ignoreDoesNotExistErrors .
126 getGroupEntryForName .
128 return (entry >>= \e -> return (group, groupID e))
130 return $ do -- 'Result' monad
131 users' <- sequence users
132 groups' <- sequence groups
133 let usermap = M.fromList users'
134 groupmap = M.fromList groups'
135 return (usermap, groupmap)
138 -- | Checks whether a daemon runs as the right user.
139 verifyDaemonUser :: GanetiDaemon -> RuntimeEnts -> IO ()
140 verifyDaemonUser daemon ents = do
141 myuid <- getEffectiveUserID
142 -- note: we use directly ! as lookup failues shouldn't happen, due
143 -- to the above map construction
144 checkUidMatch (daemonName daemon) ((M.!) (fst ents) daemon) myuid
146 -- | Check that two UIDs are matching or otherwise exit.
147 checkUidMatch :: String -> UserID -> UserID -> IO ()
148 checkUidMatch name expected actual =
149 when (expected /= actual) $ do
150 hPrintf stderr "%s started using wrong user ID (%d), \
152 (fromIntegral actual::Int)
153 (fromIntegral expected::Int) :: IO ()
154 exitWith $ ExitFailure C.exitFailure