src/import/pull-job.c

   1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
   2
   3 #include <fcntl.h>
   4 #include <sys/stat.h>
   5 #include <sys/xattr.h>
   6
   7 #include "alloc-util.h"
   8 #include "fd-util.h"
   9 #include "format-util.h"
  10 #include "gcrypt-util.h"
  11 #include "hexdecoct.h"
  12 #include "import-util.h"
  13 #include "io-util.h"
  14 #include "machine-pool.h"
  15 #include "parse-util.h"
  16 #include "pull-common.h"
  17 #include "pull-job.h"
  18 #include "string-util.h"
  19 #include "strv.h"
  20 #include "sync-util.h"
  21 #include "xattr-util.h"
  22
  23 void pull_job_close_disk_fd(PullJob *j) {
  24         if (!j)
  25                 return;
  26
  27         if (j->close_disk_fd)
  28                 safe_close(j->disk_fd);
  29
  30         j->disk_fd = -EBADF;
  31 }
  32
  33 PullJob* pull_job_unref(PullJob *j) {
  34         if (!j)
  35                 return NULL;
  36
  37         pull_job_close_disk_fd(j);
  38
  39         curl_glue_remove_and_free(j->glue, j->curl);
  40         curl_slist_free_all(j->request_header);
  41
  42         import_compress_free(&j->compress);
  43
  44         if (j->checksum_ctx)
  45 #if PREFER_OPENSSL
  46                 EVP_MD_CTX_free(j->checksum_ctx);
  47 #else
  48                 gcry_md_close(j->checksum_ctx);
  49 #endif
  50
  51         free(j->url);
  52         free(j->etag);
  53         strv_free(j->old_etags);
  54         free(j->payload);
  55         free(j->checksum);
  56
  57         return mfree(j);
  58 }
  59
  60 static void pull_job_finish(PullJob *j, int ret) {
  61         assert(j);
  62
  63         if (IN_SET(j->state, PULL_JOB_DONE, PULL_JOB_FAILED))
  64                 return;
  65
  66         if (ret == 0) {
  67                 j->state = PULL_JOB_DONE;
  68                 j->progress_percent = 100;
  69                 log_info("Download of %s complete.", j->url);
  70         } else {
  71                 j->state = PULL_JOB_FAILED;
  72                 j->error = ret;
  73         }
  74
  75         if (j->on_finished)
  76                 j->on_finished(j);
  77 }
  78
  79 static int pull_job_restart(PullJob *j, const char *new_url) {
  80         int r;
  81
  82         assert(j);
  83         assert(new_url);
  84
  85         r = free_and_strdup(&j->url, new_url);
  86         if (r < 0)
  87                 return r;
  88
  89         j->state = PULL_JOB_INIT;
  90         j->error = 0;
  91         j->payload = mfree(j->payload);
  92         j->payload_size = 0;
  93         j->written_compressed = 0;
  94         j->written_uncompressed = 0;
  95         j->content_length = UINT64_MAX;
  96         j->etag = mfree(j->etag);
  97         j->etag_exists = false;
  98         j->mtime = 0;
  99         j->checksum = mfree(j->checksum);
 100
 101         curl_glue_remove_and_free(j->glue, j->curl);
 102         j->curl = NULL;
 103
 104         curl_slist_free_all(j->request_header);
 105         j->request_header = NULL;
 106
 107         import_compress_free(&j->compress);
 108
 109         if (j->checksum_ctx) {
 110 #if PREFER_OPENSSL
 111                 EVP_MD_CTX_free(j->checksum_ctx);
 112 #else
 113                 gcry_md_close(j->checksum_ctx);
 114 #endif
 115                 j->checksum_ctx = NULL;
 116         }
 117
 118         r = pull_job_begin(j);
 119         if (r < 0)
 120                 return r;
 121
 122         return 0;
 123 }
 124
 125 void pull_job_curl_on_finished(CurlGlue *g, CURL *curl, CURLcode result) {
 126         PullJob *j = NULL;
 127         char *scheme = NULL;
 128         CURLcode code;
 129         int r;
 130
 131         if (curl_easy_getinfo(curl, CURLINFO_PRIVATE, (char **)&j) != CURLE_OK)
 132                 return;
 133
 134         if (!j || IN_SET(j->state, PULL_JOB_DONE, PULL_JOB_FAILED))
 135                 return;
 136
 137         if (result != CURLE_OK) {
 138                 r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Transfer failed: %s", curl_easy_strerror(result));
 139                 goto finish;
 140         }
 141
 142         code = curl_easy_getinfo(curl, CURLINFO_SCHEME, &scheme);
 143         if (code != CURLE_OK || !scheme) {
