#include <sys/sysmacros.h>
#include <sys/types.h>
-// libmount
-#include <libmount/libmount.h>
-
#include <pakfire/arch.h>
#include <pakfire/logging.h>
#include <pakfire/pakfire.h>
-#include <pakfire/private.h>
+#include <pakfire/parse.h>
+#include <pakfire/path.h>
#include <pakfire/mount.h>
+#include <pakfire/string.h>
#include <pakfire/util.h>
static const struct pakfire_mountpoint {
+ pakfire_mntns_t ns;
const char* source;
const char* target;
const char* fstype;
int flags;
const char* options;
} mountpoints[] = {
- { "pakfire_proc", "proc", "proc", MS_NOSUID|MS_NOEXEC|MS_NODEV, NULL, },
-
- // Bind mount /proc/sys as read-only with the following exceptions:
- // * /proc/sys/net
- { "/proc/sys", "proc/sys", "bind", MS_BIND, NULL, },
- { "/proc/sys/net", "proc/sys/net", "bind", MS_BIND, NULL, },
- { "/proc/sys", "proc/sys", "bind", MS_BIND|MS_RDONLY|MS_REMOUNT, NULL, },
-
- // Bind mount /sys as read-only
- { "/sys", "sys", "bind", MS_BIND, NULL, },
- { "/sys", "sys", "bind", MS_BIND|MS_RDONLY|MS_REMOUNT, NULL, },
+ // Mount a new instance of /proc
+ {
+ PAKFIRE_MNTNS_INNER|PAKFIRE_MNTNS_OUTER,
+ "pakfire_proc",
+ "proc",
+ "proc",
+ MS_NOSUID|MS_NOEXEC|MS_NODEV,
+ NULL,
+ },
+
+ /*
+ XXX it is kind of problematic to mount /proc twice as a process inside the
+ jail can umount /proc and will then see the host's /proc.
+ */
+
+ // Make /proc/sys read-only (except /proc/sys/net)
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/sys",
+ "proc/sys",
+ "bind",
+ MS_BIND|MS_REC,
+ NULL,
+ },
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/sys/net",
+ "proc/sys/net",
+ "bind",
+ MS_BIND|MS_REC,
+ NULL,
+ },
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/sys",
+ "proc/sys",
+ "bind",
+ MS_BIND|MS_RDONLY|MS_NOSUID|MS_NOEXEC|MS_NODEV|MS_REMOUNT,
+ NULL,
+ },
+
+ // Deny write access to /proc/sysrq-trigger (can be used to restart the host)
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/sysrq-trigger",
+ "proc/sysrq-trigger",
+ "bind",
+ MS_BIND|MS_REC,
+ NULL,
+ },
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/sysrq-trigger",
+ "proc/sysrq-trigger",
+ "bind",
+ MS_BIND|MS_RDONLY|MS_NOSUID|MS_NOEXEC|MS_NODEV|MS_REMOUNT,
+ NULL,
+ },
+
+ // Make /proc/irq read-only
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/irq",
+ "proc/irq",
+ "bind",
+ MS_BIND|MS_REC,
+ NULL,
+ },
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/irq",
+ "proc/irq",
+ "bind",
+ MS_BIND|MS_RDONLY|MS_NOSUID|MS_NOEXEC|MS_NODEV|MS_REMOUNT,
+ NULL,
+ },
+
+ // Make /proc/bus read-only
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/bus",
+ "proc/bus",
+ "bind",
+ MS_BIND|MS_REC,
+ NULL,
+ },
+ {
+ PAKFIRE_MNTNS_INNER,
+ "/proc/bus",
+ "proc/bus",
+ "bind",
+ MS_BIND|MS_RDONLY|MS_NOSUID|MS_NOEXEC|MS_NODEV|MS_REMOUNT,
+ NULL,
+ },
+
+ // Bind-Mount /sys ready-only
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "/sys",
+ "sys",
+ "bind",
+ MS_BIND|MS_REC,
+ NULL,
+ },
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "/sys",
+ "sys",
+ "bind",
+ MS_BIND|MS_RDONLY|MS_NOSUID|MS_NOEXEC|MS_NODEV|MS_REMOUNT,
+ NULL,
+ },
// Create a new /dev
- { "pakfire_dev", "dev", "tmpfs", MS_NOSUID|MS_NOEXEC,
- "mode=755,size=4m,nr_inodes=64k", },
- { "/dev/pts", "dev/pts", "bind", MS_BIND, NULL, },
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "pakfire_dev",
+ "dev",
+ "tmpfs",
+ MS_NOSUID|MS_NOEXEC,
+ "mode=0755,size=4m,nr_inodes=64k",
+ },
