src/functions/functions.zone

   1 #!/bin/bash
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2010  Michael Tremer & Christian Schmidt                      #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 zone_dir() {
  23         local zone=${1}
  24
  25         echo "${NETWORK_ZONE_DIR}/zones/${zone}"
  26 }
  27
  28 zone_exists() {
  29         local zone=${1}
  30         assert isset zone
  31
  32         [ -d "$(zone_dir ${zone})" ]
  33 }
  34
  35 zone_match() {
  36         local match
  37
  38         local i
  39         for i in ${VALID_ZONES}; do
  40                 match="${match}|${i}[0-9]{1,5}"
  41         done
  42
  43         echo "${match:1:${#match}}"
  44 }
  45
  46 zone_name_is_valid() {
  47         local zone=${1}
  48
  49         # Don't accept empty strings.
  50         [ -z "${zone}" ] && return ${EXIT_FALSE}
  51
  52         [[ ${zone} =~ $(zone_match) ]]
  53 }
  54
  55 zone_is_local() {
  56         local zone=${1}
  57
  58         [[ "${zone:0:${#ZONE_LOCAL}}" = "${ZONE_LOCAL}" ]]
  59 }
  60
  61 zone_is_nonlocal() {
  62         local zone=${1}
  63
  64         [[ "${zone:0:${#ZONE_NONLOCAL}}" = "${ZONE_NONLOCAL}" ]]
  65 }
  66
  67 zone_get_hook() {
  68         local zone=${1}
  69         assert isset zone
  70
  71         config_get_hook $(zone_dir ${zone})/settings
  72 }
  73
  74 zone_start() {
  75         # This function will bring up the zone
  76         # 'asynchronously' with help of systemd.
  77
  78         local zone=${1}
  79         assert zone_exists ${zone}
  80
  81         service_start "network@${zone}.service"
  82 }
  83
  84 zone_start_auto() {
  85         local zone="${1}"
  86         assert zone_exists "${zone}"
  87
  88         # If the zone has already been started, we
  89         # will reload it so the current configuration
  90         # is re-applied.
  91         if zone_is_active "${zone}"; then
  92                 zone_reload "${zone}"
  93                 return ${?}
  94
  95         # If the zone is still down, but in auto-start mode,
  96         # we will start it.
  97         elif zone_is_enabled "${zone}"; then
  98                 zone_start "${zone}"
  99                 return ${?}
 100         fi
 101
 102         # Otherwise, nothing will be done.
 103         return ${EXIT_OK}
 104 }
 105
 106 zone_stop() {
 107         # This function will bring down the zone
 108         # 'asynchronously' with help of systemd.
 109
 110         local zone=${1}
 111         assert zone_exists ${zone}
 112
 113         service_stop "network@${zone}.service"
 114 }
 115
 116 zone_reload() {
 117         local zone="${1}"
 118         assert zone_exists "${zone}"
 119
 120         service_reload "network@${zone}.service"
 121 }
 122
 123 zone_hotplug_event() {
 124         local zone="${1}"
 125         assert isset zone
 126
 127         hotplug_assert_in_hotplug_event
 128
 129         zone_cmd "hotplug" "${zone}"
 130 }
 131
 132 zone_enable() {
 133         # This function will enable the zone
 134         # with help of systemd.
 135
 136         local zone="${1}"
 137         assert zone_exists "${zone}"
 138
 139         # Enable service for the zone
 140         service_enable "network@${zone}.service"
 141         local ret=$?
 142
 143         if [ ${ret} -eq ${EXIT_OK} ]; then
 144                 log INFO "Auto-start enabled for zone ${zone}"
 145                 return ${EXIT_OK}
 146         fi
 147
 148         log ERROR "Could not enable zone ${zone}: ${ret}"
 149         return ${ret}
 150 }
 151
 152 zone_disable() {
 153         # This function will disable the zone
 154         # with help of systemd.
 155
 156         local zone="${1}"
 157         assert zone_exists "${zone}"
 158
 159         # Disable service for the zone
 160         service_disable "network@${zone}.service"
 161         local ret=$?