 144                 r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Failed to retrieve URL scheme.");
 145                 goto finish;
 146         }
 147
 148         if (STRCASE_IN_SET(scheme, "HTTP", "HTTPS")) {
 149                 long status;
 150
 151                 code = curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &status);
 152                 if (code != CURLE_OK) {
 153                         r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Failed to retrieve response code: %s", curl_easy_strerror(code));
 154                         goto finish;
 155                 }
 156
 157                 if (status == 304) {
 158                         log_info("Image already downloaded. Skipping download.");
 159                         j->etag_exists = true;
 160                         r = 0;
 161                         goto finish;
 162                 } else if (status >= 300) {
 163
 164                         if (status == 404 && j->on_not_found) {
 165                                 _cleanup_free_ char *new_url = NULL;
 166
 167                                 /* This resource wasn't found, but the implementor wants to maybe let us know a new URL, query for it. */
 168                                 r = j->on_not_found(j, &new_url);
 169                                 if (r < 0)
 170                                         goto finish;
 171
 172                                 if (r > 0) { /* A new url to use */
 173                                         assert(new_url);
 174
 175                                         r = pull_job_restart(j, new_url);
 176                                         if (r < 0)
 177                                                 goto finish;
 178
 179                                         code = curl_easy_getinfo(j->curl, CURLINFO_RESPONSE_CODE, &status);
 180                                         if (code != CURLE_OK) {
 181                                                 r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Failed to retrieve response code: %s", curl_easy_strerror(code));
 182                                                 goto finish;
 183                                         }
 184
 185                                         if (status == 0)
 186                                                 return;
 187                                 }
 188                         }
 189
 190                         r = log_notice_errno(
 191                                         status == 404 ? SYNTHETIC_ERRNO(ENOMEDIUM) : SYNTHETIC_ERRNO(EIO), /* Make the most common error recognizable */
 192                                         "HTTP request to %s failed with code %li.", j->url, status);
 193                         goto finish;
 194                 } else if (status < 200) {
 195                         r = log_error_errno(SYNTHETIC_ERRNO(EIO), "HTTP request to %s finished with unexpected code %li.", j->url, status);
 196                         goto finish;
 197                 }
 198         }
 199
 200         if (j->state != PULL_JOB_RUNNING) {
 201                 r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Premature connection termination.");
 202                 goto finish;
 203         }
 204
 205         if (j->content_length != UINT64_MAX &&
 206             j->content_length != j->written_compressed) {
 207                 r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Download truncated.");
 208                 goto finish;
 209         }
 210
 211         if (j->checksum_ctx) {
 212                 unsigned checksum_len;
 213 #if PREFER_OPENSSL
 214                 uint8_t k[EVP_MAX_MD_SIZE];
 215
 216                 r = EVP_DigestFinal_ex(j->checksum_ctx, k, &checksum_len);
 217                 if (r == 0) {
 218                         r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Failed to get checksum.");
 219                         goto finish;
 220                 }
 221                 assert(checksum_len <= sizeof k);
 222 #else
 223                 const uint8_t *k;
 224
 225                 k = gcry_md_read(j->checksum_ctx, GCRY_MD_SHA256);
 226                 if (!k) {