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "pakfire_dev_pts",
+ "dev/pts",
+ "devpts",
+ MS_NOSUID|MS_NOEXEC,
+ "newinstance,ptmxmode=0666,mode=620",
+ },
+
+ // Create a new /dev/shm
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "pakfire_dev_shm",
+ "dev/shm",
+ "tmpfs",
+ MS_NOSUID|MS_NODEV|MS_STRICTATIME,
+ "mode=1777,size=1024m",
+ },
+
+ // Mount /dev/mqueue
+ {
+ PAKFIRE_MNTNS_INNER,
+ "mqueue",
+ "dev/mqueue",
+ "mqueue",
+ MS_NOSUID|MS_NOEXEC|MS_NODEV,
+ NULL,
+ },
// Create a new /run
- { "pakfire_tmpfs", "run", "tmpfs", MS_NOSUID|MS_NOEXEC|MS_NODEV,
- "mode=755,size=4m,nr_inodes=1k", },
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "pakfire_run",
+ "run",
+ "tmpfs",
+ MS_NOSUID|MS_NOEXEC|MS_NODEV,
+ "mode=755,size=256m,nr_inodes=1k",
+ },
// Create a new /tmp
- { "pakfire_tmpfs", "tmp", "tmpfs", MS_NOSUID|MS_NODEV, "mode=755", },
+ {
+ PAKFIRE_MNTNS_OUTER,
+ "pakfire_tmp",
+ "tmp",
+ "tmpfs",
+ MS_NOSUID|MS_NODEV|MS_STRICTATIME,
+ "mode=1777,size=4096m",
+ },
// The end
- { NULL },
+ {},
};
static const struct pakfire_devnode {
int major;
int minor;
mode_t mode;
+ int flags;
} devnodes[] = {
- { "/dev/null", 1, 3, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, },
- { "/dev/zero", 1, 5, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, },
- { "/dev/full", 1, 7, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, },
- { "/dev/random", 1, 8, S_IFCHR|S_IRUSR|S_IRGRP|S_IROTH, },
- { "/dev/urandom", 1, 9, S_IFCHR|S_IRUSR|S_IRGRP|S_IROTH, },
- { "/dev/kmsg", 1, 11, S_IFCHR|S_IRUSR|S_IRGRP|S_IROTH, },
- { "/dev/tty", 5, 0, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, },
- { "/dev/console", 5, 1, S_IFCHR|S_IRUSR|S_IWUSR, },
- { "/dev/ptmx", 5, 2, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, },
- { "/dev/rtc0", 252, 0, S_IFCHR|S_IRUSR|S_IWUSR, },
+ { "/dev/null", 1, 3, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, 0 },
+ { "/dev/zero", 1, 5, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, 0 },
+ { "/dev/full", 1, 7, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, 0 },
+ { "/dev/random", 1, 8, S_IFCHR|S_IRUSR|S_IRGRP|S_IROTH, 0 },
+ { "/dev/urandom", 1, 9, S_IFCHR|S_IRUSR|S_IRGRP|S_IROTH, 0 },
+ { "/dev/kmsg", 1, 11, S_IFCHR|S_IRUSR|S_IRGRP|S_IROTH, 0 },
+ { "/dev/tty", 5, 0, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH, 0 },
+ { "/dev/rtc0", 252, 0, S_IFCHR|S_IRUSR|S_IWUSR, 0 },
+
+ // Loop Devices
+ { "/dev/loop-control", 10, 237, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop0", 7, 0, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop1", 7, 1, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop2", 7, 2, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop3", 7, 3, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop4", 7, 4, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop5", 7, 5, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop6", 7, 6, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+ { "/dev/loop7", 7, 7, S_IFCHR|S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP, PAKFIRE_MOUNT_LOOP_DEVICES },
+
{ NULL },
};
const char* target;
const char* path;
} symlinks[] = {
+ { "/dev/pts/ptmx", "/dev/ptmx", },
{ "/proc/self/fd", "/dev/fd", },
{ "/proc/self/fd/0", "/dev/stdin" },
{ "/proc/self/fd/1", "/dev/stdout" },
{ NULL },
};
-/*
- Easy way to iterate through all mountpoints
-*/
-static int pakfire_mount_foreach(struct pakfire* pakfire, int direction,