 162
 163         if [ ${ret} -eq ${EXIT_OK} ]; then
 164                 log INFO "Auto-start disabled for zone ${zone}"
 165                 return ${EXIT_OK}
 166         fi
 167
 168         log ERROR "Could not disable zone ${zone}: ${ret}"
 169         return ${ret}
 170 }
 171
 172 zone_is_enabled() {
 173         local zone="${1}"
 174         assert isset zone
 175
 176         # Ask systemd if the zone is enabled.
 177         if service_is_enabled "network@${zone}.service"; then
 178                 return ${EXIT_TRUE}
 179         fi
 180
 181         return ${EXIT_FALSE}
 182 }
 183
 184 zone_is_active() {
 185         local zone="${1}"
 186         assert isset zone
 187
 188         if service_is_active "network@${zone}.service"; then
 189                 return ${EXIT_TRUE}
 190         fi
 191
 192         return ${EXIT_FALSE}
 193 }
 194
 195 zone_is_enabled_or_active() {
 196         local zone="${1}"
 197         assert isset zone
 198
 199         zone_is_enabled "${zone}" || zone_is_active "${zone}"
 200 }
 201
 202 zone_cmd() {
 203         local cmd="${1}"
 204         local port="${2}"
 205         shift 2
 206
 207         assert isset cmd
 208         assert isset zone
 209
 210         local hook="$(zone_get_hook ${zone})"
 211         assert isset hook
 212
 213         hook_exec zone "${hook}" "${cmd}" "${zone}" $@
 214 }
 215
 216 zone_new() {
 217         local zone=${1}
 218         local hook=${2}
 219         shift 2
 220
 221         if ! zone_name_is_valid ${zone}; then
 222                 error "Zone name '${zone}' is not valid."
 223                 return ${EXIT_ERROR}
 224         fi
 225
 226         if zone_exists ${zone}; then
 227                 error "Zone '${zone}' does already exist."
 228                 return ${EXIT_ERROR}
 229         fi
 230
 231         if ! hook_zone_exists ${hook}; then
 232                 error "Hook '${hook}' does not exist."
 233                 return ${EXIT_ERROR}
 234         fi
 235
 236         mkdir -p $(zone_dir ${zone})
 237
 238         # Create directories for configs and ports
 239         mkdir -p $(zone_dir ${zone})/{configs,ports}
 240
 241         hook_zone_exec "${hook}" "new" "${zone}" $@
 242         local ret=$?
 243
 244         # Maybe the zone new hook did not exit correctly.
 245         # If this is the case we remove the created zone immediately.
 246         if [ "${ret}" = "${EXIT_ERROR}" ]; then
 247                 zone_destroy_now "${zone}"
 248                 return ${EXIT_ERROR}
 249         fi
 250
 251         # Automatically enable zone.
 252         zone_enable "${zone}"
 253
 254         # Bring up the zone immediately after
 255         zone_start "${zone}"
 256 }
 257
 258 zone_edit() {
 259         local zone=${1}
 260         shift
 261
 262         if ! zone_exists ${zone}; then
 263                 error "Zone '${zone}' does not exist."
 264                 return ${EXIT_ERROR}
 265         fi
 266
 267         # Check if the zone is tagged for removal.
 268         if zone_has_destroy_tag ${zone}; then
 269                 error "You cannot edit a zone that is tagged for removal."
 270                 return ${EXIT_ERROR}
 271         fi
 272
 273         local hook="$(zone_get_hook "${zone}")"
 274         if [ -z "${hook}" ]; then
 275                 error "Config file did not provide any hook."
 276                 return ${EXIT_ERROR}
 277         fi
 278
 279         if ! hook_zone_exists ${hook}; then
 280                 error "Hook '${hook}' does not exist."