 227                         r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Failed to get checksum.");
 228                         goto finish;
 229                 }
 230
 231                 checksum_len = gcry_md_get_algo_dlen(GCRY_MD_SHA256);
 232 #endif
 233
 234                 j->checksum = hexmem(k, checksum_len);
 235                 if (!j->checksum) {
 236                         r = log_oom();
 237                         goto finish;
 238                 }
 239
 240                 log_debug("SHA256 of %s is %s.", j->url, j->checksum);
 241         }
 242
 243         /* Do a couple of finishing disk operations, but only if we are the sole owner of the file (i.e. no
 244          * offset is specified, which indicates we only own the file partially) */
 245
 246         if (j->disk_fd >= 0) {
 247
 248                 if (S_ISREG(j->disk_stat.st_mode)) {
 249
 250                         if (j->offset == UINT64_MAX) {
 251
 252                                 if (j->written_compressed > 0) {
 253                                         /* Make sure the file size is right, in case the file was sparse and
 254                                          * we just moved to the last part. */
 255                                         if (ftruncate(j->disk_fd, j->written_uncompressed) < 0) {
 256                                                 r = log_error_errno(errno, "Failed to truncate file: %m");
 257                                                 goto finish;
 258                                         }
 259                                 }
 260
 261                                 if (j->etag)
 262                                         (void) fsetxattr(j->disk_fd, "user.source_etag", j->etag, strlen(j->etag), 0);
 263                                 if (j->url)
 264                                         (void) fsetxattr(j->disk_fd, "user.source_url", j->url, strlen(j->url), 0);
 265
 266                                 if (j->mtime != 0) {
 267                                         struct timespec ut;
 268
 269                                         timespec_store(&ut, j->mtime);
 270
 271                                         if (futimens(j->disk_fd, (struct timespec[]) { ut, ut }) < 0)
 272                                                 log_debug_errno(errno, "Failed to adjust atime/mtime of created image, ignoring: %m");
 273
 274                                         r = fd_setcrtime(j->disk_fd, j->mtime);
 275                                         if (r < 0)
 276                                                 log_debug_errno(r, "Failed to adjust crtime of created image, ignoring: %m");
 277                                 }
 278                         }
 279
 280                         if (j->sync) {
 281                                 r = fsync_full(j->disk_fd);
 282                                 if (r < 0) {
 283                                         log_error_errno(r, "Failed to synchronize file to disk: %m");
 284                                         goto finish;
 285                                 }
 286                         }
 287
 288                 } else if (S_ISBLK(j->disk_stat.st_mode) && j->sync) {
 289
 290                         if (fsync(j->disk_fd) < 0) {
 291                                 r = log_error_errno(errno, "Failed to synchronize block device: %m");
 292                                 goto finish;
 293                         }
 294                 }
 295         }
 296
 297         log_info("Acquired %s.", FORMAT_BYTES(j->written_uncompressed));
 298
 299         r = 0;
 300
 301 finish:
 302         pull_job_finish(j, r);
 303 }
 304
 305 static int pull_job_write_uncompressed(const void *p, size_t sz, void *userdata) {
 306         PullJob *j = ASSERT_PTR(userdata);
 307         bool too_much = false;
 308         int r;
 309
 310         assert(p);
 311         assert(sz > 0);
 312
 313         if (j->written_uncompressed > UINT64_MAX - sz)
 314                 return log_error_errno(SYNTHETIC_ERRNO(EOVERFLOW), "File too large, overflow");
 315
 316         if (j->written_uncompressed >= j->uncompressed_max) {
 317                 too_much = true;
 318                 goto finish;