- int (*callback)(struct pakfire* pakfire, struct libmnt_fs* fs, const void* data),
- const void* data) {
- const char* root = pakfire_get_path(pakfire);
- int r = 1;
-
- struct libmnt_iter* iterator = NULL;
- struct libmnt_table* tab = NULL;
- struct libmnt_fs* fs = NULL;
-
- // Create an iterator
- iterator = mnt_new_iter(direction);
- if (!iterator) {
- ERROR(pakfire, "Could not setup iterator: %m\n");
- goto ERROR;
- }
+int pakfire_mount_change_propagation(struct pakfire_ctx* ctx, const char* path, int propagation) {
+ CTX_DEBUG(ctx, "Changing mount propagation on %s\n", path);
- // Read /proc/mounts
- tab = mnt_new_table_from_file("/proc/mounts");
- if (!tab) {
- ERROR(pakfire, "Could not open /proc/mounts: %m\n");
- goto ERROR;
- }
-
- while (mnt_table_next_fs(tab, iterator, &fs) == 0) {
- const char* target = mnt_fs_get_target(fs);
-
- // Ignore any mointpoints that don't belong to us
- if (!pakfire_string_startswith(target, root))
- continue;
-
- // Call the callback for each relevant mountpoint
- r = callback(pakfire, fs, data);
- if (r)
- break;
- }
-
-ERROR:
- // Tidy up
- if (fs)
- mnt_unref_fs(fs);
- if (tab)
- mnt_unref_table(tab);
- if (iterator)
- mnt_free_iter(iterator);
+ int r = mount(NULL, path, NULL, propagation|MS_REC, NULL);
+ if (r)
+ CTX_ERROR(ctx, "Failed to change mount propagation on %s: %m\n", path);
return r;
}
-static int __pakfire_is_mountpoint(struct pakfire* pakfire,
- struct libmnt_fs* fs, const void* data) {
- const char* path = (const char*)data;
-
- return mnt_fs_streq_target(fs, path);
+static int pakfire_mount_is_mountpoint(struct pakfire* pakfire, const char* path) {
+ // XXX THIS STILL NEEDS TO BE IMPLEMENTED
+ return 1;
}
-int pakfire_is_mountpoint(struct pakfire* pakfire, const char* path) {
- return pakfire_mount_foreach(pakfire, MNT_ITER_FORWARD,
- __pakfire_is_mountpoint, path);
-}
-
-static int pakfire_mount(struct pakfire* pakfire, const char* source, const char* target,
- const char* fstype, unsigned long mflags, const void* data) {
- const char* options = (const char*)data;
+int pakfire_mount_make_mounpoint(struct pakfire_ctx* ctx, struct pakfire* pakfire,
+ const char* path) {
int r;
- char error[1024];
-
- // Check for some basic inputs
- if (!source || !target) {
- errno = EINVAL;
- return 1;
- }
-
- DEBUG(pakfire, "Mounting %s from %s (%s - %s)\n",
- target, source, fstype, options);
-
-#ifdef PAKFIRE_DEBUG
- // Enable debugging for libmount
- mnt_init_debug(0xffff);
-#endif
+ // Check if path already is a mountpoint
+ r = pakfire_mount_is_mountpoint(pakfire, path);
+ switch (r) {
+ // Already is a mountpoint
+ case 0:
+ return 0;
- // Allocate a new mount context
- struct libmnt_context* ctx = mnt_new_context();
- if (!ctx)
- return 1;
+ // Is not a mountpoint
+ case 1:
+ break;
- // Set source
- r = mnt_context_set_source(ctx, source);
- if (r) {
- ERROR(pakfire, "Could not set source: %m\n");
- goto ERROR;
+ default:
+ CTX_ERROR(ctx, "Could not determine whether %s is a mountpoint: %m\n", path);
+ return r;
}
- // Set target
- r = mnt_context_set_target(ctx, target);
+ // Bind-mount to self
+ r = mount(path, path, NULL, MS_BIND|MS_REC, NULL);
if (r) {
- ERROR(pakfire, "Could not set target: %m\n");
- goto ERROR;
- }
-
- // Set filesystem type
- if (fstype) {
- r = mnt_context_set_fstype(ctx, fstype);
- if (r) {
- ERROR(pakfire, "Could not set filesystem type: %m\n");
- goto ERROR;
- }
- }
-