 281                 return ${EXIT_ERROR}
 282         fi
 283
 284         hook_zone_exec ${hook} edit ${zone} $@
 285 }
 286
 287 zone_rename() {
 288         assert [ $# -eq 2 ]
 289
 290         local zone="${1}"
 291         local name="${2}"
 292
 293         assert zone_exists "${zone}"
 294         assert not zone_has_destroy_tag "${zone}"
 295         assert not zone_exists "${name}"
 296
 297         # The zone must be shut down before, is then renamed and
 298         # potentially brought up again
 299
 300         # Save if the zone is running right now
 301         zone_is_active "${zone}"
 302         local zone_was_active="${?}"
 303
 304         # Save if the zone is enabled (i.e. auto-start)
 305         zone_is_enabled "${zone}"
 306         local zone_was_enabled="${?}"
 307
 308         # Stop the zone
 309         zone_stop "${zone}"
 310
 311         # Disable the zone
 312         zone_disable "${zone}"
 313
 314         # Rename the configuration files
 315         mv -f "$(zone_dir "${zone}")" "$(zone_dir "${name}")"
 316
 317         # Enable the zone if it was enabled before
 318         [ ${zone_was_enabled} -eq ${EXIT_TRUE} ] && zone_enable "${name}"
 319
 320         # Start the zone if it was up before
 321         [ ${zone_was_active} -eq ${EXIT_TRUE} ] && zone_start "${name}"
 322
 323         log INFO "Zone ${zone} was renamed to ${name}"
 324         return ${EXIT_OK}
 325 }
 326
 327
 328 zone_destroy() {
 329         local zone="${1}"
 330         assert zone_exists "${zone}"
 331
 332         # Make the zone for removal.
 333         touch "$(zone_dir "${zone}")/.destroy"
 334
 335         log INFO "Zone '${zone}' has been tagged for removal."
 336 }
 337
 338 zone_has_destroy_tag() {
 339         local zone="${1}"
 340         assert zone_exists "${zone}"
 341
 342         [ -e "$(zone_dir "${zone}")/.destroy" ]
 343 }
 344
 345 # This function will remove the given zone
 346 # RIGHT NOW. Use zone_destroy to remove it
 347 # at the next status change.
 348 zone_destroy_now() {
 349         local zone="${1}"
 350         assert zone_exists "${zone}"
 351
 352         log INFO "Removing zone '${zone}' right now."
 353
 354         # Force the zone down.
 355         zone_is_active "${zone}" && zone_stop "${zone}"
 356
 357         # Disable zone.
 358         zone_disable "${zone}"
 359
 360         rm -rf "$(zone_dir "${zone}")"
 361 }
 362
 363 zone_up() {
 364         local zone=${1}
 365         shift
 366
 367         if ! zone_exists ${zone}; then
 368                 error "Zone '${zone}' does not exist."
 369                 return ${EXIT_ERROR}
 370         fi
 371
 372         # Check if a zone has got the remove tag.
 373         if zone_has_destroy_tag ${zone}; then
 374                 error "Cannot bring up any zone which is to be removed."
 375                 return ${EXIT_ERROR}
 376         fi
 377
 378         local hook="$(zone_get_hook "${zone}")"
 379         if [ -z "${hook}" ]; then
 380                 error "Config file did not provide any hook."
 381                 return ${EXIT_ERROR}
 382         fi
 383
 384         if ! hook_zone_exists ${hook}; then
 385                 error "Hook '${hook}' does not exist."
 386                 return ${EXIT_ERROR}
 387         fi
 388
 389         zone_db ${zone} starting
 390
 391         hook_zone_exec ${hook} up ${zone} $@
 392
 393         zone_db ${zone} started
 394
 395         # Execute all triggers after the zone got up
 396         triggers_execute_all "up" ZONE="${zone}"
 397 }
 398
 399 zone_down() {
 400         local zone=${1}
 401         shift
 402
 403         if ! zone_exists ${zone}; then
 404                 error "Zone '${zone}' does not exist."
 405                 return ${EXIT_ERROR}
 406         fi
 407
 408         local hook="$(zone_get_hook "${zone}")"
 409         if [ -z "${hook}" ]; then
 410                 error "Config file did not provide any hook."
 411                 return ${EXIT_ERROR}
 412         fi
 413
 414         if ! hook_zone_exists ${hook}; then
 415                 error "Hook '${hook}' does not exist."
 416                 return ${EXIT_ERROR}
 417         fi
 418
 419         zone_db ${zone} stopping
 420
 421         hook_zone_exec ${hook} down ${zone} $@
 422
 423         zone_db ${zone} stopped
 424
 425         # Execute all triggers after the zone went down
 426         triggers_execute_all "down" ZONE="${zone}"
 427
 428         # Remove the zone, if it has got a remove tag.