 319         }
 320
 321         if (j->written_uncompressed + sz > j->uncompressed_max) {
 322                 too_much = true;
 323                 sz = j->uncompressed_max - j->written_uncompressed; /* since we have the data in memory
 324                                                                      * already, we might as well write it to
 325                                                                      * disk to the max */
 326         }
 327
 328         if (j->disk_fd >= 0) {
 329
 330                 if (S_ISREG(j->disk_stat.st_mode) && j->offset == UINT64_MAX) {
 331                         ssize_t n;
 332
 333                         n = sparse_write(j->disk_fd, p, sz, 64);
 334                         if (n < 0)
 335                                 return log_error_errno((int) n, "Failed to write file: %m");
 336                         if ((size_t) n < sz)
 337                                 return log_error_errno(SYNTHETIC_ERRNO(EIO), "Short write");
 338                 } else {
 339                         r = loop_write(j->disk_fd, p, sz);
 340                         if (r < 0)
 341                                 return log_error_errno(r, "Failed to write file: %m");
 342                 }
 343         }
 344
 345         if (j->disk_fd < 0 || j->force_memory) {
 346                 if (!GREEDY_REALLOC(j->payload, j->payload_size + sz))
 347                         return log_oom();
 348
 349                 memcpy(j->payload + j->payload_size, p, sz);
 350                 j->payload_size += sz;
 351         }
 352
 353         j->written_uncompressed += sz;
 354
 355 finish:
 356         if (too_much)
 357                 return log_error_errno(SYNTHETIC_ERRNO(EFBIG), "File overly large, refusing.");
 358
 359         return 0;
 360 }
 361
 362 static int pull_job_write_compressed(PullJob *j, void *p, size_t sz) {
 363         int r;
 364
 365         assert(j);
 366         assert(p);
 367
 368         if (sz <= 0)
 369                 return 0;
 370
 371         if (j->written_compressed + sz < j->written_compressed)
 372                 return log_error_errno(SYNTHETIC_ERRNO(EOVERFLOW), "File too large, overflow");
 373
 374         if (j->written_compressed + sz > j->compressed_max)
 375                 return log_error_errno(SYNTHETIC_ERRNO(EFBIG), "File overly large, refusing.");
 376
 377         if (j->content_length != UINT64_MAX &&
 378             j->written_compressed + sz > j->content_length)
 379                 return log_error_errno(SYNTHETIC_ERRNO(EFBIG),
 380                                        "Content length incorrect.");
 381
 382         if (j->checksum_ctx) {
 383 #if PREFER_OPENSSL
 384                 r = EVP_DigestUpdate(j->checksum_ctx, p, sz);
 385                 if (r == 0)
 386                         return log_error_errno(SYNTHETIC_ERRNO(EIO),
 387                                                "Could not hash chunk.");
 388 #else
 389                 gcry_md_write(j->checksum_ctx, p, sz);
 390 #endif
 391         }
 392
 393         r = import_uncompress(&j->compress, p, sz, pull_job_write_uncompressed, j);
 394         if (r < 0)
 395                 return r;
 396
 397         j->written_compressed += sz;
 398
 399         return 0;
 400 }
 401
 402 static int pull_job_open_disk(PullJob *j) {
 403         int r;
 404
 405         assert(j);
 406
 407         if (j->on_open_disk) {
 408                 r = j->on_open_disk(j);
 409                 if (r < 0)
 410                         return r;
 411         }
 412
 413         if (j->disk_fd >= 0) {
 414                 if (fstat(j->disk_fd, &j->disk_stat) < 0)
 415                         return log_error_errno(errno, "Failed to stat disk file: %m");
 416
 417                 if (j->offset != UINT64_MAX) {
 418                         if (lseek(j->disk_fd, j->offset, SEEK_SET) < 0)
 419                                 return log_error_errno(errno, "Failed to seek on file descriptor: %m");
 420                 }
 421         }
 422
 423         if (j->calc_checksum) {
 424 #if PREFER_OPENSSL
 425                 j->checksum_ctx = EVP_MD_CTX_new();
 426                 if (!j->checksum_ctx)
 427                         return log_oom();