- // Set mount flags
- if (mflags) {
- r = mnt_context_set_mflags(ctx, mflags);
- if (r) {
- ERROR(pakfire, "Could not set mount flags: %m\n");
- goto ERROR;
- }
+ CTX_ERROR(ctx, "Could not make %s a mountpoint: %m\n", path);
+ return r;
}
- // Set options
- if (options) {
- r = mnt_context_set_options(ctx, options);
- if (r) {
- ERROR(pakfire, "Could not set mount options: %m\n");
- goto ERROR;
- }
- }
+ return 0;
+}
- // Perform mount operation
- r = mnt_context_mount(ctx);
- if (r) {
- // Fetch the error message
- mnt_context_get_excode(ctx, r, error, sizeof(error));
+static int pakfire_mount(struct pakfire_ctx* ctx, struct pakfire* pakfire, const char* source,
+ const char* target, const char* fstype, unsigned long mflags, const void* data) {
+ const char* options = (const char*)data;
- ERROR(pakfire, "Mount unsuccessful: %s\n", error);
- goto ERROR;
+ // Check for some basic inputs
+ if (!source || !target) {
+ errno = EINVAL;
+ return 1;
}
-ERROR:
- if (ctx)
- mnt_free_context(ctx);
-
- return r;
-}
-
-static int pakfire_umount(struct pakfire* pakfire, const char* path, int flags) {
- int r;
-
- DEBUG(pakfire, "Umounting %s\n", path);
+ CTX_DEBUG(ctx, "Mounting %s from %s (%s - %s)\n", target, source, fstype, options);
-RETRY:
- // Perform umount
- r = umount2(path, flags);
+ // Perform mount()
+ int r = mount(source, target, fstype, mflags, data);
if (r) {
- // Attempt a lazy umount when busy
- if (errno == EBUSY) {
- flags |= MNT_DETACH;
- goto RETRY;
- }
-
- ERROR(pakfire, "Could not umount %s: %m\n", path);
+ CTX_ERROR(ctx, "Could not mount %s: %m\n", target);
}
return r;
}
-static int __pakfire_mount_print(struct pakfire* pakfire,
- struct libmnt_fs* fs, const void* data) {
- DEBUG(pakfire,
- " %s %s %s %s\n",
- mnt_fs_get_source(fs),
- mnt_fs_get_target(fs),
- mnt_fs_get_fstype(fs),
- mnt_fs_get_fs_options(fs)
- );
+static int __pakfire_mount_list(char* line, size_t length, void* data) {
+ struct pakfire_ctx* ctx = data;
+
+ // Send the line to the logger
+ CTX_DEBUG(ctx, " %.*s", (int)length, line);
return 0;
}
-int pakfire_mount_list(struct pakfire* pakfire) {
- DEBUG(pakfire, "Mountpoints:\n");
+int pakfire_mount_list(struct pakfire_ctx* ctx) {
+ CTX_DEBUG(ctx, "Mountpoints:\n");
- return pakfire_mount_foreach(pakfire, MNT_ITER_FORWARD,
- __pakfire_mount_print, NULL);
+ return pakfire_parse_file("/proc/self/mounts", __pakfire_mount_list, ctx);
}
-static int pakfire_populate_dev(struct pakfire* pakfire) {
+int pakfire_populate_dev(struct pakfire_ctx* ctx, struct pakfire* pakfire, int flags) {
char path[PATH_MAX];
// Create device nodes
for (const struct pakfire_devnode* devnode = devnodes; devnode->path; devnode++) {
- DEBUG(pakfire, "Creating device node %s\n", devnode->path);
+ CTX_DEBUG(ctx, "Creating device node %s\n", devnode->path);
- int r = pakfire_make_path(pakfire, path, devnode->path);
- if (r < 0)
- return 1;
+ // Check if flags match
+ if (devnode->flags && !(flags & devnode->flags))
+ continue;
+
+ int r = pakfire_path(pakfire, path, "%s", devnode->path);
+ if (r)
+ return r;
dev_t dev = makedev(devnode->major, devnode->minor);
r = mknod(path, devnode->mode, dev);
+
+ // Continue if mknod was successful
+ if (r == 0)
+ continue;
+
+ // If we could not create the device node because of permission issues,
+ // it might be likely that we are running in a user namespace where creating
+ // device nodes is not permitted. Try bind-mounting them.