 429         if zone_has_destroy_tag "${zone}"; then
 430                 zone_destroy_now "${zone}"
 431         fi
 432 }
 433
 434 zone_status() {
 435         local zone="${1}"
 436         assert isset zone
 437         shift
 438
 439         if ! zone_exists "${zone}"; then
 440                 error "Zone '${zone}' does not exist."
 441                 return ${EXIT_ERROR}
 442         fi
 443
 444         local hook="$(zone_get_hook "${zone}")"
 445         if [ -z "${hook}" ]; then
 446                 error "Config file did not provide any hook."
 447                 return ${EXIT_ERROR}
 448         fi
 449
 450         if ! hook_zone_exists "${hook}"; then
 451                 error "Hook '${hook}' does not exist."
 452                 return ${EXIT_ERROR}
 453         fi
 454
 455         hook_zone_exec "${hook}" "status" "${zone}" "$@"
 456
 457         # Show that the zone it to be removed soon.
 458         if zone_has_destroy_tag ${zone}; then
 459                 warning "This zone is tagged for removal."
 460         fi
 461 }
 462
 463 zone_identify() {
 464         assert [ $# -ge 1 ]
 465
 466         local zone="${1}"
 467         shift
 468
 469         assert zone_exists "${zone}"
 470
 471         log INFO "Identifying zone ${zone}"
 472         local pids
 473
 474         local pid
 475         local port
 476         for port in $(zone_get_ports "${zone}"); do
 477                 # Identify all the ports
 478                 port_identify "${port}" --background $@
 479
 480                 # Save the PIDs of the subprocesses
 481                 list_append pids "$(cmd_background_get_pid)"
 482         done
 483
 484         # Wait until all port_identfy processes have finished
 485         for pid in ${pids}; do
 486                 cmd_background_result "${pid}"
 487         done
 488
 489         return ${EXIT_OK}
 490 }
 491
 492 zone_get_ports() {
 493         local zone=${1}
 494
 495         assert isset zone
 496
 497         local port
 498         for port in $(zone_dir ${zone})/ports/*; do
 499                 port=$(basename ${port})
 500
 501                 if port_exists ${port}; then
 502                         echo "${port}"
 503                 fi
 504         done
 505 }
 506
 507 zone_get_ports_num() {
 508         local zone="${1}"
 509         assert isset zone
 510
 511         local counter=0
 512         local port
 513         for port in $(zone_dir "${zone}")/ports/*; do
 514                 port="$(basename "${port}")"
 515
 516                 if port_exists "${port}"; then
 517                         counter=$(( ${counter} + 1 ))
 518                 fi
 519         done
 520
 521         echo "${counter}"
 522         return ${EXIT_OK}
 523 }
 524
 525 zone_has_port() {
 526         # Check, if the given port is configured
 527         # in this zone.
 528
 529         local zone=${1}
 530         local port=${2}
 531         shift 2
 532
 533         assert isset zone
 534         assert isset port
 535
 536         [ -e "$(zone_dir ${zone})/ports/${port}" ]
 537 }
 538
 539 zone_config() {
 540         local zone="${1}"
 541         local cmd="${2}"
 542         shift 2
 543
 544         assert isset zone
 545         assert isset cmd
 546         assert zone_exists "${zone}"
 547
 548         case "${cmd}" in
 549                 new)
 550                         zone_config_new "${zone}" "$@"
 551                         ;;
 552                 destroy)
 553                         zone_config_destroy "${zone}" "$@"
 554                         ;;
 555                 edit)
 556                         zone_config_edit "${zone}" "$@"
 557                         ;;
 558                 *)
 559                         error "Unrecognized argument: ${cmd}"
 560                         cli_usage root-zone-config-subcommands
 561                         exit ${EXIT_ERROR}
 562                         ;;
 563         esac
 564 }
 565
 566 zone_config_cmd() {
 567         assert [ $# -gt 2 ]
 568
 569         local cmd="${1}"
 570         local zone="${2}"
 571         shift 2
 572
 573         local hook="$(zone_get_hook "${zone}")"
 574         assert isset hook
 575
 576         hook_zone_exec "${hook}" "config_${cmd}" "${zone}" "$@"
 577 }
 578
 579 zone_config_new() {
 580         local zone="${1}"
 581         shift
 582
 583         # Create a new configuration, but exit when that was
 584         # not successful.