 428
 429                 r = EVP_DigestInit_ex(j->checksum_ctx, EVP_sha256(), NULL);
 430                 if (r == 0)
 431                         return log_error_errno(SYNTHETIC_ERRNO(EIO),
 432                                                "Failed to initialize hash context.");
 433 #else
 434                 r = initialize_libgcrypt(false);
 435                 if (r < 0)
 436                         return log_error_errno(r, "Failed to load libgcrypt: %m");
 437
 438                 if (gcry_md_open(&j->checksum_ctx, GCRY_MD_SHA256, 0) != 0)
 439                         return log_error_errno(SYNTHETIC_ERRNO(EIO),
 440                                                "Failed to initialize hash context.");
 441 #endif
 442         }
 443
 444         return 0;
 445 }
 446
 447 static int pull_job_detect_compression(PullJob *j) {
 448         _cleanup_free_ uint8_t *stub = NULL;
 449         size_t stub_size;
 450
 451         int r;
 452
 453         assert(j);
 454
 455         r = import_uncompress_detect(&j->compress, j->payload, j->payload_size);
 456         if (r < 0)
 457                 return log_error_errno(r, "Failed to initialize compressor: %m");
 458         if (r == 0)
 459                 return 0;
 460
 461         log_debug("Stream is compressed: %s", import_compress_type_to_string(j->compress.type));
 462
 463         r = pull_job_open_disk(j);
 464         if (r < 0)
 465                 return r;
 466
 467         /* Now, take the payload we read so far, and decompress it */
 468         stub = j->payload;
 469         stub_size = j->payload_size;
 470
 471         j->payload = NULL;
 472         j->payload_size = 0;
 473
 474         j->state = PULL_JOB_RUNNING;
 475
 476         r = pull_job_write_compressed(j, stub, stub_size);
 477         if (r < 0)
 478                 return r;
 479
 480         return 0;
 481 }
 482
 483 static size_t pull_job_write_callback(void *contents, size_t size, size_t nmemb, void *userdata) {
 484         PullJob *j = ASSERT_PTR(userdata);
 485         size_t sz = size * nmemb;
 486         int r;
 487
 488         assert(contents);
 489
 490         switch (j->state) {
 491
 492         case PULL_JOB_ANALYZING:
 493                 /* Let's first check what it actually is */
 494
 495                 if (!GREEDY_REALLOC(j->payload, j->payload_size + sz)) {
 496                         r = log_oom();
 497                         goto fail;
 498                 }
 499
 500                 memcpy(j->payload + j->payload_size, contents, sz);
 501                 j->payload_size += sz;
 502
 503                 r = pull_job_detect_compression(j);
 504                 if (r < 0)
 505                         goto fail;
 506
 507                 break;
 508
 509         case PULL_JOB_RUNNING:
 510
 511                 r = pull_job_write_compressed(j, contents, sz);
 512                 if (r < 0)
 513                         goto fail;
 514
 515                 break;
 516
 517         case PULL_JOB_DONE:
 518         case PULL_JOB_FAILED:
 519                 r = -ESTALE;
 520                 goto fail;
 521
 522         default:
 523                 assert_not_reached();
 524         }
 525
 526         return sz;
 527
 528 fail:
 529         pull_job_finish(j, r);
 530         return 0;
 531 }
 532
 533 static int http_status_ok(CURLcode status) {
 534         /* Consider all HTTP status code in the 2xx range as OK */
 535         return status >= 200 && status <= 299;
 536 }
 537
 538 static int http_status_etag_exists(CURLcode status) {
 539         /* This one is special, it's triggered by our etag mgmt logic */
 540         return status == 304;
 541 }
 542
 543 static size_t pull_job_header_callback(void *contents, size_t size, size_t nmemb, void *userdata) {
 544         _cleanup_free_ char *length = NULL, *last_modified = NULL, *etag = NULL;
 545         size_t sz = size * nmemb;
 546         PullJob *j = ASSERT_PTR(userdata);
 547         CURLcode code;
 548         long status;
 549         int r;
 550
 551         assert(contents);
 552
 553         if (IN_SET(j->state, PULL_JOB_DONE, PULL_JOB_FAILED)) {
 554                 r = -ESTALE;
 555                 goto fail;