+ if (errno == EPERM)
+ goto MOUNT;
+
+ // Otherwise log an error and end
+ CTX_ERROR(ctx, "Could not create %s: %m\n", devnode->path);
+ return r;
+
+MOUNT:
+ // Create an empty file
+ r = pakfire_touch(path, 0444);
if (r) {
- ERROR(pakfire, "Could not create %s: %m\n", devnode->path);
+ CTX_ERROR(ctx, "Could not create %s: %m\n", path);
return r;
}
+
+ // Create a bind-mount over the file
+ r = pakfire_mount(ctx, pakfire, devnode->path, path, "bind", MS_BIND, NULL);
+ if (r)
+ return r;
}
// Create symlinks
for (const struct pakfire_symlink* s = symlinks; s->target; s++) {
- DEBUG(pakfire, "Creating symlink %s -> %s\n", s->path, s->target);
+ CTX_DEBUG(ctx, "Creating symlink %s -> %s\n", s->path, s->target);
- int r = pakfire_make_path(pakfire, path, s->path);
- if (r < 0)
- return 1;
+ int r = pakfire_path(pakfire, path, "%s", s->path);
+ if (r)
+ return r;
r = symlink(s->target, path);
if (r) {
- ERROR(pakfire, "Could not create symlink %s: %m\n", s->path);
+ CTX_ERROR(ctx, "Could not create symlink %s: %m\n", s->path);
return r;
}
}
return 0;
}
-static int pakfire_mount_interpreter(struct pakfire* pakfire) {
+int pakfire_mount_interpreter(struct pakfire_ctx* ctx, struct pakfire* pakfire) {
char target[PATH_MAX];
// Fetch the target architecture
- const char* arch = pakfire_get_arch(pakfire);
+ const char* arch = pakfire_get_effective_arch(pakfire);
// Can we emulate this architecture?
char* interpreter = pakfire_arch_find_interpreter(arch);
if (!interpreter)
return 0;
- DEBUG(pakfire, "Mounting interpreter %s for %s\n", interpreter, arch);
+ CTX_DEBUG(ctx, "Mounting interpreter %s for %s\n", interpreter, arch);
// Where to mount this?
- int r = pakfire_make_path(pakfire, target, interpreter);
- if (r < 0)
+ int r = pakfire_path(pakfire, target, "%s", interpreter);
+ if (r)
return r;
// Create directory
return 1;
fclose(f);
- r = pakfire_mount(pakfire, interpreter, target, NULL, MS_BIND|MS_RDONLY, NULL);
+ r = pakfire_mount(ctx, pakfire, interpreter, target, NULL, MS_BIND|MS_RDONLY, NULL);
if (r)
- ERROR(pakfire, "Could not mount interpreter %s to %s: %m\n", interpreter, target);
+ CTX_ERROR(ctx, "Could not mount interpreter %s to %s: %m\n", interpreter, target);
return r;
}
-int pakfire_mount_all(struct pakfire* pakfire) {
+int pakfire_mount_all(struct pakfire_ctx* ctx, struct pakfire* pakfire, pakfire_mntns_t ns, int flags) {
char target[PATH_MAX];
int r;
+ const char* root = "/";
+
// Fetch Pakfire's root directory
- const char* root = pakfire_get_path(pakfire);
+ if (ns == PAKFIRE_MNTNS_OUTER)
+ root = pakfire_get_path(pakfire);
for (const struct pakfire_mountpoint* mp = mountpoints; mp->source; mp++) {
+ if (!(mp->ns & ns))
+ continue;
+
// Figure out where to mount
- r = pakfire_path_join(target, root, mp->target);
- if (r < 0)
+ r = pakfire_path_append(target, root, mp->target);
+ if (r)
return r;
- // Create target
- pakfire_mkdir(target, 0755);
-
-RETRY:
- // Perform mount()
- r = pakfire_mount(pakfire, mp->source, target, mp->fstype, mp->flags, mp->options);
- if (r) {