 585         zone_config_cmd "new" "${zone}" "$@" || return ${?}
 586
 587         # If the config could be created, we will try to bring
 588         # it up if the zone is up, too.
 589         if zone_is_up "${zone}"; then
 590                 zone_configs_up "${zone}"
 591         fi
 592 }
 593
 594 zone_config_destroy() {
 595         zone_config_cmd "destroy" "$@"
 596 }
 597
 598 zone_config_edit() {
 599         zone_config_cmd "edit" "$@"
 600 }
 601
 602 zone_config_show() {
 603         zone_config_cmd "show" "$@"
 604 }
 605
 606 zone_show() {
 607         local zone=${1}
 608
 609         echo "${zone}"
 610         echo "  Type: $(zone_get_hook ${zone})"
 611         echo
 612 }
 613
 614 zones_show() {
 615         local zone
 616
 617         for zone in $(zones_get $@); do
 618                 zone_show ${zone}
 619         done
 620 }
 621
 622 zones_get_all() {
 623         local zone
 624         for zone in $(zone_dir)/*; do
 625                 zone=$(basename ${zone})
 626                 zone_exists ${zone} || continue
 627
 628                 echo "${zone}"
 629         done
 630 }
 631
 632 zones_get_local() {
 633         local zone
 634         for zone in $(zones_get_all); do
 635                 zone_is_local ${zone} && echo "${zone}"
 636         done
 637 }
 638
 639 zones_get_nonlocal() {
 640         local zone
 641         for zone in $(zones_get_all); do
 642                 zone_is_nonlocal ${zone} && echo "${zone}"
 643         done
 644 }
 645
 646 zones_get() {
 647         local local=1
 648         local remote=1
 649
 650         local zones
 651
 652         while [ $# -gt 0 ]; do
 653                 case "${1}" in
 654                         --local-only)
 655                                 local=1
 656                                 remote=0
 657                                 ;;
 658                         --remote-only)
 659                                 local=0
 660                                 remote=1
 661                                 ;;
 662                         --all)
 663                                 local=1
 664                                 remote=1
 665                                 ;;
 666                         *)
 667                                 if zone_name_is_valid ${1}; then
 668                                         zones="${zones} ${1}"
 669                                 else
 670                                         warning "Unrecognized argument '${1}'"
 671                                 fi
 672                                 ;;
 673                 esac
 674                 shift
 675         done
 676
 677         if [ -n "${zones}" ]; then
 678                 local zone
 679                 for zone in ${zones}; do
 680                         zone_exists ${zone} && echo "${zone}"
 681                 done
 682                 exit ${EXIT_OK}
 683         fi
 684
 685         if [ ${local} -eq 1 ] && [ ${remote} -eq 1 ]; then
 686                 zones_get_all
 687         elif [ ${local} -eq 1 ]; then
 688                 zones_get_local
 689         elif [ ${remote} -eq 1 ]; then
 690                 zones_get_nonlocal
 691         fi
 692 }
 693
 694 zone_ports_list() {
 695         local zone=${1}
 696
 697         local port
 698         for port in $(zone_dir ${zone})/ports/*; do
 699                 [ -e "${port}" ] || continue
 700
 701                 echo $(basename ${port})
 702         done
 703 }
 704
 705 zone_port_attach() {
 706         local zone="${1}"
 707         assert isset zone
 708
 709         local port="${2}"
 710         assert isset port
 711
 712         shift 2
 713
 714         # Check if the port actually exists.
 715         if ! port_exists "${port}"; then
 716                 error "Cannot attach port '${port}' which does not exist"
 717                 return ${EXIT_ERROR}
 718         fi
 719
 720         # Check if the port is already connected to this or any other zone.