 556         }
 557
 558         assert(j->state == PULL_JOB_ANALYZING);
 559
 560         code = curl_easy_getinfo(j->curl, CURLINFO_RESPONSE_CODE, &status);
 561         if (code != CURLE_OK) {
 562                 r = log_error_errno(SYNTHETIC_ERRNO(EIO), "Failed to retrieve response code: %s", curl_easy_strerror(code));
 563                 goto fail;
 564         }
 565
 566         if (http_status_ok(status) || http_status_etag_exists(status)) {
 567                 /* Check Etag on OK and etag exists responses. */
 568
 569                 r = curl_header_strdup(contents, sz, "ETag:", &etag);
 570                 if (r < 0) {
 571                         log_oom();
 572                         goto fail;
 573                 }
 574                 if (r > 0) {
 575                         free_and_replace(j->etag, etag);
 576
 577                         if (strv_contains(j->old_etags, j->etag)) {
 578                                 log_info("Image already downloaded. Skipping download. (%s)", j->etag);
 579                                 j->etag_exists = true;
 580                                 pull_job_finish(j, 0);
 581                                 return sz;
 582                         }
 583
 584                         return sz;
 585                 }
 586         }
 587
 588         if (!http_status_ok(status)) /* Let's ignore the rest here, these requests are probably redirects and
 589                                       * stuff where the headers aren't interesting to us */
 590                 return sz;
 591
 592         r = curl_header_strdup(contents, sz, "Content-Length:", &length);
 593         if (r < 0) {
 594                 log_oom();
 595                 goto fail;
 596         }
 597         if (r > 0) {
 598                 (void) safe_atou64(length, &j->content_length);
 599
 600                 if (j->content_length != UINT64_MAX) {
 601                         if (j->content_length > j->compressed_max) {
 602                                 r = log_error_errno(SYNTHETIC_ERRNO(EFBIG), "Content too large.");
 603                                 goto fail;
 604                         }
 605
 606                         log_info("Downloading %s for %s.", FORMAT_BYTES(j->content_length), j->url);
 607                 }
 608
 609                 return sz;
 610         }
 611
 612         r = curl_header_strdup(contents, sz, "Last-Modified:", &last_modified);
 613         if (r < 0) {
 614                 log_oom();
 615                 goto fail;
 616         }
 617         if (r > 0) {
 618                 (void) curl_parse_http_time(last_modified, &j->mtime);
 619                 return sz;
 620         }
 621
 622         if (j->on_header) {
 623                 r = j->on_header(j, contents, sz);
 624                 if (r < 0)
 625                         goto fail;
 626         }
 627
 628         return sz;
 629
 630 fail:
 631         pull_job_finish(j, r);
 632         return 0;
 633 }
 634
 635 static int pull_job_progress_callback(void *userdata, curl_off_t dltotal, curl_off_t dlnow, curl_off_t ultotal, curl_off_t ulnow) {
 636         PullJob *j = ASSERT_PTR(userdata);
 637         unsigned percent;
 638         usec_t n;
 639
 640         if (dltotal <= 0)
 641                 return 0;
 642
 643         percent = ((100 * dlnow) / dltotal);
 644         n = now(CLOCK_MONOTONIC);
 645
 646         if (n > j->last_status_usec + USEC_PER_SEC &&
 647             percent != j->progress_percent &&
 648             dlnow < dltotal) {
 649
 650                 if (n - j->start_usec > USEC_PER_SEC && dlnow > 0) {
 651                         usec_t left, done;
 652
 653                         done = n - j->start_usec;
 654                         left = (usec_t) (((double) done * (double) dltotal) / dlnow) - done;
 655
 656                         log_info("Got %u%% of %s. %s left at %s/s.",
 657                                  percent,
 658                                  j->url,
 659                                  FORMAT_TIMESPAN(left, USEC_PER_SEC),
 660                                  FORMAT_BYTES((uint64_t) ((double) dlnow / ((double) done / (double) USEC_PER_SEC))));
 661                 } else