- // If the target directory does not exist, we will create it
- if (errno == ENOENT) {
- r = pakfire_mkdir(target, 0755);
- if (r) {
- ERROR(pakfire, "Could not create %s\n", target);
- return r;
- }
-
- goto RETRY;
+ // Create target if it doesn't exist
+ if (!pakfire_path_exists(target)) {
+ r = pakfire_mkdir(target, 0755);
+ if (r) {
+ CTX_ERROR(ctx, "Could not create %s: %m\n", target);
+ return r;
}
+ }
- ERROR(pakfire, "Could not mount /%s: %m\n", mp->target);
+ // Perform mount()
+ r = pakfire_mount(ctx, pakfire, mp->source, target,
+ mp->fstype, mp->flags, mp->options);
+ if (r)
return r;
- }
}
- // Populate /dev
- r = pakfire_populate_dev(pakfire);
- if (r)
- return r;
-
- // Mount the interpreter (if needed)
- r = pakfire_mount_interpreter(pakfire);
- if (r)
- return r;
-
return 0;
}
-static int __pakfire_umount(struct pakfire* pakfire,
- struct libmnt_fs* fs, const void* data) {
- const char* target = mnt_fs_get_target(fs);
- if (!target)
- return 1;
+int pakfire_make_ramdisk(struct pakfire_ctx* ctx, struct pakfire* pakfire,
+ char* path, const char* args) {
+ int r;
- return pakfire_umount(pakfire, target, 0);
-}
+ // Create a new temporary directory
+ char* p = pakfire_mkdtemp(path);
+ if (!p)
+ return -errno;
-/*
- umounts everything that hasn't been umounted, yet
-*/
-int pakfire_umount_all(struct pakfire* pakfire) {
- return pakfire_mount_foreach(pakfire, MNT_ITER_BACKWARD,
- __pakfire_umount, NULL);
+ // Mount the ramdisk
+ r = pakfire_mount(ctx, pakfire, "pakfire_ramdisk", p, "tmpfs", 0, args);
+ if (r) {
+ CTX_ERROR(ctx, "Could not mount ramdisk at %s (%s): %s\n",
+ p, args, strerror(errno));
+ return r;
+ }
+
+ CTX_DEBUG(ctx, "Ramdisk mounted at %s (%s)\n", p, args);
+
+ return 0;
}
-PAKFIRE_EXPORT int pakfire_bind(struct pakfire* pakfire, const char* src, const char* dst, int flags) {
+int pakfire_bind(struct pakfire_ctx* ctx, struct pakfire* pakfire,
+ const char* src, const char* dst, int flags) {
struct stat st;
char mountpoint[PATH_MAX];
if (!dst)
dst = src;
- int r = pakfire_make_path(pakfire, mountpoint, dst);
- if (r < 0)
- return 1;
+ int r = pakfire_path(pakfire, mountpoint, "%s", dst);
+ if (r)
+ return r;
- DEBUG(pakfire, "Bind-mounting %s to %s\n", src, mountpoint);
+ CTX_DEBUG(ctx, "Bind-mounting %s to %s\n", src, mountpoint);
r = stat(src, &st);
if (r < 0) {
- ERROR(pakfire, "Could not stat %s: %m\n", src);
+ CTX_ERROR(ctx, "Could not stat %s: %m\n", src);
return 1;
}
return 1;
}
+ // The Linux kernel seems to be quite funny when trying to bind-mount something
+ // as read-only and requires us to mount the source first, and then remount it
+ // again using MS_RDONLY.
+ if (flags & MS_RDONLY) {
+ r = pakfire_mount(ctx, pakfire, src, mountpoint, "bind", MS_BIND|MS_REC, NULL);
+ if (r)
+ return r;
+
+ // Add the remount flag
+ flags |= MS_REMOUNT;
+ }
+
// Perform mount
- return pakfire_mount(pakfire, src, mountpoint, NULL, flags|MS_BIND, NULL);
+ return pakfire_mount(ctx, pakfire, src, mountpoint, "bind", flags|MS_BIND|MS_REC, NULL);
}
projects / people / ms / pakfire.git / blobdiff