 721         local z
 722         for z in $(zones_get_all); do
 723                 if zone_has_port "${z}" "${port}"; then
 724                         error "Port '${port}' is already attached to zone '${z}'"
 725                         return ${EXIT_ERROR}
 726                 fi
 727         done
 728
 729         local hook="$(zone_get_hook "${zone}")"
 730         assert isset hook
 731
 732         # Make the port briefly flash if supported
 733         port_identify "${port}" --background
 734
 735         hook_zone_exec "${hook}" "port_attach" "${zone}" "${port}" "$@"
 736         local ret="${?}"
 737
 738         case "${ret}" in
 739                 ${EXIT_OK})
 740                         log INFO "${port} has been attached to ${zone}"
 741
 742                         # Automatically connect the port
 743                         zone_port_start "${zone}" "${port}"
 744                         ;;
 745                 *)
 746                         log CRITICAL "${port} could not be attached to ${zone}"
 747                         ;;
 748         esac
 749
 750         return ${ret}
 751 }
 752
 753 zone_port_edit() {
 754         local zone="${1}"
 755         assert isset zone
 756
 757         local port="${2}"
 758         assert isset port
 759
 760         shift 2
 761
 762         # Check if the port actually exists.
 763         if ! port_exists "${port}"; then
 764                 error "Port '${port}' does not exist"
 765                 return ${EXIT_ERROR}
 766         fi
 767
 768         # Check if the zone actually has this port.
 769         if ! zone_has_port "${zone}" "${port}"; then
 770                 error "Port '${port}' is not attached to zone '${zone}'"
 771                 return ${EXIT_ERROR}
 772         fi
 773
 774         local hook=$(zone_get_hook "${zone}")
 775         assert isset hook
 776
 777         hook_zone_exec "${hook}" "port_edit" "${zone}" "${port}" "$@"
 778 }
 779
 780 zone_port_detach() {
 781         local zone="${1}"
 782         assert isset zone
 783
 784         local port="${2}"
 785         assert isset port
 786
 787         shift 2
 788
 789         # Check if the zone actually has this port.
 790         if ! zone_has_port "${zone}" "${port}"; then
 791                 error "Port '${port}' is not attached to zone '${zone}'"
 792                 return ${EXIT_ERROR}
 793         fi
 794
 795         local hook=$(zone_get_hook "${zone}")
 796         assert isset hook
 797
 798         # Make the port briefly flash if supported
 799         port_identify "${port}" --background
 800
 801         hook_zone_exec "${hook}" "port_detach" "${zone}" "${port}" "$@"
 802         local ret="${?}"
 803
 804         case "${ret}" in
 805                 ${EXIT_OK})
 806                         log INFO "${port} has been detached from ${zone}"
 807
 808                         # Bring down the port if needed
 809                         zone_port_stop "${zone}" "${port}"
 810                         ;;
 811                 *)
 812                         log CRITICAL "${port} could not be detached from ${zone}"
 813                         ;;
 814         esac
 815
 816         return ${ret}
 817 }
 818
 819 zone_port_cmd() {
 820         local cmd="${1}"
 821         assert isset cmd
 822
 823         local zone="${2}"
 824         assert isset zone
 825
 826         local port="${3}"
 827         assert isset port
 828
 829         shift 3
 830
 831         local hook="$(zone_get_hook "${zone}")"
 832         assert isset hook
 833
 834         # Dispatch command to hook
 835         hook_zone_exec "${hook}" "${cmd}" "${zone}" "${port}" $@
 836 }
 837
 838 zone_port_create() {
 839         zone_port_cmd "port_create" $@
 840 }
 841
 842 zone_port_remove() {
 843         zone_port_cmd "port_remove" $@
 844 }
 845
 846 zone_port_up() {
 847         zone_port_cmd "port_up" $@
 848 }
 849
 850 zone_port_down() {
 851         zone_port_cmd "port_down" $@
 852 }
 853
 854 # The next two functions automagically bring up and down
 855 # port that are attached to a bridge or similar.
 856 # The problem that is tried to overcome here is that there
 857 # are ports which exist all the time (like ethernet ports)
 858 # and therefore do not dispatch a hotplug event when
 859 # port_create is called.