 662                         log_info("Got %u%% of %s.", percent, j->url);
 663
 664                 j->progress_percent = percent;
 665                 j->last_status_usec = n;
 666
 667                 if (j->on_progress)
 668                         j->on_progress(j);
 669         }
 670
 671         return 0;
 672 }
 673
 674 int pull_job_new(
 675                 PullJob **ret,
 676                 const char *url,
 677                 CurlGlue *glue,
 678                 void *userdata) {
 679
 680         _cleanup_(pull_job_unrefp) PullJob *j = NULL;
 681         _cleanup_free_ char *u = NULL;
 682
 683         assert(url);
 684         assert(glue);
 685         assert(ret);
 686
 687         u = strdup(url);
 688         if (!u)
 689                 return -ENOMEM;
 690
 691         j = new(PullJob, 1);
 692         if (!j)
 693                 return -ENOMEM;
 694
 695         *j = (PullJob) {
 696                 .state = PULL_JOB_INIT,
 697                 .disk_fd = -EBADF,
 698                 .close_disk_fd = true,
 699                 .userdata = userdata,
 700                 .glue = glue,
 701                 .content_length = UINT64_MAX,
 702                 .start_usec = now(CLOCK_MONOTONIC),
 703                 .compressed_max = 64LLU * 1024LLU * 1024LLU * 1024LLU, /* 64GB safety limit */
 704                 .uncompressed_max = 64LLU * 1024LLU * 1024LLU * 1024LLU, /* 64GB safety limit */
 705                 .url = TAKE_PTR(u),
 706                 .offset = UINT64_MAX,
 707                 .sync = true,
 708         };
 709
 710         *ret = TAKE_PTR(j);
 711
 712         return 0;
 713 }
 714
 715 int pull_job_begin(PullJob *j) {
 716         int r;
 717
 718         assert(j);
 719
 720         if (j->state != PULL_JOB_INIT)
 721                 return -EBUSY;
 722
 723         r = curl_glue_make(&j->curl, j->url, j);
 724         if (r < 0)
 725                 return r;
 726
 727         if (!strv_isempty(j->old_etags)) {
 728                 _cleanup_free_ char *cc = NULL, *hdr = NULL;
 729
 730                 cc = strv_join(j->old_etags, ", ");
 731                 if (!cc)
 732                         return -ENOMEM;
 733
 734                 hdr = strjoin("If-None-Match: ", cc);
 735                 if (!hdr)
 736                         return -ENOMEM;
 737
 738                 if (!j->request_header) {
 739                         j->request_header = curl_slist_new(hdr, NULL);
 740                         if (!j->request_header)
 741                                 return -ENOMEM;
 742                 } else {
 743                         struct curl_slist *l;
 744
 745                         l = curl_slist_append(j->request_header, hdr);
 746                         if (!l)
 747                                 return -ENOMEM;
 748
 749                         j->request_header = l;
 750                 }
 751         }
 752
 753         if (j->request_header) {
 754                 if (curl_easy_setopt(j->curl, CURLOPT_HTTPHEADER, j->request_header) != CURLE_OK)
 755                         return -EIO;
 756         }
 757
 758         if (curl_easy_setopt(j->curl, CURLOPT_WRITEFUNCTION, pull_job_write_callback) != CURLE_OK)
 759                 return -EIO;
 760
 761         if (curl_easy_setopt(j->curl, CURLOPT_WRITEDATA, j) != CURLE_OK)
 762                 return -EIO;
 763
 764         if (curl_easy_setopt(j->curl, CURLOPT_HEADERFUNCTION, pull_job_header_callback) != CURLE_OK)
 765                 return -EIO;
 766
 767         if (curl_easy_setopt(j->curl, CURLOPT_HEADERDATA, j) != CURLE_OK)
 768                 return -EIO;
 769
 770         if (curl_easy_setopt(j->curl, CURLOPT_XFERINFOFUNCTION, pull_job_progress_callback) != CURLE_OK)
 771                 return -EIO;
 772
 773         if (curl_easy_setopt(j->curl, CURLOPT_XFERINFODATA, j) != CURLE_OK)
 774                 return -EIO;
 775
 776         if (curl_easy_setopt(j->curl, CURLOPT_NOPROGRESS, 0) != CURLE_OK)
 777                 return -EIO;
 778
 779         r = curl_glue_add(j->glue, j->curl);
 780         if (r < 0)
 781                 return r;
 782
 783         j->state = PULL_JOB_ANALYZING;
 784
 785         return 0;
 786 }