 860
 861 zone_port_start() {
 862         local zone="${1}"
 863         local port="${2}"
 864
 865         if zone_is_active "${zone}"; then
 866                 if device_exists "${port}"; then
 867                         zone_port_up "${zone}" "${port}"
 868                         return ${?}
 869                 else
 870                         zone_port_create "${zone}" "${port}"
 871                         return ${?}
 872                 fi
 873         fi
 874
 875         return ${EXIT_OK}
 876 }
 877
 878 zone_port_stop() {
 879         local zone="${1}"
 880         local port="${2}"
 881
 882         # Shut down the port if necessary
 883         if zone_is_active "${zone}" && port_is_up "${port}"; then
 884                 zone_port_down "${zone}" "${port}"
 885         fi
 886
 887         # Remove the port
 888         zone_port_remove "${zone}" "${port}"
 889 }
 890
 891 zone_port_status() {
 892         zone_port_cmd "port_status" $@
 893 }
 894
 895 zone_ports_cmd() {
 896         local cmd="${1}"
 897         assert isset cmd
 898
 899         local zone="${2}"
 900         assert isset zone
 901
 902         shift 2
 903
 904         local hook="$(zone_get_hook "${zone}")"
 905
 906         local port
 907         for port in $(zone_get_ports ${zone}); do
 908                 hook_zone_exec "${hook}" "${cmd}" "${zone}" "${port}" $@
 909         done
 910 }
 911
 912 zone_ports_create() {
 913         zone_ports_cmd "port_create" $@
 914 }
 915
 916 zone_ports_remove() {
 917         zone_ports_cmd "port_remove" $@
 918 }
 919
 920 zone_ports_up() {
 921         zone_ports_cmd "port_up" $@
 922 }
 923
 924 zone_ports_down() {
 925         zone_ports_cmd "port_down" $@
 926 }
 927
 928 zone_ports_status() {
 929         zone_ports_cmd "port_status" $@
 930 }
 931
 932 zone_configs_cmd() {
 933         assert [ $# -ge 2 ]
 934
 935         local cmd="${1}"
 936         local zone="${2}"
 937         shift 2
 938
 939         assert zone_exists "${zone}"
 940
 941         local config
 942         for config in $(zone_configs_list "${zone}"); do
 943                 local config_hook="$(zone_config_get_hook "${zone}" "${config}")"
 944                 assert isset config_hook
 945
 946                 hook_config_exec "${config_hook}" "${cmd}" "${zone}" "${config}" $@
 947         done
 948 }
 949
 950 zone_configs_up() {
 951         zone_configs_cmd "up" $@
 952 }
 953
 954 zone_configs_down() {
 955         zone_configs_cmd "down" $@
 956 }
 957
 958 zone_configs_status() {
 959         zone_configs_cmd "status" $@
 960 }
 961
 962 zone_configs_list() {
 963         local zone=${1}
 964
 965         local config
 966         for config in $(zone_dir ${zone})/configs/*; do
 967                 [ -e "${config}" ] || continue
 968
 969                 basename ${config}
 970         done
 971 }
 972
 973 zone_config_get_hook() {
 974         assert [ $# -eq 2 ]
 975
 976         local zone="${1}"
 977         assert isset zone
 978
 979         local config="${2}"
 980         assert isset config
 981
 982         local HOOK
 983         zone_config_settings_read "${zone}" "${config}" \
 984                 --ignore-superfluous-settings HOOK
 985
 986         print "${HOOK}"
 987 }
 988
 989 zone_has_ip() {
 990         device_has_ip $@
 991 }
 992
 993 zone_db() {
 994         local zone=${1}
 995         local action=${2}
 996         shift 2
 997
 998         case "${action}" in
 999                 starting|started|stopping|stopped)
1000                         db_connection_update ${zone} ${action}
1001                         ;;
1002         esac
1003 }
1004
1005 zone_is_up() {
1006         local zone=${1}
1007
1008         device_is_up ${zone}
1009 }
1010
1011 zone_is_down() {
1012         ! zone_is_up $@
1013 }
1014
1015 zone_get_supported_port_hooks() {
1016         local zone=${1}
1017
1018         local hook=$(zone_get_hook ${zone})
1019
1020         hook_zone_ports_get_all ${hook}
1021 }
1022
1023 zone_get_supported_config_hooks() {
1024         hook_config_get_all
1025 }
1026
1027 zone_file() {
1028         local zone=${1}
1029
1030         assert isset zone
1031
1032         echo "$(zone_dir ${zone})/settings"
1033 }
1034
1035 zone_settings_read() {
1036         local zone=${1}
1037         assert isset zone
1038         shift
1039
1040         local args
1041         if [ $# -eq 0 ] && [ -n "${HOOK_SETTINGS}" ]; then
1042                 list_append args ${HOOK_SETTINGS}
1043         else
1044                 list_append args $@
1045         fi
1046
1047         # Save the HOOK variable.
1048         local hook="${HOOK}"
1049
1050         settings_read "$(zone_file "${zone}")" ${args}
1051
1052         # Restore hook.
1053         HOOK="${hook}"
1054 }
1055
1056 zone_settings_write() {
1057         local zone="${1}"
1058         assert isset zone
1059
1060         local args
1061         if function_exists "hook_check_settings"; then
1062                 list_append args "--check=\"hook_check_settings\""
1063         fi
1064         list_append args ${HOOK_SETTINGS}
1065
1066         settings_write "$(zone_file ${zone})" ${args}
1067 }
1068
1069 zone_settings_set() {
1070         local zone=${1}
1071         shift
1072         local args="$@"
1073
1074         assert isset zone
1075
1076         (
1077                 zone_settings_read ${zone}
1078
1079                 for arg in ${args}; do
1080                         eval "${arg}"
1081                 done
1082
1083                 zone_settings_write ${zone}
1084         )
1085 }
1086
1087 zone_settings_get() {
1088         local zone=${1}
1089         local key=${2}
1090
1091         assert isset zone
1092         assert isset key
1093
1094         (
1095                 zone_settings_read "${zone}" "${key}" \
1096                         --ignore-superfluous-settings
1097
1098                 echo "${!key}"
1099         )
1100 }
1101
1102 zone_config_settings_read() {
1103         assert [ $# -ge 2 ]
1104
1105         local zone="${1}"
1106         local config="${2}"
1107         shift 2
1108
1109         local args
1110         if [ $# -eq 0 ] && [ -n "${HOOK_CONFIG_SETTINGS}" ]; then
1111                 list_append args ${HOOK_CONFIG_SETTINGS}
1112         else
1113                 list_append args $@
1114         fi
1115
1116         local path="$(zone_dir "${zone}")/configs/${config}"
1117         settings_read "${path}" ${args}
1118 }
1119
1120 zone_config_settings_write() {
1121         assert [ $# -ge 2 ]
1122
1123         local zone="${1}"
1124         local config="${2}"
1125         shift 2
1126
1127         local args
1128         if function_exists "hook_check_config_settings"; then
1129                 list_append args "--check=\"hook_check_config_settings\""
1130         fi
1131         list_append args ${HOOK_CONFIG_SETTINGS}
1132
1133         local path="$(zone_dir "${zone}")/configs/${config}"
1134         settings_write "${path}" ${args}
1135 }
1136
1137 zone_port_settings_read() {
1138         assert [ $# -ge 2 ]
1139
1140         local zone="${1}"
1141         local port="${2}"
1142         shift 2
1143
1144         local args
1145         if [ $# -eq 0 ] && [ -n "${HOOK_PORT_SETTINGS}" ]; then
1146                 list_append args ${HOOK_PORT_SETTINGS}
1147         else
1148                 list_append args $@
1149         fi
1150
1151         local path="$(zone_dir "${zone}")/ports/${port}"
1152         settings_read "${path}" ${args}
1153 }
1154
1155 zone_port_settings_write() {
1156         assert [ $# -ge 2 ]
1157
1158         local zone="${1}"
1159         local port="${2}"
1160         shift 2
1161
1162         local args
1163         if function_exists "hook_check_port_settings"; then
1164                 list_append args "--check=\"hook_check_port_settings\""
1165         fi
1166         list_append args ${HOOK_PORT_SETTINGS}
1167
1168         local path="$(zone_dir "${zone}")/ports/${port}"
1169         settings_write "${path}" ${args}
1170 }
1171
1172 zone_port_settings_remove() {
1173         assert [ $# -eq 2 ]
1174
1175         local zone="${1}"
1176         local port="${2}"
1177
1178         local path="$(zone_dir "${zone}")/ports/${port}"
1179         settings_remove "${path}"
1180 }